WLAN配置:直连组网+隧道转发

WLAN配置:直连组网+隧道转发

2026年02月26日·3 分钟阅读·57 次阅读·0 点赞·0 条评论

一、拓扑图及需求

需求:

1.配置网络互通

二、需求分析

三、具体配置

1.SW1 创建 VLAN,并配置相应接口

[SW1]vlan batch 10 20 100
 
[SW1-GigabitEthernet0/0/1]port link-type trunk
[SW1-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20 100
 
[SW1-GigabitEthernet0/0/2]port link-type trunk 
[SW1-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 100 20
[SW1-GigabitEthernet0/0/2]port trunk pvid vlan 100
 
[SW1-GigabitEthernet0/0/3]port link-type access 
[SW1-GigabitEthernet0/0/3]port default vlan 20

2.配置 AC

开启 DHCP 服务,并创建地址池:

[AC6605]dhcp enable 
[AC6605]ip pool vlan100
[AC6605-ip-pool-vlan100]network 100.0.0.0 mask 24 
[AC6605-ip-pool-vlan100]gateway-list 100.0.0.1
[AC6605-Vlanif100]dhcp select global 

创建 VLAN:

[AC6605]vlan batch 10 20 100
[AC6605-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 20 100

创建管理 VLAN:

[AC6605]int Vlanif 100
[AC6605-Vlanif100]ip address 100.0.0.1 24

创建虚拟隧道:

[AC6605]capwap source interface Vlanif 100

创建域管理模板:

[AC6605-wlan-view]regulatory-domain-profile name domain
[AC6605-wlan-regulate-domain-domain]country-code CN 

创建 AP 组并调用:

[AC6605-wlan-view]ap-group name group-1
[AC6605-wlan-ap-group-group-1]regulatory-domain-profile domain

配置 AP 认证方式:

[AC6605-wlan-view]ap auth-mode mac-auth 

创建 AP 并绑定 MAC 地址:

[AC6605-wlan-view]ap-id 0 ap-mac 00e0-fcb5-6520

关联配置:

[AC6605-wlan-ap-0]ap-group group-1

配置 WIFI 名/密码:

[AC6605-wlan-view]ssid-profile name test-1
[AC6605-wlan-ssid-prof-test-1]ssid openlab
[AC6605-wlan-sec-prof-test-1]security wpa-wpa2 psk pass-phrase huawei123 aes

关联模板:

[AC6605-wlan-view]vap-profile name test-1
[AC6605-wlan-vap-prof-test-1]ssid-profile test-1
[AC6605-wlan-vap-prof-test-1]security-profile test-1

设置转发模式:

[AC6605-wlan-vap-prof-test-1]forward-mode direct-forward 

配置 VLAN:

[AC6605-wlan-vap-prof-test-1]service-vlan vlan-id 10

补充配置:

[AC6605-wlan-ap-group-group-1]vap-profile test-1 wlan 1 radio all 

创建终端地址池:

[AC6605]int Vlanif 10
[AC6605-Vlanif10]ip address 192.168.10.1 24
[AC6605]ip pool vlan10
[AC6605-ip-pool-vlan10]network 192.168.10.0 mask 24
[AC6605-ip-pool-vlan10]gateway-list 192.168.10.1
[AC6605-ip-pool-vlan10]dns-list 8.8.8.8 
[AC6605]int Vlanif 10
[AC6605-Vlanif10]dhcp select global 

四、测试

©

版权声明:本文采用 CC BY-NC-SA 4.0 协议授权,转载请注明出处并保留原始链接。

原文链接:https://www.jerrygao.cn//blog/wlanE9858DE7BDAEE79BB4E8BF9EE7BB84E7BD91E99AA7E98193E8BDACE58F91

评论 0

💬

还没有评论,成为第一个留言的人吧!