华为AC-AP配置
Posted
tags:
篇首语:本文由小常识网(cha138.com)小编为大家整理,主要介绍了华为AC-AP配置相关的知识,希望对你有一定的参考价值。
配置Switch
[Switch]vlan batch 100 101102 //创建管理Vlan100、业务vlan101、102
[Switch]interface g0/0/1 //进入端口G0/0/1
[Switch-GigabitEthernet0/0/1]descriptionlink-ap
[Switch-GigabitEthernet0/0/1]portlink-type trunk //端口模式为trunk
[Switch-GigabitEth0ernet0/0/1]porttrunk pvid vlan 100
//给接AP的端口打上管理vlan100的PVID
[Switch-GigabitEthernet0/0/1]porttrunk allow-pass vlan 100 101
//定义该端口允许通过的vlan
[Switch-GigabitEthernet0/0/1]quit
[Switch]interfaceGigabitEthernet0/0/2 //进入G0/0/2,与g/0/1同理
[Switch-GigabitEthernet0/0/2]portlink-type trunk
[Switch-GigabitEthernet0/0/2]porttrunk allow-pass vlan 100 101
[Switch-GigabitEthernet0/0/2]quit
配置AC
1. 配置接口和VLAN信息,AC为DHCP Server,为AP和client分配地址
[AC]vlan batch 100 101 102 //在AC上创建管理vlan100、业务vlan101、102
[AC]interfaceGigabitEthernet0/0/1 //进入端口
[AC-GigabitEthernet0/0/1]portlink-type trunk //定义端口模式
[AC-GigabitEthernet0/0/1]porttrunk allow-pass vlan 100 101
//定义允许通过的vlan
[AC-GigabitEthernet0/0/1]quit
[AC]dhcp enable //开启DHCP功能
[AC]interface vlanif 100 //配置vlan100的IP地址 并且开启DHCP
[AC -Vlanif100]descriptionfor-ap
[AC -Vlanif100]ip address192.168.100.1 24
[AC -Vlanif100]dhcp selectinterface
[AC-Vlanif100]quit
[AC]interface vlanif 101 //配置vlan101的IP地址并且开启DHCP
[AC -Vlanif101]descriptionfor-STA
[AC -Vlanif101]ip address192.168.101.1 24
[AC -Vlanif101]dhcp selectinterface
[ACVlanif101]quit
[AC]interface vlanif 102 //配置vlan102的IP地址并且开启DHCP
[AC -Vlanif102]descriptionfor-STA
[AC -Vlanif102]ip address192.168.102.1 24
[AC -Vlanif102]dhcp selectinterface
[ACVlanif102]quit
如果没有配置IP地址,直接从端口下开启DHCP功能失败,报错,如下图:
2. 配置AC WLAN基础配置
[AC]wlan ac-global ac id 1carrier id other
[AC]wlan ac-globalcountry-code CN
现行国家代码与输入国家代码相同
[AC]wlan
[AC -wlan-view]wlan ac sourceinterface Vlanif 100 //配置AP的管理VLAN,从哪个VLAN下拿地址
[AC-wlan-view]ap-auth-modeno-auth // 将AP上线模式改为不认证
此配置做完后在全局查询AP display ap all 查看AP是否上线
ap id 0 type-id 38mac 0006-f468-91a0 sn 21500821798W47001474 (AP上线后会自动生成)
3.配置AC WLAN 业务参数
#创建wlan-ess接口
[AC]interface Wlan-Ess 1 //之后会与下面 service-set(服务集)绑定
[AC-Wlan-Ess1]port hybridpvid vlan 101 //打上业务vlan101的PVID
[AC-Wlan-Ess1]port hybriduntagged vlan 101 //打上业务vlan101的PVID
[AC-Wlan-Ess1]quit
[AC]interface Wlan-Ess 2 //之后会与下面 service-set(服务集)绑定
[AC-Wlan-Ess2]port hybridpvid vlan 102 //打上业务vlan102的PVID
[AC-Wlan-Ess2]port hybriduntagged vlan 102 //打上业务vlan102的PVID
[AC-Wlan-Ess2]quit
#创建WMM模板,采用默认参数
[AC-wlan-view]wmm-profilename wmm-profile-0
[AC-wlan-wmm-prof-wmm-profile-0]quit
//之后会与下面 radio-profile(射频)模板绑定
#创建安全模板,采用默认参数
[AC-wlan-view]security-profilename security-profile-0
[AC-wlan-sec-prof-security-profile-0]quit
//之后会与下面service-set(服务集)绑定
【如果需要为无线设置密码则:
[AC-wlan-view]security-profilename security-profile-0
[AC-wlan-sec-prof-security-profile-0]security-policywpa 设置无线的加密方式
[AC-wlan-sec-prof-security-profile-0]wpaauthentication-method psk pass-phrase cipher 12344321 encryption-method tkip 设置加密算法,密码,密文处为密码 】
#创建流量模板,采用默认参数
[AC-wlan-view]traffic-profilename traffic-profile-0
[AC-wlan-traffic-prof-traffic-profile-0]quit
//之后会与下面 service-set(服务集)绑定
#创建服务集并绑定WLAN-ESS接口、安全模板和流量模板
[AC-wlan-view]service-setname service-set-0
[AC-wlan-service-set-service-set-0]ssidstaff
[AC-wlan-service-set-service-set-0]wlan-ess1
[AC-wlan-service-set-service-set-0]service-vlan101
[AC-wlan-service-set-service-set-0]security-profilename security-profile-0
[AC-wlan-service-set-service-set-0]traffic-profilename traffic-profile-0
#创建射频模板,并绑定WMM模板
[AC-wlan-view]radio-profilename radio-profile-0
[AC-wlan-radio-prof-radio-profile-0]wmm-profilename wmm-profile-0
[AC-wlan-radio-prof-radio-profile-0]quit
#配置VAP并下发
[AC-wlan-view]ap 0 radio 0
[AC-wlan-radio-0/0]radio-profilename radio-profile-0
[AC-wlan-radio-0/0]service-setname service-set-0
[AC-wlan-radio-0/0]service-setname service-set-0
[AC-wlan-radio-0/0]quit
[AC-wlan-view]commit ap 0
本文出自 “阿仙儿” 博客,请务必保留此出处http://sundengxian.blog.51cto.com/12283566/1965550
以上是关于华为AC-AP配置的主要内容,如果未能解决你的问题,请参考以下文章