华为无线设备配置全局双链路冷备份（AC全局配置方式）

1. 配置LSW和AC，使AP和AC互通
   [LSW1]vlan batch 100 101
   [LSW1-GigabitEthernet0/0/1]port link-type trunk
   [LSW1-GigabitEthernet0/0/1]port trunk allow-pass vlan 100
   [LSW1-GigabitEthernet0/0/2]port link-type trunk
   [LSW1-GigabitEthernet0/0/2]port trunk allow-pass vlan 100
   [LSW1-GigabitEthernet0/0/3]port link-type trunk
   [LSW1-GigabitEthernet0/0/3]port trunk allow-pass vlan 100 101
   [LSW1-GigabitEthernet0/0/3]port trunk pvid vlan 100
   [LSW1-GigabitEthernet0/0/3]port-isolate enable
   [AC1]vlan batch 100 101
   [AC1-GigabitEthernet0/0/1]port link-type trunk
   [AC1-GigabitEthernet0/0/1]port trunk allow-pass vlan 100
   [AC2]vlan batch 100 101
   [AC2-GigabitEthernet0/0/1]port link-type trunk
   [AC2-GigabitEthernet0/0/1]port trunk allow-pass vlan 100
2. 配置LSW的DHCP功能，为AP和STA分配IP地址
   [LSW1]dhcp enable
   [LSW1]int Vlanif 100
   [LSW1-Vlanif100]ip add 10.1.100.1 24
   [LSW1-Vlanif100]dhcp select interface
   [LSW1-Vlanif100]dhcp server excluded-ip-address 10.1.100.2 10.1.100.3
   [LSW1]int Vlanif 101
   [LSW1-Vlanif101]ip add 10.1.101.1 24
   [LSW1-Vlanif101]dhcp select interface
3. 配置AC1的WLAN基本业务
   （1）配置AP上线
   创建AP组，用于将相同配置的AP都加入同一AP组中
   [AC1]wlan
   [AC1-wlan-view]ap-group name ap-group1
   创建域管理模板，在域管理模板下配置AC的国家码并在AP组下引用域管理模板
   [AC1-wlan-view]regulatory-domain-profile name domain1
   [AC1-wlan-regulate-domain-domain1]country-code cn
   [AC1-wlan-view]ap-group name ap-group1
   [AC1-wlan-ap-group-ap-group1]regulatory-domain-profile domain1
   配置AC的源接口
   [AC1]int Vlanif 100
   [AC1-Vlanif100]ip add 10.1.100.2 24
   [AC1]capwap source interface Vlanif 100
   在AC上离线导入AP，并将AP加入AP组
   [AC1]wlan
   [AC1-wlan-view]ap auth-mode mac-auth
   [AC1-wlan-view]ap-id 0 ap-mac 00e0-fc76-5740
   [AC1-wlan-ap-0]ap-name ap1
   [AC1-wlan-ap-0]ap-group ap-group1
   

（2）配置WLAN业务参数
创建安全模板，并配置安全策略
[AC1]wlan
[AC1-wlan-view]security-profile name wlan-security
[AC1-wlan-sec-prof-wlan-security]security wpa2 psk pass-phrase [email protected] aes
创建SSID模板，并配置SSID名称
[AC1-wlan-view]ssid-profile name wlan-ssid
[AC1-wlan-ssid-prof-wlan-ssid]ssid wlan-net
创建VAP模板，配置业务数据转发模式、业务VLAN，并且引用安全模板和SSID模板
[AC1-wlan-view]vap-profile name wlan-vap
[AC1-wlan-vap-prof-wlan-vap]forward-mode direct-forward
[AC1-wlan-vap-prof-wlan-vap]service-vlan vlan-id 101
[AC1-wlan-vap-prof-wlan-vap]security-profile wlan-security
[AC1-wlan-vap-prof-wlan-vap]ssid-profile wlan-ssid
配置AP组引用VAP模板，AP上射频0和射频1都使用VAP模板的配置
[AC1-wlan-view]ap-group name ap-group1
[AC1-wlan-ap-group-ap-group1]vap-profile wlan-vap wlan 1 radio 0
[AC1-wlan-ap-group-ap-group1]vap-profile wlan-vap wlan 1 radio 1
4. 配置AC2的WLAN基本业务
（1）配置AP上线
创建AP组，用于将相同配置的AP都加入同一AP组中
[AC2]wlan
[AC2-wlan-view]ap-group name ap-group1
创建域管理模板，在域管理模板下配置AC的国家码并在AP组下引用域管理模板
[AC2-wlan-view]regulatory-domain-profile name domain1
[AC2-wlan-regulate-domain-domain1]country-code cn
[AC2-wlan-view]ap-group name ap-group1
[AC2-wlan-ap-group-ap-group1]regulatory-domain-profile domain1
配置AC的源接口
[AC2]int Vlanif 100
[AC2-Vlanif100]ip add 10.1.100.3 24
[AC2]capwap source interface Vlanif 100
在AC上离线导入AP，并将AP加入AP组
[AC2-wlan-view]ap auth-mode mac-auth
[AC2-wlan-view]ap-id 0 ap-mac 00e0-fc76-5740
[AC2-wlan-ap-0]ap-name ap1
[AC2-wlan-ap-0]ap-group ap-group1
（2）配置WLAN业务参数
创建安全模板，并配置安全策略
[AC2-wlan-view]security-profile name wlan-security
[AC2-wlan-sec-prof-wlan-security]security wpa2 psk pass-phrase [email protected] aes
创建SSID模板，并配置SSID名称
[AC2-wlan-view]ssid-profile name wlan-ssid
[AC2-wlan-ssid-prof-wlan-ssid]ssid wlan-net
创建VAP模板，配置业务数据转发模式、业务VLAN，并且引用安全模板和SSID模板
[AC2-wlan-view]vap-profile name wlan-vap
[AC2-wlan-vap-prof-wlan-vap]forward-mode direct-forward
[AC2-wlan-vap-prof-wlan-vap]service-vlan vlan-id 101
[AC2-wlan-vap-prof-wlan-vap]security-profile wlan-security
[AC2-wlan-vap-prof-wlan-vap]ssid-profile wlan-ssid
配置AP组引用VAP模板，AP上射频0和射频1都使用VAP模板的配置
[AC2-wlan-view]ap-group name ap-group1
[AC2-wlan-ap-group-ap-group1]vap-profile wlan-vap wlan 1 radio 0
[AC2-wlan-ap-group-ap-group1]vap-profile wlan-vap wlan 1 radio 1
5. 配置主用AC1和备用AC2双链路备份功能
在AC1上，配置备AC2的IP地址，AC1的优先级，用于双链路备份。全局使能双链路备份和回切功能，重启所有AP使双链路备份功能生效
[AC1-wlan-view]ac protect protect-ac 10.1.100.3 priority 0
[AC1-wlan-view]undo ac protect restore disable
[AC1-wlan-view]ac protect enable
在AC2上，配置主用AC1的IP地址，AC2的优先级，用于双链路备份
[AC2-wlan-view]ac protect protect-ac 10.1.100.2 priority 1
[AC2-wlan-view]undo ac protect restore disable
[AC2-wlan-view]ac protect enable
6. 验证配置