全部版块 我的主页
论坛 会计与财务管理论坛 七区 会计与财务管理 企业分析报告
36 0
2025-12-03

一、设备基础配置

以下为各网络设备的基础配置流程,包括交换机SWA、SWB以及无线控制器AC的初始化设置和接口划分。

SWA 配置步骤:

<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]undo info-center enable
Info: Information center is disabled.
[Huawei]sysname SWA
[SWA]vlan batch 10 11 12 99
Info: This operation may take a few seconds. Please wait for a moment...done.
[SWA]interface GigabitEthernet0/0/1
[SWA-GigabitEthernet0/0/1]port link-type trunk
[SWA-GigabitEthernet0/0/1]port trunk pvid vlan 10
[SWA-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 11
[SWA-GigabitEthernet0/0/1]interface GigabitEthernet0/0/2
[SWA-GigabitEthernet0/0/2]port link-type trunk
[SWA-GigabitEthernet0/0/2]port trunk pvid vlan 10
[SWA-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 12
[SWA-GigabitEthernet0/0/2]interface GigabitEthernet0/0/24
[SWA-GigabitEthernet0/0/24]quit
[SWA]vlan 100
[SWA-vlan100]interface GigabitEthernet0/0/24
[SWA-GigabitEthernet0/0/24]port link-type access
[SWA-GigabitEthernet0/0/24]port default vlan 100
[SWA-GigabitEthernet0/0/24]interface Vlanif100
[SWA-Vlanif100]ip address 172.16.1.1 255.255.255.0
[SWA-Vlanif100]quit
[SWA]quit
<SWA>save

SWB 配置步骤:

<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]undo info-center enable
Info: Information center is disabled.
[Huawei]sysname SWB
[SWB]vlan batch 10 11 12 99 101
Info: This operation may take a few seconds. Please wait for a moment...done.
[SWB]interface Vlanif99
[SWB-Vlanif99]ip address 10.0.99.253 255.255.255.0
[SWB-Vlanif99]interface Vlanif101
[SWB-Vlanif101]ip address 172.16.1.2 255.255.255.0
[SWB-Vlanif101]interface GigabitEthernet0/0/24
[SWB-GigabitEthernet0/0/24]port link-type access
[SWB-GigabitEthernet0/0/24]port default vlan 101
[SWB-GigabitEthernet0/0/24]interface GigabitEthernet0/0/1
[SWB-GigabitEthernet0/0/1]port link-type access
[SWB-GigabitEthernet0/0/1]port default vlan 99
[SWB-GigabitEthernet0/0/1]quit
[SWB]quit
<SWB>save

AC 控制器配置步骤:

<AC6605>sys
Enter system view, return user view with Ctrl+Z.
[AC6605]undo info-center enable
Info: Information center is disabled.
[AC6605]sysname AC
[AC]vlan 99
Info: This operation may take a few seconds. Please wait for a moment...done.
[AC-vlan99]interface Vlanif99
[AC-Vlanif99]ip address 10.0.99.254 255.255.255.0
[AC-Vlanif99]interface GigabitEthernet0/0/1
[AC-GigabitEthernet0/0/1]port link-type access
[AC-GigabitEthernet0/0/1]port default vlan 99
[AC-GigabitEthernet0/0/1]quit
[AC]quit
<AC>save

二、在 SWB 上部署 DHCP 服务

为实现自动地址分配功能,在 SWB 设备上配置 DHCP 地址池,具体操作如下:

[SWB]ip pool ap
Info: It's successful to create an IP address pool.

该地址池将用于向接入的无线接入点(AP)设备分配IP地址,确保其能够正常注册并与AC建立通信。

三、SWA设备上配置VLAN 10、VLAN 11与VLAN 12的中继服务

在SWA上启用DHCP功能,并为多个VLAN接口配置IP地址及DHCP中继:

[SWA]dhcp ena
Info: The operation may take a few seconds. Please wait for a moment.done.
[SWA]
[SWA]int vlan 10
[SWA-Vlanif10]ip add 10.0.10.254 24
[SWA-Vlanif10]dhcp select relay
[SWA-Vlanif10]dhcp relay server-ip 172.16.1.2
[SWA-Vlanif10]int vlan 11
[SWA-Vlanif11]ip add 10.0.11.254 24
[SWA-Vlanif11]dhcp select relay
[SWA-Vlanif11]dhcp relay server-ip 172.16.1.2
[SWA-Vlanif11]int vlan 12
[SWA-Vlanif12]ip add 10.0.12.254 24
[SWA-Vlanif12]dhcp select relay
[SWA-Vlanif12]dhcp relay server-ip 172.16.1.2
[SWA-Vlanif12]qu

在SWB设备上,对VLAN 101接口进行配置,指定其使用全局DHCP地址池:

SWB:
[SWB]int vlan 101
[SWB-Vlanif101]dhcp select global

四、在SWA、SWB以及AC设备之间配置OSPF路由协议以实现网络互通

首先在SWA设备上进入OSPF进程1,并将相关网段宣告进Area 0:

[SWA]ospf 1
[SWA-ospf-1]ar 0
[SWA-ospf-1-area-0.0.0.0]network 10.0.10.0 0.0.0.255
[SWA-ospf-1-area-0.0.0.0]network 10.0.11.0 0.0.0.255
[SWA-ospf-1-area-0.0.0.0]network 10.0.12.0 0.0.0.255
[SWA-ospf-1-area-0.0.0.0]network 172.16.1.0 0.0.0.255
[SWA-ospf-1-area-0.0.0.0]qu

随后在SWB设备上配置OSPF,宣告连接AC和核心网络的子网:

[SWB]ospf 1
[SWB-ospf-1]ar 0
[SWB-ospf-1-area-0.0.0.0]network 172.16.1.0 0.0.0.255
[SWB-ospf-1-area-0.0.0.0]network 10.0.99.0 0.0.0.255
[SWB-ospf-1-area-0.0.0.0]qu
[SWB-ospf-1]

最后在AC设备上启动OSPF服务,并将其管理VLAN所在的网段加入到骨干区域:

AC:
[AC]ospf 1
[AC-ospf-1]ar 0
[AC-ospf-1-area-0.0.0.0]network 10.0.99.0 0.0.0.255
[AC-ospf-1-area-0.0.0.0]qu

五、无线控制器(AC)的基础配置

进入系统视图后设置CAPWAP隧道源接口为VLAN 99,并创建名为ap-group1的AP组:

<AC>sys
Enter system view, return user view with Ctrl+Z.
[AC]capwap source int vlan 99
[AC]wlan
[AC-wlan-view]ap-group name ap-group1

IP地址池配置部分如下:

创建用于AP设备分配地址的IP池,指定网络范围、网关及Option 43选项指向AC自身地址:

[SWB-ip-pool-ap]network 10.0.10.0 mask 24
[SWB-ip-pool-ap]gateway-list 10.0.10.254
[SWB-ip-pool-ap]option 43 sub-option 3 ascii 10.0.99.254
[SWB-ip-pool-ap]ip pool vlan11
Info:It's successful to create an IP address pool.

接着配置VLAN 11对应的地址池,包含网络号、默认网关和DNS服务器:

[SWB-ip-pool-vlan10]network 10.0.11.0 mask 24
[SWB-ip-pool-vlan10]gateway-list 10.0.11.254
[SWB-ip-pool-vlan10]dns-list 114.114.114.114
[SWB-ip-pool-vlan10]ip pool vlan12
Info:It's successful to create an IP address pool.

最后完成VLAN 12的地址池设置:

[SWB-ip-pool-vlan20]network 10.0.12.0 mask 24
[SWB-ip-pool-vlan20]gateway-list 10.0.12.254
[SWB-ip-pool-vlan20]dns-list 114.114.114.114
[SWB-ip-pool-vlan20]qu
[AC-wlan-view]ap auth-mode mac-auth
[AC-wlan-view]ap-id 0 ap-mac 00e0-fcf7-0210
[AC-wlan-ap-0]ap-name area_1
[AC-wlan-ap-0]ap-group ap-group1
Warning: This operation may cause AP reset. If the country code changes, it will  
clear channel, power and antenna gain configurations of the radio, Whether to c  
ontinue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.. done.
[AC-wlan-ap-0]qu

[AC-wlan-view]ap-id 1 ap-mac 00e0-fc5a-6ba0
[AC-wlan-ap-1]ap-name area_2
[AC-wlan-ap-1]ap-group ap-group1
Warning: This operation may cause AP reset. If the country code changes, it will  
clear channel, power and antenna gain configurations of the radio, Whether to c  
ontinue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.. done.
[AC-wlan-ap-1]qu

[AC-wlan-view]dis ap all


[AC-wlan-view]security-profile name wlan-net1
[AC-wlan-sec-prof-wlan-net1]security wpa-wpa2 psk pass-phrase abc12345 aes
[AC-wlan-sec-prof-wlan-net1]qu

[AC-wlan-view]ssid-profile name wlan-net1
[AC-wlan-ssid-prof-wlan-net1]ssid Sales
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-ssid-prof-wlan-net1]qu

[AC-wlan-view]vap-profile name wlan-net1
[AC-wlan-vap-prof-wlan-net1]forward-mode direct-forward
[AC-wlan-vap-prof-wlan-net1]service-vlan vlan-id 11
[AC-wlan-vap-prof-wlan-net1]security-profile wlan-net1
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-vap-prof-wlan-net1]ssid-profile wlan-net1
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-vap-prof-wlan-net1]qu

[AC-wlan-view]security-profile name wlan-net2
[AC-wlan-sec-prof-wlan-net2]security wpa-wpa2 psk pass-phrase abc12345 aes
[AC-wlan-sec-prof-wlan-net2]qu

[AC-wlan-ap-group-ap-group1]regulatory-domain-profile default
Warning: Modifying the country code will clear channel, power and antenna gain c  
onfigurations of the radio and reset the AP. Continue?[Y/N]:y
[AC-wlan-ap-group-ap-group1]qu

六、无线访问配置

[AC-wlan-view]ssid-profile name wlan-net2
[AC-wlan-ssid-prof-wlan-net2]ssid Finances
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-ssid-prof-wlan-net2]qu

[AC-wlan-view]vap-profile name wlan-net2
[AC-wlan-vap-prof-wlan-net2]forward-mode direct-forward
[AC-wlan-vap-prof-wlan-net2]service-vlan vlan-id 12
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-vap-prof-wlan-net2]security-profile wlan-net2
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-vap-prof-wlan-net2]ssid-profile wlan-net2
Info: This operation may take a few seconds, please wait.done.
[AC-wlan-vap-prof-wlan-net2]qu

[AC-wlan-view]ap-group name ap-group1
[AC-wlan-ap-group-ap-group1]vap-profile wlan-net1 wlan 1 radio all
Info: This operation may take a few seconds, please wait...done.
[AC-wlan-ap-group-ap-group1]vap-profile wlan-net2 wlan 2 radio all
Info: This operation may take a few seconds, please wait...done.
[AC-wlan-ap-group-ap-group1]qu

[AC-wlan-view]qu
[AC]qu
<AC>save

二维码

扫码加我 拉你入群

请注明:姓名-公司-职位

以便审核进群资格,未注明则拒绝

栏目导航
热门文章
推荐文章

说点什么

分享

扫码加好友,拉您进群
各岗位、行业、专业交流群