基础的无线实验
一、实验概述
本文基于华为eNSP模拟器，完整演示一套企业级无线网络的配置流程。网络采用核心交换机LSW1 + 无线控制器AC6605 + 路由器R1的经典三层架构，实现以下目标：
AP通过VLAN 100与AC建立CAPWAP管理隧道
两个SSID分别映射到不同的业务VLAN（VLAN 10 / VLAN 20）
LSW1作为DHCP服务器为AP和终端统一分配IP地址
终端可通过AC访问上层网络（1.1.1.0/24）
二、LSW1（核心交换机）配置
system-view sysname LSW1 vlan batch 10 20 100 interface GigabitEthernet 0/0/1 port link-type trunk port trunk allow-pass vlan 10 20 100 quit port-group group-member GigabitEthernet 0/0/2 to GigabitEthernet 0/0/4 port link-type trunk quit port-group group-member GigabitEthernet 0/0/2 to GigabitEthernet 0/0/3 port trunk allow-pass vlan 10 100 port trunk pvid vlan 100 quit interface GigabitEthernet 0/0/4 port trunk allow-pass vlan 20 100 port trunk pvid vlan 100 quit dhcp enable ip pool wifi gateway-list 192.168.1.1 network 192.168.1.0 mask 24 quit ip pool vlan10 gateway-list 192.168.10.254 network 192.168.10.0 mask 24 quit ip pool vlan20 gateway-list 192.168.20.254 network 192.168.20.0 mask 24 quit interface Vlanif 100 ip address 192.168.1.1 24 dhcp select global quit interface Vlanif 10 ip address 192.168.10.254 24 dhcp select global quit interface Vlanif 20 ip address 192.168.20.254 24 dhcp select global quit ip route-static 192.168.200.0 24 192.168.1.2 ip route-static 1.1.1.0 24 192.168.1.2三、AC6605（无线控制器）配置
system-view sysname AC6605 vlan batch 100 200 interface Vlanif 100 ip address 192.168.1.2 24 quit interface GigabitEthernet 0/0/1 port link-type access port default vlan 200 quit interface Vlanif 200 ip address 192.168.200.1 24 quit capwap source interface Vlanif 100 wlan regulatory-domain-profile name aa country-code CN quit security-profile name openlab-1 security wpa2 psk pass-phrase openlab-2 aes quit ssid-profile name openlab-1 ssid openlab-1 quit vap-profile name openlab-1 wlan 1 forward-mode tunnel service-vlan vlan-id 10 security-profile openlab-1 ssid-profile openlab-1 quit security-profile name openlab-2 security wpa2 psk pass-phrase openlab-1 aes quit ssid-profile name openlab-2 ssid openlab-2 quit vap-profile name openlab-2 wlan 2 forward-mode tunnel service-vlan vlan-id 20 security-profile openlab-2 ssid-profile openlab-2 quit ap-group name gourp-1 regulatory-domain-profile aa vap-profile openlab-1 wlan 1 radio all quit ap-group name gourp-2 regulatory-domain-profile aa vap-profile openlab-2 wlan 2 radio all quit ap auth-mode mac-auth ap-id 0 ap-mac 00e0-fcea-2130 ap-name ap-0 ap-group gourp-1 quit ap-id 1 ap-mac 00e0-fc45-1cd0 ap-name ap-1 ap-group gourp-1 quit ap-id 2 ap-mac 00e0-fcc6-35a0 ap-name ap-2 ap-group gourp-2 quit quit ip route-static 1.1.1.0 24 192.168.200.2 ip route-static 192.168.10.0 24 192.168.1.1 ip route-static 192.168.20.0 24 192.168.1.1四、R1（路由器）配置
system-view sysname R1 interface GigabitEthernet 0/0/0 ip address 192.168.200.2 24 quit interface LoopBack0 ip address 1.1.1.1 24 quit ip route-static 192.168.1.0 24 192.168.200.1 ip route-static 192.168.10.0 24 192.168.200.1 ip route-static 192.168.20.0 24 192.168.200.1五、验证方法
配置完成后，可通过以下方式确认网络状态：
AP上线检查：在AC上执行
display ap all，确认所有AP状态为normal。终端获取IP：STA连接对应SSID后，执行
ipconfig（Windows）或ifconfig（Linux），确认获取到正确网段的IP。连通性测试：从STA ping 1.1.1.1，验证跨网段路由可达。
DHCP租约查看：在LSW1上执行
display ip pool，确认地址池正常分配。
六、注意事项
原配置中AP组名称拼写为
gourp-1/gourp-2，实际部署时建议统一修正为group-1/group-2，避免后期维护混淆。AP的MAC地址必须与真实设备一致，否则无法上线。
若AP无法获取IP，请检查LSW1上G0/0/2~G0/0/4的PVID是否正确设置为100，以及DHCP服务是否已全局开启。
隧道转发模式下，业务数据全部经由CAPWAP封装送达AC，因此AC上必须存在到达业务网段的路由。