無線局域網WLAN（Wireless Local Area Network）是一種無線計算機網絡，使用無線信道代替有線傳輸介質連接兩個或多個設備形成一個局域網LAN（Local Area Network），典型部署場景如家庭、學校、校園或企業辦公樓等。

WLAN是一個網絡系統，而我們常見的Wi-Fi是這個網絡系統中的一種技術使用WLAN網絡中由兩個關鍵的設備，AP和AC。AP是無線訪問接入點，，一般來說一個網絡中都有多個AP。AC是無線控制器，主要功能是對AP進行統一的管理，負責把來自不同AP的數據進行匯聚并接入Internet。

網絡拓撲圖：

?無線網絡的配置過程：

1.基礎配置（VLAN，IP地址）

2.DHCP服務器和中繼

3.AC中綁定AP

4.配置SSID模塊、安全模塊、VAP模塊

5.VAP綁定SSID和安全模塊

6.VAP關聯AP組

7.測試

1.基礎配置

LSW1

<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]sys lsw1
[lsw1]un in en
Info: Information center is disabled.
[lsw1]vlan batch 10 20 30 40
Info: This operation may take a few seconds. Please wait for a moment...done.
[lsw1]int g0/0/1
[lsw1-GigabitEthernet0/0/1]port link-type trunk
[lsw1-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20 30 40
[lsw1-GigabitEthernet0/0/1]port trunk pvid vlan 10
[lsw1-GigabitEthernet0/0/1]quit
[lsw1]int g0/0/2
[lsw1-GigabitEthernet0/0/2]port link-type access
[lsw1-GigabitEthernet0/0/2]port default vlan 30
[lsw1-GigabitEthernet0/0/2]quit
[lsw1]int g0/0/3
[lsw1-GigabitEthernet0/0/3]port link-type trunk
[lsw1-GigabitEthernet0/0/3]port trunk allow-pass vlan 10 20 30 40 50
[lsw1-GigabitEthernet0/0/3]quit
[lsw1]int vlan 10
[lsw1-Vlanif10]ip add 192.168.10.254 24
[lsw1-Vlanif10]int vlan 20
[lsw1-Vlanif20]ip add 192.168.20.254 24
[lsw1-Vlanif20]int vlan 30
[lsw1-Vlanif30]ip add 192.168.30.254 24
[lsw1-Vlanif30]int vlan 40
[lsw1-Vlanif40]ip add 192.168.40.254 24

AC

<AC6005>sys
Enter system view, return user view with Ctrl+Z.
[AC6005]vlan batch 10 20 30 40 
Info: This operation may take a few seconds. Please wait for a moment...done.
[AC6005]int g0/0/1
[AC6005-GigabitEthernet0/0/1]port link-type trunk 
[AC6005-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20 30 40
[AC6005-GigabitEthernet0/0/1]quit
[AC6005]int vlan 40
[AC6005-Vlanif40]ip add 192.168.40.1 24

2.DHCP服務器

vlan10的地址池需要指定AC的地址

[ar1]int g0/0/0
[ar1-GigabitEthernet0/0/0]
[ar1-GigabitEthernet0/0/0]ip add 192.168.30.1 24 
[ar1-GigabitEthernet0/0/0]quit
[ar1]int l0
[ar1-LoopBack0]ip add 2.2.2.2 32
[ar1]dhcp enable 
Info: The operation may take a few seconds. Please wait for a moment.done.
[ar1]ip pool vlan10
Info: It's successful to create an IP address pool.
[ar1-ip-pool-vlan10]gateway-list 192.168.10.254 
[ar1-ip-pool-vlan10]network 192.168.10.0 mask 24
#指定AP地址
[ar1-ip-pool-vlan10]option 43 sub-option 3 ascii 192.168.40.1
[ar1-ip-pool-vlan10]quit
[ar1]ip pool vlan20
Info: It's successful to create an IP address pool.
[ar1-ip-pool-vlan20]ga	
[ar1-ip-pool-vlan20]gateway-list 192.168.20.254 
[ar1-ip-pool-vlan20]network 192.168.20.0 mask 24
[ar1-ip-pool-vlan20]quit
[ar1]int g0/0/0
[ar1-GigabitEthernet0/0/0]dhcp select global
[ar1]ip route-static 0.0.0.0 0 192.168.30.254 #配置回去的路由

DHCP中繼

[lsw1]dhcp enable 
Info: The operation may take a few seconds. Please wait for a moment.done.
[lsw1]int vlan 10
[lsw1-Vlanif10]dhcp select relay
[lsw1-Vlanif10]dhcp relay server-ip 192.168.30.1
[lsw1-Vlanif10]int vlan 20
[lsw1-Vlanif20]dhcp select relay
[lsw1-Vlanif20]dhcp relay server-ip 192.168.30.1

3.AC綁定AP

先查看AP是否獲取到了IP地址

在AC處抓包，顯示有AP的請求報文

?查詢APmac地址

[AC6005]capwap source interface Vlanif 40
[AC6005]wlan
[AC6005-wlan-view]ap-group name 40
Info: This operation may take a few seconds. Please wait for a moment.done.
[AC6005-wlan-ap-group-40]re	
[AC6005-wlan-ap-group-40]regulatory-domain-profile name 40
[AC6005-wlan-regulate-domain-40]co	
[AC6005-wlan-regulate-domain-40]country-code cn
Info: The current country code is same with the input country code.
[AC6005-wlan-view]ap auth-mode mac-auth [AC6005-wlan-view]ap-id 1 ap	
[AC6005-wlan-view]ap-id 1 ap-mac 00e0-fce1-1110
[AC6005-wlan-ap-1]ap-g	
[AC6005-wlan-ap-1]ap-group 40
Warning: This operation may cause AP reset. If the country code changes, it willclear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.. done.
[AC6005-wlan-view]quit
#配置出去的默認路由
[AC6005]ip route-static 0.0.0.0 0 192.168.40.254
#這里要先進一下三層vlan
[AC6005]int vlan 10
[AC6005]quit

查看AP是否上線

?4.配置SSID模塊、安全模塊、VAP模塊

[AC6005]wlan
#ssid模塊
[AC6005-wlan-view]ssid-profile name 40
[AC6005-wlan-ssid-prof-40]ssid 40
Info: This operation may take a few seconds, please wait.done.
[AC6005-wlan-ssid-prof-40]quit
#安全模塊
[AC6005-wlan-view]security-profile name 40
[AC6005-wlan-sec-prof-40]security ?open      Open system wapi      WLAN authentication and privacy infrastructure wep       Wired equivalent privacy wpa       Wi-Fi protected access wpa-wpa2  Wi-Fi protected access version 1&2 wpa2      Wi-Fi protected access version 2 
[AC6005-wlan-sec-prof-40]security op	
[AC6005-wlan-sec-prof-40]security wpa2 ?dot1x  802.1x authentication psk    Pre-shared key 
[AC6005-wlan-sec-prof-40]security wpa2 p	
[AC6005-wlan-sec-prof-40]security wpa2 psk ?hex          Hexadecimal pass-phrase  Passphrase 
[AC6005-wlan-sec-prof-40]security wpa2 psk pa	
[AC6005-wlan-sec-prof-40]security wpa2 psk pass-phrase 123456789 ?aes       Advanced encryption standardaes-tkip  AES-TKIP tkip      Temporal key integrity protocol 
[AC6005-wlan-sec-prof-40]security wpa2 psk pass-phrase 123456789 aes
Warning: The current password is too simple. For the sake of security, you are a
dvised to set a password containing at least two of the following: lowercase let
ters a to z, uppercase letters A to Z, digits, and special characters. Continue?[Y/N]:y
[AC6005-wlan-sec-prof-40]quit
#VAP模塊
[AC6005-wlan-view]vap-profile name 40
[AC6005-wlan-vap-prof-40]ssid 40
Info: This operation may take a few seconds, please wait.done.
[AC6005-wlan-vap-prof-40]se	
[AC6005-wlan-vap-prof-40]security-profile 40
Info: This operation may take a few seconds, please wait.done.
[AC6005-wlan-vap-prof-40]ser	
[AC6005-wlan-vap-prof-40]service-vlan ?vlan-id    VLAN ID vlan-pool  Bind VLAN pool
[AC6005-wlan-vap-prof-40]service-vlan v	
[AC6005-wlan-vap-prof-40]service-vlan vlan-id 20
Info: This operation may take a few seconds, please wait.done.

6.VAP關聯AP組

[AC6005-wlan-vap-prof-40]quit
[AC6005-wlan-view]ap-group name 40
[AC6005-wlan-ap-group-40]regulatory-domain-profile 40
Warning: Modifying the country code will clear channel, power and antenna gain c
onfigurations of the radio and reset the AP. Continue?[Y/N]:y
[AC6005-wlan-ap-group-40]vap-profile 1 wlan 2 radio all 
Error: The VAP profile does not exist.
[AC6005-wlan-ap-group-40]vap-profile 40 wlan 2 radio all
Info: This operation may take a few seconds, please wait...done.

這個時候就可以查看到效果了

?7.測試

連接成功

?看一下連通性

?這個時候我們的WLAN就算配置完成了

如有錯誤，歡迎留言指出！

?

總結

以上是生活随笔為你收集整理的华为WLAN（AC+AP)的简单配置的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。