H3C华三配置AC自动上线AP
文章目录
- 一、网络拓扑
- 二、AC配置
- 三、配置自动AP
- 四、S1配置,做地址池和网关
- 五、S3配置,主要放通各类vlan
- 六、接入层交换机:放通各类vlan和为ap端打上管理vlan。
一、网络拓扑
管理vlan100流量路径:ap1——接入交换机——s3——s1——ac
业务vlan200流量路径:ap1——接入交换机——s3——s1——防火墙
(可做vrrp虚拟网关,s1和s2出)
二、AC配置
[AC]dis cur
#version 7.1.064, Alpha 7165
#sysname AC
#dhcp enable
#
vlan 1
#
vlan 100
#
vlan 200
#
dhcp server ip-pool vlan100 #dhcp不一定放ac可以放S1交换机或其他gateway-list 192.168.100.254network 192.168.100.0 mask 255.255.255.0option 43 ip-address 192.168.100.1 #指向ac的IP地址,重要。
#
dhcp server ip-pool vlan200gateway-list 192.168.200.254network 192.168.200.0 mask 255.255.255.0
#
wlan service-template 1 #没配置wifi认证方式,不需要输密码。ssid guli #ap信号名称vlan 200 #获取vlan200的地址池,200.0网段ipservice-template enable
#
interface Vlan-interface100ip address 192.168.100.1 255.255.255.0
#
interface Vlan-interface200ip address 192.168.200.1 255.255.255.0
#
interface GigabitEthernet1/0/1port link-mode bridgeport link-type trunkport trunk permit vlan 1 100 200combo enable fiber
#ip route-static 0.0.0.0 0 192.168.100.254ip route-static 0.0.0.0 0 192.168.200.254
#wlan auto-ap enable #自动ap上线,全部上线后应关闭wlan auto-persistent enable #自动ap固化
#
wlan ap-group group1 #建立ap组,组名为group1,统一管理apvlan 1ap ap1ap ap2ap ap3ap-model WA6320-HCLradio 1 #2.4gradio enableservice-template 1 #使用模版1radio 2 #5Gradio enableservice-template 1gigabitethernet 1
#以下为自动上线及固化的ap不需要配置
wlan ap ap1 model WA6320-HCLserial-id H3C_90-E5-C3-55-18-00vlan 1radio 1radio 2gigabitethernet 1
#
wlan ap ap2 model WA6320-HCLserial-id H3C_90-88-83-B5-13-00vlan 1radio 1radio 2gigabitethernet 1
#
wlan ap ap3 model WA6320-HCLserial-id H3C_90-E5-CF-78-1D-00vlan 1radio 1radio 2gigabitethernet 1
三、配置自动AP
wlan auto-ap enable
wlan auto-persistent enable
- 功能简介
当无线网络中部署的AP数量较多时,开启自动AP功能可以简化配置,即AC上可以不创建手工AP。AP发现没有AC存在手工AP的情况下,会从开启自动AP功能的AC中选择最优AC进行CAPWAP隧道连接。 - 配置限制和指导
建议在需要部署的AP全都接入后关闭自动AP功能,以防止非法AP接入。因此需要将已接入的所有AP固化为手工AP,才能保证AC重启或AP与AC的连接断开并恢复后,AP能够再次接入AC。
只有将自动AP固化为手工AP后,才能对自动AP进行单独配置,否则只能通过AP组进行配置。
搭配使用命令
dis wlan ap all 查看所有ap
wlan rename-ap <原名> <需修改名称> 修改ap名称
查看ap上线情况
[AC]dis wlan ap all
Total number of APs: 3
Total number of connected APs: 3
Total number of connected manual APs: 3
Total number of connected auto APs: 0
Total number of connected common APs: 3
Total number of connected WTUs: 0
Total number of inside APs: 0
Maximum supported APs: 60000
Remaining APs: 59997
Total AP licenses: 60000
Local AP licenses: 60000
Server AP licenses: 0
Remaining local AP licenses: 59997
Sync AP licenses: 0AP informationState : I = Idle, J = Join, JA = JoinAck, IL = ImageLoadC = Config, DC = DataCheck, R = Run, M = Master, B = BackupAP name APID State Model Serial ID
ap1 1 R/M WA6320-HCL H3C_90-E5-C3-55-18-00
ap2 3 R/M WA6320-HCL H3C_90-88-83-B5-13-00
ap3 2 R/M WA6320-HCL H3C_90-E5-CF-78-1D-00
四、S1配置,做地址池和网关
ospf 1 router-id 1.1.1.1area 0.0.0.0network 192.168.70.1 0.0.0.0area 0.0.0.1network 192.168.10.0 0.0.0.255network 192.168.20.0 0.0.0.255network 192.168.100.0 0.0.0.255network 192.168.200.0 0.0.0.255stub
#dhcp enable
#
vlan 1
#
vlan 10
#
vlan 20
#
vlan 30
#
vlan 70
#
vlan 100
#
vlan 200
#
stp region-configuration #mstpregion-name h3crevision-level 1instance 1 vlan 10 20instance 2 vlan 30active region-configuration
#stp instance 1 root primarystp instance 2 root secondarystp global enable#dhcp vlan100和vlan200地址池,AC和这里二选一就可以。
dhcp server ip-pool vlan100gateway-list 192.168.100.254network 192.168.100.0 mask 255.255.255.0option 43 ip-address 192.168.100.1 #指向ac的地址,管理vlna100
#
dhcp server ip-pool vlan200 #业务vlan200,网段200.0gateway-list 192.168.200.254network 192.168.200.0 mask 255.255.255.0
#interface Vlan-interface100ip address 192.168.100.254 255.255.255.0
#
interface Vlan-interface200ip address 192.168.200.254 255.255.255.0
#
interface GigabitEthernet1/0/1port link-mode bridgeport access vlan 70combo enable fiber
#
interface GigabitEthernet1/0/2port link-mode bridgeport link-type trunkport trunk permit vlan allcombo enable fiber
#
interface GigabitEthernet1/0/3port link-mode bridgeport link-type trunkport trunk permit vlan 1 100 200combo enable fiber
#
interface GigabitEthernet1/0/4port link-mode bridgeport link-type trunkport trunk permit vlan allcombo enable fiber
五、S3配置,主要放通各类vlan
#
vlan 1
#
vlan 10
#
vlan 20
#
vlan 30
#
vlan 100
#
vlan 200
#
stp region-configuration #mstpregion-name h3crevision-level 1instance 1 vlan 10 20instance 2 vlan 30active region-configuration
#stp global enableinterface GigabitEthernet1/0/1port link-mode bridgeport link-type trunkundo port trunk permit vlan 1port trunk permit vlan 10 100 200combo enable fiber
#
interface GigabitEthernet1/0/2port link-mode bridgeport link-type trunkundo port trunk permit vlan 1port trunk permit vlan 20 100 200combo enable fiber
#
interface GigabitEthernet1/0/3port link-mode bridgeport link-type trunkport trunk permit vlan 1 30 100 200combo enable fiber
#
interface GigabitEthernet1/0/4port link-mode bridgeport link-type trunkport trunk permit vlan 1 10 20 30 100 200combo enable fiber
#
interface GigabitEthernet1/0/5port link-mode bridgeport link-type trunkport trunk permit vlan 1 10 20 30 100 200combo enable fiber
#
interface GigabitEthernet1/0/6port link-mode bridgeport link-type trunkport trunk permit vlan 1 10 20 30 100 200combo enable fiber
六、接入层交换机:放通各类vlan和为ap端打上管理vlan。
vlan1
#
vlan10
#
vlan 100
#
vlan 200
#
stp region-configuration #mstpregion-name h3crevision-level 1instance 1 vlan 10 20instance 2 vlan 30active region-configuration
#stp global enable
#
interface GigabitEthernet1/0/1port link-mode bridgeport link-type trunkport trunk permit vlan 1 10 100 200combo enable fiber
#
interface GigabitEthernet1/0/2port link-mode bridgeport link-type trunkport trunk permit vlan 1 10 100 200combo enable fiber
#
interface GigabitEthernet1/0/3port link-mode bridgeport link-type trunkport trunk permit vlan 1 100 200port trunk pvid vlan 100 #ap打上vlan100标签获取100.0网段ipcombo enable fiber