【拓撲】

【需求】

AP和無線終端是通過DHCP方式獲取IP

AP的網關在HJ

無線終端的網關在Core

無線業(yè)務是集中轉發(fā)

AC1和AC2之間使用雙鏈路備份技術來提高冗余

VLAN20：10.0.20.0/24（DHCP服務器）

VLAN25：10.0.25.0/24（AC）

VLAN12：10.0.12.0/24（互聯(lián)地址）

VLAN60：10.0.60.0/24（AP管理地址）

VLAN70：10.0.70.0/24（AP管理地址）

VLAN100：10.0.100.0/24（office業(yè)務地址）

VLAN110：10.0.110.0/24（prd業(yè)務地址）

【配置】

-----------------------DHCP服務器------------

#

?dhcp enable

#

vlan 20

#

dhcp server ip-pool net60

?gateway-list 10.0.60.1

?network 10.0.60.0 mask 255.255.255.0

?dns-list 114.114.114.114

?expired day 0 hour 8

?option 43 hex 800b0000020a00190b0a00190c

#

dhcp server ip-pool net70

?gateway-list 10.0.70.1

?network 10.0.70.0 mask 255.255.255.0

?dns-list 114.114.114.114

?expired day 0 hour 8

?option 43 hex 800b0000020a00190b0a00190c

#

dhcp server ip-pool net100

?gateway-list 10.0.100.1

?network 10.0.100.0 mask 255.255.255.0

?dns-list 114.114.114.114

?expired day 0 hour 8

#

dhcp server ip-pool net110

?gateway-list 10.0.110.1

?network 10.0.110.0 mask 255.255.255.0

?dns-list 114.114.114.114

?expired day 0 hour 8

#

interface Vlan-interface20

?ip address 10.0.20.10 255.255.255.0

#

interface GigabitEthernet1/0/1

?port link-mode bridge

?port access vlan 20

?combo enable fiber

#

?ip route-static 0.0.0.0 0 10.0.20.1

-----------------------Core交換機------------

ospf 1 router-id 1.1.1.1

?area 0.0.0.0

? network 10.0.12.1 0.0.0.0

? network 10.0.20.1 0.0.0.0

? network 10.0.25.1 0.0.0.0

#

?dhcp enable

#

vlan 12

#

vlan 20

#

vlan 25

#

vlan 100

#

vlan 110

#

interface Vlan-interface12

?ip address 10.0.12.1 255.255.255.0

?ospf network-type p2p

#

interface Vlan-interface20

?ip address 10.0.20.1 255.255.255.0

#

interface Vlan-interface25

?ip address 10.0.25.1 255.255.255.0

#

interface Vlan-interface100

?ip address 10.0.100.1 255.255.255.0

?ospf 1 area 0.0.0.0

?dhcp select relay

?dhcp relay server-address 10.0.20.10

#

interface Vlan-interface110

?ip address 10.0.110.1 255.255.255.0

?ospf 1 area 0.0.0.0

?dhcp select relay

?dhcp relay server-address 10.0.20.10

#

interface GigabitEthernet1/0/1

?port link-mode bridge

?port link-type trunk

?undo port trunk permit vlan 1

?port trunk permit vlan 25 100 110

?combo enable fiber

#

interface GigabitEthernet1/0/2

?port link-mode bridge

?port link-type trunk

?undo port trunk permit vlan 1

?port trunk permit vlan 25 100 110

?combo enable fiber

#

interface GigabitEthernet1/0/3

?port link-mode bridge

?port link-type trunk

?undo port trunk permit vlan 1

?port trunk permit vlan 12

?combo enable fiber

#

interface GigabitEthernet1/0/4

?port link-mode bridge

?port access vlan 20

?combo enable fiber

#

-----------------------HJ交換機------------

ospf 1 router-id 2.2.2.2

?area 0.0.0.0

? network 10.0.12.2 0.0.0.0

? network 10.0.60.1 0.0.0.0

? network 10.0.70.1 0.0.0.0

#

?dhcp enable

#

?dhcp snooping enable

#

vlan 12

#

vlan 60

#

vlan 70

#

interface Vlan-interface12

?ip address 10.0.12.2 255.255.255.0

?ospf network-type p2p

#

interface Vlan-interface60

?ip address 10.0.60.1 255.255.255.0

?dhcp select relay

?dhcp relay server-address 10.0.20.10

#

interface Vlan-interface70

?ip address 10.0.70.1 255.255.255.0

?dhcp select relay

?dhcp relay server-address 10.0.20.10

#

interface GigabitEthernet1/0/1

?port link-mode bridge

?port link-type trunk

?undo port trunk permit vlan 1

?port trunk permit vlan 12

?combo enable fiber

?dhcp snooping trust

#

interface GigabitEthernet1/0/2

?port link-mode bridge

?port access vlan 60

?combo enable fiber

#

interface GigabitEthernet1/0/3

?port link-mode bridge

?port access vlan 70

?combo enable fiber

#

-----------------------AC1------------

vlan 25

#

vlan 100

#

vlan 110

#

wlan service-template office

?ssid office

?akm mode psk

?preshared-key pass-phrase cipher $c$3$WfQ37wqd2o8TLxruBlpU2SsVxxkr7dGgS0dRbw==

?cipher-suite ccmp

?security-ie rsn

?service-template enable

#

wlan service-template prd

?ssid prd

?akm mode psk

?preshared-key pass-phrase cipher $c$3$qhW2B3aegbcIZEH4dqc6RiGEYt0agb+noj91TA==

?cipher-suite ccmp

?security-ie rsn

?service-template enable

#

interface Vlan-interface25

?ip address 10.0.25.11 255.255.255.0

#

interface GigabitEthernet1/0/0

?port link-mode bridge

?port link-type trunk

?undo port trunk permit vlan 1

?port trunk permit vlan 25 100 110

?combo enable fiber

#

?ip route-static 0.0.0.0 0 10.0.25.1

#

wlan ap-group default-group

?priority 7

?wlan tunnel-preempt enable

?backup-ac ip 10.0.25.12

?vlan 1

?ap-mode fit

?ap-model WA6320-HCL

? radio 1

? radio 2

? gigabitethernet 1

#

wlan ap AP1 model WA6320-HCL

?serial-id H3C_24-41-C1-4A-05-00

?vlan 1

?radio 1

? radio enable

? service-template office vlan 100

? service-template prd vlan 110

?radio 2

? radio enable

? service-template office vlan 100

? service-template prd vlan 110

?gigabitethernet 1

#

wlan ap AP2 model WA6320-HCL

?serial-id H3C_24-41-C7-87-06-00

?vlan 1

?radio 1

? radio enable

? service-template office vlan 100

? service-template prd vlan 110

?radio 2

? radio enable

? service-template office vlan 100

? service-template prd vlan 110

?gigabitethernet 1

#

-----------------------AC2------------

vlan 25

#

vlan 100

#

vlan 110

#

wlan service-template office

?ssid office

?akm mode psk

?preshared-key pass-phrase cipher $c$3$lyCMUkYMO4R4kEg7m8mUu3kgS7knJJWjpfTzgg==

?cipher-suite ccmp

?security-ie rsn

?service-template enable

#

wlan service-template prd

?ssid prd

?akm mode psk

?preshared-key pass-phrase cipher $c$3$Hwo3ZqgOeJdWZScfyPrTNgMWlKSUBdl2uQhdag==

?cipher-suite ccmp

?security-ie rsn

?service-template enable

#

interface Vlan-interface25

?ip address 10.0.25.12 255.255.255.0

#

interface GigabitEthernet1/0/0

?port link-mode bridge

?port link-type trunk

?undo port trunk permit vlan 1

?port trunk permit vlan 25 100 110

?combo enable fiber

#

?ip route-static 0.0.0.0 0 10.0.25.1

#

wlan ap AP1 model WA6320-HCL

?serial-id H3C_24-41-C1-4A-05-00

?vlan 1

?radio 1

? radio enable

? service-template office vlan 100

? service-template prd vlan 110

?radio 2

? radio enable

? service-template office vlan 100

? service-template prd vlan 110

?gigabitethernet 1

#

wlan ap AP2 model WA6320-HCL

?serial-id H3C_24-41-C7-87-06-00

?vlan 1

?radio 1

? radio enable

? service-template office vlan 100

? service-template prd vlan 110

?radio 2

? radio enable

? service-template office vlan 100

? service-template prd vlan 110

?gigabitethernet 1

#

【效果】

模擬AC 1故障，將AC 1的Vlan-interface25接口關閉，等待一段時間（根據CAPWAP隧道?；顣r間而定，默認為30秒，集中轉發(fā)模式時，期間流量會中斷），AP會切換至AC 2上線，在AC 2上通過display wlan ap all命令查看AP的狀態(tài)為R/M。

capwap隧道定時器過期后

當AC1從故障恢復后，需要等待10分鐘，AP才能重新連接到AC1上。