华为实验WLAN 基础配置随练

复制代码

业务vlan 20  192.168.20.x

管理vlan 100 192.168.100.x

步骤① 网络互通

Core sw:

复制代码

vlan batch 20 100
dhcp enable
int vlanif 20
  IP add 192.168.20.1 24
  dhcp select interface

interface GigabitEthernet0/0/1/2
 port link-type trunk
 port trunk pvid vlan 100
 port trunk allow-pass vlan 100 20

interface GigabitEthernet0/0/4
 port link-type access
 port default vlan 100

AC:

复制代码

vlan 100
dhcp enable
interface Vlanif100
 ip address 192.168.100.1 255.255.255.0
 dhcp select interface

interface GigabitEthernet0/0/1
 port link-type access
 port default vlan 100

步骤②：AP上线

复制代码

AC：
全局：capwap source interface Vlanif 100

wlan
 ap auth-mode no-auth （默认是MAC)

 ap-group name  Group_D
 
 ap-id 0  
    ap-group Group_D
 ap-id 1  
    ap-group Group_D

步骤③：WLAN业务

复制代码

AC：
wlan
 security-profile name A  
  security wpa-wpa2 psk pass-phrase  12345678  aes

 ssid-profile name B
  ssid Huawei  

 vap-profile name C  
  forward-mode direct-for
  service-vlan vlan-id 20
  ssid-profile B
  security-profile A

 ap-group name  Group_D
  vap-profile C wlan 1 radio all 

wlan
 regulate-domain-default  域管理模板（默认）
    country-code CN （默认）

选配命令：

复制代码

int vlanif 100
   dhcp server option 43 sub-option 2 ip-address 192.168.100.1 

wlan
  ap-confirm all

vap-pro name C
  forward-mode tunnel

AP上静态指定AC IP：

复制代码

[]ap-address static ac-list 192.168.100.1

AP静态配置IP地址和网关：

复制代码

[]ap-address mode static 
[]ap-address static ip-address 192.168.100.87 24 192.168.100.1

调试命令：

复制代码

Display  ap  all  查看ap是否上线
Display  vap all 查看是否放出射频信号
Display  station all
Display  各种模板  all  
dis ap online-fail-record all
dis ap unauthorized record
dis station sta-mac 5489-98ce-7e9f
dis ap-address-info