简单的无线练习

配置接口类型

LSW1：

[LSW1]vlan batch 10 20 100

[LSW1-GigabitEthernet0/0/1]port link-type trunk 
[LSW1-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20 100


[LSW1]port-group group-member GigabitEthernet 0/0/2 to GigabitEthernet 0/0/4
[LSW1-GigabitEthernet0/0/2]port link-type trunk 
[LSW1-GigabitEthernet0/0/3]port link-type trunk 
[LSW1-GigabitEthernet0/0/4]port link-type trunk 


[LSW1]port-group group-member GigabitEthernet 0/0/2 to GigabitEthernet 0/0/3
[LSW1-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 100
[LSW1-GigabitEthernet0/0/3]port trunk allow-pass vlan 10 100
[LSW1-GigabitEthernet0/0/2]port trunk pvid vlan 100
[LSW1-GigabitEthernet0/0/3]port trunk pvid vlan 100


[LSW1-GigabitEthernet0/0/4]port trunk allow-pass vlan 20 100
[LSW1-GigabitEthernet0/0/4]port trunk pvid vlan 100

AC1：

[AC6605]vlan batch 10 20 100
[AC6605-GigabitEthernet0/0/2]port link-type trunk
[AC6605-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 20 100

配置DHCP--- 地址池配置，为AP分配IP地址

LSW1：

[LSW1]dhcp enable 

[LSW1]ip pool wifi

[LSW1-ip-pool-wifi]gateway-list 192.168.1.1

[LSW1-ip-pool-wifi]network 192.168.1.0 mask 24

[LSW1]interface Vlanif 100

[LSW1-Vlanif100]ip address 192.168.1.1 24

[LSW1-Vlanif100]dhcp select global 

WLAN配置

AP与AC实现三层互通

[AC6605]interface Vlanif 100
[AC6605-Vlanif100]ip address 192.168.1.2 24

在AP与AC设备间建立CAPWAP隧道

[AC6605]capwap source interface Vlanif 100 --- 设置使用某个VLAN接口与AP进行隧道建立

创建域管理模板

[AC6605]wlan --- 进入WLAN配置视图

[AC6605-wlan-view]regulatory-domain-profile name aa

[AC6605-wlan-regulate-domain-aa]country-code CN ---- 设置采用的WLAN的频段

 [AC6605-wlan-view]ap auth-mode mac-auth --- 设置AP的认证模式

创建AP组

[AC6605-wlan-view]ap-group name gourp-1 --- 创建AP组

[AC6605-wlan-ap-group-gourp-1]regulatory-domain-profile aa --- 将域管理模板绑定到该AP组内
Warning: Modifying the country code will clear channel, power and antenna gain c
onfigurations of the radio and reset the AP. Continue?[Y/N]:Y



[AC6605-wlan-view]ap-group name gourp-2 --- 创建AP组

[AC6605-wlan-ap-group-gourp-2]regulatory-domain-profile aa--- 将域管理模板绑定到该AP组内
Warning: Modifying the country code will clear channel, power and antenna gain c
onfigurations of the radio and reset the AP. Continue?[Y/N]:Y

AP的接入

[AC6605-wlan-view]ap-id 0 ap-mac 00e0-fcea-2130

[AC6605-wlan-view]ap-id 1 ap-mac 00e0-fc45-1cd0

[AC6605-wlan-view]ap-id 2 ap-mac 00e0-fcc6-35a0

AP组中添加AP设备

[AC6605-wlan-ap-0]ap-name ap-0--- 设置该AP的名称

[AC6605-wlan-ap-0]ap-group gourp-1--- 将该AP绑定到AP组内
 Warning: This operation may cause AP reset. If the country code changes, it will
 clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:Y



[AC6605-wlan-ap-1]ap-name ap-1

[AC6605-wlan-ap-1]ap-group gourp-1
Warning: This operation may cause AP reset. If the country code changes, it will
 clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y



[AC6605-wlan-ap-2]ap-name ap-2

[AC6605-wlan-ap-2]ap-group gourp-2
Warning: This operation may cause AP reset. If the country code changes, it will
 clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y

配置安全模板

[AC6605-wlan-view]security-profile name openlab-1

[AC6605-wlan-sec-prof-openlab-1]security wpa2 psk pass-phrase openlab-2 aes



[AC6605-wlan-view]security-profile name openlab-2

[AC6605-wlan-sec-prof-openlab-2]security wpa2 psk pass-phrase openlab-1 aes

配置SSID模板 - WIFI名称

[AC6605-wlan-view]ssid-profile name openlab-1

[AC6605-wlan-ssid-prof-openlab-1]ssid openlab-1



[AC6605-wlan-view]ssid-profile name openlab-2

[AC6605-wlan-ssid-prof-openlab-2]ssid openlab-2

配置VAP模板

[AC6605-wlan-view]vap-profile name openlab-1

[AC6605-wlan-vap-prof-openlab-1]forward-mode tunnel --- 隧道转发模式

[AC6605-wlan-vap-prof-openlab-1]service-vlan vlan-id 10 ---设定转发的业务流量所属VLAN，就是 wifi用户所属的VLAN

[AC6605-wlan-vap-prof-openlab-1]security-profile openlab-1--- 绑定安全模板

[AC6605-wlan-vap-prof-openlab-1]ssid-profile openlab-1--- 绑定SSID模板



[AC6605-wlan-view]vap-profile name openlab-2

[AC6605-wlan-vap-prof-openlab-2]forward-mode tunnel 

[AC6605-wlan-vap-prof-openlab-2]service-vlan vlan-id 20

[AC6605-wlan-vap-prof-openlab-2]security-profile openlab-2

[AC6605-wlan-vap-prof-openlab-2]ssid-profile openlab-2

在AP组中，调用VAP模板

[AC6605-wlan-view]ap-group name gourp-1

[AC6605-wlan-ap-group-gourp-1]vap-profile openlab-1 wlan 1 radio all



[AC6605-wlan-view]ap-group name gourp-2

[AC6605-wlan-ap-group-gourp-2]vap-profile openlab-2 wlan 2 radio all 

配置DHCP--- 地址池配置，为STA分配IP地址

[LSW1]interface Vlanif 10

[LSW1-Vlanif10]ip address 192.168.10.254 24

[LSW1-Vlanif10]dhcp select global 

[LSW1]ip pool vlan10

[LSW1-ip-pool-vlan10]network 192.168.10.0 mask 24

[LSW1-ip-pool-vlan10]gateway-list 192.168.10.254



[LSW1]int v 20

[LSW1-Vlanif20]ip address 192.168.20.254 24

[LSW1-Vlanif20]dhcp select global 

[LSW1]ip pool vlan20

[LSW1-ip-pool-vlan20]network 192.168.20.0 mask 24

[LSW1-ip-pool-vlan20]gateway-list 192.168.20.254

配置全网可通

[AC6605]vlan 200

[AC6605-GigabitEthernet0/0/1]p l a

[AC6605-GigabitEthernet0/0/1]port default vlan 200

[AC6605]int v 200

[AC6605-Vlanif200]ip address 192.168.200.1 24

[AC6605]ip route-static 1.1.1.0 24 192.168.200.2

[AC6605]ip route-static 192.168.10.0 24 192.168.1.1

[AC6605]ip route-static 192.168.20.0 24 192.168.1.1



[R1-GigabitEthernet0/0/0]ip address 192.168.200.2 24

[R1-LoopBack0]ip address 1.1.1.1 24

[R1]ip route-static 192.168.1.0 24 192.168.200.1

[R1]ip route-static 192.168.20.0 24 192.168.200.1



[LSW1]ip route-static 192.168.200.0 24 192.168.1.2

[LSW1]ip route-static 1.1.1.0 24 192.168.