華為wlan配置直連二層組網直接轉發

配置直連二層組網直接轉發

1. 拓撲圖：

2. 規劃：

3.配置思路

4. 配置步驟：

1.基礎配置：

• 配置接入交換機Switch的GE0/0/1和GE0/0/2介面加入VLAN100和VLAN101，GE0/0/1的預設VLAN為VLAN100，

<HUAWEI> system-view
[HUAWEI] sysname Switch
[Switch] vlan batch 100 101
[Switch] interface gigabitethernet 0/0/1
[Switch-GigabitEthernet0/0/1] port link-type trunk
[Switch-GigabitEthernet0/0/1] port trunk pvid vlan 100
[Switch-GigabitEthernet0/0/1] port trunk allow-pass vlan 100 101
[Switch-GigabitEthernet0/0/1] port-isolate enable
[Switch-GigabitEthernet0/0/1] quit
[Switch] interface gigabitethernet 0/0/2
[Switch-GigabitEthernet0/0/2] port link-type trunk
[Switch-GigabitEthernet0/0/2] port trunk allow-pass vlan 100 101
[Switch-GigabitEthernet0/0/2] quit

2.配置AC與Switch設備互通

• # 配置AC的介面GE0/0/1加入VLAN100和VLAN101，

<AC6605> system-view
[AC6605] sysname AC
[AC] vlan batch 100 101
[AC] interface gigabitethernet 0/0/1
[AC-GigabitEthernet0/0/1] port link-type trunk
[AC-GigabitEthernet0/0/1] port trunk allow-pass vlan 100 101
[AC-GigabitEthernet0/0/1] quit

3.配置DHCP服務器為STA和AP分配IP地址

• 在AC上配置VLANIF100介面為AP提供IP地址，配置VLANIF101介面為STA提供IP地址，

[AC] dhcp enable
[AC] interface vlanif 100
[AC-Vlanif100] ip address 10.0.100.1 24
[AC-Vlanif100] dhcp select interface
[AC-Vlanif100] quit
[AC] interface vlanif 101
[AC-Vlanif101] ip address 10.0.101.1 24
[AC-Vlanif101] dhcp select interface
[AC-Vlanif101] quit

4.配置AP上線

• 創建AP組，用于將相同配置的AP都加入同一AP組中，

[AC] wlan
[AC-wlan-view] ap-group name f100-ap
[AC-wlan-ap-group-f100-ap] quit

• 創建域管理模板，在域管理模板下配置AC的國家碼并在AP組下參考域管理模板，

[AC-wlan-view] regulatory-domain-profile name f100
[AC-wlan-regulate-domain-f100] country-code cn
[AC-wlan-regulate-domain-f100] quit
[AC-wlan-view] ap-group name f100-ap
[AC-wlan-ap-group-f100-ap] regulatory-domain-profile f100
Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continu
e?[Y/N]:y 
[AC-wlan-ap-group-f100-ap] quit
[AC-wlan-view] quit

• 配置AC的源介面，

[AC] capwap source interface vlanif 100

• 在AC上離線匯入AP，并將AP加入AP組“f100-ap”中，假設AP的MAC地址為60de-4476-e360，并將此AP命名為AP1，

[AC] wlan
[AC-wlan-view] ap auth-mode mac-auth
[AC-wlan-view] ap-id 0 ap-mac 60de-4476-e360
[AC-wlan-ap-0] ap-name AP1
Warning: This operation may cause AP reset. Continue? [Y/N]:y 
[AC-wlan-ap-0] ap-group f100-ap
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration
s of the radio, Whether to continue? [Y/N]:y 
[AC-wlan-ap-0] quit

• 將AP上線后，當執行命令display ap all查看到AP的“State”欄位為“nor”時，表示AP正常上線，

[AC-wlan-view] display ap all
Total AP information:
nor  : normal          [1]
Extra information:
P  : insufficient power supply
--------------------------------------------------------------------------------------------------
ID   MAC            Name   Group     IP            Type            State STA Uptime      ExtraInfo
--------------------------------------------------------------------------------------------------
0    60de-4476-e360 AP1 f100-ap 10.0.100.254 AP5030DN        nor   0   10S         -
--------------------------------------------------------------------------------------------------
Total: 1

5.配置WLAN業務引數

• 創建名為“f100-security”的安全模板，并配置安全策略，

[AC-wlan-view] security-profile name f100-security
[AC-wlan-sec-prof-f100-security] security wpa-wpa2 psk pass-phrase a1234567 aes
[AC-wlan-sec-prof-f100-security] quit

• 創建名為“f100-ssid”的SSID模板，并配置SSID名稱為“f100-ssid”，

[AC-wlan-view] ssid-profile name f100-ssid
[AC-wlan-ssid-prof-f100-ssid] ssid f100-ssid
[AC-wlan-ssid-prof-f100-ssid] quit

• 創建名為“f100-vap”的VAP模板，配置業務資料轉發模式、業務VLAN，并且參考安全模板和SSID模板，

[AC-wlan-view] vap-profile name f100-vap
[AC-wlan-vap-prof-f100-vap] forward-mode direct-forward
[AC-wlan-vap-prof-f100-vap] service-vlan vlan-id 101
[AC-wlan-vap-prof-f100-vap] security-profile f100-security
[AC-wlan-vap-prof-f100-vap] ssid-profile f100-ssid
[AC-wlan-vap-prof-f100-vap] quit

• 配置AP組參考VAP模板，AP上射頻0和射頻1都使用VAP模板“f100-vap”的配置，

[AC-wlan-view] ap-group name f100-ap
[AC-wlan-ap-group-f100-ap] vap-profile f100-vap wlan 1 radio 0
[AC-wlan-ap-group-f100-ap] vap-profile f100-vap wlan 1 radio 1
[AC-wlan-ap-group-f100-ap] quit