设备：AC6605一台、AP6050两台、S5700一台、STA一台，电话一部
网络规划：vlan 10 20 30 其中vlan 10为办公网、vlan 20 为生产网 vlan 30为生产网。
交接机S5700配置如下：
vlan batch 10 20 30 //批量创建vlan
dhcp enable //开启DHCP
ip pool bg //创建办公地址池
gateway-list 10.0.10.254 //网关
network 10.0.10.1 mask 255.255.255.0 //地址池
lease day 0 hour 2 minute 0 //ip租期
dns-list 223.5.5.5 114.114.114.114 //dns
#
ip pool hl
gateway-list 10.0.30.254
network 10.0.30.0 mask 255.255.255.0
lease day 0 hour 2 minute 0
dns-list 223.5.5.5 114.114.114.114
#
ip pool sc
gateway-list 10.0.20.254
network 10.0.20.0 mask 255.255.255.0
lease day 0 hour 2 minute 0
dns-list 223.5.5.5 114.114.114.114
===============端口配置===========
interface GigabitEthernet0/0/1 //AC端口配置
port link-type trunk
port trunk pvid vlan 30
port trunk allow-pass vlan 10 20 30
#
interface GigabitEthernet0/0/2
port link-type trunk
port trunk pvid vlan 30
port trunk allow-pass vlan 10 20 30
#
interface GigabitEthernet0/0/3
port link-type trunk
port trunk pvid vlan 30
port trunk allow-pass vlan 10 20 30
=============AC6605配置============
vlan batch 10 20 30 //创建vlan
interface Vlanif30 //配置管理地址
ip address 10.0.30.251 255.255.255.0
capwap source ip-address 10.0.30.251 //配置AC源接口ip
=============wlan配置======================
regulatory-domain-profile name default //配置国家代码
country-code cn
ap auth-mode no-auth //设置AP上线验证模式
security-profile name sc //设置wifi加密认证
security wpa-wpa2 psk pass-phrase %^%#jg!E3X^cd#uRgQAW~hp=0nu=<_#*[RHvD$JVkP*J
%^%# aes
ssid-profile name sc //设置SSID名称
ssid shengchan
vap-profile name sc 设置vap业务模板
forward-mode direct-forward //转发模式为直接转发
service-vlan vlan-id 20 绑定业务vlan
ssid-profile sc //绑定ssid模板
security-profile sc //绑定加密模板
网友评论