华为中型WLAN经配置文档.docx

中型WLAN经典配置文档 组网需求 如图1-1，AC通过接入交换机Switch_A与AP连接，并管理AP。 某中型企业存在无线办公的业务需求，需要在办公区的每个办公室内都部署WLAN网络，用户希望能够在AC上对用户进行集中控制和管理。 图1-1?配置中型网络WLAN基本业务组网图 ? 操作步骤 ??????????????????????步骤 1????交换机上的配置 #?sysname Switch?#?vlan batch 100 to 101??????? //创建VLAN100（管理VLAN）和VLAN101（业务VLAN）?#?interface GigabitEthernet0/0/1??port link-type trunk?????????port trunk pvid vlan 100??? //配置GE0/0/1接口的缺省VLAN是VLAN100??port trunk allow-pass vlan 100 to 101??? //配置GE0/0/1接口加入VLAN100和VLAN101??port-isolate enable group 1????????????? //配置GE0/0/1接口的端口隔离功能?#?interface GigabitEthernet0/0/2??port link-type trunk??????????port trunk allow-pass vlan 100 to 101??? //配置GE0/0/2接口加入VLAN100和VLAN101?#?return ??????????????????????步骤 2????AC上的配置 #??sysname AC?#?vlan batch 100 to 101??????? //创建VLAN100（管理VLAN）和VLAN101（业务VLAN）?#?dhcp enable????????????????? //使能DHCP功能?#?interface Vlanif100??ip address 10.10.10.1 255.255.255.0??dhcp select interface????? //使能VLANIF100接口的DHCP服务功能，以便AC能够为AP分配IP地址?#?interface Vlanif101???????????????????????????????????????????????????????????????ip address 10.10.11.1 255.255.255.0????????????????????????????????????????????dhcp select interface????? //使能VLANIF101接口的DHCP服务功能，以便AC能够为AP下的STA分配IP地址?#?interface Ethernet2/0/0??port link-type trunk??port trunk allow-pass vlan 100 to 101???? //配置Eth2/0/0接口加入VLAN100和VLAN101??port-isolate enable group 1?????????????? //配置Eth2/0/0接口的端口隔离功能?#?capwap source interface vlanif100????? //指定AC的源接口?#?wlan ac??security-profile name wlan-security?? //创建安全模板?? security wpa2 psk pass-phrase %^%#mtz0f~7.[`^6RWdzwCy16hJj/Mc!,}s`X*B]}A%^%# aes?? //配置采用PSK认证方式和CCMP加密方式，并且以密文形式显示用户口令??ssid-profile name wlan-ssid? //创建SSID模板?? ssid wlan-net??????????? ???//指定无线网络名称为wlan-net??vap-profile name wlan-vap??? //创建VAP模板?? service-vlan vlan-id 101??? //配置业务VLAN为VLAN101?? ssid-profile wlan-ssid????? //引用SSID模板至VAP模板?? security-profile wlan-security???????????? //引用安全模板至VAP模板??regulatory-domain-profile name domain1????? //创建域管理