轉(zhuǎn)載自微信公眾號(hào)：網(wǎng)絡(luò)之路博客
PS：這次分享的幾年前寫(xiě)的，基于V2R6之前，適用于V2R3~V2R5版本，基于V2R6之后的后續(xù)會(huì)更新新的博文。
一、實(shí)驗(yàn)?zāi)繕?biāo)
掌握配置WLAN源接口的命令
掌握配置DHCP服務(wù)器的命令
掌握手工確認(rèn)AP上線的方法a
二、實(shí)驗(yàn)拓?fù)?/strong>
三、實(shí)驗(yàn)配置
AC基礎(chǔ)配置，主要是配置管理VLAN的IP地址，及DHCP服務(wù)，因?yàn)檫@里是二層組網(wǎng)，所以不用配置option
dhcp enable
interface Vlanif1
ip address 192.168.100.1 255.255.255.0
dhcp select interface wlan
wlan ac source interface vlanif1 |
配置檢查先檢查下DHCP是否分出地址，可以用dis ip pool inter vlan 1 來(lái)檢查，這里可以看到已經(jīng)為4個(gè)AP分出地址了
[ccieh3c.com-AC6005]dis ip pool interface Vlanif1
Pool-name : Vlanif1
Pool-No : 0
Lease : 1 Days 0 Hours 0 Minutes
Domain-name : -
DNS-server0 : -
NBNS-server0 : -
Netbios-type : -
Position : Interface Status : Unlocked
Gateway-0 : 192.168.100.1
Mask : 255.255.255.0
VPN instance : --
-----------------------------------------------------------------------------
Start End Total Used Idle(Expired) Conflict Disable
-----------------------------------------------------------------------------
192.168.100.1 192.168.100.254 253 4 249(0) 0 0
----------------------------------------------------------------------------- |
因?yàn)槟J(rèn)華為的AC使用了mac地址對(duì)AP的上線進(jìn)行認(rèn)證，所以現(xiàn)在還不能看到AP，但是通過(guò)dis arp 可以看到AP的MAC
[ccieh3c.com-AC6005]dis ap all
All AP information(Normal-0,UnNormal-0):
------------------------------------------------------------------------------
AP AP AP Profile AP AP
/Region
ID Type MAC ID State Sysname
------------------------------------------------------------------------------
------------------------------------------------------------------------------
Total number: 0 [ccieh3c.com-AC6005]dis arp
IP ADDRESS MAC ADDRESS EXPIRE(M) TYPE INTERFACE VPN-INSTANCE
VLAN/CEVLAN PVC
------------------------------------------------------------------------------
192.168.100.1 00e0-fc03-800f I - Vlanif1
192.168.100.254 00e0-fc03-8e30 20 D-0 GE0/0/1
1/-
192.168.100.253 00e0-fc03-b310 20 D-0 GE0/0/3
1/-
192.168.100.252 00e0-fc03-da40 20 D-0 GE0/0/2
1/-
192.168.100.251 00e0-fc03-dc50 20 D-0 GE0/0/4
1/-
------------------------------------------------------------------------------
Total:5 Dynamic:4 Static:0 Interface:1 |
可能通過(guò)dis unauthorized-ap record查看未通過(guò)認(rèn)證的AP列表
[ccieh3c.com-AC6005]dis unauthorized-ap record
Unauthorized AP record:
Total number: 4
------------------------------------------------------------------------------
AP type: AP6010DN-AGN
AP sn: 210235448310E6766418
AP mac address: 00e0-fc03-dc50
AP ip address: 192.168.100.251
Record time: 2013-12-06 12:13:25
------------------------------------------------------------------------------
AP type: AP6010DN-AGN
AP sn: 2102354483106D748F23
AP mac address: 00e0-fc03-8e30
AP ip address: 192.168.100.254
Record time: 2013-12-06 12:13:24
------------------------------------------------------------------------------
AP type: AP6010DN-AGN
AP sn: 210235448310BE35BA59
AP mac address: 00e0-fc03-b310
AP ip address: 192.168.100.253
Record time: 2013-12-06 12:12:59
------------------------------------------------------------------------------
AP type: AP6010DN-AGN
AP sn: 210235448310152A7C4D
AP mac address: 00e0-fc03-da40
AP ip address: 192.168.100.252
Record time: 2013-12-06 12:12:58
---------------------------------------------------------------------------- |
通過(guò)命令確認(rèn)AP上線，下面是見(jiàn)證奇跡的時(shí)刻了：
[ccieh3c.com-AC6005] wlan
[ccieh3c.com-AC6005-wlan-view]ap-confirm all
Info: Confirm AP completely. Success count: 4. Failure count: 0. [ccieh3c.com-AC6005-wlan-view]dis ap all
All AP information(Normal-4,UnNormal-0):
------------------------------------------------------------------------------
AP AP AP Profile AP AP
/Region
ID Type MAC ID State Sysname
------------------------------------------------------------------------------
0 AP6010DN-AGN 00e0-fc03-dc50 0/0 normal ap-0
1 AP6010DN-AGN 00e0-fc03-8e30 0/0 normal ap-1
2 AP6010DN-AGN 00e0-fc03-b310 0/0 normal ap-2
3 AP6010DN-AGN 00e0-fc03-da40 0/0 normal ap-3
------------------------------------------------------------------------------
Total number: 4 |
四、補(bǔ)充知識(shí)
1、如果已經(jīng)知道AP的MAC和型號(hào)（SN號(hào)是可選的），也可以通過(guò)下面命令上AP上線
wlan
wlan ac source interface vlanif1
ap id 0 type-id 19 mac 00e0-fc03-dc50 sn 210235448310E6766418
ap id 1 type-id 19 mac 00e0-fc03-8e30 sn 2102354483106D748F23
ap id 2 type-id 19 mac 00e0-fc03-b310 sn 210235448310BE35BA59
ap id 3 type-id19 mac 00e0-fc03-da40 sn 210235448310152A7C4D |
2、如果想重啟一個(gè)AP，可以在WLAN配置示圖下使用命令ap reset id x 或ap reset all重啟AP,重啟時(shí)候記得抓包哦，親！
[ccieh3c.com-AC6005-wlan-view]ap-reset id 0
Warning: Reset AP! Continue? [Y/N]y
Info: Reset AP completely.
[ccieh3c.com-AC6005-wlan-view]dis ap all
All AP information(Normal-3,UnNormal-1):
------------------------------------------------------------------------------
AP AP AP Profile AP AP
/Region
ID Type MAC ID State Sysname
------------------------------------------------------------------------------
0 AP6010DN-AGN 00e0-fc03-dc50 0/0 fault ap-0
1 AP6010DN-AGN 00e0-fc03-8e30 0/0 normal ap-1
2 AP6010DN-AGN 00e0-fc03-b310 0/0 normal ap-2
3 AP6010DN-AGN 00e0-fc03-da40 0/0 normal ap-3
------------------------------------------------------------------------------
Total number: 4 |
下面是我抓到的包，這里就是完整的AP上線時(shí)CAPWAP的交互報(bào)文
！ 提問(wèn)與分享（想提高自己，從獨(dú)立思考與分享開(kāi)始）
提問(wèn)：如果事先不知道AP的MAC與SN該怎么辦呢？分享：實(shí)驗(yàn)可以通過(guò)模擬器直接完成，記得老版本選用分享的考試版本即可，最新版本是采用的V2R7命令行有差別。
實(shí)驗(yàn)源文件：
鏈接：https://pan.baidu.com/s/18h55j60pC-hB2iEVzmeitA
提取碼：814x
復(fù)制這段內(nèi)容后打開(kāi)百度網(wǎng)盤(pán)手機(jī)App，操作更方便哦
網(wǎng)絡(luò)之路博客公眾號(hào)提供Cisco、華為、H3C、防火墻、VPN、無(wú)線等網(wǎng)絡(luò)知識(shí)點(diǎn)分享與應(yīng)用，想了解更多企業(yè)技術(shù)應(yīng)用與組網(wǎng)案例，關(guān)注我們（公眾號(hào)菜單欄陸續(xù)在更新排列，不管你是青銅入坑的小白沒(méi)有學(xué)習(xí)方向感到迷茫，還是想提升段位充實(shí)自己來(lái)升職加薪，都有您需要的哦）
