WLAN Basic Operation and Maintenance Training

e n
Resource support on website m/

You can get free E-Learning courses, training materials, product materials, software, cases and so on.c o
i .

w e
1、40% E-Learning Courses： http://support.huawei.com/learning/NavigationAction!createNavi#navi[id]=_16

u a
Career Certification E-Learning courses: After received any Huawei Career Certification, you will have the
privilege to learn all Huawei Career Certification E-Learning courses.
. h

n g
Partner E-Learning Courses: Any Huawei Partner Engineer have the learning privilege

n i
Free E-Learning Courses: 40% of the total , Any website users have the learning privilege
a r
PS: to access the resources above you need to logon Huawei website .
l e
2、Training Materials： http://support.huawei.com/learning/NavigationAction!createNavi#navi[id]=f2f
/ training material are accessible without

:/
Huawei product training material and Huawei career certification
logon.
t p

h t
3、 Huawei Online Open Class(LVC)： http://support.huawei.com/ecommunity/bbs/10154479.html

s :are conducted by Huawei professional instructors

The Huawei career certification training and product training covering all ICT technical domains like R&S,
e
UC&C, Security, Storage and so on, which
c

u r
4、Product Materials Download: http://support.huawei.com/enterprise/#tabname=productsupport

s o
5、Software Download: http://support.huawei.com/enterprise/#tabname=softwaredownload
R e
For more content, please visit:
n g

n i
http://learning.huawei.com/en
a r
http://support.huawei.com/enterprise/
Le

 http://support.huawei.com/ecommunity/
r e TECHNOLOGIES CO., LTD.

o
HUAWEI Huawei Confidential 1
e n
m/
c o
i .
we
u a
h
Huawei WLAN Productsin g .
n
Introduction l ea r
/ /
t p:
ht
s :
ce www.huawei.com
u r
s o
Re
n g
n i
a r
L e
e
Copyright ?2012 Huawei Technologies Co., Ltd. All rights reserved.
r
o
e n
m/
Objectives c o
i .
e w
 Upon completion of this course, you will be h
a
u to:
able
g .
in
 Describ Huawei WLAN equipment solution
r n
ea
 Describe Huawei AC basic performance / l
: /
t p
 List Huawei wireless AP ht
s :
c e
u r
s o
Re
n g
n i
a r
Le
r e ©2012 Huawei Technologies Co., Ltd. All rights reserved.
o
Copyright Page 2
e n
m/
Contents c o
i .
ew
 Huawei WLAN equipment solution introductionhu
a
g .
in
 Huawei AC introduction
r n
ea
 Huawei wireless management software
/ l introduction
: /
 Huawei wireless AP introduction t p
ht
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyright Page 3
e n
/ m
Huawei WLAN Productions Overview c o
i .
e
wAC6605
WS6603 u a
WLAN ACU
. h
AC
n g
n i NEW
r
a AP6010SN
e
l AP6010DN
/ / AP6310SN
WLAN WA601
WA603SN
WA603D
p : WA615DN WA635SN
AP N
t t NEW
h
s :
WA631
WA633SN c e AP6510DN
u r WA653SN WA655DN AP6510DN
Esight
s o
R e
WLAN
n g
NMS
n i
a r
Le
o
Copyright Page 4
e n
/ m
Huawei WLAN Access Point Overview c o
i .
w e
Indoor distribute AP u a
. h
n g
n i
Indoor
a r Outdoor
AP l e AP
/ /
AP6010SN
:
p WA635SN
AP6010DN AP6310SN
t
ht WA655DN
s :
WA631
c e ACU
WA633SN
u r AP6610DN
WA615DN
o
s WS6603 AC6605
WA653SN
R e
WA603SN g
WA601
WA603D
i n AP6510DN
N
r n
e a
L
o
Copyright Page 5
e n
m/
Contents c o
i .
ew
a
g .
in
r n
ea
/ l introduction
: /
ht
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyright Page 6
e n
m/
WS6603 c o
i .
we
u a
 Height of the device: 1.5U
. h
n g
 Backplane capacity: 128 Gbit/s
n i
a r WS6603
 Number of managed APs: 5 to 1024
/ le
/
 Number of ESSIDs: 1K
p: t
 Number of DHCP IP address pools: h t 4K
s :
 Number of access users:eEntire device: 32K
r c
o u
e s Each tunnel: 8 K
R
 Suitable for small
n g and medium-sized enterprises
n i
a r
Le
o
Copyright Page 7
e n
m/
AC6005 c o
i .
we
u a
 Height of the device: 1U
. h
n g
 Number of managed APs: 4～512
n i
a r
 Backplane capacity: 128 Gbit/s
/ le
/ AC6605
p: t
 Number of DHCP IP address pools: h t 128 IP address pools, each of
s :
which contains a maximum
c e of 8K IP addresses
u r
 Number of access users:
s o Entire device: 4K
R e
g
 Suitable for small and medium-sized enterprises
n
n i
a r
Le
o
Copyright Page 8
e n
m/
AC6005 Position c o
i .
we
u a
. h
ng
Service NMS
n i
management Layer
a r
/ le
Aggregation Switch
/
t p:
AC6605 ht
Service
s :
access Layer
ce
u r
s o
Re
L2 switch
User Layer
n g
n i
a r
Le
AP1 AP2 AP3
r e
o
Copyright ©2012 Huawei Technologies Co., Ltd. All rights reserved. Page 9
e n
m/
AC6005 Position(Cont.) c o
i .
we
u a
. h
ng
Service NMS
n i
management Layer
a r
/ le
/
Aggregation Switch
t p: AC6605
Service
access Layer ht
s :
ce
u r
L2 switch
s o
User Layer
Re
n g
i AP1
rn
AP2 AP3
e a
L
r e
o
e n
m/
SPU c o
i .
we
u a
 Height of the device: 33.10mm
. h
n g
n i
Number of managed APs: 128～1024 a r
le

 Number of access users: Entire device: 32K / /

p: t

t
Number of DHCP IP address pools: 256 address pools at most, each of
h addresses
which can assign a maximum of
s : 64K
c e

u r
Suitable for large-sized enterprises
Suitable for Huawei s o


R e S93/S97/S77 Series Switches
n g
n i
a r
Le
o
Copyright Page 11
e n
m/
Typical Networking of the SPU i. c o
w e
u a
. h
n g
rni
a
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
AR G3 WLAN c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Contents c o
i .
ew
a
g .
in
r n
ea
/ l introduction
: /
ht
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyright Page 14
e n
m/
WLAN eSight c o
i .
we
u a
. h
g
eSight
in
r n
a
Wizard-based
Originally enabling services on 100 APs takes service
/le
/
configuration
p:
100 minutes. With this configuration wizard, it
takes only 10 minutes.
t t
h Location view
Service view
s : Colors indicate
c e channels.
u r AC
Displays the CAPWAP
The color depth
s o
tunnel between an
indicates the signal
Re information
strength.
and an AP.
Rogue APs are
View user
n
on gan AP identified.
n i rogue APs and shorten the fault diagnosis time. Collision domains
r
Quickly identify
a
are displayed.
Le
o
Copyright Page 15
e n
m/
Contents c o
i .
ew
a
g .
in
r n
ea
/ l introduction
: /
ht
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyright Page 16
e n
m /
Legacy AP c o
i .
e
w
a
u AP
Indoor AP Distributed Indoor AP h
Outdoor
.
n g
n i
a r
le
WA601/WA603SN WA631/WA633SN WA653SN
/
802.11b/g/n 802.11b/g/n 802.11b/g/n
2.4GHz 2.4GHz
/ 2.4GHz
p:
Support PoE/POE+ Support PoE/PoE+ Support PoE+
300 Mbps
t
150 Mbps
t
300 Mbps
h
s :
WA603DN
ce
802.11a/b/g/n
u r
2.4GHz&5GHz
s o
Re
Support PoE+
2x2 MIMO
g
300*2 Mbps
i n
r n
a
Le
r e
o
e n
m /
New AP c o
i .
ew
a
u AP
Indoor AP Distributed Indoor AP h
Outdoor
.
n g
n i
AP6010SN
a r AP6510DN
le
AP6310SN
802.11b/g/n 802.11 a/b/g/n
802.11b/g/n
2.4GHz
Support PoE/PoE+
/ /
Support PoE
Support PoE+
p:
2x2 MIMO
150 Mbps
300Mbps 300 Mbps
t t
h
AP6010DN
s : AP6610DN
802.11a/b/g/n
ce 802.11 a/b/g/n
2.4GHz ＆5.8GHz
u r Support PoE+
Support PoE/PoE+
2x2 MIMO
s o 2x2 MIMO
300Mbps
300Mbps x 2
Re SFP
AC Power Supply
n g
n i
a r
Le
r e
o
e n
m /
WLAN AP Name c o
i .
we
AP 6 0 1 0 D N - AGN u a
. h
g
n H
A B C D E F G
n i
a r
WiFi AP Series ：
l e Technology ：
AP: Enterprise AP
/ / A：802.11a
Products grade：
p : G：802.11b/g
3： SOHO t N：802.11n
5： Economy
ht Antenna ：
6： Standard
s : N： Common antenna
7： Enhanced
8～9： Reserved
ce E： Smart antenna
Products shape ： u r Band mode ：

o S： Single-band
0：Indoor
3： Distributed Indoor
R es D： Dual-band
ng
5：Outdoor Products evolution
6：Bridge
n i reserved
Products evolution
a r
L e
r e
o
e n
m/
AP6010SN(Indoor AP) c o
i .
we
IEEE standards: 802.11b/g/n u a

. h
n g
 Product Form: Fit AP
n i
a r
 Frequency Band: 2.4GHz
/le
/
 Power supply: 802.3af
tp:
 Transmit power: 100mW ht
s :
 Support WDS mode ce
r u
 Antenna type: Built-in o
s 2.4GHz omni-directional antenna ，
R e
Antenna gaing 4dBi
i n
r n
e a
L
o
Copyright Page 20
e n
m/
AP6010DN(Indoor AP) c o
i .
we
IEEE standards: 802.11a/b/g/n u a

. h
ng
n i
a r
 Frequency Band: 2.4GHz, 5GHz
/le
/
tp:
s :
 Support WDS mode ce
r u
 Antenna type: Built-in o
s 2.4GHz omni-directional antenna,
e
R Built-in 5GHz omni-directional antenna,
Antenna gaing 4dBi,
i n
Antenna ngain 5dBi
a r
Le
o
Copyright Page 21
e n
m/
AP6310SN(Indoor distribute AP)i. c o
w e
IEEE standards: 802.11b/g/n u a

. h
n g
ni
a r
 Frequency Band: 2.4GHz
/ le
/
t p:
s :
 Antenna type: External e
r c distribute Antenna
o u
s
Re
n g
n i
a r
Le
o
Copyright Page 22
e n
m/
AP6510DN(Outdoor AP) c o
i .
we
IEEE standards: 802.11a/b/g/n u a

. h
ng
n i
a r
 Frequency Band: 2.4GHz and 5GHz
le /
 Power supply: Standard 802.3at :
/
t p
 Transmit power: 2.4GHz-500mW,5GHz-125mW ht
s :
 Support WDS mode
c e
u r
s o
 Antenna type: Dual-polarization antenna or common outdoor
R e
antenna g
i n
r n
a
Le
o
Copyright Page 23
e n
m /
AP 6610DN(Outdoor AP) c o
i .
we
IEEE standards : 802.11a/b/g/n u a

. h
n g
 Product Form : Fit AP
n i
a r
 Frequency Band : 2.4Gz、5GHz
/ le
/
 Support WDS mode
p: t
 Power supply :Does not support
t
h 802.3at， Support the AC
s :
local supply
c e
u r
o
 Transmit power : 2.4GHz-500mW,5GHz-250mW
s
R e
 Antenna type:Dual-polarization antenna or common outdoor
n g
antenna ni
a r
 Support Le SFP interface
o
Copyright Page 24
e n
m/
Summary c o
i .
e w
 Huawei different types of AC and performancehintroduction u a
g .
in function
 Huawei wireless management software eSight
r n
introduction ea
/ l
: /
 Huawei different types of wireless
t p AP and the performance
introduction ht
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyright Page 25
e n
m/
Questions c o
i .
e
w
u a
 What is the difference between AC6605 and SPU?
. h
n g
n i
a r
 Please list the Huawei new AP model? l e
/ /
p :
t
ht
 What is the name of Huawei
s : wireless management
c e
software? u r
s o
Re
n g
n i
a r
Le
o
Copyright Page 26
e n
m/
c o
i .
we
u a
. h
ng
n i
a r
Thank you le
// :
tp
www.huawei.com
ht
s :
ce
ur
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
c o
i .
we
u a
AC6605 Hardware and g . h
in
Installation a r n
l e
Instruction :/ /
t p
ht
s :
ce www.huawei.com
u r
s o
Re
n g
n i
a r
L e
r e
Copyrig ht © 2011 Hua w ei Technologies Co., Lt d. All right s reserved.
o
e n
m/
Objectives c o
i .
we
u a
 h to:
Upon completion of this course, you will be able
.
n g
Describe Huawei AC hardware feature n i

a r
Master Huawei AC6605 installation/l
e
method
/

p :
t
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
Copyrig ht © 2011 Hua w ei Technologies Co., Lt d. All right s reserved. Pa ge2
e n
m/
Contents c o
i .
we
u a
1. AC hardware instruction
. h
n g
2. AC installation instruction n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
Physical Specifications of the om /
. c
AC6605 w e i
a
 hu view) .
Device Structure: Appearance of the AC6605 (front
.
n g
i
n5. ETH
24 GE BASE-T
Ethernet electrical
a r4. management interface
le 6.
Mini USB
interfaces Console interface
/ /
t p:
ht
s :
ce
u r
s o
Re
n g
1.MODE buttoni
3.4 GE Combo 7. Two 10GE SFP+ uplink
r n optical interfaces optical interfaces
e a
L
r eht © 2011 Hua w ei Technologies Co., Lt d. All right s reserved.
o
Copyrig Pa ge4
e n
Physical specifications of the om /
. c
AC6605 w e i
a
 hu view) .
Device Structure: Appearance of the AC6605 (rear
.
n g
n i
Ground point
a r
/ le power supply
redundancy
/
t p: be hot swappable
ht
s :
ce
u r
s o
ReFiller panel
Two slots for the
power supplies
n g
n i
a r
Le
r e
o
e n
m/
Power of the AC6605 c o
i .
we
u a
. h
n g
n i
a r
/ le
/
150W DC power supply
t p: 150W AC power supply
ht
:
150W AC-DC power supply can be inserted but not recommended
s
ce
u r
1. Handle o
2. Indicator
s 3. Switch 4. DC/AC power socket
Re
n g
n i
a r
Le
r e
o
e n
m/
Power of the AC6605(Cont.) c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
500W AC PoE Power Supply
s :
PoE Power and non-PoE
c e Power can not be inserted together
u r
1. Indicator 2. Handle s o 3. Fan 4. Switch 5. AC power socket
Re
n g
n i
a r
Le
o
Copyrig Pa ge7
e n
m/
AC6605 Indicator c o
i .
w e
u a
. h
n g
n i
a r
/ le
No. Indicator/Button / Silkscreen
1 t
Power supply indicator p: PWR1
ht
2 Power supply indicator PWR2
s :
3 e indicator
System status
c SYS
4 Stateurstatus indicator STAT
s o
5 e status indicator
RSpeed SPED
6
n g PoE status indicator PoE
n i
a r
Le
r e
o
e n
m /
AC6605 Indicator(Cont.) c o
i .
w e
u a
. h
n g
n i
a r
/ le
/
p:
No. Indicator/Button Silkscreen
7 Mode switch button
t t MODE
h24 GE electrical interfaces: numbered
8 Service interface
s :
indicator
ce in the up-bottom and left-right orders
ur and begins with 1. GE optical
s o interfaces: Each optical interface has a
R e corresponding indicator above it.

9 ETH interface indicator
n g
10 Minii USB interface
r n
indicator
The ETH interface has an arrow above
a
11Le Console interface
it
e indicator
or ht © 2011 Hua w ei Technologies Co., Lt d. All right s reserved.
Copyrig Pa ge9
e n
m /
AC6605 Service Interface Mode . c o
i e
a w
h u
g .
n
r ni
a
le /
/
: 8 has the following three
 Service ports for the serial number
t p
h t
modes,through the serial:number 7 on the MODE button to
e s
switch ： r c
o u
 STAT mode es
R
SPED mode n g

n i
PoEarmode
Le


o
Copyrig Pa ge10
e n
m /
AC6605 Fan system c o
i .
we
u a
. h
n g
n i Air
Air Flow
a r Flow
/ le Air
/
t p: Flow
ht
 AC6605 heat dissipations:system take left and right air
c e
duct(Cassette heatudissipation r mode in line with the
s o
industry's leading Re heat dissipation mode)the air flow from
the left in iand ng right out.
r n
e a
L
o
Copyrig Pa ge11
e n
m /
AC6605 Logical Architecture c o
i .
we
Two 10 GE Port
u a
. h
ng
A 10GE port in
n i
LSW
the internal XGE 0/0/1
a r AC
WLAN
XGE 0/0/27
/ le
/
…
t p:
24GE Port ht Console Ethernet
s :
The AC6605 consists of two logical unit: LSW+AC

c e
Two logical units shareumanagementr Ethernet port and Console port
o

s
 Through the following Re command to change the login interface:
Command n g console switch

n i line:
a r <Ctrl+Y>
Shortcuts:
Le


o
Copyrig Pa ge12
e n
m /
AC6605 System Configuration c o
i .
w e
u a
. h
Item Specifications n g
n i
Processor Dominant frequency: 1 GHz
a r
Maximum device l e capacity: 128 Gbit/s
Switching capacity
/ /AC: 20 Gbit/s
p :
t Switch: 41.66 Mpps
ht
Packet forwarding capacity
AC: 750 kpps
DDR memory s : 4GB
c e
Flash Memory
u r 2*128MB
s o
R e
n g
n i
a r
Le
o
Copyrig Pa ge13
e n
/ m
AC6605 Management Capabilities .c o
e i
Parameter Specifications
a w
Number of managed APs h
4 to 512 u
g .
Number of access users Entire
i n device: 4K
Number of MAC address entries r n 16K
ea
Number of VLANs
/ l 4K
Number of routing entries : / 4K
p
Number of multicast forwarding tt 4K
h
entries
s :
128 IP address pools, eachcof e which 128 IP address pools, each of
contains a maximumuof r 8K IP which contains a maximum of 8K
addresses s o IP addresses
e
Number of R local users 1000
n g
n i
Number of ACLs 8K
r
aNumber of ESSIDs 1K
e
L group management
User 128 user groups
e
or ht © 2011 Hua w ei Technologies Co., Lt d. All right s reserved.
Copyrig Pa ge14
e n
m/
SPU Hardware Introduction c o
i .
we
u a
. h
n g
n i
a r
/ le
/
CON Port ETH Port
t p:
RS232 10/100M
ht
s :
ce
u r
s o
1、ACT indicator Re 2、LINK indicator 3、RUN/ALM indicator
n g
n i
a r
Le
r e
o
e n
m/
Contents c o
i .
we
u a
1. AC hardware instruction
. h
n g
2. AC installation instruction n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Installation Steps c o
i .
we
Start
u a
. h
n g
Preparations
n i
a r
Install the Chassis
/ le
/
t p:
t
Connect equipment
h
s :
ce
Post-installation Check
u r
s o
R e Power on
n g
i
rn
The end
e a
L
r e
o
e n
m/
Installation Preparation-Tools .c o
e i
a w
h u
g .
i n
r n
ea
/ l
: /
t p
ht
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyrig Pa ge18
e n
Installation Preparation- m/
c o
Accessories i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
i .
we
Start
u a
. h
n g
Preparations
n i
a r
Install the Chassis
/ le
/
t p:
t
Connect equipment
h
s :
ce
u r
s o
R e Power on
n g
i
rn
The end
e a
L
r e
o
e n
m /
Installing the Device on a Desk c o
i .
e w
a
u on a
A. Adhibit the rubber pads. B. Install the device
. h
n g
worktable.
n i
Place a r
Attach rubber pads onto each of the four
l e the chassis on a flat, stable
recessed corner areas on the bottom of the
/
surface.
/
chassis.
p :
t
ht
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyrig Pa ge21
e n
Installing the Device in a Cabinet m /
c o
or Rack i .
w e
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
e and two rear mounting ears on the AC6605.
1. Install two front
R
n g
n i
a r
Le
r e
o
e n
c o
or Rack(Cont.) i .
w e
u a
. h
n g
n i
r
2. Install the floating nuts.
a
/ le
/
t p:
ht
s :
ce
u r
3. Install the guide rails on
s o
the rear supports. Re
n g
n i
a r
Le
r e
o
e n
c o
or Rack(Cont.) i .
w e
u a
. h
n g
n i
a r
/le
/
tp:
ht
s :
ce
ur
s o
Re
n g
4. Align the rear
n i mounting ears with guide rails and insert the chassis in the
a r or rack among the guide rails.
Le
the cabinet

o
Copyrig Pa ge24
e n
c o
or Rack(Cont.) i .
w e
u a
. h
n g
n i
a r
/le
/
tp:
ht
s :
ce
ur
s o
R e
g
5. Hold the chassis while secure the front mounting ears to the
n
supports nusingi a screwdriver. Then fix the rear mounting rears to
a r
Le rails.
the guide

o
Copyrig Pa ge25
e n
m/
i .
we
Start
u a
. h
n g
Preparations
n i
a r
Install the Chassis
/ le
/
t p:
t
Connect equipment
h
s :
ce
u r
s o
R e Power on
n g
i
rn
The end
e a
L
r e
o
e n
m/
Connecting the Device c o
i .
we
u a
. h
n g
i
Cable connection of the
n
a rAC6605 (front view) ）
/ le
/
t p:
ht
s :
ce
Cable connection of
u r
the AC6605 (rear view)
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
i .
we
Start
u a
. h
n g
Preparations
n i
a r
Install the Chassis
/ le
/
t p:
t
Connect equipment
h
s :
ce
u r
s o
R e Power on
n g
i
rn
The end
e a
L
r e
o
e n
m /
Post-Installation Checklist c o
i .
we
No. Check Item
u a
Check Method
1 The power cables and ground cables are copper wires and have no
. h View
splice.
n g
2 The power cables and ground cables are safely connected. The
n i View
a
spring washer of the ground cable terminal is placed on the flat r
washer.
/ le
3
/
All signal cables have passed the continuity check before Measure
connected.
t p:
4
cabinet. ht
No signal cable is placed on the heat dissipation holes of the View
5
s :
Sufficient slack is provided in the cables at turns. View
c e in an untangled and orderly
6 r the cabinet are bundled.
Cables in the cabinet are routed
u
View
so cable are clearly identified by labels and

fashion, and cables outside
7 The two ends of a esignal View
R are in the same direction.
the texts on the labels
8 n g device will not cause a loop on the network. For
The newly added View
n
example, ainewly added device cannot be connected to another
devicerusing two links.
e a
L
r e
o
e n
m/
i .
we
Start
u a
. h
n g
Preparations
n i
a r
Install the Chassis
/ le
/
t p:
t
Connect equipment
h
s :
ce
u r
s o
R e Power on
n g
i
rn
The end
e a
L
r e
o
e n
/ m
Checking the AC6605 After Power-On c o
i .
w e
u a
. h
n g
n i
a r
 After powering on the AC6605, view theePWR1, PWR2 and SYS
/ l
indicators. : /
t p
 CAUTION: Do not frequently htpower on and power off the
s :
device.
c e
u r
s o
No. Silkscreen
R e Status
1/2 g
PWR1/PWR2
n
Steady green: System power is supplied
i
n SYS
properly.
3 a r Blinks green once every 2s (0.5 Hz): The
Le system is running properly.
o
Copyrig Pa ge31
e n
m/
Summary c o
i .
we
u a
 Huawei AC hardware feature
. h
g
 in
Huawei AC6605 installation method andnstep
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m /
Questions c o
i .
e w
u a
 How many POE ports of AC6605,and about bandwidth？
. h
n g
n i
a r
 How many APs of Huawei AC6605 l
e
support？
/ /
p :
t
ht
 What kinds of power supply
s : module AC support？
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyrig Pa ge33
e n
m/
c o
i .
we
u a
. h
ng
n i
a r
Thank you le
// :
t
www.huawei.comp
ht
s :
ce
our
e s
R
n g
n i
a r
Le
r e
o
e n
m/
c o
i .
we
u a
. h
AP Hardware and in g
r n
Installation Introduction
l ea
/ /
t p:
ht
s :
ce www.huawei.com
u r
s o
Re
n g
n i
a r
L e
r e
Copyrig ht © 2011 Hua w ei Technologies Co., Lt d. All right s reserved.
o
e n
m/
Objectives c o
i .
e w
a
uto:
 Upon completion of this course, you will be able
. h
g
n Huawei APs
 Describe the models and usage scenarios n i
of
a r
e
l types APs
 Describe the basic installation of different
/ /
p :
List the note during installation t
ht

Complete different types:APs installation


e s
r c
o u
e s
R
n g
n i
a r
Le
o
Copyrig Pa ge2
e n
m/
Installation Tools Preparation c o
i .
we
u a
. h
Phillips Flat-head gRubber
n hammer
screwdriver screwdriver n i
a r
/ le
Level
:/
t p
Measuring tape Adjustable wrench
h t
s :
Maker
ce Utility knife
ur
ESD gloves
s o
R e
n g
Hex key
n i Hammer drill 6mm drill
a r
Le
r e
o
e n
m/
Installation Tools Preparation(Cont.) c o
i .
w e
u a
. h
n g
i
n RJ45 crimping
Cable cutterar
Diagonal pliers Wire stripper
l e
/ / tool
p :
t t
h
s :
c e tool Multimeter
Combination pliers r
COAX crimping
u
Network
s o cable tester
R e
n g
n i
a r
Vacuum cleaner
Le
o
Copyrig Pa ge4
e n
m/
Contents c o
i .
e w
u a
1. Indoor AP Hardware Installation Instruction
. h
g
nInstruction
2. Indoor Distribute AP Hardware Installation n i
a r
3. Outdoor AP Hardware Installation Instruction l e
/ /
p :
t
ht
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyrig Pa ge5
e n
AP6010SN/AP6010DN Equipment om /
. c
Introduction ei w
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
1. Indicator
Re
2. Power input
port:
3. Default 4.ETH/PoE 5.Console
n g
n i
a r
Le
r e
o
e n
m/
Installation Accessories Preparation.c o
e i
a w
h u
g .
i n
r n
ea
/ l
: /
t p
h t
Sheetmetal wall-
s : Expansion bolt
mounting bracket e
r c
o u
e s
R
n g
n i
a r
Le
o
Copyrig Pa ge7
e n
/ m
Dimensions and installation space .c o
e i
a w
h u
g .
i n
r n
e a
/ l
: /
t p
ht
s :
c e
u r
s o
Re
AP6010 dimensions n g (unit: mm) Recommended AP6010
n i
without a backplane support. installation space (unit: mm)
a r
L e
o
Copyrig Pa ge8
e n
m/
Installation c o
i .
we
u a
 AP6010SN/DN installation：
. h
n g
 Workbench installation
n i
a r
 Wall-mounting
/ le
/
 Ceiling-mounting
t p:
T-rail mounting ht

s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Wall-mounting Installation Steps c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
1. Mark the s o 1.Drill .2 Hammer the expansion
drilling positionsRe tubes into the holes.
n g
n i
a r
Le
r e
o
e n
/ m
Wall-mounting Installation Steps(Cont.) c o
i .
w e
u a
. h
n g
n i
a r
l e
/ /
p :
t
ht
s :
c e
u r
3. Fix the wall-mounting s o 4.Fix the AP on the wall-
bracket to the wall R e mounting bracket
n g
n i
a r
Le
o
Copyrig Pa ge11
e n
m/
Ceiling-mounting Installation Steps .c o
e i
a w
h u
g .
i n
r n
ea
/ l
: /
t p
ht
s :
c e
u r
s o
R e
1. Fix the wall-mounting bracket to the
n g ceiling
n i
a r
L e
o
Copyrig Pa ge12
e n
Ceiling-mounting Installation m/
c o
Steps(Cont.) i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re the AP to
2. Fix the wall-mounting
n g bracket
n i
a r
L e
r e
o
e n
m/
T-rail Mounting Installation Steps . c o
i e
a w
h u
g .
n
r ni
a
/ le
/
t p:
ht
s :
ce
1.Fasten the wall- u r 2. Fix the AP.
mounting bracketes
o
and T-
rail. R
n g
n i
a r
Le
r e
o
e n
m/
Installing the Security Lock c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Connecting Cables c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g 12 V DC
1. Power adapter Connect the network
ni cable
2. Network
r cable to the AP
e a
L
r e
o
e n
m/
Power-on c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
Type
u r
Color Frequency Description
Normal Green so Slow The system is running properly
R e
Alarm Green Fast upgraded
n g
Error
r ni Red Steady A fault that affects services
e a occurs
L
r e
o
e n
m/
Contents c o
i .
we
u a
. h
n Instruction g
n i
2. Indoor Distribute AP Hardware Installation
a r
3. Outdoor AP Hardware Installation Instruction l e
/ /
p :
t t
h
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyrig Pa ge18
e n
m/
AP6310SN Equipment Introduction.c o
e i9
a w
h u
g .
i n
r n
ea
/ l
: /
t p
ht
s :
c e
u r
s o
1.SYSRe 2.Link 3.Wireless
4.2.4Gng antenna 5. Console 6. ETH/PoE
n iport
a r
Le 7.Default 8. DC 12V 9. Ground Point

o
Copyrig Pa ge19
e n
m/
e i
a w
h u
g .
i n
r n
ea
/ l
: /
t p
h t
Sheetmetal wall-
s : Expansion bolt
mounting bracket e
r c
o u
e s
R
n g
n i
a r
Le
o
Copyrig Pa ge20
e n
m/
Dimensions and Installation Space .c o
e i
a w
h u
g .
i n
r n
ea
/ l
: /
t p
ht
s :
c e
u r
s o
Re
AP6310SN dimensions
n g (unit: Recommended
mm) without n i a backplane AP6310SN installation
supportar space (unit: mm)
L e
o
Copyrig Pa ge21
e n
m/
Installation c o
i .
we
u a
 AP6310SN installation
. h
n g
 wall-mounting
n i
a r
 T-rail mounting
/ le
/
 ceiling-mounting
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Wall-mounting Installation Steps c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
1. mark the drilling so 2. Drill
positions Re
n g
n i
a r
Le
r e
o
e n
/ m
Wall-mounting Installation Steps(Cont.) c o
i .
w e
u a
. h
n g
n i
a r
l e
/ /
p :
t
ht
s :
c e
u r
3. Fix the wall- s o 4. Secure the AP on the
mounting bracket
e
R to bracket
the wall n g
n i
a r
Le
o
Copyrig Pa ge24
e n
m/
T-rail Mounting Installation Steps . c o
i e
a w
h u
g .
n
rni
a
/ le
/
t p:
ht
s :
ce
u r
o
s holder at the rear side of the AP
1. Fix aeclip
R
n g
n i
a r
L e
r e
o
e n
T-rail Mounting Installation Steps m /
c o
.
(Cont.) ei w
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u
2. Fasten the wall-mounting r 3. fix the AP
bracket and T-rail.es
o
R
n g
n i
a r
Le
r e
o
e n
m/
Ceiling-mounting Installation Steps .c o
e i
a w
h u
g .
i n
r n
ea
/ l
: /
t p
ht
s :
c e
u r
1. Fix a clip holder s ato 2. Fix the wall-mounting
the rear side of the
e
R AP bracket to the ceiling
n g
n i
a r
Le
o
Copyrig Pa ge27
e n
Ceiling-mounting Installation m/
c o
Steps(Cont.) i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
3. Fix the AP.
n g
n i
a r
Le
r e
o
e n
m/
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Connecting Cables c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
1. Ground Re 2.Power 3.Network 4. RF cable
cable ng adapter cable
n i
a r
L e
r e
o
e n
m/
Power-on c o
i .
we
u a
. h
n g
n i
a r
/ le
/
Type t p: Description
t
h System status indicator
SYS LED
s :
Link LED
ce Data transmission
Wireless LED u r Wireless air interface
s o
Re
packet transmission
n g indicates the different state for the device.

The LED status
ni lights are green the network is normal.
When three
r
e a
L
r e
o
e n
m/
Contents c o
i .
w e
u a
. h
nInstruction g
n i
2. Indoor Distribute AP Hardware Installation
a r
3. Outdoor AP Hardware Installation l eInstruction
/ /
p :
t t
h
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyrig Pa ge32
e n
m/
AP6510DN Equipment Introduction.c o
e i
a w
h u
g .
i n
r n
ea
/ l
: /
t p
ht
s :
c e
u r
s o
1.SYS Re 2.Link 3.Wireless
n
4.ETH/PoEg 5.Default 6. 5G antenna port
n i
a r 7.2.4G antenna port
L e
o
Copyrig Pa ge33
e n
m/
AP6610DN Equipment Introduction.c o
e i
a w
h u
g .
i n
r n
ea
/ l
: /
t p
ht
s :
c e
u r
s o
1.SYSRe 2.Link 3.Wireless
4. SFPn gPort 5. ETH/POE Port 6. Default
n i
7. AC
a r power port 8.5G antenna 9. 2.4G antenna
L e port port

o
Copyrig Pa ge34
e n
m/
e i
a w
h u
g .
i n
r n
ea
/ l
: /
t p
Installation suite
ht Expansion bolt
s :
c e
u r
s o
Re
n g M4X12 hexagon
n i
Hoop socket head cap screw
a r
L e
o
Copyrig Pa ge35
e n
/ m
Dimensions and Installation Space.c o
e i
a w
h u
g .
i n
r n
ea
/ l
: /
t p
ht
s :
c e
u r
s o
AP6510DN/AP6610D
R e Recommended
N dimensions(unit:
n g AP6510DN/AP6610DN installation
mm)
n i space (unit: mm)
a r
Le
o
Copyrig Pa ge36
e n
m/
Installation c o
i .
we
u a
 AP6510DN/AP6610DN installation:
. h
n g
 Against walls
n i
a r
 Against poles
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Against a Wall Installation Steps c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
1.Mmark the drilling 2. Drill
positions ng i
r n
e a
L
r e
o
e n
Against a Wall Installation Steps m /
c o
.
(Cont.) ei w
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
R e
3.Fasten the wall-mounting bracket to the
n g
AP
n i
ar
Le
r e
o
e n
Against a Wall Installation Steps m /
c o
.
(Cont.) ei w
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
4..Fasten the wall- so 5. Fix the AP
mounting bracketReto the
Wall ng i
r n
e a
L
r e
o
e n
m/
Against Poles Installation Steps c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
R e
1. Slide the hoop attach it to the 2. Fix AP
pole g n
n i
a r
L e
r e
o
e n
/m
Against Poles Installation Steps(Cont.) c o
i .
w e
u a
. h
n g
n i
a r
l e
/ /
p :
t
ht
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyrig Pa ge42
e n
m/
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Installing Cables c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
AP6510DN external AP6610DN external
n g
cable arrangement cable arrangement
drawingni drawing
a r
L e
r e
o
e n
m/
Connecting Network Cables Steps .c o
e i
a w
h u
g .
i n
r n
ea
/ l
: /
Put the network cable through the phole on the waterproof PG
t t
connector h
s :
c e
u r
s o
Re
Connect theiRJ45 ng connector to the AP and secure the
waterproof r n PG connector, as shown in figures b, c, and d.
e a
L
o
Copyrig Pa ge45
e n
m/
Connecting the Feed Line c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u
1. The outdoor AP's oantenna
r
ports already have 5 KA surge
e
protection capability. s Generally, no surge protection devices need
R
to be installed;g therefore, the antenna cables are directly
connected tointhe AP's antenna ports.
n
a r
Le
r e
o
e n
m/
Connecting Surge Protection Device c o
i .
w e
u a
. h
n g
n i
a r
l e
/ /
p :
t
ht
s :
c e
u r
2. If higher surge e so
protection capability is required, the
customer can purchase R a surge protection device. When
g
nsurge protection device, ensure that it is
installing the i
nto a ground cable.
connected
a r
L e
o
Copyrig Pa ge47
e n
m/
Connecting the Ground Cable c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Connecting Optical Fibers c o
i .
we
u a
. h
n g
appearance of the optical fiber
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n gThe optical fiber connection of AP6610DN
n i
a r
Le
r e
o
e n
m/
Connecting AC Power Cables c o
i .
we
u a
. h
n g
n i
a r
/ le
/
p:
Figure 1
t t
h
s :
ce
u r
s o
Re
n g Figure 2
n i
a r
Le
r e
o
e n
m /
Pressing the Reset Button c o
i .
e w
a
u by a
 The Reset button on an outdoor AP is protected
. h
g
n button, remove
waterproof screw. Before pressing the Reset
n i
a r
the waterproof screw.
l e
/
/ it again after pressing
 Keep the screw properly and install
p :
t
the Reset button. ht
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyrig Pa ge51
e n
m/
Power-on c o
i .
we
u a
. h
n g
n i
a r
le
/Description
/
p:
Type
SYS LED t tSystem status indicator
h Data transmission
Link LED
s :
Wireless LED ce Wireless air interface
u r packet transmission
s o
Re Three LED status indicates the
Three LED status
g a different state.
device is in
n
i lights are green, that the network is normal.
Whennthree
a r
Le
r e
o
e n
m /
Questions c o
i .
e w
 How many installation mode about the Huaweihindoor u a AP?
g .
i n
r n
ea
 What is the difference of installationlbetween AP6510DN
/ /
and AP6610DN？ p :
t t
h
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyrig Pa ge53
e n
m /
Summary c o
i .
e w
u a
 The models and usage scenarios of Huawei APs
. h
n g
 HuaWei indoor APs Installation mode andisteps
r n
ea
 HuaWei indoor distribute APs Installation
/ l mode and steps
: /
 HuaWei outdoor APs Installation t p mode and steps
ht
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyrig Pa ge54
e n
m/
c o
i .
we
u a
. h
ng
n i
a r
谢谢:// le
t p
www.huawei.com
t h
s :
ce
ur
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
c o
i .
we
u a
. h
Huawei WLAN n g
n i
r
Architecture Introduction
a
le /
/
t p:
ht
s :
ce www.huawei.com
u r
s o
Re
n g
n i
a r
L e
e
r
o
e n
m /
Objectives c o
i .
e w
a
uto:
. h
n g
 Describe the WLAN basic component
n i
r
a and Fit AP
 Understand the different between Fat l eAP
/ /
 Master the theory of CAPWAP p :tunnel
t
Outline the typical WLAN Application ht
:

e s
Master the theory of coperations when AC as a L2 switch or

u r
gateway s o
Re
n g
n i
a r
Le
o
Copyright Page 2
e n
m/
Contents c o
i .
we
u a
 Introduction to WLAN
. h
n g

n
Autonomous architecture and Centralized iarchitecture
a r
 CAPWAP tunnel le /
: /
 Typical WLAN Networking Application t p
h t
 AC deployment
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyright Page 3
e n
m/
The WLAN Basic Component c o
i .
we
u a
. h
n g
n i
a r
Access switch e
Mobile PC NMS Manager
/ l
:/
t p
ht
Distrubution
PDA
s : switch AC 6003
Radius DHCP
ce AC 6005
server Server
u r ACU
s o
Re Router PortalServer
Mobile User
n g
i NMS and
Station
a rn AP IP networks AC
Server
L e
r e
o
e n
m/
Contents c o
i .
we
u a
. h
n g

n
a r
: /
h t
 AC deployment
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyright Page 5
e n
m/
WLAN Architecture c o
i .
we
 Centralized hu
a
Autonomous

g .
architecture
AP MAC functions architecture
AP MAC infunctions
r n
•Beacon, probe response e a response
•Beacon, probe
•Packetlacknowledgment and
•Packet acknowledgment and
/ /
transmission
transmission
p : queuing and packet
•Frame queuing and packet
t tprioritization
•Frame
prioritization h •Mac layer data encryption and
•Mac layer data encryption and
s : decryption
decryption
ce
•Rate limit and QOS
u r AC MAC functions
•Association Requests and actions
s o
Re
•Authentication and key
management •Rate limit and QoS
n g •Association Requests and actions
n i •Authentication and key
a r management
Le
r e
o
e n
m/
Autonomous Architecture c o
i .
we
u a
FAT AP . hDHCP
DNS server
n g server
n i
a r
/ le
FAT AP /
t p: Campus
ht network or
s : Internet
FAT AP
ce NMS
u r
s o
Re
n g
i
nIn autonomous architecture, fat APs are used to implement all
a r wireless access functions, and no AC is required
Le
r e
o
e n
m/
Centralized Architecture c o
i .
w e
u a
. h
n g DHCP
n i
DNS server
server
a r
le
FIT AP
/ /
p:
CA AC
PW
AP
t t Campus
h network or
s : Internet
C e
AP NMS
APW
r c
FIT AP o
u
e s
R
n g architecture, the AC and APs implement wireless access.
i
In centralized
n
a r
Le
r e
o
e n
m/
Contents c o
i .
we
u a
. h
n g

n
a r
: /
h t
 AC deployment
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyright Page 9
e n
m /
CAPWAP: How it works c o
i .
w e
u a
. h
n g
n i
a r
Mobile PC
/ le DATA Center
/
t p:
ht
s :
ce
ur Layer 2 / Layer 3
A C
AP
s o Network Infrastructure
Re
n g
in CAPWAP : Control And Provisioning of
a r Wireless Access Points Protocol Specification
MobileUser
L e
o
Copyright Page 10
e n
m/
Load Types of CAPWAP c o
i .
we
u a
Message
Used for UDP Port . h
Encryption
type
n g
n i
Control message Manage AP 5246
a r Most is ciphertext
/ le
/
Data message Forward user data
t p: 5247 Most is plaintext
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Contents c o
i .
we
u a
. h
n g

n
a r
: /
h t
 AC deployment
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyright Page 12
e n
m /
Typical WLAN Application c o
i .
e w
a
u 2 devices.
 On WLANs, ACs function as gateways or Layer
. h
n g
 WLAN solutions are classified based on i factors such as
r n
the size and type of enterprises and a
e organizations:
/ l
/
: network WLAN solution
 Large- and medium-scale campus
t p
Small-scale campus network
t
h WLAN solution

s :
SOHO WLAN solution c e

u r
Branch WLAN ssolutiono
Re

n g
n i
a r
Le
o
Copyright Page 13
e n
Large-and Medium-scale Campus m /
c o
Network WLAN Solution i .
w e
Centralized AC Solution u a
 h .
g
n the network
deploys independent ACs to manage APs ion

r n
 Distributed AC Solution ea
/ l
: /
 deploys multiple ACs in different
t p areas to manage APs.
h t
This solution integrates AC functions on an aggregation switch

s :
to manage all the APs c econnected to the aggregation switch,
u r
without using anoindependent AC.
e s
R
n g
n i
a r
Le
o
Copyright Page 14
e n
m/
Centralized AC Solution c o
i .
w e
 Centralized AC solution on a large- and medium-scale u a
. h
campus network n g
n i
a r
l e Internet
AP
/ /
Access switch
p :
t
ht
Aggregation switch WAN
s :
Core switch
c e
u r
s o DHCP DNS AAA
Re
server server server
n g Patch/anti-virus App
n i server server
r
AP
AC
a
NMS
Le
Data center

o
Copyright Page 15
e n
m/
Distributed AC Solution c o
i .
w e
 Distributed AC solution on a large- and medium-scale u a
. h
campus network n g
n i
a r
AP
l e Internet
/ /
:
Access switch
Aggregation switch
t p WAN
ht
(integrating the AC)
s :
c e Core
network
u r DHCP DNS AAA
s o server server server
Re Aggregation switch
n g (integrating the AC) Patch/anti-

virus server
App
server
n i AP
Access
r
NMS
switch
a
Le
Data center

o
Copyright Page 16
e n
Small-scale Campus Network WLAN om /
. c
Solution e i
w a
 hu to
the aggregation switch integrates AC functions
.
implement the centralized AC solution in
g
r n
AP
ea
/ l Internet
Access switch
: /
t p
Aggregation switch
ht
DHCP
server
s :
c e
u r
o
Core
s
network
Re Access switch
DNS
n g server
n i
a r AP
Le
o
Copyright Page 17
e n
m/
SOHO WLAN Solution c o
i .
we
u a
. h
n g
n i
a r
Mobile PC
/ le
/
t p:
ht
FAT AP
s : LAN Switch Router
ce
u r
Mobile s o
user Re
n g
n i PC PC
a r
Le
r e
o
e n
m/
Large-scale Branch WLAN Solution c o
i .
w e
u a
h
. NMS
g
n(managing the WLAN)
n i
r
a switch
AP
l e
Egress router Core
/ /
p :
Access switch
t t Enterprise
h
WAN intranet
s :
Aggregation/core switche
r c
u
o
e s
R network
n g Branch Headquarters network
n i
a r
L e
o
Copyright Page 19
e n
m/
Small-scale Branch WLAN Solution c o
i .
w e
u a
h
. NMS
g
n(managing the WLAN)
n i
r
a the AC)
AP
l e
Core
Egress router (integrating
switch
/ /
p :
t
Access switch Egress router
h
WANt Enterprise
intranet
s :
ce
u r
s o
R e
n gBranch network Headquarters network
n i
a r
L e
o
Copyright Page 20
e n
m/
Contents c o
i .
we
u a
. h
n g

n
a r
: /
h t
 AC deployment
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyright Page 21
e n
m /
Using AC as a L2 Devices c o
i .
we
u a
. h
Gateway Router n g
IP:10.1.100.1

n i
Controller acts as an L2 switch
a r
AC's interface should be configured as
e or hybrid mode

l
trunk
/VLAN assignment can be based on
/
AC t p:
IP:10.1.100.100 ht ESSID、AP or authentication result

(802.1X)
s :
ce  Client default route via an external
r
ou
router
AP
e s  DHCP Requests are broadcast inside

R VLAN or configured the DHCP relay.
n g
n i
a r Mobile PC
Le Gateway:10.1.100.1
r e
o
e n
m/
Theory of Operations c o
i .
we
u a Radius
. h server
GATEWAY
n g
Access
switch
n i DHCP
r
Core switch Server
ea
AP VLAN 11 AP VLAN 12
/ /l
Dot1Q VLANs 100,101,102
p :
t t AC Router
h
s :
AP region 101 ce
AP region102
SSID : Huawei101 u r
SSID:Huawei102
CORE Switch IP:
s o VLAN 11 :10.1.11.1
e
VLAN 12:10.1.12.1
R VLAN 100:10.1.100.1
VLAN 101:10.1.101.1
n g VLAN 102:10.1.102.1
PC1 VLAN 101 i

AC WLAN source ip:10.1.100.100
r n PC1 VLAN 102 AC VLAN 101 IP : 10.1.101.100

a
IP :10.1.101.51 IP 10.1.102.51 AC VLAN 102 IP : 10.1.102.100
Le
GW:10.1.101.1 GW:10.1.102.1

o
Copyright Page 23
e n
m /
Packet Flow: DHCP Request c o
i .
we
u a Radius
. h server
GATEWAY
n g
Access
switch
n i DHCP
r
Core switch Server
ea
/l
Dot1Q VLANs 100,101,102
/
p :
t t AC Router
h
s :
AP region 101 ce
AP region102
SSID:Huawei102 On wireless side
s o
Send a DHCP Request R e SIP=0.0.0.0
n g DIP=255.255.255.25
n i 5
a r DHCP Request
Le
r e
o
e n
m/
Packet Flow: DHCP Request(Cont.) c o
i .
e
w Radius
DHCP Request IN
CAPWAP
u a
. h server
GATEWAY
n g
Access
switch
n i DHCP
r
Core switch Server
ea
/ l
Dot1Q VLANs 100,101,102
: /
t p
ht
AC Router
s :
AP region 101 c e
AP region102
On wired side
SSID:Huawei102 SIP=10.1.11.101(AP1)
s o VLAN =101
802.1Q
e
RSIP=0.0.0.0 DIP=10.1.100.100(A
C)
n g
n i DIP=255.255.255.25 UDP Port = 5247
a r 5 CAPWAP data
L e header
DHCP Request
r e ©2012 Huawei Technologies Co., Ltd. All rights reserved. DHCPPage Packet
o
Copyright 25
e n
m /
Packet Flow: DHCP Request(Cont.) c o
i .
e
w Radius
u a
CAPWAP Tunnel
. h Server
GATEWAY
n g
Access
switch
n i DHCP
r
Core switch Server
ea DHCP Request
/ l
Dot1Q VLANs 100,101,102
: /
t p
ht
AC Router
s :
AP region 101 ce
AP region102
AC strip the CAPWAP header And
Relay the Request to DHCP Server
SSID:Huawei102 Inside the AC
s o
R e 802.1Q VLAN =101
n g SIP=0.0.0.0
n i
a r DIP=255.255.255.25
L e 5
e DHCP Request
or ©2012 Huawei Technologies Co., Ltd. All rights reserved.
Copyright Page 26
e n
m /
Packet Flow: DHCP Offer c o
i .
we
u a Radius
CAPWAP Tunnel
. h server
GATEWAY
n g
Access
switch
n i DHCP
r
Core switch Server
ea
/l
Dot1Q VLANs 100,101,102
/
DHCP Offer
p :
t t AC Router
DHCP Offer
h CAPWAP + DHCP Offer
s :
AP region 101 ce
AP region102
DHCP Offer
SSID:Huawei102
s o ip address = 10.1.101.51
R e netmask=255.255.255.255
n g
n i Gateway=10.1.101.1
a r
PC recivce the DHCP Offer
Le
Dns =202.96.134.133
r e
o
e n
m/
Using AC as a Gateway c o
i .
we
u a
. h
Router n g
Using an ac as a gateway

n i
a r
AC’s VLAN interface is client’s
e gateway

/ l
default
/
Gateway
AC t p: L3 network routers require static

IP:10.1.100.1 ht routes to controller
s : DHCP assignments by external or

ce 
u r internal DHCP server

AP
s o For external DHCP server use
Re

DHCP relay
n g
n i
a r Mobile PC
Le Gateway:10.1.100.1
r e
o
e n
m/
Theory of Operations c o
i .
we
u a Radius
. h server
n g
Access
switch
n i DHCP
r
Core switch Server
ea
/ /l
AC VLAN 100
p :
t t AC Router
h GATEWAY
s :
AP region 101 ce
AP region102 CORE Sitch IP:
SSID:Huawei102
VLAN 11 :10.1.11.1
s o VLAN 12:10.1.12.1
Re
VLAN 100:10.1.100.1
AC WLAN source ip:10.1.100.100
n g AC VLAN 101 IP : 10.1.101.1

AC VLAN 102 IP : 10.1.102.1
PC1 VLAN 101 i
r n PC1 VLAN 102
Core switch and AC should have
static or dynamic route protocol
a
IP :10.1.101.51 IP 10.1.102.51
Le
GW:10.1.101.1 GW:10.1.102.1

o
Copyright Page 29
e n
m /
Theory of Operations(Cont.) c o
i .
we
u a Radius
. h server
n g
Access
switch
n i DHCP
r
Core switch Server
ea
/ /l
AC VLAN 100
p :
t t AC Router
h GATEWAY
s :
AP region 101 ce
AP region102
SSID:Huawei102
CORE Sitch route config:
s o route static 10.1.101.0
e
255.255.255.0 10.1.100.100
R route static 10.1.102.0
n g 255.255.255.0 10.1.100.100
PC1 VLAN 101 i

AC route config :
r n PC1 VLAN 101 route static 0.0.0.0 0.0.0.0

a
IP :10.1.101.51 IP 10.1.102.51 10.1.100.1
Le
GW:10.1.101.1 GW:10.1.102.1

o
Copyright Page 30
e n
m/
Summary c o
i .
we
u a
 WLAN basic component
. h
ng
 Fat AP and Fit AP n i
a r
 The theory of CAPWAP tunnel le /
: /
 The typical WLAN Applicationtp
ht
 The theory of operations :
e s when AC as a L2 switch or
gateway r c
o u
s
Re
n g
n i
a r
Le
o
Copyright Page 31
e n
m/
Questions c o
i .
we
u a
 What are the WLAN basic component？
. h
n g
n i
a r
 Please describe two tunnels of CAPWAP, l e what is the
/ /
difference？ p :
t t
h
s :
c e
 What is the difference
u r of the L2 deployment and L3
s o
deployment? e
R
n g
n i
a r
Le
o
Copyright Page 32
e n
m/
c o
i .
we
u a
. h
ng
n i
a r
Thank you le
// :
tp
www.huawei.com
ht
s :
ce
ur
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
c o
i .
we
u a
AP Management and ng.h
n i
CAPWAP Tunnel lear
/ /
t p:
ht
s :
ce www.huawei.com
u r
s o
Re
n g
n i
a r
L e
e
r
o
e n
m/
Objectives c o
i .
e
w
a
uto:
. h
g
Describe the methods of AP management in

r n
ea
 Know the AP boot sequence
/ l
: / tunnel mode
 Master the CAPWAP tunnel forward
t p
ht
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyright Page 2
e n
m/
Contents c o
i .
we
u a
 AP Management
. h
n g
 AP discovery AC n i
a r
 AP Access Control
/ le
/
 VLAN Deployment t p:
ht

s:
AC Application Scenarios
e
r c
 LLDP
o u
s
 Licenses Re
n g
n i
a r
Le
r e
o
e n
m /
AP Management c o
i .
w e
u a
 AP management is only involved in centralized
. h
management, including : n g
n i
a r
 version management
l e
/ / AC
DHCP
server/DNS
 configuration management
p :
t
ht
Tunnel
Switch Tunnel
 access control
s :
region managementce
AP1 ... ... APn
r

o u
s
Re
n g Terminal 1 ... Terminal m
n i
a r
Le
o
Copyright Page 4
e n
m /
Version Management c o
i .
e w
a
u version
 An AP needs to negotiate with an AC about the software
. h
g
n that on the AC,
 If the software version on the AP is different from
n i
a r
the AP starts to upgrade the software.
l e
/
/ modes:
 An AP supports the following upgrade
p :
t
 AC mode: AP downloads the upgrade
ht version file from an AC.
FTP mode: AP downloadss:


c e the upgrade version file from the specified

FTP server.
u r
s o
R e
n g
n i
a r
Le
o
Copyright Page 5
e n
m/
Contents c o
i .
we
u a
 AP Management
. h
n g
a r
/ le
/
ht

s:
e
r c
 LLDP
o u
s
 Licenses Re
n g
n i
a r
Le
r e
o
e n
m/
AP Boot Sequence c o
i .
we
u a
. h
n g DHCP
Mobile PC AP
n i Server
a r
LAN Switch e
/ l AC
: / Router
AP
t p
Mobile PC
PDA AP h
t
1. The AP obtains its own IP address s :
2. The AP know the AC 's IP address c e (in static mode or dynamic mode)
3. The AP starts the CAPWAP u r discovery mechanism and broadcasts discovery
o
requests to associateswith an AC.
Re responses from ACs, the AP establishes a connection
4. After receiving discovery
with an AC based
n g on preconfigured rules.
n i
5. The AP downloads the latest software version and configurations from the AC.
6. The AP r starts to work and exchange user data packets with the AC.
a
Le
o
Copyright Page 7
e n
m/
AP Discovery the AC c o
i .
w e
AP discovery the AC by two ways u a

. h
g
 in list in AP
Static mode : by preconfigured AC IP address
n
a r
 Dynamic mode : by DHCP or DNS option l e
/ /
Start
p :
t
ht
Is there:a preconfigured AC
s list on the AP?
IPeaddress
r c
o u
The AP establishes a s
Start the dynamic AC auto-
connection with anR e based

AC
discovery process
on preconfigured
n g rules
n i The AP associates with an AC
r
a End
L e End

o
Copyright Page 8
e n
m/
Static Mode: Static IP address .c o
e i
a w
h u
g . DHCP
AP
in Server
n
Mobile PC
a r
LAN Switch e
/ l AC IP
:/ 10.1.100.100 Router
AP
t p
Mobile PC
PDA AP h
t
e s:
login: admin
r c
u
Password:admin
# cli
s o
Re
Enterprise AP# configure interface ethernet
Enterprise AP (if-ethernet) # ip mode static
g
Enterprise AP (if-ethernet) # ac iplist 10.1.100.100
n
i
Enterprise AP (if-ethernet) # ip address 10.1.11.51 255.255.255.0 10.1.11.1
n
r
Please reboot the AP, configuration will take effect
a
Le
~ # reboot
r e
o
e n
m/
Dynamic Mode: DHCP .c o
e i
a w
h u
g . DHCP
AP
in Server
n
Mobile PC
a r
/ le
/ AC IP Router
p:
AP 10.1.100.100
Mobile PC
t t
PDA AP h
e s: Config DHCP server on AC

By default, AP's go online in DHCP mode
login: admin r c
Password:admin
o u dhcp enable
s
Re
~ # cli interface VLANif 11
Enterprise AP# configure interface ethernet ip address 10.1.11.100 24
g
Enterprise AP (if-ethernet) # ip mode dhcp
n
dhcp select interface
i
Enterprise AP (if-ethernet) #
n
dhcp server dns-list 202.96.134.133
~ # reboot
a r dhcp option43 sub-option 3 ascii
10.1.100.100
Le
r e
o
e n
m/
Dynamic Mode: DHCP-Relay .c o
e i
a w
h u
g . DHCP
AP
in Server
n
Mobile PC
a r IP 10.1.200.100
/ le
/ AC IP Router
p:
AP 10.1.100.100
Mobile PC
t t
PDA AP h
e s:
By default, AP's go online in DHCP mode
r c Config DHCP Relay on AC
dhcp enable
login: admin
o u dhcp server group dhcpgroup1
s
Re
Password:admin dhcp-server 10.1.200.100
~ # cli interface VLANif 11
g
n
ip address 10.1.11.100 255.255.255.0
i
Enterprise AP (if-ethernet) # ip mode dhcp
n
dhcp select relay
r
Enterprise AP (if-ethernet) #
a
dhcp relay server-select dhcpgroup1
Le
~ # reboot
r e
o
e n
m/
Dynamic Mode: DNS .c o
e i
a w
hu
g . DHCP
AP
in Server
n
Mobile PC
a r IP 10.1.200.100
/ le
/DNS Query AC IP DNS
p:
AP 10.1.100.100
IP 10.1.200.200
Mobile PC
t t
PDA AP h
e s:
~ # cli
r c
interface VLANif 11
dhcp select interface
o u
Enterprise AP (if-ethernet) # ip mode dhcp dhcp server domain-name xxxx.com
e s
R
DNS Query : where isg HW.xxxx.com ?
n is at
DNS Server
10.1.100.100 n
i
DNS Reply : HW.xxxx.com HW.xxxx.com 10.1.100.100
a r
Le
o
Copyright Page 12
e n
m/
Contents c o
i .
we
u a
 AP Management
. h
n g
a r
/ le
/
ht

s:
e
r c
 LLDP
o u
s
 Licenses Re
n g
n i
a r
Le
r e
o
e n
m /
Access Control c o
i .
e w
a
u 6603)
 MAC address or SN in the blacklist (blacklist just for
. h
n g
 MAC address or SN in the whitelist
n i
a r
 Three types of ap-auth-mode
l e
/
/ mode to MAC address
 mac-auth : Sets the AP authentication
p :
t
authentication.
ht
s :
sn-auth : Sets the AP authentication mode to SN authentication

c e
no-auth : Sets the AP u rauthentication mode to non-authentication.
o

s
Re
n g
n i
a r
Le
o
Copyright Page 14
e n
m/
AP Access Flowchart c o
i .
we
u a
h
Start
.
g the AP is in the
1. Check whether n
blacklist. ni
Yes
Is AP in blacklist?
No
a r
l e whether the MAC
/ or SN of the AP has
Yes Is AP in
2. Check
/
preconfigured list?
No
p :
address
t t been added to the
h preconfigured list.
No Does AP require
authentication?
Yes
s :
No
ce 3. Check whether the AP requires
Is AP in whitelist?
u r authentication.
Yes
s o
Add AP to non-
authenticated list
MAC or SN
authentication Re Manually 4. Check whether the AP is in the
n g confirming
whitelist.
i
(Determine MAC
n
address or SN)
a r
AP goes online AP cannot
go online
Le
(end)
(end)
r e
o
e n
m/
Access Control: Blacklist c o
i .
we
AP 1 MAC: 80fb-0616-1111 AC Blacklist: u a
S N: AB34001111 MAC: 80fb-0616-3333 . h
n g
AP 2 MAC: 80fb-0616-2222 n i
ap-auth-mode : no-auth
S N: AB34002222 a r
/ le
AP 3 MAC: 80fb-0616-3333 /
S N: AB34003333
t p:
ht
s :
ce
AP 1
u r
s o Router
Re LAN Switch
g
n
X
AC
n i 2
AP
a r AP 3
Le AP 3
r e
o
e n
m /
Access Control: Whitelist c o
i .
we
AP 1 MAC: 80fb-0616-1111 AC Blacklist: u a
S N: AB34001111 MAC: 80fb-0616-3333 . h
AC Whitelist : ng
AP 2 MAC: 80fb-0616-2222 n i
MAC: 80fb-0616-1111
S N: AB34002222 a r
l e : mac-auth
ap-auth-mode
AP 3 MAC: 80fb-0616-3333 / /
S N: AB34003333
t p:
ht
s :
AP 1
ou
r ce
X
es
Router
R LAN Switch
g
n
X
AC
n i 2
AP
a r AP 3
Le AP 3
r e
o
e n
m/
Access Control: Whitelist c o
i .
we
AP 1 MAC: 80fb-0616-1111 AC Blacklist : u a
S N: AB34001111 MAC: 80fb-0616-3333 . h
ng
AP 2 MAC: 80fb-0616-2222 AC Whitelist : n i
S N: AB34002222 a r
MAC: 80fb-0616-1111
/ le
AP 3 MAC: 80fb-0616-3333 /
ap-auth-mode : mac-auth
S N: AB34003333
t p:
ap 2 mac 80fb-0616-2222
ht
s :
ce
AP 1
u r
s o Router
Re LAN Switch
g
n
X
AC
n i AP 2
a r AP 3
Le AP 3
r e
o
e n
m/
Contents c o
i .
we
u a
 AP Management
. h
n g
a r
/ le
/
ht

s:
e
r c
 LLDP
o u
s
 Licenses Re
n g
n i
a r
Le
r e
o
e n
m/
VLAN Deployment c o
i .
we
u a
 Management VLAN
. h
n g
 Management VLAN transmits management packets between an AC
n i
and AP a r
/ le
 Service VLAN /
t p:

ht
Service VLAN transmit data required for WLAN user access
 User VLAN s :
ce
User VLAN are assignedu r based on user rights
o

s
Re
n g
n i
a r
Le
r e
o
e n
/
m
VLAN Deployment-Management VLANi.c o
w e
u a
Management packets
. h :
dhcp arp CAPWAP
n g
n i
a r
l e DHCP
Mobile PC VLAN 11
/ / Server
AP1 10.1.11.101
p : Dot1q VLAN 11
t
LAN t Switch
h Router
AP2 10.1.11.102 s:
AC 10.1.11.100
VLAN 11
c e
Mobile PC
u rAP3 10.1.11.103
o
PDA
s
Re
n g
iManagement VLAN transmits management
n packets between an AC and AP
a r
L e
o
Copyright Page 21
e n
m /
VLAN Deployment-Service VLAN c o
i .
we
u a
. h
SSID:HW101
n g
Service
VLAN101
User access data
n i
a r
le
Dot1q VLAN 11 DHCP
Mobile PC SSID:HW101 VLAN 11 / /
101 102 500 Server
p:
VLAN 101
Service
IP:10.1.101.51
VLAN102
t t
LAN Switch
h Router
s : VLAN 11
AC 10.1.11.100
ce
Mobile PC
VLAN 102 r
uSSID:Guest
IP:10.1.102.51
VLAN 500s
o
e
R VLAN500
Service
IP:192.168.50.51
n g VLAN transmit data required for WLAN

iService
n user access
a r
Le
r e
o
e n
m /
VLAN Deployment-User VLAN c o
i .
we
User hw001 VLAN 101
u a
User hw002 VLAN 101
. h
SSID:HuaweiNet
User hw003 VLAN 102
n g
i
User hwtest VLAN 500
n
a r AUTH DATA
le
Dot1q VLAN 11 Radius
User hw001 VLAN 101
VLAN 11 / /
101 102 500 server
p:
SSID:HuaweiNet
t t
LAN Switch
h Router
s : VLAN 11
USER DATA
User hw002 VLAN 101

ce
u r
s oSSID:HuaweiNet
e
User hwtest VLAN 500
R
n g
User VLAN are assigned based on user
n irights,Just like 802.1x authentication user VLAN
a r and roaming user Authorization VLAN
L e
r e
o
e n
m/
Contents c o
i .
we
u a
 AP Management
. h
n g
a r
/ le
/
ht

s:
e
r c
 LLDP
o u
s
 Licenses Re
n g
n i
a r
Le
r e
o
e n
m/
AC Application Scenarios c o
i .
e w
a
u in :
 The AC is connected to an aggregation switch
. h
n g
 chain mode
n i
a r
 branched mode l e
/ /
 Two forwarding modes are available p : according to
t
whether data flows are transmitted ht on CAPWAP tunnels:
s :
Direct forwarding (also c e called local or distributed

u r
forwarding) so
R e

n g
Tunnel forwarding (also called centralized forwarding)
n i
a r
L e
o
Copyright Page 25
e n
m /
Chain Networking c o
i .
we
u a
. h
n g
n i
a r
/ le
/
Mobile PC AP
t p:
ht
s : AC Switch Router
ce
AP
u r
Mobile PC
s o
Re
n g
n i
a r
Le
r e
o
e n
/m
Chain Networking-Direct Forwarding c o
i .
w e
u a
. h
SSID: HW101
n g
Service VLAN A C IP i
n management
101 CAPWAP r
VLAN 11 10.1.11.100
a10.1.101.100 service VLAN
VLAN
e
l102 10.1.102.1 00 service
VLAN 101
/
VLAN/
Mobile PC AP VLAN 11
p :
VLAN
t
Dot1q 101 102
IP 10.1.11.101
ht
IP 10.1.101.51
Dot1q 11 101 102
AP VLAN 11 c
e
u r Switch IP
Mobile PC
IP 10.1.101.51
s o
IP 10.1.11.102
VLAN 101 10.1.101.1
User frame when e

R leave AP
Gateway
VLAN 102 10.1.102.1
DA n
SAg dot1q SIP DIP
Gateway
DATA FCS
i
n Pc mac VLAN 10.1.101.5 10.1.101.1 abcdefg FCS
Gw mac
a r
L e 101 1

o
Copyright Page 27
e n
/m
Chain Networking-Tunnel Forwarding c o
i .
w e
u a
. h
SSID: HW101
n g
Service VLAN A C IP i
n management
101 CAPWAP r
VLAN 11 10.1.11.100
a10.1.101.100 service VLAN
VLAN
e
l102 10.1.102.1 00 service
VLAN 101
/
VLAN /
Mobile PC AP VLAN 11
p :
VLAN
t
Dot1q 101 102
IP 10.1.11.101
ht
IP 10.1.101.51
Access VLAN 11
AP VLAN 11 c
e
u r Switch IP
Mobile PC
IP 10.1.101.51
s o
IP 10.1.11.102
VLAN 101 10.1.101.1
User frame when e

R leave AP
Gateway
VLAN 102 10.1.102.1
DA n
SAg dot1q SIP DIP
Gateway
DATA FCS
i
n AP mac NULL 10.1.11.10 10.1.11.10 CAPWAP FCS
AC mac
a r
L e 1 0 user
data

o
Copyright Page 28
e n
m/
Branched Networking c o
i .
we
u a
. h
ng
n i
a r
/ le
/
Mobile PC AP
t p:
t
h Switch
s : Router
AP ce
u r AC
Mobile PC
s o
Re
n g
n i
a r
Le
r e
o
e n
Branched Networking-Direct m/
c o
Forwarding i .
w e
u a
. h
n g
SSID: HW101
Service VLAN
n i
Switch IP
101 CAPWAP
a r
VLAN 101 10.1.101.1
le
Gateway
/ / VLAN 102 10.1.102.1

Gateway
Mobile PC
AP VLAN 11
t
IP 10.1.11.101 Dot1q 11 101 102 p:
IP 10.1.101.51
ht
s : Router
ce A C IP
AP VLAN 11 r
Mobile PC
o u VLAN 11 10.1.11.100 management
VLAN
s
IP 10.1.101.52 IP 10.1.11.102
User frame when e

R leave AP
VLAN 101 10.1.101.100 service VLAN
VLAN 102 10.1.102.1 00 service
DA n
SA g dot1q SIP DIP
VLAN
DATA FCS
i
n Pc mac VLAN 10.1.101.5 10.1.101.1 abcdefg FCS
Gw mac
a r
L e 101 1

o
Copyright Page 30
e n
Branched Networking-Tunnel m/
c o
Forwarding i .
w e
u a
. h
n g
SSID: HW101
Service VLAN
n i
Switch IP
101 CAPWAP
a r
VLAN 101 10.1.101.1
le
Gateway
/ / VLAN 102 10.1.102.1

Gateway
Mobile PC
AP VLAN 11
IP 10.1.11.101
t
Access VLAN 11
p:
IP 10.1.101.51
ht
s : Router
ce A C IP
AP VLAN 11 r
Mobile PC
o u VLAN 11 10.1.11.100 management
VLAN
s
IP 10.1.101.52 IP 10.1.11.102
User frame when e

R leave AP
VLAN 101 10.1.101.100 service VLAN
VLAN 102 10.1.102.1 00 service
DA n
SA g dot1q SIP DIP
VLAN
DATA FCS
i
n AP mac NULL 10.1.11.10 10.1.11.10 CAPWAP FCS
SW mac
a r
L e 1 0 user
data

o
Copyright Page 31
e n
m/
Contents c o
i .
we
u a
 AP Management
. h
n g
a r
/ le
/
ht

s:
e
r c
 LLDP
o u
s
 Licenses Re
n g
n i
a r
Le
r e
o
e n
m /
LLDP c o
i .
e w
a
uLayer 2
 The Link Layer Discovery Protocol (LLDP) is a
. h
discovery protocol defined in the IEEE 802.1ab. n g
n i
a r
l e
/ /
LLDP p :
t
ht
s :
AP e
Mobile PC
r c Switch AC
NMS
o u LLDP
e s
R
n g
n i
a r
Le
o
Copyright Page 33
e n
m/
LLDP Example in eSight c o
i .
w e
u a
. h
n g
n i
a r
AC
/ le AC
/
t p:
ht
s :
ce
r Switc
s ou h
R e
n g AP AP
n i AP AP
a r LLDP disable LLDP enable

Le
r e
o
e n
m/
LLDP Configuration c o
i .
we
u a
. h
LLDP
n g
n i
a r
Switch l
e AC
Mobile PC
AP1 id 1
/ /
p:
NMS
LLDP
t t
h
s : #Enable lldp globally
ce system-view
#enable lldp on switch
u r
system-view s o wlan ap lldp enable
lldp enable R e Enable lldp on AP
n g ap id 1
n i lldp enable
a r
Le
r e
o
e n
m/
Contents c o
i .
we
u a
 AP Management
. h
n g
a r
/ le
/
ht

s:
e
r c
 LLDP
o u
s
 Licenses Re
n g
n i
a r
Le
r e
o
e n
List of Licenses Available for om /
. c
AC6605 e i
w a
License Name Licensed Feature License
h uSupported
Code
g . Device Model
WLAN access Maximum number of APs i
L-AC6605-n
controller AP that can be connected. r n
16AP
resource license- The step is 16. e a
16 APs / l
WLAN access Maximum number ofpAPs :/ L-AC6605-
controller AP t t
that can be connected. 64AP
The step ish64.
AC6605
resource license-
64 APs s :
cenumber of APs
WLAN access Maximum
r
thatucan be connected.
L-AC6605-
controller AP
s oThe step is 128. 128AP
Re
resource license-
128 APs
n g
n i
a r
Le
r e
o
e n
m/
Licenses c o
i .
we
u a
License Name h
AP resource license for WLAN access controller
.
g n
i
n by an AC.
License Content Controls the number of APs allowed
a r
l e
License Code H85SWLANAC00 / /
p :
t
License Type Count ht
s :
c e
<Quidway> license active r license.dat
Info: The License is sbeing
u
o activated. Please wait for a moment.
Info: Succeeded in Reactivating the License file on the master board.
<Quidway> display n g ap-license
Default AP n iService Capability Number : 128
AP Service a r Capability Number : 384
L e
o
Copyright Page 38
e n
m/
Display License .c o
e i
<Quidway> display license a w
h u
Info: Active License on master board:
g .
flash:/LIC_ON190223_A018409856C_AC6605.dat in
R of Huawei Technologies Co., Ltd. r n
Product name : AC6605 ea
/ l
Product version : V200R001
:/
License Serial No : LIC20120423008110 t p
Creator : Huawei Technologies ht Co., Ltd.
Created Time : 2012-04-23 s : 14:31:53
Feature name : ACCESS ce
Authorize type : DEMO u r
s o
Expired date e
: 2012-07-01
R
Trial days g: 60
i
Configure itemsn :
Item name r n: H85SWLANAC00 value : 1024
a
Le
r e
o
e n
m/
Summary c o
i .
we
u a
 AP Management
. h
n g
a r
/ le
/
ht

s:
e
r c
 LLDP
o u
s
 Licenses Re
n g
n i
a r
Le
r e
o
e n
m/
Questions c o
i .
we
Please describe the boot sequence of AP ？ u a

. h
n g
n i
a r
 What is the function of the DHCP Option l e 43？
/ /
p :
t t
h
 What is the difference between
s : management VLAN and
c e
service VLAN？ ur
s o
Re
n g
n i
a r
Le
o
Copyright Page 41
e n
m/
c o
i .
we
u a
. h
ng
n i
a r
Thank you le
// :
tp
www.huawei.com
ht
s :
ce
ur
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
c o
i .
we
u a
VRP Introduction and ng.h
n i
Basic Configurationlear
/ /
t p:
ht
s :
ce www.Huawei.com
u r
s o
Re
n g
n i
a r
L e
e
r
o
e n
m/
Objectives c o
i .
e
w
a
uto:
. h
n g
 Clear Huawei VRP basic command
n i
a r
 Master Configuring Basic AC Attributes l e
/ /
 Master the software upgrade method p :
t
ht
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyright Page 2
e n
m/
Contents c o
i .
we
u a
 Introduce the Huawei VRP
. h
n g
 Configuring Basic AC Attributes n i
a r
 AC and AP software upgrade
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
VRP Introduction c o
i .
we
u a
 VRP: Versatile Routing Platform
. h
n g
 Role : n i
a r
 As a network operation system
/ le
:/
As a platform to support lots ofpproducts

t t
h
 Provide TCP/IP routing service
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
/
m
A brief history of VRP Version i.c o
w e
u a VRP8
VRP
. h VRP5
Version
n g
n i
VRP3.1
a r VRP3.1
VRP3.0
l e VRP3.0
/ / VRP Style
p
IOS :Style
t t WLAN AC6605
h VRP2.0
VRP2.0
s : VRP Version 5.70
c e VRP1.3
u r VRP1.2
s o VRP1.0 VRP1.1
Re
VRP1.0
n g
n i
a r
1996 e 1997
L 1998 1999 2000 2001 2003 Time

o
Copyright Page 5
e n
Login the AC6605 Through the m /
c o
Console Interface(1/5) i .
w e
u a
 Start the HyperTerminal.
. h
n g
n i
a r
/ le
/
t p:
ht Console
Port
s :
ce
u r
s o
Re
n g Console cable
n i
a r RS232
Le
r e
o
e n
c o
w e
u a
 Set up a connection.
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
c o
w e
u a
 Configure an com interface for connection.
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
c o
w e
u a
 Set communication parameters
. h
n g
n i
Parameter a r Value
/ le
/
Bit per second 9600
p:
t Data bit
ht 8
s : Parity check None

ce
r
s ou Stop bit 1
R e Flow control None

n g
n i
a r
Le
r e
o
e n
c o
w e
In the user view, you can run the display device command to check whether you u a
have logged in to the LSW unit (wired side) or AC unit (wireless side). h .
n g
i
n in to the LSW unit
<Quidway> display device You have logged
a r
AC6605-26-PWR's Device status:
e
Register l Status
Slot Sub Type Online Power
/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -/- - - - -
Role
p :
0 - AC6605-26 Present PowerOn Registered
t
Present PowerOn t Registered Normal NA
Normal Master
4 POWER
h
s :
press Ctrl+Y to switch
c e between the LSW unit and AC unit
u r
<Quidway> display deviceo
e s You have logged in to the AC unit
AC6605-AC's Device status:
R
Slot Sub Type Online Power
g Register
- - - - - - - - - - - - n- - - - - - - - - - - - - - - - - - - - - - -
Alarm Primary
n i Present PowerOn Registered Normal Master

0 - AC6605
a r
Le
o
Copyright Page 10
e n
m /
Command Views c o
i .
e w
a
u views. All
 CLI interfaces are classified into several command line
. h
commands must be executed in command line nviews. g
n i
a r its command view.
 You can run a command only after you enter
l e
/ /
# Connect to the switch. If the switch p : uses default settings, you
t t
enter the user view. h
<Quidway> s :
# Enter system-view andcpress e Enter to enter the system view.
< Quidway > system-view u r
s o
[Quidway]
R e
# Enter an interface view.
n g
n i
[Quidway] interface GigabitEthernet 0/0/1
[Quidwayr–GigabitEthernet0/0/1]
e a
L
o
Copyright Page 11
e n
m /
Command Line Help: Full Help c o
i .
e w
a
u function to
 When inputting a command, you can use the full help
. h
obtain keywords or parameters for the command. n g
n i
a r
# Enter a character string followed directly
e
l by a question mark (?)
/
/ this character string.
to display all commands that begin :with
< Quidway >? t p
h t
# Enter a command and a question mark (?) separated by a space.
All keywords associated with s : this command, as well as simple
c e
descriptions, are displayed.
u r
< Quidway >language-mode s o ?
e
Chinese ChineseRenvironment
English English n g environment
n i
a r
Le
o
Copyright Page 12
e n
/ m
Command Line Help: Partial Helpi.c o
w e
 If you enter only the first or first several characters ofua command,
a
. h
partial help provides keywords that begin with this n g character or
n i
character string. a r
l e by a question mark (?)
# Enter a character string followed directly
/ /
to display all commands that begin :with this character string.
t p
< Quidway >d?
h t
debugging delete
:
s display
dir e
ca character string followed directly by a
# Enter a command and
u r
question mark (?) to s odisplay all key words that begin with this
character string. Re
< Quidway >display n g b?
bfd n i bgp
bootrom a r bulk-stat
L e
o
Copyright Page 13
e n
m/
Command Line Help: Tab key c o
i .
e w
u a
 If only one keyword contains the incomplete keyword
. h
Enter an incomplete keyword. n g
n i
[Quidway] info-
a r
Press Tab.
l e
[Quidway] info-center / /
:
p the incomplete keyword
 If more than one keyword contains
t t
Enter an incomplete keyword.
h
s :
[Quidway] info-center l e
Press Tab. r c
o u
[Quidway] info-center
e s log
Continue to pressR Tab to display all the keywords.
[Quidway] info-centern g loghost
[Quidway]
i
ninfo-center logbuffer
a r
L e
Stop pressing Tab when you find the required keyword logbuffer.

o
Copyright Page 14
e n
/ m
Command Line Help: Error Messages c o
i .
w e
a
u the system
 If a command is entered and passes the syntax check,
. h
executes it. Otherwise, the system reports an error g
n message.
n i
r
aline
 Common error messages of the command
l e
/ /
p :
t t
< Quidway >display xyz h
^ s :
c e
Error: Unrecognized command
u r found at '^' position.
s o
Re
n g
n i
a r
Le
o
Copyright Page 15
e n
m/
Contents c o
i .
we
u a
. h
n g
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
Example for Configuring to Manageom /
. c
the AC6605 Through Telnet e i
w a
h u
The configuration roadmap is as follows:
g .
AC in
1. Log in to AC6605 through the console
interface. n
a r
MEth0/0/1 l e the wired-side system
2. Configure
/ /
name.
p :
GE0/0/1
t t Configure the wired-side
3.
h management IP address.
Switch
s :
ce 4. Configure the wired-side Telnet
Telnet
u r service.
s o
Re 5. Configure the wireless-side system
n g name.
n i 6. Configure the wireless-side
a r
LeAdmin PC PC management IP address.
e 7. Configure the wireless-side Telnet
Copyright
service.
Page 17
e n
/m
Configure the wireside telnet(1/2) c o
i .
w e
1. Log in to the LSW unit (wired-side) of the AC6605 u a through
the console port. . h
n g
n i
2. Set the device name of AC6605. a r
l e
<Quidway> system-view / /
[Quidway] sysname SwitchA tp
:
ht
3. Configure the management s : IP address of AC6605.
c e
u rMEth 0/0/1
[SwitchA] interface
s o
[SwitchA-MEth0/0/1]
R e ip address 10.10.10.10 255.255.255.0
n g
[SwitchA-MEth0/0/1] quit
n i
a r
L e
o
Copyright Page 18
e n
/m
Configure the wireside telnet(2/2) c o
i .
w e
u a
[SwitchA] aaa . h
g
n Huawei
[SwitchA-aaa] local-user Huawei password simple i
n telnet
[SwitchA-aaa] local-user Huawei service-type r
alevel 15
[SwitchA-aaa] local-user Huawei privilege l e
[SwitchA-aaa] quit / /
p :
t
ht
[SwitchA] user-interface vty s :0 4
c
[SwitchA-ui-vty0-4] authentication-modee aaa
u r
[SwitchA-ui-vty0-4] return
s o
<SwitchA> R e
n g
n i
a r
Le
o
Copyright Page 19
e n
Configure the wirelessside m /
c o
telnet(1/2) i .
e w
1. Log in to the AC unit (wireless-side) of the AC6605 u a through
the console port. . h
n g
n i
2. Set the device name of AC6605. a r
l e
<Quidway> system-view / /
[Quidway] sysname AC6605 tp
:
ht
3. Configure the management s : IP address of AC6605.
c e
u rEthernet 0/0/0
[AC6605] interface
s o
R e
[AC6605-Ethernet0/0/0] ip address 10.10.10.11
g
255.255.255.0
n
n i
[AC6605-Ethernet0/0/0] quit
a r
Le
o
Copyright Page 20
e n
Configure the wirelessside m/
c o
telnet(2/2) i .
we
u a
[AC6605] aaa . h
g
n Huawei
[AC6605 -aaa] local-user Huawei password simplei
n telnet
[AC6605 -aaa] local-user Huawei service-typer
alevel 15
l
[AC6605 -aaa] local-user Huawei privilegee
/
[AC6605 -aaa] quit :/ p
t
ht
[AC6605] user-interface vtys: 04
ce
[AC6605 -ui-vty0-4] authentication-mode aaa
u r
o
[AC6605 -ui-vty0-4] return
s
< AC6605 > R e
n g
n i
a r
Le
r e
o
e n
m/
Verify the configuration c o
i .
we
u a
<AC6605> telnet 127.0.0.1 . h
n g
Trying 127.0.0.1 ...
n i
Press CTRL+K to abort a r
Connected to 127.0.0.1 ... l e
Login authentication / /
p :
Username:Huawei t
Password:Huawei ht
Info: The max number of VTY s : users is 20, and the number
of current VTY users ce line is 4.
on
The current loginou
r
time is 2012-03-07 09:17:03.
e s
R
n g
n i
a r
Le
r e
o
e n
m/
Checking the Configuration c o
i .
e w
Logging In to the Devices Through the Console Interface. u a
. h
n g
<Quidway> display users i
n0
<Quidway> display user-interface console a r
<Quidway> display local-user l e
<Quidway> display access-user :/ /
t p
Logging In to the Devices Through ht the Telnet.
s :
<Quidway> displayrusers ce
<Quidway> display o u telnet server status
e s
R
n g
n i
a r
Le
o
Copyright Page 23
e n
m/
Contents c o
i .
we
u a
. h
n g
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Upgrading the AC c o
i .
we
u a
. h
AC
n g
n i
a r
le
MEth0/0/1
/ /
p
GE0/0/1:
t t
h
s : TFTP
Telnet
ce Switch
u r
s o
Re
n g
n i
a r Admin PC PC
Le
r e
o
e n
m/
Preparation for the Upgrade c o
i .
e w
u a
 Check the version of the running system software
. h
n g
<Quidway> display version
n i
Huawei Versatile Routing Platform Software a r
VRP (R) software, Version 5.70 (AC6605l V200R001C00) e
Copyright (C) 2003-2012 Huawei TECH / / CO., LTD
p :
Quidway AC6605-PWR Routing Switch
t t uptime is 0 week, 1 day,
23 hours, 33 minutes h
H852V26S 0(Master) : uptime s : is 0 week, 1 day, 23 hours, 33
minutes c e
u r
512M bytes DDR Memory
s o
128M bytes FLASH Re
Check the running
n g status of the AC6650.
<Quidway> n idisplay device
…… ar
Le
o
Copyright Page 26
e n
m/
Prepare for the Upgrade c o
i .
we
u a
 Check the running status of the AC6650
. h
ng
n i
<Quidway> display device a r
AC6605-26-PWR's Device status: l e
/ /
Slot Sub Type Online Power : Register Status Role
p
- - - - - - - - - - - - - - - - - - - - - - - -t-t- - - - - - - - - - - - - -
0 - AC6605-26 Present PowerOn h Registered Normal
Master s :
e
4 POWER Present rc PowerOn Registered Normal NA
u
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Download the System Software c o
i .
we
u a
. h
n g
n i
a r
le /
<Quidway> tftp 10.164.30.29 get s-s6605-b018.cc : /
t p
Info: Transfer file in binary mode. t
Downloading the file from thehremote TFTP server. Please
s :
wait.../
c e
TFTP: Downloading ther file successfully.
o u
41238675 bytes
e s received in 210 second.
R
n g
n i
a r
Le
o
Copyright Page 28
e n
Load the System Software and m /
c o
BootROM Program i .
w e
u a
<Quidway> startup system-software s-s6605-b018.cc. h
n g
n i
Warning: Basic BOOTROM will be upgraded. Continue?(Y/N)[N]: y
r
Upgrading BOOTROM,please wait for a moment
a
l e
Info: BOOTROM UPGRADE OK / /
:
tp for booting system
Info: Succeeded in setting the software
ht
s :
<Quidway> upgrade basic-bootrom s-s6605-b018.cc
Warning: Basic BOOTROM ce will be upgraded. Continue?(Y/N)[N]: y
u r
o
Upgrading BOOTROM,please wait for a moment
s
R e
[Slot 0]:
n g
i UPGRADE OK.
Info: BOOTROM
n
a r
Le
r e
o
e n
m/
Reboot the Device c o
i .
we
u a
<Quidway> reboot . h
n g
Info: The system is now comparing the configuration,
n i please
wait. r
a to the configuration
Warning: All the configuration will be savedl e
/
/ Continue?[Y/N]:y
file for the next startup:flash:/VRPcfg.zip,
:
p to the slot 0.
Now saving the current configuration t
ht
Info: Save the configuration successfully.
s :
System will reboot! Continue?[Y/N]: y
Info: system is rebooting c e,please wait…
r u
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
AP Upgrade c o
i .
we
u a
 Upgrade in AC Mode
. h
n g
 Upgrade in FTP Mode n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Upgrade in FTP Mode c o
i .
we
u a
. h
AC
n g
n i
a r
le
MEth0/0/1
/ /
p
GE0/0/1:
t t
h
s : FTP
Telnet
ce Switch
u r
s o
Re
n g
n i
a r Admin PC AP
Le
r e
o
e n
m/
Upgrade Procedure c o
i .
e w
a
u to FTP.
 Enter the wlan-ac view and set the upgrade mode
. h
n g
[AC6605-wlan-view]ap-update mode ftp -mode n i
a r
 Check the AP type in the wlan-ac view. l e
/ /
[AC6605-wlan-view]display ap-type:all
t p
All AP types information:
h t
------------------------------------------------------------------------------
s :
ID Type
c e
r
------------------------------------------------------------------------------
u
...... s o
8 WA633SNRe
...... n g
n i
------------------------------------------------------------------------------
ar
Total enumber: 13
L
o
Copyright Page 33
e n
m/
Upgrade Procedure(Cont.) c o
i .
we
u a
 Configure the FTP server
. h
n g
n i
a r
[AC6605-wlan-view]ap-update ftp-server X.X.X.X ftp-username
l
XXX ftp-password yyy (xxx and yyy indicatee the user name and
//
password for logging in to the FTP :server.)
t p
ht
 : upgrade version file. Do not
Specify the name of thesAP
c e
modify the file name. u r
s o
R e
n g
[AC6605-wlan-view]ap-update update-filename
n i
WA6X3XN_V200R001C00.bin ap-type 8
a r
Le
o
Copyright Page 34
e n
m/
Upgrade Procedure(Cont.) c o
i .
e w
u a
 When using the FTP mode, ensure that the AP can communicate
. h
with the FTP server and WA6X3XN_V200R001C00.bin n g is saved
n i
in the FTP root directory. a r
l e
/
 Run the following command to upgrade APs of a specified type, /
p :
t
ht
for example, WA633SN.
s :
[AC6605-wlan-view]ap-update c e multi-load ap-type 8
u rupdate. AP type WA633SN, AP number 5.
Info: Starting batch AP
s o
Re
n g
n i
a r
Le
o
Copyright Page 35
e n
m/
Check the AP Status c o
i .
we
u a
[AC6605-wlan-view]display ap all
. h
All AP information: n g
n i
----------------------------------------------------------------------------
AP AP Profile Region a r AP
l e
ID Type ID
/ / State
ID
:
----------------------------------------------------------------------------
p
0 WA633SN t t0 0 normal
1 WA633SN h 0 0 normal
s :
2 WA633SN
ce 0 0 normal
3 WA633SN u r 0 0 normal
4 WA633SN so 0 0 normal
R e
----------------------------------------------------------------------------
Total number: ng 5
i
r n
e a
L
r e
o
e n
m/
Check the AP Version c o
i .
we
u a
[AC6605-wlan-view]display ap-run-info id 0
. h
AP 0 run information: n g
n i
-----------------------------------------------------------------------------
Software version: V200R001C00 a r
l e
Hardware version: Ver.E
/ /
BIOS version: 017
p :
Domain: CN t t
Cpu type: CN5010 h
Cpu frequency: 500 MHZes
:
Memory type: K4T51163QG r c
o u
AP System software s description: WA633SN:V200R001C00
AP System hardware Re description: WA633SN:Ver.E
......
i ng
n
-------------------------------------------------------------------------
r
---- Le a
r e
o
e n
m/
Summary c o
i .
we
u a
 Huawei VRP basic command
. h
n g
a r
 AC and AP software upgrade way
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m /
Questions c o
i .
e w
a
u unit or
 How to view the AC current command line is LSW
. h
n g
AC unit,how to switch?
n i
a r
l e
/ /
 What kinds of upgrade mode support p : of AP?
t
ht
s :
c e
 What is command tor restart the AC?
o u
e s
R
n g
n i
a r
Le
o
Copyright Page 39
e n
m/
c o
i .
we
u a
. h
ng
n i
a r
Thank you le
// :
tp
www.Huawei.com
ht
s :
ce
ur
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
c o
i .
we
u a
. h
PoE Technology ng
n i
Introduction a r
/ le
/
t p:
ht
s :
ce www.huawei.com
u r
s o
Re
n g
n i
a r
L e
e
r
o
e n
m/
Objectives c o
i .
e
w
a
uto:
. h
n g
 Understand the PoE components
n i
a r
 Understand PoE budget l e
/ /
 Master the PoE configuration ofp:switch
t t
h
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyright Page 2
e n
m/
Contents c o
i .
we
u a
 PoE component introduce
. h
n g
 PoE budget n i
a r
 PoE configuration
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
PoE c o
i .
we
u a
 h supply
PoE (Power over Ethernet) refers to power
.
n g
over a 10BASE-T, 100BASE-TX, or 1000BASE-T n i
a r
Ethernet network, with the maximum l e reliable power
/ /
supply distance of 100 meters. p :
t t
h
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyright Page 4
e n
m/
PoE Terminology c o
i .
we
u a
 IEEE 802.3af PoE standard – up to 15.4W
. h
n g
 IEEE 802.3at-2009 PoE standard – up to
n i30W
a r
 PSE – Power Sourcing Equipment provides l e power
/ /
:
p supply
 PSU – Power Supply Unit – power t
ht
 PD – Powered Devices receiving
s : power
c e
 PI – Power interface u r
s o
Re
n g
n i
a r
Le
o
Copyright Page 5
e n
m /
PoE Components c o
i .
we
u a
. h
n g
n i IP Phone(PD)
a r
PI
/ le
/
t p: Wireless AP(PD)
Switch(PSE)
ht
s :
ce
r
ou
UPS PI IP Camera(PD)
e s
R
ng
AC6605(PSE)
n i Wireless AP(PD)
a r
L e
r e
o
e n
m/
802.3af and 802.at c o
i .
e w
Standard PoE parameters and comparison u a
. h
Property 802.3af g
802.3at
n
Stardard time 2003 n i
2009
r
a 25.50 W
Power available at PD 12.95 W
l e
Maximum power 15.40 W
/ / 34.20 W
delivered by PSE
p :
Power management Three power t tclass levels Four power class levels
h
Supported cabling Category
5 e s : 3 and Category Category 5
r c
o u
e s
R
n g
n i
a r
Le
o
Copyright Page 7
e n
m/
Power Levels Available c o
i .
we
u a
Power levels available . h
n g
class usage Power range i
Class description
n
[Watt]
a r
0 Default 0.44–12.94
/ le Classification
:/ unimplemented
0.44–3.84 p
1 Optional
t t Very Low power
2 Optional h
3.84–6.49 Low power
s :
ce
3 Optional 6.49–12.95 Mid power
4 Only valid for
u r 12.95–25.50 High power
802.3at devices
s o
R e
n g
n i
a r
Le
r e
o
e n
m/
PoE Components: PSE c o
i .
we
u a
 AC6605 and PoE switch
. h
n g
 Advantages
n i
a r
le
Remote management
Easy installation of UPS / /

t p:
No additional power cabling
ht

s: injector
Power adapter and Power
e
r c
 Disadvantages
o u
e s managed
Cannot be remotely
R
May requiregadditional configuration for AP
i n
r n power cabling
Additional
e a
L
r e
o
e n
m/
Contents c o
i .
we
u a
. h
n g
 PoE budget n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
PSE: AC6605 c o
i .
e w
 AC6605 supports dual power supply units for 1+1uredundancy
a
. h
n g
 24 PoE ports can be provided with power at
n i 15.4W
r
a (2 * 500W )
 24 PoE+ ports can be powered at 30.0W
l e
/ /
p :
t
ht
s :
c e
u r
s o
Re
n g
n i PoE Interfaces
24
a r
Le
o
Copyright Page 11
e n
m/
AC6605 PoE Budget c o
i .
e w
2 * 500W u a Power Supply
. h
n g
rni
a
/ le
/
t p:
ht
s :
Power Supply ce for PoE
Power Support ports
u r
s o
Re
•802.3af：24
500W – 380W
•802.3at：12
n g
500W n i500W 880W
•802.3af：24
a r •802.3at：24
Le
r e
o
e n
m/
PSE: Huawei PoE Switch c o
i .
we
u a
. h
gn
n i
S2700-9TP-PWR-EI
a r
S5700-24TP-PWR-SI
l e
/ /
t p:
S2700-26TP-PWR-EI
ht S5700-48TP-PWR-SI
s :
ce
u r
s o
R e
S3700-28TP-PWR-EI S5700-28C-PWR-EI
n g
n i
ar
Le S3700-52P-PWR-EI S5700-52C-PWR-EI
r e
o
e n
m/
24-Port PoE Switch PoE Budget i. c o
w e
u a
Power Supply Power for PoE h
Support ports
.
n g
250W – 123.2W rni •802.3af：8
a •802.3at：4
/ le •802.3af：24
500W – 369.6W /
t p: •802.3at：12
250W 250W ht
246.4W
•802.3af：16
s : •802.3at：8
ce 369.6W •802.3af：24
500W 500W
u r •802.3at：12
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
48-Port PoE Switch PoE Budget i. c o
w e
u a
Power Supply Power for PoE
. h
Support ports
n g
250W – 123.2W rni •802.3af：8
a •802.3at：4
/ le •802.3af：24
500W – 369.6W /
t p: •802.3at：12
250W 250W
t
h246.4W •802.3af：16
s : •802.3at：8
ce •802.3af：48
500W 500W
ur 739.2W
•802.3at：24
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
PSE: Power Injector c o
i .
we
u a
. h
n g
n i
a r
Switch / le
/
t p:
To Switch ht
s :
ce
r
ou
Power Injector
e s To AP
R
n g
n i
a r AP
Le
r e
o
e n
m/
PoE Components：PSU c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
500
o
s W AC PoE Power Supply
R e
1. Indicator 2.g Handle
n 3. Fan 4. Switch 5. AC power socket
n i
a r
Le
Note : PoE Power and non-PoE Power can not be inserted together
r e
o
e n
m/
PoE Components：PD c o
i .
we
u a
. h
AP6010SN n g AP6010DN
802.11b/g/n n i 802.11a/b/g/n
802.3af 6.5W a r 802.3af 10.2W
/ le
/
t p:
AP6310SN
802.11b/g/n ht AP6510DN
802.11a/b/g/n
802.3af 6.5Ws : 802.3at 24W
ce
u r
s o
ReAP6610DN
ng
AP7110DN
ni
802.11a/b/g/n 802.11a/b/g/n
a r No PoE 28W 802.3at13.7W
L e
r e
o
e n
m/
PoE Power-Up Process c o
i .
we
u a
. h
ng
Classification
n i
a r
/ le
/
Detection
t p: Powerup
ht
s :
ce
u r
s o
Re
n g Disconnection
Power
managemen
n i t
a r
Le
r e
o
e n
m/
Contents c o
i .
we
u a
. h
n g
 PoE budget n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
Configuring the PoE Function m /
c o
Globally i .
w e
system-view u a
. h
poe max-power maximum-power [ slot slot-id ]
n g
i the device.
(Optional) Setting the maximum output power of
n
a r
poe power-management { auto | manual l } e[ slot slot-id ]
(Optional) Configuring the PoE power / /
p : supply management mode
t
poe power-on interface interface-type ht interface-number or poe
power-off interface interface-type s : interface-number
(Optional) Manually powering c e on or powering off the PD connected
u r
to an interface
s o
R e
poe power-reserved g reserved-power-percent [ slot slot-id ]
in the percentage of the reserved PoE power
(Optional) nSetting
against the a r total PoE power
Le
o
Copyright Page 21
e n
Configuring the PoE Function on an m /
c o
Interface i .
w e
system-view u a
. h
interface interface-type interface-number
n g
n i
poe enable a r
Enable the PoE function on an interface. le
/ /
poe power maximum-power t p:
t
h power of an interface.
Optional: Set the maximum output
s :
c e| low }
poe priority { critical | high
u rsupply priority of an interface.
Optional: Set the power
s o
R e
poe legacy enable
n g
Optional: Enablen i an interface to check compatibility of PDs.
a r
Le
o
Copyright Page 22
e n
Example for Configuring PoE on the m /
c o
Switch i .
e
aw uRouter
 The AP1 is connected to
. h
GigabitEthernet 0/0/1 on the AC6605
n g
rni
 the maximum power consumption of
a
the AP1 is 6500 mw
/ le
/ AC
 The AP2 is connected to
tp:
GigabitEthernet 0/0/1 on the AC6605 h t
s : PoE G0/0/1 PoE G0/0/12
 the maximum power consumption

c e of
the AP2 is 10200 mw ur AP
s o
 Switch provides power Re for AP1 and
n g
n i
the AP2 in automatic mode
a r Mobile PC
L e
o
Copyright Page 23
e n
Example for Configuring PoE on the m /
c o
Switch i .
w e
# enable PoE on GigabitEthernet 0/0/1 of the Switch a u
. h
[Switch] interface gigabitethernet 0/0/1
n g
[Switch-GigabitEthernet0/0/1] poe enable
n i
[Switch-GigabitEthernet0/0/1] poe power 6500a r
e
[Switch-GigabitEthernet0/0/1] poe prioritylcritical
[Switch-GigabitEthernet0/0/1] quit :/
/
t p
# Enable PoE on GigabitEthernet ht0/0/2 of the Switch
<Switch> system-view s :
c e
[Switch] interface gigabitethernet
u r 0/0/2
[Switch-GigabitEthernet0/0/2]
s o poe enable
R e
[Switch-GigabitEthernet0/0/2] poe power 10200
g
[Switch-GigabitEthernet0/0/2] quit
n supply mode of the Switch to automatic.
i
rn power-management auto
# Set the power
[Switch] apoe
Le
o
Copyright Page 24
e n
m/
i .
w e
<Quidway> display poe information u a
PSE Information of slot 0: . h
n g
User Set Max Power(mW) : 739200
n i
POE Power Supply(mW) : 369600
a r
le
Available Total Power(mW) : 369600
Total Power Consumption(mW): 0
/ /
Power Peak Value(mW) :0
t p:
Power-Management Mode
Power High Inrush
: auto
: disable ht
s :
<Quidway> display PoE power c e interface gigabitethernet 0/0/1
Port PD power(mW) u r: 5076
s :o0
Re
Port PD class
Port PD reference power(mW) : 15400
Port user set max n g power(mW) : 30000
Port PD peak n ipower(mW) : 5454
a r power(mW) : 4825
Le
Port PD average

o
Copyright Page 25
e n
m/
i .
we
<Quidway> display poe power-state slot 0 u a
PORTNAME POWERON/OFF ENABLED PRIORITY STATUS
. h
GigabitEthernet0/0/1 on enable Critical Powered
n g
GigabitEthernet0/0/2
on
off
enable Low
enable Low
Powered
Detecting
n i
GigabitEthernet0/0/4 off enable Low Detecting
a r
le
/
/
p:
t
off
off
enable Low
enable Low
ht
Detecting
Detecting
:
GigabitEthernet0/0/13 off enable Low
e s Detecting
c
off
off
u r
enable Low
enable Low
Detecting
Detecting
GigabitEthernet0/0/17 off
s o
enable Low Detecting
Re
g
i noff
off
enable Low
enable Low
Detecting
Detecting
r n
a
Le
r e
o
e n
m/
Summary c o
i .
we
u a
. h
n g
 PoE budget n i
a r
 The PoE configuration
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m /
Questions c o
i .
e w
a
u802.3at?
 What is the difference between the 802.3af and
. h
n g
n i
a r
 What are the components of the PoE
e
l?
/ /
p :
t
ht
 Please list the AP PoE power
s : solution.
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyright Page 28
e n
m/
c o
i .
we
u a
. h
ng
n i
a r
Thank you le
// :
tp
www.huawei.com
ht
s :
ce
ur
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
c o
i .
we
u a
h
AC6605 WLAN in g .
r n
Configuration Roadmap
l ea
/ /
t p:
ht
s :
ce www.Huawei.com
u r
s o
Re
n g
n i
a r
L e
e
r
o
e n
m/
O objectives c o
i .
e w
 Upon completion of this course, you will be h
a
u to:
able
g .
Know the WLAN Features Supported by i n AC
the

r n
Master the WLAN Configuration Roadmap ea of Huawei WLAN

/ l
network : /
t p
 Master the basic WLAN configuration h t command
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyright Page 2
e n
m/
Cocontents c o
i .
we
u a
 WLAN Features Supported by the AC
. h
n g
 WLAN Configuration Roadmap n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
WLAN Features Supported by the om /
. c
AC6605 e i
w a
RFAP managemen
  h u
g .
managementt
RF managementt in

rn
a
 WLAN access security
/ le
/
 WLAN QoS management t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
AP Management c o
i .
we
u a
 Adding an Offline AP
. h
n g
 Configuring AP Attributes n i
a r
 AP Upgrade
/ le
/
 AP Authentication t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
RF Management c o
i .
we
u a
 WMM Profile
. h
n g
 Radio Profile n i
a r
 AP Radio Resource Management
/ le
/
 AP Load Balancing Group t p:
ht
 Radio Working Mode s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
WLAN Access Security c o
i .
ew
u a
WLAN Security Authentication h
Encryption
n g.
OPEN open n i open
a r
WEP Share-key / le WEP
/
t p:
WPA t
802.1x+PEAP / PSK
h TKIP
s :
WPA2
ce
802.1x+PEAP / PSK CCMP
o ur
WAPI
e s WAI WPI
R
n g
n i
a r
Le
r e
o
e n
m/
WLAN QoS Management c o
i .
we
u a
 Radio QoS Policy
. h
n g
 VAP QoS Policy n i
a r
 Rate limit
/ le
/
 the User Priority and CAR t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Cocontents c o
i .
we
u a
. h
n g
 WLAN Configuration Roadmap n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
WLAN Configure Topology c o
i .
we
u a
SSID: Huawei-1
. h
Service vlan 101
g
Networking Topology of
n configurations
n i
WLAN service
a r
/ le
/
p:
AP 1
Region 101
t t
directly forward h
Ge0/0/1 Ge0/0/3
s :
Ge0/0/2
SSID: Huawei-2
ce L2 switch Ge0/0/2 Aggregation
r
Service vlan 102
Router
o u Ge0/0/1 switch
s
Re
ng
AC6005
ni
AP 2
Region 102
a r
L e
r e
o
e n
m /
WLAN Service Data Plan c o
i .
w e
Item Data AP 1 Data AP 2
u a
. h
WLAN service open system authentication and no encryption
n g
n i
r
AP region AP1: 101 AP2: 102
a
leSSID: Huawei-2
Name: Huawei-1 Name: Huawei-2
/
SSID: Huawei-1
Service set
/
WLAN virtual interface: WLAN-ESS 0 WLAN virtual interface: WLAN-ESS 1
p:
Data forwarding mode: direct forwarding Data forwarding mode: direct forwarding
User VLAN
t
AP1: VLAN101 10.1.101.0/24t AP2: VLAN102 10.1.102.0/24
h
VLANs on the Switch VLAN 100/101/102
s :
AC carrier ID/AC ID other/1
ce
u r
o
Management IP address of
VLANIF interface address: 10.1.100.1/24
the AC
e s
Address pool for APs
R10.1.100.2-10.1.100.254/24
Gateway address for APs
n g 10.1.100.1/24 (IP address of the AC)
n i
DHCP server
a r AC
Le
r e
o
e n
m/
Wiredside Basic Configure c o
i .
we
u a
Ge0/0/1 Ge0/0/3 Router
. h
Ge0/0/2
ng
L2 switch Ge0/0/2 Aggregation
n i
switch
system-view
a r
le
Ge0/0/1 vlan batch 100 to 102
/ /
p:
interface GigabitEthernet 0/0/1
AC6005
t tport link-type trunk
h port trunk pvid vlan 100
s : port trunk allow-pass vlan 100 101
ce
Configure L2 switch u r interface GigabitEthernet 0/0/2
s o port link-type trunk
Re
port trunk pvid vlan 100
port trunk allow-pass vlan 100 102
n g
n i interface GigabitEthernet 0/0/3
a r port link-type trunk
Le port trunk allow-pass vlan 100 to 102
r e
o
e n
Wireside Basic Configure: m /
c o
Aggregation switch i .
w e
u a
. h
Ge0/0/2
n g
n i
switch system-view
a r
le
Ge0/0/1
vlan batch 100 to 102
/ /
AC6005
p :
t
htport trunk allow-pass vlan 100 to 102
port link-type trunk
s : interface GigabitEthernet 0/0/3

Configure Aggregationce
u r port link-type trunk
switch
s o port trunk allow-pass vlan 100 to 102
R e
n g
n i
a r
Le
o
Copyright Page 13
e n
m /
Wired side of AC Configure c o
i .
we
u a
. h
Ge0/0/2
n g
Inside the AC6005n
i
switch
a r
Ge0/0/1
l e XGe0/0/27
/ / XGe0/0/1
p :
AC6005
t t LSW ACU
h
s :
ce system-view
u r sysname LSW
s
Configure the wiredo side vlan batch 100 to 102
Re
interface XGE0/0/27
n g port trunk allow-pass vlan 100 to 102
n i interface XGigabitEthernet 0/0/27
a r port link-type trunk
Le port trunk allow-pass vlan 100 to 102
r e
o
e n
m /
Wireless side of AC Configure i. c o
w e
u a
. h
Ge0/0/2
n g
Inside the AC6005n
i
switch
a r
Ge0/0/1
l e XGe0/0/1 XGe0/0/1
/ /
p :
AC6005
t t LSW ACU
h
s :
ce
u r system-view
configure wireless s oside sysname AC
interface XGE0/0/1 R e interface XGigabitEthernet 0/0/1

n g port trunk allow-pass vlan 100 to 102
n i
a r
L e
o
Copyright Page 15
e n
m /
WLAN Configuration Roadmap c o
i .
w e
u a
Configure carrier ID and AC ID
1 Configure basic AC
. h
Create a VLANIF interface
attributes
g
Configure the country-code
n
(Optional) Enable DHCP
n i
Configure the AC source interface
a r
le
2 Enable the AC to Configure an AP region
Configure the
communicate with Aps
/
AC to manage fit Configure an AP profile
/ Configure the AP authentication mode
p:
Aps
3/4/5 Configure the AC

t t
to deliver VLAN service h Create a security
profile
Create a traffic
profile
to Aps
s : Apply to
ce
r
ou
Configure a service set
es
4 Configure service set Apply to
Create a
WMM profile
R
ng
Create a VAP
Bind to for a radio Create a VAP
n
Create a radioi Specify a radio
profile
r for AP
ea
Bind to Apply the VAP to an AP
L
3. Configure radios 5 Configure VAP
r e
o
e n
m/
WLAN Configure Topology c o
i .
we
u a
SSID: Huawei-1
. h
Service vlan 101
g
Networking Topology of
n configurations
n i
WLAN service
a r
/ le
/
p:
AP 1
Region 101
t t
directly forward h
Ge0/0/1 Ge0/0/3
s :
Ge0/0/2
SSID: Huawei-2
r
Service vlan 102
Router
o u Ge0/0/1 switch
s
Re
ng
AC6005
ni
AP 2
Region 102
a r
L e
r e
o
e n
m /
Configure Basic AC Attributes i. c o
w e
u a
Configure carrier ID and AC ID
h
Configure the country-code
.
attributes
g
n
ni
a r
le
2 Enable the AC to
Configure the
AC to manage fit
/ /
p:
Aps

t t
to deliver VLAN service h
to Aps
s :
system-view c e
r id { cmcc | ctc | cuc | other } ]
WLAN ac-global ac id ac-id [ucarrier
WLAN ac-global country-code s o country-code
Re
<AC>system-view n g
n i ac id 1 carrier id other
[AC] WLAN ac-global
[AC] WLAN a rac-global country-code CN
Le
o
Copyright Page 18
e n
Configure Basic AC m /
c o
Attributes(Cont.) i .
w e
u a
h
.
attributes
g
(Optional) Enable DHCP
n
Create a VLANIF interface
n i
a r
le
2 Enable the AC to
Configure the
AC to manage fit
/ /
[AC] dhcp enable
p:
Aps
[AC] interface vlanif100
t t
[AC-Vlanif100] ip address 10.1.100.1 24
to deliver VLAN service h [AC-Vlanif100] dhcp select interface
to Aps
s : [AC-Vlanif100] quit
ce [AC] interface vlanif101
u r [AC-Vlanif101] ip address 10.1.101.1 24
s o [AC-Vlanif101] dhcp select interface
Re [AC-Vlanif101] quit
n g [AC] interface vlanif102
n i [AC-Vlanif102] ip address 10.1.102.1 24
a r [AC-Vlanif102] dhcp select interface
Le
[AC-Vlanif102] quit
r e
o
e n
Configure Basic AC m /
c o
Attributes(Cont.) i .
w e
u a
h
.
attributes
g
n
n i
Configure the AC source interface
a r
le
2 Enable the AC to
Configure the
AC to manage fit
/ /
p:
Aps

t t
to Aps
s :
ce
u r
o
WLAN ac source interface { LoopBack loopback-num | Vlanif vlanif-id }
s
Re
n g
[AC-WLAN-view] WLAN ac source interface vlanif 100
n i
a r
Le
r e
o
e n
Enable the AC to Communicate withom /
. c
Aps e i
w a
h u
Configure carrier ID and AC ID
.
attributes
g
Configure the country-code
n
n i
a r
le
2 Enable the AC to Configure an AP region
Configure the
/
AC to manage fit Configure an AP profile
/ Configure the AP authentication mode
p:
Aps

t t
to Aps
s :
c e # Add AP1 to AP region 101 and AP2 to
# Configure AP regions 101 u r 102. AP region 102.
and
s o [AC-WLAN-view] ap id 0
[AC-WLAN-view] ap-region R e id 101 [AC-WLAN-ap-0] region-id 101
[AC-WLAN-ap-region-101]g quit
nap-region id 102
[AC-WLAN-ap-0] quit
[AC-WLAN-view]
n i [AC-WLAN-view] ap id 1
a r
AC-WLAN-ap-region-102] quit [AC-WLAN-ap-1] region-id 102
L e [AC-WLAN-ap-1] quit

o
Copyright Page 21
e n
Enable the AC to Communicate withom /
. c
Aps(Cont.) e i
w a
h u
attributes
g .
in
Configure the AC source interface
r n
a
le
2 Enable the AC to Configure an AP region
Configure the
/
AC to manage fit Configure an AP profile(optional)
/ Configure the AP authentication mode
p:
Aps

t t
to Aps
s :
ce
u r
o
ap-auth-mode { mac-auth | no-auth | sn-auth }
s
Re
n g
i
# Set the AP authentication mode to no-auth.
n
r
[AC-WLAN-view] ap-auth-mode no-auth
a
Le
r e
o
e n
m /
Configure Radios c o
i .
w e
u a
. h
# Create a WMM profile wmm-1 and usegthe default settings.
in
r n
Configure the AC
[AC] WLAN
[AC-WLAN-view] wmm-profile e a wmm-1 id 1
to manage fit Aps
/ l quit
name
[AC-WLAN-wmm-prof-wmm-1]
:/
t p
ht
3/4/5 Configure the AC to Create a security
profile
Create a traffic
profile
Aps
s :
deliver VLAN service to
Apply to
ce
u r Configure a service set
s o 4 Configure service set
Re
Create a Apply to
WMM profile
ng
Create a VAP
n
Create a radioi Specify a radio
profile
r for AP
ea
L
r e
o
e n
m /
Configure Radios(Cont.) c o
i .
w e
u a
. h
# Create a radio profile radio-1 and bind the WMM profile wmm-
1 to it. n g
n i
a
[AC-WLAN-view] radio-profile name radio-1r
le
Configure the AC
[AC-WLAN-radio-prof-radio-1] wmm-profile name wmm-1
/
to manage fit Aps
/
[AC-WLAN-radio-prof-radio-1] quit
tp:
3/4/5 Configure the AC to
ht Create a security
profile
Create a traffic
profile
Aps
s :
Apply to
ce
r
ou
es
Create a
WMM profile
R
ng
Create a VAP
n i
Create a radio Specify a radio
profile
r for AP
ea
L
r e
o
e n
m /
Configure Radios(Cont.) c o
i .
w e
# Bind the radio profile radio-1 to radios of AP1 and AP2.
u a
. h
[AC-WLAN-view] ap 0 radio 0
n g
[AC-WLAN-radio-0/0] radio-profile name radio-1
n i
[AC-WLAN-radio-0/0] quit
a r
le
Configure the AC
/
to manage fit Aps
/
[AC-WLAN-radio-1/0] radio-profile name radio-1
tp:
h
3/4/5 Configure the AC tot Create a security
profile
Create a traffic
profile
Aps
s :
Apply to
ce
r
ou
es
Create a
WMM profile
R
ng
Create a VAP
n i
Create a radio Specify a
profile
r radio for AP
ea
L
r e
o
e n
m /
Configure Service Set c o
i .
w e
# Create a security profile.
u a
. h
Create a security profile security-1, and set the authentication mode to
g
WEP open system authentication and the encryption mode to no
n
encryption.
n i
a r
le
Configure the AC [AC-WLAN-view] security-profile name security-1 id 1
/
to manage fit Aps [AC-WLAN-sec-prof-security-1] wep authentication-method open-system
/
[AC-WLAN-sec-prof-security-1] security-policy wep
p:
[AC-WLAN-sec-prof-security-1] quit
t
h
3/4/5 Configure the AC tot Create a
security profile
Create a traffic
profile
Aps
s :
Apply to
ce
r
ou
es
Create a
WMM profile
R
ng
Create a VAP
n i
profile
r radio for AP
ea
L
r e
o
e n
m /
Configure Service Set(Cont.) c o
i .
w e
u a
. h
# Configure a traffic profile to specify the QoS g
Create a traffic profile traffic-1 and use thei n policy.
r n default settings.
[AC-WLAN-view] traffic-profile name a

Configure the AC
l e traffic-1
/
to manage fit Aps [AC-WLAN-traffic-prof-traffic-1] quit
: /
t p
ht
3/4/5 Configure the AC to Create a
security profile
Create a traffic
profile
Aps
s :
Apply to
c e
u r Configure a service set
s o 4 Configure service set
Re
Create a Apply to
WMM profile
ng
Create a VAP
n i
profile
r radio for AP
ea
L
r e
o
e n
m /
Configure Service Set(Cont.) c o
i .
w e
u a
. h
Configure WLAN-ESS interfaces. n g
n
Create service sets for AP1 and AP2, and bind:i
the traffic profile
a r
security profile
le
Configure the AC
/
to manage fit Aps
WLAN-ESS service
/
tp:
h
security profile
Create a traffic
profile
Aps
s :
Apply to
ce
r
ou
es
Create a
WMM profile
R
ng
Create a VAP
n i
profile
r radio for AP
ea
L
r e
o
e n
m/
Configure WLAN-ESS Interfaces i. c o
w e
u a
[AC] interface WLAN-ess0 . h
[AC-WLAN-ESS0] port link-type hybrid n g
[AC-WLAN-ESS0] port hybrid untagged vlan 101
rni
[AC-WLAN-ESS0] dhcp enable
a
[AC-WLAN-ESS0] quit
/ le
/
[AC] interface WLAN-ess1
t p:
[AC-WLAN-ESS1] port link-type hybrid
[AC-WLAN-ESS1] port hybrid untagged vlan 102 ht
[AC-WLAN-ESS0] dhcp enable
s :
[AC-WLAN-ESS1] quit
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Create Service Sets c o
i .
we
u a
[AC-WLAN-view] service-set name Huawei-1 . h
[AC-WLAN-service-set-Huawei-1] ssid Huawei-1 n g
[AC-WLAN-service-set-Huawei-1] traffic-profile name traffic-1 n i
[AC-WLAN-service-set-Huawei-1] security-profile name security-1
a r
[AC-WLAN-service-set-Huawei-1] WLAN-ess 0
/ le
[AC-WLAN-service-set-Huawei-1] service-vlan 101
/
[AC-WLAN-service-set-Huawei-1] forward-mode direct-forward
t p:
[AC-WLAN-service-set-Huawei-1] quit
ht
[AC-WLAN-view] service-set name Huawei-2
s :
ce
[AC-WLAN-service-set-Huawei-2] ssid Huawei-2
u r
[AC-WLAN-service-set-Huawei-2] traffic-profile name traffic-1
s o
[AC-WLAN-service-set-Huawei-2] security-profile name security-1
Re
[AC-WLAN-service-set-Huawei-2] WLAN-ess 1
g
[AC-WLAN-service-set-Huawei-2] service-vlan 102
n
i
[AC-WLAN-service-set-Huawei-2] forward-mode direct-forward
n
r
[AC-WLAN-service-set-Huawei-2] quit
a
Le
r e
o
e n
m /
Configure VAP c o
i .
w e
Configure VAPs for APs and deliver VAP parameters.
u a
. h
# Bind radios of AP1 and AP2 to service sets Huawei-1 and Huawei-2.
n g
n i
r
[AC-WLAN-radio-0/0] service-set name Huawei-1
a
le
Configure the AC [AC-WLAN-radio-0/0] quit
/
to manage fit Aps
/
[AC-WLAN-radio-1/0] service-set name Huawei-2
tp:
h
security profile
Create a traffic
profile
Aps
s :
Apply to
ce
r
ou
Configure a service set
es
Create a
WMM profile
R
ng
Create a VAP
Bind to for a radio Create a VAP
n i
profile
r radio for AP
ea
L
r e
o
e n
m /
Configure VAP(Cont.) c o
i .
w e
u a
. h
# Deliver VAP parameters to APs. n g
n i
[AC-WLAN-view] commit ap 0 a r
le
Configure the AC
[AC-WLAN-view] commit ap 1
/
to manage fit Aps
/
tp:
h
security profile
Create a traffic
profile
Aps
s :
Apply to
ce
r
ou
Configure a service set
es
Create a
WMM profile
R
ng
Create a VAP
Bind to for a radio Create a VAP
n i
profile
r radio for AP
ea
Bind to Apply the VAP to an
AP
L
r e
o
e n
m/
Configuration Review c o
i .
we
u a
SSID: Huawei-1(open)
. h
AC carriey id 1 code id 1
Service vlan 101
n
AC country code CN g
Direcrt forward mode
n i
AC source interface vlan 100
r
Vlan 100 10.1.100.1 (DHCPSRV)
a
le
Vlan 101 10.1.101.1 (DHCPSRV)
/ /
Vlan 102 10.1.102.1 (DHCPSRV)
p:
AP 1
Region 101
t t
directly forward h
Ge0/0/1 Ge0/0/3
s :
Ge0/0/2
SSID: Huawei-2(open)
r
Service vlan 102
Router
u
Direcrt forward mode
o
Ge0/0/1 switch
s
Re
Dot1q vlan
100 101 102
n g AP 2
n i Region 102
a r AC6005
Le
r e
o
e n
m/
c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Summary c o
i .
we
u a
. h
n g

n
WLAN Configuration Roadmap of HuaweiiWLAN network
a r
 Basic WLAN configuration command l e
/ /
p :
t t
h
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyright Page 36
e n
m /
Questions c o
i .
e w
u a
 What are need configure about basic AC attributes?
. h
n g
n i
a r
 What are the AP join the AC three authentication l e modes?
/ /
p :
t
ht
 How to submit the configuration
s : to take effect on the AP?
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyright Page 37
e n
m/
c o
i .
we
u a
. h
ng
n i
a r
Thank you le
// :
tp
www.Huawei.com
ht
s :
ce
ur
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
c o
i .
we
u a
. h
ng
WLAN Security rn i
a
/ le
/
t p:
ht
s :
ce www.Huawei.com
u r
s o
Re
n g
n i
a r
L e
e
r
o
e n
m/
Objectives c o
i .
e
w
a
uto:
. h
n g
 Clear the Encryption Suites of WLAN
n i
a r
 Clear the Authentication Methods ofleWLAN
/ /
 Master the configuration of Huawei p : WLAN security
t t
h
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyright Page 2
e n
m/
Contents c o
i .
we
u a
 Security Overview
. h
n g
 WLAN Encryption Suites n i
a r
 WLAN Authentication Methods
/ le
/
 WLAN security configuration t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Security Overview c o
i .
we
u a
 Authentication
. h
n g

n i
Ensures that only authorized users with proper credentials are allowed to use
the network
a r
e
Optional bi-directional authentication. A userlcan authenticate the server and

/ /
a server authenticates its user
p :
t t
 Data Encryption and Integrity h
s : of data transmitted through the air


c e
Encryption Suites ensure privacy
u r(cyclic redundancy check) ensure integrity

 Hashing, MICs and CRC
s o

Re 2 (WEP, TKIP, AES) or Layer 3 (VPN)
Can be done at Layer
n g
n i
a r
Le
o
Copyright Page 4
e n
m/
Contents c o
i .
we
u a
. h
n g
a r
/ le
/
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Encryption Suites c o
i .
we
u a
. h
n g
n i
a r
/ le
/
p:
Security Level
t t
h
s :
ce
ur
s o
Re
n g
n i
a r Encryption Suites
Le
r e
o
e n
m/
Encryption Suites -WEP c o
i .
we
u a
 Wired Equivalent Privacy (1997)
. h
g
 in distribution
Static WEP: uses static 64 or 128 bit keys, manual
n
a r
 Dynamic WEP: dynamic keys generatedein 802.1X process by
/ l
authentication server with periodic key : / rotation.
t p
 Keys made up of 24-bit Initialization
ht Vector (IV) and either a 40-bit
or 104-bit key s :
c e
u r environments because of many
 Not used in professional
s o
weaknesses including Re
n g
n i
a r
Le
o
Copyright Page 7
e n
m/
WEP Encryption c o
i .
we
u a
IV(24-bit) Key(40/104-bit)
. h
ng
n i
Plain Textar
RC4
l e
/ /
p :
t t
Key Stream h XOR Cipher Text
s :
ce
u r
s o
Re
n g
n i
ar
MAC IV Encrypted Data FCS
Le
r e
o
e n
m/
Encryption Suites - WPA/TKIP c o
i .
e w
a
u standard
 WPA (Wi-Fi Protected Access) was an interim security
. h
g
n Network)
 Subset and substitute for 802.11i RSN (Robust Secure
n i
r
a that implemented
 Used the same hardware as previous Wifi cards
l e
WEP
/ /
p :
t
ht
 WPA-PSK also called WPA-Personal
 Pre-shard Key for authentication

s :
c e

u
TKIP encryption (Temporalr Key Integrity Protocol)
s o
 WPA-Enterprise e
R
n gEAP Authentication and Key Management
 802.1X and
n i
a rEncryption
Le
 TKIP

o
Copyright Page 9
e n
TKIP: Longer Key, Longer m/
c o
Initialization Vector i .
e w
u a
IV…………(48-bit)
. h
Key(PTK)…………(128-bit)
n g
n i
a r
l e
Plain Text:/
/
RC4
t p
ht
es:
Key Stream
r c XOR Cipher Text
o u
s
Re
n g
n i
ar
MAC IV Encrypted Data FCS
Le
r e
o
e n
m/
TKIP: Per-Packet Key Mixing c o
i .
we
Transmit u a
Packet Number
MAC Adress . h
n g
n i
a r
le
IV…………(48-bit) Mixer Key(PTK)…………(128-bit)
/ /
Pharse 1 KEY p:
t Plain Text
ht
s :
RC4
ce
u r
s o
ReKey Stream XOR Cipher Text
n g
n i
a r
LeMAC IV Encrypted Data FCS
r e
o
e n
m/
TKIP: Message Integrity Check i. c o
w e
u a
h
. Key
DA SA Playload MIC
n g
n i
a r
/ le
/
t p:
ht
: MIC
e s
r c
o u
s
Re
n g
i 8-Byte
a rn
L e MIC
r e
o
e n
Encryption Suites Wi-Fi Protectedom /
. c
Access 2.0/802.11i e i
w a
 u
802.11i (2004) defined as “robust security network h(RSN)
g .
 Stronger encryption and better authentication method
in and 4 way
r n
handshaking process
ea
/ l

:/
Required CCMP protocol using AES encryption
AES: Advanced Encryption Standardt p

ht

s :
CCMP: Counter Mode with Cipher-Block Chaining Message
ce
Authentication Code Protocol
u r(uses pre-shared key) and CCMP/AES

 WPA2-PSK Personal
s o
 WPA2-Enterprise Re uses 802.1X and CCMP/AES
n g
n i
a r
Le
r e
o
e n
m/
Contents c o
i .
we
u a
. h
n g
a r
/ le
/
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Authentication Methods c o
i .
we
u a
. h
n g
n i
a r
/ le
/
p:
Security Level
t t
h
s :
ce
ur
s o
Re
n g
n i
a r Authentication methods
Le
r e
o
e n
m/
SSID Hidden c o
i .
we
 SSID hidden is not security (此处要继续补充) h u a
g .
in
rn
a
/ le
Hide SSID:Huawei
/
t p:
ht
s :
ceAP
u r
AC
s o
Re
SSID:Huawei
n g
n i
a r
Le SSID:Huawei SSID:Huawei
r e
o
e n
m/
MAC Authentication c o
i .
we
u a
MAC Authentication Table：
. h
MAC:000FE20166BF
n g
MAC:000FE20166DD
n i
MAC:000FE20166DF
a r
MAC:000FE2016612
/ le
MAC:000FE20166E1 SSID:Huawei /
t p:
ht
s :
ceAP
u r
AC
s o
Re MAC:000FE20166BE
n g
n i
a r
Le MAC:000FE20166DD MAC:000FE20166DF
r e
o
e n
m/
Web Portal Authentication c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
802.1X c o
i .
we
u a
 Standard for port-based access control
. h
g
 in within the
Utilizes L2 EAP (Extensible Authentication Protocol)
n
a r
802.1X framework
l e
/

:/ authentication protocols
EAP encapsulates several (“extensible”)
p
t
 PEAP
ht
s :
 EAP-TLS
ce
EAP-TTLS u r

s o
 Cisco LEAP Re
n g
n i
a r
Le
r e
o
e n
m/
802.1X Components c o
i .
we
u a
 Supplicant (client system software)
. h
n g
 Authenticator (Access Controller)
n i
a r
 Authentication Server (backend server) e
/ l
: /
t p
Supplicant htAuthenticator Authentication
s : Server
c e
u r
s o
Re
n g
PC
n i AP AC Radius Server
a r
L e
o
Copyright Page 20
e n
m /
EAP Overview c o
i .
e w
a
u the
 Supplicant communicates with Authentication Server through
. h
Authenticator
n g
n i
Authenticator encapsulates 802.1X in RADIUSar and forwards to
e

Authentication Server / l
: /
t p
 EAP exchange happens between supplicant
h t and authentication server
 On success, server delivers a s :success message to authenticator

c e
(RADIUS) and supplicant
u r (EAP)
s o
 Details often hidden
Re from authenticator
n gis EAP agnostic
 The controller
n i
a r
Le
o
Copyright Page 21
e n
m /
802.1X Process c o
i .
ew
802.1X Access Control – Sequence of events u a
. h
Request Access n g
n i
Request Identity
a r
e
Authentication Server
Response Identity (anonymous)
/ l Identity
Response
/
Authenticator
p :
t PEAP Start
Client
Client Key exchange ht Certificate

Cert. verification
s :
ce Request credentials
Response credentialsu r
s o
R e Success
n g
n i
a r
Le
r e
o
e n
m/
EAP Exchange c o
i .
we
u a
. h
(Controller used as pass-through doesn’t have to
n g know EAP type)
n i
a r
l e
Supplicant /
Authenticator
/ Authentication
p : Server
t t
h
s :
c e
u r
PC s o AP AC RadiusServer
R e
n g
n i
a r
Le
o
Copyright Page 23
e n
m/
EAP Types c o
i .
we
u a
 EAP-TLS
. h
n g
 EAP-PEAP n i
a r
 EAP-TTLS
/ le
/
 EAP-FAST t p:
ht
 LEAP s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Contents c o
i .
we
u a
. h
n g
a r
/ le
/
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m /
WLAN Security c o
i .
we
u a
SSID : guest103 . h
Vlan : 103 n g
Auth : none n i
Encry: none a r Radius
le
server
/ /
SSID : voice102
t p:
Vlan : 102
Auth : PSK ht
Encry :TKIP s :
ce Switch Router
u r AP
s o
Re
SSID :Huawei101 AC
Vlan : 101
Auth : dot1x
n g
Encry: AES
n i
a r
Le
r e
o
e n
m /
Creat A Security Profile c o
i .
we
system-view u a
. h
WLAN
n g
i}
security-profile { id profile-id | name profile-name
n
a r
e
l its default settings are:
 After an access security profile is configured,
/ /
:
p key if WEP is used
 Open system authentication and empty
t t
 802.1x+PEAP authentication andhTKIP encryption if WPA1 is used
s :and CCMP encryption if WPA2 is used
 802.1x+PEAP authentication
c e
u rWPI encryption if WAPI is used

s o
WAI authentication and
Re
n g
n i
a r
Le
o
Copyright Page 27
e n
m/
WEP Authentication c o
i .
we
WEP open system authentication u a
security-policy wep . h
n g
wep authentication-method open-system
n i
a r
/ le
/
WEP shared key authentication
t p:
security-policy wep
h t
wep authentication-method:share-key
e
wep key { wep-40 | wep-104 s } { pass-phrase | hex } key-id key-
value r c
u o
e s
R the WEP shared key is 10 hexadecimal
#If WEP-40 is used,
characters orn5g ASCII characters. If WEP-104 is used, the WEP
shared key n i 26 hexadecimal characters or 13 ASCII characters.
is
r a
L e
r e
o
e n
m /
WPA/WPA2 Authentication c o
i .
we
security-policy wpa u a
. h
g
n | tls } encryption-
{ wpa | wpa2 } authentication-method dot1x { peap
n i
method { tkip | ccmp } a r
#NOTE: If WPA/WPA2 dot1x authentication l e is configured, run the
/ / a WLAN-ESS interface.
dot1x-authentication enable command
p : on
t
WPA authentication differs from WPA2 authentication in the protocol
packet format. ht
s :
c e
r
{ wpa | wpa2 } authentication-method
u | ccmp }
psk { pass-phrase | hex } key
encryption-method { tkip
s o
R e
n g
n i
a r
Le
o
Copyright Page 29
e n
m/
Example: Open Authentication c o
i .
we
interface WLAN-ESS0 u a
. h
port hybrid pvid vlan 100
n g
port hybrid untagged vlan 100
n i
a r
security-profile name security-1 id 1
/ le
/
service-set name guest103 id 1 t p:
WLAN-ess 0 ht
ssid guest103 s :
ce
traffic-profile id 1
security-profile id 1 ou
r
service-vlan 103Res
n g
n i
a r
Le
r e
o
e n
m/
Example: WPA PSK Authenticationi.c o
w e
interface WLAN-ESS0 u a
. h
port hybrid pvid vlan 100
n g
n i
a r
security-profile name security-2 id 2 l e
/ /
security-policy wpa
p :
wpa authentication-method psk pass-phrase t 1234567890
encryption-method tkip ht
s :
c e
service-set name ss-2 id
u r 1
WLAN-ess 0
s o
ssid voice102 Re
traffic-profile id g 1
n id 2
i
n 102
security-profile
a
service-vlan r
L e
o
Copyright Page 31
e n
m /
WPA Dot1x Authentication c o
i .
we
u a
SSID : guest103 . h
Vlan : 103 n g
Auth : none n i
Encry: none a r Radius
le
server
/ /
SSID : voice102
t p:
Vlan : 102
Auth : PSK ht
Encry :TKIP s :
ce Switch Router
u r AP
s o
Re
SSID :Huawei101 AC
Vlan : 101
Auth : dot1x
n g
Encry: CCMP
n i
a r
Le
r e
o
e n
m/
Example: wpa dot1x authentication c o
i .
w e
dot1x enable u a
radius-server template peap.radius.com . h
n g
radius-server shared-key simple Huawei i
radius-server authentication 10.1.10.100a1812 rn
radius-server accounting 10.1.10.100 1813 l e
/ /
p :
aaa
t t
domain peap.radius.com h
authentication-scheme radius s :
accounting-scheme radius c e
u r
o
radius-server peap.radius.com
s
Re
n g
n i
a r
Le
o
Copyright Page 33
e n
m/
Example: wpa dot1x authentication c o
i .
w e
interface WLAN-Ess1 u a
port hybrid pvid vlan 101 . h
n g
n i
dot1x-authentication enable
a r
dot1x authentication-method eap
l e
/ /
security-profile name security-3 id 3 p :
t t
security-policy wpa2
h peap encryption-method ccmp
wpa2 authentication-method dot1x
s :
c e
service-set name Huawei101 u r id 2
WLAN-ess 1 s o
ssid Huawei101 Re
traffic-profile nidg1
n i id 3
security-profile
a r 101
Le
service-vlan

o
Copyright Page 34
e n
/
m
WLAN Security Application Modesi.c o
w e
STA WLAN Data Remarksa
h u
Authentication Encryption Mode g .
i n
Mode
r n
Aneaopen system requires
/ l
Open-system WEP or no /
authentication only. It can use WEP to
: data or use plaintext without
authentication encryption t p
encrypt
h t data encryption.
s :
Shared-key
c e
authentication
WEP
u r WEP encryption is mandatory.
s o
WPA/WPA2
e
R TKIP WPA defines PSK and IEEE 802.1x
authentication n
g authentication modes and TKIP and
n i AES
AES algorithms encryption modes.
a r
802.1xe EAP TKIP A RADIUS server and a certificate
L
e
authentication AES server are required.
Copyright Page 35
e n
m/
Summary c o
i .
we
u a
 WLAN Encryption suites
. h
n g
 WLAN Authentication methods n i
a r
 WLAN security configuration
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Questions c o
i .
e w
 Please list the WLAN authentication methods?hu
a
g .
in
r n
ea
 What are the three components of 802.1X？
/ l
: /
t p
ht
 What is the difference between
s : the WPA1/2-PSK and
c e
WPA1/2 Enterpriseu？ r
s o
Re
n g
n i
a r
Le
o
Copyright Page 37
e n
m/
c o
i .
we
u a
. h
ng
n i
a r
Thank you le
// :
tp
www.Huawei.com
ht
s :
ce
ur
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
c o
i .
we
u a
. h
n g
WLAN Management rn i
a
/ le
/
t p:
ht
s :
ce www.huawei.com
u r
s o
Re
n g
n i
a r
Le
r e
o
Copyrig ht © 2012 Hua w ei Technologies Co., Lt d. All right s reserved. Page1
e n
m/
Objectives c o
i .
e w
 Upon Completion of this course, you will be h
a
u to:
able
g .
Describe the basic functions of WLAN in
n

a r
Master the basic operations of WLAN le
/

: /
Describe the maintenance task t ofp WLAN
ht

s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyrig Page2
e n
m/
Contents c o
i .
we
u a
 Basic Concepts and Functions of WLAN
. h
n g
 WLAN Operation n i
a r
 WLAN Maintenance Tasks
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m /
Basic Concepts(1/2) c o
i .
e w
 AP: connects wireless workstations to a LAN and u
a
converts
. h
frames transmitted between a WLAN and a wired g
n LAN.
n i
 FIT AP: also referred to as a centralized a
r
control AP. The FIT AP
l e
cannot work independently, and needs / / to work with the AP
p :
Controller (AC) to implement the
t t WLAN service access function.
h
 AC: controls and manages:all APs on a WLAN, and provides
e s
authentication services r cfor WLAN users by interacting with an
o u
authentication server. e s
R
n g
n i
a r
Le
o
Copyrig Page4
e n
m/
Basic Concepts(1/2) c o
i .
e w
 Control And Provisioning of Wireless Access Points
a
u (CAPWAP):
. h
transmits management packets and data packets g
n between APs
n i
and ACs. a r
l e
/
 Service Set Identifier (SSID): The wireless terminal can scan all /
:
the networks and then selects atpspecified SSID to access a
h t
specified wireless network.
s :
c e
 Virtual Access Point (VAP):
u r service function entity on an AP.
Users can createedifferent so VAPs for each radio frequency (RF)
R is created by binding a service set to a
of an AP. A VAP
n g
specified n i of the AP.
RF
a r
Le
o
Copyrig Page5
e n
WLAN Visual Management and Wizard- m /
c o
based Service Configuration wei .
u a
. h
g
eSight
i n
r n
Wizard-based
ea
Originally enabling services on 100 APs takes service
/ l
/
configuration
p:
100 minutes. With this configuration wizard, it
takes only 10 minutes.
t t
Service view h Location view
s : Colors indicate
c e channels.
u
Displays the CAPWAPr AC The color depth
s
tunnel between o an
indicates the signal
e
strength.
and an AP.
ViewRuser information
Rogue APs are
g an AP

identified.
non
i rogue APs and shorten the fault diagnosis time. Collision domains
r n
Quickly identify are displayed.
a
Le
o
Copyrig Page6
e n
m /
WLAN Quick Deploying Services . c o
i e
a w
u
eSight
h
g .
in Device auto-
Network Add AC and LSW to NMS through n r discovery
Planner auto-discovery
ea
Plan sheets
Configure AC and LSW to get
/ l AC
through the business and/
p :through
management channels
smart configurationttool
t LSW
h
Installation Configuring s AC: basic properties
Personnel
c e
ImportrAP in batches through
Fill AP
information
o usheet
e s
plan
AP AP AP
Import plan R
sheets
n g configuration file from AC
AP download corresponding
IT Personnel n
i
a r
Le
o
Copyrig Page7
e n
m/
AP Common Operations c o
i .
we
Restart an AP or APs u a
eSight

. h
After online upgrading and debugging, you
n g
can restart AP through remote NMs in
batches n i
a r
Restore an AP or APs to factory settings
e

l
When configuring AP abnormally or
/ you can restore an AP to
AC /
debugging,
: configuration in batch.
p
factory
tReplace an AP
LSW
t 
h If an AP occurs a hardware failure, AP can

s : be quickly replaced by NMS.
ce Configuration does not change after AP
u r was replaced.
s o Diagnose links
ReAP
The AP ping IP of the upstream device to
AP AP diagnose whether AP's upstream business
n g link is off
n i The AP ping IP of the downstream device
a r to diagnose the link between AC and AP
Le
r e
o
Copyrig ht © 2012 Hua w ei Technologies Co., Lt d. All right s reserved. Page8Page 8
e n
m/
Contents c o
i .
we
u a
WLAN Operation . h

n g
Add WLAN Equipment n i
r

ea
 Configuring the WLAN Service in Wizard Mode
/ l
WLAN Maintenance Tasks : /

t p
h t
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyrig Page9
e n
m/
Add WLAN Equipment c o
i .
we
u a
Add Manually Add Automatically . h
Add in Batches
n g
The system automatically n i
If you want a few of searches for WLAN a r When the system has a
WLAN devices to l
devices in a specified e lot of managed objects
access the eSight, you network segment// based during deployment
can create these WLAN p
on the specified: or device expansion,
devices one by one. SNMP andtaddst the you can add WLAN
h
found devices. devices in batches.
s :
ce
o ur
e s
R
ng found WLAN equipment successfully
eSight
i
r n
e a
L
r e
o
Page10
e n
m/
Add Devices c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Creating an NE c o
i .
w you can e
a
If you want a few of WLAN devices to access the eSight,
u
create these WLAN devices one by one. . h
n g
rni
a
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
NE Auto-Discovery c o
i .
wa e
The system automatically searches for WLAN devicesain
hu
specified network segment based on the specified.SNMP
and adds the found devices. ng i
r n
ea
/ l
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Add in Batches c o
i .
e
When the system has a lot of managed objects duringaw
deployment or device expansion, you can add WLAN h udevices in
g .
batches. n i
r n
ea
/ l
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Contents c o
i .
we
u a
WLAN Operation . h

n g
Add WLAN Equipment n i
r

ea
 Configuring the WLAN Service in Wizard Mode
/ l
WLAN Maintenance Tasks : /

t p
h t
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyrig Page15
e n
Configuring the WLAN Service in om /
. c
Wizard Mode-Select an AC w e i
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
Configuration Wizard-Configure ACom /
. c
information w e i
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Configuration Wizard-Select APs.c o
e i
a w
h u
g .
in
r n
ea
/ l
: /
t p
ht
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyrig Page18
e n
Configuration Wizard-Configure om /
. c
profiles w e i
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i You can bind multiple
a r
Le
ESS profiles to an AP.
r e
o
e n
Configuration Wizard-Deploy m /
c o
profiles on APs i .
e
aw u
. h
n g
rni
a
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
Configuration Wizard-The Service om /
. c
is Deployed w e i
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Contents c o
i .
we
Basic Concepts and Functions of WLAN u a

. h
WLAN Operation n g

n i
WLAN Maintenance Tasks a r
le

 Viewing AC Information
/ /
Viewing AP Information t p:
t

Browsing STAs h

s :
Browsing SSIDs Throughout
ce the Network
r

Managing Rogue APs o u


s
 Re Topology
Viewing the Service
n gFaults

n i
Diagnosing
a r AP Faults
Rectifying
Le

r e
o
e n
m/
Overview c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Viewing AC Information c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Viewing AP Information c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
View the AP Parameter Setting . c o
i e
a w
h u
g .
n
rni
a
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Browsing STAs c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
Browsing SSIDs Throughout the m /
c o
Network i .
w e
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Managing Rogue APs c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Viewing the Service Topology c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Diagnosing Faults c o
i .
we
u a
. h
n g
n i
a r
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Rectifying AP Faults c o
i .
we
u a
. h
n g
n i
a r
/ le 1. Modify
2. Replace AP
/
t p:
ht
s :
ce
r
s ou Restore an AP to factory settings
Restart an AP
R e Replace an AP
n g
n i
a r
Le
r e
o
e n
m/
Summary c o
i .
we
u a
. h
n g
 WLAN basic Operation n i
a r
 WLAN Maintenance Tasks
/ le
/
t p:
ht
s :
ce
u r
s o
Re
n g
n i
a r
Le
r e
o
e n
m/
Questions c o
i .
e w
 which three ways can add WLAN devices toha
a
u eSight
g .
server ? in
r n
ea
/ l
: /
t p
ht
s :
c e
u r
s o
Re
n g
n i
a r
Le
o
Copyrig Page34
e n
m/
c o
i .
we
u a
. h
ng
n i
a r
Thank you! l e
/ /
p :
t
www.huawei.com
t
h
s :
ce
u r
so
R e
n g
n i
a r
Le
r e
o

WLAN Basic Operation and Maintenance Training

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

WLAN Basic Operation and Maintenance Training

Uploaded by

Copyright:

Available Formats

e n

Resource support on website m/

s :are conducted by Huawei professional instructors

r e TECHNOLOGIES CO., LTD.

u r WA653SN WA655DN AP6510DN

 Number of access users: Entire device: 32K / /

Suitable for Huawei s o

Products shape ： u r Band mode ：

r n optical interfaces optical interfaces

ur and begins with 1. GE optical

s o interfaces: Each optical interface has a

R e corresponding indicator above it.

r eht © 2011 Hua w ei Technologies Co., Lt d. All right s reserved.

r eht © 2011 Hua w ei Technologies Co., Lt d. All right s reserved.

r eht © 2011 Hua w ei Technologies Co., Lt d. All right s reserved.

r eht © 2011 Hua w ei Technologies Co., Lt d. All right s reserved.

so cable are clearly identified by labels and

Complete different types:APs installation

r eht © 2011 Hua w ei Technologies Co., Lt d. All right s reserved.

n g indicates the different state for the device.

r eht © 2011 Hua w ei Technologies Co., Lt d. All right s reserved.

n g •Association Requests and actions

n i •Authentication and key

r e ©2012 Huawei Technologies Co., Ltd. All rights reserved.

u r DHCP DNS AAA

s o server server server

n g (integrating the AC) Patch/anti-

r e ©2012 Huawei Technologies Co., Ltd. All rights reserved.

IP:10.1.100.100 ht ESSID、AP or authentication result

e s  DHCP Requests are broadcast inside

PC1 VLAN 101 i

r n PC1 VLAN 102 AC VLAN 101 IP : 10.1.101.100

r e ©2012 Huawei Technologies Co., Ltd. All rights reserved.

IP:10.1.100.1 ht routes to controller

s : DHCP assignments by external or

u r internal DHCP server

n g AC VLAN 101 IP : 10.1.101.1

r e ©2012 Huawei Technologies Co., Ltd. All rights reserved.

s o route static 10.1.101.0

PC1 VLAN 101 i

r n PC1 VLAN 101 route static 0.0.0.0 0.0.0.0

r e ©2012 Huawei Technologies Co., Ltd. All rights reserved.

FTP mode: AP downloadss:

c e the upgrade version file from the specified

connection with anR e based

n i The AP associates with an AC

r e ©2012 Huawei Technologies Co., Ltd. All rights reserved.

e s: Config DHCP server on AC

n g VLAN transmit data required for WLAN

User hw002 VLAN 101

User frame when e

r e ©2012 Huawei Technologies Co., Ltd. All rights reserved.

User frame when e

r e ©2012 Huawei Technologies Co., Ltd. All rights reserved.

/ / VLAN 102 10.1.102.1

User frame when e

r e ©2012 Huawei Technologies Co., Ltd. All rights reserved.

/ / VLAN 102 10.1.102.1

User frame when e

r e ©2012 Huawei Technologies Co., Ltd. All rights reserved.

a r LLDP disable LLDP enable

r e ©2012 Huawei Technologies Co., Ltd. All rights reserved.

s : Parity check None