目录
■无线WLAN配置
需求
1、配置隧道转发模式，完成AP上线，内部办公用户（VLAN101）能通过无线上网。
2、访客（VLAN102）能通过无线上网，配置为直接转发模式。隧道转发与直接转发过程如下图所示：
3、管理VLAN100，业务VAN101和102，VLAN101为内部用户提供上网服务（SSID：work),VLAN 102为访客提供上网服务(SSTD:guest)。AP通过AC DHCP自动获取 IP 192.168.100.0/24地址段的地址，用户通过SW1 DHCP自动分配对应网段的地址。
实验
SW1
<Huawei>system-view
Huawei\]****sysname**** SW1 \[SW1\]****vlan batch**** 101 102 200 \[SW1\]****interface**** Gigabitethernet 0/0/3 \[SW1-GigabitEthernet0/0/3\] ****port link-type access**** \[SW1-GigabitEthernet0/0/3\] ****port default vlan 200**** \[SW1-GigabitEthernet0/0/3\]quit \[SW1\]****interface**** GigabitEthernet 0/0/2 \[SW1-GigabitEthernet0/0/2\] ****port link-type trunk**** \[SW1-G1gabitEthernet0/0/2\]****port trunk allow-pass vlan all**** \[SW1-G1gabitEthernet0/0/2\]****quit**** \[SW1\]****interface**** GigabitEthernet 0/0/1 \[SW1-GigabitEthernet0/0/1\]****port link-type trunk**** \[SW1-GigabitEthernet0/0/1\]****port trunk allow-pass vlan 100**** \[SW1-Gigabitethernet0/0/1\]quit \[SW1\]dhcp enable \[SW1\]****interface**** vlanif 101 \[SW1-vlanif101\]ip add 192.168.101.254 24 \[SW1-vlanif101\]quit \[SW1\]****interface**** vlanif 102 \[SW1-vlanif102\]ip add 192.168.102.254 24 \[SW1-vlanif102\]quit \[SW1\]****interface**** vlanif 200 \[SW1-vlanif200\]ip add 192.168.200.1 30 \[SW1-vlanif200\]quit \[SW1\]dhcp enable \[SW1\]interface vlanif 101 \[SW1-vlanif101\]****dhcp select interface**** \[SW1-vlanif101\]quit \[SW1\]interface vlanif 102 \[SW1-vlanif102\]****dhcp select interface**** \[SW1-vlanif102\]quit \[SW1
SW1\]vlan 100 \[SW1-vlan100\]quit \[SW1\]interface g0/0/1 \[SW1-GigabitEthernet0/0/1\]port trunk allow-pass vlan 102 100 \[SW1-GigabitEthernet0/0/1\]quit \[SW1
Router
<Huawei>system-view
Huawei\]****sysname**** Router \[Router\]****interface**** GigabitEthernet 0/0/0 \[Router-GigabitEthernet0/0/0\]****ip add**** 192.168.200.2 30 \[Router-GigabitEthernet0/0/0\]****quit**** \[Router\]ip route-static 192.168.101.0 24 192.168.200.1 \[Router\]ip route-static 192.168.102.0 24 192.168.200.1
SW2
<Huawei>system-view
Huawei\]****sysname**** SW2 \[SW2\]vlan 100 \[SW2-vlan100\]quit \[SW2\]****interface**** GigabitEthernet 0/0/3 \[SW2-GigabitEthernet0/0/3\]port link-type trunk \[SW2-GigabitEthernet0/0/3\]port trunk allow-pass vlan 100 \[SW2-GigabitEthernet0/0/3\]quit \[SW2\]****interface**** GigabitEthernet 0/0/1 \[SW2-GigabitEthernet0/0/1\]port link-type trunk \[SW2-GigabitEthernet0/0/1\]port trunk allow-pass vlan 100 \[SW2-GigabitEthernet0/0/1\]port trunk pvid vlan 100 \[SW2-GigabitEthernet0/0/1\]quit \[SW2
SW2\]vlan 102 \[SW2-vlan102\]quit \[SW2\]interface g0/0/1 \[SW2-GigabitEthernet0/0/1\]port trunk allow-pass vlan 100 102 \[SW2-GigabitEthernet0/0/1\]int g0/0/3 \[SW2-GigabitEthernet0/0/3\]port trunk allow-pass vlan 100 102 \[SW2-GigabitEthernet0/0/3\]quit \[SW2
AC6605
<Huawei>system-view
Huawei\]sysname AC6605 \[AC6605\]vlan batch 100 101 102 \[AC6605\]****interface**** GigabitEthernet 0/0/1 \[AC6605-GigabitEthernet0/0/1\]port link-type trunk \[AC6605-GigabitEthernet0/0/1\]port trunk allow-pass vlan all \[AC6605-GigabitEthernet0/0/1\]quit \[AC6605\]interface vlanif 100 \[AC6605-vlanif100\]ip add 192.168.100.254 24 \[AC6605-vlanif100\]quit \[AC6605\]dhcp enable \[AC6605\]interface vlanif 100 \[AC6605-vlanif100\]dhcp select interface \[AC6605-vlanif100\]quit \[AC6605\]wlan \[AC6605-wlan-view\]regulatory-domain-profile name china \[AC6605-wlan-regulate-domain-china\]country-code CN \[AC6605-wlan-regulate-domain-china\]quit \[AC6605-wlan-view\]ap-group name jiaoxue \[AC6605-wlan-ap-group-jiaoxue\]regulatory-domain-profile china \[AC6605-wlan-ap-group-jiaoxue\]quit \[AC6605-wlan-view\]quit \[AC6605\]capwap source interface vlanif 100 \[AC6605\]wlan \[AC6605-wlan-view\]ap auth-mode mac-auth \[AC6605-wlan-view\]ap-id 1 ap-mac 00e0-fc3f-7500 \[AC6605-wlan-ap-1\]ap-name JX001 \[AC6605-wlan-ap-1\]ap-group jiaoxue \[AC6605-wlan-ap-1\]****quit**** \[AC6605-wlan-view\]****quit**** \[AC6605\]****display ap all****
进行[SW1]vlan 100操作后。
AC6605\]****display ap all****
AC6605\]wlan \[AC6605-wlan-view\]security-profile name sec_work \[AC6605-wlan-sec-prof-sec_work\]****security wpa-wpa2 psk pass-phrase a1234567 aes**** \[AC6605-wlan-sec-prof-sec_work\]quit \[AC6605-wlan-view\]quit # 配置SSID \[AC6605\]wlan \[AC6605-wlan-view\]****ssid-profile**** name profile_work \[AC6605-wlan-ssid-prof-profile_work\]****ssid**** work \[AC6605-wlan-ssid-prof-profile_work\]quit \[AC6605-wlan-view\]vap-profile name vap_work \[AC6605-wlan-vap-prof-vap_work\]ssid-profile profile_work \[AC6605-wlan-vap-prof-vap_work\]****forward-mode**** ****tunnel**** \[AC6605-wlan-vap-prof-vap_work\]service-vlan vlan-id 101 \[AC6605-wlan-vap-prof-vap_work\]security-profile sec_work \[AC6605-wlan-vap-prof-vap_work\]quit \[AC6605-wlan-view\]ap-group name jiaoxue \[AC6605-wlan-ap-group-jiaoxue\]****vap-profile vap_work wlan 1 radio 0**** \[AC6605-wlan-ap-group-jiaoxue\]quit \[AC6605-wlan-view\]quit # 访客 \[AC6605\]wlan \[AC6605-wlan-view\]ssid-profile name profile_guest \[AC6605-wlan-ssid-prof-profile_guest\]ssid guest \[AC6605-wlan-ssid-prof-profile_guest\]quit \[AC6605-wlan-view\]vap-profile name vap_guest \[AC6605-wlan-vap-prof-vap_guest\]****forward-mode**** ****direct-forward**** \[AC6605-wlan-vap-prof-vap_guest\]service-vlan vlan-id 102 \[AC6605-wlan-vap-prof-vap_guest\]security-profile sec_work \[AC6605-wlan-vap-prof-vap_guest\]ssid-profile profile_guest \[AC6605-wlan-vap-prof-vap_guest\]quit \[AC6605-wlan-view\]ap-group name jiaoxue \[AC6605-wlan-ap-group-jiaoxue\]****vap-profile vap_guest wlan 2 radio all****
至此，本文分享的内容就结束了。