华为无线AC,AC案例
路由器的基本配置
[Huawei]interface GigabitEthernet 0/0/2
[Huawei-GigabitEthernet0/0/2]ip address 11.0.0.1 30
[Huawei]int LoopBack 1
[Huawei-LoopBack1]ip add 1.1.1.1 30
AC的配置
规划vlan ：vlan 102 为上行和路由器接口vlan ，vlan100为AC管理vlan ，vlan101为AP下发业务vlan.
[AC6605]vlan batch 100 101 102
[AC6605]dhcp enable
[AC6605]int vlan 100
[AC6605-Vlanif100]ip address 192.168.100.1 24
[AC6605-Vlanif100]dhcp select interface
[AC6605]int vlan 101
[AC6605-Vlanif101]ip add 192.168.101.1 24
[AC6605-Vlanif101]dhcp select interface
[AC6605-Vlanif101]dhcp server dns-list 8.8.8.8
[AC6605]int vlan 102
[AC6605-Vlanif102]ip address 11.0.0.2 30
[AC6605]ip route 0.0.0.0 0 11.0.0.1
[AC6605-GigabitEthernet0/0/2]port hybrid pvid vlan 102
[AC6605-GigabitEthernet0/0/2]port hybrid untagged vlan 102
配置AC的wlan功能
[AC6605]wlan ac-global carrier id cmcc ac id 1 AC编号为1、运营商为cmcc
[AC6605]wlan
[AC6605-wlan-view]ac sysnetid ac01 网元名称为ac01
[AC6605-wlan-view]wlan ac source interface vlan 100 用管理vlan100
por为下面AP建立隧道
[AC6605]interface GigabitEthernet 0/0/1
[AC6605-GigabitEthernet0/0/1]port link-type trunk
[AC6605-GigabitEthernet0/0/1]port trunk pvid vlan 100
[AC6605-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 101
配置AP上线
[AC6605]wlan
[AC6605-wlan-view]ap-auth-mode mac-auth 用AP的MAC认证
[AC6605-wlan-view]ap id 1 type-id 19 mac 00e0-fc7a-39a0 输入ap的MAC地址
配置区域
[AC6605-wlan-view]ap-region id 1 相当建立个区域编号为1 ，也可以任意定义
[AC6605-wlan-ap-r]ap id 1 把第一台AP加入
[AC6605-wlan-ap-1]region-id 1 实行加入区域1
配置wmm模版
[AC6605-wlan-view]wmm-profile id 1 name wmm 配置wmm模版名字为wmm
[AC6605-wlan-view]radio-profile id 1 name radio 配置射频模版名字为radio
[AC6605-wlan-view]security-profile id 1 name secu 配置安全模版名字为secu
security-policy wep
wep authentication-method share-key 在安全模版下调用密码， 这个可选。
wep key wep-40 pass-phrase 0 cipher xxxxx
[AC6605-wlan-view]traffic-profile id 1 name tarff 配置流量模版名字为tarff
[AC6605-wlan-view]radio-profile id 1 进入射频模版
[AC6605-wlan-radio-prof-radio]wmm-profile id 1
创建服务集
[AC6605]int Wlan-Ess 1
[AC6605-Wlan-Ess1]port hybrid pvid vlan 101
[AC6605-Wlan-Ess1]port hybrid untagged vlan 101
[AC6605]wlan
[AC6605-wlan-view]service-set id 1 name s01
[AC6605-wlan-service-set-s01]wlan-ess 1
[AC6605-wlan-service-set-s01]traffic-profile id 1
[AC6605-wlan-service-set-s01]security-profile id 1
[AC6605-wlan-service-set-s01]ssid huawei
[AC6605-wlan-service-set-s01]service-vlan 101
建立虚拟ap
[AC6605-wlan-view]ap 1 radio 0 radio 0意思是工作频率2.4GH 如果是radio 1 工作频率是5GH
[AC6605-wlan-radio-1/0]radio-profile id 1 服务集推给AP
[AC6605-wlan-radio-1/0]service-set id 1 绑定射频模版
[AC6605-wlan-view]commit ap 1 下发给AP1 ，此命令是必不可少
可选：配置同一个网段中，不能互访ping
[AC6605-wlan-view]service-set id 1 1表示某个AP的编号。
[AC6605-wlan-service-set-s01]user-isolate 拒绝互访
[AC6605-wlan-view]commit ap 1 最后要记得应用到AP才能生效。
