0001-華為ENSP WLAN配置實驗-鄭錦程
建立管理vlan和業務vlan
[AC6605]vlan batch 100 101
Info: This operation may take a few seconds. Please wait for a moment...done.
[AC6605]
配置trunk,放行對應的流量
[AC6605]interface GigabitEthernet0/0/1
[AC6605-GigabitEthernet0/0/1] port link-type trunk
[AC6605-GigabitEthernet0/0/1] port trunk pvid vlan 100
[AC6605-GigabitEthernet0/0/1] port trunk allow-pass vlan 2 to 4094
啟用DHCP服務
[AC6605]dhcp enable
管理vlan DHCP選擇接口
[AC6605]interface Vlanif100
[AC6605-Vlanif100] ip address 10.1.1.254 255.255.255.0
[AC6605-Vlanif100] dhcp select interface
業務vlan DHCP配置
[AC6605]ip pool hcie
[AC6605-ip-pool-hcie] gateway-list 10.1.2.254
[AC6605-ip-pool-hcie] network 10.1.2.0 mask 255.255.255.0
[AC6605]interface Vlanif101
[AC6605-Vlanif101] ip address 10.1.2.254 255.255.255.0
[AC6605-Vlanif101] dhcp select global
capwap隧道綁定管理vlan100
[AC6605]capwap source interface Vlanif 100
建立AP-Group
[AC6605]wlan
[AC6605-wlan-view]ap-group name hcie
[AC6605-wlan-ap-group-hcie] regulatory-domain-profile hcie
Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continue?[Y/N]:y
[AC6605-wlan-view] regulatory-domain-profile name hcie
[AC6605-wlan-regulate-domain-hcie]country-code CN #國家編碼 CN表示中國
Info: The current country code is same with the input country code.
[AC6605-wlan-regulate-domain-hcie]
配置AP認證方式為MAC認證
[AC6605]wlan
[AC6605-wlan-view]ap auth-mode mac-auth
[AC6605-wlan-view]ap-id 0 ap-mac 00e0-fc4d-2480
[AC6605-wlan-view]ap-name AP1
[AC6605-wlan-ap-0]ap-group hcie
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configurations of the radio, Whether to continue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.. done.
[AC6605-wlan-ap-0]
檢視AP上線
建立安全模闆:
[AC6605]wlan
[AC6605-wlan-view]security-profile name hcie
[AC6605-wlan-sec-prof-hcie]security wpa2 psk pass-phrase huawei@zjc aes #配置加密方式及密碼
[AC6605]wlan
[AC6605-wlan-view]ssid-profile name hcie
[AC6605-wlan-ssid-prof-hcie]ssid zhengjincheng
Info: This operation may take a few seconds, please wait.done.
[AC6605-wlan-ssid-prof-hcie]
建立vap-profile
[AC6605]wlan
[AC6605-wlan-view]vap-profile name hcie
[AC6605-wlan-vap-prof-hcie]forward-mode tunnel #轉發方式選擇隧道
[AC6605-wlan-vap-prof-hcie]service-vlan vlan-id 101 #綁定業務vlan101
[AC6605-wlan-vap-prof-hcie]security-profile hcie #綁定安全模闆
[AC6605-wlan-vap-prof-hcie]ssid-profile hcie #綁定SSID模闆
AP-Group組綁定資訊
[AC6605]wlan
[AC6605-wlan-view]ap-group name hcie
[AC6605-wlan-ap-group-hcie]vap-profile hcie wlan 1 radio all