Configuring Ethernet over GRE to Enable Layer 2 Communication Between an AC and a Wireless Gateway

WLAN V200R019C00 Typical Configuration Examples

Rate and give feedback:

Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).

Networking Requirements

As shown in Figure 5-94, an enterprise provides the Internet access service for users through a WLAN. On the network, APs provide access to user traffic, AC_1 provides AP access and user authentication, and AC_2 serves as the user gateway and assigns IP addresses to users. AC_1 and AC_2 are connected by an IP/MPLS backbone network. A large number of APs are involved in this scenario. To prevent severe resource consumption caused by frequent setup and deletion of a large number of GRE tunnels on AC_2, an administrator configures Ethernet over GRE (EoGRE) between AC_1 and AC_2 to implement Layer 2 communication.

Figure 5-94 Layer 2 communication between the wireless gateway and AC implemented through EoGRE

Data Planning

Table 5-91 WLAN data planning

Item	Data
Management VLAN for APs	VLAN 100
Service VLAN for STAs	VLAN 101
AC's source interface address	VLANIF 100: 10.23.100.1/24
DHCP server	AC_1 serves as a DHCP server to assign IP addresses to APs, and AC_2 serves as a DHCP server to assign IP addresses to STAs.
IP address pool for APs	10.23.100.2 to 10.23.100.254/24
IP address pool for STAs	10.23.101.3 to 10.23.101.254/24
AP group	Name: ap-group1 Referenced profiles: VAP profile wlan-net and regulatory domain profile default
Regulatory domain profile	Name: default Country code: China
SID profile	Name: wlan-net SSID name: wlan-net
Security profile	Name: wlan-net Security policy: WPA-WPA2+PSK+AES Password: a1234567
VAP profile	Name: wlan-net Forwarding mode: tunnel forwarding Service VLAN: VLAN 101 Referenced profiles: SSID profile wlan-net and security profile wlan-net

Table 5-92 EoGRE data planning

Item	Data
Tunnel interface on AC_1	Interface: Tunnel0/0/1 Tunnel protocol type: GRE IP address: 10.40.1.1/24 Source address: 10.20.1.1 Destination address: 10.30.1.1 Bound VE interface: VE0/0/1
Tunnel interface on AC_2	Interface: Tunnel0/0/1 Tunnel protocol type: GRE IP address: 10.40.1.2/24 Source address: 10.30.1.1 Destination address: 10.20.1.1 Bound VE interface: VE0/0/1
VE interface on AC_1	Interface type: Trunk Allowed VLAN: 101
VE interface on AC_2	Interface type: Trunk Allowed VLAN: 101

Configuration Roadmap

Use the configuration wizard to configure system parameters for AC_1 and AC_2.
Use the configuration wizard to configure APs to go online on AC_1.
Use the configuration wizard to configure WLAN services on AC_1.
Configure Ethernet over GRE on AC_1 and AC_2.
Deliver services to APs and verify the configuration.

Procedure

Configure system parameters for AC_1.
1. Perform basic AC configurations.
  # Choose Configuration > Config Wizard > AC. The Basic AC Configuration page is displayed.
  
  # Set Country/Region based on actual situations. For example, set Country/Region to China. Set System time to Manual and Date and time to PC.
  
  # Click Next. The Port Configuration page is displayed.
2. Configure ports.
  # Select GigabitEthernet0/0/1, expand Batch Modify, set Interface type to Trunk, and add GigabitEthernet0/0/1 to VLAN 10.
  
  # Click Apply. In the dialog box that is displayed, click OK.
  
  # Set Interface type of GigabitEthernet0/0/2 to Trunk, and add the interface to VLAN 100 and VLAN 101 in the same way.
  
  If the AC and AP are directly connected, set the default VLAN of the interface connected to the AP to management VLAN 100.
  
  # Click Next. The Network Interconnection Configuration page is displayed.
3. Configuring network interconnections.
  # Click Create under Interface Configuration. The Create Interface Configuration page is displayed.
  
  # Set the IP address of VLANIF 100 to 10.23.100.1/24.
  
  # Click Create under DHCPv4 Address Pool List, select Interface address pool and select VLANIF 100.
  
  # Click OK.
  
  # Set the IP address of VLANIF 10 to 10.20.1.1/24 in the same way.
  
  # Click Next.
  
  # Click Next. The AC Source Address page is displayed.
4. Configure the source address for AC.
  # Set AC source address to VLANIF. Click the browse button and select Vlanif100.
  
  # Click Next. The Confirm Settings page is displayed.
5. Confirm the configuration.
  # Confirm the configuration and click Continue With AP Online.
Configure system parameters for AC_2.
Complete the following configurations in the same way as configuring AC_1.
- Set Interface type of GigabitEthernet0/0/1 to Trunk and add the interface to VLAN 10. Set Interface type of GigabitEthernet0/0/2 to Trunk and add the interface to VLAN 101.
- Set the IP address of VLANIF 101 to 10.23.101.1/24 and DHCP type to Interface address pool. Specify IP address 10.23.101.2 that cannot be automatically assigned.
- Set the IP address of VLANIF 10 to 10.30.1.1/24.
Configure an AP to go online on AC_1.
1. Configure APs to go online.
  # Click Batch Import. The Batch Import page is displayed. Click to download an AP template file to your local computer.
  # Fill in the AP template file with AP information according to the following example. To add multiple APs, fill in the file with information of the APs.
  - AP MAC: 60de-4476-e360
  - AP SN: 210235419610CB002287
  - AP Name: area_1
  - AP Group: ap-group1
  If you set AP authentication mode to MAC address authentication, the AP's MAC address is mandatory and the AP's SN is optional.
  If you set AP authentication mode to SN authentication, the AP's SN is mandatory and the AP's MAC address is optional.
  
  You are advised to export the radio ID, AP channel, frequency bandwidth, and power planned on WLAN Planner to a .csv file, and then enter them in the AP template file. Set the longitude and latitude as required.
  # Click next to Import AP File, select the AP template file, and click Import.
  
  # On the page that displays the template import result, click OK.
  
  # Click Next. The Group APs page is displayed.
  
  # AP group information has been added in the AP template file. Click Next. The Confirm Configurations page is displayed.
2. Confirm the configuration.
  # Confirm the configuration and click Continue With Wireless Service Configuration.
Configure WLAN services on AC_1.
# Click Create. The Basic Information page is displayed.

# Configure the SSID name, forwarding mode, and service VLAN ID.

Click Next. The Security Authentication page is displayed.

# Set Security settings to Key (applicable to personnel networks) and set the key.

# Click Next. The Access Control page is displayed.

# Set Binding the AP group to ap-group1.

Click Finish.
Configure Ethernet over GRE.
# The following assumes that IGP is run between all devices for communication on the public network, the source and destination interface IP addresses of the GRE tunnel on AC_1 is 10.20.1.1 and 10.30.1.1, respectively.
1. Configure Ethernet over GRE on AC_1.
  # Choose Configuration > Other Services > VPN > GRE. The GRE page is displayed.
  
  # Click Create. The Create GRE page is displayed.
  
  # Set Tunnel ID to 1, IP address/mask to 10.40.1.1/255.255.255.0, Tunnel destination address to 10.30.1.1, Tunnel source address type to IP address, and the tunnel source IP address to 10.20.1.1.
  
  # Click next to VE interface bound to EoGRE. On the page that is displayed, click Create to create Virtual-Ethernet0/0/1 and add the VE interface to VLAN 101. Note that the VE interface must be added to the same VLAN to which the inbound interface of user-side packets belongs.
  
  # Click OK. In the dialog box that is displayed, click OK. On the VE interface page that is displayed, select Virtual-Ethernet0/0/1 and click OK.
  
  # Click OK.
2. Configure Ethernet over GRE on AC_2.
  Complete the following configurations in the same way as configuring AC_1.
  - Create a GRE tunnel. Set Tunnel ID to 1, IP address/mask to 10.40.1.2/255.255.255.0, Tunnel destination address to 10.20.1.1, Tunnel source address type to IP address, and the tunnel source IP address to 10.30.1.1.
  - Create Virtual-Ethernet0/0/1 and add it to VLAN 101.
  - Bind Virtual-Ethernet0/0/1 to the GRE tunnel.
Verify the configuration.
1. Choose Monitoring > SSID > VAP. In VAP List, check VAP status. You can see that the status of the VAP in wlan-net is normal.
2. The WLAN with the SSID wlan-net is available.
3. The STA can associate with the WLAN and obtain an IP address 10.23.101.x/24, and its gateway address is 10.23.101.1.
4. Choose Monitoring > User > User List. All online users are displayed in User List. You can use the filtering function to filter the display results. For example, click next to SSID. Set the filtering condition, enter wlan-net, and click OK. Users connected to the SSID wlan-net are displayed. Multi-column filtering is supported to accurately query online users.