S1720, S2700, S5700, and S6720 V200R011C10 Command Reference
This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.
This document describes all the configuration commands of the device, including the command function, syntax, parameters, views, default level, usage guidelines, examples, and related commands.
WLAN Service Configuration Commands
- Command Support
- ac sysnetid
- access-user syslog-restrain enable
- access-user syslog-restrain period
- ac-list (AP view)
- ac-list(AP provisioning view)
- active-dull-client enable
- address-mode (AP view)
- address-mode (AP provisioning view)
- advertise-ap-name enable
- agile-antenna-polarization
- alarm-restriction disable
- alarm-restriction period
- antenna-gain
- ap auth-mode
- ap blacklist
- ap data-collection enable
- ap data-collection interval
- ap lldp enable
- ap manufacturer-config
- ap modify
- ap update ftp-server
- ap update ftp-server max-connect-number
- ap update load
- ap update mode
- ap update multi-load
- ap update multi-reset
- ap update reset
- ap update sftp-server
- ap update sftp-server max-connect-number
- ap update update-filename
- ap update schedule-task
- ap username
- ap whitelist
- ap-confirm
- ap-group
- ap-group (AP provisioning view)
- ap-group (AP view)
- ap-id
- ap-mac
- ap-mode
- ap-name
- ap-name (AP provisioning view)
- ap-name (AP view)
- ap-ping
- ap-regroup
- ap-rename
- ap-reset
- ap-system-profile (WLAN view)
- ap-system-profile (AP group view and AP view)
- assignment
- association-timeout
- auto-off service
- beacon-2g-rate
- beacon-5g-rate
- beacon-interval
- beamforming enable
- capwap control-link-priority
- capwap dtls control-link encrypt
- capwap dtls psk
- capwap dtls psk-mandatory-match enable
- capwap echo
- capwap echo-timeout trace logging
- capwap message-integrity psk
- capwap message-integrity check disable
- capwap sensitive-info psk
- capwap source interface
- channel
- channel-load-mode indoor
- channel-switch announcement disable
- channel-switch mode
- clear configuration this
- commit (AP provisioning view)
- console disable
- coordinate
- copy-from
- country-code
- coverage distance
- cpu-usage threshold
- crc-alarm enable
- dai enable (AP wired port profile view)
- deny-broadcast-probe enable
- description (AP wired port profile view)
- dhcp option82 insert enable
- dhcp option82 format (vap profile view)
- display ac global configuration
- display ap
- display ap around-ssid-list
- display ap asyn-message err-info
- display ap blacklist
- display ap config-info
- display ap configurable channel
- display ap coordinate
- display ap elabel
- display ap global configuration
- display ap lldp neighbor
- display ap neighbor
- display ap offline-record
- display ap online-fail-record
- display ap optical-info
- display ap performance statistics
- display ap provision
- display ap port
- display ap power-workmode
- display ap resource
- display ap run-info
- display ap sta-signal strength
- display ap statistics
- display ap traffic statistics wireless
- display ap unauthorized record
- display ap uncontrol all
- display ap update configuration
- display ap update schedule-task
- display ap update status
- display ap username
- display ap version
- display ap whitelist
- display ap wired-port
- display ap-group
- display ap-system-profile
- display ap-type
- display capwap configuration
- display channel switch-record
- display distribute-ap
- display mac-address ap-all
- display mac-address { ap-id | ap-name }
- display port-link-profile
- display provision-ap parameter-list
- display radio
- display radio-2g-profile
- display radio-5g-profile
- display references ap-system-profile
- display references port-link-profile
- display references radio-2g-profile
- display references radio-5g-profile
- display references regulatory-domain-profile
- display references ssid-profile
- display references vap-profile
- display references vlan pool
- display references wired-port-profile
- display regulatory-domain-profile
- display snmp-agent trap feature-name wlan all
- display ssid-profile
- display sta-offline-delay configuration
- display station
- display station assoc-info ap-offline-record
- display station online-fail-record
- display station offline-record
- display station statistics
- display vap
- display vap create-fail-record
- display vap-profile
- display vlan pool
- display wired-port-profile
- display wlan config-errors
- dot11a basic-rate
- dot11a supported-rate
- dot11bg basic-rate
- dot11bg supported-rate
- dtim-interval
- eapol-response dest-address transform-condition
- eapol-response dest-address transform-to
- eapol-start dest-address transform-condition
- eapol-start dest-address transform-to
- eirp
- eth-trunk (AP wired port profile view)
- forward-mode
- fragmentation-threshold
- frequency
- guard-interval-mode
- high-temperature threshold
- ht a-mpdu disable
- ht a-mpdu max-length-exponent
- ipsg enable (AP wired port profile view)
- ip-address (AP view)
- ip-address (AP provisioning view)
- keep-service enable
- keep-service enable allow new-access
- learn-client-address enable (AP wired port profile view)
- legacy-station disable
- lldp admin-status
- lldp dot3-tlv power (AP wired port link profile view)
- lldp enable
- lldp message-transmission delay (AP system profile view)
- lldp message-transmission hold-multiplier (AP system profile view)
- lldp message-transmission interval (AP system profile view)
- lldp report enable
- lldp report-interval
- lldp restart-delay
- lldp tlv-enable (AP wired port link profile view)
- lldp tlv-enable legacy-tlv four-pair-power (AP wired port link profile view)
- log-record-level
- log-server
- low-temperature threshold
- management-vlan
- max-sta-number (SSID profile view)
- memory-usage threshold
- mtu
- mu-mimo disable
- mu-mimo optimize enable
- multicast-rate
- poe af-inrush enable (AP system profile view)
- poe disable (AP wired port link profile view)
- poe force-power (AP wired port link profile view)
- poe high-inrush enable (AP system profile view)
- poe legacy enable (AP wired port link profile view)
- poe max-power (AP system profile view)
- poe power-reserved (AP system profile view)
- poe power-threshold (AP system profile view)
- poe power-off time-range (AP wired port link profile view)
- poe priority (AP wired port link profile view)
- port-link-profile (WLAN view)
- port-link-profile (AP wired port profile view)
- probe-response-retry
- provision-ap
- qbss-load enable
- radio
- radio disable
- radio-2g-profile (WLAN view)
- radio-2g-profile
- radio-5g-profile (WLAN view)
- radio-5g-profile
- radio-type (2G radio profile view)
- radio-type (5G radio profile view)
- reach-max-sta hide-ssid disable
- regulatory-domain-profile (WLAN view)
- regulatory-domain-profile
- report-disassoc-request disable
- report-sta-assoc enable
- report-sta-info enable
- reset ap offline-record
- reset ap online-fail-record
- reset ap unauthorized record
- reset channel switch-record
- reset mac-address { ap-id | ap-name }
- reset station assoc-info ap-offline-record
- reset station offline-record
- reset station online-fail-record
- reset station statistics
- reset statistics
- rf-ping
- rts-cts-mode
- rts-cts-threshold
- sample-time
- service-mode disable
- service-vlan (VAP profile view)
- sftp server disable
- short-preamble disable
- shutdown (AP wired port link profile view)
- single-txchain enable
- snmp-agent trap enable feature-name wlan
- ssh client first-time enable (AP system profile view)
- ssid
- ssid-hide enable
- ssid-profile (WLAN view)
- ssid-profile (VAP profile view)
- sta-ipv6-service enable
- sta-network-detect disable
- sta-offline-delay aging-time
- sta-offline-delay enable
- sta-offline-delay full-sta-reject enable
- sta-offline-delay max-number
- stelnet server disable
- stp auto-shutdown enable (AP wired port profile view)
- stp auto-shutdown recovery-time (AP wired port profile view)
- telnet enable
- temporary-management enable (AP system profile view)
- temporary-management enable (VAP profile view)
- temporary-management psk
- traffic-filter (AP wired port profile view)
- traffic-remark (AP wired port profile view)
- traffic-optimize (AP wired port profile view)
- traffic-optimize broadcast-suppression enable (AP system profile view)
- traffic-optimize broadcast-suppression rate-threshold (AP system profile view)
- type (VAP profile view)
- u-apsd enable
- undo ap
- usb enable(AP system profile view)
- user-interface vty idle-timeout
- user-interface vty screen-length
- utmost-powerdisable
- vap-profile (WLAN view)
- vap-profile
- vht a-mpdu max-length-exponent
- vht a-msdu enable
- vht a-msdu max-frame-num
- vht mcs-map
- vlan pool
- vlan (VLAN pool view)
- wifi-light
- wired-port-profile (WLAN view)
- wired-port-profile (AP group view and view)
- wlan
ac sysnetid
Parameters
Parameter |
Description |
Value |
---|---|---|
ac-sysnetid |
Specifies the NE name of an AC. |
The value is a string of 1 to 32 case-sensitive characters. The value beginning and ending with double quotation marks (" ") can contain spaces. The value can contain digits, letters, and special characters such as the asterisk (*) and number sign (#). |
access-user syslog-restrain enable
Usage Guidelines
After a STA passes authentication or successfully associates with the AP, the AP sends system logs to the NMS server. A system log contains MAC addresses of the STA, AC, and AP, AP and AC name and current time, and authentication result.
If a STA fails to associate with an AP or fails authentication, the STA attempts to go online continuously. The AP sends a large number of duplicate logs to the AC in a short period, which wastes resources and deteriorates system performance. To prevent this problem, enable system log suppression.
access-user syslog-restrain period
Usage Guidelines
When a STA is authenticated or successfully associates with an AP, the AP sends system logs to the NMS server. A system log contains MAC addresses of the STA, AP, and AC, AP name and current time, AC name and current time, and authentication result.
A STA retries continuously after it fails to associate with an AP or pass the authentication. When this occurs, the AC sends a large number of logs in a short time. This results in a high statistics failure rate and degrades the NMS performance. The system log suppression function reduces impact of such logs on the NMS. After the period of system log suppression is set, the AC will send only one system log to the NMS server during the suppression period, reducing the load on the server.
ac-list (AP view)
Parameters
Parameter | Description | Value |
---|---|---|
ipv4-address | Specifies the IPv4 address of an AC. | The value is in dotted decimal notation. |
Usage Guidelines
Usage Scenario
You can run this command to configure an AC IPv4 address list for APs. After this list is configured, the APs can unicast a Discovery Request packet to discover an AC when they go online using IPv4 addresses.
Precautions
After the configuration is delivered, restart the APs to make the configuration take effect.
Example
# Set the AC's IPv4 address to 192.168.10.1 in the AP provisioning view.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] ap-id 0 [HUAWEI-wlan-ap-0] ac-list 192.168.10.1 Warning: The incorrect configuration will cause the AP to go out of management. This operation will deliver parameter setting and ma y cause reboot of AP(s). Continue?[Y/N]:y
ac-list(AP provisioning view)
Parameters
Parameter | Description | Value |
---|---|---|
ipv4-address | Specifies the IPv4 address of an AC. | The value is in dotted decimal notation. |
Usage Guidelines
Usage Scenario
You can run this command to configure an AC IPv4 address list for APs. After this list is configured, the APs can unicast a Discovery Request packet to discover an AC when they go online using IPv4 addresses.
Follow-up Procedure
Run the commit command to deliver configuration to APs and restart the APs to make the configuration take effect.
active-dull-client enable
Usage Guidelines
Usage Scenario
Due to individual reasons, some terminals may not run services normally when entering energy-saving mode. You can run the active-dull-client enable command to enable the function of preventing terminals from entering energy-saving mode. After that, an AP frequently sends null data frames to these terminals to prevent them from entering energy-saving mode, ensuring normal services. This function does not take effect for some terminals and cannot prevent the terminals from entering the power-saving mode. For details, see Test Report on Terminal Compatibility.
Precautions
After the function is enabled, the terminals consume more power and extra bandwidth. If no terminal enters an abnormal energy-saving state, you are advised to disable the function.
address-mode (AP view)
Parameters
Parameter | Description | Value |
---|---|---|
dhcp | Indicates that an IP address is obtained in DHCP mode. The AP functions as a DHCP client and is assigned an IP address by the DHCP server. | - |
static | Indicates that a static IP address is obtained. The AP must be configured with a static IP address. | - |
Usage Guidelines
Usage Scenario
You can run the address-mode command to configure an AP to obtain an IP address in DHCP, static, or SLAAC mode.
Precautions
After the configuration is delivered, restart the APs to make the configuration take effect.
Example
# Configure an AP to obtain an IP address in DHCP mode.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] ap-id 0 [HUAWEI-wlan-ap-0] address-mode dhcp Warning: The incorrect configuration will cause the AP to go out of management. This operation will deliver parameter setting and ma y cause reboot of AP(s). Continue?[Y/N]:y
address-mode (AP provisioning view)
Parameters
Parameter | Description | Value |
---|---|---|
dhcp | Indicates that an IP address is obtained in DHCP mode. The AP functions as a DHCP client and is assigned an IP address by the DHCP server. | - |
static | Indicates that a static IP address is obtained. The AP must be configured with a static IP address. | - |
Usage Guidelines
Usage Scenario
You can run the address-mode command to configure an AP to obtain an IP address in DHCP, static mode.
Follow-up Procedure
Run the commit command to deliver configuration to APs and restart the APs to make the configuration take effect.
advertise-ap-name enable
Usage Guidelines
In certain scenarios, you can run the advertise-ap-name enable command to enable Beacon frames to carry the AP name. In this way, you can quickly locate and identify APs by identifying the AP name carried in an SSID or display the AP name on STAs that can receive and resolve the host name carried in SSIDs of multiple APs.
agile-antenna-polarization
Function
The agile-antenna-polarization enable command enables self-adaptive polarization for agile antennas.
The undo agile-antenna-polarization enable command disables self-adaptive polarization for agile antennas.
Usage Guidelines
Usage Scenario
- STA with one transmit antenna and one receive antenna in 1x1 mode
- STA with two transmit antennas and two receive antennas in 2x2 mode
Prerequisites
Dual-polarized antennas have been connected to radio ports A and B on the same frequency band.
alarm-restriction disable
Usage Guidelines
If a STA cannot go online due to security type mismatch, UAC, or access user upper limit exceeding, the STA will automatically re-connect to the AP. During this period, the AP sends a large number of STA association failure alarms to the AC, which degrades the system performance.
To solve this problem, enable alarm suppression for the AP. The AP then does not report alarms repeatedly in the alarm suppression period, preventing alarm storms.
alarm-restriction period
antenna-gain
Function
(AP group radio view) The antenna-gain command configures the antenna gain for all specified radios in an AP group.
(AP group radio view) The undo antenna-gain command restores the default antenna gain for all specified radios in an AP group.
(AP radio view) The antenna-gain command configures the antenna gain for an AP radio.
(AP radio view) The undo antenna-gain command cancels the configuration of the antenna gain on an AP radio. The antenna gain on the AP radio is then determined by that configured in the AP group radio view.
By default, no antenna gain is configured for AP radios.
The antenna gain of AP radios depends on AP types and working channels of AP radios. You can run the display ap-type { id type-id | type ap-type } command to check default antenna gains of radios of different AP types.
Usage Guidelines
Usage Scenario
The antenna gain is the ratio of the power density produced by an antenna to the power density that should be obtained at the same point if the power accepted by the antenna were radiated equally. It can measure the capability for an antenna to receive and send signals in a specified direction, which is one of the most important parameters to select a BTS antenna. In the same condition, if the antenna gain is high, the wave travels far.
Precautions
The antenna gain of an AP radio configured using the command must be consistent with the gain of the antenna connected to the AP.
The antenna gain of an AP radio configured using the command takes effect only for external antennas. When an AP uses an external antenna, configure the antenna gain for the AP radio to be consistent with the gain of the external antenna connected to the AP.
The maximum antenna gain should comply with laws and regulations of the corresponding country. For details, see the Country Code & Channel Compliance Table. You can obtain this table at Huawei technical support website.
Enterprise technical support website: http://support.huawei.com/enterprise
Carrier technical support website: http://support.huawei.com
The configuration in the AP radio view has a higher priority than that in the AP group radio view.
When the antenna gain of an AP is not an integer, the AC rounds the value off and delivers the integer antenna gain. For example, if the 5G antenna gain of an AP2010DN is 2.5 dB, the 5G antenna gain of 3 dB is displayed on the AC.
ap blacklist
Parameters
Parameter |
Description |
Value |
---|---|---|
mac ap-mac1 |
Specifies the AP MAC address. |
The value is in H-H-H format. An H is a hexadecimal number of 4 digits. |
to ap-mac2 |
Specifies the end MAC address. This parameter is used when you want to add multiple MAC addresses to the blacklist. The value must be larger than ap-mac1. ap-mac1 and ap-mac2 identify a range. The maximum number of MAC addresses that can be added to the blacklist in batches is 128. |
The value is in H-H-H format. An H is a hexadecimal number of 4 digits. |
Usage Guidelines
Usage Scenario
If the AP's MAC address is in the blacklist, the AP cannot go online. If the MAC address of an online AP is in the blacklist, the AP is forced to log out.
Precautions
The AP blacklist and whitelist can be configured at the same time. However, the MAC address of an AP cannot be added to the AP blacklist and whitelist at the same time.
If AP whitelist and blacklist are all configured, check whether an AP is on the blacklist first.
Example
# Add the AP with the MAC address of 0025-9e07-8280 to the AP blacklist.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] ap blacklist mac 0025-9e07-8280
# Add MAC addresses from 0025-9e07-8270 to 0025-9e07-8276 to the AP blacklist.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] ap blacklist mac 0025-9e07-8270 to 0025-9e07-8276
ap data-collection enable
Usage Guidelines
The AC needs to query performance statistics (such as AP and radio performance statistics, and STA association information on APs) from APs. The ap data-collection enable command can enable an AC to periodically query data on APs and buffer obtained data. Upon next data query, the AC can directly search for data in the buffer but does not need to wait for APs to return data. This greatly reduces timeout for querying AP-related statistics.
If there are a large number of APs and users on the AC, this function may occupy many memory resources and affect performance. Therefore, you are advised to disable this function when statistics query is not required.
After the undo ap data-collection enable command is executed, the AC stops periodically obtaining data from APs. Historical data in the buffer is not updated. To query latest statistics, enable this function again.
ap lldp enable
Usage Guidelines
Usage Scenario
The Link Layer Discovery Protocol (LLDP) is a Layer 2 discovery protocol defined in the IEEE 802.1ab standard. Using LLDP, the AC or NMS can obtain Layer 2 information about the connected APs, including APs' interfaces and connections with other devices. Additionally, the AC or NMS can obtain details about network topology and interface changes. To view the Layer 2 link status between APs, and between APs and switch or analyze the network topology, enable WLAN LLDP.
Precautions
WLAN LLDP can be enabled in the system view and the AP wired port link profile view.
- An AP can send and receive LLDP packets only after LLDP is enabled in both the WLAN view and the AP wired port link profile view.
- After LLDP is disabled in the WLAN view, the commands for enabling and disabling LLDP on the AP wired port link profile view do not take effect.
ap manufacturer-config
Parameters
Parameter |
Description |
Value |
---|---|---|
ap-name ap-name |
Specifies the name of the AP, factory settings of which need to be restored. |
The AP name must already exist. |
ap-mac ap-mac |
Specifies the MAC address of the AP, factory settings of which need to be restored. |
The AP's MAC address must already exist. |
ap-id ap-id |
Specifies the ID of the AP, factory settings of which need to be restored. |
The AP ID must already exist. |
ap modify
Usage Guidelines
Usage Scenario
When AP hardware needs to be replaced, you can change the MAC address of the AP to that of a new AP to prevent repetitive data configurations. After the change, the new AP goes online using the ID of the original AP, and all data configurations of the original AP take effect on the new AP.
By default, you can run the display ap { all | ap-group ap-group } command to check the MAC address of an AP.
Precautions
Replacing an AP enables the new AP to go online on the AC but will interrupt services of the original AP.
ap update ftp-server
Function
The ap update ftp-server command configures basic FTP information, including the FTP server IP address, FTP server user name and password.
The undo ap update ftp-server command restores default FTP settings.
By default, no IP address of the FTP server is configured, and the user name and password on the FTP server both have default settings. The default username and password are available in WLAN Default Usernames and Passwords (Enterprise Network or Carrier). If you have not obtained the access permission of the document, see Help on the website to find out how to obtain it.
Format
ap update ftp-server ip-address server-ip-address ftp-username ftp-username ftp-password cipher ftp-password
undo ap update ftp-server
Parameters
Parameter |
Description |
Value |
---|---|---|
ip-address server-ip-address |
Specifies an IPv4 address for the FTP server. |
The value is in dotted decimal notation. |
ftp-username ftp-username |
Specifies the FTP server user name. |
The value is a string of 1 to 31 characters. The value cannot contain question marks (?) and cannot start or end with double quotation marks (" ") or spaces. |
ftp-password |
Specifies the password for logging in to the FTP server. |
- |
cipher |
Specifies the password in cipher text. |
- |
ftp-password |
Specifies the FTP server password. |
The value is a string of characters without question marks (?). It cannot start or end with double quotation marks (" ") or spaces. ftp-password contains 188 characters in cipher text, such as %^%#A<g;&zQR7P3TF+,[MxQ1X%4[2~Gb]Vp#(e<y:~)/%^%#. ftp-password also can be a string of 1 to 128 characters in plain text, such as huawei123. |
Usage Guidelines
Usage Scenario
- The FTP configuration is used when the automatic upgrade and online upgrade modes are FTP. In the automatic upgrade or online upgrade, the AC sends basic FTP information to the AP, and the AP requests the FTP server for upgrade based on FTP information.
- After running the ap update ftp-server command,
you can perform the following operations:
- Run the ap update mode command to set the upgrade mode to ftp-mode.
- Run the ap update multi-load command to upgrade APs in batches.
Precautions
It is recommended that you use an external FTP server to upgrade APs. If the AC functions as the FTP server, a maximum of five APs can be upgraded simultaneously.
The FTP server user name cannot contain the double quotation marks ("). Ensure that the FTP server user name and unencrypted password configured on the AC do not contain the preceding characters. Otherwise, FTP upgrade fails.
ap update ftp-server max-connect-number
Function
The ap update ftp-server command configures the maximum number of APs that can be upgraded simultaneously in FTP mode.
The undo ap update ftp-server command restores the default maximum number of APs that can be upgraded simultaneously in FTP mode.
By default, a maximum of 50 APs can be upgraded simultaneously in FTP mode.
Format
ap update ftp-server max-connect-number max-connect-number
undo ap update ftp-server max-connect-number
Usage Guidelines
Usage Scenario
If the number of APs to be upgraded is equal to or smaller than max-connect-number, all APs can be upgraded simultaneously.
If the number of APs to be upgraded is larger than max-connect-number, only the specified number of APs can be upgraded simultaneously. After the specified number of APs are upgraded, the remaining APs are upgraded automatically until all APs are upgraded. The number of APs that are upgraded at a time cannot exceed the value of max-connect-number.
Precautions
- When an external FTP server is used, the maximum number of APs that can be upgraded simultaneously is the configured max-connect-number.
If an AC is used as the FTP server, a maximum of five APs can be upgraded simultaneously even if the specified number is larger than five.
When the AC functions as the FTP server, run the ap update ftp-server max-connect-number max-connect-number command to set the maximum number of APs that can be upgraded simultaneously. The value of max-connect-number is an integer ranging from 1 to 5. During the upgrade, a maximum of 1 to 5 APs can be upgraded at a time until all APs are upgraded.
If the configured number of APs to be upgraded simultaneously is larger than five, an error message will be displayed after the first five APs are upgraded. The remaining APs cannot be automatically upgraded. You have to repeat the command until all APs are upgraded.
ap update load
Function
The ap update load command upgrades a specified AP.
The undo ap update load command cancels AP upgrade.
Format
ap update load { ap-name ap-name | ap-mac ap-mac | ap-id ap-id } update-filename update-file-name
undo ap update load { ap-name ap-name | ap-mac ap-mac | ap-id ap-id }
Parameters
Parameter |
Description |
Value |
---|---|---|
ap-name ap-name |
Specifies the name of the AP to be upgraded. |
The AP name must already exist. |
ap-mac ap-mac |
Specifies the MAC address of the AP to be upgraded. |
The AP's MAC address must already exist. |
ap-id ap-id |
Specifies the ID of the AP to be upgraded. |
The AP ID must already exist. |
update-filename update-file-name |
Specifies the AP upgrade file. |
The upgrade file name must already exist. |
Usage Guidelines
Usage Scenario
When APs are upgraded in batches based on AP types, if the new version fails, the version rollback takes a long period. Therefore, you can update a single AP to check whether faults occur on the version, ensuring successful upgrades in batches.
Prerequisites
When the AC mode is used, the AP upgrade file has been uploaded to the AC. If the FTP or SFTP mode is used, the AP upgrade file has been uploaded to the FTP server or SFTP server.
The AP is in normal or vmiss state.
Follow-up Procedure
Run the ap update reset { ap-name ap-name | ap-mac ap-mac | ap-id ap-id } command to restart the AP to make the upgrade take effect.
Precautions
The undo ap update load { ap-name ap-name | ap-mac ap-mac | ap-id ap-id } command cancels AP upgrade. However, if the AP system software has been written to the flash memory during the upgrade, the command does not take effect. You can run the display ap update status { ap-name ap-name | ap-id ap-id } command to check AP upgrade progress.
Example
# Upgrade the AP N1-2 using the upgrade file fitap6x10xn_v200r007c10.bin.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] ap update load ap-name N1-2 update-filename fitap6x10xn_v200r007c10.bin Info: The current upgrade mode is AC mode, which may affect performance and take a long time. The FTP or SFTP upgrade mode is recomm ended. Continue? [Y/N]:y
ap update mode
Parameters
Parameter |
Description |
Value |
---|---|---|
ac-mode |
Indicates the AP upgrade mode in which APs download upgrade versions from the AC. |
- |
ftp-mode |
Indicates the FTP mode. The AC delivers the FTP configuration to APs using the ap update ftp-server command, and APs download the upgrade version file from the FTP server. |
- |
sftp-mode |
Indicates the SFTP mode. The AC delivers the SFTP configuration to APs using the ap update sftp-server command, and APs download the upgrade version file from the SFTP server. |
- |
Usage Guidelines
- The AC, FTP or SFTP upgrade mode must be preset on the AP for automatic upgrade and online upgrade.
- Run the ap update multi-load command to upgrade the AP.
ap update multi-load
Function
The ap update multi-load command upgrades APs of the same type in batches.
The undo ap update multi-load command cancels batch upgrade of APs with the same type.
Format
ap update multi-load ap-type type-id [ ap-group group-name | { ap-name ap-name | ap-id ap-id } &<1-10> ]
ap update multi-load ap-group group-name [ { ap-name ap-name } &<1-10> | { ap-id ap-id } &<1-10> ]
undo ap update multi-load ap-type type-id [ ap-group group-name | { ap-name ap-name | ap-id ap-id } &<1-10> ]
undo ap update multi-load ap-group group-name [ { ap-name ap-name } &<1-10> | { ap-id ap-id } &<1-10> ]
Parameters
Parameter |
Description |
Value |
---|---|---|
ap-type type-id |
Specifies the AP type ID. |
The value is an integer that ranges from 0 to 255. |
ap-group group-name |
Specifies an AP group. |
The AP group must exist. |
ap-name ap-name |
Specifies an AP name. |
The AP name must exist. |
ap-id ap-id |
Specifies an AP ID. |
The AP ID must exist. |
Usage Guidelines
Usage Scenario
- If ap-group group-name is specified, only APs of the same type and in the specified AP group are upgraded.
- If ap-name ap-name or ap-id ap-id is specified, only APs of the specified type and with the specified AP name or AP ID are upgraded
- If none of the ap-group group-name, ap-name ap-name, and ap-id ap-id parameters are specified, all APs of the specified type are upgraded.
- If the type of APs specified by ap-group group-name, ap-name ap-name, or ap-id ap-id is different from ap-type type-id, the APs cannot be upgraded.
If ap-name ap-name or ap-id ap-id is specified, only APs with the specified name or ID in the specified AP group are upgraded.
If neither ap-name ap-name nor ap-id ap-id is specified, all APs in the specified AP group are upgraded.
- If APs specified by ap-name ap-name and ap-id ap-id are in different AP groups, the APs cannot be upgraded.
Prerequisites
AP upgrade files have been configured in batches using the ap update update-filename command.
Follow-up Procedure
Run the ap update multi-reset command to reset APs in batches to make AP upgrade take effect.
Precautions
The undo ap update multi-load ap-type type-id command cancels batch upgrade of APs with the same type. However, if the AP system software has been written to the flash memory during the upgrade, the command does not take effect. You can run the display ap update status all command to check AP upgrade progress.
Example
# Upgrade APs with type-id 19 in batches online.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] ap update multi-load ap-type 19 Info: The current upgrade mode is AC mode, which may affect performance and take a long time. The FTP or SFTP upgrade mode is recomm ended. Continue? [Y/N]:y
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] ap update multi-load ap-group ap-group1 Info: The current upgrade mode is AC mode, which may affect performance and take a long time. The FTP or SFTP upgrade mode is recomm ended. Continue? [Y/N]:y
ap update multi-reset
Format
ap update multi-reset ap-type type-id [ ap-group group-name | { ap-name ap-name | ap-id ap-id } &<1-10> ]
ap update multi-reset ap-group group-name [ { ap-name ap-name } &<1-10> | { ap-id ap-id } &<1-10> ]
Parameters
Parameter |
Description |
Value |
---|---|---|
ap-type type-id |
Resets APs of the specified type ID. |
The AP type ID must exist. |
ap-group group-name |
Resets APs in the specified AP group. |
The AP group must exist. |
ap-name ap-name |
Resets APs with the specified AP name. |
The AP name must exist. |
ap-id ap-id |
Resets APs with the specified AP ID. |
The AP ID must exist. |
Usage Guidelines
This command resets APs in batches and can be used only after APs are upgraded in batches.
- If ap-group group-name is specified, only APs of the specified type and in the specified AP group are reset.
- If ap-name ap-name or ap-id ap-id is specified, only APs of the specified type and with the specified AP name or ID are reset.
- If none of the ap-group group-name, ap-name ap-name, or ap-id ap-id parameters are specified, all APs of the specified type are reset.
- If the type of APs specified by ap-group group-name, ap-name ap-name, or ap-id ap-id is different from ap-type type-id, the APs cannot be reset.
If ap-name ap-name or ap-id ap-id is specified, only APs with the specified name or ID in the specified AP group are reset.
If neither ap-name ap-name nor ap-id ap-id is specified, all APs in the specified AP group are reset.
- If APs specified by ap-name ap-name and ap-id ap-id are in different AP groups, the APs cannot be reset.
ap update reset
Parameters
Parameter |
Description |
Value |
---|---|---|
ap-name ap-name |
Specifies the name of the AP to be restarted. |
The AP name must already exist. |
ap-mac ap-mac |
Specifies the MAC address of the AP to be restarted. |
The AP's MAC address must already exist. |
ap-id ap-id |
Specifies the ID of the AP to be restarted. |
The AP ID must already exist. |
Usage Guidelines
Usage Scenario
After a single AP has been upgraded, run the ap update reset command to restart the AP and make the AP upgrade take effect.
Prerequisites
The AP is in normal or vmiss state.
The specified AP has been upgraded using the ap update load { ap-name ap-name | ap-mac ap-mac | ap-id ap-id } update-filename update-file-name command.
ap update sftp-server
Function
The ap update sftp-server command configures basic sftp information, including the sftp server IP address, sftp server user name and password.
The undo ap update sftp-server command restores default sftp settings.
By default, no IP address of the SFTP server is configured, and the user name and password on the SFTP server both have default settings. The default username and password are available in WLAN Default Usernames and Passwords (Enterprise Network or Carrier). If you have not obtained the access permission of the document, see Help on the website to find out how to obtain it.
Format
ap update sftp-server ip-address server-ip-address sftp-username sftp-username sftp-password cipher sftp-password
undo ap update sftp-server
Parameters
Parameter |
Description |
Value |
---|---|---|
ip-address server-ip-address |
Specifies an IPv4 address for the sftp server. |
The value is in dotted decimal notation. |
sftp-username sftp-username |
Specifies the sftp server user name. |
The value is a string of 1 to 31 characters. The value cannot contain question marks (?) and cannot start or end with double quotation marks (" ") or spaces. |
sftp-password |
Specifies the password for logging in to the sftp server. |
- |
cipher |
Specifies the password in cipher text. |
- |
sftp-password |
Specifies the sftp server password. |
The value is a string of characters without question marks (?). It cannot start or end with double quotation marks (" ") or spaces. sftp-password can be up to 188 characters in cipher text, such as %^%#A<g;&zQR7P3TF+,[MxQ1X%4[2~Gb]Vp#(e<y:~)/%^%#. sftp-password also can be a string of 1 to 128 characters in plain text, such as huawei123. |
Usage Guidelines
Usage Scenario
- The sftp configuration is used when the automatic upgrade and online upgrade modes are sftp. In the automatic upgrade or online upgrade, the AC sends basic sftp information to the AP, and the AP requests the sftp server for upgrade based on sftp information.
- After running the ap update sftp-server command,
you can perform the following operations:
- Run the ap update mode command to set the upgrade mode to sftp-mode.
- Run the ap update multi-load command to upgrade APs in batches.
Precautions
It is recommended that you use an external sftp server to upgrade APs. If the AC functions as the sftp server, a maximum of five APs can be upgraded simultaneously.
APs do not support the following characters:". Ensure that the sftp server user name and unencrypted password configured on the AC do not contain the preceding characters. Otherwise, sftp upgrade fails.
ap update sftp-server max-connect-number
Function
The ap update sftp-server command configures the maximum number of APs that can be upgraded simultaneously in SFTP mode.
The undo ap update sftp-server command restores the default maximum number of APs that can be upgraded simultaneously in SFTP mode.
By default, a maximum of 50 APs can be upgraded simultaneously in SFTP mode.
Format
ap update sftp-server max-connect-number max-connect-number
undo ap update sftp-server max-connect-number
Usage Guidelines
Usage Scenario
If the number of APs to be upgraded is equal to or smaller than max-connect-number, all APs can be upgraded simultaneously.
If the number of APs to be upgraded is larger than max-connect-number, only the specified number of APs can be upgraded simultaneously. After the specified number of APs are upgraded, the remaining APs are upgraded automatically until all APs are upgraded. The number of APs that are upgraded at a time cannot exceed the value of max-connect-number.
Precautions
- When an external sftp server is used, the maximum number of APs that can be upgraded simultaneously is the configured max-connect-number.
If an AC is used as the SFTP server, a maximum of five APs can be upgraded simultaneously even if the specified number is larger than five.
When the AC functions as the SFTP server, run the ap update sftp-server max-connect-number max-connect-number command to set the maximum number of APs that can be upgraded simultaneously. The value of max-connect-number is an integer ranging from 1 to 5. During the upgrade, a maximum of 1 to 5 APs can be upgraded at a time until all APs are upgraded.
If max-connect-number is set larger than 5, an error message will be displayed after the first five APs are upgraded. The remaining APs cannot be automatically upgraded. You have to repeat the command until all APs are upgraded.
ap update update-filename
Function
The ap update update-filename command configures the upgrade file name for APs of a specified type.
The undo ap update update-filename command deletes the upgrade file name for APs of a specified type.
Format
ap update update-filename filename ap-type type-id [ ap-group ap-group-name ]
undo ap update update-filename ap-type type-id [ ap-group ap-group-name ]
Parameters
Parameter |
Description |
Value |
---|---|---|
ap-type type-id |
Specifies the AP type ID. |
The value is an integer that ranges from 0 to 255. |
filename |
Specifies the AP upgrade file name. |
The value is a string of 1 to 255 case-sensitive characters. Ensure that the file name is the same as the actual upgrade file name and has the extension .bin. |
ap-group ap-group-name | Specifies an AP group. |
The AP group must already exist. |
Usage Guidelines
If you specify ap-group ap-group-name, the command configures the upgrade file name only for APs of the specified type and in the specified group.
Run the ap update multi-load ap-type command to upgrade APs of the same type in batches.
Example
# Set the upgrade file name for APs with the type ID 19 to fitap6x10xn_v200r007c10.bin.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] ap update update-filename fitap6x10xn_v200r007c10.bin ap-type 19 Warning: If an AP is performing the automatic upgrade, the AP will be upgraded to the latest version. Continue?[Y/N]:y Warning: If AP update mode is AC-mode, update-file's default path is flash:/. Continue?[Y/N]:y
ap update schedule-task
Format
ap update schedule-task task-id task-id start-time start-time start-date stop-time stop-time stop-date ap-type type-id [ ap-group group-name | { { ap-name ap-name } &<1-10> } | { { ap-id ap-id } &<1-10> } ]
ap update schedule-task task-id task-id start-time start-time start-date stop-time stop-time stop-date ap-group group-name
undo ap update schedule-task { all | task-id task-id }
Parameters
Parameter |
Description |
Value |
---|---|---|
task-id task-id | Specifies the ID of a scheduled AP upgrade task. |
The value is an integer that ranges from 0 to 31. |
start-time start-time | Specifies the start time of the scheduled AP upgrade task. |
The value is in HH:MM format, ranging from 00:00 to 23:59. |
start-date | Specifies the start date of the scheduled AP upgrade task. |
The value is in YYYY/MM/DD format, ranging from 2000-01-01 to 2050-12-31. |
stop-time stop-time | Specifies the end time of the scheduled AP upgrade task. |
The value is in HH:MM format, ranging from 00:00 to 23:59. |
stop-date | Specifies the end date of the scheduled AP upgrade task. |
The value is in YYYY/MM/DD format, ranging from 2000-01-01 to 2050-12-31. stop-time stop-date must be later than start-time start-date. |
ap-type type-id |
Specifies an AP type ID. |
The value is an integer. To view all AP types, run the display ap-type all command. |
ap-group group-name |
Specifies an AP group name. |
The AP group must exist. |
ap-name ap-name |
Specifies an AP name. |
The AP name must exist. |
ap-id ap-id |
Specifies an AP ID. |
The AP ID must exist. |
Usage Guidelines
Usage Scenario
You can configure a scheduled AP upgrade task to upgrade APs in a specified time period, such as off-peak hours.
If you specify ap-group group-name in the command, the configured task will upgrade only APs in the specified AP group. Similarly, if you specify ap-type type-id, ap-name ap-name, or ap-id ap-id, the configured task will upgrade only the specified APs.
The scheduled task configuration will not be automatically deleted after a scheduled upgrade task is completed. To delete the task, run the undo ap update schedule-task { all | task-id task-id } command.
Prerequisites
The AP upgrade file has been specified using the ap update update-filename command. To check the status of scheduled AP upgrade tasks, run the display ap update schedule-task command.
Configuration Impact
For scheduled AP upgrade tasks with the same start time, the task with a smaller task-id task-id is executed preferentially.
During the scheduled AP upgrade, if the time for task B is reached before task A is completed, task B waits until task A is completed. Subsequent scheduled AP upgrade tasks wait in sequence until the previous task is completed.
When the time specified by stop-time stop-time stop-date is reached, ongoing upgrade tasks continue until the upgrade is completed and those tasks waiting in queues stop.
After APs in a scheduled upgrade task are all upgraded, the APs automatically restart. The APs that fail the upgrade do not restart.
After a scheduled AP upgrade task is configured, if the AP group or all APs are deleted, the task fails to be executed, which is not recorded as upgrade failure information.
If an AP is performing the automatic upgrade when you configure a scheduled AP upgrade task, the upgrade continues until the upgrade is completed. APs that have not started the automatic upgrade will not execute the automatic upgrade.
ap username
Function
The ap username command sets the user name and password for AP login.
The undo ap username command restores the default user name and password for AP login.
The default username and password are available in WLAN Default Usernames and Passwords (Enterprise Network or Carrier). If you have not obtained the access permission of the document, see Help on the website to find out how to obtain it.
Parameters
Parameter |
Description |
Value |
---|---|---|
username |
Specifies the user name for AP login. |
The value is a string of 4-31 characters. It can contain letters, underlines, and digits. The character string must start with letters. |
password |
Specifies the password for AP login. |
- |
cipher |
Indicates the cipher text password. |
The password can be entered in plain or cipher text:
|
Usage Guidelines
It is recommended that you change the user name and password in a timely manner to ensure device security.
The password cannot be the same as the user name or the mirror user name.
ap whitelist
Format
ap whitelist { mac ap-mac1 [ to ap-mac2 ] | sn ap-sn1 [ to ap-sn2 ] }
undo ap whitelist { mac ap-mac1 [ to ap-mac2 ] | sn ap-sn1 [ to ap-sn2 ] }
Parameters
Parameter |
Description |
Value |
---|---|---|
mac ap-mac1 |
Specifies the AP MAC address. |
The value is in H-H-H format. An H is a hexadecimal number of four digits. |
to ap-mac2 |
Specifies the end MAC address. This parameter is used when you want to add multiple MAC addresses to the whitelist. The value must be larger than ap-mac1. ap-mac1 and ap-mac2 identify a range. The maximum number of MAC addresses that can be added to the whitelist in batches is 4096. |
The value is in H-H-H format. An H is a hexadecimal number of four digits. |
sn ap-sn1 |
Specifies the SN of an AP. |
The value is a string of 1 to 31 characters. |
to ap-sn2 |
Specifies the end SN. This parameter is used when you want to add multiple SNs to the whitelist. It must be larger than ap-sn1. ap-sn1 and ap-sn2 identify a range. The maximum number of MAC addresses that can be added to the whitelist in batches is 4096. |
The value is a string of 1 to 31 characters. |
Usage Guidelines
Usage Scenario
When the AP authentication mode is set to MAC address authentication using the ap auth-mode command, if the MAC address of an online AP exists in the whitelist, the AP is automatically added to the AC. If the MAC address of an online AP does not exist in the whitelist or the AP is not added offline, the AP cannot be automatically added to the AC. You need to run the ap-confirm command to confirm the AP.
When the AP authentication mode is set to SN authentication using the ap auth-mode command, if the SN of an online AP exists in the whitelist, the AP is automatically added to the AC. If the SN of an online AP does not exist in the whitelist or the AP is not added offline, the AP cannot be automatically added to the AC. You need to run the ap-confirm command to confirm the AP.
Prerequisites
The AP authentication mode has been set to MAC address or SN authentication using the ap auth-mode command.
Precautions
When adding multiple SNs to the whitelist, ensure that the start SN length and the end SN length are the same.
Example
# Add AP MAC address 0025-9e07-8280 to the whitelist.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] ap whitelist mac 0025-9e07-8280
# Add the MAC addresses from 0025-9e07-8270 to 0025-9e07-8290 to the AP whitelist.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] ap whitelist mac 0025-9e07-8270 to 0025-9e07-8290
# Add SN 08PE56430071 to the AP whitelist.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] ap whitelist sn 08PE56430071
# Add SNs from 08PE56430076 to 08PE56430081 to the AP whitelist.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] ap whitelist sn 08PE56430076 to 08PE56430081
ap-confirm
Usage Guidelines
After viewing unauthenticated APs using the display ap unauthorized record command, you can run the ap-confirm command to confirm these unauthenticated APs if you want to connect them to the AC. After confirmation, the APs are allowed to go online, added to the default region, and bound to the default AP profile.
ap-group
Usage Guidelines
Usage Scenario
If you need to perform the same configuration on multiple APs, add the APs to an AP group and perform the configuration in the AP group. The configuration takes effect on all APs of the group. This prevents repetitive configuration.
Follow-up Procedure
Run the ap-group (AP view) or ap-regroup command to add APs to an AP group.
Precautions
If the configuration of an AP in the AP view is different from that in the AP group view, the configuration in the AP view is preferentially used.
The device supports a maximum of 256 AP groups.
The AP group that has APs cannot be deleted. The AP group default cannot be deleted either.
By default, an AP group has the following profiles bound: AP system profile default, 2G radio profile default, 5G radio profile default, regulatory domain profile default, WIDS profile default, and AP wired port profile default.
ap-group (AP provisioning view)
Parameters
Parameter | Description | Value |
---|---|---|
ap-group | Specifies the group that an AP joins. | The AP group must exist. |
Usage Guidelines
Usage Scenario
After the group that an AP joins is changed, and the change is delivered to the AP, the AP automatically restarts and joins the new group.
Follow-up Procedure
Run the commit command to deliver configuration to APs and restart the APs to make the configuration take effect.
ap-group (AP view)
Usage Guidelines
Usage Scenario
If you need to perform the same configuration on multiple APs, add the APs to an AP group and perform the configuration in the AP group. The configuration takes effect on all APs of the group. This prevents you from configuring each AP one by one.
Each AP must be added to an AP group. If no AP group is configured for an AP, the AP automatically joins the AP group default.
Example
# Configure the AP group ap-new-group for an AP.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] ap-id 0 [HUAWEI-wlan-ap-0] ap-group ap-new-group Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:y
ap-id
Format
ap-id ap-id [ [ type-id type-id | ap-type ap-type ] { ap-mac ap-mac | ap-sn ap-sn | ap-mac ap-mac ap-sn ap-sn } ]
Parameters
Parameter |
Description |
Value |
---|---|---|
ap-id |
Specifies the AP ID. |
The value is an integer that ranges from 0 to 1023. |
type-id type-id |
Specifies the AP type ID. |
The value is an integer that ranges from 0 to 255. |
ap-type ap-type |
Specifies the AP type. |
The value is a string of 1 to 31 characters. |
ap-mac ap-mac |
Specifies the MAC address of an AP. |
The value is in H-H-H format. An H is a hexadecimal number of 4 digits. |
ap-sn ap-sn |
Specifies the serial number (SN) of an AP. |
The value is a string of 1 to 31 characters, and can only contain letters and digits. |
Usage Guidelines
Usage Scenario
After an AP is successfully added to an AC, you can configure parameters for the AP offline. When the AP goes online, it uses the configured parameters.
You can run the undo ap command to delete an AP.
Precautions
To add an AP, you must enter the MAC address, SN, or MAC address+SN. In MAC address authentication mode, enter the MAC address of the AP. In SN authentication mode, enter the SN of the AP.
To enter the AP view, you only need to enter the AP ID.
ap-mac
Parameters
Parameter |
Description |
Value |
---|---|---|
ap-mac |
Specifies the MAC address of an AP. |
The value is in H-H-H format. An H is a hexadecimal number of 4 digits. |
type-id type-id |
Specifies the AP type ID. |
The value is an integer that ranges from 0 to 255. |
ap-type ap-type |
Specifies the AP type. |
The value is a string of 1 to 31 characters. |
ap-id ap-id |
Specifies the AP ID. |
The value is an integer that ranges from 0 to 1023. |
ap-sn ap-sn |
Specifies the sequence number (SN) of an AP. |
The value is a string of 1 to 31 characters, and can only contain letters and digits. |
Usage Guidelines
Usage Scenario
After an AP is successfully added to an AC, you can configure parameters for the AP offline. When the AP goes online, it uses the configured parameters.
Precautions
When adding an AP, you need to enter the MAC address of the AP. If the AP authentication mode is SN authentication, you also need to enter the SN of the AP.
To enter the AP view, you only need to enter the MAC address of the AP. If the entered MAC address does not exist, the system adds a new AP and displays the AP view.
The ap-mac ap-mac [ type-id type-id | ap-type ap-type ] [ ap-id ap-id ] [ ap-sn ap-sn ] and ap-id ap-id [ [ type-id type-id | ap-type ap-type ] { ap-mac ap-mac | ap-sn ap-sn | ap-mac ap-mac ap-sn ap-sn } ] commands have the same function. You can use either one according to the actual situation.
ap-mode
Parameters
Parameter | Description | Value |
---|---|---|
fat | Specifies the Fat mode. | - |
cloud | Specifies the cloud mode. | - |
Usage Guidelines
Usage Scenario
The working mode of an AP is configured on the AC and delivers to the AP. After a restart, the AP will switch the working mode accordingly.
Prerequisites
- The AP has gone online on the AC in Fit mode.
- Corresponding system files have been uploaded to the AC, FTP server, or SFTP server.
Follow-up Procedure
Run the commit command to commit the configuration.
Configuration Impact
After the working mode of the AP is switched to Fat or cloud, the AP will be out of control by the AC.
Only the AP1050DN-S, AP2050DN, AP2050DN-E, AP4050DN-E, AP4050DN-HD, AP4050DN, AP4050DN-S, AP4051DN, AP4151DN, AP8050DN, AP8050DN-S, AP8150DN, AP4051TN, AP6052DN, AP7052DN, AP7152DN, AP7052DE, AP8050TN-HD, AP8082DN, AP8182DN, AP6050DN, AP6150DN, AP7050DN-E, AP7050DE, AP8030DN, AP8130DN, AD9430DN-12, and AD9430DN-24 support this command. The AP4030TN and AD9431DN-24X can be switched only to the Fat mode.
Example
# Set the working mode of an AP to Fat.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] provision-ap [HUAWEI-wlan-provision-ap] ap-mode fat Warning: When the configuration is committed, the AP mode will be switched if supported and the AP will be out of control by the AC.Continue?[Y/N]: y
ap-name (AP provisioning view)
Parameters
Parameter | Description | Value |
---|---|---|
ap-new-name | Specifies an AP name. | The value is a string of 1 to 31 case-sensitive characters. It does not contain question marks (?) or spaces, and cannot start or end with double quotation marks (" "). |
Usage Guidelines
Usage Scenario
After the name of an AP is changed, and the change is delivered to the AP, the AP automatically restarts and goes online using the new name.
Precautions
The new AP name cannot be the same as the existing AP name.
If the AP name is not configured, the default name of an AP is the AP's MAC address after the AP goes online.
Follow-up Procedure
Run the commit command to deliver the configuration to the AP.
ap-name (AP view)
Parameters
Parameter | Description | Value |
---|---|---|
ap-name | Specifies an AP name. | The value is a string of 1 to 31 case-sensitive characters. It does not contain question marks (?) or spaces, and cannot start or end with double quotation marks (" "). |
Usage Guidelines
Usage Scenario
To facilitate AP maintenance, management, and differentiation, you can name the AP according to actual situations.
Precautions
The new AP name cannot be the same as the existing AP name.
If a new AP name is the same as an existing AP name, the new AP is restarted after its name is changed.
If the AP name is not configured, the default name of an AP is the AP's MAC address after the AP goes online.
ap-ping
Function
The ap-ping command uses a specified AP to ping a network device and displays the returned result.
Format
ap-ping { ap-name ap-name | ap-id ap-id } [ -c count | -s packetsize | -m time | -t timeout ] * host
Parameters
Parameter |
Description |
Value |
---|---|---|
ap-name ap-name |
Specifies the name of an AP used to ping other network devices. |
The AP name must already exist. |
ap-id ap-id |
Specifies the ID of an AP used to ping other network devices. |
The AP ID must already exist. |
-c count |
Specifies the number of ICMP Echo Request packets to be sent. |
The value is an integer that ranges from 1 to 10. The default value is 4. |
-s packetsize |
Specifies the length of an Echo Request packet excluding the IP header and ICMP header. |
The value is an integer that ranges from 20 to 8100, in bytes. The default value is 56 bytes. |
-m time |
Specifies the time to wait before sending the next ICMP Request packet. |
The value is an integer that ranges from 1 to 5000, in milliseconds. The default value is 2000 ms. |
-t timeout |
Specifies the timeout period for an ICMP Echo Response packet. |
The value is an integer that ranges from 0 to 10000, in milliseconds. The default value is 2000 ms. |
host |
Specifies the domain name or IP address of the destination host. |
The value is a string of 1 to 20 characters. |
Usage Guidelines
Usage Scenario
- You can run this command to check the connectivity between an AP and network device by pinging a network device from an AP.
- The prerequisite is that the AP is online and has been configured with an IP address.
Precautions
- This command may cost much time because the parameters such as waiting time affects the command running.
- Only one AP can perform the ping operation at a time.
Example
# Use the AP N1-2 to perform a ping operation.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] ap-ping ap-name N1-2 10.1.1.1 Warning: This operation maybe takes several minutes, continue?[Y/N]:y [HUAWEI-wlan-view] AP ping result Success count : 4 Failure count : 0 Average response time: 1 ms Minimum response time: 1 ms Maximum response time: 1 ms
ap-regroup
Parameters
Usage Guidelines
Usage Scenario
If the current AP group is not applicable to an AP or the AP is added to an incorrect group, you can run this command to delete the AP from the current AP group and add the AP to a new AP group.
Prerequisites
The AP group has been created using the ap-group command.
Configuration Impact
Changing the group of an AP will restart the AP and interrupt services. Exercise caution when you run the command.
Example
# Change the group that an AP joins to the AP group group1.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] ap-group name group1 [HUAWEI-wlan-ap-group-group1] quit [HUAWEI-wlan-view] ap-regroup ap-name 1047-80b1-56a0 new-group group1 Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration s of the radio, Whether to continue? [Y/N]:y
ap-rename
Parameters
Parameter |
Description |
Value |
---|---|---|
ap-name name |
Specifies the old name of an AP. |
The AP name must exist. |
ap-mac ap-mac-address |
Specifies the MAC address of an AP. |
The AP's MAC address must exist. |
ap-id ap-id |
Specifies the ID of an AP. |
The AP ID must exist. |
new-name ap-new-name |
Specifies the new name of an AP. |
The value is a string of 1 to 31 case-sensitive characters. It does not contain question marks (?) or spaces, and cannot start or end with double quotation marks (" "). |
ap-reset
Format
ap-reset { all | ap-name ap-name | ap-mac ap-mac | ap-id ap-id | ap-group ap-group | ap-type { type type-name | type-id type-id } }
Parameters
Usage Guidelines
Usage Scenario
After in-service upgrade of APs is complete, you can run the ap-reset command to reset the APs. After the command is run, the APs restart with the upgraded software version. You can also use the command to restart APs for other reasons.
Prerequisites
An AP exists on the AC.
ap-system-profile (WLAN view)
Usage Guidelines
Usage Scenario
To manage and maintain multiple APs in a centralized manner, add the APs in an AP group, configure parameters in an AP system profile, and apply the AP system profile to the AP group.
To manage and maintain an AP independently, configure parameters in an AP system profile and apply the AP system profile to the AP specific profile.
Follow-up Procedure
Run the ap-system-profile (AP group view and AP view) command to bind the AP system profile to an AP or AP group so that the AP system profile can take effect.
Precautions
The AP system profile default cannot be deleted.
The AP system profile referenced by an AP or AP group cannot be deleted. To delete the AP system profile, unbind it from the AP or AP group first.
ap-system-profile (AP group view and AP view)
Usage Guidelines
Usage Scenario
After you create an AP system profile using the ap-system-profile (WLAN view) command, bind it to an AP or AP group so that the AP system profile can take effect.
Precautions
After an AP system profile is bound to an AP or AP group, parameter settings in the AP system profile apply to all APs using the profile.
Example
# Create the AP system profile ap-system1 and bind it to AP group group1.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] ap-system-profile name ap-system1 [HUAWEI-wlan-ap-system-prof-ap-system1] quit [HUAWEI-wlan-view] ap-group name group1 [HUAWEI-wlan-ap-group-group1] ap-system-profile ap-system1
assignment
Parameters
Parameter | Description | Value |
---|---|---|
even | Sets the VLAN assignment algorithm to even. |
- |
hash | Sets the VLAN assignment algorithm to hash. |
- |
Usage Guidelines
Usage Scenario
When the VLAN assignment algorithm is set to even, service VLANs are assigned to STAs from the VLAN pool based on the order in which STAs go online. Address pools mapping the service VLANs evenly assign IP addresses to STAs. If a STA goes online many times, it obtains different IP addresses.
When the VLAN assignment algorithm is set to hash, VLANs are assigned to STAs from the VLAN pool based on the harsh result of their MAC addresses. As long as the VLANs in the VLAN pool do not change, the STAs obtain fixed service VLANs. A STA is preferentially assigned the same IP address when going online at different times.
Precautions
For the even VLAN assignment algorithm, the aging time of IP addresses is set large on the DHCP server. A STA is assigned different IP addresses when going one at different times. As a result, a STA may occupy many IP addresses, which wastes IP addresses. Additionally, frequent IP address changes may lower user experience.
Configuration Impact
The VLAN assignment algorithm configuration affects only newly connected STAs, but not those that have been connected to the network.
association-timeout
Usage Guidelines
Usage Scenario
The administrator can run the association-timeout command to set the association aging time for STAs. If the AP receives no data packet from a STA in a specified time, the STA goes offline after the association aging time expires.
Precautions
Changing the association aging time of a STA may interrupt the STA services.
auto-off service
Parameters
Parameter |
Description |
Value |
---|---|---|
start-time start-time |
Specifies the time when a VAP starts to be disabled. |
The time is in hh:mm:ss format. hh indicates the hour that is an integer ranging from 0 to 23. mm indicates the minute that is an integer ranging from 0 to 59. ss indicates the second that is an integer ranging from 0 to 59. |
end-time end-time |
Specifies the time when a VAP stops being disabled. |
The time is in hh:mm:ss format. hh indicates the hour that is an integer ranging from 0 to 23. mm indicates the minute that is an integer ranging from 0 to 59. ss indicates the second that is an integer ranging from 0 to 59. |
Usage Guidelines
Usage Scenario
When an enterprise does not want employees to access the internal WLAN from 01:00 to 05:00, the administrator can run the auto-off service command to enable the scheduled VAP auto-off function.
Precautions
After the service mode of a VAP is enabled using the undo service-mode disable command, you can run the auto-off service command to configure the scheduled VAP auto-off function. In the scheduled time, the VAP is disabled and cannot be enabled using the undo service-mode disable command. To enable the VAP, run the undo auto-off service command.
The scheduled VAP auto-off function takes effect in the scheduled time only after the undo service-mode disable command is executed. If the service mode of a VAP is disabled using the service-mode disable command, the VAP auto-off function does not take effect.
- The scheduled VAP auto-off function enabled in a VAP profile view takes effect only on the APs using the VAP profile, and the scheduled VAP auto-off function enabled in a radio profile view takes effect only on the APs using the radio profile.
beacon-2g-rate
Parameters
Parameter | Description | Value |
---|---|---|
beacon-2g-rate | Specifies the transmit rate of Beacon frames. | Enumerated type:
|
Usage Guidelines
Usage Scenario
In high-density wireless scenarios, too many Beacon frames occupy a large number of wireless resources. To reduce wireless resource occupation of Beacon frames and improve channel usage efficiency, you can run the beacon-2g-rate command to set a large transmit rate for 2.4 GHz Beacon frames.
Precautions
Modifying the transmit rate of Beacon frames will affect the association experience of STAs. Exercise caution when running the command.
The 802.11b protocol supports only 1 Mbit/s, 2 Mbit/s, 5.5 Mbit/s, and 11 Mbit/s. If you set the transmit rate of Beacon frames to a rate not supported by the 802.11b protocol, STAs supporting only 802.11b cannot connect to the wireless network.
If you run the radio-type dot11b command in the 2G radio profile view to set the radio type to dot11b, and the 2G radio profile is applied to an AP, beacon-2g-rate that takes effect on the 2 GHz radio of the AP is fixed as 1 Mbps, and beacon-2g-rate configured in the SSID profile view does not take effect on the AP.
beacon-5g-rate
Parameters
Parameter | Description | Value |
---|---|---|
beacon-5g-rate | Specifies the transmit rate of Beacon frames. | Enumerated type:
|
Usage Guidelines
Usage Scenario
In high-density wireless scenarios, too many Beacon frames occupy a large number of wireless resources. To reduce wireless resource occupation of Beacon frames and improve channel usage efficiency, you can run the beacon-5g-rate command to set a large transmit rate for 5 GHz Beacon frames.
Precautions
Modifying the transmit rate of Beacon frames will affect the association experience of STAs. Exercise caution when running the command.
beacon-interval
Usage Guidelines
An AP broadcasts Beacon frames at intervals to notify STAs of an existing 802.11 network. After receiving a Beacon frame, a STA can modify parameters used to connect to the 802.11 network.
- No more than 4 VAPs: about 100 TUs
- 5 to 8 VAPs: about 200 TUs
- 9 to 12 VAPs: about 300 TUs
- 13 to 16 VAPs: about 400 TUs
beamforming enable
Usage Guidelines
Usage Scenario
Beamforming is a signal processing technique that controls signal transmission direction, and transmission and reception of radio signals. The transmit end uses weight to transmit signals. The signals are transmitted to the destination as narrow beams. Beamforming increases the signal-to-noise ratio (SNR) for the destination device.
Precautions
If nodes on the WDS or Mesh network are fixed and distant from each other, enable Beamforming to increase WDS or Mesh link SNR. Mobile nodes may cause low link SNR in WDS or Mesh scenarios. To prevent this problem, disable Beamforming. Among Beamforming-capable APs, the AP2x10xN series, AP7x30xE series, and AP9330DN APs do not support WDS and Mesh.
The smart antenna function cannot take effect if MU-MIMO has been configured.
Table 11-1 describes the support of Huawei APs for beamforming.
AP Model | Explicit 802.11ac Beamforming | Explicit 802.11n Beamforming | Implicit Beamforming | |
---|---|---|---|---|
2.4 GHz | 5 GHz | |||
AP3010DN, AP5010SN, AP5010DN, AP6010SN, AP6010DN, AP6310SN, AP6510DN, AP6610DN, AP7110SN, AP7110DN, and AP2010DN | N | Y | Y | N |
AP5030DN, AP5130DN, AP2030DN, AP3030DN, AP4030DN, AP4130DN, AP9131DN, AP9132DN, AD9430DN-12 (with R240D), AD9430DN-24 (with R230D and R240D), AD9431DN-24X (with R230D and R240D), and AP4030TN | N | Y For AP4030TN, only the radio 0 supports this feature. |
N | N |
AP8030DN, AP8130DN, AP1050DN-S, and AP8130DN-W | N | N | N | N |
AD9430DN-12 (with R250D), AD9430DN-24 (with R250D, R450D and R250D-E), AD9431DN-24X (with R250D, R450D and R250D-E), AP2050DN, AP2050DN-E, AP4050DN-E, AP4050DN-HD, AP4051TN, AP4050DN, AP4050DN-S, AP4051DN, AP4151DN, AP8050DN, AP8150DN, AP8050DN-S, AP6052DN, AP7052DN, AP7152DN, AP7052DE, AP8050TN-HD, AP8082DN, AP8182DN, AP6050DN, AP6150DN, AP7050DN-E, and AP7050DE | Y | N | N | Y |
AP7030DE and AP9330DN | N | N | N | Y |
capwap control-link-priority
Format
capwap control-link-priority { local | remote } priority-value
undo capwap control-link-priority { local | remote }
Parameters
Parameter |
Description |
Value |
---|---|---|
local |
Indicates the priority of CAPWAP management packets from an AC to an AP. The priority of CAPWAP management packets determines the reliability of the link between an AC and an AP. |
- |
remote |
Indicates the priority of CAPWAP management packets from an AP to an AC. The priority of CAPWAP management packets determines the reliability of the link between an AP and an AC. |
- |
priority-value |
Specifies the priority of CAPWAP management packets. |
The value is an integer that ranges from 0 to 7. The value 0 indicates the lowest priority, and the value 7 indicates the highest priority. |
Usage Guidelines
Usage Scenario
You can use the capwap control-link-priority command to configure the DSCP priority of CAPWAP management packets. A higher priority indicates a more reliable link between the AC and AP.
The configuration of the priority of CAPWAP management packets from an AC to an AP takes effect immediately. After the priority of CAPWAP management packets from an AP to an AC is changed, if the AP is online, the priority is sent to the AP in the Echo packet. If the AP is not online, the priority is delivered to the AP in the Echo packet when the AP goes online. The new priority takes effect once the AP receives it.
Precautions
capwap dtls control-link encrypt
Function
The capwap dtls control-link encrypt command enables the function of encrypting the CAPWAP control tunnel using Datagram Transport Layer Security (DTLS).
The undo capwap dtls control-link encrypt command disables the function of encrypting the CAPWAP control tunnel using DTLS.
By default, the function of encrypting the CAPWAP control tunnel using DTLS is disabled.
Usage Guidelines
Usage Scenario
In the Discovery phase of the CAPWAP tunnel establishment between the AP and the AC, the AP obtains the AC IP address using the discovery mechanism. Then in the DTLS negotiation phase, the CAPWAP tunnel encrypts UDP packets using DTLS.
After this command is run, the CAPWAP control packets between the AP and AC are encrypted using DTLS, and the AP and AC use the PSK to perform DTLS negotiation. If the DTLS negotiation fails, the CAPWAP tunnel cannot be established.
Configuration Impact
After this command is run, the AP and AC reestablish a CAPWAP tunnel.
Precautions
When is enabled or APs are being upgraded, the status of DTLS encryption cannot be changed.
Example
# Enable the function of encrypting the CAPWAP control tunnel using DTLS.
<HUAWEI> system-view [HUAWEI] capwap dtls control-link encrypt Warning: The DTLS PSK is the default one. It is recommended to change it to ensure security. Change it now?[Y/N]:y New PSK:huawei@123 Configuring the new PSK, waiting......................done. Warning: This operation may cause devices connected through CAPWAP to reset or go offline. Continue? [Y/N]:y
capwap dtls psk
Function
The capwap dtls psk command configures a pre-shared key used for DTLS encryption.
The undo capwap dtls psk command restores the default pre-shared key used for DTLS encryption.
The default username and password are available in WLAN Default Usernames and Passwords (Enterprise Network or Carrier). If you have not obtained the access permission of the document, see Help on the website to find out how to obtain it.
Parameters
Usage Guidelines
Usage Scenario
Follow-up Procedure
Run the capwap dtls control-link encrypt command to enable CAPWAP control tunnel encapsulation using DTLS.
Precautions
After the capwap dtls psk command configuration is complete, the new pre-shared key will be automatically synchronized to the online APs that are working properly, but the previous pre-shared key still takes effect. The new pre-shared key takes effect after these APs go online again.
capwap dtls psk-mandatory-match enable
Function
The capwap dtls psk-mandatory-match enable command enables an AP to establish a Datacom Transport Layer Security (DTLS) session with an AC using the default pre-shared key.
The undo capwap dtls psk-mandatory-match enable command disables an AP to establish a Datacom Transport Layer Security (DTLS) session with an AC using the default pre-shared key.
By default, an AP is disabled to establish a DTLS session with an AC using the default pre-shared key.
Usage Guidelines
When a new AP is added to the WLAN or the passwords of the AP and AC are different (for example, the password of the AC is changed but the AP is not online), you can enable the AP to perform DTLS sessions with the AC using the default pre-shared key. After three DTLS session failures, the AP notifies the AC of DTLS sessions using the default pre-shared key. In this way, a CAPWAP tunnel is established between the AP and the AC.
capwap echo
Function
The capwap echo command sets the CAPWAP heartbeat detection interval and the number of CAPWAP heartbeat detections.
The undo capwap echo command restores the default CAPWAP heartbeat detection interval and the number of CAPWAP heartbeat detections.
By default, the CAPWAP heartbeat detection interval is 25s and the number of CAPWAP heartbeat detections is 6.
By default, If dual-link backup is enabled, the CAPWAP heartbeat detection interval is 25s and the number of CAPWAP heartbeat detections is 3.
Format
capwap echo { interval interval-value | times times-value } *
undo capwap echo { interval | times }
Parameters
Parameter |
Description |
Value |
---|---|---|
interval interval-value |
Specifies the CAPWAP heartbeat detection interval, the interval at which two detection packets are sent. |
The value is an integer ranging from 20 to 300, in seconds. |
times times-value |
Specifies the number of CAPWAP heartbeat detections. If no response is received after the specified number of times, the link is considered disconnected. |
The value is an integer ranging from 3 to 120. |
Usage Guidelines
As defined by CAPWAP, an AP and an AC send handshake packets periodically to maintain the data channel and management channel. If the AP does not receive packets from the AC within the heartbeat detection interval, it considers that the link between them is disconnected. Then the AP resets and releases its IP address, and reestablishes a link. If the AC does not receive packets from the AP within the heartbeat detection interval, it disconnects the link between the AC and the AP and reports an error message to the AP.
PrecautionsIf dual-link backup is enabled, the CAPWAP heartbeat detection interval is 25s and the number of CAPWAP heartbeat detections is 3. When the Wireless Distribution System (WDS) is required in dual-link backup configuration, the WDS link may be unstable and users may not access the network. You need to run this command to set the interval for CAPWAP heartbeat detection to 25 seconds and the number of CAPWAP heartbeat detections to 6.
After the CAPWAP heartbeat detection interval and the number of CAPWAP heartbeat detections are configured, the interval and the number of times for sending Echo packets are configured.
Radio traffic statistics packets are sent and received together with Echo packets.
If you set the CAPWAP heartbeat detection interval and the number of CAPWAP heartbeat detections smaller than the default values, the CAPWAP link reliability is degraded. Exercise caution when you set the values. The default values are recommended.
capwap echo-timeout trace logging
Function
The capwap echo-timeout trace logging command enables the Echo packet process trace and diagnosis log record functions upon AP Echo packet timeout.
The undo capwap echo-timeout trace logging command disables the Echo packet process trace and diagnosis log record functions upon AP Echo packet timeout.
By default, the Echo packet process trace and diagnosis log record functions are enabled upon AP Echo packet timeout.
capwap message-integrity psk
Function
The capwap message-integrity psk command configures a pre-shared key (PSK) for checking integrity of CAPWAP packets.
The undo capwap message-integrity psk command restores the default PSK for checking integrity of CAPWAP packets.
The default username and password are available in WLAN Default Usernames and Passwords (Enterprise Network or Carrier). If you have not obtained the access permission of the document, see Help on the website to find out how to obtain it.
Parameters
Parameter |
Description |
Value |
---|---|---|
psk-value |
Specifies the PSK for checking integrity of CAPWAP packets. |
The value can be a string of 48 or 68 characters in cipher text (for example, %^%#u(Oz:BL,QKYZw%-JWC*P8aGC,="C&M'OI*Gmt.V(%^%#) or a string of 6 to 32 characters in plain text (for example, a1234567). The key must contain at least two of the following: uppercase letters, lowercase letters, digits, and special characters except the question mark (?) and space. |
Usage Guidelines
Usage Scenario
CAPWAP packets are transmitted between the AC and APs. To prevent the packets from being forged or tampered with and prevent malformed packet attacks, you can configure integrity check of CAPWAP packets. When a PSK is used to check integrity of CAPWAP packets, you can run this command on the AC to configure a PSK.
Follow-up Procedure
Run the undo capwap message-integrity check disable command to enable integrity check of CAPWAP packets.
Configuration Impact
After this configuration is complete, all online APs on the AC go offline.
Example
# Set the PSK for checking integrity of CAPWAP packets to huawei@123.
<HUAWEI> system-view [HUAWEI] capwap message-integrity psk huawei@123 Warning: In a backup scenario, the PSK and status of CAPWAP message integrity check must be the same between the master and backup e nds. This operation may cause devices using CAPWAP connections to reset or go offline. Continue? [Y/N]:y
capwap message-integrity check disable
Usage Guidelines
Usage Scenario
CAPWAP packets are transmitted between the AC and APs. To prevent the packets from being forged or tampered with and prevent malformed packet attacks, you can configure integrity check of CAPWAP packets.
Configuration Impact
After this configuration is modified, all online APs on the AC go offline.
Example
# Enable integrity check of CAPWAP packets.
<HUAWEI> system-view [HUAWEI] capwap message-integrity check disable Warning: In a backup scenario, the PSK and status of CAPWAP message integrity check must be the same between the master and backup e nds. This operation may cause devices using CAPWAP connections to reset or go offline. Continue? [Y/N]:y
capwap sensitive-info psk
Function
The capwap sensitive-info psk command modifies the pre-shared key (PSK) used for sensitive information encryption.
The undo capwap sensitive-info psk command restores the default PSK used for sensitive information encryption.
The default username and password are available in WLAN Default Usernames and Passwords (Enterprise Network or Carrier). If you have not obtained the access permission of the document, see Help on the website to find out how to obtain it.
Parameters
Usage Guidelines
Usage Scenario
Sensitive information transmitted between the AC and APs is encrypted, such as the FTP user name/password, AP login user name/password, and service configuration-related keys. You can use the capwap sensitive-info psk command to modify the PSK used for sensitive information encryption.
To ensure STA security, you are advised to modify the PSK value.
After the configuration is complete, all online APs will go offline from the AC and go online again.
Precautions
In hot backup (HSB) and dual-link cold backup scenarios, the PSKs configured on the active and standby ACs must be the same. Otherwise, APs cannot set up CAPWAP tunnels with the standby AC.
The pre-shared key for encrypting sensitive information cannot be modified when an AP is being upgraded on the
capwap source interface
Function
The capwap source interface command configures the source interface that the AC uses to establish a CAPWAP tunnel with an access device.
The undo capwap source interface command restores the source interface that the AC uses to establish a CAPWAP tunnel with an access device to the default setting.
By default, no source interface is configured for the AC to establish a CAPWAP tunnel with the access device.
Format
capwap source interface { loopback loopback-number | vlanif vlan-id }
undo capwap source interface { loopback loopback-number | vlanif vlan-id }
Usage Guidelines
Usage Scenario
An AC uses the IP address of the specified interface as the source IP address. All access devices connected to the AC can learn this IP address and use the IP address to communicate with the AC.
Prerequisites
An IP address has been assigned to the specified loopback or VLANIF interface.
Precautions
A maximum of eight AC source interfaces can be configured.
If the SVF function is enabled, only one source interface can be configured.
Configure multiple source interfaces. When the source interfaces are added to different VPN instances, the IP addresses of these interfaces cannot be the same.
When multiple CAPWAP source interfaces are configured, ensure that the management VLAN for APs is within the VLAN range mapping the source interfaces. Otherwise, APs cannot go online.
Changing configuration of the CAPWAP source interface will clear statistics of the CAPWAP packets in CPU attack defense.
channel
Function
(AP group radio view) The channel command configures the working bandwidth and channel for all specified radios in an AP group.
(AP group radio view) The undo channel command restores the default working bandwidth and channel for all specified radios in an AP group.
(AP radio view) The channel command configures the working bandwidth and channel for an AP radio.
(AP radio view) The undo channel command cancels the configuration of the working bandwidth and channel on an AP radio. The working bandwidth and channel on the AP radio are then determined by those configured in the AP group radio view.
By default, the working bandwidth of a radio is 20 MHz, and no working channel is configured for a radio.
You can run the display ap config-info command to check the channel in use on a radio.
Format
channel { 20mhz | 40mhz-minus | 40mhz-plus | 80mhz | 160mhz } channel
channel 80+80mhz channel1 channel2
undo channel
Parameters
Parameter |
Description |
Value |
---|---|---|
20mhz |
Sets the working bandwidth of a radio to 20 MHz. |
- |
40mhz-minus |
Sets the working bandwidth of a radio to 40 MHz Minus. |
- |
40mhz-plus |
Sets the working bandwidth of a radio to 40 MHz Plus. |
- |
80mhz |
Sets the working bandwidth of a radio to 80 MHz. |
- |
160mhz |
Sets the working bandwidth of a radio to 160 MHz. |
- |
80+80mhz |
Sets the working bandwidth of a radio to 80+80 MHz. |
- |
channel/channel1/channel2 |
Specifies the working channel for a radio. The channel is selected based on the country code and radio mode. |
The parameter is an enumeration value. The value range is determined according to the country code and radio mode. |
Usage Guidelines
Usage Scenario
Different radios use different channels. Channels for radios also vary in different countries and regions. Select channels based on the actual situations.
Precautions
Enterprise technical support website: http://support.huawei.com/enterprise
Carrier technical support website: http://support.huawei.com
The channels you configure must be supported by the terminals; otherwise, the terminals cannot discover wireless signals.
If an AP detects radar signals on a channel, the channel cannot be configured as the radio channel of the AP in 30 minutes. However, the channel can be configured as the radio channel of other APs not detecting radar signals on it.
The configuration in the AP radio view has a higher priority than that in the AP group radio view.
If an AP works in dual-5G mode, the channels of the two 5G radios must be separated by at least one channel.
For example, a country supports 40 MHz 5G channels 36, 44, 52, and 60. When deploying 5G radio channels, if one radio is deployed on channel 36, it is recommended that the other radio be deployed on channel 52 or 60. Channel 44 is not recommended in this case.
The 80 MHz, 160 MHz, and 80+80 MHz working bandwidths are only supported in the 5G radio view.
Currently, only the 5 GHz radio of the AP6050DN, AP6150DN, AP7050DE, and 7050DN-E supports 160 MHz, and 80+80 MHz. Only the 5 GHz radio of the AD9430DN-24 (including the mapping RUs), AD9430DN-12 (including the mapping RUs), AD9431DN-24X (including the mapping RUs), AP7030DE, AP9330DN, AP2030DN, AP4051TN, AP6052DN, AP7052DN, AP7152DN, AP7052DE, AP8050TN-HD, AP8082DN, AP8182DN, AP3010DN-V2 (supporting 802.11ac after being upgraded from a version earlier than V200R008C10SPC300 to V200R008C10SPC300 or a later version), AP4030TN, AP4050DN-E, AP4050DN-HD, AP6050DN, AP6150DN, AP7050DN-E, AP7050DE, AP4050DN, AP4050DN-S, AP4051DN, AP4151DN, AP8050DN, AP8050DN-S, AP8150DN, AP1050DN-S, AP2050DN, AP2050DN-E, AP8130DN-W, AP5030DN, AP5130DN, AP8030DN, AP8130DN, AP4030DN, AP4130DN, AP9131DN, and AP9132DN supports 80 MHz.
channel-load-mode indoor
Usage Guidelines
In scenarios where indoor and outdoor boundaries are unclear, such as subway and train platforms, it is recommended that outdoor APs be deployed. When a large volume of data is transmitted, outdoor APs in outdoor channel mode have no sufficient channels to meet data transmission requirements. In this case, you can run the channel-load-mode indoor command to set the channel mode of the APs to indoor mode, so that data can be transmitted on more channels.
Precautions
The AP is automatically reset after this command is executed, so exercise caution when using this command.
These commands are supported by only the AP8030DN, AP8130DN, AP8050DN, AP8050DN-S, AP8150DN, AP8130DN-W, AP8050TN-HD, AP8082DN, and AP8182DN.
Example
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan] regulatory-domain-profile name default [HUAWEI-wlan-regulate-domain-default] channel-load-mode indoor Warning: Modifying the channel set mode may delete channels of AP radios in this domain and restart the AP. Continue?[Y/N]:y
channel-switch announcement disable
Function
The channel-switch announcement disable command disables an AP from sending an announcement when the channel is switched.
The undo channel-switch announcement disable command enables an AP to send an announcement when the channel is switched.
By default, an AP sends an announcement when the channel is switched.
Usage Guidelines
When the AP works on a dynamic frequency selection (DFS) channel, a radar detection is performed. The AP automatically switches to another channel because the DFS channel frequency may interfere with the radar frequency.
After the undo channel-switch announcement disable command is run, if the AP channel switches, the AP sends an Action frame to instruct STAs to switch channels after multiple Beacon intervals. The AP also switches the channel after the same intervals. The AP and STAs switch channels at the same time to prevent STA reassociations and ensure rapid service recovery.
channel-switch mode
Usage Guidelines
During channel switching, STA communication is interrupted. The administrator can stop an associated STA sending data on the current channel until channel switching is complete. Alternatively, data transmission from STAs can be continued on the current channel before channel switching is complete.
clear configuration this
Function
The clear configuration this command clears all configurations in the AP provisioning view.
Usage Guidelines
Usage Scenario
To configure new AP provisioning parameters, run the clear configuration this command in the AP provisioning view to clear existing configurations.
Configuration Impact
Configurations in the AP provisioning view cannot be restored after they are cleared. Therefore, exercise caution when running the clear configuration this command.
commit (AP provisioning view)
Format
commit { ap-name ap-name | ap-mac ap-mac-address | ap-id ap-id | ap-group ap-group-name | all }
Parameters
Parameter |
Description |
Value |
---|---|---|
ap-name ap-name |
Commits configuration to the AP with the specified AP name. |
The AP name must already exist. |
ap-mac ap-mac-address |
Commits configuration to the AP with the specified MAC address. |
The AP's MAC address must already exist. |
ap-id ap-id |
Commits configuration to the AP with the specified AP ID. |
The AP ID must already exist. |
ap-group ap-group-name |
Commits configuration to the AP in the specified AP group. |
The AP group must already exist. |
Usage Guidelines
Usage Scenario
You can configure AP provisioning parameters on the AC, such as the AP's management VLAN, static IP address, gateway, and AC list. After the configuration is complete, run the commit command, and the configuration will be delivered to the AP.
Prerequisites
APs have gone online on the AC.
Precautions
- After the configuration is committed, the AP receives the configuration and compares the configuration with its local configuration.
- If they are consistent, the AP does not process the received configuration.
- If they are different, the AP saves the committed configuration and automatically restarts, and the received configuration takes effect.
If the name or static IP address of an AP is specified in the AP provisioning view, the configuration is delivered only to the AP by specifying the AP name or MAC address, but cannot be delivered to APs in the specified AP group.
If you commit configurations to a large number of APs simultaneously, some of the APs may fail to receive the configurations. In this case, you are advised to commit the configurations again.
Example
# Commit configuration to the AP with the MAC address 0023-0024-0080.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] provision-ap [HUAWEI-wlan-provision-ap] commit ap-mac 0023-0024-0080 Warning: The incorrect configuration will cause the AP to go out of management. This operation will deliver parameter setting and ma y cause reboot of AP(s). Continue?[Y/N]:y
console disable
coordinate
Format
coordinate longitude { e | w } longitude-value latitude { s | n } latitude-value
undo coordinate
Parameters
Parameter | Description | Value |
---|---|---|
longitude e longitude-value | Specifies the east longitude value of an AP. |
The value supports two formats: degrees, minutes, and seconds (DMS) and decimal degrees (DD).
|
longitude w longitude-value | Specifies the west longitude value of an AP. |
The value supports two formats: DMS and DD.
|
latitude s latitude-value | Specifies the south longitude value of an AP. |
The value supports two formats: DMS and DD.
|
latitude n latitude-value | Specifies the north longitude value of an AP. |
The value supports two formats: DMS and DD.
|
copy-from
Usage Guidelines
Usage Scenario
- To create a profile that has the same configuration as an existing profile, enter the view of the profile to be created and run the copy-from command to copy data from the existing profile.
- To create a profile that has most configurations the same as an existing profile, enter the view of the profile to be created, run the copy-from command to copy data from the existing profile, and modify the different configurations.
Precautions
If the current profile is referenced by another profile, you cannot run the command to copy data to the current profile.
country-code
Parameters
Parameter |
Description |
Value |
---|---|---|
country-code |
Specifies a country code. |
The value is a string of characters in enumerated type. For specific values, see Table 11-2. |
Usage Guidelines
Country Code |
Country/Region |
---|---|
AE |
United Arab Emirates |
AM |
Armenia |
AR |
Argentina |
AT |
Austria |
AU |
Australia |
AZ |
Azerbaijan |
BE |
Belgium |
BG |
Bulgaria |
BH |
Bahrain |
BN |
Brunei Darussalam |
BO |
Bolivia |
BR |
Brazil |
BY |
Belarus |
BZ |
Belize |
CA |
Canada |
CH |
Switzerland |
CL |
Chile |
CN |
China (default) |
CO |
Colombia |
CR |
Costa Rica |
CY |
Cyprus |
CZ |
Czech Republic |
DE |
Germany |
DK |
Denmark |
DO |
Dominican Republic |
EC |
Ecuador |
EE |
Estonia |
EG |
Egypt |
ES |
Spain |
FI |
Finland |
FR |
France |
GB |
United Kingdom |
GE |
Georgia |
GR |
Greece |
GT |
Guatemala |
HK |
Hong Kong, Special Administrative Region of China |
HN |
Honduras |
HR |
Croatia |
HU |
Hungary |
ID |
Indonesia |
IE |
Ireland |
IL |
Israel |
IN |
India |
IQ |
Iraq |
IR |
Iran |
IS |
Iceland |
IT |
Italy |
JO |
Jordan |
JP |
Japan |
KP |
Democratic People's Republic of Korea |
KR |
Republic of Korea |
KW |
Kuwait |
KZ |
Kazakhstan |
LB |
Lebanon |
LI |
Liechtenstein |
LK |
Sri Lanka |
LT |
Lithuania |
LU |
Luxembourg |
LV |
Latvia |
MA |
Morocco |
MC |
Monaco |
MK |
Republic of North Macedonia |
MO |
Macao, Special Administrative Region of China |
MT |
Malta |
MX |
Mexico |
MY |
Malaysia |
NG |
Nigeria |
NL |
Netherlands |
NO |
Norway |
NZ |
New Zealand |
OM |
Oman |
PA |
Panama |
PE |
Peru |
PH |
Philippines |
PK |
Pakistan |
PL |
Poland |
PR |
Puerto Rico |
PT |
Portugal |
QA |
Qatar |
RO |
Romania |
RS |
SERBIA |
RU |
Russia |
SA |
Saudi Arabia |
SE |
Sweden |
SG |
Singapore |
SI |
Slovenia |
SK |
Slovakia |
SV |
El Salvador |
SY |
Syria |
TH |
Thailand |
TN |
Tunisia |
TR |
Turkey |
TT |
Trinidad & Tobago |
TW |
Taiwan, Province of China |
UA |
Ukraine |
US |
United States |
UY |
Uruguay |
UZ |
Uzbekistan |
VE |
Venezuela |
VN |
Vietnam |
YE |
Yemen |
ZA |
South Africa |
ZW |
Zimbabwe |
Usage Scenario
When an AC controls APs in different countries or regions, different country codes can be configured based on the regulatory domain profile to meet different radio requirements in different countries or regions, such as power requirements and channel requirements.
Configuration Impact
Modifying the country code in a regulatory domain profile will restart APs using the profile.
Example
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] regulatory-domain-profile name region1 [HUAWEI-wlan-regulate-domain-region1] country-code us Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continu e?[Y/N]:y
coverage distance
Function
(AP group radio view) The coverage distance command configures the radio coverage distance parameter for all specified radios in an AP group.
(AP group radio view) The undo coverage distance command restores the default radio coverage distance parameter for all specified radios in an AP group.
(AP radio view) The coverage distance command configures the radio coverage distance parameter for an AP radio.
(AP radio view) The undo coverage distance command cancels the configuration of the radio coverage distance parameter on an AP radio. The radio coverage distance parameter on the AP radio is then determined by that configured in the AP group radio view.
By default, the radio coverage distance parameter is 3 (unit: 100 m) for all radios.
Parameters
Parameter |
Description |
Value |
---|---|---|
distance | Specifies the radio coverage distance parameter. Each distance parameter corresponds to a group of slottime, acktimeout, and ctstimeout values. You can configure the distance parameter based on the AP distance. APs adjust the values of slottime, acktimeout, and ctstimeout values based on the distance parameter. |
The value is an integer that ranges from 1 to 400, in 100 meters. |
Usage Guidelines
Usage Scenario
In actual application scenarios, two APs may be connected over dozens of meters to dozens of kilometers. Due to different AP distances, the time to wait for ACK packets from the peer AP varies. A proper acktimeout value can improve data transmission efficiency between APs.
You can configure the radio coverage distance parameter based on distances between APs and the APs automatically adjust the values of slottime, acktimeout, and ctstimeout based on the configured distance parameter to improve data transmission efficiency.
Precautions
The configuration in the AP radio view has a higher priority than that in the AP group radio view.
cpu-usage threshold
Usage Guidelines
- When the CPU usage of an AP exceeds the alarm threshold, the AP sends an alarm message to the AC, and the AC displays the alarm information.
- When the CPU usage of an AP falls below the alarm threshold, the AP sends a clear alarm message to the AC, and the AC displays the clear alarm information.
crc-alarm enable
Function
The crc-alarm enable command enables the alarm function for CRC errors on the AP wired interface and specifies the alarm threshold and clear alarm threshold.
The undo crc-alarm enable command disables the alarm function for CRC errors on the AP wired interface and restores the alarm threshold and clear alarm threshold to the default values.
By default, the alarm function for CRC errors is disabled on the AP wired interface. The alarm threshold for CRC errors is 50 and the clear alarm threshold is 20.
Format
crc-alarm enable [ high-threshold high-threshold-value | low-threshold low-threshold-value ]*
undo crc-alarm enable
Parameters
Parameter |
Description |
Value |
---|---|---|
high-threshold high-threshold-value | Specifies the alarm threshold for CRC errors on the AP wired interface. | The value is an integer ranging from 1 to 100. The unit is 1/10000. The value of high-threshold-value must be larger than the value of low-threshold-value. |
low-threshold low-threshold-value | Specifies the clear alarm threshold for CRC errors on the AP wired interface. | The value is an integer ranging from 1 to 100. |
Usage Guidelines
When the AP detects that the number of CRC errors exceeds the configured upper alarm threshold in a specified period (the time period can be configured using the sample-time command, and is 30s by default), it sends an alarm message to the AC. To prevent the AP from frequently sending alarm messages or alarm clearance messages to the AC, you need to configure the lower threshold for clearing the alarm. The AP sends an alarm clearance message to the AC only when the AP detects that the number of CRC errors is lower than the configured lower threshold.
dai enable (AP wired port profile view)
Usage Guidelines
Usage Scenario
You can enable DAI using this command to prevent Man in The Middle (MITM) attacks and theft on authorized user information. When a device receives an ARP packet, it compares the source IP address, source MAC address, interface number, and VLAN ID of the ARP packet with DHCP snooping binding entries. If the ARP packet matches a binding entry, the device allows the packet to pass through. If the ARP packet does not match any binding entry, the device discards the packet.
Prerequisites
Terminal address learning has been enabled on the AP's wired interface using the learn-client-address ipv4 enable command.
Follow-up Procedure
Bind the AP wired port profile to an AP group or AP.
Precautions
This command takes effect only on ARP packets transmitted on an AP's wired interface.
The AP wired interfaces added to an Eth-trunk interface do not support this function.
deny-broadcast-probe enable
Usage Guidelines
Usage Scenario
In high-density wireless scenarios, too many Probe Response frames occupy a large number of wireless resources. To reduce wireless resource occupation of the frames and improve channel usage efficiency, you can run the deny-broadcast-probe enable command to configure an AP not to respond to broadcast Probe Request frames.
Precautions
Configuring an AP not to respond to broadcast Probe Request frames may reduce channel scan efficiency of some STAs.
description (AP wired port profile view)
dhcp option82 insert enable
Function
The dhcp option82 insert enable command enables the function of adding the Option 82 field to DHCP packets sent by STAs.
The undo dhcp option82 insert enable command disables the function of adding the Option 82 field to DHCP packets sent by STAs.
By default, the function of adding the Option 82 field to DHCP packets sent by STAs is disabled.
Usage Guidelines
Usage Scenario
After going online, a STA obtains the IP address through DHCP. When the DHCP Request packet from the STA reaches an AP, the AP adds the Option 82 field to the packet and sends the packet to the DHCP server. The Option 82 field contains the MAC address or SSID of the associated AP. Therefore, the DHCP server knows the AP on which the STA goes online.
Prerequisites
Before enabling the function of adding the Option 82 field to DHCP packets sent by STAs, run the undo learn-client-address disable command to enable the STA IP address learning. By default, STA IP address learning is enabled.
dhcp option82 format (vap profile view)
Function
The dhcp option82 format command configures the format of the Option 82 field in DHCP packets sent by STAs.
The undo dhcp option82 format command restores the default format of the Option 82 field in DHCP packets sent by STAs.
By default, the format of the Option 82 field inserted in DHCP packets sent by STAs is ap-mac.
Format
dhcp option82 { circuit-id | remote-id } format { ap-mac [ mac-format { normal | compact | hex } ] | ap-mac-ssid [ mac-format { normal | compact } ] | user-defined text | ap-name | ap-name-ssid }
undo dhcp option82 { circuit-id | remote-id } format
Parameters
Parameter | Description | Value |
---|---|---|
circuit-id | Specifies the circuit-ID (CID) in the Option 82 field. | - |
remote-id | Specifies the remote-ID (RID) in the Option 82 field. | - |
ap-mac | Indicates that Option 82 contains the AP's MAC address. | - |
ap-mac-ssid | Indicates that Option 82 contains the AP's MAC address and SSID. | - |
mac-format | Specifies the format of the AP's MAC address in Option 82. | - |
normal | Sets the MAC address format to xx-xx-xx-xx-xx-xx. | - |
compact | Sets the MAC address format to xxxx-xxxx-xxxx. | - |
hex | Sets the MAC address format to XXXXXXXXXXXX in hexadecimal notation. | - |
user-defined text | Sets the format of Option 82 to the user-defined format. | The value is a string of 1 to 255 characters. |
ap-name | Specifies the AP name in the Option 82 field. | - |
ap-name-ssid | Specifies the AP name and SSID in the Option 82 field. | - |
Usage Guidelines
After an AP is enabled to insert the Option 82 field in DHCP packets sent from a STA, you can run the dhcp option82 format command to configure the format of the Option 82 field.
- ap-mac: MAC address of the AP. After DHCP packets from a STA reach an AP, the AP inserts its MAC address into the Option 82 field of the DHCP packets.
- ap-mac-ssid: MAC address and SSID of the AP. After DHCP packets from a STA reach an AP, the AP inserts its MAC address and SSID associated with the STA into the Option 82 field of the DHCP packets.
- ap-name: AP name. After DHCP packets from a STA reach an AP, the AP inserts its name into the Option 82 field of the DHCP packets.
- ap-name-ssid: AP name and SSID. After DHCP packets from a STA reach an AP, the AP inserts its name and associated SSID into the Option 82 field of the DHCP packets.
If mac-format is not specified in the dhcp option82 { circuit-id | remote-id } format { ap-mac | ap-mac-ssid } command, the AP MAC address in the Option 82 field is XXXXXXXXXXXX in ASCII format.
The total length of the circuit-id and remote-id options in the Option 82 field cannot exceed 255 bytes. Otherwise, some Option 82 information may be lost. Note that a Chinese character may occupy 2 or 3 bytes.
display ac global configuration
Example
# Display AC global configuration.
<HUAWEI> display ac global configuration
--------------------------------------------------------------------------------
AC sysnetid : AC
--------------------------------------------------------------------------------
Item | Description |
---|---|
AC sysnetid |
NE name of an AC. To configure the NE name for an AC, run the ac sysnetid command. |
display ap
Format
display ap { all | ap-group ap-group }
display ap [ ap-group ap-group ] by-ssid ssid
display ap by-state state [ ap-group ap-group ]
Parameters
Parameter |
Description |
Value |
---|---|---|
all |
Displays information about all APs. |
- |
ap-group ap-group |
Specifies the group to which an AP belongs. |
The AP group must exist. |
by-ssid ssid | Specifies an SSID. |
The value must be an existing SSID. |
by-state state | Specifies the status of the AP. |
Enumerated type.
|
Example
<HUAWEI> display ap all Total AP information: nor : normal [2] Extra information: P : insufficient power supply ---------------------------------------------------------------------------------------------------- ID MAC Name Group IP Type State STA Uptime ExtraInfo ---------------------------------------------------------------------------------------------------- 0 dcd2-fcf6-76a0 area_1 ap-group1 192.168.120.254 AP6010DN-AGN nor 0 4H:49M:11S P 1 60de-4474-9640 area_2 ap-group1 192.168.120.253 AP5010DN-AGN nor 0 6H:3M:40S - ---------------------------------------------------------------------------------------------------- Total: 2
<HUAWEI> display ap by-ssid hw-wlan Total AP information: nor : normal [2] Extra information: P : insufficient power supply ---------------------------------------------------------------------------------------------------- ID MAC Name Group IP Type State STA Uptime ExtraInfo ---------------------------------------------------------------------------------------------------- 0 dcd2-fcf6-76a0 area_1 ap-group1 192.168.120.254 AP6010DN-AGN nor 0 4H:49M:11S P 1 60de-4474-9640 area_2 ap-group1 192.168.120.253 AP5010DN-AGN nor 0 6H:3M:40S - ---------------------------------------------------------------------------------------------------- Total: 2
<HUAWEI> display ap by-state normal Total AP information: nor : normal [2] Extra information: P : insufficient power supply -------------------------------------------------------------------------------------------------------------- ID MAC Name Group IP Type State STA Uptime ExtraInfo -------------------------------------------------------------------------------------------------------------- 0 dcd2-fcf6-76a0 area_1 ap-group1 192.168.120.254 AP6010DN-AGN normal 0 4H:50M:55S P 1 60de-4474-9640 area_2 ap-group1 192.168.120.253 AP5010DN-AGN normal 0 6H:5M:24S - -------------------------------------------------------------------------------------------------------------- Total: 2
Item | Description |
---|---|
ID | AP ID. |
MAC | MAC address of an AP. |
Name | AP name. |
Group | AP group. |
IP | AP IP address. |
Type | AP type. |
State | AP state. For details, see Table 11-5. |
STA | Number of STAs connected to an AP. |
Uptime | Online duration of an AP. |
ExtraInfo | Extra information. The value P indicates that the power supply to an AP is insufficient. |
AP State |
Description |
Possible Cause |
Handling Suggestion |
---|---|---|---|
commit-failed |
WLAN service configurations fail to be delivered to an AP after the AP goes online on an AC. |
After the AP goes online on the AC, WLAN service configurations are performed for the AP. If the link between the AP and AC is disconnected or the peer end has no response, the AP enters the commit-failed state. |
Check the network connection. |
committing |
WLAN service configurations are being delivered to an AP after the AP goes online on an AC. |
After the AP goes online on the AC, WLAN service configurations are being delivered to the AP. |
This is a normal state, and no action is required. |
config |
WLAN service configurations are being delivered to an AP when the AP is going online on an AC. |
After the AP establishes a link with the AC, WLAN service configurations are delivered to the AP. During this process, the AP is in config state. |
This is a normal state, and no action is required. |
config-failed |
WLAN service configurations fail to be delivered to an AP when the AP is going online on an AC. |
After the AP establishes a link with the AC, WLAN service configurations are delivered to the AP. If the configuration delivery fails due to various reasons (such as link disconnection), the AP enters the config-failed state. |
Check the network connection. |
download |
An AP is in upgrade state. |
When the AP is performing an upgrade, it enters the download state. |
When the AP upgrade is complete, check the AP state. |
fault |
An AP fails to go online. |
The AP fails to go online, which is usually caused by the following:
|
Handle the AP online failure. For details, see AP Online Failure in the Troubleshooting Insights. |
idle |
It is the initialization state of an AP before it establishes a link with the AC for the first time. |
The AP has not established a CAPWAP link with the AC, the MAC address and SN of the AP that is added offline are different from the actual ones, or license resources are insufficient. |
Perform the following operations. Check whether the AP is connected to the network. If the AP connection is normal, go to next step. Check the MAC address and SN of the AP that is added offline are different from the actual MAC address and SN of the AP. If not, perform the following operations:
If the fault persists, expand the license capacity. Note that RUs managed by the AC do not occupy license resources of the AC. |
name-conflicted |
The name of an AP conflicts with that of an existing AP. |
The name of an AP conflicts with the name of another AP that has been online on the same AC. |
Run the ap-rename ap-id ap-id new-name ap-new-name command to change the AP name. |
normal |
An AP is working properly. |
An AP successfully goes online on an AC. |
This is a normal state, and no action is required. |
standby |
The AP is in normal state on the standby AC. |
In the HSB, dual-link cold backup, or N+1 backup scenario, if the link between the active and standby ACs is established properly, the AP is in standby state on the standby AC and in normal state on the active AC. |
This is a normal state, and no action is required. |
ver-mismatch |
The version of an AP does not match that of an AC on which the AP is to go online. |
The versions of the AP and the AC mismatch. |
Log in to Huawei technical support website and download the release notes. Based on the version mapping, upgrade the AP or AC to the matching version.
|
countryCode-mismatch |
The country code of an AP does not match that of the AC on which the AP is about to go online. |
The current version of the AP does not support the country code configured on the AC. |
The AP does not support the country code. Upgrade the AP or change the country code configured on the AC. |
unauthed |
The AP is not authenticated. |
The AP fails to be authenticated. |
Run the ap-confirm command to confirm unauthenticated APs and allow them to go online. |
display ap around-ssid-list
Usage Guidelines
You can run this command to view SSIDs of neighbors of a specified AP. Neighbors of an AP include authorized and unauthorized neighbors. Authorized neighbors are other APs managed by the same AC. APs that are managed by other ACs are unauthorized neighbors.
Example
<HUAWEI> display ap around-ssid-list ap-name huawei
In control AP(2.4G):
---------------------------------------------------
SSID
---------------------------------------------------
test1
---------------------------------------------------
Total: 1
Uncontrol AP(2.4G):
---------------------------------------------------
SSID
---------------------------------------------------
test2
---------------------------------------------------
Total: 1
In control AP(5G):
---------------------------------------------------
SSID
---------------------------------------------------
test3
---------------------------------------------------
Total: 1
Uncontrol AP(5G):
---------------------------------------------------
SSID
---------------------------------------------------
test4
---------------------------------------------------
Total: 1
display ap asyn-message err-info
Parameters
Parameter |
Description |
Value |
---|---|---|
all |
Displays records about restart failures of all APs. |
- |
ap-name ap-name |
Displays records about restart failures of the AP with a specified name. |
The AP name must exist. |
ap-id ap-id |
Displays records about restart failures of the AP with a specified ID. |
The AP ID must exist. |
Usage Guidelines
When you use commands on the AC to restart an AP manually, during an upgrade, or to restore its factory settings, the restart message delivered by the AC may get lost due to transmission failures. Therefore, APs are not restarted. If an AP does not receive the restart message, the AP is still connected to the AC, which makes the AC incorrectly consider that the AP is restarted successfully. This command displays records about AP restart failures, helping you check whether the AP is restarted successfully. If the AP restart fails, restart the AP.
Example
# Display records about restart failures of all APs.
<HUAWEI> display ap asyn-message err-info all
------------------------------------------------------------------------------
AP Name MAC Time Reason
------------------------------------------------------------------------------
hw1 dcd2-fcf4-6600 2015-1-19 14:41:59 update
hw2 dcd2-fcf4-8800 2015-1-19 14:45:56 clear config
------------------------------------------------------------------------------
Total: 2
Item |
Description |
---|---|
AP Name |
Name of an AP. |
MAC |
MAC address of an AP. |
Time |
Time when AP restart fails. |
Reason |
Type of AP restart failures.
|
display ap blacklist
Usage Guidelines
This command displays APs in the blacklist. These APs are not allowed to go online on the AC. If an AP is online on the AC but is in the blacklist, the AP is forced to log out.
Example
# Display the AP blacklist.
<HUAWEI> display ap blacklist
--------------------------------------------------------------------------------
ID MAC
--------------------------------------------------------------------------------
0 0001-0002-0001
--------------------------------------------------------------------------------
Total: 1
Item |
Description |
---|---|
ID |
ID of the MAC address in the AP blacklist. The ID is generated automatically when the MAC address is specified. |
MAC |
MAC addresses of the APs that are not allowed to connect to the AC. To add MAC addresses to the AP blacklist, run the ap blacklist command. |
display ap config-info
Usage Guidelines
You can run the display ap config-info command to view AP configuration information, including the basic configuration, radio configuration, VAP configuration, and profile configuration.
Example
# Display the configuration of AP huawei.
<HUAWEI> display ap config-info ap-name huawei -------------------------------------------------------------------------------- AP MAC : dcd2-fcf6-76a0 AP SN : 210235419610D2000097 AP type : AP6010DN-AGN AP name : huawei AP group : default Country code : CN -------------------------------------------------------------------------------- Radio 0 configurations: Radio enable : yes Work mode : normal WDS mode : - Mesh mode : - Radio band : 2.4G Radio type : bgn Config channel/bandwidth : -/20M Actual channel/bandwidth : 1/20M Config EIRP : 127 Actual EIRP : 27 Maximum EIRP : 27 VAP configurations: WLAN ID 1: SSID : HUAWEI-WLAN Forward mode : direct-forward Authen mode : Open Encrypt mode : - Service vlan : 100 -------------------------------------------------------------------------------- Radio 1 configurations: Radio enable : yes Work mode : normal WDS mode : - Mesh mode : - Radio band : 5G Radio type : an Config channel/bandwidth : -/20M Actual channel/bandwidth : 157/20M Config EIRP : 127 Actual EIRP : 28 Maximum EIRP : 28 VAP configurations: WLAN ID 1: SSID : HUAWEI-WLAN Forward mode : direct-forward Authen mode : Open Encrypt mode : - Service vlan : pool a -------------------------------------------------------------------------------- -------------------------------------------------------------------------------- AP system profile : default Regulatory domain profile : default WIDS profile : default BLE profile : UUID : AP wired port profile Interface FE0 : default Interface FE1 : default Interface FE2 : default Interface FE3 : default Interface GE0 : default Interface GE1 : default Interface GE2 : default Interface GE3 : default Interface GE4 : default Interface GE5 : default Interface GE6 : default Interface GE7 : default Interface GE8 : default Interface GE9 : default Interface GE10 : default Interface GE11 : default Interface GE12 : default Interface GE13 : default Interface GE14 : default Interface GE15 : default Interface GE16 : default Interface GE17 : default Interface GE18 : default Interface GE19 : default Interface GE20 : default Interface GE21 : default Interface GE22 : default Interface GE23 : default Interface GE24 : default Interface GE25 : default Interface GE26 : default Interface GE27 : default Interface MultiGE0 : default Interface XGE0 : default Interface XGE1 : default Interface XGE2 : default Interface XGE3 : default Interface Eth-trunk0 : default Radio 0 Radio 2.4G profile : default Radio 5G profile : VAP profile WLAN 1 : default(VLAN 100) Mesh profile : WDS profile : Mesh whitelist profile : WDS whitelist profile : Location profile : Radio switch : enable Channel : - Channel bandwidth : 20mhz EIRP(dBm) : 127 Antenna gain(dB) : - Coverage distance(100 m) : 3 Work mode : normal Radio frequency : 2.4G Spectrum analysis : disable WIDS device detect : disable WIDS attack detect : - WIDS contain switch : disable Radio 1 Radio 2.4G profile : Radio 5G profile : default VAP profile WLAN 1 : default(VLAN pool a) Mesh profile : WDS profile : Mesh whitelist profile : WDS whitelist profile : Location profile : Radio switch : enable Channel : - Channel bandwidth : 20mhz EIRP(dBm) : 127 Antenna gain(dB) : - Coverage distance(100 m) : 3 Work mode : normal Radio frequency : 5G Spectrum analysis : disable WIDS device detect : disable WIDS attack detect : - WIDS contain switch : disable Card 1: Serial profile : preset-enjoyor-toeap Wired port profile : Iot profile : UDP Port : - TCP Port : - Card 2 Serial profile : preset-enjoyor-toeap Wired port profile : Iot profile : UDP Port : - TCP Port : - Card 3 Serial profile : preset-enjoyor-toeap Wired port profile : Iot profile : UDP Port : TCP Port : - Card usb Serial profile : Iot profile : UDP Port : - TCP Port : - ---------------------------------------------------------------------------------
Item |
Description |
---|---|
AP MAC |
MAC address of an AP. |
AP SN |
SN of an AP. |
AP type |
AP type. |
AP name |
AP name. To configure the parameter, run the ap-name (AP view) or ap-rename command. |
AP group |
AP group. To configure the parameter, run the ap-group (AP view) or ap-regroup command. |
Country code |
Country code. To configure the parameter, run the country-code command. |
Radio 0 configurations/Radio 1 configurations |
Radio configuration. |
Radio enable |
Radio status. To configure the parameter, run the radio disable command. |
Work mode |
Working mode of a radio. To configure the parameter, run the work-mode command. |
WDS mode |
WDS mode. To configure the parameter, run the wds-mode command. |
Mesh mode |
Mesh role of a radio. To configure the parameter, run the mesh-role command. |
Radio band |
Frequency band of a radio. To configure the parameter, run the frequency command. |
Radio type |
Protocol type of a radio. |
Config channel/bandwidth |
Configured AP channel and bandwidth. To configure the parameter, run the channel command. |
Actual channel/bandwidth |
Actual AP channel and bandwidth. |
Config EIRP |
Transmit power of a radio configured in the radio profile. To configure the parameter, run the eirp command. |
Actual EIRP |
Actual transmit power of a radio. |
Maximum EIRP |
Maximum transmit power of a radio. |
VAP configurations |
VAP configuration. VAP configuration is displayed only after a VAP profile is referenced by the AP. |
WLAN ID 1 |
WLAN ID of a VAP. To configure the parameter, run the vap-profile command. |
SSID |
SSID name. To configure the parameter, run the ssid command. |
Forward mode |
Forwarding mode. To configure the parameter, run the forward-mode command. |
Authen mode |
Authentication mode. |
Encrypt mode |
Encryption mode. |
Service vlan |
Effective service VLAN. |
AP system profile |
Name of the referenced AP system profile. To configure the parameter, run the ap-system-profile (AP group view and AP view) command. |
Regulatory domain profile |
Name of the referenced regulatory domain profile. To configure the parameter, run the regulatory-domain-profile command. |
WIDS profile |
Name of the referenced WIDS profile. To configure the parameter, run the wids-profile (AP group view and AP view) command. |
BLE profile |
Name of the referenced BLE profile. |
UUID | UUID of a BLE broadcast frame sent by the AP's built-in Bluetooth module. To configure the parameter, run the broadcasting-content (AP group view and AP view) command. |
AP wired port profile |
Name of the referenced AP wired port profile. To configure the parameter, run the wired-port-profile (AP group view and view) command. |
Interface interface-name |
Interface name and number. |
Radio 0/Radio 1 |
Radio frequency. |
Radio 2.4G profile |
Name of the referenced 2G radio profile. To configure the parameter, run the radio-2g-profile command. |
Radio 5G profile |
Name of the referenced 5G radio profile. To configure the parameter, run the radio-5g-profile command. |
VAP profile |
Name of the referenced VAP profile. The displayed format is "VAP ID:VAP profile name (service VLAN defined when binding to the VAP profile, single VLAN, or VLAN pool)." To configure the parameter, run the vap-profile command. |
Mesh profile |
Name of the referenced Mesh profile. To configure the parameter, run the mesh-profile radio command. |
WDS profile |
Name of the referenced WDS profile. To configure the parameter, run the wds-profile radio command. |
Mesh whitelist profile | Mesh whitelist profile referenced by an AP group. To configure the parameter, run the mesh-whitelist-profile (AP group radio view or AP radio view) command. |
WDS whitelist profile | WDS whitelist profile referenced by an AP group. To configure the parameter, run the wds-whitelist-profile (AP group radio view or AP radio view) command. |
Location profile |
Name of the referenced location profile. To configure the parameter, run the location-profile command. |
Radio switch |
Radio status. To configure the parameter, run the radio disable command. |
Channel |
Working channel of a radio. To configure the parameter, run the channel command. |
Channel bandwidth |
Working bandwidth of a radio. To configure the parameter, run the channel command. |
EIRP(dBm) |
Transmit power of a radio, in dBm. To configure the parameter, run the eirp command. |
Antenna gain(dB) |
Antenna gain of a radio, in dB. To configure the parameter, run the antenna-gain command. |
Coverage distance(100 m) |
Radio coverage distance parameter, in 100 m. To configure the parameter, run the coverage distance command. |
Work mode |
Working mode of an AP. To configure the parameter, run the work-mode command. |
Radio frequency |
Working frequency band of a radio. To configure the parameter, run the frequency command. |
Spectrum analysis |
Whether spectrum analysis is enabled. To configure the parameter, run the spectrum-analysis enable command. |
WIDS device detect |
Whether wireless device detection is enabled. To configure the parameter, run the wids device detect enable command. |
WIDS attack detect |
Whether attack detection is enabled. To configure the parameter, run the wids attack detect enable command. |
WIDS contain switch |
Whether rogue device containment is enabled. To configure the parameter, run the wids contain enable command. |
Card 1/Card 2/Card 3/Card usb | IoT card. |
Serial profile | Bound serial profile. To configure the parameter, run the serial-profile (IoT card interface view) command. |
Iot profile | Bound IoT profile. To configure the parameter, run the iot-profile (IoT card interface view) command. |
UDP Port | UDP port. |
Wired port profile | Bound AP wired port profile. To configure the parameter, run the wired-port-profile (IoT card interface view) command. |
TCP Port | TCP port. |
display ap configurable channel
Function
The display ap configurable channel command displays the configurable channels supported by a specified AP.
Parameters
Parameter |
Description |
Value |
---|---|---|
ap-name ap-name | Displays configurable channels supported by the AP with the specified name. |
The AP name must exist. |
ap-id ap-id | Displays configurable channels supported by the AP with the specified ID. |
The AP ID must exist. |
radio-id radio-id | Displays configurable channels supported by the specified radio. |
The radio ID must exist. |
Usage Guidelines
Different countries or regions use different wireless channels and powers. Setting country and area codes can specify channels that can be used on WLANs of different countries. The display ap configurable channel command displays the configurable channels supported by a specified AP.
Example
# Display configurable channels supported by AP huawei.
<HUAWEI> display ap configurable channel ap-name huawei
2.4G 20M : 1,2,3,4,5,6,7,8,9,10,11,12,13.
2.4G 40M+: 1,2,3,4,5,6,7,8,9.
2.4G 40M-: 5,6,7,8,9,10,11,12,13.
5G 20M : 36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,132,136,140,149,153,157,161,165.
5G 40M+: 36,44,52,60,100,108,116,124,132,149,157.
5G 40M-: 40,48,56,64,104,112,120,128,136,153,161.
5G 80M : 36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128,149,153,157,161.
5G 160M : 36,40,44,48,52,56,60,64,100,104,108,112,116,120,124,128.
5G 80+80M: 36+106, 36+122, 36+155, 40+106, 40+122, 40+155, 44+106, 44+122,
44+155, 48+106, 48+122, 48+155, 52+106, 52+122, 52+155, 56+106,
56+122, 56+155, 60+106, 60+122, 60+155, 64+106, 64+122, 64+155,
100+42, 100+58, 100+155, 104+42, 104+58, 104+155, 108+42, 108+58,
108+155, 112+42, 112+58, 112+155, 116+42, 116+58, 116+155, 120+42,
120+58, 120+155, 124+42, 124+58, 124+155, 128+42, 128+58, 128+155,
149+42, 149+58, 149+106, 149+122, 153+42, 153+58, 153+106, 153+122,
157+42, 157+58, 157+106, 157+122, 161+42, 161+58, 161+106, 161+122.
Item |
Description |
---|---|
2.4G 20M |
Configurable 20 MHz channels supported by the AP on the 2.4 GHz frequency band. |
2.4G 40M+ |
Configurable 40 MHz Plus channels supported by the AP on the 2.4 GHz frequency band. |
2.4G 40M- |
Configurable 40 MHz Minus channels supported by the AP on the 2.4 GHz frequency band. |
5G 20M |
Configurable 20 MHz channels supported by the AP on the 5 GHz frequency band. |
5G 40M+ |
Configurable 40 MHz Plus channels supported by the AP on the 5 GHz frequency band. |
5G 40M- |
Configurable 40 MHz Minus channels supported by the AP on the 5 GHz frequency band. |
5G 80M |
Configurable 80 MHz channels supported by the AP on the 5 GHz frequency band. |
5G 160M |
Configurable 160 MHz channels supported by the AP on the 5 GHz frequency band. |
5G 80+80M |
Configurable 80+80 MHz channels supported by the AP on the 5 GHz frequency band. |
display ap coordinate
Function
The display ap coordinate command displays information about longitudes and latitudes of APs.
Example
# Display information about longitudes and latitudes of all APs.
<HUAWEI> display ap coordinate all
---------------------------------------------------------------------------------------------------------
ID Name Group Longitude Latitude
---------------------------------------------------------------------------------------------------------
0 00d5-ada8-1c00 default 30.1111111°E 40.2222222°N
1 244c-075f-ec20 default 110°59′59"W 77°25′53″N
2 644c-075f-ec20 default - -
--------------------------------------------------------------------------------------------------------
Total: 3
Item |
Description |
---|---|
ID |
AP ID. |
Name |
AP name. |
Group |
AP group. |
Longitude |
Longitude of an AP. Its display varies depending on the format:
|
Latitude |
Latitude of an AP.
|
display ap elabel
Parameters
Parameter |
Description |
Value |
---|---|---|
ap-name ap-name |
Displays electronic label information about the AP with the specified name. |
The AP name must exist. |
ap-id ap-id |
Displays electronic label information about the AP with the specified ID. |
The AP ID must exist. |
all |
Displays electronic label information of all APs. |
- |
Usage Guidelines
You can run this command to view electronic label information about an AP. An electronic label is also called permanent configuration data or information and is written in the storage device during AP testing or commissioning. An electronic label includes the AP name, serial number, manufacture date and manufacturer information.
Example
# Display electronic label information about AP huawei.
<HUAWEI> display ap elabel ap-name huawei
/$[ArchivesInfo Version]
/$ArchivesInfoVersion=3.0
[Board Properties]
BoardType=AP6310SN-GN-CN
BarCode=210235449210CB000011
Item=02354492
Description=AP6310SN-GN Bundle(11n,Distributed AP Indoor,Single Frequency,AC/DC
adapter(CN))
Manufactured=2012-11-27
VendorName=Huawei
IssueNumber=00
CLEICode=
BOM=
Item | Description |
---|---|
ArchivesInfo Version | Electronic label version. |
BoardType | AP type. |
BarCode | Bar code of an AP. |
Item | BOM code of an AP. |
Description | English description of an AP. |
Manufactured | Production date of an AP. |
VendorName | Vendor name. |
IssueNumber | Issue number of an AP. |
CLEICode | CLEI code of an AP. |
BOM | Sales BOM code of an AP. |
# Display electronic label information of all APs.
<HUAWEI> display ap elabel all
Info: This operation may take a few seconds. Please wait for a moment.done.
Total AP elabel information:
------------------------------------------------------------------------------
ID MAC Name Type SN Item
------------------------------------------------------------------------------
1 dcd2-fc04-b500 L1_001 AP7110DN-AGN 210235555310CC000094 -
2 dcd2-fc9d-0bb0 1 AP7110SN-GN 210235568010D1000032 -
------------------------------------------------------------------------------
Total: 2
display ap global configuration
Example
# Display AP global configuration.
<HUAWEI> display ap global configuration
--------------------------------------------------------------------------------
AP auth-mode : MAC-auth
AP LLDP switch : disable
AP username/password : -/******
AP data collection : disable
AP data collection interval(minute): 5
--------------------------------------------------------------------------------
Item | Description |
---|---|
AP auth-mode |
AP authentication mode. To configure the parameter, run the ap auth-mode command. |
AP LLDP switch |
Whether LLDP is enabled on an AP. To configure the parameter, run the ap lldp enable command. |
AP username/password |
User name and password for AP login. To configure the parameter, run the ap username command. |
AP data collection |
Whether data buffering is enabled on an AP. To configure the parameter, run the ap data-collection enable command. |
AP data collection interval(minute) |
AP data buffering duration. To configure the parameter, run the ap data-collection interval command. |
display ap lldp neighbor
Format
display ap lldp neighbor { { ap-name ap-name | ap-id ap-id } [ interface interface-type interface-number ] | brief }
Parameters
Parameter |
Description |
Value |
---|---|---|
ap-name ap-name |
Displays LLDP neighbor information of the AP with a specified name. |
The AP name must exist. |
ap-id ap-id |
Displays LLDP neighbor information of the AP with a specified ID. |
The AP ID must exist. |
interface interface-type interface-number |
Displays LLDP neighbor information on a specified AP interface.
|
- |
brief |
Displays brief LLDP neighbor information of APs. |
- |
Usage Guidelines
You can run this command to view LLDP neighbor information on a specified AP, including the number of LLDP neighbors, device ID, interface ID, system name system description, and management address of each neighbor. The LLDP neighbor information is reported by an AP to the connected AC.
If no parameter is specified, LLDP neighbor information about all AP interfaces is displayed.
Example
# Display LLDP neighbor information on all APs.
<HUAWEI> display ap lldp neighbor brief -------------------------------------------------------------------------------------- Hostname Neighbor device Management address Local intf Neighbor intf TTL -------------------------------------------------------------------------------------- huawei Quidway 10.10.10.3 GE0 GigabitEthernet0/0/16 119 -------------------------------------------------------------------------------------- Total: 1
Item | Description |
---|---|
Hostname |
AP name. |
Neighbor device |
System name of an AP neighbor. |
Management address |
Management address of an AP neighbor. |
Local intf |
Local interface of the AP. |
Neighbor intf |
Interface of an AP neighbor. |
TTL |
Time to live (TTL) of the AP neighbor information stored on the local AP. |
# Display LLDP neighbor information about GE0 of AP huawei.
<HUAWEI> display ap lldp neighbor ap-name huawei interface gigabitethernet 0 -------------------------------------------------------------------------------- AP 1 Port 0 has 1 neighbor(s): Basic port information -------------------------------------------------------------------------------- Neighbor index : 1 Host Name : huawei Chassis ID type : macAddress Chassis ID : 5489-9876-b7d7 Port ID type : interfaceName Port ID : GigabitEthernet0/0/2 Time to live : 120s Port description : GigabitEthernet0/0/2 System name : Quidway System description : S5720-56C-HI Huawei Versatile Routing Platform Software VRP (R) software,Version 5.110 (S5720HI V200R011C00V200R011C10) Copyright (C) 2007 Huawei Technologies Co., Ltd. System capabilities supported: wlanAccessPoint telephone System capabilities enabled : wlanAccessPoint telephone Management address type : IPv4 Management address : 10.10.10.5 DOT3 port information -------------------------------------------------------------------------------- Power port class : Unknown PSE power supported : No PSE power enabled : No PSE pairs control ability : No Power pairs : Unknown Port power classification : Unknown Power type : Type 2 PSE Power source : Reserved Power priority : High PD requested power value : 479.5(w) PSE allocated power value : 281.6(w) PD requested power value Mode A : 0.0(w) PD requested power value Mode B : 2335.4(w) PSE allocated power value Alternative A : 1055.8(w) PSE allocated power value Alternative B : 1488.9(w) Power Class : Unknown PSE power pairsx : Alternative A Power typex : Type unknown PD 4PID : No PD Load : Single-signature PSE maximum available power : 421.6(w) PSE Autoclass support : Yes Autoclass completed : Idle Autoclass request : Completed Power down : No Legacy port information -------------------------------------------------------------------------------- 4-pair PoE Supported : Yes Spare pair Detection/Classification required: Yes PD Spare Pair Desired State : Disable PSE Spare Pair Operational State : Enable --------------------------------------------------------------------------------
Item | Description |
---|---|
Neighbor index |
Index of a neighbor. |
Host Name |
AP name |
Chassis ID type |
ID subtype of a neighbor device.
|
Chassis ID |
ID of the neighbor device.
|
Port ID type |
ID subtype of the neighbor interface.
|
Port ID |
ID of the neighbor interface.
|
Time to live |
Time to live (TTL) of the AP neighbor information stored on the local AP. |
Port description |
Description of the neighbor interface. |
System name |
System name. |
System description |
System description of the neighbor. |
System capabilities supported |
Capabilities of the neighbor device.
|
System capabilities enabled |
Capabilities enabled on the neighbor device.
|
Management address type |
Management address type of the neighbor. |
Management address |
Management address of the neighbor. |
Power port class | PoE type:
|
PSE power supported | Whether the PSE power is supported.
|
PSE power enabled | Whether the PSE power is enabled.
|
PSE pairs control ability | Whether the PSE control is supported.
|
Power pairs | PoE remote power supply mode.
|
Port power classification | PD power control level on the interface:
|
Power type | PoE device type: |
Power source | Power supply source. Type of the PSE: Primary power source, Backup source, Reserved, and Unknown Type of the PD: PSE, Reserved, PSE and local, and Unknown |
Power priority | Power priority:
|
PD requested power value | Power requested by the PD. |
PSE allocated power value | Power allocated by the PSE. |
PD requested power value Mode A | Power requested by the PD in mode A. |
PD requested power value Mode B | Power requested by the PD in mode B. |
PSE allocated power value Alternative A | Power allocated by the PSE for a PD in Mode A. |
PSE allocated power value Alternative B | Power allocated by the PSE for a PD in Mode B. |
Power Class | Power class requested by the PD or allocated by the PSE. |
PSE power pairsx | Mode in which the PSE supplies power to a PD. |
Power typex | Working type of the device. |
PD 4PID | Whether the PD supports all power receive types.
|
PD Load | Whether isolation between modes A and B is required for the PD.
|
PSE maximum available power | Maximum output power of the PSE. |
PSE Autoclass support | Whether the PSE supports Autoclass.
|
Autoclass completed | Whether Autoclass is completed. |
Autoclass request | Whether Autoclass is required for the PD. |
Power down | Whether the PD requires power supply from the PSE. |
4-pair PoE Supported | Whether the interface supports UPoE. |
Spare pair Detection/Classification required | Whether the standby device supports the requirement for detection and classification. |
PD Spare Pair Desired State | Requirement state of the standby PD. |
PSE Spare Pair Operational State | Operation state of the standby PSE. |
display ap neighbor
Function
The display ap neighbor command displays information about neighbors of a radio, including authorized and unauthorized neighbors.
Parameters
Parameter |
Description |
Value |
---|---|---|
ap-name ap-name | Specifies an AP name. |
The AP name must exist. |
ap-id ap-id | Specifies an AP ID. |
The AP ID must exist. |
radio radio |
Specifies radio ID of an AP. |
The value is an integer that ranges from 0 to 2. Only the AP4030TN, AP4051TN, and AP8050TN-HD supports three radios. |
Usage Guidelines
Use Scenario
APs' neighbor information reflects the APs' locations and neighbor relationships, helping you plan the network.
If a neighboring AP is an authorized one, the system displays the power of signals received from the neighboring AP as well as the path loss.
If a neighboring AP is an unauthorized one, the system displays only the power of signals received from the neighboring AP.
Prerequisites
The radio calibration function has been enabled using the calibrate enable { auto | manual | schedule time } command.
Precautions
In auto radio calibration mode, APs continuously report and update neighboring information so that the AC can query the latest AP neighbor information. In manual or scheduled radio calibration mode, APs report neighbor information within the calibration period. Neighbor information ages out after 1 hour and can be queried only before aging.
Example
# Display neighbor information of AP huawei.
<HUAWEI> display ap neighbor ap-name huawei
Radio: Radio ID of AP
In control AP:
------------------------------------------------------------------------------
Radio AP ID AP name Channel Received RSSI(dbm) Path loss(db)
------------------------------------------------------------------------------
0 0 e468-a352-7990 1 -38 56
------------------------------------------------------------------------------
Total: 1
Uncontrol AP:
------------------------------------------------------------------------------
Radio BSSID Channel RSSI(dBm) SSID
------------------------------------------------------------------------------
0 0020-1306-0680 1 -79 b
1 cc53-b5ee-3d00 5 -60 test
------------------------------------------------------------------------------
Total: 2
Item |
Description |
---|---|
In control AP |
Authorized neighboring AP. |
Uncontrol AP |
Unauthorized neighboring AP. |
Radio |
Neighboring AP detected on an AP radio. |
AP ID |
ID of a neighboring AP. |
AP name |
Name of a neighboring AP. |
Channel |
Channel that the authorized neighboring AP uses. NOTE:
The device displays only information about neighboring APs detected on the current channel. |
Received RSSI(dbm) |
Strength of signals received from neighboring APs. |
Path loss(db) |
Path loss. |
BSSID |
Basic service set identifier (BSSID) of an unauthorized neighbor. |
Channel |
Channel that the unauthorized neighboring AP uses. |
RSSI(dBm) |
Power of signals received from the neighboring AP, in dBm. |
SSID |
Service set identifier (SSID) of an unauthorized neighbor. |
display ap offline-record
Usage Guidelines
This command displays AP offline records, helping the maintenance personnel manage and maintain the APs.
After the number of AP offline records reaches the maximum that can be stored, new records overwrite existing ones.
Example
# Display all AP offline records.
<HUAWEI> display ap offline-record all ------------------------------------------------------------------------------ MAC Last offline time Reason ------------------------------------------------------------------------------ 0023-0024-0080 2015-01-31/16:21:50 The AP name is modified. 60de-4476-e360 2015-01-31/14:02:35 An AP is deleted. ------------------------------------------------------------------------------ Total records: 2
Item |
Description |
---|---|
MAC |
AP's MAC address. |
Last offline time |
Last offline time of an AP. |
Reason |
AP offline reason. For description of offline reasons and handling suggestions, see Table 11-19. For troubleshooting methods, see An AP Goes offline Unexpectedly. |
Reason Why an AP Goes Offline |
Suggestion |
---|---|
The AC country code is modified. |
The AP goes offline due to normal configuration changes, and no action is required. |
The AP is replaced. |
The AP goes offline due to normal configuration changes, and no action is required. |
Reboot by ap update reset command. |
The AP resets to load the new version file after the upgrade, and no action is required. |
A command is delivered to reboot an AP. |
The AC delivers a reboot command to the AP, and no action is required. |
An AP is deleted. |
The AP is deleted on the AC, and no action is required. |
The license expires: License resources for the AC to manage APs are insufficient. |
Apply for a new license. Huawei's Electronic Software Delivery Platform (ESDP) is accessible from the Internet and Huawei intranet.
|
The AP is added to the blacklist. |
Check whether the AP needs to be added to the blacklist. |
A CAPWAP tunnel is faulty (due to inconsistent link IDs). |
No action is required. The AP will automatically attempt to recover the link. |
The DTLS configuration of the CAPWAP tunnel changes. |
The AP goes offline due to normal configuration changes, and no action is required. |
The AP's factory settings are restored. |
The AP goes offline due to normal configuration changes, and no action is required. |
The radio type is inconsistent between the AC and AP. |
Run the display ap config-info command to verify the AP radio configuration. |
Heartbeat packet transmission for the CAPWAP data tunnel between the AC and AP times out. |
Check the intermediate network between the AP and AC. |
Heartbeat packet transmission for the CAPWAP control tunnel between the AC and AP times out. |
Check the intermediate network between the AP and AC. |
The dual-link networking configuration is modified. |
The configuration change causes the AP to automatically reboot, and no action is required. |
The AP name is modified. |
The AP goes offline due to normal configuration changes, and no action is required. |
The AP group name is modified. |
The AP goes offline due to normal configuration changes, and no action is required. |
The management VLAN is modified. |
The AP goes offline due to normal configuration changes, and no action is required. |
AP provisioning parameters are set. |
The AP goes offline due to normal configuration changes, and no action is required. |
The CAPWAP source IP address is deleted. |
The AP goes offline due to normal configuration changes, and no action is required. |
The central AP goes offline. |
Check the reason why the central AP goes offline. |
The central AP proactively reboots RUs. |
The AP goes offline due to normal configuration changes, and no action is required. |
The AP is powered off and restarts. |
Check the AP power supply. |
An internal error (KP) occurs. |
Contact technical support personnel. |
An internal error (VOS signal error) occurs. |
Contact technical support personnel. |
An internal error (forwarding error monitored by MFPI) occurs. |
Contact technical support personnel. |
An internal error (PKO error monitored by MSC) occurs. |
Contact technical support personnel. |
An internal error (reset due to timer expiration) occurs. |
Contact technical support personnel. |
An internal error (reset of the write CPLD register) occurs. |
Contact technical support personnel. |
The reset button is pressed to reset the AP. |
Check whether the AP is reset manually. |
The AP restarts due to a CANBUS reset. |
Contact technical support personnel. |
The AP restarts due to AP interference: APs are located closely, generating interference. |
Contact technical support personnel. |
The AP restarts due to a chip exception. |
Contact technical support personnel. |
The CAPWAP sensitive-info PSK is modified. |
The configuration change causes the AP to automatically reboot, and no action is required. |
The CAPWAP integrity-check PSK is modified. |
The configuration change causes the AP to automatically reboot, and no action is required. |
The country code is inconsistent on the AC and AP. |
Check the country code configuration on the AC and AP. |
The AP is forcibly disconnected: in specific scenarios, for example, when the CAPWAP tunnel capacity is reached. |
No action is required. |
CAPWAP link down for DTLS smooth: DTLS requires APs to go online again during an HA or VRRP switchover. |
No action is required. |
The wideband status change. |
The AP goes offline due to normal configuration changes, and no action is required. |
An internal error (MSC error monitored by MFPI) occurs. |
Contact technical support personnel. |
An internal error (MSU error monitored by MFPI) occurs. |
Contact technical support personnel. |
An internal error (KAP error monitored by MFPI) occurs. |
Contact technical support personnel. |
An internal error (TX DMA stop) occurs. |
Contact technical support personnel. |
An internal error (other reason) occurs. |
Contact technical support personnel. |
Reboot for AP Channel-load-mode change. |
No action is required. |
Reset for the data link DTLS configuration change. |
The configuration change causes the AP to automatically reboot, and no action is required. |
Reset for the AC list configuration change. |
The configuration change causes the AP to automatically reboot, and no action is required. |
Reset for the change of the IP address obtaining mode. |
The configuration change causes the AP to automatically reboot, and no action is required. |
Reset for the IP address configuration change. |
The configuration change causes the AP to automatically reboot, and no action is required. |
Reset for a configuration delivery failure. |
Check network connectivity. If no problem is found, contact technical support personnel. |
display ap online-fail-record
Usage Guidelines
If an AP fails to go online on the AC, you can run this command to check the failure reason, which helps locate the fault.
After the number of AP online failure records reaches the maximum that can be stored, new records overwrite existing ones.
Example
# Display online failure records about the AP with the MAC address 1047-80b1-56a0.
<HUAWEI> display ap online-fail-record mac 1047-80b1-56a0 ------------------------------------------------------------------------------ MAC Last fail time Reason ------------------------------------------------------------------------------ 1047-80b1-56a0 2015-01-20/15:48:06 The AP is added to the AP blacklist. ------------------------------------------------------------------------------ Total records: 1
Item |
Description |
---|---|
MAC |
MAC address of the AP that fails to go online. |
Last fail time |
Time of the AP online failure. |
Reason |
Reason for the AP online failure. For description of AP online failure reasons and handling suggestions, see Table 11-21. For troubleshooting methods, see AP Online Failure. |
Reason Why an AP Fails to Go Online |
Suggestion |
---|---|
Insufficient license resources. |
Expand the license capacity. Note that RUs do not occupy license resources of the AC. Huawei's Electronic Software Delivery Platform (ESDP) is accessible from the Internet and Huawei intranet.
|
The AP is not in the SN whitelist. |
Run the ap whitelist sn ap-sn1 [ to ap-sn2 ] command to add the AP to the whitelist or run the ap-confirm command to enable the AP to pass authentication. |
The AP is not in the MAC whitelist. |
Run the ap whitelist mac ap-mac1 [ to ap-mac2 ] command to add the AP to the whitelist or run the ap-confirm command to enable the AP to pass authentication. |
The AP is added to the AP blacklist. |
Check whether the AP needs to be added to the blacklist. To delete the AP from the blacklist, run the undo ap blacklist command. |
The MAC address and SN of the AP do not match. |
Check whether the MAC address and SN of the AP match. |
DTLS negotiation for CAPWAP tunnel setup fails. |
Check whether the PSK used for DTLS encryption is correctly configured. |
CAPWAP tunnel negotiation fails. |
Check whether the network connectivity is normal. If yes, contact technical support personnel. |
APs cannot go online during data backup. |
Wait until backup is complete. |
The upgrade fails. |
Run the display ap update configuration command to check whether the AP's upgrade file is correct. If so, rectify the fault by referring to FIT AP Upgrade Fails. |
The CAPWAP tunnel fails to be established. |
Check whether the network connectivity is normal. If yes, contact technical support personnel. |
The configuration fails to be delivered. |
The device attempts to deliver the configuration again. If the failure persists, contact technical support personnel. |
The versions of the AP and AC do not match. |
Log in to http://support.huawei.com/enterprise and download the release notes. Based on the version mapping, upgrade the AP or AC to the matching version.
|
The AC does not support the AP type. |
Replace the AP with that supported by the AC or replace the AC with one that supports this AP type. |
The AP name conflicts. |
Run the ap-rename command to rename the AP. |
The number of central APs reaches the upper limit. |
Check whether the number of central APs reaches the maximum value. |
The number of common APs reaches the upper limit. |
Check whether the number of common APs reaches the maximum value. |
The central AP is not in normal state. |
Run the display ap command to check the central AP status and take measures accordingly. |
The CAPWAP sensitive-info PSK is different on the two ends of the CAPWAP tunnel. |
Ensure that the PSK for encrypting CAPWAP sensitive information is the same on the AP and AC. Alternatively, enable the AP to set up a DTLS session with the AC using the default PSK. |
The CAPWAP integrity-check PSK is different on the two ends of the CAPWAP tunnel. |
Ensure that the PSK for checking CAPWAP packet integrity is the same on the AP and AC. Alternatively, enable the AP to set up a DTLS session with the AC using the default PSK. |
The configured and reported AP types are different. |
Ensure that the configured AP type is the same as the reported one. |
display ap optical-info
Usage Guidelines
Usage Scenario
You can run this command to view optical module information, including the optical module type, transmit optical power, and receive optical power.
Prerequisites
The AP has been online. You can run the display ap command to check the AP status.
Precautions
If an electrical module is inserted into an optical interface, diagnostic information is not supported.
Example
# Display optical module information of AP huawei.
<HUAWEI> display ap optical-info ap-name huawei ------------------------------------------------------------------------------- Interface name:XGE0/0/0 ------------------------------------------------------------------------------- Common information: Transceiver Type :1000_BASE_LX_SFP Connector Type :LC Wavelength(nm) :1310 Transfer Distance(m) :10000(9um) Copper Link Length(m) :0 Digital Diagnostic Monitoring :NO Vendor Name :FINISAR CORP. Vendor Part Number :FTLF1318P2BTL-HW Vendor IEEE Company ID :36965 Vendor Revision Level :A Nominal Bit Rate(MBits/sec) :1200 -------------------------------------------------------------------------------- Manufacture information: Manu. Serial Number :PMK2K62 Manufacturing Date :2012-05-09 Vendor Name :FINISAR CORP. -------------------------------------------------------------------------------- Diagnostic information: Temperature(degree C) :49 Temp High Threshold(degree C) :90 Temp Low Threshold(degree C) :-45 Voltage(0.1mV) :33161 Volt High Threshold(0.1mV) :37000 Volt Low Threshold(0.1mV) :29000 Bias Current(mA) :19 Bias High Threshold(mA) :25430 Bias Low Threshold(mA) :1929 RX Power(0.1uw) :0 RX Power High Threshold(0.1uw) :5012 RX Power Low Threshold(0.1uw) :126 TX Power(0.1uw) :2886 TX Power High Threshold(0.1uw) :6310 TX Power Low Threshold(0.1uw) :708 -------------------------------------------------------------------------------- Interface name:XGE0/0/1 -------------------------------------------------------------------------------- Common information: Transceiver Type :OC3_LONG_REACH_SFP Connector Type :LC Wavelength(nm) :1310 Transfer Distance(m) :40000(9um) Copper Link Length(m) :0 Digital Diagnostic Monitoring :YES Vendor Name :NEOPHOTONING Vendor Part Number :PT7320-31-2W Vendor IEEE Company ID :0 Vendor Revision Level :1.0 Nominal Bit Rate(MBits/sec) :100 -------------------------------------------------------------------------------- Manufacture information: Manu. Serial Number :A1008036407 Manufacturing Date :2008-10-09 Vendor Name :NEOPHOTONING -------------------------------------------------------------------------------- Diagnostic information: Temperature(degree C) :47 Temp High Threshold(degree C) :100 Temp Low Threshold(degree C) :-10 Voltage(0.1mV) :32808 Volt High Threshold(0.1mV) :34461 Volt Low Threshold(0.1mV) :30523 Bias Current(mA) :9 Bias High Threshold(mA) :24 Bias Low Threshold(mA) :0 RX Power(0.1uw) :0 RX Power High Threshold(0.1uw) :50477 RX Power Low Threshold(0.1uw) :152 TX Power(0.1uw) :5291 TX Power High Threshold(0.1uw) :3320 TX Power Low Threshold(0.1uw) :834 -------------------------------------------------------------------------------- Interface name:XGE0/0/2 -------------------------------------------------------------------------------- Common information: Transceiver Type :1000_BASE_LX_SFP Connector Type :LC Wavelength(nm) :1310 Transfer Distance(m) :10000(9um) Copper Link Length(m) :0 Digital Diagnostic Monitoring :YES Vendor Name :Hisense Vendor Part Number :LTD1302-BC+1 Vendor IEEE Company ID :0 Vendor Revision Level :V1.0 Nominal Bit Rate(MBits/sec) :1300 -------------------------------------------------------------------------------- Manufacture information: Manu. Serial Number :J2220000170 Manufacturing Date :2012-09-20 Vendor Name :Hisense -------------------------------------------------------------------------------- Diagnostic information: Temperature(degree C) :37 Temp High Threshold(degree C) :78 Temp Low Threshold(degree C) :-5 Voltage(0.1mV) :32776 Volt High Threshold(0.1mV) :35650 Volt Low Threshold(0.1mV) :29000 Bias Current(mA) :9 Bias High Threshold(mA) :70 Bias Low Threshold(mA) :0 RX Power(0.1uw) :4267 RX Power High Threshold(0.1uw) :5012 RX Power Low Threshold(0.1uw) :79 TX Power(0.1uw) :2304 TX Power High Threshold(0.1uw) :10000 TX Power Low Threshold(0.1uw) :631 -------------------------------------------------------------------------------- Interface name:XGE0/0/3 -------------------------------------------------------------------------------- Common information: Transceiver Type :1000_BASE_LX_SFP Connector Type :LC Wavelength(nm) :1310 Transfer Distance(m) :10000(9um) Copper Link Length(m) :0 Digital Diagnostic Monitoring :YES Vendor Name :FINISAR CORP. Vendor Part Number :FTLF1318P2BTL-HW Vendor IEEE Company ID :36965 Vendor Revision Level :A Nominal Bit Rate(MBits/sec) :1200 -------------------------------------------------------------------------------- Manufacture information: Manu. Serial Number :PLTOL92 Manufacturing Date :2012-05-09 Vendor Name :FINISAR CORP. -------------------------------------------------------------------------------- Diagnostic information: Temperature(degree C) :38 Temp High Threshold(degree C) :90 Temp Low Threshold(degree C) :-45 Voltage(0.1mV) :33061 Volt High Threshold(0.1mV) :37000 Volt Low Threshold(0.1mV) :29000 Bias Current(mA) :19 Bias High Threshold(mA) :52 Bias Low Threshold(mA) :4 RX Power(0.1uw) :1 RX Power High Threshold(0.1uw) :5012 RX Power Low Threshold(0.1uw) :126 TX Power(0.1uw) :3219 TX Power High Threshold(0.1uw) :6310 TX Power Low Threshold(0.1uw) :708 --------------------------------------------------------------------------------
Item | Description |
---|---|
Interface name |
Name of the optical module. |
Transceiver Type |
Type of the optical module. |
Connector Type |
Interface type. |
Wavelength(nm) |
Optical wavelength, in nm. |
Transfer Distance(m) |
Transmission distance, in meters. |
Copper Link Length(m) |
Length of the copper cable, in meters. |
Digital Diagnostic Monitoring |
Whether diagnostic information about the optical module is monitored. |
Vendor Name |
Name of the vendor. |
Vendor Part Number |
Product code provided by the vendor. |
Vendor IEEE Company ID |
Version number provided by the vendor. |
Vendor Revision Level |
Product serial number provided by the vendor. |
Nominal Bit Rate(MBits/sec) |
Bit rate of the optical module, in Mbit/s. |
Manu. Serial Number |
Vendor sequence number of the optical module. |
Manufacturing Date |
Manufacturing date of the optical module. |
Temperature(degree C) |
Current temperature of the optical module, in °C. |
Temp High Threshold(degree C) |
The upper threshold for the temperature of the optical module, in °C. |
Temp Low Threshold(degree C) |
The lower threshold for the temperature of the optical module, in °C. |
Voltage(0.1mV) |
Current voltage of the optical module, in 0.1mV. |
Volt High Threshold(0.1mV) |
The upper threshold for the voltage of the optical module, in 0.1mV. |
Volt Low Threshold(0.1mV) |
The lower threshold for the voltage of the optical module, in 0.1mV. |
Bias Current(mA) |
Bias current of the optical module, in mA. |
Bias High Threshold(mA) |
Upper threshold for the bias current of the optical module, in mA. |
Bias Low Threshold(mA) |
Lower threshold for the bias current of the optical module, in mA. |
RX Power(0.1uw) |
Receive power of the optical module, in 0.1uw. |
RX Power High Threshold(0.1uw) |
Upper receive power threshold for the optical module, in 0.1uw. |
RX Power Low Threshold(0.1uw) |
Lower receive power threshold for the optical module, in 0.1uw. |
TX Power(0.1uw) |
Transmit power of the optical module, in 0.1uw. |
TX Power High Threshold(0.1uw) |
Upper transmit power threshold for the optical module, in 0.1uw. |
TX Power Low Threshold(0.1uw) |
Lower transmit power threshold for the optical module, in 0.1uw. |
display ap performance statistics
Usage Guidelines
You can run the display ap performance statistics command to view AP performance statistics to monitor AP performance.
Example
# Display performance statistics about AP huawei.
<HUAWEI> display ap performance statistics ap-name huawei -------------------------------------------------------------------------------- Memory usage(%) : 58 Memory average usage(%) : 58 CPU usage(%) : 4 CPU average usage(%) : 4 Available space size(KB) : 1192 Temperature(degree C) : 54 Online user number : 0 Upstream traffic(wireless)(KB) : 23 KB Wireless port drop frames(RX) : 0 Wireless port drop frames(TX) : 0 Wireless port total bytes(RX) : 0 Wireless port total bytes(TX) : 0 Wireless port unicast frames(RX): 0 GigabitEthernet port 0 port drop frames(RX) : 0 port drop frames(TX) : 0 port total Bytes(RX) : 0 port total Bytes(TX) : 0 port unknown frames(RX) : 0 port error frames(TX) : 0 port updown counts : 0 port output rate(Kbps) : 0 port input rate(Kbps) : 1 GigabitEthernet port 1 port drop frames(RX) : 0 port drop frames(TX) : 0 port total Bytes(RX) : 61210 port total Bytes(TX) : 38218 port unknown frames(RX) : 0 port error frames(TX) : 0 port updown counts : 0 port output rate(Kbps) : 0 port input rate(Kbps) : 1 --------------------------------------------------------------------------------
Item | Description |
---|---|
Memory usage(%) |
Memory usage (%). |
Memory average usage(%) |
Average memory usage (%). |
CPU usage(%) |
CPU usage (%). |
CPU average usage(%) |
Average CPU usage (%). |
Available space size(KB) |
Available space, in KB. |
Temperature(degree C) |
AP's internal temperature (°C).
NOTE:
The temperature is displayed as "-" for APs that do not support the temperature check. |
Online user number |
Number of online users. |
Upstream traffic(wireless)(KB) | Traffic volume on the wireless upstream interface in a specified period, in KB. |
Wireless port drop frames(RX) | Number of discarded data frames received by the wireless interface. |
Wireless port drop frames(TX) | Number of discarded data frames sent by the wireless interface. |
Wireless port total bytes(RX) |
Total number of bytes received by the wireless interface. |
Wireless port total bytes(TX) |
Total number of bytes sent by the wireless interface. |
Wireless port unicast frames(RX) |
Number of unicast data frames received by the wireless interface. |
GigabitEthernet port x |
ID of the wired-side interface. |
port drop frames(RX) |
Number of discarded data frames received by the wired interface. |
port drop frames(TX) |
Number of discarded data frames sent by the wired interface. |
port total Bytes(RX) |
Number of bytes received by the wired interface. |
port total Bytes(TX) |
Number of bytes sent by the wired-side interface. |
port unknown frames(RX) |
Number of unknown protocol packets received by the wired interface. |
port error frames(TX) |
Number of error data frames sent by the wired interface. |
port updown counts |
Number of times the wired interface alternates between Up and Down. |
port output rate(Kbps) | Wired-side sending rate (kbps). |
port input rate(Kbps) | Wired-side receiving rate (kbps). |
display ap provision
Usage Guidelines
After you set parameters for an AP to go online in the AP view, you can run this command to view the detailed configuration.
Example
# Display configurations in the AP provisioning view.
<HUAWEI> display ap provision ap-id 2
--------------------------------------------------------------------------------
AP name : 70d9-313c-3120
AP group : default
AP address mode : static
IPv4 address : -
IPv4 mask address : -
IPv4 gateway address : -
IPv4 AC list : -
--------------------------------------------------------------------------------
Item |
Description |
---|---|
AP name |
AP name. To configure this parameter, run the ap-name (AP view) command. |
AP group |
AP group to which an AP belongs. To configure this parameter, run the ap-group (AP view) command. |
AP address mode |
Mode in which an AP obtains an IP address. To configure this parameter, run the address-mode (AP view) command. |
IPv4 address |
Static IPv4 address of an AP. To configure this parameter, run the ip-address (AP view) command. |
IPv4 mask address |
Static IPv4 mask of an AP. To configure this parameter, run the ip-address (AP view) command. |
IPv4 gateway address |
IPv4 gateway address of an AP. To configure this parameter, run the ip-address (AP view) command. |
IPv4 AC list |
AC IPv4 address list for APs. To configure this parameter, run the ac-list (AP view) command. |
display ap port
Parameters
Parameter |
Description |
Value |
---|---|---|
all |
Displays port status and traffic information of all APs. |
- |
ap-name ap-name |
Displays port status and traffic information of the AP with a specified name. |
The AP name must exist. |
ap-id ap-id |
Displays port status and traffic information of the AP with a specified ID. |
The AP ID must exist. |
ap-mac ap-mac |
Displays port status and traffic information of the AP with a specified MAC address. |
The AP's MAC address must exist. |
Usage Guidelines
You can run the display ap port command to check port status and traffic information of online APs, which facilitates AP port maintenance and management.
Example
# Display port status and traffic information of all APs.
<HUAWEI> display ap port all Info: Waiting for AP response. ----------------------------------------------------------------------------------------------------------------------------------- AP-ID Port State Speed Duplex TX-Packets Tx-ErrorPackets TX-Rate(Kbps) RX-Packets RX-DropPackets RX-Rate(Kbps) ----------------------------------------------------------------------------------------------------------------------------------- 0 GE0 up 1000 full 9178 0 0 12857 0 1 ----------------------------------------------------------------------------------------------------------------------------------- Printed: 1
Parameter | Description |
---|---|
AP-ID |
AP ID. |
Port |
AP port. |
State |
Status of the AP port.
|
Speed |
Speed of the AP port, in Mbit/s. |
Duplex |
Duplex mode of the AP port, which includes the half-duplex and full-duplex modes. |
TX-Packets |
Number of data frames sent by the AP port. |
Tx-ErrorPackets |
Number of error data frames sent by the AP port. |
TX-Rate(Kbps) |
Uplink rate of the AP port. |
RX-Packets |
Number of data frames received by the AP port. |
RX-DropPackets |
Number of discarded data frames that are received by the AP port. |
RX-Rate(Kbps) |
Downlink rate of the AP port. |
display ap power-workmode
Format
display ap power-workmode { all | ap-name ap-name | ap-id ap-id | ap-mac ap-mac | ap-group ap-group }
Parameters
Parameter |
Description |
Value |
---|---|---|
all |
Displays the current power mode of all APs. |
- |
ap-name ap-name |
Displays the current power mode of the AP with a specified name. |
The AP name must exist. |
ap-id ap-id |
Displays the current power mode of the AP with a specified ID. |
The AP ID must exist. |
ap-mac ap-mac |
Displays the current power mode of the AP with a specified MAC address. |
The AP's MAC address must exist. |
ap-group ap-group | Displays the current power mode of APs in a specified AP group. |
The AP group must exist. |
Usage Guidelines
When an AP is supplied with DC or PoE power, the AP may work in low-power mode if the power fails to meet requirements. You can run this command to view the current power mode of the AP and verify that the current power mode can enable the AP to work with all functions.
Example
# Display the current power mode of all APs.
<HUAWEI> display ap power-workmode all ----------------------------------------------------------------------------------------------------------------------------------- ID MAC Name Group Power-workmode Decided by ----------------------------------------------------------------------------------------------------------------------------------- 0 dcd2-fcf6-76a0 ap_1 default AT(FULL) LLDP 1 60de-4474-9640 ap_2 default AF(RESTRICTED) AP capability ----------------------------------------------------------------------------------------------------------------------------------- Total: 2
Item | Description |
---|---|
ID |
AP ID. |
MAC |
AP MAC address. |
Name |
AP name. |
Group |
AP group to which an AP belongs. |
Power-workmode |
|
Decided by |
The current power mode of an AP is determined by:
|
display ap resource
Function
The display ap resource command displays the number of CAPWAP tunnel resources used by APs on a switch.
Usage Guidelines
You can run this command to check the number of CAPWAP tunnel resources used by APs on a switch.
display ap run-info
Usage Guidelines
Usage Scenario
This command displays AP running status. You can run this command to monitor an AP in real time.
Prerequisites
The AP works properly.
Example
<HUAWEI> display ap run-info ap-name huawei -------------------------------------------------------------------------------- AP type : AP7030DE Country code : CN Software version : V200R007C10 Hardware version : Ver.A BIOS version : 271 BOM version : 001 Memory size(MB) : 256 Flash size(MB) : 64 Manufacture : Huawei Technologies Co., Ltd. Software vendor : Huawei Technologies Co., Ltd. Online time(ddd:hh:mm:ss) : 6H:56M:26S Run time(ddd:hh:mm:ss) : 6H:59M:51S IP address : 192.168.109.252 IP mask : 255.255.255.0 Gateway : 192.168.109.1 DNS server : 0.0.0.0 GigabitEthernet port 0 Port speed(Mbps) : 1000 Port speed mode : auto Port duplex : full Port duplex mode : auto Port state : down STP down recovery time(ddd:hh:mm:ss) : - GigabitEthernet port 1 Port speed(Mbps) : 1000 Port speed mode : auto Port duplex : full Port duplex mode : auto Port state : up STP down recovery time(ddd:hh:mm:ss) : - Card status : slot 1: -, slot 2: -, slot 3: - --------------------------------------------------------------------------------
Item |
Description |
---|---|
AP type |
AP type. |
Country code |
Country code. |
Software version |
Software version of an AP. |
Hardware version |
Hardware version of an AP. |
BIOS version |
BIOS version of an AP. |
BOM version |
BOM version of an AP. |
Memory size(MB) |
Memory size of an AP, in MB. |
Flash size(MB) |
Flash memory size of an AP, in MB. |
Manufacture |
Manufacturer of an AP. |
Software vendor |
AP software manufacturer. |
Online time(ddd:hh:mm:ss) |
AP online duration. |
Run time(ddd:hh:mm:ss) |
Running duration of an AP. |
IP address |
AP IPv4 address. |
IP mask |
Mask of an AP. |
Gateway |
Gateway IP address of an AP. |
DNS server |
IP address of the DNS server. |
XGigabitEthernet port number |
ID of the AP's XGigabitEthernet port. Only AD9431DN-24X series APs have XGigabitEthernet ports. |
MultiGE port number |
ID of the AP's MultiGE port. Only AP7050DN-E, AP6052DN, AP7052DN, AP7152DN, AP7052DE, AP8082DN, and AP8182DN series APs have MultiGE ports. |
GigabitEthernet port number |
ID of the AP's Ethernet interface. |
Port speed(Mbps) |
Rate on the upstream Ethernet interface, in Mbit/s. |
Port speed mode |
Rate mode of the upstream Ethernet interface, including automatic and non-automatic negotiation modes. |
Port duplex |
Duplex type of the upstream Ethernet interface, including full duplex and half duplex. |
Port duplex mode |
Duplex mode of the upstream Ethernet interface, including automatic and non-automatic negotiation modes. |
Port state |
AP interface status.
|
STP down recovery time(ddd:hh:mm:ss) |
Remaining recovery time of the STP. |
Card status |
IoT card status.
|
display ap sta-signal strength
Function
The display ap sta-signal strength command displays the average signal strength of STAs connected to an AP.
Parameters
Parameter |
Description |
Value |
---|---|---|
ap-name ap-name |
Displays the average signal strength of STAs connected to the AP with a specified name. |
The AP name must exist. |
ap-id ap-id |
Displays the average signal strength of STAs connected to the AP with a specified ID. |
The AP ID must exist. |
radio radio-id | Displays the average signal strength of STAs connected to a specified AP radio. |
The value is an integer that ranges from 0 to 2. Only the AP4030TN, AP4051TN, and AP8050TN-HD supports three radios. |
Usage Guidelines
You can run this command to view the average signal strength of STAs connected to an AP.
display ap statistics
Usage Guidelines
Various types of APs can be added to an AC. You can run this command to view types of APs added to an AC and the number of APs of various types.
Example
# Display statistics about AP types.
<HUAWEI> display ap statistics
--------------------------------------------------------------------------------
Type Number
--------------------------------------------------------------------------------
AP6010DN-AGN 1
AP6510DN-AGN 1
AP5010DN-AGN 1
--------------------------------------------------------------------------------
display ap traffic statistics wireless
Function
The display ap traffic statistics wireless command displays statistics about packets with the specified SSID on the radio of an AP.
Format
display ap traffic statistics wireless { ap-name ap-name | ap-id ap-id } radio radio-id [ ssid ssid ]
Parameters
Parameter |
Description |
Value |
---|---|---|
ap-name ap-name | Specifies an AP name. |
The AP name must exist. |
ap-id ap-id | Specifies an AP ID. |
The AP ID must exist. |
radio radio-id |
Specifies the radio ID. |
The value is an integer that ranges from 0 to 2. Only the AP4030TN, AP4051TN, and AP8050TN-HD supports three radios. |
ssid ssid |
Specifies the SSID that STAs associate with. |
The value must be an existing SSID. |
Usage Guidelines
You can run the display ap traffic statistics wireless command to view statistics about packets with the specified SSID on the radio of an AP.
Example
# Display statistics about packets with the SSID cmcc on radio 0 of an AP huawei.
<HUAWEI> display ap traffic statistics wireless ap-name huawei radio 0 ssid cmcc ---------------------------------------------------------------- Wireless bytes(RX) : 14583149 Wireless error frames(RX) : 10 Wireless frames(RX) : 97419 Wireless unicast frames(RX) : 16 Wireless dropped frames(RX) : 0 Wireless bytes(TX) : 1725974 Wireless error frames(TX) : 6 Wireless frames(TX) : 9704 Wireless unicast frames(TX) : 9680 Wireless dropped frames(TX) : 6 Wireless retransmitted frames: 32674 Current accessed STA number : 0 ----------------------------------------------------------------
Item | Description |
---|---|
Wireless bytes(RX) |
Total number of bytes of data frames received by the radio. |
Wireless error frames(RX) |
Total number of received error frames. |
Wireless frames(RX) |
Total number of received frames. |
Wireless unicast frames(RX) |
Total number of received unicast frames. |
Wireless dropped frames(RX) |
Total number of received frames that are discarded. |
Wireless bytes(TX) |
Total number of bytes of data frames sent by the radio. |
Wireless error frames(TX) |
Total number of transmitted error frames. |
Wireless frames(TX) |
Total number of transmitted frames. |
Wireless unicast frames(TX) |
Total number of transmitted unicast frames. |
Wireless dropped frames(TX) |
Total number of transmitted frames that are discarded. |
Wireless retransmitted frames |
Total number of retransmitted frames. |
Current accessed STA number |
Number of STAs that connect to the AP normally. |
# Display packet statistics on Radio 0 of the AP huawei.
<HUAWEI> display ap traffic statistics wireless ap-name huawei radio 0 ----------------------------------------------------------------------- Wireless frames(RX) :506379 Wireless bytes(RX) :76567129 Wireless error frames(RX) :113998 Wireless physical layer error frames(RX) :0 Wireless MIC error frames(RX) :0 Wireless private key and decrypt fail frames(RX) :0 Wireless unicast frames(RX) :30 Wireless management frames(RX) :506379 Wireless data frames(RX) :0 Wireless maximal signal strength(dBm)(RX) :0 Wireless minimal signal strength(dBm)(RX) :0 Wireless average signal strength(dBm)(RX) :0 Wireless frames(TX) :4949 Wireless bytes(TX) :855879 Wireless RTS successes(TX) :0 Wireless unicast frames(TX) :4587 Wireless broadcast frames(TX) :355 Wireless failure frames(TX) :3406 Wireless management frames(TX) :4725 Wireless data frames(TX) :0 Wireless noise(dBm) :-100 Wireless port up rate(Kbps) :40 Wireless port down rate(Kbps) :1 Wireless port PS-Poll Frames :0 Wireless port Association Request :0 Wireless port Association Response :0 Wireless port ReAssociation Request :0 Wireless port ReAssociation Response :0 Wireless port Disassociation Frames :0 Wireless port Deauthentication Frames :0 Wireless retry frames :515 Wireless PER(%) :0 Wireless PER of the last 5min(%) :0 Wireless port drop rate(%) :0 Wireless port drop rate of the last 5min(%) :0 Wireless retransmitted rate(%) :0 Wireless retransmitted rate of the last 5min(%) :0 Wireless channel utilization(%) :96 WMM AC_BE retry ratio(%) :0 WMM AC_BK retry ratio(%) :0 WMM AC_VI retry ratio(%) :0 WMM AC_VO retry ratio(%) :0 WMM AC_BE PER(%) :0 WMM AC_BK PER(%) :0 WMM AC_VI PER(%) :0 WMM AC_VO PER(%) :0 -----------------------------------------------------------------------
Item | Description |
---|---|
Wireless frames(RX) |
Total number of data frames and management frames received by the radio. |
Wireless bytes(RX) |
Total number of bytes of data frames received by the radio. |
Wireless error frames(RX) |
Total number of error frames received by the radio. |
Wireless physical layer error frames(RX) |
Number of error frames received at the physical layer of the radio. |
Wireless MIC error frames(RX) |
Number of frames with message integrity code (MIC) received by the radio. |
Wireless private key and decrypt fail frames(RX) |
Number of frames with incorrect keys received by the radio. |
Wireless unicast frames(RX) |
Number of unicast frames received by the radio. |
Wireless management frames(RX) |
Number of management frames received by the radio. |
Wireless data frames(RX) |
Number of data frames received by the radio. |
Wireless maximal signal strength(dBm)(RX) |
Maximum strength of signals received by the radio, in dBm. |
Wireless minimal signal strength(dBm)(RX) |
Minimum strength of signals received by the radio, in dBm. |
Wireless average signal strength(dBm)(RX) |
Average strength of signals received by the radio, in dBm. |
Wireless frames(TX) |
Number of transmitted frames received by the radio. |
Wireless bytes(TX) |
Total number of bytes of data frames transmitted by the radio. |
Wireless RTS successes(TX) |
Number of Request to Send (RTS) frames that are successfully sent by the radio. |
Wireless unicast frames(TX) |
Number of transmitted unicast frames received by the radio. |
Wireless broadcast frames(TX) |
Number of broadcast frames sent by the radio. |
Wireless failure frames(TX) |
Number of frames that the radio fails to send. |
Wireless management frames(TX) |
Number of management frames sent from the radio. |
Wireless data frames(TX) |
Number of data frames sent from the radio. |
Wireless noise(dBm) |
Radio noise level (dBm). |
Wireless port up rate(Kbps) |
Upstream rate of the radio, in kbit/s. |
Wireless port down rate(Kbps) |
Downstream rate of the radio, in kbit/s. |
Wireless port PS-Poll Frames |
Number of data frames sent by the STA working in power saving mode. |
Wireless port Association Request |
Number of Association Request frames. |
Wireless port Association Response |
Number of Association Response frames. |
Wireless port ReAssociation Request |
Number of Reassociation Request frames. |
Wireless port ReAssociation Response |
Number of Reassociation Response frames. |
Wireless port Disassociation Frames |
Number of Disassociation frames. |
Wireless port Deauthentication Frames |
Number of Deauthentication frames. |
Wireless retry frames |
Number of frames that are retransmitted by the radio. |
Wireless PER(%) |
Packet error rate of the radio. |
Wireless PER of the last 5min(%) |
Packet error rate of the radio in the last statistical period. |
Wireless port drop rate(%) |
Packet loss ratio of the radio. |
Wireless port drop rate of the last 5min(%) |
Packet loss ratio of the radio in the last statistical period. |
Wireless retransmitted rate(%) |
Retransmission ratio of the radio. |
Wireless retransmitted rate of the last 5min(%) |
Retransmission ratio of the radio in the last statistical period. |
Wireless channel utilization(%) |
Channel usage of the radio. NOTE:
When an AP radio works in monitor mode, this parameter is displayed as -. |
WMM AC_BE retry ratio(%) |
Retransmission ratio of AC_BE packets in the WMM queue. |
WMM AC_BK retry ratio(%) |
Retransmission ratio of AC_BK packets in the WMM queue. |
WMM AC_VI retry ratio(%) |
Retransmission ratio of AC_VI packets in the WMM queue. |
WMM AC_VO retry ratio(%) |
Retransmission ratio of AC_VO packets in the WMM queue. |
WMM AC_BE PER(%) |
PER of AC_BE packets in the WMM queue. |
WMM AC_BK PER(%) |
PER of AC_BK packets in the WMM queue. |
WMM AC_VI PER(%) |
PER of AC_VI packets in the WMM queue. |
WMM AC_VO PER(%) |
PER of AC_VO packets in the WMM queue. |
display ap unauthorized record
Usage Guidelines
If the MAC authentication or SN authentication mode is configured for an AP but the AP is neither added offline nor added to the whitelist, the AC does not allow this AP to access. You can run the display ap unauthorized record command to view information about unauthenticated APs.
Example
# Display information about unauthenticated APs.
<HUAWEI> display ap unauthorized record
Unauthorized AP record:
Total number: 1
--------------------------------------------------------------------------------
AP type: AP7110SN-GN
AP SN: 210235568010D1000032
AP MAC address: dcd2-fc9d-0bb0
AP IP address: 192.168.109.252
Record time: 2015-01-22 17:23:17
--------------------------------------------------------------------------------
Item |
Description |
---|---|
Unauthorized AP record |
Records about unauthenticated APs. |
Total number |
Total number of unauthenticated APs. |
AP type |
Type of an unauthenticated AP. |
AP SN |
Serial number of an unauthenticated AP. |
AP MAC address |
MAC address of an unauthenticated AP. |
AP IP address |
IP address of an unauthenticated AP. |
Record time |
Time when an unauthorized AP is recorded. |
display ap uncontrol all
Function
The display ap uncontrol all command displays information about all APs that are not controlled by the local AC.
Usage Guidelines
You can run this command to view information about all uncontrolled APs. The command output includes channel of the controlled AP closest to the uncontrolled AP and the strength of signals that the controlled AP received from the uncontrolled AP.
Example
# View information about all APs that are not controlled by the local AC.
<HUAWEI> display ap uncontrol all
---------------------------------------------------------
BSSID NEAREST-AP CHANNEL RSSI(dBm) SSID
---------------------------------------------------------
1047-80af-9970 ap-13 149 -68 test
---------------------------------------------------------
Total: 1
Item |
Description |
---|---|
BSSID |
BSSID of an uncontrolled AP. |
NEAREST-AP |
Name of the controlled AP that is closest to the uncontrolled AP. |
CHANNEL |
Channel on which the uncontrolled AP is detected. If a rogue AP is detected on multiple channels, the channel with the strongest signal strength is displayed. |
RSSI(dBm) |
Strength of signals that the closest controlled AP receives from the uncontrolled AP, in dBm. |
SSID |
SSID of an uncontrolled AP. |
display ap update configuration
Usage Guidelines
You can run the display ap update configuration command to view AP upgrade configuration, including the upgrade mode, FTP server configuration, and SFTP server configuration.
Example
# Display AP upgrade configuration.
<HUAWEI> display ap update configuration -------------------------------------------------------------------------------- AP update mode : AC-mode FTP configuration FTP IP : - FTP username : anonymous FTP password : ****** FTP max number : 50 SFTP configuration SFTP IP : - SFTP username : anonymous SFTP password : ****** SFTP max number : 50 AP update schedule-task ap update schedule-task task-id 1 start-time 11:11 2017/1/1 stop-time 11:12 201 7/1/1 ap-type 54 AP type/AP-group update filename AP6010DN-AGN : FitAP6X10XN_V200R007C20.bin --------------------------------------------------------------------------------
Item |
Description |
---|---|
AP update mode |
AP upgrade mode.
To configure the parameter, run the ap update mode command. |
FTP configuration |
FTP server configuration. |
FTP IP |
IP address of the FTP server. To configure the parameter, run the ap update ftp-server command. |
FTP username |
User name for logging in to the FTP server. To configure the parameter, run the ap update ftp-server command. |
FTP password |
Password for logging in to the FTP server. To configure the parameter, run the ap update ftp-server command. |
FTP max number |
Maximum number of APs that can be upgraded simultaneously in FTP mode. To configure the parameter, run the ap update ftp-server command. |
SFTP configuration |
SFTP server configuration. |
SFTP IP |
IP address of the SFTP server. To configure the parameter, run the ap update sftp-server command. |
SFTP username |
User name for logging in to the SFTP server. To configure the parameter, run the ap update sftp-server command. |
SFTP password |
Password for logging in to the SFTP server. To configure the parameter, run the ap update sftp-server command. |
SFTP max number |
Maximum number of APs that can be upgraded simultaneously in SFTP mode. To configure the parameter, run the ap update sftp-server command. |
AP update schedule-task |
ID of a scheduled AP upgrade task. To configure the parameter, run the ap update schedule-task command. |
AP type/AP-group update filename |
Name of the upgrade file for a specified AP type or group. To configure the parameter, run the ap update update-filename command. |
display ap update schedule-task
Function
The display ap update schedule-task command displays information about scheduled AP upgrade tasks.
Usage Guidelines
You can use this command to view information about scheduled AP upgrade tasks, and run the undo ap update schedule-task { all | task-id task-id } command to delete the scheduled tasks that have been completed or are not needed.
Example
# View information about scheduled AP upgrade task.
<HUAWEI> display ap update schedule-task
-------------------------------------------------------------------------------------
Task-ID Task-State Start-Time Stop-Time AP-Type AP-Group
-------------------------------------------------------------------------------------
1 IDLE 2016/11/01 11:11 2017/01/01 11:12 54 -
-------------------------------------------------------------------------------------
Item | Description |
---|---|
Task-ID | ID of a scheduled AP upgrade task. |
Task-State | Status of the scheduled AP upgrade task.
|
Start-Time | Start time of the scheduled AP upgrade task. |
Stop-Time | End time of the scheduled AP upgrade task. |
AP-Type | Type of the APs to be upgraded. |
AP-Group | AP group to which the APs to be upgraded belong. |
display ap update status
Format
display ap update status { all | downloading | failed | succeed | ap-name ap-name | ap-id ap-id | ap-type ap-type | ap-group ap-group }
Parameters
Parameter |
Description |
Value |
---|---|---|
all |
Displays upgrade progress of all APs. |
- |
downloading |
Displays APs that are upgrading. |
- |
failed | Displays APs that failed to be upgraded. |
- |
succeed | Displays APs that have been successfully upgraded. |
- |
ap-name ap-name | Displays upgrade progress of the AP with a specified name. |
The AP name must exist. |
ap-id ap-id | Displays upgrade progress of the AP with a specified ID. |
The AP ID must exist. |
ap-type ap-type | Displays upgrade progress of APs of a specified type. |
The value is an integer. To view all RU types, run the display ap-type all command. |
ap-group ap-group | Displays upgrade progress of APs in a specified AP group. |
The value is a string of 1 to 35 characters. |
Usage Guidelines
You can use this command to check upgrade progress of all APs or a specified AP, and check information about APs in specified upgrade status.
Example
# Display upgrade progress of all APs.
<HUAWEI> display ap update status all FT : File Type ---------------------------------------------------------------------------------------------------------------------------------------------- ID Name AP Type AP Group AP MAC FT Update Version Last Update Time Update Status ---------------------------------------------------------------------------------------------------------------------------------------------- 0 hw0 AP6010DN-AGN default 60de-4476-e320 FIT V200R008C10B008 2016/08/22 18:51 succeed 1 hw1 AP6010DN-AGN default 60de-4476-e340 FIT V200R008C10B008 2016/08/22 18:51 downloading(progress: 80%/0%) 2 hw2 AP6010DN-AGN default 60de-4476-e360 FIT V200R008C10B008 2016/08/22 18:51 downloading(progress: 100%/50%) 3 hw3 AP6010DN-AGN default 60de-4476-e380 FIT - - - 4 hw4 AP6010DN-AGN default 60de-4476-e3a0 FIT - - - 5 hw5 AP6010DN-AGN default 60de-4476-e3c0 FIT - - - ---------------------------------------------------------------------------------------------------------------------------------------------- Total: 6
Item | Description |
---|---|
ID | AP ID. |
Name | AP name. |
AP Type | AP type. |
AP Group | AP group. |
AP MAC | MAC address of the AP. |
FT | Type of the AP upgrade file. |
Update Version | Target version that an AP is upgraded to. |
Last Update Time | Last end time when an AP is upgraded. |
Update Status | AP upgrade progress.
|
display ap username
Usage Guidelines
The display ap username command to view information about users logged in to the AP.
Example
# Display information about users logged in to the AP.
<HUAWEI> display ap username
----------------------------------------------------------------------------
AP username: admin
AP password: ******
Password control : Disable
Is original password : YES
Password set time : 1970-01-01 00:00:00
Password expiration : Disable (90 days)
Password history : Disable (5)
Password alert before expiration : 30 days
Password alert original : Enable
Password expired : NO
----------------------------------------------------------------------------
Item | Description |
---|---|
AP username | User name for logging in to the AP. To configure the parameter, run the ap username command. |
AP password | Password for logging in to the AP. To configure the parameter, run the ap username command. |
Password control | Whether to enable the password policy function. |
Is original password | Whether a password is the initial password. |
Password set time | Password setting time |
Password expiration | Password validity period. |
Password history | Number of historical passwords recorded for each user. |
Password alert before expiration | Number of password expiration prompt days. |
Password alert original | Whether to enable the initial password change prompt function. |
Password expired | Whether a password expires. |
display ap version
Parameters
Parameter |
Description |
Value |
---|---|---|
all |
Displays version information about all APs. |
- |
ap-group ap-group-name |
Displays version information about all APs of a specified AP group. |
The AP group must exist. |
version-name version-name | Displays version information about a specified AP. |
The value is string of 11 to 17 characters, in the format of VxxxRxxxCxxx or VxxxRxxxCxxxSPCxxx. For example, V200R006C00 or V200R005C10SPC200. |
Example
# Display version information about all APs.
<HUAWEI> display ap version all Compatible version : V200R008 V200R007 V200R006C10 V200R006C20 -------------------------------------------------------------------------------- ID Name Group Type Version state -------------------------------------------------------------------------------- 0 60de-4476-e360 default AP6010DN-AGN V200R007C20 normal -------------------------------------------------------------------------------- Total: 1
Item |
Description |
---|---|
Compatible version |
Compatible version. |
ID |
Index |
Name |
AP name. |
Group |
AP group name. |
Type |
AP type. |
Version |
AP version name. |
state |
AP state. For details, see Table 11-5. |
AP State |
Description |
Possible Cause |
Handling Suggestion |
---|---|---|---|
commit-failed |
WLAN service configurations fail to be delivered to an AP after the AP goes online on an AC. |
After the AP goes online on the AC, WLAN service configurations are performed for the AP. If the link between the AP and AC is disconnected or the peer end has no response, the AP enters the commit-failed state. |
Check the network connection. |
committing |
WLAN service configurations are being delivered to an AP after the AP goes online on an AC. |
After the AP goes online on the AC, WLAN service configurations are being delivered to the AP. |
This is a normal state, and no action is required. |
config |
WLAN service configurations are being delivered to an AP when the AP is going online on an AC. |
After the AP establishes a link with the AC, WLAN service configurations are delivered to the AP. During this process, the AP is in config state. |
This is a normal state, and no action is required. |
config-failed |
WLAN service configurations fail to be delivered to an AP when the AP is going online on an AC. |
After the AP establishes a link with the AC, WLAN service configurations are delivered to the AP. If the configuration delivery fails due to various reasons (such as link disconnection), the AP enters the config-failed state. |
Check the network connection. |
download |
An AP is in upgrade state. |
When the AP is performing an upgrade, it enters the download state. |
When the AP upgrade is complete, check the AP state. |
fault |
An AP fails to go online. |
The AP fails to go online, which is usually caused by the following:
|
Handle the AP online failure. For details, see AP Online Failure in the Troubleshooting Insights. |
idle |
It is the initialization state of an AP before it establishes a link with the AC for the first time. |
The AP has not established a CAPWAP link with the AC, the MAC address and SN of the AP that is added offline are different from the actual ones, or license resources are insufficient. |
Perform the following operations. Check whether the AP is connected to the network. If the AP connection is normal, go to next step. Check the MAC address and SN of the AP that is added offline are different from the actual MAC address and SN of the AP. If not, perform the following operations:
If the fault persists, expand the license capacity. Note that RUs managed by the AC do not occupy license resources of the AC. |
name-conflicted |
The name of an AP conflicts with that of an existing AP. |
The name of an AP conflicts with the name of another AP that has been online on the same AC. |
Run the ap-rename ap-id ap-id new-name ap-new-name command to change the AP name. |
normal |
An AP is working properly. |
An AP successfully goes online on an AC. |
This is a normal state, and no action is required. |
standby |
The AP is in normal state on the standby AC. |
In the HSB, dual-link cold backup, or N+1 backup scenario, if the link between the active and standby ACs is established properly, the AP is in standby state on the standby AC and in normal state on the active AC. |
This is a normal state, and no action is required. |
ver-mismatch |
The version of an AP does not match that of an AC on which the AP is to go online. |
The versions of the AP and the AC mismatch. |
Log in to Huawei technical support website and download the release notes. Based on the version mapping, upgrade the AP or AC to the matching version.
|
countryCode-mismatch |
The country code of an AP does not match that of the AC on which the AP is about to go online. |
The current version of the AP does not support the country code configured on the AC. |
The AP does not support the country code. Upgrade the AP or change the country code configured on the AC. |
unauthed |
The AP is not authenticated. |
The AP fails to be authenticated. |
Run the ap-confirm command to confirm unauthenticated APs and allow them to go online. |
display ap whitelist
Usage Guidelines
When the AP authentication mode is set to MAC authentication or SN authentication using the ap auth-mode command, you can run the ap whitelist command to configure an AP whitelist. Only APs on the whitelist are allowed to go online. To check information about APs in the whitelist, run the display ap whitelist command.
Example
# Display MAC addresses in the AP whitelist.
<HUAWEI> display ap whitelist mac
--------------------------------------------------------------------------------
Index MAC
--------------------------------------------------------------------------------
0 1047-80b1-56a0
1 0023-0024-0080
2 dcd2-fc9d-0bb0
--------------------------------------------------------------------------------
Total: 3
Item |
Description |
---|---|
Index |
Index. |
MAC |
MAC address of an AP. To add a MAC address to the AP whitelist, run the ap whitelist mac ap-mac1 [ to ap-mac2 ] command. |
# Display SNs in the AP whitelist.
<HUAWEI> display ap whitelist sn
--------------------------------------------------------------------------------
Index SN
--------------------------------------------------------------------------------
0 210235449210CB000011
1 S0001
2 210235568010D1000032
--------------------------------------------------------------------------------
Total: 3
Item |
Description |
---|---|
Index |
Index. |
SN |
SN of an AP. To add an SN to the AP whitelist, run the ap whitelist sn ap-sn1 [ to ap-sn2 ] command. |
display ap wired-port
Parameters
Parameter |
Description |
Value |
---|---|---|
interface-type interface-number |
Specifies the type and number of an AP wired interface. |
The interface type and number need to be selected according to the actual device. |
ap-name ap-name |
Specifies an AP name. |
The AP name must exist. |
ap-id ap-id |
Specifies an AP ID. |
The AP ID must exist. |
Example
# Display GE interface configuration of AP huawei.
<HUAWEI> display ap wired-port gigabitethernet 0 ap-name huawei -------------------------------------------------------------------------------- Wired port number : 0 Wired port type : GigabitEthernet Wired port description : Wired port STP : disable Wired port user isolate : disable Wired port PVID VLAN : - Wired port VLAN tagged : - Wired port VLAN untagged : - Wired port Eth-trunk : - Wired port LLDP : enable Wired port LLDP basic TLV management address: enable Wired port LLDP basic TLV port description : enable Wired port LLDP basic TLV system capability : enable Wired port LLDP basic TLV system description: enable Wired port LLDP basic TLV system name : enable Wired port CRC warn switch : No Wired port CRC warn high threshold : 50 Wired port CRC warn low threshold : 20 -------------------------------------------------------------------------------- Traffic Type Direction AppliedRecord ---------------------------------------------------------------------------------------- traffic-filter inbound IPv4 ACL 3012 ---------------------------------------------------------------------------------------- ---------------------------------------------------------------------------------------- Traffic Type Direction RemarkType RemarkValue AppliedRecord ---------------------------------------------------------------------------------------- traffic-remark outbound 802.1p 2 IPv6 ACL 3011 ------------------------------------------------------------------------------------------ -------------------------------------------------------------------------------
Item |
Description |
---|---|
Wired port number | Number of the wired interface. |
Wired port type | Type of the wired interface. |
Wired port description | Description of the wired interface. |
Wired port STP | Whether to enable STP on the wired interface. |
Wired port user isolate | Whether to enable user isolation on the wired interface. |
Wired port PVID VLAN | PVID of the wired interface. |
Wired port VLAN tagged | VLAN to which the interface is added in tagged mode. |
Wired port VLAN untagged | VLAN to which the interface is added in untagged mode. |
Wired port Eth-trunk | Trunk ID to which the wired interface is bound. |
Wired port LLDP | Whether to enable LLDP on the wired interface. |
Wired port LLDP basic TLV management address | Management IP address of the wired interface. |
Wired port LLDP basic TLV port description | Wired interface description. |
Wired port LLDP basic TLV system capability | Wired interface capability set. |
Wired port LLDP basic TLV system description | Wired interface system description. |
Wired port LLDP basic TLV system name | Wired interface system name. |
Wired port CRC warn switch | Whether to enable the alarm function for CRC errors on the wired interface. |
Wired port CRC warn high threshold | Upper alarm threshold for CRC errors on the wired interface. |
Wired port CRC warn low threshold | Lower alarm threshold for CRC errors on the wired interface. |
Wired port IPv4 inbound ACL number | IPv4-based ACL in the inbound direction. |
Wired port IPv4 outbound ACL number | IPv4-based ACL in the outbound direction. |
Traffic Type | ACL-based packet filtering and re-marking implemented by the AP wired port.
|
Direction | Incoming or outgoing packets. |
AppliedRecord | IPv4/IPv6/L2 packet filtering and re-marking based on ACLs. |
RemarkType | Protocol type.
|
RemarkValue | Protocol type value.
|
# Display Eth-trunk interface configuration of AP huawei.
<HUAWEI> display ap wired-port eth-trunk 0 ap-name huawei ------------------------------------------------------------------------------ Eth-trunk ID : 0 Eth-trunk description : - STP : disable User isolate : disable PVID VLAN : - VLAN tagged : - VLAN untagged : - -------------------------------------------------------------------------------- Traffic Type Direction AppliedRecord ---------------------------------------------------------------------------------------- traffic-filter inbound IPv4 ACL 3012 ---------------------------------------------------------------------------------------- ---------------------------------------------------------------------------------------- Traffic Type Direction RemarkType RemarkValue AppliedRecord ---------------------------------------------------------------------------------------- traffic-remark outbound 802.1p 2 IPv6 ACL 3011 ------------------------------------------------------------------------------------------ ------------------------------------------------------------------------------
Item |
Description |
---|---|
Eth-trunk ID | ID of the Eth-trunk interface. |
Eth-trunk description | Description of the Eth-trunk interface. |
STP | Whether to enable STP on the Eth-trunk interface. |
User isolate | Whether to enable user isolation on the Eth-trunk interface. |
PVID VLAN | PVID of the Eth-trunk interface. |
VLAN tagged | VLAN to which the Eth-trunk interface is added in tagged mode. |
VLAN untagged | VLAN to which the Eth-trunk interface is added in untagged mode. |
Traffic Type | ACL-based packet filtering and re-marking implemented by the AP wired port.
|
Direction | Incoming or outgoing packets. |
AppliedRecord | IPv4/IPv6/L2 packet filtering and re-marking based on ACLs. |
RemarkType | Protocol type.
|
RemarkValue | Protocol type value.
|
display ap-group
Function
The display ap-group command displays configuration and reference information about an AP group.
Usage Guidelines
You can run the display ap-group command to view configuration and reference information about an AP group.
Example
# Display information about all AP groups.
<HUAWEI> display ap-group all
----------------------------------------------------------
Name APs
----------------------------------------------------------
default 1
ap-group1 0
----------------------------------------------------------
Total: 2
Item |
Description |
---|---|
Name |
Name of an AP group. |
APs |
Number of APs in an AP group. |
# Display information about the AP group default.
<HUAWEI> display ap-group name default -------------------------------------------------------------------------------- AP system profile : default Regulatory domain profile : default WIDS profile : default BLE profile : UUID : AP wired port profile Interface FE0 : default Interface FE1 : default Interface FE2 : default Interface FE3 : default Interface GE0 : default Interface GE1 : default Interface GE2 : default Interface GE3 : default Interface GE4 : default Interface GE5 : default Interface GE6 : default Interface GE7 : default Interface GE8 : default Interface GE9 : default Interface GE10 : default Interface GE11 : default Interface GE12 : default Interface GE13 : default Interface GE14 : default Interface GE15 : default Interface GE16 : default Interface GE17 : default Interface GE18 : default Interface GE19 : default Interface GE20 : default Interface GE21 : default Interface GE22 : default Interface GE23 : default Interface GE24 : default Interface GE25 : default Interface GE26 : default Interface GE27 : default Interface MultiGE0 : default Interface XGE0 : default Interface XGE1 : default Interface XGE2 : default Interface XGE3 : default Interface Eth-trunk0 : default Radio 0 Radio 2.4G profile : default Radio 5G profile : default VAP profile WLAN 15 : default(VLAN 15) Mesh profile : WDS profile : default Mesh whitelist profile : WDS whitelist profile : Location profile : Radio switch : enable Channel : - Channel bandwidth : 20mhz EIRP(dBm) : 127 Antenna gain(dB) : - Coverage distance(100 m) : 3 Work mode : normal Radio frequency : 2.4G Spectrum analysis : disable WIDS device detect : disable WIDS attack detect : - WIDS contain switch : disable Beacon switch : enable CTS switch : enable CTS delay time(us) : none Radio 1 Radio 5G profile : default VAP profile WLAN 15 : default(VLAN pool a) Mesh profile : WDS profile : Mesh whitelist profile : WDS whitelist profile : Location profile : Radio switch : enable Channel : - Channel bandwidth : 20mhz EIRP(dBm) : 127 Antenna gain(dB) : - Coverage distance(100 m) : 3 Work mode : normal Radio frequency : 5G Spectrum analysis : disable WIDS device detect : disable WIDS attack detect : - WIDS contain switch : disable Beacon switch : enable CTS switch : enable CTS delay time(us) : none Radio 2 Radio 5G profile : default VAP profile : Mesh profile : WDS profile : Mesh whitelist profile : WDS whitelist profile : Location profile : Radio switch : enable Channel : - Channel bandwidth : 20mhz EIRP(dBm) : 127 Antenna gain(dB) : - Coverage distance(100 m) : 3 Work mode : normal Radio frequency : 5G Spectrum analysis : disable WIDS device detect : disable WIDS attack detect : - WIDS contain switch : disable Card 1 Serial profile : preset-enjoyor-toeap Iot profile : UDP Port : - Card 2 Serial profile : preset-enjoyor-toeap Iot profile : UDP Port : - Card 3 Serial profile : preset-enjoyor-toeap Iot profile : UDP Port : -
Item |
Description |
---|---|
AP system profile | AP system profile referenced by an AP group. To configure the parameter, run the ap-system-profile (AP group view and AP view) command. |
Regulatory domain profile | Regulatory domain profile referenced by an AP group. To configure the parameter, run the regulatory-domain-profile command. |
WIDS profile | WIDS profile referenced by an AP group. To configure the parameter, run the wids-profile (AP group view and AP view) command. |
BLE profile | BLE profile referenced by an AP group. To configure the parameter, run the ble-profile (AP group view and AP view) command. |
UUID | UUID of a BLE broadcast frame sent by the AP's built-in Bluetooth module. To configure the parameter, run the broadcasting-content (AP group view and AP view) command. |
AP wired port profile | AP wired port profile referenced by an AP group. To configure the parameter, run the wired-port-profile (AP group view and view) command. |
Interface Interface-name | Interface name. |
Radio 0/Radio 1/Radio 2 | Radio ID. |
Radio 2.4G profile | 2G radio profile referenced by an AP group. To configure the parameter, run the radio-2g-profile command. |
Radio 5G profile | 5G radio profile referenced by an AP group. To configure the parameter, run the radio-5g-profile command. |
VAP profile | VAP profile referenced by an AP group. The displayed format is "VAP ID:VAP profile name (service VLAN defined when binding to the VAP profile, single VLAN, or VLAN pool)." To configure the parameter, run the vap-profile command. |
Mesh profile | Mesh profile referenced by an AP group. To configure the parameter, run the mesh-profile radio command. |
WDS profile | WDS profile referenced by an AP group. To configure the parameter, run the wds-profile radio command. |
Mesh whitelist profile | Mesh whitelist profile referenced by an AP group. To configure the parameter, run the mesh-whitelist-profile (AP group radio view or AP radio view) command. |
WDS whitelist profile | WDS whitelist profile referenced by an AP group. To configure the parameter, run the wds-whitelist-profile (AP group radio view or AP radio view) command. |
Location profile | Location profile referenced by an AP group. To configure the parameter, run the location-profile command. |
Radio switch | Whether a radio is enabled. To configure the parameter, run the radio disable command. |
Channel | Working channel of a radio. To configure the parameter, run the channel command. |
Channel bandwidth | Operating bandwidth of a radio. To configure the parameter, run the channel command. |
EIRP(dBm) | Transmit power of a radio, in dBm. To configure the parameter, run the eirp command. |
Antenna gain(dB) | Antenna gain of a radio, in dBm. To configure the parameter, run the antenna-gain command. |
Coverage distance(100 m) | Radio coverage distance parameter ( unit: 100 m). To configure the parameter, run the coverage distance command. |
Work mode | Working mode of a radio. To configure the parameter, run the work-mode command. |
Radio frequency | Working frequency of a radio. To configure the parameter, run the frequency command. |
Spectrum analysis | Whether spectrum analysis is enabled. To configure the parameter, run the spectrum-analysis enable command. |
WIDS device detect | Whether wireless device detection is enabled. To configure the parameter, run the wids device detect enable command. |
WIDS attack detect | Whether attack detection is enabled. To configure the parameter, run the wids attack detect enable command. |
WIDS contain switch | Whether rogue device containment is enabled. To configure the parameter, run the wids contain enable command. |
Beacon switch | Whether RUs are enabled to send Beacon frames. To configure this parameter, run the beacon disable command. |
CTS switch | Whether RUs are enabled to respond to STAs with CTS packets. To configure this parameter, run the cts disable command. |
CTS delay time(us) | Delay time after which RUs respond to STAs with CTS packets. To configure this parameter, run the cts delay command. |
Card 1/Card 2/Card 3/Card usb | IoT card. |
Serial profile | Bound serial profile. To configure the parameter, run the serial-profile (IoT card interface view) command. |
Iot profile | Bound IoT profile. To configure the parameter, run the iot-profile (IoT card interface view) command. |
UDP Port | UDP port. |
Wired port profile | Bound AP wired port profile. To configure the parameter, run the wired-port-profile (IoT card interface view) command. |
TCP Port | TCP port. |
display ap-system-profile
Function
The display ap-system-profile command displays reference and configuration information about an AP system profile.
Usage Guidelines
You can run the display ap-system-profile command to view configuration and reference information about an AP system profile.
Example
# Display information about all AP system profiles.
<HUAWEI> display ap-system-profile all
----------------------------------------------------------
Profile name Reference
----------------------------------------------------------
default 1
ap-system1 0
----------------------------------------------------------
Total: 2
Item |
Description |
---|---|
Profile name |
Name of an AP system profile. |
Reference |
Number of times an AP system profile is referenced. |
# Display information about the AP system profile default.
<HUAWEI> display ap-system-profile name default ------------------------------------------------------------------------------ AC priority : - Protect AC IP address : - Primary AC : - Backup AC : - AP management VLAN : - Keep service : disable Keep service allow new access : disable Keep service allow new access no auth : disable Temporary management switch : disable Card connect type : serial Mesh role : mesh-node STA access mode : disable STA whitelist profile : - STA blacklist profile : - EAPOL start mode : multicast EAPOL start transform : equal-bssid EAPOL response mode : unicast learning EAPOL response transform : equal-bssid AP LLDP message transmission delay time(s) : 2 AP LLDP message transmission hold multiplier : 4 AP LLDP message transmission interval time(s) : 30 AP LLDP restart delay time(s) : 2 AP LLDP admin status : txrx AP LLDP report interval time(s) : 30 AP LLDP report enable : disable AP high temperature threshold(degree C) : - AP low temperature threshold(degree C) : - AP CPU usage threshold(%) : 90 AP memory usage threshold(%) : 80 Alarm restriction : enable Alarm restriction period(s) : 60 Log server IP address : - Log record level : info Ethernet port MTU(byte) : 1500 Telnet : disable STelnet server : enable SFTP server : enable Console : enable Antenna output mode : split Led : on Led off time range : - Report disassoc request : enable Sample time(s) : 30 Dynamic blacklist aging time(s) : 600 MPP active reselection : disable AP report to : server Server IP : 0.0.0.0 Server port : - AC port : - Device aging-time(minute) : 3 PoE max power(mW) : 380000 PoE power reserved(%) : - PoE power threshold(%) : - PoE af inrush : disable PoE high inrush : disable USB : disable SSH config Client first time : disable User interface vty 0 Idle timeout : 5min 0s Screen length : 24 User interface vty 1 Idle timeout : 5min 0s Screen length : 24 User interface vty 2 Idle timeout : 5min 0s Screen length : 24 User interface vty 3 Idle timeout : 5min 0s Screen length : 24 User interface vty 4 Idle timeout : 5min 0s Screen length : 24 AC protect link switch mode : priority AC protect link switch packet loss echo probe time : 20 AC protect link switch packet loss start threshold(%) : 20 AC protect link switch packet loss gap threshold(%) : 15 ------------------------------------------------------------------------------
Item |
Description |
---|---|
AC priority | AC priority. To configure the parameter, run the priority command. |
Protect AC IP address | IP address of the standby AC. To configure the parameter, run the protect-ac command. |
Primary AC | IP address of the primary AC. To configure the parameter, run the primary-access command. |
Backup AC | IP address of the backup AC. To configure the parameter, run the backup-access command. |
AP management VLAN | Management VLAN of an AP. To configure the parameter, run the management-vlan command. |
Keep service | Whether service endurance upon CAPWAP link disconnection between the AP and AC is enabled.
To configure the parameter, run the keep-service enable command. |
Keep service allow new access | Whether new STAs are allowed to go online when an AP is offline.
To configure the parameter, run the keep-service enable allow new-access command. |
Keep service allow new access no auth | Whether the offline AP allows access of new STAs using Portal or MAC address authentication.
To configure the parameter, run the keep-service enable allow new-access no auth command. |
Temporary management switch | Status of the offline management and antenna alignment VAPs.
|
Card connect type | Communication connection type between IoT cards and APs. To configure the parameter, run the card connect-type command. |
Mesh role | Mesh role. To configure the parameter, run the mesh-role command. |
STA access mode | STA access mode. To configure the parameter, run the sta-access-mode command. |
STA whitelist profile | Name of a STA whitelist profile referenced by an AP system profile. To configure the parameter, run the sta-access-mode command. |
STA blacklist profile | Name of a STA blacklist profile referenced by an AP system profile. To configure the parameter, run the sta-access-mode command. |
EAPOL start mode | Eapol-start packet encapsulation mode. To configure the parameter, run the eapol-start dest-address transform-to command. |
EAPOL start transform | Eapol-start packet conversion mode. To configure the parameter, run the eapol-start dest-address transform-condition command. |
EAPOL response mode | Eapol-response packet encapsulation mode. To configure the parameter, run the eapol-response dest-address transform-to command. |
EAPOL response transform | Eapol-response packet conversion mode. To configure the parameter, run the eapol-response dest-address transform-condition command. |
AP LLDP message transmission delay time(s) | Delay for an AP to send LLDP packets to neighbors. To configure the parameter, run the lldp message-transmission delay (AP system profile view) command. |
AP LLDP message transmission hold multiplier | Hold time multiplier of AP information on neighbors. To configure the parameter, run the lldp message-transmission hold-multiplier (AP system profile view) command. |
AP LLDP message transmission interval time(s) | Interval at which an AP sends LLDP packets to neighbors. To configure the parameter, run the lldp message-transmission interval (AP system profile view) command. |
AP LLDP restart delay time(s) | Delay in re-enabling LLDP. To configure the parameter, run the lldp restart-delay command. |
AP LLDP admin status | LLDP mode on an AP.
To configure the parameter, run the lldp admin-status command. |
AP LLDP report enable | Whether an AP is enabled to report information about its LLDP neighbors. To configure the parameter, run the lldp report enable command. |
AP high temperature threshold(degree C) | High temperature alarm threshold of an AP. To configure the parameter, run the high-temperature threshold command. |
AP low temperature threshold(degree C) | Low temperature alarm threshold of an AP. To configure the parameter, run the low-temperature threshold command. |
AP CPU usage threshold(%) | CPU usage alarm threshold of an AP. To configure the parameter, run the cpu-usage threshold command. |
AP memory usage threshold(%) | Memory usage alarm threshold of an AP. To configure the parameter, run the memory-usage threshold command. |
Alarm restriction | Alarm suppression status of an AP. To configure the parameter, run the alarm-restriction disable command. |
Alarm restriction period(s) | Alarm suppression period of an AP. To configure the parameter, run the alarm-restriction period command. |
Log server IP address | IP address of the log server. To configure the parameter, run the log-server command. |
Log record level | Level of AP logs to be backed up. To configure the parameter, run the log-record-level command. |
Ethernet port MTU(byte) | MTU of Ethernet interfaces. To configure the parameter, run the mtu command. |
Telnet | Whether AP Telnet login is enabled. To configure the parameter, run the telnet enable command. |
STelnet server | STelnet server status of an AP. To configure the parameter, run the stelnet server disable command. |
SFTP server | SFTP server status of an AP. To configure the parameter, run the sftp server disable command. |
Console | Whether AP console port login is enabled. To configure the parameter, run the console disable command. |
Antenna output mode | Output mode of the AP's 2.4 GHz or 5 GHz antenna. To configure the parameter, run the antenna-output command. |
Led | Whether AP indicators are allowed to turn on.
|
Report disassoc request | Whether an AP is enabled to report disassociation request packets of STAs to the AC. To configure the parameter, run the report-disassoc-request disable command. |
Sample time(s) | AP's sampling interval. To configure the parameter, run the sample-time command. |
Dynamic blacklist aging time(s) | Aging time of a dynamic blacklist entry. To configure the parameter, run the dynamic-blacklist aging-time command. |
MPP active reselection | Active MPP reselection. To configure the parameter, run the mpp-active-reselection enable command. |
AP report to |
Mode in which an AP reports spectrum data.
To set the mode in which an AP reports spectrum data, run the spectrum-analysis server command. |
Server IP |
IP address of the spectrum server. To set the IP address of the spectrum server, run the spectrum-analysis server command. |
Server port |
Port number (UDP port number) of the spectrum server. To set the port number (UDP port number) of the spectrum server, run the spectrum-analysis server command. |
AC port |
Port number used by the AC to receive spectrum data (in UDP packets) from the AP. To set the port number, run the spectrum-analysis server command. |
Device aging-time(minute) |
Aging time of non-Wi-Fi device data on an AC. To set the aging time, run the spectrum-analysis non-wifi-device aging-time command. |
PoE max power(mW) | Maximum output power of the central AP. To configure the parameter, run the poe max-power (AP system profile view) command. |
PoE power reserved(%) | Percentage of reserved PoE power to the available PoE power on the central AP. To configure the parameter, run the poe power-reserved (AP system profile view) command. |
PoE power threshold(%) | Alarm threshold of PoE power consumption percentage on the central AP. To configure the parameter, run the poe power-threshold (AP system profile view) command. |
PoE af inrush | PoE standard of the central AP. To configure the parameter, run the poe af-inrush enable (AP system profile view) command. |
PoE high inrush | Whether the central AP is enabled to allow high inrush current during power-on. To configure the parameter, run the poe high-inrush enable (AP system profile view) command. |
Group address start | Start multicast group address. To configure the parameter, run the igmp-snooping group-bandwidth (AP system profile view) command. |
Group address end | End multicast group address. To configure the parameter, run the igmp-snooping group-bandwidth (AP system profile view) command. |
Bandwidth(kbps) | Bandwidth of global multicast groups on an AP. To configure the parameter, run the igmp-snooping group-bandwidth (AP system profile view) command. |
USB | USB status. To configure the parameter, run the usb enable (AP system profile view) command. |
SSH config | SSH configurations. |
Client first time | Whether initial authentication is enabled on the SSH client. To configure this parameter, run the ssh client first-time enable (AP system profile view) command. |
User interface vty X | VTY user interface X. The value of X ranges from 0 to 4. |
Idle timeout | Timeout period of user connections. To configure this parameter, run the user-interface vty idle-timeout command. |
Screen length | Number of lines on each terminal screen. To configure this parameter, run the user-interface vty screen-length command. |
AC protect link switch mode | Active/standby link switchover mode. To configure the parameter, run the ac protect link-switch mode command. |
AC protect link switch packet loss echo probe time | Number of Echo probe packets sent within a statistics collection interval. To configure the parameter, run the ac protect link-switch packet-loss echo-probe-time command. |
AC protect link switch packet loss start threshold(%) | Packet loss rate start threshold for an active/standby link switchover. To configure the parameter, run the ac protect link-switch packet-loss command. |
AC protect link switch packet loss gap threshold(%) | Packet loss rate difference threshold for an active/standby link switchover. To configure the parameter, run the ac protect link-switch packet-loss command. |
display ap-type
Usage Guidelines
You can run the display ap-type command to view all AP types supported by the device and information about an AP of the specified type.
Example
# Display all AP types supported by the device.
<HUAWEI> display ap-type all -------------------------------------------------------------------------------- ID Type -------------------------------------------------------------------------------- 17 AP6010SN-GN 19 AP6010DN-AGN 21 AP6310SN-GN 23 AP6510DN-AGN 25 AP6610DN-AGN 27 AP7110SN-GN 28 AP7110DN-AGN 29 AP5010SN-GN 30 AP5010DN-AGN 31 AP3010DN-AGN 33 AP6510DN-AGN-US 34 AP6610DN-AGN-US 35 AP5030DN 36 AP5130DN 37 AP7030DE 38 AP2010DN 39 AP8130DN 40 AP8030DN 42 AP9330DN 43 AP4030DN 44 AP4130DN 45 AP3030DN 46 AP2030DN 47 AP9131DN 48 AP9132DN 49 AP5030DN-S 50 AP3010DN-V2 51 AP4030DN-E 52 AD9430DN-24 53 AD9430DN-12 54 R230D 55 R240D 56 AP6050DN 57 AP6150DN 58 AP7050DE 59 AP7050DN-E 60 AP4030TN 61 AP4050DN-E 62 AP4050DN-HD 64 AP430-E 65 R250D 66 R250D-E 68 AP1010SN 69 AP2050DN 70 AP2050DN-E 71 AP8130DN-W 73 AP2050DN-S 75 AP4050DN 76 AP4051DN 77 AP4151DN 78 AP4050DN-S 79 AP4051DN-S 80 AP8050DN 81 AP8150DN 82 AP8050DN-S 83 AD9431DN-24X 84 R450D 85 AP1050DN-S 86 AP4051TN 87 AP6052DN 88 AP7052DN 89 AP7052DE 91 AP7152DN 92 AP8050TN-HD 93 AP8082DN 94 AP8182DN 103 AP100EC 104 AP200EC 105 AP300EC -------------------------------------------------------------------------------- Total: 69
Item |
Description |
---|---|
ID |
ID of an AP. |
Type |
Type of an AP. |
# Display information about AP type 19.
<HUAWEI> display ap-type id 19 -------------------------------------------------------------------------------- Type : AP6010DN-AGN AP wired port number : 1 AP wired port 0 type : GE Radio number : 2 Radio 0 type : 802.11bgn Maximal spatial streams : 2 Maximal antenna number : 2 Maximal VAP number : 16 Antenna gain : 4 Frequency switching : N Radio 1 type : 802.11an Maximal spatial streams : 2 Maximal antenna number : 2 Maximal VAP number : 16 Antenna gain : 5 Frequency switching : N Dual-5G high/low band support : All band(36~165) Maximum station number : 128 AP high temperature threshold(degree C): 102 AP low temperature threshold(degree C) : -13 Outdoor : N BLE : N Number of IoT cards : 0 PMF : Y Optical module : N Optical module information query : N Spectrum analysis : Y Mesh : Y WDS : Y Eth-Trunk : N --------------------------------------------------------------------------------
display capwap configuration
Usage Guidelines
You can run this command to view the interval for sending Keepalive packets, number of times for sending Keepalive packets, and priority of CAPWAP management packets.
Example
# Display the CAPWAP configuration.
<HUAWEI> display capwap configuration ------------------------------------------------------------ Source interface : vlanif100 Echo interval(seconds) : 25 Echo times : 6 Control priority(server to client) : 7 Control priority(client to server) : 7 Control-link DTLS encrypt : disable DTLS PSK value : ****** PSK mandatory match switch : enable Message-integrity PSK value : ****** Message-integrity check switch : enable Sensitive-info PSK value : ****** ------------------------------------------------------------
Item |
Description |
---|---|
Source interface |
AC's source interface. To configure the parameter, run the capwap source interface command. |
Echo interval(seconds) |
Interval for sending Keepalive packets. To specify the interval for sending Keepalive packets, run the capwap echo interval command. |
Echo times |
Number of times for sending Keepalive packets. If the AC or APs receive no response from each other after the Keepalive packets are sent for the specified number of times, the AC or APs consider that they are disconnected from their peer devices. To specify the number of times for sending Keepalive packets, run the capwap echo times command. |
Control priority(server to client) |
Priority of CAPWAP management packets from an AC to an AP. To configure the priority of CAPWAP management packets from an AC to an AP, run the capwap control-link-priority local priority-value command. |
Control priority(client to server) |
Priority of CAPWAP management packets from an AP to an AC. To configure the priority of CAPWAP management packets from an AP to an AC, run the capwap control-link-priority remote priority-value command. |
Control-link DTLS encrypt |
Whether CAPWAP control tunnel encryption using DTLS is enabled. To enable CAPWAP control tunnel encryption using DTLS, run the capwap dtls control-link encrypt command. |
DTLS PSK value |
PSK for DTLS encryption. To configure the PSK for DTLS encryption, run the capwap dtls psk command. |
PSK mandatory match switch |
Whether an AP is enabled to perform DTLS sessions with the AC using the default PSK. To enable an AP to perform DTLS sessions with the AC using the default PSK, run the capwap dtls psk-mandatory-match enable command. |
Message-integrity PSK value | PSK used for checking integrity of CAPWAP packets. To configure the parameter, run the capwap message-integrity psk command. |
Message-integrity check switch | Whether integrity check of CAPWAP packets is enabled. To configure the parameter, run the capwap message-integrity check disable command. |
Sensitive-info PSK value | PSK used for encrypting sensitive information. To configure the parameter, run the capwap sensitive-info psk command. |
display channel switch-record
Function
The display channel switch-record command displays channel switching records on the device.
Format
display channel switch-record { all | calibrate | ap-name ap-name radio radio-id | ap-id ap-id radio radio-id | reason reason }
Parameters
Parameter | Description | Value |
---|---|---|
all | Displays all channel switching records. |
- |
calibrate | Displays channel switching records for radio calibration. |
- |
ap-name ap-name | Displays channel switching records of the AP with a specified name. |
The AP name must exist. |
radio radio-id | Displays channel switching records of a specified AP radio. |
The radio ID must exist. |
ap-id ap-id | Displays channel switching records of the AP with a specified ID. |
The AP ID must exist. |
reason reason | Displays records of channel switching caused by a specified reason. |
The enumerated values are:
|
Usage Guidelines
This command enables you to view channel switching records on a device.
Run the display channel switch-record calibrate command to query channel or power switching records caused by radio calibration to check the calibration results.
Example
# Display all channel switching records.
<HUAWEI> display channel switch-record all Old/New: Old channel/New channel RfID : Radio ID ---------------------------------------------------------------------------------------------- AP ID AP name RfID Old/New Switch reason Switch time ---------------------------------------------------------------------------------------------- 1 L2-4f 0 1/6 wds 11:03:30 2014/9/28 ---------------------------------------------------------------------------------------------- Total : 1, printed : 1
Item |
Description |
---|---|
AP ID |
AP ID. |
AP name |
Name of an AP where channel switching has occurred. |
RfID |
Radio ID. |
Old/New |
Channels used before and after switching. |
Switch reason |
Reason for channel switching.
|
Switch time |
Time when channel switch occurred. |
# Display channel calibration records.
<HUAWEI> display channel switch-record calibrate
PCH : Pre channel
CCH : Current channel
PBW : Pre bandwidth
CBW : Current bandwidth
PE : Pre EIRP (dBm)
CE : Current EIRP (dBm)
PR : Pre RSSI (dBm)
CR : Current RSSI (dBm)
RfID: Radio ID
--------------------------------------------------------------------------------------------
AP ID AP name RfID PCH/CCH PBW/CBW PE/CE PR/CR Reason Time
--------------------------------------------------------------------------------------------
0 AP1 0 11/6 80M/40M+ 27/127 -32/-40 Period recheck 19:30:00 2016/04/11
0 AP2 0 6/11 20M/20M 27/127 -40/-48 Bad env 19:21:53 2016/04/11
--------------------------------------------------------------------------------------------
Total : 2
Item | Description |
---|---|
AP ID |
AP ID. |
AP name |
AP name. |
RfID |
Radio ID. |
PCH/CCH |
Channels before and after calibration. NOTE:
PCH/CCH changes may be discontinuous for a radio. |
PBW/CBW |
Bandwidth before and after calibration. |
PE/CE |
Power before and after calibration. NOTE:
PE/CE changes may be discontinuous for a radio. |
PR/CR |
Interference values before and after calibration. |
Reason |
Reason for triggering calibration.
|
Time |
Time when calibration is triggered. |
display distribute-ap
Format
display distribute-ap { all | ap-id ap-id | ap-mac ap-mac | ap-name ap-name | central-ap-id central-ap-id | central-ap-mac central-ap-mac | central-ap-name central-ap-name }
Parameters
Parameter |
Description |
Value |
---|---|---|
all |
Displays information about all RUs. |
- |
ap-id ap-id |
Displays information about the RU of a specified ID. |
The RU ID must exist. |
ap-mac ap-mac |
Displays information about the RU of a specified MAC address. |
The MAC address must exist. |
ap-name ap-name |
Displays information about the RU of a specified name. |
The RU name must exist. |
central-ap-id central-ap-id |
Displays information about the RUs connected to the central AP of a specified ID. |
The central AP ID must exist. |
central-ap-mac central-ap-mac |
Displays information about the RUs connected to the central AP of a specified MAC address. |
The MAC address of the central AP must exist. |
central-ap-name central-ap-name |
Displays information about the RUs connected to the central AP of a specified name. |
The central AP name must exist. |
Example
<HUAWEI> display distribute-ap all
Total AP information:
nor : normal [3]
-----------------------------------------------------------------------------------------------------------------
ID MAC Name Group IP Type State Central-AP ID Central-AP MAC Central-AP name
-----------------------------------------------------------------------------------------------------------------
1 fcb6-98f5-ec20 fcb6-98f5-ec20 240D-1 10.1.1.182 R240D nor 0 88cf-9837-98a0 88cf-9837-98a0
2 fcb6-98f5-7280 fcb6-98f5-7280 240D 10.1.1.158 R240D nor 0 88cf-9837-98a0 88cf-9837-98a0
3 fcb6-98f6-0ce0 ap1 default 10.1.1.181 R240D nor 0 88cf-9837-98a0 88cf-9837-98a0
-----------------------------------------------------------------------------------------------------------------
Total: 3
Item | Description |
---|---|
ID | RU ID. |
MAC | MAC address of the RU. |
Name | Name of the RU. |
Group | AP group to which an RU belongs. |
IP | IP address of the RU. |
Type | RU type. |
State | RU state, which is the same as a common AP. For details, see Table 11-5. |
Central-AP ID | ID of the central AP. |
Central-AP MAC | MAC address of the central AP. |
Central-AP name | Name of the central AP. |
AP State |
Description |
Possible Cause |
Handling Suggestion |
---|---|---|---|
commit-failed |
WLAN service configurations fail to be delivered to an AP after the AP goes online on an AC. |
After the AP goes online on the AC, WLAN service configurations are performed for the AP. If the link between the AP and AC is disconnected or the peer end has no response, the AP enters the commit-failed state. |
Check the network connection. |
committing |
WLAN service configurations are being delivered to an AP after the AP goes online on an AC. |
After the AP goes online on the AC, WLAN service configurations are being delivered to the AP. |
This is a normal state, and no action is required. |
config |
WLAN service configurations are being delivered to an AP when the AP is going online on an AC. |
After the AP establishes a link with the AC, WLAN service configurations are delivered to the AP. During this process, the AP is in config state. |
This is a normal state, and no action is required. |
config-failed |
WLAN service configurations fail to be delivered to an AP when the AP is going online on an AC. |
After the AP establishes a link with the AC, WLAN service configurations are delivered to the AP. If the configuration delivery fails due to various reasons (such as link disconnection), the AP enters the config-failed state. |
Check the network connection. |
download |
An AP is in upgrade state. |
When the AP is performing an upgrade, it enters the download state. |
When the AP upgrade is complete, check the AP state. |
fault |
An AP fails to go online. |
The AP fails to go online, which is usually caused by the following:
|
Handle the AP online failure. For details, see AP Online Failure in the Troubleshooting Insights. |
idle |
It is the initialization state of an AP before it establishes a link with the AC for the first time. |
The AP has not established a CAPWAP link with the AC, the MAC address and SN of the AP that is added offline are different from the actual ones, or license resources are insufficient. |
Perform the following operations. Check whether the AP is connected to the network. If the AP connection is normal, go to next step. Check the MAC address and SN of the AP that is added offline are different from the actual MAC address and SN of the AP. If not, perform the following operations:
If the fault persists, expand the license capacity. Note that RUs managed by the AC do not occupy license resources of the AC. |
name-conflicted |
The name of an AP conflicts with that of an existing AP. |
The name of an AP conflicts with the name of another AP that has been online on the same AC. |
Run the ap-rename ap-id ap-id new-name ap-new-name command to change the AP name. |
normal |
An AP is working properly. |
An AP successfully goes online on an AC. |
This is a normal state, and no action is required. |
standby |
The AP is in normal state on the standby AC. |
In the HSB, dual-link cold backup, or N+1 backup scenario, if the link between the active and standby ACs is established properly, the AP is in standby state on the standby AC and in normal state on the active AC. |
This is a normal state, and no action is required. |
ver-mismatch |
The version of an AP does not match that of an AC on which the AP is to go online. |
The versions of the AP and the AC mismatch. |
Log in to Huawei technical support website and download the release notes. Based on the version mapping, upgrade the AP or AC to the matching version.
|
countryCode-mismatch |
The country code of an AP does not match that of the AC on which the AP is about to go online. |
The current version of the AP does not support the country code configured on the AC. |
The AP does not support the country code. Upgrade the AP or change the country code configured on the AC. |
unauthed |
The AP is not authenticated. |
The AP fails to be authenticated. |
Run the ap-confirm command to confirm unauthenticated APs and allow them to go online. |
display mac-address ap-all
Parameters
Parameter |
Description |
Value |
---|---|---|
mac-address | Displays MAC address entries on all APs. |
The value is in H-H-H format, where H is a hexadecimal number of 1 to 4 digits. |
verbose | Displays detailed information of the dynamic entries. If verbose is not specified, brief information of the dynamic entries is displayed. |
- |
Usage Guidelines
When errors or attacks occur on the network, you can run the display mac-address ap-all command to locate the attack sources based on the displayed MAC addresses.
Example
# Display dynamic MAC address entries of all APs.
<HUAWEI> display mac-address 00e0-fc09-bcf9 ap-all
Info: Waiting for AP response...done.
-------------------------------------------------------------------------------
MAC Address VLAN/VSI Learned-From Type AP ID
-------------------------------------------------------------------------------
00e0-fc09-bcf9 1/- GigabitEthernet0/0/0 dynamic 1
00e0-fc09-bcf9 1/- GigabitEthernet0/0/0 dynamic 0
-------------------------------------------------------------------------------
Total: 2
Item |
Description |
---|---|
MAC Address | MAC address. |
VLAN/VSI | ID of the VLAN or name of the VSI that a MAC address belongs to. |
Learned-From | Interface on which the MAC address is learned. |
Type | Type of a MAC address entry. |
AP ID | AP ID. |
display mac-address { ap-id | ap-name }
Function
The display mac-address { ap-id | ap-name} command displays all dynamic MAC address entries on an AP's wired interface.
Parameters
Parameter |
Description |
Value |
---|---|---|
ap-id ap-id | Displays all dynamic MAC address entries on wired interfaces of the AP with the specified ID. |
The AP ID must exist. |
ap-name ap-name | Displays all dynamic MAC address entries on wired interfaces of the AP with the specified name. |
The AP name must exist. |
interface-type interface-number | Displays dynamic MAC address entries on a specified interface.
|
The following types of outbound interfaces are supported:
|
Usage Guidelines
You can run the display mac-address { ap-id | ap-name} command to check all dynamic MAC address entries on an AP's wired interface, including the MAC addresses and VLANs that the AP learns on specified interfaces.
Example
# Display dynamic MAC address entries on wired interfaces of the AP with ID 1.
<HUAWEI> display mac-address ap-id 1 ethernet 0
----------------------------------------------------------
MAC Address VLAN/VSI Learned-From Type
----------------------------------------------------------
1051-7254-5a80 1/- Ethernet0/0/0 dynamic
----------------------------------------------------------
Total: 1
display port-link-profile
Function
The display port-link-profile command displays reference and configuration information about an AP wired port link profile.
Usage Guidelines
You can run the display port-link-profile command to view configuration and reference information about an AP wired port link profile.
Example
# Display information about all AP wired port link profiles.
<HUAWEI> display port-link-profile all
----------------------------------------------------------
Profile name Reference
----------------------------------------------------------
default 1
port-link-profile-1 0
----------------------------------------------------------
Total: 2
Item |
Description |
---|---|
Profile name |
Name of an AP wired port link profile. |
Reference |
Number of times an AP wired port link profile is referenced. |
# Display information about the AP wired port link profile default.
<HUAWEI> display port-link-profile name default ---------------------------------------------------------------------------- LLDP enable : enable Management address : enable Port description : enable System capability : enable System description : enable System name : enable 802.3 TLV power : enable 802.3 TLV power format : 802.3bt Legacy TLV four pair power : enable CRC error alarm : disable CRC error high threshold(%): 50 CRC error Low threshold(%) : 20 PoE enable : enable PoE legacy : disable PoE power off time range : - PoE priority : low PoE force power : disable Shutdown switch : disable ----------------------------------------------------------------------------
Item |
Description |
---|---|
LLDP enable | Whether LLDP is enabled on an AP's wired interface. To configure the parameter, run the lldp enable command. |
Management address | Whether an AP's wired interface is allowed to advertise the Management-address TLV. To configure the parameter, run the lldp tlv-enable (AP wired port link profile view) command. |
Port description | Whether an AP's wired interface is allowed to advertise the Port-description TLV. To configure the parameter, run the lldp tlv-enable (AP wired port link profile view) command. |
System capability | Whether an AP's wired interface is allowed to advertise the System-capability TLV. To configure the parameter, run the lldp tlv-enable (AP wired port link profile view) command. |
System description | Whether an AP's wired interface is allowed to advertise the System-description TLV. To configure the parameter, run the lldp tlv-enable (AP wired port link profile view) command. |
System name | Whether an AP's wired interface is allowed to advertise the System-name TLV. To configure the parameter, run the lldp tlv-enable (AP wired port link profile view) command. |
802.3 TLV power | Whether an AP's wired port is allowed to advertise the Power via MDI TLV. To configure the parameter, run the lldp tlv-enable (AP wired port link profile view) command. |
802.3 TLV power format | 802.3 Power via MDI TLV advertised by an AP's wired port.
To configure the parameter, run the lldp dot3-tlv power (AP wired port link profile view)command. |
Legacy TLV four pair power | Whether an AP's wired port is allowed to advertise Cisco's proprietary TLVs. To configure the parameter, run the lldp tlv-enable legacy-tlv four-pair-power (AP wired port link profile view)command. |
CRC error alarm | Whether the alarm function for CRC errors is enabled on an AP's wired interface. To configure the parameter, run the crc-alarm enable command. |
CRC error high threshold(%) | Alarm threshold for CRC errors on an AP's wired interface. To configure the parameter, run the crc-alarm enable command. |
CRC error Low threshold(%) | Clear alarm threshold for CRC errors on an AP's wired interface. To configure the parameter, run the crc-alarm enable command. |
PoE enable | Whether the PoE function is enabled on the AP's interfaces. To configure the parameter, run the poe disable (AP wired port link profile view) command. |
PoE legacy | Whether PD compatibility check is enabled on the AP. To configure the parameter, run the poe legacy enable (AP wired port link profile view) command. |
PoE power off time range | PoE power-off time range. To configure the parameter, run the poe power-off time-range (AP wired port link profile view) command. |
PoE priority | Power priority of PoE interfaces on the AP. To configure the parameter, run the poe priority (AP wired port link profile view) command. |
PoE force power | Whether forcible PoE power supply is enabled on the AP's interfaces. To configure the parameter, run the poe force-power (AP wired port link profile view) command. |
Shutdown switch | Whether the AP's wired interface function is disabled. To configure the parameter, run the shutdown (AP wired port link profile view) command. |
display provision-ap parameter-list
Function
The display provision-ap parameter-list command displays AP provisioning parameters in the AP provisioning view.
Usage Guidelines
Before running the commit command to deliver the AP provisioning parameters configured in the AP provisioning view, you can run the display provision-ap parameter-list command to check whether the parameters are correct and complete.
If a parameter is displayed as - in the command output, the parameter of the APs is not changed after the configuration is committed.
Example
# Display AP provisioning parameters in the AP provisioning view.
<HUAWEI> display provision-ap parameter-list
--------------------------------------------------------------------------------
AP name : -
AP group : -
AP address mode : -
IPv4 address : -
IPv4 mask address : -
IPv4 gateway address : -
IPv4 AC list : -
--------------------------------------------------------------------------------
Item |
Description |
---|---|
AP name |
AP name. To set this parameter, run the ap-name (AP provisioning view) command. |
AP group |
Group that an AP joins. To set this parameter, run the ap-group (AP provisioning view) command. |
AP address mode |
Mode in which an AP obtains an IP address. To set this parameter, run the address-mode (AP provisioning view) command. |
IPv4 address |
Static IPv4 address of an AP. To set this parameter, run the ip-address (AP provisioning view) command. |
IPv4 mask address |
Static IPv4 address mask of an AP. To set this parameter, run the ip-address (AP provisioning view) command. |
IPv4 gateway address |
IPv4 address gateway of the AP. To set this parameter, run the ip-address (AP provisioning view) command. |
IPv4 AC list |
AC IPv4 address list of an AP. To set this parameter, run the ac-list(AP provisioning view) command. |
display radio
Parameters
Parameter |
Description |
Value |
---|---|---|
all |
Displays radio information about all APs. |
- |
ap-group ap-group-name |
Displays radio information about all APs in a specified AP group. |
The AP group must exist. |
ap-name ap-name |
Displays radio information about the AP with a specified name. |
The AP name must exist. |
ap-id ap-id |
Displays radio information about the AP with a specified ID. |
The AP ID must exist. |
Usage Guidelines
You can run the display radio command to view current working status of an AP radio.
Example
# Display radio information about all APs.
<HUAWEI> display radio all CH/BW:Channel/Bandwidth CE:Current EIRP (dBm) ME:Max EIRP (dBm) CU:Channel utilization ST:Status WM:Working Mode (normal/monitor/monitor dual-band-scan) ------------------------------------------------------------------------------------ AP ID Name RfID Band Type ST CH/BW CE/ME STA CU WM ------------------------------------------------------------------------------------ 1 60de-4474-9640 0 2.4G bgn on 6/20M 24/24 0 55% normal 1 60de-4474-9640 1 5G an on 56/20M 25/25 0 3% normal ------------------------------------------------------------------------------------ Total:2
Item |
Description |
---|---|
AP ID |
AP ID. |
Name |
AP name. |
RfID |
Radio ID of an AP. |
Band |
Working frequency of an AP radio. |
Type |
Protocol type of an AP radio.
|
ST |
Working status of an AP radio. |
CH/BW |
Channel/Bandwidth of an AP radio. This item is displayed as "-" if the radio has no VAP profile bound. |
CE/ME |
Current power of an AP radio/Maximum power of an AP radio. This item is displayed as "-" if the radio has no VAP profile bound. NOTE:
The value is calculated based on the
typical gain of the antenna used by the AP. |
STA |
Number of STAs connected to an AP radio. |
CU |
Channel usage. When the working mode of an AP radio is the monitor mode, this parameter is displayed as -.
|
WM |
Working mode of an AP radio.
|
display radio-2g-profile
Function
The display radio-2g-profile command displays configuration and reference information about a 2G radio profile.
Usage Guidelines
You can run this command to view configuration and reference information about a 2G radio profile.
Example
# Display information about all 2G radio profiles.
<HUAWEI> display radio-2g-profile all
----------------------------------------------------------
Profile name Reference
----------------------------------------------------------
default 1
----------------------------------------------------------
Total: 1
Item |
Description |
---|---|
Profile name |
Name of a 2G radio profile. |
Reference |
Number of times a 2G radio profile is referenced. |
# Display information of the 2G radio profile default.
<HUAWEI> display radio-2g-profile name default ------------------------------------------------------------ Radio type : 802.11n Power auto adjust : disable Beacon interval(TUs) : 100 Beamforming switch : disable Support short preamble : support Fragmentation threshold(Byte) : 2346 Channel switch announcement : enable Channel switch mode : continue Guard interval mode : normal HT A-MPDU switch : enable HT A-MPDU length limit : 3 RTS-CTS-mode : cts-to-self RTS-CTS-threshold : 2347 802.11bg basic rate : 1 2 802.11bg support rate : 1 2 5 6 9 11 12 18 24 36 48 54 Multicast rate 2.4G : 11 Interference detect switch : disable Co-channel frequency interference threshold(%) : 50 Adjacent-channel frequency interference threshold(%) : 50 Station interference threshold : 32 WMM switch : enable Mandatory switch : disable Auto-off start time : - Auto-off end time : - Wifi-light mode : signal-strength Utmost power switch : enable Rrm-profile : default Air-scan-profile : default Smart-antenna : disable Agile-antenna-polarization : disable CCA threshold(dBm) : - High PER threshold(%) : 80 Low PER threshold(%) : 20 Training interval(s) : auto Training mpdu num : 640 Throughput trigger training threshold (%) : 10 ------------------------------------------------------------ AP EDCA parameters: ------------------------------------------------------------ ECWmax ECWmin AIFSN TXOPLimit(32us) Ack-Policy AC_VO 3 2 1 47 normal AC_VI 4 3 1 94 normal AC_BE 6 4 3 0 normal AC_BK 10 4 7 0 normal ------------------------------------------------------------
Item |
Description |
---|---|
Radio type |
Radio type. To configure this parameter, run the radio-type (2G radio profile view) command. |
Power auto adjust |
Whether automatic per packet power adjustment is enabled. To configure this parameter, run the power auto-adjust enable command. |
Beacon interval(TUs) |
Interval at which an AP sends Beacon frames, in TU. To configure this parameter, run the beacon-interval command. |
Beamforming switch |
Whether the beamforming function is enabled. To configure this parameter, run the beamforming enable command. |
Support short preamble |
Whether the short preamble is supported. To configure this parameter, run the short-preamble disable command. |
Fragmentation threshold(Byte) |
Packet fragmentation threshold, in bytes. To configure this parameter, run the fragmentation-threshold command. |
Channel switch announcement |
Whether channel switch announcement is enabled. To configure this parameter, run the channel-switch announcement disable command. |
Channel switch mode |
Channel switch announcement mode. To configure this parameter, run the channel-switch mode command. |
Guard interval mode |
GI mode. To configure this parameter, run the guard-interval-mode command. |
HT A-MPDU switch |
Whether the MPDU aggregation function is enabled. To configure this parameter, run the ht a-mpdu disable command. |
HT A-MPDU length limit |
Maximum length of the aggregated MPDU frame. To configure this parameter, run the ht a-mpdu max-length-exponent command. |
RTS-CTS-mode |
RTS/CTS mode. To configure this parameter, run the rts-cts-mode command. |
RTS-CTS-threshold |
RTS/CTS threshold. To configure this parameter, run the rts-cts-threshold command. |
802.11bg basic rate |
802.11bg basic rate set. To configure this parameter, run the dot11bg basic-rate command. |
802.11bg support rate |
802.11bg supported rate set. To configure this parameter, run the dot11bg supported-rate command. |
Multicast rate 2.4G |
Multicast rate of wireless packets on the 2.4GHz radio. To configure this parameter, run the multicast-rate command. |
Interference detect switch |
Whether interference detection is enabled. To configure this parameter, run the interference detect-enable command. |
Co-channel frequency interference threshold(%) |
Alarm threshold for co-channel interference. To configure this parameter, run the interference co-channel threshold command. |
Adjacent-channel frequency interference threshold(%) |
Alarm threshold for adjacent-channel interference. To configure this parameter, run the interference adjacent-channel threshold command. |
Station interference threshold |
Alarm threshold for STA interference. To configure this parameter, run the interference station threshold command. |
WMM switch |
Whether the WMM function is enabled. To configure this parameter, run the wmm disable command. |
Mandatory switch |
Whether to allow STAs that do not support WMM to connect to a WMM-enabled AP. To configure this parameter, run the wmm mandatory enable command. |
Auto-off start time |
Start time for scheduled VAP auto-off. To configure this parameter, run the auto-off service command. |
Auto-off end time |
End time for scheduled VAP auto-off. To configure this parameter, run the auto-off service command. |
Wifi-light mode |
Information reflected by the blinking frequency of the Wireless LED. To configure this parameter, run the wifi-light command. |
Rrm-profile |
Name of the RRM profile referenced by a radio profile. To configure this parameter, run the rrm-profile (radio profile view) command. |
Air-scan-profile |
Name of the air scan profile referenced by a radio profile. To configure this parameter, run the air-scan-profile (radio profile view) command. |
Smart-antenna |
Status of the smart antenna function. To configure this parameter, run the smart-antenna { enable | disable } command. |
Agile-antenna-polarization |
Status of the self-adaptive polarization for agile antennas. To configure this parameter, run the agile-antenna-polarization command. |
CCA threshold(dBm) |
CCA threshold for APs. To configure this parameter, run the cca-threshold command. |
High PER threshold(%) |
Upper valid PER threshold in the smart antenna algorithm. To configure this parameter, run the smart-antenna valid-per-scope command. |
Low PER threshold(%) |
Lower valid PER threshold in the smart antenna algorithm. To configure this parameter, run the smart-antenna valid-per-scope command. |
Training interval(s) |
Smart antenna training interval. To configure this parameter, run the smart-antenna training-interval command. |
Training mpdu num |
Number of MPDUs sent by an AP to STAs during smart antenna training. To configure this parameter, run the smart-antenna training-mpdu-number command. |
Throughput trigger training threshold (%) |
Sudden throughput change threshold that triggers smart antenna training. To configure this parameter, run the smart-antenna throughput-triggered-training command. |
Utmost power switch |
Whether a radio is enabled to send packets at maximum power. To configure this parameter, run the utmost-power disable command. |
AP EDCA parameters |
EDCA parameters and ACK policy on an AP. To configure this parameter, run the wmm edca-ap command. |
AC_VO |
AC_VO packets. To configure this parameter, run the wmm edca-ap command. |
AC_VI |
AC_VI packets. To configure this parameter, run the wmm edca-ap command. |
AC_BE |
AC_BE packets. To configure this parameter, run the wmm edca-ap command. |
AC_BK |
AC_BK packets. To configure this parameter, run the wmm edca-ap command. |
ECWmax |
Exponent form of the maximum contention window. ECWmin and ECWmax determine the average backoff time. To configure this parameter, run the wmm edca-ap command. |
ECWmin |
Exponent form of the minimum contention window. ECWmin and ECWmax determine the average backoff time. To configure this parameter, run the wmm edca-ap command. |
AIFSN |
Arbitration inter frame spacing number (AIFSN), which determines the channel idle time. To configure this parameter, run the wmm edca-ap command. |
TXOPLimit(32us) |
Transmission opportunity limit (TXOPLimit), which determines the maximum duration in which a STA can occupy a channel. A larger value indicates a longer duration. To configure this parameter, run the wmm edca-ap command. |
Ack-Policy |
ACK policy. It includes:
To configure this parameter, run the wmm edca-ap command. |
display radio-5g-profile
Function
The display radio-5g-profile command displays configuration and reference information about a 5G radio profile.
Usage Guidelines
You can run this command to view configuration and reference information about a 5G radio profile.
Example
# Display information about all 5G radio profiles.
<HUAWEI> display radio-5g-profile all
----------------------------------------------------------
Profile name Reference
----------------------------------------------------------
default 1
----------------------------------------------------------
Total: 1
Item |
Description |
---|---|
Profile name |
Name of a 5G radio profile. |
Reference |
Number of times a 5G radio profile is referenced. |
# Display information of the 5G radio profile default.
<HUAWEI> display radio-5g-profile name default ------------------------------------------------------------ Radio type : 802.11ac Power auto adjust : disable Beacon interval(TUs) : 100 Beamforming switch : disable Fragmentation threshold(Byte) : 2346 Channel switch announcement : support Channel switch mode : continue Guard interval mode : normal HT A-MPDU switch : disable HT A-MPDU length limit : 3 VHT A-MPDU length limit : 7 VHT A-MSDU switch : disable VHT A-MSDU Max frame number : 2 RTS-CTS-mode : CTS-TO-SELF RTS-CTS-threshold : 2347 802.11a basic rate : 6 12 24 802.11a support rate : 6 9 12 18 24 36 48 54 Multicast rate 5G : 6 VHT mcs : 9 9 9 Interference detect switch : disable Co-channel frequency interference threshold(%) : 50 Adjacent-channel frequency interference threshold(%) : 50 Station interference threshold :32 WMM switch : enable Mandatory switch : disable Auto-off start time : - Auto-off end time : - WiFi-light mode : signal-strength Utmost power switch : enable Rrm-profile : default Air-scan-profile : default Smart-antenna : disable Agile-antenna-polarization : disable CCA threshold(dBm) : - High PER threshold(%) : 80 Low PER threshold(%) : 20 Training interval(s) : auto Training mpdu num : 640 Throughput trigger training threshold (%) : 10 ------------------------------------------------------------ AP EDCA parameters: ------------------------------------------------------------ ECWmax ECWmin AIFSN TXOPLimit(32us) Ack-Policy AC_VO 3 2 1 47 normal AC_VI 4 3 1 94 normal AC_BE 6 4 3 0 normal AC_BK 10 4 7 0 normal ------------------------------------------------------------
Item |
Description |
---|---|
Radio type |
Radio type. To configure this parameter, run the radio-type (5G radio profile view) command. |
Power auto adjust |
Whether automatic per packet power adjustment is enabled. To configure this parameter, run the power auto-adjust enable command. |
Beacon interval(TUs) |
Interval at which an AP sends Beacon frames, in TU. To configure this parameter, run the beacon-interval command. |
Beamforming switch |
Whether the beamforming function is enabled. To configure this parameter, run the beamforming enable command. |
Fragmentation threshold(Byte) |
Packet fragmentation threshold, in bytes. To configure this parameter, run the fragmentation-threshold command. |
Channel switch announcement |
Whether channel switch announcement is enabled. To configure this parameter, run the channel-switch announcement disable command. |
Channel switch mode |
Channel switch announcement mode. To configure this parameter, run the channel-switch mode command. |
Guard interval mode |
GI mode. To configure this parameter, run the guard-interval-mode command. |
HT A-MPDU switch |
Whether the MPDU aggregation function is enabled. To configure this parameter, run the ht a-mpdu disable command. |
HT A-MPDU length limit |
Maximum length of the aggregated MPDU frame. To configure this parameter, run the ht a-mpdu max-length-exponent command. |
VHT A-MPDU length limit |
Maximum length of the frame aggregated in A-MSDU mode. To configure this parameter, run the vht a-mpdu max-length-exponent command. |
VHT A-MSDU switch |
Whether to enable the function of sending 802.11 packets in A-MSDU mode. To configure this parameter, run the vht a-msdu enable command. |
VHT A-MSDU Max frame number |
Maximum number of subframes that can be aggregated into an A-MSDU. To configure this parameter, run the vht a-msdu max-frame-num command. |
RTS-CTS-mode |
RTS/CTS mode. To configure this parameter, run the rts-cts-mode command. |
RTS-CTS-threshold |
RTS/CTS threshold. To configure this parameter, run the rts-cts-threshold command. |
802.11a basic rate |
802.11a basic rate set. To configure this parameter, run the dot11a basic-rate command. |
802.11a support rate |
802.11a supported rate set. To configure this parameter, run the dot11a supported-rate command. |
Multicast rate 5G |
Multicast rate of wireless packets on the 5 GHz radio. To configure this parameter, run the multicast-rate command. |
VHT mcs |
Maximum MCS value corresponding to a specific number of 802.11ac spatial streams. To configure this parameter, run the vht mcs-map command. |
Interference detect switch |
Whether interference detection is enabled. To configure this parameter, run the interference detect-enable command. |
Co-channel frequency interference threshold(%) |
Alarm threshold for co-channel interference. To configure this parameter, run the interference co-channel threshold command. |
Adjacent-channel frequency interference threshold(%) |
Alarm threshold for adjacent-channel interference. To configure this parameter, run the interference adjacent-channel threshold command. |
Station interference threshold |
Alarm threshold for STA interference. To configure this parameter, run the interference station threshold command. |
WMM switch |
Whether the WMM function is enabled. To configure this parameter, run the wmm disable command. |
Mandatory switch |
Whether to allow STAs that do not support WMM to connect to a WMM-enabled AP. To configure this parameter, run the wmm mandatory enable command. |
Auto-off start time |
Start time for scheduled VAP auto-off. To configure this parameter, run the auto-off service command. |
Auto-off end time |
End time for scheduled VAP auto-off. To configure this parameter, run the auto-off service command. |
WiFi-light mode |
Information reflected by the blinking frequency of the Wireless LED. To configure this parameter, run the wifi-light command. |
Rrm-profile |
Name of the RRM profile referenced by a radio profile. To configure this parameter, run the rrm-profile (radio profile view) command. |
Air-scan-profile |
Name of the air scan profile referenced by a radio profile. To configure this parameter, run the air-scan-profile (radio profile view) command. |
Utmost power switch |
Whether a radio is enabled to send packets at maximum power. To configure this parameter, run the utmost-power disable command. |
Smart-antenna |
Status of the smart antenna function. To configure this parameter, run the smart-antenna { enable | disable } command. |
Agile-antenna-polarization |
Status of the self-adaptive polarization for agile antennas. To configure this parameter, run the agile-antenna-polarization command. |
CCA threshold(dBm) |
CCA threshold for APs. To configure this parameter, run the cca-threshold command. |
High PER threshold(%) |
Upper valid PER threshold in the smart antenna algorithm. To configure this parameter, run the smart-antenna valid-per-scope command. |
Low PER threshold(%) |
Lower valid PER threshold in the smart antenna algorithm. To configure this parameter, run the smart-antenna valid-per-scope command. |
Training interval(s) |
Smart antenna training interval. To configure this parameter, run the smart-antenna training-interval command. |
Training mpdu num |
Number of MPDUs sent by an AP to STAs during smart antenna training. To configure this parameter, run the smart-antenna training-mpdu-number command. |
Throughput trigger training threshold (%) |
Sudden performance change threshold that triggers smart antenna training. To configure this parameter, run the smart-antenna throughput-triggered-training command. |
AP EDCA parameters |
EDCA parameters and ACK policy on an AP. To configure this parameter, run the wmm edca-ap command. |
AC_VO |
AC_VO packets. To configure this parameter, run the wmm edca-ap command. |
AC_VI |
AC_VI packets. To configure this parameter, run the wmm edca-ap command. |
AC_BE |
AC_BE packets. To configure this parameter, run the wmm edca-ap command. |
AC_BK |
AC_BK packets. To configure this parameter, run the wmm edca-ap command. |
ECWmax |
Exponent form of the maximum contention window. ECWmin and ECWmax determine the average backoff time. To configure this parameter, run the wmm edca-ap command. |
ECWmin |
Exponent form of the minimum contention window. ECWmin and ECWmax determine the average backoff time. To configure this parameter, run the wmm edca-ap command. |
AIFSN |
Arbitration inter frame spacing number (AIFSN), which determines the channel idle time. To configure this parameter, run the wmm edca-ap command. |
TXOPLimit(32us) |
Transmission opportunity limit (TXOPLimit), which determines the maximum duration in which a STA can occupy a channel. A larger value indicates a longer duration. To configure this parameter, run the wmm edca-ap command. |
Ack-Policy |
ACK policy. It includes:
To configure this parameter, run the wmm edca-ap command. |
display references ap-system-profile
Function
The display references ap-system-profile command displays reference information about an AP system profile.
Usage Guidelines
You can run the display references ap-system-profile command to view reference information about an AP system profile.
Example
# Display reference information of the AP system profile default.
<HUAWEI> display references ap-system-profile name default
--------------------------------------------------------------------------
Reference type Reference name
--------------------------------------------------------------------------
AP group ap-group1
--------------------------------------------------------------------------
Total: 1
display references port-link-profile
Function
The display references port-link-profile command displays reference information about an AP wired port link profile.
Usage Guidelines
You can run the display references port-link-profile command to view reference information about an AP wired port link profile.
Example
# Display reference information about the AP wired port link profile default.
<HUAWEI> display references port-link-profile name default
-------------------------------------------------------------------
Reference type Reference name
-------------------------------------------------------------------
AP wiredport profile wired-port1
-------------------------------------------------------------------
Total:1
display references radio-2g-profile
Function
The display references radio-2g-profile command displays reference information about a 2G radio profile.
Usage Guidelines
You can run the display references radio-2g-profile command to view reference information about a 2G radio profile.
Example
# Display reference information about the 2G radio profile default.
<HUAWEI> display references radio-2g-profile name default ---------------------------------------------------------------------- Reference type Reference name Reference radio ---------------------------------------------------------------------- AP-group ap-group1 Radio-0 ---------------------------------------------------------------------- Total:1
Item |
Description |
---|---|
Reference type |
Type of the profile by which a 2G radio profile is referenced. |
Reference name |
Name of the profile by which a 2G radio profile is referenced. |
Reference radio |
Radio to which a 2G radio profile is referenced. |
display references radio-5g-profile
Function
The display references radio-5g-profile command displays reference information about a 5G radio profile.
Usage Guidelines
You can run the display references radio-5g-profile command to view reference information about a 5G radio profile.
Example
# Display reference information about the 5G radio profile default.
<HUAWEI> display references radio-5g-profile name default ---------------------------------------------------------------------- Reference type Reference name Reference radio ---------------------------------------------------------------------- AP-group ap-group1 Radio-0 ---------------------------------------------------------------------- Total:1
Item |
Description |
---|---|
Reference type |
Type of the profile by which a 5G radio profile is referenced. |
Reference name |
Name of the profile by which a 5G radio profile is referenced. |
Reference radio |
Radio to which a 5G radio profile is referenced. |
display references regulatory-domain-profile
Function
The display references regulatory-domain-profile command displays reference information about a regulatory domain profile.
Usage Guidelines
You can run the display references regulatory-domain-profile command to view reference information about a regulatory domain profile.
Example
# Display reference information about the regulatory domain profile default.
<HUAWEI> display references regulatory-domain-profile name default
------------------------------------------------------------
Reference type Reference name
------------------------------------------------------------
AP-group default
AP-group hw
------------------------------------------------------------
Total: 2
display references ssid-profile
Function
The display references ssid-profile command displays reference information about an SSID profile.
Usage Guidelines
You can run the display references ssid-profile command to view reference information about an SSID profile.
Example
# Display reference information about the SSID profile default.
<HUAWEI> display references ssid-profile name default
-------------------------------------------------------------------
Reference type Reference name
-------------------------------------------------------------------
VAP profile vap-profile1
-------------------------------------------------------------------
Total:1
display references vap-profile
Function
The display references vap-profile command displays reference information about a VAP profile.
Usage Guidelines
You can run the display references vap-profile command to view reference information about a VAP profile.
Example
# Display reference information about the VAP profile default.
<HUAWEI> display references vap-profile name default
--------------------------------------------------------------------------------
Reference type Reference name Reference radio WLAN ID
--------------------------------------------------------------------------------
AP group group1 Radio-0 1
--------------------------------------------------------------------------------
Total: 1
Item |
Description |
---|---|
Reference type |
Type of the profile by which a VAP profile is referenced. |
Reference name |
Name of the profile by which a VAP profile is referenced. |
Reference radio |
AP radio by which a VAP profile is referenced. |
WLAN ID |
WLAN ID of a VAP. |
display references vlan pool
Parameters
Parameter | Description | Value |
---|---|---|
pool-name | Displays reference information about a specified VLAN pool. |
The VLAN pool must exist. |
Usage Guidelines
You can run the display references vlan pool command to view profiles by which a VLAN pool is referenced.
Example
# Display reference information about the VLAN pool pool1.
<HUAWEI> display references vlan pool pool1
--------------------------------------------------------------------------------
Reference type Reference name Reference radio WLAN ID
--------------------------------------------------------------------------------
AP group default Radio-0 1
AP group default Radio-1 1
AP group default Radio-2 1
AP group default Radio-0 2
AP group default Radio-1 2
AP group default Radio-2 2
AP ID 0 Radio-0 2
AP ID 0 Radio-1 2
VAP profile 1
user group 123
--------------------------------------------------------------------------------
Total: 10
display references wired-port-profile
Function
The display references wired-port-profile command displays reference information about an AP wired port profile.
Usage Guidelines
You can run the display references wired-port-profile command to view reference information about an AP wired port profile.
Example
# Display reference information about the AP wired port profile default.
<HUAWEI> display references wired-port-profile name default ---------------------------------------------------------------------------- Reference type Reference name Reference port ---------------------------------------------------------------------------- AP group default Ethernet0 AP group default Ethernet1 AP group default Ethernet2 AP group default Ethernet3 AP group default GigabitEthernet0 AP group default GigabitEthernet1 AP group default GigabitEthernet2 AP group default GigabitEthernet3 AP group default GigabitEthernet4 AP group default GigabitEthernet5 AP group default GigabitEthernet6 AP group default GigabitEthernet7 AP group default GigabitEthernet8 AP group default GigabitEthernet9 AP group default GigabitEthernet10 AP group default GigabitEthernet11 AP group default GigabitEthernet12 AP group default GigabitEthernet13 AP group default GigabitEthernet14 AP group default GigabitEthernet15 AP group default GigabitEthernet16 AP group default GigabitEthernet17 AP group default GigabitEthernet18 AP group default GigabitEthernet19 AP group default GigabitEthernet20 AP group default GigabitEthernet21 AP group default GigabitEthernet22 AP group default GigabitEthernet23 AP group default GigabitEthernet24 AP group default GigabitEthernet25 AP group default GigabitEthernet26 AP group default GigabitEthernet27 AP group default MultiGE0 AP group default XGigabitEthernet0 AP group default XGigabitEthernet1 AP group default XGigabitEthernet2 AP group default XGigabitEthernet3 AP group default Ethernet-Trunk0 ---------------------------------------------------------------------------- Total: 41
Item |
Description |
---|---|
Reference type |
Type of the profile by which an AP wired port profile is referenced. |
Reference name |
Name of the profile by which an AP wired port profile is referenced. |
Reference port |
Interface by which an AP wired port profile is referenced. |
display regulatory-domain-profile
Function
The display regulatory-domain-profile command displays configuration and reference information about a regulatory domain profile.
Usage Guidelines
You can run the display regulatory-domain-profile command to view configuration and reference information about a regulatory domain profile.
Example
# Display information about all regulatory profiles.
<HUAWEI> display regulatory-domain-profile all
------------------------------------------------------------
Profile name Reference
------------------------------------------------------------
default 6
------------------------------------------------------------
Total: 1
Item |
Description |
---|---|
Profile name |
Regulatory domain profile name. |
Reference |
Number of times a regulatory domain profile is referenced. |
# Display information about the regulatory domain profile default.
<HUAWEI> display regulatory-domain-profile name default ------------------------------------------------------------ Profile name : default Country code : CN 2.4G dca channel-set : 1,6,11 5G dca bandwidth : 20mhz 5G dca channel-set : 149,153,157,161,165 Wideband switch : enable Channel load mode : outdoor ------------------------------------------------------------
Item |
Description |
---|---|
Profile name |
Regulatory domain profile name. |
Country code |
Country code. To configure the parameter, run the country-code command. |
2.4G dca channel-set |
2.4G radio calibration channel set. To configure the parameter, run the dca-channel channel-set command. |
5G dca bandwidth |
5G radio calibration bandwidth. To configure the parameter, run the dca-channel bandwidth command. |
5G dca channel-set |
5G radio calibration channel set. To configure the parameter, run the dca-channel channel-set command. |
Wideband switch |
Indicates whether the wideband function, that is, the 4.9
GHz frequency band, of the regulatory domain profile is enabled.
To configure this parameter, run the wideband enable command. |
Channel load mode |
Channel load mode.
To configure this parameter, run the channel-load-mode indoor command. |
display snmp-agent trap feature-name wlan all
Function
The display snmp-agent trap feature-name wlan all command displays the status of all traps on the WLAN module.
Usage Guidelines
Usage Scenario
After the trap function of a specified feature is enabled, you can run the display snmp-agent trap feature-name wlan all command to check the status of all traps of WLAN. You can use the snmp-agent trap enable feature-name wlan command to enable the trap function of WLAN.
Prerequisites
SNMP has been enabled. See snmp-agent.
Example
# Display all the traps of the WLAN module.
<HUAWEI>display snmp-agent trap feature-name wlan all
------------------------------------------------------------------------------
Feature name: WLAN
Trap number : 121
------------------------------------------------------------------------------
Trap name Default switch status Current switch status
hwApFaultNotify on on
hwApNormalNotify on on
hwApTypeNotMatchNotify on on
hwApPingResultNotify on on
hwApUpdateBeginNotify on on
......
hwApVersionMismatchNotify on on
Item |
Specification |
---|---|
Feature name |
Name of the module that the trap belongs to. |
Trap number |
Number of traps. |
Trap name |
Name of traps. |
Default switch status |
Default status of the trap function:
|
Current switch status |
Status of the trap function:
|
display ssid-profile
Function
The display ssid-profile command displays configuration and reference information about an SSID profile.
Usage Guidelines
You can run the display ssid-profile command to view configuration and reference information about an SSID profile.
Example
# Display information about all SSID profiles.
<HUAWEI> display ssid-profile all
---------------------------------------------------------------
Profile name Beacon 2.4G/5G rate(Mbps) Reference SSID
---------------------------------------------------------------
default 1/6 2 HUAWEI-WLAN
---------------------------------------------------------------
Total: 1
Item |
Description |
---|---|
Profile name |
SSID profile name. |
Beacon 2.4G/5G rate(Mbps) |
Rate at which 2.4 GHz or 5 GHz Beacon frames are sent. |
Reference |
Number of times an SSID profile is referenced. |
SSID |
SSID name. |
# Display information about the SSID profile default.
<HUAWEI> display ssid-profile name default ------------------------------------------------------------------- Profile ID : 0 SSID : HUAWEI-WLAN SSID hide : disable Association timeout(min) : 5 Max STA number : 64 Reach max STA SSID hide : enable Legacy station : enable DTIM interval : 1 Beacon 2.4G rate(Mbps) : 1 Beacon 5G rate(Mbps) : 6 Deny-broadcast-probe : disable Probe-response-retry num : 1 802.11r : disable 802.11r authentication : - Reassociation timeout (s) : - QOS CAR inbound CIR(kbit/s) : - QOS CAR inbound PIR(kbit/s) : - QOS CAR inbound CBS(byte) : - QOS CAR inbound PBS(byte) : - U-APSD : enable Active dull client : disable MU-MIMO : disable MU-MIMO optimize : disable QBSS load : disable Single txchain : disable Advertise AP name : disable ------------------------------------------------------------------- WMM EDCA client parameters: ------------------------------------------------------------------- ECWmax ECWmin AIFSN TXOPLimit AC_VO 3 2 2 47 AC_VI 4 3 2 94 AC_BE 10 4 3 0 AC_BK 10 4 7 0 -------------------------------------------------------------------
Item |
Description |
---|---|
Profile ID | ID of an SSID profile. |
SSID | SSID name. To configure the parameter, run the ssid command. |
SSID hide | SSID hiding. To configure the parameter, run the ssid-hide enable command. |
Association timeout(min) | Association timeout period. To configure the parameter, run the association-timeout command. |
Max STA number | Maximum number of users. To configure the parameter, run the max-sta-number (SSID profile view) command. |
Reach max STA SSID hide |
Whether to automatically hide SSIDs when the number of users reaches the maximum. To configure the parameter, run the reach-max-sta hide-ssid disable command. |
Legacy station | Whether to permit access of non-HT STAs. To configure the parameter, run the legacy-station disable command. |
DTIM interval | DTIM interval. To configure the parameter, run the dtim-interval command. |
Beacon 2.4G rate(Mbps) |
Rate at which 2.4 GHz Beacon frames are sent. To configure the parameter, run the beacon-2g-rate command. |
Beacon 5G rate(Mbps) |
Rate at which 5 GHz Beacon frames are sent. To configure the parameter, run the beacon-5g-rate command. |
Deny-broadcast-probe |
Whether an AP is configured not to respond to broadcast Probe Request frames. To configure the parameter, run the deny-broadcast-probe enable command. |
Probe-response-retry num |
Number of times Probe Response packets are retransmitted. To configure the parameter, run the probe-response-retry command. |
802.11r | 802.11r roaming. To configure the parameter, run the dot11r enable command. |
802.11r authentication | 802.11r authentication mode. |
Reassociation timeout (s) | 802.11r reassociation timeout interval. To configure the parameter, run the dot11r enable command. |
QOS CAR inbound CIR(kbit/s) | CIR in the QoS CAR profile applied to the inbound direction
of an interface, which is the allowed rate at which traffic can pass
through. To configure the parameter, run the qos car (SSID profile view) command. |
QOS CAR inbound PIR(kbit/s) | PIR in the QoS CAR profile applied to the inbound direction
of an interface, which is the maximum rate of traffic that can pass
through an interface. To configure the parameter, run the qos car (SSID profile view) command. |
QOS CAR inbound CBS(byte) | CBS in the QoS CAR profile applied to the inbound direction
of an interface, which is the average volume of burst traffic that
can pass through an interface. To configure the parameter, run the qos car (SSID profile view) command. |
QOS CAR inbound PBS(byte) | PBS in the QoS CAR profile applied to the inbound direction
of an interface, which is the maximum volume of burst traffic that
can pass through an interface. To configure the parameter, run the qos car (SSID profile view) command. |
U-APSD | Whether the U-APSD function is enabled. To configure the parameter, run the u-apsd enable command. |
Active dull client | Whether the function of preventing terminals from entering energy-saving mode is enabled. To configure the parameter, run the active-dull-client enable command. |
MU-MIMO | Whether the MU-MIMO function is enabled. To configure the parameter, run the mu-mimo disable command. |
MU-MIMO optimize | Whether the MU-MIMO optimization function is enabled. To configure the parameter, run the mu-mimo optimize enable command. |
QBSS load |
Whether the QBSS load function is enabled. To configure the parameter, run the qbss-load enable command. |
Single txchain |
Whether to enable the single-antenna transmission mode. To configure the parameter, run the single-txchain enable command. |
Advertise AP name | Whether Beacon frames are enabled to carry the AP name. To configure the parameter, run the advertise-ap-name enable command. |
AC_VO |
AC_VO packets. To configure the parameter, run the wmm edca-client (SSID profile view) command. |
AC_VI |
AC_VI packets. To configure the parameter, run the wmm edca-client (SSID profile view) command. |
AC_BE |
AC_BE packets. To configure the parameter, run the wmm edca-client (SSID profile view) command. |
AC_BK |
AC_BK packets. To configure the parameter, run the wmm edca-client (SSID profile view) command. |
ECWmax |
Exponent form of the maximum contention window. ECWmin and ECWmax determine the average backoff time. To configure the parameter, run the wmm edca-client (SSID profile view) command. |
ECWmin |
Exponent form of the minimum contention window. ECWmin and ECWmax determine the average backoff time. To configure the parameter, run the wmm edca-client (SSID profile view) command. |
AIFSN |
Arbitration inter frame spacing number (AIFSN), which determines the channel idle time. To configure the parameter, run the wmm edca-client (SSID profile view) command. |
TXOPLimit |
Transmission opportunity limit (TXOPLimit), which determines the maximum duration in which a STA can occupy a channel. A larger value indicates a longer duration. To configure the parameter, run the wmm edca-client (SSID profile view) command. |
display sta-offline-delay configuration
Function
The display sta-offline-delay configuration command displays the STA offline delay configuration.
Example
<HUAWEI> display sta-offline-delay configuration
--------------------------------------------------------------------------------
Enable switch : disable
Aging time(s) : 180
Full station reject switch : disable
Max number : 2048
--------------------------------------------------------------------------------
Item |
Description |
---|---|
Enable switch |
Whether to enable the STA offline delay function. To configure the parameter, run the sta-offline-delay enable command. |
Aging time(s) |
Aging time of the STA offline delay state To configure the parameter, run the sta-offline-delay aging-time command. |
Full station reject switch |
Whether to force STAs in offline delay state to go offline and allow new STAs to go online after the number of STAs reaches the maximum. To configure the parameter, run the sta-offline-delay full-sta-reject enable command. |
Max number |
Maximum number of STAs that are allowed to delay going offline. To configure the parameter, run the sta-offline-delay max-number command. |
display station
Format
display station { ap-group ap-group-name | ap-name ap-name | ap-id ap-id | ssid ssid | sta-mac sta-mac-address | vlan vlan-id | all }
Parameters
Parameter |
Description |
Value |
---|---|---|
ap-group ap-group-name |
Displays STA access information about a specified AP group. |
The AP group must exist. |
ap-name ap-name |
Displays STA access information of the AP with a specified name. |
The AP name must exist. |
ap-id ap-id |
Displays STA access information of the AP with a specified ID. |
The AP ID must exist. |
ssid ssid |
Displays STA access information about a specified SSID. |
The SSID must exist. |
sta-mac sta-mac-address |
Displays access information about a STA with the specified MAC address. |
The STA's MAC address must exist. |
vlan vlan-id |
Displays STA access information about a specified VLAN. |
The VLAN ID must exist. |
all |
Displays access information about all STAs. |
- |
Usage Guidelines
You can run the display station command to view access information about STAs. Access information about STAs can be filtered based on AP groups, APs, and SSIDs. You can run the display access-user command to view access information about online wired and wireless users. The information includes users' authentication, authorization, and accounting information. Access information about wireless users can be filtered based on SSIDs. To view details about user authentication, authorization, and accounting information, run the display access-user command.
Example
# Display access information about all STAs.
<HUAWEI> display station all Rf/WLAN: Radio ID/WLAN ID Rx/Tx: link receive rate/link transmit rate(Mbps) ----------------------------------------------------------------------------------------------------------------- STA MAC AP ID Ap name Rf/WLAN Band Type Rx/Tx RSSI VLAN IP address SSID Status ----------------------------------------------------------------------------------------------------------------- 14cf-9208-9abf 0 1047-8007-6f80 0/2 2.4G 11n 3/8 -70 10 10.10.10.253 tap1 Normal ----------------------------------------------------------------------------------------------------------------- Total: 1 2.4G: 1 5G: 0
Item |
Description |
---|---|
STA MAC |
STA's MAC address. |
AP ID |
AP ID. |
Ap name |
AP name. |
Rf/WLAN |
Radio ID/WLAN ID of a VAP. |
Band |
Frequency band of a radio. |
Type |
Protocol type of a radio. |
Rx/Tx |
Rate at which the AP receives packets from the STA/Rate at which the AP sends packets to the STA. |
RSSI |
RSSI of signals received by an APfrom a STA. |
VLAN |
VLAN ID of a STA. |
IP address |
IP address of a STA. |
SSID |
SSID name. |
Status |
Status of a STA. Normal indicates that the STA is in normal state, and Delay indicates that the STA is in offline delay state. |
# Display access information about a specified STA.
<HUAWEI> display station sta-mac b878-2eb4-2689 ------------------------------------------------------------------------------ Station MAC-address : b878-2eb4-2689 Station IP-address : 10.10.10.254 : FE80::C87:23F4:A6D:8D03 Station gateway : 10.10.10.2 Associated SSID : jsldoc Station online time(ddd:hh:mm:ss) : 000:00:03:14 The upstream SNR(dB) : 80.0 The upstream aggregate receive power(dBm) : -28.0 Station connect rate(Mbps) : 61 Station connect channel : 36 Station inactivity time(ddd:hh:mm:ss) : 000:00:00:00 Station current state Authorized for data transfer : YES QoS enabled : YES ERP enabled : No HT rates enabled : YES Power save mode enabled : YES Auth reference held : No UAPSD enabled : No UAPSD triggerable : No UAPSD SP in progress : No This is an ATH node : No WDS workaround req : No WDS link : No PMF negotiation : No Station's HT capability : WQ Station capabilities : E Station PMF capabilities : PMFC=0,PMFR=0 Station VHT capabilities 256QAM capabilities :YES VHT explicit beamforming capabilities :YES MU-MIMO capabilities :YES Station's RSSI(dBm) : -28 Station's radio mode : 11n Station's AP ID : 0 Station's AP Name : area_3 Station's Radio ID : 1 Station's Authentication Method : OPEN Station's Cipher Type : NO CIPHER Station's User Name : b8782eb42689 Station's Vlan ID : 22 Station's Channel Band-width : 20MHz Station's asso BSSID : dcd2-fc04-b513 Station's state : Asso with auth Station's QoS Mode : WMM Station's HT Mode : HT20 Station's MCS value : 9 Station's NSS value : 2 Station's Short GI : nonsupport Station's roam state : No Station supported band : 2.4G/5G Station support 802.11k : Yes Station support 802.11r : Yes Station support 802.11v : No Available to trigger roam : Yes Is sticky client now : No Trigger aimless roam while sticky : Yes Neighbor list: ------------------------------------------ AP name RfID SNR RCPI ------------------------------------------ ------------------------------------------ total: 0 U-APSD list: ------------------------------------------------------- AC-VI AC-VO AC-BE AC-BK ------------------------------------------------------- not-support not-support not-support not-support ------------------------------------------------------- ------------------------------------------------------------------------------
Item |
Description |
---|---|
Station MAC-address |
MAC address of a STA. |
Station IP-address |
IP address of a STA. |
Station gateway |
Gateway address of a STA. NOTE:
If the device obtains the STA's gateway address through DHCP, the parameter displays as the obtained gateway address; otherwise, the parameter displays as 0.0.0.0. |
Associated SSID |
SSID of a service set with which a STA is associated. |
Station online time(ddd:hh:mm:ss) |
Online duration of a STA, in the format of ddd:hh:mm:ss. |
The upstream SNR(dB) |
SNR of a STA received by an AP, in dB. |
The upstream aggregate receive power(dBm) |
Transmit power of a STA received by an AP, in dBm. |
Station connect rate(Mbps) |
Connection rate of a STA, in Mbit/s. Affected by wireless environments, antenna angles, and other factors, the actual connection rate of a STA cannot reach the upper limit. |
Station connect channel |
Channel used by a STA. |
Station inactivity time(ddd:hh:mm:ss) |
Idle duration of a STA, in the format of ddd:hh:mm:ss. |
Station current state |
Current status of a STA. |
Authorized for data transfer |
Whether a STA is authenticated. |
QoS enabled |
Whether QoS is enabled on a STA. |
ERP enabled |
Whether Effective radiated power (ERP) is enabled on a STA to increase the physical-layer transmission speed. |
HT rates enabled |
Whether 802.11n is enabled on a STA. |
Power save mode enabled |
Whether the power saving mode is enabled on a STA. |
Auth reference held |
Whether the authentication reference flag is set. |
UAPSD enabled |
Whether UAPSD is enabled. |
UAPSD triggerable |
UAPSD can be triggered, waiting for a STA to send a trigger frame to the AP. |
UAPSD SP in progress |
Whether the UAPSD mode is in the service period (SP). |
This is an ATH node |
Whether the wireless network adapter uses the atheros chip. |
WDS workaround req |
Whether a patch is used to fix bugs of atheros owl series chips in WDS scenarios. |
WDS link |
STA that is a node on the WDS link. |
PMF negotiation |
Whether a STA implements the PMF negotiation. |
Station's HT capability |
HT capability of a STA.
|
Station capabilities |
Capabilities of a STA. |
Station PMF capabilities |
PMF capability of a STA. |
Station VHT capabilities |
Whether a STA supports 802.11ac. |
256QAM capabilities |
Whether a STA supports 256QAM. |
256QAM capabilities |
Whether a STA supports 256QAM. |
VHT explicit beamforming capabilities |
Whether a STA supports 802.11ac explicit beamforming. |
MU-MIMO capabilities |
Whether a STA supports MU-MIMO |
Station's RSSI(dBm) |
RSSI of signals received by an AP from a STA, in dBm. |
Station's radio mode |
Radio mode of a STA. |
Station's AP ID |
AP ID associated with a STA. |
Station's AP Name |
Name of the AP which a STA associates with. |
Station's Radio ID |
Radio ID of a STA. |
Station's Authentication Method |
Authentication mode of a STA. |
Station's Cipher Type |
Encryption mode of a STA. |
Station's User Name |
User name of a STA. |
Station's Vlan ID |
VLAN ID of a STA. |
Station's Channel Band-width |
Channel bandwidth of a STA. |
Station's asso BSSID |
BSSID that the STA associates with. |
Station's state |
Status of the STA. |
Station's QoS Mode |
QoS mode of the STA. |
Station's HT Mode |
HT mode of the STA.
|
Station's MCS value |
The maximum MCS value of the STA. |
Station's NSS value |
NSS value of the STA. NOTE:
The NSS value is displayed
for STAs working only in 802.11ac mode or STAs working in 802.11n
mode and supporting 256QAM. |
Station's Short GI |
Whether the STA supports the short GI. |
Station's roam state |
Roaming state of a STA. |
Station supported band |
Bandwidth supported by a STA. |
Station support 802.11k |
Whether a STA supports 802.11k. |
Station support 802.11r |
Whether a STA supports 802.11r. |
Station support 802.11v |
Whether a STA supports 802.11v. |
Available to trigger roam |
Whether a STA can trigger the roaming process. |
Is sticky client now |
Whether a STA is a sticky terminal. |
Trigger aimless roam while sticky |
Whether a STA is forced to roam aimlessly. |
Neighbor list |
Neighboring AP list of a STA. |
AP name |
Name of a STA's neighboring AP. |
RfID |
Radio ID of a STA's neighboring AP. |
SNR |
SNR of a STA's neighboring AP. |
RCPI |
RCPI of a STA's neighboring AP. |
U-APSD list |
U-APSD list. |
AC-VI |
Whether U-APSD takes effect on AC_VI packets. |
AC-VO |
Whether U-APSD takes effect on AC_VO packets. |
AC-BE |
Whether U-APSD takes effect on AC_BE packets. |
AC-BK |
Whether U-APSD takes effect on AC_BK packets. |
display station assoc-info ap-offline-record
Function
The display station assoc-info ap-offline-record command displays information about STAs that connect to the APs in fault state.
Format
display station assoc-info ap-offline-record { all | { ap-name ap-name | ap-id ap-id } [ radio radio-id ] }
Parameters
Parameter |
Description |
Value |
---|---|---|
all |
Displays information about STAs that connect to all APs in fault state. |
- |
ap-name ap-name |
Displays information about STAs that go online on the AP with a specified name in fault state. |
The AP name must exist. |
ap-id ap-id |
Displays information about STAs that go online on the AP with a specified ID in fault state. |
The AP ID must exist. |
radio radio-id |
Displays information about STAs that connect to a specified radio of an AP in fault state. |
The radio ID must exist. |
Usage Guidelines
Usage Scenario
When link faults occur between the APs and AC, the APs in fault state allow access of new STAs and log the STA information. When the link between the APs and AC is re-established, the APs disconnect these STAs and send the STA information to the AC. You can run the display station assoc-info ap-offline-record command on the AC to check information about the STAs that connect to the APs in fault state.
Prerequisite
The APs in fault state have been enabled to allow access of new STAs using the keep-service enable allow new-access command.
Example
# Display information about STAs that connect to all APs in fault state.
<HUAWEI> display station assoc-info ap-offline-record all Offline Station information list: ------------------------------------------------------------------------------ STA MAC AP name RADIO ID SSID ------------------------------------------------------------------------------ 286E-D488-B74F Huawei 0 SSID_MYWLAN ------------------------------------------------------------------------------ Total: 1
display station online-fail-record
Format
display station online-fail-record { all | ap-name ap-name | ap-id ap-id | sta-mac sta-mac-address }
Parameters
Parameter |
Description |
Value |
---|---|---|
all |
Displays online failure records of all STAs. |
- |
ap-name ap-name |
Displays online failure records of STAs on the AP with a specified name. |
The AP name must exist. |
ap-id ap-id |
Displays online failure records of STAs on the AP with a specified ID. |
The AP ID must exist. |
sta-mac sta-mac-address |
Displays online failure records of the STA with the specified MAC address. |
The STA's MAC address must exist. |
Usage Guidelines
If a STA fails to go online, you can run the command to check the failure reason, which helps locate the fault.
After the number of STA online failure records reaches the maximum that can be stored, new records overwrite existing ones.
Example
# Display online failure records of all STAs.
<HUAWEI> display station online-fail-record all Rf/WLAN: Radio ID/WLAN ID ------------------------------------------------------------------------------ STA MAC AP ID Ap name Rf/WLAN Last record time Reason ------------------------------------------------------------------------------ 14cf-9202-13dc 0 area_11 0/1 2015-03-11/15:53:18 The STA is in the VAP's blacklist. ------------------------------------------------------------------------------ Total stations: 1 Total records: 1
Item |
Description |
---|---|
Radio ID/WLAN ID |
Radio/VAP that the STA fails to connect to. |
STA MAC |
MAC address of the STA that fails to go online. |
AP ID |
ID of the AP on which the STA fails to go online. |
Ap name |
Name of the AP on which the STA fails to go online. |
Last record time |
Time of the STA online failure. |
Reason STA |
Reason for the STA online failure. For details about STA online failure reasons and handling suggestions, see Table 11-85. For troubleshooting methods, see STAs Fail to Associate with a WLAN. |
Reason Why a STA Fails to Go Online |
Remarks |
Handling Suggestion |
---|---|---|
STA authentication times out. |
- |
Reassociate the STA with the network. If the failure persists, contact technical support personnel. |
Invalid association request packet. |
- |
Reassociate the STA with the network. If the failure persists, the STA may be incompatible with the AP. Contact technical support personnel. |
The encryption mode is inconsistent on the STA and AP. |
- |
Ensure that the encryption mode is consistent on the STA and AP. |
Authentication fails in the association stage. |
- |
Reassociate the STA with the network. If the failure persists, contact technical support personnel. |
The STA is not authenticated. |
- |
Reassociate the STA with the network. If the failure persists, contact technical support personnel. |
The AP does not support the rate set specified in the association request packet of the STA. |
- |
Change the basic rate set in the radio profile and reassociate the STA with the network. |
The encryption algorithm is inconsistent on the STA and AP. |
- |
Ensure that the encryption algorithm is consistent on the STA and AP. |
Failed to decrypt the challenge packet. |
- |
Verify that the STA works properly and reassociate the STA with the network. If the failure persists, contact technical support personnel. |
Access from legacy STAs is denied. |
- |
Verify that access from legacy STAs is denied. To allow access from legacy STAs, run the undo legacy-station disable command. |
The number of STAs exceeds the physical specifications allowed by the AP. |
- |
Expand the network capacity or retain the current configuration as required. |
The WMM capability of the STA and VAP does not match. |
- |
Check whether the VMM function is enabled in the radio profile or check the WMM configuration on the STA. |
STAs have a compatibility issue(Incorrect network type flag carried by STAs). |
- |
Verify that the STA works properly and reassociate the STA with the network. If the failure persists, contact technical support personnel. |
STAs have a compatibility issue(STAs do not support short timeslots). |
- |
Check whether the STA supports 802.11g. |
STAs have a compatibility issue(STAs do not support DFS.) |
- |
Check whether the STA supports 802.11h. |
The number of associated STAs exceeds the maximum allowed by the AC. |
The number of associated STAs on the AC exceeds the maximum. |
Expand the network capacity or retain the current configuration as required. |
The STA is not in the global whitelist. |
- |
Check whether the STA needs to be added to the global whitelist. |
The STA is in the global blacklist. |
- |
Check whether the STA needs to be added to the global blacklist. |
The STA is not in the VAP's whitelist. |
- |
Check whether the STA needs to be added to the VAP's whitelist. |
The STA is in the VAP's blacklist. |
- |
Check whether the STA needs to be added to the VAP's blacklist. |
The STA associates with a heavily loaded radio. |
- |
Check whether the threshold for load balancing is proper. |
The STA is in the dynamic blacklist. |
- |
Check the attack records and check whether the STA has initiated attacks. |
The association or reassociation packet check fails. |
- |
Reassociate the STA with the network. If the failure persists, contact technical support personnel. |
The number of users exceeds the maximum allowed on the VAP |
- |
Expand the network capacity or run the max-sta-number command to increase the maximum number of STAs associated with the VAP. |
The STA uses a static IP address. |
- |
Check whether the STA uses a static IP address. If not required, configure the STA to obtain an IP address dynamically. |
The STA's SNR is below the user CAC threshold. |
- |
Check whether the SNR-based user CAC threshold is proper. To change the threshold, run the uac client-snr threshold command. Reassociate the STA with the network. Alternatively, determine the STA location and provide coverage to the location. |
The number of STAs exceeds the UAC threshold of the radio. |
The number of associated STAs exceeds the user CAC threshold based on the number of users. |
Check whether the user CAC threshold based on the number of users is properly set. If not, modify the threshold by running the uac client-number threshold command and reassociate the STA with the network. |
The channel utilization of the radio has reached the upper threshold. |
- |
Check whether the user CAC threshold based on the channel utilization is proper. To change the threshold, run the uac channel-utilization threshold command. Reassociate the STA with the radio. |
The STA does not send an authentication request before associating with the network. |
- |
Reassociate the STA with the network. If the failure persists, contact technical support personnel. |
The key is incorrect or the STA uses the cached PMK. |
- |
Ensure that the STA uses the correct key and reassociate the STA with the network. If the failure persists, contact technical support personnel. |
Failed to receive the handshake packet (2/4) from the STA. |
- |
Ensure that the STA uses the correct key and reassociate the STA with the network. If the failure persists, contact technical support personnel. |
Failed to receive the handshake packet (4/4) from the STA. |
- |
Ensure that the STA uses the correct key and reassociate the STA with the network. If the failure persists, contact technical support personnel. |
WAPI authentication times out. |
- |
Check the network quality and reassociate the STA with the network. If the failure persists, contact technical support personnel. |
Reauthentication fails. |
- |
Check the intermediate network connectivity between the AP and AC, and reassociate the STA with the network. If the failure persists, contact technical support personnel. |
Authentication fails. |
- |
Reassociate the STA with the network. If the failure persists, contact technical support personnel. |
The authentication request times out. |
- |
Reassociate the STA with the network. If the failure persists, contact technical support personnel. |
Key negotiation fails. |
- |
Ensure that the STA uses the correct key and reassociate the STA with the network. If the failure persists, contact technical support personnel. |
Key negotiation fails(the length of the key data(2/4) is invalid). |
- |
Verify that the correct password is entered on the STA. If this fault persists, contact technical support personnel. |
Key negotiation fails(the length of the key data(4/4) is invalid). |
- |
Verify that the correct password is entered on the STA. If this fault persists, contact technical support personnel. |
Key negotiation fails(fail to send the handshake packet). |
- |
Verify that the correct password is entered on the STA. If this fault persists, contact technical support personnel. |
Key negotiation fails(the key information of the handshake packet is invalid). |
- |
Verify that the correct password is entered on the STA. If this fault persists, contact technical support personnel. |
The radio type is inconsistent between the AC and AP. |
- |
Run the display ap config-info command to verify the AP radio configuration. |
display station offline-record
Parameters
Parameter | Description | Value |
---|---|---|
all | Displays all STA offline records. | - |
ap-name ap-name | Displays STA offline records on the AP with a specified name. | The AP name must exist. |
ap-id ap-id | Displays STA offline records on the AP with a specified ID. | The AP ID must exist. |
sta-mac sta-mac | Displays logout records of a specified STA. | The STA's MAC address must exist. |
Usage Guidelines
After a STA goes offline, you can use this command to check the reason why the STA goes offline.
Example
# Display all STA offline records.
<HUAWEI> display station offline-record all Rf/WLAN: Radio ID/WLAN ID ------------------------------------------------------------------------------ STA MAC AP ID Ap name Rf/WLAN Last record time Reason ------------------------------------------------------------------------------ 14cf-9208-9abf 0 area_1 0/2 2015-09-18/09:38:50 The VAP goes down because the configuration is modified. 14cf-9202-13dc 1 60de-4474-9640 0/1 2015-09-18/09:28:52 The VAP goes down because the configuration is modified. ------------------------------------------------------------------------------ Total stations: 2 Total records: 2
Item |
Description |
---|---|
STA MAC | MAC address of a STA. |
AP ID | AP ID. |
Ap name | AP name. |
Radio ID/WLAN ID | ID of the radio or WLAN ID of the VAP from which a STA goes offline. |
Last record time | Time when the STA went offline last time. |
Reason | Reason why the STA went offline. For description of offline reasons and handling suggestions, see Table 11-87. For troubleshooting methods, see A STA Goes Offline Unexpectedly. |
Total stations | Total number of STAs. |
Total records | Total number of STA offline records. |
Reason Why a STA Goes Offline |
Suggestion |
---|---|
A STA goes offline properly. |
No action is required. |
STA entry addition times out or fails. |
Check the intermediate network between the AP and AC or reassociate the STA with the network. If this fault persists, contact technical support personnel. |
Authentication fails in the association stage. |
Reassociate the STA with the network. If this fault persists, contact technical support personnel. |
The configuration is modified. |
Check whether configuration change records exist. |
Roaming check failed (on the eSAP). |
Reassociate the STA with the network. If this fault persists, contact technical support personnel. |
Roaming failed (because of a roaming entry failure on the forwarding side or a failure to obtain the configuration). |
Reassociate the STA with the network. If this fault persists, contact technical support personnel. |
The AP is faulty. |
Check the reason why the AP goes offline, and rectify the fault accordingly. For reasons why an AP goes offline, see display ap offline-record. |
The AP is deleted. |
No action is required. |
Failed to synchronize user entries between the AP and AC. |
Reassociate the STA with the network. If this fault persists, contact technical support personnel. |
Failed to synchronize user entries in a mobility group. |
Reassociate the STA with the network. If this fault persists, contact technical support personnel. |
Failed to synchronize user entries between WMP and eSAP. |
Reassociate the STA with the network. If this fault persists, contact technical support personnel. |
A tunnel between ACs goes Down. |
Check the network between the ACs. |
The home AP goes offline or a network fault occurs. |
Reassociate the STA with another AP. If this fault persists, contact technical support personnel. |
The home AP is deleted. |
Reassociate the STA with another AP. If this fault persists, contact technical support personnel. |
The home VAP is deleted. |
Reassociate the STA with another VAP. If this fault persists, contact technical support personnel. |
The AC forcibly disconnects idle STAs. |
Check whether this function is required. If so, no action is required. If not, run the undo idle-cut command to modify the configuration as required. |
The STA roams out of the device. |
No action is required. |
The keepalive packet on the home AP times out. |
Check the intermediate network between the AP and AC or reassociate the STA with the network. If this fault persists, contact technical support personnel. |
The keepalive packet between ACs times out. |
Check the intermediate network between the ACs or reassociate the STA with the network. If this fault persists, contact technical support personnel. |
Layer 3 roaming is disabled. |
Reassociate the STA with the network or enable Layer 3 roaming. |
The STA fails the roaming security check: APs before and after roaming use different security policies. |
Reassociate the STA with the network. If this fault persists, contact technical support personnel. |
The STA fails the roaming status check. |
Reassociate the STA with the network. If this fault persists, contact technical support personnel. |
The STA fails the roaming check due to other reasons. |
Reassociate the STA with the network. If this fault persists, contact technical support personnel. |
Failed to add FPI item: Authorization information fails to be delivered. |
Reassociate the STA with the network. If this fault persists, contact technical support personnel. |
The STA MAC is added to the STA blacklist. |
Check whether the STA needs to be added to the blacklist. |
Users go offline due to WDS link disconnection or other unknown reasons (reported by Wi-Fi). |
Reassociate the STA with the network. If this fault persists, contact technical support personnel. |
The STA disassociates with the network. |
Check whether the user actively goes offline or whether the terminal is faulty. |
The STA is deauthenticated. |
Check whether the user actively goes offline or whether the terminal is faulty. |
The STA ages out. |
No action is required. |
The VAP goes down because the configuration is modified. |
Check whether configuration change records exist in the log. |
The number of users exceeds the specifications (insufficient key slots). |
Expand the AP capacity or reassociate the STA with another AP. |
A user exception is detected. |
Rectify the fault and reassociate the STA with the network. If this fault persists, contact technical support personnel. |
The STA does not respond. |
Check whether the STA works properly. |
The STA is added to the dynamic blacklist. |
Check whether the STA is an attacker. |
The signal strength is too low. |
Check whether the threshold for quickly disconnecting STAs by smart roaming is correctly configured, and check whether the WLAN coverage area is sufficient. |
The STA rate is too low. |
Check whether the threshold for quickly disconnecting STAs by smart roaming is correctly configured, and check whether the WLAN coverage area is sufficient. |
The STA uses a bogus IP address. |
Configure the STA to automatically obtain an IP address. |
No control entry exists. |
Reassociate the STA with the network. If this fault persists, contact technical support personnel. |
The AP goes online again. |
Reassociate the STA with the network. If this fault persists, contact technical support personnel. |
No Wi-Fi entry exists. |
Reassociate the STA with the network. If this fault persists, contact technical support personnel. |
The STA roams between ACs. |
No action is required. |
The STA reassociates with the network but does not send a DHCP request message. |
Reassociate the STA with the network. If this fault persists, contact technical support personnel. |
Multicast key handshake failure. |
Reassociate the STA with the network. If this fault persists, contact technical support personnel. |
Reporting the PMK negotiation result to the AC times out. |
Reassociate the STA with the network. If this fault persists, contact technical support personnel. |
The STA disassociates with the network (delay aging offline). |
Check whether the user actively goes offline or whether the terminal is faulty. |
The STA is deauthenticated (delay aging offline). |
Check whether the user actively goes offline or whether the terminal is faulty. |
The STA ages out (delay aging offline). |
No action is required. |
The STA IP address changes after roaming. |
Reassociate the STA with the network. If this fault persists, contact technical support personnel. |
RADIUS authentication reject. |
Check whether the login user name or password and that on the RADIUS server are the same. If not the same, change them to be the same and reapply for login. |
display station statistics
Parameters
Parameter |
Description |
Value |
---|---|---|
sta-mac sta-mac-address |
Displays statistics information about a STA with a specified MAC address. |
The STA's MAC address must exist. |
ap-name ap-name |
Displays statistics information about STAs on the AP with a specified name. |
The AP name must exist. |
ap-id ap-id |
Displays statistics information about STAs on the AP with a specified ID. |
The AP ID must exist. |
Usage Guidelines
Usage Scenario
- If no parameter is specified, statistics information about all STAs associated with the AC is displayed.
- If an AP is specified, the number of STAs associated with, disassociated from, and reassociated with the AP is displayed.
- If a STA is specified, the number of packets and packet transmission rate between the STA and an AP are displayed.
Prerequisites
- To view statistics information about a specified STA, ensure that the STA has been associated with an AP.
- To view statistics information about STAs associated with a specified AP, ensure that the AP has been added to the AC and is in normal state.
Example
<HUAWEI> display station statistics ------------------------------------------------------------------------------ AC link auth successful :0 AC auth failed because of password error :0 AC auth failed because of invalid calc :0 AC auth failed because of timeout :0 AC auth failed because of being refused :0 AC auth failed because of other reasons :0 Sticky stations detected :0 Trigger sticky stations roam total :0 Trigger sticky stations roam success :0 Trigger sticky stations roam success rate(%) :- Unavailable to trigger roam :0 Online sticky stations :0 Stations supporting dual band :0 Online stations :0 Stations associated with 2.4G band :0 Stations associated with 5G band :0 ------------------------------------------------------------------------------
Item |
Description |
---|---|
AC link auth successful |
Total number of successful link authentications on the AC. Every time a STA initiates a link authentication request and passes the authentication, the counter is incremented by 1. If the same STA initiates multiple authentication requests and passes all authentications, the counter is incremented cumulatively. |
AC auth failed because of password error |
Number of authentication failures due to the incorrect password. |
AC auth failed because of invalid calc |
Number of authentication failures due to the invalid authentication algorithm. |
AC auth failed because of timeout |
Number of authentication failures due to timeout. |
AC auth failed because of being refused |
Number of authentication failures due to rejected access to the AC. |
AC auth failed because of other reasons |
Number of authentication failures due to other reasons. |
Sticky stations detected |
Number of sticky STAs. |
Trigger sticky stations roam total |
Total number of the triggered smart roaming times. |
Trigger sticky stations roam success |
Number of the successfully triggered smart roaming times. |
Trigger sticky stations roam success rate(%) |
Success rate of triggered smart roaming. |
Unavailable to trigger roam |
Number of STAs that cannot implement smart roaming on the AC. |
Online sticky stations |
Number of online sticky STAs. |
Stations supporting dual band |
Number of STAs that support only dual bands. |
Online stations |
Number of online STAs. |
Stations associated with 2.4G band |
Number of STAs associated with the 2.4 GHz band. |
Stations associated with 5G band |
Number of STAs associated with the 5 GHz band. |
<HUAWEI> display station statistics sta-mac 0025-86aa-0d1c ----------------------------------------------------------------- Packets sent to the station : 7 Packets received from the station : 40 Bytes sent to the station : 1170 Bytes received from the station : 3911 Wireless data rate sent to the station(kbps) : 0 Wireless data rate received from the station(kbps) : 0 Trigger roam total : 0 Trigger roam failed : 0 STA power save percent : 0% ------------------------------------------------------------------------------
Item |
Description |
---|---|
Packets sent to the station |
Number of packets sent to the STA. |
Packets received from the station |
Number of packets sent by the STA. |
Bytes sent to the station |
Number of bytes sent to the STA. |
Bytes received from the station |
Number of bytes sent by the STA. |
Wireless data rate sent to the station(kbps) |
Rate at which packets are sent to the STA, in kbit/s. |
Wireless data rate received from the station(kbps) |
Rate at which packets are received from the STA, in kbit/s. |
Trigger roam total |
Total number of smart roaming times. |
Trigger roam failed |
Number of smart roaming failures. |
STA power save percent |
Percentage of power saved on the STA. |
<HUAWEI> display station statistics ap-name N1-2 ------------------------------------------------------------------------------ Total stations online time(seconds) :2713 Stations associated with the AP :1 Association request :5 Successful association request :5 Reject association request :0 Failed association request :0 Reassociation request :0 Successful reassociation request :0 Reject reassociation request :0 Failed reassociation request :0 Disassociations because of users notified :3 Disassociations because of users roam :0 Disassociations because of users left without notification :0 Disassociations because of other reasons :0 Disassociations because of linkauthfail :0 Authentication request :5 Deauth request :0 Stations work in power save mode :0 Stations work in HT mode :1 Stations work in B mode :0 Stations work in G mode :0 Stations work in A mode :0 Stations work in N mode :1 Stations work in AC mode :0 Stations only support 2.4G band :1 Stations only support 5G band :0 Stations support dual band :0 Stations associated with 2.4G band :1 Stations associated with 5G band :0 Band steer success rate(%) :0 Load balancing status between dual band :Balanced Detected as sticky clients :0 ------------------------------------------------------------------------------
Item |
Description |
---|---|
Total stations online time(seconds) |
Total online duration of all STAs, in seconds. |
Stations associated with the AP |
Number of STAs currently associated with the AP, not including the number of STAs in aging status. |
Association request |
Number of association requests sent to the AP. |
Successful association request |
Number of successful associations. |
Reject association request |
Number of association requests denied by the AP. |
Failed association request |
Number of failed associations. |
Reassociation request |
Number of reassociation requests sent to the AP. |
Successful reassociation request |
Number of successful reassociations. |
Reject reassociation request |
Number of reassociation requests rejected by the AP. |
Failed reassociation request |
Number of failed reassociations. |
Disassociations because of users notified |
Number of times STAs are disassociated from the AP because users go offline. |
Disassociations because of users roam |
Number of times STAs are disassociated from the AP because users roam to other regions. |
Disassociations because of users left without notification |
Number of times STAs are disassociated from the AP because users go offline abnormally. |
Disassociations because of other reasons |
Number of times STAs are disassociated from the AP for other reasons. |
Disassociations because of linkauthfail |
Number of times STAs are disassociated from the AP due to link authentication failures. |
Authentication request |
Number of link authentication request times. |
Deauth request |
Number of disassociation times. |
Stations work in power save mode |
Number of STAs working in power saving mode. |
Stations work in HT mode |
Number of STAs working in HT mode. |
Stations work in B mode |
Number of STAs working in 802.11b mode. |
Stations work in G mode |
Number of STAs working in 802.11g mode. |
Stations work in A mode |
Number of STAs working in 802.11a mode. |
Stations work in N mode |
Number of STAs working in 802.11n mode. |
Stations work in AC mode |
Number of STAs working in 802.11ac mode. |
Stations only support 2.4G band |
Number of STAs that support only the 2.4 GHz frequency band. |
Stations only support 5G band |
Number of STAs that support only the 5 GHz frequency band. |
Stations support dual band |
Number of STAs that support both 2.4 and 5 GHz frequency bands. |
Stations associated with 2.4G band |
Number of STAs that associate with the 2.4 GHz frequency band. |
Stations associated with 5G band |
Number of STAs that associate with the 5 GHz frequency band. |
Band steer success rate(%) |
Band steering success rate. |
Load balancing status between dual band |
Status of load balancing between the 2.4 and 5 GHz frequency bands. |
display vap
Format
display vap { ap-group ap-group-name | { ap-name ap-name | ap-id ap-id } [ radio radio-id ] } [ ssid ssid ]
display vap { all | ssid ssid }
Parameters
Parameter |
Description |
Value |
---|---|---|
ap-group ap-group-name |
Displays information about all service VAPs in a specified AP group. |
The AP group must exist. |
ap-name ap-name |
Displays information about service VAPs on the AP with a specified name. |
The AP name must exist. |
ap-id ap-id |
Displays information about service VAPs on the AP with a specified ID. |
The AP ID must exist. |
radio radio-id | Displays information about service VAPs of a specified AP radio. |
The value is an integer that ranges from 0 to 2. Only the AP4030TN, AP4051TN, and AP8050TN-HD supports three radios. |
ssid ssid | Displays information about service VAPs of a specified SSID. |
The SSID must exist. |
all |
Displays information about all service VAPs. |
- |
Example
# Display information about all service VAPs.
<HUAWEI> display vap all
WID : WLAN ID
-----------------------------------------------------------------------------
AP ID AP name RfID WID BSSID Status Auth type STA SSID
-----------------------------------------------------------------------------
3 ap1 0 1 0023-0024-0080 ON Open 0 ag
-----------------------------------------------------------------------------
Total: 1
Item |
Description |
---|---|
AP ID |
AP ID. |
AP name |
AP name. |
RfID |
Radio ID. |
WID |
WLAN ID of a VAP. |
SSID |
SSID name. |
BSSID |
MAC address of a VAP. |
Status |
Current status of a VAP.
|
Auth type |
Authentication mode of a VAP. |
STA |
Number of terminals connected to a VAP. |
display vap create-fail-record
Usage Guidelines
You can run the display vap create-fail-record all command to check records about VAP creation failures.
Example
# Display all records about VAP creation failures.
<HUAWEI> display vap create-fail-record all
Rf/WLAN: Radio ID/WLAN ID
-------------------------------------------------------------------------------
AP MAC Rf/WLAN Profile Name Source Type
VAP Type Reason
-------------------------------------------------------------------------------
e468-a350-8a60 0/4 1 ap-group
Service Preshared key is not configured.
e468-a350-8a60 1/4 1 ap-group
Service Preshared key is not configured.
e468-a350-8a60 0/6 1 ap-group
Service Preshared key is not configured.
e468-a350-8a60 1/6 1 ap-group
Service Preshared key is not configured.
-------------------------------------------------------------------------------
Total records: 4
Item |
Description |
---|---|
AP MAC |
MAC address of the AP. |
Rf/WLAN |
Radio ID/WLAN ID. |
Profile Name |
VAP profile name. |
Source Type |
Object to which the VAP is bound, including:
|
VAP Type |
VAP type, including
|
Reason |
Reason why the VAP fails to be created. Table 11-93 describes detailed reasons. |
Reason for VAP Creation Failures |
Remarks |
---|---|
The VAPs using WEP encryption on an AP cannot use the same key ID. |
- |
Invalid WEP key index. |
- |
Preshared key is not configured. |
- |
Only one management VAP profile can be bound. |
- |
Radio is not exists. |
- |
VAP already exists. |
- |
VAP quantity on the Radio reaches the maximum value. |
- |
The bridge is enable. Please undo first. |
WLAN IDs 13 and 14 are used to set up a WDS bridge. Select other WLAN IDs or delete the WDS configuration. |
WLAN ID(16) is used. Please undo first. |
WLAN ID 16 is used to set up a Mesh link. Select another WLAN ID or delete the Mesh configuration. |
Only one temporary management vap-profile can be bound to an AP. |
- |
The current country code does not support 5GHz frequency band. |
- |
The current country code does not support 2.4GHz frequency band. |
- |
The AP type does not support the wlan id. |
- |
This AP type does not support WDS function. |
- |
This AP type does not support Mesh function. |
- |
The number of VAPs has reached the upper limit. |
- |
The AP does not support 5GHz frequency band. |
- |
The AP does not support 2.4GHz frequency band. |
- |
display vap-profile
Function
The display vap-profile command displays configuration and reference information about a VAP profile.
Usage Guidelines
You can run the display vap-profile command to view configuration and reference information about a VAP profile.
Example
# Display information about all VAP profiles.
<HUAWEI> display vap-profile all
FMode : Forward mode
STA U/D : Rate limit client up/down
VAP U/D : Rate limit VAP up/down
BR2G/5G : Beacon 2.4G/5G rate
------------------------------------------------------------------------------------------------------------
Name FMode VLAN AuthType STA U/D(Kbps) VAP U/D(Kbps) BR2G/5G(Mbps) Reference SSID
------------------------------------------------------------------------------------------------------------
default direct VLAN 1 Open -/- -/- 1/6 0 HUAWEI-WLAN
vap-profile1 direct VLAN 1 Open -/- -/- 1/6 0 HUAWEI-WLAN
------------------------------------------------------------------------------------------------------------
Total: 2
Item |
Description |
---|---|
Name |
VAP profile name. |
FMode |
Data forwarding mode. |
VLAN |
Service VLAN ID. |
AuthType |
User authentication mode. |
STA U/D(Kbps) |
Uplink/downlink rate limit of a single STA. |
VAP U/D(Kbps) |
Uplink/downlink rate limit of all STAs on a specified VAP. |
BR2G/5G(Mbps) |
Rate at which 2.4 GHz or 5 GHz Beacon frames are sent. |
Reference |
Number of times a VAP profile is referenced. |
SSID |
SSID profile referenced by a VAP profile. |
# Display information about the VAP profile default.
<HUAWEI> display vap-profile name default -------------------------------------------------------------------------------- Profile ID : - Service mode : enable Type : service Forward mode : direct-forward Offline management : disable Service VLAN ID : 1 Service VLAN Pool : - Permit VLAN ID : 2 to 4 Auto off service switch : disable Auto off starttime : - Auto off endtime : - STA access mode : disable STA blacklist profile : STA whitelist profile : Band steer : enable Sta network detect : enable Learn client IPv4 address : enable Learn client DHCP strict : disable Learn client DHCP blacklist : disable IP source check : disable ARP anti-attack check : disable DHCP option82 insert : disable DHCP option82 remote id format : insert AP-MAC MAC format : default DHCP option82 circuit id format : insert AP-MAC MAC format : default DHCP trust port : disable SFN roam : disable Anti-attack broadcast-flood : enable Anti-attack broadcast-flood sta-rate-threshold: 10 Anti-attack broadcast-flood blacklist : disable SSID profile : default Security profile : default Traffic profile : default Authentication profile : ----------------------------------------------------------------------------------
Item |
Description |
---|---|
Profile ID | VAP profile ID. |
Service mode | Status of the VAP service. To configure the parameter, run the service-mode disable command. |
Type | VAP type.
To configure the parameter, run the type (VAP profile view) command. |
Forward mode | Data forwarding mode.
To configure the parameter, run the forward-mode command. |
Offline management | Whether to enable management VAP and antenna alignment VAP for offline APs. To configure the parameter, run the temporary-management enable (VAP profile view) command. |
Service VLAN ID | Service VLAN ID. To configure the parameter, run the service-vlan (VAP profile view) command. |
Service VLAN Pool | VLAN pool to which a service VLAN belongs. To configure the parameter, run the service-vlan (VAP profile view) command. |
Permit VLAN ID | VLAN from which packets are allowed to pass through after when the authorization VLAN verification function is enabled. |
Auto off service switch | Status of the scheduled VAP auto-off function. To configure the parameter, run the auto-off service command. |
Auto off starttime | Start time for scheduled VAP auto-off. To configure the parameter, run the auto-off service command. |
Auto off endtime | End time for scheduled VAP auto-off. To configure the parameter, run the auto-off service command. |
STA access mode | STA access control mode. To configure the parameter, run the sta-access-mode command. |
STA blacklist profile | STA blacklist profile. To configure the parameter, run the sta-access-mode command. |
STA whitelist profile | STA whitelist profile. To configure the parameter, run the sta-access-mode command. |
Band steer | Status of the band steering function. To configure the parameter, run the band-steer disable command. |
Sta network detect | Whether to forcibly disconnect STAs without traffic. To configure the parameter, run the sta-network-detect disable command. |
Learn client IPv4 address | Status of STA IPv4 address learning. To configure the parameter, run the learn-client-address disable (VAP profile view) command. |
Learn client DHCP strict | Status of strict STA IP address learning through DHCP. To configure the parameter, run the learn-client-address dhcp-strict command. |
Learn client DHCP blacklist | Whether to add STAs with bogus IP addresses to a dynamic blacklist. To configure the parameter, run the learn-client-address dhcp-strict command. |
IP source check | Status of IP source guard. To configure the parameter, run the ip source check user-bind enable command. |
ARP anti-attack check | Status of dynamic ARP probing. To configure the parameter, run the arp anti-attack check user-bind enable command. |
DHCP option82 insert | Whether to enable an AP to insert the Option 82 field in DHCP packets sent from a STA. To configure the parameter, run the dhcp option82 insert enable command. |
DHCP option82 remote id format | Format of the remote-ID in the Option 82 field inserted in DHCP packets sent from a STA. To configure the parameter, run the dhcp option82 remote-id format command. |
DHCP option82 circuit id format | Format of the circuit-ID in the Option 82 field inserted in DHCP packets sent from a STA. To configure the parameter, run the dhcp option82 circuit-id format command. |
MAC format | Format of the AP MAC address in the Option 82 field. To configure the parameter, run the dhcp option82 format (vap profile view) command. |
DHCP trust port | Status of the DHCP trusted interface function. To configure the parameter, run the dhcp trust port command. |
SFN roam | Whether agile distributed SFN roaming is enabled. To configure the parameter, run the sfn-roam enable command. |
Anti-attack broadcast-flood | Status of broadcast flood attack detection. To configure the parameter, run the anti-attack broadcast-flood disable command. |
Anti-attack broadcast-flood sta-rate-threshold | Broadcast flood threshold. To configure the parameter, run the anti-attack broadcast-flood sta-rate-threshold command. |
Anti-attack broadcast-flood blacklist | Status of broadcast flood blacklist. To configure the parameter, run the anti-attack broadcast-flood blacklist enable command. |
SSID profile | Name of the SSID profile referenced by a VAP profile. To configure the parameter, run the ssid-profile (VAP profile view) command. |
Security profile | Name of the security profile referenced by a VAP profile. To configure the parameter, run the security-profile (VAP profile view) command. |
Traffic profile | Name of the traffic profile referenced by a VAP profile. To configure the parameter, run the traffic-profile (VAP profile view) command. |
Authentication profile | Name of the authentication profile referenced by a VAP profile. |
display vlan pool
Parameters
Parameter | Description | Value |
---|---|---|
name pool-name | Displays detailed information about a specified VLAN pool. |
The VLAN pool must exist. |
all | Displays brief information about all VLAN pools. |
- |
verbose | Displays detailed information about all VLAN pools. |
- |
Usage Guidelines
You can run the display vlan pool command to view configuration information about VLAN pools, which facilitates VLAN pool management and maintenance.
Example
# Display brief configuration information about all VLAN pools.
<HUAWEI> display vlan pool all
--------------------------------------------------------------------------------
Name Assignment VLAN total
--------------------------------------------------------------------------------
pool1 hash 2
pool2 hash 0
--------------------------------------------------------------------------------
Total: 2
# Display detailed configuration information about the VLAN pool pool1.
<HUAWEI> display vlan pool name pool1
--------------------------------------------------------------------------------
Name : pool1
Total : 2
Assignment : hash
VLAN ID : 2 4
--------------------------------------------------------------------------------
Item |
Description |
---|---|
Name |
Name of a VLAN pool. To configure the parameter, run the vlan pool command. |
Assignment |
VLAN assignment algorithm in a VLAN pool. To configure the parameter, run the assignment command. |
VLAN total |
Number of VLANs added to a VLAN pool. |
Total |
Total number of VLAN pools. |
VLAN ID |
VLANs added to a VLAN pool. To configure the parameter, run the vlan (VLAN pool view) command. |
display wired-port-profile
Function
The display wired-port-profile command displays reference and configuration information about an AP wired port profile.
Usage Guidelines
You can run the display wired-port-profile command to view configuration and reference information about an AP wired port profile.
Example
# Display information about all AP wired port profiles.
<HUAWEI> display wired-port-profile all
----------------------------------------------------------
Profile name Reference
----------------------------------------------------------
default 1
wired-port-profile-1 0
----------------------------------------------------------
Total: 2
Item |
Description |
---|---|
Profile name |
Name of an AP wired port profile. |
Reference |
Number of times an AP wired port profile is referenced. |
# Display information about the AP wired port profile default (Eth-trunk is not configured).
<HUAWEI> display wired-port-profile name default ---------------------------------------------------------------------------- Port link profile : default Description : STP : disable Port work mode : - Port Tagged VLAN : - Port untagged VLAN : 1 Port PVID VLAN : - User isolate mode : disable DHCP trust port : enable ND trust port : enable IPSG switch : disable DAI switch : disable STP auto shutdown switch : disable Auto shutdown recovery time : 600 Learn client ipv4 address switch : disable IGMP-Snooping switch : disable Traffic optimize broadcast suppression(pps) : - Traffic optimize unicast suppression(pps) : - Traffic optimize multicast suppression(pps) : - ---------------------------------------------------------------------------------------- Traffic Type Direction AppliedRecord ---------------------------------------------------------------------------------------- traffic-filter inbound IPv4 ACL 3012 ---------------------------------------------------------------------------------------- ---------------------------------------------------------------------------------------- Traffic Type Direction RemarkType RemarkValue AppliedRecord ---------------------------------------------------------------------------------------- traffic-remark outbound 802.1p 2 IPv6 ACL 3011 ---------------------------------------------------------------------------------------- ----------------------------------------------------------------------------
# Display information about the AP wired port profile dj (Eth-trunk is configured).
<HUAWEI> display wired-port-profile name dj
----------------------------------------------------------------------------
Port link profile : default
Description :
Ethernet trunk ID : 0
----------------------------------------------------------------------------
Item |
Description |
---|---|
Port link profile | Name of the AP wired port link profile referenced by an AP wired port profile. To configure the parameter, run the port-link-profile (AP wired port profile view) command. |
Description | Interface description. To configure the parameter, run the description (AP wired port profile view) command. |
STP | STP status on a wired interface. To configure the parameter, run the stp enable (AP wired port profile view) command. |
Port work mode | Working mode of a wired interface.
To configure the parameter, run the mode (AP wired port profile view) command. |
Port Tagged VLAN | VLAN to which a wired interface is added in tagged mode. To configure the parameter, run the vlan (AP wired port profile view) command. |
Port untagged VLAN | VLAN to which a wired interface is added in untagged mode. To configure the parameter, run the vlan (AP wired port profile view) command. |
Port PVID VLAN | PVID of a wired interface. To configure the parameter, run the vlan pvid (AP wired port profile view) command. |
User isolate mode | User isolation status on a wired interface. To configure the parameter, run the user-isolate (AP wired port profile view) command. |
DHCP trust port | Status of the DHCP trusted interface function. To configure the parameter, run the dhcp trust port command. |
ND trust port | Status of the ND trusted interface function. |
Ethernet trunk ID | ID of the Eth-Trunk interface. |
IPSG switch | Whether IP source guard (IPSG)is enabled on an AP's wired interface. To configure the parameter, run the ipsg enable (AP wired port profile view) command. |
DAI switch | Whether DAI is enabled on an AP's wired interface. To configure the parameter, run the dai enable (AP wired port profile view) command. |
STP auto shutdown switch | Whether STP-triggered port shutdown is enabled on an AP's wired interface. To configure the parameter, run the stp auto-shutdown enable (AP wired port profile view) command. |
Auto shutdown recovery time | Recovery time of the shutdown port triggered by STP. To configure the parameter, run the stp auto-shutdown recovery-time (AP wired port profile view) command. |
Learn client IPv4 address switch | Whether terminal IPv4 address learning is enabled on an AP's wired interface. To configure the parameter, run the learn-client-address enable (AP wired port profile view) command. |
IGMP-Snooping switch | Whether IGMP snooping is enabled on an AP's wired port. |
Traffic optimize broadcast suppression(pps) | Maximum broadcast traffic volume that can be received on an AP's wired interface. To configure the parameter, run the traffic-optimize (AP wired port profile view) command. |
Traffic optimize unicast suppression(pps) | Maximum unknown unicast traffic volume that can be received on an AP's wired interface. To configure the parameter, run the traffic-optimize (AP wired port profile view) command. |
Traffic optimize multicast suppression(pps) | Maximum multicast traffic volume that can be received on an AP's wired interface. To configure the parameter, run the traffic-optimize (AP wired port profile view) command. |
Traffic Type | ACL-based packet filtering and re-marking implemented by the AP wired port.
|
Direction | Incoming or outgoing packets. |
AppliedRecord | IPv4/IPv6/L2 packet filtering and re-marking based on ACLs. |
RemarkType | Protocol type.
|
RemarkValue | Protocol type value.
|
display wlan config-errors
Example
# Display WLAN configuration errors.
<HUAWEI> display wlan config-errors
--------------------------------------------------------------------------------
Profile Error
--------------------------------------------------------------------------------
vap-profile 1 The authentication type specifie
d in the authentication-profile 1 does not match that in the security-profile 1.
--------------------------------------------------------------------------------
Total: 1
dot11a basic-rate
Function
The dot11a basic-rate command configures a basic rate set of the 802.11a protocol in a 5G radio profile.
The undo dot11a basic-rate command restores the default basic rate set of the 802.11a protocol in a 5G radio profile.
By default, a basic rate set of the 802.11a protocol in a 5G radio profile includes rates 6 Mbps, 12 Mbps, and 24 Mbps.
Usage Guidelines
Usage Scenario
The rates specified in the basic rate set must be supported by both the AP and STA; otherwise, the STA cannot associate with the AP. For example, if you configure the basic rate set to contain rates 6 Mbps and 9 Mbps and deliver the configuration to an AP, only STAs supporting the two rates can associate with the AP. The AP and STA select a rate from the basic rate set or the supported rate set to transmit packets.
After you run this command to configure a basic rate set in a radio profile, bind the radio profile to an AP or AP group. If a STA associates with the AP in 802.11a mode, the STA must support all rates specified by the basic rate set; otherwise, the STA cannot associate with the AP.
Precautions
This configuration applies only to STAs associated with an AP in 802.11a mode but does not take effect on STAs associated with the AP in other modes.
The basic rate set and supported rate set cannot be empty simultaneously.
dot11a supported-rate
Function
The dot11a supported-rate command configures a supported rate set of the 802.11a protocol in a 5G radio profile.
The undo dot11a supported-rate command restores the default supported rate set of the 802.11a protocol in a 5G radio profile.
By default, the supported rate set of the 802.11a protocol in a 5G radio profile includes rates 6 Mbps, 9 Mbps, 12 Mbps, 18 Mbps, 24 Mbps, 36 Mbps, 48 Mbps, and 54 Mbps.
Usage Guidelines
Usage Scenario
The supported rate set contains rates supported by the AP except the basic rates. The AP and STA can transmit data at all rates specified by the supported rate set. The AP and STA select a rate from the basic rate set or the supported rate set to transmit packets.
When a STA supports rates specified in the basic rate set, the STA can associate with the AP regardless of whether the STA supports rates specified in the supported rate set. In this case, the AP and STA can only select a rate from the basic rate set to transmit packets. For example, assume that you configure the basic rate set to contain rates 6 Mbps and 9 Mbps and the supported rate set to contain rates 48 Mbps and 54 Mbps. After you deliver the configurations to an AP, the STA supporting 6 Mbps and 9 Mbps can associate with the AP, and select either of the two rates to transmit packets with the AP. However, if the STA supports 6 Mbps, 9 Mbps, and 54 Mbps, the STA and AP select any of the three rates to transmit packets after the STA associates with the AP.
After you run this command to configure a supported rate set in a radio profile, bind the radio profile to an AP or AP group. If a STA associates with the AP in 802.11a mode, the AP and STA select a rate from the basic rate set or supported rate set to transmit packets.
Precautions
This configuration applies only to STAs associated with an AP in 802.11a mode but does not take effect on STAs associated with the AP in other modes.
The basic rate set and supported rate set cannot be empty simultaneously.
dot11bg basic-rate
Function
The dot11bg basic-rate command configures a basic rate set of the 802.11bg protocol in a 2G radio profile.
The undo dot11bg basic-rate command restores the default basic rate set of the 802.11bg protocol in a 2G radio profile.
By default, the basic rate set of the 802.11bg protocol includes rates 1 Mbps and 2 Mbps in a 2G radio profile.
Usage Guidelines
Usage Scenario
The rates specified in the basic rate set must be supported by both the AP and STA; otherwise, the STA cannot associate with the AP. For example, if you configure the basic rate set to contain rates 6 Mbps and 9 Mbps and deliver the configuration to an AP, only STAs supporting the two rates can associate with the AP. The AP and STA select a rate from the basic rate set or the supported rate set to transmit packets.
After you run this command to configure a basic rate set in a radio profile, bind the radio profile to an AP or AP group. If a STA associates with the AP in 802.11bg mode, the STA must support all rates specified by the basic rate set; otherwise, the STA cannot associate with the AP.
Precautions
This configuration applies only to STAs associated with an AP in 802.11bg mode but does not take effect on STAs associated with the AP in other modes.
The basic rate set and supported rate set cannot be empty simultaneously.
dot11bg supported-rate
Function
The dot11bg supported-rate command configures a supported rate set of the 802.11bg protocol in a 2G radio profile.
The undo dot11bg supported-rate command restores the default supported rate set of the 802.11bg protocol in a 2G radio profile.
By default, the supported rate set of the 802.11bg protocol in a 2G radio profile includes rates 1 Mbps, 2 Mbps, 5.5 Mbps, 6 Mbps, 9 Mbps, 11 Mbps, 12 Mbps, 18 Mbps, 24 Mbps, 36 Mbps, 48 Mbps, and 54 Mbps.
Usage Guidelines
Usage Scenario
The supported rate set contains rates supported by the AP except the basic rates. The AP and STA can transmit data at all rates specified by the supported rate set. The AP and STA select a rate from the basic rate set or the supported rate set to transmit packets.
When a STA supports rates specified in the basic rate set, the STA can associate with the AP regardless of whether the STA supports rates specified in the supported rate set. In this case, the AP and STA can only select a rate from the basic rate set to transmit packets. For example, assume that you configure the basic rate set to contain rates 6 Mbps and 9 Mbps and the supported rate set to contain rates 48 Mbps and 54 Mbps. After you deliver the configurations to an AP, the STA supporting 6 Mbps and 9 Mbps can associate with the AP, and select either of the two rates to transmit packets with the AP. However, if the STA supports 6 Mbps, 9 Mbps, and 54 Mbps, the STA and AP select any of the three rates to transmit packets after the STA associates with the AP.
After you run this command to configure a supported rate set in a radio profile, bind the radio profile to an AP or AP group. If a STA associates with the AP in 802.11bg mode, the AP and STA select a rate from the basic rate set or supported rate set to transmit packets.
Precautions
This configuration applies only to STAs associated with an AP in 802.11bg mode but does not take effect on STAs associated with the AP in other modes.
The basic rate set and supported rate set cannot be empty simultaneously.
dtim-interval
Usage Guidelines
DTIM refers to delivery traffic indication map. After a STA enters the dormancy mode, the associated AP saves the broadcast and multicast frames for the STA. When a Beacon frame sent to the STA by the AP contains DTIM, the saved broadcast and multicast frames will be transmitted to the STA. The DTIM interval refers to the number of Beacon frames sent before the Beacon frame that contains the DTIM. To set the interval for sending Beacon frames in an SSID profile, run the beacon-interval command.
- When the STA is in the dormancy status, the AP saves data transmitted to the STA and notifies the STA with a bit in broadcast Beacon frames. The STA receives data according to this bit. You can run this command to set the DTIM interval in the specified SSID profile.
- The DTIM interval specifies how many Beacon frames are sent before the Beacon frame that contains the DTIM. A long DTIM interval lengthens the dormancy time of the STA and saves power, but degrades the transmission capability of the STA. A short interval helps transmitting data in a timely manner, but the STA is waken up frequently, causing high power consumption.
eapol-response dest-address transform-condition
Function
The eapol-response dest-address transform-condition command specifies the EAPOL-response packets to be encapsulated by an AP.
The undo eapol-response dest-address transform-condition command restores the default settings.
By default, an AP encapsulates only the EAPOL-response packets with the destination MAC addresses being the AP's BSSID.
Format
eapol-response dest-address transform-condition { always | equal-bssid }
undo eapol-response dest-address transform-condition
Usage Guidelines
The destination MAC addresses of the EAPOL-response packets sent by some STAs are APs' BSSIDs, but the destination MAC addresses of the EAPOL-response packets sent by other STAs are not APs' BSSIDs. You need to run this command to specify the EAPOL-response packets to be encapsulated.
eapol-response dest-address transform-to
Function
The eapol-response dest-address transform-to command configures an AP to encapsulate EAPOL-response packets into broadcast, multicast, or unicast packets.
The undo eapol-response dest-address transform-to command restores the default settings.
By default, an AP encapsulates EAPOL-response packets into unicast packets and actively learns the destination MAC address.
Format
eapol-response dest-address transform-to { broadcast | multicast | mac mac-address | learning }
undo eapol-response dest-address transform-to
Parameters
Parameter |
Description |
Value |
---|---|---|
broadcast |
Configures an AP to encapsulate EAPOL-response packets into broadcast packets. |
- |
multicast |
Configures an AP to encapsulate EAPOL-response packets into multicast packets. |
- |
mac mac-address |
Configures an AP to encapsulate EAPOL-response packets into unicast packets with a specified destination MAC address. |
The value is in H-H-H format. An H is a hexadecimal number of four digits. |
learning |
Configures an AP to encapsulate EAPOL-response packets into unicast packets and actively learn the destination MAC address. |
- |
Usage Guidelines
If the authentication server can only process EAP multicast packets, configure the AP to encapsulate EAPOL-response packets into multicast packets.
If the authentication server can only process EAP broadcast packets, configure the AP to encapsulate EAPOL-response packets into broadcast packets.
If the authentication server can only process EAP unicast packets, configure the AP to encapsulate EAPOL-response packets into unicast packets. When the AP is configured to encapsulate EAPOL-response packets into unicast packets, a unicast MAC address must be configured.
eapol-start dest-address transform-condition
Function
The eapol-start dest-address transform-condition command specifies the EAPOL-start packets to be encapsulated by an AP.
The undo eapol-start dest-address transform-condition command restores the default settings.
By default, an AP encapsulates only the EAPOL-start packets with the destination MAC addresses being the AP's BSSID.
Format
eapol-start dest-address transform-condition { always | equal-bssid }
undo eapol-start dest-address transform-condition
Usage Guidelines
Usage Scenario
The destination MAC addresses of the EAPOL-start packets sent by some STAs are APs' BSSIDs, but the destination MAC addresses of the EAPOL-start packets sent by other STAs are not APs' BSSIDs. You need to run this command to specify the EAPOL-start packets to be encapsulated.
Precautions
The packet types specified by the eapol-start dest-address transform-condition and eapol-start dest-address transform-to commands must be the same.
eapol-start dest-address transform-to
Function
The eapol-start dest-address transform-to command configures an AP to encapsulate EAPOL-start packets into broadcast, multicast, or unicast packets.
The undo eapol-start dest-address transform-to command restores the default settings.
By default, an AP encapsulates EAPOL-start packets into multicast packets.
Format
eapol-start dest-address transform-to { broadcast | multicast | mac mac-address }
undo eapol-start dest-address transform-to
Parameters
Parameter |
Description |
Value |
---|---|---|
broadcast |
Configures an AP to encapsulate EAPOL-start packets into broadcast packets. |
- |
multicast |
Configures an AP to encapsulate EAPOL-start packets into multicast packets. |
- |
mac mac-address |
Configures an AP to encapsulate EAPOL-start packets into unicast packets. |
The value is in H-H-H format. An H is a hexadecimal number of four digits. |
Usage Guidelines
- If the authentication server can only process EAP multicast packets, configure the AP to encapsulate EAPOL-start packets into multicast packets.
- If the authentication server can only process EAP broadcast packets, configure the AP to encapsulate EAPOL-start packets into broadcast packets.
- If the authentication server can only process EAP unicast packets, configure the AP to encapsulate EAPOL-start packets into unicast packets. When the AP is configured to encapsulate EAPOL-start packets into unicast packets, a unicast MAC address must be configured.
eirp
Function
(AP group radio view) The eirp command configures the transmit power for all specified radios in an AP group.
(AP group radio view) The undo eirp command restores the default transmit power for all specified radios in an AP group.
(AP radio view) The eirp command configures the transmit power for an AP radio.
(AP radio view) The undo eirp command cancels the configuration of the transmit power on an AP radio. The transmit power on the AP radio is then determined by that configured in the AP group radio view.
By default, the transmit power of a radio is 127 dBm. The transmit power that takes effect on APs is related to the AP type, country code, channel, and channel bandwidth. It is the maximum transmit power that the AP radio supports under the current configuration. Run the display radio { ap-name ap-name | ap-id ap-id } command to check the maximum value.
Usage Guidelines
Usage Scenario
You can configure the transmit power for a radio based on actual network environments, enabling radios to provide the required signal strength and improving signal quality on WLANs.
Precautions
The value of antenna-gain in the antenna-gain antenna-gain command must be consistent with the gain of the antenna connected to an AP.
If automatic transmit power selection is enabled by running the undo calibrate auto-txpower-select disable command, the transmit power configured by running the eirp command does not take effect. The automatically selected transmit power prevails.
If automatic transmit power selection is disabled by running the calibrate auto-txpower-select disable command, the transmit power configured by running the eirp command takes effect depending on the following principles:
- If the configured transmit power of a radio is in compliance with local laws and regulations and within the transmit power range supported by the AP, the configured transmit power is the actual transmit power of the radio.
- If the configured transmit power of a radio is smaller than the minimum transmit power supported by the AP, the smaller one between the minimum transmit power supported by the AP and maximum transmit power required by local laws and regulations is the actual transmit power of the radio.
- If the configured transmit power of a radio is larger than the maximum transmit power supported by the AP, the smaller one between the maximum transmit power supported by the AP and maximum transmit power required by local laws and regulations is the actual transmit power of the radio.
The configuration in the AP radio view has a higher priority than that in the AP group radio view.
Example
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] ap-id 1 [HUAWEI-wlan-ap-1] radio 0 [HUAWEI-wlan-radio-1/0] eirp 30 Info: The EIRP value takes effect only when automatic transmit power selection i s disabled, and the value depends on the AP specifications and local laws and re gulations.
eth-trunk (AP wired port profile view)
Usage Guidelines
Usage Scenario
To improve the connection reliability and increase the bandwidth, you can run this command to bind multiple interfaces into an Eth-Trunk.
Prerequisite
The physical interface to be added to an Eth-Trunk cannot have other configurations. Before adding a physical interface to an Eth-Trunk, clear all configurations on it except the interface status, descriptions, LLDP function, and alarm function for CRC errors.
Precautions
After the configuration, you need to restart the AP to make the configured Eth-Trunk on the AP's wired interfaces take effect.
APs that have only one physical uplink network interface do not support this command.
Downlink interfaces on an AP do not support the Eth-Trunk function.
forward-mode
fragmentation-threshold
Parameters
Parameter |
Description |
Value |
---|---|---|
fragmentation-threshold |
Specifies the fragment threshold. If the length of a frame to be sent by the MAC layer exceeds this threshold, the frame is fragmented before being sent. |
The value is an integer that ranges from 256 to 2346, in bytes. It must be an integral multiple of 2. |
Usage Guidelines
Usage Scenario
A proper packet fragmentation threshold can improve channel bandwidth usage. Set the fragmentation threshold as required. A large threshold is recommended.
Precautions
When the packet fragmentation threshold is too small, packets are fragmented into smaller frames. These frames are transmitted at a high extra cost, resulting in low channel efficiency.
When the packet fragmentation threshold is too large, long packets are usually not fragmented, which increases the transmission time and error probability. If an error occurs, packets are retransmitted, resulting in a waste of channel bandwidth.
frequency
Function
(AP group radio view) The frequency command sets the working frequency of radios for all APs in an AP group.
(AP group radio view) The undo frequency command restores the default working frequency of radios for all APs in an AP group.
(AP radio view) The frequency command sets the working frequency of radios for an AP.
(AP radio view) The undo frequency command restores the working frequency of the radio on an AP to the working frequency configured in the AP group radio view.
By default, radio 0 works on the 2.4 GHz frequency band, and radio 2 works on the 5 GHz frequency band.
Usage Guidelines
Usage Scenario
Radio 0s of the AP2010DN, AP8130DN-W, , AP6052DN, AP7052DN, AP7152DN, AP8182DN, AP8150DN and AP8130DN support 2.4 GHz and 5 GHz frequency bands but they can work on one frequency band at a time. You can configure the working frequency band of the AP based on the frequency band of STAs.
Precautions
The configuration of the 5 GHz frequency band for radio 0 takes effect only on the AP2010DN, AP4030TN supporting three radios, AP8130DN-W, , AP6052DN, AP7052DN, AP7152DN, AP8182DN, AP8150DN and AP8130DN.
The three radios of the AP4051TN and AP8050TN-HD are fixed. Radio 0 works on the 2.4 GHz frequency band, while radios 1 and 2 work on the 5 GHz frequency band.
- On the AP6052DN, AP7052DN, AP7152DN, and AP8182DN, radio 1 works on high-frequency channels, and radio 0 works on low-frequency channels.
- On the AP8050TN-HD and AP4051TN, radio 1 works on high-frequency channels, and radio 2 works on low-frequency channels.
Changing the working frequency of radio 0 and radio 2 will delete the channel, power, and antenna gain configurations on radio 0 and radio 2. If an AP uses an external antenna, run the antenna-gain antenna-gain command to reconfigure the antenna gain to be consistent with the gain of the external antenna connected to the AP.
If the working frequency band of the AP radio set using the preceding commands is the same as that of the AP's actual working frequency band, the AP will not restart. Otherwise, the AP restarts after the preceding commands are run.
Only the AP4030TN supports three radios.
The configuration in the AP radio view has a higher priority than that in the AP group radio view.
If an AP works in dual-5G mode, the channels of the two 5G radios must be separated by at least one channel.
For example, a country supports 40 MHz 5G channels 36, 44, 52, and 60. When deploying 5G radio channels, if one radio is deployed on channel 36, it is recommended that the other radio be deployed on channel 52 or 60. Channel 44 is not recommended in this case.
Example
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] ap-id 1 [HUAWEI-wlan-ap-1] radio 0 [HUAWEI-wlan-radio-1/0] frequency 5g Warning: Modifying the frequency band will delete the channel, power, and antenn a gain configurations of the current radio on the AP and reboot the AP. Continue?[Y/N]:Y
guard-interval-mode
Usage Guidelines
During data transmission, the receive and transmit ends do not receive and send data at all times. There is an interval between the first and second data receiving or transmission or among multiple transmissions. The interval is called Guard Interval (GI) and can improve the transmission effect.
The GI mode consists of the short interval and common interval. The common interval is 800 ns whereas the short interval is 400 ns. The short interval is applicable to 802.11n and 802.11ac specifications, which can raise the transmission rate of 802.11n and 802.11ac packets.
high-temperature threshold
Function
The high-temperature threshold command sets the upper temperature alarm threshold for APs.
The undo high-temperature threshold command restores the default upper temperature alarm threshold for APs.
AP Model |
Default Value (°C) |
---|---|
AP4030DN/AP4050DN-S/AP4051DN/AP4151DN |
55 |
AP4050DN/AP1050DN-S |
96 |
AP5030DN/AP5130DN |
87 |
AP6010SN-GN |
85 |
AP6010DN-AGN |
102 |
AP6310SN-GN |
94 |
AP6510DN-AGN |
88 |
AP6510DN-AGN-US |
81 |
AP6610DN-AGN |
104 |
AP6610DN-AGN-US |
100 |
AP7110SN |
76 |
AP7110DN |
89 |
AP7030DE/AP9330DN/AP8050DN/AP8050DN-S/AP8150DN |
83 |
AP8030DN |
86 |
AP8130DN |
88 |
AP9131DN/AP9132DN |
84 |
AD9431DN-24X |
71 |
AD9430DN-24 |
71 |
AD9430DN-12 |
83 |
R230D/R240D/R250D-E/AP2050DN/AP2050DN-E |
40 |
R450D |
96 |
AP6050DN |
86 |
AP7050DE |
88 |
AP7050DN-E |
89 |
AP4030TN/AP4050DN-E/AP4050DN-HD/AP6150DN |
50 |
R250D |
102 |
AP7052DN/AP7152DN/AP7052DE/AP6052DN/AP4051TN |
88 |
AP7052DE |
95 |
AP8082DN/AP8182DN/AP8050TN-HD |
91 |
ht a-mpdu disable
ht a-mpdu max-length-exponent
Function
The ht a-mpdu max-length-exponent command sets the maximum length of an aggregated MPDU (A-MPDU) on the 802.11n radio. MPDU stands for MAC protocol data unit.
The undo ht a-mpdu max-length-exponent command restores the maximum length of an A-MPDU on the 802.11n radio to the default value.
By default, the index for the maximum length of an A-MPDU is 3. The maximum length of the A-MPDU is 65535 bytes.
Parameters
Parameter |
Description |
Value |
---|---|---|
max-length-exponent-index |
Indicates the index for the maximum length of the A-MPDU. |
The value is an integer that ranges from 0 to 3.
|
Usage Guidelines
To reduce costs, 802.11n uses frame aggregation technology that aggregates two or more frames into an A-MPDU to transmit.
Example
# Set the index of the maximum length of the A-MPDU to 2 in the 2G radio profile default. The index 2 corresponds to a maximum length of 32767 bytes.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] radio-2g-profile name default [HUAWEI-wlan-radio-2g-prof-default] ht a-mpdu max-length-exponent 2
ipsg enable (AP wired port profile view)
Usage Guidelines
Usage Scenario
Attackers often use packets with the source IP addresses or MAC addresses of authorized users to access or attack networks. As a result, authorized users cannot obtain stable and secure network services. You can enable the IPSG function to prevent the situation.
Prerequisites
Terminal address learning has been enabled on the AP's wired interface using the learn-client-address ipv4 enable command.
Follow-up Procedure
Bind the AP wired port profile to an AP group or AP.
Precautions
This command takes effect only on IP packets transmitted on an AP's wired interface.
The AP wired interfaces added to an Eth-trunk interface do not support this function.
ip-address (AP view)
Parameters
Parameter | Description | Value |
---|---|---|
ip-address | Specifies the static IPv4 address for an AP. | The value is in dotted decimal notation. |
mask | Specifies the IPv4 address mask for an AP. | The value is in dotted decimal notation. |
mask-length | Specifies the IPv4 address mask length for an AP. | The value is an integer that ranges from 0 to 32. |
gateway gateway | Specifies the egress gateway for AP routes. | The value is in dotted decimal notation. |
Usage Guidelines
Usage Scenario
To configure an AP to go online using a specified IPv4 address, run the command to configure a static IPv4 address for the AP.
Prerequisites
The AP has been configured to obtain an IP address in static mode using the address-mode (AP provisioning view) command.
Precautions
Ensure that there are reachable routes between the configured IPv4 address and the AC source address for an AP to go online. Otherwise, the AP may fail to go online.
CAPWAP packets between the central AP and RUs are forwarded at Layer 2 and are independent of IP addresses on an agile distributed WLAN. Therefore, the configuration of a static IP address does not affect the RU going online. Ensure that a route is reachable between the IP address of the RU and the central AP source address. Otherwise, services involving IP addresses may be affected, for example, Telnet.
If the AP and AC are connected through a Layer-3 network, the egress gateway for AP routes must be configured.
Example
# Set the static IPv4 address of the AP to 10.1.1.1/24.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] ap-id 0 [HUAWEI-wlan-ap-0] address-mode static Warning: The incorrect configuration will cause the AP to go out of management. This operation will deliver parameter setting and ma y cause reboot of AP(s). Continue?[Y/N]:y [HUAWEI-wlan-ap-0] ip-address 10.1.1.1 24 Warning: The incorrect configuration will cause the AP to go out of management. This operation will deliver parameter setting and ma y cause reboot of AP(s). Continue?[Y/N]:y
ip-address (AP provisioning view)
Parameters
Parameter | Description | Value |
---|---|---|
ip-address | Specifies the static IPv4 address for an AP. | The value is in dotted decimal notation. |
mask | Specifies the IPv4 address mask for an AP. | The value is in dotted decimal notation. |
mask-length | Specifies the IPv4 address mask length for an AP. | The value is an integer that ranges from 0 to 32. |
gateway gateway | Specifies the egress gateway for AP routes. | The value is in dotted decimal notation. |
Usage Guidelines
Usage Scenario
To configure an AP to go online using a specified IPv4 address, run the command to configure a static IPv4 address for the AP.
Prerequisites
The AP has been configured to obtain an IP address in static mode using the address-mode (AP provisioning view) command.
Follow-up Procedure
Run the commit command to deliver configuration to APs and restart the APs to make the configuration take effect.
Precautions
Ensure that there are reachable routes between the configured IPv4 address and the AC source address for an AP to go online. Otherwise, the AP may fail to go online.
CAPWAP packets between the central AP and RUs are forwarded at Layer 2 and are independent of IP addresses on an agile distributed WLAN. Therefore, the configuration of a static IP address does not affect the RU going online. Ensure that a route is reachable between the IP address of the RU and the central AP source address. Otherwise, services involving IP addresses may be affected, for example, Telnet.
If the AP and AC are connected through a Layer-3 network, the egress gateway for AP routes must be configured.
keep-service enable
Function
The keep-service enable command configures the AP to continue providing data services after the CAPWAP link between the AP and AC is disconnected.
The undo keep-service enable command restores the default setting.
By default, all services on the AP are interrupted after the CAPWAP link between the AP and AC is disconnected.
Usage Guidelines
Usage Scenario
In direct forwarding mode, you can run the keep-service enable command to configure the AP to continue providing data services after the CAPWAP link between the AP and AC is disconnected. The data services then no longer depend on the CAPWAP link, which enhances service forwarding robustness.
Precautions
The command does not take effect on a WDS network.
The offline management VAP function and service holding upon CAPWAP link disconnection are mutually exclusive. When the two functions are configured at the same time, the offline management VAP function cannot take effect.
After this command is executed, if the wids device detect enable and wids contain enable commands are configured to enable rogue device detection and containment, the AP will continue providing data services after going offline. However, the AC considers the AP as a rogue device and adds it to the containment list. The containment mechanism will disconnect STAs from the AP. Therefore, service holding upon CAPWAP link disconnection does not take effect in this case.
keep-service enable allow new-access
Usage Guidelines
Usage Scenario
The networks with low security requirements, which apply to hospitals or warehouses, require that the APs in fault state still allow access of new STAs when link faults occur between the APs and AC. After the keep-service enable allow new-access command is run, new STAs can still connect to the APs in fault state when the CAPWAP link between the APs and AC is disconnected.
Prerequisites
Open system, Portal, MAC address, WEP, or WPA/WPA2-PSK authentication is used.
Precautions
The command does not take effect on a WDS network.
After this command is executed, if the wids device detect enable and wids contain enable commands are configured to enable rogue device detection and containment, the AP will continue providing data services after going offline. However, the AC considers the AP as a rogue device and adds it to the containment list. The containment mechanism will disable the AP from allowing access of new STAs. Therefore, the function of enabling an offline AP to allow access of new STAs does not take effect in this case.
To enable an offline AP to allow access of new STAs using Portal or MAC address authentication, configure the no-auth parameter.
learn-client-address enable (AP wired port profile view)
Usage Guidelines
Usage Scenario
After terminal address learning is enabled on an AP's wired interface, if a wired terminal connected to the AP wired interface successfully obtains an IP address, the AP automatically reports the IP address of the terminal to the AC, helping to maintain the ARP binding entries of wired terminals.
Follow-up Procedure
Bind the AP wired port profile to an AP group or AP.
Precautions
The AP wired interfaces added to an Eth-trunk interface do not support this function.
If a bridging device functions as a STA to connect to an AP enabled with STA address learning, the AP cannot learn IP addresses of users connected to the bridging device; therefore, the users cannot communicate with the network. In this situation, disable STA address learning.
legacy-station disable
Parameters
Parameter | Description | Value |
---|---|---|
only-dot11b | Denies access of non-HT STAs that support only 802.11b. | - |
Usage Guidelines
Usage Scenario
Non-HT STAs support only 802.11a/b/g and provide a data transmission rate far smaller than the rate of 802.11n/ac STAs. If the non-HT STAs access the wireless network, the data transmission rate of 802.11n/ac STAs will be reduced. To prevent the transmission rate of 802.11n/ac STAs from being affected, you can run the legacy-station [ only-dot11b ] disable command to deny access of all or only 802.11b-compliant non-HT STAs.
Configuration Impact
After the legacy-station disable command is run, non-HT STAs supporting only 802.11a/b/g cannot access the wireless network.
After the legacy-station only-dot11b disable command is run, non-HT STAs supporting only 802.11b cannot access the wireless network.
After access of non-HT STAs is denied, services may be interrupted.
Precautions
- WMM function in a 2G or 5G radio profile disabled using the wmm disable command
- Pre-shared key authentication and TKIP encryption for WPA/WPA2 configured using the security { wpa | wpa2 | wpa-wpa2 } psk { pass-phrase | hex } key-value tkip command when the security profile is used
- 802.1X authentication and TKIP encryption for WPA/WPA2 configured using the security { wpa | wpa2 | wpa-wpa2 } dot1x tkip command when the security profile is used
- WEP shared key authentication mode configured using the security wep [ share-key ] command when the security profile is used
- 802.11b/g radio type in the 2G radio profile configured using the radio-type { dot11b | dot11g } command
- 802.11a radio type in the 5G radio profile configured using radio-type dot11a command
After the legacy-station only-dot11b disable command is run, the access of non-HT STAs supporting only 802.11b is denied. If 802.11b radio type in the 2G radio profile has been configured using the radio-type dot11b command, the access of non-HT STAs supporting only 802.11b fails to be denied.
Example
# Deny access of non-HT STAs.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] ssid-profile name ssid1 [HUAWEI-wlan-ssid-prof-ssid1] legacy-station disable Warning: If the wmm disable command, TKIP, WEP, or radio type of 802.11a/b/g is configured, the function of denying access of legac y STAs cannot take effect.
lldp admin-status
Parameters
Parameter |
Description |
Value |
---|---|---|
rx |
Specifies the LLDP operation mode as Rx. An AP only receives but does not send LLDP packets. |
- |
tx |
Specifies the LLDP operation mode as Tx. An AP only sends but does not receive LLDP packets. |
- |
txrx |
Specifies the LLDP operation mode as TxRx. An AP sends and receives LLDP packets. |
- |
lldp dot3-tlv power (AP wired port link profile view)
Parameters
Parameter |
Description |
Value |
---|---|---|
802.1ab |
Indicates that the 802.3 Power via MDI TLV advertised an AP's wired interface complies with 802.1ab. |
- |
802.3at |
Indicates that the 802.3 Power via MDI TLV advertised an AP's wired interface complies with 802.3at. |
- |
802.3bt |
Indicates that the 802.3 Power via MDI TLV advertised an AP's wired interface complies with 802.3bt. |
- |
Usage Guidelines
Usage Scenario
- 802.1ab format: [ TLV type | TLV information string length | 802.3 OUI | MDI power support | PSE power pair | power class ]
- 802.3at format: [ TLV type | TLV information string length | 802.3 OUI | MDI power support | PSE power pair | power class | type/source/priority | PD requested power value | PSE allocated power value ]
- 802.3bt format: [ TLV type | TLV information string length | 802.3 OUI | MDI power support | PSE power pair | power class | type/source/priority | PD requested power value | PSE allocated power value | PD requested power value Mode A | PD requested power value Mode B | PSE allocated power value Alternative A | PSE allocated power value Alternative B | PSE power status | System setup | PSE maximum available power | Autoclass | Power down ]
Prerequisites
- The LLDP function has been enabled in both the WLAN view and AP wired port link profile view.
- APs' wired interfaces are allowed to advertise the 802.3 Power via MDI TLV.
Precautions
Before selecting a format of the 802.3 Power via MDI TLV, you need to know the TLV formats supported by the neighbors. The TLV format on the local device must be the same as that on the neighbors.
Member interfaces of the Eth-Trunk do not support this command.
lldp enable
Usage Guidelines
Usage Scenario
AP wired interfaces can exchange LLDP packets with neighbors to obtain neighbor status and transmit AP status to neighbors. The AP and neighbors save the received information to the Management Information Base (MIB) for an AC to query and determine the link status.
Prerequisite
The LLDP function has been enabled in the WLAN view using the ap lldp enable command.
lldp message-transmission delay (AP system profile view)
Parameters
Parameter |
Description |
Value |
---|---|---|
delay |
Specifies the LLDP packet transmission delay. |
The value is an integer that ranges from 1 to 8192, in seconds. The delay value depends on the parameter interval set by the lldp message-transmission interval command. The delay value must be smaller than or equal to a quarter of the interval value. |
Usage Guidelines
Usage Scenario
There is a delay before the AP sends an LLDP packet to the neighbor when the device status changes frequently.
If the AP status changes frequently, extend the delay in preventing the AP from frequently sending packets to the neighbors. A delay suppresses the network topology flapping.
Configuration Impact
The LLDP packet transmission delay must be set properly and adjusted according to network loads.
- A large value reduces the LLDP packet transmission frequency when the local device status frequently changes. This helps save system resources. However, if the value is too large, the device cannot notify neighbors of its status in a timely manner, and the NMS cannot discover the network topology changes in real time.
- A small value increases the LLDP packet transmission frequency and enables the NMS to discover network topology changes in real time when the local device status frequently changes. However, if the value is too small, LLDP packets are exchanged frequently. This increases the system load and wastes resources.
- The default value is recommended.
Precautions
- Decreasing the value of delay is not restricted by the value of interval. delay can be any number from 1 to 8192.
- The delay value must be smaller than or equal to a quarter of the interval value. Therefore, if you want to set delay to be greater than a quarter of interval, first increase the interval value to at least four times the new delay value, and then increase the delay value.
If the interval value is smaller than four times the delay value, the system displays an error message when you run the undo lldp message-transmission delay command. To run the undo lldp message-transmission delay command, increase the interval value to at least four times the delay value first.
lldp message-transmission hold-multiplier (AP system profile view)
Function
The lldp message-transmission hold-multiplier command sets the hold time multiplier of device information stored on neighbors.
The undo lldp message-transmission hold-multiplier command restores the default hold time multiplier of device information stored on neighbors.
Format
lldp message-transmission hold-multiplier hold
undo lldp message-transmission hold-multiplier
Usage Guidelines
Usage Scenario
The time multiplier is used to calculate how long a packet can be saved on a neighboring node. After receiving an LLDP packet, a neighbor updates the aging time of the device information from the sender based on the TTL.
The storage time calculation formula is: TTL = Min (65535, (interval x hold)).
TTL is the device information storage time. It is the smaller value between 65535 and (interval x hold).
interval indicates the interval at which the device sends LLDP packets to neighbors. This parameter is set by the lldp message-transmission interval command. hold indicates the hold time multiplier of device information stored on neighbors.
After the LLDP function is disabled on the device, its neighbors wait until the TTL of the device information expires, and then delete the device information. This prevents network topology flapping.
Configuration Impact
- A large value of delay prevents network topology flapping. However, if the value is too large, the device cannot notify neighbors of its status in a timely manner, and the NMS cannot discover the network topology changes in real time.
- A small value of delay enables the NMS to discover topology change in time. However, if the value is too small, the neighbors update device information too frequently. This increases the load on the system and wastes resources.
- The default value is recommended.
lldp message-transmission interval (AP system profile view)
Parameters
Parameter |
Description |
Value |
---|---|---|
interval |
Specifies the LLDP packet transmission interval. |
The value is an integer that ranges from 5 to 32768, in seconds. The interval value depends on the parameter delay set by the lldp message-transmission delay command. The interval value must be larger than or equal to 4 times the delay value; otherwise, the system displays an error message when you run the lldp message-transmission interval command. |
Usage Guidelines
Usage Scenario
When the LLDP status of the AP keeps unchanged or the AP does not discover new neighbors, the AP sends LLDP packets to the neighbors at a specified interval.
If you want to change the network topology detection frequency, run the lldp message-transmission interval command to change the LLDP packet transmission interval.
Configuration Impact
- A large value reduces the LLDP packet transmission frequency. This helps save system resources. However, if the value is too large, the device cannot notify neighbors of its status in a timely manner, and the NMS cannot discover the network topology changes in real time.
- A short interval increases the LLDP packet transmission frequency and enables the NMS to discover network topology changes in real time. If the delay is too short, LLDP packets are exchanged frequently. This increases the system load and wastes resources.
- The default value is recommended.
Precautions
- Increasing the value of interval is not restricted by the value of delay. interval can be any number from 5 to 32768.
- The interval value must be larger than or equal to four times the delay value. Therefore, if you want to set interval to be smaller than four times the value of delay, first reduce the delay value to be smaller than or equal to a quarter of the new interval value, and then reduce the interval value.
If the delay value is larger than a quarter of the interval value, the system displays an error message when you run the undo lldp message-transmission interval command. To run the undo lldp message-transmission interval command, reduce the delay value to be smaller than or equal to a quarter of the interval value first.
lldp report enable
lldp report-interval
Function
The lldp report-interval command sets the interval at which an AP reports LLDP neighbor information to an AC.
The undo lldp report-interval command restores the default interval at which an AP reports LLDP neighbor information to an AC.
By default, an AP reports LLDP neighbor information to an AC at an interval of 30 seconds.
lldp restart-delay
Usage Guidelines
When the LLDP status of an AP changes, the AP reports LLDP neighbor information to the connected AC. Setting the delay in re-enabling LLDP on the AP prevents the AP from frequently reporting LLDP neighboring information to the AC when the LLDP status of the AP frequently changes. This reduces the load on the AC and saves resources.
lldp tlv-enable (AP wired port link profile view)
Format
lldp tlv-enable basic-tlv { all | management-address | port-description | system-capability | system-description | system-name }
lldp tlv-enable dot3-tlv power
undo lldp tlv-enable basic-tlv { all | management-address | port-description | system-capability | system-description | system-name }
undo lldp tlv-enable dot3-tlv power
Parameters
Parameter |
Description |
Value |
---|---|---|
basic-tlv | Indicates basic TLVs to be advertised:
|
- |
all | Configures the AP wired interface to advertise all types of TLVs when basic TLVs are configured. |
- |
management-address | Configures the AP wired interface to advertise Management-address TLVs. |
- |
port-description | Configures the AP wired interface to advertise Port Description TLVs. |
- |
system-capability | Configures the AP wired interface to advertise System Capabilities TLVs. |
- |
system-description | Configures the AP wired interface to advertise System Description TLVs. |
- |
system-name | Configures the AP wired interface to advertise System Name TLVs. |
- |
dot3-tlv | Configures an AP's wired interface to advertise TLVs defined by IEEE 802.3. |
- |
power | Configures an AP's wired interface to advertise the Power Via MDI TLV defined by IEEE 802.3, and negotiate the PoE power. |
- |
Usage Guidelines
Usage Scenario
In LLDP, all device information is encapsulated in Link Layer Discovery Protocol data units (LLDPDUs), which are then sent to neighbors. An LLDPDU contains a variety of TLVs. In a TLV, T indicates the information type, L indicates the information length, and V indicates the value or the content to be sent.
Devices exchange LLDPDUs carrying TLVs to obtain neighbor information. The TLVs that can be encapsulated in an LLDP packet include basic TLVs, TLVs in the IEEE 802.3 format.
Basic TLVs are essential for managing network devices. The TLVs in the IEEE 802.3 format are defined by standardization organizations and other organizations, which are used to enhance the network device management. You can determine whether to advertise the TLVs in the IEEE 802.3 format.
Devices on both ends can have different TLV types configured. You only need to configure TLV types according to networking requirements.
Prerequisites
The LLDP function has been enabled in both the WLAN view and AP wired port link profile view.
Precautions
When basic TLVs are configured, if the all parameter is specified, all optional basic TLVs are advertised. If the all parameter is not specified, TLVs of only one type can be advertised at a time. To advertise multiple types of TLVs, run this command multiple times.
lldp tlv-enable legacy-tlv four-pair-power (AP wired port link profile view)
Function
The lldp tlv-enable legacy-tlv four-pair-power command configures an AP's wired interface to advertise Cisco's proprietary TLVs.
The undo lldp tlv-enable legacy-tlv four-pair-power command prohibits an AP's wired interface from advertising Cisco's proprietary TLVs.
By default, an AP's wired interface advertises Cisco's proprietary TLVs.
Usage Guidelines
Usage Scenario
Some Cisco's switches use proprietary LLDP TLVs to negotiate the UPoE power supply. If such a switch is used to supply UPoE power to an AP, the AP's wired interface connected to the switch must be enabled to advertise Cisco's proprietary TLVs for UPoE power negotiation. Otherwise, LLDP negotiation fails. If interfaces on the Cisco's switch do not supply UPoE power, the AP is provided with insufficient input power and cannot work properly.
log-record-level
Format
log-record-level { alert | critical | debug | emergency | error | info | notice | warning }
undo log-record-level
Parameters
Parameter |
Description |
Value |
---|---|---|
alert |
Configures the level of logs as alert, that is, the AP backs up logs that need to be processed immediately. |
- |
critical |
Configures the level of logs as critical, that is, the AP backs up critical logs. |
- |
debug |
Configures the level of logs as debug, that is, the AP backs up debugging logs. |
- |
emergency |
Configures the level of logs as emergency, that is, the AP backs up unavailable logs. |
- |
error |
Configures the level of logs as error, that is, the AP backs up error logs. |
- |
info |
Configures the level of logs as info, that is, the AP backs up normal logs. |
- |
notice |
Configures the level of the logs as notice, that is, the AP backs up logs that need to be noticed. |
- |
warning |
Configures the level of logs as warning, that is, the AP backs up warning logs. |
- |
Usage Guidelines
Usage Scenario
An AP periodically backs up logs to the log server. However, not all the logs need to be backed up. You can run the log-record-level command to configure the level of logs to be periodically backed up.
Precautions
The preference order of log levels is emergency, alert, critical, error, warning, notice, info, and debug.
After you specify the level for AP logs that need to be backed up, all logs of the specified level or a higher level will be backed up. For example, if you set the level of AP logs that need to be backed up to critical, the logs of the levels emergency, alert, and critical will be backed up.
log-server
Function
The log-server command configures the log server IP address in the AP system profile and enables log backup on the AP.
The undo log-server command restores the default configurations.
By default, the log server IP address is not configured in an AP system profile and log backup is disabled on an AP.
Usage Guidelines
You can run the command to configure the log server IP address in the AP system profile and enable log backup on the AP. After log backup is enabled, the AP automatically sends logs to the log server with the specified IP address.
low-temperature threshold
Function
The low-temperature threshold command sets the lower temperature alarm threshold for APs.
The undo low-temperature threshold command restores the default lower temperature alarm threshold for APs.
AP Model |
Default Value (°C) |
---|---|
AP6010SN-GN/AP6010DN-AGN/AP6310SN-GN/AP7110DN-AGN/AP7110SN-GN/AP9330DN/AP6052DN/AP4051TN/AP7152DN/AP7052DE/AP7052DN |
-13 |
AP6510DN-AGN/AP6610DN-AGN/AP6510DN-AGN-US/AP6610DN-AGN-US/AP8030DN/AP8050DN/AP8050DN-S/AP8150DN/AP8130DN/AP9131DN/AP9132DN/AP8082DN/AP8182DN/AP8050TN-HD |
-43 |
AP5030DN/AP5130DN |
-28 |
AP7030DE |
-23 |
AD9430DN-24/AD9431DN-24X |
-3 |
AD9430DN-12 |
-13 |
R230D/R240D/R250D-E/AP2050DN/AP2050DN-E |
0 |
AP6050DN/AP7050DE/AP7050DN-E |
-13 |
AP4030TN/AP4050DN-E/AP4050DN-HD/AP6150DN |
-10 |
R450D |
-13 |
R250D |
-3 |
The AP2010DN, AP2030DN, AP2050DN, AP2050DN-E, AP430-E, AP3010DN-AGN, AP5010SN-GN, AP5010DN-AGN, AP4030DN, AP4050DN-S, AP4051DN, AP4151DN, and AP4130DN do not support this command.
management-vlan
Function
The management-vlan command configures CAPWAP packets sent from an AP wired interface to carry a management VLAN tag.
The undo management-vlan command cancels the management VLAN configuration for CAPWAP packets sent from an AP wired interface.
By default, CAPWAP packets sent from an AP wired interface do not carry a management VLAN tag.
Usage Guidelines
Usage Scenario
By default, CAPWAP packets sent from an AP wired interface do not carry a management VLAN tag. In most cases, the access switch interface directly connected to the AP adds the PVID to the CAPWAP packets as the management VLAN ID.
If the PVID of the access device has been used for other purposes (for example, as the default VLAN ID of wired users), the PVID cannot be configured as the management VLAN ID on the access device interface. In this case, configure CAPWAP packets sent from an AP wired interface to carry the management VLAN tag. The AP then adds the management VLAN ID to the CAPWAP packets sent to the AC. You only need to configure the access device to allow the packets carrying the management VLAN ID to pass.
Precautions
The configuration takes effect only after the AP is restarted.
On a Mesh network, ensure that CAPWAP packets sent from all APs carry the same management VLAN. Otherwise, MPs cannot go online.
In the following precautions, packets sent from an AP wired interface refer to CAPWAP packets.
After the management-vlan vlan-id command is executed, to configure the AP wired interface to allow packets carrying the management VLAN tag to pass through, run the vlan tagged vlan-id command to add the AP wired interface to the management VLAN in tagged mode.
After the management-vlan vlan-id command is executed, to disable packets sent from the AP wired interface from carrying the management VLAN tag, run the vlan untagged vlan-id command to add the AP wired interface to the management VLAN in untagged mode.
After the management-vlan vlan-id command is executed, to add the management VLAN tag to untagged packets received on the AP wired interface, run the vlan pvid vlan-id command to set the PVID of the AP wired interface to the management VLAN ID.
Example
# Configure CAPWAP packets sent from an AP wired interface to carry management VLAN 2 in the AP system profile view.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] ap-system-profile name ap-system1 [HUAWEI-wlan-ap-system-prof-ap-system1] management-vlan 2 Warning: The incorrect management VLAN configuration will cause the AP to go out of management. This operation will make the AP rese t. Continue? [Y/N]:y
max-sta-number (SSID profile view)
Usage Guidelines
Usage Scenario
More access users on a VAP indicate fewer network resources that each user can occupy. To ensure Internet experience of users, you can run the max-sta-number command to set a proper maximum number of successfully associated STAs on a VAP.
Configuration Impact
After th max-sta-number command is executed, online STAs are forcibly to go offline. When STAs reassociate with the VAP and the number of associated STAs on the VAP reaches the maximum, new STAs fail to associate with this VAP.
The max-sta-number max-sta-number command sets the maximum number of successfully associated STAs on a VAP while the authentication wlan-max-user max-user-number command sets the maximum number of STAs authenticated and allowed to pass through in an authentication profile.
Precautions
The maximum number of successfully associated STAs on a specified VAP refers to the maximum number of successfully associated STAs on a VAP of a single AP.
memory-usage threshold
Usage Guidelines
- When the memory usage of an AP exceeds the alarm threshold, the AP sends an alarm message to the AC, and the AC displays the alarm information.
- When the memory usage of an AP falls below the alarm threshold, the AP sends a clear alarm message to the AC, and the AC displays the clear alarm information.
mtu
Usage Guidelines
The MTU value is the maximum size of packets sent and received on the management VLANIF of an AP.
Precautions
DHCP packets cannot be fragmented. When the MTU value set using the mtu command is smaller than the DHCP packet length, DHCP packets cannot be forwarded. Therefore, set a larger MTU value.
If the MTU value is smaller than the DHCP packet length, the AP may be disconnected. In this case, restart the AP.
mu-mimo disable
Usage Guidelines
Usage Scenario
Carrier sense multiple access with collision avoidance (CSMA-CA) allows an air interface channel to be occupied only by one STA, and other STAs cannot communicate with the AP. After MU-MIMO is enabled, STAs supporting MU-MIMO can form an MU group to simultaneously receive downlink data from the same air interface channel, improving channel efficiency and overall downlink throughput.
Precautions
VAPs of only the AP1050DN-S, R450D, R250D, R250D-E, AP2050DN, AP2050DN-E, AP4050DN, AP4050DN-S, AP4051DN, AP4151DN, AP8050DN, AP8050DN-S, AP8150DN, AP4051TN, AP6052DN, AP7052DN, AP7152DN, AP7052DE, AP8050TN-HD, AP8082DN, AP8182DN, AP4050DN-E, AP4050DN-HD, AP6050DN, AP6150DN, AP7050DE, and AP7050DN-E support MU-MIMO on 5 GHz radios.
In WDS scenarios, ensure that the number of spatial streams on STA VAPs is smaller than that on AP VAPs. Otherwise, MU-MIMO cannot take effect. For example, if STA VAPs and AP VAPs are both configured with three spatial streams, an AP VAP can communicate with only one STA VAP even if MU-MIMO has been enabled.
mu-mimo optimize enable
Usage Guidelines
Usage Scenario
In an environment with less interference, you can run the mu-mimo optimize enable command to enable the MU-MIMO optimization function to meet requirements for high downlink throughput of the AP. The expected effect may fail to be achieved in some scenarios.
Precautions
VAPs of only the AP1050DN-S, R450D, R250D, R250D-E, AP2050DN, AP2050DN-E, AP4050DN, AP4050DN-S, AP4051DN, AP4151DN, AP8050DN, AP8050DN-S, AP8150DN, AP4051TN, AP6052DN, AP7052DN, AP7152DN, AP7052DE, AP8050TN-HD, AP8082DN, AP8182DN, AP4050DN-E, AP4050DN-HD, AP6050DN, AP6150DN, AP7050DE, and AP7050DN-E support MU-MIMO on 5 GHz radios.
Prerequisites
The MU-MIMO function has been enabled using the undo mu-mimo disable command.
multicast-rate
Function
The multicast-rate command configures the multicast rate of wireless packets in a radio profile.
The undo multicast-rate command restores the default multicast rate of wireless packets in a radio profile.
By default, the multicast rate of wireless packets is not configured in a radio profile. That is, the multicast rate is set to auto-sensing.
Parameters
Parameter |
Description |
Value |
---|---|---|
multicast-rate |
Specifies the multicast rate of wireless packets in a radio profile. |
Enumerated type. The values are as follows in a 2G radio profile:
The values are as follows in a 5G radio profile:
|
Usage Guidelines
After this command is run, the multicast rate of wireless packets is the configured value and irrelevant to the STA access mode.
If the configured multicast rate is not in the basic rate set and the STA does not support this rate, the STA cannot receive multicast data.
If you run the radio-type dot11b command in the 2G radio profile view to set the radio type to dot11b, and the 2G radio profile is applied to an AP, multicast-rate that takes effect on the 2 GHz radio of the AP is fixed as 1 Mbps, and multicast-rate configured in the 2G radio profile view does not take effect on the AP.
poe af-inrush enable (AP system profile view)
Usage Guidelines
Usage Scenarios
The AP that conforms to IEEE 802.3at cannot power non-IEEE standard PDs that do not support inrush current. To power these PDs, configure the AP to provide power with low current in conformance to IEEE 802.3af. When all PDs connected to the AP are IEEE standard-compliant PDs, run the undo poe af-inrush enable command to cancel the configuration.
Precautions
- The poe af-inrush enable command does not take effect on an interface if the poe force-power (AP wired port link profile view) command has been executed on the interface.
- After this command is configured, the AP cannot provide power for IEEE 802.3at-compliant PDs.
This command takes effect only on the AP7050DN-E, AP4050DN-E, AP4050DN-HD, AP7052DN, AP7152DN, AD9431DN-24X, AD9430DN-24, and AD9430DN-12.
Configuration Impact
After running the poe af-inrush enable command, remove the non-IEEE 802.3at PDs and then install them so that the PDs can be powered on.
poe disable (AP wired port link profile view)
Usage Guidelines
Usage Scenarios
Before using an AP to provide power for PDs connected to its interfaces, ensure that the PoE function is enabled on the interfaces. To enable the PoE function on an interface, run the undo poe disable command.
The power-on and power-off of interfaces are determined by the PoE power and interface power priority. When the PoE power is sufficient, the device does not power off one interface. To stop providing power for one PD, run the poe disable command.
Precautions
The AP only supports PoE power supply on downlink interfaces and does not support PoE power supply on uplink interfaces.
This command takes effect only on the AP8082DN, AP8182DN, AP4050DN-E, AP4050DN-HD, AP7050DN-E, AP2050DN-E, R250D-E, AD9431DN-24X, AD9430DN-24, and AD9430DN-12.
poe force-power (AP wired port link profile view)
Usage Guidelines
Usage Scenario
After this function is configured, an interface forcibly powers on the connected PD even if the PSE cannot identify the PD. Before powering on the interface, ensure that the system power is sufficient.
Precautions
If a PoE interface connects to a non-PoE device, do not use this command.
This command takes effect only on the AP8082DN, AP8182DN, AP4050DN-E, AP4050DN-HD, AP7050DN-E, AP2050DN-E, R250D-E, AD9431DN-24X, AD9430DN-24, and AD9430DN-12.
poe high-inrush enable (AP system profile view)
Usage Guidelines
Usage Scenario
High inrush current is generated when a non-standard PD is powered on. In this case, the PSE cuts off the power of the PD to protect itself. If the PSE is required to provide power for the PD, the PSE must allow high inrush current.
Precautions
The high inrush current may damage components of a PD.
This command takes effect only on the AP7050DN-E, AP4050DN-E, AP4050DN-HD, AP7052DN, AP7152DN, AD9431DN-24X, AD9430DN-24, and AD9430DN-12.
poe legacy enable (AP wired port link profile view)
Usage Guidelines
Usage Scenario
When compatibility check is enabled, an AP (PSE) can detect and provide power for the PDs incompliant with IEEE 802.3af or 802.3at. If compatibility check is disabled, the AP does not identify or provide power for these PDs.
Precautions
This command takes effect only on the AP8082DN, AP8182DN, AP4050DN-E, AP4050DN-HD, AP7050DN-E, AP2050DN-E, R250D-E, AD9431DN-24X, AD9430DN-24, and AD9430DN-12.
poe max-power (AP system profile view)
Usage Guidelines
Usage Scenarios
By default, the system automatically obtains the maximum PoE power supported by the AP. You can run the poe max-power command to set the maximum output power to ensure stable PoE power supply when the total power of the AP is insufficient.
Precautions
If the maximum output power that you set is smaller than the total power required by PDs, PDs with lower priority are powered off.
The configured maximum output power must be smaller than the total power that the PoE power supply provides for PDs.
This command takes effect only on the AP8082DN, AP8182DN, AP4050DN-E, AP4050DN-HD, AP7050DN-E, AP2050DN-E, R250D-E, AD9431DN-24X, AD9430DN-24, and AD9430DN-12.
poe power-reserved (AP system profile view)
Function
The poe power-reserved command configures the percentage of the reserved PoE power against the total PoE power on an AP.
The undo poe power-reserved command restores the default percentage of the reserved PoE power against the total PoE power on an AP.
By default, the percentage of the reserved PoE power against the total PoE power on an AP is 0%.
Usage Guidelines
Usage Scenarios
The AP can dynamically allocate power to each interface according to the power consumption of each interface. The power consumption of a PD keeps changing when the PD is running. The system periodically calculates the total power consumption of all the PDs. If the total power consumption exceeds the upper threshold of the AP, the system cuts off the power of the PDs on the interfaces of low priority to ensure that other PDs can run normally.
Sometimes, however, the power consumption increases sharply and the available power of the system cannot support the burst increase of power. At this time, the system has not calculated and found that the total power consumption exceeded the upper threshold; therefore, the system does not cut off power low-priority interfaces in time. As a result, the PoE power supply is shut down for overload protection, and all PDs are powered off.
This problem can be solved by running the poe power-reserved command to set proper reserved power. When there is a burst increase in power consumption, the reserved power can support the system running. Then the system has time to power off interfaces of low priority to ensure stable running of other PDs.
Precautions
You can set the maximum output power of an AP using the poe max-power (AP system profile view) command. The available PoE power is the configured maximum output power. If no maximum output power is configured, the available PoE power is the total power provided by the PoE power supply.
This command takes effect only on the AP8082DN, AP8182DN, AP4050DN-E, AP4050DN-HD, AP7050DN-E, AP2050DN-E, R250D-E, AD9431DN-24X, AD9430DN-24, and AD9430DN-12.
poe power-threshold (AP system profile view)
Usage Guidelines
Usage Scenario
The poe power-threshold command sets the alarm threshold of the PoE power consumption percentage. If the total PoE power is 380 W and the alarm threshold is 90%, an alarm is generated when the power consumption is greater than 342 W. When the power consumption falls below 342 W, the alarm is cleared.
Precautions
This command takes effect only on the AP8082DN, AP8182DN, AP4050DN-E, AP4050DN-HD, AP7050DN-E, AP2050DN-E, R250D-E, AD9431DN-24X, AD9430DN-24, and AD9430DN-12.
poe power-off time-range (AP wired port link profile view)
Usage Guidelines
Usage Scenario
You can run the poe power-off time-range command to configure a PoE power-off time range on an interface. If the current time is within the specified time range, the PD connected to the interface cannot be powered on.
To cancel a configured PoE power-off time range on an interface, run the undo poe power-off time-range command. The time range does not take effect on the PD connected to the interface; however, the configuration of the time range is still saved.
Pre-configuration Tasks
Before running the poe power-off time-range command, you must ensure a PoE power-off time range has been configured through running the time-range command in the system view.
Precautions
This command takes effect only on the AP8082DN, AP8182DN, AP4050DN-E, AP4050DN-HD, AP7050DN-E, AP2050DN-E, R250D-E, AD9431DN-24X, AD9430DN-24, and AD9430DN-12.
poe priority (AP wired port link profile view)
Usage Guidelines
Usage Scenario
When the output power of a device is insufficient, the device provides power for the interfaces of the higher power supply priorities first and cuts off power of the interfaces of the lower power supply priorities. If all the interfaces are of the same priority, the power supply priority of the interface with a smaller interface number is higher.
Precautions
This command takes effect only on the AP8082DN, AP8182DN, AP4050DN-E, AP4050DN-HD, AP7050DN-E, AP2050DN-E, R250D-E, AD9431DN-24X, AD9430DN-24, and AD9430DN-12.
port-link-profile (WLAN view)
Function
The port-link-profile command creates an AP wired port link profile and displays the AP wired port link profile view, or displays the view of an existing AP wired port link profile.
The undo port-link-profile command deletes an AP wired port link profile.
By default, the system provides the AP wired port link profile default.
Parameters
Parameter |
Description |
Value |
---|---|---|
name profile-name |
Specifies the name of an AP wired port link profile. |
The value is a string of 1 to 35 case-insensitive characters. It does not contain question marks (?) or spaces, and cannot start or end with double quotation marks (" "). |
all |
Deletes all AP wired port link profiles. |
- |
Usage Guidelines
Usage Scenario
An AP wired port link profile offers link-layer management and configuration on AP's wired interfaces.
Follow-up Procedure
After you create an AP wired port link profile, run the port-link-profile (AP wired port profile view) command to bind it to an AP wired port profile and then run the wired-port-profile (AP group view and view) command to bind the AP wired port profile to an AP or AP group. In this way, the AP wired port link profile can take effect.
Precautions
The AP wired port link profile default cannot be deleted.
The AP wired port link profile referenced by an AP or AP group cannot be deleted. To delete the AP wired port link profile, unbind it from the AP or AP group first.
port-link-profile (AP wired port profile view)
Usage Guidelines
Usage Scenario
After you create an AP wired port link profile using the port-link-profile (WLAN view) command, bind it to an AP wired port profile so that the AP wired port link profile can take effect.
Precautions
After an AP wired port link profile is bound to an AP wired port profile, parameter settings in the AP wired port link profile apply to specified interfaces of all APs using the AP wired port profile.
Example
# Create the AP wired port link profile port-link1 and bind it to the AP wired port profile wired-port1.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] port-link-profile name port-link1 [HUAWEI-wlan-port-link-prof-port-link1] quit [HUAWEI-wlan-view] wired-port-profile name wired-port1 [HUAWEI-wlan-wired-port-wired-port1] port-link-profile port-link1
probe-response-retry
Parameters
Parameter | Description | Value |
---|---|---|
retry-time | Specifies the number of times Probe Response packets are retransmitted. | The value is an integer that ranges from 0 to 3. When the value is set to 0, Probe Response packets are not retransmitted. |
Usage Guidelines
Usage Scenario
In high-density wireless scenarios, too many Probe Response frames occupy a large number of wireless resources. To reduce wireless resource occupation of the frames, you can run the probe-response-retry command to set a small number of or forbid Probe Response packet retransmissions.
Precautions
A small number of Probe Response packet retransmissions may reduce the channel scan efficiency of some STAs while a large number of Probe Response packet retransmissions may lower the wireless network performance.
provision-ap
qbss-load enable
Usage Guidelines
After the qbss-load enable command is executed, APs notify STAs of the AP load status during the STA association. The notified information includes the number of STAs associated with the ratio and channel utilization. STAs choose to associate with the optimal AP based on the AP status, improving air interface performance.
radio
Usage Guidelines
Usage Scenario
The radio configuration in the AP group view or AP view takes effect on all radios at the same time. To perform configuration only on radio 0 or radio 1, enter the view of the corresponding radio to configure the radio parameters.
Precautions
After running the radio radio-id command in the AP group view to enter the radio view, you can perform configurations on all specified radios in the AP group; after running the radio radio-id command in the AP view to enter the radio view, you can perform configurations on the specified AP radio.
radio disable
Function
(AP group radio view) The radio disable command disables all specified radios in an AP group.
(AP group radio view) The undo radio disable command enables all specified radios in an AP group.
(AP radio view) The radio disable command disables an AP radio.
(AP radio view) The undo radio disable command restores the configuration of a specified radio in an AP to the configuration in the AP group radio view.
radio-2g-profile (WLAN view)
Usage Guidelines
Usage Scenario
A 2G radio profile is used to configure and optimize the 2G radio of an AP, but does not take effect on the 5G radio. Create a proper radio profile and apply it in the AP view, AP group view, AP radio view, or AP group radio view. In this way, the AP provides better radio signal transmit and receive capabilities.
Follow-up Procedure
Run the radio-2g-profile command to apply the 2G radio profile in the AP view, AP group view, AP radio view, or AP group radio view so that the 2G radio profile can take effect.
Precautions
The 2G radio profile default cannot be deleted.
The 2G radio profile referenced in the AP view, AP group view, AP radio view, or AP group radio view cannot be deleted. To delete the 2G radio profile, unbind it in the AP view, AP group view, AP radio view, or AP group radio view first.
You can run the frequency command to change the working mode of an AP radio. Generally, radio 0 of an AP works on the 2.4 GHz frequency band, radio 1 works on the 5 GHz frequency band, and radio 2 of the AP4030TN generally works on the 5 GHz frequency band. Radio 0 of the AP2010DN, AP6052DN, AP7052DN, AP7152DN, AP8182DN, AP4030TN, and AP8130DN can work on either the 2.4 GHz or 5 GHz frequency band. Radio 2 of the AP4030TN can work on either the 2.4 GHz or 5 GHz frequency band.
radio-2g-profile
Function
The radio-2g-profile command binds a 2G radio profile to a 2G radio.
The undo radio-2g-profile command unbinds a 2G radio profile from a 2G radio.
By default, no 2G radio profile is applied in the AP view and AP radio view, but the 2G radio profile default is applied to the AP group view and AP group radio view.
Format
radio-2g-profile profile-name radio { radio-id | all }
undo radio-2g-profile radio { radio-id | all }
radio { radio-id | all } is supported only in the AP group view and AP view.
Usage Guidelines
Usage Scenario
After you create a 2G radio profile using the radio-2g-profile (WLAN view) command, bind it to a 2G radio so that the 2G radio profile can take effect.
Precautions
After a 2G radio profile is applied in the AP group view or AP view, the parameter settings in the profile take effect on all 2G radios in the AP group or the 2G radio of the AP.
The configuration in the AP view and AP radio view has a higher priority than that in the AP group view and AP group radio view.
Example
# Create the 2G radio profile radio-profile1 and bind it to AP group group1.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] radio-2g-profile name radio-profile1 [HUAWEI-wlan-radio-2g-prof-radio-profile1] quit [HUAWEI-wlan-view] ap-group name group1 [HUAWEI-wlan-ap-group-group1] radio-2g-profile radio-profile1 radio 0
radio-5g-profile (WLAN view)
Usage Guidelines
Usage Scenario
A 5G radio profile is used to configure and optimize the 5G radio of an AP, but does not take effect on the 2G radio. Create a proper radio profile and apply it in the AP view, AP group view, AP radio view, or AP group radio view. In this way, the AP provides better radio signal transmit and receive capabilities.
Follow-up Procedure
Run the radio-5g-profile command to apply the 5G radio profile in the AP view, AP group view, AP radio view, or AP group radio view so that the 5G radio profile can take effect.
Precautions
The 5G radio profile default cannot be deleted.
The 5G radio profile referenced in the AP view, AP group view, AP radio view, or AP group radio view cannot be deleted. To delete the 5G radio profile, unbind it in the AP view, AP group view, AP radio view, or AP group radio view first.
You can run the frequency command to change the working mode of an AP radio. Generally, radio 0 of an AP works on the 2.4 GHz frequency band, radio 1 works on the 5 GHz frequency band, and radio 2 of the AP4030TN generally works on the 5 GHz frequency band. Radio 0 of the AP2010DN, AP6052DN, AP7052DN, AP7152DN, AP8182DN, AP4030TN, and AP8130DN can work on either the 2.4 GHz or 5 GHz frequency band. Radio 2 of the AP4030TN can work on either the 2.4 GHz or 5 GHz frequency band.
radio-5g-profile
Function
The radio-5g-profile command binds a 5G radio profile to a 5G radio.
The undo radio-5g-profile command unbinds a 5G radio profile from a 5G radio.
By default, no 5G radio profile is applied in the AP view and AP radio view, but the 5G radio profile default is applied to the AP group view and AP group radio view.
Format
radio-5g-profile profile-name radio { id | all }
undo radio-5g-profile radio { id | all }
radio { id | all } is supported only in the AP group view and AP view.
Usage Guidelines
Usage Scenario
After you create a 5G radio profile using the radio-5g-profile (WLAN view) command, bind it to a 5G radio so that the 5G radio profile can take effect.
Precautions
After a 5G radio profile is applied in the AP group view or AP view, the parameter settings in the profile take effect on all 5G radios in the AP group or the 5G radio of the AP.
The configuration in the AP view and AP radio view has a higher priority than that in the AP group view and AP group radio view.
Example
# Create the 5G radio profile radio-profile2 and bind it to AP group group1.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] radio-5g-profile name radio-profile2 [HUAWEI-wlan-radio-2g-prof-radio-profile2] quit [HUAWEI-wlan-view] ap-group name group1 [HUAWEI-wlan-ap-group-group1] radio-5g-profile radio-profile2 radio 1
radio-type (2G radio profile view)
Usage Guidelines
Usage Scenario
You can run the radio-type command to set the radio type in a radio profile.
Precautions
If a rate in the basic rate set or supported rate set, or the multicast rate is not supported by the 802.11b protocol, the radio type cannot be set to 80211b.
When the radio type is set to dot11b or dot11g, the function of denying access from non-HT STAs becomes invalid.
If WDS- or Mesh-enabled radios are configured not to support 802.11n/ac, the air interface backhaul performance will be degraded.
If you run the radio-type dot11b command in the 2G radio profile view to set the radio type to dot11b, and the 2G radio profile is applied to an AP, the rates of Beacon frames and multicast packets that take effect on the 2 GHz radio of the AP are fixed as 1 Mbps, and the values configured using the beacon-2g-rate beacon-2g-rate and multicast-rate multicast-rate commands do not take effect on the AP.
radio-type (5G radio profile view)
Usage Guidelines
Usage Scenario
You can run the radio-type command to set the radio type in a radio profile.
Precautions
When the radio type is set to dot11a, the function of denying access from non-HT STAs becomes invalid.
If the configured radio type is not supported by an AP, the actual radio type supported by the AP takes effect. For example, if you set the 802.11ac radio type for an 802.11n AP, the 802.11n radio type takes effect on the AP.
If WDS- or Mesh-enabled radios are configured not to support 802.11n/ac, the air interface backhaul performance will be degraded.
reach-max-sta hide-ssid disable
Function
The reach-max-sta hide-ssid disable command disables automatic SSID hiding when the number of users reaches the maximum.
The undo reach-max-sta hide-ssid disable command enables automatic SSID hiding when the number of users reaches the maximum.
By default, automatic SSID hiding is enabled when the number of users reaches the maximum.
regulatory-domain-profile (WLAN view)
Function
The regulatory-domain-profile command creates a regulatory domain profile and displays the regulatory domain profile view, or displays the view of an existing regulatory domain profile.
The undo regulatory-domain-profile command deletes a regulatory domain profile.
By default, the system provides the regulatory domain profile default.
Format
regulatory-domain-profile name profile-name
undo regulatory-domain-profile { name profile-name | all }
Parameters
Parameter |
Description |
Value |
---|---|---|
name profile-name |
Specifies the name of a regulatory domain profile. |
The value is a string of 1 to 35 case-insensitive characters. It does not contain question marks (?) or spaces, and cannot start or end with double quotation marks (" "). |
all |
Deletes all regulatory domain profiles. |
- |
Usage Guidelines
Usage Scenario
A regulatory domain profile contains settings of the country code, calibration channel, and calibration bandwidth, which take effect on APs using the regulatory domain profile.
Follow-up Procedure
Run the regulatory-domain-profile command to bind the regulatory domain profile to an AP or AP group so that the regulatory domain profile can take effect.
Precautions
The regulatory domain profile default cannot be deleted.
The regulatory domain profile referenced by an AP or AP group cannot be deleted. To delete the regulatory domain profile, unbind it from the AP or AP group first.
regulatory-domain-profile
Function
The regulatory-domain-profile command binds a regulatory domain profile to an AP or AP group.
The undo regulatory-domain-profile command unbinds a regulatory domain profile from an AP or AP group.
By default, the regulatory domain profile default is bound to an AP group, but no regulatory domain profile is bound to an AP. In the default regulatory domain profile, the country code is China, 2.4G calibration channels include channels 1, 6, and 11, 5G calibration channels include channels 149, 153, 157, 161, and 165, the 5G calibration bandwidth is 20 MHz, and the wideband function is disabled.
Usage Guidelines
Usage Scenario
After you create a regulatory domain profile using the regulatory-domain-profile (WLAN view) command, bind it to an AP or AP group so that the regulatory domain profile can take effect.
Precautions
After a regulatory domain profile is bound to an AP or AP group, parameter settings in the regulatory domain profile apply to all APs using the profile.
Example
# Create the regulatory domain profile domain1 and bind it to AP group group1.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] regulatory-domain-profile name domain1 [HUAWEI-wlan-regulate-domain-domain1] quit [HUAWEI-wlan-view] ap-group name group1 [HUAWEI-wlan-ap-group-group1] regulatory-domain-profile domain1 Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continu e?[Y/N]:y
report-disassoc-request disable
Function
The report-disassoc-request disable command enables an AP to report disassociation request packets of STAs to the AC.
The undo report-disassoc-request disable command disables an AP from reporting disassociation request packets of STAs to the AC.
By default, an AP is enabled to report disassociation request packets of STAs to the AC.
report-sta-assoc enable
Usage Guidelines
Usage Scenario
After the function of recording successful STA associations in the log is enabled, successfully associated STAs are recorded in the user log.
Configuration Impact
After this function is enabled, each successfully associated user is logged, and a large number of user logs may be recorded.
report-sta-info enable
Function
The report-sta-info enable command enables an AC to report information about STA traffic statistics and online duration on APs.
The undo report-sta-info enable command disables an AC from reporting information about STA traffic statistics and online duration on APs.
By default, an AC is disabled from reporting information about STA traffic statistics and online duration on APs.
Usage Guidelines
After an AC is enabled to report information about STA traffic statistics and online duration on APs, the AC collects and reports the information to the eSight when STAs get offline or roam within the AC, which facilitates data query on the eSight. The STA traffic statistics include the AC's MAC address, AC name, APs' MAC addresses, AP names, radio IDs, SSID, user names, and STAs' MAC addresses.
reset ap offline-record
reset ap online-fail-record
reset ap unauthorized record
Usage Guidelines
Usage Scenario
You can run this command to clear information about unauthenticated APs so that removed APs or unauthenticated APs that are physically disconnected from the AC can be cleared. This facilitates collecting statistics and confirmation of unauthenticated APs.
Precautions
If an AP physically connects to the AC but has not been authenticated, the AP is added in the unauthenticated AP list after you run the reset ap unauthorized record command.
reset channel switch-record
reset mac-address { ap-id | ap-name }
Function
The reset mac-address { ap-id | ap-name} command clears all dynamic MAC address entries on an AP's wired interface.
Parameters
Parameter |
Description |
Value |
---|---|---|
ap-id ap-id | Clears all dynamic MAC address entries on wired interfaces of the AP with the specified ID. |
The AP ID must exist. |
ap-name ap-name | Clears all dynamic MAC address entries on wired interfaces of the AP with the specified name. |
The AP name must exist. |
interface-type interface-number | Clears dynamic MAC address entries on a specified interface.
|
The following types of outbound interfaces are supported:
|
reset station assoc-info ap-offline-record
Function
The reset station assoc-info ap-offline-record command deletes information about STAs that connect to the APs in fault state.
Format
reset station assoc-info ap-offline-record { all | { ap-name ap-name | ap-id ap-id } [ radio radio-id ] }
Parameters
Parameter |
Description |
Value |
---|---|---|
all |
Deletes information about all STAs that connect to APs in fault state from the AC. |
- |
ap-name ap-name |
Clears information about STAs that go online on the AP with a specified name in fault state. |
The AP name must exist. |
ap-id ap-id |
Clears information about STAs that go online on the AP with a specified ID in fault state. |
The AP ID must exist. |
radio radio-id |
Deletes information about STAs that connect to the specified radio of the AP in fault state. |
The radio ID must exist. |
Usage Guidelines
Usage Scenario
Before collecting statistics on the STAs that connect to the APs in fault state within a specific period, run the reset station assoc-info ap-offline-record command to delete the original STA information.
Prerequisites
The APs in fault state have been enabled to allow access of new STAs using the keep-service enable allow new-access command.
Function
The deleted STA information cannot be restored. Exercise caution when you run the reset station assoc-info ap-offline-record command.
reset station offline-record
Parameters
Parameter | Description | Value |
---|---|---|
all | Deletes all STA offline records. | - |
ap-name ap-name | Deletes STA offline records on the AP with a specified name. | The AP name must exist. |
ap-id ap-id | Deletes STA offline records on the AP with a specified ID. | The AP ID must exist. |
sta-mac sta-mac | Deletes offline records of a specified STA. | The specified STA MAC address must exist. |
reset station online-fail-record
Format
reset station online-fail-record { all | ap-name ap-name | ap-id ap-id | sta-mac sta-mac-address }
Parameters
Parameter |
Description |
Value |
---|---|---|
all |
Clears online failure records of all STAs. |
- |
ap-name ap-name |
Clears STA online failure records on the AP with a specified name. |
The AP name must exist. |
ap-id ap-id |
Clears STA online failure records on the AP with a specified ID. |
The AP ID must exist. |
sta-mac sta-mac-address |
Clears online failure records of the STA with the specified MAC address. |
The STA's MAC address must exist. |
reset station statistics
rf-ping
Parameters
Parameter | Description | Value |
---|---|---|
-m time | Specifies the interval for sending probe data packets. | The value is an integer that ranges from 100 to 10000, in milliseconds. The default value is 1000. |
-c number | Specifies the number of probe data packets sent by the AC. | The value is an integer that ranges from 1 to 1000. The default value is 1. |
mac-address | MAC address of a STA. | The value is in H-H-H format. An H is a hexadecimal number of 4 digits. |
Usage Guidelines
Use Scenario
This command allows an AC to automatically detect wireless link quality based on link parameters, including the signal strength, data rate on air port, and delay in packet transmission.
Prerequisites
STAs have been associated with the APs and go online.
Example
# Configure an AC to automatically detect quality of the link between the AP and STA with the MAC address 14cf-9202-13dc.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] rf-ping 14cf-9202-13dc Tx rate=52.0 Mbps, Reply from 14cf-9202-13dc: RSSI=-58 dBm time < 1 ms 1 packets transmitted, 1 received, 0% packet loss, time < 1 ms, RSSI -58 dBm
rts-cts-mode
Usage Guidelines
- In rts-cts mode, when an AP needs to send data to a STA, the AP sends an RTS packet to all STAs associated with it. After receiving the RTS packet, none of the devices within the AP's coverage area sends data within a specified period. After the destination STA receives the RTS packet, it sends a CTS packet. After receiving the CTS packet, none of the devices within the STA's coverage area sends data within a specified period. Using the rts-cts mode to avoid conflicts requires two packets (RTS and CTS packets), increasing packet overhead.
- In cts-to-self mode, when an AP needs to send data to STAs, it sends a CTS packet with its IP address as the source and destination addresses. Then none of the devices within the AP's coverage area sends data within a specified period. In cts-to-self mode, an AP only needs to send a CTS packet to avoid channel conflicts in most scenarios. However, if there is a device within the STA's coverage area but not within the AP's coverage area, a channel conflict may still occur.
Compared to the rts-cts mode, the cts-to-self mode reduces the number of control packets sent on the network. In some situations, however, a channel conflict may still occur when hidden nodes do not receive the CTS packet from the AP. Therefore, the rts-cts mode is more effective in avoiding channel conflicts than the cts-to-self mode.
To avoid a data transmission failure caused by channel conflicts, run the rts-cts-mode command to set the RTS-CTS operation mode in a radio profile according to networking requirements.
rts-cts-threshold
Usage Guidelines
The IEEE 802.11 MAC protocol provides an RTS-CTS handshake protocol to prevent conflicts between channels and failure to transmit data. STA A sends an RTS frame before sending data to STA B. STA A can send data after receiving a CTS frame from STA B. If multiple STAs send RTS frames to a STA, only the STA that receives a CTS frame can send data, and other STAs have channel conflicts by default and must wait and send RTS frames again.
If STAs implement RTS-CTS handshakes before sending data, the channel bandwidth is consumed by too much RTS frames. You can set an RTS threshold to specify the length of frames to be sent. When the length of frames to be sent by the STA is smaller than the RTS threshold, no RTS/CTS handshake is implemented.
sample-time
service-mode disable
Usage Guidelines
You can run the service-mode disable command to disable the service mode of a VAP. After the service mode of a VAP is disabled, the VAP is disabled.
After the service mode of a VAP is enabled, run the auto-off service command to enable the scheduled VAP auto-off function. In the scheduled time, the VAP is disabled. To enable the VAP, run the undo auto-off service command.
After the service mode of a VAP is disabled, the scheduled VAP auto-off function does not take effect.
service-vlan (VAP profile view)
Usage Guidelines
Usage Scenario
- When a specific VLAN is configured as the service VLAN of a VAP, STAs connected to the VAP join the same VLAN.
- When VLANs in a VLAN pool are configured as service VLANs of a VAP, STAs connected to the VAP join different VLANs. The VLAN assignment algorithm can be configured using the assignment command.
Precautions
Modifying the service VLAN of a VAP will interrupt services of STAs connected to the VAP. Exercise caution when you run the command.
sftp server disable
short-preamble disable
Usage Guidelines
The preamble is a section of bits in the header of a data frame. It synchronizes signals transmitted between the sender and receiver. The preamble is classified into the long preamble and short preamble. The short preamble ensures better synchronization performance and therefore is recommended. The long preamble is usually used for compatibility with earlier network adapters of clients.
shutdown (AP wired port link profile view)
Usage Guidelines
Usage Scenario
If malicious users launch attacks to the network through an AP's wired interface, the administrator can deliver the shutdown command on the AC to shut down the interface.
Precautions
Data frames may be lost if you shut down an interface during data transmission. Exercise caution when you use the shutdown command.
The shutdown command still takes effect after an AP is restarted.
The shutdown command takes effect only on AP's wired interfaces working in endpoint or middle mode but not on those working in root mode.
Example
# Shut down the AP's wired interface GE0.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] port-link-profile name port-link1 [HUAWEI-wlan-port-link-prof-port-link1] shutdown Warning: This command does not take effect for root interfaces. [HUAWEI-wlan-port-link-prof-port-link1] quit [HUAWEI-wlan-view] wired-port-profile name wired-port1 [HUAWEI-wlan-wired-port-wired-port1] port-link-profile port-link1 [HUAWEI-wlan-wired-port-wired-port1] quit [HUAWEI-wlan-view] ap-group name ap-group1 [HUAWEI-wlan-ap-group-ap-group1] wired-port-profile wired-port1 gigabitethernet 0
single-txchain enable
Usage Guidelines
Usage Scenario
Some non-HT STAs that support 802.11a/b/g cannot receive packets sent by APs using multiple antennas. As a result, network access failures, frequent STA roaming, or network instability is caused. After running the single-txchain enable command to enable the single-antenna transmission mode in an SSID profile, management packets on the corresponding VAP and data packets sent by the AP to non-HT STAs on the VAP will be sent in single-antenna transmission mode. For a radio that is bound to a VAP with the single-antenna transmission mode enabled, control packets of the radio are sent in single-antenna transmission mode as long as non-HT STAs is connected to the VAP. When no non-HT STA is connected to the VAP, the control packets are still sent in multi-antenna transmission mode.
Precautions
The single-antenna transmission mode is supported by the R250D, R250D-E, R450D, AP1050DN-S, AP2050DN, AP2050DN-E, AP4050DN, AP4050DN-S, AP4050DN-E, AP4050DN-HD, AP4051DN, AP4151DN, AP6050DN, AP6150DN, AP7050DE, AP7050DN-E, AP8050DN, AP8050DN-S, AP4051TN, AP6052DN, AP7052DN, AP7152DN, AP7052DE, AP8050TN-HD, AP8082DN, AP8182DN, and AP8150DN.
After the single-antenna transmission mode is enabled in an SSID profile, the receive signal strength of STAs may be affected.
snmp-agent trap enable feature-name wlan
Function
The snmp-agent trap enable feature-name wlan command enables the trap function for the WLAN module.
The undo snmp-agent trap enable feature-name wlan command disables the trap function for the WLAN module.
By default, the trap function is enabled for the WLAN module.
Format
snmp-agent trap enable feature-name wlan [ trap-name trap-name ]
undo snmp-agent trap enable feature-name wlan [ trap-name trap-name ]
Parameters
Parameter | Description | Value |
---|---|---|
trap-name trap-name | Specifies the name of a trap. | The value is a string and must be set according to the device configuration. |
ssh client first-time enable (AP system profile view)
Function
The ssh client first-time enable command enables the first authentication on the SSH client.
The undo ssh client first-time enable command disables the first authentication on the SSH client.
By default, first authentication is disabled on the SSH client.
Usage Guidelines
Usage Scenario
When the SSH client accesses the SSH server for the first time and the public key of the SSH server is not configured on the SSH client, you can enable the first authentication for the SSH client to access the SSH server and save the public key on the SSH client. When the SSH client accesses the SSH server next time, the saved public key is used to authenticate the SSH server.
ssid
Parameters
Usage Guidelines
Usage Scenario
An SSID specifies a wireless network. When you search for available wireless networks on your wireless terminal, SSIDs are displayed to identify the available wireless networks.
Precautions
When you configure an SSID containing Chinese characters, do not delete characters by pressing the Delete button if you want to modify the SSID that has been entered. Otherwise, the SSID will contain garbled characters after the configuration. In this case, run the ssid command to reconfigure the SSID.
ssid-hide enable
Usage Guidelines
Usage Scenario
A STA listens on the Beacon frames that an AP periodically sends in each channel to obtain AP information. The STA can obtain SSIDs from Beacon frames that contain the SSIDs.
The STA can actively send a probe frame with a specified SSID, only the AP with the same SSID will respond to the STA. If the STA broadcasts a probe frame without an SSID, only the APs on which SSID hiding in Beacon frames is disabled will respond to the STA.
After the ssid-hide enable command is used, an AP periodically sends Beacon frames that contain empty SSID character strings and does not reply to the broadcast probe requests sent from STAs. The STAs can send probe frames with the AP's SSID to discover the SSID.
After the undo ssid-hide enable command is used, an AP periodically sends Beacon frames that contain valid SSID character strings and replies to the broadcast probe requests sent from STAs. The STAs can send probe frames with the AP's SSID to discover the SSID.
Precautions
If the ssid-hide enable or undo ssid-hide enable command is run in the SSID profile after STAs are associated with an SSID, service interruptions may occur for all online STAs.
ssid-profile (WLAN view)
Usage Guidelines
Usage Scenario
An SSID profile is mainly used to configure STA association and access parameters based on SSIDs, including the SSID name, STA association timeout period, non-HT STA access, and QoS CAR.
Follow-up Procedure
Run the ssid-profile (VAP profile view) command to bind the SSID profile to a VAP profile and run the vap-profile command to bind the VAP profile to an AP group, AP, AP radio, or AP group radio so that the SSID profile can take effect.
Precautions
The SSID profile default cannot be deleted.
The SSID profile referenced by a VAP profile cannot be deleted. To delete the SSID profile, unbind it from the VAP profile first.
If the VAP profile has been applied to an AP group or an AP, modifying the SSID profile will interrupt services.
ssid-profile (VAP profile view)
Usage Guidelines
Usage Scenario
After you create an SSID profile using the ssid-profile (WLAN view) command, bind it to a VAP profile to make the SSID profile take effect.
Precautions
After an SSID profile is bound to a VAP profile, parameter settings in the SSID profile take effect on all APs using the VAP profile.
sta-ipv6-service enable
Usage Guidelines
Usage Scenario
Currently, IPv4 WLANs are widely deployed. If many IPv6 packets exist on an IPv4 WLAN, the performance of the WLAN is affected, and the CPU processing capability of devices will also be degraded. To improve performance of a pure IPv4 network, you can configure devices on the network to not process IPv6 packets of STAs.
Precautions
The function of processing STA IPv6 services takes effect only when data packets are forwarded in direct forwarding mode, and the security policy is open authentication.
The AC and APs do not process IPv6 packets of the wireless side.
You are not allowed to configure IPv6 functions on the wireless side.
IPv6 functions of the wireless side are disabled even if they are enabled in default settings.
Running the ipv6 enable command in the interface view only enables the IPv6 function on the wired-side interface. The command cannot enable the WLAN module to process STA IPv6 services. To enable the WLAN module to process IPv6 services of STAs, you need to run the sta-ipv6-service enable command in the WLAN view.
sta-network-detect disable
Function
The sta-network-detect disable command disables the device from monitoring user traffic and forcibly disconnecting STAs without traffic.
The undo sta-network-detect disable command enables the device to monitor user traffic and forcibly disconnect STAs without traffic.
By default, the device is enabled to monitor user traffic and forcibly disconnect STAs without traffic.
Usage Guidelines
- The STA does not send DHCP Request messages or receive ARP Reply packets within 5s after going online.
- The IP address of the STA changes after roaming.
- The STA has only uplink traffic but no downlink traffic.
When you do not require user traffic monitoring or want to prevent STAs from being forcibly disconnected, run the command.
sta-offline-delay aging-time
Usage Guidelines
Usage Scenario
After the STA offline delay function is enabled, STAs can go offline and online again in the aging time without being authenticated, reducing the load on the authentication server. You can run the sta-offline-delay aging-time command to set the aging time.
Set the aging time for STA offline delay based on the network requirements and device performance. A long aging time causes the STA offline delay function to occupy many resources, affecting new STA access. A short aging time cannot achieve a noticeable effect in releasing the load on the authentication server.
Prerequisites
The STA offline delay function has been enabled using the sta-offline-delay enable command.
sta-offline-delay enable
Usage Guidelines
Usage Scenario
On a WLAN, some online STAs may go offline due to reasons such as screen lock. When these STAs go online again, they are reauthenticated, increasing the load on the authentication server. After the STA offline delay function is enabled, if a STA goes offline normally and online again within the aging time, it does not need to be authenticated by an external or built-in authentication server. This reduces the load on the authentication server and avoids multiple authentication operations. This function takes effect for STAs only in Portal, MAC address, or MAC address-prioritized Portal authentication mode.
Precautions
- Non-roaming scenarios. That is, the STA goes online again on the same VAP.
- Intra-AC Layer 2 roaming in direct forwarding mode, intra-AC Layer 3 roaming in direct forwarding mode (with the tunnel endpoint on the AC), or intra-AC Layer 2/3 roaming in tunnel forwarding mode.
- Inter-AC Layer 2 roaming in direct or tunnel forwarding mode.
The STA offline delay function and online STA detection on the external Portal server are mutually exclusive.
sta-offline-delay full-sta-reject enable
Function
The sta-offline-delay full-sta-reject enable command disables an AP to force STAs in offline delay state to go offline and allow new STAs to go online after the number of STAs reaches the maximum.
The undo sta-offline-delay full-sta-reject enable command enables an AP to force STAs in offline delay state to go offline and allow new STAs to go online after the number of STAs reaches the maximum.
By default, an AP is enabled to force STAs in offline delay state to go offline and allow new STAs to go online after the number of STAs reaches the maximum.
Usage Guidelines
Usage Scenario
After the STA offline delay function is enabled on an AP, you can run this command to enable an AP to force STAs in offline delay state to go offline and allow new STAs to go online after the number of STAs reaches the maximum.
Prerequisites
Before this command is executed, the sta-offline-delay enable command has been executed to enable the STA offline delay function.
sta-offline-delay max-number
Function
The sta-offline-delay max-number command sets the maximum number of STAs that are allowed to delay going offline.
The undo sta-offline-delay max-number command restores the default maximum number of STAs that are allowed to delay going offline.
The default maximum number of STAs that are allowed to delay going offline is one fifth of the maximum number of STAs supported by an AC.
Parameters
Parameter |
Description |
Value |
---|---|---|
max-number |
Specifies the maximum number of STAs that are allowed to delay going offline. |
The value is an integer that ranges from 1 to the maximum number of STAs supported by an AC. The default value is one fifth of the maximum value. If one fifth of the maximum value is a non-integer value, round down the value. |
Usage Guidelines
Usage Scenario
After the STA offline delay function is enabled, you can run this command to set the maximum number of STAs that are allowed to delay going offline.
Set the maximum number of STAs that are allowed to delay going offline based on the network requirements and device performance. A large value causes the STA offline delay function to occupy many resources, affecting new STA access. A small value cannot achieve a noticeable effect in releasing the load on the authentication server.
Prerequisites
The STA offline delay function has been enabled using the sta-offline-delay enable command.
stelnet server disable
stp auto-shutdown enable (AP wired port profile view)
Function
The stp auto-shutdown enable command enables the STP-triggered port shutdown function on an AP's wired interface.
The undo stp auto-shutdown enable command disables the STP-triggered port shutdown function on an AP's wired interface.
By default, the STP-triggered port shutdown function is disabled on an AP's wired interface.
Usage Guidelines
Usage Scenario
After the STP-triggered port shutdown function is enabled, the AP automatically shuts down the interface when STP detects a loop. The AP will periodically recover the interface and re-executes STP detection. If the loop still exists on the interface, the AP shuts down the interface again. If the loop is removed, the AP reports a clear alarm to the network management system (NMS).
Prerequisites
STP has been enabled on the AP's wired interface using the stp enable (AP wired port profile view) command.
Precautions
The AP wired interfaces added to an Eth-trunk interface do not support this function.
This function is supported only when a loop exists on the network connected to the AP's wired port, that is, a port receives STP packets sent by itself.
Example
# Disable the STP-triggered port shutdown function on an AP's wired interface.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] wired-port-profile name wired [HUAWEI-wlan-wired-port-wired] stp auto-shutdown enable Warning: The AP may become out of management after the STP-triggered port shutdown function is enabled (if the port is an uplink por t). Continue?[Y/N]:y
stp auto-shutdown recovery-time (AP wired port profile view)
Function
The stp auto-shutdown recovery-time command sets an auto-recovery interval for an AP's wired interface on which the STP-triggered port shutdown function is enabled.
The undo stp auto-shutdown recovery-time command restores the default auto-recovery interval for an AP's wired interface on which the STP-triggered port shutdown function is enabled.
Usage Guidelines
Usage Scenario
After the STP-triggered port shutdown function is enabled, the AP automatically shuts down the interface when STP detects a loop. The AP will periodically recover the interface and re-executes STP detection. If the loop still exists on the interface, the AP shuts down the interface again. If the loop is removed, the AP reports a clear alarm to the network management system (NMS).
Prerequisites
The STP-triggered port shutdown function has been enabled on the AP's wired interface using the stp auto-shutdown enable (AP wired port profile view) command.
Precautions
The AP wired interfaces added to an Eth-trunk interface do not support this function.
telnet enable
Usage Guidelines
You do not need to log in to a Telnet-enabled AP from a user terminal to maintain it locally. Instead, you can log in to the Telnet-enabled AP through Telnet to remotely configure and maintain it.
To improve login security, you are advised to run the undo stelnet server disable command to enable the STelnet server function and log in to the AP through STelnet.
temporary-management enable (AP system profile view)
Function
The temporary-management enable command enables offline management VAP and antenna alignment VAP functions.
The undo temporary-management enable command disables offline management VAP and antenna alignment VAP functions.
By default, offline management VAP and antenna alignment VAP functions are disabled.
Usage Guidelines
Usage Scenario
APs are often installed in hidden places or at high positions. When an AP becomes faulty, it is inconvenient to connect to the AP through a console port or network cable to troubleshoot faults.
After the antenna alignment VAP function is enabled for an AP, the AP automatically generates an antenna alignment VAP when it works properly. The default SSID and password of the management VAP are hw_manage_xxxx. xxxx indicates the last four bits of the AP's MAC address. You can associate the mobile phone on which the CloudCampus APP is installed to the wireless network with SSID hw_manage_xxxx and use the phone to receive packets sent by the antenna alignment VAP to obtain RSSI information.
The default username and password are available in WLAN Default Usernames and Passwords (Enterprise Network or Carrier). If you have not obtained the access permission of the document, see Help on the website to find out how to obtain it.
Precautions
After the offline management VAP and antenna alignment VAP functions are enabled, the administrator needs to change the SSIDs and passwords of the offline management VAP and antenna alignment VAP. Using the default values brings security threats. Any wireless user may use the default SSIDs and passwords to log in to the offline AP and perform unauthorized operations or receive packets sent by the APP. In actual applications, the maintenance personnel may enable the offline management VAP and antenna alignment VAP functions to facilitate AP maintenance. Using the default offline management VAP and antenna alignment VAP is not recommended. To ensure security, the administrator needs to configure a secure VAP profile, set new SSIDs and passwords, and run the temporary-management enable command in the VAP profile view to specify the VAPs generated after the VAP profile is bound to an AP group or AP as the offline management VAP and antenna alignment VAP to replace the default offline management VAP and antenna alignment VAP.
The offline management VAP takes effect only when an AP goes offline unexpectedly.
The offline management VAP function does not take effect on 4.9 GHz radios.
Before using the offline management VAP function, ensure that the AP has enabled with Telnet or STelnet services.
The antenna alignment VAP is automatically deleted 24 hours after it is created. If you want to use an antenna alignment VAP after the deletion, run the undo temporary-management enable and the temporary-management enable commands in the AP profile view in succession to create a new antenna alignment VAP.
- After the offline management VAP function is enabled.
- If the link between the central AP and RUs is disconnected, the RUs will not generate an offline management VAP.
- If the link between the central AP and AC is disconnected but RUs are still connected to the central AP, all online RUs connected to the central AP automatically generate an offline management VAP. If the central AP is AD9431DN-24X, STAs log in to RUs through the offline management VAP. If the central AP is not AD9431DN-24X, STAs log in to the central AP through the offline management VAP.
- The central AP does not have radios and therefore do not generate an offline management VAP.
The offline management VAP function and service holding upon CAPWAP link disconnection are mutually exclusive. When the two functions are configured at the same time, the offline management VAP function cannot take effect.
In offline management VAP scenarios, STA address learning does not take effect.
temporary-management enable (VAP profile view)
Usage Guidelines
Usage Scenario
After the offline management VAP function is enabled using the temporary-management enable command in the AP system profile view, an AP automatically generates a management VAP when it becomes faulty. The default SSID and password of the management VAP are hw_manage_xxxx. xxxx indicates the last four bits of the AP's MAC address. The maintenance personnel can associate the maintenance device to the default VAP and log in to the AP using Telnet to troubleshoot the fault. However, using the default management VAP brings security risks. Any wireless user may use the default SSID and password to log in to the offline AP and perform unauthorized operations.
After the antenna alignment VAP function is enabled using the temporary-management enable command in the AP system profile view, an AP automatically generates an antenna alignment VAP when it works properly. The default SSID and password of the management VAP are hw_manage_xxxx. xxxx indicates the last four bits of the AP's MAC address. Using the default antenna alignment VAP also brings security risks.
The default username and password are available in WLAN Default Usernames and Passwords (Enterprise Network or Carrier). If you have not obtained the access permission of the document, see Help on the website to find out how to obtain it.
To improve security of the offline management VAP and antenna alignment VAP, bind a security profile of a high security level to a VAP profile, set new SSIDs and passwords, configure the VAPs generated by the VAP profile as the offline management VAP and antenna alignment VAP, and bind the VAP profile to an AP group or AP to replace the default offline management VAP and antenna alignment VAP.
Follow-up Procedure
Run the temporary-management enable command to enable the offline management VAP and antenna alignment VAP functions in the AP system profile view to make the offline management VAP and antenna alignment VAP in the VAP profile take effect.
Precautions
If the VAPs are configured as the offline management VAP and antenna alignment VAP in a VAP profile, the security profile referenced by the VAP profile supports only the WEP or WPA/WPA2 PSK security policy.
If the VAPs are configured as the offline management VAP and antenna alignment VAP in a VAP profile, VAPs generated by the VAP profile cannot be used as service VAPs for service transmission.
The offline management VAP and antenna alignment VAP cannot be modified. To modify the VAPs, delete them first, and then modify the VAP attributes in the VAP profile view.
The offline management VAP function does not take effect on 4.9 GHz radios.
The offline management VAP function and service holding upon CAPWAP link disconnection are mutually exclusive. When the two functions are configured at the same time, the offline management VAP function cannot take effect.
In offline management VAP scenarios, STA address learning does not take effect.
temporary-management psk
Function
The temporary-management psk command configures the password for an offline management VAP or antenna alignment VAP.
The undo temporary-management psk command restores the default password of an offline management VAP or antenna alignment VAP.
The default username and password are available in WLAN Default Usernames and Passwords (Enterprise Network or Carrier). If you have not obtained the access permission of the document, see Help on the website to find out how to obtain it.
Parameters
traffic-filter (AP wired port profile view)
Function
The traffic-filter command configures ACL-based IPv4 packet filtering on an AP's wired interface.
The undo traffic-filter command cancels the ACL-based IPv4 packet filtering configuration on an AP's wired interface.
By default, ACL-based IPv4 packet filtering is not configured on an AP's wired interface.
Format
traffic-filter { inbound | outbound } ipv4 acl { acl-number | name acl-name }
undo traffic-filter { inbound | outbound } ipv4 acl { acl-number | name acl-name }
Parameters
Parameter |
Description |
Value |
---|---|---|
inbound |
Configures ACL-based packet filtering in the inbound direction. |
- |
outbound |
Configures ACL-based packet filtering in the outbound direction. |
- |
ipv4 |
Configures ACL-based IPv4 packet filtering. |
- |
acl |
Filters packets based on the ACL. |
- |
acl-number |
Specifies the number of an ACL. |
The value is an integer that ranges from 3000 to 3031. |
name acl-name |
Filters packets based on a specified named ACL. acl-name specifies the name of the ACL. |
The ACL name must exist. The value range is the same as that of the acl-number parameter. |
Usage Guidelines
Usage Scenario
- Deny or permit access of specified wireless users to specified LAN devices.
- Deny access of specified wireless users to specified invalid IP addresses.
The rules for an AP's wired interface to filter packets based on ACLs are as follows:
- If the action in an ACL rule is deny, the device discards packets matching the rule.
- If the action in an ACL rule is permit, the device forwards packets matching the rule.
- If no rule is matched, packets are allowed to pass through.
When multiple commands are configured for ACL-based packet filtering in the same direction in the same AP wired port profile view, packets are matched against ACL rules in the sequence in which the commands are configured. If packets match a rule, the system stops the matching process and executes the specified policy. Otherwise, the system continues to match packets against the next rule. If no rule is matched, the packets are allowed to pass through.
Prerequisites
A named ACL has been created using the acl name or acl name command.
Precautions
You can specify an empty ACL in this command, and configure this ACL later.
A maximum of eight ACL-based packet filtering policies can be configured in one direction. The policies take effect in the sequence in which they are configured. To improve match efficiency, you are advised to configure an ACL rule with a high match probability for packet filtering. When configuring each ACL rule, set a small ID for the rule with a high match probability, reducing the number of times ACL rules are matched and saving resources. To change the sequence in which packets are filtered based on ACLs, delete all related configurations and reconfigure ACL-based packet filtering.
Example
# Configure the wired interface GE0 of ap-group1 to filter incoming packets based on ACL 3000.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] wired-port-profile name wired [HUAWEI-wlan-wired-port-wired] traffic-filter inbound ipv4 acl 3000 [HUAWEI-wlan-wired-port-wired] quit [HUAWEI-wlan-view] ap-group name ap-group1 [HUAWEI-wlan-ap-group-ap-group1] wired-port-profile wired gigabitethernet 0
traffic-remark (AP wired port profile view)
Format
traffic-remark { inbound | outbound } ipv4 acl { acl-number | name acl-name } { dot1p dot1p-value | dscp dscp-value }
undo traffic-remark { inbound | outbound } ipv4 acl { acl-number | name acl-name }
Parameters
Parameter |
Description |
Value |
---|---|---|
inbound |
Configures ACL-based priority re-marking in the inbound direction. |
- |
outbound |
Configures ACL-based priority re-marking in the outbound direction. |
- |
ipv4 |
Configures priority re-marking for IPv4 packets. |
- |
acl acl-number |
Specifies the number of an ACL. |
The value is an integer that ranges from 3000 to 3031. |
name acl-name |
Re-marks packet priorities based on a specified named ACL. acl-name indicates an ACL name. |
The value is a string of 1 to 32 case-sensitive characters without spaces and must begin with a letter. The value range of acl-number corresponding to acl-name is 3000 to 3031. |
dot1p dot1p-value |
Re-marks the 802.1p priority of packets. |
The value is an integer that ranges from 0 to 7. A larger value indicates a higher priority. |
dscp dscp-value |
Re-marks the DSCP priorities of packets. |
The value is an integer that ranges from 0 to 63. A larger value indicates a higher priority. |
Usage Guidelines
Usage Scenario
The user wants to re-mark packet priorities based on ACLs to provide differentiated services. The traffic-remark command can be used to configure ACL-based priority re-marking.
Prerequisites
Precautions
The traffic-remark command can reference a numbered ACL rule that is not configured. You can configure the referenced ACL rule after running this command.
You can only configure a maximum of eight ACL-based packet re-marking rules in the same direction. The sequence in which ACL rules takes effect follows the rule configuration sequence. To change the current packet re-marking rules, delete all the related configurations and reconfigure the ACL-based packet re-marking.
When the traffic-remark command and the traffic-filter (AP wired port profile view) command are used simultaneously and the same ACL rule is associated:
- If the deny action is configured in the ACL rule, the traffic-remark command does not take effect.
- If the permit action is configured in the ACL rule, the command that is executed first takes effect.
Example
# Configure the wired interface GE0 of ap-group1 and configure ACL-based 802.1p priority re-marking for IPv4 packets in the inbound direction.
<HUAWEI> system-view [HUAWEI] acl 3000 [HUAWEI-acl-adv-3000] rule 5 permit ip source 192.168.0.2 0 [HUAWEI-acl-adv-3000] quit [HUAWEI] wlan [HUAWEI-wlan-view] wired-port-profile name wired [HUAWEI-wlan-wired-port-wired] traffic-remark inbound ipv4 acl 3000 dot1p 7 [HUAWEI-wlan-wired-port-wired] quit [HUAWEI-wlan-view] ap-group name ap-group1 [HUAWEI-wlan-ap-group-ap-group1] wired-port-profile wired gigabitethernet 0
traffic-optimize (AP wired port profile view)
Function
The traffic-optimize command sets the maximum volume of broadcast, multicast, or unknown unicast traffic on an AP's wired interface.
The undo traffic-optimize command restores the default maximum volume of broadcast, multicast, or unknown unicast traffic on an AP's wired interface.
By default, the volume of broadcast, multicast, or unknown unicast traffic is not suppressed on an AP's wired interface.
Format
traffic-optimize { broadcast-suppression | multicast-suppression | unicast-suppression } packets packets-rate
undo traffic-optimize { broadcast-suppression | multicast-suppression | unicast-suppression }
Parameters
Parameter |
Description |
Value |
---|---|---|
broadcast-suppression | Specifies the maximum broadcast traffic volume that can be received on an AP's wired interface. |
- |
multicast-suppression | Specifies the maximum multicast traffic volume that can be received on an AP's wired interface. |
- |
unicast-suppression | Specifies the maximum unknown unicast traffic volume that can be received on an AP's wired interface. |
- |
packets packets-rate |
Specifies the maximum number of packets that can pass every second. |
The value is an integer that ranges from 0 to 14881000, in pps. |
Usage Guidelines
Usage Scenario
When a large number of broadcast, multicast, and unknown unicast packets are transmitted on a network, a lot of network resources are occupied, and services on the network are affected. When the traffic volume of broadcast, multicast, and unknown unicast packets reaches the maximum on an AP's wired interface, the system discards excess packets to control the traffic volume in a proper range and prevent flooding attacks.
Follow-up Procedure
Bind the AP wired port profile to an AP group or AP.
Precautions
The uplink interfaces of RUs do not support this command.
traffic-optimize broadcast-suppression enable (AP system profile view)
Function
The traffic-optimize broadcast-suppression enable command enables rate limit for broadcast and multicast packets on an AP.
The undo traffic-optimize broadcast-suppression enable command disables rate limit for broadcast and multicast packets on an AP.
By default, rate limit for broadcast and multicast packets is disabled on an AP.
Format
traffic-optimize broadcast-suppression { all | arp | igmp | nd | other } enable
undo traffic-optimize broadcast-suppression { all | arp | igmp | nd | other } enable
Parameters
Parameter |
Description |
Value |
---|---|---|
all | Enables rate limit for all broadcast and multicast packets. |
- |
arp | Enables rate limit for ARP broadcast packets. |
- |
igmp | Enables rate limit for IGMP multicast packets. |
- |
nd | Enables rate limit for ND broadcast packets. |
- |
other | Enables rate limit for broadcast packets other than ARP and ND broadcast packets. |
- |
Usage Guidelines
A large number of broadcast or multicast packets on a device occupy many network resources, affecting network services. To ensure normal running of network services, you can limit the rate of broadcast and multicast packets on APs with a proper range.
The default rate threshold of broadcast and multicast packets of an AP is 256 pps. You can also run the traffic-optimize broadcast-suppression rate-threshold (AP system profile view) command to configure a rate threshold for broadcast and multicast packets, which will override the default rate threshold.
traffic-optimize broadcast-suppression rate-threshold (AP system profile view)
Function
The traffic-optimize broadcast-suppression rate-threshold command sets a rate threshold for broadcast and multicast packets on an AP.
The undo traffic-optimize broadcast-suppression rate-threshold command restores the default threshold of broadcast and multicast packets on an AP.
The default rate threshold for ARP broadcast packets, ND broadcast packets, IGMP multicast packets, and other types of broadcast packets is 256 pps.
Format
traffic-optimize broadcast-suppression { arp | igmp | nd | other } rate-threshold threshold-value
undo traffic-optimize broadcast-suppression { arp | igmp | nd | other } rate-threshold
Parameters
Parameter |
Description |
Value |
---|---|---|
arp | Specifies ARP broadcast packets. |
- |
igmp | Specifies IGMP multicast packets. |
- |
nd | Specifies ND broadcast packets. |
- |
other | Specifies broadcast packets other than ARP and ND broadcast packets. |
- |
rate-threshold threshold-value | Specifies a rate threshold. |
The value is an integer that ranges from 64 to 1024, in pps. The default value is 256. |
Usage Guidelines
Before setting a rate threshold for broadcast and multicast packets, run the traffic-optimize broadcast-suppression enable (AP system profile view) command to enable rate limit for broadcast and multicast packets.
After you run the traffic-optimize broadcast-suppression rate-threshold command to configure a rate threshold for broadcast and multicast packets on an AP, the configured threshold will override the default rate threshold. The actual rate of broadcast and multicast packets will not exceed the configured rate threshold. If a large rate threshold is set, the expected network protection effect is not achieved. If a small rate threshold is set, broadcast and multicast packets may be lost. In most cases, use the default rate threshold unless otherwise specified.
Example
# Set the rate threshold for ARP broadcast packets in AP system profile system1 to 300 pps.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] ap-system-profile name system1 [HUAWEI-wlan-ap-system-prof-system1] traffic-optimize broadcast-suppression all enable [HUAWEI-wlan-ap-system-prof-system1] traffic-optimize broadcast-suppression arp rate-threshold 300
type (VAP profile view)
Usage Guidelines
Usage Scenario
- If the type of a VAP is set to ap-management, STAs connected to the VAP can only access APs but not network resources. AP management VAPs are used in STA access and AP management scenarios.
- If the type of a VAP is set to service, STAs connected to the VAP can only access network resources but not APs. Service VAPs are used in regular WLAN deployment scenarios.
Precautions
After the VAP type is configured in the VAP profile view, the VAPs generated by the VAP profile use the configured VAP type. The new VAP type will overwrite the old one.
If the type of a VAP is AP management, the VAP does not support portal, MAC address and 802.1x authentication using an external server.
After the VAP type is set to management AP, change the STA's IP address to 169.254.2.x/24 (except 169.254.2.1, 169.254.2.100 is recommended), so that the STA can access the AP.
u-apsd enable
Usage Guidelines
Usage Scenario
U-APSD is a new energy saving mode defined for WMM, which can improve the energy-saving capability of STAs.
If some STAs on the network do not support the U-APSD function, disable the U-APSD function.
Precautions
The U-APSD function takes effect only when WMM is enabled.
After the U-APSD function is enabled, services may be interrupted.
undo ap
Parameters
Parameter |
Description |
Value |
---|---|---|
ap-name ap-name |
Deletes the AP with the specified AP name. |
The AP name must exist. |
ap-id ap-list |
Deletes APs with the specified IDs in a batch. |
The value is a string of 1 to 255 characters. When multiple APs are selected, use commas (,) or hyphens (-) to separate AP IDs. For example, 5,8,10-13,20 indicates the list of APs with IDs 5, 8, 10, 11, 12, 13, and 20. |
ap-mac ap-mac |
Deletes the AP with the specified MAC address. |
The AP's MAC address must exist. |
ap-group group-name |
Deletes the AP in a specified AP group. |
The AP group must exist. |
all |
Deletes all APs. |
- |
Usage Guidelines
Application Scenario
If you do not want a specified AP to go online on the AC, run the command to delete the AP from the AC. After the AP is deleted, the AP goes offline from the AC.
Configuration Impact
Deleting an AP will interrupt services of STAs connected to the AP.
Precautions
If an AP is upgraded, in standby state, or the ap-ping command is executed, the AP cannot be deleted.
usb enable (AP system profile view)
Function
The usb enable command enables the USB function on an AP.
The undo usb enable command disables the USB function on an AP.
Usage Guidelines
Usage Scenario
When users need to save or transfer files using the USB interface provided on some APs, the USB function can be enabled using the usb enable command. When the USB function is enabled, the power consumption of the AP will increase, which may affect other functions. You are advised to run the undo usb enable command to disable the USB function after using it.
Precautions
- The 2.4 GHz radio on the AP6150DN, AP6050DN, AP7050DE, and AP7050DN-E supports only dual spatial streams at most.
- The AP4050DN-E cannot provide PoE power supply.
- The USB function does not take effect when the R250D-E, AP2050DN, and AP2050DN-E use the IEEE 802.3af PoE for power supply.
The affected AP functions are restored after the USB function is disabled.
user-interface vty idle-timeout
Format
user-interface vty ui-number idle-timeout minutes [ seconds ]
undo user-interface vty ui-number idle-timeout
Parameters
Parameter | Description | Value |
---|---|---|
ui-number | Specifies the VTY user interface number. | The value is an integer that ranges from 0 to 4. |
minutes | Specifies the idle timeout period, in minutes. | The value is an integer that ranges from 0 to 35791, in minutes. |
seconds | Specifies the idle timeout period, in seconds. | The value is an integer that ranges from 0 to 59, in seconds. |
Usage Guidelines
Usage Scenario
If a user logs in to the device and does not perform an operation, the user interface is occupied unnecessarily. You can run the user-interface vty idle-timeout command to disconnect the user's terminal from the device.
Precautions
If the parameters minutes and seconds are both set to 0, the VTY timeout disconnection function is disabled.
user-interface vty screen-length
Format
user-interface vty ui-number screen-length screen-length
undo user-interface vty ui-number screen-length
Parameters
Parameter | Description | Value |
---|---|---|
ui-number | Specifies the VTY user interface number. | The value is an integer that ranges from 0 to 4. |
screen-length | Specifies the number of lines displayed on a terminal screen. | The value is an integer that ranges from 0 to 512. The value 0 indicates that all command output is displayed on one screen. |
Usage Guidelines
If you run a command and its output is displayed in more lines than you can see on one screen, you can set a small number of lines displayed on each screen.
In most cases, you do not need to change the number of lines displayed on each screen. Setting the number of lines to 0 is not recommended. The configuration takes effect after you log in to the system again.
utmost-power disable
Usage Guidelines
Usage Scenario
This command is valid only when the country code is CN. You can run the undo utmost-power disable command to enable radios to send packets at the maximum power or at the power specified by the country code. After you run the utmost-power disable command, radios send packets at the power specified by the country code. When a country code other than CN is configured, radios can send packets only at the power specified by the country code.
Precautions
Only radios of the AD9430DN-24 (including the mapping RUs), AD9430DN-12 (including the mapping RUs), AD9431DN-24X (including the mapping RUs), AP7030DE, AP9330DN, AP2030DN, AP4051TN, AP6052DN, AP7052DN, AP7152DN, AP7052DE, AP8050TN-HD, AP8082DN, AP8182DN, AP3010DN-V2 (supporting 802.11ac after being upgraded from a version earlier than V200R008C10SPC300 to V200R008C10SPC300 or a later version), AP4030TN, AP4050DN-E, AP4050DN-HD, AP6050DN, AP6150DN, AP7050DN-E, AP7050DE, AP4050DN, AP4050DN-S, AP4051DN, AP4151DN, AP8050DN, AP8050DN-S, AP8150DN, AP1050DN-S, AP2050DN, AP2050DN-E, AP8130DN-W, AP5030DN, AP5130DN, AP8030DN, AP8130DN, AP4030DN, AP4130DN, AP9131DN, and AP9132DN can send packets at maximum power.
vap-profile (WLAN view)
Usage Guidelines
Usage Scenario
After a radio profile is applied in the AP group view, AP view, AP radio view, or AP group radio view, the AP can transmit and receive radio signals. After a VAP profile is applied in the AP group view, AP view, AP radio view, or AP group radio view, VAPs are generated and provide wireless access services for STAs. You can configure parameters in the VAP profile to enable APs to provide different wireless services.
Follow-up Procedure
Run the vap-profile command to apply the VAP profile in the AP group view, AP view, AP radio view, or AP group radio view so that the VAP profile can take effect.
Precautions
The VAP profile default cannot be deleted.
The VAP profile referenced in the AP group view, AP view, AP radio view, or AP group radio view cannot be deleted. To delete the VAP profile, unbind it from the AP group view, AP view, AP radio view, or AP group radio view first.
By default, the SSID profile default, security profile default, and traffic profile default are bound to a VAP profile.
vap-profile
Format
vap-profile profile-name wlan wlan-id radio { radio-id | all } [ service-vlan { vlan-id vlan-id | vlan-pool pool-name } ]
undo vap-profile profile-name wlan wlan-id radio { radio-id | all }
radio { radio-id | all } is supported only in the AP group view and AP view.
Parameters
Parameter |
Description |
Value |
---|---|---|
profile-name |
Specifies the name of a VAP profile. |
The VAP profile must exist. |
wlan wlan-id |
Specifies the WLAN ID of a VAP. |
The value is an integer that ranges from 1 to 16. NOTE:
|
radio |
Specifies a radio. |
- |
radio-id |
Specifies a radio ID. |
The value is an integer that ranges from 0 to 2. Only the AP4030TN, AP4051TN, and AP8050TN-HD supports three radios. |
all |
Specifies all radios. |
- |
service-vlan |
Specifies a service VLAN. |
- |
vlan-id vlan-id |
Specifies a VLAN ID. |
The VLAN ID must exist. |
vlan-pool pool-name |
Specifies a VLAN pool name. |
The VLAN pool name must exist. |
Usage Guidelines
Usage Scenario
After you create a VAP profile using the vap-profile (WLAN view) command, bind it to a radio so that the VAP profile can take effect.
In some scenarios, users hop to configure only one VAP for all APs that use different service VLANs. To simplify configuration, you can configure the service-vlan parameter to define a service VLAN when binding a VAP profile. A user-defined service VLAN has a higher priority than that configured using the service-vlan command.
Precautions
After a VAP profile is bound to a radio, parameter settings in the VAP profile apply to the radio using the profile.
vht a-mpdu max-length-exponent
Function
The vht a-mpdu max-length-exponent command sets the maximum length of an aggregated MPDU (A-MPDU) on the 802.11ac radio. MPDU stands for MAC protocol data unit.
The undo vht a-mpdu max-length-exponent command restores the maximum length of an A-MPDU on the 802.11ac radio to the default value.
By default, the index for the maximum length of an A-MPDU is 7. The maximum length of the A-MPDU is 1048575 bytes.
Currently, only the AD9430DN-24 (including the mapping RUs), AD9430DN-12 (including the mapping RUs), AD9431DN-24X (including the mapping RUs), AP7030DE, AP9330DN, AP2030DN, AP4051TN, AP6052DN, AP7052DN, AP7152DN, AP7052DE, AP8050TN-HD, AP8082DN, AP8182DN, AP3010DN-V2 (supporting 802.11ac after being upgraded from a version earlier than V200R008C10SPC300 to V200R008C10SPC300 or a later version), AP4030TN, AP4050DN-E, AP4050DN-HD, AP6050DN, AP6150DN, AP7050DN-E, AP7050DE, AP4050DN, AP4050DN-S, AP4051DN, AP4151DN, AP8050DN, AP8050DN-S, AP8150DN, AP1050DN-S, AP2050DN, AP2050DN-E, AP8130DN-W, AP5030DN, AP5130DN, AP8030DN, AP8130DN, AP4030DN, AP4130DN, AP9131DN, and AP9132DN support 802.11ac.
Parameters
Parameter |
Description |
Value |
---|---|---|
max-length-exponent-index |
Indicates the index for the maximum length of the A-MPDU. |
The value is an integer that ranges from 0 to 7.
|
Usage Guidelines
To reduce costs, 802.11ac uses frame aggregation technology that aggregates two or more frames into an A-MPDU to transmit.
Example
# Set the index of the maximum length of the A-MPDU to 2 in the 5G radio profile default. The index 2 corresponds to a maximum length of 32767 bytes.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] radio-5g-profile name default [HUAWEI-wlan-radio-5g-prof-default] vht a-mpdu max-length-exponent 2
vht a-msdu enable
Function
The vht a-msdu enable command enables the function of sending 802.11 frames in A-MSDU mode.
The undo vht a-msdu enable command disables the function of sending 802.11 frames in A-MSDU mode.
By default, the function of sending 802.11 frames in A-MSDU mode is disabled.
Currently, only the AD9430DN-24 (including the mapping RUs), AD9430DN-12 (including the mapping RUs), AD9431DN-24X (including the mapping RUs), AP7030DE, AP9330DN, AP2030DN, AP4051TN, AP6052DN, AP7052DN, AP7152DN, AP7052DE, AP8050TN-HD, AP8082DN, AP8182DN, AP3010DN-V2 (supporting 802.11ac after being upgraded from a version earlier than V200R008C10SPC300 to V200R008C10SPC300 or a later version), AP4030TN, AP4050DN-E, AP4050DN-HD, AP6050DN, AP6150DN, AP7050DN-E, AP7050DE, AP4050DN, AP4050DN-S, AP4051DN, AP4151DN, AP8050DN, AP8050DN-S, AP8150DN, AP1050DN-S, AP2050DN, AP2050DN-E, AP8130DN-W, AP5030DN, AP5130DN, AP8030DN, AP8130DN, AP4030DN, AP4130DN, AP9131DN, and AP9132DN support 802.11ac.
Usage Guidelines
Usage Scenario
Aggregated MAC Service Data Unit (A-MSDU) technology aggregates multiple MAC Service Data Units (MSDUs) into an MAC Protocol Data Unit (MPDU), which reduces MAC layer costs of the 802.11 packets and improves packet transmission efficiency especially when short MSDUs are aggregated.
Precautions
The function of sending 802.11 frames in A-MSDU mode can only be enabled on the 802.11ac radio.
vht a-msdu max-frame-num
Function
The vht a-msdu max-frame-num command sets the maximum number of subframes that can be aggregated into an A-MSDU at one time.
The undo vht a-msdu max-frame-num command restores the default maximum number of subframes that can be aggregated into an A-MSDU at one time.
By default, a maximum of two subframes can be aggregated into an A-MSDU at one time.
Currently, only the AD9430DN-24 (including the mapping RUs), AD9430DN-12 (including the mapping RUs), AD9431DN-24X (including the mapping RUs), AP7030DE, AP9330DN, AP2030DN, AP4051TN, AP6052DN, AP7052DN, AP7152DN, AP7052DE, AP8050TN-HD, AP8082DN, AP8182DN, AP3010DN-V2 (supporting 802.11ac after being upgraded from a version earlier than V200R008C10SPC300 to V200R008C10SPC300 or a later version), AP4030TN, AP4050DN-E, AP4050DN-HD, AP6050DN, AP6150DN, AP7050DN-E, AP7050DE, AP4050DN, AP4050DN-S, AP4051DN, AP4151DN, AP8050DN, AP8050DN-S, AP8150DN, AP1050DN-S, AP2050DN, AP2050DN-E, AP8130DN-W, AP5030DN, AP5130DN, AP8030DN, AP8130DN, AP4030DN, AP4130DN, AP9131DN, and AP9132DN support 802.11ac.
Usage Guidelines
Usage Scenario
- When the wireless network quality is satisfactory, increase the maximum number of subframes that can be aggregated into an A-MSDU at one time to improve the network usage efficiency and wireless service performance.
- When the wireless network quality is unsatisfactory or delay-sensitive services, such as voice services are transmitted, reduce the maximum number of subframes that can be aggregated into an A-MSDU at one time to minimize the impact of packet loss on services and reduce packet transmission delay. Some STAs have restrictions on the number of subframes aggregated into a received A-MSDU. If the number of subframes sent by the AP exceeds the threshold, the STAs cannot receive the frames properly.
Prerequisite
The function of sending 802.11 frames in A-MSDU mode has been enabled using the vht a-msdu enable command.
Precautions
The function of sending 802.11 frames in A-MSDU mode can only be enabled on the 802.11ac radio.
vht mcs-map
Function
The vht mcs-map command configures the maximum MCS value corresponding to a specific number of 802.11ac spatial streams in the 5G radio profile.
The undo vht mcs-map command restores the default maximum MCS value corresponding to a specific number of 802.11ac spatial streams in the 5G radio profile.
By default, the maximum MCS value of the 802.11 ac radios is 9 in the 5G radio profile.
Currently, only the AD9430DN-24 (including the mapping RUs), AD9430DN-12 (including the mapping RUs), AD9431DN-24X (including the mapping RUs), AP7030DE, AP9330DN, AP2030DN, AP4051TN, AP6052DN, AP7052DN, AP7152DN, AP7052DE, AP8050TN-HD, AP8082DN, AP8182DN, AP3010DN-V2 (supporting 802.11ac after being upgraded from a version earlier than V200R008C10SPC300 to V200R008C10SPC300 or a later version), AP4030TN, AP4050DN-E, AP4050DN-HD, AP6050DN, AP6150DN, AP7050DN-E, AP7050DE, AP4050DN, AP4050DN-S, AP4051DN, AP4151DN, AP8050DN, AP8050DN-S, AP8150DN, AP1050DN-S, AP2050DN, AP2050DN-E, AP8130DN-W, AP5030DN, AP5130DN, AP8030DN, AP8130DN, AP4030DN, AP4130DN, AP9131DN, and AP9132DN support 802.11ac.
Usage Guidelines
Usage Scenario
Rates of 802.11ac radios depend on the index value of Modulation and Coding Scheme (MCS). A larger MCS value indicates a higher transmission rate.
If nss-value is equal to or larger than the actual number of spatial streams supported by an AP, the maximum MCS value corresponding to all spatial streams of the AP is max-mcs-value.
If nss-value is smaller than the actual number of spatial streams supported by an AP, only the maximum MCS value of configured spatial streams is max-mcs-value. The maximum MCS value of the other spatial streams does not take effect.
For example, if nss-value is 2, and the AP supports 3 spatial streams. Only the maximum MCS value of spatial stream 1 and spatial stream 2 is max-mcs-value, and that of spatial stream 3 does not take effect.
Precautions
This configuration applies only to STAs associated with an AP in 802.11ac mode but does not take effect on STAs associated with the AP in other modes.
VAPs of only the AP1050DN-S, R450D, R250D, R250D-E, AP2050DN, AP2050DN-E, AP4050DN, AP4050DN-S, AP4051DN, AP4151DN, AP8050DN, AP8050DN-S, AP8150DN, AP4051TN, AP6052DN, AP7052DN, AP7152DN, AP7052DE, AP8050TN-HD, AP8082DN, AP8182DN, AP4050DN-E, AP4050DN-HD, AP6050DN, AP6150DN, AP7050DE, and AP7050DN-E support MU-MIMO on 5 GHz radios.
In WDS scenarios, ensure that the number of spatial streams on STA VAPs is smaller than that on AP VAPs. Otherwise, MU-MIMO cannot take effect. For example, if STA VAPs and AP VAPs are both configured with three spatial streams, an AP VAP can communicate with only one STA VAP even if MU-MIMO has been enabled.
vlan pool
Parameters
Parameter | Description | Value |
---|---|---|
pool-name | Specifies the name of a VLAN pool. | The value is a string of 1 to 31 characters. It does not contain question marks (?) or spaces, and cannot begin or end with double quotation marks (" "). |
Usage Guidelines
Usage Scenario
Since WLANs provide flexible access modes, STAs may connect to the same WLAN at the office entrance or stadium entrance, and then roam to different APs. If each SSID has only one service VLAN to deliver wireless access to STAs, IP address resources may become insufficient in areas where many STAs access the WLAN, and IP addresses in the other areas are wasted.
After a VLAN pool is created, add multiple VLANs to the VLAN pool and configure the VLANs as service VLANs. In this way, an SSID can use multiple service VLANs to provide wireless access services. STAs are dynamically assigned to VLANs in the VLAN pool, which reduces the number of STAs in each VLAN and also the size of the broadcast domain. Additionally, IP addresses are evenly allocated, preventing IP address waste.
You can also apply the VLAN pool to a user group to plan network segments by user role.
Follow-up Procedure
After a VLAN pool is created, run the vlan command to add VLANs to the VLAN pool. Note that these VLANs have been created using the vlan batch { vlan-id1 [ to vlan-id2 ] } &<1-10> command. Otherwise, VLANs in the VLAN pool cannot take effect.
Precautions
After a VLAN pool is configured to provide service VLANs, VLANs in the VLAN pool cannot be deleted. To delete the VLAN pool, cancel the service VLAN configuration of the VLAN pool.
In scenarios where a dual-stack address pool is configured, a STA successfully obtains an IP address if the VLAN pool has assigned an IPv4 or IPv6 address to it. In this case, the VLAN pool will not assign a new VLAN to the STA.
vlan (VLAN pool view)
Format
vlan { start-vlan [ to end-vlan ] } &<1-10>
undo vlan { { start-vlan [ to end-vlan ] } &<1-10> | all }
Parameters
Parameter | Description | Value |
---|---|---|
start-vlan to end-vlan | Specifies a VLAN ID. start-vlan and end-vlan determine a VLAN range. start-vlan must be smaller than end-vlan. |
The value is an integer that ranges from 1 to 4094. |
Usage Guidelines
Usage Scenario
If service VLANs of a VAP are configured as VLANs in a VLAN pool, STAs connected to the VAP are dynamically assigned to VLANs in the VLAN pool. This prevents a large number of STAs from connecting to the same VLAN, resolving the problems of insufficient IP addresses and large broadcast domain.
Precautions
A maximum of 128 VLANs can be added to a VLAN pool.
Deleting a VLAN will interrupt services of STAs using the VLAN. Exercise caution when you delete a VLAN.
A nonexistent VLAN can also be added to a VLAN pool. However, you need to create the VLAN after adding a nonexistent VLAN to a VLAN pool; otherwise, the VLAN does not take effect.
wifi-light
Function
The wifi-light command specifies the parameter reflected by the blinking frequency of the Wireless LED on an AP.
The undo wifi-light command restores the default parameter reflected by the blinking frequency of the Wireless LED on an AP.
- If the Mesh function is enabled on the AP, the blinking frequency of the Wireless LED reflects the weakest signal strength of all neighboring APs.
- If WDS is enabled on an AP, the blinking frequency
of the Wireless LED reflects the strength of signals received from
a WDS AP.
- If the AP works in leaf mode, the blinking frequency of the Wireless LED reflects the strength of signals received from a middle AP.
- If the AP works in middle mode, the blinking frequency of the Wireless LED reflects the strength of signals received from a root AP.
- If the AP works in root mode, the blinking frequency of the Wireless LED reflects the weakest signal strength of middle APs.
- If the WDS and Mesh functions are disabled on an AP, the blinking frequency of the Wireless LED reflects the service traffic volume on the radio.
Parameters
Parameter |
Description |
Value |
---|---|---|
signal-strength |
Sets the parameter reflected by the blinking frequency of the Wireless LED on an AP to signal strength. When the Wireless LED blinks fast, the signal strength is strong. |
- |
traffic |
Sets the parameter reflected by the blinking frequency of the Wireless LED on an AP to service traffic volume. When the Wireless LED blinks fast, the service traffic volume is high. |
- |
Usage Guidelines
Usage Scenario
During installation and commissioning of an AP that has the WDS or Mesh function enabled, you need to adjust AP locations and antenna directions to obtain strong signals. If the blinking frequency of the Wireless LED shows the signal strength, onsite installation personnel can know the signal strength in real time. The wifi-light command allows you to specify the parameter reflected by the blinking frequency of the Wireless LED. For example, you can specify the parameter to signal strength during installation and service traffic volume after installation.
Precautions
This command takes effect only when the AP has the WDS or Mesh function enabled. If the WDS and Mesh functions are disabled on the AP, the Wireless LED always shows service traffic volume.
wired-port-profile (WLAN view)
Function
The wired-port-profile command creates an AP wired port profile and displays the AP wired port profile view, or displays the view of an existing AP wired port profile.
The undo wired-port-profile command deletes an AP wired port profile.
By default, the system provides the AP wired port profile default.
Parameters
Parameter |
Description |
Value |
---|---|---|
name profile-name |
Specifies the name of an AP wired port profile. |
The value is a string of 1 to 35 case-insensitive characters. It does not contain question marks (?) or spaces, and cannot start or end with double quotation marks (" "). |
all |
Deletes all AP wired port profiles. |
- |
Usage Guidelines
Usage Scenario
An AP wired port profile provides convenience for AP wired interface management and configuration. You can configure AP wired interface parameters in an AP wired port profile to manage APs.
Follow-up Procedure
Run the wired-port-profile (AP group view and view) command to bind the AP wired port profile to an AP or AP group so that the AP wired port profile can take effect.
Precautions
The AP wired port profiledefault cannot be deleted.
The AP wired port profile referenced by an AP or AP group cannot be deleted. To delete the AP wired port profile, unbind it from the AP or AP group first.
wired-port-profile (AP group view and view)
Format
wired-port-profile profile-name interface-type interface-number
undo wired-port-profile interface-type interface-number
Usage Guidelines
Usage Scenario
After you create an AP wired port profile using the wired-port-profile (WLAN view) command, bind it to an AP or AP group so that the AP wired port profile can take effect.
Precautions
After an AP wired port profile is bound to an AP or AP group, parameter settings in the AP wired port profile apply to specified interfaces of all APs using the AP wired port profile.
Example
# Create the AP wired port profile wired-port1 and bind it to GE0 of APs in AP group group1.
<HUAWEI> system-view [HUAWEI] wlan [HUAWEI-wlan-view] wired-port-profile name wired-port1 [HUAWEI-wlan-wired-port-wired-port1] quit [HUAWEI-wlan-view] ap-group name group1 [HUAWEI-wlan-ap-group-group1] wired-port-profile wired-port1 gigabitethernet 0
wlan
- Command Support
- ac sysnetid
- access-user syslog-restrain enable
- access-user syslog-restrain period
- ac-list (AP view)
- ac-list(AP provisioning view)
- active-dull-client enable
- address-mode (AP view)
- address-mode (AP provisioning view)
- advertise-ap-name enable
- agile-antenna-polarization
- alarm-restriction disable
- alarm-restriction period
- antenna-gain
- ap auth-mode
- ap blacklist
- ap data-collection enable
- ap data-collection interval
- ap lldp enable
- ap manufacturer-config
- ap modify
- ap update ftp-server
- ap update ftp-server max-connect-number
- ap update load
- ap update mode
- ap update multi-load
- ap update multi-reset
- ap update reset
- ap update sftp-server
- ap update sftp-server max-connect-number
- ap update update-filename
- ap update schedule-task
- ap username
- ap whitelist
- ap-confirm
- ap-group
- ap-group (AP provisioning view)
- ap-group (AP view)
- ap-id
- ap-mac
- ap-mode
- ap-name
- ap-name (AP provisioning view)
- ap-name (AP view)
- ap-ping
- ap-regroup
- ap-rename
- ap-reset
- ap-system-profile (WLAN view)
- ap-system-profile (AP group view and AP view)
- assignment
- association-timeout
- auto-off service
- beacon-2g-rate
- beacon-5g-rate
- beacon-interval
- beamforming enable
- capwap control-link-priority
- capwap dtls control-link encrypt
- capwap dtls psk
- capwap dtls psk-mandatory-match enable
- capwap echo
- capwap echo-timeout trace logging
- capwap message-integrity psk
- capwap message-integrity check disable
- capwap sensitive-info psk
- capwap source interface
- channel
- channel-load-mode indoor
- channel-switch announcement disable
- channel-switch mode
- clear configuration this
- commit (AP provisioning view)
- console disable
- coordinate
- copy-from
- country-code
- coverage distance
- cpu-usage threshold
- crc-alarm enable
- dai enable (AP wired port profile view)
- deny-broadcast-probe enable
- description (AP wired port profile view)
- dhcp option82 insert enable
- dhcp option82 format (vap profile view)
- display ac global configuration
- display ap
- display ap around-ssid-list
- display ap asyn-message err-info
- display ap blacklist
- display ap config-info
- display ap configurable channel
- display ap coordinate
- display ap elabel
- display ap global configuration
- display ap lldp neighbor
- display ap neighbor
- display ap offline-record
- display ap online-fail-record
- display ap optical-info
- display ap performance statistics
- display ap provision
- display ap port
- display ap power-workmode
- display ap resource
- display ap run-info
- display ap sta-signal strength
- display ap statistics
- display ap traffic statistics wireless
- display ap unauthorized record
- display ap uncontrol all
- display ap update configuration
- display ap update schedule-task
- display ap update status
- display ap username
- display ap version
- display ap whitelist
- display ap wired-port
- display ap-group
- display ap-system-profile
- display ap-type
- display capwap configuration
- display channel switch-record
- display distribute-ap
- display mac-address ap-all
- display mac-address { ap-id | ap-name }
- display port-link-profile
- display provision-ap parameter-list
- display radio
- display radio-2g-profile
- display radio-5g-profile
- display references ap-system-profile
- display references port-link-profile
- display references radio-2g-profile
- display references radio-5g-profile
- display references regulatory-domain-profile
- display references ssid-profile
- display references vap-profile
- display references vlan pool
- display references wired-port-profile
- display regulatory-domain-profile
- display snmp-agent trap feature-name wlan all
- display ssid-profile
- display sta-offline-delay configuration
- display station
- display station assoc-info ap-offline-record
- display station online-fail-record
- display station offline-record
- display station statistics
- display vap
- display vap create-fail-record
- display vap-profile
- display vlan pool
- display wired-port-profile
- display wlan config-errors
- dot11a basic-rate
- dot11a supported-rate
- dot11bg basic-rate
- dot11bg supported-rate
- dtim-interval
- eapol-response dest-address transform-condition
- eapol-response dest-address transform-to
- eapol-start dest-address transform-condition
- eapol-start dest-address transform-to
- eirp
- eth-trunk (AP wired port profile view)
- forward-mode
- fragmentation-threshold
- frequency
- guard-interval-mode
- high-temperature threshold
- ht a-mpdu disable
- ht a-mpdu max-length-exponent
- ipsg enable (AP wired port profile view)
- ip-address (AP view)
- ip-address (AP provisioning view)
- keep-service enable
- keep-service enable allow new-access
- learn-client-address enable (AP wired port profile view)
- legacy-station disable
- lldp admin-status
- lldp dot3-tlv power (AP wired port link profile view)
- lldp enable
- lldp message-transmission delay (AP system profile view)
- lldp message-transmission hold-multiplier (AP system profile view)
- lldp message-transmission interval (AP system profile view)
- lldp report enable
- lldp report-interval
- lldp restart-delay
- lldp tlv-enable (AP wired port link profile view)
- lldp tlv-enable legacy-tlv four-pair-power (AP wired port link profile view)
- log-record-level
- log-server
- low-temperature threshold
- management-vlan
- max-sta-number (SSID profile view)
- memory-usage threshold
- mtu
- mu-mimo disable
- mu-mimo optimize enable
- multicast-rate
- poe af-inrush enable (AP system profile view)
- poe disable (AP wired port link profile view)
- poe force-power (AP wired port link profile view)
- poe high-inrush enable (AP system profile view)
- poe legacy enable (AP wired port link profile view)
- poe max-power (AP system profile view)
- poe power-reserved (AP system profile view)
- poe power-threshold (AP system profile view)
- poe power-off time-range (AP wired port link profile view)
- poe priority (AP wired port link profile view)
- port-link-profile (WLAN view)
- port-link-profile (AP wired port profile view)
- probe-response-retry
- provision-ap
- qbss-load enable
- radio
- radio disable
- radio-2g-profile (WLAN view)
- radio-2g-profile
- radio-5g-profile (WLAN view)
- radio-5g-profile
- radio-type (2G radio profile view)
- radio-type (5G radio profile view)
- reach-max-sta hide-ssid disable
- regulatory-domain-profile (WLAN view)
- regulatory-domain-profile
- report-disassoc-request disable
- report-sta-assoc enable
- report-sta-info enable
- reset ap offline-record
- reset ap online-fail-record
- reset ap unauthorized record
- reset channel switch-record
- reset mac-address { ap-id | ap-name }
- reset station assoc-info ap-offline-record
- reset station offline-record
- reset station online-fail-record
- reset station statistics
- reset statistics
- rf-ping
- rts-cts-mode
- rts-cts-threshold
- sample-time
- service-mode disable
- service-vlan (VAP profile view)
- sftp server disable
- short-preamble disable
- shutdown (AP wired port link profile view)
- single-txchain enable
- snmp-agent trap enable feature-name wlan
- ssh client first-time enable (AP system profile view)
- ssid
- ssid-hide enable
- ssid-profile (WLAN view)
- ssid-profile (VAP profile view)
- sta-ipv6-service enable
- sta-network-detect disable
- sta-offline-delay aging-time
- sta-offline-delay enable
- sta-offline-delay full-sta-reject enable
- sta-offline-delay max-number
- stelnet server disable
- stp auto-shutdown enable (AP wired port profile view)
- stp auto-shutdown recovery-time (AP wired port profile view)
- telnet enable
- temporary-management enable (AP system profile view)
- temporary-management enable (VAP profile view)
- temporary-management psk
- traffic-filter (AP wired port profile view)
- traffic-remark (AP wired port profile view)
- traffic-optimize (AP wired port profile view)
- traffic-optimize broadcast-suppression enable (AP system profile view)
- traffic-optimize broadcast-suppression rate-threshold (AP system profile view)
- type (VAP profile view)
- u-apsd enable
- undo ap
- usb enable(AP system profile view)
- user-interface vty idle-timeout
- user-interface vty screen-length
- utmost-powerdisable
- vap-profile (WLAN view)
- vap-profile
- vht a-mpdu max-length-exponent
- vht a-msdu enable
- vht a-msdu max-frame-num
- vht mcs-map
- vlan pool
- vlan (VLAN pool view)
- wifi-light
- wired-port-profile (WLAN view)
- wired-port-profile (AP group view and view)
- wlan