跨VLAN的三层漫游
本案例主要通过结合AC与FIT AP架构以及旁挂三层组网直接转发方式进行WLAN网络构建。当用户在不同AP之间在同一区域活动时，能够观察到跨越VLAN的漫游现象。
图1跨********VLAN的三层漫游
参数规划
| 表1参数规划表 | |
|---|---|
| 配置项 | 参********数 |
| 管理VLAN（AP） | VLAN10 |
| 管理VLAN（AC） | VLAN100 |
| STA业务VLAN |
- AP1：VLAN101
- AP2：VLAN102
| AP的IP地址池 | 10.1.10.2～10.1.10.254/24 |
| STA的IP地址池 |
- AP1：10.1.101.2～10.1.101.254/24
- AP2：10.1.102.2～10.1.102.254/24
| AP组 |
- 名称：ap-group1
- 引用模板：VAP模板wlan-sz1、域管理模板default
||
||
- 名称：ap-group2
- 引用模板：VAP模板wlan-sz2、域管理模板default
- 名称：default
- 国家码：中国
- 名称：wlan-sz
- SSID名称：wlan-sz
- 名称：wlan-sz1
- 转发模式：直接转发
- 业务VLAN：VLAN101
- 引用模板：SSID模板wlan-sz
||
||
- 名称：wlan-sz2
- 转发模式：直接转发
- 业务VLAN：VLAN102
- 引用模板：SSID模板wlan-sz
||
操作步骤
1.配置周边设备
在交换机SW1上配置GE口端口接口
[HUAWEI] sysname SW1
[SW1] vlan batch 10 101 102
[SW1] interfacegigabitethernet0/0/1
[SW1-GigabitEthernet0/0/1] port link-type trunk
[SW1-GigabitEthernet0/0/1] port trunk pvid vlan 10
[SW1-GigabitEthernet0/0/1] port trunk allow-pass vlan 10 101
[SW1-GigabitEthernet0/0/1] port-isolate enable
[SW1-GigabitEthernet0/0/1] quit
[SW1] interfacegigabitethernet0/0/2
[SW1-GigabitEthernet0/0/2] port link-type trunk
[SW1-GigabitEthernet0/0/2] port trunk allow-pass vlan 10 101 102
[SW1-GigabitEthernet0/0/2] quit
[SW1] interfacegigabitethernet0/0/3
[SW1-GigabitEthernet0/0/3] port link-type trunk
[SW1-GigabitEthernet0/0/3] port trunk pvid vlan 10
[SW1-GigabitEthernet0/0/3] port trunk allow-pass vlan 10 102
[SW1-GigabitEthernet0/0/3] port-isolate enable
[SW1-GigabitEthernet0/0/3] quit
设置汇聚交换机SW2的接口GE ①、GE ② 和 GE ③ 分别属于 VLAN ④、⑤ 和 ⑥；在汇集中将 GE ⁷ 设置为所属的 VLAN ⁸；新增 VLAN 接口 VLANIF ⁹ 和 VLANIF ⁽ ，分别配置其地址为 VLANID-9 和 VLANID-8。
[HUAWEI] sysname SW2
[SW2] vlan batch 10 100 101 102 200
[SW2] interfacegigabitethernet0/0/1
[SW2-GigabitEthernet0/0/1] port link-type trunk
[SW2-GigabitEthernet0/0/1] port trunk allow-pass vlan 10 101 102
[SW2-GigabitEthernet0/0/1] quit
[SW2] interfacegigabitethernet0/0/2
[SW2-GigabitEthernet0/0/2] port link-type trunk
[SW2-GigabitEthernet0/0/2] port trunk allow-pass vlan 100
[SW2-GigabitEthernet0/0/2] quit
[SW2] interfacegigabitethernet0/0/3
[SW2-GigabitEthernet0/0/3] port link-type access
[SW2-GigabitEthernet0/0/3] port default vlan 200
[SW2-GigabitEthernet0/0/3] quit
[SW2] interface vlanif 100
[SW2-Vlanif100] ip address 10.14.100.2 24
[SW2-Vlanif100] quit
[SW2] interface vlanif 200
[SW2-Vlanif100] ip address 10.14.200.2 24
[SW2-Vlanif100] quit
配置Router的接口GE0/0/0的IP地址为10.1.200.1/24。
[Huawei] sysname Router
[Router] interface gigabitethernet 0/0/0
[Router-GigabitEthernet0/0/0] ip address 10.14.200.1 24
[Router-GigabitEthernet0/0/0] quit
配置Router到STA的路由。
[Router] iproute-static 10.14.101.0 24 10.14.200.2
[Router] ip********route -static 10.14.102.0 24 10.14.200.2
2.配置AC与其它网络设备互通
配置AC的接口GE0/0/1加入VLAN100，并创建接口VLANIF100。
[AC6605] sysname AC
[AC] vlan 100
[AC-vlan100] quit
[AC] interface vlanif 100
[AC-Vlanif100] ip address 10.14.100.1 24
[AC-Vlanif100] quit
[AC] interfacegigabitethernet0/0/1
[AC-GigabitEthernet0/0/1] port link-type trunk
[AC-GigabitEthernet0/0/1] port trunk allow-pass vlan 100
[AC-GigabitEthernet0/0/1] quit
配置AC到AP的路由，下一跳为SW2的VLANIF100。
[AC] ip route-static 10.14.10.0 24 10.14.100.2
3.配置DHCP服务器为STA和AP分配IP地址
在SW2上配置DHCP中继。
[SW2] dhcp enable
[SW2] interface vlanif 10
[SW2-Vlanif10] ip address 10.14.10.1 24
[SW2-Vlanif10] dhcp select relay
[SW2-Vlanif10] dhcp relay server-ip 10.14.100.1
[SW2-Vlanif10] quit
在SW2上创建VLANIF101和VLANIF102接口为STA提供地址，并指定默认网关。
[SW2] interface vlanif 101
[SW2-Vlanif101] ip address 10.14.101.1 24
[SW2-Vlanif101] dhcp select interface
[SW2-Vlanif101] quit
[SW2] interface vlanif 102
[SW2-Vlanif102] ip address 10.14.102.1 24
[SW2-Vlanif102] dhcp select interface
[SW2-Vlanif102] quit
在AC上创建全局地址池为AP提供地址。
[AC] dhcp enable
[AC] ip pool ap
[AC-ip-pool-ap] network 10.14.10.0 mask 24
[AC-ip-pool-ap] gateway-list 10.14.10.1
[AC-ip-pool-ap] option 43 sub-option 3 ascii 10.14.100.1
[AC-ip-pool-ap] quit
4.配置AP上线
创建AP组，用于将相同配置的AP都加入同一AP组中。
[AC] wlan
[AC-wlan-view] ap-group name ap-group1
[AC-wlan-ap-group-ap-group1] quit
[AC-wlan-view] ap-group name ap-group2
[AC-wlan-ap-group-ap-group2] quit
生成一个用于域管理的模板，在生成的域管理模板中设置AC地区的国家码，并在AP分组中引用该域管理模板。
[AC-wlan-view] regulatory-domain-profile name default
[AC-wlan-regulate-domain-default] country-code cn
[AC-wlan-regulate-domain-default] quit
[AC-wlan-view] ap-group name ap-group1
[AC-wlan-ap-group-ap-group1] regulatory-domain-profile default
请注意：更改国家代码将清除无线电收发器的信道参数、功率设置以及天线增益配置，并使AP设备重新启动。继续操作前，请确认所有设置已正确执行。
e?[Y/N]:y
[AC-wlan-ap-group-ap-group1] quit
[AC-wlan-view] ap-group name ap-group2
[AC-wlan-ap-group-ap-group2] regulatory-domain-profile default
Important Notice: Altering the country code settings will cause a clearing of the radio's channel, power, and antenna gain configurations, resetting the access point (AP). Continue to apply further changes or exit gracefully.
e?[Y/N]:y
[AC-wlan-ap-group-ap-group2] quit
[AC-wlan-view] quit
配置AC的源接口。
[AC] capwap source interface vlanif 100
在AC上进行批量导入AP模块后，在"ap-group1"中添加AP1设备，在"ap-group2"中添加AP2设备。采用的测试设备型号为HP AP4050DN系列设备，在其配置中包含两个独立的射频组'RF-Group 1'和'RF-Group 2'。其中'RF-Group 1'配置有2.4GHz radio接口接口（Radio Frequency Interface），而'RF-Group 2'配置有5GHz radio接口接口（Radio Frequency Interface）。
[AC-wlan-view] ap-id 0 ap-mac********00E0-FC26-49E0
[AC-wlan-ap-0] ap-name AP1
Warning: This operation may cause AP reset. Continue? [Y/N]:y
[AC-wlan-ap-0] ap-group ap-group1
请注意：该操作可能导致AP重置。如果国家码发生变化，则会清除信道、功率以及天线增益配置。
s of the radio, Whether to continue? [Y/N]:y
[AC-wlan-ap-0] quit
[AC-wlan-view] ap-id 1 ap-mac********00E0-FC27-4710
[AC-wlan-ap-1] ap-name AP2
Warning: This operation may cause AP reset. Continue? [Y/N]:y
[AC-wlan-ap-1] ap-group ap-group2
Note that this procedure could lead to an AP reset. Upon changing the country code, the system will clear the channel, power settings, and antenna gain configurations.
s of the radio, Whether to continue? [Y/N]:y
[AC-wlan-ap-1] quit
在接通AP电源后，在执行命令****display ap all****的情况下，观察到AP的状态字段显示为‘nor’时，则表明该设备已成功接入网络状态。
5.配置WLAN业务参数
创建名为“wlan-sz”的SSID模板，并配置SSID名称为“wlan-sz”。
[AC-wlan-view] ssid-profile name wlan-sz
[AC-wlan-ssid-prof-wlan-sz] ssid wlan-sz
[AC-wlan-ssid-prof-wlan-sz] quit
生成两个名为“wlan-sz1”和“wlan-sz2”的VAP模板，并设置数据转发模式、配置VLAN划分以及导入SSID模板文件。
[AC-wlan-view] vap-profile name wlan-sz1
[AC-wlan-vap-prof-wlan-sz1] service-vlan vlan-id 101
[AC-wlan-vap-prof-wlan-sz1] ssid-profile wlan-sz
[AC-wlan-vap-prof-wlan-sz1] quit
[AC-wlan-view] vap-profile name wlan-sz2
[AC-wlan-vap-prof-wlan-sz2] service-vlan vlan-id 102
[AC-wlan-vap-prof-wlan-sz2] ssid-profile wlan-sz
[AC-wlan-vap-prof-wlan-sz2] quit
配置所有 AP 组均采用 VAP 模板
[AC-wlan-view] ap-group name ap-group1
[AC-wlan-ap-group-ap-group1] vap-profile wlan-sz1 wlan 1 radio 0
[AC-wlan-ap-group-ap-group1] vap-profile wlan-sz1 wlan 1 radio 1
[AC-wlan-ap-group-ap-group1] quit
[AC-wlan-view] ap-group name ap-group2
[AC-wlan-ap-group-ap-group2] vap-profile wlan-sz2 wlan 1 radio 0
[AC-wlan-ap-group-ap-group2] vap-profile wlan-sz2 wlan 1 radio 1
[AC-wlan-ap-group-ap-group2] quit
6.配置AP射频的信道和功率
#禁用射频信道及功率自动调节功能。该射频信道及功率自动调节功能默认处于启用状态，在未禁用此功能的情况下，则手动配置将无法正常执行。
[AC-wlan-view] rrm-profile name default
[AC-wlan-rrm-prof-default] calibrate auto-channel-select disable
[AC-wlan-rrm-prof-default] calibrate auto-txpower-select disable
[AC-wlan-rrm-prof-default] quit
[AC-wlan-view] ap-id 0
[AC-wlan-ap-0] radio 0
[AC-wlan-radio-0/0] channel 20mhz 6
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC-wlan-radio-0/0] eirp********50
[AC-wlan-radio-0/0] quit
[AC-wlan-ap-0] radio 1
[AC-wlan-radio-0/1] channel 20mhz 149
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC-wlan-radio-0/1] eirp********50
[AC-wlan-radio-0/1] quit
[AC-wlan-ap-0] quit
[AC-wlan-view] ap-id********1
[AC-wlan-ap-1] radio 0
[AC-wlan-radio-1/0] channel 20mhz********11
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC-wlan-radio-1/0] eirp********50
[AC-wlan-radio-1/0] quit
[AC-wlan-ap-1] radio 1
[AC-wlan-radio-1/1] channel 20mhz 1********53
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC-wlan-radio-1/1] eirp********50
[AC-wlan-radio-1/1] quit
[AC-wlan-ap-1] quit
7.验证配置结果
WLAN业务配置将自动分配给AP设备，在完成配置后，请运行命令display vap ssid wlan-sz以查看相关信息。当' Status '字段的值为' ON '时，则表示该射频端口已成功创建VAP。
STA完成对名为"wlan-sz"的无线网络进行搜索与绑定操作后，在AC设备上运行命令以显示当前站点SSID为wlan-sz。可查看用户已成功接入至该无线网络中。
当 STA 从 AP1 的覆盖区域切换至 AP2 的覆盖区域时，在 AC 上运行命令 show\ station\ ssid\ wlan-sz ，以便检查 STA 的接入状态。结果显示 STA 已成功连接至 AP2 并维持其 IP 地址不变的状态。
在设备控制平面（AC）上运行配置命令display station roam-track sta-mac********5489-98dc-02d0********后，在设备管理界面可浏览该 STA 的漫游路径信息。此操作表明该 STA 已完成从 AP1 到 AP2 的漫游过程。
拓扑图结果：
