Example for Configuring Unified Access for Wired and Wireless Users

Procedure

1. Configure the VLANs to which interfaces of S5720-1 and S5720-2 belong.
   

   The S5720-1 is used as an example here. The configuration on the S5720-2 is similar.

   1. Choose Configuration > Fast WLAN Config > AC to access the Ethernet interface configuration page.
   2. Click interface data under Interface Name. In the Modify Ethernet Interface dialog box, set Default VLAN and Link type, enter VLAN IDs in the Added VLAN ID text box, and click to add interfaces in tagged mode, as shown in Figure 2, Figure 3, Figure 4, and Figure 5. Click OK.
      Figure 2 Configuring GE0/0/1
      
      
      Figure 3 Configuring GE0/0/2
      
      
      Figure 4 Configuring GE0/0/3
      
      
      Figure 5 Configuring GE0/0/4
      
      

2. Configure the VLANs to which interfaces of an AC belong.
   1. Choose Configuration > Fast WLAN Config > AC to access the Ethernet interface configuration page.
   2. Click interface data under Interface Name. In the Modify Ethernet Interface dialog box, set Link type, enter VLAN IDs in the Added VLAN ID text box, and click to add interfaces in tagged mode, as shown in Figure 6, Figure 7, Figure 8, and Figure 9. Click OK.
      Figure 6 Configuring GE1/0/1
      
      
      Figure 7 Configuring GE1/0/2
      
      
      Figure 8 Configuring GE1/0/3
      
      
      Figure 9 Configuring GE1/0/4
      
      

3. Configure VLANIF 200 on the AC for communicating with the Agile Controller.
   1. Choose Configuration > Basic Services > VLAN to access the VLAN configuration page.
   2. Click 200 under VLAN ID. In the Modify VLAN dialog box, select Create VLANIF, and set IPv4 address and Mask, as shown in Figure 10. Click OK.
      Figure 10 Configuring VLANIF 200
      
      

4. Configure the AC as a DHCP server to assign IP addresses to PCs, APs, and STAs.
   • Configure an IP address pool for the AC to assign IP addresses to APs.
     1. Choose Configuration > Basic Services > VLAN to access the VLAN configuration page.
     2. Click 100 under VLAN ID. In the Modify VLAN dialog box, select Create VLANIF, and set IPv4 address and Mask, as shown in Figure 11. Click OK.
        Figure 11 Configuring VLANIF 100
        
        
     3. Choose Configuration > Basic Services > DHCP > DHCP Address Pool. Set DHCP status to ON to enable the DHCP function.
     4. Click Create. On the Create DHCP Address Pool page, set Address pool type to Interface address pool, select Vlanif100 for Select Interface, and click OK, as shown in Figure 12.
        Figure 12 Configuring an IP address pool
        
        
   • Configure an IP address pool for the AC to assign IP addresses to STAs.
     1. Choose Configuration > Basic Services > VLAN to access the VLAN configuration page.
     2. Click Create. In the Create VLAN dialog box, enter VLAN IDs in the VLAN ID text box, select Create VLANIF, and set IPv4 address and Mask, as shown in Figure 13 and Figure 14. Click OK.
        Figure 13 Configuring VLANIF 101
        
        

        Figure 14 Configuring VLANIF 102
        
        
     3. Choose Configuration > Basic Services > DHCP > DHCP Address Pool. Set DHCP status to ON to enable the DHCP function.
     4. Click Create. On the Create DHCP Address Pool page, set Address pool type to Interface address pool, select Vlanif101 for Select Interface, and click OK, as shown in Figure 15. Repeat the preceding operations for Vlanif102, as shown in Figure 16.
        Figure 15 Configuring an IP address pool on VLANIF 101
        
        
        Figure 16 Configuring an IP address pool on VLANIF 102
        
        
   • Configure an IP address pool for the AC to assign IP addresses to PCs.
     1. Choose Configuration > Basic Services > VLAN to access the VLAN configuration page.
     2. Click 201 under VLAN ID. In the Modify VLAN dialog box, select Create VLANIF, and set IPv4 address and Mask, as shown in Figure 17 and Figure 18. Click OK.
        Figure 17 Configuring VLANIF 201
        
        

        Figure 18 Configuring VLANIF 202
        
        
     3. Choose Configuration > Basic Services > DHCP > DHCP Address Pool. Set DHCP status to ON to enable the DHCP function.
     4. Click Create. On the Create DHCP Address Pool page, set Address pool type to Interface address pool, select Vlanif201 for Select Interface, and click OK, as shown in Figure 19. Repeat the preceding operations for Vlanif202, as shown in Figure 20.
        Figure 19 Configuring an IP address pool on VLANIF 201
        
        
        Figure 20 Configuring an IP address pool on VLANIF 202
        
        

5. Configure a RADIUS server template, configure authentication, accounting, and authorization in the template, and configure Portal authentication on the AC.
   • Configure a RADIUS server template, and configure authentication, accounting, and authorization in the template on the AC.
     1. Choose Configuration > Security Services > AAA, click the RADIUS tab, and click Create. Create and configure RADIUS server template radius1, as shown in Figure 21. Click OK.
        Figure 21 Configuring a RADIUS server
        
        
     2. Choose Configuration > Security Services > AAA, click the RADIUS tab, and click Create to create and configure the authentication server, as shown in Figure 22. Click OK.
        Figure 22 Configuring an authorization server
        
        
     3. Choose Configuration > Security Services > AAA Profile Mgmt > Authentication Profile > Domain Profile to access the Domain Profile List page. Click Create to access the Create Domain Profile page. Set Profile name to portal1, click OK, create the authentication domain portal1, and bind the RADIUS server template radius1 to the domain, as shown in Figure 23. Click Apply.
        Figure 23 Configuring an authentication domain
        
        
   • Configure a Portal server.
     Choose Configuration > Security Services > AAA, click the External Portal Server tab, and click Create to create and configure the Portal authentication server, as shown in Figure 24. Click OK.

     Figure 24 Configuring a Portal server
     
     
   • Enable Portal authentication for STAs. Non-authentication is adopted for wired users.
     1. Choose Configuration > Security Services > AAA Profile Mgmt > Authentication Profile > Portal Profile to access the Portal Profile List page. Click Create to access the Create Portal Profile page. Set Profile name to portal1 and click OK. On the Portal profile portal1 configuration page that is displayed, bind the Portal server portal1 to the Portal profile, and click Apply, as shown in Figure 25.
        Figure 25 Configuring a Portal profile
        
        
     2. Choose Configuration > Security Services > AAA Profile Mgmt > Authentication Profile to access the Authentication Profile List page. Click Create to access the Create Authentication Profile page. Set Profile name to portal1 and click OK, as shown in Figure 26.
        Figure 26 Creating an authentication profile
        
        
     3. Choose Configuration > Security Services > AAA Profile Mgmt > Authentication Profile > portal1 > Portal Profile and select portal1 from the Portal Profile drop-down list box. Click Apply and bind the Portal profile portal1, as shown in Figure 27.
        Figure 27 Binding a Portal profile
        
        
     4. Choose Configuration > Security Services > AAA Profile Mgmt > Authentication Profile > portal1 > Domain Profile and select portal1 from the Domain Profile drop-down list box. Click Apply and bind the domain profile portal1, as shown in Figure 28.
        Figure 28 Binding a domain profile
        
        

6. Configure APs to go online.
   • Create a regulatory domain profile, configure the AC's country code in the profile, and apply the profile to the AP group.
     1. Choose Configuration > Wireless Services > AP Group > AP Group, click Create, and enter names in the AP group name text box, as shown in Figure 29. Click OK.
        Figure 29 Creating an AP group
        
        
        
        
     2. Choose Configuration > Wireless Services > AP Group > AP Group, and click ap-group1 to access the AP group configuration page. Choose Radio Management > Regulatory Domain Profile, click Create, set Profile name to domain1 to create a regulatory domain profile, and bind the profile to the AP group ap-group1, as shown in Figure 30. Click Apply. Use the same method to bind the profile to ap-group2.
        Figure 30 Binding a domain profile
        
        
   • Configure the source interface and authentication method.

     Choose Configuration > Wireless Services > AC Config to access the AC Configuration page. Set AC source address to Vlanif100 and AP authentication mode to MAC address authentication, as shown in Figure 31. Click Apply.

     Figure 31 Configuring the source interface and authentication method
     
     
   • Import APs offline.
     1. Choose Configuration > Fast WLAN Config > AP, and click ap-group1 in the AP group list. Click the AP Manage tab on the right, and click Add to access the page for adding APs.
     2. Set Mode to Manually add, enter values in the AP MAC, AP ID, AP type text boxes, and click OK, as shown in Figure 32. Use the same method to add APs to ap-group2, as shown in Figure 33.
        Figure 32 Adding an AP to ap-group1
        
        
        Figure 33 Adding an AP to ap-group2
        
        
   • Configure the uplink interface GE0/0/0, and downlink interfaces Eth0/0/0 and Eth0/0/1 on the AP2010DN to allow wired packets to pass.
     1. Choose Configuration > Wireless Services > Profile > AP > AP Wired Port Profile to access the AP Wired Port Profile List page. Click Create to access the Create AP Wired Port Profile page. Set Profile name to wired1 and click OK. Click the created AP wired interface profile, set parameters, and click Apply, as shown in Figure 34. Use the same method to configure wired2, wired3, and wired4, as shown in Figure 35, Figure 36, and Figure 37.
        Figure 34 Configuring wired1
        
        
        Figure 35 Configuring wired2
        
        
        Figure 36 Configuring wired3
        
        
        Figure 37 Configuring wired4
        
        
     2. Choose Configuration > Wireless Services > AP Config > AP Info, and click an AP ID to access the AP Customized Settings page. Choose AP > AP Wired Port Settings, click an interface in AP Wired Port Configuration List to access the page for binding an AP wired port profile. Select the wired port profile to bind and click OK. Figure 38, Figure 39, Figure 40, and Figure 41 show the configuration results.
        Figure 38 Binding an AP wired port profile to ap-id 101
        
        
        Figure 39 Binding an AP wired port profile to ap-id 102
        
        
        Figure 40 Binding an AP wired port profile to ap-id 201
        
        
        Figure 41 Binding an AP wired port profile to ap-id 202
        
        

7. Configure WLAN service parameters.
   • Create an RRM profile rrm1.
     Choose Configuration > Wireless Services > Profile > Radio Management > RRM Profile to access the RRM Profile List page. Click Create to access the Create RRM Profile page. Set Profile name to rrm1 and click OK. On the RRM profile rrm1 configuration page that is displayed, click Apply, as shown in Figure 42.

     Figure 42 Creating an RRM profile rrm1
     
     
   • Create a radio profile and bind it to the RRM profile rrm1.
     1. Choose Configuration > Wireless Services > Profile > Radio Management > 2G Radio Profile to access the 2G Radio Profile List page. Click Create to access the Create 2G Radio Profile page. Set Profile name to radio-2g and click OK, as shown in Figure 43.
        Figure 43 Creating radio profile radio-2g
        
        
     2. Choose Configuration > Wireless Services > Profile > Radio Management > 5G Radio Profile to access the 5G Radio Profile List page. Click Create to access the Create 5G Radio Profile page. Set Profile name to radio-5g and click OK, as shown in Figure 44.
        Figure 44 Creating radio profile radio-5g
        
        
     3. Choose Configuration > Wireless Services > Profile > Radio Management > 2G Radio Profile > radio-2g > RRM Profile, and set RRM Profile to rrm1, as shown in Figure 45. Click Apply. Use the same method to bind the RRM profile rrm1 to the 5G radio profile radio-5g, as shown in Figure 46.
        Figure 45 Binding the RRM profile rrm1 to the 2G radio profile radio-2g
        
        
        Figure 46 Binding the RRM profile rrm1 to the 5G radio profile radio-5g
        
        
   • Creating a security profile
     Choose Configuration > Wireless Services > Profile > Wireless Service > Security Profile, click Create, set Profile name to wlan-security, and configure this security profile, as shown in Figure 47. Click Apply.

     Figure 47 Creating security profile wlan-security
     
     
   • Create an SSID profile.
     Choose Configuration > Wireless Services > Profile > Wireless Service > SSID Profile, click Create, set Profile name to wlan-ssid, and configure this SSID profile, as shown in Figure 48. Click Apply.

     Figure 48 Creating SSID profile wlan-ssid
     
     
   • Create a traffic profile.
     Choose Configuration > Wireless Services > Profile > Wireless Service > Traffic Profile, click Create, set Profile name to traffic1, and configure this traffic profile, as shown in Figure 49. Click Apply.

     Figure 49 Creating traffic profile traffic1
     
     
   • Create a VAP profile.
     1. Choose Configuration > Wireless Services > Profile > Wireless Service > VAP Profile, click Create, set Profile name to wlan-vap1, and configure this VAP profile, as shown in Figure 50. Click Apply. Use the same method to create a VAP profile wlan-vap2, as shown in Figure 51.
        Figure 50 Creating VAP profile wlan-vap1
        
        
        Figure 51 Creating VAP profile wlan-vap2
        
        
     2. Choose Configuration > Wireless Services > Profile > Wireless Service > VAP Profile > wlan-vap1 > SSID Profile, set SSID Profile to wlan-ssid, and click Apply, as shown in Figure 52. The SSID profile is bound successfully.
        Figure 52 Binding an SSID profile
        
        
     3. Use the same method to bind the security profile, traffic profile, and authentication profile to VAP profiles, as shown in Figure 53.
        Figure 53 Configuration of VAP profiles
        
        
   • Bind VAP profiles and a radio profile to AP groups.
     1. Choose Configuration > Wireless Services > AP Group > AP Group, and click ap-group1 to access the AP Customized Settings page. Click VAP Configuration, click Add on the right, set parameters, and click Apply, as shown in Figure 54. Use the same method to bind VAP profiles to ap-group2, as shown in Figure 55.
        Figure 54 Binding a VAP profile to ap-group1
        
        
        Figure 55 Binding a VAP profile to ap-group2
        
        
     2. Choose Configuration > Wireless Services > AP Group > AP Group, and click ap-group1 to access the AP Customized Settings page. Choose Radio Management > Radio 0 > 2G Radio Profile, and select profiles in the 2G Radio Profile text box, as shown in Figure 56. Click Apply to complete the configuration of the 2G radio profile.
        Figure 56 Binding a 2G radio profile to ap-group1
        
        
     3. Choose Configuration > Wireless Services > AP Group > AP Group, and click ap-group1 to access the AP Customized Settings page. Choose Radio Management > Radio 1 > 5G Radio Profile, and select profiles in the 5G Radio Profile text box, as shown in Figure 57. Click Apply to complete the configuration of the 5G radio profile.
        Figure 57 Binding a 5G radio profile to ap-group1
        
        
     4. Use the same method to bind 2G and 5G radio profiles to ap-group2, as shown in Figure 58.
        Figure 58 Binding radio profiles to ap-group2
        
        

8. Configure a VAP.
   1. Choose Configuration > Wireless Services > AP Config > AP Info, and click 101 to access the AP Customized Settings page. Choose Radio Management > Radio 0, set parameters, and click Apply, as shown in Figure 59. The VAP configuration is complete.
      Figure 59 Configuring a VAP
      
      
   2. Use the same method to configure VAPs for APs 102, 103, 201, 202, and 203, as shown in Figure 60.
      Figure 60 Configuring VAPs