分析:1、创建AP组2、配置网络互通3、配置AC系统参数4、配置AC为FIT AP下发的WLAN业务配置//R1 # interface GigabitEthernet0/0/0 ip address 192.168.200.2 255.255.255.0 # interface LoopBack0 ip address 1.1.1.1 255.255.255.255 # ospf 1 router-id 1.1.1.1 area 0.0.0.0 network 1.1.1.1 0.0.0.0 network 192.168.200.2 0.0.0.0 //AC1 # vlan batch 10 20 100 200 # interface Vlanif200 ip address 192.168.200.1 255.255.255.0 # interface GigabitEthernet0/0/1 port link-type access port default vlan 200 # interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan 10 20 100 # ospf 1 router-id 2.2.2.2 area 0.0.0.0 network 192.168.0.0 0.0.255.255 //SW1 # interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 10 20 100 # interface GigabitEthernet0/0/2 port link-type trunk port trunk pvid vlan 100 port trunk allow-pass vlan 10 100 # interface GigabitEthernet0/0/3 port link-type trunk port trunk pvid vlan 100 port trunk allow-pass vlan 10 100 # interface GigabitEthernet0/0/4 port link-type trunk port trunk pvid vlan 100 port trunk allow-pass vlan 20 100 # ip pool AP gateway-list 192.168.100.1 network 192.168.100.0 mask 255.255.255.0 dns-list 8.8.8.8 # ip pool group-1 gateway-list 192.168.10.1 network 192.168.10.0 mask 255.255.255.0 dns-list 8.8.8.8 # ip pool group-2 gateway-list 192.168.20.1 network 192.168.20.0 mask 255.255.255.0 dns-list 8.8.8.8 # interface Vlanif10 ip address 192.168.10.1 255.255.255.0 dhcp select global # interface Vlanif20 ip address 192.168.20.1 255.255.255.0 dhcp select global # interface Vlanif100 ip address 192.168.100.1 255.255.255.0 dhcp select global //AP组 # capwap source interface vlanif100 regulatory-domain-profile name aa regulate-domain-aa]country-code CN ap-group name 1 regulatory-domain-profile aa ap auth-mode mac-auth ap-group name 2 regulatory-domain-profile aa ap auth-mode mac-auth ap-id 1 type-id 45 ap-mac 00e0-fcdc-2290 ap-sn 2102354483103948F373 ap-name AP1 ap-group 1 ap-id 2 type-id 45 ap-mac 00e0-fc10-4b70 ap-sn 210235448310C859E763 ap-name AP2 ap-group 1 ap-id 3 type-id 45 ap-mac 00e0-fc1a-70d0 ap-sn 210235448310EA0BCC0B ap-name AP3 ap-group 2 //模板 security-profile name aa security wpa2 psk pass-phrase admin123 aes ssid-profile name 1 ssid openlab-1 ssid-profile name 2 ssid openlab-2 vap-profile name 1 forward-mode tunnel service-vlan vlan-id 10 ssid-profile 1 security-profile aa vap-profile name 2 forward-mode tunnel service-vlan vlan-id 20 ssid-profile 2 security-profile aa ap-group name 1 vap-profile 1 wlan 1 radio all ap-group name 2 vap-profile 2 wlan 1 radio all结果