华为ENSP无线模拟

设备：AC6605一台、AP6050两台、S5700一台、STA一台，电话一部

网络规划：vlan 10 20 30  其中vlan 10为办公网、vlan 20 为生产网 vlan 30为生产网。

交接机S5700配置如下：

vlan batch 10 20 30    //批量创建vlan

dhcp enable                //开启DHCP

ip pool bg                //创建办公地址池

gateway-list 10.0.10.254        //网关

network 10.0.10.1 mask 255.255.255.0            //地址池

lease day 0 hour 2 minute 0                            //ip租期

dns-list 223.5.5.5 114.114.114.114                //dns

#

ip pool hl

gateway-list 10.0.30.254

network 10.0.30.0 mask 255.255.255.0

lease day 0 hour 2 minute 0

dns-list 223.5.5.5 114.114.114.114

#

ip pool sc

gateway-list 10.0.20.254

network 10.0.20.0 mask 255.255.255.0

lease day 0 hour 2 minute 0

dns-list 223.5.5.5 114.114.114.114

===============端口配置===========

interface GigabitEthernet0/0/1            //AC端口配置

port link-type trunk

port trunk pvid vlan 30

port trunk allow-pass vlan 10 20 30

#

interface GigabitEthernet0/0/2

port link-type trunk

port trunk pvid vlan 30

port trunk allow-pass vlan 10 20 30

#

interface GigabitEthernet0/0/3

port link-type trunk

port trunk pvid vlan 30

port trunk allow-pass vlan 10 20 30

=============AC6605配置============

vlan batch 10 20 30         //创建vlan

interface Vlanif30            //配置管理地址

ip address 10.0.30.251 255.255.255.0

capwap source ip-address 10.0.30.251    //配置AC源接口ip

=============wlan配置======================

regulatory-domain-profile name default        //配置国家代码

country-code cn

ap auth-mode no-auth        //设置AP上线验证模式

security-profile name sc        //设置wifi加密认证

  security wpa-wpa2 psk pass-phrase %^%#jg!E3X^cd#uRgQAW~hp=0nu=<_#*[RHvD$JVkP*J

%^%# aes

ssid-profile name sc        //设置SSID名称

  ssid shengchan

vap-profile name sc        设置vap业务模板

forward-mode direct-forward    //转发模式为直接转发

  service-vlan vlan-id 20    绑定业务vlan

  ssid-profile sc        //绑定ssid模板

  security-profile sc    //绑定加密模板