华为AC-AP配置

配置Switch

[Switch]vlan batch 100 101102    //创建管理Vlan100、业务vlan101、102

[Switch]interface g0/0/1          //进入端口G0/0/1

[Switch-GigabitEthernet0/0/1]descriptionlink-ap

[Switch-GigabitEthernet0/0/1]portlink-type trunk    //端口模式为trunk

[Switch-GigabitEth0ernet0/0/1]porttrunk pvid vlan 100

//给接AP的端口打上管理vlan100的PVID

[Switch-GigabitEthernet0/0/1]porttrunk allow-pass vlan 100 101

//定义该端口允许通过的vlan

[Switch-GigabitEthernet0/0/1]quit

[Switch]interfaceGigabitEthernet0/0/2    //进入G0/0/2，与g/0/1同理

[Switch-GigabitEthernet0/0/2]portlink-type trunk

[Switch-GigabitEthernet0/0/2]porttrunk allow-pass vlan 100 101

[Switch-GigabitEthernet0/0/2]quit

配置AC

1. 配置接口和VLAN信息，AC为DHCP Server，为AP和client分配地址

[AC]vlan batch 100 101 102    //在AC上创建管理vlan100、业务vlan101、102

[AC]interfaceGigabitEthernet0/0/1  //进入端口

[AC-GigabitEthernet0/0/1]portlink-type trunk  //定义端口模式

[AC-GigabitEthernet0/0/1]porttrunk allow-pass vlan 100 101

//定义允许通过的vlan

[AC-GigabitEthernet0/0/1]quit

[AC]dhcp enable  //开启DHCP功能

[AC]interface vlanif 100       //配置vlan100的IP地址 并且开启DHCP

[AC -Vlanif100]descriptionfor-ap

[AC -Vlanif100]ip address192.168.100.1 24

[AC -Vlanif100]dhcp selectinterface

[AC-Vlanif100]quit

[AC]interface vlanif 101       //配置vlan101的IP地址并且开启DHCP

[AC -Vlanif101]descriptionfor-STA

[AC -Vlanif101]ip address192.168.101.1 24

[AC -Vlanif101]dhcp selectinterface

[ACVlanif101]quit

[AC]interface vlanif 102       //配置vlan102的IP地址并且开启DHCP

[AC -Vlanif102]descriptionfor-STA

[AC -Vlanif102]ip address192.168.102.1 24

[AC -Vlanif102]dhcp selectinterface

[ACVlanif102]quit

如果没有配置IP地址，直接从端口下开启DHCP功能失败，报错，如下图：

2. 配置AC WLAN基础配置

[AC]wlan ac-global ac id 1carrier id other

[AC]wlan ac-globalcountry-code CN

现行国家代码与输入国家代码相同

[AC]wlan

[AC -wlan-view]wlan ac sourceinterface Vlanif 100  //配置AP的管理VLAN，从哪个VLAN下拿地址

[AC-wlan-view]ap-auth-modeno-auth   // 将AP上线模式改为不认证

此配置做完后在全局查询AP    display ap all   查看AP是否上线

ap id 0 type-id 38mac 0006-f468-91a0 sn 21500821798W47001474 （AP上线后会自动生成）

3.配置AC WLAN 业务参数

#创建wlan-ess接口

[AC]interface Wlan-Ess 1     //之后会与下面 service-set（服务集）绑定

[AC-Wlan-Ess1]port hybridpvid vlan 101    //打上业务vlan101的PVID

[AC-Wlan-Ess1]port hybriduntagged vlan 101     //打上业务vlan101的PVID

[AC-Wlan-Ess1]quit

[AC]interface Wlan-Ess 2     //之后会与下面 service-set（服务集）绑定

[AC-Wlan-Ess2]port hybridpvid vlan 102    //打上业务vlan102的PVID

[AC-Wlan-Ess2]port hybriduntagged vlan 102     //打上业务vlan102的PVID

[AC-Wlan-Ess2]quit

#创建WMM模板，采用默认参数

[AC-wlan-view]wmm-profilename wmm-profile-0

[AC-wlan-wmm-prof-wmm-profile-0]quit

//之后会与下面 radio-profile（射频）模板绑定

#创建安全模板，采用默认参数

[AC-wlan-view]security-profilename security-profile-0

[AC-wlan-sec-prof-security-profile-0]quit

//之后会与下面service-set（服务集）绑定

【如果需要为无线设置密码则：

[AC-wlan-view]security-profilename security-profile-0

[AC-wlan-sec-prof-security-profile-0]security-policywpa      设置无线的加密方式

[AC-wlan-sec-prof-security-profile-0]wpaauthentication-method psk pass-phrase cipher 12344321  encryption-method tkip      设置加密算法，密码，密文处为密码 】

#创建流量模板，采用默认参数

[AC-wlan-view]traffic-profilename traffic-profile-0

[AC-wlan-traffic-prof-traffic-profile-0]quit

//之后会与下面 service-set（服务集）绑定

#创建服务集并绑定WLAN-ESS接口、安全模板和流量模板

[AC-wlan-view]service-setname service-set-0

[AC-wlan-service-set-service-set-0]ssidstaff

[AC-wlan-service-set-service-set-0]wlan-ess1

[AC-wlan-service-set-service-set-0]service-vlan101

[AC-wlan-service-set-service-set-0]security-profilename security-profile-0

[AC-wlan-service-set-service-set-0]traffic-profilename traffic-profile-0

#创建射频模板，并绑定WMM模板

[AC-wlan-view]radio-profilename radio-profile-0

[AC-wlan-radio-prof-radio-profile-0]wmm-profilename wmm-profile-0

[AC-wlan-radio-prof-radio-profile-0]quit

#配置VAP并下发

[AC-wlan-view]ap 0 radio 0

[AC-wlan-radio-0/0]radio-profilename radio-profile-0

[AC-wlan-radio-0/0]service-setname service-set-0

[AC-wlan-radio-0/0]service-setname service-set-0

[AC-wlan-radio-0/0]quit

[AC-wlan-view]commit ap 0