AP+AC配置，实现无线通信

本实验将实现AC的配置，AP上线，达到STA可以获得信号和IP地址，并实现通信。

AC：

AC作为无线控制器，负责AP的集中管理及WLAN用户的无线接入和安全控制。配置AC基本功能完成后，AP才可以与AC互通，从而进行后续的WLAN业务部署。

实验拓扑：

实验用到：两台交换机，一台PC，一台STA，以及AC（AC6005)+AP（AP6050）

实验配置：

1、先配置交换机接口和接口划分vlan

SW2：

[SW2]vlan batch 10 20 100


[SW2]int e0/0/1
[SW2-Ethernet0/0/1]port link-type access 


[SW2]int g0/0/2
[SW2-GigabitEthernet0/0/2]port link-type  trunk 
[SW2-GigabitEthernet0/0/2]port trunk allow-pass vlan 100 10 20
[SW2-GigabitEthernet0/0/2]port trunk pvid vlan 100


[SW2]int g0/0/1
[SW2-GigabitEthernet0/0/1]port link-type  trunk 
[SW2-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 10 20

SW1作为DHCP Sever :配置ip pool

dhcp enable

[Huawei]ip pool vlan10
[Huawei-ip-pool-vlan10]network 192.168.10.0 mask 255.255.255.0
[Huawei-ip-pool-vlan10]gateway-list 192.168.10.254
[Huawei-ip-pool-vlan10]dns-list 8.8.8.8 

[Huawei]ip pool vlan20       
[Huawei-ip-pool-vlan20]network 192.168.20.0 mask 255.255.255.0
[Huawei-ip-pool-vlan20]gateway-list  192.168.20.254 
[Huawei-ip-pool-vlan20]dns-list 8.8.8.8

[Huawei]ip pool vlan100
[Huawei-ip-pool-vlan100]network 192.168.100.0 mask 255.255.255.0
[Huawei-ip-pool-vlan100]gateway-list 192.168.100.254 
[Huawei-ip-pool-vlan100]dns-list 8.8.8.8

interface GigabitEthernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 100

interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 10 20 100

SW1上配置VLANIF地址作为网关地址：

并开启dhcp select global

[Huawei-Vlanif10]ip address 192.168.10.254 24
[Huawei-Vlanif10]dhcp select global


[Huawei-Vlanif20]ip address 192.168.20.254 24
[Huawei-Vlanif20]dhcp select global

[Huawei-Vlanif100]ip address 192.168.100.254 24
[Huawei-Vlanif100]dhcp select global

检查PC和AP是否获得地址：

PC机开启DHCP

AP获得192.168.100.0 的地址：

配置AC

[AC6005]vlan 100
[AC6005-Vlanif100]ip address 192.168.100.1 24


[AC6005]int g0/0/1
[AC6005-GigabitEthernet0/0/1]port link-type trunk 
[AC6005-GigabitEthernet0/0/1]port trunk  allow-pass vlan 100


[AC6005]wlan 
[AC6005-wlan-view]regulatory-domain-profile name default
[AC6005-wlan-regulate-domain-default]country-code cn
Info: The current country code is same with the input country code.
[AC6005-wlan-regulate-domain-default]q


[AC6005-wlan-view]ap-g
[AC6005-wlan-view]ap-group name ap-group1
Info: This operation may take a few seconds. Please wait for a moment.done.
[AC6005-wlan-ap-group-ap-group1]regulatory-domain-profile name default
[AC6005-wlan-regulate-domain-default]q


[AC6005]capwap source interface vlanif 100


[AC6005]wlan    
[AC6005-wlan-view]ap-id 0 ap-mac 00e0-fc2d-0b40


[AC6005-wlan-ap-0]ap-name IT 


[AC6005-wlan-ap-0]ap-group ap-group1
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configurations of the radio, Whether to continue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.. done.
[AC6005-wlan-ap-0]q

[AC6005-wlan-view]sec
[AC6005-wlan-view]security-profile name wlan
[AC6005-wlan-sec-prof-wlan]security wpa-wpa2 psk pass-phrase 88888888 aes
Warning: The current password is too simple. For the sake of security, you are advised to set a password containing at least two of the following: lowercase letters a to z, uppercase letters A to Z, digits, and special characters. Continue? [Y/N]:
[AC6005-wlan-sec-prof-wlan]q




[AC6005-wlan-view]ssid-profile name IT
[AC6005-wlan-ssid-prof-IT]ssid IT
Info: This operation may take a few seconds, please wait.done.
[AC6005-wlan-ssid-prof-IT]q
[AC6005-wlan-view]


[AC6005-wlan-view]vap
[AC6005-wlan-view]vap-profile name IT
[AC6005-wlan-vap-prof-IT]forward-mode direct-forward              
[AC6005-wlan-vap-prof-IT]service-vlan vlan   
[AC6005-wlan-vap-prof-IT]service-vlan vlan-id 20
Info: This operation may take a few seconds, please wait.done.
[AC6005-wlan-vap-prof-IT]security-profile wlan
Info: This operation may take a few seconds, please wait.done.
[AC6005-wlan-vap-prof-IT]ssid-profile IT
Info: This operation may take a few seconds, please wait.done.
[AC6005-wlan-vap-prof-IT]q
[AC6005-wlan-view]

   
[AC6005-wlan-view]ap-group name ap-group1
[AC6005-wlan-ap-group-ap-group1]vap-
[AC6005-wlan-ap-group-ap-group1]vap-profile IT wlan 1r
[AC6005-wlan-ap-group-ap-group1]vap-profile IT wlan 1 r
[AC6005-wlan-ap-group-ap-group1]vap-profile IT wlan 1 radio 0
Info: This operation may take a few seconds, please wait...done.
[AC6005-wlan-ap-group-ap-group1]vap-profile IT wlan 1 radio 1

接着开启STA

点击连接：输入密码：88888888

 

查看STA的IP获取情况：

并可以ping通PC地址：实现通信

 至此，实验完成！

AC配置笔记：

1、创建域管理模板和国家码

wlan下：

Regulatory-domain-profile name default

Country-code cn

2、创建AP组

ap-group name ap-apgroup1

Regulatory-domain-profile name default

Capwap source interface vlanif 100

3、导入AP

wlan：

ap-id 0 ap-mac 地址

ap-name room1

Ap-group ap-group1

ap-id 1 ap-mac 地址

ap-name room2

Ap-group ap-group1

4、配置安全模板

wlan：

security-profile name wlan-sec

Security wpa-wpa2 psk pass-phrase 88888888 aes

5、配置SSID模板

wlan：

ssid-profile name  HR

ssid HR

Ssid-profile name IT

Ssid IT

6、创建VAP模板

wlan：

vap-profile name HR

forward-mode direct-forward

service-vlan vlan-id 30

security-prodile wlan-sec

ssid-profile HR

vap-profile name IT

forward-mode direct-forward

service-vlan vlan-id 40

security-prodile wlan-sec

ssid-profile IT

7.配置AP组引用vap模板射频0和1都使用VAP模板

wlan：

ap-group name ap-group1

Vap-profile HR wlan 1 radio 0

Vap-profile HR wlan 1 radio 1

Vap-profile I T  wlan 2 radio 0

Vap-profile I T  wlan 2 radio 1