AC vlan的创建
管理 vlan:vlan1:192.168.1.100
业务 vlan:vlan10:192.168.10.100
[AC6005]vlan 1 //创建vlan1
[AC6005-vlan1]q
[AC6005]vlan 10 //创建vlan10
[AC6005-vlan10]
[AC6005]int vlan 1 //进入vlan1
[AC6005-Vlanif1]ip address 192.168.1.100 24 //为vlan1配置ip地址
[AC6005-Vlanif1]q
[AC6005]int vlan 10 //进入vlan10
[AC6005-Vlanif10]ip address 192.168.10.100 24 //为vlan10配置ip地址
将 连接 ap 的口上设为 trunk 接口，再 trunk 接口上允许所有的 vlan 通过
[AC6005]port-group 1 //创建一个组
[AC6005-port-group-1]group-member g0/0/1 to g0/0/4 //把连接AC的接口，放到这个组中
[AC6005-port-group-1]port link-type trunk //把这个组中的接口配置trunk链路
[AC6005-GigabitEthernet0/0/1]port link-type trunk
[AC6005-GigabitEthernet0/0/2]port link-type trunk
[AC6005-GigabitEthernet0/0/3]port link-type trunk
[AC6005-GigabitEthernet0/0/4]port link-type trunk
[AC6005-port-group-1]port trunk allow-pass vlan all ///允许所有的vlan通过
[AC6005-GigabitEthernet0/0/1]port trunk allow-pass vlan all
[AC6005-GigabitEthernet0/0/2]port trunk allow-pass vlan all
[AC6005-GigabitEthernet0/0/3]port trunk allow-pass vlan all
[AC6005-GigabitEthernet0/0/4]port trunk allow-pass vlan all设计无线终端和 ap 的 dhcp 服务
[AC6005]dhcp enable //开启DHCP功能
[AC6005]ip pool vlan_1 //创建地址池
[AC6005-ip-pool-vlan_1]network 192.168.1.0 mask 24 //创建地址的网段
[AC6005-ip-pool-vlan_1]gateway-list 192.168.1.100 //地址池的网关
[AC6005-ip-pool-vlan_1]int vlan 1 //进入 vlan1
[AC6005-Vlanif1]dhcp select global //选择DHCP全局
[AC6005]ip pool vlan_10 //创建地址池
[AC6005-ip-pool-vlan_10]network 192.168.10.0 mask 24 //创建地址的网段
[AC6005-ip-pool-vlan_10]gateway-list 192.168.10.100 //地址池的网关
[AC6005]int vlan 10 //进入 vlan1
[AC6005-Vlanif10]dhcp select global //选择DHCP全局
上线AP
[AC6005]capwap source int vlan 1 //设置vlan1为管理下发接口
[AC6005]wlan 进入到wlan
[AC6005-wlan-view]ap-group name ap-1 //设置一个AP组
[AC6005-wlan-ap-group-ap-1]ap-id 0 ap-mac 00e0-fcd0-31f0 //把AP添加到AP组中，（每个AP只有一个mac地址，所以添加mac地址）
[AC6005-wlan-ap-0]ap-name area0 //给AP设置一个名称
[AC6005-wlan-ap-0]ap-group ap-1 把此AP添加到AP组中
Warning: This operation may cause AP reset. If the country code changes, it will
clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y //是否要执行此操作 YES:是 NO：否
[AC6005-wlan-ap-0]ap-id 1 ap-mac 00e0-fc90-09a0 //把AP添加到AP组中
[AC6005-wlan-ap-1]ap-name area1 //给AP设置一个名称
[AC6005-wlan-ap-1]ap-group ap-1 把此AP添加到AP组中
Warning: This operation may cause AP reset. If the country code changes, it will
clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
[AC6005-wlan-ap-1]ap-id 2 ap-mac 00e0-fc4b-0180 //把AP添加到AP组中
[AC6005-wlan-ap-2]ap-name area2 //给AP设置一个名称
[AC6005-wlan-ap-2]ap-group ap-1 把此AP添加到AP组中
Warning: This operation may cause AP reset. If the country code changes, it will
clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
[AC6005-wlan-ap-2]ap-id 3 ap-mac 00e0-fc6e-4420 //把AP添加到AP组中
[AC6005-wlan-ap-3]ap-name area3 //给AP设置一个名称
[AC6005-wlan-ap-3]ap-group ap-1 把此AP添加到AP组中
Warning: This operation may cause AP reset. If the country code changes, it will
clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
[AC6005-wlan-view]dis ap all
nor : normal [4]
--------------------------------------------------------------------------------
---------
ID MAC Name Group IP Type State STA Uptime
--------------------------------------------------------------------------------
---------
0 00e0-fcd0-31f0 area0 ap-1 192.168.1.58 AP2050DN nor 0 8M:10S
1 00e0-fc90-09a0 area1 ap-1 192.168.1.183 AP2050DN nor 0 3M:52S
2 00e0-fc4b-0180 area2 ap-1 192.168.1.206 AP2050DN nor 0 2M:18S
3 00e0-fc6e-4420 area3 ap-1 192.168.1.191 AP2050DN nor 0 45S
--------------------------------------------------------------------------------
---------
Total: 4
出现nor代表成功在 AC 上进行模板配置，并下发给 AP
[AC6005-wlan-view]security-profile name lu ///配置安全模板的名称
[AC6005-wlan-sec-prof-lu]security wpa2 psk pass-phrase a1234567 aes //设置安全密码
[AC6005-wlan-view]ssid-profile name xn //配置SSID模板的名称
[AC6005-wlan-ssid-prof-xn]ssid LCGJCJ SSID的名称
[AC6005-wlan-view]vap-profile name fw //配置vap模板的名称
[AC6005-wlan-vap-prof-fw]security-profilel lu //把安全模板放入到vap模板
[AC6005-wlan-vap-prof-fw]ssid-profile xn //把ssid模板放入到vap模板
[AC6005-wlan-vap-prof-fw]forward-mode tunnel //设置转发模式
[AC6005-wlan-vap-prof-fw]service-vlan vlan-id 10 //设置业务vlan为vlan10
[AC6005-wlan-view]ap-group name ap-1 ///进入到group组中
[AC6005-wlan-ap-group-ap-1]vap-profile fw wlan 1 radio all /// 将该 VAP 模板应用到所有射频接口上
配置完成，如图所示，这样就可以连网使用了