先将基础配置完成,使得AP完成上线。
AC1
system-view
sysname AC1
vlan batch 100
interface Gigabitethernet 0/0/1
port link-type hybrid
port hybrid tagged vlan 100
quit
interface vlanif 100
ip address 1.1.1.1 24
quit
capwap source interface vlanif 100
wlan
ap auth-mode no-auth
ap-id 0
ap-name AP2
ap-id 1
ap-name AP1
quit
SW1
system-view
sysname SW1
dhcp enable
vlan batch 100
interface Gigabitethernet 0/0/1
port link-type hybrid
port hybrid tagged vlan 100
quit
interface Gigabitethernet 0/0/2
port link-type hybrid
port hybrid tagged vlan 100
quit
interface Gigabitethernet 0/0/3
port link-type hybrid
port hybrid tagged vlan 100
quit
interface vlanif 100
ip address 1.1.1.2 24
dhcp select interface
dhcp server option 43 sub-option 2 ip-address 1.1.1.1
quit
SW2
system-view
sysname SW2
vlan batch 100
interface ethernet 0/0/1
port link-type hybrid
port hybrid pvid vlan 100
port hybrid untagged vlan 100
quit
interface ethernet 0/0/2
port link-type hybrid
port hybrid tagged vlan 100
quit
SW3
system-view
sysname SW3
vlan batch 100
interface ethernet 0/0/1
port link-type hybrid
port hybrid pvid vlan 100
port hybrid untagged vlan 100
quit
interface ethernet 0/0/2
port link-type hybrid
port hybrid tagged vlan 100
quit
创建各类模板,以及绑定模板,使得业务部署完成。
我是这样理解的:
1 SSID模板、安全模板、VAP模板,域管理模板,他们都叫“模板”。
2 SSID和安全模板是需要配置到VAP模板的,是从属关系,可以看作VAP模板是一个大的模板套,里面包含了很多小配置。
2 域管理模板是独立存在的。
3 到最后,会将VAP模板、域管理模板都绑定到AP组,并完成业务部署。
1 创建各类模板
1.1 创建SSID模板。(指定SSID名称。)
ssid-profile name Employee
ssid Employee
ssid-profile name Guest
ssid Guest
1.2 创建安全模板。(指定认证密钥。)
security-profile name HCIE
security wpa2 psk pass-phrase Huawei@123 aes
1.3 创建VAP模板。(指定业务vlan、指定转发模式、绑定SSID模板、绑定安全模板)
vap-profile name Employee
forward-mode direct-forward
service-vlan vlan-id 11
ssid-profile Employee
security-profile HCIE
vap-profile name Guest
forward-mode direct-forward
service-vlan vlan-id 21
ssid-profile Guest
1.4 创建域管理模板(配置国家码)
regulatory-domain-profile name HCIE
country-code CN
2 创建AP组,将AP绑定到AP组
ap-id 0
ap-group Employee
ap-id 1
ap-group Guest
2.1 将域管理模板绑定搭配AP组
ap-group name Guest
regulatory-domain-profile HCIE
ap-group name Employee
regulatory-domain-profile HCIE
2.2 将VAP绑定到AP组
ap-group name Guest
vap-profile Guest wlan 1 radio 0
vap-profile Guest wlan 2 radio 1
ap-group name Employee
vap-profile Employee wlan 1 radio 0
vap-profile Employee wlan 2 radio 1
实现业务部署(还没做VLAN)