拓扑图如下:

AP1和AP2注册到同一AC上,AP1下业务vlan20,AP2下业务vlan30,属于不同网段。
效果:终端从AP1漫游到AP2,IP地址不变,业务不中断。
配置如下表:
| AC | SW |
| # vlan batch 10 20 30 # interface Vlanif10 ip address 10.1.10.2 255.255.255.0 # interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 10 # ip route-static 0.0.0.0 0.0.0.0 10.1.10.1 # capwap source interface vlanif10 # wlan ssid-profile name home ssid home vap-profile name ap1 service-vlan vlan-id 20 ssid-profile home security-profile home vap-profile name ap2 service-vlan vlan-id 30 ssid-profile home security-profile home ap auth-mode no-auth ap-group name ap1 regulatory-domain-profile china radio 0 vap-profile ap1 wlan 1 radio 1 vap-profile ap1 wlan 1 radio 2 vap-profile ap1 wlan 1 ap-group name ap2 regulatory-domain-profile china radio 0 vap-profile ap2 wlan 1 radio 1 vap-profile ap2 wlan 1 radio 2 vap-profile ap2 wlan 1 ap-id 0 type-id 56 ap-mac 00e0-fc03-23b0 ap-sn 210235448310BE61073C ap-name AP1 ap-group ap1 ap-id 1 type-id 56 ap-mac 00e0-fc56-1c50 ap-sn 210235448310AE275B2D ap-name AP2 ap-group ap2 # | # vlan batch 10 20 30 # dhcp enable # interface Vlanif10 ip address 10.1.10.1 255.255.255.0 dhcp select interface # interface Vlanif20 ip address 10.1.20.1 255.255.255.0 dhcp select interface # interface Vlanif30 ip address 10.1.30.1 255.255.255.0 dhcp select interface # interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 10 # interface GigabitEthernet0/0/2 port link-type trunk port trunk pvid vlan 10 port trunk allow-pass vlan 10 20 # interface GigabitEthernet0/0/3 port link-type trunk port trunk pvid vlan 10 port trunk allow-pass vlan 10 30 # |
配置使用两个AP组:ap1和ap2,分别对应相应vap-profile
默认家乡代理为AP,终端从AP1漫游到AP2后,终端ping AC地址转发路径如下:
数据包先由AP2经capwap隧道转发给AC,AC再经capwap隧道转发给AP1,AP1再转成普通报文转发给AC。

数据包分析:
第1次:ICMP报文封装到capwap隧道中,由AP2转发给AC

第2次:由AC经capwap隧道转发给AP1

第3次:解封装后的原始报文,由AP1交给AC

可以将家乡代理设置为AC,避免流量迂回:在vap-profile中设置home-agent ac
在AC上跟踪终端的漫游记录如下:

2453

被折叠的 条评论
为什么被折叠?



