华为AC+AP配置

AC管理地址:192.168.200.1


AP地址段:192.168.200.2-254(DHCP分配)


AP网关地址:192.168.200.1


WIFI业务地址:192.168.100.X/24


WIFI名称和密码:wifi/a12345678


拓扑:



配置代码

[SW2]vlan batch 100 200                         ##batch一次性添加vlan100 和200

 

[SW2]int g0/0/1

[SW2-GigabitEthernet0/0/1]port link-type trunk 

[SW2-GigabitEthernet0/0/1]port trunk allow-pass vlan all 

[SW2-GigabitEthernet0/0/1]quit

 

[SW2]int g0/0/2

[SW2-GigabitEthernet0/0/2]port link-type trunk 

[SW2-GigabitEthernet0/0/2]port trunk allow-pass vlan 100 200

[SW2-GigabitEthernet0/0/2]port trunk pvid vlan 200  #//这里为啥要设置PVID呢?因为AP不能识别tag标签,就像路由器和PC一样,需要端口剥离标签来识别

[SW2-GigabitEthernet0/0/2]quit

 

[SW2]int g0/0/3

[SW2-GigabitEthernet0/0/3]port link-type trunk 

[SW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 100 200

[SW2-GigabitEthernet0/0/3]port trunk pvid vlan 200

[SW1]vlan batch 100 200

 

[SW1]int g0/0/2

[SW1-GigabitEthernet0/0/2]port link-type trunk 

[SW1-GigabitEthernet0/0/2]port trunk allow-pass vlan all

 

[SW1-GigabitEthernet0/0/2]int g0/0/1

[SW1-GigabitEthernet0/0/1]port link-type trunk 

[SW1-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 200

[SW1-GigabitEthernet0/0/1]quit

 

[SW1]int vlan 100

[SW1-Vlanif100]ip add 192.168.100.1 255.255.255.0

[SW1-Vlanif100]dhcp select interface    

[SW1-Vlanif100]dhcp server dns-list 223.5.5.5 114.114.114.114

[SW1-Vlanif100]quit

[SW1]dhcp enabl                

[AC6005]vlan batch 100 200

[AC6005]int g0/0/1

[AC6005-GigabitEthernet0/0/1]port link-type trunk 

[AC6005-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 200

[AC6005-GigabitEthernet0/0/1]quit

[AC6005]dhcp enable

[AC6005]int vlan 200

[AC6005-Vlanif200]ip add 192.168.200.1 255.255.255.0

[AC6005-Vlanif200]dhcp select interface 

[AC6005-Vlanif200]dhcp server dns-list 223.5.5.5 114.114.114.114

[AC6005-Vlanif200]quit

 

#一:新建AP组,域管理模板,组里调用域管理模板

#创建AP组ap-group1,方便后面其他AP加入此组,统一配置

[AC6005]wlan

[AC6005-wlan-view]ap-group name ap-group1     #创建AP组ap-group1,方便后面其他AP加入此组,统一配置

[AC6005-wlan-ap-group-ap-group1]quit

[AC6005-wlan-view]regulatory-domain-profile name default #创建域管理模板default,国家代码CN

[AC6005-wlan-regulate-domain-default]country-code CN 

[AC6005-wlan-regulate-domain-default]quit

 

[AC6005-wlan-view]ap-group name ap-group1                       #模板和域管理模板绑定

[AC6005-wlan-ap-group-ap-group1]regulatory-domain-profile default

Warning: Modifying the country code will clear channel, power and antenna gain c

onfigurations of the radio and reset the AP. Continue?[Y/N]:y

[AC6005-wlan-ap-group-ap-group1]quit

[AC6005-wlan-view]quit

 

[AC6005]capwap source interface Vlanif 200       #选择AC源接口地址

 

#二、AP上线,将此AP加入新建的AP组ap-group1

[AC6005]wlan

[AC6005-wlan-view]ap auth-mode mac-auth               #AP上线的方式是mac认证

[AC6005-wlan-view]ap-id 0 ap-mac 00E0-FCD8-2B50       #绑定AP MAC

[AC6005-wlan-ap-0]ap-name area_1                   #这个AP的区域命名为are_1

[AC6005-wlan-ap-0]ap-group ap-group1                  #将此AP加入组ap-group1

Warning: This operation may cause AP reset. If the country code changes, it will

 clear channel, power and antenna gain configurations of the radio, Whether to c

ontinue? [Y/N]:y

Info: This operation may take a few seconds. Please wait for a moment.. done.

[AC6005-wlan-ap-0]quit

 

#三、配置WLAN业务参数

[AC6005-wlan-view]security-profile name wifi       #创建安全模板(包含认证方式和密码)

[AC6005-wlan-sec-prof-wifi]security wpa-wpa2 psk pass-phrase a12345678 aes

[AC6005-wlan-sec-prof-wifi]quit

[AC6005-wlan-view]ssid-profile name wifi        #创建SSID模板,并配置SSID的名称为“wifi ”

[AC6005-wlan-ssid-prof-wifi]ssid wifi

[AC6005-wlan-ssid-prof-wifi]quit

[AC6005-wlan-view]vap-profile name wifi        #创建VAP模板,配置业务数据转发模式,业务vlan,并且引用安全模板和SSID模板

[AC6005-wlan-vap-prof-wifi]forward-mode direct-forward   #转发模式

[AC6005-wlan-vap-prof-wifi]service-vlan vlan-id 100      #这里的业务VLAN会觉得手机或者SAT工作站的IP地址取决于哪个VLAN

[AC6005-wlan-vap-prof-wifi]security-profile wifi     ##调用安全模版

[AC6005-wlan-vap-prof-wifi]ssid-profile wifi         ##调用SSID模版

[AC6005-wlan-vap-prof-wifi]quit

[AC6005-wlan-view]ap-group name ap-group1

[AC6005-wlan-ap-group-ap-group1]vap-profile wifi wlan 1 radio 0     ##0为2.4射频

[AC6005-wlan-ap-group-ap-group1]vap-profile wifi wlan 1 radio 1     ##1为5G射频

[AC6005-wlan-ap-group-ap-group1]quit

 

 

#添加第2个AP

[AC6005]wlan

[AC6005-wlan-view]ap-id 1 ap-mac 00E0-FCC7-5880     #绑定第二个AP  MAC地址

[AC6005-wlan-ap-1]ap-name area_2                    #设置区域命名为area_2

[AC6005-wlan-ap-1]ap-group ap-group1                #将此AP加入组ap-group1

Warning: This operation may cause AP reset. If the country code changes, it will

 clear channel, power and antenna gain configurations of the radio, Whether to c

ontinue? [Y/N]:y

Info: This operation may take a few seconds. Please wait for a moment.. done.

[AC6005-wlan-ap-1]quit


【调优说明】

#AC调优:关闭AP射频0和1的信道功率自动调优功能,并配置AP射频的信道和功率

[AC6005-wlan-view] ap-id 0

[AC6005-wlan-ap-0] radio 0

[AC6005-wlan-radio-0/0] calibrate auto-channel-select disable

[AC6005-wlan-radio-0/0] calibrate auto-txpower-select disable

[AC6005-wlan-radio-0/0] channel 20mhz 6

Warning: This action may cause service interruption. Continue?[Y/N]y

[AC6005-wlan-radio-0/0] eirp 127

[AC6005-wlan-radio-0/0] quit

 

[AC6005-wlan-ap-0] radio 1

[AC6005-wlan-radio-0/1] calibrate auto-channel-select disable

[AC6005-wlan-radio-0/1] calibrate auto-txpower-select disable

[AC6005-wlan-radio-0/1] channel 20mhz 149

Warning: This action may cause service interruption. Continue?[Y/N]y

[AC6005-wlan-radio-0/1] eirp 127

[AC6005-wlan-radio-0/1] quit

[AC6005-wlan-ap-0] quit

 


打赏
版权声明

本文仅代表作者观点,不代表本站立场。
本文系作者授权发表,未经许可,不得转载。