Whether the AR router used as the AC can use the Layer 3 interface to implement WPA or WPA2 authentication

2

When an AR router functions as the AC, APs must connect to LAN interfaces of the AR router if APs need to be directly connected to the AR router. Therefore, the Layer 3 interface cannot implement WPA or WPA2 authentication.

Other related questions:
When the AR router functions as the AC and uses the WPA or WPA2 authentication, the terminal cannot go online
Root cause analysis: Through the analysis, when the AR is used as the AC and the Layer 3 interface is used as the downlink interface to connect to the AP, the AR does not support WPA or WPA2 authentication. Detailed information is as follows: 1. Interaction verification of WEP authentication is performed only between the AP and the STA. Therefore, when the AR uses the Layer 3 interface as the downlink interface to connect to the AP, the terminal can go online normally. 2. Layer 2 packets of WPA/WPA2 authentication are used and need to reach the AC. When the AR uses the Layer 3 interface as the downlink interface to connect to the AP, the terminal cannot go online because the Layer 3 interface on the AR cannot process the exchanged authentication packets. As a result, the terminal cannot go online. Summary and suggestion: In customer's networking, if the AR is used as the AC, you are advised to install the LAN card on the AR to connect to APs. In this case, the authentication mode is not limited.

WLAN security of AR routers
WLAN security is as follows: User access security: Link authentication, access authentication, and data encryption are used to ensure validity and security of user access on wireless networks. Service security: This feature protects service data of authorized user from being intercepted by unauthorized users during transmission. For details, see WLAN Security Configuration.

What are the differences of using a Layer 3 interface and a VLANIF interface
On some models of S series switches, you can run the undo portswitch command in the interface view to switch Layer 2 mode to Layer 3 mode. Both Layer 3 interfaces and VLANIF interfaces can provide Layer 3 services. They have the following differences: 1. When an interface works in Layer 2 mode, run Layer 3 services on VLANIF interfaces. Layer 2 services are run on Layer 2 interfaces. 2. After an interface is switched to Layer 3 mode, this interface is similar to a Layer 3 interface of a router, and can only provide Layer 3 services. To run Layer 3 services, use the Layer 3 or VLANIF interface. However, to run both Layer 3 and Layer 2 services on the same interface, use the Layer 2 mode to provide Layer 2 service and VLANIF to provide Layer 3 service.

Does an AR router support an interface being switched over between Layer 2 and Layer 3
The following AR routers support an interface being switched over between Layer 2 and Layer 3. By default, Ethernet interfaces are Layer 2 interfaces. Run the undo portswitch command to switch the interfaces from Layer 2 mode to Layer 3 mode, and run the portswitch command to switch the interfaces back to Layer 2 mode. V200R006C00 and earlier versions: - AR150 and AR200 series: Eth0/0/0 - AR120-S series: Eth0/0/0~Eth0/0/3 - AR150-S, AR160-S, and AR200-S series (except for AR151-S2): Eth0/0/0 - AR151-S2: GE0/0/0 - AR160 series: GE0/0/0 - AR1220F: Eth0/0/0~Eth0/0/7 - AR2201-48FE, AR2202-48FE, and AR2201-48FE-S: Eth0/0/0 and Eth0/0/47 V200R007C00: - AR120 and AR150 series, AR120-S series, AR151-S, AR151W-P-S, and AR151G-U-S: Eth0/0/0~Eth0/0/3 - AR160 series, AR509G-L-D-H, AR110-S series, AR151-S2 and AR160-S series: GE0/0/0~GE0/0/3 - AR200 series, AR1220, AR1220V, AR1220W, AR1220VW, AR1220F, AR200-S series, AR1220-S, AR1220W-S, and AR1220F-S: Eth0/0/0~Eth0/0/7 - AR1220C, AR1220E, AR1220EV, AR1220EVW, and AR1220E-S: GE0/0/0~GE0/0/7 - AR2201-48FE and AR2202-48FE: Eth0/0/0~Eth0/0/47 - AR2204-51GE-P: GE0/0/3~GE0/0/50 - AR2204-27GE-P, AR2204-27GE, and AR2201-48FE-S: GE0/0/3~GE0/0/26 V200R008C00: - AR120 (except for AR129CGVW-L) and AR150 series, AR120-S series, AR151-S, AR151W-P-S, and AR151G-U-S: Eth0/0/0~Eth0/0/3 -AR100 series, AR160 series, AR129CGVW-L, AR503EW, AR503EDGW-Lc, AR509CG-Lt, AR509CG-Lc, AR509G-Lc, AR515GW-LM9-D and AR509G-L-D-H, AR100-S series, AR110-S series, AR151-S2 and AR160-S series: GE0/0/0~GE0/0/3 - AR200 series, AR1220, AR1220V, AR1220W, AR1220VW, and AR1220F, AR200-S series, AR1220-S, AR1220W-S, and AR1220F-S series: Eth0/0/0~Eth0/0/7 - AR1220C, AR1220E, AR1220EV and AR1220EVW, and AR1220E-S: GE0/0/0~GE0/0/7 - AR2201-48FE, AR2202-48FE, and AR2201-48FE-S: Eth0/0/0 and Eth0/0/47 - AR2204-51GE-P, AR2204-51GE-R, and AR2204-51GE: GE0/0/3~GE0/0/50 - AR2204-27GE-P and AR2204-27GE: GE0/0/3~GE0/0/26 At present, the interfaces of all cards do not support Layer 2 and Layer 3 interface switchover.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top