华为配置敏捷分布式SFN漫游实验

配置敏捷分布式SFN漫游示例

组网图形

图1 配置敏捷分布式SFN漫游示例组网图

组网需求
数据规划
配置思路
配置注意事项
操作步骤
配置文件

组网需求

某医院通过部署敏捷分布式网络给医护人员提供WLAN接入服务，以满足医护人员办公的最基本需求。管理员希望终端在覆盖区域内移动发生漫游时，终端无感知，业务不中断。

数据规划

表1 数据规划表
配置项	数据
DHCP服务器	中心AP作为DHCP服务器为RU和STA分配IP地址
RU的IP地址池	10.23.100.2～10.23.100.254/24
STA的IP地址池	10.23.101.3～10.23.101.254/24
中心AP的源接口IP地址	VLANIF100：10.23.100.1/24
AP组	名称：ap-group1 引用模板：VAP模板wlan-net、域管理模板domain
域管理模板	名称：domain 国家码：中国
SSID模板	名称：wlan-net SSID名称：wlan-net
安全模板	名称：wlan-net 安全策略：WPA-WPA2+PSK+AES 密码：a1234567
VAP模板	名称：wlan-net 业务VLAN：VLAN101 引用模板：SSID模板wlan-net、安全模板wlan-net
RU工作信道	area_1：工作信道为6 area_2：工作信道为6
敏捷分布式SFN漫游功能	开启

配置思路

配置中心AP、RU和上层网络设备之间实现二层互通。
配置中心AP作为DHCP服务器为RU和STA分配IP地址。
配置RU上线。
配置WLAN业务参数，实现STA访问WLAN网络功能。
配置敏捷分布式SFN漫游。

配置注意事项

网络规划注意事项：
- 支持敏捷分布式SFN漫游功能的款型仅包括AD9430DN-12（含配套RU）和AD9430DN-24（含配套RU）。其中，仅以下RU组合支持敏捷分布式SFN漫游：
  - R230D和R240D间，并且，R230D和R240D仅2.4G射频支持敏捷分布式SFN漫游，5G射频不支持。
  - R250D、R250D-E、R251D、R251D-E和R450D间。
- 对于整个中心AP，开启敏捷分布式SFN漫游功能后，所有RU单频段（2.4G或5G）上支持的同频漫游终端数总数不超过128，单频段内其它VAP上终端总数不超过128。
- 开启敏捷分布式SFN漫游功能后，所有RU需配置在同一信道。在5G频段开启敏捷分布式SFN漫游时，需将信道配置在非雷达信道。
- 参与漫游的各个RU需要关联在同一中心AP上。不支持跨中心AP的敏捷分布式SFN漫游。
- RU间的漫游为中心AP内二层漫游。不支持三层漫游场景下的敏捷分布式SFN漫游。
配置注意事项：
- 如果2.4G或5G射频同时开启敏捷分布式SFN漫游，则建议使用不同的SSID，否则可能导致STA切换射频，影响用户体验。
- 一个射频上只能有一个VAP使能敏捷分布式SFN漫游功能。如果一个射频上配置了多个VAP，建议在没有配置敏捷分布式SFN漫游的所有VAP上配置VAP限速总和为5Mbps。
  
  如果AP组的某个射频上有VAP使能了敏捷分布式SFN漫游功能，则在对应中心AP下关联到该射频的所有STA的漫游轨迹均可能会带有s标记。
- 开启敏捷分布式SFN漫游功能的射频上不能再配置信道扫描、信道调优和智能漫游。
- 敏捷分布式SFN漫游不支持AP个性化配置，只能基于AP组配置。
- 参与漫游的各个RU需要配置：
  - 相同的SSID。
  - 相同的VAP模板，且VAP ID必须相同。
  - 相同的安全策略。敏捷分布式SFN漫游支持的加密方式包括WPA+PSK、WPA2+PSK、WPA-WPA2+PSK、WPA+802.1X（EAP认证）、WPA2+802.1X（EAP认证）、WPA-WPA2+802.1X（EAP认证）和Portal+PSK。

操作步骤

配置周边设备

# 配置Router的接口GE1/0/0的IP地址，并配置指向STA网段的静态路由。

<span style="color:#333333"><span style="background-color:#dddddd"><Huawei> <strong>system-view</strong>
[Huawei] <strong>sysname Router</strong>
[Router] <strong>interface gigabitethernet 1/0/0</strong>
[Router-GigabitEthernet1/0/0] <strong>ip address 10.23.101.2 24</strong>
[Router-GigabitEthernet1/0/0] <strong>quit</strong>
[Router] <strong>ip route-static 10.23.101.0 24 10.23.101.1</strong></span></span>

配置中心AP与其它网络设备互通

# 配置中心AP的接口GE0/0/1和GE0/0/2加入VLAN100（管理VLAN），GE0/0/24和GE0/0/25加入VLAN101（业务VLAN）。

<span style="color:#333333"><span style="background-color:#dddddd"><HUAWEI> <strong>system-view</strong>
[HUAWEI] <strong>sysname AP</strong>
[AP] <strong>vlan batch 100 101</strong>
[AP] <strong>interface gigabitethernet 0/0/1</strong>
[AP-GigabitEthernet0/0/1] <strong>port link-type trunk</strong>
[AP-GigabitEthernet0/0/1] <strong>port trunk pvid vlan 100</strong>
[AP-GigabitEthernet0/0/1] <strong>port trunk allow-pass vlan 100</strong>
[AP-GigabitEthernet0/0/1] <strong>quit</strong>
[AP] <strong>interface gigabitethernet 0/0/2</strong>
[AP-GigabitEthernet0/0/2] <strong>port link-type trunk</strong>
[AP-GigabitEthernet0/0/2] <strong>port trunk pvid vlan 100</strong>
[AP-GigabitEthernet0/0/2] <strong>port trunk allow-pass vlan 100</strong>
[AP-GigabitEthernet0/0/2] <strong>quit</strong>
[AP] <strong>interface gigabitethernet 0/0/24</strong>
[AP-GigabitEthernet0/0/24] <strong>port link-type trunk</strong>
[AP-GigabitEthernet0/0/24] <strong>port trunk allow-pass vlan 101</strong>
[AP-GigabitEthernet0/0/24] <strong>quit</strong>
[AP] <strong>interface gigabitethernet 0/0/25</strong>
[AP-GigabitEthernet0/0/25] <strong>port link-type trunk</strong>
[AP-GigabitEthernet0/0/25] <strong>port trunk allow-pass vlan 101</strong>
[AP-GigabitEthernet0/0/25] <strong>quit</strong></span></span>

配置中心AP作为DHCP服务器为RU和STA分配IP地址

DNS服务器地址请根据实际需要配置。常用配置方法如下：

接口地址池场景，需要在VLANIF接口视图下执行命令dhcp server dns-list ip-address &<1-8>。
全局地址池场景，需要在IP地址池视图下执行命令dns-list ip-address &<1-8>。

<span style="color:#333333"><span style="background-color:#dddddd">[AP] <strong>dhcp enable</strong>
[AP] <strong>interface vlanif 100</strong>
[AP-Vlanif100] <strong>ip address 10.23.100.1 24</strong>
[AP-Vlanif100] <strong>dhcp select interface</strong>
[AP-Vlanif100] <strong>quit</strong>
[AP] <strong>interface vlanif 101</strong>
[AP-Vlanif101] <strong>ip address 10.23.101.1 24</strong>
[AP-Vlanif101] <strong>dhcp select interface</strong>
[AP-Vlanif101] <strong>dhcp server excluded-ip-address 10.23.101.2</strong>
[AP-Vlanif101] <strong>quit</strong></span></span>

配置RU上线

# 创建AP组“ap-group1”。

<span style="color:#333333"><span style="background-color:#dddddd">[AP] <strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_b1518960795190943">wlan</strong>
[AP-wlan-view] <strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_b1949053615190943">ap-group name ap-group1</strong>
[AP-wlan-ap-group-ap-group1] <strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_b1583703147190943">quit</strong></span></span>

# 创建域管理模板，在域管理模板下配置中心AP的国家码并在AP组下引用域管理模板。

<span style="color:#333333"><span style="background-color:#dddddd">[AP-wlan-view] <strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_b1606938186190943">regulatory-domain-profile name domain</strong>
[AP-wlan-regulatory-domain-domain] <strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_b1675106463190943">country-code cn</strong>
[AP-wlan-regulatory-domain-domain] <strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_b1473383173190943">quit</strong>
[AP-wlan-view] <strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_b325140580190943">ap-group name ap-group1</strong>
[AP-wlan-ap-group-ap-group1] <strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_b1523811396190943">regulatory-domain-profile domain</strong>
Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continu e?[Y/N]:<strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_zh-cn_task_0175818441_b2083244362190906">y</strong>  
[AP-wlan-ap-group-ap-group1] <strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_b1683844091190943">quit</strong></span></span>

# 配置中心AP上RU的管理VLAN。

<span style="color:#333333"><span style="background-color:#dddddd">[AP] <strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_b187060624190943">management-vlan 100</strong></span></span>

# 在中心AP上离线导入RU，并将RU加入AP组“ap-group1”中。假设RU的MAC地址为60de-4476-e360，并且根据RU的部署位置为RU配置名称，便于从名称上就能够了解RU的部署位置。例如MAC地址为60de-4476-e360的RU部署在1号区域，命名此RU为area_1。

ap auth-mode命令缺省情况下为MAC认证，如果之前没有修改其缺省配置，可以不用执行ap auth-mode mac-auth。

举例中使用的RU为R240D，具有射频0和射频1两个射频。R240D的射频0为2.4GHz射频，射频1为5GHz射频。

<span style="color:#333333"><span style="background-color:#dddddd">[AP] <strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_b1893171570190943">wlan</strong>
[AP-wlan-view] <strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_b258400052190943">ap auth-mode mac-auth</strong>
[AP-wlan-view] <strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_b1173972058190943">ap-id 1 ap-mac 60de-4476-e360</strong>
[AP-wlan-ap-1] <strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_b285736089190943">ap-name area_1</strong>
Warning: This operation may cause AP reset. Continue? [Y/N]:<strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_zh-cn_task_0175818441_b1274773711190906">y</strong>  
[AP-wlan-ap-1] <strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_b1643872348190943">ap-group ap-group1</strong>
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:<strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_zh-cn_task_0175818441_b1248067968190906">y</strong>  
[AP-wlan-ap-1] <strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_b1078500777190943">quit</strong>
[AP-wlan-view] <strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_b199025952190943">ap-id 2 ap-mac dcd2-fc04-b500</strong>
[AP-wlan-ap-2] <strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_b1258711500190943">ap-name area_2</strong>
Warning: This operation may cause AP reset. Continue? [Y/N]:<strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_zh-cn_task_0175818441_b1274773711190906_1">y</strong>  
[AP-wlan-ap-2] <strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_b1189550544190943">ap-group ap-group1</strong>
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:<strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_zh-cn_task_0175818441_b1248067968190906_1">y</strong>  
[AP-wlan-ap-2] <strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_b191175541190943">quit</strong></span></span>

# 将RU上电后，当执行命令display ap all查看到RU的“State”字段为“nor”时，表示RU正常上线。

<span style="color:#333333"><span style="background-color:#dddddd">[AP-wlan-view] <strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_b5114588190943">display ap all</strong>
Total AP information:
nor  : normal          [2]
ExtraInfo : Extra information
P     : insufficient power supply
----------------------------------------------------------------------------------------------------------
ID   MAC            Name      Group     IP            Type                 State STA Uptime      ExtraInfo
----------------------------------------------------------------------------------------------------------
1    60de-4476-e360 area_1    ap-group1 10.23.100.254 R240D                <strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_b1258444432190943">nor</strong>   0   15S         -
2    dcd2-fc04-b500 area_2    ap-group1 10.23.100.253 R240D                <strong id="ZH-CN_TASK_0176918427__zh-cn_task_0176918423_b1867958208190943">nor</strong>   0   10S         -
----------------------------------------------------------------------------------------------------------
Total: 2</span></span>

配置WLAN业务参数

# 创建名为“wlan-net”的安全模板，并配置安全策略。

举例中以配置WPA-WPA2+PSK+AES的安全策略为例，密码为“a1234567”，实际配置中请根据实际情况，配置符合实际要求的安全策略。

<span style="color:#333333"><span style="background-color:#dddddd">[AP-wlan-view] <strong>security-profile name wlan-net</strong>
[AP-wlan-sec-prof-wlan-net] <strong>security wpa-wpa2 psk pass-phrase a1234567 aes</strong>
[AP-wlan-sec-prof-wlan-net] <strong>quit</strong></span></span>

# 创建名为“wlan-net”的SSID模板，并配置SSID名称为“wlan-net”。

<span style="color:#333333"><span style="background-color:#dddddd">[AP-wlan-view] <strong>ssid-profile name wlan-net</strong>
[AP-wlan-ssid-prof-wlan-net] <strong>ssid wlan-net</strong>
[AP-wlan-ssid-prof-wlan-net] <strong>quit</strong></span></span>

# 创建名为“wlan-net”的VAP模板，配置业务VLAN，并且引用安全模板和SSID模板。

<span style="color:#333333"><span style="background-color:#dddddd">[AP-wlan-view] <strong>vap-profile name wlan-net</strong>
[AP-wlan-vap-prof-wlan-net] <strong>service-vlan vlan-id 101</strong>
[AP-wlan-vap-prof-wlan-net] <strong>security-profile wlan-net</strong>
[AP-wlan-vap-prof-wlan-net] <strong>ssid-profile wlan-net</strong>
[AP-wlan-vap-prof-wlan-net] <strong>quit</strong></span></span>

# 配置AP组引用VAP模板，AP上射频0上使用VAP模板“wlan-net”的配置。

<span style="color:#333333"><span style="background-color:#dddddd">[AP-wlan-view] <strong>ap-group name ap-group1</strong>
[AP-wlan-ap-group-ap-group1] <strong>vap-profile wlan-net wlan 1 radio 0</strong>
[AP-wlan-ap-group-ap-group1] <strong>quit</strong></span></span>

配置RU射频的信道和功率

射频的信道和功率自动调优功能默认开启，如果不关闭此功能则会导致手动配置不生效。举例中RU射频的信道和功率仅为示例，实际配置中请根据RU的国家码和网规结果进行配置。

# 关闭RU射频0的信道和功率自动调优功能，并配置RU射频0的信道和功率。

<span style="color:#333333"><span style="background-color:#dddddd">[AP-wlan-view] <strong>ap-id 1</strong>
[AP-wlan-ap-1] <strong>radio 0</strong>
[AP-wlan-radio-1/0] <strong>calibrate auto-channel-select disable</strong>
[AP-wlan-radio-1/0] <strong>calibrate auto-txpower-select disable</strong>
[AP-wlan-radio-1/0] <strong>channel 20mhz 6</strong>
Warning: This action may cause service interruption. Continue?[Y/N]<strong id="ZH-CN_TASK_0176918427__zh-cn_task_0175818441_b1479588541190906">y</strong> 
[AP-wlan-radio-1/0] <strong>eirp 127</strong>
[AP-wlan-radio-1/0] <strong>quit</strong>
[AP-wlan-ap-1] <strong>quit</strong>
[AP-wlan-view] <strong>ap-id 2</strong>
[AP-wlan-ap-2] <strong>radio 0</strong>
[AP-wlan-radio-2/0] <strong>calibrate auto-channel-select disable</strong>
[AP-wlan-radio-2/0] <strong>calibrate auto-txpower-select disable</strong>
[AP-wlan-radio-2/0] <strong>channel 20mhz 6</strong>
Warning: This action may cause service interruption. Continue?[Y/N]<strong id="ZH-CN_TASK_0176918427__zh-cn_task_0175818441_b1479588541190906_1">y</strong> 
[AP-wlan-radio-2/0] <strong>eirp 127</strong>
[AP-wlan-radio-2/0] <strong>quit</strong>
[AP-wlan-ap-2] <strong>quit</strong></span></span>

使能敏捷分布式SFN漫游功能

<span style="color:#333333"><span style="background-color:#dddddd">[AP-wlan-view] <strong>vap-profile name wlan-net</strong>
[AP-wlan-vap-prof-wlan-net] <strong>sfn-roam enable</strong>
Warning: This feature requires that radios work on the same channel. Enabling th
is feature will disable the channel calibration, channel scanning, and smart roa
ming functions on the AP and disconnect STAs connected to the VAP. Open, WEP, an
d WAPI encryption modes are not supported. The PSK + WPA2 mode is recommended. Aradio allows SFN to be enabled only for one VAP. Continue?[Y/N]:<strong>y</strong> 
[AP-wlan-vap-prof-wlan-net] <strong>quit</strong></span></span>

调整敏捷分布式SFN漫游相关参数

# 漫游判决参数建议使用缺省值。

# 漫游相关射频参数需根据实际网规结果配置，本例中略。

验证配置结果

# 配置完成后，执行命令display vap ssid wlan-net查看VAP信息，当“Status”显示为“ON”时，表示RU对应射频上的VAP已创建成功。

<span style="color:#333333"><span style="background-color:#dddddd">[AP-wlan-view] <strong>display vap ssid wlan-net</strong>
WID : WLAN ID
--------------------------------------------------------------------------------
AP ID AP name    RfID WID  BSSID          Status  Auth type      STA  SSID
--------------------------------------------------------------------------------
1     area_1     0    1    68A8-2845-62E0 ON      WPA/WPA2-PSK   0    wlan-net
2     area_2     0    1    68A8-2845-62E0 ON      WPA/WPA2-PSK   0    wlan-net
--------------------------------------------------------------------------------
Total: 2</span></span>

# STA在area_1的覆盖范围内搜索到SSID为“wlan-net”的无线网络，输入密码“a1234567”并正常关联后，在中心AP上执行命令display station ssid wlan-net，查看STA的接入信息，可以看到STA关联到了area_1。

<span style="color:#333333"><span style="background-color:#dddddd">[AP-wlan-view] <strong>display station ssid wlan-net</strong>
Rf/WLAN: Radio ID/WLAN ID
Rx/Tx: link receive rate/link transmit rate(Mbps)
---------------------------------------------------------------------------------
STA MAC         AP ID Ap name  Rf/WLAN  Band  Type  Rx/Tx      RSSI  VLAN  IP address
---------------------------------------------------------------------------------
e019-1dc7-1e08  1     <strong>area_1</strong>   0/1      2.4G  11n   38/64      -68   101   10.23.101.254
---------------------------------------------------------------------------------
Total: 1 2.4G: 1 5G: 0</span></span>

# 当STA从area_1的覆盖范围移动到area_2的覆盖范围时，在中心AP上执行命令display station ssid wlan-net，查看STA的接入信息，可以看到STA关联到了area_2。

<span style="color:#333333"><span style="background-color:#dddddd">[AP-wlan-view] <strong>display station ssid wlan-net</strong>
Rf/WLAN: Radio ID/WLAN ID                                                     
Rx/Tx: link receive rate/link transmit rate(Mbps)                             
----------------------------------------------------------------------------------------
STA MAC          AP ID Ap name  Rf/WLAN  Band  Type  Rx/Tx      RSSI  VLAN  IP address     
----------------------------------------------------------------------------------------
e019-1dc7-1e08   2     <strong>area_2</strong>   0/1      2.4G  11n   38/64      -68   101   10.23.101.254
----------------------------------------------------------------------------------------
Total: 1 2.4G: 1 5G: 0</span></span>

# 在中心AP上执行命令display station roam-track sta-mac e019-1dc7-1e08，可以查看该STA的漫游轨迹。

<span style="color:#333333"><span style="background-color:#dddddd">[AP-wlan-view] <strong>display station roam-track sta-mac e019-1dc7-1e08</strong>
Access SSID:wlan-net    
Rx/Tx:link receive rate/link transmit rate(Mbps) 
c:PMK Cache Roam r:802.11r Roam s:Same Frequency Network
------------------------------------------------------------------------------
L2/L3           AC IP                  AP name              Radio ID
BSSID           TIME                   In/Out RSSI          Out Rx/Tx
------------------------------------------------------------------------------
--              10.23.100.1            area_1               0
68a8-2845-62e0  2017/10/12 16:52:58    -51/-48              46/13
<strong>L2(s)</strong>           10.23.100.1            area_2               1
68a8-2845-62e0  2016/10/12 16:55:45    -58/-                -/-
------------------------------------------------------------------------------
Number: 1</span></span>

配置文件

Router的配置文件

<span style="color:#333333"><span style="background-color:#dddddd">#
sysname Router
#
interface GigabitEthernet1/0/0ip address 10.23.101.2 255.255.255.0
#
ip route-static 10.23.101.0 255.255.255.0 10.23.101.1
#
return
</span></span>

中心AP的配置文件

<span style="color:#333333"><span style="background-color:#dddddd">#
sysname AP
#
vlan batch 100 to 101
#management-vlan 100                                                            
#
dhcp enable
#
interface Vlanif100ip address 10.23.100.1 255.255.255.0dhcp select interface
#
interface Vlanif101ip address 10.23.101.1 255.255.255.0dhcp select interfacedhcp server excluded-ip-address 10.23.101.2
#
interface GigabitEthernet0/0/1port link-type trunkport trunk pvid vlan 100port trunk allow-pass vlan 100
#
interface GigabitEthernet0/0/2port link-type trunkport trunk pvid vlan 100port trunk allow-pass vlan 100
#
interface GigabitEthernet0/0/24port link-type trunkport trunk allow-pass vlan 101
#
interface GigabitEthernet0/0/25port link-type trunkport trunk allow-pass vlan 101
#
wlansecurity-profile name wlan-netsecurity wpa-wpa2 psk pass-phrase %^%#m"tz0f>~7.[`^6RWdzwCy16hJj/Mc!,}s`X*B]}A%^%# aesssid-profile name wlan-netssid wlan-netvap-profile name wlan-netservice-vlan vlan-id 101sfn-roam enablessid-profile wlan-netsecurity-profile wlan-netregulatory-domain-profile name domainap-group name ap-group1regulatory-domain-profile domainradio 0vap-profile wlan-net wlan 1ap-id 1 type-id 55 ap-mac 60de-4476-e360 ap-sn 21500826402SF4900166ap-name area_1ap-group ap-group1radio 0channel 20mhz 6eirp 127calibrate auto-channel-select disablecalibrate auto-txpower-select disableap-id 2 type-id 55 ap-mac dcd2-fc04-b500 ap-sn 21500826402SF4900207ap-name area_2ap-group ap-group1radio 0channel 20mhz 6eirp 127calibrate auto-channel-select disablecalibrate auto-txpower-select disable
#
return</span></span>