No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

eSight V300R009C00 Operation Guide 10

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Service Deployment

Service Deployment

This section describes how to deploy WLAN services using eSight, including service deployment in multi-AC scenarios and single-AC scenarios.

Configuring WLAN Wireless Network Access Services

This section describes how to configure the WLAN wireless network access services.

Configuring VLANIF Interfaces and Address Pools

You can use eSight to configure VLANIF Interfaces and address pools on ACs and switches.

Context

After creating VLANs, you can configure VLANIF interfaces so that devices can communicate with other devices on the network layer.

If you want to enable APs and users to obtain IP addresses automatically after going online, you must configure IP address pools.

Procedure
  1. Choose Resource > Network > WLAN Management > Configuration and Deployment from the main menu.

  2. Choose Basic Configuration > VLAN IF & Address Pool.
  3. Click and select devices on which VLANs will be configured.
  4. Click a device name to access the VLANIF and address pool configuration page for the device.
  5. Click and select Create VLAN IF to configure VLANs and address pools.

    • Configure a VLANIF interface on the device.

      Configure VLAN ID and IP Address/Mask and set Address Pool to Close.

    • Configure a VLANIF and an address pool on the device.
      • Use the VLANIF interface addresses as the address pool.

        Configure VLAN ID and IP Address/Mask and set Address Pool to Open and The Address Pool Allocate to Interface Allocate.

        NOTE:

        If the IP address/mask is set to 192.168.0.1/24, the IP address of the VLANIF interface is 192.168.0.1 and the IP address range of the address pool is 192.168.0.2-192.168.0.254.

      • Use the DHCP server as the address pool.

        Configure VLAN ID and IP Address/Mask and set Address Pool to Open and The Address Pool Allocate to Relay. Relay IP Address indicates the IP address of the DHCP relay agent.

Follow-up Procedure

You can create multiple VLANs in batches. However, you cannot set IP Address/Mask for VLANIF interfaces during the batch creation process. After VLANs are created, you can click next to VLAN IF to set IP Address/Mask.

Configuring Tunnels Between ACs and APs

Configure VLAN channels between ACs and APs and set allow pass VLAN and default VLAN to ensure the connectivity of WLAN service channels.

Prerequisites

Interface groups have been created for interfaces carrying links between ACs and APs. Main interfaces are interfaces on ACs and switches. For details about how to create interface groups, see Creating Groups.

Procedure
  1. Choose Resource > Network > WLAN Management > Configuration and Deployment from the main menu.

  2. Choose Basic Configuration > Channel Configuration from the navigation tree.
  3. Click to select the target interface group.
  4. Set allow pass VLAN and default VLAN.

  5. Click the interface group name and to deliver configured parameters to the interfaces.

    • If the operation succeeds, is displayed at the upper left corner of the parameter.
    • If the operation fails, click at the upper left corner of the parameter to view the cause.

Follow-up Procedure
  • Modify configurations.

    If you need to modify a parameter of the interface group, click to modify the parameter and then click to deliver the configuration to the interfaces.

  • Undeploy configurations.
    • If you want to delete all configurations delivered to interfaces, move the pointer over a parameter and click the interface group name and to undeploy the corresponding configurations.
    • If you want to delete part of configurations delivered to interfaces, move the pointer over a parameter and click to undeploy the configuration.
NOTE:

After configurations are undeployed, default configurations are restored.

Configuring Basic AC Information

An AC manages APs, controls WLAN user access, and guarantees security. APs can be deployed only after the basic AC attributes are configured.

Prerequisites
  • AC devices have been added to eSight based on SNMP. For details, see Configuring the SNMP Protocol on Devices.

    After an AC is added to eSight, click the AC name in the device list to access the AC object manager. Choose Protocol Parameters > SNMP Parameters, set all parameters, and click Test. Ensure that the test is passed.

  • Telnet parameters have been set on the AC. For details, see Setting Telnet Parameters on Devices.

    After setting the parameters, click the AC name in the device list to access the AC object manager. Choose Protocol Parameters > Telnet Parameters, set all parameters, and click Test. Ensure that the test is passed.

  • The ssh client first-time enable command must be configured for an AC to enable the SSH client first authentication function.
Procedure
  1. Choose Resource > Network > WLAN Management > Configuration and Deployment from the main menu.

  2. Choose Global AC Configuration from the navigation tree on the left.
  3. Click next to AC to select an AC.
  4. Set the parameters.

  5. Click the AC name and to deliver set parameters to the AC.

    • If the operation succeeds, is displayed at the upper left corner of the parameter.
    • If the operation fails, click at the upper left corner of the parameter to view the cause.

Follow-up Procedure
  • Modify configurations.

    If you need to modify a parameter of the AC, move the pointer over the parameter, click to modify the parameter, and click to deliver the configuration to the AC.

  • Undeploy configurations.
    • If you want to delete all configurations delivered to devices, click the AC name and to undeploy the corresponding configurations.
    • If you want to delete part of configurations delivered to devices, move the pointer over a parameter and click to undeploy the configuration.
NOTE:

After configurations are undeployed, default configurations are restored.

Configuring Profiles

WLAN services are implemented by binding profiles. Before you configure WLAN services, plan parameters and create profiles.

Context

To configure basic WLAN services, you must configure the following profiles:

  • VAP profile

    APs can provide access services to wireless users only after service parameters are delivered to the APs. A VAP profile integrates service parameters. You can configure different VAPs for APs to provide differentiated WLAN services for users.

    A VAP profile must reference three profiles, namely, the SSID, security, and traffic profiles. You need to configure these three profiles before configuring a VAP profile.

    A VAP profile also references STA blacklist, STA whitelist, and authentication profiles as required.

    • If you need to configure the STA access mode in a VAP profile, you need to configure a STA blacklist or STA whitelist profile in advance.
    • If you want to configure authentication modes, you need to configure authentication profiles in advance.
  • Radio Management

    The radio profile contains a regulatory domain profile and is classified into 2G and 5G radio profile. The regulatory domain profile must be configured.

    • A domain profile provides configurations of the country code, calibration channel, and calibration bandwidth.
    • 2G and 5G radio profiles allow you to configure and optimize 2 GHz and 5 GHz radios. If appropriate RF profiles are configured and bound to APs, the radio capability of APs can better satisfy actual demands of networks.

      You can configure 2G or 5G radio profiles or both of them as required.

  • AP

    AP profiles include AP system profiles and wired port profiles that are mandatory.

    • An AP system profile allows you to configure basic AP information.
    • A wired port profile allows you to manage and configure wired ports on APs. By configuring wired port parameters in a wired port profile, you can easily manage APs. The wired port profile references the port link profile that allows you to manage and configure the link layer of APs' wired ports.

Other profiles are optional. You can configure them as required. For details about parameter settings in profiles, see the Profile Management in the AC product documentation.

Table 12-55 Optional profiles

Application Scenario

Profile Name

Function

Create Mesh networks.

Mesh profile

After a Mesh profile is bound to an AP, Mesh VAPs will be created on radios of the AP. It is usually used to create Mesh networks.

NOTE:

In general, an AP has two radios, radio-0 and radio-1. It is recommended that you bind Mesh and VAP profiles to different radios.

Create WDS networks.

WDS profile

After a WDS profile is bound to an AP, WDS VAPs will be created on radios of the AP. It is usually used to create WDS networks.

NOTE:

In general, an AP has two radios, radio-0 and radio-1. It is recommended that you bind WDS and VAP profiles to different radios.

Configure security detection.

WIDS profile

This profile specifies WIDS and WIPS parameters.

NOTE:

When binding profiles, you can enable the WIDS and WIPS functions in the radio configuration.

Configure energy saving policies.

Radio Management

2G/5G Radio Profile

By setting Auto Off Service, you can enable APs to disable radios when they are not used, saving energy.

Configure POE power supply.

AP profile

Port Link Profile

This profile enables the POE power supply function.

AP System Profile

This profile specifies detailed POE power supply parameters.

Procedure
  1. Choose Resource > Network > WLAN Management > Configuration and Deployment from the main menu.

  2. Choose AP Configuration from the navigation tree on the left.
  3. In the record of a device that supports WLAN service configuration, click or in the Operation column.

  4. Choose WLAN Feature > Profile Management from the navigation tree.
  5. Select types of profiles to create profiles.
    • Create one single profile.

      Click and set parameters.

    • Copy an existing profile to create a profile.

      Click next to an existing profile to modify parameters.

      NOTE:

      Creating a profile by copying an existing profile is applicable when most parameters of the new profile are the same as those of the existing profile.

Configuring the WLAN Service

eSight provides different deployment solutions to meet diversified user requirements in different scenarios.

Prerequisites

Profiles have been created. For details, see Configuring Profiles.

Scenario and Solution Overview

eSight provides different deployment solutions to meet diversified user requirements in different scenarios.

Solution

Applicable Scenario

Service deployment by AP group

This solution applies when there are multiple ACs and a large number of APs. It is mainly used to configure WLAN data services.

Service deployment for a single AC

This solution applies when there is only one AC and a small number of APs. This solution is mainly used to configure WLAN data services.

Service Deployment by AP Group

This solution applies when there are multiple ACs and a large number of APs. It is mainly used to configure WLAN data services.

  1. Choose Resource > Network > WLAN Management > Configuration and Deployment from the main menu.

  2. Choose AP Configuration from the navigation tree on the left.
  3. In the record of a device that supports WLAN service configuration, click in the Operation column. The corresponding object manager is displayed, containing the WLAN Feature > AP Group navigation tree on the left.

  4. Create an AP group and add APs on which services are to be deployed to the group.
  5. Click the AP group name and bind required service profiles to the AP group.
NOTE:

You need to set other parameters when binding VAP profiles and wired port profiles. Therefore, you need to add them to finish binding. You can directly bind other profiles and deploy them on ACs.

  • After VAP profiles are delivered to ACs, a WLAN ID is the unique identifier of a VAP profile. You can set 1-16 WLAN IDs.
  • In general, an AP has two radios: radio-0 and radio-1. radio-0 is a 2 GHz radio and radio-1 is a 5 GHz radio. You can choose a radio based on the site requirements.
Service Deployment for a Single AC

This solution applies when there is only one AC and a small number of APs. It is mainly used to configure WLAN data services.

  1. Go to the AC configuration page.
    1. Choose Resource > Network > Equipment > Network Device from the main menu.

    2. Click an AC name to go to the AC Object Manager.
  2. Create an AP group.

    Choose WLAN Feature > AP Group from the navigation tree on the left, create an AP group, and select APs on which services are to be deployed.

  3. Bind profiles to the AP group.

    Click the AP group name and bind required service profiles to the AP group.

    NOTE:

    You need to set other parameters when binding VAP profiles and wired port profiles. Therefore, you need to add them to finish binding. You can directly bind other profiles and deploy them on ACs.

    • After VAP profiles are delivered to ACs, a WLAN ID is the unique identifier of a VAP profile. You can set 1-16 WLAN IDs.
    • In general, an AP has two radios: radio-0 and radio-1. radio-0 is a 2 GHz radio and radio-1 is a 5 GHz radio. You can choose a radio based on the site requirements.

Configuring the Network-side Location Service

With the network-side location function, eSight can obtain locations of terminals and rogue objects (such as APs, clients, Ad Hoc, or bridges) in real time. This function facilitates WLAN management.

Prerequisites

The environment meets the requirements for enabling the WLAN location function. For details, see How Do I Ensure that WLAN Location Environment Meets Requirements.

Procedure
  1. Choose Resource > Network > Equipment > WLAN Resources from the main menu.

  2. Enable the network-side location function.

    Choose Region from the navigation tree. Click in the Operation column of a region to enable WLAN location in the region.

    • Rogue devices (such as rogue APs, ADHOC, bridges, and unauthorized clients) can be located only when the reporting mode is set to AC.
    • One or two APs can implement WLAN location, but the location result is not accurate enough. To ensure accuracy of WLAN location, enable the WLAN location function on at least three APs.
    • The WLAN location function can locate only unauthorized objects that have been detected and synchronized to eSight. For details, see Checking Whether Rogue Devices Are Synchronized to eSight.
      NOTE:

      To locate rogue devices, you need to enable the WIDS function on the device.

    • After enabling WLAN location in a region, wait about 1 minute before checking the results.
    • The number of WLAN location licenses required is determined by the number of APs that have WLAN location enabled.

  3. Check WLAN location results on eSight.

    In the monitoring mode, click Region Topology in the resource tree to view the location result.

    NOTE:

    If WLAN location fails or has a low efficiency after being enabled, rectify the fault according to WLAN Location Result Cannot Be Displayed.

    Location Result

    Procedure

    View terminal location information.

    Access the bottom-layer region and click in the topology toolbar. On the Terminal Location tab page, select terminals to be displayed in the topology.

    View location information about Bluetooth tags.

    Access the bottom-layer region and click in the topology bar. On the Bluetooth Tag Location tab page, select Bluetooth tags to be displayed in the topology.

    NOTE:

    Choose Resource > Network > Equipment > WLAN Resources from the main menu. You can choose Bluetooth Tag Management from the navigation tree on the left and view detailed information about located Bluetooth tags.

    View rogue devices.

    Access the bottom-layer region and click in the topology toolbar. On the Rogue Device tab page, select rogue device and interferer.

    View a user's historical track.

    Access the bottom-layer region, right-click a user that has been located, select View User Contrail, and specify a time range to view the user's track during this time range.

    NOTE:

    You can use the same method to view historical tracks of located Bluetooth tags.

Translation
Download
Updated: 2019-08-10

Document ID: EDOC1100011877

Views: 298148

Downloads: 611

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next