WLAN业务配置分析.docx
《WLAN业务配置分析.docx》由会员分享，可在线阅读，更多相关《WLAN业务配置分析.docx（13页珍藏版）》请在冰豆网上搜索。
WLAN业务配置分析
WLAN业务开通
组网拓扑：
AP注册方式有二层和三层组网方式；
业务转发方式有集中转发和本地转发方式；
一、AP二层注册
a）集中转发：
业务配置：
例：
AP管理：
1000
POE管理：
2000
AC管理：
3000
业务内层VLAN：
100-200
业务外层VLAN：
500
AP配置：
由AC下发，可由AC登陆AP，查询配置数据是否正确。
POE配置：
登陆：
ruijie
en
ruijie
conft
添加VLAN及描述
vlan100
nameYW_VLAN
exit
vlan2000
nameManegement_VLAN-SW
exit
vlan1000
nameManegement_VLAN-AP
exit
业务接口配置
interfaceFastEthernet0/1
switchportmodetrunk
switchporttrunknativevlan1000
switchportprotected
poeenable
上行口配置
interfaceGigabitEthernet0/26
switchportmodetrunk
duplexfull
speed100
POE管理配置
interfaceVLAN3156
noipproxy-arp
ipaddress10.10.251.101255.255.255.0
iproute0.0.0.00.0.0.010.10.251.1
SW93XX配置：
1SW——POE端口：
interfaceGigabitEthernet1/0/0
descriptiontopufa
undoporthybridvlan1
porthybridtaggedvlan10002000
undonegotiationauto
2SW——AC端口：
interfaceEth-Trunk11
descriptionGSQ_AC-2Masterup
undoporthybridvlan1
porthybridtaggedvlan10003000
porthybriduntaggedvlan500
portvlan-stackingvlan100to200stack-vlan500
3SW——BAS端口：
interfaceEth-Trunk1
undoporthybridvlan1
porthybridtaggedvlan50020003000
BAS配置：
1AC管理配置：
interfaceGigabitEthernet2/0/0.3000
descriptionGSQ_ruijie_AC-1
control-vid3000dot1q-termination
dot1qterminationvid3000
ipaddress111.9.15.129255.255.255.224
arpbroadcastenable
2POE管理配置：
接口配置：
interfaceGigabitEthernet2/0/0.2000
descriptionTOPufayinhang_POE_NMS
user-vlan2000
bas
access-typelayer2-subscriberdefault-domainauthenticationmpls-poe_nms
authentication-methodbind
ip-trigger
arp-trigger
vpn-instancePOE_NMS
POE域名配置：
domainmpls-poe_nms
authentication-schemenone
accounting-schemenone
ip-poolpoe_nms_cd_v2000
vpn-instancePOE_NMS
trustupstreamdefault
trust8021p
POE管理IP分配：
static-user10.10.20.2gateway10.10.20.1vpn-instancePOE_NMSinterfaceGigabitEthernet2/0/0.2000vlan2000domain-namempls-poe_nmsdetect
3用户业务配置
认证前域配置：
authentication-schemenone
accounting-schemenone
ip-pool-groupwlan
trustupstreamdefault
trust8021p
user-priorityupstream1
user-groupjt-jianhang
idle-cut1510240
web-server218.200.239.185
web-serverurlhttp:
//218.200.239.185:
9999/portalserver/pufa.jsp
http-hostcarenable
认证后域配置：
authentication-schemeradius
accounting-schemeradius
radius-servergroupradius
trustupstreamdefault
trust8021p
user-priorityupstream1
用户业务接口配置：
interfaceGigabitEthernet2/0/0.500
descriptionWLAN_JITUAN_Pufayinhang
user-vlan100to200qinq500
bas
access-typelayer2-subscriberbas-interface-name9163.0028.280.00.460default-domainpre-authenticationpufayinhang_wlan-beforeauthenticationforcepufayinhang_wlan
AC配置：
交换板配置：
新建VLAN：
Vlan100
Namepufayinghang
Exit
Vlan3000
NameManagement_vlan-AC
添加管理IP：
interfaceVLAN3741
noipproxy-arp
ipaddress183.223.250.107255.255.255.224
vrrp1priority110
vrrp1ip183.223.250.98
添加AP地址池：
servicedhcp
ipdhcpexcluded-address10.12.186.110.12.186.3
ipdhcppoolpufa
option138ip192.168.255.1192.168.254.1
network10.12.186.0255.255.254.0
default-router10.12.186.1
iproute10.12.186.0255.255.254.010.1.2.1
新增AC——SW汇聚口：
interfaceGigabitEthernet1/19
port-group1
interfaceGigabitEthernet1/20
port-group1
interfaceGigabitEthernet1/21
port-group1
interfaceGigabitEthernet1/22
port-group1
interfaceGigabitEthernet1/23
port-group1
interfaceGigabitEthernet1/24
port-group1
interfaceAggregatePort1
switchportmodetrunk
switchporttrunkallowedvlanadd100
switchporttrunkallowedvlanadd1000
switchporttrunkallowedvlanadd3000
AC业务板配置：
新建VLAN：
Vlan100
Namepufayinghang
Exit
Vlan3000
NameManagement_vlan-AC
路由配置：
iproute10.12.186.0255.255.254.0183.223.250.98
SSID组配置：
wlan-config6SPDB
wlan-basedper-user-limitup-streamsaverage-data-rate256burst-data-rate256
wlan-basedper-user-limitdown-streamsaverage-data-rate256burst-data-rate256
enable-broad-ssid
AP组配置：
ap-group100
interface-mapping6100
AP配置：
ap-config1414.4b56.e038
802.11nmcssupport15radio1
802.11nmcssupport15radio2
station-roleroot-apradio1
station-roleroot-apradio2
antennareceive3radio1
antennareceive3radio2
antennatransmit3radio1
antennatransmit3radio2
radio-type1802.11b
radio-type2802.11a
sta-limit25radio1
sta-limit25radio2
channel1radio1
ap-group100
ex
b）本地转发：
SW93XX配置：
1SW——POE端口：
interfaceGigabitEthernet1/0/0
descriptiontopufa
undoporthybridvlan1
porthybridtaggedvlan10002000
porthybriduntaggedvlan500
portvlan-stackingvlan100to200stack-vlan500
undonegotiationauto
2SW——AC端口：
interfaceEth-Trunk11
descriptionGSQ_AC-2Masterup
undoporthybridvlan1
porthybridtaggedvlan30001000
3SW——BAS端口：
interfaceEth-Trunk1
undoporthybridvlan1
porthybridtaggedvlan50020003000
AC业务板配置：
SSID组配置：
wlan-config6SPDB
wlan-basedper-user-limitup-streamsaverage-data-rate256burst-data-rate256
wlan-basedper-user-limitdown-streamsaverage-data-rate256burst-data-rate256
enable-broad-ssid
tunnellocal
二、AP三层注册
a）集中转发
POE管理还是在BAS2上，AC管理在BAS1，业务在BAS1上；
BAS2和BAS1起VPN，BAS1和AC起DHCP中继。
BAS-2：
建立远端DHCP服务器
dhcp-servergroupsl-gsq-ap-rj
dhcp-server10.1.1.2vpn-instanceCD_ICBC_WLAN
建立远端地址池
ippoolpufa-wlanbasremote
vpn-instanceCD_ICBC_WLAN
gateway10.12.186.1255.255.254.0
dhcp-servergroupsl-gsq-ap-rj
发布AP路由
bgp64640
ipv4-familyvpn-instanceCD_ICBC_WLAN
network10.12.186.0255.255.254.0
配置接口域
Aaa
domainpufa-gsq-wlan
authentication-schemenone
accounting-schemenone
ip-poolguohang-gsq
vpn-instanceCD_ICBC_WLAN
配置AP接口
interfaceEth-Trunk1.1000
descriptionTOpufa-AP
trustupstreamdefault
trust8021p
user-vlan1000
bas
#
access-typelayer2-subscriberdefault-domainauthenticationpufa-gsq-wlan
authentication-methodbind
vpn-instanceCD_ICBC_WLAN
BAS-1配置：
创建与AC的DHCP地址互联
interfaceGigabitEthernet2/0/0.3735
descriptionRuiJie_AC-DHCP
control-vid3735dot1q-termination
dot1qterminationvid3735
ipbindingvpn-instanceCD_ICBC_WLAN
ipaddress10.1.2.1255.255.255.224
arpbroadcastenable
路由发布：
Bgp64640
ipv4-familyvpn-instanceCD_ICBC_WLAN
network10.1.2.0255.255.255.224
AC配置：
vlan3735
interfaceAggregatePort1
switchportmodetrunk
switchporttrunkallowedvlanadd3735
interfaceVLAN3735
noipproxy-arp
ipaddress10.1.2.3255.255.255.224
vrrp11priority110
vrrp11ip10.1.2.2
b）本地转发：
升级会员 