Applicable to: V200R008 to V200R019C00 versions of 10G central fat AP (AD9431DN-24X).
Network planning
RU management: VLAN 100, network segment is 192.168.100.0/24.
Wireless service: VLAN 3, SSID is “wlan-net”, password is “88888888”, and network segment is 192.168.3.0/24. The gateway is the VLANIF3 interface IP on the aggregation switch.
The interface for Layer 3 interconnection between the central fat AP and the aggregation switch: VLANIF2. The network segment is 192.168.2.0/24.
The interface for the three-layer interconnection between the aggregation switch and the egress gateway: VLANIF101; if the egress gateway is an ordinary home router, you only need to configure routing.
DHCP deployment method:
- The central fat AP serves as the DHCP server of the RU.
- The aggregation switch is the DHCP server of the STA.
Topology diagram
Operation steps
1. Check the mode of the central AP
disp ver
If the central AP is in FIT mode, it needs to be switched to fat
[Huawei] ap-mode-switch fat
If you execute the mode switching command, the following error message is displayed. This version does not support fat and needs to be switched through TFTP or other methods.
[Huawei] ap-mode-switch fat Error: The fat mode does not exist. To switch to the fat AP mode, run the ap-mode-switch fat tftp/ftp/sftp command.
Download the upgrade software package for the center’s ap that supports switching to fat mode, and build a local server for uploading files.
Example: (modify according to actual situation)
ap-mode-switch fat tftp Fat & amp;CloudAD9431DN-24X_V200R019C00SPC907.bin 169.254.1.100 //ap-mode-switch fat tftp filename server-ip-address
After the upgrade is successful, you can run dis ver to check whether it is in fat mode.
2. Configure center fat AP
- Configure RU online and service VLAN
(1) Configure Layer 2 interoperability with RU
<CAP> system-view //Switch from user view to system view before configuring [CAP] vlan batch 100 3 //Create the planned management VLAN and service VLAN [CAP] interface gigabitethernet 0/0/0 //Input the physical interface connected to RU [CAP-GigabitEthernet0/0/0] port link-type trunk //Set the link type of the interface to trunk [CAP-GigabitEthernet0/0/0] port trunk allow-pass vlan 100 3 //Allow management VLAN and service VLAN to pass [CAP-GigabitEthernet0/0/0] port trunk pvid vlan 100 //The default VLAN of the specified interface is the management VLAN [CAP-GigabitEthernet0/0/0] quit
(2) Configure DHCP server (assign IP to RU)
[CAP] dhcp enable //Turn on the DHCP master switch [CAP] interface vlanif 100 //Create an interface for management VLAN [CAP-Vlanif100] ip address 192.168.100.1 255.255.255.0 //Configure IP address [CAP-Vlanif100] dhcp select interface //Enable the DHCP server function in interface address pool mode [CAP-Vlanif100] quit
(3) Specify the management VLAN of the RU
[CAP] management-vlan 100
(4) Configure the online method of RU
[CAP] wlan //Enter WLAN view [CAP-wlan-view] ap auth-mode no-auth //Specify the RU authentication mode as no authentication [CAP-wlan-view] quit
Note: After powering on the RU, if you run the display ap all command and see that the “State” field of the RU is “nor”, it means that the RU is online normally. Examples are as follows
[CAP] display ap all
If this field is “vmiss”, the version of the RU remote unit is inconsistent with the central AP, and it needs to be upgraded. You also need to download the software package yourself.
upgrade version tftp FitR240D_V200R019C00SPC907.bin 169.254.1.100
- Configure WLAN services
(1) Configure VAP template (wlan-net)
[CAP] wlan //Enter WLAN view [CAP-wlan-view] security-profile name wlan-net //Create a security profile named "wlan-net" [CAP-wlan-sec-prof-wlan-net] security wpa2 psk pass-phrase 88888888 aes //Configure wireless password [CAP-wlan-sec-prof-wlan-net] quit [CAP-wlan-view] ssid-profile name wlan-net //Create an SSID profile named "wlan-net" [CAP-wlan-ssid-prof-wlan-net] ssid wlan-net //Specify the SSID as "wlan-net" [CAP-wlan-ssid-prof-wlan-net] quit [CAP-wlan-view] vap-profile name wlan-net //Create a VAP template named "wlan-net" [CAP-wlan-vap-prof-wlan-net] security-profile wlan-net //Reference security template [CAP-wlan-vap-prof-wlan-net] ssid-profile wlan-net //Reference SSID template [CAP-wlan-vap-prof-wlan-net] service-vlan vlan-id 3 //Specify the service VLAN corresponding to the VAP [CAP-wlan-vap-prof-wlan-net] quit
(2) Configure VAP
Note: The RU has not been configured to join a separate AP group before. The RU will automatically join the AP group named “default”, so just configure the default AP group “default” to reference the VAP template.
[CAP-wlan-view] ap-group name default [CAP-wlan-ap-group-default] vap-profile wlan-net wlan 1 radio all [CAP-wlan-ap-group-default] quit [CAP-wlan-view] quit
- Configure interconnection with aggregation switches (for remote management center fat AP and transparent transmission service VLAN)
[CAP] vlan batch 2 //Create the planned interconnection VLAN [CAP] interface xgigabitEthernet 0/0/1 //Enter the physical interface connected to the aggregation switch [CAP-XGigabitEthernet0/0/1] port link-type trunk //Set the link type of the interface to trunk [CAP-XGigabitEthernet0/0/1] port trunk allow-pass vlan 2 3 //Allow interconnection VLAN and service VLAN to pass [CAP-XGigabitEthernet0/0/1] quit [CAP]] interface vlanif 2 //Create an interface for interconnecting VLANs [CAP-Vlanif2] ip address 192.168.2.2 255.255.255.0 //Configure IP address [CAP-Vlanif2] quit [CAP] ip route-static 0.0.0.0 0.0.0.0 192.168.2.1 //Configure the default route. The next hop (192.168.2.1) is the interface IP on the interconnected peer device. [CAP] return
2. Configure the aggregation switch (L3)
- Configure interconnection with the central fat AP
(1) Transparent transmission of interconnection VLAN and service VLAN
<L3> system-view //Switch from user view to system view before configuring [L3] vlan batch 2 3 //Create the planned interconnection VLAN and service VLAN [L3] interface gigabitethernet 0/0/2 //Enter the physical interface of the fat AP in the connection center [L3-GigabitEthernet0/0/2] port link-type trunk //Set the link type of the interface to trunk [L3-GigabitEthernet0/0/2] port trunk allow-pass vlan 2 3 //Allow interconnection VLAN and service VLAN to pass [L3-GigabitEthernet0/0/2] quit
(2) Configure the interconnection interface and DHCP server (assign IP to STA)
[L3] interface vlanif 2 //Create an interface for interconnecting VLANs [L3-Vlanif2] ip address 192.168.2.1 255.255.255.0 //Configure IP address [L3-Vlanif2] quit [L3] dhcp enable //Turn on the DHCP main switch [L3] interface vlanif 3 //Create an interface for business VLAN [L3-Vlanif3] ip address 192.168.3.1 255.255.255.0 //Configure IP address [L3-Vlanif3] dhcp select interface //Enable the DHCP server function in interface address pool mode [L3-Vlanif3] quit
- Configure interconnection with egress gateway
[L3] vlan batch 101 //Create the planned interconnection VLAN [L3] interface gigabitethernet 0/0/1 //Enter the physical interface connected to the egress gateway [L3-GigabitEthernet0/0/1] port link-type access //Set the link type of the interface to access [L3-GigabitEthernet0/0/1] port default vlan 101 //The default VLAN of the specified interface is the interconnection VLAN [L3-GigabitEthernet0/0/1] quit [L3] interface vlanif 101 //Create an interface for interconnecting VLANs [L3-Vlanif101] ip address 192.168.101.2 255.255.255.0 //Configure IP address [L3-Vlanif101] quit [L3] ip route-static 0.0.0.0 0.0.0.0 192.168.101.1 //Configure the default route. The next hop (192.168.101.1) is the interface IP on the interconnected peer device. [L3] return
3. Configure the egress gateway
- If it is an AR router, configure the LAN side of the AR (interconnected with the aggregation switch)
(1) Configure the interconnection interface
If you are using a Layer 2 interface (assumed to be FE1) to connect to the aggregation switch, you need to create a VLANIF interface corresponding to the VLAN to which the interface belongs and then configure the IP.
<AR> system-view //Switch from user view to system view before configuring [AR] vlan batch 101 //Create the planned interconnection VLAN [AR] interface ethernet 0/0/1 //Enter the physical interface connected to the aggregation switch [AR-Ethernet0/0/1] port link-type access //Set the link type of the interface to access [AR-Ethernet0/0/1] port default vlan 101 //The default VLAN of the specified interface is the interconnection VLAN [AR-Ethernet0/0/1] quit [AR] interface vlanif 101 //Interface entering the interconnection VLAN [AR-Vlanif101] ip address 192.168.101.1 255.255.255.0 //Configure IP address [AR-Vlanif101] quit
If you are using a Layer 3 interface (assuming it is a GE1 interface) to connect to the aggregation switch, you can configure the IP directly.
<AR> system-view //Switch from user view to system view before configuring [AR] interface gigabitethernet 0/0/1 //Enter the physical interface connected to the aggregation switch [AR-GigabitEthernet0/0/1] ip address 192.168.101.1 255.255.255.0 //Configure IP address [AR-GigabitEthernet0/0/1] quit
(2) Configure the route to the intranet segment
[AR] ip route-static 192.168.2.0 255.255.255.0 192.168.0.2 //The next hop (192.168.0.2) is the interface IP on the interconnected peer device [AR] ip route-static 192.168.3.0 255.255.255.0 192.168.0.2 [AR] return
- If the egress gateway is an ordinary home router, just configure the routing directly, refer to:
