分部AP通过公网注册上总部AC配置案例

  目前无线控制器在总部，分部有一台瘦AP。现在想要实现分部AP在总部无线控制器上进行注册。

1、分部侧路由器配置

interface Ethernet0/0                              //配置外网接口

nat outbound

 ip address 1.1.1.1 255.255.255.0

#

interface Vlan-interface1                          //内网接口设置

 ip address 192.168.1.1 255.255.255.0

#

interface Ethernet0/1

 port link-mode bridge

#

dhcp server ip-pool 1

 network 192.168.1.0 mask 255.255.255.0

 gateway-list 192.168.1.1

option 43 hex 80070000 01010101 02

#

dhcp enable

ip route-static 0.0.0.0 0.0.0.0 1.1.1.2

注：option43属性中写的地址为总部侧公网地址

2、总部侧设备配置：

interface GigabitEthernet0/0                             //总部侧外网配置

 port link-mode route

 nat outbound

 nat server 1 protocol udp global current-interface 12222 inside 192.168.1.2 12222

 nat server 2 protocol udp global current-interface 12223 inside 192.168.1.2 12223

 ip address 1.1.1.2 255.255.255.0

#

interface Vlan-interface1                                 //配置内网接口

 ip address 192.168.1.1 255.255.255.0

#

interface GigabitEthernet0/1

 port link-mode bridge

#

dhcp server ip-pool vlan1

network 192.168.1.0 mask 255.255.255.0

 gateway-list 192.168.1.1

#

dhcp enable

#

ip route-static 0.0.0.0 0.0.0.0 1.1.1.1

3、WAC361的配置：

wlan auto-ap enable                           \\开启自动注册和自动固化

 wlan auto-persistent enable

#

interface Vlan-interface1                       \\LAN口IP地址最好固定

 ip address 192.168.1.2 255.255.255.0

#

 ip route-static 0.0.0.0 0.0.0.0 192.168.1.1        \\设置默认路由

实验验证：(AP上收集的信息)

BootWare Validating...

Press Ctrl+B to enter extended boot menu...          \\尝试本地获取版本

Starting to get the main application file--flash:/wa2600a_fit.bin!

The main application file does not exist--flash:/wa2600a_fit.bin!

Starting to get the backup application file--flash:/backup.bin!

The backup application file does not exist--flash:/backup.bin!

Starting to get the secure application file--flash:/secure.bin!

The secure application file does not exist--flash:/secure.bin!

Booting App fails!                                 \\获取失败后获取地址

Trying to get the IP address from the DHCP server......

DHCP server&＃39;s IP address is 192.168.0.1

Client&＃39;s assigned address is 192.168.0.2

DNS domain name got from DHCP server is

DNS server&＃39;s IP address is 0.0.0.0

Default Gateway&＃39;s IP address is 192.168.0.1

This client&＃39;s subnet mask is 255.255.255.0

The length of option 43 is: 9

 Change State : Idle to Broadcast Discovery

 Change State : Broadcast Discovery to Unicast Discovery

Use Option 43:

Getting AC&＃39;s IP Address 1.1.1.2               //获取到对端公网的IP地址

 Change State : Unicast Discovery to Join

 Change State : Join to JoinAck

 Change State : JoinCfm to Image Download..........................................................

........................................................................

 [State : ImageLoad] Image download successful

 [State : Idle] Reset request, rebooting the AP

Rebooting......

System is starting...                                //注册成功，系统启动

在AC上可以查询到AP的信息

1、在这种组网中分部侧DHCP服务器需要支持DHCP的option 43属性，给AP下发IP地址的同时下发AC的IP地址。

2、总部侧路由器需要支持映射，将用户AP注册的UDP12222和UDP的12223端口映射被AC。因为注册使用的UDP端口为12222和12223端口。

3、在此类组网中，分部侧的无线设备是不能和分部的网段互访的。因为分部侧流量无法通过LWAPP隧道。如果想要互访需要在分部和总部侧做VPN，利用VPN来连接两个内网。

4、客户端连入后还是会在获取总部侧的IP地址，进行在AC上进行集中转发。