4.2.11 Example for Configuring WLAN WDS
Specifications
Applicable ACs: AC6605 and AC6005
Applicable APs:
WLAN V200R003C00: all APs except the AP6310SN-GN
Network Requirements
As shown in Figure 4-12, the AC connects to AP1 through Switch. AP1, AP2, and AP3 cover AreaA, AreaB, and AreaC respectively. AP3 connects to a Layer 2 network through SwitchA.
AreaB and AreaC have no wired connection to AreaA, but the layout requires time and resources. To save human resources and costs, users can configure the WDS technology to connect AP2 and AP3 to the AC through wireless bridge.

Data Preparation
AP | Model | MAC Address |
|---|---|---|
AP1 | AP6010DN-AGN | 0046-4b59-1ee0 |
AP2 | AP6010DN-AGN | 0046-4b59-1d20 |
AP3 | AP6010DN-AGN | 0046-4b59-1d40 |
To complete the configuration, you need to plan the following data.
Item | Data |
|---|---|
VLAN | Management VLAN: 100 |
Service VLANs: 101, 102, 103, 104, 105, 106
| |
Service forwarding mode on AP | Direct forwarding |
AC's source interface address | VLANIF 100: 192.168.10.1/24 |
AP region | AP1: 101, AP2: 102, AP3: 103 |
WMM profile | Name: wp01 |
Radio profile | Name: rp01, rp02 |
Security profile |
|
Traffic profile | Name: tp01 |
Bridge profile |
|
Service set |
|
| |
| |
Bridge whitelist | Name: bw01 |
Configuration Roadmap
Configure the connection between AC and AP1.
Set parameters for the AP radio, configure the bridge whitelist and set the operation mode for the wireless bridge.
Configure the bridge profile and service set.
Create VAPs.
Set parameters for AP wired interfaces.
Deliver parameters to APs.
Configuration Notes
Before performing the tasks in this example, ensure that the radios on AP1, AP2, and AP3 are not configured with service VAPs with WLAN IDs 13, 14, 15, and 16.
The access switch or AC is directly connected to interfaces of APs. AP management packets need to be tagged with the management VLAN ID.
A service IP address pool is configured to allocate IP addresses to STAs, and a management IP address pool is configured to allocate IP addresses to APs. Two pools are configured separately.
In WDS applications, when a wireless virtual link (WVL) is set up between two APs, the distance between the two APs can be 0 to 20 km. In this way, the waiting time for the APs to transmit data varies. Before binding the bridge profile to the AP radio, run the coverage distance distance command to specify the distance between WDS nodes. The default value of distance is 3, indicating 300 meters.
Configure port isolation on the interfaces of the device directly connected to APs. If port isolation is not configured and direct forwarding is used, a large number of unnecessary broadcast packets may be generated in the VLAN, blocking the network and degrading user experience.
- No ACK mechanism is provided for multicast packet transmission on air interfaces. In addition, wireless links are unstable. To ensure stable transmission of multicast packets, they are usually sent at low rates. If a large number of such multicast packets are sent from the network side, the air interfaces may be congested. You are advised to configure multicast packet suppression to reduce impact of a large number of low-rate multicast packets on the wireless network. Exercise caution when configuring the rate limit; otherwise, the multicast services may be affected.For details on how to configure traffic suppression, see 4.20.1.4 Multicast Packet Suppression Is Not Configured, and A Large Number of Low-Rate Multicast Packets Affect the Wireless Network.
In direct forwarding mode, you are advised to configure multicast packet suppression on switch interfaces connected to APs.
In tunnel forwarding mode, you are advised to configure multicast packet suppression on WLAN-ESS interfaces of the AC.
Procedure
Configure the connection between AC and APs.
Set parameters for Switch and AC so that the Switch can transparently transmit data to the AC.
# Configure the access switch to tag AP management packets with the management VLAN ID and configure the AP to communicate with the aggregation switch in VLAN 100. Configure the AP to communicate with the AC in VLAN 100. In direct forwarding mode, configure the AP and AC to transmit packets of service VLANs 101 to 106.
NOTE: Configure the Switch uplink interface to allow service VLANs to pass so that the Switch can communicate with the upstream device.
<Quidway> system-view[Quidway] sysname Switch[Switch] vlan batch 100 to 106[Switch] interface GigabitEthernet 0/0/1[Switch-GigabitEthernet0/0/1] port link-type trunk[Switch-GigabitEthernet0/0/1] port trunk pvid vlan 100[Switch-GigabitEthernet0/0/1] port trunk allow-pass vlan 100 to 106[Switch-GigabitEthernet0/0/1] port-isolate enable[Switch-GigabitEthernet0/0/1] quit[Switch] interface GigabitEthernet 0/0/2[Switch-GigabitEthernet0/0/2] port link-type trunk[Switch-GigabitEthernet0/0/2] port trunk allow-pass vlan 100 to 106[Switch-GigabitEthernet0/0/2] quit
# Configure GE0/0/1 on the AC to allow packets from VLANs 100 to 106 to pass through.
<AC6605> system-view[AC6605] sysname AC [AC] vlan batch 100 to 106[AC] interface GigabitEthernet 0/0/1[AC-GigabitEthernet0/0/1] port link-type trunk[AC-GigabitEthernet0/0/1] port trunk allow-pass vlan 100 to 106[AC-GigabitEthernet0/0/1] quit
Configure the switch and AC to allocate IP addresses to STAs and APs respectively.
# Configure SwitchB as a DHCP server to allocate IP addresses to STAs using an address pool.
[Switch] dhcp enable[Switch] interface vlanif 101[Switch-Vlanif101] ip address 192.168.1.1 24[Switch-Vlanif101] dhcp select interface[Switch-Vlanif101] quit[Switch] interface vlanif 102[Switch-Vlanif102] ip address 192.168.2.1 24[Switch-Vlanif102] dhcp select interface[Switch-Vlanif102] quit[Switch] interface vlanif 103[Switch-Vlanif102] ip address 192.168.3.1 24[Switch-Vlanif102] dhcp select interface[Switch-Vlanif102] quit
# Enable DHCP on the AC to allocate IP addresses to APs using an address pool.
[AC] dhcp enable[AC] interface vlanif 100[AC-Vlanif100] ip address 192.168.10.1 24[AC-Vlanif100] dhcp select interface[AC-Vlanif100] quit
Set AC parameters.
# Configure a country code for the AC.
[AC] wlan ac-global country-code cn
# Configure the carrier ID and AC ID.
[AC] wlan ac-global ac id 1 carrier id ctc
# Configure the source interface.
[AC] wlan[AC-wlan-view] wlan ac source interface vlanif 100
Configure the AC to manage APs.
# Add an AP offline.
NOTE: In this example, The AP6010DN-AGN is used as an example.[AC-wlan-view] ap id 1 ap-type AP6010DN-AGN mac 0046-4b59-1ee0[AC-wlan-ap-1] quit[AC-wlan-view] ap id 2 ap-type AP6010DN-AGN mac 0046-4b59-1d20[AC-wlan-ap-2] quit[AC-wlan-view] ap id 3 ap-type AP6010DN-AGN mac 0046-4b59-1d40[AC-wlan-ap-3] quit
# Create AP regions 101, 102, and 103.
[AC-wlan-view] ap-region id 101 [AC-wlan-ap-region-101] quit[AC-wlan-view] ap-region id 102 [AC-wlan-ap-region-102] quit[AC-wlan-view] ap-region id 103 [AC-wlan-ap-region-103] quit
# Add AP1 to AP region 101, AP2 to AP region 102, and AP3 to AP region 103.
[AC-wlan-view] ap id 1 [AC-wlan-ap-1] region-id 101[AC-wlan-ap-1] quit[AC-wlan-view] ap id 2 [AC-wlan-ap-2] region-id 102[AC-wlan-ap-2] quit[AC-wlan-view] ap id 3[AC-wlan-ap-3] region-id 103[AC-wlan-ap-3] quit
Set WDS bridge parameters.
# Create a WMM profile named wp01 and retain the default configurations in the profile.
[AC-wlan-view] wmm-profile name wp01[AC-wlan-wmm-prof-wp01] quit
# Create the radio profile rp02 for the wireless bridge. GI mode to short interval, and DTIM interval to 1 and use the fixed channel. Use the default settings for other parameters and bind the radio profile rp02 to the WMM profile wp01.
[AC-wlan-view] radio-profile name rp02[AC-wlan-radio-prof-rp02] wmm-profile name wp01[AC-wlan-radio-prof-rp02] 80211n guard-interval-mode short[AC-wlan-radio-prof-rp02] channel-mode fixed[AC-wlan-radio-prof-rp02] dtim-interval 1[AC-wlan-radio-prof-rp02] quit
# Create bridge whitelists bw01 and bw02.
[AC-wlan-view] bridge-whitelist name bw01[AC-wlan-br-whitelist-bw01] peer ap mac 0046-4b59-1d20[AC-wlan-br-whitelist-bw01] quit[AC-wlan-view] bridge-whitelist name bw02[AC-wlan-br-whitelist-bw02] peer ap mac 0046-4b59-1d40[AC-wlan-br-whitelist-bw02] quit
# Bind AP1 radio 1 to the radio profile rp02, set the wireless bridge working mode to root, and bind the bridge whitelist bw01 to the radio.
[AC-wlan-view] ap 1 radio 1[AC-wlan-radio-1/1] radio-profile name rp02[AC-wlan-radio-1/1] bridge enable mode root[AC-wlan-radio-1/1] bridge-whitelist name bw01[AC-wlan-radio-1/1] bridge whitelist enable[AC-wlan-radio-1/1] quit
# Bind AP2 radio 1 to the radio profile rp02, set the wireless bridge working mode to middle, and bind the bridge whitelist bw02 to the radio.
[AC-wlan-view] ap 2 radio 1[AC-wlan-radio-2/1] radio-profile name rp02[AC-wlan-radio-2/1] bridge enable mode middle[AC-wlan-radio-2/1] bridge-whitelist name bw02[AC-wlan-radio-2/1] bridge whitelist enable[AC-wlan-radio-2/1] quit
# Bind AP3 radio 1 to the radio profile rp02 and set the wireless bridge working mode to leaf.
[AC-wlan-view] ap 3 radio 1[AC-wlan-radio-3/1] radio-profile name rp02[AC-wlan-radio-3/1] bridge enable mode leaf[AC-wlan-radio-3/1] quit
# After the preceding configurations are complete, power on the APs. If the APs have been powered on, restart the root AP to make the configuration take effect. Run the display ap all and display bridge-link all commands on the AC to check whether the APs work properly and whether WVLs are successfully established. If the WVLs are displayed and the status of all the APs are normal, the management bridge is successfully established.
NOTE: If an AP supports the WDS function, the wireless bridge function is enabled on the AP after the AP is powered on. The AP can also set up management WVLs.
[AC-wlan-view] display ap all All AP information: Normal[3],Fault[0],Commit-failed[0],Committing[0],Config[0] Config-failed[0],Download[0],Standby[0],Type-not-match[0] ------------------------------------------------------------------------------ AP AP AP Profile AP AP /Region ID Type MAC ID State Sysname ------------------------------------------------------------------------------ 1 AP6010DN-AGN 0046-4b59-1ee0 0/101 normal ap-1 2 AP6010DN-AGN 0046-4b59-1d20 0/102 normal ap-2 3 AP6010DN-AGN 0046-4b59-1d40 0/103 normal ap-3 ------------------------------------------------------------------------------ Total number: 3,printed: 3
[AC-wlan-view] display bridge-link all ---------------------------------------------------------------------- AP ID Radio ID Bridge-link ID WLAN ID Peer MAC ---------------------------------------------------------------------- 1 1 0 15 0046-4b59-1d3f 2 1 0 16 0046-4b59-1efe 2 1 1 15 0046-4b59-1d5f 3 1 0 16 0046-4b59-1d3e ---------------------------------------------------------------------- Total: 4
Configure a radio profile and a WLAN-ESS interface.
# Create the radio profile rp01 for user services, use the default settings, and bind the radio profile to the WMM profile wp01.
[AC-wlan-view] radio-profile name rp01[AC-wlan-radio-prof-rp01] wmm-profile name wp01[AC-wlan-radio-prof-rp01] quit[AC-wlan-view] quit
# Create a WLAN-ESS interface.
[AC] interface wlan-ess 1 [AC-Wlan-Ess1] port hybrid pvid vlan 101[AC-Wlan-Ess1] port hybrid untagged vlan 101[AC-Wlan-Ess1] quit[AC] interface wlan-ess 2 [AC-Wlan-Ess2] port hybrid pvid vlan 102[AC-Wlan-Ess2] port hybrid untagged vlan 102[AC-Wlan-Ess2] quit[AC] interface wlan-ess 3 [AC-Wlan-Ess3] port hybrid pvid vlan 103[AC-Wlan-Ess3] port hybrid untagged vlan 103[AC-Wlan-Ess3] quit
Configure the bridge profile and service set.
# Create the security profile sp01, set security and authentication policy to WPA2–PSK, set the authentication key to huawei123, and set the encryption mode to CCMP.
NOTE: The AP that establishes the bridge on a WDS network supports only WPA2+PSK+CCMP.[AC] wlan[AC-wlan-view] security-profile name sp01[AC-wlan-sec-prof-sp01] security-policy wpa2[AC-wlan-sec-prof-sp01] wpa2 authentication-method psk pass-phrase cipher huawei123 encryption-method ccmp [AC-wlan-sec-prof-sp01] quit
# Create a bridge profile with the name bp01 and identifier ChinaNet01, and bind the bridge profile to the security profile sp01.
[AC-wlan-view] bridge-profile name bp01[AC-wlan-bridge-prof-bp01] bridge-name ChinaNet01[AC-wlan-bridge-prof-bp01] vlan tagged 101 to 106[AC-wlan-bridge-prof-bp01] security-profile name sp01[AC-wlan-bridge-prof-bp01] quit
# Create traffic profile tp01 and use the default settings.
[AC-wlan-view] traffic-profile name tp01[AC-wlan-traffic-prof-tp01] quit
# Create and configure a service set with name ss01 and SSID ChinaSer01.
[AC-wlan-view] service-set name ss01[AC-wlan-service-set-ss01] traffic-profile name tp01[AC-wlan-service-set-ss01] security-profile name sp01[AC-wlan-service-set-ss01] ssid ChinaSer01[AC-wlan-service-set-ss01] service-vlan 101[AC-wlan-service-set-ss01] wlan-ess 1[AC-wlan-service-set-ss01] forward-mode direct-forward[AC-wlan-service-set-ss01] quit
# Create and configure a service set with name ss02 and SSID ChinaSer02.
[AC-wlan-view] service-set name ss02[AC-wlan-service-set-ss02] traffic-profile name tp01[AC-wlan-service-set-ss02] security-profile name sp01[AC-wlan-service-set-ss02] ssid ChinaSer02[AC-wlan-service-set-ss02] service-vlan 102[AC-wlan-service-set-ss02] wlan-ess 2[AC-wlan-service-set-ss02] forward-mode direct-forward[AC-wlan-service-set-ss02] quit
# Create and configure a service set with name ss03 and SSID ChinaSer03.
[AC-wlan-view] service-set name ss03[AC-wlan-service-set-ss03] traffic-profile name tp01[AC-wlan-service-set-ss03] security-profile name sp01[AC-wlan-service-set-ss03] ssid ChinaSer03[AC-wlan-service-set-ss03] service-vlan 103[AC-wlan-service-set-ss03] wlan-ess 3[AC-wlan-service-set-ss03] forward-mode direct-forward[AC-wlan-service-set-ss03] quit
# Create a bridge VAP on AP1 radio 1 and bind the radio to the bridge profile. Create a service VAP on AP1 radio 0 and bind the radio to the radio profile and service set.
[AC-wlan-view] ap 1 radio 0[AC-wlan-radio-1/0] radio-profile name rp01[AC-wlan-radio-1/0] service-set name ss01[AC-wlan-radio-1/0] quit[AC-wlan-view] ap 1 radio 1[AC-wlan-radio-1/1] bridge-profile name bp01[AC-wlan-radio-1/1] channel 40mhz-plus 157 [AC-wlan-radio-1/1] quit
# Create a bridge VAP on AP2 radio 1 and bind the radio to the bridge profile. Create a service VAP on AP2 radio 0 and bind the radio to the radio profile and service set.
[AC-wlan-view] ap 2 radio 0[AC-wlan-radio-2/0] radio-profile name rp01[AC-wlan-radio-2/0] service-set name ss02[AC-wlan-radio-2/0] quit[AC-wlan-view] ap 2 radio 1[AC-wlan-radio-2/1] bridge-profile name bp01[AC-wlan-radio-2/1] channel 40mhz-plus 157 [AC-wlan-radio-2/1] quit
# Create a bridge VAP on AP3 radio 0 and bind the radio to the bridge profile. Create a service VAP on AP3 radio 0 and bind the radio to the radio profile and service set.
[AC-wlan-view] ap 3 radio 0[AC-wlan-radio-3/0] radio-profile name rp01[AC-wlan-radio-3/0] service-set name ss03[AC-wlan-radio-3/0] quit[AC-wlan-view] ap 3 radio 1[AC-wlan-radio-3/1] bridge-profile name bp01[AC-wlan-radio-3/1] channel 40mhz-plus 157 [AC-wlan-radio-3/1] quit
Configure AP wired interfaces.
# Set parameters for the AP3 wired interface.
[AC-wlan-view] ap id 3[AC-wlan-ap-3] lineate-port vlan tagged 104 to 106[AC-wlan-ap-3] lineate-port stp enable[AC-wlan-ap-3] lineate-port mode endpoint Info: This action will take effect after resetting ap. [AC-wlan-ap-3] lineate-port user-isolate enable[AC-wlan-ap-3] quit
NOTE: After changing the working mode of AP wired interfaces, reset the APs to make the configurations take effect.
Deliver parameters to APs.
The AP parameters configured on the AC take effect only after they are delivered to the APs.
[AC-wlan-view] commit ap 3 Warning: Committing configuration may cause service interruption,continue?[Y/N ] y[AC-wlan-view] commit ap 2 Warning: Committing configuration may cause service interruption,continue?[Y/N ] y[AC-wlan-view] commit ap 1 Warning: Committing configuration may cause service interruption,continue?[Y/N ] y
Verify the configuration.
WLAN users in areas A, B, and C and wired users in area C can access the Internet.
From group: WLAN
This is what I want to talk about/share with you today, thank you!
