根據(jù)enspv510版ac與ap配置

1、基于 enspv510 版 ac與 ap配置四川托普信息職業(yè)技術學院唐小軍、拓撲圖卯的 i 例址通.10.2J.1O0.2-1&.25, iee.25Hl/24:地址也r»r 101,3-10.2Jr 101-2M/24.vltnH： IM 16.23.vUrilQlII tfldn: vIhiAMi業(yè)房式的101.2/24STAJap-groupl wl通力-也tvlanlOfS- 3 m. 1 一一R 1 I0N1AC2vlanlflMil0.21.iee,l/24LSW)defFylt貴全有枸ulan-n«t:安全策略 HPA-NPg+PMC+MS密科，J12

2、J4567、實驗環(huán)境:三、相應設備：1 .無線 AP:5030, AC:6605,2 .交換：二層，S3700,三層，S57003 .電腦：STA 四、實現(xiàn)目標：1. STA3能通過無線方式訪問到三層交換機接口地址，10.23.101.2五、配置思路1 .配置AP、AC和周邊網(wǎng)絡設備之間實現(xiàn)網(wǎng)絡互通。2 .配置AP上線。a) 創(chuàng)建AP組，用于將需要進行相同配置的AP都加入到AP組，實現(xiàn)統(tǒng)一配置。b) 配置AC的系統(tǒng)參數(shù)，包括國家碼、 AC與AP之間通信的源接口。c) 配置AP上線的認證方式并離線導入AP,實現(xiàn)AP正常上線。3 .配置 WLAN業(yè)務參數(shù)，實現(xiàn) STAW問 WLAN網(wǎng)絡功能。 六、

3、實驗過程：1.二層交換機配置<HUAWEI>system-viewHUAWEI sysname SwitchSwitch vlan batch 100 101Switch interface Ethernet0/0/1Switch-Ethernet0/0/1Switch-Ethernet0/0/1Switch-Ethernet0/0/1Switch-Ethernet0/0/1Switch-Ethernet0/0/1port link-type trunkport trunk pvid vlan 100port trunk allow-pass vlan 100 101port-is

4、01ate enablequitSwitch interface gigabitethernet 0/0/2Switch-Ethernet0/0/2Switch-Ethernet0/0/2Switch-Ethernet0/0/2port link-type trunkport trunk allow-pass vlan 100 101quit2.三層交換機配置<Huawei> system-viewHuawei sysname RouterRouter vlan batch 101Routerinterface gigabitethernet 0/0/1Router-Gigabit

5、Ethernet0/0/1Router-GigabitEthernet0/0/1Router-GigabitEthernet0/0/1 Router interface vlanif 101port link-type trunkport trunk allow-pass vlan 101quitRouter-Vlanif101ip address 10.23.101.2 24Router-Vlanif101quit3 .配置AC與其它網(wǎng)絡設備互通<AC6605> system-viewAC6605 sysname ACAC vlan batch 100 101AC interfa

6、ce gigabitethernet 0/0/1AC-GigabitEthernet0/0/1port link-type trunkAC-GigabitEthernet0/0/1port trunk allow-pass vlan100 101AC-GigabitEthernet0/0/1quitAC interface gigabitethernet 0/0/2AC-GigabitEthernet0/0/2port link-type trunkAC-GigabitEthernet0/0/2port trunk allow-pass vlan101AC-GigabitEthernet0/0

7、/2quit4 .在AC上配置DHCP服務器為STA和AP分配IP地址AC dhcp enableAC interface vlanif 100AC-Vlanif100ip address 10.23.100.124AC-Vlanif100dhcp select interfaceAC-Vlanif100quitAC interface vlanif 101AC-Vlanif101ip address 10.23.101.124AC-Vlanif101dhcp select interfaceAC-Vlanif101quit5 .在AC上配置AP上線#創(chuàng)建AP組，用于將相同配置的AP都加入同一

8、 AP組中。AC wlan AC-wlan-view ap-group name ap-group1 AC-wlan-ap-group-ap-group1 quit#創(chuàng)建域管理模板，在域管理模板下配置AC的國家碼并在 AP組下引用域管理模板。AC-wlan-view regulatory-domain-profile name default AC-wlan-regulate-domain-defaultcountry-code cnAC-wlan-regulate-domain-defaultquitAC-wlan-view ap-group name ap-group1 AC-wlan-a

9、p-group-ap-group1 regulatory-domain-profile defaultWarning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continu e?Y/N: y AC-wlan-ap-group-ap-group1 quit AC-wlan-view quit #配置AC的源接口。AC capwap source interface vlanif 1006 .查看ap的ma

10、c地址做好記錄以備用，并為 ap設置部署名稱例如area_1W腐苒 歸吊»當芾工翻邑二7 . AP具有射頻0和射頻1兩個射頻。例如 AP5030DN的射頻0為2.4GHz射頻，射頻 1為5GHz射頻。AC wlanAC-wlan-view ap auth-mode mac-authAC-wlan-view ap-id 0 ap-mac 60de-4476-e360AC-wlan-ap-0ap-name area_1AC-wlan-ap-0ap-group ap-group1Warning: This operation may cause AP reset. If the count

11、ry code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? Y/N:yAC-wlan-ap-0 quit8 .保證AP上電并與AC連接，當執(zhí)行命令display ap all查看到AP的"Stat痔段為"nor" 時，表示AP正常上線。AC-wlan-viewdisplay ap allTotal AP information: nor : normal1ID MAC Name Group IP T

12、ype State STAUptime0 00e0-fcfe-1e60 area_1 ap-group1 10.23.100.106 AP5030DNnor 010STotal: 19 .配置WLAN業(yè)務參數(shù)，配置 WPA-WPA2+PSK+AES的安全策略，密碼為“a1234567AC-wlan-view security-profile name wlan-netAC-wlan-sec-prof-wlan-netsecurity wpa-wpa2 psk pass-phrase a1234567 aesAC-wlan-sec-prof-wlan-netquit#創(chuàng)建名為“wla-net &

13、#39;的SSID模板，并配置 SSID名稱為“wlannet AC-wlan-view ssid-profile name wlan-net AC-wlan-ssid-prof-wlan-netssid wlan-netAC-wlan-ssid-prof-wlan-netquit#創(chuàng)建名為“wla-net '的VAP模板，配置業(yè)務數(shù)據(jù)轉發(fā)模式、業(yè)務 VLAN ,并且引用 安全模板和SSID模板。AC-wlan-view vap-profile name wlan-netAC-wlan-vap-prof-wlan-net AC-wlan-vap-prof-wlan-net AC-wla

14、n-vap-prof-wlan-net AC-wlan-vap-prof-wlan-net AC-wlan-vap-prof-wlan-netforward-mode direct-forward service-vlan vlan-id 101 security-profile wlan-net ssid-profile wlan-net quit#配置AP組引用VAP模板，AP上射頻0和射頻1者B使用VAP模板“wlamet '的配 置。AC-wlan-view ap-group name ap-group1AC-wlan-ap-group-ap-group1vap-profile

15、 wlan-net wlan 1 radio 0AC-wlan-ap-group-ap-groupIvap-profile wlan-net wlan 1 radio 1AC-wlan-ap-group-ap-groupIquit10.配置AP射頻的信道和功率，關閉射頻的信道和功率自動調優(yōu)功能。射頻的信道和功 率自動調優(yōu)功能默認開啟，如果不關閉此功能則會導致手動配置不生效。AC-wlan-view rrm-profile name defaultAC-wlan-rrm-prof-defaultcalibrate auto-channel-select disableAC-wlan-rrm-pr

16、of-defaultcalibrate auto-txpower-select disableAC-wlan-rrm-prof-defaultquit#配置AP射頻0的信道和功率。AC-wlan-viewap-id 0AC-wlan-ap-0radio 0AC-wlan-radio-0/0 channel 20mhz 6Warning: This action may cause service interruption.Continue?Y/NyAC-wlan-radio-0/0 eirp 127AC-wlan-radio-0/0 quit#配置AP射頻1的信道和功率。AC-wlan-ap-

17、0radio 1AC-wlan-radio-0/1 channel 20mhz 149Warning: This action may cause service interruption.Continue?Y/NyAC-wlan-radio-0/1 eirp 127AC-wlan-radio-0/1 quitAC-wlan-ap-0quit11 .驗證配置結果，WLAN業(yè)務配置會自動下發(fā)給AP,配置完成后，通過執(zhí)行命令displayvap ssid wlan-net查看如下信息，當 "Statu頸顯示為"ON寸，表示AP對應的射頻 上的VAP已創(chuàng)建成功。-wxaia- v

18、 Ji.tz w j _! j_o|j j.ay vajp lAC-wlan-viewJdisplay vap ssid wlan-necInfo: This operation xay tate a fewplease waitwrD ; WLAW IDAP 工口AP najne RfIDHIDR55I口Autb typeST ASSID0aieal 010GEa-FCFE-lE60ON WPA/WPA2-PSK1wlin-net0 arcBl 11 00E0FCFE*lE70 OH0 wlan-neL12 . STA搜索到名為“wlamet '的無線網(wǎng)絡，輸入密碼“ a123456正常關聯(lián)后，在 AC上執(zhí)行display station ssid wlan -net命令，可以查看到用戶已經(jīng)接入到無線網(wǎng)絡“wlamet ”中。在STA3上做如下操作:"M3-處-SEMia4匿西*颯:同美士UD力映司花燦VAPM1CliW一片陸之引 二 wtanrutNULL來準橫8空代