LLDP Automatic Setting (Access Point Link)

1. Function Overview

LLDP automatic configuration is a function that sends and receives unique LLDP frames between the Yamaha switch and Yamaha wireless AP, and automatically configures the network based on the information notified by LLDP.

The following functionality can be achieved by LLDP automatic settings.

  • RADIUS server automatic settings

    • This automatically specifies information about RADIUS servers currently operating at the Yamaha wireless access point in the Yamaha network switch. That makes it easy to configure an authentication function in Yamaha wireless access points as a RADIUS server or in Yamaha network switches as a RADIUS client.

  • Yamaha wireless access point dead/alive monitoring

    • This uses LLDP to automatically monitor whether Yamaha wireless access points connected to the product are dead or alive.

To determine Yamaha network switch and wireless access point models that support LLDP automatic setting function, refer to the following.

2. Definition of Terms Used

LLDP

Link Layer Discovery Protocol.
This is defined in IEEE 802.1AB.

3. Function Details

3.1. Basic specifications

If LLDP automatic setting function is enabled, proprietary LLDP frames will be sent and received between Yamaha network switches and Yamaha wireless access points.

LLDP automatic settings are specified using the lldp auto-setting command.
LLDP automatic setting function is enabled in default settings.

In order to use this function, reception of LLDP frames must be enabled.
For this reason, check in advance that the following settings have been made.

  • Enable LLDP functionality for the overall system using the lldp run command.

  • Create LLDP agents at applicable interfaces using the lldp-agent command.

  • Specify the LLDP frame transmit/receive mode using the set lldp command.

LLDP frame transmission and reception are enabled in product default settings.

3.2. RADIUS server automatic settings

This function automatically specifies information in the product about RADIUS servers currently operating at Yamaha wireless access points (clusters). That makes it easy to configure an authentication function in Yamaha wireless access points as a RADIUS server or in Yamaha network switches as a RADIUS client.
Authentication settings for each port on the product must be set manually by the user based on the given environment. For details about the settings, refer to Port authentication function in the technical reference.

image

3.2.1. RADIUS server information sent by Yamaha wireless access points

Yamaha wireless access points send RADIUS server information based on the following criteria.

  • LLDP and LLDP automatic settings are enabled

  • Cluster functionality is enabled

  • Cluster leader APs are functioning as a RADIUS server

  • Cluster follower APs are functioning as RADIUS client that connects to a leader AP RADIUS server.

For details about Yamaha wireless access point settings, refer to the Yamaha wireless access point technical reference.

If the criteria for sending information are satisfied, Yamaha wireless access points send notifications with the following RADIUS server information at LLDP regular intervals.

  • IP address of the RADIUS server

  • UDP port number for RADIUS server authentication

  • Shared password for communicating with RADIUS server

3.2.2. RADIUS server entry control

If the product LLDP automatic setting function is enabled and RADIUS server information is received from a Yamaha wireless access point, then a radius-server host command with an optional dynamic string added to the end is automatically specified in the running-config.
In the remaining explanation below, the radius-server host command appended by an optional dynamic string is referred to as a “dynamic entry”, whereas the manually specified radius-server host command is referred to as a “static entry”.
Dynamic entries appended with the optional dynamic string are not saved in the startup-config file, even if the write command is executed.
After dynamic entry is set by automatic settings, static entry can be set by manually deleting the dynamic option.
However, static entry cannot be changed to dynamic entry by manually adding the dynamic option.

  • Example of Dynamic Entry of radius-server host Command

    radius-server host 192.168.100.241 auth-port 1234 key EXAMPLE dynamic

Dynamic entries specified by LLDP automatic settings are appended with LLDP reception port number and term of validity information.
If identical RADIUS server information is received from multiple ports, the RADIUS server information received from the port with the smallest port number is retained.
The TTL (Time to Live) value included in the received LLDP frame is specified as the term of validity.
The default TTL value for LLDP frames sent from Yamaha wireless access points is 120 seconds.
If new RADIUS server information is received within TTL seconds, then the term of validity is updated, whereas if new RADIUS server information is not received within TTL seconds, then the dynamic entry is deleted.
However, if an LLDP shutdown frame with TTL = 0 is received, then the dynamic entry is immediately deleted.
You can check the RADIUS server information with the show radius-server command. An asterisk (*) will be added to the automatically specified RADIUS server host, and the LLDP reception port number (LLDP Received port) and term of validity (Expires) information will be displayed.

  • Example of using the show radius-server command to show dynamic entry information

    SWX#show radius-server
    Server Host : 192.168.100.241*
     LLDP Received port : port1.2
     Expires : 00:00:33
     Authentication Port : 1234
     Secret Key : EXAMPLE
     Timeout : 10 sec
     Retransmit Count : 5
     Deadtime : 0 min
    
    * - Assigned by LLDP.

A total of up to 8 RADIUS server information entries, including dynamic and static entries, can be specified for the product.
Using static entries is prioritized over using dynamic entries.
Therefore, even if the maximum number of RADIUS server information entries are already specified, new static entries can be specified if there are any dynamic entries among existing entries.
In that case, the dynamic entry with the highest LLDP reception port number is deleted.

3.2.3. Points of Caution

If the above functionality is used, note the following precautions.

  • Connection to Yamaha wireless access point unit

    • To enable automatic setting of RADIUS server information, Yamaha network switches must be connected directly to a Yamaha wireless access point that support LLDP automatic setting functionality.

    • For Yamaha network switches not directly connected to a Yamaha wireless access point, specify RADIUS server settings manually.

  • Command input mode restrictions when the stack function is enabled

    • If the stack function is enabled, users permitted to transition to the global configuration mode are restricted. For details, refer to Stack Function.

    • Because settings automatically transition to the global configuration mode if RADIUS server settings are received by LLDP from a Yamaha wireless access point and applied, users that are already in the global configuration mode via the console or who are in an individual configuration mode are forced to transition to the privileged EXEC mode.

  • Characters permitted in shared passwords for communicating with RADIUS servers

    • Question mark and space characters cannot be used. Do not use those characters when setting shared passwords (RADIUS server, client, or secret) for Yamaha wireless access point units.

  • Set response wait time for the entire RADIUS server

    • If multiple RADIUS servers are configured, set the auth timeout server-timeout command setting value, which sets the total wait time for all RADIUS servers, to a value equal to or larger than the product of the radius-server timeout command setting value times the radius-server retransmit command setting value plus one times the number of RADIUS servers. For command details, refer to the command reference.

3.3. Yamaha wireless access point dead/alive monitoring

When a Yamaha network switch receives a request from a Yamaha wireless access point to start dead/alive monitoring, it automatically starts monitoring by LLDP whether the Yamaha wireless access point is dead or alive.

image

Yamaha wireless access points send dead/alive monitoring requests based on the following criteria.

  • LLDP and LLDP automatic settings are enabled

If the dead/alive monitoring request is received with the LLDP automatic setting function enabled in the Yamaha network switch, then an LLDP reception interval monitoring setting is registered for the LLDP reception port.
Ports for which settings are registered will be monitored for aliveness using LLDP, and if LLDP is not received for a certain period of time, an SNMP trap and L2MS trap will be sent to notify that communication has been interrupted.
For details, refer to the technical reference for terminal monitoring.

3.3.1. Points of Caution

If the above functionality is used, note the following precautions.

  • If dead/alive monitoring is no longer necessary, such as after the Yamaha wireless access point connection port was changed, manually delete the settings that became unnecessary after the Yamaha wireless access point connection port was changed.

4. Related Commands

Related commands are indicated below.
For details, refer to the Command Reference.

Operations Operating commands

Enable LLDP automatic settings

lldp auto-setting

Enable LLDP function

lldp run

Create LLDP agent

lldp-agent

Set LLDP transmission/reception mode

set lldp

Set LLDP frame transmission interval

set timer msg-tx-interval

Set RADIUS server host

radius-server host

Set response wait time for a single RADIUS server

radius-server timeout

Set number of times to resend requests to RADIUS server

radius-server retransmit

Show RADIUS server setting status

show radius-server

Set response wait time for the entire RADIUS server

auth timeout server-timeout

5. Setting Examples

For instructions on how to configure respective Yamaha network switch and wireless access point settings, refer to the following.

6. Points of Caution

See the precautions indicated for each function.