华为WLAN基本配置

 

 

AP管理VLAN	VLAN10	地址：10.1.1.0/24
STA业务VLAN	VLAN100	地址：172.16.1.0/24
AP组	ap-group	引用模板：VAP模板vap-1、vap-2  域管理模板：reg-1
域管理模板	reg-1	国家码：中国
SSID模板	wifi-1	SSID名称：wifi-1
安全模板	wlan-1	安全策略：WPA-WPA2+PSK+AES  密码：a1234567
VAP模板	vap-1	直接转发  SSID模板wifi-1、安全模板wlan-1

 

 

一、配置设备互通和DHCP服务器

[poe-sw]vlan bat 10 100

[poe-sw]int e0/0/1

[poe-sw-Ethernet0/0/1]port link-type trunk

[poe-sw-Ethernet0/0/1]port tr al vl 10 100

[poe-sw-Ethernet0/0/1]q

[poe-sw]int e0/0/10

[poe-sw-Ethernet0/0/10]port link-type trunk

[poe-sw-Ethernet0/0/10]port tr al vl 10 100

[poe-sw-Ethernet0/0/10]port tr pvid vlan 10

[poe-sw-Ethernet0/0/10]q

[poe-sw]int vlan 10

[poe-sw-Vlanif10]ip add 10.1.1.2 24

[poe-sw-Vlanif10]q



[CORE]vlan bat 10 100

[CORE]int g0/0/1

[CORE-GigabitEthernet0/0/1]port link-type trunk

[CORE-GigabitEthernet0/0/1]port tr al vl 10 100

[CORE-GigabitEthernet0/0/1]q

[CORE]int g0/0/2

[CORE-GigabitEthernet0/0/2]port link-type trunk

[CORE-GigabitEthernet0/0/2]port tr al vl 10 100

[CORE-GigabitEthernet0/0/2]q

[CORE]dhcp enable

[CORE]ip pool vlan100

[CORE-ip-pool-vlan100]network 100.1.1.0 mask 24

[CORE-ip-pool-vlan100]gat 100.1.1.254

[CORE-ip-pool-vlan100]qui

[CORE]ip pool vlan10

Info:It's successful to create an IP address pool.

[CORE-ip-pool-vlan10]network 10.1.1.0 mask 24

[CORE-ip-pool-vlan10]gat 10.1.1.254

[CORE-ip-pool-vlan10]qui

[CORE]int vlan 100

[CORE-Vlanif100]ip add 100.1.1.254 24

[CORE-Vlanif100]dhcp sel glo

[CORE-Vlanif100]q

[CORE]int vlan 10

[CORE-Vlanif10]ip add 10.1.1.254 24

[CORE-Vlanif10]dhcp sel glo

[CORE-Vlanif10]q

  

[AC-vlan10]int g0/0/1

[AC-GigabitEthernet0/0/1]port link-type trunk

[AC-GigabitEthernet0/0/1]port tr al vl 10

[AC-GigabitEthernet0/0/1]q

[AC]int vlan 10

[AC-Vlanif10]ip add 10.1.1.10 24

[AC-Vlanif10]q





二：配置AC的WLAN业务





[AC]wlan //进入WLAN配置模式



创建域管理模板

[AC-wlan-view]regulatory-domain-profile name reg-1

[AC-wlan-regulate-domain-reg-1]country-code CN

[AC-wlan-regulate-domain-reg-1]quit



创建AP组并引用域管理模板

[AC-wlan-view]ap-group name ap-group

[AC-wlan-ap-group-ap-group]regulatory-domain-profile reg-1

Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continue?[Y/N]:y

[AC-wlan-view]quit



配置AC的源接口

[AC]capwap source interface Vlanif 10



[AC]wlan



配置AP的认证方式、添加AP、将AP加入组

[AC-wlan-view]ap auth-mode mac-auth

[AC-wlan-view]ap-mac 00e0-fc3f-61a0 ap-id 0

[AC-wlan-ap-0]ap-group ap-group

Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configurations of the radio, Whether to continue? [Y/N]:y

Info: This operation may take a few seconds. Please wait for a moment.. done.

[AC-wlan-ap-0]quit



创建安全模板

[AC-wlan-view]security-profile name wlan-1

[AC-wlan-sec-prof-wlan-1]security wpa-wpa2 psk pass-phrase a1234567 aes

[AC-wlan-sec-prof-wlan-1]q



创建SSID模板

[AC-wlan-view]ssid-profile name wifi-1

[AC-wlan-ssid-prof-wifi-1]ssid wifi-1

[AC-wlan-ssid-prof-wifi-1]q



创建VAP模板

[AC-wlan-view]vap-profile name vap-1

[AC-wlan-vap-prof-vap-1]forward-mode direct-forward   //指定转发模式

[AC-wlan-vap-prof-vap-1]service-vlan vlan-id 100  //配置业务vlan

[AC-wlan-vap-prof-vap-1]security-profile wlan-1  //引用安全模板

[AC-wlan-vap-prof-vap-1]ssid-profile wifi-1  //引用SSID模板

[AC-wlan-vap-prof-vap-1]q



在AP组中引用VAP模板

[AC-wlan-view]ap-group name ap-group

[AC-wlan-ap-group-ap-group]vap-profile vap-1 wlan 1 radio all

[AC-wlan-ap-group-ap-group]quit

 

配置完毕，在STA客户端上连接wifi

------------------------------

 

查看ap上线情况

dis ap all

state为nor时：正常上线