ensp WLAN二层零漫游WLAN漫游漫游目的中小型企业WLAN漫游模拟结果演示总结

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
SW]display current-configuration 
#
sysname SW
#
undo info-center enable//禁止回显信息
#
vlan batch 100 to 101 200 300
#
cluster enable
ntdp enable
ndp enable
#
drop illegal-mac alarm
#
dhcp enable
#
diffserv domain default
#
drop-profile default
#
ip pool ap
 gateway-list 10.1.100.254
 network 10.1.100.0 mask 255.255.255.0
 dns-list 114.114.114.114
 option 43 sub-option 2 ip-address 10.1.200.1
#
ip pool sta
 gateway-list 10.1.101.254
 network 10.1.101.0 mask 255.255.255.0
 dns-list 114.114.114.114
#
aaa
 authentication-scheme default
 authorization-scheme default
 accounting-scheme default
 domain default
 domain default_admin
 local-user admin password simple admin
 local-user admin service-type http
#
interface Vlanif1
#
interface Vlanif100
 ip address 10.1.100.254 255.255.255.0
 dhcp select global
#
interface Vlanif101
 ip address 10.1.101.254 255.255.255.0
 dhcp select global
#
interface Vlanif200
 ip address 10.1.200.2 255.255.255.0
#
interface Vlanif300
 ip address 172.16.0.2 255.255.255.0
#
interface MEth0/0/1
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk pvid vlan 100
 port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/3
 port link-type trunk
 port trunk pvid vlan 100
 port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/4
 port link-type access
 port default vlan 300
#

#
interface NULL0
#
ip route-static 0.0.0.0 0.0.0.0 172.16.0.1
#
user-interface con 0
user-interface vty 0 4
#
return

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

AC 配置

[AC-wlan-view]security-profile name flow-wlan  ///配置安全模板的名称
[AC-wlan-sec-prof-flow-wlan]security wpa2 psk pass-phrase a1234567 aes   //设置安全密码
[AC-wlan-view]ssid-profile name flow-wlan  //配置SSID模板的名称
[AC-wlan-ssid-prof-flow-wlan]ssid ltl   SSID的名称
[AC-wlan-view]vap-profile name flow-wlan   //配置vap模板的名称
[AC-wlan-vap-prof-flow-wlan]security-profilel flow-wlan  //把安全模板放入到vap模板
[AC-wlan-vap-prof-flow-wlan]ssid-profile flow-wlan    //把ssid模板放入到vap模板
[AC-wlan-vap-prof-flow-wlan]forward-mode direct-forward     //设置转发模式
[AC-wlan-vap-prof-flow-wlan]service-vlan vlan-id 101  //设置业务vlan为vlan101
[AC-wlan-view]ap-group name flow   ///进入到group组中
[AC-wlan-ap-group-ap-1]vap-profile flow-wlan wlan 1 radio all   /// 将该 VAP 模板应用到所有射频接口上


[AC-wlan-vap-prof-flow-wlan]disp this
#
  service-vlan vlan-id 101
  ssid-profile flow-wlan
  security-profile flow-wlan
#
return



[AC]capwap source int vlan 200   //设置vlan1为管理下发接口
[AC]wlan  进入到wlan
[AC-wlan-view]ap auth-mode mac-auth //设置为MAC地址认证
[AC-wlan-view]ap-group name flow //设置一个AP组
[AC-wlan-ap-group-ap-1]ap-id 1 ap-mac  00e0-fc34-6b30    //把AP添加到AP组中，（每个AP只有一个mac地址，所以添加mac地址）
[AC-wlan-ap-0]ap-name f1-ap   //给AP设置一个名称
[AC-wlan-ap-0]ap-group flow    把此AP添加到AP组中
 
Warning: This operation may cause AP reset. If the country code changes, it will
 clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y    //是否要执行此操作  YES:是   NO：否
[AC-wlan-ap-0]ap-id 2 ap-mac  00e0-fc8b-03d0    //把AP添加到AP组中
[AC-wlan-ap-1]ap-name flow-ap2  //给AP设置一个名称
[AC-wlan-ap-1]ap-group flow    把此AP添加到AP组中

1
2
3
4
5
6
7
8
int loopback0
ip add 1.1.1.1 24
q
int g0/0/0
ip add 172.16.0.1 24
q
ip route-static 10.1.101.0 255.255.255.0 10.1.100.254