No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


Fat AP and Cloud AP V200R008C00 CLI-based Configuration Guide

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Example for Configuring User Connection Access Control (CAC)

Example for Configuring User Connection Access Control (CAC)

Configuration Process

You need to configure and maintain WLAN features and functions in different profiles. These WLAN profiles include regulatory domain profile, radio profile, VAP profile, AP system profile, AP wired port profile,and WIDS profile. When configuring WLAN services, you need to set related parameters in the WLAN profiles and bind the profiles to the AP group or APs. After that, the configuration is automatically delivered to and takes effect on the RUs. WLAN profiles can reference one another; therefore, you need to know the relationships among the profiles before configuring them. For details about the profile relationships and their basic configuration procedure, see WLAN Service Configuration Procedure.

Networking Requirements

As shown in Figure 18-12, a wireless network is deployed in the conference hall. The central AP connects to the upper-layer network.

To improve Internet experience of wireless users and prevent fierce competition for wireless channels among too many access users, the customer requires that the number of access users be controlled on each RU.

For the WLAN access configuration, see Related Topics.

Figure 18-12  Networking diagram for configuring user CAC

Data Planning

Table 18-6  Central AP data planning



2G radio profile
  • Name: radio2g
  • Referenced profile: RRM profile user-cac
RRM profile
  • Name: user-cac
  • User CAC based on the number of users
    • CAC threshold for new STAs: 32
    • CAC threshold for roaming STAs: 32
  • RSSI threshold for rejecting access from weak-signal STAs: 25 dB

Configuration Roadmap

Configure user CAC and adjust CAC parameters to control the number of access users on each RU.

Configuration Notes

Configure port isolation on the interfaces of the device directly connected to RUs. If port isolation is not configured, a large number of unnecessary broadcast packets may be generated in the VLAN, blocking the network and degrading user experience.


  1. Check the basic configuration of the WLAN.

    Check Item



    Check the AP group to which an RU belongs.

    display ap all

    AP group: ap-group1

    Check all profiles referenced by the AP group.

    display ap-group name ap-group1

    VAP profile: wlan-net

    Check all profiles referenced by the VAP profile.

    display vap-profile name wlan-net

    SSID profile: wlan-net

  2. Configure user CAC.

    # In the RRM profile user-cac, enable user CAC based on the number of users and set the CAC thresholds for new STAs and roaming STAs to 32; enable the function of rejecting access from weak-signal STAs and set the RSSI threshold to 25 dB; enable the RUs to automatically hide SSIDs when the user count reaches the CAC threshold.

    [AP-wlan-view] rrm-profile name user-cac
    [AP-wlan-rrm-prof-user-cac] uac client-number enable 
    [AP-wlan-rrm-prof-user-cac] uac client-number threshold access 32 roam 32
    [AP-wlan-rrm-prof-user-cac] uac client-snr enable 
    [AP-wlan-rrm-prof-user-cac] uac client-snr threshold 25 
    [AP-wlan-rrm-prof-user-cac] uac reach-access-threshold hide-ssid
    [AP-wlan-rrm-prof-user-cac] quit

    # Create the 2G radio profile radio2g and bind the RRM profile user-cac to the 2G radio profile.

    [AP-wlan-view] radio-2g-profile name radio2g 
    [AP-wlan-radio-2g-prof-radio2g] rrm-profile user-cac
    [AP-wlan-radio-2g-prof-radio2g] quit

    # Bind the 2G radio profile radio2g to the AP group ap-group1.

    [AP-wlan-view] ap-group name ap-group1 
    [AP-wlan-ap-group-ap-group1] radio-2g-profile radio2g
    [AP-wlan-ap-group-ap-group1] quit

  3. Verify the configuration.

    • Connect STAs to the WLAN with SSID wlan-net and enter the password a1234567. Run the display station ssid wlan-net command on the central AP. The command output shows that the STAs are connected to the WLAN wlan-net.

      [AP-wlan-view] display station ssid wlan-net
      Rf/WLAN: Radio ID/WLAN ID                                                     
      Rx/Tx: link receive rate/link transmit rate(Mbps)                             
      STA MAC          AP ID Ap name  Rf/WLAN  Band  Type  Rx/Tx      RSSI  VLAN  IP address  
      e019-1dc7-1e08   0     area_1   0/1      2.4G  11n   65/38      -29   101
      Total: 1 2.4G: 1 5G: 0
    • Run the display rrm-profile name user-cac command on the central AP to check the user CAC configuration.

      [AP-wlan-view] display rrm-profile name user-cac
      UAC check client's SNR                                 : enable
      UAC client's SNR threshold(dB)                         : 25
      UAC check client number                                : enable
      UAC client number access threshold                     : 32
      UAC client number roam threshold                       : 32
      UAC check channel utilization                          : disable
      UAC channel utilization access threshold               : 80
      UAC channel utilization roam threshold                 : 80
      UAC hide SSID                                          : enable
    • When the number of users connected to an RU reaches 32 in the conference hall, new users and roaming users cannot find the SSID wlan-net on their terminals.

Configuration Files

Central AP configuration file

 sysname AP
 rrm-profile name user-cac
  uac client-snr enable
  uac client-snr threshold 25
  uac client-number enable
  uac client-number threshold access 32 roam 32
  uac reach-access-threshold hide-ssid
 radio-2g-profile name radio2g
  rrm-profile user-cac
 ap-group name ap-group1
  radio 0
   radio-2g-profile radio2g 
   vap-profile wlan-vap wlan 1
  radio 1
   vap-profile wlan-vap wlan 1
Updated: 2019-01-11

Document ID: EDOC1000176006

Views: 117063

Downloads: 309

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Previous Next