WLAN Networking Architectures Foreword ⚫ Wireless local area networks (WLANs) overcome some disadvantages of wired networks, such as poor mobility. With the development of Wi-Fi 6 technology, the bandwidth performance gap between wireless and wired networks is narrowing down. WLANs featuring flexible networking can adapt to complex and changeable application scenarios. ⚫ This course describes common WLAN networking architectures, including Fat AP, leader AP, WAC + Fit AP, agile distributed, Navi AC, and mesh. 2 Huawei Confidential Objectives ⚫ 3 On completion of this course, you will be able to: Describe WLAN networking modes. Configure WLAN services. Describe the WLAN networking application scenarios. Huawei Confidential Contents 1. WLAN Networking Overview 2. WLAN Networking Architectures 3. WLAN Networking Application Scenarios 4 Huawei Confidential Main NEs on an Enterprise WLAN Manager + controller + analyzer 5 Portal server IP network Core switch Wireless control Wireless access controller (WAC) Wireless access Wireless access point (AP) Wireless terminal Laptop Huawei Confidential Aggregation switch DHCP server Access switch RADIUS server Firewall Native WAC Central AP Tablet Remote unit (RU) Mobile phone Barcode scanner, automated guided vehicle (AGV), smart wristband, etc. WLAN Networking Architecture Overview (1/3) Fat AP Leader AP Fat AP Leader AP STA STA • Networking characteristics: A Fat AP works independently and requires separate configurations. It provides only simple functions and is cost-effective. • Networking characteristics: A leader AP can work independently or manage a small number of APs to implement basic roaming functions. This networking is cost-effective and has low no high requirements on skills of network maintenance personnel. • Application scenarios: homes, mini stores, etc. 6 Huawei Confidential • Application scenarios: micro and small enterprises WLAN Networking Architecture Overview (2/3) WAC + Fit AP Agile distributed WAC WAC Central AP Central AP RU Fit AP Room 1 Room 2 Room 3 Room N Room 1 Room 2 Room 3 Room N STA • Networking characteristics: Fit APs are centrally managed and configured by a WAC, and provide a variety of functions. This networking has high requirements on skills of network maintenance personnel. • Application scenarios: large and midsize enterprises 7 Huawei Confidential • Networking characteristics: The agile distributed architecture divides an AP into a central AP and RUs. Each central AP can manage multiple RUs, providing good coverage at low costs. Agile distributed APs can be used in the Fat AP, WAC + Fit AP, and cloud management architectures. • Application scenarios: scenarios with densely distributed rooms WLAN Networking Architecture Overview (3/3) Navi AC CAPWAP MP Navi AC STA1 CAPWAP Local AC Mesh Fit AP STA2 WAC MPP STA3 STA • Networking characteristics: Guest traffic can be directed to a specified WAC (Navi AC) for centralized management, which is isolated from employee traffic. • Application scenarios: large enterprises where guest traffic needs to be isolated 8 Huawei Confidential • Networking characteristics: A wireless mesh network (WMN) is a dynamic self-organizing, and auto-configured star-type network that consists of multiple wirelessly connected APs in a mesh topology, and connects to a wired network through one or two portal nodes. • Application scenarios: outdoor backhaul scenarios Contents 1. WLAN Networking Overview 2. WLAN Networking Architectures ◼ Fat AP ▫ Leader AP ▫ WAC + Fit AP ▫ Agile Distributed ▫ Navi AC ▫ Mesh 3. WLAN Networking Application Scenarios 9 Huawei Confidential Fat AP Networking Networking description Router ⚫ The Fat AP networking architecture is also called autonomous network architecture because it can implement functions such as wireless user access, service data encryption, and service data forwarding, without the need of a dedicated device for centralized control. Switch ⚫ Fat APs work independently and require no additional centralized control device. Therefore, this networking is easy to deploy and cost-effective, and is mainly applicable to homes and micro stores. Fat AP Fat AP ⚫ Since each Fat AP works independently and no centralized control device is used, the Fat APs are difficult to manage and maintain. Therefore, the Fat AP architecture is not recommended for enterprises. STA 10 STA Huawei Confidential • In the Fat AP networking, APs work in Fat mode. Managing a Fat AP Step 1: Connect a PC to an AP (working in Fit mode by default) in wired or wireless mode and run the following command to switch the AP to the Fat mode: [Huawei] ap-mode-switch fat STA1 Warning: The system will reboot and start in fat mode of V200R021C00SPC200. Continue? Managing the Fat AP in wired mode (y/n)[n]: y Step 2: Connect the PC to the Fat AP. Switch Wired mode: Set the IP address of the PC's wired network adapter to 169.254.1.X/24 (except 169.254.1.1). Wireless mode: Set the IP address of the PC's wireless network adapter to 192.168.1.X/24 (except 192.168.1.1). Fat AP Step 3: Manage the Fat AP. Wired mode: Access http://169.254.1.1 or https://169.254.1.1 using a browser. Wireless mode: Use the PC to search for the WLAN with the management SSID HUAWEI-LeaderAP- xxxx (xxxx indicates the last four digits of the AP's MAC address) and associate with the WLAN. Then access http://192.168.1.1 or https://192.168.1.1 using a browser. 11 STA2 Managing the Fat AP in wireless mode Huawei Confidential • Connecting a PC to a Fit AP in wireless mode: ▫ Use the PC to search for the management SSID, which is hw_manage_xxxx by default (xxxx indicates the last four digits of the AP's MAC address). To obtain the default password, see the AP product documentation. ▫ Set the IP address of the PC's wireless network adapter to 192.168.1.X/24 (except 192.168.1.1) and access http://192.168.1.1 or https://192.168.1.1 using a browser. • Connecting a PC to a Fit AP in wired mode: ▫ Set the IP address of the PC's wired network adapter to 169.254.1.X (except 169.254.1.1) and access http://169.254.1.1 or https://169.254.1.1 using a browser. • Connecting a PC to a Fat AP in wireless mode: ▫ In wireless management mode, the default access address of APs running versions later than V200R021C01 is http://169.254.2.1 or https://169.254.2.1. To connect a PC to such an AP, set the IP address of the PC's wireless network adapter to 169.254.2.X/24 (except 169.254.2.1). Working Modes of Fat APs Bridge mode Service gateway Gateway mode Router Router VLAN 10 Fat AP Service gateway VLAN 20 Fat AP Service VLAN 10 Service VLAN 10 A Fat AP connects to a wired network in bridge mode. A router functions as the WLAN service gateway. The AP's uplink interface needs to allow packets from the service VLAN to pass through. A Fat AP connects to a wired network in gateway mode. A router functions as an independent gateway to connect the Fat AP to the Internet. The Fat AP functions as the WLAN service gateway. 12 Service gateway Public IP address Fat AP Service VLAN 10 A Fat AP in gateway mode functions as an Internet egress, and has a public IP address configured and the NAT function enabled. The Fat AP functions as the WLAN service gateway. Huawei Confidential • When wired and wireless users are in the same VLAN and use the same address segment and gateway address, you can configure the Fat AP to work in bridge mode. • When wired and wireless users are in different VLANs and managed separately, or the Fat AP functions as an Internet egress, you can configure the Fat AP to work in gateway mode. Example for Configuring a Fat AP to Work in Bridge Mode ⚫ Log in to a Fat AP through the web system, choose Wizard > Config Wizard > Single AP Configuration, and set parameters as prompted. 13 Huawei Confidential Example for Configuring a Fat AP to Work in Gateway Mode ⚫ Log in to a Fat AP through the web system, choose Wizard > Config Wizard > Single AP Configuration, and set parameters as prompted. 14 Huawei Confidential Contents 1. WLAN Networking Overview 2. WLAN Networking Architectures ▫ Fat AP ◼ Leader AP ▫ WAC + Fit AP ▫ Agile Distributed ▫ Navi AC ▫ Mesh 3. WLAN Networking Application Scenarios 15 Huawei Confidential Leader AP Networking Networking description ⚫ In the leader AP networking, one AP works in Fat mode, and the other APs work in Fit mode. The AP working in Fat mode is also called a leader AP. ⚫ The leader AP and other Fit APs are generally located on the same Layer 2 network. ⚫ Similar to a WAC, the leader AP uses the Control And Provisioning of Wireless Access Points (CAPWAP) protocol to centrally manage and configure Fit APs. To enable all APs to provide the same wireless services, you only need to log in to the leader AP to perform configurations. Fit AP Leader AP Fit AP Fit AP ⚫ is needed. In addition, this networking has certain scalability and security, and is applicable to WLANs of small and micro enterprises. CAPWAP tunnel ⚫ 16 This networking requires low network construction costs because no WAC The wireless roaming function is supported in this networking. Huawei Confidential • Leader APs are managed in a similar way as Fat APs. For details, see "Managing a Fat AP". Working Modes of Leader APs Bridge mode Gateway mode Switch Independent gateway Switch Room Room Leader AP Fit AP Fit AP Built-in gateway Leader AP 17 Fit AP Fit AP Huawei Confidential • A leader AP in bridge mode functions as a network bridge and works with an independent gateway in the uplink direction. The leader AP and Fit APs communicate with each other on a Layer 2 network. The independent gateway has the DHCP service enabled and allocates IP addresses to STAs and APs. The direct forwarding mode is used, which reduces the load on the leader AP, so that the leader AP can manage more Fit APs. Therefore, this networking mode is recommended. • A leader AP in gateway mode functions as a gateway, and no independent gateway is required. The leader AP and Fit APs communicate with each other on a Layer 2 network. In the uplink direction, the leader AP has NAT enabled and connects to the Internet. In the downlink direction, the leader AP connects to a switch and communicates with Fit APs. The leader AP has the DHCP service enabled and allocates IP addresses to Fit APs and STAs. The networking is more simplified than that in bridge mode. In this mode, service traffic is forwarded through CAPWAP tunnels to the leader AP for processing. Therefore, the leader AP is heavily loaded and can manage a limited number of Fit APs. When the service traffic is heavy, the leader AP may become a bottleneck for service forwarding. • When the number of APs exceeds 24, it is recommended that an external gateway be configured for STAs. How APs Obtain IP Address for in the Leader AP Networking An external DHCP server allocates IP addresses to APs. DHCP server The built-in DHCP server allocates IP addresses to APs. Static IP addresses are configured for APs. IP address allocation IP address allocation Fit AP Leader AP DHCP server Fit AP 18 Leader AP Fit AP Fit AP Static IP address Leader AP Static IP address Fit AP Static IP address Fit AP Huawei Confidential • By default, other APs on the same network as a leader AP do not need to be authenticated when going online on the leader AP. • Mode in which Fit APs connect to a leader AP: ▫ An external DHCP server can allocate IP addresses to all APs. Ensure that the leader AP and Fit APs are in the same VLAN so that the Fit APs can discover the leader AP through CAPWAP broadcast. ▫ The leader AP can function as a DHCP server to allocate IP addresses to Fit APs. In this case, it is recommended that the leader AP and Fit APs be in the same VLAN. ▫ Fit APs can connect to the leader AP using static IP addresses. In this case, it is recommended that the leader AP and Fit APs be in the same VLAN. • Mode in which a CAPWAP interface is created on the leader AP: ▫ To simplify configuration, the leader AP does not support manual configuration of a CAPWAP interface. Instead, the CAPWAP interface is automatically created by the leader AP. • Layer 3 networking is supported between the leader AP and Fit APs. ▫ Static WAC-List (the leader AP's IP address) can be configured on Fit APs. ▫ Fit APs can obtain the IP address of the leader AP through DHCP Option 43. Leader AP Deployment Process — Through the Web System ⚫ Deployment process: Start 1. Select an AP as the leader AP and log in to the AP (working in Fit mode by default). You can log in to the AP Select the leader AP in wired or wireless mode. For details, see "Fat AP Networking". 2. Switch the AP's working mode to Fat. Then the AP restarts. Switch the AP's working mode to Fat 3. Log in to the leader AP. Associate a laptop with the SSID HUAWEI-LeaderAP-XXXX. Open a browser on the laptop Log in to the leader AP and enter 192.168.1.1 in the address box to access the web system. Configure basic information about the leader AP 4. Configure basic information about the leader AP, including the AP name, time zone, date, and time. Configure wireless services 5. Access the Config Wizard page, click Multi-AP Configuration, and configure wireless services. 19 End Huawei Confidential • Prerequisites: ▫ One AP has been selected as the leader AP. ▫ WLAN planning and design have been completed. ▫ The APs have been connected and powered on according to the networking diagram. ▫ The MAC address of the leader AP is available. ▫ The Windows operating system has been installed on a laptop, and the Internet Explorer, Firefox, or Chrome browser has been installed. ▫ You have prepared one Ethernet cable if you want to connect the laptop to the AP in wired mode. When the leader AP works in gateway mode, it does not support the login in wired mode. • The default wireless login address of an AP is 192.168.1.1 in V200R021C00 and 169.254.2.1 in V200R021C01 and later versions. Key Configurations for a Leader AP ⚫ Switch the AP's working mode. 20 Huawei Confidential ⚫ Configure wireless services for the leader AP. Contents 1. WLAN Networking Overview 2. WLAN Networking Architectures ▫ Fat AP ▫ Leader AP ◼ WAC + Fit AP ▫ Agile Distributed ▫ Navi AC ▫ Mesh 3. WLAN Networking Application Scenarios 21 Huawei Confidential WAC + Fit AP Networking Overview Networking Network planning Service deployment Architecture overview In-path and off-path networking VLAN planning Configuring AP onboarding Layer 2 and Layer 3 networking IP address planning Configuring WLAN services Data forwarding mode 22 Huawei Confidential Verifying the configuration WAC + Fit AP Networking CAPWAP tunnel 1 CAPWAP tunnel 2 ⚫ A WAC provides WLAN access control, data forwarding, AP configuration management, roaming management, and security control. ⚫ Fit APs encrypt and decrypt 802.11 packets, provide 802.11 physical layer (PHY) functions, collect air interface statistics, and are managed by the WAC. ⚫ The WAC communicates with Fit APs using CAPWAP. ⚫ Compared with the Fat AP architecture, the WAC + Fit AP architecture has the following advantages: WAC Fit AP Fit AP • Easier configuration and deployment in multi-AP scenarios Higher security Easier upgrade and expansion This architecture is applicable to large, midsize, and small campus networks and scenarios where enterprises need to centrally manage WLANs. The WAC + Fit AP networking is determined based on the networking mode, data forwarding mode, and the number of WACs. 23 Huawei Confidential • A WAC communicates with Fit APs using CAPWAP. With CAPWAP, APs automatically discover the WAC, the WAC authenticates the APs, and the APs obtain software packages and the initial and dynamic configurations from the WAC. CAPWAP tunnels are established between the WAC and APs. • CAPWAP tunnels include control tunnels and data tunnels. ▫ CAPWAP control tunnels mainly transmit control packets (also called management packets, which are used by the WAC to manage and control APs). ▫ CAPWAP data tunnels mainly transmit data packets. The CAPWAP tunnels allow for Datagram Transport Layer Security (DTLS) encryption, so that transmitted packets are more secure. • Compared with the Fat AP architecture, the WAC + Fit AP architecture has the following advantages: ▫ Easier configuration and deployment: The WAC centrally configures and manages the wireless network so that each AP does not need to be configured separately. In addition, the channels and power of APs on the entire network are automatically adjusted, eliminating the need for manual adjustment. ▫ Higher security: Fat APs cannot be upgraded in a unified manner, so that the latest security patches may not be installed on APs of all versions. In the WAC + Fit AP architecture, security capabilities are mainly implemented on the WAC, and software upgrade and security configuration only need to be performed on the WAC. As such, global security settings can be quickly performed. Additionally, to prevent malicious code from being loaded, the WAC performs digital signature authentication for the software, enhancing security of the upgrade process. The WAC also implements some security functions that are not supported in the Fat AP architecture, including advanced security features such as virus detection, uniform resource locator (URL) filtering, and stateful inspection firewall. • Easier upgrade and extension: The centralized management mode of this architecture enables APs on the same WAC to run the same software version. When an upgrade is required, the WAC obtains the new software package or patch and then upgrades the AP version. The separation of AP and WAC functions prevents frequent AP version upgrades. User authentication, network management, and security functions only need to be implemented on the WAC. Networking Modes: In-Path and Off-Path Networking In-path networking Off-path networking Core switch WAC WAC Core switch (Optional) Aggregation switch Access switch Access switch Fit AP Fit AP Fit AP Fit AP • Description: The WAC provides functions of both a WAC and an aggregation switch. Data and management services of APs are all forwarded and processed by the WAC. • Description: The WAC is connected to the existing network in off-path mode and processes management services of APs. Data services of APs can be directly sent to the upper-layer network or centrally forwarded by the WAC. • Applicability: new deployment of small and midsize centralized WLANs • Applicability: network reconstruction or deployment of new large and midsize campus networks 25 Huawei Confidential Networking Modes: Layer 2 and Layer 3 Networking Layer 2 networking Layer 3 networking WAC WAC L2 Core switch L2 L3 Access switch L2 Access switch Fit AP Fit AP Fit AP • Description: The WAC and Fit APs are located in the same broadcast domain. The APs can discover the WAC by broadcasting packets. The networking, configuration, and management are simple. • Applicability: This networking applies to small-scale WLANs, such as small enterprise networks, but is not applicable to complex and refined WLANs of large enterprises. 26 Fit AP • Description: The WAC and Fit APs are located on different network segments. The intermediate network must ensure that the WAC and Fit APs are reachable to each other. Additional configurations are required to enable the Fit APs to discover the WAC. This networking is flexible and facilitates scale-out. • Applicability: Layer 3 networking is applicable to large and midsize WLANs. For example, in a large campus, APs can be deployed in each office building to provide wireless coverage, and a WAC can be deployed in the core equipment room to manage and configure all APs. It is recommended that the APs and WAC be connected through a Layer 3 network. Huawei Confidential • When the APs and WAC are connected through a Layer 3 network and the APs discover the WAC through DHCP (the WAC functions as a DHCP server), the intermediate devices between the APs and WAC must support the DHCP relay function. Data Forwarding Mode — Direct Forwarding Direct forwarding (also called local forwarding) CAPWAP tunnel • Management traffic Service data traffic No traffic bypassing occurs. APs directly forward users' data packets to the upper-layer network without encapsulating them in CAPWAP Egress router tunnels. All service data is forwarded locally by APs. Data traffic does not pass through the WAC, thereby reducing the burden on the WAC. WAC Core switch • Direct forwarding is often used in the in-path networking. This networking mode simplifies the network architecture and applies to small and midsize centralized WLANs. • Access switch Direct forwarding can also be used in the off-path networking. In this networking mode, data packets do not need to be processed by the WAC, eliminating the bandwidth bottleneck and facilitating the usage of existing security policies. This networking mode applies to wired Fit AP Fit AP and wireless convergence on large-scale campus networks or HQbranch scenarios. 27 Huawei Confidential Data Forwarding Mode — Tunnel Forwarding Tunnel forwarding (also called centralized forwarding) CAPWAP tunnel • Management traffic Service data traffic Traffic forwarding: Service data packets are encapsulated by APs and then sent to the WAC through CAPWAP tunnels. The WAC then Egress router forwards the packets to the upper-layer network. All data traffic and management traffic pass through the WAC, facilitating security control policy enforcement for wireless users. WAC Core switch • The WAC serves as the control and forwarding center on a WLAN. It manages and configures APs and also forwards service data traffic. • Access switch Tunnel forwarding is typically used in the off-path networking. In this networking mode, the WAC centrally forwards data packets, ensuring high security and facilitating centralized management and Fit AP 28 Fit AP control. Huawei Confidential • Service data traffic between the WAC and APs is transmitted over CAPWAP data tunnels, while management traffic is transmitted over CAPWAP control tunnels. In-Path Mode + Layer 2 Networking Networking description Router • A WAC is directly connected to APs or Layer 2 access switches, and provides functions of both a WAC and an aggregation switch. Core switch • The WAC and APs are in the same broadcast domain, and APs can discover the WAC by broadcasting patches. The network architecture is simple. • WAC Since the WAC is deployed in in-path mode, the direct data forwarding mode is used in most cases. In this networking mode, wireless traffic must pass through the WAC, regardless of the data forwarding mode. Therefore, the WAC may become a performance bottleneck on the live network. Access switch L2 Application scenarios and networking characteristics • AP1 AP2 AP3 • 29 Huawei Confidential This networking mode applies to deployment of new small-scale WLANs, such as small enterprise and branch networks. AP4 The network architecture is simple and easy to maintain. In-Path Mode + Layer 3 Networking Networking description Router • A WAC is connected to the network in in-path mode and located between the aggregation and core switches. Depending on the network scale, the WAC can be connected to multiple aggregation switches. • The WAC communicates with APs at Layer 3 and the APs can obtain the WAC's IP address through DHCP. • Since the WAC is deployed in in-path mode, the direct data forwarding mode is used in most cases. Compared with in-path + Layer 2 networking, Layer 3 networking is applicable to larger-scale WLANs and facilitates scale-out. In addition, since all wireless traffic must pass through the WAC, the WAC performance may become a performance bottleneck on the live network. Core switch WAC L2 Aggregation switch L3 Access switch Access switch AP1 AP2 30 Huawei Confidential AP3 AP4 Application scenarios and networking characteristics L2 • This networking mode applies to deployment of new small- and mediumscale WLANs, such as office networks of small and midsize enterprises. • The network architecture is simple and easy to maintain, and facilitates scale-out. Off-Path Mode + Layer 2 Networking Networking description Router • A WAC is connected to the core switch (or another network device) in offpath mode. The WAC and APs are located in the same broadcast domain and communicate with each other at Layer 2. Core switch WAC • APs can discover the WAC by broadcasting packets. • If the direct forwarding mode is used, wireless traffic does not need to pass through the WAC. If the tunnel forwarding mode is used, all wireless traffic must be forwarded by the WAC. Access switch L2 Application scenarios and networking characteristics • This networking mode applies to new WLAN deployment for small and midsize enterprises and campuses. • AP1 31 Huawei Confidential AP2 This networking mode is applicable to WLAN construction based on an existing network, and requires only a few changes to the existing network. Off-Path Mode + Layer 3 Networking Networking description Router • L3 A WAC is connected to the core switch (or another network device) in offpath mode. The WAC and APs are located in different broadcast domains and communicate with each other at Layer 3. L2 Core switch WAC • Typically, APs obtain the WAC's IP address through DHCP. • Compared with off-path + Layer 2 networking, Layer 3 networking is applicable to larger-scale WLANs and supports flexible scale-out. The traffic forwarding characteristics are similar to those in the off-path Layer 2 networking, and are not described here. Access switch L2 Application scenarios and networking characteristics • This networking mode applies to new WLAN deployment for large and midsize enterprises and campuses. • AP1 32 Huawei Confidential AP2 This networking mode is applicable to WLAN construction based on an existing network, and requires only a few changes to the existing network. Comparison of Typical WAC + Fit AP Networking Modes Networking Mode Advantage Disadvantage In-path mode + Layer 2 networking + direct or tunnel forwarding No data traffic bypassing, simple networking, and simple management Low scalability, not applicable to large-scale enterprise WLANs Applicable only to new WLAN deployment, but not applicable to network reconstruction In-path mode + Layer 3 networking + direct or tunnel forwarding No data traffic bypassing, clear network architecture, and high network scalability Possible WAC performance bottleneck on large-scale networks Applicable only to new WLAN deployment, but not applicable to network reconstruction Off-path mode + Layer 2 networking + direct forwarding No data traffic bypassing, high forwarding efficiency Easy WAC discovery for APs by broadcasting packets, easy deployment Low scalability, not applicable to large-scale enterprise WLANs Complex service VLAN configuration Off-path mode + Layer 2 networking + tunnel forwarding Centralized data traffic forwarding by the WAC, facilitating policy control and ensuring high security Easy WAC discovery for APs by broadcasting packets, easy deployment Low scalability, not applicable to large-scale enterprise WLANs Data traffic bypassing, low forwarding efficiency Off-path mode + Layer 3 networking + direct forwarding No data traffic bypassing, high forwarding efficiency High scalability, applicable to large-scale WLAN deployment Complex service VLAN configuration Off-path mode + Layer 3 networking + tunnel forwarding Centralized data traffic forwarding by the WAC, facilitating policy control and ensuring high security High scalability, applicable to large-scale WLAN deployment Possible WAC performance bottleneck on large-scale networks Data traffic bypassing, low forwarding efficiency 33 Huawei Confidential VLAN Planning on a WLAN VLAN planning in the WAC + Fit AP networking CAPWAP tunnel Management traffic Service data traffic Egress router ⚫ Two types of VLANs on a WLAN: Management VLAN: transmits packets that are forwarded through CAPWAP tunnels, including management packets and service data WAC packets forwarded through CAPWAP tunnels. Core switch Access switch Fit AP 34 Huawei Confidential Fit AP ⚫ Service VLAN: transmits service data packets. VLAN planning rules: The management VLAN must be different from service VLANs. Service VLANs need to map to SSIDs based on service requirements. Mapping Between Service VLANs and SSIDs (1/2) SSID:VLAN = 1:1 SSID:VLAN = 1:N Campus network Campus network Area A SSID: Guest VLAN: 100 35 Area B SSID: Guest VLAN: 100 Area A SSID: Guest VLAN: 100 Area B SSID: Guest VLAN: 200 An enterprise needs to provide WLAN coverage for areas A and B. An enterprise needs to provide WLAN coverage for areas A and B. To allow users to detect only one SSID and use the same data To allow users to detect only one SSID but use different data forwarding control policy, plan only one SSID and one VLAN. In forwarding control policies, plan one SSID and two VLANs for the this case, one SSID maps to one VLAN. areas. In this case, one SSID maps to two VLANs. Huawei Confidential Mapping Between Service VLANs and SSIDs (2/2) SSID:VLAN = N:1 SSID:VLAN = N:M Campus network Campus network Area A SSID: AreaA VLAN: 100 36 Area B Area A SSID: AreaB VLAN: 100 SSID: AreaA VLAN: 100 Area B SSID: AreaB VLAN: 200 An enterprise needs to provide WLAN coverage for areas A and B. An enterprise needs to provide WLAN coverage for areas A and B. To allow users to learn area information upon detecting the WLAN To allow users to learn area information upon detecting the WLAN but use the same data forwarding control policy, plan one VLAN but use different data forwarding control policies, plan two SSIDs and two SSIDs (AreaA and AreaB) for the areas. In this case, two and two VLANs for the areas. In this case, two SSIDs map to two SSIDs map to one VLAN. VLANs. Huawei Confidential VLAN Pool Use Case Problem: entry effect 3 Solution If a large number of STAs access the network from an area, expanding the corresponding Campus subnet can ensure that STAs can obtain IP network addresses. However, this will expand the broadcast domain, leading to transmission of a large number of broadcast packets and causing network congestion. Campus network Entry area So many STAs in this area require a large number of IP addresses. 2 Another area SSID: Guest VLAN: 100 (a large number of IP addresses) Entry area SSID: Guest VLAN: 200 Roaming SSID: Guest VLAN pool • • 1 A large number of STAs access the network from an area and then roam to other areas. 37 Another area SSID: Guest VLAN pool In this scenario, a VLAN pool can be configured to provide service VLANs. The VLAN pool provides the VLAN management and assignment algorithms. In this way, one SSID can map to multiple VLANs so that a large number of STAs can be distributed to different VLANs, narrowing down the broadcast domain. Huawei Confidential • This is a special WLAN scenario, in which a large number of STAs access the network from an area and then roam to other areas. As a result, the number of STAs in this area increases greatly, requiring a large number of IP addresses. Typical areas include the entrance of a stadium and the lobby of a hotel. Therefore, this phenomenon is generally called the entry effect. In this scenario, if one SSID maps to only one VLAN that maps to one subnet, when a large number of STAs access the network from an area, expanding the corresponding subnet can ensure that STAs can obtain IP addresses. However, this may enlarge the broadcast domain, leading to transmission of a large number of broadcast packets, such as ARP and DHCP packets, and causing severe network congestion. In this scenario, a VLAN pool can be configured to provide service VLANs. The VLAN pool provides the VLAN management and assignment algorithms. In this way, one SSID can map to multiple VLANs so that a large number of STAs can be distributed to different VLANs, narrowing down the broadcast domain. Example for Configuring the WAC + Fit AP Networking (1/2) ⚫ Requirement description: Router An enterprise uses the WAC + Fit AP networking architecture, in which a WAC is connected to a core switch in off-path mode and communicates with Fit APs at Layer 3. The management VLAN is different from service VLANs. The VLANs Core switch and IP addresses are planned by engineers. The core switch functions as a DHCP server to dynamically allocate IP Service gateway WAC addresses to APs and STAs. It also functions as the gateway of service VLANs. The SSID Employee is used to provide wireless Internet access services Access switch Access switch for employees. The PSK authentication and direct data forwarding mode are used. Multiple VLANs are allocated for employees. The SSID Guest is used to provide wireless Internet access services for guests. The open-system authentication and tunnel data forwarding mode are used. One VLAN is allocated for guests. 38 Huawei Confidential AP1 AP2 AP3 Example for Configuring the WAC + Fit AP Networking (2/2) ⚫ Configuration roadmap: 1. VLAN must be different from service VLANs. 2. Start Plan the network. Plan VLANs and IP addresses. Note that the management Plan the network Configure basic network services. Configure VLANs and IP addresses. Configure DHCP for the management VLAN to which APs belong to dynamically allocate Configure basic network services IP addresses to APs. 3. Configure AP onboarding. Configure the CAPWAP protocol to onboard APs. 4. Configure WLAN services for employees. Create SSID Employee and configure service parameters as required. 5. Configure WLAN services for guests. Create SSID Guest and configure service Configure AP onboarding Configure WLAN services for employees Configure WLAN services for guests parameters as required. 6. Check WLAN services. Run the display command to check whether the WLAN Check WLAN services services run normally, and verify that STAs can access the network. End 39 Huawei Confidential Planning the Network VLAN ID Description IP Address Segment VLAN 5 Management network segment for the WAC 10.1.5.0/24 Core switch: 10.1.5.254/24 WAC: 10.1.5.1/24 VLAN 6 Management network segment for APs 10.1.6.0/24 Core switch: 10.1.6.254/24 AP1: IP address dynamically obtained through DHCP AP2: IP address dynamically obtained through DHCP AP3: IP address dynamically obtained through DHCP 10.1.10.0/24 Core switch: 10.1.10.254/24 10.1.11.0/24 Core switch: 10.1.11.254/24 10.1.12.0/24 Core switch: 10.1.12.254/24 10.1.20.0/24 Core switch: 10.1.20.254/24 VLAN 10 VLAN 11 Network services for employees VLAN 12 VLAN 20 40 Network services for guests Huawei Confidential IP Address Configuring AP Onboarding ⚫ Configure a DHCP address pool on the core switch and specify the WAC's IP address in DHCP Option 43. [Core-SW] ip pool ap-pool [Core-SW-ip-pool-ap-pool] network 10.1.6.0 mask 255.255.255.0 [Core-SW-ip-pool-ap-pool] gateway-list 10.1.6.254 [Core-SW-ip-pool-ap-pool] option 43 sub-option 2 ip-address 10.1.5.1 ⚫ Configure the CAPWAP source IP address of the WAC and configure AP onboarding. (The following uses AP1 as an example.) # Enable the function of establishing CAPWAP DTLS sessions in none authentication mode. [WAC] capwap dtls no-auth enable # Configure the CAPWAP source IP address. [WAC] capwap source ip-address 10.1.5.1 # Set the authentication mode of APs to MAC address authentication and add APs to the AP group. [WAC] wlan [WAC-wlan-view] ap auth-mode mac-auth [WAC-wlan-view] ap-id 0 ap-mac F4DE-AF36-B3E0 [WAC-wlan-ap-0] ap-name AP1 [WAC-wlan-ap-0] ap-group default [WAC-wlan-ap-0] quit 41 Huawei Confidential • The configurations for onboarding AP2 and AP3 are similar to those for onboarding AP1, and are not mentioned here. • Add all APs to the AP group default. Set the country code for the AP group based on the site requirements. • If DTLS encryption for CAPWAP control tunnels has been enabled, when adding an AP running a version earlier than V200R021C00 to the AP group, you can enable the function of establishing CAPWAP DTLS sessions in none authentication mode to allow the APs to establish DTLS sessions in none authentication mode so that the APs can properly go online. After the APs go online, they obtain new DTLS certificates to initiate DTLS sessions in secure mode and go online again. To ensure network security, disable this function immediately after the APs go online again to prevent unauthorized APs from accessing the network. Checking the AP Onboarding Status ⚫ Run the following command to check the AP status and basic information. If State is displayed as nor, the APs go online successfully. [WAC] display ap all ...... ------------------------------------------------------------------------------------------------------------------------------ID MAC Name Group IP Type State STA Uptime ExtraInfo ------------------------------------------------------------------------------------------------------------------------------0 f4de-af36-b3e0 AP1 default 10.1.6.75 AirEngine5760-10 nor 0 13M:37S - 1 f4de-af36-b540 AP2 default 10.1.6.38 AirEngine5760-10 nor 0 13M:4S - 2 b4fb-f9b7-de40 AP3 default 10.1.6.164 AirEngine5760-10 nor 0 12M:42S - ------------------------------------------------------------------------------------------------------------------------------Total: 3 42 Huawei Confidential Configuring WLAN Services for Employees ⚫ ⚫ Create an SSID profile and configure an SSID. ⚫ Create a VLAN pool and add VLANs to it. [WAC] wlan [WAC] vlan pool Employee [WAC-wlan-view] ssid-profile name Employee [WAC-vlan-pool-Employee] vlan 10 to 12 [WAC-wlan-ssid-prof-Employee] ssid Employee [WAC-vlan-pool-Employee] assignment hash [WAC-wlan-ssid-prof-Employee] quit [WAC-vlan-pool-Employee] quit Create a security profile and configure a security policy. ⚫ Create a VAP profile and bind it to the AP group. [WAC] wlan [WAC-wlan-view] vap-profile name Employee [WAC-wlan-view] security-profile name Employee [WAC-wlan-vap-prof-Employee] ssid-profile Employee [WAC-wlan-sec-prof-Employee] security wpa-wpa2 psk pass-phrase [WAC-wlan-vap-prof-Employee] security-profile Employee abc12345678 aes [WAC-wlan-vap-prof-Employee] forward-mode direct-forward [WAC-wlan-sec-prof-Employee] quit [WAC-wlan-vap-prof-Employee] service-vlan vlan-pool Employee [WAC-wlan-vap-prof-Employee] quit [WAC-wlan-view] ap-group name default [WAC-wlan-ap-group-default] vap-profile Employee wlan 1 radio all 43 Huawei Confidential • The assignment command is used to configure the VLAN assignment algorithm in a VLAN pool. By default, the VLAN assignment algorithm is hash in a VLAN pool. • When the VLAN assignment algorithm is set to even, service VLANs are assigned to STAs from the VLAN pool based on the order in which STAs go online. Address pools mapping the service VLANs evenly assign IP addresses to STAs. If a STA goes online many times, it obtains different IP addresses. • When the VLAN assignment algorithm is set to hash, VLANs are assigned to STAs from the VLAN pool based on the hash result of their MAC addresses. As long as the VLANs in the VLAN pool do not change, fixed service VLANs are assigned to STAs. A STA is preferentially assigned the same IP address when going online at different times. Configuring WLAN Services for Guests ⚫ Create an SSID profile and configure an SSID. ⚫ Configure the link between the WAC and core switch to allow packets from the service VLAN of guests to pass through. [WAC] wlan [WAC] vlan batch 20 [WAC-wlan-view] ssid-profile name Guest [WAC] interface GigabitEthernet 0/0/1 [WAC-wlan-ssid-prof-Guest] ssid Guest [WAC-GigabitEthernet0/0/1] description To_Core_SW [WAC-wlan-ssid-prof-Guest] quit [WAC-GigabitEthernet0/0/1] port link-type trunk [WAC-GigabitEthernet0/0/1] port trunk allow-pass vlan 5 20 ⚫ Create a security profile and configure a security policy. ⚫ Create a VAP profile and bind it to the AP group. [WAC] wlan [WAC-wlan-view] vap-profile name Guest [WAC-wlan-view] security-profile name Guest [WAC-wlan-vap-prof-Guest] ssid-profile Guest [WAC-wlan-sec-prof-Guest] security open [WAC-wlan-vap-prof-Guest] security-profile Guest [WAC-wlan-sec-prof-Guest] quit [WAC-wlan-vap-prof-Guest] forward-mode tunnel Note: Configure a security policy for guests as required. In this [WAC-wlan-vap-prof-Guest] service-vlan vlan-id 20 example, open-system authentication is configured. [WAC-wlan-vap-prof-Guest] quit [WAC-wlan-view] ap-group name default [WAC-wlan-ap-group-default] vap-profile Guest wlan 2 radio all [WAC-wlan-ap-group-default] quit 44 Huawei Confidential • Guest traffic is forwarded in tunnel forwarding mode. Guests' service data is forwarded by the APs to the WAC, which then forwards the data to the service gateway (located on the core switch in this example). Therefore, the link between the WAC and core switch must allow packets from related VLANs (VLAN 20 in this example) to pass through. • The service VLAN (VLAN 20 in this example) must be created on the WAC. Checking WLAN Services ⚫ Check the running status of VAPs. (The following uses AP1 as an example.) [WAC] display vap ap-name AP1 WID : WLAN ID ---------------------------------------------------------------------------------------------------------------------AP ID AP name RfID WID BSSID Status Auth type STA SSID ---------------------------------------------------------------------------------------------------------------------0 AP1 0 1 F4DE-AF36-B3E0 ON WPA/WPA2-PSK 0 0 AP1 0 2 F4DE-AF36-B3E1 ON Open 0 Employee Guest 0 AP1 1 1 F4DE-AF36-B3F0 ON WPA/WPA2-PSK 0 Employee 0 AP1 1 2 F4DE-AF36-B3F1 ON Open 0 Guest ---------------------------------------------------------------------------------------------------------------------Total: 4 45 Huawei Confidential Contents 1. WLAN Networking Overview 2. WLAN Networking Architectures ▫ Fat AP ▫ Leader AP ▫ WAC + Fit AP ◼ Agile Distributed ▫ Navi AC ▫ Mesh 3. WLAN Networking Application Scenarios 46 Huawei Confidential Agile Distributed Networking ⚫ Room Room Room Room An agile distributed WLAN consists of a WAC and agile distributed APs. An agile distributed AP is a special AP, and consists of two independent RU RU RU components: central AP and RU. ⚫ PoE cable Corridor RUs. The central APs are connected to RUs via Ethernet cables. Central APs do not provide radio Central AP RU Room 47 RU Room functions. Instead, RUs function as radios of central RU Room Room The WAC centrally manages the central APs and APs. A Layer 2 reachable tree network must be WAC deployed between the RUs and central AP. Huawei Confidential • A central AP can be deployed in an equipment room, ELV room, or corridor, and connects to RUs in rooms via Ethernet cables, providing high-quality wireless access services. • The agile distributed networking applies to scenarios with densely distributed rooms, such as dormitories, hotels, and hospital wards. In these scenarios, if the WAC + Fit AP architecture is used and an AP is deployed in each room, a large number of packets will be sent to the WAC, which may become a performance bottleneck. To eliminate the performance bottleneck and provide independent signal coverage for each room, APs can be deployed in corridors to transmit signals to each room through antennas. However, this solution limits the coverage distance. A longer distance causes higher signal attenuation. In addition, multiple rooms share one AP, which causes poor signal quality and low performance. • The agile distributed networking has the following advantages: ▫ Easy management: Only a few central APs need to be managed. Only 200 APs are required to manage nearly 10,000 rooms (a single central AP can manage up to 48 RUs). ▫ Flexible deployment and full signal coverage without coverage holes: The central APs are connected to RUs in rooms via Ethernet cables without wall penetration loss or feeder loss, providing high-quality signal coverage. The RUs can be flexibly mounted to wall plates, walls, or ceilings. ▫ Ultra-long-distance coverage: Traditional APs can provide a maximum coverage distance of 15 m with the help of antennas, while the connection distance between central APs and RUs using Ethernet cables can reach up to 100 m. The network coverage scope is therefore expanded by several times. In addition, central APs can be deployed in corridors and support ultra-long-distance coverage of over 100 m. RU Onboarding Process on an AirEngine Series WAC ⚫ RU onboarding process: Start 1. The central AP goes online. RUs go online only after the central AP goes online. The onboarding process of the central AP is similar to that of a common AP. The central AP goes online 2. RUs obtain IP addresses. RUs must be on the same Layer 2 network as the central AP. RUs have static IP addresses configured or obtain IP addresses through DHCP. 3. RUs establish CAPWAP tunnels with the WAC. RUs broadcast packets to discover the central AP. The central AP returns the IP address of the associated WAC to RUs obtain IP addresses RUs establish CAPWAP tunnels with the WAC the RUs. Then, the RUs establish CAPWAP tunnels with the WAC. 4. RUs upgrade their versions. Each RU determines whether its system software RUs upgrade their versions version is the same as that specified on the WAC according to parameters in the received packet. If the versions are different, the RU upgrades its version. The WAC delivers service configurations to RUs 5. The WAC delivers service configurations. The WAC delivers service configurations to RUs, and the RU then goes online successfully. 48 Huawei Confidential End Contents 1. WLAN Networking Overview 2. WLAN Networking Architectures ▫ Fat AP ▫ Leader AP ▫ WAC + Fit AP ▫ Agile Distributed ◼ Navi AC ▫ Mesh 3. WLAN Networking Application Scenarios 49 Huawei Confidential Navi AC Networking ⚫ Demilitarized zone (DMZ) A large enterprise needs to deploy a WLAN to provide wireless access services for both employees and guests. Navi AC However, guest data may bring potential security threats to the network. Local AC ⚫ In the Navi AC networking, guest traffic can be directed to a dedicated WAC for centralized management, which is isolated from employee traffic for security purposes. Authentication server for guests WAC that manages APs is called local AC. Intranet authentication server ⚫ CAPWAP tunnel 1 SSID1: Employee SSID2: Guest Employee STA 50 The dedicated WAC is called Navi AC, and the original The local AC centrally manages APs, and the Navi AC authenticates identities of guest STAs and forwards their service data. A CAPWAP tunnel is established between CAPWAP tunnel 2 the local AC and Navi AC to forward guests' service data. Guest STA Huawei Confidential • The Demilitarized Zone (DMZ) is an independent zone on an enterprise network and is isolated from the enterprise intranet. Generally, specific services on the enterprise network are deployed in the DMZ, for example, the server that provides web services for external networks, Navi AC, and guest authentication server. Example for Configuring the Navi AC Networking (1/2) ⚫ Requirement description: An enterprise deploys a WLAN to provide wireless Internet DMZ access services for both employees and guests. Employees Navi AC use the SSID Employee, and guests use the SSID Guest. The enterprise uses the Navi AC networking to implement Local AC 10.1.99.1/24 isolation between employee traffic and guest traffic, ensuring network security. 10.1.5.1/24 VLAN 100 is planned for guest services. The Navi AC Authentication server for guests functions as a DHCP server to allocate IP addresses to guest STAs. Guests' service data is forwarded in tunnel forwarding mode and sent by the local AC to the Navi AC for centralized management. The IP address of the local AC is 10.1.5.1/24, and that of the Navi AC is 10.1.99.1/24. 51 Huawei Confidential Intranet authentication server CAPWAP tunnel 1 SSID1: Employee SSID2: Guest Employee STA CAPWAP tunnel 2 Guest STA Example for Configuring the Navi AC Networking (2/2) ⚫ Configuration roadmap Start 1. Plan and configure basic network data. Plan VLANs and IP addresses to ensure that the local AC can communicate with the Navi AC at Layer 3. 2. Configure AP onboarding to ensure that the APs go online successfully on the local AC. Plan and configure basic network data Configure AP onboarding 3. Configure the Navi AC function. Specify the Navi AC on the local AC and specify the local AC on the Navi AC. 4. Configure WLAN services for guests on the local AC and set the guest service type to service-navi. 5. Configure WLAN services for guests on the Navi AC (the service parameter settings must be the same as those on the local AC) and Configure the Navi AC function Configure WLAN services for guests on the local AC Configure WLAN services for guests on the Navi AC bind the services to the local AC. 6. Verify the Navi AC function. Verify the Navi AC function End 52 Huawei Confidential Configuring the Navi AC Function ⚫ Specify the Navi AC on the local AC. [Local_AC] capwap source ip-address 10.1.5.1 [Local_AC] wlan [Local_AC-wlan-view] navi-ac ac-id 1 ip-address 10.1.99.1 description Navi_AC ⚫ Enable the Navi AC function on the Navi AC and specify the local AC. [Navi_AC] capwap source ip-address 10.1.99.1 [Navi_AC] wlan [Navi_AC-wlan-view] navi-ac enable [Navi_AC-wlan-view] navi-ac [Navi_AC-wlan-view-navi-ac] local-ac ac-id 1 ip-address 10.1.5.1 description Local_AC 53 Huawei Confidential • The default role of a WAC is local AC. After the navi-ac enable command is configured, the WAC becomes a Navi AC. • The CAPWAP source IP addresses must be specified on both the local AC and Navi AC and must be reachable to each other. • The ac-id parameter is specified to identify the local ID of the local AC or Navi AC. The value ranges from 0 to 15. Configuring WLAN Services for Guests on the Local AC and Navi AC ⚫ Configure WLAN services for guests on the local AC. 54 ⚫ Configure WLAN services for guests on the Navi AC. [Local_AC-wlan-view] vap-profile name Guest [Navi_AC-wlan-view] vap-profile name Guest [Local_AC-wlan-vap-prof-Guest] ssid-profile Guest [Navi_AC-wlan-vap-prof-Guest] ssid-profileGuest [Local_AC-wlan-vap-prof-Guest] service-vlan vlan-id 100 [Navi_AC-wlan-vap-prof-Guest] service-vlan vlan-id 100 [Local_AC-wlan-vap-prof-Guest] security-profile Guest [Navi_AC-wlan-vap-prof-Guest] security-profile Guest [Local_AC-wlan-vap-prof-Guest] forward-mode tunnel [Navi_AC-wlan-vap-prof-Guest] forward-mode tunnel [Local_AC-wlan-vap-prof-Guest] type service-navi navi-ac-id 1 navi- [Navi_AC-wlan-vap-prof-Guest] navi-ac service-vlan-check enable wlan-id 1 [Navi_AC-wlan-vap-prof-Guest] quit [Local_AC-wlan-vap-prof-Guest] quit [Navi_AC-wlan-view] navi-ac [Local_AC-wlan-view] ap-group name default [Navi_AC-wlan-view-navi-ac] local-ac ac-id 1 [Local_AC-wlan-ap-group-default] vap-profile Guest wlan 1 radio all [Navi_AC-wlan-view-navi-local-ac-1] vap-profile Guest wlan 1 Huawei Confidential • The VAP service parameter settings on the local AC must be the same as those on the Navi AC. • The type service-navi command sets the VAP type to Navi AC. When the VAP type is Navi AC, local traffic can be diverted to a specified WAC (Navi AC), which can implement security, control, and management functions for STAs, such as identity authentication, authorization, and accounting. The local AC provides centralized AP management and coordination functions, for example, STA onboarding and configuration delivery. • On the local AC, the value of the navi-wlan-id parameter in the type service-navi command must be the same as the value of the wlan-id parameter in the vapprofile profile-name wlan wlan-id command. • The navi-ac service-vlan-check enable command enables service VLAN check on the Navi AC. After this function is enabled, a STA is allowed to go online on the Navi AC only when the STAs' access VLAN (service VLAN on the local AC) meets the following conditions: ▫ The STA's access VLAN is the same as the service VLAN on the Navi AC. ▫ The STA's access VLAN is in the service VLAN pool configured in the VAP profile on the Navi AC. ▫ The STA's access VLANs (all VLANs in a VLAN pool) belong to the service VLAN pool configured in the VAP profile on the Navi AC. Verifying the Navi AC Function ⚫ Check the running status of the local AC and Navi AC. ⚫ Check Navi VAP information and STA access information on the Navi AC. 55 [Local_AC] display navi-ac run-status all [Navi_AC] display navi-ac vap all Current role:local WID : WLAN ID ------------------------------------------------------------------------------- ----------------------------------------------------------------------------- AC ID AC IP AC ID AC IP Mac Role Status STA Description AC MAC WID Status Auth type STA SSID ------------------------------------------------------------------------------- ----------------------------------------------------------------------------- 1 1 10.1.99.1 642c-ac86-7dd6 navi normal 1 Navi_AC 10.1.5.1 642C-AC86-7DCD 1 ON Open 1 Guest ------------------------------------------------------------------------------- ----------------------------------------------------------------------------- Total:1 Total: 1 [Navi_AC] display navi-ac run-status all [Navi_AC] display navi-ac station all Current role:navi WLAN: WLAN ID ------------------------------------------------------------------------------ ---------------------------------------------------------------------- AC ID AC IP STA MAC Mac Role Status STA Description AC ID WLAN VLAN IPv4 address SSID ------------------------------------------------------------------------------ ---------------------------------------------------------------------- 1 081f-7153-901b 1 10.1.5.1 642c-ac86-7dcd local normal 0 Local_AC 1 100 10.1.100.110 Guest ------------------------------------------------------------------------------ ---------------------------------------------------------------------- Total:1 Total: 1 Huawei Confidential Contents 1. WLAN Networking Overview 2. WLAN Networking Architectures ▫ Fat AP ▫ Leader AP ▫ WAC + Fit AP ▫ Agile Distributed ▫ Navi AC ◼ Mesh 3. WLAN Networking Application Scenarios 56 Huawei Confidential Introduction to Mesh Technology ⚫ A WMN is a dynamic self-organizing, auto-configured network that consists of multiple wirelessly connected APs in a mesh topology and connects to a wired network through one or multiple portal nodes. ⚫ A WMN has the following advantages: Fast deployment High robustness Flexible networking Various application scenarios High costeffectiveness Building a traditional A WMN is a self- An AP can join or leave a In addition to traditional On a WMN, only portal LAN requires a long organizing network that WMN at any time as WLAN scenarios such as nodes need to connect to period of time. In is not affected by a required, allowing for office spaces and a wired network. This contrast, building a failure of a single node. flexible networking. campuses, a WMN also reduces investments on WMN takes only a few If a node fails, data As more mesh nodes are applies to scenarios such wired devices, cables, packets are forwarded to deployed on a WMN, the as large-scale and engineering. the destination node WMN coverage area can along the backup path. be rapidly expanded. hours, as it requires only APs to be installed. warehouses, docks, MANs, metro lines, and emergency communications. 57 Huawei Confidential • On a traditional WLAN, APs exchange data with STAs using wireless channels and connect to a wired network through uplinks. If no wired network is available before a WLAN is constructed, it takes much time and money to construct a wired network. If positions of some APs on a WLAN are adjusted, the wired network must be adjusted accordingly, increasing the difficulty in network adjustment. A traditional WLAN requires a long construction period and high costs, and has poor flexibility and poor flexibility, so it does not apply to emergency communications, wireless MANs, or areas with weak wired network infrastructure. The construction of a WMN requires only APs to be installed, which greatly speeds up network construction. Basic Concepts of Mesh • Mesh point (MP): a mesh-capable node that uses IEEE 802.11 MAC and PHY protocols for wireless communication. This node supports automatic topology discovery, automatic route discovery, and data packet forwarding. An MP can provide both mesh services and user access services. MPP • Mesh portal point (MPP): an MP that connects a WMN to other types of networks. This node provides the portal function to allow mesh nodes to communicate with external networks. MP 58 MP Huawei Confidential MP • Neighboring MP: an MP that directly communicates with another MP or MPP. • Candidate MP: a neighboring MP with which an MP prepares to establish a mesh link. • Peer MP: a neighboring MP that has established a mesh link with an MP. Key Points for WMN Design • MPP deployment: The MPP needs to connect to MPs over the air interface. Therefore, the MPP deployment position must be determined based on the convenience of connecting to the wired network and the line of sight (LOS) conditions for connecting to each MP. MPP • Planning and design: Backhaul channel selection: To ensure high throughput and good user experience, 5 GHz channels with better air interface quality are often used as backhaul channels. To prevent channel switching from affecting backhaul services, do not MP MP use radar channels as backhaul channels. MP Frequency bandwidth selection: The 40 MHz or 80 MHz frequency bandwidth is recommended for backhaul links to provide a high backhaul speed. The network between MPs and STAs can use the 2.4 GHz or 5 GHz frequency band to implement signal coverage. Generally, the 20 MHz frequency bandwidth is used. 59 Huawei Confidential Mesh Networking Mode — Mesh Wireless Bridging ⚫ In the following figure, AP1 to AP3 provide network access services for wired and wireless users. The three APs, however, cannot access the Internet in wired mode because of geographical or environmental restrictions. To address this issue, AP1 to AP3 can work with AP4 to construct a WMN so that wireless users can connect to the Internet. AP1 AP2 Access switch AP3 60 Huawei Confidential AP4 WAC Mesh Networking — WMN with One MPP ⚫ In the following figure, AP2 to AP5 provide network access services for wireless users, and AP1 provides users with wired access to the Internet. AP1 to AP5 are meshed to establish a secure, auto-configured, and self-healing WMN. This networking mode facilitates fast and cost-effective WLAN deployment in outdoor environments where cabling is difficult. AP4 AP2 AP5 AP3 AP1 61 Huawei Confidential WAC Mesh Networking — WMN with Multiple MPPs ⚫ In the following figure, AP1 and AP11 provide users with wired access to the Internet. AP2 to AP5 provide network access services for wired and wireless users in Area 1, and AP7 to AP10 provide network access services for wired and wireless users in Area 2. AP6 resides in the overlapping area between Area 1 and Area 2. AP4 AP2 AP1 Area 1 AP5 AP3 AP6 AP9 WAC AP7 Area 2 AP11 AP10 62 Huawei Confidential AP8 Example for Configuring the Mesh Networking (1/2) ⚫ Requirement description: An enterprise uses the WAC + Fit AP networking architecture, in which a WAC is connected to a core switch in off-path Core switch WAC mode and communicates with Fit APs at Layer 3. AP4 and AP5 use the mesh networking because cabling is inconvenient for them. AP3 functions as an MPP, and AP4 and AP5 function as MPs. Mesh links need to provide security encryption mechanisms. 5 GHz channels with the 40 MHz frequency bandwidth are used as the channels for mesh backhaul. Access switch Access switch MPP AP1 AP3 AP2 The distance between AP3 and AP4 and between AP3 and AP5 is about 120 m. MP MP AP4 63 Huawei Confidential AP5 Example for Configuring the Mesh Networking (2/2) ⚫ Configuration roadmap: Configure MPP and MP roles 1. Configure MPP and MP roles. Configure an AP system profile and AP groups. Specify AP3 as an MPP and AP4 and AP5 as MPs. Configure the MPP to go online 2. Configure the MPP to go online and create a security profile for mesh links. For details, see "WAC + Fit AP Networking". 3. Configure a mesh profile that defines a WMN ID and a mesh whitelist that defines a list of neighbors that are allowed to establish mesh links with them. 4. Configure mesh service parameters, including the channel, frequency bandwidth, and coverage distance of mesh links. 5. Bind the mesh profile and mesh whitelist to the AP groups, so that the APs can automatically discover mesh neighbors and establish mesh links with them. 64 Huawei Confidential Configure a security profile for mesh links Configure a mesh profile and a mesh whitelist Configure mesh service parameters Bind the mesh profile and mesh whitelist to AP groups Mesh links are established successfully Basic Configurations for the Mesh Networking (1/2) ⚫ Create an AP system profile and an AP group for ⚫ MPPs, and specify AP3 as an MPP. ⚫ Create an AP system profile and an AP group for MPs, and specify AP4 and AP5 as MPs. [WAC-wlan-view] ap-system-profile name sys-mpp [WAC-wlan-view] ap-system-profile name sys-mp [WAC-wlan-ap-system-prof-sys-mpp] mesh-role mesh-portal [WAC-wlan-ap-system-prof-sys-mp] mesh-role mesh-node [WAC-wlan-view] ap-group name mesh-mpp [WAC-wlan-view] ap-group name mesh-mp [WAC-wlan-ap-group-mesh-mpp] ap-system-profile sys-mpp [WAC-wlan-ap-group-mesh-mp] ap-system-profile sys-mp [WAC-wlan-view] ap-id 2 ap-mac b4fb-f9b7-de40 [WAC-wlan-view] ap-id 3 ap-mac f898-ef7f-b400 [WAC-wlan-ap-2] ap-name AP3 [WAC-wlan-ap-3] ap-name AP4 [WAC-wlan-ap-2] ap-group mesh-mpp [WAC-wlan-ap-3] ap-group mesh-mp Configure a security profile for mesh links. ⚫ Create a mesh profile and bind the security profile for mesh links to it. [WAC-wlan-view] security-profile name mesh [WAC-wlan-view] mesh-profile name mesh [WAC-wlan-sec-prof-mesh] security wpa2 psk pass-phrase a12345678 [WAC-wlan-mesh-prof-mesh] mesh-id mesh-net aes [WAC-wlan-mesh-prof-mesh] link-aging-time 30 [WAC-wlan-mesh-prof-mesh] security-profile mesh [WAC-wlan-mesh-prof--mesh] quit 65 Huawei Confidential • In the command for creating a mesh profile, the mesh-id parameter specifies a WMN ID. In this example, the WMN ID is set to mesh-net. Basic Configurations for the Mesh Networking (2/2) ⚫ Configure a mesh whitelist. ⚫ Configure mesh service parameters. (The following uses AP group mesh-mpp as an example. The configuration for AP group mesh-mp is similar.) [WAC-wlan-view] mesh-whitelist-profile name mesh-list [WAC-wlan-view] ap-group name mesh-mpp [WAC-wlan-mesh-whitelist-mesh-list] peer-ap mac b4fb-f9b7-de40 [WAC-wlan-ap-group-mesh-mpp] radio 1 [WAC-wlan-mesh-whitelist-mesh-list] peer-ap mac f898-ef7f-b400 [WAC-wlan-group-radio-mesh-mpp/1] calibrate auto-channel-select disable [WAC-wlan-mesh-whitelist-mesh-list] peer-ap mac 60f1-8a9c-2b40 [WAC-wlan-group-radio-mesh-mpp/1] calibrate auto-txpower-select disable [WAC-wlan-mesh-whitelist-mesh-list] quit [WAC-wlan-group-radio-mesh-mpp/1] channel 40mhz-plus 157 [WAC-wlan-group-radio-mesh-mpp/1] coverage distance 2 ⚫ Bind the mesh profile and mesh whitelist to radio 1 of APs in the AP groups mesh-mpp and mesh-mp. [WAC-wlan-view] ap-group name mesh-mpp [WAC-wlan-view] ap-group name mesh-mp [WAC-wlan-ap-group-mesh-mpp] radio 1 [WAC-wlan-ap-group-mesh-mp] radio 1 [WAC-wlan-group-radio-mesh-mpp/1] mesh-profile mesh [WAC-wlan-group-radio-mesh-mp/1] mesh-profile mesh [WAC-wlan-group-radio-mesh-mpp/1] mesh-whitelist-profile [WAC-wlan-group-radio-mesh-mp/1] mesh-whitelist-profile mesh-list mesh-list [WAC-wlan-group-radio-mesh-mp/1] quit [WAC-wlan-group-radio-mesh-mpp/1] quit [WAC-wlan-ap-group-mesh-mp] quit [WAC-wlan-ap-group-mesh-mpp] quit 66 Huawei Confidential Checking Mesh Link Information ⚫ After mesh services take effect, run the display wlan mesh link all command to check mesh link information. <WAC> display wlan mesh link all Rf : radio ID Dis : coverage distance(100m) Ch : channel Per : drop percent(%) TSNR : total SNR(dB) P- : peer Mesh : Mesh mode Re : retry ratio(%) RSSI : RSSI(dBm) MaxR : max RSSI(dBm) -------------------------------------------------------------------------------------------------------------------APName P-APName P-APMAC Rf Dis Ch Mesh P-Status RSSI MaxR Per Re TSNR SNR(Ch0~3:dB) Tx(Mbps) Rx(Mbps) -------------------------------------------------------------------------------------------------------------------AP3 AP5 60f1-8a9c-2b40 1 2 157 portal normal -13 -10 0 1 67 66/59/-/- 400 400 AP3 AP4 f898-ef7f-b400 1 2 157 portal normal -18 -18 0 3 67 66/59/-/- 400 400 AP4 AP5 60f1-8a9c-2b40 1 2 157 node normal -14 -12 0 4 64 58/63/-/- 400 400 AP4 AP3 b4fb-f9b7-de40 1 2 157 node normal -20 -20 0 4 64 58/63/-/- 400 400 AP5 AP4 f898-ef7f-b400 1 2 157 node normal -12 -1 0 6 69 68/62/-/- 400 400 AP5 AP3 b4fb-f9b7-de40 1 2 157 node normal -13 -2 0 4 69 68/62/-/- 400 400 -------------------------------------------------------------------------------------------------------------------Total: 6 67 Huawei Confidential Contents 1. WLAN Networking Overview 2. WLAN Networking Architectures 3. WLAN Networking Application Scenarios 68 Huawei Confidential Small and Micro Enterprises and Small Stores Solution description ⚫ In the single-AP networking, a Fat AP functions as the gateway and Internet egress device for STAs. Fat AP ⚫ This networking applies to small and micro enterprises and stores with small areas. ⚫ The number of concurrent online STA is usually less than 50. ⚫ Only wireless user access is required, and roaming is not required. STA ⚫ 69 Huawei Confidential STAs have simple Internet access requirements. Small Enterprises Solution description ⚫ Multiple APs are connected to the network through a switch, providing a larger wireless coverage area than a single AP. In addition, the switch can provide network access for wired terminals. ⚫ The leader AP networking is used to implement centralized AP management and configuration and support WLAN roaming. Leader AP ⚫ This networking applies to small and midsize experience stores and logistics stores. It also applies to small enterprises that require wireless coverage and access of a certain number of wired terminals such as monitoring devices and printers. ⚫ If there are special Internet access requirements, an independent gateway is generally used as the Internet egress device. 70 Huawei Confidential Small and Midsize Enterprises WAN Solution description Branch HQ ⚫ The HQ and branches of an enterprise are interconnected across a wide area network (WAN) and internal network connectivity is implemented through routing protocols. A WAC and an authentication server are deployed in the HQ. The WAC manages all Fit APs in the HQ and branches. Authentication server WAC ⚫ forwarding mode as required. Fit AP ⚫ Fit AP Fit AP Fit APs in the HQ can use the direct or tunnel Fit APs in branches usually use the local forwarding mode. Users are assigned IP addresses by branch gateways and directly access Internet resources through branch egresses. 71 Huawei Confidential Large and Midsize Enterprises Solution description WAN Branch HQ ⚫ The HQ and branches of an enterprise are interconnected across a WAN, and internal network connectivity is implemented through routing protocols. ⚫ Authentication server Branch WAC HQ WAC WACs are deployed in the HQ and branches to manage Fit APs in the HQ and branches, respectively. Fit AP ⚫ Generally, the authentication server is deployed only in the HQ. Fit AP Fit AP ⚫ This networking applies to large and midsize enterprises and branches. 72 Huawei Confidential Large Campuses with Standalone WACs Solution description Heartbeat Egress zone Server zone ⚫ If a wired network has been deployed for a large campus and a wireless network needs to be deployed, or the DC wireless network scale is large, you are advised to deploy standalone WACs. Core layer Standby WAC Active WAC ⚫ core switches in off-path mode. Eth-Trunk Aggregation layer Generally, the WACs are connected to the aggregation or ⚫ To reduce changes to the existing wired network and enable the WACs to centrally manage and control wireless traffic, the tunnel forwarding mode is recommended. Access layer ⚫ Fit AP 73 Huawei Confidential Fit AP To improve WAC reliability, the standalone WACs are typically deployed in HSB mode. Quiz 1. (Single-answer question) An enterprise WLAN does not have heavy user traffic or traffic bottlenecks. To ensure WLAN security, the enterprise expects to centrally manage WLAN data. Which of the following networking modes is applicable to this scenario? ( A. WAC off-path networking + direct data forwarding B. WAC off-path networking + tunnel data forwarding C. Layer 3 networking + direct data forwarding D. Layer 2 networking + direct data forwarding 74 1. B Huawei Confidential ) Summary ⚫ This course describes common WLAN networking architectures, including Fat AP, leader AP, WAC + Fit AP, agile distributed, Navi AC, and mesh. ⚫ Upon completing this course, you will be able to understand common WLAN networking architectures and construct suitable WLANs based on site environments and actual requirements. 75 Huawei Confidential Recommendations ⚫ 76 Huawei official websites: Enterprise service: https://e.huawei.com/en/ Technical support: https://support.huawei.com/enterprise/en/index.html Online learning: https://www.huawei.com/en/learning Huawei Confidential Acronyms and Abbreviations (1/2) Acronym/Abbreviation 77 Full Name AGV Automated Guided Vehicle AP Access Point CAPWAP Control and Provisioning of Wireless Access Points DHCP Dynamic Host Configuration Protocol DMZ Demilitarized Zone DTLS Datagram Transport Layer Security IP Internet Protocol MAC Media Access Control MP Mesh Point MPP Mesh Portal Point Huawei Confidential Acronyms and Abbreviations (2/2) Acronym/Abbreviation 78 Full Name NAT Network Address Translation RADIUS Remote Authentication Dial-In User Service RU Remote Unit SSID Service Set Identifier STA Station URL Uniform Resource Locater VLAN Virtual Local Area Network WAC Wireless Access Controller WLAN Wireless Local Area Network WMN Wireless Mesh Network Huawei Confidential Thank you. 把数字世界带入每个人、每个家庭、 每个组织,构建万物互联的智能世界。 Bring digital to every person, home, and organization for a fully connected, intelligent world. Copyright© 2022 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice. WLAN Reliability Technologies Foreword ⚫ With the popularization of mobile applications, wireless local area networks (WLANs) are carrying more and more services. It is becoming increasingly important to ensure network stability and reliability. In practice, however, network faults and service interruption are almost inevitable and affect services. An effective way to ensure system reliability is to improve fault tolerance capabilities of the system, speed up fault recovery, and reduce the impact of faults on services. ⚫ This course introduces you to Huawei WLAN reliability solutions, including Virtual Router Redundancy Protocol (VRRP) hot standby (HSB), dual-link cold backup, and N+1 backup, CAPWAP link failover. 2 Huawei Confidential Objectives ⚫ 3 On completion of this course, you will be able to: Describe common WLAN reliability networking modes. Know how to configure WLAN reliability solutions. Huawei Confidential Contents 4 1. WLAN Reliability Technology Overview 2. VRRP HSB 3. Dual-Link HSB 4. Dual-Link Cold Backup 5. N+1 Backup Huawei Confidential WLAN Reliability Technology Overview On live networks, faults caused by various factors are inevitable. Reliability technologies focus on quickly recovering networks from faults. Depending on methods for resolving network faults, WLAN reliability technologies are categorized as fault detection or protection switching technologies. ⚫ Fault detection: focusing on fault detection and diagnosis BFD EFM Two network devices establish a Bidirectional Forwarding Detection (BFD)session and periodically send BFD control packets to detect the availability of the link between them. Devices periodically exchange detection packets to report the link status. Ethernet in the First Mile (EFM) supports the following functions: peer discovery, link monitoring, fault notification, and remote loopback. Protection switching: focusing on network fault recovery 5 VRRP HSB Dual-link HSB Dual-link cold backup N+1 backup Multiple devices are virtualized into one gateway. When the master device fails, traffic is quickly switched to the backup device to ensure continuous forwarding. Two WACs are used to manage the same APs and back up STA information. When the active WAC is faulty, the standby WAC takes over services. Two WACs are used to manage the same AP. When the active WAC is faulty, the standby WAC replaces the active WAC to manage the AP. One WAC functions as the standby WAC to provide backup services for multiple active WACs. Huawei Confidential • BFD is a standard link detection protocol based on UDP. It is used to quickly detect and monitor the link status on the network, regardless of direct or indirect links. • EFM is a protocol working at the data link layer and is used to detect the connectivity of direct links. • This courses focuses on the device protection switching technology. Therefore, fault detection technologies are not mentioned here. Comparison of WAC Backup Modes Item VRRP HSB The master and backup WACs configured with VRRP have independent IP addresses and Implementation share a virtual IP address. Each AP sets up a CAPWAP link with this virtual IP address. Switchover speed The switchover is fast and has little impact on services. Dual-Link HSB Dual-Link Cold Backup Each AP sets up a primary and a secondary CAPWAP link with the Each AP sets up a primary and a secondary CAPWAP link with the active and standby WACs, respectively. active and standby WACs, respectively. The active and standby WACs back up STA information. The AP status switchover is slow The AP status switchover is slow and occurs only when CAPWAP and occurs only when CAPWAP link disconnection timeout is link disconnection timeout is detected. After the AP status is detected. STAs need to go online switched, STAs do not need to again, and services are interrupted go offline and online again. for a short period of time. N+1 Backup Each AP sets up a CAPWAP link with only one WAC. The AP status switchover is slow and occurs only when CAPWAP link disconnection timeout is detected. APs and STAs need to go online again, and services are interrupted for a short period of time. This backup mode supports only Load balancing the active/standby mode but not This backup mode supports both the active/standby and load balancing modes. the load balancing mode. Deployment of Not supported Supported Supported Supported WACs at different places The software versions of the two The models and software versions of The models and software The models and software WACs must be the same. No the master and backup WACs can be Constraints versions of the two WACs must versions of the two WACs must constraint is placed on the WAC different. However, it is recommended be the same. be the same. model. that they be the same for the WACs. Scenarios with high reliability Scenarios with high reliability Scenarios with low reliability Application Scenarios with low reliability requirements requirements requirements scope requirements Geographically centralized WAC Geographically separate WAC Scenarios with high cost control deployment deployments requirements 6 Huawei Confidential Contents 7 1. WLAN Reliability Technology Overview 2. VRRP HSB 3. Dual-Link HSB 4. Dual-Link Cold Backup 5. N+1 Backup Huawei Confidential VRRP Overview Virtual Router Redundancy Protocol (VRRP) is a fault tolerance protocol that enables a standby router to ⚫ automatically replace a faulty active router — the next hop of a host (default gateway). In this way, the standby router can forward packets if a fault occurs, thereby ensuring the continuity and reliability of network communication. Routers in a VRRP group play two roles: master and backup. ⚫ When Router A is working properly: Router A Master ⚫ VRRP group Primary link Router A functions as the master device in the VRRP group and is responsible for forwarding data traffic. Router B Backup When Router A is faulty: Secondary link Router B detects VRRP heartbeat timeout and is elected as the new master device. Switch Router B sends a gratuitous ARP packet. After receiving the packet, the switch updates its MAC address table. Intranet host 8 Router B responds to users' ARP requests and forwards traffic. Huawei Confidential • VRRP group: A group of routers in the same broadcast domain form a virtual router, namely, a VRRP group. It provides a virtual IP address as the gateway address of the intranet to implement gateway redundancy. • When the master device is working properly, hosts on the network communicate with external networks through the master device. If the master device fails, the backup device becomes the new master device and takes over packet forwarding to ensure network continuity. ▫ Master: indicates the master state. A device whose VRRP group state is Master is called the master device. The master device is the owner of the virtual IP address and virtual MAC address of the VRRP group. When the master device receives an ARP request with the destination IP address being the virtual IP address, it responds to the ARP request. Among multiple routers in the same VRRP group, only one router is in active state, and only the master router can forward the packets with the virtual IP address as the next hop. ▫ Backup: indicates the backup state. A device whose VRRP group state is Backup is called a backup device. The backup device does not respond to ARP requests with the destination IP address being the virtual IP address. Among the routers in the same VRRP group, all the routers except the master router are backup routers. When the master device fails, a new master device is elected from the remaining backup devices. ▫ Master election rules: The device with a higher priority (ranging from 0 to 255) is elected as the master device. If all devices have the same priority, the device with a larger interface IP address is elected as the master device. The running priority of the master device then automatically changes to 255. • When Router A is working properly, the traffic forwarding process is as follows: ▫ Router A sends a gratuitous ARP packet that contains the VRRP virtual IP address and virtual MAC address. ▫ The switch updates its MAC address table. That is, in the MAC address table, the virtual MAC address is mapped to the interface that receives the gratuitous ARP packet. ▫ An intranet user sends an ARP request to query the gateway address, which is the virtual IP address. ▫ Router A responds to the ARP request by sending the virtual MAC address to the user. ▫ Traffic from the intranet user is sent to the gateway, Router A. The intranet user sends traffic to the virtual MAC address, and the switch forwards the traffic to Router A based on the MAC address table. • When Router A is faulty, the traffic forwarding process is as follows: ▫ If Router B does not receive VRRP packets from Router A within three packet sending intervals, Router B automatically becomes the new master. ▫ Router B sends a gratuitous ARP packet that contains the VRRP virtual IP address and virtual MAC address. ▫ The switch updates its MAC address table. That is, in the MAC address table, the virtual MAC address is mapped to the interface that receives the gratuitous ARP packet. ▫ An intranet user sends an ARP request to query the gateway address, which is the virtual IP address. ▫ Router B responds to the ARP request by sending the virtual MAC address to the user. ▫ Traffic from the intranet user is sent to the gateway, Router B. The intranet user sends traffic to the virtual MAC address, and the switch forwards the traffic to Router B based on the MAC address table. VRRP HSB Solution WAC1 10.1.5.1 Master HSB channel WAC2 10.1.5.2 Backup ⚫ VRRP hot standby (HSB) is implemented through VRRP and HSB. ⚫ VRRP virtualizes two physical WACs into one WAC. An AP can only detect the existence of the virtual WAC and establish a CAPWAP tunnel with the virtual WAC. VRRP ⚫ In VRRP HSB, one WAC functions as the active WAC and the other functions as the standby WAC. Generally, the active and standby WACs are Virtual WAC Switch 10.1.5.3/24 deployed in the same geographical location, and the active/standby switchover is fast. ⚫ ⚫ AP HSB establishes a TCP-based HSB channel between the active and standby WACs to implement data synchronization and backup. Switch CAPWAP tunnel VRRP HSB supports wireless configuration synchronization. A dedicated CAPWAP tunnel (not an HSB channel) can be established between the active and standby WACs to synchronize wireless configuration data from the active WAC to the standby WAC. 10 Huawei Confidential • VRRP virtualizes the master and backup WACs into one WAC on a Layer 2 network. • HSB backs up the following data between the active and standby WACs: ▫ AP entries ▫ AP entries ▫ CAPWAP tunnel information ▫ DHCP address allocation information • The HSB channel can be carried by the direct physical link between two WACs or by a switch. For example, the HSB channel can reuse the physical channel through which VRRP packets are exchanged. • VRRP HSB supports only the active/standby networking but not the load balancing networking. HSB Mechanism ⚫ Data backup between WACs is implemented through HSB. HSB ensures that session entries on the active and standby WACs are consistent. This ensures that sessions are not interrupted during an active/standby switchover. ⚫ HSB provides two types of public services: HSB service: establishes and maintains a TCP-based HSB channel for service exchange of service modules, and notifies the service modules of channel connect/disconnect events. HSP group: instructs service modules to perform batch, real-time, or periodic backup. An HSB group depends on the TCP-based channels provided by the HSB service, and can work properly only after being bound to the HSB service. In addition, the HSB group needs to be bound to the VRRP group. The HSB group negotiates the master/backup status of service modules based on the VRRP status. Physical HSB channel Active WAC HSB service Bound VRRP group 11 Bound HSB group TCP-based HSB channel Standby WAC HSB service Bound HSB group Bound VRRP group Huawei Confidential • HSB service module: establishes and maintains an HSB channel, and notifies the related service modules of channel connect/disconnect events. An HSB service establishes active and standby channels based on TCP. The TCP port number ranges from 10240 to 49152. • HSB group module: ▫ An HSB group is bound to a VRRP instance, and the active and standby instances are negotiated using the VRRP mechanism. ▫ It is responsible for active/standby negotiation, batch, real-time, or periodic backup, and instructs service modules to back up service information. • Service module: responds to active/standby events in service modules, and performs batch, real-time, or periodic backup. • Currently, the WAC supports the configurations of only one HSB service and one HSB group. • HSB heartbeat packets are frequently exchanged between the active and standby WACs, and directly affect the working and negotiation results of the active and standby WACs. To ensure normal running of the HSB system and prevent backup data loss, it is recommended that an independent physical link be planned for the HSB channel. Working Process of VRRP HSB ⚫ WAC1 10.1.5.1 Master HSB channel VRRP Master/backup negotiation: Two WACs send VRRP packets carrying priority information on a Layer 2 network for WAC2 10.1.5.2 Backup negotiation. ⚫ Data backup: VRRP HSB backs up STA entries, AP entries, and CAPWAP link information in batch, real-time, or Virtual WAC Switch 10.1.5.3/24 periodic mode. ⚫ Active/standby switchover: When the master WAC, the downlink of the master WAC, or the uplink of the master Switch WAC fails, an active/standby switchover is triggered. ⚫ AP 12 CAPWAP tunnel Active/standby switchback: When the link of the original master WAC recovers, the active/standby switchback is triggered in preemption mode. Huawei Confidential • HSB supports the batch, real-time, and periodic backup modes for data synchronization. ▫ Batch backup: When the active and standby devices are determined, the active device synchronizes the existing session entries to the new standby device at a time to ensure that the session entries on the active and standby devices are the same. ▫ Real-time backup: When the active device generates new session entries or modifies existing session entries, it synchronizes new or modified session entries to the standby device in real time. ▫ Periodic backup: To ensure that entries on the active and standby devices are consistent, the standby device checks whether session entries are the same as those on the active device at an interval of 30 minutes. If session entries are inconsistent, the session entries on the active device are updated to the standby device. • Active/standby switchover: Three common scenarios may trigger an active/standby switchover. ▫ The active WAC is faulty. This causes the disconnection of the HSB channel. By default, HSB heartbeat packets are sent at an interval of 3 seconds and the number of detection times is 5. Therefore, after about 15 seconds, the standby WAC takes over the work of the active WAC. ▫ The downlink of the active WAC is faulty. This causes the VRRP status switching. After about 6 seconds, the standby WAC takes over services from the active WAC. ▫ The uplink of the active WAC is faulty. VRRP association needs to be configured to monitor uplink interfaces or links. When a fault is detected, the VRRP priority of the active WAC automatically decreases. When the preemption mode is enabled on the standby WAC, a VRRP switchover is triggered, leading to an active/standby switchover. The switchover time depends on the preemption delay configured for the VRRP. Example for Configuring VRRP HSB ⚫ Requirement description: To improve WLAN reliability, the enterprise uses VRRP HSB networking (two WACs are located in the same geographical location). When the master WAC is faulty, services are automatically switched to the backup WAC. When the master WAC recovers, services are automatically switched back to the master WAC. Virtual IP address of the management VRRP (mVRRP) 10.1.88.1/30 WAC1 Master 10.1.5.1 HSB channel 10.1.88.2/30 CAPWAP tunnel for wireless configuration synchronization VLAN 5 VRRP VRID 1 Switch group: 10.1.5.3/24. IP address and port number of the HSB channel on WAC1: 10.1.88.1/24 and 10241. To reduce the configuration workload, enable wireless configuration synchronization between the master and backup WACs. 14 Virtual WAC 10.1.5.3 Switch IP address and port number of the HSB channel on WAC2: 10.1.88.2/24 and 10241. WAC2 Backup 10.1.5.2 Huawei Confidential AP CAPWAP tunnel VRRP HSB Configuration Roadmap Configuring VRRP Configuring HSB Configuring wireless configuration synchronization Verifying the configuration Planning IP addresses Configuring an HSB service Configuring wireless configuration synchronization Checking the VRRP status Configuring a VRRP group Configuring an HSB group Checking the HSB service Binding services Checking the HSB group Enabling the HSB group Checking wireless configuration synchronization 15 Huawei Confidential Configuring VRRP ⚫ # Create a mVRRP group on WAC1. Set the ⚫ Create an mVRRP group on WAC2 and retain priority of WAC1 in the mVRRP group to 120 the default priority (100) and preemption and the preemption delay to 300 seconds. function. [WAC1] interface vlan 5 [WAC2] interface vlan 5 [WAC1-Vlanif5] vrrp vrid 1 virtual-ip 10.1.5.3 [WAC2-Vlanif5] vrrp vrid 1 virtual-ip 10.1.5.3 [WAC1-Vlanif5] vrrp vrid 1 priority 120 [WAC2-Vlanif5] admin-vrrp vrid 1 [WAC1-Vlanif5] vrrp vrid 1 preempt-mode timer delay 300 [WAC2-Vlanif5] quit [WAC1-Vlanif5] admin-vrrp vrid 1 [WAC1-Vlanif5] quit 16 Huawei Confidential Configuring an HSB Service and an HSB Group Create an HSB service on WAC1. Configure the IP addresses and port numbers for the HSB channels, and set the retransmission time and interval of the HSB service. ⚫ Create an HSB service on WAC2. Configure the IP addresses and port numbers for the HSB channels, and set the retransmission time and interval of the HSB service. ⚫ [WAC1] hsb-service 0 [WAC2] hsb-service 0 [WAC1-hsb-service-0] service-ip-port local-ip 10.1.88.1 peer-ip [WAC2-hsb-service-0] service-ip-port local-ip 10.1.88.2 peer-ip 10.1.88.2 local-data-port 10241 peer-data-port 10241 10.1.88.1 local-data-port 10241 peer-data-port 10241 [WAC1-hsb-service-0] service-keep-alive detect retransmit 5 [WAC2-hsb-service-0] service-keep-alive detect retransmit 5 interval 3 interval 3 ⚫ Create an HSB group on WAC1, and bind the HSB service and the mVRRP group to the HSB group. ⚫ Create an HSB group on WAC2, and bind the HSB service and the mVRRP group to the HSB group. [WAC1] hsb-group 0 [WAC2] hsb-group 0 [WAC1-hsb-group-0] bind-service 0 [WAC2-hsb-group-0] bind-service 0 [WAC1-hsb-group-0] track vrrp vrid 1 interface Vlanif 5 [WAC2-hsb-group-0] track vrrp vrid 1 interface Vlanif 5 [WAC1-hsb-group-0] quit [WAC2-hsb-group-0] quit 17 Huawei Confidential Binding Service Modules and Enabling the HSB Group ⚫ The HSB group can be bound to different services to provide the backup function, improving service reliability. On WAC1, bind the NAC, WLAN, and DHCP services to the HSB group, and enable the HSB group. [WAC1] hsb-service-type access-user hsb-group 0 [WAC1] hsb-service-type ap hsb-group 0 [WAC1] hsb-service-type dhcp hsb-group 0 [WAC1] hsb-group 0 [WAC1-hsb-group-0] hsb enable On WAC2, bind the NAC, WLAN, and DHCP services to the HSB group, and enable the HSB group. [WAC2] hsb-service-type access-user hsb-group 0 [WAC2] hsb-service-type ap hsb-group 0 [WAC2] hsb-service-type dhcp hsb-group 0 [WAC2] hsb-group 0 [WAC2-hsb-group-0] hsb enable 18 Huawei Confidential • Run the hsb-service-type ap hsb-group group-index command to bind the WLAN service to an HSB group so that AP entries, CAPWAP link information, and STA information can be transmitted through the HSB channel. • Run the hsb-service-type access-user hsb-group group-index command to bind the NAC service to the HSB group so that STA authentication information can be transmitted through the HSB channel. • Run the hsb-service-type dhcp hsb-group group-index command to bind the DHCP service to the HSB group so that STA address allocation information can be transmitted through the HSB channel (when the WAC functions as the DHCP server). Wireless Configuration Synchronization ⚫ Wireless configuration synchronization refers to automatic configuration synchronization between the master and backup master WACs. After a CAPWAP tunnel is established between the master and backup master WACs, the master WAC can automatically synchronize some configurations to the backup master WAC. This reduces the configuration workload of the backup master WAC and prevents missing configurations of the backup master WAC. Configure wireless configuration synchronization on WAC1. [WAC1-wlan-view] master controller [WAC1-master-controller] master-redundancy peer-ip ip-address 10.1.88.2 local-ip ip-address 10.1.88.1 psk Huawei@123 [WAC1-master-controller] master-redundancy track-vrrp vrid 1 interface vlanif 5 Configure wireless configuration synchronization on WAC2. [WAC2-wlan-view] master controller [WAC2-master-controller] master-redundancy peer-ip ip-address 10.1.88.1 local-ip ip-address 10.1.88.2 psk Huawei@123 [WAC2-master-controller] master-redundancy track-vrrp vrid 1 interface vlanif 5 Manually trigger wireless configuration synchronization on WAC1. [WAC1-wlan-view] synchronize-configuration 19 Huawei Confidential • The wireless configuration synchronization function classifies configurations into two types: Configurations that must be consistent on the WACs are public configurations, while those that can be inconsistent on the WACs are private configurations. Public configurations can be automatically synchronized, but private configurations cannot. • During wireless configuration synchronization in a VRRP HSB scenario, the two WACs are bound to the same VRRP group, and the VRRP protocol negotiates to elect the master and backup master WACs and establishes a CAPWAP tunnel between the WACs based on the local and peer IP addresses configured on the WACs. Through the CAPWAP tunnel, the master WAC synchronizes wireless configuration data to the backup master WAC. • It is recommended that wireless configuration synchronization and VRRP HSB use the same VRRP group. In this way, the master WAC in wireless configuration synchronization is the the same as the master AC in VRRP. You only need to configure public configurations on the master WAC. The configurations are automatically synchronized to the backup master WAC. • After the master AC and backup master AC are configured, the existing public configurations on the two WACs are inconsistent. You need to manually trigger wireless configuration synchronization to ensure that the existing public configurations are consistent. Any subsequent public configuration operations on the master AC will be automatically synchronized to the backup master AC. Verifying the Configuration ⚫ Run the display hsb-group group-index ⚫ Run the display hsb-service service-index command to check HSB group information. command to check HSB service information. [WAC1] display hsb-group 0 [WAC1] display hsb-service 0 Hot Standby Group Information: Hot Standby Service Information: ---------------------------------------------------------- ---------------------------------------------------------- HSB-group ID :0 Local IP Address : 10.1.88.1 Vrrp Group ID :1 Peer IP Address : 10.1.88.2 Vrrp Interface : Vlanif5 Source Port : 10241 Service Index :0 Destination Port : 10241 Group Vrrp Status : Master Keep Alive Times :5 Group Status : Active Keep Alive Interval :3 Group Backup Process : Realtime Service State : Connected Peer Group Device Name : AirEngine9700-M Service Batch Modules Peer Group Software Version : V200R021C00SPC200 ---------------------------------------------------------- Group Backup Modules :- : ---------------------------------------------------------20 Huawei Confidential • Check the configuration parameters and status of the VRRP group. ▫ Run the display vrrp command. • Check the configuration parameters and status of the HSB service. ▫ display hsb-service service-index • Check the configuration parameters and status of the HSB group. ▫ Run the display hsb-group group-index command. • Check the configuration parameters and status of wireless configuration synchronization. ▫ Run the display sync-configuration master-redundancy command. ▫ Run the display sync-configuration status command. Contents 21 1. WLAN Reliability Technology Overview 2. VRRP HSB 3. Dual-Link HSB 4. Dual-Link Cold Backup 5. N+1 Backup Huawei Confidential Dual-Link HSB Overview ⚫ 10.1.88.1/30 HSB channel two WACs, and an HSB channel is established between the 10.1.88.2/30 WAC1 WAC2 Active WAC Standby WAC 10.1.5.1/24 10.1.5.2/24 An AP establishes active and standby CAPWAP tunnels with active and standby WACs to synchronize service data. This backup mode is called dual-link HSB. In dual-link mode, an AP has two CAPWAP links. ⚫ In dual-link HSB mode, STA information can be synchronized from the active WAC to the standby WAC in real time through the HSB channel. When the active WAC fails, the standby WAC Switch immediately switches to the active state to take over WLAN Secondary link Primary link services. ⚫ Switch The active and standby WACs can be deployed in different places and do not need to work on the same Layer 2 network, making deployment more flexible. CAPWAP tunnel AP ⚫ Dual-link HSB supports the active/standby and load balancing networking modes. 22 Huawei Confidential • To ensure that both WACs provide the same services, it is recommended that the same service parameters be configured on the active and standby WACs. Working Process of Dual-Link HSB ⚫ 10.1.88.1/30 HSB channel WAC1 selected and the primary link is established. After the active 10.1.88.2/30 WAC delivers configurations, the secondary link is established. WAC2 Active WAC Standby WAC 10.1.5.1/24 10.1.5.2/24 Active/Standby negotiation: The active WAC is preferentially ⚫ Data backup: The active and standby WACs back up STA entries through the HSB channel to ensure service continuity during an active/standby switchover or switchback. ⚫ Switch Primary link Active/Standby switchover: The AP determines whether to perform an active/standby switchover. If the active WAC fails Secondary link or the downlink is disconnected, an active/standby switchover is performed between the active and standby WACs to activate the standby link. User traffic is switched to the new active Switch WAC. CAPWAP tunnel AP ⚫ Active/Standby switchback: Global switchback is enabled. After an active/standby switchover is performed, a switchback is triggered when the link of the original active WAC recovers. 23 Huawei Confidential • The AP determines whether to perform an active/standby switchover. The process is as follows: ▫ After establishing links with the active and standby WACs, the AP periodically sends Echo packets to the WACs for CAPWAP heartbeat detection to monitor the CAPWAP link status. ▫ When a link is faulty, the WAC cannot respond to Echo packets from the AP. If the active WAC does not respond to the AP within a specified number of consecutive CAPWAP heartbeat detection intervals, the AP determines that the primary link is faulty. ▫ The AP sends an Echo Request packet carrying information about the active WAC to the standby WAC. After receiving the packet, the standby WAC switches to the working state. The secondary CAPWAP link also switches to the working state. The AP sends STA data services to the new active WAC. • Heartbeat detection is performed on CAPWAP links between the AP and WAC. By default, heartbeat packets are sent at an interval of 25 seconds, and the number of heartbeat packet detections is 3. That is, if the AP does not receive heartbeat packets from the WAC for three consecutive times, the AP considers the WAC faulty. By default, a dual-link cold backup switchover takes about 75 seconds. After an active/standby switchover, original users on the AP need to go online again. If you set the CAPWAP heartbeat detection interval and the number of CAPWAP heartbeat detections smaller than the default values, CAPWAP link reliability is degraded. Exercise caution when you set the values. The default values are recommended. • To configure dual-link cold backup on a mesh network, set the CAPWAP heartbeat interval to 25 seconds and the number of heartbeat packet detections to at least 6. If this configuration is not performed, the WAC sends heartbeat packets three times at an interval of 25 seconds by default. This may cause unstable mesh link status. • The active/standby switchback process is as follows: ▫ The AP periodically sends Discovery Request messages to check whether the original primary tunnel recovers. ▫ If the original primary link has recovered, the AP triggers switchback waiting when detecting that this link has a higher priority than the working one. After detecting that WAC1 recovers, STA entries are updated from WAC2 to WAC1 through the HSB channel. ▫ To prevent frequent switchovers caused by network flapping, the AP requests WACs to perform an active/standby switchback after 20 Echo intervals. Then WAC1 recovers to the working state and WAC2 recovers to the backup state. If the original primary link fails again, the switchback is canceled. After the active/standby switchback, the AP sends STAs' data services to WAC1. Active/Standby Negotiation Process ⚫ In active/standby negotiation, an AP selects an active WAC and a standby WAC from multiple WACs, and then sets up a primary and a backup CAPWAP tunnel with the active and standby WACs, respectively. If the IP addresses of active and standby WACs have been allocated in static, DHCP, or DNS mode, the AP sends the Discovery Request packet in unicast mode to request connections with the WACs. If no IP addresses are allocated to WACs or there is no response to the unicast packet, the AP sends another Discovery Request packet in broadcast mode to discover available WACs in the same network segment. If both the active and standby WACs are working properly, they respond with Discovery Response packets. The selects the active WAC based on the parameters in the Discovery Response packets. The selection sequence is as follows: Is there a primary WAC? No Is there a No backup WAC? No The configured primary or backup WAC is used as the active WAC. 25 Are the WAC priorities the same? No The WAC with a smaller priority value is used as the active WAC. No The WAC with the lightest load is used as the active WAC. Yes Yes Are there multiple primary or backup WACs? No Yes Are the WAC loads the same? Yes Compare the IP addresses of WACs. The WAC with a smaller IP address is used as the active WAC. Huawei Confidential • Load comparison mode: Compare the loads of WACs, that is, the number of APs and STAs. The WAC with the lightest load is the active WAC. The WAC with the largest number of allowed APs is preferentially selected as the active WAC. If the number of allowed APs is the same, the WAC with the largest number of allowed STAs is selected as the active WAC. • After the AP establishes an active CAPWAP tunnel with the active WAC and delivers configurations to the AP, the AP starts standby WAC election and establishes a standby CAPWAP tunnel. The standby WAC election process is similar and is not described here. Example for Configuring Dual-Link HSB ⚫ Requirement description: To improve WLAN reliability and implement remote disaster recovery, the enterprise uses the dual-link HSB networking. When the active WAC is faulty, services are automatically switched to the standby WAC. When the active WAC recovers, services are automatically switched 10.1.88.1/30 10.1.88.2/30 HSB channel WAC1 Active WAC CAPWAP tunnel for wireless configuration synchronization WAC2 Standby WAC 10.1.5.2/24 10.1.5.1/24 back to the active WAC. The IP address and port number of the HSB channel of WAC1 are 10.1.88.1/30 and 10241, respectively. The IP Switch Secondary link Primary link address and port number of the HSB channel of WAC2 are 10.1.88.2/30 and 10241, respectively. Switch To reduce the configuration workload, enable wireless configuration synchronization between the master and backup WACs. 26 Huawei Confidential CAPWAP tunnel AP Dual-Link HSB Configuration Roadmap Planning the active and standby WACs Configuring HSB Configuring wireless configuration synchronization Verifying the configuration Planning IP addresses and VLANs Configuring dual-link backup Configuring wireless configuration synchronization Enabling dual-link backup Planning the active and standby WACs Configuring an HSB service Checking dual-link backup Binding services Checking the HSB service status Configuring the link switchover mode (Optional) Checking wireless configuration synchronization 27 Huawei Confidential Configuring Dual-Link HSB ⚫ On WAC1, configure the IP address of the ⚫ On WAC2, configure the IP address of the primary WAC as the source IP address of WAC1 primary WAC as the source IP address of WAC1 and the IP address of the backup WAC as the and the IP address of the backup WAC as the source IP address of WAC2. source IP address of WAC2. [WAC1-wlan-view] ap-system-profile name test [WAC2-wlan-view] ap-system-profile name test [WAC1-wlan-ap-system-prof-test] primary-access ip-address [WAC2-wlan-ap-system-prof-test] primary-access ip-address 10.1.5.1 10.1.5.1 [WAC1-wlan-ap-system-prof-test] backup-access ip-address [WAC2-wlan-ap-system-prof-test] backup-access ip-address 10.1.5.2 10.1.5.2 [WAC1-wlan-ap-system-prof-test] quit [WAC2-wlan-ap-system-prof-test] quit [WAC1-wlan-view] ap-group name ap-group1 [WAC2-wlan-view] ap-group name ap-group1 [WAC1-wlan-ap-group-ap-group1] ap-system-profile test [WAC2-wlan-ap-group-ap-group1] ap-system-profile test [WAC1-wlan-ap-group-ap-group1] quit [WAC2-wlan-ap-group-ap-group1] quit [WAC1-wlan-view] ac protect enable [WAC2-wlan-view] ac protect enable 28 Huawei Confidential • In this example, the primary and backup WACs are configured in the AP system profile view. Therefore, the primary WAC serves as the active WAC, and the backup WAC serves as the standby WAC, without the need to compare WAC priorities. • By default, dual-link backup is disabled, and running the ac protect enable command restarts all APs. After the APs are restarted, the dual-link backup function takes effect. Configuring an HSB Service ⚫ On WAC1, configure an HSB service and bind the WLAN and NAC services to the HSB service. [WAC1] hsb-service 0 [WAC1-hsb-service-0] service-ip-port local-ip 10.1.88.1 peer-ip 10.1.88.2 local-data-port 10241 peer-data-port 10241 [WAC1-hsb-service-0] quit [WAC1] hsb-service-type ap hsb-service 0 [WAC1] hsb-service-type access-user hsb-service 0 ⚫ On WAC2, configure an HSB service and bind the WLAN and NAC services to the HSB service. [WAC2] hsb-service 0 [WAC2-hsb-service-0] service-ip-port local-ip 10.1.88.2 peer-ip 10.1.88.1 local-data-port 10241 peer-data-port 10241 [WAC2-hsb-service-0] quit [WAC2] hsb-service-type ap hsb-service 0 [WAC2] hsb-service-type access-user hsb-service 0 29 Huawei Confidential (Optional) Configuring the Link Switchover Mode ⚫ Two link switchover modes are available: Priority mode (default): An AP preferentially switches traffic to the primary link. Network stabilization mode: An AP preferentially uses the link with high stabilization. To change the priority mode to the network stability mode, run the following commands: [WAC1-wlan-view] ap-system-profile name test [WAC1-wlan-ap-system-prof-test] ac protect link-switch mode network-stabilization Configure the number of Echo packets sent within a statistics collection interval. [WAC1-wlan-view] ap-system-profile name test [WAC1-wlan-ap-system-prof-test] ac protect link-switch packet-loss echo-probe-time 30 Configure the packet loss rate start and difference thresholds for an active/standby link switchover. [WAC1-wlan-view] ap-system-profile name test [WAC1-wlan-ap-system-prof-test] ac protect link-switch packet-loss start-threshold 25 [WAC1-wlan-ap-system-prof-test] ac protect link-switch packet-loss gap-threshold 20 30 Huawei Confidential • To allow an AP to use a link with high network stabilization, set the active/standby link switchover mode to the network stabilization mode. When the condition for triggering an active/standby link switchover is met, the AP preferentially switches service traffic to the link on a network with higher network stabilization. In this case, whether an active/standby link switchover is performed is only related to the network stabilization of links but not related to the active and standby roles of links. • In dual-link HSB and cold backup scenarios, the network stabilization of the primary and secondary links is determined based on the Echo packet loss rate. The primary/secondary link switchover is performed when the following conditions are met: ▫ An AP collects statistics about Echo packets on the current link for a specified number of times, and determines that the packet loss rate of the link exceeds the packet loss rate start threshold. ▫ The packet loss rate on the current link is higher than that of the other link, and the difference between the two links is higher than the packet loss rate difference threshold. Verifying the Dual-Link HSB Configuration ⚫ Run the display ac protect command on WAC1 and WAC2 to view the dual-link backup configurations. [WAC1] display ac protect -----------------------------------------------------------Protect state : enable Protect AC IPv4 : 10.1.5.2 Protect AC IPv6 :Priority :0 Protect restore : enable ... ------------------------------------------------------------ 31 [WAC2] display ac protect -----------------------------------------------------------Protect state : enable Protect AC IPv4 : 10.1.5.1 Protect AC IPv6 :Priority :1 Protect restore : enable ... ------------------------------------------------------------ Huawei Confidential • By default, dual-link backup is disabled, and running the ac protect enable command restarts all APs. After the APs are restarted, the dual-link backup function takes effect. • If dual-link backup is enabled, running the ac protect enable command does not restart APs. You need to run the ap-reset command on the active WAC to restart all APs and make the dual-link backup function take effect. Configuring Wireless Configuration Synchronization ⚫ On WAC1, configure WAC1 as the master AC and specify the IP address of the local AC. [WAC1] wlan [WAC1-wlan-view] master controller [WAC1-master-controller] local-controller ip-address 10.1.5.2 psk Huawei@123 [WAC1-master-controller] quit ⚫ On WAC2, configure WAC2 as the local AC and specify the IP address of the master AC. [WAC2] wlan [WAC2-wlan-view] master-controller ip-address 10.1.5.1 psk Huawei@123 ⚫ Manually trigger wireless configuration synchronization. [WAC1-wlan-view] synchronize-configuration 32 Huawei Confidential • To implement wireless configuration synchronization in dual-link HSB scenarios, you need to manually configure the master AC (active WAC) and local AC (standby WAC) roles and specify their IP address on each other. In this manner, the master AC and local AC can be identified correctly to establish a CAPWAP tunnel for transmitting wireless configuration synchronization data. • After the master AC and local AC are configured, the existing public configurations on the two WACs are inconsistent. In this case, manually trigger wireless configuration synchronization to ensure that the existing public configurations are consistent. Any subsequent public configuration operations on the master AC will be automatically synchronized to the local AC. Verifying the Wireless Configuration Synchronization Status ⚫ Run the display sync-configuration status command on the master AC and local AC to view the wireless configuration synchronization status. If the status is up, the wireless configuration synchronization function is normal. [WAC1-wlan-view] display sync-configuration status Controller role:Master/Backup/Local -------------------------------------------------------------------------------------------------Controller IP Role Device Type Version Status Last synced -------------------------------------------------------------------------------------------------10.1.5.2 Local AirEngine9700-M V200R021C00 up -------------------------------------------------------------------------------------------------Total: 1 [WAC2-wlan-view] display sync-configuration status Controller role:Master/Backup/Local -------------------------------------------------------------------------------------------------Controller IP Role Device Type Version Status Last synced -------------------------------------------------------------------------------------------------10.1.5.1 Master AirEngine9700-M V200R021C00 up -------------------------------------------------------------------------------------------------Total: 1 33 Huawei Confidential Contents 34 1. WLAN Reliability Technology Overview 2. VRRP HSB 3. Dual-Link HSB 4. Dual-Link Cold Backup 5. N+1 Backup Huawei Confidential Dual-Link Cold Backup Overview ⚫ 10.1.5.1/24 WAC1 WAC2 Active WAC Standby WAC In dual-link cold backup mode, each AP sets up a primary and a secondary CAPWAP link with the active and standby WACs, 10.1.5.2/24 respectively without an HSB channel between the active and standby WACs. ⚫ Because there is no HSB channel between the active and standby WACs, they do not synchronize information with each other. When the active WAC fails, the standby WAC switches to the working state to provide services. STAs need to go online Switch again, and services are interrupted for a short period of time. Secondary link Primary link This mode applies to scenarios that do not require high WLAN service reliability. Switch ⚫ Dual-link cold backup allows active and standby WACs to be deployed at different places, and supports the active/standby CAPWAP tunnel and load balancing networking modes. AP ⚫ Dual-link cold backup does not support wireless configuration synchronization. 35 Huawei Confidential • To ensure that both WACs provide the same services, it is recommended that the same service parameters be configured on the active and standby WACs. Working Process of Dual-Link Cold Backup 10.1.5.1/24 10.1.5.2/24 WAC1 WAC2 Active WAC Standby WAC ⚫ Active/standby negotiation: The active WAC is preferentially selected and the primary link is established. After the active WAC delivers configurations, the secondary link is established. ⚫ Active/Standby switchover: The AP determines whether to perform an active/standby switchover. If the active WAC fails or the downlink is disconnected, an active/standby switchover Switch Primary link is performed between the active and standby WACs to activate Secondary link the standby link. Existing STAs on the APs go offline and then online again. Switch ⚫ Active/Standby switchback: Global switchback is enabled. After an active/standby switchover is performed, a switchback is CAPWAP tunnel triggered when the link of the original active WAC recovers. AP 36 Huawei Confidential • The active/standby negotiation and active/standby switchover are similar to those in dual-link HSB and are not described here. • Active/Standby switchback: ▫ The AP periodically sends Discovery Request messages to check whether the original primary link recovers. ▫ If the original primary link has recovered, the AP triggers switchback waiting when detecting that this link has a higher priority than the working one. ▫ To prevent frequent switchovers caused by network flapping, the AP requests WACs to perform an active/standby switchback after 20 Echo intervals. Then WAC1 recovers to the working state and WAC2 recovers to the backup state. The original primary link recovers to the working state. If the original primary link fails again, the switchback is canceled. After the active/standby switchback, the AP sends STAs' data services to WAC1. Example for Configuring Dual-Link Cold Backup ⚫ Requirement description: An enterprise deploys two WACs in geographic redundancy mode to improve WLAN reliability. When the active WAC is faulty, services are automatically switched to the standby WAC. When the active WAC recovers, services are 10.1.5.1/24 10.1.5.2/24 WAC1 WAC2 Active WAC Standby WAC automatically switched back to the active WAC. The WLAN of the enterprise carries non-key enterprise services and does not require high network reliability. Therefore, the dual-link cold backup networking is Switch Secondary link Primary link applicable. Management IP addresses of WAC1 and WAC2: 10.1.5.1/24 and 10.1.5.2/24, respectively (WAC1 as the active WAC; Switch WAC2 as the standby WAC) CAPWAP tunnel AP 37 Huawei Confidential Dual-Link Cold Backup Configuration Roadmap Planning the active and standby WACs Configuring dual-link cold backup Viewing the configuration Planning IP addresses and VLANs Configuring dual-link cold backup Checking dual-link backup Planning the active and standby WACs Configuring the active/standby switchback function Checking the link switchover mode Configuring the link switchover mode (Optional) Enabling dual-link backup 38 Huawei Confidential Configuring Dual-Link HSB ⚫ On WAC1, configure the IP address of the ⚫ On WAC2, configure the IP address of the primary WAC as the source IP address of WAC1 primary WAC as the source IP address of WAC1 and the IP address of the backup WAC as the and the IP address of the backup WAC as the source IP address of WAC2. source IP address of WAC2. [WAC1-wlan-view] ap-system-profile name test [WAC2-wlan-view] ap-system-profile name test [WAC1-wlan-ap-system-prof-test] primary-access ip-address [WAC2-wlan-ap-system-prof-test] primary-access ip-address 10.1.5.1 10.1.5.1 [WAC1-wlan-ap-system-prof-test] backup-access ip-address [WAC2-wlan-ap-system-prof-test] backup-access ip-address 10.1.5.2 10.1.5.2 [WAC1-wlan-ap-system-prof-test] quit [WAC2-wlan-ap-system-prof-test] quit [WAC1-wlan-view] ap-group name ap-group1 [WAC2-wlan-view] ap-group name ap-group1 [WAC1-wlan-ap-group-ap-group1] ap-system-profile test [WAC2-wlan-ap-group-ap-group1] ap-system-profile test [WAC1-wlan-ap-group-ap-group1] quit [WAC2-wlan-ap-group-ap-group1] quit [WAC1-wlan-view] ac protect enable [WAC2-wlan-view] ac protect enable 39 Huawei Confidential • By default, dual-link backup is disabled, and running the ac protect enable command restarts all APs. After the APs are restarted, the dual-link backup function takes effect. Verifying the Configuration ⚫ Run the display ac protect command to check the dual-link backup status. ⚫ Run the display ap-system-profile command to check the IP addresses of the active and standby WACs. [WAC1] display ac protect -----------------------------------------------------------Protect state : enable ... -----------------------------------------------------------[WAC2] display ac protect -----------------------------------------------------------Protect state : enable ... ------------------------------------------------------------ 40 Huawei Confidential [WAC1] display ap-system-profile name test -----------------------------------------------------------AC priority :Protect AC IP address :Primary AC : 10.1.5.1 Backup AC : 10.1.5.2 ... -----------------------------------------------------------[WAC2] display ap-system-profile name test -----------------------------------------------------------AC priority :Protect AC IP address :Primary AC : 10.1.5.1 Backup AC : 10.1.5.2 ... ------------------------------------------------------------ Contents 41 1. WLAN Reliability Technology Overview 2. VRRP HSB 3. Dual-Link HSB 4. Dual-Link Cold Backup 5. N+1 Backup Huawei Confidential N+1 Backup Overview CAPWAP tunnel Enterprise HQ Standby WAC ⚫ In N+1 backup, multiple active WACs share one standby WAC, and an AP joins only one active WAC and one standby WAC. Switch ⚫ In this example, the WAC in the enterprise HQ can function as the standby WAC for local WACs in branch 1 and branch 2. ⚫ WAN establish CAPWAP tunnels only with their own active WACs. ⚫ Active WAC services from the active WAC and establishes a CAPWAP link with the AP to manage and provide services for the AP. Switch ⚫ The N+1 backup mode supports active/standby switchover and switchback. AP 42 When the active WAC is faulty or the CAPWAP link between the active WAC and AP fails, the standby WAC takes over Active WAC Enterprise branch 1 When WACs and the network are working properly, APs Enterprise branch 2 Huawei Confidential • When the CAPWAP tunnel between an AP and the active WAC is disconnected, the AP attempts to establish a CAPWAP tunnel with the standby WAC. After the new CAPWAP tunnel is established, the AP restarts and obtains configurations from the standby WAC. During this process, services are affected. Working Process of N+1 Backup CAPWAP tunnel Enterprise HQ Standby WAC ⚫ Active/Standby negotiation: An AP selects an active WAC based on the algorithm and establishes a Switch CAPWAP tunnel with the active WAC. ⚫ WAN Active/Standby switchover: When the active WAC or the CAPWAP link between the active WAC and AP is faulty, the standby WAC sets up a CAPWAP link with the AP and the AP goes online again. Active WAC Active WAC ⚫ Switch Active/Standby switchback: enabled. an After Global switchback is active/standby switchover is performed, a switchback is triggered when the link of the original active WAC recovers. AP Enterprise branch 1 43 Enterprise branch 2 Huawei Confidential • Active/Standby negotiation: The process is similar to that for active WAC selection in dual-link backup, and is not described here. • Active/Standby switchover: When the AP detects a heartbeat packet transmission timeout, it considers that the link between the AP and the active WAC is disconnected and sets up a CAPWAP link with the standby WAC. The AP sets up a CAPWAP link with the standby WAC in the following situations: ▫ If the IP address of the standby WAC is configured on the active WAC, the AP sets up a CAPWAP link with the standby WAC directly. ▫ If the IP address of the standby WAC is not configured on the active WAC, the AP broadcasts Discovery Request packets to discover WACs and selects the standby WAC to establish a CAPWAP link. • Active/Standby switchback: ▫ The AP periodically sends Primary Discovery Request packets to detect the active WAC status. ▫ After the active WAC recovers, it returns a response packet carrying the WAC priority to the AP. When the AP receives the response packet from the active WAC, the AP learns that the active WAC recovers and has a higher priority than its currently connected WAC. If the switchback function is enabled, an active/standby switchback is triggered. ▫ To prevent frequent switchovers caused by network flapping, the WACs perform an active/standby switchback after 20 heartbeat intervals. Example for Configuring N+1 Backup ⚫ Requirement description: CAPWAP tunnel AP_1 is managed and configured by WAC1 (active) and Standby WAC3 WAC3 (standby). 10.1.5.3/24 AP_2 is managed and configured by WAC2 (active) and WAC3 (standby). AP_1 is in the management VLAN 6. The switch functions Active WAC1 Management VLAN for WACs: VLAN 5 Active WAC2 as the DHCP server. The WAC address lists 10.1.5.1 and 10.1.5.3 are carried through the DHCP option field. 10.1.5.1/24 Switch 10.1.5.2/24 AP_2 is in the management VLAN 7. The switch functions as the DHCP server. The WAC address lists 10.1.5.2 and 10.1.5.3 are carried through the DHCP option field. The AP determines the active/standby relationship based on the configurations of the primary and backup WACs. 44 Huawei Confidential Management VLAN for AP_1: VLAN 6 AP_1 Management VLAN for AP_2: VLAN 7 AP_2 N+1 Backup Configuration Roadmap Planning N+1 backup Configuring N+1 backup Verifying the configuration Planning IP addresses and VLANs Configuring N+1 backup Checking N+1 backup Configuring the link switchover mode (Optional) Checking the link switchover mode Planning WAC priorities Configuring the active/standby switchback function Enabling N+1 backup 45 Huawei Confidential Configuring N+1 Backup (1/2) ⚫ On WAC1, configure the IP addresses of the ⚫ On WAC2, configure the IP addresses of the active and standby WACs in the AP system active and standby WACs in the AP system profile and enable N+1 backup. profile and enable N+1 backup. [WAC1-wlan-view] ap-system-profile name test1 [WAC2-wlan-view] ap-system-profile name test2 [WAC1-wlan-ap-system-prof-test1] primary-access ip-address [WAC2-wlan-ap-system-prof-test2] primary-access ip-address 10.1.5.1 10.1.5.2 [WAC1-wlan-ap-system-prof-test1] backup-access ip-address [WAC2-wlan-ap-system-prof-test2] backup-access ip-address 10.1.5.3 10.1.5.3 [WAC1-wlan-ap-system-prof-test1] quit [WAC2-wlan-ap-system-prof-test2] quit [WAC1-wlan-view] ap-group name ap-group1 [WAC2-wlan-view] ap-group name ap-group2 [WAC1-wlan-ap-group-ap-group1] ap-system-profile test1 [WAC2-wlan-ap-group-ap-group2] ap-system-profile test2 [WAC1-wlan-ap-group-ap-group1] quit [WAC2-wlan-ap-group-ap-group2] quit [WAC1-wlan-view] undo ac protect enable [WAC2-wlan-view] undo ac protect enable 46 Huawei Confidential Configuring N+1 Backup (2/2) ⚫ On WAC3, configure the IP addresses of the active and standby WACs in the AP system profile and enable N+1 backup. [WAC3-wlan-view] ap-system-profile name test1 [WAC3-wlan-ap-system-prof- test1] primary-access ip-address 10.1.5.1 [WAC3-wlan-ap-system-prof- test1] backup-access ip-address 10.1.5.3 [WAC3-wlan-ap-system-prof- test1] quit [WAC3-wlan-view] ap-group name ap-group1 [WAC3-wlan-ap-group-ap-group1] ap-system-profile test1 [WAC3-wlan-ap-group-ap-group1] quit [WAC3-wlan-view] ap-system-profile name test2 [WAC3-wlan-ap-system-prof- test2] primary-access ip-address 10.1.5.2 [WAC3-wlan-ap-system-prof- test2] backup-access ip-address 10.1.5.3 [WAC3-wlan-ap-system-prof- test2] quit [WAC3-wlan-view] ap-group name ap-group2 [WAC3-wlan-ap-group-ap-group2] ap-system-profile test2 [WAC3-wlan-ap-group-ap-group2] quit [WAC-wlan-view] undo ac protect enable 47 Huawei Confidential • Note that dual-link backup (HSB or cold backup) and N+1 backup are mutually exclusive. • The ac protect enable command enables dual-link backup globally and disables N+1 backup. The undo ac protect enable command enables N+1 backup and disables dual-link backup. • VRRP HSB and N+1 backup are mutually exclusive, but they can be configured together. That is, VRRP HSB is configured between every two WACs to function as one virtual WAC, and N+1 backup can be configured between different virtual WACs. Verifying the Configuration ⚫ Run the display ac protect command to check N+1 backup information on the WACs. [WAC1-wlan-view] display ac protect -----------------------------------------------------------Protect state : disable Protect AC IPv4 :Protect AC IPv6 :Priority :0 Protect restore : enable ... -----------------------------------------------------------[WAC2-wlan-view] display ac protect -----------------------------------------------------------Protect state : disable Protect AC IPv4 :Protect AC IPv6 :Priority :0 Protect restore : enable ... -----------------------------------------------------------48 Huawei Confidential ⚫ Run the display ap-system-profile command to check the IP addresses of the active and standby WACs. [WAC1] display ap-system-profile name test1 -----------------------------------------------------------AC priority :Protect AC IP address :Primary AC : 10.1.5.1 Backup AC : 10.1.5.3 ... -----------------------------------------------------------[WAC2] display ap-system-profile name test2 -----------------------------------------------------------AC priority :Protect AC IP address :Primary AC : 10.1.5.2 Backup AC : 10.1.5.3 ... ------------------------------------------------------------ Quiz 1. (Single-answer question) An enterprise has high requirements on WLAN reliability and requires WACs to be deployed at different places. Which of the following WAC backup solutions is recommended? ( 49 1. C A. VRRP HSB B. Dual-link cold backup C. Dual-link HSB D. N+1 backup Huawei Confidential ) Summary ⚫ This courses describes WAC reliability technologies on a WLAN, including VRRP HSB, dual- link HSB, dual-link cold backup, and N+1 backup. ⚫ On completion of this chapter, you will be able to master the common WLAN reliability networking architectures and independently establish reliability networking based on the lab environment. 50 Huawei Confidential Recommendations ⚫ 51 Huawei official websites: Enterprise service: https://e.huawei.com/en/ Technical support: https://support.huawei.com/enterprise/en/index.html Online learning: https://www.huawei.com/en/learning Huawei Confidential Acronyms and Abbreviations (1/2) Acronym/Abbreviation 52 Full Name ARP Address Resolution Protocol BFD Bidirectional Forwarding Detection CAPWAP Control and Provisioning of Wireless Access Points DHCP Dynamic Host Configuration Protocol DNS Domain Name Server EFM Ethernet in the First Mile HSB Hot-Standby Backup MAC Media Access Control NAC Network Admission Control STA Station Huawei Confidential Acronyms and Abbreviations (2/2) Acronym/Abbreviation 53 Full Name TCP Transmission Control Protocol UDP User Datagram Protocol VRRP Virtual Router Redundancy Protocol Huawei Confidential Thank you. Bring digital to every person, home, and organization for a fully connected, intelligent world. Copyright © 2022 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice. WLAN Cloud Management Solution Foreword ⚫ With the rapid development of cloud computing, the on-demand cloud service mode becomes more popular so that the traditional network management mode also experiences great changes. In this situation, the cloud-based network management has been a trend, as well as a new model for enterprise network construction, operations and maintenance (O&M). ⚫ This course describes common WLAN cloud-based management networking: cloud-based WAC management and cloud-based AP management. 2 Huawei Confidential Objectives ⚫ 3 On completion of this course, you will be able to: Understand the architecture and main functions of iMaster NCE-Campus. Understand the cloud-based WAC management network architecture. Understand how to configure cloud-based WAC management. Understand the cloud-based AP management network architecture. Understand how to configure cloud-based AP management. Huawei Confidential Contents 1. Introduction to iMaster NCE-Campus 2. Cloud-based WAC Management 3. Cloud-based AP Management 4 Huawei Confidential Introduction to iMaster NCE-Campus As the cloud management platform of the CloudCampus Solution, iMaster NCE-Campus provides services such as ⚫ service configuration and O&M monitoring for network devices, and can function as an authentication server to implement access control on end users. iMaster NCE-Campus Device management service Access authentication service Performance collection service Big data service Carrier network Cloud WAC AP Cloud AP Cloud Cloud Cloud AP firewall switch Site 2 Site Tenant network Site 1 Tenant A 5 Huawei Confidential Tenant B iMaster NCE-Campus Functional Architecture One-stop management Network service planning Device and site management LAN service configuration Network connectivity configuration (general configuration and service configuration of WACs, APs, switches, and firewalls) WAN service configuration Network connectivity Traffic configuration steering policy ACL Security policy Network service monitoring Network monitoring Network service maintenance File management Access control Campus network virtualization WAN virtual network configuration 6 Device plug-and-play Topology management WAN optimization End user monitoring Service alarm Cloud security NAT IP address management Log management Underlay routing domain automation Virtual network management Virtual network management QoS Site-to-site/Site-to-Internet/Site-to-legacy site service orchestration Authentication User Guest Terminal Free management management management and authorization mobility management Network resource pool management Access management Application management Security policy WAN service monitoring Device maintenance Valueadded service Certificate authentication BGP EVPN configuration WAN-side overlay service QoS Redirection Authentication component management External network or service resource management LAN-WAN interconnection Huawei Confidential • The WLAN cloud management technology mainly involves functions such as network service planning and network service monitoring. • This course does not describe how to install and deploy iMaster NCE-Campus. For details, see the iMaster NCE-Campus Product Documentation. Contents 1. Introduction to iMaster NCE-Campus 2. Cloud-based WAC Management 3. Cloud-based AP Management 7 Huawei Confidential Cloud WAC Networking In this architecture, iMaster NCE-Campus is used to centrally manage and configure WLAN devices, ⚫ with the WAC working in cloud mode and APs working in Fit AP mode. ⚫ Registration query center iMaster NCE-Campus: provides unified cloud-based management for Huawei network devices (including WACs, Cloud management platform Gateway APs, routers, switches, and firewalls), and supports independent service provisioning and routine O&M for multi-tenant networks. Cloud WAC ⚫ Registration query center: is used to query the management mode and home cloud management platform (IP address of the platform) of a device. The address of the registration Fit AP query center is preset on a WAC before delivery. ⚫ STA 8 Cloud WAC: controls and manages all APs on a WLAN. STA Huawei Confidential • All WACs running V200R010C00 and later versions support cloud-based management. • Compared with the traditional "WAC + Fit AP" architecture, the cloud-based management architecture has the following advantages: ▫ Automatic deployment through plug-and-play reduces network deployment costs. ▫ All network elements (NEs) are centrally monitored and managed on the cloud management platform. ▫ Cloud solutions usually provide various tools on the cloud, such as the CloudCampus APP. Switching the WAC to the Cloud Mode A WAC must be switched to the cloud mode in one of the following ways before it can register with ⚫ iMaster NCE-Campus: Through DHCP Through the CLI • The DHCP Option 148 parameter is pre-defined on a DHCP server, carrying the specified cloud mode and iMaster NCE-Campus address information. • Switch the WAC to the cloud mode through the CLI or the WAC's web system. • When obtaining an IP address from the DHCP server, the WAC can parse the Option 148 field in the DHCP message and then switches to the cloud mode. 9 • Log in to the WAC and manually configure the address information of iMaster NCE-Campus. Through the registration query center • After a WAC with factory settings connects to an enterprise network, it sends a query request to the registration query center deployed on the Internet using the preset domain name (register.naas.huawei.com) and port number (10020) of the registration query center. • If the query result is the cloud mode, the WAC switches to the cloud mode. Huawei Confidential • The requirements for configuring Option 148 on the DHCP server are as follows: ▫ To use the URL of iMaster NCE-Campus for registration, on the DHCP server, set the Option 148 field to option 148 ascii "agilemode=agilecloud;agilemanage-mode=domain;agilemanage-domain=domainname;agilemanage-port=port-number;ap-agilemode=tradition-fit;". ▫ To use the IP address of iMaster NCE-Campus for registration, on the DHCP server, set the Option 148 field to option 148 ascii "agilemode=agilecloud;agilemanage-mode=ip;agilemanage-domain=ipaddress;agilemanage-port=port-number;ap-agilemode=tradition-fit;". • Log in to the WAC, manually switch the working mode, and configure the IP address of the cloud management platform. ▫ Run the ac-mode cloud command to switch the WAC to a cloud WAC. ▫ Run the cloud-mng controller { url url-string | ip-address ip-address } port port-number [ source-interface { LoopBack loopback-number | Vlanif vlanid } ] command to configure iMaster NCE-Campus address information on the WAC. • A WAC can obtain its working mode and the iMaster NCE-Campus address in following modes in descending order of priority: ▫ Through a DHCP server ▫ Through the CLI or the web system ▫ Through the registration query center Process for a WAC to Be Managed by the Cloud Management Platform (Through DHCP) ⚫ When deploying a WLAN, you can deploy a WAC through plug-and-play (PnP) to simplify initial configuration operations and accelerate WAC onboarding. A WAC can obtain the cloud mode and cloud management platform address information from the DHCP server and register with iMaster NCE-Campus in PnP mode. The process is as follows: Cloud management platform (Cloud) gateway 1 NETCONF 3 2 Manage the WAC. Perform registration and authentication and establish a NETCONF channel. The WAC obtains the working mode and registration address and switches to the obtained mode. Cloud WAC 10 Huawei Confidential • Negotiation phase: ▫ After a WAC with factory settings is connected to the local network, it establishes a communication with the upstream device through PnP VLAN auto-negotiation and functions as a DHCP client to broadcast a DHCP request. After receiving the request, the DHCP server (usually the egress gateway or a standalone device) returns a response packet. When allocating an IP address to the WAC, the DHCP server also sends the cloud mode and iMaster NCE-Campus address information to it through the DHCP Option 148 field. ▫ The WAC parses the Option 148 field to obtain the cloud mode and iMaster NCE-Campus address information and switches to the cloud mode. • Registration and authentication phase: ▫ The WAC uses its CA certificate to register with iMaster NCE-Campus. After the two parties authenticate each other's certificate, a secure NETCONF channel is established between the WAC and iMaster NCE-Campus. • Cloud management phase: ▫ After the NETCONF transmission channel is established, you can remotely manage and maintain the WAC through iMaster NCE-Campus. Process for a WAC to Be Managed by the Cloud Management Platform (Through the Registration Query Center) ⚫ A WAC can obtain the cloud mode and cloud management platform address from the registration query center and then register with iMaster NCE-Campus in PnP mode. The process is as follows: Cloud management platform Manage the WAC. 3 Registration query center Synchronize device information. 1 Perform registration and authentication and establish a NETCONF channel. The WAC obtains the working mode and registration address and switches to the obtained mode. 2 (Cloud) gateway Cloud WAC 11 Huawei Confidential • Negotiation phase: ▫ After a network administrator adds a device ESN on iMaster NCE-Campus, iMaster NCE-Campus automatically synchronizes the ESN to the registration query center. The registration query center records the device ESN and iMaster NCE-Campus address. ▫ After the WAC with factory settings is connected to the local network, it establishes a communication with the upstream device through PnP VLAN auto-negotiation, obtains an IP address from the DHCP server, and accesses the Internet through the egress gateway. ▫ The WAC sends an HTTP packet to the registration query center for query based on its own ESN as well as the preset domain name register.naas.huawei.com and port number 10020 of the registration query center. The WAC thereby obtains the cloud mode and iMaster NCE-Campus address information and switches to the cloud mode. • Registration and authentication phase: ▫ The WAC uses its CA certificate to register with iMaster NCE-Campus. After the two parties authenticate each other's certificate, a secure NETCONF channel is established between them. • Cloud management phase: ▫ After the NETCONF channel is established, you can remotely manage and maintain the WAC through iMaster NCE-Campus. Fit AP Onboarding Process ⚫ The following figure shows how a Fit AP registers with and joins a WAC in the cloud-based WAC management solution. Fit AP Cloud WAC Cloud management platform The WAC goes online successfully. Deliver AP entries and license information. AP onboarding process The AP discovers the WAC and initiates registration. A CAPWAP tunnel is established, and the AP goes online successfully. Check AP entries and licenses and allow the AP to go online. Report AP status. Deduct license resources. 12 Huawei Confidential • When a WAC goes online on iMaster NCE-Campus, iMaster NCE-Campus delivers AP entries and corresponding license resources to the WAC based on the association relationships between the WAC and APs. ▫ After connecting to the network, a Fit AP sends a Discovery Request packet to the WAC, discovers the WAC based on the Discovery Response packet replied by the WAC, and initiates registration with it. The process is the same as that in the traditional scenario. ▫ The WAC determines whether to allow the AP to go online based on the AP entries and licenses. If the AP matches an entry and the license for the AP has not expired, the WAC allows the AP to go online. ▫ A CAPWAP tunnel is established between the AP and WAC, and the AP goes online successfully. ▫ The WAC reports the AP online status to iMaster NCE-Campus. ▫ iMaster NCE-Campus deducts the corresponding license resources. Example for Configuring Cloud-based WAC Management ⚫ Requirement description: An enterprise hopes to deploy the cloud-based WAC management solution on its intranet to centrally manage and monitor the WLAN on the cloud management platform. Core switch Cloud WAC An engineer manually switches the WAC's working mode and configures the cloud management platform address, so that the WAC can register with the cloud management Access switch platform. The planned information is as follows: ◼ IP address of the cloud WAC: 192.168.200.2/24 ◼ IP address and port number of the cloud management platform: Fit AP 172.21.10.1/24 and 10020 ◼ A core switch functions as the DHCP server to assign IP addresses to Fit APs, and the assigned IP addresses and the WAC's IP address reside on the same network segment. 13 Huawei Confidential STA STA STA Cloud management platform Configuration Roadmap ⚫ ⚫ ⚫ ⚫ ⚫ ⚫ Perform pre-configurations for WAC onboarding on iMaster NCE-Campus: Create a site of the WAC type and add the WAC ESN to the site. Import the license. Complete network connectivity configurations to ensure that the WAC is reachable to the cloud management platform and Fit APs. Switch the WAC's working mode to cloud mode. Start Perform pre-configurations for WAC onboarding on NCE. Configure network connectivity. Switch the WAC's working mode. Log in to the WAC and configure address information of the cloud management platform. Configure address information of the cloud management platform. Perform pre-configurations for Fit AP onboarding on iMaster NCE-Campus: Perform pre-configurations for Fit AP onboarding on NCE. Import the AP list. Configure association relationships between APs and the WAC. Log in to the cloud WAC and configure Fit AP onboarding and wireless services. 14 Huawei Confidential Configure WAC onboarding. Configure Fit AP onboarding and wireless services. End Configure Fit AP onboarding. Configuring WAC Onboarding (1/2) ⚫ Perform pre-configurations for WAC onboarding on iMaster NCE-Campus: Log in to iMaster NCE-Campus. Choose Design > Device Management > Add Device > Add, add a WAC as prompted, and click OK. 15 Huawei Confidential Configuring WAC Onboarding (2/2) ⚫ Log in to the WAC and run the ac-mode cloud command to switch the WAC to the cloud mode. [WAC3] ac-mode cloud Warning: This operation will switch the AC mode to cloud, Continue? [Y/N] y This operation will take several minutes, please wait... Warning: The authentication mode is switched to SN authentication. Ensure that the APs added offline have SN information. Otherwise, configurations of these APs may be lost.. ⚫ Run the following command to configure iMaster NCE-Campus address information: [WAC3] cloud-mng controller ip-address 172.21.10.1 port 10020 source-interface Vlanif 100 16 Huawei Confidential Checking the WAC Online Status ⚫ Log in to iMaster NCE-Campus. On the Device Management page, verify that the WAC status is Normal, which indicates that the WAC goes online successfully. 17 Huawei Confidential Configuring Fit AP Onboarding ⚫ Log in to the WAC's web system through iMaster NCE-Campus and configure the CAPWAP source address. In the device list of iMaster NCE-Campus, click the WAC name. The device details page is displayed. Click Open Web System in the upper right corner to access the WAC's web system. Configure the CAPWAP source address. 18 Huawei Confidential Checking the Fit AP Online Status ⚫ Log in to iMaster NCE-Campus. On the WAC management page, verify that the AP status is Normal and the running status is normal, which indicates that the AP goes online successfully. 19 Huawei Confidential Contents 1. Introduction to iMaster NCE-Campus 2. Cloud-based WAC Management 3. Cloud-based AP Management 20 Huawei Confidential Cloud AP Networking ⚫ The cloud AP networking is also a cloud-based management architecture. Different from the "cloud WAC + Fit AP" networking, the cloud AP networking does not need a WAC. Registration query center Cloud management platform ⚫ APs in this networking work in cloud mode and are remotely managed and configured on iMaster NCE-Campus in a unified manner. Gateway ⚫ After a cloud AP is deployed, the network administrator does not need to go to the site for cloud AP software commissioning. After power-on, the cloud Access switch AP automatically connects to the specified cloud management platform to load specified system files such as the configuration file, software package, and patch file. In this manner, the cloud AP can go online with zero touch Cloud AP configuration. The network administrator can deliver configurations to cloud APs through the cloud management platform anytime and anywhere, facilitating batch service configurations. STA STA ⚫ This networking is simple and cost-effective, and requires no WACs. It is applicable to small- and medium-sized enterprises, such as chain stores, shopping malls, and supermarkets. 21 Huawei Confidential Switching an AP to the Cloud Mode ⚫ APs work in Fit mode by default, and need to be switched to the cloud mode so that they can be centrally managed by iMaster NCE-Campus. An AP can be switched to the cloud mode in any of the following ways: Through DHCP Through the CLI • On the DHCP server, the Option 148 field is configured to carry the AP mode and iMaster NCE-Campus information, based on which the AP restarts and switches to the cloud mode. • After the command for switching an AP to the cloud mode is configured, the system displays a message, indicating that the current configuration will be cleared and the AP will restart. After the AP restarts, it switches to the cloud mode. • Log in to the cloud AP and manually configure the address information of iMaster NCE-Campus. 22 Through the CloudCampus APP Through the registration query center • On the CloudCampus APP, scan the barcode of an AP or log in to the AP through the management SSID and then switch it to the cloud mode. • An AP uses the registration query center's URL and port number that are preconfigured or obtained through a software upgrade to access the registration query center, obtains the device management mode based on its ESN, and restarts to switch to the cloud mode. Huawei Confidential • The requirements for configuring the Option 148 field of the DHCP server are as follows: ▫ To register a cloud AP with iMaster NCE-Campus using the URL of iMaster NCE-Campus, on the DHCP server, set the Option 148 field to option 148 ascii "agilemode=agile-cloud;agilemanage-mode=domain;agilemanagedomain=domain-name;agilemanage-port=port-number;apagilemode=agile-cloud;". ▫ To register a cloud AP with iMaster NCE-Campus using the IP address of iMaster NCE-Campus, on the DHCP server, set the Option 148 field to option 148 ascii "agilemode=agile-cloud;agilemanagemode=ip;agilemanage-domain=ip-address;agilemanage-port=portnumber;ap-agilemode=agile-cloud;". • By default, an AP works in Fit mode. You can switch the AP to the cloud mode through the CLI: ▫ Run the ap-mode-switch cloud command to switch the AP to the cloud mode. ▫ Run the cloud-mng controller { ip-address ip-address | url url-string } port port-number command to configure the IP address or URL of iMaster NCECampus. Process for an AP to Be Managed by the Cloud Management Platform (Through DHCP) ⚫ An AP is managed by iMaster NCE-Campus through NETCONF. This process involves the following phases: DHCP phase, registration and authentication phase, and iMaster NCE-Campus unified management phase, as shown in the following figure. Cloud management platform 3 iMaster NCE-Campus manages APs in a unified manner. 1 During the DHCP phase, the AP switches to the cloud mode. NETCONF Gateway 2 Perform registration and authentication and establish a NETCONF channel. Cloud AP 23 Huawei Confidential • DHCP phase: ▫ If an AP is unconfigured, the automatic address obtaining function is enabled by default on the default management interface VLANIF 1, and the AP initiates a DHCP request to apply for an IP address. After receiving the request, the DHCP server replies with a DHCP response packet carrying iMaster NCE-Campus information in the Option 148 field. After receiving the response packet, the AP parses the Option 148 field in the packet, restarts, and switches to the cloud mode. ▫ After the AP switches to the cloud mode, it sends a DHCP request again, parses the Option 148 field in the response packet to obtain the IP address/URL of iMaster NCE-Campus, and saves the information locally. Alternatively, you can use commands to configure the IP address/URL of iMaster NCE-Campus on the AP. If the AP obtains the IP address/URL of iMaster NCE-Campus through both DHCP and the CLI, the information obtained through DHCP is preferentially used. • Registration and authentication phase: ▫ After obtaining the IP address/URL of iMaster NCE-Campus, the AP sends a connection request carrying its own certificate. iMaster NCE-Campus authenticates the AP certificate first. If the authentication succeeds, it replies with a response packet carrying its CA certificate. The AP will then authenticate the CA certificate. After the bidirectional authentication succeeds, a NETCONF transmission channel is established. • iMaster NCE-Campus unified management phase: ▫ After the NETCONF transmission channel is established, you can manage and operate the AP on iMaster NCE-Campus. All the data exchanged between iMaster NCE-Campus and the AP will be encrypted. Process for an AP to Be Managed by the Cloud Management Platform (Through the Registration Query Center) ⚫ Two HTTP/2 connections are established in the process where an AP is managed by the cloud management platform through the registration query center: iMaster NCE-Campus connects to the registration query center through HTTP/2 to synchronize information about the AP to be managed. The AP establishes an HTTP/2 connection with the registration query center, switches the mode, and obtains the NCE address information. AP Registration query center Establish an HTTP/2 bidirectional authentication connection. Establish an HTTP/2 bidirectional authentication connection. Upload the device ESN and cloud management platform information. Send a query packet carrying the device ESN. Switch to the cloud mode. Send a response packet carrying the cloud mode. Establish an HTTP/2 bidirectional authentication connection. Send a query packet carrying the device ESN. Send a response packet carrying cloud management platform information. Perform registration and authentication. 25 Huawei Confidential Cloud management platform Import information about the AP to be managed. Example for Configuring Cloud-based AP Management ⚫ Requirement description: An enterprise hopes to deploy the cloud-based AP management solution on its intranet to centrally manage and monitor the WLAN Core switch on the cloud management platform. A core switch functions as the DHCP server to allocate IP addresses to APs. The DHCP Option 148 field is configured with the AP cloud mode and the IP address and port number of the cloud Access switch management platform. Through DHCP, an AP automatically switches to the cloud mode and obtains the IP address of the cloud management platform, and then Cloud AP registers with the cloud management platform and goes online. The planned information is as follows: ◼ DHCP address pool for APs: 10.23.200.0/24 ◼ IP address and port number of the cloud management platform: 172.21.10.1/24 and 10020 26 Huawei Confidential STA Cloud management platform Configuration Roadmap ⚫ ⚫ Perform pre-configurations for AP onboarding on iMaster NCE-Campus: Import the ESN of the AP and the related CA certificate. Add the AP to be imported to the site. Import the license. Complete network connectivity configurations to ensure that the AP and cloud management platform are reachable to each other. ⚫ Perform pre-configurations for AP onboarding on NCE. Configure network connectivity. DHCP server configuration: Configure the AP cloud mode and the IP address and port number of the cloud management platform in the DHCP Option 148 field. ⚫ Start AP onboarding: An unconfigured AP connects to the network, obtains information from the DHCP server, and goes online on the cloud Configure the DHCP server. Onboard the AP and configure wireless services. management platform. ⚫ Wireless service configuration: Log in to the cloud AP and configure wireless services. 27 Huawei Confidential End Configuring iMaster NCE-Campus ⚫ Manage APs in a unified manner through iMaster NCE-Campus. The procedure is as follows: Log in to iMaster NCE-Campus. Choose Design > Device Management > Add Device > Add, add an AP as prompted, and click OK. 28 Huawei Confidential Configuring the DHCP Server ⚫ Configure VLANIF 200 on the core switch to allocate an IP address to the AP, and configure the DHCP Option 148 field to carry the AP cloud mode the IP address and port number of the cloud management platform. [SW-Core] interface Vlanif 200 [SW-Core-Vlanif200] dhcp select interface [SW-Core-Vlanif200] dhcp server option 148 ascii "agilemode=agile-cloud;agilemanage-mode=ip;agilemanagedomain=172.21.10.1;agilemanage-port=10020;ap-agilemode=agile-cloud;" [SW-Core-Vlanif200] quit ⚫ After the AP starts, log in to the core switch and check information obtained by the AP such as the cloud management platform information. [SW-Core] display ip pool interface Vlanif200 used ... Option-value : "agilemode=agile-cloud;agilemanage-mode=ip;agilemanage-domain=172.21.10.1;agilemanageport=10020;ap-agilemode=agile-cloud;" ... 29 Huawei Confidential Checking the AP Status ⚫ Log in to iMaster NCE-Campus, choose Design > Device Management, and verify that the AP status is Normal, which indicates that the AP goes online successfully. In this example, AP5 is in cloud mode. 30 Huawei Confidential Quiz 1. (Multiple-answer question) In the cloud-based AP management solution, which of the following methods can be used to switch an AP to the cloud mode? ( A. Through DHCP B. Through the registration query center C. Through the CLI D. Through the CloudCampus APP 31 Huawei Confidential 1. ABCD ) Summary ⚫ This course describes the WLAN cloud-based management architecture, including cloud- based WAC management and cloud-based AP management. ⚫ On completion of this course, you will understand the common WLAN cloud-based management networking and independently set up a cloud management network based on the actual environment. 32 Huawei Confidential Recommendations ⚫ 33 Huawei official websites: Enterprise service: https://e.huawei.com/en/ Technical support: https://support.huawei.com/enterprise/en/index.html Online learning: https://www.huawei.com/en/learning Huawei Confidential Acronyms and Abbreviations (1/2) Acronym/Abbreviation 34 Full Name ACL Access Control List BGP Border Gateway Protocol CA Certification Authority CAPWAP Control and Provisioning of Wireless Access Points DHCP Dynamic Host Configuration Protocol ESN Equipment Serial Number EVPN Ethernet VPN HTTP Hypertext Transfer Protocol LAN Local Area Network NAT Network Address Translation Huawei Confidential Acronyms and Abbreviations (2/2) Acronym/Abbreviation 35 Full Name NETCONF Network Configuration Protocol PnP Plug and Play QoS Quality of Service SSID Service Set Identifier WAN Wide Area Network Huawei Confidential Thank you. 把数字世界带入每个人、每个家庭、 每个组织,构建万物互联的智能世界。 Bring digital to every person, home, and organization for a fully connected, intelligent world. Copyright© 2022 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice. User Access and Authentication Foreword ⚫ As wireless communication is based on open media, the security performance of a wireless local area network (WLAN) becomes the main focus of concern. ⚫ IEEE 802.11-based WLANs provide increasingly higher wireless access bandwidth and carry more and more services, which in turn poses higher requirements on WLAN security. How to ensure user access security and data transmission security is a challenge for WLANs. ⚫ This course introduces you to user access authentication security policies, implementation of STA blacklist and whitelist, and common access authentication modes. This course also describes the implementation and configurations of 802.1X, MAC address, and Portal authentication modes. 2 Huawei Confidential Objectives ⚫ 3 On completion of this course, you will be able to: Describe the basic process for WLAN access. Understand the implementation of the STA blacklist and whitelist. Describe common user access security policies. Understand how to configure different security policies. Describe common access control technologies. Understand how to configure different access control technologies. Huawei Confidential Contents 4 1. User Access Security 2. STA Blacklist and Whitelist 3. Security Policy 4. Access Control Huawei Confidential User Access Security A set of security measures are taken to safeguard STA access on a WLAN, and secure association is ⚫ established through authentication to ensure that all communication parties have valid identities. The detailed process for users to access a WLAN is as follows: Access Scan Link authentication Authentication Association 5 Access authentication Key negotiation Data encryption Network access Huawei Confidential Link authentication: • Open system authentication • Shared key authentication Association: • After link authentication is complete, a STA initiates link service negotiation using Association frames. • Whether a STA can associate with an AP is determined by the maximum number of access STAs supported by the AP and configured user access control functions, such as STA blacklist and whitelist and control over the number of users. Access authentication security policies: • Open • Wired equivalent privacy (WEP) • Wi-Fi Protected Access (WPA) • WPA2 • WPA3 • WLAN Authentication and Privacy Infrastructure (WAPI) Link Authentication To ensure wireless link security, an AP needs to authenticate STAs that attempt to access the AP. IEEE 802.11 ⚫ defines two link authentication modes: open system authentication and shared key authentication. Open system authentication: No authentication, allowing any STA to be successfully authenticated. Shared key authentication: The same shared key is preconfigured on a STA and an AP. During link authentication, the AP checks whether the STA has the same shared key. If so, the STA is authenticated successfully. If not, STA authentication fails. Shared key authentication is used for link authentication only when the access authentication security policy is ⚫ static WEP. Otherwise, open system authentication is used. STA AP STA AP Authentication Request Authentication Request Authentication Response Authentication Response (Challenge) Authentication Response (Encrypted Challenge) Authentication Response (success) Open system authentication process 6 Shared key authentication process Huawei Confidential • The shared key authentication process is as follows: ▫ The STA sends an Authentication Request frame to the AP. ▫ The AP generates a challenge and sends it to the STA. ▫ The STA uses the preconfigured key to encrypt the challenge and sends the encrypted challenge to the AP. ▫ The AP uses the preconfigured key to decrypt the encrypted challenge and compares the decrypted challenge with the challenge earlier sent to the STA. If the two challenges are the same, the STA is authenticated successfully. Otherwise, STA authentication fails. Contents 7 1. User Access Security 2. STA Blacklist and Whitelist 3. Security Policy 4. Access Control Huawei Confidential Overview of the STA Blacklist and Whitelist On a WLAN, a STA blacklist or whitelist can be configured to filter access from STAs based on specific ⚫ rules. The blacklist or whitelist allows authorized STAs to connect to the WLAN and rejects access from unauthorized STAs. A whitelist contains MAC addresses of STAs that are allowed to connect to a WLAN. After the STA whitelist function is enabled, only the STAs matching the whitelist can connect to the WLAN. A blacklist contains MAC addresses of STAs that are not allowed to connect to a WLAN. After the STA blacklist function is enabled, STAs matching the blacklist cannot connect to the WLAN. STA1 STA2 STA1 AP Switch STA2 AP Switch WAC STA3 STA3 STA whitelist 8 WAC STA blacklist Huawei Confidential • STA whitelist: ▫ As shown in the left figure, visiting employees often bring their laptops in an AP's coverage area on a campus network. If only STAs of a few local employees are allowed to connect to the WLAN, the enterprise can configure the whitelist function on the WAC and add MAC addresses of these STAs to the whitelist. For example, STA2 in the figure is added to the whitelist. Then only STA2 can connect to the WLAN, and STAs not in the whitelist (STA1 and STA3 in the figure, for example) cannot connect to the WLAN through the AP. • STA blacklist: ▫ As shown in the right figure, many STAs of local employees exist in an AP's coverage area on a campus network. Guests or visiting employees sometimes bring their laptops to this AP's coverage area. If only STAs of guests or visiting employees are not allowed to connect to the WLAN, the enterprise can configure the blacklist function the WAC and add MAC addresses of these STAs to the blacklist. For example, STA3 is added to the blacklist. Then STA3 cannot connect to the WLAN through the AP, and STAs not in the blacklist (STA1 and STA2 in the figure, for example) can connect to the WLAN. Implementation of the STA Blacklist and Whitelist The flowchart for implementing the STA blacklist ⚫ Start and whitelist function is described as follows: The device checks the access control mode of a STA. If the whitelist function is enabled, the device checks Check the access control mode of the STA. The whitelist function enabled. whether the source MAC address of the packet is in the whitelist. If so, the device allows the STA to go Is the whitelist empty? online. If not, the device rejects the STA's access request. If the blacklist function is enabled, the device checks whether the source MAC address of the packet is in the blacklist. If so, the device rejects the STA's access request. If not, the device allows the STA to go online. If neither the blacklist nor the whitelist function is The blacklist and whitelist function is disabled. The blacklist function enabled. Yes No No Is the source MAC address in the whitelist? Is the source MAC address in the blacklist? Yes Yes No STA access allowed enabled, STAs are allowed to go online. STA access denied 9 Huawei Confidential • If the STA whitelist or blacklist function is enabled but the whitelist or blacklist is empty, all STAs can connect to the WLAN. • Multiple STA whitelist and blacklist profiles can be configured on a WLAN device and bound to different VAP profiles or AP system profiles. In a VAP profile or an AP system profile, either the STA whitelist profile or STA blacklist profile takes effect at one time. STA Whitelist Configuration ⚫ A STA whitelist profile contains MAC addresses of STAs allowed to connect to the WLAN. To allow only a few STAs to connect to the WLAN, configure a STA whitelist profile and bind it to an AP system profile or a VAP profile. When a STA whitelist is bound to both an AP system profile and a VAP profile, a STA that does not match any rule cannot go online. ⚫ The effective scope of the STA whitelist profile differs according to the profiles to which it is applied. AP system profile: The STA whitelist profile takes effect based on the AP. If an AP uses the AP system profile, the STA whitelist profile takes effect on all STAs connected to the AP (including all its VAPs). VAP profile: The STA whitelist profile takes effect based on the VAP. If an AP uses the VAP profile, the STA whitelist profile takes effect on all STAs on the corresponding VAP. [WAC-wlan-view] sta-whitelist-profile name sta-whitelist [WAC-wlan-whitelist-prof-sta-whitelist] sta-mac mac-address //Add the MAC address of a STA. [WAC-wlan-whitelist-prof-sta-whitelist] oui oui //Add the OUI of a STA. [WAC-wlan-whitelist-prof-sta-whitelist] quit 10 Huawei Confidential • When configuring the STA blacklist and whitelist function, note that some mainstream smart terminals (such as Android terminals) can use random MAC addresses to associate with a WLAN to improve privacy protection capabilities. The MAC addresses used by terminals to associate with a WLAN may not be their real physical MAC addresses. Therefore, MAC address-based services cannot take effect. STA Blacklist Configuration ⚫ A STA blacklist profile contains MAC addresses of wireless terminals forbidden to connect to the WLAN. To forbid only a few STAs to connect to the WLAN, configure a STA blacklist profile and bind it to an AP system profile or a VAP profile. When a STA blacklist is bound to both an AP system profile and a VAP profile, a STA that does not match any rule cannot go online. ⚫ The effective scope of the STA blacklist profile differs according to the profiles to which it is applied. AP system profile: The STA blacklist profile takes effect based on the AP. If an AP uses the AP system profile, the STA blacklist profile takes effect on all STAs connected to the AP (including all its VAPs). VAP profile: The STA blacklist profile takes effect based on the VAP. If an AP uses the VAP profile, the STA blacklist profile takes effect on all STAs on the corresponding VAP. [WAC-wlan-view] sta-blacklist-profile name sta-blacklist [WAC-wlan-blacklist-prof-sta-blacklist] sta-mac mac-address //Add the MAC address of a STA. [WAC-wlan-whitelist-prof-sta-whitelist] quit 11 Huawei Confidential • Note that a STA blacklist profile does not support OUI-based configuration commands. Contents 12 1. User Access Security 2. STA Blacklist and Whitelist 3. Security Policy 4. Access Control Huawei Confidential Overview of Security Policies ⚫ The following WLAN security policies are available: open, WEP, WPA, WPA2, WPA3, and WAPI. Each security policy has a series of security mechanisms, including link authentication used to establish a wireless link, user authentication used when users attempt to connect to a wireless network, and data encryption used during data transmission. 13 OPEN WEP WPA • Open authentication means no authentication and no encryption, and any one can connect to the network without authentication. • WEP encryption uses a static shared key. STAs use the same WEP key for encryption, resulting in low security. • WPA defines the Temporal Key Integrity Protocol (TKIP) encryption algorithm based on WEP. WPA2 WPA3 WAPI • Subsequent to WPA, IEEE 802.11i launched WPA2, which uses a more secure encryption algorithm — Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP). • WPA3 introduces a variety of new functions based on WPA2 and leverages Protected Management Frames (PMF) to protect data security on a WLAN. • WAPI provides higher security than WEP and WPA and consists of WAI and WPI. Huawei Confidential • Open: involves no authentication or encryption, which is not mentioned here. Application Scenarios of WLAN Security Policies Security policy for home and SOHO networks • • 14 Home and SOHO networks have low requirements on WLAN security. Typically, WPA/WPA2/WPA3Personal is applicable. This scenario requires no authentication server. Huawei Confidential Security policy for retail and hotel industries • • In the retail industry, WPA/WPA2-PPSK authentication can be used for scanners. Each scanner is configured with a unique key and connected to the same SSID. In guest access scenarios of the hotel industry, WPA/WPA2PPSK authentication can be used to authenticate and authorize guests. Security policy for carrier networks Security policy for enterprise networks • • Enterprise networks require high WLAN security. Typically, 802.1X-based WPA/WPA2/WPA3Enterprise is applicable. This scenario requires an authentication server, involving complex configurations. • • Use security policies unique to STAs, such as WEP, WPA/WPA2/WPA3, or WAPI. Combine security policies and user access authentication. Common access authentication modes include 802.1X, MAC address, and Portal authentication. WEP ⚫ Wired Equivalent Privacy (WEP), defined in IEEE 802.11, is used to protect data of authorized users from being intercepted by third parties during transmission on a WLAN. Static WEP: uses a shared key to authenticate STAs and encrypt data. All STAs associating with the same SSID use the same key to access the WLAN. Dynamic WEP: works with 802.1X authentication. An 802.1X authentication server dynamically delivers different WEP encryption keys to STAs for encryption. STA AP Authentication Request Authentication Response (Challenge) Authentication Response (Encrypted Challenge) Authentication Response (success) Static WEP 15 Huawei Confidential • Static WEP: uses the RC4 algorithm to encrypt data through a 64-bit, 128-bit, or 152-bit encryption key. Each encryption key contains a 24-bit IV generated by the system. Therefore, the length of the key configured on the WLAN server and STA is 40 bits, 104 bits, or 128 bits. A WEP security policy defines a link authentication mechanism and a data encryption mechanism. Link authentication mechanisms include open system authentication and shared key authentication. ▫ If open system authentication is used, data is not encrypted during link authentication. After a STA goes online, service data can be encrypted by WEP or not, depending on the configuration. ▫ If shared key authentication is used, key negotiation is completed during link authentication. After a STA goes online, service data is encrypted using the negotiated key. • Dynamic WEP: Before IEEE 802.11i is launched, no unified wireless encryption standard is available. Vendors enhance WEP encryption by leveraging 802.1X authentication to achieve dynamic WEP encryption. The 40-bit, 104-bit, or 128-bit dynamic WEP key is dynamically generated and delivered by the 802.1X authentication server. In this manner, different WEP keys are used for encrypting different STAs. In the link authentication phase of dynamic WEP, only open system authentication is supported. After STAs go online, service data is encrypted using the key that is dynamically generated and delivered by the server. • WEP keys are exchanged in clear text, which is insecure and not recommended. WPA/WPA2 ⚫ WPA still uses RC4 as the core encryption algorithm, and proposes the TKIP encryption algorithm based on WEP. Subsequent to WPA, WPA2 uses the CCMP encryption algorithm, which is more secure. ⚫ Both WPA and WPA2 support 802.1X access authentication and the TKIP or CCMP encryption algorithm. With almost the same security level, they mainly differ in the protocol packet format. ⚫ WPA/WPA2 is available in the enterprise and personal editions, both involving link authentication, access authentication, key negotiation, and data encryption. WPA/WPA2 Personal WPA/WPA2 WPA/WPA2 Enterprise 16 • WPA/WPA2-Personal uses pre-shared keys (WPA/WPA2-PSK) for simpler implementation and management. • No dedicated authentication server is required, and only one PSK needs to be set in advance on each STA and WLAN node. In this way, users only need to enter the correct PSK on the STAs for authentication. • WPA/WPA2-802.1X access authentication is used. • An authentication server and Extensible Authentication Protocol (EAP) are used for authentication. • Users provide credentials for authentication, such as the user name and password, and are authenticated by a specified authentication server (typically a RADIUS server). Huawei Confidential • WPA/WPA2-Enterprise is typically used on large-scale enterprise networks. WPA/WPA2-PSK (1/2) ⚫ Access authentication phase: A PSK needs to be preconfigured on each WLAN node, which is used only for authentication but not for encryption. ⚫ Key negotiation phase: A pairwise transient key (PTK) and a group temporal key (GTK) are generated based on the pairwise master key (PMK) generated during access authentication. The method for generating a PMK varies depending on the PSK format: If a PSK is in hexadecimal format, it is used as the PMK. If a PSK is a string of characters, the PMK is calculated using the hash algorithm based on the PSK and SSID. AP STA AP STA Generates an SNonce. Generates a PTK. Installs a PTK. EAPOL-Key (ANonce) EAPOL-Key (SNonce, MIC, RSNE) EAPOL-Key (Key RSC, ANonce, MIC, RSNE, GTK, IGTK) EAPOL-Key (MIC) PTK negotiation process 17 Generates an ANonce. EAPOL-Key (GNonce, Key RSC, MIC, GTK, IGTK) Generates a PTK. Generates a random number GNonce. EAPOL-Key (GNonce, MIC) Installs a PTK. GTK negotiation process Huawei Confidential • The WPA/WPA2 security policy supports only open system authentication in the link authentication phase, and is not mentioned here. • Unicast key negotiation is completed through a four-way handshake by exchanging Extensible Authentication Protocol over LAN (EAPOL)-Key frames. ▫ The AP sends an EAPOL-Key frame with an authenticator nonce (ANonce), which is a random number, to the STA. ▫ The STA calculates the PTK based on its own MAC address, MAC address of the AP, PMK, ANonce, and supplicant nonce (SNonce). Then the STA sends an EAPOL-Key frame to the AP. This frame carries the SNonce, robust security network element (RSNE), and message integrity code (MIC). The AP then calculates the PTK using its own MAC address, MAC address of the STA, PMK, ANonce, and SNonce, and validates the MIC to determine whether the STA's PMK is the same as its own PMK. ▫ The AP sends an EAPOL-Key frame carrying the ANonce, RSNE, MIC, and encrypted GTK to the STA, requesting the STA to install the PTK. ▫ The STA sends an EAPOL-Key frame to the AP, notifying the AP that the PTK has been installed and will be used. After receiving the frame, the AP installs the PTK. • Group key negotiation is completed through a two-way handshake, which begins after a PTK is generated and installed through a four-way handshake. ▫ The AP calculates the GTK, uses the unicast key to encrypt the GTK, and sends an EAPOL-Key frame to the STA. ▫ After receiving the EAPOL-Key frame, the STA validates the MIC, decrypts and installs the GTK, and sends an EAPOL-Key ACK frame to the AP. After receiving the EAPOL-Key ACK frame, the AP validates the MIC and installs the GTK. WPA/WPA2-PSK (2/2) ⚫ Data encryption phase: WPA/WPA2 supports TKIP and CCMP algorithms for data encryption: TKIP encryption algorithm: It is inherited from WEP and consists of data encryption and information integrity check. ◼ Data encryption: The stream cipher mechanism is used. The encryption key is generated based on the PTK, sender's MAC address, and packet sequence number. ◼ Information integrity check: The message integrity code (MIC) authentication and replay attack prevention are supported. CCMP encryption algorithm: It uses the Advanced Encryption Standard (AES) encryption algorithm based on the block cipher mechanism. AES is a more secure encryption algorithm. In addition to data encryption and integrity check, AES can effectively defend against network attacks such as brute force cracking. ◼ Data encryption: The AES encryption algorithm is used. ◼ Information integrity check: The CBC-MAC mode is used to check data integrity. Data encryption and decryption STA1 19 Information integrity check AP Switch WAC Huawei Confidential • CCMP uses the AES encryption algorithm, Counter Mode for encryption, and CBCMAC for integrity check. • CBC-MAC is short for cipher block chaining message authentication code. It is an algorithm used to check data integrity. WPA/WPA2-802.1X (1/2) ⚫ Access authentication: The 802.1X authentication system consists of the client, access device, and authentication server. EAP is used for information exchange between components in the authentication system. 802.1X client AP Access device (WAC) Authentication server The EAP packets transmitted between the client and access device are encapsulated in EAPOL format and transmitted on the LAN. You can determine to use the EAP termination or EAP relay authentication modes between the access device and authentication server based on the client support and network security requirements. Common EAP authentication methods include MD5-Challenge, EAP-TLS, EAP-TTLS, and EAP-PEAP. When EAP termination is used, only MD5-Challenge authentication is supported. When EAP relay is used, all the preceding authentication methods are supported. 20 Huawei Confidential • Compared with the EAP relay mode, in EAP termination mode, the access device randomly generates an MD5 challenge for encrypting the user password, and sends the user name, MD5 challenge, and password encrypted by the client to the RADIUS server for authentication. In EAP relay mode, the challenge used to encrypt the user password is generated by the authentication server, and the access device is only responsible for encapsulating EAP packets into RADIUS packets and transparently transmitting them to the authentication server. The entire authentication process is implemented by the authentication server. WPA/WPA2-802.1X (2/2) ⚫ ⚫ Key negotiation: A PMK can be generated based on EAP-TLS or EAP-PEAP, as shown in the following figures. Data encryption: WPA/WPA2-802.1X supports TKIP and CCMP algorithms for data encryption. STA AP WAC RADIUS server AP WAC RADIUS server Open system authentication Open system authentication Association Association EAP start EAP request for user identification EAP start EAP request for user identification EAP response for user identification User identification PEAP authentication start PEAP authentication start EAP response for user identification User identification Server certificate (public key) Server certificate (public key) Sends messages such as the encryption algorithm list, TLS protocol version, and session ID Sends messages such as the encryption algorithm list, TLS protocol version, and session ID STA certificate STA certificate Server certificate (public key) Server certificate (public key) Authentication success Authentication success, a PMK generated STA certificate STA certificate Authentication success Authentication success, a PMK generated EAP-TLS-based PMK generation process 21 STA Huawei Confidential EAP-PEAP-based PMK generation process WPA/WPA2-PPSK (1/2) ⚫ In WPA/WPA2-PSK authentication, all STAs connected to a specified SSID use the same key, which may bring security risks. ⚫ WPA/WPA2-PPSK authentication inherits the advantages of WPA/WPA2-PSK authentication and is easy to deploy. In addition, WPA/WPA2-PPSK authentication provides different PSKs for different STAs, improving network security. WPA/WPA2-PSK WPA/WPA2-PPSK SSID = huawei PSK = huawei123 PSK = huawei123 • In WPA/WPA2-PSK authentication, all STAs connected to a specified SSID use the same key, which may bring security risks. 22 SSID = huawei PSK = huawei123 PSK = huawei456 • Multiple users connected to the same SSID can each have a unique key. • If a user has multiple STAs, the STAs can connect to the network using the same PPSK account. Huawei Confidential • In WPA/WPA2-PSK authentication, all STAs connected to a specified SSID use the same key, which may bring security risks. In WPA/WPA2-PPSK authentication mode, users connected to the same SSID can have different keys and be authorized with different permissions. If a user has multiple STAs, these STAs can connect to the network using the same PPSK account. WPA/WPA2-PPSK (2/2) ⚫ WPA/WPA2-PPSK authentication has the following characteristics: Multiple users connected to the same SSID can each have a unique key. The configuration and deployment are simple. If a user has multiple STAs, the STAs can connect to the network using the same PPSK account. A PPSK user is bound to a user group or authorization VLAN so that different authorization policies can be assigned to different PPSK users. ⚫ WPA/WPA2-PPSK implementation: Create a PPSK user on the WAC and bind the user name, VLAN ID, STA's MAC address, and access SSID to the user. Create a PPSK user (i.e. password) Set PPSK user parameters 23 ⚫ User name ⚫ Branch AP group ⚫ User group ⚫ ⚫ VLAN MAC address bound to the user Expiration time ⚫ ⚫ SSID ⚫ Maximum number of access users Huawei Confidential • Specify the PPSK user name. If user-name is not specified, the user name ppsk_auto_user_xxx is automatically generated, in which xxx indicates a serial number. If user-name is specified, ensure that the user name is unique. • Specify the user group to which the PPSK user is bound. Authorization is delivered to the PPSK user based on the user group. • Specify the authorization VLAN to which the PPSK user is bound. Authorization is delivered to the PPSK user based on the authorization VLAN. • Specify the expiration time of the PPSK user. The user cannot access the network after the specified date. If this parameter is not specified, the PPSK user is valid until December 31, 2099. • Specify the maximum number of access users. After this parameter is specified, only a specified number of access users are allowed to access the network. • Specify the branch AP group to which the PPSK user belongs. After this parameter is specified, the PPSK user in the branch can access the network even after the link between the headquarters and branch is disconnected. • Specify the MAC address bound to the PPSK user. After this parameter is specified, only the user bound to the MAC address is allowed to access the network. • Specify the SSID for PPSK user access. WPA/WPA2-DPSK ⚫ Compared with WPA/WPA2-802.1X authentication and Portal authentication, WPA/WPA2-PPSK authentication is easier to deploy. However, when multiple WACs are deployed on the network, PPSK account information must be configured on each WAC. This makes PPSK account operations complex and does not support unified management of PPSK accounts. In this case, WPA/WPA2-DPSK authentication is a good choice to replace WPA/WPA2-PPSK. ⚫ DPSK is short for Dynamic Pre-Shared Key. In WPA/WPA2-DPSK authentication, all user accounts are configured and managed on an authentication server. The following figure shows the authentication process. STA AP Association request 4-way handshake key negotiation 24 WAC RADIUS server Association request Authorization message delivery MAC address authentication request MAC address authentication response Huawei Confidential • The DPSK authentication process is as follows: ▫ A STA sends an Association Request message to the AP. ▫ The AP forwards the Association Request message to the WAC. ▫ After receiving the Association Request message, the WAC sends a MAC address authentication request carrying the MAC address of the STA to the RADIUS server. ▫ Upon receiving the authentication request, the RADIUS server queries local authorization information such as the shared key, VLAN, and user group configured for this MAC address, and sends the authorization information to the WAC. In this case, the RADIUS server sends the HW-DPSK-Info attribute value in cipher or plain text to the WAC based on the attribute configuration. ▫ After receiving the response from the RADIUS server, the WAC delivers the authorization information to the AP. ▫ The AP and STA perform a four-way handshake to negotiate the key. When the negotiation succeeds, STA authentication succeeds. • Ensure that user information, including the shared keys, VLANs, and user groups for different MAC addresses, has been pre-configured on the RADIUS server before DPSK authentication. • WPA/WPA2-DPSK must be used together with MAC address authentication. WPA3 ⚫ WPA3 is the next-generation Wi-Fi encryption protocol released by the Wi-Fi Alliance. On the basis of WPA2, WPA3 adds new functions to simplify Wi-Fi security assurance methods, implement more reliable identity authentication, and improve data transmission security. ⚫ Based on application scenarios and security requirements of Wi-Fi networks, two WPA3 modes are available: WPA3-Personal and WPA3-Enterprise, that is, WPA3-SAE and WPA3-802.1X. ⚫ WPA3 provides the Enhanced Open network authentication mode — Opportunistic Wireless Encryption (OWE) — based on open system authentication. Open: no encryption WEP: weak encryption • Introduced in 1999 • Cracked in 2001 WPA: strong encryption WPA2: strong encryption WPA3: strongest encryption • Introduced in 2003 • Replaced by WPA2 in 2004 • Introduced in 2004 • Replaced by WPA3 in 2018 • Currently the most secure • Meeting high security requirements 25 Huawei Confidential • Compared with WPA and WPA2, WPA3 has the following improvements: ▫ WPA3 introduces SAE, which is a more secure handshake protocol. Theoretically, SAE provides forward secrecy. Even if an attacker knows the password on a network, the attacker cannot decrypt the obtained traffic. However, on a WPA2 network, an attacker can decrypt obtained traffic using the password. ▫ The algorithm strength is enhanced, and the Cipher Suite B is supported. WPA3-SAE ⚫ WPA3-Personal introduces Simultaneous Authentication of Equals (SAE) that provides higher security. SAE adds an SAE handshake before the four-way handshake process of WPA/WPA2-PSK to dynamically negotiate a PMK. The PMK used in WPA/WPA2-PSK is related only to the SSID and PSK. SAE leverages dynamic random variables to negotiate the PMK. With SAE, the PMK negotiated using SAE each time is different, improving security. ⚫ WPA3-Personal supports only the AES encryption algorithm. STA Generates a PWE encapsulated with a random number. Generates a PMK. SAE Commit Generates a PWE encapsulated with a random number. Generates a PMK. SAE Commit SAE Confirm Verifies the PMK. AP Verifies the PMK. SAE Confirm SAE exchange process 26 Huawei Confidential • The SAE handshake can be initiated by either the STA or AP and involves the following phases: ▫ SAE Commit phase: In this phase, a four-way handshake PMK is generated. The two authentication entities (AP and STA) both send a password element of an ECC group (PWE) encapsulated by random numbers. The PWE is a key derived from the password and the MAC address of the peer end. Based on the encapsulated PWE, the PMK is generated through calculation. When the SAE Commit phase is complete, both the authentication entities generate PMKs but do not know whether their PMKs are the same. ▫ SAE Confirm phase: The purpose of this phase is to verify that the two entities have the same PMK. A part of the PMK is used to check the integrity of the Commit packet sent in the previous phase. If both entities can pass the check, they have the same PMK and can perform the four-way handshake. • WPA3-Personal: ▫ WPA3-Personal introduces the SAE handshake protocol. Compared with WPA/WPA2-PSK authentication, WPA3-SAE can effectively defend against offline dictionary attacks and increase the difficulty of brute force cracking. In addition, the SAE handshake protocol provides forward secrecy. Even if an attacker knows the password on the network, the attacker cannot decrypt or obtain traffic, greatly improving the security of the WPA3Personal network. • WPA2/WPA3 transition mode: ▫ WPA2 is still widely used. To enable WPA3-incapable STAs to access a WPA3-configured network, the Wi-Fi Alliance defines the WPA3-Personal transition mode. That is, WPA3 and WPA2 can coexist for a period of time in the future. The transition mode supports only the AES encryption mode but does not support the TKIP encryption mode. ▫ In WPA3 transition mode, the access process for WPA2 STAs is the same as that for STAs using WPA2-PSK authentication, with PMF in optional mode. However, for WPA3 STAs, the access process uses WPA3-SAE authentication, with PMF in mandatory mode. WPA3-802.1X ⚫ WPA3-Enterprise still uses the authentication system of WPA2-Enterprise and uses EAP for identity authentication, but it enhances security. Encryption algorithm: The 256-bit Galois/Counter Mode Protocol (GCMP-256) encryption algorithm is supported. This algorithm also uses the AES encryption algorithm, and the key length is 256 bits. ⚫ Integrity check: The 384-bit SHA data integrity check algorithm is supported to ensure data integrity. WPA3-Enterprise supports the Cipher Suite B, including the following algorithms: 28 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 Huawei Confidential OWE Authentication ⚫ In addition to WPA3-Personal and WPA3-Enterprise, WPA3 provides the Enhanced Open network authentication mode — OWE — based on open system authentication. ⚫ OWE authentication is a Wi-Fi Enhanced Open authentication mode that allows for network access without the need to enter the password. In OWE authentication mode, a device uses the AES encryption algorithm to encrypt data on the network, thereby protecting data exchange between STAs and the Wi-Fi network. 29 Access authentication Key negotiation Data encryption Users can connect to the WLAN without entering the password. The Diffie–Hellman algorithm is used for key exchange to generate a PMK for the subsequent four-way handshake. The AES encryption algorithm is used to encrypt data traffic on the network. Huawei Confidential • OWE transition mode: ▫ The OWE transition mode provides backward compatibility with STAs that do not support OWE authentication. That is, these STAs access the network in open-system authentication mode, while OWE-capable STAs access the network in OWE authentication mode. ▫ In OWE transition mode, only the AES encryption mode is supported. WAPI ⚫ WLAN Authentication and Privacy Infrastructure (WAPI) is a Chinese national security standard for WLANs and was developed based on IEEE 802.11. WAPI provides higher security than WEP and WPA and consists of the following parts: WLAN Authentication Infrastructure (WAI): authenticates user identities and manages keys. WLAN Privacy Infrastructure (WPI): protects data transmitted on WLANs and provides the data encryption, data verification, and anti-replay functions. ⚫ WAPI involves identity authentication and key negotiation, which begin after a STA associates with a WAC. After the key negotiation is complete, the SMS4 algorithm is used for data encryption. 2. Identity authentication 1. STA association with the WAC STA AP WAC Authentication server 3. Key negotiation 30 Huawei Confidential • WAPI has the following advantages: ▫ Bidirectional identity authentication: prevents access from unauthorized STAs and protects a WLAN against attacks from unauthorized WLAN devices. ▫ Digital certificate identity: A WAPI system has an independent certificate server. STAs and WLAN devices use digital certificates to prove their identities, improving network security. When a STA requests to join or leave a network, the administrator only needs to issue a certificate to the STA or revoke the certificate of the STA. ▫ Complete authentication protocol: WAPI uses digital certificates to identify STAs. During identity authentication, the elliptic curve digital signature algorithm (ECDSA) is used to verify a digital certificate. In addition, the secure message hash algorithm is used to ensure message integrity, preventing attackers from tampering with or forging information transmitted during identity authentication. Identity Authentication ⚫ WAPI provides two identity authentication modes: certificate-based mode (WAPI-CERT) and PSK-based mode (WAPI-PSK). WAPI-CERT: A STA and a WAC authenticate each other's certificate. The certificates must be loaded on the STA and WAC and verified by an authentication server. After certificate authentication is complete, the STA and WAC use the temporal public key and private key to generate a base key (BK) for key negotiation. WAPI-PSK: A STA and a WAC authenticate each other's identities based on the PSK. The STA and WAC must be configured with the same PSK before authentication. The PSK is converted into a BK during authentication. STA WAC Authentication server Authentication activation packet Access authentication request Access authentication response Certificate authentication request Certificate authentication response WAPI certificate authentication process 31 Huawei Confidential • The WAPI-CERT mode is applicable to large-scale enterprise networks or carrier networks that can deploy and maintain an expensive certificate system. • The WAPI-PSK mode does not require an expensive certificate system, so it is applicable to individual users or small-scale enterprise networks. • The WAPI certificate authentication process is described as follows: ▫ Authentication activation: When a STA requests to associate or re-associate with a WAC, the WAC checks whether the STA is a WAPI STA. If so, the WAC sends an authentication activation packet to trigger the certificate authentication process. ▫ Access authentication request: The STA sends an access authentication request carrying the STA's certificate and system time to the WAC. The system time is the access authentication request time. ▫ Certificate authentication request: When the WAC receives the access authentication request, it records the access authentication request time and sends a certificate authentication request to the authentication server. The certificate authentication request carries the STA's certificate, access authentication request time, WAC's certificate, and signature generated using the WAC's private key and the preceding information. ▫ Certificate authentication response: When the authentication server receives the certificate authentication request, it authenticates the WAC's signature and the STA's certificate. If the WAC's signature and certificate are invalid, the authentication fails. If they are valid, the authentication server authenticates the STA's certificate. After the authentication is complete, the authentication server constructs a certificate authentication response with the STA's certificate authentication result, WAC's certificate authentication result, and signature generated using the authentication results, and sends the certificate authentication response to the WAC. ▫ Access authentication response: When the WAC receives the certificate authentication response, it checks the signature to obtain the STA's certificate authentication result, and controls access of the STA based on the certificate authentication result. The WAC then forwards the certificate authentication response to the STA. The STA checks the signature generated by the authentication server to obtain the WAC's certificate authentication result, and determines whether to associate with the WAC based on the result. If the certificate authentication succeeds, the WAC accepts the access request. Otherwise, the WAC disassociates the STA. Key Negotiation ⚫ After the WAC is authenticated by the authentication server, the WAC initiates key negotiation with the STA. Key negotiation consists of unicast key negotiation and group key negotiation. Unicast key negotiation: A unicast key is generated using a BK based on a specific algorithm. Group key negotiation: Based on unicast key negotiation, the WAC advertises a multicast key to the STA after multicast key negotiation succeeds. STA WAC Unicast key negotiation request WAC STA Group key advertisement Unicast key negotiation response Group key response Unicast key negotiation ACK Obtains or delivers a unicast key. WAPI unicast key negotiation process 33 Huawei Confidential Obtains or delivers a group key. WAPI group key negotiation process Comparison Between Different Security Policies Security Policy Link Authentication WEP Open system authentication or shared key authentication WPA/WPA2Open system authentication PSK WPA/WPA2Open system authentication 802.1X WPA/WPA2Open system authentication PPSK WPA/WPA2Open system authentication DPSK Access Encryption Authentication Algorithm Recommended Scenario None This security policy is not recommended due to its low security. None TKIP or AES This security policy has higher security than WEP. Additionally, no third-party server is required and the cost is low. 802.1X authentication TKIP or AES None TKIP or AES MAC Address Authentication TKIP or AES Home and SMB networks Large-scale enterprise networks This security policy provides high security and with high security requirements requires a third-party server. The deployment is simple, and "one password Hotels and retail stores for one device" can be implemented. This security policy provides high security and Hotels and retail stores requires a third-party server. This security policy provides high security and Home and SOHO networks does not require a third-party server. Government and largeThis security policy is applied to scenarios that enterprise networks require extremely high security. WPA3-SAE Open system authentication None AES WPA3802.1X Open system authentication 802.1X authentication GCMP-256 OWE Open system authentication Portal or MAC address authentication AES Public places, such as airports, stations, business centers, and conference venues WAPI-PSK Open system authentication None SMS4 Home and SMB networks SMS4 Large-enterprise and carrier networks WAPI-CERT 34 Open system authentication Huawei Confidential Description No encryption Networks with low security or RC4 requirements None It is more secure than open system authentication and encrypts data. This security policy is supported only by some terminals. This security policy requires an authentication server and is supported only by some terminals. Configuring a WLAN Security Policy (1/2) ⚫ Configure WPA/WPA2-PSK authentication. [WAC-wlan-view] security-profile name test [WAC-wlan-sec-prof-test] security { wpa | wpa2 | wpa-wpa2 } psk { pass-phrase | hex } key-value { aes | tkip | aes-tkip } [WAC-wlan-sec-prof-test] quit ⚫ Configure WPA/WPA2-802.1X authentication. [WAC-wlan-view] security-profile name test [WAC-wlan-sec-prof-test] security { wpa | wpa2 | wpa-wpa2 } dot1x { aes | tkip | aes-tkip } [WAC-wlan-sec-prof-test] quit ⚫ Configure WPA/WPA2-PPSK authentication. [WAC-wlan-view] security-profile name test [WAC-wlan-sec-prof-test] security { wpa | wpa2 | wpa-wpa2 } ppsk { aes | tkip | aes-tkip } [WAC-wlan-sec-prof-test] quit [WAC-wlan-view] ppsk-user psk { pass-phrase | hex } key-value [ user-name user-name | user-group user-group | vlan vlanid | expire-date expire-date [ expire-hour expire-hour ] | max-device max-device-number | branch-group branch-group | macaddress mac-address ]* ssid ssid 35 Huawei Confidential Configuring a WLAN Security Policy (2/2) ⚫ Configure WPA/WPA2-DPSK authentication. [WAC-wlan-view] security-profile name test [WAC-wlan-sec-prof-test] security { wpa | wpa2 | wpa-wpa2 } dpsk { aes | tkip | aes-tkip } [WAC-wlan-sec-prof-test] quit ⚫ Configure WPA3-SAE authentication. [WAC-wlan-view] security-profile name test [WAC-wlan-sec-prof-test] security wpa3 sae pass-phrase key-value aes [WAC-wlan-sec-prof-test] quit ⚫ Configure WAPI-PSK authentication. [WAC-wlan-view] security-profile name test [WAC-wlan-sec-prof-test] security wapi psk { pass-phrase | hex } key-value [WAC-wlan-sec-prof-test] quit 36 Huawei Confidential Contents 1. User Access Security 2. STA Blacklist and Whitelist 3. Security Policy 4. Access Control ◼ Access Control Solution ▫ Access Control Configuration 37 Huawei Confidential Overview of NAC ⚫ Network Access Control (NAC) is an end-to-end security technology that authenticates access clients and users to ensure network security. ⚫ NAC provides three authentication modes: 802.1X authentication, MAC address authentication, and Portal authentication. User terminal Network access device Access server • User terminal: various terminals, such as PCs, mobile phones, printers, and cameras. • Network access device: authentication control point for terminals to access the network. A network access device authenticates access users and executes network security policies to implement admission control (for example, allowing or rejecting network access of users). The access device can be a device, router, WAC, AP, or other network devices. ... ... NAC system architecture 38 • Access server: is also known as the AAA server and implements authentication, authorization, and accounting for users. Huawei Confidential • Authentication, authorization, and accounting (AAA) provides a management mechanism for network security. ▫ Authentication: verifies whether users are permitted to access the network. ▫ Authorization: authorizes users to use particular services. ▫ Accounting: records the network resources used by users. • AAA can be implemented using multiple protocols. RADIUS is most frequently used in actual scenarios. 802.1X Authentication ⚫ 802.1X authentication is a port-based network access control technology. User identities are verified and network access permissions are controlled on ports of access devices. 802.1X authentication uses EAP to exchange authentication information between the client, access device, and authentication server. Networking mode • 802.1X clients are usually user terminals. A user can start the client software to initiate 802.1X authentication. • A network access device is usually an 802.1X-capable network device that provides physical or logical ports for clients to access LANs. • An authentication server (generally, a RADIUS server) is used to perform authentication, authorization, and accounting for users. 802.1X client AP Access device (WAC) Authentication server Application scenario • 802.1X authentication applies to enterprise users who have high security requirements. 39 Huawei Confidential • 802.1X is a Layer 2 protocol that requires no Layer 3 processing. It also has low performance requirements of access devices, reducing network construction costs. • 802.1X authentication packets and data packets are transmitted through different logical ports, improving security. Portal Authentication ⚫ Portal authentication is also called web authentication. Users can enter their user names and passwords on the web authentication page for identity authentication. Two ways are available for accessing the authentication page: ⚫ Proactive authentication: A user proactively accesses the Portal authentication website through browsers. ⚫ Redirected authentication: When the access address entered by a user is not the address of the Portal authentication website, the access device redirects the user to the Portal authentication website. Portal server Client 40 AP Access device (WAC) RADIUS server Huawei Confidential • Client: In most cases, a client is a host where an HTTP/HTTPS-capable browser is installed. Sometimes, corresponding client software (such as browsers) is installed. • Access device: a network device such as a switch or router, which provides the following functions: ▫ Redirects all HTTP and HTTPS requests of users on authentication network segments to the Portal server before authentication is performed. ▫ Interacts with the portal server and authentication server to implement user identity authentication, authorization, and accounting during authentication. ▫ Grants users access to the network resources authorized by the administrator upon successful authentication. • Portal server: a server system that receives authentication requests from clients, provides Portal services and authentication pages, and exchanges client authentication information with access devices. • Authentication server: interacts with access devices to implement user authentication, authorization, and accounting. • Portal authentication does not require dedicated client software. Therefore, it is typically used in access scenarios requiring no client software or guest access scenarios. • A Portal server can be an external Portal server or a built-in Portal server integrated into an access device. The built-in Portal server implements basic functions of the Portal server, including web-based login and logout. It cannot replace the independent Portal server or extensions. For example, the built-in Portal server does not support MAC address-prioritized Portal authentication. • Portal authentication has the following advantages: ▫ Ease of use: In most cases, Portal authentication authenticates a user on a web page, without any additional software required on the client. ▫ Convenient operations: Portal authentication allows for value-added services on the web page, including advertisement push and enterprise publicity. ▫ Mature technology: Portal authentication has been widely used on networks of carriers, fast food chains, hotels, schools, etc. ▫ Flexible deployment: Portal authentication implements access control at the access layer or at the ingress of key data. ▫ Flexible user management: Portal authentication can be performed on users based on the combination of usernames and any one of VLANs, IP addresses, and MAC addresses. MAC Address Authentication ⚫ MAC address authentication (MAC authentication for short) controls network access permissions of users based on ports and MAC addresses. User terminals are authenticated by the authentication server based on their MAC addresses. ⚫ By default, the device triggers MAC address authentication on users after receiving DHCP, ARP, DHCPv6, or ND packets. • Terminal: refers to a terminal that attempts to access the network. • Access device: functions as the network access control point Terminal AP Access device (WAC) Authentica tion server that enforces security policies. It permits, denies, isolates, or restricts network access of users based on the security policies customized for customer networks. • Authentication server: checks whether the identities of users who attempt to access the network are valid and assigns network access permissions to users who have valid identities. 42 Huawei Confidential • MAC authentication does not require users to install any client software. It applies to scenarios where dumb terminals such as IP phones and printers need to access the network. • Dumb terminal: Compared with other terminals, dumb terminals have limited functions and simple interaction modes. Its specific meaning varies according to the scenario (context). Here, dumb terminals refer to terminals that do not support the input of authentication information such as usernames and passwords. • By default, a MAC address without hyphens (-) is used as the user name and password for MAC address authentication, for example, 0005e0112233. Comparison Between Three Authentication Modes ⚫ The three authentication modes have different authentication principles and are applicable to different scenarios. In actual applications, you can use a proper authentication mode or multiple authentication modes based on scenarios. 43 Item 802.1X Authentication MAC Authentication Portal Authentication Application scenario New networks with concentrated users and high security requirements Authentication of dumb terminals such as printers and fax machines Scenario where users are sparsely distributed or move freely Client requirement Yes No No Advantages High security No client required Flexible deployment Disadvantages A dedicated authentication server needs to be deployed, which is complex. MAC addresses need to be registered, complicating management. Low security Huawei Confidential • Currently, the following multi-mode authentication modes are supported: ▫ MAC address-prioritized Portal authentication allows disconnected users who have passed Portal authentication to access the network again within a certain period of time, without having to reenter their user names and passwords, as long as they pass MAC authentication. ▫ In this authentication mode, the device performs MAC address authentication and 802.1X authentication on terminals in sequence. The terminals pass authentication only when the two types of authentication succeed. Contents 1. User Access Security 2. STA Blacklist and Whitelist 3. Security Policy 4. Access Control ▫ Access Control Solution ◼ 44 Access Control Configuration Huawei Confidential Access Control Solution for Wireless Users ⚫ Solution architecture Client: terminals with wireless network adapters, such as laptops, mobile phones, and printers, which can wirelessly access the network. Access device: WAC ◼ Network access control point for terminals. ◼ Implements access control (permit, deny, isolate, or Router Authentication server Aggregation switch WAC Access switch restrict) based on the security policies formulated by customer networks. ◼ Enforcement point of authorization policies. AP AP AP AP Authentication server: iMaster NCE-Campus ◼ Checks whether the identity of the terminal that attempts to access the network is valid. ◼ Specifies the network access permissions that a valid terminal can have. 45 Wireless terminal Wireless terminal Huawei Confidential • With the popularization of wireless devices, we have entered the fully-wireless office era which is wireless-centric. In the office environment, wired networks are replaced by wireless networks. Terminals such as laptops, mobile phones, and printers now mainly access the network in wireless mode. Therefore, this course describes the NAC configuration solution in wireless scenarios. NAC Configuration Process — WAC Configuring an access profile 802.1X access profile 802.1X access control parameters Configuring a security profile Security profile Security Policy MAC access profile MAC access control parameters Portal access profile (external) External Portal server Portal access control parameters Portal access profile (builtin) Built-in Portal server Portal access control parameters 46 Huawei Confidential Configuring an authentication profile Authentication profile Access profile Authentication scheme used by the user Authorization scheme used by the user Accounting scheme used by the user ... Applying NAC VAP profile Security profile Authentication profile NAC Configuration Process — iMaster NCE-Campus Configuring an authentication rule Adding a device Authentication mode Configuring an authorization result Access mode Device IP address Matching rule RADIUS interconnection parameters Portal interconnection parameters Data source selection Authentication protocol Default action 47 Huawei Confidential Authorization policy: ACL, VLAN, security group, user-defined parameters, etc. Configuring an authorization rule Authentication mode Access mode Matching rule Authorization result reference 802.1X Authentication Portal Authentication MAC Authentication 802.1X Authentication Configuration — WAC (1/2) ⚫ Configure a security profile. [WAC] wlan [WAC-wlan] security-profile name test [WAC-wlan-sec-prof-test] security wpa-wpa2 dot1x aes (security policy: WPA/WPA2-8021.X) [WAC-wlan-sec-prof-test] quit ⚫ Configure an access profile. [WAC] dot1x-access-profile name test [WAC-dot1x-access-profile-test] dot1x authentication-method { chap | pap | eap } [WAC-dot1x-access-profile-test] quit ⚫ //Configure the 802.1X authentication mode. Configure a RADIUS server. [WAC] radius-server template test [WAC-radius-test] radius-server authentication X.X.X.X (IP address of the RADIUS server) 1812 [WAC-radius-test] radius-server accounting X.X.X.X (IP address of the RADIUS server) 1813 [WAC-radius-test] radius-server shared-key cipher Huawei@123 (shared key, which must be the same as that configured on the RADIUS server) [WAC-radius-test] quit [WAC] radius-server authorization X.X.X.X (IP address of the RADIUS server) shared-key cipher Huawei@123 (shared key) 48 Huawei Confidential 802.1X Authentication Portal Authentication 802.1X Authentication Configuration — WAC (2/2) ⚫ Configure AAA schemes. [WAC-aaa] authentication-scheme test [WAC-aaa-authen-test] authentication-mode radius [WAC-aaa] accounting-scheme test [WAC-aaa-accounting-test] accounting-mode radius [WAC-aaa] domain test [WAC-aaa-domain-test] authentication-scheme test [WAC-aaa-domain-test] accounting-scheme test [WAC-aaa-domain-test] radius-server test ⚫ Configure an authentication profile. [WAC] authentication-profile name test [WAC-authentication-profile-test] dot1x-access-profile test [WAC-authentication-profile-test] access-domain test ⚫ Apply the authentication profile and security profile. [WAC-wlan-view] vap-profile name dot1x [WAC-wlan-vap-prof-dot1x] authentication-profile test [WAC-wlan-vap-prof-dot1x] security-profile test [WAC-wlan-vap-prof-dot1x] quit 49 Huawei Confidential MAC Authentication 802.1X Authentication Portal Authentication MAC Authentication 802.1X Authentication Configuration — NCE (1/2) ⚫ Add an access device. Choose Admission > Admission Device > Admission Device Management > Create. ⚫ Add an authentication user. Choose Admission > User Management > User > Create. 50 Huawei Confidential • If the local data source is used as the data source in the authentication rule, you need to create an authentication user (by configuring information such as the username and password) on iMaster NCE-Campus. You can also use an external data source. 802.1X Authentication Portal Authentication MAC Authentication 802.1X Authentication Configuration — NCE (2/2) ⚫ Configure authentication and authorization rules, which can be matched by end users based on specific conditions. 51 Choose Admission > Admission Policy > Authentication Authorization > Authentication Rules, and modify the default authentication rule or create an authentication rule. Choose Admission > Admission Policy > Authentication and Authorization > Authentication Rules, and bind an authorization rule to specify resources available to users after successful authentication. Huawei Confidential • The default authorization result of iMaster NCE-Campus can be used. To deliver a customized authorization result, you need to configure authorization result rules in advance. 802.1X Authentication Portal Authentication MAC Authentication Troubleshooting 802.1X Authentication Failures ⚫ Check whether the dot1x-access-profile is bound to the authentication profile. Error-prone configuration: security wpa-wpa2 dot1x aes is configured in the security profile. However, dot1xaccess-profile is not bound to the authentication profile. ⚫ Suggestion: Bind the corresponding access profile to the authentication profile. Check whether the service VLAN is created on the WAC. Error-prone configuration: In 802.1X authentication scenarios, EAP packets are control packets and need to be sent to the WAC through a CAPWAP tunnel. Therefore, the corresponding VLAN must be created on the WAC regardless of whether direct forwarding or tunnel forwarding is used. ⚫ Suggestion: Create the corresponding service VLAN on the WAC. 802.1X authentication configurations need to be performed on different terminals. For details, see related documents on Huawei official website. 52 Huawei Confidential 802.1X Authentication Portal Authentication MAC Authentication Portal Authentication Configuration — WAC (1/2) ⚫ Configure a security profile. [WAC-wlan] security-profile name test [WAC-wlan-sec-prof-test] security open [WAC-wlan-sec-prof-test] quit ⚫ Configure an access profile. [WAC] url-template name portal [WAC-url-template-portal] url https://X.X.X.X:19008/portal (X.X.X.X is the IP address of the Portal server.) [WAC-url-template-portal] url-parameter redirect-url redirect-url ssid ssid user-ipaddress userip user-mac umac device-ip ac-ip [WAC-url-template-portal] quit [WAC] web-auth-server portal [WAC-web-auth-server-portal] server-ip X.X.X.X (IP address of the Portal server) [WAC-web-auth-server-portal] source-ip Y.Y.Y.Y (source IP address of the WAC) [WAC-web-auth-server-portal] shared-key cipher Huawei@123 (shared key, which must be the same as that configured on the Portal server) [WAC-web-auth-server-portal] url-template portal [WAC-web-auth-server-portal] quit [WAC] portal-access-profile name portal [WAC-portal-access-profile-portal] web-auth-server portal direct [WAC-portal-access-profile-portal] quit 53 Huawei Confidential • The URL parameter names configured on the device must be the same as those supported by the Portal authentication server. iMaster NCE-Campus supports the following URL parameter names: ▫ redirect-url: The name can be url or redirect-url. ▫ user-ipaddress: The name can be userip. ▫ user-mac: The name can be usermac or umac. ▫ ssid: The name can be ssid. ▫ device-ip: The name can be ac-ip. ▫ ap-mac: The name can be apmac or ap-mac. 802.1X Authentication Portal Authentication Portal Authentication Configuration — WAC (2/2) ⚫ Configure the RADIUS server (same as the 802.1X authentication configuration). ⚫ Configure an AAA scheme (same as the 802.1X authentication configuration). ⚫ Configure an authentication profile. [WAC] authentication-profile name portal [WAC-authentication-profile-portal] portal-access-profile portal [WAC-authentication-profile-portal] access-domain test [WAC-authentication-profile-portal] quit ⚫ Apply the authentication profile and security profile. [WAC-wlan-view] vap-profile name portal [WAC-wlan-vap-prof-portal] authentication-profile portal [WAC-wlan-vap-prof-portal] security-profile test [WAC-wlan-vap-prof-portal] quit 54 Huawei Confidential MAC Authentication 802.1X Authentication Portal Authentication MAC Authentication Portal Authentication Configuration — NCE ⚫ Add an access device. Choose Admission > Admission Device > Create and add a WAC. Both RADIUS and Portal authentication parameters need to be configured. ⚫ For details about how to add authentication users, authentication rules, and authorization rules, see the configuration method in 802.1X authentication. 55 Huawei Confidential 802.1X Authentication Portal Authentication MAC Authentication Portal Authentication Issue (1/3) — Authentication Failure ⚫ Check whether the shared key is configured on the WAC. Error-prone configuration: The shared key configured on the WAC must be the same as that on the server. Suggestion: Reconfigure the shared key and then perform the Portal user authentication test. [WAC] web-auth-server portal [WAC-web-auth-server-portal] shared-key cipher XXX (shared key, which must be the same as that configured on the Portal server) [WAC-web-auth-server-portal] quit ⚫ Check whether STA address learning is disabled on the WAC. Error-prone configuration: When processing an authentication request from the Portal server, the WAC searches for user MAC addresses based on user IP addresses. If the user IP addresses are not reported by APs, the WAC does not record the user IP addresses. As a result, the WAC fails to find the matched user MAC addresses based on the recorded user IP addresses, and thereby cannot process the authentication request. Suggestion: Enable STA address learning. [WAC-wlan-view] vap-profile name portal [WAC-wlan-vap-prof-portal] undo learn-client-address ipv4 disable 56 Huawei Confidential 802.1X Authentication Portal Authentication MAC Authentication Portal Authentication Issue (1/3) — Authentication Failure (Continued) ⚫ If built-in Portal authentication is used, check whether the service type for the local user is configured correctly. Error-prone configuration: The web service type is not configured for the local user. <WAC> display local-user username user-a The contents of local user(s): Password : **************** State : active Service-type-mask : ... Suggestion: Set the service type of the local user to web, and then perform the Portal user authentication test. [WAC] aaa [WAC-aaa] local-user user-a service-type web [WAC-aaa] quit 57 Huawei Confidential 802.1X Authentication Portal Authentication MAC Authentication Portal Authentication Issue (2/3) — Portal Server Not Automatically Pushing an Authentication Page ⚫ Check whether the detection function is enabled in the web-auth-server profile. Error-prone configuration: The detection function is enabled on the WAC, but the Portal server is not enabled. In this case, the Portal server status is displayed as Abnormal on the WAC. [WAC] web-auth-server portal [WAC-web-auth-server-portal] server-detect [WAC-web-auth-server-portal] quit Suggestion: If the Portal server does not support the detection function or the detection function is not enabled, disable the detection function on the WAC. [WAC] web-auth-server portal [WAC-web-auth-server-portal] undo server-detect [WAC-web-auth-server-portal] quit 58 Huawei Confidential 802.1X Authentication Portal Authentication MAC Authentication Portal Authentication Issue (3/3) — iOS Terminals Not Automatically Displaying an Authentication Page ⚫ Check whether the Portal bypass function is configured on the WAC. Error-prone configuration: The Portal bypass function is enabled on the WAC. [WAC] portal captive-bypass enable Suggestion: Disable the Portal bypass function and perform the test again. [WAC] undo portal captive-bypass enable ⚫ Check whether the Portal server pushes an authentication page through HTTPS. Error-prone configuration: If the Portal server pushes an authentication page through HTTPS, but no valid certificate issued by the CA is installed on the Portal server, the Portal authentication page is not automatically displayed on iOS terminals. Suggestion: Check whether the Portal server pushes an authentication page through HTTPS. If so, you are advised to install a valid certificate or change the protocol to HTTP for authentication page pushing. 59 Huawei Confidential • The iOS operating system provides the Captive Network Assistant (CNA) function. With the CNA function, the iOS terminals (including iPhone, iPad, and iMac) automatically detects wireless network connectivity after associating with a wireless network. If the network connection cannot be set up, the iOS terminals ask users to enter user names and passwords. If users do not enter the user names and passwords, the iOS terminals automatically disconnect from the WLAN. • However, Portal authentication allows users to access certain resources before authentication is successful. If the iOS terminals are disconnected, users cannot access the specified resources. The CNA bypass function addresses this problem. If the users do not enter user names and passwords immediately, the CNA bypass function keeps the iOS terminals online before the Portal authentication is successful. Therefore, the iOS users are allowed to access authentication-free resources. 802.1X Authentication Portal Authentication MAC Authentication MAC Authentication Configuration — WAC ⚫ Configure a security profile. (The security profile configuration is the same as that for Portal authentication, and the security policy is set to open.) ⚫ Configure an access profile. [WAC] mac-access-profile name test [WAC-mac-access-profile-test] quit ⚫ Configure the RADIUS server (same as the 802.1X authentication configuration). ⚫ Configure an AAA scheme (same as the 802.1X authentication configuration). ⚫ Configure an authentication profile. [WAC] authentication-profile name mac [WAC-authentication-profile-mac] mac-access-profile mac [WAC-authentication-profile-mac] access-domain test [WAC-authentication-profile-mac] quit ⚫ Apply the authentication profile and security profile. [WAC-wlan-view] vap-profile name mac [WAC-wlan-vap-prof-mac] authentication-profile mac [WAC-wlan-vap-prof-mac] security-profile test [WAC-wlan-vap-prof-mac] quit 60 Huawei Confidential 802.1X Authentication Portal Authentication MAC Authentication MAC Authentication Configuration — NCE (1/2) ⚫ Add an access device. Choose Admission > Admission Resources > Admission Device Management > Create. ⚫ Add an authentication user. Choose Admission > User Management > MAC Account > Create. 61 Huawei Confidential 802.1X Authentication Portal Authentication MAC Authentication MAC Authentication Configuration — NCE (2/2) ⚫ Configure authentication and authorization rules, which can be matched by end users based on specific conditions. 62 Choose Admission > Admission Policy > Authentication Authorization > Authentication Rules, and modify the default authentication rule or create an authentication rule. Choose Admission > Admission Policy > Authentication and Authorization > Authentication Rules, and bind an authorization rule to specify resources available to users after successful authentication. Huawei Confidential Quiz 1. (Single-answer question) Which of the following statements about security policies is incorrect? ( ) A. WPA/WPA2-802.1X authentication provides high security but is complex to deploy. In addition, some clients do not support 802.1X authentication. B. WPA/WPA2-PSK authentication requires multiple PSKs to be preconfigured on each WLAN node. C. In WPA/WPA2-PSK authentication, all STAs connected to a specified SSID use the same key. D. In WPA/WPA2-PPSK authentication, users connected to the same SSID can have different keys, and different authorizations can be delivered to different users. 63 1. B Huawei Confidential Quiz 2. (Single-answer question) Which of the following access control modes is recommended for newly deployed, high-traffic enterprise networks with strict information security requirements? ( ) A. 802.1X authentication B. Portal authentication C. MAC authentication D. MAC address-prioritized Portal authentication 64 2. A Huawei Confidential Summary ⚫ This course systematically describes user access authentication security policies, implementation of STA blacklist and whitelist, and common access authentication modes. This course also describes the implementation and configurations of 802.1X, MAC address, and Portal authentication modes. ⚫ After learning this course, you will be able to independently complete the design, deployment, and configuration of user access and authentication, and understand the typical deployment solution of user access and authentication. 65 Huawei Confidential Recommendations ⚫ 66 Huawei official websites: Enterprise service: https://e.huawei.com/en/ Technical support: https://support.huawei.com/enterprise/en/index.html Online learning: https://www.huawei.com/en/learning Huawei Confidential Acronyms and Abbreviations (1/4) Acronym or Abbreviation 67 Full Name AAA Authentication, Authorization and Accounting AES Advanced Encryption Standard CBC-MAC Cipher-Block Chaining Message Authentication Code CCMP Counter Mode with CBC-MAC Protocol DH Diffie-Hellman DHCPv6 Dynamic Host Configuration Protocol version 6 DPSK Dynamic Pre-Shared Key EAP Extensible Authentication Protocol EAPoL Extensible Authentication Protocol over LAN ECDHE Elliptic Curve Diffie-Hellman Ephemeral Huawei Confidential Acronyms and Abbreviations (2/4) Acronym or Abbreviation 68 Full Name ECDSA Elliptic Curve Digital Signature Algorithm GCMP Galois Counter Mode Protocol GTK Group Temporal Key MAC Media Access Control MD5 Message Digest Algorithm 5 MIC Message Integrity Code NAC Network Access Control ND Neighbor Discovery OWE Opportunistic Wireless Encryption PEAP Protected Extensible Authentication Protocol Huawei Confidential Acronyms and Abbreviations (3/4) Acronym or Abbreviation 69 Full Name PMF Protected Management Frame PMK Pairwise Master Key PPSK Private Pre-Shared Key PSK Pre-Shared Key PTK Pairwise Transient Key RADIUS Remote Authentication Dial-In User Service RC4 Rivest Cipher 4 RSA Rivest-Shamir-Adleman SAE Simultaneous Authentication of Equals SHA Secure Hash Algorithm Huawei Confidential Acronyms and Abbreviations (4/4) Acronym or Abbreviation 70 Full Name SOHO Small Office and Home Office SSID Service Set Identifier TKIP Temporary Key Integrity Protocol TLS Transport Layer Security TTLS Tunneled Transport Layer Security WAI WLAN Authentication Infrastructure WLAN Authentication and Privacy Infrastructure (WAPI) WLAN Authentication and Privacy Infrastructure Wired equivalent privacy (WEP) Wired Equivalent Privacy Wi-Fi Protected Access (WPA) Wi-Fi Protected Access WPI WLAN Privacy Infrastructure Huawei Confidential Thank you. Bring digital to every person, home, and organization for a fully connected, intelligent world. Copyright © 2022 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice. WLAN Roaming Foreword ⚫ The most obvious advantage of the WLAN is that a STA can move within a WLAN without physical media restrictions. WLAN roaming allows the STA to move within a WLAN without service interruption. ⚫ WLAN roaming ensures that the STA's IP address remains unchanged. After roaming, the STA can still access the initially associated network without service interruption. ⚫ This course describes basic concepts of WLAN roaming, roaming technologies, roaming experience optimization methods, and smart roaming. 2 Huawei Confidential Objectives ⚫ 3 Upon completion of this course, you will be able to: Understand basic concepts of roaming. Understand the data forwarding path of a STA after roaming. Understand common roaming optimization technologies. Understand the implementation principles of smart roaming. Huawei Confidential Contents 4 1. WLAN Roaming Overview 2. Process of Traffic Forwarding During Roaming 3. Roaming Optimization Technologies 4. Smart Roaming Huawei Confidential Background of Roaming The most obvious advantage of the WLAN is that a STA can move within a WLAN without physical media restrictions. WLAN ⚫ roaming allows the STA to move within a WLAN without service interruption. Multiple APs are located within an extend service set (ESS). When a STA moves from an AP to another, WLAN roaming ensures seamless transition of STA services between APs. WLAN roaming offers the following advantages: ⚫ Retains STAs' IP addresses. After roaming, a STA can still access the initially associated network and its access permission remains unchanged. Avoids packet loss or service interruption caused by long-time authentication. WAC AP1 SSID: Huawei STA 5 AP2 Roaming SSID: Huawei STA Huawei Confidential • Extend service set (ESS): a group of BSSs that share the same service set identifier (SSID). Definition of Roaming Roaming on a WLAN allows stations (STAs) to move within the coverage areas of access points (APs) belonging to ⚫ the same ESS with nonstop service transmission. As shown in the following figure, a STA moves from the coverage area of AP1 to that of AP2 without service interruption. The APs involved in WLAN roaming must have the same SSID, same security profile configurations (different profile ⚫ names allowed), and the same authentication mode and parameter settings in their authentication profiles. WAC Switch AP1 SSID: Huawei STA 6 Huawei Confidential AP2 Roaming SSID: Huawei STA WLAN Roaming Modes ⚫ Layer 2 roaming: The service VLAN and gateway of the APs remain unchanged before and after roaming. ⚫ Layer 3 roaming: The service VLANs of the SSIDs are different before and after roaming, and APs provide different Layer 3 service networks with different STA gateways. In this case, to ensure that the IP address of a roaming STA remains unchanged, the STA's traffic needs to be sent back to the AP on the initial access network segment to implement inter-VLAN Layer 3 roaming. Layer 2 roaming Layer 3 roaming WAC WAC Switch Switch AP2 AP1 VLAN10 SSID: Huawei STA 7 Roaming VLAN10 SSID: Huawei STA AP2 AP1 VLAN10 SSID: Huawei STA Roaming VLAN20 SSID: Huawei STA Huawei Confidential • In some cases, two subnets have the same VLAN ID but belong to different network segments. Based on the VLAN ID, the system may incorrectly consider that STAs roaming between two subnets roam at Layer 2. To prevent such an error, configure a roaming domain to determine whether the STAs roam within the same subnet. STAs are considered roaming at Layer 2 only when they roam within the same VLAN and same roaming domain; otherwise, the STAs roam at Layer 3. • Run the vlan-mobility-group vlan-mobility-group-id command to configure a roaming domain in the VAP profile. The roaming domain ID ranges from 1 to 4094. By default, the roaming domain is 1. Network Architecture of WLAN Roaming Inter-WAC tunnel (CAPWAP tunnel): is established using CAPWAP to synchronize information about STAs and APs managed by each WAC in a mobility group. WAC1 Mobility group CAPWAP tunnel Switch AP1 Switch AP2 Intra-WAC Roaming STA 8 WAC2 Mobility group: STAs can roam between WACs in the same group. This group is called mobility group. AP3 Inter-WAC Roaming STA STA Huawei Confidential • In this example, AP1 and AP2 are managed by WAC1, while AP3 is managed by WAC2. Intra-WAC Roaming Intra-WAC roaming: A STA associates with the same WAC before and after roaming. As shown in the following ⚫ figure, intra-WAC roaming occurs when the STA roams from AP1 to AP2. Intra-WAC roaming can be regarded as a special case of inter-WAC roaming where one WAC serves as both the ⚫ HAC (Home AC) and FAC (Foreign AC). HAC=FAC Switch WAC AP2 AP1 SSID: Huawei STA 9 Huawei Confidential Intra-WAC Roaming SSID: Huawei STA Inter-WAC Roaming ⚫ Inter-WAC roaming: A STA roams between APs connected to different WACs. As shown in the figure, inter-AC roaming occurs when the STA roams from AP1 managed by WAC1 to AP2 managed by WAC2. CAPWAP tunnel WAC1 WAC2 AP2 AP1 VLAN 10 SSID: Huawei STA 10 Roaming VLAN 20 SSID: Huawei STA Huawei Confidential • Inter-WAC tunnel: To support inter-WAC roaming, WACs in a mobility group need to synchronize STA and AP information with each other. Therefore, two WACs establish a tunnel between each other to synchronize data and forward packets. An inter-WAC tunnel is established using the CAPWAP protocol. As shown in the figure, WAC1 and WAC2 set up a CAPWAP tunnel for data synchronization and packet forwarding. • Note that a WAC can be added to only one roaming group. • Mobility server: When a STA roams between WACs, a WAC is selected as the mobility server to maintain the membership table of the mobility group and deliver member information to other WACs in the group. In this way, WACs in the same mobility group can identify one another and set up inter-WAC tunnels. ▫ The mobility server can be a WAC outside or inside a mobility group. ▫ A WAC can function as the mobility server for multiple mobility groups. ▫ A mobility server managing other WACs in a mobility group cannot be managed by another mobility server. That is, if a WAC functions as a mobility server to synchronize roaming configurations to other WACs, it cannot be managed by another mobility server or synchronize roaming configurations from other WACs. ▫ As a centralized configuration point, a mobility server must be able to communicate with all managed WACs but does not need to provide a high data forwarding capability. Concepts of WLAN Roaming Home WAC (HAC): WAC in a mobility group with which a STA associates before roaming. WAC1 Home AP (HAP): AP in a mobility group with which a STA associates before roaming. Mobility group CAPWAP tunnel Switch AP1 11 WAC2 Switch AP2 Intra-WAC Roaming STA Foreign WAC (FAC): WAC with which a STA associates after roaming. Foreign AP (FAP): AP with which a STA associates after roaming. AP3 Inter-WAC Roaming STA STA Huawei Confidential • Home agent: a device that can communicate with the gateway on the home network of a STA at Layer 2. To enable a STA to access the home network after roaming, service packets of the STA need to be forwarded to the home agent through a tunnel. The home agent then sends the packets to the home network. The HAC or HAP takes the role of the STA's home agent. As shown in the figure, you can configure WAC1 or AP1 as the home agent for the STA. • By default, the HAP serves as the home agent of roaming STAs, which can be changed manually. Contents 12 1. WLAN Roaming Overview 2. Process of Traffic Forwarding During Roaming 3. Roaming Optimization Technologies 4. Smart Roaming Huawei Confidential Intra-WAC Layer 2 Roaming — Tunnel Forwarding ⚫ Before roaming: The STA sends service packets to the HAP. After receiving the service packets, the HAP sends CAPWAP tunnel 3 them to the WAC through the CAPWAP tunnel. The WAC forwards the service packets to the upper- Switch WAC layer network through the switch. ⚫ 2 After roaming: The STA sends service packets to the FAP. After receiving the service packets, the FAP sends them to the WAC through the CAPWAP tunnel. The WAC forwards the service packets to the upperlayer network through the switch. 13 Huawei Confidential FAP HAP VLAN 10 SSID: Huawei STA Roaming 1 VLAN 10 SSID: Huawei STA Intra-WAC Layer 2 Roaming — Direct Forwarding ⚫ Before roaming: The STA sends service packets to the HAP. After receiving the service packets, the HAP forwards them to the upper-layer network through the gateway (switch). ⚫ After roaming: The STA sends service packets to the FAP. After receiving the service packets, the FAP forwards them to the upper-layer network through the gateway (switch). Flow direction of traffic before roaming VLAN 10 STA Huawei Confidential Flow direction of traffic after roaming FAP HAP SSID: Huawei 14 Switch WAC Roaming VLAN 10 SSID: Huawei STA Intra-WAC Layer 3 Roaming — Tunnel Forwarding ⚫ In tunnel forwarding mode, the HAP and WAC can be considered in the same subnet. Instead of forwarding the packets back to the HAP, the WAC directly forwards the CAPWAP tunnel packets to the upper-layer network. ⚫ ⚫ 3 Before roaming: The STA sends service packets to the HAP. After receiving the service packet, the HAP forwards it to the WAC. The WAC forwards the service packet to the upper-layer network. Switch WAC 2 After roaming: The STA sends service packets to the FAP. After receiving the service packet, the FAP forwards it to the WAC through a CAPWAP tunnel. The WAC forwards the service packet to the upper-layer network. VLAN 10 SSID: Huawei STA 15 FAP HAP Roaming 1 VLAN 20 SSID: Huawei STA Huawei Confidential • STAs move from one subnet to another during Layer 3 roaming. To allow the STAs to access the original network after roaming, ensure that their traffic is forwarded to the original subnet over CAPWAP tunnels. Intra-WAC Layer 3 Roaming — Direct Forwarding (Scenario 1) ⚫ In direct forwarding mode, after a STA roams to another AP, the STA uses the HAP as its home agent by CAPWAP tunnel default. The STA's traffic is forwarded by the home agent to ensure that the STA can still access the original network after roaming. ⚫ WAC Switch After roaming: The STA sends service packets to the FAP. After receiving the service packet, the FAP forwards it to the WAC through a CAPWAP tunnel. The WAC sends the service packets to the HAP through a CAPWAP tunnel. The HAP forwards the service packets to the upper-layer network. 16 Huawei Confidential 3 HAP VLAN 10 SSID: Huawei STA 4 2 FAP Roaming 1 VLAN 20 SSID: Huawei STA Intra-WAC Layer 3 Roaming — Direct Forwarding (Scenario 2) ⚫ If the WAC and a STA's gateway can communicate with each other at Layer 2, the WAC can be configured CAPWAP tunnel as the STA's home agent. This configuration reduces 3 traffic load of the HAP and the length of the tunnel between the FAP and home agent, improving data WAC Switch forwarding efficiency. ⚫ 2 After roaming: The STA sends service packets to the FAP. After receiving the service packet, the FAP forwards it to the WAC through a CAPWAP tunnel. The WAC forwards the service packet to the upper-layer network. 17 FAP HAP VLAN 10 SSID: Huawei Roaming 1 STA VLAN 20 SSID: Huawei STA Huawei Confidential • If the WAC and a STA's gateway cannot communicate with each other at Layer 2, the WAC cannot be configured as the STA's home agent. Otherwise, the service network will be interrupted after roaming. As shown in the above figure, the WAC needs to communicate with the gateway of VLAN 10 at Layer 2. • The home agent takes effect only in Layer 3 roaming scenarios where user data is transmitted in direct forwarding mode. Changing the home agent will temporarily interrupt services of Layer 3 roaming users. • The command line for configuring the home agent is as follows: ▫ [WAC] wlan ▫ [WAC] vap-profile name huawei ▫ [WAC-wlan-vap-prof-huawei] home-agent ac Inter-WAC Layer 2 Roaming — Tunnel Forwarding ⚫ Before roaming: The STA sends service packets to the HAP. After receiving the service packets, the HAP sends CAPWAP tunnel 3 them to the HAC through the CAPWAP tunnel. The HAC forwards the service packets to the upper- HAC FAC layer network through the switch. ⚫ 2 After roaming: The STA sends service packets to the FAP. After receiving the service packets, the FAP sends them to the FAC through the CAPWAP tunnel. The FAC forwards the service packets to the upper- FAP HAP VLAN 10 SSID: Huawei STA Roaming 1 VLAN 10 SSID: Huawei STA layer network through the switch. 18 Huawei Confidential • STAs stay in the same subnet before and after Layer 2 roaming. The FAP or FAC forwards packets of Layer 2 roaming STAs in the same way as that it forwards packets of new access STAs. That is, the FAP or FAC forwards the packets on the local network, but does not send the packets back to the HAP over the interWAC tunnel. Inter-WAC Layer 2 Roaming — Direct Forwarding ⚫ Before roaming: The STA sends service packets to the HAP. After receiving the service packets, the HAP CAPWAP tunnel forwards them to the upper-layer network through the gateway (switch). ⚫ After roaming: The STA sends service packets to the FAP. After receiving the service packets, the FAP forwards them to the upper-layer network through the gateway (switch). HAC FAC Huawei Confidential FAP HAP VLAN 10 SSID: Huawei STA 19 Flow direction of traffic after roaming Flow direction of traffic before roaming Roaming VLAN 10 SSID: Huawei STA Inter-WAC Layer 3 Roaming — Tunnel Forwarding ⚫ Before roaming: The STA sends service packets to the HAP. After receiving the service packets, the HAP sends them CAPWAP tunnel to the HAC through the CAPWAP tunnel. network through the switch. ⚫ 4 The HAC forwards the service packets to the upper-layer 3 HAC FAC After roaming: The STA sends service packets to the FAP. After receiving the service packets, the FAP sends them to the FAC through the CAPWAP tunnel. The FAC forwards the service packets to the HAC through the inter-WAC tunnel. 2 FAP HAP VLAN 10 SSID: Huawei STA Roaming 1 VLAN 20 SSID: Huawei STA The HAC forwards the service packets to the upper-layer network through the switch. 20 Huawei Confidential • STAs move from one subnet to another during Layer 3 roaming. To allow the STAs to access the original network after roaming, ensure that their traffic is forwarded to the original subnet over CAPWAP tunnels. • In tunnel forwarding mode, service packets exchanged between the HAP and HAC are encapsulated in the CAPWAP tunnel, and the HAP and HAC can be considered in the same subnet. Instead of forwarding the packets back to the HAP, the HAC directly forwards the packets to the upper-layer network. Inter-WAC Layer 3 Roaming — Direct Forwarding (Scenario 1) ⚫ In direct forwarding mode, after a STA roams to another AP, the STA uses the HAP as its home agent by CAPWAP tunnel default. ⚫ After roaming: The STA sends service packets to the FAP. After receiving the service packets, the FAP forwards them to the FAC through a CAPWAP tunnel. The FAC forwards the service packets to the HAC through the inter-WAC tunnel. The HAC sends the service packets to the HAP through a CAPWAP tunnel. The HAP forwards the service packets to the upper-layer 3 HAC FAC 2 5 4 FAP HAP VLAN 10 SSID: Huawei STA Roaming 1 VLAN 20 SSID: Huawei STA network. 21 Huawei Confidential • By default, the HAP functions as the home agent in direct forwarding scenarios of Layer 3 roaming. Inter-WAC Layer 3 Roaming — Direct Forwarding (Scenario 2) ⚫ If the HAC and a STA's gateway can communicate with each other at Layer 2, the HAC can be configured as the CAPWAP tunnel STA's home agent. This configuration reduces traffic load 4 of the HAP and the length of the tunnel between the FAP and home agent, improving data forwarding efficiency. ⚫ 3 HAC FAC After roaming: The STA sends service packets to the FAP. After receiving the service packets, the FAP forwards them to the FAC through a CAPWAP tunnel. The FAC forwards the service packets to the HAC through the inter-WAC tunnel. The HAC forwards the service packets to the upper-layer 2 FAP HAP VLAN 10 SSID: Huawei STA Roaming 1 VLAN 20 SSID: Huawei STA network. 22 Huawei Confidential • In direct forwarding mode of inter-WAC Layer 3 roaming, service packets exchanged between the HAP and HAC are not encapsulated in the CAPWAP tunnel; therefore, whether the HAP and HAC reside in the same subnet cannot be determined. Packets are sent back to the HAP for forwarding by default. If the HAP and HAC reside in the same subnet, the HAC with higher performance can be configured as the home agent. This reduces traffic load on the HAP and improves data forwarding efficiency. Contents 23 1. WLAN Roaming Overview 2. Process of Traffic Forwarding During Roaming 3. Roaming Optimization Technologies 4. Smart Roaming Huawei Confidential Roaming Duration ⚫ Compared with open system authentication, 802.1X authentication has two additional processes: STA identity authentication and key negotiation. Compared with PSK authentication, 802.1X authentication takes a longer time in STA identity authentication and roaming. ⚫ The impact of roaming on services lies in the roaming duration. Therefore, the roaming handover time is a key factor that affects WLAN service experience during STA roaming. STA AP WAC RADIUS server Link authentication Reassociation STA identity authentication The STA identity authentication and key exchange take a long time. 24 Key exchange Huawei Confidential • The roaming optimization technologies described in the following sections are mainly used to shorten the roaming time. Fast Roaming Using PMK Caching ⚫ Fast roaming is implemented by using pairwise master key (PMK) caching. ⚫ When the security policy is WPA2-802.1X or WPA3-802.1X, or the security policy is WPA/WPA2-802.1X and the WPA2 authentication mode is configured on the 802.1X client, fast roaming allows STAs to perform only key negotiation during roaming, without having to be 802.1X authenticated again and being authenticated for the access. WAC1 Mobility group WAC2 • CAPWAP tunnel • Switch Switch AP1 AP2 • • Roaming STA 25 Huawei Confidential STA When the STA accesses the network for the first time, the STA is authenticated by WAC1 and a PMK is generated. The WAC synchronizes the PMK information to WAC2 through the inter-WAC tunnel. During roaming, the STA sends AP2 a Reassociation Request frame that carries the PMK-ID. After receiving the Reassociation Request frame, AP2 notifies the WAC2 that the STA needs to roam from AP1 to AP2. The WAC2 searches the PMK caching table for the PMK corresponding to the STA based on the PMK-ID in the Reassociation Request frame. If the matched PMK is found, the WAC2 considers that the STA has passed 802.1X authentication and uses the cached PMK for key negotiation. 802.11r fast roaming ⚫ The 802.11r protocol defines the Fast BSS Transition (FT) function that reduces the number of information exchanges in a mobility domain (MD) and does not require 802.1X authentication or key negotiation during STA roaming. In this manner, users are unaware of any in-roaming service interruption and experience low-latency data services during roaming, improving user experience. ⚫ According to protocol specifications, 802.11r fast roaming can be implemented in either of the following modes: Over-the-Air: A STA directly performs FT authentication with the FAP. Over-the-DS: A STA communicates with a FAP for FT authentication through a HAP. 26 Huawei Confidential Intra-WAC 802.11r Fast Roaming AP1 STA AP2 Associated with AP1 FT Auth Request Generate and install the PTK FT Auth Response FT Reassociation Request AP2 Associated with AP1 Generate and install the PTK FT Auth Request FT Auth Response Generate and install the PTK Generate and install the PTK FT Reassociation Request FT Reassociation Response FT Reassociation Response Roaming to AP2 Roaming to AP2 Over-the-Air 27 AP1 STA Over-the-DS Huawei Confidential • Intra-WAC 802.11r fast roaming (Over-the-Air): ▫ When a STA accesses the network through AP1 for the first time, the STA is authenticated by the WAC and a PMK is generated. If open system authentication is used, no PMK is generated in this step. ▪ The WAC generates PMK-R0 (calculated based on the SSID, MDID, WAC MAC address, and STA MAC address) and PMK-R1 (calculated based on the PMK-R0, AP MAC address, and STA MAC address) of each AP based on the PMK, and delivers the PMK-R1 to AP1. ▪ The STA and WAC generate and install the pairwise transient key (PTK) and the group temporal key (GTK) by performing the 4-way and 2-way handshakes. ▫ During roaming, the STA initiates an FT authentication request to AP2 and delivers PMK-R1 to AP2. ▫ After receiving the request, AP2 generates and installs a PTK based on PMK-R1 and information contained in the request. At the same time, AP2 starts the reassociation timer, and sends an 802.11 FT authentication response to the STA. ▫ After receiving the response, the STA generates and installs a PTK based on the information contained in the response. The STA sends a reassociation request to AP2. ▫ After receiving the reassociation request, AP2 stops the reassociation timer, and then sends a reassociation response to the STA. If a STA blacklist or whitelist is configured on the WAC, the AP reports a reassociation response to the STA during FT reassociation and then reports the STA's reassociation request to the WAC for processing. ▫ After the STA receives the response, the roaming is complete. Inter-WAC 802.11r Fast Roaming WAC1 WAC1 WAC2 PMK update for STA AP1 STA PMK update for STA AP2 STA Associated with AP1 FT Auth Request Generate and install the PTK FT Auth Response FT Reassociation Request AP1 AP2 Associated with AP1 Generate and install the PTK FT Auth Request Generate and install the PTK FT Auth Response Generate and install the PTK FT Reassociation Request FT Reassociation Response FT Reassociation Response Roaming to AP2 Roaming to AP2 Over-the-Air 29 WAC2 Over-the-DS Huawei Confidential • Inter-WAC 802.11r fast roaming (Over-the-Air): ▫ When a STA accesses the network through AP1 for the first time, the STA is authenticated by WAC1 and a PMK is generated. If open system authentication is used, no PMK is generated in this step. ▪ WAC1 generates PMK-R0 (calculated based on the SSID, MDID, WAC MAC address, and STA MAC address) and PMK-R1 (calculated based on the PMK-R0, AP MAC address, and STA MAC address) of AP1 based on the PMK, and delivers the PMK-R1 to AP1. ▪ The STA and WAC generate and install the pairwise transient key (PTK) and the group temporal key (GTK) by performing the 4-way and 2-way handshakes. ▪ WAC1 synchronizes the PMK information to WAC2 through the tunnel between them. ▪ WAC2 generates PMK-R0 and PMK-R1 of AP2 based on the PMK, and delivers PMK-R1 to AP2. ▫ During roaming, the STA initiates an FT authentication request to AP2. ▫ After receiving the request, AP2 generates and installs a PTK based on PMK-R1 and information contained in the request. At the same time, AP2 starts the reassociation timer, and sends an 802.11 FT authentication response to the STA. ▫ After receiving the response, the STA generates and installs a PTK based on the information contained in the response. The STA sends a reassociation request to AP2. ▫ After receiving the reassociation request, AP2 stops the reassociation timer, and then sends a reassociation response to the STA. If a STA blacklist or whitelist is configured on the WAC, the AP reports a reassociation response to the STA during FT reassociation and then reports the STA's reassociation request to the WAC for processing. ▫ After the STA receives the response, the roaming is complete. Comparison of WLAN Roaming Modes 31 Roaming Mode Whether the STA Support Is Required Applied Security Policy Description Common roaming N/A All security policies It is applicable to all scenarios and involves easy configuration. Services may be interrupted for a short period of time during roaming. Fast Roaming using PMK caching Yes WPA2-802.1X WPA3-802.1X WPA/WPA2-802.1X (WPA2 specified on the 802.1X client) It is applicable to only a few scenarios. During roaming, only key negotiation is required, without the need to perform 802.1X authentication again, therefore reducing the roaming delay. 802.11r fast roaming Yes Open system authentication WPA2-PSK-AES WPA2-PPSK-AES WPA2-802.1X-AES It is applicable to multiple scenarios. During roaming, users do not need to perform authentication or key negotiation. The latency is low. Huawei Confidential Contents 32 1. WLAN Roaming Overview 2. Process of Traffic Forwarding During Roaming 3. Roaming Optimization Technologies 4. Smart Roaming Huawei Confidential Sticky STAs in Mobility Scenarios ⚫ Sticky STAs: Some STAs stick to the initially connected APs regardless of the far distance to the APs, weak signals, or low rates. The STAs that fail to roam to neighboring APs with better signals are called sticky STAs. AP1 AP3 AP2 Short distance, low path loss, high-quality signal, high speed Short distance, low path loss, high-quality signal, high speed 2 The STA is moving. 1 Before the STA moves, it connects to AP1 with the best signal quality by now. 33 AP4 3 After the STA moves, it still connects to AP1. However, for the STA, AP4 has the best signal quality now. Huawei Confidential • Sticky STAs may bring the following problems: ▫ Poor service experience: The STAs stick to weak-signal APs, causing a sharp decrease in the data transmission speed of the radio channel. ▫ WLAN performance degradation: The STAs have poor signals or low rates, and packet loss and retransmissions occur. As a result, the sticky STAs occupy the wireless channels for a long time, and other good-signal STAs cannot obtain sufficient time for using channel resources. Smart Roaming Overview ⚫ Smart roaming solves the problem that sticky STAs cannot proactively roam to new APs. After smart roaming is configured, the system proactively steers the STAs to neighboring APs with better signals. ⚫ Common roaming indicates that STAs actively roam from one AP to another. The roaming is initiated by STAs. In smart roaming, an AP steers a STA to roam to another AP. WAC Switch AP1 SSID: Huawei AP2 An AP steers a STA to roam to another AP STA 34 SSID: Huawei STA Huawei Confidential • Smart roaming brings the following benefits: ▫ Improved performance ▪ Common coverage scenarios: Smart roaming can steer sticky STAs to APs with better signals, improving user service experience and overall WLAN performance. ▪ High-density coverage scenarios: STAs generally have good signals. Smart roaming can enable STAs to associate with APs with better signals, significantly improving WLAN performance. ▫ Traffic load balancing ▪ Smart roaming ensures that each STA is associated with the nearest AP, achieving inter-AP load balancing. Introduction to 802.11k/v/r 802.11k (neighbor report): enables an AP to transmit information about its neighboring APs to STAs. CAPWAP tunnel WAC1 Mobility group WAC2 802.11v (BSS Transition Management): enables an AP to steer STAs to another AP. 802.11r (fast BSS transition): defines the FT authentication process to shorten the STA reassociation time. 1 AP1 AP2 uses 802.11k to notify the STA of its neighboring APs (AP1 and AP3). AP2 AP3 2 AP2 uses 802.11v to steer the STA to roam to AP3. STA STA 3 35 The STA quickly roams to AP3 using 802.11r. Huawei Confidential • The following packets are used to advertise whether an AP or STA supports 802.11k/v/r: ▫ AP capabilities: displayed in Beacon, Probe Response, or Association Response frames; ▫ STA capabilities: displayed in Probe Request or Association Request frames. Working Process of Smart Roaming Collecting information about neighboring APs A STA supports 802.11k. A STA does not support 802.11k. Enable the STA to perform 802.11k-based measurement. The AP enables channel scanning to collect neighbor information. Identify sticky STAs. Identifying sticky STAs The WAC selects a more appropriate AP for the STA. Selecting a roaming target Yes Roaming 36 Huawei Confidential Enable the STA to roam to the target AP using 802.11v. Whether 802.11v is supported. No The current AP disconnects the STA. It needs to select and associate to another AP. Collecting Information About Neighboring APs 802.11k-capable STA ⚫ When detecting a sticky STA, an AP proactively triggers the STA to collect neighboring AP information based on the 802.11k mechanism. The Beacon Report mechanism is used to require STAs to report information about neighboring APs. AP AP 802.11k-capable STA 37 802.11k-incapable STA ⚫ For 802.11k-capable STA, an AP listens on Probe frames sent by the STAs or periodically switches channels to scan the STAs. AP AP Proactive scanning Proactive scanning 802.11k-incapable STA Huawei Confidential • Sticky STAs require the network to help them select more appropriate APs. Therefore, the network side needs to collect information about neighboring APs of the STAs through the measurement and information collection mechanism defined in the 802.11k protocol. This mechanism, however, is not applicable to 802.11k-incapable STAs. For them, APs discover neighboring APs of the STAs through proactive channel scanning. Identifying Sticky STAs ⚫ Identifying sticky STAs: When a STA associates with an AP, the AP collects the signal-to-noise ratio (SNR) and access rate of the STA in real time and determines whether the STA is sticky. If the AP considers the STA as a sticky one, the AP reports the STA information to the WAC. The WAC then determines whether to perform smart roaming. ⚫ By default, an AP determines whether a STA is sticky based on the SNR threshold of 20 dB. That is, if the SNR of a STA is lower than 20 dB for several times in a period, the AP identifies the STA as a sticky one. The AP periodically checks the SNR of the currently associated STA. The AP determines whether the SNR is less than the threshold in a period. No The associated STA is not sticky. 38 Huawei Confidential • Signal-to-Noise Ratio (SNR), in dB. Yes The associated STA is sticky. Selecting a Roaming Target ⚫ The WAC queries the neighboring AP list of STAs and selects neighboring APs whose received signal strength indicator (RSSI) and received signal to noise indicator (RSNI) exceed those of the AP currently associated with the STA based on the specified threshold. The selected neighboring APs are candidate APs to which the STA is to roam. ⚫ Among all candidate APs, the WAC selects the optimal AP based on the SNR, access rate, and load balancing information, and then triggers STA roaming to the target AP. ⚫ The process for 802.11k-capable STAs to select the target AP to roam to is shown below. Determine that the STA is sticky. Whether latencysensitive services exist Yes Do not trigger smart roaming. No Select APs meeting the roaming difference threshold conditions 39 Filter out APs that do not meet the CAC requirement Filter out APs that do not support load balancing Select the AP with the strongest signal strength as the target AP Huawei Confidential • To prevent frequent STA roaming due to STA movements or signal fluctuations, STA roaming is triggered only when the STA is detected a sticky STA for three consecutive times. This slide shows the process for 802.11k-capable STAs to select the target AP to roam to. • Check whether latency-sensitive services exist: ▫ When delay-sensitive services exist on the STA currently, Roaming may have a great impact on the service. In this case, roaming may bring poorer user experience than non-roaming. To ensure user experience, networkcontrolled smart roaming is not triggered for a STA that currently has a delay-sensitive service. • Filter out APs that do not meet the CAC requirement: ▫ On a WLAN, as the number of access STAs increases, channel preemption among STAs becomes increasingly fierce, thereby worsening user experience. Calling Access Control (CAC) is usually deployed to ensure network experience of online users. CAC allows an AP to collect statistics on the channel usage of a radio or the number of online STAs on the radio and set thresholds to control user access. ▫ In smart roaming, the AP that meets the difference condition is checked based on CAC. This prevents the impact on online users' and their own experience after roaming. • Filter out APs that do not support load balancing: ▫ When load balancing is enabled on a network, a STA initiates an association request to an AP, the WAC connected to the AP first checks whether the number of access STAs on the AP exceeds the start threshold for load balancing. If not, the WAC allows the STA to go online. If so, the WAC determines whether to allow the STA to go online based on the load balancing algorithm. • Select the AP with the strongest signal strength as the target AP: ▫ An optimal AP is selected from APs that meet requirements as a target AP, and the network side steers the sticky STA to roam to the target AP in the handover phase. Roaming ⚫ ⚫ For 802.11v-capable STA: An AP forces a STA to roam to the target AP based on the BSS transition mechanism defined in the 802.11v protocol. For 802.11v-incapable STA: The WAC instructs the AP that the STA is currently associated with to disconnect this sticky STA and delivers a STA blacklist to the AP. Beforeroaming AP BSS Transition Management Request BSS Transition Management Response STA Beforeroaming AP STA Afterroaming AP Disassociation Probe Request Probe Request Probe Request Probe Response Probe Response Authentication Request Authentication Request Authentication Response Authentication Response Association Request Association Request Association Response Roaming for 802.11v-capable STA 41 Afterroaming AP Association Response Roaming for 802.11v-incapable STA Huawei Confidential • For an 802.11k-capable STA: ▫ The network side specifies an AP as the target AP for the STA, and sends the target AP information to the STA through a BSS Transition Management Request message, which is responded by a BSS Transition Management Response frame sent by the STA. After authentication information has been exchanged between the STA and target AP, the STA connects to the target AP through a reassociation message. • For an 802.11k-incapable STA ▫ For an 802.11v-incapable STA or a STA that claims to support 802.11v but actually does not support 802.11v, the WAC instructs the AP that the STA is currently associated with to disconnect this sticky STA and delivers a STA blacklist to the AP. Review of the Smart Roaming Process ⚫ The working process of smart roaming is as follows: 3 An AP collects information about surrounding STAs, discovers neighboring APs, and periodically reports the information to the WAC. WAC When the STA associates with AP1, AP1 collects the SNR and access rate of the STA in real time and determines 2 1 whether it is a sticky STA. If AP1 considers the STA as a 1 1 sticky one, AP1 reports the STA information to the WAC. After receiving the reported information, the WAC selects the optimal neighboring AP of STA (AP_2) as the target AP information to AP1. AP1 forces the STA to roam to AP2 through the BSS transition mechanism defined in the 802.11v protocol or the forced logout mode. 42 The STA roams to AP2. Huawei Confidential AP2 AP1 to which the STA is to roam and delivers the target AP STA 4 5 STA AP3 Key Configurations of Smart Roaming ⚫ Configure smart roaming. Create an RRM profile. Enable smart roaming. Set the smart roaming triggering mode to check-snr. Configure the SNR threshold for triggering smart roaming. [WAC-wlan-view] rrm-profile name wlan-rrm [WAC-wlan-rrm-prof-wlan-rrm] smart-roam enable [WAC-wlan-rrm-prof-wlan-rrm] smart-roam roam-threshold check-snr [WAC-wlan-rrm-prof-wlan-rrm] smart-roam roam-threshold snr snr-threshold 43 Huawei Confidential Quiz 1. (Single-Answer Question) Which of the following helps to shorten the roaming latency in fast roaming using PMK caching? ( ) A. Key negotiation is omitted. B. 802.1X authentication is omitted. C. 802.1X authentication and key negotiation are omitted. D. STA reassociation is omitted. 2. (Single-Answer Question) Which of the following roaming technologies is used to solve the problem that sticky STAs fail to proactively roam to another AP? ( ) A. 802.11r roaming B. Roaming using PMK caching C. Smart roaming D. Layer 3 roaming 44 1. B 2. C Huawei Confidential Summary ⚫ This course describes the basic concepts of WLAN roaming and forwarding process of roaming traffic in different data forwarding modes. Roaming optimization technologies, such as PMK roaming, 802.11r roaming, and smart roaming, ensure smooth and fast roaming and greatly reduce the packet loss rate. In this way, service data flows are transmitted at a low latency during roaming, improving user experience. ⚫ After learning, you will have an understanding of the basic concepts of roaming technologies and the implementation principles of different roaming technologies. 45 Huawei Confidential Recommendations ⚫ 46 Huawei official websites: Enterprise service: https://e.huawei.com/en/ Technical support: https://support.huawei.com/enterprise/en/index.html Online learning: https://www.huawei.com/en/learning Huawei Confidential Acronyms and Abbreviations Acronym or Abbreviation 47 Full Name AES Advanced Encryption Standard BSS Basic Service Set ESS Extended Service Set PPSK Private Pre-Shared Key PSK Pre-Shared Key PTK Pairwise Transient Key RRM Radio Resource Management SNR Signal-to-Noise Ratio WEP Wired Equivalent Privacy WPA Wi-Fi Protected Access Huawei Confidential Thank you. 把数字世界带入每个人、每个家庭、 每个组织,构建万物互联的智能世界。 Bring digital to every person, home, and organization for a fully connected, intelligent world. Copyright© 2022 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice. WLAN Radio Resource Management Foreword ⚫ WLANs use radio signals (such as 2.4 GHz or 5 GHz radio waves) as transmission media. Radio signals are attenuated during transmission in the air, reducing WLAN stability and thereby degrading network experience of wireless users. ⚫ Radio resource management (RRM) enables APs to automatically detect the surrounding radio environment, dynamically adjust radio resources such as channels and transmit power, and intelligently balance STA access loads. RRM helps adjust radio coverage, reduce radio signal interference, enable a WLAN to quickly adapt to changes in the radio environment, and ensure WLAN service continuity. ⚫ This course describes the main factors that affect air interface performance and the RRM technologies such as radio calibration, STA steering, band steering, and load balancing. 2 Huawei Confidential Objectives ⚫ On completion of this course, you will be able to: Describe the main factors that affect air interface performance. Describe common RRM technologies, including radio calibration, band steering, load balancing, and user CAC. 3 Huawei Confidential Contents 4 1. Air Interface Performance 2. Radio Calibration 3. STA Steering 4. Band Steering 5. AP-based Load Balancing 6. User CAC Huawei Confidential Factors Affecting Air Interface Performance An air interface is a virtual logical interface on an AP or STA. Wireless links can be established between ⚫ air interfaces. Air interface performance is affected by the following factors: Link setup rate: radio mode, bandwidth, number of spatial streams, modulation and coding scheme (MCS), and guard interval (GI) mode 5 Co-channel and adjacent-channel interference between WLAN devices Interference from non-Wi-Fi devices Signal strength of STAs Number of STAs STA capability differences (such as supported protocols and number of spatial streams) Huawei Confidential • MCS: modulation and coding scheme • GI mode: During data transmission, the receive and transmit ends do not receive or send data at all times. During data receiving or sending or multiple transmissions, mulitipath interference can affect transmission of radio signals. Setting a GI between data transmissions can improve the transmission effect. Wi-Fi Interference: Co-Channel and Adjacent-Channel Interference Co-channel interference AP1 Channel 1 Channel 1: 2.412 • 6 Channel 1 AP2 AP1 Channel 1 Channel 2 Channel 1: 2.412 Channel 1: 2.412 When two neighboring APs work on the same channel, they perform backoff according to the carrier sense multiple access with collision avoidance (CSMA/CA) mechanism, which greatly degrades air interface performance. Huawei Confidential Adjacent-channel interference AP2 Channel 2: 2.417 • When two neighboring APs work on overlapping channels, the APs affect each other, leading to adjacent-channel interference. • When two neighboring APs are deployed closely to each other and have high transmit power, they affect each other even if they work on non-overlapping channels (for example, 2.4 GHz channels 1 and 6). Non-Wi-Fi Interference The 2.4 GHz Industrial, Scientific, and Medical (ISM) frequency band is open and widely used around the world. Various wireless ⚫ products working on the 2.4 GHz frequency band, such as microwave ovens, cordless phones, and Bluetooth devices, can cause frequency interference to 2.4 GHz WLANs. Compared with the 2.4 GHz frequency band, the 5 GHz frequency band has less interference. Currently, radars, wireless sensors, ⚫ digital satellites, wireless ATM networks, and software-defined radio devices typically work on the 5 GHz frequency band. These non-Wi-Fi devices can cause radio signal conflicts and severe interference to WLANs, resulting in poor network experience of ⚫ users. Bluetooth device 7 Huawei Confidential Satellite receiver How the Signal Strength Affects Air Interface Performance High signal strength is fundamental to good wireless user experience. With a low signal strength, packets can be transmitted only ⚫ Throughput (Gbps) at low rates, and issues such as packet loss, delay, and retransmission will increase, greatly degrading air interface performance. 1.8 1.6 1.4 1.2 1 0.8 0.6 0.4 0.2 0 0 5 10 15 20 25 Distance (m) Coverage performance of Huawei AirEngine 6761-21T at different distances * Source: Tolly's report Huawei AirEngine Series Wi-Fi 6 Access Points Performance Evaluation and Feature Validation 8 Huawei Confidential • According to the free-space signal attenuation model, the signal strength is related to the frequency and distance. A higher frequency indicates a larger signal attenuation. As the distance increases, the signal attenuation increases. How the Number of STAs Affects Air Interface Performance In case of a single STA, the maximum air interface performance can be reached because no channel contention exists. As the number ⚫ of STAs increases, however, the air interface performance deteriorates due to increased consumption of channel resources. The following graph shows the performance test result of a Huawei AP with different numbers of STAs. As the number of STAs ⚫ Throughput (Mbps) increases, the AP's total throughput decreases continuously. 900 800 700 600 500 400 300 200 100 0 0 10 20 30 40 50 Multi-user performance test result of the AirEngine 8760-X1-PRO obtained from Huawei lab 9 Huawei Confidential Number of STAs STA Capability Differences STA equipped with a Wi-Fi network adapter that supports multiple spatial streams "123456" AP "12" "34" "56" STA When both the AP and STA support three spatial streams, the data to be exchanged between them can be divided into three parts for simultaneous transmission, which greatly improves transmission efficiency. 10 Huawei Confidential STA equipped with a Wi-Fi network adapter that supports only one spatial stream "123456" AP "12" STA When the AP supports three spatial streams but the STA's Wi-Fi network adapter supports only one spatial stream, the AP and STA can use only one spatial stream to exchange data with each other over the air interface. This triples the data transmission time. Contents 11 1. Air Interface Performance 2. Radio Calibration 3. STA Steering 4. Band Steering 5. AP-based Load Balancing 6. User CAC Huawei Confidential Overview of Radio Calibration ⚫ On a WLAN, the operating performance of APs is affected by the radio environment. For example, a high-power AP can interfere with adjacent APs if they work on overlapping channels. Radio calibration can dynamically adjust the channels, power, and frequency bands of APs managed by the same WAC to ensure signal coverage while minimizing interference. This ensures that the APs can work at the optimal performance. Dynamic channel assignment (DCA) Transmit power control (TPC) Dynamic frequency assignment (DFA) Dynamic bandwidth selection (DBS) On a large-scale network, manual radio calibration is time-consuming, and therefore automatic radio calibration is recommended. 12 Huawei Confidential • Radio calibration is triggered when a new AP is connected to the network, an AP is out of service, or the radio environment deteriorates. Channel Adjustment ⚫ On a WLAN, adjacent APs must work on non-overlapping channels to avoid radio interference. The 2.4 GHz frequency band is divided into fourteen 20 MHz channels, with adjacent channels overlapping. The 5 GHz frequency band provides more frequency resources. In addition to 20 MHz channels, APs working on the 5 GHz frequency band support 40 MHz, 80 MHz, and 160 MHz channels. ⚫ In the following figure, before channel adjustment, both AP2 and AP4 work on channel 6, leading to co-channel interference. After channel adjustment, AP2 is switched to channel 11 so that neighboring APs work on non-overlapping channels, eliminating interference. Channel adjustment ensures that each AP is assigned an optimal channel to minimize interference from co-channel or adjacent-channel APs, ensuring reliable network transmission. AP1 Channel 1 AP3 Channel 11 AP2 Channel 6 AP4 Channel 6 Before channel adjustment 13 AP1 Channel 1 AP3 Channel 11 AP2 Channel 11 AP4 Channel 6 After channel adjustment Huawei Confidential • In addition to radio calibration, channel adjustment can also be used for DFS. In some regions, radar systems work on the 5 GHz frequency band, which may interfere with radio signals of APs working on the 5 GHz frequency band. The DFS function enables APs to automatically switch to other channels when they detect interference on their working channels. Power Adjustment An AP's transmit power determines its radio coverage area. APs with higher power have larger coverage areas. Power adjustment ⚫ enables APs to dynamically adjust their transmit power according to the real-time radio environment. Decreasing the transmit power Increasing the transmit power Coverage area AP2 AP1 AP3 • Decreasing the transmit power AP2 AP2 AP1 AP4 New AP1 AP3 After AP4 is connected to the network, neighboring APs decrease their transmit power to minimize interference while meeting coverage requirements. • AP2 AP1 AP3 AP4 Increasing the transmit power AP3 When AP4 leaves the network, the WLAN cannot meet the coverage requirements. In this case, neighboring APs increase their transmit power. Wi-Fi signal coverage requirements of STAs 14 Huawei Confidential • A traditional method to control the radio power is to set the transmit power to the maximum value to maximize the radio coverage area. However, a high transmit power level may cause interference to other wireless devices. Therefore, the optimal power is required to balance the coverage range and signal quality. Redundant Radio ⚫ A 2.4 GHz redundant radio (redundant radio for short) has co-channel or adjacent-channel interference with neighboring radios. The area covered by a redundant radio is also covered by neighboring 2.4 GHz radios. ⚫ As shown in the figure, all the four APs work on the 2.4 GHz frequency band. No matter which channel AP4 works on, co-channel or adjacent-channel interference exists between AP4 and its neighboring APs, and the area covered by AP4 can also be covered by the other three APs. AP4 is a redundant AP on this WLAN. Channel 6 AP2 Channel 1 AP1 AP4 Coverage area of AP4 (redundant AP) 15 Huawei Confidential AP3 Channel 11 Coverage area of neighboring APs Coverage area of the redundant AP DFA ⚫ Redundant radios on a WLAN not only generate co-channel interference but also waste network capacity. The following policies are available to process a redundant radio: Switching to the 5 GHz mode: If 5 GHz channel resources are available, a redundant radio can be switched to the 5 GHz mode, increasing the maximum capacity of 5 GHz radios. Switching to the monitor mode: If no more 5 GHz channel resources are available, a redundant radio can be switched to the monitor mode and used for scanning services. Disabling it: Disabling a redundant radio decreases co-channel interference but does not affect coverage. 2.4 GHz 5 GHz AP2 AP1 All APs work on the 2.4 GHz frequency band and there is a redundant radio. 16 AP4 AP2 AP1 AP3 AP4 AP3 AP4 switches to the 5 GHz frequency band. Huawei Confidential • Manually identifying, switching, or disabling redundant radios will greatly increase network maintenance costs. To resolve this issue, DFA is adopted to automatically identify, switch, or disable redundant radios, reducing co-channel interference on the 2.4 GHz frequency band and increasing system capacity. • DFA processes a redundant radio as follows: ▫ After identifying a redundant radio, the DCA algorithm switches the radio to the 5 GHz or monitor mode based on the channels, bandwidth, and interference of other radios on the network. ▫ After the redundant radio is switched to the 5 GHz mode, it works on the default 5 GHz channel. In this case, the DCA algorithm is used to adjust the radio channel. ▫ During this process, if a coverage hole is detected on 2.4 GHz radios, the 5 GHz radio is switched back to the 2.4 GHz mode. ▫ If the WAC restarts, the AP goes online again with the original configurations before the WAC restart, including the channel, power, frequency band, and radio status. If the AP goes online after a long period of time, the WAC determines redundant radios and allocates frequency bands to radios again. ▫ When the DFA function is disabled, the redundant radio configuration will be restored. That is, the radio in 5 GHz or monitor mode will be restored to the 2.4 GHz mode. DBS ⚫ For 5 GHz networks in non-high-density indoor scenarios, adjusting the frequency bandwidth does not cause extra interference. Therefore, the DBS algorithm can increase the frequency bandwidth of APs in hotspot areas to 40 MHz or 80 MHz based on channel allocation to improve network throughput. If other APs interfere with APs in hotspot areas after the frequency bandwidth is increased, the DBS algorithm reduces the frequency bandwidth of APs in hotspot areas to reduce network interference. Hotspot area Hotspot area 2.4 GHz 5 GHz Channel: 11 HT20 MHz Channel: 60 HT20 MHz 2.4 GHz 5 GHz Channel: 1 HT20 MHz Channel: 44 HT20 MHz Channel: 6 HT20 MHz Channel: 149 HT20 MHz 2.4 GHz Channel: 11 HT20 MHz Channel: 36 5 GHz HT20 MHz Channel: 6 HT20 MHz Channel: 149 HT20 MHz Channel: 11 HT20 MHz Channel: 52 HT20 MHz Channel: 1 HT20 MHz Channel: 44 HT20 MHz Channel: 1 HT20 MHz Channel: 161 HT20 MHz Channel: 6 HT20 MHz Channel: 60 HT20 MHz 5 GHz radios are configured to work in HT20 mode, which limits the user bandwidth. 17 2.4 GHz Channel: 11 HT20 MHz Channel: 60 5 GHz HT20 MHz 2.4 GHz 5 GHz Channel: 1 HT20 MHz Channel: 44 HT40 MHz Channel: 6 HT20 MHz Channel: 149 HT80 MHz 2.4 GHz Channel: 11 HT20 MHz Channel: 36 5 GHz HT20 MHz Channel: 6 HT20 MHz Channel: 149 HT20 MHz Channel: 11 HT20 MHz Channel: 52 HT40 MHz Channel: 1 HT20 MHz Channel: 44 HT40 MHz Channel: 1 HT20 MHz Channel: 161 HT20 MHz Channel: 6 HT20 MHz Channel: 60 HT20 MHz The DBS algorithm automatically increases the 5 GHz frequency bandwidth to improve the user bandwidth. Huawei Confidential • From IEEE 802.11ac, Wi-Fi systems support four types of frequency bandwidth: 20 MHz, 40 MHz, 80 MHz, and 160 MHz. Higher bandwidth brings higher throughput. However, because the number of available channels is limited, the single-radio frequency bandwidth of 80 MHz or 160 MHz cannot be configured for all APs. For 5 GHz networks in non-high-density indoor scenarios (AP spacing: 10–15 m), the DBS algorithm enables WACs to automatically identify the service priority, service throughput, and interference, and then preferentially assign more network resources to heavily loaded areas and dynamically allocate proper frequency bandwidth to radios of each AP, thereby improving user experience. • The DBS algorithm takes effect in the following ways: ▫ Groups available 5 GHz channels based on the capability of forming 80 MHz or 40 MHz channels. ▫ Sorts APs by topology distance. ▫ Assigns primary channels based on factors such as the interference index, bandwidth fulfillment degree, channel isolation degree, and channel multiplexing index. ▫ Bond 20 MHz channels of APs into 40 MHz or 80 MHz channels according to the channel assignment sequence. Implementation of Radio Calibration — Global Radio Calibration ⚫ Radio calibration requires the following components for implementation: AP: actively or passively collects radio environment information, sends the collected information to the WAC, and performs radio calibration based on the calibration results delivered by the WAC. WAC: maintains the AP neighbor topology based on the radio environment information reported by APs, uses calibration algorithms to allocate channels and transmit power to APs, and delivers calibration results to APs. ⚫ WACs support global radio calibration and partial radio calibration. Global radio calibration takes effect on all APs managed by a WAC. The WAC allocates channels and transmit power to all APs connected to it to achieve optimal radio performance. Typically, this calibration mode is used on a newly deployed WLAN or a WLAN with only a few services. AP WAC Instruct the AP to start neighbor probe. Report the probe result. Allocate channels and power to the AP based on the calibration policy. Deliver the calibration result. 18 Huawei Confidential • Global radio calibration is implemented as follows: ▫ After global radio calibration is enabled on a WAC, the WAC instructs each AP to perform neighbor probe periodically. ▫ The APs perform neighbor probe periodically. ▫ All APs report probe results to the WAC. ▫ After the WAC receives neighbor information reported by all APs, it uses global radio calibration algorithms to allocate channels and power to the APs. ▫ The WAC delivers calibration results to the APs. After the WAC implements global radio calibration for the first time, it starts the next global radio calibration until it receives neighbor information from APs. The WAC continuously implements global radio calibration to obtain optimal and accurate calibration results. • The global calibration algorithms include DCA, TPC, DBS, and DFA. Implementation of Radio Calibration — Partial Radio Calibration ⚫ Partial radio calibration aims to adjust the working channels and power of some APs to optimize the radio environment if it deteriorates in only some areas. Similar to global radio calibration, partial radio calibration uses the DCA and TPC algorithms. ⚫ Partial radio calibration is triggered in the following scenarios: A new AP goes online. An AP goes offline. When detecting that an AP goes offline, the WAC executes radio calibration algorithms to properly increase the transmit power of its neighboring APs to compensate for coverage holes. Interference from a rogue AP is detected. If a rogue AP is identified through neighbor probe, interference information is collected and used for triggering partial radio calibration. The radio environment deteriorates. 19 After detecting that a new AP goes online, the WAC allocates channels and transmit power to the AP and may re-allocate channels or transmit power to direct neighbors of the AP. If an AP detects that the channel utilization or noise floor is too high or it cannot send Beacon frames, the AP reports the issue to the WAC to trigger partial radio calibration. Interference from non-Wi-Fi devices is detected. If the spectrum analysis module identifies interference from non-Wi-Fi devices, it outputs interference information as the input for the calibration module and determine whether to trigger partial radio calibration based on the interference level. Partial radio calibration is manually triggered. Partial radio calibration is manually triggered for a specified AP or AP group. Huawei Confidential Key Configurations for Radio Calibration ⚫ Configure radio calibration. [WAC-wlan-view] calibrate enable auto [WAC-wlan-view] calibrate flexible-radio auto-switch [WAC-wlan-view] ap-group name ap-group1 [WAC-wlan-ap-group-ap-group1] radio 0 [WAC-wlan-group-radio-ap-group1/0] calibrate auto-channel-select enable [WAC-wlan-group-radio-ap-group1/0] calibrate auto-txpower-select enable [WAC-wlan-group-radio-ap-group1/0] calibrate auto-bandwidth-select enable [WAC-wlan-group-radio-ap-group1/0] undo calibrate flexible-radio disable [WAC-wlan-group-radio-ap-group1/0] radio 1 [WAC-wlan-group-radio-ap-group1/1] calibrate auto-channel-select enable [WAC-wlan-group-radio-ap-group1/1] calibrate auto-txpower-select enable [WAC-wlan-group-radio-ap-group1/1] calibrate auto-bandwidth-select enable [WAC-wlan-group-radio-ap-group1/1] undo calibrate flexible-radio disable [WAC-wlan-group-radio-ap-group1/1] quit 20 Huawei Confidential Contents 21 1. Air Interface Performance 2. Radio Calibration 3. STA Steering 4. Band Steering 5. AP-based Load Balancing 6. User CAC Huawei Confidential Overview of STA Steering ⚫ The STA steering function allows STAs with poor service experience to associate with more suitable APs based on the WLAN environment, improving service experience of STAs. Before a STA is associated with an AP, the AP checks whether the STA supports dual bands. If so, the AP suppresses Probe frames from the STA on the 2.4 GHz frequency band so that the STA preferentially accesses the 5 GHz radio. For details, see the overview to band steering. After a STA is associated with an AP, the target AP selection algorithm is used to measure the AP's dual-band capability, AP load, and signal quality, steering the STA to a better AP. Periodic load balancing A WAC sorts APs by load. Load balancing is performed for APs in descending order by load. The WAC determines the target AP based on the algorithm. Periodic identification A WAC periodically traverses all online STAs. The WAC selects the STAs that have been online for more than 10 minutes. Are there any better APs for these STAs? Sticky STA steering 22 Huawei Confidential When a STA is determined as a sticky STA, it is steered using smart roaming. The STA is steered to the target AP. Yes The WAC instructs the APs to steer these STAs. Neighboring AP List of a STA ⚫ Before steering a STA, the WAC needs to determine the target AP, which is selected from the neighboring AP list of the STA. Therefore, the WAC needs to collect, store, and maintain the neighboring AP lists of STAs. ⚫ Neighboring AP information can be obtained through Probe frame collection and Beacon Report measurement. WAC The WAC generates a neighboring AP list based on the STA information. AP AP Send the collected information to the WAC. Measurement STA Send Probe frames to obtain AP information returned by other STAs. 23 APs collect STA information through Probe frames and management frames and periodically report the STA information to the WAC. Probe frame collection STA Beacon Report measurement (active) Huawei Confidential • Probe frame collection: APs proactively scan channels and collect STA information (for example, through Probe frames and management frames). After collecting STA information, APs periodically report the collected information to the WAC. The WAC then generates a neighboring AP list based on STA information. • Beacon report measurement: applies only to scenarios where both APs and STAs support 802.11k. Beacon report measurement can be performed in one of the following modes: ▫ Active: In this mode, the measurement STA obtains AP information returned by other STAs after sending Probe frames to other STAs. ▫ Passive: In this mode, the measurement STA only obtains AP information on other STAs but does not send Probe frames to other STAs. ▫ Beacon table: In this mode, the measurement STA directly obtains AP information on other STAs. STA Steering Mode ⚫ When a STA meets the steering conditions, the AP steers the STA. WAC • The STA steering mode depends on whether the STA supports 802.11v. If so, the AP steers Switch the STA in BSS Transition Management (BTM) mode. If not, the AP steers the STA in Instruct neighboring APs to suppress association of the STA AP3 AP1 BTM STA6 STA7 STA2 STA3 STA4 STA5 Supporting 802.11v 24 deauthentication mode. AP2 Deauthentication To-besteered STA • Before sending a BTM or deauthentication message to steer the STA, the AP instructs STA1 neighboring APs to suppress Probe or Authentication frames from the STA. Not supporting 802.11v Huawei Confidential • BTM mode: BTM is a STA steering mode defined in 802.11v. • Deauthentication mode: An AP forces a STA to go offline, and the STA then selects target AP to associate. • STAs with voice or video services running are steered. • After a STA goes online again or roams, it will not be steered within five minutes. Contents 25 1. Air Interface Performance 2. Radio Calibration 3. STA Steering 4. Band Steering 5. AP-based Load Balancing 6. User CAC Huawei Confidential Overview of Band Steering ⚫ Most STAs on the live network support both 2.4 GHz and 5 GHz frequency bands. By default, some STAs connect to the network through APs on the 2.4 GHz frequency band. As a result, the 2.4 GHz frequency band with fewer channels is congested and has severe interference. The 5 GHz frequency band with more channels and less interference is not well utilized. ⚫ The band steering function enables an AP to steer STAs preferentially to the 5 GHz frequency band, reducing traffic load and interference on the 2.4 GHz frequency band. This function also implements load balancing among radios on different frequency bands (2.4 GHz and 5 GHz) of the same AP, improving user experience. ⚫ To implement band steering, an AP must have the same SSID and security policy on the 5 GHz and 2.4 GHz frequency bands. AP Access STA on the 5 GHz radio Access STAs on the 2.4 GHz radio Uneven STA distribution among radios 26 Huawei Confidential Implementation of Band Steering ⚫ Band steering enables STAs to preferentially connect to the 5 GHz frequency band based on the start threshold for 5G-prior access and the percentage threshold for access STAs on 5 GHz radios. ⚫ A WAC periodically traverses APs and uses STA steering technology to steer STAs from the 2.4 GHz frequency band to the 5 GHz frequency band based on the preceding thresholds. A STA requests to access an AP radio. Is the start threshold for 5Gprior access reached? No Yes Is the percentage threshold for access STAs on 5 GHz radios reached? Yes 27 Huawei Confidential The AP obtains the STA's dualband capability. Does the STA support dual bands? Yes The STA is steered to preferentially connect to the 5 GHz frequency band. No No The STA is allowed to access the radio. The STA randomly selects the 2.4 GHz or 5 GHz frequency band. Key Configurations for Band Steering ⚫ Configure band steering. [WAC-wlan-view] vap-profile name vap1 [WAC-wlan-vap-vap1] undo band-steer disable [WAC-wlan-vap-vap1] quit [WAC-wlan-view] rrm-profile name wlan-rrm [WAC-wlan-rrm-prof-wlan-rrm] band-steer balance start-threshold start-threshold [WAC-wlan-rrm-prof-wlan-rrm] band-steer balance gap-threshold gap-threshold [WAC-wlan-rrm-prof-wlan-rrm] band-steer deny-threshold deny-threshold [WAC-wlan-rrm-prof-wlan-rrm] quit [WAC-wlan-view] radio-2g-profile name default [WAC-wlan-radio-2g-prof-default] rrm-profile wlan-rrm [WAC-wlan-radio-2g-prof-default] quit 28 Huawei Confidential • Only the band steering parameters configured in the 2G radio profile take effect. Therefore, after an RRM profile is configured, it should be bound to the 2G radio profile. Contents 29 1. Air Interface Performance 2. Radio Calibration 3. STA Steering 4. Band Steering 5. AP-based Load Balancing 6. User CAC Huawei Confidential Overview of Load Balancing ⚫ Load balancing can evenly distribute AP traffic loads to ensure sufficient bandwidth for each STA. ⚫ After load balancing is enabled on a WAC, if some APs are heavily loaded, the WAC steers some STAs on these APs to lightly loaded APs based on the dual-band capability of STAs, AP load, and AP signal quality, effectively utilizing AP resources. ⚫ The load balancing function applies to high-density WLANs to ensure proper access of STAs. Depending on whether a load balancing group needs to be manually created, load balancing is classified into static load balancing and dynamic load balancing. WAC APs enabled with load balancing must be connected to the same WAC. Switch AP1 STAs must be able to scan the SSIDs of the APs engaged in load balancing. 30 AP2 New STA Huawei Confidential • Currently, load balancing cannot be implemented among APs connected to different WACs. Static Load Balancing ⚫ In static load balancing mode, APs providing the same services need to be manually added to a static load balancing group. Each AP in the group periodically reports STA association information to the WAC, and the WAC then performs load balancing based on the received information. When a STA sends an association request to an AP, the WAC uses the load balancing algorithm to determine whether to permit access from the STA. WAC A radio of an AP can join only one load balancing group. Switch AP1 Each load balancing group supports a maximum of 16 members. 31 2.4 GHz AP2 New STA 2.4 GHz Huawei Confidential • Static load balancing can be implemented when the following conditions are met: ▫ A radio of an AP can join only one load balancing group. The APs in the figure above are single-band APs. That is, each AP has only one 2.4 GHz or 5 GHz radio. For APs with multiple radios, load balancing can be implemented among radios of the APs working on the same frequency band. This means that a dual-band AP can join two load balancing groups. ▫ Each load balancing group supports a maximum of 16 members. Dynamic Load Balancing ⚫ In dynamic load balancing mode, after a STA goes online, the WAC obtains the frequency bands supported by the STA and information about neighboring APs through Probe frame collection and Beacon Report measurement. Then the WAC uses the load balancing algorithm to determine whether to connect the STA to a lightly loaded AP. WAC 3 2 Report the STA information to the WAC. AP1 AP1 and AP2 form a dynamic load balancing group. 2 Report the STA information to the WAC. 1 AP2 Probe Request 1 New STA 32 • Before a new STA goes online, it broadcasts Probe Request frames to scan surrounding APs. • APs that receive the Probe Request frames report the STA information to the WAC. • The WAC adds all the APs that report the STA information to a dynamic load balancing group, and then uses the load balancing algorithm to determine whether to permit access from the STA. Huawei Confidential • In static load balancing mode, a load balancing group supports a limited number of members, and all members must be manually added to the group and on the same frequency band. Dynamic load balancing overcomes these limitations. Implementation of Load Balancing (1/2) ⚫ AP-based load balancing is implemented in three phases: proactive AP load advertisement, setup of a load balancing group, and STA steering. ⚫ Proactive AP load advertisement: APs proactively advertise their loads, and STAs select and access the optimal radios. The following figure shows the AP load advertisement process: A STA broadcasts its capabilities, and APs identify STA capabilities. No APs advertise their loads in the QBSS Load IE field of Beacon frames and Probe Response frames. Does the STA support 802.11k? Yes When advertising their loads, the APs send responses for Neighbor Report Request frames sent from the STA to notify the STA of neighboring AP information. The STA selects and accesses the optimal radio (with the minimum number of STAs and the minimum channel utilization) based on the load information. 33 Huawei Confidential • A STA broadcast its capabilities through Probe Request frames and Association Request frames. Implementation of Load Balancing (2/2) Setup of a load balancing group: ⚫ Manual generation: AP radios are manually added to a static load balancing group. Automatic generation: APs around a STA collect some management frames, control frames, and data frames of the STA and report the AP information to the WAC. The WAC adds all APs that report the STA information to a dynamic load balancing group. STA steering: STAs are steered from a heavily loaded radio to a lightly loaded radio in a load balancing group. ⚫ A WAC periodically traverses APs to determine whether to steer a STA. The STA is steered. The STA is steered when the following conditions are met: A STA is steered in either of the following modes: ⚫ A neighboring AP exists. ⚫ If the STA supports 802.11v, it is steered in BTM mode. ⚫ The load of the neighboring AP's radio is less than that of the original AP. ⚫ ⚫ The signal quality of the neighboring AP's radio is higher than the lower threshold. If the STA does not support 802.11v or fails to be steered in BTM mode, it is steered in deauthentication mode. ⚫ The signal quality of the neighboring AP's radio is higher than or slightly lower than that of the original AP. 34 Huawei Confidential Key Configurations for Load Balancing ⚫ Configure dynamic load balancing. [WAC-wlan-view] rrm-profile name wlan-rrm [WAC-wlan-rrm-prof-wlan-rrm] undo sta-load-balance dynamic disable [WAC-wlan-rrm-prof-wlan-rrm] sta-load-balance dynamic sta-number start-threshold start-threshold-value [WAC-wlan-rrm-prof-wlan-rrm] sta-load-balance dynamic sta-number gap-threshold { percentage percentage-value | number number-value } [WAC-wlan-rrm-prof-wlan-rrm] quit [WAC-wlan-view] radio-5g-profile name default [WAC-wlan-radio-5g-prof-default] rrm-profile wlan-rrm [WAC-wlan-radio-5g-prof-default] quit 35 Huawei Confidential Contents 36 1. Air Interface Performance 2. Radio Calibration 3. STA Steering 4. Band Steering 5. AP-based Load Balancing 6. User CAC Huawei Confidential User CAC ⚫ On WLANs where many users exist, such as in high density scenarios, users compete fiercely to occupy channels as the number of online users increases. As a result, network quality deteriorates. To ensure network experience of online users, the user CAC function can be configured. This function allows an AP to control user access based on the threshold specified according to the number of online users or terminal SNR, ensuring network access quality of online users. User CAC is implemented in either of the following modes: Based on the number of users No An AP receives an access request from a new user. 37 The AP allows the user to go online. Does the number of online users reach the threshold? Yes Based on the terminal SNR The AP denies access from the new user. No An AP receives an access request from a new user. The AP allows the user to go online. Does the terminal SNR of the user reach the threshold? Yes The AP denies access from the new user. Huawei Confidential • User CAC based on the number of users uses a simple algorithm. This mode is recommended when most users have the same type of services and similar service traffic volumes. ▫ When receiving an access request from a new user, an AP calculates the current number of online users on the radio and checks whether the number reaches the threshold. If not, the AP allows the user to go online. If so, the AP denies access from the user. ▫ If the number of online users reaches the threshold after the new user goes online, the AP will deny the access request from the new user and send an alarm, and can hide its SSID. When a user roams to the AP, the AP checks whether the number of online users reaches the threshold set for roaming users. If so, the AP denies access from the user. ▫ When the number of online users falls below the threshold set for new users, the AP sends a clear alarm, unhides the SSID, and allows new users to go online. • CAC based on the terminal SNR controls access from weak-signal users, and is applicable to scenarios where WLANs have good signal coverage and weak signals only at the edge of WLAN coverage areas. ▫ When receiving an access request from a new user, an AP checks whether the terminal SNR reaches the threshold specified for new users. If not, the AP allows the user to go online. If so, the AP denies access from the user. Key Configurations for User CAC ⚫ Configure CAC based on the number of users. [WAC-wlan-view] rrm-profile name wlan-rrm [WAC-wlan-rrm-prof-wlan-rrm] uac client-number enable [WAC-wlan-rrm-prof-wlan-rrm] uac client-number threshold access access-threshold [ roam roam-threshold ] [WAC-wlan-rrm-prof-wlan-rrm] uac reach-access-threshold hide-ssid ⚫ Configure CAC based on the terminal SNR. [WAC-wlan-view] rrm-profile name wlan-rrm [WAC-wlan-rrm-prof-wlan-rrm] uac client-snr enable [WAC-wlan-rrm-prof-wlan-rrm] uac client-snr threshold threshold [WAC-wlan-rrm-prof-wlan-rrm] uac reach-access-threshold hide-ssid 38 Huawei Confidential Quiz 1. (Multiple-answer question) Which of the following functions are supported in the automatic radio calibration solution? ( ) A. Dynamic frequency assignment (DFA) B. Dynamic bandwidth selection (DBS) C. Dynamic channel assignment (DCA) D. Transmit power control (TPC) 2. (True or false) If radio channel switching is triggered during channel scanning, the service data delay increases at the moment the channel switches, which may affect wireless service experience. ( 39 A. True B. False Huawei Confidential 1. ABCD 2. A ) Summary ⚫ This course describes the RRM solution, including radio calibration, band steering, load balancing, and user CAC. RRM helps dynamically adjust radio resources to adapt to changes in the radio environment, provide high service quality for wireless network access, maintain the optimal radio resource status, and improve user experience. ⚫ Upon completion of this course, you will be able to understand the main factors that affect air interface performance and master the RRM technologies. 40 Huawei Confidential Recommendations ⚫ 41 Huawei official websites: Enterprise service: https://e.huawei.com/en/ Technical support: https://support.huawei.com/enterprise/en/index.html Online learning: https://www.huawei.com/en/learning Huawei Confidential Acronyms and Abbreviations Acronym/Abbreviation 42 Full Name BTM BSS Transition Management CSMA/CA Carrier Sense Multiple Access with Collision Avoidance DCA Dynamic Channel Allocation GI Guard Interval MCS Modulation and Coding Scheme SNR Signal-to-Noise Ratio Huawei Confidential Thank you. 把数字世界带入每个人、每个家庭、 每个组织,构建万物互联的智能世界。 Bring digital to every person, home, and organization for a fully connected, intelligent world. Copyright© 2022 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice. WLAN Planning Basics Foreword ⚫ WLAN planning is an indispensable part before network deployment. Proper network planning can better support customer communication and quotation and reduce risks that may occur in subsequent delivery. ⚫ This course introduces the basic knowledge of network planning in terms of coverage and capacity. 2 Huawei Confidential Objectives ⚫ 3 On completion of this course, you will be able to: Understand the factors that affect WLAN coverage. Understand the concepts of and relationship between power and signal strength. Understand the factors that affect WLAN capacity. Huawei Confidential Contents 4 1. WLAN Planning Overview 2. WLAN Coverage Design 3. WLAN Capacity Design Huawei Confidential Current WLAN Status A WLAN uses radio signals to transmit data. The strength of radio signals becomes weaker as the transmission ⚫ distance increases. In addition, adjacent radio signals cause interference overlapping. All these factors reduce the signal quality or even cause network unavailability. During WLAN project delivery, if professional network planning and design are not performed in the early stage, ⚫ rework operations such as AP reinstallation and re-cabling may be required after the construction is complete. WLAN planning is performed to address the following issues: ⚫ VIP Weak signal strength 5 Severe co-channel interference Slow Internet access No obvious experience advantage in VIP areas Huawei Confidential • Weak signal strength: If the actual transmit power of APs is not considered during the wireless network coverage design, coverage holes may exist. In this case, the signal strength is weak or even no signal is available. As a result, users suffer from slow Internet access or even cannot access the Internet. Therefore, the coverage area of each AP needs to be properly planned during WLAN planning to ensure that each area is covered by strong wireless signals. • Severe co-channel interference: Co-channel interference is generated when radios of two neighboring APs work on the same channel. When co-channel interference occurs, signals of the APs are interfered and delays arise when the APs receive and send data simultaneously, which greatly reduces network performance. Therefore, different working channels that do not interfere with each other need to be allocated for APs with overlapping coverage areas. • Slow Internet access: WLAN data transmission uses the Carrier Sense Multiple Access with Collision Avoid (CSMA/CA) mechanism. The probability of wireless packet collisions grows as the number of concurrent access users increases, thereby slowing down the Internet access speed. For example, in high-density scenarios such as stadium stands, a large number of wireless users connect to each radio of APs, causing a high probability of wireless packet collisions. In these scenarios, three-radio APs are recommended to control the number of access users on each radio and reduce the packet collision probability. • No obvious experience advantage in VIP areas: VIP areas require special attention during WLAN planning. The Internet access experience of users in VIP areas should be preferentially guaranteed. Introduction to WLAN Planning To improve the wireless network quality, meet the customer's network construction requirements, and avoid rework ⚫ operations such as AP redeployment due to network optimization in the subsequent delivery phase, the WLAN needs to be planned and designed before project delivery. Network planning Ensure AP models and quantity No network coverage holes AP installation positions and modes Good signal coverage Fast Internet access WLAN coverage design Country code EIRP Frequency band and channel 6 Huawei Confidential MIMO Cabling deployment Good network experience WLAN capacity design Antenna Signal attenuation Number of radios Bandwidth Spatial stream MCS GI mode Channel bonding Contents 1. 2. WLAN Planning Overview WLAN Coverage Design ◼ Coverage Design Overview ▫ Introduction to Coverage Design Parameters 3. 7 WLAN Capacity Design Huawei Confidential WLAN Coverage Design Overview During network coverage design, you need to design and plan coverage for common, simple, ⚫ and VIP areas to ensure that the signal strength in each area meets user requirements and to minimize interference between neighboring APs. WLAN coverage design involves the following phases: ⚫ 8 Coverage scenarios Coverage areas Factors affecting the coverage effect Determine the coverage scenarios of WLAN projects, such as indoor coverage and outdoor coverage. Determine the signal coverage of WLAN projects and the methods of measuring the coverage. Determine all factors that affect signal coverage, such as obstacle materials and thickness. Huawei Confidential Coverage Scenarios Coverage scenarios are classified into indoor coverage, outdoor coverage, and backhaul scenarios. ⚫ Indoor coverage: It involves many scenarios and needs to be analyzed based on specific scenarios. Indoor signals are greatly affected by walls, and concurrent bandwidth requirements vary greatly. Outdoor coverage: The signal coverage in the outdoor area is typically large with diversified service types and highly mobile STAs. The requirement for bandwidth is not high, but that for the protection level of devices is high. Backhaul scenario: The construction is difficult and the cabling cost is high. Compared with wired transmission, the WLAN bandwidth is limited. Enterprise office scenario (indoor) 9 Huawei Confidential Square scenario (outdoor) Traffic scenario (backhaul) Coverage Area ⚫ APs transmit radio signals using antennas. With an antenna as the center, longer distance indicates weaker signal strength. Generally, the area where the signal strength around an antenna is greater than the edge field strength is called wireless network coverage area. The field strength of radio signals at the edge of a network coverage area is called edge field strength. ⚫ For example, if the signal strength indicator value in a common coverage area is –65 dBm, the edge field strength must be greater than or equal to –65 dBm during network planning and design. Edge field strength ≥ –65 dBm Coverage distance Coverage area AP Coverage area Edge field strength ≥ –65 dBm AP Top view of an omnidirectional antenna 10 Top view of a directional antenna Huawei Confidential • Network indicator values refer to the recommended values of edge field strength provided by network planning in different scenarios. The network indicator values vary according to the coverage requirements. Coverage Area - Measurement Modes ⚫ Omnidirectional antennas and directional antennas use different methods to measure the coverage range. Coverage radius and coverage distance are used for omnidirectional antennas and directional antennas respectively. To calculate the coverage range using the two methods, the maximum transmission distance needs to be determined in addition to the height measured during site survey. Directional antenna Height Maximum transmission distance Antenna height Maximum transmission distance Coverage radius Coverage area Measurement for an omnidirectional antenna 11 Huawei Confidential Coverage distance Measurement for a directional antenna Calculating Maximum Transmission Distance ⚫ Path loss can be calculated using the final signal field strength formula. Then the maximum transmission distance can be calculated based on its relationship with the path loss. ⚫ The Received Signal Strength Indicator (RSSI) is calculated as follows (regardless of factors such as the interference and line loss): Final signal field strength = AP transmit power + MIMO gain + Antenna gain – Path loss – Obstacle signal attenuation The relationship between the path loss and the maximum transmission distance is as follows (indoor semi-open scenario):2.4G: L = 46 + 25lg(d) 12 L: path loss (dB); d: maximum transmission distance (m) 5G: L = 53 + 30lg(d) Final signal field strength –65 dBm AP transmit power 20 dBm 5G antenna gain 6 dBi Obstacle signal attenuation 8 dB Antenna gain (mobile phone) 0 For example, to calculate the maximum transmission distance of 5 GHz signals in an indoor semi-open scenario, the known information is listed in the left table. The calculation process is as follows: –65 = 20 + 6 + 0 – [53 + 30lg(d)] – 8 d = 10 The maximum transmission distance of 5 GHz radio signals with the signal field strength of –65 dBm is 10 m. Huawei Confidential • Formula for calculating the path loss in the indoor semi-open environment: ▫ 2.4 GHz frequency band: (attenuation factor D = 2.5; penetration factor p = 6); ▫ L = 20 x lg(f) + 10 x D x lg(d) + p – 28 = 46 + 25 x lg(d); ▫ 5 GHz frequency band: (attenuation factor D = 3; penetration factor p = 6); ▫ L = 20 x lg(f) + 10 x D x lg(d) + p – 28 = 53 + 30 x lg(d); ▫ In this formula, L indicates the path loss (dB), f indicates the working frequency (MHz), D indicates the attenuation factor, d indicates the distance (m), and p indicates the penetration factor. Contents 1. WLAN Planning Overview 2. WLAN Coverage Design ▫ Coverage Design Overview ◼ 3. 13 Introduction to Coverage Design Parameters WLAN Capacity Design Huawei Confidential Antenna ⚫ ⚫ An antenna is used to transmit or receive radio waves, providing three basic attributes for the wireless system: Gain: measures the density of the energy radiated by an antenna. Directivity: refers to the signal transmission pattern. Polarization: refers to the radiation specification that describes the orientation of electromagnetic wave field. Antennas are classified into the following types: By radiation direction • • Omnidirection 14 • Single- al antenna polarized Directional antenna antenna • By polarization • Smart antenna Dual-polarized antenna By appearance • Whip antenna • Plate-shaped antenna • Panel antenna By location • External antenna • Built-in antenna Huawei Confidential • Omnidirectional antenna: ▫ An omnidirectional antenna radiates energy with the same intensity in all directions on the horizontal plane but with different intensities in each direction on the vertical plane. ▫ The radiation pattern of an omnidirectional antenna is similar to that of an incandescent lamp, which radiates visible light in all directions on the horizontal plane. • Directional antenna: ▫ A directional antenna radiates energy with different intensities in each direction on both the horizontal and vertical planes. ▫ The radiation pattern of a directional antenna is similar to that of a flashlight, which radiates visible light towards a certain direction. With the same radio energy, a directional antenna provides a longer coverage distance than an omnidirectional antenna in a particular direction at the expense of coverage in other areas. • Smart antenna: ▫ A smart antenna has multiple directional radiation patterns and one omnidirectional radiation pattern on the horizontal plane. ▫ A smart antenna receives signals from transmitters in the omnidirectional pattern. The smart antenna algorithm can determine the location of a transmitter based on the received signals, and control the CPU to send control signals to the transmitter in a directional radiation pattern with the direction of the maximum radiation. ▫ Advantages of smart antennas: ▪ Large coverage area: Smart antennas concentrate energy more effectively and have high gains, and therefore provide wider coverage. A smart omnidirectional antenna's coverage scope is equivalent to a directional antenna's coverage scope. ▪ High anti-interference capability: A smart antenna produces directional beams in space, with the main lobe pointing to useful signals' direction of arrival and side lobes and nulling beams point to interference signals' direction of arrival. ▪ Low pollution to the environment: A smart antenna provides satisfied power for STAs using low transmit power. This reduces the electromagnetic wave pollution to the environment. • Polarized antenna: Both single polarization and dual polarization are essentially linear polarizations, which include horizontal polarization and vertical polarization. ▫ Single-polarized antenna: an antenna that only transmits or receives radio waves. Therefore, radio waves that are received or transmitted by a singlepolarized antenna are either horizontally or vertically polarized. Singlepolarized antennas require a large installation space and heavy maintenance workload. ▫ Dual-polarized antenna: an antenna that transmits and receives radio waves on both the horizontal and vertical planes. • Whip antenna: ▫ Whip antennas are usually delivered with wireless devices, for example, external antennas of indoor settled APs or Wi-Fi-capable devices. Whip antennas have high gains, simple working mechanism, and low costs. • Plate-shaped antenna: ▫ Plate-shaped antennas are widely used and very important. For example, directional antennas used in outdoor scenarios are mostly plate-shaped antennas. Plated-shape antennas have the following advantages: high gains, good radiation pattern in the sector, small back lobe, easy control of the downtilt in the vertical radiation pattern, reliable sealing performance, and long service life. • Built-in and external antennas are commonly used on indoor settled APs. Currently, for better appearance, most APs use built-in omnidirectional antennas, whose quantity and angles are invisible from the exterior of an AP. Antenna Forms 16 Omnidirectional antenna (outdoor) Directional antenna (outdoor) Directional antenna (indoor) Backhaul antenna (outdoor) Ceiling-mounted antenna Whip antenna Panel antenna (built-in) Smart antenna Huawei Confidential • All smart antennas are built-in antennas. Antenna Angle ⚫ Antenna angles include the azimuth and downtilt angles, which are formed between an antenna and the north and horizontal directions, respectively. ⚫ A small antenna angle provides a high antenna gain. However, the key to selecting an antenna gain is to meet signal coverage requirements. The signal coverage range of an antenna can be controlled by adjusting the antenna azimuth and downtilt angles. Y North Azimuth X Antenna downtilt 8° Antenna height Vertical beamwidth 30° Inner radius 17 Huawei Confidential Coverage area Outer radius Antenna Gain ⚫ Antenna gain is the ratio of the power density in a given direction to the power density of a reference antenna (using an ideal radiation source) in the same direction. It is expressed in dBd or dBi, where dBi = dBd + 2.15. ⚫ Antenna gain can be used to measure the capability of an antenna to receive and send signals in a specified direction, which is one of the most important parameters to consider when selecting an antenna. The antenna gain is closely related to the antenna radiation pattern. The narrower main lobe indicates smaller side lobe, higher gain, and longer propagation distance of radio waves. ⚫ In practice, select a proper antenna gain to ensure that beamwidth matches the target coverage area. If the coverage distance is small, select low-gain antennas with wide vertical lobes to ensure the coverage effect in the area near the antenna. Low gain 18 High gain Huawei Confidential • The antenna gain is a passive phenomenon and does not increase the power of antennas. Instead, the antenna gain enables antennas to radiate more energy in a certain direction than omnidirectional antennas by reallocating the power. It is a quantitative measure to describe how much input power an antenna can radiate in a given direction. • Basic concepts: ▫ dBd: defines the gain of an antenna compared to the symmetrical dipole. ▫ dBi: defines the gain of an antenna compared to an isotropic antenna, which radiates energy with the same intensity in all directions. ▫ Lobe angle: defined as the angle between the points in the main lobe that are down from the maximum gain by 3 dB. ▫ Ideal radiation source: ideal isotropic antenna, that is, a simple pointshaped radiation source that provides the same radiation performance in all directions. Antenna Specifications - Beamwidth ⚫ Beamwidth is the angular separation between the points in the main lobe that are down from the maximum gain by 3 dB. It is also called main-lobe width, half-power angle, or lobe angle. The radiation pattern of an antenna usually has two or more lobes. The lobe with the maximum radiation is the main lobe, and the other lobes are back and side lobes. ⚫ An antenna has horizontal beamwidth and vertical beamwidth, forming a horizontal lobe angle and a vertical lobe angle, respectively. When the beamwidth is narrow, radiation distance is long and interference is prevented. Main lobe -3 dB point Side lobe Beamwidth Peak direction (direction of maximum radiation) -3 dB point Horizontal pattern 19 Vertical pattern Huawei Confidential • Main lobe: Antennas have various radiation patterns. Some of them look like petals. The one with the strongest radiation "sticks out". It is the main lobe. • Side lobe: lobes other than the main lobe on a radiation pattern. • When deploying antennas, side lobes will interfere with peripheral areas. Typically, the main-lobe radiation needs to be enhanced, and the side-lobe radiation needs to be suppressed. However, in the areas near the antennas, we can enhance the side-lobe radiation to eliminate coverage holes. Antenna Directivity ⚫ Antenna directivity indicates the capability of antennas radiating electromagnetic waves to a certain direction. For receive antennas, the directivity indicates the capability of receiving electromagnetic waves from different directions. External antennas can be classified into omnidirectional antennas and directional antennas by direction. Omnidirectional antenna The direction of maximum radiation is on the horizontal plane. An antenna has equal radiation in all directions on the horizontal plane. • • Horizontal plane Vertical plane Directional antenna The reflector reflects electromagnetic waves to one side to enhance the gain. Plane reflector Omnidirectional radiation (without a plane reflector) 20 Huawei Confidential Donut-shaped radiation pattern An omnidirectional antenna does not have the direction of maximum radiation on the horizontal plane. Omnidirectional antennas are undirectional, so they are usually used for point-tomultipoint communication. Directional enhancement (with a plane reflector) • A directional antenna has one or more directions of maximum radiation on the horizontal plane. • Directional antennas are suitable for long-distance communication because of their directivity, energy concentration, and strong anti-interference capability. Antenna Polarization ⚫ Polarization is radiation specification that describes the orientation of electromagnetic wave field. The electric field vector in the direction of the antenna's strongest radiation is usually used as the polarization direction of electromagnetic wave. If the receive antenna needs to receive signals properly, ensure that the polarization direction of the electromagnetic wave is the same as that of the receive antenna. ⚫ WLAN antennas are classified into single-polarized antennas and dual-polarized antennas. Both of them use the linear polarization which can be horizontal polarization or vertical polarization. Single-polarized antenna Dual-polarized antenna Antenna Electrical field direction Vertical polarization Horizontal polarization +45°polarization 21 –45°polarization Vertical and horizontal ±45°cross polarization polarization ±45°cross polarization outperforms vertical and horizontal polarization in terms of signal reception balance. Huawei Confidential • The polarization direction of the antenna is the electric field direction of the electromagnetic field of antenna radiation. ▫ Vertical polarized wave: The electric field direction of the electromagnetic wave is perpendicular to the ground. ▫ Horizontal polarized wave: The electric field direction of the electromagnetic wave is parallel to the ground. • Single-polarized antenna: transmits and receives signals separately. One antenna contains only one polarization mode. Radio waves that are received or transmitted by a single-polarized antenna are either horizontally or vertically polarized. • Dual-polarized antenna: One antenna is used for receiving and transmitting signals. It supports vertical and horizontal polarization modes. • Due to the characteristics of electrical waves, the horizontally polarized signals generate current when approaching to the ground. Polarized current generates heat due to ground impedance. As a result, electrical field signals are attenuated. The vertically polarized signals do not generate current, so energy will not be attenuated, and effective signal propagation is ensured. Therefore, vertical polarization is widely used in mobile communication. For example, Huawei uses vertically polarized antennas or ±45° dual-polarized antennas in wireless communication systems. • A dual-polarized antenna is a combination of vertically polarized antennas and horizontally polarized antennas, or a combination of +45° polarized antennas and -45° polarized antennas. • With development of new technologies, dual-polarized antennas are widely used now. There are two polarization modes: vertical and horizontal polarization and ±45° polarization. The ±45° polarization mode has better performance than the vertical and horizontal polarization modes. Therefore, the ±45° polarization mode is used in most cases. A dual-polarized antenna combines two orthogonal antennas with polarization directions of +45° and –45° and works in duplex mode, which greatly reduces the number of antennas in each area. In addition, the orthogonal polarization (±45°) ensures the good effect of receive diversity. SISO, MISO, SIMO, and MIMO Transmit antenna Receive antenna Transmit antenna Path 1 Unique path Single-input single-output (SISO) There is a unique path between the transmit antenna and the receive antenna, along which one signal is transmitted. Each signal is defined as one spatial stream. Receive antenna Transmit antenna Path 1 Receive antenna Multiple-input single-output (MISO) There are two paths between transmit antennas and the receive antenna. Only one receive antenna exists, and therefore the transmit antennas can send only the same one signal along the two paths. The effect is similar to that of SIMO. Transmit antenna Path 1 Receive antenna Path 4 Single-input multiple-output (SIMO) There are two paths between the transmit antenna and receive antennas. Data is sent from the same transmit antenna, and therefore only one signal is transmitted, doubling reliability. 23 Multiple-input multiple-output (MIMO) There are four paths between transmit and receive antennas, along which two signals are transmitted at the same time, thereby doubling the rate. Huawei Confidential • SISO ▫ In SISO, there is a unique path between the transmit antenna and the receive antenna. Apparently, such transmission is unreliable and rate limited. To address this issue, we add more antennas on the receive end (STA) so that two or more signals can be received concurrently, that is, single-input multiple-output (SIMO). • SIMO ▫ There are two paths between the transmit antenna and receive antennas. Data is sent from the same transmit antenna, and therefore only one signal is transmitted, doubling reliability. This mode is also known as receive diversity. • MISO ▫ There are two paths between transmit antennas and the receive antenna. Only one receive antenna exists, and therefore the transmit antennas can send only the same data along the two paths. The effect is similar to that of SIMO. This mode is also known as transmit diversity. • MIMO ▫ MIMO technology allows multiple antennas to send and receive spatial streams (multiple signals) simultaneously and to differentiate the signals sent to or received from different spaces. By leveraging technologies such as spatial reuse (SR) and space diversity (SD), MIMO boosts system capacity, coverage scope, and signal to noise ratio (SNR) without increasing the occupied bandwidth. MIMO ⚫ MIMO is a technology that can multiply the system spectrum efficiency. MIMO transmission is also called spatial multiplexing. The technology uses multiple antennas at the transmit end and receive end and employ certain signal processing technologies at both ends to complete data communication, bringing power gains, multiplexing gains, diversity gains, and array gains. TX#M RX#N Received signal processing ... Transmit signal processing RX#1 ... Source TX#1 Process of MIMO Often referred to M xN MIMO system M and N indicate the number of transmit antennas and receive antennas respectively. 24 Power gain Improves the SNR at the receive end and the signal receiving quality. Multiple xing gain Increases the signal transmission rate, throughput, and peak capacity. Diversity gain Improves the stability of the SNR at the receive end and the reliability of signal reception. Array gain Increases average SNR as a result of combining multiple signals. Huawei Confidential • Power gain: In noise-limited scenarios, power gains increase the SNR at the receive end, thereby improving the signal receiving quality and enhancing the system capacity and coverage performance. For example, if each antenna has the same transmit power, M antennas bring a power gain of 10lg(M) dB compared with one antenna. • Multiplexing gain: Multiplexing gains are derived from the theoretical multiplexing orders of spatial channels. Theoretically, the capacity of an MxN MIMO system is min(M,N) times that of a SISO system. For example, assuming that the theoretical peak rate is 75 Mbps in 1x1 SISO mode, 150 Mbps can be achieved in 2x2 MIMO mode, and approximately 300 Mbps in 4x4 MIMO mode. • Diversity gain: a performance gain achieved by reducing the fluctuation of the SNR of the combined signals based on the independence of spatial channel fading. If channels between transmit and receive antennas are mutually independent and signals from all transmit antennas are the same, the theoretical diversity order of an MxN MIMO system is MxN times that of a SISO system. • Array gain: performance gain achieved by increasing the average SNR of the combined signals based on the correlation between signals and the noncorrelation between noises on different antennas. Compared with a SISO system, a 1xN SIMO system and an Mx1 MISO system bring array gains of 10lg(N) dB and 10lg(M) dB, respectively. MU-MIMO ⚫ MIMO can be classified into single-user MIMO (SU-MIMO) and multi-user MIMO (MU-MIMO) by the number of users. SU-MIMO: Multiple parallel spatial streams that occupy the same time-frequency resource are transmitted to the same user, improving the throughput of a single user. MU-MIMO: Multiple parallel spatial streams that occupy the same time-frequency resources are transmitted to different users, improving the throughput and capacity of multiple users. User 1 AP SU-MIMO The AP sends data to a single user at a time. 25 User 1 User 2 AP MU-MIMO The AP sends data to three users at a time. User 3 Huawei Confidential • The time-frequency resources combine time domain resources and frequency domain resources. • A wireless device that supports MU-MIMO technology can transmit data simultaneously with multiple STAs, which changes serial to parallel transmission mode and shortens the waiting time for STAs to obtain data from the wireless device. Additionally, the bandwidth resources obtained by each STA are not compromised. Therefore, this technology maximizes the resource utilization and thereby increases the capacity of the wireless device and the Internet access speed of STAs. Country Code ⚫ During WLAN planning, network planning engineers need to determine the country code first. WLANs in different countries or regions comply with different laws and regulations, and can use different channels and maximum transmit power of radios. ⚫ Different country codes correspond to different channels and maximum transmit power, which cannot exceed the ranges supported by the country codes. Otherwise, the network planning solution cannot be applied to actual situations. Country/ Region Country Code People's Republic of China CN Macao, China MO 26 Applicable AP Type 2.4 GHz Maximum Transmit Channel Power of 2.4 GHz (20 MHz) Channel (dBm) Indoor AP 20 36, 40, 44, 48, 52, 56, 60, 64, 149, 153, 157, 161, 165 27 149, 153, 157, 161, 165 23 36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140, 144, 149, 153, 157, 161, 165 1–13 Outdoor AP All AP models 1–13 5 GHz Channel (20 MHz) Maximum Transmit Power of 5 GHz Channel (dBm) Channels: 36– 48 and 52–64 Channels: 100–144 Channels: 149–165 23 N/A 33 23 30 30 Huawei Confidential • For details about the supported channels and maximum transmit power of radios in different countries or regions, see WLAN Country Codes and Channels Compliance. Frequency Band and Channel ⚫ Radio signals are transmitted using electromagnetic waves (also called radios) at 2.4 GHz, 5 GHz, or 6 GHz. The frequency range of a radio is referred to as a frequency band, for example, 2.4 GHz and 5 GHz frequency bands. Frequency ranges divided based on a frequency band are called channels, which are classified into overlapping channels (for example, 1 and 2) and non-overlapping channels (for example, 1 and 5). To avoid signal interference, information is exchanged through non-overlapping channels on the live network. Channels on the 5 GHz frequency band (non-overlapping) Channels on the 2.4 GHz frequency band Channel: 1 3 5 7 9 11 13 Center 2.412 2.422 2.432 2.442 2.452 2.462 2.472 frequency 2 4 6 8 10 12 (GHz): 2.417 2.427 2.437 2.447 2.457 2.467 14 2.484 5730 5735 5170 5330 5490 5835 5250 Frequency (MHz): UNII-2 UNII-3 UNII-2 UNII-1 Extend 153 Channel: 36 40 44 48 52 56 60 64 Frequency bandwidth 20 MHz 27 The 2.4 GHz frequency band is divided into 14 channels, each with 20 MHz frequency bandwidth (except 802.11b). Some of them overlap with each other. Non-overlapping channels 1, 5, 9, and 13 are typically used on the live network. 100 ... ... 144 149 161 157 165 Gray channels are unavailable in China. For the 5 GHz frequency band, frequency resources are richer, and a large number of non-overlapping channels are available. 5 GHz channels that can be used vary slightly in different countries. In China, 13 nonoverlapping channels can be used. Huawei Confidential • UNII is short for Unlicensed National Information Infrastructure. • The 5 GHz Wi-Fi frequency band is much higher than the 2.4 GHz frequency band in terms of frequency, speed, and anti-interference. However, as this band has a higher frequency and therefore a shorter wavelength than its 2.4 GHz counterpart, it delivers poor penetration capabilities and shorter transmission distances. While 5 GHz frequency band ranges vary from country to country, its wide frequency bandwidth and reduced interference make it suitable for highspeed transmission. EIRP ⚫ Equivalent Isotropically Radiated Power (EIRP) is the power radiated by an antenna in a specific direction, in dBm. The maximum EIRP values vary with countries, frequency bands, and channels, thereby imposing great restrictions on outdoor signal coverage. Therefore, the maximum EIRP values of the corresponding countries need to be determined before network planning and design. ⚫ The EIRP is usually calculated based on the conducted power. The relationship between EIRP, transmit power, and antenna gain is shown as the following: EIRP ≤ AP transmit power + MIMO gain + Antenna gain The power of a product usually refers to the combined power. The relationship is as follows: Combined power = AP transmit power + MIMO gain 28 MIMO gains are provided based on the following specifications when a STA supports a single spatial stream: MIMO Specification 2×2 4×4 8×8 MIMO gain 3 dBm 6 dBm 9 dBm Huawei Confidential Signal Attenuation ⚫ Signal attenuation mainly includes path loss and obstacle attenuation. The signal strength of a radio signal gradually attenuates during transmission. When the signal attenuation is too large, the receive end cannot identify the radio signal. Therefore, unnecessary signal attenuation should be minimized during WLAN coverage design. ⚫ Common factors that cause signal attenuation are as follows: Obstacles: They are commonly seen in wireless network environments, such as walls, glass, and doors. Transmission distance: It refers to the path loss, which cannot be avoided and can be calculated using the formula. Frequency: Shorter wavelength of an electromagnetic wave indicates more severe attenuation. 2.4 GHz Mobile phone 5 GHz AP Transmission distance (path loss) 29 Huawei Confidential Laptop Obstacle (wall) Signal Interference ⚫ Signal interference mainly refers to the interference and noise in the environment. Generally, the SNR or the signal to interference plus noise ratio (SINR) is used to measure the impact of interference and noise on radio signals. SNR and SINR are main technical indicators for measuring the communication quality and reliability of a communications system. A larger SNR or SINR indicates higher communication quality and reliability. SNR: refers to the ratio of signals to noises. SINR: refers to the ratio of the strength of signals to the strength of interference and noise. The SNR is calculated using the following formula: The SINR is calculated using the following formula: SINR = 10lg [PS/(PI + PN)] SNR = 10lg (PS/PN) • SINR: in dB • SNR: in dB • PS: effective power of signals • PS: effective power of signals • PI: effective power of interference • PN: effective power of noise signals signals • 30 PN: effective power of noise signals Huawei Confidential • Interference refers to the interference caused by the system and other systems, such as co-channel interference and adjacent-channel interference. • Noise refers to irregular extra signals that do not exist in original signals generated by a device. Noise signals are related to the environment and do not change as the original signals change. • If there is no special requirement for the SNR or SINR during the WLAN planning and design, you do not need to consider the SNR or SINR. If there are requirements for the SNR or SINR, perform field signal simulation and SINR simulation during the WLAN planning and design. Contents 1. WLAN Planning Overview 2. WLAN Coverage Design 3. WLAN Capacity Design ◼ Capacity Design Overview ▫ Parameters Related to AP Performance 31 Huawei Confidential WLAN Capacity Design Overview ⚫ During network capacity design, you need to design the number of APs required based on the bandwidth requirements, the number of STAs, concurrency rate, and per-AP performance. This ensures that the WLAN performance can meet the Internet access requirements of all STAs. The bandwidth requirement, number of STAs, and concurrency rate are estimated based on user requirements and site survey. The performance of a single AP is the bandwidth of a single STA multiplied by the number of concurrent STAs supported by a single AP. Different single-STA bandwidths correspond to different number of concurrent STAs supported by an AP. ⚫ In network capacity design, the number of required APs is calculated using the following formula: Number of STAs x Concurrency rate x Bandwidth of a single STA Number of required APs = Bandwidth of a single STA x Number of concurrent STAs supported a single AP 32 Huawei Confidential • Different types of STAs or STAs of the same type but with different services require different bandwidths. For example, STAs of the same type require different bandwidths for watching videos and browsing web pages. Network planning engineers should calculate the currently required bandwidth for a single STA based on its service and type. Formula for Calculating the Theoretical WLAN Rate ⚫ The number of concurrent STAs supported by a single AP refers to the maximum number of concurrent STAs supported by the single AP which meets user bandwidth requirements. The main factors include the Wi-Fi standards, number of spatial streams, and number of radios supported by the AP as well as working frequency bandwidth. ⚫ Different Wi-Fi standards correspond to different theoretical WLAN rates. The theoretical WLAN rate refers to the link setup rate over the air interface. It is determined by the number of spatial streams, symbol, guard interval (GI) length, modulation mode, bit rate, and number of valid subcarriers. ⚫ The formula for calculating the theoretical WLAN rate is as follows: Theoretical WLAN rate = 33 Number of spatial streams x Number of encoded bits per subcarrier x Bit rate x Number of valid subcarriers Symbol length + Short GI or GI Huawei Confidential • The theoretical WLAN rate refers to the maximum transmission rate theoretically calculated based on a protocol standard. For example, the theoretical rate of 802.11ac Wave 2 can reach 6.9 Gbps. • The implementation rate refers to the maximum rate that a product developed by a vendor based on a standard can reach. • The actual rate refers to the rate at which the AP forwards data after a STA is connected to the AP. • The difference between the actual rate and the theoretical rate is caused by the following reasons: ▫ Distance: The distance from an AP and any physical obstacles (such as walls, signal barriers, or reflection materials) affects signal transmission and reduces the transmission speed. ▫ Interference: Devices on other wireless networks with the same frequency in the same area affect network performance. ▫ Shared bandwidth: The available bandwidth is shared by all users on the same wireless network. Formula for Calculating the Theoretical WLAN Rate (Example) Number of spatial streams x Number of encoded bits per subcarrier x Bit rate x Number of valid subcarriers/(Symbol length + Short GI or GI) Symbol and GI Length Modulation and Coding Scheme (MCS) 802.11 Standard Modulation Scheme 802.11ac 256-QAM 8 5/6 802.11ax 1024-QAM 10 5/6 Number of Spatial Streams 802.11ac 802.11ax 4 8 Subcarrier Bit Rate 11ac 11ax Subcarrier bandwidth 312.5 KHz 78.125 KHz 12.8 us Symbol 3.2 us Short GI 0.4 us / GI 0.8 us 0.8 us Number of Valid Subcarriers 160 MHz 802.11ac 802.11ax 468 1960 Wi-Fi 6: 8 x 10 bits per subcarrier x 5/6 x 1960/(12.8 + 0.8) us = 9607 Mbps Wi-Fi 5 Wave 2: 4 x 8 bits per subcarrier x 5/6 x 468/(3.2 + 0.4) us = 3466 Mbps 34 Huawei Confidential • Number of spatial streams: It equals to the number of antennas of an AP. A larger number of antennas indicate higher throughput of the entire system. Similar to lanes on a highway, an 8-lane expressway carries more traffic than a 4-lane one. • Symbol and GI: Symbol is the transmission signal in the time domain. There must be a GI between two adjacent symbols to avoid interference between each other. Take high-speed trains as an example. Each train is equivalent to a symbol. There must be a time interval between the two trains departing from the same station. Otherwise, the two trains may collide. The GI varies depending on Wi-Fi standards. In most cases, a large GI is required when the transmission speed is high. For example, the time interval between two 350 km/h high-speed trains running on the same lane is larger than that of two 250 km/h high-speed trains. • Encoding scheme: It is a modulation technology, that is, the number of bits that can be carried in a symbol. • Bit rate: Theoretically, lossless transmission is supported based on the encoding scheme. During actual transmission, some information codes used for error correction need to be added. Redundancy is used for achieving high reliability. The bit rate is the ratio of the actually transmitted data code with the error correction code excluded to the theoretical value. • Valid subcarrier: A carrier is a symbol in the frequency domain. One subcarrier carries one symbol, and the number of subcarriers varies according to the modulation mode and frequency bandwidth. Contents 1. WLAN Planning Overview 2. WLAN Coverage Design 3. WLAN Capacity Design ▫ Capacity Design Overview ◼ 35 Parameters Related to AP Performance Huawei Confidential Wi-Fi Standards ⚫ Different Wi-Fi standards have different parameters such as frequency bands, encoding schemes, number of spatial streams, channel bandwidth, and theoretical rate. Standard Released In Frequency Band Encoding Scheme Number of Spatial Streams Channel Bandwidth (MHz) Theoretical Rate - 802.11 1997 2.4 GHz - - 20 2 Mbps - 802.11b 1999 2.4 GHz - - 22 11 Mbps - 802.11a 1999 5 GHz - - 20 54 Mbps - 802.11g 2003 2.4 GHz 64-QAM - 20 Wi-Fi 4 Wi-Fi 5 Wi-Fi 6 54 Mbps 2.4 GHz: 450 Mbps 802.11n 2009 2.4 GHz or 5 GHz 64-QAM 4 20 and 40 802.11ac Wave1 2013 5 GHz 64-QAM 4+4 20 and 40 3.74 Gbps 802.11ac Wave2 2015 5 GHz 256-QAM 8 20, 40, 80, 160, and 80+80 6.9 Gbps 802.11ax 2019 2.4 GHz or 5 GHz 1024-QAM 4+8 20, 40, 80, 160, and 80+80 5 GHz: 600 Mbps 2.4 GHz: 1.15 Gbps 5 GHz: 9.6 Gbps *In October 2018, the Wi-Fi Alliance has renamed different Wi-Fi standards, and 80.11ax was named as Wi-Fi 6. Standards before Wi-Fi 4 were not renamed. 36 Huawei Confidential Spatial Stream ⚫ A radio system sends multiple radio signals at the same time. Each of these signals is called a spatial stream. Spatial streams are transmitted using antennas at the transmit end, and each spatial stream reaches the receive end through different paths. One spatial stream can be created between one transmit antenna and one receive antenna. ⚫ A MIMO system is generally written as MxN MIMO, with M and N indicating the number of antennas at the transmit end and receive end, respectively. The number of spatial streams in MIMO is generally less than or equal to the number of antennas at the transmit or receive end. If the number of receive antennas is different from that of transmit antennas, the number of spatial streams is smaller than or equal to the minimum number of antennas on the receive or transmit end. For example, a 4x4 MIMO system can transmit four or less spatial streams, whereas a 3x2 MIMO system can transmit two or fewer spatial streams. ⚫ According to 802.11ac and 802.11ax, a radio supports a maximum of eight spatial streams. Therefore, even if an AP has 12 antennas, the AP supports a maximum of eight spatial streams. Wireless network adapter AP Antenna 37 Huawei Confidential Spatial stream Laptop Transmission path Number of Radios A radio is a radio electromagnetic wave that can be transmitted and received by antennas. One radio ⚫ module can use multiple antennas to exchange data between an AP and a STA through multiple spatial streams, improving the transmission rate. The number of radios depends on the AP models. Common AP models support one, two, or three radios. Users can select AP models as required. Single-radio AP Dual-radio AP 2.4 GHz or 5 GHz Three-radio AP 5 GHz 2.4 GHz 5 GHz 2.4 GHz ⚫ ⚫ ⚫ 38 The radio works at 2.4 GHz or 5 GHz. APs are applicable to the scenario where STAs of the same type are used. ⚫ ⚫ The radios work at 2.4 GHz and 5 GHz. APs are applicable to various WLAN scenarios. 5 GHz ⚫ Two radios work at 5 GHz, and one works at 2.4 GHz. APs are applicable to electronic classrooms, high-density scenarios, and shopping malls and supermarkets. Huawei Confidential • Compared with a single-band AP, a dual-band AP allows more STAs to connect to a network while ensuring STA performance. For example, in a bandwidthdemanding scenario, a single RF module can connect to 20 to 25 STAs. However, if an AP can work on both the 2.4 GHz and 5 GHz frequency bands, it can connect to 40 to 50 STAs. That is, the number of STAs connected to the AP can be doubled in the same physical space. Therefore, dual-band APs can be used in high-density scenarios, such as libraries, conference rooms, academic lecture halls, and student dormitories. • Compared with a dual-radio AP, a three-radio AP provides one more radio. The radio can be used for spectrum monitoring, air interface scanning, wireless location, as well as service coverage to improve STA access capabilities. The radio effectively solves problems such as difficult STA access and data congestion in high-density scenarios. • Dual-radio and three-radio APs are typically used on live networks. Symbol and GI ⚫ The 802.11 protocols transmit the data modulated on each channel together. The data transmitted at a time is called a symbol. The unit of symbols is us, indicating a duration. ⚫ During data transmission, the front end of the next symbol may arrive at the receive end earlier than the tail end of the previous symbol. As a result, inter-symbol interference occurs. Guard interval (GI) can be configured to reduce the impact of interference. GI can be classified into common GI and short GI. Short GI has a shorter interval. A smaller GI indicates higher transmission efficiency. A larger GI Symbol GI Symbol GI ... Symbol GI GI Symbol GI ... Symbol GI GI Symbol GI ... Symbol GI ... Frequency domain indicates a higher anti-interference capability. Symbol Symbol Time domain 39 Huawei Confidential • Short GI is recommended when the interference is light. Common GI is recommended when the interference is strong. Encoding Scheme ⚫ The encoding scheme is the modulation technology, that is, the number of bits that can be carried in a symbol. During actual transmission, some information codes used for error correction need to be added. Redundancy is used for achieving high reliability. The bit rate is the ratio of the actually transmitted data code with the error correction code excluded to the theoretical value. The following table lists the coding schemes and bit rates corresponding to different standards. 40 802.11a/g 802.11n Negotiation Mode Modulation Scheme Coding Bit Rate MCS0 BPSK 1 1/2 MCS1 QPSK 2 MCS2 QPSK MCS3 Bit Rate Coding Bit Rate 802.11ac 802.11ax Bit Rate Coding Bit Rate Bit Rate Coding Bit Rate Bit Rate 1 1/2 1 1/2 1 1/2 1/2 2 1/2 2 1/2 2 1/2 2 3/4 2 3/4 2 3/4 2 3/4 16-QAM 4 1/2 4 1/2 4 1/2 4 1/2 MCS4 16-QAM 4 3/4 4 3/4 4 3/4 4 3/4 MCS5 64-QAM 6 2/3 6 2/3 6 2/3 6 2/3 MCS6 64-QAM 6 3/4 6 3/4 6 3/4 6 3/4 MCS7 64-QAM 6 5/6 6 5/6 6 5/6 6 5/6 VMCS8 256-QAM - - 8 3/4 8 3/4 VMCS9 256-QAM - - 8 5/6 8 5/6 VMCS10 1024-QAM - - - 10 3/4 VMCS11 1024-QAM - - - 10 5/6 Huawei Confidential • A larger Modulation and Coding Scheme (MCS) value indicates a higher transmission rate. Channel Bonding ⚫ The number of valid subcarriers varies according to the frequency bandwidth. A larger frequency bandwidth indicates a larger number of valid subcarriers. For wireless technologies, you can increase the channel bandwidth of a radio to improve the transmission rate of a STA. Two or more adjacent non-overlapping channels are bonded to a channel. Theoretically, if the bandwidth of the data transmission channel is doubled, the transmission rate is also doubled. ⚫ By default, an AP works at the 20 MHz channels. Two adjacent 20 MHz channels can be bonded to a 40 MHz channel. According to different channel bonding methods, the operating channel bandwidth can be categorized as 40 MHz plus, 40 MHz minus, 80 MHz, 80+80 MHz, or 160 MHz. 149 149 153 153 Bonded channel 157 161 165 41 Channel Huawei Confidential • Channel types: ▫ 40 MHz plus and 40 MHz minus: Two adjacent 20 MHz channels that do not interfere with each other are bonded into a 40 MHz channel. One 20 MHz channel is the primary channel, and the other is the auxiliary channel. The primary channel and auxiliary channel have different center frequencies, which determine the minus or plus state of the 40 MHz channel. If the center frequency of the former is higher, the channel bandwidth is 40 MHz minus; if that of the latter is higher, the channel bandwidth is 40 MHz plus. For example, channels 36 and 40 are bonded into a 40 MHz channel. If channel 40 is deployed as the primary channel, 40 MHz minus is configured; if channel 36 is deployed as the primary channel, 40 MHz plus is configured. ▫ 80 MHz: Two contiguous 40 MHz channels can be bonded into an 80 MHz channel. Any of the four 20 MHz channels in the 80 MHz channel can be selected as the primary channel. For example, channel 36, 40, 44, and 48 can be bonded into an 80 MHz channel. ▫ 80+80 MHz: Two non-contiguous 80 MHz channels can be bonded into an 80+80 MHz channel. For example, channels 36, 40, 44, 48, 100, 104, 108, and 112 can be bonded into an 80+80 MHz channel. ▫ 160 MHz: Two contiguous 80 MHz channels can be bonded into a 160 MHz channel. Any of the eight 20 MHz channels can be selected as the primary channel. For example, channels 36, 40, 44, 48, 52, 56, 60, and 64 can be bonded into a 160 MHz channel. • Since 802.11ac, eight channels can be bonded into 160 MHz, achieving a transmission rate of over 1000 Mbps. Quiz 1. (True or False) An antenna has horizontal beamwidth and vertical beamwidth, forming a horizontal lobe angle and a vertical lobe angle, respectively. A wider beamwidth indicates better directionality, larger coverage, and stronger anti-interference capabilities. ( A. True B. False 42 1. B Huawei Confidential ) Summary ⚫ This course describes the basic knowledge of WLAN planning, including network coverage design and network capacity design. In the network coverage design, the coverage areas are classified into indoor areas and outdoor areas that user different types of antennas. The network capacity design part describes how to estimate the AP capacity based on customer requirements and Wi-Fi standards. ⚫ After learning this course, you will have a basic understanding of WLAN planning and the formula for calculating the theoretical WLAN rate. 43 Huawei Confidential Recommendations ⚫ 44 Huawei official websites: Enterprise service: https://e.huawei.com/en/ Technical support: https://support.huawei.com/enterprise/en/index.html Online learning: https://www.huawei.com/en/learning Huawei Confidential Acronyms and Abbreviations Acronym/Abbreviation 45 Full Name MISO Multiple-Input Single-Output MU-MIMO Multi-User MIMO SIMO Single-Input Multi-ple-Output SISO Single-Input Single-Output SU-MIMO Single-User MIMO UNII Unlicensed National Information Infrastructure Huawei Confidential Thank you. Bring digital to every person, home, and organization for a fully connected, intelligent world. Copyright © 2022 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice. WLAN Planning Tools Foreword ⚫ With the popularity of wireless networks in governments, enterprises, finance sectors, and campuses, there are increasingly higher requirements on wireless network experience, which poses challenges to Wi-Fi builders. Strict pre-sales network planning and delivery acceptance are important processes for ensuring and evaluating wireless network quality. ⚫ This course will introduce how to use the WLAN Planner and CloudCampus APP to conduct network planning and delivery acceptance. 2 Huawei Confidential • This course mainly introduces Huawei software WLAN Planner (V1.0.0) and CloudCampus APP (V3.22.9.1). Objectives ⚫ 3 On completion of this course, you will be able to: Master skills of using the WLAN Planner. Use the WLAN Planner for indoor 3D simulation. Use the network planning functions of the CloudCampus APP. Huawei Confidential Contents 1. WLAN Planner ◼ Product Overview ▫ Product GUI Introduction ▫ Network Planning in Five Steps ▫ 3D Simulation 2. CloudCampus APP 4 Huawei Confidential WLAN Planner Introduction The WLAN Planner is a cloud architecture–based wireless network planning tool that provides onsite environment ⚫ planning, AP deployment, network signal simulation, and report generation functions. It helps engineers efficiently plan wireless networks. 5 Huawei Confidential • The WLAN Planner is applicable to the pre-sales and after-sales phases of WLAN projects. For example, the signal simulation function of the WLAN Planner allows you to determine whether the AP models and quantity meet the requirements in the pre-sales phase, and determine AP installation positions and signal coverage effect during high level design (HLD) in the after-sales phase. Logging In to ServiceTurbo Cloud The WLAN Planner is hosted on the ServiceTurbo Cloud platform and can be used only after you log in to the ⚫ platform. Login and account application ⚫ Visit ServiceTurbo Cloud at https://serviceturbo-cloud.huawei.com (available only on Google Chrome). Click Log In in the upper right corner of the page, and use an account to log in. If you do not have an account, click Register and register one. 6 Huawei Confidential WLAN Planner Usage Permission ⚫ After successful login, click Tool Application Market and search for WLAN Planner. ⚫ By default, Huawei engineers and channel partner (ASP/CSP) engineers have the permission to use the WLAN Planner. If you do not have the permission, click the WLAN Planner card and fill in the application information as prompted ⚫ to unlock the tool. After the application is submitted, you can choose My WorkSpace > My Application > Permission Application to view the approval progress. 7 Huawei Confidential Contents 1. WLAN Planner ▫ Product Overview ◼ Product GUI Introduction ▫ Network Planning in Five Steps ▫ 3D Simulation 2. CloudCampus APP 8 Huawei Confidential WLAN Planner Home Page The WLAN Planner home page consists of two parts: the upper part shows the Running, Merge, Import, and Export ⚫ buttons and the tool contact information, while the lower part mainly shows the task list and WLAN Planner usage guide. 9 Huawei Confidential Project Creation – Running ⚫ Click Running. In the dialog box that is displayed, select I have read and agree to the Customer Network Data Security Management Regulations and click Confirm. The Project Info page is displayed. ⚫ Select Create Project or Existing Project for Project Type, and set project information as required. If you select Create Project, the country code corresponding to the value of Country/Region regulates available channels and equivalent isotropically radiated power (EIRP) requirements. 10 Huawei Confidential • Note: Set Customer Network Data Involved to No. If you use the default value Yes, you need to click Create Authorization and apply for customer privacy data authorization. ▫ Before designing a solution, Huawei and ASP engineers need to submit customer authorization information. For details about customer network management authorization information, log in to https://eplus.huawei.com/eRight#/ and click Operation Guide for customer authorization in STC under Operation Guide to download and view this document. ▫ Other users must obtain explicit authorization from the network data subjects before uploading third-party network data to ServiceTurbo Cloud. Project Management – Merge ⚫ Click Merge to merge a baseline project and one or more involved projects in the task list. Then, you can export these projects as a new one. Baseline Project: Select an existing project from the drop-down list box to be the baseline project of the projects to be merged. The task name of this project will be used as the name of the new project after merging. Involved Projects: Select one or more existing projects from the drop-down list box to merge with the baseline project. 11 Huawei Confidential • Note: Only projects with the same country code can be merged. Project Management – Import ⚫ Click Import to import an existing or a shared project file (a package whose name starts with wpt). The name of the imported project file will be displayed in the task list. You can view and edit the network planning and design in the project. ⚫ An imported shared project is independent of its source project. You can edit the network planning and design in the shared project without affecting the source project. 12 Huawei Confidential • Note: Only one project file can be imported at a time. Project Management – Export ⚫ Click Export. In the dialog box that is displayed, select one or more project files to be exported and click Confirm. You can share an exported project file with other users so that they can import this file to the WLAN Planner to view or edit the corresponding network planning and design. 13 Huawei Confidential • Note: A maximum of 10 records can be exported at a time. Task List – Edit ⚫ The task list displays information (such as the task name, task creator, and last update time) about the latest five edited projects. Click a task name to enter the project for network planning and design. Click the edit icon in the Operation column. In the dialog box that is displayed, view or edit the basic information about the project, for example, change the task name and add or delete shared users. 14 Huawei Confidential Task List – Share ⚫ Click the share icon in the Operation column of a project in the task list. In the dialog box that is displayed, enter the full employee ID or email address to share the project with other engineers. Then, those who obtain the shared project file can import this project file to view or edit the corresponding network planning and design. 15 Huawei Confidential • Unlike the import function, the sharing function shares the source project. The edit operation performed by any user that shares the project will be updated to the project, and only one user is allowed to edit the project at a time. Only the creator of a project has the permission to delete and share the project. Other users that share the project can only edit the project. WLAN Planner Main Page ⚫ After you create a project, the WLAN Planner main page is displayed for network planning and design. You can also click the task name on the home page to open this page. ⚫ The left column lists three phases by function: survey, planning, and test. This chapter mainly describes the PLAN page. 16 Huawei Confidential SETTING – Template Settings ⚫ Choose SETTING. On the Template settings page that is displayed, you can view the default template, custom templates (if you have created any), and the New button for creating a custom template. Default template: The settings modified in the default template take effect only in the current project. The settings will be reset for a new project. 17 Custom template: You can set parameters for a custom template and apply the settings to all the projects under your account. Huawei Confidential • After you click any template, different setting pages are available. The Basic Settings page contains the parameters that are frequently adjusted during network planning and design. ▫ Multiple Floor Emulation: If this parameter is set to Yes, the tool analyzes interference between APs on adjacent floors. ▫ Propagation Model: This parameter allows you to switch between the path loss and ray tracing algorithms for heat map calculation. ▫ EIRP Compliance: If this parameter is set to Yes, the tool automatically adjusts the sum of the AP power, MIMO gain, and antenna gain to be less than or equal to the EIRP. ▫ Antenna Separation: If this parameter is set to Yes, external antennas and APs are displayed separately. PLAN – Creating a Floor ⚫ On the PLAN page, the selected node is displayed in the upper left corner. When you hover the mouse pointer over the node, the structure view of the entire project is displayed. A project can contain one or more buildings and regions. ⚫ There are four icons under the project name. Their functions are as follows: : creates an outdoor area. You can import an image, a PDF drawing, or a map file, but not a CAD drawing. : creates a building. You can import an image and one or more PDF or CAD drawings. If you import N drawings, N floors will be generated. : creates a floor. You can import an image, a PDF drawing, or a CAD drawing. If no building is selected, the icon is dimmed, indicating that floors cannot be created. : deletes the selected node (building/floor/region). If the node is a project, the icon is dimmed, indicating that the node cannot be deleted. 18 Huawei Confidential • Note: You can also right-click a node and choose an option from the shortcut menu to complete the corresponding operation. In addition, before importing a drawing, ensure that the drawing name contains no special character. Otherwise, it will fail to be imported. PLAN – Toolbar When you select a floor or an outdoor area on the main planning page, a toolbar is displayed in the upper left Measures the distance between any two points on a drawing to control the distance between AP deployment locations. 19 Huawei Confidential Corrects the scale of an imported drawing. Modifies attributes for all obstacles or APs of the same type on a selected floor. Displays network planning and design rules and AP deployment suggestions dedicated to the current scenario. Checks the network planning and design of the current floor for common basic problems. Hide AutoCheck Scenario-specific network planning Replace 3D building 3D floor Restore Undo Sort AP Anticlockwise rotation Clockwise rotation Select Drag drawing Modify scale corner of the page. The toolbar provides the following functions (corresponding to the icons from left to right): Ranging ⚫ PLAN – Function Panel ⚫ The upper part of the main planning page displays the five steps of network planning and design. The function panel on the right displays the modules that assist the current network planning step, and therefore it varies according to the step you select. To hide the panel, click Hide Right Panel. Network planning in five steps Function panel 20 Huawei Confidential Contents 1. WLAN Planner ▫ Product Overview ▫ Product GUI Introduction ◼ Network Planning in Five Steps ▫ 3D Simulation 2. CloudCampus APP 21 Huawei Confidential Network Planning Procedure ⚫ You need to import a drawing first and then perform five steps to quickly and effectively complete the network planning and design in a WLAN project. The WLAN Planner supports automatic obstacle identification, automatic AP deployment, professional signal simulation, and 3D simulation, which are easy to use and improve network planning efficiency. Network Planning in Five Steps Import drawings 22 Import a drawing that contains the scale, and perform the following steps on the drawing: Set up the environment Set regions Deploy devices Simulate signals Export reports Manually draw obstacles or enable automatic obstacle identification. Draw regions with different field strength and capacity requirements. Deploy APs manually or automatically, calculate channels, and calibrate power. View simulation diagrams by field strength or SINR. Export reports in Word format and the material list in Excel format. Huawei Confidential • Note: The preceding five-step network planning procedure is applicable to indoor network planning using the WLAN Planner. For outdoor network planning, the WLAN Planner does not support obstacle drawing, region setting, or automatic AP deployment. Import drawings Set up the environment Set regions Deploy devices Simulate signals Export reports Import Drawings ⚫ After creating a building or region for the project on the network planning page, determine the scenario and sub scenario, and then import a drawing, which can be a PDF, PNG, JPG, or DWG file. If a CAD drawing (DWG file) is imported, the WLAN Planner can quickly identify obstacles and mark them on the drawing. 23 Huawei Confidential Import drawings Import Drawings – Example 24 Huawei Confidential Set up the environment Set regions Deploy devices Simulate signals Export reports Import drawings Set up the environment Set regions Deploy devices Simulate signals Export reports Set Up the Environment ⚫ Setting up the environment is to draw the layout structure of various types of walls on the imported floor plan drawing to restore the site environment, ensuring the signal simulation effect. ⚫ To set up the environment, perform the following steps: Set the scale. If you import a CAD drawing, the tool automatically generates a scale. If you import a drawing of another type, you need to manually set the scale. Set obstacles. If you import a CAD drawing, you can identify obstacles with one click or manually draw obstacles. If you import a drawing of another type, you can enable automatic obstacle identification and then manually adjust the obstacles. 25 Deploy interference sources on the drawing based on the site survey result. Huawei Confidential • Note: Generally, a floor plan drawing has a scale. If no scale is available, you can select some common objects in daily life as reference objects, for example, 0.8 m to 1 m wide for a single door. • If a desired wall type is unavailable when you set obstacles, click User-Defined under Type, and add the wall type on the Obstacle Preset page that is displayed. • In indoor scenarios, you are advised to use insulation boundaries to mark the building periphery to prevent signal overflow from affecting the overall simulation effect. Import drawings Set up the environment Set regions Deploy devices Simulate signals Export reports Set Up the Environment – Toolbar ⚫ Automatic Identification: The tool automatically identifies walls and draws obstacles based on the imported drawing. (This function does not apply to CAD drawings.) ⚫ Manually: You can manually draw obstacles after selecting an obstacle shape and type. Shape: The shape of an obstacle can be a rectangle, line, or slope. Type: You can add preset obstacles, such as walls, windows, and doors, to the drawing. If the preset obstacles do not meet the scenario requirements, click User-Defined under Type and customize obstacles. ⚫ Auto-adsorption: When this function is enabled, end points of adjacent obstacles will be automatically connected. ⚫ Interfere Deployment: Deploy interference sources based on the site survey result. For example, a microwave oven occupies the entire 2.4 GHz frequency band. 26 Huawei Confidential Import drawings Set up the environment Deploy devices Set regions Simulate signals Export reports CAD Drawing – Automatic Identification ⚫ If a CAD drawing (DWG file) is imported, the WLAN Planner can quickly identify obstacles and mark them 27 Tip Black background Adjust resolution One-click identification Redo Undo Drag Select on the drawing. Huawei Confidential • Select: After a CAD drawing is imported, you can select one or more target regions. If you select multiple target regions, the tool automatically generates multiple floors accordingly. • Note: Obstacles on a CAD drawing can be automatically drawn only on the Floor Image Extract page. After the drawing is submitted, you can only manually draw obstacles. The tool automatically obtains the scale of the CAD drawing. The scale can be modified after the drawing is submitted. Import drawings Set up the environment Set regions Deploy devices Simulate signals Export reports Set Up the Environment – Procedure ⚫ The procedure for setting up the environment varies according to the drawing type (CAD or non-CAD). Non-CAD drawing CAD drawing 28 Set obstacle types. Manually draw obstacles. Set the scale. Identify obstacles by one click. (Optional) Change the scale. (Optional) Automatically identify obstacles. Select target regions. Submit the drawing. Manually draw obstacles. Huawei Confidential • Note: Tips for manual drawing. ▫ Scroll the mouse wheel to zoom in or out on the drawing. ▫ Press and hold the space bar and move the mouse to move the drawing. ▫ When drawing an obstacle, hold down Shift to draw a straight line. ▫ Press Ctrl+Z to undo an operation. Import drawings Set up the environment Set Up the Environment – Example 29 Huawei Confidential Set regions Deploy devices Simulate signals Export reports Import drawings Set up the environment Set regions Deploy devices Simulate signals Export reports Set Regions ⚫ Region setting is to mark each region on the floor plan drawing based on the actual requirements. ⚫ Regions must be set before automatic AP deployment. You can use the automatic identification function or manually draw a region, set basic properties such as the name, type, coverage type, and concurrency rate of the target region, and then determine the terminal status. When manually drawing a region, you can use shapes and types in the toolbar. ✓ Automatic Identification: The coverage area is automatically drawn based on the edge of an obstacle. ✓ Shape: Select a shape (polygon or rectangle), click to draw, and right-click to end the drawing. ✓ Type: If you do not select AP Area, this parameter uses the default value Signal Area. 30 Huawei Confidential • Signal Area: area with signal coverage • AP Area: area with APs deployed Import drawings Set up the environment Set regions Deploy devices Simulate signals Export reports Set Regions – Basic Properties ⚫ You can select one or more target regions as required, and set the following basic properties for them: Region: region name that marks and distinguishes a coverage area. Region Type Select: The options include Signal Area and AP Area. Cover Type: The options include VIP Coverage(>=-60 dBm), Common Coverage(>=-65 dBm), and Location Coverage(>=-70 dBm), which are represented by green, red, and gray, respectively. ⚫ Terminal Situation: capacity requirement of a coverage area. The tool calculates the value based on the number of selected terminals, the terminal type, and the service type. 31 Huawei Confidential • Note: By default, the field strength threshold is set based on 5 GHz signals, and this method is recommended. You can modify the setting on the SETTING > Basic Settings page. Import drawings Set up the environment Set regions Deploy devices Simulate signals Export reports Set Regions – Example Location coverage area VIP coverage area Common coverage area 32 Huawei Confidential Import drawings Set up the environment Set regions Deploy devices Simulate signals Export reports Deploy Devices ⚫ Device deployment includes AP deployment, channel calculation, and power calibration. AP deployment: The tool supports automatic and manual AP deployment. It is recommended that you manually deploy APs in most scenarios, and use automatic deployment only in the scenarios with simple network structures. Channel calculation and power calibration: Use these functions to increase the signal-to-interference-plus-noise ratio (SINR) as much as possible and minimize the signal interference between APs. After AP deployment is complete, it is recommended that you calculate channels and then calibrate power. ⚫ The number of APs deployed on the current node is displayed in the lower left corner of the WLAN Planner main page. After selecting a floor, you can click View Resources in the lower right corner to view detailed settings of deployed APs, such as AP types, channels, power, and installation modes. 33 Huawei Confidential • Click Set Display in the lower right corner of the WLAN Planner main page, and adjust the AP icons or obstacles on the drawing. For example: ▫ Display or hide obstacles, AP channels, AP types, or antenna information. ▫ Adjust the size of AP icons and thickness of obstacle lines. ▫ Change the color of the label under an AP icon. Import drawings Set up the environment Set regions Deploy devices Simulate signals Export reports Deploy Devices – Toolbar ⚫ Automatic deployment: Automatic deployment: Based on the region settings, the tool automatically calculates the number of needed APs and deploys APs. (This function supports only APs with omnidirectional antennas in indoor scenarios.) W-shaped/Equal spacing deployment: Draw a region or a line and configure AP parameters. Then, the tool automatically calculates the number of needed APs and deploys APs. ⚫ Equipment deployment (manual): Select a proper AP model and deploy APs on the drawing according to the network construction standards in various scenarios. After all APs are deployed, calculate channels and calibrate power. (If the desired AP model is not displayed on the toolbar, click Choose Other AP and add the model.) ⚫ Channel calculation/Power calibration: These functions can take effect on the current floor or multiple floors. Select floors as required. ⚫ Equipment recording: Enter device information (such as the SN, MAC address, and name) in a template, and import the template. 34 Huawei Confidential • Note: After APs are deployed, you can double-click an AP icon, or right-click an AP icon and choose Property from the shortcut menu to open the properties panel where you can edit properties, such as the model, icon information, antenna, power, and channel of the AP. Import drawings Set up the environment Deploy devices Set regions Simulate signals Export reports Deploy Devices – Procedure The procedure for automatic deployment is the same as that for manual deployment. Both of them have four steps: ⚫ select areas, select APs, configure channels, and configure power. 1 2 35 3 Huawei Confidential 4 Import drawings Set up the environment Set regions Deploy devices Simulate signals Export reports Deploy Devices – Example W-shaped deployment Manual deployment 36 Huawei Confidential Import drawings Set up the environment Set regions Deploy devices Simulate signals Export reports Simulate Signals ⚫ In this step, the WLAN Planner simulates and renders signals in the planned indoor or outdoor regions on the drawing based on the signal propagation model, and displays signal strengths in different colors, allowing you to intuitively view the current coverage effect. ⚫ The WLAN Planner supports the path loss and ray tracing algorithms (which can be switched through parameter setting). Compared with the path loss algorithm, the ray tracing algorithm contains reflection and refraction, improving the simulation precision but taking a longer time. 37 Huawei Confidential Import drawings Set up the environment Set regions Deploy devices Simulate signals Export reports Simulate Signals – Toolbar ⚫ Open/Refresh simulation: These functions are implemented on all APs. To view the simulation effect of APs in a desired region, select these APs, right-click them, and choose Simulation from the shortcut menu. ⚫ Coverage satisfaction: View the signal strength proportion statistics under the current simulation. ⚫ Simulation terminal: You can deploy mobile phones, laptops, and tablets to simulate signal access, and double-click a deployed STA to view the simulation result. The result contains the signal strength of the signal source near the STA, SINR after the optimal AP is associated with, and the rates at the physical and application layers. ⚫ Simulation map settings: You can set the frequency band to 2.4 GHz, 5 GHz, or 6 GHz, and select an option from the Type drop-down list box. ⚫ Simulation diagram: Set the boundary value of the simulation diagram. You can click the drop-down arrow to switch the color or customize it. 38 Huawei Confidential • If the simulation effect is unsatisfactory, you need to repeat step 3 (deploy devices) to adjust or add/delete APs, and then simulate signals to verify the effect until the wireless coverage meets the requirement. Import drawings Set up the environment Set regions Deploy devices Simulate signals Export reports Simulate Signals – Example (1/2) Global simulation View signal strength proportion statistics. Partial simulation 39 Huawei Confidential Import drawings Set up the environment Set regions Deploy devices Simulate signals Simulate Signals – Example (2/2) Connect the simulation terminal. 40 Huawei Confidential • The simulation terminal is a laptop and the height is set to 1.5 m. Export reports Import drawings Set up the environment Set regions Deploy devices Simulate signals Export reports Export Reports ⚫ After the preceding network planning steps are complete, you can export a network planning report, which contains the number of materials used for the project, AP position diagram, signal simulation diagram, and product introduction. ⚫ Before exporting the report, you can set the report content, such as the report language, customized logo, company name, and simulation diagram parameters. If you have imported a CAD drawing for the network planning and design, you can also export the CAD drawing with AP positions together with the network planning report. ✓ Before exporting a report, you can check the network planning result to avoid errors. The tool provides 11 check items in five categories, including environment settings, deployment, AP settings, antenna settings, and delivery effect. ✓ The check results include: 41 Huawei Confidential • : Passed • : Failed • : One-click repair • : Click this button to ignore an error result. Import drawings Set up the environment Set regions Deploy devices Simulate signals Export reports Export Reports – Example ⚫ Use the following process to export a report on the WLAN Planner: 1 Select the building or floor for which the network planning report is to be exported. 2 Set report parameters. 42 Huawei Confidential 3 Export the network planning report and material list in oneclick mode. (Before performing the export operation, ensure that automatic review of network planning has been completed.) Contents 1. WLAN Planner ▫ Product Overview ▫ Product GUI Introduction ▫ Network Planning in Five Steps ◼ 3D Simulation 2. CloudCampus APP 43 Huawei Confidential 3D Simulation ⚫ In indoor scenarios, the WLAN Planner provides the 3D simulation function. This function converts an original two-dimensional (2D) floor plan into a three-dimensional (3D) structural diagram based on the obstacles drawn by users and AP positions, clearly displaying the layout of each floor and the AP positions. ⚫ The 3D simulation function is displayed on the toolbar in the upper left corner of the WLAN Planner main page. This function involves 3D Floor and 3D Building. A 3D floor is a 3D display of a single floor, while a 3D building is a 3D display of multiple floors. These two 3D functions have different operation modes. 3D simulation 3D floor 44 Free walking Automatic walking Walking mode Orbit mode 3D building ✓ Orbit mode: You can use the mouse to rotate, flip, zoom in, and zoom out the 3D model to view the floor layout and AP positions. ✓ Walking mode: This mode simulates the roaming effect through automatic walking or free walking. During 3D simulation in walking mode, the WLAN Planner displays real-time Wi-Fi information about the STA. • Automatic walking: Draw a traveling route for the STA and click Start. The tool will move the STA along the route to simulate the 3D effect. • Free walking: Also called manual walking, free walking allows you to control the movement using the keyboard. Huawei Confidential • During 3D simulation in walking mode, the WLAN Planner displays real-time WiFi information (such as the associated AP, RSSI, and current rate) about the STA. • After 3D simulation in either walking mode is complete, you can click the roaming record button in the upper right corner to view the roaming status of the STA during movement, or export the roaming report on the report export page. 3D Floor – Orbit Mode 45 Huawei Confidential 3D Floor – Automatic Walking Mode (1/3) Step 1 Switch to the walking mode. Step 2 Click OK to enter the automatic walking mode. Step 3 Draw a route. 46 Huawei Confidential 3D Floor – Automatic Walking Mode (2/3) Step 4 Simulate the 3D effect in walking mode. 47 Huawei Confidential • In the upper right corner of the walking page, a thumbnail is displayed to locate the STA and corresponding APs. 3D Floor – Automatic Walking Mode (3/3) Check point Step 5 View the roaming result. 48 Huawei Confidential 3D Floor – Free Walking Mode Step 1 Click Cancel in the dialog box that is displayed to enter the free walking mode. Step 2 Use the mouse and the W/S/A/D keys to control the up, down, left, and right directions in manual walking mode. 49 Huawei Confidential 3D Building ⚫ The 3D Building function supports only the orbit mode. You can select the image display information on the left as required to simulate the desired 3D effect. 50 Huawei Confidential Contents 1. WLAN Planner 2. CloudCampus APP 51 Huawei Confidential CloudCampus APP Overview ⚫ The CloudCampus APP is a mobile app that integrates field strength and interference testing, and can be used for test acceptance after network deployment. It reduces the workload for WLAN O&M personnel and simplifies O&M. ⚫ How to obtain: Scan the QR code below. Search for CloudCampus APP on AppGallery 52 Huawei Confidential CloudCampus APP – Toolkit ⚫ The CloudCampus APP provides a variety of utility tools. The Tool screen contains project delivery, coverage test, business test, scene test, and manufacturer customization. ⚫ This course describes the tools related to network planning, that is, AP Calculator and Site Survey in the Project Delivery area. ✓ AP Calculator: quickly generates a material list based on project scenarios and capacity requirements. ✓ Site Survey: allows you to perform site surveys, record environment information, test attenuation, and synchronize site survey information to WLAN Planner. ✓ WLAN Planner: provides engineering information to the APP, which allows you to view AP positions and heat map information at any time. ✓ WLAN Tester: performs quality acceptance on the network environment. The APP allows you to perform dotting tests. After data is uploaded, you can view and export the acceptance report on the WLAN Planner. 53 Huawei Confidential • The WLAN Planner and WLAN Tester in the Project Delivery area need to be used together with actual WLAN Planner projects, which are not detailed in this course. For more information about them, see the product documentation. CloudCampus APP – Login Methods ⚫ Project delivery tools except the AP Calculator are available only after you log in to WLAN Planner using an account and enter a project. The login method is as follows. 54 Huawei Confidential • Note: The user name and password of the Uniportal account are those for logging in to the WLAN Planner. If you do not have an account, apply for one. AP Calculator ⚫ After you set basic parameters in the tool as required, the AP Calculator quickly calculates the number of APs required in the selected scenario. Step 1 Step 2 Set parameters as required. View the calculation result. Currently, the tool supports the following five scenarios: 55 Huawei Confidential • Office,Supermarket • Hotel,Dormitory,Hospital • Electronic learning classroom • Wireless positioning • High-density coverage Site Survey ⚫ After successful login, obtain the WLAN Planner project list in the current environment, and select a project to perform site survey. ⚫ Add survey points on the project drawing to test the signal strength at the current position. Touch an obstacle on the drawing and choose Attenuation test. Touch Display detail to view the current attenuation value of the obstacle. Step 3 Touch an obstacle and choose Attenuation test. 56 Huawei Confidential Step 1 Step 2 Select a project for site survey. Add survey points. (Both images and texts are supported.) Quiz 1. (Multiple-answer question) Which of the following types of drawings can be imported to the WLAN Planner for creating an indoor region? ( ) A. PDF B. DWG C. PNG D. JPG 2. (True or false) The CloudCampus APP allows users to export site survey reports. ( A. True B. False 57 Huawei Confidential 1. ABCD 2. A ) Summary ⚫ This course describes two network planning tools: WLAN Planner (used for network planning and design) and CloudCampus APP (used for site survey and project acceptance). You can use the WLAN Planner to plan indoor or outdoor networks, and use its 3D simulation function to check whether the current network planning and design meet coverage requirements. During the project acceptance phase, you can use the WLAN Tester function of the CloudCampus APP to perform quality acceptance on the network environment. ⚫ After learning this course, you can understand the operation procedures of the WLAN Planner and CloudCampus APP and use them to quickly and easily complete network planning and design. 58 Huawei Confidential Recommendations ⚫ 59 Huawei official websites: Enterprise service: https://e.huawei.com/en/ Technical support: https://support.huawei.com/enterprise/en/index.html Online learning: https://www.huawei.com/en/learning Huawei Confidential Thank you. 把数字世界带入每个人、每个家庭、 每个组织,构建万物互联的智能世界。 Bring digital to every person, home, and organization for a fully connected, intelligent world. Copyright© 2022 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice. WLAN Planning Process Foreword ⚫ On the journey to digital transformation, the efficiency and reliability of a WLAN are critical to improving network performance and user experience. As the WLAN scale expands and the number of access terminals on the network increases exponentially, the WLAN environment becomes more complex and it is difficult to guarantee the network quality. As such, planning and designing a WLAN is now an indispensable part in WLAN construction. ⚫ Proper network planning and design can greatly reduce the possible WLAN signal coverage holes, signal interference, and network congestion, delivering better network experience. ⚫ 2 This course describes the WLAN planning process. Huawei Confidential Objectives ⚫ On completion of this course, you will be able to: Understand the WLAN planning process. Understand requirements collection and site survey in WLAN planning. Understand device selection, coverage analysis, and capacity design in WLAN planning. Understand the channel planning, power supply cabling design, and AP installation mode design in WLAN planning. 3 Huawei Confidential Contents 4 1. WLAN Planning Overview 2. WLAN Planning Process 3. WLAN Planning Case Huawei Confidential WLAN Planning Overview WLAN planning consists of four phases: preparation, planning and design, deployment design, and delivery. ⚫ Preparation: focuses on onsite information collection, including requirements collection and site survey. Planning and design: focuses on AP deployment, including device selection, coverage design, and capacity design. Deployment design: focuses on optimization and installation, including power supply and cabling design and installation mode design. 5 Delivery: involves installation, construction, acceptance, and delivery according to design results. Preparation Planning and design Deployment design Delivery Requirements collection Signal coverage analysis Channel planning Installation and construction Site survey Capacity design Power supply and cabling design Acceptance and delivery Device selection Installation mode design Huawei Confidential • Installation and construction: Install devices at the planned positions based on WLAN planning and design results. • Acceptance and delivery: Use the CloudCampus APP that has built-in acceptance function on a mobile phone to perform project acceptance. • (Note: This course does not detail the installation and construction or acceptance and delivery.) Contents 1. WLAN Planning Overview 2. WLAN Planning Process ◼ Preparation ▫ Planning and Design ▫ Deployment Design 3. 6 WLAN Planning Case Huawei Confidential Preparation Preparation for WLAN planning consists of requirements collection and site survey. Requirements ⚫ collection is the first step for WLAN planning. Communicate with the customer to collect complete and comprehensive project and requirement information. Then, use auxiliary tools to perform site survey and collect more detailed information on site. Requirements collection 7 Huawei Confidential Site survey Requirements Collection Requirements collection is the first as well as a critical step in WLAN planning. Engineers design the planning ⚫ solution based on user requirements. If complete and valid information is not obtained in the requirements collection phase, the subsequent WLAN planning may fail or even needs to be redesigned. The information to be obtained in the requirement collection phase is classified into the following types: ⚫ Basic requirements • • • 8 Laws and regulations Building drawings with scale information Coverage mode Huawei Confidential Service requirements • • • • • Coverage area Field strength Number of access STAs STA type Bandwidth requirements Installation requirements • • Power supply mode Switch location Requirements Collection — Basic Requirements Laws and regulations Check the restrictions of local laws and regulations on network deployment. Building drawing Obtain complete floor plans that contain scale information from the customer. Coverage mode Determine whether the customer has specific requirements on coverage scenarios. • • • • 9 Huawei Confidential • • • • Country code Equivalent isotropic radiated power (EIRP) Available channels Building drawings with scale information Drawing format (CAD/PDF/PNG/JPG) Indoor coverage Outdoor coverage Agile distributed coverage Requirements Collection — Service Requirements 10 Coverage area Determine the key coverage areas (such as office areas and conference rooms) and common coverage areas (such as staircases and restrooms) required by the customer. Field strength Determine whether the customer has requirements on the signal field strength in the coverage area. Generally, the signal field strength in key coverage areas (VIP areas) is greater than –60 dBm, and that in common coverage areas is greater than –65 dBm. Number of access users Calculate the total number of access STAs in a coverage area, and estimate the number of concurrent access users in a coverage area. STA type Determine the types of STAs and the proportion of MIMO types supported by these STAs to estimate AP performance. Bandwidth Determine the main types of network services and per-user bandwidth requirement in target areas. Huawei Confidential • Among the STA types, common STAs include mobile phones, tablets, and notebook computers, and special STAs include scanners and cash registers. Determine the proportion of MIMO types supported by STAs based on the customer's technical capability. Collect the MIMO types from the customer. If the customer cannot provide the MIMO types, assume 2x2 MIMO for calculation. Requirements Collection — Installation Requirements Power supply mode Switch location 11 Huawei Confidential Determine the power supply mode required by the customer and the available power supply areas and facilities on site. Determine the locations of upstream switches. Check whether the PoE power supply distance meets the requirements. • • PoE power supply Power supply by a power adapter • • PoE power supply: < 80 m PoE++ power supply: < 200 m Site Survey — Tools ⚫ ⚫ A site survey is conducted to obtain site environment information, such as interference sources, signal attenuation caused by obstacles, floor height, new obstacles, and extra-low voltage (ELV) room locations. Determine AP models, installation positions and modes, and power supply and cabling design based on the construction drawings. The site survey is typically completed using auxiliary tools, helping ensure the completeness and accuracy of site survey information. Site survey tools are categorized as software tools, hardware tools, and other tools (building drawings). Software tools CloudCampus APP WLAN Planner Hardware tools Indoor rangefinder Camera Test AP Other tools Building drawing 12 Huawei Confidential • Software tools: ▫ The WLAN Planner developed by Huawei is a professional WLAN planning tool used to set up the WLAN planning environment, deploy devices, simulate radio signals, and export WLAN planning reports, helping users easily complete WLAN planning and design. ▫ The CloudCampus APP provides a built-in site survey module that supports multiple functions such as AP locating, terminal query, and interference check. • Hardware tools: ▫ Indoor rangefinder: is used to measure the AP installation height, distance between APs and obstacles, and the length, width, and height of a venue when an indoor WLAN is deployed. ▫ Camera: is used to record information about the site environment, such as the AP installation environment and obstacle information in WDS networking scenarios. ▫ Test AP (including the matching power supply and bracket): works with the CloudCampus APP to test obstacle attenuation in indoor scenarios. It is recommended that the test AP be carried during site survey. Site Survey — Information Collection Process ⚫ Information collected during the site survey is critical to the network planning and design phase as well as the final network display effect. The site survey collection items vary according to the WLAN planning scenario, and need to be adjusted as required. The process of collecting site survey information is as follows: Determining drawing information Verify that drawing information is consistent with the onsite situation. 13 Determining interference sources Determining AP parameters Determining switch positions Determining special requirements Check interference sources on site and record them using tools. Determine the AP models, installation mode, and installation positions based on site requirements. Check the location of the ELV room, verify the switch deployment in the ELV room, and check whether power supply and cabling meet the requirements. Confirm with the customer about other requirements. Huawei Confidential • Before starting a site survey, use the WLAN Planner to design a draft WLAN planning solution, which can provide guidance during the site survey. The design idea of this WLAN planning draft should be the same as that of the WLAN planning, except that the data collected during the site survey is not available as a reference. Site Survey Information Collection (1/5) Determining drawing information Determining interference sources Determining AP parameters Determining switch positions Site Survey Item Record (Example) Description Common indoor floor height: 3 m If there are atriums, halls, or lecture halls, use a rangefinder to measure the floor height and record the value. Building materials and signal attenuation 240 mm brick wall (attenuation of 15 dB @ 2.4 GHz and 25 dB @ 5 GHz) 80 mm colored thick glass (attenuation of 8 dB @ 2.4 GHz and 10 dB @ 5 GHz) Obtain the thickness and signal attenuation values of the building materials on site. If possible, test the signal attenuation values on site. New obstacles New obstacles whose positions and signal attenuation values have been marked on the drawing Check whether the site is consistent with that on the drawing. If not, mark the inconsistent areas and take photos. Floor height Determining special requirements * Note: The enterprise office scenario is used as an example. 14 Huawei Confidential Site Survey Information Collection (2/5) Determining drawing information Determining interference sources Determining AP parameters Determining switch positions Site Survey Item Interference source Record (Example) Description Wi-Fi interference is detected. The interference sources have been marked on the drawing. Check whether there are interference sources, for example, mobile hotspots, Wi-Fi devices of other vendors, and non-Wi-Fi devices (such as Bluetooth devices and microwave ovens). The CloudCampus APP can be used to record interference source information. Determining special requirements * Note: The enterprise office scenario is used as an example. 15 Huawei Confidential Site Survey Information Collection (3/5) Determining drawing information Site Survey Item Record (Example) Description AP selection Indoor APs with omnidirectional antennas Select indoor APs with omnidirectional antennas, agile distributed APs, outdoor APs, or high-density APs based on scenarios. AP installation Ceiling or wall mounting mode and position Check whether APs can be mounted on the ceiling. If not, mount APs on the walls or junction boxes. Determining interference sources Determining AP parameters Determining switch positions Determining special requirements 16 Huawei Confidential * Note: The enterprise office scenario is used as an example. Site Survey Information Collection (4/5) Determining drawing information Site Survey Item Record (Example) Description Determining interference sources ELV room location ELV room locations marked on the drawing. Mark the locations of ELV rooms where switches are to be deployed on the drawing. Determining AP parameters Power supply cabling Network cables to be routed have been marked on the drawing. Mark PoE power supply cables to be routed on the drawing. It is recommended that the length of a PoE cable be no more than 80 m. Implementation feasibility Check whether APs can be Check whether there is a fireproof deployed, distance to switches, distance to power door or whether it is difficult to drill holes on the concrete bearing wall. supply, and whether the cabling is feasible. Determining switch positions Determining special requirements * Note: The enterprise office scenario is used as an example. 17 Huawei Confidential Site Survey Information Collection (5/5) Determining drawing information Determining interference sources Site Survey Item Record (Example) Description Special requirements In-roaming packet loss rate: < 1%; latency: < 20 ms Record special requirements of the customer. Other information Collect and record other information if any. Determining AP parameters Other Determining switch positions Determining special requirements 18 Huawei Confidential * Note: The enterprise office scenario is used as an example. Site Survey — Obstacle Attenuation Testing ⚫ ⚫ Obstacles cause strong attenuation of radio signals. If the attenuation data is inaccurate, network planning, design, and deployment will be greatly affected. Therefore, you can obtain accurate attenuation data by using the obstacle attenuation test method during site survey. Generally, the attenuation of obstacles is tested on typical indoor obstacles or obstacles with uncertain materials, such as ceilings or decorative walls. Test procedure Test point 1 Test AP (Fat AP) About 4–5 m Test point 2 Obstacle to be tested 1. Test AP deployment: Ensure that the AP and the obstacle to be tested are not blocked and the distance between them is 4 m to 5 m. Do not place the AP close to the obstacle to be tested, because the field strength near the signal source fluctuates greatly, which affects the test accuracy. 2. Signal field strength test: Test the signal field strength at test points 1 and 2, as shown in the figure. 3. Attenuation calculation method: Signal attenuation of the obstacle to be tested = Field strength tested at test point 1 – Field strength tested at test point 2 19 Huawei Confidential • When using a signal scanning tool (CloudCampus APP installed on a mobile phone) to connect to a Fat AP WLAN to test the signal field strength, you are advised to measure several groups of data to reduce the error. Note that the attenuation values of signals on each frequency band need to be tested separately. For example, if the 2.4 GHz field strength values on both sides of an obstacle are –60 dBm and –65 dBm, respectively, the signal attenuation caused by the obstacle is 5 dB. Contents 1. WLAN Planning Overview 2. WLAN Planning Process ▫ Preparation ◼ Planning and Design ▫ Deployment Design 3. 20 WLAN Planning Case Huawei Confidential Planning and Design ⚫ In the planning and design phase, the device model and device performance are determined based on the data collected in the preparation phase to ensure the WLAN coverage and to meet the Internet access service requirements of all terminals. ⚫ The planning and design phase includes signal coverage analysis, capacity design, and device selection. Signal coverage analysis • • • • • 21 Coverage area Field strength Coverage area of a single AP Signal attenuation caused by obstacles AP antenna selection Huawei Confidential Device selection Capacity design • • • • Per-user bandwidth Number of access STAs Concurrency rate Per-AP performance • • • • • MIMO Antenna selection or gain Combined power Power supply mode Wi-Fi standard Signal Coverage Analysis Capacity Design Device Selection Signal Coverage Design Rules ⚫ During signal coverage design, you need to design and plan coverage for different areas to ensure that the signal strength in each area meets user requirements and to minimize co-channel interference between neighboring APs. ⚫ The signal coverage effect can be simply understood as the number of Wi-Fi signal bars on a mobile phone. The field strength of no less than –65 dBm is an empirical value obtained in engineering practice. Different projects may have special requirements. Objective Factors to be considered Acceptance criteria 22 Huawei Confidential Good coverage (good signal) Coverage of a single AP Signal attenuation caused by obstacles AP installation positions Field strength in all areas ≥ –65 dBm AP antenna selection Signal Coverage Analysis Capacity Design Device Selection Coverage Area ⚫ Before network planning, communicate with the customer to determine the WLAN coverage areas based on the onsite environment and drawing. For example, offices are key coverage areas, and corridors are common coverage areas. After confirmation, mark the information on the drawing for future planning. Office 1 Office 2 Lounge Lecture hall Corridor Restroom 23 Restroom Coverage Area Field Strength Key coverage area (VIP) –40 dBm to –60 dBm Common coverage area ≥ –65 dBm Special coverage area N/A Huawei Confidential Key coverage area Common coverage area Meeting room Typical Scenarios in Common Projects Dorm room, classroom, hotel room, office, meeting room, etc. Lobby, exhibition hall, library, corridor, etc. Areas where coverage or installation is limited or not allowed, for the sake of service security or property management. Signal Coverage Analysis Capacity Design Device Selection Signal Attenuation Caused by Obstacles Signal attenuation caused by common obstacles Obstacle Thickness (mm) 2.4 GHz Signal Attenuation (dB) 5 GHz Signal Attenuation (dB) Synthetic material 20 2 3 Asbestos 8 3 4 Wooden door 40 3 4 Glass window 50 4 7 Thick colored glass 80 8 10 Brick wall 120 10 20 Brick wall 240 15 25 Armored glass 120 25 35 Concrete 240 25 30 Metal 80 30 35 Relationship between the signal attenuation and transmission distance Distance 1m 2m 5m 10 m 20 m 40 m 80 m 2.4 GHz attenuation 46 dB 53.5 dB 63.5 dB 71 dB 78.5 dB 86 dB 93.6 dB 96 dB 5.8 GHz attenuation 53 dB 62 dB 74 dB 83 dB 92 dB 101 dB 110.1 dB 113 dB 24 Huawei Confidential 100 m Signal Coverage Analysis Capacity Design Device Selection Single AP Coverage ⚫ A single AP provides limited wireless coverage. Therefore, multiple APs need to be deployed to offer full network coverage in a WLAN project. To determine the number of APs, you need to calculate the coverage area of each AP. ⚫ The Received Signal Strength Indicator (RSSI) is calculated as follows (regardless of factors such as the interference and line loss): Final signal field strength = AP transmit power + MIMO gain + Antenna gain – Path loss – Obstacle signal attenuation Relationship between the path loss and signal transmission distance (Indoor coverage scenario) 2.4 GHz: L = 46 + 25lg(d); 5 GHz: L = 53 + 30lg(d) (Outdoor coverage scenario) 2.4 GHz/5 GHz: L = 42.6 + 26lg(d) + 20lg(f) (Backhaul scenario) 5 GHz: L = 32.4 + 26lg(d) + 20lg(f) * L indicates the path loss (dB), f indicates the working frequency (MHz), and d indicates the signal transmission distance (m). 25 Huawei Confidential Signal Coverage Analysis Capacity Design Device Selection Signal Attenuation Analysis (Example) Requirements analysis • • APs cannot be installed in lounges. APs in the lecture hall are used to provide signal coverage (with –75 dBm field strength). Site survey Coverage analysis • • The signal attenuation of the wooden partition wall is 5 dB. Calculate the signal field strength of the mobile phone based on the final signal field strength formula, as shown in the following figure. Signal field strength at the position of the mobile phone shown in the figure = 20 (recommended AP transmit power) + 3 (antenna gain) – 60 (transmission attenuation) – 5 (signal attenuation caused by obstacles) = –42 dBm. This meets network planning requirements. If the field strength cannot reach this value, deploy more APs as needed. Office 1 Office 2 Lounge Lecture hall Corridor Restroom 26 Restroom Meeting room Wooden partition wall Huawei Confidential • Note: During the calculation of built-in antennas, the transmit power and antenna gain are often calculated together to simplify memory. Signal Coverage Analysis Capacity Design Device Selection Key Points for Indoor AP Coverage Design ⚫ Pay attention to the following key points when designing indoor AP coverage: Reduce the number of obstacles that signals pass through. It is not recommended that signals penetrate a 240 mm thick brick wall, concrete wall, or metal wall. Deploy APs separately in key areas and areas with special requirements to ensure user experience. Deploy APs separately at intersections or corners to ensure signal coverage continuity (≥ –65 dBm) and that neighboring APs can establish neighbor relationship tables for good roaming experience. Install APs at least 3 m away from bearing pillars. Deploy APs in equal-triangle (W-shaped) or equal-spacing mode based on site requirements. 2 2 1 1 Improper location: Signals penetrate several walls. 27 Proper location: Signals penetrate only one wall. Huawei Confidential • Minimize the number of obstacles that signals pass through. Generally, it is recommended that signals pass through a single-layer wall (120 mm brick wall). In some special scenarios (such as gypsum walls and glass walls), signals can pass through two layers of walls. • It is not recommended that signals penetrate a 240 mm thick brick wall, concrete wall, or metal wall. If the AP penetration coverage solution is used without meeting the specified constraints, weak signals and discontinuous roaming may occur after signals penetrate the wall. In this case, to ensure good coverage and roaming, add APs based on the wall structure during network planning. Signal Coverage Analysis Capacity Design Device Selection Key Points for Outdoor AP Coverage Design ⚫ Pay attention to the following key points when designing outdoor AP coverage: Select a proper antenna coverage mode based on WLAN scenarios. For example, omnidirectional antennas are recommended in open areas such as squares and parks. It is recommended that outdoor directional and omnidirectional antennas be installed at a height of 3 m to 5 m. Outdoor omnidirectional antennas must be installed vertically. Directional APs or antennas are recommended for roads around buildings to reduce interference to indoor signals and provide codirectional coverage. Due to obstacles such as trees, it is recommended that devices be installed on the monitoring pole. Avoid strong electromagnetic interference and other signal interference near the site. Antenna Teaching building 3–5 m Lab building Example of installing outdoor directional and omnidirectional antennas 28 Example of installing APs with directional antennas around a building Huawei Confidential • APs with built-in directional antennas are recommended for coverage in narrow and long areas such as roads. APs with external small-angle directional antennas are recommended for coverage in high-density, backhaul, and ultra-longdistance coverage scenarios. Signal Coverage Analysis Capacity Design Device Selection Capacity Design Rules ⚫ During network capacity design, you need to design the number of APs required based on the bandwidth requirements, the number of STAs, concurrency rate, and per-AP performance. This ensures that the WLAN performance can meet the Internet access requirements of all STAs. ⚫ User bandwidth can be simply understood as the network bandwidth required by a STA to use a service. User concurrency and bandwidth requirements vary depending on specific areas. Therefore, the capacity design must be performed based on different scenarios and areas. Objective 29 Meeting users' bandwidth requirements (concurrent scenario) Factors to be considered Per-user bandwidth Acceptance criteria The bandwidth of key services meets the multi-user concurrent requirements in the target area. Huawei Confidential Number of access STAs Number of concurrent STAs Capacity of a single AP Signal Coverage Analysis Capacity Design Device Selection Bandwidth Requirements of a Single User (Office Scenario as an Example) ⚫ After the signal coverage design is determined, analyze and evaluate the average bandwidth of each area based on the specified service bandwidth requirements, actual scenarios, and concurrency. If no bandwidth requirement in a scenario is specified, evaluate the required bandwidth based on the typical scenario. Service Type Single-Service Baseline Rate (Mbps) Excellent Good 4K video 50 30 1080p video 16 12 720p video 8 4 E-whiteboard (wireless 32 16 projection) Email 32 16 Web browsing 8 4 Gaming 2 1 Instant messaging 0.512 0.256 VoIP (voice) 0.256 0.128 Average single-user bandwidth (Mbps) — excellent Proportion of Services in Office Scenarios Conference Room 10% 10% 10% High-Density Office Area 10% 10% 10% Common Office Area 10% 10% 10% Leisure Area 10% 10% 10% 10% 10% 30% 0% 10% 10% 16 Exhibition Canteen Parking Lot Restroom Hall 10% 10% 10% 10% 10% 10% 10% 10% 10% 10% 10% 10% 20% 0% 0% 0% 0% 0% 0% 10% 20% 5% 5% 10% 10% 20% 10% 20% 10% 0% 30% 10% 20% 10% 0% 30% 0% 30% 10% 0% 30% 10% 20% 10% 0% 10% 10% 30% 20% 0% 30% 10% 20% 10% 19 13 10 10 10 9 10 *Data comes from Huawei labs. 30 Huawei Confidential • Bandwidth requirements vary depending on STA types and network services running on STAs. For example, the bandwidth required by a STA used for watching HD videos is higher than that required by a STA used only for browsing web pages. Therefore, plan sufficient bandwidth based on STA services and types to avoid bandwidth insufficiency or waste. Signal Coverage Analysis Capacity Design Device Selection Number of Concurrent STAs on a Single AP ⚫ The number of concurrent STAs supported by a single AP refers to the maximum number of concurrent STAs supported by the single AP which meets user bandwidth requirements. The main factors include the user access bandwidth, number of AP spatial streams, number of AP radios, and frequency bandwidth. ⚫ The following table lists the maximum number of concurrent STAs supported by a Wi-Fi 6 AP at different access bandwidths. Wi-Fi 6 AP (20 MHz @ 2.4 GHz; 40 MHz @ 5 GHz) No. Access Bandwidth Single Radio (5 GHz) Dual Radios (2.4 GHz + 5 GHz) Triple Radios (2.4 GHz + 5 GHz-1 + 5 GHz-2) 1 2 Mbps 56 85 141 2 4 Mbps 39 56 95 3 6 Mbps 27 38 65 4 7 Mbps 21 30 51 5 16 Mbps 12 18 30 * Note: The number of concurrent STAs varies depending on the AP model. The preceding data is obtained from Huawei labs. 31 Huawei Confidential • The user access bandwidth in the table refers to the rate at the application layer. The rate at the application layer refers to the actual effective rate excluding various overheads over the air interface. The rate at the application layer is lower than that the PHY rate. • Note: All test STAs in the table support the corresponding wireless technology and work with dual spatial streams. Signal Coverage Analysis Capacity Design Device Selection WLAN Capacity Design (Example) Maximum Number of Concurrent STAs at Different Bandwidths (Dual Spatial Streams, 802.11ax Supported) STA Access Bandwidth Maximum Number of Concurrent STAs (Single-Radio) Maximum Number of Concurrent STAs (Dual-Radio) Prerequisites ... ... ... Scenario: Conference room Number of access STAs: 300 16 Mbps 12 18 Access concurrency rate: 30% ... ... ... Single-Service Baseline Rate (Mbps) Service Type Percentage Excellent Good Conference Room 4K video 50 30 10% 1080p video 16 12 10% 720p video 8 4 10% E-whiteboard (wireless projection) 32 16 10% Email 32 16 10% Web browsing 8 4 30% Gaming 2 1 0% Instant messaging 0.512 0.256 10% VoIP (voice) 0.256 0.128 10% Average single-user bandwidth (Mbps) — excellent 32 Huawei Confidential 16 Mbps Bandwidth required by a single STA (Excellent): 16 Mbps Number of concurrent STAs supported by a single AP (dual-band, 16 Mbps): 18 Calculation result Number of APs required to meet capacity requirements in this area = Number of access STAs x Access concurrency rate Number of concurrent STAs on a single AP 300 x 30% 18 =5 Signal Coverage Analysis Capacity Design Device Selection Device Selection Factors ⚫ Select proper AP models based on customer requirements and the following factors: 33 Factor Description MIMO An AP typically supports 4 to 12 spatial streams. An AP with more spatial streams supports higher throughput and larger access capacity. Therefore, select APs with a proper number of spatial streams based on the application scenario and access density. Antenna Indoor APs have three types of antennas: omnidirectional, directional, and smart antennas. Outdoor APs support omnidirectional and directional antennas. APs with smart antennas are recommended for indoor scenarios. Select APs with directional antennas if APs need to be installed at high places. Maximum transmit power (combined power) Limitations over the Wi-Fi transmit power vary depending on the country or region code. When the transmit power gets closer to the specified upper limit, the transmitted signal is stronger and the coverage distance is longer. For details, see the Country Codes and Channels Compliance in the product documentation. Antenna gain A higher antenna gain indicates a stronger signal strength and longer coverage distance. Select antennas with a proper gain based on site requirements. Power supply mode The power supply mode depends on the deployment scenario. Currently, in most scenarios, PoE power supply is used, or both PoE and power supply are used for mutual backup. Pay attention to the power consumption of the AP and the power supply capability of the PoE switch. Wi-Fi standard The Wi-Fi standard has evolved to the sixth generation, and each generation is compatible with earlier ones. The latest Wi-Fi 6 standard greatly improves the Wi-Fi speed and capacity. Therefore, Wi-Fi 6 APs are recommended. Other features For example, the Internet of Things (IoT) feature may be required. As the IoT comes into widespread use, deploying an IoT network independently will cause repeated cabling, separate management and O&M, and high hardware and O&M investment. Therefore, it is recommended that IoT scalability be considered when you select Wi-Fi APs. Huawei Confidential • In addition to the scenarios described in the table, antenna selection also includes the following: ▫ Indoor scenario: Omnidirectional antennas are applicable when there is no high capacity requirement and dense deployment is not involved in the target coverage area. ▫ Outdoor scenario: Directional antennas are used for long-distance signal coverage and wireless backhaul, while omnidirectional antennas are used for short-distance signal coverage. (For example, in China, when the coverage distance is greater than 80 m, use directional antennas; when the coverage distance is less than 80 m, use omnidirectional antennas. The actual coverage distance is subject to the local EIRP limit.) Contents 1. WLAN Planning Overview 2. WLAN Planning Process ▫ Preparation ▫ Planning and Design ◼ 3. 34 Deployment Design WLAN Planning Case Huawei Confidential Deployment Design ⚫ In the deployment design phase, after determining the WLAN coverage area, AP model, and number of APs, design the AP deployment location, deployment mode, and power supply cabling mode based on the actual situation. ⚫ The deployment design phase includes channel planning, power supply cabling design, and installation mode design. The work contents are as follows: Power supply and cabling design Channel planning 35 • Horizontal • AP power supply mode • Vertical • AP cabling mode Huawei Confidential Installation mode design • Installation of indoor APs with omnidirectional antennas • Installation of agile distributed APs • Installation of outdoor APs and external directional antennas Channel Planning Power Supply and Cabling Design Installation Mode Design Channel Design Rules ⚫ To avoid coverage holes or poor roaming experience, multiple APs are used to provide complete network coverage. Therefore, channel selection and channel planning are involved. Before channel design, comply with the following rules: Determine the local available channels. • Available channels vary with countries or regions, and some channels may be reserved in some regions. Therefore, confirm the channels before network planning to avoid duplicate channels. • For example, in China, 40 MHz channels 36, 44, 52, 60, 149, and 157 can be used on the indoor 5 GHz frequency band. In common scenarios, 40 MHz networking is recommended by default. Avoid co-channel interference. • Properly plan channels to ensure the reuse distance of intra-frequency channels. • On the premise of ensuring coverage, lower the power to reduce co-channel interference. • AP channels need to be staggered in multiple dimensions (for example, the horizontal and vertical directions) when APs are deployed on multiple floors. • 36 If channels cannot be staggered, disable some radios to reduce interference. Huawei Confidential • WLAN Country Codes and Channels Compliance: https://support.huawei.com/enterprise/en/doc/EDOC1000014876/82579c28?idPat h=24030814|21782164|21782201|22318529|22039827 Channel Planning Power Supply and Cabling Design Installation Mode Design Channel Planning ⚫ In WLAN planning, overlapping coverage areas are inevitable between neighboring APs. Generally, 10% to 15% overlapping buffer areas need to be reserved. This area may cause co-channel interference. ⚫ To address this, you can plan channels horizontally or vertically based on site requirements. In the horizontal direction, neighboring APs must use radio frequency bands that do not interfere with each other. When a WLAN is deployed across multiple floors, ensure that channels do not interfere with each other in the vertical direction. Horizontal Vertical 11 1 11 1 149 11 44 6 1 2.4 GHz cellular coverage 37 Floor 36 Huawei Confidential 64 157 165 52 5 GHz cellular coverage Planned Channels 5th floor 1 6 11 4th floor 3rd floor 11 1 6 6 11 1 2nd floor 1 6 11 1st floor 11 1 6 Channel Planning Power Supply and Cabling Design Installation Mode Design AP Power Supply Design ⚫ When designing the AP power supply mode, select a proper power supply mode based on customer requirements and onsite conditions. AP power supply modes include: Power supply using a PoE switch: PoE switches forward data of and supply power to APs (through Ethernet cables or hybrid cables). Power supply using a DC power adapter (supported only by indoor APs): An independent DC power adapter is used to supply power to APs. Power supply using a PoE adapter: PoE adapters are used for data transmission and power supply of APs. Alternatively, use optical fibers for data transmission of AP and PoE adapters only for power supply. Fiber mechanical splicer AC power supply Data port connecting to a switch RJ45 power connector Power indicator PoE port connecting to an AP PoE switch 38 Huawei Confidential PoE power supply over a hybrid cable DC power adapter PoE adapter Channel Planning Power Supply and Cabling Design Installation Mode Design AP Cabling Rules ⚫ Observe the following rules when routing cables: Reserve a length of around 5 meters for Ethernet cables and hybrid cables for fine-tuning AP positions to reduce interference or optimize signal coverage. It is recommended that the length of an Ethernet cable between an AP and a PoE switch be less than or equal to 80 m. Hybrid cables can only be used indoors and cannot be connected to outdoor APs. It is recommended that the length of a hybrid cable between an AP and a switch be less than or equal to 300 m. The WLAN must be kept far away from strong electric and magnetic fields. Before deployment, confirm with the customer about the network cable deployment scheme to ensure that project construction will not be affected due to property and aesthetics reasons. < 80 m AP PoE switch Power supply over an Ethernet cable 39 Huawei Confidential < 300 m AP PoE switch Power supply over a hybrid cable Channel Planning Power Supply and Cabling Design Installation Mode Design Indoor Settled AP Installation ⚫ When designing indoor AP installation, select a proper installation mode based on site conditions and customer requirements. Indoor settled APs can be installed in the following modes: Ceiling mounting: If the installation height is smaller than 6 m, use APs with omnidirectional antennas. If the installation height is greater than 6 m, use APs with directional antennas. Wall mounting: If ceiling mounting is not allowed, wall mounting can be used. The recommended installation height is 3 m. Support mounting: This mode can be temporarily used when APs cannot be mounted on the ceiling or walls, applying to temporary exhibition scenarios. Threaded rod installation: This mode is recommended when the ceiling is high or there are many obstacles on the ceiling. Ceiling mounting 40 Huawei Confidential Wall mounting Support mounting Threaded rod mounting Channel Planning Power Supply and Cabling Design Installation Mode Design Agile Distributed AP Installation ⚫ Wall plate APs and agile distributed RUs can be installed on walls, junction boxes, or ceilings. Wall mounting 41 Junction box (86 mm) mounting Ceiling mounting Huawei Confidential • Note: Some AP models, such as the AirEngine 5760-22W, do not support ceiling mounting. Therefore, before mounting an AP on the ceiling, check whether the AP supports this installation mode. Channel Planning Power Supply and Cabling Design Installation Mode Design Installation Modes of Outdoor APs and Antennas ⚫ Outdoor APs can be mounted on poles or walls. Pay attention to the following points during the installation: Outdoor APs and antennas are equipped with mounting brackets that allow you to adjust the azimuth and downtilt in a range of ±30°. If the antenna angle does not need to be adjusted, APs can be directly installed on the wall. The recommended installation height of outdoor omnidirectional and directional antennas is 3–5 m. Pole mounting Installation diagram 42 Huawei Confidential Wall mounting Installation diagram Contents 43 1. WLAN Planning Overview 2. WLAN Planning Process 3. WLAN Planning Case Huawei Confidential Project Background ⚫ A company plans to construct a WLAN in its indoor office area. The following figure shows the floor plan of the building. To meet the mobile office requirements of employees and Internet access requirements of guests, the indoor WLAN design and planning are performed to ensure that the WLAN covers all areas required by the customer and meets service requirements. 44 Huawei Confidential WLAN Planning Roadmap ⚫ The detailed WLAN planning procedure is as follows: Analyze requirements based on the existing information. Select devices based on requirements and calculate the number of APs. Log in to the WLAN Planner and import the building drawing. Set the environment and draw obstacles. Deploy APs. Adjust AP parameters and antenna angles. Lay out switches and cables. Perform signal simulation. Adjust the AP positions and repeatedly perform signal simulation until the signal coverage is complete. 45 Export the network planning report. Huawei Confidential Requirements collection Site survey Environment setting Requirements analysis Region setting Creating a project Importing a drawing Network planning in five steps AP deployment Signal simulation Report export Requirements Collection (1/2) ⚫ The information to be obtained in the requirements collection phase includes basic requirements, service requirements, and installation requirements. ⚫ After thorough communication with the customer, the collected basic requirements and installation requirements are listed as follows: Basic requirements collection checklist Requirement Type Laws and regulations 46 Collection Result Country code: CN Floor plan JPG scale drawing (building length: 100 m) Coverage mode Indoor APs with omnidirectional antennas Huawei Confidential Installation requirements collection checklist Requirement Type Collection Result Power supply mode PoE switch AP installation mode Ceiling mounting Switch location Acceptance items and criteria ELV rooms No special requirements Requirements Collection (2/2) ⚫ After thorough communication with the customer, the collected service requirements are listed as follows: Requirement Type Coverage area VIP coverage areas: exhibition hall, reception room, and manager's office Common coverage areas: open office areas, meeting rooms, printing room, and leisure areas Simple coverage areas: restrooms Areas not covered: ELV rooms, storage rooms, staircases, and elevators Field strength • • • • VIP coverage area: ≥ –60 dBm Common coverage area: ≥ –65 dBm Simple coverage area: ≥ –70 dBm Leakage field strength: no requirement Number of access STAs • • • Open office area: 250 office cubes in each area, with two STAs in each office cube Conference room: 40 seats, with one STA at each seat Meeting room and exhibition hall: 10 seats in each room or hall, with two STAs at each seat STA type Bandwidth requirements (per-user bandwidth) 47 Collection Result • • • • Huawei Confidential Laptops, mobile phones, and tablets that support 2x2 MIMO and 40 MHz frequency bandwidth @ 5 GHz • • • Open office area: 8 Mbps, with a concurrency rate of 72% Conference room: 16 Mbps, with a concurrency rate of 90% Meeting room and exhibition hall: 16 Mbps, with a concurrency rate of 90% Site Survey ⚫ A site survey is conducted to obtain site environment information, such as interference sources, signal attenuation caused by obstacles, floor height, new obstacles, and ELV room locations. Determine AP models, installation positions and modes, and power supply and cabling design based on the construction drawings. Collection Item Survey Result Drawing information • The onsite building information is consistent with that on the floor plan provided by the customer. • The floor height is 2.6 m. • Inside the building, tables and chairs are at normal heights and have little interference to signals. Therefore, they can be ignored. Building materials and signal attenuation Interference sources • There is a microwave oven in both the left and right leisure areas. • There are four load-bearing pillars (length x width: about 1 m x 1 m) in each of the greening areas, which have been marked on the drawing. • There are potted plants (half-meter high) in greening areas, which have little impact on signals and can be ignored. Switch location Either of the left or right ELV room Cabling rules Network cables between switches and APs are routed above the ceiling. Hidden cabling is required, and hole drilling is allowed. Installation admission 48 • The external walls are 240 mm concrete walls. • The walls of meeting rooms, offices, and reception room are 240 mm thick brick walls. • The leisure area walls are 12 mm thickened glass. Huawei Confidential Approved Calculating the Number of APs Single-AP concurrency specifications ⚫ Calculate the number of APs required in each area based on Maximum Number of Concurrent STAs at Different Bandwidths (Dual Spatial Streams, 802.11ax Supported) the average STA bandwidth requirements in each scenario and STA Access Bandwidth Maximum Number of Concurrent STAs (Single-Radio) Maximum Number of Concurrent STAs (Dual-Radio) AP provided by the customer. The calculation formula is as 4 Mbps 39 56 8 Mbps 21 30 16 Mbps 12 18 ... ... ... the concurrent number of STAs on the 5 GHz radio of a single follows: Number of required APs = Number of access STAs x Access concurrency rate Number of concurrent STAs on a single AP Average per-STA bandwidth in each scenario Scenario Number of STAs Per-STA Bandwidth Concurrency Rate Open office area 500 8 Mbps 72% Conference room 40 16 Mbps 90% Meeting room and exhibition hall 20 16 Mbps 90% Leisure area 20 8 Mbps 60% Restroom 10 4 Mbps 90% 49 Calculation results: • Open office area = 500 x 72%/30 = 12 • Conference room = 40 x 90%/18 = 2 • Meeting room = 20 x 90%/18 = 1 • Leisure area = 20 x 60%/30 ≈ 1 • Restroom = 10 x 90%/56 ≈ 1 Huawei Confidential • In other rooms with a small number of STAs, only one AP needs to be deployed. Creating a Project ⚫ Log in to the WLAN Planner, click Running, read the Security Management Regulations on Customer Network Data, and fill in the project information. 1 4 5 2 3 6 50 Huawei Confidential • WLAN Planner address: https://serviceturbo-cloudcn.huawei.com/serviceturbocloud/#/toolsummary?entityId=d59de9ac-e4ef-409ebbdc-eff3d0346b42 Creating a Floor ⚫ Create a region, select Indoor, set the building name to HCIP-WLAN, and click Select File. 1 2 3 51 Huawei Confidential Selecting a Scenario Select a WLAN scenario. For this project, select Office and click Next. You can specify a built-in network ⚫ construction standard as required. For this project, select Other and click OK. 1 3 2 52 Huawei Confidential 4 Importing a Drawing ⚫ Select the drawing file and click OK. 53 Huawei Confidential Setting the Scale ⚫ Click Click here to set the scale in the middle of the drawing, draw a straight line from left to right anywhere on the drawing, set the length to 100 meters, and click OK. 2 1 3 4 54 Huawei Confidential Setting the Environment ⚫ Draw obstacles on the drawing. Use insulation boundaries to draw drawing frames. Draw 240 mm thick brick walls as indoor walls, 240 mm concrete as ELV rooms, and 12 mm thick glass as leisure areas. Microwave oven Load-bearing pillar 55 Huawei Confidential Setting Regions ⚫ Drag-select VIP coverage areas, common coverage areas, and simple coverage areas based on customer requirements, and set basic attributes for these areas. Open office area A 56 Manager's office Huawei Confidential • This slide shows the settings of basic attribute parameters for open office area A and manager's office. For other areas, set the parameters based on customer requirements. Deploying APs (1/4) ⚫ Click Automatic deployment, select Current Floor in Auto Place Config, and click Next. 1 2 3 57 Huawei Confidential Deploying APs (2/4) ⚫ In Auto Place Config, select a proper AP model and channel calculation mode, enable the power calibration function, and click Place AP. 3 1 4 2 58 Huawei Confidential Deploying APs (3/4) ⚫ After automatic deployment, the number and positions of APs may be insufficient to meet service requirements. In this case, manually adjust the number and positions of APs. In open office areas, you can deploy APs in equal triangle mode and set the distance between APs to 15–18 m. Effect after automatic deployment 59 Huawei Confidential Effect after manual adjustment Deploying APs (4/4) ⚫ After APs are deployed, set AP parameters, such as the installation mode, height, and working mode. If directional antennas are used, you need to set the antenna downtilt and azimuth. ⚫ Right-click an AP in the activity area and choose Property from the shortcut menu. (You can dragselect all APs and right-click them for the setting). The AP Attributes page is displayed, allowing you to configure AP parameters based on customer requirements. The customer requires ceiling mounting for APs. As such, retain the default installation mode T-rail, set the height to 2.6 m, set the working mode to dual-radio mode, and retain the default values for other parameters. The attribute configurations of APs in other areas are the same. 60 Huawei Confidential Deploying Switches ⚫ Select a switch model (S5731-S24P4X switch in this project). Place switches in the ELV rooms on both sides. 61 Huawei Confidential Drawing Network Cables ⚫ Network cables can be routed above the ceilings to directly connect APs and switches. 62 Huawei Confidential • Note: You can hide network cables by clicking the Set Display button on the bottom of the page. Simulating Signals (1/2) Adjust the bar in the simulation diagram to –65 dBm, and then click Open simulation to view the coverage of common areas. ⚫ 2 1 63 Huawei Confidential • To view the coverage of VIP areas and simple areas, set the signal strength in the simulation diagram to –60 dBm and –70 dBm, respectively. Simulating Signals (2/2) ⚫ If the signal coverage is poor, adjust the number and positions of repeatedly to ensure normal signal simulation. View the coverage satisfaction to check whether any area has only poor signal coverage. 64 Huawei Confidential Exporting the Report (1/2) ⚫ You can set the parameters to be included in the report, and then click Export to export the WLAN planning report. 65 Huawei Confidential Exporting the Report (2/2) ⚫ Before the report is exported, you need to review the network planning. The report can be exported only after all items are correct. 1 66 Huawei Confidential 2 Quiz 1. (Single-answer question) Which of the following obstacles causes the largest attenuation of 2.4 GHz signals when materials have the same thickness? ( A. Metal B. Asbestos C. Wooden door D. Colored glass ) 2. (Single-answer question) Which of the following are rules for AP deployment? ( 67 A. When installing an AP, try to reduce the number of obstacles that signals traverse. B. Ensure that the front side of an AP faces the target coverage area. C. Deploy APs in concealed places. D. Deploy APs far away from interference sources. Huawei Confidential 1. A 2. ABD ) Summary ⚫ This course describes the importance of WLAN planning. If WLAN planning is not properly performed in the early stage, rework may occur during WLAN project delivery due to a failure to meet customer requirements. Additionally, this course introduces you to the WLAN planning process, including preparation, planning and design, deployment design, and construction and delivery. Before WLAN planning, fully communicate with the customer to understand the customer's requirements and expectations. During the site survey, carefully check onsite conditions against the drawing to facilitate subsequent WLAN planning and design. ⚫ After learning this course, you will have a basic understanding of the WLAN planning process and master the methods of WLAN planning and design. 68 Huawei Confidential Recommendations ⚫ 69 Huawei official websites: Enterprise service: https://e.huawei.com/en/ Technical support: https://support.huawei.com/enterprise/en/index.html Online learning: https://www.huawei.com/en/learning Huawei Confidential Thank you. 把数字世界带入每个人、每个家庭、 每个组织,构建万物互联的智能世界。 Bring digital to every person, home, and organization for a fully connected, intelligent world. Copyright© 2022 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice. WLAN Planning for Enterprise Office Scenarios Foreword ⚫ The enterprise office scenario refers to the office area of an enterprise, including the centralized office area, conference room, and manager's office. WLAN planning for this scenario instructs you to plan a WLAN before deployment to meet Internet access requirements for enterprise office. With a high user density, this scenario has a high requirement for network capacity and is sensitive to network quality. ⚫ This course introduces you to the WLAN service characteristics of enterprise office scenarios as well as methods, rules, and precautions for WLAN planning in these scenarios. 2 Huawei Confidential Objectives ⚫ 3 On completion of this course, you will be able to: Describe common WLAN service types in enterprise office scenarios. Describe WLAN planning methods in enterprise office scenarios. Describe WLAN deployment solutions in enterprise office scenarios. Huawei Confidential Contents 4 1. Introduction to Enterprise Office Scenarios 2. WLAN Planning Process in Enterprise Office Scenarios 3. WLAN Planning Solutions in Enterprise Office Scenarios Huawei Confidential Overview of Enterprise Office Scenarios • Space: In most cases, the height does not exceed 4 m. The specific area greatly varies from several square meters to thousands of square meters. • Blocking: Obstacles are common in offices, such as gypsum boards and glass walls, causing little signal attenuation. • Interference: The interference is low in independent office areas. However, if several companies lease offices on the same floor, the WLANs of the companies may be severely interfered. • Capacity: Office scenarios require high bandwidth. Some enterprises use fully-wireless office, and some enterprises use wired and wireless office. Office 5 Huawei Confidential Meeting room Service Types in Enterprise Office Scenarios Office personal service Non-office personal service Enterprise IoT service Services running on mobile Services running on mobile Asset management, energy phones, office laptops, and devices such as mobile phones, efficiency control (air tablets, for example, office for example, video, gaming, and conditioners and lighting software, email, file transfer, social networking. system), etc. desktop sharing, and desktop cloud. Requirements on WLANs differ for these services. 6 Huawei Confidential • Note: This course does not assume IoT services on a WLAN. Development of Enterprise Office Networks 2000 2009 Today Mobile 1.0 Mobile 2.0 Mobile 3.0 4K VR/AR Fully-wireless era BYOD Wireless office era Basic mobile office Fixed office Desktop computer • Data service 7 Laptop: • Voice and data services • Wi-Fi 3 Mobile phone, tablet, and Ultrabook: • Video, voice, and data services • A large number of real-time services • Wi-Fi 4 -> Wi-Fi 5 Diversified terminals: • Refined online service • AR/VR, 4K video, etc. • Wi-Fi 6 -> Wi-Fi 7 Huawei Confidential • Phase 1: In the era of basic mobile office, wireless network was a supplement to wired network. ▫ The application of WaveLAN technology can be considered as the earliest form of enterprise WLAN. The early Wi-Fi technology was mainly used on IoT devices such as wireless radios. However, with the introduction of 802.11a/b/g, the advantages of wireless connectivity become obvious. Enterprises and consumers began to realize the potential of Wi-Fi, and wireless hotspots emerged in coffee shops, airports, and hotels. ▫ This was the first phase of WLAN application, mostly focused on solving the wireless access problem. Its key value is that it broke away from the constraints of wired networks so that devices can move within a certain range, and wired networks were extended by wireless networks. However, in this phase, there were no requirements on WLAN's security, capacity, and roaming performance. An AP was used independently for networking coverage. Such an AP is called a Fat AP. • Phase 2: In the wireless office era, wired and wireless were integrated. ▫ With the widespread adoption of wireless devices, the WLAN developed from a supplement to wired networks into a network as indispensable as wired networks, hence the second phase. ▫ In this phase, as part of the network, the WLAN also needed to provide network access for enterprise guests. ▫ In office scenario, there are many services that require high bandwidth, such as video and voice. Since 2012, 802.11ac standard became mature, which included many improvements on frequency bands, channel bandwidth, modulation and encoding. Compared with previous Wi-Fi standards, 802.11ac standard offers higher throughput, less interference, and more connections. • Phase 3: All wireless office era, with wireless network at the center. ▫ Now, the WLAN has entered the third phase. In office environments, Wi-Fi networks have fully replaced wired networks. Offices now are fully covered by Wi-Fi. No wired network ports are provided by desks anymore. The office environment is more open and intelligent. ▫ In the future, high-bandwidth services, such as cloud desktop, video conference, and 4K video, will be migrated from wired to wireless networks. New technologies such as VR/AR will be directly deployed on wireless networks. These new application scenarios raise the requirements on WLAN design and planning. Challenges in Enterprise Office Scenarios High-density access 9 • In some scenarios (such as conference rooms and high-density office areas), the number of access STAs is large, the concurrency rate is high, and high bandwidth is required. • The WLAN may be congested, causing the bandwidth to decrease sharply. • Other uncertain Wi-Fi interference such as personal Wi-Fi hotspots may exist. Video conferencing • Video conference rooms and office areas have increasing requirements for video conferencing access. • The video conferencing service is characterized by burst traffic, high bandwidth, large concurrency, and latency sensitivity. Therefore, the service has high requirements on the bandwidth, latency, and stability for WLANs. Huawei Confidential • In video conferencing scenarios, 12–16 Mbps bandwidth is required for 1080p videos, and 30–50 Mbps bandwidth is required for 4K videos. The burst traffic of video conferencing is three to five times or even higher than the average traffic. Contents 10 1. Introduction to Enterprise Office Scenarios 2. WLAN Planning Process in Enterprise Office Scenarios 3. WLAN Planning Solutions in Enterprise Office Scenarios Huawei Confidential WLAN Planning Process in Enterprise Office Scenarios ⚫ Requirements collection Collect complete and comprehensive project and requirement information to provide basis Requirements collection for WLAN design. ⚫ Site survey Carry out a site survey and record more detailed information, such as the floor height, Site survey interference sources, and obstacles. ⚫ Device selection ⚫ Device selection Determine the models of devices and antennas based on the collected information. Coverage design Determine the coverage range and field strength requirements, and plan AP deployment Coverage design positions. ⚫ Capacity design 11 Estimate the number of APs based on the number of access STAs and service requirements. Huawei Confidential Capacity design Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Requirements Collection in Enterprise Office Scenarios Requirement Type Drawing information Description Collect complete drawings that contain scale information in CAD, PDF, PNG, or JPG format. Coverage area Determine the VIP coverage areas (such as office areas and meeting rooms), common coverage areas (such as leisure areas, break rooms, and activity areas), and simple coverage areas (such as corridors, stairs, and restrooms), and areas that do not need to be covered (such as storage rooms and equipment rooms). Field strength Determine the signal field strength requirements in coverage areas. Generally, the coverage requirements are as follows: VIP coverage area ≥ –60 dBm, common coverage area ≥ –65 dBm, and simple coverage area ≥ –70 dBm Wall type Determine the material and thickness of indoor walls, such as 240 mm brick walls, 240 mm concrete walls, and 12 mm glass walls. Access STAs Determine the types and number of access STAs in the coverage area. In wireless office scenarios, a single user usually has a mobile phone and a laptop; therefore, the number of access STAs is twice the number of access users. Bandwidth Determine the main service types and bandwidth requirements of access STAs. Switch location Determine the locations of upstream switches and check whether the PoE power supply distance meets the requirements. Power supply mode Determine the power supply mode as well as the available power supply areas and facilities on site. Interference source Determine whether there are interference sources such as microwave ovens, Bluetooth devices, and external Wi-Fi devices. Other 12 Huawei Confidential Check whether there are special requirements in some scenarios, such as the aesthetic requirements for AP deployment in the exhibition hall. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Site Survey in Enterprise Office Scenarios Site Survey Item Building materials and signal attenuation Description Obtain the thickness and attenuation of building materials. If possible, test the attenuation onsite. Floor height Measure the floor height. The common indoor floor height is 3 m to 5 m. If an atrium or large exhibition hall exists, use a rangefinder to measure the floor height and record the result. Interference source Check whether there are interference sources, for example, mobile hotspots, Wi-Fi devices of other vendors, and non-Wi-Fi devices (such as Bluetooth devices and microwave ovens). New obstacles Check whether obstacles at the site are consistent with those on the drawings. If not, mark the inconsistent areas and take photos. For example, if there are new partitions onsite, mark the positions and attenuation values of the partitions on the drawings. Site photos Take photos of the site to record the environment and convey survey information. AP installation mode and position Determine the AP installation modes (ceiling mounting, wall mounting, etc.) and positions. ELV room locations Mark the locations of ELV rooms where switches are to be deployed on the drawings. Power supply cabling Mark PoE cables to be routed on the drawings. It is recommended that the length of a PoE cable be less than or equal to 80 m. Special requirements Record the customer's special requirements, such as requirements on latency, in-roaming packet loss rate, and concurrency rate in special areas. 13 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Device Selection Factors Factor Description MIMO An AP typically supports 4 to 12 spatial streams. An AP with more spatial streams supports higher throughput and larger access capacity. Therefore, select APs with a proper number of spatial streams based on the application scenario and access density. Antenna Indoor APs have three types of antennas: omnidirectional, directional, and smart antennas. Outdoor APs support omnidirectional and directional antennas. APs with smart antennas are recommended for indoor scenarios. Select APs with directional antennas if APs need to be installed at high places. Maximum transmit power (combined power) Limitations over the Wi-Fi transmit power vary depending on the country or region code. When the transmit power gets closer to the specified upper limit, the transmitted signal is stronger and the coverage distance is longer. For details, see the Country Codes and Channels Compliance in the product documentation. Antenna gain A higher antenna gain indicates a stronger signal strength and longer coverage distance. Select antennas with a proper gain based on site requirements. Power supply mode The power supply modes vary according to the deployment scenarios. Currently, PoE is used in most scenarios. In other scenarios, the DC power supply can be used, or both power supply modes can be used together for mutual backup. Ensure that the power consumption of APs matches the power supply capability of PoE switches. Wi-Fi standard The Wi-Fi standard has evolved to the sixth generation, and each generation is compatible with earlier ones. The latest Wi-Fi 6 standard greatly improves the Wi-Fi speed and capacity. Therefore, Wi-Fi 6 APs are recommended. Other features For example: As the Internet of Things (IoT) comes into widespread use, deploying an IoT network independently will cause repeated cabling, separate management and O&M, and high hardware and O&M investment. Therefore, it is recommended that IoT scalability be considered when you select Wi-Fi APs. 14 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common APs in Enterprise Office Scenarios (1/2) AP Model AirEngine 8760-X1-PRO AirEngine 6760-X1/X1E AirEngine 6761-21/21E 4+12/4+4+8/ 4+8+independent scanning 4+8/4+4+4/ 4+6+independent scanning 4+4 Antenna Built-in dual-radio or triple-radio omnidirectional antennas Built-in dual-radio omnidirectional antennas (AirEngine 6760-X1) or external antennas (AirEngine 6760X1E) Built-in dual-radio omnidirectional antennas (AirEngine 6761-21) or external antennas (AirEngine 676121E) Maximum Transmit Power (Combined Power) 26 dBm/29 dBm 26 dBm/29 dBm 26 dBm/26 dBm Appearance MIMO Antenna Gain 4.5 dBi/6 dBi 4.5 dBi/6 dBi 4.5 dBi/5.5 dBi Maximum Power Consumption 50 W (excluding USB) 48 W (excluding USB) 22.6 W (excluding USB) Power Supply Mode PoE (802.3bt) DC: 48 V PoE (802.3bt) DC: 48 V PoE (802.3at) DC: 48 V Other Features Wi-Fi 6, smart antenna, USB, IoT, BLE 5.0 Wi-Fi 6, smart antenna (AirEngine 6760-X1), USB, IoT, and BLE 5.0 Wi-Fi 6, smart antenna, USB, IoT, BLE 5.0 Recommended Scenario VIP areas and important offices Office, conference room, and lecture hall Meeting room, live streaming studio, and lecture hall 15 Huawei Confidential • The table lists only some common AP models. For details about other AP models, see the product documentation. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common APs in Enterprise Office Scenarios (2/2) AP Model AirEngine 5761-21 AirEngine 5761-11 Appearance MIMO 2+4 2+2 Antenna Built-in dual-radio omnidirectional antennas Built-in dual-radio omnidirectional antennas Maximum Transmit Power (Combined Power) 25 dBm/28 dBm 27 dBm/27 dBm Antenna Gain 4 dBi/5 dBi 4 dBi/5 dBi Maximum Power Consumption 17.9 W (excluding USB) 15.3 W (excluding USB) Power Supply Mode PoE (802.3at/af) DC: 12 V PoE (802.3at/af) DC: 12 V Other Features Wi-Fi 6, smart antenna, USB, IoT, BLE 5.0 Wi-Fi 6, smart antenna, USB, IoT, BLE 5.0 Recommended Scenario Office, meeting room, and live streaming studio Small office, corridor, and parking lot 16 Huawei Confidential • The table lists only some common AP models. For details about other AP models, see the product documentation. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common Antennas in Enterprise Office Scenarios Antenna Part Number 27011172 27012545 27013720 Model ANTDG0304A1SR ANTDG0404D4SR ANTDG0808D4NR Antenna Type Omnidirectional Omnidirectional Directional Radios 2.4 GHz and 5 GHz 2.4 GHz and 5 GHz 2.4 GHz and 5 GHz Gain (2.4 GHz/5 GHz) 3 dBi/4 dBi 4 dBi/5 dBi 8 dBi/8 dBi Horizontal Beamwidth (2.4 GHz/5 GHz) 360°/360° 360°/360° 70°/70° Vertical Beamwidth (2.4 GHz/5 GHz) 90°/60° 110°/110° 70°/70° Dimensions (H x W x D) 20 mm x 149 mm x 20 mm 20 mm x 150 mm x 150 mm 40 mm x 220 mm x 220 mm Connector Type 1 x RP-SMA-J (single-polarized) 4 x RP-SMA-J (single-polarized) 4 x Type N female connector (dual-polarized) Remarks Used in scenarios where the floor height is high and the bandwidth requirement is not high Used in elevators or areas with high aesthetic requirements Used in scenarios with high floor heights and common coverage requirements Note: The antenna models above can be used by the outdoor APs mentioned on the previous page. 17 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Coverage Design Rules ⚫ Minimize the number of obstacles that signals pass through. Generally, it is recommended that signals pass through a single-layer wall (120 mm brick wall). In some special scenarios (such as gypsum walls and glass walls), signals can pass through two layers of walls. ⚫ It is not recommended that APs be deployed to transmit signals to penetrate a 240 mm thick brick wall, concrete wall, or metal wall. If the AP penetration coverage solution is used without meeting the specified constraints, weak signals and discontinuous roaming may occur after signals penetrate the wall. In this case, to ensure good coverage and roaming, add APs based on the wall structure during WLAN planning. ⚫ Deploy APs separately in key areas and VIP areas to ensure user experience. ⚫ Deploy APs separately at intersections or corners to ensure signal coverage continuity (≥ –65 dBm) and that neighboring APs can establish neighbor relationship tables for good roaming experience. ⚫ Install APs at least 3 m away from load-bearing pillars. 2 2 1 1 Improper location: Signals penetrate several walls. 18 Huawei Confidential Proper location: Signals penetrate only one wall. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design AP supporting external directional antennas AP with omnidirectional antennas Precautions for Coverage Design in Enterprise Office Scenarios 19 Huawei Confidential ⚫ APs can be mounted on the ceiling (at a height of no more than 6 m) or on walls (at a height of about 3 m). ⚫ Indoor office is a semi-open scenario. Assuming that the edge field strength is –65 dBm, the maximum coverage distance at 2.4 GHz is 35 m, and that at 5 GHz is 15 m. ⚫ When planning APs in a sub-scenario, consider factors such as obstacles and the number of access STAs. For details about the AP deployment spacing, see the WLAN construction standards. ⚫ When an AP is installed on a load-bearing pillar or wall, assume that signals at the rear of the AP are completely blocked. ⚫ Recommended AP model: AirEngine 6760-X1E or AirEngine 6761-21E. ⚫ It is mainly used in high ceiling scenarios such as exhibition halls. It is recommended that APs with external directional antennas be installed on the ceiling at a height of 6 m to 12 m. ⚫ The 70° directional antennas (27013720) are recommended, and APs are deployed at an equal spacing of 18 m to 20 m. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common Services and Average Bandwidth in Enterprise Office Scenarios Service Type Single-Service Baseline Rate (Mbps) Proportion of Services in Office Scenarios Excellent Good Conference Room High-Density Office Area Common Office Area Leisure Area Exhibition Hall Canteen Parking Lot 4K video 50 30 10% 10% 10% 10% 10% 10% 10% Restroom 10% 1080p video 16 12 10% 10% 10% 10% 10% 10% 10% 10% 720p video 8 4 10% 10% 10% 10% 10% 10% 10% 10% E-whiteboard 32 16 10% 20% 0% 0% 0% 0% 0% 0% Email 32 16 10% 10% 10% 0% 0% 0% 0% 0% Web browsing 8 4 30% 20% 20% 30% 30% 30% 10% 30% Gaming 2 1 0% 5% 10% 10% 0% 10% 10% 10% Instant messaging 0.512 0.256 10% 5% 20% 20% 30% 20% 30% 20% VoIP 0.256 0.128 10% 10% 10% 10% 10% 10% 20% 10% 16 19 13 10 10 10 9 10 Average Bandwidth in Each Scenario (Excellent, in Mbps) Note: The data above is based on experience and can be adjusted according to user bandwidth requirements. 20 Huawei Confidential • If the bandwidth requirement in a specific scenario is not specified, evaluate the required bandwidth based on the table above. • The average bandwidth required in different scenarios is the sum of the singleservice baseline rates of different service types multiplied by their proportions. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Number of Concurrent STAs on a Single AP ⚫ The number of concurrent STAs supported by an AP is used to calculate the number of required APs on the premise that the coverage and capacity requirements are met. For example: Two hundred STAs are connected to the network, with the concurrency rate of 30%. That is, services are running on only 60 STAs concurrently. When both APs and STAs comply with Wi-Fi 6, a single STA requires 8 Mbps bandwidth and a dual-band AP (4x4 MIMO) supports concurrent access of 30 STAs (2x2 MIMO). Therefore, two APs are required to meet the capacity requirement. ⚫ The following table lists the maximum number of concurrent STAs supported by a Wi-Fi 6 AP (4x4 MIMO, HE40) at different bandwidths. Maximum Number of Concurrent STAs (All STAs Support Wi-Fi 6 and Dual Spatial Streams) Supported by a Wi-Fi 6 AP (4x4 MIMO, HE40) No. Access Bandwidth Maximum Number of Concurrent STAs (Single-Radio) Maximum Number of Concurrent STAs (Dual-Radio) Maximum Number of Concurrent STAs (Triple-Radio) 1 2 Mbps 56 85 141 2 4 Mbps 39 56 95 3 6 Mbps 27 38 65 4 8 Mbps 21 30 51 5 16 Mbps 12 18 30 Note: The maximum number of concurrent STAs varies according to the AP model. 21 Huawei Confidential • The access bandwidth in the table above is the rate at the application layer, and is an actual rate calculated by subtracting various overheads from the air interface rate. Therefore, the rate at the application layer is lower than the PHY rate. Contents 22 1. Introduction to Enterprise Office Scenarios 2. WLAN Planning Process in Enterprise Office Scenarios 3. WLAN Planning Solutions in Enterprise Office Scenarios Huawei Confidential Common Enterprise Office Sub-scenarios 23 Common office area High-density office area Meeting room Exhibition hall Canteen Leisure area Parking lot Restroom Huawei Confidential WLAN Construction Standards for Office Areas Scenario description ⚫ WLAN construction standards Service types: web browsing, email, video conferencing, instant messaging, etc. ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 20 Mbps ⚫ User density: about 1 per 4–5 m2 ⚫ Capacity KPI: 40 STAs on a single AP, 30% concurrency rate ⚫ Floor height: 3 m to 4 m ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Common office area High Medium High 24 Recommended AP Type Indoor AP with built-in omnidirectional antennas, supporting 2+4 or higher spatial streams Installation Mode Deployment Solution Ceiling mounting Deploy APs in W-shaped mode at an equal spacing of 15 m to 18 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz Huawei Confidential • Experience rate: perceived data rate under a light network load ▫ An experience rate is the target rate that can be achieved in 95% of areas according to SpeedTest on a light-loaded network where the channel utilization is less than 20%. The rate is typically considered as the peak rate. • Service-assured rate: guaranteed rate under a heavy network load ▫ A service-assured rate is the target rate that can be achieved in 90% of time according to SpeedTest in a multi-user concurrency scenario where the network load is less than 80%. The rate is typically considered as the guaranteed rate. • HE20 @ 2.4 GHz indicates that the 2.4 GHz frequency band uses 20 MHz bandwidth, and HE40 @ 5 GHz indicates that the 5 GHz frequency band uses 40 MHz bandwidth. WLAN Deployment Solution for Office Areas Suggestions for WLAN planning and deployment ⚫ Mount indoor APs with omnidirectional antennas on T-rails. It is recommended that APs be deployed in W-shaped mode at an equal spacing of 15 m to 18 m. ⚫ Considering limited available 2.4 GHz channels, disable some 2.4 GHz radios to reduce co-channel interference. ⚫ Due to hardware restrictions, the distance between APs with omnidirectional antennas cannot be less than 6 m. Otherwise, adjacent-channel interference occurs, affecting throughput performance. 15–18 m 15–18 m 25 Huawei Confidential 15–18 m Network Construction Standards for Meeting Rooms Scenario description WLAN construction standards Service types: web browsing, email, video conferencing, instant messaging, etc. ⚫ User distribution: ⚫ ⚫ ⚫ Capacity KPI: 40 STAs on a single AP, 30% concurrency rate Typical meeting room: 20 per 50 m2 ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm Typical conference room: 60 per 200 m2 ⚫ Floor height: 3–5 m ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 20 Mbps ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for 802.1X access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Meeting room 26 Aesthetics High Huawei Confidential Capacity High Coverage High Recommended AP Type Indoor AP with built-in omnidirectional antennas, supporting 2+4 or higher spatial streams Installation Mode Deployment Solution Ceiling mounting Deploy APs evenly in a room and far away from the door. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz WLAN Deployment Solution for Meeting Rooms Suggestions for WLAN planning and deployment ⚫ Mount APs with omnidirectional antennas on the ceiling to cover the entire room. ⚫ If the area of a room is less than 60 square meters and partition walls between rooms are made of gypsum boards or other materials that signals can easily penetrate, deploy one AP for two rooms, as shown in solution A. If the area of a single room is 60–120 square meters, deploy one AP in each room, as shown in solution B. If the area of a single room is 120–240 square meters, deploy two APs in each room, as shown in solution C. Install APs in a room evenly and far away from the door. Keep a specified distance between an AP in the corridor and the exterior walls of rooms. Depending on the wall material, at least a distance of 3 m is required for solid walls (brick or concrete) and 6 m is required for non-solid walls (gypsum or glass walls). Single room < 60 m2 Single room: 60–120 m2 Single room: 120–240 m2 Gypsum board Single room < 60 m2 Corridor Spacing Solution A: area < 60 m2 27 Huawei Confidential Corridor Spacing Solution B: area of 60–120 m2 Corridor Spacing Solution C: 120–240 m2 WLAN Construction Standards for Exhibition Halls Scenario description WLAN construction standards ⚫ Service types: web browsing, HD video, instant messaging, etc. ⚫ User density: about 1 per 9–10 m2 ⚫ Floor height: Common exhibition hall: 3–6 m ⚫ ⚫ Capacity KPI: 30 STAs on a single AP, 40% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ Large exhibition hall: > 6 m Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 10 Mbps ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Common exhibition hall (floor height < 6 m) High Medium High Large exhibition hall (floor height > 6 m) High Medium High 28 Huawei Confidential Recommended AP Type Installation Mode Deployment Solution Indoor AP with built-in omnidirectional antennas Ceiling mounting Deploy APs in W-shaped mode at an equal distance of 20–25 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz Indoor AP with external directional antennas connected Ceiling mounting Deploy APs in W-shaped mode at an equal distance of 20–25 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz WLAN Deployment Solution for Exhibition Halls Suggestions for WLAN planning and deployment ⚫ ⚫ ⚫ At a floor height of less than 6 m, deploy indoor APs with built-in omnidirectional antennas in W-shaped mode at an equal spacing of 20–25 m. At a floor height of higher than 6 m, deploy indoor APs with external directional antennas (70 °) connected in W-shaped mode at equal spacing of 20–25 m. Considering limited available 2.4 GHz channels, disable some 2.4 GHz radios to reduce co-channel interference. 20–25 m 20–25 m 20–25 m 20–25 m Solution A: Use APs with omnidirectional antennas at a floor height of less than 6 m 29 Huawei Confidential 20–25 m 20–25 m Solution B: Use APs with directional antennas at a floor height of higher than 6 m WLAN Construction Standards for Leisure Areas Scenario description WLAN construction standards Service types: web browsing, HD video, gaming, email, instant messaging, etc. ⚫ ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 10 Mbps ⚫ User density: about 1 per 4–9 m2 ⚫ Capacity KPI: 40 STAs on a single AP, 40% concurrency rate ⚫ Floor height: ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm Indoor leisure area: 3–5 m ⚫ Outdoor leisure area: N/A (because it is typically an open-air scenario) ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode Deployment Solution Indoor leisure area High Medium High Indoor AP with built-in omnidirectional antennas Ceiling mounting Deploy APs with a coverage radius of 18 m to 20 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz Outdoor leisure area High Low High Outdoor AP with built-in directional antennas Wall mounting or pole mounting Deploy APs on one side of the leisure area to cover the seat area. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz 30 Huawei Confidential WLAN Deployment Solution for Leisure Areas Suggestions for WLAN planning and deployment ⚫ For indoor leisure areas, deploy indoor APs with omnidirectional antennas on T-rails with a coverage radius of 18 m to 20 m. ⚫ For outdoor leisure areas, deploy outdoor APs with built-in directional antennas on one side of an area to provide coverage to the seat area. The coverage range is 15 m to 20 m on both sides of an AP. Seat area 18–20 m 15–20 m Indoor leisure area 31 Huawei Confidential Outdoor leisure area Coffee making table WLAN Construction Standards for Enterprise Canteens Scenario description WLAN construction standards ⚫ Service types: web browsing, HD video, instant messaging, etc. ⚫ User density: about 1 per 3–5 m2 ⚫ Floor height: 3–5 m ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 10 Mbps ⚫ Capacity KPI: 60 STAs on a single AP, 30% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Enterprise canteen Low High Medium Indoor AP with built-in omnidirectional antennas, supporting 2+4 or higher spatial streams 32 Huawei Confidential Installation Mode Deployment Solution Ceiling mounting Deploy APs in W-shaped mode at an equal spacing of 15 m to 18 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz WLAN Deployment Solution for Enterprise Canteens Suggestions for WLAN planning and deployment ⚫ Mount APs with omnidirectional antennas on the ceiling in W-shaped mode at equal spacing of 15–18 m. ⚫ Considering limited available 2.4 GHz channels, disable some 2.4 GHz radios to reduce co-channel interference. 15–18 m 15–18 m 33 Huawei Confidential 15–18 m WLAN Construction Standards for Parking Lots Scenario description WLAN construction standards ⚫ Service types: web browsing, email, video, instant messaging, etc. ⚫ User density: about 1 per 15–20 m2 ⚫ Floor height: 3–5 m ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 10 Mbps ⚫ Capacity KPI: 30 STAs on a single AP, 30% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Parking lot 34 Aesthetics Low Huawei Confidential Capacity Low Coverage Medium Recommended AP Type Indoor AP with built-in omnidirectional antennas, supporting 2+2 or higher spatial streams Installation Mode Deployment Solution Ceiling mounting Deploy APs in W-shaped mode at an equal distance of 35–40 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz WLAN Deployment Solution for Parking Lots Suggestions for WLAN planning and deployment ⚫ Install APs with omnidirectional antennas on the ceiling with equal spacing of 35 m to 40 m in W-shaped mode. ⚫ Deploy APs above lanes and independent APs at entrances and exits to ensure continuous signal coverage and good roaming experience. 35–40 m Parking area Lane 35 Huawei Confidential 35–40 m 35–40 m Lane WLAN Construction Standards for Restrooms Scenario description ⚫ Service type: web browsing, video, etc. ⚫ User density: about 1 per 3 m2 ⚫ Floor height: 3 m to 4 m WLAN construction standards ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 20 Mbps ⚫ Capacity KPI: 10 STAs on a single AP, 80% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Restroom Low Low Medium 36 Huawei Confidential Recommended AP Type Indoor AP with built-in omnidirectional antennas, supporting 2+2 or higher spatial streams Installation Mode Deployment Solution Ceiling mounting Ceiling-mount APs in the middle of the restroom. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz WLAN Deployment Solution for Restrooms Suggestions for WLAN planning and deployment The walls between adjacent restrooms are thick. Therefore, it is not recommended that signals penetrate such walls. As such, deploy one AP in each restroom. 37 Huawei Confidential Basin table In scenarios with aesthetic requirements, take corresponding aesthetic measures for AP installation. ⚫ Basin table Mount indoor APs with omnidirectional antennas on the ceiling. ⚫ Basin table ⚫ Quiz 1. (Single-answer question) An enterprise has about 280 employees. Daily office work requires 8 Mbps bandwidth, and the concurrent rate is 50%. The enterprise plans to provide wireless coverage for office areas using dual-band APs. Assuming that a single AP can connect to 30 STAs, how many APs are required at least to meet wireless office requirements? ( A. 8 B. 6 C. 5 D. 4 38 1. C Huawei Confidential ) Summary ⚫ This course describes the characteristics of enterprise office sub-scenarios, including conference rooms, exhibition halls, and open offices. WLAN construction standards and planning rules vary according to sub-scenarios and relevant WLAN planning solutions are different as well. This course also provides suggestions on WLAN planning and deployment for common enterprise office sub-scenarios, facilitating WLAN solution design in WLAN projects relating to enterprise office scenarios. ⚫ On completion of this course, you will have a basic understanding of the WLAN planning process and master the WLAN design methods for each sub-scenario. 39 Huawei Confidential Recommendations ⚫ 40 Huawei official websites: Enterprise service: https://e.huawei.com/en/ Technical support: https://support.huawei.com/enterprise/en/index.html Online learning: https://www.huawei.com/en/learning Huawei Confidential Acronyms and Abbreviations Acronym/Abbreviation 41 Full Name BYOD Bring Your Own Device IoT Internet of Things KPI Key Performance Indicator VoIP Voice over IP VR/AR Virtual Reality/Augmented Reality Huawei Confidential Thank you. 把数字世界带入每个人、每个家庭、 每个组织,构建万物互联的智能世界。 Bring digital to every person, home, and organization for a fully connected, intelligent world. Copyright© 2022 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice. WLAN Planning for Education Scenarios Foreword ⚫ Evolving information technologies have made life easier and transformed the way education is delivered — boring textbooks replaced by multimedia teaching aids, and heavy schoolbags replaced by thin, electronic ones. All these changes require the support of a mature and stable network. ⚫ Typical education scenarios include classrooms, auditoriums, libraries, and labs, where students are densely distributed. Such a scenario is usually characterized by high user density, a large number of concurrent users, a high volume of burst traffic, and sensitivity to network quality. ⚫ This course describes WLAN service characteristics of education scenarios, as well as methods, rules, and precautions for WLAN planning in these scenarios. 2 Huawei Confidential Objectives ⚫ 3 On completion of this course, you will be able to: Describe common service types and challenges in education scenarios. Describe WLAN planning methods in education scenarios. Describe WLAN deployment solutions in education scenarios. Huawei Confidential Contents 4 1. Introduction to Education Scenarios 2. WLAN Planning Process in Education Scenarios 3. WLAN Planning Solutions in Education Scenarios Huawei Confidential Overview of Education Scenarios • Space: large area, diversified building structures, and many sub-scenarios • Blocking: many types of obstacles, such as 240 mm brick walls and 240 mm concrete walls, causing signal attenuation • Interference: severe interference, such as that caused by students' hotspots and school electronic devices • Capacity: high concurrency and certain WLAN quality requirements Classroom 5 Huawei Confidential Playground Service Types in Education Scenarios Learning in classroom After-class entertainment Enterprise IoT service The services include office, The services include video, The services include asset online learning, instant gaming, and social networking. management and energy messaging, email, file transfer, These services are mainly efficiency control (air online live broadcast, desktop carried on mobile terminals conditioners and lighting sharing, and desktop cloud. such as laptops, mobile phones, system). These services are mainly and tablets. carried on office laptops, eschoolbags, and tablets. Requirements on WLANs differ for these services. 6 Huawei Confidential • Note: This course does not assume IoT services on a WLAN. Typical Services in Education Scenarios — E-schoolbag Scenario description ⚫ With the rapid development of the Internet, online teaching resources are increasingly abundant. More teaching activities are carried out based on Internet resources, and e-schoolbags are gradually put into use. ⚫ E-schoolbags are mobile digital classrooms: Students can use electronic terminals carrying learning resources in pre-study, class, homework, tutoring, and evaluation phases. Service description 7 ⚫ An e-schoolbag is a complete teaching application system. The core elements are mobile terminals, teaching contents, and service platforms (servers that provide education resources). ⚫ Students' terminals connect to the WLAN and request resources. Teachers' terminals connect to the WLAN or the wired network to deliver instructions. IP network Router Switch B Resource server WAC Switch A E-classroom AP Management VLAN 100 Service VLAN: VLAN 101 PC E-whiteboard Teacher terminal Student terminal Huawei Confidential • Networking description: ▫ A resource server stores resources such as courseware and videos for eschoolbags and can be deployed on the public network (more common) or school network. ▫ Generally, WACs are centrally deployed in the core equipment room of a district/county education bureau. APs are deployed in schools and connect to the WACs through private lines. ▫ Switch A supplies PoE power to APs, and Switch B functions as the DHCP server and gateway for wireless users. ▫ Generally, teachers use laptops or desktop computers and access the network through wired ports (recommended). If teachers use STAs such as tablets, it is recommended that an independent SSID be planned for teachers' STAs to guarantee bandwidth. Characteristics and Challenges of Education Scenarios 8 • Open or semi-open • Aesthetic requirements • 80–300 people in a single room • Concealed antennas • Large number of concurrent users • High concurrency, large number of access users • High ceiling: many restrictions and difficult installation • High bandwidth requirements • • Densely distributed walls • Severe signal attenuation High dustproof and waterproof requirements in outdoor environments • High concurrency during peak hours • Large coverage area • High bandwidth requirements • Trees and buildings affecting signals • Inconvenient and expensive fiber deployment Huawei Confidential Classroom Dormitory Auditorium Playground Contents 9 1. Introduction to Education Scenarios 2. WLAN Planning Process in Education Scenarios 3. WLAN Planning Solutions in Education Scenarios Huawei Confidential WLAN Planning Process in Education Scenarios ⚫ Requirements collection Collect complete and comprehensive project and requirement information to provide basis Requirements collection for design. ⚫ Site survey Carry out a site survey and record more detailed information, such as the floor height, Site survey interference sources, and obstacles. ⚫ Device selection ⚫ Device selection Determine the models of devices and antennas based on the collected information. Coverage design Determine the coverage range and field strength requirements, and plan AP deployment Coverage design positions. ⚫ Capacity design 10 Estimate the number of APs based on the number of access STAs and service requirements. Huawei Confidential Capacity design Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Requirements Collection in Education Scenarios Requirement Type Drawing information Description Collect complete drawings that contain scale information in CAD, PDF, PNG, or JPG format. Coverage area Determine the VIP coverage areas (such as classrooms, conference rooms, and offices), common coverage areas (such as canteens and student dormitories), and simple coverage areas (such as corridors, stairs, and bathrooms). Field strength Determine the signal field strength requirements in coverage areas. Generally, the coverage requirements are as follows: VIP coverage area ≥ –60 dBm, common coverage area ≥ –65 dBm, and simple coverage area ≥ –70 dBm Number of access STAs Determine the total number of access STAs in a coverage area. Generally, this number can be determined based on the number of seats. Assuming that each person uses one mobile phone and one laptop, the number of access STAs is twice the number of seats. Bandwidth Determine the main types of network services and per-user bandwidth requirement. Wall type Determine the material and thickness of indoor walls, such as 240 mm brick walls and 240 mm concrete walls. Power supply mode Determine the power supply mode and confirm the available power supply areas and facilities on site. Switch location Determine the locations of switches upstream to the WLAN and confirm whether the PoE power supply distance meets the requirements. Interference source 11 Huawei Confidential Determine whether there are interference sources such as lab instruments, Bluetooth devices, and external WiFi devices. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Site Survey in Education Scenarios Site Survey Item Building materials and signal attenuation Floor height Description Obtain the thickness and attenuation of building materials. If possible, test the attenuation onsite. Measure the floor height. The common indoor floor height is 3 m to 5 m. If there are atriums, halls, or lecture halls, use a rangefinder to measure the floor height and record the result. Interference source Check whether there is interference caused by, for example, mobile hotspots, third-party Wi-Fi devices, and non-Wi-Fi devices (such as Bluetooth devices and microwave ovens). New obstacles Check whether obstacles at the site are consistent with those on the drawings. If not, mark the inconsistent areas and take photos. For example, if there are new partitions onsite, mark the positions and attenuation values of the partitions on the drawings. Site photos Take photos of the site to record the environment and convey survey information. AP installation mode and position Determine the AP installation modes (ceiling mounting, wall mounting, etc.) and locations. ELV room locations On the drawings, mark the locations of extra-low voltage (ELV) rooms where switches are to be deployed. Power supply cabling Mark PoE power supply cable routes on the drawings. It is recommended that the length of a PoE cable be less than or equal to 80 m. Special requirements Record the customer's special requirements, such as requirements on delay, in-roaming packet loss rate, and concurrency rate in special areas. 12 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Device Selection Factors Factor Description MIMO An AP typically supports 4 to 12 spatial streams. An AP with more spatial streams supports higher throughput and larger access capacity. Therefore, select APs with a proper number of spatial streams based on the application scenario and access density. Antenna Indoor APs have three types of antennas: omnidirectional, directional, and smart antennas. Outdoor APs support omnidirectional and directional antennas. APs with smart antennas are recommended for indoor scenarios. Select APs with directional antennas if APs need to be installed at high places. Maximum transmit power (combined power) Limitations over the Wi-Fi transmit power vary depending on the country or region code. When the transmit power gets closer to the specified upper limit, the transmitted signal is stronger and the coverage distance is longer. For details, see the Country Codes and Channels Compliance in the product documentation. Antenna gain A higher antenna gain indicates a stronger signal strength and longer coverage distance. Select antennas with a proper gain based on site requirements. Power supply mode The power supply mode varies with the deployment scenario. Currently, PoE is used in most scenarios. In other scenarios, a power supply can be used, or both PoE and a power supply can be used for mutual backup. Ensure that the power consumption of APs matches the power supply capability of PoE switches. Wi-Fi standard The Wi-Fi standard has evolved to the sixth generation, and each generation is compatible with earlier ones. The latest Wi-Fi 6 standard greatly improves the Wi-Fi speed and capacity. Therefore, Wi-Fi 6 APs are recommended. Other features For example: As the Internet of Things (IoT) comes into widespread use, deploying an IoT network independently will cause repeated cabling, separate management and O&M, and high hardware and O&M investment. Therefore, it is recommended that IoT scalability be considered when you select Wi-Fi APs. 13 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Indoor APs Commonly Used in Education Scenarios (1/2) AP Model AirEngine 8760-X1-PRO AirEngine 6760-X1E AirEngine 6761-21E MIMO 4+12/4+4+8/ 4+8+independent scanning 4+8/4+4+4/ 4+6+independent scanning 4+4 Antenna Built-in dual-radio or triple-radio omnidirectional antennas External antennas External antennas Maximum Transmit Power (Combined Power) 26 dBm/29 dBm 26 dBm/29 dBm 26 dBm/26 dBm Antenna Gain 4.5 dBi/6 dBi N/A N/A Maximum Power Consumption 55 W (excluding USB) 39.9 W (excluding USB) 22.6 W (excluding USB) Power Supply Mode PoE (802.3bt) PoE (802.3bt) PoE (802.3at/af) Other Features Wi-Fi 6, smart antenna, USB, IoT, BLE 5.0 Wi-Fi 6, USB, IoT, BLE 5.0 Wi-Fi 6, USB, IoT, BLE 5.0 VIP areas and important offices Scenarios with uncommon floor heights, such as auditoriums, lecture halls, and stadiums Scenarios with uncommon floor heights, such as auditoriums, lecture halls, and stadiums Appearance Recommended Scenario 14 Huawei Confidential • This page lists some common indoor AP models. For details about other models, see the product documentation. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Indoor APs Commonly Used in Education Scenarios (2/2) AP Model AirEngine 6761-21T AirEngine 5761-11 AirEngine 5761-11W Appearance MIMO 2+2+4 2+2 2+2 Antenna Built-in triple-radio omnidirectional antennas Built-in dual-radio omnidirectional antennas Built-in dual-radio omnidirectional antennas Maximum Transmit Power (Combined Power) 25 dBm/23 dBm /26 dBm 27 dBm/27 dBm 23 dBm/23 dBm Antenna Gain 4 dBi/5 dBi 4 dBi/5 dBi 2.5 dBi/3 dBi Maximum Power Consumption 21.2 W (excluding USB) 15.3 W (excluding USB) 12.7 W (excluding USB) Power Supply Mode PoE (802.3at) PoE (802.3at/af) PoE (802.3af) Other Features Wi-Fi 6, smart antenna, USB, IoT, BLE 5.0 Wi-Fi 6, smart antenna, USB, IoT, BLE 5.0 Wi-Fi 6, smart antenna, USB, BLE 5.0 Recommended Scenario High-bandwidth and high-concurrency scenarios such as classrooms and large conference rooms Common coverage scenarios, such as labs, offices, conference rooms, corridors, and parking lots Dormitories and small offices 15 Huawei Confidential • This page lists some common indoor AP models. For details about other models, see the product documentation. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Outdoor APs Commonly Used in Education Scenarios AP Model AirEngine 5761R-11 AirEngine 5761R-11E AirEngine 6760R-51 AirEngine 6760R-51E MIMO 2+2 Antenna Built-in directional antennas 2.4 GHz: 65°_40° 5 GHz: 65°_20° 2+2 4+4 4+4 External antennas Built-in directional antennas 2.4 GHz: 60°_40° 5 GHz: 60°_20° External antennas Maximum Transmit Power (Combined Power) Antenna Gain 28 dBm/27 dBm 28 dBm/27 dBm 30 dBm/30 dBm 30 dBm/30 dBm 10 dBi/11 dBi N/A 10 dBi/11 dBi Maximum Power Consumption N/A 17.7 W 19.6 W 35.3 W 35.3 W PoE (802.3at/bt) Appearance Power Supply Mode PoE (802.3at/af) PoE (802.3at/af) PoE (802.3at/bt) Other Features Wi-Fi 6, smart antenna, BLE 5.0 Wi-Fi 6, flexible radio switching, BLE 5.0 Wi-Fi 6, smart antenna, BLE 5.0 Wi-Fi 6, BLE 5.0 Recommended Scenario Roads, squares, play fields, playgrounds, and parking lots Roads, squares, play fields, parking lots, and playground stands Roads, squares, play fields, playgrounds, and parking lots Roads, squares, play fields, parking lots, and playground stands 16 Huawei Confidential • This page lists some common outdoor AP models. For details about other models, see the product documentation. • 2.4 GHz: 65°_40° indicates that the 2.4 GHz horizontal beamwidth and vertical beamwidth are 65° and 40°, respectively. The rest can be deduced by analogy. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common Antennas in Education Scenarios Antenna Part Number 27013720 27012565 Model ANTDG0808D4NR ANTDG1211D4NR Antenna Type Directional Directional Radios 2.4 GHz and 5 GHz 2.4 GHz and 5 GHz Gain (2.4 GHz/5 GHz) 8 dBi/8 dBi 12 dBi/11 dBi Horizontal Beamwidth (2.4 GHz/5 GHz) 70°/70° 35°/26° Vertical Beamwidth (2.4 GHz/5 GHz) 70°/70° 35°/26° Dimensions (H x W x D) 40 mm x 220 mm x 220 mm 40 mm x 450 mm x 420 mm Connector Type 4 x Type N female connector (dual-polarized) 4 x Type N female connector (dual-polarized) Remarks Used in uncommon floor height scenarios requiring wireless coverage Used in uncommon floor height scenarios with high-density access requirements Note: The antenna models above can be used by the outdoor APs mentioned on the previous page. 17 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Coverage Design Rules ⚫ Minimize the number of obstacles that signals pass through. Generally, it is recommended that signals pass through a single-layer wall (120 mm brick wall). In some special scenarios (such as gypsum walls and glass walls), signals can pass through two layers of walls. ⚫ It is not recommended that signals penetrate a 240 mm thick brick wall, concrete wall, or metal wall. If the AP penetration coverage solution is used without meeting the specified constraints, weak signals and discontinuous roaming may occur after signals penetrate the wall. In this case, to ensure good coverage and roaming, add APs based on the wall structure during network planning. ⚫ Deploy APs separately in key areas and VIP areas to ensure user experience. ⚫ Deploy APs separately at intersections or corners to ensure signal coverage continuity (≥ –65 dBm) and that neighboring APs can establish neighbor relationship tables for good roaming experience. ⚫ Install APs at least 3 m away from load-bearing columns. 2 2 1 1 Improper location: Signals penetrate several walls. 18 Huawei Confidential Proper location: Signals penetrate only one wall. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design AP supporting external directional antennas AP with omnidirectional antennas Precautions for Coverage Design in Education Scenarios 19 Huawei Confidential ⚫ APs can be mounted on the ceiling (at a height of no more than 6 m) or on walls (at a height of about 3 m). ⚫ Indoor office is a semi-open scenario. Assuming that the edge field strength is –65 dBm, the maximum coverage distance at 2.4 GHz is 35 m, and that at 5 GHz is 15 m. ⚫ Before deploying APs in a sub-scenario, consider factors such as obstacles and the number of access STAs. For details about the AP deployment spacing, see the WLAN construction standards. ⚫ When an AP is installed on a load-bearing column or wall, assume that signals at the rear of the AP are completely blocked. ⚫ Recommended AP model: AirEngine 6760-X1E or AirEngine 6761-21E. ⚫ It is mainly used in high ceiling scenarios such as auditoriums and lecture halls. It is recommended that APs with external directional antennas be installed on the ceiling at a height of 6 m to 12 m. ⚫ ⚫ Common coverage: 70° directional antennas are recommended. APs are installed on the ceiling in W-shaped mode at an equal spacing of 15 m to 20 m. High-density coverage: 35° directional antennas are recommended. APs are installed on the ceiling or walls at an equal spacing of about 12 m. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common Services and Average Bandwidth in Education Scenarios Service Type Single-Service Baseline Rate (Mbps) Proportion of Services in Education Scenarios Excellent Good 4K video 50 30 10% 10% 10% 10% 10% 10% 10% 10% 10% 1080p video 16 12 10% 10% 10% 10% 10% 10% 10% 20% 10% 720p video 8 4 10% 10% 10% 20% 20% 20% 20% 20% 20% E-whiteboard 32 16 10% 0% 10% 0% 0% 0% 0% 0% 0% Email 32 16 0% 10% 0% 0% 0% 0% 0% 0% 0% Web browsing 8 4 20% 20% 20% 20% 20% 20% 20% 10% 20% Gaming 2 1 10% 0% 10% 10% 10% 10% 10% 20% 10% Instant messaging 0.512 0.256 20% 20% 20% 20% 20% 20% 20% 10% 20% VoIP 0.256 0.128 10% 20% 10% 10% 10% 10% 10% 10% 10% 13 12 13 10 10 10 10 11 10 Average Bandwidth in Each Scenario (Excellent, in Mbps) Classroom Office Lab Library Auditorium Stadium Canteen Dormitory Playground Note: The data above is based on experience and can be adjusted according to user bandwidth requirements. 20 Huawei Confidential • If the bandwidth requirement in a specific scenario is not specified, evaluate the required bandwidth based on the table above. • The average bandwidth required in different scenarios is the sum of the singleservice baseline rates of different service types multiplied by their proportions. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Number of Concurrent STAs on a Single AP ⚫ The number of concurrent STAs supported by an AP is used to calculate the number of required APs on the premise that the coverage and capacity requirements are met. For example: 200 STAs are connected to the network, with the concurrency rate of 30%. That is, only 60 STAs run services concurrently. When both APs and STAs comply with Wi-Fi 6, a single STA requires 8 Mbps bandwidth and a dual-band AP (4x4 MIMO) supports concurrent access of 30 STAs (2x2 MIMO). Therefore, two APs are required to meet the capacity requirement. ⚫ The following table lists the maximum number of concurrent STAs supported by a Wi-Fi 6 AP (4x4 MIMO, HE40) at different bandwidths. Maximum Number of Concurrent STAs Supported by a Wi-Fi 6 AP in 4x4 MIMO HE40 Mode (All STAs Support Wi-Fi 6 and Dual Spatial Streams) No. Access Bandwidth Maximum Number of Concurrent STAs (Single-Radio) Maximum Number of Concurrent STAs (Dual-Radio) Maximum Number of Concurrent STAs (Triple-Radio) 1 2 Mbps 56 85 141 2 4 Mbps 39 56 95 3 6 Mbps 27 38 65 4 8 Mbps 21 30 51 5 16 Mbps 12 18 30 Note: The maximum number of concurrent STAs varies according to the AP model. 21 Huawei Confidential • The access bandwidth in the table above is the rate at the application layer, and is an actual rate calculated by subtracting various overheads from the air interface rate. Therefore, the rate at the application layer is lower than the PHY rate. Contents 22 1. Introduction to Education Scenarios 2. WLAN Planning Process in Education Scenarios 3. WLAN Planning Solutions in Education Scenarios Huawei Confidential Common Education Sub-scenarios 23 Classroom Lab Library Auditorium Stadium Canteen Dormitory Playground Huawei Confidential WLAN Construction Standards for Classrooms Scenario description WLAN construction standards Service type: web browsing, HD video, e-whiteboard, instant messaging, etc. ⚫ ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 16 Mbps ⚫ User density: about 2 per m2 during class ⚫ Capacity KPI: 100 STAs on a single AP, 30% concurrency rate ⚫ Floor height: 3 m to 5 m ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Common classroom Medium High High Indoor triple-radio AP with built-in omnidirectional antennas Ceiling mounting Deploy at least one AP in each classroom, with each AP covering 100 users. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz Lecture hall Medium High High Indoor triple-radio AP with built-in omnidirectional antennas Ceiling mounting Deploy APs at a spacing of 10 m to 12 m, with each AP covering 100 users. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz 24 Huawei Confidential Installation Mode Deployment Solution WLAN Deployment Solution for Classrooms Suggestions for WLAN planning and deployment ⚫ Common classroom: Install APs with omnidirectional antennas on the ceiling, with one AP covering 100 users. ⚫ Lecture hall: Install APs with omnidirectional antennas on the ceiling at a spacing of 10 m to 12 m, with one AP covering 100 users. 10–12 m 6–10 m Common classroom 25 Huawei Confidential 10–12 m Lecture hall WLAN Construction Standards for Offices Scenario description WLAN construction standards Service type: web browsing, HD video, e-whiteboard, instant messaging, etc. ⚫ ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 16 Mbps ⚫ User density: about 2 per m2 in peak hours ⚫ Capacity KPI: 30 STAs on a single AP, 40% concurrency rate ⚫ Floor height: 3 m to 5 m ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode Deployment Solution Open office Medium High High Indoor AP with built-in omnidirectional antennas, supporting 2+4 or higher spatial streams Ceiling mounting Deploy APs evenly in an office and far away from the door. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz Independent office High High High Indoor AP with built-in omnidirectional antennas, supporting 2+2 or higher spatial streams Ceiling mounting Deploy one AP in an office. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz 26 Huawei Confidential WLAN Deployment Solution for Offices Suggestions for WLAN planning and deployment ⚫ ⚫ Open office: Deploy one AP in an office with an area < 120 m 2. Deploy two APs in an office with an area of 120–240 m2. Independent office: Deploy one AP in an office with an area < 30 m 2. Open office area Single room: 30–120 m2 27 Huawei Confidential Single room: 120–240 m2 Independent office area Single room < 30 m2 Single room < 30 m2 WLAN Construction Standards for Libraries Scenario description WLAN construction standards Service type: web browsing, HD video, e-whiteboard, instant messaging, etc. ⚫ ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 8 Mbps ⚫ User density: about 1 per 2 m2 in peak hours ⚫ Capacity KPI: 60 STAs on a single AP, 30% concurrency rate ⚫ Floor height: 3 m to 5 m ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Bookshelf area Medium High High Indoor AP with built-in omnidirectional antennas, supporting 2+4 or higher spatial streams Self-study area Medium High High Indoor AP with built-in omnidirectional antennas, supporting 2+4 or higher spatial streams 28 Huawei Confidential Installation Mode Deployment Solution Ceiling mounting Deploy APs in W-shaped mode at a spacing of about 20 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz Ceiling mounting Deploy APs in W-shaped mode at a spacing of 15 m to 20 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz WLAN Deployment Solution for Libraries Suggestions for WLAN planning and deployment ⚫ Bookshelf area: Install APs on the ceiling in W-shaped mode at a spacing of about 20 m. If there are seats around, install APs close to the seats. ⚫ Self-study area: Install APs on the ceiling in W-shaped mode at a spacing of 15 m to 20 m, with each AP covering 100 users. ⚫ Install APs at least 3 m away from load-bearing columns. 20 m 15–20 m 15–20 m 15–20 m 20 m Bookshelf area 29 Huawei Confidential Self-study area WLAN Construction Standards for Auditoriums Scenario description WLAN construction standards Service type: web browsing, HD video, e-whiteboard, instant messaging, etc. ⚫ ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 8 Mbps ⚫ User density: about 2 per m2 in peak hours ⚫ Capacity KPI: 50 STAs on a single AP, 40% concurrency rate ⚫ Floor height: 6 m to 10 m ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Floor height <6m High High High Indoor AP with built-in omnidirectional antennas, supporting 4+4 or higher spatial streams Floor height >6m High High High Indoor AP with external directional antennas, supporting 4+4 or higher spatial streams 30 Huawei Confidential Installation Mode Deployment Solution Ceiling mounting Deploy APs in W-shaped mode at an equal spacing of 12 m to 15 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz Ceiling or wall mounting Deploy APs in W-shaped mode at a spacing of 12 m to 15 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz WLAN Deployment Solution for Auditoriums Suggestions for WLAN planning and deployment If the floor height is smaller than 6 m, use solution A: Install indoor APs with built-in omnidirectional antennas on the ceiling in W-shaped mode at an equal spacing of 12 m to 15 m. ⚫ If the floor height is greater than 6 m, use solution A or B. In solution B, install indoor APs with 35° external directional antennas on the ceiling or walls at a spacing of 12 m to 15 m. ⚫ Considering limited available 2.4 GHz channels, disable some 2.4 GHz radios to reduce co-channel interference when a large number of APs are deployed. ⚫ 12–15 m 12–15 m 12–15 m 12–15 m 12–15 m 12–15 m 12–15 m Solution A: ceiling mounting 31 Huawei Confidential Solution B: wall mounting WLAN Construction Standards for Stadiums Scenario description WLAN construction standards ⚫ Service type: web browsing, HD video, instant messaging, etc. ⚫ User density: about 2 per m2 in peak hours ⚫ Floor height: 10 m to 12 m ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 8 Mbps ⚫ Capacity KPI: 100 STAs on a single AP, 30% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode Deployment Solution Ceiling or wall mounting Deploy APs at an equal spacing of 20 m to 25 m (optional: W-shaped mode). Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz Ceiling or wall mounting Deploy APs at an equal spacing of about 15 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz Stadium field Medium Medium Medium Indoor AP with external directional antennas Indoor AP with built-in omnidirectional antennas Stand area Medium Medium High Indoor AP with external directional antennas Indoor AP with built-in omnidirectional antennas 32 Huawei Confidential WLAN Deployment Solution for Stadiums (1/2): Stadium Field Suggestions for WLAN planning and deployment ⚫ ⚫ ⚫ Solution A uses the ceiling mounting mode: Install indoor APs with 70° external directional antennas at a spacing of 20 m to 25 m. Solution B uses the wall mounting mode: Install indoor APs with built-in omnidirectional antennas at a spacing of 20 m to 25 m and a height of 3 m to 5 m. Considering limited available 2.4 GHz channels, disable some 2.4 GHz radios to reduce co-channel interference when a large number of APs are deployed. 20–25 m 20–25 m 20–25 m 30–50 m 20–25 m 20–25 m Solution A: ceiling mounting 33 Huawei Confidential 20–25 m 20–25 m Solution B: wall mounting WLAN Deployment Solution for Stadiums (2/2): Stand Area Suggestions for WLAN planning and deployment ⚫ ⚫ If there are fewer than 10 rows of seats, use solution A: Install indoor APs with built-in omnidirectional antennas on walls at an equal spacing of about 15 m. If there are more than 10 rows of seats, use solution A or B. In solution B, install indoor APs with 35 ° external directional antennas on the ceiling or walls at a spacing of 10 m to 12 m. 15 m 15 m 10–12 m 10–12 m 15 m 15 m 10–12 m 10–12 m Solution A: wall mounting (using APs with omnidirectional antennas) 34 Huawei Confidential Solution B: ceiling mounting (using APs with directional antennas) WLAN Construction Standards for Playgrounds Scenario description ⚫ ⚫ WLAN construction standards Service type: web browsing, HD video, instant messaging, etc. ⚫ Rate KPI: experience rate ≥ 50 Mbps, service-assured rate ≥ 4 Mbps User density: about 2 per m2 in peak hours ⚫ Capacity KPI: 100 STAs on a single AP, 30% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode Deployment Solution Playground stand Medium High High Outdoor AP with external directional antennas Pole mounting Deploy APs at an equal spacing of 12 m to 15 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz Playground field Low Medium Medium Outdoor AP with builtin directional antennas Pole mounting Deploy APs on the edge to ensure full coverage. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz 35 Huawei Confidential WLAN Deployment Solution for Playgrounds Suggestions for WLAN planning and deployment ⚫ For the stand area, install outdoor APs with 35 ° external directional antennas on poles at an equal spacing of 12 m to 15 m. ⚫ For the field area, install outdoor APs with built-in directional antennas on poles at an equal spacing of about 30 m. Playground 12–15 m 12–15 m Stand 12–15 m 12–15 m Stand Rostrum Field 30 m 36 Huawei Confidential 30 m 30 m 30 m WLAN Construction Standards for Canteens Scenario description WLAN construction standards ⚫ Service type: web browsing, HD video, instant messaging, etc. ⚫ User density: about 1 per 2 m2 in peak hours ⚫ Floor height: 3 m to 5 m ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 8 Mbps ⚫ Capacity KPI: 50 STAs on a single AP, 40% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode Canteen Medium High High Indoor AP with built-in omnidirectional antennas Ceiling mounting 37 Huawei Confidential Deployment Solution Deploy APs in W-shaped mode at a spacing of 15 m to 20 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz WLAN Deployment Solution for Canteens Suggestions for WLAN planning and deployment ⚫ Install indoor APs with built-in omnidirectional antennas on the ceiling in W-shaped mode at an equal spacing of 15 m to 20 m. ⚫ Install APs at least 3 m away from load-bearing columns. 15–20 m 15–20 m 15–20 m 15–20 m Canteen 38 Huawei Confidential WLAN Construction Standards for Dormitory Rooms Scenario description WLAN construction standards Service type: web browsing, HD video, gaming, instant messaging, etc. ⚫ ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 16 Mbps ⚫ User density: about 6–12 per room in peak hours ⚫ Capacity KPI: 8–12 STAs on a single AP, 100% concurrency rate ⚫ Floor height: 3 m to 5 m ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode Student dormitory Medium Medium High Wall plate AP Wall mounting 39 Huawei Confidential Deployment Solution Deploy one AP in each dormitory room. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz WLAN Deployment Solution for Dormitory Rooms Suggestions for WLAN planning and deployment ⚫ Install one wall plate AP on the wall for each dormitory room. ⚫ Generally, an AP is installed on the wall above the door. Determine the installation position based on the actual environment. Dormitory room 1 Dormitory room 2 Dormitory room 3 Corridor 40 Huawei Confidential Dormitory room 4 Dormitory room 5 Quiz 1. (Single-answer question) During WLAN construction, it is recommended that an indoor AP with omnidirectional antennas be installed at a height of no more than ( A. 4 B. 6 C. 8 D. 10 41 1. B Huawei Confidential ) m. Summary ⚫ This course describes the characteristics of education sub-scenarios, including auditoriums, lecture halls, stadiums, and playgrounds. Different sub-scenarios use different WLAN construction standards and planning rules and thereby have different WLAN planning solutions. This course also provides suggestions on WLAN planning and deployment in common education sub-scenarios, facilitating WLAN solution design in education WLAN projects. ⚫ On completion of this course, you will have a basic understanding of the WLAN planning process and master the WLAN design methods of each sub-scenario. 42 Huawei Confidential Recommendations ⚫ 43 Huawei official websites: Enterprise service: https://e.huawei.com/en/ Technical support: https://support.huawei.com/enterprise/en/index.html Online learning: https://www.huawei.com/en/learning Huawei Confidential Thank you. 把数字世界带入每个人、每个家庭、 每个组织,构建万物互联的智能世界。 Bring digital to every person, home, and organization for a fully connected, intelligent world. Copyright© 2022 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice. WLAN Planning for Hotel Scenarios Foreword ⚫ The rapid development of the mobile Internet promotes hotels to provide convenient network services for increasing customer flows, improving service quality, and implementing intelligent management. This leads to increased WLAN requirements in hotels. However, hotels have densely distributed rooms and many partitions, which restricts radio signal transmission and causes high deployment costs if common indoor networking modes are used. Therefore, WLAN deployment has been a pain point in hotels. ⚫ This course describes the service characteristics and WLAN requirements in hotel scenarios, and details the rules of and precautions for designing the WLAN deployment solution in this scenario. 2 Huawei Confidential Objectives ⚫ 3 On completion of this course, you will be able to: Describe common service types and challenges in hotel scenarios. Describe WLAN planning methods in hotel scenarios. Understand WLAN deployment solutions in hotel scenarios. Huawei Confidential Contents 4 1. Introduction to Hotel Scenarios 2. WLAN Planning Process in Hotel Scenarios 3. WLAN Planning Solutions in Hotel Scenarios Huawei Confidential Hotel Scenario Overview ⚫ Space: Guest rooms, hotel lobbies, restaurants, and banquet halls have various heights. ⚫ Blocking: Rooms are densely distributed. Many walls exist and usually cause high signal attenuation. ⚫ Appearance: Hotels have high aesthetic requirements and generally hope that the decoration is not damaged during AP deployment and cabling. Capacity: Scenarios such as restaurants and banquet halls have a large number of concurrent users. ⚫ Hotel guest room 5 Huawei Confidential Hotel lobby Hotel restaurant Banquet hall Service Types in Hotel Scenarios Hotel guest service Hotel staff service The services provided for hotel The services provided for hotel The services include asset guests include video, gaming, staff include office software, management and energy and social software services, instant messaging software, efficiency control (air which are the major services in and email services, which conditioners and lighting a hotel and have certain require high network stability. system). Enterprise IoT service requirements on network bandwidth and stability. Requirements on WLANs differ for these services. 6 Huawei Confidential • Note: This course does not assume IoT services on a WLAN. • Diversified services are involved in hotel guest rooms, lobbies, and restaurants. Entertainment services such as 4K video service require high bandwidth. Most STAs are mobile phones, laptops, and tablets, with low mobility. Challenges in Hotel Scenarios Many walls, restricting signal transmission Network congestion due to a large number of users APs with omnidirectional antennas in rooms provide poor coverage for corridors. 7 ... 240 mm brick walls are mostly used, causing severe signal attenuation. • 50–100 mobile phones 50–100 APs AP Obstacle (wall) • ... AP Complex management of a large number of APs Huawei Confidential • High-density user access in lecture halls or banquet halls causes network congestion and sharp decrease in wireless network bandwidth. • Configuration and management on a single-AP basis; too many nodes to be managed. Contents 8 1. Introduction to Hotel Scenarios 2. WLAN Planning Process in Hotel Scenarios 3. WLAN Planning Solutions in Hotel Scenarios Huawei Confidential WLAN Planning Process in Hotel Scenarios Requirements collection ⚫ Collect complete and comprehensive project and requirement information to provide basis Requirements collection for design. Site survey ⚫ Site survey Carry out a site survey and record more detailed information, such as the floor height, interference sources, and obstacles. Device selection ⚫ Determine the models of devices and antennas based on the collected information. Coverage design ⚫ Device selection Coverage design Determine the coverage range and field strength requirements, and plan AP deployment positions. Capacity design ⚫ 9 Estimate the number of APs based on the number of access STAs and service requirements. Huawei Confidential Capacity design Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Requirements Collection in Hotel Scenarios Requirement Type Drawing information Description Collect complete drawings that contain scale information in CAD, PDF, PNG, or JPG format. Coverage area Determine VIP coverage areas (such as guest rooms and hotel lobbies), common coverage areas (such as banquet halls, restaurants, and corridors), and simple coverage areas (such as staircases and storage rooms). Field strength Determine the signal field strength requirements in coverage areas. Generally, the coverage requirements are as follows: VIP coverage area ≥ –60 dBm, common coverage area ≥ –65 dBm, and simple coverage area ≥ –70 dBm Wall type Determine the material and thickness of indoor walls, such as 240 mm brick walls, 240 mm concrete walls, and 12 mm glass walls. Access STA Determine the types and number of access STAs in a coverage area. Generally, the number of access STAs can be estimated based on the number of access users. Bandwidth Determine the main service types and bandwidth requirements of access users. Switch location Determine the locations of switches upstream to the WLAN and confirm whether the PoE power supply distance meets the requirements. Power supply mode Determine the power supply mode and confirm the available power supply areas and facilities on site. Interference source Determine whether there are interference sources such as microwave ovens, Bluetooth devices, and external Wi-Fi devices. Other 10 Huawei Confidential Determine whether there are special requirements in some scenarios. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Site Survey in Hotel Scenarios Site Survey Item Description Building materials and signal attenuation Obtain the thickness and attenuation of building materials. If possible, test the attenuation onsite. Floor height Measure the floor height. The common indoor floor height is 3 m to 5 m. If there are atriums, hotel lobbies, or banquet halls, use a rangefinder to measure the floor height and record the result. Interference source Check whether there is interference caused by, for example, mobile hotspots, third-party Wi-Fi devices, and non-Wi-Fi devices (such as Bluetooth devices and microwave ovens). New obstacles Check whether the site is consistent with that on the floor plans. If not, mark the inconsistent areas and take photos. For example, if there are new partitions onsite, mark the positions and attenuation values of the partitions on the drawings. Site photos Take photos of the site to record the environment and convey survey information. AP installation mode and position Record the layout of guest rooms and determine the AP installation mode (ceiling mounting, wall mounting, etc.) and locations. ELV room location Mark the locations of ELV rooms where switches are to be deployed on the floor plans. Power supply cabling Mark PoE power supply cable routes on the drawings. It is recommended that the length of a PoE cable be less than or equal to 80 m. Special requirements Record the customer's special requirements, such as requirements on delay, in-roaming packet loss rate, and concurrency rate in special areas. 11 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Device Selection Factors Factor Description MIMO An AP typically supports 4 to 12 spatial streams. An AP with more spatial streams supports higher throughput and larger access capacity. Therefore, select APs with a proper number of spatial streams based on the application scenario and access density. Antenna Indoor APs have three types of antennas: omnidirectional, directional, and smart antennas. Outdoor APs support omnidirectional and directional antennas. APs with smart antennas are recommended for indoor scenarios. Select APs with directional antennas if APs need to be installed at high places. Maximum transmit power (combined power) Limitations over the Wi-Fi transmit power vary depending on the country or region code. When the transmit power gets closer to the specified upper limit, the transmitted signal is stronger and the coverage distance is longer. For details, see the Country Codes and Channels Compliance in the product documentation. Antenna gain A higher antenna gain indicates a stronger signal strength and longer coverage distance. Select antennas with a proper gain based on site requirements. Power supply mode The power supply mode varies with the deployment scenario. Currently, PoE is used in most scenarios. In other scenarios, a power supply can be used, or both PoE and a power supply can be used for mutual backup. Ensure that the power consumption of APs matches the power supply capability of PoE switches. Wi-Fi standard The Wi-Fi standard has evolved to the sixth generation, and each generation is compatible with earlier ones. The latest Wi-Fi 6 standard greatly improves the Wi-Fi speed and capacity. Therefore, Wi-Fi 6 APs are recommended. Other features For example: As the Internet of Things (IoT) comes into widespread use, deploying an IoT network independently will cause repeated cabling, separate management and O&M, and high hardware and O&M investment. Therefore, it is recommended that IoT scalability be considered when you select Wi-Fi APs. 12 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common APs in Hotel Scenarios (1/2) AP Model AirEngine 5762-12SW AirEngine 5762-15HW AirEngine 5761-12W Appearance MIMO 2+2 2+2 2+2 Antenna Built-in dual-radio omnidirectional antennas Built-in dual-radio omnidirectional antennas Built-in dual-radio omnidirectional antennas Maximum Transmit Power (Combined Power) 20 dBm/20 dBm 23 dBm/23 dBm 23 dBm/23 dBm Antenna Gain 2 dBi/3 dBi 2.5 dBi/3 dBi 2.5 dBi/3 dBi Maximum Power Consumption 12 W (excluding USB) 12.7 W (excluding USB) 12.7 W (excluding USB) Power Supply Mode PoE (802.3af) PoE (802.3af) PoE (802.3at/af) Other Features Wi-Fi 6, smart antenna, USB, IoT, BLE 5.0 Wi-Fi 6, smart antenna, USB, BLE 5.0 Wi-Fi 6, smart antenna, USB, BLE 5.0 Recommended Scenario Common guest rooms and hotel offices Common guest rooms and hotel offices Common guest rooms and hotel offices 13 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common APs in Hotel Scenarios (2/2) AP Model AirEngine 5761-11WD AirEngine 6760-X1/X1E MIMO 2+2 4+8/4+4+4/ 4+6+independent scanning Antenna Built-in dual-radio omnidirectional antennas Built-in dual-radio omnidirectional antennas (AirEngine 6760-X1) or external antennas (AirEngine 6760-X1E) Maximum Transmit Power (Combined Power) 23 dBm/23 dBm 26 dBm/29 dBm Appearance Antenna Gain 3.5 dBi/5 dBi 4.5 dBi/6 dBi Maximum Power Consumption 12.7 W (excluding USB) 48 W (excluding USB) Power Supply Mode PoE (802.3at/af) PoE (802.3bt) DC: 48 V Other Features Wi-Fi 6, smart antenna, USB, IoT, BLE 5.0 Wi-Fi 6, smart antenna (AirEngine 6760-X1), USB, IoT, and BLE 5.0 Recommended Scenario Common guest rooms and hotel offices Hotel offices, restaurants, and banquet halls 14 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common Antennas in Hotel Scenarios Antenna Part Number 27013720 27012565 Model ANTDG0808D4NR ANTDG1211D4NR Antenna Type Directional Directional Radios 2.4 GHz and 5 GHz 2.4 GHz and 5 GHz Gain (2.4 GHz/5 GHz) 8 dBi/8 dBi 12 dBi/11 dBi Horizontal Beamwidth (2.4 GHz/5 GHz) 70°/70° 35°/26° Vertical Beamwidth (2.4 GHz/5 GHz) 70°/70° 35°/26° Dimensions (H x W x D) 40 mm x 220 mm x 220 mm 40 mm x 450 mm x 420 mm Connector Type 4 x Type N female connector (dual-polarized) 4 x Type N female connector (dual-polarized) Remarks Used in uncommon floor height scenarios requiring wireless coverage Used in uncommon floor height scenarios with high-density access requirements * Note: The external directional antennas above can be used in high ceiling scenarios such as banquet halls. 15 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Agile Distributed Networking ⚫ Agile distributed networking is recommended for WLAN deployment in guest rooms. ⚫ A central AP can supply PoE power to remote units (RUs). If the power supply distance exceeds 80 m or more than 24 RUs are deployed, a switch can be used for extension. Each central AP can connect to a maximum of 48 RUs. Central AP: AirEngine 9700D-M1 Switch RU 16 RU RU RU RU RU Huawei Confidential • The central AP model AirEngine 9700D-M1 usually works with RU models such as the AirEngine 5761-11WD. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Precautions for Coverage Design in Hotel Scenarios AP with omnidirectional antennas ⚫ ⚫ APs can be mounted on the ceiling (recommended, AP supporting external directional antennas ⚫ hotel lobbies and banquet halls. It is recommended height of about 3 m). that APs with directional antennas be installed on Hotels are indoor semi-open scenarios. Assuming the ceiling at a height of 6 m to 12 m. that the edge field strength is –65 dBm, the ⚫ maximum coverage distance at 2.4 GHz is 35 m, and ⚫ When an AP is installed on a load-bearing column shaped mode at an equal spacing of 15 m to 20 m. ⚫ High-density coverage: 35° directional antennas or wall, assume that signals at the rear of the AP are recommended. APs are installed on the ceiling are completely blocked. or walls at an equal spacing of about 12 m Deploy a wall plate AP or an agile distributed RU in a guest room. 17 Common coverage: 70° directional antennas are recommended. APs are installed on the ceiling in W- that at 5 GHz is 15 m. ⚫ It is mainly used in high ceiling scenarios such as at a height of no more than 6 m) or on walls (at a Huawei Confidential (optional: W-shaped mode). Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common Services and Average Bandwidth in Hotel Scenarios Single-Service Baseline Rate (Mbps) Service Type Proportion of Services in Hotel Scenarios Excellent Good Guest Room Area Hotel Lobby Restaurant Banquet Hall Restroom Streaming media (4K) 50 25 10% 0% 0% 0% 0% E-whiteboard 32 16 5% 0% 0% 0% 0% Email 32 16 3% 0% 0% 0% 0% File transfer 32 16 2% 0% 0% 0% 0% Streaming media (1080p) 16 12 0% 10% 10% 10% 20% Web browsing 8 4 20% 70% 80% 70% 60% Desktop sharing 2.5 1.2 10% 0% 0% 0% 0% Gaming 2 1 0% 20% 0% 0% 0% Instant messaging 0.5 0.25 30% 0% 10% 20% 20% VoIP (voice) 0.25 0.125 20% 0% 0% 0% 0% Average Bandwidth in Each Scenario (Excellent, in Mbps) 11 11 8 8 8 Note: The data above is based on experience and can be adjusted according to user bandwidth requirements. 18 Huawei Confidential • If the bandwidth requirement in a specific scenario is not specified, evaluate the required bandwidth based on the table above. • The average bandwidth required in different scenarios is the sum of the singleservice baseline rates of different service types multiplied by their proportions. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Number of Concurrent STAs on a Single AP ⚫ The number of concurrent STAs supported by an AP is used to calculate the number of required APs on the premise that the coverage and capacity requirements are met. For example: 200 STAs are connected to the network, with the concurrency rate of 30%. That is, only 60 STAs run services concurrently. When both APs and STAs comply with Wi-Fi 6, a single STA requires 8 Mbps bandwidth and a dual-band AP (4x4 MIMO) supports concurrent access of 30 STAs (2x2 MIMO). Therefore, two APs are required to meet the capacity requirement. ⚫ The following table lists the maximum number of concurrent STAs supported by a Wi-Fi 6 AP (4x4 MIMO, HE40) at different bandwidths. Maximum Number of Concurrent STAs Supported by a Wi-Fi 6 AP in 4x4 MIMO HE40 Mode (All STAs Support Wi-Fi 6 and Dual Spatial Streams) No. Access Bandwidth Maximum Number of Concurrent STAs (Single-Radio) Maximum Number of Concurrent STAs (Dual-Radio) Maximum Number of Concurrent STAs (Triple-Radio) 1 2 Mbps 56 85 141 2 4 Mbps 39 56 95 3 6 Mbps 27 38 65 4 8 Mbps 21 30 51 5 16 Mbps 12 18 30 Note: The maximum number of concurrent STAs varies according to the AP model. 19 Huawei Confidential • The access bandwidth in the table above is the rate at the application layer, and is an actual rate calculated by subtracting various overheads from the air interface rate. Therefore, the rate at the application layer is lower than the PHY rate. Contents 20 1. Introduction to Hotel Scenarios 2. WLAN Planning Process in Hotel Scenarios 3. WLAN Planning Solutions in Hotel Scenarios Huawei Confidential Common Hotel Sub-scenarios 21 Huawei Confidential Hotel guest room Banquet hall Hotel lobby Restaurant WLAN Construction Standards for Guest Rooms Scenario description ⚫ WLAN construction standards Service type: web browsing, HD video, gaming, instant messaging, etc. ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 20 Mbps ⚫ User density: 1 or 2 per room ⚫ Capacity KPI: 4 STAs on a single RU, 100% concurrency rate ⚫ Floor height: 3 m to 4 m ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode Deployment Solution Deploy one RU or wall plate AP to cover one room. Channel planning: HE20 @ 2.4 GHz, HE20 @ 5 GHz Deploy one wall plate AP to cover one or two rooms based on wall materials. Channel planning: HE20 @ 2.4 GHz, HE20 @ 5 GHz Common guest room Low High Medium Agile distributed RU or wall plate AP Junction box (86 mm) or wall mounting Deluxe suite Low High Medium Wall plate AP supporting 2+2 or higher spatial streams Ceiling or wall mounting 22 Huawei Confidential WLAN Deployment Solution for Guest Rooms (1/2): Common Guest Rooms Suggestions for WLAN planning and deployment ⚫ Common guest rooms are typically partitioned by solid walls (brick walls or concrete walls). It is recommended that one RU or wall plate AP be deployed in each guest room. The RU or wall plate AP is usually installed under a desk and on a junction box (86 mm) or the wall. Keep the RU or wall plate AP away from metal obstacles during installation. ⚫ Deploy APs in corridors and away from the doors of guest rooms to avoid interference to the RUs or APs in the rooms. Desk 23 Desk Desk Desk Desk Desk Bed Bed Bed Bed Bed Bed Bathroom Bathroom Bathroom Bathroom Bathroom Bathroom Huawei Confidential WLAN Deployment Solution for Guest Rooms (2/2): Deluxe Suites Suggestions for WLAN planning and deployment Generally, a deluxe suite consists of two or more rooms. Before deploying APs, determine the material of walls between the rooms. If the wall between two rooms is made of wooden or gypsum boards, use solution A: Install one AP on the ceiling and close to the partition wall to cover the two rooms. If the wall between two rooms is made of bricks or concrete, use solution B: Install one AP on the ceiling or wall in each room. Desk Bed Bed Solution B: One AP covers one room. Sofa Gypsum board wall Sofa Solution A: One AP covers two rooms. Desk Concrete wall ⚫ Desk Desk Bathroom 24 Huawei Confidential Bathroom WLAN Construction Standards for Lobbies Scenario description WLAN construction standards ⚫ Service type: web browsing, HD video, instant messaging, etc. ⚫ User density: about 1 per 8–10 m2 ⚫ Floor height: 5 m to 9 m ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 20 Mbps ⚫ Capacity KPI: 30 STAs on a single AP, 30% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Lobby floor height < 6 m High Medium High Indoor AP with built-in omnidirectional antennas, supporting 2+4 or higher spatial streams Lobby floor height > 6 m High Medium High Indoor AP with external directional antennas, supporting 2+4 or higher spatial streams 25 Huawei Confidential Installation Mode Deployment Solution Ceiling mounting Deploy APs in W-shaped mode at an equal spacing of 18 m to 20 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz Wall mounting Deploy APs at an equal spacing of 18 m to 20 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz WLAN Deployment Solution for Lobbies Suggestions for WLAN planning and deployment ⚫ ⚫ If the floor height of a hotel lobby is smaller than 6 m, use solution A: Install indoor APs with built-in omnidirectional antennas in W-shaped mode at an equal spacing of 18 m to 20 m. If the floor height of a hotel lobby is greater than 6 m, use solution B: Install indoor APs with 70 ° external directional antennas on walls at a spacing of 18 m to 20 m and a height of 3 m to 5 m. 18–20 m 18–20 m 18–20 m 18–20 m 18–20 m 18–20 m Solution A: Mount APs with omnidirectional antennas on the ceiling. 26 Huawei Confidential Solution B: Mount APs with directional antennas on walls. WLAN Construction Standards for Banquet Halls Scenario description WLAN construction standards ⚫ Service type: web browsing, HD video, instant messaging, etc. ⚫ User density: about 1 per 2 m2 in peak hours ⚫ Floor height: 4 m to 9 m ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 10 Mbps ⚫ Capacity KPI: 60 STAs on a single AP, 40% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode Deployment Solution Ceiling mounting Deploy APs in W-shaped mode at an equal spacing of 12 m to 15 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz Ceiling or wall mounting Deploy APs at an equal spacing of 12 m to 15 m (optional: W-shaped mode). Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz Banquet hall (floor height < 6 m) High High High Indoor AP with built-in omnidirectional antennas, supporting 4+4 or higher spatial streams Banquet hall (floor height > 6 m) High High High Indoor AP with external directional antennas, supporting 4+4 or higher spatial streams 27 Huawei Confidential WLAN Deployment Solution for Banquet Halls Suggestions for WLAN planning and deployment ⚫ If the floor height of a banquet hall is smaller than 6 m, deploy indoor APs with built-in omnidirectional antennas according to solution A. ⚫ If the floor height of a banquet hall is greater than 6 m, deploy indoor APs with 35° external directional antennas according to solution A or B. ⚫ Considering limited available 2.4 GHz channels, disable some 2.4 GHz radios to reduce co-channel interference when a large number of APs are deployed. 12–15 m 12–15 m 12–15 m 12–15 m 12–15 m 12–15 m Solution A: Install APs on the ceiling in W-shaped mode at an equal spacing of 12 m to 15 m. 28 Huawei Confidential Solution B: Install APs on walls at an equal spacing of 12 m to 15 m. WLAN Construction Standards for Restaurants Scenario description WLAN construction standards ⚫ Service type: web browsing, HD video, instant messaging, etc. ⚫ User density: about 1 per 4–5 m2 during meal periods ⚫ Floor height: 3 m to 5 m ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 10 Mbps ⚫ Capacity KPI: 60 STAs on a single AP, 30% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode Restaurant Low High Medium Indoor AP with built-in omnidirectional antennas, supporting 2+4 or higher spatial streams Ceiling mounting 29 Huawei Confidential Deployment Solution Deploy APs in W-shaped mode at an equal spacing of 15 m to 18 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz WLAN Deployment Solution for Restaurants Suggestions for WLAN planning and deployment ⚫ Install indoor APs with built-in omnidirectional antennas on the ceiling in W-shaped mode at an equal spacing of 15 m to 18 m. ⚫ Install APs at least 3 m away from load-bearing columns. 15–18 m 15–18 m 15–18 m 15–18 m AP deployment positions in a restaurant (ceiling mounting) 30 Huawei Confidential Quiz 1. (Multi-answer question) Which of the following methods can be used to install an agile distributed RU? ( ) A. Wall mounting B. Junction box (86 mm) mounting C. Ceiling mounting D. Pole mounting 31 Huawei Confidential 1. ABC Summary ⚫ This course describes the characteristics of hotel sub-scenarios, including hotel guest rooms, restaurants, and banquet halls. Different sub-scenarios use different WLAN construction standards and planning rules and thereby have different WLAN planning solutions. This course also provides suggestions on WLAN planning and deployment in common hotel subscenarios, facilitating WLAN solution design in hotel WLAN projects. ⚫ On completion of this course, you will have a basic understanding of the WLAN planning process and master the WLAN design methods of each sub-scenario. 32 Huawei Confidential Recommendations ⚫ 33 Huawei official websites: Enterprise service: https://e.huawei.com/en/ Technical support: https://support.huawei.com/enterprise/en/index.html Online learning: https://www.huawei.com/en/learning Huawei Confidential Thank you. 把数字世界带入每个人、每个家庭、 每个组织,构建万物互联的智能世界。 Bring digital to every person, home, and organization for a fully connected, intelligent world. Copyright© 2022 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice. WLAN Planning for Healthcare Scenarios Foreword ⚫ Mobile healthcare is becoming a hot topic in hospitals' informatization construction. It is transforming the traditional wired applications of hospitals into wireless and mobile applications. The wireless local area network (WLAN) is typically the basis for carrying mobile healthcare services. ⚫ This course describes WLAN service characteristics of healthcare scenarios, as well as methods, rules, and precautions for WLAN planning in these scenarios. 2 Huawei Confidential Objectives ⚫ 3 On completion of this course, you will be able to: Describe common WLAN service types in healthcare scenarios. Describe WLAN planning methods in healthcare scenarios. Understand WLAN deployment solutions in healthcare scenarios. Huawei Confidential Contents 4 1. Introduction to Healthcare Scenarios 2. WLAN Planning Process in Healthcare Scenarios 3. WLAN Planning Solutions for Healthcare Scenarios Huawei Confidential Overview of Healthcare Scenarios Space: The structure is complex in healthcare scenarios. The wall structure varies greatly in different functional areas. Most of the ⚫ scenarios involve only common floor heights, and the atrium structure in the hall may exceed 6 m. Roaming: Service continuity is required when medical personnel are moving, ensuring no information loss and guaranteeing work ⚫ experience of medical personnel. Networking: Hospital WLANs are divided into the intranet for medical personnel and the extranet for patients and family members. ⚫ Ward 5 Huawei Confidential Consulting room Hall Service Characteristics of Healthcare Scenarios Medical personal service Patient personal service Healthcare IoT service Services running on handheld Services running on mobile Infant abduction prevention, PDAs and office laptops, phones of patients and family infusion monitoring, asset including mobile ward-round, members, for example, video, management, personnel wireless infusion, web browsing, gaming, and social media positioning, etc. instant messaging, etc. Requirements on WLANs differ for these services. 6 Huawei Confidential • Note: This course does not assume IoT services on a WLAN. Service Requirements in Healthcare Scenarios Security • Ensures WLAN security. • Isolates the intranet and extranet. • Avoids mutual interference between WLAN devices and various medical devices. 7 Huawei Confidential Quality Experience Coverage Management • In healthcare scenarios, a large number of images in the picture archiving and communication system (PACS) need to be transmitted. Therefore, high bandwidth is the prerequisite for normal medical work. • Medical personnel, patients, and visitors have high requirements on WLAN roaming. • Full coverage is required for all scenarios such as the registration hall, consulting rooms, wards, and operating rooms, meeting service requirements such as ward round and Internet access. • The deployment of numerous APs and the subsequent upgrade and maintenance bring new pressure to O&M personnel. Therefore, WLANs must be manageable and easy to maintain. Challenges in Healthcare Scenarios Dense small rooms 8 High roaming requirements • There are many wards, with complex wall structures and high wall penetration loss. • High requirements are imposed on WLAN roaming to ensure normal services for medical personnel. • The WLAN may be congested, causing the bandwidth to decrease sharply. • Medical devices are sensitive to in-roaming packet loss. Therefore, the packet loss rate must be low. • Other uncertain Wi-Fi interference such as personal Wi-Fi hotspots may exist. Huawei Confidential Contents 9 1. Introduction to Healthcare Scenarios 2. WLAN Planning Process in Healthcare Scenarios 3. WLAN Planning Solutions for Healthcare Scenarios Huawei Confidential WLAN Planning Process in Healthcare Scenarios ⚫ Requirements collection Collect complete and comprehensive project and requirement information to provide basis Requirements collection for WLAN design. ⚫ Site survey Carry out a site survey and record more detailed information, such as the floor height, Site survey interference sources, and obstacles. ⚫ Device selection ⚫ Device selection Determine the models of devices and antennas based on the collected information. Coverage design Determine the coverage range and field strength requirements, and plan AP deployment Coverage design positions. ⚫ Capacity design 10 Estimate the number of APs based on the number of access STAs and service requirements. Huawei Confidential Capacity design Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Requirements Collection in Healthcare Scenarios Requirement Type Drawing information Description Collect complete drawings that contain scale information in CAD, PDF, PNG, or JPG format. Coverage area Determine the VIP coverage areas (such as wards, consulting areas, and office areas), common coverage areas (such as the registration hall and leisure areas), and simple coverage areas (such as corridors, stairs, and restrooms), and areas that do not need to be covered (such as storage rooms and equipment rooms). Field strength Determine the signal field strength requirements in coverage areas. Generally, the coverage requirements are as follows: VIP coverage area ≥ –60 dBm, common coverage area ≥ –65 dBm, and simple coverage area ≥ –70 dBm Wall type Determine the material and thickness of indoor walls, such as 240 mm brick walls, 240 mm concrete walls, and 12 mm glass walls. Access STAs Determine the types and number of access STAs in the coverage area, such as handheld medical devices, mobile phones, and laptops. IoT requirements Determine whether there are IoT requirements. Switch location Determine the locations of upstream switches and check whether the PoE power supply distance meets the requirements. Power supply mode Determine the power supply mode as well as the available power supply areas and facilities on site. Interference source Determine whether there are interference sources such as medical instruments, Bluetooth devices, and external Wi-Fi devices. Other 11 Huawei Confidential Check whether medical devices have requirements on WLAN roaming and whether there are specific requirements for AP installation positions. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Site Survey in Healthcare Scenarios Site Survey Item Building materials and signal attenuation Description Obtain the thickness and attenuation of building materials. If possible, test the attenuation onsite. Floor height Measure the floor height. The common indoor floor height is 3 m to 5 m. If an atrium or hall exists, use a rangefinder to measure the floor height and record the result. Interference source Check whether there are interference sources, for example, mobile hotspots, Wi-Fi devices of other vendors, and non-Wi-Fi devices (such as Bluetooth devices and microwave ovens). New obstacles Check whether obstacles at the site are consistent with those on the drawings. If not, mark the inconsistent areas and take photos. For example, if there are new partitions onsite, mark the positions and attenuation values of the partitions on the drawings. Site photos Take photos of the site to record the environment and convey survey information. AP installation mode and position Determine the AP installation modes (ceiling mounting, wall mounting, etc.) and positions. Check whether there are special requirements in consulting rooms and wards. ELV room locations Mark the locations of ELV rooms where switches are to be deployed on the drawings. Power supply cabling Mark PoE cables to be routed on the drawings. It is recommended that the length of a PoE cable be less than or equal to 80 m. Special requirements Record the customer's special requirements, such as requirements on latency, in-roaming packet loss rate, and concurrency rate in special areas. 12 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Device Selection Factors Factor Description MIMO An AP typically supports 4 to 12 spatial streams. An AP with more spatial streams supports higher throughput and larger access capacity. Therefore, select APs with a proper number of spatial streams based on the application scenario and access density. Antenna Indoor APs have three types of antennas: omnidirectional, directional, and smart antennas. Outdoor APs support omnidirectional and directional antennas. APs with smart antennas are recommended for indoor scenarios. Select APs with directional antennas if APs need to be installed at high places. Maximum transmit power (combined power) Limitations over the Wi-Fi transmit power vary depending on the country or region code. When the transmit power gets closer to the specified upper limit, the transmitted signal is stronger and the coverage distance is longer. For details, see the Country Codes and Channels Compliance in the product documentation. Antenna gain A higher antenna gain indicates a stronger signal strength and longer coverage distance. Select antennas with a proper gain based on site requirements. Power supply mode The power supply modes vary according to the deployment scenarios. Currently, PoE is used in most scenarios. In other scenarios, the DC power supply can be used, or both power supply modes can be used together for mutual backup. Ensure that the power consumption of APs matches the power supply capability of PoE switches. Wi-Fi standard The Wi-Fi standard has evolved to the sixth generation, and each generation is compatible with earlier ones. The latest Wi-Fi 6 standard greatly improves the Wi-Fi speed and capacity. Therefore, Wi-Fi 6 APs are recommended. Other features For example: As the Internet of Things (IoT) comes into widespread use, deploying an IoT network independently will cause repeated cabling, separate management and O&M, and high hardware and O&M investment. Therefore, it is recommended that IoT scalability be considered when you select Wi-Fi APs. 13 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common APs in Healthcare Scenarios (1/2) AP Model AirEngine 5761-21 AirEngine 6760-X1/X1E MIMO 2+4 4+8/4+4+4 4+6+independent scanning Appearance Antenna Built-in smart antennas Built-in smart antennas Maximum Transmit Power (Combined Power) 26 dBm/29 dBm 26 dBm/29 dBm Antenna Gain 4.5 dBi/5.5 dBi 4.5 dBi/6 dBi Maximum Power Consumption 17.9 W (excluding USB) 39.9 W (excluding USB) Power Supply Mode PoE (802.3at/af) PoE (802.3bt/at) Installation Mode T-rail and wall mounting T-rail and wall mounting Other Features Wi-Fi 6, IoT via USB, BLE 5.0 Wi-Fi 6, IoT via USB, BLE 5.0 Recommended Scenario Waiting area and infusion area Conference room and office * The table lists only some common AP models. For details about other AP models, see the product documentation. 14 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common APs in Healthcare Scenarios (2/2) AP Model AirEngine 5761-11W AirEngine 5761-12W AirEngine 5761-11WD Appearance MIMO 2+2 2+2 2+2 Antenna Built-in smart antennas Built-in smart antennas Built-in dual-radio omnidirectional antennas Maximum Transmit Power (Combined Power) 23 dBm/23 dBm 20 dBm/20 dBm 23 dBm/23 dBm Antenna Gain 3.5 dBi/5 dBi 2 dBi/3 dBi 3.5 dBi/5 dBi Maximum Power Consumption 12.7 W (excluding USB) 13.1 W (excluding USB and PoE OUT) 12.7 W (excluding USB) Power Supply Mode PoE (802.3at/af) PoE (802.3at/af) PoE (802.3at/af) Installation Mode Junction box (86 mm), wall, and ceiling mounting Junction box (86 mm), wall, and ceiling mounting Junction box (86 mm), wall, and ceiling mounting Other Features Wi-Fi 6, IoT via USB, BLE 5.0 Wi-Fi 6, IoT via USB, BLE 5.0 Wi-Fi 6, smart antenna, IoT via USB, BLE 5.0 Recommended Scenario Ward and consulting room Ward and consulting room Ward and consulting room * The table lists only some common AP models. For details about other AP models, see the product documentation. 15 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common Antennas in Healthcare Scenarios Antenna Part Number 27013720 27012565 Model ANTDG0808D4NR ANTDG1211D4NR Antenna Type Directional Directional Radios 2.4 GHz and 5 GHz 2.4 GHz and 5 GHz Gain (2.4 GHz/5 GHz) 8 dBi/8 dBi 12 dBi/11 dBi Horizontal Beamwidth (2.4 GHz/5 GHz) 70°/70° 35°/26° Vertical Beamwidth (2.4 GHz/5 GHz) 70°/70° 35°/26° Dimensions (H x W x D) 40 mm x 220 mm x 220 mm 40 mm x 450 mm x 420 mm Connector Type 4 x Type N female connector (dual-polarized) 4 x Type N female connector (dual-polarized) Remarks Used in uncommon floor height scenarios requiring wireless coverage Used in uncommon floor height scenarios with highdensity access requirements * Note: The external directional antennas above can be used in atrium scenarios such as halls. 16 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Agile Distributed Networking in Healthcare Scenarios ⚫ Agile distributed networking is recommended for WLAN deployment in wards. ⚫ A central AP can supply PoE power to remote units (RUs). If the power supply distance exceeds 80 m or more than 24 RUs are deployed, a switch can be used for extension. Each central AP can connect to a maximum of 48 RUs. Central AP: AirEngine 9700D-M1 Switch RU 17 RU RU RU RU RU Huawei Confidential • The central AP model AirEngine 9700D-M1 usually works with RU models such as the AirEngine 5761-11WD. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Coverage Design Rules ⚫ Minimize the number of obstacles that signals pass through. Generally, it is recommended that signals pass through a single-layer wall (120 mm brick wall). In some special scenarios (such as gypsum walls and glass walls), signals can pass through two layers of walls. ⚫ It is not recommended that APs be deployed to transmit signals to penetrate a 240 mm thick brick wall, concrete wall, or metal wall. If the AP penetration coverage solution is used without meeting the specified constraints, weak signals and discontinuous roaming may occur after signals penetrate the wall. In this case, to ensure good coverage and roaming, add APs based on the wall structure during WLAN planning. ⚫ Deploy APs separately in key areas and VIP areas to ensure user experience. ⚫ Deploy APs separately at intersections or corners to ensure signal coverage continuity (≥ –65 dBm) and that neighboring APs can establish neighbor relationship tables for good roaming experience. ⚫ Install APs at least 3 m away from load-bearing pillars. 2 2 1 1 Improper location: Signals penetrate several walls. 18 Huawei Confidential Proper location: Signals penetrate only one wall. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Agile distributed AP AP with omnidirectional antennas Precautions for Coverage Design in Healthcare Scenarios 19 Huawei Confidential ⚫ APs can be mounted on the ceiling (recommended, at a height of no more than 6 m) or on walls (at a height of about 3 m). ⚫ Healthcare scenarios are indoor semi-open scenarios. Assuming that the edge field strength is – 65 dBm, the maximum coverage distance at 2.4 GHz is 35 m, and that at 5 GHz is 15 m. ⚫ When planning APs in a sub-scenario, consider factors such as obstacles and the number of access STAs. For details about the AP deployment spacing, see the WLAN construction standards. ⚫ When an AP is installed on a load-bearing pillar or wall, assume that signals at the rear of the AP are completely blocked. ⚫ Deploy agile distributed APs in areas consisting of multiple independent rooms that are isolated from each other, such as wards and consulting rooms. ⚫ It is recommended that a wall plate AP or agile distributed RU be deployed in each room. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common Services and Average Bandwidth in Healthcare Scenarios Service Type Single-Service Baseline Rate (Mbps) Proportion of Services in Healthcare Scenarios Excellent Good Ward/Consulting Room Waiting Area/ Infusion Room Hall Nurse Station Office/Conference Room Canteen Parking Lot 5% 4K video 50 30 10% 5% 5% 5% 10% 10% 1080p video 16 12 10% 5% 5% 5% 10% 10% 5% 720p video 8 4 10% 10% 10% 20% 20% 20% 10% Mobile ward round 8 4 10% 10% 0% 20% 0% 0% 0% Web browsing 8 4 20% 20% 20% 20% 20% 20% 20% Gaming 2 1 10% 10% 10% 0% 10% 10% 10% Instant messaging 0.512 0.256 20% 20% 30% 20% 20% 20% 30% VoIP 0.256 0.128 10% 20% 20% 10% 10% 10% 20% 10 7 6 8 10 10 6 Average Bandwidth in Each Scenario (Excellent, in Mbps) * Note: The data above is based on experience and can be adjusted according to user bandwidth requirements. 20 Huawei Confidential • If the bandwidth requirement in a scenario is not specified, evaluate the required bandwidth based on the table above. • The average bandwidth required in different scenarios is the sum of the singleservice baseline rates of different service types multiplied by their proportions. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Number of Concurrent STAs on a Single AP ⚫ The number of concurrent STAs supported by an AP is used to calculate the number of required APs on the premise that the coverage and capacity requirements are met. For example: Two hundred STAs are connected to the network, with the concurrency rate of 30%. That is, services are running on only 60 STAs concurrently. When both APs and STAs comply with Wi-Fi 6, a single STA requires 8 Mbps bandwidth and a dual-band AP (4x4 MIMO) supports concurrent access of 30 STAs (2x2 MIMO). Therefore, two APs are required to meet the capacity requirement. ⚫ The following table lists the maximum number of concurrent STAs supported by a Wi-Fi 6 AP (4x4 MIMO, HE40) at different bandwidths. Maximum Number of Concurrent STAs (All STAs Support Wi-Fi 6 and Dual Spatial Streams) Supported by a Wi-Fi 6 AP (4x4 MIMO, HE40) No. Access Bandwidth Maximum Number of Concurrent STAs (Single-Radio) Maximum Number of Concurrent STAs (Dual-Radio) Maximum Number of Concurrent STAs (Triple-Radio) 1 2 Mbps 56 85 141 2 4 Mbps 39 56 95 3 6 Mbps 27 38 65 4 8 Mbps 21 30 51 5 16 Mbps 12 18 30 Note: The maximum number of concurrent STAs varies according to the AP model. 21 Huawei Confidential • The access bandwidth in the table above is the rate at the application layer, and is an actual rate calculated by subtracting various overheads from the air interface rate. Therefore, the rate at the application layer is lower than the PHY rate. Contents 22 1. Introduction to Healthcare Scenarios 2. WLAN Planning Process in Healthcare Scenarios 3. WLAN Planning Solutions for Healthcare Scenarios Huawei Confidential Common Healthcare Sub-scenarios 23 Ward Consulting room Parking lot Hospital hall Nurse station Corridor Huawei Confidential • In healthcare scenarios, common sub-scenarios also include the waiting area, infusion room, and other areas with high user density. WLAN Construction Standards for Wards and Consulting Rooms Scenario description WLAN construction standards Service types: mobile ward round, web browsing, HD video, instant messaging, etc. ⚫ User distribution: 1–3 three beds in a ward, with 1 or 2 users per bed; 2–6 users in a consulting room ⚫ ⚫ ⚫ Capacity KPI: 12 STAs on a single AP, 50% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm 2 Area: about 60 m (max) ⚫ ⚫ Similar scenarios: Duty room, leader's office, treatment room, etc. ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 16 Mbps ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Ward and consulting room 24 Aesthetics Medium Huawei Confidential Capacity Medium Coverage High Recommended AP Type Wall plate AP or agile distributed RU supporting 2+2 or higher spatial streams Installation Mode Deployment Solution Junction box (86 mm), ceiling, or wall mounting Deploy APs evenly in a room and far away from the door. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz WLAN Deployment Solution for Wards and Consulting Rooms Suggestions for WLAN planning and deployment ⚫ It is recommended that wall plate APs or distributed RUs be installed on walls or ceilings. If ceiling mounting is used, additional mounting brackets are required. ⚫ If the walls between rooms are brick walls, deploy one wall plate AP or RU in each room by referring to solution A. If the walls between rooms are made of gypsum boards or foam materials, use one AP or RU to cover two rooms by referring to solution B. ⚫ Deploy APs or RUs in the rooms evenly far away from the doors. Keep APs or RUs in the corridor at least 3 m away from the doors of rooms. Single room < 60 m2 Single room < 60 m2 Single room < 60 m2 Single room < 60 m2 Single room < 60 m2 Single room < 60 m2 Single room < 60 m2 Single room < 60 m2 Solid wall Solid wall Solid wall Solid wall Gypsum board Gypsum board Gypsum board Gypsum board Solution A: wall mounting 25 Huawei Confidential Solution B: ceiling mounting WLAN Construction Standards for Waiting Areas and Infusion Rooms Scenario description WLAN construction standards ⚫ Service types: web browsing, gaming, video, instant messaging, etc. ⚫ User density: 1 per 2 m2 ⚫ Floor height: 3–5 m Similar scenarios: Hospital pharmacy, rest area, and registration area ⚫ ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 8 Mbps ⚫ Capacity KPI: 60 STAs on a single AP, 30% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Waiting area and infusion room 26 Aesthetics Low Huawei Confidential Capacity High Coverage Recommended AP Type Medium Indoor AP with built-in omnidirectional antennas, supporting 2+4 or higher spatial streams Installation Mode Deployment Solution Ceiling or wall mounting Deploy APs at an equal spacing of 15 m to 18 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz WLAN Deployment Solution for Waiting Areas and Infusion Rooms Suggestions for WLAN planning and deployment ⚫ Mount indoor APs with omnidirectional antennas on the ceiling. ⚫ Deploy APs at spacing of 15–18 m based on the area size. ⚫ Deploy APs at least 3 m away from load-bearing pillars. 15–18 m 15–18 m 27 Huawei Confidential 15–18 m WLAN Construction Standards for Hospital Halls Scenario description WLAN construction standards ⚫ Service types: web browsing, HD video, instant messaging, etc. ⚫ User density: about 1 per 4–5 m2 ⚫ Floor height: Common structure: 3–6 m Unconventional structure: > 6 m ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 8 Mbps ⚫ Capacity KPI: 60 STAs on a single AP, 20% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode Deployment Solution Ceiling mounting Deploy APs evenly on the ceiling. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz Wall mounting Deploy APs evenly on the walls of the hall. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz Hospital hall (floor height < 6 m) Medium Medium High Indoor AP with built-in omnidirectional antennas, supporting 2+4 or higher spatial streams Hospital hall (floor height > 6 m) Medium Medium High Indoor AP with external directional antennas, supporting 2+4 or higher spatial streams 28 Huawei Confidential WLAN Deployment Solution for Hospital Halls Suggestions for WLAN planning and deployment ⚫ Hall with a floor height of 3–6 m: Deploy APs at an equal spacing of 15 m to 20 m and keep them at least 3 m away from load-bearing pillars. ⚫ Hall with a floor height of greater than 6 m: Mount APs with external directional antennas evenly on the walls of the hall at an equal spacing of 15 m to 20 m. If there is a suspended ceiling with a common floor height around the hall, APs can also be mounted on the suspended ceiling. Solution A: Ceiling mounting (3–6 m floor height) 29 Huawei Confidential 15–20 m 15–20 m 15–20 m Hall edge 15–20 m 15–20 m Hall edge 15–20 m Hall edge Hall edge 15–20 m Solution B: Wall mounting (> 6 m floor height) WLAN Construction Standards for Nurse Stations and Corridors Scenario description ⚫ WLAN construction standards Service types: Smart healthcare devices, web browsing, gaming, video, instant messaging, etc. ⚫ User density: about 1 per 8–10 m ⚫ Floor height: 3–5 m 2 ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 16 Mbps ⚫ Capacity KPI: 20 STAs on a single AP, 50% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Nurse station and corridor 30 Aesthetics Low Huawei Confidential Capacity Medium Coverage Recommended AP Type Installation Mode Deployment Solution Medium Indoor AP with built-in omnidirectional antennas, supporting 2+4 or higher spatial streams Ceiling mounting Deploy APs at an equal spacing of 20 m to 30 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz WLAN Deployment Solution for Nurse Stations and Corridors Suggestions for WLAN planning and deployment ⚫ Deploy one AP in the nurse station, and deploy APs in the corridor at a spacing of 20–30 m. ⚫ Deploy APs in corridors to ensure continuous coverage of radio signals and good roaming experience during mobile ward rounds. Ward Ward Ward Ward Ward Ward Ward Ward Ward Nurse station 20–30 m 20–30 m 20–30 m Corridor Ward 31 Huawei Confidential Ward Ward Ward Ward Ward Ward Ward Ward Ward Ward WLAN Construction Standards for Parking Lots Scenario description WLAN construction standards ⚫ Service types: web browsing, email, instant messaging, etc. ⚫ User density: about 1 per 15–20 m2 ⚫ Floor height: 3–5 m ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 10 Mbps ⚫ Capacity KPI: 30 STAs on a single AP, 30% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Parking lot 32 Aesthetics Low Huawei Confidential Capacity Low Coverage Recommended AP Type Medium Indoor AP with built-in omnidirectional antennas, supporting 2+2 or higher spatial streams Installation Mode Deployment Solution Ceiling mounting Deploy APs in W-shaped mode at an equal spacing of 35–40 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz WLAN Deployment Solution for Parking Lots Suggestions for WLAN planning and deployment ⚫ Install APs with omnidirectional antennas on the ceiling with an equal spacing of 35 m to 40 m in W-shaped mode. ⚫ Deploy APs above lanes and independent APs at entrances and exits to ensure continuous signal coverage and good roaming experience. 35–40 m Parking area Lane 33 Huawei Confidential 35–40 m 35–40 m Lane Quiz 1. (Single-answer question) On an agile distributed network, how many RUs can a central AP manage at most? ( A. 12 B. 24 C. 36 D. 48 34 1. D Huawei Confidential ) Summary ⚫ This course describes the service characteristics of each healthcare sub-scenario, including wards, consulting rooms, nurse stations, and hospital halls. WLAN construction standards and planning rules vary according to sub-scenarios and relevant WLAN planning solutions are different as well. This course also provides suggestions on WLAN planning and deployment for common healthcare sub-scenarios, facilitating WLAN solution design in WLAN projects relating to healthcare scenarios. ⚫ On completion of this course, you will have a basic understanding of the WLAN planning process and master the WLAN design methods for each sub-scenario. 35 Huawei Confidential Recommendations ⚫ 36 Huawei official websites: Enterprise service: https://e.huawei.com/en/ Technical support: https://support.huawei.com/enterprise/en/index.html Online learning: https://www.huawei.com/en/learning Huawei Confidential Thank you. 把数字世界带入每个人、每个家庭、 每个组织,构建万物互联的智能世界。 Bring digital to every person, home, and organization for a fully connected, intelligent world. Copyright© 2022 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice. WLAN Planning for Retail Scenarios (Shopping Malls and Supermarkets) Foreword ⚫ With the rapid development of the mobile Internet, people have more and more requirements for WLANs, and the requirements become increasingly strict. Wireless networks in shopping malls and supermarkets are typically provided for free to attract customers, increase customer traffic, and increase revenues. ⚫ In shopping malls and supermarkets, WLANs provide a wide coverage with a large number of access STAs and strong signal interference. In addition, Users of different identities need to access the WLANs and move frequently, posing great challenges to WLAN deployment in shopping malls and supermarkets. ⚫ This course describes the service characteristics of and WLAN requirements for the shopping mall and supermarket scenario, and describes the design rules and precautions of WLAN planning solutions in the scenario. 2 Huawei Confidential Objectives ⚫ On completion of this course, you will be able to: Understand common service types and challenges in the shopping mall and supermarket scenarios. Understand the WLAN planning process in shopping mall and supermarket scenarios. Understand WLAN construction standards and deployment solutions in shopping mall and supermarket scenarios. 3 Huawei Confidential Contents 4 1. Introduction to Shopping Mall and Supermarket Scenarios 2. WLAN Planning Process in Shopping Mall and Supermarket Scenarios 3. WLAN Planning Solutions for Shopping Mall and Supermarket Scenarios Huawei Confidential Overview of Shopping Mall and Supermarket Scenarios Shopping malls and supermarkets, also called commodity supermarkets, typically refer to large shopping malls that ⚫ gather a large number of merchants with the following features: Space: Functional areas are divided by floor, including shopping areas, food courts, and entertainment areas. Obstacles: Many obstacles exist in shopping malls, including partition walls between stores and load-bearing pillars. In addition, store decoration may block signals. Interference: There are many Wi-Fi hotspots deployed by merchants, leading to severe interference. Outside a shopping mall 5 Huawei Confidential Inside a shopping mall Characteristics of WLAN Services in Shopping Mall and Supermarket Scenarios Consumer services Office services in shopping malls Services of stores Services running on users' Daily office services in Operations-related services STAs, such as web browsing, shopping malls running on running on dedicated PCs, TVs, instant messaging, email, office laptops, such as web large screens, POS terminals, online music, HD videos, and browsing, instant messaging, and tablets, such as the online gaming. email, file transfer, desktop commodity management sharing, video conferencing, system, cashier system, and service data transmission. advertising services, and ordering services. Requirements on WLANs differ for these services. 6 Huawei Confidential WLAN Challenges in Shopping Mall and Supermarket Scenarios Sharp increase in the number of users • 7 During holidays and marketplace activities, the user concurrency rate is high, which may cause network congestion, web page freezing, and even WiFi access failures. Huawei Confidential Weak signals or coverage holes • Different shopping malls have different building structures and may have coverage holes or some areas with weak Wi-Fi signal coverage. These "blind spots" will lead to poor user experience. Signal disconnections during roaming • In shopping malls, the roaming path of a user is uncertain. When the user moves, the signal may be blocked or the user may walk to a blind spot. As a result, the roaming is interrupted, affecting user experience. Much interference • Some store owners set up Wi-Fi hotspots by themselves or customers temporarily enable personal hotspots, thereby interfering WLANs in shopping malls and reducing the WLAN quality. Contents 8 1. Introduction to Shopping Mall and Supermarket Scenarios 2. WLAN Planning Process in Shopping Mall and Supermarket Scenarios 3. WLAN Planning Solutions for Shopping Mall and Supermarket Scenarios Huawei Confidential WLAN Planning Process in the Shopping Mall and Supermarket Scenarios Requirements collection ⚫ Site survey ⚫ Site survey Carry out a site survey and record more detailed information, such as the floor height, interference sources, and obstacles. Device selection ⚫ Requirements collection Collect complete and comprehensive project and requirement information to provide basis for design. Determine the models of devices and antennas based on the collected information. Device selection Coverage design ⚫ Determine the coverage area and field strength requirements, and plan AP deployment positions. Coverage design Capacity design ⚫ 9 Estimate the number of needed APs based on the number of access STAs and service requirements. Huawei Confidential Capacity design Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Requirements Collection in Shopping Mall and Supermarket Scenarios Requirement Type Drawing information Coverage area Determine VIP coverage areas (such as stores and catering areas), common coverage areas (such as public areas and corridors), and simple coverage areas (such as staircases and bathrooms). Field strength Determine the signal field strength requirements in coverage areas. Generally, the coverage requirements are as follows: VIP coverage area ≥ –60 dBm, common coverage area ≥ –65 dBm, and simple coverage area ≥ –70 dBm Wall type Determine the material and thickness of indoor walls, such as 240 mm brick walls, 12 mm glass, and 240 mm concrete walls. Access STAs Determine the types and number of access STAs in the coverage area, such as mobile phones, tablets, and laptops. Bandwidth Determine the main service types and bandwidth requirements of access STAs. Switch positions Determine the locations of the uplink wired-side switches on the WLANs and check whether the PoE power supply distance meets the requirements. Power supply mode Determine the power supply mode as well as the available power supply areas and facilities on site. Interference sources Check whether interference sources exist, such as microwave ovens, Bluetooth devices, and external Wi-Fi devices. Others 10 Description Collect complete drawings that contain scale information in CAD, PDF, PNG, or JPG format. Huawei Confidential Check whether there are special requirements in some scenarios. High aesthetic requirements are typically exerted on stores and catering areas. If APs can be installed only above the ceiling, focus on the ceiling, ventilation pipes, and fire shutter doors that block signals. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Site Survey in Shopping Mall and Supermarket Scenarios Site Survey Item Description Building materials and signal attenuation Obtain the thickness and attenuation of building materials. If possible, test the attenuation onsite. Floor height Measure the floor height. The common indoor floor height is 3 m to 5 m. If an atrium exists, use a rangefinder to measure the floor height and record the result. Interference sources Check whether there is interference caused by, for example, mobile hotspots, third-party Wi-Fi devices, and non-Wi-Fi devices (such as Bluetooth devices and microwave ovens). New obstacles Check whether the site is consistent with that on the floor plans. If not, mark the inconsistent areas and take photos. For example, if there are new partitions onsite, mark the positions and attenuation values of the partitions on the drawings. Site photos Take photos of the site to record the environment and convey survey information. AP installation modes and positions Determine the AP installation modes (ceiling-mounted, wall-mounted, etc.) and locations. ELV room location Mark the locations of ELV rooms where switches are to be deployed on the floor plans. Power supply cabling Mark PoE cables to be routed on the drawings. It is recommended that the length of a PoE cable be less than or equal to 80 m. Special requirements Record the customer's special requirements, such as requirements on latency, in-roaming packet loss rate, and concurrency rate in special areas. 11 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Device Model Selection Factors 12 Factor Description MIMO An AP typically supports 4 to 12 spatial streams. An AP with more spatial streams supports higher throughput and larger access capacity. Therefore, select APs with a proper number of spatial streams based on the application scenario and access density. Antenna Indoor APs have three types of antennas: omnidirectional, directional, and smart antennas. Outdoor APs support omnidirectional and directional antennas. APs with smart antennas are recommended for indoor scenarios. Select APs with directional antennas if APs need to be installed at high places. Maximum transmit power (combined power) Limitations over the Wi-Fi transmit power vary depending on the country or region code. When the transmit power gets closer to the specified upper limit, the transmitted signal is stronger and the coverage distance is longer. For details, see the Country Codes and Channels Compliance in the product documentation. Antenna gain A higher antenna gain indicates a stronger signal strength and longer coverage distance. Select antennas with a proper gain based on site requirements. Power supply mode The power supply modes vary according to the deployment scenarios. Currently, PoE is used in most scenarios. In other scenarios, the DC power supply can be used, or both power supply modes can be used together for mutual backup. Ensure that the power consumption of APs matches the power supply capability of PoE switches. Wi-Fi standard The Wi-Fi standard has evolved to the sixth generation, and each generation is compatible with earlier ones. The latest Wi-Fi 6 standard greatly improves the Wi-Fi speed and capacity. Therefore, Wi-Fi 6 APs are recommended. Other features For example: As the Internet of Things (IoT) comes into widespread use, deploying an IoT network independently will cause repeated cabling, separate management and O&M, and high hardware and O&M investment. Therefore, it is recommended that IoT scalability be considered when you select Wi-Fi APs. Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common APs in Shopping Mall and Supermarket Scenarios AP Model AirEngine6761-21T AirEngine6760-X1 AirEngine5760-51 AirEngine5761-21 MIMO 2+2+4 4+6+independent scanning 2+4+independent scanning 2+4 Antenna Built-in triple-radio omnidirectional antennas Built-in dual-radio omnidirectional antennas Built-in dual-radio omnidirectional antennas Built-in dual-radio omnidirectional antennas Maximum Transmit Power (Combined Power) 25 dBm/23 dBm/26 dBm 26 dBm/29 dBm 26 dBm/26 dBm 25 dBm/28 dBm Antenna Gain 4 dBi/5 dBi 4.5 dBi/6 dBi 4.5 dBi/5.5 dBi 4 dBi/5 dBi 21.2 W (excluding USB) 48 W (excluding USB and PoE_OUT) 30 W (excluding USB and PoE_OUT) 17.9 W (excluding USB) Image Maximum Power Consumption Power Supply Mode PoE (802.3at) PoE (802.3bt) PoE (802.3at/bt) PoE (802.3at/af) Other Features Smart antenna, USB, and Bluetooth 5.0 Smart antenna, USB, IoT, BLE 5.0 Smart antenna, USB, IoT, BLE 5.0 Smart antenna, USB, and Bluetooth 5.0 Recommended Scenario Important flagship stores and high-end stores Important flagship stores and high-end stores Public areas such as stores and corridors Public areas such as stores and corridors 13 Huawei Confidential • The table lists only some common AP models. For details about other AP models, see the product documentation. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Coverage Design Rules ⚫ ⚫ ⚫ ⚫ ⚫ Minimize the number of obstacles that signals pass through. Generally, it is recommended that signals pass through a single-layer wall (120 mm brick wall). In some special scenarios (such as gypsum walls and glass walls), signals can pass through two layers of walls. It is not recommended that APs be deployed to transmit signals to penetrate a 240 mm thick brick wall, concrete wall, or metal wall. If the AP penetration coverage solution is used without meeting the specified constraints, weak signals and discontinuous roaming may occur after signals penetrate the wall. In this case, to ensure good coverage and roaming, add APs based on the wall structure during WLAN planning. Deploy APs separately in key areas and VIP areas to ensure user experience. Deploy APs separately at intersections or corners to ensure signal coverage continuity (≥ –65 dBm) and that neighboring APs can establish neighbor relationship tables for good roaming experience. Install APs at least 3 m away from load-bearing pillars. 2 2 1 1 Improper location: Signals penetrate several walls. 14 Huawei Confidential Proper location: Signals penetrate only one wall. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Precautions for Coverage Design in Shopping Mall and Supermarket Scenarios In shopping malls and supermarkets, indoor APs with built-in omnidirectional antennas are used in most cases. Note the following points: APs can be installed on ceilings or walls. The height for ceiling-mounted installation is less than or equal to 6 m, and that for the wall-mounted installation is about 3 m. Shopping malls and supermarkets are semi-open. At the edge field strength of –65 dBm, the maximum coverage distance at 2.4 GHz is 35 m, and that at 5 GHz is 15 m. When planning APs in a sub-scenario, consider factors such as obstacles and the number of access STAs. For details about the AP deployment spacing, see the WLAN construction standards. When an AP is installed on a load-bearing pillar or wall, signals at the rear of the AP are considered to be completely blocked. Height: ≤ 6 m Maximum transmission distance Coverage radius 15 Huawei Confidential Wall mounting Ceiling mounting ⚫ Height: about 3 m Maximum transmission distance Coverage radius Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common Consumer Services and Average Bandwidth in Shopping Mall and Supermarket Scenarios Service Type Single-Service Baseline Rate (Mbps) Proportion of Services Excellent Good Corridor Catering Store Supermarket Cinema Parking Lot Web browsing 8 4 60% 50% 50% 60% 60% 60% Streaming media (1080p) 16 12 10% 20% 20% 10% 0% 10% VoIP 0.25 0.125 10% 10% 0% 10% 10% 10% Gaming 2 1 10% 10% 10% 10% 10% 10% Instant messaging 0.5 0.25 10% 10% 20% 10% 20% 10% 7 8 8 7 6 7 Average Bandwidth in Each Scenario (Excellent, in Mbps) Note: The data above is based on experience and can be adjusted according to user bandwidth requirements. 16 Huawei Confidential • If the bandwidth requirement in a specific scenario is not specified, evaluate the required bandwidth based on the table above. • The average bandwidth required in different scenarios is the sum of the singleservice baseline rates of different service types multiplied by their proportions. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Number of Concurrent STAs on a Single AP ⚫ The number of concurrent STAs supported by an AP is used to calculate the number of required APs on the premise that the coverage and capacity requirements are met. For example: Two hundred STAs are connected to the network, with the concurrency rate of 30%. That is, services are running on only 60 STAs concurrently. When both APs and STAs comply with Wi-Fi 6, a single STA requires 8 Mbps bandwidth and a dual-band AP (4x4 MIMO) supports concurrent access of 30 STAs (2x2 MIMO). Therefore, two APs are required to meet the capacity requirement. ⚫ The following table lists the maximum number of concurrent STAs supported by a Wi-Fi 6 AP (4x4 MIMO, HE40) at different bandwidths. Maximum Number of Concurrent STAs (All STAs Support Wi-Fi 6 and Dual Spatial Streams) Supported by a Wi-Fi 6 AP (4x4 MIMO, HE40) No. Access Bandwidth Maximum Number of Concurrent STAs (Single-Radio) Maximum Number of Concurrent STAs (Dual-Radio) Maximum Number of Concurrent STAs (Triple-Radio) 1 2 Mbps 56 85 141 2 4 Mbps 39 56 95 3 6 Mbps 27 38 65 4 8 Mbps 21 30 51 5 16 Mbps 12 18 30 Note: The maximum number of concurrent STAs varies according to the AP model. 17 Huawei Confidential • The access bandwidth in the table above is the rate at the application layer, and is an actual rate calculated by subtracting various overheads from the air interface rate. Therefore, the rate at the application layer is lower than the PHY rate. Contents 18 1. Introduction to Shopping Mall and Supermarket Scenarios 2. WLAN Planning Process in Shopping Mall and Supermarket Scenarios 3. WLAN Planning Solutions for Shopping Mall and Supermarket Scenarios Huawei Confidential Common Sub-scenarios in the Shopping Mall and Supermarket Scenarios 19 Corridor Store Catering Supermarket Cinema Parking lot Huawei Confidential WLAN Construction Standards for Public Areas and Corridors Scenario description WLAN construction standards ⚫ Service types: web browsing, HD video, instant messaging, etc. ⚫ User density: about 1 per 6–8 square meters in peak hours ⚫ Floor height: 3–5 m ⚫ Rate KPI: experience rate ≥ 50 Mbps, service-assured rate ≥ 10 Mbps ⚫ Capacity KPI: 30 STAs on a single AP, 40% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode Deployment Solution Public area/Passageway High Medium High Indoor AP with built-in omnidirectional antennas, supporting 2+4 or higher spatial streams Ceiling mounting It is recommended that APs be deployed near the store entrances at a spacing of 20–25 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz 20 Huawei Confidential WLAN Deployment Solution for Public Areas and Corridors Suggestions for WLAN planning and deployment ⚫ Mount indoor APs with omnidirectional antennas on the T-rails of the ceiling. For areas near store doors (far from the atrium area), deploy the APs at a spacing of 20–25 m. Store Corridor AP Store Store 20–25 m Store Store AP Store Store 20–25 m Store AP Fence (glass) Atrium area 21 Huawei Confidential WLAN Construction Standards for Store Scenarios Scenario description WLAN construction standards ⚫ Service types: web browsing, HD video, instant messaging, etc. ⚫ User density: about 1 per 3–4 square meters in peak hours ⚫ Floor height: 3–5 m ⚫ Rate KPI: experience rate ≥ 50 Mbps, service-assured rate ≥ 10 Mbps ⚫ Capacity KPI: 30 STAs on a single AP, 40% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode Deployment Solution Store Medium Low Medium Indoor AP with built-in omnidirectional antennas, supporting 2+4 or higher spatial streams Ceiling mounting APs are deployed far away from corridors at an equal distance of 15 m in stores. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz 22 Huawei Confidential WLAN Deployment Solution for Store Scenarios Suggestions for WLAN planning and deployment ⚫ ⚫ ⚫ ⚫ For a store with an area of less than 60 m2 and the stores are separated by plasterboard walls, deploy APs by referring to solution A. For a store with an area of 60 m2 to 150 m2, deploy one AP in each store by referring to solution B. For a store with an area of greater than 150 m2, deploy APs at an interval of 15 m to 20 m in W-shaped mode by referring to solution C. For counters without partitions, deploying APs above aisles by referring to solution C as well. Area < 60 m2 Area < 60 m2 60–150 m2 Area > 150 m2 60–150 m2 15–20 m Plasterboard wall 15–20 m 15–20 m 15–20 m Solution A 23 Huawei Confidential Solution B Solution C WLAN Construction Standards for Catering Scenarios Scenario description WLAN construction standards ⚫ Service types: web browsing, HD video, instant messaging, etc. ⚫ User density: about 1 per 2–3 square meters in peak hours ⚫ Floor height: 3–5 m ⚫ Rate KPI: experience rate ≥ 50 Mbps, service-assured rate ≥ 10 Mbps ⚫ Capacity KPI: 30 STAs on a single AP, 40% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode Deployment Solution Catering High Medium Medium Indoor AP with built-in omnidirectional antennas, supporting 2+4 or higher spatial streams Ceiling mounting Deploy APs at an equal spacing of 15 m (optional: W-shaped mode). Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz 24 Huawei Confidential WLAN Deployment Solution for Catering Scenarios Suggestions for WLAN planning and deployment ⚫ Food court: Mount APs on the ceiling at equal spacing of 15 m over the aisles. ⚫ Catering stores: Mount APs on the ceiling in W-shaped mode at equal spacing of 15 m. Seat area Seat area Seat area 15 m Aisle Seat area Aisle Huawei Confidential 15 m 15 m Seat area Seat area Seat area 15 m 15 m 15 m Food court 25 Seat area Catering store WLAN Construction Standards for Supermarkets Scenario description WLAN construction standards Service types: web browsing, music, HD video, instant messaging, etc. ⚫ ⚫ Rate KPI: experience rate ≥ 50 Mbps, service-assured rate ≥ 10 Mbps ⚫ User density: about 1 per 3–4 square meters in peak hours ⚫ Capacity KPI: 30 STAs on a single AP, 40% concurrency rate ⚫ Floor height: 3–5 m ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode Deployment Solution Supermarket Medium Low Medium Indoor AP with built-in omnidirectional antennas, supporting 2+4 or higher spatial streams Ceiling mounting Deploy APs in W-shaped mode at an equal spacing of 20 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz 26 Huawei Confidential WLAN Deployment Solution for Super Market Scenarios Suggestions for WLAN planning and deployment ⚫ Mount indoor APs with built-in omnidirectional antennas on the ceiling in W-shaped mode at an equal spacing of 20 m. 20 m 20 m 20 m 20 m Supermarket 27 Huawei Confidential WLAN Construction Standards for Cinemas Scenario description WLAN construction standards ⚫ Service types: web browsing, instant messaging, etc. ⚫ User density: about 1 per 2 square meters in peak hours ⚫ Floor height: 3–7 m ⚫ Rate KPI: experience rate ≥ 50 Mbps, service-assured rate ≥ 10 Mbps ⚫ Capacity KPI: 60 STAs on a single AP, 15% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Cinema Medium Low 28 Huawei Confidential Coverage Recommended AP Type Medium Indoor AP with built-in omnidirectional antennas, supporting 2+4 or higher spatial streams Installation Mode WLAN Planning Solution Ceiling mounting Small projection hall: Only one AP needs to be deployed in each hall. Large projection hall: APs are deployed at an interval of 15 m to 20 m in W-shaped mode. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz WLAN Deployment Solution for Cinemas Suggestions for WLAN planning and deployment ⚫ Small projection hall (with an area of less than 200 m2): Only one AP needs to be installed on the ceiling in each projection hall. ⚫ Large projection hall (with an area of more than 200 m2): APs are installed at equal spacing of 15 m to 20 m on the ceiling. Area < 200 m2 Area < 200 m2 Area < 200 m2 Area > 200 m2 15–20 m Small projection hall 29 Huawei Confidential Large projection hall WLAN Construction Standards for Parking Lots Scenario description WLAN construction standards ⚫ Service types: web browsing, email, video, instant messaging, etc. ⚫ User density: about 1 per 15–20 m2 ⚫ Floor height: 3–5 m ⚫ Rate KPI: experience rate ≥ 50 Mbps, service-assured rate ≥ 10 Mbps ⚫ Capacity KPI: 30 STAs on a single AP, 30% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Parking lot Low Low Medium Indoor AP with built-in omnidirectional antennas, supporting 2+2 or higher spatial streams 30 Huawei Confidential Installation Mode Deployment Solution Ceiling mounting Deploy APs in W-shaped mode at an equal distance of 35–40 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz WLAN Deployment Solution for Parking Lots Suggestions for WLAN planning and deployment ⚫ Install APs with omnidirectional antennas on the ceiling with equal spacing of 35 m to 40 m in W-shaped mode. ⚫ Deploy APs above lanes and independent APs at entrances and exits to ensure continuous signal coverage and good roaming experience. 35–40 m Parking area Lane 31 Huawei Confidential 35–40 m 35–40 m Lane Quiz 1. (Multiple-Answer Question) Which of the following statements about sub-scenario deployment solutions in shopping mall and supermarket scenarios are correct? ( ) A. In stores, APs with built-in omnidirectional antennas are usually mounted on the ceiling. The specific solution varies according to the store size. B. In food courts, it is recommended that APs be deployed at equal intervals over aisles to ensure user experience. C. In cinema scenarios, the number of APs to be deployed depends on the size of the cinemas. D. In supermarket scenarios, it is recommended that APs be mounted on the ceiling in W-shaped mode. 32 Huawei Confidential 1. ABCD Summary ⚫ This course describes the characteristics of each sub-scenario in the shopping mall and supermarket scenarios, including stores, catering areas, and cinemas. WLAN construction standards and planning rules vary according to sub-scenarios and relevant WLAN planning solutions are different as well. This course also provides suggestions on WLAN planning and deployment for common shopping mall and supermarket sub-scenarios, facilitating WLAN solution design in WLAN projects relating to shopping mall and supermarket scenarios. ⚫ On completion of this course, you will have a basic understanding of the WLAN planning process and master the WLAN design methods for each sub-scenario. 33 Huawei Confidential Recommendations ⚫ 34 Huawei official websites: Enterprise service: https://e.huawei.com/en/ Technical support: https://support.huawei.com/enterprise/en/index.html Online learning: https://www.huawei.com/en/learning Huawei Confidential Thank you. 把数字世界带入每个人、每个家庭、 每个组织,构建万物互联的智能世界。 Bring digital to every person, home, and organization for a fully connected, intelligent world. Copyright© 2022 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice. WLAN Planning for Shop Floor and Warehouse Scenarios Foreword ⚫ With the introduction of Industry 4.0 and Made in China 2025, more and more data-based, intelligent application innovations are emerging, and the manufacturing industry is also going automated and intelligent. All these changes require the support of a mature and stable network. ⚫ Shop floors and warehouses are characterized by large area, high floor height, severe blocking by obstacles, and difficult deployment. In addition, some terminals in these scenarios are sensitive to network quality, such as automated guided vehicles (AGVs). ⚫ This course describes WLAN service characteristics of shop floor and warehouse scenarios, as well as methods, rules, and precautions for WLAN planning in these scenarios. 2 Huawei Confidential Objectives ⚫ 3 On completion of this course, you will be able to: Describe common service types and challenges in shop floor and warehouse scenarios. Describe WLAN planning methods in shop floor and warehouse scenarios. Understand WLAN deployment solutions in shop floor and warehouse scenarios. Huawei Confidential Contents 4 1. Introduction to Shop Floor and Warehouse Scenarios 2. WLAN Planning Process in Shop Floor and Warehouse Scenarios 3. WLAN Planning Solutions in Shop Floor and Warehouse Scenarios Huawei Confidential Overview of Shop Floor and Warehouse Scenarios Space: The floor height of a warehouse is high and even exceeds 10 m in some areas. Additionally, areas in the warehouse are large ⚫ and can be categorized as high or low shelf areas by shelf height. Blocking: There are many obstacles in shop floors and warehouses, such as production devices, cable trays, load-bearing pillars, ⚫ shelves, and goods on the shelves. All these obstacles block Wi-Fi signals to some extent. Service type: The main service types of workshops and warehouses include handheld personal digital assistants (PDAs), barcode ⚫ scanners, sensor data backhaul, AGVs, and programmable logic controller (PLC) devices. Roaming: AGVs in shop floors and warehouses move frequently and are sensitive to packet loss and latency during roaming. ⚫ Shop floor 5 Warehouse Huawei Confidential • The PLC is an electronic device designed for digital operation in industrial environments. • The AGV is a wheeled mobile robot that can move along the conducting wires, marking blocks, and magnetic stripes on the floor. It is mainly used in industrial production scenarios to transport goods in shop floors and warehouses. • After receiving dispatch instructions, AGVs automatically move to the shelves where the goods are stacked based on the QR codes on the ground or image identification, lift the goods to the shelves, and then transport the shelves to the pickers. After the goods picking is complete, the AGVs carry the shelves to the shelf area for storage. Warehousing Industry Development Trend The modern warehousing industry is gradually developing from manual, mechanized, to automated, intelligent ⚫ warehousing. Phase 1 Phase 2 Phase 3 Phase 4 Intelligent warehousing Manual warehousing The transportation, storage, regulation, and control of goods are performed manually. 6 Huawei Confidential Mechanized warehousing Mechanical equipment (such as transport vehicles, robotic arms, and lifters) is manually operated to transport, store, and manage goods. Automated warehousing AGVs, automatic shelves, and automatic identification and sorting technologies are widely applied to transport and manage goods. On the basis of automated warehousing, modern application software, Internet, and IoT technologies are used for intelligent warehousing control. Challenges of Shop Floor and Warehouse Scenarios Complex environments • • • In shop floor and warehouse • The number of PLC-based AGV roaming • AGVs are widely used in shop scenarios, the floor height is smart devices and sensors is floor and warehouse high, making WLAN greatly increasing in pace scenarios. High requirements deployment difficult. with the Industry 4.0 era. As are imposed on WLAN Production device, shelves, such, WLANs need to support quality (such as latency and and goods severely block concurrent access of a large packet loss rate) to prevent signals. number of terminals while Some production devices ensuring reliability. may interfere with Wi-Fi signals. 7 IoT device access Huawei Confidential • AGV suspension or stop. • AGVs frequently roam when There are various types of they are moving, which has terminals and high high requirements on compatibility requirements. roaming quality. Contents 8 1. Introduction to Shop Floor and Warehouse Scenarios 2. WLAN Planning Process in Shop Floor and Warehouse Scenarios 3. WLAN Planning Solutions in Shop Floor and Warehouse Scenarios Huawei Confidential WLAN Planning Process in Shop Floor and Warehouse Scenarios Requirements collection ⚫ Requirements collection Collect complete and comprehensive project and requirement information to provide basis for WLAN design. Site survey ⚫ Site survey Carry out a site survey and record more detailed information, such as the floor height, shelf height, interference sources, and obstacles. Device selection ⚫ Device selection Determine the models of devices and antennas based on the collected information. Coverage design ⚫ Determine the coverage range and field strength requirements, and plan AP deployment Coverage design positions. Capacity design ⚫ 9 Estimate the number of APs based on the number of access STAs and service requirements. Huawei Confidential Capacity design Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Requirements Collection in Shop Floor and Warehouse Scenarios Requirement Type Drawing information Description Collect complete drawings that contain scale information in CAD, PDF, PNG, or JPG format. Coverage area Determine the VIP coverage areas (such as shop floors, shelf areas of warehouses, and AGV areas), common coverage areas (such as office areas and goods acceptance areas), and simple coverage areas (such as corridors and restrooms). Field strength Determine the signal field strength requirements in coverage areas. Generally, the coverage requirements are as follows: VIP coverage area ≥ –60 dBm, common coverage area ≥ –65 dBm, and simple coverage area ≥ –70 dBm Wall type Determine the material and thickness of indoor walls, such as 240 mm brick walls, 12 mm glass, and 240 mm concrete walls. Device and shelf heights Collect device and shelf heights, distribution, and goods stacking types. Types and number of STAs Determine the types and number of access STAs in a coverage area. Bandwidth Power supply mode Switch location Interference source 10 Huawei Confidential Determine the main service types and per-user bandwidth requirement. Determine the power supply mode as well as the available power supply areas and facilities on site. Determine the locations of upstream switches and check whether the PoE power supply distance meets the requirements. Check whether there are interference sources such as Bluetooth devices and external Wi-Fi devices. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Site Survey in Shop Floor and Warehouse Scenarios Site Survey Item Building materials and signal attenuation Description Obtain the thickness and attenuation of building materials. If possible, test the attenuation onsite. Floor height The floor height of a shop floor or warehouse ranges from 3 m to 12 m. Use a rangefinder to measure the floor height and record the result. In a warehouse scenario, you also need to measure the heights of shelves. Interference source Check whether there are interference sources, for example, mobile hotspots, Wi-Fi devices of other vendors, and non-Wi-Fi devices (such as Bluetooth devices and microwave ovens). New obstacles Check whether obstacles at the site are consistent with those on the drawings. If not, mark the inconsistent areas and take photos. For example, if there are new partitions onsite, mark the positions and attenuation values of the partitions on the drawings. Site photos Take photos of the site to record the environment and convey survey information. AP installation mode and position Determine the AP installation modes (ceiling mounting, wall mounting, etc.) and positions. ELV room locations Mark the locations of ELV rooms where switches are to be deployed on the drawings. Power supply cabling Mark PoE cables to be routed on the drawings. It is recommended that the length of a PoE cable be less than or equal to 80 m. Special requirements Record the customer's special requirements, such as requirements on latency, in-roaming packet loss rate, and concurrency rate in special areas. 11 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Device Selection Factors Factor Description MIMO An AP typically supports 4 to 12 spatial streams. An AP with more spatial streams supports higher throughput and larger access capacity. Therefore, select APs with a proper number of spatial streams based on the application scenario and access density. Antenna Indoor APs have three types of antennas: omnidirectional, directional, and smart antennas. Outdoor APs support omnidirectional and directional antennas. APs with smart antennas are recommended for indoor scenarios. Select APs with directional antennas if APs need to be installed at high places. Maximum transmit power (combined power) Limitations over the Wi-Fi transmit power vary depending on the country or region code. When the transmit power gets closer to the specified upper limit, the transmitted signal is stronger and the coverage distance is longer. For details, see the Country Codes and Channels Compliance in the product documentation. Antenna gain A higher antenna gain indicates a stronger signal strength and longer coverage distance. Select antennas with a proper gain based on site requirements. Power supply mode The power supply modes vary according to the deployment scenarios. Currently, PoE is used in most scenarios. In other scenarios, the DC power supply can be used, or both power supply modes can be used together for mutual backup. Ensure that the power consumption of APs matches the power supply capability of PoE switches. Wi-Fi standard The Wi-Fi standard has evolved to the sixth generation, and each generation is compatible with earlier ones. The latest Wi-Fi 6 standard greatly improves the Wi-Fi speed and capacity. Therefore, Wi-Fi 6 APs are recommended. Other features For example: As the Internet of Things (IoT) comes into widespread use, deploying an IoT network independently will cause repeated cabling, separate management and O&M, and high hardware and O&M investment. Therefore, it is recommended that IoT scalability be considered when you select Wi-Fi APs. 12 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common APs in Shop Floor and Warehouse Scenarios (1/2) AP Model AirEngine 6760-X1E AirEngine 6760-X1 MIMO 4+8/4+4+4/ 4+6+independent scanning 4+8/4+4+4/ 4+6+independent scanning Appearance Antenna External antennas Built-in dual-radio or triple-radio omnidirectional antennas Maximum Transmit Power (Combined Power) 26 dBm/29 dBm 26 dBm/29 dBm Antenna Gain / 4.5 dBi/6 dBi Maximum Power Consumption 39.9 W (excluding USB) 39.9 W (excluding USB) Power Supply Mode PoE (802.3bt) PoE (802.3bt) Other Features Wi-Fi 6, USB, IoT, BLE 5.0 Wi-Fi 6, smart antenna, USB, IoT, BLE 5.0 Recommended Scenario Shop floors, warehouses, or AGV areas with a floor height of more than 6 m Shop floors, warehouses, or AGV areas with a floor height of less than 6 m 13 Huawei Confidential • The table lists only some common AP models. For details about other AP models, see the product documentation. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common APs in Shop Floor and Warehouse Scenarios (2/2) AP Model AirEngine 6761-21E AirEngine 6761-21 AirEngine 5761-21 Appearance MIMO 4+4 4+4 2+4 Antenna External antennas Built-in dual-radio omnidirectional antennas Built-in dual-radio omnidirectional antennas Maximum Transmit Power (Combined Power) 26 dBm/26 dBm 26 dBm/26 dBm 25 dBm/28 dBm Antenna Gain / 4.5 dBi/5.5 dBi 4 dBi/5 dBi Maximum Power Consumption 22.6 W (excluding USB) 22.6 W (excluding USB) 17.9 W (excluding USB) Power Supply Mode PoE (802.3at/af) PoE (802.3at/af) PoE (802.3at/af) Other Features Wi-Fi 6, USB, IoT, BLE 5.0 Wi-Fi 6, smart antenna, USB, IoT, BLE 5.0 Wi-Fi 6, smart antenna, USB, IoT, BLE 5.0 Recommended Scenario Shop floors, warehouses, or AGV areas with a floor height of more than 6 m Shop floors, warehouses, or AGV areas with a floor height of less than 6 m Shop floors, warehouses, or AGV areas with a floor height of less than 6 m 14 Huawei Confidential • The table lists only some common AP models. For details about other AP models, see the product documentation. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design APs in Shop Floors and Warehouses with Harsh Environments AP Model AirEngine 5761R-11 AirEngine 5761R-11E AirEngine 6760R-51 AirEngine 6760R-51E MIMO 2+2 Antenna Built-in directional antennas 2.4 GHz: 65°_40° 5 GHz: 65°_20° 2+2 4+4 4+4 External antennas Built-in directional antennas 2.4 GHz: 60°_40° 5 GHz: 60°_20° External antennas Maximum Transmit Power (Combined Power) 28 dBm/27 dBm 28 dBm/27 dBm 30 dBm/30 dBm 30 dBm/30 dBm Antenna Gain Maximum Power Consumption 10 dBi/11 dBi / 10 dBi/11 dBi / 17.7 W 19.6 W 35.3 W 35.3 W PoE (802.3at/bt) Appearance Power Supply Mode PoE (802.3at/af) PoE (802.3at/af) PoE (802.3at/bt) Other Features Wi-Fi 6, smart antenna, BLE 5.0 Wi-Fi 6, flexible radio switching, BLE 5.0 Wi-Fi 6, smart antenna, BLE 5.0 Wi-Fi 6, BLE 5.0 Recommended Scenario Scenarios with high requirements on AP protection, such as high- and low-temperature scenarios and corrosion-prone scenarios Scenarios with high requirements on AP protection, such as high- and low-temperature scenarios and corrosion-prone scenarios Scenarios with high requirements on AP protection, such as high- and low-temperature scenarios and corrosion-prone scenarios Scenarios with high requirements on AP protection, such as high- and low-temperature scenarios and corrosion-prone scenarios 15 Huawei Confidential • The table lists only some common AP models. For details about other AP models, see the product documentation. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common Antennas in Shop Floor and Warehouse Scenarios Antenna Part Number 27013720 27012565 Model ANTDG0808D4NR ANTDG1211D4NR Antenna Type Directional Directional Radios 2.4 GHz and 5 GHz 2.4 GHz and 5 GHz Gain (2.4 GHz/5 GHz) 8 dBi/8 dBi 12 dBi/11 dBi Horizontal Beamwidth (2.4 GHz/5 GHz) 70°/70° 35°/26° Vertical Beamwidth (2.4 GHz/5 GHz) 70°/70° 35°/26° Dimensions (H x W x D) 40 mm x 220 mm x 220 mm 40 mm x 450 mm x 420 mm Connector Type 4 x Type N female connector (dual-polarized) 4 x Type N female connector (dual-polarized) Remarks AGV area with a floor height of higher than 6 m Passageways between shelves Note: The antenna models above can be used by the APs with external directional antennas mentioned on the previous page. 16 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design AP supporting external directional antennas AP with omnidirectional antennas Precautions for Coverage Design in Shop Floor and Warehouse Scenarios 17 Huawei Confidential ⚫ APs can be mounted on the ceiling (at a height of no more than 6 m) or on walls (at a height of about 3 m). ⚫ Shop floors and warehouses are semi-open scenarios. Assuming that the edge field strength is – 65 dBm, the maximum coverage distance at 2.4 GHz is 35 m, and that at 5 GHz is 15 m. ⚫ When planning APs in a sub-scenario, consider factors such as obstacles and the number of access STAs. For details about the AP deployment spacing, see the WLAN construction standards. ⚫ When an AP is installed on a load-bearing pillar or wall, assume that signals at the rear of the AP are completely blocked. ⚫ Recommended AP model: AirEngine 6760-X1E or AirEngine 6761-21E ⚫ ⚫ In shop floors and AGV areas with a floor height of more than 6 m, 70 ° directional antennas are recommended. Install antennas vertically to provide downward coverage at a height ranging from 6 m to 12 m, with a coverage radius ranging from 10 m to 15 m. It is recommended that 35° directional antennas be used for covering passageways between shelves. The installation height ranges from 3 m to 5 m, and the coverage length is 70 m. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common Services and Average Bandwidth in Shop Floor and Warehouse Scenarios Service Type PLC Single-Service Baseline Rate (Mbps) Proportion of Services in Shop Floor Scenarios Proportion of Services in Warehouse Scenarios Excellent Good Shop Floor Shelf Area AGV Area 0.512 0.256 30% 0% 0% Handheld PDA 8 4 20% 0% 0% AGV 0.512 0.256 10% 0% 50% Barcode scanner 0.512 0.256 20% 70% 20% Web browsing 8 4 10% 10% 10% Instant messaging 0.512 0.256 5% 10% 10% VoIP 0.256 0.128 5% 10% 10% 3 2 2 Average Bandwidth in Each Scenario (Excellent, in Mbps) * Note: The data above is based on experience and can be adjusted according to user bandwidth requirements. 18 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Number of Concurrent STAs on a Single AP ⚫ The number of concurrent STAs supported by an AP is used to calculate the number of required APs on the premise that the coverage and capacity requirements are met. For example: Two hundred STAs are connected to the network, with the concurrency rate of 30%. That is, services are running on only 60 STAs concurrently. When both APs and STAs comply with Wi-Fi 6, a single STA requires 8 Mbps bandwidth and a dual-band AP (4x4 MIMO) supports concurrent access of 30 STAs (2x2 MIMO). Therefore, two APs are required to meet the capacity requirement. ⚫ The following table lists the maximum number of concurrent STAs supported by a Wi-Fi 6 AP (4x4 MIMO, HE40) at different bandwidths. Maximum Number of Concurrent STAs (All STAs Support Wi-Fi 6 and Dual Spatial Streams) Supported by a Wi-Fi 6 AP (4x4 MIMO, HE40) No. Access Bandwidth Maximum Number of Concurrent STAs (Single-Radio) Maximum Number of Concurrent STAs (Dual-Radio) Maximum Number of Concurrent STAs (Triple-Radio) 1 2 Mbps 56 85 141 2 4 Mbps 39 56 95 3 6 Mbps 27 38 65 4 8 Mbps 21 30 51 5 16 Mbps 12 18 30 Note: The maximum number of concurrent STAs varies according to the AP model. 19 Huawei Confidential Contents 20 1. Introduction to Shop Floor and Warehouse Scenarios 2. WLAN Planning Process in Shop Floor and Warehouse Scenarios 3. WLAN Planning Solutions in Shop Floor and Warehouse Scenarios Huawei Confidential Common Sub-scenarios of Shop Floors and Warehouses 21 Shop floor High-shelf area in a warehouse Low-shelf area in a warehouse AGV area Huawei Confidential WLAN Construction Standards for Shop Floors Scenario description ⚫ ⚫ ⚫ WLAN construction standards Service types: handheld PDA, PLC, barcode scanner, AGV, etc. Floor height: < 6 m for a common shop floor; 6–12 m for an atrium shop floor Service characteristics: low bandwidth, frequent roamings, and sensitivity to delay and packet loss ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 4 Mbps ⚫ Capacity KPI: 50 STAs on a single AP, 40% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode WLAN Planning Solution Rod mounting Deploy APs in W-shaped mode at an equal spacing of 20–25 m. Channel planning: HE20 @ 2.4 GHz, HE20 @ 5 GHz Beam mounting Deploy APs in W-shaped mode at an equal spacing of 20–25 m. Channel planning: HE20 @ 2.4 GHz, HE20 @ 5 GHz Common shop floor (floor height < 6 m) Low Low High Indoor AP with built-in omnidirectional antennas, supporting 2+4 or higher spatial streams Atrium shop floor (floor height: 6–12 m) Low Low High Indoor AP with external directional antennas connected, supporting 2+4 or higher spatial streams 22 Huawei Confidential WLAN Deployment Solution for Shop Floors Suggestions for WLAN planning and deployment ⚫ ⚫ ⚫ If the height of a floor shop is less than 6 m, deploy indoor APs with built-in omnidirectional antennas along passageways at a spacing of 20 m to 25 m. The rod mounting mode is recommended to reduce the installation height and reduce signal blocking caused by cable trays. If the height of a floor shop ranges from 6 m to 12 m, deploy indoor APs with external 70 ° directional antennas connected in W-shaped mode at an equal spacing of 20 m to 25 m. The beam mounting mode is recommended. Keep APs more than 2 m away from load-bearing pillars. 20–25 m 20–25 m 20–25 m 20–25 m Production line 20–25 m Solution A: APs with omnidirectional antennas (floor height < 6 m) 23 Huawei Confidential 20–25 m 20–25 m 20–25 m Solution B: APs with directional antennas (floor height: 6–12 m) WLAN Construction Standards for High-Shelf Areas Scenario description WLAN construction standards Service types: barcode scanning using handheld PDAs or barcode scanners ⚫ Shelf height: 3–12 m ⚫ Service characteristics: low bandwidth, frequent roamings, and sensitivity to latency and packet loss ⚫ ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 2 Mbps ⚫ Capacity KPI: 50 STAs on a single AP, 30% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario and Solution Aesthetics Capacity Solution A for high-shelf scenarios Low Solution B for high-shelf scenarios Low 24 Huawei Confidential Coverage Recommended AP Type Installation Mode WLAN Planning Solution Low High Indoor AP with built-in omnidirectional antennas Ceiling mounting or rod mounting Deploy APs in W-shaped mode at an equal spacing of around 45 m. Channel planning: HE20 @ 2.4 GHz, HE20 @ 5 GHz Low High Indoor AP with external directional antennas connected Wall mounting or rod mounting Deploy APs and antennas at both ends of a passageway to provide coverage for the passageway. Channel planning: HE20 @ 2.4 GHz, HE20 @ 5 GHz WLAN Deployment Solution for High-Shelf Areas Suggestions for WLAN planning and deployment ⚫ Solution A: Mount APs with built-in omnidirectional antennas on the ceiling. The AP height is less than 12 m, and the spacing between APs in a single passageway is about 45 m. ⚫ Solution B: Install APs with external directional antennas at both ends of a passageway. It is recommended that the APs be installed at a height of 3 m to 5 m. A single AP can cover one or two passageways, depending on the AP model. AP Antenna 45 m 45 m 45 m High-shelf solution A: APs with omnidirectional antennas 25 70 m 70 m 70 m 70 m 70 m 70 m 70 m 70 m 70 m 70 m High-shelf solution B: APs with directional antennas Huawei Confidential • You can select either of the preceding solutions based on the site requirements. WLAN Construction Standards for Low-Shelf Areas Scenario description WLAN construction standards Service types: barcode scanning using handheld PDAs or barcode scanners ⚫ Shelf height: around 2 m ⚫ Service characteristics: low bandwidth, frequent roamings, and sensitivity to latency and packet loss ⚫ ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 2 Mbps ⚫ Capacity KPI: 50 STAs on a single AP, 30% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode WLAN Planning Solution Low-shelf area Low Low High AP with built-in omnidirectional antennas Ceiling or rod mounting Deploy APs in W-shaped mode at an equal spacing of around 30 m. Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz 26 Huawei Confidential WLAN Deployment Solution for Low-Shelf Areas Suggestions for WLAN planning and deployment ⚫ The height of a low shelf is about 2 m, and the height of an AP is less than 6 m. Deploy APs with built-in omnidirectional antennas in W-shaped mode at an equal spacing of 30 m on the ceiling. 30 m 30 m 30 m 30 m Low-shelf scenario (APs with omnidirectional antennas mounted on the ceiling) 27 Huawei Confidential WLAN Construction Standards for AGV Areas Scenario description ⚫ Service type: AGV data transmission ⚫ Floor height: 3–12 m WLAN construction standards ⚫ Service characteristics: low bandwidth, frequent roamings, and sensitivity to latency and packet loss ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 8 Mbps ⚫ Capacity KPI: 60 STAs on a single AP, 30% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode WLAN Planning Solution AP height < 6m Low Low High Indoor AP with built-in omnidirectional antennas Ceiling mounting Deploy APs in W-shaped mode at an equal spacing of 20–25 m. Channel planning: HE20 @ 2.4 GHz, HE20 @ 5 GHz AP height: 6–12 m Low Low High Indoor AP with external directional antennas connected Ceiling or rod mounting Deploy APs in W-shaped mode at an equal spacing of 20–25 m. Channel planning: HE20 @ 2.4 GHz, HE20 @ 5 GHz 28 Huawei Confidential WLAN Deployment Solution for AGV Areas Suggestions for WLAN planning and deployment ⚫ At an AP height of less than 6 m, deploy APs with built-in omnidirectional antennas in W-shaped mode at an equal spacing of 20–25 m on the ceiling. ⚫ At an AP height of 6–12 m, deploy AirEngine 6761-21E APs with external 70° directional antennas connected in W-shaped mode at an equal spacing of 20–25 m on the ceiling. 20–25 m 20–25 m 20–25 m 20–25 m Production line 20–25 m Solution A: AP with omnidirectional antennas (at a height of less than 6 m) 29 Huawei Confidential 20–25 m 20–25 m 20–25 m Solution B: AP with directional antennas (at a height of 6–12 m) Quiz 1. (Multiple-answer question) Which of the following statements are true about WLAN planning for a warehouse scenario? ( ) A. APs with omnidirectional antennas can be used for coverage in the low-shelf area of the warehouse. B. APs with directional antennas can be used for coverage in the high-shelf area of the warehouse. C. AGVs in the warehouse do not have high requirements on the WLAN packet loss rate. D. AGVs in the warehouse have high requirements on the WLAN roaming delay. 30 Huawei Confidential 1. ABD Summary ⚫ This course describes the characteristics of each sub-scenario in the shop floor and warehouse scenario, including the shop floor, high-/low-shelf area, and AGV area. WLAN construction standards and planning rules vary according to sub-scenarios and relevant WLAN planning solutions are different as well. This course also provides suggestions on WLAN planning and deployment for common shop floor and warehouse sub-scenarios, facilitating WLAN solution design in WLAN projects relating to these scenarios. ⚫ On completion of this course, you will have a basic understanding of the WLAN planning process and master the WLAN design methods for each sub-scenario. 31 Huawei Confidential Recommendations ⚫ 32 Huawei official websites: Enterprise service: https://e.huawei.com/en/ Technical support: https://support.huawei.com/enterprise/en/index.html Online learning: https://www.huawei.com/en/learning Huawei Confidential Thank you. 把数字世界带入每个人、每个家庭、 每个组织,构建万物互联的智能世界。 Bring digital to every person, home, and organization for a fully connected, intelligent world. Copyright© 2022 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice. WLAN Planning for Outdoor Coverage Scenarios Foreword ⚫ The development of wireless communications has made interconnections between smart terminals and people closer than ever. As indoor wireless coverage only cannot meet user requirements, outdoor wireless coverage is also required more and more. ⚫ This course describes WLAN service characteristics of outdoor coverage scenarios, as well as methods, rules, and precautions for WLAN planning in these scenarios. 2 Huawei Confidential Objectives ⚫ 3 On completion of this course, you will be able to: Understand common service types and challenges in outdoor coverage scenarios. Master WLAN planning methods for outdoor coverage scenarios. Master WLAN deployment solutions for outdoor coverage scenarios. Huawei Confidential Contents 4 1. Introduction to Outdoor Coverage Scenarios 2. WLAN Planning Process in Outdoor Coverage Scenarios 3. WLAN Planning Solutions for Outdoor Coverage Scenarios Huawei Confidential Overview of Outdoor Coverage Scenarios The outdoor coverage environment is complex. Therefore, a proper network planning solution needs to be formulated based on the ⚫ actual situation. The outdoor coverage has the following characteristics: STAs: STAs mainly include mobile phones, tablets, and laptops which feature diversity and high mobility, and require high compatibility. Space: Outdoor scenarios typically involve large WLAN coverage areas, including squares and streets. Obstacles: Major obstacles in outdoor scenarios include buildings and trees. Other: In some areas, the operating environment for devices is harsh. Therefore, waterproof, dustproof, surge protection, and high and low temperature resistance requirements must be considered. Outdoor square 5 Huawei Confidential Outdoor street Challenges to WLANs in Outdoor Coverage Scenarios Large coverage area • • In outdoor scenarios, WLANs typically provide large signal Complex environments • Environments in outdoor scenarios are complex with • Many uncontrollable factors exist in outdoor scenarios, such as coverage and a single AP is different building layouts, and non-Wi-Fi interference, connected to a great number of STAs, thereby imposing high various obstacles, such as trees and large billboards. AP temporary personal hotspots, and weather. These factors cause requirements on AP performance. deployment positions are critical interference to WLANs, thereby In addition, if a temporary and need to be determined based on local conditions. As a result, reducing WLAN stability and performance. outdoor activity is held, burst WLAN planning and design are difficult. traffic is generated. In this case, additional APs need to be added temporarily to the existing WLAN to improve the concurrency capability. • Outdoor APs with external directional antennas are typically used, which increases the difficulty in AP installation. 6 Much interference Huawei Confidential Contents 7 1. Introduction to Outdoor Coverage Scenarios 2. WLAN Planning Process in Outdoor Coverage Scenarios 3. WLAN Planning Solutions for Outdoor Coverage Scenarios Huawei Confidential WLAN Planning Process for Outdoor Coverage Scenarios Requirements collection ⚫ Collect complete and comprehensive project and requirement Requirements collection information to provide basis for WLAN design. Site survey ⚫ Carry out a site survey and record more detailed information, such Site survey as the floor height, interference sources, and obstacles. Device selection ⚫ Determine the models of devices and antennas based on the Device selection collected information. Coverage design ⚫ Determine the coverage area and field strength requirements, and plan AP deployment positions. Coverage design Capacity design ⚫ Estimate the number of needed APs based on the number of access STAs and service requirements. 8 Huawei Confidential Capacity design Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Collecting Requirements for Outdoor Coverage Scenarios Requirement Type Description Drawing information Collect complete drawings that contain scale information in CAD, PDF, PNG, or JPG format, and learn about the general environment of the coverage area in advance. Coverage area Determine the VIP coverage areas (such as pedestrian streets and squares) and common coverage areas (such as passages between buildings) required by the customer. Field strength Determine requirements for the signal field strength in the coverage area. Generally, the signal field strength in outdoor VIP coverage areas is greater than or equal to –65 dBm, and that in common areas is greater than or equal to –70 dBm. Access STAs Determine the types and number of access STAs in the coverage area. Bandwidth requirements Buildings and trees Determine the main types of network services and per-user bandwidth requirement. Determine and record the layout of buildings and trees in the coverage area. Installation positions and power supply modes Determine the positions where APs can be installed, such as lamp poles or walls, and determine the available power supply facilities and areas. Switch positions Determine the locations of the uplink wired-side switches on the WLANs and check whether the PoE power supply distance meets the requirements. Interference sources Check whether interference sources such as city monitoring based on wireless backhaul and microwave stations exist. 9 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Site Survey in Outdoor Coverage Scenarios Site Survey Item Environment Description Obtain the environment information of the coverage area, such as the layout of surrounding buildings, trees, obstacles, and streets. AP installation position Check the installation positions of APs, such as high buildings, street lamp poles, and surveillance poles. Measure the height of the installation positions to check whether optical cables and power supplies can be connected. If proper installation positions do not exist, consider whether poles can be erected for AP installation. Interference sources Check whether there is interference caused by, for example, wireless backhaul, third-party Wi-Fi devices, and non-Wi-Fi devices. New obstacles Check whether the site is consistent with that on the floor plans and maps. If not, mark the inconsistent areas and take photos. For example, if there are obstacles such as trees onsite, mark the positions on the drawings. Site photos AP installation methods Switch positions Power supply cabling 10 Huawei Confidential Take photos of the site to record the environment and convey survey information. Outdoor APs are usually installed on poles or walls. Determine the positions of the uplink switches and mark them on the drawings. Mark PoE cables to be routed on the drawings. It is recommended that the length of a PoE cable be less than or equal to 80 m. It is recommended that the PoE adapter be used for power supply when the outdoor distance is too long. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Device Model Selection Factors Factor Description MIMO An AP typically supports 4 to 12 spatial streams. An AP with more spatial streams supports higher throughput and larger access capacity. Therefore, select APs with a proper number of spatial streams based on the application scenario and access density. Antenna Outdoor APs support omnidirectional and directional antennas. APs with omnidirectional antennas are recommended for coverage in open areas such as squares and parks. APs with directional antennas are recommended for coverage in narrow areas such as streets. Maximum transmit power (combined power) Limitations over the Wi-Fi transmit power vary depending on the country or region code. When the transmit power gets closer to the specified upper limit, the transmitted signal is stronger and the coverage distance is longer. For details, see the Country Codes and Channels Compliance in the product documentation. Antenna gain 11 A higher antenna gain indicates a stronger signal strength and longer coverage distance. Select antennas with a proper gain based on site requirements. Power supply mode The power supply mode depends on the deployment scenario. It is recommended that the PoE adapter be used for power supply when the outdoor distance is long. Wi-Fi standard The Wi-Fi standard has evolved to the sixth generation, and each generation is compatible with earlier ones. The latest Wi-Fi 6 standard greatly improves the Wi-Fi speed and capacity. Therefore, Wi-Fi 6 APs are recommended. Other features In outdoor scenarios, pay attention to special requirements for APs, such as waterproof and dustproof capabilities, operating temperature range, and surge protection. Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common APs in Outdoor Coverage Scenarios AP Model AirEngine 8760R-X1 AirEngine 8760R-X1E AirEngine 6760R-51 AirEngine 6760R-51E AirEngine 5761R-11 AirEngine 5761R-11E Appearance Antenna Built-in directional antennas External antennas Built-in directional antennas External antennas Built-in directional antennas External antennas MIMO 4+12/8+8/ 4+8+independent scanning 4+12/8+8/ 4+8+independent scanning 4+4 4+4 2+2 2+2 2.4 GHz Beamwidth (H/V) 180°/40° / 60°/40° / 65°/40° / 5 GHz Beamwidth (H/V) 180°/20° / 60°/20° / 65°/20° / Maximum Power Consumption 53.2 W (excluding PoE_OUT) 53.2 W (excluding PoE_OUT) 35.3 W 35.3 W 17.7 W 19.6 W RF port / Type N female connector / Type N female connector / Type N female connector Installation Mode Pole-mounted or wall-mounted Pole-mounted or wall-mounted Pole-mounted or wall-mounted Pole-mounted or wall-mounted Pole-mounted or wall-mounted Pole-mounted or wall-mounted Other Features IP68 waterproof and IP68 waterproof and IP68 waterproof and IP68 waterproof and IP68 waterproof and IP68 waterproof and dustproof, smart dustproof, BLE 5.0 dustproof, BLE 5.0 dustproof, BLE 5.0 dustproof, BLE 5.0 dustproof, BLE 5.0 antenna, and BLE 5.0 Note: The table lists some AP models. For details about other models, see the product documentation. 12 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common Antennas in Outdoor Coverage Scenarios Antenna Part Number 27013721 27012565 27013720 27010904 27011145 Model ANTDG0407A1NS ANTDG1211D4NR ANTDG0808D4NR AD24145D00 AD5G1915 Antenna Type Omnidirectional Directional Directional Directional Directional Radio 2.4 GHz and 5 GHz 2.4 GHz and 5 GHz 2.4 GHz and 5 GHz 2.4G 5G Gain (2.4 GHz/5 GHz, dBi) 4/7 12/11 8/8 14 19 Horizontal Beamwidth (2.4 GHz/5 GHz) 360/360 35/35 70/70 30/- -/15 Vertical Beamwidth (2.4 GHz/5 GHz) 30/15 26/26 70/70 30/- -/15 Dimensions (H x W x D) Diameter x Length: 23.8 mm x 235 mm 40 mm x 450 mm x 420 mm 40 mm x 220 mm x 220 mm 25 mm x 250 mm x 250 mm 30 mm x 450 mm x 245 mm Connector Type 1 x Type N female connector (vertically polarized) 4 x Type N female connector (dualpolarized) 4 x Type N female connector (dualpolarized) 2 x Type N female connector (dualpolarized) 2 x Type N female connector (dualpolarized) Note: The antennas listed on the table are used for AP models with external antennas. 13 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Precautions for Coverage Design in Outdoor Scenarios ⚫ In outdoor scenarios, APs are usually installed on poles or walls. It is recommended that APs and antennas be installed at a height of 3 m to 5 m. ⚫ In typical outdoor open areas (such as squares and parks), APs with external omnidirectional antennas connected are recommended. The coverage radius of a single AP ranges from 60 m to 80 m, and the distance between APs ranges from 100 m to 120 m equally in W-shaped mode. ⚫ APs with built-in directional antennas or APs with external directional antennas connected are recommended in typical long and narrow outdoor areas (such as pedestrian streets and long parking lots). The coverage distance of 120 m is recommended, and the maximum coverage distance cannot exceed 150 m. In single-side deployment, the coverage width of about 20 m is recommended, and the maximum coverage width cannot exceed 35 m for common APs. If AirEngine8760R-X1 is used, the coverage width of about 35 m is recommended and the maximum coverage width cannot exceed 60 m. (without EIRP restriction by default) Coverage width Coverage distance: 120 m AP with directional antennas 14 Huawei Confidential • Outdoor APs are used only for outdoor coverage and indoor APs are required for indoor coverage. • Outdoor omnidirectional whip antennas must be installed vertically (the antennas must be vertical to the ground). • Directional APs or directional antennas are recommended for roads around buildings, and coverage in the same direction is recommended. • Outdoor APs must not be blocked by obstacles such as trees, buildings, and billboards, and must be far away from interference sources. • Signals along the roads may be blocked by trees. It is recommended that the APs be installed on the surveillance poles. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common Services and Average Bandwidth in Outdoor Coverage Scenarios Single-Service Baseline Rate (Mbps) Proportion of Services Service Type Excellent Good Square Street Outdoor Parking Lot Web browsing 8 4 50% 60% 35% Streaming media (1080p) 16 12 10% 10% 20% VoIP 0.25 0.125 10% 10% 0% Gaming 2 1 10% 0% 30% Instant messaging 0.5 0.25 20% 20% 15% 6 8 8 Average Bandwidth in Each Scenario (Excellent, in Mbps) Note: The data above is based on experience and can be adjusted according to user bandwidth requirements. 15 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Number of Concurrent STAs on a Single AP ⚫ The number of concurrent STAs supported by an AP is used to calculate the number of required APs on the premise that the coverage and capacity requirements are met. For example: Two hundred STAs are connected to the network, with the concurrency rate of 30%. That is, services are running on only 60 STAs concurrently. When both APs and STAs comply with Wi-Fi 6, a single STA requires 8 Mbps bandwidth and a dual-band AP (4x4 MIMO) supports concurrent access of 30 STAs (2x2 MIMO). Therefore, two APs are required to meet the capacity requirement. ⚫ The following table lists the maximum number of concurrent STAs supported by a Wi-Fi 6 AP (4x4 MIMO, HE40) at different bandwidths. Maximum Number of Concurrent STAs (All STAs Support Wi-Fi 6 and Dual Spatial Streams) Supported by a Wi-Fi 6 AP (4x4 MIMO, HE40) No. Access Bandwidth Maximum Number of Concurrent STAs (Single-Radio) Maximum Number of Concurrent STAs (Dual-Radio) Maximum Number of Concurrent STAs (Triple-Radio) 1 2 Mbps 56 85 141 2 4 Mbps 39 56 95 3 6 Mbps 27 38 65 4 8 Mbps 21 30 51 5 16 Mbps 12 18 30 Note: The maximum number of concurrent STAs varies according to the AP model. 16 Huawei Confidential Contents 17 1. Introduction to Outdoor Coverage Scenarios 2. WLAN Planning Process in Outdoor Coverage Scenarios 3. WLAN Planning Solutions for Outdoor Coverage Scenarios Huawei Confidential Common Sub-scenarios in Outdoor Coverage Scenarios 18 Huawei Confidential Square Park Street Parking lot WLAN Construction Standards for Square and Park Scenarios Scenario description ⚫ ⚫ WLAN construction standards Service types: web browsing, HD video, instant messaging, etc. User density: about 1 per 50–100 square meters in peak hours ⚫ ⚫ ⚫ ⚫ ⚫ ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 6 Mbps Capacity KPI: 120 STAs on a single AP, 25% concurrency rate Coverage KPI: RSSI @ 95% area ≥ –70 dBm Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Recommended AP Type Installation Mode Deployment Solution Large Outdoor AP with external omnidirectional antennas Polemounted Deploy APs in W-shaped mode at an equal spacing of 120 m. Channel planning: HE20 @ 2.4 GHz, HE20 or HE40 @ 5 GHz Large Outdoor APs with builtin directional antennas or with external directional antennas Polemounted Common APs are deployed at an equal distance of 20-30 m. AirEngine8760R-X1 APs are deployed at an equal spacing of 35 m to 50 m. Channel planning: HE20 @ 2.4 GHz, HE20 or HE40 @ 5 GHz Scenario Aesthetics Capacity Coverage Squares and parks (planeshaped deployment) Medium Medium Squares and parks (single-side deployment) Medium Medium 19 Huawei Confidential Deployment Solutions for Squares and Parks Suggestions for WLAN planning and deployment ⚫ In squares and parks with large areas and many available locations, outdoor APs with external omnidirectional antennas connected can be used with a distance of no more than 120 m. ⚫ When squares and parks are rectangular (width < 120 m), APs can be deployed on one side. When APs with built-in directional antennas are used, the distance between APs is 20 m to 30 m. When AirEngine 8760R-X1 models are used, the distance between APs is 35 m to 50 m. In single-side deployment mode, it is recommended that the AP coverage distance be within 120 m. ⚫ If there are EIRP restrictions, evaluate the coverage distance based on the local restrictions of different country or region codes. 120 m 120 m 120 m 120 m Solution A: Plane-shaped deployment 20 Huawei Confidential Width < 120 m 35–50 m 35–50 m Solution B: Single-side deployment (AirEngine 8760R-X1) WLAN Construction Standards for Street Scenarios Scenario description WLAN construction standards ⚫ Service types: web browsing, HD video, instant messaging, etc. ⚫ User density: about 1 per 10–20 square meters in peak hours ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 6 Mbps ⚫ Capacity KPI: 100 STAs on a single AP, 30% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –70 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution 21 Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode Deployment Solution Street Medium Medium Large Outdoor APs with built-in directional antennas or with external directional antennas Pole-mounted or wall-mounted Deploy APs at an equal spacing of 100 m. Channel planning: HE20 @ 2.4 GHz, HE20 or HE40 @ 5 GHz Huawei Confidential WLAN Deployment Solution for Street Scenarios Suggestions for WLAN planning and deployment ⚫ APs with directional antennas are used to cover streets to reduce radio interference to buildings on both sides of the streets. The distance between APs is about 100 m. Adjust the antenna angle to cover streets. ⚫ APs with built-in directional antennas are aesthetically pleasing and easy to deploy. The antennas do not need to be installed but cannot be replaced and be used in complex scenarios. APs with external directional antennas connected can be flexibly used in various complex scenarios. 100 m 100 m 100 m Coverage area Street Street scenario 22 Huawei Confidential 100 m WLAN Construction Standards for Outdoor Parking Lot Scenarios Scenario description ⚫ ⚫ WLAN construction standards Service types: web browsing, HD video, instant messaging, etc. User density: about 1 per 100–200 square meters in peak hours ⚫ ⚫ ⚫ ⚫ ⚫ ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 8 Mbps Capacity KPI: 60 STAs on a single AP, 50% concurrency rate Coverage KPI: RSSI @ 95% area ≥ –70 dBm Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode Deployment Solution Deploy APs in W-shaped mode at an equal spacing of 120 m. Channel planning: HE20 @ 2.4 GHz, HE20 or HE40 @ 5 GHz Parking lot without surrounding buildings Low Medium Medium Outdoor AP with external omnidirectional antennas Pole-mounted Parking lot with surrounding buildings Low Medium Medium Outdoor APs with built-in directional antennas or with external directional antennas Deploy APs at an equal spacing of 100 m. Pole-mounted or Channel planning: HE20 @ 2.4 GHz, HE20 wall-mounted or HE40 @ 5 GHz 23 Huawei Confidential WLAN Deployment Solution for Outdoor Parking Lots Without Surrounding Buildings Suggestions for WLAN planning and deployment ⚫ If there are no buildings around an outdoor parking lot, outdoor APs with external omnidirectional antennas connected can be installed on poles with an equal spacing of about 120 m in W-shaped mode. ⚫ APs must be installed away from obstacles, such as trees and walls. Existing street lamp poles and surveillance poles, or new erected poles can be used for AP installation. 120 m 120 m 120 m 24 Huawei Confidential ... ... 120 m 120 m 120 m 120 m WLAN Deployment Solution for Outdoor Parking Lots With Surrounding Buildings Suggestions for WLAN planning and deployment ⚫ If there are buildings around an outdoor parking lot, APs with directional antennas can be installed on poles with an equal spacing of 100 m to reduce interference to indoor areas. ⚫ APs must be installed away from obstacles, such as trees and walls. Existing street lamp poles and surveillance poles, or new erected poles can be used for AP installation. APs can also be installed on walls if conditions permit. 100 m Coverage area Building Coverage area 100 m 25 Huawei Confidential Quiz 1. (Multiple-Answer Question) Which of the following types of antennas are recommended for wireless coverage in long and narrow outdoor areas (such as pedestrian streets and long parking lots)? ( ) A. Built-in directional antennas B. External directional antennas C. Built-in omnidirectional antennas D. External omnidirectional antennas 26 1. AB Huawei Confidential Summary ⚫ This course describes the characteristics of each sub-scenario in outdoor coverage scenarios, including squares, parks, streets, and parking lots. WLAN construction standards and planning rules vary according to sub-scenarios and relevant WLAN planning solutions are different as well. This course also provides suggestions on WLAN planning and deployment for common outdoor coverage sub-scenarios, facilitating WLAN solution design in WLAN projects relating to outdoor coverage scenarios. ⚫ On completion of this course, you will have a basic understanding of the WLAN planning process and master the WLAN design methods for each sub-scenario. 27 Huawei Confidential Recommendations ⚫ 28 Huawei official websites: Enterprise service: https://e.huawei.com/en/ Technical support: https://support.huawei.com/enterprise/en/index.html Online learning: https://www.huawei.com/en/learning Huawei Confidential Thank you. Bring digital to every person, home, and organization for a fully connected, intelligent world. Copyright © 2022 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice. WLAN Planning for Outdoor Backhaul Scenarios Foreword ⚫ In some harsh environments facing difficult wired network construction and high costs, wireless backhaul becomes the optimal choice for fast network connectivity. Among wireless solutions, Wi-Fi has advantages such as proper bandwidth, long backhaul distance, and low costs. These make Wi-Fi the best way to carry the last mile of the video security network. ⚫ This course describes WLAN service characteristics of outdoor backhaul scenarios, as well as methods, rules, and precautions for WLAN planning in these scenarios. 2 Huawei Confidential Objectives ⚫ 3 On completion of this course, you will be able to: Describe common services, characteristics, and challenges in outdoor backhaul scenarios. Understand AP and antenna selection policies in outdoor backhaul scenarios. Understand how to calculate the mesh link bandwidth in outdoor backhaul scenarios. Describe the WLAN planning process in outdoor backhaul scenarios. Master WLAN deployment solutions for outdoor backhaul scenarios. Huawei Confidential Contents 4 1. Introduction to Outdoor Backhaul Scenarios 2. WLAN Planning Process in Outdoor Backhaul Scenarios 3. WLAN Planning Solutions in Outdoor Backhaul Scenarios Huawei Confidential Overview of Outdoor Backhaul Scenarios Wireless backhaul refers to the wireless bridging between APs in mesh networking. It allows wireless local area ⚫ networks (WLANs) to be constructed in places where optical fibers and network cables are unavailable. Outdoor backhaul scenarios have the following characteristics: ⚫ In open outdoor scenarios, bridge APs can reach each other in line of sight (LOS) mode without obstacles between. The networking is flexible. You can select the point-to-point (P2P) or point-to-multipoint (P2MP) networking scheme based on the site requirements. Port 5 Huawei Confidential Oil field Challenges in Outdoor Backhaul Scenarios High network quality requirements Complex environments • • Outdoor backhaul can be used in multiple industries, involving backhaul. As the number and difficult deployment. definition of cameras increase, higher bandwidth is required for There may be irresistible backhaul links. • Outdoor backhaul uses the mesh networking architecture, which is flexible and has high technical requirements. • Due to the complex environment, Services such as voice and real- high requirements are imposed on engineers in terms of links, affecting the backhaul time control also have high device/antenna selection and function. requirements on network quality, such as low delay and low jitter. antenna alignment. Uncontrollable interference factors may exist in outdoor environments, affecting backhaul signals. 6 A common type of service in outdoor backhaul is video complex environments and obstacles (such as buildings and mountains) on the backhaul • • High deployment requirements Huawei Confidential • Contents 7 1. Introduction to Outdoor Backhaul Scenarios 2. WLAN Planning Process in Outdoor Backhaul Scenarios 3. WLAN Planning Solutions in Outdoor Backhaul Scenarios Huawei Confidential WLAN Planning Process in Outdoor Backhaul Scenarios Requirements collection ⚫ Collect complete and comprehensive project and requirement information to provide Requirements collection basis for WLAN design. Site survey ⚫ Carry out a site survey and record more detailed information, such as the backhaul Site survey distance, AP positions, and obstacles. Link design ⚫ Link design Determine the mesh network topology, such as P2P or P2MP. Device selection ⚫ Determine the models of devices and antennas based on the collected information. Device selection Bandwidth design ⚫ Determine the backhaul link bandwidth based on the device model, coverage distance, and service requirements. 8 Huawei Confidential Bandwidth design Requirements Collection Site Survey Link Design Device Selection Bandwidth Design Requirements Collection in Outdoor Backhaul Scenarios Requirement Type Description Drawing information Collect complete drawings that contain scale information in CAD, PDF, PNG, or JPG format. Learn about the general environment of the coverage area and deployment area in advance. Coverage area Determine the coverage area required by the current scenario. Field strength Determine the signal field strength requirements in the coverage area. Access STAs Determine the types and number of access STAs in the coverage area. Bandwidth Determine the main types of network services and per-user bandwidth requirement. Buildings and trees Determine and record the layout of buildings and trees in the coverage area, and check whether there are obvious obstacles in the signal propagation path. Installation position and power supply mode Determine the positions where APs can be installed, and determine the available power supply facilities and areas. Switch location Determine the locations of upstream switches and check whether the PoE power supply distance meets the requirements. Interference source Other 9 Huawei Confidential Check whether there are other interference sources. Check whether there are restrictions on outdoor site construction, for example, whether outdoor sites can be deployed on the rooftop of a building. Requirements Collection Site Survey Link Design Device Selection Bandwidth Design Site Survey in Outdoor Backhaul Scenarios Site Survey Item Description Environment Check whether there are obvious obstacles on the propagation path between the MPP and MP, such as high-rise buildings, mountains, and trees. Mark the location and size information on the drawing. AP installation position Check the installation positions of APs, such as high buildings, street lamp poles, and monitoring poles. Measure the heights of these positions and check whether optical cables and power supplies can be connected. If no installation condition is available, check whether new poles can be installed. Interference source Check whether there are interference sources, for example, wireless backhaul, Wi-Fi devices of other vendors, and non-Wi-Fi devices. New obstacles Site photos AP installation mode Switch location 10 Check whether the site is consistent with that on the floor plans and maps. If not, mark the inconsistent areas and take photos. For example, if there are new obstacles onsite (such as trees), mark the positions of the obstacles on the drawings. Take photos of the site to record the environment and convey survey information. Outdoor APs are usually installed on poles or walls. Determine the locations of uplink switches and mark them on the drawings. Power supply cabling Mark the PoE power supply cabling on the drawings. A PoE adapter is recommended for power supply if the outdoor distance is long. Special requirements Record the customer's special requirements, such as network delay requirements, packet loss rate requirements, and site construction restrictions. Huawei Confidential Requirements Collection Site Survey Link Design Device Selection Bandwidth Design Site Construction Rules ⚫ Install APs (also called sites) far away from strong-current and strong-magnetic areas, such as radar stations and high-voltage substations. ⚫ Scan Wi-Fi interference channels near a site. Do not configure backhaul channels the same as interference channels, or disable interference sources through coordination. ⚫ If obstacles exist on the backhaul path, the AP pole height equals the obstacle height plus the Fresnel radius. AP1 Fresnel zone Backhaul distance (d) AP2 Backhaul Distance d (km) 1 2 3 4 5 Fresnel Radius r (m) (Rounded Up) 4 6 7 8 9 Fresnel radius (r) Obstacle height * Take the 5 GHz frequency band as an example. 11 Huawei Confidential • If the Fresnel zone is blocked by obstacles, the actual bandwidth is calculated as follows: Actual bandwidth = Theoretical bandwidth without obstacles x [1 – (Blocked length of the Fresnel zone/2r)], where r indicates the radius of the Fresnel zone. Requirements Collection Site Survey Link Design Device Selection Bandwidth Design Backhaul Link Design P2P backhaul • P2MP backhaul Each mesh point portal (MPP) establishes a backhaul link with only one mesh point (MP). • One MP exclusively uses backhaul link bandwidth, providing high throughput. • The P2P transmission distance should not exceed 5 km. • Each MPP establishes backhaul links with multiple MPs. • Multiple MPs share backhaul link bandwidth, providing low throughput. • If the MPP-MP distance is less than or equal to 1 km, it is recommended that an MPP connect to six MPs at most. • If the MPP-MP distance ranges from 1 km to 3 km, it is recommended that an MPP connect to three MPs at most. • If the MPP-MP distance exceeds 3 km, P2MP transmission is not recommended. MP1 Backhaul link 1 MPP Backhaul link MP MPP MP2 Backhaul link 2 P2P backhaul 12 P2MP backhaul Huawei Confidential • The backhaul distance varies according to the version, model, and antenna model. During project implementation, select the P2P or P2MP backhaul mode based on the site requirements. Requirements Collection Site Survey Link Design Device Selection Bandwidth Design Channel Planning for Backhaul Links ⚫ Channel planning in outdoor backhaul scenarios must comply with local laws and regulations. Do not use radar channels. ⚫ The 2.4 GHz channels suffer from great interference. Therefore, the 5 GHz frequency band is recommended in backhaul scenarios. ⚫ In backhaul scenarios, the backhaul channels of the MPP and MP must be the same. For example, if the MPP uses channel 149, an MP connected to the MPP must also use channel 149. MP Mesh link 1 Channel 149 MPP Channel 149 Mesh link 2 MP Channel 149 13 Huawei Confidential Requirements Collection Site Survey Link Design Device Selection Bandwidth Design Device Selection Factors Factor Description MIMO An AP typically supports 4 to 12 spatial streams. An AP with more spatial streams supports higher throughput and larger access capacity. Therefore, select APs with a proper number of spatial streams based on the application scenario and access density. Antenna Directional antennas are used for long-distance wireless backhaul. The main lobes of antennas on the MPP must cover all MPs' antennas. Omnidirectional antennas are used for short-distance wireless backhaul. Maximum transmit power (combined power) Limitations over the Wi-Fi transmit power vary depending on the country or region code. When the transmit power gets closer to the specified upper limit, the transmitted signal is stronger and the coverage distance is longer. For details, see the Country Codes and Channels Compliance in the product documentation. Antenna gain A larger antenna gain indicates stronger signals and a longer backhaul distance. However, a larger antenna gain also indicates a smaller antenna angle and fewer MPs that can be covered by an MPP. Therefore, select proper antennas based on specific scenarios. Power supply mode The power supply modes vary according to the deployment scenarios. Currently, PoE is used in most scenarios. In other scenarios, the DC power supply can be used, or both power supply modes can be used together for mutual backup. Ensure that the power consumption of APs matches the power supply capability of PoE switches. Wi-Fi standard The Wi-Fi standard has evolved to the sixth generation, and each generation is compatible with earlier ones. The latest Wi-Fi 6 standard greatly improves the Wi-Fi speed and capacity. Therefore, Wi-Fi 6 APs are recommended. 14 Huawei Confidential Requirements Collection Site Survey Link Design Device Selection Bandwidth Design Common APs in Outdoor Backhaul Scenarios (1/2) AP Model AirEngine 8760R-X1 AirEngine 6760R-51 AirEngine 5761R-11 Appearance MIMO 4+8 4+4 2+2 Antenna Built-in directional antennas Built-in directional antennas Built-in directional antennas Maximum Transmit Power (Combined Power) 33 dBm/33 dBm 30 dBm/30 dBm 28 dBm/27 dBm Antenna Gain 10 dBi/11 dBi 10 dBi/11 dBi 10 dBi/11 dBi Maximum Power Consumption 53.2 W (excluding PoE OUT) 35.3 W 17.7 W Power Supply Mode PoE (802.3bt) PoE (802.3at/bt) PoE (802.3at/af) Other Features Wi-Fi 6, smart antenna, BLE 5.0 Wi-Fi 6, smart antenna, BLE 5.0 Wi-Fi 6, smart antenna, BLE 5.0 * Note: The table lists some AP models. For details about other models, see the product documentation. 15 Huawei Confidential Requirements Collection Site Survey Link Design Device Selection Bandwidth Design Common APs in Outdoor Backhaul Scenarios (2/2) AP Model AirEngine 8760R-X1E AirEngine 6760R-51E AirEngine 5761R-11E 8+8/4+4+4 4+4 2.4 GHz (2x2) + 5 GHz (2x2) Or 5 GHz (2x2) + 5 GHz (2x2) Antenna External antennas External antennas External antennas Maximum Transmit Power (Combined Power) 33 dBm/33 dBm 30 dBm/30 dBm 28 dBm/27 dBm Antenna Gain Depending on the antenna Depending on the antenna Depending on the antenna Maximum Power Consumption 53.2 W (excluding PoE OUT) 35.3 W 19.6 W Appearance MIMO Power Supply Mode PoE++ (802.3bt) PoE++ (802.3bt) PoE+ (802.3at) Other Features Wi-Fi 6, IP68 waterproof and dustproof, Ethernet port surge protection, antenna surge protection, BLE 5.0 Wi-Fi 6, IP68 waterproof and dustproof, Ethernet port surge protection, antenna surge protection, BLE 5.0 Wi-Fi 6, IP68 waterproof and dustproof, Ethernet port surge protection, antenna surge protection, BLE 5.0 * Note: The table lists some AP models. For details about other models, see the product documentation. 16 Huawei Confidential Requirements Collection Site Survey Link Design Device Selection Bandwidth Design Common Antennas in Outdoor Backhaul Scenarios Antenna Part Number 27013721 27010904 27010906 27010889 27010890 Model ANTDG0407A1NS AD24145D00 AD515145D00 ASB115G00 ASB185G00 Antenna Type External directional antenna External directional antenna External directional antenna External directional antenna Directional antenna Radios 2.4 GHz and 5 GHz 5 GHz 5 GHz 5 GHz 5 GHz Gain (2.4 GHz/5 GHz) 12 dBi/7 dBi -/14 dBi -/14 dBi -/11.5 dBi -/19 dBi Horizontal Beamwidth (2.4 GHz/5 GHz) 360°/360° -/30° -/32° -/60° -/15° Vertical Beamwidth (2.4 GHz/5 GHz) 35°/15° -/30° -/32° -/30° -/15° Dimensions (H x W x D) Diameter x Height: 23.8 mm x 235 mm 25 mm x 250 mm x 250 mm 25 mm x 220 mm x 120 mm 55 mm x 230 mm x 145 mm 25 mm x 250 mm x 250 mm Connector Type 1 x Type N male connector (singlepolarized) 2 x Type N female connector (dualpolarized) 2 x Type N female connector (dualpolarized) 2 x Type N female connector (dualpolarized) 2 x Type N female connector (dualpolarized) Remarks Directly installed on the AP Pole mounting Pole mounting Pole mounting Pole mounting * Note: The antennas listed on the table are used for AP models with external antennas. 17 Huawei Confidential Requirements Collection Site Survey Link Design Device Selection Bandwidth Design Backhaul Antenna Selection Rules ⚫ If the MPP-MP distance is less than 500 m, the number of MPs is large, and the distribution angle is large, use omnidirectional antennas for the MPP. ⚫ If the MPP-MP distance is greater than 500 m, the number of MPs is small, and the angles and directions are centralized, use directional antennas for the MPP. ⚫ When directional antennas are used for the MPP, ensure that the main lobes of antennas on the MPP cover all MPs' antennas. ⚫ High-gain antennas are recommended for MPs to improve the signal strength. You only need to align MPs' antennas with the MPP's antennas during installation. MP1 MP2 MPP MPP Directional antennas for the MPP Omnidirectional antennas for the MPP MP3 18 Huawei Confidential MP1 MP4 Long distance and centralized MP distribution MP2 Requirements Collection Site Survey Link Design Device Selection Bandwidth Design Antenna Alignment Method Antenna azimuth measurement • • • 19 Import a floor plan drawing to the WLAN Planner. Use the ranging function of the tool to measure the azimuths from the MPP to MPs and from the MPs to the MPP. (Note: Ensure that the top of the drawing directs to the due north.) When there is only one MP, the measurement result can be used as the azimuth of the MPP and MP. When there are multiple MPs, the azimuth of the MPP is calculated as follows: Measure the azimuth from the MPP to each MP and record the maximum angle (X) and minimum angle (Y). When the difference between X and Y is less than 180°: MPP antenna angle = (X + Y)/2 When the difference between X and Y is greater than 180°: MPP antenna angle = (X + Y)/2 + 180° Huawei Confidential Preliminary alignment • • Use a compass tool to adjust the MPP antenna to the corresponding angle based on the obtained MPP antenna angle. Based on the obtained MP antenna angle, use the compass tool to adjust the MP antenna to the corresponding angle to align it with the MPP. Fine-tuning • • • MP1 antenna MPP antenna Lobe MP2 antenna Lobe Lobe Use the antenna alignment function of the CloudCampus APP to fine-tune the antenna angle. Start the CloudCampus APP, connect to the MP, fine-tune the MP antenna angle, and observe the signal strength change to find the angle when the optimal signal is received. In most cases, you only need to slightly adjust the angle of the MP antenna to align it with the MPP. Requirements Collection Site Survey Link Design Device Selection Bandwidth Design Bandwidth Design — P2P Scenario ⚫ In P2P scenarios, the actual bandwidth of a mesh link is related to the MIMO capability, antenna gain, backhaul distance, frequency bandwidth, interference, and environment. Determine the backhaul link bandwidth based on the device model, coverage distance, and service requirements. Throughput Reference for P2P Backhaul Links (Wi-Fi 6, 5 GHz Backhaul, AirEngine 8700R or 6700R Series, 21 dBm) MIMO Antenna Gain MPP MP 7 dBi-360 deg 16 dBi-18 deg 4x4 11 dBi-60 deg 16 dBi-18 deg 16 dBi-18 deg 16 dBi-18 deg HE40 RSSI & Throughput (Mbps) HE80 RSSI & Throughput (Mbps) 100 m 200 m 500 m 1 km 100 m 200 m 500 m 1 km –38 dBm –46 dBm –56 dBm –64 dBm –38 dBm –46 dBm –56 dBm –64 dBm 270 240 200 160 550 500 380 250 –34 dBm –42 dBm –52 dBm –60 dBm –34 dBm –42 dBm –52 dBm –60 dBm 270 250 240 180 550 500 420 380 –29 dBm –37 dBm –47 dBm –55 dBm –29 dBm –37 dBm –47 dBm –55 dBm 270 270 240 240 550 550 500 420 * The preceding data is the bandwidth reference values for the AirEngine 8700R and AirEngine 6700R series working at the 21 dBm power in suburban and rural areas. The EIRP restriction is not considered. 20 Huawei Confidential • To estimate bandwidth at a transmission distance between two distance values listed in the table, refer to the bandwidth value of the larger distance. For example, to estimate bandwidth value at a distance of 400 m, refer to the bandwidth value at a transmission distance of 500 m. Requirements Collection Site Survey Link Design Device Selection Bandwidth Design Bandwidth Design — P2MP Scenario ⚫ The throughput of P2MP transmission is multiplied by the throughput impact factor based on the P2P transmission performance. The throughput impact factor is related to the MPP:MP ratio. The following table lists the specific ratios. Throughput Impact Factor ⚫ The following is an example of bandwidth calculation in the P2MP scenario: MPP:MP MPP MP 1:1 1 1 1:2 0.8 0.40 1:3 0.75 0.25 A video backhaul scenario uses the P2MP networking topology, where one MPP sets up backhaul links with three MPs. Assuming that the bandwidth of a P2P backhaul link is 320 Mbps, the P2MP bandwidth is calculated as follows: ⚫ 1:4 0.7 0.18 1:5 0.65 0.13 1:6 0.6 0.10 MPP's total bandwidth = 320 x 0.75 = 240 Mbps Bandwidth of each MP = 320 x 0.25 = 80 Mbps If the bandwidth does not meet service requirements, use high-bandwidth channels, shorten the mesh backhaul distance, use high-gain antennas, or reduce the MPP:MP ratio to increase the backhaul link 21 Huawei Confidential bandwidth. Contents 22 1. Introduction to Outdoor Backhaul Scenarios 2. WLAN Planning Process in Outdoor Backhaul Scenarios 3. WLAN Planning Solutions in Outdoor Backhaul Scenarios Huawei Confidential Common Sub-scenarios in Outdoor Backhaul Scenarios 23 Port (Quay crane) Metal mine haulageway Steel plant (Bridge crane) Wind farm (Engineering vehicle inspection) Huawei Confidential WLAN Deployment Solution for Port Backhaul Scenarios (1/2) Scenario description Scenario Typical Backhaul Distance Port (Quay crane) 0.1–3 km Service on the Mesh Network Bandwidth (Mbps) 2.4 GHz Number of STAs Coverage Per Bridge Crane Video security (720p and 1080p) 4–8 No 4 SMS (non-real-time control) 2 Yes 1 Bandwidth per Number of Bridge Crane Bridge Cranes About 35 Mbps ≤ 20 Networking Topology P2MP Recommended solution Node Type Device Type AP MPP Backhaul antenna AP MP Product Model Frequency Bandwidth Backhaul Throughput MPP:MP = 1:3 MPP:MP = 1:6 187.5 Mbps 150 Mbps 62.5 Mbps 25 Mbps Latency Packet Loss Rate < 20 ms < 0.1% AirEngine 5761R-11E 27010906 outdoor 5 GHz dual-polarized directional antenna (H32 V32 G14) AirEngine 5761R-11E Backhaul antenna 27010890 outdoor 5 GHz dual-polarized directional antenna (H15 V15 G19) Coverage antenna 27013721 outdoor 2.4 GHz & 5 GHz single-polarized omnidirectional antenna (H360 V30 G4 & H360 V15 G7) 80 MHz * The backhaul throughput in the table is calculated based on the P2P rate of 250 Mbps. The actual backhaul throughput is subject to the measurement result. 24 Huawei Confidential • The quay crane is also called container crane on the shore. It is a professional device for loading and unloading container ships and is usually installed on the shore of a container terminal. WLAN Deployment Solution for Port Backhaul Scenarios (2/2) Suggestions for WLAN planning and deployment ⚫ In a port (quay crane) backhaul scenario, the MPP-MP distance is usually less than 3 km, and the P2MP networking topology is used. ⚫ An MPP is installed on a lamp pole and connects to an uplink switch through optical fibers or network cables. MPs are installed on the quay cranes to provide wireless data backhaul and Internet access services for STAs. ⚫ Backhaul channel: HE80 @ 5 GHz; coverage channel: HE20 @ 2.4 GHz. Small-angle high-gain directional antennas are used as backhaul antennas, and omnidirectional antennas are used as coverage antennas. MP1 MPP 5 GHz backhaul antenna 2.4 GHz & 5 GHz coverage antenna 25 Huawei Confidential Distance ≤ 3 km, frequency bandwidth ≤ 80 MHz MP2 MP3 Port (quay crane) backhaul deployment solution (P2MP) WLAN Deployment Solution for Metal Mine Haulageway Backhaul Scenarios (1/2) Scenario description Scenario Typical Backhaul Distance Service on the Mesh Network Metal mine haulageway 10–200 m Video backhaul of dashcams Bandwidth 2.4 GHz Number of STAs (Mbps) Coverage on Each Node 4 Yes 2 Bandwidth per Node Number of Mining Vehicles Networking Topology About 10 Mbps ≤ 20 P2MP Recommended solution Node Type Device Type AP MPP Backhaul antenna AP MP Product Model Frequency Bandwidth Backhaul Throughput MPP:MP = 1:3 MPP:MP = 1:6 412.5 Mbps 330 Mbps 137.5 Mbps 55 Mbps Latency Packet Loss Rate < 20 ms < 0.1% AirEngine 5761R-11E 27010906 outdoor 5 GHz dual-polarized directional antenna (H32 V32 G14) AirEngine 5761R-11E Backhaul antenna 27010890 outdoor 5 GHz dual-polarized directional antenna (H15 V15 G19) Coverage antenna 27010904 outdoor 2.4 GHz dual-polarized directional antenna (H30 V30 G14) 80 MHz * The backhaul throughput in the table is calculated based on the P2P rate of 550 Mbps. The actual backhaul throughput is subject to the measurement result. 26 Huawei Confidential WLAN Deployment Solution for Metal Mine Haulageway Backhaul Scenarios (2/2) Suggestions for WLAN planning and deployment ⚫ ⚫ ⚫ In a metal mine haulageway backhaul scenario, the MPP-MP distance is generally less than 200 m, and the P2MP networking topology is used. An MPP is installed on a wall and connects to an uplink switch through optical fibers or network cables. MPs are installed on the wall of the drivage drift to provide wireless data backhaul and Internet access services for STAs. Backhaul channel: HE80 @ 5 GHz; coverage channel: HE20 @ 2.4 GHz. Directional antennas are used for backhaul and coverage considering that the haulageway space is narrow. MP1 MPP 5 GHz backhaul antenna 2.4 GHz & 5 GHz coverage antenna 27 Distance ≤ 200 m, frequency bandwidth ≤ 80 MHz MP2 MP3 Metal mine haulageway backhaul deployment solution (P2MP) Huawei Confidential • In haulageway scenarios, mesh backhaul must be available in LOS. When signals are blocked by curves, relay nodes need to be added, which must be supported by the AP version (V200R022 recommended). WLAN Deployment Solution for Steel Plant Backhaul Scenarios (1/2) Scenario description Scenario Typical Backhaul Distance Steel plant (Bridge crane) 10–500 m Service on the Mesh Network Bandwidth 2.4 GHz Number of STAs (Mbps) Coverage on Each Node Video security (720p and 1080p) 4–8 No 4 SMS (non-real-time control) 2 Yes 1 Bandwidth per Node Number of Networking Bridge Cranes Topology About 35 Mbps 1 P2P Recommended solution Node Type Device Type AP MPP Backhaul antenna AP MP Product Model Frequency Bandwidth Backhaul Throughput MPP:MP = 1:1 Latency Packet Loss Rate < 20 ms < 0.1% AirEngine 5761R-11E 420 Mbps 27010889 outdoor 5 GHz dual-polarized directional antenna (H60 V30 G11.5) AirEngine 5761R-11E Backhaul antenna 27010890 outdoor 5 GHz dual-polarized directional antenna (H15 V15 G19) Coverage antenna 27013721 outdoor 2.4 GHz & 5 GHz single-polarized omnidirectional antenna (H360 V30 G4 & H360 V15 G7) 80 MHz 420 Mbps * The backhaul throughput in the table is calculated based on the P2P rate of 420 Mbps. The actual backhaul throughput is subject to the measurement result. 28 Huawei Confidential WLAN Deployment Solution for Steel Plant Backhaul Scenarios (2/2) Suggestions for WLAN planning and deployment ⚫ In a steel plant (bridge crane) backhaul scenario, the MPP-MP distance is usually no more than 500 m, and the P2P networking topology is recommended. ⚫ An MPP is installed on the wall of a shop floor and connects to an uplink switch through optical fibers or network cables. An MP is installed on a bridge crane to provide wireless data backhaul and Internet access services for STAs. ⚫ The bridge crane moves along the driving track. Because the moving distance is relatively short, roaming does not need to be considered. ⚫ Backhaul channel: HE80 @ 5 GHz; coverage channel: HE20 @ 2.4 GHz. MPP Distance ≤ 500 m, frequency bandwidth ≤ 80 MHz MP Steel plant (bridge crane) backhaul deployment solution (P2P) 29 Huawei Confidential 5 GHz backhaul antenna 2.4 GHz & 5 GHz coverage antenna WLAN Deployment Solution for Wind Farm Backhaul Scenarios (1/2) Scenario description Scenario Typical Backhaul Distance Wind farm (Engineering vehicle inspection) 0.1–1 km Service on the Mesh Network Bandwidth (Mbps) 2.4 GHz Coverage Number of STAs on Each Node O&M inspection (voice call, video, etc.) 4 Yes 2 O&M inspection (text, image, etc.) 2 Yes 2 Bandwidth per Node Number of Inspection Vehicles Networking Topology About 12 Mbps 1 P2P Recommended solution Node Type Device Type AP MPP Backhaul antenna AP MP Product Model Backhaul Throughput Frequency Bandwidth MPP:MP = 1:1 MPP:MP = 1:2 Latency Packet Loss Rate < 20 ms < 0.1% AirEngine 5761R-11E 27010889 outdoor 5 GHz dual-polarized directional antenna (H60 V30 G11.5) AirEngine 5761R-11E Backhaul antenna 27013721 outdoor 2.4 GHz & 5 GHz single-polarized omnidirectional antenna (H360 V30 G4 & H360 V15 G7) Coverage antenna 27013721 outdoor 2.4 GHz & 5 GHz single-polarized omnidirectional antenna (H360 V30 G4 & H360 V15 G7) 80 Mbps 64 Mbps 80 Mbps 32 Mbps 80 MHz * The backhaul throughput in the table is calculated based on the P2P rate of 80 Mbps. The actual backhaul throughput is subject to the measurement result. 30 Huawei Confidential WLAN Deployment Solution for Wind Farm Backhaul Scenarios (2/2) Suggestions for WLAN planning and deployment ⚫ In a wind farm (engineering vehicle inspection) backhaul scenario, the P2P backhaul distance between the MPP and MP does not exceed 1 km, and the P2P networking topology is used. ⚫ An MPP is installed at the bottom of a wind turbine tower and connects to an uplink switch through optical fibers or network cables. An MP is installed on an engineering vehicle to provide wireless data backhaul and Internet access services for STAs. ⚫ Backhaul channel: HE80 @ 5 GHz; coverage channel: HE20 @ 2.4 GHz. The MP uses omnidirectional antennas for backhaul. ⚫ The engineering vehicle inspects the entire wind farm area along the road. During the process, the MP switches between different MPP nodes (disconnection and reconnection). MPP Distance ≤ 1 km, frequency bandwidth ≤ 80 MHz MP Wind farm (engineering vehicle inspection) backhaul deployment solution (P2P) 5 GHz backhaul antenna 2.4 GHz & 5 GHz backhaul/coverage antenna 31 Huawei Confidential Quiz 1. (Single-answer question) In outdoor backhaul scenarios, if the P2MP networking topology is used, with how many MPs should an MPP set up backhaul links at most? ( A. 2 B. 4 C. 6 D. 8 32 1. C Huawei Confidential ) Summary ⚫ This course describes the characteristics of outdoor backhaul scenarios, including ports, metal mine haulageways, steel plants, and wind farms. WLAN construction standards and planning rules vary according to sub-scenarios and relevant WLAN planning solutions are different as well. This course also provides suggestions on WLAN planning and deployment for common outdoor backhaul sub-scenarios, facilitating WLAN solution design in WLAN projects relating to outdoor backhaul scenarios. ⚫ On completion of this course, you will have a basic understanding of the WLAN planning process and master the WLAN design methods for each sub-scenario. 33 Huawei Confidential Recommendations ⚫ 34 Huawei official websites: Enterprise service: https://e.huawei.com/en/ Technical support: https://support.huawei.com/enterprise/en/index.html Online learning: https://www.huawei.com/en/learning Huawei Confidential Thank you. 把数字世界带入每个人、每个家庭、 每个组织,构建万物互联的智能世界。 Bring digital to every person, home, and organization for a fully connected, intelligent world. Copyright© 2022 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice. WLAN Planning for High-Density Scenarios Foreword ⚫ With the popularization of Wi-Fi, more and more public places (such as stadiums and venues) provide Wi-Fi hotspot coverage, facilitating people's access to Wi-Fi networks anytime and anywhere. However, the access of a large number of users poses great challenges to Wi-Fi builders, and how to provide good service experience in high-density and high-concurrency scenarios becomes the key to high-density scenario coverage. ⚫ This course describes the characteristics of WLAN services in high-density scenarios, as well as methods, rules, and precautions for WLAN planning in these scenarios. 2 Huawei Confidential Objectives ⚫ 3 On completion of this course, you will be able to: Describe common service types and challenges in high-density scenarios. Describe the WLAN planning process in high-density scenarios. Understand WLAN deployment solutions in high-density scenarios. Huawei Confidential Contents 4 1. Introduction to High-Density Scenarios 2. WLAN Planning Process in High-Density Scenarios 3. WLAN Planning Solutions for High-Density Scenarios Huawei Confidential High-Density Scenario Overview If a large number of users gather in an area, the user density (number of users per unit area) is high, and all these ⚫ users need to access the WLAN, this scenario is a high-density scenario. To meet the access requirements of a large number of users in high-density scenarios, you need to deploy a large ⚫ number of APs. That means the distance between APs is much smaller than that in common scenarios. Typical high-density scenarios include stadiums, exhibition centers, and concerts. This course uses stadiums as an ⚫ example. Stadium 5 Huawei Confidential Concert Challenges in High-Density Scenarios High-density access • • A large number of access • Complex scenarios, involving terminals, distributed in high multiple industries with density different service High concurrency rate and requirements • Complex policies • Various types of terminals and high compatibility requirements • Frequent multi-user Complex physical contention for resources, Short distance between APs, environments, and restricted resulting in poor user generating severe device installation high capacity • Complex scenarios interference • Multiple interference factors experience • Possible sticky STAs during roaming, causing load imbalance 6 Huawei Confidential Contents 7 1. Introduction to High-Density Scenarios 2. WLAN Planning Process in High-Density Scenarios 3. WLAN Planning Solutions for High-Density Scenarios Huawei Confidential WLAN Planning Process in High-Density Scenarios Requirements collection ⚫ Collect complete and comprehensive project and requirement information to provide basis Requirements collection for WLAN design. Site survey ⚫ Site survey Carry out a site survey and record more detailed information, such as the floor height, interference sources, and obstacles. Device selection ⚫ Device selection Determine the models of devices and antennas based on the collected information. Coverage design ⚫ Determine the coverage range and field strength requirements, and plan AP deployment Coverage design positions. Capacity design ⚫ 8 Estimate the number of APs based on the number of access STAs and service requirements. Huawei Confidential Capacity design Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Requirements Collection in High-Density Scenarios Requirement Type Drawing information Coverage area Determine the VIP coverage areas (such as stands and boxes) and common coverage areas (such as stairs and restrooms). Field strength Determine the signal field strength requirements in coverage areas. Generally, the coverage requirements are as follows: VIP coverage area ≥ –60 dBm, common coverage area ≥ –65 dBm, and simple coverage area ≥ –70 dBm Wall type Determine the material and thickness of indoor walls, such as 240 mm brick walls, 240 mm concrete walls, and 12 mm glass walls. Access STAs Determine the types, number, and concurrency rate of access STAs in the coverage area. Bandwidth Determine the main service types and bandwidth requirements of access STAs. Channel and EIRP restrictions Determine the local available channels and EIRP restrictions. Switch location Determine the locations of upstream switches and check whether the PoE power supply distance meets the requirements. AP installation position Determine the installation positions of APs (side, overhead, or under seats). Power supply mode Determine the power supply mode as well as the available power supply areas and facilities on site. Interference source Determine whether there are interference sources such as microwave ovens, Bluetooth devices, and external Wi-Fi devices. Others 9 Description Collect complete drawings that contain scale information in CAD, PDF, PNG, or JPG format. Huawei Confidential Determine whether there are special requirements in some scenarios. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Site Survey in High-Density Scenarios Site Survey Item Building materials and signal attenuation Floor height Description Obtain the thickness and attenuation of building materials. If possible, test the attenuation onsite. Measure the floor height. The common indoor floor height is 3 m to 5 m. If an atrium, large exhibition hall, or stand area exists, use a rangefinder to measure the floor height and record the result. Interference source Check whether there are interference sources, for example, mobile hotspots, Wi-Fi devices of other vendors, and non-Wi-Fi devices (such as Bluetooth devices and microwave ovens). New obstacles Check whether obstacles at the site are consistent with those on the drawings. If not, mark the inconsistent areas and take photos. For example, if there are new partitions onsite, mark the positions and attenuation values of the partitions on the drawings. Site photos AP installation mode and position Take photos of the site to record the environment and convey survey information. Determine the AP installation modes (ceiling mounting, wall mounting, etc.) and positions. ELV room locations Mark the locations of ELV rooms where switches are to be deployed on the drawings. Power supply cabling Mark PoE cables to be routed on the drawings. It is recommended that the length of a PoE cable be less than or equal to 80 m. Special requirements Record the customer's special requirements, such as requirements on latency, in-roaming packet loss rate, and concurrency rate in special areas. 10 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Device Selection Factors Factor Description MIMO An AP typically supports 4 to 12 spatial streams. An AP with more spatial streams supports higher throughput and larger access capacity. Therefore, select APs with a proper number of spatial streams based on the application scenario and access density. Antenna Indoor APs have three types of antennas: omnidirectional, directional, and smart antennas. Outdoor APs support omnidirectional and directional antennas. APs with smart antennas are recommended for indoor scenarios. Select APs with directional antennas if APs need to be installed at high places. Maximum transmit power (combined power) Limitations over the Wi-Fi transmit power vary depending on the country or region code. When the transmit power gets closer to the specified upper limit, the transmitted signal is stronger and the coverage distance is longer. For details, see the Country Codes and Channels Compliance in the product documentation. Antenna gain A higher antenna gain indicates a stronger signal strength and longer coverage distance. Select antennas with a proper gain based on site requirements. Power supply mode The power supply modes vary according to the deployment scenarios. Currently, PoE is used in most scenarios. In other scenarios, the DC power supply can be used, or both power supply modes can be used together for mutual backup. Ensure that the power consumption of APs matches the power supply capability of PoE switches. Wi-Fi standard The Wi-Fi standard has evolved to the sixth generation, and each generation is compatible with earlier ones. The latest Wi-Fi 6 standard greatly improves the Wi-Fi speed and capacity. Therefore, Wi-Fi 6 APs are recommended. Other features For example, in outdoor scenarios, pay attention to special requirements for APs, such as waterproof and dustproof capabilities, operating temperature range, and surge protection. 11 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common APs in High-Density Scenarios AP Model AirEngine 8760R-X1E AirEngine 6761-21E AirEngine 6760R-51E AirEngine 5761R-11E MIMO 8+8/4+4+4 4+4 4+4 2.4 GHz (2x2) + 5 GHz (2x2) Or 5 GHz (2x2) + 5 GHz (2x2) Antenna Maximum Transmit Power (Combined Power) Antenna Gain Maximum Power Consumption Power Supply Mode External antennas External antennas External antennas External antennas 33 dBm/33 dBm 26 dBm/26 dBm 30 dBm/30 dBm 28 dBm/27 dBm Depending on the antenna Depending on the antenna Depending on the antenna Depending on the antenna 53.2 W (excluding PoE OUT) 22.6 W (excluding USB) 35.3 W 19.6 W PoE++ (802.3bt) PoE+ (802.3at) PoE++ (802.3bt) PoE+ (802.3at) Other Features Wi-Fi 6, IP68 waterproof and dustproof, Ethernet port surge protection, antenna surge protection, Bluetooth Wi-Fi 6, USB, and Bluetooth Wi-Fi 6, IP68 waterproof and dustproof, Ethernet port surge protection, antenna surge protection, Bluetooth Wi-Fi 6, IP68 waterproof and dustproof, Ethernet port surge protection, antenna surge protection, Bluetooth Recommended Scenario Outdoor stand Indoor stand and site Outdoor stand Outdoor stand Appearnce Note: The table lists some AP models with external antennas. For details about other models, see the product documentation. 12 Huawei Confidential • The AirEngine 6760-X1E supports the triple-radio mode, which is also applicable to indoor stands and conference sites. For details about the parameters, see the product manual. Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common Antennas in High-Density Scenarios Antenna Part Number 27012565 27010890 Model ANTDG1211D4NR ASB185G00 Antenna Type Directional Directional Radios 2.4 GHz and 5 GHz 5 GHz Gain (2.4 GHz/5 GHz) 12 dBi/11 dBi 19 dBi Horizontal Beamwidth (2.4 GHz/5 GHz) 35°/26° 15° Vertical Beamwidth (2.4 GHz/5 GHz) 35°/26° 15° Dimensions (H x W x D) 40 mm x 450 mm x 420 mm 25 mm x 250 mm x 250 mm Connector Type 4 x Type N female connector (dual-polarized) 2 x Type N female connector (dual-polarized) Remarks Wall mounting or pole mounting Pole mounting * Note: The antennas listed on the table are used for AP models with external antennas. 13 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common Installation Modes in High-Density Scenarios (1/2) Side mode 14 Huawei Confidential Overhead mode Under seats Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common Installation Modes in High-Density Scenarios (2/2) Installation Mode Description Advantage Side mode Deployed on the wall in the back row of the stand area 1. Line of sight (LOS) transmission between STAs and APs, and controllable transmission attenuation. 2. APs are deployed in a line, and co-channel APs are far away from each other, ensuring good anti-interference effect. 3. The installation height is proper, making it easy to install and maintain devices. 1. When the installation position of APs is low, the APs are easy to reach, with poor aesthetics. 2. For a stand with a large row depth, supplementary coverage is required. Overhead mode Deployed on the ceiling above the stand area 1. LOS transmission between STAs and APs, and controllable transmission attenuation. 2. Devices are easy to install if there is a catwalk in the stadium. 3. Devices are inaccessible to people, providing high safety and better aesthetics. 1. APs are difficult to install if the ceiling has a simple structure and high height. The construction costs are high and maintenance is difficult. 2. During channel planning, both the interference from left and right APs and the interference from front and back APs need to be considered. The anti-interference effect is not as good as that in the side coverage mode. Deployed under seats in the stand area 1. Through signal attenuation by obstacles such as chairs, crowds, and stands, the coverage of a single AP can be effectively controlled. This increases the AP deployment density and allows more users to access the network. 2. It can be used as a supplement to the other two coverage modes. 3. APs are installed under seats and are not easy to find, ensuring good aesthetics. 1. The AP coverage is small, and therefore a larger number of APs are required. 2. The existing building surface will be damaged, including the deployment of steel pipes for cabling and auxiliary materials such as AP protection boxes or camouflage boxes. 3. The signal coverage model varies with the number of STAs. Interference is uncontrollable compared with the other two modes. Under seats 15 Huawei Confidential Disadvantage Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Common Services and Average Bandwidth in High-Density Scenarios Service Type Single-Service Baseline Rate (Mbps) Proportion of Each Service in High-Density Scenarios (Stadium as an Example) Excellent Good Stand Area VIP Box Hall Outdoor Area 4K video 50 30 0% 20% 10% 5% 1080p video 16 12 5% 20% 10% 5% 720p video 8 4 5% 10% 10% 10% Web browsing 8 4 30% 20% 20% 20% Gaming 2 1 10% 10% 10% 10% Instant messaging 0.512 0.256 30% 10% 20% 30% VoIP 0.256 0.128 20% 10% 20% 20% 4 16 9 6 Average Bandwidth in Each Scenario (Excellent, in Mbps) * Note: The data above is based on experience and can be adjusted according to user bandwidth requirements. 16 Huawei Confidential Requirements Collection Site Survey Device Selection Coverage Design Capacity Design Number of Concurrent STAs on a Single AP ⚫ The number of concurrent STAs supported by an AP is used to calculate the number of required APs on the premise that the coverage and capacity requirements are met. For example: Two hundred STAs are connected to the network, with the concurrency rate of 30%. That is, services are running on only 60 STAs concurrently. When both APs and STAs comply with Wi-Fi 6, a single STA requires 8 Mbps bandwidth and a dual-band AP (4x4 MIMO) supports concurrent access of 30 STAs (2x2 MIMO). Therefore, two APs are required to meet the capacity requirement. ⚫ The following table lists the maximum number of concurrent STAs supported by a Wi-Fi 6 AP (4x4 MIMO, HE40) at different bandwidths. Maximum Number of Concurrent STAs (All STAs Support Wi-Fi 6 and Dual Spatial Streams) Supported by a Wi-Fi 6 AP (4x4 MIMO, HE40) No. Access Bandwidth Maximum Number of Concurrent STAs (Single-Radio) Maximum Number of Concurrent STAs (Dual-Radio) Maximum Number of Concurrent STAs (Triple-Radio) 1 2 Mbps 56 85 141 2 4 Mbps 39 56 95 3 6 Mbps 27 38 65 4 8 Mbps 21 30 51 5 16 Mbps 12 18 30 * Note: The maximum number of concurrent STAs varies according to the AP model. 17 Huawei Confidential Contents 18 1. Introduction to High-Density Scenarios 2. WLAN Planning Process in High-Density Scenarios 3. WLAN Planning Solutions for High-Density Scenarios Huawei Confidential Common Sub-scenarios in High-Density Scenarios 19 Huawei Confidential Stand VIP box Hall Outdoor area WLAN Construction Standards for the Stand Area Scenario description WLAN construction standards ⚫ Service type: web browsing, HD video, instant messaging, etc. ⚫ ⚫ User distribution: 2 per m2 (in the stand area) ⚫ Location distribution: The stands of a large- and medium-sized stadium are divided into two to three floors and distributed in a ladder shape. ⚫ ⚫ ⚫ ⚫ ⚫ Rate KPI: experience rate ≥ 50 Mbps, service-assured rate ≥ 2 Mbps Capacity KPI: 360 seats covered by a single AP, 70% access rate, 20% concurrency rate Coverage KPI: RSSI @ 95% area ≥ –65 dBm Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode Deployment Solution Side mode Overhead mode Deploy APs at equal spacings. Channel planning: HE20 @ 2.4 GHz, HE20 @ 5 GHz Under seats Install APs in the protection boxes under the seats. Channel planning: HE20 @ 2.4 GHz, HE20 @ 5 GHz Stand area Low High High AP with external directional antennas connected Stand area Low High High Indoor AP with built-in omnidirectional antennas, supporting 4+4 or higher spatial streams 20 Huawei Confidential Edge Coverage Mode for the Stand Area Scenario (1/3) Suggestions for WLAN planning and deployment ⚫ In side coverage mode, it is recommended that the coverage distance of APs be 20 rows and the maximum coverage distance be 30 rows. In addition, you need to adjust the antenna downtilt to ensure that the antenna coverage direction is aligned with the middle of the seat. ⚫ When the antenna is installed on a wall or pole, the downtilt adjustment range is ±30°. The gradient of the outer ring stand is large, and the downtilt adjustment may exceed 30°. Therefore, it is recommended that the antenna be installed on a horizontal pole or steel beam. Ceiling It is recommended that 20 rows of seats be covered. It is recommended that 20 rows of seats be covered. 21 Huawei Confidential Stadium Ground Edge Coverage Mode for the Stand Area Scenario (2/3) Suggestions for WLAN planning and deployment ⚫ In solution A, all APs work in dual-radio mode. The 2.4 GHz radio needs to be disabled for some APs. APs are deployed at an equal spacing of 6 m. ⚫ In solution B, blue APs work in dual-radio mode, and yellow APs work in dual-5G mode. APs are deployed at an equal spacing of 9 m. ⚫ Ensure that the horizontal spacing between 5 GHz radios is greater than 6 m and that between 2.4 GHz radios is greater than 18 m. The bandwidth of all channels is 20 MHz. AP 6m 6m 6m Antenna Antenna 2.4 GHz + 5 GHz 5 GHz 5 GHz 2.4 GHz + 5 GHz Back row Stand seats Solution A: Dual-radio mode 22 9m AP 6m 2.4 GHz + 5 GHz 9m 6m 5 GHz 6m 5 GHz 2.4 GHz + 5 GHz Back row Stand seats Front row Front row Antenna feeder Antenna feeder Solution B: Dual-radio mode + Dual-5G mode Huawei Confidential • Note: Not all dual-radio APs support the dual-5G mode. When selecting solution B, ensure that the yellow APs support the dual-5G mode. Edge Coverage Mode for the Stand Area Scenario (3/3) Suggestions for WLAN planning and deployment In solution C, all APs need to be configured to work in three-radio mode (two antennas are connected and the antenna spacing is ⚫ 6 m). The APs are deployed at an equal spacing of 12 m. Ensure that the horizontal spacing between 5 GHz radios is greater than 6 m and that between 2.4 GHz radios is greater than 12 ⚫ m. The bandwidth of all channels is 20 MHz. 12 m 12 m AP Antenna 6m 2.4 GHz + 5 GHz 6m 5 GHz 2.4 GHz + 5 GHz 5 GHz 2.4 GHz + 5 GHz 5 GHz Back row Stand seats Front row Solution C: Triple-radio mode 23 Huawei Confidential Antenna feeder Ceiling Installation Mode for the Stand Area Scenario Suggestions for WLAN planning and deployment ⚫ ⚫ ⚫ When APs are installed on the ceiling, it is recommended that a single AP cover 20 rows. The maximum number of rows is 30. For details about the AP deployment solution, see the edge installation solution (solutions A, B, and C). If the AP installation height is less than 20 m, the minimum horizontal spacing between 5 GHz radios is 6 m. If the AP installation height is greater than 20 m but less than 30 m, the minimum horizontal spacing between 5 GHz radios is 8 m. If the ceiling height is greater than 30 m, the ceiling installation mode is not recommended. It is recommended that the ceiling be installed on the edge or seat. 20 rows 1 Installation height < 20 m 20 rows AP Ceiling Antenna Minimum: 6 m No more than 30 m 2 Installation height: 20–30 m Antenna 2.4 GHz + 5 GHz * Only AP positions are shown in the figure. 24 Huawei Confidential Ground Antenna 5 GHz 2.4 GHz + 5 GHz AP Minimum: 8 m Antenna 5 GHz Horizontal spacing between antennas (solution C is used as an example) Antenna feeder Seat Installation Mode for the Stand Area Scenario Suggestions for WLAN planning and deployment ⚫ Indoor APs with built-in omnidirectional antennas are installed in non-metal protection boxes under seats. ⚫ The horizontal distance between APs is 6 m. One AP is deployed every four rows of seats in the vertical direction. The following figure shows the staggered AP deployment positions. Each AP covers three rows to its front and one row to its rear. 6m 6m 6m 9F Back row 8F 7F 6F Vertical coverage: 5 rows 5F 4F 3F 2F Front row 1F Stadium 25 Huawei Confidential WLAN Construction Standards for VIP Boxes Scenario description ⚫ ⚫ ⚫ WLAN construction standards Service types: web browsing, HD video, game, instant messaging, etc. User distribution: 6–10 persons per 20 m2 for a small VIP box or 30–40 persons per 100 m2 for a large VIP box Location distribution: Generally, VIP boxes are located right below the stand on the second floor. ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 20 Mbps ⚫ Capacity KPI: 20 STAs on a single AP, 50% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario VIP box 26 Aesthetics High Huawei Confidential Capacity High Coverage Recommended AP Type Installation Mode Deployment Solution High Indoor AP with built-in omnidirectional antennas, supporting 2+4 or higher spatial streams Ceiling mounting Deploy APs at equal spacings. Channel planning: HE20 @ 2.4 GHz, HE20 @ 5 GHz WLAN Deployment Solution for VIP Boxes Suggestions for WLAN planning and deployment ⚫ ⚫ If the area of a single room is less than 50 m2, deploy one AP in each room by referring to solution A. If the area of a single room is greater than 50 m2, deploy APs are deployed at an equal spacing of about 15 m near the wall by referring to solution B. Stadium Stadium Glass Glass Room area < 50 m2 Room area > 50 m2 15 m One side of the wall Solution A 27 Huawei Confidential One side of the wall Solution B WLAN Construction Standards for Hall Scenarios Scenario description ⚫ ⚫ ⚫ WLAN construction standards Service types: web browsing, file transfer, HD video, instant messaging, etc. User distribution: one user per 4–5 m2 Floor height: 3 m to 6 m in common areas; depending on the actual situation in atrium areas ⚫ Rate KPI: experience rate ≥ 50 Mbps, service-assured rate ≥ 6 Mbps ⚫ Capacity KPI: 40 STAs on a single AP, 30% concurrency rate ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode Deployment Solution Hall Medium Medium High Indoor AP with built-in omnidirectional antennas, supporting 2+4 or higher spatial streams Ceiling or wall mounting Deploy APs at equal spacings. Channel planning: HE20 @ 2.4 GHz, HE20 @ 5 GHz 28 Huawei Confidential WLAN Deployment Solution for Hall Scenarios Suggestions for WLAN planning and deployment ⚫ For areas with a floor height of 3 m to 6 m, install APs on the ceiling at an equal spacing of 18 m to 25 m by referring to solution A. ⚫ For areas with a floor height of more than 6 m, install APs on load-bearing pillars or other existing buildings at an equal spacing of 18 m to 25 m by referring to solution B. ⚫ Deploy APs far away from the seat areas of the stadium. Stadium seats Stadium seats Entrance Entrance Entrance Entrance Floor height < 6 m 18–25 m 18–25 m Load-bearing pillar 29 Huawei Confidential Entrance Floor height > 6 m 18–25 m Solution A: Ceiling mounting Entrance 18–25 m Load-bearing pillar Solution B: Wall mounting Load-bearing pillar WLAN Construction Standards for Outdoor Areas Scenario description WLAN construction standards ⚫ Service types: web browsing, HD video, instant messaging, etc. ⚫ Rate KPI: experience rate ≥ 50 Mbps, service-assured rate ≥ 4 Mbps ⚫ User distribution: about one user per 20–30 m2 ⚫ Capacity KPI: 80 STAs on a single AP, 20% concurrency rate ⚫ Floor height: not involved in outdoor open areas ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm ⚫ ⚫ ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95% area < 1% Access KPI: average time required for access < 3s Roaming KPI: roaming success rate > 97%, average roaming delay < 100 ms, in-roaming packet loss rate < 0.1% Recommended solution Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode Deployment Solution Outdoor area Low Low High Outdoor AP with built-in antennas, supporting 2+2 or more spatial streams Wall mounting Deploy APs at an equal spacing of 40 m. Channel planning: HE20 @ 2.4 GHz, HE20 @ 5 GHz 30 Huawei Confidential WLAN Deployment Solution for Outdoor Areas Suggestions for WLAN planning and deployment ⚫ Outdoor APs with built-in directional antennas are recommended in outdoor areas (such as stadiums and the periphery). ⚫ Deploy APs along the exterior wall at a height of 3 m to 6 m and at a spacing of 40 m. The maximum coverage distance of a single AP is about 180 m (without considering EIRP restrictions). Exterior wall Distance between APs: 40 m Stadium 31 Huawei Confidential Quiz 1. In high-density scenarios, what is the recommended minimum horizontal distance between 5 GHz radios? ( A. 4 m B. 6 m C. 8 m D. 10 m 32 1. B Huawei Confidential ) Summary ⚫ This course describes the characteristics of high-density sub-scenarios, including the stand, VIP box, hall, and outdoor area. Different sub-scenarios use different WLAN construction standards and planning rules and thereby have different WLAN planning solutions. This course also provides suggestions on WLAN planning and deployment in common highdensity sub-scenarios, facilitating WLAN solution design in high-density WLAN projects. ⚫ On completion of this course, you will have a basic understanding of the WLAN planning process and master the WLAN design methods of each high-density sub-scenario. 33 Huawei Confidential Recommendations ⚫ 34 Huawei official websites: Enterprise service: https://e.huawei.com/en/ Technical support: https://support.huawei.com/enterprise/en/index.html Online learning: https://www.huawei.com/en/learning Huawei Confidential Thank you. 把数字世界带入每个人、每个家庭、 每个组织,构建万物互联的智能世界。 Bring digital to every person, home, and organization for a fully connected, intelligent world. Copyright© 2022 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice. WLAN Optimization Solution Foreword ⚫ With the rapid development of wireless local area networks (WLANs), more and more enterprises have entered the fully-wireless office era and are replacing wired networks with WLANs. As such, WLAN optimization becomes an important process in WLAN construction, optimization, and maintenance, and is also the most important guarantee for network quality and user experience. ⚫ This course introduces you to the overall WLAN optimization process, adjustment in each optimization phase, and how to use related tools. 2 Huawei Confidential Objectives ⚫ 3 On completion of this course, you will be able to: Describe the WLAN optimization process. Describe the contents of WLAN optimization. Understand how to use WLAN optimization tools. Huawei Confidential Contents 4 1. Overview of WLAN Optimization 2. WLAN Optimization Tools 3. WLAN Optimization Solutions 4. WLAN Optimization Cases Huawei Confidential Background of WLAN Optimization Increasing Wi-Fi nodes make planning, deployment, and maintenance difficult. 1 Difficult planning, lack of professional planning 2 Difficult to evaluate the signal strength and radio interference Complex WLAN deployment SSID, security, authentication, traffic, and application configurations OA network No professional evaluation and design, and ransom site selection Improper channel design ⚫ Insufficient consideration for network security ⚫ Production network Surveillance network ⚫ AP 3 Difficult to ensure network reliability Problems such as wireless intrusion, wireless interference, and reliability technology faults Network coverage holes, causing access failures in some areas ⚫ Severe radio interference and increased network loss ⚫ Security risks, vulnerable to attacks ⚫ Weak disaster recovery (DR) capability ? 4 Huawei Confidential AP Increased O&M costs Complex network, deteriorated overall network quality Poor network quality, increasing O&M costs No consideration for reuse, and repeated construction ⚫ Imbalance between coverage, capacity, and costs ⚫ ⚫ 5 AP Sharp increase in AP quantity ⚫ Doubling parameters ⚫ Two sets of wired and wireless networks ⚫ ⚫ WAC Web Introduction to WLAN Optimization WLAN optimization involves site survey on customers' requirements, network evaluation, and a series ⚫ of optimization actions to resolve problems such as poor wireless service experience, high O&M costs, and difficult fault locating. Evaluation and optimization Low level design (LLD) High level design (HLD) Site survey Deployment and acceptance WLAN optimization is an indispensable part of WLAN construction. 6 Huawei Confidential WLAN Optimization Panorama Modules WLAN optimization Network solution implementation, optimization, and acceptance Network information collection Network evaluation Optimization solution design Customer requirement checklist Service test Networking optimization Configuration optimization Performance acceptance test User questionnaire Version and configuration analysis Coverage optimization Capacity optimization Function acceptance test Channel optimization Client Optimization Tools GPS WLAN Tester 2.0 eDesk Ranging instrument CloudCampus APP WLAN Planner iPerf Optimization solution report Network implementation, optimization, & acceptance report Telescope Reports WLAN Tester 2.0 7 Network survey report Huawei Confidential Network quality evaluation report Contents 8 1. WLAN Optimization Overview 2. WLAN Optimization Tools 3. WLAN Optimization Solutions 4. WLAN Optimization Cases Huawei Confidential Functions of the CloudCampus APP The CloudCampus APP is a mobile app that integrates functions such as field strength detection and interference test. It is used for actual test and acceptance for a deployed WLAN, reducing the workload of wireless O&M personnel and simplifying maintenance. The CloudCampus APP consists of the following functional modules: ⚫ Network: displays basic information about the currently connected network. The title displays the SSID name (including the frequency band and Wi-Fi protocol). Other information includes the BSSID, RSSI, channel, MAC address, negotiated link rate, and IP address. It also provides functions such as Wi-Fi experience and speed test. Tool: includes various tools, including project delivery, coverage test, business test, scene test, and manufacturer customization. Network 9 Tool Huawei Confidential • This course uses the CloudCampus APP 3.22.9.1 for Android as an example. • In the Tool module, the network evaluation mainly uses the coverage test and business test. Other functions are not described in this course. Network Basic network information Wi-Fi experience Speed test ✓ Wi-Fi protocol ✓ Signal strength Internet ✓ Signal strength ✓ Ping packet delay ✓ Network delay ✓ Channel ✓ Download Rate ✓ Download rate ✓ Frequency bandwidth ✓ Website loading time ✓ Upload rate ✓ Negotiated rate ✓ Security detection Intranet ✓ Network delay ✓ Download rate ✓ Upload rate 10 Huawei Confidential Tool • • • • • • • • • • • • 11 Huawei Confidential Wi-Fi Status: displays the status of the current Wi-Fi network, such as the signal strength, channel, and negotiated rate. Find AP: displays the vendors of neighboring APs, roughly locates the APs, and checks interference in the environment. Interference: displays the signal interference of the current network, including the name, working channel, and strength of the interference signal. Terminal Scan: obtains information about unauthorized access terminals anytime, facilitating terminal management by network O&M personnel. Ping: allows you to perform connectivity test, with common ping addresses preset in the APP. Speed Test: supports network speed tests for the Internet and intranet. iPerf: works with an iPerf server to test the iPerf performance on the intranet. Roaming experience: allows you to walk in the entire network coverage area and perform continuous dotting tests to test the roaming function. Game Test: allows you to check the network stability and test the fluctuation and packet loss rate of the network. Tracert: is a route tracing function used to trace the path along which data is routed to the destination address. Wi-Fi stability: allows you to test the stability of the current Wi-Fi network based on the realtime signal strength and connection rate. Walking Test: is a test conducted while you are walking. It allows you to detect changes in the Wi-Fi network status and services, and monitor the Wi-Fi signal strength and gateway connectivity in real time. Contents 1. WLAN Optimization Overview 2. WLAN Optimization Tools 3. WLAN Optimization Solutions ◼ Networking Optimization ▫ Configuration Optimization ▫ Capacity Optimization ▫ Coverage Optimization ▫ Channel Optimization ▫ Client Optimization 4. 12 WLAN Optimization Cases Huawei Confidential WLAN Optimization Solution Design ⚫ Based on the problems found in network evaluation, the WLAN optimization solution design formulates a detailed network rectification solution and provides guidance for customers to adjust the network. It is recommended that the optimization solution be designed from the following six modules: Module 13 Optimization Object Optimization Mode Networking optimization Network architecture optimization, VLAN assignment, device security configuration optimization, device reliability optimization, version upgrade, etc. Wired network connected to APs Manual design Configuration optimization Radio parameter optimization (power, channel, EDCA parameters, short GI, etc.), authentication policy optimization, security policy optimization, reliability optimization, etc. WAC Manual design Capacity optimization Adjustment for the number of APs, AP upgrade and replacement, etc. AP Manual design + Simulation tool Coverage optimization Adjustment for AP installation positions, the number of APs, antenna positions, AP transmit power, etc. AP Manual design + Simulation tool Channel optimization Adjustment for APs' working channels AP Manual design + Simulation tool Client optimization Adjustment for the driver version and preferred frequency band of the wireless network adapter, WLAN bearer mode, etc. STA Manual design Huawei Confidential Description Overview of Networking Optimization Networking optimization is a wired network optimization solution, which includes the following contents: ⚫ Networking architecture optimization Network planning optimization Wired-side function optimization • Networking: WAC + Fit AP, mesh, or cloud management • Networking between the WAC and APs: Layer 2 or Layer 3 • Control broadcast domain: user isolation and port isolation • WAC deployment: in-path or off-path • Address pool capacity: IP pool Reliability: VRRP, dual-link, N+1, etc. Data forwarding mode: direct forwarding or tunnel forwarding • • • • Device selection: WAC, AP, switch, etc. DHCP function: DHCP aging time and lease renewal • Control multicast: multicast packet suppression ... • VLAN planning: management VLAN and service VLAN • IP address planning: management address and service address • SSID planning: SSIDs for employees and guests • Access control policy: ACL, etc. • Security policy: WPA/WPA2/WPA3 ... ... 14 Huawei Confidential • Networking architecture optimization: Before project implementation, the networking architecture is determined based on the customer network status and requirements. The networking architecture will not change greatly in the future and is not be described in detail here. We can learn more about different WLAN architectures and networking modes in the course WLAN Networking Architectures. Network Planning Optimization Optimization Item Optimization Description Management addresses of APs and WACs are separated from service addresses of STAs, facilitating management and control. IP address optimization The address pool resources match the network capacity plan. This prevents STA access failures caused by insufficient IP addresses in the address pool. Avoid using 169.254.1.1 as the gateway address of the address pool, which conflicts with the default address when the AP is not online. In scenarios where users move frequently, the IP addresses used by online STAs are not released in the address pool, wasting IP address resources. You are advised to shorten the lease of the address pool so that IP addresses can be reclaimed in a timely manner. It is recommended that the AP management VLAN be separated from the user service VLAN to prevent loops. Do not set the AP management VLAN and user service VLAN to VLAN 1 to prevent loops. VLAN division For a project with a large number of APs, different SSIDs can use different service VLANs to prevent broadcast storms caused by large VLAN broadcast domains. Ensure that the single service VLAN is not excessively large. 15 Huawei Confidential Wired-Side Function Optimization — Layer 2 Isolation ⚫ When the Layer 2 broadcast domain on a network is large, normal broadcast packets (such as ARP packets) affect the network, especially on a WLAN (where broadcast packets are sent at the lowest rate), consuming a large amount of air interface resources. Therefore, on a WLAN, if no Layer 2 communication is required, you are advised to enable Layer 2 isolation. User isolation [WAC-wlan-view] traffic-profile name test [WAC-wlan-traffic-prof-test] user isolate l2 In direct forwarding scenarios, configure port isolation on the switch port connected to the AP. [SW] interface GigabitEntherent 0/0/1 [SW-GigabitEntherent0/0/1] port-isolate enable 16 Huawei Confidential • After Layer 2 isolation is enabled, STAs in the same network segment cannot transfer files to each other or ping each other. Therefore, do not enable Layer 2 isolation for sites that require mutual access between LANs. Wired-Side Function Optimization — Multicast Packet Suppression ⚫ Similar to broadcast packets, multicast packets are sent at low rates on the wireless side. If there are a large number of multicast packets on the network, a large number of air interface bandwidth resources are wasted, causing fluctuation on the WLAN. Therefore, multicast packets need to be suppressed in both the uplink and downlink directions. In direct forwarding scenarios, configure a traffic policy on the switch interface directly connected to the AP to control the multicast rate. [SW] traffic classifier test [SW-classifier-test] if-match destination-mac 0100-5e00-0000 mac-address mask ffff-ff00-0000 [SW] traffic behavior test [SW-behavior-test] statistic enable [SW-behavior-test] car cir 100 [SW] traffic policy test [SW-policy-test] classifier test behavior test [SW] interface GigabitEthernet 0/0/1 [SW-GigabitEthernet0/0/1] traffic-policy test outbound [SW-GigabitEthernet0/0/1] traffic-policy test inbound The AP performs multicast suppression on uplink packets from STAs. [AC-wlan-view] traffic-profile name test [AC-wlan-traffic-prof-test] traffic-optimize multicast-suppression packets 1000 17 Huawei Confidential • In scenarios with multicast services, you are advised to set this parameter based on the site requirements. Contents 1. WLAN Optimization Overview 2. WLAN Optimization Tools 3. WLAN Optimization Solutions ▫ Networking Optimization ◼ Configuration Optimization ▫ Capacity Optimization ▫ Coverage Optimization ▫ Channel Optimization ▫ Client Optimization 4. 18 WLAN Optimization Cases Huawei Confidential Configuration Optimization ⚫ Configuration optimization is mainly implemented for software features. Different parameter settings of the same function affect the implementation effect and are also applicable to different scenarios. You can adjust function configurations to ensure WLAN experience. Access control for weaksignal STAs Disconnecting weaksignal STAs STA1 STA2 STA1 STA2 STA3 STA4 STA3 STA4 STA5 STA6 Higher than the RSSI threshold Lower than the RSSI threshold STA7 STA5 STA6 Higher than the RSSI threshold Lower than the RSSI threshold STA7 STA8 Access denied Disconnected Restricts the access of low-speed STAs to improve air interface efficiency. Automatically disconnects low-speed STAs, improving air interface efficiency. 19 Huawei Confidential Smart roaming WAC Airtime fair scheduling Within the same transmission time AP 150 Mbps STA 450 Mbps 300 Mbps STA Roaming Enables STAs to roam to neighboring APs with better signals in a timely manner. Application protocolbased QoS policy Voice Video Data High-rate STAs can send more packets. Other Enables users to fairly share wireless resources and transmit more data. Enables important services to be scheduled first. Access Control for Weak-Signal STAs ⚫ If a WLAN has good signal coverage but signals at the coverage edge area are weak, you can configure SNR-based user CAC to restrict access from weak-signal STAs, thereby ensuring network access quality for online STAs. [WAC-wlan-view] rrm-profile name test [WAC-wlan-rrm-prof-test] uac client-snr enable [WAC-wlan-rrm-prof-test] uac client-snr threshold threshold threshold: specifies the user CAC threshold based on the STA's SNR. The value ranges from 5 dB to 45 dB. The default value is 15. Assume that the SNR threshold is 25 dB and the default noise floor is –95 dBm. When the signal strength of a STA is lower than 25 dB + (–95 dBm) = –70 dBm, the STA cannot access the network. Key area Common area If the SNR is lower than –65 dBm, the STA is not allowed to access the network. In this case, you are advised to set the SNR threshold to 30 dB. If the SNR is lower than –75 dBm, the STA is not allowed to access the network. In this case, you are advised to set the SNR threshold to 20 dB. * Note: Engineers can adjust the parameter values based on the customer's requirements on the STAs' signal strengths. If the threshold is set too high, STAs may fail to access the network. 20 Huawei Confidential • The signal-to-noise ratio (SNR) refers to the ratio of signals to noise (noise floor) in the system. Generally, the SNR is used to measure the impact of interference and noise on radio signals. • The SNR is expressed as follows: SNR = 10lg (P1/P2), where: ▫ P1: valid power of the signal ▫ P2: effective power of the noise Disconnecting Weak-Signal STAs ⚫ You can configure the device to quickly disconnect weak-signal STAs so that the STAs can reassociate with or roam to APs with better signals. This ensures the Internet access quality of online STAs. [WAC-wlan-view] rrm-profile name test [WAC-wlan-rrm-prof-test] undo smart-roam quick-kickoff-threshold disable [WAC-wlan-rrm-prof-test] smart-roam quick-kickoff-threshold check-snr [WAC-wlan-rrm-prof-test] smart-roam quick-kickoff-threshold snr snr-threshold threshold: specifies the SNR-based threshold for quickly disconnecting STAs. The value ranges from 5 dB to 45 dB. The default value is 15. Assume that the SNR threshold is 25 dB and the default noise floor is –95 dBm. When the signal strength of a STA is lower than 25 dB + (–95 dBm) = –70 dBm, the STA is disconnected from the WLAN. Key area Common area If the SNR is lower than –65 dBm, the STA is disconnected. In this case, you are advised to set the SNR threshold to 30 dB. If the SNR is lower than –75 dBm, the STA is disconnected. In this case, you are advised to set the SNR threshold to 20 dB. * Note: Engineers can adjust the parameter values based on the customer's requirements on the STAs' signal strengths. If the threshold is set too high, STAs may fail to access the network. 21 Huawei Confidential Smart Roaming ⚫ In common coverage scenarios, STAs with poor signals can roam to APs with better signals to improve STA service experience and overall wireless channel performance. ⚫ In high-density coverage scenarios, STAs usually have good signals and "stick" to APs even if the wireless rates are low. In this case, configure mart roaming so that STAs are steered to APs with better signals to further improve wireless channel performance. [WAC-wlan-view] rrm-profile name wlan-rrm [WAC-wlan-rrm-prof-wlan-rrm] undo smart-roam disable [WAC-wlan-rrm-prof-wlan-rrm] smart-roam roam-threshold check-snr [WAC-wlan-rrm-prof-wlan-rrm] smart-roam roam-threshold snr snr-threshold snr-threshold: specifies the SNR-based smart roaming threshold. The value ranges from 15 dB to 45 dB. The default value is 20. Assume that the SNR threshold is 25 dB and the default noise floor is –95 dBm. When the signal strength of a STA is lower than 25 dB + (–95 dBm) = –70 dBm, the signal strength is lower than the SNR threshold. In this case, the STA is steered. Key area Common area If the SNR is lower than –65 dBm, the STA is forced to go offline. In this case, you are advised to set the SNR threshold to 30 dB. If the SNR is lower than –75 dBm, the STA is forced to go offline. In this case, you are advised to set the SNR threshold to 20 dB. * Note: Engineers can adjust the parameter values based on the customer's requirements on the STAs' signal strengths. If the threshold is set too high, STAs may be steered frequently. The default value is recommended. 22 Huawei Confidential Airtime Fair Scheduling ⚫ Due to different radio modes supported by STAs or different radio environments where STAs are located, the actual PHY rates of STAs differ greatly. If a STA with a low PHY rate occupies a wireless channel for a long time, user experience on the entire WLAN is affected. After airtime fair scheduling is enabled, the device preferentially schedules the user who occupies the channel for the shortest time before each data transmission. This ensures that each user occupies the channel fairly. [WAC-wlan-view] rrm-profile name test [WAC-wlan-rrm-prof-test] airtime-fair-schedule enable User1 3 User2 User3 User4 4 After a round of transmission of User1 6 7 After airtime fair scheduling is enabled, the device schedules channel resources preferentially for User1 since User1 occupies the channel for the shortest time. 23 User1 5 User2 4 User3 User4 ✓ Airtime fair scheduling: preferentially schedules STAs that occupy wireless channels for a short time. ✓ You can enable this function based on customer requirements on the live network (without involving parameter settings). 6 7 The channel occupation time of User1 increases to 5. Similarly, the device schedules channel resources preferentially for User2 that occupies the channel for the shortest time. Huawei Confidential • There are four users on a radio waiting to transmit data. They have occupied the channel for time periods of 3, 4, 6, and 7 respectively, and require a corresponding time period of 2, 4, 6, and 7 for a round of data transmission. 1. After airtime fair scheduling is enabled, the device collects the channel occupation time periods of the four users. The channel occupation time periods of User1, User2, User3, and User4 become 3, 4, 6, and 7 respectively. User1 occupies the channel for the shortest time. Therefore, the device allocates channel resources to User1 first. 2. It takes a time period of 2 for User1 to finish a round of data transmission. The channel occupation time of User1 then increases to 5. The channel occupation time periods of User1, User2, User3, and User4 become 5, 4, 6, and 7 respectively. In this case, User2 occupies the channel for the shortest time. Therefore, the data of User2 is preferentially transmitted. 3. It takes a time period of 4 for User2 to finish a round of data transmission. The channel occupation time of User2 increases to 8. The channel occupation time periods of User1, User2, User3, and User4 become 5, 8, 6, and 7 respectively. User1 occupies the channel for the shortest time. Then the device preferentially schedules channel resources for User1. 4. If User1 finishes all data transmissions, the device collects the channel occupation time periods of only the remaining users. The channel occupation time periods of User2, User3, and User 4 are 8, 6, and 7 respectively. User3 occupies the channel for the shortest time. Therefore, the data of User3 is preferentially transmitted. 5. It takes a time period of 6 for User3 to finish a round of data transmission. The channel occupation time period of User3 increases to 12. The channel occupation time periods of User2, User3, and User4 become 8, 12, and 7 respectively. User4 occupies the channel for the shortest time. Therefore, channel resources are preferentially scheduled for User4. Application Protocol-based QoS Policy ⚫ With the rapid development of multimedia technologies, many P2P applications maliciously occupy network resources, resulting in network congestion. Such traffic is mixed with key applications. As a result, non-key services occupy a large number of resources, packet loss occurs on core services, and service quality cannot be guaranteed. You can configure application protocol-based QoS policies to prevent non-key services from occupying too many network resources. [WAC-wlan-view] sac-profile name test [WAC-wlan-sac-prof-test] application-group group-name app-protocol app-protocol-name remark dscp dscp-value [WAC-wlan-sac-prof-test] application-group group-name app-protocol app-protocol-name deny [WAC-wlan-sac-prof-test] application-group group-name app-protocol app-protocol-name car cir-value Identifying application protocols Traffic skypeforbusiness facetime qq_voip ...... Action Mapping policy remark: changes the packet priority. deny: discards packets. car: limits the packet rate. Note: Set different policies for related applications based on the actual scenario, that is, services on the customer's live network. 25 Huawei Confidential • application-group group-name: specifies the name of an application list. The application list must be supported by the SAC signature database file. • app-protocol app-protocol-name: specifies the name of an application. The application must exist in the list. Contents 1. WLAN Optimization Overview 2. WLAN Optimization Tools 3. WLAN Optimization Solutions ▫ Networking Optimization ▫ Configuration Optimization ◼ Capacity Optimization ▫ Coverage Optimization ▫ Channel Optimization ▫ Client Optimization 4. 26 WLAN Optimization Cases Huawei Confidential Overview of Capacity Optimization (1/2) ⚫ During capacity optimization, service types and user models in different scenarios must be considered, and capacity optimization suggestions must be provided based on network construction standards. Service types and user models Baseline Rate of a Single Service (Mbps) Proportion of Each Service in Education Scenarios (%) Service Type Excellent Normal Classroom 4K video 50 30 10 Office Meeting Room Lecture Hall Library 20 10 10 10 Lab 10 Canteen Playground 10 10 1080p video 16 12 10 0 10 10 0 10 10 10 720p video 8 4 0 10 10 0 0 0 0 0 E-whiteboard 32 16 20 20 10 0 0 10 0 0 Email 32 16 10 5 10 10 0 0 0 0 Web browsing 8 4 40 30 30 50 70 60 60 60 10 Gaming 2 1 0 5 0 10 0 0 10 Instant messaging 0.512 0.256 0 10 10 10 20 10 10 0 VoIP 0.256 0.128 10 0 10 0 0 0 0 10 27 Huawei Confidential Overview of Capacity Optimization (1/2) WLAN construction standards Capacity optimization suggestions Experience rate: 50 Mbps Service-assured rate: 10 Mbps STA rate limiting Capacity KPI • Number of STAs connected to a single AP: 50 • Concurrency rate: 40% Load balancing • Test speed (using SpeedTest): meets the network construction standard. Coverage KPI AP capacity expansion • RSSI @ 95% areas ≥ –65 dBm Other KPIs • Roaming delay < 20 ms, in-roaming packet loss rate ≤ 10-5 • Delay of key services such as video and voice services < 10 ms 28 AP replacement ... Huawei Confidential • Experience rate: perceived data rate under a light network load ▫ When the network load is light (channel utilization is less than 20%), the target rate that can be reached by a speed test in 95% areas can be regarded as the experience rate or peak rate. • Service-assured rate: guaranteed rate under a heavy network load ▫ A service-assured rate is the target rate that can be achieved in 90% of time according to SpeedTest in a multi-user concurrency scenario where the network load is less than 80%. The rate is typically considered as the guaranteed rate. STA Rate Limiting ⚫ In an actual WLAN, due to different services accessed by STAs, some STAs may occupy too many network resources. As a result, the STA experience of the entire WLAN deteriorates. In this case, you can configure rate limiting for STAs to ensure relatively fair network resource usage and improve overall user experience. [WAC-wlan-view] traffic-profile name test [WAC-wlan-rrm-prof-test] rate-limit client up rate-value [WAC-wlan-rrm-prof-test] rate-limit client down rate-value Set the STA rate limit based on the actual scenario, that is, the bandwidth required by services on the customer's live network. Evaluate the rate limit of the corresponding STA based on the bandwidth required by each service type in the network planning process course. 29 Service Type Single-Service Baseline Rate (Mbps) Recommended Terminal Rate Limit (Mbps) 4K video 50 60 1080p video 16 20 E-whiteboard (wireless projection) 32 40 Email 32 40 Web browsing 8 10 Instant messaging 0.512 2 Huawei Confidential Load Balancing ⚫ In scenarios with high overlapping coverage areas (such as lecture halls), some APs may be heavily loaded, affecting user experience. You can configure the load balancing function to steer some STAs to APs with light loads. In this way, AP resources are effectively used and the bandwidth of each STA is ensured. Parameter optimization [WAC-wlan-view] rrm-profile name test [WAC-wlan-rrm-prof-test] sta-load-balance dynamic sta-number start-threshold start-threshold-value [WAC-wlan-rrm-prof-test] sta-load-balance dynamic sta-number gap-threshold { percentage percentage-value | number number-value } Start threshold for dynamic load balancing Load difference threshold for dynamic load balancing Based on the percentage of STAs Based on the number of STAs • • • Default value: 10 High AP density: 5–10 Common AP density: 10–20 • • • Default value: 3 High AP density: 1–3 Common AP density: 3–10 • • High AP density: 5–10 Common AP density: 1-20 * Note: The default configuration is recommended for load balancing. (The values here are for reference only. Evaluate the specific values based on the actual project situation.) 30 Huawei Confidential • The preceding load balancing configuration commands use dynamic load balancing based on the number of STAs as an example. • start-threshold-value: specifies the start threshold for dynamic load balancing based on the number of STAs. The value ranges from 1 to 40. • percentage-value: specifies the dynamic load difference threshold for based on the number of STAs (percentage). The value ranges from 1 to 100. The load difference between radios in a load balancing group is expressed in percentage, that is, the percentage difference between the number of STAs on radios. • number-value: specifies the load difference threshold for dynamic load balancing based on the number of STAs. The value ranges from 1 to 20. The actual number of STAs indicates the load difference between radios in a group, that is, the difference between the number of STAs on each radio. AP Capacity Expansion ⚫ Evaluate the number of required APs based on service types and network construction standards in different scenarios, and add APs to meet service requirements. The following uses the conference room scenario as an example: Service Type Single-Service Baseline Rate (Mbps) Percentage Excellent Good Conference Room 4K video 50 30 10% 1080p video 16 12 10% 720p video 8 4 10% E-whiteboard (wireless projection) 32 16 10% Email 32 16 10% Web browsing 8 4 30% Gaming 2 1 0% Instant messaging 0.512 0.256 10% VoIP (voice) 0.256 0.128 10% Average Single-User Bandwidth (Mbps) — Excellent Huawei Confidential Number of access STAs x Access concurrency rate Number of concurrent STAs on a single AP 300 x 30% 18 =5 16 Mbps Scenario: conference room Number of access STAs: 300 Access concurrency rate: 30% Bandwidth required by a single STA (Excellent): 16 Mbps Number of concurrent STAs supported by a single AP (dual-band, 16 Mbps): 18 31 Capacity evaluation Number of APs required to meet capacity requirements in this area = AP capacity expansion: Increase the number of APs and deploy five APs in this area. Contents 1. WLAN Optimization Overview 2. WLAN Optimization Tools 3. WLAN Optimization Solutions ▫ Networking Optimization ▫ Configuration Optimization ▫ Capacity Optimization ◼ Coverage Optimization ▫ Channel Optimization ▫ Client Optimization 4. 32 WLAN Optimization Cases Huawei Confidential Overview of Coverage Optimization ⚫ During coverage optimization, consider the access capacity, roaming, and interference. A larger receive field strength indicates better user experience. Common coverage optimization methods are as follows: AP position adjustment AP power adjustment 11 1 11 1 1 6 6 Before optimization After optimization 11 6 Before optimization 11 1 6 After optimization Adjusting the number of APs 1 6 Before optimization 33 1 11 6 1 After optimization Huawei Confidential • In outdoor scenarios, APs use external antennas. In addition to adjusting AP deployment positions, you can adjust antenna directions to meet coverage requirements. AP Power Adjustment ⚫ AP power adjustment can be used to meet signal coverage requirements. On the live network, different coverage areas have different requirements. You are advised to adjust AP power based on the customer requirements. According to the network planning, it is recommended that the field strength in all areas be greater than or equal to –65 dBm. Network-wide coverage effect evaluation Automatic power adjustment Failed to meet the signal strength requirement at a large number of positions [WAC-wlan-ap-group-ap-group1] radio 0 [WAC-wlan-group-radio-ap-group1/0] calibrate auto-txpower-select enable [WAC-wlan-ap-group-ap-group1] radio 1 [WAC-wlan-group-radio-ap-group1/1] calibrate auto-txpower-select enable [WAC-wlan-group-radio-ap-group1/1] quit [WAC-wlan-view] calibrate enable manual [AC-wlan-view] calibrate manual startup Failed to meet the signal strength requirement at only a few positions [WAC-wlan] ap-id 1 [WAC-wlan-ap-1] radio 0 [WAC-wlan-radio-1/0] calibrate auto-txpower-select disable [WAC-wlan-radio-1/0] eirp eirp [WAC-wlan-radio-1/0] radio 1 [WAC-wlan-radio-1/1] calibrate auto-txpower-select disable [WAC-wlan-radio-1/1] eirp eirp Manual power adjustment Use the CloudCampus APP to test the signal strength at different points in the coverage area. 34 Huawei Confidential • In addition to the preceding methods, you can use the WLAN Planner to simulate the AP coverage effect on the entire network, configure the AP power based on the simulation data, and manually adjust the AP power for some points that do not meet the requirements. AP Position Adjustment ⚫ The AP deployment design may vary in different scenarios. During network optimization, check whether the current AP deployment positions are proper. If the positions do not meet requirements or affect services, adjust the corresponding AP deployment positions. The following uses the AP deployment design for large classrooms in education scenarios as an example: Incorrect: Install an AP on the wall at the door Large classroom A 35 Large classroom B Large classroom C Correct: Install an AP in the middle of the ceiling Large classroom A Large classroom B Large classroom C Huawei Confidential • The detailed AP position planning and design methods have been described in the network planning process and are not described here. • In outdoor scenarios, in addition to AP position adjustment, antenna angle adjustment is also involved. Antenna Angle Adjustment ⚫ In outdoor scenarios, do not place antennas randomly. Install an antenna correctly according to the radiation direction of the antenna to ensure that the beam direction evenly covers the specified area. The following figure uses an outdoor AP with external omnidirectional antennas as an example. In actual installation, the AP must be vertical. Incorrect 36 Huawei Confidential Correct Adjusting the Number of APs (1/2) ⚫ If coverage holes exist in the coverage area, you are advised to add APs. The following uses AP deployment in dormitories in education scenarios as an example: Incorrect: A single AP covers multiple rooms. Dorm 1 Dorm 2 Dorm 3 Dorm 4 Correct 1: Each AP covers two rooms. Dorm 1 Dorm 2 Dorm 3 Dorm 4 Common glass or wooden partition wall structure 37 Huawei Confidential Correct 2: Each AP covers a single room. Dorm 1 Dorm 2 Dorm 3 Dorm 4 Metal, brick wall, or concrete wall structure Adjusting the Number of APs (2/2) ⚫ If too many APs are deployed in the coverage area, co-channel interference is severe, affecting user experience on the entire network. You are advised to reduce the number of APs. Incorrect: Deploy excessive APs, causing severe interference 38 Huawei Confidential Correct: Correctly deploy APs based on coverage requirements Contents 1. WLAN Optimization Overview 2. WLAN Optimization Tools 3. WLAN Optimization Solutions ▫ Networking Optimization ▫ Configuration Optimization ▫ Capacity Optimization ▫ Coverage Optimization ◼ Channel Optimization ▫ Client Optimization 4. 39 WLAN Optimization Cases Huawei Confidential Overview of Channel Optimization ⚫ On a WLAN, the operating performance of APs is affected by the radio environment. For example, a high-power AP can interfere with adjacent APs if they work on overlapping channels. To ensure user experience, channel optimization can be used to reduce the impact of air interface interference. ⚫ If multiple floors are involved, plan channels horizontally and vertically. During channel optimization, in addition to the signal interference used in the project, the interference of third-party signals must be considered to ensure the access performance of the WLAN. Horizontal Vertical 11 1 1 149 6 11 165 64 11 1 2.4 GHz cellular coverage 40 Floor 36 Huawei Confidential 44 52 157 5 GHz cellular coverage Channel Plan 5th floor 1 6 11 4th floor 11 1 6 3rd floor 6 11 1 2nd floor 1 6 11 1st floor 11 1 6 Channel Optimization ⚫ Through channel optimization, co-channel APs and adjacent-channel APs are kept as far as possible to improve the channel reuse rate and ensure user experience on the entire network. Network-wide evaluation for the working channels of APs Automatic channel adjustment Severe interference [WAC-wlan-ap-group-ap-group1] radio 0 from a large [WAC-wlan-group-radio-ap-group1/0] calibrate auto-channel-select enable number of APs [WAC-wlan-ap-group-ap-group1] radio 1 [WAC-wlan-group-radio-ap-group1/1] calibrate auto-channel-select enable [WAC-wlan-group-radio-ap-group1/1] quit [WAC-wlan-view] calibrate enable manual [AC-wlan-view] calibrate manual startup Manual channel adjustment • • 41 Log in to the WAC to check whether neighboring APs use the same or adjacent channels. Log in to the WAC and check the AP channel utilization to determine the AP interference. Interference only between some APs [WAC-wlan] ap-id 1 [WAC-wlan-ap-1] radio 0 [WAC-wlan-radio-1/0] calibrate auto-channel-select disable [WAC-wlan-radio-1/0] channel 20mhz channel [WAC-wlan-radio-1/0] radio 1 [WAC-wlan-radio-1/1] calibrate auto-channel-select disable [WAC-wlan-radio-1/1] channel 20mhz channel Huawei Confidential • In addition to the preceding methods, you can also use the WLAN Planner to simulate the working channels of APs on the entire network, configure AP channels based on the simulated data, and manually adjust the channels of APs that do not meet the requirements. Parameter Optimization for Automatic Channel Adjustment ⚫ For the 2.4 GHz radio, non-overlapping channel combinations 1, 6, 11 or 1, 5, 9, and 13 are recommended. For the 5 GHz radio, non-overlapping channels 36, 40, 44, 48, 52, 56, 60, 64, 149, 153, 157, 161, and 165 are recommended. ⚫ The radio calibration function depends on the channel scanning function. During channel scanning, radio channel switching is triggered. At the moment of channel switching, the delay of user service data increases, affecting wireless service experience. Therefore, you are advised to set the calibration to the off-duty period, for example, in the early morning. [AC-wlan-view] calibrate enable schedule time 02:00:00 [AC-wlan-view] regulatory-domain-profile name default [AC-wlan-regulatory-domain-prof-default] dca-channel 2.4g channel-set 1,5,9,13 [AC-wlan-regulatory-domain-prof-default] dca-channel 5g channel-set 36,40,44,48,52,56,60,64,149,153,157,161,165 42 Huawei Confidential • You can specify a calibration channel set for APs. The APs then select channels from the channel set to calibrate. This reduces the burden on the APs. • When configuring a calibration channel set, avoid radar channels and configure channels supported by STAs. Otherwise, STAs cannot search for radio signals. Contents 1. WLAN Optimization Overview 2. WLAN Optimization Tools 3. WLAN Optimization Solutions ▫ Networking Optimization ▫ Configuration Optimization ▫ Capacity Optimization ▫ Coverage Optimization ▫ Channel Optimization ◼ 4. 43 Client Optimization WLAN Optimization Cases Huawei Confidential Client Optimization ⚫ The air interface is a complex environment, and WLAN user experience is related to many factors. In addition to the networking, configuration, and working channels of the WLAN, you can adjust the parameter settings of STAs to ensure user experience. 1. Upgrade the driver of the wireless network adapter to the latest version. 2. Set the preferred frequency band to 5 GHz. 3. Ensure that the energy saving mode of the wireless adapter in the power supply solution is the highest performance version. Optimal parameter settings on STAs can ensure user experience. 44 Huawei Confidential • Typical optimization design solutions include: ▫ Upgrade the driver of the wireless network adapter to the latest version. ▫ Set the preferred frequency band of the wireless network adapter to 5 GHz. ▫ In the power supply solution, the energy saving mode of the wireless adapter is the highest performance. ▫ Disable the WLAN bearer mode. ▫ Disable the U-APSD function. Contents 45 1. WLAN Optimization Overview 2. WLAN Optimization Tools 3. WLAN Optimization Solutions 4. WLAN Optimization Cases Huawei Confidential Background of an Indoor WLAN Project ⚫ After communicating with the project contact person about WLAN deployment in a new office area of a company, the project requirements are collected as follows: The figure on the right shows the building floor plan. The length of the building is 50 meters, and services include web browsing and email. Among indoor areas, VIP coverage areas include office areas, meeting rooms, and activity area are VIP coverage areas; common coverage areas include restrooms, break rooms, and equipment rooms. Elevators are not covered. The two office areas can accommodate 400 persons, with each accommodating 200 persons. The maximum number of users in the activity area is 100, and the concurrency rate is 60%. The maximum number of users in each meeting room is 30, and the concurrency rate is 50%. The WLAN must support 802.11ax. The activity area is an atrium area. 46 Huawei Confidential Information Collection — Analysis of Bandwidth Required by a Single User ⚫ The following table lists the service types and proportions of users. Based on the following data, you can calculate the average bandwidth required by each user. With the single-bandwidth requirement of a single user, you can further calculate the total bandwidth of the WLAN, select APs, and calculate the number of APs. Service Type Single-Service Baseline Rate (Mbps) Percentage Excellent Web browsing 8 4 40% Streaming media (1080p) 16 12 13% Streaming media (4K) 50 22.5 10% VoIP (voice) 0.25 0.125 10% E-whiteboard 32 16 5% Email 32 16 5% File transfer 32 16 5% Instant messaging 0.5 0.25 12% Excellent and good criteria indicate user service experience at different bandwidths. In this project, excellent user experience is used to plan user bandwidth. 47 Huawei Confidential Bandwidth required by a single user (Excellent) Good 8 x 40% + 16 x 13% + 50 x 10% + 0.25 x 10% + 32 x 5% + 32 x 5% + 32 x 5% + 0.5 x 12% 15.165 Mbps The planned bandwidth for a single user is 16 Mbps. Information Collection — Requirements Collection ⚫ Optimize the WLAN project requirements collection based on the per-user bandwidth. Requirement Type Laws and regulations Result Country code: CN Floor plan JPEG scale drawing (building length: 50 m) Coverage mode Indoor AP with omnidirectional antennas Office area 1: 200 users, 16 Mbps per-user bandwidth, 70% concurrency rate Bandwidth Office area 2: 200 users, 16 Mbps per-user bandwidth, 70% concurrency rate Meeting room: 30 users, 16 Mbps per-user bandwidth, 50% concurrency rate Activity area: 100 users, 16 Mbps per-user bandwidth, 60% concurrency rate Coverage area Key coverage areas: office areas, meeting rooms, and activity area Common coverage areas: break room, restrooms, grocery room, and equipment rooms Field strength Field strength in key coverage areas ≥ –65 dBm; field strength in common coverage areas ≥ –80 dBm Edge field strength: ≤ -80 dBm; interference field strength: –60 dBm; leakage field strength: no requirement Networking mode AC off-path networking + direct forwarding Power supply mode PoE switch for supplying power to APs STA type Acceptance items and criteria 48 Huawei Confidential Common mobile phones and laptops that support 2x2 MIMO, 40 MHz @ 2.4 GHz, 80 MHz @ 5 GHz No special requirements Network Evaluation — AP Quantity Evaluation ⚫ When evaluating a WLAN, consider the number and models of APs to meet service requirements. Take an office area as an example. The number of users in an office area reaches 200, the concurrency rate is 70%, and each user has two STAs (only one STA is assumed in the activity area). The number of STAs in a single office area is calculated as follows: Total number of STAs in a single office area = 200 x 2 x 70% = 280 Assume that the bandwidth requirement of a single user is 16 Mbps, a maximum of 18 concurrent STAs can be connected on dual radios or 30 concurrent STAs can be connected on triple radios of a Wi-Fi 6 AP. That is, 16 dual-radio APs or 10 triple-radio APs are required. Considering costs and scenarios, triple-radio APs are recommended. According to the preliminary plan, 10 APs are deployed in a single office area, and one AP is deployed in each meeting room. Three to four APs are deployed in the activity area that is narrow and long and does not allow ceiling mounting for APs. Maximum Number of Concurrent STAs (All STAs Support Wi-Fi 6 and Dual Spatial Streams) Supported by a Wi-Fi 6 AP (4x4 MIMO, HE40) 49 No. Access Bandwidth Maximum Number of Concurrent STAs (Single-Radio) Maximum Number of Concurrent STAs (Dual-Radio) Maximum Number of Concurrent STAs (Triple-Radio) 1 2 Mbps 56 85 141 2 4 Mbps 39 56 95 3 6 Mbps 27 38 65 4 8 Mbps 21 30 51 5 16 Mbps 12 18 30 Huawei Confidential • When evaluating the number of APs, check whether the number of onsite APs meets service requirements. If not, add APs. Network Evaluation — CloudCampus APP ⚫ Use the CloudCampus APP to perform coverage test and business test. The Wi-Fi status and stability tests are performed to evaluate the network quality. The overall quality is good. The roaming experience test result shows that the coverage effect is good. The interference test result shows that neighboring APs use the same channel. This requires channel optimization. 50 Huawei Confidential Network Optimization — AP Channel Optimization ⚫ Channel bandwidth planning: 2.4 GHz: The user bandwidth requirement is 16 Mbps, and APs Omnidirectional coverage are densely deployed. Using 40 MHz will cause adjacentchannel or co-channel interference. Therefore, 20 MHz bandwidth is recommended. 13 minus & 50 plus 5 GHz: Channel resources on this frequency band are sufficient to meet the requirements of 40 MHz. However, only a few STAs support 80 MHz channel resources. Therefore, 40 MHz 9& 165 minus bandwidth is recommended. ⚫ Available channels for indoor deployment: ⚫ 2.4 GHz: channels 1, 5, 9, and 13 5 GHz: channels 36–64 and 149–165 AP power: 51 Automatic AP power adjustment is enabled on APs by default. Huawei Confidential 5& 149 plus 1& 36 plus 5& 50 plus 1 & 36 plus 13 minus & 149 plus Quiz 1. (Multiple-answer question) The CloudCampus APP can be used for test acceptance after network deployment. Which of the following items are included in the acceptance? ( A. Field strength B. Interference C. Rate D. Network delay 52 Huawei Confidential 1. ABCD ) Summary ⚫ This course describes the entire WLAN optimization process and solutions, as well as functions and usage of optimization tools such as the CloudCampus APP. ⚫ Upon completion of this course, you will have a clear understanding of the WLAN optimization solutions and be able to leverage the optimization tools to optimize WLANs in practice. 53 Huawei Confidential Recommendations ⚫ 54 Huawei official websites: Enterprise service: https://e.huawei.com/en/ Technical support: https://support.huawei.com/enterprise/en/index.html Online learning: https://www.huawei.com/en/learning Huawei Confidential Acronyms and Abbreviations (1/2) Acronym/Abbreviation 55 Full Name ACL Access Control List ARP Address Resolution Protocol BSSID Basic Service Set Identifier CAC Call Admission Control EDCA Dynamic EDCA Parameter Adjustment MIMO Multiple-Input Multiple-Output P2P Point-to-Point PoE Power over Ethernet QoS Quality of Service RSSI Received Signal Strength Indication Huawei Confidential Acronyms and Abbreviations (2/2) Acronym/Abbreviation 56 Full Name GI Guard Interval SNR Signal-to-Noise Ratio SSID Service Set Identifier vMoS Video Mean Opinion Score Huawei Confidential Thank you. 把数字世界带入每个人、每个家庭、 每个组织,构建万物互联的智能世界。 Bring digital to every person, home, and organization for a fully connected, intelligent world. Copyright© 2022 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice. WLAN O&M Foreword ⚫ Traditional operations and maintenance (O&M) solutions for wireless local area networks (WLANs) ensure normal network operation through routine maintenance, fault information collection, and troubleshooting. ⚫ However, traditional O&M monitors only device indicators but lacks user and network association analysis. That means that user experience may be poor in spite of normal indicators. In addition, issues that may affect user experience cannot be effectively and proactively identified or analyzed. To address this, iMaster NCE-CampusInsight uses telemetry technology to collect performance indicators and logs of network devices in real time and detects network anomalies based on real service traffic. This big data platform supports centralized data collection, storage, and analysis to process big data efficiently. It resolves problems faced by traditional O&M, such as difficulties in locating and analyzing faults, in measuring user experience, and in proactively identifying issues. 2 Huawei Confidential • We will refer iMaster NCE-CampusInsight as CampusInsight for short. Objectives On completion of this course, you will be able to: 3 Describe the traditional WLAN O&M solution. Describe the CampusInsight intelligent O&M solution. Describe CampusInsight functions and features. Understand how to locate common WLAN problems or faults. Huawei Confidential Contents 4 1. Overview of Network O&M 2. Traditional WLAN O&M 3. CampusInsight Intelligent O&M Huawei Confidential Overview of WLAN O&M The life cycle of a network typically includes network planning and design, implementation, optimization, and ⚫ maintenance. Network maintenance can be classified into routine O&M and troubleshooting. Routine O&M aims to prevent problems and minimize unexpected faults. Troubleshooting aims to rectify faults, ⚫ locate fault causes, and provide reference cases for routine O&M, thereby improving O&M efficiency. Network planning and design Network implementation Network optimization Routine O&M • By checking the versions, network bandwidth, and network security of network devices, you can obtain the network parameters in normal cases, helping to lay a solid foundation for troubleshooting. • Routine O&M can prevent problems and minimize unexpected faults. Troubleshooting • Check and locate problems on the live network, and use technical means to resolve them. Network O&M • The accumulated troubleshooting cases can be used as a reference for routine maintenance. 5 Huawei Confidential • This chapter focuses on routine maintenance. For details about troubleshooting, see the following chapters. Routine O&M Contents and Methods Routine O&M involves maintenance for device running environments and device software and hardware. ⚫ Device running environment maintenance: ◼ The device running environment is the basis for stable device running, including the equipment room, power supply, and heat dissipation. ◼ Maintenance personnel need to maintain the device running environment onsite. They sometimes need to use professional tools for observation and measurement. Device software and hardware maintenance: ◼ The running status of device software and hardware is closely related to running services. Huawei products use the universal Versatile Routing Platform (VRP). Network engineers must understand common maintenance commands on the VRP. ◼ Maintenance personnel can maintain device software and hardware onsite or remotely, in most cases, using the display command for check and maintenance. You can use either of the following methods to perform routine maintenance: ⚫ 6 Onsite observation: Observe the hardware running environment of devices. Remote operation: Learn about the running status of the device software and hardware. Huawei Confidential • This course focuses on how to maintain the software and hardware running status of devices. The physical environment check is not described here. Routine O&M Means Traditional WLAN O&M CampusInsight intelligent O&M • Visualized experience management • Device management WAC web system • User journey playback • Performance management • Potential fault identification • Alarm management • Root cause locating • Configuration management AP and STA data collection • Check the versions, network bandwidth, network security, and network performance of network devices on the WAC web system. • Professional engineers are required to locate faults and optimize networks based on O&M results. 7 Telemetry • Predictive network optimization Second-level network data collection • Visualized experience: Telemetry-based second-level data collection is supported, visualizing experience of any user in any application at any moment. • Minute-level proactive identification and root cause locating for potential faults: Proactively identifies potential faults based on dynamic baselines and big data correlation analysis. Accurately locates root causes using KPI correlation analysis and protocol trace. • Predictive network optimization: AI technologies are used to intelligently analyze the load trend of APs to complete predictive optimization of wireless networks. Huawei Confidential • Traditional network management: ▫ Web system: The built-in web server of the device provides a graphical user interface (GUI). You need to log in to the device to be managed from a terminal through Hypertext Transfer Protocol Secure (HTTPS). ▫ CLI mode: You can log in to a device through the console port, Telnet, or SSH to manage and maintain the device. This mode provides refined device management but requires that users be familiar with command lines. Therefore, this course focuses on the web system. • CampusInsight intelligent O&M: ▫ Huawei CampusInsight, an intelligent network analysis platform, radically changes the traditional resource status-centric monitoring mode and applies AI to the network O&M field. Based on existing O&M data (such as device performance indicators and terminal logs), Huawei CampusInsight uses Big Data analytics, AI algorithms, and more cutting-edge analytics technologies to digitize user experience, helping customers quickly detect network problems and improve user experience accordingly. ▫ CampusInsight uses Telemetry technology to performance indicators and logs of network devices and detects network anomalies based on real service traffic. Telemetry is a next-generation network monitoring technology. It uses HTTP/2 and ProtoBuf to collect data from remote devices, which is much more efficient than the traditional SNMP mode. ▫ This big data platform supports centralized data collection, storage, and analysis to process big data efficiently. ▫ In addition to using algorithms to improve efficiency, CampusInsight leverages scenario-based continuous learning and accumulated expert experience to free O&M personnel from complex alarms and noises, making O&M more automated and intelligent. Contents 9 1. Overview of Network O&M 2. Traditional WLAN O&M 3. CampusInsight Intelligent O&M Huawei Confidential WLAN Maintenance ⚫ You can perform routine maintenance for WACs and Fit APs on the WAC web system, including: User experience Device inspection WAC Fit AP 10 ⚫ Check the WAC indicator status. ⚫ Check the online status of STAs. ⚫ Check WAC alarm information. ⚫ ⚫ Check the WAC status. Check reasons for STAs' onboarding failures. ⚫ Check the WAC license status. ⚫ Check the AP indicator status. ⚫ Check the radio health. ⚫ Check the AP status. ⚫ Check the radio status. ⚫ Check whether APs need to be replaced. ⚫ Check radio parameters such as channel utilization. Huawei Confidential User statistics ⚫ Radio Check the overall STA distribution. Checking the Indicator Status ⚫ Observe indicators on each device. If you find any indicator in an abnormal state, record fault information immediately and take measures based on the description of the indicator states. Category WAC Indicator State Description PWR (power supply) Steady green: The power module is working properly. SYS (system) Slow blinking green: The system is running properly. USB (USB port) Steady green: A USB flash drive is connected and works properly. CLOUD (cloud management) Steady green: The cloud management controller is properly connected. Fan indicator Blinking green: The fan module is working properly. Service port indicator Steady green: The link is established. Blinking green: Data is being received or transmitted. Off: No link is established. Slowly blinking white: The system is running properly, the Ethernet connection is normal. AP Single indicator Quickly blinking white: This indicator state indicates a software upgrade, onboarding request, or onboarding failure. Steady red: The system is faulty. * In this example, the AirEngine 9700-M1 is used as the WAC, and the AirEngine 5761-11 is used as the AP. For details about other models, see related product manuals. 11 Huawei Confidential • If all indicators on an AP are off, the indicators may have been turned off through the configuration. It is recommended that you run the undo led off command on the WAC to turn on the indicators and then check the indicator status again. Checking WAC Alarm Information ⚫ Log in to the web system, choose Maintenance > AC Maintenance > Alarm & Event, and check whether critical or major alarms exist. ⚫ Alarms can be classified as critical, major, minor, warning, indeterminate, or cleared alarms in descending order of severity. During routine maintenance, critical and major alarms must be handled in a timely manner. 12 Huawei Confidential • Critical: A fault affects normal operation of the system. Effective measures must be taken immediately. • Major: A fault affects the QoS and requires emergency measures. • Minor: A fault does not affect the QoS. To avoid worse faults, you need to observe or process the fault properly. • Warning: A potential fault exists and may affect services. You need to troubleshoot the fault accordingly. • Indeterminate: The alarm severity is not determined and the alarm impact varies depending on the live network. • Cleared: One or more previous alarms have been cleared. Checking the WAC Status ⚫ Log in to the web system, and choose Monitoring > AC > AC to check whether the WAC is working properly. Check whether the CPU usage and memory usage of the WAC are lower than 80%. If either of them is high, observe the CPU usage or memory usage for a period of time (5-10 minutes). If the CPU usage or memory usage remains high during this period, record fault information and rectify the fault. Check whether the WAC temperature is normal. If the WAC temperature is out of the operating temperature range, check whether fans of the WAC are running normally and whether the ambient temperature is in the normal range. If the temperature keeps increasing and exceeds the upper threshold, the device will be powered off automatically, causing service interruption. 13 Huawei Confidential Checking the WAC License Status ⚫ Log in to the web system, and choose Maintenance > AC Maintenance > License to check whether License status displays Normal. If License status does not display Normal, reload and activate the license. ⚫ Check whether the number of APs connected to the WAC is in the expected range. If an AP fails to go online, check the AP status to analyze the cause. For details, see the following part describing how to check the AP status. 14 Huawei Confidential Checking the AP Status (1/3) ⚫ Log in to the web system, choose Monitoring > ⚫ Summary, and check the AP health score. A higher score indicates better health. If the score is If the AP health score is 100, choose Monitoring > AP to view the CPU usage and memory usage. Check whether the CPU usage of the AP exceeds 90% greater than or equal to 60, the indicator is normal. If and whether its memory usage exceeds 80%. If the CPU the score is less than 60, the indicator is low. usage or memory usage is high, observe the CPU usage or memory usage for 5–10 minutes. If it remains high, record the CPU usage and memory usage data. 15 Huawei Confidential • AP health score = (100% – Number of APs with an abnormal indicator/Total number of APs) x 100 • Four indicators that affect the AP health: ▫ Proportion of abnormal APs (for example, APs in the idle or fault state) ▫ Access failure rate > 20% ▫ Disconnection rate > 20% ▫ Number of access STAs > 40 Checking the AP Status (2/3) ⚫ If the AP health score is lower than 100, check the version, status, STA access failure ratio, STA going-offline ratio, number of STAs, CPU usage, and memory usage. Check AP version information. Check whether the AP version matches the WAC version. If not, upgrade the AP to a version matching the WAC version. Choose Maintenance > Device Upgrade > AP Upgrade to check the APs whose versions do not match the WAC version. 16 Check the AP status. Choose Monitoring > AP and check whether the AP status is normal. Huawei Confidential • Check the AP status. ▫ Check whether the AP status displays as normal. Common AP states and corresponding handling suggestions are described as follows: ▪ normal: The AP is running properly, and no action is required. ▪ fault: The AP failed to go online. Check the network environment and AP onboarding configuration, and reconfigure the AP to go online. ▪ name-conflicted: Another AP with the same name has already gone online. Rename the current AP. ▪ ver-mismatch: The AP and WAC versions do not match. Upgrade the AP to a version matching the WAC version by referring to the AP upgrade guide. ▪ download: The AP is upgrading. Wait until the upgrade is complete. ▪ config: The AP is initializing the configuration. Wait until the initialization is complete. ▪ committing: The WLAN configuration is being delivered to the AP. Wait until the configuration delivery is complete. ▪ standby: This is the AP status displayed on the standby WAC, and no action is required. ▪ countryCode-mismatch: The AP version does not support the country code configured on the WAC. Upgrade the AP or modify the country code on the WAC. ▪ If the AP is in another state or its state cannot restore to normal after you perform the preceding operations, collect network configuration information. Checking the AP Status (3/3) Check the STA access failure ratio and logout ratio. Generally, the user access failure rate and logout rate cannot exceed 20%. Check the number of STAs. Check whether more than 40 STAs connect to the same AP. If more than 40 STAs associate with the same AP, user experience will deteriorate. In this case, reduce the maximum number of STAs that can associate with a VAP to deliver good experience to each user. Choose Diagnosis > Intelligent Diagnosis, select an AP, and start the diagnosis. Handle the problem found in the diagnosis according to the suggestions provided in the diagnostic result. 17 Huawei Confidential • Check the STA access failure ratio and logout ratio. ▫ Check whether STA Access Failure Ratio and Logout Ratio values exceed 20%. If the STA access failure ratio or logout ratio exceeds 20%, record the values. • Check the number of STAs. ▫ Check whether more than 40 STAs connect to the same AP. More STAs connected to a single AP mean fewer resources for each STA and therefore deteriorated user experience. • Only APs of specific models support the intelligent diagnosis function. Checking Whether APs Need to Be Replaced ⚫ If you suspect that an AP is faulty, perform the following operations to quickly replace the AP and retain the original AP configuration: 18 Replace the AP hardware. Log in to the web system and choose Configuration > AP Config > AP Config > AP Info. Select the AP to be replaced and click Replace. Enter the MAC address of the new AP and click OK. After the replacement, the new AP with the ID of the original AP re-associates with the WAC and inherits all the data configured for the original AP. Huawei Confidential • Note: The model of the new AP must be the same as that of the original AP. Checking the STA Status (1/2) ⚫ Log in to the web system, choose Monitoring > ⚫ Summary, and check the user health score. If the user health score is 100, check Login Failure Record and User Distribution. A higher score indicates better health. If the score is Choose Monitoring > User > Online User Statistics > greater than or equal to 60, the indicator is normal. User Login Failure Records to view users' login failure If the score is less than 60, the indicator is low. records. Locate and rectify the fault based on the login failure causes. Choose Monitoring > User > User Distribution to view the user distribution. Check whether too many STAs are connected to a single AP or a single radio. If STAs are unevenly distributed, record STA distribution. 19 Huawei Confidential • User health score = (100% – Number of users with an abnormal indicator/Total number of users) x 100 • Four indicators that affect the user health: ▫ Rate < 12 Mbps ▫ SNR < 20 dB ▫ Downlink retransmission rate > 50% ▫ Downlink packet loss rate > 5% Checking the STA Status (2/2) ⚫ If the user health score is lower than 100, check the negotiated rate, SNR, retransmission rate, packet loss rate, login failure records, and user distribution. ⚫ Choose Monitoring > User > Online User Statistics. In the user list, check whether the negotiated rate, SNR, retransmission rate, and packet loss rate of each user are normal. 20 Huawei Confidential • Check whether the negotiated rate is lower than 12 Mbps. If the negotiation rate of a user is lower than 12 Mbps, choose Configuration > AP Config > Profile > Radio Management, select 2G Radio Profile or 5G Radio Profile, and set a larger value for Maximum rate. • Check whether the SNR of the user is lower than 20 dB. If the SNR of a user is lower than 20 dB, check whether there is severe interference in the radio environment, and record configuration, network deployment, and SNR data. • Check whether the retransmission rate is greater than 50% and whether the packet loss rate is greater than 5%. If the retransmission ratio exceeds 50% or the packet loss ratio exceeds 5%, check whether network communication is normal and whether the radio environment affects data transmission on the network, and record related information. Checking the Radio Status ⚫ Log in to the web system, choose Monitoring > Summary, and check the radio health score. ⚫ If the radio health score is lower than 100, choose Monitoring > Radio to view the number of access STAs, noise strength, channel utilization, rate, downlink retransmission rate, and downlink packet loss rate of a radio. 21 Huawei Confidential • Radio health score = (100% – Number of radios with an abnormal indicator/Total number of radios) x 100 • Four indicators that affect the radio health: ▫ Channel utilization > 70% ▫ Noise strength > –80 dBm ▫ Interference ratio > 40% ▫ Downlink retransmission rate > 50% ▫ Downlink packet loss rate > 5% • Check whether the radio channel utilization exceeds 70%. If so, choose Configuration > AP Config > Radio Planning/Calibration to adjust the working channel of the AP radio during off-peak hours. • Check the noise strength and interference ratio. If the noise strength is greater than –80 dBm or the interference ratio is greater than 40%, check the quality of the radio network environment, check whether there are wireless interference devices, and record related information. • Check the downlink retransmission rate and downlink packet loss rate. If the downlink retransmission rate exceeds 50% or the downlink packet loss rate exceeds 5%, check whether the network communication quality and wireless network environment affect network data transmission, and record related information. Contents 1. Overview of Network O&M 2. Traditional WLAN O&M 3. CampusInsight Intelligent O&M ◼ Overview of Intelligent O&M ▫ Real-Time Experience Visualization ▫ Minute-Level Fault Demarcation ▫ Intelligent Network Optimization 22 Huawei Confidential Challenges Faced by Traditional WLAN O&M Precise detection Experience awareness Issue identification Traditional O&M collects data within In traditional O&M, only device Traditional O&M personnel minutes based on SNMP. The data metrics are monitored. However, cannot proactively identify cannot be obtained in real time once user experience may be poor and analyze issues that may an issue occurs. Moreover, convenient when the metrics are normal. affect user experience until backtracking method is unavailable. There is no correlation analysis users complain about them. between users and networks. Difficult issue locating and analysis 23 Huawei Confidential Difficult user experience measuring Difficult proactive issue identification CampusInsight: Improving User and Service Experience 24 Real-time experience visualization Minute-level fault demarcation Intelligent network optimization • Each area: provides multi-dimensional wired and wireless network health graphs to intuitively display the network status and user experience on the entire network or in each area. • Proactive issue identification: uses the AI algorithm continuously trained by more than 200,000 Huawei devices to proactively identifies 85% of potential network faults. • Real-time simulation feedback: evaluates channel conflicts on wireless networks in real time and provides optimization suggestions based on neighbor and radio information about devices on each floor. • Each user: displays network experience (who, when, which AP is connected to, experience, and issue) of each user in real time throughout the journey, making faults easier to be traced. • Minute-level fault locating: uses the fault inference engine to locate issues within minutes, identify root causes of the issues, and provide effective fault rectification suggestions. • Each application: perceives experience of audio and video applications in real time, demarcates faulty devices quickly and intelligently, and analyzes the root cause of poor-QoE issues. • Intelligent fault prediction: learns historical data through AI to dynamically generate a baseline, and compares and analyzes real-time data with the baseline to predict possible faults. Huawei Confidential • Predictive optimization: identifies edge APs and predicts the AP load trend based on historical data analysis, and performs predictive optimization on wireless networks. • AI roaming: establishes roaming baselines based on different terminal types, and intelligently determine the optimal roaming time, providing users with intelligent lossless roaming experience. CampusInsight: Logical Architecture ⚫ CampusInsight leverages the Huawei-developed big data analytics platform, receives device data through telemetry, and analyzes and displays network data using intelligent algorithms. Service Access analysis Issue analysis Performance experience User APIs Intelligent analysis system CampusInsight AI engine Big data analytics platform Spark Druid Machine learning algorithm library HDFS Kafka Machine learning framework Telemetry Campus 25 ... Huawei Confidential • Service: ▫ Issue identification: identifies issues related to connections, air interface performance, roaming, and devices. ▫ Access analysis and performance experience: analyzes the connection and performance experience issues of wireless users. ▫ User and network profiles: retrospects user journeys. • Data analysis: ▫ Data storage: real-time flow preprocessing, distributed processing of offline flows, and data storage services ▫ Data analysis: mode identification, AI engine, and data aggregation and query • Data collection: ▫ Data collection: multi-dimensional data related to users, radios, APs, switches, and user logs CampusInsight: External Interfaces ⚫ The southbound interfaces of CampusInsight are used to connect to and manage devices, using the following protocols: SNMP, HTTP/2 + ProtoBuf, Syslog, and SFTP. SNMP HTTP/2 + ProtoBuf Syslog SFTP • Standard SNMPv2c and SNMPv3 are supported. • It is used to collect device metric packets. • SNMP enables southbound interfaces of CampusInsight to connect network devices. • HTTP/2 can be used to authenticate and encrypt communication channels over Secure Sockets Layer (SSL) and Transport Layer Security (TLS). • It is a protocol that forwards system logs on an IP network. • It provides a secure network encryption method for file transfer. • SNMP is an application-layer network management protocol based on the TCP/IP architecture. SNMP uses UDP as its transport-layer protocol, and can be used to manage network devices that support proxy processes. 26 • ProtoBuf is a Google-developed data serialization protocol (similar to XML, JSON, and Hessian), which can serialize data and is widely used in data storage and communication protocols. • It is an industry standards-compliant protocol for recording device logs. • CampusInsight uses SFTP to collect APrelated features. • CampusInsight receives log data reported by devices through the Syslog protocol. Huawei Confidential • SNMPv1 and SNMPv2c are insecure and may bring security risks. You are advised to use the secure SNMPv3. CampusInsight Application Scenario: On-Premises Scenario ⚫ When deployed in independent mode, CampusInsight can intelligently analyze wireless and wired devices on the campus network of an enterprise. The following networks are Router supported: All WACs (including native ACs) + Fit APs All WACs (including native ACs) + Central APs + RUs 27 Switches + WLAN devices + BRAS devices WAC Core switch Access switch AP AP Huawei Confidential • Broadband remote access server (BRAS): a network device that implements access, authentication, accounting, control, and management of users connected in various broadband network access modes. The NE8000 or ME60 provides the BRAS function. CampusInsight Application Scenario: Interconnection with CloudCampus (Huawei Public Cloud Scenario) ⚫ In the Huawei public cloud scenario, the cloud management platform (iMaster NCE-Campus and Cloud management platform CampusInsight) is uniformly managed by Huawei cloud management and operations team and provides the SaaS service for end users. Devices on Huawei public cloud DC Carrier network tenant networks are connected to the Huawei cloud management platform through the carrier network. WAC WAC Enterprise network Tenant A 28 Tenant B Huawei Confidential • Device restrictions: Management and intelligent analysis are supported for Huawei switches, WACs, and APs. • Networking structure: Huawei cloud management and operations team deploys CampusInsight and iMaster NCE-Campus on Huawei public cloud DC, and manages devices through iMaster NCE-Campus. CampusInsight synchronizes device management information from iMaster NCE-Campus. Tenants need to purchase management licenses of iMaster NCE-Campus and CampusInsight. CampusInsight Application Scenario: Interconnection with CloudCampus (MSP-owned Cloud Scenario) ⚫ MSPs purchase the controller (iMaster NCE-Campus) and analyzer (CampusInsight) for operational purposes. Software can be deployed in their DCs or on the public cloud. MSPs develop their tenants and provide SaaS services for tenants. Tenant network Cloud management platform MSP DC Carrier network devices connect to the DCs of MSPs or public cloud through the carrier network. WAC WAC Tenant network Tenant A 29 Tenant B Huawei Confidential • Device restrictions: Management and intelligent analysis are supported for Huawei switches, WACs, and APs. CampusInsight Application Scenario: Interconnection with CloudCampus (On-Premises Scenario) ⚫ An enterprise purchases the Huawei cloud management platform (iMaster NCE-Campus and CampusInsight) and deploys the platform in the enterprise DC. O&M personnel of the enterprise Cloud management platform Enterprise DC Carrier network maintain the cloud management platform and enterprise network. The platform is used within the enterprise. The enterprise purchases related licenses WAC WAC from the Huawei service team. Enterprise network Enterprise HQ 30 Enterprise branch Huawei Confidential • Device restrictions: Management and intelligent analysis are supported for Huawei cloud switches, cloud WACs, cloud APs, and BRAS devices. • Networking structure: An enterprise deploys CampusInsight and iMaster NCECampus in its DC, and manages devices through iMaster NCE-Campus. CampusInsight synchronizes device management information from iMaster NCECampus. The enterprise needs to purchase management licenses of iMaster NCECampus and CampusInsight. CampusInsight: Functions and Features Real-time experience visualization Minute-level fault demarcation Intelligent network optimization 31 Huawei Confidential Network User Application Network Spectrum Large-screen Topology Third-party health analysis dashboard management device management management User Terminal journey dialing test Mainstream Visualization application and traffic analysis Individual fault analysis Protocol trace Mainstream application analysis Poor-QoE user analysis Intelligent radio calibration Group fault analysis Wireless group fault analysis Wired group fault analysis AI roaming Contents 1. Overview of Network O&M 2. Traditional WLAN O&M 3. CampusInsight Intelligent O&M ▫ Overview of Intelligent O&M ◼ Real-Time Experience Visualization ▫ Minute-Level Fault Demarcation ▫ Intelligent Network Optimization 32 Huawei Confidential Wireless Network Health: Network-wide Status Visualization Rank different networks or different areas of one network in terms of comprehensive experience evaluation. Evaluate the overall health of a campus network based on a weighted algorithm. Automatically evaluate network quality and send evaluation reports. Diagnose and display details about key experience metrics. 33 Huawei Confidential • Wireless network health refers to the comprehensive experience evaluation of a wireless network. • Diagnose and display details about key experience metrics. ▫ With this module, the system diagnoses the health of experience metrics and factors that affect the metrics. ▫ Key metrics that affect campus network service experience include access success rate, time required for access, and signal coverage and interference, as well as roaming, capacity, and throughput fulfillment rates. • Evaluate the overall health of a campus network based on a weighted algorithm. ▫ The weighted algorithm can be used to comprehensively evaluate key metrics of the campus network. • Rank different networks or different areas of one network in terms of comprehensive experience evaluation. ▫ With this module, the system identifies networks or areas at the bottom of the ranking in terms of overall health status or key metrics. The network O&M team can then upgrade the overall health of the campus network by continuously improving the metrics at the bottom of the ranking. • Automatically evaluate network quality, send evaluation reports, and provide professional evaluation services. ▫ Network quality evaluation reports including the network overview, metric details, and rectification suggestions are periodically generated, enabling data-based network experience evaluation. Network Health Evaluation Model ⚫ Intuitive display of wireless network quality based on six categories in three dimensions: Access experience Check whether users can access the network properly. Roaming experience Check whether the network experience is smooth and whether frame freezing occurs during user movement. Check whether interference exists on the wireless Performance experience network and whether capacity expansion is required. Dimension Access experience Roaming experience Performance experience 34 Evaluation Metric Root Cause Metric Access success rate Association/Authentication/DHCP success rate Timed required for access Time required for association/authentication/DHCP allocation Roaming fulfillment rate Roaming success rate/Roaming duration Signal and interference RSSI fulfillment rate and interference fulfillment rate Capacity health Channel utilization fulfillment rate and user quantity fulfillment rate Throughput fulfillment rate Proportion of dual band capable client preferring 2.4G, air interface congestion fulfillment rate, and physical layer bandwidth Huawei Confidential Exporting Health Reports ⚫ Network quality evaluation reports including the network overview, metric details, and rectification suggestions are generated periodically or in real time, enabling data-based network experience evaluation. 35 Network overview Metric details Rectification suggestions Intuitively display the resource overview, user overview, and quality overview across the entire network. Identify issue objects from seven dimensions of the quality evaluation system and improve user experience . Identify root causes of top network issues and provide rectification suggestions to guide users to continuously improve network quality. Huawei Confidential User Journey: Real-Time Experience Visualization for Each User at Each Moment Step 1: Experience overview View the overall user experience metrics, such as the average latency, experience time on the day, traffic, average RSSI, average bandwidth, and average packet loss rate. Step 2: Experience trend View the fluctuations of user experience metrics (including RSSI, bandwidth, rate, packet loss rate, and latency) and identify issue objects, driving continuous improvement from poor experience to good experience. Step 3: Journey playback View the user experience data at each moment, including the connected AP and experience metric. 36 Huawei Confidential Service Topology: Fault Visualization ⚫ The service topology collects statistics on the status, access, congestion, and error packet issues, as well as displays the number of users and traffic volume based on sites, regions, buildings, and floors. This allows administrators to quickly search for and view the buildings that users pass by, helping administrators quickly identify campus network issues. It is recommended that the total number of sites, regions, buildings, and floors to be viewed be within 10. Otherwise, the sites, regions, buildings, and floors may overlap. Category 37 Issue Abnormal status Port alternating between up and down states, and port of switch alternating between up and down states. Access fault Failed authentication and timed out authentication. Congestion Port congestion and queue congestion. Error packets Port error packets exceeding threshold and error packets continuously increasing on the port. Huawei Confidential Spectrum Analysis: Interference Visualization ⚫ With spectrum analysis, CampusInsight displays the status of all channels by AP in a user-friendly manner. 3 CampusInsight displays the status of all channels by AP in real time and allows administrators to view the historical trend chart, non-Wi-Fi interference source types, and RSSI. All-channel status monitoring Historical trend in the channel dimension 2 The AP reports channel scanning data to CampusInsight through WMI. 1 ... 38 CampusInsight scans the status of all channels by AP in real time, including the co-channel interference ratio, non-Wi-Fi interference ratio, and normal usage ratio of these channels. Wi-Fi/Non-Wi-Fi interference source detection list Huawei Confidential • WLAN Maintaining Insight (WMI): CampusInsight can function as the WMI server to receive KPI information reported by APs. Application Analysis: Network-wide Application Visualization ⚫ Signature identification: determines an application by detecting the signatures in data packets after the system analyzes service flows passing through a device, and compares the analysis result with the signature database on the device. ⚫ Devices report traffic statistics to CampusInsight based on NetStream or applications. It is recommended that traffic statistics be reported based on applications. Traffic statistics of multiple applications on the entire network 39 Huawei Confidential Traffic analysis details of a single application Alarm Monitoring ⚫ The current alarm list is provided. The system proactively displays alarms in the current alarm list, including unacknowledged and uncleared alarms, acknowledged and uncleared alarms, and acknowledged and cleared alarms. O&M personnel can monitor and handle alarms on the current alarm page. ⚫ From the perspective of wireless networks, alarms include high channel utilization, weak-signal coverage, air interface congestion, high interference, client capacity, authentication failure, multiple users going offline, and dual-band-capable client preferring 2.4G. 40 Huawei Confidential • Alarm logs: ▫ The alarm log list is provided. O&M personnel can view current and historical alarms. • Historical alarms ▫ The historical alarm list is provided. O&M personnel can view acknowledged and cleared alarms and export historical alarms for network analysis. • Masked alarms ▫ The masked alarm list is provided. O&M personnel can view masked alarms and determine whether masking rules are appropriate. • Alarm log statistics ▫ Alarms are collected and analyzed from different dimensions, enabling O&M personnel to centrally analyze network alarms. • Alarm setting ▫ Visualized pages are provided for managing alarm rules and settings. • Remote notification ▫ Remote alarm notifications can be sent through emails and SMS messages. When O&M personnel cannot browse alarms on the Current Alarms page, remote alarm notification enables them to receive SMS or email notifications about alarms so that they can handle alarms in real time. Contents 1. Overview of Network O&M 2. Traditional WLAN O&M 3. CampusInsight Intelligent O&M ▫ Overview of Intelligent O&M ▫ Real-Time Experience Visualization ◼ Minute-Level Fault Demarcation ▫ Intelligent Network Optimization 41 Huawei Confidential CampusInsight: Individual and Group Issue Analysis ⚫ During campus network O&M, administrators may encounter the following issues: Individual issues: for example, access failures caused by incorrect terminal configurations. Group issues: for example, group authentication failures caused by authentication server faults and weak-signal coverage issues caused by insufficient AP coverage. Individual fault analysis 1 Journey analysis 2 Access analysis Group fault analysis ⚫ User journey (wireless + wired) Association failure Slow association Protocol trace (wireless + wired) ⚫ ⚫ ⚫ 3 Experience analysis 4 Application analysis Correlation analysis of poor-QoE users (Wireless) Voice/Video application quality awareness (wireless + wired) 2 ⚫ 42 Connectivity issues 1 ⚫ ⚫ ⚫ Authentication ⚫ failure ⚫ Authentication timeout Slow authentication 3 Roaming issues Repeated roaming Roaming exception ⚫ ⚫ ⚫ DHCP failure Slow DHCP User gateway unreachable Air interface performance issues Weak coverage ⚫ High channel ⚫ utilization ⚫ High interference Failure of 5Gprior access Client capacity Air interface congestion Huawei Confidential • CampusInsight analyzes individual issues encountered during network O&M from the perspective of the access network, user journey, experience, and application detection. It analyzes protocol processes, visualizes user journey, performs correlation analysis of poor experience, and detects poor-QoE applications, helping administrators maintain networks and ensure high-quality user experience. • In terms of group issue analysis, CampusInsight: ▫ Quickly identifies a variety of network access issues such as group failure and slow interaction that occur at the association, authentication, and DHCP phases. It also quickly and accurately identifies the root causes of each issue by matching them against a fault knowledge base and provides troubleshooting suggestions accordingly. ▫ Monitors air interface performance data in real time. On the basis of realtime performance monitoring and Huawei's expertise in WLAN field, CampusInsight intelligently identifies six types of air interface issues that affect network access experience after users get connected to the wireless network and provides troubleshooting suggestions accordingly. ▫ Analyzes the process when a user roams between APs to intelligently identify network access experience issues when the user moves and provides troubleshooting suggestions accordingly. Individual Issue Analysis: Journey Analysis ⚫ A user at a site reports that the Wi-Fi experience is poor. With the user journey function, the O&M personnel find that the packet loss rate is high, the RSSI is low, and the weak-signal coverage issue occurs during the user's access to the wireless network. Step 1: Experience overview It shows that the average packet loss rate of the user is high (> 18%). Step 2: Experience trend View the Wi-Fi experience trend of the user. It shows that the user's Wi-Fi experience deteriorates in a period of time when the RSSI is low and the packet loss rate is high. Step 3: Journey playback View the user journey playback details. It shows that the packet loss rate is high and the RSSI is low, together with a weak-signal coverage issue. 43 Huawei Confidential • With user journey, CampusInsight focuses on the actual Wi-Fi experience of users and accurately traces the entire Wi-Fi access process of each user. The traced information vividly presents the user, time, location, connected AP, experience, and issue. Individual Fault Analysis: Protocol Trace ⚫ A user at a site reports that the Wi-Fi cannot be connected. With the protocol trace function of CampusInsight, O&M personnel detect that the DHCP address pool is full, causing the failure to assign IP addresses to mobile phones. Then the O&M personnel modify the configuration to expand the range of available IP addresses in the DHCP address pool. Step 1: Check the status Check the access result in the session list to determine whether access issues have occurred. Step 2: Check the interaction Check the protocol interaction at the association, authentication, and DHCP phases to determine the phase where an issue occurred. Ultimately, it is confirmed that the issue occurred in the DHCP phase, leading to the access failure. Step 3: Check root causes Check the possible root causes and rectification suggestions. 44 Huawei Confidential • With protocol trace, CampusInsight performs refined protocol-level analysis for the three Wi-Fi access phases (association, authentication, and DHCP), presents protocol interaction details at each phase, and provides root causes and rectification suggestions for user access issues. This makes protocol trace a useful tool for resolving Wi-Fi connection failures. Individual Fault Analysis: Poor-QoE User Analysis ⚫ O&M personnel at a site perform routine inspection on users and the Wi-Fi experience of a user is poor. With the correlation analysis function, they find that the most possible cause for the poor Wi-Fi experience is the high radio interference. Then they perform troubleshooting based on the rectification suggestions. The fault is rectified. Step 1: AI-based identification Use AI algorithms to perform outlier detection and intelligently identify the moments when Wi-Fi experience deterioration occurs (marked by red shadows). Step 2: AI-based analysis During the Wi-Fi deterioration period, the radio interference ratio is high, with a metric correlation of 71%, the highest among all related metrics. Step 3: AI-based issue closure CampusInsight provides appropriate rectification suggestions based on the long-term O&M expertise of Huawei engineers. 45 Huawei Confidential • With correlation analysis for Wi-Fi experience deterioration, CampusInsight uses the AI algorithm to perform outliers and intelligently identify users whose Wi-Fi experience deteriorates. In addition, CampusInsight uses the correlation analysis algorithm to analyze the most relevant network metric, so as to locate the root causes of issues and provide appropriate rectification suggestions based on the long-term O&M expertise of Huawei engineers. Individual Fault Analysis: Audio Quality Analysis ⚫ O&M personnel at a site provide assurance for important video conferences attended by company executives and proactively inspect the conference application quality. After detecting a quality issue, O&M personnel use the application troubleshooting function to quickly demarcate the packet loss location of application flows and rectify the issue. Step 1: Application quality identification View basic information such as the 5-tuple of an application flow and quality overview such as packet loss, out-of-order, and jitter. Step 2: Analysis and demarcation Check the physical topology path and actual path of the application flow. Yellow links indicate that the air interface quality is poor. It is suspected that the quality issue occurs on AP4. Step 3: Correlation analysis View the quality metric trend of application flows on the device and metrics of ports to facilitate issue locating. 46 Huawei Confidential • With application quality awareness and fault demarcation, CampusInsight allows O&M personnel to view the quality of specific application flows and demarcate issues for application flows with poor quality. When an issue occurs on the campus network, the O&M personnel can rectify the issue based on the packet loss location. The network is fault-free if the issue occurs on the external networks of the campus. Group Fault Analysis: Connectivity Issue Analysis (1/2) Exception identification: exception detection for network access behaviors. Non-fault failure scenario (area A): Wireless network user access failures always exist, but they may not be faults. Denoising of abnormal clients (area B): Impacts of individual clients are excluded. The failure rate increases sharply due to abnormal clients. Although the failure rate exceeds the baseline, it is not an issue. Intelligently identifying issues with a large number of failed clients and a large failure rate through machine learning (area C): 47 Area A Green curve: user quantity Huawei Confidential Blue curve: failure rate Area B Area C Gray shadow: failure rate baseline User quantity from low to high Intelligently identify group issues with large impact scopes. Failure rate from low to high ⚫ Area A Wireless network user access failures always exist. Area B Impacts of individual clients are excluded. Area C A large number of failed clients exist. Group Fault Analysis: Connectivity Issue Analysis (2/2) ⚫ Pattern identification: Causes may be different for issues with the same symptom. Through pattern identification, possible causes can be found. In addition, features of clients that fail to access the network are abstracted and analyzed using clustering algorithms. ⚫ Root cause analysis: Analyze possible root causes based on client online logs and provide rectification suggestions, helping O&M personnel resolve issues. Root cause analysis and rectification suggestions Fault pattern 48 Huawei Confidential Group Fault Analysis: Weak-Signal Coverage ⚫ The system identifies coverage issues when a batch of users have weak-signal coverage for a period and displays the duration of weak-signal coverage, average RSSI of users, and number of affected users. Then the system analyzes possible causes of the weak-signal coverage issues, and provides rectification suggestions on the issues. Step 1: Issue detection Intelligently identify weak-signal coverage issues. Step 2: Issue analysis Provide the RSSI distribution of users related to the weak-signal coverage issues and fluctuations of the AP power, facilitating issue analysis. Step 3: Issue locating Rectify issues based on the rectification suggestions. 49 Huawei Confidential Group Fault Analysis: High Interference Issue ⚫ The system quickly identifies high co-channel interference issues lasting for a period of time. The high interference lasting duration, number of affected users, and traffic used under the high interference radio can be analyzed. Then the system dynamically analyzes possible root causes of high interference in different scenarios and provides operation suggestions. Step 1: Intelligent identification Quickly identify high co-channel interference issues lasting for a period of time and record them as high interference issues. Step 2: Association analysis Analyze metrics associated with high interference, such as high interference lasting duration, number of affected users, and traffic used under the high interference radio. Step 3: Issue locating Provide possible causes and suggestions to help locate root causes of the issues. 50 Huawei Confidential Group Fault Analysis: Roaming Exception ⚫ The system identifies issues indicating that roaming exceptions frequently occur on an AP. The number of APs and users affected by roaming exceptions can be analyzed. Step 1: Roaming exception overview Display the trend charts of Roaming Exception Rate and Number of Roaming Clients&Number of Roaming Clients Exception Rate. Step 2: Issue identification Display information such as the roaming time, user MAC address, user name, and roaming result of each roaming exception event in the original event list. You can view the roaming-out and roaming-in details, and information about APs that the user connects to in the roaming process. Step 3: Distribution Display the issue overview and distribution of APs affected by roaming exception issues to help locate root causes. 51 Huawei Confidential Contents 1. Overview of Network O&M 2. Traditional WLAN O&M 3. CampusInsight Intelligent O&M ▫ Overview of Intelligent O&M ▫ Real-Time Experience Visualization ▫ Minute-Level Fault Demarcation ◼ 52 Intelligent Network Optimization Huawei Confidential Big Data Calibration Overview ⚫ It is recommended that radio calibration be enabled during off-peak hours at night to prevent impact on services. If the radio environment of an AP differs significantly during off-peak hours and peak hours, the radio calibration effect during off-peak hours may be inapplicable to service requirements during peak hours. ⚫ With the big data calibration function, CampusInsight — Huawei's data analyzer — analyzes KPI information collected by APs on a daily basis and provides prediction data. In this manner, the radio calibration result during off-peak hours may better suit service requirements during peak hours. AI algorithm Historical running data within seven days Baseline training Load prediction Guidance for device calibration Data reporting Device 53 Huawei Confidential • In densely populated scenarios such as canteens, offices, waiting rooms, and cafes, a large number of STAs connect to APs and then disconnect from them within a short period of time. The air interface resources of these APs are occupied by these STAs, resulting in performance deterioration. In addition, the network access experience of such STAs is affected due to unnecessary switching of network access modes. For ease of description, these APs are called edge APs, and STAs that are temporarily connected and quickly leave are called nomadic STAs. The big data analyzer can determine whether an AP is an edge AP based on the network metric data reported by the AP. In the next big data calibration, the big data analyzer adjusts the AP's transmit power to suppress access of nomadic STAs and improve the health of AP radios. Big Data Calibration Process ⚫ An AP reports KPI information to the big data analyzer through the KPI information reporting CampusInsight WAC function. The big data analyzer then summarizes, analyzes, and predicts the KPI information. When scheduled radio calibration is triggered next time, the device performs radio calibration based on the real-time channel quality and the prediction data provided by the big data analyzer. The radio calibration result can help avoid noncontinuous interference sources and better meet service requirements. 54 Huawei Confidential AP Enable KPI reporting. Report KPI information. Perform analysis and prediction based on historical data. Request the prediction data. Deliver the prediction data. Enable channel scanning. Report scanning information. Perform radio calibration. Deliver calibration results. Big Data Calibration Case (1/2) ⚫ A company temporarily re-allocates its employees from the original office area that needs a wireless network upgrade and reconstruction to Building C4. With more employees in Building C4, the network load increases and employees complain that the wireless network becomes slow. To solve this, the company enables the intelligent radio calibration function to automatically identify high-load areas in Building C4 and adjust the AP bandwidth, improving the bandwidth and Wi-Fi experience for employees. 1 Choose Optimization > Big Data Calibration. 55 Huawei Confidential 2 Enable Intelligent Radio Calibration and click Next. On the Load Optimization page, high-load APs on the third floor of C4 are displayed. Big Data Calibration Case (2/2) 3 56 On the second day after big data calibration is enabled, the average bandwidth of APs on the third floor of C4 increases 4 Check the calibration details. The 5 GHz frequency bandwidth of high-load APs on the third floor of C4 is changed from 20 to 252 Mbit/s and the average channel utilization decreases MHz to 40 MHz. As a result, the Internet access experience of to 4%. employees is improved and no frame freezing occurs. Huawei Confidential Quiz 1. (Multiple-answer question) CampusInsight uses southbound interfaces to connect to devices. Which of the following protocols are supported by CampusInsight southbound interfaces? ( ) A. SNMP B. FTP C. HTTP/2 + ProtoBuf D. Syslog 2. (Multiple-answer question) Which of the following functions can CampusInsight implement? ( A. Wireless health evaluation B. Protocol trace C. User journey analysis D. Application analysis 57 Huawei Confidential 1. ACD 2. ABCD ) Summary ⚫ The course describes the traditional WLAN O&M solution. You can log in to the WAC's web system to perform routine maintenance, including viewing the status of the WAC, APs, and users, and radio conditions. ⚫ After learning this course, you will be able to understand the traditional WLAN O&M solution and CampusInsight intelligent O&M solution, improving the capabilities of analyzing and resolving issues during routine wireless network O&M. 58 Huawei Confidential Recommendations ⚫ 59 Huawei official websites: Enterprise service: https://e.huawei.com/en/ Technical support: https://support.huawei.com/enterprise/en/index.html Online learning: https://www.huawei.com/en/learning Huawei Confidential Acronyms and Abbreviations (1/3) Acronym/Abbreviation 60 Full Name AI Artificial Intelligence API Application Programming Interface BRAS Broadband Remote Access Server CLI Command-Line Interface FTP File Transfer Protocol HDFS Hadoop Distributed File System HTTP2 Hypertext Transfer Protocol version 2 HTTPS Hypertext Transfer Protocol Secure IaaS Infrastructure as a Service JSON JavaScript Object Notation Huawei Confidential Acronyms and Abbreviations (2/3) Acronym/Abbreviation 61 Full Name KPI Key Performance Indicator MSP Managed Service Provider ProtoBuf Protocol Buffers RSSI Received Signal Strength Indication RU Remote Unit SaaS Software as a Service SFTP Secure File Transfer Protocol SNMP Simple Network Management Protocol SNR Signal-to-Noise Ratio SSH Secure Shell Protocol Huawei Confidential Acronyms and Abbreviations (3/3) Acronym/Abbreviation 62 Full Name SSL Secure Sockets Layer TCP Transmission Control Protocol TLS Transport Layer Security UDP User Datagram Protocol VRP Versatile Routing Platform WMI WLAN Maintaining Insight XML Extensible Markup Language Huawei Confidential Thank you. 把数字世界带入每个人、每个家庭、 每个组织,构建万物互联的智能世界。 Bring digital to every person, home, and organization for a fully connected, intelligent world. Copyright© 2022 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice. WLAN Troubleshooting Foreword ⚫ The wireless local area network (WLAN) has become the most cost-effective and convenient network access mode. WLAN technology allows users to easily access a wireless network and move around within the coverage area of the wireless network. However, when a fault occurs on the wireless network, services on the entire network may be interrupted. Therefore, wireless network engineers must be capable of troubleshooting WLAN faults. ⚫ 2 This course describes the WLAN troubleshooting methods. Huawei Confidential Objectives ⚫ 3 On completion of this course, you will be able to: Describe the troubleshooting process. Understand WLAN troubleshooting methods. Huawei Confidential Contents 1. Overview of WLAN Troubleshooting 2. Reliability Faults 3. Cloud Management Faults 4. Wireless Bridge Faults 5. Radio Resource Management Faults 6. Roaming Faults 4 Huawei Confidential Introduction to WLAN Faults With increasing requirements for network portability and mobility, WLANs have been applied to various industries. The WLAN ⚫ functions as the access layer of the network. Once a fault occurs on the WLAN, services may be interrupted. WLAN faults can be detected on the network side (for example, device exception alarms) or on the user side (for example, Internet ⚫ access failure). After a fault is detected, you need to collect fault information about each device immediately. Common wireless network faults are as follows: Device faults STA experience faults ✓ ✓ ✓ ✓ ✓ 5 High CPU usage PoE exception Device upgrade failure ... Huawei Confidential ✓ ✓ ✓ ✓ Failure to associate with an AP Internet access failure Slow network speed Unexpected going-offline ... WLAN service faults ✓ ✓ ✓ ✓ Ineffective radio calibration Ineffective user rate limiting MPs' failures to go online on a mesh network ... Cloud management faults ✓ ✓ ✓ ✓ Onboarding failures of cloud APs Roaming failures of STAs between cloud APs Failure to deliver configurations to cloud APs ... Reliability faults ✓ ✓ ✓ ✓ VRRP HSB fault Dual-link HSB fault Dual-link switchover failure ... Troubleshooting Process The basic idea of troubleshooting is to systematically reduce or isolate all the possible causes of a fault into several subsets, thus ⚫ reducing the complexity of the fault. Troubleshooting is to find fault causes step by step, and finally resolve the fault. After a fault is detected, collect fault information about each device immediately, analyze fault information, and then locate and ⚫ rectify the fault. For solution-level troubleshooting on the entire network, the key is to quickly locate the failure point to a component or device based on the fault symptom and then rectify the fault. The following figure shows the troubleshooting process. Fault detection Fault information collection Fault information collection Fault information analysis • Basic fault information: fault occurrence time, fault symptom, severity, networking information, and measures that have been taken. Fault locating Fault rectification 6 • Running status information: startup configuration, current configuration, interface information, and system version. • Device log information: logs recorded when the fault occurs on the device. • Intelligent diagnostic information: diagnostic information generated after the intelligent diagnosis tool diagnoses the WAC/AP or users. Huawei Confidential • Troubleshooting rules: ▫ Recover the system as soon as possible. ▫ During fault locating, collect fault data in a timely manner and save the data to mobile storage media or PCs on the network. ▫ Before determining the fault handling solution, evaluate the solution's impact and ensure normal running of services. Contents 1. Overview of WLAN Troubleshooting 2. Reliability Faults 3. Cloud Management Faults 4. Wireless Bridge Faults 5. Radio Resource Management Faults 6. Roaming Faults 7 Huawei Confidential Reliability Faults In real-world applications, many non-technical factors can cause network failures and service interruptions. An effective way to ⚫ enhance system reliability is to improve fault tolerance capabilities of the system, speed up fault recovery, and reduce the impact of faults on services. Common WLAN reliability technologies focus on network fault recovery, such as VRRP HSB, dual-link HSB, dual-link cold backup, ⚫ and N+1 backup. WLAN reliability faults refer to the faults related to the preceding reliability technologies. WAC1 HSB channel ! Core switch Common faults WAC2 • Failure to deploy VRRP HSB • Failure to deploy dual-link backup • Wireless configuration synchronization failure • Active/Standby switchover failure when the active WAC is faulty Access switch AP 8 Huawei Confidential • Active/Standby switchback failure • Incorrect selection of the active WAC in dual-link mode • Dual-link HSB failure • ... Flowchart for Troubleshooting a Failure to Deploy VRRP HSB Failure to deploy VRRP HSB Is the HSB channel between the master and backup WACs normal? Yes Is the HSB service configured? No No Modify the link configuration. Test services to verify the troubleshooting result. Configure the HSB service. Yes Is VRRP is correctly configured? No Modify the VRRP configuration. Is the fault rectified? Yes No Yes Is the source address correctly configured? No Configure the VRRP virtual IP address as the source address. Yes Is HSB enabled? No Enable HSB. Yes 9 Huawei Confidential • The possible causes are as follows: ▫ The active/standby relationship fails to be established. ▫ The HSB service is incorrectly configured. ▫ The VRRP virtual IP address is not configured. ▫ The source address is not configured. ▫ HSB is disabled. Collect information and seek help. Procedure for Troubleshooting a Failure to Deploy VRRP HSB (1/3) ⚫ Step 1: Check whether the HSB channel between the master and backup WACs is normal. Log in to the master WAC and check whether the link between the master and backup WACs is normal. Run the display hsb-service 0 command to check whether the link status is Connected. Connected indicates that the link is normal, and Disconnected indicates that the link is disconnected. You need to check the link to restore it to the Connected state. [WAC] display hsb-service 0 Hot Standby Service Information: ---------------------------------------------------------Local IP Address : 10.1.1.1 Peer IP Address : 10.1.1.2 Source Port : 10241 Destination Port : 10242 Keep Alive Times :5 Keep Alive Interval :2 Service State : Connected Service Batch Modules : ---------------------------------------------------------- ⚫ Step 2: Check whether the VRRP HSB service is configured on the master and backup WACs. For details, see Step 1. To back up AP information, you need to bind the AP module. To back up user information, you need to bind the Access-user module. Log in to the master and backup WACs and check the bound service types. 10 Huawei Confidential Procedure for Troubleshooting a Failure to Deploy VRRP HSB (2/3) ⚫ Step 3: Check whether the VRRP virtual IP address is configured on the master and backup WACs. Log in to the master and backup WACs to check the VRRP status and virtual IP address using the display vrrp brief command. [WAC] display vrrp brief Total:1 Master:1 Backup:0 Non-active:0 VRID State Interface Type Virtual IP ---------------------------------------------------------------2 Master Vlanif1360 Normal 10.1.1.6 ⚫ Step 4: Check whether the CAPWAP source address is correctly configured. Run the display capwap configuration command. The CAPWAP source address must be set to the VRRP virtual IP address. [WAC] display capwap configuration -----------------------------------------------------------Source interface :Source ip-address : 10.1.1.6 Echo interval(seconds) : 25 Echo times :6 ...... 11 Huawei Confidential Procedure for Troubleshooting a Failure to Deploy VRRP HSB (3/3) ⚫ Step 5: Check whether HSB is enabled. Run the display this command in the HSB group view. [WAC-hsb-group-0] display this # hsb-group 0 track vrrp vrid 2 interface Vlanif1360 bind-service 0 hsb enable # return 12 Huawei Confidential Flowchart for Troubleshooting a Failure to Deploy Dual-Link HSB Failure to deploy dual-link backup Is dual-link backup enabled on the active and standby WACs? No Enable the dual-link backup function. Yes Test services to verify the troubleshooting result. No Is the IP address of the standby WAC correct? Change the IP address of the standby WAC. Yes Yes Does the standby WAC start properly? Is the fault rectified? No Analyze packets and seek help. Yes Are the IP addresses of the active and standby WACs specified on the standby WAC? No Restart the standby WAC. No Configure the IP addresses of the active and standby WACs. Yes 13 Huawei Confidential • The possible causes of a failure to establish dual links between the active and standby WACs include: ▫ The dual-link backup function is disabled on the active WAC. ▫ The standby WAC IP address is not configured on the active WAC, or the configured standby WAC IP address is different from the standby WAC IP address. ▫ The standby WAC is not started properly. ▫ The dual-link backup function is disabled on the standby WAC. ▫ The active WAC IP address is not specified on the standby WAC. ▫ When the AP selects a WAC, the selected active WAC has not started. Procedure for Troubleshooting a Failure to Deploy Dual-Link Backup (1/2) ⚫ Step 1: Check whether the dual-link backup function is enabled on the active and standby WACs. Run the display ac protect command on the active and standby WACs to check whether the dual-link backup function is enabled. If not, run the ac protect enable command to enable the dual-link backup function. [WAC] display ac protect -----------------------------------------------------------Protect state : disable Protect AC IPv4 : 10.23.100.3 Protect AC IPv6 :Priority :0 Protect restore : enable Coldbackup kickoff station : disable Alarm restrain : disable ------------------------------------------------------------ ⚫ Step 2: Check whether the configured IP address of the standby WAC is the same as the actual IP address of the standby WAC. Check the IP address of the standby WAC on the active WAC. For details, see step 1. Run the display capwap configuration command on the standby WAC. If the source address is an IP address, it is directly displayed. If the source address is a VLANIF interface, check the IP address of the VLANIF interface. 14 Check whether the two IP addresses are the same. If they are different, change the IP address of the standby WAC configured on the active WAC. Huawei Confidential Procedure for Troubleshooting a Failure to Deploy Dual-Link Backup (2/2) ⚫ Step 3: Check whether the standby WAC is running properly. If the standby WAC is not running properly, rectify the fault as required. ⚫ Step 4: Check whether the IP addresses of the active and standby WACs are correctly specified on the standby WAC. If this parameter is not configured, the standby WAC does not deliver dual-link information to APs during link establishment with the APs. As a result, dual links cannot be established. [WAC] display ap-system-profile name wlan-net -----------------------------------------------------------------------------AC priority :Protect AC IP address :Primary AC : 10.23.100.2 Backup AC : 10.23.100.3 ... 15 Huawei Confidential Flowchart for Troubleshooting a Wireless Configuration Synchronization Failure Wireless configuration synchronization failure Is the wireless configuration synchronization link established? No Check the configuration to ensure that the master and backup master WACs can communicate. Test services to verify the troubleshooting result. Yes Are the master and backup master WACs configured Consistent? No Manually add inconsistent configurations or manually trigger wireless configuration synchronization. Yes Is the fault rectified? No Yes Is wireless configuration synchronization executed successfully? No Manually run the commands that fail to be synchronized or manually trigger wireless configuration synchronization. Yes 16 Collect information and seek help. Huawei Confidential • In active/standby scenarios, the possible causes of wireless configuration synchronization failures are as follows: ▫ The wireless configuration synchronization link is not set up. ▫ The configurations of the master and backup master WACs are inconsistent. ▫ When wireless configuration synchronization is manually performed, the configuration fails to be restored after the standby WAC restarts. Procedure for Troubleshooting a Wireless Configuration Synchronization Failure (1/2) ⚫ Step 1: Check whether the wireless configuration synchronization link is properly set up. If the status of the wireless configuration synchronization link is up, the configurations of the master and backup master WACs have been synchronized. If the wireless configuration synchronization link is down, the configuration synchronization link is not established. Ensure that the master and backup master WACs can ping each other and check whether the wireless configuration synchronization configuration is correct. [WAC] display sync-configuration status Info: This operation may take a few seconds. Please wait for a moment. done. Controller role: Master/Backup/Local -------------------------------------------------------------------------------------Controller IP Role Device Type Version Status Last synced -------------------------------------------------------------------------------------192.168.10.1 Local up – -------------------------------------------------------------------------------------Total: 1 17 Huawei Confidential • The following lists the status of a wireless configuration synchronization link. You can rectify the fault based on the site requirements. ▫ down: The configuration synchronization link is not established. ▫ initial: The configuration synchronization link starts to be established. ▫ up: The configurations of the active and standby WACs have been synchronized. ▫ psk-mismatch: The PSKs of the active and standby WACs are inconsistent. ▫ ver-mismatch: The versions of the active and standby WACs are inconsistent. ▫ cfg-mismatch(config proc fail): The configuration synchronization link is set up successfully. The configuration on the active WAC is synchronized to the standby WAC, but the configuration fails to be executed. ▫ cfg-mismatch(config check fail): When a link is established for the first time during configuration synchronization, the configurations of the active and standby WACs are inconsistent. ▫ dev-mismatch: The models of the active and standby WACs are different. ▫ cfg-mismatch(sync failed): The configuration synchronization message fails to be sent. As a result, the configuration synchronization fails. Procedure for Troubleshooting a Wireless Configuration Synchronization Failure (2/2) ⚫ Step 2: Check whether the configurations of the master and backup master WACs are consistent. If the status of the wireless configuration synchronization link in step 1 is cfg-mismatch(config check fail), the configurations of the master and backup master WACs are inconsistent. In this case, perform the following operations: Run the display unresumed-configuration command in the diagnostic view of the backup master WAC to check whether configuration restoration failure records exist. Run the display sync-configuration compare command on the master WAC to check whether the public configurations of the master and backup master WACs are consistent. ⚫ Step 3: Check whether there are commands that fail to be executed during configuration synchronization. If the status in step 1 is cfg-mismatch(config proc fail), the configuration synchronization link is successfully established, but the command for synchronizing configurations from the master WAC to the backup master WAC fails to be executed. ⚫ Run the display sync-configuration fail-record command on the backup master WAC to check which commands fail to be executed. Step 4: Run the synchronize-configuration command in the WLAN view of the master WAC to manually trigger wireless configuration synchronization. 18 Huawei Confidential Contents 1. Overview of WLAN Troubleshooting 2. Reliability Faults 3. Cloud Management Faults 4. Wireless Bridge Faults 5. Radio Resource Management Faults 6. Roaming Faults 19 Huawei Confidential Cloud Management Faults ⚫ Huawei wireless cloud management solution includes cloud-based WAC management and cloud-based AP management. Cloud-based WAC: After WACs are registered with iMaster NCE-Campus, administrators can remotely manage and control WACs and Fit APs on enterprise networks, implementing automatic deployment, service provisioning, monitoring, and O&M of wireless networks. Cloud-based APs: APs are registered with iMaster NCE-Campus, and iMaster NCE-Campus delivers operations to APs in a unified manner, facilitating batch service configuration. Router Management faults Cloud WAC Core switch Access switch Fit AP Huawei Confidential Service faults Onboarding failures of cloud WACs • Ineffective radio calibration on cloud APs • Onboarding failures of cloud APs • Roaming failures of STAs between cloud APs • Failure to deliver configurations to cloud APs • In cloud AP scenarios, STA signals are weak. • • Cloud AP upgrade failure ... • ... Cloud AP STAs 20 • Flowchart for Troubleshooting Onboarding Failures of Cloud WACs and APs Onboarding failures of cloud WACs and APs Is the basic configuration correct? No Test services to verify the troubleshooting result. Change the basic configuration. Yes Is the network connectivity normal? No Yes Resolve network connectivity issues. Is the fault rectified? No Yes Can the onboarding failure cause be displayed? Yes Rectify the fault based on the login failure cause. Collect information and seek help. No 21 Huawei Confidential • Common causes of cloud WAC/AP onboarding failures are as follows: ▫ The current device is not working in cloud mode. ▫ The device is not correctly registered with the cloud management platform. ▫ The onboarding configuration on the device is incorrect. ▫ The network between the device and cloud management platform fails. Procedure for Troubleshooting Onboarding Failures of Cloud WACs and APs (1/3) ⚫ Step 1: Check basic configurations. Check whether the device is in cloud mode. If not, switch to the cloud mode. Run the display cloud-mng info command to check information about the cloud management platform on the device. <Huawei> display cloud-mng info -----------------------------------------------------------AP status : Online Controller URL :Controller IP address : 10.1.1.1 Controller port : 10020 Controller address source : configuration ------------------------------------------------------------ Run the display cloud-mng register-center status command to check the status of the registration query center. <Huawei> display cloud-mng register-center status -------------------------------------------------------------------------------------Register center URL : register.naas.huawei.com Register center IP :Register center port: 10020 Current status : sleeping -------------------------------------------------------------------------------------- 22 Huawei Confidential • If the configuration is incorrect, perform the following operations to reconfigure the cloud AP or cloud WAC. To configure the cloud AP or cloud WAC to go online, you need to obtain the IP address or URL of the cloud management platform. ▫ Using DHCP: ▪ When a device sends a DHCP request to obtain the IP address of the cloud management platform, the DHCP response packet returned by the DHCP server carries the Option 148 field (IP address/URL of the cloud management platform). The AP proactively registers with the platform based on the IP address. ▫ Manual configuration using commands: ▪ <Huawei> system-view ▪ [Huawei] cloud-mng controller ip-address 10.1.1.1 port 10020 ▫ Using the registration query center: ▪ If an AP cannot obtain the IP address of the cloud management platform through DHCP or manually, the AP sends a query packet to the registration query center to obtain the IP address of the cloud management platform. Procedure for Troubleshooting Onboarding Failures of Cloud WACs and APs (2/3) ⚫ Step 2: Check the network connectivity between the device and the cloud management platform. Check whether Ethernet0/0/47 is Up and has a correct IP address. # interface Ethernet0/0/47 ip address 169.254.3.1 255.255.255.0 # Use bidirectional ping packets to check whether the two devices can ping each other. <Huawei> ping -c 1000 10.1.1.1 PING 10.1.1.1: 56 data bytes, press CTRL_C to break Reply from 10.1.1.1: bytes=56 Sequence=1 ttl=128 time=3 ms Reply from 10.1.1.1: bytes=56 Sequence=2 ttl=128 time=1 ms Reply from 10.1.1.1: bytes=56 Sequence=3 ttl=128 time=1 ms Reply from 10.1.1.1: bytes=56 Sequence=4 ttl=128 time=1 ms Reply from 10.1.1.1: bytes=56 Sequence=5 ttl=128 time=1 ms During a bidirectional ping test, specify the ping packet size to check whether the ping operation is successful. If the ping operation fails, check the network between the AP and iMaster NCE-Campus. Ensure that they can communicate with each other. 23 Huawei Confidential Procedure for Troubleshooting Onboarding Failures of Cloud WACs and APs (3/3) ⚫ Step 3: Run the display cloud-mng online-fail-record command in the diagnostic view to check the cause of the device onboarding failure and rectify the fault based on the failure cause. 24 Failure Cause Troubleshooting Method AP can't obtain address Check the DHCP server configuration and ensure that the device can obtain an IP address. DNS failed Check the DNS server and ensure that the device can correctly resolve the IP address of the cloud management platform. Register Fail: Internal error, the controller is not already Contact the system administrator of the cloud management platform to ensure that the cloud management platform is running properly. Register Fail: License is not authorized or expired The license is not authorized or has expired. Ensure that the license resources on the cloud management platform are sufficient. Register Fail: The device is not added to the controller Add the ESN of the device to a site of the cloud management platform. Register Fail: The cloud APs cannot add to AC site Add the device to a site of the AP type. Register Fail: The ESN is not in allow rule Contact the system administrator of the cloud management platform to check the configuration and add the ESN of the current device to the device whitelist. Connect to controller failed Check the network connectivity and port to ensure that the device can access port 10020 of the cloud management platform. Other Collect related information and contact technical support personnel. Huawei Confidential • The preceding troubleshooting methods are performed on the device side. You can also perform troubleshooting on the cloud management platform side, which is not described in detail. The possible causes are as follows: ▫ The device version does not match. ▫ The ESN added to the cloud platform is inconsistent with the actual ESN of the device. ▫ The controller license has expired. ▫ The registration service is not started. ▫ The network IP addresses conflict. ▫ The device fails to obtain an IP address due to management VLAN switching. ▫ The length of the registration response packet exceeds the MTU of the device. As a result, the device fails to process the packet. Flowchart for Troubleshooting a Failure to Deliver Configurations to Cloud APs Failure to deliver configurations to cloud APs Is the cloud AP status normal? No Test services to verify the troubleshooting result. Ensure that the AP status is normal. Yes Is the network between the cloud AP and cloud management platform stable? No Ensure network stability between cloud APs and the cloud management platform. Yes Is the fault rectified? No Yes Is the MTU properly configured? No Modify the MTU. Yes 25 Collect information and seek help. Huawei Confidential • The possible causes are as follows: ▫ The configuration fails to be delivered due to network problems. ▪ When the network is unstable, the time when an AP goes offline is almost the same as the time when the configuration fails. ▫ The configuration fails to be delivered due to AP restart. ▪ After the AP is restarted, the configuration fails to be delivered. After the AP is restarted, the configuration is delivered successfully. ▫ The configuration fails to be delivered because the MTU is small. ▪ The default tunnel MTU of a cloud AP is 1400, corresponding to the maximum segment size (MSS) of 1360. Tunnels are configured on some networks, and the actual MTU or MSS is smaller than the value of this parameter. As a result, the configuration fails to be delivered. Procedure for Troubleshooting a Failure to Deliver Configurations to Cloud APs (1/2) ⚫ Step 1: Check whether the AP goes online on the cloud management platform. If not, ensure that the cloud AP is online. ⚫ Step 2: Check the network connectivity between the device and cloud management platform. Run the ping command to check whether packet loss occurs between the AP and cloud management platform. If packet loss occurs, configurations may fail to be delivered. In this case, ensure network stability. If the ping operation fails, check the network between the AP and cloud management platform. Ensure that they can communicate with each other. If the ping operation succeeds but Telnet fails, check whether port 10020 is disabled. # Ping packets in both directions to check whether the ping operation is successful. <Huawei> ping -c 1000 10.1.1.1 PING 10.1.1.1: 56 data bytes, press CTRL_C to break Reply from 10.1.1.1: bytes=56 Sequence=1 ttl=128 time=3 ms Reply from 10.1.1.1: bytes=56 Sequence=2 ttl=128 time=1 ms Reply from 10.1.1.1: bytes=56 Sequence=3 ttl=128 time=1 ms Reply from 10.1.1.1: bytes=56 Sequence=4 ttl=128 time=1 ms Reply from 10.1.1.1: bytes=56 Sequence=5 ttl=128 time=1 ms # Telnet the cloud management platform on the cloud AP. <Huawei> telnet 10.1.1.1 10020 26 Huawei Confidential Procedure for Troubleshooting a Failure to Deliver Configurations to Cloud APs (2/2) ⚫ Step 3: Check whether the MTU is properly configured. Check whether the cloud AP and cloud management platform can ping each other using packets of a specified size. If the ping operation fails, the MTU between the AP and cloud management platform is improper. Change the MTU to a value greater than 1400 (default MTU value of a cloud AP). <Huawei> ping -s 1372 -f 10.1.1.1 // parameter, 1372 indicates that the MTU value is 1400 and the MSS value is 1360. PING 10.1.1.1: 1500 data bytes, press CTRL_C to break Reply from 10.1.1.1: bytes=1372 Sequence=1 ttl=128 time=3 ms Reply from 10.1.1.1: bytes=1372 Sequence=2 ttl=128 time=1 ms Reply from 10.1.1.1: bytes=1372 Sequence=3 ttl=128 time=1 ms Reply from 10.1.1.1: bytes=1372 Sequence=4 ttl=128 time=1 ms Reply from 10.1.1.1: bytes=1372 Sequence=5 ttl=128 time=1 ms --- 10.1.1.1 ping statistics --5 packet(s) transmitted 5 packet(s) received 0.00% packet loss round-trip min/avg/max = 1/1/3 ms 27 Huawei Confidential • To change the MTU, perform the following steps: ▫ In an on-premises scenario, change the MTU value of the network between the cloud AP and cloud management platform. ▫ For a Huawei public cloud, run the tcp adjust-mss command in the interface wan0 view of the cloud AP to change the MSS of TCP packets on the interface, or run the mtu command in the system view to change the MTU. ▫ For devices connected across the public network, the MTU on the public network may change dynamically or the configuration may fail to be delivered. In this case, adjust the MTU value based on the actual situation. Flowchart for Troubleshooting Ineffective Radio Calibration on Cloud APs Ineffective radio calibration on cloud APs Are the automatic channel and power calibration functions enabled for the cloud APs? No Enable the automatic channel and power calibration functions. No Allocate APs to the same site. Test services to verify the troubleshooting result. Yes Are the APs at the same site? Yes No Yes Is the calibration group established? No Modify the configuration to ensure Layer 2 connectivity between APs. Yes 28 Is the fault rectified? Huawei Confidential • The possible causes are as follows: ▫ Cloud APs belong to different sites. ▫ The calibration group is not created. ▫ The fixed channel mode or power mode is used. Collect information and seek help. Procedure for Troubleshooting Ineffective Radio Calibration on Cloud APs (1/2) ⚫ Step 1: On the cloud management platform, check the states of the automatic channel and power calibration functions for a cloud AP. Enable these two functions if they are disabled. ⚫ Step 2: On the cloud management platform, check whether the cloud APs involved in radio calibration are at the same site. APs at different sites cannot establish a calibration group. Ensure that the cloud APs involved in radio calibration are at the same site. 29 Huawei Confidential Procedure for Troubleshooting Ineffective Radio Calibration on Cloud APs (2/2) ⚫ Step 3: Check whether the calibration group is properly established. Log in to the AP and run the display wem leader-info all command in the AP diagnostic view to check the leader AP. [AP] diagnose [AP-diagnose] display wem leader-info all ----------------------------------------------------------------------------------MAC IP Address IsValid Role DeviceSn ----------------------------------------------------------------------------------4cfa-cab7-4ca0 192.168.1.232 1 SLAVE 56a943fc0bfba650 c4ff-1fac-d210 192.168.1.131 1 LEADER 56a943fc0bfba650 ----------------------------------------------------------------------------------Total: 2 If no leader AP exists, no calibration group is created and unified calibration cannot be performed. In this case, check whether Layer 2 isolation is configured. If so, modify the configuration to ensure that APs can communicate with each other at Layer 2. 30 Huawei Confidential Flowchart for Troubleshooting STA Roaming Failures in Cloud AP Scenarios Roaming failures of STAs between cloud APs Are the HAP and FAP at the same site? No Ensure that the HAP and FAP are at the same site. No Check whether Layer 2 isolation is configured and whether APs can scan each other. Test services to verify the troubleshooting result. Yes Is a mobility group established? Yes Is the fault rectified? No Yes Is the NAT networking configured? No Configure the NAT networking on upperlayer NEs. Yes 31 Collect information and seek help. Huawei Confidential • The possible causes for STA roaming failures in cloud AP scenarios are as follows: ▫ Cloud APs are not deployed at the same site. ▫ No mobility group is established between cloud APs. ▫ Cloud APs go online in NAT mode. Procedure for Troubleshooting STA Roaming Failures in Cloud AP Scenarios (1/2) ⚫ Step 1: On the cloud management platform, check whether the cloud APs involved in roaming are at the same site. APs at different sites do not allow STA roaming. ⚫ Step 2: Log in to the APs before and after roaming and run the display wlan wmg mobility-group command to check whether the mobility group is set up. If the value of State in the command output is 2, the inter-AP roaming link is successfully set up. If other APs exist in the mobility group but links fail to be established in the mobility group, ensure that the APs before and after roaming can ping each other and NAT is not configured between the APs. If no other AP exists in the mobility group, query information about neighboring APs on the AP. If no neighboring AP can be scanned, check the AP signal strength, whether obstacles exist between APs, or whether coverage holes exist between APs. [Huawei-diagnose] display wlan wmg mobility-group MemSet Size: 512, MemSet CurSize: 0, MemSet LocalMemID: -------------------------------------------------------------------------------------------------------------------------MemID Local-IP Peer-IP Role IsLoc IsAct IsTun State GrpID RSSI(dBm) Description Time -----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------GrpSet Size : 32, GrpSet CurSize : 0 ----------------------------------------------------------------------------------------------------GrpID LocalMemID MemCount Name MemSet[X,X,X,X] 32 Huawei Confidential • Run the following command on the AP to query neighboring APs: ▫ [AP-diagnose] display umac calibrate neighbor info radio radio-id all Procedure for Troubleshooting STA Roaming Failures in Cloud AP Scenarios (2/2) ⚫ Step 3: Check the reason why the STA goes offline during roaming. Check whether the roaming failure is caused by the NAT mode configured on the cloud AP. <Huawei> display station offline-record all Reason distribution ---------------------------------------------------------------------------------------Reason Count Percent ---------------------------------------------------------------------------------------The device in NAT mode does not support roaming. 1 100% ---------------------------------------------------------------------------------------Total Count: 1 Recent records Rf/WLAN: Radio ID/WLAN ID -------------------------------------------------------------------------------------------------------------------------------------STA MAC Ap name Rf/WLAN Last record time Reason -------------------------------------------------------------------------------------------------------------------------------------044b-ed3f-3db9 0006-f499-9880 1/3 XXXX-XX-XX/12:10:26 The device in NAT mode does not support roaming. -------------------------------------------------------------------------------------------------------------------------------------Total stations: 1 Total records: 1 33 Huawei Confidential Contents 1. Overview of WLAN Troubleshooting 2. Reliability Faults 3. Cloud Management Faults 4. Wireless Bridge Faults 5. Radio Resource Management Faults 6. Roaming Faults 34 Huawei Confidential Flowchart for Troubleshooting MP Onboarding Failures MP onboarding failure Is the MPP online? No Check the reason of the MPP onboarding failure and ensure that the MPP is online. Yes Is the MP imported manually? No Test services to verify the troubleshooting result. Import the MP manually. Yes Is the link is created normally? No Is the basic configuration correct? Yes Does the number of links exceed the specifications? Yes No No Perform multiple queries to ensure the link is stable. Is the fault rectified? Modify configurations. Yes No Collect information and seek help. Adjust the threshold or reduce the number of APs that establish links. Yes Is information about neighboring APs detected? No Adjust parameters Yes 35 Huawei Confidential • The possible causes for MP onboarding failures are as follows: ▫ The MPP is not online. ▫ The MP is not imported. ▫ Mesh links are not established. ▫ Configurations on the WAC are incorrect, such as the Mesh function state, Mesh whitelist, and Mesh role. ▫ The number of links reaches the upper limit. ▫ The distance parameter is not properly configured. ▫ The signal strength is improper. ▫ The AP does not obtain neighbor information of the peer AP. ▫ The possible causes listed here do not include the AP model or antenna hardware problems. Before troubleshooting, ensure that the AP model is correct, the Mesh function is supported, and antennas match the corresponding APs. Procedure for Troubleshooting MP Onboarding Failures (1/4) ⚫ Step 1: Check whether the MPP is online. Similar to common APs, the MPP must go online before MPs can go online in bridging mode. <WAC> display ap all Total AP information: nor : normal [17] -----------------------------------------------------------------------------------------------------------------ID MAC Name Group IP Type State STA Uptime -----------------------------------------------------------------------------------------------------------------0 dcd2-fcf6-20c0 MPP1 ap-group1 192.168.120.254 AP_XXX nor 0 4H:49M:11S ... ⚫ Step 2: Check whether the MP is imported manually. On a mesh network, MPs connect to the network in wireless mode. Before going online on a WAC, you need to import MP information. <WAC> display ap all Total AP information: nor : normal [17] -----------------------------------------------------------------------------------------------------------------ID MAC Name Group IP Type State STA Uptime -----------------------------------------------------------------------------------------------------------------1 dcd2-fcf6-18c0 MP1 ap-group1 192.168.120.25 AP_XXX nor 0 4H:49M:11S ... 36 Huawei Confidential Procedure for Troubleshooting MP Onboarding Failures (2/4) ⚫ Step 3: Check whether mesh links are set up. Check mesh links on the WAC. [WAC-wlan-view] display wlan mesh link all Info: Mesh link does not exist. Check mesh link information, and mesh link setup and disconnection records on the MPP. [AP-diagnose] display umac mesh link-info ... radio_1 mesh link info as follow: ----------------------------------------------------------------------------------------------Peer MAC Link ID Channel Current RSSI(dBm) ----------------------------------------------------------------------------------------------00e0-fc67-080f 123 157 -56 ----------------------------------------------------------------------------------------------[AP-diagnose] display umac mesh link-record ----------------------------------------------------------------------------------------------RadioID PeerMac Time Action ----------------------------------------------------------------------------------------------1 4CFA-CAC1-845F XXXX-XX-XX/16:19:49 delete link (peer VAP down) 1 4CFA-CAC1-845F XXXX-XX-XX/16:19:02 create link ----------------------------------------------------------------------------------------------Total:2 37 Huawei Confidential Procedure for Troubleshooting MP Onboarding Failures (3/4) ⚫ Step 4: Check whether the mesh configuration is correct. Log in to the WAC to check whether the mesh function is enabled, whether the whitelist is configured, whether the mesh role is correct, whether the security profile is correctly configured, whether the mesh ID in the mesh profile is correct, and whether the country code and channel set configured on the MP are the same as those configured on the MPP. Ensure that mesh configurations are correct. For details, see the Mesh Configuration in the WLAN product documentation. Log in to the AP to check whether the configuration is correctly delivered. [AP-diagnose] display umac mesh fsm //Query the current mesh state machine. ---------------------------------------------------------------------State : MESH_FSM_STATE_STOP Checked counts : 0 ---------------------------------------------------------------------- 38 Huawei Confidential [AP-diagnose] display umac mesh fsm --------------------------------------------radio_0 mesh config as follow: --------------------------------------------Mesh switch : On Mesh role : mesh portal Mesh id : mesh-net Mesh max link num : 32 Mesh rssi threshold(dBm) : -89 Mesh report interval(s) : 30 Mesh link aging time(s) : 60 Mesh whitelist num :2 Mesh whitelist mac0 : 00e0-fc64-4600 Mesh whitelist mac1 : 00e0-fcc0-0ac0 Procedure for Troubleshooting MP Onboarding Failures (4/4) ⚫ Step 5: Check whether the number of mesh links reaches the upper limit. If there are multiple APs on the network and all APs are configured with whitelists, all APs can set up mesh links. If the number of links established by the AP reaches the upper limit, subsequent APs cannot establish mesh links with the AP. For details about the query method, see step 3. ⚫ Step 6: Check whether the AP has obtained neighbor information of the peer AP. If neighbor information is displayed but the link cannot be established, check whether the RSSI of the peer AP in the neighbor list is small. If so, reduce the link establishment threshold to allow the peer AP to establish a link. [mp-diagnose] display umac mesh neighbor-info F: Is link full --------------------------------------------------------------------------------------------Neighbour MAC MPP MAC RadioID Channel HopCount RSSI F --------------------------------------------------------------60d7-55b5-3c00 00e0-fc74-9640 1 157 1 -33 0 --------------------------------------------------------------------------------------------Total: 1 39 Huawei Confidential Contents 1. Overview of WLAN Troubleshooting 2. Reliability Faults 3. Cloud Management Faults 4. Wireless Bridge Faults 5. Radio Resource Management Faults 6. Roaming Faults 40 Huawei Confidential Flowchart for Troubleshooting Ineffective Radio Calibration Ineffective radio calibration Is the basic service configuration of the AP is correct? No Configure the AP to go online, enable the radio, and correctly configure the VAP profile. Yes Enable automatic channel and power adjustment. Yes Delete the bound WDS or mesh profile. Test services to verify the troubleshooting result. Yes Are the automatic channel and power adjustment functions disabled? No Is a WDS or mesh profile bound? Is the fault rectified? No Is the calibration channel set properly configured? No Properly configure the calibration channel set and power bandwidth. No Switch the channel for neighbor AP detection. No Wait until the optimization is complete. Yes Does the AP detect neighbor information? Yes Is the calibration process complete? Yes 41 Huawei Confidential • The possible causes are as follows: ▫ No VAP profile is configured. ▫ A WDS or mesh profile is bound. ▫ The radio is disabled. ▫ The calibration channel set is incorrectly configured. ▫ The AP does not detect information about neighboring APs. ▫ The channel is blocked. Yes No Collect information and seek help. Procedure for Troubleshooting Ineffective Radio Calibration (1/5) ⚫ Step 1: Check the basic service configuration of the AP. Check whether the status of all APs is normal on the WAC. <WAC> display ap all Total AP information: nor : normal [2] -----------------------------------------------------------------------------------------------------------------ID MAC Name Group IP Type State STA Uptime -----------------------------------------------------------------------------------------------------------------0 dcd2-fcf6-76a0 area_1 ap-group1 192.168.120.254 AP_XXX nor 0 4H:49M:11S 1 60de-4474-9640 area_2 ap-group1 192.168.120.253 AP_XXX nor 0 6H:3M:40S -----------------------------------------------------------------------------------------------------------------Total: 2 Check whether the AP radio is disabled. If the status of an AP radio is off, the radio is disabled. In this case, enable the radio. <WAC> display radio all ... ST:Status ---------------------------------------------------------------------------------------------AP ID Name RfID Band Type ST CH/BW CE/ME STA CU WM ---------------------------------------------------------------------------------------------1 area_1 0 2.4G bgn on 6/20M 24/24 0 55% normal 1 area_1 1 5G an on 56/20M 25/25 0 3% normal --------------------------------------------------------------------------------------------Total:2 42 Huawei Confidential Procedure for Troubleshooting Ineffective Radio Calibration (2/5) Check whether a VAP profile is configured and whether the VAP status is ON. <WAC> display vap all WID : WLAN ID ---------------------------------------------------------------------------------------------AP ID AP name RfID WID BSSID Status Auth type STA SSID ---------------------------------------------------------------------------------------------0 area_1 0 1 dcd2-fcf6-76a0 ON Open 0 wlan-net 0 area_1 1 1 dcd2-fcf6-76b0 ON Open 0 wlan-net 1 area_2 0 1 60de-4474-9640 ON Open 0 wlan-net 1 area_2 1 1 60de-4474-9650 ON Open 0 wlan-net ---------------------------------------------------------------------------------------------Total: 4 If no VAP information is displayed, no VAP profile is configured. In this case, configure a VAP profile and bind it to the AP group. If the VAP status is OFF, the VAP service is disabled. Check whether the VAP service is manually disabled or whether the scheduled VAP auto-off function is configured. 43 Huawei Confidential Procedure for Troubleshooting Ineffective Radio Calibration (3/5) ⚫ Step 2: Check whether automatic channel and power selection is disabled. If automatic channel and power selection is disabled, radio calibration cannot adjust the channels or power for APs. <WAC> display ap-group name ap-group1 ----------------------------------------------------------------------------... Radio 0 ... Auto channel select : enable Auto transmit power select : enable ... Radio 1 ... Auto channel select : enable Auto transmit power select : enable ... ⚫ Step 3: Check whether the WDS/Mesh profile is bound to the AP or AP group. For details about how to query the WDS or mesh profile, see step 2. If a WDS or mesh profile is incorrectly bound, delete the configuration. 44 Huawei Confidential Procedure for Troubleshooting Ineffective Radio Calibration (4/5) ⚫ Step 4: Check whether the calibration channel set and calibration bandwidth are correctly configured. Check whether the calibration channel set is correctly configured. <WAC> display regulatory-domain-profile name default ---------------------------------------------------------------------------------------------Profile name : default Country code : CN 2.4G dca channel-set : 1,6,11 5G dca bandwidth : 20mhz 5G dca channel-set : 149,153,157,161,165 Wideband switch : enable Channel load mode : outdoor ---------------------------------------------------------------------------------------------- If the calibration bandwidth is set to 40 MHz or 80 MHz, ensure that the configured calibration channel set contains valid 40 MHz or 80 MHz channels. Outdoor APs may not support low frequency channels according to WLAN Country Code & Channels Compliance. In this case, configure calibration channel set containing channels supported by outdoor APs based on this table. If the calibration bandwidth is set to 40 MHz or 80 MHz, the configured calibration bandwidth takes effect only after the next calibration is triggered. 45 Huawei Confidential Procedure for Troubleshooting Ineffective Radio Calibration (5/5) ⚫ Step 5: Check whether the AP detects neighbor information. If the AP does not detect neighbor information, check whether there are obstacles between APs and whether the signals of the current AP are normal. <WAC> display ap neighbor ap-id 1 Radio: Radio ID of AP In control AP: -----------------------------------------------------------------------------Radio AP ID AP name Channel Received RSSI(dbm) Path loss(db) -----------------------------------------------------------------------------0 0 area_1 1 -38 56 -----------------------------------------------------------------------------Total: 1 ... ⚫ Step 6: Check whether the current calibration status is complete. Global radio calibration takes a period of time. If radio calibration does not take effect, check whether the current radio calibration is complete. [AC-diagnose] display wlan wrfm calibrate status RRM calibrate status : ---------------------------------------------------------------------Calibrate mode : manual Calibrate phase(2.4g) : stop Calibrate phase(5g) : stop Calibrate sensitivity : middle Calibrate policy :... 46 Huawei Confidential • The Calibrate phase field has the following states: ▫ deploy: deployment phase ▫ prerun: trial running (global calibration) ▫ period: periodic calibration ▫ stop: Calibration stops. • If Calibrate phase is not in the prerun state, the current global calibration is complete. Contents 1. Overview of WLAN Troubleshooting 2. Reliability Faults 3. Cloud Management Faults 4. Wireless Bridge Faults 5. Radio Resource Management Faults 6. Roaming Faults 47 Huawei Confidential Flowchart for Troubleshooting STA Roaming Failures STA roaming fails. Is the security profile configured consistent? No Modify the security profile to make the configurations consistent before and after roaming. Yes Is Layer 3 roaming disabled? Yes Test services to verify the troubleshooting result. Enable Layer 3 roaming. No Is the VLAN configuration correct? No Modify the VLAN configurations Is the fault rectified? Yes No Yes Is the mobility group status normal? No Modify the mobility group configuration. No Increase the transmit power or add APs. Yes Is continuous signal coverage available? Yes Does a rogue SSID with the same name exist? No 48 Huawei Confidential Yes Disable rogue SSIDs. Analyze packets and seek help. Procedure for Troubleshooting STA Roaming Failures (1/3) ⚫ Step 1: Check whether the security profile configurations on the APs before and after roaming are the same. Enter the security profile view. Configure a new key and ensure that the same key is configured in the security profiles of APs before and after roaming. [WAC-wlan-view] security-profile name default [WAC-wlan-sec-prof-default] security wpa2 psk pass-phrase huawei123 aes ⚫ Step 2: Check whether Layer 3 roaming is disabled. [WAC] display vap-profile name default -------------------------------------------------------------------------------...... Service VLAN ID : 101 Service VLAN Pool :Permit VLAN ID :Auto off service switch : disable Auto off starttime :Auto off endtime :STA access mode : disable STA blacklist profile : STA whitelist profile : Home agent : ap VLAN mobility group :2 Layer3 roam : enable 49 Huawei Confidential • Check the VLAN IDs and roaming domains corresponding to the VAPs of the APs before and after roaming. Layer 2 roaming is performed only when the VAPs have the same VLAN and roaming domain. Otherwise, Layer 3 roaming is performed. • If the STA initiates Layer 3 roaming but Layer 3 roaming is disabled, the roaming fails. You can determine whether to disable Layer 3 roaming based on service requirements. To enable Layer 3 roaming, run the undo layer3-roam disable command. Procedure for Troubleshooting STA Roaming Failures (2/3) ⚫ Step 3: Check whether the VLAN configurations before and after roaming are correct. ⚫ Step 4: If the STA roams between WACs, check whether the mobility group status is normal. Run the display mobility-group command on the WAC to check whether members in the mobility group are in normal state. If members are not in normal state, inter-WAC roaming fails. <WAC> display mobility-group name roam -------------------------------------------------------------------------------AC ID State IP address -------------------------------------------------------------------------------1 normal 192.168.10.3 2 fault 192.168.10.4 -------------------------------------------------------------------------------- If the state of a mobility group member is fault, check whether the mobility group configuration is correct. [AC-mc-mg-mobility] display this # member ip-address 192.168.10.1 member ip-address 192.168.10.2 # return 50 If the configuration is correct, run the ping command to check whether the WACs can communicate with each other. Huawei Confidential Procedure for Troubleshooting STA Roaming Failures (3/3) ⚫ Step 5: Check whether the signal coverage of APs before and after roaming is continuous. If two APs are too far away from each other, STAs may go offline and online again due to discontinuous signal coverage, causing roaming failures. If the signal coverage of APs is discontinuous, increase the transmit power of the APs or add APs to ensure continuous signal coverage. ⚫ Step 6: Check whether a rogue SSID with the same name exists on the WLAN. Check whether a rogue SSID with the same name exists on the rogue neighboring AP. If so, disable the rogue SSID. <WAC> display ap neighbor ap-id 0 Radio: Radio ID of AP ...... Uncontrol AP: -------------------------------------------------------------------------------------------------------------Radio BSSID Channel RSSI(dBm) Last Update Time SSID -------------------------------------------------------------------------------------------------------------0 d0d0-4b22-df00 1 -50 XXXX-XX-XX/15:32:18 0 c4b8-b4f0-6980 1 -44 XXXX-XX-XX/15:31:06 0 10c1-72dd-12e0 11 -41 XXXX-XX-XX/15:28:27 test 0 9c50-ee45-6240 1 -54 XXXX-XX-XX/15:32:06 -------------------------------------------------------------------------------------------------------------Total: 4 51 Huawei Confidential Quiz 1. (Multiple-answer question) A WLAN functions as the access layer of a network. Once a fault occurs on the WLAN, services may be interrupted. What are the common wireless network faults? ( ) A. Internet access failures of STAs B. Poor user experience, such as low network speeds and long roaming time C. Unexpected going-offline of STAs D. Failures to deliver configurations to APs 52 Huawei Confidential 1. ABCD Summary ⚫ This course describes the troubleshooting process and measures for reliability, cloud management, wireless bridge, radio resource management, and roaming service faults. ⚫ On completion of this course, you will be able to understand the WLAN troubleshooting process and troubleshoot common network faults. 53 Huawei Confidential Recommendations ⚫ 54 Huawei official websites: Enterprise service: https://e.huawei.com/en/ Technical support: https://support.huawei.com/enterprise/en/index.html Online learning: https://www.huawei.com/en/learning Huawei Confidential Acronyms and Abbreviations Acronym/Abbreviation 55 Full Name DCA Dynamic Channel Allocation HSB Hot-Standby Backup MSS Maximum Segment Size MTU Maximum Transmission Unit NAT Network Address Translation SSID Service Set Identifier VRRP Virtual Router Redundancy Protocol WDS Wireless Distribution System Huawei Confidential Thank you. 把数字世界带入每个人、每个家庭、 每个组织,构建万物互联的智能世界。 Bring digital to every person, home, and organization for a fully connected, intelligent world. Copyright© 2022 Huawei Technologies Co., Ltd. All Rights Reserved. The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice.