华为eNSP模拟器实战旁挂二层组网下AP免认证上线完整配置在无线网络部署中AP接入点的快速上线是网络工程师必须掌握的核心技能。华为eNSP模拟器为学习者提供了一个近乎真实的实验环境特别适合练习AP在旁挂二层组网下的免认证上线配置。这种组网方式在企业办公、校园网络等场景中非常常见能够实现无线终端的快速接入和业务隔离。1. 实验环境准备与网络规划1.1 实验拓扑设计本次实验采用典型的旁挂二层组网架构主要设备包括1台AC无线控制器2台AP无线接入点1台二层交换机LSW11台路由器AR1作为网络出口关键连接关系AC与AP通过交换机二层互联采用直接转发模式业务数据不经过AC管理流量与业务流量分离1.2 VLAN与IP地址规划合理的VLAN划分是网络稳定运行的基础。我们设计了以下VLAN结构VLAN ID用途IP网段网关地址100管理VLAN192.168.100.0/24192.168.100.25410业务VLAN1192.168.10.0/24192.168.10.25420业务VLAN2192.168.20.0/24192.168.20.254200上行VLAN192.168.200.0/24192.168.200.254注意管理VLAN用于AC与AP之间的控制通信业务VLAN承载用户数据流量上行VLAN连接外部网络。2. 基础网络配置2.1 路由器(AR1)配置作为网络出口设备AR1需要配置基础网络参数和路由Huaweisystem-view [Huawei]sysname AR [AR]interface GigabitEthernet 0/0/0 [AR-GigabitEthernet0/0/0]ip address 192.168.200.253 24 [AR-GigabitEthernet0/0/0]quit # 配置到业务VLAN的静态路由 [AR]ip route-static 192.168.10.0 255.255.255.0 192.168.200.254 [AR]ip route-static 192.168.20.0 255.255.255.0 192.168.200.254 [AR]quit ARsave2.2 交换机(LSW1)配置二层交换机是网络流量的核心转发设备需要完成以下关键配置创建VLAN并配置接口IPHuaweisystem-view [Huawei]sysname SW [SW]vlan batch 10 20 100 200 # 配置各VLAN接口IP [SW]interface Vlanif 10 [SW-Vlanif10]ip address 192.168.10.254 24 [SW-Vlanif10]quit [SW]interface Vlanif 20 [SW-Vlanif20]ip address 192.168.20.254 24 [SW-Vlanif20]quit [SW]interface Vlanif 100 [SW-Vlanif100]ip address 192.168.100.254 24 [SW-Vlanif100]quit [SW]interface Vlanif 200 [SW-Vlanif200]ip address 192.168.200.254 24 [SW-Vlanif200]quit端口类型与VLAN划分连接AP的端口配置为access模式归属管理VLAN 100连接AC的端口配置为trunk模式允许管理VLAN和业务VLAN通过上行端口配置为access模式归属上行VLAN 200# 配置G0/0/1端口连接AP1 [SW]interface GigabitEthernet 0/0/1 [SW-GigabitEthernet0/0/1]port link-type access [SW-GigabitEthernet0/0/1]port default vlan 100 [SW-GigabitEthernet0/0/1]quit # 配置G0/0/2端口连接AC [SW]interface GigabitEthernet 0/0/2 [SW-GigabitEthernet0/0/2]port link-type trunk [SW-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 100 [SW-GigabitEthernet0/0/2]port trunk pvid vlan 100 [SW-GigabitEthernet0/0/2]quit # 配置G0/0/4端口上行口 [SW]interface GigabitEthernet 0/0/4 [SW-GigabitEthernet0/0/4]port link-type access [SW-GigabitEthernet0/0/4]port default vlan 200 [SW-GigabitEthernet0/0/4]quit [SW]quit SWsave3. AC核心配置3.1 基础网络参数AC作为无线网络的核心控制设备需要完成以下基础配置AC6605system-view [AC6605]sysname AC [AC]vlan batch 10 20 100 # 配置连接交换机的端口 [AC]interface GigabitEthernet 0/0/1 [AC-GigabitEthernet0/0/1]port link-type access [AC-GigabitEthernet0/0/1]port default vlan 100 [AC-GigabitEthernet0/0/1]quit3.2 DHCP服务配置AC在本实验中充当DHCP服务器为AP和无线终端分配IP地址启用DHCP服务[AC]dhcp enable配置管理VLAN地址池[AC]ip pool AP-pool [AC-ip-pool-AP-pool]network 192.168.100.0 mask 24 [AC-ip-pool-AP-pool]quit配置业务VLAN地址池# VLAN10地址池 [AC]ip pool vlan10-pool [AC-ip-pool-vlan10-pool]network 192.168.10.0 mask 24 [AC-ip-pool-vlan10-pool]gateway-list 192.168.10.254 [AC-ip-pool-vlan10-pool]quit # VLAN20地址池 [AC]ip pool vlan20-pool [AC-ip-pool-vlan20-pool]network 192.168.20.0 mask 24 [AC-ip-pool-vlan20-pool]gateway-list 192.168.20.254 [AC-ip-pool-vlan20-pool]quit接口启用DHCP# 管理VLAN接口 [AC]interface Vlanif 100 [AC-Vlanif100]ip address 192.168.100.253 24 [AC-Vlanif100]dhcp select global [AC-Vlanif100]quit # 业务VLAN接口 [AC]interface Vlanif 10 [AC-Vlanif10]ip address 192.168.10.253 24 [AC-Vlanif10]dhcp select global [AC-Vlanif10]quit [AC]interface Vlanif 20 [AC-Vlanif20]ip address 192.168.20.253 24 [AC-Vlanif20]dhcp select global [AC-Vlanif20]quit3.3 AP免认证上线配置创建AP组[AC]wlan [AC-wlan-view]ap-group name lab09-AG [AC-wlan-ap-group-lab09-AG]quit配置国家码[AC-wlan-view]regulatory-domain-profile name lab09-domain [AC-wlan-regulate-domain-lab09-domain]country-code cn [AC-wlan-regulate-domain-lab09-domain]quit # 绑定域模板到AP组 [AC-wlan-view]ap-group name lab09-AG [AC-wlan-ap-group-lab09-AG]regulatory-domain-profile lab09-domain [AC-wlan-ap-group-lab09-AG]quit配置CAPWAP源接口[AC]capwap source ip-address 192.168.100.253设置AP免认证模式[AC]wlan [AC-wlan-view]ap auth-mode no-auth4. 验证与排错4.1 检查AP上线状态完成配置后可以通过以下命令验证AP是否成功上线ACdisplay ap all正常状态下AP的状态应显示为nor(normal)。如果状态异常可以检查以下方面AP是否获取到了管理VLAN的IP地址AC与AP之间的二层连通性CAPWAP源接口配置是否正确4.2 验证域模板配置ACdisplay regulatory-domain-profile all确保国家码配置正确且AP组已正确引用域模板。4.3 测试无线终端接入配置无线SSID并绑定到业务VLAN后无线终端应该能够成功关联到AP获取对应业务VLAN的IP地址访问外部网络资源在实际项目中建议先完成实验室验证再部署到生产环境。遇到问题时可以分段排查先确保AP能上线再验证无线终端的接入功能。