

AC基本配置命令
详见:https://forum.huawei.com/enterprise/zh/thread-812781.html
创建vlan,并配置vlan的IP,网关,dhcp
[AirEngine9700S-S-aaa]vlan batch 1 10 //batch的意思是批量建立,这里表批量建立多个vlan,删除vlan前加undo
[AirEngine9700S-S]inter g0/0/1
[AirEngine9700S-S-GigabitEthernet0/0/1]port link-type trunk
[AirEngine9700S-S-GigabitEthernet0/0/1]port trunk allow-pass vlan all
[AirEngine9700S-S-GigabitEthernet0/0/1]quit //可以用dis port vlan查看配置情况
[AirEngine9700S-S]inter vlan 1 //可通过dis this查看该vlan信息
[AirEngine9700S-S-Vlanif1]ip add 192.168.1.100 24
[AirEngine9700S-S-Vlanif1]inter vlan 10
[AirEngine9700S-S-Vlanif10]ip add 192.168.10.100 24
[AirEngine9700S-S-Vlanif10]q
[AirEngine9700S-S]dis ip int br //查看配置情况,此为display ip inter brief的精简
[AirEngine9700S-S]dhcp enable
[AirEngine9700S-S]ip pool dhcp_vlan10 //创建名为dhcp_vlan10的IP地址池
[AirEngine9700S-S-ip-pool-dhcp_vlan10]network 192.168.10.0 mask 24
[AirEngine9700S-S-ip-pool-dhcp_vlan10]gateway-list 192.168.10.100
[AirEngine9700S-S-ip-pool-dhcp_vlan10]inter vlan 10
[AirEngine9700S-S-Vlanif10]dhcp select global
[AirEngine9700S-S-Vlanif10]ip pool dhcp_vlan1
[AirEngine9700S-S-ip-pool-dhcp_vlan1]network 192.168.1.0 mask 24
[AirEngine9700S-S-ip-pool-dhcp_vlan1]gateway-list 192.168.1.100
注:可通过该命令设置DNS:dns-list 202.103.224.68 202.103.225.68
[AirEngine9700S-S-ip-pool-dhcp_vlan1]inter vlan 1
[AirEngine9700S-S-Vlanif1]dis this
[AirEngine9700S-S-Vlanif1]dhcp select global
[AirEngine9700S-S-Vlanif1]dis this
[AirEngine9700S-S-Vlanif1]q
[AirEngine9700S-S]capwap source interface vlan 1
Warning: Ensure that the management VLAN and service VLAN are different. Otherwise, services may be interrupted.
[AC-wlan-view] ap auth-mode no-auth //配置AP认证模式为不认证,决定是否需要付费啊什么的才能上网
===================================================================================================================
wlan配置
创建AP组,并添加AP到AP组
创建安全模板,在安全模板里设置加密方式与wifi密码
创建ssid模板,在ssid模板里设置wifi名称
创建vap模板,把前面设置安全模板和ssid模板绑定到vap模板里,并设置转方式,以及业务vlan
创建AP组,并添加AP到AP组
[AirEngine9700S-S]wlan
[AirEngine9700S-S-wlan-view]ap-group name cm-ap-group1 //创建并进入一个名为cm-ap-group1的ap组
[AirEngine9700S-S-wlan-ap-group-ap-group1]q //回到wlan视图
添加AP到AP组
[AirEngine9700S-S-wlan-view]ap-id 0 ap-mac b076-1bad-5bc0 //添加并进入0号ap,把mac地址为b076-1bad-5bc0的AP添加AC里,不管有多少个AP来连接,AC只会管理添加有mac的AP
[AirEngine9700S-S-wlan-ap-0]ap-name dianshang //把ap的名称设为dianshang
Warning: The AP name cannot be the MAC address of another AP. Otherwise, the AP name may be lost after the device restarts.
Warning: The AP name of more than 31 characters does not take effect for APs in versions earlier than V200R009C00.
Warning: This operation may cause AP reset. Continue? [Y/N]:y
[AirEngine9700S-S-wlan-ap-0]ap-group ap-group1 //把这个AP加到名为ap-group1的ap组
添加AP到AP组
[AirEngine9700S-S-wlan-view]ap-id 1 ap-mac b076-1bad-5b60 //添加并进入1号ap,把mac地址为b076-1bad-5b60的AP添加AC里,不管有多少个AP来连接,AC只会管理添加有mac的AP
[AirEngine9700S-S-wlan-ap-1]ap-name bossoffice //出现提示按Y把ap的名称设为bossoffice
[AirEngine9700S-S-wlan-ap-1]ap-group ap-group1 //出现提示按Y把这个AP加到名为ap-group1的ap组
[AirEngine9700S-S-wlan-ap-1]q
添加AP到AP组
[AirEngine9700S-S-wlan-view]ap-id 2 ap-mac ccd7-3c5a-e6c0 //添加并进入1号ap,把mac地址为ccd7-3c5a-e6c0的AP添加AC里,不管有多少个AP来连接,AC只会管理添加有mac的AP
[AirEngine9700S-S-wlan-ap-2]ap-name hall //出现提示按Y把ap的名称设为hall
[AirEngine9700S-S-wlan-ap-2]ap-group ap-group1 //出现提示按Y把这个AP加到名为ap-group1的ap组
[AirEngine9700S-S-wlan-ap-2]q
添加AP到AP组
[AirEngine9700S-S-wlan-view]ap-id 3 ap-mac 4400-4d1e-13e0 //添加并进入1号ap,把mac地址为4400-4d1e-13e0的AP添加AC里,不管有多少个AP来连接,AC只会管理添加有mac的AP
[AirEngine9700S-S-wlan-ap-3]ap-name bossoffice //出现提示按Y把ap的名称设为bossoffice
[AirEngine9700S-S-wlan-ap-3]ap-group ap-group1 //出现提示按Y把这个AP加到名为ap-group1的ap组
[AirEngine9700S-S-wlan-ap-3]q
[AirEngine9700S-S-wlan-ap-0]dis ap all //这个命令要多刷几次,AP上线要一点时间,直到Stat显示为nor
[AirEngine9700S-S-wlan-ap-0]q
1)创建安全模板并设置wifi密码
[AirEngine9700S-S]wlan //进入vlan视图
[AirEngine9700S-S-wlan-view]security-profile name cm-wlan-security //创建一个名为cm-wlan-security的安全模板并进入,有同名就进入
[AirEngine9700S-S-wlan-sec-prof-cm-wlan-security]security wpa2 psk pass-phrase cm888999 aes //设置wifi密码为a1234567及加密方式,这里至少需要设8位数的密码,否则会出错
[AirEngine9700S-S-wlan-sec-prof-cm-wlan-security]q //回到wlan视图
2)创建ssid模板,在ssid模板里设置wifi名称
[AirEngine9700S-S-wlan-view]ssid-profile name cm-wlan-ssid //创建一个名为cm-wlan-ssid的ssid模板并进入,有同名就进入
[AirEngine9700S-S-wlan-ssid-prof-cm-wlan-ssid]ssid cm-wlan-net //在ssid模板里设置wifi名称为cm-wlan-net
Info: This operation may take a few seconds, please wait.done.
[AirEngine9700S-S-wlan-ssid-prof-cm-wlan-ssid]q //回到wlan视图
3)创建vap模板,把前面设置安全模板和ssid模板绑定到vap模板里,并设置转发方式,以及业务vlan
[AirEngine9700S-S-wlan-view]vap-profile name cm-wlan-vap ////创建一个名为cm-wlan-vap的vap模板并进入,有同名就进入
[AirEngine9700S-S-wlan-vap-prof-cm-wlan-vap]security-profile cm-wlan-security //设置vap模板引用的安全模板
[AirEngine9700S-S-wlan-vap-prof-cm-wlan-vap]ssid-profile cm-wlan-ssid //设置vap模板引用的ssid模板
[AirEngine9700S-S-wlan-vap-prof-cm-wlan-vap]forward-mode tunnel //设置转发方式为隧道转发
[AirEngine9700S-S-wlan-vap-prof-cm-wlan-vap]service-vlan vlan-id 10 //设置vap的业务使用的vlan为vlan10
[AirEngine9700S-S-wlan-vap-prof-cm-wlan-vap]q //回到wlan视图
[AirEngine9700S-S-wlan-view]ap-group name ap-group1 //进入或创建ap-group1组
[AirEngine9700S-S-wlan-ap-group-ap-group1]vap-profile cm-wlan-vap wlan 1 radio all //将vap模板cm-wlan-vap应用到所有射频(2.4G 5G 6G)
注:到这步手机和笔记本就可以收到名为cm-wlan-net的wifi名称并用cm888999连接了