基于enspv510版ac及ap配置-txj

1、-. z.基于enspv510版ac與ap配置*托普信息職業(yè)技術學院唐小軍拓撲圖實驗環(huán)境：相應設備：1.無線AP:5030,AC:6605,2.交換：二層，s3700，三層，s57003.電腦：STA實現(xiàn)目標：STA3能通過無線方式訪問到三層交換機接口地址，配置思路1.配置AP、AC和周邊網絡設備之間實現(xiàn)網絡互通。2.配置AP上線。創(chuàng)立AP組，用于將需要進展一樣配置的AP都參加到AP組，實現(xiàn)統(tǒng)一配置。配置AC的系統(tǒng)參數(shù)，包括國家碼、AC與AP之間通信的源接口。配置AP上線的認證方式并離線導入AP，實現(xiàn)AP正常上線。3.配置WLAN業(yè)務參數(shù)，實現(xiàn)STA訪問WLAN網絡功能。實驗過程：二層交換機配

2、置 system-viewHUAWEI sysname SwitchSwitch vlan batch 100 101Switch interface Ethernet0/0/1Switch-Ethernet0/0/1 port link-type trunkSwitch-Ethernet0/0/1 port trunk pvid vlan 100Switch-Ethernet0/0/1 port trunk allow-pass vlan 100 101Switch-Ethernet0/0/1 port-isolate enableSwitch-Ethernet0/0/1 quitSwitc

3、h interface gigabitethernet 0/0/2Switch-Ethernet0/0/2 port link-type trunkSwitch-Ethernet0/0/2 port trunk allow-pass vlan 100 101Switch-Ethernet0/0/2 quit三層交換機配置 system-viewHuawei sysname RouterRouter vlan batch 101Router interface gigabitethernet 0/0/1Router-GigabitEthernet0/0/1 port link-type trun

4、kRouter-GigabitEthernet0/0/1 port trunk allow-pass vlan 101Router-GigabitEthernet0/0/1 quitRouter interface vlanif 101Router-Vlanif101 ip address 10.23.101.2 24Router-Vlanif101 quit配置AC與其它網絡設備互通 system-viewAC6605 sysname ACAC vlan batch 100 101AC interface gigabitethernet 0/0/1AC-GigabitEthernet0/0/

5、1 port link-type trunkAC-GigabitEthernet0/0/1 port trunk allow-pass vlan 100 101AC-GigabitEthernet0/0/1 quitAC interface gigabitethernet 0/0/2AC-GigabitEthernet0/0/2 port link-type trunkAC-GigabitEthernet0/0/2 port trunk allow-pass vlan 101AC-GigabitEthernet0/0/2 quit在AC上配置DHCP效勞器為STA和AP分配IP地址AC dhc

6、p enableAC interface vlanif 100AC-Vlanif100 ip address 10.23.100.1 24AC-Vlanif100 dhcp select interfaceAC-Vlanif100 quitAC interface vlanif 101AC-Vlanif101 ip address 10.23.101.1 24AC-Vlanif101 dhcp select interfaceAC-Vlanif101 quit在AC上配置AP上線# 創(chuàng)立AP組，用于將一樣配置的AP都參加同一AP組中。AC wlanAC-wlan-view ap-group n

7、ame ap-group1AC-wlan-ap-group-ap-group1 quit# 創(chuàng)立域管理模板，在域管理模板下配置AC的國家碼并在AP組下引用域管理模板。AC-wlan-view regulatory-domain-profile name defaultAC-wlan-regulate-domain-default country-code AC-wlan-regulate-domain-default quitAC-wlan-view ap-group name ap-group1AC-wlan-ap-group-ap-group1 regulatory-domain-prof

8、ile defaultWarning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. ContinueY/N:yAC-wlan-ap-group-ap-group1 quitAC-wlan-view quit# 配置AC的源接口。AC capwap source interface vlanif 100查看ap的mac地址做好記錄以備用，并為ap設置部署名稱例如area_1AP具有射頻0和射頻1兩個射頻。例如A

9、P5030DN的射頻0為2.4GHz射頻，射頻1為5GHz射頻。AC wlanAC-wlan-view ap auth-mode mac-authAC-wlan-view ap-id 0 ap-mac 60de-4476-e360AC-wlan-ap-0 ap-name area_1AC-wlan-ap-0 ap-group ap-group1Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configur

10、ations of the radio, Whether to continue Y/N:yAC-wlan-ap-0 quit保證AP上電并與AC連接，當執(zhí)行命令display ap all查看到AP的State字段為nor時，表示AP正常上線。AC-wlan-view display ap allTotal AP information:nor : normal 1-ID MAC Name Group IP Type State STA Uptime-0 00e0-fcfe-1e60 area_1 ap-group1 10.23.100.106 AP5030DN nor 0 10S-Tota

11、l: 1配置WLAN業(yè)務參數(shù)，配置WPA-WPA2+PSK+AES的平安策略，密碼為a1234567AC-wlan-view security-profile name wlan-netAC-wlan-sec-prof-wlan-net security wpa-wpa2 psk pass-phrase a1234567 aesAC-wlan-sec-prof-wlan-net quit# 創(chuàng)立名為wlan-net的SSID模板，并配置SSID名稱為wlan-net。AC-wlan-view ssid-profile name wlan-netAC-wlan-ssid-prof-wlan-ne

12、t ssid wlan-netAC-wlan-ssid-prof-wlan-net quit# 創(chuàng)立名為wlan-net的VAP模板，配置業(yè)務數(shù)據(jù)轉發(fā)模式、業(yè)務VLAN，并且引用平安模板和SSID模板。AC-wlan-view vap-profile name wlan-netAC-wlan-vap-prof-wlan-net forward-mode direct-forwardAC-wlan-vap-prof-wlan-net service-vlan vlan-id 101AC-wlan-vap-prof-wlan-net security-profile wlan-netAC-wlan

13、-vap-prof-wlan-net ssid-profile wlan-netAC-wlan-vap-prof-wlan-net quit# 配置AP組引用VAP模板，AP上射頻0和射頻1都使用VAP模板wlan-net的配置。AC-wlan-view ap-group name ap-group1AC-wlan-ap-group-ap-group1 vap-profile wlan-net wlan 1 radio 0AC-wlan-ap-group-ap-group1 vap-profile wlan-net wlan 1 radio 1AC-wlan-ap-group-ap-group

14、1 quit配置AP射頻的信道和功率,關閉射頻的信道和功率自動調優(yōu)功能。射頻的信道和功率自動調優(yōu)功能默認開啟，如果不關閉此功能則會導致手動配置不生效。AC-wlan-view rrm-profile name defaultAC-wlan-rrm-prof-default calibrate auto-channel-select disableAC-wlan-rrm-prof-default calibrate auto-t*power-select disableAC-wlan-rrm-prof-default quit# 配置AP射頻0的信道和功率。AC-wlan-view ap-id

15、0AC-wlan-ap-0 radio 0AC-wlan-radio-0/0 channel 20mhz 6Warning: This action may cause service interruption. ContinueY/NyAC-wlan-radio-0/0 eirp 127AC-wlan-radio-0/0 quit# 配置AP射頻1的信道和功率。AC-wlan-ap-0 radio 1AC-wlan-radio-0/1 channel 20mhz 149Warning: This action may cause service interruption. ContinueY/NyAC-wlan-radio-0/1 eirp 127AC-wlan-radio-0/1 qui