ar150&160&200&1200&2200&3200 v200r005c00 configuration guide - wlan-ac 01_bookmap.pdf

Upload: ardhy-baskara

Post on 08-Jul-2018

228 views

Category:

Documents


0 download

TRANSCRIPT

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    1/318

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    V200R005C00

    Configuration Guide - WLAN AC

    Issue 01

    Date 2013-06-30

    HUAWEI TECHNOLOGIES CO., LTD.

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    2/318

     

    Copyright © Huawei Technologies Co., Ltd. 2013. All rights reserved.

    No part of this document may be reproduced or transmitted in any form or by any means without prior written

    consent of Huawei Technologies Co., Ltd.

     

    Trademarks and Permissions

     and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.

     All other trademarks and trade names mentioned in this document are the property of their respective holders.

     

    Notice

    The purchased products, services and features are stipulated by the contract made between Huawei and the

    customer. All or part of the products, services and features described in this document may not be within the

    purchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information,and recommendations in this document are provided "AS IS" without warranties, guarantees or representations

    of any kind, either express or implied.

    The information in this document is subject to change without notice. Every effort has been made in the

    preparation of this document to ensure accuracy of the contents, but all statements, information, and

    recommendations in this document do not constitute a warranty of any kind, express or implied.

     

    Huawei Technologies Co., Ltd.

     Address: Huawei Industrial Base

    Bantian, Longgang

    Shenzhen 518129

    People's Republic of China

    Website: http://enterprise.huawei.com

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    i

    http://enterprise.huawei.com/

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    3/318

    About This Document

    Intended Audience

    This document provides the concepts, configuration procedures, and configuration examples of 

    WLAN-AC features supported by the AR150&160&200&1200&2200&3200.

    This document is intended for:

    l Data configuration engineers

    l Commissioning engineers

    l  Network monitoring engineers

    l System maintenance engineers

    Symbol Conventions

    The symbols that may be found in this document are defined as follows.

    Symbol Description

    DANGER

    Indicates a hazard with a high level of risk, which if not

    avoided, will result in death or serious injury.

    WARNING

    Indicates a hazard with a medium or low level of risk, which

    if not avoided, could result in minor or moderate injury.

    CAUTION

    Indicates a potentially hazardous situation, which if not

    avoided, could result in equipment damage, data loss, performance degradation, or unexpected results.

    TIP Indicates a tip that may help you solve a problem or save

    time.

    NOTE Provides additional information to emphasize or supplement

    important points of the main text.

     

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC About This Document

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    ii

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    4/318

    Command Conventions

    The command conventions that may be found in this document are defined as follows.

    Convention Description

    Boldface The keywords of a command line are in boldface.

     Italic Command arguments are in italics.

    [ ] Items (keywords or arguments) in brackets [ ] are optional.

    { x | y | ... } Optional items are grouped in braces and separated by

    vertical bars. One item is selected.

    [ x | y | ... ] Optional items are grouped in brackets and separated by

    vertical bars. One item is selected or no item is selected.

    { x | y | ... }* Optional items are grouped in braces and separated byvertical bars. A minimum of one item or a maximum of all

    items can be selected.

    [ x | y | ... ]* Optional items are grouped in brackets and separated by

    vertical bars. Several items or no item can be selected.

    & The parameter before the & sign can be repeated 1 to n times.

    # A line starting with the # sign is comments.

     

    Interface Numbering Conventions

    Interface numbers used in this manual are examples. In device configuration, use the existing

    interface numbers on devices.

    Security Conventions

    l Password setting

    – When configuring a password in plain text, the password is saved in the configuration

    file in plain text. The plain text has high security risks. The cipher text is recommended.

    To ensure device security, change the password periodically.

    – When you configure a password in cipher text that starts and ends with %@%@ (the

     password can be decrypted by the device), the password is displayed in the same manner 

    as the configured one in the configuration file. Do not use this setting.

    l Encryption algorithm

    Currently, the device uses the following encryption algorithms: DES, AES, SHA-1, SHA-2,

    and MD5. DES and AES are reversible, and SHA-1, SHA-2, and MD5 are irreversible.

    The encryption algorithm depends on actual networking. If protocols are used for 

    interconnection, the locally stored password must be reversible. It is recommended that theirreversible encryption algorithm be used for the administrator password.

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC About This Document

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    iii

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    5/318

    l Personal data

    Some personal data may be obtained or used during operation or fault location of your 

     purchased products, services, features, so you have an obligation to make privacy policies

    and take measures according to the applicable law of the country to protect personal data.

    Change History

    Changes between document issues are cumulative. Therefore, the latest document version

    contains all updates made to previous versions.

    Changes in Issue 01 (2013-06-30)

    Initial commercial release.

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC About This Document

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    iv

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    6/318

    Contents

    About This Document.....................................................................................................................ii

    1 Precautions for the Configuration..............................................................................................1

    2 WLAN-AC Service Configuration..............................................................................................8

    2.1 Overview........................................................................................................................................................................9

    2.2 Default Configuration...................................................................................................................................................11

    2.3 Configuration Process...................................................................................................................................................11

    2.4 Configuring AC System Parameters.............................................................................................................................12

    2.4.1 Configuring the WLAN Mode..................................................................................................................................12

    2.4.2 Configuring Country Codes.......................................................................................................................................13

    2.4.3 Configuring an AC Identifier....................................................................................................................................13

    2.4.4 Configuring a Source Interface..................................................................................................................................14

    2.4.5 (Optional) Configuring a Network Element Name...................................................................................................16

    2.4.6 Checking the Configuration.......................................................................................................................................162.5 Managing APs on the AC.............................................................................................................................................17

    2.5.1 (Optional) Adding AP Types.....................................................................................................................................17

    2.5.2 (Optional) Configuring CAPWAP Tunnel Parameters.............................................................................................19

    2.5.3 (Optional) Configuring Automatic Upgrade When APs Go Online.........................................................................20

    2.5.4 Adding APs................................................................................................................................................................21

    2.5.5 Configuring an AP Region........................................................................................................................................24

    2.5.6 Configuring an AP Profile and Binding an AP to the AP Profile.............................................................................26

    2.5.7 (Optional) Configuring a Network Element Name or System Name on an AP........................................................31

    2.5.8 (Optional) Configuring a Management VLAN on an AP.........................................................................................32

    2.5.9 (Optional) Configuring LLDP on an AP...................................................................................................................32

    2.5.10 (Optional) Configuring an AC to Cache AP Data...................................................................................................34

    2.5.11 (Optional) Configuring an AP as a Non-Authenticated User..................................................................................35

    2.5.12 (Optional) Configuring the User Name and Password for Logins to an AP...........................................................36

    2.5.13 (Optional) Configuring Alarm Thresholds on an AP..............................................................................................36

    2.5.14 (Optional) Configuring Log Backup for APs..........................................................................................................38

    2.5.15 (Optional) Configuring Log Suppression on APs...................................................................................................39

    2.5.16 (Optional) Configuring the Interval for Collecting AP Performance Statistics......................................................39

    2.5.17 (Optional) Changing the MAC Address or SN of an AP........................................................................................40

    2.5.18 Checking the Configuration.....................................................................................................................................41

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC Contents

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    v

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    7/318

    2.6 Configuring the WLAN Service VAP..........................................................................................................................41

    2.6.1 Creating a WMM Profile...........................................................................................................................................42

    2.6.2 Configuring a Radio Profile......................................................................................................................................43

    2.6.3 Binding a WMM Profile to a Radio Profile..............................................................................................................52

    2.6.4 Creating a Security Profile........................................................................................................................................53

    2.6.5 Creating a Traffic Profile...........................................................................................................................................53

    2.6.6 Configuring a WLAN-ESS Interface........................................................................................................................54

    2.6.7 Configuring a WLAN Service Set.............................................................................................................................56

    2.6.8 Binding a Security Profile, a Traffic Profile, and an WLAN-ESS Interface to a Service Set...................................60

    2.6.9 Configuring a Radio..................................................................................................................................................61

    2.6.10 Binding a Radio Profile and a Service Set to a Radio.............................................................................................63

    2.6.11 Committing the Configuration.................................................................................................................................64

    2.6.12 Checking the Configuration.....................................................................................................................................65

    2.7 Maintaining WLANs....................................................................................................................................................65

    2.7.1 Performing an In-Service Upgrade on APs...............................................................................................................66

    2.7.2 Resetting an AP.........................................................................................................................................................67

    2.7.3 Monitor ing APs.........................................................................................................................................................67

    2.7.4 Monitor ing STAs.......................................................................................................................................................68

    2.7.5 Restoring the Factory Settings of an AP...................................................................................................................68

    2.7.6 Checking the Connectivity Between an AP and a Network Device..........................................................................69

    2.7.7 Clearing the List of Unauthorized APs......................................................................................................................70

    2.7.8 Displaying Neighbor Information.............................................................................................................................70

    2.8 Configuration Examples...............................................................................................................................................702.8.1 Example for Configuring the WLAN Service on a Small-Scale Network................................................................71

    2.8.2 Example for Configuring the WLAN Service on a Medium-Scale Network............................................................76

    2.8.3 Example for Configuring the WLAN Service on a Large-Scale Network................................................................81

    3 WLAN Security Configuration.................................................................................................91

    3.1 WLAN Security Overview...........................................................................................................................................93

    3.2 WLAN Security Features Supported by the Device.....................................................................................................93

    3.3 Default Configuration...................................................................................................................................................97

    3.4 Configuring a WLAN Security Policy.........................................................................................................................98

    3.4.1 Configuring a WEP Security Policy..........................................................................................................................983.4.2 Configuring a WPA/WPA2 Security Policy...........................................................................................................100

    3.4.3 Configuring a WAPI Security Policy......................................................................................................................101

    3.4.4 Checking the Configuration.....................................................................................................................................103

    3.5 Configuring the STA Blacklist or Whitelist...............................................................................................................104

    3.5.1 Configuring a STA Whitelist...................................................................................................................................104

    3.5.2 Configuring a STA Blacklist...................................................................................................................................105

    3.5.3 Checking the Configuration.....................................................................................................................................106

    3.6 Configuring User Isolation.........................................................................................................................................106

    3.7 Maintaining WLAN Security.....................................................................................................................................107

    3.7.1 Displaying WLAN Security Configuration.............................................................................................................107

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC Contents

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    vi

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    8/318

    3.8 Configuration Examples.............................................................................................................................................108

    3.8.1 Example for Configuring WEP Authentication.......................................................................................................108

    3.8.2 Example for Configuring WPA+PSK Authentication.............................................................................................112

    3.8.3 Example for Configuring WPA+802.1X Authentication........................................................................................117

    3.8.4 Example for Configuring Preshared Key-Based WAPI..........................................................................................124

    3.8.5 Example for Configuring Certificate-Based WAPI ................................................................................................129

    3.8.6 Example for Configuring Wireless MAC Address Authentication.........................................................................134

    3.8.7 Example for Configuring WLAN Portal Authentication........................................................................................139

    4 Radio Resource Management..................................................................................................147

    4.1 Overview....................................................................................................................................................................149

    4.2 Radio Resource Management Features Supported by the Device..............................................................................149

    4.3 Default Configuration.................................................................................................................................................151

    4.4 Configuring Radio Calibration...................................................................................................................................151

    4.5 Configuring Load Balancing......................................................................................................................................153

    4.5.1 Configuring Static Load Balancing.........................................................................................................................153

    4.6 Configuring 5G-Prior Access.....................................................................................................................................155

    4.7 Configuring Interference Detection............................................................................................................................156

    4.8 Maintaining Radio Resource Management................................................................................................................157

    4.8.1 Displaying Radio Calibration Statistics...................................................................................................................157

    4.8.2 Clearing Radio Calibration Statistics......................................................................................................................157

    4.9 Configuration Examples.............................................................................................................................................158

    4.9.1 Example for Configuring Partial Radio Calibration for an AP...............................................................................158

    4.9.2 Example for Configuring Global Radio Calibration for APs..................................................................................162

    4.9.3 Example for Configuring Session-based Static Load Balancing.............................................................................167

    5 WLAN Reliability Configuration...........................................................................................174

    5.1 Overview....................................................................................................................................................................175

    5.2 WLAN R eliability Features Supported by the Device...............................................................................................175

    5.3 Default Configuration.................................................................................................................................................178

    5.4 Configuring Dual-Link Backup..................................................................................................................................179

    5.5 Configuring Service Holding upon CAPWAP Link Disconnection..........................................................................182

    5.6 Configuration Examples.............................................................................................................................................183

    5.6.1 Example for Configuring Dual-link Backup (AP-Specific Configuration Mode)..................................................183

    5.6.2 Example for Configuring Dual-link Backup Globally (Global Configuration Mode)............................................190

    5.6.3 Example for Configuring Service Holding upon CAPWAP Link Disconnection..................................................198

    6 Roaming  Configuration...........................................................................................................205

    6.1 Overview....................................................................................................................................................................206

    6.2 Roaming Features Supported by the Device..............................................................................................................206

    6.3 Configuring Roaming Between APs in the Same Service VLAN.............................................................................207

    6.3.1 Configuring Non-Fast Roaming Between APs in the Same Service VLAN..........................................................208

    6.3.2 Configuring Fast Roaming Between APs in the Same Service VLANs.................................................................208

    6.3.3 Checking the Configuration.....................................................................................................................................209

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC Contents

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    vii

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    9/318

    6.4 Configuring Roaming Between APs in Different Service VLANs............................................................................209

    6.4.1 Configuring Non-Fast Roaming Between APs in Different Service VLANs.........................................................210

    6.4.2 Configuring Fast Roaming Between APs in Different Service VLANs.................................................................211

    6.4.3 Checking the Configuration.....................................................................................................................................211

    6.5 Configuration Examples.............................................................................................................................................212

    6.5.1 Example for Configuring Non-Fast Roaming Between APs in the Same Service VLAN......................................212

    6.5.2 Example for Configuring Fast Roaming Between APs in the Same Service VLAN..............................................218

    6.5.3 Example for Configuring Non-Fast Roaming Between APs in Different Service VLANs....................................225

    6.5.4 Example for Configuring Fast Roaming Between APs in Different Service VLANs............................................232

    7 WLAN QoS Configuration......................................................................................................240

    7.1 Overview....................................................................................................................................................................241

    7.2 WLAN QoS Features Supported by the Device.........................................................................................................241

    7.3 Default Configuration.................................................................................................................................................243

    7.4 Configuring WMM.....................................................................................................................................................243

    7.5 Configuring Priority Mapping....................................................................................................................................246

    7.6 Configuring Traffic Policing......................................................................................................................................248

    7.6.1 Configuring VAP-based Traffic Policing................................................................................................................248

    7.6.2 Configuring User-based Traffic Policing................................................................................................................249

    7.7 Configuration Examples.............................................................................................................................................250

    7.7.1 Example for Configuring WMM.............................................................................................................................250

    7.7.2 Example for Configuring Priority Mapping............................................................................................................255

    7.7.3 Example for Configuring Traffic Policing..............................................................................................................261

    8 WDS Configuration..................................................................................................................267

    8.1 WLAN WDS Overview..............................................................................................................................................268

    8.2 Configuration Notes...................................................................................................................................................271

    8.3 Default Configuration.................................................................................................................................................272

    8.4 Configuring WDS.......................................................................................................................................................273

    8.4.1 Creating a WMM Profile.........................................................................................................................................274

    8.4.2 Configuring a Radio Profile....................................................................................................................................274

    8.4.3 Binding a WMM Profile to a Radio Profile............................................................................................................284

    8.4.4 Adding an AP..........................................................................................................................................................285

    8.4.5 Configuring a Radio Profile and Binding the Radio Profile to a Radio..................................................................2878.4.6 Enabling the Wireless Bridge Function and Configuring the Bridge Working Mode............................................289

    8.4.7 Configuring a Security Profile and Setting the Security Policy to WPA2+PSK+CCMP.......................................291

    8.4.8 Configuring a Bridge Profile and Binding the Bridge Profile to the Radio............................................................291

    8.4.9 (Optional) Configuring the Bridge Whitelist...........................................................................................................293

    8.4.10 Configuring an AP Wired Interface.......................................................................................................................295

    8.4.11 (Optional) Configuring STP..................................................................................................................................296

    8.4.12 Deliver ing Parameters to APs................................................................................................................................297

    8.4.13 Checking the Configuration...................................................................................................................................297

    8.5 Maintaining WDS.......................................................................................................................................................298

    8.6 Configuration Examples.............................................................................................................................................298

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC Contents

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    viii

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    10/318

    8.6.1 Example for Configuring WLAN WDS..................................................................................................................299

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC Contents

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    ix

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    11/318

    1 Precautions for the ConfigurationThis section describes prerequisites for configuring the WLAN service and configuration notes.

    VLAN Deployment

    Packets transmitted on a WLAN include management packets and service data packets.

    l Management packets must be forwarded through Control And Provisioning of Wireless

    Access Points (CAPWAP) tunnels.

    l Service data packets can be forwarded directly or through CAPWAP tunnels.

    In practice, management packets and service data packets must have different VLANs

    configured. That is, management packets must have management VLANs configured, and

    service data packets must have service VLANs configured.

    l Management VLAN: transmits packets that are forwarded through CAPWAP tunnels,

    including management packets and service data packets forwarded through CAPWAP

    tunnels.

    l Service VLAN: transmits service data packets.

    NOTE

    In tunnel forwarding mode, management VLAN and service VLAN must be different.

    The following describes the forwarding process of management and service data packets. Here,

    VLAN m and VLAN m' represent management VLANs, while VLAN s and VLAN s' represent

    service VLANs.

    l When an AP connects to an AC through a Layer 2 network, VLAN m is the same as VLANm', and VLAN s is the same as VLAN s'.

    l When an AP connects to an AC through a Layer 3 network, VLAN m is different from

    VLAN m', and VLAN s is different from VLAN s'.

    l Figure 1-1 shows the process of forwarding management packets through CAPWAP

    tunnels.

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 1 Precautions for the Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    1

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    12/318

    Figure 1-1 Forwarding management packets through CAPWAP tunnels

    UDP/IP CAPWAP802.3

     AC

    Switch

     AP

    UDP/IP CAPWAP802.3VLAN m

    UDP/IP CAPWAP802.3VLAN m’

    VLAN m、VLAN m’:management VLAN

    UDP/IP CAPWAP802.3VLAN m’   Payload

    Payload

    Payload

    Payload

    UDP/IP CAPWAP802.3   Payload

    In Figure 1-1:

    – In the uplink direction (from the AP to the AC): When receiving management packets,

    the AP encapsulates the packets in CAPWAP packets. The switch tags the packets with

    VLAN m. The AC decapsulates the CAPWAP packets and removes the tag VLAN m'.

    – In the downlink direction (from the AC to the AP): When receiving downstream

    management packets, the AC encapsulates the packets in CAPWAP packets and tags

    them with VLAN m'. The switch removes the tag VLAN m from the packets. The AP

    decapsulates the CAPWAP packets.

    l Figure 1-2 shows the process of directly forwarding service data packets.

    Figure 1-2 Forwarding service data packet directly

    Payload

    Switch

     AP

    Payload

    Payload802.11

    802.11

    Payload802.3VLAN s

    Payload802.3VLAN s

    Payload802.3VLAN s’

    STA

    Internet

    VLAN s, VLAN s’: service VLAN

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 1 Precautions for the Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    2

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    13/318

    In Figure 1-2, service data packets are not encapsulated in CAPWAP packets.

    – In the uplink direction (from the STA to the Internet): When upstream service data

     packets in 802.11 format are sent from the STA to the AP, the AP converts the packets

    into 802.3 packets, tags the packets with VLAN s, and forwards the packets to the

    destination.

    – In the downlink direction (from the Internet to the STA): When downstream service

    data packets in 802.3 format reach the AP (the packets are tagged with VLAN s' by

    upstream devices), the AP converts the 802.3 packets into 802.11 packets and forwards

    them to the STA.

    l Figure 1-3 shows the process of forwarding service data packets through CAPWAP

    tunnels.

    Figure 1-3 Forwarding service data packets through CAPWAP tunnels

    Payload

    Switch

     AP

    Payload

    Payload802.11

    802.11

    Payload802.3VLAN s

    STA

     AC

    CAPWAPUDP/IP802.3

    Payload802.3VLAN sCAPWAPUDP/IP802.3VLAN m’

    Payload802.3VLAN sC APWAPUDP/IP802.3VLAN m

    Payload802.3VLAN sCAPWAPUDP/IP

    Payload802.3VLAN s

    VLAN m’ 802.3

    Internet

    VLAN m, VLAN m’: management VLAN

    VLAN s: service VLAN

    In Figure 1-3, service data packets are encapsulated in CAPWAP packets and transmitted

    through CAPWAP data tunnels.

    – In the uplink direction (from the STA to the Internet): When upstream service data

     packets in 802.11 format are sent from the STA to the AP, the AP converts the packets

    into 802.3 packets, tags the packets with VLAN s, and encapsulates them in CAPWAP

     packets. The upstream switch tags the packets with VLAN m. The AC decapsulates the

    CAPWAP packets and removes the tag VLAN m' from the packets.

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 1 Precautions for the Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    3

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    14/318

    – In the downlink direction (from the Internet to the STA): When downstream service

    data packets reach the AC, the AC encapsulates the packets in CAPWAP packets, allows

    the packets carrying VLAN s to pass through, and tags the packets with VLAN m'. The

    switch removes VLAN m from the packets. The AP decapsulates the CAPWAP packets,

    removes VLAN s, converts the 802.3 packets into 802.11 packets, and forwards them

    to the STA.

    Management VLAN tag VLAN m is the outer tag of CAPWAP-encapsulated packets. The

    intermediate devices between the AC and AP only need to transparently transmit VLAN

    m and do not need to be configured with VLAN s encapsulated in the CAPWAP packets.

    In WLAN networking, management VLANs and service VLANs must be properly planned. The

    following assumes that an AP connects to an AC through a Layer 2 network.

    l In Figure 1-4, to implement direct forwarding, ensure that the AP can exchange

    management VLAN packets with the AC and exchange service VLAN packets with

    upstream devices.

    Figure 1-4 VLAN deployment in direct forwarding mode

    SW1

     AP

    STA

    SW2  AC

    Internet

    Management VLAN: VLAN100

    Service VLAN: VLAN101

       C   A   P    W

       A   P    t   u   n   n

      e   l

    VLAN101

    VLAN101

    VLAN101

    VLAN101

    VLAN100

    VLAN100

    VLAN100

    VLAN100VLAN100

    Management packet

    Data packet

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 1 Precautions for the Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    4

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    15/318

    l In Figure 1-5, to implement tunnel forwarding, ensure that the AP can exchange

    management VLAN packets with the AC and the AC can exchange service VLAN packets

    with upstream devices.

    Figure 1-5 VLAN deployment in tunnel forwarding mode

    SW1

     AP

    STA

    SW2  AC

    Internet

    Management VLAN: VLAN100

    Service VLAN: VLAN101

       C   A   P    W

       A   P    t   u   n   n

      e   l

    VLAN101

    VLAN100

    VLAN100

    VLAN100

    VLAN100VLAN100

    Management packet

    Data packet

    VLAN101 VLAN101

    NOTE

    Currently, the device supports only direct forwarding for service packets when it functions as the AC.

    APs Supported by the Device

    l APs mentioned in this document are Huawei AP products. You are advised to use Huawei

    APs to connect to the AC.

    l You can run the display ap-type command to check the default AP types supported by the

    device.

    l If an AP that needs to connect to the AC is not within the default AP types supported by

    the device, run the ap-type command to add the AP type so that the AP can connect to theAC.

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 1 Precautions for the Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    5

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    16/318

    LAN Interface Cards Used on the WLAN

    During network deployment, APs must connect to LAN interfaces of the device. If no LAN

    interface is available on the MPU of the device or more LAN interfaces are required, you must

    use a LAN interface card. Pay attention to the following when selecting the LAN interface card:

    l AR150 series provides four LAN interfaces on the MPU and supports no LAN interface

    card.

    l AR160 series provides four LAN interfaces on the MPU and supports no LAN interface

    card.

    l AR200 series provides eight LAN interfaces on the MPU and supports no LAN interface

    card.

    l All AR1200 models provide eight LAN interfaces on their MPUs except the AR1220L

    which has no LAN interface on the MPU. The 8FE1GE or 4GE-2S card can be installed

    on the AR1200 series to provide LAN interfaces. AR1220V, AR1220W, and AR1220VW

    can connect to an external PoE power supply. Interfaces FE4 to FE7 support PoE power 

    supply.

    l AR2201-48FE and AR2202-48FE provide forty-eight LAN interfaces on their MPUs and

    support no LAN interface card.

    l AR2204 provides no LAN interface on the MPU but can use the 8FE1GE or 4GE-2S card

    to provide LAN interfaces.

    l AR2220, and AR2240 provide no LAN interface on their MPUs but can use the 8FE1GE,

    4GE-2S, or 24GE card to provide LAN interfaces.

    l AR3200 series provides no LAN interface on the MPU but can use the 8FE1GE, 4GE-2S,

    or 24GE card to provide LAN interfaces.

    NOTE

    The 4GE-2S card is an optical interface card and can connect only to APs that support optical interfaces

    or combo interfaces working in optical mode.

    License Support

    The WLAN AC function is used with a license and is unavailable by default. To use the AC

    function, apply for and purchase a license from the agent according to the device model.

    l AR150&160&200 series: AR150&160&200 value-added service package for data services

    and AR150&160&200 AC Express License

    l AR1200 series: AR1200 value-added service package for data services and AR1200 AC

    Express License

    l AR2200 series: AR2200 value-added service package for data services and AR2200 AC

    Express License

    l AR3200 series: AR3200 value-added service package for data services and AR3200 AC

    Express License

    NOTE

    To use WLAN AC functions, you must load a value-added service package and a license on the AC. A

    license is used according to the value-added service package loaded on the device; therefore, load a value-

    added service package before loading the corresponding license.

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 1 Precautions for the Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    6

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    17/318

    AC and AP version mapping 

    AC Version Minimum AP Version

    V200R005C00 V200R001C00

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 1 Precautions for the Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    7

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    18/318

    2  WLAN-AC Service ConfigurationAbout This Chapter

    You can conf igure the WLAN-AC service to enable users to easily access a wireless network 

    and move around within the coverage of the wireless network.

    2.1 Overview

    Compared with a wired local area network (LAN), a wireless LAN (WLAN) is easier to deploy

    and requires lower maintenance cost. One or more APs can provide wireless access for an area.

    2.2 Default Configuration

    This section provides the default WLAN service conf iguration.

    2.3 Configur ation Process

    This section describes the process for configuring the WLAN-AC service.

    2.4 Configuring AC System Parameters

    You can conf igure AC system parameters to identify an AC and ensure that radio parameters

    (channel and power) of an AP that associates with the AC comply with local laws and regulations.

    2.5 Managing APs on the AC

    An AC deter mines whether  to allow APs to access a WLAN and configures AP parameters and

    AP regions for APs so that APs can go online.

    2.6 Configuring the WLAN Service VAP

    When an AP is working properly, you can configure service virtual access points (VAPs) on theAP to provide differentiated WLAN services for users.

    2.7 Maintaining WLANs

    Maintaining WLANs includes upgrading APs online, resetting APs, monitoring APs, monitoring

    STAs, and restoring the factory settings of APs.

    2.8 Configuration Examples

    This section provides WLAN service configuration examples, including networking

    requirements, configuration roadmap, and configuration procedure.

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 2 WLAN-AC Service Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    8

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    19/318

    2.1 OverviewCompared with a wired local area network (LAN), a wireless LAN (WLAN) is easier to deploy

    and requires lower maintenance cost. One or more APs can provide wireless access for an area.

    Wired LANs use wired cables or optical fibers as transmission media, which are expensive and

    have fixed locations. As people have increasing requirements on network mobility, wired LANs

    cannot meet these requirements. WLAN technology is then developed. Currently, WLAN has

     become a cost-efficient network access mode. WLAN technology allows you to easily access a

    wireless network and move around within the coverage of the wireless network.

    In this configuration guide, the device functions as an Access Controller (AC) and uses the

    centralized architecture.

    Centralized Architecture

    In centralized architecture, an AC manages and controls multiple APs (Fit APs) in centralized

    manner, as shown in Figure 2-1.

    Figure 2-1 WLAN centralized architecture

    STA

    Campus

    network

    DHCP

    server 

    DNS

    server 

    NMS

    Fit AP

    Fit AP

    C   A P  W  

     A P  

     C A P W A P

     AC

    Internet

    Campus

    egress

    gateway

    STA

    STA

    STA

    STA

    In centralized architecture, APs work with an AC to implement wireless access.

    l The AC implements all security, control, and management functions, including mobile user 

    management, identity authentication, VLAN assignment, radio management, and data

    forwarding.

    l Fit APs implement wireless radio access, including radio signal transmission and detection

    response, data encryption and decryption, and data transmission acknowledgment.

    l The AC and APs communicate using Control and Provisioning of Wireless Access Points

    (CAPWAP). They can be connected across a Layer 2 or Layer 3 network.

    The centralized architecture applies to enterprise networks and carrier networks because it allows

    centralized management and maintenance. The centralized architecture is used in the following

    sections.

    Concepts

    The WLAN feature involves the following concepts:

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 2 WLAN-AC Service Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    9

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    20/318

    l Station (STA): a terminal that supports 802.11 standards, such as a PC that has a wireless

     NIC or a mobile phone that supports WLAN.

    l Radio signal: high-frequency electromagnetic wave that has long-distance transmission

    capabilities. Radio signals provide transmission media for 802.11-compliant WLANs.

    Radio signals described in this document are electromagnetic waves in 2.4 GHz or 5 GHzfrequency band.

    l Access point (AP): a device that provides 802.11-compliant wireless access for STAs to

    connect wired networks to wireless networks. APs fall into two categories:

    – Fat AP: provides wireless access for STAs in the autonomous architecture. A Fat AP

     provides wireless connection, security, and management functions.

    – Fit AP: provides wireless access for STAs in the centralized architecture. A Fit AP

     provides only reliable, high-performance wireless connection and depends on an access

    controller (AC) to provide other functions.

    l AC: a device that controls and manages all the APs on a WLAN in the centralized

    architecture. For example, an AC can connect to an authentication server to authenticate

    WLAN users.

    l Control And Provisioning of Wireless Access Points (CAPWAP): an encapsulation and

    transmission mechanism defined in RFC 5415 to implement communication between APs

    and ACs.

    l Virtual access point (VAP): a WLAN service entity on an AP. You can create different

    VAPs on an AP to provide wireless access service for different user groups.

    l AP region: a collection of APs. AP regions are configured based on AP deployment on

    enterprise networks. Generally, a region maps a hotspot.

    l Service set identifier (SSID): a unique identifier that identifies a wireless network. When

    you search for available wireless networks on your laptop, SSIDs are displayed to identify

    the available wir eless networks.

    SSIDs are classified into two types:

    – Basic service set identifier (BSSID): a link-layer MAC address of a VAP on an AP.

    Figure 2-2 shows the relationship between VAP and BSSID.

    Figure 2-2 Relationship between VAP and BSSID

     AP

    VAP1:

    SSID: guestBSSID: 0025.9e45.24a0

    VAP2:

    SSID: internal

    BSSID: 0025.9e45.24a9

    STA1:

    I join the guest network

    STA2:

    I join the internal network

    –Extended service set identifier (ESSID): an identifier of one or a group of wirelessnetworks. For example, in Figure 2-2, SSID guest identifies a wireless network, and

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 2 WLAN-AC Service Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    10

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    21/318

    SSID internal identifies another wireless network. A STA scans all wireless networks

    and selects a wireless network based on the SSID. Generally, an SSID refers to an

    ESSID.

    NOTE

    Multiple APs can use one ESSID to provide roaming service for users; however, their BSSIDs

    must be unique because the MAC address of each AP is unique.

    l Basic service set (BSS): an area covered by an AP. STAs in a BSS can communicate with

    each other.

    l Extend service set (ESS): a group of BSSs that share the same SSID.

    Figure 2-3 shows the relationship between SSID, BSSID, BSS, and ESS.

    Figure 2-3 Relationship between SSID, BSSID, BSS, and ESS

     AP2

    BSS

     AP1

    BSS

    ESS

    SSID=”huawei” SSID=”huawei”

    BSSID:

    0025.9e45.24a0

    BSSID:

    0025.9e45.3100

    2.2 Default Configuration

    This section provides the default WLAN service configuration.

    Table 2-1 Default WLAN service configuration

    Parameter Default Setting  

    Country code CN (China)

    AP authentication mode MAC authenticationAP region 0

    AP profile ap-profile-0

    Data forwarding mode Direct forwarding

     

    2.3 Configuration Process

    This section describes the process for configuring the WLAN-AC service.

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 2 WLAN-AC Service Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    11

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    22/318

    Context

    Table 2-2 shows the WLAN service configuration process.

    Table 2-2 WLAN service configuration process

    No. Task Description Remarks

    1 2.4 Configuring AC

    System Parameters

    Ensure that radio

     parameters (channel

    and power) of an AP

    that associates with

    an AC comply with

    local laws and

    regulations. Tasks 1, 2, and 3

    must be performed in

    sequence.2 2.5 Managing APs

    on the AC

    Connect the AP to an

    AC correctly.

    3 2.6 Configuring the

    WLAN Service

    VAP

    Provide

    differentiated

    WLAN services for 

    users.

     

    2.4 Configuring AC System ParametersYou can configure AC system parameters to identify an AC and ensure that radio parameters

    (channel and power) of an AP that associates with the AC comply with local laws and regulations.

    Pre-Configuration Tasks

    Before configuring AC system parameters, complete the following task:

    l Powering on the device and ensuring that the self-check succeeds

    Configuration Process

    The configuration tasks are mandatory and can be performed in any sequence. The AC function

    takes effect only when all configuration tasks are completed.

    2.4.1 Configuring the WLAN Mode

    Procedure

    Step 1 Run:system-view

    The system view is displayed.

    Step 2 Run:set workmode wlan ac

    The device is configured to work in AC mode.

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 2 WLAN-AC Service Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    12

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    23/318

    By default, the device works in AP mode.

    Step 3 Run:quit

    Exit from the system view.Step 4 Run:

    reboot [ fast ]

    The device is restarted.

    NOTE

    After the device is restarted, the AC mode takes effect.

    ----End

    2.4.2 Configuring Country Codes

    Context

    A country code identifies the country to which AP radios belong. Different countries support

    different AP radio attributes, including the transmit power and supported channels.

    NOTE

    l When configuring an AC for the first time, configure a correct country code to comply with local laws

    and regulations.

    l An AP has a preconfigured country code before delivery. To enable an AP to connect to an AC, ensure

    that the AP and AC have the same country code.

    Procedure

    Step 1 Run:system-view

    The system view is displayed.

    Step 2 Run: wlan ac-global country-code country-code

    A global country code is configured for the AC.

    Changing a country code will delete related VAPs.

    By default, the global country code of an AC is CN.

    NOTE

    For details about country codes, see wlan ac-global country-code.

    ----End

    2.4.3 Configuring an AC Identifier

    Context

    An AC's identifiers include the carrier ID, AC ID, and AC network element name.

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 2 WLAN-AC Service Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    13

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    24/318

    Carrier IDs can identify ACs of different carriers, and AC IDs can identify ACs of the same

    carrier. When deploying a WLAN, use an AC ID and a carrier ID to identify an AC and facilitate

    AC maintenance and management.

    Each AC is a network element. You can configure network element names for ACs so that the

    ACs can be identified by an NMS.

    Procedure

    Step 1 Run:

    system-view

    The system view is displayed.

    Step 2 Run:

     wlan ac-global { ac id  ac-id  | carrier id  { cmcc | ctc | cuc | other } } *

    A carrier ID and an AC ID are configured for the AC.

    By default, no carrier ID or AC ID is configured for an AC.

    ----End

    2.4.4 Configuring a Source Interface

    Context

    Before an AP establishes a CAPWAP tunnel with an AC, a source interface must be specified

    for the AC.

    You can specify a VLANIF or loopback interface on the device as the AC source interface:

    l WLANIF interface: applies to the scenario where the APs that associate with the AC belong

    to the same management VLAN.

    l Loopback interface: applies to the scenario where the APs that associate with the AC belong

    to different management VLANs. When the APs belong to multiple management VLANs,

    the AC must have multiple VLANIF interfaces configured. If one of the VLANIF interfaces

    is specified as the source interface, all the APs cannot go online when the source interface

    fails. A loopback interface remains Up after being created. When a loopback interface is

    used as the source interface and a VLANIF interface becomes faulty, only the AP that

    connects to the VLANIF interface cannot go online.

    Procedure

    l Specify a VLANIF interface as the source interface.

    1. Run:

    system-view

    The system view is displayed.

    2. Run:

    vlan vlan-id 

    A VLAN is created.

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 2 WLAN-AC Service Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    14

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    25/318

    NOTE

    The created VLAN is a management VLAN.

    3. Run:

    quit

    Exit from the VLAN view.

    4. Run:

    interface vlanif vlan-id 

    A VLANIF interface is created and the VLANIF interface view is displayed.

    5. Run:

    ip address ip-address { mask | mask-length }

    An IP address and a subnet mask are configured for the VLANIF interface.

    6. Run:

    quit

    Exit from the VLANIF interface view.

    7. Run:

     wlan ac

    The WLAN view is displayed.

    8. Run:

     wlan ac source interface vlanif vlan-id 

    The VLANIF interface is specified as the source interface of the CAPWAP tunnel

    established between an AP and the AC.

    NOTE

    If a source interface has been configured on the device, you must run the undo wlan ac source

    interface command first before configuring a new source interface.

    After the undo wlan ac source interface command is executed, all APs get offline on the AC.

    Therefore, exercise caution before running the command.

    l Specify a loopback interface as the source interface.

    1. Run:

    system-view

    The system view is displayed.

    2. Run:

    interface loopback loopback-number 

    A loopback interface is created and the loopback interface view is displayed.

    3. Run:

    ip address ip-address { mask | mask-length }

    An IP address and a subnet mask are configured for the loopback interface.

    NOTE

    The IP address of a loopback interface must use a 32-bit mask.

    4. Run:

    quit

    The loopback interface view is displayed.

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 2 WLAN-AC Service Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    15

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    26/318

    5. Run:

     wlan ac

    The WLAN view is displayed.

    6. Run:

     wlan ac source interface loopback loopback-number 

    The loopback interface is specified as the source interface of the CAPWAP tunnel

    established between an AP and the AC.

    NOTE

    If a source interface has been configured on the device, you must run the undo wlan ac source

    interface command first before configuring a new source interface.

    After the undo wlan ac source interface command is executed, all APs get offline on the AC.

    Therefore, exercise caution before running the command.

    ----End

    2.4.5 (Optional) Configuring a Network Element Name

    Context

    A network element is a physical device or service unit on the network topology. Each AC is a

    network element.

    You can configure network element names for ACs so that the ACs can be identified by an NMS.

    Procedure

    Step 1 Run:system-view

    The system view is displayed.

    Step 2 Run: wlan ac

    The WLAN view is displayed.

    Step 3 Run:ac sysnetid  ac-sysnetid 

    A network element name is configured for the AC.

    By default, no network element name is configured for an AC.

    ----End

    2.4.6 Checking the Configuration

    Procedure

    l Run the display wlan ac-global command to check AC system parameters.

    l Run the display wlan ac source interface command to check the AC source interface.

    ----End

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 2 WLAN-AC Service Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    16

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    27/318

    2.5 Managing APs on the AC

    An AC determines whether to allow APs to access a WLAN and configures AP parameters and

    AP regions for APs so that APs can go online.

    Pre-Configuration Tasks

    Before configuring the AC to manage APs, complete the following tasks:

    l Configuring Layer 2 or Layer 3 interworking between APs and the AC

    l (Optional) Configuring a DHCP server to allocate IP addresses to APs and STAs

    NOTE

    For details on how to configure a DHCP server, see DHCP Configuration. To use a DHCP server to

    assign IP addresses to APs and STAs, configure the AC as the DHCP server or use an independentDHCP server.

    l When an enterprise branch has no independent DHCP server, configure an AC as the DHCP

    server.

    l An independent DHCP server applies to large WLANs of large- and medium-sized campus

    networks.

    A service DHCP address pool assigns IP addresses to STAs, and a management DHCP address pool

    assigns IP addresses to APs. The two types of DHCP address pools must be configured separately.

    Configuration Process

    The following configuration tasks must be performed in sequence: (Optional) Adding AP

    Types, (Optional) Configuring CAPWAP Tunnel Parameters, (Optional) ConfiguringAutomatic Upgrade When APs Go Online, Adding APs, Configuring AP Regions, and

    Configuring an AP Profile and Binding It to an AP. The other configuration tasks can be

     performed in any sequence.

    2.5.1 (Optional) Adding AP Types

    Context

    Only APs of the device types supported by an AC can connect to the AC. You can run the

    display ap-type all command to view the list of AP types supported by an AC. If the APs to be

    added are not specified in the list, add these AP types.

    NOTE

    If some AP types are preconfigured on an AC before delivery, modifying attributes of these APs is not

    allowed. These attributes include the maximum number of access users, antenna gain, number of wired-

    side interfaces, and number and type of radios on the APs.

    Procedure

    Step 1 Run:system-view

    The system view is displayed.

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 2 WLAN-AC Service Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    17

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    28/318

    Step 2 Run: wlan ac

    The WLAN view is displayed.

    Step 3 (Optional) Run:display ap-type all

    The list of AP types supported by the AC is displayed. You can check whether the AP types to

     be added are specified in the list.

    Step 4 Run:

    ap-type { id  type-id  | type ap-type } *

    An AP type is added and the AP type view is displayed.

    NOTE

    Before adding an AP type, specify type ap-type. Otherwise, the AP type cannot be added.

    Step 5 (Optional) Run:type-desc type-desc

    The AP type description is configured.

    By default, the AP type description is ap-type-type-id . For example, if the added AP type ID is

    201, the AP type description is ap-type-201.

    Step 6 (Optional) Run: max-sta-num  max-sta-num

    The maximum number of access users is configured.

    By default, a maximum of 128 access users are allowed on an AP.

    Step 7 (Optional) Run:antenna-gain antenna-gain

    The antenna gain is configured.

    By default, the antenna gain of an AP is 0 dB.

    Step 8 (Optional) Run:lineate-port number lineate-port-num

    The number of wired-side interfaces is configured.

    By default, an AP supports eight wired-side interfaces.

    NOTE

    Currently, AP types preconfigured on an AC before delivery support only one wired-side interface.

    Step 9 (Optional) Run:lineate-port { port0-type | port1-type | port2-type | port3-type | port4-type | port5-type | port6-type | port7-type }  port-type

    The wired-side interface type is configured.

    By default, the wired-side interface type is FE.

    Step 10 (Optional) Run:radio number radio-num

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 2 WLAN-AC Service Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    18

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    29/318

    The number of radios is configured.

    By default, an AP supports four radios.

    Step 11 Run:

    radio { radio0-type radio-type | radio1-type radio-type | radio2-type radio-type |radio3-type radio-type } *

    The radio type is configured.

    By default, the radio type on an AP is 802.11a.

    Step 12 Run:radio { radio0-max-spatial-streams max-spatial-streams | radio1-max-spatial-streams max-spatial-streams | radio2-max-spatial-streams max-spatial-streams |

    radio3-max-spatial-streams max-spatial-streams } *

    The maximum number of spatial streams on a radio is configured.

    By default, an AP radio supports only one spatial stream.

    When an AP sends information to a STA, the AP divides the data flow into multiple spatial

    streams. Each spatial stream is sent through a different antenna to ensure higher data transmission

    rate and larger coverage area.

    Step 13 Run:radio { radio0-max-antennas { smart-antenna-array | max-antennas } | radio1-max-antennas { smart-antenna-array | max-antennas } | radio2-max-antennas { smart-antenna-array | max-antennas } | radio3-max-antennas { smart-antenna-array | max-

    antennas } } *

    The maximum number of antennas on a radio is configured.

    By default, an AP radio has only one antenna.

    Step 14 Run:radio { radio0-max-vap radio-max-vap | radio1-max-vap radio-max-vap | radio2-max-

    vap radio-max-vap | radio3-max-vap radio-max-vap } *

    The maximum number of VAPs on a radio is configured.

    By default, an AP radio supports a maximum of eight VAPs.

    ----End

    2.5.2 (Optional) Configuring CAPWAP Tunnel Parameters

    Context

    After an AP is powered on and obtains an AC IP address, the AP begins to establish CAPWAP

    tunnels with the AC. CAPWAP tunnels include control tunnels and data tunnels.

    The AC sends management packets through CAPWAP control tunnels to manage APs in a

    centralized manner. To improve link reliability and prevent CAPWAP control tunnels from

     being terminated when the service traffic volume is high, configure a high priority for CAPWAP

    management packets.

    CAPWAP tunnels use heartbeat detection mechanism to ensure security:

    Heartbeat detection mechanism: The AP and AC periodically exchange Echo packets todetermine whether the control tunnel is working properly and periodically exchange Keepalive

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 2 WLAN-AC Service Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    19

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    30/318

     packets to determine whether the data tunnel is working properly. If the AP or AC does not

    receive any response from each other after Echo or Keepalive packets are sent for the specified

    number of times, the AP and AC consider that the control or data tunnel is terminated. The tunnel

    needs to be re-established.

    Procedure

    Step 1 Run:

    system-view

    The system view is displayed.

    Step 2 Run:

     wlan ac

    The WLAN view is displayed.

    Step 3 Configure CAPWAP tunnel parameters as required.

    Procedure Command Description

    Configure the priority of 

    CAPWAP management

     packets.

    capwap control-priority { ac | ap }

     priority-value

    By default, the priority

    value of CAPWAP

    management packets is

    7.

    NOTEA larger priority value

    indicates a higher 

     priority and link 

    reliability. The default

    value 7 is recommended.

    Set the

    CAPW

    AP

    heartbea

    t

    detectio

    n

    mechani

    sm.

    Configure the

    heartbeat

    detection

    interval.

    capwap keep-alive interval interval-

    value

    By default, the

    CAPWAP heartbeat

    detection interval is

    25s.

    Configure the

    number of 

    CAPWAP

    heartbeat

    detections.

    capwap keep-alive times times-value By default, a maximum

    number of six

    CAPWAP heartbeat

    detections can be

     performed.

    If dual-link backup isenabled, a maximum of 

    three CAPWAP

    heartbeat detections

    can be performed.

     

    ----End

    2.5.3 (Optional) Configuring Automatic Upgrade When APs Go

    Online

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 2 WLAN-AC Service Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    20

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    31/318

    Context

    In automatic upgrade mode, an AP checks whether its version is the same as that configured on

    the FTP server during login. If the two versions are different, the AP upgrades its version, restarts,

    and goes online again. If the two versions are the same, the AP does not upgrade its version.

    Prerequisites

    The AP version file has been uploaded to the FTP server.

    Procedure

    Step 1 Run:system-view

    The system view is displayed.

    Step 2 Run: wlan ac

    The WLAN view is displayed.

    Step 3 Run:ap-update ftp-server server-ip-address [ ftp-username ftpusername ] [ ftp-password  { cipher | simple } ftppassword  ]

    Basic FTP information, including the FTP server IP address, FTP user name, and password, is

    configured.

    By default, the FTP server IP address is 255.255.255.255, the FTP user name is anonymous, and

    the FTP password is [email protected].

    Step 4 Run:ap-update update-filename ap-type filename ap-type type-id 

    The upgrade file name for a specified AP type is specified.

    By default, no upgrade file is configured for a specified AP type.

    ----End

    2.5.4 Adding APs

    Context

    You can add APs in any of the following modes:

    l Adding APs offline: AP attributes including the AP type, MAC address, or serial number 

    (SN) are configured on the AC before APs go online. APs start to connect to the AC if their 

    AP types, MAC addresses, or SNs match the configured ones.

    l Discovering APs in the whitelist: The AP authentication mode is set to no authentication;

    alternatively, the AP authentication mode is set to MAC or SN authentication and the AP

    whitelist is configured on the AC. When an AP in the whitelist connects to the AC, the AC

    discovers the AP, and the AP goes online.

    l

    Manually confirming APs added to the list of unauthorized APs: The AP authenticationmode is set to MAC or SN authentication, and the AP whitelist is configured on the AC.

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 2 WLAN-AC Service Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    21

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    32/318

    When an AP out of the whitelist connects to the AC, the AC adds the AP to the list of 

    unauthorized APs. After the AP identity is confirmed, the AP can go online.

    After you add an AP to an AC offline and configure AP parameters, for example, AP region or 

     profile to which the AP is bound to, the AP can go online and use the configured data to work.

    When the AC is configured to automatically discover APs, an AP uses the default parametersto work after going online.

    Adding an AP offline is recommended when the MAC address or SN of the AP is already learned.

    Procedure

    l Add an AP offline.

    1. Run:

    system-view

    The system view is displayed.

    2. Run: wlan ac

    The WLAN view is displayed.

    3. Run:

    ap-auth-mode { mac-auth | sn-auth }

    The AP authentication mode is set to MAC or SN authentication.

    By default, the AP authentication mode is MAC address authentication.

    4. Run:

    ap id  ap-id  { type-id  type-id  | ap-type ap-type } { mac ap-mac | sn ap-

    sn } *

    The specified AP is added offline.

    By default, no AP is added offline.

    NOTE

    If the AP authentication mode is set to MAC authentication, specify the MAC address of an

    AP when adding the AP offline. If the AP authentication mode is set to SN authentication,

    specify the SN of an AP when adding the AP offline.

    When an AP connects to the AC, the AP enters the normal state if the MAC address or SN of 

    the AP is on the whitelist.

    l Configure the AC to discover APs in the whitelist.

    – Set the AP authentication mode to no authentication.

    1. Run:system-view

    The system view is displayed.

    2. Run: wlan ac

    The WLAN view is displayed.

    3. Run:

    ap-auth-mode no-auth

    The AP authentication mode is set to no authentication.

    By default, the AP authentication mode is MAC address authentication.

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 2 WLAN-AC Service Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    22

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    33/318

    NOTE

    When an AP connects to the AC, the AP enters the normal state if the MAC address or 

    SN of the AP is on the whitelist.

    – Set the AP authentication mode to MAC or SN authentication.

    1. Run:system-view

    The system view is displayed.

    2. Run: wlan ac

    The WLAN view is displayed.

    3. Run:

    ap-auth-mode { mac-auth | sn-auth }

    The AP authentication mode is set to MAC or SN authentication.

    By default, the AP authentication mode is MAC address authentication.

    4. Configure the AP whitelist.

    – If the AP authentication mode is set to MAC authentication, run:ap-whitelist mac ap-mac1 to ap-mac2

    The AP with the specified MAC address is added to the whitelist.

    – If the AP authentication mode is set to SN authentication, run:ap-whitelist sn ap-sn1 to ap-sn2

    The AP with the specified SN is added to the whitelist.

    NOTE

    When an AP connects to the AC, the AP enters the normal state if the MAC address or SN of 

    the AP is on the whitelist.

    l Confirm the AP added to the list of unauthorized APs.

    1. Run:

    system-view

    The system view is displayed.

    2. Run:

     wlan ac

    The WLAN view is displayed.

    3. Run:

    ap-auth-mode { mac-auth | sn-auth }

    The AP authentication mode is set to MAC or SN authentication.

    By default, the AP authentication mode is MAC address authentication.

    4. Run:

    display unauthorized-ap record 

    Information about unauthorized APs is displayed.

    5. Run:

    ap-confirm  { all | { mac ap-mac | sn ap-sn } [ id  ap-id  ] }

    The specified authorized AP is confirmed. The AP then enters the normal state.

    ----End

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 2 WLAN-AC Service Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    23

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    34/318

    2.5.5 Configuring an AP Region

    Context

    After an AP goes online, the AC adds the AP to an AP region. If an AP region is specified for the AP, the AC adds the AP to the specified AP region. If no AP region is specified for the AP,

    the AC adds the AP to the default AP region.

    Adjusting the parameters (supported channel or power) of an AP may cause the parameters of 

    neighboring APs to be adjusted. To quicken adjustment, minimize the impact, and reduce the

    workload, all the APs connecting to the same AC can be divided into several regions. The impact

    of adjustment on an AP is limited within the local region.

    You can add APs to an AP region using two methods:

    l To add all the APs deployed at a hotspot to the same AP region, create an AP region and

    change the default AP region to the new AP region. After the APs are powered on, they

    automatically connect to the WLAN and join the new AP region.l To add online APs to the same AP region, create an AP region for the current hotspot and

    import all the APs in the default AP region into the new AP region.

    Procedure

    l Create an AP region and add APs to the AP region.

    1. Run:

    system-view

    The system view is displayed.

    2. Run:

     wlan ac

    The WLAN view is displayed.

    3. Run:

    ap-region id  region-id 

    An AP region is created and the AP region view is displayed.

    4. (Optional) Run:

    ap-region-name region-name

    The AP region name is configured.

    By default, the AP region name is ap-region-region-id . If AP region 6 is created, itsregion name is ap-region-6.

    5. Run:

    deploy-mode { densely-deploy | discrete-deploy | normal-deploy }

    The AP deployment mode in the AP region is configured.

    By default, the AP deployment mode in an AP region is normal-deploy.

    6. Run:

    quit

    Exit from the AP region view.

    7. Run:ap id  ap-id 

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide - WLAN AC 2 WLAN-AC Service Configuration

    Issue 01 (2013-06-30) Huawei Proprietary and Confidential

    Copyright © Huawei Technologies Co., Ltd.

    24

  • 8/19/2019 AR150&160&200&1200&2200&3200 V200R005C00 Configuration Guide - WLAN-AC 01_bookmap.pdf

    35/318

    The AP view is displayed.

    NOTE

    ap-id  identifies an AP on an AC. An AC assigns a unique ID to each AP. You can specify ap-

    id  to configure parameters for a specified AP.

    8. Run:

    region-id  region-id 

    The AP is added to the created AP region.

    By default, an AP is added to AP region 0.

    NOTE

    An AP joins an AP region after going online. If no AP region is created, the AP joins default

    AP region 0.

    l Change the default AP region.

    1. Run:system-view

    The system view is displayed.

    2. Run:

     wlan ac

    The WLAN view is displayed.

    3. Run:

    default-ap-region id  region-id 

    The default AP region ID is changed.

    By default, the default AP region ID is 0.

    l Merge two AP regions.

    1. Run:

    system-view

    The system view is displayed.

    2. Run:

     wlan ac

    The WLAN view is displayed.

    3. Run:

    ap-region merge region-id1 into region-id2

    Two AP regions are merged into one region with region ID as region-id2.

    By default, no AP regions are merged.

    NOTE

    Before merging AP regions into a new AP region, ensure that:

    l The new AP region has been created.

    l Some APs have joined the AP region specified by region-id1.

    ----End

    Huawei AR150&160&200&1200&2200&3200 Series

    Enterprise Routers

    Configuration Guide