要求

  • 集团无线控制器DCWS与核心交换机互联,无线业务网关位于DCWS上,VLAN220为业务VLAN;核心交换机SW-1配置使用DHCP进行AP管理地址分配,利用DHCP方式让AP发现AC进行三层注册,采用MAC地址认证。
  • 配置一个SSID DCN126:访问集团及Internet业务,采用WPA-PSK认证方式,加密方式为WPA个人版,配置密钥为Dcn12345678。
  • 配置所有Radio接口:AP在收到错误帧时,将不再发送ACK帧;打开AP组播广播突发限制功能;开启Radio的自动信道调整,每天上午10:00触发信道调整功能。

配置AC、三层、二层的Vlan和IP

DCWS

DCWS-6028(P)(config)#vlan 200,220,1000
interface Vlan200
 ip address 10.30.200.254 255.255.255.0
interface Vlan220
 ip address 10.30.220.254 255.255.255.0
interface Vlan1000
 ip address 10.30.254.10 255.255.255.252
Interface Ethernet1/0/24
 switchport mode trunk
 switchport trunk allowed vlan 200;220;1000 
 switchport trunk native vlan 1000

SW-1

CS6200-28X-EI(config)#vlan 200,220,1000
interface Vlan1000
 ip address 10.30.254.9 255.255.255.252
Interface Ethernet1/0/23
 switchport mode trunk
 switchport trunk allowed vlan 200;220;1000 
 switchport trunk native vlan 1000
Interface Ethernet1/0/24
 switchport mode trunk
 switchport trunk allowed vlan 200;220 
 switchport trunk native vlan 200

LSW1

S4600-28P-SI(config)#vlan 200,220
Interface Ethernet1/0/24
 switchport mode trunk
 switchport trunk allowed vlan 200;220 
 switchport trunk native vlan 200
Interface Ethernet1/0/1
 switchport mode trunk
 switchport trunk native vlan 200
#可以在vlan200上放个ip,当作二层的管理ip或测试用
interface Vlan200
 ip address 10.30.200.250 255.255.255.0

静态路由

我们需要先保证AC到AP整条链路是通的,所以我们需要在AC和三层上写一条静态路由互指对方

DCWS

DCWS-6028(P)(config)#ip route 0.0.0.0 0.0.0.0 10.30.254.9

SW-1

CS6200-28X-EI(config)#ip route 0.0.0.0 0.0.0.0 10.30.254.10  

无线管理VLAN做DHCP(option43三层发现)

题目要求在核心交换机SW-1配置使用DHCP进行AP管理地址分配,利用DHCP方式让AP发现AC进行三层注册,因为是在SW-1上做DHCP,所以需要在SW-1上给VLan200配个ip

CS6200-28X-EI(config)#interface Vlan200
 ip address 10.30.200.253 255.255.255.0

SW-1

CS6200-28X-EI(config)#service dhcp
ip dhcp pool ap
 network-address 10.30.200.0 255.255.255.0
 default-router 10.30.200.253
 option 43 hex 01040A1EFE0A #0104为DCN固定前缀,0A1EFE0A对应的是10.30.254.10

我们show ip dhcp binding查看ap是否获取到ip

CS6200-28X-EI(config)#show ip dhcp binding 
Total dhcp binding items: 1, the matched: 1
IP address          Hardware address         Lease expiration         Type
10.30.200.1         00-03-0F-78-CA-C0        Thu Nov 03 23:40:00 2022 Dynamic

DCWS-6028(P)#telnet 10.30.200.1
Connecting Host 10.30.200.1 Port 23...
Service port is 23
Connected to 10.30.200.1

WLAN-AP login: admin
Password: 
Enter 'help' for help.

WLAN-AP# get management
Property                    Value
---------------------------------------------------
vlan-id                     1
interface                   brvlan1
static-ip                   192.168.1.10
static-mask                 255.255.255.0
ip                          10.30.200.1
mask                        255.255.255.0
ipv6                        
ipv6-prefix-length          0
mac                         00:03:0F:78:CA:C0
dhcp-status                 up
dhcpv6-status               up
ipv6-status                 up
ipv6-autoconfig-status      up
static-ipv6                 
static-ipv6-prefix-length   0
autoconfig-link-local       fe80::203:fff:fe78:cac0
autoconfig-ipv6-global-all  

DCWS

DCWS-6028(P)(config)#wireless #进入无线配置模式
no auto-ip-assign #关闭自动IP地址分配模式
static-ip 10.30.254.10 #AC的管理地址
ap authentication mac #使用MAC地址进行认证
discovery ip-list 10.30.200.1 #三层发现
enable

配置SSID

DCWS-6028(P)(config-wireless)#network 1
ssid DCN126
security mode wpa-personal
wpa key Dcn12345678
vlan 220

配置radio

DCWS-6028(P)(config-wireless)#ap profile 1
hwtype 59 #59是自己AP的硬件类型,查看 AP 硬件类型命令:"Show wireless ap <MAC> stataus"
 radio 1
  vap 0 #network 1对应的是vap 0,vap 0是默认开启的,所以这里其实可以不用管
  enable

查看AP是否上线成功

DCWS-6028(P)(config)#show wireless ap status #显示管理AP状态信息

                                                                           Configuration                
  MAC Address      IP Address                              Profile Status     Status           Age    
------------------ --------------------------------------- ------- ------- ------------- --------------
 00-03-0f-78-ca-c0 10.30.200.1                             1       Auth    Not Config    0d:00:00:01

Total Access Points............................ 1

绑定AP到profile 1

DCWS-6028(P)(config)#wireless
ap database 00-03-0f-78-ca-c0
 profile 1

配置业务vlan的dhcp地址池

DCWS-6028(P)(config)#service dhcp
ip dhcp pool vlan220
 network-address 10.30.220.0 255.255.255.0
 default-router 10.30.220.254

配置所有Radio接口:AP在收到错误帧时,将不再发送ACK帧;打开AP组播广播突发限制功能;开启Radio的自动信道调整,每天上午10:00触发信道调整功能

DCWS

DCWS-6028(P)(config)#wireless
ap profile 1
 radio 1
 incorrect-frame-no-ack #启用radio接收到错误的帧时不发送ACK确认信息
 rate-limit #启用广播/组播速率限制

DCWS-6028(P)(config)#wireless
channel-plan bgn mode time #指定802.11b/g/n的频带在每天固定的时间点实施信道调整
channel-plan an mode time #指定802.11a/n的频带在每天固定的时间点实施信道调整
channel-plan bgn time 10:00 #在每天上午10:00点实施信道调整
channel-plan an time 10:00 #在每天上午10:00点实施信道调整

DCWS-6028(P)#wireless channel-plan bgn apply #应用手动信道调整方案
DCWS-6028(P)#wireless channel-plan an apply #应用手动信道调整方案
DCWS-6028(P)#wireless channel-plan bgn start #开始手动信道调整方案
DCWS-6028(P)#wireless channel-plan an start #开始手动信道调整方案

下发AP包

DCWS-6028(P)#wireless ap profile apply 1
All configurations will be send to the aps associated to this profile and associated clients on these aps will be disconnected. Are you sure you want to apply the profile configuration? [Y/N] y
AP Profile apply is in progress.

最后修改:2024 年 08 月 21 日
如果我的文章对你有用,请帮助小站能够存活下去( •̀ ω •́ )✧