配置WDS手拉手业务示例

组网图形

图1配置WDS手拉手业务示例组网图

业务需求
组网需求
数据规划
配置思路
配置注意事项
操作步骤
配置文件

业务需求

企业用户通过WLAN接入网络，以满足移动办公的最基本需求。但企业考虑到AP通过有线部署的成本较高，所以通过建立WDS无线桥接链路做无线回传，用于部署业务覆盖，保证企业用户可以接入无线网络。

组网需求

AC组网方式：旁挂二层组网。
DHCP部署方式：
- AC作为DHCP服务器为AP分配IP地址。
- 汇聚交换机Switch_A作为DHCP服务器为STA分配IP地址。
无线回传方式：WDS手拉手方式。
回传射频：5G频段。
业务数据转发方式：直接转发。

数据规划

AP	类型	MAC
AP_1	AP8130DN	60de-4474-9640
AP_2	AP8130DN	dcd2-fc04-b500
AP_3	AP8130DN	dcd2-fc96-e4c0
[表1AP数据规划表]

配置项	数据
AP管理VLAN	VLAN100
STA业务VLAN	VLAN101
DHCP服务器	AC作为AP的DHCP服务器，Switch_A作为STA的DHCP服务器。
AP地址池	10.23.100.2～10.23.100.254/24
STA地址池	10.23.101.3～10.23.101.254/24
AC源接口	VLANIF100
WDS角色	* AP_1射频1：root * AP_2射频1：leaf * AP_2射频0：root * AP_3射频1：leaf
域管理模板	* 名称：default * 国家码：中国
SSID模板	* 名称：wlan-net * SSID名称：wlan-net
WLAN无线业务安全模板	* 名称：wlan-net * 安全策略：WPA-WPA2+PSK+AES * 密码：a1234567
VAP模板	* 名称：wlan-net * 转发模式：直接转发 * 业务VLAN：VLAN101 * 引用模板：SSID模板wlan-net、安全模板wlan-net
WDS链路安全模板	* 名称：wds-security * 安全策略：WPA2+PSK+AES * 密码类型：PASS-PHRASE * 密码：a1234567
WDS白名单模板	* 名称：wds-list1 * AP MAC地址：AP_2 leaf节点的MAC地址
WDS白名单模板	* 名称：wds-list2 * AP MAC地址：AP_3 leaf节点的MAC地址
WDS模板	* 名称：wds-root * WDS网桥名称：wlan-wds * WDS工作模式：root * Tagged VLAN：VLAN101 * 引用安全模板wds-security
WDS模板	* 名称：wds-leaf * WDS网桥名称：wlan-wds * WDS工作模式：leaf * Tagged VLAN：VLAN101 * 引用安全模板wds-security
AP组	* 名称：ap-group1 * 用于添加root节点AP，如AP_1 * 引用WDS模板wds-root、VAP模板wlan-net、域管理模板default
AP组	* 名称：ap-group2 * 用于添加root和leaf节点AP，如AP_2 * 引用WDS模板wds-root和wds-leaf、VAP模板wlan-net、域管理模板default
AP组	* 名称：ap-group3 * 用于添加leaf节点AP，如AP_3 * 引用WDS模板wds-leaf、VAP模板wlan-net、域管理模板default
[表2AC数据规划表]

配置思路

配置root节点AP_1在AC上线。
1. 创建AP组，用于将需要进行相同配置的AP都加入到AP组，实现统一配置。
2. 配置AC的系统参数，包括国家码、AC与AP之间通信的源接口。
3. 配置AP上线的认证方式并离线导入AP，实现AP正常上线。
配置WDS业务，使区域C的AP可以通过WDS无线虚链路上线。
配置WLAN业务参数，实现STA访问WLAN网络功能。

配置注意事项

纯组播报文由于协议要求在无线空口没有ACK机制保障，且无线空口链路不稳定，为了纯组播报文能够稳定发送，通常会以低速报文形式发送。如果网络侧有大量异常组播流量涌入，则会造成无线空口拥堵。为了减小大量低速组播报文对无线网络造成的冲击，建议配置组播报文抑制功能。配置前请确认是否有组播业务，如果有，请谨慎配置限速值。
- 业务数据转发方式采用直接转发时，建议在直连AP的交换机接口上配置组播报文抑制。
- 业务数据转发方式采用隧道转发时，建议在AC的流量模板下配置组播报文抑制。
建议在与AP直连的设备接口上配置端口隔离，如果不配置端口隔离，尤其是业务数据转发方式采用直接转发时，可能会在VLAN内形成大量不必要的广播报文，导致网络阻塞，影响用户体验。
隧道转发模式下，管理VLAN和业务VLAN不能配置为同一VLAN，且AP和AC之间只能放通管理VLAN，不能放通业务VLAN。
请按照WDS网络网规设计选用合适的天线，并选用天线校准工具进行校准。

操作步骤

配置周边设备

配置接入交换机Switch_B的GE0/0/1和GE0/0/2接口加入VLAN100和VLAN101，GE0/0/1的缺省VLAN为VLAN100。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd"><HUAWEI> <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1141689396190921">system-view</strong>
[HUAWEI] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1956857707190921">sysname Switch_B</strong>
[Switch_B] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b402801205190921">vlan batch 100 to 101</strong>
[Switch_B] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b611115067190921">interface gigabitEthernet 0/0/1</strong>
[Switch_B-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b212116232190921">port link-type trunk</strong>
[Switch_B-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1767714945190921">port trunk pvid vlan 100</strong>
[Switch_B-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1214832445190921">port trunk allow-pass vlan 100 to 101</strong>
[Switch_B-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b36947418190921">port-isolate enable</strong>
[Switch_B-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1464937259190921">quit</strong>
[Switch_B] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1250273224190921">interface gigabitEthernet 0/0/2</strong>
[Switch_B-GigabitEthernet0/0/2] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b541902358190921">port link-type trunk</strong>
[Switch_B-GigabitEthernet0/0/2] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1749851799190921">port trunk allow-pass vlan 100 to 101</strong>
[Switch_B-GigabitEthernet0/0/2] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b809501523190921">quit</strong></span></span>

配置汇聚交换机Switch_A的GE0/0/1接口加入VLAN100和VLAN101，GE0/0/2接口加入VLAN100，GE0/0/3接口加入VLAN101。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd"><HUAWEI> <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b511548958190921">system-view</strong>
[HUAWEI] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b489891529190921">sysname Switch_A</strong>
[Switch_A] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1311387655190921">vlan batch 100 to 101</strong>
[Switch_A] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1243101138190921">interface gigabitEthernet 0/0/1</strong>
[Switch_A-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1931666829190921">port link-type trunk</strong>
[Switch_A-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1503245325190921">port trunk allow-pass vlan 100 to 101</strong>
[Switch_A-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b289486029190921">quit</strong>
[Switch_A] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b458500069190921">interface gigabitEthernet 0/0/2</strong>
[Switch_A-GigabitEthernet0/0/2] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b779944513190921">port link-type trunk</strong>
[Switch_A-GigabitEthernet0/0/2] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b85068874190921">port trunk allow-pass vlan 100</strong>
[Switch_A-GigabitEthernet0/0/2] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b2034823831190921">quit</strong>
[Switch_A] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b929617411190921">interface gigabitEthernet 0/0/3</strong>
[Switch_A-GigabitEthernet0/0/3] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b766152642190921">port link-type trunk</strong>
[Switch_A-GigabitEthernet0/0/3] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1952032455190921">port trunk allow-pass vlan 101</strong>
[Switch_A-GigabitEthernet0/0/3] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912382_b204948751190921">quit</strong></span></span>

配置Router的接口GE1/0/0加入VLAN101，创建接口VLANIF101并配置IP地址为10.23.101.2/24。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd"><Huawei> <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912351_b118005268190921">system-view</strong>
[Huawei] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912351_b1176501588190921">sysname Router</strong>
[Router] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912351_b995805857190921">vlan batch 101</strong>
[Router] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912351_b906637926190921">interface gigabitethernet 1/0/0</strong>
[Router-GigabitEthernet1/0/0] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912351_b406876624190921">port link-type trunk</strong>
[Router-GigabitEthernet1/0/0] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912351_b1226529678190921">port trunk allow-pass vlan 101</strong>
[Router-GigabitEthernet1/0/0] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912351_b1131638750190921">quit</strong>
[Router] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912351_b648829236190921">interface vlanif 101</strong>
[Router-Vlanif101] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912351_b1969966747190921">ip address 10.23.101.2 24</strong>
[Router-Vlanif101] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912351_b1246477905190921">quit</strong></span></span>

配置AC与其它网络设备互通

配置AC的接口GE0/0/1，允许携带VLAN100的报文通过。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd"><HUAWEI> <strong id="ZH-CN_TASK_0176912378__b570291284190921">system-view</strong>
[HUAWEI] <strong id="ZH-CN_TASK_0176912378__b1926118503190921">sysname AC</strong>
[AC] <strong id="ZH-CN_TASK_0176912378__b96916095190921">vlan batch 100 101</strong>
[AC] <strong id="ZH-CN_TASK_0176912378__b404498836190921">interface gigabitEthernet 0/0/1</strong>
[AC-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0176912378__b651322997190921">port link-type trunk</strong>
[AC-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0176912378__b2619200190921">port trunk allow-pass vlan 100</strong>
[AC-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0176912378__b987613193190921">quit</strong></span></span>

配置DHCP服务器为STA和AP分配IP地址

DNS服务器地址请根据实际需要配置。常用配置方法如下：

接口地址池场景，需要在VLANIF接口视图下执行命令dhcp server dns-list ip-address &<1-8>。
全局地址池场景，需要在IP地址池视图下执行命令dns-list ip-address &<1-8>。

配置Switch_A作为DHCP服务器，通过接口地址池为STA分配IP地址。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[Switch_A] <strong id="ZH-CN_TASK_0176912378__b585097426190921">dhcp enable</strong>
[Switch_A] <strong id="ZH-CN_TASK_0176912378__b189439435190921">interface vlanif 101</strong>
[Switch_A-Vlanif101] <strong id="ZH-CN_TASK_0176912378__b686378840190921">ip address 10.23.101.1 24</strong>
[Switch_A-Vlanif101] <strong id="ZH-CN_TASK_0176912378__b1172640232190921">dhcp select interface</strong>
[Switch_A-Vlanif101] <strong id="ZH-CN_TASK_0176912378__b685516536190921">dhcp server gateway-list 10.23.101.2</strong>
[Switch_A-Vlanif101] <strong id="ZH-CN_TASK_0176912378__b116615007190921">quit</strong></span></span>

在AC上使能DHCP功能，并通过接口地址池为AP分配IP地址。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC] <strong id="ZH-CN_TASK_0176912378__b535076932190921">dhcp enable</strong>
[AC] <strong id="ZH-CN_TASK_0176912378__b1294910917190921">interface vlanif 100</strong>
[AC-Vlanif100] <strong id="ZH-CN_TASK_0176912378__b1403704681190921">ip address 10.23.100.1 24</strong>
[AC-Vlanif100] <strong id="ZH-CN_TASK_0176912378__b1618518344190921">dhcp select interface</strong>
[AC-Vlanif100] <strong id="ZH-CN_TASK_0176912378__b1710882234190921">quit</strong></span></span>

配置AP上线

创建AP组"ap-group1"、"ap-group2"和"ap-group3"。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC] <strong id="ZH-CN_TASK_0176912378__b1083860828190921">wlan</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b333966974190921">ap-group name ap-group1</strong>
[AC-wlan-ap-group-ap-group1] <strong id="ZH-CN_TASK_0176912378__b2129810468190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b1905879936190921">ap-group name ap-group2</strong>
[AC-wlan-ap-group-ap-group2] <strong id="ZH-CN_TASK_0176912378__b228340447190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b54960352190921">ap-group name ap-group3</strong>
[AC-wlan-ap-group-ap-group3] <strong id="ZH-CN_TASK_0176912378__b1032751598190921">quit</strong></span></span>

创建域管理模板，在域管理模板下配置AC的国家码并在AP组下引用域管理模板。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b1230094218190921">regulatory-domain-profile name default</strong>
[AC-wlan-regulate-domain-default] <strong id="ZH-CN_TASK_0176912378__b602460734190921">country-code cn</strong>
[AC-wlan-regulate-domain-default] <strong id="ZH-CN_TASK_0176912378__b1938077640190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b1312519707190921">ap-group name ap-group1</strong>
[AC-wlan-ap-group-ap-group1] <strong id="ZH-CN_TASK_0176912378__b204151839190921">regulatory-domain-profile default</strong>
Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continue?[Y/N]:<strong id="ZH-CN_TASK_0176912378__zh-cn_task_0175818418_b17491131153716">y</strong>  
[AC-wlan-ap-group-ap-group1] <strong id="ZH-CN_TASK_0176912378__b594088353190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b817937082190921">ap-group name ap-group2</strong>
[AC-wlan-ap-group-ap-group2] <strong id="ZH-CN_TASK_0176912378__b815776022190921">regulatory-domain-profile default</strong>
Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continue?[Y/N]:<strong id="ZH-CN_TASK_0176912378__zh-cn_task_0175818418_b17491131153716_1">y</strong>  
[AC-wlan-ap-group-ap-group2] <strong id="ZH-CN_TASK_0176912378__b1262782621190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b435925290190921">ap-group name ap-group3</strong>
[AC-wlan-ap-group-ap-group3] <strong id="ZH-CN_TASK_0176912378__b436826727190921">regulatory-domain-profile default</strong>
Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continue?[Y/N]:<strong id="ZH-CN_TASK_0176912378__zh-cn_task_0175818418_b17491131153716_2">y</strong>  
[AC-wlan-ap-group-ap-group3] <strong id="ZH-CN_TASK_0176912378__b1227479814190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b741675262190921">quit</strong></span></span>

配置AC的源接口。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC] <strong id="ZH-CN_TASK_0176912378__b1601735634190921">capwap source interface vlanif 100</strong></span></span>

将AP_1加入到AP组"ap-group1"，AP_2加入到AP组"ap-group2"，AP_3加入到AP组"ap-group3"。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC] <strong id="ZH-CN_TASK_0176912378__b1374021969190921">wlan</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b1265509873190921">ap auth-mode mac-auth</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b706866964190921">ap-id 1 ap-mac 60de-4474-9640</strong>
[AC-wlan-ap-1] <strong id="ZH-CN_TASK_0176912378__b176619692190921">ap-name AP_1</strong>
[AC-wlan-ap-1] <strong id="ZH-CN_TASK_0176912378__b600538503190921">ap-group ap-group1</strong>
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:<strong id="ZH-CN_TASK_0176912378__zh-cn_task_0175818418_b1651706244190906">y</strong>  
[AC-wlan-ap-1] <strong id="ZH-CN_TASK_0176912378__b435831157190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b1734348834190921">ap-id 2 ap-mac dcd2-fc04-b500</strong>
[AC-wlan-ap-2] <strong id="ZH-CN_TASK_0176912378__b1101981659190921">ap-name AP_2</strong>
[AC-wlan-ap-2] <strong id="ZH-CN_TASK_0176912378__b1077418825190921">ap-group ap-group2</strong>
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:<strong id="ZH-CN_TASK_0176912378__zh-cn_task_0175818418_b1651706244190906_1">y</strong>  
[AC-wlan-ap-2] <strong id="ZH-CN_TASK_0176912378__b1999555100190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b1250311975190921">ap-id 3 ap-mac dcd2-fc96-e4c0</strong>
[AC-wlan-ap-3] <strong id="ZH-CN_TASK_0176912378__b1533697021190921">ap-name AP_3</strong>
[AC-wlan-ap-3] <strong id="ZH-CN_TASK_0176912378__b1508108276190921">ap-group ap-group3</strong>
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:<strong id="ZH-CN_TASK_0176912378__zh-cn_task_0175818418_b1651706244190906_2">y</strong>  
[AC-wlan-ap-3] <strong id="ZH-CN_TASK_0176912378__b1982018367190921">quit</strong></span></span>

配置WDS业务参数

配置WDS节点使用的主要射频参数。本例中使用AP_1和AP_3的是AP8130DN的射频1，AP_2使用AP8130DN的射频0和射频1。配置AP_2的射频0工作在5GHz频段，为了减少信道干扰配置AP_2的射频0和射频1在不同的信道，射频1用于和AP_1建立WDS链路，射频0用于和AP_3建立WDS链路。"coverage distance"参数为射频覆盖距离，缺省情况下是3，单位是100m。本例中使用参数为4，用户可以根据实际情况配置该参数。

在WDS网络中，建立WDS链路的射频必须为同一信道。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b973163930190921">ap-id 2</strong>
[AC-wlan-ap-2] <strong id="ZH-CN_TASK_0176912378__b1881699822190921">radio 0</strong>
[AC-wlan-radio-2/0] <strong id="ZH-CN_TASK_0176912378__b594094206190921">frequency 5g</strong>
Warning: Modifying the frequency band will delete the channel, power, and antenn
a gain configurations of the current radio on the AP and reboot the AP. Continue
?[Y/N]:<strong id="ZH-CN_TASK_0176912378__b1855572944920">y</strong>
[AC-wlan-radio-2/0] <strong id="ZH-CN_TASK_0176912378__b1918124164190921">quit</strong>
[AC-wlan-ap-2] <strong id="ZH-CN_TASK_0176912378__b2038603550190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b1099814393190921">ap-id 1</strong>
[AC-wlan-ap-1] <strong id="ZH-CN_TASK_0176912378__b1669668313190921">radio 1</strong>
[AC-wlan-radio-1/1] <strong id="ZH-CN_TASK_0176912378__b1295367688190921">channel 40mhz-plus 157</strong>
Warning: This action may cause service interruption. Continue?[Y/N]<strong id="ZH-CN_TASK_0176912378__zh-cn_task_0175818418_b1384307436190906">y</strong> 
[AC-wlan-radio-1/1] <strong id="ZH-CN_TASK_0176912378__b1221378632190921">coverage distance 4</strong>
[AC-wlan-radio-1/1] <strong id="ZH-CN_TASK_0176912378__b1620252618190921">quit</strong>
[AC-wlan-ap-1] <strong id="ZH-CN_TASK_0176912378__b990496967190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b1896739578190921">ap-id 2</strong>
[AC-wlan-ap-2] <strong id="ZH-CN_TASK_0176912378__b2050334401190921">radio 0</strong>
[AC-wlan-radio-2/0] <strong id="ZH-CN_TASK_0176912378__b1449906778190921">channel 40mhz-plus 149</strong>
Warning: This action may cause service interruption. Continue?[Y/N]<strong id="ZH-CN_TASK_0176912378__zh-cn_task_0175818418_b1384307436190906_1">y</strong> 
[AC-wlan-radio-2/0] <strong id="ZH-CN_TASK_0176912378__b1331953824190921">coverage distance 4</strong>
[AC-wlan-radio-2/0] <strong id="ZH-CN_TASK_0176912378__b713880646190921">quit</strong>
[AC-wlan-ap-2] <strong id="ZH-CN_TASK_0176912378__b1137368453190921">radio 1</strong>
[AC-wlan-radio-2/1] <strong id="ZH-CN_TASK_0176912378__b823627637190921">channel 40mhz-plus 157</strong>
Warning: This action may cause service interruption. Continue?[Y/N]<strong id="ZH-CN_TASK_0176912378__zh-cn_task_0175818418_b1384307436190906_2">y</strong> 
[AC-wlan-radio-2/1] <strong id="ZH-CN_TASK_0176912378__b1762660870190921">coverage distance 4</strong>
[AC-wlan-radio-2/1] <strong id="ZH-CN_TASK_0176912378__b1281892212190921">quit</strong>
[AC-wlan-ap-2] <strong id="ZH-CN_TASK_0176912378__b1863079157190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b1502886139190921">ap-id 3</strong>
[AC-wlan-ap-3] <strong id="ZH-CN_TASK_0176912378__b604612192190921">radio 1</strong>
[AC-wlan-radio-3/1] <strong id="ZH-CN_TASK_0176912378__b298941086190921">channel 40mhz-plus 149</strong>
Warning: This action may cause service interruption. Continue?[Y/N]<strong id="ZH-CN_TASK_0176912378__zh-cn_task_0175818418_b1384307436190906_3">y</strong> 
[AC-wlan-radio-3/1] <strong id="ZH-CN_TASK_0176912378__b1153657628190921">coverage distance 4</strong>
[AC-wlan-radio-3/1] <strong id="ZH-CN_TASK_0176912378__b1519769423190921">quit</strong>
[AC-wlan-ap-3] <strong id="ZH-CN_TASK_0176912378__b1134031871190921">quit</strong></span></span>

配置WDS链路使用的安全模板"wds-security"，"wds-security"的安全策略为WPA2+PSK+AES。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b403659190190921">security-profile name wds-security</strong>
[AC-wlan-sec-prof-wds-security] <strong id="ZH-CN_TASK_0176912378__b680615166190921">security wpa2 psk pass-phrase a1234567 aes</strong>
[AC-wlan-sec-prof-wds-security] <strong id="ZH-CN_TASK_0176912378__b1709946791190921">quit</strong></span></span>

配置WDS白名单。配置AP_1绑定的WDS白名单"wds-list1"，仅允许AP_2接入。配置AP_2绑定的WDS白名单"wds-list2"，仅允许AP_3接入。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b36601203190921">wds-whitelist-profile name wds-list1</strong>
[AC-wlan-wds-whitelist-wds-list1] <strong id="ZH-CN_TASK_0176912378__b1735750903190921">peer-ap mac dcd2-fc04-b500</strong>
[AC-wlan-wds-whitelist-wds-list1] <strong id="ZH-CN_TASK_0176912378__b916949979190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b685098719190921">wds-whitelist-profile name wds-list2</strong>
[AC-wlan-wds-whitelist-wds-list2] <strong id="ZH-CN_TASK_0176912378__b1881723973190921">peer-ap mac dcd2-fc96-e4c0</strong>
[AC-wlan-wds-whitelist-wds-list2] <strong id="ZH-CN_TASK_0176912378__b1433362236190921">quit</strong></span></span>

配置WDS模板"wds-root"。网桥标识为"wlan-wds"，网桥模式为"root"，引用安全模板"wds-security"，以tagged形式允许无线业务VLAN101通过。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b1038160682190921">wds-profile name wds-root</strong>
[AC-wlan-wds-prof-wds-root] <strong id="ZH-CN_TASK_0176912378__b1316032594190921">wds-name wlan-wds</strong>
[AC-wlan-wds-prof-wds-root] <strong id="ZH-CN_TASK_0176912378__b447826258190921">wds-mode root</strong>
[AC-wlan-wds-prof-wds-root] <strong id="ZH-CN_TASK_0176912378__b2069070593190921">security-profile wds-security</strong>
[AC-wlan-wds-prof-wds-root] <strong id="ZH-CN_TASK_0176912378__b146100745190921">vlan tagged 101</strong>
[AC-wlan-wds-prof-wds-root] <strong id="ZH-CN_TASK_0176912378__b1070862885190921">quit</strong></span></span>

配置WDS模板"wds-leaf"。网桥标识为"wlan-wds"，网桥模式为"leaf"，引用安全模板"wds-security"，以tagged形式允许无线业务VLAN101通过。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b1978990317190921">wds-profile name wds-leaf</strong>
[AC-wlan-wds-prof-wds-leaf] <strong id="ZH-CN_TASK_0176912378__b209671589190921">wds-name wlan-wds</strong>
[AC-wlan-wds-prof-wds-leaf] <strong id="ZH-CN_TASK_0176912378__b1205789701190921">wds-mode leaf</strong>
[AC-wlan-wds-prof-wds-leaf] <strong id="ZH-CN_TASK_0176912378__b1124331768190921">security-profile wds-security</strong>
[AC-wlan-wds-prof-wds-leaf] <strong id="ZH-CN_TASK_0176912378__b1747517715190921">vlan tagged 101</strong>
[AC-wlan-wds-prof-wds-leaf] <strong id="ZH-CN_TASK_0176912378__b180610353190921">quit</strong></span></span>

配置AP组"ap-group1"的射频1引用WDS白名单"wds-list1"。配置AP组"ap-group2"的射频0引用WDS白名单"wds-list2"。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b61345628190921">ap-group name ap-group1</strong>
[AC-wlan-ap-group-ap-group1] <strong id="ZH-CN_TASK_0176912378__b21897143190921">radio 1</strong>
[AC-wlan-group-radio-ap-group1/1] <strong id="ZH-CN_TASK_0176912378__b1700089180190921">wds-whitelist-profile wds-list1</strong>
[AC-wlan-group-radio-ap-group1/1] <strong id="ZH-CN_TASK_0176912378__b1318962636190921">quit</strong>
[AC-wlan-ap-group-ap-group1] <strong id="ZH-CN_TASK_0176912378__b7517099190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b25484107190921">ap-group name ap-group2</strong>
[AC-wlan-ap-group-ap-group2] <strong id="ZH-CN_TASK_0176912378__b1891047689190921">radio 0</strong>
[AC-wlan-group-radio-ap-group2/0] <strong id="ZH-CN_TASK_0176912378__b715150691190921">wds-whitelist-profile wds-list2</strong>
[AC-wlan-group-radio-ap-group2/0] <strong id="ZH-CN_TASK_0176912378__b2099109151190921">quit</strong>
[AC-wlan-ap-group-ap-group2] <strong id="ZH-CN_TASK_0176912378__b781464261190921">quit</strong></span></span>

在AP组引用相关模板，使WDS业务生效

配置AP组"ap-group1"，引用WDS模板"wds-root"。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b1602084839190921">ap-group name ap-group1</strong>
[AC-wlan-ap-group-ap-group1] <strong id="ZH-CN_TASK_0176912378__b2053795237190921">wds-profile wds-root radio 1</strong>
Warning: This action may cause service interruption. Continue?[Y/N]<strong id="ZH-CN_TASK_0176912378__b1345959752190921">y</strong>
[AC-wlan-ap-group-ap-group1] <strong id="ZH-CN_TASK_0176912378__b153560152190921">quit</strong></span></span>

配置AP组"ap-group2"，引用WDS模板"wds-root"和"wds-leaf"。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b435889682190921">ap-group name ap-group2</strong>
[AC-wlan-ap-group-ap-group2] <strong id="ZH-CN_TASK_0176912378__b1308033525190921">wds-profile wds-leaf radio 1</strong>
Warning: This action may cause service interruption. Continue?[Y/N]<strong id="ZH-CN_TASK_0176912378__b1195614921190921">y</strong>
[AC-wlan-ap-group-ap-group2] <strong id="ZH-CN_TASK_0176912378__b1295779174190921">wds-profile wds-root radio 0</strong>
Warning: This action may cause service interruption. Continue?[Y/N]<strong id="ZH-CN_TASK_0176912378__b1778551390190921">y</strong>
[AC-wlan-ap-group-ap-group2] <strong id="ZH-CN_TASK_0176912378__b174749758190921">quit</strong></span></span>

配置AP组"ap-group3"，引用WDS模板"wds-leaf"。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b299621465190921">ap-group name ap-group3</strong>
[AC-wlan-ap-group-ap-group3] <strong id="ZH-CN_TASK_0176912378__b1283922214190921">wds-profile wds-leaf radio 1</strong>
Warning: This action may cause service interruption. Continue?[Y/N]<strong id="ZH-CN_TASK_0176912378__b10513943190921">y</strong>
[AC-wlan-ap-group-ap-group3] <strong id="ZH-CN_TASK_0176912378__b618593862190921">quit</strong></span></span>

配置WLAN业务参数

创建名为"wlan-net"的安全模板，并配置安全策略。

举例中以配置WPA-WPA2+PSK+AES的安全策略为例，密码为"a1234567"，实际配置中请根据实际情况，配置符合实际要求的安全策略。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912351_b1991067776190921">security-profile name wlan-net</strong>
[AC-wlan-sec-prof-wlan-net] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912351_b851752672190921">security wpa-wpa2 psk pass-phrase a1234567 aes</strong>
[AC-wlan-sec-prof-wlan-net] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912351_b337241812190921">quit</strong></span></span>

创建名为"wlan-net"的SSID模板，并配置SSID名称为"wlan-net"。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912351_b69022931190921">ssid-profile name wlan-net</strong>
[AC-wlan-ssid-prof-wlan-net] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912351_b36723145190921">ssid wlan-net</strong>
[AC-wlan-ssid-prof-wlan-net] <strong id="ZH-CN_TASK_0176912378__zh-cn_task_0176912351_b1738903244190921">quit</strong></span></span>

创建名为"wlan-net"的VAP模板，配置业务数据转发模式、业务VLAN，并且引用安全模板和SSID模板。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b325802584190921">vap-profile name wlan-net</strong>
[AC-wlan-vap-prof-wlan-net] <strong id="ZH-CN_TASK_0176912378__b977737230190921">forward-mode direct-forward</strong>
[AC-wlan-vap-prof-wlan-net] <strong id="ZH-CN_TASK_0176912378__b1495141052190921">service-vlan vlan-id 101</strong>
[AC-wlan-vap-prof-wlan-net] <strong id="ZH-CN_TASK_0176912378__b694670004190921">security-profile wlan-net</strong>
[AC-wlan-vap-prof-wlan-net] <strong id="ZH-CN_TASK_0176912378__b411554548190921">ssid-profile wlan-net</strong>
[AC-wlan-vap-prof-wlan-net] <strong id="ZH-CN_TASK_0176912378__b1808978522190921">quit</strong></span></span>

配置AP组引用VAP模板，本例中AP_1和AP_3使用射频1作为WDS回传频段，射频0作为无线业务覆盖射频。AP_1和AP_3上射频0都使用VAP模板"wlan-net"的配置。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b908252767190921">ap-group name ap-group1</strong>
[AC-wlan-ap-group-ap-group1] <strong id="ZH-CN_TASK_0176912378__b1382046263190921">vap-profile wlan-net wlan 1 radio 0</strong>
[AC-wlan-ap-group-ap-group1] <strong id="ZH-CN_TASK_0176912378__b1809376582190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b65311999190921">ap-group name ap-group3</strong>
[AC-wlan-ap-group-ap-group3] <strong id="ZH-CN_TASK_0176912378__b102213109190921">vap-profile wlan-net wlan 3 radio 0</strong>
[AC-wlan-ap-group-ap-group3] <strong id="ZH-CN_TASK_0176912378__b340378414190921">quit</strong></span></span>

配置AP 2.4G射频的信道和功率

举例中AP射频的信道和功率仅为示例，实际配置中请根据AP的国家码和网规结果进行配置。

关闭AP射频的信道和功率自动调优功能。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b1952682364190921">ap-id 1</strong>
[AC-wlan-ap-1] <strong id="ZH-CN_TASK_0176912378__b1706775230190921">radio 0</strong>
[AC-wlan-radio-1/0] <strong id="ZH-CN_TASK_0176912378__b1242645581190921">calibrate auto-channel-select disable</strong>
[AC-wlan-radio-1/0] <strong id="ZH-CN_TASK_0176912378__b1300815155190921">calibrate auto-txpower-select disable</strong>
[AC-wlan-radio-1/0] <strong id="ZH-CN_TASK_0176912378__b665627777190921">quit</strong>
[AC-wlan-ap-1] <strong id="ZH-CN_TASK_0176912378__b1937134891190921">radio 1</strong>
[AC-wlan-radio-1/1] <strong id="ZH-CN_TASK_0176912378__b964854892190921">calibrate auto-channel-select disable</strong>
[AC-wlan-radio-1/1] <strong id="ZH-CN_TASK_0176912378__b1162033439190921">calibrate auto-txpower-select disable</strong>
[AC-wlan-radio-1/1] <strong id="ZH-CN_TASK_0176912378__b165350850190921">quit</strong>
[AC-wlan-ap-1]<strong id="ZH-CN_TASK_0176912378__b621637696190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b1234068911190921">ap-id 2</strong>
[AC-wlan-ap-2] <strong id="ZH-CN_TASK_0176912378__b229842564190921">radio 0</strong>
[AC-wlan-radio-2/0] <strong id="ZH-CN_TASK_0176912378__b1342934364190921">calibrate auto-channel-select disable</strong>
[AC-wlan-radio-2/0] <strong id="ZH-CN_TASK_0176912378__b1711548828190921">calibrate auto-txpower-select disable</strong>
[AC-wlan-radio-2/0] <strong id="ZH-CN_TASK_0176912378__b1360369703190921">quit</strong>
[AC-wlan-ap-2] <strong id="ZH-CN_TASK_0176912378__b1588443530190921">radio 1</strong>
[AC-wlan-radio-2/1] <strong id="ZH-CN_TASK_0176912378__b588981595190921">calibrate auto-channel-select disable</strong>
[AC-wlan-radio-2/1] <strong id="ZH-CN_TASK_0176912378__b1840220766190921">calibrate auto-txpower-select disable</strong>
[AC-wlan-radio-2/1] <strong id="ZH-CN_TASK_0176912378__b1725333130190921">quit</strong>
[AC-wlan-ap-2]<strong id="ZH-CN_TASK_0176912378__b1261464425190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b622120274190921">ap-id 3</strong>
[AC-wlan-ap-3] <strong id="ZH-CN_TASK_0176912378__b171438672190921">radio 0</strong>
[AC-wlan-radio-3/0] <strong id="ZH-CN_TASK_0176912378__b2132985172190921">calibrate auto-channel-select disable</strong>
[AC-wlan-radio-3/0] <strong id="ZH-CN_TASK_0176912378__b271202200190921">calibrate auto-txpower-select disable</strong>
[AC-wlan-radio-3/0] <strong id="ZH-CN_TASK_0176912378__b1526864825190921">quit</strong>
[AC-wlan-ap-3] <strong id="ZH-CN_TASK_0176912378__b91027589190921">radio 1</strong>
[AC-wlan-radio-3/1] <strong id="ZH-CN_TASK_0176912378__b1535412287190921">calibrate auto-channel-select disable</strong>
[AC-wlan-radio-3/1] <strong id="ZH-CN_TASK_0176912378__b1762757286190921">calibrate auto-txpower-select disable</strong>
[AC-wlan-radio-3/1] <strong id="ZH-CN_TASK_0176912378__b85195689190921">quit</strong>
[AC-wlan-ap-3]<strong id="ZH-CN_TASK_0176912378__b78324845190921">quit</strong></span></span>

配置AP射频0的信道和功率。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b586443666190921">ap-id 1</strong>
[AC-wlan-ap-1] <strong id="ZH-CN_TASK_0176912378__b423411733190921">radio 0</strong>
[AC-wlan-radio-1/0] <strong id="ZH-CN_TASK_0176912378__b2007086283190921">channel 20mhz 6</strong>
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC-wlan-radio-1/0] <strong id="ZH-CN_TASK_0176912378__b1030138178190921">eirp 127</strong>
[AC-wlan-radio-1/0] <strong id="ZH-CN_TASK_0176912378__b1917905811190921">quit</strong>
[AC-wlan-ap-1]<strong id="ZH-CN_TASK_0176912378__b559165017190921">quit</strong></span></span>

验证WDS业务配置结果

完成配置后，执行命令display ap all，查看WDS各节点是否成功上线，当"State"字段显示为"nor"，则表示AP已成功上线。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b1107332355190921">display ap all</strong>
Total AP information:
nor  : normal          [3]
Extra information: P  : insufficient power supply
--------------------------------------------------------------------------------------------------
ID   MAC            Name   Group     IP            Type            State STA Uptime      ExtraInfo
--------------------------------------------------------------------------------------------------
1    60de-4474-9640 AP_1   ap-group1 10.23.100.254 AP8130DN        <strong id="ZH-CN_TASK_0176912378__b58094169190921">nor</strong>   0   20M:16S     -
2    dcd2-fc04-b500 AP_2   ap-group2 10.23.100.253 AP8130DN        <strong id="ZH-CN_TASK_0176912378__b2093037571190921">nor</strong>   0   17S         -
3    dcd2-fc96-e4c0 AP_3   ap-group3 10.23.100.252 AP8130DN        <strong id="ZH-CN_TASK_0176912378__b1074348771190921">nor</strong>   0   3M:55S      -
--------------------------------------------------------------------------------------------------
Total: 3
</span></span>

执行命令display wlan wds link all，查看WDS链路相关信息。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b1520620916190921">display wlan wds link all</strong>
Rf   : radio ID             Dis  : coverage distance(100m)                      
Ch   : channel              Per  : drop percent(%)                              
TSNR : total SNR(dB)        P-   : peer                                         
WDS  : WDS mode             Re   : retry ratio(%)                               
RSSI : RSSI(dBm)            MaxR : max RSSI(dBm)                                
-------------------------------------------------------------------------------------------------
APName  P-APName  Rf Dis   Ch   WDS     P-Status        RSSI  MaxR  Per  Re   TS  NR  SNR(Ch0~3:dB)
-------------------------------------------------------------------------------------------------
AP_1    AP_2      1  4     157  root     normal          -39   -30   0    5   55    42/57/-/-
AP_2    AP_3      0  4     149  root     normal          -56   -40   0    9   59    45/40/60/-
AP_2    AP_1      1  4     157  leaf     normal          -32   -30   0    15  58    41/36/60/-
AP_3    AP_2      1  4     149  leaf     normal          -33   -32   0    7   59    51/59/-/-
---------------------------------------------------------------------------------------------------
Total: 4</span></span>

WLAN业务配置会自动下发给AP，配置完成后，通过执行命令display vap ssid wlan-net查看如下信息，当"Status"项显示为"ON"时，表示AP对应的射频上的VAP已创建成功。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b287801376190921">display vap ssid wlan-net</strong>
WID : WLAN ID
--------------------------------------------------------------------------------
AP ID AP name RfID WID   BSSID          Status  Auth type     STA   SSID
--------------------------------------------------------------------------------
1     AP_1    0    1     60DE-4474-9640 <strong id="ZH-CN_TASK_0176912378__b32085512190921">ON</strong>      WPA/WPA2-PSK  0     wlan-net
3     AP_3    0    3     DCD2-FC96-E4C0 <strong id="ZH-CN_TASK_0176912378__b1358396375190921">ON</strong>      WPA/WPA2-PSK  0     wlan-net
-------------------------------------------------------------------------------
Total: 2</span></span>

STA搜索到名为"wlan-net"的无线网络，输入密码"a1234567"并正常关联后，在AC上执行display station ssid wlan-net命令，可以查看到用户已经接入到无线网络"wlan-net"中。

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0176912378__b277077308190921">display station ssid wlan-net</strong>
Rf/WLAN: Radio ID/WLAN ID
Rx/Tx: link receive rate/link transmit rate(Mbps)
---------------------------------------------------------------------------------
STA MAC         AP ID Ap name   Rf/WLAN  Band  Type  Rx/Tx      RSSI  VLAN  IP address
---------------------------------------------------------------------------------
e019-1dc7-1e08  1     AP_1      0/1      2.4G  11n   3/34       -68   101   10.23.101.254
---------------------------------------------------------------------------------
Total: 1 2.4G: 1 5G: 0</span></span>

配置文件

Switch_A的配置文件

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">#
sysname Switch_A
#
 vlan batch 100 to 101
#
dhcp enable 
#
interface Vlanif101
 ip address 10.23.101.1 255.255.255.0
 dhcp select interface
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 100 to 101
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 100
#
interface GigabitEthernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 101
#
return</span></span>

Switch_B的配置文件

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">#
sysname Switch_B
#
 vlan batch 100 to 101
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk pvid vlan 100
 port trunk allow-pass vlan 100 to 101
 port-isolate enable group 1 
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 100 to 101
#
return</span></span>

Router的配置文件

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">#
sysname Router
#
vlan batch 101
#
interface Vlanif101
 ip address 10.23.101.2 255.255.255.0
#
interface GigabitEthernet1/0/0
 port link-type trunk
 port trunk allow-pass vlan 101
#
return
</span></span>

AC的配置文件

javascript 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">#
 sysname AC
#
 vlan batch 100 to 101
#
dhcp enable 
#
interface Vlanif100
 ip address 10.23.100.1 255.255.255.0
 dhcp select interface
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 100
#
capwap source interface vlanif100
#
wlan
 security-profile name wlan-net
  security wpa-wpa2 psk pass-phrase %^%#m"tz0f>~7.[`^6RWdzwCy16hJj/Mc!,}s`X*B]}A%^%# aes
 security-profile name wds-security
  security wpa2 psk pass-phrase %^%#n}5+DgC3wLB.hJ34j5;*QMv<8"9#{Bq@ghBI3L9K%^%# aes
 ssid-profile name wlan-net
  ssid wlan-net
 vap-profile name wlan-net
  service-vlan vlan-id 101
  ssid-profile wlan-net
  security-profile wlan-net
 wds-whitelist-profile name wds-list1
  peer-ap mac dcd2-fc04-b500
 wds-whitelist-profile name wds-list2
  peer-ap mac dcd2-fc96-e4c0
 wds-profile name wds-leaf
  security-profile wds-security
  vlan tagged 101
  wds-name wlan-wds
 wds-profile name wds-root
  security-profile wds-security
  vlan tagged 101
  wds-name wlan-wds
  wds-mode root
 regulatory-domain-profile name default
 ap-group name ap-group1
  radio 0
   vap-profile wlan-net wlan 3
  radio 1
   wds-profile wds-root
   wds-whitelist-profile wds-list1
 ap-group name ap-group2
  radio 0
   wds-profile wds-root
   wds-whitelist-profile wds-list2
  radio 1
   wds-profile wds-leaf
 ap-group name ap-group3
  radio 0
   vap-profile wlan-net wlan 1
  radio 1
   wds-profile wds-leaf
 ap-id 1 type-id 39 ap-mac 60de-4474-9640 ap-sn 210235554710CB000042
  ap-name AP_1
  ap-group ap-group1
  radio 0
   channel 20mhz 6
   eirp 127
   calibrate auto-channel-select disable    calibrate auto-txpower-select disable
  radio 1
   channel 40mhz-plus 157
   coverage distance 4
   calibrate auto-channel-select disable    calibrate auto-txpower-select disable
 ap-id 2 type-id 39 ap-mac dcd2-fc04-b500 ap-sn 210235555310CC000094
  ap-name AP_2
  ap-group ap-group2
  radio 0
   frequency 5g
   channel 40mhz-plus 149
   eirp 127
   coverage distance 4 
   calibrate auto-channel-select disable    calibrate auto-txpower-select disable
  radio 1
   channel 40mhz-plus 157
   eirp 127
   coverage distance 4 
   calibrate auto-channel-select disable    calibrate auto-txpower-select disable
 ap-id 3 type-id 39 ap-mac dcd2-fc96-e4c0 ap-sn 210235557610DB000046
  ap-name AP_3
  ap-group ap-group3
  radio 0
   channel 20mhz 11
   eirp 127
   calibrate auto-channel-select disable    calibrate auto-txpower-select disable
  radio 1
   channel 40mhz-plus 149
   coverage distance 4 
   calibrate auto-channel-select disable    calibrate auto-txpower-select disable
#  
return</span></span>

华为配置WDS手拉手业务示例

配置WDS手拉手业务示例

业务需求

组网需求

数据规划

配置思路

配置注意事项

操作步骤

配置接入交换机Switch_B的GE0/0/1和GE0/0/2接口加入VLAN100和VLAN101，GE0/0/1的缺省VLAN为VLAN100。

配置汇聚交换机Switch_A的GE0/0/1接口加入VLAN100和VLAN101，GE0/0/2接口加入VLAN100，GE0/0/3接口加入VLAN101。

配置Router的接口GE1/0/0加入VLAN101，创建接口VLANIF101并配置IP地址为10.23.101.2/24。

配置AC的接口GE0/0/1，允许携带VLAN100的报文通过。

配置Switch_A作为DHCP服务器，通过接口地址池为STA分配IP地址。

在AC上使能DHCP功能，并通过接口地址池为AP分配IP地址。

创建AP组"ap-group1"、"ap-group2"和"ap-group3"。

创建域管理模板，在域管理模板下配置AC的国家码并在AP组下引用域管理模板。

配置AC的源接口。

将AP_1加入到AP组"ap-group1"，AP_2加入到AP组"ap-group2"，AP_3加入到AP组"ap-group3"。

配置WDS链路使用的安全模板"wds-security"，"wds-security"的安全策略为WPA2+PSK+AES。

配置WDS白名单。配置AP_1绑定的WDS白名单"wds-list1"，仅允许AP_2接入。配置AP_2绑定的WDS白名单"wds-list2"，仅允许AP_3接入。

配置WDS模板"wds-root"。网桥标识为"wlan-wds"，网桥模式为"root"，引用安全模板"wds-security"，以tagged形式允许无线业务VLAN101通过。

配置WDS模板"wds-leaf"。网桥标识为"wlan-wds"，网桥模式为"leaf"，引用安全模板"wds-security"，以tagged形式允许无线业务VLAN101通过。

配置AP组"ap-group1"的射频1引用WDS白名单"wds-list1"。配置AP组"ap-group2"的射频0引用WDS白名单"wds-list2"。

配置AP组"ap-group1"，引用WDS模板"wds-root"。

配置AP组"ap-group2"，引用WDS模板"wds-root"和"wds-leaf"。

配置AP组"ap-group3"，引用WDS模板"wds-leaf"。

创建名为"wlan-net"的安全模板，并配置安全策略。

创建名为"wlan-net"的SSID模板，并配置SSID名称为"wlan-net"。

创建名为"wlan-net"的VAP模板，配置业务数据转发模式、业务VLAN，并且引用安全模板和SSID模板。

配置AP组引用VAP模板，本例中AP_1和AP_3使用射频1作为WDS回传频段，射频0作为无线业务覆盖射频。AP_1和AP_3上射频0都使用VAP模板"wlan-net"的配置。

关闭AP射频的信道和功率自动调优功能。

配置AP射频0的信道和功率。

配置文件