HCIA-Datacom網(wǎng)絡(luò)技術(shù)實(shí)驗(yàn)指南13. 構(gòu)建基礎(chǔ)WLAN-p48

構(gòu)建基礎(chǔ)WLAN13.1 實(shí)驗(yàn)介紹13.2 實(shí)驗(yàn)配置任務(wù)實(shí)驗(yàn)任務(wù)1：基本配置實(shí)驗(yàn)任務(wù)2：配置AP上線實(shí)驗(yàn)任務(wù)3：配置WLAN業(yè)務(wù)參數(shù)目錄實(shí)驗(yàn)介紹在本實(shí)驗(yàn)的WLAN網(wǎng)絡(luò)中，AC負(fù)責(zé)對(duì)AP進(jìn)行統(tǒng)一管理，并且進(jìn)行WLAN的配置，使無線客戶端（STA）能夠連接到AP并訪問網(wǎng)絡(luò)。在本實(shí)驗(yàn)中，學(xué)生需要完成以下任務(wù)：交換機(jī)S1作為DHCP服務(wù)器，分別為AP和STA分配IP地址。需要注意的是，AP需要獲得管理VLAN10中的IP地址，STA需要獲得業(yè)務(wù)VLAN20中的IP地址使AP注冊(cè)到AC上，并且由AC進(jìn)行統(tǒng)一管理在AC上進(jìn)行WLAN配置，使AP廣播SSID，STA通過AP連接到網(wǎng)絡(luò)中實(shí)驗(yàn)?zāi)康膶P注冊(cè)在AC上使AC下發(fā)WLAN業(yè)務(wù)參數(shù)至AP使STA通過AP連接到WLAN實(shí)驗(yàn)拓?fù)?AC6005S1APSTAG0/0/1G0/0/1G0/0/2G0/0/1管理VLAN10業(yè)務(wù)VLAN20網(wǎng)絡(luò)地址規(guī)劃6設(shè)備接口IP地址子網(wǎng)掩碼默認(rèn)網(wǎng)關(guān)AC6005VLANIF10192.168.10.100255.255.255.0192.168.10.1S1VLANIF10192.168.10.1255.255.255.0—VLANIF20192.168.20.1255.255.255.0—APG0/0/1192.168.10.10255.255.255.0192.168.10.1STAE0/0/1192.168.20.20255.255.255.0192.168.20.113.1 實(shí)驗(yàn)介紹13.2 實(shí)驗(yàn)配置任務(wù)實(shí)驗(yàn)任務(wù)1：基本配置實(shí)驗(yàn)任務(wù)2：配置AP上線實(shí)驗(yàn)任務(wù)3：配置WLAN業(yè)務(wù)參數(shù)目錄實(shí)驗(yàn)任務(wù)1：基本配置實(shí)驗(yàn)?zāi)康模涸谶@個(gè)實(shí)驗(yàn)任務(wù)中，我們需要根據(jù)實(shí)驗(yàn)拓?fù)渫瓿蛇B通性配置，并且設(shè)置DHCP服務(wù)器。根據(jù)拓?fù)湟?guī)劃，AC和AP之間是通過交換機(jī)S1實(shí)現(xiàn)的二層連接，我們選擇以交換機(jī)S1作為DHCP服務(wù)器，為AP和STA分配IP地址，并且作為AP和STA的網(wǎng)關(guān)。接口接口/網(wǎng)關(guān)地址DHCP地址池范圍VLANIF10192.168.10.1/24192.168.10.2–192.168.10.10VLANIF20192.168.20.1/24192.168.20.2–192.168.20.20實(shí)驗(yàn)任務(wù)1：完成連通性配置（1）AC上的VLAN配置和路由配置[AC6005]vlan10Info:Thisoperationmaytakeafewseconds.Pleasewaitforamoment...done.[AC6005-vlan10]quit[AC6005]interfaceGigabitEthernet0/0/1[AC6005-GigabitEthernet0/0/1]portlink-typetrunk[AC6005-GigabitEthernet0/0/1]porttrunkallow-passvlan10[AC6005]interfaceVlanif10[AC6005-Vlanif10]ipaddress192.168.10.10024[AC6005-Vlanif10]quit[AC6005]iproute-static0.0.0.00.0.0.0192.168.10.1實(shí)驗(yàn)任務(wù)1：完成連通性配置（2）S1上的VLAN配置[S1]vlanbatch1020Info:Thisoperationmaytakeafewseconds.Pleasewaitforamoment....done.[S1]interfaceGigabitEthernet0/0/1[S1-GigabitEthernet0/0/1]portlink-typetrunk[S1-GigabitEthernet0/0/1]porttrunkallow-passvlan10[S1-GigabitEthernet0/0/1]quit[S1]interfaceGigabitEthernet0/0/2[S1-GigabitEthernet0/0/2]portlink-typetrunk[S1-GigabitEthernet0/0/2]porttrunkpvidvlan10[S1-GigabitEthernet0/0/2]porttrunkallow-passvlan1020實(shí)驗(yàn)任務(wù)1：DHCP服務(wù)器配置將S1配置為DHCP服務(wù)器[S1]dhcpenableInfo:Theoperationmaytakeafewseconds.Pleasewaitforamoment.done.[S1]interfaceVlanif10[S1-Vlanif10]ipaddress192.168.10.124[S1-Vlanif10]dhcpselectinterface[S1-Vlanif10]dhcpserverexcluded-ip-address192.168.10.11192.168.10.254[S1-Vlanif10]quit[S1]interfaceVlanif20[S1-Vlanif20]ipaddress192.168.20.124[S1-Vlanif20]dhcpselectinterface

[S1-Vlanif20]dhcpserverexcluded-ip-address192.168.20.21192.168.20.254實(shí)驗(yàn)任務(wù)1：測(cè)試AC與S1之間的連通性測(cè)試AC與S1之間的連通性[AC6005]ping192.168.10.1PING192.168.10.1:56databytes,pressCTRL_CtobreakReplyfrom192.168.10.1:bytes=56Sequence=1ttl=255time=330msReplyfrom192.168.10.1:bytes=56Sequence=2ttl=255time=330msReplyfrom192.168.10.1:bytes=56Sequence=3ttl=255time=900msReplyfrom192.168.10.1:bytes=56Sequence=4ttl=255time=1210msReplyfrom192.168.10.1:bytes=56Sequence=5ttl=255time=480ms---192.168.10.1pingstatistics---5packet(s)transmitted5packet(s)received0.00%packetlossround-tripmin/avg/max=330/650/1210ms13.1 實(shí)驗(yàn)介紹13.2 實(shí)驗(yàn)配置任務(wù)實(shí)驗(yàn)任務(wù)1：基本配置實(shí)驗(yàn)任務(wù)2：配置AP上線實(shí)驗(yàn)任務(wù)3：配置WLAN業(yè)務(wù)參數(shù)目錄實(shí)驗(yàn)任務(wù)2：配置AP上線實(shí)驗(yàn)?zāi)康模涸贏C上創(chuàng)建AP組，將所有使用相同配置的AP都加入到這個(gè)AP組中，這樣就可以將相同的配置應(yīng)用到多臺(tái)AP上。在本實(shí)驗(yàn)中我們只部署一臺(tái)AP作為示范。實(shí)驗(yàn)任務(wù)2：配置AP組的命令進(jìn)入WLAN視圖（系統(tǒng)視圖）在接口啟用DHCP服務(wù)器并采用全局地址池（WLAN視圖）wlan進(jìn)入WLAN視圖ap-groupnamegroup-nameAP組名稱實(shí)驗(yàn)任務(wù)2：創(chuàng)建AP組在AC上創(chuàng)建AP組[AC6005]wlan[AC6005-wlan-view]ap-groupnamehcia-groupInfo:Thisoperationmaytakeafewseconds.Pleasewaitforamoment.done.[AC6005-wlan-ap-group-hcia-group]實(shí)驗(yàn)任務(wù)2：配置AC系統(tǒng)參數(shù)的命令創(chuàng)建域管理模板并進(jìn)入域管理模板視圖（WLAN視圖）配置國(guó)家碼標(biāo)識(shí)（域管理模板視圖）regulatory-domain-profileprofile-name域管理模板名稱country-codecountry-code國(guó)家碼標(biāo)識(shí)實(shí)驗(yàn)任務(wù)2：創(chuàng)建并應(yīng)用域管理模板在AC上創(chuàng)建域管理模板在AC上應(yīng)用域管理模板[AC6005]wlan[AC6005-wlan-view]regulatory-domain-profilenamehcia-domain

[AC6005-wlan-regulate-domain-hcia-domain]country-codecnInfo:Thecurrentcountrycodeissamewiththeinputcountrycode.[AC6005]wlan[AC6005-wlan-view]ap-groupnamehcia-group[AC6005-wlan-ap-group-hcia-group]regulatory-domain-profilehcia-domainWarning:Modifyingthecountrycodewillclearchannel,powerandantennagainconfigurationsoftheradioandresettheAP.Continue?[Y/N]:y[AC6005-wlan-ap-group-hcia-group]實(shí)驗(yàn)任務(wù)2：選擇AC源接口的命令選擇AC源接口（系統(tǒng)視圖）capwapsourceinterface{loopback

loopback-number|vlanif

vlan-id}環(huán)回接口IDVLANID實(shí)驗(yàn)任務(wù)2：選擇AC源接口在AC上選擇AC源接口[AC6005]capwapsourceinterfaceVlanif10實(shí)驗(yàn)任務(wù)2：導(dǎo)入AP的命令（1）指定AP的認(rèn)證模式（WLAN視圖）離線添加AP設(shè)備并進(jìn)入AP視圖（WLAN視圖）apauth-mode{mac-auth

|

no-auth

|

sn-auth}MAC認(rèn)證ap-id

ap-id{ap-mac

ap-mac|ap-sn

ap-sn|ap-mac

ap-mac

ap-sn

ap-sn}無認(rèn)證SN認(rèn)證APMACAPSNAPMAC+SNAPID實(shí)驗(yàn)任務(wù)2：導(dǎo)入AP的命令（2）為AP設(shè)置可識(shí)別的名稱（AP視圖）指定AP所屬的AP組（AP視圖）ap-nameap-nameAP名稱ap-groupap-groupAP組名稱實(shí)驗(yàn)任務(wù)2：導(dǎo)入AP在AC上導(dǎo)入AP[AC6005]wlan[AC6005-wlan-view]apauth-modemac-auth[AC6005-wlan-view]ap-id0ap-mac00e0-fc63-7f00[AC6005-wlan-ap-0]ap-namehcia-ap[AC6005-wlan-ap-0]ap-grouphcia-groupWarning:ThisoperationmaycauseAPreset.Ifthecountrycodechanges,itwillclearchannel,powerandantennagainconfigurationsoftheradio,Whethertocontinue?[Y/N]:yInfo:Thisoperationmaytakeafewseconds.Pleasewaitforamoment..done.[AC6005-wlan-ap-0]實(shí)驗(yàn)任務(wù)2：驗(yàn)證實(shí)驗(yàn)效果（1）在AC上查看離線配置的AP[AC6005]displayapallInfo:Thisoperationmaytakeafewseconds.Pleasewaitforamoment.done.TotalAPinformation:idle:idle[1]-------------------------------------------------------------------------------------IDMACNameGroupIPTypeStateSTAUptime-------------------------------------------------------------------------------------000e0-fc63-7f00hcia-aphcia-group--idle0--------------------------------------------------------------------------------------Total:1實(shí)驗(yàn)任務(wù)2：驗(yàn)證實(shí)驗(yàn)效果（2）AP上的變化<Huawei>=====CAPWAPLINKISUP!!!=====<hcia-ap>實(shí)驗(yàn)任務(wù)2：驗(yàn)證實(shí)驗(yàn)效果（3）在AC上查看AP的狀態(tài)[AC6005]displayapallInfo:Thisoperationmaytakeafewseconds.Pleasewaitforamoment.done.TotalAPinformation:nor:normal[1]-------------------------------------------------------------------------------------------IDMACNameGroupIPTypeStateSTAUptime-------------------------------------------------------------------------------------------000e0-fc63-7f00hcia-aphcia-group192.168.10.10AP2050DNnor01M:46S-------------------------------------------------------------------------------------------Total:113.1 實(shí)驗(yàn)介紹13.2 實(shí)驗(yàn)配置任務(wù)實(shí)驗(yàn)任務(wù)1：基本配置實(shí)驗(yàn)任務(wù)2：配置AP上線實(shí)驗(yàn)任務(wù)3：配置WLAN業(yè)務(wù)參數(shù)目錄實(shí)驗(yàn)任務(wù)3：配置WLAN業(yè)務(wù)參數(shù)實(shí)驗(yàn)?zāi)康模涸谶@個(gè)實(shí)驗(yàn)任務(wù)中，我們需要在AC上配置與WLAN相關(guān)的參數(shù)，其中包括SSID模板、安全模板和VAP模板。具體來說：創(chuàng)建SSID模板，并設(shè)置SSID參數(shù)創(chuàng)建安全模板，并設(shè)置安全策略創(chuàng)建VAP模板，并設(shè)置數(shù)據(jù)轉(zhuǎn)發(fā)模式、業(yè)務(wù)VLAN、應(yīng)用SSID模板和安全模板在AP組中應(yīng)用VAP模板實(shí)驗(yàn)任務(wù)3：配置SSID模板的命令創(chuàng)建SSID模板并進(jìn)入SSID模板視圖（WLAN視圖）指定SSID名稱（SSID模板視圖）ssid-profilenameprofile-nameSSID模板名稱ssidssidSSID名稱實(shí)驗(yàn)任務(wù)3：配置SSID模板在AC上配置SSID模板[AC6005]wlan[AC6005-wlan-view]ssid-profilenamehcia-ssid[AC6005-wlan-ssid-prof-hcia-ssid]ssidhcia-wlanInfo:Thisoperationmaytakeafewseconds,pleasewait.done.[AC6005-wlan-ssid-prof-hcia-ssid]實(shí)驗(yàn)任務(wù)3：查看SSID模板在AC上查看SSID模板[AC6005]displayssid-profileall-------------------------------------------------------------------ProfilenameReference-------------------------------------------------------------------default1hcia-ssid0-------------------------------------------------------------------Total:2實(shí)驗(yàn)任務(wù)3：查看SSID模板詳情在AC上查看SSID模板詳情[AC6005]displayssid-profilenamehcia-ssid---------------------------------------------------------ProfileID:1SSID:hcia-wlanSSIDhide:disableAssociationtimeout(min):5MaxSTAnumber:64ReachmaxSTASSIDhide:enableLegacystation:enableDTIMinterval:1Beacon2.4Grate(Mbps):1Beacon5Grate(Mbps):6Deny-broadcast-probe:disableProbe-response-retrynum:1802.11r:disable802.11rauthentication:-Reassociationtimeout(s):-QOSCARinboundCIR(kbit/s):-QOSCARinboundPIR(kbit/s):-QOSCARinboundCBS(byte):-QOSCARinboundPBS(byte):-QOSCARoutboundCIR(kbit/s):-QOSCARoutboundPIR(kbit/s):-QOSCARoutboundCBS(byte):-QOSCARoutboundPBS(byte):-U-APSD:disableActivedullclient:disableMU-MIMO:disable---------------------------------------------------------WMMEDCAclientparameters:---------------------------------------------------------ECWmaxECWminAIFSNTXOPLimitAC_VO32247AC_VI43294AC_BE10430AC_BK10470---------------------------------------------------------實(shí)驗(yàn)任務(wù)3：配置安全模板的命令創(chuàng)建安全模板并進(jìn)入安全模板視圖（WLAN視圖）配置WPA/WPA2預(yù)共享密鑰認(rèn)證和加密（安全模板視圖）security-profilenameprofile-name安全模板名稱security{wpa|wpa2|wpa-wpa2}psk{pass-phrase|hex}key-value{aes|tkip|aes-tkip}密碼實(shí)驗(yàn)任務(wù)3：配置安全模板在AC上配置安全模板[AC6005]wlan[AC6005-wlan-view]security-profilenamehcia-sec[AC6005-wlan-sec-prof-hcia-sec]securitywpa-wpa2pskpass-phraseHuawei@123aes實(shí)驗(yàn)任務(wù)3：查看安全模板在AC上查看安全模板[AC6005]displaysecurity-profileall------------------------------------------------------------ProfilenameReference------------------------------------------------------------default1default-wds1default-mesh1hcia-sec0------------------------------------------------------------Total:4實(shí)驗(yàn)任務(wù)3：查看安全模板詳情在AC上查看安全模板詳情[AC6005]displaysecurity-profilenamehcia-sec------------------------------------------------------------Securitypolicy:WPA-WPA2PSKEncryption:AES------------------------------------------------------------WEP'sconfigurationKey0:*****Key1:*****Key2:*****Key3:*****DefaultkeyID:0------------------------------------------------------------WPA/WPA2'sconfigurationPTKupdate:disablePTKupdateinterval(s):43200------------------------------------------------------------WAPI'sconfigurationCAcertificatefilename:-ASUcertificatefilename:-ACcertificatefilename:-ACprivatekeyfilename:-AuthenticationserverIP:-WAItimeout(s):60BKupdateinterval(s):43200BKlifetimethreshold(%):70USKupdatemethod:Time-basedUSKupdateinterval(s):86400MSKupdatemethod:Time-basedMSKupdateinterval(s):86400Certauthretranscount:3USKnegotiateretranscount:3MSKnegotiateretranscount:3------------------------------------------------------------實(shí)驗(yàn)任務(wù)3：配置VAP模板的命令（1）創(chuàng)建VAP模板并進(jìn)入VAP模板視圖（WLAN視圖）配置數(shù)據(jù)轉(zhuǎn)發(fā)方式（VAP模板視圖）vap-profilenameprofile-nameVAP模板名稱forward-mode{direct-forward

|

tunnel}直接轉(zhuǎn)發(fā)隧道轉(zhuǎn)發(fā)實(shí)驗(yàn)任務(wù)3：配置VAP模板的命令（2）配置VAP的業(yè)務(wù)VLAN（VAP模板視圖）應(yīng)用SSID模板（VAP模板視圖）應(yīng)用安全模板（VAP模板視圖）service-vlanvlan-idvlan-id業(yè)務(wù)VLANIDssid-profileprofile-nameSSID模板名稱security-profileprofile-name安全模板名稱實(shí)驗(yàn)任務(wù)3：配置VAP模板在AC上配置VAP模板[AC6005]wlan[AC6005-wlan-view]vap-profilenamehcia-vap[AC6005-wlan-vap-prof-hcia-vap]forward-modedirect-forward[AC6005-wlan-vap-prof-hcia-vap]service-vlanvlan-id20Info:Thisoperationmaytakeafewseconds,pleasewait.done.[AC6005-wlan-vap-prof-hcia-vap]ssid-profilehcia-ssidInfo:Thisoperationmaytakeafewseconds,pleasewait.done.[AC6005-wlan-vap-prof-hcia-vap]security-profilehcia-secInfo:Thisoperationmaytakeafewseconds,pleasewait.done.[AC6005-wlan-vap-prof-hcia-vap]實(shí)驗(yàn)任務(wù)3：查看VAP模板在AC上查看VAP模板[AC6005]displayvap-profileall--------------------------------------------------------------------------------ProfilenameReference--------------------------------------------------------------------------------default0hcia-vap0--------------------------------------------------------------------------------Total:2實(shí)驗(yàn)任務(wù)3：查看VAP模板詳情在AC上查看VAP模板詳情[AC6005]displayvap-profilenamehcia-vap----------------------------------------------------------------ProfileID:1Servicemode:enableType:serviceForwardmode:direct-forwardmDNScentralized-control:disableOfflinemanagement:disableServiceVLANID:20ServiceVLANPool:-PermitVLANID:-Autooffserviceswitch:disableAutooffstarttime:-Autooffendtime:-Autoofftime-range:STAaccessmode:disableSTAblacklistprofile:STAwhitelistprofile:VLANmobilitygroup:1Bandsteer:enableLearnclientaddress:enableLearnclientDHCPstrict:disableLearnclientDHCPblacklist:disableLearnclientDHCPv6strict:disableLearnclientDHCPv6blacklist:disableIPsourcecheck:disableARPanti-attackcheck:disableDHCPoption82insert:disableDHCPoption82remoteidformat:InsertAP-MACDHCPoption82circuitidformat:InsertAP-MACDHCPtrustport:disableNDtrustport:disableZeroroam:disableBeaconmulticastunicast:disableAnti-attackbroadcast-flood:enableAnti-attackbroadcast-floodsta-rate-threshold:10Anti-attackbroadcast-floodblacklist:disableAnti-attackARPflood:enableAnti-attackARPfloodsta-rate-threshold:5Anti-attackARPfloodblacklist:disableAnti-attackNDflood:enableAnti-attackNDfloodsta-rate-threshold:16Anti-attackNDfloodblacklist:disableAnti-attackIGMPflood:enableAnti-attackIGMPfloodsta-rate-threshold:4Anti-attackIGMPfloodblacklist:disableSSIDprofile:hcia-ssidSecurityprofile:hcia-secTrafficprofile:defaultAuthenticationprofile:SACprofile:Hotspot2.0profile:Userprofile:UCCprofile:Homeagent:apLayer3roam:enable-----------------------------------------------------------------實(shí)驗(yàn)任務(wù)3：在AP組中應(yīng)用VAP模板的命令在AP組中應(yīng)用VAP模板（AP組視圖）vap-profileprofile-namewlanwlan-id{radio{radio-id|all}VAP模板名稱VAP的ID射頻ID實(shí)驗(yàn)任務(wù)3：在AP組中應(yīng)用VAP模板在AP組中應(yīng)用VAP模板[AC6005]wlan[AC6005-wlan-view]ap-groupnamehcia-group[AC6005-wlan-ap-group-hcia-group]vap-profilehcia-vapwlan1radio0Info:Thisoperationmaytakeafewseconds,pleasewait...done.[AC6005-wlan-ap-group-hcia-group]vap-profilehcia-vapwlan1radio1Info:Thisoperationmaytakeafewseconds,pleasewait...done.[AC6005-wlan-ap-group-hcia-group]行業(yè)報(bào)告資源群進(jìn)群即領(lǐng)福利《報(bào)告與資源合編》，內(nèi)有近百行業(yè)、萬余份行研、管理及其他學(xué)習(xí)資源免費(fèi)下載；每日分享學(xué)習(xí)最新6+份行業(yè)精選及3個(gè)行業(yè)主題資料；群友報(bào)告需求咨詢，群免費(fèi)交流；本群僅限行業(yè)報(bào)告交流，禁止廣告及無關(guān)信息。微信掃碼

長(zhǎng)期有效知識(shí)星球行業(yè)與管理資源是投資、產(chǎn)業(yè)研究、運(yùn)營(yíng)管理、價(jià)值傳播等專業(yè)知識(shí)庫(kù)，已成為產(chǎn)業(yè)生態(tài)圈、企業(yè)經(jīng)營(yíng)者及數(shù)據(jù)研究者的智慧工具。知識(shí)星球行業(yè)與管理資源每月更新8000+份行業(yè)研究報(bào)告、商業(yè)計(jì)劃、市場(chǎng)研究、企業(yè)運(yùn)營(yíng)及咨詢管理方案等，涵蓋科技、金融、教育、互聯(lián)網(wǎng)、房地產(chǎn)、生物制藥、醫(yī)療健康等；微信掃碼加入后無限制搜索下載。知識(shí)星球行業(yè)與管理資源微信掃碼

行研無憂免責(zé)申明：

本內(nèi)容與原報(bào)告無關(guān);原報(bào)告來源互聯(lián)網(wǎng)公開數(shù)據(jù)；原報(bào)告僅限社群個(gè)人學(xué)習(xí)，如需它用請(qǐng)聯(lián)系版權(quán)方；如有其他疑問請(qǐng)聯(lián)系微信實(shí)驗(yàn)任務(wù)3：驗(yàn)證實(shí)驗(yàn)效果（1）驗(yàn)證創(chuàng)建的VAP[AC6005]displayvapssidhcia-wlanInfo:Thisoperationmaytakeafewseconds,pleasewait.WID:WLANID------------------------------------------------------------------------------APIDAPnameRfIDWIDBSSIDStatusAuthtypeSTASSID-------------------------------------------------------------------------