How to config AC and make fit AP online(connect to an Unmanaged Switch )

Requirements:
The AC is connected to a non-managed switch and a fit AP connect switch. Users connected to the SSID of this fit AP must be able to obtain an address and access the Internet.
Configuration
tips:
Device is fit mode by default, you can use this command to check:
Ruijie>show ap-mode
If it not fit mode, you can use this command to change the mode:
Ruijie>ap-mode fit
Topology:


Configuration steps:
1. AP online configuration
Ruijie#configure terminal     
Ruijie(config)#interface vlan 1
Ruijie(config-int-vlan)#ip add 192.168.1.254255.255.255.0   ----->this ip address for establishing capwap tunnel with AP

Ruijie(config-int-vlan)#exit
Ruijie(config)#ac-controller
Ruijie(config-ac)#capwap ctrl-ip 192.168.1.254  ------>The AC uses 192.168.1.254ip address to establish a capwap tunnel with the AP. By default, the ip address of the AC loopback0 is used to establish a capwap tunnel with the AP

Ruijie(config-ac)#exit
2. SSID configuration:
1) Create SSID
Centralized forwarding (default):
Ruijie(config)#wlan-config 1 Ruijie    ------->configwlan-config id is 1, SSID is Ruijie

Ruijie(config-wlan)#enable-broad-ssid        
Ruijie(config-wlan)#exit
Local forwarding: (recommended):
Ruijie(config)#wlan-config 1  Ruijie   ------->config wlan-config id is 1, SSIDis Ruijie

Ruijie(config-wlan)#enable-broad-ssid   
Ruijie(config-wlan)#tunnel local      
------->configlLocalforwarding for this SSID

Ruijie(config-wlan)#exit
2)Ap-group configuration, associated with thewlan-config and user vlan
Ruijie(config)#ap-group default
Ruijie(config-ap-group)#interface-mapping 1 1      ---->Associatewlan-config 1 with vlan 1. The first "1" is wlan-config, and thesecond "1" is vlan

Ruijie(config-ap-group)#exit
3) SSID password:
Ruijie(config)#wlansec 1
Ruijie(config-wlansec)#security rsn enable    ---->Enablethe wireless encryption function

Ruijie(config-wlansec)#security rsn ciphers aesenable     ---->EnableAES encryption

Ruijie(config-wlansec)#security rsn akm pskenable   ---->Theshared key authentication mode is enabled

Ruijie(config-wlansec)#security rsn akm psk set-keyascii Ruijie1212     ---->password cannot shorter then 8 characters

Ruijie(config-wlansec)#end
Ruijie#wr
3. If DHCP pool is not configured on egress gateway(or user needs to obtain ip address from AC):
Ruijie(config)#service dhcp --->  enable dhcp derver

Ruijie(config)#ip dhcp pool ap    ---> createdhcp pool and named "ap"   

Ruijie(dhcp-config)#option 138 ip 1.1.1.1   --->configure option 138 and connect to AC ip address

Ruijie(dhcp-config)#network 192.168.1.0255.255.255.0    ---> This is the address assigned to ap

Ruijie(dhcp-config)#default-router 192.168.1.254    --->  This is the gateway address assigned to theap

Ruijie(dhcp-config)#dns-server 8.8.8.8      ---> dns server ip address   

Ruijie(dhcp-config)#end
Ruijie#wr
Verification:
Ruijie#show ap-config summary



Ruijie#show ap-config client