根据enspv510版ac与ap配置

1、基于 enspv510 版 ac与 ap配置四川托普信息职业技术学院唐小军、拓扑图卯的 i 例址通.10.2J.1O0.2-1&.25, iee.25Hl/24:地址也r»r 101,3-10.2Jr 101-2M/24.vltnH： IM 16.23.vUrilQlII tfldn: vIhiAMi业房式的101.2/24STAJap-groupl wl通力-也tvlanlOfS- 3 m. 1 一一R 1 I0N1AC2vlanlflMil0.21.iee,l/24LSW)defFylt贵全有枸ulan-n«t:安全策略 HPA-NPg+PMC+MS密科，J12

2、J4567、实验环境:三、相应设备：1 .无线 AP:5030, AC:6605,2 .交换：二层，S3700,三层，S57003 .电脑：STA 四、实现目标：1. STA3能通过无线方式访问到三层交换机接口地址，10.23.101.2五、配置思路1 .配置AP、AC和周边网络设备之间实现网络互通。2 .配置AP上线。a) 创建AP组，用于将需要进行相同配置的AP都加入到AP组，实现统一配置。b) 配置AC的系统参数，包括国家码、 AC与AP之间通信的源接口。c) 配置AP上线的认证方式并离线导入AP,实现AP正常上线。3 .配置 WLAN业务参数，实现 STAW问 WLAN网络功能。 六、

3、实验过程：1.二层交换机配置<HUAWEI>system-viewHUAWEI sysname SwitchSwitch vlan batch 100 101Switch interface Ethernet0/0/1Switch-Ethernet0/0/1Switch-Ethernet0/0/1Switch-Ethernet0/0/1Switch-Ethernet0/0/1Switch-Ethernet0/0/1port link-type trunkport trunk pvid vlan 100port trunk allow-pass vlan 100 101port-is

4、01ate enablequitSwitch interface gigabitethernet 0/0/2Switch-Ethernet0/0/2Switch-Ethernet0/0/2Switch-Ethernet0/0/2port link-type trunkport trunk allow-pass vlan 100 101quit2.三层交换机配置<Huawei> system-viewHuawei sysname RouterRouter vlan batch 101Routerinterface gigabitethernet 0/0/1Router-Gigabit

5、Ethernet0/0/1Router-GigabitEthernet0/0/1Router-GigabitEthernet0/0/1 Router interface vlanif 101port link-type trunkport trunk allow-pass vlan 101quitRouter-Vlanif101ip address 10.23.101.2 24Router-Vlanif101quit3 .配置AC与其它网络设备互通<AC6605> system-viewAC6605 sysname ACAC vlan batch 100 101AC interfa

6、ce gigabitethernet 0/0/1AC-GigabitEthernet0/0/1port link-type trunkAC-GigabitEthernet0/0/1port trunk allow-pass vlan100 101AC-GigabitEthernet0/0/1quitAC interface gigabitethernet 0/0/2AC-GigabitEthernet0/0/2port link-type trunkAC-GigabitEthernet0/0/2port trunk allow-pass vlan101AC-GigabitEthernet0/0

7、/2quit4 .在AC上配置DHCP服务器为STA和AP分配IP地址AC dhcp enableAC interface vlanif 100AC-Vlanif100ip address 10.23.100.124AC-Vlanif100dhcp select interfaceAC-Vlanif100quitAC interface vlanif 101AC-Vlanif101ip address 10.23.101.124AC-Vlanif101dhcp select interfaceAC-Vlanif101quit5 .在AC上配置AP上线#创建AP组，用于将相同配置的AP都加入同一

8、 AP组中。AC wlan AC-wlan-view ap-group name ap-group1 AC-wlan-ap-group-ap-group1 quit#创建域管理模板，在域管理模板下配置AC的国家码并在 AP组下引用域管理模板。AC-wlan-view regulatory-domain-profile name default AC-wlan-regulate-domain-defaultcountry-code cnAC-wlan-regulate-domain-defaultquitAC-wlan-view ap-group name ap-group1 AC-wlan-a

9、p-group-ap-group1 regulatory-domain-profile defaultWarning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continu e?Y/N: y AC-wlan-ap-group-ap-group1 quit AC-wlan-view quit #配置AC的源接口。AC capwap source interface vlanif 1006 .查看ap的ma

10、c地址做好记录以备用，并为 ap设置部署名称例如area_1W腐苒 归吊»当芾工翻邑二7 . AP具有射频0和射频1两个射频。例如 AP5030DN的射频0为2.4GHz射频，射频 1为5GHz射频。AC wlanAC-wlan-view ap auth-mode mac-authAC-wlan-view ap-id 0 ap-mac 60de-4476-e360AC-wlan-ap-0ap-name area_1AC-wlan-ap-0ap-group ap-group1Warning: This operation may cause AP reset. If the count

11、ry code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? Y/N:yAC-wlan-ap-0 quit8 .保证AP上电并与AC连接，当执行命令display ap all查看到AP的"Stat痔段为"nor" 时，表示AP正常上线。AC-wlan-viewdisplay ap allTotal AP information: nor : normal1ID MAC Name Group IP T

12、ype State STAUptime0 00e0-fcfe-1e60 area_1 ap-group1 10.23.100.106 AP5030DNnor 010STotal: 19 .配置WLAN业务参数，配置 WPA-WPA2+PSK+AES的安全策略，密码为“a1234567AC-wlan-view security-profile name wlan-netAC-wlan-sec-prof-wlan-netsecurity wpa-wpa2 psk pass-phrase a1234567 aesAC-wlan-sec-prof-wlan-netquit#创建名为“wla-net &

13、#39;的SSID模板，并配置 SSID名称为“wlannet AC-wlan-view ssid-profile name wlan-net AC-wlan-ssid-prof-wlan-netssid wlan-netAC-wlan-ssid-prof-wlan-netquit#创建名为“wla-net '的VAP模板，配置业务数据转发模式、业务 VLAN ,并且引用 安全模板和SSID模板。AC-wlan-view vap-profile name wlan-netAC-wlan-vap-prof-wlan-net AC-wlan-vap-prof-wlan-net AC-wla

14、n-vap-prof-wlan-net AC-wlan-vap-prof-wlan-net AC-wlan-vap-prof-wlan-netforward-mode direct-forward service-vlan vlan-id 101 security-profile wlan-net ssid-profile wlan-net quit#配置AP组引用VAP模板，AP上射频0和射频1者B使用VAP模板“wlamet '的配 置。AC-wlan-view ap-group name ap-group1AC-wlan-ap-group-ap-group1vap-profile

15、 wlan-net wlan 1 radio 0AC-wlan-ap-group-ap-groupIvap-profile wlan-net wlan 1 radio 1AC-wlan-ap-group-ap-groupIquit10.配置AP射频的信道和功率，关闭射频的信道和功率自动调优功能。射频的信道和功 率自动调优功能默认开启，如果不关闭此功能则会导致手动配置不生效。AC-wlan-view rrm-profile name defaultAC-wlan-rrm-prof-defaultcalibrate auto-channel-select disableAC-wlan-rrm-pr

16、of-defaultcalibrate auto-txpower-select disableAC-wlan-rrm-prof-defaultquit#配置AP射频0的信道和功率。AC-wlan-viewap-id 0AC-wlan-ap-0radio 0AC-wlan-radio-0/0 channel 20mhz 6Warning: This action may cause service interruption.Continue?Y/NyAC-wlan-radio-0/0 eirp 127AC-wlan-radio-0/0 quit#配置AP射频1的信道和功率。AC-wlan-ap-

17、0radio 1AC-wlan-radio-0/1 channel 20mhz 149Warning: This action may cause service interruption.Continue?Y/NyAC-wlan-radio-0/1 eirp 127AC-wlan-radio-0/1 quitAC-wlan-ap-0quit11 .验证配置结果，WLAN业务配置会自动下发给AP,配置完成后，通过执行命令displayvap ssid wlan-net查看如下信息，当 "Statu颈显示为"ON寸，表示AP对应的射频 上的VAP已创建成功。-wxaia- v

18、 Ji.tz w j _! j_o|j j.ay vajp lAC-wlan-viewJdisplay vap ssid wlan-necInfo: This operation xay tate a fewplease waitwrD ; WLAW IDAP 工口AP najne RfIDHIDR55I口Autb typeST ASSID0aieal 010GEa-FCFE-lE60ON WPA/WPA2-PSK1wlin-net0 arcBl 11 00E0FCFE*lE70 OH0 wlan-neL12 . STA搜索到名为“wlamet '的无线网络，输入密码“ a123456正常关联后，在 AC上执行display station ssid wlan -net命令，可以查看到用户已经接入到无线网络“wlamet ”中。在STA3上做如下操作:"M3-处-SEMia4匿西*飒:同美士UD力映司花灿VAPM1CliW一片陆之引 二 wtanrutNULL来准横8空代