无线跨VLAN漫游

3.18  漫游组典型配置举例

3.18.1  漫游组典型配置举例

1. 组网需求

如图3-3所示，在一个无线网络中，有两台AC，现要求客户端可以在AC内漫游，也可以跨AC漫游。

2. 组网图

图3-3 漫游组配置组网图

3. 配置步骤

(1)     配置AC 1

# 创建无线服务模板service，配置SSID为office，并使能服务模板。

<AC1> system-view

[AC1] wlan service-template service

[AC1-wlan-st-test] ssid office

[AC1-wlan-st-test] service-template enable

[AC1-wlan-st-test] quit

# 创建手工AP，名称为ap1，选择AP型号并配置序列号。

[AC1] wlan ap ap1 model WA6320

[AC1-wlan-ap-ap1] serial-id 219801A28N819CE0002T

# 将服务模板绑定到ap1的Radio 1接口

[AC1-wlan-ap-ap1] radio 1

[AC1-wlan-ap-ap1-radio-1] radio enable

[AC1-wlan-ap-ap1-radio-1] service-template service

[AC1-wlan-ap-ap1-radio-1] quit

[AC1-wlan-ap-ap1] quit

# 创建手工AP，名称为ap2，选择AP型号并配置序列号。

[AC1] wlan ap ap2 model WA6320

[AC1-wlan-ap-ap2] serial-id 219801A28N819CE0003T

# 将服务模板绑定到ap2的Radio 1接口。

[AC1-wlan-ap-ap2] radio 1

[AC1-wlan-ap-ap2-radio-1] radio enable

[AC1-wlan-ap-ap2-radio-1] service-template service

[AC1-wlan-ap-ap2-radio-1] quit

[AC1-wlan-ap-ap2] quit

# 创建漫游组office。

[AC1] wlan mobility group office

# 配置漫游组IADTP隧道IP地址类型为IPv4。

[AC1-wlan-mg-office] tunnel-type ipv4

# 配置AC加入漫游组时建立IADTP隧道的源IP地址为10.1.4.22。

[AC1-wlan-mg-office] source ip 10.1.4.22

# 添加漫游组内的AC成员，该AC成员用于建立IADTP隧道的源IP地址为10.1.4.23。

[AC1-wlan-mg-office] member ip 10.1.4.23

# 开启漫游组功能。

[AC1-wlan-mg-office] group enable

[AC1-wlan-mg-office] quit

(2)     配置AC 2

# 创建无线服务模板service，配置SSID为office，并使能服务模版本。

<AC2> system-view

[AC2] wlan service-template service

[AC2-wlan-st-service] ssid office

[AC2-wlan-st-service] service-template enable

[AC2-wlan-st-service] quit

# 创建手工AP，名称为ap3，选择AP型号并配置序列号。

[AC2] wlan ap ap3 model WA6320

[AC2-wlan-ap-ap3] serial-id 219801A28N819CE0004T

# 将服务模板绑定到ap3的Radio 1接口。

[AC2-wlan-ap-ap3] radio 1

[AC2-wlan-ap-ap3-radio-1] radio enable

[AC2-wlan-ap-ap3-radio-1] service-template service

[AC2-wlan-ap-ap3-radio-1] quit

[AC2-wlan-ap-ap3] quit

# 创建手工AP，名称为ap4，选择AP型号并配置序列号。

[AC2] wlan ap ap4 model WA6320

[AC2-wlan-ap-ap4] serial-id 219801A28N819CE0005T

# 将服务模板绑定到ap4的Radio 1接口。

[AC2-wlan-ap-ap4] radio 1

[AC2-wlan-ap-ap4-radio-1] radio enable

[AC2-wlan-ap-ap4-radio-1] service-template service

[AC2-wlan-ap-ap4-radio-1] quit

[AC2-wlan-ap-ap4] quit

# 创建漫游组office。

[AC2] wlan mobility group office

# 配置漫游组IADTP隧道IP地址类型为IPv4。

[AC2-wlan-mg-office] tunnel-type ipv4

# 配置AC加入漫游组时建立IADTP隧道的源IP地址为10.1.4.23。

[AC2-wlan-mg-office] source ip 10.1.4.23

# 添加漫游组内的AC成员，该AC成员用于建立IADTP隧道的源IP地址为10.1.4.22。

[AC2-wlan-mg-office] member ip 10.1.4.22

# 开启漫游组功能。

[AC2-wlan-mg-office] group enable

[AC2-wlan-mg-office] quit

4. 验证配置

# 在AC 1查看漫游组信息。

[AC1] display wlan mobility group

Mobility group name: office

 Tunnel type: IPv4

 Source IPv4: 10.1.4.22

 Source IPv6: Not configured

 Authentication method: Not configured

 Mobility group status: Enabled

 Member entries: 1

 IP address                              State          Online time

 10.1.4.23                               Up             00hr 00min 12sec

# 在AC 2查看漫游组信息。

[AC2] display wlan mobility group

Mobility group name: office

 Tunnel type: IPv4

 Source IPv4: 10.1.4.23

 Source IPv6: Not configured

 Authentication method: Not configured

 Mobility group status: Enabled

 Member entries: 1

 IP address                              State          Online time

 10.1.4.22                               Up             00hr 00min 05sec

# 在AC 1上通过display wlan mobility roam-track mac-address可以查看到客户端在AP 2初始上线，随后从AP 2漫游到AP 3上。

[AC1] display wlan mobility roam-track mac-address 9cd3-6d9e-6778

Total entries  : 2

Current entries: 2

BSSID           Created at           Online time       AC IP address  RID  AP name

000f-e203-8889  2016-06-14 11:12:28  00hr 06min 56sec  10.1.4.23      1    ap3

000f-e203-7777  2016-06-14 11:11:28  00hr 03min 30sec  127.0.0.1      1    ap2

# 在AC 1上通过display wlan mobility roam-out可以查看到客户端漫出到AP 3上漫出信息。

[AC1] display wlan mobility roam-out

Total entries: 1

MAC address     BSSID           VLAN ID  Online time       FA IP address

9cd3-6d9e-6778  000f-e203-8889  1        00hr 01min 59sec  10.1.4.23

# 在AC 2上通过display wlan client可以查看到客户端关联的AP为AP 3，漫游状态为AC间漫游。

[AC2] display wlan client verbose

Total number of clients: 1

MAC address                        : 9cd3-6d9e-6778

IPv4 address                       : 10.1.1.114

IPv6 address                       : N/A

Username                           : N/A

AID                                : 1

AP ID                              : 3

AP name                            : ap3

Radio ID                           : 1

SSID                               : 1

BSSID                              : 000f-e203-8889

VLAN ID                            : 1

Sleep count                        : 242

Wireless mode                      : 802.11ac

Channel bandwidth                  : 80MHz

SM power save                      : Enabled

SM power save mode                 : Dynamic

Short GI for 20MHz                 : Supported

Short GI for 40MHz                 : Supported

Short GI for 80MHz                 : Supported

Short GI for 160/80+80MHz          : Not supported

STBC RX capability                 : Not supported

STBC TX capability                 : Not supported

LDPC RX capability                 : Not supported

SU beamformee capability           : Not supported

MU beamformee capability           : Not supported

Beamformee STS capability          : N/A

Block Ack                          : TID 0 In

Supported VHT-MCS set              : NSS1 0, 1, 2, 3, 4, 5, 6, 7, 8

                                     NSS2 0, 1, 2, 3, 4, 5, 6, 7, 8

Supported HT MCS set               : 0, 1, 2, 3, 4, 5, 6, 7,

                                     8, 9, 10, 11, 12, 13, 14,

                                     15, 16, 17, 18, 19, 20,

                                     21, 22, 23

Supported rates                    : 6, 9, 12, 18, 24, 36,

                                     48, 54 Mbps

QoS mode                           : WMM

Listen interval                    : 10

RSSI                               : 62

Rx/Tx rate                         : 130/11

Authentication method              : Open system

Security mode                      : PRE-RSNA

AKM mode                           : Not configured

Cipher suite                       : N/A

User authentication mode           : Bypass

Authorization ACL ID               : 3001(Not effective)

Authorization user profile         : N/A

Roam status                        : Inter-AC roam

Key derivation                     : SHA1

PMF status                         : Enabled

Forward policy name                : Not configured

Online time                        : 0days 0hours 5minutes 13seconds

FT status                          : Inactive

# 在AC 2上通过display wlan mobility roam-in命令可以查看到客户端从AP 3漫入的漫入信息。

[AC2] display wlan mobility roam-in

Total entries: 1

MAC address     BSSID           VLAN ID  HA IP address

9cd3-6d9e-6778  000f-e203-8889  1        10.1.4.22