WLAN可靠性配置（二）1學(xué)完本課程后，您將能夠掌握雙鏈路雙機(jī)熱備配置方式目標(biāo)2目錄31.雙鏈路雙機(jī)熱備配置實(shí)驗(yàn)示例WLAN組網(wǎng)需求4SSID:huawei業(yè)務(wù)VLAN：VLAN101管理VLAN：VLAN100AP1交換機(jī)S1AC1GE0/0/1GE0/0/2直接轉(zhuǎn)發(fā)VLANIF10010.1.100.1/24VLANIF10010.1.100.3/24VLANIF10110.1.101.1/24GE0/0/1路由器AC2VLANIF10010.1.100.2/24GE0/0/3配置項(xiàng)數(shù)據(jù)DHCP服務(wù)器交換機(jī)作為DHCP服務(wù)器為STA和AP分配IP地址AP的IP地址池10.1.100.4-10.1.100.254/24STA的IP地址池VLAN101：10.1.101.2～10.1.101.254/24AC的源接口IP地址AC1：10.1.100.1/24AC2：10.1.100.2/24AP組名稱：ap-group1

引用模板：VAP模板SSID模板SSID模板名稱：huaweiSSID名稱：huawei安全模板模板名稱：security，WPA+PSK+AES，密碼：a1234567。VAP模板名稱：huawei轉(zhuǎn)發(fā)模式：直接轉(zhuǎn)發(fā)業(yè)務(wù)VLAN：101引用模板：SSID模板huawei、安全模板securityAC主備AC1為主；AC2為備HSB相關(guān)信息hsb-server0備份接口及端口：VLANIF100/10241hsb-server-type：apWLAN配置思路（1/2）5配置有線網(wǎng)絡(luò)互通交換機(jī)、AC配置VLAN交換機(jī)、AC配置IP和DHCP服務(wù)器配置雙鏈路雙機(jī)熱備份配置hsb接口及端口配置hsb-service備份內(nèi)容SSID:huawei業(yè)務(wù)VLAN：VLAN101管理VLAN：VLAN100AP1交換機(jī)S1AC1GE0/0/1GE0/0/2直接轉(zhuǎn)發(fā)VLANIF10010.1.100.1/24VLANIF10010.1.100.3/24VLANIF10110.1.101.1/24GE0/0/1路由器AC2VLANIF10010.1.100.2/24GE0/0/3WLAN配置思路（2/2）6配置WLAN業(yè)務(wù)配置AC的源接口配置VAP模板，引用安全、SSID模板（提前配置）配置AP系統(tǒng)模板創(chuàng)建AP組，引用VAP模板、AP系統(tǒng)模板AC上離線導(dǎo)入AP SSID:huawei業(yè)務(wù)VLAN：VLAN101管理VLAN：VLAN100AP1交換機(jī)S1AC1GE0/0/1GE0/0/2直接轉(zhuǎn)發(fā)VLANIF10010.1.100.1/24VLANIF10010.1.100.3/24VLANIF10110.1.101.1/24GE0/0/1路由器AC2VLANIF10010.1.100.2/24GE0/0/3配置雙鏈路雙機(jī)熱備份SSID:huawei業(yè)務(wù)VLAN：VLAN101管理VLAN：VLAN100AP1交換機(jī)S1AC1GE0/0/1GE0/0/2直接轉(zhuǎn)發(fā)VLANIF10010.1.100.1/24VLANIF10010.1.100.3/24VLANIF10110.1.101.1/24GE0/0/1路由器AC2VLANIF10010.1.100.2/24GE0/0/3AC的HSB配置如下：[AC1]hsb-service0[AC1-hsb-service-0]service-ip-portlocal-ip10.1.100.1peer-ip10.1.100.2local-data-port10241peer-data-port10241[AC1-hsb-service-0]quit[AC1]hsb-service-typeaphsb-service0AC2的HSB配置相同；配置WLAN業(yè)務(wù)（1/3）8配置AC的源接口。[AC1]capwapsourceinterfacevlanif100創(chuàng)建名為“security”的安全模板，并配置安全策略。[AC1-wlan-view]security-profilenamesecurity[AC1-wlan-sec-prof-security]securitywpapskpass-phrasea1234567aes[AC1-wlan-sec-prof-security]quit創(chuàng)建名為“huawei”的SSID模板，并配置SSID名稱為“huawei”。[AC1-wlan-view]ssid-profilenamehuawei[AC1-wlan-ssid-prof-huawei]ssidhuawei[AC1-wlan-ssid-prof-huawei]quitSSID:huawei業(yè)務(wù)VLAN：VLAN101管理VLAN：VLAN100AP1交換機(jī)S1AC1GE0/0/1GE0/0/2直接轉(zhuǎn)發(fā)VLANIF10010.1.100.1/24VLANIF10010.1.100.3/24VLANIF10110.1.101.1/24GE0/0/1路由器AC2VLANIF10010.1.100.2/24GE0/0/3使能雙鏈路備份功能。[AC1]wlan[AC1-wlan-view]acprotectenableWarning:ThisoperationmaybecauseAPreset,continue?[Y/N]:y配置WLAN業(yè)務(wù)（2/3）創(chuàng)建名為“huawei”的VAP模板。[AC1-wlan-view]vap-profilenamehuawei[AC1-wlan-vap-prof-huawei]service-vlanvlan-id101[AC1-wlan-vap-prof-huawei]ssid-profilehuawei[AC1-wlan-vap-prof-huawei]security-profilesecurity創(chuàng)建AP系統(tǒng)模板，并配置主備AC。[AC1-wlan-view]ap-system-profilenamehuawei[AC1-wlan-ap-system-prof-huawei]primary-accessip-address10.1.100.1[AC1-wlan-ap-system-prof-huawei]backup-accessip-address10.1.100.2SSID:huawei業(yè)務(wù)VLAN：VLAN101管理VLAN：VLAN100AP1交換機(jī)S1AC1GE0/0/1GE0/0/2直接轉(zhuǎn)發(fā)VLANIF10010.1.100.1/24VLANIF10010.1.100.3/24VLANIF10110.1.101.1/24GE0/0/1路由器AC2VLANIF10010.1.100.2/24GE0/0/39創(chuàng)建AP組，引用AP系統(tǒng)模板、VAP模板。[AC1-wlan-view]ap-groupnameap-group1[AC1-wlan-ap-group-ap-group1]ap-system-profilehuawei[AC1-wlan-ap-group-ap-group1]radio0[AC1-wlan-group-radio-ap-group1/0]vap-profilehuaweiwlan1配置WLAN業(yè)務(wù)（3/3）10SSID:huawei業(yè)務(wù)VLAN：VLAN101管理VLAN：VLAN100AP1交換機(jī)S1AC1GE0/0/1GE0/0/2直接轉(zhuǎn)發(fā)VLANIF10010.1.100.1/24VLANIF10010.1.100.3/24VLANIF10110.1.101.1/24GE0/0/1路由器AC2VLANIF10010.1.100.2/24GE0/0/310AC1上離線導(dǎo)入AP。[AC1-wlan-view]ap-id1ap-mac00