目前无线控制器在总部,分部有一台瘦AP。现在想要实现分部AP在总部无线控制器上进行注册。
1、分部侧路由器配置
interface Ethernet0/0 //配置外网接口
nat outbound
ip address 1.1.1.1 255.255.255.0
#
interface Vlan-interface1 //内网接口设置
ip address 192.168.1.1 255.255.255.0
#
interface Ethernet0/1
port link-mode bridge
#
dhcp server ip-pool 1
network 192.168.1.0 mask 255.255.255.0
gateway-list 192.168.1.1
option 43 hex 80070000 01010101 02
#
dhcp enable
ip route-static 0.0.0.0 0.0.0.0 1.1.1.2
注:option43属性中写的地址为总部侧公网地址
2、总部侧设备配置:
interface GigabitEthernet0/0 //总部侧外网配置
port link-mode route
nat outbound
nat server 1 protocol udp global current-interface 12222 inside 192.168.1.2 12222
nat server 2 protocol udp global current-interface 12223 inside 192.168.1.2 12223
ip address 1.1.1.2 255.255.255.0
#
interface Vlan-interface1 //配置内网接口
ip address 192.168.1.1 255.255.255.0
#
interface GigabitEthernet0/1
port link-mode bridge
#
dhcp server ip-pool vlan1
network 192.168.1.0 mask 255.255.255.0
gateway-list 192.168.1.1
#
dhcp enable
#
ip route-static 0.0.0.0 0.0.0.0 1.1.1.1
3、WAC361的配置:
wlan auto-ap enable \\开启自动注册和自动固化
wlan auto-persistent enable
#
interface Vlan-interface1 \\LAN口IP地址最好固定
ip address 192.168.1.2 255.255.255.0
#
ip route-static 0.0.0.0 0.0.0.0 192.168.1.1 \\设置默认路由
实验验证:(AP上收集的信息)
BootWare Validating...
Press Ctrl+B to enter extended boot menu... \\尝试本地获取版本
Starting to get the main application file--flash:/wa2600a_fit.bin!
The main application file does not exist--flash:/wa2600a_fit.bin!
Starting to get the backup application file--flash:/backup.bin!
The backup application file does not exist--flash:/backup.bin!
Starting to get the secure application file--flash:/secure.bin!
The secure application file does not exist--flash:/secure.bin!
Booting App fails! \\获取失败后获取地址
Trying to get the IP address from the DHCP server......
DHCP server's IP address is 192.168.0.1
Client's assigned address is 192.168.0.2
DNS domain name got from DHCP server is
DNS server's IP address is 0.0.0.0
Default Gateway's IP address is 192.168.0.1
This client's subnet mask is 255.255.255.0
The length of option 43 is: 9
Change State : Idle to Broadcast Discovery
Change State : Broadcast Discovery to Unicast Discovery
Use Option 43:
Getting AC's IP Address 1.1.1.2 //获取到对端公网的IP地址
Change State : Unicast Discovery to Join
Change State : Join to JoinAck
Change State : JoinCfm to Image Download..........................................................
........................................................................
[State : ImageLoad] Image download successful
[State : Idle] Reset request, rebooting the AP
Rebooting......
System is starting... //注册成功,系统启动
在AC上可以查询到AP的信息
1、在这种组网中分部侧DHCP服务器需要支持DHCP的option 43属性,给AP下发IP地址的同时下发AC的IP地址。
2、总部侧路由器需要支持映射,将用户AP注册的UDP12222和UDP的12223端口映射被AC。因为注册使用的UDP端口为12222和12223端口。
3、在此类组网中,分部侧的无线设备是不能和分部的网段互访的。因为分部侧流量无法通过LWAPP隧道。如果想要互访需要在分部和总部侧做VPN,利用VPN来连接两个内网。
4、客户端连入后还是会在获取总部侧的IP地址,进行在AC上进行集中转发。
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作