華為模拟器AC+瘦AP的WLAN典型組網實驗
模拟器實驗拓撲圖
華為模拟器模式AC和瘦AP的組網實驗，sta終端可以直接通路外網
實驗各裝置配置如下：
接入交換機SW3，SW4：
sys
sys SW3
vlan batch 100 101
int g0/0/2
port link-type trunk
port trunk allow-pass vlan 100 101
port trunk pvid vlan 100
int g0/0/3
port link-type access
port default vlan 100
int g0/0/1
port link-type trunk
port trunk allow-pass vlan 100 101
q
sys
sys SW4
vlan batch 100 101
int g0/0/2
port link-type trunk
port trunk allow-pass vlan 100 101
port trunk pvid vlan 100
q
int g0/0/1
port link-type trunk
port trunk allow-pass vlan 100 101
q
核心交換機SW2：
sys
sys SW2
dhcp enable
vlan batch 100 101 201
int g0/0/2
port link-type trunk
port trunk allow-pass vlan 100 101
int g0/0/3
port link-type trunk
port trunk allow-pass vlan 100 101
int g0/0/4
port link-type access
port default vlan 201
q
int g0/0/1
port link-type trunk
port trunk allow-pass vlan 100 101
q
ip pool sta
dns-list 114.114.114.114
network 192.168.101.0 mask 24
gateway-list 192.168.101.254
q
int vlanif 101
ip add 192.168.101.254 24
dhcp select global
q
ip route-static 0.0.0.0 0 192.168.201.2
路由器R1、R2：
------------------------ R1 -----------------------------
sys
sys R1
int g0/0/0
ip add 192.168.201.2 24
acl 2000
rule permit source any
q
int g0/0/1
ip add 16.16.16.1 24
nat outbound 2000
q
ip route-static 192.168.0.0 16 192.168.201.1
ip route-static 0.0.0.0 0 16.16.16.2
--------------------------- R2 ----------------------------
sys
sys R2
int g0/0/0
ip add 16.16.16.2 24
q
AC配置：
sys
sys AC
vlan batch 100 101
dhcp enable
int g0/0/1
port link-type trunk
port trunk allow-pass vlan 100 101
q
ip pool ap
dns-list 114.114.114.114
network 192.168.100.0 mask 24
gateway-list 192.168.100.254
q
int vlanif 100
ip add 192.168.100.254 24
dhcp select global
q
wlan
regulatory-domain-profile name default
country-code CN
q
ap-group name ap-group1
regulatory-domain-profile name default
y
q
capwap source interface vlanif100
wlan
ap auth-mode mac-auth
ap-id 0 ap-mac 00e0-fcbc-6110
ap-name ap3
ap-group ap-group1
y
q
ap-id 1 ap-mac 00e0-fcf6-6110
ap-name ap2
ap-group ap-group1
y
q
security-profile name DYXZ
security wpa-wpa2 psk pass-pharse 12345678 aes
q
ssid-profile name DYXZ
ssid DYXZ
q
vap-profile name DYXZ
forward-mode direct-forward
service-vlan vlan-id 101
security-profile DYXZ
ssid-profile DYXZ
q
ap-group name ap-group1
vap-profile DYXZ wlan 1 radio all
q
實驗結果驗證：
①AP上線：
AP上線
②sta終端連接配接wlan并登陸
sta密碼登陸wlan
擷取到ip位址
③sta終端通路外網：
sta通路外網