配置AC内漫游示例
适用的AC：AC6605、AC6005
适用的AP：所有形态的AP
适用的版本：V200R005C00
组网需求
某小型企业为员工提供WLAN网络业务，由于场所面积不大，可以通过一台AC对AP进行管理。同时为了区分部门进行管理，不同部门的员工在不同的子网。企业希望员工在企业内部移动办公的同时网络业务不中断。
如图1所示，AC为企业员工提供业务服务，AC分别通过Switch_1和Switch_2连接AP_1和AP_2。
图1
配置AC内漫游组网图
配置思路
采用如下的思路配置AC内漫游：
配置网络互通，使AP与AC之间能够传输CAPWAP报文。
配置AC作为DHCP服务器，为STA和AP分配IP地址。
配置WLAN基本业务，保证用户能够连接到无线网络。本举例使用缺省配置参数。
操作步骤
1、配置Switch和AC，使AP和AC互通。
# 在Switch_1上创建VLAN100、VLAN101，其中VLAN100用于WLAN的管理VLAN，VLAN101用于WLAN的业务VLAN。Switch_1连接AP_1的接口GE0/0/1和连接AC_1的接口GE0/0/2加入VLAN100和VLAN101。
<Quidway> system-view [Quidway] sysname Switch_1 [Switch_1] vlan batch 100 101 [Switch_1] interface gigabitethernet 0/0/1 [Switch_1-GigabitEthernet0/0/1] port link-type trunk [Switch_1-GigabitEthernet0/0/1] port trunk pvid vlan 100 [Switch_1-GigabitEthernet0/0/1] port trunk allow-pass vlan 100 101 [Switch_1-GigabitEthernet0/0/1] quit [Switch_1] interface gigabitethernet 0/0/2 [Switch_1-GigabitEthernet0/0/2] port link-type trunk [Switch_1-GigabitEthernet0/0/2] port trunk allow-pass vlan 100 101 [Switch_1-GigabitEthernet0/0/2] quit
# 在Switch_2上创建VLAN100、VLAN102，其中VLAN100用于WLAN的管理VLAN，VLAN102用于WLAN的业务VLAN。Switch_2连接AP_2的接口GE0/0/1和连接AC的接口GE0/0/2加入VLAN100和VLAN102。
<Quidway> system-view [Quidway] sysname Switch_2 [Switch_2] vlan batch 100 102 [Switch_2] interface gigabitethernet 0/0/1 [Switch_2-GigabitEthernet0/0/1] port link-type trunk [Switch_2-GigabitEthernet0/0/1] port trunk pvid vlan 100 [Switch_2-GigabitEthernet0/0/1] port trunk allow-pass vlan 100 102 [Switch_2-GigabitEthernet0/0/1] quit [Switch_2] interface gigabitethernet 0/0/2 [Switch_2-GigabitEthernet0/0/2] port link-type trunk [Switch_2-GigabitEthernet0/0/2] port trunk allow-pass vlan 100 102 [Switch_2-GigabitEthernet0/0/2] quit
# 配置AC连接Switch_1的接口GE0/0/1加入VLAN100和VLAN101，连接Switch_2的接口GE0/0/2加入VLAN100和VLAN102。
<AC6605> system-view [AC6605] sysname AC[AC] dhcp enable [AC] vlan batch 100 to 102 [AC] interface gigabitethernet 0/0/1 [AC-GigabitEthernet0/0/1] port link-type trunk [AC-GigabitEthernet0/0/1] port trunk allow-pass vlan 100 101 [AC-GigabitEthernet0/0/1] quit [AC] interface gigabitethernet 0/0/2 [AC-GigabitEthernet0/0/2] port link-type trunk [AC-GigabitEthernet0/0/2] port trunk allow-pass vlan 100 102 [AC-GigabitEthernet0/0/2] quit [AC] interface vlanif 100 [AC-vlanif100] ip address 192.168.100.1 255.255.255.0 [AC-vlanif100] dhcp select interface [AC-vlanif100] quit [AC] interface vlanif 101 [AC-vlanif100] ip address 192.168.101.1 255.255.255.0 [AC-vlanif100] dhcp select interface [AC-vlanif100] quit [AC] interface vlanif 102 [AC-vlanif100] ip address 192.168.102.1 255.255.255.0 [AC-vlanif100] dhcp select interface [AC-vlanif100] quit
2、配置AC的WLAN基本业务
a、配置系统参数
# 配置AC的国家码。
[AC] wlan ac-global country-code cn Warning: Modify the country code may delete configuration on those AP which use the global country code and reset them, continue?[Y/N]:y
# 配置AC ID和运营商标识。
[AC] wlan ac-global ac id 1 carrier id other
# 配置AC的源接口。
[AC] wlan[AC-wlan-view] wlan ac source interface vlanif 100
b、在AC上管理AP
# 现场获取AP的MAC地址后，查看AP的设备类型ID。
# 根据查询到的AP设备类型ID，离线添加AP。假设AP1和AP2的类型为AP6010DN-AGN，其MAC地址分别为60de-4476-e360和dcd2-fc04-b500。
说明：ap-auth-mode命令缺省情况下为MAC认证，如果之前没有修改其缺省配置，可以不用执行ap-auth-mode mac-auth。
# 配置AP域并将AP加入到AP域。
[AC-wlan-view] ap-region id 10 [AC-wlan-ap-region-10] quit [AC-wlan-view] ap id 1 [AC-wlan-ap-1] region-id 10 [AC-wlan-ap-1] quit [AC-wlan-view] ap id 2 [AC-wlan-ap-2] region-id 10 [AC-wlan-ap-2] quit
# 将AP1和AP2上电后，可以查看到AP1和AP2的“State”字段为“normal”。
c、配置WLAN业务参数
# 创建名为“wmm”的WMM模板。
[AC-wlan-view] wmm-profile name wmm id 1 [AC-wlan-wmm-prof-wmm] quit
# 创建名为“radio”的射频模板，绑定WMM模板“wmm”。
[AC-wlan-view] radio-profile name radio id 1 [AC-wlan-radio-prof-radio] wmm-profile name wmm [AC-wlan-radio-prof-radio] quit [AC-wlan-view] quit
# 创建WLAN-ESS接口。
[AC] interface wlan-ess 1 [AC-Wlan-Ess1] port hybrid pvid vlan 101 [AC-Wlan-Ess1] port hybrid untagged vlan 101 102 [AC-Wlan-Ess1] quit[AC] interface wlan-ess 2 [AC-Wlan-Ess1] port hybrid pvid vlan 102 [AC-Wlan-Ess1] port hybrid untagged vlan 101 102 [AC-Wlan-Ess1] quit
# 创建名为“security”的安全模板。
[AC] wlan [AC-wlan-view] security-profile name security id 1 [AC-wlan-sec-prof-security] quit
# 创建名为“traffic”的流量模板。
[AC-wlan-view] traffic-profile name traffic id 1 [AC-wlan-traffic-prof-traffic] quit
# 配置AP1和AP2的服务集，并配置数据转发模式为直接转发。
[AC-wlan-view] service-set name huawei1 id 1 [AC-wlan-service-set-huawei1] ssid huawei1 [AC-wlan-service-set-huawei1] wlan-ess 1 [AC-wlan-service-set-huawei1] security-profile name security[AC-wlan-service-set-huawei1] traffic-profile name traffic[AC-wlan-service-set-huawei1] service-vlan 101[AC-wlan-service-set-huawei1] forward-mode tunnel[AC-wlan-service-set-huawei1] quit[AC-wlan-view] service-set name huawei2 id 2[AC-wlan-service-set-huawei1] ssid huawei1[AC-wlan-service-set-huawei1] wlan-ess 2[AC-wlan-service-set-huawei1] security-profile name security[AC-wlan-service-set-huawei1] traffic-profile name traffic[AC-wlan-service-set-huawei1] service-vlan 102[AC-wlan-service-set-huawei1] forward-mode tunnel[AC-wlan-service-set-huawei1] quit
d、配置VAP并提交配置。
[AC-wlan-view] ap 1 radio 0 [AC-wlan-radio-1/0] radio-profile name radio [AC-wlan-radio-1/0] service-set name huawei1 [AC-wlan-radio-1/0] quit [AC-wlan-view] commit ap 1 Warning: Committing configuration may cause service interruption,continue?[Y/N]y [AC-wlan-view] ap 2 radio 0 [AC-wlan-radio-2/0] radio-profile name radio [AC-wlan-radio-2/0] service-set name huawei2 [AC-wlan-radio-2/0] quit[AC-wlan-view] commit ap 2 Warning: Committing configuration may cause service interruption,continue?[Y/N]y
3、验证配置结果
配置完成后，STA在AP_1的覆盖范围内可以连接到SSID为huawei1的无线网络。
假设STA的MAC地址为0025-86aa-0d1c。STA在AP_1的覆盖范围使用SSID为huawei1的无线网络过程中，在AC上执行命令display station assoc-info ap 1，查看STA的接入信息，可以看到STA关联到了AP_1。
[AC-wlan-view] display station assoc-info ap 1
------------------------------------------------------------------------------
STA MAC AP ID RADIO ID SS ID SSID
------------------------------------------------------------------------------
0025-86aa-0d1c 1 0 1 huawei1
------------------------------------------------------------------------------
Total stations: 1
当STA从AP_1的覆盖范围移动到AP_2的覆盖范围时，在AC上执行命令display station assoc-info ap 2，查看STA的接入信息，可以看到STA关联到了AP_2。
[AC-wlan-view] display station assoc-info ap 2
------------------------------------------------------------------------------
STA MAC AP ID RADIO ID SS ID SSID
------------------------------------------------------------------------------
0025-86aa-0d1c 2 0 2 huawei1
------------------------------------------------------------------------------
Total stations: 1
在AC上执行命令display station roam-track sta 0025-86aa-0d1c，可以查看该STA的漫游轨迹。
[AC-wlan-view] display station roam-track sta 0025-86aa-0d1c
Access SSID:huawei1 Rx/Tx:Rx-Rate/Tx-Rate Mbps
------------------------------------------------------------------------------
L2/L3 AC IP
AP/Radio BSSID TIME In Rx/Tx RSSI Out Rx/Tx RSSI
------------------------------------------------------------------------------
-- 192.168.100.1
1/0 60de-4476-e360 2014/01/03 11:46:12 61/61 -51 46/13 -48
L2 192.168.100.1
2/0 dcd2-fc04-b500 2014/01/03 11:48:17 61/61 -58 -/- -
------------------------------------------------------------------------------
Number of roam track: 1
