配置案例-WLAN基本业务配置-配置旁挂三层集中转发示例

DHCP服务器 CORE

AC的capwap 源接口地址 192.168.10.1

配置思路

1.以Core为中心网关 在Core上创建 vlanif 10 20 200 

2.在Core上创建DHCP 服务器 为下行AP和STA分配ip地址

操作步骤

1.配置核心交换机

<1>创建vlan 和 vlanif 接口

<Core>system-view

[Core]vlan 10 

[Core]vlan 20

[Core]vlan 200

[Core]interface Vlan-interface10

[Core]ip address 192.168.10.254 255.255.255.0

[Core]interface Vlan-interface20

[Core]ip address 192.168.20.254 255.255.255.0

[Core]interface Vlan-interface200

[Core]ip address 192.168.200.2 255.255.255.0

<2>配置接口模式并放通vlan

[Core]interface GigabitEthernet1/0/2

[Core-GigabitEthernet1/0/2]port link-type trunk

[Core-GigabitEthernet1/0/2]port trunk permit vlan all

[Core]interface GigabitEthernet1/0/3

[Core-GigabitEthernet1/0/3]port link-type trunk

[Core-GigabitEthernet1/0/3]port trunk permit vlan all

<3>创建管理地址池

[Core]dhcp server ip-pool vlanif10

[Core]gateway-list 192.168.10.254

[Core]network 192.168.10.0 mask 255.255.255.0

[Core]forbidden-ip 192.168.10.1

[Core]forbidden-ip 192.168.10.254

[Core]option 43 hex 8007000001c0a80a01  #标黄的一段为AC capwap 源地址其余为固定值

<4>创建业务地址池

[Core]dhcp server ip-pool vlanif20

[Core]gateway-list 192.168.20.254

[Core]network 192.168.20.0 mask 255.255.255.0

[Core]forbidden-ip 192.168.20.1

[Core]forbidden-ip 192.168.20.254

[Core]dns-list 114.114.114.114

2.配置AC

<1>创建vlan 并配置 capwap源地址

<AC>system-view

[AC]vlan 10

[AC]vlan 20

[AC]interface  Vlan-interface 10

[AC]ip address 192.168.10.1 255.255.255.0

<2>配置接口模式并放通vlan

[AC]interface GigabitEthernet1/0/0

[AC]port link-type trunk

[AC]port trunk permit vlan all

<3>配置AP自动上线及注册

[AC]wlan auto-ap enable

[AC]wlan auto-persistent enable

<4>配置路由

[AC]ip route-static 0.0.0.0 0 192.168.10.254

3.配置ACC

<1>创建vlan

<Acc>system-view

[Acc]vlan 10

[Acc]vlan 20

<2>配置上联接口模式并放通vlan 

[Acc]interface GigabitEthernet1/0/1

[Acc]port link-type trunk

[Acc]port trunk permit vlan all

<3>配置下联接口模式并放通vlan 及 打上 pvid 10标签

[Acc]interface GigabitEthernet1/0/2

[Acc]port link-type trunk

[Acc]port trunk permit vlan 1 10

[Acc]port trunk pvid vlan 10

[Acc]interface GigabitEthernet1/0/3

[Acc]port link-type trunk

[Acc]port trunk permit vlan 1 10

[Acc]port trunk pvid vlan 10

完成上述配置后，执行命令 display wlan ap all 当 state 状态为 R/M 表示AP已经正常上线

AP name                          APID    State       Model                     Serial ID

8e5c-6272-0400                 1       R/M   WA6320-HCL      H3C_8E-5C-62-72-04-00

8e5c-7d01-0500                 2       R/M   WA6320-HCL      H3C_8E-5C-7D-01-05-00

4.配置WLAN业务参数

<1>创建无线服务模板

[AC]wlan service-template h3c 

[AC-wlan-st-h3c]ssid H3C   #创建ssid

[AC-wlan-st-h3c]vlan 20     #创建业务vlan

[AC-wlan-st-h3c]akm mode psk    #配置身份认证与密钥管理模式为PSK模式，配置PSK密钥为明文字符串12345678

[AC-wlan-st-h3c]preshared-key pass-phrase simple 12345678

[AC-wlan-st-h3c]cipher-suite ccmp   #配置加密套件为CCMP，安全信息元素为RSN。

[AC-wlan-st-h3c]security-ie rsn

[AC-wlan-st-h3c]service-template enable   #使能无线模板

<2>把服务模板绑定到ap组中

[AC]WLAN ap-group default-group

[AC-wlan-ap-group-default-group]vlan 20

[AC-wlan-ap-group-default-group]ap-model WA6320-HCL       #在AP组中添加AP型号

[AC-wlan-ap-group-default-group-ap-model-WA6320-HCL]radio 1

[AC-wlan-ap-group-default-group-ap-model-WA6320-HCL-radio-1]service-template h3c vlan 20   #绑定服务模板

[AC-wlan-ap-group-default-group-ap-model-WA6320-HCL-radio-1]radio enable      #使能radio1

配置验证

使用display wlan service-template verbose 查看

三层上线需要在dhcp服务器中配置好option 43 让ap在拿到IP地址的时候可以进行单播上线