No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Fat AP and Cloud AP V200R008C00 CLI-based Configuration Guide

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Example for Configuring an AP with No Configuration to Enable STAs to Access the Public Network Through NAT

Example for Configuring an AP with No Configuration to Enable STAs to Access the Public Network Through NAT

Networking Requirements

As shown in Figure 9-20, an AP connects the Internet in wired mode after being powered on, and connects to STAs in wireless mode. Users in a household want to access the Internet through the AP after powering on it without performing any configuration. To meet the requirement, configure the AP with no configuration to enable STAs to access the public network through NAT. In household scenarios, users are allocated private IP addresses on the network segment 192.168.1.0/24 and want to access the public network through NAT.

Figure 9-20  Networking for configuring an AP to enable STAs to access the public network through NAT

Data Planning

Item Data

Country code

CN

Service VLAN for STAs

VLAN 100

DHCP server

The AP functions as the DHCP server for STAs.

IP address pool for STAs

192.168.1.2-192.168.1.254/24

SSID profile

  • Name: default-ssid

  • SSID name: HUAWEI-XXXX

In this example, the SSID name is HUAWEI-e900.

Security profile

  • Name: default-ssid

  • Security policy: open system authentication

VAP profile

  • Name: default-ssid

  • Service VLAN: VLAN 100

  • Referenced profiles: SSID profile default-ssid and security profile default-ssid

NAT Outbound

Private IP addresses on the network segment 192.168.1.0/24 are mapped to public IP addresses.

Configuration Roadmap

Power on an AP with no configuration and enable STAs to access the public network through NAT.

Configuration Notes

No ACK mechanism is provided for multicast packet transmission on air interfaces. In addition, wireless links are unstable. To ensure stable transmission of multicast packets, they are usually sent at low rates. If a large number of such multicast packets are sent from the network side, the air interfaces may be congested. You are advised to configure multicast packet suppression on switch interfaces connected to APs to reduce impact of a large number of low-rate multicast packets on the wireless network. Exercise caution when configuring the rate limit; otherwise, the multicast services may be affected. For details on how to configure traffic suppression, see How Do I Configure Multicast Packet Suppression to Reduce Impact of a Large Number of Low-Rate Multicast Packets on the Wireless Network?.

Procedure

  1. Confirm the country code.

    Warning: The default country code is CN. Ensure that AP radio attributes comply with laws and regulations in different countries. Do you want to change the country code? [Y/N]:n
    

  2. After being powered on, the AP with no configuration provides WLAN service coverage. STAs can associate with the WLAN with the SSID HUAWEI-e900 without entering the password, and access the public network through NAT.
  3. Checking the STA online result.

    # The configuration automatically takes effect after it is completed. Run the display vap ssid HUAWEI-e900 command. If Status in the command output displays ON, the VAP has been successfully created on the AP radios.

    <HUAWEI> display vap ssid HUAWEI-e900
    WID : WLAN ID
    -----------------------------------------------------------------------------------------
    AP MAC         RfID WID    BSSID          Status  Auth type        STA   SSID
    -----------------------------------------------------------------------------------------
    00bc-da3f-e900 0    1      00BC-DA3F-E900 ON    OPEN             0     HUAWEI-e900
    00bc-da3f-e900 1    2      00BC-DA3F-E910 ON    OPEN             0     HUAWEI-e900
    -----------------------------------------------------------------------------------------
    Total: 1

    # Connect a STA to the WLAN with the SSID HUAWEI-e900. After successfully associating with the WLAN, run the display station all command on the AP. The command output shows that the STAs have been connected to the WLAN HUAWEI-e900.

    <HUAWEI> display station all
    Rf/WLAN: Radio ID/WLAN ID
    Rx/Tx: link receive rate/link transmit rate(Mbps)
    -----------------------------------------------------------------------------------------------------
    STA MAC          Ap name        Rf/WLAN  Band  Type  Rx/Tx      RSSI  VLAN  IP address    SSID
    -----------------------------------------------------------------------------------------------------
    14cf-9202-13dc   00bc-da3f-e900 0/1      2.4G  11n   19/13      -63   100   10.1.3.254 HUAWEI-e900
    -----------------------------------------------------------------------------------------------------
    Total: 1 2.4G: 1 5G: 0
    # Run the display nat outbound command on the AP to check the address translation result.
    <HUAWEI> display nat outbound
     NAT Outbound Information:                                                      
     --------------------------------------------------------------------------------
     Interface                    Acl     Address-group/IP/Interface       Type     
     --------------------------------------------------------------------------------
     Vlanif1                      2000                           1         Easy IP 
     --------------------------------------------------------------------------------
      Total : 1     
    # Run the ping command on the AP to check verify that STAs on the private network can access the public network.
    <HUAWEI> ping -a 10.1.1.1 202.169.10.2
      PING 202.169.10.2: 56 data bytes, press CTRL_C to break                         
        Reply from 202.169.10.2: bytes=56 Sequence=1 ttl=255 time=1 ms                
        Reply from 202.169.10.2: bytes=56 Sequence=2 ttl=255 time=1 ms                
        Reply from 202.169.10.2: bytes=56 Sequence=3 ttl=255 time=1 ms                
        Reply from 202.169.10.2: bytes=56 Sequence=4 ttl=255 time=1 ms                
        Reply from 202.169.10.2: bytes=56 Sequence=5 ttl=255 time=1 ms                
    -- 202.169.10.2 ping statistics ---                                           
        5 packet(s) transmitted                                                     
        5 packet(s) received                                                        
        0.00% packet loss                                                           
        round-trip min/avg/max = 1/1/2 ms 

Translation
Download
Updated: 2019-01-11

Document ID: EDOC1000176006

Views: 129838

Downloads: 312

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next