一、前言

本篇文章目的：使读者快速了解wlan的配置命令，仅包含能让ac/ap正常运行的命令。

其他系列文章请跳转华为数通目录

二、项目拓扑

三、项目需求

1. vlan10为AP管理流，vlan20为STA业务流。
2. DHCP, vlan10 为ap分配地址，vlan20为STA分配地址。
3. 全网链路不对流量做任何限制
4. wlan配置能正常连上就行

四、配置思路

创建vlan，配置vlan接口ip>trunk链路放行对应流量保证，链路可达>DHCP为ap和终端分配IP地址>WLAN基本配置(capwap,ssid,vap)

五、配置步骤

1. 创建vlan，配置vlan接口ip

[LSW1]vlan 10
[LSW1]vlan 20

[LSW1]interface Vlanif 10
[LSW1-Vlanif10]ip ad 192.168.10.1 24

[LSW1]interface Vlanif 20
[LSW1-Vlanif20]ip ad 192.168.20.1 24

[AC1]interface Vlanif 10
[AC1-Vlanif10]ip address 192.168.10.2 24

2. trunk放行对应流量，保证链路可达

[LSW1]interface g0/0/2
[LSW1-GigabitEthernet0/0/2]port link-type trunk
[LSW1-GigabitEthernet0/0/2]port trunk allow-pass vlan all

[LSW1]interface g0/0/1
[LSW1-GigabitEthernet0/0/1]port link-type trunk
[LSW1-GigabitEthernet0/0/1]port trunk allow-pass vlan all

[AC1]interface g0/0/1
[AC1-GigabitEthernet0/0/1]port link-type trunk
[AC1-GigabitEthernet0/0/1]port trunk allow-pass vlan all

3.开启DHCP服务，配置DHCP地址池，为AP和终端设备分配IP地址

1. 开启dhcp服务

[LSW1]dhcp enable

2. 创建IP地址池vlan10，vlan20

[LSW1]ip pool vlan10
[LSW1-ip-pool-vlan10]network 192.168.10.0
[LSW1-ip-pool-vlan10]gateway-list 192.168.10.1

[LSW1]ip pool vlan20
[LSW1-ip-pool-vlan20]gateway-list 192.168.20.1
[LSW1-ip-pool-vlan20]network 192.168.20.0

3. vlan端口绑定全局地址池

[LSW1]interface Vlanif 10
[LSW1-Vlanif10]dhcp select global [LSW1-Vlanif20]
[LSW1-Vlanif20]dhcp select global 

4. LSW1连AP的端口打上pvid标签，AP无法识别vlan，必须通过pvid识别获取dhcp的IP

[LSW1]interface g0/0/2
[LSW1-GigabitEthernet0/0/2]port trunk pvid vlan 10

5. 用AP ping 网关可通

4.WLAN基本配置

1. 创建capwap隧道

[AC1]capwap source interface Vlanif 10

CAPWAP协议是一个通用的隧道协议，完成AP发现AC等基本协议功能，和具体的无线接入技术无关。

2. 配置wlan

[AC1]wlan
[AC1-wlan-view]ap auth-mode no-auth 			//配置无身份验证模式上线

3. 用 AP ping 一下 AC ，可通。提示CAPWAP隧道已建立

4. 等一分钟，发现AP已经自动上线(ensp截图不是一列，强迫症，此处复制粘贴显示内容)

[AC1-wlan-view]dis ap all
Info: This operation may take a few seconds. Please wait for a moment.done.
Total AP information:
nor  : normal          [1]
------------------------------------------------------------------------------------------------------
ID   MAC               Name            Group       IP              Type     State    STA     Uptime
------------------------------------------------------------------------------------------------------
0    00e0-fcb1-1970   00e0-fcb1-1970   default   192.168.10.254   AP2050DN   nor      0      1M:39S
------------------------------------------------------------------------------------------------------
Total: 1

5. 配置wlan

[AC1]wlan 
[AC1-wlan-view]ssid-profile name 1									//进入ssid模板1
[AC1-wlan-ssid-prof-1]ssid 1										//配置ssid名1
[AC1-wlan-view]vap-profile name 1									//进入vap模板1
[AC1-wlan-vap-prof-1]ssid-profile 1									//绑定ssid1
[AC1-wlan-vap-prof-1]service-vlan vlan-id 20						//ap绑定vlan20
[AC1-wlan-view]ap-id 0												//进入ap-id 为0的ap
[AC1-wlan-ap-0]vap-profile 1 wlan 1 radio 0							//启用vap模板

6. 点开STA连接ssid1，连接成功。出现一直显示IP地址获取中，排查为STA分配地址的DHCP池
   
7. 在STA输入ipconfig发现DHCP已分配地址
   
8. 用STA ping 网关可通
   

六、结语