欢迎您访问程序员文章站本站旨在为大家提供分享程序员计算机编程知识!
您现在的位置是: 首页

Vlan组网配置实验

程序员文章站 2022-07-02 21:50:09
...

Vlan组网配置实验

一、实验拓扑

Vlan组网配置实验

二、实验步骤

1、在接入交换机上创建vlan,设置端口类型和pvid

<Huawei>sys	
[Huawei]sysname SW2
[SW2]vlan batch 100 to 102
[SW2]int g0/0/1
[SW2-GigabitEthernet0/0/1]port link-type trunk
[SW2-GigabitEthernet0/0/1]port trunk pvid vlan 100
[SW2-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 101
[SW2]int g0/0/2
[SW2-GigabitEthernet0/0/2]port link-type trunk
[SW2-GigabitEthernet0/0/2]port trunk pvid vlan 100
[SW2-GigabitEthernet0/0/2]port trunk allow-pass vlan 100 102
[SW2]int g0/0/3
[SW2-GigabitEthernet0/0/3]port link-type trunk 
[SW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 100 to 102

2、在汇聚交换机上配置vlan和接口类型

<Huawei>sys
[Huawei]sysname SW1
[SW1]vlan batch 100 to 102
[SW1]int g0/0/2
[SW1-GigabitEthernet0/0/2]port link-type trunk 
[SW1-GigabitEthernet0/0/2]port trunk allow-pass vlan 100 to 102
[SW1-GigabitEthernet0/0/2]int g0/0/3
[SW1-GigabitEthernet0/0/3]port link-type trunk 
[SW1-GigabitEthernet0/0/3]port trunk allow-pass vlan 100 to 102

3、配置AC的接口

<AC6605>sys
[AC6605]sysname AC1
[AC1]vlan batch 100 to 102
[AC1]int g0/0/1
[AC1-GigabitEthernet0/0/1]port link-type trunk 
[AC1-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 to 102

4、在AC上创建AP组配置AP上线并且配置VLAN业务参数

(1) 创建AP组

<AC6605>sys
[AC6605]sysname AC1
[AC1-wlan-view]ap-group name ap-group1    

(2)配置AC为DHCP服务器

[AC1]dhcp enable
[AC1]int vlan 100
[AC1-Vlanif100]ip add 192.168.100.1 24
[AC1-Vlanif100]dhcp select interface 
[AC1-Vlanif100]int vlan 101
[AC1-Vlanif101]ip add 192.168.101.1 24
[AC1-Vlanif101]dhcp select interface
[AC1-Vlanif101]int vlan 102
[AC1-Vlanif102]ip add 192.168.102.1 24
[AC1-Vlanif102]dhcp select interface 

(3)创建域管理模板,配置AC的国家码,绑定域管理模板到AP组

[AC1]wlan
[AC1-wlan-view]regulatory-domain-profile name domain1
[AC1-wlan-regulate-domain-domain1]country-code CN
[AC1-wlan-regulate-domain-domain1]quit	
[AC1-wlan-view]ap-group name ap-group1
[AC1-wlan-ap-group-ap-group1]regulatory-domain-profile domain1
Warning: Modifying the country code will clear channel, power and antenna gain c
onfigurations of the radio and reset the AP. Continue?[Y/N]:y
[AC1-wlan-ap-group-ap-group1]

(4)与AP建立capwap隧道

[AC1]capwap source interface Vlanif 100

(5)配置AP认证方式

[AC1]wlan
[AC1-wlan-view]ap auth-mode  mac-auth 
[AC1-wlan-view]ap-mac 00E0-FCF9-56D0 ap-id 0
[AC1-wlan-ap-0]ap-group ap-group1
Warning: This operation may cause AP reset. If the country code changes, it will
 clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.. done.
[AC1-wlan-ap-0]quit
[AC1-wlan-view]ap-mac 00E0-FCEA-2330 ap-id 1
[AC1-wlan-ap-1]ap-group ap-group1
Warning: This operation may cause AP reset. If the country code changes, it will
 clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.. done.
[AC1-wlan-ap-1]quit

(6)配置安全模板

[AC1-wlan-view]serial-profile name security-1

(7)配置SSID模板

[AC1-wlan-view]ssid-profile name zjh-1
[AC1-wlan-ssid-prof-zjh-1]ssid zjh-1
Info: This operation may take a few seconds, please wait.done.
[AC1-wlan-ssid-prof-zjh-1]quit
[AC1-wlan-view]ssid-profile name zjh-2	
[AC1-wlan-ssid-prof-zjh-2]ssid zjh-2
Info: This operation may take a few seconds, please wait.done

(8)配置VAP模板

[AC1-wlan-view]vap-profile name zjh-1	
[AC1-wlan-vap-prof-zjh-1]forward-mode direct-forward 	
[AC1-wlan-vap-prof-zjh-1]service-vlan vlan-id 101
Info: This operation may take a few seconds, please wait.done.	
[AC1-wlan-vap-prof-zjh-1]security-profile security-1
[AC1-wlan-vap-prof-zjh-1]ssid-profile zjh-1

[AC1-wlan-view]vap-profile name zjh-2	
[AC1-wlan-vap-prof-zjh-2]forward-mode direct-forward 	
[AC1-wlan-vap-prof-zjh-2]service-vlan vlan-id 102
Info: This operation may take a few seconds, please wait.done.
[AC1-wlan-vap-prof-zjh-2]security-profile security-1
Info: This operation may take a few seconds, please wait.done.
[AC1-wlan-vap-prof-zjh-2]ssid-profile zjh-2
Info: This operation may take a few seconds, please wait.done.

(9)绑定模板到AP组

[AC1-wlan-view]ap-group name ap-group1
[AC1-wlan-ap-group-ap-group1]vap-profile zjh-1 wlan 1 radio all 
Info: This operation may take a few seconds, please wait...done.
[AC1-wlan-ap-group-ap-group1]vap-profile zjh-2 wlan 2 radio all
Info: This operation may take a few seconds, please wait...done.

三、实验结果

1、AP产生vlan范围
Vlan组网配置实验
2、STA连接上无线

Vlan组网配置实验
3、在ac上查看ap的状态
Vlan组网配置实验

相关标签: 数通 网络