AC无线控制器三层无线漫游配置实验

网络拓扑

无线漫游实施的前提条件是：网络现场存在多台AC设备，若干AP注册到各自的AC上。无线漫游开启后无需再次获取IP地址，网络切换用户侧无感知，但是实际的流量转发仍然由原有注册的AP或者AC进行流量转发

配置步骤

1. S2交换机划分VLAN

vlan 10 20 30 40
int g1/0/1
 port link-type trunk
 port trunk pvid vlan 10
 port trunk permit vlan 10 30
 
int g1/0/2
 port link-type trunk
 port trunk pvid vlan 20
 port trunk permit vlan 20 40
 
int g1/0/3
 port link-type trunk
 port trunk permit vlan all

2. S1交换机划分VLAN 配置网关 配置DHCP

vlan 10 20 30 40 50
int range g1/0/1 to g1/0/2
 port link-type trunk
 port trunk permit vlan all
 port trunk pvid vlan 50
 
int g1/0/3
 port link-type trunk
 port trunk permit vlan all

int vlan 10
 ip add 192.168.10.254 24
int vlan 20
 ip add 192.168.20.254 24
int vlan 30
 ip add 192.168.30.254 24
int vlan 40
 ip add 192.168.40.254 24
int vlan 50
 ip add 192.168.50.254 24

dhcp server ip-pool VLAN10
 gateway-list 192.168.10.254
 network 192.168.10.0 mask 255.255.255.0
 option 43 hex 8007000001c0a83201

dhcp server ip-pool VLAN20
 gateway-list 192.168.20.254
 network 192.168.20.0 mask 255.255.255.0
 option 43 hex 8007000001c0a83202

dhcp server ip-pool VLAN30
 gateway-list 192.168.30.254
 network 192.168.30.0 mask 255.255.255.0
             
dhcp server ip-pool VLAN40
 gateway-list 192.168.40.254
 network 192.168.40.0 mask 255.255.255.0

3. AC1配置IP地址 缺省路由 上线AP

vlan 50
int g1/0/1
 port link-type trunk
 port trunk permit vlan all
 port trunk pvid vlan 50

int vlan 50
 ip add 192.168.50.1 24

ip route-static 0.0.0.0 0 192.168.50.254

wlan ap AP1 model WA6320-HCL 
 serial-id H3C_22-ED-7D-7A-03-00

4. 查看AP型号以及SN

5. AC2配置IP地址 缺省路由 上线AP

vlan 50
int g1/0/1
 port link-type trunk
 port trunk permit vlan all
 port trunk pvid vlan 50

int vlan 50
 ip add 192.168.50.2 24

ip route-static 0.0.0.0 0 192.168.50.254

wlan ap AP2 model WA6320-HCL 
 serial-id H3C_22-ED-82-61-04-00

6. 查看AP上线情况

7. 配置无线模板 以及三层漫游组

# AC1
wlan service-template ap1
 ssid OFFICE
 service-template enable

wlan mobility group ap12
 source ip 192.168.50.1
 member ip 192.168.50.2
 group enable
 
wlan ap AP1
 radio 1
  radio enable
  radar-detect disable
  service-template ap1 vlan 30 

-------------------------------------------

# AC2
wlan service-template ap2
 ssid OFFICE
 service-template enable

wlan mobility group ap12
 source ip 192.168.50.2
 member ip 192.168.50.1
 group enable
 
wlan ap AP2
 radio 1
  radio enable
  radar-detect disable
  service-template ap2 vlan 30

配置验证

最终效果地址不会更改 需要保证SSID一致 终端认为网络相同无需重新获取地址

本地转发 需要流量回到终端注册AP位置

隧道转发 流量到达AC后 由AC集中转发