WIFI6零漫游

您好，参考

2.6.9  Wi-Fi 6零漫游医疗场景典型配置举例

1. 组网需求

如图2-9所示，网络中的大部分无线客户端支持802.11k和802.11v协议，通过配置Wi-Fi 6零漫游功能，实现无线客户端在一个ESS（Extended Service Set，拓展服务集）区域中的无缝漫游。

2. 组网图

图2-9 Wi-Fi 6零漫游医疗场景配置组网图

3. 配置步骤

# 创建无线服务模板wifi6_zero。

<AC> system-view

[AC] wlan service-template wifi6_zero

# 配置无线服务的SSID为wifi6_zero。

[AC-wlan-st-wifi6_zero] ssid wifi6_zero

# 开启BSS切换管理功能。

[AC-wlan-st-wifi6_zero] bss transition-management enable

# 配置切换解除关联功能。

[AC-wlan-st-wifi6_zero] bss transition-management disassociation recommended timer 45

# 开启漫游优化流量保持高级功能。

[AC-wlan-st-wifi6_zero] sacp roam-optimize traffic-hold enable advanced

# 开启FT功能。

[AC-wlan-st-wifi6_zero] ft enable

# 使能无线服务。

[AC-wlan-st-wifi6_zero] service-template enable

[AC-wlan-st-wifi6_zero] quit

# 创建手工AP，名称为ap1，序列号为219801A28N819CE0002T。

[AC] wlan ap ap1 model WA6320

[AC-wlan-ap-ap1] serial-id 219801A28N819CE0002T

# 进入Radio 1视图。

[AC-wlan-ap-ap1] radio 1

# 开启射频资源测量功能。

[AC-wlan-ap-ap1-radio-1] resource-measure enable

# 开启获取BSS候选列表功能。

[AC-wlan-ap-ap1-radio-1] sacp roam-optimize bss-candidate-list enable

# 配置射频每2秒进行信号强度检测，在支持802.11v的无线客户端信号强度低于-30dBm时，引导其进行BSS切换，对不支持802.11v的客户端强制下线处理。

[AC-wlan-ap-ap1-radio-1] sacp anti-sticky enable rssi 30 interval 2 forced-logoff

# 将无线服务模板wifi6_zero绑定到ap1的Radio1上。

[AC-wlan-ap-ap1-radio-1] service-template wifi6_zero

[AC-wlan-ap-ap1-radio-1] radio enable

[AC-wlan-ap-ap1-radio-1] quit

[AC-wlan-ap-ap1] quit

# （可选）配置对无线客户端进行差异化反粘滞管控制。

·     创建ACL规则，将CCC9-5DE2-512D终端按照OUI匹配规则加入到弱信号ACL匹配规则中。

[AC] acl number 4500

[AC-acl-mac-4500] rule permit source-mac ccc9-5de2-512d ffff-ff00-0000

[AC-acl-mac-4500] quit

·     指定编号为4500的ACL匹配的无线客户端，在信号强度低于-25dBm时，由AP引导其进行BSS切换。

[AC] wlan ap ap1

[AC-wlan-ap-ap1] radio 1

[AC-wlan-ap-ap1-radio-1] sacp anti-sticky acl 4500 rssi 25

[AC-wlan-ap-ap1-radio-1] quit

[AC-wlan-ap-ap1] quit

4. 验证配置

·     # 在AC上通过display wlan service-template命令可以查看BSS切换管理功能处于开启状态。

[AC] display wlan service-template wifi6_zero verbose

 Service template name                            : wifi6_zero

 Description                                      : Not configured

 SSID                                             : wifi6_zero

 SSID-hide                                        : Disabled

 User-isolation                                   : Disabled

 Service template status                          : enabled

 Maximum clients per BSS                          : Not configured

 Frame format                                     : Dot3

 Seamless roam status                             : Disabled

 Seamless roam RSSI threshold                     : 50

 Seamless roam RSSI gap                           : 20

 VLAN ID                                          : 1

Service VLAN ID                                  : N/A

 Service VLAN TPID                                : dot1q

 AKM mode                                         : Not configured

 Security IE                                      : Not configured

 Cipher suite                                     : Not configured

 TKIP countermeasure time                         : 0 sec

 PTK lifetime                                     : 43200 sec

 PTK rekey                                        : Enabled

 GTK rekey                                        : Enabled

 GTK rekey method                                 : Time-based

 GTK rekey time                                   : 86400 sec

 GTK rekey client-offline                         : Disabled

 WPA3 status                                      : Disabled

 PPSK                                             : Disabled

 PPSK Fail Permit                                 : Enabled

 Enhance-open status                              : Disabled

 Enhanced-open transition-mode service-template   : N/A

 User authentication mode                         : Bypass

 Intrusion protection                             : Disabled

 Intrusion protection mode                        : Temporary-block

 Temporary block time                             : 180 sec

 Temporary service stop time                      : 20 sec

 Fail VLAN ID                                     : Not configured

 802.1X handshake                                 : Disabled

 802.1X handshake secure                          : Disabled

 802.1X domain                                    : Not configured

 MAC-auth domain                                  : Not configured

 Max 802.1X users per BSS                         : 512

 Max MAC-auth users per BSS                       : 512

 802.1X re-authenticate                           : Disabled

 Authorization fail mode                          : Online

 Accounting fail mode                             : Online

 Authorization                                    : Permitted

 Key derivation                                   : SHA1

 PMF status                                       : Disabled

 Hotspot policy number                            : Not configured

 Forwarding policy status                         : Disabled

 Forwarding policy name                           : Not configured

 Forwarder                                        : AC

 FT status                                        : Enabled

 FT method                                        : Over-the-air

 FT reassociation deadline                        : 20 sec

 QoS trust                                        : Port

 QoS priority                                     : 0

 QoS U-APSD mode                                  : 1

 BTM status                                       : Enabled

·     # 在AC上通过display wlan client rm-capabilities命令可以查看到新接入客户端的射频资源能力支持情况。

[AC] display wlan client rm-capabilities

Total number of clients: 1

 MAC address                       : ccc9-5de2-512d

 Neighbor report capability        : Disabled

 Beacon passive measurement        : Enabled

 Beacon active measurement         : Enabled

 Beacon table measurement          : Disabled

·     # 在AC上通过display wlan client verbose命令可以查看新接入客户端支持802.11v BSS切换管理功能。

[AC] display wlan client verbose

Total number of clients: 1

MAC address                        : ccc9-5de2-512d

IPv4 address                       : 10.1.1.114

IPv6 address                       : N/A

Username                           : N/A

AID                                : 1

AP ID                              : 2

AP name                            : ap1

Radio ID                           : 1

Channel                            : 64

SSID                               : wifi6_zero

BSSID                              : 0026-3e08-1150

VLAN ID                            : 1

VLAN ID2                           : N/A

Sleep count                        ：0

Wireless mode                      : 802.11ax

Channel bandwidth                  : 80MHz

SM power save                      : Disabled

Short GI for 20MHz                 : Supported

Short GI for 40MHz                 : Supported

Short GI for 80MHz                 : Supported

Short GI for 160/80+80MHz          : Not supported

STBC RX capability                 : Not supported

STBC TX capability                 : Not supported

LDPC RX capability                 : Not supported

SU beamformee capability           : Not supported

MU beamformee capability           : Not supported

Beamformee STS capability          : N/A

Block Ack                          : TID 0 In

Supported VHT-MCS set              : NSS1 0, 1, 2, 3, 4, 5, 6, 7, 8, 9

                                     NSS2 0, 1, 2, 3, 4, 5, 6, 7, 8, 9

Supported HT MCS set               : 0, 1, 2, 3, 4, 5, 6, 7,

                                     8, 9, 10, 11, 12, 13, 14,

                                     15

Supported rates                    : 6, 9, 12, 18, 24, 36,

                                     48, 54 Mbps

5G 40And80MHz Channel bandwidth    : Supported

5G 160MHz Channel bandwidth        : Not Supported

5G 8080MHz Channel bandwidth       : Not Supported

OFDMA random access RUs            : Not supported

Supported HE-MCS set               : NSS1 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11

                                     NSS2 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11

TWT scheduled                      : no

QoS mode                           : WMM

Listen interval                    : 20

RSSI                               : 40

Rx/Tx rate                         : 54/6 Mbps

Speed                              : 0.968/0.104 Mbps

Authentication method              : Open system

Security mode                      : PRE-RSNA

AKM mode                           : Not configured

Cipher suite                       : N/A

User authentication mode           : Bypass

WPA3 status                        : N/A

Authorization CAR                  : N/A

Authorization ACL ID               : N/A

Authorization user profile         : N/A

Roam status                        : N/A

Key derivation                     : SHA1

PMF status                         : N/A

Forwarding policy name             : Not configured

Online time                        : 0days 0hours 1minutes 53seconds

FT status                          : Inactive

BTM status                         : Active

·     # 在AC上通过display wlan ap name ap1 running-config命令可以查看该AP下Radio 1生效的相关配置。

[AC] display wlan ap all running-configuration verbose

(i) -- Inherited from AP group

(g) -- Inherited from AP global-configuration

#

wlan ap ap1 model WA6320 id 2

  ap group name default-group

  serial-id 219801A28N819CE0002T

  region code CN (g)

  echo interval 10 (i)

…略…

  radio 1

    radio type 802.11ax

    radio enable

    channel auto<52> (i)

    channel unlock (i)

    fragment-threshold 2346 (i)

    max-power 20 (i)

    power unlock (i)

    distance 1 kilometer (i)

    ANI Enabled (i)

…略…

    sacp anti-sticky enable rssi 35 interval 2 forced-logoff 1

    sacp anti-sticky acl 4500 rssi 30

  radio 2

     radio type 802.11n(2.4GHz) (i)

    radio disable (i)

    channel auto<11> (i)

    channel unlock (i)

    fragment-threshold 2346 (i)

    max-power 20 (i)

    power unlock (i)

    distance 1 kilometer (i)

    ANI Enabled (i)

…略…

    sacp anti-sticky enable rssi 20 interval 3 forced-logoff 0 (i)

    sacp anti-sticky acl disable (i)