配置思路

 拓扑图

SW

[Huawei]int g0/0/1 [Huawei-GigabitEthernet0/0/1]port link-type trunk [Huawei-GigabitEthernet0/0/1] port trunk  allow-pass vlan  10 20 30 100

[Huawei-GigabitEthernet0/0/2]port link-type trunk [Huawei-GigabitEthernet0/0/2]port trunk pvid 100 [Huawei-GigabitEthernet0/0/2]port trunk  allow-pass vlan  10 20 30 100

[Huawei-GigabitEthernet0/0/3]port link-type trunk [Huawei-GigabitEthernet0/0/3]port trunk pvid 100  //设置Trunk 端口的缺省VLAN ID [Huawei-GigabitEthernet0/0/3] port trunk  allow-pass vlan  10 20 30 100

[Huawei-GigabitEthernet0/0/4]port link-type trunk [Huawei-GigabitEthernet0/0/4]port trunk pvid 100  [Huawei-GigabitEthernet0/0/4] port trunk  allow-pass vlan  10 20 30 100

AC

[AC6005]vlan batch  10 20 30 100  [AC6005]dhcp enable  //开启交换机的DHCP服务

[AC6005]int g0/0/1 [AC6005-GigabitEthernet0/0/1]port link-type trunk [AC6005-GigabitEthernet0/0/1]port trunk  allow-pass vlan all 

[AC6005]int Vlanif 100 [AC6005-Vlanif100]ip address 192.168.100.1 24  //管理地址 [AC6005-Vlanif100]dhcp select interface //开启接口采用接口地址池的DHCP Server功能 [AC6005-Vlanif100]dhcp server dns-list 114.114.114.114 8.8.8.8  //dhcp的DNS服务器地址

[AC6005]int Vlanif 10 [AC6005-Vlanif10]ip address 192.168.10.1 24 [AC6005-Vlanif10]dhcp select interface  [AC6005-Vlanif10]dhcp server dns-list 114.114.114.144 8.8.8.8

[AC6005]int Vlanif 20 [AC6005-Vlanif20]ip address 192.168.20.1 24 [AC6005-Vlanif20]dhcp select interface [AC6005-Vlanif20]dhcp server  dns-list 114.114.114.114 8.8.8.8

[AC6005]int Vlanif 30 [AC6005-Vlanif30]ip address 192.168.30.1 24 [AC6005-Vlanif30]dhcp select interface [AC6005-Vlanif30]dhcp server dns-list 114.114.114.114 8.8.8.8

[AC6005]capwap source interface Vlanif 100  //配置源接口地址,用来建立CAPWAP隧道

[AC6005]wlan  [AC6005-wlan-view]regulatory-domain-profile name 1 //创域管理模板 name 为 1 [AC6005-wlan-regulate-domain-1]country-code CN //国家代码 [AC6005-wlan-view]ssid-profile name 1  //创ssid模板 name为1 [AC6005-wlan-ssid-prof-1]ssid office-ssid  //ssid名称为1 [AC6005-wlan-view]security-profile name 1   //创安全策略模板 name为1 [AC6005-wlan-sec-prof-1]security wpa-wpa2 psk pass-phrase 12345678 aes  //加密方式、密码

[AC6005-wlan-view]vap-profile name 1  //创VAP模板 name为 1 [AC6005-wlan-vap-prof-1]forward-mode direct-forward  //直接转发模式 [AC6005-wlan-vap-prof-1]security-profile 1  //绑定安全策略模板 [AC6005-wlan-vap-prof-1]ssid-profile 1   //绑定ssid模板 [AC6005-wlan-vap-prof-1]service-vlan vlan-id 10 //绑定业务VLAN 服务ID 10

 [AC6005-wlan-view]vap-profile name 2  //创VAP模板 name为 2 [AC6005-wlan-vap-prof-2]forward-mode direct-forward [AC6005-wlan-vap-prof-2]ssid-profile 1 [AC6005-wlan-vap-prof-2]security-profile 1   [AC6005-wlan-vap-prof-2]service-vlan vlan-id 20  //绑定业务VLAN 服务ID 20

[AC6005-wlan-view]vap-profile name 3  //创VAP模板 name为 2 [AC6005-wlan-vap-prof-3]forward-mode direct-forward  [AC6005-wlan-vap-prof-3]security-profile 1 [AC6005-wlan-vap-prof-3]ssid-profile 1 [AC6005-wlan-vap-prof-3]service-vlan vlan-id 30 //绑定业务VLAN 服务ID 30

[AC6005-wlan-view]ap-group name 1 //创建AP组， name为1 [AC6005-wlan-ap-group-1]regulatory-domain-profile 1  // 引用域管理模板 [AC6005-wlan-ap-group-1]vap-profile 1 wlan 1 radio  0  // AP射频0和1使用VAP 1 模板 [AC6005-wlan-ap-group-1]vap-profile 1 wlan 1 radio 1

[AC6005-wlan-view]ap-group name 2  //创建AP组， name为2 [AC6005-wlan-ap-group-2]regulatory-domain-profile 1 [AC6005-wlan-ap-group-2]vap-profile 2 wlan 2 radio 0 [AC6005-wlan-ap-group-2]vap-profile 2 wlan 2 radio 1

[AC6005-wlan-view]ap-group name  3 [AC6005-wlan-ap-group-3]vap-profile 3 wlan 3 radio 0 [AC6005-wlan-ap-group-3]vap-profile 3 wlan 3 radio 1

[AC6005-wlan-view]ap-id  1 ap-mac  00e0-fcff-5e60   //设ap-id为1 ，系统视图执行dis  ap all  查看AP的mac地址后复制添加 [AC6005-wlan-ap-1]ap-name AP1  //AP命名为AP1 [AC6005-wlan-ap-1]ap-group 1 //加入AP组

[AC6005-wlan-view]ap-id 2 ap-mac 00e0-fcf1-6b80 [AC6005-wlan-ap-2]ap-name AP2 [AC6005-wlan-ap-2]ap-group 2

[AC6005-wlan-view]ap-id 3 ap-mac  00e0-fcc9-3470 [AC6005-wlan-ap-3]ap-name AP3 [AC6005-wlan-ap-3]ap-group 3  

选择一个连接，输入密码：12345678  获取TSA地址

 把STA移动到AP2

 把STA移动到AP3