Configure WLAN AP

7/21/2019 Configure WLAN AP

http://slidepdf.com/reader/full/configure-wlan-ap 1/42

Copyright © 2011, Juniper Networks, Inc. MP Overview 3

Configuring Mobility Points


MP Overview

Figure 1–1. Example of a Juniper Network Topology

Configuring MP Access Points

MP-372

Router

Router

Wiredauthentication

client

System IP address10.10.10.4

MP-372

Port1

Port2

Port4

MX1

10.10.40.19 /24

10.10.20.19 /24

10.10.30.19 /24

RADIUS

servers

10.10.70.20

10.10.70.40

10.10.60.18/24

10.10.60.19 /24

RingMaster

Port3

MP-372

Layer 2

MP-372 System IP address10.10.40.4

MX2

Layer 2

MP-372

10.10.10.19 /24

System IP address10.10.50.4

MX3

Port5

VLANs on MX1

VLAN 2 mgmt, port 5, 10.10.10.4/24VLAN 4 blue, port 5, tag 20, 10.10.20.2/24VLAN 3 red, port 5, tag 30

Layer 2

serial-id 0322199998




serial-id 032219999510.10.50.19 /24

external antennamodel ANT-1060



4 MP Overview Copyright © 2011, Juniper Networks, Inc.

Network Address Translation (NAT) Support

Country of Operation

Directly Connected MPs and Distributed MPs

Informational Note:

Informational Note:





Distributed MP Network Requirements

−

−

−

−




Distributed MPs and Spanning Tree Protocol (STP)

Distributed MPs and DHCP Option 43

ip:ip-addr1,ip-addr2,...

host:hostname1,hostname2,...

Informational Note:

Informational Note:

Informational Note:





Boot Process for Distributed MPs

MP Boot Descriptions

Example of an MP Booting over a Layer 2 Network




Figure 1–2. An MP Booting over a Layer 2 Network





Example of an MP Booting over a Layer 3 Network

Figure 1–3. An MP Booting over a Layer 3 Network




Example of a Dual-Home MP Booting on the NetworkMP

Figure 1–4. A Dual-Homed MP Booting on the Network

Example of an MP with a Static IP Configuration Booting on the NetworkMP





Figure 1–5. MP Booting with a Static IP Address

Loading and Activating Operational Images




Forcing an MP To Download an Operational Image from the WLC

set ap apnum force-image-download {enable | disable}

MP Parameters

Table 1. Global MP Parameters

Parameter Default Value Description





Resiliency and Dual-Homing Options for MPs

Bias

Informational Note:

Table 1. Global MP Parameters (continued)






Figure 1–8. Dual-Homed Direct and Distributed Connections to MX Switches

Dual-Homed Distributed Connections to MX Switches on Both MP Ports

Figure 1–9. Dual-homed Distributed Connections to MX Switches on Both MP Ports

Dual-Homed Distributed Connections to MX Switches on One MP Port





Note:

Table 2. Defaults for Service Profile Parameters (continued)

Parameter Default Value Radio Behavior When Parameter Set To Default Value




Note:







Public and Private SSIDs

Encryption

Note:

Informational Note:

Informational Note:






Mixed Cipher Support

WLC#set service-profile profile-name wpa-ie cipher-tkip enable

WLC# set service-profile profile-name rsn-ie [ciper-ccmp | cipher-tkip]

enable

WLC#set service-profile profile-name psk-phrase psk-phrase

WLC# set service-profile profile-name [rsn-ie | wpa-ie] auth-psk enable

Radio Profiles

Informational Note:

Informational Note:

Informational Note:

Table 3. Defaults for Radio Profile Parameters






RF Auto-Tuning

Default Radio Profile

Radio-Specific Parameters

Note:

Table 4. Radio-Specific Parameters


Note:

Table 3. Defaults for Radio Profile Parameters (continued)




22 Configuring MPs Copyright © 2011, Juniper Networks, Inc.

Configuring MPs

Note:

Table 4. Radio-Specific Parameters (continued)




Copyright © 2011, Juniper Networks, Inc. Configuring MPs 23


Specifying the Country of Operation

set system countrycode code

Informational Note:

Table 5. Country Codes

Country Code




Table 5. Country Codes (continued)

Country Code





show system

Table 5. Country Codes (continued)

Country Code




WLC# set system countrycode US

success: change accepted.WLC# show system

===========================================================================

====

Product Name: WLC

System Name: WLC

System Countrycode: US

System Location:

System Contact:

System IP: 30.30.30.2

System idle timeout:3600

System MAC: 00:0B:0E:02:76:F6

===========================================================================

====

Boot Time: 2003-05-07 08:28:39

Uptime: 0 days 04:00:07

===========================================================================

====

Fan status: fan1 OK fan2 OK fan3 OK

Temperature: temp1 ok temp2 ok temp3 ok PSU Status: Lower Power Supply DC ok AC ok Upper Power

Supply missing

Memory: 115.09/496.04 (23%)

Total POE Draw [W] : 32.000

===========================================================================

Configuring an Auto-AP Profile for Automatic MP Configuration

Informational Note:




Configured MPs Have Precedence Over Unconfigured MPs

Configuring an Auto-AP Profile

WLC# set ap auto

success: change accepted.

WLC# show ap config

Ap auto: mode: disabled bias: high

fingerprint

boot-download-enable: YES

force-image-download: NO

Radio 1: type: 802.11g, mode: enabled, channel: dynamic

tx pwr: 15, profile: default

auto-tune max-power: default

Radio 2: type: 802.11a, mode: enabled, channel: dynamic

tx pwr: 11, profile: default

auto-tune max-power: default

Table 7. Configurable Profile Parameters for Distributed MPs

Parameter Default Value





Changing MP Parameter Values

MP Parameters:

set ap auto bias {high | low}

set ap auto blink {enable | disable}

set ap auto force-image-download {enable | disable}

set ap auto group name

set ap auto mode {enable | disable}

set ap auto persistent [apnum | all]

set ap auto upgrade-firmware {enable | disable}

Radio Parameters:

set ap auto radiotype {11a | 11b| 11g}

set ap auto radio {1 | 2} auto-tune max-power power-level

set ap auto radio {1 | 2} mode {enable | disable}

set ap auto radio {1 | 2} radio-profile name mode {enable | disable}

Table 7. Configurable Profile Parameters for Distributed MPs (continued)

Parameter Default Value



30 Displaying Status Information for MPs Configured by the Auto-AP Profile Copyright © 2011, Juniper Networks, Inc.

Enabling the Auto-AP Profile

WLC# set ap auto mode enable


Specifying the Radio Profile Used by the Auto-AP Profile

set ap auto radio {1 | 2}

radio-profile profile-name mode {enable | disable}

WLC# set ap auto radio 1 radio-profile autodap1


Displaying Status Information for MPs Configured by the Auto-AP Profile

WLC# show ap status auto

AP: 7, AP model: MP-252, manufacturer Trapeze, name: MP07

====================================================

State: operational (not encrypted)

CPU info: IBM:PPC speed=266666664 Hz version=405GPr

id= ram=33554432

s/n=0333703027 hw_rev=A3

Uptime: 18 hours, 36 minutes, 27 seconds

Radio 1 type: 802.11g, state: configure succeed [Enabled] (802.11b

protect)

operational channel: 1 operational power: 14

base mac: 00:0b:0e:00:d2:c0

bssid1: 00:0b:0e:00:d2:c0, ssid: public

bssid2: 00:0b:0e:00:d2:c2, ssid: employee-net

bssid3: 00:0b:0e:00:d2:c4, ssid: mycorp-tkip

Radio 2 type: 802.11a, state: configure succeed [Enabled]


base mac: 00:0b:0e:00:d2:c1

Informational Note:



Copyright © 2011, Juniper Networks, Inc. Displaying Status Information for MPs Configured by the Auto-AP Profile 31


bssid1: 00:0b:0e:00:d2:c1, ssid: public

bssid2: 00:0b:0e:00:d2:c3, ssid: employee-net bssid3: 00:0b:0e:00:d2:c5, ssid: mycorp-tkip

Converting an MP Configured by the Auto-AP Profile into a Permanent MP

set ap auto persistent {apnum | all}

Configuring MP Port Parameters

Table 8. Maximum MPs Supported Per WLC

WLC Model Maximum That Can Be Configured Maximum That Can Be Booted




Configuring an MP

set ap apnum serial-id serial-ID

model {2330 | 2330A | 2330B| 2332-A1| AP-EASYA| AP1602 | AP1602C |

AP2750 | AP3750 | AP3850 | AP9551| MP-371 | MP-371B | MP-372 | MP-372A |

MP-372B| | MP-422 | MP-422A | MP-422B | MP-422FB| MP-422F| | MP-432 |

MP-432F| WLA522 | WLA-522E | MP-620 | MP-620A | Mp-620B| MP-622 | MP-71

|

MP-82|}

[radiotype {11ng | 11a | 11b| 11g | 11na}]

WLC# set ap 1 serial-id 0322199999 model MP-620


Configuring Static IP Addresses on Distributed MPs

Specifying IP Information

set ap apnum boot-configuration ip ip-addr netmask mask-addr gateway

gateway-addr [mode {enable | disable}]

WLC# set ap 1 boot-configuration ip 172.16.0.42 netmask 255.255.255.0

gateway 172.16.0.20 mode enable


Informational Note:

apnum

Informational Note:





Specifying the WLC Information

set ap apnum boot-configuration [switch-ip ip-addr ] [name name dns

ip-addr ] [mode {enable | disable}]

WLC# set ap 1 boot-configuration switch-ip 172.16.0.21 mode enable


WLC# set ap 1 boot-configuration switch name mxr2 dns 172.16.0.1 mode

enable


Specifying VLAN information

set ap apnum boot-configuration vlan vlan-tag tag-value [mode {enable

disable}]

WLC# set ap 1 boot-configuration vlan vlan-tag 100 mode enable


Clearing an MP from the Configuration

clear port type port-list

Warning:




clear ap apnum

Changing MP Names

set ap apnum name name

Changing Bias

set ap apnum bias {high | sticky | low}

WLC# set ap 1 bias low


Disabling or Reenabling Automatic Firmware Upgrades

set ap apnum upgrade-firmware {enable | disable}

Enabling LED Blink Mode

set ap apnum blink {enable | disable}

Informational Note:





Configuring AP LED Control

set ap apnum led-mode {auto | static | off}

auto

static

Configuring AP Communication Time Out

set ap apnum time-out seconds

Configuring MP-WLC Security

Encryption Key Fingerprint

RSA

a:aaaa:aaaa:aaaa:

aaaa:aaaa:aaaa:aaaa

Encryption Options

Informational Note:

Informational Note:




Verifying an MP Fingerprint on an WLC

set ap fingerprint

Finding the Fingerprint

show ap status

WLC# show ap status 8

AP: 7, AP model: MP-252, manufacturer Trapeze, name: MP07

fingerprint: b4:f9:2a:52:37:58:f4:d0:10:75:43:2f:45:c9:52:c3

====================================================

State: operational (not encrypted)

CPU info: IBM:PPC speed=266666664 Hz version=405GPr

id=0x29f1886d447f111a ram=33554432

s/n=0424000779 hw_rev=A3

Uptime: 1 hours, 8 minutes, 17 seconds

Radio 1 type: 802.11g, state: configure succeed [Enabled]


Table 9. MP Security Requirements

MP Security

Setting

MP Has

Fingerprint?

Fingerprint Verified

in MSS?

MP Can Establish

Management Session with

WLC?





base mac: 00:0b:0e:0a:60:00

bssid1: 00:0b:0e:0a:60:00, ssid: public bssid2: 00:0b:0e:0a:60:02, ssid: trapeze

Radio 2 type: 802.11a, state: configure succeed [Enabled]


base mac: 00:0b:0e:0a:60:01

bssid1: 00:0b:0e:0a:60:01, ssid: public

bssid2: 00:0b:0e:0a:60:03, ssid: trapeze

Verifying a Fingerprint on the WLC

set ap apnum fingerprint hex

WLC# set ap 8 fingerprint

b4:f9:2a:52:37:58:f4:d0:10:75:43:2f:45:c9:52:c3


Setting the MP Security Requirement on an WLC

set ap security {require | optional | none}

The following command configures an WLC to require Distributed MPs to

have encryption keys:

Informational Note:

Informational Note:



38 MP-432 Support and 802.11n Configuration Copyright © 2011, Juniper Networks, Inc.

WLC# set ap security require

Fingerprint Log Message

AP-HS:(secure optional)configure AP 0335301065 with fingerprint

c6:98:9c:41:32:ab:37:09:7e:93:79:a4:ca:dc:ec:fb

MP-432 Support and 802.11n Configuration

PoE Requirements

Radio Type Data Rate



Copyright © 2011, Juniper Networks, Inc. MP-432 Support and 802.11n Configuration 39


set ap <apnum> power-mode <auto | high>

Glossary of Terms for 802.11n

Configuration Commands

WLC2# set ap apnum port portnum model {2330 | 2330A | AP2750 | AP3750|AP3850 | MP-352 | MP-371 | MP-372 | MP-372-JP | MP-372A | MP-372-CN

|MP-372-JP | MP-422 | MP-422A | MP-422F| MP-432 | MP-620 | MP-620A |

MP-71} poe {enable | disable} radiotype {11a| 11b|11g | 11na|11ng}

Frame Aggregation Commands

WLC2# set service-profile profile-name 11n a-mpdu-max-length [8K|

16K| 32K| 64K] a-msdu-max-length [4K | 8K] frame-aggregation

[msdu|mpdu|all|disable]

{ mode-na|mode-ng [enable|disable| required]}

short-guard-interval [enable|disable]

Data Rate CommandsWLC2# set service-profile profile-name transmit-rates 11ng mandatory

{1.0|2.0|5.5|6.0|9.0|11.0|12.0|18.0|24.0|36.0|48.0|54.0|m0|m1|m2|m3|m

4|m5|m6|m7|m8|m9|m10|m11|m12|m13|m14|m15} beacon-rate <radio-rate>

disabled multicast-rate

{auto|1.0|2.0|5.5|6.018.0|24.0|36.0|48.0|54.0|

m0|m1|m2|m3|m4|m5|m6|m7|m8|m9|m10|m11|m12|m13|m14|m15}

Table 10. 802.11n Terms

Term Definition

Informational Note:

Informational Note:

Informational Note:

Informational Note:



40 Displaying MP Information Copyright © 2011, Juniper Networks, Inc.

WLC2# set service-profile profile-name transmit-rates 11na mandatory

{6.0|9.0|12.0|18.0|24.0|36.0|48.0|54.0|m0|m1|m2|m3|m4|m5|m6|m7|m8|m9|

m10| m11|m12|m13|m14|m15} beacon-rate <radio-rate> disabled multicast-rate

{auto|6.0|9.0|12.0|18.0|24.0|36.0|48.0|54.0|m0|m1|m2|m3|m4|m5|m6|m7|m

8|m9|m10|m11|m12|m13|m14|m15}

11n Channel Commands

WLC2# set radio-profile profile-name 11n channel-width-na {20MHz |

40MHz}

Displaying MP Information

Displaying MP Configuration Information

show ap config [apnum [radio {1 | 2}]]

WLC# show ap config 4

AP 4 (AP04)

Model: MP-422

Mode:

Bias: high



Copyright © 2011, Juniper Networks, Inc. Displaying MP Information 41


Power mode: auto

Options: upgrade-firmwareConnection: network

Serial number: 0675200557

Fingerprint:

Communication timeout: 25

Location:

Contact:

Vlan-profile: default

Radio 1 (802.11g)

Mode: sentry Radio profile: defaultChannel: dynamic Load balancing: YES

Tx power: 22 Load balancing group:

Autotune max power: default Force rebalance: NO

Antenna location: indoors Antenna type: INTERNAL

Service profiles:

Snoop filters on radio: none

Snoop filters on radio profile: none

Radio 2 (802.11a)

Mode: enabled Radio profile: mirunaMeshOneChannel: 36 Load balancing: YES

Tx power: 5 Load balancing group:

Auto tune max power: default Force rebalance: NO

Antenna location: indoors Antenna type: INTERNAL

Service profiles:

mirunaMeshOne (Mesh)

Snoop filters on radio: none

Snoop filters on radio profile: none

Displaying Connection Information for Distributed MPs

show ap global [apnum | serial-id serial-ID ]

Informational Note:



42 Displaying MP Information Copyright © 2011, Juniper Networks, Inc.

WLC# show ap global

Total number of entries: 8

AP Serial Id WLC IP Address Bias

--- ----------- --------------- ----

1 11223344 10.3.8.111 HIGH

- 11223344 10.4.3.2 LOW

2 332211 10.3.8.111 LOW

- 332211 10.4.3.2 HIGH

17 0322100185 10.3.8.111 HIGH

- 0322100185 10.4.3.2 LOW

18 0321500120 10.3.8.111 LOW

- 0321500120 10.4.3.2 HIGH

Displaying a List of Unconfigured Distributed MPs

show ap unconfigured

WLC# show ap unconfigured

Total number of entries: 1

Serial Id: 0333001287 Model: MP-422 IP Address: 10.2.2.1.1

Port: 5 Vlan: DAP Reason: No configuration

Informational Note:

Configure WLAN AP

Documents

Transcript of Configure WLAN AP