配置WDS背靠背业务示例

组网图形
图1配置WDS背靠背组网示意图

业务需求
组网需求
数据规划
配置思路
配置注意事项
操作步骤
配置文件

业务需求

在某些企业网络中，有线网络部署受施工条件的限制，需要连接的网络之间有障碍物或传输距离较远，AP无法全部采用有线连接接入到AC。为了解决这个问题采用背靠背方式WDS技术将AP通过有线方式级联组成中继网桥，保证了长距离网络传输中的无线链路带宽。

组网需求

AC组网方式：旁挂二层组网。
DHCP部署方式：
- AC作为DHCP服务器为AP分配IP地址。
- 汇聚交换机Switch_A作为DHCP服务器为PC分配IP地址。
无线回传方式：WDS背靠背方式。
回传射频：5G频段。

数据规划

AP名称	类型	MAC
AP_1	AP8130DN	dcd2-fcf6-76a0
AP_2	AP8130DN	60de-4474-9640
AP_3	AP8130DN	dcd2-fc04-b500
AP_4	AP8130DN	60de-4476-e360
[表1AP数据规划表]

配置项	数据
AP管理VLAN	VLAN100
有线PC业务VLAN	VLAN101
DHCP服务器	AC作为AP的DHCP服务器，Switch_A作为PC的DHCP服务器
AP地址池	10.23.100.2～10.23.100.254/24
PC地址池	10.23.101.3～10.23.101.254/24
AC的源接口IP地址	VLANIF100：10.23.100.1/24
WDS模板	* wds-net1：AP_1使用的WDS模板，网桥模式为root，引用WDS白名单"wds-list1"，只允许AP_2接入 * wds-net2：AP_3使用的WDS模板，网桥模式为root，引用WDS白名单"wds-list2"，只允许AP_4接入 * wds-net3：AP_2、AP_4使用的WDS模板，不需要引用WDS白名单。
WDS角色	* AP_1：root * AP_2：leaf * AP_3：root * AP_4：leaf
WDS网桥标识	wds-net
WDS白名单	* wds-list1：添加AP_2的MAC，并绑定在AP_1上 * wds-list2：添加AP_4的MAC，并绑定在AP_3上
WDS使用的射频	射频1(AP_1、AP_2) * 带宽：40MHz-plus * 信道：157 * 射频覆盖距离参数：4（单位：100m）射频1(AP_3、AP_4) * 带宽：40MHz-plus * 信道：149 * 射频覆盖距离参数：4（单位：100m）
安全模板	* 名称：wds-sec * 安全策略：WPA2+PSK+AES * 密码类型：PASS-PHRASE * 密码：a1234567
AP组	* wds-root1：AP_1 * wds-root2：AP_3 * wds-leaf1：AP_2 * wds-leaf2：AP_4，AP_4有线口下行连接了PC，需要为其配置有线口模板参数，所以AP_2和AP_4分成了两个AP组
[表2AC数据规划表]

配置思路

配置区域A和区域B之间的WDS链路，使AP_1和AP_2可以在AC上线。
配置Switch_C，使AP_2和AP_3之间的有线网络互通。
配置区域B和区域C之间的WDS链路，使AP_4可以在AC上线。
配置AP_4的有线口，使AP_4上的有线用户可以访问网络。

配置注意事项

纯组播报文由于协议要求在无线空口没有ACK机制保障，且无线空口链路不稳定，为了纯组播报文能够稳定发送，通常会以低速报文形式发送。如果网络侧有大量异常组播流量涌入，则会造成无线空口拥堵。为了减小大量低速组播报文对无线网络造成的冲击，建议配置组播报文抑制功能。配置前请确认是否有组播业务，如果有，请谨慎配置限速值。
- 业务数据转发方式采用直接转发时，建议在直连AP的交换机接口上配置组播报文抑制。
- 业务数据转发方式采用隧道转发时，建议在AC的流量模板下配置组播报文抑制。
建议在与AP直连的设备接口上配置端口隔离，如果不配置端口隔离，尤其是业务数据转发方式采用直接转发时，可能会在VLAN内形成大量不必要的广播报文，导致网络阻塞，影响用户体验。
隧道转发模式下，管理VLAN和业务VLAN不能配置为同一VLAN，且AP和AC之间只能放通管理VLAN，不能放通业务VLAN。
V200R021C00版本开始，配置CAPWAP源接口或源地址时，会检查和安全相关的配置是否已存在，包括DTLS加密的PSK、AC间DTLS加密的PSK、登录AP的用户名和密码、全局离线管理VAP的登录密码，均已存在才能成功配置，否则会提示用户先完成相关的配置。
V200R021C00版本开始，AC默认开启CAPWAP控制隧道的DTLS加密功能。开启该功能，添加AP时AP会上线失败，此时需要先开启CAPWAP DTLS不认证方式（capwap dtls no-auth enable ）让AP上线，以便AP获取安全凭证，AP上线后应及时关闭该功能（undo capwap dtls no-auth enable），避免未授权AP上线。

操作步骤

配置周边设备

配置接入交换机Switch_B的GE0/0/1和GE0/0/2接口加入VLAN100和VLAN101，GE0/0/1的缺省VLAN为VLAN100。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd"><HUAWEI> <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1141689396190921">system-view</strong>
[HUAWEI] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1956857707190921">sysname Switch_B</strong>
[Switch_B] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b402801205190921">vlan batch 100 to 101</strong>
[Switch_B] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b611115067190921">interface gigabitEthernet 0/0/1</strong>
[Switch_B-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b212116232190921">port link-type trunk</strong>
[Switch_B-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1767714945190921">port trunk pvid vlan 100</strong>
[Switch_B-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1214832445190921">port trunk allow-pass vlan 100 to 101</strong>
[Switch_B-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b36947418190921">port-isolate enable</strong>
[Switch_B-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1464937259190921">quit</strong>
[Switch_B] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1250273224190921">interface gigabitEthernet 0/0/2</strong>
[Switch_B-GigabitEthernet0/0/2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b541902358190921">port link-type trunk</strong>
[Switch_B-GigabitEthernet0/0/2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1749851799190921">port trunk allow-pass vlan 100 to 101</strong>
[Switch_B-GigabitEthernet0/0/2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b809501523190921">quit</strong></span></span>

配置汇聚交换机Switch_A的GE0/0/1接口加入VLAN100和VLAN101，GE0/0/2接口加入VLAN100，GE0/0/3接口加入VLAN101。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd"><HUAWEI> <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b511548958190921">system-view</strong>
[HUAWEI] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b489891529190921">sysname Switch_A</strong>
[Switch_A] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1311387655190921">vlan batch 100 to 101</strong>
[Switch_A] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1243101138190921">interface gigabitEthernet 0/0/1</strong>
[Switch_A-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1931666829190921">port link-type trunk</strong>
[Switch_A-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1503245325190921">port trunk allow-pass vlan 100 to 101</strong>
[Switch_A-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b289486029190921">quit</strong>
[Switch_A] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b458500069190921">interface gigabitEthernet 0/0/2</strong>
[Switch_A-GigabitEthernet0/0/2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b779944513190921">port link-type trunk</strong>
[Switch_A-GigabitEthernet0/0/2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b85068874190921">port trunk allow-pass vlan 100</strong>
[Switch_A-GigabitEthernet0/0/2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b2034823831190921">quit</strong>
[Switch_A] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b929617411190921">interface gigabitEthernet 0/0/3</strong>
[Switch_A-GigabitEthernet0/0/3] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b766152642190921">port link-type trunk</strong>
[Switch_A-GigabitEthernet0/0/3] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1952032455190921">port trunk allow-pass vlan 101</strong>
[Switch_A-GigabitEthernet0/0/3] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b204948751190921">quit</strong></span></span>

配置接入交换机Switch_C的接口GE0/0/1和GE0/0/2接口加入VLAN101。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd"><HUAWEI> <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1872685572190921">system-view</strong>
[HUAWEI] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b2255061190921">sysname Switch_C</strong>
[Switch_C] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b200734861190921">vlan batch 101</strong>
[Switch_C] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b690802990190921">interface gigabitEthernet 0/0/1</strong>
[Switch_C-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1787226765190921">port link-type trunk</strong>
[Switch_C-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1295817260190921">port trunk allow-pass vlan 101</strong>
[Switch_C-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b532973534190921">quit</strong>
[Switch_C] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1888702196190921">interface gigabitEthernet 0/0/2</strong>
[Switch_C-GigabitEthernet0/0/2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b728097451190921">port link-type trunk</strong>
[Switch_C-GigabitEthernet0/0/2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b112179000190921">port trunk allow-pass vlan 101</strong>
[Switch_C-GigabitEthernet0/0/2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b941707297190921">quit</strong></span></span>

配置Router的接口GE1/0/0加入VLAN101，创建接口VLANIF101并配置IP地址为10.23.101.2/24。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd"><Huawei> <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_zh-cn_task_0176912351_b118005268190921">system-view</strong>
[Huawei] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_zh-cn_task_0176912351_b1176501588190921">sysname Router</strong>
[Router] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_zh-cn_task_0176912351_b995805857190921">vlan batch 101</strong>
[Router] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_zh-cn_task_0176912351_b906637926190921">interface gigabitethernet 1/0/0</strong>
[Router-GigabitEthernet1/0/0] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_zh-cn_task_0176912351_b406876624190921">port link-type trunk</strong>
[Router-GigabitEthernet1/0/0] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_zh-cn_task_0176912351_b1226529678190921">port trunk allow-pass vlan 101</strong>
[Router-GigabitEthernet1/0/0] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_zh-cn_task_0176912351_b1131638750190921">quit</strong>
[Router] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_zh-cn_task_0176912351_b648829236190921">interface vlanif 101</strong>
[Router-Vlanif101] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_zh-cn_task_0176912351_b1969966747190921">ip address 10.23.101.2 24</strong>
[Router-Vlanif101] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_zh-cn_task_0176912351_b1246477905190921">quit</strong></span></span>

配置AC与其它网络设备互通

如果AC直接连接AP，需要在AC直连AP的接口上配置缺省VLAN为管理VLAN100。

配置AC的接口GE0/0/1加入VLAN100。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd"><HUAWEI> <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b731946079190921">system-view</strong>
[HUAWEI] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b952407640190921">sysname AC</strong>
[AC] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1467184913190921">vlan batch 100 to 101</strong>
[AC] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1947889633190921">interface gigabitEthernet 0/0/1</strong>
[AC-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1596289078190921">port link-type trunk</strong>
[AC-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b211747313190921">port trunk allow-pass vlan 100</strong>
[AC-GigabitEthernet0/0/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1424420637190921">quit</strong></span></span>

配置DHCP服务器为PC和AP分配IP地址

配置Switch_A作为DHCP服务器，通过接口地址池为PC分配IP地址。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[Switch_A] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1738378169190921">dhcp enable</strong>
[Switch_A] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1039504325190921">interface vlanif 101</strong>
[Switch_A-Vlanif101] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b890680725190921">ip address 10.23.101.1 24</strong>
[Switch_A-Vlanif101] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b400571813190921">dhcp select interface</strong>
[Switch_A-Vlanif101] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1769770478190921">quit</strong></span></span>

在AC上使能DHCP功能，并通过接口地址池为AP分配IP地址。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1986932748190921">dhcp enable</strong>
[AC] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b499081131190921">interface vlanif 100</strong>
[AC-Vlanif100] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1698050937190921">ip address 10.23.100.1 24</strong>
[AC-Vlanif100] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b763351126190921">dhcp select interface</strong>
[AC-Vlanif100] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1093437267190921">quit</strong></span></span>

配置AP组、国家码和AC的源接口

创建WDS背靠背root AP的AP组"wds-root1"、"wds-root2"，和leaf AP的AP组"wds-leaf1"、"wds-leaf2"。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1003889497190921">wlan</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1780038119190921">ap-group name wds-root1</strong>
[AC-wlan-ap-group-wds-root1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b915764115190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b363406762190921">ap-group name wds-root2</strong>
[AC-wlan-ap-group-wds-root2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1049826925190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1962039808190921">ap-group name wds-leaf1</strong>
[AC-wlan-ap-group-wds-leaf1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b608427497190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1939183343190921">ap-group name wds-leaf2</strong>
[AC-wlan-ap-group-wds-leaf2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1466208701190921">quit</strong></span></span>

创建域管理模板，在域管理模板下配置AC的国家码并在AP组下引用域管理模板。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1350520769190921">regulatory-domain-profile name domain1</strong>
[AC-wlan-regulate-domain-domain1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b360537477190921">country-code cn</strong>
[AC-wlan-regulate-domain-domain1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1298891525190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b524035522190921">ap-group name wds-root1</strong>
[AC-wlan-ap-group-wds-root1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b950159343190921">regulatory-domain-profile domain1</strong>
Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continue?[Y/N]:<strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_zh-cn_task_0175818418_b17491131153716">y</strong>  
[AC-wlan-ap-group-wds-root1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b582981094190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b784868663190921">ap-group name wds-root2</strong>
[AC-wlan-ap-group-wds-root2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b2119351513190921">regulatory-domain-profile domain1</strong>
Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continue?[Y/N]:<strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_zh-cn_task_0175818418_b17491131153716_1">y</strong>  
[AC-wlan-ap-group-wds-root2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1473841740190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1754898706190921">ap-group name wds-leaf1</strong>
[AC-wlan-ap-group-wds-leaf1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b358150644190921">regulatory-domain-profile domain1</strong>
Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continue?[Y/N]:<strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_zh-cn_task_0175818418_b17491131153716_2">y</strong>  
[AC-wlan-ap-group-wds-leaf1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b389272857190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1149475187190921">ap-group name wds-leaf2</strong>
[AC-wlan-ap-group-wds-leaf2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b60840508190921">regulatory-domain-profile domain1</strong>
Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continue?[Y/N]:<strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_zh-cn_task_0175818418_b17491131153716_3">y</strong>  
[AC-wlan-ap-group-wds-leaf2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b794382077190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b510123346190921">quit</strong></span></span>

配置AC的源接口。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1825811008190921">capwap source interface vlanif 100</strong></span></span>

将AP_1加入到AP组"wds-root1"，AP_3加入到AP组"wds-root2"，AP_2加入到AP组"wds-leaf1"，AP_4加入到AP组"wds-leaf2"。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b127650893190921">wlan</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b287223171190921">ap auth-mode mac-auth</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1428794151190921">ap-id 1 ap-mac dcd2-fcf6-76a0</strong>
[AC-wlan-ap-1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1753922815190921">ap-name AP_1</strong>
[AC-wlan-ap-1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1574738284190921">ap-group wds-root1</strong>
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:<strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_zh-cn_task_0175818418_b1651706244190906">y</strong>  
[AC-wlan-ap-1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b459260765190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b664350779190921">ap-id 2 ap-mac 60de-4474-9640</strong>
[AC-wlan-ap-2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b895106219190921">ap-name AP_2</strong>
[AC-wlan-ap-2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b13471106190921">ap-group wds-leaf1</strong>
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:<strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_zh-cn_task_0175818418_b1651706244190906_1">y</strong>  
[AC-wlan-ap-2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1993952519190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1203864542190921">ap-id 3 ap-mac dcd2-fc04-b500</strong>
[AC-wlan-ap-3] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b294390181190921">ap-name AP_3</strong>
[AC-wlan-ap-3] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1214529024190921">ap-group wds-root2</strong>
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:<strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_zh-cn_task_0175818418_b1651706244190906_2">y</strong>  
[AC-wlan-ap-3] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1875565336190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b13133478190921">ap-id 4 ap-mac 60de-4476-e360</strong>
[AC-wlan-ap-4] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1880618819190921">ap-name AP_4</strong>
[AC-wlan-ap-4] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1409904351190921">ap-group wds-leaf2</strong>
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:<strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_zh-cn_task_0175818418_b1651706244190906_3">y</strong>  
[AC-wlan-ap-4] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b209739068190921">quit</strong></span></span>

配置WDS业务参数

配置WDS节点使用的主要射频参数。本例中使用的是AP8130DN的射频1，"coverage distance"参数为射频覆盖距离，缺省情况下是3，单位是100m。本例中使用参数为4，用户可以根据实际情况配置该参数。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b528163193190921">ap-group name wds-root1</strong>
[AC-wlan-ap-group-wds-root1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1327837496190921">radio 1</strong>
[AC-wlan-group-radio-wds-root1/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b2121125742190921">channel 40mhz-plus 157</strong>
Warning: This action may cause service interruption. Continue?[Y/N]<strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_zh-cn_task_0175818418_b1384307436190906">y</strong> 
[AC-wlan-group-radio-wds-root1/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1651796313190921">coverage distance 4</strong>
[AC-wlan-group-radio-wds-root1/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b611888854190921">quit</strong>
[AC-wlan-ap-group-wds-root1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1447875664190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1277898093190921">ap-group name wds-root2</strong>
[AC-wlan-ap-group-wds-root2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b630680589190921">radio 1</strong>
[AC-wlan-group-radio-wds-root2/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1403376974190921">channel 40mhz-plus 149</strong>
Warning: This action may cause service interruption. Continue?[Y/N]<strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_zh-cn_task_0175818418_b1384307436190906_1">y</strong> 
[AC-wlan-group-radio-wds-root2/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1043311189190921">coverage distance 4</strong>
[AC-wlan-group-radio-wds-root2/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b244873708190921">quit</strong>
[AC-wlan-ap-group-wds-root2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b65353265190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1840012067190921">ap-group name wds-leaf1</strong>
[AC-wlan-ap-group-wds-leaf1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1563978121190921">radio 1</strong>
[AC-wlan-group-radio-wds-leaf1/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b51942609190921">channel 40mhz-plus 157</strong>
Warning: This action may cause service interruption. Continue?[Y/N]<strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_zh-cn_task_0175818418_b1384307436190906_2">y</strong> 
[AC-wlan-group-radio-wds-leaf1/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b646200330190921">coverage distance 4</strong>
[AC-wlan-group-radio-wds-leaf1/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1185812114190921">quit</strong>
[AC-wlan-ap-group-wds-leaf1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b991586554190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1330221623190921">ap-group name wds-leaf2</strong>
[AC-wlan-ap-group-wds-leaf2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b80992393190921">radio 1</strong>
[AC-wlan-group-radio-wds-leaf2/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b446916588190921">channel 40mhz-plus 149</strong>
Warning: This action may cause service interruption. Continue?[Y/N]<strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_zh-cn_task_0175818418_b1384307436190906_3">y</strong> 
[AC-wlan-group-radio-wds-leaf2/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b2023858635190921">coverage distance 4</strong>
[AC-wlan-group-radio-wds-leaf2/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b2096749670190921">quit</strong>
[AC-wlan-ap-group-wds-leaf2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b2067338687190921">quit</strong></span></span>

配置WDS链路使用的安全模板"wds-sec"，"wds-sec"的安全策略为WPA2+PSK+AES。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1233596875190921">security-profile name wds-sec</strong>
[AC-wlan-sec-prof-wds-sec] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b414810367190921">security wpa2 psk pass-phrase a1234567 aes</strong>
[AC-wlan-sec-prof-wds-sec] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b14763904190921">quit</strong></span></span>

配置WDS白名单。配置AP_1绑定的WDS白名单"wds-list1"，仅允许AP_2接入。配置AP_3绑定的WDS白名单"wds-list2"，仅允许AP_4接入。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1282755844190921">wds-whitelist-profile name wds-list1</strong>
[AC-wlan-wds-whitelist-wds-list1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b606010231190921">peer-ap mac 60de-4474-9640</strong>
[AC-wlan-wds-whitelist-wds-list1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1317224618190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1905074757190921">wds-whitelist-profile name wds-list2</strong>
[AC-wlan-wds-whitelist-wds-list2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b752799505190921">peer-ap mac 60de-4476-e360</strong>
[AC-wlan-wds-whitelist-wds-list2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1297291586190921">quit</strong></span></span>

配置WDS模板"wds-net1"。网桥标识为"wds-net"，网桥模式为"root"，引用安全模板"wds-sec"，以tagged形式允许业务VLAN101通过。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1428161881190921">wds-profile name wds-net1</strong>
[AC-wlan-wds-prof-wds-net1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b514686767190921">wds-name wds-net</strong>
[AC-wlan-wds-prof-wds-net1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b877365171190921">wds-mode root</strong>
[AC-wlan-wds-prof-wds-net1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1537932059190921">security-profile wds-sec</strong>
[AC-wlan-wds-prof-wds-net1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b2050344051190921">vlan tagged 101</strong>
[AC-wlan-wds-prof-wds-net1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b572357304190921">quit</strong></span></span>

配置WDS模板"wds-net2"。网桥标识为"wds-net"，网桥模式为"root"，引用安全模板"wds-sec"，以tagged形式允许业务VLAN101通过。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b381129404190921">wds-profile name wds-net2</strong>
[AC-wlan-wds-prof-wds-net2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b230684810190921">wds-name wds-net</strong>
[AC-wlan-wds-prof-wds-net2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b398465640190921">wds-mode root</strong>
[AC-wlan-wds-prof-wds-net2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b635333294190921">security-profile wds-sec</strong>
[AC-wlan-wds-prof-wds-net2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b674528416190921">vlan tagged 101</strong>
[AC-wlan-wds-prof-wds-net2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b217723501190921">quit</strong></span></span>

配置WDS模板"wds-net3"。网桥标识为"wds-net"，网桥模式为"leaf"，引用安全模板"wds-sec"，以tagged形式允许业务VLAN101通过。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1762115581190921">wds-profile name wds-net3</strong>
[AC-wlan-wds-prof-wds-net3] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b700923996190921">wds-name wds-net</strong>
[AC-wlan-wds-prof-wds-net3] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1786298761190921">wds-mode leaf</strong>
[AC-wlan-wds-prof-wds-net3] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1808167603190921">security-profile wds-sec</strong>
[AC-wlan-wds-prof-wds-net3] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b531364611190921">vlan tagged 101</strong>
[AC-wlan-wds-prof-wds-net3] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b209795187190921">quit</strong></span></span>

配置AP组"wds-root1"的射频1引用WDS白名单"wds-list1"，只允许AP_2接入。配置AP组"wds-root2"的射频1引用WDS白名单"wds-list2"，只允许AP_4接入。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b319652654190921">ap-group name wds-root1</strong>
[AC-wlan-ap-group-wds-root1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1323209580190921">radio 1</strong>
[AC-wlan-group-radio-wds-root1/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b58958293190921">wds-whitelist-profile wds-list1</strong>
[AC-wlan-group-radio-wds-root1/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b2100956636190921">quit</strong>
[AC-wlan-ap-group-wds-root1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1852361723190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1136366507190921">ap-group name wds-root2</strong>
[AC-wlan-ap-group-wds-root2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1403121751190921">radio 1</strong>
[AC-wlan-group-radio-wds-root2/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1596040309190921">wds-whitelist-profile wds-list2</strong>
[AC-wlan-group-radio-wds-root2/1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1971831060190921">quit</strong>
[AC-wlan-ap-group-wds-root2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b870748559190921">quit</strong></span></span>

配置AP_4的有线口使用的有线口模板，使其有线口模式为"endpoint"。本例中配置有线口的PVID为业务VLAN101，以untagged形式加入VLAN101。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1453426006190921">wired-port-profile name wired-port</strong>
[AC-wlan-wired-port-wired-port] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b2146673801190921">mode endpoint</strong>
Warning: If the AP goes online through a wired port, the incorrect port mode con
figuration will cause the AP to go out of management. This fault can be recovere
d only by modifying the configuration on the AP. Continue? [Y/N]:<strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b4818143614431">y</strong>         
[AC-wlan-wired-port-wired-port] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b227068829190921">vlan pvid 101</strong>
[AC-wlan-wired-port-wired-port] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1564970666190921">vlan untagged 101</strong>
[AC-wlan-wired-port-wired-port] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b764294974190921">quit</strong></span></span>

在AP组引用相关模板，使WDS业务生效

配置AP组"wds-root1"，引用WDS模板"wds-net1"。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b400184746190921">ap-group name wds-root1</strong>
[AC-wlan-ap-group-wds-root1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b2016202677190921">wds-profile wds-net1 radio 1</strong>
Warning: This action may cause service interruption. Continue?[Y/N]<strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b619141300190921">y</strong>
[AC-wlan-ap-group-wds-root1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1010931633190921">quit</strong></span></span>

配置AP组"wds-root2"，引用WDS模板"wds-net2"。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b669550798190921">ap-group name wds-root2</strong>
[AC-wlan-ap-group-wds-root2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b963643792190921">wds-profile wds-net2 radio 1</strong>
Warning: This action may cause service interruption. Continue?[Y/N]<strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1961140080190921">y</strong>
[AC-wlan-ap-group-wds-root2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b38640186190921">quit</strong></span></span>

配置AP组"wds-leaf1"，引用WDS模板"wds-net3"。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1145330727190921">ap-group name wds-leaf1</strong>
[AC-wlan-ap-group-wds-leaf1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b2136116247190921">wds-profile wds-net3 radio 1</strong>
Warning: This action may cause service interruption. Continue?[Y/N]<strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1514922813190921">y</strong>
[AC-wlan-ap-group-wds-leaf1] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b467015569190921">quit</strong></span></span>

配置AP组"wds-leaf2"，引用WDS模板"wds-net3"，引用有线口模板"wired-port"。

AP引用了endpoint模式的AP有线口模板后，需要AP在AC中上线获取配置，然后重启AP才能生效。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b645968494190921">ap-group name wds-leaf2</strong>
[AC-wlan-ap-group-wds-leaf2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b78834958190921">wds-profile wds-net3 radio 1</strong>
Warning: This action may cause service interruption. Continue?[Y/N]<strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1686127686190921">y</strong>
[AC-wlan-ap-group-wds-leaf2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b949178787190921">wired-port-profile wired-port gigabitethernet 0</strong>
[AC-wlan-ap-group-wds-leaf2] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b368993130190921">quit</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1892800206190921">quit</strong>
[AC] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1085456915190921">quit</strong></span></span>

检查AP上线后重启AP_4

完成配置后，执行命令display ap all，查看WDS各节点是否成功上线，当"State"字段显示为"nor"，则表示AP已成功上线。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd"><AC> <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1173768206190921">display ap all</strong>
Total AP information:                                                           
nor  : normal          [4]                                                      
Extra information: P  : insufficient power supply
---------------------------------------------------------------------------------------------------
ID   MAC            Name Group     IP              Type            State STA Uptime      ExtraInfo
---------------------------------------------------------------------------------------------------
1    60de-4474-9640 AP_1 wds-root1 10.23.100.250   AP8130DN        <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1087377586190921">nor</strong>   0   20M:16S     -
4    60de-4476-e360 AP_4 wds-leaf2 10.23.100.251   AP8130DN        <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b992058175190921">nor</strong>   0   17S         -
2    dcd2-fc04-b500 AP_2 wds-leaf1 10.23.100.253   AP8130DN        <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1692496850190921">nor</strong>   0   3M:55S      -
3    dcd2-fcf6-76a0 AP_3 wds-root2 10.23.100.252   AP8130DN        <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b298190949190921">nor</strong>   0   2M:55S      -
-------------------------------------------------------------------------------------------------
Total: 4                                                                        </span></span>

执行命令display wlan wds link all，查看WDS链路相关信息。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd"><AC> <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1632204988190921">display wlan wds link all</strong>
Rf   : radio ID             Dis  : coverage distance(100m)                      
Ch   : channel              Per  : drop percent(%)                              
TSNR : total SNR(dB)        P-   : peer                                         
WDS  : WDS mode             Re   : retry ratio(%)                               
RSSI : RSSI(dBm)            MaxR : max RSSI(dBm)                                
-------------------------------------------------------------------------------------------------
APName  P-APName  Rf Dis   Ch   WDS     P-Status        RSSI  MaxR  Per  Re   TS   NR  SNR(Ch0~3:dB)
-------------------------------------------------------------------------------------------------
AP_1    AP_2      1  4     157  root    normal          -44   -40   0    3    50   45/49/-/-
AP_2    AP_1      1  4     157  leaf    normal          -38   -36   0    49   57   36/31/57/-
AP_3    AP_4      1  4     149  root    normal          -11   -7    0    1    83   81/80/-/-
AP_4    AP_3      1  4     149  leaf    normal          -4    -4    0    0    91   90/85/-/-
-------------------------------------------------------------------------------------------------
Total: 4</span></span>

确认AP已经上线的情况下，重启AP_4，使AP_4上的有线口工作模式生效。

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd"><AC> <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b551825633190921">system-view</strong>
[AC] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b469103114190921">wlan</strong>
[AC-wlan-view] <strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b1281324899190921">ap-reset ap-group wds-leaf2</strong>
Warning: Reset AP(s), continue?[Y/N]:<strong id="ZH-CN_TASK_0180389387__zh-cn_task_0176912382_b312272916190921">y</strong></span></span>

验证配置结果

AP_4重新上线后，验证AP_4上的有线用户可以访问网络。

配置文件

Switch_A的配置文件

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">#
sysname Switch_A
#
 vlan batch 100 to 101
#
dhcp enable 
#
interface Vlanif101
 ip address 10.23.101.1 255.255.255.0
 dhcp select interface
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 100 to 101
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 100
#
interface GigabitEthernet0/0/3
 port link-type trunk
 port trunk allow-pass vlan 101
#
return</span></span>

Switch_B的配置文件

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">#
sysname Switch_B
#
 vlan batch 100 to 101
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk pvid vlan 100
 port trunk allow-pass vlan 100 to 101
port-isolate enable group 1 
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 100 to 101
#
return</span></span>

Switch_C的配置文件

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">#
sysname Switch_C
#
 vlan batch 101
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 101
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 101 
#
return</span></span>

Router的配置文件

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">#
sysname Router
#
vlan batch 101
#
interface Vlanif101
 ip address 10.23.101.2 255.255.255.0
#
interface GigabitEthernet1/0/0
 port link-type trunk
 port trunk allow-pass vlan 101
#
return
</span></span>

AC的配置文件

screen 复制代码

<span style="color:#333333"><span style="background-color:#dddddd">#                
 sysname AC
#                      
 vlan batch 100 to 101
#                             
dhcp enable 
#                       
interface Vlanif100           
 ip address 10.23.100.1 255.255.255.0        
 dhcp select interface       
#                 
interface GigabitEthernet0/0/1              
 port link-type trunk                            
 port trunk allow-pass vlan 100           
#                      
capwap source interface vlanif100
#
wlan                                                                            
 security-profile name wds-sec                                                  
  security wpa2 psk pass-phrase %^%#n}5+DgC3wLB.hJ34j5;*QMv<8"9#{Bq@ghBI3L9K%^%# aes  
 wds-whitelist-profile name wds-list1                                           
  peer-ap mac 60de-4474-9640
 wds-whitelist-profile name wds-list2                                           
  peer-ap mac 60de-4476-e360                                                    
 wds-profile name wds-net1                                                      
  security-profile wds-sec                                                      
  vlan tagged 101                                                               
  wds-name wds-net                                                              
  wds-mode root                                                                 
 wds-profile name wds-net2                                                      
  security-profile wds-sec                                                      
  vlan tagged 101                                                               
  wds-name wds-net                                                              
  wds-mode root                                                                 
 wds-profile name wds-net3                                                      
  security-profile wds-sec                                                      
  vlan tagged 101                                                               
  wds-name wds-net                                                              
 regulatory-domain-profile name domain1                                         
 wired-port-profile name wired-port                                             
  mode endpoint                                                                 
  vlan pvid 101                                                                 
  vlan untagged 101                                                               
 ap-group name wds-leaf1                                                        
  regulatory-domain-profile domain1                                             
  radio 1                                                    
   wds-profile wds-net3           
   channel 40mhz-plus 157                                                       
   coverage distance 4 
 ap-group name wds-leaf2                                                        
  wired-port-profile wired-port gigabitethernet 0                               
  regulatory-domain-profile domain1                                             
  radio 1                                                                       
   wds-profile wds-net3                                                         
   channel 40mhz-plus 149                                                       
   coverage distance 4 
 ap-group name wds-root1                                                        
  regulatory-domain-profile domain1                                             
  radio 1                                                                       
   wds-profile wds-net1                                                         
   wds-whitelist-profile wds-list1                                              
   channel 40mhz-plus 157                                                       
   coverage distance 4             
 ap-group name wds-root2                                                        
  regulatory-domain-profile domain1                                             
  radio 1                                                                       
   wds-profile wds-net2                                                         
   wds-whitelist-profile wds-list2                                              
   channel 40mhz-plus 149                                                       
   coverage distance 4                                                          
 ap-id 1 type-id 39 ap-mac 60de-4474-9640 ap-sn 210235554710CB000042
  ap-name AP_1
  ap-group wds-root1
 ap-id 2 type-id 39 ap-mac dcd2-fc04-b500 ap-sn 210235555310CC000094
  ap-name AP_2
  ap-group wds-leaf1
 ap-id 3 type-id 39 ap-mac dcd2-fcf6-76a0 ap-sn 210235419610D2000097
  ap-name AP_3
  ap-group wds-root2
 ap-id 4 type-id 39 ap-mac 60de-4476-e360 ap-sn 210235557610DB000046
  ap-name AP_4
  ap-group wds-leaf2
#  
return</span></span>

华为配置WDS背靠背业务示例

配置WDS背靠背业务示例

业务需求

组网需求

数据规划

配置思路

配置注意事项

操作步骤

配置接入交换机Switch_B的GE0/0/1和GE0/0/2接口加入VLAN100和VLAN101，GE0/0/1的缺省VLAN为VLAN100。

配置汇聚交换机Switch_A的GE0/0/1接口加入VLAN100和VLAN101，GE0/0/2接口加入VLAN100，GE0/0/3接口加入VLAN101。

配置接入交换机Switch_C的接口GE0/0/1和GE0/0/2接口加入VLAN101。

配置Router的接口GE1/0/0加入VLAN101，创建接口VLANIF101并配置IP地址为10.23.101.2/24。

配置AC的接口GE0/0/1加入VLAN100。

配置Switch_A作为DHCP服务器，通过接口地址池为PC分配IP地址。

在AC上使能DHCP功能，并通过接口地址池为AP分配IP地址。

创建WDS背靠背root AP的AP组"wds-root1"、"wds-root2"，和leaf AP的AP组"wds-leaf1"、"wds-leaf2"。

创建域管理模板，在域管理模板下配置AC的国家码并在AP组下引用域管理模板。

配置AC的源接口。

将AP_1加入到AP组"wds-root1"，AP_3加入到AP组"wds-root2"，AP_2加入到AP组"wds-leaf1"，AP_4加入到AP组"wds-leaf2"。

配置WDS节点使用的主要射频参数。本例中使用的是AP8130DN的射频1，"coverage distance"参数为射频覆盖距离，缺省情况下是3，单位是100m。本例中使用参数为4，用户可以根据实际情况配置该参数。

配置WDS链路使用的安全模板"wds-sec"，"wds-sec"的安全策略为WPA2+PSK+AES。

配置WDS白名单。配置AP_1绑定的WDS白名单"wds-list1"，仅允许AP_2接入。配置AP_3绑定的WDS白名单"wds-list2"，仅允许AP_4接入。

配置WDS模板"wds-net1"。网桥标识为"wds-net"，网桥模式为"root"，引用安全模板"wds-sec"，以tagged形式允许业务VLAN101通过。

配置WDS模板"wds-net2"。网桥标识为"wds-net"，网桥模式为"root"，引用安全模板"wds-sec"，以tagged形式允许业务VLAN101通过。

配置WDS模板"wds-net3"。网桥标识为"wds-net"，网桥模式为"leaf"，引用安全模板"wds-sec"，以tagged形式允许业务VLAN101通过。

配置AP组"wds-root1"的射频1引用WDS白名单"wds-list1"，只允许AP_2接入。配置AP组"wds-root2"的射频1引用WDS白名单"wds-list2"，只允许AP_4接入。

配置AP组"wds-root1"，引用WDS模板"wds-net1"。

配置AP组"wds-root2"，引用WDS模板"wds-net2"。

配置AP组"wds-leaf1"，引用WDS模板"wds-net3"。

配置AP组"wds-leaf2"，引用WDS模板"wds-net3"，引用有线口模板"wired-port"。

完成配置后，执行命令display ap all，查看WDS各节点是否成功上线，当"State"字段显示为"nor"，则表示AP已成功上线。

配置文件