Huawei WLAN Training

WLAN

Lab Guide for WLAN

Part 2

HUAWEI TECHNOLOGIES CO., LTD.

 Huawei WLAN Certification Training Lab Page 2
Guide

Common Icons

AC AP Core switch Access switch

Router PC STA

Huawei & TMI Proprietary and

Confidential Copyright © Huawei
Technologies Co.,Ltd
 Huawei WLAN Certification Training Lab Page 3
Guide

1 CAPWAP Configuration

1.1 Introduction
1.1.1 Networking Topology
Figure 1-1 Lab0

1.1.2 Lab Planning

Table 1 VLAN port types and parameters
VLAN Description Network
20 Interconnect AC-AP 172.16.20.0/24
/Mgmt AP
400 Management 172.16.40.0/24

Table 2 VLAN port types and parameters

Device Nom Port Port Type VLAN Settings Description
AC6605 AC3 GE0/0/1 trunk all To Switch
S5700 SW-LAB0 GE0/0/1 trunk All To AC

Table 3 IP address design

Device Interface IP Address
SW-LAB0 VLANIF 400 172.16.40.253/24
AC3 VLANIF 20 172.16.20.200/24
VLANIF 400 172.16.40.252/24

Huawei & TMI Proprietary and

Confidential Copyright © Huawei
Technologies Co.,Ltd
 Huawei WLAN Certification Training Lab Page 4
Guide

1.2 Lab Procedure

1.2.1 Configuration Roadmap

Configure the device names.

Create VLANs

Configure IP address

Configure IP address

Configure ports

Configure CAPWAP

Save the configuration.

1.2.2 Configuration Procedure

Step 1 Configure the device names.

# After entering the system view, run the sysname command to change the device name to SW-LAB0.

[Huawei]sysname SW-LAB0
- [SW-LAB0]

# After entering the system view, run the sysname command to change the device name to AC
[AC6605]sysname AC3
[AC3]

Huawei & TMI Proprietary and

Confidential Copyright © Huawei
Technologies Co.,Ltd
 Huawei WLAN Certification Training Lab Page 5
Guide
Step 2 Configure Management VLAN.

# On the switch
[SW-LAB0]vlan 20
[SW-LAB0-vlan20]description Management-AP
[SW-LAB0-vlan20]quit
[SW-LAB0]vlan 400
[SW-LAB0-vlan400]description Management
[SW-LAB0-vlan400]q

# On the AC, create vlans

[AC3]vlan 400
[AC3 -vlan400]descriotion Managment
[AC3-vlan400]quit

[AC3]vlan 20
[AC3-vlan20]description Mgmt-AP
[AC3-vlan20]q

Step 3 Configure IP addresses for the devices.

Configure IP addresses for the interfaces connecting the switch and AC according to the IP address
design.
# Set the IP address of VLANIF400 on SW to 172.16.40.253 and the subnet mask to 24.

[SW-LAB0]interface vlanif 400

[SW-Vlanif400]description Management
[SW-Vlanif400]ip address 172.16.40.253 24
[SW-Vlanif400]quit

# Set the IP address of VLANIF 400 on the AC to 172.16.40.252 and the subnet mask to 24.

[AC6605]interface Vlanif 400

[AC6605-Vlanif400]description Management
[AC6605-Vlanif400]ip address 172.16.40.252 24
[AC6605-Vlanif400]q

# Set the IP address of VLANIF 20 on the AC to 172.16.20.200 and the subnet mask to 24.

[AC3]interface vlanif 20
[AC3-Vlanif20]ip address 172.16.20.200 24
[AC3-Vlanif20]descritpion Mgmt AP
[AC3-Vlanif20]q
[AC3]

# Run the display this command on the AC's interface to verify the configuration result.

Huawei & TMI Proprietary and

Confidential Copyright © Huawei
Technologies Co.,Ltd
 Huawei WLAN Certification Training Lab Page 6
Guide

Step 4 Configure the Interfaces

On Switch, configure interface Ge0/0/1 connecting to AC as trunk interface.

[LAB0]interface GigabitEthernet 0/0/1
[LAB0-GigabitEthernet0/0/1]port link-type trunk
[LAB0 -GigabitEthernet0/0/1]port trunk allow-pass vlan all
[LAB0 -GigabitEthernet0/0/1]description to AC3

On AC, configure interface Ge0/0/1 connecting to switch SW-LAB0 as trunk interface

[AC3]interface GigabitEthernet 0/0/1

[AC3 -GigabitEthernet0/0/1]port link-type trunk
[AC3 -GigabitEthernet0/0/1]port trunk allow-pass vlan all
[AC3 -GigabitEthernet0/0/1]description to switch-LAB0

Step 5 Configure the CAPWAP:

On AC, configure the source of CAPWAP as interface vlanif20.

[AC3]capwap source interface Vlanif 20

Step 6 Verify the CAPWAP Configuration

[AC3] display capwap configuration

Step 6 Save the configuration

In the production environment, to prevent the configuration from becoming invalid after power-off or
fault recovery, save the device configuration.
# Run the save command in the user view of the AC and SW to save the device configurations. If the
message "saved successfully" is displayed, the configuration is savedsuccessfully.

[SW-LAB0]quit
<SW-LAB0>save
The current configuration will be written to the device.Are
you sure to continue? (y/n)[n]:y
It will take several minutes to save configuration file, please wait.......
Configuration file had been saved successfully
Note: The configuration file will take effect after being activated
<SW-LAB0>

[AC3]quit
<AC3>save
The current configuration will be written to the device.Are
you sure to continue? (y/n)[n]:y

Huawei & TMI Proprietary and

Confidential Copyright © Huawei
Technologies Co.,Ltd
 Huawei WLAN Certification Training Lab Page 7
Guide
It will take several minutes to save configuration file, please wait.......
Configuration file has been saved successfully
Note: The configuration file will take effect after being activated
<AC3>

# If the eNSP simulator is used for the lab, save the topology after saving the device configurations.
----End

Huawei & TMI Proprietary and

Confidential Copyright © Huawei
Technologies Co.,Ltd
 Huawei WLAN Certification Training Lab Page 8
Guide

2 Layer 2 Networking

1.3 Introduction
1.3.1 Networking Topology
Figure 1-1 Lab topology for Layer 2 Networking

1.3.2 Lab Planning

Table 2-1 VLAN port types and parameters
VLAN Description Réseaux
10 Interconnect AC-AP 192.168.10.0/24
/Mgmt AP
200 Management 192.168.200.0/24 (note:
AS connection with
cloud device)

Table 2-1 VLAN port types and parameters

Huawei & TMI Proprietary and
Confidential Copyright © Huawei
Technologies Co.,Ltd
 Huawei WLAN Certification Training Lab Page 9
Guide
Device Nom Port Port Type VLAN Settings Liaison with
AC6605 AC-FM GE0/0/2 trunk all To Switch
AP4050 AP01 GE0/0/0 - - To Switch
AP4050 AP02 GE0/0/0 - - To Switch
Switch SW-FM GE0/0/1 access 200 To local PC
S5700
GE0/0/2 trunk All To AC
GE0/0/3 trunk All/PVID:10 To AP01
GE0/0/4 trunk All/PVID:10 To AP02

Table 1-1 IP address design

Device Interface IP Address Fonction

SW-FM VLANIF 200 192.168.200.1/24 Management Access

AC-FM VLANIF 10 192.168.10.100/24 Source CAPWAP/

Server DHCP pour
les APs
VLANIF 200 192.168.200.150/24 Management access

Huawei & TMI Proprietary and

Confidential Copyright © Huawei
Technologies Co.,Ltd
 Huawei WLAN Certification Training Lab Page 10
Guide
1.4 Lab Procedure

1.4.1 Configuration Procedure

Step 1 Configure the basic parameters of AC using CLI.

# On the AC, create the vlan Management

< AC-FM>system-view
Enter system view, return user view with Ctrl+Z.
[AC-FM]vlan 200
[AC-FM-vlan200]description Mgmt
[AC-vlan200]quit
[AC-FM]vlan 10
[AC-FM –vlan10]descriotion Mgmt-AP
[AC-FM –vlan10]quit

# Create Management vlanif interface

[AC-FM]interface Vlanif 200
[AC-FM -Vlanif200]description Management
[AC-FM -Vlanif200]ip address 192.168.200.150 24
[AC-FM -Vlanif200]q
[AC-FM]
#Active Management web service on AC
[AC-FM]http server enable
This operation will take several minutes, please
wait...
Info:HTTP server has been started

#Create a local user admin-web with password FM**2023

[AC-FM]aaa
[AC-FM -aaa] local-user admin-web password cipher FM**2023
[AC-FM -aaa] local-user admin-web privilege level 15
[AC-FM -aaa] local-user admin-web service-type http
[AC-FM -aaa] quit
[AC-FM]

#Configure the interface connecting to switch

[AC3]interface GigabitEthernet 0/0/2
[AC3-GigabitEthernet0/0/2]port link-type trunk
[AC3-GigabitEthernet0/0/2]port trunk allow-pass vlan all
[AC6605-GigabitEthernet0/0/2]description to switch Format
[AC6605-GigabitEthernet0/0/2]q

Huawei & TMI Proprietary and

Confidential Copyright © Huawei
Technologies Co.,Ltd
 Huawei WLAN Certification Training Lab Page 11
Guide

Step 2 Configure the basic parameters of Switch using CLI

# On the SW, add name to the device and create VLANs

< HUAWEI>system-view
Enter system view, return user view with
Ctrl+Z.
[HUAWEI]sysname SW-FM
[SW-FM]vlan 200
[SW-FM -vlan200]descriotion Mgmt
[SW-FM -vlan200]quit
[SW-FM]vlan 10
[SW-FM –vlan10]descriotion Mgmt-AP
[SW-FM –vlan10]quit

# create Management vlanif interface

[SW-FM]interface Vlanif 200
[SW-FM -Vlanif200]description
Management
[SW-FM -Vlanif200]ip address 192.168.200.1 24
[SW-FM -Vlanif200]q
[SW-FM]

#Configure the interface G0/0/2 connecting to AC

[SW-FM]interface GigabitEthernet 0/0/2
[SW-FM -GigabitEthernet0/0/2]port link-type trunk
[SW-FM -GigabitEthernet0/0/2]port trunk allow-pass vlan all
[SW-FM -GigabitEthernet0/0/2]description to switch Format
[SW-FM -GigabitEthernet0/0/2]q

#Configure the interface G0/0/3 connecting to AP01

[SW-FM]interface GigabitEthernet 0/0/3
[SW-FM -GigabitEthernet0/0/3]port link-type trunk
[SW-FM -GigabitEthernet0/0/3] port trunk pvid vlan 10
[SW-FM -GigabitEthernet0/0/3]port trunk allow-pass vlan all
[SW-FM -GigabitEthernet0/0/3]description to AP01
[SW-FM -GigabitEthernet0/0/3]q

#Configure the interface G0/0/4 connecting to AP02

[SW-FM]interface GigabitEthernet 0/0/4
[SW-FM -GigabitEthernet0/0/4]port link-type trunk
[SW-FM -GigabitEthernet0/0/4] port trunk pvid vlan 10
[SW-FM -GigabitEthernet0/0/4]port trunk allow-pass vlan all
[SW-FM -GigabitEthernet0/0/4]description to AP02
[SW-FM -GigabitEthernet0/0/4]q

#Configure the interface G0/0/1 connecting to your laptop using the device Cloud
[SW-FM]interface GigabitEthernet 0/0/1
[SW-FM -GigabitEthernet0/0/1]port link-type access
[SW-FM -GigabitEthernet0/0/1] port default vlan 200
[SW-FM -GigabitEthernet0/0/1]description to AP01
[SW-FM -GigabitEthernet0/0/1]q

Huawei & TMI Proprietary and

Confidential Copyright © Huawei
Technologies Co.,Ltd
 Huawei WLAN Certification Training Lab Page 12
Guide

Step 3 Configure DHCP server on AC for APs.

# Enable DHCP server on AC-FM global

[AC-FM]dhcp enable
Info: The operation may take a few seconds. Please wait for a
moment.done.
[AC-FM]

# Enable DHCP server on AC-FM for vlan 10 using the interface vlanif 10

[AC-FM]interface Vlanif 10
[AC-FM-Vlanif10] ip address 192.168.10.100 255.255.255.0
[AC-FM-Vlanif10]dhcp select interface
[AC-FM-Vlanif10]dhcp server dns-list 8.8.8.8
[AC-FM-Vlanif10]q

# Run the ping command on SW to test the connectivity between the AC and SW. Thecommand
output shows that SW can ping the AC.

[SW-FM]ping 192.168.200.150
PING 192.168.200.150: 56 data bytes, press CTRL_C to break
Reply from 192.168.200.1: bytes=56 Sequence=1 ttl=255 time=90 ms
Reply from 192.168.200.1: bytes=56 Sequence=2 ttl=255 time=20 ms
Reply from 192.168.200.1: bytes=56 Sequence=3 ttl=255 time=10 ms
Reply from 192.168.200.1: bytes=56 Sequence=4 ttl=255 time=10 ms
Reply from 192.168.200.1: bytes=56 Sequence=5 ttl=255 time=10 ms

--- 192.168.200.150 ping statistics ---

5 packet(s) transmitted
5 packet(s) received
0.00% packet loss

Step 3 Configure the Cloud device as your Laptop.

Huawei & TMI Proprietary and

Confidential Copyright © Huawei
Technologies Co.,Ltd
 Huawei WLAN Certification Training Lab Page 13
Guide

And connect it to the switch on Port G0/0/1

Using your cmd, run ping to AC

Then open the web browser Firefox or Google Chrome and put on bar tab, the IP address of the AC

Huawei & TMI Proprietary and

Confidential Copyright © Huawei
Technologies Co.,Ltd
 Huawei WLAN Certification Training Lab Page 14
Guide
Step 3 Login in the web interface of AC using username admin-web and password FM**2023

Change the Password to New**2023

Huawei & TMI Proprietary and

Confidential Copyright © Huawei
Technologies Co.,Ltd
 Huawei WLAN Certification Training Lab Page 15
Guide

Login with the new password

Step 3 Check vlan liste using WEB on AC

Huawei & TMI Proprietary and

Confidential Copyright © Huawei
Technologies Co.,Ltd
 Huawei WLAN Certification Training Lab Page 16
Guide

Result :

Huawei & TMI Proprietary and

Confidential Copyright © Huawei
Technologies Co.,Ltd
 Huawei WLAN Certification Training Lab Page 17
Guide

Step 3 Configure CAPWAP protocol on AC with source as the Management AP VLANif 10

# Go to Configuration >AC Config > Basic Config

#Click on AC Configuration > select VLANIF > …

Huawei & TMI Proprietary and

Confidential Copyright © Huawei
Technologies Co.,Ltd
 Huawei WLAN Certification Training Lab Page 18
Guide

# another window open and select vlanif 10 and click ok

Huawei & TMI Proprietary and

Confidential Copyright © Huawei
Technologies Co.,Ltd
 Huawei WLAN Certification Training Lab Page 19
Guide

# clik then to apply button.and click ok

Step 5 display the version of AP and verify if the Aps obtained IP addresses from DHCP
server.

# on AP01, run the display ip interface brief command to view the IP address of AP1

Huawei & TMI Proprietary and

Confidential Copyright © Huawei
Technologies Co.,Ltd
 Huawei WLAN Certification Training Lab Page 20
Guide

# The same operation for AP2.

Huawei & TMI Proprietary and

Confidential Copyright © Huawei
Technologies Co.,Ltd
 Huawei WLAN Certification Training Lab Page 21
Guide

round-trip min/avg/max = 10/28/90 ms

Step 7 Save the configuration.

In the production environment, to prevent the configuration from becoming invalid after power-
off or fault recovery, save the device configuration.
# Run the save command in the user view of SW to save the device configurations. If the message
"saved successfully" is displayed, the configuration is savedsuccessfully.

<SW-FM>save
The current configuration will be written to the device.Are
you sure to continue? (y/n)[n]:y
It will take several minutes to save configuration file, please wait.......
Configuration file has been saved successfully
Note: The configuration file will take effect after being activated
<SW-FM>

#To save configuration, on AC you can use the web interface and click on save.

# If the eNSP simulator is used for the lab, save the topology after saving the device configurations.
----End

1.5 Verification
.

<AC-FM>dis current-configuration
#
set memory-usage threshold 0
#
ssl renegotiation-rate 1
#
vlan batch 10 200
#
authentication-profile name default_authen_profile
authentication-profile name dot1x_authen_profile
authentication-profile name mac_authen_profile
authentication-profile name portal_authen_profile
authentication-profile name macportal_authen_profile
#
diffserv domain default
#
vlan 10
description Mgmt-AP
vlan 200
description Mgmt
#
radius-server template default
#
pki realm default
rsa local-key-pair default
enrollment self-signed
Huawei & TMI Proprietary and
Confidential Copyright © Huawei
Technologies Co.,Ltd
 Huawei WLAN Certification Training Lab Page 22
# Guide
ike proposal default
encryption-algorithm aes-256
dh group14
authentication-algorithm sha2-256
authentication-method pre-share
integrity-algorithm hmac-sha2-256
prf hmac-sha2-256
#
free-rule-template name default_free_rule
#
portal-access-profile name portal_access_profile
#
aaa
authentication-scheme default
authentication-scheme radius
authentication-mode radius
authorization-scheme default
accounting-scheme default
domain default
authentication-scheme radius
radius-server default
domain default_admin
authentication-scheme default
local-user admin password irreversible-cipher $1a$`fAl+G%waU$It>7:pS"PD|aed0MT_
"InZu)J21dxWDU+XX0tiN8$
local-user admin privilege level 15
local-user admin service-type http
local-user admin-web password irreversible-cipher $1a$NL`AI2=i69$e|O]FHsOWWGCw!
CMS&<+$f=k${A)AH>U^jXO9K=J$
local-user admin-web privilege level 15
local-user admin-web service-type http
#
interface Vlanif10
description interco-AC-AP
ip address 192.168.10.100 255.255.255.0
#
interface Vlanif200
ip address 192.168.200.150 255.255.255.0
management-interface
#
interface MEth0/0/1
undo negotiation auto
duplex half
#
interface GigabitEthernet0/0/1
#
interface GigabitEthernet0/0/2
decription to SW-FM
port link-type trunk
port trunk allow-pass vlan 2 to 4094
#
interface GigabitEthernet0/0/3
#
interface GigabitEthernet0/0/4
#
interface GigabitEthernet0/0/5
#
interface GigabitEthernet0/0/6
#
interface GigabitEthernet0/0/7
#
Huawei & TMI Proprietary and
Confidential Copyright © Huawei
Technologies Co.,Ltd
 Huawei WLAN Certification Training Lab Page 23
Guide
interface GigabitEthernet0/0/8
#
interface GigabitEthernet0/0/9
#
interface GigabitEthernet0/0/10
#
interface GigabitEthernet0/0/11
#
interface GigabitEthernet0/0/12
#
interface GigabitEthernet0/0/13
#
interface GigabitEthernet0/0/14
#
interface GigabitEthernet0/0/15
#
interface GigabitEthernet0/0/16
#
interface GigabitEthernet0/0/17
#
interface GigabitEthernet0/0/18
#
interface GigabitEthernet0/0/19
#
interface GigabitEthernet0/0/20
#
interface GigabitEthernet0/0/21
undo negotiation auto
duplex half
#
interface GigabitEthernet0/0/22
undo negotiation auto
duplex half
#
interface GigabitEthernet0/0/23
undo negotiation auto
duplex half
#
interface GigabitEthernet0/0/24
undo negotiation auto
duplex half
#
interface XGigabitEthernet0/0/1
#
interface XGigabitEthernet0/0/2
#
interface NULL0
#
snmp-agent local-engineid 800007DB03000000000000
snmp-agent
#
ssh server secure-algorithms cipher aes256_ctr aes128_ctr
ssh server key-exchange dh_group14_sha1
ssh client secure-algorithms cipher aes256_ctr aes128_ctr
ssh client secure-algorithms hmac sha2_256
ssh client key-exchange dh_group14_sha1
#
capwap source interface vlanif10
#
user-interface con 0
authentication-mode password
user-interface vty 0 4
Huawei & TMI Proprietary and
Confidential Copyright © Huawei
Technologies Co.,Ltd
 Huawei WLAN Certification Training Lab Page 24
protocol inbound all Guide
user-interface vty 16 20
protocol inbound all
#
wlan
traffic-profile name default
security-profile name default
security-profile name default-wds
security-profile name default-mesh
ssid-profile name default
vap-profile name default
wds-profile name default
mesh-handover-profile name default
mesh-profile name default
regulatory-domain-profile name default
air-scan-profile name default
rrm-profile name default
radio-2g-profile name default
radio-5g-profile name default
wids-spoof-profile name default
wids-profile name default
wireless-access-specification
ap-system-profile name default
port-link-profile name default
wired-port-profile name default
serial-profile name preset-enjoyor-toeap
ap-group name default
provision-ap
#
dot1x-access-profile name dot1x_access_profile
#
mac-access-profile name mac_access_profile
#
return
<AC6605>

Huawei & TMI Proprietary and

Confidential Copyright © Huawei
Technologies Co.,Ltd
 Huawei WLAN Certification Training Lab Page 25
Guide

interface Vlanif1
ip address 192.168.1.1 255.255.255.0#
return