- Table of Contents
-
- 13-High availability
- 01-Example for Configuring IRF Setup with LACP MAD
- 02-Example for Configuring IRF Setup with ARP MAD
- 03-Example for Configuring IRF Setup with Indirectly Connected Members
- 04-Example for Configuring IRF Setup with Members in One Chassis
- 05-Example for Configuring IRF Setup with Members in Different Chassis
- 06-Example for Configuring Dual-Link Backup
- 07-Example for Configuring Remote 802.1X in AC Hierarchy with Dual-Link Central AC Backup
- 08-Example for Configuring Remote Portal in AC Hierarchy with Dual-Link Central AC Backup
- 09-Example for Configuring OAuth MAC-Based Portal in Local-Forwarding Dual-Link Backup
- 10-Example for Configuring OAuth Portal in Local-Forwarding Dual-Link Backup
- 11-Example for Configuring Remote MAC-Based Portal in Local-Forwarding Dual-Link Backup
- 12-Example for Configuring Remote Portal and Transparent MAC in Local-Forwarding Dual-Link Backup
- 13-Example for Configuring Remote Portal in Local-Forwarding Dual-Link Backup
- 14-Example for Configuring Remote Portal and Transparent MAC in Central-Forwarding Dual-Link Backup
- 15-Example for Configuring Remote Portal in Central-Forwarding Dual-Link Backup
- 16-Example for Configuring Lightweight Portal in Central-Forwarding Dual-Link Backup
- 17-Example for Configuring OAuth Portal in Central-Forwarding Dual-Link Backup
- 18-Example for Configuring Remote MAC-Based Portal in Central-Forwarding Dual-Link Backup
- 19-Example for Configuring Remote 802.1X in Dual-Link AC Backup
- 20-Example for Configuring Remote MAC in Dual-Link AC Backup
- 21-Example for Configuring Lightweight Dual-Link Hot Backup and AP License Sync
- 22-Example for Configuring N+1 Backup and AP License Sync
- Related Documents
-
| Title | Size | Download |
|---|---|---|
| 21-Example for Configuring Lightweight Dual-Link Hot Backup and AP License Sync | 379.71 KB |
Example for Configuring Lightweight Dual-Link Hot Backup and AP License Synchronization
Copyright ©2026 New H3C Technologies Co., Ltd. All rights reserved.
No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of New H3C Technologies Co., Ltd.
Except for the trademarks of New H3C Technologies Co., Ltd., any trademarks that may be mentioned in this document are the property of their respective owners.
The information in this document is subject to change without notice.
Example: Configuring lightweight dual-link hot backup and AP license synchronization
Introduction
This document provides an example for configuring lightweight dual-link hot backup and AP license synchronization in the dual-AC scenario. This configuration helps enhance network reliability and simplify license configuration.
If lightweight dual-link hot backup is configured in local forwarding mode and a terminal comes online, the AP synchronizes only the summary information of that terminal to the backup AC in real time. This practice achieves lightweight and hot backup of terminal information. During a master/backup AC switchover, the service traffic of online local-forwarding terminals attached to the AP is not interrupted. After the switchover is completed, those terminals do not need to come online again, and the AP will synchronize their summary information to the new backup AC in bulk.
Network configuration
In a dual-AC scenario, AC 1 acts as the master AC, and AC 2 acts as the backup AC. When AC 1 fails or a master/backup AC switchover is triggered, AC 2 takes over, allowing the AP to communicate through AC 2. The AP reconnects to AC 1 when AC 1 recovers.
As shown in the following figure, the AP connects to AC 1 and AC 2 via the access switch and the core switch. The network meets the following requirements:
· Local forwarding mode is enabled.
· Licenses are installed on AC 1, but not on AC 2. AP license synchronization is configured, which enables AC 2 to share the licenses installed on AC 1.
· Wireless clients access the network through VLAN 200.
· Layer 3 network connections are established between the ACs and the AP. On the DHCP server, the AP is configured to obtain AC IP addresses through Option 43 for Layer 3 registration.
Figure 1 Network diagram
Restrictions and guidelines
· To achieve lightweight hot backup in the dual-AC scenario, local forwarding mode must be enabled.
· To achieve lightweight hot backup in the dual-AC scenario, the master and backup ACs must be configured with the same working radio channel. If this requirement is not met, wireless terminals might be disconnected during a master/backup AC switchover.
· To achieve lightweight hot backup in the dual-AC scenario, the master and backup ACs must be consistent in device model and software version.
· To have the two ACs establish CAPWAP tunnels with the AP through manual AP configuration, make sure those ACs are configured with the same AP names and serial numbers (or MAC addresses).
· Before you enable AP license synchronization, you must specify IP addresses and roles for the AC and its member ACs in the AP license synchronization group.
· To achieve lightweight hot backup in the dual-AC scenario, the two ACs must back up licenses for each other. You must configure both ACs as master ACs.
· In the dual-link backup scenario configured with AP license synchronization, if one AC is disconnected for more than 30 days, its AP licenses will become invalid on the other AC. Newly connected APs cannot use the shared AP licenses, but online APs will not be disconnected.
· To ensure successful configurations, do not use the Tab key or spaces at the end of commands in the map-configuration file.
· Make sure the map-configuration file is uploaded to the backup AC.
Procedures
Configuring apcfg.txt
|
|
NOTE: · Write the commands to be executed in sequence into the apcfg.txt file (a text file), and upload the file to the AC. After the AC is associated with the AP, deploy the configuration to the AP by using the map-configuration command. · The map-configuration command is required to deploy service VLAN settings to the AP, because local forwarding mode is enabled in the service template. In configuration file apcfg.txt, configure VLAN 200 for wireless terminals, and then assign the uplink interface of the AP to VLAN 200. |
# Configuration file apcfg.txt contains the following information:
system-view
vlan 200
quit
interface GigabitEthernet 1/0/1
port link-type trunk
port trunk permit vlan 200
Configuring AC 1
1. Install licenses.
# Install licenses on AC 1. (Details not shown.)
2. Configure interfaces on AC 1.
# Create VLAN 20 and VLAN-interface 20, and then assign IP address 10.1.1.1/16 to VLAN-interface 20. The AP uses the IP address to establish a CAPWAP tunnel with AC 1.
<AC1> system-view
[AC1] vlan 20
[AC1-vlan20] quit
[AC1] interface vlan-interface 20
[AC1-Vlan-interface20] ip address 10.1.1.1 16
[AC1-Vlan-interface20] quit
# Configure GigabitEthernet 1/0/1 (interface connected to the core switch) as a trunk port, and then assign it to VLAN 20.
[AC1] interface gigabitethernet 1/0/1
[AC1-GigabitEthernet1/0/1] port link-type trunk
[AC1-GigabitEthernet1/0/1] port trunk permit vlan 20
[AC1-GigabitEthernet1/0/1] quit
3. Configure Layer 3 routing.
# Configure a default route. The next hop is 10.1.1.3, which is the IP address of the core switch.
[AC1] ip route-static 0.0.0.0 0 10.1.1.3
4. Configure dual-link backup.
# Create AP group group1, and then set the AP connection priority to 7 for the AC.
[AC1] wlan ap-group group1
[AC1-wlan-ap-group-group1] priority 7
# Specify 10.1.1.2 as the backup AC.
[AC1-wlan-ap-group-group1] backup-ac ip 10.1.1.2
# Enable master CAPWAP tunnel preemption.
[AC1-wlan-ap-group-group1] wlan tunnel-preempt enable
[AC1-wlan-ap-group-group1] quit
# In global configuration view, enable client persistence.
[AC1] wlan global-configuration
[AC1-wlan-global-configuration] client-persistence enable
[AC1-wlan-global-configuration] quit
5. Configure the AP license synchronization feature.
# Enable the AP license synchronization feature.
[AC1] wlan ap-license-group
[AC1-wlan-als-group] local ip 10.1.1.1
[AC1-wlan-als-group] member ip 10.1.1.2
[AC1-wlan-als-group] ap-license-synchronization enable
[AC1-wlan-als-group] quit
6. Configure a wireless service.
# Create service template 1 and enter its view.
[AC1] wlan service-template 1
# Set the SSID of the service template to service.
[AC1-wlan-st-1] ssid service
# Assign clients coming online through service template 1 to VLAN 200.
[AC1-wlan-st-1] vlan 200
# Specify the authentication and key management mode as PSK and set the PSK key to plaintext string 12345678.
[AC1-wlan-st-1] akm mode psk
[AC1-wlan-st-1] preshared-key pass-phrase simple 12345678
# Specify the cipher suite as CCMP and the security IE as RSN.
[AC1-wlan-st-1] cipher-suite ccmp
[AC1-wlan-st-1] security-ie rsn
# Enable local forwarding mode by specifying the client data traffic forwarder as AP.
[AC1-wlan-st-1] client forwarding-location ap
# Enable the service template.
[AC1-wlan-st-1] service-template enable
[AC1-wlan-st-1] quit
7. Configure a manual AP.
# Create AP ap1, and set the AP model to WA6320 and serial ID to 219801A28N819CE0002T.
[AC1] wlan ap ap1 model WA6320
[AC1-wlan-ap-ap1] serial-id 219801A28N819CE0002T
[AC1-wlan-ap-ap1] quit
8. Configure AP grouping.
# Create an AP grouping rule by AP names.
[AC1] wlan ap-group group1
[AC1-wlan-ap-group-group1] ap ap1
9. Bind wireless services.
# In AP group group1, specify channel 6 as the working channel, and then bind service template 1 to radio 2.
[AC1-wlan-ap-group-group1] ap-model WA6320
[AC1-wlan-ap-group-group1-ap-model-WA6320] radio 2
[AC1-wlan-ap-group-group1-ap-model-WA6320-radio-2] channel 6
[AC1-wlan-ap-group-group1-ap-model-WA6320-radio-2] service-template 1
# Enable radio 2.
[AC1-wlan-ap-group-group1-ap-model-WA6320-radio-2] radio enable
[AC1-wlan-ap-group-group1-ap-model-WA6320-radio-2] quit
10. Deploy the AP configuration file.
# Deploy configuration file apcfg.txt to the specified AP.
[AC1-wlan-ap-group-group1-ap-model-WA6320] map-configuration apcfg.txt
[AC1-wlan-ap-group-group1-ap-model-WA6320] quit
[AC1-wlan-ap-group-group1] quit
Configuring AC 2
1. Configure interfaces on AC 2.
# Create VLAN 20 and VLAN-interface 20, and then assign IP address 10.1.1.2/16 to VLAN-interface 20. The AP uses the IP address to establish a CAPWAP tunnel with AC 2.
<AC2> system-view
[AC2] vlan 20
[AC2-vlan20] quit
[AC2] interface Vlan-interface 20
[AC2-Vlan-interface20] ip address 10.1.1.2 16
[AC2-Vlan-interface20] quit
# Configure GigabitEthernet 1/0/1 (interface connected to the core switch) as a trunk port, and then assign it to VLAN 20.
[AC2] interface gigabitethernet 1/0/1
[AC2-GigabitEthernet1/0/1] port link-type trunk
[AC2-GigabitEthernet1/0/1] port trunk permit vlan 20
[AC2-GigabitEthernet1/0/1] quit
2. Configure Layer 3 routing.
# Configure a default route. The next hop is 10.1.1.3, which is the IP address of the core switch.
[AC2] ip route-static 0.0.0.0 0 10.1.1.3
3. Configure dual-link backup.
# Create AP group group1, and then specify 10.1.1.1 as the backup AC. Retain the default AP connection priority for the AC.
[AC2] wlan ap-group group1
[AC2-wlan-ap-group-group1] backup-ac ip 10.1.1.1
[AC2-wlan-ap-group-group1] quit
# In global configuration view, enable client persistence.
[AC2] wlan global-configuration
[AC2-wlan-global-configuration] client-persistence enable
[AC2-wlan-global-configuration] quit
4. Configure the AP license synchronization feature.
# Enable the AP license synchronization feature.
[AC2] wlan ap-license-group
[AC2-wlan-als-group] local ip 10.1.1.2
[AC2-wlan-als-group] member ip 10.1.1.1
[AC2-wlan-als-group] ap-license-synchronization enable
[AC2-wlan-als-group] quit
5. Configure a wireless service.
# Create service template 1 and enter its view.
[AC2] wlan service-template 1
# Set the SSID of the service template to service.
[AC2-wlan-st-1] ssid service
# Assign clients coming online through service template 1 to VLAN 200.
[AC2-wlan-st-1] vlan 200
# Specify the authentication and key management mode as PSK and set the PSK key to plaintext string 12345678.
[AC2-wlan-st-1] akm mode psk
[AC2-wlan-st-1] preshared-key pass-phrase simple 12345678
# Specify the cipher suite as CCMP and the security IE as RSN.
[AC2-wlan-st-1] cipher-suite ccmp
[AC2-wlan-st-1] security-ie rsn
# Enable local forwarding mode by specifying the client data traffic forwarder as AP.
[AC2-wlan-st-1] client forwarding-location ap
# Enable the service template.
[AC2-wlan-st-1] service-template enable
[AC2-wlan-st-1] quit
6. Configure a manual AP.
# Create AP ap1, and set the AP model to WA6320 and serial ID to 219801A28N819CE0002T.
[AC2] wlan ap ap1 model WA6320
[AC2-wlan-ap-ap1] serial-id 219801A28N819CE0002T
[AC2-wlan-ap-ap1] quit
7. Configure AP grouping.
# Create an AP grouping rule by AP names.
[AC2] wlan ap-group group1
[AC2-wlan-ap-group-group1] ap ap1
8. Bind wireless services.
# In AP group group1, specify channel 6 as the working channel, and then bind service template 1 to radio 2.
[AC2-wlan-ap-group-group1] ap-model WA6320
[AC2-wlan-ap-group-group1-ap-model-WA6320] radio 2
[AC2-wlan-ap-group-group1-ap-model-WA6320-radio-2] channel 6
[AC2-wlan-ap-group-group1-ap-model-WA6320-radio-2] service-template 1
# Enable radio 2.
[AC2-wlan-ap-group-group1-ap-model-WA6320-radio-2] radio enable
[AC2-wlan-ap-group-group1-ap-model-WA6320-radio-2] quit
9. Deploy the AP configuration file.
# Deploy configuration file apcfg.txt to the specified AP.
[AC2-wlan-ap-group-group1-ap-model-WA6320] map-configuration apcfg.txt
[AC2-wlan-ap-group-group1-ap-model-WA6320] quit
[AC2-wlan-ap-group-group1] quit
Configuring the core switch
1. Configure interfaces on the core switch.
# Create VLAN 100 and VLAN 20, and assign IP addresses to VLAN-interface 100 and VLAN-interface 20. The IP addresses are used to forward traffic inside the CAPWAP tunnels between the ACs and the AP.
<Core Switch> system-view
[Core Switch] vlan 100
[Core Switch-vlan100] quit
[Core Switch] interface vlan-interface 100
[Core Switch-Vlan-interface100] ip address 10.3.1.1 16
[Core Switch-Vlan-interface100] quit
[Core Switch] vlan 20
[Core Switch-vlan20] quit
[Core Switch] interface vlan-interface 20
[Core Switch-Vlan-interface20] ip address 10.1.1.3 16
[Core Switch-Vlan-interface20] quit
# Create VLAN 200 and VLAN-interface 200, and then assign an IP address to VLAN-interface 200. Wireless clients use the VLAN to access the wireless network.
[Core Switch] vlan 200
[Core Switch-vlan200] quit
[Core Switch] interface vlan-interface 200
[Core Switch-Vlan-interface200] ip address 10.4.1.1 16
[Core Switch-Vlan-interface200] quit
# Configure GigabitEthernet 1/0/1 (interface connected to AC 1) as a trunk port, and then assign it to VLAN 20.
[Core Switch] interface gigabitethernet 1/0/1
[Core Switch-GigabitEthernet1/0/1] port link-type trunk
[Core Switch-GigabitEthernet1/0/1] port trunk permit vlan 20
[Core Switch-GigabitEthernet1/0/1] quit
# Configure GigabitEthernet 1/0/2 (interface connected to AC 2) as a trunk port, and then assign it to VLAN 20.
[Core Switch] interface gigabitethernet 1/0/2
[Core Switch-GigabitEthernet1/0/2] port link-type trunk
[Core Switch-GigabitEthernet1/0/2] port trunk permit vlan 20
[Core Switch-GigabitEthernet1/0/2] quit
# Configure GigabitEthernet 1/0/3 (interface connected to the access switch) as a trunk port, and then assign it to VLAN 100 and VLAN 200.
[Core Switch] interface gigabitethernet 1/0/3
[Core Switch-GigabitEthernet1/0/3] port link-type trunk
[Core Switch-GigabitEthernet1/0/3] port trunk permit vlan 100 200
[Core Switch-GigabitEthernet1/0/3] quit
2. Configure DHCP.
# Configure DHCP address pool 100 to allocate IP addresses from network segment 10.3.0.0/16 to APs, and specify 10.3.1.1 as the gateway address.
[Core Switch] dhcp server ip-pool 100
[Core Switch-dhcp-pool-100] network 10.3.0.0 mask 255.255.0.0
[Core Switch-dhcp-pool-100] gateway-list 10.3.1.1
# Insert the hexadecimal IP addresses of AC 1 and AC 2 into DHCP Option 43.
[Core Switch-dhcp-pool-100] option 43 hex 800b0000020a0101010a010102
[Core Switch-dhcp-pool-100] quit
# Configure DHCP address pool 2 to allocate IP addresses from network segment 10.4.0.0/16 to clients. In this example, the DNS server address assigned to clients is the gateway address specified in the DHCP address pool, and the gateway address is 10.4.1.1. In live networks, configure the DNS server address assigned to clients according to the real network plan.
[Core Switch] dhcp server ip-pool 2
[Core Switch-dhcp-pool-2] network 10.4.0.0 mask 255.255.0.0
[Core Switch-dhcp-pool-2] gateway-list 10.4.1.1
[Core Switch-dhcp-pool-2] dns-list 10.4.1.1
[Core Switch-dhcp-pool-2] quit
# Enable DHCP.
[Core Switch] dhcp enable
3. Configure external network connectivity.
# Create VLAN 400 and VLAN-interface 400, and then assign an IP address to VLAN-interface 400. The core switch forwards traffic to external networks via VLAN 400.
[Core Switch] vlan 400
[Core Switch-vlan400] quit
[Core Switch] interface vlan-interface 400
[Core Switch-Vlan-interface400] ip address 10.10.1.1 16
[Core Switch-Vlan-interface400] quit
# Configure GigabitEthernet 1/0/4 (interface connected to the external network) as an access port, and then assign it to VLAN 400.
[Core Switch] interface gigabitethernet 1/0/4
[Core Switch-GigabitEthernet1/0/4] port link-type access
[Core Switch-GigabitEthernet1/0/4] port access vlan 400
[Core Switch-GigabitEthernet1/0/4] quit
# Configure a default route. The next hop is 10.10.1.2, which is the IP address of the router.
[Core Switch] ip route-static 0.0.0.0 0 10.10.1.2
Configuring the access switch
1. Create VLAN 100 and VLAN 200. VLAN 100 is used for AP connection, and VLAN 200 is used to forward wireless service traffic from clients.
<Access Switch> system-view
[Access Switch] vlan 100
[Access Switch-vlan100] quit
[Access Switch] vlan 200
[Access Switch-vlan200] quit
2. Configure GigabitEthernet 1/0/1 (interface connected to the core switch) as a trunk port, and then assign it to VLAN 100 and VLAN 200.
[Access Switch] interface gigabitEthernet 1/0/1
[Access Switch-GigabitEthernet1/0/1] port link-type trunk
[Access Switch-GigabitEthernet1/0/1] port trunk permit vlan 100 200
[Access Switch-GigabitEthernet1/0/1] quit
3. Configure GigabitEthernet 1/0/2 (interface connected to the AP) as a trunk port, remove it from VLAN 1, assign it to VLAN 100 and VLAN 200, and then set its PVID to VLAN 100.
[Access Switch] interface gigabitethernet 1/0/2
[Access Switch-GigabitEthernet1/0/2] port link-type trunk
[Access Switch-GigabitEthernet1/0/2] undo port trunk permit vlan 1
[Access Switch-GigabitEthernet1/0/2] port trunk permit vlan 100 200
[Access Switch-GigabitEthernet1/0/2] port trunk pvid vlan 100
4. Enable PoE.
[Access Switch-GigabitEthernet1/0/2] poe enable
[Access Switch-GigabitEthernet1/0/2] quit
Verifying the configuration
1. On AC 1, execute the display wlan ap-license-group command to display AP license synchronization group information. An AP license synchronization group has been created, and the number of licenses in the AP license synchronization group equals the sum of licenses installed on AC 1 and AC 2.
<AC1> display wlan ap-license-group
Group total licenses: 256
Group used licenses: 1
AP license synchronization: Enabled
Local IP: 10.1.1.1
Local role: Master
Member information: 1
IP address Total Used Member role State Online duration
10.1.1.2 0 0 Master UP 00hr 1min 51sec
2. On AC 1, execute the display wlan ap all command to verify that the AP is in R/M state.
<AC1> display wlan ap all
Total number of APs: 1
Total number of connected APs: 1
Total number of connected manual APs: 1
Total number of connected auto APs: 0
Total number of connected common APs: 1
Total number of connected WTUs: 0
Total number of inside APs: 0
Maximum supported APs: 384
Remaining APs: 383
Total AP licenses: 256
Local AP licenses: 256
Server AP licenses: 0
Remaining local AP licenses: 255
Sync AP licenses: 0
AP information
State : I = Idle, J = Join, JA = JoinAck, IL = ImageLoad
C = Config, DC = DataCheck, R = Run, M = Master, B = Backup
AP name AP ID State Model Serial ID
ap1 1 R/M WA6320 219801A28N819CE0002T
3. On AC 2, execute the display wlan ap all command to verify that the AP is in R/B state and the number of synchronized AP licenses is 256.
<AC2> display wlan ap all
Total number of APs: 1
Total number of connected APs: 1
Total number of connected manual APs: 1
Total number of connected auto APs: 0
Total number of connected common APs: 1
Total number of connected WTUs: 0
Total number of inside APs: 0
Maximum supported APs: 384
Remaining APs: 383
Total AP licenses: 256
Local AP licenses: 256
Server AP licenses: 0
Remaining local AP licenses: 256
Sync AP licenses: 256
AP information
State : I = Idle, J = Join, JA = JoinAck, IL = ImageLoad
C = Config, DC = DataCheck, R = Run, M = Master, B = Backup
AP name AP ID State Model Serial ID
ap1 1 R/B WA6320 219801A28N819CE0002T
4. Shut down VLAN-interface 20 on AC 1, and then verify that the AP can access the wireless network via AC 2 after a period. The waiting time depends on the CAPWAP tunnel keepalive timer. The default keepalive timer is 30 seconds.
On AC 2, execute the display wlan ap all command to verify that the AP is in R/M state.
<AC2> display wlan ap all
Total number of APs: 1
Total number of connected APs: 1
Total number of connected manual APs: 1
Total number of connected auto APs: 0
Total number of connected common APs: 1
Total number of connected WTUs: 0
Total number of inside APs: 0
Maximum supported APs: 384
Remaining APs: 383
Total AP licenses: 256
Local AP licenses: 256
Server AP licenses: 0
Remaining local AP licenses: 255
Sync AP licenses: 256
AP information
State : I = Idle, J = Join, JA = JoinAck, IL = ImageLoad
C = Config, DC = DataCheck, R = Run, M = Master, B = Backup
AP name AP ID State Model Serial ID
ap1 1 R/M WA6320 219801A28N819CE0002T
5. On AC 2, view client information.
Verify that client traffic remains uninterrupted during a master/backup AC switchover in local forwarding mode. You can use the display wlan persistent-client command on AC 2 to view information about clients kept online by client persistence.
<AC2> display wlan persistent-client
Total number of persistent clients: 2
MAC address APID RadioID AID BSSID
000f-e265-6400 1 2 1 001c-f08f-f804
84db-ac14-dd08 1 2 2 001c-f08f-f804
|
|
NOTE: · After the master/backup AC switchover is complete, online terminals do not need to come online again, and service traffic is thus not interrupted. · Before the clients kept online by client persistence come online again, no client operations information is collected for those clients. If this information is required, use the reset wlan persistent-client command to clear clients kept online by client persistence. Those clients then come online again. |
6. Bring up VLAN-interface 20 on AC 1, and then verify that the AP turns to AC 1 for wireless network access after a period.
On AC 1, execute the display wlan ap all command to verify that the AP is in R/M state.
On AC 2, execute the display wlan ap all command to verify that the AP is in R/B state.
Configuration files
AC 1
#
vlan 20
#
wlan service-template 1
ssid service
client forwarding-location ap
vlan 200
akm mode psk
preshared-key pass-phrase cipher $c$3$N//5BVbsOqdBTxi+7MJZKT6Zqh5MAmYs2ZzM
cipher-suite ccmp
security-ie rsn
service-template enable
#
interface Vlan-interface20
ip address 10.1.1.1 255.255.0.0
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan 20
#
ip route-static 0.0.0.0 0 10.1.1.3
#
wlan ap-group group1
priority 7
wlan tunnel-preempt enable
backup-ac ip 10.1.1.2
ap ap1
ap-model WA6320
radio 2
channel 6
radio enable
service-template 1
map-configuration flash:/apcfg.txt
#
wlan ap ap1 model WA6320
serial-id 219801A28N819CE0002T
#
wlan ap-license-group
local ip 10.1.1.1
member ip 10.1.1.2
ap-license-synchronization enable
#
AC 2
#
vlan 20
#
wlan service-template 1
ssid service
client forwarding-location ap
vlan 200
akm mode psk
preshared-key pass-phrase cipher $c$3$N//5BVbsOqdBTxi+7MJZKT6Zqh5MAmYs2ZzM
cipher-suite ccmp
security-ie rsn
service-template enable
#
interface Vlan-interface20
ip address 10.1.1.2 255.255.0.0
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan 20
#
ip route-static 0.0.0.0 0 10.1.1.3
#
wlan ap-group group1
backup-ac ip 10.1.1.1
ap ap1
ap-model WA6320
radio 2
channel 6
radio enable
service-template 1
map-configuration flash:/apcfg.txt
#
wlan ap ap1 model WA6320
serial-id 219801A28N819CE0002T
#
wlan ap-license-group
local ip 10.1.1.2
member ip 10.1.1.1
ap-license-synchronization enable
#
Core switch
#
dhcp enable
#
vlan 20
#
vlan 100
#
vlan 200
#
vlan 400
#
dhcp server ip-pool 100
gateway-list 10.3.1.1
network 10.3.0.0 mask 255.255.0.0
option 43 hex 800b0000020a0101010a010102
#
dhcp server ip-pool 2
gateway-list 10.4.1.1
network 10.4.0.0 mask 255.255.0.0
dns-list 10.4.1.1
#
interface Vlan-interface20
ip address 10.1.1.3 255.255.0.0
#
interface Vlan-interface100
ip address 10.3.1.1 255.255.0.0
#
interface Vlan-interface200
ip address 10.4.1.1 255.255.0.0
#
interface Vlan-interface400
ip address 10.10.1.1 255.255.0.0
#
interface GigabitEthernet1/0/1
port link-type trunk
port trunk permit vlan 20
#
interface GigabitEthernet1/0/2
port link-type trunk
port trunk permit vlan 20
#
interface GigabitEthernet1/0/3
port link-type trunk
port trunk permit vlan 100 200
#
interface GigabitEthernet1/0/4
port link-type access
port access vlan 400
#
ip route-static 0.0.0.0 0 10.10.1.2
#
Access switch
#
vlan 100
#
vlan 200
#
interface GigabitEthernet1/0/1
port link-mode bridge
port link-type trunk
port trunk permit vlan 1 100 200
#
interface GigabitEthernet1/0/2
port link-mode bridge
port link-type trunk
undo port trunk permit vlan 1
port trunk permit vlan 100 200
port trunk pvid vlan 100
poe enable
#
Related documentation
· AP Management Configuration Guide in H3C Access Controllers Configuration Guides
· AP Management Command Reference in H3C Access Controllers Command References
· WLAN High Availability Configuration Guide in H3C Access Controllers Configuration Guides
· WLAN High Availability Command Reference in H3C Access Controllers Command References
· AP License Synchronization Configuration Guide in H3C Access Controllers Configuration Guides
· AP License Synchronization Command Reference in H3C Access Controllers Command References

