目录
■无线WLAN配置
需求
1、配置隧道转发模式，完成AP上线，内部办公用户（VLAN101）能通过无线上网。
2、访客（VLAN102）能通过无线上网，配置为直接转发模式。隧道转发与直接转发过程如下图所示：
3、管理VLAN100，业务VAN101和102，VLAN101为内部用户提供上网服务（SSID：work),VLAN 102为访客提供上网服务(SSTD:guest)。AP通过AC DHCP自动获取 IP 192.168.100.0/24地址段的地址，用户通过SW1 DHCP自动分配对应网段的地址。
实验
SW1
<Huawei>system-view
Huaweisysname SW1
SW1vlan batch 101 102 200
SW1interface Gigabitethernet 0/0/3
SW1-GigabitEthernet0/0/3 port link-type access
SW1-GigabitEthernet0/0/3 port default vlan 200
SW1-GigabitEthernet0/0/3quit
SW1interface GigabitEthernet 0/0/2
SW1-GigabitEthernet0/0/2 port link-type trunk
SW1-G1gabitEthernet0/0/2port trunk allow-pass vlan all
SW1-G1gabitEthernet0/0/2quit
SW1interface GigabitEthernet 0/0/1
SW1-GigabitEthernet0/0/1port link-type trunk
SW1-GigabitEthernet0/0/1port trunk allow-pass vlan 100
SW1-Gigabitethernet0/0/1quit
SW1dhcp enable
SW1interface vlanif 101
SW1-vlanif101ip add 192.168.101.254 24
SW1-vlanif101quit
SW1interface vlanif 102
SW1-vlanif102ip add 192.168.102.254 24
SW1-vlanif102quit
SW1interface vlanif 200
SW1-vlanif200ip add 192.168.200.1 30
SW1-vlanif200quit
SW1dhcp enable
SW1interface vlanif 101
SW1-vlanif101dhcp select interface
SW1-vlanif101quit
SW1interface vlanif 102
SW1-vlanif102dhcp select interface
SW1-vlanif102quit
SW1
SW1vlan 100
SW1-vlan100quit
SW1interface g0/0/1
SW1-GigabitEthernet0/0/1port trunk allow-pass vlan 102 100
SW1-GigabitEthernet0/0/1quit
SW1
Router
<Huawei>system-view
Huaweisysname Router
Routerinterface GigabitEthernet 0/0/0
Router-GigabitEthernet0/0/0ip add 192.168.200.2 30
Router-GigabitEthernet0/0/0quit
Routerip route-static 192.168.101.0 24 192.168.200.1
Routerip route-static 192.168.102.0 24 192.168.200.1
SW2
<Huawei>system-view
Huaweisysname SW2
SW2vlan 100
SW2-vlan100quit
SW2interface GigabitEthernet 0/0/3
SW2-GigabitEthernet0/0/3port link-type trunk
SW2-GigabitEthernet0/0/3port trunk allow-pass vlan 100
SW2-GigabitEthernet0/0/3quit
SW2interface GigabitEthernet 0/0/1
SW2-GigabitEthernet0/0/1port link-type trunk
SW2-GigabitEthernet0/0/1port trunk allow-pass vlan 100
SW2-GigabitEthernet0/0/1port trunk pvid vlan 100
SW2-GigabitEthernet0/0/1quit
SW2
SW2vlan 102
SW2-vlan102quit
SW2interface g0/0/1
SW2-GigabitEthernet0/0/1port trunk allow-pass vlan 100 102
SW2-GigabitEthernet0/0/1int g0/0/3
SW2-GigabitEthernet0/0/3port trunk allow-pass vlan 100 102
SW2-GigabitEthernet0/0/3quit
SW2
AC6605
<Huawei>system-view
Huaweisysname AC6605
AC6605vlan batch 100 101 102
AC6605interface GigabitEthernet 0/0/1
AC6605-GigabitEthernet0/0/1port link-type trunk
AC6605-GigabitEthernet0/0/1port trunk allow-pass vlan all
AC6605-GigabitEthernet0/0/1quit
AC6605interface vlanif 100
AC6605-vlanif100ip add 192.168.100.254 24
AC6605-vlanif100quit
AC6605dhcp enable
AC6605interface vlanif 100
AC6605-vlanif100dhcp select interface
AC6605-vlanif100quit
AC6605wlan
AC6605-wlan-viewregulatory-domain-profile name china
AC6605-wlan-regulate-domain-chinacountry-code CN
AC6605-wlan-regulate-domain-chinaquit
AC6605-wlan-viewap-group name jiaoxue
AC6605-wlan-ap-group-jiaoxueregulatory-domain-profile china
AC6605-wlan-ap-group-jiaoxuequit
AC6605-wlan-viewquit
AC6605capwap source interface vlanif 100
AC6605wlan
AC6605-wlan-viewap auth-mode mac-auth
AC6605-wlan-viewap-id 1 ap-mac 00e0-fc3f-7500
AC6605-wlan-ap-1ap-name JX001
AC6605-wlan-ap-1ap-group jiaoxue
AC6605-wlan-ap-1quit
AC6605-wlan-viewquit
AC6605display ap all
进行SW1vlan 100操作后。
AC6605display ap all
AC6605wlan
AC6605-wlan-viewsecurity-profile name sec_work
AC6605-wlan-sec-prof-sec_worksecurity wpa-wpa2 psk pass-phrase a1234567 aes
AC6605-wlan-sec-prof-sec_workquit
AC6605-wlan-viewquit
配置SSID
AC6605wlan
AC6605-wlan-viewssid-profile name profile_work
AC6605-wlan-ssid-prof-profile_workssid work
AC6605-wlan-ssid-prof-profile_workquit
AC6605-wlan-viewvap-profile name vap_work
AC6605-wlan-vap-prof-vap_workssid-profile profile_work
AC6605-wlan-vap-prof-vap_workforward-mode tunnel
AC6605-wlan-vap-prof-vap_workservice-vlan vlan-id 101
AC6605-wlan-vap-prof-vap_worksecurity-profile sec_work
AC6605-wlan-vap-prof-vap_workquit
AC6605-wlan-viewap-group name jiaoxue
AC6605-wlan-ap-group-jiaoxuevap-profile vap_work wlan 1 radio 0
AC6605-wlan-ap-group-jiaoxuequit
AC6605-wlan-viewquit
访客
AC6605wlan
AC6605-wlan-viewssid-profile name profile_guest
AC6605-wlan-ssid-prof-profile_guestssid guest
AC6605-wlan-ssid-prof-profile_guestquit
AC6605-wlan-viewvap-profile name vap_guest
AC6605-wlan-vap-prof-vap_guestforward-mode direct-forward
AC6605-wlan-vap-prof-vap_guestservice-vlan vlan-id 102
AC6605-wlan-vap-prof-vap_guestsecurity-profile sec_work
AC6605-wlan-vap-prof-vap_guestssid-profile profile_guest
AC6605-wlan-vap-prof-vap_guestquit
AC6605-wlan-viewap-group name jiaoxue
AC6605-wlan-ap-group-jiaoxuevap-profile vap_guest wlan 2 radio all
至此，本文分享的内容就结束了。