1、Word格式基于 enspv510 版 ac與 ap酉己置四川托普信息職業技術學院唐小軍完美整理、拓撲圖”的1同恥咫* 1孔2九1期一2 L0,“1Ti3,191.J ie.23.101.2M/24vUriilf 1W：10p23,109.1/24vlanlilg il vIjtj : vianlfWvlanlW)19 <_r |：*匕 gSTA34IIW®p*-crjRss-APSLSiVZAC2LSW3ap-grouf：!wlart-rttHid: wlahrt4tuIan-net:安全策略 i WFk-hPA2WSlCTES著碌 41234567、實驗環境:三、相應設備：

2、1 .無線 AP:5030, AC:6605,2 .交換：二層，S3700 ,三層，S57003 .電腦：STA四、實現目標：1. STA3能通過無線方式訪問到三層交換機接口地址，10.23.101.2五、配置思路1 .配置AP、AC和周邊網絡設備之間實現網絡互通。2 .配置AP上線。a) 創建AP組，用于將需要進行相同配置的AP都加入到AP組，實現統一配置。b) 配置AC的系統參數，包括國家碼、AC與AP之間通信的源接口。c) 配置AP上線的認證方式并離線導入AP,實現AP正常上線。3 .配置 WLANk務參數，實現 STA訪問 WLANJ絡功能。 六、實驗過程：1.二層交換機配置<H

3、UAWEI>system-viewHUAWEI sysname SwitchSwitch vlan batch 100 101Switch interface Ethernet0/0/1Switch-Ethernet0/0/1Switch-Ethernet0/0/1Switch-Ethernet0/0/1Switch-Ethernet0/0/1Switch-Ethernet0/0/1port link-type trunkport trunk pvid vlan 100port trunk allow-pass vlan 100 101port-is01ate enablequitSwi

4、tch interface gigabitethernet 0/0/2Switch-Ethernet0/0/2Switch-Ethernet0/0/2Switch-Ethernet0/0/2port link-type trunkport trunk allow-pass vlan 100 101quit2.三層交換機配置<Huawei> system-viewHuawei sysname RouterRouter vlan batch 101Routerinterface gigabitethernet 0/0/1Router-GigabitEthernet0/0/1Router

5、-GigabitEthernet0/0/1Router-GigabitEthernet0/0/1 Router interface vlanif 101port link-type trunkport trunk allow-pass vlan 101quitRouter-Vlanif101ip address 10.23.101.2 24Router-Vlanif101quit3 .配置AC與其它網絡設備互通<AC6605> system-viewAC6605 sysname ACAC vlan batch 100 101AC interface gigabitethernet

6、0/0/1AC-GigabitEthernet0/0/1port link-type trunkAC-GigabitEthernet0/0/1port trunk allow-pass vlan100 101AC-GigabitEthernet0/0/1quitAC interface gigabitethernet 0/0/2AC-GigabitEthernet0/0/2port link-type trunkAC-GigabitEthernet0/0/2port trunk allow-pass vlan101AC-GigabitEthernet0/0/2quit4 .在AC上配置DHC用

7、艮務器為STA和AP分配IP地址AC dhcp enableAC interface vlanif 100AC-Vlanif100ip address 10.23.100.124AC-Vlanif100dhcp select interfaceAC-Vlanif100quitAC interface vlanif 101AC-Vlanif101ip address 10.23.101.124AC-Vlanif101dhcp select interfaceAC-Vlanif101quit5 .在AC上配置AP上線#創建AP組，用于將相同配置的AP都加入同一 AP組中。AC wlan AC-wl

8、an-view ap-group name ap-group1 AC-wlan-ap-group-ap-group1 quit#創建域管理模板，在域管理模板下配置AC的國家碼并在 AP組下引用域管理模板。AC-wlan-viewregulatory-domain-profile name defaultAC-wlan-regulate-domain-defaultcountry-code cnAC-wlan-regulate-domain-defaultquitAC-wlan-viewap-group name ap-group1AC-wlan-ap-group-ap-group1 regul

9、atory-domain-profile defaultWarning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continu e?Y/N: y AC-wlan-ap-group-ap-group1 quit AC-wlan-view quit #配置AC的源接口。AC capwap source interface vlanif 1006 .查看ap的mac地址做好記錄以備用，并為ap設置部署名稱例如

10、 area_1僮耳鼻巴:AP5030DN勺射頻0為2.4GHz射頻,7 . AP具有射頻0和射頻1兩個射頻。例如 為5GHz射頻。AC wlanAC-wlan-view ap auth-mode mac-authAC-wlan-view ap-id 0 ap-mac 60de-4476-e360AC-wlan-ap-0ap-name area_1AC-wlan-ap-0ap-group ap-group1Warning: This operation may cause AP reset. If the country code changes, it will clear channel,

11、power and antenna gain configuration s of the radio, Whether to continue? Y/N:yAC-wlan-ap-0 quit8 .保證AP上電并與AC連接，當執行命令 display ap all查看到AP的"State”字段為“nor”時，表示 AP正常上線。AC-wlan-viewdisplay ap allTotal AP information: nor : normal1ID MAC Name Group IP Type State STAUptime0 00e0-fcfe-1e60 area_1 ap-g

12、roup1 10.23.100.106 AP5030DNnor 010STotal: 19 .配置 WLAMk務參數，配置 WPA-WPA2+PSK+AE全策略，密碼為“ a1234567'AC-wlan-sec-prof-wlan-netAC-wlan-view security-profile name wlan-netsecurity wpa-wpa2 psk pass-phrase a1234567 aes AC-wlan-sec-prof-wlan-net quit#創建名為“wlan - net”的SSID模板，并配置 SSID名稱為“ wlan - net”。AC-wla

13、n-view ssid-profile name wlan-netAC-wlan-ssid-prof-wlan-netssid wlan-netAC-wlan-ssid-prof-wlan-netquit#創建名為“wlan - net”的VAP模板，配置業務數據轉發模式、業務 VLAN并且引 用安全模板和SSID模板。AC-wlan-view vap-profile name wlan-netAC-wlan-vap-prof-wlan-netAC-wlan-vap-prof-wlan-netAC-wlan-vap-prof-wlan-netforward-mode direct-forwar

14、dservice-vlan vlan-id 101 security-profile wlan-netssid-profile wlan-netAC-wlan-vap-prof-wlan-net AC-wlan-vap-prof-wlan-net quit#配置AP組引用VAP模板，AP上射頻0和射頻1者B使用VAP模板“wlan-net”的配 置。AC-wlan-view ap-group name ap-group1AC-wlan-ap-group-ap-group1 vap-profile wlan-net wlan 1 radio 0AC-wlan-ap-group-ap-groupI

15、vap-profile wlan-net wlan 1 radio 1AC-wlan-ap-group-ap-groupIquit10 .配置AP射頻的信道和功率，關閉射頻的信道和功率自動調優功能。射頻的信道和功率自動調優功能默認開啟，如果不關閉此功能則會導致手動配置不生效。AC-wlan-view rrm-profile name defaultAC-wlan-rrm-prof-defaultcalibrateauto-channel-select disableAC-wlan-rrm-prof-defaultcalibrateauto-txpower-select disableAC-wl

16、an-rrm-prof-defaultquit#配置AP射頻0的信道和功率。AC-wlan-viewap-id 0AC-wlan-ap-0radio 0AC-wlan-radio-0/0 channel 20mhz 6Warning: This action may cause service interruption.Continue?Y/NyAC-wlan-radio-0/0 eirp 127AC-wlan-radio-0/0 quit#配置AP射頻1的信道和功率。AC-wlan-ap-0radio 1AC-wlan-radio-0/1 channel 20mhz 149Warning:

17、This action may cause service interruption.Continue?Y/NyAC-wlan-radio-0/1 eirp 127AC-wlan-radio-0/1 quitAC-wlan-ap-0quit11 .驗證配置結果，WLANk務配置會自動下發給AP,配置完成后，通過執行命令displayvap ssid wlan-net查看如下信息，當"Status ”項顯示為"ON時，表示AP對應的射頻上的VAP已創建成功。12 . STA搜索到名為“wlan -net”的無線網絡，輸入密碼“ a1234567'并正常關聯后，在AC上

18、執行display station ssid wlan-net 命令，可以查看到用戶已經接入到 無線網絡"wlan - net”中。AC-wlu-v±ew dj.9 atAtron ssld vl&n-net Rf/WLAK: Radio ID/WLRN ID Rx/Tx: link rectivt race/link cransniir race (Mbpa)STA KAC ddr»aAP ID Ap tl&im Rf/WLAN Band Type Rx/TkRSSI VLAN IP aS4fl9-18Sd-Sef< 0 3.101.253azea 10/1-7-1D115G： 0在STA3上做如下操作:陳包工且ip* ft(西4v*p?JXSSID加如試1梆M MACliifl酎盤E3m wln-nttNULL,朱建福00£0農代IE融&am