ac旁挂式组网，想到这么多先写着

企业内部AC旁挂式组网（简单）

Haiwei-AC+AP的实验配置_HUAWEI

VLAN规划表

VLAN ID

IP地址段

用途

VLAN 10

172.16.10.0/28

ISP对接

VLAN 100

10.1.100.0/24

设备管理

VLAN 101

10.1.101.0/24

无线

VLAN 200

10.1.200.0/24

AC

端口规划表

本端设备

端口号

端口类型

对端设备

对端接口

core_SW

GE0/0/1

Access

ISP

GE0/0/0

core_SW

GE0/0/2

Trunk

AC

GE0/0/1

core_SW

GE0/0/3

Trunk

access_SW

GE0/0/1

core_SW

GE0/0/4

Trunk

outdoor_AP

GE0/0/0

项目实施

一、配置IP地址和所属VLAN

core_SW的配置

[core_SW]vlan batch 10 100 to 101 200
Info: This operation may take a few seconds. Please wait for a moment...done.
#
[core_SW]interface Vlanif10
[core_SW-Vlanif10]ip address 172.16.10.1 255.255.255.240
#
[core_SW]interface Vlanif100
[core_SW-Vlanif100]ip address 10.1.100.254 255.255.255.0
#
[core_SW]interface Vlanif101
[core_SW-Vlanif101]ip address 10.1.101.254 255.255.255.0
#
[core_SW]nterface Vlanif200
[core_SW-Vlanif200]ip address 10.1.200.2 255.255.255.0
#
[core_SW]port-group group-member g0/0/3 to g0/0/4
[core_SW-port-group]port link-type trunk 
[core_SW-GigabitEthernet0/0/3]port link-type trunk 
[core_SW-GigabitEthernet0/0/4]port link-type trunk 
[core_SW-port-group]port trunk allow-pass vlan all 
[core_SW-GigabitEthernet0/0/3]port trunk allow-pass vlan all 
[core_SW-GigabitEthernet0/0/4]port trunk allow-pass vlan all 
[core_SW-port-group]port trunk pvid vlan 100
[core_SW-GigabitEthernet0/0/3]port trunk pvid vlan 100
[core_SW-GigabitEthernet0/0/4]port trunk pvid vlan 100
[core_SW]interface g0/0/2
[core_SW-GigabitEthernet0/0/2]port link-type trunk 
[core_SW-GigabitEthernet0/0/2]port trunk allow-pass vlan all

AC的配置

[AC6005]vlan 200
#
[AC6005]interface Vlanif200
[AC6005-Vlanif200]ip address 10.1.200.1 255.255.255.0
#
[AC6005]interface g0/0/1
[AC6005-GigabitEthernet0/0/2]port link-type trunk 
[AC6005-GigabitEthernet0/0/2]port trunk allow-pass vlan all

ISP的配置

[ISP]valn 10
#
[ISP]interface GigabitEthernet0/0/0
[ISP-GigabitEthernet0/0/0]ip address 172.16.10.2 255.255.255.240 
[ISP]interface lookback 0
[ISP-LoopBack0]ip address 114.114.114.114 32

二、DHCP服务的配置

[core_SW]ip pool sta
[core_SW-ip-pool-sta]gateway-list 10.1.101.254
[core_SW-ip-pool-sta]network 10.1.101.0 mask 255.255.255.0
[core_SW-ip-pool-sta]dns-list 114.114.114.114
#
[core_SW]ip pool work
[core_SW-ip-pool-work]gateway-list 10.1.100.254
[core_SW-ip-pool-work]network 10.1.100.0 mask 255.255.255.0
[core_SW-ip-pool-work]dns-list 114.114.114.114
[core_SW-ip-pool-work] option 43 sub-option 2 ip-address 10.1.200.1
#
[core_SW]interface Vlanif100
[core_SW-Vlanif100]ip address 10.1.100.254 255.255.255.0
[core_SW-Vlanif100]dhcp select global
#
[core_SW]interface Vlanif101
[core_SW-Vlanif101]ip address 10.1.101.254 255.255.255.0
[core_SW-Vlanif101]dhcp select global

三、静态路由配置

core_SW

[core_SW]ip route-static 0.0.0.0 0.0.0.0 172.16.10.2

ISP

[ISP]ip route-static 0.0.0.0 0.0.0.0 172.16.10.1

AC

[AC6005]ip route-static 10.1.100.0 255.255.255.0 10.1.200.2

四、配置AC无线控制器，上线AP无线接入点

配置ap-group组

[AC6005]wlan 
[AC6005-wlan-view]ap-group NAME FLOW                  #配置AP组，将AP集中管理
[AC6005-wlan-view]regulatory-domain-profile name CN   #配置监管提议
[AC6005-wlan-regulate-domain-CN] country-code CN      #配置国家代码,限制AP信号发射强度符合设定国家标准
[AC6005-wlan-regulate-domain-CN]q
[AC6005-wlan-view]ap-group NAME FLOW   
[AC6005-wlan-ap-group-FLOW]regulatory-domain-profile CN   #应用监管提议

AP上线

[AC6005]capwap source interface vlanif200                    #配置CAPWAP，用于与AP相连的接口
[AC6005-wlan-view]ap auth-mode mac-auth   #配置ap认证方式，默认是MAC
#
[AC6005-wlan-view]ap-id 1 ap-mac HHHH-HHHH-HHHH
[AC6005-wlan-ap-1]ap-name indoor_AP                          #配置ap的名字
[AC6005-wlan-ap-1]ap-group FLOW                              #配置ap的组
#
[AC6005-wlan-view]ap-id 2 ap-mac HHHH-HHHH-HHHH
[AC6005-wlan-ap-2]ap-name outdoor_AP                         #配置ap的名字
[AC6005-wlan-ap-2]ap-group FLOW                               #配置ap的组

配置无线网提议

[AC6005-wlan-view]ssid-profile name 406-WLAN    #配置无线策略
[AC6005-wlan-ssid-prof-406-WLAN]ssid 406    #配置无线名称
#
[AC6005-wlan-view]security-profile name 406-WLAN   #配置无线密码策略
[AC6005-wlan-sec-prof-VS-wlan]security wpa-wpa2 psk pass-phrase huawei@406 aes
#
[AC6005-wlan-view]vap-profile name 406-WLAN   #配置综合策略
[AC6005-wlan-vap-prof-406-WLAN]forward-mode direct-forward 
[AC6005-wlan-vap-prof-406-WLAN]service-vlan vlan-id 101
[AC6005-wlan-vap-prof-406-WLAN]ssid-profile 406-WLAN
[AC6005-wlan-vap-prof-406-WLAN]security-profile 406-WLAN

效果

1、AP-上线效果

[AC6005-wlan-view]di ap all
Info: This operation may take a few seconds. Please wait for a moment.done.
Total AP information:
nor  : normal          [2]
--------------------------------------------------------------------------------
----------------
ID   MAC            Name       Group IP           Type            State STA Upti
me
--------------------------------------------------------------------------------
----------------
1    00e0-fcf8-70e0 indoor_AP  FLOW  10.1.100.252 AP4050DN-E      nor   0   1H:7
M:7S
2    00e0-fc80-0800 outdoor_AP FLOW  10.1.100.251 AP5030DN        nor   1   1H:7
M:11S
--------------------------------------------------------------------------------
----------------
Total: 2

2、wlan网络的效果

Haiwei-AC+AP的实验配置_Group_02

Haiwei-AC+AP的实验配置_组网_03

该实验为2021网络工程师下半年试题一，参照于该视频​​学习​​

学习中使用的链接：