桥接问题

建议联系中兴400售后

3.2  FAT和FIT桥接典型配置举例

3.2.1  组网需求

如图2所示，MPP通过交换机与AC连接，实现客户端能够通过MAP接入网络并访问Server服务器。

具体要求如下：

·            Server服务器连接交换机。

·            MPP和MAP之间使用射频工作模式为802.11n（5GHz），工作信道号为149来建立Mesh链路。

图2 FIT和FAT桥接配置组网图

3.2.2  配置步骤

1. 配置AC

(1)       配置DHCP server

# 开启DHCP server功能。

<AC> system-view

[AC] dhcp enable

# 配置DHCP地址池1为FIT AP和服务器分配地址范围为192.168.0.0/24，网关地址为192.168.0.1。

[AC] dhcp server ip-pool 1

[AC-dhcp-pool-1] network 192.168.0.0 mask 255.255.255.0

[AC-dhcp-pool-1] gateway-list 192.168.0.1

[AC-dhcp-pool-1] quit

(2)       配置AC的接口

# 配置VLAN1的IP地址为192.168.0.1，FIT AP将获取该IP地址与AC建立CAPWAP隧道。

[AC] interface vlan-interface 1

[AC-Vlan-interface1] ip address 192.168.0.1 255.255.255.0

[AC-Vlan-interface1] quit

(3)       配置Mesh Profile

# 创建一个编号为1的Mesh Profile。

<AC> system-view

[AC] wlan mesh-profile 1

# 配置Mesh ID为1。

[AC-wlan-mesh-profile-1] mesh-id 1

# 配置认证模式为SAE。

[AC-wlan-mesh-profile-1] akm mode sae

# 配置预共享密钥为12345678。

[AC-wlan-mesh-profile-1] preshared-key pass-phrase simple 12345678

# 开启Mesh Profile。

[AC-wlan-mesh-profile-1] mesh-profile enable

[AC-wlan-mesh-profile-1] quit

(4)       配置MPP

# 创建AP的模板，名称为mpp，型号名称选择WA4320，并配置AP的序列号为219801A0UEB147031200。

[AC] wlan ap mpp model WA4320

[AC-wlan-ap-mpp] serial-id 219801A0UEB147031200

# 将Mesh Profile 1绑定到mpp的Radio 1口。

[AC-wlan-ap-mpp] radio 1

[AC-wlan-ap-mpp-radio-1] mesh-profile 1

# 配置射频类型为802.11n（5GHz）。

[AC-wlan-ap-mpp-radio-1] type dot11an

# 配置射频工作信道为149。

[AC-wlan-ap-mpp-radio-1] channel 149

# 开启Radio。

[AC-wlan-ap-mpp-radio-1] radio enable

[AC-wlan-ap-mpp-radio-1] quit

# 配置MPP停止发送邻居探测请求。

[AC-wlan-ap-mpp] portal-service enable

[AC-wlan-ap-mpp] quit

(5)       配置静态路由

# 配置静态路由。

[AC]ip route-static 192.168.1.0 255.255.255.0 192.168.0.2

2. 配置FAT AP

(1)       配置Mesh Profile。

# 创建一个编号为1的Mesh Profile。

<MAP> system-view

[MAP] wlan mesh-profile 1

# 配置Mesh ID为1。

[MAP1-wlan-mesh-profile-1] mesh-id 1

# 配置认证模式为SAE。

[MAP-wlan-mesh-profile-1] akm mode sae

# 配置预共享密钥为12345678。

[MAP-wlan-mesh-profile-1] preshared-key pass-phrase simple 12345678

# 开启Mesh Profile。

[MAP-wlan-mesh-profile-1] mesh-profile enable

[MAP-wlan-mesh-profile-1] quit

(2)       配置无线服务模板service1。

# 配置无线无线服务模板service1，配置SSID为mesh-network，并使能服务模板。

[MAP] wlan service-template service1

[MAP-wlan-st-service1] ssid mesh-network

[MAP-wlan-st-service1] service-template enable

[MAP-wlan-st-service1] quit

(3)       配置射频接口

# 将Mesh Profile 1绑定到MAP的WLAN-Radio 1/0/1接口。

[MAP] interface wlan-radio 1/0/1

[MAP-WLAN-Radio1/0/1] mesh-profile 1

# 将无线服务模板service1绑定到MAP的WLAN-Radio 1/0/1接口。

[MAP-WLAN-Radio1/0/1] service-template service1

# 配置Radio接口射频类型为802.11n（5GHz）。

[MAP-WLAN-Radio1/0/1] type dot11an

# 配置射频工作信道号为149。

[MAP-WLAN-Radio1/0/1] channel 149

# 向MAP的邻居白名单中添加MPP的MAC地址，使MAP仅与MPP建立Mesh连接，以避免环路的产生。

[MAP-WLAN-Radio1/0/1] mesh peer-mac-address ac74-090a-6420

# 开启射频功能。

[MAP-WLAN-Radio1/0/1] undo shutdown

[MAP-WLAN-Radio1/0/1] quit

[MAP] quit

(4)       配置DHCP服务。

# 开启DHCP功能。

[MAP] dhcp enable

# 创建名为vlan100的DHCP地址池，为Client分配IP地址，配置地址池动态分配的网段为192.168.1.0/24，网关地址为192.168.1.1。

[MAP] dhcp server ip-pool vlan100

[MAP-dhcp-pool-vlan100] network 192.168.1.0 mask 255.255.255.0

[MAP-dhcp-pool-vlan100] gateway-list 192.168.1.1

[MAP-dhcp-pool-vlan100] quit

3.2.3  验证配置

# 完成以上配置后，在AC上可以通过display wlan mesh-link ap命令查看到MPP和MAP的Mesh链路已经成功建立。

<AC>display wlan mesh-link ap                                                 

AP name: mpp                                                                  

 Peer           Local          Status     RSSI Packets(Rx/Tx)                  

 d461-fe59-4d20 ac74-090a-6420 Forwarding 84   75/206

# 在MAP上通过display wlan mesh-link命令查看到MAP和MPP的Mesh链路已经成功建立。

<MAP> display wlan mesh-link

Peer MAC       RSSI BSSID          Interface         Link state Online time   

 ac74-090a-6420 82   d461-fe59-4d20 WLAN-MeshLink231  Active     00h 46m 53s

# Client与Server可以互相ping通。

3.2.4  配置文件

·            MAP

#                                                                               

 sysname MAP                                                                   

#                                                                              

 telnet server enable                                                           

#                                                                              

 dhcp enable                                                                   

#                                                                              

wlan mesh-profile 1                                                            

 mesh-id 1                                                                     

 akm mode sae                                                                  

 preshared-key pass-phrase cipher $c$3$MA+IbbyMk2HFZPOGPZtCOu/7tC0zlT4/9HuX    

 mesh-profile enable                                                           

#                                                                              

vlan 1                                                                          

#                                                                              

vlan 100                                                                       

#                                                                               

dhcp server ip-pool vlan100                                                    

 gateway-list 192.168.1.1                                                      

 network 192.168.1.0 mask 255.255.255.0                                         

#                                                                              

wlan service-template service1                                                 

 ssid mesh-network                                                             

 vlan 100                                                                      

 service-template enable                                                       

#                                                                               

interface NULL0                                                                

#                                                                              

interface Vlan-interface1                                                       

 ip address 192.168.0.2 255.255.255.0                                         

#                                                                              

interface Vlan-interface100                                                     

 ip address 192.168.1.1 255.255.255.0                                          

#                                                                              

interface GigabitEthernet1/0/1                                                  

#                                                                              

interface GigabitEthernet1/0/2                                                 

#                                                                               

interface WLAN-Radio1/0/1                                                      

 service-template service1                                                     

 mesh-profile 1                                                                 

 mesh peer-mac-address ac74-090a-6420                                          

 type dot11an                                                                  

 channel 149                                                                   

#                                                                               

return

·            AC

#                                                                              

 sysname AC                                                               

#                                                                              

 telnet server enable                                                          

#                                                                              

 dhcp enable                                                                    

#                                                                              

wlan mesh-profile 1                                                            

 mesh-id 1                                                                      

 akm mode sae                                                                  

 preshared-key pass-phrase cipher $c$3$L7PLM5cfBX+LuA9AXhbmYQgz0yU1pcc0y26/    

 mesh-profile enable                                                            

#                                                                              

vlan 1                                                                         

#                                                                               

dhcp server ip-pool 1                                                         

 gateway-list 192.168.0.1                                                    

 network 192.168.0.0 mask 255.255.255.0                                         

#                                                                              

interface Vlan-interface1                                                      

 ip address 192.168.0.1 255.255.255.0                                        

#                                                                               

 ip route-static 192.168.1.0 24 192.168.0.2                                   

#                                                                              

wlan ap mpp model UAP300                                                      

 serial-id 219801A15K8171E00166                                                

 radio 1                                                                       

  type dot11an                                                                  

  channel 149                                                                  

  radio enable                                                                 

  mesh-profile 1                                                                

  mesh peer-mac-address d461-fe59-4d20                                         

#                                                                              

return

您好，请知：

升级两边设备的软件版本到最新看下，另外不同友商的设备可能无法桥接上，建议使用相同厂家的设备。

以下是WA4300 WDS配置的举例，请参考：

1.4.1  点到点的WDS连接

1. 组网需求

在如图1-5所示的室外环境中存在两个独立的局域网，如果采用有线方式连接这两个局域网，需要使用挖沟开渠等方式铺设线缆，这样做工期长、开销大。在这种部署有线网络不方便的情况下，可以采用WDS链路连接这两个局域网，实现两个局域网之间的互通。

具体部署方式如下：

·     AP 1和AP 2分别连接不同的局域网。

·     手工指定固定信道153，通过802.11a射频模式使AP 1和AP 2之间形成WDS链路。

·     为了保证WDS链路的安全性，设置预共享密钥为“12345678”。

2. 组网图

图1-5 点到点的WDS连接配置组网图

3. 配置步骤

# 使能端口安全功能。

<AP1> system-view

[AP1] port-security enable

# 在WLAN Mesh接口下配置端口安全为PSK认证方式（预共享密钥为12345678），并使能11key类型的密钥协商功能。

[AP1] interface WLAN-MESH 1

[AP1-WLAN-MESH1] port-security port-mode psk

[AP1-WLAN-MESH1] port-security preshared-key pass-phrase simple 12345678

[AP1-WLAN-MESH1] port-security tx-key-type 11key

# 在Mesh Profile下配置Mesh ID为outdoor，将WLAN-Mesh 1接口绑定到服务模板，使能当前Mesh Profile服务模板。

[AP1] wlan mesh-profile 1

[AP1-wlan-mshp-1] mesh-id outdoor

[AP1-wlan-mshp-1] bind WLAN-MESH 1

[AP1-wlan-mshp-1] mesh-profile enable

[AP1-wlan-mshp-1] quit

# 在802.11a射频接口下指定工作信道为153。

[AP1] interface WLAN-Radio 1/0/1

[AP1-WLAN-Radio1/0/1] radio-type dot11a

[AP1-WLAN-Radio1/0/1] channel 153

# 配置WDS邻居MAC地址，即AP 2射频接口的MAC地址。

[AP1-WLAN-Radio1/0/1] mesh peer-mac-address 0ebb-01bb-bb00

# 绑定Mesh Profile服务模板。

[AP1-WLAN-Radio1/0/1] mesh-profile 1

AP2的配置与上述配置类似，只需要将WDS邻居MAC地址设置为AP1的MAC地址。

以下是WA4300的用户手册链接，请参考：

https://www.h3c.com/cn/d_201707/1017285_30005_0.htm#_Toc488398815