Huawei WLAN Interworking Test Report

Transcription

1 第 1 页, 共 7 页 Huawei WLAN Interworking Test Report Content 1 Overview WLAN Device and Test Solution Test Solution Test of the Interconnection Between WLAN Device and Upper-layer RADIUS Server6 3.1 Test Item in Typical Authentication and Accounting Scenario Upper-Layer Server Interconnection Test Conclusion... 7

2 第 2 页, 共 7 页 Huawei WLAN Interworking Test Report Keywords: Authentication and accounting, STA compatibility, connection Abstract: Abbreviation list: This document provides WLAN interworking test report, which helps you understand Huawei WLAN products and usage scenarios of WLAN products. Abbreviation Full Name WLAN Wireless Local Area Network AC AP Access Controller Access Point

3 第 3 页, 共 7 页 1 Overview Huawei VLAN products include access controllers (ACs) and access points (APs). ACs can be applied to carrier and enterprise networks. In different usage scenarios, ACs process different services and function as different roles. In addition, the requirements for ACs are different. Products must be verified in scenarios before they are launched into markets. Scenario test focuses on typical scenarios on the enterprise network, whether services are normal, and whether performance is affected. This document uses connection with the upper-layer authentication for verification and provides interworking test data.

4 第 4 页, 共 7 页 2 WLAN Device and Test Solution 2.1 Test Solution Portal RADIUS Accounting gateway Campus backbone network S97 AC S27 AP Client esight Portal authentication and 802.1x authentication are used. After terminals are authenticated in different authentication modes, terminals are authorized to obtain network resources. On the network, one access switch connects to multiple APs, and one aggregation switch connects to the AC6005 in branched mode.

5 第 5 页, 共 7 页 Wireless User Service Deployment (Portal Authentication) Solution Description Link networking The box AC6605 connects to the core switch in bypass mode. An AP connects to an AC through the S9700, and a CAPWAP tunnel is set up between the AP and the AC. Traffic of all users is sent to the AC through a tunnel, and is decapsulated by the AC and forwarded to the upper-layer network. An AC can connect to the accounting gateway at Layer 2 or Layer 3. User traffic is forwarded to the accounting gateway and then forwarded. Service networking An AP goes online at Layer 2. On the AC, domain and authentication configurations are performed, and non-accounting is configured. The accounting gateway performs accounting. The RADIUS and Portal connect to the accounting gateway, and the ACS is used as the RADIUS for authentication and accounting. DNS : You can use windows as the DNS and connect it to the accounting gateway. FTP : You can enable the FTP on the RADIUS. Wireless User Service Deployment (802.1x + PEAP Authentication) Solution Description Link networking An AP connects to an AC through a switch, and a CAPWAP tunnel is set up between the AP and the AC. Traffic of all users is sent to the AC through a tunnel, and is decapsulated by the AC and forwarded to the upper-layer network. An AC can connect to the accounting gateway at Layer 2 or Layer 3. User traffic is forwarded to the accounting gateway and then forwarded. Service networking AP login: An AP can log in at Layer 2 or Layer 3. At Layer 3, an AP can obtain an address from the uplink switch or from an AC through a DHCP relay agent. A static or dynamic route can be used between the uplink switch and AC. On the AC, domain and authentication configurations are performed, and an accounting policy is configured. The ACS is used as the RADIUS and directly connected to the AC or S9700. The AC sends user information to the ACS through RADIUS. The ACS sends authentication results to the AC, and the AC sends the results to the AP. The AP searches for association entries, and sends a result to a client.

6 第 6 页, 共 7 页 3 Test of the Interconnection Between WLAN Device and Upper-layer RADIUS Server For scenarios, see section 2.1 Test Solution. 3.1 Test Item in Typical Authentication and Accounting Scenario Test Type Test Item Remarks Service development test Version upgrade and rollback are verified when AP or AC is used as the FTP. A client goes online and offline in OPEN or WEP mode. Check whether the AC works normally. A client goes online and offline in WPA/WPA2 + DOT1X + PEAP mode. Check whether user authentication and accounting are normal. When WPA+TKIP/WPA2+CCMP and PEAP are used, check whether service authentication is normal. Enable and disable Portal authentication on a client. Check whether user authentication and accounting are normal, and whether user access is normal. Check whether user access is normal before and after Portal authentication, and check whether user access is denied after Portal authentication is disabled. Check whether Layer 2 and Layer 3 roaming functions of multiple APs connected to an AC are normal. Check whether service functions are normal when WLAN devices connect to various RADIUS and Portal s. Check whether Huawei esight is correctly connected.

7 第 7 页, 共 7 页 3.2 Upper-Layer Server Interconnection Test Conclusion Summary: In Huawei lab, the following RADIUS s are used for the test and services are normal. The following Portal s are used for the test and services are normal. Server Type Vendor Version Operating System RADIU S ACS Cisco Cisco Secure ACSv4.2 IAS Microsoft Win 2003 Server SP2 TSM Huawei V100R002C07SP C100 Microsoft SQL 2005 Server SP3 Srun Srun Srun3000[3.00rc ] Linux (redhat) Free radius Linux Portal RM9000 Huawei V300R001C02SP C006 Win XP/Win 2003 Server SP2 TSM Huawei V100R002C07SP C100 Microsoft SQL 2005 Server SP3 City hotspot Dr.COM : UNIX/Win 2003 Server SP2