RF Optimization and Layer-3 Roaming Across VLANs in WLAN Networks

Business Requirements

  • Employees access the network via WLAN to support mobile working needs.
  • Seamless roaming across VLANs within coverage areas should not affect ongoing user services.

Network Configuration Requirements

  • AC networking mode: Out-of-band three-layer networking.
  • DHCP deployment:
    • AC acts as DHCP server for APs.
    • Aggregation switch SwitchB serves as DHCP server for STAs.
  • Data forwarding method: Direct forwarding.

Data Planning

AC data table planning is as follows:

Configuration Approach

  1. Establish network connectivity between APs, AC, and surrounding devices.

  2. Configure AP registration.

    • Create AP groups to manage APs requiring identical settings.
    • Set AC system parameters including country code and source interface for communication with APs.
    • Define authentication method for APs and import them offline for successful registration.

  3. Configure WLAN parameters to enable STA access to the wireless network.

Note:

When setting up a new network, users can either manually specify RF channels or use automatic RF optimization for optimal selection.

This example uses the automatic RF optimization feature.

Operational Steps

5.1 Configure Peripheral Devices

Configure Access Switch SwitchA:

  • Interface GE0/0/1 joins VLAN10 and VLAN101.
  • Interface GE0/0/2 joins VLAN10, VLAN101, and VLAN102.
  • Interface GE0/0/3 joins VLAN10 and VLAN102.
  • Default VLAN for GE0/0/1 and GE0/0/3 interfaces is VLAN10.
<HUAWEI> system-view
[HUAWEI] sysname SwitchA
[SwitchA] vlan batch 10 101 102
[SwitchA] interface gigabitethernet 0/0/1
[SwitchA-GigabitEthernet0/0/1] port link-type trunk
[SwitchA-GigabitEthernet0/0/1] port trunk pvid vlan 10
[SwitchA-GigabitEthernet0/0/1] port trunk allow-pass vlan 10 101
[SwitchA-GigabitEthernet0/0/1] port-isolate enable
[SwitchA-GigabitEthernet0/0/1] quit
[SwitchA] interface gigabitethernet 0/0/2
[SwitchA-GigabitEthernet0/0/2] port link-type trunk
[SwitchA-GigabitEthernet0/0/2] port trunk allow-pass vlan 10 101 102
[SwitchA-GigabitEthernet0/0/2] quit
[SwitchA] interface gigabitethernet 0/0/3
[SwitchA-GigabitEthernet0/0/3] port link-type trunk
[SwitchA-GigabitEthernet0/0/3] port trunk pvid vlan 10
[SwitchA-GigabitEthernet0/0/3] port trunk allow-pass vlan 10 102
[SwitchA-GigabitEthernet0/0/3] port-isolate enable
[SwitchA-GigabitEthernet0/0/3] quit

Configure Aggregation Switch SwitchB:

  • Interface GE0/0/1 joins VLAN10, VLAN101, and VLAN102.
  • Interface GE0/0/2 joins VLAN100.
  • Interface GE0/0/3 joins VLAN101 and VLAN102.
  • Create VLANIF100 with IP address 10.23.100.2/24.
<HUAWEI> system-view
[HUAWEI] sysname SwitchB
[SwitchB] vlan batch 10 100 101 102
[SwitchB] interface gigabitethernet 0/0/1
[SwitchB-GigabitEthernet0/0/1] port link-type trunk
[SwitchB-GigabitEthernet0/0/1] port trunk allow-pass vlan 10 101 102
[SwitchB-GigabitEthernet0/0/1] quit
[SwitchB] interface gigabitethernet 0/0/2
[SwitchB-GigabitEthernet0/0/2] port link-type trunk
[SwitchB-GigabitEthernet0/0/2] port trunk allow-pass vlan 100
[SwitchB-GigabitEthernet0/0/2] quit
[SwitchB] interface gigabitethernet 0/0/3
[SwitchB-GigabitEthernet0/0/3] port link-type trunk
[SwitchB-GigabitEthernet0/0/3] port trunk allow-pass vlan 101 102
[SwitchB-GigabitEthernet0/0/3] quit
[SwitchB] interface vlanif 100
[SwitchB-Vlanif100] ip address 10.23.100.2 24
[SwitchB-Vlanif100] quit

Configure Router Interfaces:

  • Interface GE1/0/0 joins VLAN101 and VLAN102.
  • Create VLANIF101 with IP address 10.23.101.2/24.
  • Create VLANIF102 with IP address 10.23.102.2/24.
<Huawei> system-view
[Huawei] sysname Router
[Router] vlan batch 101 102
[Router] interface gigabitethernet 1/0/0
[Router-GigabitEthernet1/0/0] port link-type trunk
[Router-GigabitEthernet1/0/0] port trunk allow-pass vlan 101 102
[Router-GigabitEthernet1/0/0] quit
[Router] interface vlanif 101
[Router-Vlanif101] ip address 10.23.101.2 24
[Router-Vlanif101] quit
[Router] interface vlanif 102
[Router-Vlanif102] ip address 10.23.102.2 24
[Router-Vlanif102] quit

5.2 Configure AC Connectivity

Set interface GE0/0/1 on AC to join VLAN100 and create VLANIF100.

<AC6605> system-view
[AC6605] sysname AC
[AC] vlan 100
[AC-vlan100] quit
[AC] interface vlanif 100
[AC-Vlanif100] ip address 10.23.100.1 24
[AC-Vlanif100] quit
[AC] interface gigabitethernet 0/0/1
[AC-GigabitEthernet0/0/1] port link-type trunk
[AC-GigabitEthernet0/0/1] port trunk allow-pass vlan 100
[AC-GigabitEthernet0/0/1] quit

Define routing from AC to APs, with next hop set to SwitchB's VLANIF100.

[AC] ip route-static 10.23.10.0 24 10.23.100.2

5.3 Configure DHCP Services

On SwitchB, configure DHCP relay to assist AC in assigning IP addresses to APs.

[SwitchB] dhcp enable
[SwitchB] interface vlanif 10
[SwitchB-Vlanif10] ip address 10.23.10.1 24
[SwitchB-Vlanif10] dhcp select relay
[SwitchB-Vlanif10] dhcp relay server-ip 10.23.100.1
[SwitchB-Vlanif10] quit

On SwitchB, create VLANIF101 and VLANIF102 for STAs and define default gateways.

Note:

DNS server addresses should be configured based on actual requirements. Common methods:

  • For interface-based pools, execute dhcp server dns-list ip-address <1-8> under VLANIF interface view.
  • For global pools, execute dns-list ip-address <1-8> under IP pool view.
[SwitchB] interface vlanif 101
[SwitchB-Vlanif101] ip address 10.23.101.1 24
[SwitchB-Vlanif101] dhcp select interface
[SwitchB-Vlanif101] dhcp server gateway-list 10.23.101.2
[SwitchB-Vlanif101] quit
[SwitchB] interface vlanif 102
[SwitchB-Vlanif102] ip address 10.23.102.1 24
[SwitchB-Vlanif102] dhcp select interface
[SwitchB-Vlanif102] dhcp server gateway-list 10.23.102.2
[SwitchB-Vlanif102] quit

On AC, create a global IP pool for APs.

[AC] dhcp enable
[AC] ip pool huawei
[AC-ip-pool-huawei] network 10.23.10.0 mask 24
[AC-ip-pool-huawei] gateway-list 10.23.10.1
[AC-ip-pool-huawei] option 43 sub-option 3 ascii 10.23.100.1
[AC-ip-pool-huawei] quit
[AC] interface vlanif 100
[AC-Vlanif100] dhcp select global
[AC-Vlanif100] quit

5.4 Configure AP Registration

Create AP Groups:

To group APs with similar configurations.

[AC] wlan
[AC-wlan-view] ap-group name ap-group1
[AC-wlan-ap-group-ap-group1] quit
[AC-wlan-view] ap-group name ap-group2
[AC-wlan-ap-group-ap-group2] quit

Create Domain Profile:

Configure country code on AC and apply domain profile to AP groups.

[AC-wlan-view] regulatory-domain-profile name default
[AC-wlan-regulate-domain-default] country-code cn
[AC-wlan-regulate-domain-default] quit

[AC-wlan-view] ap-group name ap-group1
[AC-wlan-ap-group-ap-group1] regulatory-domain-profile default
Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continue?[Y/N]:y 
[AC-wlan-ap-group-ap-group1] quit

[AC-wlan-view] ap-group name ap-group2
[AC-wlan-ap-group-ap-group2] regulatory-domain-profile default
Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continue?[Y/N]:y 
[AC-wlan-ap-group-ap-group2] quit
[AC-wlan-view] quit

Set Source Interface on AC:

[AC] capwap source interface vlanif 100

Register APs:

Import APs offline and assign them to respective AP groups.

Assume the MAC address of an AP is 60de-4476-e360, and label it area_1 based on its location.

[AC-wlan-view] ap-id 0 ap-mac 60de-4476-e360
[AC-wlan-ap-0] ap-name area_1
Warning: This operation may cause AP reset. Continue? [Y/N]:y 
[AC-wlan-ap-0] ap-group ap-group1
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configurations of the radio, Whether to continue? [Y/N]:y 
[AC-wlan-ap-0] quit
[AC-wlan-view] ap-id 1 ap-mac dcd2-fc04-b500
[AC-wlan-ap-1] ap-name area_2
Warning: This operation may cause AP reset. Continue? [Y/N]:y 
[AC-wlan-ap-1] ap-group ap-group2
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configurations of the radio, Whether to continue? [Y/N]:y 
[AC-wlan-ap-1] quit

Note:

After powering on, check display ap all to confirm that the AP status shows "nor" for successful registration.

5.5 Configure WLAN Parameters

Create Security Template:

Define security policy for WLAN network.

[AC-wlan-view] security-profile name wlan-net
[AC-wlan-sec-prof-wlan-net] security wpa-wpa2 psk pass-phrase a1234567 aes
[AC-wlan-sec-prof-wlan-net] quit

Create SSID Template:

Set SSID name to wlan-net.

[AC-wlan-view] ssid-profile name wlan-net
[AC-wlan-ssid-prof-wlan-net] ssid wlan-net
[AC-wlan-ssid-prof-wlan-net] quit

Create VAP Templates:

Configure data forwarding mode, service VLAN, and reference security and SSID templates.

[AC-wlan-view] vap-profile name wlan-net1
[AC-wlan-vap-prof-wlan-net1] service-vlan vlan-id 101
[AC-wlan-vap-prof-wlan-net1] security-profile wlan-net
[AC-wlan-vap-prof-wlan-net1] ssid-profile wlan-net
[AC-wlan-vap-prof-wlan-net1] quit
[AC-wlan-view] vap-profile name wlan-net2
[AC-wlan-vap-prof-wlan-net2] service-vlan vlan-id 102
[AC-wlan-vap-prof-wlan-net2] security-profile wlan-net
[AC-wlan-vap-prof-wlan-net2] ssid-profile wlan-net
[AC-wlan-vap-prof-wlan-net2] quit

Assign VAP Templates to AP Groups:

Apply VAP template configurations to specific radios on each AP group.

[AC-wlan-view] ap-group name ap-group1
[AC-wlan-ap-group-ap-group1] vap-profile wlan-net1 wlan 1 radio 0
[AC-wlan-ap-group-ap-group1] vap-profile wlan-net1 wlan 1 radio 1
[AC-wlan-ap-group-ap-group1] quit
[AC-wlan-view] ap-group name ap-group2
[AC-wlan-ap-group-ap-group2] vap-profile wlan-net2 wlan 1 radio 0
[AC-wlan-ap-group-ap-group2] vap-profile wlan-net2 wlan 1 radio 1
[AC-wlan-ap-group-ap-group2] quit

5.6 Enable Automatic RF Optimization

Enable automatic channel and power adjustment for RF.

[AC-wlan-view] ap-group name ap-group1
[AC-wlan-ap-group-ap-group1] radio 0
[AC-wlan-group-radio-ap-group1/0] undo calibrate auto-channel-select disable
[AC-wlan-group-radio-ap-group1/0] undo calibrate auto-txpower-select disable
[AC-wlan-group-radio-ap-group1/0] quit
[AC-wlan-ap-group-ap-group1] radio 1
[AC-wlan-group-radio-ap-group1/1] undo calibrate auto-channel-select disable
[AC-wlan-group-radio-ap-group1/1] undo calibrate auto-txpower-select disable
[AC-wlan-group-radio-ap-group1/1] quit
[AC-wlan-ap-group-ap-group1] quit
[AC-wlan-view] ap-group name ap-group2
[AC-wlan-ap-group-ap-group2] radio 0
[AC-wlan-group-radio-ap-group2/0] undo calibrate auto-channel-select disable
[AC-wlan-group-radio-ap-group2/0] undo calibrate auto-txpower-select disable
[AC-wlan-group-radio-ap-group2/0] quit
[AC-wlan-ap-group-ap-group2] radio 1
[AC-wlan-group-radio-ap-group2/1] undo calibrate auto-channel-select disable
[AC-wlan-group-radio-ap-group2/1] undo calibrate auto-txpower-select disable
[AC-wlan-group-radio-ap-group2/1] quit
[AC-wlan-ap-group-ap-group2] quit

Configure Channel Sets in Domain Profile:

[AC-wlan-view] regulatory-domain-profile name default
[AC-wlan-regulate-domain-default] dca-channel 2.4g channel-set 1,6,11
[AC-wlan-regulate-domain-default] dca-channel 5g bandwidth 20mhz
[AC-wlan-regulate-domain-default] dca-channel 5g channel-set 149,153,157,161
[AC-wlan-regulate-domain-default] quit

Create Air Scan Profile:

Define channel sets, scan intervals, and durations.

[AC-wlan-view] air-scan-profile name wlan-airscan
[AC-wlan-air-scan-prof-wlan-airscan] scan-channel-set dca-channel
[AC-wlan-air-scan-prof-wlan-airscan] scan-period 60
[AC-wlan-air-scan-prof-wlan-airscan] scan-interval 60000
[AC-wlan-air-scan-prof-wlan-airscan] quit

Create 2.4GHz RF Profile:

Reference air scan profile.

[AC-wlan-view] radio-2g-profile name wlan-radio2g 
[AC-wlan-radio-2g-prof-wlan-radio2g] air-scan-profile wlan-airscan
[AC-wlan-radio-2g-prof-wlan-radio2g] quit

Create 5GHz RF Profile:

Reference air scan profile.

[AC-wlan-view] radio-5g-profile name wlan-radio5g 
[AC-wlan-radio-5g-prof-wlan-radio5g] air-scan-profile wlan-airscan
[AC-wlan-radio-5g-prof-wlan-radio5g] quit

Apply RF Profiles to AP Groups:

[AC-wlan-view] ap-group name ap-group1
[AC-wlan-ap-group-ap-group1] radio-5g-profile wlan-radio5g radio 1
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC-wlan-ap-group-ap-group1] radio-2g-profile wlan-radio2g radio 0
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC-wlan-ap-group-ap-group1] quit
[AC-wlan-view] ap-group name ap-group2
[AC-wlan-ap-group-ap-group2] radio-5g-profile wlan-radio5g radio 1
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC-wlan-ap-group-ap-group2] radio-2g-profile wlan-radio2g radio 0
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC-wlan-ap-group-ap-group2] quit

Initiate Manual Calibration:

[AC-wlan-view] calibrate enable manual
[AC-wlan-view] calibrate manual startup

After one hour, change calibration mode to scheduled and schedule for off-peak hours (e.g., 00:00-06:00).

[AC-wlan-view] calibrate enable schedule time 03:00:00

5.7 Verify Configuration Results

WLAN configurations automatically propagate to APs. After completion, verify using display vap ssid wlan-net. When the Status column shows ON, the VAP has been created successfully.

[AC-wlan-view] display vap ssid wlan-net
Info: This operation may take a few seconds, please wait.
WID : WLAN ID
--------------------------------------------------------------------------------
AP ID AP name RfID WID     BSSID          Status  Auth type     STA   SSID
--------------------------------------------------------------------------------
0     area_1  0    1       60DE-4476-E360 ON      WPA/WPA2-PSK  0     wlan-net
0     area_1  1    1       60DE-4476-E370 ON      WPA/WPA2-PSK  0     wlan-net
1     area_2  0    1       60DE-4474-9640 ON      WPA/WPA2-PSK  0     wlan-net
1     area_2  1    1       60DE-4474-9650 ON      WPA/WPA2-PSK  0     wlan-net
-------------------------------------------------------------------------------
Total: 4

When a STA connects to the network, execute display station ssid wlan-net to verify connection:

[AC-wlan-view] display station ssid wlan-net
Rf/WLAN: Radio ID/WLAN ID
Rx/Tx: link receive rate/link transmit rate(Mbps)
---------------------------------------------------------------------------------
STA MAC         AP ID Ap name   Rf/WLAN  Band  Type  Rx/Tx      RSSI  VLAN  IP address
---------------------------------------------------------------------------------
e019-1dc7-1e08  0     area_1    1/1      5G    11n   46/59      -68   101   10.23.101.254
---------------------------------------------------------------------------------
Total: 1 2.4G: 0 5G: 1

When a STA moves from AP1 to AP2, observe updated association info:

[AC-wlan-view] display station ssid wlan-net
Rf/WLAN: Radio ID/WLAN ID                                                      
Rx/Tx: link receive rate/link transmit rate(Mbps)                             
----------------------------------------------------------------------------------------
STA MAC          AP ID Ap name  Rf/WLAN  Band  Type  Rx/Tx      RSSI  VLAN  IP address     
----------------------------------------------------------------------------------------
e019-1dc7-1e08   1     area_2   1/1      5G    11n   46/59      -58   101   10.23.101.254
----------------------------------------------------------------------------------------
Total: 1 2.4G: 0 5G: 1

Check roaming history using display station roam-track sta-mac e019-1dc7-1e08:

[AC-wlan-view] display station roam-track sta-mac e019-1dc7-1e08
Access SSID:wlan-net    
Rx/Tx:link receive rate/link transmit rate(Mbps) 
c:PMK Cache Roam r:802.11r Roam s:Same Frequency Network
------------------------------------------------------------------------------
L2/L3           AC IP                  AP name              Radio ID
BSSID           TIME                   In/Out RSSI          Out Rx/Tx
------------------------------------------------------------------------------
--              10.23.100.1            area_1               1
60DE-4476-E370  2016/01/12 16:52:58    -51/-48              46/13
L3              10.23.100.1            area_2               1
60DE-4474-9650  2016/01/12 16:55:45    -58/-                -/-
------------------------------------------------------------------------------
Number: 1

Tags: wireless network rf optimization wlan vlan roaming Network Configuration

Posted on Sun, 20 Sep 2026 16:12:45 +0000 by NargsBrood

Hot Tags

©2026 Freaks City