我这边采用的AC是wx5500e ,ap是2620的,AC上做的是如下配置(省去了基本配置)
wlan service-template 1 crypto
ssid BAOSTEEL-MG
bind WLAN-ESS 10
cipher-suite tkip
cipher-suite ccmp
security-ie rsn
security-ie wpa
service-template enable
#
wlan service-template 2 clear
ssid BAOSTEEL-GUEST
bind WLAN-ESS 20
service-template enable
#
wlan service-template 3 crypto
ssid 802.1x-test
bind WLAN-ESS 30
cipher-suite tkip
security-ie wpa
service-template enable
#
interface WLAN-ESS0
port link-type hybrid
port hybrid vlan 1 untagged
#
interface WLAN-ESS10
port link-type hybrid
undo port hybrid vlan 1
port hybrid vlan 100 to 140 untagged
port hybrid pvid vlan 100
mac-vlan enable
port-security port-mode userlogin-secure-ext
port-security tx-key-type 11key
undo dot1x handshake
dot1x mandatory-domain 1x
undo dot1x multicast-trigger
#
interface WLAN-ESS20
port link-type hybrid
port hybrid vlan 1 200 untagged
port hybrid pvid vlan 200
#
interface WLAN-ESS30
port link-type hybrid
undo port hybrid vlan 1
port hybrid vlan 100 to 140 untagged
port hybrid pvid vlan 100
mac-vlan enable
.............................
wlan ap cgb-2fd3 model WA2620-AGN id 67
serial-id 219801A0F9C153000114
radio 1
service-template 1 vlan-id 110
service-template 2 vlan-id 130
radio enable
radio 2
service-template 1 vlan-id 110
service-template 2 vlan-id 130
radio enable
#
wlan ap cgb-3fd1 model WA2620-AGN id 69
serial-id 219801A0F9C153000107
radio 1
service-template 1 vlan-id 110
service-template 2 vlan-id 130
radio enable
radio 2
service-template 1 vlan-id 110
service-template 2 vlan-id 130
radio enable
#
wlan ap cgb-3fd2 model WA2620-AGN id 59
serial-id 219801A0F9C153000184
radio 1
service-template 1 vlan-id 110
service-template 2 vlan-id 130
radio enable
radio 2
service-template 1 vlan-id 110
service-template 2 vlan-id 130
radio enable
#
wlan ap cgb-3fd3 model WA2620-AGN id 73
serial-id 219801A0F9C153000013
radio 1
service-template 1 vlan-id 110
service-template 2 vlan-id 130
radio enable
radio 2
service-template 1 vlan-id 110
service-template 2 vlan-id 130
radio enable
............
其中 vlan 100-140为我的无线终端使用的网段,vlan 99为设备管理vlan,
在网上看到一个资料说,以上配置不够优化,可以改成如下
以创建wlan-ess 30 接口为例,修改为如下配置
interface WLAN-ESS30
port link-type hybrid
undo port hybrid vlan 1
port hybrid vlan 99 untagged
port hybrid pvid vlan 99
mac-vlan enable
说是用这种配置,可以不浪费大量空口资源,请问是这样的吗。
组网图是这样的
Ac ---trunk-----核心SW---trunk---接入switch -----无线AP
其中所有设备 上配置有vlan 99用作设备管理
AC 上有配置客户端接入所需的vlan
(0)
最佳答案
是的,你说的对。wlan-ess接口规范配置是pvid vlan 和untagged vlan保持同一个即可。而关于业务vlan的划分,在radio口绑定服务模板时绑定vlan-id就可以正常分配vlan了,并不需要专门在wlan-ess接口下untagged掉。
你现场的配置去掉多余的untagged vlan即可。
(0)
暂无评论
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作
举报
×
侵犯我的权益
×
侵犯了我企业的权益
×
抄袭了我的内容
×
原文链接或出处
诽谤我
×
对根叔社区有害的内容
×
不规范转载
×
举报说明
暂无评论