华为ensp-无线小型wlan配置教程

实验拓扑图：

实验平台：ENSP510
实验设备：Centered Cloud、AC6005、AP4030、STA、Cellphone

vlan范围划分
vlan 101 : 10.23.101.1/24
vlan 100 : 10.23.100.1/24

实验步骤：

一、创建VLAN100、101配置端口类型
[AC1]vlan batch 100 101
[AC1]int g0/0/1
[AC1-GigabitEthernet0/0/1]port link-type trunk 
[AC1-GigabitEthernet0/0/1]port trunk allow-pass vlan 100
[AC1-GigabitEthernet0/0/1]port trunk pvid vlan 100
[AC1-GigabitEthernet0/0/1]int g0/0/2
[AC1-GigabitEthernet0/0/2]port link-type trunk 
[AC1-GigabitEthernet0/0/2]port trunk allow-pass vlan 101
[AC1-GigabitEthernet0/0/2]quit

二、配置DHCP
[AC1]dhcp enable 
[AC1]int vlanif 100
[AC1-Vlanif100]ip add 10.23.100.1 24
[AC1-Vlanif100]dhcp select int
[AC1-Vlanif100]int vlanif 101
[AC1-Vlanif101]ip add 10.23.101.1 24
[AC1-Vlanif101]dhcp select int
[AC1-Vlanif101]quit

三、创建AP组
[AC1]wlan
[AC1-wlan-view]ap-group name ap-group1
[AC1-wlan-ap-group-ap-group1]quit

四、创建域管理模板
[AC1-wlan-view]regulatory-domain-profile name domain1
[AC1-wlan-regulate-domain-domain1]country-code cn
[AC1-wlan-regulate-domain-domain1]quit
[AC1-wlan-view]ap-group name ap-group1
[AC1-wlan-ap-group-ap-group1]regulatory-domain-profile domain1
[AC1-wlan-ap-group-ap-group1]quit
[AC1-wlan-view]quit

五、配置AC源接口
[AC1]capwap source int vlanif 100

六、配置认证方式、AP组和AP名
[AC1]wlan
[AC1-wlan-view]ap auth-mode mac-auth 
[AC1-wlan-view]ap-id 0 ap-mac 00E0-FCC0-2A60 #需注意次mac地址是AP设备的
[AC1-wlan-ap-0]ap-name area_1
[AC1-wlan-ap-0]ap-group ap-group1
[AC1-wlan-ap-0]quit

七、查看上线AP
[AC1]dis ap all

八、配置安全策略
[AC1-wlan-view]security-profile name wlan-security
[AC1-wlan-sec-prof-wlan-security]security wpa2 psk pass-phrase a1234567 aes
#a1234567为设备连接无线WLAN密码
[AC1-wlan-sec-prof-wlan-security]quit

九、创建名为“wlan-ssid”的SSID模板
[AC1-wlan-view]ssid-profile name wlan-ssid
[AC1-wlan-ssid-prof-wlan-ssid]ssid wlan-net
[AC1-wlan-ssid-prof-wlan-ssid]quit

十、创建名为“wlan-vap”的VAP模板
[AC1-wlan-view]vap-profile name wlan-vap
[AC1-wlan-vap-prof-wlan-vap]forward-mode tunnel 
[AC1-wlan-vap-prof-wlan-vap]service-vlan vlan-id 101
[AC1-wlan-vap-prof-wlan-vap]security-profile wlan-security
[AC1-wlan-vap-prof-wlan-vap]ssid-profile wlan-ssid
[AC1-wlan-vap-prof-wlan-vap]quit

十一、配置AP组并引用VAP模板
[AC1-wlan-view]ap-group name ap-group1
[AC1-wlan-ap-group-ap-group1]vap-profile wlan-vap wlan 1 radio 0
[AC1-wlan-ap-group-ap-group1]vap-profile wlan-vap wlan 1 radio 1
[AC1-wlan-ap-group-ap-group1]quit

十二、关闭射频的信道和功率自动调优功能，否则会导致手动配置不生效
[AC1-wlan-view]rrm-profile name defualt
[AC1-wlan-rrm-prof-defualt]calibrate auto-channel-select disable 
[AC1-wlan-rrm-prof-defualt]calibrate auto-txpower-select disable 
[AC1-wlan-rrm-prof-defualt]quit

十三、配置AP射频0的信道和功率
[AC1-wlan-view]ap-id 0
[AC1-wlan-ap-0]radio 0
[AC1-wlan-radio-0/0]channel 20mhz 6
[AC1-wlan-radio-0/0]eirp 127
[AC1-wlan-radio-0/0]quit

十四、配置AP射频1的信道和功率
[AC1-wlan-ap-0]radio 1
[AC1-wlan-radio-0/1]channel 20mhz 149
[AC1-wlan-radio-0/1]eirp 127
[AC1-wlan-radio-0/1]quit
[AC1-wlan-ap-0]quit

十五、查看AP对应的射频上的VAP是否创建成功
[AC1]dis vap ssid wlan-net

注意事项-实图演示：

Cloud设备需配置GE接口！

需注意命令中的mac地址要与你本机AP设备的mac地址相一致！

STA设备与Cellphone设备的IPv4配置需按DHCP类型进行配置！

测试通信之前STA设备和Cellphone设备需要无线WLAN密码进行连接！
密码为实验步骤安全策略里面的密码：a1234567

实验测试：

查看线上AP

查看AP对应的射频上的VAP是否创建成功

实验验证：

在STA和Cellphone上验证是否能够自动获取IP地址

Ping通信测试

实验成功 到此结束