跨vlan的三层漫游配置（AC内漫游）华为_华为跨vlan wlan

1、拓扑图

2、配置命令（可直接刷）

AR：

sys 
sys AR
vlan batch 10 20
int vlan 10 
ip ad 192.168.10.2 24
int vlan 20 
ip ad 192.168.20.2 24
int e0/0/0
p l t
p t a v 10 20
ip route-static 0.0.0.0 0 192.168.10.1
ip route-static 0.0.0.0 0 192.168.20.1

1
2
3
4
5
6
7
8
9
10
11
12
13

CORE：

sys
sys CORE
vlan batch 10 20 100 200
dhcp enable
int vlan 10
ip ad 192.168.10.1 24
dhcp select interface
q
int vlan 20
ip ad 192.168.20.1 24
dhcp select interface
q
int vlan 100
ip ad 100.1.1.1 24
dhcp select relay
dhcp relay server-ip 200.1.1.1
q
int vlan 200
ip ad 200.1.1.2 24
q
int g0/0/1
p l t
p t a v 10 20 200
q
int g0/0/2
p l t
p t a v 10 20
int g0/0/3
p l t 
p t a v 100


ip route-static 192.168.10.2 32 192.168.10.2
ip route-static 192.168.20.2 32 192.168.20.2
ip route-static 200.1.1.1 32 200.1.1.1


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37

SW：

sys
sys SW
vlan 100
q
int g0/0/1
p l t
p t a v  100
int g0/0/2
p l t
p t a v  100
p t p v  100
port-isolate enable 
q
int g0/0/3
p l t
p t a v  100
p t p v  100
port-isolate enable
q


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21

AC（注意改AP的MAC）：

sys
sys AC
vlan batch 10 20 200
dhcp enable
ip pool vlan100
network 100.1.1.0 mask 24
gateway-list 100.1.1.1
option 43 sub-option 3 ascii 200.1.1.1
q
int vlan 200
ip ad 200.1.1.1 24
dhcp select global
int g0/0/1
p l t
p t a v 10 20 200
q
wlan 
ap auth-mode mac-auth
regulatory-domain-profile name JT
q
ap-group name one
regulatory-domain-profile JT
y
q
ap-group name two
regulatory-domain-profile JT
y
q
ap-id 0 ap-mac 00E0-FCFD-2A70
ap-name AP1
ap-group one
y
q
ap-id 1 ap-mac 00E0-FCEA-58C0
ap-name AP2
ap-group two
y
q
capwap source interface vlanif 200
wlan
ssid-profile name JT
ssid huawei
q
security-profile name JT
security wpa-wpa2 psk pass-phrase 123456789 aes
y
q
vap-profile name JTnew
forward-mode tunnel 
service-vlan vlan-id 10
ssid-profile JT
security-profile JT
q
vap-profile name JTold
forward-mode tunnel 
service-vlan vlan-id 20
ssid-profile JT
security-profile JT
q
ap-group name one
vap-profile JTnew wlan 1 radio 0
vap-profile JTnew wlan 1 radio 1
q
ap-group name two
vap-profile JTold wlan 2 radio 0
vap-profile JTold wlan 2 radio 1
q
q
ip route-static 0.0.0.0 0 200.1.1.2







1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76