Vlan组网配置实验
Vlan组网配置实验
一、实验拓扑
二、实验步骤
1、在接入交换机上创建vlan,设置端口类型和pvid
sys
[Huawei]sysname SW2
[SW2]vlan batch 100 to 102
[SW2]int g0/0/1
[SW2-GigabitEthernet0/0/1]port link-type trunk
[SW2-GigabitEthernet0/0/1]port trunk pvid vlan 100
[SW2-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 101
[SW2]int g0/0/2
[SW2-GigabitEthernet0/0/2]port link-type trunk
[SW2-GigabitEthernet0/0/2]port trunk pvid vlan 100
[SW2-GigabitEthernet0/0/2]port trunk allow-pass vlan 100 102
[SW2]int g0/0/3
[SW2-GigabitEthernet0/0/3]port link-type trunk
[SW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 100 to 102
2、在汇聚交换机上配置vlan和接口类型
sys
[Huawei]sysname SW1
[SW1]vlan batch 100 to 102
[SW1]int g0/0/2
[SW1-GigabitEthernet0/0/2]port link-type trunk
[SW1-GigabitEthernet0/0/2]port trunk allow-pass vlan 100 to 102
[SW1-GigabitEthernet0/0/2]int g0/0/3
[SW1-GigabitEthernet0/0/3]port link-type trunk
[SW1-GigabitEthernet0/0/3]port trunk allow-pass vlan 100 to 102
3、配置AC的接口
sys
[AC6605]sysname AC1
[AC1]vlan batch 100 to 102
[AC1]int g0/0/1
[AC1-GigabitEthernet0/0/1]port link-type trunk
[AC1-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 to 102
4、在AC上创建AP组配置AP上线并且配置VLAN业务参数
（1） 创建AP组
sys
[AC6605]sysname AC1
[AC1-wlan-view]ap-group name ap-group1
（2）配置AC为DHCP服务器
[AC1]dhcp enable
[AC1]int vlan 100
[AC1-Vlanif100]ip add 192.168.100.1 24
[AC1-Vlanif100]dhcp select interface
[AC1-Vlanif100]int vlan 101
[AC1-Vlanif101]ip add 192.168.101.1 24
[AC1-Vlanif101]dhcp select interface
[AC1-Vlanif101]int vlan 102
[AC1-Vlanif102]ip add 192.168.102.1 24
[AC1-Vlanif102]dhcp select interface
(3)创建域管理模板，配置AC的国家码，绑定域管理模板到AP组
[AC1]wlan
[AC1-wlan-view]regulatory-domain-profile name domain1
[AC1-wlan-regulate-domain-domain1]country-code CN
[AC1-wlan-regulate-domain-domain1]quit
[AC1-wlan-view]ap-group name ap-group1
[AC1-wlan-ap-group-ap-group1]regulatory-domain-profile domain1
Warning: Modifying the country code will clear channel, power and antenna gain c
onfigurations of the radio and reset the AP. Continue?[Y/N]:y
[AC1-wlan-ap-group-ap-group1]
(4)与AP建立capwap隧道
[AC1]capwap source interface Vlanif 100
(5)配置AP认证方式
[AC1]wlan
[AC1-wlan-view]ap auth-mode mac-auth
[AC1-wlan-view]ap-mac 00E0-FCF9-56D0 ap-id 0
[AC1-wlan-ap-0]ap-group ap-group1
Warning: This operation may cause AP reset. If the country code changes, it will
clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.. done.
[AC1-wlan-ap-0]quit
[AC1-wlan-view]ap-mac 00E0-FCEA-2330 ap-id 1
[AC1-wlan-ap-1]ap-group ap-group1
Warning: This operation may cause AP reset. If the country code changes, it will
clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.. done.
[AC1-wlan-ap-1]quit
(6)配置安全模板
[AC1-wlan-view]serial-profile name security-1
(7)配置SSID模板
[AC1-wlan-view]ssid-profile name zjh-1
[AC1-wlan-ssid-prof-zjh-1]ssid zjh-1
Info: This operation may take a few seconds, please wait.done.
[AC1-wlan-ssid-prof-zjh-1]quit
[AC1-wlan-view]ssid-profile name zjh-2
[AC1-wlan-ssid-prof-zjh-2]ssid zjh-2
Info: This operation may take a few seconds, please wait.done
(8)配置VAP模板
[AC1-wlan-view]vap-profile name zjh-1
[AC1-wlan-vap-prof-zjh-1]forward-mode direct-forward
[AC1-wlan-vap-prof-zjh-1]service-vlan vlan-id 101
Info: This operation may take a few seconds, please wait.done.
[AC1-wlan-vap-prof-zjh-1]security-profile security-1
[AC1-wlan-vap-prof-zjh-1]ssid-profile zjh-1
[AC1-wlan-view]vap-profile name zjh-2
[AC1-wlan-vap-prof-zjh-2]forward-mode direct-forward
[AC1-wlan-vap-prof-zjh-2]service-vlan vlan-id 102
Info: This operation may take a few seconds, please wait.done.
[AC1-wlan-vap-prof-zjh-2]security-profile security-1
Info: This operation may take a few seconds, please wait.done.
[AC1-wlan-vap-prof-zjh-2]ssid-profile zjh-2
Info: This operation may take a few seconds, please wait.done.
(9)绑定模板到AP组
[AC1-wlan-view]ap-group name ap-group1
[AC1-wlan-ap-group-ap-group1]vap-profile zjh-1 wlan 1 radio all
Info: This operation may take a few seconds, please wait...done.
[AC1-wlan-ap-group-ap-group1]vap-profile zjh-2 wlan 2 radio all
Info: This operation may take a few seconds, please wait...done.
三、实验结果
1、AP产生vlan范围
2、STA连接上无线
3、在ac上查看ap的状态
