No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Command Reference

S1720, S2700, S5700, and S6720 V200R011C10

This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
WLAN WDS Configuration Commands

WLAN WDS Configuration Commands

Command Support

Only the S5720HI supports WLAN-AC commands.

dhcp trust port (WDS profile view)

Function

The dhcp trust port command enables a DHCP trusted port in a WDS profile.

The undo dhcp trust port command disables a DHCP trusted port in a WDS profile.

By default, a DHCP trusted port is enabled in a WDS profile.

Format

dhcp trust port

undo dhcp trust port

Parameters

None

Views

WDS profile view

Default Level

2: Configuration level

Usage Guidelines

After a DHCP trusted port is enabled in a WDS profile and the WDS profile is applied to an AP, the AP receives the DHCP OFFER, ACK, and NAK packets sent by authorized DHCP servers and forwards the packets to STAs so that the STAs can obtain valid IP addresses and go online.

Example

# Enable a DHCP trusted port in the WDS profile test.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] wds-profile name test 
[HUAWEI-wlan-wds-prof-test] dhcp trust port
Related Topics

display references wds-profile

Function

The display references wds-profile command displays reference information about a WDS profile.

Format

display references wds-profile name profile-name

Parameters

Parameter

Description

Value

name profile-name

Displays reference information about a specified WDS profile.

The WDS profile must exist.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

You can run the display references wds-profile command to check reference information about a WDS profile.

Example

# Display reference information about the WDS profile test.

<HUAWEI> display references wds-profile name test
--------------------------------------------------------------------------------
Reference type     Reference name                       Reference radio  WLAN ID
--------------------------------------------------------------------------------
AP group           group-1                              Radio-0          13     
AP group           group-1                              Radio-0          14     
--------------------------------------------------------------------------------
Total: 2
Table 11-195  Description of the display references wds-profile name command output

Parameter

Description

Reference type

Type of the profile to which the WDS profile is bound.

Reference name

Name of the profile to which the WDS profile is bound.

Reference radio

AP radio to which the WDS profile is applied.

WLAN ID

WLAN ID to which the WDS profile is bound.

display references wds-whitelist-profile

Function

The display references wds-whitelist-profile command displays reference information about a WDS whitelist profile.

Format

display references wds-whitelist-profile name whitelist-name

Parameters

Parameter

Description

Value

name whitelist-name

Displays reference information about a specified WDS whitelist profile.

The WDS whitelist profile must exist.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

You can run the display references wds-whitelist-profile command to check reference information about a specified WDS whitelist profile.

Example

# Display reference information about the WDS whitelist profile test.

<HUAWEI> display references wds-whitelist-profile name test
--------------------------------------------------------------------------------
Reference type                  Reference name                                  
--------------------------------------------------------------------------------
AP group                        profile-1                                       
AP group                        profile-2                                       
--------------------------------------------------------------------------------
Total: 2     
Table 11-196  Description of the display references wds-whitelist-profile command output

Parameter

Description

Reference type

Type of the profile to which the WDS whitelist profile is bound.

Reference name

Name of the profile to which the WDS whitelist profile is bound.

Run the wds-whitelist-profile (AP group radio view or AP radio view) command in the AP group radio view or AP radio view to apply a WDS whitelist profile.

display wds-profile

Function

The display wds-profile command displays reference or configuration information about a WDS profile.

Format

display wds-profile { all | name profile-name }

Parameters

Parameter

Description

Value

all

Displays reference information about all WDS profiles.

-

name profile-name

Displays information about a specified WDS profile.

The WDS profile must exist.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

You can run the display wds-profile command to view the number of times a WDS profile is referenced or configuration information of a specified WDS profile.

Example

# Display reference information about all WDS profiles.

<HUAWEI> display wds-profile all
--------------------------------------------------------------------------------
Profile name                         Reference                                  
--------------------------------------------------------------------------------
default                              0                                          
test                                 2                                          
--------------------------------------------------------------------------------
Total: 2                                                                        
Table 11-197  Description of the display wds-profile all command output

Item

Description

Profile name

WDS profile name.

To create a WDS profile, run the wds-profile command.

Reference

Number of times a WDS profile is referenced.

# Display information about the WDS profile test.

<HUAWEI> display wds-profile name test
--------------------------------------------------------------------------------
WDS name                   : HUAWEI-WLAN-WDS                                    
WDS work mode              : root                                               
Security profile           : test                                               
DHCP trust port            : enable                                             
MU-MIMO                    : disable
Tagged vlan                : -                                                  
Priority map trust         : DSCP                                               
Priority map mode          : DSCP map 802.11e                                    
                             0-7 map 0                                           
                             8-15 map 1                                          
                             16-23 map 2                                         
                             24-31 map 3                                         
                             32-39 map 4                                         
                             40-47 map 5                                         
                             48-55 map 6                                         
                             56-63 map 7                                         
Beacon 2.4G rate(Mbps)     : 1                                                  
Beacon 5G rate(Mbps)       : 6                                                  
--------------------------------------------------------------------------------
Table 11-198  Description of the display wds-profile name command output

Item

Description

WDS name

WDS name.

To set a WDS name, run the wds-name command.

WDS work mode

WDS working mode.

To set the WDS working mode, run the wds-mode command.

Security profile

Security profile bound to a WDS profile.

To bind a security profile to a WDS profile, run the security-profile (WDS profile view) command.

DHCP trust port

Whether to enable a DHCP trusted port in a WDS profile.
  • enable: A DHCP trusted port is enabled.
  • disable: A DHCP trusted port is disabled.

To enable a DHCP trusted port in a WDS profile, run the dhcp trust port (WDS profile view) command.

MU-MIMO

Whether the MU-MIMO function is enabled.

To configure the parameter, run the mu-mimo disable command.

Tagged vlan

VLAN configured in a WDS profile.

To configure a VLAN in a WDS profile, run the vlan tagged (WDS profile view) command.

Priority map trust

Priority mapping trusted by the WDS air interface.

To configure the parameter, run the priority-map trust (WDS profile view) command.

Priority map mode

Mapping from DSCP priorities to 802.11e user priorities on the WDS air interface.

To configure the parameter, run the priority-map dscp (WDS profile view) command.

Beacon 2.4G rate

Transmit rate of 2.4 GHz Beacon frames configured in the WDS profile.

To configure the parameter, run the beacon-2g-rate command.

Beacon 5G rate

Transmit rate of 5 GHz Beacon frames configured in the WDS profile.

To configure the parameter, run the beacon-5g-rate command.

display wds-whitelist-profile

Function

The display wds-whitelist-profile command displays reference or configuration information about a WDS whitelist profile.

Format

display wds-whitelist-profile { all | name whitelist-name }

Parameters

Parameter

Description

Value

all

Displays reference information about all WDS whitelist profiles.

-

name whitelist-name

Displays information about a specified WDS whitelist profile.

The WDS whitelist profile must exist.

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

You can run the display wds-whitelist-profile command to view the number of times a WDS whitelist profile is referenced or MAC addresses added in a specified WDS whitelist profile.

Example

# Display reference information about all WDS whitelist profiles.

<HUAWEI> display wds-whitelist-profile all
--------------------------------------------------------------------------------
Profile name                         Reference                                  
--------------------------------------------------------------------------------
default                              0                                          
test                                 2                                          
--------------------------------------------------------------------------------
Total: 2                                                                        
Table 11-199  Description of the display wds-whitelist-profile all command output

Item

Description

Profile name

Name of a WDS whitelist profile.

To create a WDS whitelist profile, run the wds-whitelist-profile command.

Reference

Number of times a WDS whitelist profile is referenced.

# Display information about the WDS whitelist profile test.

<HUAWEI> display wds-whitelist-profile name test
--------------------------------------------------------------------------------
WDS whitelist name: test                                                        
WDS whitelist MAC list information:                                             
--------------------------------------------------------------------------------
Index     MAC                                                                   
--------------------------------------------------------------------------------
0         1047-80b1-56a0                                                        
--------------------------------------------------------------------------------
Total: 1 
Table 11-200  Description of the display wds-whitelist-profile name command output

Item

Description

Index

WDS whitelist ID in a WDS whitelist profile.

MAC

MAC address on a WDS whitelist.

To add a MAC address to a WDS whitelist, run the peer-ap mac (WDS whitelist profile view) command.

display wds vap

Function

The display wds vap command displays information about a WDS VAP.

Format

display wds vap { ap-group ap-group-name | ap-id ap-id [ radio radio-id ] | ap-name ap-name [ radio radio-id ] } [ wds-name wds-name ]

display wds vap { all | wds-name wds-name }

Parameters

Parameter

Description

Value

ap-group ap-group-name

Displays information about all WDS VAPs in a specified AP group.

The AP group must exist.

ap-id ap-id

Displays information about WDS VAPs on the AP with a specified ID.

The AP ID must exist.

ap-name ap-name

Displays information about WDS VAPs on the AP with a specified name.

The AP name must exist.

radio radio-id

Displays information about WDS VAPs of a specified AP radio.

The radio ID must exist.

wds-name wds-name

Displays information about WDS VAPs of a specified WDS name.

The WDS name must exist.

all

Displays information about all WDS VAPs.

-

Views

All views

Default Level

1: Monitoring level

Usage Guidelines

You can run the display wds vap command to display information about a WDS VAP.

Example

# Display information about all WDS VAPs.

<HUAWEI> display wds vap all
WID : WLAN ID                                                                   
-------------------------------------------------------------------------------------
AP ID AP name       RfID WID         WDS name            BSSID          WDS links    
-------------------------------------------------------------------------------------
1     AP2             0  14          wds                 60DE-4474-964D  0           
1     AP2             0  13          wds                 60DE-4474-964C  0           
0     AP1             0  14          wds                 60DE-4476-E36D  1           
0     AP1             0  13          wds                 60DE-4476-E36C  1           
-------------------------------------------------------------------------------------
Total: 4
Table 11-201  Description of the display wds vap command output

Item

Description

AP ID

AP ID.

AP name

AP name.

RfID

Radio ID.

WID

WLAN ID of a VAP.

WDS name

WDS name.

To set a WDS name, run the wds-name command.

BSSID

MAC address of a VAP.

WDS links

Number of WDS links.

mode (AP wired port profile view)

Function

The mode command sets the working mode for an AP's wired interface.

The undo mode command restores the default working mode of an AP's wired interface.

By default,
  • On a common AP: Its GE interfaces work in root mode, Ethernet interfaces in endpoint mode, and Eth-Trunk interfaces in root mode.
  • On a central AP: Its uplink GE interfaces in root mode and downlink GE interfaces work in middle mode.
  • On an R230D: Its Ethernet interface works in root mode.
  • On an R240D: Its Ethernet interface works in endpoint mode and GE interface in root mode.
  • On an R250D, R250D-E, AP2050DN, and AP2050DN-E: Their uplink GE interfaces work in root mode and downlink GE interfaces in endpoint mode.
  • On an R450D: Its GE interface works in root mode.
NOTE:

You cannot change the working mode of wired interfaces on the R230D, R240D, R250D, R250D-E, R450D, AP2050DN, AP2050DN-E, AP2010DN and AP2030DN.

Format

mode { root | endpoint | middle }

undo mode

Parameters

Parameter

Description

Value

root

Sets the working mode of an AP's wired interface to root, which can connect to an AC.

-

endpoint

Sets the working mode of an AP's wired interface to endpoint, which can connect to a computer.

-

middle

Sets the working mode of an AP wired interface to middle, which can connect to an RU.

-

Views

AP wired port profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When working as an uplink interface to connect to an AC, an AP's wired interface must work in root mode. In root mode, the AP's wired interface automatically joins service VLANs and user-specific VLANs (for example, VLANs assigned by the RADIUS server).

When working as a downlink interface to connect to a wired terminal, the AP's wired interface must work in endpoint mode. In endpoint mode, the AP's wired interface does not join any VLAN by default.

When the central AP connects to RUs through downlink GE interfaces, the working mode of the downlink GE interfaces must be set to middle.

Precautions

The AP's wired interface supports user isolation in endpoint mode, but not in root or middle mode.

When the AP's wired interface works in root mode and has been configured to transmit packets carrying the management VLAN tag using the management-vlanvlan-id command, the PVID for the AP's wired interface must be configured the same as the management VLAN ID. When the AP's wired interface works in endpoint mode, the PVID can be configured directly. The configuration takes effect after the AP restarts. When the AP's wired interface works in middle mode, the PVID cannot be configured.

The configuration of the AP's wired interface takes effect after the AP is restarted.

Example

# Set the working mode of the AP's wired interface ETH0 to endpoint.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] ap-group name ap-group1
[HUAWEI-wlan-ap-group-ap-group1] quit
[HUAWEI-wlan-view] wired-port-profile name wired
[HUAWEI-wlan-wired-port-wired] mode endpoint
Warning: If the AP goes online through a wired port, the incorrect port mode configuration will cause the AP to go out of management
. This fault can be recovered only by modifying the configuration on the AP. Continue? [Y/N]:y
[HUAWEI-wlan-wired-port-wired] quit
[HUAWEI-wlan-view] ap-group name ap-group1
[HUAWEI-wlan-ap-group-ap-group1] wired-port-profile wired ethernet 0

peer-ap mac (WDS whitelist profile view)

Function

The peer-ap mac command adds MAC addresses of neighboring APs that are allowed to connect to an AP to a WDS whitelist profile.

The undo peer-ap mac command deletes the MAC addresses of neighboring APs from a WDS whitelist profile.

By default, no MAC address of a neighboring AP is added to a WDS whitelist profile.

Format

peer-ap mac mac-address

undo peer-ap mac mac-address

Parameters

Parameter

Description

Value

mac-address

Specifies the MAC address of a neighboring AP to be added to a WDS whitelist profile.

The value is in H-H-H format. An H is a hexadecimal number of 4 digits.

Views

WDS whitelist profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

After a WDS whitelist profile is created, you can run the peer-ap mac command to add neighboring APs' MAC addresses to the profile.

If a WDS whitelist profile is bound to a WDS profile, only APs with MAC addresses in the WDS whitelist profile can access the local AP, and other APs are denied access.

Precautions

A maximum of six MAC addresses can be added to a WDS whitelist profile.

Example

# Create the WDS whitelist profile whitelist and add the MAC address 0001-0001-0001 to the whitelist profile. Bind the WDS whitelist profile whitelist to radio 0 of APs in the AP group group1.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] wds-whitelist-profile name whitelist
[HUAWEI-wlan-wds-whitelist-whitelist] peer-ap mac 0001-0001-0001
[HUAWEI-wlan-wds-whitelist-whitelist] quit
[HUAWEI-wlan-view] ap-group name group1
[HUAWEI-wlan-ap-group-group1] radio 0
[HUAWEI-wlan-group-radio-group1/0] wds-whitelist-profile whitelist
Related Topics

priority-map dscp (WDS profile view)

Function

The priority-map dscp command configures the mapping from DSCP priorities to 802.11e user priorities on the WDS air interface.

The undo priority-map dscp command restores the default mapping from DSCP priorities to 802.11e user priorities on the WDS air interface.

Table 11-203 describes the mapping from DSCP priorities to 802.11e user priorities by default.
Table 11-203  Mapping from DSCP priorities to 802.11e user priorities

DSCP Priority

802.11e User Priority

0-7

0

8-15

1

16-23

2

24-31

3

32-39

4

40-47

5

48-55

6

56-63

7

Format

priority-map dscp { dscp-value1 [ to dscp-value2 ] } &<1-10> dot11e dot11e-value

undo priority-map dscp

Parameters

Parameter

Description

Value

dscp dscp-value1

Specifies the DSCP priority of 802.3 packets.

The value is an integer that ranges from 0 to 63. A larger value indicates a higher priority.

to dscp-value2

Specifies the DSCP priority of 802.3 packets.

The value is an integer that ranges from 0 to 63. A larger value indicates a higher priority.

dot11e dot11e-value

Specifies the 802.11e user priority.

The value is an integer that ranges from 0 to 7. A larger value indicates a higher priority.

Views

WDS profile view

Default Level

2: Configuration level

Usage Guidelines

On a WDS network, you can run this command to configure the mapping from DSCP priorities to 802.11e user priorities on the WDS air interface of an AP.

Example

# Map DSCP priorities 0-6 to 802.11e user priority 0 on the WDS air interface.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] wds-profile name test
[HUAWEI-wlan-wds-prof-test] priority-map dscp 0 to 6 dot11e 0

priority-map trust (WDS profile view)

Function

The priority-map trust command configures the priority mapping to be trusted by the WDS air interface.

The undo priority-map trust command restores the default priority mapping to be trusted by the WDS air interface.

By default, the WDS air interface trusts the mapping from DSCP priorities to 802.11e user priorities.

Format

priority-map trust { dot1p | dscp }

undo priority-map trust

Parameters

Parameter

Description

Value

dot1p

Indicates that the WDS air interface trusts the mapping from 802.1p priorities to 802.11e user priorities.

-

dscp

Indicates that the WDS air interface trusts the mapping from DSCP priorities to 802.11e user priorities.

-

Views

WDS profile view

Default Level

2: Configuration level

Usage Guidelines

On a WDS network, when 802.1p or DSCP priorities in data packets need to be mapped to 802.11e user priorities and the packets are transmitted through a WDS link, run this command.

Example

# Configure the WDS air interface to trust the mapping from 802.1p priorities to 802.11e user priorities.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] wds-profile name test
[HUAWEI-wlan-wds-prof-test] priority-map trust dot1p

security-profile (WDS profile view)

Function

The security-profile command binds a security profile to a WDS profile.

The undo security-profile command restores the default security profile bound to a WDS profile.

By default, the security profile default-wds is bound to a WDS profile.

Format

security-profile profile-name

undo security-profile

Parameters

Parameter

Description

Value

profile-name

Specifies the name of the security profile bound to a WDS profile.

The security profile must exist.

Views

WDS profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Before a WDS profile is applied to an AP radio to set up WDS links, the WDS profile must have a security profile bound to ensure WDS link security.

Precautions

After a security profile is bound to a WDS profile, the authentication policy and encryption mode in the security profile cannot be changed, but the authentication key can be changed.

A WDS profile can only have one security profile bound. If you run the command multiple times in the same WDS profile view, the latest configuration overwrites the old one.

Example

# Create the security profile sec and set the security policy to WPA2+PSK+AES. Create the WDS profile test and bind the security profile to the WDS profile.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] security-profile name sec
[HUAWEI-wlan-sec-prof-sec] security wpa2 psk pass-phrase huawei@123 aes
[HUAWEI-wlan-sec-prof-sec] quit
[HUAWEI-wlan-view] wds-profile name test
[HUAWEI-wlan-wds-prof-test] security-profile sec
Warning: This action may cause service interruption. Continue?[Y/N]y

stp enable (AP wired port profile view)

Function

The stp enable command enables STP on an AP's wired interface.

The undo stp enable command disables STP on an AP's wired interface.

By default, STP is disabled on an AP's wired interface.

Format

stp enable

undo stp enable

Parameters

None

Views

AP wired port profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

You can run this command to prevent or eliminate loops on a complex Layer 2 network. STP on the AP's wired interfaces takes effect only when the AP forms a single loop with wired devices. An STP-enabled AP does not forward STP packets to the wireless side. STP takes effect only on the AP's wired side.

Precautions

If an AP's wired interface is added to an Eth-Trunk, the wired interface does not support STP.

Example

# Enable STP on the AP's wired interface GE0.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] ap-group name ap-group1
[HUAWEI-wlan-ap-group-ap-group1] quit
[HUAWEI-wlan-view] wired-port-profile name wired
[HUAWEI-wlan-wired-port-wired] stp enable
[HUAWEI-wlan-wired-port-wired] quit
[HUAWEI-wlan-view] ap-group name ap-group1
[HUAWEI-wlan-ap-group-ap-group1] wired-port-profile wired gigabitethernet 0

user-isolate (AP wired port profile view)

Function

The user-isolate command enables user isolation on an AP's wired interface.

The undo user-isolate command disables user isolation on an AP's wired interface.

By default, user isolation is disabled on an AP's wired interface.

Format

user-isolate { all | l2 }

undo user-isolate

Parameters

Parameter

Description

Value

all

Enables Layer 2 and Layer 3 user isolation.

-

l2

Enables Layer 2 user isolation.

-

Views

AP wired port profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The user isolation function prevents users on the same wired interface from communicating with each other. All user traffic on the wired interface is forwarded by the gateway. Therefore, this function ensures communication security on wired interfaces and allows uniform charging for users.

Precautions

Eth-Trunk member interfaces do not support the user isolation function.

The AP's wired interface has been configured to work in endpoint mode.

Example

# Set the working mode of the AP's wired interface GE0 to endpoint and enable Layer 2 user isolation on GE0.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] ap-group name ap-group1
[HUAWEI-wlan-ap-group-ap-group1] quit
[HUAWEI-wlan-view] wired-port-profile name wired
[HUAWEI-wlan-wired-port-wired] mode endpoint
Warning: If the AP goes online through a wired port, the incorrect port mode configuration will cause the AP to go out of management
. This fault can be recovered only by modifying the configuration on the AP. Continue? [Y/N]:y
[HUAWEI-wlan-wired-port-wired] user-isolate l2
[HUAWEI-wlan-wired-port-wired] quit
[HUAWEI-wlan-view] ap-group name ap-group1
[HUAWEI-wlan-ap-group-ap-group1] wired-port-profile wired gigabitethernet 0

vlan pvid (AP wired port profile view)

Function

The vlan pvid command sets the PVID for an AP wired interface.

The undo vlan pvid command deletes the PVID of an AP wired interface.

By default, no PVID is configured for an AP wired interface.

Format

vlan pvid vlan-id

undo vlan pvid

Parameters

Parameter

Description

Value

vlan-id

Specifies the PVID of an AP's wired interface.

The value is an integer that ranges from 1 to 4094.

Views

AP wired port profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The APs on the WLAN WDS network only process tagged packets.

When receiving an untagged packet from a peer device, the AP wired interface adds a VLAN tag to the packet. After the PVID is configured on the wired interface, the interface adds the PVID to all the received untagged packets.

NOTE:

In the following paragraphs, packets sent by the AP's wired interface refer to the management packets and service packets sent in the tunnel forwarding mode.

  • After the management-vlan vlan-id command is executed, to configure the AP wired interface to allow packets carrying the management VLAN tag to pass through, run the vlan tagged vlan-id command to add the AP wired interface to the management VLAN in tagged mode.

  • After the management-vlan vlan-id command is executed, to disable packets sent from the AP wired interface from carrying the management VLAN tag, run the vlan untagged vlan-id command to add the AP wired interface to the management VLAN in untagged mode.

  • After the management-vlan vlan-id command is executed, to add the management VLAN tag to untagged packets received on the AP wired interface, run the vlan pvid vlan-id command to set the PVID of the AP wired interface to the management VLAN ID.

Precautions

Eth-Trunk member interfaces do not support PVID setting.

The PVID can be configured in different modes for an AP's wired interface.
  • If the AP's wired interface works in root mode and has been configured to transmit packets carrying the management VLAN tag using the management-vlan vlan-id command, the PVID for the AP's wired interface must be configured the same as the management VLAN ID.
  • If the AP's wired interface works in endpoint mode, the PVID can be configured directly. The configuration takes effect after the system restarts.
  • If the AP's wired interface works in middle mode, the PVID cannot be configured.

Example

# Set the working mode of the AP's wired interface GE0 to endpoint and set the PVID of GE0 to VLAN 1.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] ap-group name ap-group1
[HUAWEI-wlan-ap-group-ap-group1] quit
[HUAWEI-wlan-view] wired-port-profile name wired
[HUAWEI-wlan-wired-port-wired] mode endpoint
Warning: If the AP goes online through a wired port, the incorrect port mode configuration will cause the AP to go out of management
. This fault can be recovered only by modifying the configuration on the AP. Continue? [Y/N]:y
[HUAWEI-wlan-wired-port-wired] vlan pvid 1
[HUAWEI-wlan-wired-port-wired] quit
[HUAWEI-wlan-view] ap-group name ap-group1
[HUAWEI-wlan-ap-group-ap-group1] wired-port-profile wired gigabitethernet 0

vlan tagged (WDS profile view)

Function

The vlan tagged command adds one or a group of VLANs to a WDS profile in tagged mode.

The undo vlan tagged command deletes VLANs from a WDS profile.

By default, no VLAN is configured in a WDS profile.

NOTE:
Currently, VLANs can only be added to a WDS profile in tagged mode.

Format

vlan tagged { vlan-id1 [ to vlan-id2 ] } &<1-10>

undo vlan tagged { { vlan-id1 [ to vlan-id2 ] } &<1-10> | all }

Parameters

Parameter

Description

Value

vlan-id1 [ to vlan-id2 ]

Specifies the tagged VLAN ID.
  • vlan-id1 specifies the first VLAN ID.
  • to vlan-id2 specifies the last VLAN ID. The value of vlan-id2 must be equal to or greater than the value of vlan-id1. The vlan-id1 and vlan-id2 parameters determine a VLAN range.

If to vlan-id2 is not specified, only the VLAN specified by vlan-id1 is added to the WDS profile in tagged mode.

You can specify a maximum of 10 VLAN ranges at a time. The entered VLAN ranges cannot overlap.

  • The value of vlan-id1 is an integer that ranges from 1 to 4094.
  • The value of vlan-id2 is an integer that ranges from 1 to 4094.

all

Deletes all tagged VLANs from a WDS profile.

-

Views

WDS profile view

Default Level

2: Configuration level

Usage Guidelines

Adding VLANs to a WDS profile is equivalent to adding hybrid interfaces to a VLAN. After one or a group of VLANs is added to a WDS profile, the WDS link forwards only the packets with these VLAN IDs from STAs and peer APs.

NOTE:

A maximum of 256 VLANs can be added to a WDS profile.

Example

# Create the WDS profile test and add VLANs 3, 4, 5, 6, 10, and 12 to the WDS profile in tagged mode.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] wds-profile name test 
[HUAWEI-wlan-wds-prof-test] vlan tagged 3 to 6 10 12
Related Topics

vlan (AP wired port profile view)

Function

The vlan command configures the VLAN to which an AP wired interface belongs.

The undo vlan command deletes the VLAN to which an AP wired interface belongs.

By default, an AP wired interface allows packets from all VLANs to pass. The wired interface is added to VLAN 1 in untagged mode and to other VLANs in tagged mode.

NOTE:

An AP wired interface can be added to a maximum of 256 VLANs.

Format

vlan { tagged | untagged } { vlan-id1 [ to vlan-id2 ] } &<1-10>

undo vlan { all | vlan-id1 [ to vlan-id2 ] &<1-10> }

Parameters

Parameter

Description

Value

tagged

Adds a wired interface to a VLAN in tagged mode.

-

untagged

Adds a wired interface to a VLAN in untagged mode.

-

vlan-id1 [ to vlan-id2 ]

Specifies the ID of the VLAN to which the wired interface belongs.
  • vlan-id1 specifies the first VLAN ID.
  • to vlan-id2 specifies the last VLAN ID. vlan-id2 must be larger than vlan-id1. vlan-id1 and vlan-id2 specify a range of VLANs.

If to vlan-id2 is not specified, the wired interface is added to the VLAN specified by vlan-id1.

You can specify a maximum of 10 VLAN ranges at a time. The entered VLAN ranges cannot overlap.

  • The value of vlan-id1 is an integer that ranges from 1 to 4094.
  • The value of vlan-id2 is an integer that ranges from 1 to 4094.

all

Deletes the VLANs to which the AP wired interface belongs.

-

Views

AP wired port profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When a wired interface connects to a PC or Layer 2 network, the interface is equivalent to a hybrid interface on a switch, and can forward the packets with multiple VLAN tags.

After the vlan tagged { vlan-id1 [ to vlan-id2 ] } &<1-10> command is executed to add the wired interface to one or more VLANs in tagged mode, the interface does not remove VLAN tags from the packets it forwarded.

After the vlan untagged { vlan-id1 [ to vlan-id2 ] } &<1-10> command is executed to add the wired interface to one or more VLANs in untagged mode, the interface removes VLAN tags from the packets it forwarded.

NOTE:

After an AP wired interface is added to the management VLAN, CAPWAP packets sent from the AP wired interface carry the VLAN tag.

  • After the management-vlan vlan-id command is executed, to configure the AP wired interface to allow packets carrying the management VLAN tag to pass through, run the vlan tagged vlan-id command to add the AP wired interface to the management VLAN in tagged mode.

  • After the management-vlan vlan-id command is executed, to disable packets sent from the AP wired interface from carrying the management VLAN tag, run the vlan untagged vlan-id command to add the AP wired interface to the management VLAN in untagged mode.

  • After the management-vlan vlan-id command is executed, to add the management VLAN tag to untagged packets received on the AP wired interface, run the vlan pvid vlan-id command to set the PVID of the AP wired interface to the management VLAN ID.

Configuration Impact

If the VLAN of an AP wired interface configured using the vlan untagged vlan-id command is the same as the management VLAN configured using the management-vlan vlan-id command, you must restart the AP to make the configuration take effect.

Eth-Trunk member interfaces cannot be added to VLANs.

Example

# Set the working mode of the AP wired interface GE0 to endpoint and add GE0 to VLANs 3, 4, 5, and 10 in tagged mode and to VLANs 12, 13, 14, and 20 in untagged mode.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] ap-group name ap-group1
[HUAWEI-wlan-ap-group-ap-group1] quit
[HUAWEI-wlan-view] wired-port-profile name wired
[HUAWEI-wlan-wired-port-wired] mode endpoint
Warning: If the AP goes online through a wired port, the incorrect port mode configuration will cause the AP to go out of management
. This fault can be recovered only by modifying the configuration on the AP. Continue? [Y/N]:y
[HUAWEI-wlan-wired-port-wired] vlan tagged 3 to 5 10
[HUAWEI-wlan-wired-port-wired] vlan untagged 12 to 14 20
[HUAWEI-wlan-wired-port-wired] quit
[HUAWEI-wlan-view] ap-group name ap-group1
[HUAWEI-wlan-ap-group-ap-group1] wired-port-profile wired gigabitethernet 0

wds-mode

Function

The wds-mode command sets the WDS mode in a WDS profile.

By default, the WDS mode in a WDS profile is leaf.

Format

wds-mode { root | middle | leaf }

Parameters

Parameter

Description

Value

root

Sets the WDS mode to root.

-

middle

Sets the WDS mode to middle.

-

leaf

Sets the WDS mode to leaf.

-

Views

WDS profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To connect an AP to an AC through WDS links, use this command to set the WDS mode for an AP radio based on the location of the AP on a WDS network.

In the downlink direction, a root node can connect to a middle or leaf node, and a middle node can connect to a leaf node. A leaf node is the termination node of a WDS link.

Precautions

After changing the WDS mode in a WDS profile, reset the APs using the profile to make the changed WDS mode take effect.

Example

# Create the WDS profile test and set the WDS mode of the profile to middle.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] wds-profile name test
[HUAWEI-wlan-wds-prof-test] wds-mode middle
Warning: This action may cause service interruption. Continue?[Y/N]y
Related Topics

wds-name

Function

The wds-name command sets a WDS name for a WDS profile.

The undo wds-name command deletes the WDS name of a WDS profile.

By default, the WDS name of a WDS profile is HUAWEI-WLAN-WDS.

Format

wds-name name

undo wds-name

Parameters

Parameter

Description

Value

name

Specifies the character string that indicates the WDS name.

The value is a string of 1 to 32 case-sensitive characters. It does not contain question marks (?) or spaces, and cannot start or end with double quotation marks (" ").

Views

WDS profile view

Default Level

2: Configuration level

Usage Guidelines

A WDS name is similar to an SSID. On a WDS network, an AP radio discovers WDS services provided by other APs based on the WDS name.

Each WDS profile must have a WDS name. The default WDS name of a WDS profile is HUAWEI-WLAN-WDS. You can run the wds-name command to set a WDS name for a WDS profile.

Example

# Create the WDS profile test and set the WDS name of the profile to bridge.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] wds-profile name test
[HUAWEI-wlan-wds-prof-test] wds-name bridge
Warning: This action may cause service interruption. Continue?[Y/N]y
Related Topics

wds-profile

Function

The wds-profile command creates a WDS profile or displays the WDS profile view.

The undo wds-profile command deletes a WDS profile.

By default, the system provides the WDS profile default.

Format

wds-profile name profile-name

undo wds-profile { all | name profile-name }

Parameters

Parameter

Description

Value

name profile-name

Specifies the name of a WDS profile.

The value is a string of 1 to 35 case-insensitive characters. It does not contain question marks (?) or spaces, and cannot start or end with double quotation marks (" ").

all

Deletes all WDS profiles.

NOTE:
The WDS profile default cannot be deleted.

-

Views

WLAN view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Each WDS profile must have a WDS name. The default WDS name of a WDS profile is HUAWEI-WLAN-WDS. You can run the wds-name command to set a WDS name for a WDS profile.

Example

# Create the WDS profile test and set the WDS name of the profile to bridge.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] wds-profile name test
[HUAWEI-wlan-wds-prof-test] wds-name bridge
Warning: This action may cause service interruption. Continue?[Y/N]y
Related Topics

wds-profile radio

Function

The wds-profile radio command binds a WDS profile to an AP group or AP.

The undo wds-profile radio command deletes a WDS profile from an AP group or AP.

By default, no WDS profile is bound to an AP group or AP.

Format

wds-profile profile-name radio { all | radio-id }

undo wds-profile radio { all | radio-id }

Parameters

Parameter

Description

Value

profile-name

Specifies the name of the WDS profile bound to an AP or AP group.

The WDS profile must exist.

all

Binds a WDS profile to all AP radios.

-

radio-id

Binds a WDS profile to a specified AP radio.

The radio ID must exist.

Views

AP group view, AP view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

After a WDS profile is bound to an AP or AP group, the AP radio will generate a WDS VAP to provide WDS services. The WDS VAP provides hidden SSIDs for WDS nodes to set up connections.

Prerequisites

A WDS profile has been created and configured properly.

Precautions

Among the VAPs created after a WDS profile is bound to an AP radio, the VAPs with the WLAN IDs 13 and 14 cannot be occupied.

An AP radio can only have one WDS profile bound.

Since the WLAN WDS and Mesh functions are mutually exclusive, the WDS and Mesh profiles cannot be applied to an AP radio at the same time.

Example

# Bind the WDS profile test to radio 0 of APs in the AP group group1.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] ap-group name group1
[HUAWEI-wlan-ap-group-group1] wds-profile test radio 0
Warning: This action may cause service interruption. Continue?[Y/N]y
Related Topics

wds-profile (AP group radio view or AP radio view)

Function

The wds-profile command binds a WDS profile to an AP radio.

The undo wds-profile command unbinds a WDS profile from an AP radio.

By default, no WDS profile is bound to an AP radio.

Format

wds-profile profile-name

undo wds-profile

Parameters

Parameter

Description

Value

profile-name

Specifies the name of the WDS profile bound to an AP radio.

The WDS profile must exist.

Views

AP group radio view, AP radio view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

After a WDS profile is bound to an AP radio, the radio will generate a WDS VAP to provide WDS services. The WDS VAP provides hidden SSIDs for WDS nodes to set up connections.

Prerequisites

A WDS profile has been created and configured properly.

Precautions

Among the VAPs created after a WDS profile is bound to an AP radio, the VAPs with the WLAN IDs 13 and 14 cannot be occupied.

An AP radio can only have one WDS profile bound.

This command has the same function as the wds-profile radio command. You can use either of them.

Example

# Bind the WDS profile test to radio 0 of APs in the AP group group1.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] ap-group name group1
[HUAWEI-wlan-ap-group-group1] radio 0
[HUAWEI-wlan-group-radio-group1/0] wds-profile test
Warning: This action may cause service interruption. Continue?[Y/N]y

wds-whitelist-profile

Function

The wds-whitelist-profile command creates a WDS whitelist profile or displays the WDS whitelist profile view.

The undo wds-whitelist-profile command deletes a WDS whitelist profile.

By default, no WDS whitelist profile is available in the system.

Format

wds-whitelist-profile name whitelist-name

undo wds-whitelist-profile { all | name whitelist-name }

Parameters

Parameter

Description

Value

name whitelist-name

Specifies the name of a WDS whitelist profile.

The value is a string of 1 to 35 case-insensitive characters. It does not contain question marks (?) or spaces, and cannot start or end with double quotation marks (" ").

all

Deletes all WDS whitelist profiles.

-

Views

WLAN view

Default Level

2: Configuration level

Usage Guidelines

After a WDS whitelist profile is created using the wds-whitelist-profile command, you can run the peer-ap mac (WDS whitelist profile view) command in the WDS whitelist profile view to add MAC addresses of peer APs that are allowed to set up WDS links with the local AP to the profile.

Example

# Create the WDS whitelist profile whitelist and add the MAC address 0001-0001-0001 to the whitelist profile. Bind the WDS whitelist profile whitelist to radio 0 of APs in the AP group group1.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] wds-whitelist-profile name whitelist
[HUAWEI-wlan-wds-whitelist-whitelist] peer-ap mac 0001-0001-0001
[HUAWEI-wlan-wds-whitelist-whitelist] quit
[HUAWEI-wlan-view] ap-group name group1
[HUAWEI-wlan-ap-group-group1] radio 0
[HUAWEI-wlan-group-radio-group1/0] wds-whitelist-profile whitelist

wds-whitelist-profile (AP group radio view or AP radio view)

Function

The wds-whitelist-profile command binds a WDS whitelist profile to an AP radio.

The undo wds-whitelist-profile command unbinds a WDS whitelist profile from an AP radio.

By default, no WDS whitelist profile is bound to an AP radio.

Format

wds-whitelist-profile whitelist-name

undo wds-whitelist-profile

Parameters

Parameter

Description

Value

whitelist-name

Specifies the name of the WDS whitelist profile bound to an AP radio.

The WDS whitelist profile must exist.

Views

AP group radio view, AP radio view

Default Level

2: Configuration level

Usage Guidelines

After a WDS whitelist profile is applied to an AP radio, the AP radio can only set up WDS links with neighboring APs whose MAC addresses are in the WDS whitelist profile. If no WDS whitelist profile is bound to an AP radio, the AP radio can establish WDS links with any neighboring APs.

NOTE:
On a WDS network, a root or middle node controls subnode access by MAC addresses added to the WDS whitelist profile. However, a leaf node does not require a whitelist.

An AP radio can only have one WDS whitelist profile bound. If you run the command multiple times on the same AP radio, the latest configuration overwrites the old one.

Example

# Create the WDS whitelist profile whitelist and add the MAC address 0001-0001-0001 to the whitelist profile. Bind the WDS whitelist profile whitelist to radio 0 of APs in the AP group group1.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] wds-whitelist-profile name whitelist
[HUAWEI-wlan-wds-whitelist-whitelist] peer-ap mac 0001-0001-0001
[HUAWEI-wlan-wds-whitelist-whitelist] quit
[HUAWEI-wlan-view] ap-group name group1
[HUAWEI-wlan-ap-group-group1] radio 0
[HUAWEI-wlan-group-radio-group1/0] wds-whitelist-profile whitelist
Translation
Download
Updated: 2019-04-18

Document ID: EDOC1000178165

Views: 41840

Downloads: 1101

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next