标签：华为、无线ac+ap
配置Switch
[Switch]vlan batch 100 101102 //创建管理Vlan100、业务vlan101、102
[Switch]interface g0/0/1 //进入端口G0/0/1
[Switch-GigabitEthernet0/0/1]descriptionlink-ap
[Switch-GigabitEthernet0/0/1]portlink-type trunk //端口模式为trunk
[Switch-GigabitEth0ernet0/0/1]porttrunk pvid vlan 100
//给接AP的端口打上管理vlan100的PVID
[Switch-GigabitEthernet0/0/1]porttrunk allow-pass vlan 100 101
//定义该端口允许通过的vlan
[Switch-GigabitEthernet0/0/1]quit
[Switch]interfaceGigabitEthernet0/0/2 //进入G0/0/2，与g/0/1同理
[Switch-GigabitEthernet0/0/2]portlink-type trunk
[Switch-GigabitEthernet0/0/2]porttrunk allow-pass vlan 100 101
[Switch-GigabitEthernet0/0/2]quit
配置AC
1. 配置接口和VLAN信息，AC为DHCP Server，为AP和client分配地址
[AC]vlan batch 100 101 102 //在AC上创建管理vlan100、业务vlan101、102
[AC]interfaceGigabitEthernet0/0/1 //进入端口
[AC-GigabitEthernet0/0/1]portlink-type trunk //定义端口模式
[AC-GigabitEthernet0/0/1]porttrunk allow-pass vlan 100 101
//定义允许通过的vlan
[AC-GigabitEthernet0/0/1]quit
[AC]dhcp enable //开启DHCP功能
[AC]interface vlanif 100 //配置vlan100的IP地址 并且开启DHCP
[AC -Vlanif100]descriptionfor-ap
[AC -Vlanif100]ip address192.168.100.1 24
[AC -Vlanif100]dhcp selectinterface
[AC-Vlanif100]quit
[AC]interface vlanif 101 //配置vlan101的IP地址并且开启DHCP
[AC -Vlanif101]descriptionfor-STA
[AC -Vlanif101]ip address192.168.101.1 24
[AC -Vlanif101]dhcp selectinterface
[ACVlanif101]quit
[AC]interface vlanif 102 //配置vlan102的IP地址并且开启DHCP
[AC -Vlanif102]descriptionfor-STA
[AC -Vlanif102]ip address192.168.102.1 24
[AC -Vlanif102]dhcp selectinterface
[ACVlanif102]quit
如果没有配置IP地址，直接从端口下开启DHCP功能失败，报错，如下图：
2. 配置AC WLAN基础配置
[AC]wlan ac-global ac id 1carrier id other
[AC]wlan ac-globalcountry-code CN
现行国家代码与输入国家代码相同
[AC]wlan
[AC -wlan-view]wlan ac sourceinterface Vlanif 100 //配置AP的管理VLAN，从哪个VLAN下拿地址
[AC-wlan-view]ap-auth-modeno-auth // 将AP上线模式改为不认证
此配置做完后在全局查询AP display ap all 查看AP是否上线
ap id 0 type-id 38mac 0006-f468-91a0 sn 21500821798W47001474 （AP上线后会自动生成）
3.配置AC WLAN 业务参数
#创建wlan-ess接口
[AC]interface Wlan-Ess 1 //之后会与下面 service-set（服务集）绑定
[AC-Wlan-Ess1]port hybridpvid vlan 101 //打上业务vlan101的PVID
[AC-Wlan-Ess1]port hybriduntagged vlan 101 //打上业务vlan101的PVID
[AC-Wlan-Ess1]quit
[AC]interface Wlan-Ess 2 //之后会与下面 service-set（服务集）绑定
[AC-Wlan-Ess2]port hybridpvid vlan 102 //打上业务vlan102的PVID
[AC-Wlan-Ess2]port hybriduntagged vlan 102 //打上业务vlan102的PVID
[AC-Wlan-Ess2]quit
#创建WMM模板，采用默认参数
[AC-wlan-view]wmm-profilename wmm-profile-0
[AC-wlan-wmm-prof-wmm-profile-0]quit
//之后会与下面 radio-profile（射频）模板绑定
#创建安全模板，采用默认参数
[AC-wlan-view]security-profilename security-profile-0
[AC-wlan-sec-prof-security-profile-0]quit
//之后会与下面service-set（服务集）绑定
【如果需要为无线设置密码则：
[AC-wlan-view]security-profilename security-profile-0
[AC-wlan-sec-prof-security-profile-0]security-policywpa 设置无线的加密方式
[AC-wlan-sec-prof-security-profile-0]wpaauthentication-method psk pass-phrase cipher 12344321 encryption-method tkip 设置加密算法，密码，密文处为密码 】
#创建流量模板，采用默认参数
[AC-wlan-view]traffic-profilename traffic-profile-0
[AC-wlan-traffic-prof-traffic-profile-0]quit
//之后会与下面 service-set（服务集）绑定
#创建服务集并绑定WLAN-ESS接口、安全模板和流量模板
[AC-wlan-view]service-setname service-set-0
[AC-wlan-service-set-service-set-0]ssidstaff
[AC-wlan-service-set-service-set-0]wlan-ess1
[AC-wlan-service-set-service-set-0]service-vlan101
[AC-wlan-service-set-service-set-0]security-profilename security-profile-0
[AC-wlan-service-set-service-set-0]traffic-profilename traffic-profile-0
#创建射频模板，并绑定WMM模板
[AC-wlan-view]radio-profilename radio-profile-0
[AC-wlan-radio-prof-radio-profile-0]wmm-profilename wmm-profile-0
[AC-wlan-radio-prof-radio-profile-0]quit
#配置VAP并下发
[AC-wlan-view]ap 0 radio 0
[AC-wlan-radio-0/0]radio-profilename radio-profile-0
[AC-wlan-radio-0/0]service-setname service-set-0
[AC-wlan-radio-0/0]service-setname service-set-0
[AC-wlan-radio-0/0]quit
[AC-wlan-view]commit ap 0
本文出自 “阿仙儿” 博客，请务必保留此出处http://sundengxian.blog.51cto.com/12283566/1965550
标签：华为、无线ac+ap
原文地址：http://sundengxian.blog.51cto.com/12283566/1965550
