Got it

WLAN V200R003&V200R005 Typical Configuration Examples-Example for Configuring WLAN WDS

Latest reply: Aug 31, 2017 03:58:57 1686 1 0 0 0

4.2.11  Example for Configuring WLAN WDS

Specifications

  • Applicable ACs: AC6605 and AC6005

  • Applicable APs:

    • WLAN V200R003C00: all APs except the AP6310SN-GN

Network Requirements

As shown in Figure 4-12, the AC connects to AP1 through Switch. AP1, AP2, and AP3 cover AreaA, AreaB, and AreaC respectively. AP3 connects to a Layer 2 network through SwitchA.

AreaB and AreaC have no wired connection to AreaA, but the layout requires time and resources. To save human resources and costs, users can configure the WDS technology to connect AP2 and AP3 to the AC through wireless bridge.

Figure 4-12  WLAN WDS network diagram
6bf857d2e2fd4198bce2adf64dffdcb5

Data Preparation

To complete the configuration, you need the following data.

AP

Model

MAC Address

AP1

AP6010DN-AGN

0046-4b59-1ee0

AP2

AP6010DN-AGN

0046-4b59-1d20

AP3

AP6010DN-AGN

0046-4b59-1d40

To complete the configuration, you need to plan the following data.

Item

Data

VLAN

Management VLAN: 100

Service VLANs: 101, 102, 103, 104, 105, 106

  • Area A: VLAN 101 for WLAN service

  • Area B: VLAN 102 for WLAN service

  • Area C: VLAN 103 for WLAN service

  • Area C: VLANs 104, 105, and 106 on wireless interfaces of AP3

Service forwarding mode on AP

Direct forwarding

AC's source interface address

VLANIF 100: 192.168.10.1/24

AP region

AP1: 101, AP2: 102, AP3: 103

WMM profile

Name: wp01

Radio profile

Name: rp01, rp02

Security profile

  • Name: sp01

  • Security and authentication policy: WPA2+PSK

  • Authentication key: huawei123

  • Encryption mode: CCMP

Traffic profile

Name: tp01

Bridge profile

  • Name: bp01

  • Bridge identifier: ChinaNet01

Service set

  • Name: ss01

  • SSID: ChinaSer01

  • WLAN virtual interface: WLAN-ESS 1

  • Service data forwarding mode: direct forwarding

  • Name: ss02

  • SSID: ChinaSer02

  • WLAN virtual interface: WLAN-ESS 2

  • Service data forwarding mode: direct forwarding

  • Name: ss03

  • SSID: ChinaSer03

  • WLAN virtual interface: WLAN-ESS 3

  • Service data forwarding mode: direct forwarding

Bridge whitelist

Name: bw01

Configuration Roadmap

  1. Configure the connection between AC and AP1.

  2. Set parameters for the AP radio, configure the bridge whitelist and set the operation mode for the wireless bridge.

  3. Configure the bridge profile and service set.

  4. Create VAPs.

  5. Set parameters for AP wired interfaces.

  6. Deliver parameters to APs.

Configuration Notes

  • Before performing the tasks in this example, ensure that the radios on AP1, AP2, and AP3 are not configured with service VAPs with WLAN IDs 13, 14, 15, and 16.

  • The access switch or AC is directly connected to interfaces of APs. AP management packets need to be tagged with the management VLAN ID.

  • A service IP address pool is configured to allocate IP addresses to STAs, and a management IP address pool is configured to allocate IP addresses to APs. Two pools are configured separately.

  • In WDS applications, when a wireless virtual link (WVL) is set up between two APs, the distance between the two APs can be 0 to 20 km. In this way, the waiting time for the APs to transmit data varies. Before binding the bridge profile to the AP radio, run the coverage distance distance command to specify the distance between WDS nodes. The default value of distance is 3, indicating 300 meters.

  • Configure port isolation on the interfaces of the device directly connected to APs. If port isolation is not configured and direct forwarding is used, a large number of unnecessary broadcast packets may be generated in the VLAN, blocking the network and degrading user experience.

  • No ACK mechanism is provided for multicast packet transmission on air interfaces. In addition, wireless links are unstable. To ensure stable transmission of multicast packets, they are usually sent at low rates. If a large number of such multicast packets are sent from the network side, the air interfaces may be congested. You are advised to configure multicast packet suppression to reduce impact of a large number of low-rate multicast packets on the wireless network. Exercise caution when configuring the rate limit; otherwise, the multicast services may be affected.For details on how to configure traffic suppression, see 4.20.1.4 Multicast Packet Suppression Is Not Configured, and A Large Number of Low-Rate Multicast Packets Affect the Wireless Network.
    • In direct forwarding mode, you are advised to configure multicast packet suppression on switch interfaces connected to APs.

    • In tunnel forwarding mode, you are advised to configure multicast packet suppression on WLAN-ESS interfaces of the AC.

Procedure

  1. Configure the connection between AC and APs.

    1. Set parameters for Switch and AC so that the Switch can transparently transmit data to the AC.

      # Configure the access switch to tag AP management packets with the management VLAN ID and configure the AP to communicate with the aggregation switch in VLAN 100. Configure the AP to communicate with the AC in VLAN 100. In direct forwarding mode, configure the AP and AC to transmit packets of service VLANs 101 to 106.

      964cc331bf494dc88d68667c776a039b NOTE:

      Configure the Switch uplink interface to allow service VLANs to pass so that the Switch can communicate with the upstream device.

      <Quidway> system-view[Quidway] sysname Switch[Switch] vlan batch 100 to 106[Switch] interface GigabitEthernet 0/0/1[Switch-GigabitEthernet0/0/1] port link-type trunk[Switch-GigabitEthernet0/0/1] port trunk pvid vlan 100[Switch-GigabitEthernet0/0/1] port trunk allow-pass vlan 100 to 106[Switch-GigabitEthernet0/0/1] port-isolate enable[Switch-GigabitEthernet0/0/1] quit[Switch] interface GigabitEthernet 0/0/2[Switch-GigabitEthernet0/0/2] port link-type trunk[Switch-GigabitEthernet0/0/2] port trunk allow-pass vlan 100 to 106[Switch-GigabitEthernet0/0/2] quit

      # Configure GE0/0/1 on the AC to allow packets from VLANs 100 to 106 to pass through.

      <AC6605> system-view[AC6605] sysname AC [AC] vlan batch 100 to 106[AC] interface GigabitEthernet 0/0/1[AC-GigabitEthernet0/0/1] port link-type trunk[AC-GigabitEthernet0/0/1] port trunk allow-pass vlan 100 to 106[AC-GigabitEthernet0/0/1] quit


  2. Configure the switch and AC to allocate IP addresses to STAs and APs respectively.


    # Configure SwitchB as a DHCP server to allocate IP addresses to STAs using an address pool.

    [Switch] dhcp enable[Switch] interface vlanif 101[Switch-Vlanif101] ip address 192.168.1.1 24[Switch-Vlanif101] dhcp select interface[Switch-Vlanif101] quit[Switch] interface vlanif 102[Switch-Vlanif102] ip address 192.168.2.1 24[Switch-Vlanif102] dhcp select interface[Switch-Vlanif102] quit[Switch] interface vlanif 103[Switch-Vlanif102] ip address 192.168.3.1 24[Switch-Vlanif102] dhcp select interface[Switch-Vlanif102] quit

    # Enable DHCP on the AC to allocate IP addresses to APs using an address pool.

    [AC] dhcp enable[AC] interface vlanif 100[AC-Vlanif100] ip address 192.168.10.1 24[AC-Vlanif100] dhcp select interface[AC-Vlanif100] quit


  3. Set AC parameters.


    # Configure a country code for the AC.

    [AC] wlan ac-global country-code cn

    # Configure the carrier ID and AC ID.

    [AC] wlan ac-global ac id 1 carrier id ctc

    # Configure the source interface.

    [AC] wlan[AC-wlan-view] wlan ac source interface vlanif 100


  4. Configure the AC to manage APs.


    # Add an AP offline.
    964cc331bf494dc88d68667c776a039b NOTE:
    In this example, The AP6010DN-AGN is used as an example.
    [AC-wlan-view] ap id 1 ap-type AP6010DN-AGN mac 0046-4b59-1ee0[AC-wlan-ap-1] quit[AC-wlan-view] ap id 2 ap-type AP6010DN-AGN mac 0046-4b59-1d20[AC-wlan-ap-2] quit[AC-wlan-view] ap id 3 ap-type AP6010DN-AGN mac 0046-4b59-1d40[AC-wlan-ap-3] quit

    # Create AP regions 101, 102, and 103.

    [AC-wlan-view] ap-region id 101 [AC-wlan-ap-region-101] quit[AC-wlan-view] ap-region id 102                                                  [AC-wlan-ap-region-102] quit[AC-wlan-view] ap-region id 103                                                  [AC-wlan-ap-region-103] quit

    # Add AP1 to AP region 101, AP2 to AP region 102, and AP3 to AP region 103.

    [AC-wlan-view] ap id 1 [AC-wlan-ap-1] region-id 101[AC-wlan-ap-1] quit[AC-wlan-view] ap id 2 [AC-wlan-ap-2] region-id 102[AC-wlan-ap-2] quit[AC-wlan-view] ap id 3[AC-wlan-ap-3] region-id 103[AC-wlan-ap-3] quit


  5. Set WDS bridge parameters.


    # Create a WMM profile named wp01 and retain the default configurations in the profile.

    [AC-wlan-view] wmm-profile name wp01[AC-wlan-wmm-prof-wp01] quit

    # Create the radio profile rp02 for the wireless bridge. GI mode to short interval, and DTIM interval to 1 and use the fixed channel. Use the default settings for other parameters and bind the radio profile rp02 to the WMM profile wp01.

    [AC-wlan-view] radio-profile name rp02[AC-wlan-radio-prof-rp02] wmm-profile name wp01[AC-wlan-radio-prof-rp02] 80211n guard-interval-mode short[AC-wlan-radio-prof-rp02] channel-mode fixed[AC-wlan-radio-prof-rp02] dtim-interval 1[AC-wlan-radio-prof-rp02] quit

    # Create bridge whitelists bw01 and bw02.

    [AC-wlan-view] bridge-whitelist name bw01[AC-wlan-br-whitelist-bw01] peer ap mac 0046-4b59-1d20[AC-wlan-br-whitelist-bw01] quit[AC-wlan-view] bridge-whitelist name bw02[AC-wlan-br-whitelist-bw02] peer ap mac 0046-4b59-1d40[AC-wlan-br-whitelist-bw02] quit

    # Bind AP1 radio 1 to the radio profile rp02, set the wireless bridge working mode to root, and bind the bridge whitelist bw01 to the radio.

    [AC-wlan-view] ap 1 radio 1[AC-wlan-radio-1/1] radio-profile name rp02[AC-wlan-radio-1/1] bridge enable mode root[AC-wlan-radio-1/1] bridge-whitelist name bw01[AC-wlan-radio-1/1] bridge whitelist enable[AC-wlan-radio-1/1] quit

    # Bind AP2 radio 1 to the radio profile rp02, set the wireless bridge working mode to middle, and bind the bridge whitelist bw02 to the radio.

    [AC-wlan-view] ap 2 radio 1[AC-wlan-radio-2/1] radio-profile name rp02[AC-wlan-radio-2/1] bridge enable mode middle[AC-wlan-radio-2/1] bridge-whitelist name bw02[AC-wlan-radio-2/1] bridge whitelist enable[AC-wlan-radio-2/1] quit

    # Bind AP3 radio 1 to the radio profile rp02 and set the wireless bridge working mode to leaf.

    [AC-wlan-view] ap 3 radio 1[AC-wlan-radio-3/1] radio-profile name rp02[AC-wlan-radio-3/1] bridge enable mode leaf[AC-wlan-radio-3/1] quit

    # After the preceding configurations are complete, power on the APs. If the APs have been powered on, restart the root AP to make the configuration take effect. Run the display ap all and display bridge-link all commands on the AC to check whether the APs work properly and whether WVLs are successfully established. If the WVLs are displayed and the status of all the APs are normal, the management bridge is successfully established.

    964cc331bf494dc88d68667c776a039b NOTE:

    If an AP supports the WDS function, the wireless bridge function is enabled on the AP after the AP is powered on. The AP can also set up management WVLs.

    [AC-wlan-view] display ap all  All AP information:                                                           
      Normal[3],Fault[0],Commit-failed[0],Committing[0],Config[0]                    
      Config-failed[0],Download[0],Standby[0],Type-not-match[0] 
      ------------------------------------------------------------------------------
      AP    AP                    AP              Profile   AP              AP      
                                                  /Region                           
      ID    Type                  MAC             ID        State           Sysname 
      ------------------------------------------------------------------------------
      1     AP6010DN-AGN          0046-4b59-1ee0    0/101   normal          ap-1    
      2     AP6010DN-AGN          0046-4b59-1d20    0/102   normal          ap-2    
      3     AP6010DN-AGN          0046-4b59-1d40    0/103   normal          ap-3
      ------------------------------------------------------------------------------
      Total number: 3,printed: 3
    [AC-wlan-view] display bridge-link all  
      ----------------------------------------------------------------------
      AP ID    Radio ID    Bridge-link ID    WLAN ID    Peer MAC
      ----------------------------------------------------------------------
      1        1           0                 15         0046-4b59-1d3f
      2        1           0                 16         0046-4b59-1efe
      2        1           1                 15         0046-4b59-1d5f
      3        1           0                 16         0046-4b59-1d3e
      ----------------------------------------------------------------------
      Total: 4


  6. Configure a radio profile and a WLAN-ESS interface.


    # Create the radio profile rp01 for user services, use the default settings, and bind the radio profile to the WMM profile wp01.

    [AC-wlan-view] radio-profile name rp01[AC-wlan-radio-prof-rp01] wmm-profile name wp01[AC-wlan-radio-prof-rp01] quit[AC-wlan-view] quit

    # Create a WLAN-ESS interface.

    [AC] interface wlan-ess 1  [AC-Wlan-Ess1] port hybrid pvid vlan 101[AC-Wlan-Ess1] port hybrid untagged vlan 101[AC-Wlan-Ess1] quit[AC] interface wlan-ess 2  [AC-Wlan-Ess2] port hybrid pvid vlan 102[AC-Wlan-Ess2] port hybrid untagged vlan 102[AC-Wlan-Ess2] quit[AC] interface wlan-ess 3  [AC-Wlan-Ess3] port hybrid pvid vlan 103[AC-Wlan-Ess3] port hybrid untagged vlan 103[AC-Wlan-Ess3] quit


  7. Configure the bridge profile and service set.


    # Create the security profile sp01, set security and authentication policy to WPA2–PSK, set the authentication key to huawei123, and set the encryption mode to CCMP.

    964cc331bf494dc88d68667c776a039b NOTE:
    The AP that establishes the bridge on a WDS network supports only WPA2+PSK+CCMP.
    [AC] wlan[AC-wlan-view] security-profile name sp01[AC-wlan-sec-prof-sp01] security-policy wpa2[AC-wlan-sec-prof-sp01] wpa2 authentication-method psk pass-phrase cipher huawei123 encryption-method ccmp [AC-wlan-sec-prof-sp01] quit

    # Create a bridge profile with the name bp01 and identifier ChinaNet01, and bind the bridge profile to the security profile sp01.

    [AC-wlan-view] bridge-profile name bp01[AC-wlan-bridge-prof-bp01] bridge-name ChinaNet01[AC-wlan-bridge-prof-bp01] vlan tagged 101 to 106[AC-wlan-bridge-prof-bp01] security-profile name sp01[AC-wlan-bridge-prof-bp01] quit

    # Create traffic profile tp01 and use the default settings.

    [AC-wlan-view] traffic-profile name tp01[AC-wlan-traffic-prof-tp01] quit

    # Create and configure a service set with name ss01 and SSID ChinaSer01.

    [AC-wlan-view] service-set name ss01[AC-wlan-service-set-ss01] traffic-profile name tp01[AC-wlan-service-set-ss01] security-profile name sp01[AC-wlan-service-set-ss01] ssid ChinaSer01[AC-wlan-service-set-ss01] service-vlan 101[AC-wlan-service-set-ss01] wlan-ess 1[AC-wlan-service-set-ss01] forward-mode direct-forward[AC-wlan-service-set-ss01] quit

    # Create and configure a service set with name ss02 and SSID ChinaSer02.

    [AC-wlan-view] service-set name ss02[AC-wlan-service-set-ss02] traffic-profile name tp01[AC-wlan-service-set-ss02] security-profile name sp01[AC-wlan-service-set-ss02] ssid ChinaSer02[AC-wlan-service-set-ss02] service-vlan 102[AC-wlan-service-set-ss02] wlan-ess 2[AC-wlan-service-set-ss02] forward-mode direct-forward[AC-wlan-service-set-ss02] quit

    # Create and configure a service set with name ss03 and SSID ChinaSer03.

    [AC-wlan-view] service-set name ss03[AC-wlan-service-set-ss03] traffic-profile name tp01[AC-wlan-service-set-ss03] security-profile name sp01[AC-wlan-service-set-ss03] ssid ChinaSer03[AC-wlan-service-set-ss03] service-vlan 103[AC-wlan-service-set-ss03] wlan-ess 3[AC-wlan-service-set-ss03] forward-mode direct-forward[AC-wlan-service-set-ss03] quit

    # Create a bridge VAP on AP1 radio 1 and bind the radio to the bridge profile. Create a service VAP on AP1 radio 0 and bind the radio to the radio profile and service set.

    [AC-wlan-view] ap 1 radio 0[AC-wlan-radio-1/0] radio-profile name rp01[AC-wlan-radio-1/0] service-set name ss01[AC-wlan-radio-1/0] quit[AC-wlan-view] ap 1 radio 1[AC-wlan-radio-1/1] bridge-profile name bp01[AC-wlan-radio-1/1] channel 40mhz-plus 157 [AC-wlan-radio-1/1] quit

    # Create a bridge VAP on AP2 radio 1 and bind the radio to the bridge profile. Create a service VAP on AP2 radio 0 and bind the radio to the radio profile and service set.

    [AC-wlan-view] ap 2 radio 0[AC-wlan-radio-2/0] radio-profile name rp01[AC-wlan-radio-2/0] service-set name ss02[AC-wlan-radio-2/0] quit[AC-wlan-view] ap 2 radio 1[AC-wlan-radio-2/1] bridge-profile name bp01[AC-wlan-radio-2/1] channel 40mhz-plus 157 [AC-wlan-radio-2/1] quit

    # Create a bridge VAP on AP3 radio 0 and bind the radio to the bridge profile. Create a service VAP on AP3 radio 0 and bind the radio to the radio profile and service set.

    [AC-wlan-view] ap 3 radio 0[AC-wlan-radio-3/0] radio-profile name rp01[AC-wlan-radio-3/0] service-set name ss03[AC-wlan-radio-3/0] quit[AC-wlan-view] ap 3 radio 1[AC-wlan-radio-3/1] bridge-profile name bp01[AC-wlan-radio-3/1] channel 40mhz-plus 157 [AC-wlan-radio-3/1] quit


  8. Configure AP wired interfaces.


    # Set parameters for the AP3 wired interface.

    [AC-wlan-view] ap id 3[AC-wlan-ap-3] lineate-port vlan tagged 104 to 106[AC-wlan-ap-3] lineate-port stp enable[AC-wlan-ap-3] lineate-port mode endpoint
      Info: This action will take effect after resetting ap. 
    [AC-wlan-ap-3] lineate-port user-isolate enable[AC-wlan-ap-3] quit
    964cc331bf494dc88d68667c776a039b NOTE:

    After changing the working mode of AP wired interfaces, reset the APs to make the configurations take effect.


  9. Deliver parameters to APs.


    The AP parameters configured on the AC take effect only after they are delivered to the APs.

    [AC-wlan-view] commit ap 3
      Warning: Committing configuration may cause service interruption,continue?[Y/N
    ] y[AC-wlan-view] commit ap 2
      Warning: Committing configuration may cause service interruption,continue?[Y/N
    ] y[AC-wlan-view] commit ap 1
      Warning: Committing configuration may cause service interruption,continue?[Y/N
    ] y


  10. Verify the configuration.


    WLAN users in areas A, B, and C and wired users in area C can access the Internet.

From group: WLAN

This is what I want to talk about/share with you today, thank you!

:)
View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.