AC+FIT（瘦AP）配置浅谈

FIT
ensp实验材料
：pc、路由器、三层交换机、二层交换机、ac、ap

保证连通性：

根据ac与ap设计好的ip配置，使之可以通讯
ac与ap可以实现跨网段管理
1、设置三层交换机的vlan 与vlanif信息

dhcp enable    		//开启dhcp
ip pool forap 		//设置ap自动分配地址池
network 192.168.10.0 mask 255.255.255.0
gateway-list 192.168.10.254
option 43 sub-option 2 ip-address 100.100.100.100		//设置ac地址，让ap主动连接
ip pool foryonghu		//设置wlan的用户地址池
network 172.16.10.0 mask 255.255.255.0
gateway-list 172.16.10.254batch 100 200 172 192		//建立vlan信息
interface Vlanif 100
ip address 100.100.100.1 24
interface Vlanif 172
ip address 172.16.10.254 24
dhcp select global			//全局设置
interface Vlanif 200
ip address 200.200.200.1 24
interface Vlanif 192
ip address 192.168.10.254 24
dhcp select globalinterface GigabitEthernet 0/0/1
port link-type trunk
port trunk allow-pass vlan all 
interface GigabitEthernet 0/0/2
port link-type access
port default vlan 200
interface GigabitEthernet 0/0/3
port link-type trunk
port trunk allow-pass vlan all 

2、设置二层交换机

dhcp enable
vlan 192
interface GigabitEthernet 0/0/1
port link-type trunk
port trunk allow-pass vlan all 
interface GigabitEthernet 0/0/2
port link-type access
port default vlan 192

3、设置ac参数信息

vlan batch 100 172 192
interface Vlan 100
ip address 100.100.100.100 255.255.255.0
interface GigabitEthernet 0/0/1
port link-type trunk
port trunk allow-pass vlan all 
capwap source interface Vlan 100  //设置给ap回capwap包的 vlanip route-static 0.0.0.0 0 100.100.100.1  //设置出口静态路由设置ac模板信息
wlan
ssid-profile name ssid-gongsi  		//设置ssid模板信息
ssid gongsisecurity-profile name sec-gongsi	//设置security模板信息
security wpa-wpa2 psk pass-phrase a1234567 aesvap-profile name vap-gongsi		//设置vap模板信息
forward-mode tunnel 			//设置模式（集中或者转发）
service-vlan vlan-id 172 		//设置绑定服务vlan号
ssid-profile ssid-gongsi		//绑定ssid
security-profile sec-gongsi		//绑规定securityap-group name group-gongsi		//ap组设置
vap-profile vap-gongsi wlan 1 radio all //设置ap组 绑定vap信息ap-id 0 ap-mac 00e0-fc5d-0c80 (ap的mac地址)//设置ap-id号 绑定ap mac地址
ap-name ap-gongsi    //ap设备名字重启
ap-group group-gongsi //ap组绑定 重启ap

4、设置路由地址

ip address 200.200.200.200 24
ip route-static 0.0.0.0 0 200.200.200.1