第16章 WLAN

2.配置AC

创建ap-group dsrw，采用MAC地址认证的方式关联AP，将AP命名为AP1、AP2，关联到ap-group dsrw，配置参数模板关联到VAP模板

1)AC1创建名为dsrw的AP组

[AC1]wlan 
[AC1-wlan-view]ap-group name dsrw

2）AC1创建域管理模板，在域管理模板下配置AC的国家码

[AC1-wlan-view]regulatory-domain-profile name default
[AC1-wlan-regulate-domain-default]country-code cn

3）AC1在AP组下引用域管理模板

[AC1-wlan-view]ap-group name dsrw
[AC1-wlan-ap-group-dsrw]regulatory-domain-profile default
Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continue?[Y/N]:y

4）AC1添加AP1、AP2

[AC1-wlan-view]ap auth-mode mac-auth
[AC1-wlan-view]ap-id 0 ap-mac 00E0-FC48-42C0   
[AC1-wlan-ap-0]ap-name AP1
[AC1-wlan-ap-0]ap-group dsrw
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configurations of the radio, Whether to continue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.. done.
[AC1-wlan-ap-0]quit
[AC1-wlan-view]ap-id 1 ap-mac 00E0-FCCA-1190   
[AC1-wlan-ap-1]ap-name AP2
[AC1-wlan-ap-1]ap-group dsrw
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configurations of the radio, Whether to continue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.. done.
[AC1-wlan-ap-1]

5）AC1配置参数模板

[AC1-wlan-view]security-profile name dsrw
[AC1-wlan-sec-prof-dsrw]security wpa2 psk pass-phrase dsrw.com aes
//配置 security-profile dsrw，采用WPA2-PSK认证，配置预共享密钥为dsrw.com
[AC1-wlan-sec-prof-dsrw]quit
[AC1-wlan-view]ssid-profile name dsrw
[AC1-wlan-ssid-prof-dsrw]ssid HSB
//配置 ssid-profile dsrw，设置SSID为HSB
[AC1-wlan-ssid-prof-dsrw]quit
[AC1-wlan-view]vap-profile name dsrw
[AC1-wlan-vap-prof-dsrw]forward-mode direct-forward
[AC1-wlan-vap-prof-dsrw]service-vlan vlan-id 11
[AC1-wlan-vap-prof-dsrw]ssid-profile dsrw
[AC1-wlan-vap-prof-dsrw]security-profile dsrw
[AC1-wlan-vap-prof-dsrw]quit
[AC1-wlan-view]ap-group name dsrw
[AC1-wlan-ap-group-dsrw]vap-profile dsrw wlan 1 radio all
//配置 vap-profile，设置转发模式为直接转发，业务VLAN设置为11，调用ssid-profile dsrw、security-profile dsrw。在 ap-group dsrw中调用vap-profile dsrw

6)AC2创建名为dsrw的AP组

[AC2]wlan
[AC2-wlan-view]ap-group name dsrw

7)AC2创建域管理模板，在域管理模板下配置AC的国家码

[AC2-wlan-view]regulatory-domain-profile name default
[AC2-wlan-regulate-domain-default]country-code cn
[AC2-wlan-regulate-domain-default]quit

8)AC2在AP组下引用域管理模板

[AC2-wlan-view]ap-group name dsrw
[AC2-wlan-ap-group-dsrw]regulatory-domain-profile default
Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continue?[Y/N]:y
[AC2-wlan-ap-group-dsrw]quit

9)AC2添加AP1、AP2

[AC2-wlan-view]ap auth-mode mac-auth 
[AC2-wlan-view]ap-id 0 ap-mac 00E0-FC48-42C0
[AC2-wlan-ap-0]ap-name AP1
[AC2-wlan-ap-0]ap-group dsrw
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configurations of the radio, Whether to continue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.. done.
[AC2-wlan-ap-0]quit
[AC2-wlan-view]ap-id 1 ap-mac 00E0-FCCA-1190
[AC2-wlan-ap-1]ap-name AP2
[AC2-wlan-ap-1]ap-group dsrw
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configurations of the radio, Whether to continue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.. done.
[AC2-wlan-ap-1]

10)AC2配置参数模板

[AC2-wlan-view]security-profile name dsrw
[AC2-wlan-sec-prof-dsrw]security wpa2 psk pass-phrase dsrw.com aes
[AC2-wlan-sec-prof-dsrw]quit
[AC2-wlan-view]ssid-profile name dsrw
[AC2-wlan-ssid-prof-dsrw]ssid HSB
[AC2-wlan-ssid-prof-dsrw]quit
[AC2-wlan-view]vap-profile name dsrw
[AC2-wlan-vap-prof-dsrw]forward-mode direct-forward
[AC2-wlan-vap-prof-dsrw]service-vlan vlan-id 11
[AC2-wlan-vap-prof-dsrw]ssid-profile dsrw
[AC2-wlan-vap-prof-dsrw]security-profile dsrw
[AC2-wlan-vap-prof-dsrw]quit
[AC2-wlan-view]ap-group name dsrw
[AC2-wlan-ap-group-dsrw]vap-profile dsrw wlan 1 radio all

1 2