Cấu hình VLAN trên AP1130AG routing-inter VLAN trong mạng wireless [Lưu trữ]

logmeinvietnam

25-09-2010, 09:18

Cấu hình VLAN trên AP1130AG routing-inter VLAN trong mạng wireless
Mô hình:

http://img213.imageshack.us/img213/6917/image001ljf.jpg

Yêu cầu:
1/ Kết nối sơ đồ như hình vẽ.
2/ Cấu hỉnh Vlan trên 2 AP 1130.
3/ Thực hiện routing inter vlan.
Thông số cấu hình như sau:
PC1(192.168.2.2) thuộc VLAN 2 tương ứng với SSID s_vlan2 trên AP1.
PC2(192.168.3.2) thuộc VLAN 3 tương ứng với SSID s_vlan3 trên AP1.
PC3(192.168.2.3) thuộc VLAN 2 tương ứng với SSID vlan2 trên AP2.
PC4(192.168.3.3) thuộc VLAN 3 tương ứng với SSID vlan3 trên AP2.
Các bước thực hiện:
Cấu hình AP1 bằng CLI, Cấu hình AP2 bằng web.
1. Cấu hình bằng CLI trên AP1
Bước 1: Đặt tên cho AP, tạo ra các SSID tương ứng với các vlan, quảng bá SSID ra ngoài thông qua các beacon:
ap#conf t
Enter configuration commands, one per line. End with CNTL/Z.
ap(config)#host AP1
AP1(config-line)#
AP1(config-line)#exi
AP1(config)#dot11 ssid s_vlan2
AP1(config-ssid)#vlan 2
AP1(config-ssid)#authentication open
AP1(config-ssid)#mbssid guest-mode
AP1(config-ssid)#exit
AP1(config)#
AP1(config)#dot11 ssid s_vlan3
AP1(config-ssid)#vlan 3
AP1(config-ssid)#authentication open
AP1(config-ssid)#mbssid guest-mode
AP1(config-ssid)#end

Bước 2: Bật interface Dot1Radio lên, áp các SSID vào, tạo ra các subinterfcae tương ứng với các vlan và cho các subinterface tham gia vào bridge-group:
AP1(config)#interface dot11Radio 0
AP1(config-if)#mbssid
AP1(config-if)#ssid s_vlan2
AP1(config-if)#ssid s_vlan3
AP1(config-if-ssid)#no shut
AP1(config-if)#exit
AP1(config)#interface dot11Radio 0.2
AP1(config-subif)#encapsulation dot1Q 2
AP1(config-subif)#bridge-group 2
AP1(config-subif)#exi
AP1(config)#interface dot11Radio 0.3
AP1(config-subif)#encapsulation dot1Q 3
AP1(config-subif)#bridge-group 3
AP1(config-subif)#exit
AP1(config)#

Bước 3: Tạo ra các subinterface tương ứng với các vlan trên interface FastEthernet 0, cho các subinterface tham gia vào bridge-group:
AP1(config)#interface fastEthernet 0.2
AP1(config-subif)#encapsulation dot1Q 2
AP1(config-subif)#bridge-group 2
AP1(config-subif)#exi
AP1(config)#int
AP1(config)#interface fastEthernet 0.3
AP1(config-subif)#encapsulation dot1Q 3
AP1(config-subif)#bridge-group 3
AP1(config-subif)#exi
AP1(config)#end
AP1#wr

Cấu hình tham khảo:
AP1#sh run
Building configuration...

Current configuration : 2515 bytes
!
version 12.3
no service pad
service password-encryption
!
hostname AP1
!
enable secret 5 $1$PGtI$rvPPqaeU84PkQlq56S2Vp.
!
ip subnet-zero
!
!
no aaa new-model
!
dot11 ssid s_vlan2
vlan 2
authentication open
mbssid guest-mode
!
dot11 ssid s_vlan3
vlan 3
authentication open
mbssid guest-mode
!
power inline negotiation prestandard source
!
!
username Cisco password 7 096F471A1A0A
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
ssid s_vlan2
!
ssid s_vlan3
!
mbssid
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0
54.0
station-role root
bridge-group 1
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio0.2
encapsulation dot1Q 2
no ip route-cache
bridge-group 2
bridge-group 2 subscriber-loop-control
bridge-group 2 block-unknown-source
no bridge-group 2 source-learning
no bridge-group 2 unicast-flooding
bridge-group 2 spanning-disabled
!
interface Dot11Radio0.3
encapsulation dot1Q 3
no ip route-cache
bridge-group 3
bridge-group 3 subscriber-loop-control
bridge-group 3 block-unknown-source
no bridge-group 3 source-learning
no bridge-group 3 unicast-flooding
bridge-group 3 spanning-disabled
!
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
speed basic-6.0 9.0 basic-12.0 18.0 basic-24.0 36.0 48.0 54.0
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface FastEthernet0.2
encapsulation dot1Q 2
no ip route-cache
bridge-group 2
no bridge-group 2 source-learning
bridge-group 2 spanning-disabled
!
interface FastEthernet0.3
encapsulation dot1Q 3
no ip route-cache
bridge-group 3
no bridge-group 3 source-learning
bridge-group 3 spanning-disabled
!
interface BVI1
ip address 10.0.0.4 255.0.0.0
no ip route-cache
!
ip http server
no ip http secure-server
!
control-plane
!
bridge 1 route ip
!
!
!
line con 0
logging synchronous
line vty 0 4
login local
end
2. Cấu hình VLAN trên AP2 bằng giao diện WEB:
Để cấu hình AP2 bằng giao diện web ta phải biết địa chỉ IP của nó. Nhập IP của AP vào thanh địa chỉ của trình duyệt.
Bước 1: Ở mục Express Set-up ta thay đổi các thông số như hình rồi nhấn Apply.

http://img691.imageshack.us/img691/7456/image002od.jpg

http://img178.imageshack.us/img178/9237/image003j.jpg

Bước 2: Ở mục Express Security ta cấu hình các SSID và VLAN ID như sau:
Cấu hình SSID vlan2 và VLAN 2

http://img824.imageshack.us/img824/4633/image004a.jpg

Sau khi bấm nút apply tương tự chúng ta tiếp tục tạo SSID vlan3 và VLAN 3

http://img827.imageshack.us/img827/3873/image005ar.jpg

Sau khi Apply ta có kết quả ở SSID table như sau:

http://img811.imageshack.us/img811/6790/image006dy.jpg

Bước 3:Ở mục Network Interfaces /Radio0-802.11G chọn Tab Settings rồi kích hoạt phát sóng.

http://img375.imageshack.us/img375/8670/image007v.jpg

Sau khi nhấn Apply ta có kết quả như sau:

http://img697.imageshack.us/img697/4073/image008wa.jpg

Bước 4: Ở mục Security/SSID Manager chúng ta cấu hình phát multiple BSSID như sau:

http://img693.imageshack.us/img693/8292/image009fq.jpg

http://img704.imageshack.us/img704/4386/image010qk.jpg

Sau khi nhấn nút Apply ta có kết quả như sau

http://img21.imageshack.us/img21/812/image011as.jpg

3. Cho các PC tham gia vào các SSID thuộc các Vlan khác nhau trên AP1. Đặt địa chỉ IP trên PC cùng subnet. Kiểm tra tính năng hỗ trợ Vlan trên AP1130 bằng cách ping các PC.
Kết quả sau khi dò tìm các SSID như sau:

http://img838.imageshack.us/img838/6950/image012ij.jpg

http://img214.imageshack.us/img214/8587/image013tl.jpg

4. Cấu hình router 2800 và switch 2950 để định tuyến cho các vlan. Thực hiện routing inter vlan.
Router 2800:
1/ Tạo 2 pool dhcp để cấp địa chỉ ip động cho 2 vlan
R(config)#ip dhcp pool vlan2
R(dhcp-config)#network 192.168.2.0 255.255.255.0
R(dhcp-config)#default-router 192.168.2.254
R(dhcp-config)#exi
R(config)#ip dhcp pool vlan3
R(dhcp-config)#network 192.168.3.0 255.255.255.0
R(dhcp-config)#default-router 192.168.3.254
R(dhcp-config)#exi

2/ Tạo 2 subinterface đóng gói kiểu dot1q và đặt địa chỉ gateway trên từng subinterface đó
R(config)#int fastEthernet 0/0.2
R(config-subif)#encapsulation dot1Q 2
R(config-subif)#ip add 192.168.2.254 255.255.255.0
R(config-subif)#no shut
R(config-subif)#exi
R(config)#int fastEthernet 0/0.3
R(config-subif)#encapsulation do
R(config-subif)#encapsulation dot1Q 3
R(config-subif)#ip add 192.168.3.254 255.255.255.0
R(config-subif)#no shut
R(config-subif)#no ip directed-broadcast
R(config-subif)#exi
R(config)#int fastEthernet 0/0.2
R(config-subif)#no ip directed-broadcast
R(config-subif)#exi
R(config)#end

3/ Xem file cấu hình
R#sh run
Building configuration...

Current configuration : 1261 bytes
!
version 12.4
no service password-encryption
!
hostname R
!
ip cef
!
no ip dhcp use vrf connected
!
ip dhcp pool vlan2
network 192.168.2.0 255.255.255.0
default-router 192.168.2.254
!
ip dhcp pool vlan3
network 192.168.3.0 255.255.255.0
default-router 192.168.3.254!
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface FastEthernet0/0.2
encapsulation dot1Q 2
ip address 192.168.2.254 255.255.255.0
!
interface FastEthernet0/0.3
encapsulation dot1Q 3
ip address 192.168.3.254 255.255.255.0
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/1/0
no ip address
shutdown
clock rate 2000000
!
interface Serial0/1/1
no ip address
shutdown
clock rate 2000000
!
interface Serial0/2/0
no ip address
shutdown
!
interface Serial0/2/1
no ip address
shutdown
!
!
!
ip http server
!
control-plane
!
line con 0
logging synchronous
line aux 0
line vty 0 4
login
!
scheduler allocate 20000 1000
end
Switch 2950:
Switch#Conf t
Switch(config)#int range f0/1-3
Switch(config-if-range)#sw
Switch(config-if-range)#switchport mode trunk
Switch(config-if-range)#end
Xem cấu hình:
Switch#sh run
Building configuration...
Current configuration : 1315 bytes
!
version 12.2
!
hostname Switch
!

ip subnet-zero
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
interface FastEthernet0/1
switchport mode trunk
!
interface FastEthernet0/2
switchport mode trunk
!
interface FastEthernet0/3
switchport mode trunk
!
interface FastEthernet0/4
!
interface FastEthernet0/5
!
!
interface Vlan1
no ip address
no ip route-cache
!
ip http server
!
control-plane
!
End
5. Kiểm tra kết quả
PC thuộc VLAN 2 ping thấy lẫn nhau:

http://img838.imageshack.us/img838/7016/image014u.jpg

PC thuộc VLAN 3 ping thấy PC thuộc VLAN 2:

http://img715.imageshack.us/img715/151/image015sx.jpg