No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


S12700 V200R010C00 Configuration Guide - WLAN-AC

This document describes native AC (hereinafter referred to as WLAN AC) configuration procedures and provides configuration examples.

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Licensing Requirements and Limitations for WLAN

Licensing Requirements and Limitations for WLAN

Involved Network Elements

  • APs mentioned in this document are Huawei AP products. You are advised to use Huawei APs to connect to the AC.
  • You can run the display ap-type all command to check the default AP types supported by the device.
  • When central APs and RUs are used, ensure that their versions are the same. For example, if the central AP version is V200R007C10, the RU version must be V200R007C10.
Table 5-4  Mapping between switch versions and AP versions

Product Software Version

AP Software Version




























Licensing Requirements

When an X series card is used as a WLAN AC, the number of online APs supported by the X series card is controlled by licenses. The X series card supports a maximum of 16 online APs. To increase the number of online APs supported by the card, apply for and purchase a license from the agent.
  • AP resource license-16AP for WLAN access controller
  • AP resource license-64AP for WLAN access controller
  • AP resource license-128AP for WLAN access controller
  • AP resource license-512AP for WLAN access controller

For details about how to apply for a license, see S Series Switch License Use Guide.

Version Requirements

Table 5-5  Products and minimum version supporting the WLAN service
Product Minimum Version Required
S12708/S12712 V200R005





Feature Limitations

Packets transmitted on a WLAN include management packets and service data packets.
  • It is recommended that you use different VLANs for the management VLAN and service VLAN.

  • You are not advised to use VLAN 1 as the management VLAN or service VLAN.

  • In tunnel forwarding mode, management VLAN and service VLAN must be different.

In actual WLAN networking, management VLANs and service VLANs must be properly planned. The following example assumes that an AP connects to an AC through a Layer 2 network.
  • In direct forwarding mode, ensure that the AP can exchange management VLAN packets with the AC and exchange service VLAN packets with upstream devices.

  • In tunnel forwarding mode, ensure that the AP can exchange management VLAN packets with the AC and the AC can exchange service VLAN packets with upstream devices.

X series cards are required when the WLAN AC function is configured on a switch. For details about the mapping interface cards, see the Card Classification in Hardware Description. If APs need to connect to the AC through non-X series interface cards, you need to configure the centralized AC function by adding the X series and non-X series interface cards to the same WLAN work group. The V200R005 version does not support centralized AC function, so packets from the APs must enter the switch through the X series interface card.

Networking restrictions
  • When an AP is connected to the AC using an Eth-Trunk, another Eth-Trunk is occupied for packet forwarding apart from the newly created one. Therefore, to prevent the number of Eth-Trunks from exceeding the specification of the device, properly allocate Eth-Trunks during network data planning.
  • When creating an Eth-Trunk that contains interfaces of different non-X series interface cards, ensure that all interfaces belong to the same group.

  • If an Eth-Trunk contains interfaces of both X series and non-X series interface cards, APs cannot go online through the Eth-Trunk.

  • If an AP connects to cards of a switch through an Eth-Trunk, the MAC address and ARP entries of the cards differ from each other, and the total number of MAC address and ARP entries on one or multiple cards cannot meet the requirement, a heartbeat timeout is triggered on the AP and the AP goes offline. As a result, STAs connected to the AP are disconnected.

  • An X series or a non-X series interface card can join only one WLAN work group.

  • If an AP is reconnected to a new non-X series interface card which belongs to the same WLAN work group as the AP's originally connected interface card, the AP and STA services are not interrupted. In other situations, the AP and STA are forced offline.

  • APs will allow STAs to access VPNs from V200R008C00. VPN access requires that upstream and downstream traffic from STAs be forwarded through the same or different X series interface cards.
  • In tunnel forwarding mode, the AC and AP do not support IP packet fragmentation.

  • In the AC + AP networking, to prevent loops, port flapping, or AP disconnection, do not use Smart Link, equal-cost routing, or port protection services.
  • The AC cannot manage APs through VPNs.
  • APs cannot connect to physical Layer 3 interfaces or subinterfaces on the AC.
  • In versions earlier than V200R013C00, the AC can manage APs and STAs only through IPv4. In V200R013C00 or later, the AC can manage APs through IPv4 and manage STAs through IPv4 or IPv6.

  • VXLAN is supported from V200R011C10. The VXLAN service cannot be configured on the CAPWAP source interface specified for the AC. Otherwise, the AC cannot manage APs, and APs fail to go online.

The AC and AP exchange CAPWAP packets to communicate with each other. To prevent CAPWAP packet attacks from affecting normal device communication, you can configure local attack defense on devices. To configure local attack defense, specify a trusted AP source address in an ACL rule and then configure a whitelist in the attack defense policy or configure user-defined flows to limit the rate of specified CAPWAP packets. For details, see Local Attack Defense Configuration.

In wireless city scenarios, it is recommended that the STA aging time be reduced. The recommended value is 1 minute.

Updated: 2019-12-31

Document ID: EDOC1000142094

Views: 189514

Downloads: 140

Average rating:
This Document Applies to these Products

Related Version

Related Documents

Previous Next