华为AC6005做Mesh组网（华为mesh路由器组网方法 5200）

华为AC6005做Mesh组网（华为mesh路由器组网方法 5200）

笔记

1、基础配置

system-view [AC6605]vlan 10[AC6605-vlan10]description AP-Management-vlan[AC6605-vlan10]vlan 100[AC6605-vlan100]description service-vlan[AC6605-vlan100]quit[AC6605]dhcp enable [AC6605]int vlan 10[AC6605-Vlanif10]ip add 192.168.10.1 24[AC6605-Vlanif10]dhcp select interface [AC6605-Vlanif10]dhcp server excluded-ip-address 192.168.10.1 192.168.10.10[AC6605-Vlanif10]int vlan 100[AC6605-Vlanif100]description service[AC6605-Vlanif100]ip add 192.168.100.1 22[AC6605-Vlanif100]dhcp select interface [AC6605-Vlanif100]dhcp server excluded-ip-address 192.168.100.1 192.168.100.10[AC6605-Vlanif100]dhcp server dns-list 202.106.0.20 114.114.114.114[AC6605-Vlanif100]quit[AC6605]capwap source interface Vlanif 10 #配置AC的源接口[AC6605]ip route-static 0.0.0.0 0 192.168.10.2 description route-to-Core-SW[AC6605]interface g0/0/1[AC6605-GigabitEthernet0/0/1]description link-to-A-building-1F-3Room-AP[AC6605-GigabitEthernet0/0/1]port link-type trunk [AC6605-GigabitEthernet0/0/1]port trunk pvid vlan 10 [AC6605-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 100[AC6605-GigabitEthernet0/0/1]quit

2、无线部分

[AC6605]wlan[AC6605-wlan-view]ap auth-mode mac-auth  #添加AP方式MAC认证

[AC6605-wlan-view]regulatory-domain-profile name domain # 创建域管理模板[AC6605-wlan-regulate-domain-domain]country-code CN #配置AC的国家码[AC6605-wlan-regulate-domain-domain]quit[AC6605-wlan-view]security-profile name security #创建安全模板[AC6605-wlan-sec-prof-security]security open #安全为开放[AC6605-wlan-sec-prof-security]quit[AC6605-wlan-view]ssid-profile name ssid  #创建SSID模板[AC6605-wlan-ssid-prof-ssid]ssid Free-WIFI #SSID名称为Free-WIFI[AC6605-wlan-ssid-prof-ssid]quit[AC6605-wlan-view]vap-profile name vap #创建VAP模板[AC6605-wlan-vap-prof-vap]ssid-profile ssid #引用SSID模板[AC6605-wlan-vap-prof-vap]security-profile security #引用安全模板[AC6605-wlan-vap-prof-vap]service-vlan vlan-id 100 #引用业务vlan[AC6605-wlan-vap-prof-vap]forward-mode tunnel #转发模式为隧道模式[AC6605-wlan-vap-prof-vap]quit

3、MESH部分配置

[AC6605-wlan-view]security-profile name security1 #配置Mesh链路使用的安全模板

[AC6605-wlan-sec-prof-security1]security wpa2 psk pass-phrase e123qwer aes[AC6605-wlan-sec-prof-security1]quit[AC6605-wlan-view] mesh-profile name mesh-profile           [AC6605-wlan-mesh-prof-mesh-profile]  security-profile security1[AC6605-wlan-mesh-prof-mesh-profile] mesh-id mesh-net[AC6605-wlan-mesh-prof-mesh-profile]link-aging-time 30[AC6605-wlan-mesh-prof-mesh-profile]quit[AC6605-wlan-view] ap-system-profile name ap-system[AC6605-wlan-ap-system-prof-ap-system]  mesh-role mesh-portal[AC6605-wlan-ap-system-prof-ap-system]quit[AC6605-wlan-view]mesh-whitelist-profile name mesh-whitelist[AC6605-wlan-mesh-whitelist-mesh-whitelist]peer-ap mac 00e0-fc20-4320[AC6605-wlan-mesh-whitelist-mesh-whitelist]peer-ap mac 00e0-fc04-4a50[AC6605-wlan-mesh-whitelist-mesh-whitelist]quit[AC6605-wlan-view]wired-port-profile name wired-port[AC6605-wlan-wired-port-wired-port]vlan tagged 10 100[AC6605-wlan-wired-port-wired-port]quit[AC6605-wlan-view]ap-group name mmp-group [AC6605-wlan-ap-group-mmp-group]regulatory-domain-profile domain Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continue?[Y/N]:y[AC6605-wlan-ap-group-service-group]vap-profile vap wlan 1 radio all[AC6605-wlan-ap-group-serivce-group]display ap all Info: This operation may take a few seconds. Please wait for a moment.done.Total AP information:nor  : normal          [1]----------------------------------------------------------------------------------------------------ID   MAC            Name           Group   IP            Type            State STA Uptime----------------------------------------------------------------------------------------------------0    00e0-fc04-4a50 00e0-fc04-4a50 default 192.168.10.67 AP2050DN        nor   0   51S----------------------------------------------------------------------------------------------------Total: 1[AC6605-wlan-ap-group-serivce-group]quit    [AC6605-wlan-view]ap-id 0 [AC6605-wlan-ap-0]ap-group mmp-groupWarning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configurations of the radio, Whether to continue? [Y/N]:y[AC6605-wlan-view]ap-id 1 ap-mac 00e0-fc20-4320[AC6605-wlan-ap-1]quit[AC6605-wlan-view]ap-group name mp-group[AC6605-wlan-ap-group-mp-group]regulatory-domain-profile domainWarning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continue?[Y/N]:y[AC6605-wlan-ap-group-mp-group]vap-profile vap wlan 2 radio all[AC6605-wlan-ap-group-mp-group]quit[AC6605-wlan-view]ap-id 1 [AC6605-wlan-ap-1]ap-group mp-groupWarning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configurations of the radio, Whether to continue? [Y/N]:y[AC6605-wlan-ap-1]quit[AC6605-wlan-view]ap-group name mp-group[AC6605-wlan-ap-group-mp-group]radio 1 [AC6605-wlan-group-radio-mp-group/1]channel 20 157 Warning: This action may cause service interruption. Continue?[Y/N]y[AC6605-wlan-group-radio-mp-group/1]mesh-whitelist-profile mesh-whitelist[AC6605-wlan-group-radio-mp-group/1]quit[AC6605-wlan-ap-group-mp-group]wired-port-profile wired-port gigabitethernet 0[AC6605-wlan-ap-group-mp-group]ap-system-profile ap-system[AC6605-wlan-ap-group-mp-group]quit[AC6605-wlan-view]ap-group name mmp-group[AC6605-wlan-ap-group-mmp-group]radio 1 [AC6605-wlan-group-radio-mmp-group/1]channel 20 157Warning: This action may cause service interruption. Continue?[Y/N]y[AC6605-wlan-group-radio-mmp-group/1]mesh-whitelist-profile mesh-whitelist[AC6605-wlan-group-radio-mmp-group/1]quit[AC6605-wlan-ap-group-mmp-group]quit        [AC6605-wlan-ap-group-mmp-group]wired-port-profile wired-port gigabitethernet 0

system-view vlan 10description AP-Management-vlanvlan 100description service-vlanquitdhcp enable int vlan 10ip add 192.168.10.1 24dhcp select interface dhcp server excluded-ip-address 192.168.10.1 192.168.10.10int vlan 100description serviceip add 192.168.100.1 22dhcp select interface dhcp server excluded-ip-address 192.168.100.1 192.168.100.10dhcp server dns-list 202.106.0.20 114.114.114.114quitcapwap source interface Vlanif 10ip route-static 0.0.0.0 0 192.168.10.2 description route-to-Core-SWinterface g0/0/1description link-to-A-building-1F-3Room-APport link-type trunk port trunk pvid vlan 10 port trunk allow-pass vlan 10 100quit

wlanap auth-mode no-auth

ap auth-mode mac-auth

regulatory-domain-profile name domain country-code CN quitsecurity-profile name security security open quitsecurity-profile name security1 security wpa2 psk pass-phrase e123qwer aesquitssid-profile name ssid  ssid Free-WIFI quitvap-profile name vapssid-profile ssid security-profile security service-vlan vlan-id 100 forward-mode tunnel quitmesh-profile name mesh-profile           security-profile security1mesh-id mesh-netquitap-system-profile name ap-systemmesh-role mesh-portalquitap-group name service-groupap-system-profile ap-systemymesh-whitelist-profile name mesh-whitelistpeer-ap mac 00e0-fc20-4320peer-ap mac 00e0-fc04-4a50quitwired-port-profile name wired-portvlan tagged 10 100quitap-group name service-group regulatory-domain-profile domain yvap-profile vap wlan 2 radio 1quit    ap-id 0 ap-group service-groupyap-group name mp-groupregulatory-domain-profile domainyvap-profile vap wlan 2 radio 1quitap-id 1 ap-group mp-groupyquitap-group name mp-groupradio 1 channel 20 157ymesh-whitelist-profile mesh-whitelistquitwired-port-profile wired-port gigabitethernet 0quitap-group name service-groupradio 1 channel 20 157y

mesh-whitelist-profile mesh-whitelistquit wired-port-profile wired-port gigabitethernet 0

版权声明：本文内容由网络用户投稿，版权归原作者所有，本站不拥有其著作权，亦不承担相应法律责任。如果您发现本站中有涉嫌抄袭或描述失实的内容，请联系我们jiasou666@gmail.com 处理，核实后本网站将在24小时内删除侵权内容。