WLAN业务配置分析.docx
- 文档编号:5598939
- 上传时间:2022-12-28
- 格式:DOCX
- 页数:13
- 大小:385.14KB
WLAN业务配置分析.docx
《WLAN业务配置分析.docx》由会员分享,可在线阅读,更多相关《WLAN业务配置分析.docx(13页珍藏版)》请在冰豆网上搜索。
WLAN业务配置分析
WLAN业务开通
组网拓扑:
AP注册方式有二层和三层组网方式;
业务转发方式有集中转发和本地转发方式;
一、AP二层注册
a)集中转发:
业务配置:
例:
AP管理:
1000
POE管理:
2000
AC管理:
3000
业务内层VLAN:
100-200
业务外层VLAN:
500
AP配置:
由AC下发,可由AC登陆AP,查询配置数据是否正确。
POE配置:
登陆:
ruijie
en
ruijie
conft
添加VLAN及描述
vlan100
nameYW_VLAN
exit
vlan2000
nameManegement_VLAN-SW
exit
vlan1000
nameManegement_VLAN-AP
exit
业务接口配置
interfaceFastEthernet0/1
switchportmodetrunk
switchporttrunknativevlan1000
switchportprotected
poeenable
上行口配置
interfaceGigabitEthernet0/26
switchportmodetrunk
duplexfull
speed100
POE管理配置
interfaceVLAN3156
noipproxy-arp
ipaddress10.10.251.101255.255.255.0
iproute0.0.0.00.0.0.010.10.251.1
SW93XX配置:
1SW——POE端口:
interfaceGigabitEthernet1/0/0
descriptiontopufa
undoporthybridvlan1
porthybridtaggedvlan10002000
undonegotiationauto
2SW——AC端口:
interfaceEth-Trunk11
descriptionGSQ_AC-2Masterup
undoporthybridvlan1
porthybridtaggedvlan10003000
porthybriduntaggedvlan500
portvlan-stackingvlan100to200stack-vlan500
3SW——BAS端口:
interfaceEth-Trunk1
undoporthybridvlan1
porthybridtaggedvlan50020003000
BAS配置:
1AC管理配置:
interfaceGigabitEthernet2/0/0.3000
descriptionGSQ_ruijie_AC-1
control-vid3000dot1q-termination
dot1qterminationvid3000
ipaddress111.9.15.129255.255.255.224
arpbroadcastenable
2POE管理配置:
接口配置:
interfaceGigabitEthernet2/0/0.2000
descriptionTOPufayinhang_POE_NMS
user-vlan2000
bas
access-typelayer2-subscriberdefault-domainauthenticationmpls-poe_nms
authentication-methodbind
ip-trigger
arp-trigger
vpn-instancePOE_NMS
POE域名配置:
domainmpls-poe_nms
authentication-schemenone
accounting-schemenone
ip-poolpoe_nms_cd_v2000
vpn-instancePOE_NMS
trustupstreamdefault
trust8021p
POE管理IP分配:
static-user10.10.20.2gateway10.10.20.1vpn-instancePOE_NMSinterfaceGigabitEthernet2/0/0.2000vlan2000domain-namempls-poe_nmsdetect
3用户业务配置
认证前域配置:
authentication-schemenone
accounting-schemenone
ip-pool-groupwlan
trustupstreamdefault
trust8021p
user-priorityupstream1
user-groupjt-jianhang
idle-cut1510240
web-server218.200.239.185
web-serverurlhttp:
//218.200.239.185:
9999/portalserver/pufa.jsp
http-hostcarenable
认证后域配置:
authentication-schemeradius
accounting-schemeradius
radius-servergroupradius
trustupstreamdefault
trust8021p
user-priorityupstream1
用户业务接口配置:
interfaceGigabitEthernet2/0/0.500
descriptionWLAN_JITUAN_Pufayinhang
user-vlan100to200qinq500
bas
access-typelayer2-subscriberbas-interface-name9163.0028.280.00.460default-domainpre-authenticationpufayinhang_wlan-beforeauthenticationforcepufayinhang_wlan
AC配置:
交换板配置:
新建VLAN:
Vlan100
Namepufayinghang
Exit
Vlan3000
NameManagement_vlan-AC
添加管理IP:
interfaceVLAN3741
noipproxy-arp
ipaddress183.223.250.107255.255.255.224
vrrp1priority110
vrrp1ip183.223.250.98
添加AP地址池:
servicedhcp
ipdhcpexcluded-address10.12.186.110.12.186.3
ipdhcppoolpufa
option138ip192.168.255.1192.168.254.1
network10.12.186.0255.255.254.0
default-router10.12.186.1
iproute10.12.186.0255.255.254.010.1.2.1
新增AC——SW汇聚口:
interfaceGigabitEthernet1/19
port-group1
interfaceGigabitEthernet1/20
port-group1
interfaceGigabitEthernet1/21
port-group1
interfaceGigabitEthernet1/22
port-group1
interfaceGigabitEthernet1/23
port-group1
interfaceGigabitEthernet1/24
port-group1
interfaceAggregatePort1
switchportmodetrunk
switchporttrunkallowedvlanadd100
switchporttrunkallowedvlanadd1000
switchporttrunkallowedvlanadd3000
AC业务板配置:
新建VLAN:
Vlan100
Namepufayinghang
Exit
Vlan3000
NameManagement_vlan-AC
路由配置:
iproute10.12.186.0255.255.254.0183.223.250.98
SSID组配置:
wlan-config6SPDB
wlan-basedper-user-limitup-streamsaverage-data-rate256burst-data-rate256
wlan-basedper-user-limitdown-streamsaverage-data-rate256burst-data-rate256
enable-broad-ssid
AP组配置:
ap-group100
interface-mapping6100
AP配置:
ap-config1414.4b56.e038
802.11nmcssupport15radio1
802.11nmcssupport15radio2
station-roleroot-apradio1
station-roleroot-apradio2
antennareceive3radio1
antennareceive3radio2
antennatransmit3radio1
antennatransmit3radio2
radio-type1802.11b
radio-type2802.11a
sta-limit25radio1
sta-limit25radio2
channel1radio1
ap-group100
ex
b)本地转发:
SW93XX配置:
1SW——POE端口:
interfaceGigabitEthernet1/0/0
descriptiontopufa
undoporthybridvlan1
porthybridtaggedvlan10002000
porthybriduntaggedvlan500
portvlan-stackingvlan100to200stack-vlan500
undonegotiationauto
2SW——AC端口:
interfaceEth-Trunk11
descriptionGSQ_AC-2Masterup
undoporthybridvlan1
porthybridtaggedvlan30001000
3SW——BAS端口:
interfaceEth-Trunk1
undoporthybridvlan1
porthybridtaggedvlan50020003000
AC业务板配置:
SSID组配置:
wlan-config6SPDB
wlan-basedper-user-limitup-streamsaverage-data-rate256burst-data-rate256
wlan-basedper-user-limitdown-streamsaverage-data-rate256burst-data-rate256
enable-broad-ssid
tunnellocal
二、AP三层注册
a)集中转发
POE管理还是在BAS2上,AC管理在BAS1,业务在BAS1上;
BAS2和BAS1起VPN,BAS1和AC起DHCP中继。
BAS-2:
建立远端DHCP服务器
dhcp-servergroupsl-gsq-ap-rj
dhcp-server10.1.1.2vpn-instanceCD_ICBC_WLAN
建立远端地址池
ippoolpufa-wlanbasremote
vpn-instanceCD_ICBC_WLAN
gateway10.12.186.1255.255.254.0
dhcp-servergroupsl-gsq-ap-rj
发布AP路由
bgp64640
ipv4-familyvpn-instanceCD_ICBC_WLAN
network10.12.186.0255.255.254.0
配置接口域
Aaa
domainpufa-gsq-wlan
authentication-schemenone
accounting-schemenone
ip-poolguohang-gsq
vpn-instanceCD_ICBC_WLAN
配置AP接口
interfaceEth-Trunk1.1000
descriptionTOpufa-AP
trustupstreamdefault
trust8021p
user-vlan1000
bas
#
access-typelayer2-subscriberdefault-domainauthenticationpufa-gsq-wlan
authentication-methodbind
vpn-instanceCD_ICBC_WLAN
BAS-1配置:
创建与AC的DHCP地址互联
interfaceGigabitEthernet2/0/0.3735
descriptionRuiJie_AC-DHCP
control-vid3735dot1q-termination
dot1qterminationvid3735
ipbindingvpn-instanceCD_ICBC_WLAN
ipaddress10.1.2.1255.255.255.224
arpbroadcastenable
路由发布:
Bgp64640
ipv4-familyvpn-instanceCD_ICBC_WLAN
network10.1.2.0255.255.255.224
AC配置:
vlan3735
interfaceAggregatePort1
switchportmodetrunk
switchporttrunkallowedvlanadd3735
interfaceVLAN3735
noipproxy-arp
ipaddress10.1.2.3255.255.255.224
vrrp11priority110
vrrp11ip10.1.2.2
b)本地转发:
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- WLAN 业务 配置 分析