发帖
雷达卡
一、设备基础配置
以下为各网络设备的基础配置流程，包括交换机SWA、SWB以及无线控制器AC的初始化设置和接口划分。
SWA 配置步骤：
<Huawei>sys Enter system view, return user view with Ctrl+Z. [Huawei]undo info-center enable Info: Information center is disabled. [Huawei]sysname SWA [SWA]vlan batch 10 11 12 99 Info: This operation may take a few seconds. Please wait for a moment...done. [SWA]interface GigabitEthernet0/0/1 [SWA-GigabitEthernet0/0/1]port link-type trunk [SWA-GigabitEthernet0/0/1]port trunk pvid vlan 10 [SWA-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 11 [SWA-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2 [SWA-GigabitEthernet0/0/2]port link-type trunk [SWA-GigabitEthernet0/0/2]port trunk pvid vlan 10 [SWA-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 12 [SWA-GigabitEthernet0/0/2]interface GigabitEthernet0/0/24 [SWA-GigabitEthernet0/0/24]quit [SWA]vlan 100 [SWA-vlan100]interface GigabitEthernet0/0/24 [SWA-GigabitEthernet0/0/24]port link-type access [SWA-GigabitEthernet0/0/24]port default vlan 100 [SWA-GigabitEthernet0/0/24]interface Vlanif100 [SWA-Vlanif100]ip address 172.16.1.1 255.255.255.0 [SWA-Vlanif100]quit [SWA]quit <SWA>save
SWB 配置步骤：
<Huawei>sys Enter system view, return user view with Ctrl+Z. [Huawei]undo info-center enable Info: Information center is disabled. [Huawei]sysname SWB [SWB]vlan batch 10 11 12 99 101 Info: This operation may take a few seconds. Please wait for a moment...done. [SWB]interface Vlanif99 [SWB-Vlanif99]ip address 10.0.99.253 255.255.255.0 [SWB-Vlanif99]interface Vlanif101 [SWB-Vlanif101]ip address 172.16.1.2 255.255.255.0 [SWB-Vlanif101]interface GigabitEthernet0/0/24 [SWB-GigabitEthernet0/0/24]port link-type access [SWB-GigabitEthernet0/0/24]port default vlan 101 [SWB-GigabitEthernet0/0/24]interface GigabitEthernet0/0/1 [SWB-GigabitEthernet0/0/1]port link-type access [SWB-GigabitEthernet0/0/1]port default vlan 99 [SWB-GigabitEthernet0/0/1]quit [SWB]quit <SWB>save
AC 控制器配置步骤：
<AC6605>sys Enter system view, return user view with Ctrl+Z. [AC6605]undo info-center enable Info: Information center is disabled. [AC6605]sysname AC [AC]vlan 99 Info: This operation may take a few seconds. Please wait for a moment...done. [AC-vlan99]interface Vlanif99 [AC-Vlanif99]ip address 10.0.99.254 255.255.255.0 [AC-Vlanif99]interface GigabitEthernet0/0/1 [AC-GigabitEthernet0/0/1]port link-type access [AC-GigabitEthernet0/0/1]port default vlan 99 [AC-GigabitEthernet0/0/1]quit [AC]quit <AC>save
二、在 SWB 上部署 DHCP 服务
为实现自动地址分配功能，在 SWB 设备上配置 DHCP 地址池，具体操作如下：
[SWB]ip pool ap Info: It's successful to create an IP address pool.
该地址池将用于向接入的无线接入点（AP）设备分配IP地址，确保其能够正常注册并与AC建立通信。
三、SWA设备上配置VLAN 10、VLAN 11与VLAN 12的中继服务
在SWA上启用DHCP功能，并为多个VLAN接口配置IP地址及DHCP中继：
[SWA]dhcp ena Info: The operation may take a few seconds. Please wait for a moment.done. [SWA] [SWA]int vlan 10 [SWA-Vlanif10]ip add 10.0.10.254 24 [SWA-Vlanif10]dhcp select relay [SWA-Vlanif10]dhcp relay server-ip 172.16.1.2 [SWA-Vlanif10]int vlan 11 [SWA-Vlanif11]ip add 10.0.11.254 24 [SWA-Vlanif11]dhcp select relay [SWA-Vlanif11]dhcp relay server-ip 172.16.1.2 [SWA-Vlanif11]int vlan 12 [SWA-Vlanif12]ip add 10.0.12.254 24 [SWA-Vlanif12]dhcp select relay [SWA-Vlanif12]dhcp relay server-ip 172.16.1.2 [SWA-Vlanif12]qu
在SWB设备上，对VLAN 101接口进行配置，指定其使用全局DHCP地址池：
SWB: [SWB]int vlan 101 [SWB-Vlanif101]dhcp select global
四、在SWA、SWB以及AC设备之间配置OSPF路由协议以实现网络互通
首先在SWA设备上进入OSPF进程1，并将相关网段宣告进Area 0：
[SWA]ospf 1 [SWA-ospf-1]ar 0 [SWA-ospf-1-area-0.0.0.0]network 10.0.10.0 0.0.0.255 [SWA-ospf-1-area-0.0.0.0]network 10.0.11.0 0.0.0.255 [SWA-ospf-1-area-0.0.0.0]network 10.0.12.0 0.0.0.255 [SWA-ospf-1-area-0.0.0.0]network 172.16.1.0 0.0.0.255 [SWA-ospf-1-area-0.0.0.0]qu
随后在SWB设备上配置OSPF，宣告连接AC和核心网络的子网：
[SWB]ospf 1 [SWB-ospf-1]ar 0 [SWB-ospf-1-area-0.0.0.0]network 172.16.1.0 0.0.0.255 [SWB-ospf-1-area-0.0.0.0]network 10.0.99.0 0.0.0.255 [SWB-ospf-1-area-0.0.0.0]qu [SWB-ospf-1]
最后在AC设备上启动OSPF服务，并将其管理VLAN所在的网段加入到骨干区域：
AC: [AC]ospf 1 [AC-ospf-1]ar 0 [AC-ospf-1-area-0.0.0.0]network 10.0.99.0 0.0.0.255 [AC-ospf-1-area-0.0.0.0]qu
五、无线控制器（AC）的基础配置
进入系统视图后设置CAPWAP隧道源接口为VLAN 99，并创建名为ap-group1的AP组：
<AC>sys Enter system view, return user view with Ctrl+Z. [AC]capwap source int vlan 99 [AC]wlan [AC-wlan-view]ap-group name ap-group1
IP地址池配置部分如下：
创建用于AP设备分配地址的IP池，指定网络范围、网关及Option 43选项指向AC自身地址：
[SWB-ip-pool-ap]network 10.0.10.0 mask 24 [SWB-ip-pool-ap]gateway-list 10.0.10.254 [SWB-ip-pool-ap]option 43 sub-option 3 ascii 10.0.99.254 [SWB-ip-pool-ap]ip pool vlan11 Info:It's successful to create an IP address pool.
接着配置VLAN 11对应的地址池，包含网络号、默认网关和DNS服务器：
[SWB-ip-pool-vlan10]network 10.0.11.0 mask 24 [SWB-ip-pool-vlan10]gateway-list 10.0.11.254 [SWB-ip-pool-vlan10]dns-list 114.114.114.114 [SWB-ip-pool-vlan10]ip pool vlan12 Info:It's successful to create an IP address pool.
最后完成VLAN 12的地址池设置：
[SWB-ip-pool-vlan20]network 10.0.12.0 mask 24 [SWB-ip-pool-vlan20]gateway-list 10.0.12.254 [SWB-ip-pool-vlan20]dns-list 114.114.114.114 [SWB-ip-pool-vlan20]qu
[AC-wlan-view]ap auth-mode mac-auth [AC-wlan-view]ap-id 0 ap-mac 00e0-fcf7-0210 [AC-wlan-ap-0]ap-name area_1 [AC-wlan-ap-0]ap-group ap-group1 Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configurations of the radio, Whether to c ontinue? [Y/N]:y Info: This operation may take a few seconds. Please wait for a moment.. done. [AC-wlan-ap-0]qu [AC-wlan-view]ap-id 1 ap-mac 00e0-fc5a-6ba0 [AC-wlan-ap-1]ap-name area_2 [AC-wlan-ap-1]ap-group ap-group1 Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configurations of the radio, Whether to c ontinue? [Y/N]:y Info: This operation may take a few seconds. Please wait for a moment.. done. [AC-wlan-ap-1]qu [AC-wlan-view]dis ap all[AC-wlan-view]security-profile name wlan-net1 [AC-wlan-sec-prof-wlan-net1]security wpa-wpa2 psk pass-phrase abc12345 aes [AC-wlan-sec-prof-wlan-net1]qu [AC-wlan-view]ssid-profile name wlan-net1 [AC-wlan-ssid-prof-wlan-net1]ssid Sales Info: This operation may take a few seconds, please wait.done. [AC-wlan-ssid-prof-wlan-net1]qu [AC-wlan-view]vap-profile name wlan-net1 [AC-wlan-vap-prof-wlan-net1]forward-mode direct-forward [AC-wlan-vap-prof-wlan-net1]service-vlan vlan-id 11 [AC-wlan-vap-prof-wlan-net1]security-profile wlan-net1 Info: This operation may take a few seconds, please wait.done. [AC-wlan-vap-prof-wlan-net1]ssid-profile wlan-net1 Info: This operation may take a few seconds, please wait.done. [AC-wlan-vap-prof-wlan-net1]qu [AC-wlan-view]security-profile name wlan-net2 [AC-wlan-sec-prof-wlan-net2]security wpa-wpa2 psk pass-phrase abc12345 aes [AC-wlan-sec-prof-wlan-net2]qu [AC-wlan-ap-group-ap-group1]regulatory-domain-profile default Warning: Modifying the country code will clear channel, power and antenna gain c onfigurations of the radio and reset the AP. Continue?[Y/N]:y [AC-wlan-ap-group-ap-group1]qu
六、无线访问配置
[AC-wlan-view]ssid-profile name wlan-net2
[AC-wlan-ssid-prof-wlan-net2]ssid Finances
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-ssid-prof-wlan-net2]qu
[AC-wlan-view]vap-profile name wlan-net2
[AC-wlan-vap-prof-wlan-net2]forward-mode direct-forward
[AC-wlan-vap-prof-wlan-net2]service-vlan vlan-id 12
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-vap-prof-wlan-net2]security-profile wlan-net2
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-vap-prof-wlan-net2]ssid-profile wlan-net2
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-vap-prof-wlan-net2]qu
[AC-wlan-view]ap-group name ap-group1
[AC-wlan-ap-group-ap-group1]vap-profile wlan-net1 wlan 1 radio all
Info: This operation may take a few seconds, please wait...done.
[AC-wlan-ap-group-ap-group1]vap-profile wlan-net2 wlan 2 radio all
Info: This operation may take a few seconds, please wait...done.
[AC-wlan-ap-group-ap-group1]qu
[AC-wlan-view]qu
[AC]qu
<AC>save
京公网安备 11010802022788号
