WLAN三层组网实验解析

转载请注明以下内容：

来源：公众号【网络技术干货圈】

作者：圈圈

ID：wljsghq

最简单的WLAN三层组网实验

1、拓扑图

2、组网配置

SW1配置：

[SW1]vlanbatch10101102
//放行VLAN
[SW1]interfaceGigabitEthernet0/0/1
[SW1-GigabitEthernet0/0/1]portlink-typetrunk
[SW1-GigabitEthernet0/0/1]porttrunkpvidvlan100
[SW1-GigabitEthernet0/0/1]porttrunkallow-passvlan100to101
//放行VLAN
[SW1]interfaceGigabitEthernet0/0/2
[SW1-GigabitEthernet0/0/2]portlink-typetrunk
[SW1-GigabitEthernet0/0/2]porttrunkallow-passvlan10101
//配置网关
[SW1]interfaceVlanif10
[SW1-Vlanif10]ipaddress192.168.13.1255.255.255.0

[SW1]interfaceVlanif100
[SW1-Vlanif100]ipaddress192.168.100.254255.255.255.0
[SW1-Vlanif100]dhcpselectinterface
[SW1-Vlanif100]dhcpserveroption43sub-option2ip-address192.168.13.2

[SW1]interfaceVlanif101
[SW1-Vlanif101]ipaddress192.168.101.254255.255.255.0
[SW1-Vlanif101]dhcpselectinterface

查看SW1中mac地址

00e0-fc4e-5810是AP的mac地址后面有用

[SW1]dismac-address
MACaddresstableofslot0:
-------------------------------------------------------------------------------
MACAddressVLAN/PEVLANCEVLANPortTypeLSP/LSR-ID
VSI/SIMAC-Tunnel
-------------------------------------------------------------------------------
00e0-fc63-169810--GE0/0/2dynamic0/-
00e0-fc4e-5810100--GE0/0/1dynamic0/-
-------------------------------------------------------------------------------
Totalmatchingitemsonslot0displayed=2

AC1配置

[AC]vlanbatch10101

//放行VLAN
[AC]interfaceGigabitEthernet0/0/1
[AC-GigabitEthernet0/0/1]portlink-typetrunk
[AC-GigabitEthernet0/0/1]porttrunkallow-passvlan10101

//配置IP地址
[AC]interfaceVlanif10
[AC-Vlanif10]ipaddress192.168.13.2255.255.255.0
[AC]capwapsourceip-address192.168.13.2

//配置默认路由使AP与AC互通
[AC]iproute-static192.168.100.024192.168.13.1

//配置AP上线
[AC]wlan
[AC-wlan-view]ap-id0ap-mac00e0-fc63-1698

查看ap是否以及上线

0 00e0-fc4e-5810 00e0-fc4e-5810 default 192.168.100.253 AP2050DN nor
0 14S

这里为nor即为已上线

[AC]disapall
Info:Thisoperationmaytakeafewseconds.Pleasewaitforamoment.done.
TotalAPinformation:
nor:normal[1]
--------------------------------------------------------------------------------
----------------------
IDMACNameGroupIPTypeState
STAUptime
--------------------------------------------------------------------------------
----------------------
000e0-fc4e-581000e0-fc4e-5810default192.168.100.253AP2050DNnor
014S
--------------------------------------------------------------------------------
----------------------
Total:1

AC模板配置

[AC]wlan
[AC-wlan-view]ssid-profilenameljr//ljr为自定义名字
[AC-wlan-ssid-prof-ljr]ssidlinjianrong//linjianrong可以理解为WiFi的名字
[AC-wlan-ssid-prof-ljr]q

[AC-wlan-view]security-profilenameljr//ljr为自定义名字
[AC-wlan-sec-prof-ljr]securitywpa2pskpass-phrase2018060301324tkip
Warning:Thecurrentpasswordistoosimple.Forthesakeofsecurity,youarea
dvisedtosetapasswordcontainingatleasttwoofthefollowing:lowercaselet
tersatoz,uppercaselettersAtoZ,digits,andspecialcharacters.Continue?
[Y/N]:y
Warning:Ifthewmmdisablecommand,TKIP,WEP,orradiotypeof802.11a/b/gis
configured,thefunctionofdenyingaccessoflegacySTAscannottakeeffect.
这里的2018060301324为密码
[AC-wlan-sec-prof-ljr]q

[AC-wlan-view]vap-profilenameljr
[AC-wlan-vap-prof-ljr]forward-modedirect-forward//direct-forward为直接转发模式
[AC-wlan-vap-prof-ljr]service-vlanvlan-id101//管理的vlan，即ap下面管理的PC
[AC-wlan-vap-prof-ljr]ssid-profileljr//ssid模块
[AC-wlan-vap-prof-ljr]security-profileljr//安全模块

[AC-wlan-view]ap-groupnamedefault
[AC-wlan-ap-group-default]vap-profileljrwlan1radioall
Info:Thisoperationmaytakeafewseconds,pleasewait...done.

上面的敲完后会出现下面的情况

双击1、2，输入密码2018060301324，点击确定完成连接

可以看到已经连上了

双击STA1，在命令行输入ipconfig查看是否已经获取IP地址

到此为止，整个实验完成。

3、总结：

（1）在ENSP中观察不到AP上线可能需要重启AP；

（2）AP与192.168.13.2IP地址需要互通，AP才可能上线；