华为AC控制器管理AP配置

2025-05-31 05:26:26

实验要求： ①、Switch作为二层接入交换机；创建Vlan100作为业务Vlan；创建Vlan800作为AP的管理Vlan；创建Vlan801作为AP的业务Vlan；创建Vlan999作为设备的管理Vlan。 ②、Switch的GigabitEthernet0/0/1~16口配置业务Vlan100； GigabitEthernet0/0/17~22口配置为AP的接入端口；GigabitEthernet0/0/24口配置为上联口，上联到路由器Router。 ③、AC控制器的GigabitEthernet0/0/1~20口配置为AP的接入端口；GigabitEthernet0/0/24口配置为上联口，上联到路由器Router。 ④、AC控制器作为DHCP服务器，为业务Vlan100、AP的管理Vlan800、AP的业务Vlan801提供IP地址的分发业务。 ⑤、路由器Router作为核心路由器。 ⑥、AP发射的SSID为FreeWiFi；连接密码为1234567890。 ⑦、使部署在交换机Switch上的PC和连接在AP1或AP2上的笔记本SAT1之间能够互相通讯；并且PC和SAT1均能与网络上的交换机、路由器、AP以及AC控制器进行通讯。

拓扑结构说明：

1、 ①、PC、STA1设置动态获取IP地址。 ②、Switch作为接入交换机。 ③、在路由器Router旁路接入AC控制器，并作为DHCP服务器，分别为Vlan100、Vlan800、Vlan801提供IP地址的分发业务。路由器Router上配置DHCP中继。 ④、如拓扑结构中所标示，为各个设备的管理地址。

2、平台搭建： ①、按照拓扑结构图所示，摆放好设备，并使用直连线连接好各个设备。 ②、开启所有的设备。

设备配置清单：

1、Router的配置清单：[V200R003C00]<Huawei> system-view[Huawei]sysname Router[Router]vlan batch 100 800 to 801 999[Router]dhcp enable[Router]interface Vlanif100[Router-Vlanif100]description PC_Client_Vlan[Router-Vlanif100]ip address 192.168.10.1 255.255.255.0[Router-Vlanif100]dhcp select relay[Router-Vlanif100]quit[Router]interface Vlanif800[Router-Vlanif800]description AP_Management_Vlan[Router-Vlanif800]ip address 192.16.8.11 255.255.255.0[Router-Vlanif800]dhcp select relay[Router-Vlanif800]quit[Router]interface Vlanif801[Router-Vlanif801]description AP_Client_Vlan[Router-Vlanif801]ip address 192.168.100.11 255.255.255.0[Router-Vlanif801]dhcp select relay[Router-Vlanif801]quit[Router]interface Vlanif999[Router-Vlanif999]description Management_Vlan[Router-Vlanif999]ip address 192.16.9.11 255.255.255.0[Router-Vlanif999]quit[Router]interface Ethernet0/0/0[Router-Ethernet0/0/0]description To_Switch[Router-Ethernet0/0/0]port link-type trunk[Router-Ethernet0/0/0]port trunk allow-pass vlan 2 to 4094[Router-Ethernet0/0/0]quit[Router]interface Ethernet0/0/7[Router-Ethernet0/0/7]description To_WAPC[Router-Ethernet0/0/7]port link-type trunk[Router-Ethernet0/0/7]port trunk allow-pass vlan 2 to 4094[Router-Ethernet0/0/7]quit[Router]interface Ethernet0/0/8[Router-Ethernet0/0/8]description To_Output[Router-Ethernet0/0/8]quit

2、AC控制器的配置清单：[V200R007C10SPC300]<AC6605> system-view[AC6605] sysname WAPC[WAPC]vlan batch 100 800 to 801 999[WAPC]dhcp enable[WAPC]ip pool ForAP[WAPC-ip-pool-ForAP]gateway-list 192.168.8.1[WAPC-ip-pool-ForAP]network 192.16.8.0 mask 255.255.255.0[WAPC-ip-pool-ForAP]excluded-ip-address 192.16.8.2 192.16.8.99[WAPC-ip-pool-ForAP]dns-list 192.168.10.1[WAPC-ip-pool-ForAP]quit[WAPC]ip pool ForClient[WAPC-ip-pool-ForClient]gateway-list 192.168.100.1[WAPC-ip-pool-ForClient]network 192.168.100.0 mask 255.255.255.0[WAPC-ip-pool-ForClient]excluded-ip-address 192.168.100.3 192.168.100.99[WAPC-ip-pool-ForClient]dns-list 192.168.10.1[WAPC-ip-pool-ForClient]quit[WAPC]ip pool ForVlan100[WAPC-ip-pool-ForVlan100]gateway-list 192.168.10.1[WAPC-ip-pool-ForVlan100]network 192.168.10.0 mask 255.255.255.0[WAPC-ip-pool-ForVlan100]excluded-ip-address 192.168.10.3 192.168.10.99[WAPC-ip-pool-ForVlan100]excluded-ip-address 192.168.10.200 192.168.10.254[WAPC-ip-pool-ForVlan100]dns-list 192.168.10.1[WAPC-ip-pool-ForVlan100]quit[WAPC]interface Vlanif100[WAPC-Vlanif100]description PC_Client_Vlan[WAPC-Vlanif100]ip address 192.168.10.2 255.255.255.0[WAPC-Vlanif100]dhcp select global[WAPC-Vlanif100]quit[WAPC]interface Vlanif800[WAPC-Vlanif800]description AP_Management_Vlan[WAPC-Vlanif800]ip address 192.16.8.1 255.255.255.0[WAPC-Vlanif800]dhcp select global[WAPC-Vlanif800]quit[WAPC]interface Vlanif801[WAPC-Vlanif801]description AP_Client_Vlan[WAPC-Vlanif801]ip address 192.168.100.1 255.255.255.0[WAPC-Vlanif801]dhcp select global[WAPC-Vlanif801]quit[WAPC]interface Vlanif999[WAPC-Vlanif999]description Management_Vlan[WAPC-Vlanif999]ip address 192.16.9.22 255.255.255.0[WAPC-Vlanif999]quit[WAPC]port-group 123[WAPC-port-group-123]group-member GigabitEthernet 0/0/1 to GigabitEthernet 0/0/20[WAPC-port-group-123]description To_AP[WAPC-port-group-123]port link-type trunk[WAPC-port-group-123]port trunk pvid vlan 800[WAPC-port-group-123]port trunk allow-pass vlan 2 to 4094[WAPC-port-group-123]quit[WAPC]undo port-group 123[WAPC]interface GigabitEthernet0/0/24[WAPC-GigabitEthernet0/0/24]description To_Router[WAPC-GigabitEthernet0/0/24]port link-type trunk[WAPC-GigabitEthernet0/0/24]port trunk allow-pass vlan 2 to 4094[WAPC-GigabitEthernet0/0/24]quit[WAPC]ip route-static 192.16.9.0 255.255.255.0 GigabitEthernet0/0/24 192.16.9.11[WAPC]capwap source interface vlanif800[WAPC]wlan[WAPC-wlan-view]security-profile name FreeWiFi[WAPC-wlan-sec-prof-FreeWiFi]security wpa2 psk pass-phrase 1234567890 aes-tkip[WAPC-wlan-sec-prof-FreeWiFi]quit[WAPC-wlan-view]ssid-profile name FreeWiFi[WAPC-wlan-ssid-prof-FreeWiFi]ssid FreeWiFi[WAPC-wlan-ssid-prof-FreeWiFi]quit[WAPC-wlan-view]vap-profile name FreeWiFi[WAPC-wlan-vap-prof-FreeWiFi]service-vlan vlan-id 801[WAPC-wlan-vap-prof-FreeWiFi]ssid-profile FreeWiFi[WAPC-wlan-vap-prof-FreeWiFi]security-profile FreeWiFi[WAPC-wlan-vap-prof-FreeWiFi]quit[WAPC-wlan-view]ap-group name FreeWiFi[WAPC-wlan-ap-group-FreeWiFi]radio 0[WAPC-wlan-group-radio-FreeWiFi/0]vap-profile FreeWiFi wlan 1[WAPC-wlan-group-radio-FreeWiFi/0]quit[WAPC-wlan-view]ap-id 1 type-id 45 ap-mac 00e0-fc00-0c70[WAPC-wlan-ap-1]ap-name AP1[WAPC-wlan-ap-1]ap-group FreeWiFi[WAPC-wlan-ap-1]quit[WAPC-wlan-view]ap-id 2 type-id 45 ap-mac 00e0-fcf8-13d0[WAPC-wlan-ap-2]ap-name AP2[WAPC-wlan-ap-2]ap-group FreeWiFi

3、Switch的配置清单：<Huawei> system-view[Huawei]sysname Switch[Switch]vlan batch 100 800 to 801 999[Switch]interface Vlanif100[Switch-Vlanif100]description PC_Client_Vlan[Switch]interface Vlanif800[Switch-Vlanif800]description AP_Management_Vlan[Switch-Vlanif800]quit[Switch]interface Vlanif801[Switch-Vlanif801]description AP_Client_Vlan[Switch-Vlanif801]quit[Switch]interface Vlanif999[Switch-Vlanif999]description Management_Vlan[Switch-Vlanif999]ip address 192.16.9.21 255.255.255.0[Switch-Vlanif999]quit[Switch]port-group 123[Switch-port-group-123]group-member GigabitEthernet 0/0/1 to GigabitEthernet 0/0/16[Switch-port-group-123]port link-type access[Switch-port-group-123]port default vlan 100[Switch-port-group-123]quit[Switch]undo port-group 123[Switch]port-group 456[Switch-port-group-456]group-member GigabitEthernet 0/0/17 to GigabitEthernet 0/0/22[Switch-port-group-456]description To_AP[Switch-port-group-456]port link-type trunk[Switch-port-group-456]port trunk pvid vlan 800[Switch-port-group-456]port trunk allow-pass vlan 2 to 4094[Switch-port-group-456]quit[Switch]undo port-group 456[Switch]interface GigabitEthernet0/0/24[Switch-GigabitEthernet0/0/24]description To_Router[Switch-GigabitEthernet0/0/24]port link-type trunk[Switch-GigabitEthernet0/0/24]port trunk allow-pass vlan 2 to 4094[Switch-GigabitEthernet0/0/24]quit[Switch]ip route-static 0.0.0.0 0.0.0.0 192.16.9.11

模拟测试：

1、检查AP是否能正常上线，且从AC控制器上正确获取IP地址等参数。