第一篇：65-無線控制器VRRP熱備管理AP典型配置舉例

無線控制器VRRP熱備管理AP典型配置舉例

Copyright ? 2014杭州華三通信技術(shù)有限公司 版權(quán)所有，保留一切權(quán)利。

非經(jīng)本公司書面許可，任何單位和個(gè)人不得擅自摘抄、復(fù)制本文檔內(nèi)容的部分或全部，并不得以任何形式傳播。本文檔中的信息可能變動(dòng)，恕不另行通知。

目 錄 簡介 ······························································································································ 1 2 配置前提 ························································································································ 1 3 配置舉例 ························································································································ 1

3.1 組網(wǎng)需求 ····················································································································· 1 3.2 配置思路 ····················································································································· 2 3.3 配置注意事項(xiàng) ··············································································································· 2 3.4 配置步驟 ····················································································································· 2

3.4.1 AC 1的配置 ········································································································ 2 3.4.2 AC 2的配置 ········································································································ 4 3.4.3 Switch的配置 ······································································································ 6 3.5 驗(yàn)證配置 ····················································································································· 7 3.6 配置文件 ····················································································································· 8 相關(guān)資料 ······················································································································ 10

i 簡介

本文檔介紹了無線控制器VRRP熱備管理AP典型配置舉例。配置前提

本文檔不嚴(yán)格與具體軟、硬件版本對(duì)應(yīng)，如果使用過程中與產(chǎn)品實(shí)際情況有差異，請(qǐng)參考相關(guān)產(chǎn)品手冊(cè)，或以設(shè)備實(shí)際情況為準(zhǔn)。

本文檔中的配置均是在實(shí)驗(yàn)室環(huán)境下進(jìn)行的配置和驗(yàn)證，配置前設(shè)備的所有參數(shù)均采用出廠時(shí)的缺省配置。如果您已經(jīng)對(duì)設(shè)備進(jìn)行了配置，為了保證配置效果，請(qǐng)確認(rèn)現(xiàn)有配置和以下舉例中的配置不沖突。

本文檔假設(shè)您已了解WLAN接入、VRRP熱備等特性。配置舉例

3.1 組網(wǎng)需求

如圖1所示，為了提高網(wǎng)絡(luò)中AC的可靠性，現(xiàn)要求使用VRRP熱備功能，將AC 1和AC 2組成一臺(tái)虛擬AC，為Client提供無線接入服務(wù)。具體要求如下：

? ? AC 1正常工作的情況下，Client通過AC 1訪問網(wǎng)絡(luò)。

當(dāng)AC 1發(fā)生故障時(shí)，Client切換至AC 2上，保證業(yè)務(wù)流量在切換過程中不會(huì)中斷。

圖1 VRRP熱備管理AP典型組網(wǎng)圖

Vlan-int100:126.100.1.1/24Vlan-int200:126.200.1.1/24Vlan-int100:126.100.1.2/24Vlan-int200:126.200.1.2/24IACTP tunnelAC 1MasterVirtual IP address126.100.1.253/24BackupAC 2SwitchDHCP serverAPClient

3.2 配置思路

? ? ? 為了讓AC 1成為VRRP備份組中的Master，需要為AC 1配置較高的優(yōu)先級(jí)。為了避免VRRP備份組中的角色頻繁發(fā)生變化，可以配置一定的搶占延遲時(shí)間。

當(dāng)備份組中的角色發(fā)生變化時(shí)，為了保證網(wǎng)絡(luò)流量不會(huì)中斷，需要在AC 1和AC 2之間建立IACTP隧道，并通過AP信息備份以及Client備份功能，使AC之間可以同步備份AP和Client的信息。

3.3 配置注意事項(xiàng)

? ? ? ? 兩臺(tái)AC需保證WLAN相關(guān)的特性配置一致，否則可能出現(xiàn)備份失敗等問題。

配置AP的序列號(hào)時(shí)請(qǐng)確保該序列號(hào)與AP唯一對(duì)應(yīng)，AP的序列號(hào)可以通過AP設(shè)備背面的標(biāo)簽獲取。

需要確保在完成VRRP配置、IACTP隧道、開啟客戶端信息備份功能后，再開啟AP信息備份功能。

需要在配置IACTP隧道的源IP地址后才可以開啟隧道。

3.4 配置步驟

3.4.1 AC 1的配置

(1)配置AC 1的接口

# 創(chuàng)建VLAN 100及其對(duì)應(yīng)的VLAN接口，并為該接口配置IP地址。AC 1將使用該接口的IP地址與AP建立LWAPP隧道，同時(shí)用于與AC 2建立VRRP備份組和IACTP隧道。

system-view [AC1] vlan 100 [AC1-vlan100] quit [AC1] interface vlan-interface 100 [AC1-Vlan-interface100] ip address 126.100.1.1 24 [AC1-Vlan-interface100] quit # 創(chuàng)建VLAN 200作為WLAN-ESS接口的缺省VLAN，同時(shí)作為Client接入的業(yè)務(wù)VLAN，并為該接口配置IP地址。

[AC1] vlan 200 [AC1-vlan200] quit [AC1] interface vlan-interface 200 [AC1-Vlan-interface200] ip address 126.200.1.1 24 [AC1-Vlan-interface200] quit # 配置AC 1與Switch相連的GigabitEthernet1/0/1接口鏈路類型為Trunk，PVID為100，允許VLAN 100和VLAN 200的報(bào)文通過。

[AC1] interface gigabitethernet 1/0/1 [AC1-GigabitEthernet1/0/1] port link-type trunk [AC1-GigabitEthernet1/0/1] port trunk permit vlan 100 200 [AC1-GigabitEthernet1/0/1] port trunk pvid vlan 100

[AC1-GigabitEthernet1/0/1] quit # 創(chuàng)建WLAN-ESS 1接口

[AC1] interface wlan-ess 1 # 配置WLAN-ESS 1接口鏈路類型為Hybrid。

[AC1-WLAN-ESS1] port link-type hybrid # 配置當(dāng)前Hybrid端口的PVID為VLAN 200，允許VLAN 200不帶tag通過。

[AC1-WLAN-ESS1] port hybrid vlan 200 untagged [AC1-WLAN-ESS1] port hybrid pvid vlan 200 # 在Hybrid端口上使能MAC VLAN功能。

[AC1-WLAN-ESS1] mac-vlan enable [AC1-WLAN-ESS1] quit(2)配置VRRP功能

# 創(chuàng)建VRRP備份組1，并配置備份組1的虛擬IP地址為126.100.1.253。

[AC1] interface vlan-interface 100 [AC1-Vlan-interface100] vrrp vrid 1 virtual-ip 126.100.1.253 # 設(shè)置AC 1在備份組1中的優(yōu)先級(jí)為110。

[AC1-Vlan-interface100] vrrp vrid 1 priority 110 # 設(shè)置AC 1工作在搶占模式，搶占延遲時(shí)間為6秒。

[AC1-Vlan-interface100] vrrp vrid 1 preempt-mode timer delay 6 [AC1-Vlan-interface100] quit(3)配置IACTP隧道

# 創(chuàng)建IACTP隧道1，并進(jìn)入其視圖。

[AC1] wlan mobility-group 1 # 配置IACTP隧道1的源IP地址為AC 1的IP地址126.100.1.1。

[AC1-wlan-mg-1] source ip 126.100.1.1 # 配置IACTP隧道1的成員IP地址為AC 2的IP地址126.100.1.2。

[AC1-wlan-mg-1] member ip 126.100.1.2 # 開啟IACTP隧道。

[AC1-wlan-mg-1] mobility-group enable [AC1-wlan-mg-1] quit # 開啟客戶端信息備份功能。

[AC1] wlan backup-client enable # 開啟AP信息備份功能。

[AC1] wlan backup-ap enable(4)配置無線服務(wù)

# 創(chuàng)建clear類型的服務(wù)模板1。

[AC1] wlan service-template 1 clear # 設(shè)置當(dāng)前服務(wù)模板的SSID為service。

[AC1-wlan-st-1] ssid service # 將WLAN-ESS 1接口綁定到服務(wù)模板1。

[AC1-wlan-st-1] bind wlan-ess 1

# 啟用無線服務(wù)。

[AC1-wlan-st-1] service-template enable [AC1-wlan-st-1] quit(5)配置AP # 創(chuàng)建AP的管理模板，名稱為testap，型號(hào)名稱選擇WA2620E-AGN。

[AC1] wlan ap testap model WA2620E-AGN # 設(shè)置AP的序列號(hào)為21023529G007C000020。

[AC1-wlan-ap-testap] serial-id 21023529G007C000020 # 進(jìn)入radio 2射頻視圖。

[AC1-wlan-ap-testap] radio 2 # 將在AC上配置clear類型的服務(wù)模板1與射頻2進(jìn)行關(guān)聯(lián)。

[AC1-wlan-ap-testap-radio-2] service-template 1 # 使能AP的radio 2。

[AC1-wlan-ap-testap-radio-2] radio enable [AC1-wlan-ap-testap-radio-2] return 3.4.2 AC 2的配置

(1)配置AC 2的接口

# 創(chuàng)建VLAN 100及其對(duì)應(yīng)的VLAN接口，并為該接口配置IP地址。AC 2將使用該接口的IP地址與AP建立LWAPP隧道，同時(shí)用于與AC 1建立VRRP備份組和IACTP隧道。

system-view [AC2] vlan 100 [AC2-vlan100] quit [AC2] interface vlan-interface 100 [AC2-Vlan-interface100] ip address 126.100.1.2 24 [AC2-Vlan-interface100] quit # 創(chuàng)建VLAN 200作為WLAN-ESS接口的缺省VLAN，同時(shí)作為Client接入的業(yè)務(wù)VLAN，并為該接口配置IP地址。

[AC2] vlan 200 [AC2-vlan200] quit [AC2] interface vlan-interface 200 [AC2-Vlan-interface200] ip address 126.200.1.2 24 [AC2-Vlan-interface200] quit # 配置AC 2與Switch相連的GigabitEthernet1/0/1接口鏈路類型為Trunk，PVID為100，允許VLAN 100和VLAN 200的報(bào)文通過。

[AC2] interface gigabitethernet 1/0/1 [AC2-GigabitEthernet1/0/1] port link-type trunk [AC2-GigabitEthernet1/0/1] port trunk permit vlan 100 200 [AC2-GigabitEthernet1/0/1] port trunk pvid vlan 100 [AC2-GigabitEthernet1/0/1] quit # 創(chuàng)建WLAN-ESS 1接口

[AC2] interface wlan-ess 1

# 配置WLAN-ESS 1接口鏈路類型為Hybrid。

[AC2-WLAN-ESS1] port link-type hybrid # 配置當(dāng)前Hybrid端口的PVID為VLAN 200，允許VLAN 200不帶tag通過。

[AC2-WLAN-ESS1] port hybrid vlan 200 untagged [AC2-WLAN-ESS1] port hybrid pvid vlan 200 # 在Hybrid端口上使能MAC VLAN功能。

[AC2-WLAN-ESS1] mac-vlan enable [AC2-WLAN-ESS1] quit(2)配置VRRP # 創(chuàng)建VRRP備份組1，并配置備份組1的虛擬IP地址為126.100.1.253，AC 2在備份組1中的優(yōu)先級(jí)取缺省值100。

[AC2] interface vlan-interface 100 [AC2-Vlan-interface100] vrrp vrid 1 virtual-ip 126.100.1.253 # 設(shè)置AC 2工作在搶占方式，搶占延遲時(shí)間為6秒。

[AC2-Vlan-interface100] vrrp vrid 1 preempt-mode timer delay 6 [AC2-Vlan-interface100] quit(3)配置IACTP隧道

# 創(chuàng)建IACTP隧道1，并進(jìn)入其視圖。

[AC2] wlan mobility-group 1 # 配置IACTP隧道1的源IP地址為AC 2的IP地址126.100.1.2。

[AC2-wlan-mg-1] source ip 126.100.1.2 # 配置配置IACTP隧道1的成員IP地址為AC 1的IP地址126.100.1.1。

[AC2-wlan-mg-1] member ip 126.100.1.1 # 開啟IACTP隧道。

[AC2-wlan-mg-1] mobility-group enable [AC2-wlan-mg-1] quit # 開啟客戶端信息備份功能。

[AC2] wlan backup-client enable # 開啟AP信息備份功能。

[AC2] wlan backup-ap enable(4)配置無線服務(wù)

# 創(chuàng)建clear類型的服務(wù)模板1。

[AC2] wlan service-template 1 clear # 設(shè)置當(dāng)前服務(wù)模板的SSID為service。

[AC2-wlan-st-1] ssid service # 將WLAN-ESS 1接口綁定到服務(wù)模板1。

[AC2-wlan-st-1] bind wlan-ess 1 # 啟用無線服務(wù)。

[AC2-wlan-st-1] service-template enable [AC2-wlan-st-1] quit(5)配置AP

# 創(chuàng)建AP的管理模板，名稱為testap，型號(hào)名稱選擇WA2620E-AGN。

[AC2] wlan ap testap model WA2620E-AGN # 設(shè)置AP的序列號(hào)為21023529G007C000020。

[AC2-wlan-ap-testap] serial-id 21023529G007C000020 # 進(jìn)入radio 2射頻視圖。

[AC2-wlan-ap-testap] radio 2 # 將在AC上配置clear類型的服務(wù)模板1與射頻2進(jìn)行關(guān)聯(lián)。

[AC2-wlan-ap-testap-radio-2] service-template 1 # 使能AP的radio 2。

[AC2-wlan-ap-testap-radio-2] radio enable [AC2-wlan-ap-testap-radio-2] return 3.4.3 Switch的配置

# 創(chuàng)建VLAN 100和VLAN 200，其中VLAN 100用于轉(zhuǎn)發(fā)AC和AP間LWAPP隧道內(nèi)的流量，VLAN 200為無線客戶端接入的VLAN。

system-view [Switch] vlan 100 [Switch-vlan100] quit [Switch] vlan 200 [Switch-vlan200] quit # 配置Switch與AC 1相連的GigabitEthernet1/0/1接口屬性Trunk，當(dāng)前Trunk口的PVID為100，允許VLAN 100通過。

[Switch] interface gigabitethernet 1/0/1 [Switch-GigabitEthernet1/0/1] port link-type trunk [Switch-GigabitEthernet1/0/1] port trunk permit vlan 100 [Switch-GigabitEthernet1/0/1] port trunk pvid vlan 100 [Switch-GigabitEthernet1/0/1] quit # 配置Switch與AC 2相連的GigabitEthernet1/0/2接口屬性Trunk，PVID為100，允許VLAN 100通過。

[Switch] interface gigabitethernet 1/0/2 [Switch-GigabitEthernet1/0/2] port link-type trunk [Switch-GigabitEthernet1/0/2] port trunk permit vlan 100 [Switch-GigabitEthernet1/0/2] port trunk pvid vlan 100 [Switch-GigabitEthernet1/0/2] quit # 配置Switch與DHCP server相連的GigabitEthernet1/0/3接口屬性為Access，并允許VLAN 100通過。

[Switch] interface gigabitethernet 1/0/3 [Switch-GigabitEthernet1/0/3] port link-type access [Switch-GigabitEthernet1/0/3] port access vlan 100 [Switch-GigabitEthernet1/0/3] quit # 配置Switch與AP相連的GigabitEthernet1/0/4接口屬性為Access，并允許VLAN 100通過，并使能PoE功能。

[Switch] interface gigabitethernet 1/0/4

[Switch-GigabitEthernet1/0/4] port link-type access [Switch-GigabitEthernet1/0/4] port access vlan 100 [Switch-GigabitEthernet1/0/4] poe enable [Switch-GigabitEthernet1/0/4] quit 3.5 驗(yàn)證配置

(1)當(dāng)MAC地址為001f-3b03-781f的Client通過SSID為service的無線服務(wù)上線時(shí)，在AC 1上通過display wlan ap all命令可以查看AP和Client的信息。

display wlan ap all Total Number of APs configured : 1 Total Number of configured APs connected : 1 Total Number of auto APs connected : 0 AP Profiles State : I = Idle, J = Join, JA = JoinAck, IL = ImageLoad C = Config, R = Run, KU = KeyUpdate, KC = KeyCfm M = Master, B = Backup------------------AP Name State Model Serial-ID------------------testap R/M WA2620E-AGN 21023529G007C000020----------------- display wlan client Total Number of Clients : 1 Client Information SSID: service------------------MAC Address User Name APID/RID IP Address VLAN------------------001f-3b03-781f-NA-1 /2 126.200.1.3 200------------------(2)此時(shí)在AC 2上通過display wlan ap all命令查看到AP和Client的信息，可以看見AP和Client信息已經(jīng)備份到AC 2。

display wlan ap all Total Number of APs configured : 1 Total Number of configured APs connected : 1 Total Number of auto APs connected : 0 AP Profiles State : I = Idle, J = Join, JA = JoinAck, IL = ImageLoad C = Config, R = Run, KU = KeyUpdate, KC = KeyCfm M = Master, B = Backup------------------AP Name State Model Serial-ID------------------testap R/B WA2620E-AGN 21023529G007C000020-----------------

display wlan client Total Number of Clients : 1 Client Information SSID: service------------------MAC Address User Name APID/RID IP Address VLAN------------------001f-3b03-781f-NA-1 /2 126.200.1.3 200------------------3.6 配置文件

?

# wlan backup-ap enable # wlan backup-client enable # vlan 100 # vlan 200 # wlan service-template 1 clear ssid service bind WLAN-ESS 1 service-template enable # interface Vlan-interface100 ip address 126.100.1.1 255.255.255.0 vrrp vrid 1 virtual-ip 126.100.1.253 vrrp vrid 1 priority 110 vrrp vrid 1 preempt-mode timer delay 6 # interface Vlan-interface200 ip address 126.200.1.1 255.255.255.0 # interface GigabitEthernet1/0/1 port link-type trunk port trunk permit vlan 100 200 port trunk pvid vlan 100 # interface WLAN-ESS1 port link-type hybrid port hybrid vlan 1 200 untagged port hybrid pvid vlan 200 mac-vlan enable # wlan ap testap model WA2620E-AGN id 1 AC 1：

serial-id 21023529G007C000020 radio 1 radio 2 service-template 1 radio enable # wlan mobility-group 1 member ip 126.100.1.2 source ip 126.100.1.1 mobility-group enable # ?

# AC 2：

wlan backup-ap enable # wlan backup-client enable # vlan 100 # vlan 200 # wlan service-template 1 clear ssid service bind WLAN-ESS 1 service-template enable # interface Vlan-interface100 ip address 126.100.1.2 255.255.255.0 vrrp vrid 1 virtual-ip 126.100.1.253 vrrp vrid 1 preempt-mode timer delay 6 # interface Vlan-interface200 ip address 126.200.1.2 255.255.255.0 # interface GigabitEthernet1/0/1 port link-type trunk port trunk permit vlan 100 200 port trunk pvid vlan 100 # interface WLAN-ESS1 port link-type hybrid port hybrid vlan 1 200 untagged port hybrid pvid vlan 200 mac-vlan enable # wlan ap testap model WA2620E-AGN id 1 serial-id 21023529G007C000020 radio 1

radio 2 service-template 1 radio enable # wlan mobility-group 1 member ip 126.100.1.1 source ip 126.100.1.2 mobility-group enable # ?

# Switch：

vlan 100 # vlan 200 # interface GigabitEthernet1/0/1 port link-type trunk port trunk permit vlan 100 port trunk pvid vlan 100 # interface GigabitEthernet1/0/2 port link-type trunk port trunk permit vlan 100 port trunk pvid vlan 100 # interface GigabitEthernet1/0/3 port link-type access port access vlan 100 # interface GigabitEthernet1/0/4 port link-type access port access vlan 100 poe enable # 4 相關(guān)資料

? ? ? ? 《H3C WX系列無線控制器產(chǎn)品配置指導(dǎo)》“WLAN配置指導(dǎo)”。《H3C WX系列無線控制器產(chǎn)品命令參考》“WLAN命令參考”。《H3C WX系列無線控制器產(chǎn)品配置指導(dǎo)》“可靠性配置指導(dǎo)”。《H3C WX系列無線控制器產(chǎn)品配置指導(dǎo)》“可靠性命令參考”。