二层AC内漫游核心配置流程

二层AC内漫游实验拓扑实验步骤：1、创建vlanvlan2是管理vlanap1中的业务vlan为vlan3，ap2中的业务vlan为vlan42、配置dhcp给ap提供ip地址3、在acsw1sw2的互联接口都配置trunk允许vlan234通过禁止vlan1（防止广播）4、Ac上注册ap1ap25、配置服务集1和服务集2（ssid保持一致）并下发给ap6、Ac上配置dhcp给业务vlan提供IP地址实验配置AC配置：接口常规配置[ac]intg0/0/1[ac-GigabitEthernet0/0/1]portlink-typetr[ac-GigabitEthernet0/0/1]porttrallvlan2to4[ac-GigabitEthernet0/0/1]intg0/0/2[ac-GigabitEthernet0/0/2]portlitr[ac-GigabitEthernet0/0/2]porttrallvlan2to4[ac]dhcpen[ac-GigabitEthernet0/0/2]intvlan2[ac-Vlanif2]ipadd2.2.2.2255.255.255.0[ac-Vlanif2]dhcpselectinterfaceAc注册配置[ac]wlanaccarrieridother[ac]wlanaccountry-codeCN[ac-wlan-view]wlanacsourceinterfacevlan2[ac-wlan-view]apid1type-id19mac00e0-fc2a-2100[ac-wlan-ap-1]apid2type-id19mac00e0-fcf0-77f0Ac业务配置下发给ap的逻辑接口配置[ac]intWlan-Ess3[ac-Wlan-Ess3]porthybridpvidvlan3[ac-Wlan-Ess3]porthybriduntaggedvlan3[ac-Wlan-Ess3]intwl4[ac-Wlan-Ess4]porthpvvlan4[ac-Wlan-Ess4]porthunvlan4Wmm模板配置射频接口配置并绑定wmm模板配置、安全配置[ac-wlan-view]wmm-profilenamewp01[ac-wlan-wmm-prof-wp01]qui[ac-wlan-view]radio-profilenrp01[ac-wlan-radio-prof-rp01]wmmnwp01[ac-wlan-radio-prof-rp01]qui[ac-wlan-view]security-profilensp01[ac-wlan-sec-prof-sp01]security-policywpa2[ac-wlan-sec-prof-sp01]wpa2authentication-methodpskpass-phrasecipher12345678encryption-methodccmp[ac-wlan-sec-prof-sp01]qui[ac-wlan-view]traffic-profilentp01[ac-wlan-traffic-prof-tp01]qui下发给ap的服务集配置[ac-wlan-view]service-setnameap1[ac-wlan-service-set-ap1]ssidhwq[ac-wlan-service-set-ap1]service-vlan3[ac-wlan-service-set-ap1]wlan-ess3[ac-wlan-service-set-ap1]security-profilenamesp01[ac-wlan-service-set-ap1]traffic-profilenametp01下发给ap2的服务集配置[ac-wlan-view]service-setnap2[ac-wlan-service-set-ap2]sshwq[ac-wlan-service-set-ap2]service-vlan4[ac-wlan-service-set-ap2]wlan-ess4[ac-wlan-service-set-ap2]security-profilenamesp01[ac-wlan-service-set-ap2]traffic-profilenametp01注意：在二层ac内漫游时服务集配置的ssid安全模板流量模板都要保持一致！！！[ac-wlan-view]ap1radio0[ac-wlan-radio-1/0]radio-profilenamerp01[ac-wlan-radio-1/0]service-setnap1[ac-wlan-view]ap2ra0[ac-wlan-radio-2/0]radio-profilenrp01[ac-wlan-radio-2/0]service-setnap2[ac-wlan-view]commitap1Warning:Committingconfigurationmaycauseserviceinterruption,continue?[Y/N]y[ac-wlan-view]commitap2Warning:Committingconfigurationmaycauseserviceinterruption,continue?[Y/N]y[ac]ippoolap1[ac-ip-pool-ap1]network3.3.3.0mask255.255.255.0[ac-ip-pool-ap1]qui[ac]ippooap2Info:It'ssuccessfultocreateanIPaddresspool.[ac-ip-pool-ap2]netw4.4.4.0mask255.255.255.0[ac-ip-pool-ap2]intvlan3[ac-Vlanif3]ipadd3.3.3.3255.255.255.0[ac-Vlanif3]dhcpselglobal[ac-Vlanif4]ipadd4.4.4.4255.255.255.0[ac-Vlanif4]dhcpselglobalSw1配置：[sw1]vlanb2to4[sw1]intg0/0/1[sw1-GigabitEthernet0/0/1]portlink-tr[sw1-GigabitEthernet0/0/1]porttrallvlan2to4[sw1-vlan2]porte0/0/1[sw1-Ethernet0/0/1]portlink-typetr[sw1-Ethernet0/0/1]porttrallvlan2to4[sw1-Ethernet0/0/1]undoporttrallvlan1[sw1-Ethernet0/0/1]porttrpvidvlan2Sw2的配置[sw2]vlanb2to4[sw2]intg0/0/2[sw2-GigabitEthernet0/0/2]portlitr[sw2-GigabitEthernet0/0/2]porttrallvlan2to4[sw2-GigabitEthernet0/0/2]inte0/0/1[sw2-Ethernet0/0/1]portlitr[sw2-Ethernet0/0/1]undoportrallvlan1[sw2-Ethernet0/0/1]porttrpvidvlan2总结：Ap二层漫游移动终端从ap2移动到ap1获取的ip地址是不会变的的除非移动终端断线重新连接（原因：移动终端在ap2获取到4.4.4.254的IP地址并移动到ap1下，已经有ip地址了，终端就不会重新使用dhcp获取，在移动终端发送数据的时候，数据包头部加上所连接ap中的vlan标签就可以送到ac，到达ac后看到ip地址为4.4.4.254的数据包，ac会直接将数据直接送个4.4.4.4的网关。）