How to make AC/AP Online across the public network?

1. configuration on the AC
①configuration in the 【Config Wizard】




②VLAN configuration


③Route and interface Configuration


2. configuration on the headquarters core switch
S5310#conf t
S5310(config)#vlan 30
S5310(config-vlan)#ip address 192.168.30.1 255.255.255.0
S5310(config)#int g0/2--->connect to the AC
S5310(config-if-GigabitEthernet 0/2)#switch mode trunk
S5310(config)#ip route 1.1.1.1 255.255.255.255 192.168.30.254 ---->Create a callback route on the switch. Set the next hop to 192.168.30.254 for interconnection between AC and the core switch, and the destination address to 1.1.1.1 for the AC tunnel
S5310(config)#end
S5310#wr
3. Configure the egress router at the headquarters
Note : (Engineers from the router manufacturer are recommended to configure the router according to the following requirements).
Map port 1.1.1.1 of the AC tunnel to the extranet on the egress router as UD P5246 and UDP 5247
4. configuration on the headquarters branch switch
①Create a gateway and address pool for wireless user vlan 10
S5310#conf t
S5310(config)#vlan 10
S5310(config-vlan)#ex
S5310(config-vlan 10)#ip address 192.168.10.1 255.255.255.0
S5310(config-vlan 10)#exit
S5310(config)#ip dhcp pool STA
S5310(dhcp-config)#network 192.168.10.0 255.255.255.0
S5310(dhcp-config)#default-route 192.168.10.1
S5310(dhcp-config)#dns-server 114.114.114.114
②Create a gateway and address pool for AP management vlan 20. Add option 138 field to the address pool of vlan 20. Configure the public address 58.64.254.253 mapped to the AC tunnel address 1.1.1.1 of the headquarters
S5310#conf t
S5310(config)#vlan 20
S5310(config-vlan)#ex
S5310(config-vlan 10)#ip address 192.168.10.1 255.255.255.0
S5310(config-vlan 10)#exit
S5310(config)#ip dhcp pool ap
S5310(dhcp-config)#network 192.168.20.0 255.255.255.0
S5310(dhcp-config)#default-route 192.168.20.1
S5310(dhcp-config)#dns-server 114.114.114.114
S5310(dhcp-config)#option 138 ip 58.64.254.253---->Configure the option 138 field in the ap address pool. ip address 58.64.254.253 is the public P address mapped to the AC tunnel address of the headquarters on the egress router of the headquarters
S5310(config)#server dhcp-->enable dhcp function
S5310(config)#end
S5310#wr
③Make sure the segment from VLAN10 and VLAN20 can both access the network
5. Branch access switch configuration
①Create VLAN 10 and VLAN 20 on the access switch
②Configure the interconnection port between the access switch and the core switch as a trunk port, and allow VLAN10 and VLAN20
③Configure the trunk interface between the access switch and the AP, allow VLAN10 and VLAN20, and configure nativevlan 20
S5310(config)#int g0/6 -->the port where an access switch is connected to the AP
S5310(config-if-GigabitEthernet 0/6)#switch mode trunk
S5310(config-if-GigabitEthernet 0/6)#switch mode native vlan 20
S5310(config-if-GigabitEthernet 0/6)#end
S5310#wr
6. Configure the branch egress router ( advised to ask engineers from the router manufacturer to configure the router according to the following requirements.)
1. Ensure that network segments VLAN10 and VLAN20 can properly communicate with the external network
2. Allow UDP port 5246,5247