问题描述：
组网：核心作为网关、dhcp服务器，多vlan 10-60
AC接入在vlan10的汇聚交换机上trunk放通所有vlan，AP使用option43注册
其他vlan上注册的ap都能正常使用，只有vlan10也就是ac\ap同vlan下终端就无法上网
vlan10的ap可以正常获取ip，可以ping通，终端也可以获取正常的ip地址，核心的arp表上也有ap和终端的地址
发现终端的接口是WLAN-BSS时就不通网关和路由。只能访问AC
ac上创建了vlan10-60，不同的ap绑定射频和不同的vlan
总之就是vlan10下ap绑定vlan10，连接的终端不通内网，射频绑定到其他vlan反倒可以（应该是走的ac隧道）
- 2025-05-15提问
- 举报
-
(0)
方便发配置看一下吗？要不然不好发现问题
- 2025-05-15回答
- 评论(8)
- 举报
-
(0)
nqa entry h3c_g_b52680 test type icmp-echo destination ip 114.114.114.114 frequency 5000 history-record enable history-record number 1 probe timeout 500 # nqa schedule h3c_g_b52680 test start-time now lifetime forever # wlan service-template st_4460598527748232 description 1 ssid KQGYL akm mode psk preshared-key pass-phrase cipher $c$3$mCTtvJd8kjecReqHDR9oIweqDIcQsHgA/clH+C4C cipher-suite ccmp cipher-suite tkip security-ie rsn security-ie wpa bss transition-management enable portal domain cloud service-template enable # wlan service-template st_06250951092244272 description 1 ssid KQ-IOT user-isolation enable akm mode psk preshared-key pass-phrase cipher $c$3$Lgb7bQuZwJz9ZoVmKtSdONyAib2WSh94Ficot2Bs6oA= cipher-suite ccmp cipher-suite tkip security-ie rsn security-ie wpa bss transition-management enable portal domain cloud service-template enable # wlan service-template st_18179241701327298 description 2 ssid KQ-Guest user-isolation enable akm mode psk preshared-key pass-phrase cipher $c$3$OyebvlboqAEcxOGHl4Rmgd6PRz1fNBc3INvTflnu cipher-suite ccmp cipher-suite tkip security-ie rsn security-ie wpa bss transition-management enable portal domain cloud service-template enable # wlan service-template test ssid test client forwarding-location ap vlan 10 bss transition-management enable service-template enable # interface NULL0 # interface Vlan-interface10 ip address 192.168.10.200 255.255.255.0 portal enable method layer3 portal apply web-server go # interface GigabitEthernet1/0/1 port link-mode bridge port link-type hybrid port hybrid vlan 1 untagged # interface GigabitEthernet1/0/2 port link-mode bridge # interface GigabitEthernet1/0/3 port link-mode bridge # interface GigabitEthernet1/0/4 port link-mode bridge port link-type hybrid port hybrid vlan 1 untagged # interface GigabitEthernet1/0/5 port link-mode bridge port link-type trunk port trunk permit vlan 1 10 20 30 40 50 60 70 # scheduler logfile size 16 # line class console user-role network-admin # line class vty user-role network-operator # line con 0 authentication-mode scheme user-role network-admin # line vty 0 31 authentication-mode scheme user-role network-operator # ip route-static 0.0.0.0 0 192.168.10.1 # undo info-center logfile enable info-center source STAMGR console deny info-center source STAMGR logbuffer deny # ssh server enable sftp server enable scp server enable # nqa server enable # ntp-service enable ntp-service unicast-server ***.*** # acl basic name guest # acl mac name guest rule 0 permit # domain system authentication portal radius-scheme ruoyi-radius # domain default enable system #
nqa entry h3c_g_b52680 test type icmp-echo destination ip 114.114.114.114 frequency 5000 history-record enable history-record number 1 probe timeout 500 # nqa schedule h3c_g_b52680 test start-time now lifetime forever # wlan service-template st_4460598527748232 description 1 ssid KQGYL akm mode psk preshared-key pass-phrase cipher $c$3$mCTtvJd8kjecReqHDR9oIweqDIcQsHgA/clH+C4C cipher-suite ccmp cipher-suite tkip security-ie rsn security-ie wpa bss transition-management enable portal domain cloud service-template enable # wlan service-template st_06250951092244272 description 1 ssid KQ-IOT user-isolation enable akm mode psk preshared-key pass-phrase cipher $c$3$Lgb7bQuZwJz9ZoVmKtSdONyAib2WSh94Ficot2Bs6oA= cipher-suite ccmp cipher-suite tkip security-ie rsn security-ie wpa bss transition-management enable portal domain cloud service-template enable # wlan service-template st_18179241701327298 description 2 ssid KQ-Guest user-isolation enable akm mode psk preshared-key pass-phrase cipher $c$3$OyebvlboqAEcxOGHl4Rmgd6PRz1fNBc3INvTflnu cipher-suite ccmp cipher-suite tkip security-ie rsn security-ie wpa bss transition-management enable portal domain cloud service-template enable # wlan service-template test ssid test client forwarding-location ap vlan 10 bss transition-management enable service-template enable # interface NULL0 # interface Vlan-interface10 ip address 192.168.10.200 255.255.255.0 portal enable method layer3 portal apply web-server go # interface GigabitEthernet1/0/1 port link-mode bridge port link-type hybrid port hybrid vlan 1 untagged # interface GigabitEthernet1/0/2 port link-mode bridge # interface GigabitEthernet1/0/3 port link-mode bridge # interface GigabitEthernet1/0/4 port link-mode bridge port link-type hybrid port hybrid vlan 1 untagged # interface GigabitEthernet1/0/5 port link-mode bridge port link-type trunk port trunk permit vlan 1 10 20 30 40 50 60 70 # scheduler logfile size 16 # line class console user-role network-admin # line class vty user-role network-operator # line con 0 authentication-mode scheme user-role network-admin # line vty 0 31 authentication-mode scheme user-role network-operator # ip route-static 0.0.0.0 0 192.168.10.1 # undo info-center logfile enable info-center source STAMGR console deny info-center source STAMGR logbuffer deny # ssh server enable sftp server enable scp server enable # nqa server enable # ntp-service enable ntp-service unicast-server ***.*** # acl basic name guest # acl mac name guest rule 0 permit # domain system authentication portal radius-scheme ruoyi-radius # domain default enable system #
***.***/wiki/VWVOwNotXieIyfksyn8cTgS4nwb?from=from_copylink
https://mcncdf9ynq6w.飞书.cn/ 被屏蔽了，麻烦拼一下 wiki/VWVOwNotXieIyfksyn8cTgS4nwb?from=from_copylink
***.***/ 好了 wiki/VWVOwNotXieIyfksyn8cTgS4nwb?from=from_copylink
编辑答案
亲~登录后才可以操作哦!
确定你的邮箱还未认证，请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
- 1. 您举报的内容是什么？（请在邮件中列出您举报的内容和链接地址）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
- 3. 是哪家企业？（营业执照，单位登记证明等证件）
- 4. 您与该企业的关系是？（您是企业法人或被授权人，需提供企业委托授权书）
抄袭了我的内容
×
原文链接或出处
诽谤我
×
- 1. 您举报的内容以及侵犯了您什么权益？（请在邮件中列出您举报的内容、链接地址，并给出简短的说明）
- 2. 您是谁？（身份证明材料，可以是身份证或护照等证件）
对根叔社区有害的内容
×
不规范转载
×
举报说明
***.***/ 好了 wiki/VWVOwNotXieIyfksyn8cTgS4nwb?from=from_copylink