4.2 华为无线：Lab_华为ensp模拟器：AC无线控制器、配置AP上线

4.2 华为无线：Lab_华为ensp模拟器：AC无线控制器、配置AP上线

交接机sw2的配置：
vlan batch 10
dhcp enable
#
dhcp server database enable
#
ip pool vlan10
 gateway-list 192.168.10.254
 network 192.168.10.0 mask 255.255.255.0
 excluded-ip-address 192.168.10.1 192.168.10.100
 excluded-ip-address 192.168.10.200 192.168.10.253
 lease day 0 hour 0 minute 30             
 dns-list 114.114.114.114 8.8.8.8
#
interface Vlanif10
 ip address 192.168.10.253 255.255.255.0
 dhcp select global
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/2            
 port link-type access
 port default vlan 10

华为模拟器：AC无线控制器

AC快速配置

AC配置静态路由：

[AC6605]ip route-static 0.0.0.0 0.0.0.0 10.11.11.254

[AC6605]display ip routing-table
Route Flags: R - relay, D - download to fib
------------------------------------------------------------------------------
Routing Tables: Public
         Destinations : 11       Routes : 11       
Destination/Mask    Proto   Pre  Cost      Flags NextHop         Interface
        0.0.0.0/0   Static  60   0          RD   10.11.11.254    Vlanif1
      10.11.0.0/16  Direct  0    0           D   10.11.250.1     Vlanif1
    10.11.250.1/32  Direct  0    0           D   127.0.0.1       Vlanif1
  10.11.255.255/32  Direct  0    0           D   127.0.0.1       Vlanif1
      127.0.0.0/8   Direct  0    0           D   127.0.0.1       InLoopBack0
      127.0.0.1/32  Direct  0    0           D   127.0.0.1       InLoopBack0
127.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0
   192.168.10.0/24  Direct  0    0           D   192.168.10.254  Vlanif10
 192.168.10.254/32  Direct  0    0           D   127.0.0.1       Vlanif10
 192.168.10.255/32  Direct  0    0           D   127.0.0.1       Vlanif10
255.255.255.255/32  Direct  0    0           D   127.0.0.1       InLoopBack0
[AC6605]

AP上线

配置SSID

终端连接无线

终端测试上互联网

漫游测试

略。

部分配置：

AC6605.txt

<AC6605>dis current-configuration
#
vlan batch 10
#
radius-server template default
#
pki realm default
 rsa local-key-pair default
 enrollment self-signed
#
ike proposal default
 encryption-algorithm aes-256
 dh group14
 authentication-algorithm sha2-256        
 authentication-method pre-share
 integrity-algorithm hmac-sha2-256
 prf hmac-sha2-256
#
interface Vlanif1                         
 ip address 10.11.250.1 255.255.0.0
#
interface Vlanif10
 ip address 192.168.10.254 255.255.255.0

interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
 port link-type trunk
 undo port trunk allow-pass vlan 1
 port trunk allow-pass vlan 2 to 4094
#
#
ip route-static 0.0.0.0 0.0.0.0 10.11.11.254
#
capwap source interface vlanif10
#
wlan
 traffic-profile name default             
 security-profile name test
  security wpa-wpa2 dot1x aes
 security-profile name test1
 security-profile name default
 security-profile name default-wds
 security-profile name default-mesh
 ssid-profile name test
  ssid test
 ssid-profile name test1
  ssid test1
 ssid-profile name default
 vap-profile name test
  forward-mode tunnel
  ssid-profile test
  security-profile test
 vap-profile name test1
  forward-mode tunnel
  service-vlan vlan-id 10
  ssid-profile test1
  security-profile test1
 vap-profile name default
 wds-profile name default
 mesh-handover-profile name default
 mesh-profile name default                
 regulatory-domain-profile name default
 air-scan-profile name default
 rrm-profile name default
 radio-2g-profile name default
 radio-5g-profile name default
 wids-spoof-profile name default
 wids-profile name default
 wireless-access-specification
 ap-system-profile name default
 port-link-profile name default
 wired-port-profile name default
 serial-profile name preset-enjoyor-toeap
 ap auth-mode no-auth
 ap-group name test
  radio 0
   vap-profile test1 wlan 1
  radio 1
   vap-profile test1 wlan 1
  radio 2
   vap-profile test1 wlan 1
 ap-group name default
  radio 0
   vap-profile test wlan 11
  radio 1                                 
   vap-profile test wlan 11
  radio 2
   vap-profile test wlan 11
 ap-id 0 type-id 69 ap-mac 00e0-fc85-7040 ap-sn 210235448310E91D3019
 ap-id 1 type-id 69 ap-mac 00e0-fc15-12e0 ap-sn 210235448310F03EAD15
 ap-id 2 type-id 61 ap-mac 00e0-fcfa-7e10 ap-sn 2102354483101B5C7762
 provision-ap
#
dot1x-access-profile name dot1x_access_profile
#
mac-access-profile name mac_access_profile
#
return
<AC6605>