1.交换机的配置
接口g0/0/10和g0/0/11加入vlan10,接口g0/0/1加入vlan10-vlan14、vlan801、vlan1102
[SW]vlan batch 10 to 14 801 1102
[SW-GigabitEthernet0/0/10]port link-type trunk
[SW-GigabitEthernet0/0/10]port trunk pvid vlan 10
[SW-GigabitEthernet0/0/10]port trunk allow-pass vlan 10 to 14
[SW-GigabitEthernet0/0/11]port link-type trunk
[SW-GigabitEthernet0/0/11]port trunk pvid vlan 10
[SW-GigabitEthernet0/0/11]port trunk allow-pass vlan 10 to 14
[SW-GigabitEthernet0/0/1]port link-type trunk
[SW-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 to 14 801 1102
[SW-GigabitEthernet0/0/23]port link-type trunk
[SW-GigabitEthernet0/0/23]port trunk pvid vlan 1102
创建vlanif801接口,用于与AC通信
[SW]int Vlanif 801
[SW-Vlanif801]ip add 10.1.201.1 24
创建loopback0口模拟公网
[SW]int lo0
[SW-LoopBack0]ip add 101.101.101.101 32
创建各vlanif接口,作为各vlan的网关
[SW-Vlanif10]ip add 10.1.10.1 24
[SW-Vlanif11]ip add 10.1.11.1 24
[SW-Vlanif12]ip add 10.1.12.1 24
[SW-Vlanif13]ip add 10.1.13.1 24
[SW-Vlanif14]ip add 10.1.14.1 24
2.配置AC基本信息
[AC]vlan batch 10 to 14 801
[AC-GigabitEthernet0/0/8]port link-type trunk
[AC-GigabitEthernet0/0/8]port trunk allow-pass vlan 10 to 14 801
检查vlan配置是否正确
配置vlan相应的三层IP地址
[AC]int Vlanif 10
[AC-Vlanif10]ip add 10.1.10.100 24
[AC-Vlanif10]int Vlanif 11
[AC-Vlanif11]ip add 10.1.11.100 24
[AC-Vlanif11]int Vlanif 12
[AC-Vlanif12]ip add 10.1.12.100 24
[AC-Vlanif12]int Vlanif 13
[AC-Vlanif13]ip add 10.1.13.100 24
[AC-Vlanif13]int Vlanif 14
[AC-Vlanif14]ip add 10.1.14.100 24
[AC-Vlanif14]int Vlanif 801
[AC-Vlanif801]ip add 10.1.201.100 24
检查配置的接口状态
配置静态默认路由指向交换机
[AC]ip route-static 0.0.0.0 0.0.0.0 10.1.201.1
ping公网地址
3.创建ap组
[AC]wlan
[AC-wlan-view]ap-group name ap-g
4.配置AP上线
在AC上开启DHCP服务,为STA和AP分配IP地址
[AC]dhcp enable
[AC]ip pool ap
[AC-ip-pool-ap]network 10.1.10.0 mask 24
[AC-ip-pool-ap]gateway-list 10.1.10.1
[AC-ip-pool-ap]option 43 sub-option 3 ascii 10.1.201.100
[AC-Vlanif10]dhcp select global
[AC-Vlanif10]ip pool sta1
[AC-ip-pool-sta1]network 10.1.11.0 mask 24
[AC-ip-pool-sta1]gateway-list 10.1.11.1
[AC]ip pool sta2
[AC-ip-pool-sta2]network 10.1.12.0 mask 24
[AC-ip-pool-sta2]gateway-list 10.1.12.1
[AC]ip pool sta3
[AC-ip-pool-sta3]network 10.1.13.0 mask 24
[AC-ip-pool-sta3]gateway-list 10.1.13.1
[AC]ip pool sta4
[AC-ip-pool-sta4]network 10.1.14.0 mask 24
[AC-ip-pool-sta4]gateway-list 10.1.14.1
在AC各vlanif接口下使能DHCP功能
[AC-Vlanif10]dhcp select global
[AC-Vlanif11]dhcp select global
[AC-Vlanif12]dhcp select global
[AC-Vlanif13]dhcp select global
[AC-Vlanif14]dhcp select global
配置vlan pool作为业务vlan,vlan分配算法为hash
[AC]vlan pool sta-p1
[AC-vlan-pool-sta-p1]vlan 11 12
[AC-vlan-pool-sta-p1]assignment hash
[AC]vlan pool sta-p2
[AC-vlan-pool-sta-p2]vlan 13 14
[AC-vlan-pool-sta-p2]assignment hash
配置域管理模板
[AC-wlan-view]regulatory-domain-profile name dom1
[AC-wlan-regulate-domain-dom1]country-code CN
配置AC源接口
[AC]capwap source interface Vlanif 801
配置AP认证:MAC认证
[AC-wlan-view]ap auth-mode mac-auth
[AC-wlan-view]ap-mac 00e0-fcdb-19a0 ap-id 0
[AC-wlan-ap-0]ap-group ap-g
[AC-wlan-ap-0]ap-name ap1
[AC-wlan-view]ap-mac 00e0-fc5d-6870 ap-id 1
[AC-wlan-ap-1]ap-name ap2
[AC-wlan-ap-1]ap-group ap-g
查看AP状态
5.配置wlan业务参数
创建安全模板及其安全策略
[AC-wlan-view]security-profile name yw1
[AC-wlan-sec-prof-yw1]security open
[AC-wlan-view]security-profile name yw2
[AC-wlan-sec-prof-yw2]security wpa2 psk pass-phrase a1234567 aes
创建SSID模板
[AC-wlan-view]ssid-profile name yw1
[AC-wlan-ssid-prof-yw1]ssid yw1
[AC-wlan-view]ssid-profile name yw2
[AC-wlan-ssid-prof-yw2]ssid yw2
创建vap模板及其数据转发模式,引用安全模板和ssid模板
[AC-wlan-view]vap-profile name yw1
[AC-wlan-vap-prof-yw1]forward-mode tunnel
[AC-wlan-vap-prof-yw1]service-vlan vlan-pool sta-p1
[AC-wlan-vap-prof-yw1]security-profile yw1
[AC-wlan-vap-prof-yw1]ssid-profile yw1
[AC-wlan-view]vap-profile name yw2
[AC-wlan-vap-prof-yw2]forward-mode direct-forward
[AC-wlan-vap-prof-yw2]service-vlan vlan-pool sta-p2
[AC-wlan-vap-prof-yw2]security-profile yw2
[AC-wlan-vap-prof-yw2]ssid-profile yw2
配置AP组引用域管理模板和vap模板
[AC-wlan-view]ap-group name ap-g
[AC-wlan-ap-group-ap-g]vap-profile yw1 wlan 1 radio all
[AC-wlan-ap-group-ap-g]vap-profile yw2 wlan 2 radio all
[AC-wlan-ap-group-ap-g]regulatory-domain-profile dom1
查看vap状态
连接无线终端,ping通公网地址(101.101.101.101)
6.使能射频调优功能
关闭信道和发送功率的自动选择功能,改为收到手动触发射频调优
[AC-wlan-view]rrm-profile name wlan-net
[AC-wlan-rrm-prof-wlan-net]calibrate auto-channel-select disable
[AC-wlan-rrm-prof-wlan-net]calibrate auto-txpower-select disable
[AC-wlan-view]calibrate enable manual
[AC-wlan-view]calibrate manual startup
创建RRM模板:默认信道和发送功率都是自动选择,如果关闭了需要打开
[AC-wlan-view]rrm-profile name wlan-net
[AC-wlan-rrm-prof-wlan-net]undo calibrate auto-channel-select disable
[AC-wlan-rrm-prof-wlan-net]undo calibrate auto-txpower-select disable
创建空口扫描模板:默认空口扫描信道集合为AP对应国家支持的所有信道
[AC-wlan-view]air-scan-profile name wlan-airscan
[AC-wlan-air-scan-prof-wlan-airscan]scan-channel-set country-channel
[AC-wlan-air-scan-prof-wlan-airscan]scan-period 80 //扫描持续时间80毫秒
[AC-wlan-air-scan-prof-wlan-airscan]scan-interval 80000 //扫描间隔80000毫秒
创建2G和5G射频模板,应引用RRM模板和空口扫描模板
[AC-wlan-view]radio-2g-profile name rad2g
[AC-wlan-radio-2g-prof-rad2g]rrm-profile wlan-net
[AC-wlan-radio-2g-prof-rad2g]air-scan-profile wlan-airscan
[AC-wlan-view]radio-5g-profile name rad5g
[AC-wlan-radio-5g-prof-rad5g]rrm-profile wlan-net
[AC-wlan-radio-5g-prof-rad5g]air-scan-profile wlan-airscan
AP组引用2G和5G射频模板
[AC-wlan-view]ap-group name ap-g
[AC-wlan-ap-group-ap-g]radio-2g-profile rad2g radio all
[AC-wlan-ap-group-ap-g]radio-5g-profile rad5g radio all
开启射频调优前检查所有AP射频信息
配置射频调优模式为手动调优,并触发射频调优:默认为自动模式
[AC-wlan-view]calibrate enable manual
[AC-wlan-view]calibrate manual startup
STA连接yw2无线网络后,查看用户连接状况
推荐将射频调优改为定时模式,选择业务空闲时段
[AC-wlan-view]calibrate enable schedule time 03:00:00
7.配置动态负载均衡
[AC-wlan-view]rrm-profile name wlan-net
[AC-wlan-rrm-prof-wlan-net]sta-load-balance dynamic enable
[AC-wlan-rrm-prof-wlan-net]sta-load-balance dynamic start-threshold 15
[AC-wlan-rrm-prof-wlan-net]sta-load-balance dynamic gap-threshold 25
配置信道切换业务不中断功能:默认开启
[AC-wlan-view]radio-2g-profile name rad2g
[AC-wlan-radio-2g-prof-rad2g]undo channel-switch announcement disable
[AC-wlan-radio-2g-prof-rad2g]channel-switch mode continue-transmitting
[AC-wlan-view]radio-5g-profile name rad5g
[AC-wlan-radio-5g-prof-rad5g]undo channel-switch announcement disable
[AC-wlan-radio-5g-prof-rad5g]channel-switch mode continue-transmitting
STA连接yw2无线网,查看连接情况
查看动态负载均衡配置
在AC执行display load-balance sta mac-address,可查看参与动态负载均衡的AP射频
8.配置频谱导航功能
在vap模板下使能频谱导航功能:默认开启
[AC-wlan-view]vap-profile name yw1
[AC-wlan-vap-prof-yw1]undo band-steer disable
[AC-wlan-view]vap-profile name yw2
[AC-wlan-vap-prof-yw2]undo band-steer disable
在RRM模板下配置频谱导航的负载均衡:起始门限15个,差值门限25%
[AC-wlan-view]rrm-profile name wlan-net
[AC-wlan-rrm-prof-wlan-net]band-steer balance start-threshold 15
[AC-wlan-rrm-prof-wlan-net]band-steer balance gap-threshold 25
STA连接yw2无线网查看已经连入无线网的用户
查看动态负载均衡配置
查看频谱导航负载均衡配置
查看5G和2G射频引用了RRM模板
查看AP组引用了2G射频模板
华为WLAN射频资源管理
猜你喜欢
转载自blog.51cto.com/13699905/2621973
今日推荐
周排行