vlan pool技术主是是解决在大型组网中全部显示一个名称SSID,但不同区域连接的用户对应不同的vlan,这样防止一个vlan太多用户,广播域太大,以实现一个SSID对应一堆vlan,且可以实现漫游。
用hash算法比较常用:
AC命令行配置(命令和图形配置不对,是按自定义AC配置逻辑写的):
dis current-configuration
vlan batch 100
vlan pool vlan_pool_test //定义业务vlan地址池
vlan 11 to 12
assignment hash
//用哈希方式分配,也可以用顺序方法,看现场情况,终端比较固定的用hash,不固定的多变的用顺序
interface Vlanif1
ip address 10.0.0.10 255.255.255.0
interface Vlanif100
ip address 192.168.100.100 255.255.255.0
interface GigabitEthernet0/0/1
port link-type access
port default vlan 100
interface GigabitEthernet0/0/2
port link-type access
ip route-static 0.0.0.0 0.0.0.0 192.168.100.1
capwap source interface vlanif100
wlan
security-profile name test //安全魔板
security wpa-wpa2 psk pass-phrase adminadmin aes
ssid-profile name test //ssid魔板
ssid test
vap-profile name test //定义vap魔板并调用其它魔板
service-vlan vlan-pool vlan_pool_test //调用业务vlan pool地址池
ssid-profile test
security-profile test
ap auth-mode mac… //可以设置mac或sn序列号认证
ap-group name test //定义个组关联横版
vap-profile test wlan 1 radio all
ap-id 0 ap-mac 00e0-fced-3880 //第一个ap加入组
ap-group test
ap-name 1-lay
ap-id 1 ap-mac 00e0-fcde-2c70 //第2个ap加入组
ap-group test
ap-name 2-lay
核心交换机上配置
dis current-configuration
vlan batch 10 to 12 20 30 100 192 999
ip pool vlan11
gateway-list 172.16.11.1
network 172.16.11.0 mask 255.255.255.0
dns-list 8.8.8.8
ip pool vlan12
gateway-list 172.16.12.1
network 172.16.12.0 mask 255.255.255.0
dns-list 8.8.8.8
ip pool vlan20
gateway-list 172.16.2.1
network 172.16.2.0 mask 255.255.255.0
dns-list 8.8.8.8
ip pool vlan30
gateway-list 172.16.3.1
network 172.16.3.0 mask 255.255.255.0
excluded-ip-address 172.16.3.100
dns-list 8.8.8.8
ip pool vlan192
gateway-list 192.168.10.1
network 192.168.10.0 mask 255.255.255.0
option 43 sub-option 3 ascii 192.168.100.100
interface Vlanif11
ip address 172.16.11.1 255.255.255.0
dhcp select global
interface Vlanif12
ip address 172.16.12.1 255.255.255.0
dhcp select global
interface Vlanif20
ip address 172.16.2.1 255.255.255.0
dhcp select global
interface Vlanif30
ip address 172.16.3.1 255.255.255.0
dhcp select global
interface Vlanif100
ip address 192.168.100.1 255.255.255.0
interface Vlanif192
ip address 192.168.10.1 255.255.255.0
dhcp select global
interface Vlanif999
ip address 10.0.0.2 255.255.255.0
interface GigabitEthernet0/0/1
port link-type access
port default vlan 100
interface GigabitEthernet0/0/2
port link-type access
port default vlan 999
interface GigabitEthernet0/0/3
port link-type trunk
port trunk allow-pass vlan 11 to 12 20 192
interface GigabitEthernet0/0/4
port link-type trunk
port trunk allow-pass vlan 30
接入交换机上也要相应放行这些vlan:
interface Ethernet0/0/1
port link-type trunk
port trunk allow-pass vlan 11 to 12 20 192
interface Ethernet0/0/2
port link-type trunk
port trunk pvid vlan 192
port trunk allow-pass vlan 11 to 12 20 192文章来源:https://www.toymoban.com/news/detail-542780.html
interface Ethernet0/0/3
port link-type trunk
port trunk pvid vlan 192
port trunk allow-pass vlan 11 to 12 20 192文章来源地址https://www.toymoban.com/news/detail-542780.html
到了这里,关于华为6605AC控制器大型组网wlan pool技术应用(自动漫游)的文章就介绍完了。如果您还想了解更多内容,请在右上角搜索TOY模板网以前的文章或继续浏览下面的相关文章,希望大家以后多多支持TOY模板网!