华为 eNSP 配置 wlan 中级
中级wlan1.实验拓扑：使用ENSP模拟器（版本V100R002C00 1.2.00.350）2.实验需求：1： AP1和AP2 通过AC1DCHP获得地址2： AP1和AP2发出wlan
3.实验配置：
R1配置：
sy
int g0/0/2
ip add 192.168.1.1 30
int l0
ip add 1.1.1.1 32
q
ip route-static 192.168.101.0 255.255.255.0 192.168.1.2 给两条业务vlan配静态
ip route-static 192.168.102.0 255.255.255.0 192.168.1.2
ac配置：
sy
sysname ac01
vlan 200
int vlan 200
ip add 192.168.1.2 30
int g0/0/2
port hybrid pvid vlan 200
port hybrid untagged vlan 200
p 192.168.1.1
PING 192.168.1.1: 56data bytes, press CTRL_C to break
Reply from 192.168.1.1: bytes=56 Sequence=1 ttl=255 time=1350 ms
Reply from 192.168.1.1: bytes=56 Sequence=2 ttl=255 time=390 ms
Reply from 192.168.1.1: bytes=56 Sequence=3 ttl=255 time=400 ms
Reply from 192.168.1.1: bytes=56 Sequence=4 ttl=255 time=380 ms
Reply from 192.168.1.1: bytes=56 Sequence=5 ttl=255 time=380 ms
--- 192.168.1.1 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 380/580/1350 ms
q
ip route-static 0.0.0.0 0 192.168.1.1 给R1指默认
vlan b 100 101 102
dhcp enable
int vlan 100
ip add 192.168.100.1 24
dhcp select int
int vlan 101
ip add 192.168.101.1 24
dhcp select int
dhc server dns-list 8.8.8.8
int vlan 102
ip add 192.168.102.1 24
dhcp select int
dhc server dns-list 9.9.9.9
q
int g0/0/1
port link-type trunk
port trunk allow-pass vlan 100 to 102
q
wlan ac-global carrier id cmcc ac id 1
wlan
wlan ac source int vlan 100
ap-auth-mode mac-auth
ap id 1 type-id 19 mac 00e0-fc09-77d0
q
wmm-profile id 1 name wmm
q
radio-profile id 1 name r01
wmm-profile id 1
q
traffic-profile id 1 name t01
q
security-profile id 1 name s01
q
security-profile id 1 name s01
security-policy wpa2
wpa2 authentication-method psk pass-phrase cipher abc12345 encryption-method ccmp
q
q
int wlan-ess 1
port hybrid pvid vlan 101
port hybrid untagged vlan 101
q
wlan
service-set id 1 name s01
wlan-ess 1
service-vlan 101
traffic-profile id 1
security-profile id 1
dis this 配好之后要查看5原素齐不齐
#
wlan-ess 1
traffic-profile id 1
security-profile id 1
service-vlan 101
#
return
ssid hw01
q
ap 1 radio 0
radio-profile id 1
Warning: Modify the Radio type may cause some parameters of Radio resume default
value, are you sure to continue?:y
service-set id 1
q
commit all
Warning: Committing configuration may cause service interruption,continue?y
q
q
dis cu conf wlan查看wlan配置命令
wlan
wlan ac source interface vlanif100
ap id 1 type-id 19 mac 00e0-fc09-77d0 sn 2102354483100867E35C
wmm-profile name wmm id 1
traffic-profile name t01 id 1
security-profile name s01 id 1
security-policy wpa2
wpa2 authentication-method psk pass-phrase cipher %@%@eODWA}a`UEy4:Q;$V9''UTdY%
@%@ encryption-method ccmp
service-set name s01 id 1
wlan-ess 1
ssid hw01
traffic-profile id 1
security-profile id 1
service-vlan 101
radio-profile name r01 id 1
wmm-profile id 1
ap 1 radio 0
radio-profile id 1
service-set id 1 wlan 1
#
return
sy
wlan
service-set id 1
user-isolate 配置 用户隔离
q
commit ap 1
Warning: Committing configuration may cause service interruption,continue?y
配置第二台AP
ap-auth-mode mac-auth
ap id 2 type-id 19 mac 00e0-fced-7f00
q
q
int Wlan-Ess 2
port hybrid pvid vlan 102
port hybrid untagged vlan 102
q
wlan
service-set id 2 name s02
wlan-ess 2
ssid hw02
service-vlan 102
traffic-profile id 1
security-profile id 1
dis this
q
ap 2 radio 0
radio-profile id 1
value, are you sure to continue?:y
service-set id 2
q
commit all
Warning: Committing configuration may cause service interruption,continue?y
做隧道华为有BUG所以要关了AP配好了再开
wlan
service-set id 1 name s01
dis this
#
wlan-ess 1
ssid hw01
user-isolate
traffic-profile id 1
security-profile id 1
service-vlan 101
#
return
forward-mode tunnel 做隧道
q
commit all
Warning: Committing configuration may cause service interruption,continue?y
sw1配置：
sy
Enter system view, return user view with Ctrl+Z.
vlan b 100 to 102 200 同时添加用户vlan和管理vlan
int g0/0/1
port link-type trunk
port trunk allow-pass vlan 100 to 102 200
q
interface Ethernet0/0/1
port link-type trunk
port trunk pvid vlan 100
port trunk allow-pass vlan 100 to 101
q
interface Ethernet0/0/1
port link-type trunk
port trunk pvid vlan 100
port trunk allow-pass vlan 100 to 101
port link-type trunk
port trunk pvid vlan 100
port trunk allow-pass vlan 100 102
页:
[1]