二層直連組網中的直連是指AC 連接在交換機與交換機，或者交換機與路由器之間的拓撲結構，如下這張網絡拓撲圖所示。AC位於交換機LSW1和路由器AR1之間

劃分兩個vlan

管理vlan 101 ：實現AP和AC之間通訊

業務vlan 102 ：傳輸用戶無線數據流

AC 作為DHCP服務器，同時為AP和STA分配IP

AC 源接口地址 192.168.100.1 24

AP 網關地址 192.168.100.1 24

STA 網關地址 192.168.101.1 24

配置LSW1

vlan batch 100 101

int g0/0/3

port link-type trunk

port trunk allow-pass vlan 100 to 101

int g0/0/1

port link-type trunk

port trunk pvid vlan 100

port trunk allow-pass vlan 100 to 101

int g0/0/2

port link-type trunk

port trunk pvid vlan 100

port trunk allow-pass vlan 100 to 101

配置AC

vlan batch 100 101

int g0/0/2

port link-type trunk

port trunk allow-pass vlan 100 to 101

dhcp enable

int vlanif 100

ip address 192.168.100.254 255.255.255.0

dhcp select interface

int vlanif 101

ip address 192.168.101.254 255.255.255.0

dhcp select interface

# 配置無線信號

capwap source interface vlanif100

配置完成上述命令之後AP就能自動獲取到IP地址

79ab10ce43b6a848d43565cefa80229d

wlan

# AP加入AC不進行認證

ap auth-mode no-auth

# 查詢AP上線結果

5735f415e2764aaa25339ace7ad8e1b0

# 配置安全模板

security-profile name TEST-WLAN

security wpa-wpa2 psk pass-phrase 12345678 aes

# 配置ssid模板

ssid-profile name TEST-WLAN

# 無線信號為TEST-WLAN

ssid TEST-WLAN

# 配置VAP模板

vap-profile name TEST-WLAN

# 業務流vlanid為101

service-vlan vlan-id 101

# 關聯ssid名稱

ssid-profile TEST-WLAN

# 關聯安全模板

security-profile TEST-WLAN

ap-group group default

vap-profile TEST-WLAN wlan 1 radio all

9e9e7d9ed2e78fe4a8bef559570ff70f