拓扑图如上，AP与S1在同一VLAN,S1与AC在同一VLAN，AP采用三层发现AC，AP与客户的DHCP由S1提供。
S1配置
vlan batch 10 20 30 dhcp enable ip pool ap gateway-list 192.168.20.1 network 192.168.20.0 mask 255.255.255.0 option 43 sub-option 3 ascii 192.168.10.2 //分配给ap地址池时，采用option 43指定AC管理地址 interface Vlanif10 ip address 192.168.10.1 255.255.255.0 # interface Vlanif20 ip address 192.168.20.1 255.255.255.0 dhcp select global # interface Vlanif30 ip address 192.168.30.1 255.255.255.0 dhcp select interface # interface GigabitEthernet0/0/1 port link-type trunk port trunk pvid vlan 20 port trunk allow-pass vlan 10 20 30 # interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan 10 20 #
AC配置
# vlan batch 10 20 # interface Vlanif10 ip address 192.168.10.2 255.255.255.0 # interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 10 20 # ip route-static 0.0.0.0 0.0.0.0 192.168.10.1 capwap source interface vlanif10 wlan regulatory-domain-profile name 123 设置国家码 country-code CN ap-group name default regulatory-domain-profile dalong //关联域 security-profile name dalong 配置模板 security wpa2 psk pass-phrase %^%#{6rJLW`(bAW,~A%{LC8(W;ey0*Gs+E'+Z6&o#mhR%^%# ssid-profile name dalong ssid dalong vap-profile name dalong forward-mode direct-forward service-vlan vlan-id 30 ssid-profile dalong security-profile dalong ap-group name default vap-profile dalong wlan 1 radio all//下发
