转载自微信公众号：网络之路博客
PS：这次分享的几年前写的，基于V2R6之前，适用于V2R3~V2R5版本，基于V2R6之后的后续会更新新的博文。
一、实验目标
掌握配置WLAN源接口的命令
掌握配置DHCP服务器的命令
掌握手工确认AP上线的方法a
二、实验拓扑
三、实验配置
AC基础配置，主要是配置管理VLAN的IP地址，及DHCP服务，因为这里是二层组网，所以不用配置option
dhcp enable
interface Vlanif1
ip address 192.168.100.1 255.255.255.0
dhcp select interface wlan
wlan ac source interface vlanif1 |
配置检查先检查下DHCP是否分出地址，可以用dis ip pool inter vlan 1 来检查，这里可以看到已经为4个AP分出地址了
[ccieh3c.com-AC6005]dis ip pool interface Vlanif1
Pool-name : Vlanif1
Pool-No : 0
Lease : 1 Days 0 Hours 0 Minutes
Domain-name : -
DNS-server0 : -
NBNS-server0 : -
Netbios-type : -
Position : Interface Status : Unlocked
Gateway-0 : 192.168.100.1
Mask : 255.255.255.0
VPN instance : --
-----------------------------------------------------------------------------
Start End Total Used Idle(Expired) Conflict Disable
-----------------------------------------------------------------------------
192.168.100.1 192.168.100.254 253 4 249(0) 0 0
----------------------------------------------------------------------------- |
因为默认华为的AC使用了mac地址对AP的上线进行认证，所以现在还不能看到AP，但是通过dis arp 可以看到AP的MAC
[ccieh3c.com-AC6005]dis ap all
All AP information(Normal-0,UnNormal-0):
------------------------------------------------------------------------------
AP AP AP Profile AP AP
/Region
ID Type MAC ID State Sysname
------------------------------------------------------------------------------
------------------------------------------------------------------------------
Total number: 0 [ccieh3c.com-AC6005]dis arp
IP ADDRESS MAC ADDRESS EXPIRE(M) TYPE INTERFACE VPN-INSTANCE
VLAN/CEVLAN PVC
------------------------------------------------------------------------------
192.168.100.1 00e0-fc03-800f I - Vlanif1
192.168.100.254 00e0-fc03-8e30 20 D-0 GE0/0/1
1/-
192.168.100.253 00e0-fc03-b310 20 D-0 GE0/0/3
1/-
192.168.100.252 00e0-fc03-da40 20 D-0 GE0/0/2
1/-
192.168.100.251 00e0-fc03-dc50 20 D-0 GE0/0/4
1/-
------------------------------------------------------------------------------
Total:5 Dynamic:4 Static:0 Interface:1 |
可能通过dis unauthorized-ap record查看未通过认证的AP列表
[ccieh3c.com-AC6005]dis unauthorized-ap record
Unauthorized AP record:
Total number: 4
------------------------------------------------------------------------------
AP type: AP6010DN-AGN
AP sn: 210235448310E6766418
AP mac address: 00e0-fc03-dc50
AP ip address: 192.168.100.251
Record time: 2013-12-06 12:13:25
------------------------------------------------------------------------------
AP type: AP6010DN-AGN
AP sn: 2102354483106D748F23
AP mac address: 00e0-fc03-8e30
AP ip address: 192.168.100.254
Record time: 2013-12-06 12:13:24
------------------------------------------------------------------------------
AP type: AP6010DN-AGN
AP sn: 210235448310BE35BA59
AP mac address: 00e0-fc03-b310
AP ip address: 192.168.100.253
Record time: 2013-12-06 12:12:59
------------------------------------------------------------------------------
AP type: AP6010DN-AGN
AP sn: 210235448310152A7C4D
AP mac address: 00e0-fc03-da40
AP ip address: 192.168.100.252
Record time: 2013-12-06 12:12:58
---------------------------------------------------------------------------- |
通过命令确认AP上线，下面是见证奇迹的时刻了：
[ccieh3c.com-AC6005] wlan
[ccieh3c.com-AC6005-wlan-view]ap-confirm all
Info: Confirm AP completely. Success count: 4. Failure count: 0. [ccieh3c.com-AC6005-wlan-view]dis ap all
All AP information(Normal-4,UnNormal-0):
------------------------------------------------------------------------------
AP AP AP Profile AP AP
/Region
ID Type MAC ID State Sysname
------------------------------------------------------------------------------
0 AP6010DN-AGN 00e0-fc03-dc50 0/0 normal ap-0
1 AP6010DN-AGN 00e0-fc03-8e30 0/0 normal ap-1
2 AP6010DN-AGN 00e0-fc03-b310 0/0 normal ap-2
3 AP6010DN-AGN 00e0-fc03-da40 0/0 normal ap-3
------------------------------------------------------------------------------
Total number: 4 |
四、补充知识
1、如果已经知道AP的MAC和型号（SN号是可选的），也可以通过下面命令上AP上线
wlan
wlan ac source interface vlanif1
ap id 0 type-id 19 mac 00e0-fc03-dc50 sn 210235448310E6766418
ap id 1 type-id 19 mac 00e0-fc03-8e30 sn 2102354483106D748F23
ap id 2 type-id 19 mac 00e0-fc03-b310 sn 210235448310BE35BA59
ap id 3 type-id19 mac 00e0-fc03-da40 sn 210235448310152A7C4D |
2、如果想重启一个AP，可以在WLAN配置示图下使用命令ap reset id x 或ap reset all重启AP,重启时候记得抓包哦，亲！
[ccieh3c.com-AC6005-wlan-view]ap-reset id 0
Warning: Reset AP! Continue? [Y/N]y
Info: Reset AP completely.
[ccieh3c.com-AC6005-wlan-view]dis ap all
All AP information(Normal-3,UnNormal-1):
------------------------------------------------------------------------------
AP AP AP Profile AP AP
/Region
ID Type MAC ID State Sysname
------------------------------------------------------------------------------
0 AP6010DN-AGN 00e0-fc03-dc50 0/0 fault ap-0
1 AP6010DN-AGN 00e0-fc03-8e30 0/0 normal ap-1
2 AP6010DN-AGN 00e0-fc03-b310 0/0 normal ap-2
3 AP6010DN-AGN 00e0-fc03-da40 0/0 normal ap-3
------------------------------------------------------------------------------
Total number: 4 |
下面是我抓到的包，这里就是完整的AP上线时CAPWAP的交互报文
！ 提问与分享（想提高自己，从独立思考与分享开始）
提问：如果事先不知道AP的MAC与SN该怎么办呢？分享：实验可以通过模拟器直接完成，记得老版本选用分享的考试版本即可，最新版本是采用的V2R7命令行有差别。
实验源文件：
链接：https://pan.baidu.com/s/18h55j60pC-hB2iEVzmeitA
提取码：814x
复制这段内容后打开百度网盘手机App，操作更方便哦
网络之路博客公众号提供Cisco、华为、H3C、防火墙、VPN、无线等网络知识点分享与应用，想了解更多企业技术应用与组网案例，关注我们（公众号菜单栏陆续在更新排列，不管你是青铜入坑的小白没有学习方向感到迷茫，还是想提升段位充实自己来升职加薪，都有您需要的哦）
