AC6005基础配置
本次实验模拟华为AC6005的基本配置
Tip
- display interface GigabitEthernet 0/0/0
查看ap接口mac
前提条件：Vlan10为业务网段，vlan100为管理网段，5700作为dhcp。
5700配置如下
<Huawei>sy
[Huawei]sys 5700 //设备命名5700
[5700]
[5700]vlan batch 10 100 //批量创建vlan 10 100
[5700]dhcp enable //使能dhcp
[5700]int vlan 10 //配置vlan10
[5700-Vlanif10]ip add 192.168.10.254 24 //配置vlan10 IP地址
[5700-Vlanif10]dhcp select interface //开启DHCP，接口ip作为网关ip
[5700-Vlanif10]q
[5700]int vlan 100
[5700-Vlanif100]ip add 192.168.100.1 24 //配置vlan100 IP地址
[5700-Vlanif100]dhcp select interface //开启DHCP，接口ip作为网关ip
[5700-Vlanif100]q
[5700]int g0/0/1
[5700-GigabitEthernet0/0/1]port link-type trunk //配置端口trunk模式
[5700-GigabitEthernet0/0/1]p t a v 10 100 //放行vlan10 vlan100
[5700-GigabitEthernet0/0/1]int g0/0/2
[5700-GigabitEthernet0/0/2]port link-type trunk
[5700-GigabitEthernet0/0/2]p t a v 100
3500配置如下
<Huawei>sy
[Huawei]sys 3500
[3500]vlan batch 10 100
[3500]int eth0/0/1
[3500-Ethernet0/0/1]port link-type trunk
[3500-Ethernet0/0/1]port trunk allow-pass vlan 10 100
[3500-Ethernet0/0/1]int eth0/0/2
[3500-Ethernet0/0/2]p l t
[3500-Ethernet0/0/2]p t a v 10 100
[3500-Ethernet0/0/2]port trunk pvid vlan 100 //配置连接AP端口的pvid为vlan20，用于管理ap通信
[3500-Ethernet0/0/2]int eth0/0/3
[3500-Ethernet0/0/3]p l t
[3500-Ethernet0/0/3]p t a v 10 100
[3500-Ethernet0/0/3]port trunk pvid vlan 100 //配置连接AP端口的pvid为vlan20，用于管理ap通信
AC配置如下：
<AC6005>sy
[AC6005]vlan 100 //创建vlan100
[AC6005-vlan100]q
[AC6005]int vlan 100
[AC6005-Vlanif100]ip add 192.168.100.2 24 //配置vlan100虚拟ip，
[AC6005-Vlanif100]q
[AC6005]int g0/0/1
[AC6005-GigabitEthernet0/0/1]p l t //配置端口trunk模式
[AC6005-GigabitEthernet0/0/1]p t a v 100 //端口放行vlan100
[AC6005-GigabitEthernet0/0/1]q[AC6005]capwap source interface Vlanif 100 //建立ac与ap间的管理通信通道，走vlan20.[AC6005]wlan 配置ac，WLAN无线配置
[AC6005-wlan-view]ssid-profile name test1 //创建ssid模板，模板命名test1
[AC6005-wlan-ssid-prof-test1]ssid testwifi //ssid 命名testwifi
[AC6005-wlan-ssid-prof-test1]q[AC6005-wlan-view]security-profile name test1 //创建安全模板， 模板命名test1
[AC6005-wlan-sec-prof-test1]security wpa2 psk pass-phrase 123456789 aes 密码设置：123456789
Warning: The current password is too simple. For the sake of security, you are a
dvised to set a password containing at least two of the following: lowercase let
ters a to z, uppercase letters A to Z, digits, and special characters. Continue?[Y/N]:y[AC6005-wlan-view]vap-profile name test1 //创建vap信号模板，模板名字test1
[AC6005-wlan-vap-prof-test1]service-vlan vlan-id 10 //vap模板服务vlan为vlan10
[AC6005-wlan-vap-prof-test1]ssid-profile test1 //调用名为test1的ssid模板
[AC6005-wlan-vap-prof-test1]security-profile test1 //调用名为test1的安全模板
[AC6005-wlan-vap-prof-test1]q[AC6005-wlan-view]ap-group name test1 //创建ap组，命名test1
[AC6005-wlan-ap-group-test1]
[AC6005-wlan-ap-group-test1]vap-profile test1 wlan 1 radio all //调用名为test1的vap模板，引用wlan1，radio all（2.4和5G频段全选）
[AC6005-wlan-ap-group-test1]q[AC6005-wlan-view]ap-id 1 ap-mac 00e0-fc4a-3470 //定义ap id 绑定ap mac地址
[AC6005-wlan-ap-1]ap-name ap1 //ap命名
[AC6005-wlan-ap-1]ap-group test1 //ap加入上边建立的ap组
Warning: This operation may cause AP reset. If the country code changes, it willclear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y[AC6005-wlan-view]ap-id 2 ap-mac 00e0-fc69-1840
[AC6005-wlan-ap-2]ap-name ap2
[AC6005-wlan-ap-2]ap-group test1
Warning: This operation may cause AP reset. If the country code changes, it willclear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
测试如下图正常连接wifi
