华为设备配置敏捷分布式WLAN组网

华为设备配置敏捷分布式WLAN组网_第1张图片

  1. 配置AC和交换机,使AD、SAP与AC之间能够传输CAPWAP报文
    (1)配置LSW1
    [LSW1]vlan batch 10
    [LSW1-GigabitEthernet0/0/2]port link-type trunk
    [LSW1-GigabitEthernet0/0/2]port trunk pvid vlan 10
    [LSW1-GigabitEthernet0/0/2]port trunk allow-pass vlan 10
    [LSW1-GigabitEthernet0/0/2]port-isolate enable
    [LSW1-GigabitEthernet0/0/1]port link-type trunk
    [LSW1-GigabitEthernet0/0/1]port trunk allow-pass vlan 10
    (2)配置AC:隧道转发模式下,管理VLAN和业务VLAN不能配置为同一VLAN,且AD和AC之间只能放通管理VLAN,不能放通业务VLAN
    [AC1]vlan batch 10 20
    [AC1-GigabitEthernet0/0/1]port link-type trunk
    [AC1-GigabitEthernet0/0/1]port trunk allow-pass vlan 10
    [AC1-GigabitEthernet0/0/2]port link-type trunk
    [AC1-GigabitEthernet0/0/2]port trunk allow-pass vlan 20

  2. 配置AC作为DHCP服务器,为STA、AD和SAP分配IP地址
    [AC1]dhcp enable
    [AC1]int Vlanif 10
    [AC1-Vlanif10]ip add 10.1.1.1 24
    [AC1-Vlanif10]dhcp select interface
    [AC1-Vlanif10]int Vlanif 20
    [AC1-Vlanif20]ip add 10.1.2.1 24
    [AC1-Vlanif20]dhcp select interface

  3. 配置AD和SAP上线
    [AC1]wlan
    [AC1-wlan-view]ap-group name ap-group1 //创建AP组
    [AC1-wlan-view]regulatory-domain-profile name domain1 // 创建域管理模板
    [AC1-wlan-regulate-domain-domain1]country-code cn //配置AC的国家码
    [AC1-wlan-view]ap-group name ap-group1
    [AC1-wlan-ap-group-ap-group1]regulatory-domain-profile domain1 //在AP组下引用域管理模板
    [AC1]capwap source interface Vlanif 10 //配置AC的源接口
    [AC1-wlan-view]ap auth-mode mac-auth //在AC上离线导入中心AD和SAP
    [AC1-wlan-view]ap-id 0 ap-mac 00e0-fcc7-1a20
    [AC1-wlan-ap-0]ap-name AD1
    [AC1-wlan-ap-0]ap-group ap-group1
    [AC1-wlan-view]ap-id 1 ap-mac 00e0-fce6-7f00
    [AC1-wlan-ap-1]ap-name SAP1
    [AC1-wlan-ap-1]ap-group ap-group1
    [AC1-wlan-view]ap-id 2 ap-mac 00e0-fcc2-45c0
    [AC1-wlan-ap-2]ap-name SAP2
    [AC1-wlan-ap-2]ap-group ap-group1

  4. 配置WLAN业务参数
    [AC1-wlan-view]security-profile name wlan-security //创建安全模板
    [AC1-wlan-sec-prof-wlan-security]security wpa2 psk pass-phrase abc@1234 aes //配置安全策略
    [AC1-wlan-view]ssid-profile name wlan-ssid //创建SSID模板
    [AC1-wlan-ssid-prof-wlan-ssid]ssid wlan-net //配置SSID名称
    [AC1-wlan-view]vap-profile name wlan-vap //创建VAP模板
    [AC1-wlan-vap-prof-wlan-vap]forward-mode tunnel //配置业务数据转发模式
    [AC1-wlan-vap-prof-wlan-vap]service-vlan vlan-id 20 //配置业务VLAN
    [AC1-wlan-vap-prof-wlan-vap]security-profile wlan-security //引用安全模板
    [AC1-wlan-vap-prof-wlan-vap]ssid-profile wlan-ssid //引用SSID模板
    [AC1-wlan-view]ap-group name ap-group1 //配置AP组引用VAP模板,AP上射频0和射频1都使用VAP模板wlan-vap的配置
    [AC1-wlan-ap-group-ap-group1]vap-profile wlan-vap wlan 1 radio 0 //
    [AC1-wlan-ap-group-ap-group1]vap-profile wlan-vap wlan 1 radio 1 //

  5. 配置SAP射频的信道和功率
    [AC1-wlan-view]rrm-profile name default //关闭射频的信道和功率自动调优功能
    [AC1-wlan-rrm-prof-default]calibrate auto-channel-select disable
    [AC1-wlan-rrm-prof-default]calibrate auto-txpower-select disable
    [AC1-wlan-view]ap-id 1
    [AC1-wlan-ap-1]radio 0 //配置SAP射频0的信道和功率
    [AC1-wlan-radio-1/0]channel 20mhz 6
    [AC1-wlan-radio-1/0]eirp 127
    [AC1-wlan-ap-1]radio 1 配置SAP射频1的信道和功率
    [AC1-wlan-radio-1/1]channel 20mhz 149
    [AC1-wlan-radio-1/1]eirp 127

  6. 验证配置
    华为设备配置敏捷分布式WLAN组网_第2张图片

你可能感兴趣的:(网络设计与配置,华为,分布式)