WlAN是通过无线技术构建无线局域网络，无线局域网络根据应用范围可以分为：WPAN（个人无线网络）WLAN（无线局域网wifi）WMAN（无线城域网）WWAN（无线广域网5G）。IEEE802.11是现今无线局域网的标准 wifi=802.11，企业WLAN产品包括：AP、AC、POE交换机和工作站（手机、平板、笔记本、等）。
AP分为：FAT AP（胖AP）适用于家庭，独立工作于配置，功能单一成本低
FIT AP（瘦AP）适用于企业，需要配合AC使用，由AC统一管理功能丰富，对网络维护 人员要求高，成本要相对高点。
CAPWAP隧道技术：AP于AC之前的状态于维护都通过CAPWAP隧道技术进行管理于业务下发。CAPWAP隧道技术是基于UDP进行传输的应用层协议，使用端口号分别是：5246和5247。
隧道转发：AC链接AP的接口配置成access指定到管理Vlan。优点：集中管控、安全高；缺点：AC 负载大、延迟略高。适用场景：小规模、强管控、高安全。
直接转发：AC和AP的接口配置成trunk，pid设置成管理vlan，允许管理vlan和业务vlan通过。优点：转发效率高、AC 压力小；缺点：需配合交换机做策略。适用场景：大规模、高流量、高并发。
实验：一个AC多个VAP（虚拟AP）的实现-配置AP上线-通过隧道链接
第一步配置路由AR1：配置接口与静态路由确保网络通畅
[Huawei]sys AR [AR]interface GigabitEthernet 0/0/0 [AR-GigabitEthernet0/0/0]ip add 192.168.111.1 24 [AR-GigabitEthernet0/0/0]quit [AR]ip route-static 192.168.100.0 24 192.168.111.2 [AR]ip route-static 192.168.101.0 24 192.168.111.2 [AR]ip route-static 192.168.102.0 24 192.168.111.2第二步在AC上：划分VLAN、配置接口、配置DHCP、配置静态路由确保网络通畅
//给接口配置IP，这里的AC可以看成是一个二层交换机。 [Huawei]sys AC [AC]interface GigabitEthernet 0/0/1 [AC-GigabitEthernet0/0/1]port link-type access [AC-GigabitEthernet0/0/1]port default vlan 111 [AC-GigabitEthernet0/0/1]quit [AC]interface GigabitEthernet 0/0/2 [AC-GigabitEthernet0/0/2]port link-type access [AC-GigabitEthernet0/0/2]port default vlan 100 [AC-GigabitEthernet0/0/2]quit //划分Vlan：100是管理，101,102是业务，111是链接。 [AC]vlan batch 100 101 102 111 [AC]interface vlanif 111 [AC-Vlanif111]ip add 192.168.111.2 24 [AC-Vlanif111]quit [AC]interface Vlanif 100 [AC-Vlanif100]ip add 192.168.100.1 24 [AC-Vlanif100]interface Vlanif 101 [AC-Vlanif101]ip add 192.168.101.1 24 [AC-Vlanif101]interface Vlanif 102 [AC-Vlanif102]ip add 192.168.101.2 24 //给管理vlan和业务vlan配置DHCP服务并启动该服务。 [AC] dhcp enable [AC]ip pool vlan100 [AC-ip-pool-vlan100]network 192.168.100.0 mask 24 [AC-ip-pool-vlan100]gateway-list 192.168.100.1 [AC-ip-pool-vlan100]ip pool 101 [AC-ip-pool-101]network 192.168.101.0 mask 24 [AC-ip-pool-101]gateway-list 192.168.101.1 [AC-ip-pool-101]dns-list 8.8.8.8 [AC-ip-pool-101]ip pool 102 [AC-ip-pool-102]network 192.168.102.0 mask 24 [AC-ip-pool-102]gateway-list 192.168.102.1 [AC-ip-pool-102]dns-list 8.8.8.8 //将dhcp服务给不同的vlan [AC]interface vlanif 100 [AC-Vlanif100]dhcp select global [AC-Vlanif100]interface vlanif 101 [AC-Vlanif101]dhcp select global [AC-Vlanif101]interface vlanif 102 [AC-Vlanif102]dhcp select global [AC-Vlanif102]quit //配置静态路由确保网络通畅 [AC]ip route-static 0.0.0.0 0 192.168.111.1第三步配置AP上线
//指定和AP建立Capwap的地址或接口 [AC]capwap source interface Vlanif 100 [AC]wlan [AC-wlan-view]regulatory-domain-profile name default [AC-wlan-regulate-domain-default]country-code cn //设置国家代码 [AC-wlan-regulate-domain-defaultlquit [AC-wlan-view]ap auth-mode mac-auth //指定使用MAc地址身份验证 [AC-wlan-view]ap-id 1 ap-mac ffff-ffff-ffff [AC-wlan-viewlap-name ap1 [AC-wlan-view] regulatory-domain-profile default [AC]display ap all //查看AP情况查看AP情况，可以看到Uptim时间在发生变化。
第四步：配置SSID模版
[AC]wlan [AC-wlan-view]ssid-profile name sales-AP [AC-wlan-ssid-prof-ssid- sales-AP]ssid sales-AP [AC-wlan-ssid-prof-ssid-sales-AP]quit [AC-wlan-view]ssid-profile name Market-AP [AC-wlan-ssid-prof-ssid- Market-AP]ssid Market-AP [AC-wlan-ssid-prof-ssid- Market-AP]quit第五步：配置安全模版
[AC-wlan-view]security-profile name Sec-sales [Ac-wlan-sec-prof-Sec-sales]security wpa-wpa2 psk pass-phrase admin12345a aes [AC-wlan-sec-prof-sec-sales]quit [AC-wlan-view]security-profile name Sec-market [Ac-wlan-sec-prof-Sec-market]security wpa-wpa2 psk pass-phrase admin12345b aes [AC-wlan-sec-prof-Sec-marketlquit第六步：配置VAP模版
[AC-wlan-view]vap-profile name vap-sales [AC-wlan-vap-prof-vap-sales]forward-mode tunnel [AC-wlan-vap-prof-vap-sales]service-vlan vlan-id 101 [AC-wlan-vap-prof-vap-sales]ssid-profile sales-AP [AC-wlan-vap-prof-vap-sales]security-profile Sec-sales [AC-wlan-vap-prof-vap-sales]quit [Ac-wlan-viewlvap-profile name vap-market [AC-wlan-vap-prof-vap-marketlforward-mode tunnel [Ac-wlan-vap-prof-vap-marketlservice-vlan vlan-id 102 [AC-wlan-vap-prof-vap-market]ssid-profile market-AP [AC-wlan-vap-prof-vap-market]security-profile Sec-market [AC-wlan-vap-prof-vap-marketlquit第七步：在AP中应用VAP模板
[AC-wlan-view]ap-id 1 [AC-wlan-ap-group-ap-1]vap-proffjile vap-sales wlan 1 radio 0 [Ac-wlan-ap-group-ap-1]vap-profile vap-sales wlan 1 radio 1 [AC-wlan-ap-group-ap-1]quit [AC-wlan-ap-group-ap-1] vap-profile vap-market wlan 2 radio 0 [AC-wlan-ap-group-ap-1] vap-profile vap-market wlan 2 radio 1 [AC-wlan-ap-group-ap-1] quit最后：模拟无线链接即可
