background image

 

12 

GATEWAY 

REFERENCE GUIDE 

R1C 

12 of 25

 

Controller 

In the Software-Defined Wireless Networking (SDWN) architecture the control plane is 
centralized in a 

Controller

, while the data plane remains distributed. Data plane elements 

like  the  Gateway  are  configured  with  the  IP  address  or  fully  qualified  domain  name 
(FQDN) of the 

Controller

Enter configuration mode 

vyatta@vyatta:~$ 

configure

 

[edit] 

Configure the Controller IP 
or domain name 

vyatta@vyatta# 

set service anyfi gateway "1x-gw" controller 

x.x.x.x

 

[edit] 

Commit, save and exit 
configuration mode 

vyatta@vyatta# 

commit

 

vyatta@vyatta# 

save

 

vyatta@vyatta# 

exit

 

The  Gateway  should  now  have  registered  with  the  specified 

Controller

  and  is  ready  to 

accept incoming SDWN data plane tunnels from 

radios

 using the same 

Controller

NOTE

  The  Controller  is  a  controller  in  the  Software-Defined  Networking  (SDN) 

sense  of  the  word,  not  in  the  typical  corporate  WLAN  sense.  For  example  the 
Controller is not involved in IEEE 802.1X authentication and does not have access 
to  end-user  credentials  or  encryption  keys.  Configuring  the  Gateway  with  a 
Controller has no impact on system security. 

UDP/IP Port Range 

Gateways  send  and  receive  raw  IEEE  802.11  frames  over  SDWN  data  plane  UDP/IP 
tunnels and will also communicate with the 

Controller

 over UDP/IP. The UDP port range 

that  a  Gateway  will  use  for  such  SDWN  control  and  data  plane  communication  is 
configurable. 

Enter configuration 
mode 

vyatta@vyatta:~$ 

configure

 

[edit] 

Configure the SDWN 
UDP port range 

vyatta@vyatta# 

set service anyfi gateway "1x-gw" port-range 

xxxx-xxxx

 

[edit] 

Commit, save and 
exit configuration 
mode 

vyatta@vyatta# 

commit

 

vyatta@vyatta# 

save

 

vyatta@vyatta# 

exit

 

Configuration  of  the  UDP  port  range  used  for  SDWN  data  and  control  can  facilitate 
integration of the Gateway in environments with strict IP firewalling. 

Summary of Contents for Carrier Wi-Fi System

Page 1: ...TEWAY REFERENCE GUIDE Overview Installation Basic Configuration Wi Fi Client Isolation Wi Fi Security Settings IEEE 802 1X and EAP RADIUS for AAA GRE for Payload System Monitoring V stergatan 31 B 211...

Page 2: ...OTICES Anyfi Networks proprietary Anyfi is a registered trademark of Anyfi Networks AB All other trademarks are the property of their respective owners RELEASE DATE 14th of April 2014 DOCUMENT REVISIO...

Page 3: ...Tunnel Termination Point 2 Service 2 Chapter 2 Installation 3 Installing as a Virtual Appliance 3 Installing as a Vyatta Package 3 Upgrading to a Newer Version 5 Chapter 3 Configuration 6 Basic Netwo...

Page 4: ...ERENCE GUIDE R1C UDP IP Port Range 12 Load Balancing and Failover 13 Chapter 4 Integration 14 RADIUS for AAA 14 Authentication 14 Authorization 15 Accounting 17 GRE for User Payload 18 SNMP for System...

Page 5: ...ts are encouraged to study the materials available at www anyfinetworks com resources Document Conventions This guide contains advisory paragraphs and uses the below typographic conventions Advisory P...

Page 6: ...command line italics An argument or variable where you supply a value Also concepts and principles when mentioned inline key A key on your keyboard such as Enter Combinations of keys are joined by pl...

Page 7: ...ta center or mobile core safe in the knowledge that the radio access problem can be separately addressed later The Gateway implements an IEEE 802 11 stack complete with WPA and WPA2 security CCMP AES...

Page 8: ...utes one or two Basic Service Sets BSSes to an Extended Service Set ESS A single Gateway can contribute millions all the virtual access points allocated on connected SDWN radios Service The IEEE 802 1...

Page 9: ...d in Open Virtual Appliance OVA format essentially a bundle of virtual machines in one file Each OVA file comes with a Getting Started Guide containing step by step instructions on how to import the e...

Page 10: ...rks PGP key vyatta vyatta wget http packages anyfinetworks com vyatta pubkey gpg O sudo apt key add Update the software package database vyatta vyatta sudo apt get update Once the repository has been...

Page 11: ...vyatta vyatta sudo apt get install y anyfi gateway vyatta anyfi gateway Restart the Gateway vyatta vyatta restart anyfi gateway Stopping anyfi gateway anyfi gateway Starting anyfi gateway anyfi gatew...

Page 12: ...can instead be tunneled out over GRE Enter configuration mode vyatta vyatta configure edit Configure basic IP networking vyatta vyatta set interfaces ethernet eth1 address x x x x xx edit vyatta vyatt...

Page 13: ...edit service anyfi gateway open gw vyatta vyatta top edit Review changes vyatta vyatta show service anyfi gateway gateway open gw bridge br0 controller x x x x ssid Open Wi Fi edit Commit save and exi...

Page 14: ...tta show service anyfi gateway gateway 1x gw authentication eap radius secret secret radius server x x x x bridge br0 controller x x x x ssid Secure Wi Fi wpa2 edit Commit save and exit configuration...

Page 15: ...and or TKIP block ciphers It is also possible to configure the group rekey interval and whether or not to renegotiate the group key after every disassociation strict rekeying Enter configuration mode...

Page 16: ...ice anyfi gateway 1x gw authentication vyatta vyatta set eap radius secret secret edit service anyfi gateway 1x gw authentication vyatta vyatta top edit Commit save and exit configuration mode vyatta...

Page 17: ...tta edit service anyfi gateway 1x gw accounting edit service anyfi gateway 1x gw accounting vyatta vyatta set radius server x x x x edit service anyfi gateway 1x gw accounting vyatta vyatta set radius...

Page 18: ...e Software Defined Networking SDN sense of the word not in the typical corporate WLAN sense For example the Controller is not involved in IEEE 802 1X authentication and does not have access to end use...

Page 19: ...he service UUID vyatta gw 1 set service anyfi gateway 1x gw uuid uuid edit Commit save and exit configuration mode anyfi gw 1 commit anyfi gw 1 save anyfi gw 1 exit Disconnect from the first Gateway v...

Page 20: ...rnal systems Authentication The following RADIUS message types are supported on the authentication interface Access Request Access Challenge Access Accept Access Reject The following table lists the R...

Page 21: ...cess Accept Access Reject Disconnect Request Disconnect ACK Disconnect NAK CoA Request CoA ACK CoA NAK The following table lists the RADIUS attributes supported on the authorization interface as well...

Page 22: ...s Accept CoA Request WISPr Bandwidth Max Up Access Accept CoA Request WISPr Bandwidth Max Down Access Accept CoA Request Cisco AV Pair url redirect Access Accept CoA Request The following table lists...

Page 23: ...ge types that may contain them Table 4 Supported RADIUS authentication attributes Attribute Message types Message Authenticator all NAS IP Address Accounting Request NAS Port Type Accounting Request U...

Page 24: ...bridge br0 edit interfaces tunnel tun0 vyatta vyatta set remote ip x x x x edit interfaces tunnel tun0 vyatta vyatta top edit Commit save and exit configuration mode vyatta vyatta commit vyatta vyatta...

Page 25: ...rget x x x x community name edit service snmp vyatta vyatta set location location edit service snmp vyatta vyatta set contact contact edit service snmp vyatta vyatta top edit Commit save and exit conf...

Reviews: