组网说明
本案例采用H3C HCL模拟器的无线产品部署AC+AP跨公网注册的开局。具体如下:
(1)本案例采用本地转发的方式。
(2)AP在分部,AC在总部,通过跨三层和公网实现注册上线和无线业务的接入。
(3)VLAN10用于AP注册上线,VLAN20用于给无线终端分配IP地址。
配置思路
(1)提前收集AP的序列号。
(2)部署基础网络。
(3)配置总部和分部的NAT,并在总部的路由器上配置NAT映射将AC映射出来。
(1)基础网络配置。
SW1:
<H3C>sys
System View: return to User View with Ctrl+Z.
[H3C]sysname SW1
[SW1]vlan 10
[SW1-vlan10]quit
[SW1]vlan 20
[SW1-vlan20]quit
[SW1]int vlan 10
[SW1-Vlan-interface10]ip address 192.168.10.1 24
[SW1-Vlan-interface10]quit
[SW1]int vlan 20
[SW1-Vlan-interface20]ip address 192.168.20.1 24
[SW1-Vlan-interface20]quit
[SW1]dhcp enable
[SW1]dhcp server ip-pool vlan10
[SW1-dhcp-pool-vlan10]network 192.168.10.0 mask 255.255.255.0
[SW1-dhcp-pool-vlan10]gateway-list 192.168.10.1
[SW1-dhcp-pool-vlan10]option 138 ip-address 202.2.100.2 //指向到AC映射到公网的IP地址。
[SW1-dhcp-pool-vlan10]quit
[SW1]dhcp server ip-pool vlan20
[SW1-dhcp-pool-vlan20]network 192.168.20.0 mask 255.255.255.0
[SW1-dhcp-pool-vlan20]gateway-list 192.168.20.1
[SW1-dhcp-pool-vlan20]dns-list 114.114.114.114
[SW1-dhcp-pool-vlan20]quit
[SW1]int gi 1/0/2
[SW1-GigabitEthernet1/0/2]po li tr
[SW1-GigabitEthernet1/0/2]undo po tr pe vlan 1
[SW1-GigabitEthernet1/0/2]po tr pe vlan 10 20
[SW1-GigabitEthernet1/0/2]port trunk pvid vlan 10
[SW1-GigabitEthernet1/0/2]quit
[SW1]ospf 1 router-id 10.0.0.1
[SW1-ospf-1]area 0.0.0.0
[SW1-ospf-1-area-0.0.0.0]network 10.0.0.0 0.0.0.3
[SW1-ospf-1-area-0.0.0.0]network 192.168.10.0 0.0.0.255
[SW1-ospf-1-area-0.0.0.0]network 192.168.20.0 0.0.0.255
[SW1-ospf-1-area-0.0.0.0]quit
[SW1-ospf-1]quit
R1:
[H3C]sysname R1
[R1]int gi 0/0
[R1-GigabitEthernet0/0]ip address 10.0.0.2 30
[R1-GigabitEthernet0/0]quit
[R1]ospf 1 router 10.0.0.2
[R1-ospf-1]area 0.0.0.0
[R1-ospf-1-area-0.0.0.0]network 10.0.0.0 0.0.0.3
[R1-ospf-1-area-0.0.0.0]import-route static
[R1-ospf-1]default-route-advertise
[R1-ospf-1]quit
[R1]int gi 0/1
[R1-GigabitEthernet0/1]ip address 202.1.100.2 30
[R1-GigabitEthernet0/1]nat outbound
[R1-GigabitEthernet0/1]quit
[R1]ip route-static 0.0.0.0 0.0.0.0 202.1.100.1
ISP:
<H3C>sys
System View: return to User View with Ctrl+Z.
[H3C]sysname ISP
[ISP]int gi 0/1
[ISP-GigabitEthernet0/1]ip address 202.1.100.1 30
[ISP-GigabitEthernet0/1]quit
[ISP]int gi 0/0
[ISP-GigabitEthernet0/0]ip address 202.2.100.1 30
[ISP-GigabitEthernet0/0]quit
R2:
[R2]int gi 0/1
[R2-GigabitEthernet0/1]ip address 10.1.1.2 30
[R2-GigabitEthernet0/1]quit
[R2]int gi 0/0
[R2-GigabitEthernet0/0]ip address 202.2.100.2 30
[R2-GigabitEthernet0/0]nat outbound
[R2-GigabitEthernet0/0]nat server global current-interface inside 10.1.1.1
[R2-GigabitEthernet0/0]quit
[R2]ip route-static 0.0.0.0 0.0.0.0 202.2.100.1
AC1:
<H3C>sys
System View: return to User View with Ctrl+Z.
[H3C]sysname AC1
[AC1-GigabitEthernet1/0/1]port link-mode route
[AC1-GigabitEthernet1/0/1]ip address 10.1.1.2 30
[AC1-GigabitEthernet1/0/1]quit
[AC1]ip route-static 0.0.0.0 0.0.0.0 10.1.1.2
(2)配置AC+AP注册上线。
AC1:
[AC1]vlan 10
[AC1-vlan10]quit
[AC1]vlan 20
[AC1-vlan20]quit
[AC1]wlan auto-persistent enable
[AC1]wlan global-configuration
[AC1-wlan-global-configuration]firmware-upgrade disable
[AC1-wlan-global-configuration]quit
[AC1]wlan service-template weijianing
[AC1-wlan-st-weijianing]ssid weijianing
[AC1-wlan-st-weijianing]vlan 20
[AC1-wlan-st-weijianing]client forwarding-location ap vlan 20
[AC1-wlan-st-weijianing]service-template enable
[AC1-wlan-st-weijianing]quit
[AC1]wlan ap AP1 model WA6320-HCL
[AC1-wlan-ap-AP1]serial-id H3C_90-25-87-68-05-00
[AC1-wlan-ap-AP1]vlan 10
[AC1-wlan-ap-AP1-vlan10]quit
[AC1-wlan-ap-AP1]vlan 20
[AC1-wlan-ap-AP1-vlan20]radio 1
[AC1-wlan-ap-AP1-radio-1]radio enable
[AC1-wlan-ap-AP1-radio-1]service-template weijianing vlan 20
[AC1-wlan-ap-AP1-radio-1]quit
[AC1-wlan-ap-AP1]radio 2
[AC1-wlan-ap-AP1-radio-2]radio enable
[AC1-wlan-ap-AP1-radio-2]service-template weijianing vlan 20
[AC1-wlan-ap-AP1-radio-2]quit
[AC1-wlan-ap-AP1]quit
此时,能看到AP在AC注册上线。
(3)增加AP的配置。
先在AC释放AP,否则无法登录配置。可以在AC直接释放,或者使用MAP文件下发,这里就在AC直接释放。
AC1:
[AC1]probe
[AC1-probe]wlan ap-execute all exec-console enable
[AC1-probe]quit
释放完成后,可以登录AP增加配置。
<AP1>sys
System View: return to User View with Ctrl+Z.
[AP1]vlan 10
[AP1-vlan10]quit
[AP1]vlan 20
[AP1-vlan20]int gi 0/0/0
[AP1-GigabitEthernet0/0/0]po li tr
[AP1-GigabitEthernet0/0/0]po tr pe vlan 1 10 20
[AP1-GigabitEthernet0/0/0]quit
(4)无线接入测试。
加入手机进来,并启动。
选中手机,右键“配置”,同时打开WIFI。
选择相应的SSID,打开连接的按钮。
手机能获取到IP地址,且能跨网段PING通。
在AC上能看到手机的相关信息。
至此,AC+AP跨公网注册典型组网配置案例已完成!
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作