网络拓扑图
1、接入层交换机配置
S6805_3
[H3C]sysname Acc.3 #设备重命名 [Acc.3]vlan 40 #创建vlan40 [Acc.3]interface GigabitEthernet 1/0/2 [Acc.3-GigabitEthernet1/0/2]port access vlan 40 [Acc.3-GigabitEthernet1/0/2]inter gig1/0/3 [Acc.3-GigabitEthernet1/0/3]port access vlan 40 [Acc.3-GigabitEthernet1/0/3]inter gig1/0/1 [Acc.3-GigabitEthernet1/0/1]port trunk permit vlan 40
S6805_4
[H3C]sysname Acc.4 [Acc.4]vlan 40 [Acc.4-vlan40]qu [Acc.4]interface range GigabitEthernet 1/0/2 to gig1/0/3 [Acc.4-if-range]port access vlan 40 [Acc.4-if-range]quit [Acc.4]interface gig1/0/1 [Acc.4-GigabitEthernet1/0/1]port link-type trunk [Acc.4-GigabitEthernet1/0/1]port trunk permit vlan 40
2、核心交换机配置
S6805_2
[H3C]sysname Core.02 [Core.02]vlan 10 20 30 40 [Core.02]interface range GigabitEthernet 1/0/3 to GigabitEthernet 1/0/4 [Core.02-if-range]port link-type trunk [Core.02-if-range]port trunk permit vlan 40 [Core.02-if-range]quit [Core.02]interface GigabitEthernet 1/0/2 [Core.02-GigabitEthernet1/0/2]port link-type trunk [Core.02-GigabitEthernet1/0/2]port trunk permit vlan 10 20 30 40 [Core.02-GigabitEthernet1/0/2]quit###SVI接口配置IP地址 [Core.02]interface Vlan-interface 10 [Core.02-Vlan-interface10]ip address 10.10.1.1 24 [Core.02-Vlan-interface10]dhcp select server[Core.02-Vlan-interface20]ip address 10.20.1.1 24 [Core.02-Vlan-interface20]dhcp select server[Core.02-Vlan-interface30]ip address 10.30.1.1 24 [Core.02-Vlan-interface30]dhcp select server[Core.02-Vlan-interface40]ip address 10.40.1.1 24 [Core.02-Vlan-interface40]dhcp select server [Core.02-Vlan-interface40]quit###配置DHCP服务 [Core.02]dhcp enable [Core.02]dhcp server ip-pool ap-manage [Core.02-dhcp-pool-ap-manage]network 10.40.1.0 24 [Core.02-dhcp-pool-ap-manage]gateway-list 10.40.1.1 [Core.02-dhcp-pool-ap-manage]forbidden-ip 10.40.1.2 #排除这个地址，保留给ac使用 [Core.02-dhcp-pool-ap-manage]expired day 1 hour 12 minute 30 [Core.02-dhcp-pool-ap-manage]quit[Core.02]dhcp server ip-pool Guest [Core.02-dhcp-pool-Guest]network 10.30.1.0 24 [Core.02-dhcp-pool-Guest]gateway-list 10.30.1.1 [Core.02-dhcp-pool-Guest]dns-list 223.5.5.5 114.114.114.114 [Core.02-dhcp-pool-Guest]expired day 0 hour 8 [Core.02-dhcp-pool-Guest]quit[Core.02]dhcp server ip-pool Wireless_2.4G [Core.02-dhcp-pool-Wireless_2.4G]network 10.20.1.0 24 [Core.02-dhcp-pool-Wireless_2.4G]gateway-list 10.20.1.1 [Core.02-dhcp-pool-Wireless_2.4G]dns-list 223.5.5.5 114.114.114.114 [Core.02-dhcp-pool-Wireless_2.4G]expired day 1 [Core.02-dhcp-pool-Wireless_2.4G]quit[Core.02]dhcp server ip-pool Wireless_5G [Core.02-dhcp-pool-Wireless_5G]network 10.10.1.0 24 [Core.02-dhcp-pool-Wireless_5G]gateway-list 10.10.1.1 [Core.02-dhcp-pool-Wireless_5G]dns-list 223.5.5.5 114.114.114.114 [Core.02-dhcp-pool-Wireless_5G]expired day 3 [Core.02-dhcp-pool-Wireless_5G]quit###与路由器相连接口设为三层口 [Core.02]interface GigabitEthernet 1/0/1 [Core.02-GigabitEthernet1/0/1]port link-mode route [Core.02-GigabitEthernet1/0/1]ip address 172.16.10.2 30 [Core.02-GigabitEthernet1/0/1]quit
3、无线AC配置
AC_9
[H3C]sysname Wireless.AC [Wireless.AC]vlan 10 [Wireless.AC-vlan10]vlan 20 [Wireless.AC-vlan20]vlan 30 [Wireless.AC-vlan30]vlan 40 [Wireless.AC-vlan40]quit[Wireless.AC]interface GigabitEthernet 1/0/0 [Wireless.AC-GigabitEthernet1/0/0]port link-type trunk [Wireless.AC-GigabitEthernet1/0/0]port trunk permit vlan 10 20 30 40 [Wireless.AC-GigabitEthernet1/0/0]quit[Wireless.AC]interface Vlan-interface 40 [Wireless.AC-Vlan-interface40]ip address 10.40.1.2 24 [Wireless.AC-Vlan-interface40]quit###创建无线服务模版 [Wireless.AC]wlan service-template Wireless_5G [Wireless.AC-wlan-st-wireless_5g]ssid Wireless_5G [Wireless.AC-wlan-st-wireless_5g]akm mode psk [Wireless.AC-wlan-st-wireless_5g]preshared-key pass-phrase simple 12345678 [Wireless.AC-wlan-st-wireless_5g]cipher-suite ccmp [Wireless.AC-wlan-st-wireless_5g]security-ie rsn [Wireless.AC-wlan-st-wireless_5g]service-template enable [Wireless.AC-wlan-st-wireless_5g]quit[Wireless.AC]wlan service-template Wireless_24G [Wireless.AC-wlan-st-wireless_24g]ssid Wireless_2.4G [Wireless.AC-wlan-st-wireless_24g]service-template enable [Wireless.AC-wlan-st-wireless_24g]quit[Wireless.AC]wlan service-template Guest [Wireless.AC-wlan-st-guest]ssid Guest [Wireless.AC-wlan-st-guest]service-template enable [Wireless.AC-wlan-st-guest]quit###手动AP上线，SN认证 [Wireless.AC]wlan ap ap06 model WA6320-HCL [Wireless.AC-wlan-ap-ap06]serial-id H3C_0e-33-c1-68-06-00 [Wireless.AC-wlan-ap-ap06]quit[Wireless.AC]wlan ap ap05 model WA6320-HCL [Wireless.AC-wlan-ap-ap05]serial-id H3C_0e-33-bb-dc-05-00 [Wireless.AC-wlan-ap-ap05]quit[Wireless.AC]wlan ap ap07 model WA6320-HCL [Wireless.AC-wlan-ap-ap07]serial-id H3C_0e-33-c4-21-07-00 [Wireless.AC-wlan-ap-ap07]quit[Wireless.AC]wlan ap ap08 model WA6320-HCL [Wireless.AC-wlan-ap-ap08]serial-id H3C_0e-33-c7-d6-08-00 [Wireless.AC-wlan-ap-ap08]quit###创建AP组，绑定无线服务模版 [Wireless.AC]wlan ap-group xiykj_ap [Wireless.AC-wlan-ap-group-xiykj_ap]ap ap05 [Wireless.AC-wlan-ap-group-xiykj_ap]ap ap06 [Wireless.AC-wlan-ap-group-xiykj_ap]ap ap07 [Wireless.AC-wlan-ap-group-xiykj_ap]ap ap08[Wireless.AC-wlan-ap-group-xiykj_ap]ap-model WA6320-HCL [Wireless.AC-wlan-ap-group-xiykj_ap-ap-model-WA6320-HCL]radio 1 [Wireless.AC-wlan-ap-group-xiykj_ap-ap-model-WA6320-HCL-radio-1]service-template Wireless_5G vlan 10 [Wireless.AC-wlan-ap-group-xiykj_ap-ap-model-WA6320-HCL-radio-1]service-template Wireless_24G vlan 20 [Wireless.AC-wlan-ap-group-xiykj_ap-ap-model-WA6320-HCL-radio-1]service-template Guest vlan 30 [Wireless.AC-wlan-ap-group-xiykj_ap-ap-model-WA6320-HCL-radio-1]radio enable [Wireless.AC-wlan-ap-group-xiykj_ap-ap-model-WA6320-HCL-radio-1]quit[Wireless.AC-wlan-ap-group-xiykj_ap-ap-model-WA6320-HCL]radio 2 [Wireless.AC-wlan-ap-group-xiykj_ap-ap-model-WA6320-HCL-radio-2]service-template Wireless_5G vlan 10 [Wireless.AC-wlan-ap-group-xiykj_ap-ap-model-WA6320-HCL-radio-2]service-template Wireless_24G vlan 20 [Wireless.AC-wlan-ap-group-xiykj_ap-ap-model-WA6320-HCL-radio-2]service-template Guest vlan 30 [Wireless.AC-wlan-ap-group-xiykj_ap-ap-model-WA6320-HCL-radio-2]radio enable [Wireless.AC-wlan-ap-group-xiykj_ap-ap-model-WA6320-HCL-radio-2]quit#配置缺省路由 [Wireless.AC]ip route-static 0.0.0.0 0 10.40.1.1