08-WLAN Security Configuration Guide

HomeSupportConfigure & DeployConfiguration GuidesH3C Access Controllers Configuration Guides(R5447P04)-6W10008-WLAN Security Configuration Guide
04-WLAN DRS configuration
Title Size Download
04-WLAN DRS configuration 71.38 KB

Configuring WLAN DRS

About WLAN DRS

DPI report statistics (DRS) classifies and stores user application and URL session information detected by DPI and sends the information to the cloud platform as configured.

Restrictions: Hardware compatibility with WLAN DRS

Hardware series

Model

Product code

WLAN DRS compatibility

WX1800H series

WX1804H-PWR

EWP-WX1804H-PWR-CN

Yes

WX2500H series

WX2508H-PWR-LTE

WX2510H-PWR

WX2510H-F-PWR

WX2540H

WX2540H-F

WX2560H

EWP-WX2508H-PWR-LTE

EWP-WX2510H-PWR

EWP-WX2510H-F-PWR

EWP-WX2540H

EWP-WX2540H-F

EWP-WX2560H

Yes

MAK series

MAK204

MAK206

EWP-MAK204

EWP-MAK206

Yes

WX3000H series

WX3010H

WX3010H-X-PWR

WX3010H-L-PWR

WX3024H

WX3024H-L-PWR

WX3024H-F

EWP-WX3010H

EWP-WX3010H-X-PWR

EWP-WX3010H-L-PWR

EWP-WX3024H

EWP-WX3024H-L-PWR

EWP-WX3024H-F

Yes:

·     WX3010H

·     WX3010H-X-PWR

·     WX3024H

·     WX3024H-F

No:

·     WX3010H-L-PWR

·     WX3024H-L-PWR

WX3500H series

WX3508H

WX3508H

WX3510H

WX3510H

WX3520H

WX3520H-F

WX3540H

WX3540H

EWP-WX3508H

EWP-WX3508H-F

EWP-WX3510H

EWP-WX3510H-F

EWP-WX3520H

EWP-WX3520H-F

EWP-WX3540H

EWP-WX3540H-F

Yes

WX5500E series

WX5510E

WX5540E

EWP-WX5510E

EWP-WX5540E

Yes

WX5500H series

WX5540H

WX5560H

WX5580H

EWP-WX5540H

EWP-WX5560H

EWP-WX5580H

Yes

Access controller modules

LSUM1WCME0

EWPXM1WCME0

LSQM1WCMX20

LSUM1WCMX20RT

LSQM1WCMX40

LSUM1WCMX40RT

EWPXM2WCMD0F

EWPXM1MAC0F

LSUM1WCME0

EWPXM1WCME0

LSQM1WCMX20

LSUM1WCMX20RT

LSQM1WCMX40

LSUM1WCMX40RT

EWPXM2WCMD0F

EWPXM1MAC0F

Yes

Hardware series

Model

Product code

WLAN DRS compatibility

WX1800H series

WX1804H-PWR

WX1810H-PWR

WX1820H

WX1840H

EWP-WX1804H-PWR

EWP-WX1810H-PWR

EWP-WX1820H

EWP-WX1840H-GL

Yes

WX3800H series

WX3820H

WX3840H

EWP-WX3820H-GL

EWP-WX3840H-GL

Yes

WX5800H series

WX5860H

EWP-WX5860H-GL

Yes

WLAN DRS tasks at a glance

To configure WLAN DRS, perform the following tasks:

1.     Enabling DRS

2.     (Optional.) Configuring DRS information reporting to the

Enabling DRS

About this task

DRS classifies user application and URL session information detected by DPI, and stores the statistics in file drs.db in the bash directory of the local SQL database.

You can view the statistics on the local database by using SQL database statements or from the Web interface.

Procedure

1.     Enter system view.

system-view

2.     Enable DRS.

wlan drs [ ipv6 ] enable

By default, DRS is disabled.

3.     (Optional.) Enable DRS for wired clients.

wlan drs wired-statistics enable

By default, DRS for wired clients is disabled.

Configuring DRS information reporting to the cloud platform

About this task

This feature enables the AC to send a specific number of DRS entries to the cloud platform at the specified interval.

Procedure

1.     Enter system view.

system-view

2.     Enabling DRS information reporting to the cloud platform.

wlan drs report-oasis enable

By default, the reporting feature is enabled.

3.     Set the DRS information reporting interval and the number of entries to be reported every time.

wlan drs report-oasis { app | url } [ interval interval | number number ] *

By default, the AC reports 10 DRS entries to the cloud platform every 1000 milliseconds.

WLAN DRS configuration examples

Example: Configuring WLAN DRS

Network configuration

As shown in Figure 1, enable DRS for the AC to get user application and URL session information, and enable the AC to report DRS entries to the cloud platform at the specified interval.

Figure 1 Network diagram

Procedure

1.     Configure a VLAN interface:

# Create VLAN 100 and assign an IP address to VLAN-interface 100.

<AC> system-view

[AC] vlan 100

[AC-vlan100] quit

[AC] interface vlan-interface 100

[AC-Vlan-interface100] ip address 10.1.9.58 16

[AC-Vlan-interface100] quit

2.     Configure wireless services:

# Create service template service1.

[AC] wlan service-template service1

# Set the SSID to drs.

[AC-wlan-st-service1] ssid drs

# Assign clients coming online through the service template to VLAN 100.

[AC-wlan-st-service1] vlan 100

# Enable the service template.

[AC-wlan-st-service1] service-template enable

[AC-wlan-st-service1] quit

3.     Create a manual AP:

# Create manual AP ap1, and specify the AP model and serial ID.

[AC] wlan ap ap1 model WA6320

[AC-wlan-ap-ap1] serial-id 219801A28N819CE0002T

# Bind service template service1 to radio 1.

[AC-wlan-ap-ap1] radio 1

[AC-wlan-ap-ap1-radio-1] radio enable

[AC-wlan-ap-ap1-radio-1] service-template service1

[AC-wlan-ap-ap1-radio-1] quit

[AC-wlan-ap-ap1] quit

4.     Configure DRS:

# Enable DRS.

[AC] wlan drs enable

# Set the DRS information reporting interval to 500 seconds, and the number of entries to be reported every time to 20.

[AC] wlan drs report-oasis app interval 500 number 20

[AC] wlan drs report-oasis url interval 500 number 20

Verifying the configuration

# Verify that you can view application and URL session records from the Web interface.

 

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
All Support
  • Become a Partner
  • Partner Resources
  • Partner Business Management
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网