13-AP管理組典型配置舉例

AP管理組典型配置舉例Copyright?2014杭州華三通信技術(shù)有限公司版權(quán)所有，保留一切權(quán)利。非經(jīng)本公司書面許可，任何單位和個(gè)人不得擅自摘抄、復(fù)制本文檔內(nèi)容的部分或全部，并不得以任何形式傳播。本文檔中的信息可能變動(dòng)，恕不另行通知。[AC-WLAN-ESS1]quit配置無線服務(wù)#創(chuàng)建clear類型的服務(wù)模板1。[AC]wlanservice-template1clear#設(shè)置當(dāng)前服務(wù)模板的SSID為service。[AC-wlan-st-1]ssidservice#將WLAN-ESS1接口綁定到服務(wù)模板1。[AC-wlan-st-1]bindwlan-ess1#啟用無線服務(wù)。[AC-wlan-st-1]service-templateenable[AC-wlan-st-1]quit創(chuàng)建AP組#創(chuàng)建AP1的管理模板，名稱為officeap1，型號(hào)選擇WA2620E-AGN，并配置序列號(hào)。[AC]wlanapofficeap1modelWA2620E-AGN[AC-wlan-ap-officeap1]serial-id210235A29G007C000020[AC-wlan-ap-officeap1]quit#創(chuàng)建AP2的管理模板，名稱為officeap2，型號(hào)選擇WA2620E-AGN，并配置序列號(hào)。[AC]wlanapofficeap2modelWA2620E-AGN[AC-wlan-ap-officeap2]serial-id210235A29G007C000021[AC-wlan-ap-officeap2]quit#創(chuàng)建AP組名稱為test-group，將officeap1和officeap2加入AP組內(nèi)。[AC]wlanap-grouptest-group[AC-ap-group-test-group]apofficeap1[AC-ap-group-test-group]apofficeap2配置AP組的無線接入功能#將服務(wù)模板1映射到AP組內(nèi)成員AP的2.4GHz射頻，設(shè)置綁定到射頻接口的VLAN編號(hào)為VLAN300。[AC-ap-group-test-group]dot11bgservice-template1vlan-id300#開啟AP組內(nèi)成員AP的2.4GHz射頻。[AC-ap-group-test-group]dot11bgradioenable[AC-ap-group-test-group]quitSwitch的配置#創(chuàng)建VLAN100和VLAN300，其中VLAN100用于轉(zhuǎn)發(fā)AC和AP間LWAPP隧道內(nèi)的流量，VLAN300為無線客戶端接入的VLAN。<Switch>system-view[Switch]vlan100[Switch-vlan100]quit[Switch]vlan300[Switch-vlan300]quit#配置Switch與AC相連的GigabitEthernet1/0/1接口屬性Trunk，禁止VLAN1報(bào)文通過，當(dāng)前Trunk口的PVID為100，允許VLAN100和VLAN300通過。[Switch]interfacegigabitethernet1/0/1[Switch-GigabitEthernet1/0/1]portlink-typetrunk[Switch-GigabitEthernet1/0/1]undoporttrunkpermitvlan1[Switch-GigabitEthernet1/0/1]porttrunkpermitvlan100300[Switch-GigabitEthernet1/0/1]porttrunkpvidvlan100[Switch-GigabitEthernet1/0/1]quit#配置Switch與AP1相連的GigabitEthernet1/0/2接口屬性為Access，并允許VLAN100通過。[Switch]interfacegigabitethernet1/0/2[Switch-GigabitEthernet1/0/2]portlink-typeaccess[Switch-GigabitEthernet1/0/2]portaccessvlan100#配置Switch與AP1相連的GigabitEthernet1/0/2接口使能PoE功能。[Switch-GigabitEthernet1/0/2]poeenable[Switch-GigabitEthernet1/0/2]quit#配置Switch與AP2相連的GigabitEthernet1/0/3接口屬性為Access，并允許VLAN100通過。[Switch]interfacegigabitethernet1/0/3[Switch-GigabitEthernet1/0/3]portlink-typeaccess[Switch-GigabitEthernet1/0/3]portaccessvlan100#配置Switch與AP2相連的GigabitEthernet1/0/3接口使能PoE功能。[Switch-GigabitEthernet1/0/3]poeenable[Switch-GigabitEthernet1/0/3]quit#配置Switch與DHCP服務(wù)器相連的GigabitEthernet1/0/4接口屬性為Access，并允許VLAN100通過。[Switch]interfacegigabitethernet1/0/4[Switch-GigabitEthernet1/0/4]portlink-typeaccess[Switch-GigabitEthernet1/0/4]portaccessvlan100[Switch-GigabitEthernet1/0/4]quit驗(yàn)證配置#使用displaywlanapall命令查看到AP1、AP2與AC已經(jīng)建立連接。[AC]displaywlanapallTotalNumberofAPsconfigured:2TotalNumberofconfiguredAPsconnected:2TotalNumberofautoAPsconnected:0APProfilesState:I=Idle,J=Join,JA=JoinAck,IL=ImageLoadC=Config,R=Run,KU=KeyUpdate,KC=KeyCfmM=Master,B=BackupAPNameStateModelSerial-IDofficeap1R/MWA2620E-AGN210235A29G007C000020officeap2R/MWA2620E-AGN210235A29G007C000021#使用displaywlanclient命令用來查看無線客戶端的信息，觀察到Client從SSIDservice接入，能成功上線。<AC>displaywlanclientTotalNumberofClients:1ClientInformationSSID:serviceMACAddressUserNameAPID/RIDIPAddressVLAN0015-0062-6580-NA-1/20.0.0.0300配置文件#vlan100#vlan200#vlan300#wlanservice-template1clearssidservicebindWLAN-ESS1service-templateenable#wlanap-grouptest-groupapofficeap1apofficeap2dot11bgservice-template1vlan-id300dot11bgradioenable#interfaceVlan-interface100ipaddress150.100.1.1255.255.0.0#interfaceVlan-interface300ipaddress131.100.10.1255.255.0.0#interfaceGigabitEthernet1/0/1portlink-typetrunkporttrunkpermitvlan100300undoporttrunkpermitvlan1porttrunkpvidvlan100#interfaceWLAN-ESS1portlink-typehybridundoporthybridvlan1porthybridvlan200untaggedporthybridpvidvlan200mac-vlanenable#wlanapofficeap1modelWA2620E-AGNid1serial-id210235A29G007C000020radio1radio2service-template1vlan-id300radioenable#wlanapofficeap2modelWA2620E-AGNid2serial-id210235A29G007C000021radio1radio2service-template1vlan-id300radioenable#Switch：#vlan100#vlan300#interfaceGigabitEthernet1/0/1portlink-typetrunkporttrunkpermitvlan100300undoporttrunkpermitvlan1porttrunkpvidvlan100#interfaceGigabitEthernet1/0/2portlink-typeaccessportaccessv