In addition to Weibo, there is also WeChat
Please pay attention
WeChat public account
Shulou
2025-03-29 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > Network Security >
Share
Shulou(Shulou.com)06/01 Report--
1. Basic concepts
In a broad sense, wireless local area network WLAN (Wireless Local Area Network) refers to a network that uses radio waves, laser, infrared, etc., to replace some or all of the transmission media in the wired LAN.
WLAN technology is based on the 802.11 standard series, that is, wireless Lans that use high-frequency signals (such as 2.4GHz or 5GHz) as transmission media
The basic concepts of Huawei's WLAN business:
Workstation STA (Station): an end device that supports the 802.11 standard. For example, computers with wireless network cards, mobile phones that support WLAN, etc.
Wireless controller AC (Access Controller): in the centralized network architecture, AC controls and manages all AP in the wireless local area network. For example, AC can provide authentication services to WLAN users by exchanging information with the authentication server
Access point AP (Access Point): provides wireless access services based on 802.11 standard for STA, which acts as a bridge between wired and wireless networks.
Thin access point FIT AP (FIT Access Point): provides STA wireless access services in the thin access point (FIT AP) architecture of a centralized network architecture, which is different from the traditional FAT AP and only provides reliable, high-performance wireless connectivity. Other enhancements are centrally configured on the AC.
Central AP (Central Access Point): in the agile distributed Wi-Fi solution architecture of centralized network architecture, the central AP agent AC shares the centralized management and collaboration functions of RU, such as STA online, configuration distribution, and STA roaming between RU.
Remote unit RU (Remote unit): in the agile distributed Wi-Fi solution architecture of centralized network architecture, the remote unit, as the remote RF module of the central AP, is responsible for the sending and receiving of air port 802.11 messages.
Wireless access Point Control and Specification CAPWAP (Control And Provisioning of Wireless Access Points): a general encapsulation and transport mechanism defined by the RFC5415 protocol for interworking between AP and AC
Radio frequency signal: provides the transmission medium based on the 802.11 standard WLAN technology, is a high-frequency electromagnetic wave with long-distance transmission capability. The radio frequency signal referred to in this paper is the electromagnetic wave in the 2.4G or 5G frequency band.
Virtual access point VAP (Virtual Access Point): a virtual business function entity on an AP device. Users can create different VAP on an AP to provide wireless access services for different user groups.
Service set identifier SSID (Service Set Identifier): represents the identity of a wireless network and is used to distinguish between different wireless networks. For example, when we search for an accessible wireless network on a laptop, the network name displayed is SSID
2. Configure directly connected layer 2 networking tunnel forwarding
(1) Topology diagram
(2) configuration parameter planning
Configuration item use data AP Management VLANAC and AP Communications VLANVLAN10STA Services VLANSTA users Internet Communications VLANVLAN100DHCP Server Distribution IP addresses AC as DHCP assigns IP addresses to AP and STA AP address Pool AP distributed IP address Pool 10.0.0.2-10.0.0.254/24STA address Pool IP address Pool distributed by STA
100.0.0.3-100.0.254Universe 24
CAPWAP address
AP and AC Common Encapsulation and Transport Mechanism VLANIF10:10.0.0.1/24AP Group implements Multi-AP Unified Management configuration
Ap-group1 reference template: VAP template wlan-vap, domain management template default RF template wlan-radio2g/wlan-radio5g
The domain management template provides the country code for AP, tuning channel set and tuning bandwidth default country code: cnSSID configuration wireless network name SSID name
Wlan-ssid SSID name: test_wifi security template configure WLAN security policy, authenticate the terminal wlan-security security policy: PWA-WPA2 PSK AES SSID password: abc123456VAP template provides wireless access service for STA wlan-vap forwarding mode: tunnel mode business VLAN:VLAN100 reference template: SSID:wlan-ssid security template: wlan-security
RF template is used to optimize RF parameters and provide channel switching service uninterrupted function wlan-radio2g/wlan-radio5g reference template: RRM template: wlan-rrmRRM template
Dynamically add RF resources to use the environmental changes of the wireless signal, adjust the wireless signal coverage and reduce RF signal interference
Wlan-rrm intelligent roaming signal-to-noise ratio 30 and rate percentage 30
(3) Operation steps
R1 router: configure the GE 0Unigram 1 interface as the switching interface and add VLAN100 to add the interface to the VLAN100,VLANIF100 address 100.0.0.1 Compact 24, which is the gateway address of the STA terminal
Undo terminal monitor # does not display logs system-view [Huawei] sysname R1 [R1] user-interface console0 [R1-ui-console0] idle-timeout 00 # does not time out [R1-ui-console0] quit [R1] vlan batch 100 [R1] interface Vlanif100 [R1-Vlanif100] ip address 100.0.0.1 24 [R1-Vlanif100] undo shutdown [R1-Vlanif100] quitsR1] interface GigabitEthernet0/0/1 [R1-GigabitEthernet0/0/1] portswitch # convert to switching interface [R1-GigabitEthernet0/0/1] port link-type trunk # trunk mode [R1-GigabitEthernet0/0/1] port trunk allow-pass vlan 100 # join VLAN [R1-GigabitEthernet0/0/1] quit
Switch switch: configure interface to trunk, configure GE0/0/2 and GE0/0/3 to default VLAN to VLAN 10, and add interface to VLAN 10
[Switch] vlan batch 10 [Switch] interface GigabitEthernet0/0/1 [Switch-GigabitEthernet0/0/1] port link-type trunk [Switch-GigabitEthernet0/0/1] port trunk allow-pass vlan 10 [Switch-GigabitEthernet0/0/1] quit [Switch] port-group 1 # create Port Group [Switch-port-group-1] group-member GigabitEthernet0/0/ 2 to GigabitEthernet0/0/3 # join Port [Switch-GigabitEthernet0/0/3] port link-type trunk # configuration Set the interface template trunk [Switch-port-group-1] port trunk pvid vlan 10 # default VLAN [Switch-port-group-1] port trunk allow-pass vlan 10 # join VLAN [switch-port-group-1] port-isolate enable # Open port filter [Switch-port-group-1] quit
AC configure network interconnection:
[AC] vlan batch 10 100 [AC] interface GigabitEthernet0/0/1 [AC-GigabitEthernet0/0/1] port link-type trunk [AC-GigabitEthernet0/0/1] port trunk allow-pass vlan 100 [AC-GigabitEthernet0/0/1] quit[AC] interface GigabitEthernet0/0/2 [AC-GigabitEthernet0/0/2] port link-type trunk [AC-GigabitEthernet0/0/2] port trunk allow-pass vlan 10 [AC-GigabitEthernet0/0/2] quit
AC configuration DHCP server: IP address of VLANIF10 distribution AP, IP address of VLANIF100 distribution STA
[AC] interface Vlanif10 [AC-Vlanif10] ip address 10.0.0.1 24 [AC-Vlanif10] dhcp select interface [AC-Vlanif10] people [AC] interface Vlanif100 [AC-Vlanif100] ip address 100.0.0.2 24 [AC-Vlanif100] dhcp select interface # interface address pool [AC-Vlanif100] dhcp server gateway-list 100.0.0.1 # STA service gateway address [AC-Vlanif100] dhcp server dns-list 8.8.8 [AC-Vlanif100] quit [ AC] ip route-static 0.0.0.0 0.0.0.0 100.0.0.1 # default route
AC configure AP to go online:
Configure the source interface CAPWAP for AC
[AC] capwap source interface Vlanif 10
Create an AP group:
[AC] wlan [AC-wlan-view] ap-group name ap-group1 [AC-wlan-ap-group-ap-group1] quit
Create a domain management template:
[AC-wlan-view] regulatory-domain-profile name default [AC-wlan-regulate-domain-default] country-code cn [AC-wlan-regulate-domain-default] quit [AC-wlan-view] ap-group name ap-group1 [AC-wlan-ap-group-ap-group1] regulatory-domain-profile default # join the domain management template to the AP group Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continue? [Yhamn]: y [AC-wlan-ap-group-ap-group1] quit
Create a SSID template:
[AC-wlan-view] ssid-profile name wlan-ssid [AC-wlan-ssid-prof-vlan-ssid] ssid test_ WiFi [AC-wlan-ssid-prof-vlan-ssid] quit
Create a security template:
[AC-wlan-view] security-profile name wlan-security [AC-wlan-sec-prof-wlan-security] security wpa-wpa2 psk pass-phrase abc123456 aes [AC-wlan-sec-prof-wlan-security] quit
Create a VAP template:
[AC-wlan-view] vap-profile name wlan-vap [AC-wlan-vap-prof-wlan-vap] forward-mode tunnel [AC-wlan-vap-prof-wlan-vap] service-vlan vlan-id 100 [AC-wlan-vap-prof-wlan-vap] security-profile wlan-security [AC-wlan-vap-prof-wlan-vap] ssid-profile wlan-ssid [AC-wlan-vap-prof-wlan-vap] quit
Configure the AP group to reference the VAP template and reference the VAP template on radio frequencies 0 and 1
[AC-wlan-view] ap-group name ap-group1 [AC-wlan-ap-group-ap-group1] vap-profile wlan-vap wlan 1 radio 0 [AC-wlan-ap-group-ap-group1] vap-profile wlan-vap wlan 1 radio 1 [AC-wlan-ap-group-ap-group1] quit
# configure AP to go online:
[AC-wlan-view] display unauthorized-ap record # View unconfirmed launch APs [AC-wlan-view] ap-confirm all # put all AP online [AC-wlan-view] display ap all # display all launch APs [AC-wlan-view] ap-id 0 # enter the AP view [AC-wlan-ap-0] ap-name area_1 [AC-wlan-ap-0] ap-group ap-group1 # add AP to the group [AC-wlan -ap-0] que [AC-wlan-view] ap-id 1 [AC-wlan-ap-1] ap-name area_2 [AC-wlan-ap-1] ap-group ap-group1 [AC-wlan-ap-1] quit
Create a RRM template:
[AC-wlan-view] rrm-profile name wlan-rrm [AC-wlan-rrm-prof-wlan-rrm] smart-roam enable [AC-wlan-rrm-prof-wlan-rrm] smart-roam roam-threshold check-snr check-rate [AC-wlan-rrm-prof-wlan-rrm] smart-roam roam-threshold snr 30 [AC-wlan-rrm-prof-wlan-rrm] smart-roam roam-threshold rate 30 [AC-wlan-rrm-prof-wlan-rrm] quit
Create a 2G RF template: and reference the RRM template
[AC-wlan-view] radio-2g-profile name wlan-radio2g [AC-wlan-radio-2g-prof-wlan-radio2g] rrm-profile wlan-rrm [AC-wlan-radio-2g-prof-wlan-radio2g] quit
Create a 5G RF template: and reference the RRM template
[AC-wlan-view] radio-5g-profile name wlan-radio5g [AC-wlan-radio-5g-prof-wlan-radio5g] rrm-profile wlan-rrm [AC-wlan-radio-5g-prof-wlan-radio5g] quit
Reference 2G and 5G templates in AP groups
[AC-wlan-view] ap-group name ap-group1 [AC-wlan-ap-group-ap-group1] radio-2g-profile wlan-radio2g radio 0Warning: This action may cause service interruption. Continue? [Y/N] y [AC-wlan-ap-group-ap-group1] radio-5g-profile wlan-radio5g radio 1Warning: This action may cause service interruption. Continue? [Y/N] y [AC-wlan-ap-group-ap-group1] quit
Verification results:
View VAP RF template application
Display vap allInfo: This operation may take a few seconds Please wait.WID: WLAN ID-AP ID AP name RfID WID BSSID Status Auth type STA SSID -0 area_1 0 1 00E0-FC51-74B0 ON WPA/WPA2-PSK 0 test_wifi0 area_1 1 1 00E0-FC51-74C0 ON WPA/WPA2- PSK 0 test_wifi1 area_2 0 1 00E0-FC1D-1390 ON WPA/WPA2-PSK 0 test_wifi1 area_2 1 1 00E0-FC1D-13A0 ON WPA/WPA2-PSK 0 test_wifi -Total: 4
View connected STA clients
[AC] display station ssid test_wifiRf/WLAN: Radio ID/WLAN ID Rx/Tx: link receive rate/link transmit rate (Mbps)-- -STA MAC AP ID Ap name Rf/WLAN Band Type Rx/Tx RSSI VLAN IP address- -- 5489-9875-54a4 1 area_2 0 area_2 1 2.4G-100 100.0.21 5489-988d-6dc9 0 area_1 1 Grey 1 5G 11a 0 Grey 0 -100 100.0.0.90-Total: 22. 4G: 1 5G: 1
View Smart roaming configuration
[AC] display rrm-profile name wlan-rrm---.Smart-roam: enableSmart-roam check SNR : enableSmart-roam standing SNR threshold (dB): 30Smart-roam SNR quick-kickoff-threshold (dB): 15Smart-roam check rate: enableAMC policy: auto-balanceSmart-roam rate threshold (%): 30Smart- Roam rate quick-kickoff-threshold (%): 20Smart-roam high level SNR margin (dB): 15Smart-roam low level SNR margin (dB): 6Smart-roam SNR check interval (s): 3Smart-roam unable roam client expire time (m): 120Zero-roam roam check high threshold: 40Zero- Roam roam check low threshold: 35Zero-roam roam check interval (ms): 700Zero-roam report interval (ms): 400 Murray-
Result Screenshot:
Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.
Views: 0
*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.
Continue with the installation of the previous hadoop.First, install zookooper1. Decompress zookoope
"Every 5-10 years, there's a rare product, a really special, very unusual product that's the most un
© 2024 shulou.com SLNews company. All rights reserved.