設(shè)備：AC6605一臺(tái)、AP6050兩臺(tái)、S5700一臺(tái)、STA一臺(tái)，電話一部
網(wǎng)絡(luò)規(guī)劃：vlan 10 20 30? 其中vlan 10為辦公網(wǎng)、vlan 20?為生產(chǎn)網(wǎng) vlan 30為生產(chǎn)網(wǎng)。
交接機(jī)S5700配置如下：
vlan batch 10 20 30? ? //批量創(chuàng)建vlan
dhcp enable? ? ? ? ? ? ? ? //開啟DHCP
ip pool bg? ? ? ? ? ? ? ? //創(chuàng)建辦公地址池
gateway-list 10.0.10.254? ? ? ? //網(wǎng)關(guān)
network 10.0.10.1 mask 255.255.255.0? ? ? ? ? ? //地址池
lease day 0 hour 2 minute 0? ? ? ? ? ? ? ? ? ? ? ? ? ? //ip租期
dns-list 223.5.5.5 114.114.114.114? ? ? ? ? ? ? ? //dns
#
ip pool hl
gateway-list 10.0.30.254
network 10.0.30.0 mask 255.255.255.0
lease day 0 hour 2 minute 0
dns-list 223.5.5.5 114.114.114.114
#
ip pool sc
gateway-list 10.0.20.254
network 10.0.20.0 mask 255.255.255.0
lease day 0 hour 2 minute 0
dns-list 223.5.5.5 114.114.114.114
===============端口配置===========
interface GigabitEthernet0/0/1? ? ? ? ? ? //AC端口配置
port link-type trunk
port trunk pvid vlan 30
port trunk allow-pass vlan 10 20 30
#
interface GigabitEthernet0/0/2
port link-type trunk
port trunk pvid vlan 30
port trunk allow-pass vlan 10 20 30
#
interface GigabitEthernet0/0/3
port link-type trunk
port trunk pvid vlan 30
port trunk allow-pass vlan 10 20 30
=============AC6605配置============
vlan batch 10 20 30? ? ? ? ?//創(chuàng)建vlan
interface Vlanif30? ? ? ? ? ? //配置管理地址
ip address 10.0.30.251 255.255.255.0
capwap source ip-address 10.0.30.251? ? //配置AC源接口ip
=============wlan配置======================
regulatory-domain-profile name default? ? ? ? //配置國家代碼
country-code cn
ap auth-mode no-auth? ? ? ? //設(shè)置AP上線驗(yàn)證模式
security-profile name sc? ? ? ? //設(shè)置wifi加密認(rèn)證
? security wpa-wpa2 psk pass-phrase %^%#jg!E3X^cd#uRgQAW~hp=0nu=<_#*[RHvD$JVkP*J
%^%# aes
ssid-profile name sc? ? ? ? //設(shè)置SSID名稱
? ssid shengchan
vap-profile name sc? ? ? ? 設(shè)置vap業(yè)務(wù)模板
forward-mode direct-forward? ? //轉(zhuǎn)發(fā)模式為直接轉(zhuǎn)發(fā)
? service-vlan vlan-id 20? ? 綁定業(yè)務(wù)vlan
? ssid-profile sc? ? ? ? //綁定ssid模板
? security-profile sc? ? //綁定加密模板
