組網圖形
動態負載均衡簡介
- 負載均衡功能主要功能就是平衡WLAN網絡中AP的負載，充分地保證每個STA的帶寬。當有一個新的STA加入網絡時，動態負載均衡動態將AC將所有上報該STA的AP動態組成一個組，然后根據負載均衡算法判斷STA是否允許接入。
- 與靜態負載均衡相比，動態負載均衡解決了靜態負載均衡的成員數目有限，均衡組內各成員需要手工配置且必須為同一頻段的缺點，可以更好地保證每個客戶端的帶寬。
組網需求
- 如圖所示，現有網絡中AC連接上層網絡，並通過匯聚交換機和接入交換機連接並管理AP。
- 當大量用戶通過同一個AP接入Internet進行業務訪問時，會造成AP負載過重，降低用戶無線上網體驗。企業希望各AP射頻下的數據流量能夠做到相對均衡，以避免某一個AP射頻下流量過多而導致負載過重。
配置思路
采用如下的思路配置動態負載均衡：
- 1.配置AP、AC和上層網絡設備之間實現網絡互通。
- 2.在AC上配置基於接口的DHCP服務器為AP分配IP地址，同時配置AC作為DHCP中繼，由AC連接的路由器為STA分配IP地址。
- 3.配置VLAN pool，用於作為業務VLAN。
- 4.配置AP上線。
- a.創建AP組，用於將需要進行相同配置的AP都加入到AP組，實現統一配置。
- b.配置AC的系統參數，包括國家碼、AC與AP之間通信的源接口。
- c.配置AP上線的認證方式並離線導入AP，實現AP正常上線。
- 5.配置WLAN業務參數，實現STA訪問WLAN網絡功能。
- 6.配置動態負載均衡功能，避免某一個AP負載過重。
說明：
當用戶新開局時，對於AP的射頻信道的設置，用戶可根據網絡規划手動指定，也可使用射頻調優功能自動選擇最佳信道。本例中采用射頻調優功能自動選擇最佳信道。
操作步驟
- 1.在AC上配置NAC模式為統一模式（缺省值，不需配置）。配置SwitchA和AC，使AP與AC之間能夠傳輸CAPWAP報文
# 配置SwitchA，將接口GE0/0/1、GE0/0/2和GE0/0/3加入VLAN100（管理VLAN）。
<HUAWEI> system-view [HUAWEI] sysname SwitchA [SwitchA] vlan batch 100 [SwitchA] interface gigabitethernet 0/0/1 [SwitchA-GigabitEthernet0/0/1] port link-type trunk [SwitchA-GigabitEthernet0/0/1] port trunk pvid vlan 100 [SwitchA-GigabitEthernet0/0/1] port trunk allow-pass vlan 100 [SwitchA-GigabitEthernet0/0/1] quit [SwitchA] interface gigabitethernet 0/0/2 [SwitchA-GigabitEthernet0/0/2] port link-type trunk [SwitchA-GigabitEthernet0/0/2] port trunk pvid vlan 100 [SwitchA-GigabitEthernet0/0/2] port trunk allow-pass vlan 100 [SwitchA-GigabitEthernet0/0/2] quit [SwitchA] interface gigabitethernet 0/0/3 [SwitchA-gigabitethernet0/0/3] port link-type trunk [SwitchA-gigabitethernet0/0/3] port trunk allow-pass vlan 100 [SwitchA-gigabitethernet0/0/3] quit
# 配置AC連接SwitchA的接口GE1/0/1加入VLAN100。
[HUAWEI] sysname AC [AC] vlan batch 100 [AC] interface gigabitethernet 1/0/1 [AC-GigabitEthernet1/0/1] port link-type trunk [AC-GigabitEthernet1/0/1] port trunk allow-pass vlan 100 [AC-GigabitEthernet1/0/1] quit
- 2.配置AC與上層網絡設備互通
# 配置VLANIF101（業務VLAN）和VLANIF102。
[AC] vlan batch 101 102 [AC] interface vlanif 101 [AC-Vlanif101] ip address 10.23.101.1 24 [AC-Vlanif101] quit [AC] interface vlanif 102 [AC-Vlanif102] ip address 10.23.102.2 24 [AC-Vlanif102] quit
# 配置AC的缺省路由。
[AC] ip route-static 0.0.0.0 0.0.0.0 10.23.102.1 //配置缺省路由指向Router
# 配置AC連接Router的接口GE1/0/2加入VLAN102。
[AC] interface gigabitethernet 1/0/2 [AC-GigabitEthernet1/0/2] port link-type trunk [AC-GigabitEthernet1/0/2] port trunk allow-pass vlan 102 [AC-GigabitEthernet1/0/2] quit
- 3.配置AC給AP分配IP地址，Router給STA分配IP地址。
# 配置AC通過接口地址池為AP分配IP地址。
[AC] dhcp enable [AC] interface vlanif 100 [AC-Vlanif100] ip address 10.23.100.1 24 [AC-Vlanif100] dhcp select interface //配置基於接口的地址池 [AC-Vlanif100] quit
# 配置AC作為DHCP中繼並使能DHCP中繼探測用戶表項功能。
[AC] interface vlanif 101 [AC-Vlanif101] dhcp select relay //配置DHCP中繼功能 [AC-Vlanif101] dhcp relay server-ip 10.23.102.1 //配置DHCP中繼所代理的DHCP服務器地址為Router上的IP地址10.23.102.1 [AC-Vlanif101] quit
# 配置Router作為DHCP服務器為STA分配IP地址。
<Huawei> system-view [Huawei] sysname Router [Router] dhcp enable [Router] ip pool sta //配置地址池為STA分配IP地址 [Router-ip-pool-sta] gateway-list 10.23.101.1 [Router-ip-pool-sta] network 10.23.101.0 mask 24 [Router-ip-pool-sta] quit [Router] vlan batch 102 [Router] interface vlanif 102 [Router-Vlanif102] ip address 10.23.102.1 24 [Router-Vlanif102] dhcp select global //配置全局的地址池 [Router-Vlanif102] quit [Router] interface gigabitethernet 2/0/0 [Router-GigabitEthernet2/0/0] port link-type trunk [Router-GigabitEthernet2/0/0] port trunk allow-pass vlan 102 [Router-GigabitEthernet2/0/0] quit [Router] ip route-static 10.23.101.0 24 10.23.102.2 //配置Router到達10.23.101.0/24網段的路由
- 4.配置AP上線
# 創建AP組，用於將相同配置的AP都加入同一AP組中。
[AC] wlan [AC-wlan-view] ap-group name ap-group1 [AC-wlan-ap-group-ap-group1] quit
# 創建域管理模板，在域管理模板下配置AC的國家碼並在AP組下引用域管理模板。
[AC-wlan-view] regulatory-domain-profile name domain1 [AC-wlan-regulate-domain-domain1] country-code cn [AC-wlan-regulate-domain-domain1] quit [AC-wlan-view] ap-group name ap-group1 [AC-wlan-ap-group-ap-group1] regulatory-domain-profile domain1 Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continu e?[Y/N]:y [AC-wlan-ap-group-ap-group1] quit [AC-wlan-view] quit
# 配置AC的源接口
[AC] capwap source interface vlanif 100
# 在AC上離線導入AP，並將area_1和area_2加入AP組“ap-group1”中。假設AP的MAC地址為60de-4476-e360，並且根據AP的部署位置為AP配置名稱，便於從名稱上就能夠了解AP的部署位置。例如MAC地址為60de-4476-e360的AP部署在1號區域，命名此AP為area_1。
說明：
ap auth-mode命令缺省情況下為MAC認證，如果之前沒有修改其缺省配置，可以不用執行ap auth-mode mac-auth。
舉例中使用的AP為AP6010DN-AGN，具有射頻0和射頻1兩個射頻。AP6010DN-AGN的射頻0為2.4GHz射頻，射頻1為5GHz射頻。
[AC] wlan [AC-wlan-view] ap auth-mode mac-auth [AC-wlan-view] ap-id 0 ap-mac 60de-4476-e360 [AC-wlan-ap-0] ap-name area_1 [AC-wlan-ap-0] ap-group ap-group1 Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:y [AC-wlan-ap-0] quit [AC-wlan-view] ap-id 1 ap-mac dcd2-fc04-b500 [AC-wlan-ap-1] ap-name area_2 [AC-wlan-ap-1] ap-group ap-group1 Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:y [AC-wlan-ap-1] quit
# 將AP上電后，當執行命令display ap all查看到AP的“State”字段為“nor”時，表示AP正常上線。
[AC-wlan-view] display ap all Total AP information: nor : normal [2] --------------------------------------------------------------------------------------- ID MAC Name Group IP Type State STA Uptime --------------------------------------------------------------------------------------- 0 60de-4476-e360 area_1 ap-group1 10.23.101.253 AP6010DN-AGN nor 0 5M:2S 1 dcd2-fc04-b500 area_2 ap-group1 10.23.101.254 AP6010DN-AGN nor 0 5M:4S --------------------------------------------------------------------------------------- Total: 2
- 5.配置WLAN業務參數
# 創建名為“wlan-security”的安全模板，並配置安全策略。
[AC-wlan-view] security-profile name wlan-security [AC-wlan-sec-prof-wlan-security] security wpa2 psk pass-phrase a1234567 aes //配置安全策略為WPA2+PSK+AES [AC-wlan-sec-prof-wlan-security] quit
# 創建名為“wlan-ssid”的SSID模板，並配置SSID名稱為“wlan-net”。
[AC-wlan-view] ssid-profile name wlan-ssid [AC-wlan-ssid-prof-wlan-ssid] ssid wlan-net //配置SSID名稱為wlan-net [AC-wlan-ssid-prof-wlan-ssid] quit
# 創建名為“wlan-vap”的VAP模板，配置業務數據轉發模式、業務VLAN，並且引用安全模板和SSID模板。
[AC-wlan-view] vap-profile name wlan-vap [AC-wlan-vap-prof-wlan-vap] forward-mode tunnel //配置業務轉發模式為隧道轉發 [AC-wlan-vap-prof-wlan-vap] service-vlan vlan-id 101 //缺省情況下VLAN ID為1，修改VLAN ID為101 [AC-wlan-vap-prof-wlan-vap] security-profile wlan-security [AC-wlan-vap-prof-wlan-vap] ssid-profile wlan-ssid [AC-wlan-vap-prof-wlan-vap] quit
# 配置AP組引用VAP模板，AP上射頻0和射頻1都使用VAP模板“wlan-vap”的配置。
[AC-wlan-view] ap-group name ap-group1 [AC-wlan-ap-group-ap-group1] vap-profile wlan-vap wlan 1 radio 0 [AC-wlan-ap-group-ap-group1] vap-profile wlan-vap wlan 1 radio 1 [AC-wlan-ap-group-ap-group1] quit
- 6.配置動態負載均衡功能
# 創建RRM模板“loadbalance-dynamic”，在RRM模板“loadbalance-dynamic”使能動態負載均衡功能，並指定動態負載均衡的起始門限為15個，差值門限為25%。
[AC-wlan-view] rrm-profile name loadbalance-dynamic [AC-wlan-rrm-prof-loadbalance-dynamic] sta-load-balance dynamic enable [AC-wlan-rrm-prof-loadbalance-dynamic] sta-load-balance dynamic start-threshold 15 [AC-wlan-rrm-prof-loadbalance-dynamic] sta-load-balance dynamic gap-threshold 25 [AC-wlan-rrm-prof-loadbalance-dynamic] quit
# 創建2G射頻模板“radio2g”，並在該模板下引用RRM模板“loadbalance-dynamic”。
[AC-wlan-view] radio-2g-profile name radio2g [AC-wlan-radio-2g-prof-radio2g] rrm-profile loadbalance-dynamic [AC-wlan-radio-2g-prof-radio2g] quit
# 創建5G射頻模板“radio5g”，並在該模板下引用RRM模板“loadbalance-dynamic”。
[AC-wlan-view] radio-5g-profile name radio5g [AC-wlan-radio-5g-prof-radio5g] rrm-profile loadbalance-dynamic [AC-wlan-radio-5g-prof-radio5g] quit
# 在名為“ap-group1”的AP組下引用5G射頻模板“radio5g”和2G射頻模板“radio2g”。
[AC-wlan-view] ap-group name ap-group1 [AC-wlan-ap-group-ap-group1] radio-5g-profile radio5g [AC-wlan-ap-group-ap-group1] radio-2g-profile radio2g [AC-wlan-ap-group-ap-group1] quit
- 7.提交配置
[AC-wlan-view] commit all Warning: Committing configuration may cause service interruption, continue?[Y/N]:y
- 8.驗證配置結果
STA搜索到名為“wlan-net”的無線網絡，輸入密碼“a1234567”並正常關聯后，在AC上執行命令display station ssid wlan-net，可以查看到用戶已經接入到無線網絡“wlan-net”中。
[AC-wlan-view] display station ssid wlan-net Rf/WLAN: Radio ID/WLAN ID Rx/Tx: link receive rate/link transmit rate(Mbps) ------------------------------------------------------------------------------------- STA MAC AP ID Ap name Rf/WLAN Band Type Rx/Tx RSSI VLAN IP address ------------------------------------------------------------------------------------- e019-1dc7-1e08 0 area_1 0/1 2.4G 11n 65/38 -29 101 10.23.101.253 b878-2eb4-2689 1 area_2 0/1 2.4G 11n 78/43 -33 101 10.23.101.254 ------------------------------------------------------------------------------------- Total: 2 2.4G: 2 5G: 0
在AC上執行命令display rrm-profile name loadbalance-dynamic，可以查看到動態負載均衡的相關信息。
[AC-wlan-view] display rrm-profile name loadbalance-dynamic ------------------------------------------------------------ Auto channel select : enable Auto transmit power select : enable PER threshold for trigger channel/power select(%) : 60 Airtime fairness schedule : disable Dynamic adjust EDCA parameter : disable UAC check client's SNR : disable UAC client's SNR threshold(dB) : 20 UAC check client number : disable UAC client number access threshold : 64 UAC client number roam threshold : 64 UAC check channel utilization : disable UAC channel utilization access threshold : 80 UAC channel utilization roam threshold : 80 UAC hide SSID : disable Band steer deny threshold : 2 Band balance start threshold : 10 Band balance gap threshold(%) : 20 Client's band expire based on continuous probe counts : 35 Station load balance : enable Station load balance start threshold : 15 Station load balance gap threshold(%) : 25 Station load balance deny threshold : 3 Smart-roam : disable Smart-roam check SNR : enable Smart-roam standing SNR threshold(dB) : 20 Smart-roam SNR quick-kickoff-threshold(dB) : 15 Smart-roam check rate : disable AMC policy : auto-balance Smart-roam rate threshold(%) : 20 Smart-roam rate quick-kickoff-threshold(%) : 20 Smart-roam high level SNR margin(dB) : 15 Smart-roam low level SNR margin(dB) : 6 Smart-roam SNR check interval(s) : 3 Smart-roam unable roam client expire time(m) : 120 ------------------------------------------------------------
在AC上執行命令display station load-balance sta-mac e019-1dc7-1e08查看參與動態負載均衡的AP射頻。
[AC-wlan-view] display station load-balance sta-mac e019-1dc7-1e08 Station load balance status: balance ------------------------------------------------------------------------------ AP name Radio ID ------------------------------------------------------------------------------ area_1 1 area_1 0 area_2 1 area_2 0 ------------------------------------------------------------------------------ Total: 2
新用戶想連接到AP area_1時，AC會根據AP的上報情況執行動態負載均衡算法，讓新用戶接入負載相對較小的AP。