Motorola 221 build N+1 冗余配置手册.doc

XXX地市升级221版本的“N+1”冗余配置手册此文档主要增加了两处配置：1. 在配置Redundancy时,需要主备AC之间互指，主AC和主AC之间也要互指2. Wireless下 cluster-master-support enable 可看到全局的radio no cluster-master-support enable 只能看到本AC的radio一、配置 目前RFS7000的版本存在着”N+1”冗余切换的问题，现RFS7000--221CR.img的版本已经解决了此问题，但是在使用此版本时请注意以下事项：1. Standby AC上需要使用最小的IP地址去和其他的Primary AC进行Redundancy member的建立。如果Standby AC没有最小的IP地址，那么就需要局方提供一个最小的地址，配置到Standby AC上（类似于Loopback地址）需要路由出去。（需要提前向局方申请）最小地址是指在Redundancy Cluster 里的最小。 2. 在配置Redundancy时,需要主备AC之间互指，主AC和主AC之间也要互指2. 对Redundancy Cluster里的所有AC的Radio进行统一的规划和部署3. 对Redundancy Cluster里的所有AC的WLAN进行统一的规划和部署4. 在Standby AC 配置manual mapping配置参考：上图中采用两主一备的冗余方式，备机的IP地址是18，在Redundancy Cluster里是最大的，如果用这个地址去建立Redundancy关系就会有问题，我们采用以下步骤解决：1. 需启用一个最小的IP地址在备机上：（需要提前向局方申请并路由此地址）AC：18interface vlan5 ip address /302. 用这个最小的地址去建立冗余关系AC：18 (standy)redundancy interface-ip redundancy mode standbyredundancy auto-revert enableredundancy auto-revert-period 2redundancy dhcp-server enableredun dhcp-force-electionredundancy member-ip 02redundancy member-ip 06redundancy enableAC：02(primary)redundancy interface-ip 02redundancy member-ip 06redundancy dhcp-server enableredun dhcp-force-electionredundancy member-ip redundancy enableAC：06(primary)redundancy interface-ip 06redundancy member-ip 02redundancy dhcp-server enableredun dhcp-force-electionredundancy member-ip redundancy enable3. 建立成功以后，在主AC上看到的DHCP 的状态是Standby，备AC上看到的是RunningAC：18 (standy)Standby-218#sh dhcp status DHCP Server is Running on following interfaces vlan218Standby-218#AC：02(primary)202(config)#sh dhcp status DHCP Server is in Standby202(config)#AC：06(primary)206(config)#sh dhcp status DHCP Server is in Standby206(config)#4. 冗余关系建立，查看Radio和 show run，可以查看到整个Cluster里的Radio，这时要求对整个Cluster里的Radio进行统一的规划，否则可能会造成冲突。Wireless下 cluster-master-support enable 可看到全局的radio no cluster-master-support enable 只能看到本AC的radioAC：18 (standy)Standby-218#sh wireless radioIDX AP MAC RADIO-BSSID TYPE STATE CHANNEL POWER ADOPTED-BY 1 00-23-68-23-06-80 00-23-68-08-DB-50 11bg normal 1 (rnd) 20(20) 02 2 00-15-70-A3-62-27 00-15-70-AA-A2-10 11bg normal 11 (rnd) 20(20) 02 3 00-15-70-A3-5E-D2 00-15-70-AA-97-F8 11bg normal 1 (rnd) 20(20) 06 4 00-23-68-23-0A-FD 00-23-68-09-16-CC 11bg normal 6 (rnd) 20(20) 06 Standby-218#Standby-218#sh run | b wirelesswireless secure-wispe-default-secret 0 defaultS max-users 8192 manual-wlan-mapping enable load-balance by-count wlan 1 enable wlan 1 ssid moto-202 wlan 2 enable wlan 2 ssid moto-206 radio add 1 00-23-68-23-06-80 11bg ap300 radio 1 description xxxxx radio 1 radio-number 1 radio 1 bss 1 1 radio add 2 00-15-70-A3-62-27 11bg ap300 radio 2 radio-number 1 radio 2 bss 1 1 radio add 3 00-15-70-A3-5E-D2 11bg ap300 radio 3 radio-number 1 radio 3 bss 1 2 radio add 4 00-23-68-23-0A-FD 11bg ap300 radio 4 radio-number 1 radio 4 bss 1 2 radio default-11a bss 1 1 radio default-11a bss 2 2 radio default-11b bss 1 1 radio default-11b bss 2 2 radio default-11bg bss 1 1 radio default-11bg bss 2 2 radio default-11an bss 1 1 radio default-11an bss 2 2 radio default-11bgn bss 1 1 radio default-11bgn bss 2 2 no ap-ip default-ap switch-ip smart-rf radio 1 radio-mac 00-23-68-08-DB-50 radio 2 radio-mac 00-15-70-AA-A2-10 radio 3 radio-mac 00-15-70-AA-97-F8 radio 4 radio-mac 00-23-68-09-16-CC !AC：02(primary)202(config)#sh wireless radioIDX AP MAC RADIO-BSSID TYPE STATE CHANNEL POWER ADOPTED-BY 1 00-23-68-23-06-80 00-23-68-08-DB-50 11bg normal 1 (rnd) 20(20) 02 2 00-15-70-A3-62-27 00-15-70-AA-A2-10 11bg normal 11 (rnd) 20(20) 02 3 00-15-70-A3-5E-D2 00-15-70-AA-97-F8 11bg normal 1 (rnd) 20(20) 06 4 00-23-68-23-0A-FD 00-23-68-09-16-CC 11bg normal 6 (rnd) 20(20) 06 202(config)#202(config)#sh run | b wirelesswireless secure-wispe-default-secret 0 defaultS max-users 8192 wlan 1 enable wlan 1 ssid moto-202 radio add 1 00-23-68-23-06-80 11bg ap300 radio 1 description xxxxx radio 1 radio-number 1 radio add 2 00-15-70-A3-62-27 11bg ap300 radio 2 radio-number 1 radio add 3 00-15-70-A3-5E-D2 11bg ap300 radio 3 radio-number 1 radio add 4 00-23-68-23-0A-FD 11bg ap300 radio 4 radio-number 1 no ap-ip default-ap switch-ip smart-rf radio 1 radio-mac 00-23-68-08-DB-50 radio 2 radio-mac 00-15-70-AA-A2-10 radio 3 radio-mac 00-15-70-AA-97-F8 radio 4 radio-mac 00-23-68-09-16-CC ! wirelessAC：06(primary)206(config)#sh wireless radioIDX AP MAC RADIO-BSSID TYPE STATE CHANNEL POWER ADOPTED-BY 1 00-23-68-23-06-80 00-23-68-08-DB-50 11bg normal 1 (rnd) 20(20) 02 2 00-15-70-A3-62-27 00-15-70-AA-A2-10 11bg normal 11 (rnd) 20(20) 02 3 00-15-70-A3-5E-D2 00-15-70-AA-97-F8 11bg normal 1 (rnd) 20(20) 06 4 00-23-68-23-0A-FD 00-23-68-09-16-CC 11bg normal 6 (rnd) 20(20) 06 206(config)#206(config)#sh run | b wirelesswireless secure-wispe-default-secret 0 defaultS max-users 8192 wlan 2 enable wlan 2 ssid moto-206 radio add 1 00-23-68-23-06-80 11bg ap300 radio 1 description xxxxx radio 1 radio-number 1 radio add 2 00-15-70-A3-62-27 11bg ap300 radio 2 radio-number 1 radio add 3 00-15-70-A3-5E-D2 11bg ap300 radio 3 radio-number 1 radio add 4 00-23-68-23-0A-FD 11bg ap300 radio 4 radio-number 1 radio 4 antenna-mode primary no ap-ip default-ap switch-ip smart-rf radio 1 radio-mac 00-23-68-08-DB-50 radio 2 radio-mac 00-15-70-AA-A2-10 radio 3 radio-mac 00-15-70-AA-97-F8 radio 4 radio-mac 00-23-68-09-16-CC ! wireless5. 对Radio的统一规划和部署上图中，每个AC有两个单频的AP，那么AC-202和AC-206的Radio索引可以相互错开使用AC：18 (整个cluster的radio 都要在备机上配置)radio add 1 00-23-68-23-06-80 11bg ap300 radio 1 description xxxxx radio 1 radio-number 1 radio add 2 00-15-70-A3-62-27 11bg ap300 radio 2 radio-number 1radio add 3 00-15-70-A3-5E-D2 11bg ap300 radio 3 radio-number 1 radio add 4 00-23-68-23-0A-FD 11bg ap300 radio 4 radio-number 1 radio 4 antenna-mode primaryAC：02 (primary)radio add 1 00-23-68-23-06-80 11bg ap300 radio 1 description xxxxx radio 1 radio-number 1 radio add 2 00-15-70-A3-62-27 11bg ap300 radio 2 radio-number 1AC：06 (primary)radio add 3 00-15-70-A3-5E-D2 11bg ap300 radio 3 radio-number 1 radio add 4 00-23-68-23-0A-FD 11bg ap300 radio 4 radio-number 1 radio 4 antenna-mode primary6对WLAN的统一规划和部署 如果AC-202的WLAN 1 的SSID是MOTO-202，AC-206的WLAN 1 的SSID是MOTO-206那么当切换到备机上该如何配置呢？我们建议也是相互错开配置。AC：18 (standy) wlan 1 enable wlan 1 ssid moto-202 wlan 2 enable wlan 2 ssid moto-206AC：02 (primary) wlan 1 enable wlan 1 ssid moto-202AC：06(primary) wlan 2 enable wlan 2 ssid moto-2066. 如果发生切换，那么备机上的Radio将会广播所有的SSID，所以我们需要在备机上做Manual mappingAC：18 (standy)wireless secure-wispe-default-secret 0 defaultS max-users 8192 manual-wlan-mapping enable-启用manual mapping load-balance by-count wlan 1 enable wlan 1 ssid moto-202 wlan 2 enable wlan 2 ssid moto-206 radio add 1 00-23-68-23-06-80 11bg ap300 radio 1 description xxxxx radio 1 radio-number 1 radio 1 bss 1 1-AC-202的Radio，只广播WLAN1 radio add 2 00-15-70-A3-62-27 11bg ap300 radio 2 radio-number 1 radio 2 bss 1 1-AC-202的Radio，只广播WLAN1 radio add 3 00-15-70-A3-5E-D2 11bg ap300 radio 3 radio-number 1 radio 3 bss 1 2-AC-206的Radio，只广播WLAN2 radio add 4 00-23-68-23-0A-FD 11bg ap300 radio 4 radio-number 1 radio 4 bss 1 2-AC-206的Radio，只广播WLAN2 radio default-11a bss 1 1 radio default-11a bss 2 2 radio default-11b bss 1 1 radio default-11b bss 2 2 radio default-11bg bss 1 1 radio default-11bg bss 2 2 radio default-11an bss 1 1 radio default-11an bss 2 2 radio default-11bgn bss 1 1 radio default-11bgn bss 2 2 no ap-ip default-ap switch-ip smart-rf radio 1 radio-mac 00-23-68-08-DB-50 radio 2 radio-mac 00-15-70-AA-A2-10 radio 3 radio-mac 00-15-70-AA-97-F8 radio 4 radio-mac 00-23-68-09-16-CC ! Wireless三台AC的最终配置信息AC：18 (standy) Standby-218#sh run ! configuration of RFS7000 Standby-218 version -221CR!version 1.4!aaa authentication login default local noneservice prompt crash-info!hostname Standby-218!network-element-id /24!username admin password 1 8e67bb26b358e2ed20fe552ed6fb832f397a507dusername admin privilege superuserusername operator password 1 fe96dd39756ac41b74283a9292652d366d73931f!spanning-tree mst cisco-interoperability enablespanning-tree mst configuration name My Name!country-code cnredundancy interface-ip redundancy mode standbyredundancy auto-revert enableredundancy auto-revert-period 2redundancy dhcp-server enableredundancy member-ip 02redundancy member-ip 06redundancy enablelogging buffered 4 logging console 4snmp-server engineid netsnmp 6b8b45674b7331c9snmp-server sysname Standby-218snmp-server manager v2snmp-server manager v3snmp-server user snmptrap v3 encrypted auth md5 0x6dc0eaa10ae8575dd807804d8d372f82snmp-server user snmpmanager v3 encrypted auth md5 0x6dc0eaa10ae8575dd807804d8d372f82snmp-server user snmpoperator v3 encrypted auth md5 0x02e7041f9b1ad7d0622ef6d64a0ad98efirewall dhcp-snoop-conflict-detection disablefirewall dhcp-snoop-conflict-logging disableip dhcp option ap300 189 asciiip http serverip http secure-trustpoint default-trustpointip http secure-serverip sship telnetno service pm sys-restartlicense AP c2efa622a9d5f29186d3511aac9893c9d286d9fa0c1bb7505d775e9ee717a89a0b5c15b27fafa167no firewall stateful-packet-inspection l2!wireless secure-wispe-default-secret 0 defaultS max-users 8192 manual-wlan-mapping enable load-balance by-count wlan 1 enable wlan 1 ssid moto-202 wlan 2 enable wlan 2 ssid moto-206 radio add 1 00-23-68-23-06-80 11bg ap300 radio 1 description xxxxx radio 1 radio-number 1 radio 1 bss 1 1 radio add 2 00-15-70-A3-62-27 11bg ap300 radio 2 radio-number 1 radio 2 bss 1 1 radio add 3 00-15-70-A3-5E-D2 11bg ap300 radio 3 radio-number 1 radio 3 bss 1 2 radio add 4 00-23-68-23-0A-FD 11bg ap300 radio 4 radio-number 1 radio 4 bss 1 2 radio default-11a bss 1 1 radio default-11a bss 2 2 radio default-11b bss 1 1 radio default-11b bss 2 2 radio default-11bg bss 1 1 radio default-11bg bss 2 2 radio default-11an bss 1 1 radio default-11an bss 2 2 radio default-11bgn bss 1 1 radio default-11bgn bss 2 2 no ap-ip default-ap switch-ip smart-rf radio 1 radio-mac 00-23-68-08-DB-50 radio 2 radio-mac 00-15-70-AA-A2-10 radio 3 radio-mac 00-15-70-AA-97-F8 radio 4 radio-mac 00-23-68-09-16-CC ! wireless !radius-server local! interface ge1 switchport mode trunk switchport trunk native vlan 1 switchport trunk allowed vlan none switchport trunk allowed vlan add 1,218, ip dhcp trust!interface ge2 switchport access vlan 1 ip dhcp trust!interface ge3 switchport access vlan 1 ip dhcp trust!interface ge4 switchport access vlan 1 ip dhcp trust!interface me1 ip address 00/24!interface vlan1 no ip address!interface vlan218 ip address 18/30!interface vlan5 ip address /30!ip dhcp pool ap202 default-router option ap300 02,18 network /24 address range 54ip dhcp pool ap206 default-router option ap300 06,18 network /24 address range 54ip dhcp pool local network 16/30!service dhcp!rtls rfid espi sole!ip route /0 17!line con 0line vty 0 24!endStandby-218# AC：02202#sh run ! configuration of RFS7000 202 version -221CR!version 1.4!aaa authentication login default local noneservice prompt crash-info!hostname 202!network-element-id RFS7000!username admin password 1 8e67bb26b358e2ed20fe552ed6fb832f397a507dusername admin privilege superuserusername operator password 1 fe96dd39756ac41b74283a9292652d366d73931f!spanning-tree mst cisco-interoperability enablespanning-tree mst configuration name My Name!country-code cnredundancy interface-ip 02redundancy interface-ip 06redundancy dhcp-server enableredundancy member-ip redundancy enablelogging buffered 4logging console 4snmp-server engineid netsnmp 6b8b45673a4fc9ebsnmp-server sysname 202snmp-server manager v2 snmp-server manager v3snmp-server user snmptrap v3 encrypted auth md5 0x5910eb61f34c38bfc3e4237db7ade0e3snmp-server user snmpmanager v3 encrypted auth md5 0x5910eb61f34c38bfc3e4237db7ade0e3snmp-server user snmpoperator v3 encrypted auth md5 0xb258cf3264406c59c6ac43a401412052firewall dhcp-snoop-conflict-detection disablefirewall dhcp-snoop-conflict-logging disableip dhcp option ap300 189 asciiip http serverip http secure-trustpoint default-trustpointip http secure-serverip sship telnetno service pm sys-restartlicense AP 0ae0abeee37ac7c3b4f4c550489509361f06101e30d8e1d351a54705fb9bef5c0a4e3f9d2306c4a8no firewall stateful-packet-inspection l2!wireless secure-wispe-default-secret 0 defaultS max-users 8192 wlan 1 enable wlan 1 ssid moto-202 radio add 1 00-23-68-23-06-80 11bg ap300 radio 1 description xxxxx radio 1 radio-number 1 radio add 2 00-15-70-A3-62-27 11bg ap300 radio 2 radio-number 1 radio add 3 00-15-70-A3-5E-D2 11bg ap300 radio 3 radio-number 1 radio add 4 00-23-68-23-0A-FD 11bg ap300 radio 4 radio-number 1 no ap-ip default-ap switch-ip smart-rf radio 1 radio-mac 00-23-68-08-DB-50 radio 2 radio-mac 00-15-70-AA-A2-10 radio 3 radio-mac 00-15-70-AA-97-F8 radio 4 radio-mac 00-23-68-09-16-CC ! wireless !radius-server local!interface ge1 switchport mode trunk switchport trunk native vlan 1 switchport trunk allowed vlan none switchport trunk allowed vlan add 1,202, ip dhcp trust!interface ge2 switchport access vlan 1 ip dhcp trust!interface ge3 switchport access vlan 1 ip dhcp trust!interface ge4 switchport access vlan 1 ip dhcp trust!interface me1 ip address 00/24! interface vlan1 no ip address!interface vlan202 ip address 02/30!ip dhcp pool ap default-router option ap300 02,18 network /24 address range 54ip dhcp pool local network 00/30!service dhcp!rtls rfid espi sole!ip route /0 01!line con 0line vty 0 24!end202# AC：06(primary) 206#sh run ! configuration of RFS7000 206 version -221CR!version 1.4!aaa authentication login default local noneservice prompt crash-info!hostname 206!network-element-id RFS7000!username admin password 1 8e67bb26b358e2ed20fe552ed6fb832f397a507dusername admin privilege superuserusername operator password 1 fe96dd39756ac41b74283a9292652d366d73931f!spanning-tree mst cisco-interoperability enablespanning-tree mst configuration name My Name!country-code cnredundancy interface-ip 06redundancy interface-ip 02redundancy dhcp-server enableredundancy member-ip redundancy enablelogging buffered 4logging console 4snmp-server engineid netsnmp 6b8b45673a2599eesnmp-server sysname RFS7000snmp-server manager v2 snmp-server manager v3snmp-server user snmptrap v3 encrypted auth md5 0xb3127ab92792c3b99aa0890c7f3bed40snmp-server user snmpmanager v3 encrypted auth md5 0xb3127ab92792c3b99aa0890c7f3bed40snmp-server user snmpoperator v3 encrypted auth md5 0xc05f34af7bc30194931649836bdb2305firewall dhcp-snoop-conflict-detection disablefirewall dhcp-snoop-conflict-logging disableip dhcp option ap300 189 asciiip http serverip http secure-trustpoint default-trustpointip http secure-serverip sship telnetno service pm sys-restartlicense AP 5a1b7d28f34f21007fbf8bf69f065c4617f9245dcd87759fb7f5242d2be130d033470da2c0ba7459no firewall stateful-packet-inspection l2!wireless secure-wispe-default-secret 0 defaultS max-users 8192 wlan 2 enable wlan 2 ssid moto-206 radio add 1 00-23-68-23-06-80 11bg ap300 radio 1 description