简单的ACFIT-AP无线局域网实验

XXX,实验5.3简单的AC+FITAP无线局域网实验,实验背景,FITAP是新兴的一种WLAN组网模式，其相对FATAP方案增加了WirelessSwitch（无线交换机）作为中央集中控制管理设备，原先在FATAP自身上承载的认证终结、漫游切换、动态密钥等复杂业务功能转移到WirelessSwitch上来进行。AP与WirelessSwitch之间通过隧道方式进行通信，之间可以跨越局域网络甚至广域网进行连接，因此减少了单个AP的负担，提高了整网的工作效率。同时由于FITAP方案这种集中式管理的特点，可以很方便的通过升级WirelessSwitch的软件版本实现更丰富业务功能的扩展。FITAP的组网有三种模式：FITAP与无线交换机相连，无线交换机接入IP网络；FITAP与一般交换机相连，一般交换机与无线交换机相连，无线交换机再接入IP网络，FITAP与无线交换机之间通过隧道进行通信；FITAP与一般交换机相连，一般交换机接入IP网络，IP网络通过无线交换机接入Internet，通常在网络规模较大且存在分支机构应用无线网络的环境。,实验背景,表5.1FATAP方案与FITAP方案的不同,实验目的与内容,【实验目的】掌握简单的FITAP无线局域网搭建技术。【实验内容】搭建FATAP无线局域网，并通过交换机将无线局域网接入IP网。,实验设备,一个具有无线网卡的计算机，一个FITAP，一个三层交换机，一个无线控制器，一个DHCP服务器，双绞线三根，配置线一根。网络拓扑结构如图5.10所示。图5.10简单的AC+FITAP无线局域网实验拓扑结构图,实验步骤,1.设置无线控制器。（1）初始化无线控制模块，设置相应的接口为Trunk接口并允许所有的VLAN通过。system-viewH3Cinterfacevlan-interface1H3C-vlan-interface1ipaddress192.168.1.99255.255.255.0H3C-vlan-interface1quitH3CsysnameWC/无线控制模块更名为WCWCinterfaceGigabitEthernet1/0/1WC-GigabitEthernet1/0/1portlink-typetrunkWC-GigabitEthernet1/0/1porttrunkpermitvlanallWC-GigabitEthernet1/0/1quitWCquit（2）初始化交换模块，设置相应的接口为Trunk接口并允许所有的VLAN通过。oapconnectslot0/进入交换模块system-viewH3CsysnameSC/交换模块更名为SCSCinterfaceGigabitEthernet1/0/2SC-GigabitEthernet1/0/2portlink-typetrunkSC-GigabitEthernet1/0/2porttrunkpermitvlanall,实验步骤,SC-GigabitEthernet1/0/2quitSCCtrl+K/返回无线控制模块（3）开启无线服务，创建VLAN，建立二层虚拟接口system-viewWCwlanenableWCvlan2to4WCinterfaceWLAN-ESS1WC-WLAN-ESS1portaccessvlan4（4）创建无线服务模板，配置SSID和认证方式，与虚拟接口1绑定并开启服务模板1WC-WLAN-ESS1quitWCwlanservice-template1clearWC-wlan-st-1ssidjsjxyWC-wlan-st-1authentication-methodopen-systemWC-wlan-st-1bindWLAN-ESS1WC-wlan-st-1service-templateenable,实验步骤,（5）设置注册AP参数WC-wlan-st-1quitWCwlanapjsjzxmodelWA2600WC-wlan-ap-jsjzxserial-id625630A22W7662563265/AP对应的序列号（6）创建射频接口1，工作在802.11g，绑定服务模板1并开启射频接口WC-wlan-ap-jsjzxradio1typedot11gWC-wlan-ap-jsjzx-radio-1service-template1WC-wlan-ap-jsjzx-radio-1radioenableWC-wlan-ap-jsjzx-radio-1quitWC-wlan-ap-jsjzxquit（7）设置路由WCiproute-static0.0.0.00.0.0.0192.168.1.254,实验步骤,2.设置三层交换机。（1）建立相应的VLAN并设置接口地址system-viewH3CsysnameSWITCHSWITCHvlan2-4SWITCHinterfacevlan-interface1SWITCH-vlan-interface1ipaddress192.168.1.25424SWITCH-vlan-interface1quitSWITCHinterfacevlan-interface2SWITCH-vlan-interface2ipaddress192.168.2.25424SWITCH-vlan-interface2quitSWITCHinterfacevlan-interface3SWITCH-vlan-interface3ipaddress192.168.3.25424SWITCH-vlan-interface3quitSWITCHinterfacevlan-interface4SWITCH-vlan-interface4ipaddress192.168.4.25424SWITCH-vlan-interface4quit（2）在FITAP无外接电源的情况下，若交换模块的外部千兆以太网口2连接的是FITAP，那么千兆接口2要开启POE供电。,实验步骤,SWITCHinterfaceGigabitEthernet1/0/2SWITCH-GigabitEthernet1/0/2poeenableSWITCH-GigabitEthernet1/0/2quit（3）开启DHCP服务，指明DHCP服务器地址，在VLAN接口2上告知AP如何获取地址，VLAN接口4上告知无线客户端如何获取地址，完成DHCP中继的设置SWITCHdhcpenableSWITCHdhcprelayserver-group1ip192.168.3.99SWITCHinterfacevlan-interface2SWITCH-vlan-interface2dhcpselectrelaySWITCH-vlan-interface2dhcpserver-select1SWITCH-vlan-interface2quitSWITCHinterfacevlan-interface4SWITCH-vlan-interface4dhcpselectrelaySWITCH-vlan-interface4dhcpserver-select1SWITCH-vlan-interface4quit,实验步骤,（4）设置连接DHCP服务器的接口的信息。SWITCHinterfaceGigabitEthernet1/0/3SWITCH-GigabitEthernet1/0/3portaccessvlan3SWITCH-GigabitEthernet1/0/3quit（5）设置路由。SWITCHiproute-static0.0.0.00.0.0.0192.168.1.993.配置DHCP服务器。此处略。也可以使用无线控制交换一体机和FITAP构建WLAN，即图5.10中的无线控制器和三层交换机为一台复合设备，DHCPServer也搭建在这样的设备上。这种结构下需要做如下配置：（1）设置无线控制器。设置WC内部千兆以太网口1的参数。system-viewH3CsysnameWC/无线控制模块更名为WCWCinterfaceGigabitEthernet1/0/1,实验步骤,WC-GigabitEthernet1/0/1portlink-typetrunkWC-GigabitEthernet1/0/1porttrunkpermitvlanallWC-GigabitEthernet1/0/1quit设置虚接口地址，虚接口1用于管理，虚接口3用于DHCPServer。WCvlan2to4WCinterfacevlan-interface1WC-vlan-interface1ipaddress192.168.1.99255.255.255.0WC-vlan-interface1quitWCinterfacevlan-interface3WC-vlan-interface3ipaddress192.168.3.99255.255.255.0WC-vlan-interface3quit开启DHCP服务，在WC上创建地址池1，用于AP获取地址，为跨越三层网络实现AP的注册，使用Option43数值，Option的固定数值是8007000001，192.168.1.99的十六进制表示形式为C0A80163；在WC上创建地址池2，用于无线客户端获取地址。,实验步骤,WCdhcpenableWCdhcpserverip-pool1WC-dhcp-server-ip-pool1network192.168.2.0mask255.255.255.0WC-dhcp-server-ip-pool1gateway-list192.168.2.254WC-dhcp-server-ip-pool1option43hex8007000001C0A80163WC-dhcp-server-ip-pool1quitWCdhcpserverip-pool2WC-dhcp-server-ip-pool2network192.168.4.0mask255.255.255.0WC-dhcp-server-ip-pool2gateway-list192.168.4.254WC-dhcp-server-ip-pool2quit设置禁止分配的地址。WCdhcpserverforbidden-ip192.168.2.254WCdhcpserverforbidden-ip192.168.4.254创建无线接口1，属于VLAN4。WCinterfaceWLAN-ESS1,实验步骤,WC-WLAN-ESS1portaccessvlan4WC-WLAN-ESS1quit创建服务模板3并开启，明文，与无线接口1绑定。WCwlanservice-template3clearWC-wlan-st-3ssidjsjxyWC-wlan-st-3bindWLAN-ESS1WC-wlan-st-3service-templateenableWC-wlan-st-3quit注册FITAP，创建射频接口1并开启，默认工作模式，与服务模板3绑定。WCwlanapjsjzxmodelWA2600WC-wlan-ap-jsjzxserial-id625632A22W6562563076/AP对应的序列号WC-wlan-ap-jsjzxradio1WC-wlan-ap-jsjzx-radio-1service-template3WC-wlan-ap-jsjzx-radio-1radioenableWC-wlan-ap-jsjzx-radio-1quitWC-wlan-ap-jsjzxquit,实验步骤,设置WC路由，指向交换模块SWITCH的管理地址。WCiproute-static0.0.0.00.0.0.0192.168.1.254（2）设置三层交换机。设置DHCP中继，指明DHCPServer地址。system-viewH3CsysnameSWITCHSWITCHdhcprelayhandenableSWITCHdhcp-server1ip192.168.3.99创建VLAN2VLAN4，设置VLAN1的管理地址；设置VLAN2接口地址，将AP的DHCPDiscovery报文转移至DHCPServer；设置VLAN4接口地址，将无线客户端的DHCPDiscovery报文转移至DHCPServer；设置VLAN2接口地址；设置VLAN3接口地址。SWITCHvlan2to4SWITCHinterfacevlan-interface1SWITCH-vlan-interface1ipaddress192.168.1.254255.255.255.0SWITCH-vlan-interface1quitSWITCHinterfacevlan-interface2,实验步骤,SWITCH-vlan-interface2ipaddress192.168.2.254255.255.255.0SWITCH-vlan-interface2dhcpserver1SWITCH-vlan-interface2quitSWITCHinterfacevlan-interface3SWITCH-vlan-interface3ipaddress192.16