组网及说明
| 10 |
|
|
| 20 |
|
|
| 200 |
|
DHCP服务器 CORE
AC的capwap 源接口地址 192.168.10.1
配置步骤
配置思路
1.以Core为中心网关 在Core上创建 vlanif 10 20 200
2.在Core上创建DHCP 服务器 为下行AP和STA分配ip地址
操作步骤
1.配置核心交换机
<1>创建vlan 和 vlanif 接口
<Core>system-view
[Core]vlan 10
[Core]vlan 20
[Core]vlan 200
[Core]interface Vlan-interface10
[Core]ip address 192.168.10.254 255.255.255.0
[Core]interface Vlan-interface20
[Core]ip address 192.168.20.254 255.255.255.0
[Core]interface Vlan-interface200
[Core]ip address 192.168.200.2 255.255.255.0
<2>配置接口模式并放通vlan
[Core]interface GigabitEthernet1/0/2
[Core-GigabitEthernet1/0/2]port link-type trunk
[Core-GigabitEthernet1/0/2]port trunk permit vlan all
[Core]interface GigabitEthernet1/0/3
[Core-GigabitEthernet1/0/3]port link-type trunk
[Core-GigabitEthernet1/0/3]port trunk permit vlan all
<3>创建管理地址池
[Core]dhcp server ip-pool vlanif10
[Core]gateway-list 192.168.10.254
[Core]network 192.168.10.0 mask 255.255.255.0
[Core]forbidden-ip 192.168.10.1
[Core]forbidden-ip 192.168.10.254
[Core]option 43 hex 8007000001c0a80a01 #标黄的一段为AC capwap 源地址其余为固定值
<4>创建业务地址池
[Core]dhcp server ip-pool vlanif20
[Core]gateway-list 192.168.20.254
[Core]network 192.168.20.0 mask 255.255.255.0
[Core]forbidden-ip 192.168.20.1
[Core]forbidden-ip 192.168.20.254
[Core]dns-list 114.114.114.114
2.配置AC
<1>创建vlan 并配置 capwap源地址
<AC>system-view
[AC]vlan 10
[AC]vlan 20
[AC]interface Vlan-interface 10
[AC]ip address 192.168.10.1 255.255.255.0
<2>配置接口模式并放通vlan
[AC]interface GigabitEthernet1/0/0
[AC]port link-type trunk
[AC]port trunk permit vlan all
<3>配置AP自动上线及注册
[AC]wlan auto-ap enable
[AC]wlan auto-persistent enable
<4>配置路由
[AC]ip route-static 0.0.0.0 0 192.168.10.254
3.配置ACC
<1>创建vlan
<Acc>system-view
[Acc]vlan 10
[Acc]vlan 20
<2>配置上联接口模式并放通vlan
[Acc]interface GigabitEthernet1/0/1
[Acc]port link-type trunk
[Acc]port trunk permit vlan all
<3>配置下联接口模式并放通vlan 及 打上 pvid 10标签
[Acc]interface GigabitEthernet1/0/2
[Acc]port link-type trunk
[Acc]port trunk permit vlan 1 10
[Acc]port trunk pvid vlan 10
[Acc]interface GigabitEthernet1/0/3
[Acc]port link-type trunk
[Acc]port trunk permit vlan 1 10
[Acc]port trunk pvid vlan 10
完成上述配置后，执行命令 display wlan ap all 当 state 状态为 R/M 表示AP已经正常上线
AP name APID State Model Serial ID
8e5c-6272-0400 1 R/M WA6320-HCL H3C_8E-5C-62-72-04-00
8e5c-7d01-0500 2 R/M WA6320-HCL H3C_8E-5C-7D-01-05-00
4.配置WLAN业务参数
<1>创建无线服务模板
[AC]wlan service-template h3c
[AC-wlan-st-h3c]ssid H3C #创建ssid
[AC-wlan-st-h3c]vlan 20 #创建业务vlan
[AC-wlan-st-h3c]akm mode psk #配置身份认证与密钥管理模式为PSK模式，配置PSK密钥为明文字符串12345678
[AC-wlan-st-h3c]preshared-key pass-phrase simple 12345678
[AC-wlan-st-h3c]cipher-suite ccmp #配置加密套件为CCMP，安全信息元素为RSN。
[AC-wlan-st-h3c]security-ie rsn
[AC-wlan-st-h3c]service-template enable #使能无线模板
<2>把服务模板绑定到ap组中
[AC]WLAN ap-group default-group
[AC-wlan-ap-group-default-group]vlan 20
[AC-wlan-ap-group-default-group]ap-model WA6320-HCL #在AP组中添加AP型号
[AC-wlan-ap-group-default-group-ap-model-WA6320-HCL]radio 1
[AC-wlan-ap-group-default-group-ap-model-WA6320-HCL-radio-1]service-template h3c vlan 20 #绑定服务模板
[AC-wlan-ap-group-default-group-ap-model-WA6320-HCL-radio-1]radio enable #使能radio1
配置验证
使用display wlan service-template verbose 查看
配置关键点
三层上线需要在dhcp服务器中配置好option 43 让ap在拿到IP地址的时候可以进行单播上线