华为AC+AP配置笔记

说明：华为AC+AP配置笔记

AC管理地址：192.168.200.1

AP地址段：192.168.200.2-254（DHCP分配）

AP网关地址：192.168.200.1

WIFI业务地址：192.168.100.X/24

WIFI名称和密码：wifi/a12345678

拓扑：

配置代码

[SW2]vlan batch 100 200                         ##batch一次性添加vlan100 和200

[SW2]int g0/0/1
[SW2-GigabitEthernet0/0/1]port link-type trunk 
[SW2-GigabitEthernet0/0/1]port trunk allow-pass vlan all 
[SW2-GigabitEthernet0/0/1]quit

[SW2]int g0/0/2
[SW2-GigabitEthernet0/0/2]port link-type trunk 
[SW2-GigabitEthernet0/0/2]port trunk allow-pass vlan 100 200
[SW2-GigabitEthernet0/0/2]port trunk pvid vlan 200  #//这里为啥要设置PVID呢？因为AP不能识别tag标签，就像路由器和PC一样，需要端口剥离标签来识别
[SW2-GigabitEthernet0/0/2]quit

[SW2]int g0/0/3
[SW2-GigabitEthernet0/0/3]port link-type trunk 
[SW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 100 200	
[SW2-GigabitEthernet0/0/3]port trunk pvid vlan 200

[SW1]vlan batch 100 200

[SW1]int g0/0/2
[SW1-GigabitEthernet0/0/2]port link-type trunk 
[SW1-GigabitEthernet0/0/2]port trunk allow-pass vlan all

[SW1-GigabitEthernet0/0/2]int g0/0/1
[SW1-GigabitEthernet0/0/1]port link-type trunk 
[SW1-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 200
[SW1-GigabitEthernet0/0/1]quit

[SW1]int vlan 100
[SW1-Vlanif100]ip add 192.168.100.1 255.255.255.0
[SW1-Vlanif100]dhcp select interface    
[SW1-Vlanif100]dhcp server dns-list 223.5.5.5 114.114.114.114
[SW1-Vlanif100]quit
[SW1]dhcp enabl	               

[AC6005]vlan batch 100 200
[AC6005]int g0/0/1
[AC6005-GigabitEthernet0/0/1]port link-type trunk 
[AC6005-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 200
[AC6005-GigabitEthernet0/0/1]quit
[AC6005]dhcp enable	
[AC6005]int vlan 200
[AC6005-Vlanif200]ip add 192.168.200.1 255.255.255.0
[AC6005-Vlanif200]dhcp select interface 
[AC6005-Vlanif200]dhcp server dns-list 223.5.5.5 114.114.114.114
[AC6005-Vlanif200]quit

#一：新建AP组，域管理模板，组里调用域管理模板
#创建AP组ap-group1，方便后面其他AP加入此组，统一配置
[AC6005]wlan
[AC6005-wlan-view]ap-group name ap-group1     #创建AP组ap-group1，方便后面其他AP加入此组，统一配置
[AC6005-wlan-ap-group-ap-group1]quit
[AC6005-wlan-view]regulatory-domain-profile name default	 #创建域管理模板default，国家代码CN
[AC6005-wlan-regulate-domain-default]country-code CN 
[AC6005-wlan-regulate-domain-default]quit

[AC6005-wlan-view]ap-group name ap-group1                       #模板和域管理模板绑定
[AC6005-wlan-ap-group-ap-group1]regulatory-domain-profile default
Warning: Modifying the country code will clear channel, power and antenna gain c
onfigurations of the radio and reset the AP. Continue?[Y/N]:y
[AC6005-wlan-ap-group-ap-group1]quit
[AC6005-wlan-view]quit

[AC6005]capwap source interface Vlanif 200       #选择AC源接口地址

#二、AP上线，将此AP加入新建的AP组ap-group1
[AC6005]wlan
[AC6005-wlan-view]ap auth-mode mac-auth               #AP上线的方式是mac认证
[AC6005-wlan-view]ap-id 0 ap-mac 00E0-FCD8-2B50	      #绑定AP MAC
[AC6005-wlan-ap-0]ap-name area_1	                  #这个AP的区域命名为are_1
[AC6005-wlan-ap-0]ap-group ap-group1                  #将此AP加入组ap-group1
Warning: This operation may cause AP reset. If the country code changes, it will
 clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.. done.
[AC6005-wlan-ap-0]quit

#三、配置WLAN业务参数
[AC6005-wlan-view]security-profile name wifi       #创建安全模板（包含认证方式和密码）
[AC6005-wlan-sec-prof-wifi]security wpa-wpa2 psk pass-phrase a12345678 aes
[AC6005-wlan-sec-prof-wifi]quit	
[AC6005-wlan-view]ssid-profile name wifi        #创建SSID模板，并配置SSID的名称为“wifi ”
[AC6005-wlan-ssid-prof-wifi]ssid wifi
[AC6005-wlan-ssid-prof-wifi]quit
[AC6005-wlan-view]vap-profile name wifi        #创建VAP模板，配置业务数据转发模式，业务vlan，并且引用安全模板和SSID模板
[AC6005-wlan-vap-prof-wifi]forward-mode direct-forward   #转发模式
[AC6005-wlan-vap-prof-wifi]service-vlan vlan-id 100      #这里的业务VLAN会觉得手机或者SAT工作站的IP地址取决于哪个VLAN
[AC6005-wlan-vap-prof-wifi]security-profile wifi     ##调用安全模版
[AC6005-wlan-vap-prof-wifi]ssid-profile wifi         ##调用SSID模版
[AC6005-wlan-vap-prof-wifi]quit
[AC6005-wlan-view]ap-group name ap-group1
[AC6005-wlan-ap-group-ap-group1]vap-profile wifi wlan 1 radio 0     ##0为2.4射频
[AC6005-wlan-ap-group-ap-group1]vap-profile wifi wlan 1 radio 1     ##1为5G射频
[AC6005-wlan-ap-group-ap-group1]quit


#添加第2个AP
[AC6005]wlan
[AC6005-wlan-view]ap-id 1 ap-mac 00E0-FCC7-5880     #绑定第二个AP  MAC地址
[AC6005-wlan-ap-1]ap-name area_2                    #设置区域命名为area_2
[AC6005-wlan-ap-1]ap-group ap-group1                #将此AP加入组ap-group1
Warning: This operation may cause AP reset. If the country code changes, it will
 clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.. done.
[AC6005-wlan-ap-1]quit

调优说明

#AC调优：关闭AP射频0和1的信道功率自动调优功能，并配置AP射频的信道和功率
[AC6005-wlan-view] ap-id 0
[AC6005-wlan-ap-0] radio 0
[AC6005-wlan-radio-0/0] calibrate auto-channel-select disable
[AC6005-wlan-radio-0/0] calibrate auto-txpower-select disable
[AC6005-wlan-radio-0/0] channel 20mhz 6
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC6005-wlan-radio-0/0] eirp 127
[AC6005-wlan-radio-0/0] quit
 
[AC6005-wlan-ap-0] radio 1
[AC6005-wlan-radio-0/1] calibrate auto-channel-select disable
[AC6005-wlan-radio-0/1] calibrate auto-txpower-select disable
[AC6005-wlan-radio-0/1] channel 20mhz 149
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC6005-wlan-radio-0/1] eirp 127
[AC6005-wlan-radio-0/1] quit
[AC6005-wlan-ap-0] quit