厂区仓库拉网线又贵又慢?华为Mesh多跳无线回传AP一跳接一跳回机房

园区里总有些角落是有线的"死角":跨马路的仓库、不让开槽的老厂房、临时搭建的板房区。这些区域要覆盖 Wi-Fi,把网线从机房一路拉过去,施工成本常常比设备还贵。Mesh 组网换了个思路:只有一台 AP(Mesh-portal,简称 MPP)通过有线接回网络,其余 AP(Mesh-node,简称 MP)之间用 5G 射频无线互联,业务流量沿着 AP 一跳接一跳回传到有线侧,覆盖区域想拓展多远就摆多少跳。

官方这个"Mesh 多跳业务"举例里,四台 AP 分两组:area_1 是 MPP 节点走有线在 WAC(无线接入控制器,本例旁挂二层组网)上线,area_2~area_4 是 MP 节点通过 Mesh 链路在 WAC 上线。管理 VLAN 100,WAC 作 AP 的 DHCP 服务器(地址池 10.23.100.2~10.23.100.254/24),Mesh 链路用射频 0(信道 36)和射频 1(信道 149)两条 80MHz 链路接力,安全策略 WPA2+PSK+AES,链路老化时间 30 秒。

配置步骤

第一步,配周边交换机。接入交换机 Switch_B 的 10GE0/0/1(缺省 VLAN 100)和 10GE0/0/2 放行 VLAN 100,直连 AP 的口顺带做端口隔离;汇聚交换机 Switch_A 两个口同样放行 VLAN 100:

<HUAWEI> system-view
[HUAWEI] sysname Switch_B
[Switch_B] vlan batch 100
[Switch_B] interface 10ge 0/0/1
[Switch_B-10GE0/0/1] portswitch
[Switch_B-10GE0/0/1] port link-type trunk
[Switch_B-10GE0/0/1] port trunk pvid vlan 100
[Switch_B-10GE0/0/1] port trunk allow-pass vlan 100
[Switch_B-10GE0/0/1] port-isolate enable group 1
[Switch_B-10GE0/0/1] quit
[Switch_B] interface 10ge 0/0/2
[Switch_B-10GE0/0/2] portswitch
[Switch_B-10GE0/0/2] port link-type trunk
[Switch_B-10GE0/0/2] port trunk allow-pass vlan 100
[Switch_B-10GE0/0/2] quit

第二步,WAC 侧打通管理 VLAN 并给 AP 分地址:

<HUAWEI> system-view
[HUAWE] sysname WAC
[WAC] vlan batch 100
[WAC] interface 10ge 0/0/1
[WAC-10GE0/0/1] portswitch
[WAC-10GE0/0/1] port link-type trunk
[WAC-10GE0/0/1] port trunk allow-pass vlan 100
[WAC-10GE0/0/1] quit
[WAC] dhcp enable
[WAC] interface vlanif 100
[WAC-Vlanif100] ip address 10.23.100.1 24
[WAC-Vlanif100] dhcp select interface
[WAC-Vlanif100] quit

第三步,建 AP 组、配国家码和 CAPWAP 源接口,再把四台 AP 按 MAC 认证加入对应组——area_1 进 mesh-mpp 组,area_2~area_4 进 mesh-mp 组:

[WAC] wlan
[WAC-wlan] ap-group name mesh-mpp
[WAC-wlan-ap-group-mesh-mpp] quit
[WAC-wlan] ap-group name mesh-mp
[WAC-wlan-ap-group-mesh-mp] quit
[WAC-wlan] regulatory-domain-profile name domain1
[WAC-wlan-regulate-domain-domain1] country-code cn
[WAC-wlan-regulate-domain-domain1] quit
[WAC-wlan] quit
[WAC] capwap source interface vlanif 100
[WAC] wlan
[WAC-wlan] ap auth-mode mac-auth
[WAC-wlan] ap-id 1 ap-mac 00e0-fc76-e360
[WAC-wlan-ap-1] ap-name area_1
[WAC-wlan-ap-1] ap-group mesh-mpp
[WAC-wlan-ap-1] quit
[WAC-wlan] ap-id 2 ap-mac 00e0-fc04-b500
[WAC-wlan-ap-2] ap-name area_2
[WAC-wlan-ap-2] ap-group mesh-mp
[WAC-wlan-ap-2] quit
[WAC-wlan] ap-id 3 ap-mac 00e0-fc74-9640
[WAC-wlan-ap-3] ap-name area_3
[WAC-wlan-ap-3] ap-group mesh-mp
[WAC-wlan-ap-3] quit
[WAC-wlan] ap-id 4 ap-mac 00e0-fc04-c600
[WAC-wlan-ap-4] ap-name area_4
[WAC-wlan-ap-4] ap-group mesh-mp
[WAC-wlan-ap-4] quit

第四步,配 Mesh 射频参数。回传链路要手工锁信道和功率(关闭自动调优),coverage distance 缺省 3(单位 100 米),本例放宽到 20 适应远距离回传:

[WAC-wlan] ap-group name mesh-mp
[WAC-wlan-ap-group-mesh-mp] radio 0
[WAC-wlan-ap-group-mesh-mp-radio-0] frequency 5g
[WAC-wlan-ap-group-mesh-mp-radio-0] calibrate auto-channel-select disable
[WAC-wlan-ap-group-mesh-mp-radio-0] calibrate auto-txpower-select disable
[WAC-wlan-ap-group-mesh-mp-radio-0] channel 80mhz 36
[WAC-wlan-ap-group-mesh-mp-radio-0] coverage distance 20
[WAC-wlan-ap-group-mesh-mp-radio-0] quit
[WAC-wlan-ap-group-mesh-mp] radio 1
[WAC-wlan-ap-group-mesh-mp-radio-1] calibrate auto-channel-select disable
[WAC-wlan-ap-group-mesh-mp-radio-1] calibrate auto-txpower-select disable
[WAC-wlan-ap-group-mesh-mp-radio-1] channel 80mhz 149
[WAC-wlan-ap-group-mesh-mp-radio-1] coverage distance 20
[WAC-wlan-ap-group-mesh-mp-radio-1] quit

第五步,配 Mesh 安全模板、白名单和角色。白名单按相邻关系成对建(1-2、2-3、3-4),规定谁能跟谁建链;MPP 角色通过 AP 系统模板指给 area_1,MP 是缺省角色不用配:

[WAC-wlan] security-profile name mesh-sec
[WAC-wlan-sec-prof-mesh-sec] security wpa2 psk pass-phrase YsH_2022 aes
[WAC-wlan-sec-prof-mesh-sec] quit
[WAC-wlan] mesh-whitelist-profile name mesh-list1-2
[WAC-wlan-mesh-whitelist-mesh-list1-2] peer-ap mac 00e0-fc76-e360
[WAC-wlan-mesh-whitelist-mesh-list1-2] peer-ap mac 00e0-fc04-b500
[WAC-wlan-mesh-whitelist-mesh-list1-2] quit
[WAC-wlan] mesh-whitelist-profile name mesh-list2-3
[WAC-wlan-mesh-whitelist-mesh-list2-3] peer-ap mac 00e0-fc04-b500
[WAC-wlan-mesh-whitelist-mesh-list2-3] peer-ap mac 00e0-fc74-9640
[WAC-wlan-mesh-whitelist-mesh-list2-3] quit
[WAC-wlan] mesh-whitelist-profile name mesh-list3-4
[WAC-wlan-mesh-whitelist-mesh-list3-4] peer-ap mac 00e0-fc74-9640
[WAC-wlan-mesh-whitelist-mesh-list3-4] peer-ap mac 00e0-fc04-c600
[WAC-wlan-mesh-whitelist-mesh-list3-4] quit
[WAC-wlan] ap-system-profile name mesh-sys
[WAC-wlan-ap-system-prof-mesh-sys] mesh-role mesh-portal
[WAC-wlan-ap-system-prof-mesh-sys] quit
[WAC-wlan] mesh-profile name mesh-radio0
[WAC-wlan-mesh-prof-mesh-radio0] mesh-id mesh-net
[WAC-wlan-mesh-prof-mesh-radio0] link-aging-time 30
[WAC-wlan-mesh-prof-mesh-radio0] security-profile mesh-sec
[WAC-wlan-mesh-prof-mesh-radio0] quit
[WAC-wlan] mesh-profile name mesh-radio1
[WAC-wlan-mesh-prof-mesh-radio1] mesh-id mesh-net
[WAC-wlan-mesh-prof-mesh-radio1] link-aging-time 30
[WAC-wlan-mesh-prof-mesh-radio1] security-profile mesh-sec
[WAC-wlan-mesh-prof-mesh-radio1] quit

第六步,AP 射频引用白名单、AP 组引用系统模板与 Mesh 模板,Mesh 业务生效(mesh-mpp 组引用 mesh-sys,两个组按射频引用 mesh-radio0/mesh-radio1,各 AP 射频按相邻关系绑定白名单)。

验证

执行 display ap all,四台 AP 的 State 显示"nor"即全部正常上线——包括三台没拉网线的 MP:

<WAC> display ap all
Total AP information:       
nor  : normal          [4]  
Total: 4    
ID   MAC            Name   Group      IP              Type                 State STA Uptime      ExtraInfo
1    00e0-fc76-e360 area_1 mesh-mpp   10.23.100.254   AirEngine5776I-X6EH  nor   0  13M:45S     -
2    00e0-fc04-b500 area_2 mesh-mp    10.23.100.253   AirEngine5776I-X6EH  nor   0  5M:22S      -
3    00e0-fc74-9640 area_3 mesh-mp    10.23.100.252   AirEngine5776I-X6EH  nor   0  4M:14S      -
4    00e0-fc04-c600 area_4 mesh-mp    10.23.100.251   AirEngine5776I-X6EH  nor   0  5M:40S      -

再看 display wlan mesh link all,能看到 area_1↔area_2、area_2↔area_3、area_3↔area_4 之间的 Mesh 链路逐跳搭起来,每条链路的信道、信噪比、收发速率一目了然。

有线到不了的地方,无线回传一跳一跳接力过去。贵州诚鑫致达科技在给园区做覆盖评估时,会把 Mesh 回传当作布线的替代路径一起测算。你们的死角区域是怎么解决的?评论区聊聊距离和障碍物情况,帮你判断适合几跳。