有没有中小型企业组网案例，pc核心交换机DHCP自动获取ip 然后路由器做nat访问外网，还有无线侧

您好，请知：

以下是配置参考，具体以实际设备型号为准：

核心：

vlan 200

des youxian

quit

vlan 300

des wuxian

quit

vlan 90

quit

int vlan 90

ip address 192.168.99.129 25

quit

int vlan 200

ip address 172.16.1.1 24

quit

int vlan 300

ip address 172.17.1.1 24

quit

int gi 1/0/1

port link-type access

port access vlan 200

quit

int gi 1/0/2

port link-type trunk

undo port trunk permit vlan 1

por trunk permit vlan 90 300

port trunk pvid vlan 90

quit

dhcp enable

dhcp server ip-pool vlan 200

network 172.16.1.0 255.255.255.0

gateway-list 172.16.1.1

dns-list 114.114.14.114

quit

dhcp server ip-pool vlan 300

network 172.17.1.0 255.255.255.0

gateway-list 172.17.1.1

dns-list 114.114.14.114

quit

int gi 1/0/1

port link-mode route

des <connect to chukou>

ip address 192.168.99.1 30

quit

ospf 1 router-id 10.1.1.1

area 0.0.0.0

network 192.168.99.1 0.0.0.0

network 172.16.1.0 0.0.0.255

network 172.17.2.0 0.0.0.255

quit

acl ad 3000

rule 0 deny ip source 172.16.1.0 0.0.0.255 destination 172.17.1.0 0.0.0.255

quit

rule 1 deny ip source 172.17.1.0 0.0.0.255 destination 172.16.1.0 0.0.0.255

rule 2 permit ip source any destination any

quit

int vlan 200

packet-filter 3000 inbound

packet-filter 3000 outbound

quit

int vlan 300

packet-filter 3000 inbound

packet-filter 3000 outbound

quit

出口：

int gi 0/0

ip address 192.168.99.2 30

des <connect to hexin>

quit

nat address-group 1

address 192.168.31.242 192.168.31.253

quit

acl basic 2000

rule 0 permit any

quit

int gi 0/1

ip address 192.168.31.241 28

nat outbound 2000 address-group 1

quit

ip route-static 0.0.0.0 0.0.0.0 192.168.31.254

ospf 1 router-id 192.168.99.2

import-route static

import-route direct

area 0.0.0.0

network 192.168.99.2 0.0.0.0

quit

无线设备：

 1、创建VLAN，用于业务使用。举例：

vlan 10

quit

2、再创建VLAN，用于管理使用。举例：

vlan 90  //创建vlan 90

quit

management-vlan 90 //将VLAN 90设置为管理vlan

int vlan 90

ip address 192.168.99.130 25  //给vlan 90设置ip地址

quit

3、配置有线接口，用于接入网络,举例：

int gi 1/0/1

port link-type trunk

undo port trunk permit vlan 1

port trunk permit vlan 90 300

port trunk pvid vlan 90

quit

4、配置默认路由：

ip route-static 0.0.0.0 0.0.0.0 192.168.99.129

5、配置WLAN虚拟接入端口，用于无线移动终端的接入：

int wlan-bss 1

port link-type access

port access vlan 300

quit

6、配置无线模板

wlan service-template 1 clear  //创建服务模板1

authentication-method open-system //无认证

ssid h3c //配置SSID

service-template enable //启用无线服务模板

7、配置射频接口，类似于配置天线

int wlan-radio 1/0/1  //进入射频接口1/0/1

service-template 1 interface wlan-bss 1  //调用服务模板1及wlan虚拟接入端口

radio-type dotllg  //配置AP在802.11g模式

channel 11  //配置射频接口使用信道11

max-power 15  //配置射频接口的最大功率是15dBm

quit