################ 接入交换机 ################
sysname Access-Switch
vlan batch 100 101 102
interface range GigabitEthernet 0/0/1 to GigabitEthernet 0/0/3
 port link-type trunk
 port trunk allow-pass vlan 100
 port trunk pvid vlan 100
 stp edgedport enable

################ 核心交换机 ################
sysname Core-Switch
vlan batch 10 to 102
dhcp enable
interface Vlanif102
 ip address 192.168.102.1 255.255.255.0
 dhcp select interface
 dhcp server dns-list 8.8.8.8 223.5.5.5

################ AC 无线控制器 ################
sysname AC
vlan batch 100 101 102
dhcp enable
interface Vlanif102
 ip address 192.168.102.254 255.255.255.0
 dhcp select interface
 dhcp server excluded-ip-address 192.168.102.1 192.168.102.100

wlan
 regulatory-domain-profile name domain_yewu
  country-code CN
 regulatory-domain-profile name domain_laibin
  country-code CN
 ap-group name yewu
  regulatory-domain-profile domain_yewu
  ap-id 0
   ap-mac 0000-0000-0001
   ap-name yewu
   ap-area yewu1
 ap-id 0
 ap-group name laibin
  regulatory-domain-profile domain_laibin
  ap-id 1
   ap-mac 0000-0000-0002
   ap-name laibin
   ap-area laibin1
 ap-id 1
 security-profile name security_yewu
  security wep
   wep share-key
   wep key 0 wep-40 pass-phrase a1234
   wep default-key 0
 security-profile name security_laibin
  security wep
   wep share-key
   wep key 0 wep-40 pass-phrase a1234
   wep default-key 0
 ssid-profile name ssid_yewu
  ssid huawei
  max-station 128
  association-timeout 1
  beacon-2g-rate 11
 ssid-profile name ssid_laibin
  ssid laibin
  max-station 128
  association-timeout 1
  beacon-2g-rate 11
 traffic-profile name traffic
  rate-limit client down 4000
  rate-limit client up 4000
  user-isolate layer 2
 vap-profile name vap_yewu
  forward tunnel
  service-vlan vlan-id 101
  ssid-profile ssid_yewu
  security-profile security_yewu
  traffic-profile traffic
  user-isolate 12
  anti-attack arp-flood
   sta-rate-threshold 100
 vap-profile name vap_laibin
  forward tunnel
  service-vlan vlan-id 102
  ssid-profile ssid_laibin
  security-profile security_laibin
  traffic-profile traffic
  user-isolate 12
  anti-attack arp-flood
   sta-rate-threshold 100
 ap-group name yewu
  vap-profile vap_yewu radio all
 ap-group name laibin
  vap-profile vap_laibin radio all
 interface GigabitEthernet 0/0/1
  ip source check user-bind enable
  arp anti-attack check user-bind enable