WSM WLAN Configuration Examples

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Software version: WSM (E6211)

Document version: 5W101-20230427

 

No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of New H3C Technologies Co., Ltd.

The information in this document is subject to change without notice.

Content

Introduction· 1

Prerequisites· 1

Example: Configuring a WLAN·· 1

Network configuration· 1

Procedures· 2

Configuring the AC· 2

Configuring WSM·· 3

Verifying the configuration· 10

 

 

Introduction

Wireless Service Manager (WSM) is a wireless service management component that acts based on AD Campus to realize wired and wireless service management in a unified manner. WSM enables wireless management features to be added to the wired service management platform without extra establishment of an IT management platform. This can save investments and O&M costs. WSM provides features such as wireless device management, performance statistic collection, AP uplink device interface query, active and standby AC management, power-saving policy making, spectrum protection, and wireless O&M for a convenient wireless network O&M.

WSM only applies to enterprise and campus networks that support wireless authentication.

Prerequisites

Make sure the access devices support wireless connections.

Example: Configuring a WLAN

Network configuration

As shown in Figure 1, build a wireless internal network to connect the headquarters and the three branch offices in a cost-effective way.

To achieve this purpose:

·     Use the AC + fit AP networking mode.

·     Deploy the AC at the enterprise backbone network, the carrier MAN, or the entrance of hotspot areas such as branch offices.

·     Deploy fit APs at the lower layer of the AC in branch offices.

·     Deploy the WSM component at the enterprise backbone network or the carrier MAN to uniformly manage wired and wireless networks.

Figure 1 Network diagram

 

Procedures

This example assumes that the network devices are already deployed and introduces only procedures of creating a WLAN on a single AC.

Configuring the AC

1.     Configure SNMP:

¡     To use SNMPv1:

# Enable the SNMP agent.

snmp-agent

# Edit the read-only community as needed. As a best practice, use a strong password and do not specify commonly-used words as the password.

snmp-agent community read public

# Edit the read and write community as needed.

snmp-agent community write private

# Specify SNMPv1.

snmp-agent sys-info version V1

# Enable SNMP notifications.

snmp-agent trap enable

# Specify the destination address for sending traps. The specified address must be the same as the network management system address.

snmp-agent target-host trap address udp-domain 1.1.1.1 params securityname public

# Specify the source address for sending traps. Use the management IP address or the interface specified at device adding to the network management system.

snmp-agent trap source Ethernet0/0

¡     To use SNMPv2:

# Enable the SNMP agent.

snmp-agent

# Edit the read-only community as needed. As a best practice, use a strong password and do not specify commonly-used words as the password.

snmp-agent community read public

# Edit the read and write community as needed.

snmp-agent community write private

# Specify SNMPv2.

snmp-agent sys-info version v2c

# Enable SNMP notifications.

snmp-agent trap enable

# Specify the destination address for sending traps. The specified address must be the same as the network management system address.

snmp-agent target-host trap address udp-domain 1.1.1.1 params securityname public v2

# Specify the source address for sending traps. Use the management IP address or the interface specified at device adding to the network management system.

snmp-agent trap source Ethernet0/0

2.     Configure NETCONF parameters

<AC>system

[AC]local-user admin

[AC-luser-manage-admin]service-type ssh telnet terminal http https

[AC-luser-manage-admin]authorization-attribute user-role network-admin

[AC-luser-manage-admin]authorization-attribute user-role network-operator

[AC-luser-manage-admin] password simple 123456

[AC]netconf soap http enable

Configuring WSM

Adding an AC

1.     Access the Monitor > Monitor List > Network Monitors > SNMP Devices page and click Add. On the page that opens, perform the following tasks:

¡     Specify the IP address of the wireless device. This example uses 10.114.118.220.

¡     Specify the mask as needed.

¡     Specify the device label. The device label is the device name displayed in the system. If you do not specify this field, the system uses Sysname as the label. This example uses WX3540H.

¡     Select whether to enable the device to send SNMP Traps to the system. If you enable this feature, the system automatically configures Trap host settings for the device to send traps to the system.

¡     Select whether to support ping operation. If you enable this feature, the system pings the device and adds the device only after the ping operation succeeds. If you do not enable this feature, the device can be added without being pinged.

Figure 2 Adding a device

 

2.     Configure SNMP settings.

Click Select SNMP Template, on the page that opens, select a template or add a new template, and then click OK.

Figure 3 Selecting an SNMP template

 

3.     Return to the Add Device page, click OK.

4.     To view the newly added AC, access the Automation > Campus Network > Wireless Device > AC page.

Figure 4 Viewing the added AC

 

5.     To view the AC details, click the device label link.

6.     On the details page, to edit NETCONF parameters, click Configuration and then click Modify NETCONF Parameters. On the page that opens, specify the username and password and then click OK. Make sure the username and password are the same as the username and password configured on the AC.

Figure 5 Device details page

 

Figure 6 Editing NETCONF parameters

 

7.     Click Back to return to the AC page. Select the newly added AC and click Synchronize.

Figure 7 Synchronizing AC configuration

 

Adding a fit AP template

1.     To access the Fit APs page, click Automation > Campus Network > Wireless Device >AC and click the  icon in the Operation column for the AC.

Figure 8 Accessing the Fit AP page

 

2.     Click Add to access the Add AP Template page. On the page that opens, perform the following tasks and then click OK:

¡     Specify an AP name. AP templates can be identified by AP name.

¡     Specify the serial number.

¡     Select the AP model. The list displays AP models supported by the AC.

¡     Specify the connection priority.

¡     Set the client idle timeout between the AP and a client.

¡     Set the client keepalive interval between the AP and a client.

¡     Select whether to synchronize the AP template to any other ACs. If you select this option, you must also select an AP group for template deployment.

¡     Specify the connection priority for other ACs in the AC group. By default, the connection priority is 4. This field is available when Synchronize AC Configuration is selected.

Figure 9 Adding an AP template

 

On the Fit APs page, after the AP comes online and is registered successfully, the AP status becomes online.

Figure 10 Viewing the AP status

 

Adding a service policy

1.     To access the Service Policy Management page, click Automation > Campus Network > Wireless Device > AC and click the  icon on the Operation column for the AC.

Figure 11 Service Policy Management page

 

2.     Click Add Policy. On the page that opens, perform the following tasks and then click OK:

¡     Specify a policy name.

¡     Enable or disable the service policy.

¡     Specify an SSID. In this example, the SSID is cui-dot1x1 for 802.1X authentication and cui-mac1 for MAC or MAC portal authentication.

¡     Select the coded format for the SSID. This field is not available for ACs. This field cannot be displayed once configured.

¡     Specify the maximum number of clients that the service policy can connect to.

¡     Select whether to hide SSIDs in beacon frames.

¡     Specify the VLAN ID for clients after the clients comes online through the wireless template. The value range is 1 to 4094. By default, the VLAN ID is 1.

¡     Configure security information.

-     For 802.1X authentication, select dot1x for AKM mode, RSN for security IE, and CCMP for cipher suite. The VLAN field indicates a VLAN for internal wireless services and has not relation to the VLAN for user services. Specify a VLAN ID in the range of 1 to 3500 and make sure the VLAN is idle and is not a user service VLAN.

-     For MAC authentication or MAC portal authentication, select psk for AKM mode, MAC for authentication mode, RSN for security IE, and CCMP for cipher suite. The VLAN field indicates a VLAN for internal wireless services and has not relation to the VLAN for user services. Specify a VLAN ID in the range of 1 to 3500 and make sure the VLAN is idle and is not a user service VLAN.

Figure 12 Adding a service policy for 802.1X authentication

 

Figure 13 Adding a service policy for MAC/MAC portal authentication

 

Bind the wireless service policy to radios

1.     To access the Service Policy Management page, click Automation > Campus Network > Wireless Device > AC and click the  icon in the Operation column for the AC.

Figure 14 Service Policy Management page

 

2.     Click Bind Wireless Service to Radio to open the radio list. Select radios and click OK.

Figure 15 Radio list

 

3.     On the Service Policy Management page, select a service policy and click Bind.

Figure 16 Binding a wireless service to a radio

 

Verifying the configuration

Verify that your wireless endpoint can detect the wireless network.