实验拓扑
实验要求
1.AP1服务vlan10，AP2服务vlan20，实现三层漫游
2.AP1与AP2为不同AP组，直接转发
实验步骤
1.配置VLAN放行相关流量
交换机与AP接口为trunk口并修改PVID为30
2.配置相关业务使得ap上线
3.配置vap上线，AP可用
[AC6005-wlan-view]security-profile name HW
[AC6005-wlan-sec-prof-HW]security wpa-wpa2 psk pass-phrase huawei123 aes
[AC6005-wlan-sec-prof-HW]q
[AC6005-wlan-view]vap-profile name HW
[AC6005-wlan-vap-prof-HW]forward-mode direct-forward
[AC6005-wlan-vap-prof-HW]service-vlan vlan-id 10
Info: This operation may take a few seconds, please wait.done.
[AC6005-wlan-vap-prof-HW]security-profile HW
Info: This operation may take a few seconds, please wait.done.
[AC6005-wlan-vap-prof-HW]ssid HW
[AC6005-wlan-view]vap-profile name HW2
[AC6005-wlan-vap-prof-HW2]forward-mode direct-forward
[AC6005-wlan-vap-prof-HW2]service-vlan vlan-id 20
Info: This operation may take a few seconds, please wait.done.
[AC6005-wlan-vap-prof-HW2]security-profile HW
Info: This operation may take a few seconds, please wait.done.
[AC6005-wlan-vap-prof-HW2]ssid-profile HW
Info: This operation may take a few seconds, please wait.done.
[AC6005-wlan-ap-group-1]vap-profile HW wlan 1 radio 0
Info: This operation may take a few seconds, please wait...done.
[AC6005-wlan-ap-group-2]vap-profile HW2 wlan 1 radio 0
实验效果
接入AP1IP拿到vlan10
移动至AP2范围再次查看
可以看到IP未发生改变，我们在AC上查看此STA的漫游路径
可以看见属于三层漫游
我们在拿一台接入AP2查看IP，应该是属于vlan20的
