组建直连式二层无线局域网

sys
sys R1
un in en

int g0/0/0.101
dot1q termination vid 101 
//表示会对vlan脱离tag进行三层转发。发送报文时也会添加对应vlan tag，这里写VID100 所以发送会带vlan 100 tag

ip add 10.23.101.2 24
arp broadcast enable 
//子接口没有ARP广播功能，这里需要开启arp广播
quit
int lo10
ip add 10.10.10.10 24
quit

dhcp enable

int vlan100
dhcp select interface
quit
int vlan101
dhcp select interface 
dhcp server excluded-ip-address 10.23.101.1 //排除该ip
dhcp server dns-list 10.10.10.10 //应要求指定dns为AR LookBack10
quit

wlan //进行wlan无线局域网配置面板

ap-group name ag1 //定义AP组名：ag1
quit

regulatory-domain-profile name default //缺省情况下,AP组下引用名为default的域管理模板
country-code cn //指定ac国家码中国
quit

ap-group name ag1
regulatory-domain-profile default //这是在ap组中来引用default默认管理模板
quit

[AC]capwap source interface vlanif 100
//配置ac的源接口
wlan
ap auth-mode mac-auth //配置AP认证模式
ap-id 0 ap-mac 00E0-FC84-2220 //每台ap不一样，自己查看
ap-name ar1 //字面意思
ap-group ag1 //加入ag1组
(按 Y 确定)
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration
s of the radio, Whether to continue? [Y/N]:Y

quit

ap-id 1 ap-mac 00E0-FCDE-24D0 //每台ap不一样，自己查看
ap-name ar2
ap-group ag1
(按 Y 确定)
......略...Whether to continue? [Y/N]:Y
quit

[AC-wlan-view]**display ap all**

Info: This operation may take a few seconds. Please wait for a moment.done.

Total AP information:

nor : normal     [2]

\---------------------------------------------------------

ID  MAC      Name  Group   IP      Type      State STA Upt

ime

\--------------------------------------------------------------------------------------------------

0  00e0-fc4f-3de0 area_1 ap-group1 10.23.100.239 AP5030DN    nor  1  1H:10M:48S

1  00e0-fc3e-2040 area_2 ap-group1 10.23.100.6  AP5030DN    nor  1  1H:10M:39S

\----------------------------------------------------------------------

//配置安全策略，使用认证方式为WPA-WPA2+PSK+AES，密码为“a1234567”
[AC]wlan
[AC-wlan-view]security-profile name wlan-net
[AC-wlan-sec-prof-wlan-net]security wpa-wpa2 psk pass-phrase a1234567 aes
[AC-wlan-sec-prof-wlan-net]quit

//创建名字为wlan-net的ssid模板，sta扫描到的就是ssid名称
[AC-wlan-view]ssid-profile name wlan-net
[AC-wlan-ssid-prof-wlan-net]ssid wlan-net
[AC-wlan-ssid-prof-wlan-net]quit

/创建wlan的VAP模板，配置直接转发模式，业务vlan为101，并引用安全模板 和 ssid模板
[AC-wlan-view]vap-profile name wlan-net
[AC-wlan-vap-prof-wlan-net]forward-mode direct-forward
[AC-wlan-vap-prof-wlan-net]service-vlan vlan-id 101
[AC-wlan-vap-prof-wlan-net]security-profile wlan-net
[AC-wlan-vap-prof-wlan-net]ssid-profile wlan-net
[AC-wlan-vap-prof-wlan-net]quit

//引用VAP模板，在ap上 射频0和1 都使用 vap 模板的 “wlan-net”配置
[AC-wlan-view]ap-group name ap-group1
[AC-wlan-ap-group-ap-group1]vap-profile wlan-net wlan 1 radio 0
[AC-wlan-ap-group-ap-group1]vap-profile wlan-net wlan 1 radio 1
[AC-wlan-ap-group-ap-group1]quit


//配置两个射频，ap射频0 为2.4GHz射频，射频1 为5GHz射频。
//配置AP1 射频0的信道为6，带宽为20MHz，功率为127mw
[AC-wlan-view]ap-id 0
[AC-wlan-ap-0]radio 0
[AC-wlan-radio-0/0]channel 20mhz 6
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC-wlan-radio-0/0]eirp 127
//并配置AP射频1的信道和功率
[AC-wlan-ap-0]radio 1
[AC-wlan-radio-0/1]channel 20mhz 149
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC-wlan-radio-0/1]eirp 127
[AC-wlan-radio-0/1]quit

//配置AP2信道为11，本实验中要求：2.4G AP1的信道为6，AP2的信道为11；5G AP1的信道为149，AP2的信道为153。
[AC-wlan-view]ap-id 1
[AC-wlan-ap-1]radio 0
[AC-wlan-radio-1/0]channel 20mhz 11
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC-wlan-radio-1/0]eirp 127
[AC-wlan-radio-1/0]quit
//并配置AP射频1的信道和功率。
[AC-wlan-ap-1]radio 1
[AC-wlan-radio-1/1]channel 20mhz 153
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC-wlan-radio-1/1]eirp 127
[AC-wlan-radio-1/1]quit