V5版本，胖AP做了两个SSID，STA之间不互通

下面为AP所有配置，上层设备未作隔离，仅同AP客户端不能胡同，求解答

[AP01]dis cu

# 

 version 5.20, Release 1508P11 

# 

 sysname AP01 

# 

 domain default enable system 

#

 telnet server enable 

# 

 port-security enable 

#

 password-recovery enable 

# 

 undo attack-defense tcp fragment enable 

#

 vlan 1

 # 

vlan 31 

# 

domain system access-limit disable state active idle-cut disable self-service-url disable 

# 

user-group system group-attribute allow-guest 

#

 local-user admin 

 password cipher $c$3$ALdCBGDUE/n7zw05K3RHQyWb0Ofub0GGW8ZOuQ== 

 authorization-attribute level 3 

 service-type telnet service-type web

 #

 wlan rrm 

 dot11a mandatory-rate 6 12 24 

 dot11a supported-rate 9 18 36 48 54 

 dot11b mandatory-rate 1 2 

 dot11b supported-rate 5.5 11 

 dot11g mandatory-rate 1 2 5.5 11 

 dot11g supported-rate 6 9 12 18 24 36 48 54 

#

 wlan service-template 1 crypto

 ssid HandSome_5G

 cipher-suite tkip 

 cipher-suite ccmp 

 security-ie rsn 

 security-ie wpa

 key-derivation sha1-and-sha256 

 service-template enable 

# 

wlan service-template 2 crypto

 ssid printer

 beacon ssid-hide

 cipher-suite tkip 

 cipher-suite ccmp 

 security-ie rsn 

 security-ie wpa 

 service-template enable

 # 

cwmp undo cwmp enable

 #

 interface NULL0 

# 

interface Vlan-interface31

 ip address 192.168.31.11 255.255.255.0

 # 

interface GigabitEthernet1/0/1 

 port link-type trunk

 undo port trunk permit vlan 1

 port trunk permit vlan 2 to 4094

 port trunk pvid vlan 31 

# 

interface WLAN-BSS32

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 31 untagged

 port hybrid pvid vlan 31

 port-security port-mode psk

 port-security tx-key-type 11key 

 port-security preshared-key pass-phrase cipher $c$3$uoBoL3m13P+uQU3xEqJ0E1k5/Oebw9vHTUvfhw== 

# 

interface WLAN-BSS35

 port link-type hybrid

 undo port hybrid vlan 1

 port hybrid vlan 31 untagged

 port hybrid pvid vlan 31

 port-security port-mode psk

 port-security tx-key-type 11key

 port-security preshared-key pass-phrase cipher $c$3$uGEYTUj5Uz4Hqug5Jleq3oiDhsGVkq1rPC2eiA==

 # 

interface WLAN-Radio1/0/1

 service-template 1 interface wlan-bss 32

 #

 interface WLAN-Radio1/0/2

 service-template 2 interface wlan-bss 35

 #

 arp-snooping enable

 #

 load xml-configuration 

# 

 load tr069-configuration

 # 

user-interface con 0 user-interface vty 0 4 authentication-mode scheme 

#

 return [AP01]