华为无线性能部(华为无线高级设置怎么设置)
导语:大型无线网络的高可用方案——HUAWEI AC双机热备的配置
大型WLAN的应用对稳定性要求高,为了保障WLAN网络稳定运行,在网络中部署AC双机热备是一种非常实用的方案,下面介绍一种HUAWEI AC双机热备的方案。
配置要求:
主AC1 备AC2 主AP1 备AP2
管理Vlan 主Vlanif 801: 10.1.201.100/24
备Vlanif 802: 10.1.202.100/24
业务VLan yw1-Vlan 11 12 yw2-vlan 13 14
vlan11: 10.1.11.100
Vlan12: 10.1.12.100
Vlan13: 10.1.13.100
Vlan14: 10.1.14.100
vlan21: 10.1.21.100
Vlan22: 10.1.22.100
Vlan23: 10.1.23.100
Vlan24: 10.1.24.100
管理VRRP vlanif801 10.1.201.3/24
业务VRRP VLAN10:10.1.10.3
VLAN11:10.1.11.3
VLAN12:10.1.12.3
VLAN13:10.1.13.3
VLAN14:10.1.14.3
AP组 ag1
VAP --- yw1 yw2
域模板 dom
SSID yw1 yw2
安全 yw1-open yw2-a1234567
Vap yw1直接转发 业务VLAN pool sta-p1
yw2隧道转发 业务VLAN pool sta-p2
基础配置LSW1
sys
sysname SW
vlan batch 10 to 14 801
interface Vlanif10
ip address 10.1.10.1 255.255.255.0
interface Vlanif11
ip address 10.1.11.1 255.255.255.0
interface Vlanif12
ip address 10.1.12.1 255.255.255.0
interface Vlanif13
ip address 10.1.13.1 255.255.255.0
interface Vlanif14
ip address 10.1.14.1 255.255.255.0
interface Vlanif801
ip address 10.1.201.1 255.255.255.0
interface LoopBack0
ip address 101.101.101.101 255.255.255.255
//LO0模拟外网
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 10 to 14 801
interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 10 to 14 801
interface GigabitEthernet0/0/10
port link-type trunk
port trunk pvid vlan 10
port trunk allow-pass vlan 10 to 14
interface GigabitEthernet0/0/11
port link-type trunk
port trunk pvid vlan 10
port trunk allow-pass vlan 10 to 14
双机热备配置
AC1
sys
sysname AC1
vlan batch 10 to 14 801
dhcp enable
ip pool ap
gateway-list 10.1.10.1
network 10.1.10.0 mask 255.255.255.0
option 43 sub-option 3 ascii 10.1.201.100
ip pool sta1
network 10.1.11.0 mask 24
gateway-list 10.1.11.1
ip pool sta2
gateway-list 10.1.12.1
network 10.1.12.0 mask 24
ip pool sta3
network 10.1.13.0 mask 24
gateway-list 10.1.13.1
ip pool sta4
network 10.1.14.0 mask 24
gateway-list 10.1.14.1
vlan pool sta-p1
vlan 11 12
assignment hash
vlan pool sta-p2
vlan 13 14
assignment hash
interface Vlanif10
ip address 10.1.10.100 255.255.255.0
dhcp select global
interface Vlanif11
ip address 10.1.11.100 255.255.255.0
dhcp select global
interface Vlanif12
ip address 10.1.12.100 255.255.255.0
dhcp select global
interface Vlanif13
ip address 10.1.13.100 255.255.255.0
dhcp select global
interface Vlanif14
ip address 10.1.14.100 255.255.255.0
dhcp select global
interface Vlanif801
ip address 10.1.201.100 255.255.255.0
interface GigabitEthernet0/0/8
port link-type trunk
port trunk allow-pass vlan 10 to 14 801
ip route-static 0.0.0.0 0.0.0.0 10.1.201.1
capwap source interface Vlanif 801
wlan
regulatory-domain-profile name dom
country-code cn
ap-group name ag1
regulatory-domain-profile dom
y
ap auth-mode mac-auth
ap-mac 00e0-fcc1-67f0
ap-name ap1
ap-group ag1
y
ap-mac 00e0-fcc7-6fa0
ap-name ap2
ap-group ag1
y
security-profile name yw1
security open
security-profile name yw2
security wpa2 psk pass-phrase a1234567 aes
ssid-profile name yw1
ssid yw1
ssid-profile name yw2
ssid yw2
vap-profile name yw1
forward-mode tunnel
service-vlan vlan-pool sta-p1
security-profile yw1
ssid-profile yw1
vap-profile name yw2
forward-mode direct-forward
service-vlan vlan-pool sta-p2
security-profile yw2
ssid-profile yw2
ap-group name ag1
vap-profile yw1 wlan 1 radio all
vap-profile yw2 wlan 2 radio all
AC2
sys
sysname AC2
vlan batch 10 to 14 801
dhcp enable
ip pool ap
gateway-list 10.1.10.1
network 10.1.10.0 mask 255.255.255.0
option 43 sub-option 3 ascii 10.1.201.100
ip pool sta1
network 10.1.11.0 mask 24
gateway-list 10.1.11.1
ip pool sta2
gateway-list 10.1.12.1
network 10.1.12.0 mask 24
ip pool sta3
network 10.1.13.0 mask 24
gateway-list 10.1.13.1
ip pool sta4
network 10.1.14.0 mask 24
gateway-list 10.1.14.1
vlan pool sta-p1
vlan 11 12
assignment hash
vlan pool sta-p2
vlan 13 14
assignment hash
interface Vlanif10
ip address 10.1.10.200 255.255.255.0
dhcp select global
interface Vlanif11
ip address 10.1.11.200 255.255.255.0
dhcp select global
interface Vlanif12
ip address 10.1.12.200 255.255.255.0
dhcp select global
interface Vlanif13
ip address 10.1.13.200 255.255.255.0
dhcp select global
interface Vlanif14
ip address 10.1.14.200 255.255.255.0
dhcp select global
interface Vlanif801
ip address 10.1.201.200 255.255.255.0
interface GigabitEthernet0/0/8
port link-type trunk
port trunk allow-pass vlan 10 to 14 801
ip route-static 0.0.0.0 0.0.0.0 10.1.201.1
capwap source interface Vlanif 801
wlan
regulatory-domain-profile name dom
country-code cn
ap-group name ag1
regulatory-domain-profile dom
y
ap auth-mode mac-auth
ap-mac 00e0-fcc1-67f0
ap-name ap1
ap-group ag1
y
ap-mac 00e0-fcc7-6fa0
ap-name ap2
ap-group ag1
y
security-profile name yw1
security open
security-profile name yw2
security wpa2 psk pass-phrase a1234567 aes
ssid-profile name yw1
ssid yw1
ssid-profile name yw2
ssid yw2
vap-profile name yw1
forward-mode tunnel
service-vlan vlan-pool sta-p1
security-profile yw1
ssid-profile yw1
vap-profile name yw2
forward-mode direct-forward
service-vlan vlan-pool sta-p2
security-profile yw2
ssid-profile yw2
ap-group name ag1
vap-profile yw1 wlan 1 radio all
vap-profile yw2 wlan 2 radio all
配置 VRRP 实现双机热备
AC1 配置
int Vlanif 801
vrrp vrid 1 virtual-ip 10.1.201.3
vrrp vrid 1 priority 120
vrrp vrid 1 preempt-mode timer delay 120
admin-vrrp vrid 1
int Vlanif 10
vrrp vrid 2 virtual-ip 10.1.10.3
vrrp vrid 2 preempt-mode timer delay 120
vrrp vrid 2 track admin-vrrp interface Vlanif 801 vrid 1 unflowdown
int Vlanif 11
vrrp vrid 3 virtual-ip 10.1.11.3
vrrp vrid 3 preempt-mode timer delay 120
vrrp vrid 3 track admin-vrrp interface Vlanif 801 vrid 1 unflowdown
int Vlanif 12
vrrp vrid 4 virtual-ip 10.1.12.3
vrrp vrid 4 preempt-mode timer delay 120
vrrp vrid 4 track admin-vrrp interface Vlanif 801 vrid 1 unflowdown
int Vlanif 13
vrrp vrid 5 virtual-ip 10.1.13.3
vrrp vrid 5 preempt-mode timer delay 120
vrrp vrid 5 track admin-vrrp interface Vlanif 801 vrid 1 unflowdown
int Vlanif 14
vrrp vrid 6 virtual-ip 10.1.14.3
vrrp vrid 6 preempt-mode timer delay 120
vrrp vrid 6 track admin-vrrp interface Vlanif 801 vrid 1 unflowdown
q
vrrp recover-delay 30
hsb-service 0
service-ip-port local-ip 10.1.201.100 peer-ip 10.1.201.200 local-data-port 10241 peer-data-port 10241
service-keep-alive detect retransmit 2 interval 1
hsb-group 0
bind-service 0
track vrrp vrid 1 interface Vlanif 801
hsb-service-type access-user hsb-group 0
hsb-service-type ap hsb-group 0
hsb-service-type dhcp hsb-group 0
hsb-group 0
hsb enable
q
//更改AC1源接口
undo capwap source interface Vlanif 801
y
capwap source ip-address 10.1.201.3
dhcp server database enable
dhcp server database recover
ip pool ap
option 43 sub-option 3 ascii 10.1.201.3
备用AC2的配置
int Vlanif 801
vrrp vrid 1 virtual-ip 10.1.201.3
admin-vrrp vrid 1
int Vlanif 10
vrrp vrid 2 virtual-ip 10.1.10.3
vrrp vrid 2 track admin-vrrp interface Vlanif 801 vrid 1 unflowdown
int Vlanif 11
vrrp vrid 3 virtual-ip 10.1.11.3
vrrp vrid 3 track admin-vrrp interface Vlanif 801 vrid 1 unflowdown
int Vlanif 12
vrrp vrid 4 virtual-ip 10.1.12.3
vrrp vrid 4 track admin-vrrp interface Vlanif 801 vrid 1 unflowdown
int Vlanif 13
vrrp vrid 5 virtual-ip 10.1.13.3
vrrp vrid 5 track admin-vrrp interface Vlanif 801 vrid 1 unflowdown
int Vlanif 14
vrrp vrid 6 virtual-ip 10.1.14.3
vrrp vrid 6 track admin-vrrp interface Vlanif 801 vrid 1 unflowdown
vrrp recover-delay 30
hsb-service 0
service-ip-port local-ip 10.1.201.200 peer-ip 10.1.201.100 local-data-port 10241 peer-data-port 10241
service-keep-alive detect retransmit 2 interval 1
hsb-group 0
bind-service 0
track vrrp vrid 1 interface Vlanif 801
hsb-service-type access-user hsb-group 0
hsb-service-type ap hsb-group 0
hsb-service-type dhcp hsb-group 0
hsb-group 0
hsb enable
q
//更改AC2的源接口
undo capwap source interface Vlanif 801
y
capwap source ip-address 10.1.201.3
dhcp server database enable
dhcp server database recover
ip pool ap
option 43 sub-option 3 ascii 10.1.201.3
配置完成后AP会自动重启在AC1 和AC2 查看AP上线状态和HSB组的状态,可见是一主一备的状态。
模拟故障,将AC1 的G0/0/8关闭,在AC2上查看AP自动上线
将AC1 G0/0/8恢复后,可以看到AC1 自动变为备份状态
用户连接则无任何异常。
本文内容由快快网络小滢整理编辑!