华为ENSP无线小案例

news/2024/12/29 17:18:32/

AR1为运营商网络，AR2为边界路由器，一台核心交换机，一台AC控制器外加3台AP设备，拓扑图如下

AR1[AR1]interface GigabitEthernet 0/0/1 进入接口1[AR1-GigabitEthernet0/0/1]ip address 114.114.114.114 24 创建IP地址[AR1]ip route-static 0.0.0.0 0.0.0.0 114.114.114.1 添加一条去内网的静态路由AR2[AR2]interface GigabitEthernet 0/0/1 进入接口1[AR2-GigabitEthernet0/0/1]ip address 114.114.114.1 24 配置IP地址[AR2]dhcp enable  开启dhcp服务[AR2]interface GigabitEthernet 0/0/0 进入接口0[AR2-GigabitEthernet0/0/0]ip address 192.168.80.1 24 配置IP地址[AR2-GigabitEthernet0/0/0]dhcp  select interface  配置基于接口自动获取IP地址[AR2]ip route-static 0.0.0.0 0.0.0.0 114.114.114.114 添加一条去外网的静态路由核心交换机设置[core]Vlan 2 创建vlan 2[core]interface Vlanif  2 进入vlan 2[core-Vlanif2]ip address 192.168.80.2 24 设置一个IP地址[core]ip route-static 0.0.0.0 0.0.0.0 192.168.80.1 创建一条静态路由下一条指向出口路由器[core]interface GigabitEthernet 0/0/4 进入接口4[core-GigabitEthernet0/0/4]port link-type  access  设置模式为access[core-GigabitEthernet0/0/4]port default  vlan 2 将接口加入vlan2同理交换机与AC接口一样[core]interface GigabitEthernet 0/0/5 进入接口5[core-GigabitEthernet0/0/5]port link-type  access  设置模式为access[core-GigabitEthernet0/0/5]port default  vlan 2 将接口加入vlan2将AP与交换机的线设置为trunk[core]interface GigabitEthernet 0/0/1 进入接口1 [core-GigabitEthernet0/0/1]port link-type  trunk 设置模式为trunk[core-GigabitEthernet0/0/1]port trunk pvid vlan 2 将接口标签设置为vlan2[core-GigabitEthernet0/0/1]port trunk allow-pass vlan  all  允许所有vlan通过接口2接口3同接口1一样配置配置AC[AC]Vlan 2 创建vlan 2[AC]interface Vlanif  2 进入vlan 2[AC-Vlanif2]ip address 192.168.80.3 24 设置一个IP地址[AC]ip route-static 0.0.0.0 0.0.0.0 192.168.80.2 创建一条静态路由下一条指向出口路由器[AC]interface GigabitEthernet 0/0/1 进入接口1[AC-GigabitEthernet0/0/1]port link-type  access  设置模式为access[AC-GigabitEthernet0/0/1]port default  vlan 2 将接口加入vlan2[AC]capwap source  interface Vlanif 2 基于vlan 2上线[AC]wlan 开始配置[AC-wlan-view]ap auth-mode no-auth  设置认证方式为不认证[AC-wlan-view]ssid-profile name office 创建一个名为office的SSID组[AC-wlan-ssid-prof-office]ssid WIFI 创建SSID名称[AC-wlan-view]security-profile name office 创建名为office的密码组[AC-wlan-sec-prof-office]security  wpa2 psk pass-phrase 88888888 aes 加密方式为WPA2密码为88888888[AC-wlan-view]vap-profile name office 创建一个关联组[AC-wlan-vap-prof-office]ssid-profile office 关联SSID模板[AC-wlan-vap-prof-office]security-profile office 关联密码模板[AC-wlan-vap-prof-office]service-vlan vlan-id 2 基于vlan2分配地址[AC-wlan-view]ap-group name default 进入默认组[AC-wlan-ap-group-default]vap-profile office wlan 1 radio all 将这个office启用，启用2.4与5G以上就是配置步骤

结果：