AC vlan的创建
管理 vlan:vlan1:192.168.1.100
业务 vlan:vlan10:192.168.10.100
[AC6005]vlan 1 //创建vlan1 [AC6005-vlan1]q [AC6005]vlan 10 //创建vlan10 [AC6005-vlan10] [AC6005]int vlan 1 //进入vlan1 [AC6005-Vlanif1]ip address 192.168.1.100 24 //为vlan1配置ip地址 [AC6005-Vlanif1]q [AC6005]int vlan 10 //进入vlan10 [AC6005-Vlanif10]ip address 192.168.10.100 24 //为vlan10配置ip地址
将 连接 ap 的口上设为 trunk 接口，再 trunk 接口上允许所有的 vlan 通过
[AC6005]port-group 1 //创建一个组 [AC6005-port-group-1]group-member g0/0/1 to g0/0/4 //把连接AC的接口，放到这个组中 [AC6005-port-group-1]port link-type trunk //把这个组中的接口配置trunk链路 [AC6005-GigabitEthernet0/0/1]port link-type trunk [AC6005-GigabitEthernet0/0/2]port link-type trunk [AC6005-GigabitEthernet0/0/3]port link-type trunk [AC6005-GigabitEthernet0/0/4]port link-type trunk [AC6005-port-group-1]port trunk allow-pass vlan all ///允许所有的vlan通过 [AC6005-GigabitEthernet0/0/1]port trunk allow-pass vlan all [AC6005-GigabitEthernet0/0/2]port trunk allow-pass vlan all [AC6005-GigabitEthernet0/0/3]port trunk allow-pass vlan all [AC6005-GigabitEthernet0/0/4]port trunk allow-pass vlan all
设计无线终端和 ap 的 dhcp 服务
[AC6005]dhcp enable //开启DHCP功能 [AC6005]ip pool vlan_1 //创建地址池 [AC6005-ip-pool-vlan_1]network 192.168.1.0 mask 24 //创建地址的网段 [AC6005-ip-pool-vlan_1]gateway-list 192.168.1.100 //地址池的网关 [AC6005-ip-pool-vlan_1]int vlan 1 //进入 vlan1 [AC6005-Vlanif1]dhcp select global //选择DHCP全局 [AC6005]ip pool vlan_10 //创建地址池 [AC6005-ip-pool-vlan_10]network 192.168.10.0 mask 24 //创建地址的网段 [AC6005-ip-pool-vlan_10]gateway-list 192.168.10.100 //地址池的网关 [AC6005]int vlan 10 //进入 vlan1 [AC6005-Vlanif10]dhcp select global //选择DHCP全局
上线AP
[AC6005]capwap source int vlan 1 //设置vlan1为管理下发接口 [AC6005]wlan 进入到wlan [AC6005-wlan-view]ap-group name ap-1 //设置一个AP组 [AC6005-wlan-ap-group-ap-1]ap-id 0 ap-mac 00e0-fcd0-31f0 //把AP添加到AP组中，（每个AP只有一个mac地址，所以添加mac地址） [AC6005-wlan-ap-0]ap-name area0 //给AP设置一个名称 [AC6005-wlan-ap-0]ap-group ap-1 把此AP添加到AP组中 Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configurations of the radio, Whether to c ontinue? [Y/N]:y //是否要执行此操作 YES:是 NO：否 [AC6005-wlan-ap-0]ap-id 1 ap-mac 00e0-fc90-09a0 //把AP添加到AP组中 [AC6005-wlan-ap-1]ap-name area1 //给AP设置一个名称 [AC6005-wlan-ap-1]ap-group ap-1 把此AP添加到AP组中 Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configurations of the radio, Whether to c ontinue? [Y/N]:y [AC6005-wlan-ap-1]ap-id 2 ap-mac 00e0-fc4b-0180 //把AP添加到AP组中 [AC6005-wlan-ap-2]ap-name area2 //给AP设置一个名称 [AC6005-wlan-ap-2]ap-group ap-1 把此AP添加到AP组中 Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configurations of the radio, Whether to c ontinue? [Y/N]:y [AC6005-wlan-ap-2]ap-id 3 ap-mac 00e0-fc6e-4420 //把AP添加到AP组中 [AC6005-wlan-ap-3]ap-name area3 //给AP设置一个名称 [AC6005-wlan-ap-3]ap-group ap-1 把此AP添加到AP组中 Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configurations of the radio, Whether to c ontinue? [Y/N]:y [AC6005-wlan-view]dis ap all nor : normal [4] -------------------------------------------------------------------------------- --------- ID MAC Name Group IP Type State STA Uptime -------------------------------------------------------------------------------- --------- 0 00e0-fcd0-31f0 area0 ap-1 192.168.1.58 AP2050DN nor 0 8M:10S 1 00e0-fc90-09a0 area1 ap-1 192.168.1.183 AP2050DN nor 0 3M:52S 2 00e0-fc4b-0180 area2 ap-1 192.168.1.206 AP2050DN nor 0 2M:18S 3 00e0-fc6e-4420 area3 ap-1 192.168.1.191 AP2050DN nor 0 45S -------------------------------------------------------------------------------- --------- Total: 4 出现nor代表成功
在 AC 上进行模板配置，并下发给 AP
[AC6005-wlan-view]security-profile name lu ///配置安全模板的名称 [AC6005-wlan-sec-prof-lu]security wpa2 psk pass-phrase a1234567 aes //设置安全密码 [AC6005-wlan-view]ssid-profile name xn //配置SSID模板的名称 [AC6005-wlan-ssid-prof-xn]ssid LCGJCJ SSID的名称 [AC6005-wlan-view]vap-profile name fw //配置vap模板的名称 [AC6005-wlan-vap-prof-fw]security-profilel lu //把安全模板放入到vap模板 [AC6005-wlan-vap-prof-fw]ssid-profile xn //把ssid模板放入到vap模板 [AC6005-wlan-vap-prof-fw]forward-mode tunnel //设置转发模式 [AC6005-wlan-vap-prof-fw]service-vlan vlan-id 10 //设置业务vlan为vlan10 [AC6005-wlan-view]ap-group name ap-1 ///进入到group组中 [AC6005-wlan-ap-group-ap-1]vap-profile fw wlan 1 radio all /// 将该 VAP 模板应用到所有射频接口上
配置完成，如图所示，这样就可以连网使用了
标签：AC6005,AC,eNSP,AP,vlan,group,ap,wlan From： https://www.cnblogs.com/xiaofei-/p/16906776.html