用户名:  密码:   
您当前的位置:首页 > 电脑与网络 >  交换机,路由,AC > 

1华为AR路由配置AP的包括创建删除wifi的SSID,密码,VAP模板的命令

上次修改时间: 2024-06-28 17:53:16      来源:网络总结      作者:钢铁长陈
上一页      路径:DSD\Learn\路由与交换机\关于配置方面问题\华为AR路由中配置AP上线笔记\      下一页

1.这里的主要步骤是创建一个Vlanif9作为服务vlan用来给无线AP下的终端分配IP,无线终端获取到的IP所在的网段,网关, 还有DNS,都是在这个VLAN里面配置,
2.然后在无线控制视图下面创建SSID模板(设置SSID)和安全模板(设置wifi密码),然后再创建VAP模板(设置该VAP的SSID模板,安全模板,服务vlan,转发方式)

//配置路由器的一些基本设置使AP能上线
<gaoxin>sys
//将路由连接AP的端口类型设为trunk,允许通过vlan及PVID
[gaoxin]capwap source interface vlanif 1 //相当于设置管理vlan,将vlan1作为发送capwap消息的源接口
[gaoxin]display ip pool interface vlanif1
[gaoxin]int g0/0/1
[gaoxin-GigabitEthernet0/0/1]port link-type trunk
[gaoxin-GigabitEthernet0/0/1]port trunk allow-pass vlan  1
[gaoxin-GigabitEthernet0/0/1]port trunk pvid vlan 1
[gaoxin-GigabitEthernet0/0/1]q

[gaoxin]wlan ac      //进入无线控制器视图,
[gaoxin-wlan-view]ap auth-mode no-auth       //配置AP的验证模式为无验证,
Warning: It is insecure to configure none authentication mode.
[gaoxin-wlan-view]q
[gaoxin]dis ap all     //这里是查看AP列表,
Info: This operation may take a few seconds. Please wait for a moment.done.
Total AP information:
nor  : normal          [1]
-------------------------------------------------------------------------------------------------------
ID   MAC            Name           Group   IP           Type            State STA Uptime
-------------------------------------------------------------------------------------------------------
0    4400-4d1e-13e0 4400-4d1e-13e0 default 192.168.8.62 AP3050DE        nor   0   3H:16M:55S    //必须要这里的IP的状态显示为nor才可以使使用,
-------------------------------------------------------------------------------------------------------
Total: 1

//创建Vlanif9,并配置网关,DHCP和DNS地址,以便在VAP模板中引用作为服务vlan
[gaoxin]vlan batch 9   //这里是创建了一个Vlanif9, 到时候无线AP下到终端,通通连到这个VLAN里面来,
Info: This operation may take a few seconds. Please wait for a moment...done.
[gaoxin]interface vlanif 9  //进入Vlanif9 接口
[gaoxin-Vlanif9]ip address 192.168.9.1 255.255.255.0   //配置这个接口的IP地址,
[gaoxin-Vlanif9]dhcp select interface //开启当前接口的DHCP功能,使它可以自动分配IP地址,使用这个命令前,需要在系统视图下面打开DHCP的全局开关,
[gaoxin-Vlanif9]dhcp server dns-list 202.103.224.68 202.103.225.68  //配置当前接口下终端获取到的DNS地址,
[gaoxin-Vlanif9]q

[gaoxin]wlan ac
//创建安全模板,主要是设置WiFi的密码,
[gaoxin-wlan-view]security-profile name cmwifi          //设置安全模板的名称,
[gaoxin-wlan-sec-prof-cmwifi]security wpa2 psk pass-phrase aabbccdd aes    //设置SSID的密码为aabbccdd,
 Warning: The password does not have enough complexity. Please use combined password.
[gaoxin-wlan-sec-prof-cmwifi]q

//创建并进入SSID模板,用于设置ssid的名称,
[gaoxin-wlan-view]ssid-profile name cmwifi           //设置ssid模板的名称,
[gaoxin-wlan-ssid-prof-cmwifi]ssid cmwifi           //这里就是设置ssid了,这里的名称决定AP下面的无线终端搜索到的无线WiFi名称,
Warning: This action may cause service interruption. Continue?[Y/N]y
Info: This operation may take a few seconds, please wait.done.
[gaoxin-wlan-ssid-prof-cmwifi]q

//创建了VAP模板,需要把上步的安全模板和ssid模板绑定到VAP模板里面去,还要配置该VAP的服务VLAN,转发方式
[gaoxin-wlan-view]vap-profile name cmwifi           //创建并进入VAP模板,如果这个名称存在,就直接进入,不存在就会创建,
[gaoxin-wlan-vap-prof-cmwifi]security-profile cmwifi
Info: This operation may take a few seconds, please wait.done.
[gaoxin-wlan-vap-prof-cmwifi]ssid-profile cmwifi         //把上部中间的SSD模板绑定到VAP模板里面去,
Info: This operation may take a few seconds, please wait.done.
[gaoxin-wlan-vap-prof-cmwifi]service-vlan vlan-id 9         //配置这个VAP模板,默认使用的Vlan为Vlanif9,
Info: This operation may take a few seconds, please wait.done.
[gaoxin-wlan-vap-prof-cmwifi]forward-mode tunnel //配置这个VAP模板下面的终端数据都使用隧道转发模式,如果这里不这样设置,无线下的终端将不能够上网?
Warning: This action may cause service interruption. Continue?[Y/N]y
Info: This operation may take a few seconds, please wait.done.
[gaoxin-wlan-vap-prof-cmwifi]q
              //退出VAP模板视图回到无线控制视图下面
//将VAP模板应用到AP组              
如果没有配置AP加入哪个组,他默认会加入到缺省组里面去,所以这里还要配置默认组来引用上面创建的VAP模板,
[gaoxin-wlan-view]ap-group name default     //这里是进入到默认的AP组里面去,
[gaoxin-wlan-ap-group-default]vap-profile cmwifi wlan 1 radio all
Info: This operation may take a few seconds, please wait.done.
[gaoxin-wlan-ap-group-default]q

//将上面的所有配置信息下发到所有AP,
[gaoxin-wlan-view]commit all
Warning: Committing configuration may cause service interruption, continue?[Y/N]:y
[gaoxin-wlan-view]return     //返回到显示视图下面,
<gaoxin>sys
经过上面的配置连上AP的终端就可以上网了,下面删除配置的方法,
======================================================================================================================
=============================================================================================================================
解除绑定,删除模板的顺序
[Huawei-wlan-view]ap-group name default
[Huawei-wlan-ap-group-default]undo vap-profile moossywifi wlan 1 radio all
Warning: This operation will delete all radio's VAP in active state and make users offline, continue?[Y/N]: y
Info: Now starting to unbind VAP profile.done.
[Huawei-wlan-view]undo vap-profile name moossywifi   //删除名为moossywifi的VAP模板
[Huawei-wlan-view]undo ssid-profile name moossywifi   //删除名为moossywifi的SSID模板
[Huawei-wlan-view]undo security-profile name moossywifi  //删除名为moossywifi的安全模板

已经上线的VAP模板还要进行如下操作才能删除
如果在wlan ac有,在AP默认组又没有, 但用undo vap-profile name cjwifi删除提示模板绑定Error: The VAP profile has been bound.
解决方法: 还需要在ap-id 0下去删除,没有这步新建的模板也不能上线
[Huawei-wlan-view]ap-id 0
[Huawei-wlan-ap-0]radio 1
[Huawei-wlan-radio-0/1]undo vap-profile cjwifi wlan 1
Warning: This operation will delete radio1's VAP in active state and make users offline, continue?[Y/N]: y
[Huawei-wlan-radio-0/1]q
[Huawei-wlan-ap-0]radio 2
[Huawei-wlan-radio-0/2]undo vap-profile cjwifi wlan 1
Warning: This operation will delete radio2's VAP in active state and make users offline, continue?[Y/N]: y
[Huawei-wlan-radio-0/2]q
[Huawei-wlan-ap-0]q
[Huawei-wlan-view]undo vap-profile name cjwifi