JR-SW1:

undo terminal monitor

system-view

sysname JR-SW1

user-interface con 0

 idle-timeout 0 0

 quit

undo info-center enable

vlan batch 11 to 12 100 200

interface Ethernet0/0/1

 port link-type access

 port default vlan 11

interface Ethernet0/0/2

 port link-type access

 port default vlan 12

interface GigabitEthernet0/0/1

 port link-type trunk

port trunk allow-pass vlan 11 to 12 100 200

interface GigabitEthernet0/0/2

 port link-type trunk

 port trunk pvid vlan 200

 port trunk allow-pass vlan 11 to 12 200

JR-SW2:

undo terminal monitor

system-view

sysname JR-SW2

user-interface con 0

 idle-timeout 0 0

 quit

undo info-center enable

vlan batch 13 to 14 100 200

interface Ethernet0/0/1

 port link-type access

 port default vlan 13

interface Ethernet0/0/2

 port link-type access

 port default vlan 14

interface GigabitEthernet0/0/1

 port link-type trunk

 port trunk allow-pass vlan 13 to 14 100 200

interface GigabitEthernet0/0/2

 port link-type trunk

 port trunk pvid vlan 200

 port trunk allow-pass vlan 11 to 12 200

JR-SW3:

undo terminal monitor

system-view

sysname JR-SW3

user-interface con 0

 idle-timeout 0 0

 quit

undo info-center enable

vlan batch 15 to 16 100 200

interface Ethernet0/0/1

 port link-type access

 port default vlan 15

interface Ethernet0/0/2

 port link-type access

 port default vlan 16

interface GigabitEthernet0/0/1

 port link-type trunk

 port trunk allow-pass vlan 15 to 16 100 200

interface GigabitEthernet0/0/2

 port link-type trunk

port trunk pvid vlan 200

 port trunk allow-pass vlan 15 to 16 200

JR_SW4:

undo terminal monitor

system-view

sysname JR_SW4

user-interface con 0

 idle-timeout 0 0

 quit

undo info-center enable

vlan batch 17 to 18 100 200

interface Ethernet0/0/1

 port link-type access

 port default vlan 17

interface Ethernet0/0/2

 port link-type access

 port default vlan 18

interface GigabitEthernet0/0/1

 port link-type trunk

port trunk allow-pass vlan 17 to 18 100 200

interface GigabitEthernet0/0/2

 port link-type trunk

 port trunk pvid vlan 200

 port trunk allow-pass vlan 11 to 12 200

HJ_SW1:

undo terminal monitor

system-view

user-interface con 0

 idle-timeout 0 0

 quit

undo info-center enable

sysname HJ_SW1

vlan batch 11 to 12 100 200

dhcp enable

interface Vlanif11

 ip address 192.168.64.254 255.255.255.0

interface Vlanif12

 ip address 192.168.65.254 255.255.255.0

interface Vlanif100

 ip address 10.0.1.2 255.255.255.252

interface Vlanif200

 ip address 10.0.10.14 255.255.255.240

dhcp select relay

 dhcp relay server-ip 10.0.10.253

interface GigabitEthernet0/0/1

 port link-type access

 port default vlan 100

interface GigabitEthernet0/0/24

 port link-type trunk

 port trunk allow-pass vlan 11 to 12 100 200

ospf 1

 area 0.0.0.1

  network 192.168.64.0 0.0.0.255

  network 192.168.65.0 0.0.0.255

  network 10.0.1.0 0.0.0.3

  network 10.0.10.0 0.0.0.15

HJ_SW2:

undo terminal monitor

system-view

user-interface con 0

 idle-timeout 0 0

 quit

undo info-center enable

sysname HJ-SW2

vlan batch 13 to 14 100 200

dhcp enable

interface Vlanif13

 ip address 192.168.66.254 255.255.255.0

interface Vlanif14

 ip address 192.168.67.254 255.255.255.0

interface Vlanif100

 ip address 10.0.2.2 255.255.255.252

interface Vlanif200

 ip address 10.0.10.30 255.255.255.240

dhcp select relay

 dhcp relay server-ip 10.0.10.253

interface GigabitEthernet0/0/1

 port link-type access

 port default vlan 100

interface GigabitEthernet0/0/24

 port link-type trunk

 port trunk allow-pass vlan 13 to 14 100 200

ospf 1

 area 0.0.0.1

  network 192.168.66.0 0.0.0.255

  network 192.168.67.0 0.0.0.255

  network 10.0.2.0 0.0.0.3

  network 10.0.10.16 0.0.0.15

HJ_SW3:

undo terminal monitor

system-view

user-interface con 0

 idle-timeout 0 0

 quit

undo info-center enable

sysname HJ_SW3

undo info-center enable

vlan batch 15 to 16 100 200

dhcp enable

interface Vlanif15

 ip address 192.168.68.254 255.255.255.0

interface Vlanif16

 ip address 192.168.69.254 255.255.255.0

#

interface Vlanif100

 ip address 10.0.3.2 255.255.255.252

#

interface Vlanif200

 ip address 10.0.10.46 255.255.255.240

 dhcp select relay

 dhcp relay server-ip 10.0.10.253

interface GigabitEthernet0/0/1

 port link-type access

 port default vlan 100

interface GigabitEthernet0/0/24

 port link-type trunk

 port trunk allow-pass vlan 15 to 16 200

ospf 1

 area 0.0.0.2

  network 10.0.10.32 0.0.0.15

  network 10.0.3.0 0.0.0.3

  network 192.168.68.0 0.0.0.255

  network 192.168.69.0 0.0.0.255

HJ_SW4:

undo terminal monitor

system-view

user-interface con 0

 idle-timeout 0 0

 quit

undo info-center enable

sysname HJ_SW4

undo info-center enable

vlan batch 17 to 18 100 200

dhcp enable

interface Vlanif17

 ip address 192.168.70.254 255.255.255.0

interface Vlanif18

 ip address 192.168.71.254 255.255.255.0

interface Vlanif100

 ip address 10.0.4.2 255.255.255.252

interface Vlanif200

 ip address 10.0.10.62 255.255.255.240

 dhcp select relay

 dhcp relay server-ip 10.0.10.253

interface GigabitEthernet0/0/1

 port link-type access

 port default vlan 100

interface GigabitEthernet0/0/24

 port link-type trunk

 port trunk allow-pass vlan 17 to 18 200

ospf 1

 area 0.0.0.2

  network 10.0.10.48 0.0.0.15

  network 192.168.70.0 0.0.0.255

  network 192.168.71.0 0.0.0.255

  network 10.0.4.0 0.0.0.3

RS-5:

undo terminal monitor

system-view

user-interface con 0

 idle-timeout 0 0

 quit

sysname RS-5

undo info-center enable

vlan batch 100 200

interface Vlanif100

 ip address 10.0.5.2 255.255.255.252

interface Vlanif200

 ip address 10.0.10.254 255.255.255.252

interface GigabitEthernet0/0/1

 port link-type access

 port default vlan 100

interface GigabitEthernet0/0/3

 port link-type access

 port default vlan 200

ospf 1

 area 0.0.0.3

  network 10.0.10.252 0.0.0.3

  network 10.0.5.0 0.0.0.3

R1:

sysname R1

interface GigabitEthernet0/0/0

 ip address 10.0.0.1 255.255.255.252

interface GigabitEthernet0/0/1

 ip address 10.0.0.9 255.255.255.252

interface GigabitEthernet0/0/2

 ip address 10.0.1.1 255.255.255.252

interface GigabitEthernet1/0/0

 ip address 10.0.2.1 255.255.255.252

ospf 1

 area 0.0.0.0

  network 10.0.0.0 0.0.0.3

  network 10.0.0.8 0.0.0.3

 area 0.0.0.1

  network 10.0.1.0 0.0.0.3

  network 10.0.2.0 0.0.0.3

R2:

sysname R2

undo info-center enable

interface GigabitEthernet0/0/0

 ip address 10.0.0.2 255.255.255.252

interface GigabitEthernet0/0/1

 ip address 10.0.0.6 255.255.255.252

interface GigabitEthernet0/0/2

 ip address 10.0.5.1 255.255.255.252

ospf 1

 area 0.0.0.0

  network 10.0.0.0 0.0.0.3

  network 10.0.0.4 0.0.0.3

 area 0.0.0.3

  network 10.0.5.0 0.0.0.3

R3:

sysname R3

undo info-center enable

interface GigabitEthernet0/0/0

 ip address 10.0.0.5 255.255.255.252

interface GigabitEthernet0/0/1

 ip address 10.0.0.10 255.255.255.252

interface GigabitEthernet0/0/2

 ip address 10.0.3.1 255.255.255.252

interface GigabitEthernet1/0/0

 ip address 10.0.4.1 255.255.255.252

ospf 1

 area 0.0.0.0

  network 10.0.0.4 0.0.0.3

  network 10.0.0.8 0.0.0.3

 area 0.0.0.2

  network 10.0.3.0 0.0.0.3

  network 10.0.4.0 0.0.0.3

AC1:

sysname AC-1

undo info-center enable

user-interface con 0

 idle-timeout 0 0

vlan batch 100 200

dhcp enable

interface Vlanif100

 ip address 10.0.0.2 255.255.255.252

 dhcp select global

interface Vlanif200

 ip address 10.0.10.253 255.255.255.252

 dhcp select global

interface GigabitEthernet0/0/1

 port link-type access

 port default vlan 200

ip pool pool-rs-1

 gateway-list 10.0.10.14

 network 10.0.10.0 mask 28

 dns-list 8.8.8.8 114.114.114.114

 option 43 sub-option 3 ascii 10.0.10.253

 quit

ip pool pool-rs-2

 gateway-list 10.0.10.30

 network 10.0.10.16 mask 28

 dns-list 8.8.8.8 114.114.114.114

 option 43 sub-option 3 ascii 10.0.10.253

 quit

ip pool pool-rs-3

 gateway-list 10.0.10.46

 network 10.0.10.32 mask 28

 dns-list 8.8.8.8 114.114.114.114

 option 43 sub-option 3 ascii 10.0.10.253

 quit

ip pool pool-rs-4

 gateway-list 10.0.10.62

 network 10.0.10.48 mask 28

 dns-list 8.8.8.8 114.114.114.114

 option 43 sub-option 3 ascii 10.0.10.253

 quit

ip route-static 10.0.10.0 26 10.0.10.254

capwap source interface vlanif 200

進入wlan視圖，創建名稱為domain-cfg-1的域管理模版，配置國家代碼cn

wlan

 regulatory-domain-profile name domain-cfg-1

 country-code cn

 quit

綁定mac地址和模版

ap auth-mode mac-auth

ap-id 1 ap-mac 00E0-FCDC-0EA0

ap-name AP-1

regulatory-domain-profile domain-cfg-1

ap-id 2 ap-mac 00E0-FC3C-6430

ap-name AP-2

regulatory-domain-profile domain-cfg-1

ap-id 3 ap-mac 00E0-FCC3-51E0

ap-name AP-3

regulatory-domain-profile domain-cfg-1

ap-id 4 ap-mac 00E0-FC50-07E0

ap-name AP-4

regulatory-domain-profile domain-cfg-1

dis ap all

--------------------------------------------------------------------------------

ID   MAC            Name Group   IP         Type            State STA Uptime

--------------------------------------------------------------------------------

1    00e0-fcdc-0ea0 AP-1 default 10.0.10.12 AP3030DN        nor   0   6M:30S

2    00e0-fc3c-6430 AP-2 default 10.0.10.19 AP3030DN        nor   0   1M:45S

3    00e0-fcc3-51e0 AP-3 default 10.0.10.45 AP3030DN        nor   0   1M:5S

4    00e0-fc50-07e0 AP-4 default 10.0.10.57 AP3030DN        nor   0   9S

配置業務參數：

創建安全模版sec-cfg-1，并配置安全策略

wlan

 regulatory-domain-profile name domain-cfg-1

 country-code cn

 quit

security-profile name sec-cfg-1

 security wpa-wpa2 psk pass-phrase abcd1111 aes

 quit

ssid-profile name ssid-cfg-1

 ssid wifi-1

 quit

ssid-profile name ssid-cfg-2

 ssid wifi-2

 quit

創建模版vap-cfg-1模版對應2.4g

vap-profile name vap-cfg-1

 forward-mode direct-forward

 service-vlan vlan-id 11

 security-profile sec-cfg-1

 ssid-profile ssid-cfg-1

 quit

創建模版vap-cfg-2模版對應5g

vap-profile name vap-cfg-2

 forward-mode direct-forward

 service-vlan vlan-id 12

 security-profile sec-cfg-1

 ssid-profile ssid-cfg-2

 quit

根據wlan規劃，各AP創建vap模版

vap-profile name vap-cfg-1-1

 forward-mode direct-forward

 service-vlan vlan-id 11

 security-profile sec-cfg-1

 ssid-profile ssid-cfg-1

 quit

vap-profile name vap-cfg-1-2

 forward-mode direct-forward

 service-vlan vlan-id 12

 security-profile sec-cfg-1

 ssid-profile ssid-cfg-2

 quit

vap-profile name vap-cfg-2-1

 forward-mode direct-forward

 service-vlan vlan-id 13

 security-profile sec-cfg-1

 ssid-profile ssid-cfg-1

 quit

vap-profile name vap-cfg-2-2

 forward-mode direct-forward

 service-vlan vlan-id 14

 security-profile sec-cfg-1

 ssid-profile ssid-cfg-2

 quit

vap-profile name vap-cfg-3-1

 forward-mode direct-forward

 service-vlan vlan-id 15

 security-profile sec-cfg-1

 ssid-profile ssid-cfg-1

 quit

vap-profile name vap-cfg-3-2

 forward-mode direct-forward

 service-vlan vlan-id 16

 security-profile sec-cfg-1

 ssid-profile ssid-cfg-2

 quit

vap-profile name vap-cfg-4-1

 forward-mode direct-forward

 service-vlan vlan-id 17

 security-profile sec-cfg-1

 ssid-profile ssid-cfg-1

 quit

vap-profile name vap-cfg-4-2

 forward-mode direct-forward

 service-vlan vlan-id 18

 security-profile sec-cfg-1

 ssid-profile ssid-cfg-2

 quit

在無線控制器AC-1上，通過AP組ap-group-cfg-1配置組中的AP（AP-1～AP-4），配置射頻0引用vap-cfg-1模版，射頻1引用vap-cfg-2模版

ap-group name ap-group-cfg-1

 vap-profile vap-cfg-1 wlan 1 radio 0

 vap-profile vap-cfg-2 wlan 1 radio 1