網絡要求:實作企業無線及有線辦公。
網絡資料規劃
無線網絡管理VLAN:100
無線AC+AP管理位址:192.168.100.0/24
無線網絡SSID:Test-WiFi
無線網絡密碼:test123456
無線網絡業務VLAN:200
wifi擷取上網位址為:192.168.200.0/24
核心交換機對接路由器接口VLAN10
對接位址為192.168.10.0/24
有線上網位址為DHCP配置設定模式有線位址段為:
192.168.201.0/24(VLAN:201)
位址配置設定有路由器配置設定
組網圖見下圖:
無線WIFI配置部分:
POE接入交換機配置:
vlan batch 100 200
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 100 200
#
interface GigabitEthernet0/0/2
port link-type trunk
port trunk pvid vlan 100 //針對AP接口需要更改PVID。
port trunk allow-pass vlan 100 200
#
interface GigabitEthernet0/0/3
port link-type trunk
port trunk pvid vlan 100
port trunk allow-pass vlan 100 200
核心交換機配置:
vlan batch 10 100 200 to 201
dhcp enable
vlan 10
description DuiJie-Route
vlan 100
description WIFI_guanli
vlan 200
description WIFI_yewu
vlan 201
description YouXian_yewu
interface Vlanif10
ip address 192.168.10.2 255.255.255.0
#
interface Vlanif200
ip address 192.168.200.1 255.255.255.0
dhcp select interface
dhcp server lease day 0 hour 8 minute 0
dhcp server dns-list 114.114.114.114 8.8.8.8
interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 100
#
interface GigabitEthernet0/0/3
port link-type trunk
port trunk allow-pass vlan 100 200
AC控制器配置:
vlan batch 100
interface Vlanif100
ip address 192.168.100.1 255.255.255.0
dhcp select interface
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 100
capwap source interface vlanif100
wlan
traffic-profile name default
security-profile name TEST
security wpa2 psk pass-phrase %^%#f!K}G7f{(2x!R(Xe3k)Y;4$*X`Y{CCsZv(1GtrO%%^%#
aes
security-profile name default
security-profile name default-wds
security-profile name default-mesh
ssid-profile name TEST
ssid Test-WiFi
ssid-profile name default
vap-profile name TEST
service-vlan vlan-id 200
ssid-profile TEST
security-profile TEST
ap-group name test
radio 0
vap-profile TEST wlan 1
radio 1
vap-profile TEST wlan 1
radio 2
vap-profile TEST wlan 1
ap-group name default
ap-id 0 type-id 61 ap-mac 00e0-fcd4-48d0 ap-sn 210235448310B835AD63
ap-group test
ap-id 1 type-id 56 ap-mac 00e0-fc48-1de0 ap-sn 210235448310240E1A7A
ap-name B-DaTing-2
ap-group test
以上配置完成後即可AP即可完成上線操作了。裝置連接配接正常及加點運作後,可以搜尋到Test-WIFI的無線信号,終端點選連接配接輸入對應密碼即可擷取位址後正常通路網絡。
搜尋到WIFI信号輸入密碼連接配接。
連接配接成功并且終端擷取位址:
模拟1.1.1.1的公網位址。可以實作Internet網絡通路。