实验拓扑

需求:旁挂二层直接转发模式,vlan10是AP管理子网,vlan20为业务办公子网。
配置思路
1. AC1-SW1,SW1-AP1接口配置Trunk。
2. SW1配置DHCP服务和接口IP与VLAN。
3. AC1配置WLAN服务。(可能是ensp bug,笔记本无法连接5G信号)
配置命令
#SW1
sys
sysn SW1
vlan batch 10 20
vlan 10
desc mgmt
vlan 20
desc wifi
int vlan 10
ip addr 10.100.10.1 24
int vlan 20
ip addr 10.100.20.1 24
dhcp global
int g0/0/1
desc AP1
port link-type trunk
port trunk pvid vlan 10
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 10 20
int g0/0/24
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 10
dhcp enable
ip pool vlan20
gateway-list 10.100.20.1
network 10.100.20.0 mask 24
lease day 0 hour 8
dns-list 8.8.8.8
#AC1
sys
sysn AC1
vlan 10
int vlan 10
ip addr 10.100.10.2 24
int g0/0/1
port link-type trunk
undo port trunk allow-pass vlan 1
port trunk allow-pass vlan 10
ip route-static 0.0.0.0 0 10.100.10.1
capwap source int vlan10
wlan
ap auth-mode no-auth
security-profile name office
security wpa-wpa2 psk pass-phrase 12345678
ssid-profile name office
ssid OFFICE
vap-profile name office
service-vlan vlan-id 20
ssid-profile office
security-profile office
ap-group name default
vap-profile office wlan 1 radio all
结果验证

