L3 Roaming Example | D-Link DWS 3000 specification

C

L3 Roaming Example

The example in this appendix describes how to configure a D-Link WLAN Controller Switch for a network that needs L3 roaming capabilities. This example contains information about the following features, which might be required to use L3 tunneling on your WLAN:

•Configuring the WLAN and Tunnel Interfaces

•Configuring the L3 Tunnel Network

•Configuring DHCP Relay and the DHCP Server

•Setting the MTU Size

Configuring the WLAN and Tunnel Interfaces

The following figure shows an example of a network that uses L3 tunnels to support wireless roaming. The subnet that all clients will use for L3 roaming is 192.168.60.0/24. The configuration examples in the rest of this appendix use the network information in this figure.

Figure 83. Example of a Network with L3 Tunnel Subnet

WS1 VLAN Routing Interface 192.168.60.15

WS1 WLAN (Loopback) Interface 192.168.100.15

	WS1
	WS1 Network	WS2 Network		WS2 VLAN Routing Interface
	Interface	WS2 Network		WS2 VLAN Routing Interface
Call Server	192.168.2.20	Interface	WS2	192.168.60.25
Call Server	192.168.2.20	192.168.7.20	WS2
192.168.60.35		192.168.7.20
192.168.60.35				WS2 WLAN (Loopback)
				WS2 WLAN (Loopback)
				Interface
	L3 Network			192.168.200.15
	L3 Network

AP1

192.168.18.10	AP2
	192.168.28.10
Wireless Client	Wireless Client
192.168.60.55	192.168.60.55

Configuring the WLAN and Tunnel Interfaces 187

Image 187

D-Link DWS 3000 user manual L3 Roaming Example, Configuring the Wlan and Tunnel Interfaces

Contents

Copyright 2006. All rights reserved Precaución FCC WarningCE Mark Warning Warnung Table of Contents Installing the D-Link Unified Access System Managing and Maintaining D-Link Access Points Configuring the External Radius Server Technical Support Page List of Tables Page Sample Wlan Visualization List of Figures WPA Personal Configuration Organization Symbol Description ExampleAbout This Document Audience Safety Cautions Safety Instructions Safety Instructions General Precautions for Rack-Mountable Products Protecting Against Electrostatic Discharge Battery Handling ReminderPage Link Unified Access System Components Overview of the D-Link Unified Access SystemLink Wlan Controller Switch Wlan Visualization Link Access Point Single WCS Deployment Link Unified Access System Topology Single WCS with Layer 2 Roaming Support Peer Switch WCS Deployment Peer WCS with Layer 3 Roaming Support Understanding the User Interfaces Web Interface Layout Using the Web Interface Navigation Menu Interface Configuration Graphic Tools Menu Using the Command-Line InterfaceConfiguration and Monitoring Options Wlan Tabs Using Snmp Tkip AES & Ccmp Wireless System Features and Standards Support CLI Syslog Tftp System Requirements Planning the D-Link Unified Access System Network Wlan Topology Considerations Link Unified Access System Components Wiring Closet Topology Access Point Placement Access Point-to-Switch Discovery Network Planning to Support Layer 3 Roaming Inter-Subnet Roaming Hardware Overview Installing the Hardware Front Panel Components LED Indicators For PoE Mode PowerPoE Mode For Link/Act/Speed Mode Combo SFP Ports Rear Panel DescriptionSide Panels 10GE Port LEDs Package Contents InstallationInstallation Guidelines Installing the Switch in a Rack Installing the Switch without the Rack Installing the SFP ports Powering On the SwitchPower Failure Inserting the Fiber-Optic Transceivers into the Switch Installing the Optional Module Front Panel of the DEM-410X Install the Module Connecting to the External Redundant Power System Connecting the Switch Connecting the Switch and AP Directly Connecting the Switch to the Network Connecting to the Core Network Connecting the Switch and AP through the L2/L3 Network System Deployment Overview Installing the D-Link Unified Access SystemPage Connecting the Switch to the Network Field Description Enabling the Wlan Features on the Switch AP MAC Validation Disable ReasonAP Authentication IP Address Logging on to the AP Preparing the Access Points Configuring 802.1x Authentication Information on the AP Changing the AP Password Configuring Vlan Information on the Access Point Configuring AP-to-Switch Authentication InformationAction Command Understanding the Discovery Methods Discovering Access Points and Peer SwitchesExample 1 L2 Discovery L2 Discovery Example Example 2 IP Address of AP Configured in the Switch Example 4 Dhcp Option Example 3 IP Address of Switch Configured in the AP Assigning the IP Address to Switches and Managed APs Discovery and Peer Switches Link Wlan Controller Switch with Routing Enabled Link Wlan Controller Switch with Routing Disabled Switch-prompt Interface 0/2#ip address 192.168.1.24 Link Access Point Enabling the AP and Peer Switch Discovery Link Wireless Device Discovery Protocol Configuring IP Addresses of Peers and APs in the Switch IP List L3/IP DiscoveryIP Address Range Setting the Switch IP Address in the D-Link Access Point WLAN-AP#get managed-ap Options Setting the Switch Information in the Dhcp Option Authenticating and Validating Access Points Configuring AP Authentication Requiring AP Authentication Using the Local Database for AP Validation Installing the D-Link Unified Access System Using the Radius Database for AP Validation Set the Radius server as the validation method Managing Failed or Rogue APs Access Point Profiles Configuring Access Point SettingsAP Profiles, Networks, and the Local Database Networks Local Access Point Database Accounting Configuring AAA and Radius SettingsGlobal Radius Server Secret MAC List Configuring Wireless Radio SettingsMAC Authentication Default Action Radio Settings RTS Threshold StateSuper a Super G Dynamic Turbo Supported RF Scan SentryRate Sets Basic Channel Dtim PeriodBeacon Period Automatic RF Scan Duration Automatic PowerInitial Power Advanced Radio Configuration Managing Virtual Access Point Configuration Configuring Ssid Settings Configuring the Default Network Wireless Network Configuration Configuring Network Settings L3 Tunnel Mask AuthenticationL3 Tunnel Status L3 Tunnel Subnet None Enabling and Configuring Additional VAPsAddress Radius Secret Networks Available to the Wireless Client Configuring a VAP for L3 Tunnels L3 Roaming Example Using No Security Configuring AP Security Static WEP Configuration Using Static or Dynamic WEP Static WEP Field Description WPA Personal Configuration Using WPA/WPA2 Personal or Enterprise Static WPA Field Description Static WPA FieldDescription Configuring Valid Access Point Settings Profile Valid Access Point SummaryManaged Mode Location Password Valid AP Configuration APs operate Page Resetting the Access Points Managing and Maintaining D-Link Access Points Configuring Channel Plan and Power Settings Managing Radio Frequency Settings RF Channel Plan and Power Configuration Interval RF Channel Plan and Power AdjustmentChannel Plan History Depth Channel Plan History Viewing the Channel Plan History Initiating Manual Channel Plan Assignments Manual Power Adjustments Initiating Manual Power Adjustments File Path Upgrading the Access Point SoftwareAP Upgrade Field Description Server Address Managed AP Group Size Success Count Performing Advanced Access Point ManagementStatus Download Count Debug Enabling AP Debugging AP Debug Field Description Adjusting the Channel and Power Power Status Page Monitoring Status and Statistics Monitoring Wireless Global Information Global Wlan Statistics Peer SwitchesTotal Access Managed Access Monitoring Status and Statistics Viewing IP Discovery Status Monitoring Peer Switch Status Monitoring All Access Points Clients Monitoring All Access PointsAuthenticated Firmware Version Managed Access Point Status Monitoring Managed Access Point Status Configuration Viewing Detailed Managed Access Point Status Detailed Managed Access Point Status Viewing Managed Access Point Radio Summary Information Managed AP Radio Detail Viewing Detailed Managed Access Point Radio InformationTransmit Power Managed AP Radio Summary Viewing Managed Access Point Neighbor APs Neighbor AP MAC Viewing Clients Associated with Neighbor Access PointsManaged AP Neighbor Status Ex -802.11g Neighbor AP Clients Viewing Managed Access Point VAPsNeighbor Client Monitoring Managed AP Statistics Managed Access Point Ethernet Summary Statistics Viewing Managed Access Point Ethernet StatisticsViewing Detailed Managed Access Point Statistics Managed Access Point Wlan Summary Statistics Viewing Managed Access Point Radio Statistics Viewing Managed Access Point VAP Statistics Authentication Failed AP Status Viewing Access Point Authentication Failure Status Monitoring Rogue and RF Scan Access Points RF Scan Monitoring Associated Client Information Associated Client Status Summary Viewing Associated Client StatusTunnel IP Address Viewing Detailed Associated Client Status Viewing Associated Client Neighbor AP Status Viewing Associated Client Ssid StatusAssociated Client Neighbor AP Status Viewing Associated Client Statistics Viewing Associated Client VAP Status Transmit Retries Associated Client Association Summary StatisticsAssociated Client Summary Statistics Associated Client Association Detail Statistics Associated Client Session Detail Statistics Viewing Client Authentication Failure StatusTransmit Retries Failed Duplicates Received Failed Client Status Client Authentication Failure Status Monitoring and Managing Ad Hoc Clients Authentication Failure CountAssociation Failure Count Ad Hoc Client Status Ad Hoc Clients Detection Mode Creating, Configuring, and Managing AP Profiles Configuring Advanced Settings Multiple AP Profiles Adding a Profile Creating, Copying, and Deleting AP Profiles Applying the AP Profile Applying an AP Profile Configuring Global Settings RF Scan Status Enabling Snmp TrapsAP Failure Status Client Failure Snmp Traps Field Description QoS Configuration Configuring QoS Queue QoS SettingsMinimum Contention Maximum Contention Max. Burst Length WMM Mode Txop Limit Page Visualizing the Wireless Network Click Wlan Visualization Download Image Importing and Configuring a Background Image Creating a New Graph Setting Up the Graph Components Importing and Configuring a Background Image on With a graph definition length of 800 feet Multiple Graphs Graphing the Wlan Components Component Tool Tip File Understanding the Menu Bar OptionsWlan Visualization Menu Bar Options Menu Item Description On page 166 shows the difference between the tab view View Help Options Sentry Mode Detailed View Tool Tip for Radio Managed AP Information Component Information Component Attributes Links/CommandsPeer Switch Managing the Graph Other AP Wireless Client Default D-Link Wlan Controller Switch Settings Link Unified Access System Default SettingsFeature Default AP Default AP Profile Settings Default D-Link Access Point Profile SettingsWlan Information Link Unified Access System Default Settings Other Settings Virtual Access Point and Network Settings Radius Server Description Range Usage Attribute Configuring the External Radius ServerConfiguring Radius Settings for Access Points Radius Attributes for the Access Point Radius Server Description Range Usage Attribute Configuring Radius Clients FreeRADIUS Server Configuration ExampleCreating and Including an Attribute Dictionary Vendor Adding Access Points to the Valid AP Database Radius Attributes for Wireless Clients Configuring Radius Settings for Wireless ClientsFreeRADIUS Example for Wireless Client Configuration Configuring Radius for Client MAC Authentication Configuring User-Based Authentication and Dynamic VLANs Configuring MAC Authentication L3 Roaming Example Configuring the Wlan and Tunnel Interfaces Using a Loopback Interface for the Wireless Functions Creating the Vlan Routing Interface Create a Vlan routing interface on Vlan L3 Roaming Example Configuring the L3 Tunnel Network Example of Configuring L3 Roaming by Using the CLI L3 Tunnel Status Values ConfiguredL3 Tunnel Status Description Switch-prompt#wireless ap profile apply Example of Configuring L3 Roaming by Using the Web Interface Configuring the Relay Agent Configuring Dhcp Relay and the Dhcp Server Configure the default router for the address pool Configuring the Dhcp Server L3 Roaming Example Setting the MTU Size Setting the MTU Size Page QoS and Load Balancing Understanding Quality of Service802.11e and WMM Standards Support QoS Queues and Dscp on Packets Coordinating Traffic Flow Edcf Control of Data Frames and Aifs Packet Bursting for Better Performance Random Backoff and Contention Windows 802.1p and Dscp tags Txop Interval for Client Stations Vlan Priority Dscp Value Vlan Priority Tags All countries and regions excluding USA Warranty and Registration Information Warranties Exclusive Hardware Limited WarrantySoftware Limited Warranty USA Only Limited Warranty USA Only Page Warranty and Registration Information Copyright Statement Link Europe Limited Product WarrantyProduct Registration Trademarks Limitation of Product Warranty Geographical Scope of the Limited Product Warranty Performance of the Limited Product Warranty Limited Product Warranty PeriodProduct Type Product Warranty Period Warrantor Link Europe Limited Produktgarantie Einschränkung der Garantie Räumlicher Geltungsbereich der eingeschränkten GarantieLaufzeit der eingeschränkten Garantie Garantiegeber Leistungsumfang der eingeschränkten GarantieProdukttyp Gewährleistungslaufzeit Etendue géographique de la Garantie Produit Limitée Link Europe a limité la garantie des produits Période de Garantie Produit Limitée Limitation de la Garantie ProduitType de produit Période de Garantie Exécution de la Garantie Produit Limitée Garantía limitada del producto D-LINK EuropaGarant Limitación de la garantía del producto Cobertura geográfica de la garantía limitada del producto Uso de la garantía limitada del producto Período de la garantía limitada del productoTipo de producto Período de garantía del Producto Garante Link Europe Termini di Garanzia dei Prodotti Limitazione della Garanzia Ambito geografico della Garanzia limitataPeriodo di garanzia Londra NW9 5 AB Regno Unito Telefono +44-020-8731-5555 Prestazioni della Garanzia limitataPage Technical Support Technical Support Technical Support Technische Unterstützung Assistance technique Asistencia Técnica Supporto tecnico Tech Support for customers within the Netherlands Pomoc techniczna Technická podpora Technikai Támogatás Teknisk Support Link teknisk support på Internettet Teknistä tukea asiakkaille Suomessa Teknisk Support för kunder i Sverige Tech Support for customers within Australia Suporte Técnico Τεχνική Υποστήριξη Emailsupport@dlink.com.sg Tech Support for customers within India Tech Support for customers within the Russia Technical Support Emailsupport@d-link.co.za Tech Support for Latin America customers Техническая поддержка Asistencia Técnica Suporte Técnico 技术支持友冠技術支援 Europe U. K International Offices Product Model Product Serial No Registration Information Registration Information