华为WLAN专题报道【详细模版命令解释】【组网模式大分析】
请查看这里：
http://www.elvhome.com/html/20151110/2015111010100652851.html
双链路备份：直连式三层组网，数据隧道转发
规格
适用的AC：AC6605、AC6005
适用的AP：所有形态的AP
组网需求
如图1所示，主AC与备AC同时连接上层网络，并通过汇聚交换机和接入交换机连接和管理AP1和AP2。AC和AP之间网络属于三层组网。
由于非双链路备份组网情况下，AP与AC间的链路发生故障时，业务将会中断。用户希望通过配置双链路备份，实现减少业务中断时间，提高网络可靠性的目的。
图1 组网配置图
| 规划内容 | 规划数据 |
| WLAN安全 | WEP Open-system认证，不加密 |
| WLAN服务集 | Name:huawei-1 SSID:huawei-1 WLAN 虚接口：WLAN-ESS0 数据转发模式：隧道转发 Name:huawei-2 SSID:huawei-2 WLAN 虚接口：WLAN-ESS1 数据转发模式：隧道转发 |
| AP管理VLAN | VLAN 200 |
| AP业务VLAN | AP1：VLAN 101 AP2：VLAN 102 |
| AP域 | AP1：101 AP2：102 |
| AC Carrier ID/AC ID | other/1 |
| AP管理IP地址池 | 192.168.10.2～192.168.10.254/24 |
| AP管理网关 | 192.168.10.1/24(接入交换机上) |
| AP1用户上网公网地址池 | 192.168.11.2～192.168.11.254/24 |
| AP1用户上网公网网关 | 192.168.11.1/24(汇聚交换机上) |
| AP2用户上网公网地址池 | 192.168.12.2～192.168.12.254/24 |
| AP2用户上网公网网关 | 192.168.12.1/24(汇聚交换机上) |
| DHCP Server | 汇聚交换机作为AP和用户DHCP服务器 |
配置流程
按照图1进行物理连接，保证AC与IP骨干网之间网络连接正常。
配置接入交换机和汇聚交换机，保证AC与AP路由可达。
在汇聚交换机上使能DHCP服务器。
在AC上配置WLAN相关业务。
业务下发至AP，用户完成业务验证。
配置注意事项
IP地址池的配置，给AP分配IP地址的地址范围在主AC和备AC上需要划分开，避免IP地址冲突。
主AC和备AC的WLAN业务要保持一致。
在双链路备份中不支持通过AC给STA分配IP地址，或者AC作为STA的网关。
接入交换机或AC上直接接AP的端口，需要添加管理VLAN tag。AP上为零配置。
业务IP地址池给STA分配IP地址，管理IP地址池给AP分配IP地址，两种地址池需要分开配置。
需要将所有二层交换机在AP管理VLAN和业务VLAN内的下行口上配置端口隔离，如果不配置端口隔离，可能会在VLAN内存在不必要的广播报文，或者导致不同AP间的WLAN用户二层互通的问题。端口隔离功能未开启时，建议从接入交换机到AC之间的所有网络设备的接口都配置undo port trunk allow-pass vlan 1，防止引起报文冲突，占用端口资源。
操作步骤
1、配置接入交换机
# 由接入交换机给AP管理报文添加VLAN tag
<Quidway> system-view [Quidway] dhcp enable [Quidway] vlan 100 200 [Quidway] interface vlanif 100 [Quidway-Vlanif100] ip address 192.168.10.1 24 [Quidway-Vlanif100] dhcp select relay [Quidway-Vlanif100] dhcp relay server-ip 172.16.10.1 [Quidway-Vlanif100] quit [Quidway] interface vlanif 200 [Quidway-Vlanif200] ip address 172.16.10.10 255.255.255.0 [Quidway-Vlanif200] quit [Quidway] interface ethernet 0/0/1 [Quidway-Ethernet0/0/1] port link-type trunk [Quidway-Ethernet0/0/1] port trunk pvid vlan 100 [Quidway-Ethernet0/0/1] port trunk allow-pass vlan 100 [Quidway-Ethernet0/0/1] port-isolate enable [Quidway-Ethernet0/0/1] quit [Quidway] interface ethernet 0/0/2 [Quidway-Ethernet0/0/2] port link-type trunk [Quidway-Ethernet0/0/2] port trunk pvid vlan 100 [Quidway-Ethernet0/0/2] port trunk allow-pass vlan 100 [Quidway-Ethernet0/0/2] port-isolate enable [Quidway-Ethernet0/0/2] quit [Quidway] interface gigabitethernet 0/0/1 [Quidway-GigabitEthernet0/0/1] port link-type trunk [Quidway-GigabitEthernet0/0/1] port trunk allow-pass vlan 200 [Quidway-GigabitEthernet0/0/1] quit
2、配置汇聚交换机
# 配置交换机VLAN，使能DHCP服务器
<Quidway> system-view [Quidway] dhcp enable [Quidway] ip pool huawei [Quidway-ip-pool-huawei] gateway 192.168.10.1 [Quidway-ip-pool-huawei] option 43 sub-option 3 ascii 172.16.10.2,172.16.10.3 [Quidway-ip-pool-huawei] network 192.168.10.0 24 [Quidway-ip-pool-huawei] excluded-ip-address 172.16.10.2 172.16.10.3 [Quidway-ip-pool-huawei] quit [Quidway] vlan batch 101 102 200 [Quidway] interface Vlanif 200 [Quidway-Vlanif200] ip address 172.16.10.1 24 [Quidway-Vlanif200] dhcp select global [Quidway-Vlanif200] quit [Quidway] interface Vlanif 101 [Quidway-Vlanif101] ip address 192.168.11.1 24 [Quidway-Vlanif101] dhcp select interface [Quidway-Vlanif101] quit [Quidway] interface Vlanif 102 [Quidway-Vlanif102] ip address 192.168.12.1 24 [Quidway-Vlanif102] dhcp select interface [Quidway-Vlanif102] quit [Quidway] interface gigabitethernet 0/0/1 [Quidway-GigabitEthernet0/0/1] port link-type trunk [Quidway-GigabitEthernet0/0/1] port trunk allow-pass vlan 200 [Quidway-GigabitEthernet0/0/1] quit [Quidway] interface gigabitethernet 0/0/2 [Quidway-GigabitEthernet0/0/2] port link-type trunk [Quidway-GigabitEthernet0/0/2] port trunk allow-pass vlan 101 102 200 [Quidway-GigabitEthernet0/0/2] quit [Quidway] interface gigabitethernet 0/0/3 [Quidway-GigabitEthernet0/0/3] port link-type trunk [Quidway-GigabitEthernet0/0/3] port trunk allow-pass vlan 101 102 200 [Quidway-GigabitEthernet0/0/3] quit [Quidway] ip route-static 192.168.10.0 255.255.255.0 172.16.10.10
3、配置主AC
a、配置主AC，使AP与AC之间能够传输管理报文
# 配置主AC，将接口GE0/0/1加入VLAN100
<AC6605> system-view [AC6605] sysname AC [AC] vlan batch 100 101 102 [AC] interface gigabitethernet 0/0/1 [AC-GigabitEthernet0/0/1] port link-type trunk [AC-GigabitEthernet0/0/1] port trunk allow-pass vlan 100 101 102 [AC-GigabitEthernet0/0/1] quit
b、配置AC的接口
[AC] interface Vlanif 200 [AC-Vlanif200] ip address 172.16.10.2 255.255.255.0 [AC-Vlanif200] quit [AC] ip route-static 192.168.10.0 255.255.255.0 172.16.10.1
c、配置AC的全局参数
# 配置AC的国家码、AC ID、运营商标识和AC的源接口
d、配置AP并上线
# 配置AP的认证方式为MAC认证
# 查询AP的设备类型
# 根据查询到的AP设备类型ID（AP6010DN-AGN type-id为19），离线添加AP
# 将AP加入指定域
[AC-wlan-view] ap-region id 101 [AC-wlan-ap-region-101] quit [AC-wlan-view] ap-region id 102 [AC-wlan-ap-region-102] quit [AC-wlan-view] ap id 1 [AC-wlan-ap-1] region-id 101 [AC-wlan-ap-1] quit [AC-wlan-view] ap id 2 [AC-wlan-ap-2] region-id 102 [AC-wlan-ap-2] quit
# 查看AP的上线状态
e、配置WLAN-ESS虚接口
[AC] interface wlan-ess 0 [AC-Wlan-Ess0] port hybrid pvid vlan 101 [AC-Wlan-Ess0] port hybrid untagged vlan 101 [AC-Wlan-Ess0] quit [AC] interface wlan-ess 1 [AC-Wlan-Ess1] port hybrid pvid vlan 102 [AC-Wlan-Ess1] port hybrid untagged vlan 102 [AC-Wlan-Ess1] quit
f、配置WLAN业务参数
# 配置WMM模板和射频模板，参数采用默认配置，将WMM模板绑定到射频模板
[AC] wlan [AC-wlan-view] wmm-profile name huawei-ap1 [AC-wlan-wmm-prof-huawei-ap1] quit [AC-wlan-view] wmm-profile name huawei-ap2 [AC-wlan-wmm-prof-huawei-ap2] quit [AC-wlan-view] radio-profile name huawei-ap1 [AC-wlan-radio-prof-huawei-ap1] wmm-profile name huawei-ap1 [AC-wlan-radio-prof-huawei-ap1] quit [AC-wlan-view] radio-profile name huawei-ap2 [AC-wlan-radio-prof-huawei-ap2] wmm-profile name huawei-ap2 [AC-wlan-radio-prof-huawei-ap2] quit
# 配置安全模板，参数采用默认配置，即开放认证、不加密
[AC-wlan-view] security-profile name huawei-ap [AC-wlan-sec-prof-huawei-ap] quit
# 配置流量模板，参数采用默认配置
[AC-wlan-view] traffic-profile name huawei-ap [AC-wlan-traffic-prof-huawei-ap] quit
# 配置AP1和AP2的服务集，设置数据转发模式为隧道转发
[AC-wlan-view] service-set name huawei-1 [AC-wlan-service-set-huawei-1] ssid huawei-1 [AC-wlan-service-set-huawei-1] wlan-ess 0 [AC-wlan-service-set-huawei-1] service-vlan 101 [AC-wlan-service-set-huawei-1] security-profile name huawei-ap [AC-wlan-service-set-huawei-1] traffic-profile name huawei-ap [AC-wlan-service-set-huawei-1] forward-mode tunnel [AC-wlan-service-set-huawei-1] quit [AC-wlan-view] service-set name huawei-2 [AC-wlan-service-set-huawei-2] ssid huawei-2 [AC-wlan-service-set-huawei-2] wlan-ess 1 [AC-wlan-service-set-huawei-2] service-vlan 102 [AC-wlan-service-set-huawei-2] security-profile name huawei-ap [AC-wlan-service-set-huawei-2] traffic-profile name huawei-ap [AC-wlan-service-set-huawei-2] forward-mode tunnel [AC-wlan-service-set-huawei-2] quit
g、配置AP对应的VAP并下发配置
[AC-wlan-view] ap 1 radio 0 [AC-wlan-radio-1/0] radio-profile name huawei-ap1 [AC-wlan-radio-1/0] service-set name huawei-1 [AC-wlan-radio-1/0] quit [AC-wlan-view] commit ap 1 Warning: Committing configuration may cause service interruption,continue?[Y/N] y [AC-wlan-view] ap 2 radio 0 [AC-wlan-radio-2/0] radio-profile name huawei-ap2 [AC-wlan-radio-2/0] service-set name huawei-2 [AC-wlan-radio-2/0] quit [AC-wlan-view] commit ap 2 Warning: Committing configuration may cause service interruption,continue?[Y/N] y
4、配置备AC
a、配置备AC，使AP与AC之间能够传输管理报文
# 配置备AC，将接口GE0/0/1加入VLAN100
<AC6605> system-view [AC6605] sysname Backup-AC [Backup-AC] vlan batch 100 101 102 [Backup-AC] interface gigabitethernet 0/0/1 [Backup-AC-GigabitEthernet0/0/1] port link-type trunk [Backup-AC-GigabitEthernet0/0/1] port trunk allow-pass vlan 100 101 102 [Backup-AC-GigabitEthernet0/0/1] quit
b、配置AC的接口
[Backup-AC] interface Vlanif 200 [Backup-AC-Vlanif200] ip address 172.16.10.3 255.255.255.0 [Backup-AC-Vlanif200] quit [Backup-AC] ip route-static 192.168.10.0 255.255.255.0 172.16.10.1
c、在备AC上配置WLAN业务
说明：此时还未建立双链路，AP在主AC上线后，就不能在备AC正常上线。请在备AC上离线添加AP，然后进行WLAN业务配置。
# 请参考主AC的WLAN业务配置，要求主AC与备AC的WLAN业务配置保持一致。
5、开启主AC和备AC双链路备份功能
# 在主AC上，配置备AC的IP地址，主AC的优先级，用于双链路备份。全局使能双链路备份和回切功能，重启所有AP使双链路备份功能生效。
说明：
通过配置AC的优先级来决定主备AC，优先级高的AC作为主AC，优先级低的AC作为备AC。数字越小，优先级越高。优先级相同情况下AC负载轻的为主AC；负载相同情况下比较IP地址，IP地址小的AC为主AC。
缺省情况下，双链路备份功能未使能，执行命令wlan ac protect enable会提示重启所有AP。AP重启后，双链路备份功能开始生效。
若双链路备份功能已使能，此处再执行命令wlan ac protect enable不会重启AP，需要在主AC上继续执行命令ap-reset id ap-id或ap-reset all重启AP，AP重启后，双链路备份功能开始生效。
[AC] wlan [AC-wlan-view] wlan ac protect protect-ac 172.16.10.3 priority 1 [AC-wlan-view] wlan ac protect restore enable [AC-wlan-view] wlan ac protect enable Warning: This operation maybe cause ap reset ! Continue? [Y/N]y
# 在备AC上，配置主AC的IP地址，备AC的优先级，用于双链路备份。
[Backup-AC] wlan [Backup-AC-wlan-view] wlan ac protect protect-ac 172.16.10.2 priority 2 [Backup-AC-wlan-view] wlan ac protect restore enable [Backup-AC-wlan-view] wlan ac protect enable Warning: This operation maybe cause ap reset ! Continue? [Y/N]y
