配置项 | 数据 |
---|---|
DHCP服务器 | AC作为DHCP服务器为STA和AP分配IP地址 |
AP的IP地址池 | 172.16.100.2~172.16.100.254/24 |
STA的IP地址池 | 172.16.101.2~172.16.101.254/24 |
AC的源接口IP地址 | VLANIF100:172.16.100.1/24 |
AP组
•名称:ap-group1
•引用模板:VAP模板wlan-vap、域管理模板domain1
域管理模板
•名称:domain1
•国家码:CN
SSID模板
•名称:wlan-ssid
•SSID名称:huawei
安全模板
•名称:wlan-security
•安全策略:WPA2+PSK+AES
•密码:huawei123
VAP模板
•名称:wlan-vap
•转发模式:隧道转发
•业务VLAN:VLAN101
•引用模板:SSID模板wlan-ssid、安全模板wlan-security
<HUAWEI> system-view
[HUAWEI] sysname SwitchA
[SwitchA] vlan batch 100
[SwitchA] interface gigabitethernet 0/0/1
[SwitchA-GigabitEthernet0/0/1] port link-type trunk
[SwitchA-GigabitEthernet0/0/1] port trunk pvid vlan 100
[SwitchA-GigabitEthernet0/0/1] port trunk allow-pass vlan 100
[SwitchA-GigabitEthernet0/0/1] quit
[SwitchA] interface gigabitethernet 0/0/2
[SwitchA-GigabitEthernet0/0/2] port link-type trunk
[SwitchA-GigabitEthernet0/0/2] port trunk allow-pass vlan 100
[SwitchA-GigabitEthernet0/0/2] quit
[HUAWEI] sysname AC
[AC] vlan batch 100 101
[AC] interface gigabitethernet 0/0/1
[AC-GigabitEthernet0/0/1] port link-type trunk
[AC-GigabitEthernet0/0/1] port trunk allow-pass vlan 100
[AC-GigabitEthernet0/0/1] quit
说明:
DNS服务器地址请根据实际需要配置。常用配置方法如下:
•接口地址池场景,需要在VLANIF接口视图下执行命令dhcp server dns-list ip-address &<1-8>。
•全局地址池场景,需要在IP地址池视图下执行命令dns-list ip-address &<1-8>。
[AC] dhcp enable
[AC] interface vlanif 100
[AC-Vlanif100] ip address 172.16.100.1 24
[AC-Vlanif100] dhcp select interface
[AC-Vlanif100] quit
[AC] interface vlanif 101
[AC-Vlanif101] ip address 172.16.101.1 24
[AC-Vlanif101] dhcp select interface
[AC-Vlanif101] quit
[AC] wlan
[AC-wlan-view] ap-group name ap-group1
[AC-wlan-ap-group-ap-group1] quit
[AC-wlan-view] regulatory-domain-profile name domain1
[AC-wlan-regulate-domain-domain1] country-code cn
[AC-wlan-regulate-domain-domain1] quit
[AC-wlan-view] ap-group name ap-group1
[AC-wlan-ap-group-ap-group1] regulatory-domain-profile domain1
Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continu
e?[Y/N]:y
[AC-wlan-ap-group-ap-group1] quit
[AC-wlan-view] quit
[AC] capwap source interface vlanif 100
[AC] wlan
[AC-wlan-view] ap-id 0 ap-mac 00e0-fc0b-6480
[AC-wlan-ap-0] ap-name area_1
Warning: This operation may cause AP reset. Continue? [Y/N]:y
[AC-wlan-ap-0] ap-group ap-group1
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration
s of the radio, Whether to continue? [Y/N]:y
[AC-wlan-ap-0] quit
说明:
举例中以配置WPA2+PSK+AES的安全策略为例,密码为“huawei123”,实际配置中请根据实际情况,配置符合实际要求的安全策略。
[AC-wlan-view] security-profile name wlan-security
[AC-wlan-sec-prof-wlan-security] security wpa2 psk pass-phrase huawei123 aes
[AC-wlan-sec-prof-wlan-security] quit
[AC-wlan-view] ssid-profile name wlan-ssid
[AC-wlan-ssid-prof-wlan-ssid] ssid huawei
[AC-wlan-ssid-prof-wlan-ssid] quit
[AC-wlan-view] vap-profile name wlan-vap
[AC-wlan-vap-prof-wlan-vap] forward-mode tunnel
[AC-wlan-vap-prof-wlan-vap] service-vlan vlan-id 101
[AC-wlan-vap-prof-wlan-vap] security-profile wlan-security
[AC-wlan-vap-prof-wlan-vap] ssid-profile wlan-ssid
[AC-wlan-vap-prof-wlan-vap] quit
[AC-wlan-view] ap-group name ap-group1
[AC-wlan-ap-group-ap-group1] vap-profile wlan-vap wlan 1 radio all
[AC-wlan-ap-group-ap-group1] quit
配置完成后,通过执行命令display vap ssid wlan-net查看如下信息,当“Status”项显示为“ON”时,表示AP对应的射频上的VAP已创建成功。
STA搜索到名为“wlan-net”的无线网络,输入密码“a1234567”并正常关联后,在AC上执行display station ssid wlan-net命令,可以查看到用户已经接入到无线网络“wlan-net”中。
更多【网络-华为无线配置模板 一】相关视频教程:www.yxfzedu.com