Cisco Connect Japan 2014:安定した無線 LAN 上でビジネス クリティカルなアプリケーションを利用するには?
1. Ᏻᐃ䛧䛯↓⥺ LAN ୖ䛷䝡䝆䝛䝇㻌䜽䝸䝔䜱䜹䝹
䛺䜰䝥䝸䜿䞊䝅䝵䞁䜢⏝䛩䜛䛻䛿?
CC5-4
ᓮ⚽⾜
䝔䜽䝙䜹䝹㻌䝃䞊䝡䝇
䝔䜽䝙䜹䝹㻌䜰䝅䝇䝍䞁䝇䝉䞁䝍䞊
䝅䝙䜰㻌䜹䝇䝍䝬䞊㻌䝃䝫䞊䝖㻌䜶䞁䝆䝙䜰
2. Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public 3
3. ᴗ↓⥺ LAN 䛻ฟ⌧䛧䛯᪂䛯䛺䜰䝥䝸䜿䞊䝅䝵䞁
䝸䜰䝹䝍䜲䝮㻌䝖䝷䝣䜱䝑䜽㻌䜰䝥䝸䜿䞊䝅䝵䞁 : Real-Time Traffic over WLAN
ୖ䛾ྥୖ / ⏕⏘ᛶ䛾ྥୖ㻌/ 䝁䝇䝖䛾๐ῶ
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
4
§ XaaS 䜰䝥䝸䜿䞊䝅䝵䞁㻌/ 䝃䞊䝡䝇 - ᪥ᖖᴗົ䛷⏝
§ 㡢ኌ㏻ヰ (Voice over WLAN : VoWLAN) - ᦠᖏ㟁ヰᩱ㔠䛾๐ῶ
§ 䝔䝺䝥䝺䝊䞁䝇, Cisco Webex - ㎿㏿䛺㆟䛸ពᛮỴᐃ䛾ᐇ⌧
§ 䝡䝕䜸䝇䝖䝸䞊䝭䞁䜾 - ♫ෆእ䛾ሗⓎಙရ㉁䛾ྥୖ
§ ௬䝕䝇䜽䝖䝑䝥㻌- 䝕䞊䝍䛾Ᏻ䛺㐠⏝䛸➃ᮎ䝁䝇䝖䛾๐ῶ
§ BYOD - ᚑᴗဨ䛾ᶵືᛶྥୖ䛸‶㊊ᗘ䛾ྥୖ
§ ᪧ᮶䛾䜰䝥䝸䜿䞊䝅䝵䞁௨ୖ䛾ᣢ⥆ᛶ䛸䝸䜰䝹䝍䜲䝮ᛶ⬟䛾せồ
– 䛹䛣䛷䜒䛘䜛
– 䜘䜚ᑠ䛥䛺㐜ᘏ䚸䝆䝑䝍
䛣䜜䜢ᐇ⌧䛷䛝䜜䜀䜰䝥䝸䛿Ᏻᐃ䛩䜛
– 䜘䜚ప䛔䝟䜿䝑䝖㏦⋡
– 䜘䜚ᑡ䛺䛔䝟䜿䝑䝖䝻䝇
4. 䝉䝑䝅䝵䞁䛾ෆᐜ
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
5
§ ᴗ↓⥺ LAN ୖ䛻ฟ⌧䛧䛯᪂䛯䛺䜰䝥䝸䜿䞊䝅䝵䞁
§ ↓⥺ LAN 䛾䝕䝄䜲䞁
o ồ䜑䜙䜜䜛ရ㉁䛸ᢏ⾡᮲௳
o RF 䝕䝄䜲䞁
o CleanAir 䝔䜽䝜䝻䝆䞊
o 䝺䞊䝎䛾ᙳ㡪䛸䚷DFS
o 䝉䝹䝕䝄䜲䞁
§ 䝻䞊䝭䞁䜾䛻㏵ษ䜜䛥䛫䛺䛔䛯䜑䛻
§ QoS 䛸 Cisco Prime Infrastructure 䛾ά⏝
§ ᥎ዡタᐃ୍ぴ
§ ཧ⪃ᅗ᭩䛚䜘䜃ᩥ᭩
13. RF 䝕䝄䜲䞁䛾ᇶᮏ
䝏䝱䝛䝹༨᭷⋡ VS ↓⥺ LAN ᖏᇦ
§ 100% - 䝏䝱䝛䝹༨᭷⋡㻌䍦 䛭䛾䝏䝱䝛䝹䛷↓⥺㻌LAN 䛻䛘䜛ᖏᇦ(㛫)
– ≀⌮ⓗ䛺䝜䜲䝈䚸ᖸ΅䛻ຍ䛘䛶௬䜻䝱䝸䜰䝉䞁䝇䛧䛯⤖ᯝ䜒ᫎ䛥䜜䛶䛔䜛
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
14
ṧ䜚㻌4% 䛾ᖏᇦ䛧䛛⏝䛷䛝䛺䛔
15. NO! ぢ䛘䜎䛩!
CleanAir 䝔䜽䝜䝻䝆䞊䛾ά⏝
§ SE Connect 䝰䞊䝗䛾 CleanAir AP
§ Spectrum Expert (Windows)
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
16
࿘Ἴᩘ䚸㛫䚸ฟ⌧䝟䝍䞊䞁䜢≉ᐃ
࿘Ἴᩘ(䝏䝱䝛䝹)
㛫䛾⤒㐣
㟁Ἴ䛾ᙉ䛥 ᙉ
ᙅ
㐣ཤ
⌧ᅾ
16. CleanAir 䛾䛔䛸䛣䜝
㧗ゎീᗘゎᯒ䛷ṇ☜䛻㆑ู
᪤〇ရ䛾 Wi-Fi 䝏䝑䝥䝉䝑䝖
䛷䛾ᖸ΅※䛾ㄆ㆑
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
17
Cisco CleanAir 䛾㧗ゎീᗘゎᯒ
(78 - 156 KHz ᖜ)
䛣䛾ື䛝䛿㟁Ꮚ䝺䞁䝆䟿
䛣䜜䛿 Bluetooth !
ఱ䛛䛒䜛䛺䛑䠛
䠄䛯䜆䜣䠅BlueTooth ?
Power
Power
?
㛫㍈䛾⣽䛛䛔ศᯒ
࿘Ἴᩘ㍈䛾⣽䛛䛔ゎᯒ
17. CleanAir 䛾䛔䛸䛣䜝
ヲ⣽䛺䝺䝫䞊䝖ᶵ⬟ – Cisco Prime Infrastructure (CPI) 䛸䛾⤌䜏ྜ䜟䛫
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
18
Air Quality
ᙳ㡪ᗘ䛾ุᐃ
18. 䛭䛧䛶ሙᡤ䚸ᙳ㡪⠊ᅖ䜎䛷䜟䛛䜛䟿(⮬ື)ᑐฎ䛷䛝䜛䟿
Mobility Service Engine (MSE) との連携も
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
19
䛘 AP 䛛䜙㐲䛔ᖸ΅※䛷䛒䛳䛶䜒䚸ᙳ㡪⠊ᅖෆ㒊䛻䜽䝷䜲䜰䞁䝖䛜Ꮡᅾ䛩䜛ሙྜ䛿䚸Event
Driven RRM (ED-RRM) ᶵ⬟䛻䜘䜚㏿䜔䛛䛻ู䝏䝱䝛䝹䜈⮬ືⓗ䛻⛣⾜䛩䜛䛣䛸䜒ྍ⬟
19. 䝺䞊䝎䛸㻌DFS : Dynamic Frequency Selection
Wi-Fi 㟁Ἴ䛿᪤Ꮡ䛾䝺䞊䝎タ䛻䇾㓄៖䇿䛩䜛⩏ົ䛜䛒䜛
䝟䝹䝇䛾 㛫䚸ཷಙ㟁ຊ䚸䝗䝑䝥䝷䞊
࿘Ἴᩘ➼䛛䜙⨨䚸㞵㔞䚸㏿ᗘ➼䜢⟬ฟ
ᚤᙅ䛺ᑕἼ
┤᥋Ἴ
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
20
ほ 䜢ΰ䛥䛫䜛ᜍ䜜䛒䜚
(5 GHz W53, W56 䝞䞁䝗)
䜒䛧 AP 䛜䝺䞊䝎䛾䝟䝹䝇㟁Ἴ䜢᳨▱䛧䛯ሙྜ䚸䛯䛰䛱䛻ᡤᐃ䛾
㛫ෆ䛻㟁Ἴ䜢Ṇ䜑䚸ู䛾࿘Ἴᩘ䜈⛣ື䛧䛺䛡䜜䜀䛺䜙䛺䛔
DFS ືస
✚㞼Ⓨ⏕
20. ㌟䛾ᅇ䜚䛻Ꮡᅾ䛩䜛䝺䞊䝎
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
21
ᅜ䛻䛒䜛 5GHz ᖏ䛷ືస䛩䜛㞵㔞 ᐃ䝺䞊䝎
http://www.river.go.jp/
(ᅜᅵ㏻┬ “ᕝ䛾㜵⅏ሗ” 䜘䜚)
⩚⏣✵ ෆ䛾✵ Ẽ㇟䝗䝑䝥䝷䞊䝺䞊䝎
http://www.jma-net.go.jp/haneda-airport/䚷
(ᮾி⯟✵ᆅ᪉Ẽ㇟ྎ “⩚⏣✵ WEATHER TOPICS” 䜘䜚)
21. ༊㉥ᆏ9┠䛾ሙྜ
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
䝇䝨䜰䝘
+ ᣦྥᛶ䜰䞁䝔䝘
22
§ ⤊ᴗᚋ䛾ᮾி䝭䝑䝗䝍䜴䞁䝍䝽䞊䛛䜙༡༡ᮾ䛾᪉ゅ䜢⮫䜐䛸䞉䞉䞉
22. ほ 䛥䜜䛯㟁Ἴ䛾୍
§ ⣙5280MHz 䛻䛚䛔䛶䚸ఱ䜙䛛䛾䝟䝹䝇≧(ᗈᖏᇦ)䛾㟁Ἴ䛜㧗䛔䝺䝧䝹䛷↷ᑕ䛥䜜
䛶䛔䜛䛣䛸䛜䜟䛛䜛
– 䝺䞊䝎(*) 䛻䜘䜛 DFS ືస䛜䝏䝱䝛䝹 56 䛷Ⓨ⏕䛩䜛ᜍ䜜䛜䛒䜛(䛛䜒䛧䜜䛺䛔)
*䛯䛰䛧䚸䝺䞊䝎䛾ほ 䛿㠀ᖖ䛻㞴䛧䛟䚸ุู䛻䛿䝇䝨䜰䝘➼ᑓ⏝䛾ᶵᮦ䛸῝䛔䝺䝧䝹䛾ゎᯒ䛜
ᚲせ䛷䛩䚹ୖグ䛾䛾㟁Ἴ䛜䝺䞊䝎䛷䛒䜛䛣䛸䜢♧䛩䜒䛾䛷䛿䛒䜚䜎䛫䜣䚹
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
23
24. DFS 䛾ᒚṔ䛿 WLC 䛸 CPI 䛷☜ㄆྍ⬟
Trap 䝻䜾 (show traplog)
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
25
(WLC) show ap auto-rf 802.11a {AP_name}
Radar Information
Channel 124.................................. 267 seconds ago
Channel 128.................................. 267 seconds ago
25. DCA 䝸䝇䝖䛾᭱㐺䛾 (RF Profile)
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
26
ண䜑䝏䝱䝛䝹 56 䜢㝖䛧䛯
䛖䛘䛷䚸⮬ື䝏䝱䝛䝹タᐃ
37㝵༡ഃ㆟ᐊ䛾 AP 䛜
ᡤᒓ䛩䜛㻌AP 䜾䝹䞊䝥䛻㐺⏝
䝸䝸䞊䝇㻌8.0 䛛䜙䛾᪂ᶵ⬟
䛺䛚 DCA 䝸䝇䝖ෆ䛾䝏䝱䝛䝹䛷┤㏆ 30ศ
㛫䛻䝺䞊䝎᳨▱䛥䜜䛯䜒䛾䛻䛴䛔䛶䛿䚸⮬
ືⓗ䛻 DCA 䛾ೃ⿵䛛䜙እ䜜䜎䛩
26. 䝉䝹䝕䝄䜲䞁
電波の物理的な性質で決まる
§ 㞳䜜䜛䛸ῶ⾶䛩䜛
§ SNR
§ 䝏䝱䝛䝹༨᭷⋡
§ ᑕ䛥䜜䜛䚸྾䛥䜜䜛䚸ᅇ䜚㎸䜐䚸㏱㐣䛩䜛
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
27
28. RToWLAN 䛾䝉䝹䝕䝄䜲䞁䛾ᇶᮏ㻌(2/2)
§ 䝴䞊䝄䛾⏝ሙᡤ䛸ᮇᚅ್䜢䛧䛳䛛䜚ᢕᥱ䛩䜛
– ఇ᠁ᡤ䚸ᗯୗ䚸㝵ẁ䚸䜶䝺䝧䞊䝍䝩䞊䝹䚸ᒇእ䚸etc.
§ 䝃䜲䝖䝃䞊䝧䜲䜢ᐇ䛩䜛
– ᮘୖ᳨ウ䛸ᐇ㝿䛷䛿␗䛺䜛䛣䛸䛜䜋䛸䜣䛹
§ 䜽䝷䜲䜰䞁䝖䛾䝕䝄䜲䞁䜺䜲䝗䜢䜘䛟ㄞ䜐
– 䝻䞊䝭䞁䜾䛻㛵䛩䜛ሗ➼䛜㍕䛳䛶䛔䜛
§ タ⨨ᚋ䜒ᐇ㝿䛾䜽䝷䜲䜰䞁䝖䛸䜰䝥䝸䜢䛳䛶ၥ㢟↓䛔䛣䛸䜢☜ㄆ䛩䜛
– 䜽䝷䜲䜰䞁䝖䛾Ⓑ䜢⌮ゎ䛩䜛
EV EV
EV
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
29
EV
EV EV
EV EV
29. AP 㓄⨨䛾ᮘୖ᳨ウ
§ 㞄᥋䝉䝹䛷␗䛺䜛䝏䝱䝛䝹䛻䛩䜛
§ 㔜䛺䜛㒊ศ䛿䝉䝹䛾㻌20%௨ୖ䛻䛩䜛
§ 䝉䝹䛾ᮎ➃䛿㻌-67dBm
§ ྠ୍䝏䝱䝛䝹䛾䝉䝹䛸䛿㻌19dB 㞳䛩
§ ୖୗ㝵䛷❧యⓗ䛻⪃䛘䜛
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
30
ྠ୍䝏䝱䝛䝹:
19dB 㞳
䝉䝹䛾ᮎ➃:
-67dBm
Ch 36 Ch 116 Ch 52 Ch 100
Ch 124 Ch 44 Ch 108 Ch 60
30. 䝃䜲䝖䝃䞊䝧䜲
ᮘୖ᳨ウཬ䜃ᮇᚅ್䛸䛾䜼䝱䝑䝥䛿䛣䛣䛷ᢕᥱ䛧䛶ᨵၿ
§ ⏝䜢ᐃ䛧䛶䛔䜛⨨䛷䚸せ௳䜢‶䛯䛧䛶䛔䜛䛛
– 䝟䜿䝑䝖䝻䝇䛿 1% ௨ෆ
– 䜶䞁䝗䝒䞊䜶䞁䝗䛾㐜ᘏ䠄䝆䝑䝍䠅䛿 30 䝭䝸⛊௨ෆ
– ∦㐨䛷 150 䝭䝸⛊௨ෆ䛾䝛䝑䝖䝽䞊䜽㐜ᘏ
– 䝟䜿䝑䝖㏦⋡䛿 20% ௨ෆ
– 䜰䝥䝸䛾せồ䛩䜛ఏ㏦䝺䞊䝖
§ 䜰䞁䝔䝘䛾ྥ䛝䜔㻌AP 䛾⨨䛝᪉䛻ၥ㢟䛿↓䛔䛛
§ 㟁Ἴ䜢྾䛩䜛㞀ᐖ≀䛿↓䛔䛛
§ 䛹䛣䛛䛻➨୕⪅䛾↓⥺ LAN 䛿↓䛔䛛
§ 䛹䛣䛛䛻䝜䜲䝈䛾Ⓨ⏕※䛿↓䛔䛛
§ DFS 䛾Ⓨ⏕㢖ᗘ䛿䛹䛾䝏䝱䝛䝹䛷䛹䛾⛬ᗘ䛛
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
31
31. VoWLAN ⎔ቃ㐺ྜᛶ䜢 Prime Infrastructure 䛷☜ㄆ
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
32
Bad!
Good!
Inspect Voice Readiness ᶵ⬟
35. 802.1x 䜢䛳䛯䛺ㄆド - 㛫䛜䛛䛛䜛
CPU ฎ⌮㏿ᗘ
䛜 PC 䜘䜚㐜䛔
ሙྜ䜒䛒䜛
Probe Request
Probe Response
Auth Request
Auth Response
Association Request
Association Response
EAP Start
EAP ID Request
EAP ID Response
EAP Method
EAP Success
EAPoL 4 way handshake
DATA
AP WLC Radius
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
2 – 10+
CPU ฎ⌮䛸
㛫䜢せ䛩䜛
RADIUS
36. 䝇䝬䞊䝖䝣䜷䞁䛷 PEAP ㄆド䛾↓⥺䝣䝺䞊䝮䜻䝱䝥䝏䝱
802.11 Authentication
Association ΅
EAP, RADIUS ΅
170ms
4-way Handshake
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
210ms
38. IEEE 802.11r 䛾๓ㄆド䜢䛳䛯䝻䞊䝭䞁䜾
䛣䛾ே䛜䛛䜙䛭䛳䛱䛻⾜䛟䜘
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
39
AP1 䛛䜙 AP2, 3, 4 䜈⛣ື
๓ㄆドሗ (WLC ᭷⥺⤒⏤)
AP1 䛛䜙 AP2, 3, 4 䜈⛣ື
39. IEEE 802.11r 䜢䛳䛯䝻䞊䝭䞁䜾 - ๓ㄆド䛷▷⦰
䝻䞊䝭䞁䜾ඛAP WLC RADIUS
802.11r ᑐᛂ➃ᮎ Action frame - Fast BSS Transition : FT
(SNonce)
Action frame - Fast BSS Transition : FT
(SNonce + ANonce)
Reassociation Response – Fast BSS Transition
(SNonce + ANonce)
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
40
Probe Request
Probe Response
Reassociation Request – Fast BSS Transition
(SNonce + ANonce)
RTP
䜻䝱䝑䝅䝳䛥䜜䛯䜻䞊䜢
ཧ↷䛧䛶ྜྰุᐃ
Authentication 䛸 4-way handshake
䛾ศ䜢䛥䜙䛻▷⦰
๓ㄆドሗ
40. IEEE 802.11r ᑐᛂ䝇䝬䞊䝖䝣䜷䞁䛷䝻䞊䝭䞁䜾䛾
↓⥺䝣䝺䞊䝮䜻䝱䝥䝏䝱 (Over the DS 䝻䞊䝭䞁䜾)
Probe Request /
Probe Response
Action Frame - FT
FT (802.11r) 䛷
ReAssociation ΅
11ms 䛷䝻䞊䝭䞁䜾
䛯䛰䛧䚸Authentication 䝣䝺䞊䝮ᵓ㐀䛜ኚ᭦䛥䜜䛯䛯䜑䚸Ⓩሙᙜึ䛿 802.11r ᑐᛂ䛸㠀ᑐᛂ➃ᮎ䛜
ྠ୍ SSID 䛻ᡤᒓ䛩䜛䛣䛸䛜䛷䛝䛺䛛䛳䛯䚹㻌CUWN 8.0 䛛䜙ྠ䛻ᡤᒓ䛩䜛䛣䛸䛜ྍ⬟䛻䛺䛳䛯
(802.11r Mixed mode)䚹
୍㒊䛾ྂ䛔䜽䝷䜲䜰䞁䝖䛿᥋⥆䛷䛝䛺䛔䛯䜑䚸䛭䛾ሙྜ䛿 2䛴䛾 SSID 䜢⏝ព䛩䜛ᚲせ䛜䛒䜛䚹
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
41. Reassociation Request 䛻㏣ຍ䛥䜜䛯᪂せ⣲
䝖䝷䝤䝹䝅䝳䞊䝔䜱䞁䜾䛾䝸䝣䜯䝺䞁䝇䛸䛧䛶
Reassociation Request (FT) 䛾୰㌟
§ RSNIE : PMKID 䜢ྵ䜏䚸AKM 䛜㻌FT over IEEE 802.1X
§ Mobility Domain IE : ➃ᮎ䛾 Over the DS 䝻䞊䝭䞁䜾ྍྰ
§ Fast BSS Transition IE : MIC, ANonce, SNonce, PMK-R1
KH-ID 䛸 PMK-R0 KH-ID 䜢ྵ䜐
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
42. IEEE 802.11r FT Mixed-mode ືసᐇ⦼㻌(2014ᖺ 11᭶⌧ᅾ)
メーカー / 製品名 OS / ドライバ / ユーティリティ 802.11r Mixed-mode Association 動作テスト結果
Apple iPad, iPad2, iPad3, Air iOS 6, iOS7.1.1, iOS6.1.3, iOS7.0 OK
Apple iPhone5S iOS 7.1.2 OK
Apple iPod iOS 6.1.3 OK
Apple MacBookPro11,2 OSX 10.9.5 OK
Apple MacBookPro11,1 OSX 10.9.2 OK
Apple MacBookPro10,2 OSX 10.8.5 OK
Samsung Galaxy SII Android 2.3.3 OK
Samsung Galaxy S4 Android (詳細不明) OK
Cisco 7921 Firmware 1.4.5 OK
Cisco 7925 Firmware 1.4.5 OK
Cisco 9971 Firmware 1.4.5 OK
Cisco CIUS-7 Android 2.2.2 NG
Apple MacBookPro (詳細不明) OSX 10.9 NG
Apple MacBookPro (詳細不明) OSX 10.7.4 NG
Netgear (詳細不明) 6.30.145.30 NG
Juniper Odyssey (詳細不明) (詳細不明) NG
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
43
䜽䝷䜲䜰䞁䝖䛾ືస(㠀ືస)䜢ಖド䛩䜛䜒䛾䛷䛿䛺䛟䚸ᘢ♫⊂⮬䛾⡆᫆䝔䝇䝖⤖ᯝ䜢ඹ᭷䛩䜛䜒䛾䛷䛩䚹ᐇ㝿䛾ືస䛿ᐇᶵ᳨ド䛻䛶☜ㄆ䛧䛶䛟䛰䛥䛔䚹
43. IEEE 802.11r (FT) 䛾≉ᚩⓗ䛺䝻䜾ฟຊ(ᡂຌ 1/3)
debug ft events enable debug client
*apfMsConnTask_6: Oct 21 19:37:38.691: ac:fd:ec:28:6b:ec Sending assoc-resp with status 0
station:ac:fd:ec:28:6b:ec AP:08:cc:68:b4:4e:f0-01 on apVapId 1
*apfMsConnTask_6: Oct 21 19:37:38.691: ac:fd:ec:28:6b:ec Including FT Mobility Domain IE (length 5)
in Initial assoc Resp to mobile
*apfMsConnTask_6: Oct 21 19:37:38.691: ac:fd:ec:28:6b:ec Sending R0KH-ID as:-84.23.-64.5
*apfMsConnTask_6: Oct 21 19:37:38.691: ac:fd:ec:28:6b:ec Sending R1KH-ID as 00:24:97:69:67:60
*apfMsConnTask_6: Oct 21 19:37:38.691: ac:fd:ec:28:6b:ec Including FT IE (length 98) in Initial Assoc
Resp to mobile
*Dot1x_NW_MsgTask_4: Oct 21 19:37:38.854: ac:fd:ec:28:6b:ec Creating a PKC PMKID Cache entry
for station ac:fd:ec:28:6b:ec (RSN 2)
*Dot1x_NW_MsgTask_4: Oct 21 19:37:38.854: ac:fd:ec:28:6b:ec Created PMK Cache Entry for TGr
AKM:802.1x ac:fd:ec:28:6b:ec
*Dot1x_NW_MsgTask_4: Oct 21 19:37:38.854: ac:fd:ec:28:6b:ec R0KH-ID:172.23.192.5 R1KH-ID:
00:24:97:69:67:60 MSK Len:48 pmkValidTime:86401
*Dot1x_NW_MsgTask_4: Oct 21 19:37:38.855: ac:fd:ec:28:6b:ec PMK sent to mobility group
*Dot1x_NW_MsgTask_4: Oct 21 19:37:38.860: ac:fd:ec:28:6b:ec Adding TIE for reassociation deadtime:
20000 milliseconds
*Dot1x_NW_MsgTask_4: Oct 21 19:37:38.860: ac:fd:ec:28:6b:ec Adding TIE for R0Key-Data valid time :
86401
*Dot1x_NW_MsgTask_4: Oct 21 19:37:38.860: ac:fd:ec:28:6b:ec Sending EAPOL-Key Message to
mobile ac:fd:ec:28:6b:ec
state PTKINITNEGOTIATING (message 3), replay counter 00.00.00.00.00.00.00.01
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
44
䝖䝷䝤䝹䝅䝳䞊䝔䜱䞁䜾䛾䝸䝣䜯䝺䞁䝇䛸䛧䛶
44. IEEE 802.11r (FT) 䛾≉ᚩⓗ䛺䝻䜾ฟຊ(ᡂຌ㻌2/3)
debug ft events enable debug client
*apfMsConnTask_6: Oct 21 19:37:51.257: ac:fd:ec:28:6b:ec Got action frame from this client.
*apfMsConnTask_6: Oct 21 19:37:51.257: ac:fd:ec:28:6b:ec Doing preauth for this client over the DS
*apfMsConnTask_6: Oct 21 19:37:51.257: AP MAC address Controller
*apfMsConnTask_6: Oct 21 19:37:51.257: ------------------ ---------------
*apfMsConnTask_6: Oct 21 19:37:51.257: 08:cc:68:b4:4e:f0 172.23.192.5
*apfMsConnTask_6: Oct 21 19:37:51.257: 0c:85:25:9e:47:80 172.23.192.5
*apfMsConnTask_6: Oct 21 19:37:51.257: 70:10:5c:e7:49:c0 172.23.192.5
*apfMsConnTask_6: Oct 21 19:37:51.257: 70:10:5c:f9:e2:30 172.23.192.5
*apfMsConnTask_6: Oct 21 19:37:51.257: a8:0c:0d:db:ba:20 172.23.192.5
*apfMsConnTask_6: Oct 21 19:37:51.257: f8:c2:88:80:4a:80 172.23.192.5
*apfMsConnTask_6: Oct 21 19:37:51.257: ac:fd:ec:28:6b:ec Doing local roaming for destination address 08:cc:68:b4:4e:ff
*apfMsConnTask_6: Oct 21 19:37:51.257: ac:fd:ec:28:6b:ec Got 1 AKMs in RSNIE
*apfMsConnTask_6: Oct 21 19:37:51.257: ac:fd:ec:28:6b:ec RSNIE AKM matches with PMK cache entry :0x3
*apfMsConnTask_6: Oct 21 19:37:51.257: ac:fd:ec:28:6b:ec Created a new preauth entry for AP:a8:0c:0d:db:ba:2f
*apfMsConnTask_0: Oct 21 19:37:51.261: ac:fd:ec:28:6b:ec Processing assoc-req station:ac:fd:ec:28:6b:ec AP:a8:0c:0d:db:ba:20-01
thread:150e41c0
*apfMsConnTask_0: Oct 21 19:37:51.261: ac:fd:ec:28:6b:ec Reassociation received from mobile on BSSID a8:0c:0d:db:ba:24 AP
FW41-AP2702E
*apfMsConnTask_0: Oct 21 19:37:51.263: ac:fd:ec:28:6b:ec Marking this mobile as TGr capable.
*apfMsConnTask_0: Oct 21 19:37:51.264: ac:fd:ec:28:6b:ec Roaming succeed for this client.
*apfMsConnTask_0: Oct 21 19:37:51.264: ac:fd:ec:28:6b:ec Sending assoc-resp with status 0 station:ac:fd:ec:28:6b:ec AP:a8:0c:
0d:db:ba:20-01 on apVapId 1
*apfMsConnTask_0: Oct 21 19:37:51.265: ac:fd:ec:28:6b:ec Including FT Mobility Domain IE (length 5) in reassociation assoc Resp
to mobile
*Dot1x_NW_MsgTask_4: Oct 21 19:37:51.267: ac:fd:ec:28:6b:ec reauth_sm state transition 1 --- 0 for mobile ac:fd:ec:28:6b:ec at
1x_reauth_sm.c:53
*Dot1x_NW_MsgTask_4: Oct 21 19:37:51.267: ac:fd:ec:28:6b:ec Finishing FT roaming for mobile ac:fd:ec:28:6b:ec
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
45
䝖䝷䝤䝹䝅䝳䞊䝔䜱䞁䜾䛾䝸䝣䜯䝺䞁䝇䛸䛧䛶
45. IEEE 802.11r (FT) 䛾≉ᚩⓗ䛺䝻䜾ฟຊ(ᡂຌ㻌3/3)
show client detail {MAC of client}
(CT5508) show client detail ac:fd:ec:28:6b:ec
Client MAC Address............................... ac:fd:ec:28:6b:ec
Client Username ................................. hosaki
AP MAC Address................................... a8:0c:0d:db:ba:20
AP Name.......................................... FW41-AP2702E
Policy Type...................................... WPA2
Authentication Key Management.................... FT-802.1x
Encryption Cipher................................ CCMP (AES)
Protected Management Frame ...................... No
Management Frame Protection...................... No
EAP Type......................................... PEAP
Fast BSS Transition Details:
Reassociation Timeout...................... 20
Total Preauth APs.......................... 1
Preauth AP................................. a8:0c:0d:db:ba:2f
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
46
䝖䝷䝤䝹䝅䝳䞊䝔䜱䞁䜾䛾䝸䝣䜯䝺䞁䝇䛸䛧䛶
46. IEEE 802.11k
࿘ᅖ䛾 AP 䛾ሗ䜢๓䛻ᢕᥱ䛧䛶᭦䛻▷⦰
§ IEEE 802.11k
– 䜽䝷䜲䜰䞁䝖䛜䝻䞊䝭䞁䜾䛩䜛ሙྜ䚸䝻䞊䝭䞁䜾ඛ䜢᥈䛩ᚲせ䛜䛒䜛
– Action Frame 䜢䛳䛶䜽䝷䜲䜰䞁䝖䛿 AP 䛻䝻䞊䝭䞁䜾ඛ䛾ೃ⿵䜢䝸䜽䜶䝇䝖䛩䜛
– AP 䛿 WLC 䛛䜙ሗ䜢ཷ䛡ྲྀ䜚䚸䛭䛾䜽䝷䜲䜰䞁䝖㏆䛾ᐇ㝿䛾㟁Ἴ≧ἣ䛾⤫ィ್䜢ᇶ䛻䚸
᭱㐺䛺ೃ⿵ AP 䜢ᛂ⟅䛸䛧䛶㏉䛩
– 䜽䝷䜲䜰䞁䝖䛜䝻䞊䝭䞁䜾䜢䛩䜛ุ᩿䜢䛧䛯䛸䛝䛻䚸᪂䛯䛺䝻䞊䝭䞁䜾ඛ䜢᥈䛩ᚲせ䛜䛺䛟䚸䜚
↓䛟䝻䞊䝭䞁䜾ືస䛻⛣䜛䛣䛸䛜䛷䛝䜛
– IEEE 802.11r (FT) 䛸⤌䜏ྜ䜟䛫䜛䛣䛸䛷䚸䝻䞊䝭䞁䜾Ⓨ⏕๓䛻ೃ⿵ AP 䛸๓ㄆド䜢῭䜎
䛫䛶䛚䛟䛣䛸䜒ྍ⬟
– ᥈䛩䛯䜑䛾 Probe Request / Response 䛜せ䛻䛺䜛䛾䛷䚸↓⥺ᖏᇦ䜢⠇⣙䛷䛝䜛
– ᑐᛂ䛩䜛䜽䝷䜲䜰䞁䝖䛿㝈䜙䜜䜛
– iPhone (4S௨㝆)䚸iPad (2௨㝆)䚸iPad Mini 䛾 iOS6 ➼䛿ᑐᛂ䛧䛶䛔䜛
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
47
㏆䛟䛻䛔䛔 AP 䛺䛔䛛䛺䠛
䛣䛣䛸䛣䛣䛜䛚䝇䝇䝯䛷䛩
䛣䛾ே䛾ᒚṔ䛸⌧ཷಙ
㟁ຊ䛛䜙⥲ྜⓗ䛻⪃䛘
䜛䛸䚸䛣䛣䛸䛣䛣䛷䛩䚹
47. IEEE 802.11k 䛾≉ᚩⓗ䛺䝻䜾ฟຊ
debug 11k all enable debug client
*apfMsConnTask_6: Oct 21 19:37:38.695: ac:fd:ec:28:6b:ec Got action frame from
this client.
*apfMsConnTask_6: Oct 21 19:37:38.695: ac:fd:ec:28:6b:ec Received a 11k Action
frame with code 4 from mobile station AC:FD:EC:28:6B:EC
*apfMsConnTask_6: Oct 21 19:37:38.695: Received NEIGH_REQ from ms ac:fd:ec:
28:6b:ec ap WLAN 1, wlc WLAN 12, d.token 16
*apfMsConnTask_6: Oct 21 19:37:38.695:
apf80211KNeighborRequestProcessSubElements: Decoding payload, size 9
*apfMsConnTask_6: Oct 21 19:37:38.695:
apf80211KNeighborRequestProcessSubElements: Decoding SSID SUBIE, voiceft, 7
*apfMsConnTask_6: Oct 21 19:37:38.695: apf80211KQMsgNeighReqPost: posting
msg for ms (dialog token: 16) ac:fd:ec:28:6b:ec lradmac 08:cc:68:b4:4e:f0 slotmac
00:00:00:00:00:00 slot 1, vapid 12
*apf80211KTask: Oct 21 19:37:38.696: ac:fd:ec:28:6b:ec Sending 802.11K Neighbor
Report ACTION to station on BSSID
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
48
䝖䝷䝤䝹䝅䝳䞊䝔䜱䞁䜾䛾䝸䝣䜯䝺䞁䝇䛸䛧䛶
49. CP7921 䛷 CCKM 䝻䞊䝭䞁䜾䛾↓⥺䝣䝺䞊䝮䜻䝱䝥䝏䝱
802.11 Authentication
CCKM 䛷
ReAssociation ΅
䜟䛪䛛㻌6ms 䛷䝻䞊䝭䞁䜾
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
50. CCKM 䝻䞊䝭䞁䜾䛾≉ᚩⓗ䛺䝻䜾ฟຊ㻌(1/2)
debug cckm detailed enable debug client
*apfMsConnTask_6: Oct 21 18:51:55.727: 00:21:55:3d:e8:2c Association received from mobile on
BSSID 08:cc:68:b4:4e:f4 AP FW45-AP3702
*apfMsConnTask_6: Oct 21 18:51:55.728: 00:21:55:3d:e8:2c Processing RSN IE type 48, length 22 for
mobile 00:21:55:3d:e8:2c
*apfMsConnTask_6: Oct 21 18:51:55.728: 00:21:55:3d:e8:2c CCKM: Mobile is using CCKM
*Dot1x_NW_MsgTask_4: Oct 21 18:51:55.895: 00:21:55:3d:e8:2c Creating a PKC PMKID Cache entry
for station 00:21:55:3d:e8:2c (RSN 2)
*Dot1x_NW_MsgTask_4: Oct 21 18:51:55.895: 00:21:55:3d:e8:2c CCKM: Create a global PMK cache
entry
*Dot1x_NW_MsgTask_4: Oct 21 18:51:55.911: CCKM: Data used to compute KRK and BTK: (76)
*Dot1x_NW_MsgTask_4: Oct 21 18:51:55.911: CCKM: Data used to compute PTK: (10)
*Dot1x_NW_MsgTask_4: Oct 21 18:51:55.911: 00:21:55:3d:e8:2c CCKM: RN used to compute PTK:
01000000
*Dot1x_NW_MsgTask_4: Oct 21 18:51:55.911: 00:21:55:3d:e8:2c CCKM: Computed PTK from BTK
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
51
䝖䝷䝤䝹䝅䝳䞊䝔䜱䞁䜾䛾䝸䝣䜯䝺䞁䝇䛸䛧䛶
51. CCKM 䝻䞊䝭䞁䜾䛾≉ᚩⓗ䛺䝻䜾ฟຊ (2/2)
debug cckm detailed enable debug client
*apfMsConnTask_0: Oct 21 18:57:13.808: 00:21:55:3d:e8:2c CCKM: Received REASSOC REQ IE
*apfMsConnTask_0: Oct 21 18:57:13.808: 00:21:55:3d:e8:2c Processing assoc-req station:00:21:55:3d:e8:2c AP:a8:0c:0d:db:ba:20-01 thread:150e41c0
*apfMsConnTask_0: Oct 21 18:57:13.808: 00:21:55:3d:e8:2c Reassociation received from mobile on BSSID a8:0c:0d:db:ba:24 AP FW41-AP2702E
*apfMsConnTask_0: Oct 21 18:57:13.809: 00:21:55:3d:e8:2c Processing RSN IE type 48, length 22 for mobile 00:21:55:3d:e8:2c
*apfMsConnTask_0: Oct 21 18:57:13.809: 00:21:55:3d:e8:2c CCKM: Mobile is using CCKM
*apfMsConnTask_0: Oct 21 18:57:13.809: 00:21:55:3d:e8:2c Received RSN IE with 0 PMKIDs from mobile 00:21:55:3d:e8:2c
*apfMsConnTask_0: Oct 21 18:57:13.810: 00:21:55:3d:e8:2c CCKM: Processing REASSOC REQ IE
*apfMsConnTask_0: Oct 21 18:57:13.810: 00:21:55:3d:e8:2c CCKM: using HMAC SHA1 to compute MIC
*apfMsConnTask_0: Oct 21 18:57:13.810: 00:21:55:3d:e8:2c CCKM: Received a valid REASSOC REQ IE
*apfMsConnTask_0: Oct 21 18:57:13.812: CCKM: Data used to compute PTK: (10)
*apfMsConnTask_0: Oct 21 18:57:13.812: [0000] 02 00 00 00 a8 0c 0d db ba 2f
*apfMsConnTask_0: Oct 21 18:57:13.812: 00:21:55:3d:e8:2c CCKM: RN used to compute PTK: 02000000
*apfMsConnTask_0: Oct 21 18:57:13.812: 00:21:55:3d:e8:2c CCKM: Computed Reassoc PTK from BTK
*apfMsConnTask_0: Oct 21 18:57:13.812: 00:21:55:3d:e8:2c CCKM: Initializing PMK cache entry with a new PTK
*apfMsConnTask_0: Oct 21 18:57:13.812: CCKM: Encrypted GTK: (24)
*apfMsConnTask_0: Oct 21 18:57:13.812: CCKM: Data used to compute MIC for REASSOC RESP IE: (76)
*apfMsConnTask_0: Oct 21 18:57:13.812: 00:21:55:3d:e8:2c CCKM: using HMAC SHA1 to compute MIC
*apfMsConnTask_0: Oct 21 18:57:13.812: CCKM: MIC for REASSOC RESP IE: (8)
*apfMsConnTask_0: Oct 21 18:57:13.812: 00:21:55:3d:e8:2c Including CCKM Response IE (length 54) in Assoc Resp to mobile
*apfMsConnTask_0: Oct 21 18:57:13.812: 00:21:55:3d:e8:2c Sending Assoc Response to station on BSSID a8:0c:0d:db:ba:2f (status 0) ApVapId 1 Slot 1
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
52
䝖䝷䝤䝹䝅䝳䞊䝔䜱䞁䜾䛾䝸䝣䜯䝺䞁䝇䛸䛧䛶
52. QoS 䜢᭷⥺䛸↓⥺䛷᭷ຠ䛻
䝖䝷䝣䜱䝑䜽 () 䝬䞊䜻䞁䜾
§ 䜶䞁䝍䞊䝥䝷䜲䝈㻌QoS 䛿䜶
䞁䝗䝫䜲䞁䝖䛾䝖䝷䝣䜱䝑䜽䛾
DSCP / PHB, UP ್䛻ᇶ
䛵䛔䛶ືస䛩䜛䚹
§ ()䝬䞊䜻䞁䜾䛿䜰䝥䝸䚸䜶
䞁䝗䝫䜲䞁䝖䚸䛒䜛䛔䛿䝛䝑䝖
䝽䞊䜽䛷ᐇ䛥䜜䜛䚹
BE
AF41
䜻䝳䞊䜲䞁䜾
§ 䜶䞁䝍䞊䝥䝷䜲䝈㻌QoS 䛻䛿
䝪䜲䝇䛚䜘䜃䝸䜰䝹䝍䜲䝮䝖
䝷䝣䜱䝑䜽䛻ᑐ䛩䜛䜶䞁䝗䝒
䞊䜶䞁䝗䛾ᑓ⏝ᖏᇦ䛜ᚲせ䚹
§ QoS 䝬䞊䜻䞁䜾䛻䜘䛳䛶䛹
䛾䜻䝳䞊䜢䛖䛛䛜Ỵ䜎䜛䚹
P X
䜶䞁䝗䝫䜲䞁䝖㻌䝖䝷䝇䝖
§ 䜶䞁䝍䞊䝥䝷䜲䝈㻌QoS 䛿䜰䝥
䝸 / 䜶䞁䝗䝫䜲䞁䛸䛾䝖䝷䝇䝖≧
ែ䛻౫Ꮡ䛩䜛䚹䛭䛾䜶䞁䝗䝫䜲
䞁䝖䛜䝖䝷䝇䝖䛷䛝䛺䛔ሙྜ䛿
䝬䞊䜻䞁䜾䛧䛶䜔䜛䚹
§ 䝖䝷䝇䝖䛿䜶䞁䝗䝫䜲䞁䝖 / 䜰䝥
䝸䛸䝖䝷䝣䜱䝑䜽䛾䝥䝻䝣䜯䜲䝹
䛻౫Ꮡ䛩䜛䚹
§ ไ㝈䜔☜ᐃせ⣲䛜䛒䜛䜘䛖
䛺」㞧䛺䜰䝥䝸䛿䚸㠀䝖䝷䝇䝖
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
53
§ 㡢ኌ㏻ヰ䛾䜘䛖䛻䝸䜰䝹䝍䜲䝮䛛䛴㏦䛥䜜䛺䛔䝖䝷䝣䜱䝑䜽䜢䛖䜰䝥䝸䛻䛿䚸䜶䞁䝍䞊䝥䝷䜲䝈㻌
QoS 䛿ᚲ㡲
§ ↓⥺༊㛫䛿㻌WMM 䜢䛳䛶㻌QoS 䜢䛛䛡䜛䛣䛸䛷䚸ᮇᚅ㏻䜚䛾ᛂ⟅㛫䚸㧗ရ㉁䛺䝪䜲䝇㻌/ 䝡䝕䜸
䛜ᒎ㛤䛷䛝䜛
§ WLAN 䛾㻌QoS タᐃ (Platinum, Gold, Silver, Bronze) 䜢ᐇ䛩䜛
?
AF41
EF
EF CS3
EF BE CS3 AF41
53. ᐇ㝿䛻㻌QoS 䛜ຠ䛔䛶䛔䜛䛛䜢☜ㄆ䛩䜛
Cisco Prime Infrastructure 䛸 CCX 䛾ά⏝
§ WLC 䛷㻌Traffic Stream Metrics ᶵ⬟䜢᭷ຠ䛻䛧䛶䛚䛟
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
54
54. Voice Diagnostics 䛷㡢ኌ㏻ヰ䜢ᐇ (CCXv2 ௨ୖ)
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
55
㡢ኌ䝖䝷䝤䝹Ⓨ⏕䛾≧ែ䜢⌧
55. ၥ㢟䜢⮬ືⓗ䛻Ⓨぢ
§ 䝻䞊䝭䞁䜾䛻 596䝭䝸⛊䛛䛛䛳䛶䛔䜛䛣䛸䜢Ⓨぢ
– AP 䜢≉ᐃ䚸↓⥺ရ㉁䚸㧗㏿䝉䜻䝳䜰䝻䞊䝭䞁䜾䛾≧ែ䜢䝏䜵䝑䜽
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
56
56. どぬⓗ䛻㡢ኌ㏻ヰ䜢ᢕᥱ
§ 㡢ኌ㏻ヰ䛾Ⓨ⏕䜢☜ㄆ
§ 䜽䝷䜲䜰䞁䝖Ⓨ䛾㡢ኌ䝟䜿䝑䝖䛜㻌WMM 䛻䛶 UP 6 (Voice) 䛸䛧䛶䝬䞊䜻䞁䜾䛥䜜䛶䛔
䜛䛣䛸䜢☜ㄆ
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
57
57. どぬⓗ䛻㡢ኌ㏻ヰ䜢ᢕᥱ
§ QoS 䛾≧ែ䛿Ⰻ䛔 (Normal)
§ 90%௨ୖ䛾䝟䜿䝑䝖䛜 10䝭䝸⛊௨ෆ䛾䝆䝑䝍䛻䜎䛳䛶䛔䜛
§ ᖹᆒ㐜ᘏ䜒䛚䜘䛭 10䝭䝸⛊௨ୗ䛻䛶䜎䛳䛶䛔䜛
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
58
61. ᥎⸀ᅗ᭩䛚䜘䜃ཧ⪃ᩥ᭩
䜶䞁䝍䞊䝥䝷䜲䝈䝰䝡䝸䝔䜱䝕䝄䜲䞁䜺䜲䝗
http://www.cisco.com/cisco/web/support/JP/docs/WL/WLLANCntrller/5500WLCntrllers/IDG/002/emob73.html
Cisco Unified Wireless IP Phone 7925G, 7925G-EX, and 7926G Deployment Guide
http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7925g/7_0/english/deployment/guide/7925dply.pdf
Real-Time Traffic over Wireless LAN Solution Reference Network Design Guide
http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/RToWLAN/CCVP_BK_R7805F20_00_rtowlan-srnd.
Cisco and/or its affiliates. CC5-4 All rights reserved. Cisco Public
html
62