WLAN配置三层旁挂隧道转发

示例图

一、实验目的

1、配置三层旁挂AC隧道转发

二、注意事项

1.如果有多个管理VLAN，AC要有到管理VLAN的路由
2.VLAN标签在二层的剥离和封装要注意
3.AP的MAC地址一定要填对
4.参考无线接入控制器(AC和FIT AP) V200R019C00 产品文档

三、简单查询

1.display ap all查看到AP是否正常上线、当“State”字段为“nor”时，表示AP正常上线
2.display vap ssid wlan-net查看VAP是否创建成功，当“Status”项显示为“ON”时，表示AP对应的射频上的VAP已创建成功。
3.display station ssid wlan-net，可以查看用户是否接入到无线网络“wlan-net”中。
4.display ap run-info { ap-name ap-name | ap-id ap-id }，查看AP的运行信息。
5.display ap service-config acl [ ipv6 ] { ap-name ap-name | ap-id ap-id }，查看指定AP上的ACL配置信息
6.display ap statistics，查看添加到AC上的AP的AP类型统计信息。
7.display ap port { all | ap-name ap-name | ap-id ap-id | ap-mac ap-mac }，查看AP的端口状态和流量信息。
8.display ap performance statistics { ap-name ap-name | ap-id ap-id }，用来查看AP性能统计信息

四、简单配置

LSWA

sysname LSWA
#
vlan batch 100 to 102
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 100 to 102
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk pvid vlan 100
 port trunk allow-pass vlan 100 to 102
#
return 

LSWB

sysname LSWB
#
vlan batch 2 to 3 100 to 102
#
dhcp enable
#
interface Vlanif2
 ip address 192.168.1.2 255.255.255.0 
#
interface Vlanif3
 ip address 192.168.2.1 255.255.255.0 
#
interface Vlanif100
 ip address 10.23.100.2 255.255.255.0 
 dhcp select relay
 dhcp relay server-ip 10.23.100.1
#
interface Vlanif101
 ip address 10.23.101.1 255.255.255.0 
 dhcp select interface
#
interface Vlanif102
 ip address 10.23.102.1 255.255.255.0 
 dhcp select interface
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk pvid vlan 3
 port trunk allow-pass vlan 3 100 to 102
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 100 to 102
#
interface GigabitEthernet0/0/3
 port link-type trunk
 port trunk pvid vlan 2
 port trunk allow-pass vlan 2 100
#
return 

AC1

sysname AC1
#
vlan batch 3 100 to 102
#
vlan pool sta-pool
 vlan 101 to 102
#
dhcp enable
#
ip pool huawei
 gateway-list 10.23.100.3 
 network 10.23.100.0 mask 255.255.255.0 
#
interface Vlanif3
 ip address 192.168.2.2 255.255.255.0
#
interface Vlanif100
 ip address 10.23.100.1 255.255.255.0
 dhcp select global
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk pvid vlan 3
 port trunk allow-pass vlan 3 100 to 102
#
ip route-static 10.23.10.0 255.255.255.0 10.23.100.2
#
capwap source interface vlanif100
#
wlan
 security-profile name wlan-net
  security wpa-wpa2 psk pass-phrase abc123456 aes
 ssid-profile name wlan-net
  ssid wlan-net
 vap-profile name default
  forward-mode tunnel
 vap-profile name wlan-net
  forward-mode tunnel
  service-vlan vlan-pool sta-pool
  ssid-profile wlan-net
  security-profile wlan-net
 ap-group name ap-group1
  radio 0
   vap-profile wlan-net wlan 1
  radio 1
   vap-profile wlan-net wlan 1
 ap-id 0 type-id 56 ap-mac AP的MAC地址
  ap-name area_1
  ap-group ap-group1
  radio 0
   channel 20mhz 6
   eirp 127
  radio 1
   channel 20mhz 149
   eirp 127
 provision-ap
#
return

AR1

sysname AR1
#
interface GigabitEthernet0/0/1
 ip address 192.168.1.1 255.255.255.0 
#
ip route-static 0.0.0.0 0.0.0.0 192.168.1.2
#
return