Adding a WAC Group

Context

To manage standalone WLAN access controllers (WACs) that work in hot standby (HSB) mode on iMaster NCE-Campus, add the member WACs to a site (For details, see "Adding Devices" in Creating a Site) and configure the WACs to work in HSB mode using commands in advance. After the configuration is complete, add a WAC group to the site on iMaster NCE-Campus.

When deploying VRRP HSB on standalone WACs, use the direct link between the master and backup WACs as the link for VRRP packet forwarding.

Configuration Tasks

Configuring HSB

Figure 5-2 shows the data for configuring two standalone WACs to work in HSB mode.

Figure 5-2 Configuring standalone WACs to work in HSB mode

1. Configure VLANs and interface addresses for connecting WAC1 and WAC2 to the core switch.

   # Add GE0/0/1 on WAC1 to VLAN 100, and configure the VLANIF 100 interface.

   <WAC1> system-view 
   [WAC1] vlan batch 100 
   [WAC1] interface gigabitethernet 0/0/1 
   [WAC1-GigabitEthernet0/0/1] port link-type trunk 
   [WAC1-GigabitEthernet0/0/1] undo port trunk allow-pass vlan 1 
   [WAC1-GigabitEthernet0/0/1] port trunk allow-pass vlan 100 
   [WAC1-GigabitEthernet0/0/1] quit 
   [WAC1] interface vlanif 100 
   [WAC1-Vlanif100] ip address 10.23.100.1 24 
   [WAC1-Vlanif100] quit 

   # Add GE0/0/1 on WAC2 to VLAN 100 and VLAN 101, and configure VLANIF 100 and VLANIF 101 interfaces.

   <WAC2> system-view 
   [WAC2] vlan batch 100 101 
   [WAC2] interface gigabitethernet 0/0/1 
   [WAC2-GigabitEthernet0/0/1] port link-type trunk 
   [WAC2-GigabitEthernet0/0/1] undo port trunk allow-pass vlan 1 
   [WAC2-GigabitEthernet0/0/1] port trunk allow-pass vlan 100 
   [WAC2-GigabitEthernet0/0/1] quit 
   [WAC2] interface vlanif 100 
   [WAC2-Vlanif100] ip address 10.23.100.2 24 
   [WAC2-Vlanif100] quit 

2. Configure the VLAN and interface addresses for enabling mutual communication between WAC1 and WAC2.

   # Add GE0/0/2 that connects WAC1 to WAC2 to VLAN 102, and add VLAN 102 to an independent MSTP instance.

   [WAC1] vlan batch 102 
   [WAC1] interface gigabitethernet 0/0/2 
   [WAC1-GigabitEthernet0/0/2] port link-type trunk 
   [WAC1-GigabitEthernet0/0/2] undo port trunk allow-pass vlan 1 
   [WAC1-GigabitEthernet0/0/2] port trunk allow-pass vlan 102 
   [WAC1-GigabitEthernet0/0/2] quit 
   [WAC1] interface vlanif 102 
   [WAC1-Vlanif102] ip address 10.23.102.1 24 
   [WAC1-Vlanif102] quit
   [WAC1] stp region-configuration 
   [WAC1-mst-region] region-name WAC 
   [WAC1-mst-region] instance 1 vlan 102 
   [WAC1-mst-region] active region-configuration 
   [WAC1-mst-region] quit

   # Add GE0/0/2 that connects WAC2 to WAC1 to VLAN 102, and add VLAN 102 to an independent MSTP instance.

   [WAC2] vlan batch 102 
   [WAC2] interface gigabitethernet 0/0/2 
   [WAC2-GigabitEthernet0/0/2] port link-type trunk 
   [WAC2-GigabitEthernet0/0/2] undo port trunk allow-pass vlan 1 
   [WAC2-GigabitEthernet0/0/2] port trunk allow-pass vlan 102 
   [WAC2-GigabitEthernet0/0/2] quit 
   [WAC2] interface vlanif 102 
   [WAC2-Vlanif102] ip address 10.23.102.2 24 
   [WAC2-Vlanif102] quit
   [WAC2] stp region-configuration 
   [WAC2-mst-region] region-name WAC 
   [WAC2-mst-region] instance 1 vlan 102 
   [WAC2-mst-region] active region-configuration 
   [WAC2-mst-region] quit

3. Configure VRRP on WAC1 to implement WAC HSB.

   # Set the recovery delay of the VRRP group to 30 seconds.

   [WAC1] vrrp recover-delay 30

   # Create a management VRRP group on WAC1. Set the priority of WAC1 in the management VRRP group to 120 and the preemption delay to 1800 seconds.

   [WAC1] interface vlanif 100 
   [WAC1-Vlanif100] vrrp vrid 1 virtual-ip 10.23.100.3 
   [WAC1-Vlanif100] vrrp vrid 1 priority 120 
   [WAC1-Vlanif100] vrrp vrid 1 preempt-mode timer delay 1800 
   [WAC1-Vlanif100] admin-vrrp vrid 1 
   [WAC1-Vlanif100] quit

   # Create HSB service 0 on WAC1 and configure the IP addresses and port numbers for the active and standby channels. Set the retransmission time and interval of HSB service 0.

   [WAC1] hsb-service 0 
   [WAC1-hsb-service-0] service-ip-port local-ip 10.23.102.1 peer-ip 10.23.102.2 local-data-port 10241 peer-data-port 10241 
   [WAC1-hsb-service-0] service-keep-alive detect retransmit 3 interval 6 
   [WAC1-hsb-service-0] quit

   # Create HSB group 0 on WAC1, and bind HSB service 0 and the management VRRP group to HSB group 0.

   [WAC1] hsb-group 0 
   [WAC1-hsb-group-0] bind-service 0 
   [WAC1-hsb-group-0] track vrrp vrid 1 interface vlanif 100 
   [WAC1-hsb-group-0] quit

   # Bind the NAC service to the HSB group.

   [WAC1] hsb-service-type access-user hsb-group 0

   # Bind the WLAN service to the HSB group.

   [WAC1] hsb-service-type ap hsb-group 0

   # Enable HSB.

   [WAC1] hsb-group 0 
   [WAC1-hsb-group-0] hsb enable 
   [WAC1-hsb-group-0] quit

4. Configure VRRP on WAC2 to implement WAC HSB.

   # Set the recovery delay of the VRRP group to 30 seconds.

   [WAC2] vrrp recover-delay 30

   # Create a management VRRP group on WAC2.

   [WAC2] interface vlanif 100 
   [WAC2-Vlanif100] vrrp vrid 1 virtual-ip 10.23.100.3 
   [WAC2-Vlanif100] admin-vrrp vrid 1 
   [WAC2-Vlanif100] quit

   # Create HSB service 0 on WAC2 and configure the IP addresses and port numbers for the active and standby channels. Set the retransmission time and interval of HSB service 0.

   [WAC2] hsb-service 0 
   [WAC2-hsb-service-0] service-ip-port local-ip 10.23.102.2 peer-ip 10.23.102.1 local-data-port 10241 peer-data-port 10241 
   [WAC2-hsb-service-0] service-keep-alive detect retransmit 3 interval 6 
   [WAC2-hsb-service-0] quit

   # Create HSB group 0 on WAC2, and bind HSB service 0 and the management VRRP group to HSB group 0.

   [WAC2] hsb-group 0 
   [WAC2-hsb-group-0] bind-service 0 
   [WAC2-hsb-group-0] track vrrp vrid 1 interface vlanif 100 
   [WAC2-hsb-group-0] quit

   # Bind the NAC service to the HSB group.

   [WAC2] hsb-service-type access-user hsb-group 0

   # Bind the WLAN service to the HSB group.

   [WAC2] hsb-service-type ap hsb-group 0

   # Enable HSB.

   [WAC2] hsb-group 0 
   [WAC2-hsb-group-0] hsb enable 
   [WAC2-hsb-group-0] quit