分为三步：1、网络互通，2、AP上线，3、wlan业务
1、网络互通
crow-sw:
vlan batch 20 100
dhcp enable
int vlan 20
ip add 192.168.20.1 24
dhcp select interfaceinterface GigabitEthernet0/0/2port link-type accessport default vlan 100interface GigabitEthernet0/0/3port link-type trunkport trunk pvid vlan 100port trunk allow-pass vlan 20 100
dis port vlan active #查看
interface GigabitEthernet0/0/4port link-type trunkport trunk pvid vlan 100port trunk allow-pass vlan 20 100AC2:
vlan 100
dhcp enable
int vlan 100
ip add 192.168.100.1 24
dhcp select interface
interface GigabitEthernet0/0/1port link-type accessport default vlan 1002、AP上线
AC:
全局：capwap source interface vlan 100wlan
ap auth-mode no-auth （默认是MAC）ap-group name Group_Dap-id 0ap-group Group_Dap-id 1ap-group Group_D3、WLAN业务
AC：
wlan
security-profile name A
security wpa-wpa2 psk pass-phrase 12345678 aes
# 使用安全策略 wpa-wpa2 共享秘钥文psk,pass-phrase 密码，用户和AP直接加密方式aes.ssid-profile name Bssid Huaweivap-profile name C # vap 虚拟模版forward-mode direct-for #默认直接转发service-vlan vlan-id 20 #使用ssid-profile B #调用B策略security-profile A #调用A策略ap-group name Group_Dvap-profile C wlan 1 radio all #关联16个VAP，一个vap对应一个信号ping 9.9.9.9
AR:
interface GigabitEthernet0/0/0ip address 192.168.80.2 255.255.255.0
ip route-static 192.168.20.0 255.255.255.0 192.168.80.1
int loo 0
interface LoopBack0ip address 9.9.9.9 255.255.255.255 core
interface GigabitEthernet0/0/1port link-type accessport default vlan 800
ip route-static 0.0.0.0 0.0.0.0 192.168.80.2
interface Vlanif800ip address 192.168.80.1 255.255.255.0
