简单无线实验

拓扑图:

要求:

分析:

1、创建AP组

2、配置网络互通
3、配置AC系统参数
4、配置AC为FIT AP下发的WLAN业务

搭建:

1.配置网络互通

复制代码
//R1
#
interface GigabitEthernet0/0/0
 ip address 192.168.200.2 255.255.255.0 
#
interface LoopBack0
 ip address 1.1.1.1 255.255.255.255 
#
ospf 1 router-id 1.1.1.1 
 area 0.0.0.0 
  network 1.1.1.1 0.0.0.0 
  network 192.168.200.2 0.0.0.0 

//AC1
#
vlan batch 10 20 100 200
#
interface Vlanif200
 ip address 192.168.200.1 255.255.255.0
#
interface GigabitEthernet0/0/1
 port link-type access
 port default vlan 200
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 10 20 100
#
ospf 1 router-id 2.2.2.2
 area 0.0.0.0
  network 192.168.0.0 0.0.255.255

//SW1
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 10 20 100
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk pvid vlan 100
 port trunk allow-pass vlan 10 100
#
interface GigabitEthernet0/0/3
 port link-type trunk
 port trunk pvid vlan 100
 port trunk allow-pass vlan 10 100
#
interface GigabitEthernet0/0/4
 port link-type trunk
 port trunk pvid vlan 100
 port trunk allow-pass vlan 20 100

2.配置AC系统参数

复制代码
#
ip pool AP
 gateway-list 192.168.100.1 
 network 192.168.100.0 mask 255.255.255.0 
 dns-list 8.8.8.8 
#
ip pool group-1
 gateway-list 192.168.10.1 
 network 192.168.10.0 mask 255.255.255.0 
 dns-list 8.8.8.8 
#
ip pool group-2
 gateway-list 192.168.20.1 
 network 192.168.20.0 mask 255.255.255.0 
 dns-list 8.8.8.8 
#
interface Vlanif10
 ip address 192.168.10.1 255.255.255.0
 dhcp select global
#
interface Vlanif20
 ip address 192.168.20.1 255.255.255.0
 dhcp select global
#
interface Vlanif100
 ip address 192.168.100.1 255.255.255.0
 dhcp select global

3.创建AP组和模板

复制代码
//AP组
#
capwap source interface vlanif100
regulatory-domain-profile name aa
regulate-domain-aa]country-code CN
ap-group name 1
regulatory-domain-profile aa
ap auth-mode mac-auth
ap-group name 2
regulatory-domain-profile aa
ap auth-mode mac-auth
ap-id 1 type-id 45 ap-mac 00e0-fcdc-2290 ap-sn 2102354483103948F373
  ap-name AP1
  ap-group 1
 ap-id 2 type-id 45 ap-mac 00e0-fc10-4b70 ap-sn 210235448310C859E763
  ap-name AP2
  ap-group 1
 ap-id 3 type-id 45 ap-mac 00e0-fc1a-70d0 ap-sn 210235448310EA0BCC0B
  ap-name AP3
  ap-group 2

//模板
security-profile name aa
  security wpa2 psk pass-phrase admin123 aes
ssid-profile name 1
  ssid openlab-1
 ssid-profile name 2
  ssid openlab-2
vap-profile name 1
  forward-mode tunnel
  service-vlan vlan-id 10
  ssid-profile 1
  security-profile aa
 vap-profile name 2
  forward-mode tunnel
  service-vlan vlan-id 20
  ssid-profile 2
  security-profile aa

4.配置AC为FIT AP下发的WLAN业务

复制代码
ap-group name 1
vap-profile 1 wlan 1 radio all

 ap-group name 2
vap-profile 2 wlan 1 radio all

结果:

1.STA1pingSTA2

2.STA1pingR1环回