Planning Network Information

Administrator planning

Tenant account

• Name: test@huawei.com
• Password: Admin@1234

-

Architecture design

Network topology

For details, see Figure 2-1.

-

Device model selection

• Cloud firewall: USG6500E
• Cloud switch: S5720-LI
• Cloud AP: AP4050DN-E (PoE)

-

Site

• Site 1: test_ap; Device type: AP
• Site 2: test_mix; Device type: FW and LSW

Creating a Site

Device interface interconnection

• Cloud firewall
  • Uplink interfaces connecting to the carrier network: GE0/0/3 (active), GE0/0/4 (standby)
  • Downlink interfaces connecting to cloud switches: GE0/0/1 and GE0/0/2
• Cloud switch 1
  • Uplink interface connecting to the cloud firewall: GE0/0/27
  • Downlink interface connecting to the camera: GE0/0/1
  • Downlink interfaces connecting to cloud APs: GE0/0/2 through GE0/0/11
• Cloud switch 2
  • Uplink interface connecting to the cloud firewall: GE0/0/27
  • Downlink interface connecting to the printer: GE0/0/1
  • Downlink interface connecting to cloud APs: GE0/0/2
• Cloud AP: Uplink interface connecting to cloud switches: GE0/0/0

• Configuring Interfaces
• Configuring Cloud Switch Services

Device login planning

Mode in which the gateway obtains an IP address

• Configured on the web system
• Primary mode: GE0/0/3, PPPoE dialup
• Secondary mode: GE0/0/4, PPPoE dialup

Configuring Cloud-Managed Devices to Connect to the Internet

Mode in which the gateway registers with iMaster NCE-Campus

• Configured on the web system
• Through the southbound IP address (192.168.84.208) and port number (10020) of iMaster NCE-Campus

Configuring Cloud-Managed Devices to Register with iMaster NCE-Campus

Mode in which devices connected to the gateway obtain IP addresses

• Through DHCP, with the gateway functioning as the DHCP server
• IP address range: 10.1.1.0/24

Configuring the DHCP Server Function

Mode in which devices connected to the gateway register with iMaster NCE-Campus

Through DHCP Option 148, which is configured on iMaster NCE-Campus for the cloud firewall

Configuring Cloud-Managed Devices to Register with iMaster NCE-Campus

NAT

Enable NAT on the egress gateway (cloud firewall).

Configuring the NAT Function

Data planning for terminals to go online

User management

The users are classified into three types: employees (wireless access), guests (wireless access), and dumb terminals (wired access).

-

Mode in which terminals obtain IP addresses

• Through DHCP, within the following IP address ranges:
  • Employees: 10.1.2.0/23
  • Guests: 10.1.4.0/23
  • Dumb terminals: 10.1.6.0/23
• DHCP server: cloud firewall

Configuring the DHCP Server Function

User VLANs

Employees: VLAN 10

Guests: VLAN 20

Dumb terminals: VLAN 30

• Configuring Interfaces in Configuring Cloud Firewall Services
• Steps 2 and 3 in Configuring Cloud Switch Services

SSIDs and authentication modes for wireless access

• Employees: SSID test-emp; PSK authentication
• Guests: SSID test-Guest; Portal authentication (SMS authentication)

• Configuring an SSID for Employees (PSK Authentication)
• Configuring an SSID for Guests (SMS Authentication)

User service planning

QoS

• Bandwidth limit for a single employee terminal: 5 Mbit/s
• Bandwidth limit for a single guest terminal: 5 Mbit/s

• Configuring an SSID for Employees (PSK Authentication)
• Configuring an SSID for Guests (SMS Authentication)