Example: Configuring a dual-stack wireless service

Introduction

The following information provides an example for configuring a dual-stack wireless service.

Network configuration

As shown in Figure 1, the AP connects to the AC through Switch 1. The AC acts as a wireless network gateway connected to the upper-layer network. Configure dual-stack settings on the AC for users to access the network using different protocols. Configure the following:

·     Connect the AC to the network through in-path deployment at Layer 2.

·     Configure the AC to act as both the DHCP server and the DHCPv6 server to allocate an IPv6 address to the AP and IPv4 and IPv6 addresses to the client.

·     Configure tunnel forwarding for service data.

Figure 1 Network diagram

 

Restrictions and guidelines

When you configure a serial ID for the AP, use the actual serial ID of an AP to uniquely identify that AP.

Procedures

Configuring Switch 1

# Create VLAN 100. The switch will use this VLAN to forward CAPWAP tunnel traffic between the AC and the AP.

<Switch 1> system-view

[Switch 1] vlan 100

[Switch 1-vlan100] quit

# Specify GigabitEthernet 1/0/1 that connects Switch 1 to the AC as a trunk port. Assign the port to VLAN 100.

[Switch 1] interface gigabitethernet 1/0/1

[Switch 1-GigabitEthernet1/0/1] port link-type trunk

[Switch 1-GigabitEthernet1/0/1] port trunk permit vlan 100

[Switch 1-GigabitEthernet1/0/1] quit

# Specify GigabitEthernet 1/0/2 that connects Switch 1 to the AP as an access port. Assign the port to VLAN 100.

[Switch 1] interface gigabitethernet 1/0/2

[Switch 1-GigabitEthernet1/0/2] port link-type access

[Switch 1-GigabitEthernet1/0/2] port access vlan 100\

# Enable the PoE function.

[Switch 1-GigabitEthernet1/0/2] poe enable

[Switch 1-GigabitEthernet1/0/2] quit

Configuring Switch 2

# Create VLAN 200. The switch will use this VLAN to forward client packets.

<Switch 2> system-view

[Switch 2] vlan 200

[Switch 2-vlan200] quit

# Specify GigabitEthernet 1/0/1 that connects Switch 2 to the AC as a trunk port. Assign the port to VLAN 200.

[Switch 2] interface gigabitethernet 1/0/1

[Switch 2-GigabitEthernet1/0/1] port link-type trunk

[Switch 2-GigabitEthernet1/0/1] port trunk permit vlan 200

[Switch 2-GigabitEthernet1/0/1] quit

# Specify the IPv4 address and IPv6 address for VLAN-interface 200.

[Switch 2] interface vlan-interface 200

[Switch 2-Vlan-interface200] ip address 192.168.2.2 255.255.255.0

[Switch 2-Vlan-interface200] ipv6 address 2004::2 64

[Switch 2-Vlan-interface200] quit

Configuring the AC

1.     Configure AC interfaces:

# Create VLAN 100 and VLAN-interface 100, and assign an IPv6 address to the interface. The AC will use this address to establish a CAPWAP tunnel with the AP.

<AC> system-view

[AC] vlan 100

[AC-vlan100] quit

[AC] interface vlan-interface 100

[AC-Vlan-interface100] ipv6 address 2001::1 64

[AC-Vlan-interface100] quit

# Create VLAN 200 and VLAN-interface 200, and assign an IPv4 address and an IPv6 address to the interface. The client will use this VLAN to access the wireless network.

[AC] vlan 200

[AC-vlan200] quit

[AC] interface vlan-interface 200

[AC-Vlan-interface200] ip address 192.168.2.1 24

[AC-Vlan-interface200] ipv6 address 2004::1 64

[AC-Vlan-interface200] quit

# Specify GigabitEthernet 1/0/1 that connects the AC to Switch 1 as a trunk port. Assign the port to VLAN 100.

[AC] interface gigabitethernet 1/0/1

[AC-GigabitEthernet1/0/1] port link-type trunk

[AC-GigabitEthernet1/0/1] port trunk permit vlan 100

[AC-GigabitEthernet1/0/1] quit

# Specify GigabitEthernet 1/0/2 that connects the AC to Switch 2 as a trunk port. Assign the port to VLAN 200.

[AC] interface gigabitethernet 1/0/2

[AC-GigabitEthernet1/0/2] port link-type trunk

[AC-GigabitEthernet1/0/2] port trunk permit vlan 200

[AC-GigabitEthernet1/0/2] quit

2.     Configure the DHCP server:

# Enable the DHCP server feature.

[AC] dhcp enable

# Create DHCP address pool 200 for IPv4 address allocation to the client. Specify 192.168.2.0/24 as the subnet and 192.168.2.2 as the gateway address in the address pool, and then specify the address of the DNS server. In this example, the gateway also acts as the DNS server.

[AC] dhcp server ip-pool 200

[AC-dhcp-pool-200] network 192.168.2.0 mask 255.255.255.0

[AC-dhcp-pool-200] gateway-list 192.168.2.2

[AC-dhcp-pool-200] dns-list 192.168.2.2

[AC-dhcp-pool-200] quit

3.     Configure the DHCPv6 server:

# Create DHCPv6 address pool 1 for IPv6 address allocation to the AP.

[AC] ipv6 dhcp pool 1

[AC-dhcp6-pool-1] network 2001::/64

[AC-dhcp6-pool-1] quit

[AC] ipv6 dhcp server forbidden-address 2001::1

# Create VLAN-interface 100, apply address pool 1 to the interface, and configure the interface to act in DHCPv6 server mode.

[AC] interface vlan-interface 100

[AC-Vlan-interface100] ipv6 dhcp server apply pool 1

[AC-Vlan-interface100] ipv6 dhcp select server

# Disable RA message suppression on VLAN-interface 100. Set the managed address flag to 1 to enable the host to acquire an IPv6 address through the DHCPv6 server. Set the other information flag to 1 so that the host can retrieve additional configuration details from the DHCPv6 server.

[AC-Vlan-interface100] ipv6 nd autoconfig managed-address-flag

[AC-Vlan-interface100] ipv6 nd autoconfig other-flag

[AC-Vlan-interface100] undo ipv6 nd ra halt

[AC-Vlan-interface100] quit

# Create DHCPv6 address pool 2 for IPv6 address allocation to the Client.

[AC] ipv6 dhcp pool 2

[AC-dhcp6-pool-2] network 2004::/64

[AC-dhcp6-pool-2] quit

[AC] ipv6 dhcp server forbidden-address 2004::1 2004::2

# Create VLAN-interface 200, apply address pool 2 to the interface, and configure the interface to act in DHCPv6 server mode.

[AC] interface Vlan-interface 200

[AC-Vlan-interface200] ipv6 dhcp server apply pool 2

[AC-Vlan-interface200] ipv6 dhcp select server

# Disable RA message suppression on VLAN-interface 200. Set the managed address flag to 1 to enable the host to acquire an IPv6 address through the DHCPv6 server. Set the other information flag to 1 so that the host can retrieve additional configuration details from the DHCPv6 server.

[AC-Vlan-interface200] ipv6 nd autoconfig managed-address-flag

[AC-Vlan-interface200] ipv6 nd autoconfig other-flag

[AC-Vlan-interface200] undo ipv6 nd ra halt

[AC-Vlan-interface200] quit

4.     Configure the wireless service:

# Create service template st1 and enter its view.

[AC] wlan service-template st1

# Set the SSID to service.

[AC-wlan-st-st1] ssid service

# Specify the service VLAN as VLAN 200.

[AC-wlan-st-st1] vlan 200

# Specify the AKM mode as PSK, and specify plaintext string 12345678 as the preshared key.

[AC-wlan-st-st1] akm mode psk

[AC-wlan-st-st1] preshared-key pass-phrase simple 12345678

# Specify the cipher suite as CCMP and the security IE as RSN.

[AC-wlan-st-st1] cipher-suite ccmp

[AC-wlan-st-st1] security-ie rsn

# Configure the AC to forward client data traffic. You can skip this step if the AC is the client traffic forwarder by default.

[AC-wlan-st-st1] client forwarding-location ac

# Enable the AC to learn client IPv6 addresses through ND.

[AC-wlan-st-st1] client ipv6-snooping nd-learning enable

# Enable the AC to learn client IPv6 addresses through DHCPv6.

[AC-wlan-st-st1] client ipv6-snooping dhcpv6-learning enable

# Enable wireless service template st1.

[AC–wlan-st-st1] service-template enable

[AC-wlan-st-st1] quit

5.     Configure the AP:

 

NOTE: In large-scale networks, configure AP groups instead of single APs as a best practice.

 

# Create AP officeap, and specify the AP model and serial ID.

[AC] wlan ap office model WA6320

[AC-wlan-ap-office] serial-id 219801A28N819CE0002T

[AC-wlan-ap-office] quit

# Create AP group group1 and add the AP to the AP group.

[AC] wlan ap-group group1

[AC-wlan-ap-group-group1] ap office

# Bind service template 1 to radio 2 in AP group group1.

[AC-wlan-ap-group-group1] ap-model WA6320

[AC-wlan-ap-group-group1-ap-model-WA6320] radio 2

[AC-wlan-ap-group-group1-ap-model-WA6320-radio-2] service-template st1

# Enable radio 2.

[AC-wlan-ap-group-group1-ap-model-WA6320-radio-2] radio enable

[AC-wlan-ap-group-group1-ap-model-WA6320-radio-2] quit

[AC-wlan-ap-group-group1-ap-model-WA6320] quit

[AC-wlan-ap-group-group1] quit

Verifying the configuration

# After the client comes online, use the display wlan client command to view IPv4 address information of the client on the AC. Use the display wlan client ipv6 command to view the IPv6 address information of the client.

# Make the client come online through IPv4, and view the brief IPv4 address information of the client.

<Sysname> display wlan client

Total number of clients: 1

 

MAC address    Username             AP name               R IP address      VLAN

3829-5a40-9589 N/A                  office                2 192.168.2.3     200

# Make the client come online through IPv6, and view the brief IPv6 address information of the client.

<Sysname> display wlan client ipv6

MAC address    AP name               IPv6 address                            VLAN

3829-5a40-9589 office                2004::4549:7C7F:392E:EE57               200

Configuration files

·     AC

#

 dhcp enable

#

 ipv6 dhcp server forbidden-address 2001::1

 ipv6 dhcp server forbidden-address 2004::1 2004::2

#

vlan 100

#

vlan 200

#

wlan service-template st1

 ssid service

 vlan 200

client forwarding-location ac

akm mode psk                                                                  

 preshared-key pass-phrase cipher $c$3$oLf6pOZ6bxrf25nodjOJKYEfnZ6g6ErccHyQ    

 cipher-suite ccmp                                                             

 security-ie rsn

 client ipv6-snooping nd-learning enable

 client ipv6-snooping dhcpv6-learning enable

 service-template enable

#

dhcp server ip-pool 200

 gateway-list 192.168.2.2

 network 192.168.2.0 mask 255.255.255.0

dns-list 192.168.2.2

#

ipv6 dhcp pool 1

 network 2001::/64

#

ipv6 dhcp pool 2

 network 2004::/64

#

interface Vlan-interface100

 ipv6 dhcp select server

 ipv6 dhcp server apply pool 1

 ipv6 address 2001::1/64

 ipv6 nd autoconfig managed-address-flag

 ipv6 nd autoconfig other-flag

 undo ipv6 nd ra halt

#

interface Vlan-interface200

 ip address 192.168.2.1 255.255.255.0

 ipv6 dhcp select server

 ipv6 dhcp server apply pool 2

 ipv6 address 2004::1/64

 ipv6 nd autoconfig managed-address-flag

 ipv6 nd autoconfig other-flag

 undo ipv6 nd ra halt

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 100

#

interface GigabitEthernet1/0/2

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 1 200

#

wlan ap-group group1                                                           

 ap office                                                                        

 ap-model WA6320                                                               

radio 1

  radio 2

   radio enable

   service-template st1

#

wlan ap office model WA6320

 serial-id 219801A28N819CE0002T

#

return

·     Switch 1

#

vlan 1

#

vlan 100

#

interface GigabitEthernet1/0/1

 port link-type trunk

 port trunk permit vlan 1 100

#

interface GigabitEthernet1/0/2

 port access vlan 100

 poe enable

#

·     Switch 2

#

vlan 1

#

vlan 200

#

interface Vlan-interface200

 ip address 192.168.2.2 255.255.255.0

 ipv6 address 2004::2/64

#

interface GigabitEthernet1/0/1

 port link-type trunk

 port trunk permit vlan 1 200

#

Related documentation

·     Network Connectivity Command Reference in H3C Access Controllers Command References

·     Network Connectivity Configuration Guide in H3C Access Controllers Configuration Guides

·     WLAN Access Command Reference in H3C Access Controllers Command References

·     WLAN Access Configuration Guide in H3C Access Controllers Configuration Guides

·     AP and WT Management Command Reference in H3C Access Controllers Command References

·     AP and WT Management Configuration Guide in H3C Access Controllers Configuration Guides