华为WLAN项目

v1.0可编辑可修改v1.0可编辑可修改v1.0可编辑可修改配置大型网络WLAN基本业务示例配置流程WLAN不同的特性和功能需要在不同类型的下进行配置和维护，这些模板统称为WLAN模板，如域管理模板、射频模板、VAP模板、AP系统模板、AP有线口模板、WIDS模板、WDS模板、Mesh模板。当用户在配置WLAN业务功能时，需要在对应功能的WLAN模板中进行参数配置，配置完成后，须将此模板引用到AP组或AP中，配置下发到AP，进而配置的功能在AP上生效。由于模板之间是存在各相互引用关系的，因此在用户配置过程中，需要提前了解各个模板之间存在的逻辑关系。模板的逻辑关系和基本配置流程请参见WLAN业务配置流程。组网需求如图1所示，某大型企业的现网中，汇聚交换机Switch_B下行连接接入交换机Switch_A，上行连接Router。用户希望能在尽可能少的更改现有组网架构的情况下部署WLAN网络。用户的具体需求为：·企业办公楼的前台大厅部署SSID为“guest”的无线网络，为来访的客户提供无线网络接入。·办公区域部署SSID为“employee”的无线网络，为企业员工提供无线网络接入。图1 配置大型网络WLAN基本业务组网图 配置思路采用如下的思路配置大型网络WLAN基本业务：1.配置Switch_A和Switch_B，实现二层网络互通；配置Switch_B、Router和AC，实现三层网络互通。2.在Router上配置基于全局地址池的DHCP服务器为AP和STA分配IP地址。3.配置VLANpool，用于作为业务VLAN。4.配置AP上线。1.创建AP组，用于将需要进行相同配置的AP都加入到AP组，实现统一配置。2.配置AC的系统参数，包括国家码、AC与AP之间通信的源接口。3.配置AP上线的认证方式并离线导入AP，实现AP正常上线。5.配置WLAN业务参数，实现STA访问WLAN网络功能。 表1 数据规划表 配置项 数据 DHCP服务器 Router作为DHCP服务器为STA和AP分配IP地址 AP的IP地址池 的IP地址池 访客用户的IP地址范围：企业员工的IP地址范围：· pool 名称：sta-pool1为访客用户分配IP地址。VLANpool中加入的VLAN：101、102名称：sta-pool2为企业员工分配IP地址。VLANpool中加入的VLAN：103、104· AC的源接口IP地址 VLANIF200： 组 名称：guest引用模板：VAP模板guest、域管理模板domain1 名称：employee引用模板：VAP模板employee、域管理模板domain1 域管理模板 名称：domain1国家码：CN SSID模板 名称：guestSSID名称：guest 名称：employeeSSID名称：employee 安全模板 名称：guest·安全策略：WPA2+PSK+AES·密码：a1234567 名称：employee·安全策略：WPA2+PSK+AES·密码：b1234567 VAP模板 名称：guest·转发模式：隧道转发·业务VLAN：sta-pool1·引用模板：SSID模板guest、安全模板guest 名称：employee·转发模式：隧道转发·业务VLAN：sta-pool2·引用模板：SSID模板employee、安全模板employee 说明：本配置中的Switch_A采用的是华为盒式交换机，Switch_B采用的是框式交换机。使用VLANpool作为业务VLAN并且业务数据的转发模式为直接转发时，由于VLANpool下通常加入多个VLAN，组网中需要配置多个设备的接口加入这些VLAN，容易产生较多的广播域。为减少广播域数目，可以配置业务数据的转发模式为隧道转发。纯组播报文由于要求在无线空口没有ACK机制保障，且无线空口链路不稳定，为了纯组播报文能够稳定发送，通常会以低速报文形式发送。如果网络侧有大量异常组播流量涌入，则会造成无线空口拥堵。为了减小大量低速组播报文对无线网络造成的冲击，建议配置组播报文抑制功能。配置前请确认是否有组播业务，如果有，请谨慎配置限速值。·业务数据转发方式采用直接转发时，建议在直连AP的交换机接口上配置组播报文抑制。·业务数据转发方式采用隧道转发时，建议在AC的流量模板下配置组播报文抑制。配置方法请参见如何配置组播报文抑制，减小大量低速组播报文对无线网络造成的冲击建议在设备与AP直接相连的接口上配置端口隔离，如果不配置端口隔离，尤其是业务数据转发方式采用直接转发时，可能会在VLAN内存在不必要的广播报文，或者导致不同AP间的WLAN用户二层互通的问题。隧道转发模式下，管理VLAN和业务VLAN不能配置为同一VLAN。操作步骤1.配置网络互通#配置接入交换机Switch_A。将接口GE0/0/1～GE0/0/5都加入VLAN100（管理VLAN）。接口GE0/0/1～GE0/0/4下的配置完全一致，以配置接口GE0/0/1为例，接口GE0/0/2～GE0/0/4的配置请参考接口GE0/0/1。<HUAWEI>system-view[HUAWEI]sysnameSwitch_A[Switch_A]vlanbatch100[Switch_A]interfacegigabitethernet0/0/1[Switch_A-GigabitEthernet0/0/1]portlink-typetrunk[Switch_A-GigabitEthernet0/0/1]porttrunkpvidvlan100[Switch_A-GigabitEthernet0/0/1]porttrunkallow-passvlan100[Switch_A-GigabitEthernet0/0/1]port-isolateenable[Switch_A-GigabitEthernet0/0/1]quit[Switch_A]interfacegigabitethernet0/0/5[Switch_A-GigabitEthernet0/0/5]portlink-typetrunk[Switch_A-GigabitEthernet0/0/5]porttrunkallow-passvlan100[Switch_A-GigabitEthernet0/0/5]quit#配置汇聚交换机Switch_B。配置接口GE1/0/1加入VLAN100，GE1/0/2加入VLAN101～VLAN104和VLAN200，GE1/0/3加入VLAN201。<HUAWEI>system-view[HUAWEI]sysnameSwitch_B[Switch_B]vlanbatch100to104200201[Switch_B]interfacegigabitethernet1/0/1[Switch_B-GigabitEthernet1/0/1]portlink-typetrunk[Switch_B-GigabitEthernet1/0/1]porttrunkallow-passvlan100[Switch_B-GigabitEthernet1/0/1]quit[Switch_B]interfacegigabitethernet1/0/2[Switch_B-GigabitEthernet1/0/2]portlink-typetrunk[Switch_B-GigabitEthernet1/0/2]porttrunkallow-passvlan101to104200[Switch_B-GigabitEthernet1/0/2]quit[Switch_B]interfacegigabitethernet1/0/3[Switch_B-GigabitEthernet1/0/3]portlink-typetrunk[Switch_B-GigabitEthernet1/0/3]porttrunkallow-passvlan201[Switch_B-GigabitEthernet1/0/3]quit#在汇聚交换机Switch_B上创建VLANIF100～VLANIF104、VLANIF200和VLANIF201并配置IP地址。其中VLANIF100为AP的网关，VLANIF101和VLANIF102为访客用户的网关，VLANIF103和VLANIF104为企业员工的网关，VLANIF200用于Switch_B与AC通信，VLANIF201用于Switch_B与Router通信。[Switch_B]interfacevlanif100[Switch_B-Vlanif100]ipaddress24[Switch_B-Vlanif100]quit[Switch_B]interfacevlanif101[Switch_B-Vlanif101]ipaddress24[Switch_B-Vlanif101]quit[Switch_B]interfacevlanif102[Switch_B-Vlanif102]ipaddress24[Switch_B-Vlanif102]quit[Switch_B]interfacevlanif103[Switch_B-Vlanif103]ipaddress24[Switch_B-Vlanif103]quit[Switch_B]interfacevlanif104[Switch_B-Vlanif104]ipaddress24[Switch_B-Vlanif104]quit[Switch_B]interfacevlanif200[Switch_B-Vlanif200]ipaddress24[Switch_B-Vlanif200]quit[Switch_B]interfacevlanif201[Switch_B-Vlanif201]ipaddress24[Switch_B-Vlanif201]quit#配置AC连接汇聚交换机Switch_B的接口GE0/0/1加入VLAN101～VLAN104和VLAN200。<AC6605>system-view[AC6605]sysnameAC[AC]vlanbatch101to104200[AC]interfacevlanif200[AC-Vlanif200]ipaddress24[AC-Vlanif200]quit[AC]interfacegigabitethernet0/0/1[AC-GigabitEthernet0/0/1]portlink-typetrunk[AC-GigabitEthernet0/0/1]porttrunkallow-passvlan101to104200[AC-GigabitEthernet0/0/1]quit#配置Router的接口GE2/0/0加入VLAN201，并且配置IP地址使Router能与Switch_B通信。<Huawei>system-view[Huawei]sysnameRouter[Router]vlanbatch201[Router]interfacevlanif201[Router-Vlanif201]ipaddress24[Router-Vlanif201]quit[Router]interfacegigabitethernet2/0/0[Router-GigabitEthernet2/0/0]portlink-typetrunk[Router-GigabitEthernet2/0/0]porttrunkallow-passvlan201[Router-GigabitEthernet2/0/0]quit#配置Router到Switch_B的路由。[Router]iproute-static24iproute-static24iproute-static24iproute-static24iproute-static24配置Switch_B的缺省路由，下一跳为Router的VLANIF201。[Switch_B]iproute-static配置AC到AP的路由，下一跳为Switch_B的VLANIF200。2.[AC]iproute-static24配置DHCP服务，为AP和STA分配IP地址#配置Switch_B作为DHCP中继。[Switch_B]dhcpenable[Switch_B]interfacevlanif100[Switch_B-Vlanif100]dhcpselectrelay[Switch_B-Vlanif100]dhcprelayserver-ipquit[Switch_B]interfacevlanif101[Switch_B-Vlanif101]dhcpselectrelay[Switch_B-Vlanif101]dhcprelayserver-ipquit[Switch_B]interfacevlanif102[Switch_B-Vlanif102]dhcpselectrelay[Switch_B-Vlanif102]dhcprelayserver-ipquit[Switch_B]interfacevlanif103[Switch_B-Vlanif103]dhcpselectrelay[Switch_B-Vlanif103]dhcprelayserver-ipquit[Switch_B]interfacevlanif104[Switch_B-Vlanif104]dhcpselectrelay[Switch_B-Vlanif104]dhcprelayserver-ipquit#配置由Router作为DHCP服务器给AP和STA分配IP地址。AP和AC间为三层网络时需要通过配置Option43向AP通告AC的IP地址。[Router]dhcpenable[Router]ippoolap[Router-ip-pool-ap]networkmask24[Router-ip-pool-ap]gateway-listoption43sub-option3asciiquit[Router]ippoolsta1[Router-ip-pool-sta1]networkmask24[Router-ip-pool-sta1]gateway-listquit[Router]ippoolsta2[Router-ip-pool-sta2]networkmask24[Router-ip-pool-sta2]gateway-listquit[Router]ippoolsta3[Router-ip-pool-sta3]networkmask24[Router-ip-pool-sta3]gateway-listquit[Router]ippoolsta4[Router-ip-pool-sta4]networkmask24[Router-ip-pool-sta4]gateway-listquit[Router]interfacevlanif201[Router-Vlanif201]dhcpselectglobal[Router-Vlanif201]quit3.配置VLANpool，用于作为业务VLAN#新建两个VLANpool，sta-pool1和sta-pool2，将VLAN101和VLAN102加入sta-pool1，VLAN103和VLAN104加入sta-pool2，配置两个VLANpool中的VLAN分配算法为“hash”。 说明：本例VLANpool中的VLAN分配算法配置为“hash”。分配算法缺省情况下为“hash”，如果之前没有修改其缺省配置，可以不用执行命令assignmenthash。本例VLANpool仅以加入VLAN101和VLAN102两个VLAN为例，实际可以配置多个VLAN加入VLANpool，配置方法与VLAN101和VLAN102一致，也需要在Switch_B上创建对应的VLANIF接口、配置IP地址，在Router上配置IP地址池。[AC]vlanpoolsta-pool1[AC-vlan-pool-sta-pool1]vlan101102[AC-vlan-pool-sta-pool1]assignmenthash[AC-vlan-pool-sta-pool1]quit[AC]vlanpoolsta-pool2[AC-vlan-pool-sta-pool2]vlan103104[AC-vlan-pool-sta-pool2]assignmenthash[AC-vlan-pool-sta-pool2]quit4.配置AP上线#创建AP组“guest”和“employee”。[AC]wlan[AC-wlan-view]ap-groupnameguest[AC-wlan-ap-group-guest]quit[AC-wlan-view]ap-groupnameemployee[AC-wlan-ap-group-employee]quit#创建域管理模板，在域管理模板下配置AC的国家码并在AP组下引用域管理模板。[AC-wlan-view]regulatory-domain-profilenamedomain1[AC-wlan-regulatory-domain-prof-domain1]country-codecn[AC-wlan-regulatory-domain-prof-domain1]quit[AC-wlan-view]ap-groupnameguest[AC-wlan-ap-group-guest]regulatory-domain-profiledomain1Warning:Modifyingthecountrycodewillclearchannel,powerandantennagainconfigurationsoftheradioandresettheAP.Continue[Y/N]:y[AC-wlan-ap-group-guest]quit[AC-wlan-view]ap-groupnameemployee[AC-wlan-ap-group-employee]regulatory-domain-profiledomain1Warning:Modifyingthecountrycodewillclearchannel,powerandantennagainconfigurationsoftheradioandresettheAP.Continue[Y/N]:y[AC-wlan-ap-group-employee]quit[AC-wlan-view]quit#配置AC的源接口。[AC]capwapsourceinterfacevlanif200#在AC上离线导入AP。将部署在前台大厅的AP都加入到AP组“guest”，部署在办公区域的AP都加入到AP组“employee”，并且根据AP的部署位置为AP配置名称，便于从名称上就能够了解AP的部署位置。例如MAC地址为60de-4474-9640的AP部署在办公区域2楼的1号房间，命名此AP为“office2-1”。 说明：apauth-mode命令缺省情况下为MAC认证，如果之前没有修改其缺省配置，可以不用执行apauth-modemac-auth。举例中使用的AP为AP6010DN-AGN，具有射频0和射频1两个射频。AP6010DN-AGN的射频0为射频，射频1为5GHz射频。[AC]wlan[AC-wlan-view]apauth-modemac-auth[AC-wlan-view]ap-id0ap-mac60de-4476-e360[AC-wlan-ap-0]ap-namelobby-1[AC-wlan-ap-0]ap-groupguestWarning:ThisoperationmaycauseAPreset.Ifthecountrycodechanges,itwillclearchannel,powerandantennagainconfigurationsoftheradio,Whethertocontinue[Y/N]:y[AC-wlan-ap-0]quit[AC-wlan-view]ap-id1ap-mac60de-4476-e380[AC-wlan-ap-1]ap-namelobby-2[AC-wlan-ap-1]ap-groupguestWarning:ThisoperationmaycauseAPreset.Ifthecountrycodechanges,itwillclearchannel,powerandantennagainconfigurationsoftheradio,Whethertocontinue[Y/N]:y[AC-wlan-ap-1]quit[AC-wlan-view]ap-id2ap-mac60de-4474-9640[AC-wlan-ap-2]ap-nameoffice2-1[AC-wlan-ap-2]ap-groupemployeeWarning:ThisoperationmaycauseAPreset.Ifthecountrycodechanges,itwillclearchannel,powerandantennagainconfigurationsoftheradio,Whethertocontinue[Y/N]:y[AC-wlan-ap-2]quit[AC-wlan-view]ap-id3ap-mac60de-4474-9660[AC-wlan-ap-3]ap-nameoffice2-2[AC-wlan-ap-3]ap-groupemployeeWarning:ThisoperationmaycauseAPreset.Ifthecountrycodechanges,itwillclearchannel,powerandantennagainconfigurationsoftheradio,Whethertocontinue[Y/N]:y[AC-wlan-ap-3]quit#将AP上电后，当执行命令displayapall查看到AP的“State”字段为“nor”时，表示AP正常上线。[AC-wlan-view]displayapallTotalAPinformation:nor:normal[4]----------------------------------------------------------------------------------------------IDMACNameGroupIPTypeStateSTAUptime----------------------------------------------------------------------------------------------060de-4474-9640office2-1employeeAP6010DN-AGNnor02H:30M:1S160de-4474-9660office2-2employeeAP6010DN-AGNnor02H:35M:2S260de-4476-e360lobby-1guestAP6010DN-AGNnor02H:29M:29S360de-4476-e380lobby-2guestAP6010DN-AGNnor02H:34M:11S----------------------------------------------------------------------------------------------Total:45.配置WLAN业务参数#创建名为“guest”和“employee”的安全模板，并配置安全策略。 说明：举例中以配置WPA2+PSK+AES的安全策略为例，密码分别为“a1234567”和“b1234567”，实际配置中请根据实际情况，配置符合实际要求的安全策略。[AC-wlan-view]security-profilenameguest[AC-wlan-sec-prof-guest]securitywpa2pskpass-phrasea1234567aes[AC-wlan-sec-prof-guest]quit[AC-wlan-view]security-profilenameemployee[AC-wlan-sec-prof-employee]securitywpa2pskpass-phraseb1234567aes[AC-wlan-sec-prof-employee]quit#创建名为“guest”和“employee”的SSID模板，并分别配置SSID名称为“guest”和“employee”。[AC-wlan-view]ssid-profilenameguest[AC-wlan-ssid-prof-guest]ssidguestWarning:Thisactionmaycauseserviceinterruption.Continue[Y/N]y[AC-wlan-ssid-prof-guest]quit[AC-wlan-view]ssid-profilenameemployee[AC-wlan-ssid-prof-employee]ssidemployeeWarning:Thisactionmaycauseserviceinterruption.Continue[Y/N]y[AC-wlan-ssid-prof-employee]quit#创建名为“guest”和“employee”的VAP模板，配置业务数据转发模式、业务VLAN，并且引用安全模板和SSID模板。[AC-wlan-view]vap-profilenameguest[AC-wlan-vap-prof-guest]forward-modetunnelWarning:Thisactionmaycauseserviceinterruption.Continue[Y/N]y[AC-wlan-vap-prof-guest]service-vlanvlan-poolsta-pool1[AC-wlan-vap-prof-guest]security-profileguest[AC-wlan-vap-prof-guest]ssid-profileguest[AC-wlan-vap-prof-guest]quit[AC-wlan-view]vap-profilenameemployee[AC-wlan-vap-prof-employee]forward-modetunnelWarning:Thisactionmaycauseserviceinterruption.Continue[Y/N]y[AC-wlan-vap-prof-employee]service-vlanvlan-poolsta-pool2[AC-wlan-vap-prof-employee]security-profileemployee[AC-wlan-vap-prof-employee]ssid-profileemployee[AC-wlan-vap-prof-employee]quit#配置AP组引用VAP模板，AP上射频0和射频1都使用VAP模板的配置。[AC-wlan-view]ap-groupnameguest[AC-wlan-ap-group-guest]vap-profileguestwlan1radio0[AC-wlan-ap-group-guest]vap-profileguestwlan1radio1[AC-wlan-ap-group-guest]quit[AC-wlan-view]ap-groupnameemployee[AC-wlan-ap-group-employee]vap-profileemployeewlan1radio0[AC-wlan-ap-group-employee]vap-profileemployeewlan1radio1[AC-wlan-ap-group-employee]quit6.验证配置结果WLAN业务配置会自动下发给AP，配置完成后，通过执行命令displayvapssidguest和displayvapssidemployee查看如下信息，当“Status”项显示为“ON”时，表示AP对应的射频上的VAP已创建成功。[AC-wlan-view]displayvapssidguestWID:WLANID--------------------------------------------------------------------------------APIDAPnameRfIDWIDBSSIDStatusAuthtypeSTASSID--------------------------------------------------------------------------------0lobby-10160DE-4476-E360ONWPA2-PSK1guest0lobby-11160DE-4476-E370ONWPA2-PSK0guest1lobby-20160DE-4476-E380ONWPA2-PSK1guest1lobby-21160DE-4476-E390ONWPA2-PSK0guest-------------------------------------------------------------------------------Total:4[AC-wlan-view]displayvapssidemployeeWID:WLANID--------------------------------------------------------------------------------APIDAPnameRfIDWIDBSSIDStatusAuthtypeSTASSID--------------------------------------------------------------------------------2office2-10160DE-4474-9640ONWPA2-PSK0employee2office2-11160DE-4474-9650ONWPA2-PSK1employee3office2-20160DE-4474-9660ONWPA2-PSK0employee3office2-21160DE-4474-9670ONWPA2-PSK1employee-------------------------------------------------------------------------------Total:4STA搜索到名为“guest”和“employee”的无线网络，分别输入密码“a1234567”和“b1234567”并正常关联后，在AC上执行displaystationssidguest和displaystationssidemployee命令，可以查看到用户已经分别接入到无线网络“guest”和“employee”中。[AC-wlan-view]displaystationssidguestRf/WLAN:RadioID/WLANIDRx/Tx:linkreceiverate/linktransmitrate(Mbps)------------------------------------------------------------------------------STAMACAPIDApnameRf/WLANBandTypeRx/TxRSSIVLANIPaddress------------------------------------------------------------------------------581f-28fc-7ead0lobby-10/111n2/4-531011:15G:0[AC-wlan-view]displaystationssidemployeeRf/WLAN:RadioID/WLANIDRx/Tx:linkreceiverate/linktransmitrate(Mbps)------------------------------------------------------------------------------STAMACAPIDApnameRf/WLANBandTypeRx/TxRSSIVLANIPaddress------------------------------------------------------------------------------e019-1dc7-1e082office2-11/15G11n26/51-611021:05G:1配置文件Switch_A的配置文件#sysnameSwitch_A#vlanbatch100#interfaceGigabitEthernet0/0/1portlink-typetrunkporttrunkpvidvlan100porttrunkallow-passvlan100port-isolateenablegroup1#interfaceGigabitEthernet0/0/2portlink-typetrunkporttrunkpvidvlan100porttrunkallow-passvlan100port-isolateenablegroup1#interfaceGigabitEthernet0/0/3portlink-typetrunkporttrunkpvidvlan100porttrunkallow-passvlan100port-isolateenablegroup1#interfaceGigabitEthernet0/0/4portlink-typetrunkporttrunkpvidvlan100porttrunkallow-passvlan100port-isolateenablegroup1#interfaceGigabitEthernet0/0/5portlink-typetrunkporttrunkallow-passvlan100#returnSwitch_B的配置文件#sysnameSwitch_B#vlanbatch100to104200201#dhcpenable#interfaceVlanif100ipaddressdhcpselectrelaydhcprelayserver-ipVlanif101ipaddressdhcpselectrelaydhcprelayserver-ipVlanif102ipaddressdhcpselectrelaydhcprelayserver-ipVlanif103ipaddressdhcpselectrelaydhcprelayserver-ipVlanif104ipaddressdhcpselectrelaydhcprelayserver-ipVlanif200ipaddressVlanif201ipaddressGigabitEthernet1/0/1portlink-typetrunkporttrunkallow-passvlan100#interfaceGigabitEthernet1/0/2portlink-typetrunkporttrunkallow-passvlan101to104200#interfaceGigabitEthernet1/0/3portlink-typetrunkporttrunkallow-passvlan201#iproute-static的配置文件#sysnameRouter#vlanbatch201#dhcpenable#ippoolapgateway-listnetworkmaskoption43sub-option3ascii#ippoolsta1gateway-listnetworkmask#ippoolsta2gateway-listnetworkmask#ippoolsta3gateway-listnetworkmask#ippoolsta4gateway-listnetworkmask#interfaceVlanif201ipaddressdhcpselectglobal#interfaceGigabitEthernet2/0/0portlink-typetrunkporttrunkallow-passvlan201#iproute-staticroute-staticroute-staticroute-staticroute-static的配置文件#sysnameAC#vlanbatch101to104200#vlanpoolsta-pool1vlan101to102vlanpoolsta-pool2vlan103to104#interfaceVlanif200ipaddressGigabitEthernet0/0/1portlink-typetrunkporttrunkallow-passvlan101to104200#iproute-staticsourceinterfacevlanif200#wlansecurity-profilenameguestsecuritywpa2pskpass-phrase%^%#m"tz0f>~7.[`^6RWdzwCy16hJj/Mc!,}s`X*B]}A%^%#aessecurity-profilenameemployeesecuritywpa2pskpass-phrase%^%#H{1<-b]4~"*+Y:4-'/URy;$+,33UgQf)@9I(Yl]V%^%#aesssid-profilenameguestssidguestssid-profilenameemployeessidemployeevap-profilenameguestforward-modetunnelservice-vlanvlan-poolsta-pool1ssid-profileguestsecurity-profileguestvap-profilenameemployeeforward-modetunnelservice-vlanvlan-poolsta-pool2ssid-profileemployeesecurity-profileemployeeregulatory-domain-profilenamedomain1ap-groupnameguestregulatory-domain-profiledomain1radio0vap-profileguestwlan1radio1vap-profileguestwlan1ap-groupnameemployeeregulatory-domain-profiledomain1radio0vap-profileemployeewlan1radio1vap-profileemployeewlan1ap-id0type-id19ap-mac60de-4476-e360ap-sn2CB000042ap-namelobby-1ap-groupguestap-id1type-id19ap-mac60de-4476-e380ap-sn2D2000066ap-namelobby-2ap-groupguestap-id2type-id19ap-mac60de-4474-9640ap-sn2CB000075ap-nameoffice2-1ap-groupemployeeap-id3type-id19ap-mac60de-4474-9660ap-sn2D2000097ap-nameoffice2-2ap-groupemployee#return父主题： 配置举例华为专有和保密信息版权所有©华为技术有限公司28