Example: Configuring AeroScout Wi-Fi Tag location

Introduction

AeroScout location is a system launched by AeroScout that uses a triangulation algorithm based on signal strength. The triangulation algorithm first requires determining the locations of the APs. It requires a minimum of three APs to send the collected client signal strengths to the location server. The server then calculates the distance of the client from each AP and determines the precise location of the client.

The following information provides an example of configuring AeroScout Wi-Fi tag location.

Network configuration

As shown in Figure 1, in the centralized forwarding architecture, the switch acts as the DHCP server to assign IP addresses to the APs and the client and supplies power to the APs through PoE. The AC collects Tag information for the client through AP 1, AP 2, and AP 3, and provides the information to the AeroScout location server to locate the client. Configure the following:

·     Configure the AeroScout location server for the server to initiate dynamic negotiation with the APs.

·     Configure the AC and the AeroScout location server to reach each other.

·     Configure AeroScout Tag location on the AC and set the central report mode.

Figure 1 Network diagram

 

Device	Interface	IP address	Device	Interface	IP address
AC	Vlan-int 100	192.168.100.10/24	Switch	Vlan-int 100	192.168.100.50/24
	Vlan-int 200	N/A		Vlan-int 200	192.168.200.50/24
	N/A	N/A		Vlan-int 300	192.168.30.50/24
AeroScout location server	N/A	192.168.30.10/24	N/A	N/A	N/A

 

Restrictions and guidelines

·     Use the serial ID labeled on the AP's rear panel to specify an AP.

·     Since the load on the APs is small and the traffic volume is low, configure the AC to report Tag information as a best practice. In this case, use the IP address of the AC as the IP addresses of APs on the AeroScout location server. If you configure APs to report Tag information directly, specify the actual IP addresses of APs on the location server.

Procedures

Configuring the AeroScout location server

1.     Complete location-related settings on the location server. For more information, see the configuration guides on the AeroScout official website.

2.     Specify the IP addresses of AP 1, AP 2, and AP 3 on the location server, or configure the server to discover APs through broadcast.

Configuring the AC

1.     Configure the AC interfaces:

# Create VLAN 100 and VLAN-interface 100, and assign an IP address for the interface. The AP will obtain the IP address to establish a CAPWAP tunnel with the AC.

<AC> system-view

[AC] vlan 100

[AC-vlan100] quit

[AC] interface vlan-interface 100

[AC-Vlan-interface100] ip address 192.168.100.10 24

[AC-Vlan-interface100] quit

# Create VLAN 200 and VLAN-interface 200, and assign an IP address for the interface. The client will use this VLAN to access the wireless network.

[AC] vlan 200

[AC-vlan200] quit

# Specify GigabitEthernet 1/0/1 that connects the AC to the switch as a trunk port and assign the port to VLAN 100 VLAN 100.

[AC] interface gigabitethernet 1/0/1

[AC-GigabitEthernet1/0/1] port link-type trunk

[AC-GigabitEthernet1/0/1] port trunk permit vlan 100 200

[AC-GigabitEthernet1/0/1] quit

2.     Configure a static route:

# Specify the next hop from the AC to the AeroScout location server as VLAN-interface 100 on the switch.

[AC] ip route-static 192.168.30.0 24 192.168.100.50

3.     Configure a wireless service template:

# Create service template 1 and enter its view.

[AC] wlan service-template 1

# Set the SSID to service.

[AC-wlan-st-1] ssid service

# Specify the AC as the client data forwarder. You can skip this step if the AC is the default client data forwarder.

[AC-wlan-st-1] client forwarding-location ac

# Specify the authentication and key management mode as PSK and set the PSK key to plaintext string 12345678.

[AC-wlan-st-1] akm mode psk

[AC-wlan-st-1] preshared-key pass-phrase simple 12345678

# Specify the cipher suite as CCMP and the security IE as RSN.

[AC-wlan-st-1] cipher-suite ccmp

[AC-wlan-st-1] security-ie rsn

# Enable the wireless service template.

[AC-wlan-st-1] service-template enable

[AC-wlan-st-1] quit

4.     Configure the APs:

 

NOTE: As a best practice, configure wireless settings based on AP groups for large-scale networks.

 

# Create AP office1, specify the AP model and AP serial number, and enable AeroScout location.

[AC] wlan ap office1 model WA6320

[AC-wlan-ap-office1] serial-id 219801A28N819CE0001T

[AC-wlan-ap-office1] rfid-tracking aeroscout enable

[AC-wlan-ap-office1] quit

# Create AP office2, specify the AP model and AP serial number, and enable AeroScout location.

[AC] wlan ap office2 model WA6320

[AC-wlan-ap-office2] serial-id 219801A28N819CE0002T

[AC-wlan-ap-office2] rfid-tracking aeroscout enable

[AC-wlan-ap-office2] quit

# Create AP office3, specify the AP model and AP serial number, and enable AeroScout location.

[AC] wlan ap office3 model WA6320

[AC-wlan-ap-office3] serial-id 219801A28N819CE0003T

[AC-wlan-ap-office3] rfid-tracking aeroscout enable

[AC-wlan-ap-office3] quit

# Create AP group group1, and set the report mode to central.

[AC] wlan ap-group group1

[AC-wlan-ap-group-group1] rfid-tracking aeroscout engine-detection dynamic

[AC-wlan-ap-group-group1] rfid-tracking aeroscout vendor-port 3000

[AC-wlan-ap-group-group1] rfid-tracking aeroscout report-mode central

# Configure an AP name-based grouping rule and an AP model-based grouping rule. Bind the service template to radio 1, and configure clients coming online from the radio to join VLAN 200. Enable the location feature on the radio, set the type of clients to be located to Tag, and enable radio 1.

[AC-wlan-ap-group-group1] ap office1 office2 office3

[AC-wlan-ap-group-group1] ap-model WA6320

[AC-wlan-ap-group-group1-ap-model-WA6320] radio 1

[AC-wlan-ap-group-group1-ap-model-WA6320-radio-1] service-template 1 vlan 200

[AC-wlan-ap-group-group1-ap-model-WA6320-radio-1] rfid-tracking radio enable

[AC-wlan-ap-group-group1-ap-model-WA6320-radio-1] rfid-tracking mode tag [AC-wlan-ap-group-group1-ap-model-WA6320-radio-1] radio enable

[AC-wlan-ap-group-group1-ap-model-WA6320-radio-1] quit

[AC-wlan-ap-group-group1] quit

Configuring the switch

1.     Configure the switch interfaces:

# Create VLAN 100 and VLAN-interface 100, and assign an IP address for the interface. The switch will use the interface to forward CAPWAP tunnel traffic between the AC and the APs.

<Switch> system-view

[Switch] vlan 100

[Switch-vlan100] quit

[Switch] interface vlan-interface 100

[Switch-Vlan-interface100] ip address 192.168.100.50 24

[Switch-Vlan-interface100] quit

# Create VLAN 200 and VLAN-interface 200, and assign an IP address for the interface. The switch will use the interface to forward the client traffic.

[Switch] vlan 200

[Switch-vlan200] quit

[Switch] interface vlan-interface 200

[Switch-Vlan-interface100] ip address 192.168.200.50 24

[Switch-Vlan-interface100] quit

# Create VLAN 300 and VLAN-interface 300, and assign an IP address for the interface. The switch will use the interface for traffic between the switch and the AeroScout server.

[Switch] vlan 300

[Switch-vlan300] quit

[Switch] interface vlan-interface 300

[Switch-Vlan-interface300] ip address 192.168.30.50 24

[Switch-Vlan-interface300] quit

# Specify GigabitEthernet 1/0/1 that connects the switch to the AC as a trunk port and assign the port to VLAN 100 and VLAN 200.

[Switch] interface gigabitethernet 1/0/1

[Switch-GigabitEthernet1/0/1] port link-type trunk

[Switch-GigabitEthernet1/0/1] port trunk permit 100 200

[Switch-GigabitEthernet1/0/1] quit

# Specify GigabitEthernet 1/0/2 that connects the switch to AP 1 as an access port, assign the port to VLAN 100, and enable PoE.

[Switch] interface gigabitethernet 1/0/2

[Switch-GigabitEthernet1/0/2] port link-type access

[Switch-GigabitEthernet1/0/2] port access vlan 100

[Switch-GigabitEthernet1/0/2] poe enable

[Switch-GigabitEthernet1/0/2] quit

# Specify GigabitEthernet 1/0/3 that connects the switch to AP 2 as an access port, assign the port to VLAN 100, and enable PoE.

[Switch] interface gigabitethernet 1/0/3

[Switch-GigabitEthernet1/0/3] port link-type access

[Switch-GigabitEthernet1/0/3] port access vlan 100

[Switch-GigabitEthernet1/0/3] poe enable

[Switch-GigabitEthernet1/0/3] quit

# Specify GigabitEthernet 1/0/4 that connects the switch to AP 3 as an access port, assign the port to VLAN 100, and enable PoE.

[Switch] interface gigabitethernet 1/0/4

[Switch-GigabitEthernet1/0/4] port link-type access

[Switch-GigabitEthernet1/0/4] port access vlan 100

[Switch-GigabitEthernet1/0/4] poe enable

[Switch-GigabitEthernet1/0/4] quit

# Specify GigabitEthernet 1/0/5 that connects the switch to the AeroScout location server as an access port, and assign the port to VLAN 300.

[Switch] interface gigabitethernet 1/0/5

[Switch-GigabitEthernet1/0/5] port link-type access

[Switch-GigabitEthernet1/0/5] port access vlan 300

[Switch-GigabitEthernet1/0/5] quit

2.     Configure the DHCP server:

# Enable the DHCP server feature.

[Switch] dhcp enable

# Create IP address pool 1 to allocate addresses in subnet 192.168.100.0/24 to the APs, and specify the gateway address as 192.168.100.50.

[Switch] dhcp server ip-pool 1

[Switch-dhcp-pool-1] network 192.168.100.0 mask 255.255.255.0

[Switch-dhcp-pool-1] gateway-list 192.168.100.50

[Switch-dhcp-pool-1] dns-list 192.168.100.50

[Switch-dhcp-pool-1] quit

# Create IP address pool 2 to allocate addresses in subnet 192.168.200.0/24 to the client. Specify the gateway address and the DNS server address. In this example, the DNS server address is the same as the gateway address.

[Switch] dhcp server ip-pool 2

[Switch-dhcp-pool-2] network 192.168.200.0 mask 255.255.255.0

[Switch-dhcp-pool-2] gateway-list 192.168.200.50

[Switch-dhcp-pool-2] dns-list 192.168.200.50

[Switch-dhcp-pool-2] quit

Verifying the configuration

# Display radio information for wireless location.

<AC> display wlan rfid-tracking radio

                                 Wireless Locating

--------------------------------------------------------------------------------

 AP                                 Radio   Type

--------------------------------------------------------------------------------

 office1                             1       Tag

 office2                             1       Tag

 office3                             1       Tag

--------------------------------------------------------------------------------

# Use graphics software to view the location of the Tag device in the wireless network through the map, table, or report format.

Configuration files

·     AC:

#

vlan 100

#

vlan 200

#

interface Vlan-interface100

 ip address 192.168.100.10 255.255.255.0

#

interface GigabitEthernet1/0/1

 port link-mode bridge

 port link-type trunk

 port trunk permit vlan 100 200

#

ip route-static 192.168.30.0 24 192.168.100.50

#

wlan service-template 1

 ssid service

 client forwarding-location ac

 akm mode psk

 preshared-key pass-phrase cipher $c$3$w3s2mpunZpe6lgDW6QOcBP8YJQ2yPbSrfDbg

 cipher-suite ccmp

 security-ie rsn

 service-template enable

#

wlan ap office1 model WA6320

 serial-id 219801A28N819CE0001T

 rfid-tracking aeroscout enable

#

wlan ap office2 model WA6320

 serial-id 219801A28N819CE0002T

 rfid-tracking aeroscout enable

#

 wlan ap office3 model WA6320

 serial-id 219801A28N819CE0003T

 rfid-tracking aeroscout enable

#

 wlan ap-group group1

 rfid-tracking aeroscout engine-detection dynamic

 rfid-tracking aeroscout vendor-port 3000

 rfid-tracking aeroscout report-mode central

 ap office1 office2 office3

 ap-model WA6320

 radio 1

 service-template 1 vlan 200

 rfid-tracking radio enable

 rfid-tracking mode tag

 radio enable

#

·     Switch:

#

dhcp enable

#

vlan 100

#

vlan 200

#

vlan 300

#

dhcp server ip-pool 1

 gateway-list 192.168.100.50

 network 192.168.100.0 mask 255.255.255.0

 dns-list 192.168.100.50

#

dhcp server ip-pool 2

 gateway-list 192.168.200.50

 network 192.168.200.0 mask 255.255.255.0

 dns-list 192.168.200.50

#

interface Vlan-interface100

 ip address 192.168.100.50 255.255.255.0

#

interface Vlan-interface200

 ip address 192.168.200.50 255.255.255.0

#

interface Vlan-interface300

 ip address 192.168.30.50 255.255.255.0

#

interface GigabitEthernet1/0/1

 port link-type trunk

 port trunk permit vlan 1 100 200

#

interface GigabitEthernet1/0/2

 port link-type access

 port access vlan 100

 poe enable

#

 interface GigabitEthernet1/0/3

 port link-type access

 port access vlan 100

 poe enable

#

 interface GigabitEthernet1/0/4

 port link-type access

 port access vlan 100

 poe enable

#

 interface GigabitEthernet1/0/5

 port link-type access

 port access vlan 300

#

Related documentation

·     Wireless Location Configuration Guide in H3C Access Controllers Configuration Guides

·     Wireless Location Command Reference in H3C Access Controllers Command References

·     WLAN Access Configuration Guide in H3C Access Controllers Configuration Guides

·     WLAN Access Command Reference in H3C Access Controllers Command References