华为设备配置敏捷分布式WLAN组网（华为wlan解决方案特点）

华为设备配置敏捷分布式WLAN组网（华为wlan解决方案特点）

1. 配置AC和交换机，使AD、SAP与AC之间能够传输CAPWAP报文

（1）配置LSW1

[LSW1]vlan batch 10

[LSW1-GigabitEthernet0/0/2]port link-type trunk

[LSW1-GigabitEthernet0/0/2]port trunk pvid vlan 10

[LSW1-GigabitEthernet0/0/2]port trunk allow-pass vlan 10

[LSW1-GigabitEthernet0/0/2]port-isolate enable

[LSW1-GigabitEthernet0/0/1]port link-type trunk

[LSW1-GigabitEthernet0/0/1]port trunk allow-pass vlan 10

（2）配置AC：隧道转发模式下，管理VLAN和业务VLAN不能配置为同一VLAN，且AD和AC之间只能放通管理VLAN，不能放通业务VLAN

[AC1]vlan batch 10 20

[AC1-GigabitEthernet0/0/1]port link-type trunk

[AC1-GigabitEthernet0/0/1]port trunk allow-pass vlan 10

[AC1-GigabitEthernet0/0/2]port link-type trunk

[AC1-GigabitEthernet0/0/2]port trunk allow-pass vlan 20

2. 配置AC作为DHCP服务器，为STA、AD和SAP分配IP地址

[AC1]dhcp enable

[AC1]int Vlanif 10

[AC1-Vlanif10]ip add 10.1.1.1 24

[AC1-Vlanif10]dhcp select interface

[AC1-Vlanif10]int Vlanif 20

[AC1-Vlanif20]ip add 10.1.2.1 24

[AC1-Vlanif20]dhcp select interface

3. 配置AD和SAP上线

[AC1]wlan

[AC1-wlan-view]ap-group name ap-group1  //创建AP组

[AC1-wlan-view]regulatory-domain-profile  name domain1  // 创建域管理模板

[AC1-wlan-regulate-domain-domain1]country-code cn  //配置AC的国家码

[AC1-wlan-view]ap-group name ap-group1

[AC1-wlan-ap-group-ap-group1]regulatory-domain-profile domain1  //在AP组下引用域管理模板

[AC1]capwap source interface Vlanif 10  //配置AC的源接口

[AC1-wlan-view]ap auth-mode mac-auth  //在AC上离线导入中心AD和SAP

[AC1-wlan-view]ap-id 0 ap-mac 00e0-fcc7-1a20

[AC1-wlan-ap-0]ap-name AD1

[AC1-wlan-ap-0]ap-group ap-group1

[AC1-wlan-view]ap-id 1 ap-mac 00e0-fce6-7f00

[AC1-wlan-ap-1]ap-name SAP1

[AC1-wlan-ap-1]ap-group ap-group1

[AC1-wlan-view]ap-id 2 ap-mac 00e0-fcc2-45c0

[AC1-wlan-ap-2]ap-name SAP2

[AC1-wlan-ap-2]ap-group ap-group1

4. 配置WLAN业务参数

[AC1-wlan-view]security-profile name wlan-security  //创建安全模板

[AC1-wlan-sec-prof-wlan-security]security wpa2 psk pass-phrase abc@1234 aes  //配置安全策略

[AC1-wlan-view]ssid-profile name wlan-ssid   //创建SSID模板

[AC1-wlan-ssid-prof-wlan-ssid]ssid wlan-net  //配置SSID名称

[AC1-wlan-view]vap-profile name wlan-vap  //创建VAP模板

[AC1-wlan-vap-prof-wlan-vap]forward-mode tunnel  //配置业务数据转发模式

[AC1-wlan-vap-prof-wlan-vap]service-vlan vlan-id 20  //配置业务VLAN

[AC1-wlan-vap-prof-wlan-vap]security-profile wlan-security  //引用安全模板

[AC1-wlan-vap-prof-wlan-vap]ssid-profile wlan-ssid  //引用SSID模板

[AC1-wlan-view]ap-group name ap-group1  //配置AP组引用VAP模板，AP上射频0和射频1都使用VAP模板wlan-vap的配置

[AC1-wlan-ap-group-ap-group1]vap-profile wlan-vap wlan 1 radio 0  //

[AC1-wlan-ap-group-ap-group1]vap-profile wlan-vap wlan 1 radio 1  //

5. 配置SAP射频的信道和功率

[AC1-wlan-view]rrm-profile name default  //关闭射频的信道和功率自动调优功能

[AC1-wlan-rrm-prof-default]calibrate auto-channel-select disable

[AC1-wlan-rrm-prof-default]calibrate auto-txpower-select disable

[AC1-wlan-view]ap-id 1

[AC1-wlan-ap-1]radio 0  //配置SAP射频0的信道和功率

[AC1-wlan-radio-1/0]channel 20mhz 6

[AC1-wlan-radio-1/0]eirp 127

[AC1-wlan-ap-1]radio 1  ////配置SAP射频1的信道和功率

[AC1-wlan-radio-1/1]channel 20mhz 149

[AC1-wlan-radio-1/1]eirp 127

6. 验证配置

版权声明：本文内容由网络用户投稿，版权归原作者所有，本站不拥有其著作权，亦不承担相应法律责任。如果您发现本站中有涉嫌抄袭或描述失实的内容，请联系我们jiasou666@gmail.com 处理，核实后本网站将在24小时内删除侵权内容。