{"id":956,"date":"2011-09-07T22:40:00","date_gmt":"2011-09-07T14:40:00","guid":{"rendered":"http:\/\/note.systw.net\/note\/?p=956"},"modified":"2023-11-07T22:46:31","modified_gmt":"2023-11-07T14:46:31","slug":"cisco-wireless","status":"publish","type":"post","link":"https:\/\/systw.net\/note\/archives\/956","title":{"rendered":"Cisco Wireless"},"content":{"rendered":"\n

Automimius WLAN Architecture<\/strong>
\u7d44\u6210\u5143\u4ef6:Autonomous AP<\/p>\n\n\n\n

feature<\/strong>
\u4f7f\u7528WDS
\u652f\u63f4User Authentication Cache
Cisco\u7684\u7db2\u7ba1\u8edf\u9ad4\u4f7f\u7528WLSE
ACS\u652f\u63f4RADIUS\/TACACS+ Server
support POE<\/p>\n\n\n\n

WDS(WLAN Domain Service)<\/strong>
AP-Based WDS
\u3000L2 Fast Secure Roaming(IAPP)\uff0c\u53ea\u80fd\u505aL2\u7684Roaming\u3002
\u3000Scable WLAN Mangment
\u3000Advanced Radio Freguaercy Mangment Control
\u3000Enhanced WLAN Security
\u3000\u7121\u6cd5\u505a\u5230\u8f03\u5b8c\u6574\u7684QoS
\u3000WDS\u53ef\u4ee5\u628aconfig push\u7d66AP
\u3000RF\u7684\u7ba1\u7406\u53ef\u4ee5\u7531WDS\u63a7\u5236\u3002
Switch-Based WDS(\u52a0\u5f37AP-Based WDS\u7684\u529f\u80fd) 
\u3000\u652f\u63f4L2 \/ L3\u7684Roaming(IAPP \/ Mobile IP)
\u3000\u53ef\u4ee5\u505a\u5230End-to-End\u7684QoS
\u3000\u53ef\u4ee5\u505a\u5230End-to-End\u7684Security<\/p>\n\n\n\n

WLSE(Cisco Wireless LAN Solution Engine)
\u7528\u4f86\u7ba1\u7406cisco Aironet Wi-Fi\u7684software\uff0c\u4f8b\u5982wireless AP\uff0c\u4f5c\u7528\u5728\u65bc\u7c21\u5316Aironet\u88dd\u7f6e\u7684\u7d44\u614b\u914d\u7f6e\u548c\u76e3\u63a7\uff0c\u4e26\u5177\u6709\u5075\u6e2c\u672a\u6388\u6b0a\u5b58\u53d6\u9ede\u7684\u5b89\u5168\u529f\u80fd\u3002\u5982\u679c\u99ed\u5ba2\u638c\u63a7\u9019\u9805\u7ba1\u7406\u5de5\u5177\uff0c\u5c31\u53ef\u4ee5\u96b1\u533f\u672a\u7d93\u8a31\u53ef\u7684\u5b58\u53d6\u9ede\uff0c\u6216\u66f4\u6539\u5c04\u983b\u8a08\u756b\uff08radio frequency plan\uff09\uff0c\u53ef\u80fd\u9020\u6210\u6574\u500b\u7cfb\u7d71\u505c\u64fa\u3002
ps:
The WLSE is not used to control LAP<\/p>\n\n\n\n

………………………………………….<\/p>\n\n\n\n

Cisco Unified Wireless Network Architecture<\/strong>
\u7d44\u6210\u5143\u4ef6\u6709\u4ee5\u4e0b
1.LAP(lightweight access point )<\/strong>
a LAP performs only the real-time 802.11 operation.
The LAP gets its name because the code image and the local intelligence are stripped down, or lightweight, compared to the traditional autonomous AP.
ex:Aironet 1200 series AP
2.WLC(wireless LAN controller)<\/strong>
The management functions are all performed on a WLC, which is common to many LAPs.
main functions: Authentication , Mobility , Security management<\/p>\n\n\n\n

feature<\/strong>
Cisco\u7684\u7db2\u7ba1\u8edf\u9ad4\u4f7f\u7528WCS
\u652f\u63f4Location Server\u4ee5\u8ffd\u8e64LWAP\u7684Server
ACS\u652f\u63f4RADIUS\/TACACS+ Server
support POE<\/p>\n\n\n\n

WCS(Cisco Wireless Control System)<\/strong>
is an optional server platform that can be used as a single GUI front-end to all the WLCs in a network.
From the WCS, you can perform any WLAN management or configuration task, as well as RF planning and wireless user tracking.<\/p>\n\n\n\n

…<\/p>\n\n\n\n

Lightweight AP Operation<\/strong>
1
LAP\u53d6\u5f97dhcp\u7d66\u7684ip
ps:If the ap does not receive an address, it continues to send requests indefinitely.
2
LAP\u5c0b\u627e\u8a72\u7db2\u6bb5\u6240\u6709WLC
ps:LAP\u4e00\u822c\u63a5\u5728access layer,WLC\u4e00\u822c\u63a5\u5728distribution layer
3
LAP\u5411\u7b2c\u4e00\u500bWLC\u8981\u6c42\u52a0\u5165,\u82e5\u6c92\u56de\u61c9\u5247\u5411\u4e0b\u500bWLC\u8981\u6c42\u52a0\u5165,\u76f4\u5230\u52a0\u5165\u6210\u529f\u70ba\u6b62
ps:LAP\u53ef\u8a18\u93043\u500bWLC,\u5206\u5225\u70baprimary, secondary,tertiary
4
LAP\u548cWLC\u6bd4\u8f03code image\u662f\u5426\u4e00\u6a23,\u82e5\u4e0d\u540c\u5247\u5f9eWLC\u66f4\u65b0\u81ea\u5df1\u7684code image\u4e26\u91cd\u958b\u6a5f
5
LAP\u548cWLC\u900f\u904eencapsulate\u5efa\u7acb\u5169\u689d\u901a\u9053
\u52a0\u5bc6\u7684LWAPP\u6216CAPWAP,\u7528\u65bc\u7ba1\u7406
\u4e0d\u52a0\u5bc6\u7684LWAPP\u6216CAPWAP,\u7528\u65bcclient\u6578\u64da
ps:
LAP\u4e0d\u652f\u63f4\u4ee5trunk\u65b9\u5f0f\u63a5\u5165\u7db2\u8def<\/p>\n\n\n\n


LWAPP(Lightweight Access Point Protocol)<\/strong>
The tunneling protocol developed by Cisco
LWAPP Tunnel\u6709\u4ee5\u4e0b\u5169\u7a2e
\u3000L2 Mode Tunnel: <\/strong>
\u3000\u3000All Traffic\u5c01\u88dd\u5728Ethernet Frame
\u3000\u3000\u4e0d\u4f7f\u7528 IP\u5c01\u5305\u3002
\u3000\u3000Type:0XBBB
\u3000\u3000LWAP\u8207WLC\u9700\u5728\u540c\u4e00\u500bLAN(Broadcast)
\u3000\u3000\u8f03\u6c92\u6709\u5f48\u6027\uff1a\u898f\u5283\u7121\u7dda\u7db2\u8def\u74b0\u5883\u6703\u56e0\u9700\u8981\u8de8\u8d8a\u4e0d\u540c\u7db2\u6bb5\u7684\u60c5\u6cc1\u800c\u53d7\u5230\u9650\u5236\u3002
\u3000L3 Mode Tunnel:<\/strong>
\u3000\u3000uses UDP src port 1024 and destination ports 12222(for data) on the WLC end
\u3000\u3000uses UDP src port 1024 and destination ports 12223(for manage) on the WLC end
\u3000\u3000Mobile IP\u5c01\u88dd\u572816666\u300116667\/UDP
\u3000\u3000\u8f03\u6709\u5f48\u6027,\u4e0d\u9700\u8981\u5728\u540c\u4e00\u500bVLAN\u88e1\u9762
\u3000\u3000\u9700\u8981\u6709IP
LWAPP traffic type:
\u3000LWAPP Controller MSG<\/strong>:\u63a7\u5236\u8a0a\u865f\u4ee5\u7ba1\u7406
\u3000\u3000\u4f7f\u7528AES\u52a0\u5bc6,\u5728WLC\u8207LWAP\u4e4b\u9593\u6e9d\u901a
\u3000Wireless Client Data Frame<\/strong>:client\u6578\u64da
\u3000\u3000\u6c92\u6709\u52a0\u5bc6,\u53ea\u50b3\u9001IP-Ethernet Type Frame
\u3000\u3000\u9810\u8a2d\u4e0d\u6703\u50b3\u9001Multicast \/ Broadcast Traffic
WLC Discovery Process:<\/strong>
The LAP will send Layer 2 LWAPP mode discovery request messages. If the attempt fails, the LAP will try Layer 3 LWAPP WLC discovery.<\/p>\n\n\n\n


CAPWAP(Control and Provisioning Wireless Access Point)<\/strong>
standards-based tunneling protocol . this is CAPWAP is defined in RFC 4118.
uses UDP destination ports 5246 and 5247 on the WLC end<\/p>\n\n\n\n


cisco LAP\u82e5\u8207WLC\u5931\u806f
1,LAP\u6703\u641c\u5c0b\u5176\u4ed6WLC
2,\u6240\u6709client\u5c07\u65b7\u7dda,\u76f4\u5230LAP\u8207\u5176\u4ed6WLC\u9023\u63a5
ps;
\u82e5\u4f7f\u7528Cisco Hybrid Remote Edge Access Point (HREAP),\u8207WLC\u5931\u806f\u6642client\u53ef\u6301\u7e8c\u904b\u4f5c<\/p>\n\n\n\n

ps:
Aironet Desktop Utility (ADU)<\/strong>
1. can support only one wireless client adapter installed and used at a time.
2. can be used to establish the association between the client adapter and the access point, manage authentication to the wireless network, and enable encryption.
3. an be used to enable or disable the adapter radio and to configure LEAP authentication with dynamic WEP
4. The Microsoft Wireless Configuration Manager can be configured to display the Aironet System Tray Utility (ASTU) icon in the Windows system tray.<\/p>\n\n\n\n


intercontroller roaming<\/strong>
the WLCs are configured into logical mobility groups.
A client can roam to any LAP (and its associated WLC) as long as it stays within a mobility group.
A mobility group can have up to 24 WLCs of any type or platform
ps:
same controller roaming\u4e4bssid\u9700\u76f8\u540c\u3000<\/p>\n\n\n\n


\u9023\u63a5LAP\u4e4bswitch\u7121\u9700\u7279\u6b8a\u4e4b\u6307\u4ee4,\u53ea\u8981\u7d66\u6b63\u78ba\u7684vlan\u5373\u53ef
ex:
LAP\u9023\u63a5switch GI1\/0\/10\u4e4b\u8a2d\u5b9a\u7bc4\u4f8b
Switch(config)# vlan 100
Switch(config-vlan)# name ap-management
Switch(config-vlan)# exit
Switch(config)# interface gigabitethernet1\/0\/10
Switch(config-if)# switchport
Switch(config-if)# switchport access vlan 100
Switch(config-if)# switchport mode access
Switch(config-if)# spanning-tree portfast
Switch(config-if)# power inline auto
Switch(config-if)# exit<\/p>\n\n\n\n

\u9023\u63a5WLC\u4e4bswitch\u9700\u78ba\u4fdd\u53ef\u4ee5\u62b5\u9054\u6bcf\u4e00\u500bLAP,\u56e0\u6b64\u53ef\u4f7f\u7528trunk\u65b9\u5f0f
ex:
WLC\u9023\u63a5switch GI1\/0\/20\u4e4b\u8a2d\u5b9a\u7bc4\u4f8b
Switch(config)# interface range gigabitethernet1\/0\/20
Switch(config-if)# switchport encapsulation dot1q
Switch(config-if)# switchport trunk allowed vlan 10,20,30
Switch(config-if)# switchport mode trunk
Switch(config-if)# spanning-tree portfast trunk
Switch(config-if)# no shutdown
Switch(config-if)# exit<\/p>\n\n\n\n


ps:
Cisco Compatible Extensions program
objective<\/strong>
to provide customers with a broad range of WLAN client devices that have been tested for interoperability with Cisco Aironet innovations
features<\/strong>
1. Mobility
2. Security
3. VLAN and QoS<\/p>\n\n\n\n


reference
http:\/\/smalleaf.blogspot.com\/2010\/07\/ccna-wireless-iuwne640-721.html
http:\/\/nkongkimo.wordpress.com\/category\/ccnp-bcmsn-module-06\/<\/p>\n","protected":false},"excerpt":{"rendered":"

Automimius WLAN Architecture\u7d44\u6210 …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"","fifu_image_alt":"","_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[34],"tags":[],"class_list":["post-956","post","type-post","status-publish","format-standard","hentry","category-cisco-layer2"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts\/956","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/comments?post=956"}],"version-history":[{"count":0,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/posts\/956\/revisions"}],"wp:attachment":[{"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/media?parent=956"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/categories?post=956"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/systw.net\/note\/wp-json\/wp\/v2\/tags?post=956"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}