H3c-technologies H3C MSR 50 Bedienungsanleitung Seite 1

Table of Contents 1 WLAN Service Configuration ·······································································································

1-9 Generally, an AP can provide more than one ESS at the same time. The configuration of ESS is distributed mainly from AC to AP, and the AP can br

1-10 WLAN Topologies for Fat APs WLAN topologies for fat APs consist of: z Single BSS z Multi-ESS z Single ESS Multi-BSS Single BSS The coverage

1-11 k Figure 1-13 Multi-ESS networ Generally a fat AP can provide more than one logical ESS at the same time. The fat AP can broadcast the current

1-12 z IEEE Std 802.11b z IEEE Std 802.11g z IEEE Std 802.11i z IEEE Std 802.11-2004 Configuring WLAN Service Configuration Task List Task Desc

1-13 To do… Use the command… Remarks Configure the client idle timeout interval for the fat AP wlan client idle-timeout interval Optional By defau

1-14 To do… Use the command… Remarks Specify the uplink interface wlan uplink-interface interface-type interface-number Optional By default, no in

1-15 crypto type. If a clear type service template exists, you cannot change it to crypto. To do so, you must delete the clear type service template

1-16 Configuring an AP (only supported on ACs) Access Points are used to setup connections between the AC and stations. An AP uses radio signals to

1-17 Configuring Auto AP The auto AP feature allows an AP to automatically connect to an AC. When you deploy a wireless network with many APs, the a

1-18 You must ensure that the two ACs have the same AP configurations. Otherwise, a switchover between master and slave ACs will fail. Configurin

1-1 z Support for some features varies by router model. z Refer to the command manual of this module for command and parameter support, default

1-19 To do… Use the command… Remarks Enter system view system-view — Enter radio interface view interface wlan-radio interface-number — Specify a

1-20 To do… Use the command… Remarks Specify the request to send (RTS) threshold length rts-threshold sizeOptional By default, the RTS threshold i

1-21 To do… Use the command… Remarks Specify the bandwidth mode for the radio channel band-width { 20 | 40 } Optional By default, the radio operat

1-22 To do… Use the command… Remarks Display WLAN service template information display wlan service-template [ service-template-number ] Available

1-23 l Figure 1-16 Client access controAC AP 1RADIUS serverInternetAP 2Client 1Client 2Client 3 Configuring an AP Group Follow these steps to confi

1-24 To do… Use the command… Remarks Return to system view quit — Enable the user profile user-profile profile-name enableRequired Not enabled by

1-25 To do… Use the command… Remarks Enable the user profile user-profile profile-name enable Required Not enabled by default. z For more infor

1-26 [AC] wlan service-template 1 clear [AC-wlan-st-1] ssid abc [AC-wlan-st-1] bind WLAN-ESS 1 [AC-wlan-st-1] authentication-method open-system [AC-

1-27 [AC] wlan radio enable all WLAN Auto-AP Configuration Example (On an AC) Network requirements As shown in the following figure, an AC is connec

1-28 n [AC-wlan-rp-radpolicy1] quit # Configure the AP auto configuration feature. [AC] wlan auto-ap enable # Configure a common AP for model WA2100

1-2 s Access controller (AC) An AC can control and manage all APs in a WLAN. The AC communicates with an authentication server for WLAN client authe

1-29 [AC1] wlan service-template 1 clear [AC1-wlan-st-1] ssid abc [AC1-wlan-st-1] bind WLAN-ESS 1 [AC1-wlan-st-1] authentication-method open-system

1-30 n Figure 1-20 802.11n configuratio Configuration procedure # Configure a WLAN-ESS interface. <AC> system-view [AC] interface wlan-ess 1

1-31 Configuration procedure # Define the WLAN BSS interface. <Sysname> system-view [Sysname] interface wlan-bss 1 [Sysname-WLAN-BSS1] quit #

1-32 Figure 1-22 Client access control configuration diagramAC10.100.100.200/24L2 switchAP 1AP 2RADIUS server10.100.100.100/24Client Client Config

1-33 [AC] domain default enable universal # Configure port security on interface WLAN-ESS 1. [AC] interface wlan-ess 1 [AC-WLAN-ESS1] port-security

1-34 e Figure 1-23 Specify a user profile nam 3) Verify the configuration The AP group applied in the user profile contains only AP 1, and thus a

1-35 <AC1> system-view [AC1] port-security enable [AC1] dot1x authentication-method eap [AC1] interface wlan-ess 1 [AC1-WLAN-ESS1] port-securi

1-36 [AC2] interface wlan-ess 1 [AC2-WLAN-ESS1] port-security port-mode userlogin-secure-ext [AC2-WLAN-ESS1] port-security tx-key-type 11key [AC2-WL

1-3 l) Active scanning is used by clients to scan surrounding wireless networks and locate a compatible one. Active scanning falls into two modes ac

1-4 g Figure 1-4 Passive scannin Authentication To prevent illegal clients from accessing a network, authentication is needed between clients and A

1-5 When a client leaves the coverage of an AP, and then needs to re-join the AP, it must re-associate with the AP. 802.11 Overview The WLAN-MAC pri

1-6 y Figure 1-6 LWAPP dual link topologAC 2AP 4 AP 1AP 2AP 3AC 1 In the above figure, AC1 is working in master mode and providing services to AP1,

1-7 e Dual work mode Figure 1-8 Dual work mod Dual work mode indicates that an AC can provide both master and slave connections. An AC will act as

1-8 k Figure 1-9 Single BSS networ The clients can communicate with each other and reach a host in the Internet. Communications between clients wit