在登录某些网站时输入完账号密码后网页跳转后竟然又回到了登陆界面,建设简易电子商务网站流程图,免费创网站,手机电脑网站配置WDS手拉手业务示例 组网图形 图1 配置WDS手拉手业务示例组网图 业务需求组网需求数据规划配置思路配置注意事项操作步骤配置文件 业务需求 企业用户通过WLAN接入网络#xff0c;以满足移动办公的最基本需求。但企业考虑到AP通过有线部署的成本较高#xff0c;所以通过建立… 配置WDS手拉手业务示例 组网图形 图1 配置WDS手拉手业务示例组网图 业务需求组网需求数据规划配置思路配置注意事项操作步骤配置文件 业务需求 企业用户通过WLAN接入网络以满足移动办公的最基本需求。但企业考虑到AP通过有线部署的成本较高所以通过建立WDS无线桥接链路做无线回传用于部署业务覆盖保证企业用户可以接入无线网络。 组网需求 AC组网方式旁挂二层组网。DHCP部署方式 AC作为DHCP服务器为AP分配IP地址。汇聚交换机Switch_A作为DHCP服务器为STA分配IP地址。无线回传方式WDS手拉手方式。回传射频5G频段。业务数据转发方式直接转发。 数据规划 表1 AP数据规划表 AP 类型 MAC AP_1 AP8130DN 60de-4474-9640 AP_2 AP8130DN dcd2-fc04-b500 AP_3 AP8130DN dcd2-fc96-e4c0 表2 AC数据规划表 配置项 数据 AP管理VLAN VLAN100 STA业务VLAN VLAN101 DHCP服务器 AC作为AP的DHCP服务器Switch_A作为STA的DHCP服务器。 AP地址池 10.23.100.210.23.100.254/24 STA地址池 10.23.101.310.23.101.254/24 AC源接口 VLANIF100 WDS角色 AP_1射频1rootAP_2射频1leafAP_2射频0rootAP_3射频1leaf 域管理模板 名称default国家码中国 SSID模板 名称wlan-netSSID名称wlan-net WLAN无线业务安全模板 名称wlan-net安全策略WPA-WPA2PSKAES密码a1234567 VAP模板 名称wlan-net转发模式直接转发业务VLANVLAN101引用模板SSID模板wlan-net、安全模板wlan-net WDS链路安全模板 名称wds-security 安全策略WPA2PSKAES 密码类型PASS-PHRASE 密码a1234567 WDS白名单模板 名称wds-list1 AP MAC地址AP_2 leaf节点的MAC地址 名称wds-list2 AP MAC地址AP_3 leaf节点的MAC地址 WDS模板 名称wds-root WDS网桥名称wlan-wds WDS工作模式root Tagged VLANVLAN101 引用安全模板wds-security 名称wds-leaf WDS网桥名称wlan-wds WDS工作模式leaf Tagged VLANVLAN101 引用安全模板wds-security AP组 名称ap-group1 用于添加root节点AP如AP_1 引用WDS模板wds-root、VAP模板wlan-net、域管理模板default 名称ap-group2 用于添加root和leaf节点AP如AP_2 引用WDS模板wds-root和wds-leaf、VAP模板wlan-net、域管理模板default 名称ap-group3 用于添加leaf节点AP如AP_3 引用WDS模板wds-leaf、VAP模板wlan-net、域管理模板default 配置思路 配置root节点AP_1在AC上线。 创建AP组用于将需要进行相同配置的AP都加入到AP组实现统一配置。配置AC的系统参数包括国家码、AC与AP之间通信的源接口。配置AP上线的认证方式并离线导入AP实现AP正常上线。配置WDS业务使区域C的AP可以通过WDS无线虚链路上线。配置WLAN业务参数实现STA访问WLAN网络功能。 配置注意事项 纯组播报文由于协议要求在无线空口没有ACK机制保障且无线空口链路不稳定为了纯组播报文能够稳定发送通常会以低速报文形式发送。如果网络侧有大量异常组播流量涌入则会造成无线空口拥堵。为了减小大量低速组播报文对无线网络造成的冲击建议配置组播报文抑制功能。配置前请确认是否有组播业务如果有请谨慎配置限速值。 业务数据转发方式采用直接转发时建议在直连AP的交换机接口上配置组播报文抑制。业务数据转发方式采用隧道转发时建议在AC的流量模板下配置组播报文抑制。 建议在与AP直连的设备接口上配置端口隔离如果不配置端口隔离尤其是业务数据转发方式采用直接转发时可能会在VLAN内形成大量不必要的广播报文导致网络阻塞影响用户体验。 隧道转发模式下管理VLAN和业务VLAN不能配置为同一VLAN且AP和AC之间只能放通管理VLAN不能放通业务VLAN。 请按照WDS网络网规设计选用合适的天线并选用天线校准工具进行校准。 操作步骤 配置周边设备 # 配置接入交换机Switch_B的GE0/0/1和GE0/0/2接口加入VLAN100和VLAN101GE0/0/1的缺省VLAN为VLAN100。 span stylecolor:#333333span stylebackground-color:#ddddddHUAWEI strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1141689396190921system-view/strong
[HUAWEI] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1956857707190921sysname Switch_B/strong
[Switch_B] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b402801205190921vlan batch 100 to 101/strong
[Switch_B] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b611115067190921interface gigabitEthernet 0/0/1/strong
[Switch_B-GigabitEthernet0/0/1] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b212116232190921port link-type trunk/strong
[Switch_B-GigabitEthernet0/0/1] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1767714945190921port trunk pvid vlan 100/strong
[Switch_B-GigabitEthernet0/0/1] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1214832445190921port trunk allow-pass vlan 100 to 101/strong
[Switch_B-GigabitEthernet0/0/1] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b36947418190921port-isolate enable/strong
[Switch_B-GigabitEthernet0/0/1] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1464937259190921quit/strong
[Switch_B] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1250273224190921interface gigabitEthernet 0/0/2/strong
[Switch_B-GigabitEthernet0/0/2] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b541902358190921port link-type trunk/strong
[Switch_B-GigabitEthernet0/0/2] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1749851799190921port trunk allow-pass vlan 100 to 101/strong
[Switch_B-GigabitEthernet0/0/2] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b809501523190921quit/strong/span/span # 配置汇聚交换机Switch_A的GE0/0/1接口加入VLAN100和VLAN101GE0/0/2接口加入VLAN100GE0/0/3接口加入VLAN101。 span stylecolor:#333333span stylebackground-color:#ddddddHUAWEI strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b511548958190921system-view/strong
[HUAWEI] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b489891529190921sysname Switch_A/strong
[Switch_A] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1311387655190921vlan batch 100 to 101/strong
[Switch_A] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1243101138190921interface gigabitEthernet 0/0/1/strong
[Switch_A-GigabitEthernet0/0/1] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1931666829190921port link-type trunk/strong
[Switch_A-GigabitEthernet0/0/1] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1503245325190921port trunk allow-pass vlan 100 to 101/strong
[Switch_A-GigabitEthernet0/0/1] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b289486029190921quit/strong
[Switch_A] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b458500069190921interface gigabitEthernet 0/0/2/strong
[Switch_A-GigabitEthernet0/0/2] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b779944513190921port link-type trunk/strong
[Switch_A-GigabitEthernet0/0/2] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b85068874190921port trunk allow-pass vlan 100/strong
[Switch_A-GigabitEthernet0/0/2] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b2034823831190921quit/strong
[Switch_A] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b929617411190921interface gigabitEthernet 0/0/3/strong
[Switch_A-GigabitEthernet0/0/3] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b766152642190921port link-type trunk/strong
[Switch_A-GigabitEthernet0/0/3] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b1952032455190921port trunk allow-pass vlan 101/strong
[Switch_A-GigabitEthernet0/0/3] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912382_b204948751190921quit/strong/span/span # 配置Router的接口GE1/0/0加入VLAN101创建接口VLANIF101并配置IP地址为10.23.101.2/24。 span stylecolor:#333333span stylebackground-color:#ddddddHuawei strong idZH-CN_TASK_0176912378__zh-cn_task_0176912351_b118005268190921system-view/strong
[Huawei] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912351_b1176501588190921sysname Router/strong
[Router] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912351_b995805857190921vlan batch 101/strong
[Router] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912351_b906637926190921interface gigabitethernet 1/0/0/strong
[Router-GigabitEthernet1/0/0] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912351_b406876624190921port link-type trunk/strong
[Router-GigabitEthernet1/0/0] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912351_b1226529678190921port trunk allow-pass vlan 101/strong
[Router-GigabitEthernet1/0/0] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912351_b1131638750190921quit/strong
[Router] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912351_b648829236190921interface vlanif 101/strong
[Router-Vlanif101] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912351_b1969966747190921ip address 10.23.101.2 24/strong
[Router-Vlanif101] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912351_b1246477905190921quit/strong/span/span 配置AC与其它网络设备互通 # 配置AC的接口GE0/0/1允许携带VLAN100的报文通过。 span stylecolor:#333333span stylebackground-color:#ddddddHUAWEI strong idZH-CN_TASK_0176912378__b570291284190921system-view/strong
[HUAWEI] strong idZH-CN_TASK_0176912378__b1926118503190921sysname AC/strong
[AC] strong idZH-CN_TASK_0176912378__b96916095190921vlan batch 100 101/strong
[AC] strong idZH-CN_TASK_0176912378__b404498836190921interface gigabitEthernet 0/0/1/strong
[AC-GigabitEthernet0/0/1] strong idZH-CN_TASK_0176912378__b651322997190921port link-type trunk/strong
[AC-GigabitEthernet0/0/1] strong idZH-CN_TASK_0176912378__b2619200190921port trunk allow-pass vlan 100/strong
[AC-GigabitEthernet0/0/1] strong idZH-CN_TASK_0176912378__b987613193190921quit/strong/span/span 配置DHCP服务器为STA和AP分配IP地址 DNS服务器地址请根据实际需要配置。常用配置方法如下 接口地址池场景需要在VLANIF接口视图下执行命令dhcp server dns-list ip-address 1-8。全局地址池场景需要在IP地址池视图下执行命令dns-list ip-address 1-8。 # 配置Switch_A作为DHCP服务器通过接口地址池为STA分配IP地址。 span stylecolor:#333333span stylebackground-color:#dddddd[Switch_A] strong idZH-CN_TASK_0176912378__b585097426190921dhcp enable/strong
[Switch_A] strong idZH-CN_TASK_0176912378__b189439435190921interface vlanif 101/strong
[Switch_A-Vlanif101] strong idZH-CN_TASK_0176912378__b686378840190921ip address 10.23.101.1 24/strong
[Switch_A-Vlanif101] strong idZH-CN_TASK_0176912378__b1172640232190921dhcp select interface/strong
[Switch_A-Vlanif101] strong idZH-CN_TASK_0176912378__b685516536190921dhcp server gateway-list 10.23.101.2/strong
[Switch_A-Vlanif101] strong idZH-CN_TASK_0176912378__b116615007190921quit/strong/span/span # 在AC上使能DHCP功能并通过接口地址池为AP分配IP地址。 span stylecolor:#333333span stylebackground-color:#dddddd[AC] strong idZH-CN_TASK_0176912378__b535076932190921dhcp enable/strong
[AC] strong idZH-CN_TASK_0176912378__b1294910917190921interface vlanif 100/strong
[AC-Vlanif100] strong idZH-CN_TASK_0176912378__b1403704681190921ip address 10.23.100.1 24/strong
[AC-Vlanif100] strong idZH-CN_TASK_0176912378__b1618518344190921dhcp select interface/strong
[AC-Vlanif100] strong idZH-CN_TASK_0176912378__b1710882234190921quit/strong/span/span 配置AP上线 # 创建AP组“ap-group1”、“ap-group2”和“ap-group3”。 span stylecolor:#333333span stylebackground-color:#dddddd[AC] strong idZH-CN_TASK_0176912378__b1083860828190921wlan/strong
[AC-wlan-view] strong idZH-CN_TASK_0176912378__b333966974190921ap-group name ap-group1/strong
[AC-wlan-ap-group-ap-group1] strong idZH-CN_TASK_0176912378__b2129810468190921quit/strong
[AC-wlan-view] strong idZH-CN_TASK_0176912378__b1905879936190921ap-group name ap-group2/strong
[AC-wlan-ap-group-ap-group2] strong idZH-CN_TASK_0176912378__b228340447190921quit/strong
[AC-wlan-view] strong idZH-CN_TASK_0176912378__b54960352190921ap-group name ap-group3/strong
[AC-wlan-ap-group-ap-group3] strong idZH-CN_TASK_0176912378__b1032751598190921quit/strong/span/span # 创建域管理模板在域管理模板下配置AC的国家码并在AP组下引用域管理模板。 span stylecolor:#333333span stylebackground-color:#dddddd[AC-wlan-view] strong idZH-CN_TASK_0176912378__b1230094218190921regulatory-domain-profile name default/strong
[AC-wlan-regulate-domain-default] strong idZH-CN_TASK_0176912378__b602460734190921country-code cn/strong
[AC-wlan-regulate-domain-default] strong idZH-CN_TASK_0176912378__b1938077640190921quit/strong
[AC-wlan-view] strong idZH-CN_TASK_0176912378__b1312519707190921ap-group name ap-group1/strong
[AC-wlan-ap-group-ap-group1] strong idZH-CN_TASK_0176912378__b204151839190921regulatory-domain-profile default/strong
Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continue?[Y/N]:strong idZH-CN_TASK_0176912378__zh-cn_task_0175818418_b17491131153716y/strong
[AC-wlan-ap-group-ap-group1] strong idZH-CN_TASK_0176912378__b594088353190921quit/strong
[AC-wlan-view] strong idZH-CN_TASK_0176912378__b817937082190921ap-group name ap-group2/strong
[AC-wlan-ap-group-ap-group2] strong idZH-CN_TASK_0176912378__b815776022190921regulatory-domain-profile default/strong
Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continue?[Y/N]:strong idZH-CN_TASK_0176912378__zh-cn_task_0175818418_b17491131153716_1y/strong
[AC-wlan-ap-group-ap-group2] strong idZH-CN_TASK_0176912378__b1262782621190921quit/strong
[AC-wlan-view] strong idZH-CN_TASK_0176912378__b435925290190921ap-group name ap-group3/strong
[AC-wlan-ap-group-ap-group3] strong idZH-CN_TASK_0176912378__b436826727190921regulatory-domain-profile default/strong
Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continue?[Y/N]:strong idZH-CN_TASK_0176912378__zh-cn_task_0175818418_b17491131153716_2y/strong
[AC-wlan-ap-group-ap-group3] strong idZH-CN_TASK_0176912378__b1227479814190921quit/strong
[AC-wlan-view] strong idZH-CN_TASK_0176912378__b741675262190921quit/strong/span/span # 配置AC的源接口。 span stylecolor:#333333span stylebackground-color:#dddddd[AC] strong idZH-CN_TASK_0176912378__b1601735634190921capwap source interface vlanif 100/strong/span/span # 将AP_1加入到AP组“ap-group1”AP_2加入到AP组“ap-group2”AP_3加入到AP组“ap-group3”。 span stylecolor:#333333span stylebackground-color:#dddddd[AC] strong idZH-CN_TASK_0176912378__b1374021969190921wlan/strong
[AC-wlan-view] strong idZH-CN_TASK_0176912378__b1265509873190921ap auth-mode mac-auth/strong
[AC-wlan-view] strong idZH-CN_TASK_0176912378__b706866964190921ap-id 1 ap-mac 60de-4474-9640/strong
[AC-wlan-ap-1] strong idZH-CN_TASK_0176912378__b176619692190921ap-name AP_1/strong
[AC-wlan-ap-1] strong idZH-CN_TASK_0176912378__b600538503190921ap-group ap-group1/strong
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:strong idZH-CN_TASK_0176912378__zh-cn_task_0175818418_b1651706244190906y/strong
[AC-wlan-ap-1] strong idZH-CN_TASK_0176912378__b435831157190921quit/strong
[AC-wlan-view] strong idZH-CN_TASK_0176912378__b1734348834190921ap-id 2 ap-mac dcd2-fc04-b500/strong
[AC-wlan-ap-2] strong idZH-CN_TASK_0176912378__b1101981659190921ap-name AP_2/strong
[AC-wlan-ap-2] strong idZH-CN_TASK_0176912378__b1077418825190921ap-group ap-group2/strong
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:strong idZH-CN_TASK_0176912378__zh-cn_task_0175818418_b1651706244190906_1y/strong
[AC-wlan-ap-2] strong idZH-CN_TASK_0176912378__b1999555100190921quit/strong
[AC-wlan-view] strong idZH-CN_TASK_0176912378__b1250311975190921ap-id 3 ap-mac dcd2-fc96-e4c0/strong
[AC-wlan-ap-3] strong idZH-CN_TASK_0176912378__b1533697021190921ap-name AP_3/strong
[AC-wlan-ap-3] strong idZH-CN_TASK_0176912378__b1508108276190921ap-group ap-group3/strong
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:strong idZH-CN_TASK_0176912378__zh-cn_task_0175818418_b1651706244190906_2y/strong
[AC-wlan-ap-3] strong idZH-CN_TASK_0176912378__b1982018367190921quit/strong/span/span 配置WDS业务参数 # 配置WDS节点使用的主要射频参数。本例中使用AP_1和AP_3的是AP8130DN的射频1AP_2使用AP8130DN的射频0和射频1。配置AP_2的射频0工作在5GHz频段为了减少信道干扰配置AP_2的射频0和射频1在不同的信道射频1用于和AP_1建立WDS链路射频0用于和AP_3建立WDS链路。“coverage distance”参数为射频覆盖距离缺省情况下是3单位是100m。本例中使用参数为4用户可以根据实际情况配置该参数。 在WDS网络中建立WDS链路的射频必须为同一信道。 span stylecolor:#333333span stylebackground-color:#dddddd[AC-wlan-view] strong idZH-CN_TASK_0176912378__b973163930190921ap-id 2/strong
[AC-wlan-ap-2] strong idZH-CN_TASK_0176912378__b1881699822190921radio 0/strong
[AC-wlan-radio-2/0] strong idZH-CN_TASK_0176912378__b594094206190921frequency 5g/strong
Warning: Modifying the frequency band will delete the channel, power, and antenn
a gain configurations of the current radio on the AP and reboot the AP. Continue
?[Y/N]:strong idZH-CN_TASK_0176912378__b1855572944920y/strong
[AC-wlan-radio-2/0] strong idZH-CN_TASK_0176912378__b1918124164190921quit/strong
[AC-wlan-ap-2] strong idZH-CN_TASK_0176912378__b2038603550190921quit/strong
[AC-wlan-view] strong idZH-CN_TASK_0176912378__b1099814393190921ap-id 1/strong
[AC-wlan-ap-1] strong idZH-CN_TASK_0176912378__b1669668313190921radio 1/strong
[AC-wlan-radio-1/1] strong idZH-CN_TASK_0176912378__b1295367688190921channel 40mhz-plus 157/strong
Warning: This action may cause service interruption. Continue?[Y/N]strong idZH-CN_TASK_0176912378__zh-cn_task_0175818418_b1384307436190906y/strong
[AC-wlan-radio-1/1] strong idZH-CN_TASK_0176912378__b1221378632190921coverage distance 4/strong
[AC-wlan-radio-1/1] strong idZH-CN_TASK_0176912378__b1620252618190921quit/strong
[AC-wlan-ap-1] strong idZH-CN_TASK_0176912378__b990496967190921quit/strong
[AC-wlan-view] strong idZH-CN_TASK_0176912378__b1896739578190921ap-id 2/strong
[AC-wlan-ap-2] strong idZH-CN_TASK_0176912378__b2050334401190921radio 0/strong
[AC-wlan-radio-2/0] strong idZH-CN_TASK_0176912378__b1449906778190921channel 40mhz-plus 149/strong
Warning: This action may cause service interruption. Continue?[Y/N]strong idZH-CN_TASK_0176912378__zh-cn_task_0175818418_b1384307436190906_1y/strong
[AC-wlan-radio-2/0] strong idZH-CN_TASK_0176912378__b1331953824190921coverage distance 4/strong
[AC-wlan-radio-2/0] strong idZH-CN_TASK_0176912378__b713880646190921quit/strong
[AC-wlan-ap-2] strong idZH-CN_TASK_0176912378__b1137368453190921radio 1/strong
[AC-wlan-radio-2/1] strong idZH-CN_TASK_0176912378__b823627637190921channel 40mhz-plus 157/strong
Warning: This action may cause service interruption. Continue?[Y/N]strong idZH-CN_TASK_0176912378__zh-cn_task_0175818418_b1384307436190906_2y/strong
[AC-wlan-radio-2/1] strong idZH-CN_TASK_0176912378__b1762660870190921coverage distance 4/strong
[AC-wlan-radio-2/1] strong idZH-CN_TASK_0176912378__b1281892212190921quit/strong
[AC-wlan-ap-2] strong idZH-CN_TASK_0176912378__b1863079157190921quit/strong
[AC-wlan-view] strong idZH-CN_TASK_0176912378__b1502886139190921ap-id 3/strong
[AC-wlan-ap-3] strong idZH-CN_TASK_0176912378__b604612192190921radio 1/strong
[AC-wlan-radio-3/1] strong idZH-CN_TASK_0176912378__b298941086190921channel 40mhz-plus 149/strong
Warning: This action may cause service interruption. Continue?[Y/N]strong idZH-CN_TASK_0176912378__zh-cn_task_0175818418_b1384307436190906_3y/strong
[AC-wlan-radio-3/1] strong idZH-CN_TASK_0176912378__b1153657628190921coverage distance 4/strong
[AC-wlan-radio-3/1] strong idZH-CN_TASK_0176912378__b1519769423190921quit/strong
[AC-wlan-ap-3] strong idZH-CN_TASK_0176912378__b1134031871190921quit/strong/span/span # 配置WDS链路使用的安全模板“wds-security”“wds-security”的安全策略为WPA2PSKAES。 span stylecolor:#333333span stylebackground-color:#dddddd[AC-wlan-view] strong idZH-CN_TASK_0176912378__b403659190190921security-profile name wds-security/strong
[AC-wlan-sec-prof-wds-security] strong idZH-CN_TASK_0176912378__b680615166190921security wpa2 psk pass-phrase a1234567 aes/strong
[AC-wlan-sec-prof-wds-security] strong idZH-CN_TASK_0176912378__b1709946791190921quit/strong/span/span # 配置WDS白名单。配置AP_1绑定的WDS白名单“wds-list1”仅允许AP_2接入。配置AP_2绑定的WDS白名单“wds-list2”仅允许AP_3接入。 span stylecolor:#333333span stylebackground-color:#dddddd[AC-wlan-view] strong idZH-CN_TASK_0176912378__b36601203190921wds-whitelist-profile name wds-list1/strong
[AC-wlan-wds-whitelist-wds-list1] strong idZH-CN_TASK_0176912378__b1735750903190921peer-ap mac dcd2-fc04-b500/strong
[AC-wlan-wds-whitelist-wds-list1] strong idZH-CN_TASK_0176912378__b916949979190921quit/strong
[AC-wlan-view] strong idZH-CN_TASK_0176912378__b685098719190921wds-whitelist-profile name wds-list2/strong
[AC-wlan-wds-whitelist-wds-list2] strong idZH-CN_TASK_0176912378__b1881723973190921peer-ap mac dcd2-fc96-e4c0/strong
[AC-wlan-wds-whitelist-wds-list2] strong idZH-CN_TASK_0176912378__b1433362236190921quit/strong/span/span # 配置WDS模板“wds-root”。网桥标识为“wlan-wds”网桥模式为“root”引用安全模板“wds-security”以tagged形式允许无线业务VLAN101通过。 span stylecolor:#333333span stylebackground-color:#dddddd[AC-wlan-view] strong idZH-CN_TASK_0176912378__b1038160682190921wds-profile name wds-root/strong
[AC-wlan-wds-prof-wds-root] strong idZH-CN_TASK_0176912378__b1316032594190921wds-name wlan-wds/strong
[AC-wlan-wds-prof-wds-root] strong idZH-CN_TASK_0176912378__b447826258190921wds-mode root/strong
[AC-wlan-wds-prof-wds-root] strong idZH-CN_TASK_0176912378__b2069070593190921security-profile wds-security/strong
[AC-wlan-wds-prof-wds-root] strong idZH-CN_TASK_0176912378__b146100745190921vlan tagged 101/strong
[AC-wlan-wds-prof-wds-root] strong idZH-CN_TASK_0176912378__b1070862885190921quit/strong/span/span # 配置WDS模板“wds-leaf”。网桥标识为“wlan-wds”网桥模式为“leaf”引用安全模板“wds-security”以tagged形式允许无线业务VLAN101通过。 span stylecolor:#333333span stylebackground-color:#dddddd[AC-wlan-view] strong idZH-CN_TASK_0176912378__b1978990317190921wds-profile name wds-leaf/strong
[AC-wlan-wds-prof-wds-leaf] strong idZH-CN_TASK_0176912378__b209671589190921wds-name wlan-wds/strong
[AC-wlan-wds-prof-wds-leaf] strong idZH-CN_TASK_0176912378__b1205789701190921wds-mode leaf/strong
[AC-wlan-wds-prof-wds-leaf] strong idZH-CN_TASK_0176912378__b1124331768190921security-profile wds-security/strong
[AC-wlan-wds-prof-wds-leaf] strong idZH-CN_TASK_0176912378__b1747517715190921vlan tagged 101/strong
[AC-wlan-wds-prof-wds-leaf] strong idZH-CN_TASK_0176912378__b180610353190921quit/strong/span/span # 配置AP组“ap-group1”的射频1引用WDS白名单“wds-list1”。配置AP组“ap-group2”的射频0引用WDS白名单“wds-list2”。 span stylecolor:#333333span stylebackground-color:#dddddd[AC-wlan-view] strong idZH-CN_TASK_0176912378__b61345628190921ap-group name ap-group1/strong
[AC-wlan-ap-group-ap-group1] strong idZH-CN_TASK_0176912378__b21897143190921radio 1/strong
[AC-wlan-group-radio-ap-group1/1] strong idZH-CN_TASK_0176912378__b1700089180190921wds-whitelist-profile wds-list1/strong
[AC-wlan-group-radio-ap-group1/1] strong idZH-CN_TASK_0176912378__b1318962636190921quit/strong
[AC-wlan-ap-group-ap-group1] strong idZH-CN_TASK_0176912378__b7517099190921quit/strong
[AC-wlan-view] strong idZH-CN_TASK_0176912378__b25484107190921ap-group name ap-group2/strong
[AC-wlan-ap-group-ap-group2] strong idZH-CN_TASK_0176912378__b1891047689190921radio 0/strong
[AC-wlan-group-radio-ap-group2/0] strong idZH-CN_TASK_0176912378__b715150691190921wds-whitelist-profile wds-list2/strong
[AC-wlan-group-radio-ap-group2/0] strong idZH-CN_TASK_0176912378__b2099109151190921quit/strong
[AC-wlan-ap-group-ap-group2] strong idZH-CN_TASK_0176912378__b781464261190921quit/strong/span/span 在AP组引用相关模板使WDS业务生效 # 配置AP组“ap-group1”引用WDS模板“wds-root”。 span stylecolor:#333333span stylebackground-color:#dddddd[AC-wlan-view] strong idZH-CN_TASK_0176912378__b1602084839190921ap-group name ap-group1/strong
[AC-wlan-ap-group-ap-group1] strong idZH-CN_TASK_0176912378__b2053795237190921wds-profile wds-root radio 1/strong
Warning: This action may cause service interruption. Continue?[Y/N]strong idZH-CN_TASK_0176912378__b1345959752190921y/strong
[AC-wlan-ap-group-ap-group1] strong idZH-CN_TASK_0176912378__b153560152190921quit/strong/span/span # 配置AP组“ap-group2”引用WDS模板“wds-root”和“wds-leaf”。 span stylecolor:#333333span stylebackground-color:#dddddd[AC-wlan-view] strong idZH-CN_TASK_0176912378__b435889682190921ap-group name ap-group2/strong
[AC-wlan-ap-group-ap-group2] strong idZH-CN_TASK_0176912378__b1308033525190921wds-profile wds-leaf radio 1/strong
Warning: This action may cause service interruption. Continue?[Y/N]strong idZH-CN_TASK_0176912378__b1195614921190921y/strong
[AC-wlan-ap-group-ap-group2] strong idZH-CN_TASK_0176912378__b1295779174190921wds-profile wds-root radio 0/strong
Warning: This action may cause service interruption. Continue?[Y/N]strong idZH-CN_TASK_0176912378__b1778551390190921y/strong
[AC-wlan-ap-group-ap-group2] strong idZH-CN_TASK_0176912378__b174749758190921quit/strong/span/span # 配置AP组“ap-group3”引用WDS模板“wds-leaf”。 span stylecolor:#333333span stylebackground-color:#dddddd[AC-wlan-view] strong idZH-CN_TASK_0176912378__b299621465190921ap-group name ap-group3/strong
[AC-wlan-ap-group-ap-group3] strong idZH-CN_TASK_0176912378__b1283922214190921wds-profile wds-leaf radio 1/strong
Warning: This action may cause service interruption. Continue?[Y/N]strong idZH-CN_TASK_0176912378__b10513943190921y/strong
[AC-wlan-ap-group-ap-group3] strong idZH-CN_TASK_0176912378__b618593862190921quit/strong/span/span 配置WLAN业务参数 # 创建名为“wlan-net”的安全模板并配置安全策略。 举例中以配置WPA-WPA2PSKAES的安全策略为例密码为“a1234567”实际配置中请根据实际情况配置符合实际要求的安全策略。 span stylecolor:#333333span stylebackground-color:#dddddd[AC-wlan-view] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912351_b1991067776190921security-profile name wlan-net/strong
[AC-wlan-sec-prof-wlan-net] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912351_b851752672190921security wpa-wpa2 psk pass-phrase a1234567 aes/strong
[AC-wlan-sec-prof-wlan-net] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912351_b337241812190921quit/strong/span/span # 创建名为“wlan-net”的SSID模板并配置SSID名称为“wlan-net”。 span stylecolor:#333333span stylebackground-color:#dddddd[AC-wlan-view] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912351_b69022931190921ssid-profile name wlan-net/strong
[AC-wlan-ssid-prof-wlan-net] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912351_b36723145190921ssid wlan-net/strong
[AC-wlan-ssid-prof-wlan-net] strong idZH-CN_TASK_0176912378__zh-cn_task_0176912351_b1738903244190921quit/strong/span/span # 创建名为“wlan-net”的VAP模板配置业务数据转发模式、业务VLAN并且引用安全模板和SSID模板。 span stylecolor:#333333span stylebackground-color:#dddddd[AC-wlan-view] strong idZH-CN_TASK_0176912378__b325802584190921vap-profile name wlan-net/strong
[AC-wlan-vap-prof-wlan-net] strong idZH-CN_TASK_0176912378__b977737230190921forward-mode direct-forward/strong
[AC-wlan-vap-prof-wlan-net] strong idZH-CN_TASK_0176912378__b1495141052190921service-vlan vlan-id 101/strong
[AC-wlan-vap-prof-wlan-net] strong idZH-CN_TASK_0176912378__b694670004190921security-profile wlan-net/strong
[AC-wlan-vap-prof-wlan-net] strong idZH-CN_TASK_0176912378__b411554548190921ssid-profile wlan-net/strong
[AC-wlan-vap-prof-wlan-net] strong idZH-CN_TASK_0176912378__b1808978522190921quit/strong/span/span # 配置AP组引用VAP模板本例中AP_1和AP_3使用射频1作为WDS回传频段射频0作为无线业务覆盖射频。AP_1和AP_3上射频0都使用VAP模板“wlan-net”的配置。 span stylecolor:#333333span stylebackground-color:#dddddd[AC-wlan-view] strong idZH-CN_TASK_0176912378__b908252767190921ap-group name ap-group1/strong
[AC-wlan-ap-group-ap-group1] strong idZH-CN_TASK_0176912378__b1382046263190921vap-profile wlan-net wlan 1 radio 0/strong
[AC-wlan-ap-group-ap-group1] strong idZH-CN_TASK_0176912378__b1809376582190921quit/strong
[AC-wlan-view] strong idZH-CN_TASK_0176912378__b65311999190921ap-group name ap-group3/strong
[AC-wlan-ap-group-ap-group3] strong idZH-CN_TASK_0176912378__b102213109190921vap-profile wlan-net wlan 3 radio 0/strong
[AC-wlan-ap-group-ap-group3] strong idZH-CN_TASK_0176912378__b340378414190921quit/strong/span/span 配置AP 2.4G射频的信道和功率 举例中AP射频的信道和功率仅为示例实际配置中请根据AP的国家码和网规结果进行配置。 # 关闭AP射频的信道和功率自动调优功能。 span stylecolor:#333333span stylebackground-color:#dddddd[AC-wlan-view] strong idZH-CN_TASK_0176912378__b1952682364190921ap-id 1/strong
[AC-wlan-ap-1] strong idZH-CN_TASK_0176912378__b1706775230190921radio 0/strong
[AC-wlan-radio-1/0] strong idZH-CN_TASK_0176912378__b1242645581190921calibrate auto-channel-select disable/strong
[AC-wlan-radio-1/0] strong idZH-CN_TASK_0176912378__b1300815155190921calibrate auto-txpower-select disable/strong
[AC-wlan-radio-1/0] strong idZH-CN_TASK_0176912378__b665627777190921quit/strong
[AC-wlan-ap-1] strong idZH-CN_TASK_0176912378__b1937134891190921radio 1/strong
[AC-wlan-radio-1/1] strong idZH-CN_TASK_0176912378__b964854892190921calibrate auto-channel-select disable/strong
[AC-wlan-radio-1/1] strong idZH-CN_TASK_0176912378__b1162033439190921calibrate auto-txpower-select disable/strong
[AC-wlan-radio-1/1] strong idZH-CN_TASK_0176912378__b165350850190921quit/strong
[AC-wlan-ap-1]strong idZH-CN_TASK_0176912378__b621637696190921quit/strong
[AC-wlan-view] strong idZH-CN_TASK_0176912378__b1234068911190921ap-id 2/strong
[AC-wlan-ap-2] strong idZH-CN_TASK_0176912378__b229842564190921radio 0/strong
[AC-wlan-radio-2/0] strong idZH-CN_TASK_0176912378__b1342934364190921calibrate auto-channel-select disable/strong
[AC-wlan-radio-2/0] strong idZH-CN_TASK_0176912378__b1711548828190921calibrate auto-txpower-select disable/strong
[AC-wlan-radio-2/0] strong idZH-CN_TASK_0176912378__b1360369703190921quit/strong
[AC-wlan-ap-2] strong idZH-CN_TASK_0176912378__b1588443530190921radio 1/strong
[AC-wlan-radio-2/1] strong idZH-CN_TASK_0176912378__b588981595190921calibrate auto-channel-select disable/strong
[AC-wlan-radio-2/1] strong idZH-CN_TASK_0176912378__b1840220766190921calibrate auto-txpower-select disable/strong
[AC-wlan-radio-2/1] strong idZH-CN_TASK_0176912378__b1725333130190921quit/strong
[AC-wlan-ap-2]strong idZH-CN_TASK_0176912378__b1261464425190921quit/strong
[AC-wlan-view] strong idZH-CN_TASK_0176912378__b622120274190921ap-id 3/strong
[AC-wlan-ap-3] strong idZH-CN_TASK_0176912378__b171438672190921radio 0/strong
[AC-wlan-radio-3/0] strong idZH-CN_TASK_0176912378__b2132985172190921calibrate auto-channel-select disable/strong
[AC-wlan-radio-3/0] strong idZH-CN_TASK_0176912378__b271202200190921calibrate auto-txpower-select disable/strong
[AC-wlan-radio-3/0] strong idZH-CN_TASK_0176912378__b1526864825190921quit/strong
[AC-wlan-ap-3] strong idZH-CN_TASK_0176912378__b91027589190921radio 1/strong
[AC-wlan-radio-3/1] strong idZH-CN_TASK_0176912378__b1535412287190921calibrate auto-channel-select disable/strong
[AC-wlan-radio-3/1] strong idZH-CN_TASK_0176912378__b1762757286190921calibrate auto-txpower-select disable/strong
[AC-wlan-radio-3/1] strong idZH-CN_TASK_0176912378__b85195689190921quit/strong
[AC-wlan-ap-3]strong idZH-CN_TASK_0176912378__b78324845190921quit/strong/span/span # 配置AP射频0的信道和功率。 span stylecolor:#333333span stylebackground-color:#dddddd[AC-wlan-view] strong idZH-CN_TASK_0176912378__b586443666190921ap-id 1/strong
[AC-wlan-ap-1] strong idZH-CN_TASK_0176912378__b423411733190921radio 0/strong
[AC-wlan-radio-1/0] strong idZH-CN_TASK_0176912378__b2007086283190921channel 20mhz 6/strong
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC-wlan-radio-1/0] strong idZH-CN_TASK_0176912378__b1030138178190921eirp 127/strong
[AC-wlan-radio-1/0] strong idZH-CN_TASK_0176912378__b1917905811190921quit/strong
[AC-wlan-ap-1]strong idZH-CN_TASK_0176912378__b559165017190921quit/strong/span/span 验证WDS业务配置结果 完成配置后执行命令display ap all查看WDS各节点是否成功上线当“State”字段显示为“nor”则表示AP已成功上线。 span stylecolor:#333333span stylebackground-color:#dddddd[AC-wlan-view] strong idZH-CN_TASK_0176912378__b1107332355190921display ap all/strong
Total AP information:
nor : normal [3]
Extra information: P : insufficient power supply
--------------------------------------------------------------------------------------------------
ID MAC Name Group IP Type State STA Uptime ExtraInfo
--------------------------------------------------------------------------------------------------
1 60de-4474-9640 AP_1 ap-group1 10.23.100.254 AP8130DN strong idZH-CN_TASK_0176912378__b58094169190921nor/strong 0 20M:16S -
2 dcd2-fc04-b500 AP_2 ap-group2 10.23.100.253 AP8130DN strong idZH-CN_TASK_0176912378__b2093037571190921nor/strong 0 17S -
3 dcd2-fc96-e4c0 AP_3 ap-group3 10.23.100.252 AP8130DN strong idZH-CN_TASK_0176912378__b1074348771190921nor/strong 0 3M:55S -
--------------------------------------------------------------------------------------------------
Total: 3
/span/span 执行命令display wlan wds link all查看WDS链路相关信息。 span stylecolor:#333333span stylebackground-color:#dddddd[AC-wlan-view] strong idZH-CN_TASK_0176912378__b1520620916190921display wlan wds link all/strong
Rf : radio ID Dis : coverage distance(100m)
Ch : channel Per : drop percent(%)
TSNR : total SNR(dB) P- : peer
WDS : WDS mode Re : retry ratio(%)
RSSI : RSSI(dBm) MaxR : max RSSI(dBm)
-------------------------------------------------------------------------------------------------
APName P-APName Rf Dis Ch WDS P-Status RSSI MaxR Per Re TS NR SNR(Ch0~3:dB)
-------------------------------------------------------------------------------------------------
AP_1 AP_2 1 4 157 root normal -39 -30 0 5 55 42/57/-/-
AP_2 AP_3 0 4 149 root normal -56 -40 0 9 59 45/40/60/-
AP_2 AP_1 1 4 157 leaf normal -32 -30 0 15 58 41/36/60/-
AP_3 AP_2 1 4 149 leaf normal -33 -32 0 7 59 51/59/-/-
---------------------------------------------------------------------------------------------------
Total: 4/span/span WLAN业务配置会自动下发给AP配置完成后通过执行命令display vap ssid wlan-net查看如下信息当“Status”项显示为“ON”时表示AP对应的射频上的VAP已创建成功。 span stylecolor:#333333span stylebackground-color:#dddddd[AC-wlan-view] strong idZH-CN_TASK_0176912378__b287801376190921display vap ssid wlan-net/strong
WID : WLAN ID
--------------------------------------------------------------------------------
AP ID AP name RfID WID BSSID Status Auth type STA SSID
--------------------------------------------------------------------------------
1 AP_1 0 1 60DE-4474-9640 strong idZH-CN_TASK_0176912378__b32085512190921ON/strong WPA/WPA2-PSK 0 wlan-net
3 AP_3 0 3 DCD2-FC96-E4C0 strong idZH-CN_TASK_0176912378__b1358396375190921ON/strong WPA/WPA2-PSK 0 wlan-net
-------------------------------------------------------------------------------
Total: 2/span/span STA搜索到名为“wlan-net”的无线网络输入密码“a1234567”并正常关联后在AC上执行display station ssid wlan-net命令可以查看到用户已经接入到无线网络“wlan-net”中。 span stylecolor:#333333span stylebackground-color:#dddddd[AC-wlan-view] strong idZH-CN_TASK_0176912378__b277077308190921display station ssid wlan-net/strong
Rf/WLAN: Radio ID/WLAN ID
Rx/Tx: link receive rate/link transmit rate(Mbps)
---------------------------------------------------------------------------------
STA MAC AP ID Ap name Rf/WLAN Band Type Rx/Tx RSSI VLAN IP address
---------------------------------------------------------------------------------
e019-1dc7-1e08 1 AP_1 0/1 2.4G 11n 3/34 -68 101 10.23.101.254
---------------------------------------------------------------------------------
Total: 1 2.4G: 1 5G: 0/span/span 配置文件 Switch_A的配置文件 span stylecolor:#333333span stylebackground-color:#dddddd#
sysname Switch_A
#vlan batch 100 to 101
#
dhcp enable
#
interface Vlanif101ip address 10.23.101.1 255.255.255.0dhcp select interface
#
interface GigabitEthernet0/0/1port link-type trunkport trunk allow-pass vlan 100 to 101
#
interface GigabitEthernet0/0/2port link-type trunkport trunk allow-pass vlan 100
#
interface GigabitEthernet0/0/3port link-type trunkport trunk allow-pass vlan 101
#
return/span/span Switch_B的配置文件 span stylecolor:#333333span stylebackground-color:#dddddd#
sysname Switch_B
#vlan batch 100 to 101
#
interface GigabitEthernet0/0/1port link-type trunkport trunk pvid vlan 100port trunk allow-pass vlan 100 to 101port-isolate enable group 1
#
interface GigabitEthernet0/0/2port link-type trunkport trunk allow-pass vlan 100 to 101
#
return/span/span Router的配置文件 span stylecolor:#333333span stylebackground-color:#dddddd#
sysname Router
#
vlan batch 101
#
interface Vlanif101ip address 10.23.101.2 255.255.255.0
#
interface GigabitEthernet1/0/0port link-type trunkport trunk allow-pass vlan 101
#
return
/span/span AC的配置文件 span stylecolor:#333333span stylebackground-color:#dddddd#sysname AC
#vlan batch 100 to 101
#
dhcp enable
#
interface Vlanif100ip address 10.23.100.1 255.255.255.0dhcp select interface
#
interface GigabitEthernet0/0/1port link-type trunkport trunk allow-pass vlan 100
#
capwap source interface vlanif100
#
wlansecurity-profile name wlan-netsecurity wpa-wpa2 psk pass-phrase %^%#mtz0f~7.[^6RWdzwCy16hJj/Mc!,}sX*B]}A%^%# aessecurity-profile name wds-securitysecurity wpa2 psk pass-phrase %^%#n}5DgC3wLB.hJ34j5;*QMv89#{BqghBI3L9K%^%# aesssid-profile name wlan-netssid wlan-netvap-profile name wlan-netservice-vlan vlan-id 101ssid-profile wlan-netsecurity-profile wlan-netwds-whitelist-profile name wds-list1peer-ap mac dcd2-fc04-b500wds-whitelist-profile name wds-list2peer-ap mac dcd2-fc96-e4c0wds-profile name wds-leafsecurity-profile wds-securityvlan tagged 101wds-name wlan-wdswds-profile name wds-rootsecurity-profile wds-securityvlan tagged 101wds-name wlan-wdswds-mode rootregulatory-domain-profile name defaultap-group name ap-group1radio 0vap-profile wlan-net wlan 3radio 1wds-profile wds-rootwds-whitelist-profile wds-list1ap-group name ap-group2radio 0wds-profile wds-rootwds-whitelist-profile wds-list2radio 1wds-profile wds-leafap-group name ap-group3radio 0vap-profile wlan-net wlan 1radio 1wds-profile wds-leafap-id 1 type-id 39 ap-mac 60de-4474-9640 ap-sn 210235554710CB000042ap-name AP_1ap-group ap-group1radio 0channel 20mhz 6eirp 127calibrate auto-channel-select disable calibrate auto-txpower-select disableradio 1channel 40mhz-plus 157coverage distance 4calibrate auto-channel-select disable calibrate auto-txpower-select disableap-id 2 type-id 39 ap-mac dcd2-fc04-b500 ap-sn 210235555310CC000094ap-name AP_2ap-group ap-group2radio 0frequency 5gchannel 40mhz-plus 149eirp 127coverage distance 4 calibrate auto-channel-select disable calibrate auto-txpower-select disableradio 1channel 40mhz-plus 157eirp 127coverage distance 4 calibrate auto-channel-select disable calibrate auto-txpower-select disableap-id 3 type-id 39 ap-mac dcd2-fc96-e4c0 ap-sn 210235557610DB000046ap-name AP_3ap-group ap-group3radio 0channel 20mhz 11eirp 127calibrate auto-channel-select disable calibrate auto-txpower-select disableradio 1channel 40mhz-plus 149coverage distance 4 calibrate auto-channel-select disable calibrate auto-txpower-select disable
#
return/span/span
