菜单
本页目录

image-9-rxgx.png

先将基础配置完成,使得AP完成上线。

AC1

system-view
sysname AC1

vlan batch 100

interface Gigabitethernet 0/0/1
    port link-type hybrid
    port hybrid tagged vlan 100
    quit

interface vlanif 100
    ip address 1.1.1.1 24
    quit

capwap source interface vlanif 100 

wlan
    ap auth-mode no-auth
        ap-id 0
        ap-name AP2
        ap-id 1 
        ap-name AP1
        quit 

SW1

system-view
sysname SW1

dhcp enable

vlan batch 100

interface Gigabitethernet 0/0/1
    port link-type hybrid
    port hybrid tagged vlan 100
    quit

interface Gigabitethernet 0/0/2
    port link-type hybrid
    port hybrid tagged vlan 100
    quit

interface Gigabitethernet 0/0/3
    port link-type hybrid
    port hybrid tagged vlan 100
    quit

interface vlanif 100
    ip address 1.1.1.2 24
    dhcp select interface
    dhcp server option 43 sub-option 2 ip-address 1.1.1.1
    quit

SW2

system-view
sysname SW2

vlan batch 100

interface ethernet 0/0/1
    port link-type hybrid
    port hybrid pvid vlan 100
    port hybrid untagged vlan 100
    quit

interface ethernet 0/0/2
    port link-type hybrid
    port hybrid tagged vlan 100
    quit

SW3

system-view
sysname SW3

vlan batch 100

interface ethernet 0/0/1
    port link-type hybrid
    port hybrid pvid vlan 100
    port hybrid untagged vlan 100
    quit

interface ethernet 0/0/2
    port link-type hybrid
    port hybrid tagged vlan 100
    quit

创建各类模板,以及绑定模板,使得业务部署完成。

我是这样理解的:
1 SSID模板、安全模板、VAP模板,域管理模板,他们都叫“模板”。
2 SSID和安全模板是需要配置到VAP模板的,是从属关系,可以看作VAP模板是一个大的模板套,里面包含了很多小配置。
2 域管理模板是独立存在的。
3 到最后,会将VAP模板、域管理模板都绑定到AP组,并完成业务部署。

1 创建各类模板

1.1 创建SSID模板。(指定SSID名称。)

ssid-profile name Employee
    ssid Employee

ssid-profile name Guest
    ssid Guest

1.2 创建安全模板。(指定认证密钥。)

security-profile name HCIE
    security wpa2 psk pass-phrase Huawei@123 aes

1.3 创建VAP模板。(指定业务vlan、指定转发模式、绑定SSID模板、绑定安全模板)

vap-profile name Employee
    forward-mode direct-forward
    service-vlan vlan-id 11
    ssid-profile Employee
    security-profile HCIE

vap-profile name Guest
    forward-mode direct-forward
    service-vlan vlan-id 21
    ssid-profile Guest

1.4 创建域管理模板(配置国家码)

regulatory-domain-profile name HCIE
    country-code CN

2 创建AP组,将AP绑定到AP组

ap-id 0
    ap-group Employee

ap-id 1
    ap-group Guest

2.1 将域管理模板绑定搭配AP组

ap-group name Guest
    regulatory-domain-profile HCIE

ap-group name Employee
    regulatory-domain-profile HCIE

2.2 将VAP绑定到AP组

ap-group name Guest
    vap-profile Guest wlan 1 radio 0
    vap-profile Guest wlan 2 radio 1

ap-group name Employee
    vap-profile Employee wlan 1 radio 0
    vap-profile Employee wlan 2 radio 1

实现业务部署(还没做VLAN)

image-10-xkvy.png