轉載請注明以下內(nèi)容：

來源：公眾號【網(wǎng)絡技術干貨圈】

作者：圈圈

ID：wljsghq

最簡單的WLAN三層組網(wǎng)實驗

1、拓撲圖

2、組網(wǎng)配置

SW1配置：

[SW1]vlanbatch10101102
//放行VLAN
[SW1]interfaceGigabitEthernet0/0/1
[SW1-GigabitEthernet0/0/1]portlink-typetrunk
[SW1-GigabitEthernet0/0/1]porttrunkpvidvlan100
[SW1-GigabitEthernet0/0/1]porttrunkallow-passvlan100to101
//放行VLAN
[SW1]interfaceGigabitEthernet0/0/2
[SW1-GigabitEthernet0/0/2]portlink-typetrunk
[SW1-GigabitEthernet0/0/2]porttrunkallow-passvlan10101
//配置網(wǎng)關
[SW1]interfaceVlanif10
[SW1-Vlanif10]ipaddress192.168.13.1255.255.255.0

[SW1]interfaceVlanif100
[SW1-Vlanif100]ipaddress192.168.100.254255.255.255.0
[SW1-Vlanif100]dhcpselectinterface
[SW1-Vlanif100]dhcpserveroption43sub-option2ip-address192.168.13.2

[SW1]interfaceVlanif101
[SW1-Vlanif101]ipaddress192.168.101.254255.255.255.0
[SW1-Vlanif101]dhcpselectinterface

查看SW1中mac地址

00e0-fc4e-5810是AP的mac地址后面有用

[SW1]dismac-address
MACaddresstableofslot0:
-------------------------------------------------------------------------------
MACAddressVLAN/PEVLANCEVLANPortTypeLSP/LSR-ID
VSI/SIMAC-Tunnel
-------------------------------------------------------------------------------
00e0-fc63-169810--GE0/0/2dynamic0/-
00e0-fc4e-5810100--GE0/0/1dynamic0/-
-------------------------------------------------------------------------------
Totalmatchingitemsonslot0displayed=2

AC1配置

[AC]vlanbatch10101

//放行VLAN
[AC]interfaceGigabitEthernet0/0/1
[AC-GigabitEthernet0/0/1]portlink-typetrunk
[AC-GigabitEthernet0/0/1]porttrunkallow-passvlan10101

//配置IP地址
[AC]interfaceVlanif10
[AC-Vlanif10]ipaddress192.168.13.2255.255.255.0
[AC]capwapsourceip-address192.168.13.2

//配置默認路由使AP與AC互通
[AC]iproute-static192.168.100.024192.168.13.1

//配置AP上線
[AC]wlan
[AC-wlan-view]ap-id0ap-mac00e0-fc63-1698

查看ap是否以及上線

0 00e0-fc4e-5810 00e0-fc4e-5810 default 192.168.100.253 AP2050DN nor
0 14S

這里為nor即為已上線

[AC]disapall
Info:Thisoperationmaytakeafewseconds.Pleasewaitforamoment.done.
TotalAPinformation:
nor:normal[1]
--------------------------------------------------------------------------------
----------------------
IDMACNameGroupIPTypeState
STAUptime
--------------------------------------------------------------------------------
----------------------
000e0-fc4e-581000e0-fc4e-5810default192.168.100.253AP2050DNnor
014S
--------------------------------------------------------------------------------
----------------------
Total:1

AC模板配置

[AC]wlan
[AC-wlan-view]ssid-profilenameljr//ljr為自定義名字
[AC-wlan-ssid-prof-ljr]ssidlinjianrong//linjianrong可以理解為WiFi的名字
[AC-wlan-ssid-prof-ljr]q

[AC-wlan-view]security-profilenameljr//ljr為自定義名字
[AC-wlan-sec-prof-ljr]securitywpa2pskpass-phrase2018060301324tkip
Warning:Thecurrentpasswordistoosimple.Forthesakeofsecurity,youarea
dvisedtosetapasswordcontainingatleasttwoofthefollowing:lowercaselet
tersatoz,uppercaselettersAtoZ,digits,andspecialcharacters.Continue?
[Y/N]:y
Warning:Ifthewmmdisablecommand,TKIP,WEP,orradiotypeof802.11a/b/gis
configured,thefunctionofdenyingaccessoflegacySTAscannottakeeffect.
這里的2018060301324為密碼
[AC-wlan-sec-prof-ljr]q

[AC-wlan-view]vap-profilenameljr
[AC-wlan-vap-prof-ljr]forward-modedirect-forward//direct-forward為直接轉發(fā)模式
[AC-wlan-vap-prof-ljr]service-vlanvlan-id101//管理的vlan，即ap下面管理的PC
[AC-wlan-vap-prof-ljr]ssid-profileljr//ssid模塊
[AC-wlan-vap-prof-ljr]security-profileljr//安全模塊

[AC-wlan-view]ap-groupnamedefault
[AC-wlan-ap-group-default]vap-profileljrwlan1radioall
Info:Thisoperationmaytakeafewseconds,pleasewait...done.

上面的敲完后會出現(xiàn)下面的情況

雙擊1、2，輸入密碼2018060301324，點擊確定完成連接

可以看到已經(jīng)連上了

雙擊STA1，在命令行輸入ipconfig查看是否已經(jīng)獲取IP地址

到此為止，整個實驗完成。

3、總結：

（1）在ENSP中觀察不到AP上線可能需要重啟AP；

（2）AP與192.168.13.2IP地址需要互通，AP才可能上線；