Huawei Equipment configure les services de base du réseau WLAN à grande échelle

1. Configurer l'interfonctionnement du réseau
   [LSW2]vlan batch 100 to 104
   [LSW2-GigabitEthernet0/0/1]port link-type trunk
   [LSW2-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 to 104
   [LSW2-GigabitEthernet0/0/2]port link-type trunk
   [LSW2-GigabitEthernet0/0/2]port trunk allow-pass vlan 100 to 102
   [LSW2-GigabitEthernet0/0/2]port trunk pvid vlan 100
   [LSW2-GigabitEthernet0/0/2]port-isolate enable
   [LSW2-GigabitEthernet0/0/3]port link-type trunk
   [LSW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 100 to 102
   [LSW2-GigabitEthernet0/0/3]port trunk pvid vlan 100
   [LSW2-GigabitEthernet0/0/3]port-isolate enable
   [LSW2-GigabitEthernet0/0/4]port link-type trunk
   [LSW2-GigabitEthernet0/0/4]port trunk allow-pass vlan 100 103 104
   [LSW2-GigabitEthernet0/0/4]port trunk pvid vlan 100
   [LSW2-GigabitEthernet0/0/4]port-isolate enable
   [LSW2-GigabitEthernet0/0/5]port link-type trunk
   [LSW2-GigabitEthernet0/0/5]port trunk allow-pass vlan 100 103 to 104
   [LSW2-GigabitEthernet0/0/5]port trunk pvid vlan 100
   [LSW2-GigabitEthernet0/0/5]port-isolate enable
   [LSW1]vlan batch 100 to 104 200 201
   [LSW1-GigabitEthernet0/0/1]port link-type trunk
   [LSW1-GigabitEthernet0/0/1]port trunk allow-pass vlan 100 to 104
   [LSW1-GigabitEthernet0/0/3]port link-type trunk
   [LSW1-GigabitEthernet0/0/3]port trunk allow-pass vlan 200
   [LSW1-GigabitEthernet0/0/2]port link-type access
   [LSW1-GigabitEthernet0/0/2]port default vlan 201
   [LSW1-Vlanif100]ip add 10.1.1.1 24
   [LSW1-Vlanif101]ip add 10.1.11.1 24
   [LSW1-Vlanif102]ip add 10.1.12.1 24
   [LSW1-Vlanif103]ip add 10.1.13.1 24
   [LSW1-Vlanif104]ip add 10.1.14.1 24
   [LSW1-Vlanif200]ip add 10.2.1.1 24
   [LSW1-Vlanif201]ip add 10.3.1.1 24
   [AC1]vlan batch 101 to 104 200
   [AC1-GigabitEthernet0/0/1]port link-type trunk
   [AC1-GigabitEthernet0/0/1]port trunk allow-pass vlan 200
   [AC1-Vlanif200]ip add 10.2.1.2 24
   [AR1-GigabitEthernet0/0/0]ip add 10.3.1.3 24
   [AR1]ip route-static 10.1.1.0 24 10.3.1.1 //ConfigurationAR1ÀLSW1Le routage de
   [AR1]ip route-static 10.1.11.0 24 10.3.1.1
   [AR1]ip route-static 10.1.12.0 24 10.3.1.1
   [AR1]ip route-static 10.1.13.0 24 10.3.1.1
   [AR1]ip route-static 10.1.14.0 24 10.3.1.1
   [LSW1]ip route-static 0.0.0.0 0.0.0.0 10.3.1.3 //ConfigurationLSW1Routage par défaut pour
   [AC1]ip route-static 10.1.1.0 24 10.2.1.1 //ConfigurationACÀAPLe routage de

2. ConfigurationDHCPServices,PourAPEtSTARépartitionIPAdresse
   [LSW1]dhcp enable
   [LSW1-Vlanif100]dhcp select relay
   [LSW1-Vlanif100]dhcp relay server-ip 10.3.1.3
   [LSW1-Vlanif101]dhcp select relay
   [LSW1-Vlanif101]dhcp relay server-ip 10.3.1.3
   [LSW1-Vlanif102]dhcp select relay
   [LSW1-Vlanif102]dhcp relay server-ip 10.3.1.3
   [LSW1-Vlanif103]dhcp select relay
   [LSW1-Vlanif103]dhcp relay server-ip 10.3.1.3
   [LSW1-Vlanif104]dhcp select relay
   [LSW1-Vlanif104]dhcp relay server-ip 10.3.1.3
   [AR1]dhcp enable
   [AR1]ip pool ap //Configurer parAR1En tant queDHCPServeur àAPRépartitionIPAdresse
   [AR1-ip-pool-ap]network 10.1.1.0 mask 24
   [AR1-ip-pool-ap]gateway-list 10.1.1.1
   [AR1-ip-pool-ap]option 43 sub-option 3 ascii 10.2.1.2
   [AR1]ip pool sta1 //Configurer parAR1En tant queDHCPServeur àSTARépartitionIPAdresse
   [AR1-ip-pool-sta1]network 10.1.11.0 mask 24
   [AR1-ip-pool-sta1]gateway-list 10.1.11.1
   [AR1]ip pool sta2
   [AR1-ip-pool-sta2]network 10.1.12.0 mask 24
   [AR1-ip-pool-sta2]gateway-list 10.1.12.1
   [AR1]ip pool sta3
   [AR1-ip-pool-sta3]network 10.1.13.0 mask 24
   [AR1-ip-pool-sta3]gateway-list 10.1.13.1
   [AR1]ip pool sta4
   [AR1-ip-pool-sta4]network 10.1.14.0 mask 24
   [AR1-ip-pool-sta4]gateway-list 10.1.14.1
   [AR1-GigabitEthernet0/0/0]dhcp select global

3. ConfigurationVLAN pool,Utilisé comme entrepriseVLAN
   [AC1]vlan pool sta-pool1
   [AC1-vlan-pool-sta-pool1]vlan 101 102
   [AC1-vlan-pool-sta-pool1]assignment hash
   [AC1]vlan pool sta-pool2
   [AC1-vlan-pool-sta-pool2]vlan 103 104
   [AC1-vlan-pool-sta-pool2]assignment hash

4. ConfigurationAPEn ligne.
   [AC1-wlan-view]ap-group name guest //CréationAPGroupe
   [AC1-wlan-view]ap-group name employee
   [AC1-wlan-view]regulatory-domain-profile name domain1 //Créer un modèle de gestion de domaine
   [AC1-wlan-regulate-domain-domain1]country-code cn //ConfigurationAC Code du pays
   [AC1-wlan-view]ap-group name guest
   [AC1-wlan-ap-group-guest]regulatory-domain-profile domain1 //InAPModèle de gestion de domaine de référence sous Groupe
   [AC1-wlan-view]ap-group name employee
   [AC1-wlan-ap-group-employee]regulatory-domain-profile domain1
   [AC1]capwap source interface Vlanif 200 //ConfigurationACInterface source pour
   [AC1]wlan
   [AC1-wlan-view]ap auth-mode mac-auth
   [AC1-wlan-view]ap-id 0 ap-mac 00e0-fc32-56d0 //InACImportation hors ligneAP
   [AC1-wlan-ap-0]ap-name ap1
   [AC1-wlan-ap-0]ap-group guest
   [AC1-wlan-view]ap-id 1 ap-mac 00e0-fc42-47d0
   [AC1-wlan-ap-1]ap-name ap2
   [AC1-wlan-ap-1]ap-group guest
   [AC1-wlan-view]ap-id 2 ap-mac 00e0-fcc1-3660
   [AC1-wlan-ap-2]ap-name ap3
   [AC1-wlan-ap-2]ap-group employee
   [AC1-wlan-view]ap-id 3 ap-mac 00e0-fca3-0630
   [AC1-wlan-ap-3]ap-name ap4
   [AC1-wlan-ap-3]ap-group employee
   

5. ConfigurationWLANParamètres opérationnels
   [AC1-wlan-view]security-profile name guest // Créer un modèle de sécurité nommé
   [AC1-wlan-sec-prof-guest]security wpa2 psk pass-phrase [email protected] aes //Configurer la politique de sécurité
   [AC1-wlan-view]security-profile name employee
   [AC1-wlan-sec-prof-employee]security wpa2 psk pass-phrase [email protected] aes
   [AC1-wlan-view]ssid-profile name guest //CréationSSIDModèle
   [AC1-wlan-ssid-prof-guest]ssid guest //ConfigurationSSIDNom
   [AC1-wlan-view]ssid-profile name employee
   [AC1-wlan-ssid-prof-employee]ssid employee
   [AC1-wlan-view]vap-profile name guest //CréationVAPModèle
   [AC1-wlan-vap-prof-guest]forward-mode direct-forward //Configurer le mode de transfert de données d'affaires
   [AC1-wlan-vap-prof-guest]service-vlan vlan-pool sta-pool1 //Configurer l'entrepriseVLAN
   [AC1-wlan-vap-prof-guest]security-profile guest //Référence au modèle de sécurité
   [AC1-wlan-vap-prof-guest]ssid-profile guest //RéférencesSSIDModèle
   [AC1-wlan-view]vap-profile name employee
   [AC1-wlan-vap-prof-employee]forward-mode direct-forward
   [AC1-wlan-vap-prof-employee]service-vlan vlan-pool sta-pool2
   [AC1-wlan-vap-prof-employee]security-profile employee
   [AC1-wlan-vap-prof-employee]ssid-profile employee
   [AC1-wlan-view]ap-group name guest
   [AC1-wlan-ap-group-guest]vap-profile guest wlan 1 radio 0 //ConfigurationAPRéférence du GroupeVAPModèle,APRF supérieure0UtiliserVAPConfiguration du modèle
   [AC1-wlan-ap-group-guest]vap-profile guest wlan 1 radio 1 //ConfigurationAPRéférence du GroupeVAPModèle,APRF supérieure0UtiliserVAPConfiguration du modèle
   [AC1-wlan-view]ap-group name employee
   [AC1-wlan-ap-group-employee]vap-profile employee wlan 1 radio 0
   [AC1-wlan-ap-group-employee]vap-profile employee wlan 1 radio 1

6. ConfigurationAPCanaux et puissance RF
   [AC1-wlan-view]ap-id 0
   [AC1-wlan-ap-0]radio 0
   [AC1-wlan-radio-0/0]channel 20mhz 6
   [AC1-wlan-radio-0/0]eirp 127
   [AC1-wlan-ap-0]radio 1
   [AC1-wlan-radio-0/1]channel 20mhz 149
   [AC1-wlan-radio-0/1]eirp 127

7. Valider la configuration