eNSP使用AC + Fit AP 无线组网配置教程

前言

随着无线网络技术的快速发展，WLAN 已广泛应用于企业、校园及公共网络环境中。相比传统有线网络，无线网络具有部署灵活、移动性强和扩展方便等特点。

本实验基于华为 AC 与 AP 设备，完成企业级无线网络的基础配置。通过 VLAN 划分、DHCP 地址分配、AP 上线以及 WLAN 业务配置，实现不同无线用户的网络隔离与统一管理。

网络架构说明

整体采用典型 AC + Fit AP 架构：

AC：统一管理 AP，提供 DHCP、WLAN 配置
AP：负责无线信号接入与数据转发
交换机：承载 VLAN 与二层转发
VLAN 划分：
- VLAN 1：管理网络 / CAPWAP 通信
- VLAN 10：办公网络（work）
- VLAN 20：访客网络（guest）

配置步骤

1.AC 基础配置

[AC6605]sysname AC   
[AC]vlan batch 1 10 20
[AC]int gig 0/0/1 
[AC-GigabitEthernet0/0/1]port link trunk
[AC-GigabitEthernet0/0/1]port trunk all vlan 1 10 20
[AC-GigabitEthernet0/0/1]q

2.SW基础配置

[Huawei]sysname SW
[SW]vlan batch 1 10 20
[SW]int eth 0/0/1
[SW-Ethernet0/0/1]port link trunk 
[SW-Ethernet0/0/1]port trunk all vlan 1 10 20
[SW-Ethernet0/0/1]q
[SW]int eth 0/0/2
[SW-Ethernet0/0/2]port link trunk 
[SW-Ethernet0/0/2]port trunk all vlan 1 10
[SW-Ethernet0/0/2]q
[SW]int eth 0/0/3
[SW-Ethernet0/0/3]port link trunk 
[SW-Ethernet0/0/3]port trunk all vlan 1 20
[SW-Ethernet0/0/3]q

3.三层网关配置

[AC]int vlan 1
[AC-Vlanif1]ip add 192.168.1.254 24
[AC-Vlanif1]q
[AC]int vlan 10
[AC-Vlanif10]ip add 192.168.10.254 24
[AC-Vlanif10]q
[AC]int vlan 20
[AC-Vlanif20]ip add 192.168.20.254 24
[AC-Vlanif20]q

4.DHCP 与 AP 上线配置

[AC]dhcp enable
[AC]int vlan 1  
[AC-Vlanif1]dhcp select interface 
[AC-Vlanif1]q
[AC]int vlan 10  
[AC-Vlanif10]dhcp select interface 
[AC-Vlanif10]q
[AC]int vlan 20  
[AC-Vlanif20]dhcp  select interface    
[AC-Vlanif20]q

5.CAPWAP 配置（关键）

[AC]capwap source interface Vlanif 1

6.添加 AP 设备

在 AP 上通过命令 ‘display int’ 查看设备的 MAC 地址

[AC]wlan
[AC-wlan-view]ap-id 1 ap-mac 00e0-fcfe-6f70
[AC-wlan-ap-1]ap-name Ap1 
[AC-wlan-view]ap-id 2  ap-mac 00e0-fcf2-1c10
[AC-wlan-ap-2]ap-name Ap2
[AC-wlan-view]q

7.查看 AP 状态

从输出中可以看到两台AP全部都正常上线（nor）

8.创建 AP 组并将AP分配到对应的组

[AC]wlan 
[AC-wlan-view]ap-group name work
[AC-wlan-ap-group-work]q
[AC-wlan-view]ap-group name guest
[AC-wlan-ap-group-guest]q
[AC-wlan-view]ap-id 1
[AC-wlan-ap-1]ap-group work
[AC-wlan-view]ap-id 2
[AC-wlan-ap-2]ap-group guest
[AC-wlan-view]q

9.work 业务配置（办公 WiFi）

[AC]wlan  
[AC-wlan-view]ssid-profile name work          //SSID 配置
[AC-wlan-ssid-prof-work]ssid work
[AC-wlan-ssid-prof-work]q
[AC-wlan-view]security-profile name work      //安全策略
[AC-wlan-sec-prof-work]security wpa2 psk pass-phrase 123456789 aes
[AC-wlan-sec-prof-work]q
[AC-wlan-view]vap-profile name work           //VAP 配置
[AC-wlan-vap-prof-work]ssid-profile work
[AC-wlan-vap-prof-work]security-profile work 
[AC-wlan-vap-prof-work]service-vlan vlan-id 10
[AC-wlan-vap-prof-work]forward-mode direct-forward 
[AC-wlan-vap-prof-work]q  
[AC-wlan-view]ap-group name work              //绑定 AP 组
[AC-wlan-ap-group-work]vap-profile work wlan 1 radio all
[AC-wlan-ap-group-work]q

10.guest 业务配置（访客 WiFi）

[AC-wlan-view]ssid-profile name guest          //SSID配置
[AC-wlan-view]ssid guest
[AC-wlan-view]security-profile name guest      //安全策略
[AC-wlan-sec-prof-guest]security wpa2 psk pass-phrase 987654321 aes
[AC-wlan-sec-prof-guest]q 
[AC-wlan-view]vap-profile name guest          //VAP 配置
[AC-wlan-vap-prof-guest]ssid-profile guest
[AC-wlan-vap-prof-guest]security-profile guest
[AC-wlan-vap-prof-guest]service-vlan vlan-id 20
[AC-wlan-vap-prof-guest]forward-mode direct-forward 
[AC-wlan-vap-prof-guest]q
[AC-wlan-view]ap-group name guest             //绑定 AP 组
[AC-wlan-ap-group-guest]vap-profile guest wlan 2 radio all
[AC-wlan-ap-group-guest]q

配置结束！