华为AC6005配置实例

AC6005安装使用指导

AC6005使用说明书配置登录WEB网管的IP地址背景信息用户可以直接通过缺省的IP地址登录Web网管，也可以通过配置的IP地址登录Web网管。

AC同时支持IPv4地址和IPv6地址，配置方法类似，这里以配置IPv4地址为例。

操作步骤1.执行命令system-view，进入系统视图。

2.执行命令vlan vlan-id，创建VLAN并进入VLAN视图。

3.执行命令quit，返回系统视图。

4.执行命令interface vlanif vlanif-id，创建VLANIF并进入VLANIF视图。

5.执行命令ip address ip-address { mask | mask-length } [ sub ]，配置管理IP地址。

6.执行命令quit，返回系统视图。

7.执行命令interface interface-type interface-number，进入接口视图。

8.执行命令port link-type trunk，配置接口的链路类型。

9.执行命令port trunk allow-pass vlan vlan-id，配置接口加入之前新建的VLAN。

例如，在接口GE0/0/1上配置管理IP地址为192.168.200.161，掩码长度为24。

<AC6605> system-view[AC6605] vlan 10[AC6605-vlan10] quit[AC6605] interface Vlanif 10[AC6605-Vlanif10] ip address 192.168.200.161 24[AC6605-Vlanif10] quit[AC6605] interface gigabitethernet 0/0/1[AC6605-GigabitEthernet0/0/1] port link-type trunk[AC6605-GigabitEthernet0/0/1] port trunk allow-pass vlan 10[AC6605-GigabitEthernet0/0/1] quit说明：AC6605的管理网口为MEth0/0/1，如果使用MEth0/0/1的IP地址登录Web网管，可以执行如下配置步骤完成接口的IP地址配置：a.执行命令system-view，进入系统视图。

华为无线控制器AC6005 配置（直接转发）∙∙∙Switch的配置文件∙#∙sysname Switch∙#∙vlan batch 100 to 101∙#∙interface GigabitEthernet0/0/1∙ port link-type trunk∙ port trunk pvid vlan 100∙ port trunk allow-pass vlan 100 to 101∙ port-isolate enable group 1∙#∙interface GigabitEthernet0/0/2∙ port link-type trunk∙ port trunk allow-pass vlan 100 to 101∙#return∙Router的配置文件∙#∙sysname Router∙#∙vlan batch 101∙#∙interface Vlanif101∙ ip address 10.23.101.2 255.255.255.0∙#∙interface GigabitEthernet1/0/0∙ port link-type trunk∙ port trunk allow-pass vlan 101∙#∙return∙AC的配置文件∙#∙ sysname AC∙#∙vlan batch 100 to 101∙#∙dhcp enable∙#∙interface Vlanif100∙ ip address 10.23.100.1 255.255.255.0∙ dhcp select interface∙#∙interface Vlanif101∙ ip address 10.23.101.1 255.255.255.0∙ dhcp select interface∙#∙interface GigabitEthernet0/0/1∙ port link-type trunk∙ port trunk allow-pass vlan 100 to 101∙#∙interface GigabitEthernet0/0/2∙ port link-type trunk∙ port trunk allow-pass vlan 101∙#∙capwap source interface vlanif100∙#∙wlan∙ security-profile name wlan-net∙ security wpa-wpa2 psk pass-phrase %^%#m"tz0f>~7.[`^6RWdzwCy16hJj/Mc!,}s`X*B]}A%^%# aes∙ ssid-profile name wlan-net∙ ssid wlan-net∙ vap-profile name wlan-net∙ service-vlan vlan-id 101∙ ssid-profile wlan-net∙ security-profile wlan-net∙ regulatory-domain-profile name default∙ rrm-profile name default∙ calibrate auto-channel-select disable∙ calibrate auto-txpower-select disable∙ ap-group name ap-group1∙ radio 0∙ vap-profile wlan-net wlan 1∙ radio 1∙ vap-profile wlan-net wlan 1∙ ap-id 0 type-id 35 ap-mac 60de-4476-e360 ap-sn 210235554710CB000042 ∙ ap-name area_1∙ ap-group ap-group1∙ radio 0∙ channel 20mhz 6∙ eirp 127∙ radio 1∙ channel 20mhz 149∙ eirp 127∙#return华为无线控制器AC6005 配置（隧道转发）∙Switch的配置文件∙#∙sysname Switch∙#∙vlan batch 100∙#∙interface GigabitEthernet0/0/1∙ port link-type trunk∙ port trunk pvid vlan 100∙ port trunk allow-pass vlan 100∙ port-isolate enable group 1∙#∙interface GigabitEthernet0/0/2∙ port link-type trunk∙ port trunk allow-pass vlan 100∙#return∙Router的配置文件∙#∙sysname Router∙#∙vlan batch 101∙#∙interface Vlanif101∙ ip address 10.23.101.2 255.255.255.0∙#∙interface GigabitEthernet1/0/0∙ port link-type trunk∙ port trunk allow-pass vlan 101∙#∙return∙AC的配置文件∙#∙ sysname AC∙#∙vlan batch 100 to 101∙#∙dhcp enable∙#∙interface Vlanif100∙ ip address 10.23.100.1 255.255.255.0∙ dhcp select interface∙#∙interface Vlanif101∙ ip address 10.23.101.1 255.255.255.0∙ dhcp select interface∙#∙interface GigabitEthernet0/0/1∙ port link-type trunk∙ port trunk allow-pass vlan 100∙#∙interface GigabitEthernet0/0/2∙ port link-type trunk∙ port trunk allow-pass vlan 101∙#∙capwap source interface vlanif100∙#∙wlan∙ security-profile name wlan-net∙ security wpa-wpa2 psk pass-phrase %^%#m"tz0f>~7.[`^6RWdzwCy16hJj/Mc!,}s`X*B]}A%^%# aes∙ ssid-profile name wlan-net∙ ssid wlan-net∙ vap-profile name wlan-net∙ forward-mode tunnel∙ service-vlan vlan-id 101∙ ssid-profile wlan-net∙ security-profile wlan-net∙ regulatory-domain-profile name default∙ rrm-profile name default∙ calibrate auto-channel-select disable∙ calibrate auto-txpower-select disable∙ ap-group name ap-group1∙ radio 0∙ vap-profile wlan-net wlan 1∙ radio 1∙ vap-profile wlan-net wlan 1∙ ap-id 0 type-id 35 ap-mac 60de-4476-e360 ap-sn 210235554710CB000042 ∙ ap-name area_1∙ ap-group ap-group1∙ radio 0∙ channel 20mhz 6∙ eirp 127∙ radio 1∙ channel 20mhz 149∙ eirp 127∙#return配置旁挂二层组网直接转发∙SwitchA的配置文件∙#∙sysname SwitchA∙#∙vlan batch 100 to 101∙#∙interface GigabitEthernet0/0/1∙ port link-type trunk∙ port trunk pvid vlan 100∙ port trunk allow-pass vlan 100 to 101∙ port-isolate enable group 1∙#∙interface GigabitEthernet0/0/2∙ port link-type trunk∙ port trunk allow-pass vlan 100 to 101∙#return∙SwitchB的配置文件∙#∙sysname SwitchB∙#∙vlan batch 100 to 101∙#∙dhcp enable∙#∙interface Vlanif101∙ ip address 10.23.101.1 255.255.255.0∙ dhcp select interface∙ dhcp server gateway-list 10.23.101.2∙#∙interface GigabitEthernet0/0/1∙ port link-type trunk∙ port trunk allow-pass vlan 100 to 101∙#∙interface GigabitEthernet0/0/2∙ port link-type trunk∙ port trunk allow-pass vlan 100∙#∙interface GigabitEthernet0/0/3∙ port link-type trunk∙ port trunk allow-pass vlan 101∙#return∙Router的配置文件∙#∙sysname Router∙#∙vlan batch 101∙#∙interface Vlanif101∙ ip address 10.23.101.2 255.255.255.0∙#∙interface GigabitEthernet1/0/0∙ port link-type trunk∙ port trunk allow-pass vlan 101∙#∙return∙AC的配置文件∙#∙ sysname AC∙#∙vlan batch 100 to 101∙#∙dhcp enable∙#∙interface Vlanif100∙ ip address 10.23.100.1 255.255.255.0∙ dhcp select interface∙#∙interface GigabitEthernet0/0/1∙ port link-type trunk∙ port trunk allow-pass vlan 100∙#∙capwap source interface vlanif100∙#∙wlan∙ security-profile name wlan-net∙ security wpa-wpa2 psk pass-phrase %^%#m"tz0f>~7.[`^6RWdzwCy16hJj/Mc!,}s`X*B]}A%^%# aes ∙ ssid-profile name wlan-net∙ ssid wlan-net∙ vap-profile name wlan-net∙ service-vlan vlan-id 101∙ ssid-profile wlan-net∙ security-profile wlan-net∙ regulatory-domain-profile name default∙ rrm-profile name default∙ calibrate auto-channel-select disable∙ calibrate auto-txpower-select disable∙ ap-group name ap-group1∙ radio 0∙ vap-profile wlan-net wlan 1∙ radio 1∙ vap-profile wlan-net wlan 1∙ ap-id 0 type-id 35 ap-mac 60de-4476-e360 ap-sn 210235554710CB000042 ∙ ap-name area_1∙ ap-group ap-group1∙ radio 0∙ channel 20mhz 6∙ eirp 127∙ radio 1∙ channel 20mhz 149∙ eirp 127∙#return配置旁挂二层组网隧道转∙SwitchA的配置文件∙#∙sysname SwitchA∙#∙vlan batch 100∙#∙interface GigabitEthernet0/0/1∙ port link-type trunk∙ port trunk pvid vlan 100∙ port trunk allow-pass vlan 100∙ port-isolate enable group 1∙#∙interface GigabitEthernet0/0/2∙ port link-type trunk∙ port trunk allow-pass vlan 100∙#return∙SwitchB的配置文件∙#∙sysname SwitchB∙#∙vlan batch 100 to 101∙#∙dhcp enable∙#∙interface Vlanif101∙ ip address 10.23.101.1 255.255.255.0 ∙ dhcp select interface∙ dhcp server gateway-list 10.23.101.2 ∙#∙interface GigabitEthernet0/0/1∙ port link-type trunk∙ port trunk allow-pass vlan 100∙#∙interface GigabitEthernet0/0/2∙ port link-type trunk∙ port trunk allow-pass vlan 100 to 101 ∙#∙interface GigabitEthernet0/0/3∙ port link-type trunk∙ port trunk allow-pass vlan 101∙#return∙Router的配置文件∙#∙sysname Router∙#∙vlan batch 101∙#∙interface Vlanif101∙ ip address 10.23.101.2 255.255.255.0 ∙#∙interface GigabitEthernet1/0/0∙ port link-type trunk∙ port trunk allow-pass vlan 101∙#∙return∙AC的配置文件∙#∙ sysname AC∙#∙vlan batch 100 to 101∙#∙dhcp enable∙#∙interface Vlanif100∙ ip address 10.23.100.1 255.255.255.0∙ dhcp select interface∙#∙interface GigabitEthernet0/0/1∙ port link-type trunk∙ port trunk allow-pass vlan 100 to 101∙#∙capwap source interface vlanif100∙#∙wlan∙ calibrate enable schedule time 03:00:00∙ security-profile name wlan-net∙ security wpa-wpa2 psk pass-phrase %^%#m"tz0f>~7.[`^6RWdzwCy16hJj/Mc!,}s`X*B]}A%^%# aes∙ ssid-profile name wlan-net∙ ssid wlan-net∙ vap-profile name wlan-net∙ forward-mode tunnel∙ service-vlan vlan-id 101∙ ssid-profile wlan-net∙ security-profile wlan-net∙ regulatory-domain-profile name default∙ dca-channel 5g channel-set 149,153,157,161∙ air-scan-profile name wlan-airscan∙ scan-channel-set dca-channel∙ rrm-profile name wlan-rrm∙ radio-2g-profile name wlan-radio2g∙ rrm-profile wlan-rrm∙ air-scan-profile wlan-airscan∙ radio-5g-profile name wlan-radio5g∙ rrm-profile wlan-rrm∙ air-scan-profile wlan-airscan∙ ap-group name ap-group1∙ radio 0∙ radio-2g-profile wlan-radio2g∙ vap-profile wlan-net wlan 1∙ radio 1∙ radio-5g-profile wlan-radio5g∙ vap-profile wlan-net wlan 1∙ ap-id 0 type-id 35 ap-mac 60de-4476-e360 ap-sn 210235554710CB000042 ∙ ap-name area_1∙ ap-group ap-group1∙#return。

华为Wlan产品方案介绍

差异化需求
高速移动下的传输可靠性：列车调度系统，要求高
速运行下，不会因通信切换，造成停车、用户上网不
畅、监控系统因网络不畅出现盲区甚至事故；
车厢间连线困难：车厢间需预埋有线链接，车厢改
造难度大，成本高，施工周期大大缩短；
方案亮点
车厢间无线网络：高速无线网桥（WDS/MESH）可
解决车厢间连接难题，同时支持车辆重组免配置快速对接，降低部署难度；
专业网规:专业网规工具规划信道，使用
161
1&157 6&149
2.4G/5G的非重叠信道，避免同频干扰.
专业团队：华为提供专业化网规团队，检测，
仿真，整网测试，一体化交付流程，精确AP布防点；最大限度利用AP覆盖空间，实现性能和成本的最优组合，保障客户利益。
8
四大特色解决方案之二：无线回传
AP6310SN-GN (室内大功率AP)
AP6610DN-AGN (室外双频AP, 千兆光口上行,交流电本地供电)
AP7030DE-AC （ 3X3 M I M O 11ac A P 整机1.75G）
室内放装型
AP7110SN-GN (室内 3x3 M I M O 单频) AP7110DN-AGN (室内 3x3 M I M O 双频 ) AP6010SN-GN (室内单频AP) AP6010DN-AGN (室内双频AP)
差异化需求
工程周期长：室外没有固有网络规划，场地不规则，
媒体分发服务器
视频监控业务平台
PC客户端
存储服务器
AC
显示大屏
视频监控展示
常有马路、水域等障碍，传统方案部署周期长。
工程成本高：传统方案涉及高额施工费用，每段网

Huawei AC6005 系列无线接入控制器产品描述 01

2 产品应用场景...................................................................................................................................5
2.1 旁挂式组网....................................................................................................................................................................6 2.2 直连式组网....................................................................................................................................................................8 2.3 无线回传组网................................................................................................................................................................9 2.4 AC 冗余备份组网........................................................................................................................................................12

华为 AC6005 无线访问控制器数据手册说明书

HuaweiWireless Access Controller Datasheetand network status instantly.Monitoring interfaceConﬁguration interfaceOne-click diagnosis solves 80% of common network problems.The web system supports real-time and periodic one-click intelligent diagnosis from the dimensions of users, APs, and ACs, and provides feasible suggestions for troubleshooting the faults.Figure 1-4 Intelligent diagnosisBuilt-in application identiﬁcation serverˉSupports Layer 4 to Layer 7 application identiﬁcation and can identify over 1600 applications, including common ofﬁce applications and P2P download applications, such as Lync, FaceTime, YouTube, and Facebook.ˉSupports application-based policy control technologies, including trafﬁc blocking, trafﬁc limit, and priority adjustment policies.ˉSupports automatic application expansion in the application signature database.Comprehensive reliability designˉSupports the Boolean port for environmental monitoring and the intra-board temperature probe, which monitors the operating environment of the AC6005 in real time.ˉSupports AC 1+1 HSB, and N+1 backup, ensuring uninterrupted services.ˉSupports port backup based on the Link Aggregation Control Protocol (LACP) or Multiple Spanning Tree Protocol (MSTP).Large-capacity and high-performance designˉThe AC6005 can manage up to 256 APs, meeting requirements o f small and medium campuses.ˉAn AC6005 has eight GE interfaces, and provides a 20 Gbit/s switching capacity and a 4 Gbit/s forwarding capability (the highest among all similar products of the industry).ˉThe AC6005 can manage up to 2048 users, allowing 100 users on an AP to transmit data simultaneously.Various rolesˉThe AC6005 provides PoE power on eight interfaces or PoE+ power on four interfaces and can supply power to directly connected APs, requiring no additional PoE switch for AP power supplies.ˉThe AC6005 has a built-in Portal/AAA server and can provide Portal/802.1x authentication for 1K users.Flexible networkingˉThe AC can be deployed in inline, bypass, bridge, and Mesh network modes, and supports both centralized and local forwarding.ˉThe AC and APs can be connected across a Layer 2 or Layer 3 network. In addition, NAT can be deployed when APs are deployed on the private network and the AC is deployed on the public network.ˉThe AC is compatible with Huawei full-series 802.11n and 802.11ac APs and supports hybrid networking of 802.11n and 802.11ac APs for simple scalability.Multiple interface supportˉSix GE and tow GE combo interfacesˉOne RJ45 serial maintenance interfaceˉOne Mini USB serial maintenance interfaceFeature Description Scalability Licenses are available for managing 1, 8, or 32 APs.Flexible networking The AC and APs can be connected across a Layer 2 or Layer 3 network. NAT can be deployed in conﬁgurations where APs are deployed on an internal network and the AC is deployed on an external network.Services can be mapped between VLANs and Service Set Identiﬁers (SSIDs). The number of service VLANs and number of SSIDs can be in a ratio of 1:1 or 1:N based on service requirements. You can assign user VLANs based on SSIDs, physical locations, or services.The AC can be deployed in inline, bypass, and WDS/Mesh networks.Flexible forwarding The AC6005 allows you to easily conﬁgure local or centralized forwarding based on Virtual Access Points (VAPs) according to network trafﬁc and service control requirements.• Centralized forwarding meets the requirements of most network conﬁgurations; however, when bandwidth demands from users connected to the same AP steadily increase, trafﬁc switching loads will increase.• Local forwarding improves bandwidth efﬁciency; however, user authentication cannot be controlled by the AC in local forwarding mode.The AC6005 solves this problem with support for centralized authentication in local forwarding to accommodate changing needs.Radio management The AC6005 supports automatic selection and calibration of radio parameters in AP regions, including these features:• Automatic signal level adjustment and channel selection on power-up• Automatic signal re-calibration in the event of signal interferenceˉPartial calibration: Adjusts a speciﬁc AP to optimal signal levels.ˉGlobal calibration: Adjusts all APs in a speciﬁed region for optimal signal levels.• When an AP is removed or goes ofﬂine, the AC6005 increases the power of neighboring APs to compensate for reduced signal strength.Flexible user rights management The AC6005 uses Access Control Lists (ACLs) based on APs, VAPs, or SSIDs and provides isolation and bandwidth-limiting for each option. The AC6005 also provides access controls for users, and user roles, to meet enterprise requirements regarding permissions, authentication, and authorization, as well as bandwidth limitations per user and user group.• The AC6005 implements per-user access control based on ACLs, VLAN IDs, and bandwidth limits sent from the RADIUS server.• User groups are deﬁned with access control policies. An ACL, user isolation policy, and bandwidth limitations can be applied to user groups for additional access control.• Inter-group user isolation or intra-group user isolation can also be conﬁgured.AC6005 featuresFeature DescriptionWDS The AC6005 provides STA access and wireless bridge management functions, as well as network bridge management when in Fit AP mode.The AC6005 supports these networking modes: point-to-multipoint bridging, single-band/dual-band multi-hop relay, dual-band WDS bridging + WLAN access, and single-band WDS bridging + WLAN access.The AC6005 can also function as a wireless bridge between a central campus network and multiple branch campuses. This conﬁguration works well for deployments with no wired network or where cable routing is inconvenient.High reliability Multiple ACs can be conﬁgured in a network to increase WLAN reliability. If an active AC experiences a fault or the link between the active AC and APs disconnects, the APs can switch to a standby AC.The AC6005 system provides N+1 active/standby mode, which allows multiple active ACs to share the same standby AC. This feature provides high reliability at reduced cost.Load balancing • Inter-AP load balancing: When an STA is in the coverage area of multiple APs, the AC6005 connects the STA to the AP with the lightest load, delivering STA-based or trafﬁc-based load balancing.• Inter-STA resource balancing: The AC6005 can dynamically and evenly allocate bandwidth resources to prevent some STAs from overusing available bandwidth due to network adapter performance or special applications, such as BT Total Broadband.• The AC6005 ﬁrst utilizes the 5 GHz band to increase overall utilization of bandwidth.Visualized WLAN network management and maintenance The AC6005 and APs use Fit AP + AC networking and standard Link Layer Discovery Protocol (LLDP) for centralized AP management and maintenance. When paired with Huawei’s eSight network management tool, the AC6005 provides network topology displays to easily manage and optimize network performance.System security • Application identiﬁcation: Use the service awareness technology to identify packets of dynamic protocols such as HTTP and RTP by checking Layer 4 to Layer 7 information in the packets, helping implement ﬁne-grained QoS management.• URL ﬁltering: URL ﬁltering regulates online behavior by controlling which URLs users can access.• Antivirus: The antivirus function depends on the powerful and constantly updated virus signature database to secure the network and system data.• Intrusion prevention：Intrusion prevention detects intrusions, such as buffer overﬂow attacks, Trojan horses, and worms, by analyzing network trafﬁc and takes actions to quickly terminate the intrusions. In this way, intrusion prevention protects the information system and network architecture of enterprises.Item SpeciﬁcationsTechnical speciﬁcations • Dimensions (H x W x D):43.6 mm x 320 mm x 233.6 mm• Weight: 2.9 kg• Operating temperature: –5o C to 50o C• Storage temperature: –40o C to +70o C• Humidity: 5% to 95%• Input voltage: 100 V AC to 240 V AC; 50/60 Hz• Maximum voltage range: 90 V AC to 264 V AC, 47 Hz to 63 Hz• Maximum power consumption: 163.6 W (device power consumption: 39.6 W, PoE: 124 W)Interface type • 8 x GE interfaces, among which the last two are multiplexed with two optical interfaces as combo interfaces• One RJ45 serial maintenance interface• One Mini USB serial maintenance interfaceLED indicator • Power module indicator (PWR): indicates the power-on status of the device.• System running status indicator (SYS): indicates the running status of the device.• Service network port indicator: indicates the data transmission status, interface rate, and PoE status of a network port.Number of managed APs256Number of SSIDs16KNumber of APs controlled byeach license1, 8, 32 Number of access users Entire device: 2KUser group management The AC supports 128 user groups:• Each user group can reference a maximum of 8 ACLs.• Each user group can associate with a maximum of 128 ACL rules.Number of MAC addresses4KNumber of VLANs4KNumber of ARP entries4KNumber of routing entries8KNumber of multicast forwardingentries2KNumber of DHCP IP address pools64 IP address pools, each containing a maximum of 8K IP addressesAC6005 speciﬁcationsFeature DescriptionNetwork management and maintenance Device management and statistics• Command line management based on SSH/Telnet/Console• SNMPv2/v3• Web management• Standard MIBs and Huawei proprietary MIBs• Syslog• AP and station statistics• Alarms with different severity levelsCentralized AP conﬁguration and management• Group-based AP management• Centralized version management and automatic version ﬁle load • Built-in AP type and customized AP additionGraphic AP deployment and topology displays• AP LLDP• AC LLDPWireless protocols IEEE 802.11a, 802.11b, 802.11g, 802.11d, WMM/802.11e, 802.11h, 802.11k, 802.11n, 802.11acWLAN deployment AP-AC networking• AP-AC Layer 2/3 networking• AC Layer 2 forwarding or Layer 3 routing• NAT traversal (APs are deployed on a private network and ACs are deployed on the public network) Data forwarding• AP-AC CAPWAP tunnel and DTLS encryption• VAP-based forwarding (centralized forwarding and local forwarding)• Centralized authentication and local forwardingVLAN deployment• Mapping between SSIDs and VLANs, and VLAN assignment based on SSIDs or physical locations WDS deployment• Point-to-point and point-to-multipoint• Automatic topology detection and loop prevention (STP)AC active/standby mode• Dual-linked active and standby ACs with Virtual Router Redundancy Protocol (VRRP)• N:1 active/standby deploymentWireless featuresFeature DescriptionRadio management Channel and power conﬁguration• Centralized or static channel power conﬁguration• Automatic channel allocation to implement global radio calibration or partial radio calibration • Automatic power adjustment to implement coverage hole compensation• AP region-based conﬁguration and managementLoad balancing• Load balancing based on the trafﬁc volume on each radio• Load balancing based on the number of usersWireless service control Extended Service Set (ESS)-based service management• ESS-based SSID hiding and AP isolation at Layer 2• Maximum number of access users and associated aging time settings in an ESS• ESSs to service VLANs mapping• ESS associations with a security proﬁle or a QoS proﬁle• Internet Group Management Protocol (IGMP) support for APs in an ESSWireless roaming• Layer 2 roaming• Inter-VLAN Layer 3 roaming• Pairwise Master Key (PMK) caching, rapid key negotiation• Identity check on users who request to reassociate with the AC to reject reassociation requests of unauthorized users• Delayed clearing of user information after a user goes ofﬂine so that the user can rapidly go online again DHCP service control• Built-in DHCP server• Support for DHCP snooping on APs• Support for DHCP relay and DHCP snooping on ACMulticast service management• IGMP snooping• IGMP proxyWireless user management WLAN user management• User blacklist and whitelist• User access number limit• User disconnection• Support for multiple queries including online user information and statistics User group management• ACLs based on user groups• Isolation based on user groupsFeature DescriptionEthernet features • 802.1p, QinQ, Smart Link, LLDP• Storm suppression, port isolation, and link aggregationEthernet loop protection • Spanning Tree Protocol (STP)/Rapid Spanning Tree Protocol (RSTP)/Multiple Spanning Tree Protocol (MSTP)• Bridge Protocol Data Unit (BPDU) protection, root protection, and loop protection• Partitioned STP and BPDU tunnels• Rapid Ring Protection Protocol (RRPP)• Hybrid networking of RRPP rings and other ring networksWired featuresFeature DescriptionWireless security and authentication Authentication and encryption• OPEN/WEP/PSK/WPA(2) + 802.1x• WEP/TKIP/AES(CCMP)• WAPIUser authentication and control• MAC address authentication, Portal authentication, and 802.1x authentication • MAC + Portal authentication• PEAP/TLS/MD5/CHAPSecurity and defense• ACLs based on interface, users, and user groups• Isolation based on VAPs and user groups• IP source guard for STAs• Detection of unauthorized APs and alarm function• User blacklist and whitelistAAA• Local authentication/local accounts (MAC addresses and accounts)• RADIUS authentication• Multiple authentication serversWireless QoS control Flow control• VAP-based rate limiting• User-group-based rate limiting• Rate limiting for a speciﬁed user• Dynamic trafﬁc control, preventing resources from being wasted by STAsPriority mapping and scheduling• Mapping QoS settings of encapsulated data packets to 802.1p and DSCP ﬁelds of outer tunnel packets • Mapping between DSCP, 802.1p, and 802.11e10Huawei AC6005Wireless Access Controller Datasheet ComponentPart Number Name Description AC+license02356813AC6005-8-PWR-8AP AC6005-8-PWR-8AP Bundle(Including AC6005-8-PWR,Resource License 8 AP)AC+license 02356816AC6005-8-8AP AC6005-8 -8AP Bundle(Including AC6005-8,Resource License 8 AP)License 88031VEB L-AC6005-1AP Software Charge,AC6005,L-AC6005-1AP ,AC6005 Access ControllerAP Resource License(1 AP)88031VEAL-AC6005-8APSoftware Charge,AC6005,L-AC6005-8AP ,AC6005 Access ControllerAP Resource License(8 AP)Power moduleSee the ordering guide.Power cableOptical moduleOptical jumperNetwork cableGround bar AC6005 purchase and accessory informationFeatureDescription IP routingUnicast routing protocols: RIP , OSPF, BGP , and IS-IS Device reliabilityVirtual Router Redundancy Protocol (VRRP)QoS features Trafﬁc classiﬁer, trafﬁc behavior, queue scheduling, congestion avoidance, and outbound interfacerate limitingLink detection BFDEFM OAM, CFM OAM, and Y .1731IP service controlARPBuilt-in DHCP serverRADIUS clientBuilt-in FTP serverDHCP relay and DHCP snoopingProfessional Service and SupportHuawei Professional Services provides expert network design and service optimization tasks to help customers:ˉDesign and deploy a high-performance network that is reliable and secure.ˉMaximize return on investment and reduce operating expenses.Company AddendumFor more information, please visit /en/ or contact your local Huawei ofﬁce.Copyright © Huawei Technologies Co., Ltd. 2016. All rights reserved.No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd.Trademark Notice, HUAWEI, and are trademarks or registered trademarks of Huawei Technologies Co., Ltd.Other trademarks, product, service and company names mentioned are the property of their respective owners.General DisclaimerThe information in this document may contain predictive statements including,without limitation, statements regarding the future financial and operating results,future product portfolio, new technology, etc. There are a number of factors thatcould cause actual results and developments to differ materially from thoseexpressed or implied in the predictive statements. Therefore, such information isprovided for reference purpose only and constitutes neither an offer nor anacceptance. Huawei may change the information at any time without notice.。

华为路由器配置实例

通过在外网口配置nat基本就OK 了，以下配置假设EthernetO/O为局域网接口,EthernetO/1 为外网口。

1、配置内网接口( EthernetO/O):[MSR20-20 ] in terface EthernetO/O[MSR20-20 - EthernetO/O]ip add 192.168.1.1 242、使用动态分配地址的方式为局域网中的PC分配地址[MSR20-20 ]dhcp server ip-pool 1[MSR20-20 -dhcp-pool-1]network 192.168.1.0 24[MSR20-20 -dhcp-pool-1]dns-list 202.96.134.133[MSR20-20 -dhcp-pool-1] gateway-list 192.168.1.13、配置nat[MSR20-20 ]nat address-group 1 公网IP 公网IP[MSR20-20 ]acl number 3000[MSR20-20 -acl-adv-3000]rule 0 permit ip4、配置外网接口( EthernetO/1)[MSR20-20 ] in terface EthernetO/1[MSR20-20 - Ethernet0/1]ip add 公网IP[MSR20-20 - EthernetO/1] nat outbound 3000 address-group 15 .加默缺省路由[MSR20-20 ]route-stac 0.0.0.0 0.0.0.0 夕卜网网关总结：在2020路由器下面，配置外网口，配置内网口，配置acl作nat,一条默认路由指向电信网关.ok!Console登陆认证功能的配置关键词：MSR;co nsole;一、组网需求：要求用户从con sole登录时输入已配置的用户名h3c和对应的口令h3c,用户名和口令正确才能登录成功。

华为-MA5600-配置指南01-1操作控制台配置

1操作控制台配置.................................................................. 1-1 关于本章......................................................................................... 1-11.1 概述.......................................................................................... 1-21.2本地串口方式配置 ............................................................................. 1-21.3远程串口方式配置 ............................................................................. 1-91.4带外管理接口方式配置.......................................................................... 1-131.5带内管理接口方式配置.......................................................................... 1-171.6 SSH方式配置 .................................................................................. 1-20插图目录图1-1本地串口方式配置组网........................................................................ 1-3 图1-2本地串口配置流程图.......................................................................... 1-3 图1-3新建连接..................................................................................... 1-4 图1-4选择连接使用串口............................................................................ 1-5 图1-5超级终端参数设置图.......................................................................... 1-6 图1-6超级终端界面图.............................................................................. 1-6 图1-7终端仿真类型设置............................................................................ 1-7 图1-8 ASCII码设置.................................................................................. 1-8 图1-9登录系统..................................................................................... 1-9 图1-10远程串口方式配置组网....................................................................... 1-10 图1-11远程串口方式配置流程图.................................................................... 1-11 图1-12通过局域网搭建本地配置环境组网图.......................................................... 1-14 图1-13 Telnet方式通过广域网搭建远程配置环境组网图................................................. 1-15 图1-14 Telnet方式通过带外管理接口登录配置流程图................................................... 1-16 图1-15 运行Telnet程序界面........................................................................ 1-17 图1-16 Telnet方式通过带内管理接口搭建远程配置环境组网图.................................. 1-18 图1-17 Telnet方式通过带内管理接口登录配置流程图................................................... 1-19 图1-18 SSH方式局域网本地配置环境组网图........................................................... 1-20 图1-19 SSH方式广域网远程配置组网图............................................................... 1-21 图1-20 SSH方式配置流程图.......................................................................... 1-23 图1-21密码生成工具界面图........................................................................ 1-25 图1-22密码生成工具界面图........................................................................ 1-26图1-23 SSH客户端工具界面图........................................................................ 1-27 图1-24 SSH客户端登录界面图........................................................................ 1-28表格目录表1-1操作控制台配置方式特点...................................................................... 1-2 表1-2带外管理接口方式（局域网组网）数据规划表................................................... 1-14 表1-3 Telnet方式通过带外管理接口（广域网组网）登录数据规划表............................ 1-15表1-4通过带内管理接口登录数据规划表............................................................. 1-18 表1-5 SSH方式通过带外管理接口（局域网组网）登录数据规划表.............................. 1-21表1-6 SSH方式通过带外管理接口（广域网组网）登录数据规划表.............................. 1-221 操作控制台配置关于本章1.1概述SmartAX MA5600 多业务接入设备(简称 MA5600 )提供基于命令行方式的操作控制台，操作控制台配置方式特点，如表1-1所示。

华为交换机配置实例

华为交换机配置实例序号注意项目记录1 登录交换机时请注意在超级终端串口配置属性流控选择“无”2 启动时按”ctrl+B”可以进入到boot menu模式3 当交换机提示”Please Press ENTER”，敲完回车后请等待一下，设备需要一定的时间才能进入到命令行界面（具体的时间视产品而定）4 请在用户视图（如<Quidway>）输入”system-view”（输入”sys”即可）进入系统视图(如[Quidway])5 对使用的端口、vlan、interface vlan进行详细的描述6 如果配置了telnet用户，一定要设置权限或配置super密码7 除了S5516使用SFP模块，S8016和S6500系列使用模块，其它产品使用模块不可以带电插拔8 某产品使用其它产品模块前请确认该模块是否可以混用9 配置acl时请注意掩码配置是否准确10 二层交换机配置管理IP后，请确保管理vlan包含了管理报文到达的端口11 配置完毕后请在用户视图下（如<Quidway>）采用save命令保存配置12 请确保在设备保存配置的时候不掉电，否则可能会导致配置丢失13 如果要清除所有配置，请在用户视图下（如<Quidway>）采用resetsaved-configuration，并重启交换机注：其他配置需注意的地方请参考每部分内容后面的注明LANSW IT CH日常维护基本操作1 基本操作1.1 常用命令新旧对照列表常用命令新旧对照表旧新旧新show display access-list aclno undo acl eaclexit quitwrite save show version disp versionerase reset show run disp current-configurationshow tech-support disp diagnostic-informationshow start disp saved-configurationrouter ospf ospfrouter bgp bgprouter rip riphostname sysnameuser local-user0 simple7 ciphermode link-typemulti hybrid注意:1. disp是display的缩写，在没有歧义时LANSW IT CH会自动识别不完整词2. disp cur显示LANSW IT CH当前生效的配置参数3. disp和ping命令在任何视图下都可执行，不必切换到系统视图4. 删除某条命令，一般的命令是undo xxx，另一种情况是用其他的参数代替现在的参数，如有时虽然xxx abc无法使用undo删除，但是可以修改为xxx def以太网端口链路类型介绍以太网端口有三种链路类型：Access、Hybrid和Trunk。

AC6005安装使用指导

AC6005安装使用指导一、设备安装1.设备位置选择首先需要选择一个合适的位置安装设备，保证设备能够提供最佳的信号覆盖范围。

选择的位置应该离用户较近，并且没有物理障碍物阻挡。

2.设备连接将设备的电源线插入插座，并连接好设备的网线接口。

将网线接口连接到现有的网络设备上，如交换机等。

3.设备开机接通电源后，等待设备自检完成，指示灯都变为绿色即表示设备开机成功。

二、设备配置1.登录设备打开电脑的浏览器，输入设备的管理地址（默认为192.168.1.1），浏览器会显示AC6005的登录页面。

输入默认的用户名和密码（admin/admin），点击登录按钮即可登录设备的管理界面。

2.设备初始化配置首次登录设备后，需要进行设备的初始化配置。

根据页面上的指引，设置设备的基本配置信息，包括设备的名称、管理IP、网关IP等。

完成配置后点击保存生效。

3.WLAN配置在设备管理界面的导航栏中选择“WLAN配置”，进入WLAN配置页面。

点击“新增”按钮，设置无线网络的参数，包括SSID、认证方式、加密方式等。

点击保存生效后，新的无线网络即可生效。

4.认证方式配置在设备管理界面的导航栏中选择“无线认证”选项，进入无线认证页面。

根据需要选择合适的认证方式，如MAC地址认证、Portal认证等，并进行相应的配置。

点击保存生效后，认证方式即可生效。

5.安全策略配置在设备管理界面的导航栏中选择“安全策略管理”，进入安全策略页面。

根据实际需求设置设备的安全策略，包括流量过滤、防火墙等。

点击保存生效后，安全策略即可生效。

6.客户端管理在设备管理界面的导航栏中选择“客户端管理”，进入客户端管理页面。

可以查看当前连接到设备的客户端列表，并进行相应的管理操作，如禁用指定客户端、限制客户端带宽等。

7.系统管理在设备管理界面的导航栏中选择“系统管理”，进入系统管理页面。

在该页面可以进行设备的管理操作，如修改设备的管理密码、备份和恢复配置等。

华为AC6005配置

<AC6005> dis cu#http secure-server ssl-policy default_policyhttp server enable#vlan batch 132 to 133 254 to 255#authentication-profile name dot1x_authen_profile authentication-profile name mac_authen_profile authentication-profile name portal_authen_profile authentication-profile name macportal_authen_profile #dot1x-access-profile name dot1x_access_profilemac-access-profile name mac_access_profile#dhcp enable#diffserv domain default#vlan 132description wifi_guestvlan 133description wifi_vlanvlan 254description AP_Managervlan 255description GuanLi#radius-server template default#pki realm defaultenrollment self-signed#ssl policy default_policy type serverpki-realm default#free-rule-template name default_free_rule#portal-access-profile name portal_access_profile#aaaauthentication-scheme defaultauthentication-scheme radiusauthentication-mode radiusauthorization-scheme defaultaccounting-scheme defaultdomain defaultdomain default_adminlocal-user admin password irreversible-cipher %^%#KuCo:[@~wX1HAU7-JB[Ld#Fm"4HG3~r\iw/-WKABtlIS;E9P&~^k2-5n9|:;%^%#local-user admin privilege level 15local-user admin service-type telnet ssh http#interface Vlanif1ip address 169.254.1.1 255.255.0.0#interface Vlanif132#interface Vlanif133#interface Vlanif254ip address 192.168.254.254 255.255.255.0dhcp select interface#interface Vlanif255description hulian-coreip address 192.168.255.250 255.255.255.0#interface GigabitEthernet0/0/1description link to ap1port link-type trunkport trunk pvid vlan 254port trunk allow-pass vlan 132 to 133 254#interface GigabitEthernet0/0/2description link to ap2port link-type trunkport trunk pvid vlan 254port trunk allow-pass vlan 132 to 133 254#interface GigabitEthernet0/0/3#interface GigabitEthernet0/0/4#interface GigabitEthernet0/0/5#interface GigabitEthernet0/0/6port link-type accessport default vlan 255#interface GigabitEthernet0/0/7#interface GigabitEthernet0/0/8description Link_TO_CORE_g0/0/23port link-type trunkport trunk allow-pass vlan 2 to 4094#interface NULL0#undo snmp-agent#stelnet server enableundo telnet ipv6 server enablessh server secure-algorithms cipher aes256_ctr aes128_ctr aes256_cbc aes128 3desssh server secure-algorithms hmac sha2_256 sha2_256_96 sha1 sha1_96 md5 md5_96ssh client secure-algorithms cipher aes256_ctr aes128_ctr aes256_cbc aes128 3desssh client secure-algorithms hmac sha2_256 sha2_256_96 sha1 sha1_96 md5 md5_96#ip route-static 0.0.0.0 0.0.0.0 192.168.255.253#capwap source interface vlanif254#user-interface con 0authentication-mode passwordset authentication password cipher %^%#oi@!5.!w`9F.1VP~99tC@z~*NhpWF*m+6hTY:Fz/$FJHPf+(p+anKDE>o|_:%^%#user-interface vty 0 4authentication-mode aaaprotocol inbound telnetuser-interface vty 16 20protocol inbound all#wlantraffic-profile name defaultsecurity-profile name defaultsecurity-profile name default-wdssecurity wpa2 psk pass-phrase %^%#AEY=$4y+j<tQ:7F~~GXDe~Q6(|@Ul/P]`k7HQ3B$%^%# aes security-profile name default-meshsecurity wpa2 psk pass-phrase %^%#P"5[X@Jy!%6$J}!wL4PM{Ha<:13\g:x|:K6,S=A'%^%# aes security-profile name wlan-security1security wpa2 psk pass-phrase %^%#qlg09RO1u/fccyU";Gn~3tBGF-"X>G)NEq!@zCIB%^%# aes security-profile name wlan-security2security wpa2 psk pass-phrase %^%#P$cW#@s:%Zim$9Q4m_S(VmOdR-n{kD6rO-HE2f0X%^%# aesssid-profile name defaultssid-profile name wlan-VIPssid TEST-VIPssid-profile name wlan-Groupssid TEST-Groupvap-profile name defaultvap-profile name wlan-vap1service-vlan vlan-id 132ssid-profile wlan-VIPsecurity-profile wlan-security2vap-profile name wlan-vap2service-vlan vlan-id 133ssid-profile wlan-Groupsecurity-profile wlan-security1wds-profile name defaultmesh-handover-profile name defaultmesh-profile name defaultregulatory-domain-profile name defaultregulatory-domain-profile name profile-nameregulatory-domain-profile name domain1air-scan-profile name defaultrrm-profile name defaultradio-2g-profile name defaultradio-5g-profile name defaultwids-profile name defaultap-system-profile name defaultprovision-apport-link-profile name defaultwired-port-profile name defaultap auth-mode no-authap-group name defaultap-group name ap-group1regulatory-domain-profile domain1radio 0vap-profile wlan-vap1 wlan 1vap-profile wlan-vap2 wlan 2radio 1vap-profile wlan-vap1 wlan 1vap-profile wlan-vap2 wlan 2ap-id 0 type-id 50 ap-mac 9c50-ee0f-72e0 ap-sn 21500827592SGA903367ap-group ap-group1ap-id 1 type-id 50 ap-mac 9c50-ee33-76a0 ap-sn 21500827592SGB905024ap-group ap-group1 #undo ntp-service enable #return<AC6005>。

常用拓扑案例以及图标v1

堆叠交换机
堆叠CE交换机
堆叠TOR交换机
华为图标库3.0
交换机&WLAN
转发器
防火墙
RRU
Beacon设备
LAN Switch
SPU单板
VSwitch+VM 1
VSwitch+VM 2
Vswitch 1
Vswitch 2
华为图标库3.0
服务器
通用服务器
邮件服务器
打印服务器
FTP服务器
日志告警服务器
Eth-trunk Backup
VRRP
SSL VPN
远程办公员工
IPSEC VPN 服务器群组
分支路由
1G Copper
AC6605
USG6380 Eth-trunk 深信服AC Eth-trunk
Eth-trunk
S7706
SSL VPN 服务器群组
远程办公员工
POE交换机无线AP
ISP1
Queue+packet
通道
研发部
市场部
行政部
DSLAM
华为图标库3.0
公共
UMG
CX城域业务平台
Node
MME/SGW
防病毒专家系统
测试仪
核心路由器
直线（1.5pt）虚线（0.75pt）箭头（0.75pt）
华为图标库3.0
终端
笔记本电脑
APPLE终端
数码相机
传真机
蓝牙
电视
复印机
音箱
电话
多媒体软终端Βιβλιοθήκη 硬盘录像机接入交换机
POE交换机
摄像头
摄像头
出口网关
总部拓扑图

ac6005 8 8ap无线方案

AC6005 8 8AP 无线方案简介AC6005 8 8AP 是一种无线基站设备，采用先进的无线技术，适用于中小型企业、学校、医院等场所。

它提供可靠的无线信号覆盖，支持多种无线接入技术，为用户提供高速、稳定的无线网络服务。

特点和优势•高性能：AC6005 8 8AP 支持高达600Mbps的无线传输速率，提供卓越的网络性能和用户体验。

•大容量：该方案能够同时支持多个用户接入，满足中小型场所对高并发无线接入的需求。

•无线漫游：通过无线漫游技术，AC6005 8 8AP 可以实现用户在覆盖范围内的平滑切换，保持无缝连接。

•灵活部署：支持多种无线接入方式，如802.11a/b/g/n/ac，用户可以根据需求选择适合的接入方式进行部署。

•安全性强：AC6005 8 8AP 支持多种安全机制，包括WPA/WPA2加密、MAC地址过滤、SSID隐藏等，以保障无线网络的安全性。

•管理简便：AC6005 8 8AP 配备了友好的Web界面和管理工具，用户可以轻松配置和管理无线网络。

技术规格•无线标准：802.11a/b/g/n/ac•传输速率：600Mbps•支持频段：2.4GHz和5GHz•控制器容量：最多支持8个接入点•安全机制：WPA/WPA2加密、MAC地址过滤、SSID隐藏等•管理接口：Web界面、CLI命令行应用场景AC6005 8 8AP 无线方案适用于以下场所： 1. 中小型企业：提供办公区域的无线覆盖，满足员工的移动办公需求。

2. 学校：提供校园区域的无线覆盖，支持师生的无线上网和教学资源共享。

3. 医院：提供医院内部的无线覆盖，方便医生和护士进行病历查阅和交流。

安装和配置以下是安装和配置 AC6005 8 8AP 无线方案的基本步骤：1.将 AC6005 8 8AP 设备连接到电源，并将其与交换机或路由器连接。

2.找到设备的默认管理IP地址，并在浏览器中输入该地址以打开设备管理界面。

3.在管理界面中，按照提示进行基本设置，包括网络配置、SSID设置、无线安全设置等。

华为WLAN架构规划

AC作为L3设备（续）
Radius 服务器
接入交换机核心交换机 DHCP 服务器r
AP VLAN 11
AP VLAN 12
AC VLAN 100
AC Router
网关 AP region 101 SSID : Huawei101 AP region102 SSID:Huawei102
CORE Sitch route config: route static 10.1.101.0 255.255.255.0 10.1.100.100 route static 10.1.102.0 255.255.255.0 10.1.100.100 AC route config : route static 0.0.0.0 0.0.0.0 10.1.100.1
Page17
AC作为L2设备
Radius 服务器
接入交换机
网关
核心交换机 DHCP 服务器r
AP VLAN 11
AP VLAN 12
Dot1Q VLANs 100,101,102
AC 路由器
AP region 101 SSID : Huawei101
AP region102 SSID:Huawei102

使用AC做为网关：

AC的接口IP是用户的网关，外部路由器和AC应该有静态路由或动态路由的配置，DHCP服
务器可以在AC或外部设备上，如果DHCP服务器是在外部设备上，需要配置DHCP中继。
Copyright © 2013 Huawei Technologies Co., Ltd. All rights reserved.
Page14
二层组网

应用场景：

HUAWEI AC6005系列访问控制器数据手册说明书

HUAWEI AC6005 SeriesAccess Controller DatasheetCopyright © Huawei Technologies Co., Ltd. 2013. All rights reserved.No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of HuaweiTechnologies Co., Ltd.Trademark Notice, HUAWEI, and are trademarks or registered trademarks of Huawei Technologies Co., Ltd.Other trademarks, product, service and company names mentioned are the property of their respective owners.General DisclaimerThe information in this document may contain predictive statements including,without limitation, statements regarding the future financial and operating results,future product portfolio, new technology, etc. There are a number of factors thatcould cause actual results and developments to differ materially from thoseexpressed or implied in the predictive statements. Therefore, such information isprovided for reference purpose only and constitutes neither an offer nor an1The Huawei AC6005 access controller (AC) providessmall- to medium-size enterprise networks with high-performance features and built-in reliability,and scalability. This large-capacity AC integrates 1,000M Ethernet switch functionality for both wired andwireless access control when deploying access points(APs), as well as extending hotspot coverage. Usedwith Huawei Premium Series APs, Enhanced SeriesAPs and Standard Series APs, the AC6005 delivers aﬂexible networking solution that is easy to install andmaintain for campus, industrial, and mid-size enterprisenetworks.Huawei offers two AC6005 models:Model AC6005-8•Model AC6005-8-PWR with PoE support•Advanced Network FeaturesThe Huawei Model AC6005 provides AP connectionand control for small- to large-size enterprise andcampus networks. The AC6005 offers these features:licensing for multiple APs•Flexible networking and forwarding•Compatibility with 802.11a/b/g/n protocols•Comprehensive user policy management and•authorization controlSecure and reliable N+1 backup•Centralized authentication and distributed•forwarding4 Gbit/s switching capacity•Centralized AP management and maintenance•Integrated WLAN management•Multiple interface support8 GE interfaces•One RJ-45 serial maintenance interface•One mini-USB serial maintenance interface•Large-capacity, high-performance designwith proven reliabilityConnections for up to 128 APs per AC•Backplane capacity of 4Gbit/s•PoE support for maximum power on 8 ports•Port backup using the Link Aggregation Control•Protocol (LACP) or Multiple Spanning Tree Protocol(MSTP)Easy to install and easy to maintainConvenient size (320 mm•×233.6 mm×43.6 mm): smallenough to ﬁt a standard cabinetLocal GUI-based management system•eSight network management system support•Support for an intra-board temperature probe, which•monitors the operating environment of the AC in real timeDynamic energy managementLow-noise fans, which dynamically adjust to load changes•to keep equipment noise and power consumption lowAutomatic power-saving mode, which engages during•idle operation (when no peer device is connected)Highly integrated, energy-saving design, which provides•even higher performance and lower power consumptionwhen coupled with an intelligent device managementsystemeSightServicemanagementService accesslayerUser layerInternetAggregation switchAC6005L2 switchHUAWEI AC6005 Series Access Controller DatasheetHUAWEI AC6005 Series Access Controller Datasheet 2HUAWEI AC6005 Series Access Controller Datasheet3HUAWEI AC6005 Series Access Controller Datasheet4Chain NetworkingIn chain networking, APs or access switches directly connect to the AC6005. The AC6005 functions as both an AC and an aggregation switch to forward and process data and management services for the APs.In chain networking scenarios, the AC6005 sets up CAPWAP tunnels with APs to con ﬁgure and manage these APs. Service data of wireless users can be forwarded between APs and the AC6005 over CAPWAP data tunnels or be directly forwarded by APs.The AC6005 has a wired switching unit with powerful access, aggregation, and switching capabilities. Direct forwarding is often used in chain networking scenarios. This networking mode simpli ﬁes network architecture and isused with large-scale and centralized WLANs.eSight InternetAggregation switchAC6005L2 switchWDS and Mesh NetworkingNetworkAC6005MESHWDSswitchServicemanagementlayerServiceaccess layerUser layerWDS and Mesh networking use a distributed network of APs. The WDS and Mesh networks connect to an AC through a switch, and the AC connects to the network through a network device, such as a gateway or an aggregationswitch. The WDS and Mesh connect to user stations (STAs).WDS and MESH networking are used to expand wireless coverage areas for outdoor wireless deployments.HUAWEI AC6005 Series Access Controller Datasheet5HUAWEI AC6005 Series Access Controller Datasheet6AC6005 Speci ﬁcationsHUAWEI AC6005 Series Access Controller Datasheet7HUAWEI AC6005 Series Access Controller Datasheet8HUAWEI AC6005 Series Access Controller Datasheet9HUAWEI AC6005 Series Access Controller Datasheet10Wired featuresAC6005 purchase and accessoryinformation。

华为AC6005配置实例

华为无线控制器AC6005 配置（直接转发）∙∙∙Switch的配置文件∙#∙sysname Switch∙#∙vlan batch 100 to 101∙#∙interface GigabitEthernet0/0/1∙ port link-type trunk∙ port trunk pvid vlan 100∙ port trunk allow-pass vlan 100 to 101∙ port-isolate enable group 1∙#∙interface GigabitEthernet0/0/2∙ port link-type trunk∙ port trunk allow-pass vlan 100 to 101∙#return∙Router的配置文件∙#∙sysname Router∙#∙vlan batch 101∙#∙interface Vlanif101∙ ip address 10.23.101.2 255.255.255.0∙#∙interface GigabitEthernet1/0/0∙ port link-type trunk∙ port trunk allow-pass vlan 101∙#∙return∙AC的配置文件∙#∙ sysname AC∙#∙vlan batch 100 to 101∙#∙dhcp enable∙#∙interface Vlanif100∙ ip address 10.23.100.1 255.255.255.0∙ dhcp select interface∙#∙interface Vlanif101∙ ip address 10.23.101.1 255.255.255.0∙ dhcp select interface∙#∙interface GigabitEthernet0/0/1∙ port link-type trunk∙ port trunk allow-pass vlan 100 to 101∙#∙interface GigabitEthernet0/0/2∙ port link-type trunk∙ port trunk allow-pass vlan 101∙#∙capwap source interface vlanif100∙#∙wlan∙ security-profile name wlan-net∙ security wpa-wpa2 psk pass-phrase %^%#m"tz0f>~7.[`^6RWdzwCy16hJj/Mc!,}s`X*B]}A%^%# aes∙ ssid-profile name wlan-net∙ ssid wlan-net∙ vap-profile name wlan-net∙ service-vlan vlan-id 101∙ ssid-profile wlan-net∙ security-profile wlan-net∙ regulatory-domain-profile name default∙ rrm-profile name default∙ calibrate auto-channel-select disable∙ calibrate auto-txpower-select disable∙ ap-group name ap-group1∙ radio 0∙ vap-profile wlan-net wlan 1∙ radio 1∙ vap-profile wlan-net wlan 1∙ ap-id 0 type-id 35 ap-mac 60de-4476-e360 ap-sn 210235554710CB000042 ∙ ap-name area_1∙ ap-group ap-group1∙ radio 0∙ channel 20mhz 6∙ eirp 127∙ radio 1∙ channel 20mhz 149∙ eirp 127∙#return华为无线控制器AC6005 配置（隧道转发）∙Switch的配置文件∙#∙sysname Switch∙#∙vlan batch 100∙#∙interface GigabitEthernet0/0/1∙ port link-type trunk∙ port trunk pvid vlan 100∙ port trunk allow-pass vlan 100∙ port-isolate enable group 1∙#∙interface GigabitEthernet0/0/2∙ port link-type trunk∙ port trunk allow-pass vlan 100∙#return∙Router的配置文件∙#∙sysname Router∙#∙vlan batch 101∙#∙interface Vlanif101∙ ip address 10.23.101.2 255.255.255.0∙#∙interface GigabitEthernet1/0/0∙ port link-type trunk∙ port trunk allow-pass vlan 101∙#∙return∙AC的配置文件∙#∙ sysname AC∙#∙vlan batch 100 to 101∙#∙dhcp enable∙#∙interface Vlanif100∙ ip address 10.23.100.1 255.255.255.0∙ dhcp select interface∙#∙interface Vlanif101∙ ip address 10.23.101.1 255.255.255.0∙ dhcp select interface∙#∙interface GigabitEthernet0/0/1∙ port link-type trunk∙ port trunk allow-pass vlan 100∙#∙interface GigabitEthernet0/0/2∙ port link-type trunk∙ port trunk allow-pass vlan 101∙#∙capwap source interface vlanif100∙#∙wlan∙ security-profile name wlan-net∙ security wpa-wpa2 psk pass-phrase %^%#m"tz0f>~7.[`^6RWdzwCy16hJj/Mc!,}s`X*B]}A%^%# aes∙ ssid-profile name wlan-net∙ ssid wlan-net∙ vap-profile name wlan-net∙ forward-mode tunnel∙ service-vlan vlan-id 101∙ ssid-profile wlan-net∙ security-profile wlan-net∙ regulatory-domain-profile name default∙ rrm-profile name default∙ calibrate auto-channel-select disable∙ calibrate auto-txpower-select disable∙ ap-group name ap-group1∙ radio 0∙ vap-profile wlan-net wlan 1∙ radio 1∙ vap-profile wlan-net wlan 1∙ ap-id 0 type-id 35 ap-mac 60de-4476-e360 ap-sn 210235554710CB000042 ∙ ap-name area_1∙ ap-group ap-group1∙ radio 0∙ channel 20mhz 6∙ eirp 127∙ radio 1∙ channel 20mhz 149∙ eirp 127∙#return配置旁挂二层组网直接转发∙SwitchA的配置文件∙#∙sysname SwitchA∙#∙vlan batch 100 to 101∙#∙interface GigabitEthernet0/0/1∙ port link-type trunk∙ port trunk pvid vlan 100∙ port trunk allow-pass vlan 100 to 101∙ port-isolate enable group 1∙#∙interface GigabitEthernet0/0/2∙ port link-type trunk∙ port trunk allow-pass vlan 100 to 101∙#return∙SwitchB的配置文件∙#∙sysname SwitchB∙#∙vlan batch 100 to 101∙#∙dhcp enable∙#∙interface Vlanif101∙ ip address 10.23.101.1 255.255.255.0∙ dhcp select interface∙ dhcp server gateway-list 10.23.101.2∙#∙interface GigabitEthernet0/0/1∙ port link-type trunk∙ port trunk allow-pass vlan 100 to 101∙#∙interface GigabitEthernet0/0/2∙ port link-type trunk∙ port trunk allow-pass vlan 100∙#∙interface GigabitEthernet0/0/3∙ port link-type trunk∙ port trunk allow-pass vlan 101∙#return∙Router的配置文件∙#∙sysname Router∙#∙vlan batch 101∙#∙interface Vlanif101∙ ip address 10.23.101.2 255.255.255.0∙#∙interface GigabitEthernet1/0/0∙ port link-type trunk∙ port trunk allow-pass vlan 101∙#∙return∙AC的配置文件∙#∙ sysname AC∙#∙vlan batch 100 to 101∙#∙dhcp enable∙#∙interface Vlanif100∙ ip address 10.23.100.1 255.255.255.0∙ dhcp select interface∙#∙interface GigabitEthernet0/0/1∙ port link-type trunk∙ port trunk allow-pass vlan 100∙#∙capwap source interface vlanif100∙#∙wlan∙ security-profile name wlan-net∙ security wpa-wpa2 psk pass-phrase %^%#m"tz0f>~7.[`^6RWdzwCy16hJj/Mc!,}s`X*B]}A%^%# aes ∙ ssid-profile name wlan-net∙ ssid wlan-net∙ vap-profile name wlan-net∙ service-vlan vlan-id 101∙ ssid-profile wlan-net∙ security-profile wlan-net∙ regulatory-domain-profile name default∙ rrm-profile name default∙ calibrate auto-channel-select disable∙ calibrate auto-txpower-select disable∙ ap-group name ap-group1∙ radio 0∙ vap-profile wlan-net wlan 1∙ radio 1∙ vap-profile wlan-net wlan 1∙ ap-id 0 type-id 35 ap-mac 60de-4476-e360 ap-sn 210235554710CB000042 ∙ ap-name area_1∙ ap-group ap-group1∙ radio 0∙ channel 20mhz 6∙ eirp 127∙ radio 1∙ channel 20mhz 149∙ eirp 127∙#return配置旁挂二层组网隧道转∙SwitchA的配置文件∙#∙sysname SwitchA∙#∙vlan batch 100∙#∙interface GigabitEthernet0/0/1∙ port link-type trunk∙ port trunk pvid vlan 100∙ port trunk allow-pass vlan 100∙ port-isolate enable group 1∙#∙interface GigabitEthernet0/0/2∙ port link-type trunk∙ port trunk allow-pass vlan 100∙#return∙SwitchB的配置文件∙#∙sysname SwitchB∙#∙vlan batch 100 to 101∙#∙dhcp enable∙#∙interface Vlanif101∙ ip address 10.23.101.1 255.255.255.0 ∙ dhcp select interface∙ dhcp server gateway-list 10.23.101.2 ∙#∙interface GigabitEthernet0/0/1∙ port link-type trunk∙ port trunk allow-pass vlan 100∙#∙interface GigabitEthernet0/0/2∙ port link-type trunk∙ port trunk allow-pass vlan 100 to 101 ∙#∙interface GigabitEthernet0/0/3∙ port link-type trunk∙ port trunk allow-pass vlan 101∙#return∙Router的配置文件∙#∙sysname Router∙#∙vlan batch 101∙#∙interface Vlanif101∙ ip address 10.23.101.2 255.255.255.0 ∙#∙interface GigabitEthernet1/0/0∙ port link-type trunk∙ port trunk allow-pass vlan 101∙#∙return∙AC的配置文件∙#∙ sysname AC∙#∙vlan batch 100 to 101∙#∙dhcp enable∙#∙interface Vlanif100∙ ip address 10.23.100.1 255.255.255.0∙ dhcp select interface∙#∙interface GigabitEthernet0/0/1∙ port link-type trunk∙ port trunk allow-pass vlan 100 to 101∙#∙capwap source interface vlanif100∙#∙wlan∙ calibrate enable schedule time 03:00:00∙ security-profile name wlan-net∙ security wpa-wpa2 psk pass-phrase %^%#m"tz0f>~7.[`^6RWdzwCy16hJj/Mc!,}s`X*B]}A%^%# aes∙ ssid-profile name wlan-net∙ ssid wlan-net∙ vap-profile name wlan-net∙ forward-mode tunnel∙ service-vlan vlan-id 101∙ ssid-profile wlan-net∙ security-profile wlan-net∙ regulatory-domain-profile name default∙ dca-channel 5g channel-set 149,153,157,161∙ air-scan-profile name wlan-airscan∙ scan-channel-set dca-channel∙ rrm-profile name wlan-rrm∙ radio-2g-profile name wlan-radio2g∙ rrm-profile wlan-rrm∙ air-scan-profile wlan-airscan∙ radio-5g-profile name wlan-radio5g∙ rrm-profile wlan-rrm∙ air-scan-profile wlan-airscan∙ ap-group name ap-group1∙ radio 0∙ radio-2g-profile wlan-radio2g∙ vap-profile wlan-net wlan 1∙ radio 1∙ radio-5g-profile wlan-radio5g∙ vap-profile wlan-net wlan 1∙ ap-id 0 type-id 35 ap-mac 60de-4476-e360 ap-sn 210235554710CB000042 ∙ ap-name area_1∙ ap-group ap-group1∙#return。

华为AC6005内置portal服务配置指南

AC6005内置portal服务器配置设备配置网络配置，vlanif 88 管理AP Vlanif 100 为业务vlan 为终端分配地址开启DHCP[AC6005]dhcp enableInfo: The operation may take a few seconds. Please wait for a moment.done.创建VLAN 88 和100[AC6005]vlan batch 88 100Info: This operation may take a few seconds. Please wait for a moment...done.配置与上行设备通信接口的地址[AC6005]int Vlanif 1[AC6005-Vlanif1]ip address 192.168.1.254 255.255.255.0[AC6005-Vlanif1]dhcp select interface[AC6005-Vlanif1]dhcp server dns-list 61.153.177.196配置VLAN 88和100的网关[AC6005]int vlan 88[AC6005-Vlanif88]ip address 192.168.88.1 255.255.255.0[AC6005-Vlanif88]dhcp select interface[AC6005]int vlan 100[AC6005-Vlanif100]ip address 192.168.100.1 255.255.255.0[AC6005-Vlanif100]dhcp select interface[AC6005-Vlanif100]dhcp server dns-list 61.153.177.196配置AC与AP相连的端口[AC6005]int g0/0/8[AC6005-GigabitEthernet0/0/8]port link-type trunk[AC6005-GigabitEthernet0/0/8]port trunk pvid vlan 88[AC6005-GigabitEthernet0/0/8]undo port trunk allow-pass vlan 1[AC6005-GigabitEthernet0/0/8]port trunk allow-pass vlan 88 100[AC6005]int g0/0/7[AC6005-GigabitEthernet0/0/7]port link-type a[AC6005-GigabitEthernet0/0/7]port link-type access[AC6005-GigabitEthernet0/0/7]port default vlan 100[AC6005]ip route-static 0.0.0.0 0.0.0.0 192.168.1.1创建登录用户[AC6005]aaa[AC6005-aaa]local-user huawei password cipher huawei123Info: Add a new user.创建登录用户最大连接数[AC6005-aaa]local-user huawei access-limit 5开启portal的web访问认证功，配置内置portal 的SSL策略和端口号（443已经被web端口启用，不可用）[AC6005]portal local-server ip 192.168.100.1[AC6005]portal local-server https ssl-policy default_policy port 2000Info: Load web file successfully.配置免认证规则[AC6005]portal free-rule 0 destination ip 61.153.177.196 mask 255.255.255.255Info: This free rule configured successfully, only <0-63> can be commit to AP.配置wlan-ess接口，在接口调用内置portal与允许的认证域[AC6005]interface Wlan-Ess 1[AC6005-Wlan-Ess1]port hybrid pvid vlan 100[AC6005-Wlan-Ess1]port hybrid untagged vlan 100[AC6005-Wlan-Ess1]portal local-server enable[AC6005-Wlan-Ess1]permit-domain name default配置AC与AP之间的隧道通信[AC6005]wlan[AC6005-wlan-view]wlan ac source interface Vlanif 88配置AP的认证方式为免认证[AC6005-wlan-view]ap-auth-mode no-auth查看AP[AC6005-wlan-view]dis ap allAll AP information(Normal-1,UnNormal-0):------------------------------------------------------------------------------AP AP AP Profile AP AP/RegionID Type MAC ID State Sysname------------------------------------------------------------------------------0 AP6310SN-GN 4862-7602-35d0 0/0 normal ap-0------------------------------------------------------------------------------Total number: 1配置名为wmm1的wmm模板，参数采用默认[AC6005-wlan-view]wmm-profile name wmm1 id 1配置名为radio1的radio模板，参数采用默认，调用wmm模板[AC6005-wlan-view]radio-profile name radio1 id 1、[AC6005-wlan-radio-prof-radio1]wmm-profile id 1配置名为traffic1 的traffic模板，参数采用默认[AC6005-wlan-view]traffic-profile name traffic1 id 1配置名为security1的安全模板，认证方式为WEP认证，开放认证，不加密[AC6005-wlan-view]security-profile name scurity1 id 1创建名为service的服务集，并绑定流量模板和安全模板，wlan-ess 接口[AC6005-wlan-view]service-set name service1 id 1[AC6005-wlan-service-set-service1]wlan-ess 1[AC6005-wlan-service-set-service1]ssid [AC6005-wlan-service-set-service1]traffic-profile id 1[AC6005-wlan-service-set-service1]security-profile id 1[AC6005-wlan-service-set-service1]service-vlan 100Info: This action may cause service interruption if you don't execute commit command.配置AP对应的VAP，下发Wlan服务，[AC6005-wlan-view]ap 0 radio 0[AC6005-wlan-radio-0/0]radio-profile id 1Warning: Modify the Radio type may cause some parameters of Radio resume default value, are you sure to continue?[Y/N]:y[AC6005-wlan-radio-0/0]service-set id 1 wlan 1下发AP的WLAN配置[AC6005-wlan-view]commit allWarning: Committing configuration may cause service interruption,continue?[Y/N]y搜索SSID 测试成功。

ac6005 8 8ap无线方案

ac6005 8 8ap无线方案无线网络在现代生活中扮演着重要的角色，它不仅为人们带来了便利，还推动了科技的发展和社会的进步。

随着智能设备的普及，对无线网络的需求也越来越大。

为了满足这一需求，AC6005 8 8AP无线方案应运而生。

本文将介绍AC6005无线方案的特点和应用场景。

AC6005 8 8AP无线方案是一种高性能的无线局域网解决方案。

它由AC6005控制器和8个8AP组成。

AC6005控制器是整个系统的核心，负责管理和控制无线网络的运行。

而8个8AP则是无线接入点，它们负责向终端用户提供无线网络信号。

AC6005 8 8AP无线方案的特点有以下几点。

首先，它具有强大的处理能力和高性能，可以同时支持大量的终端设备接入，保证网络的稳定和流畅。

其次，AC6005 8 8AP无线方案采用了先进的MIMO技术，可以提供更广阔的覆盖范围和更高的传输速度，满足不同场景的需求。

此外，AC6005 8 8AP无线方案还支持智能负载均衡和信号优化功能，确保网络资源的合理分配，提高用户体验。

AC6005 8 8AP无线方案适用于各种不同的场景。

首先，它可以应用于企业办公网络中。

在企业办公网络中，往往有很多终端设备同时连接，要求网络稳定且能够快速传输数据。

AC6005 8 8AP无线方案可以满足这一需求，提供可靠的无线网络服务。

其次，AC6005 8 8AP无线方案还可以应用于公共场所、商场和酒店等地方。

这些地方往往人流量大，对网络的要求也更高。

AC6005 8 8AP无线方案可以提供稳定的无线信号，为用户提供快速、便捷的网络连接。

总之，AC6005 8 8AP无线方案是一种高性能的无线局域网解决方案。

它具备强大的处理能力和高性能，适用于各种场景，包括企业办公网络、公共场所和商场等。

AC6005 8 8AP无线方案将无线网络带入了一个新的时代，为用户提供了更好的网络体验。

华为AC6005配置实例

AC6005安装使用指导

华为AC6005配置实例

华为Wlan产品方案介绍

Huawei AC6005 系列无线接入控制器 产品描述 01

华为 AC6005 无线访问控制器数据手册说明书

华为路由器配置实例

华为-MA5600-配置指南01-1操作控制台配置

华为交换机配置实例

AC6005安装使用指导

华为AC6005配置

常用拓扑案例以及图标v1

ac6005 8 8ap无线方案

华为WLAN架构规划

HUAWEI AC6005系列访问控制器数据手册说明书

华为AC6005配置实例

华为AC6005内置portal服务 配置指南

ac6005 8 8ap无线方案

Huawei AC6005 系列无线接入控制器产品描述 01

华为AC6005内置portal服务配置指南