華為WLAN項(xiàng)目專業(yè)資料樣本

配備大型網(wǎng)絡(luò)WLAN基本業(yè)務(wù)示例配備流程WLAN不同特性和功能需要在不同類型模板下進(jìn)行配備和維護(hù)，這些模板統(tǒng)稱為WLAN模板，如域管理模板、射頻模板、VAP模板、AP系統(tǒng)模板、AP有線口模板、WIDS模板、WDS模板、Mesh模板。當(dāng)顧客在配備WLAN業(yè)務(wù)功能時(shí)，需要在相應(yīng)功能WLAN模板中進(jìn)行參數(shù)配備，配備完畢后，須將此模板引用到AP組或AP中，配備下發(fā)到AP，進(jìn)而配備功能在AP上生效。由于模板之間是存在各互相引用關(guān)系，因而在顧客配備過程中，需要提前理解各個(gè)模板之間存在邏輯關(guān)系。模板邏輯關(guān)系和基本配備流程請(qǐng)參見WLAN業(yè)務(wù)配備流程。組網(wǎng)需求如圖1所示，某大型公司現(xiàn)網(wǎng)中，匯聚互換機(jī)Switch_B下行連接接入互換機(jī)Switch_A，上行連接Router。顧客但愿能在盡量少更改既有組網(wǎng)架構(gòu)狀況下布置WLAN網(wǎng)絡(luò)。顧客詳細(xì)需求為：公司辦公樓前臺(tái)大廳布置SSID為“guest”無(wú)線網(wǎng)絡(luò)，為來(lái)訪客戶提供無(wú)線網(wǎng)絡(luò)接入。辦公區(qū)域布置SSID為“employee”無(wú)線網(wǎng)絡(luò)，為公司員工提供無(wú)線網(wǎng)絡(luò)接入。圖1

配備大型網(wǎng)絡(luò)WLAN基本業(yè)務(wù)組網(wǎng)圖

配備思路采用如下思路配備大型網(wǎng)絡(luò)WLAN基本業(yè)務(wù)：配備Switch_A和Switch_B，實(shí)現(xiàn)二層網(wǎng)絡(luò)互通；配備Switch_B、Router和AC，實(shí)現(xiàn)三層網(wǎng)絡(luò)互通。在Router上配備基于全局地址池DHCP服務(wù)器為AP和STA分派IP地址。配備VLANpool，用于作為業(yè)務(wù)VLAN。配備AP上線。創(chuàng)立AP組，用于將需要進(jìn)行相似配備AP都加入到AP組，實(shí)現(xiàn)統(tǒng)一配備。配備AC系統(tǒng)參數(shù)，涉及國(guó)家碼、AC與AP之間通信源接口。配備AP上線認(rèn)證方式并離線導(dǎo)入AP，實(shí)現(xiàn)AP正常上線。配備WLAN業(yè)務(wù)參數(shù)，實(shí)現(xiàn)STA訪問WLAN網(wǎng)絡(luò)功能。表1

數(shù)據(jù)規(guī)劃表配備項(xiàng)數(shù)據(jù)DHCP服務(wù)器Router作為DHCP服務(wù)器為STA和AP分派IP地址APIP地址池10.23.100.2～10.23.100.254/24STAIP地址池訪客顧客IP地址范疇：10.23.101.2～10.23.101.254/2410.23.102.2～10.23.102.254/24公司員工IP地址范疇：10.23.103.2～10.23.103.254/2410.23.104.2～10.23.104.254/24VLANpool名稱：sta-pool1為訪客顧客分派IP地址。VLANpool中加入VLAN：101、102名稱：sta-pool2為公司員工分派IP地址。VLANpool中加入VLAN：103、104AC源接口IP地址VLANIF200：10.45.200.1/24AP組名稱：guest引用模板：VAP模板guest、域管理模板domain1名稱：employee引用模板：VAP模板e(cuò)mployee、域管理模板domain1域管理模板名稱：domain1國(guó)家碼：CNSSID模板名稱：guestSSID名稱：guest名稱：employeeSSID名稱：employee安全模板名稱：guest安全方略：WPA2+PSK+AES密碼：a1234567名稱：employee安全方略：WPA2+PSK+AES密碼：b1234567VAP模板名稱：guest轉(zhuǎn)發(fā)模式：隧道轉(zhuǎn)發(fā)業(yè)務(wù)VLAN：sta-pool1引用模板：SSID模板guest、安全模板guest名稱：employee轉(zhuǎn)發(fā)模式：隧道轉(zhuǎn)發(fā)業(yè)務(wù)VLAN：sta-pool2引用模板：SSID模板e(cuò)mployee、安全模板e(cuò)mployee

闡明：本配備中Switch_A采用是華為盒式互換機(jī)，Switch_B采用是框式互換機(jī)。使用VLANpool作為業(yè)務(wù)VLAN并且業(yè)務(wù)數(shù)據(jù)轉(zhuǎn)發(fā)模式為直接轉(zhuǎn)發(fā)時(shí)，由于VLANpool下普通加入各種VLAN，組網(wǎng)中需要配備各種設(shè)備接口加入這些VLAN，容易產(chǎn)生較多廣播域。為減少?gòu)V播域數(shù)目，可以配備業(yè)務(wù)數(shù)據(jù)轉(zhuǎn)發(fā)模式為隧道轉(zhuǎn)發(fā)。純組播報(bào)文由于合同規(guī)定在無(wú)線空口沒有ACK機(jī)制保障，且無(wú)線空口鏈路不穩(wěn)定，為了純組播報(bào)文可以穩(wěn)定發(fā)送，普通會(huì)以低速報(bào)文形式發(fā)送。如果網(wǎng)絡(luò)側(cè)有大量異常組播流量涌入，則會(huì)導(dǎo)致無(wú)線空口擁堵。為了減小大量低速組播報(bào)文對(duì)無(wú)線網(wǎng)絡(luò)導(dǎo)致沖擊，建議配備組播報(bào)文抑制功能。配備前請(qǐng)確認(rèn)與否有組播業(yè)務(wù)，如果有，請(qǐng)謹(jǐn)慎配備限速值。業(yè)務(wù)數(shù)據(jù)轉(zhuǎn)發(fā)方式采用直接轉(zhuǎn)發(fā)時(shí)，建議在直連AP互換機(jī)接口上配備組播報(bào)文抑制。業(yè)務(wù)數(shù)據(jù)轉(zhuǎn)發(fā)方式采用隧道轉(zhuǎn)發(fā)時(shí)，建議在AC流量模板下配備組播報(bào)文抑制。配備辦法請(qǐng)參見如何配備組播報(bào)文抑制，減小大量低速組播報(bào)文對(duì)無(wú)線網(wǎng)絡(luò)導(dǎo)致沖擊？建議在設(shè)備與AP直接相連接口上配備端口隔離，如果不配備端口隔離，特別是業(yè)務(wù)數(shù)據(jù)轉(zhuǎn)發(fā)方式采用直接轉(zhuǎn)發(fā)時(shí)，也許會(huì)在VLAN內(nèi)存在不必要廣播報(bào)文，或者導(dǎo)致不同AP間WLAN顧客二層互通問題。隧道轉(zhuǎn)發(fā)模式下，管理VLAN和業(yè)務(wù)VLAN不能配備為同一VLAN。操作環(huán)節(jié)配備網(wǎng)絡(luò)互通#配備接入互換機(jī)Switch_A。將接口GE0/0/1～GE0/0/5都加入VLAN100（管理VLAN）。接口GE0/0/1～GE0/0/4下配備完全一致，以配備接口GE0/0/1為例，接口GE0/0/2～GE0/0/4配備請(qǐng)參照接口GE0/0/1。<HUAWEI>system-view[HUAWEI]sysnameSwitch_A[Switch_A]vlanbatch100[Switch_A]interfacegigabitethernet0/0/1[Switch_A-GigabitEthernet0/0/1]portlink-typetrunk[Switch_A-GigabitEthernet0/0/1]porttrunkpvidvlan100[Switch_A-GigabitEthernet0/0/1]porttrunkallow-passvlan100[Switch_A-GigabitEthernet0/0/1]port-isolateenable[Switch_A-GigabitEthernet0/0/1]quit[Switch_A]interfacegigabitethernet0/0/5[Switch_A-GigabitEthernet0/0/5]portlink-typetrunk[Switch_A-GigabitEthernet0/0/5]porttrunkallow-passvlan100[Switch_A-GigabitEthernet0/0/5]quit#配備匯聚互換機(jī)Switch_B。配備接口GE1/0/1加入VLAN100，GE1/0/2加入VLAN101～VLAN104和VLAN200，GE1/0/3加入VLAN201。<HUAWEI>system-view[HUAWEI]sysnameSwitch_B[Switch_B]vlanbatch100to104200201[Switch_B]interfacegigabitethernet1/0/1[Switch_B-GigabitEthernet1/0/1]portlink-typetrunk[Switch_B-GigabitEthernet1/0/1]porttrunkallow-passvlan100[Switch_B-GigabitEthernet1/0/1]quit[Switch_B]interfacegigabitethernet1/0/2[Switch_B-GigabitEthernet1/0/2]portlink-typetrunk[Switch_B-GigabitEthernet1/0/2]porttrunkallow-passvlan101to104200[Switch_B-GigabitEthernet1/0/2]quit[Switch_B]interfacegigabitethernet1/0/3[Switch_B-GigabitEthernet1/0/3]portlink-typetrunk[Switch_B-GigabitEthernet1/0/3]porttrunkallow-passvlan201[Switch_B-GigabitEthernet1/0/3]quit#在匯聚互換機(jī)Switch_B上創(chuàng)立VLANIF100～VLANIF104、VLANIF200和VLANIF201并配備IP地址。其中VLANIF100為AP網(wǎng)關(guān)，VLANIF101和VLANIF102為訪客顧客網(wǎng)關(guān)，VLANIF103和VLANIF104為公司員工網(wǎng)關(guān)，VLANIF200用于Switch_B與AC通信，VLANIF201用于Switch_B與Router通信。[Switch_B]interfacevlanif100[Switch_B-Vlanif100]ipaddress10.23.100.124[Switch_B-Vlanif100]quit[Switch_B]interfacevlanif101[Switch_B-Vlanif101]ipaddress10.23.101.124[Switch_B-Vlanif101]quit[Switch_B]interfacevlanif102[Switch_B-Vlanif102]ipaddress10.23.102.124[Switch_B-Vlanif102]quit[Switch_B]interfacevlanif103[Switch_B-Vlanif103]ipaddress10.23.103.124[Switch_B-Vlanif103]quit[Switch_B]interfacevlanif104[Switch_B-Vlanif104]ipaddress10.23.104.124[Switch_B-Vlanif104]quit[Switch_B]interfacevlanif200[Switch_B-Vlanif200]ipaddress10.45.200.224[Switch_B-Vlanif200]quit[Switch_B]interfacevlanif201[Switch_B-Vlanif201]ipaddress10.67.201.224[Switch_B-Vlanif201]quit#配備AC連接匯聚互換機(jī)Switch_B接口GE0/0/1加入VLAN101～VLAN104和VLAN200。<AC6605>system-view[AC6605]sysnameAC[AC]vlanbatch101to104200[AC]interfacevlanif200[AC-Vlanif200]ipaddress10.45.200.124[AC-Vlanif200]quit[AC]interfacegigabitethernet0/0/1[AC-GigabitEthernet0/0/1]portlink-typetrunk[AC-GigabitEthernet0/0/1]porttrunkallow-passvlan101to104200[AC-GigabitEthernet0/0/1]quit#配備Router接口GE2/0/0加入VLAN201，并且配備IP地址使Router能與Switch_B通信。<Huawei>system-view[Huawei]sysnameRouter[Router]vlanbatch201[Router]interfacevlanif201[Router-Vlanif201]ipaddress10.67.201.124[Router-Vlanif201]quit[Router]interfacegigabitethernet2/0/0[Router-GigabitEthernet2/0/0]portlink-typetrunk[Router-GigabitEthernet2/0/0]porttrunkallow-passvlan201[Router-GigabitEthernet2/0/0]quit#配備Router到Switch_B路由。[Router]iproute-static10.23.100.02410.67.201.2[Router]iproute-static10.23.101.02410.67.201.2[Router]iproute-static10.23.102.02410.67.201.2[Router]iproute-static10.23.103.02410.67.201.2[Router]iproute-static10.23.104.02410.67.201.2#配備Switch_B缺省路由，下一跳為RouterVLANIF201。[Switch_B]iproute-static0.0.0.00.0.0.010.67.201.1#配備AC到AP路由，下一跳為Switch_BVLANIF200。[AC]iproute-static10.23.100.02410.45.200.2配備DHCP服務(wù)，為AP和STA分派IP地址#配備Switch_B作為DHCP中繼。[Switch_B]dhcpenable[Switch_B]interfacevlanif100[Switch_B-Vlanif100]dhcpselectrelay[Switch_B-Vlanif100]dhcprelayserver-ip10.67.201.1[Switch_B-Vlanif100]quit[Switch_B]interfacevlanif101[Switch_B-Vlanif101]dhcpselectrelay[Switch_B-Vlanif101]dhcprelayserver-ip10.67.201.1[Switch_B-Vlanif101]quit[Switch_B]interfacevlanif102[Switch_B-Vlanif102]dhcpselectrelay[Switch_B-Vlanif102]dhcprelayserver-ip10.67.201.1[Switch_B-Vlanif102]quit[Switch_B]interfacevlanif103[Switch_B-Vlanif103]dhcpselectrelay[Switch_B-Vlanif103]dhcprelayserver-ip10.67.201.1[Switch_B-Vlanif103]quit[Switch_B]interfacevlanif104[Switch_B-Vlanif104]dhcpselectrelay[Switch_B-Vlanif104]dhcprelayserver-ip10.67.201.1[Switch_B-Vlanif104]quit#配備由Router作為DHCP服務(wù)器給AP和STA分派IP地址。AP和AC間為三層網(wǎng)絡(luò)時(shí)需要通過配備Option43向AP告示ACIP地址。[Router]dhcpenable[Router]ippoolap[Router-ip-pool-ap]network10.23.100.0mask24[Router-ip-pool-ap]gateway-list10.23.100.1[Router-ip-pool-ap]option43sub-option3ascii10.45.200.1[Router-ip-pool-ap]quit[Router]ippoolsta1[Router-ip-pool-sta1]network10.23.101.0mask24[Router-ip-pool-sta1]gateway-list10.23.101.1[Router-ip-pool-sta1]quit[Router]ippoolsta2[Router-ip-pool-sta2]network10.23.102.0mask24[Router-ip-pool-sta2]gateway-list10.23.102.1[Router-ip-pool-sta2]quit[Router]ippoolsta3[Router-ip-pool-sta3]network10.23.103.0mask24[Router-ip-pool-sta3]gateway-list10.23.103.1[Router-ip-pool-sta3]quit[Router]ippoolsta4[Router-ip-pool-sta4]network10.23.104.0mask24[Router-ip-pool-sta4]gateway-list10.23.104.1[Router-ip-pool-sta4]quit[Router]interfacevlanif201[Router-Vlanif201]dhcpselectglobal[Router-Vlanif201]quit配備VLANpool，用于作為業(yè)務(wù)VLAN#新建兩個(gè)VLANpool，sta-pool1和sta-pool2，將VLAN101和VLAN102加入sta-pool1，VLAN103和VLAN104加入sta-pool2，配備兩個(gè)VLANpool中VLAN分派算法為“hash”。

闡明：本例VLANpool中VLAN分派算法配備為“hash”。分派算法缺省狀況下為“hash”，如果之前沒有修改其缺省配備，可以不用執(zhí)行命令assignmenthash。本例VLANpool僅以加入VLAN101和VLAN102兩個(gè)VLAN為例，實(shí)際可以配備各種VLAN加入VLANpool，配備辦法與VLAN101和VLAN102一致，也需要在Switch_B上創(chuàng)立相應(yīng)VLANIF接口、配備IP地址，在Router上配備IP地址池。[AC]vlanpoolsta-pool1[AC-vlan-pool-sta-pool1]vlan101102[AC-vlan-pool-sta-pool1]assignmenthash[AC-vlan-pool-sta-pool1]quit[AC]vlanpoolsta-pool2[AC-vlan-pool-sta-pool2]vlan103104[AC-vlan-pool-sta-pool2]assignmenthash[AC-vlan-pool-sta-pool2]quit配備AP上線#創(chuàng)立AP組“guest”和“employee”。[AC]wlan[AC-wlan-view]ap-groupnameguest[AC-wlan-ap-group-guest]quit[AC-wlan-view]ap-groupnameemployee[AC-wlan-ap-group-employee]quit#創(chuàng)立域管理模板，在域管理模板下配備AC國(guó)家碼并在AP組下引用域管理模板。[AC-wlan-view]regulatory-domain-profilenamedomain1[AC-wlan-regulatory-domain-prof-domain1]country-codecn[AC-wlan-regulatory-domain-prof-domain1]quit[AC-wlan-view]ap-groupnameguest[AC-wlan-ap-group-guest]regulatory-domain-profiledomain1Warning：Modifyingthecountrycodewillclearchannel，powerandantennagainconfigurationsoftheradioandresettheAP.Continue?[Y/N]:y[AC-wlan-ap-group-guest]quit[AC-wlan-view]ap-groupnameemployee[AC-wlan-ap-group-employee]regulatory-domain-profiledomain1Warning：Modifyingthecountrycodewillclearchannel，powerandantennagainconfigurationsoftheradioandresettheAP.Continue?[Y/N]:y[AC-wlan-ap-group-employee]quit[AC-wlan-view]quit#配備AC源接口。[AC]capwapsourceinterfacevlanif200#在AC上離線導(dǎo)入AP。將布置在前臺(tái)大廳AP都加入到AP組“guest”，布置在辦公區(qū)域AP都加入到AP組“employee”，并且依照AP布置位置為AP配備名稱，便于從名稱上就可以理解AP布置位置。例如MAC地址為60de-4474-9640AP布置在辦公區(qū)域2樓1號(hào)房間，命名此AP為“office2-1”。

闡明：apauth-mode命令缺省狀況下為MAC認(rèn)證，如果之前沒有修改其缺省配備，可以不用執(zhí)行apauth-modemac-auth。舉例中使用AP為AP6010DN-AGN，具備射頻0和射頻1兩個(gè)射頻。AP6010DN-AGN射頻0為2.4GHz射頻，射頻1為5GHz射頻。[AC]wlan[AC-wlan-view]apauth-modemac-auth[AC-wlan-view]ap-id0ap-mac60de-4476-e360[AC-wlan-ap-0]ap-namelobby-1[AC-wlan-ap-0]ap-groupguestWarning：ThisoperationmaycauseAPreset.Ifthecountrycodechanges，itwillclearchannel，powerandantennagainconfigurationsoftheradio，Whethertocontinue?[Y/N]:y[AC-wlan-ap-0]quit[AC-wlan-view]ap-id1ap-mac60de-4476-e380[AC-wlan-ap-1]ap-namelobby-2[AC-wlan-ap-1]ap-groupguestWarning：ThisoperationmaycauseAPreset.Ifthecountrycodechanges，itwillclearchannel，powerandantennagainconfigurationsoftheradio，Whethertocontinue?[Y/N]:y[AC-wlan-ap-1]quit[AC-wlan-view]ap-id2ap-mac60de-4474-9640[AC-wlan-ap-2]ap-nameoffice2-1[AC-wlan-ap-2]ap-groupemployeeWarning：ThisoperationmaycauseAPreset.Ifthecountrycodechanges，itwillclearchannel，powerandantennagainconfigurationsoftheradio，Whethertocontinue?[Y/N]:y[AC-wlan-ap-2]quit[AC-wlan-view]ap-id3ap-mac60de-4474-9660[AC-wlan-ap-3]ap-nameoffice2-2[AC-wlan-ap-3]ap-groupemployeeWarning：ThisoperationmaycauseAPreset.Ifthecountrycodechanges，itwillclearchannel，powerandantennagainconfigurationsoftheradio，Whethertocontinue?[Y/N]:y[AC-wlan-ap-3]quit#將AP上電后，當(dāng)執(zhí)行命令displayapall查看到AP“State”字段為“nor”時(shí)，表達(dá)AP正常上線。[AC-wlan-view]displayapallTotalAPinformation:nor：normal[4]----------------------------------------------------------------------------------------------IDMACNameGroupIPTypeStateSTAUptime----------------------------------------------------------------------------------------------060de-4474-9640office2-1employee10.23.100.253AP6010DN-AGNnor02H:30M:1S160de-4474-9660office2-2employee10.23.100.251AP6010DN-AGNnor02H:35M:2S260de-4476-e360lobby-1guest10.23.100.254AP6010DN-AGNnor02H:29M:29S360de-4476-e380lobby-2guest10.23.100.252AP6010DN-AGNnor02H:34M:11S----------------------------------------------------------------------------------------------Total：4配備WLAN業(yè)務(wù)參數(shù)#創(chuàng)立名為“guest”和“employee”安全模板，并配備安全方略。

闡明：舉例中以配備WPA2+PSK+AES安全方略為例，密碼分別為“a1234567”和“b1234567”，實(shí)際配備中請(qǐng)依照實(shí)際狀況，配備符合實(shí)際規(guī)定安全方略。[AC-wlan-view]security-profilenameguest[AC-wlan-sec-prof-guest]securitywpa2pskpass-phrasea1234567aes[AC-wlan-sec-prof-guest]quit[AC-wlan-view]security-profilenameemployee[AC-wlan-sec-prof-employee]securitywpa2pskpass-phraseb1234567aes[AC-wlan-sec-prof-employee]quit#創(chuàng)立名為“guest”和“employee”SSID模板，并分別配備SSID名稱為“guest”和“employee”。[AC-wlan-view]ssid-profilenameguest[AC-wlan-ssid-prof-guest]ssidguestWarning：Thisactionmaycauseserviceinterruption.Continue?[Y/N]y[AC-wlan-ssid-prof-guest]quit[AC-wlan-view]ssid-profilenameemployee[AC-wlan-ssid-prof-employee]ssidemployeeWarning：Thisactionmaycauseserviceinterruption.Continue?[Y/N]y[AC-wlan-ssid-prof-employee]quit#創(chuàng)立名為“guest”和“employee”VAP模板，配備業(yè)務(wù)數(shù)據(jù)轉(zhuǎn)發(fā)模式、業(yè)務(wù)VLAN，并且引用安全模板和SSID模板。[AC-wlan-view]vap-profilenameguest[AC-wlan-vap-prof-guest]forward-modetunnelWarning：Thisactionmaycauseserviceinterruption.Continue?[Y/N]y[AC-wlan-vap-prof-guest]service-vlanvlan-poolsta-pool1[AC-wlan-vap-prof-guest]security-profileguest[AC-wlan-vap-prof-guest]ssid-profileguest[AC-wlan-vap-prof-guest]quit[AC-wlan-view]vap-profilenameemployee[AC-wlan-vap-prof-employee]forward-modetunnelWarning：Thisactionmaycauseserviceinterruption.Continue?[Y/N]y[AC-wlan-vap-prof-employee]service-vlanvlan-poolsta-pool2[AC-wlan-vap-prof-employee]security-profileemployee[AC-wlan-vap-prof-employee]ssid-profileemployee[AC-wlan-vap-prof-employee]quit#配備AP組引用VAP模板，AP上射頻0和射頻1都使用VAP模板配備。[AC-wlan-view]ap-groupnameguest[AC-wlan-ap-group-guest]vap-profileguestwlan1radio0[AC-wlan-ap-group-guest]vap-profileguestwlan1radio1[AC-wlan-ap-group-guest]quit[AC-wlan-view]ap-groupnameemployee[AC-wlan-ap-group-employee]vap-profileemployeewlan1radio0[AC-wlan-ap-group-employee]vap-profileemployeewlan1radio1[AC-wlan-ap-group-employee]quit驗(yàn)證配備成果WLAN業(yè)務(wù)配備會(huì)自動(dòng)下發(fā)給AP，配備完畢后，通過執(zhí)行命令displayvapssidguest和displayvapssidemployee查看如下信息，當(dāng)“Status”項(xiàng)顯示為“ON”時(shí)，表達(dá)AP相應(yīng)射頻上VAP已創(chuàng)立成功。[AC-wlan-view]displayvapssidguestWID：WLANID--------------------------------------------------------------------------------APIDAPnameRfIDWIDBSSIDStatusAuthtypeSTASSID--------------------------------------------------------------------------------0lobby-10160DE-4476-E360ONWPA2-PSK1guest0lobby-11160DE-4476-E370ONWPA2-PSK0guest1lobby-20160DE-4476-E380ONWPA2-PSK1guest1lobby-21160DE-4476-E390ONWPA2-PSK0guest-------------------------------------------------------------------------------Total：4[AC-wlan-view]displayvapssidemployeeWID：WLANID--------------------------------------------------------------------------------APIDAPnameRfIDWIDBSSIDStatusAuthtypeSTASSID--------------------------------------------------------------------------------2office2-10160DE-4474-9640ONWPA2-PSK0employee2office2-11160DE-4474-9650ONWPA2-PSK1employee3office2-20160DE-4474-9660ONWPA2-PSK0employee3office2-21160DE-4474-9670ONWPA2-PSK1employee-------------------------------------------------------------------------------Total：4STA搜索到名為“guest”和“employee”無(wú)線網(wǎng)絡(luò)，分別輸入密碼“a1234567”和“b1234567”并正常關(guān)聯(lián)后，在AC上執(zhí)行displaystationssidguest和displaystationssidemployee命令，可以查看到顧客已經(jīng)分別接入到無(wú)線網(wǎng)絡(luò)“guest”和“employee”中。[AC-wlan-view]displaystationssidguestRf/WLAN：RadioID/WLANIDRx/Tx：linkreceiverate/linktransmitrate(Mbps)------------------------------------------------------------------------------STAMACAPIDApnameRf/WLANBandTypeRx/TxRSSIVLANIPaddress------------------------------------------------------------------------------581f-28fc-7ead0lobby-10/12.4G11n2/4-5310110.23.101.254------------------------------------------------------------------------------Total：12.4G：15G：0[AC-wlan-view]displaystationssidemployeeRf/WLAN：RadioID/WLANIDRx/Tx：linkreceiverate/linktransmitrate(Mbps)------------------------------------------------------------------------------STAMACAPIDApnameRf/WLANBandTypeRx/TxRSSIVLANIPaddress------------------------------------------------------------------------------e019-1dc7-1e082office2-11/15G11n26/51-6110210.23.103.254------------------------------------------------------------------------------Total：12.4G：05G：1配備文獻(xiàn)Switch_A配備文獻(xiàn)#sysnameSwitch_A#vlanbatch100#interfaceGigabitEthernet0/0/1portlink-typetrunkporttrunkpvidvlan100porttrunkallow-passvlan100port-isolateenablegroup1#interfaceGigabitEthernet0/0/2portlink-typetrunkporttrunkpvidvlan100porttrunkallow-passvlan100port-isolateenablegroup1#interfaceGigabitEthernet0/0/3portlink-typetrunkporttrunkpvidvlan100porttrunkallow-passvlan100port-isolateenablegroup1#interfaceGigabitEthernet0/0/4portlink-typetrunkporttrunkpvidvlan100porttrunkallow-passvlan100port-isolateenablegroup1#interfaceGigabitEthernet0/0/5portlink-typetrunkporttrunkallow-passvlan100#returnSwitch_B配備文獻(xiàn)#sysnameSwitch_B#vlanbatch100to104200201#dhcpenable#interfaceVlanif100ipaddress10.23.100.1255.255.255.0dhcpselectrelaydhcprelayserver-ip10.67.201.1#interfaceVlanif101ipaddress10.23.101.1255.255.255.0dhcpselectrelaydhcprelayserver-ip10.67.201.1#interfaceVlanif102ipaddress10.23.102.1255.255.255.0dhcpselectrelaydhcprelayserver-ip10.67.201.1#interfaceVlanif103ipaddress10.23.103.1255.255.255.0dhcpselectrelaydhcprelayserver-ip10.67.201.1#interfaceVlanif104ipaddress10.23.104.1255.255.255.0dhcpselectrelaydhcprelayserver-ip10.67.201.1#interfaceVlanif200ipaddress10.45.200.2255.255.255.0#interfaceVlanif201ipaddress10.67.201.2255.255.255.0#interfaceGigabitEthernet1/0/1portlink-typetrunkporttrunkallow-passvlan100#interfaceGigabitEthernet1/0/2portlink-typetrunkporttrunkallow-passvlan101to104200#interfaceGigabitEthernet1/0/3portlink-typetrunkporttrunkallow-passvlan201#iproute-static0.0.0.00.0.0.010.67.201.1#returnRouter配備文獻(xiàn)#sysnameRouter#vlanbatch201#dhcpenable#ippoolapgateway-list10.23.100.1network10.23.100.0mask255.255.255.0option43sub-option3ascii10.45.200.1#ippoolsta1gateway-list10.23.101.1network10.23.101.0mask255.255.255.0#ippoolsta2gateway-list10.23.102.1network10.23.102.0mask255.255.255.0#ippoolsta3gateway-list10.23.103.1network10.23.103.0mask255.255.255.0#ippoolsta4gateway-list10.23.104.1network10.23.104.0mask255.255.255.0#interfaceVlanif201ipaddress10.67.201.1255.255.255.0dh