轉(zhuǎn)載自微信公眾號：網(wǎng)絡之路博客 

說明

之前介紹過在AC間漫游的新概念以及一些處理過程，對比AC內(nèi)漫游相對從配置角度來說不是非常大，只是轉(zhuǎn)發(fā)的過程有點小變化，這個可以參考之前介紹的轉(zhuǎn)發(fā)過程即可。

二層漫游的數(shù)據(jù)包轉(zhuǎn)發(fā)過程（該圖中直接轉(zhuǎn)發(fā)與隧道轉(zhuǎn)發(fā)方式?jīng)]差別）

漫游前數(shù)據(jù)包的走向
1、STA發(fā)送數(shù)據(jù)給HAP
2、HAP收到數(shù)據(jù)報文后，發(fā)送給HAC（如果是旁掛模式的處理方式，則不太一樣，在隧道模式下會轉(zhuǎn)發(fā)給HAC，而直接轉(zhuǎn)發(fā)方式下，直接由網(wǎng)關交換機直接處理業(yè)務報文交給上層設備）
3、HAC收到以后，直接把業(yè)務報文送給上層網(wǎng)絡

漫游后數(shù)據(jù)包的走向
1、STA發(fā)送數(shù)據(jù)給FAP
2、FAP收到數(shù)據(jù)報文后，發(fā)送給HAC（如果是旁掛模式處理方式如上）
3、FAC收到以后，直接把業(yè)務報文送給上層網(wǎng)絡。（這里其實還是通過隧道發(fā)送給HAC，由HAC轉(zhuǎn)發(fā)個上層網(wǎng)絡，具體的分析可以看后面的配置部分）

說明：這里還是以官方給的拓撲做介紹，ENSP目前無法支持AC間漫游，所以這里無法演示。

配置的講解，AP上線以及WLAN業(yè)務與R3并無區(qū)別，所以這里不做過多介紹，具體可以參考之前的AC內(nèi)漫游，都有詳細講解。

Switch_1配置

[Huawei-SW1] vlan batch 100 101
[Huawei-SW1] interface gigabitethernet 0/0/1
[Huawei-SW1-GigabitEthernet0/0/1] port link-type trunk
[Huawei-SW1-GigabitEthernet0/0/1] port trunk pvid vlan 100
[Huawei-SW1-GigabitEthernet0/0/1] port trunk allow-pass vlan 100 101
[Huawei-SW1-GigabitEthernet0/0/1] quit
[Huawei-SW1] interface gigabitethernet 0/0/2
[Huawei-SW1-GigabitEthernet0/0/2] port link-type trunk
[Huawei-SW1-GigabitEthernet0/0/2] port trunk allow-pass vlan 100 101
[Huawei-SW1-GigabitEthernet0/0/2] quit

Switch_2配置

[Huawei-SW2] vlan batch 100 101
[Huawei-SW2] interface gigabitethernet 0/0/1
[Huawei-SW2-GigabitEthernet0/0/1] port link-type trunk
[Huawei-SW2-GigabitEthernet0/0/1] port trunk pvid vlan 100
[Huawei-SW2-GigabitEthernet0/0/1] port trunk allow-pass vlan 100 101
[Huawei-SW2-GigabitEthernet0/0/1] quit
[Huawei-SW2] interface gigabitethernet 0/0/2
[Huawei-SW2-GigabitEthernet0/0/2] port link-type trunk
[Huawei-SW2-GigabitEthernet0/0/2] port trunk allow-pass vlan 100 101
[Huawei-SW2-GigabitEthernet0/0/2] quit

AC-1的配置（只包含AP上線以及WLAN業(yè)務配置）

[Huawei-AC_1] dhcp enable
[Huawei-AC_1] vlan batch 100 101
[Huawei-AC_1] interface gigabitethernet 0/0/1
[Huawei-AC_1-GigabitEthernet0/0/1] port link-type trunk
[Huawei-AC_1-GigabitEthernet0/0/1] port trunk allow-pass vlan 100 101
[Huawei-AC_1-GigabitEthernet0/0/1] quit

[Huawei-AC_1] interface gigabitethernet 0/0/2
[Huawei-AC_1-GigabitEthernet0/0/2] port link-type trunk
[Huawei-AC_1-GigabitEthernet0/0/2] port trunk allow-pass vlan 100 101
[Huawei-AC_1-GigabitEthernet0/0/2] quit

[Huawei-AC_1] interface vlanif 100
[Huawei-AC_1-vlanif100] ip address 192.168.100.1 255.255.255.0
[Huawei-AC_1-vlanif100] dhcp select interface
[Huawei-AC_1-vlanif100] dhcp server excluded-ip-address 192.168.100.2
[Huawei-AC_1-vlanif100] quit

[Huawei-AC_1] interface vlanif 101
[Huawei-AC_1-vlanif101] ip address 192.168.101.1 255.255.255.0
[Huawei-AC_1-vlanif101] dhcp select interface
[Huawei-AC_1-vlanif101] quit

[Huawei-AC_1] interface wlan-ess 1
[Huawei-AC_1-Wlan-Ess1] port hybrid pvid vlan 101
[Huawei-AC_1-Wlan-Ess1] port hybrid untagged vlan 101

[Huawei-AC_1] wlan
[Huawei-AC_1-wlan-view] wlan ac source interface vlanif 100
[Huawei-AC_1-wlan-view] ap id 1 type-id 19 mac 60de-4476-e360
[Huawei-AC_1-wlan-view] wmm-profile name wmm id 1
[Huawei-AC_1-wlan-wmm-prof-wmm] quit
[Huawei-AC_1-wlan-view] radio-profile name radio id 1
[Huawei-AC_1-wlan-radio-prof-radio] wmm-profile name wmm
[Huawei-AC_1-wlan-radio-prof-radio] quit
[Huawei-AC_1-wlan-view] security-profile name security id 1
[Huawei-AC_1-wlan-sec-prof-security] quit
[Huawei-AC_1-wlan-view] traffic-profile name traffic id 1
[Huawei-AC_1-wlan-traffic-prof-traffic] quit
[Huawei-AC_1-wlan-view] service-set name huawei1 id 1
[Huawei-AC_1-wlan-service-set-huawei1] ssid huawei1
[Huawei-AC_1-wlan-service-set-huawei1] wlan-ess 1
[Huawei-AC_1-wlan-service-set-huawei1] security-profile name security
[Huawei-AC_1-wlan-service-set-huawei1] traffic-profile name traffic
[Huawei-AC_1-wlan-service-set-huawei1] service-vlan 101
[Huawei-AC_1-wlan-service-set-huawei1] vlan-mobility-group 101 （可選）
[Huawei-AC_1-wlan-service-set-huawei1] quit

AC-2的配置（只包含AP上線以及WLAN業(yè)務配置）

[Huawei-AC_2] vlan batch 100 101
[Huawei-AC_2] interface gigabitethernet 0/0/1
[Huawei-AC_2-GigabitEthernet0/0/1] port link-type trunk
[Huawei-AC_2-GigabitEthernet0/0/1] port trunk allow-pass vlan 100 101
[Huawei-AC_2-GigabitEthernet0/0/1] quit

[Huawei-AC_2] interface gigabitethernet 0/0/2
[Huawei-AC_2-GigabitEthernet0/0/2] port link-type trunk
[Huawei-AC_2-GigabitEthernet0/0/2] port trunk allow-pass vlan 100 101
[Huawei-AC_2-GigabitEthernet0/0/2] quit

[Huawei-AC_2] interface vlanif 100
[Huawei-AC_2-vlanif100] ip address 192.168.100.2 255.255.255.0

[Huawei-AC_2] interface wlan-ess 1
[Huawei-AC_2-Wlan-Ess1] port hybrid pvid vlan 101
[Huawei-AC_2-Wlan-Ess1] port hybrid untagged vlan 101

[Huawei-AC_2] wlan
[Huawei-AC_2-wlan-view] wlan ac source interface vlanif 100
[Huawei-AC_2-wlan-view] ap id 1 type-id 19 mac 60de-4476-e360
[Huawei-AC_2-wlan-view] wmm-profile name wmm id 1
[Huawei-AC_2-wlan-wmm-prof-wmm] quit
[Huawei-AC_2-wlan-view] radio-profile name radio id 1
[Huawei-AC_2-wlan-radio-prof-radio] wmm-profile name wmm
[Huawei-AC_2-wlan-radio-prof-radio] quit
[Huawei-AC_2-wlan-view] security-profile name security id 1
[Huawei-AC_2-wlan-sec-prof-security] quit
[Huawei-AC_2-wlan-view] traffic-profile name traffic id 1
[Huawei-AC_2-wlan-traffic-prof-traffic] quit
[Huawei-AC_2-wlan-view] service-set name huawei1 id 1
[Huawei-AC_2-wlan-service-set-huawei1] ssid huawei1
[Huawei-AC_2-wlan-service-set-huawei1] wlan-ess 1
[Huawei-AC_2-wlan-service-set-huawei1] security-profile name security
[Huawei-AC_2-wlan-service-set-huawei1] traffic-profile name traffic
[Huawei-AC_2-wlan-service-set-huawei1] service-vlan 101
[Huawei-AC_2-wlan-service-set-huawei1] vlan-mobility-group 101 （可選）
[Huawei-AC_2-wlan-service-set-huawei1] quit

漫游功能相關配置

[AC_1] master-controller enable
[AC_1] master controller
[AC_1-master-controller] ac id 1 ip 192.168.100.1
[AC_1-master-controller] ac id 2 ip 192.168.100.2
[AC_1-master-controller] mobility-group name mobility
[AC_1-mc-mg-mobility] member ac id 1
[AC_1-mc-mg-mobility] member ac id 2
說明：AC_1的配置，它作為master controller，然后在controller里面定義了漫游組，屬于同一個漫游組的AC之間是可以漫游的。

[AC_2-wlan-view] master-controller ip 192.168.100.1
而AC_2的配置比較簡單，只需要指定controller在哪即可，漫游組信息由master告訴其他AC成員。

下發(fā)業(yè)務給AP

[Huawei-AC_1] wlan
[Huawei-AC_1-wlan-view] ap 1 radio 0
[Huawei-AC_1-wlan-radio-1/0] radio-profile name radio
[Huawei-AC_1-wlan-radio-1/0] service-set name huawei1
[Huawei-AC_1-wlan-radio-1/0] quit
[Huawei-AC_1-wlan-view] commit ap 1
Warning: Committing configuration may cause service interruption,continue?[Y/N]y

[Huawei-AC_2] wlan
[Huawei-AC_2-wlan-view] ap 1 radio 0
[Huawei-AC_2-wlan-radio-1/0] radio-profile name radio
[Huawei-AC_2-wlan-radio-1/0] service-set name huawei1
[Huawei-AC_2-wlan-radio-1/0] quit
[Huawei-AC_2-wlan-view] commit ap 1
Warning: Committing configuration may cause service interruption,continue?[Y/N]y

測試

這里把一個客戶端連接到AP_1上后，可以通過命令查看

[Huawei-AC_1-wlan-view] display station assoc-info all
——————————————————————————
STA MAC AP ID RADIO ID SS ID SSID
——————————————————————————
0025-86aa-0d1c 1 0 1 huawei1
——————————————————————————
Total stations: 1
目前該客戶端關聯(lián)上來了，當把客戶端從AP_1移動到AP_2的范圍內(nèi)

[Huawei-AC_2-wlan-view] display station assoc-info all
——————————————————————————
STA MAC AP ID RADIO ID SS ID SSID
——————————————————————————
0025-86aa-0d1c 1 0 1 huawei1
——————————————————————————
Total stations: 1

這時候AP_2上面已經(jīng)有關于客戶端的信息了。

[Huawei-AC_2-wlan-view] display station roam-track sta 0025-86aa-0d1c
Access SSID:huawei1 Rx/Tx:Rx-Rate/Tx-Rate Mbps
——————————————————————————
L2/L3 AC IP
AP/Radio BSSID TIME In Rx/Tx RSSI Out Rx/Tx RSSI
——————————————————————————
— 192.168.100.1
1/0 60de-4476-e360 2014/01/03 11:46:12 61/61 -51 46/13 -48
L2 192.168.100.2
1/0 dcd2-fc04-b500 2014/01/03 11:48:17 61/61 -58 -/- –
——————————————————————————
Number of roam track: 1

在AC上面通過漫游命令查看該MAC地址，可以看到從100.1的AC漫游到了100.2的AC上面，L2表示二層漫游。

說明：

ENSP目前無法支持AC間漫游，所以這里無法演示。

配置的講解，AP上線以及WLAN業(yè)務與R3并無區(qū)別，所以這里不做過多介紹，具體可以參考之前的AC內(nèi)漫游，都有詳細講解。

網(wǎng)絡之路博客公眾號提供Cisco、華為、H3C、防火墻、VPN、無線等網(wǎng)絡知識點分享與應用，想了解更多企業(yè)技術應用與組網(wǎng)案例，關注我們（公眾號菜單欄陸續(xù)在更新排列，不管你是青銅入坑的小白沒有學習方向感到迷茫，還是想提升段位充實自己來升職加薪，都有您需要的哦）