用户名:  密码:   
您当前的位置:首页 > 电脑与网络 >  交换机,路由,AC > 

AC基本配置命令(精简版) - 副本

上次修改时间: 2022-05-19 11:03:33      来源:网络总结      作者:钢铁长陈
上一页      路径:DSD\Learn\路由与交换机\关于配置方面问题\华为AC中配置AP上线笔记\      下一页

AC基本配置命令

详见:https://forum.huawei.com/enterprise/zh/thread-812781.html
创建vlan,并配置vlan的IP,网关,dhcp                                                                        
[AirEngine9700S-S-aaa]vlan batch 1 10  //batch的意思是批量建立,这里表批量建立多个vlan,删除vlan前加undo
[AirEngine9700S-S]inter g0/0/1                                                 
[AirEngine9700S-S-GigabitEthernet0/0/1]port link-type trunk                    
[AirEngine9700S-S-GigabitEthernet0/0/1]port trunk allow-pass vlan all          
[AirEngine9700S-S-GigabitEthernet0/0/1]quit   //可以用dis port vlan查看配置情况                                  
                          
[AirEngine9700S-S]inter vlan 1      //可通过dis this查看该vlan信息                                           
[AirEngine9700S-S-Vlanif1]ip add 192.168.1.100 24                              
[AirEngine9700S-S-Vlanif1]inter vlan 10                                        
[AirEngine9700S-S-Vlanif10]ip add 192.168.10.100 24                            
[AirEngine9700S-S-Vlanif10]q                                                   
[AirEngine9700S-S]dis ip int br  //查看配置情况,此为display ip inter brief的精简
                                              
[AirEngine9700S-S]dhcp enable                                                  
[AirEngine9700S-S]ip pool dhcp_vlan10    //创建名为dhcp_vlan10的IP地址池                                      
[AirEngine9700S-S-ip-pool-dhcp_vlan10]network 192.168.10.0 mask 24             
[AirEngine9700S-S-ip-pool-dhcp_vlan10]gateway-list 192.168.10.100              
[AirEngine9700S-S-ip-pool-dhcp_vlan10]inter vlan 10                            
[AirEngine9700S-S-Vlanif10]dhcp select global                                  

[AirEngine9700S-S-Vlanif10]ip pool dhcp_vlan1                                  
[AirEngine9700S-S-ip-pool-dhcp_vlan1]network 192.168.1.0 mask 24               
[AirEngine9700S-S-ip-pool-dhcp_vlan1]gateway-list 192.168.1.100
 注:可通过该命令设置DNS:dns-list 202.103.224.68 202.103.225.68                
                          
[AirEngine9700S-S-ip-pool-dhcp_vlan1]inter vlan 1                              
[AirEngine9700S-S-Vlanif1]dis this                                             
[AirEngine9700S-S-Vlanif1]dhcp select global                                   
[AirEngine9700S-S-Vlanif1]dis this                                             
[AirEngine9700S-S-Vlanif1]q
                                                    
[AirEngine9700S-S]capwap source interface vlan 1                                
Warning: Ensure that the management VLAN and service VLAN are different. Otherwise, services may be interrupted.  
[AC-wlan-view] ap auth-mode no-auth                                                   //配置AP认证模式为不认证,决定是否需要付费啊什么的才能上网

===================================================================================================================
wlan配置
创建AP组,并添加AP到AP组
创建安全模板,在安全模板里设置加密方式与wifi密码
创建ssid模板,在ssid模板里设置wifi名称
创建vap模板,把前面设置安全模板和ssid模板绑定到vap模板里,并设置转方式,以及业务vlan  

创建AP组,并添加AP到AP组                                         
[AirEngine9700S-S]wlan                                                         
[AirEngine9700S-S-wlan-view]ap-group name cm-ap-group1    //创建并进入一个名为cm-ap-group1的ap组                          
[AirEngine9700S-S-wlan-ap-group-ap-group1]q                 //回到wlan视图 
添加AP到AP组                 
[AirEngine9700S-S-wlan-view]ap-id 0 ap-mac b076-1bad-5bc0 //添加并进入0号ap,把mac地址为b076-1bad-5bc0的AP添加AC里,不管有多少个AP来连接,AC只会管理添加有mac的AP                      
[AirEngine9700S-S-wlan-ap-0]ap-name dianshang     //把ap的名称设为dianshang                                             
 Warning: The AP name cannot be the MAC address of another AP. Otherwise, the AP name may be lost after the device restarts.                                    
 Warning: The AP name of more than 31 characters does not take effect for APs in versions earlier than V200R009C00.                                             
 Warning: This operation may cause AP reset. Continue? [Y/N]:y                  
[AirEngine9700S-S-wlan-ap-0]ap-group ap-group1     //把这个AP加到名为ap-group1的ap组 
添加AP到AP组
[AirEngine9700S-S-wlan-view]ap-id 1 ap-mac b076-1bad-5b60 //添加并进入1号ap,把mac地址为b076-1bad-5b60的AP添加AC里,不管有多少个AP来连接,AC只会管理添加有mac的AP                      
[AirEngine9700S-S-wlan-ap-1]ap-name bossoffice        //出现提示按Y把ap的名称设为bossoffice  
[AirEngine9700S-S-wlan-ap-1]ap-group ap-group1     //出现提示按Y把这个AP加到名为ap-group1的ap组                                
[AirEngine9700S-S-wlan-ap-1]q
添加AP到AP组
[AirEngine9700S-S-wlan-view]ap-id 2 ap-mac ccd7-3c5a-e6c0 //添加并进入1号ap,把mac地址为ccd7-3c5a-e6c0的AP添加AC里,不管有多少个AP来连接,AC只会管理添加有mac的AP                      
[AirEngine9700S-S-wlan-ap-2]ap-name hall         //出现提示按Y把ap的名称设为hall   
[AirEngine9700S-S-wlan-ap-2]ap-group ap-group1     //出现提示按Y把这个AP加到名为ap-group1的ap组                                
[AirEngine9700S-S-wlan-ap-2]q  
添加AP到AP组
[AirEngine9700S-S-wlan-view]ap-id 3 ap-mac 4400-4d1e-13e0 //添加并进入1号ap,把mac地址为4400-4d1e-13e0的AP添加AC里,不管有多少个AP来连接,AC只会管理添加有mac的AP                      
[AirEngine9700S-S-wlan-ap-3]ap-name bossoffice        //出现提示按Y把ap的名称设为bossoffice  
[AirEngine9700S-S-wlan-ap-3]ap-group ap-group1     //出现提示按Y把这个AP加到名为ap-group1的ap组                                
[AirEngine9700S-S-wlan-ap-3]q    
                                                              
[AirEngine9700S-S-wlan-ap-0]dis ap all      //这个命令要多刷几次,AP上线要一点时间,直到Stat显示为nor
[AirEngine9700S-S-wlan-ap-0]q    

1)创建安全模板并设置wifi密码
[AirEngine9700S-S]wlan           //进入vlan视图                                                  
[AirEngine9700S-S-wlan-view]security-profile name cm-wlan-security    //创建一个名为cm-wlan-security的安全模板并进入,有同名就进入       
[AirEngine9700S-S-wlan-sec-prof-cm-wlan-security]security wpa2 psk pass-phrase cm888999 aes //设置wifi密码为a1234567及加密方式,这里至少需要设8位数的密码,否则会出错
[AirEngine9700S-S-wlan-sec-prof-cm-wlan-security]q     //回到wlan视图

2)创建ssid模板,在ssid模板里设置wifi名称                       
[AirEngine9700S-S-wlan-view]ssid-profile name cm-wlan-ssid       //创建一个名为cm-wlan-ssid的ssid模板并进入,有同名就进入               
[AirEngine9700S-S-wlan-ssid-prof-cm-wlan-ssid]ssid cm-wlan-net   //在ssid模板里设置wifi名称为cm-wlan-net            
Info: This operation may take a few seconds, please wait.done.                 
[AirEngine9700S-S-wlan-ssid-prof-cm-wlan-ssid]q             //回到wlan视图

3)创建vap模板,把前面设置安全模板和ssid模板绑定到vap模板里,并设置转发方式,以及业务vlan                     
[AirEngine9700S-S-wlan-view]vap-profile name cm-wlan-vap              ////创建一个名为cm-wlan-vap的vap模板并进入,有同名就进入       
[AirEngine9700S-S-wlan-vap-prof-cm-wlan-vap]security-profile cm-wlan-security   //设置vap模板引用的安全模板                                                                            
[AirEngine9700S-S-wlan-vap-prof-cm-wlan-vap]ssid-profile cm-wlan-ssid        //设置vap模板引用的ssid模板
[AirEngine9700S-S-wlan-vap-prof-cm-wlan-vap]forward-mode tunnel        //设置转发方式为隧道转发      
[AirEngine9700S-S-wlan-vap-prof-cm-wlan-vap]service-vlan vlan-id 10    //设置vap的业务使用的vlan为vlan10      
[AirEngine9700S-S-wlan-vap-prof-cm-wlan-vap]q                           //回到wlan视图
     
[AirEngine9700S-S-wlan-view]ap-group name ap-group1                       //进入或创建ap-group1组     
[AirEngine9700S-S-wlan-ap-group-ap-group1]vap-profile cm-wlan-vap wlan 1 radio all //将vap模板cm-wlan-vap应用到所有射频(2.4G 5G 6G)                                                                            
          
注:到这步手机和笔记本就可以收到名为cm-wlan-net的wifi名称并用cm888999连接了