

功能 | 命令 |
|---|---|
进入 WLAN 视图 | wlan |
查看系统 AP 列表 | display ap all |
查看 AP 运行状态 | display ap-run-info all |
查看 AP 注册失败原因 | display ap-fail-reason |
查看 AP 与 AC 通道 | display capwap tunnel |
查看 CAPWAP 状态 | display capwap online |
查看所有 SSID | display ssid all |
查看用户列表 | display station all |
功能 | 命令 |
|---|---|
创建 AP 组 | ap-group <name> |
将 AP 加入 AP 组 | ap-id <id> type <model> |
修改 AP 名称 | ap-name <name> |
删除 AP | undo ap <id> |
查看 AP 组 | display ap-group all |
ssid-profile Corp-WiFi
ssid Corp-WiFi
security-profile Corp-Sec
authentication-method wpa2
key-management wpa-psk
preshared-key passphrase 12345678
service-template 1 wlan-type normal
ssid-profile Corp-WiFi
security-profile Corp-Sec
vlan 20
service-template enable
display service-template all
radio 1
channel 149
power 10
display radio all
对 SSID 限速:
wlan
traffic-profile Guest-QoS
downlink-rate 10240 # 下行 10 Mbps
uplink-rate 2048 # 上行 2 Mbps
绑定到 service-template:
service-template 2
traffic-profile Guest-QoS
security-profile Guest-Sec
authentication-method portal
portal server 192.168.1.10 url http://portal.company.com
查看 Portal 用户:
display aaa online-user
security-profile Employee-Sec
authentication-method dot1x
key-management dot1x
查看 802.1X 用户:
display access-user
公司需要三个 Wi-Fi:
SSID | 用途 | VLAN | 认证 |
|---|---|---|---|
Corp-WiFi | 员工网络 | 20 | 802.1X |
Guest-WiFi | 访客网络 | 30 | Portal |
IoT-WiFi | IoT 设备 | 40 | WPA2-PSK |
无线设备:
vlan 20
vlan 30
vlan 40
interface Vlanif20
ip address 192.168.20.1 255.255.255.0
interface Vlanif30
ip address 192.168.30.1 255.255.255.0
interface Vlanif40
ip address 192.168.40.1 255.255.255.0
capwap source interface Vlanif10
wlan
ap-group Office
ap-id 1 type AirEngine5700
ap-name AP-Office1
ssid-profile Corp-WiFi
ssid Corp-WiFi
security-profile Corp-Sec
authentication-method dot1x
key-management dot1x
service-template 1 wlan-type normal
ssid-profile Corp-WiFi
security-profile Corp-Sec
vlan 20
service-template enable
ssid-profile Guest-WiFi
ssid Guest-WiFi
security-profile Guest-Sec
authentication-method portal
portal server 192.168.10.10 url http://portal.company.com
service-template 2 wlan-type normal
ssid-profile Guest-WiFi
security-profile Guest-Sec
vlan 30
service-template enable
ssid-profile IoT-WiFi
ssid IoT-WiFi
security-profile IoT-Sec
authentication-method wpa2
key-management wpa-psk
preshared-key ascii iot123456
service-template 3 wlan-type normal
ssid-profile IoT-WiFi
security-profile IoT-Sec
vlan 40
service-template enable
ap-group Office
radio 0
service-template 1 2 3
radio 1
service-template 1 2 3
radio 0 = 2.4GHz radio 1 = 5GHz
display ap all
display ap-run-info all
display capwap tunnel
display ssid all
display station all
display station verbose <MAC>
display radio all
display aaa online-user
display access-user
故障 | 原因 | 解决 |
|---|---|---|
AP 无法上线 | VLAN 未放通 / CAPWAP 源接口未配置 | display capwap online 检查 |
无法获取 IP | VLAN 错 / DHCP 作用域未创建 | 核心交换机检查 DHCP |
Wi-Fi 卡顿 | 信道重叠大 / 功率过高 | 固定信道,降低功率 |
Portal 跳转失败 | Portal 服务器不可达 | ping Portal server |
802.1X 认证失败 | RADIUS 参数错误 | display radius statistics |