09-AC 1+N备份典型配置举例(V5)
本章节下载: 09-AC 1+N备份典型配置举例(V5) (245.25 KB)
AC 1+N备份典型配置举例(V5)
资料版本:6W114-20210416
Copyright © 2008-2021 新华三技术有限公司 版权所有,保留一切权利。
非经本公司书面许可,任何单位和个人不得擅自摘抄、复制本文档内容的部分或全部,并不得以任何形式传播。
除新华三技术有限公司的商标外,本手册中出现的其它公司的商标、产品标识及商品名称,由各自权利人拥有。
本文档中的信息可能变动,恕不另行通知。
目 录
本文档介绍了AC 1+N备份配置举例。
本文档不严格与具体软、硬件版本对应,如果使用过程中与产品实际情况有差异,请参考相关产品手册,或以设备实际情况为准。
本文档中的配置均是在实验室环境下进行的配置和验证,配置前设备的所有参数均采用出厂时的缺省配置。如果您已经对设备进行了配置,为了保证配置效果,请确认现有配置和以下举例中的配置不冲突。
本文档假设您已了解AC 1+N备份特性。
如图1所示,无线网络中有两台无线控制器AC 1和AC 2,分别为AP 1和AP 2提供无线服务。现要求在网络中增加一台AC,作为两台主AC的备份AC,具体应用需求如下:
· 在检测到主AC故障后的30秒内,AP会主动切换连接到备份AC上。
· 当主AC故障恢复后,AP会尝试去和主AC重新协商并建立隧道,如果建立成功,则AP会切断和备份AC的连接,自动切换到主AC上。
图1 1+N备份组网图
· 为了实现AC间的主备切换,当主AC故障时,AP需要获取备份AC的IP地址,所以需要在BackupAC的AP 1和AP 2模板视图下分别配置AC 1和AC 2的IP地址。
· 为了可以在主AC故障恢复后,AP可以重新切换到主AC上,需要保证在AC 1和AC 2上配置的接入优先级都高于BackupAC上配置的接入优先级。
· 配置AP的序列号时请确保该序列号与AP唯一对应,AP的序列号可以通过AP设备背面的标签获取。
· 主、备AC的软件版本需要保持一致。
· 主、备AC上对于需要提供服务的同一AP,其AP模板视图下的配置必须保持一致(除了AC的IP地址和优先级配置之外)。否则当AC的主、备状态切换之后,无法保证AP设备工作正常。
(1) 配置AC 1的接口
# 创建VLAN 100及其对应的VLAN接口,并为该接口配置IP地址。AC 1将使用该接口的IP地址与AP 1建立LWAPP隧道。
<AC1> system-view
[AC1] vlan 100
[AC1-vlan100] quit
[AC1] interface vlan-interface 100
[AC1-Vlan-interface100] ip address 10.101.0.10 255.255.255.0
[AC1-Vlan-interface100] quit
# 创建VLAN 200,作为ESS接口的缺省VLAN,同时作为Client接入的业务VLAN,并为该接口配置IP地址。
[AC1] vlan 200
[AC1-vlan200] quit
[AC1] interface vlan-interface 200
[AC1-Vlan-interface200] ip address 10.101.1.10 255.255.255.0
[AC1-Vlan-interface200] quit
# 创建WLAN-ESS 1接口。
[AC1] interface wlan-ess 1
# 配置WLAN-ESS 1接口的链路类型为Hybrid。
[AC1-WLAN-ESS1] port link-type hybrid
# 配置当前Hybrid端口的PVID为VLAN 200,并允许VLAN 200不带Tag通过。
[AC1-WLAN-ESS1] port hybrid vlan 200 untagged
[AC1-WLAN-ESS1] port hybrid pvid vlan 200
# 使能MAC VLAN功能。
[AC1-WLAN-ESS1] mac-vlan enable
[AC1-WLAN-ESS1] quit
# 配置AC的GigabitEthernet1/0/1接口的链路类型为Trunk,允许VLAN 100和VLAN 200的报文通过。
[AC1] interface gigabitethernet 1/0/1
[AC1-GigabitEthernet1/0/1] port link-type trunk
[AC1-GigabitEthernet1/0/1] port trunk permit vlan 100 200
[AC1-GigabitEthernet1/0/1] quit
(2) 配置服务模板
# 创建clear类型的服务模板1。
[AC1] wlan service-template 1 clear
# 设置当前服务模板的SSID为TC。
[AC1-wlan-st-1] ssid TC
# 将WLAN-ESS 1接口绑定到服务模板1。
[AC1-wlan-st-1] bind wlan-ess 1
# 启用无线服务。
[AC1-wlan-st-1] service-template enable
[AC1-wlan-st-1] quit
(3) 配置AP
# 在主AC 1的AP模板视图下配置AP 1的名称为officeap1,型号为WA2620E-AGN。
[AC1] wlan ap officeap1 model WA2620E-AGN
# 设置AC 1上AP 1的接入优先级为7,序列号为21023529G007C000020。
[AC1-wlan-ap-officeap1] priority level 7
[AC1-wlan-ap-officeap1] serial-id 21023529G007C000020
# 进入AP 1的radio1射频视图,配置服务模板与射频1进行关联,使能AP 1的radio1射频。
[AC1-wlan-ap-officeap1] radio 1
[AC1-wlan-ap-officeap1-radio-1] service-template 1
[AC1-wlan-ap-officeap1-radio-1] radio enable
[AC1-wlan-ap-officeap1-radio-1] quit
[AC1-wlan-ap-officeap1] quit
(1) 配置AC 2的接口
# 创建VLAN 100及其对应的VLAN接口,并为该接口配置IP地址。AC 2将使用该接口的IP地址与AP 2建立LWAPP隧道。
<AC2> system-view
[AC2] vlan 100
[AC2-vlan100] quit
[AC2] interface vlan-interface 100
[AC2-Vlan-interface100] ip address 10.101.0.30 255.255.255.0
[AC2-Vlan-interface100] quit
# 创建VLAN 200,作为ESS接口的缺省VLAN,同时作为Client接入的业务VLAN,并为该接口配置IP地址。
[AC2] vlan 200
[AC2-vlan200] quit
[AC2] interface vlan-interface 200
[AC2-Vlan-interface200] ip address 10.101.1.30 255.255.255.0
[AC2-Vlan-interface200] quit
# 创建WLAN-ESS 1接口。
[AC2] interface wlan-ess 1
# 配置WLAN-ESS 1接口的链路类型为Hybrid。
[AC2-WLAN-ESS1] port link-type hybrid
# 配置当前Hybrid端口的PVID为VLAN 200,并允许VLAN 200不带Tag通过。
[AC2-WLAN-ESS1] port hybrid vlan 200 untagged
[AC2-WLAN-ESS1] port hybrid pvid vlan 200
# 使能MAC VLAN功能。
[AC2-WLAN-ESS1] mac-vlan enable
[AC2-WLAN-ESS1] quit
# 配置AC的GigabitEthernet1/0/1接口的链路类型为Trunk,允许VLAN 100和VLAN 200的报文通过。
[AC2] interface gigabitethernet 1/0/1
[AC2-GigabitEthernet1/0/1] port link-type trunk
[AC2-GigabitEthernet1/0/1] port trunk permit vlan 100 200
[AC2-GigabitEthernet1/0/1] quit
(2) 配置服务模板
# 创建clear类型的服务模板1。
[AC2] wlan service-template 1 clear
# 设置当前服务模板的SSID为TC。
[AC2-wlan-st-1] ssid TC
# 将WLAN-ESS 1接口绑定到服务模板1。
[AC2-wlan-st-1] bind wlan-ess 1
# 启用无线服务。
[AC2-wlan-st-1] service-template enable
[AC2-wlan-st-1] quit
(3) 配置AP
# 在主AC 2的AP模板视图下配置AP 2的名称为officeap2,型号为WA2620E-AGN。
[AC2] wlan ap officeap2 model WA2620E-AGN
# 设置AC 2上AP 2的接入优先级为7,序列号为21023529G007C000021
[AC2-wlan-ap-officeap2] priority level 7
[AC2-wlan-ap-officeap2] serial-id 21023529G007C000021
# 进入AP 2的radio1射频视图,配置服务模板与射频1进行关联,使能AP 2的radio1射频。
[AC2-wlan-ap-officeap2] radio 1
[AC2-wlan-ap-officeap2-radio-1] service-template 1
[AC2-wlan-ap-officeap2-radio-1] radio enable
[AC2-wlan-ap-officeap2-radio-1] quit
[AC2-wlan-ap-officeap2] quit
(1) 配置BackupAC的接口
# 创建VLAN 100及其对应的VLAN接口,并为该接口配置IP地址。BackupAC将使用该接口的IP地址与AP 1和AP 2建立LWAPP隧道。
<BackupAC> system-view
[BackupAC] vlan 100
[BackupAC-vlan100] quit
[BackupAC] interface vlan-interface 100
[BackupAC-Vlan-interface100] ip address 10.101.0.20 255.255.255.0
[BackupAC-Vlan-interface100] quit
# 创建VLAN 200,作为ESS接口的缺省VLAN,同时作为Client接入的业务VLAN,并为该接口配置IP地址。
[BackupAC] vlan 200
[BackupAC-vlan200] quit
[BackupAC] interface vlan-interface 200
[BackupAC-Vlan-interface200] ip address 10.101.1.20 255.255.255.0
[BackupAC-Vlan-interface200] quit
# 创建WLAN-ESS 1接口。
[BackupAC] interface wlan-ess 1
# 配置WLAN-ESS 1接口的链路类型为Hybrid。
[BackupAC-WLAN-ESS1] port link-type hybrid
# 配置当前Hybrid端口的PVID为VLAN 200,并允许VLAN 200不带Tag通过。
[BackupAC-WLAN-ESS1] port hybrid vlan 200 untagged
[BackupAC-WLAN-ESS1] port hybrid pvid vlan 200
# 使能MAC VLAN功能。
[BackupAC-WLAN-ESS1] mac-vlan enable
[BackupAC-WLAN-ESS1] quit
# 配置BackupAC的GigabitEthernet1/0/1接口的链路类型为Trunk,允许VLAN 100和VLAN 200的报文通过。
[BackupAC] interface gigabitethernet 1/0/1
[BackupAC-GigabitEthernet1/0/1] port link-type trunk
[BackupAC-GigabitEthernet1/0/1] port trunk permit vlan 100 200
[BackupAC-GigabitEthernet1/0/1] quit
(2) 配置服务模板
# 创建clear类型的服务模板1。
[BackupAC] wlan service-template 1 clear
# 设置当前服务模板的SSID为TC。
[BackupAC-wlan-st-1] ssid TC
# 将WLAN-ESS 1接口绑定到服务模板1。
[BackupAC-wlan-st-1] bind wlan-ess 1
# 启用无线服务。
[BackupAC-wlan-st-1] service-template enable
[BackupAC-wlan-st-1] quit
(3) 配置AP
# 在BackupAC的对应AP 1视图下配置AP 1名称为officeap1,型号为WA2620E-AGN,序列号为21023529G007C000020,AP 1的接入优先级取系统缺省值4。
[BackupAC] wlan ap officeap1 model WA2620E-AGN
[BackupAC-wlan-ap-officeap1] serial-id 21023529G007C000020
# 在BackupAC的AP 1模板视图下,配置AC 1的IP地址。
[BackupAC-wlan-ap-officeap1] backup-ac ip 10.101.0.10
# 进入AP 1的radio1射频视图,将服务模板与射频1进行关联,并使能AP 1的radio1射频。
[BackupAC-wlan-ap-officeap1] radio 1
[BackupAC-wlan-ap-officeap1-radio-1] service-template 1
[BackupAC-wlan-ap-officeap1-radio-1] radio enable
[BackupAC-wlan-ap-officeap1-radio-1] quit
[BackupAC-wlan-ap-officeap1] quit
# 在BackupAC的对应AP 2视图下配置AP 2名称为officeap2,型号为WA2620E-AGN,序列号为21023529G007C000021,AP 2的接入优先级取系统缺省值4。
[BackupAC] wlan ap officeap2 model WA2620E-AGN
[BackupAC-wlan-ap-officeap2] serial-id 21023529G007C000021
# 在BackupAC的AP 2模板视图下,配置AC 2的IP地址。
[BackupAC-wlan-ap-officeap2] backup-ac ip 10.101.0.30
# 进入AP 2的radio1射频视图,将服务模板与射频1进行关联,并使能AP 2的radio1射频。
[BackupAC-wlan-ap-officeap2] radio 1
[BackupAC-wlan-ap-officeap2-radio-1] service-template 1
[BackupAC-wlan-ap-officeap2-radio-1] radio enable
[BackupAC-wlan-ap-officeap2-radio-1] quit
[BackupAC-wlan-ap-officeap2] return
# 创建VLAN 100和VLAN 200,其中VLAN 100用于转发AC和AP间LWAPP隧道内的流量,VLAN 200为无线用户接入的VLAN。
<Switch> system-view
[Switch] vlan 100
[Switch-vlan100] quit
[Switch] vlan 200
[Switch-vlan200] quit
# 配置Switch与AC 1相连的GigabitEthernet1/0/1接口的链路类型为Trunk,当前Trunk口的PVID为100,允许VLAN 100和200通过。
[Switch] interface gigabitethernet 1/0/1
[Switch-GigabitEthernet1/0/1] port link-type trunk
[Switch-GigabitEthernet1/0/1] port trunk permit vlan 100 200
[Switch-GigabitEthernet1/0/1] port trunk pvid vlan 100
[Switch-GigabitEthernet1/0/1] quit
# 配置Switch与AP 1相连的GigabitEthernet1/0/2接口链路类型为Access,当前Access口允许VLAN 100通过。
[Switch] interface gigabitethernet 1/0/2
[Switch-GigabitEthernet1/0/2] port link-type access
[Switch-GigabitEthernet1/0/2] port access vlan 100
[Switch-GigabitEthernet1/0/2] quit
# 配置Switch与BackupAC相连的GigabitEthernet1/0/3接口的链路类型为Trunk,当前Trunk口的PVID为100,允许VLAN 100和200通过。
[Switch] interface gigabitethernet 1/0/3
[Switch-GigabitEthernet1/0/3] port link-type trunk
[Switch-GigabitEthernet1/0/3] port trunk permit vlan 100 200
[Switch-GigabitEthernet1/0/3] port trunk pvid vlan 100
[Switch-GigabitEthernet1/0/3] quit
# 配置Switch与AP 2相连的GigabitEthernet1/0/4接口链路类型为Access,当前Access口允许VLAN 100通过。
[Switch] interface gigabitethernet 1/0/4
[Switch-GigabitEthernet1/0/4] port link-type access
[Switch-GigabitEthernet1/0/4] port access vlan 100
[Switch-GigabitEthernet1/0/4] quit
# 配置Switch与AC 2相连的GigabitEthernet1/0/5接口的链路类型为Trunk,当前Trunk口的PVID为100,允许VLAN 100和200通过。
[Switch] interface gigabitethernet 1/0/5
[Switch-GigabitEthernet1/0/5] port link-type trunk
[Switch-GigabitEthernet1/0/5] port trunk permit vlan 100 200
[Switch-GigabitEthernet1/0/5] port trunk pvid vlan 100
[Switch-GigabitEthernet1/0/5] quit
# 配置Switch与DHCP server相连的GigabitEthernet1/0/6接口链路类型为Access,当前Access口允许VLAN 100通过。
[Switch] interface gigabitethernet 1/0/6
[Switch-GigabitEthernet1/0/6] port link-type access
[Switch-GigabitEthernet1/0/6] port access vlan 100
[Switch-GigabitEthernet1/0/6] quit
(1) 在AC 1上通过命令行display wlan ap name officeap1查看AP 1的注册状态为Run/M。
<AC1> display wlan ap name officeap1
AP Profile
----------------------------------------------------------------------------------------
AP Name APID State Model Serial-ID
----------------------------------------------------------------------------------------
officeap1 1 Run/M WA2620E-AGN 21023529G007C000020
----------------------------------------------------------------------------------------
(2) 在备份AC上通过命令行display wlan ap name officeap1查看AP 1的注册状态应该为Idle。
<BackupAC> display wlan ap name officeap1
AP Profile
----------------------------------------------------------------------------------------
AP Name APID State Model Serial-ID
----------------------------------------------------------------------------------------
officeap1 1 Idle WA2620E-AGN 21023529G007C000020
----------------------------------------------------------------------------------------
(3) 通过命令行shutdown断开AC 1和AP 1的连接,待隧道超时后,在AC 1上使用display wlan ap name officeap1命令查看AP 1的注册状态应该为Idle。
<AC1> system-view
[AC1] interface vlan-interface 100
[AC1-Vlan-interface100] shutdown
#Mar 31 15:03:53:315 2014 AC IFNET/4/INTERFACE UPDOWN:
Trap 1.3.6.1.6.3.1.1.5.3<linkDown>: Interface 20054116 is Down, ifAdminStatus is 2, ifOperStatus is 2
%Mar 31 15:03:53:317 2014 AC IFNET/4/LINK UPDOWN:
Vlan-interface100: link status is DOWN
%Mar 31 15:03:53:361 2014 AC IFNET/4/UPDOWN:
Line protocol on the interface Vlan-interface100 is DOWN
[AC1-Vlan-interface100]
#Mar 31 15:04:21:587 2014 AC LWPS/4/Tunnel Down: Tunnel Down:1.3.6.1.4.1.
25506.2.75.1.3.0.2<hh3cDot11ACMtTunnelDownTrap> Serial Id:21023529G007C000020 DownInfo:1
#Mar 31 15:04:22:102 2014 AC IFNET/4/INTERFACE UPDOWN:
Trap 1.3.6.1.6.3.1.1.5.3<linkDown>: Interface 20905984 is Down, ifAdminStatus is 2, ifOperStatus is 2
#Mar 31 15:04:22:107 2014 AC IFNET/4/INTERFACE UPDOWN:
Trap 1.3.6.1.6.3.1.1.5.3<linkDown>: Interface 20840448 is Down, ifAdminStatus is 1, ifOperStatus is 2
%Mar 31 15:04:22:117 2014 AC IFNET/4/LINK UPDOWN:
WLAN-DBSS1:19: link status is DOWN
%Mar 31 15:04:22:127 2014 AC IFNET/4/LINK UPDOWN:
WLAN-ESS1: link status is DOWN
[AC1-Vlan-interface100] display wlan ap name officeap1
AP Profile
----------------------------------------------------------------------------------------
AP Name APID State Model Serial-ID
----------------------------------------------------------------------------------------
officeap1 1 Idle WA2620E-AGN 21023529G007C000020
----------------------------------------------------------------------------------------
(4) 在BackupAC上使用display wlan ap name officeap1命令查看AP 1的注册状态应该变为Run/M。
#Mar 31 15:01:42:436 2014 BackupAC LWPS/4/Tunnel Up: Tunnel Up:1.3.6.1.4.1.2014
.10.2.75.1.3.0.1<h3cDot11ACMtTunnelSetupTrap> Serial Id:21023529G007C000020 UpInfo:1
<BackupAC> display wlan ap name officeap1
AP Profile
----------------------------------------------------------------------------------------
AP Name APID State Model Serial-ID
----------------------------------------------------------------------------------------
officeap1 1 Run/M WA2620E-AGN 21023529G007C000020
----------------------------------------------------------------------------------------
(5) 使用undo shutdown命令关闭AC 1的VLAN接口100,过一段时间后,在AC 1上可以看到AC 1和AP 1建立起隧道,通过display wlan ap name officeap1命令可以看到AP 1的注册状态为Run/M。
[AC1-Vlan-interface100] undo shutdown
#Mar 31 15:11:10:610 2014 AC IFNET/4/INTERFACE UPDOWN:
Trap 1.3.6.1.6.3.1.1.5.4<linkUp>: Interface 20054116 is Up, ifAdminStatus is 1,
ifOperStatus is 1
%Mar 31 15:11:10:656 2014 AC IFNET/4/LINK UPDOWN:
Vlan-interface100: link status is UP
%Mar 31 15:11:10:657 2014 AC IFNET/4/UPDOWN:
Line protocol on the interface Vlan-interface100 is UP
[AC1-Vlan-interface100]
#Mar 31 15:11:28:015 2014 AC LWPS/4/Tunnel Up: Tunnel Up:1.3.6.1.4.1.2550
6.2.75.1.3.0.1<hh3cDot11ACMtTunnelSetupTrap> Serial Id:21023529G007C000020 UpInfo:1
[AC1-Vlan-interface100] display wlan ap name officeap1
AP Profile
----------------------------------------------------------------------------------------
AP Name APID State Model Serial-ID
----------------------------------------------------------------------------------------
officeap1 1 Run/M WA2620E-AGN 21023529G007C000020
----------------------------------------------------------------------------------------
(6) 在BackupAC上使用display wlan ap name officeap1命令可以看到AP 1的注册状态变为Idle。
<BackupAC> display wlan ap name officeap1
AP Profile
----------------------------------------------------------------------------------------
AP Name APID State Model Serial-ID
----------------------------------------------------------------------------------------
officeap1 1 Idle WA2620E-AGN 21023529G007C000020
----------------------------------------------------------------------------------------
· AC 1:
#
vlan 100
#
vlan 200
#
wlan service-template 1 clear
ssid TC
bind WLAN-ESS 1
service-template enable
#
interface Vlan-interface100
ip address 10.101.0.10 255.255.255.0
#
interface Vlan-interface200
ip address 10.101.1.10 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 100 200
#
interface WLAN-ESS1
port link-type hybrid
port hybrid vlan 1 200 untagged
#
wlan ap officeap1 model WA2620E-AGN
priority level 7
serial-id 21023529G007C000020
radio 1
channel auto
max-power 20
service-template 1
radio enable
#
· AC 2:
#
vlan 100
#
vlan 200
#
wlan service-template 1 clear
ssid TC
bind WLAN-ESS 1
service-template enable
#
interface Vlan-interface100
ip address 10.101.0.30 255.255.255.0
#
interface Vlan-interface200
ip address 10.101.1.30 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 100 200
#
interface WLAN-ESS1
port link-type hybrid
port hybrid vlan 1 200 untagged
#
wlan ap officeap2 model WA2620E-AGN
priority level 7
serial-id 21023529G007C000021
radio 1
channel auto
max-power 20
service-template 1
radio enable
#
· BackupAC:
#
vlan 100
#
vlan 200
#
wlan service-template 1 clear
ssid TC
bind WLAN-ESS 1
service-template enable
#
interface Vlan-interface100
ip address 10.101.0.20 255.255.255.0
#
interface Vlan-interface200
ip address 10.101.1.20 255.255.255.0
#
interface GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 100 200
#
interface WLAN-ESS1
port link-type hybrid
port hybrid vlan 1 200 untagged
wlan ap officeap1 model WA2620E-AGN
serial-id 21023529G007C000020
backup-ac ip 10.101.0.10
radio 1
channel auto
max-power 20
service-template 1
radio enable
wlan ap officeap2 model WA2620E-AGN
serial-id 21023529G007C000021
backup-ac ip 10.101.0.30
radio 1
channel auto
max-power 20
service-template 1
radio enable
#
· Switch:
#
vlan 100
#
vlan 200
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan 100 200
port trunk pvid vlan 100
#
interface GigabitEthernet1/0/2
port link-type access
port access vlan 100
#
interface GigabitEthernet1/0/3
port link-type trunk
port trunk permit vlan 100 200
port trunk pvid vlan 100
#
interface GigabitEthernet1/0/4
port link-type trunk
port trunk permit vlan 100 200
port trunk pvid vlan 100
#
interface GigabitEthernet1/0/5
port link-type access
port access vlan 100
#
interface GigabitEthernet1/0/6
port link-type access
port access vlan 100
#
· 《H3C无线控制器产品 配置指导》中的“WLAN配置指导”。
· 《H3C无线控制器产品 命令参考》中的“WLAN命令参考”。
不同款型规格的资料略有差异, 详细信息请向具体销售和400咨询。H3C保留在没有任何通知或提示的情况下对资料内容进行修改的权利!