WLAN配置三层直连隧道转发

示例图

一、实验目的

1.配置三层直连隧道转发

二、注意事项

1.如果管理VLAN有多个，在AC上一定要有，去往管理VLAN地址的路由
2.参考无线接入控制器(AC和FIT AP) V200R019C00 产品文档

三、简单查询

1.display ap all查看到AP是否正常上线、当“State”字段为“nor”时，表示AP正常上线
2.display vap ssid wlan-net查看VAP是否创建成功，当“Status”项显示为“ON”时，表示AP对应的射频上的VAP已创建成功。
3.display station ssid wlan-net，可以查看用户是否接入到无线网络“wlan-net”中。
4.display ap run-info { ap-name ap-name | ap-id ap-id }，查看AP的运行信息。
5.display ap service-config acl [ ipv6 ] { ap-name ap-name | ap-id ap-id }，查看指定AP上的ACL配置信息
6.display ap statistics，查看添加到AC上的AP的AP类型统计信息。
7.display ap port { all | ap-name ap-name | ap-id ap-id | ap-mac ap-mac }，查看AP的端口状态和流量信息。
8.display ap performance statistics { ap-name ap-name | ap-id ap-id }，用来查看AP性能
## 

四、简单配置

LSWA

sysname LSWA
#
vlan batch 10 101 to 102
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk pvid vlan 10
 port trunk allow-pass vlan 3 10 101 to 102
 port-isolate enable group 1
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk allow-pass vlan 2 10 101 to 102
#
return 

LSWB

sysname LSWB
#
vlan batch 2 10 100 to 102
#
dhcp enable
#
interface Vlanif2
 ip address 192.168.2.2 255.255.255.0 
#
interface Vlanif10
 ip address 10.23.10.1 255.255.255.0 
 dhcp select relay
 dhcp relay server-ip 10.23.100.1
#
interface Vlanif100
 ip address 10.23.100.2 255.255.255.0 
#
interface Vlanif101
 ip address 10.23.101.1 255.255.255.0 
 dhcp select interface
#
interface Vlanif102
 ip address 10.23.102.1 255.255.255.0 
 dhcp select interface
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk allow-pass vlan 2 to 3 10 101 to 102
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk pvid vlan 2
 port trunk allow-pass vlan 2 100 to 102
#
ip route-static 0.0.0.0 0.0.0.0 192.168.2.1
#
return 

AC1

sysname AC1
#
vlan batch 2 to 3 100 to 102
#
vlan pool sta-pool
 vlan 101 to 102
#
dhcp enable
#
ip pool huawei
 gateway-list 10.23.10.1 
 network 10.23.10.0 mask 255.255.255.0 
 option 43 sub-option 3 ascii 10.23.100.1 
#
interface Vlanif2
 ip address 192.168.2.1 255.255.255.0
#
interface Vlanif3
 ip address 192.168.1.2 255.255.255.0
#
interface Vlanif100
 ip address 10.23.100.1 255.255.255.0
 dhcp select global
#
interface GigabitEthernet0/0/1
 port link-type trunk
 port trunk pvid vlan 2
 port trunk allow-pass vlan 2 100 to 102
#
interface GigabitEthernet0/0/2
 port link-type trunk
 port trunk pvid vlan 3
 port trunk allow-pass vlan 3 101 to 102
#
ip route-static 0.0.0.0 0.0.0.0 192.168.2.2
ip route-static 10.23.10.0 255.255.255.0 10.23.100.2
#
capwap source interface vlanif100
#
wlan
  security wpa-wpa2 psk pass-phrase abc123456 aes
 ssid-profile name wlan-net
  ssid wlan-net
 vap-profile name wlan-net
  forward-mode tunnel
  service-vlan vlan-pool sta-pool
  ssid-profile wlan-net
  security-profile wlan-net
 regulatory-domain-profile name default
  dca-channel 5g channel-set 149,153,157,161
 air-scan-profile name wlan-airscan
  scan-channel-set dca-channel
 radio-2g-profile name wlan-radio2g
  air-scan-profile wlan-airscan
 radio-5g-profile name wlan-radio5g
  air-scan-profile wlan-airscan
 ap-group name ap-group1
  radio 0
   radio-2g-profile wlan-radio2g
   vap-profile wlan-net wlan 1
  radio 1
   radio-5g-profile wlan-radio5g
   vap-profile wlan-net wlan 1
 ap-id 0 type-id 56 ap-mac AP的MAC地址
  ap-name area_1
  ap-group ap-group1
 ap-id 1 type-id 56 ap-mac AP的MAC地址
  ap-name area_2
  ap-group ap-group1
 provision-ap
#
return

AR1

sysname AR1
#
interface GigabitEthernet0/0/1
 ip address 192.168.1.1 255.255.255.0 
#
ip route-static 0.0.0.0 0.0.0.0 192.168.1.2
#
return