Did you fail to learn the detailed configuration of Huawei wireless AP and AC?

1. Topology

Two, basic configuration

LSW1

[LSW1]interface GigabitEthernet 0/0/1
[LSW1-GigabitEthernet0/0/1]port link-type trunk
[LSW1-GigabitEthernet0/0/1]port trunk allow-pass vlan all
[LSW1-GigabitEthernet0/0/1]int g 0/0/2
[LSW1-GigabitEthernet0/0/2]port link-type trunk
[LSW1-GigabitEthernet0/0/2]port trunk pvid vlan 10
[LSW1-GigabitEthernet0/0/2]port trunk allow-pass vlan 10

AC1

[AC6605]vlan 10
[AC6605]interface GigabitEthernet 0/0/1
[AC6605-GigabitEthernet0/0/1]port link-type trunk 
[AC6605-GigabitEthernet0/0/1]port trunk allow-pass vlan all
[AC6605-GigabitEthernet0/0/1]int g0/0/2
[AC6605-GigabitEthernet0/0/2]port link-type access
[AC6605-GigabitEthernet0/0/2]port default vlan 10 
[AC6605-GigabitEthernet0/0/2]q

[AC6605]dhcp enable            //开启DHCP功能
[AC6605]interface Vlanif 10
[AC6605-Vlanif10]ip address 192.168.1.254 24
[AC6605-Vlanif10]dhcp select interface 
[AC6605-Vlanif10]quit

[AC6605]wlan                                            //在AC上配置AP上线
[AC6605-wlan-view]ap-group name ap  //创建AP组，用于将相同配置的AP加入到同一AP组
[AC6605-wlan-ap-group-ap]regulatory-domain-profile default
[AC6605-wlan-ap-group-ap]quit
[AC6605-wlan-view]regulatory-domain-profile name defult   //创建域管理模板，在域管理模板配置AC的国家码并在AP组下引用管理模块
[AC6605-wlan-regulate-domain-defult]country-code cn
[AC6605-wlan-regulate-domain-defult]quit
[AC6605-wlan-view]quit

[AC6605]capwap source int Vlanif 10   //配置AC源接口

[AC6605]wlan                         
[AC6605-wlan-view]ap auth-mode mac-auth 
[AC6605-wlan-view]ap-id 0 ap-mac 00e0-fc98-65f0    //查看AP2的MAC地址，并记录下来；ap-mac [AP1的mac地址]  
[AC6605-wlan-ap-0]ap-name ybd
[AC6605-wlan-ap-0]ap-group ap
[AC6605-wlan-ap-0]quit

[AC6605]wlan 
[AC6605-wlan-view]security-profile name wlan
[AC6605-wlan-sec-prof-wlan]security wpa-wpa2 psk pass-phrase 87654321 aes  //配置WLAN业务参数，配置WPA-WPA2+PSK+AES
[AC6605-wlan-sec-prof-wlan]quit
[AC6605-wlan-view]ssid-profile name wlan  //创建名为"wlan"的SSID
[AC6605-wlan-ssid-prof-wlan]ssid wlan   //配置SSID名称为"wlan"
[AC6605-wlan-ssid-prof-wlan]quit
[AC6605-wlan-view]vap-profile name wlan //创建名为"wlan"的VAP模板，配置业务数据转发模式，业务VLAN，并且引用安全模板和SSID
[AC6605-wlan-vap-prof-wlan]forward-mode direct-forward //配置直接转发
[AC6605-wlan-vap-prof-wlan]security-profile wlan
[AC6605-wlan-vap-prof-wlan]ssid-profile wlan
[AC6605-wlan-vap-prof-wlan]quit
[AC6605-wlan-view]ap-group name ap  //配置AP组引用VAP模板，AP上射频1和射频1都使用VAP模板"wlan"的配置
[AC6605-wlan-ap-group-ap]vap-profile wlan wlan 1 radio 0
[AC6605-wlan-ap-group-ap]vap-profile wlan wlan 1 radio 1
[AC6605-wlan-ap-group-ap]quit
[AC6605-wlan-view]rrm-profile name default 
[AC6605-wlan-rrm-prof-default]calibrate auto-channel-select disable  
 //配置AP射频的信道和功率，关闭射频的信道和功率自动调优功能。射频的信道和功率自动调优功能默认开启，如果不关闭此功能则会导致手动配置不生效
[AC6605-wlan-rrm-prof-default]calibrate auto-txpower-select disable 
[AC6605-wlan-rrm-prof-default]quit

[AC6605-wlan-view]ap-id 0  //配置射频0的信道和功率
[AC6605-wlan-ap-0]radio 0
[AC6605-wlan-radio-0/0]channel 20mhz 6
[AC6605-wlan-radio-0/0]eirp 127
[AC6605-wlan-radio-0/0]quit
[AC6605-wlan-ap-0]radio 1  //配置射频1的信道和功率
[AC6605-wlan-radio-0/1]channel 20mhz 149
[AC6605-wlan-radio-0/1]eirp 127

AP1

PC1

Three, analysis

Connected to

achieve full network interoperability

STA1 PING test PC1

has been PING

Four, AP overview

1. The architecture of wireless LAN is mainly divided into

(1) Controller-based AP architecture (thin AP, FitAP)
(2) Traditional independent AP architecture (fat AP, FatAP)

With the development of WLAN technology in recent years, thin APs are rapidly replacing fat APs

2. Fat AP

(1) In addition to the wireless access function, it generally has two interfaces of WLAN and LAN, and supports DHCP server, DNS and MAC address cloning, as well as security functions such as VPN access and firewall;
(2) Fat AP is also called independent AP , All configurations are stored in the autonomous access point itself, so the management and configuration of the device are handled by the access point. All encryption and decryption and MAC layer functions are also completed by autonomous access points;
(3) The example of fat AP is typically a wireless router.

3. Thin AP

(1) The next stage of the integrated development of wireless local area networks is the centralized WLAN architecture. This mode uses a WLAN controller at the core of the network. In a centralized wireless LAN architecture, the controller-based access point is also called a lightweight AP;

(2) In order to achieve rapid deployment of WLAN networks, centralized management of network equipment, and refined user management, enterprise users and operators are more inclined to adopt centralized control WLAN networking (thin AP+AC) than fat AP methods ；

(3) CAPWAP protocol is adopted between AC and AP.

---

I am Yibodong ! You are welcome to discuss with me and see you in the next issue.