Example for Configuring Vehicle-Ground Fast Link Handover
Service Requirements
To reduce network deployment costs and better serve passengers, a rail transportation enterprise wants to use WLAN technology to implement vehicle-ground communications and expects that multicast servers on the ground network can deliver multimedia information services to passengers.
Networking Requirements
- AC networking mode: Layer 2 bypass mode
- Wireless backhaul mode: Mesh-based vehicle-ground fast link handover
- Backhaul radio: 5 GHz radio
Data Planning
AP |
MAC |
|---|---|
Trackside AP (L1_001) |
0046-4b59-1d10 |
Trackside AP (L1_003) |
0046-4b59-1d20 |
Trackside AP (L1_010) |
0046-4b59-1d30 |
Trackside AP (L1_150) |
0046-4b59-1d40 |
Trackside AP (L1_160) |
0046-4b59-1d50 |
Trackside AP (L1_170) |
0046-4b59-1d60 |
Depot AP (L1_180) |
0046-4b59-1d70 |
Depot AP (L1_190) |
0046-4b59-1d80 |
... |
|
Vehicle-mounted AP (in the front) |
0046-4b59-2e10 |
Vehicle-mounted AP (in the rear) |
0046-4b59-2e20 |
... |
|
Item |
Data |
|---|---|
Management VLAN |
VLAN 100 |
Multicast service VLAN |
VLAN 101 |
Service VLAN for STAs |
VLAN 200 |
DHCP server |
|
AC's source interface address |
VLANIF 100: 10.23.100.1/24 |
Gateway address |
IP address of VLANIF 101 on Switch_A: 10.23.224.1/24 |
IP address pool for trackside APs |
10.23.100.2 to 10.23.100.254/24 |
IP address pool for vehicle-mounted terminals |
10.23.224.4 to 10.23.224.254/24 |
AP group for trackside APs |
Name: mesh-mpp |
IDs of trackside APs |
|
AP group for depot APs |
Name: mesh-depot |
Depot AP ID |
|
AP wired port profile |
|
Security profile |
|
AP system profile |
|
Mesh profile for trackside APs |
|
Mesh profile for depot APs |
|
Mesh profile 1 for vehicle-mounted APs |
|
Mesh profile 2 for vehicle-mounted APs |
|
Mesh handover profile |
Trackside APs:
Vehicle-mounted APs:
|
Mesh whitelist on trackside APs |
Name: whitelist01 Add MAC addresses of all vehicle-mounted APs on trains running on the rail to the whitelist according to actual situations. |
MAC addresses of proxied ground devices |
|
MAC addresses of proxied vehicle-mounted devices |
|
Multicast group |
225.1.1.1-225.1.1.3 |
Configuration Roadmap
- Configure the ground network to enable Layer 2 communications between trackside APs and the AC.
- Configure multicast services on ground network devices to enable proper multicast data forwarding on the ground network.
- Configure vehicle-ground fast link handover on trackside and vehicle-mounted APs so that the vehicle-mounted AP can set up Mesh links with the trackside APs.
- Configure the vehicle-mounted network to enable intra-network data communications.
- Switches and routers used in this example are all Huawei products.
Configuration Notes
- No ACK mechanism is provided for multicast packet transmission on air interfaces. In addition, wireless links are unstable. To ensure stable transmission of multicast packets, they are usually sent at low rates. If a large number of such multicast packets are sent from the network side, the air interfaces may be congested. You are advised to configure multicast packet suppression to reduce impact of a large number of low-rate multicast packets on the wireless network. Exercise caution when configuring the rate limit; otherwise, the multicast services may be affected.
- In direct forwarding mode, you are advised to configure multicast packet suppression on switch interfaces connected to APs.
- In tunnel forwarding mode, you are advised to configure multicast packet suppression in traffic profiles of the AC.
Configure port isolation on the interfaces of the device directly connected to APs. If port isolation is not configured and direct forwarding is used, a large number of unnecessary broadcast packets may be generated in the VLAN, blocking the network and degrading user experience.
In tunnel forwarding mode, the management VLAN and service VLAN cannot be the same. Only packets from the management VLAN are transmitted between the AC and APs. Packets from the service VLAN are not allowed between the AC and APs.
Procedure
- Configure ground network devices.
- Configure an IP address for GE1/0/0 on Router and configure routes to the internal network segment, with the next hop address 10.23.200.2.
<Huawei> system-view [Huawei] sysname Router [Router] interface gigabitethernet 1/0/0 [Router-GigabitEthernet1/0/0] ip address 10.23.200.1 24 [Router-GigabitEthernet1/0/0] quit [Router] ip route-static 10.23.224.0 24 10.23.200.2 [Router] ip route-static 10.23.100.0 24 10.23.200.2
You can configure routes to external networks and the NAT function on the egress router according to service requirements to ensure normal communications between internal and external networks.
- Enable Layer 2 multicast on Switch_A, Switch_B, and Switch_C to allow them to properly forward multicast data.# Enable IGMP snooping globally on Switch_A.
[Switch_A] igmp-snooping enable
# Enable IGMP snooping in VLAN 101 on Switch_A.[Switch_A] vlan 101 [Switch_A-vlan101] igmp-snooping enable [Switch_A-vlan101] quit
# Configure multicast group filter policies on Switch_A.[Switch_A] acl 2000 [Switch_A-acl-basic-2000] rule permit source 225.1.1.1 0 [Switch_A-acl-basic-2000] rule permit source 225.1.1.2 0 [Switch_A-acl-basic-2000] rule permit source 225.1.1.3 0 [Switch_A-acl-basic-2000] quit
# Apply the multicast group filter policies in VLAN 101 on Switch_A.[Switch_A] vlan 101 [Switch_A-vlan101] igmp-snooping group-policy 2000 [Switch_A-vlan101] quit [Switch_A] quit
# Complete multicast configuration on Switch_B and Switch_C according to the multicast configuration procedure of Switch_A.
# Configure the fast leave function on Switch_B and Switch_C.If trackside APs are directly connected to the switches and Layer 2 multicast is configured, enabling the fast leave function improves the quality of multicast services. If the trackside APs are not directly connected to the switches or Layer 3 multicast is configured, you cannot configure the fast leave function because this function may interrupt multicast services.
[Switch_B] vlan 101 [Switch_B-vlan101] igmp-snooping prompt-leave group-policy 2000
[Switch_C] vlan 101 [Switch_C-vlan101] igmp-snooping prompt-leave group-policy 2000
- Configure the AP group and AC's source interface.
# Create the AP group mesh-mpp and add trackside APs that require the same configuration to the group.
[AC] wlan [AC-wlan-view] ap-group name mesh-mpp [AC-wlan-ap-group-mesh-mpp] quit
# Create the AP group mesh-depot and add depot APs that require the same configuration to the group.
[AC-wlan-view] ap-group name mesh-depot [AC-wlan-ap-group-mesh-depot] quit
# Create a regulatory domain profile, and bind the profile to the AP group.
[AC-wlan-view] regulatory-domain-profile name default [AC-wlan-regulate-domain-default] quit [AC-wlan-view] ap-group name mesh-mpp [AC-wlan-ap-group-mesh-mpp] regulatory-domain-profile default Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continue?[Y/N]:y [AC-wlan-ap-group-mesh-mpp] quit [AC-wlan-view] ap-group name mesh-depot [AC-wlan-ap-group-mesh-depot] regulatory-domain-profile default Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continue?[Y/N]:y [AC-wlan-ap-group-mesh-depot] quit [AC-wlan-view] quit
# Configure the AC's source interface.
[AC] capwap source interface vlanif 100
# Add trackside APs to the AP group mesh-mpp and depot APs to the AP group mesh-depot.The default AP authentication mode is MAC address authentication. If the default settings are retained, you do not need to run the ap auth-mode mac-auth command.
[AC] wlan [AC-wlan-view] ap auth-mode mac-auth [AC-wlan-view] ap-id 1 ap-mac 0046-4b59-1d10 [AC-wlan-ap-1] ap-name L1_001 [AC-wlan-ap-1] ap-group mesh-mpp Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:y [AC-wlan-ap-1] quit [AC-wlan-view] ap-id 2 ap-mac 0046-4b59-1d20 [AC-wlan-ap-2] ap-name L1_003 [AC-wlan-ap-2] ap-group mesh-mpp Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:y [AC-wlan-ap-2] quit [AC-wlan-view] ap-id 3 ap-mac 0046-4b59-1d30 [AC-wlan-ap-3] ap-name L1_010 [AC-wlan-ap-3] ap-group mesh-mpp Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:y [AC-wlan-ap-3] quit [AC-wlan-view] ap-id 101 ap-mac 0046-4b59-1d40 [AC-wlan-ap-101] ap-name L1_150 [AC-wlan-ap-101] ap-group mesh-mpp Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:y [AC-wlan-ap-101] quit [AC-wlan-view] ap-id 102 ap-mac 0046-4b59-1d50 [AC-wlan-ap-102] ap-name L1_160 [AC-wlan-ap-102] ap-group mesh-mpp Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:y [AC-wlan-ap-102] quit [AC-wlan-view] ap-id 103 ap-mac 0046-4b59-1d60 [AC-wlan-ap-103] ap-name L1_170 [AC-wlan-ap-103] ap-group mesh-mpp Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:y [AC-wlan-ap-103] quit [AC-wlan-view] ap-id 201 ap-mac 0046-4b59-1d70 [AC-wlan-ap-201] ap-name L1_180 [AC-wlan-ap-201] ap-group mesh-depot Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:y [AC-wlan-ap-201] quit [AC-wlan-view] ap-id 202 ap-mac 0046-4b59-1d80 [AC-wlan-ap-202] ap-name L1_190 [AC-wlan-ap-202] ap-group mesh-depot Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:y [AC-wlan-ap-202] quit
- Configure an IP address for GE1/0/0 on Router and configure routes to the internal network segment, with the next hop address 10.23.200.2.
- Configure vehicle-mounted network devices.
This example provides the detailed procedure for configuring the vehicle-mounted AP in the front of the train. The procedure for configuring the vehicle-mounted AP in the rear is similar. The configuration differences are described in the subsequent steps.
- Configure vehicle-ground fast link handover parameters.
# Configure the security profile sp01 used by Mesh links. Set the security policy to WPA2+PSK+AES in the security profile.
[AP] wlan [AP-wlan-view] security-profile name sp01 [AP-wlan-sec-prof-sp01] security wpa2 psk pass-phrase a1234567 aes//Ensure that the PSK is set to the same as that on the trackside AP. [AP-wlan-sec-prof-sp01] quit
# Configure the Mesh handover profile hand-over, enable the location-based fast link handover algorithm, and set the moving direction of the vehicle-mounted AP to forward.
[AP-wlan-view] mesh-handover-profile name hand-over [AP-wlan-mesh-handover-hand-over] location-based-algorithm enable moving-direction forward [AP-wlan-mesh-handover-hand-over] quit
In this example, the moving direction of the vehicle-mounted AP in the rear must be set to backward.
# Configure the Mesh profile. Set the ID of the Mesh network to mesh-net and apply the security profile and Mesh handover profile.
[AP-wlan-view] mesh-profile name mesh-net [AP-wlan-mesh-prof-mesh-net] mesh-id mesh-net [AP-wlan-mesh-prof-mesh-net] security-profile sp01 [AP-wlan-mesh-prof-mesh-net] mesh-handover-profile hand-over [AP-wlan-mesh-prof-mesh-net] quit
- Configure vehicle-ground fast link handover parameters.
- Verify the configuration.
# After vehicle-ground fast link handover configuration is complete, run the display wlan mesh link all command on the AC to view Mesh links between trackside and vehicle-mounted APs.
<AC> display wlan mesh link all Rf : radio ID Dis : coverage distance(100m) Ch : channel Per : drop percent(%) TSNR : total SNR(dB) P- : peer Mesh : Mesh mode Re : retry ratio(%) RSSI : RSSI(dBm) MaxR : max RSSI(dBm) ---------------------------------------------------------------------------------------------------------------------------------- APName P-APName P-APMAC Rf Dis Ch Mesh P-Status RSSI MaxR Per Re TSNR SNR(Ch0~3:dB) Tx(Mbps) Rx(Mbps) ---------------------------------------------------------------------------------------------------------------------------------- L1_001 AP 0046-4b59-2e10 1 3 157 portal - -51 -38 0 0 47 39/47/-/- 192 192 L1_003 AP 0046-4b59-2e10 1 3 157 portal - -59 -7 0 0 50 19/14/37/- 192 192 L1_010 AP 0046-4b59-2e10 1 3 157 portal - -45 -33 0 0 37 20/17/17/- 192 192 L1_150 AP 0046-4b59-2e10 1 3 157 portal - -54 -39 0 0 46 34/43/-/- 192 192 L1_160 AP 0046-4b59-2e10 1 3 157 portal - -52 -7 0 0 32 21/18/35/- 192 192 L1_170 AP 0046-4b59-2e10 1 3 157 portal - -42 -33 0 0 29 26/14/19/- 192 192 ---------------------------------------------------------------------------------------------------------------------------------- Total: 6
# Run the display mesh-neighbor-rssi command on the AC to view RSSI information about trackside APs.
<AC> display mesh-neighbor-rssi Info: This operation may take a few seconds, please wait.done. AP name/MAC/Radio/Location-ID Neighbor AP/MAC/Location-ID RSSI Update Time ------------------------------------------------------------------------------ L1_001/0046-4b59-1d10/1/1 -/0046-4b59-2e10/- -44 18:08:21 L1_003/0046-4b59-1d20/1/3 -/0046-4b59-2e10/- -50 18:08:20 L1_010/0046-4b59-1d30/1/10 -/0046-4b59-2e10/- -28 18:08:21 L1_150/0046-4b59-1d40/1/150 -/0046-4b59-2e10/- -43 18:08:20 L1_160/0046-4b59-1d50/1/160 -/0046-4b59-2e10/- -47 18:08:21 L1_170/0046-4b59-1d60/1/170 -/0046-4b59-2e10/- -38 18:08:21 ------------------------------------------------------------------------------ Total: 6# Run the display mesh-handover-trace command on the vehicle-mounted AP to view roaming traces of the vehicle-mounted AP.
<AP> display mesh-handover-trace Info: This operation may take a few seconds, please wait.done. Index Timestamp From AP MAC/RSSI/Location-ID To AP MAC/RSSI/Location-ID ------------------------------------------------------------------------------ 1 18:52:27 0046-4b59-1d50/-95/160 0046-4b59-1d60/-15/170 2 18:50:46 0046-4b59-1d40/-95/150 0046-4b59-1d50/-34/160 3 18:49:25 0046-4b59-1d30/-95/10 0046-4b59-1d40/-11/150 4 18:48:56 0046-4b59-1d20/-95/3 0046-4b59-1d30/-40/10 5 18:47:39 0046-4b59-1d10/-47/1 0046-4b59-1d20/-36/3 ------------------------------------------------------------------------------
Configuration Files
- Ground network devices
Router configuration file
# sysname Router # interface GigabitEthernet1/0/0 ip address 10.23.200.1 255.255.255.0 # ip route-static 10.23.100.0 255.255.255.0 10.23.200.2 ip route-static 10.23.224.0 255.255.255.0 10.23.200.2 # return
Switch_A configuration file
# sysname Switch_A # vlan batch 100 to 101 200 # igmp-snooping enable # dhcp enable # vlan 101 igmp-snooping enable igmp-snooping group-policy 2000 # acl number 2000 rule 5 permit source 225.1.1.1 0 rule 10 permit source 225.1.1.2 0 rule 15 permit source 225.1.1.3 0 # interface Vlanif101 ip address 10.23.224.1 255.255.255.0 dhcp select interface dhcp server excluded-ip-address 10.23.224.2 10.23.224.3 # interface Vlanif200 ip address 10.23.200.2 255.255.255.0 # interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 100 to 101 # interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan 100 to 101 # interface GigabitEthernet0/0/3 port link-type trunk port trunk pvid vlan 101 port trunk allow-pass vlan 101 # interface GigabitEthernet0/0/4 port link-type trunk port trunk pvid vlan 101 port trunk allow-pass vlan 101 # interface GigabitEthernet0/0/5 port link-type trunk port trunk pvid vlan 200 port trunk allow-pass vlan 200 # interface GigabitEthernet0/0/6 port link-type trunk port trunk allow-pass vlan 100 # ip route-static 0.0.0.0 0.0.0.0 10.23.200.1 # return
Switch_B configuration file
# sysname Switch_B # vlan batch 100 to 101 # igmp-snooping enable # vlan 101 igmp-snooping enable igmp-snooping group-policy 2000 igmp-snooping prompt-leave group-policy 2000 # acl number 2000 rule 5 permit source 225.1.1.1 0 rule 10 permit source 225.1.1.2 0 rule 15 permit source 225.1.1.3 0 # interface GigabitEthernet0/0/1 port link-type trunk port trunk pvid vlan 100 port trunk allow-pass vlan 100 to 101 # interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan 100 to 101 # interface GigabitEthernet0/0/3 port link-type trunk port trunk pvid vlan 100 port trunk allow-pass vlan 100 to 101 # interface GigabitEthernet0/0/4 port link-type trunk port trunk pvid vlan 100 port trunk allow-pass vlan 100 to 101 # return
Switch_C configuration file
# sysname Switch_C # vlan batch 100 to 101 # igmp-snooping enable # vlan 101 igmp-snooping enable igmp-snooping group-policy 2000 igmp-snooping prompt-leave group-policy 2000 # acl number 2000 rule 5 permit source 225.1.1.1 0 rule 10 permit source 225.1.1.2 0 rule 15 permit source 225.1.1.3 0 # interface GigabitEthernet0/0/1 port link-type trunk port trunk pvid vlan 100 port trunk allow-pass vlan 100 to 101 # interface GigabitEthernet0/0/2 port link-type trunk port trunk allow-pass vlan 100 to 101 # interface GigabitEthernet0/0/3 port link-type trunk port trunk pvid vlan 100 port trunk allow-pass vlan 100 to 101 # interface GigabitEthernet0/0/4 port link-type trunk port trunk pvid vlan 100 port trunk allow-pass vlan 100 to 101 # return
AC configuration file
# sysname AC # vlan batch 100 # dhcp enable # interface Vlanif100 ip address 10.23.100.1 255.255.255.0 dhcp select interface # interface GigabitEthernet0/0/1 port link-type trunk port trunk allow-pass vlan 100 # capwap source interface vlanif100 # wlan security-profile name sp01 security wpa2 psk pass-phrase %^%#yUrI$*AU}-T<aI*$21X8,wdZ>"Q%NVibT@S@ITs<%^%# aes mesh-handover-profile name hand-over location-based-algorithm enable mesh-whitelist-profile name whitelist01 peer-ap mac 0046-4b59-2e10 peer-ap mac 0046-4b59-2e20 mesh-profile name mesh-net mesh-handover-profile hand-over security-profile sp01 mesh-id mesh-net mesh-profile name mesh-client client-mode enable security-profile sp01 mesh-id mesh-net regulatory-domain-profile name default ap-system-profile name mesh-sys mesh-role mesh-portal wired-port-profile name wired-port vlan tagged 101 ap-group name mesh-mpp ap-system-profile mesh-sys wired-port-profile wired-port gigabitethernet 0 radio 1 mesh-profile mesh-net mesh-whitelist-profile whitelist01 channel 40mhz-plus 157 calibrate auto-channel-select disable calibrate auto-txpower-select disable ap-group name mesh-depot ap-system-profile mesh-sys wired-port-profile wired-port gigabitethernet 0 radio 1 mesh-profile mesh-client mesh-whitelist-profile whitelist01 channel 40mhz-plus 157 calibrate auto-channel-select disable calibrate auto-txpower-select disable ap-id 1 type-id 139 ap-mac 0046-4b59-1d10 ap-sn 210235554710CB000042 ap-name L1_001 ap-group mesh-mpp ap-id 2 type-id 139 ap-mac 0046-4b59-1d20 ap-sn 210235555310CC000094 ap-name L1_003 ap-group mesh-mpp ap-id 3 type-id 139 ap-mac 0046-4b59-1d30 ap-sn 210235419610CB002287 ap-name L1_010 ap-group mesh-mpp ap-id 101 type-id 139 ap-mac 0046-4b59-1d40 ap-sn 210235555310CC00AC69 ap-name L1_150 ap-group mesh-mpp ap-id 102 type-id 139 ap-mac 0046-4b59-1d50 ap-sn 210235555310CC003587 ap-name L1_160 ap-group mesh-mpp ap-id 103 type-id 139 ap-mac 0046-4b59-1d60 ap-sn 210235449210CB000011 ap-name L1_170 ap-group mesh-mpp ap-id 201 type-id 139 ap-mac 0046-4b59-1d70 ap-sn 210235554710CB000085 ap-name L1_180 ap-group mesh-depot ap-id 202 type-id 139 ap-mac 0046-4b59-1d20 ap-sn 210235555310CC000096 ap-name L1_190 ap-group mesh-depot # return
- Vehicle-mounted network devices
Vehicle-mounted AP (in the front) configuration file
# sysname AP # igmp-snooping enable # vlan batch 101 # vlan 101 igmp-snooping enable # interface GigabitEthernet0/0/0 port link-type trunk port trunk pvid vlan 101 port trunk allow-pass vlan 101 # wlan security-profile name sp01 security wpa2 psk pass-phrase %^%#yUrI$*AU}-T<aI*$21X8,wdZ>"Q%NVibT@S@ITs<%^%# aes mesh-handover-profile name hand-over location-based-algorithm enable moving-direction forward mesh-proxy trackside-equip mac-address 707b-e8e9-d328 vlan 101 mesh-proxy trackside-equip mac-address 286e-d488-12cd vlan 101 mesh-proxy trackside-equip mac-address 286e-d488-b6ab vlan 101 mesh-proxy onboard-equip mac-address 286e-d488-d359 vlan 101 mesh-proxy onboard-equip mac-address 286e-d488-d270 vlan 101 mesh-profile name mesh-net mesh-handover-profile hand-over security-profile sp01 mesh-id mesh-net mesh-profile name mesh-client client-mode enable security-profile sp01 mesh-id mesh-net wired-port-profile name wlan-wired igmp-snooping enable ap-id 0 type-id 153 ap-mac 0046-4b59-2e10 ap-sn 2102353TJP10L6000028 wired-port-profile wlan-wired gigabitethernet 0 radio 1 mesh-profile mesh-net mesh-profile mesh-client index 1 channel 40mhz-plus 157 calibrate auto-channel-select disable calibrate auto-txpower-select disable # return