【网工】华为配置专题进阶篇⑤

目录

■无线WLAN配置

需求

实验



■无线WLAN配置

需求

1、配置隧道转发模式,完成AP上线,内部办公用户(VLAN101)能通过无线上网。

2、访客(VLAN102)能通过无线上网,配置为直接转发模式。隧道转发与直接转发过程如下图所示:

3、管理VLAN100,业务VAN101和102,VLAN101为内部用户提供上网服务(SSID:work),VLAN 102为访客提供上网服务(SSTD:guest)。AP通过AC DHCP自动获取 IP 192.168.100.0/24地址段的地址,用户通过SW1 DHCP自动分配对应网段的地址。

实验

SW1

<Huawei>system-view

Huawei\]****sysname**** SW1 \[SW1\]****vlan batch**** 101 102 200 \[SW1\]****interface**** Gigabitethernet 0/0/3 \[SW1-GigabitEthernet0/0/3\] ****port link-type access**** \[SW1-GigabitEthernet0/0/3\] ****port default vlan 200**** \[SW1-GigabitEthernet0/0/3\]quit \[SW1\]****interface**** GigabitEthernet 0/0/2 \[SW1-GigabitEthernet0/0/2\] ****port link-type trunk**** \[SW1-G1gabitEthernet0/0/2\]****port trunk allow-pass vlan all**** \[SW1-G1gabitEthernet0/0/2\]****quit**** \[SW1\]****interface**** GigabitEthernet 0/0/1 \[SW1-GigabitEthernet0/0/1\]****port link-type trunk**** \[SW1-GigabitEthernet0/0/1\]****port trunk allow-pass vlan 100**** \[SW1-Gigabitethernet0/0/1\]quit \[SW1\]dhcp enable \[SW1\]****interface**** vlanif 101 \[SW1-vlanif101\]ip add 192.168.101.254 24 \[SW1-vlanif101\]quit \[SW1\]****interface**** vlanif 102 \[SW1-vlanif102\]ip add 192.168.102.254 24 \[SW1-vlanif102\]quit \[SW1\]****interface**** vlanif 200 \[SW1-vlanif200\]ip add 192.168.200.1 30 \[SW1-vlanif200\]quit \[SW1\]dhcp enable \[SW1\]interface vlanif 101 \[SW1-vlanif101\]****dhcp select interface**** \[SW1-vlanif101\]quit \[SW1\]interface vlanif 102 \[SW1-vlanif102\]****dhcp select interface**** \[SW1-vlanif102\]quit \[SW1

SW1\]vlan 100 \[SW1-vlan100\]quit \[SW1\]interface g0/0/1 \[SW1-GigabitEthernet0/0/1\]port trunk allow-pass vlan 102 100 \[SW1-GigabitEthernet0/0/1\]quit \[SW1

Router

<Huawei>system-view

Huawei\]****sysname**** Router \[Router\]****interface**** GigabitEthernet 0/0/0 \[Router-GigabitEthernet0/0/0\]****ip add**** 192.168.200.2 30 \[Router-GigabitEthernet0/0/0\]****quit**** \[Router\]ip route-static 192.168.101.0 24 192.168.200.1 \[Router\]ip route-static 192.168.102.0 24 192.168.200.1

SW2

<Huawei>system-view

Huawei\]****sysname**** SW2 \[SW2\]vlan 100 \[SW2-vlan100\]quit \[SW2\]****interface**** GigabitEthernet 0/0/3 \[SW2-GigabitEthernet0/0/3\]port link-type trunk \[SW2-GigabitEthernet0/0/3\]port trunk allow-pass vlan 100 \[SW2-GigabitEthernet0/0/3\]quit \[SW2\]****interface**** GigabitEthernet 0/0/1 \[SW2-GigabitEthernet0/0/1\]port link-type trunk \[SW2-GigabitEthernet0/0/1\]port trunk allow-pass vlan 100 \[SW2-GigabitEthernet0/0/1\]port trunk pvid vlan 100 \[SW2-GigabitEthernet0/0/1\]quit \[SW2

SW2\]vlan 102 \[SW2-vlan102\]quit \[SW2\]interface g0/0/1 \[SW2-GigabitEthernet0/0/1\]port trunk allow-pass vlan 100 102 \[SW2-GigabitEthernet0/0/1\]int g0/0/3 \[SW2-GigabitEthernet0/0/3\]port trunk allow-pass vlan 100 102 \[SW2-GigabitEthernet0/0/3\]quit \[SW2

AC6605

<Huawei>system-view

Huawei\]sysname AC6605 \[AC6605\]vlan batch 100 101 102 \[AC6605\]****interface**** GigabitEthernet 0/0/1 \[AC6605-GigabitEthernet0/0/1\]port link-type trunk \[AC6605-GigabitEthernet0/0/1\]port trunk allow-pass vlan all \[AC6605-GigabitEthernet0/0/1\]quit \[AC6605\]interface vlanif 100 \[AC6605-vlanif100\]ip add 192.168.100.254 24 \[AC6605-vlanif100\]quit \[AC6605\]dhcp enable \[AC6605\]interface vlanif 100 \[AC6605-vlanif100\]dhcp select interface \[AC6605-vlanif100\]quit \[AC6605\]wlan \[AC6605-wlan-view\]regulatory-domain-profile name china \[AC6605-wlan-regulate-domain-china\]country-code CN \[AC6605-wlan-regulate-domain-china\]quit \[AC6605-wlan-view\]ap-group name jiaoxue \[AC6605-wlan-ap-group-jiaoxue\]regulatory-domain-profile china \[AC6605-wlan-ap-group-jiaoxue\]quit \[AC6605-wlan-view\]quit \[AC6605\]capwap source interface vlanif 100 \[AC6605\]wlan \[AC6605-wlan-view\]ap auth-mode mac-auth \[AC6605-wlan-view\]ap-id 1 ap-mac 00e0-fc3f-7500 \[AC6605-wlan-ap-1\]ap-name JX001 \[AC6605-wlan-ap-1\]ap-group jiaoxue \[AC6605-wlan-ap-1\]****quit**** \[AC6605-wlan-view\]****quit**** \[AC6605\]****display ap all****

进行[SW1]vlan 100操作后。

AC6605\]****display ap all****

AC6605\]wlan \[AC6605-wlan-view\]security-profile name sec_work \[AC6605-wlan-sec-prof-sec_work\]****security wpa-wpa2 psk pass-phrase a1234567 aes**** \[AC6605-wlan-sec-prof-sec_work\]quit \[AC6605-wlan-view\]quit # 配置SSID \[AC6605\]wlan \[AC6605-wlan-view\]****ssid-profile**** name profile_work \[AC6605-wlan-ssid-prof-profile_work\]****ssid**** work \[AC6605-wlan-ssid-prof-profile_work\]quit \[AC6605-wlan-view\]vap-profile name vap_work \[AC6605-wlan-vap-prof-vap_work\]ssid-profile profile_work \[AC6605-wlan-vap-prof-vap_work\]****forward-mode**** ****tunnel**** \[AC6605-wlan-vap-prof-vap_work\]service-vlan vlan-id 101 \[AC6605-wlan-vap-prof-vap_work\]security-profile sec_work \[AC6605-wlan-vap-prof-vap_work\]quit \[AC6605-wlan-view\]ap-group name jiaoxue \[AC6605-wlan-ap-group-jiaoxue\]****vap-profile vap_work wlan 1 radio 0**** \[AC6605-wlan-ap-group-jiaoxue\]quit \[AC6605-wlan-view\]quit # 访客 \[AC6605\]wlan \[AC6605-wlan-view\]ssid-profile name profile_guest \[AC6605-wlan-ssid-prof-profile_guest\]ssid guest \[AC6605-wlan-ssid-prof-profile_guest\]quit \[AC6605-wlan-view\]vap-profile name vap_guest \[AC6605-wlan-vap-prof-vap_guest\]****forward-mode**** ****direct-forward**** \[AC6605-wlan-vap-prof-vap_guest\]service-vlan vlan-id 102 \[AC6605-wlan-vap-prof-vap_guest\]security-profile sec_work \[AC6605-wlan-vap-prof-vap_guest\]ssid-profile profile_guest \[AC6605-wlan-vap-prof-vap_guest\]quit \[AC6605-wlan-view\]ap-group name jiaoxue \[AC6605-wlan-ap-group-jiaoxue\]****vap-profile vap_guest wlan 2 radio all****

至此,本文分享的内容就结束了。

相关推荐
程序员编程指南1 小时前
Qt 网络编程进阶:RESTful API 调用
c语言·网络·c++·qt·restful
香蕉割草机2 小时前
高性能网络DPDK、RDMA、XDP初探
网络
程序员编程指南3 小时前
Qt 网络编程进阶:网络安全与加密
c语言·网络·c++·qt·web安全
未来之窗软件服务4 小时前
基于 Nginx 与未来之窗防火墙构建下一代自建动态网络防护体系—仙盟创梦IDE
网络·ide·nginx·服务器安全·仙盟创梦ide·东方仙盟
GOATLong5 小时前
传输层协议TCP
c语言·开发语言·网络·c++·网络协议·tcp/ip
wanhengidc5 小时前
服务器被网络攻击后该如何进行处理?
运维·服务器·网络
学Linux的语莫6 小时前
k8s的nodeport和ingress
网络·rpc·kubernetes
网络~小白6 小时前
MSTP技术
网络
嶔某7 小时前
网络:应用层
linux·服务器·网络·c++
小徐不徐说11 小时前
每日一算:华为-批萨分配问题
数据结构·c++·算法·leetcode·华为·动态规划·后端开发