拓撲搭建：
思維導圖：
配置步驟：
基礎配置： ---------- [AC6605]vlan batch 100 101 #創建vlan [AC6605]dhcp enable #開啟DHCP服務 VLAN配置 [AC6605]int vlan 100 [AC6605-Vlanif100]description AP_Manage [AC6605-Vlanif100]ip add 192.168.100.254 24 [AC6605-Vlanif100]dhcp select interface #為DHCP選擇源接口 [AC6605-Vlanif100]quit [AC6605]int vlan 101 [AC6605-Vlanif101]description USER [AC6605-Vlanif101]ip add 192.168.101.254 24 [AC6605-Vlanif101]dhcp select interface #為DHCP選擇源接口 [AC6605-Vlanif101]quit [AC6605]capwap source interface Vlanif 100 #為capwap隧道綁定vlan 無線配置： ---------- [AC6605]wlan #進入無線配置視圖 [AC6605-wlan-view] [AC6605-wlan-view]regulatory-domain-profile name office-domain #創建域管理模板，名稱為office-domain [AC6605-wlan-regulate-domain-office-domain]country-code CN #配置國家代碼 [AC6605-wlan-regulate-domain-office-domain]quit [AC6605-wlan-view]ssid-profile name office-ssid #創建SSID模板，名稱為office-ssid [AC6605-wlan-ssid-prof-office-ssid]ssid office #配置SSID名稱為office [AC6605-wlan-ssid-prof-office-ssid]quit [AC6605-wlan-view]security-profile name office-security #創建安全策略，名稱為office-security [AC6605-wlan-sec-prof-office-security]security wpa-wpa2 psk pass-phrase 12345678 9 aes #SSID密碼為123456789 [AC6605-wlan-view]vap-profile name office-vap #創建VAP模板 [AC6605-wlan-vap-prof-office-vap]forward-mode direct-forward #配置業務數據轉發模式 [AC6605-wlan-vap-prof-office-vap]security-profile office-security #綁定安全策略 [AC6605-wlan-vap-prof-office-vap]ssid-profile office-ssid #綁定SSID模板 [AC6605-wlan-vap-prof-office-vap]service-vlan vlan-id 101 #綁定業務VLAN [AC6605-wlan-view]ap-group name office-ap-group #創建AP組，名稱為office-ap-group [AC6605-wlan-ap-group-office-ap-group]regulatory-domain-profile office-domain #綁定域模板 [AC6605-wlan-ap-group-office-ap-group]vap-profile office-vap wlan 1 radio 0 #綁定vap模板到射頻卡0上 [AC6605-wlan-ap-group-office-ap-group]vap-profile office-vap wlan 1 radio 1 #綁定vap模板到射頻卡1上 [AC6605-wlan-view]ap-id 0 ap-mac 00e0-fc79-4b40 添加AP，APmac //ap mac可以到對應互聯口上查看，如：dis int g0/0/0 [AC6605-wlan-ap-0]ap-group office-ap-group #添加到AP組中 AC接口配置: ------------- [AC6605]int g0/0/1 [AC6605-GigabitEthernet0/0/1]port link-type trunk [AC6605-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 101
交換機配置：
[Switch]vlan batch 100 101 #創建vlan [Switch]int g0/0/24]int g0/0/24 [Switch-GigabitEthernet0/0/24]description to_AC [Switch-GigabitEthernet0/0/24]port link-type trunk [Switch-GigabitEthernet0/0/24]port trunk allow-pass vlan 100 101 [Switch]int g0/0/1 [Switch-GigabitEthernet0/0/1]description to_AP [Switch-GigabitEthernet0/0/1]port link-type trunk [Switch-GigabitEthernet0/0/1]port trunk pvid vlan 100 [Switch-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 101
驗證：
感謝：LeslieLiangZ 教程