DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 2

1

Session 2

Seminar

Henry Lo

Application Engineer

Rui Jorge

Technical Manager

2

Outline

• High Availability• User Management

- Customized Login Page Logo - Create Accounts for Accommodations

• AP Management- Setup, Configure, and Maintenance - Management Methods

• WiFi Airtime Fairness• AP Station Statistics• Bandwidth Management

3

High Availability

• What is High Availability- Hot-Standby- Active-Standby

• How it Works- Router Setup- Who should be Primary- Primary Updates MAC to Virtual IP, Update DDNS and WCF License- Configuration Sync between Routers

• Test Environment Setup- Dual WAN, WAN1 Static + WAN2 PPPoE- 3 VLANs

• Connectivity Test• Q&A

4

High Availability





5

• Hardware redundancy feature to achieve high availability with Vigor2925 Series

• Redundancy Mode:- Hot-Standby, a.k.a Active/Standby- Active-Standby, a.k.a Active/Active

What is High Availability

6

Hot-Standby

ISPLAN2

LAN3

Status: Primary

Status: Secondary

V2925_A

V2925_B

WAN Online

WAN Offline

LAN1 Management Interface

7

ISPLAN2

LAN3

Status: Down

Status: Primary

V2925_A

V2925_B

WAN Online


Hot-Standby

8

ISP_2

LAN2

LAN3

Status: PrimaryV2925_A

V2925_B

ISP_1

Status: SecondaryWAN Online

WAN Online

NO Load Balance between 2 Routers


Active-Standby

9

ISP_2

LAN2

LAN3

Status: DownV2925_A

V2925_B

ISP_1

Status: PrimaryWAN Online


Active-Standby

10

Outline





: Same WAN line for members, only Primary gets online: Different WAN line for members, all routers are online

11

Outline





12

Routers Setup

192.168.250.2

192.168.250.3

13

ISPLAN2

LAN3



WAN Online

V2925_BStatus: SecondaryWAN Offline

192.168.250.2

192.168.250.3

Routers Setup

14

V2925_A V2925_B

• Same Group ID

Routers Setup

15

V2925_A V2925_B

• Same Group ID• Define Priority, Primary has highest Priority (30 is highest)

- If same priority, compare the LAN IP (192.168.1.1>192.168.1.2)

Routers Setup

16

V2925_A V2925_B

• Same group should share same Authentication Key• Choose Management Interface for communication• Allow updating DDNS when CPE become Primary

- All members share the same DDNS profiles

Routers Setup

17

V2925_A V2925_B

• Choose LAN subnets for HA• Define the Virtual IP

- All members should have the same Virtual IP

Routers Setup

18

V2925_A V2925_B

• Use different LAN IPRouters Setup

19

V2925_B

• Use different LAN IP• LAN IP will be replaced by HA Virtual IP

- Only see this message when HA is enabled and Virtual IP is set

Routers Setup

V2925_A

20

ISP

CARP

Who should be Primary


WAN Online


192.168.250.2

192.168.250.3

Priority: 30

Priority: 20

• Highest Priority CPE is Primary

CARP

• At beginning, all members send CARP- CARP includes Priority


21

ISP

CARP

Who should be Primary


WAN Online


192.168.250.2

192.168.250.3

• Primary router sends CARP packets to all members

• If NOT receiving CARP packets, Secondary will go up

Priority: 30

Priority: 20

• Highest Priority CPE is Primary

• At beginning, all members send CARP- CARP includes Priority


22

ISPLAN2

LAN3

Virtual IP for LAN2: 192.168.2.1 MAC C6:4B:D8


Status: SecondaryV2925_B

192.168.250.3 192.168.2.3 192.168.3.3 MAC BE:92:60

Update MAC for Virtual IP


192.168.250.2 192.168.2.2 192.168.3.2MAC C6:4B:D8


23

ISPLAN2

LAN3

Status: Down

Status: Primary

V2925_A

V2925_B


192.168.250.2 192.168.2.2 192.168.3.2MAC C6:4B:D8

192.168.250.3 192.168.2.3 192.168.3.3 MAC BE:92:60



MAC BE:92:60

MAC BE:92:60


24

V2925_A V2925_B

• Tips: Use arp -a to confirm current Primary and other members

DrayTek:~ HATest$ arp -a? (192.168.250.1) at 0:1d:aa:c6:4b:d8 on en3 ifscope [ethernet]? (192.168.250.2) at 0:1d:aa:c6:4b:d8 on en3 ifscope [ethernet]? (192.168.250.3) at 0:1d:aa:be:92:60 on en3 ifscope [ethernet]? (192.168.250.255) at ff:ff:ff:ff:ff:ff on en3 ifscope [ethernet]

LAN MAC: C6:4B:D8 LAN MAC: BE:92:60

Primary


25

V2925_A V2925_B

• Tips: Use arp -a to confirm current Primary and other members

DrayTek:~ HATest? (192.168.250.1) at 0:1d:aa:c6:4b:d8 on en3 ifscope [ethernet]? (192.168.250.2) at 0:1d:aa:c6:4b:d8 on en3 ifscope [ethernet]? (192.168.250.3) at 0:1d:aa:be:92:60 on en3 ifscope [ethernet]? (192.168.250.255) at ff:ff:ff:ff:ff:ff on en3 ifscope [ethernet]

LAN MAC: C6:4B:D8 LAN MAC: BE:92:60


PrimaryDrayTek:~ HATest$ arp -a? (192.168.250.1) at 0:1d:aa:be:92:60 on en3 ifscope [ethernet]? (192.168.250.3) at 0:1d:aa:be:92:60 on en3 ifscope [ethernet]? (192.168.250.255) at ff:ff:ff:ff:ff:ff on en3 ifscope [ethernet]

26

Update DDNS and WCF License

• Update DDNS

27

Update DDNS and WCF License

• Update WCF License - Non-Stop WCF firewall protection

28

V2925_A V2925_B

• Config file sync from Primary to Secondary(s)- Only for Hot-Standby mode

Config Sync between Routers

29

• Sync all config with some exceptions

- LAN IP Address and Subnet Mask• LAN

- DHCP Gateway IP

• Router Name


• The following part will NOT be synced

30


• Sync all config with some exceptions

- Admin password

• Router login passwords

- User password

• The following part will NOT be synced

31

ISP

CARP


V2925_BStatus: Secondary

• We MUST make sure other members can always receive CARP

- Not safe to rely on a single switch which also takes care of other LAN traffics

Routers Setup

32

ISP



Routers Setup

Dial WAN

• We MUST make sure other members can always receive CARP

- Not safe to rely on a single switch which also takes care of other LAN traffics

IP Conflict!

- If switch freeze/loop/power down

33

ISP



Routers Setup

• Suggestion 1 Ethernet cable wired to both router LAN port- Ideal for HA group with

only 2 membersFor traffics

For HA use only

34

ISP



Routers Setup


only 2 members

• Suggestion 2 Additional switch for HA only

For HA use onlyFor traffics (and HA)

35

ISPFor HA use only



Routers Setup


only 2 membersFor traffics (and HA)

- Ideal for HA group with more than 2 members

V2925_CStatus: Secondary

• Suggestion 2 Additional switch for HA only

36

Outline





37

Connectivity Test

• Video on youtube https://youtu.be/2QkPj16O5ow

• Test Results- WAN Connectivity recovered in 14 seconds- VPN Dail-out Connectivity recovered in 16 seconds- VPN Dail-in Connectivity recovered in 58 seconds

https://youtu.be/2QkPj16O5ow

38

Outline





39

Customized Login Logo

40

Customized Login Logo

41

Accounts for Guests• Create Accounts for Rooms

42

• Create User Group for accounts

Accounts for Guests

43

• Apply to Firewall — Request User Login for Guests

Accounts for Guests

44

Outline





45

AP Management

• Plug-n-Play Setup• AP Configuration Provision• AP Maintenance • Wireless LAN Management

- Dashboard - Traffic Graph for each AP - AP Load Sharing - AP Roaming

46

Plug-n-Play Setup

PoE on Switch AP Plug-n-Play

47

• Before connection• After connection• Router provides DHCP Address to AP

Plug-n-Play Setup

48

AP Configuration Provision

49

• Apply to Device

AP Configuration Provision

50

AP Maintenance

• Choose an Action

51

AP Traffic Graph

52

AP Dashboard

• Status and Event Log for All APs

• Traffics for Top 5 APs

• Station Number for Top 5 APs

53

AP Station Number

54

AP Total Traffics

55

• Define the Overload Indicator

AP Load Balance/Sharing

56


• By Traffic

Traffic: 32 MbpsLimit: 32 Mbps


57


58


• Force Overload Disassociation



16 Mbps 16 Mbps

10 Mbps10 Mbps

0 Mbps Idle

59

AP Roaming

• Pre-Authentication — Roam to Next• PMK Cache — Roam Back

60

AP Roaming

61

AP Roaming

62

AP Roaming

63

Outline





64

• Theory:

- Channel Can be Accessed by Only One Station at a Time (802.11)

- Each Station has Equal Priority to Access the Channel (802.11e)

8 Stations

12.5%

12.5%

12.5%

12.5% 12.5%

12.5%

12.5%

12.5%

20 Stations

Airtime Fairness

65

Test Environment Setup

Link Rate 130Mbps

Link Rate 65Mbps

Doors Keep Close

AP900192.168.38.2/24

110120130140150160170

210

PC, JPerf Client

JPerf ServersTest Direction: LAN to WLAN

66

Without AirTimeFairness

Test 1 Test 2 Test 3 Average

192.168.38.110 1.17 1.78 1.84 1.60

192.168.38.120 7.26 7.18 7.58 7.34

192.168.38.130 8.59 8.25 8.70 8.51

192.168.38.140 4.37 3.46 3.68 3.84

192.168.38.150 7.22 7.06 7.13 7.14

192.168.38.160 6.93 6.81 7.83 7.19

192.168.38.170 1.68 1.57 1.75 1.67

Sub Total 37.22 36.11 38.51 37.28

192.168.38.210 5.49 5.83 5.46 5.59

Total 42.71 41.94 43.97 42.87

Without AirTime Fairness

Link Rate65 Mbps

Link Rate130 Mbps

67

Some Stations May Feel the


“Stall”

68

Without AirTime Fairness• Theory: Each Station has

Equal Probability to Use AirTime - But Some Stations may be Good at

Occupying the AirTime

Theory

12.50%

12.50%

12.50%

12.50% 12.50%

12.50%

12.50%

12.50%

• Test Result without AirTime Fairness

Without Airtime Fairness

21013.35%

1703.88%

16016.70%

15016.60%

1408.93%

13019.77%

12017.05%

1103.72%

69

With AirTime Fairness

70

With AirTimeFairness

Test 1 Test 2 Test 3 Average

192.168.38.110 4.75 4.70 4.57 4.67

192.168.38.120 5.71 5.59 5.68 5.66

192.168.38.130 9.09 9.21 8.21 8.84

192.168.38.140 5.21 5.14 5.37 5.24

192.168.38.150 8.34 8.53 8.45 8.44

192.168.38.160 9.52 9.23 9.41 9.39

192.168.38.170 3.30 3.29 3.42 3.34

Sub Total 45.92 45.69 45.11 45.57

192.168.38.210 4.64 4.80 4.54 4.66

Total 50.56 50.49 49.65 50.23


Link Rate65 Mbps

Link Rate130 Mbps

71


“Stall”

• Stations have More Equalized Performance - Assuming they have the same hardware speed, more equalized

performance can be related to more equalized AirTime

72


2109.26%170

6.64%

16018.65%

15016.76%

14010.41%

13017.76%

12011.25%

1109.28%


21013.35%

1703.88%

16016.70%

15016.60%

1408.93%

13019.77%

12017.05%

1103.72%

Comparison in BetweenIndividual Ratio

73

• 22.24% Improvement

Clients with 130Mbps Link Rate

WithoutAirTime Fairness

WithAirTime Fairness

Difference Improvement

192.168.38.110 1.60 4.67 3.07 191.88%

192.168.38.120 7.34 5.66 -1.68 -22.89%

192.168.38.130 8.51 8.84 0.33 3.88%

192.168.38.140 3.84 5.24 1.4 36.46%

192.168.38.150 7.14 8.44 1.3 18.21%

192.168.38.160 7.19 9.39 2.2 30.60%

192.168.38.170 1.67 3.34 1.67 100.00%

Sub Total 37.28 45.57 8.29 22.24%

192.168.38.210 5.59 4.66 -0.93 -16.64%

Total 42.87 50.23 7.36 17.17%20

25.2

30.4

35.6

40.8

46

Without With

45.57

37.28

74

• -16.64% Deduction

Client with 65Mbps Link Rate

0

1.4

2.8

4.2

5.6

Without With

4.66

5.59




192.168.38.110 1.60 4.67 3.07 191.88%

192.168.38.120 7.34 5.66 -1.68 -22.89%

192.168.38.130 8.51 8.84 0.33 3.88%

192.168.38.140 3.84 5.24 1.4 36.46%

192.168.38.150 7.14 8.44 1.3 18.21%

192.168.38.160 7.19 9.39 2.2 30.60%

192.168.38.170 1.67 3.34 1.67 100.00%

Sub Total 37.28 45.57 8.29 22.24%

192.168.38.210 5.59 4.66 -0.93 -16.64%

Total 42.87 50.23 7.36 17.17%

75

• 17.17% Improvement

Overall

30

35.5

41

46.5

52

Without With

50.23

42.87




192.168.38.110 1.60 4.67 3.07 191.88%

192.168.38.120 7.34 5.66 -1.68 -22.89%

192.168.38.130 8.51 8.84 0.33 3.88%

192.168.38.140 3.84 5.24 1.4 36.46%

192.168.38.150 7.14 8.44 1.3 18.21%

192.168.38.160 7.19 9.39 2.2 30.60%

192.168.38.170 1.67 3.34 1.67 100.00%

Sub Total 37.28 45.57 8.29 22.24%

192.168.38.210 5.59 4.66 -0.93 -16.64%

Total 42.87 50.23 7.36 17.17%

Summary of AirTime Fairness

76

• Improve Overall WiFi Performance, in Most Cases - Stations with Good Link Rate get Increased - Stations with Poor Link Rate get Decreased

• Hint: In Central AP Management >> Load Balance, set Force Overload Disassociation as by single Strength

77

Outline





78

AP Station Statistics

• Connected and Not Connected (Nearby)- Last 2 Hours / Daily / Weekly

79


• Connected and Not Connected (Nearby)

80


81


82


• Connected and Not Connected (Nearby)- Last 2 Hours / Daily / Weekly

• Analyze “Nearby”- Close Nearby: Visiting (signal > -65 dBm) - Far Nearby: Passing (signal < -65 dBm)

83

AP Station Statistics• Connected and Not Connected (Nearby)

- Last 2 Hours / Daily / Weekly• Analyze “Nearby”- Close Nearby: Visiting (signal > -65 dBm) - Far Nearby: Passing (signal < -65 dBm)

84

AP Station Statistics• Connected and Not Connected (Nearby)

- Last 2 Hours / Daily / Weekly• Analyze “Nearby”- Close Nearby: Visiting (signal > -65 dBm) - Far Nearby: Passing (signal < -65 dBm)

85

Outline





86

Bandwidth Management

• Bandwidth Limit• Session Limit• QoS

87

Bandwidth Limit

88

• Default – if no specified rule for this IP address• Auto Adjustment to utilize bandwidth

• Check Data Flow Monitor

Bandwidth Limit

89

Bandwidth Limit

90

• Specified rule for IP address(es)

Bandwidth Limit

91

Bandwidth Limit

92

Session Limit

93

QoS

94

QoS

95

• Give Bandwidth Ratio

QoS

96

• Check QoS Status• Flexible Bandwidth Allocating

- “Others” is eligible to use more bandwidth when possible

QoS

97

Q&A

Technology

DrayTek RoadShow 2015 @ Portugal (Setembro) - Sessão 2