Command Reference

active-dull-client enable

Function

The active-dull-client enable command enables the function of preventing terminals from entering energy-saving mode.

The undo active-dull-client enable command disables the function.

By default, the function of preventing terminals from entering energy-saving mode is disabled.

Format

active-dull-client enable

undo active-dull-client enable

Parameters

None

Views

SSID profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Due to individual reasons, some terminals may not run services normally when entering energy-saving mode. You can run the active-dull-client enable command to enable the function of preventing terminals from entering energy-saving mode. After that, an AP frequently sends null data frames to these terminals to prevent them from entering energy-saving mode, ensuring normal services.

Precautions

After the function is enabled, the terminals consume more power and extra bandwidth. If no terminal enters an abnormal energy-saving state, you are advised to disable the function.

Example

# Enable the function of preventing terminals from entering energy-saving mode.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] ssid-profile name ssid1
[HUAWEI-wlan-ssid-prof-ssid1] active-dull-client enable

Related Topics

address-mode (AP view)

Function

The address-mode command sets the mode in which an AP obtains an IP address.

The undo address-mode command restores the default mode in which an AP obtains an IP address.

By default, the mode in which an AP obtains an IP address is not configured.

Format

address-mode { dhcp | static }

undo address-mode

Parameters

Parameter	Description	Value
dhcp	Indicates that an IP address is obtained in DHCP mode. The AP functions as a DHCP client and is assigned an IP address by the DHCP server.	-
static	Indicates that a static IP address is obtained. The AP must be configured with a static IP address.	-

Views

AP view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

You can run the address-mode command to configure an AP to obtain an IP address in DHCP, static, or SLAAC mode.

Precautions

After the configuration is delivered, restart the APs to make the configuration take effect.

Example

# Configure an AP to obtain an IP address in DHCP mode.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] ap-id 0
[HUAWEI-wlan-ap-0] address-mode dhcp
Warning: The incorrect configuration will cause the AP to go out of management. This operation will deliver parameter setting and ma
y cause reboot of AP(s). Continue?[Y/N]:y

Related Topics

address-mode (AP provisioning view)

Function

The address-mode command sets the mode in which an AP obtains an IP address.

The undo address-mode command restores the default mode in which an AP obtains an IP address.

By default, the mode in which an AP obtains an IP address is not configured.

Format

address-mode { dhcp | static }

undo address-mode

Parameters

Parameter	Description	Value
dhcp	Indicates that an IP address is obtained in DHCP mode. The AP functions as a DHCP client and is assigned an IP address by the DHCP server.	-
static	Indicates that a static IP address is obtained. The AP must be configured with a static IP address.	-

Views

AP provisioning view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

You can run the address-mode command to configure an AP to obtain an IP address in DHCP, static mode.

Follow-up Procedure

Run the commit command to deliver configuration to APs and restart the APs to make the configuration take effect.

Example

# Configure an AP to obtain an IP address in DHCP mode.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] provision-ap
[HUAWEI-wlan-provision-ap] address-mode dhcp

Related Topics

advertise-ap-name enable

Function

The advertise-ap-name enable command enables Beacon frames to carry the AP name.

The undo advertise-ap-name enable disables Beacon frames from carrying the AP name.

By default, Beacon frames do not carry the AP name.

Format

advertise-ap-name enable

undo advertise-ap-name enable

Parameters

None

Views

SSID profile view

Default Level

2: Configuration level

Usage Guidelines

In certain scenarios, you can run the advertise-ap-name enable command to enable Beacon frames to carry the AP name. In this way, you can quickly locate and identify APs by identifying the AP name carried in an SSID or display the AP name on STAs that can receive and resolve the host name carried in SSIDs of multiple APs.

Example

# Enable Beacon frames to carry the AP name in the SSID profile ssid1.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ssid-profile name ssid1
[HUAWEI-wlan-ssid-prof-ssid1] advertise-ap-name enable

Related Topics

agile-antenna-polarization

Function

The agile-antenna-polarization enable command enables self-adaptive polarization for agile antennas.

The undo agile-antenna-polarization enable command disables self-adaptive polarization for agile antennas.

By default, self-adaptive polarization is disabled for agile antennas.

NOTE:

Only the AP8130DN and AP8130DN-W support this function.

Format

agile-antenna-polarization enable

undo agile-antenna-polarization enable

Parameters

None

Views

2G radio profile view, 5G radio profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Self-adaptive polarization for agile antennas can reduce interference between transmit signals of antennas, and increase the transmit power of antennas and the demodulation SNR of STAs. When an AP8130DN or AP8130DN-W is deployed to provide wireless coverage, you can enable this function when the following types of STA exist:

STA with one transmit antenna and one receive antenna in 1x1 mode
STA with two transmit antennas and two receive antennas in 2x2 mode

After this function is enabled, the AP uses two mutually orthogonal antennas to communicate with STAs but not a third antenna.

Prerequisites

Dual-polarized antennas have been connected to radio ports A and B on the same frequency band.

Example

# Enable self-adaptive polarization for agile antennas in a 2G radio profile.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] radio-2g-profile name default
[HUAWEI-wlan-radio-2g-prof-default] agile-antenna-polarization enable

Related Topics

alarm-restriction disable

Function

The alarm-restriction disable command disables alarm suppression for an AP.

The undo alarm-restriction disable command enables alarm suppression for an AP.

By default, alarm suppression is enabled for an AP.

Format

alarm-restriction disable

undo alarm-restriction disable

Parameters

None

Views

AP system profile view

Default Level

2: Configuration level

Usage Guidelines

If a STA cannot go online due to security type mismatch, UAC, or access user upper limit exceeding, the STA will automatically re-connect to the AP. During this period, the AP sends a large number of STA association failure alarms to the AC, which degrades the system performance.

To solve this problem, enable alarm suppression for the AP. The AP then does not report alarms repeatedly in the alarm suppression period, preventing alarm storms.

Example

# Disable alarm suppression for an AP.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap-system-profile name ap-system1
[HUAWEI-wlan-ap-system-prof-ap-system1] alarm-restriction disable

Related Topics

alarm-restriction period

Function

The alarm-restriction period command configures the period of alarm suppression on an AP.

The undo alarm-restriction period command restores the default period of alarm suppression for an AP.

The default alarm suppression period is 60 seconds on an AP.

Format

alarm-restriction period period

undo alarm-restriction period

Parameters

Parameter	Description	Value
period	Specifies the period of alarm suppression for an AP.	The value is an integer that ranges from 10 to 300, in seconds.

Views

AP system profile view

Default Level

2: Configuration level

Usage Guidelines

You can run the ap alarm-restriction period command to configure the period of alarm suppression for an AP. The AP reports an alarm only one time in the specified period if the alarm is repeatedly generated.

Example

# Set the period of alarm suppression to 200 seconds for an AP.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] ap-system-profile name ap-system1
[HUAWEI-wlan-ap-system-prof-ap-system1] alarm-restriction period 200

Related Topics

antenna-gain

Function

(AP group radio view) The antenna-gain command configures the antenna gain for all specified radios in an AP group.

(AP group radio view) The undo antenna-gain command restores the default antenna gain for all specified radios in an AP group.

(AP radio view) The antenna-gain command configures the antenna gain for an AP radio.

(AP radio view) The undo antenna-gain command cancels the configuration of the antenna gain on an AP radio. The antenna gain on the AP radio is then determined by that configured in the AP group radio view.

By default, no antenna gain is configured for AP radios.

The antenna gain of AP radios depends on AP types and working channels of AP radios. You can run the display ap-type { id type-id | type ap-type } command to check default antenna gains of radios of different AP types.

Format

antenna-gain antenna-gain

undo antenna-gain

Parameters

Parameter	Description	Value
antenna-gain	Specifies the antenna gain.	The value is an integer that ranges from 0 to 30, in dB.

Views

AP radio view, AP group radio view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The antenna gain is the ratio of the power density produced by an antenna to the power density that should be obtained at the same point if the power accepted by the antenna were radiated equally. It can measure the capability for an antenna to receive and send signals in a specified direction, which is one of the most important parameters to select a BTS antenna. In the same condition, if the antenna gain is high, the wave travels far.

Precautions

The antenna gain of an AP radio configured using the command must be consistent with the gain of the antenna connected to the AP.
The antenna gain of an AP radio configured using the command takes effect only for external antennas. When an AP uses an external antenna, configure the antenna gain for the AP radio to be consistent with the gain of the external antenna connected to the AP.
The maximum antenna gain should comply with laws and regulations of the corresponding country. For details, see the Country Code & Channel Compliance Table. You can obtain this table at Huawei technical support website.
- Enterprise technical support website: http://support.huawei.com/enterprise
- Carrier technical support website: http://support.huawei.com
The configuration in the AP radio view has a higher priority than that in the AP group radio view.
When the antenna gain of an AP is not an integer, the AC rounds the value off and delivers the integer antenna gain. For example, if the 5G antenna gain of an AP2010DN is 2.5 dB, the 5G antenna gain of 3 dB is displayed on the AC.

Example

# Set the antenna gain to 4 for radio 0 of AP 1.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap-id 1
[HUAWEI-wlan-ap-1] radio 0
[HUAWEI-wlan-radio-1/0] antenna-gain 4

ap auth-mode

Function

The ap auth-mode command configures the AP authentication mode.

The undo ap auth-mode command restores the default AP authentication mode.

The default AP authentication mode is MAC address authentication.

Format

ap auth-mode { mac-auth | no-auth | sn-auth }

undo ap auth-mode

Parameters

Parameter	Description	Value
mac-auth	Indicates the MAC address authentication mode.	-
no-auth	Indicates the non-authentication mode.	-
sn-auth	Indicates the SN authentication mode.	-

Views

WLAN view

Default Level

2: Configuration level

Usage Guidelines

After the ap auth-mode command is executed, the AC authenticates the AP using the configured mode.

NOTE:

The non-authentication mode brings security risks. You are advised to set the authentication mode to MAC address authentication or SN authentication, which is more secure.

Example

# Change the AP authentication mode to MAC address authentication.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] ap auth-mode mac-auth

Related Topics

ap data-collection interval

ap blacklist

Function

The ap blacklist command adds an AP to an AP blacklist.

The undo ap blacklist command deletes an AP from an AP blacklist.

By default, no AP is in an AP blacklist.

Format

ap blacklist mac ap-mac1 [ to ap-mac2 ]

undo ap blacklist mac ap-mac1 [ to ap-mac2 ]

Parameters

Parameter	Description	Value
mac ap-mac1	Specifies the AP MAC address.	The value is in H-H-H format. An H is a hexadecimal number of 4 digits.
to ap-mac2	Specifies the end MAC address. This parameter is used when you want to add multiple MAC addresses to the blacklist. The value must be larger than ap-mac1. ap-mac1 and ap-mac2 identify a range. The maximum number of MAC addresses that can be added to the blacklist in batches is 128.	The value is in H-H-H format. An H is a hexadecimal number of 4 digits.

Parameter

Description

Value

mac ap-mac1

Specifies the AP MAC address.

The value is in H-H-H format. An H is a hexadecimal number of 4 digits.

to ap-mac2

Specifies the end MAC address. This parameter is used when you want to add multiple MAC addresses to the blacklist. The value must be larger than ap-mac1. ap-mac1 and ap-mac2 identify a range.

The maximum number of MAC addresses that can be added to the blacklist in batches is 128.

The value is in H-H-H format. An H is a hexadecimal number of 4 digits.

Views

WLAN view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If the AP's MAC address is in the blacklist, the AP cannot go online. If the MAC address of an online AP is in the blacklist, the AP is forced to log out.

Precautions

The AP blacklist and whitelist can be configured at the same time. However, the MAC address of an AP cannot be added to the AP blacklist and whitelist at the same time.

If AP whitelist and blacklist are all configured, check whether an AP is on the blacklist first.

Example

# Add the AP with the MAC address of 0025-9e07-8280 to the AP blacklist.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] ap blacklist mac 0025-9e07-8280

# Add MAC addresses from 0025-9e07-8270 to 0025-9e07-8276 to the AP blacklist.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] ap blacklist mac 0025-9e07-8270 to 0025-9e07-8276

Related Topics

ap-confirm

display ap blacklist

ap data-collection enable

Function

The ap data-collection enable command enables an AC to buffer AP data.

The undo ap data-collection enable command restores the default settings.

By default, an AC is disabled from buffering AP data.

Format

ap data-collection enable

undo ap data-collection enable

Parameters

None

Views

WLAN view

Default Level

2: Configuration level

Usage Guidelines

The AC needs to query performance statistics (such as AP and radio performance statistics, and STA association information on APs) from APs. The ap data-collection enable command can enable an AC to periodically query data on APs and buffer obtained data. Upon next data query, the AC can directly search for data in the buffer but does not need to wait for APs to return data. This greatly reduces timeout for querying AP-related statistics.

If there are a large number of APs and users on the AC, this function may occupy many memory resources and affect performance. Therefore, you are advised to disable this function when statistics query is not required.

After the undo ap data-collection enable command is executed, the AC stops periodically obtaining data from APs. Historical data in the buffer is not updated. To query latest statistics, enable this function again.

Example

# Enable an AC to buffer AP data.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap data-collection enable

Related Topics

ap data-collection enable

ap data-collection interval

Function

The ap data-collection interval command sets the data buffer duration.

The undo ap data-collection interval command restores the default data buffer duration.

By default, an AC buffers AP data for 5 minutes.

Format

ap data-collection interval interval

undo ap data-collection interval

Parameters

Parameter	Description	Value
interval	Specifies the buffer duration.	The value is an integer that ranges from 5 to 60, in minutes.

Views

WLAN view

Default Level

2: Configuration level

Usage Guidelines

You can run the ap data-collection interval command to set the buffer duration.

Example

# Enable an AC to buffer AP data and set the buffer duration.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap data-collection enable
[HUAWEI-wlan-view] ap data-collection interval 57

Related Topics

ap lldp enable

Function

The ap lldp enable command enables LLDP in the WLAN view.

The undo ap lldp enable command disables LLDP in the WLAN view.

By default, LLDP is enabled in the WLAN view.

Format

ap lldp enable

undo ap lldp enable

Parameters

None

Views

WLAN view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The Link Layer Discovery Protocol (LLDP) is a Layer 2 discovery protocol defined in the IEEE 802.1ab standard. Using LLDP, the AC or NMS can obtain Layer 2 information about the connected APs, including APs' interfaces and connections with other devices. Additionally, the AC or NMS can obtain details about network topology and interface changes. To view the Layer 2 link status between APs, and between APs and switch or analyze the network topology, enable WLAN LLDP.

Precautions

WLAN LLDP can be enabled in the system view and the AP wired port link profile view.

An AP can send and receive LLDP packets only after LLDP is enabled in both the WLAN view and the AP wired port link profile view.
After LLDP is disabled in the WLAN view, the commands for enabling and disabling LLDP on the AP wired port link profile view do not take effect.

Example

# Enable LLDP in the WLAN view.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap lldp enable

Related Topics

lldp enable

ap manufacturer-config

Function

The ap manufacturer-config command restores the factory settings of APs.

Format

ap manufacturer-config { ap-name ap-name | ap-mac ap-mac | ap-id ap-id }

Parameters

Parameter	Description	Value
ap-name ap-name	Specifies the name of the AP, factory settings of which need to be restored.	The AP name must already exist.
ap-mac ap-mac	Specifies the MAC address of the AP, factory settings of which need to be restored.	The AP's MAC address must already exist.
ap-id ap-id	Specifies the ID of the AP, factory settings of which need to be restored.	The AP ID must already exist.

Views

WLAN view

Default Level

2: Configuration level

Usage Guidelines

When a configuration error occurs on the AP, you can run this command to clear AP configurations.

After restoring factory settings, the AP is reset and configurations are restored to factory settings.

Example

# Restore the factory settings of AP N1-2.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap manufacturer-config ap-name N1-2
Warning: Reset AP to the manufacturing default configuration, continue?[Y/N]:y

ap modify

Function

The ap modify command changes the MAC address of an AP.

Format

ap modify ap-id mac ap-mac

Parameters

Parameter	Description	Value
ap-id	Specifies the ID of the AP to be replaced.	The AP ID must exist.
mac ap-mac	Specifies the MAC address of a new AP.	The value is in H-H-H format. An H is a hexadecimal number of 4 digits.

Views

WLAN view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When AP hardware needs to be replaced, you can change the MAC address of the AP to that of a new AP to prevent repetitive data configurations. After the change, the new AP goes online using the ID of the original AP, and all data configurations of the original AP take effect on the new AP.

By default, you can run the display ap { all | ap-group ap-group } command to check the MAC address of an AP.

Precautions

Replacing an AP enables the new AP to go online on the AC but will interrupt services of the original AP.

Example

# Replace the AP with the ID 0 with the AP with the MAC address 0002-1110-0120.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] ap modify 0 mac 0002-1110-0120 
Warning: Modify AP will influence the service that has published in AP, Whether to continue? [Y/N]y

Related Topics

ap update ftp-server

Function

The ap update ftp-server command configures basic FTP information, including the FTP server IP address, FTP server user name and password.

The undo ap update ftp-server command restores default FTP settings.

By default, no FTP server IP address is configured, the FTP server user name is anonymous, the FTP server password is anonymous@huawei.com.

Format

ap update ftp-server ip-address server-ip-address ftp-username ftp-username ftp-password cipher ftp-password

undo ap update ftp-server

Parameters

Parameter	Description	Value
ip-address server-ip-address	Specifies an IPv4 address for the FTP server.	The value is in dotted decimal notation.
ftp-username ftp-username	Specifies the FTP server user name.	The value is a string of 1 to 31 characters. The value cannot contain question marks (?) and cannot start or end with double quotation marks (" ") or spaces.
ftp-password	Specifies the password for logging in to the FTP server.	-
cipher	Specifies the password in cipher text.	-
ftp-password	Specifies the FTP server password.	The value is a string of characters without question marks (?). It cannot start or end with double quotation marks (" ") or spaces. ftp-password contains 188 characters in cipher text, such as %^%#A<g;&zQR7P3TF+,[MxQ1X%4[2~Gb]Vp#(e<y:~)/%^%#. ftp-password also can be a string of 1 to 128 characters in plain text, such as huawei123.

Views

WLAN view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

The FTP configuration is used when the automatic upgrade and online upgrade modes are FTP. In the automatic upgrade or online upgrade, the AC sends basic FTP information to the AP, and the AP requests the FTP server for upgrade based on FTP information.
After running the ap update ftp-server command, you can perform the following operations:
1. Run the ap update mode command to set the upgrade mode to ftp-mode.
2. Run the ap update multi-load command to upgrade APs in batches.

Precautions

It is recommended that you use an external FTP server to upgrade APs. If the AC functions as the FTP server, a maximum of five APs can be upgraded simultaneously.
The FTP server user name cannot contain the double quotation marks ("). Ensure that the FTP server user name and unencrypted password configured on the AC do not contain the preceding characters. Otherwise, FTP upgrade fails.

Example

# Configure the FTP server IP address, FTP server user name and password.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap update ftp-server ip-address 192.168.1.100 ftp-username admin ftp-password cipher wlanadmin

Related Topics

ap update ftp-server max-connect-number

Function

The ap update ftp-server command configures the maximum number of APs that can be upgraded simultaneously in FTP mode.

The undo ap update ftp-server command restores the default maximum number of APs that can be upgraded simultaneously in FTP mode.

By default, a maximum of 50 APs can be upgraded simultaneously in FTP mode.

Format

ap update ftp-server max-connect-number max-connect-number

undo ap update ftp-server max-connect-number

Parameters

Parameter	Description	Value
max-connect-number	Specifies the maximum number of APs that can be upgraded simultaneously.	The value is an integer that ranges from 1 to 64.

Views

WLAN view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

When APs are upgraded in FTP mode, you can configure the value of max-connect-number to change the maximum number of APs that can be upgraded simultaneously.

If the number of APs to be upgraded is equal to or smaller than max-connect-number, all APs can be upgraded simultaneously.
If the number of APs to be upgraded is larger than max-connect-number, only the specified number of APs can be upgraded simultaneously. After the specified number of APs are upgraded, the remaining APs are upgraded automatically until all APs are upgraded. The number of APs that are upgraded at a time cannot exceed the value of max-connect-number.

Precautions

An external FTP server can be used, which is recommended. The AC can also function as the FTP server.

When an external FTP server is used, the maximum number of APs that can be upgraded simultaneously is the configured max-connect-number.
If an AC is used as the FTP server, a maximum of five APs can be upgraded simultaneously even if the specified number is larger than five.

When the AC functions as the FTP server, run the ap update ftp-server max-connect-number max-connect-number command to set the maximum number of APs that can be upgraded simultaneously. The value of max-connect-number is an integer ranging from 1 to 5. During the upgrade, a maximum of 1 to 5 APs can be upgraded at a time until all APs are upgraded.

If the configured number of APs to be upgraded simultaneously is larger than five, an error message will be displayed after the first five APs are upgraded. The remaining APs cannot be automatically upgraded. You have to repeat the command until all APs are upgraded.

Example

# Set the maximum number of APs that can be upgraded simultaneously in FTP mode to 10.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap update ftp-server max-connect-number 10

Related Topics

ap update load

Function

The ap update load command upgrades a specified AP.

The undo ap update load command cancels AP upgrade.

Format

ap update load { ap-name ap-name | ap-mac ap-mac | ap-id ap-id } update-filename update-file-name

undo ap update load { ap-name ap-name | ap-mac ap-mac | ap-id ap-id }

Parameters

Parameter	Description	Value
ap-name ap-name	Specifies the name of the AP to be upgraded.	The AP name must already exist.
ap-mac ap-mac	Specifies the MAC address of the AP to be upgraded.	The AP's MAC address must already exist.
ap-id ap-id	Specifies the ID of the AP to be upgraded.	The AP ID must already exist.
update-filename update-file-name	Specifies the AP upgrade file.	The upgrade file name must already exist.

Views

WLAN view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

When APs are upgraded in batches based on AP types, if the new version fails, the version rollback takes a long period. Therefore, you can update a single AP to check whether faults occur on the version, ensuring successful upgrades in batches.

Prerequisites

When the AC mode is used, the AP upgrade file has been uploaded to the AC. If the FTP or SFTP mode is used, the AP upgrade file has been uploaded to the FTP server or SFTP server.

The AP is in normal or vmiss state.

Follow-up Procedure

Run the ap update reset { ap-name ap-name | ap-mac ap-mac | ap-id ap-id } command to restart the AP to make the upgrade take effect.

Precautions

The undo ap update load { ap-name ap-name | ap-mac ap-mac | ap-id ap-id } command cancels AP upgrade. However, if the AP system software has been written to the flash memory during the upgrade, the command does not take effect. You can run the display ap update status { ap-name ap-name | ap-id ap-id } command to check AP upgrade progress.

Example

# Upgrade the AP N1-2 using the upgrade file fitap6x10xn_v200r007c10.bin.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap update load ap-name N1-2 update-filename fitap6x10xn_v200r007c10.bin
Info: The current upgrade mode is AC mode, which may affect performance and take a long time. The FTP or SFTP upgrade mode is recomm
ended. Continue? [Y/N]:y

Related Topics

ap update reset

display ap update status

ap update mode

Function

The ap update mode command configures the AP upgrade mode.

The undo ap update mode command restores the default AP upgrade mode.

The default upgrade mode is ac-mode.

Format

ap update mode { ftp-mode | ac-mode | sftp-mode }

undo ap update mode

Parameters

Parameter	Description	Value
ac-mode	Indicates the AP upgrade mode in which APs download upgrade versions from the AC.	-
ftp-mode	Indicates the FTP mode. The AC delivers the FTP configuration to APs using the ap update ftp-server command, and APs download the upgrade version file from the FTP server.	-
sftp-mode	Indicates the SFTP mode. The AC delivers the SFTP configuration to APs using the ap update sftp-server command, and APs download the upgrade version file from the SFTP server.	-

Views

WLAN view

Default Level

3: Management level

Usage Guidelines

The AC, FTP or SFTP upgrade mode must be preset on the AP for automatic upgrade and online upgrade.
Run the ap update multi-load command to upgrade the AP.

Example

# Set the AP upgrade mode to sftp-mode.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap update mode sftp-mode

Related Topics

ap update update-filename

ap update multi-load

Function

The ap update multi-load command upgrades APs of the same type in batches.

The undo ap update multi-load command cancels batch upgrade of APs with the same type.

Format

ap update multi-load ap-type type-id [ ap-group group-name | { ap-name ap-name | ap-id ap-id } &<1-10> ]

ap update multi-load ap-group group-name [ { ap-name ap-name } &<1-10> | { ap-id ap-id } &<1-10> ]

undo ap update multi-load ap-type type-id [ ap-group group-name | { ap-name ap-name | ap-id ap-id } &<1-10> ]

undo ap update multi-load ap-group group-name [ { ap-name ap-name } &<1-10> | { ap-id ap-id } &<1-10> ]

Parameters

Parameter	Description	Value
ap-type type-id	Specifies the AP type ID.	The value is an integer that ranges from 0 to 255.
ap-group group-name	Specifies an AP group.	The AP group must exist.
ap-name ap-name	Specifies an AP name.	The AP name must exist.
ap-id ap-id	Specifies an AP ID.	The AP ID must exist.

Views

WLAN view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

You can run the ap update multi-load ap-type type-id [ ap-group group-name | { ap-name ap-name | ap-id ap-id } &<1-10> ] command to upgrade APs of the same type in batches in the online upgrade mode.

If ap-group group-name is specified, only APs of the same type and in the specified AP group are upgraded.
If ap-name ap-name or ap-id ap-id is specified, only APs of the specified type and with the specified AP name or AP ID are upgraded
If none of the ap-group group-name, ap-name ap-name, and ap-id ap-id parameters are specified, all APs of the specified type are upgraded.
If the type of APs specified by ap-group group-name, ap-name ap-name, or ap-id ap-id is different from ap-type type-id, the APs cannot be upgraded.

You can run the ap update multi-load ap-group group-name [ { ap-name ap-name } &<1-10> | { ap-id ap-id } &<1-10> ] command to batch upgrade APs in the specified AP group online.

If ap-name ap-name or ap-id ap-id is specified, only APs with the specified name or ID in the specified AP group are upgraded.
If neither ap-name ap-name nor ap-id ap-id is specified, all APs in the specified AP group are upgraded.
If APs specified by ap-name ap-name and ap-id ap-id are in different AP groups, the APs cannot be upgraded.

Prerequisites

AP upgrade files have been configured in batches using the ap update update-filename command.

Follow-up Procedure

Run the ap update multi-reset command to reset APs in batches to make AP upgrade take effect.

Precautions

The undo ap update multi-load ap-type type-id command cancels batch upgrade of APs with the same type. However, if the AP system software has been written to the flash memory during the upgrade, the command does not take effect. You can run the display ap update status all command to check AP upgrade progress.

Example

# Upgrade APs with type-id 19 in batches online.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap update multi-load ap-type 19
Info: The current upgrade mode is AC mode, which may affect performance and take a long time. The FTP or SFTP upgrade mode is recomm
ended. Continue? [Y/N]:y

# Upgrade all APs in AP group ap-group1 in batches online.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap update multi-load ap-group ap-group1
Info: The current upgrade mode is AC mode, which may affect performance and take a long time. The FTP or SFTP upgrade mode is recomm
ended. Continue? [Y/N]:y

Related Topics

ap update multi-reset

display ap update status

ap update multi-reset

Function

The ap update multi-reset command resets APs in batches.

Format

ap update multi-reset ap-type type-id [ ap-group group-name | { ap-name ap-name | ap-id ap-id } &<1-10> ]

ap update multi-reset ap-group group-name [ { ap-name ap-name } &<1-10> | { ap-id ap-id } &<1-10> ]

Parameters

Parameter	Description	Value
ap-type type-id	Resets APs of the specified type ID.	The AP type ID must exist.
ap-group group-name	Resets APs in the specified AP group.	The AP group must exist.
ap-name ap-name	Resets APs with the specified AP name.	The AP name must exist.
ap-id ap-id	Resets APs with the specified AP ID.	The AP ID must exist.

Views

WLAN view

Default Level

3: Management level

Usage Guidelines

This command resets APs in batches and can be used only after APs are upgraded in batches.

ap update multi-reset ap-type type-id [ ap-group group-name | { ap-name ap-name | ap-id ap-id } &<1-10> ] command to batch reset APs of the specified type online.

If ap-group group-name is specified, only APs of the specified type and in the specified AP group are reset.
If ap-name ap-name or ap-id ap-id is specified, only APs of the specified type and with the specified AP name or ID are reset.
If none of the ap-group group-name, ap-name ap-name, or ap-id ap-id parameters are specified, all APs of the specified type are reset.
If the type of APs specified by ap-group group-name, ap-name ap-name, or ap-id ap-id is different from ap-type type-id, the APs cannot be reset.

You can run the ap update multi-reset ap-group group-name [ { ap-name ap-name } &<1-10> | { ap-id ap-id } &<1-10> ] command to batch reset APs in the specified AP group online.

If ap-name ap-name or ap-id ap-id is specified, only APs with the specified name or ID in the specified AP group are reset.
If neither ap-name ap-name nor ap-id ap-id is specified, all APs in the specified AP group are ureset.
If APs specified by ap-name ap-name and ap-id ap-id are in different AP groups, the APs cannot be reset.

Example

# Reset APs with type-id 19 in batches.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap update multi-reset ap-type 19

ap update reset

Function

The ap update reset command restarts a specified AP.

Format

ap update reset { ap-name ap-name | ap-mac ap-mac | ap-id ap-id }

Parameters

Parameter	Description	Value
ap-name ap-name	Specifies the name of the AP to be restarted.	The AP name must already exist.
ap-mac ap-mac	Specifies the MAC address of the AP to be restarted.	The AP's MAC address must already exist.
ap-id ap-id	Specifies the ID of the AP to be restarted.	The AP ID must already exist.

Views

WLAN view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

After a single AP has been upgraded, run the ap update reset command to restart the AP and make the AP upgrade take effect.

Prerequisites

The AP is in normal or vmiss state.

The specified AP has been upgraded using the ap update load { ap-name ap-name | ap-mac ap-mac | ap-id ap-id } update-filename update-file-name command.

Example

# Restart AP N1-2 after the upgrade.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap update load ap-name N1-2 update-filename huawei.bin
[HUAWEI-wlan-view] ap update reset ap-name N1-2

Related Topics

ap update load

ap update sftp-server

Function

The ap update sftp-server command configures basic sftp information, including the sftp server IP address, sftp server user name and password.

The undo ap update sftp-server command restores default sftp settings.

By default, no SFTP server IP address is configured, the SFTP server user name is anonymous, the SFTP server password is anonymous@huawei.com.

Format

ap update sftp-server ip-address server-ip-address sftp-username sftp-username sftp-password cipher sftp-password

undo ap update sftp-server

Parameters

Parameter	Description	Value
ip-address server-ip-address	Specifies an IPv4 address for the sftp server.	The value is in dotted decimal notation.
sftp-username sftp-username	Specifies the sftp server user name.	The value is a string of 1 to 31 characters. The value cannot contain question marks (?) and cannot start or end with double quotation marks (" ") or spaces.
sftp-password	Specifies the password for logging in to the sftp server.	-
cipher	Specifies the password in cipher text.	-
sftp-password	Specifies the sftp server password.	The value is a string of characters without question marks (?). It cannot start or end with double quotation marks (" ") or spaces. sftp-password can be up to 188 characters in cipher text, such as %^%#A<g;&zQR7P3TF+,[MxQ1X%4[2~Gb]Vp#(e<y:~)/%^%#. sftp-password also can be a string of 1 to 128 characters in plain text, such as huawei123.

Views

WLAN view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

The sftp configuration is used when the automatic upgrade and online upgrade modes are sftp. In the automatic upgrade or online upgrade, the AC sends basic sftp information to the AP, and the AP requests the sftp server for upgrade based on sftp information.
After running the ap update sftp-server command, you can perform the following operations:
1. Run the ap update mode command to set the upgrade mode to sftp-mode.
2. Run the ap update multi-load command to upgrade APs in batches.

Precautions

It is recommended that you use an external sftp server to upgrade APs. If the AC functions as the sftp server, a maximum of five APs can be upgraded simultaneously.
APs do not support the following characters:". Ensure that the sftp server user name and unencrypted password configured on the AC do not contain the preceding characters. Otherwise, sftp upgrade fails.

Example

# Configure the sftp server IP address, sftp server user name and password.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap update sftp-server ip-address 192.168.1.100 sftp-username admin sftp-password cipher wlanadmin

Related Topics

ap update sftp-server max-connect-number

Function

The ap update sftp-server command configures the maximum number of APs that can be upgraded simultaneously in SFTP mode.

The undo ap update sftp-server command restores the default maximum number of APs that can be upgraded simultaneously in SFTP mode.

By default, a maximum of 50 APs can be upgraded simultaneously in SFTP mode.

Format

ap update sftp-server max-connect-number max-connect-number

undo ap update sftp-server max-connect-number

Parameters

Parameter	Description	Value
max-connect-number	Specifies the maximum number of APs that can be upgraded simultaneously.	The value is an integer that ranges from 1 to 64.

Views

WLAN view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

When APs are upgraded in sftp mode, you can configure the value of max-connect-number to change the maximum number of APs that can be upgraded simultaneously.

If the number of APs to be upgraded is equal to or smaller than max-connect-number, all APs can be upgraded simultaneously.
If the number of APs to be upgraded is larger than max-connect-number, only the specified number of APs can be upgraded simultaneously. After the specified number of APs are upgraded, the remaining APs are upgraded automatically until all APs are upgraded. The number of APs that are upgraded at a time cannot exceed the value of max-connect-number.

Precautions

An external sftp server can be used, which is recommended. The AC can also function as the sftp server.

When an external sftp server is used, the maximum number of APs that can be upgraded simultaneously is the configured max-connect-number.
If an AC is used as the SFTP server, a maximum of five APs can be upgraded simultaneously even if the specified number is larger than five.

When the AC functions as the SFTP server, run the ap update sftp-server max-connect-number max-connect-number command to set the maximum number of APs that can be upgraded simultaneously. The value of max-connect-number is an integer ranging from 1 to 5. During the upgrade, a maximum of 1 to 5 APs can be upgraded at a time until all APs are upgraded.

If max-connect-number is set larger than 5, an error message will be displayed after the first five APs are upgraded. The remaining APs cannot be automatically upgraded. You have to repeat the command until all APs are upgraded.

Example

# Set the maximum number of APs that can be upgraded simultaneously in SFTP mode to 10.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap update sftp-server max-connect-number 10

Related Topics

ap update update-filename

Function

The ap update update-filename command configures the upgrade file name for APs of a specified type.

The undo ap update update-filename command deletes the upgrade file name for APs of a specified type.

Format

ap update update-filename filename ap-type type-id [ ap-group ap-group-name ]

undo ap update update-filename ap-type type-id [ ap-group ap-group-name ]

Parameters

Parameter	Description	Value
ap-type type-id	Specifies the AP type ID.	The value is an integer that ranges from 0 to 255.
filename	Specifies the AP upgrade file name.	The value is a string of 1 to 255 case-sensitive characters. Ensure that the file name is the same as the actual upgrade file name and has the extension .bin.
ap-group ap-group-name	Specifies an AP group.	The AP group must already exist.

Views

WLAN view

Default Level

3: Management level

Usage Guidelines

If you specify ap-group ap-group-name, the command configures the upgrade file name only for APs of the specified type and in the specified group.

Run the ap update multi-load ap-type command to upgrade APs of the same type in batches.

Example

# Set the upgrade file name for APs with the type ID 19 to fitap6x10xn_v200r007c10.bin.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap update update-filename fitap6x10xn_v200r007c10.bin ap-type 19
Warning: If an AP is performing the automatic upgrade, the AP will be upgraded to the latest version. Continue?[Y/N]:y
Warning: If AP update mode is AC-mode, update-file's default path is flash:/. Continue?[Y/N]:y

Related Topics

ap update update-filename

ap update schedule-task

Function

The ap update schedule-task command configures a scheduled AP upgrade task.

The undo ap update schedule-task command deletes a scheduled AP upgrade task.

By default, no scheduled AP upgrade task is configured.

Format

ap update schedule-task task-id task-id start-time start-time start-date stop-time stop-time stop-date ap-type type-id [ ap-group group-name | { { ap-name ap-name } &<1-10> } | { { ap-id ap-id } &<1-10> } ]

ap update schedule-task task-id task-id start-time start-time start-date stop-time stop-time stop-date ap-group group-name

undo ap update schedule-task { all | task-id task-id }

Parameters

Parameter	Description	Value
task-id task-id	Specifies the ID of a scheduled AP upgrade task.	The value is an integer that ranges from 0 to 31.
start-time start-time	Specifies the start time of the scheduled AP upgrade task.	The value is in HH:MM format, ranging from 00:00 to 23:59.
start-date	Specifies the start date of the scheduled AP upgrade task.	The value is in YYYY/MM/DD format, ranging from 2000-01-01 to 2050-12-31.
stop-time stop-time	Specifies the end time of the scheduled AP upgrade task.	The value is in HH:MM format, ranging from 00:00 to 23:59.
stop-date	Specifies the end date of the scheduled AP upgrade task.	The value is in YYYY/MM/DD format, ranging from 2000-01-01 to 2050-12-31. stop-time stop-date must be later than start-time start-date.
ap-type type-id	Specifies an AP type ID.	The value is an integer. To view all AP types, run the display ap-type all command.
ap-group group-name	Specifies an AP group name.	The AP group must exist.
ap-name ap-name	Specifies an AP name.	The AP name must exist.
ap-id ap-id	Specifies an AP ID.	The AP ID must exist.

Views

WLAN view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

You can configure a scheduled AP upgrade task to upgrade APs in a specified time period, such as off-peak hours.

If you specify ap-group group-name in the command, the configured task will upgrade only APs in the specified AP group. Similarly, if you specify ap-type type-id, ap-name ap-name, or ap-id ap-id, the configured task will upgrade only the specified APs.

The scheduled task configuration will not be automatically deleted after a scheduled upgrade task is completed. To delete the task, run the undo ap update schedule-task { all | task-id task-id } command.

Prerequisites

The AP upgrade file has been specified using the ap update update-filename command. To check the status of scheduled AP upgrade tasks, run the display ap update schedule-task command.

Configuration Impact

For scheduled AP upgrade tasks with the same start time, the task with a smaller task-id task-id is executed preferentially.
During the scheduled AP upgrade, if the time for task B is reached before task A is completed, task B waits until task A is completed. Subsequent scheduled AP upgrade tasks wait in sequence until the previous task is completed.
When the time specified by stop-time stop-time stop-date is reached, ongoing upgrade tasks continue until the upgrade is completed and those tasks waiting in queues stop.
After APs in a scheduled upgrade task are all upgraded, the APs automatically restart. The APs that fail the upgrade do not restart.
After a scheduled AP upgrade task is configured, if the AP group or all APs are deleted, the task fails to be executed, which is not recorded as upgrade failure information.
If an AP is performing the automatic upgrade when you configure a scheduled AP upgrade task, the upgrade continues until the upgrade is completed. APs that have not started the automatic upgrade will not execute the automatic upgrade.

Example

# Configure APs with ap-type as 54 to perform the scheduled upgrade from 01:00 to 04:00 on May 20, 2016.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap update schedule-task task-id 1 start-time 1:00 2016/5/20 stop-time 4:00 2016/5/20 ap-type 54

Related Topics

display ap update schedule-task

ap username

Function

The ap username command sets the user name and password for AP login.

The undo ap username command restores the default user name and password for AP login.

By default, the user name is admin and password is admin@huawei.com.

Format

ap username username password cipher

undo ap username

Parameters

Parameter	Description	Value
username	Specifies the user name for AP login.	The value is a string of 4-31 characters. It can contain letters, underlines, and digits. The character string must start with letters.
password	Specifies the password for AP login.	-
cipher	Indicates the cipher text password.	The password can be entered in plain or cipher text: In plain text, the password is a string of 8 to 128 case-sensitive characters. It must contain at least one uppercase letter, one lowercase letter, and one digit except the question mark (?). In cipher text, the password is a string of 48 to 188 characters. It must contain at least one uppercase letter, one lowercase letter, and one digit.

Views

WLAN view

Default Level

3: Management level

Usage Guidelines

Unauthorized users may use the default user name and password to log in to APs, causing security risk to APs. You can use the ap username command to change the user name and password to improve security for APs.

NOTE:

It is recommended that you change the user name and password in a timely manner to ensure device security.

The password cannot be the same as the user name or the mirror user name.

Example

# Set the user name to huawei and password to Zz123456.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] ap username huawei password cipher
Enter the password (plain-text password of 8-32 characters or cipher-text passwo
rd of 48 or 68 characters):                                                     
Confirm password:

Related Topics

display ap username

ap whitelist

Function

The ap whitelist command adds an AP to an AP whitelist.

The undo ap whitelist command deletes an AP from an AP whitelist.

By default, no AP is in an AP whitelist.

Format

ap whitelist { mac ap-mac1 [ to ap-mac2 ] | sn ap-sn1 [ to ap-sn2 ] }

undo ap whitelist { mac ap-mac1 [ to ap-mac2 ] | sn ap-sn1 [ to ap-sn2 ] }

Parameters

Parameter	Description	Value
mac ap-mac1	Specifies the AP MAC address.	The value is in H-H-H format. An H is a hexadecimal number of four digits.
to ap-mac2	Specifies the end MAC address. This parameter is used when you want to add multiple MAC addresses to the whitelist. The value must be larger than ap-mac1. ap-mac1 and ap-mac2 identify a range. The maximum number of MAC addresses that can be added to the whitelist in batches is 4096.	The value is in H-H-H format. An H is a hexadecimal number of four digits.
sn ap-sn1	Specifies the SN of an AP.	The value is a string of 1 to 31 characters.
to ap-sn2	Specifies the end SN. This parameter is used when you want to add multiple SNs to the whitelist. It must be larger than ap-sn1. ap-sn1 and ap-sn2 identify a range. The maximum number of MAC addresses that can be added to the whitelist in batches is 4096.	The value is a string of 1 to 31 characters.

Views

WLAN view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When the AP authentication mode is set to MAC address authentication using the ap auth-mode command, if the MAC address of an online AP exists in the whitelist, the AP is automatically added to the AC. If the MAC address of an online AP does not exist in the whitelist or the AP is not added offline, the AP cannot be automatically added to the AC. You need to run the ap-confirm command to confirm the AP.
When the AP authentication mode is set to SN authentication using the ap auth-mode command, if the SN of an online AP exists in the whitelist, the AP is automatically added to the AC. If the SN of an online AP does not exist in the whitelist or the AP is not added offline, the AP cannot be automatically added to the AC. You need to run the ap-confirm command to confirm the AP.

Prerequisites

The AP authentication mode has been set to MAC address or SN authentication using the ap auth-mode command.

Precautions

When adding multiple SNs to the whitelist, ensure that the start SN length and the end SN length are the same.

Example

# Add AP MAC address 0025-9e07-8280 to the whitelist.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap whitelist mac 0025-9e07-8280

# Add the MAC addresses from 0025-9e07-8270 to 0025-9e07-8290 to the AP whitelist.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap whitelist mac 0025-9e07-8270 to 0025-9e07-8290

# Add SN 08PE56430071 to the AP whitelist.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap whitelist sn 08PE56430071

# Add SNs from 08PE56430076 to 08PE56430081 to the AP whitelist.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap whitelist sn 08PE56430076 to 08PE56430081

Related Topics

display ap whitelist

ap auth-mode

ap-confirm

Function

The ap-confirm command confirms unauthenticated APs and allows them to go online.

Format

ap-confirm { all | mac ap-mac | sn ap-sn }

Parameters

Parameter	Description	Value
all	Confirms all APs.	-
mac ap-mac	Confirms the AP with the specified MAC address.	The value is in H-H-H format. An H is a hexadecimal number of four digits.
sn ap-sn	Confirms the AP with the specified SN.	The value is a string of 1 to 31 characters.

Views

WLAN view

Default Level

2: Configuration level

Usage Guidelines

After viewing unauthenticated APs using the display ap unauthorized record command, you can run the ap-confirm command to confirm these unauthenticated APs if you want to connect them to the AC. After confirmation, the APs are allowed to go online, added to the default region, and bound to the default AP profile.

Example

# Confirm the AP with MAC 0025-9e07-8270.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap-confirm mac 0025-9e07-8270

# Confirm all APs.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap-confirm all

Related Topics

display ap whitelist

ap-group

Function

The ap-group command creates an AP group and displays the AP group view, or displays the view of an existing AP group.

The undo ap-group command deletes an AP group.

By default, the system provides the AP group default.

Format

ap-group name group-name

undo ap-group { name group-name | all }

Parameters

Parameter	Description	Value
name group-name	Specifies the name of an AP group.	The value is a string of 1 to 35 characters. It does not contain question marks (?), marks (/), or spaces, and cannot start or end with double quotation marks (" ").
all	Deletes all AP groups.	-

Views

WLAN view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If you need to perform the same configuration on multiple APs, add the APs to an AP group and perform the configuration in the AP group. The configuration takes effect on all APs of the group. This prevents repetitive configuration.

Follow-up Procedure

Run the ap-group (AP view) or ap-regroup command to add APs to an AP group.

Precautions

If the configuration of an AP in the AP view is different from that in the AP group view, the configuration in the AP view is preferentially used.
The device supports a maximum of 256 AP groups.
The AP group that has APs cannot be deleted. The AP group default cannot be deleted either.
By default, an AP group has the following profiles bound: AP system profile default, 2G radio profile default, 5G radio profile default, regulatory domain profile default, WIDS profile default, and AP wired port profile default.

Example

# Create the AP group group1 and display the AP group view.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap-group name group1
[HUAWEI-wlan-ap-group-group1]

Related Topics

ap-group (AP view)

ap-regroup

display ap-group

ap-group (AP provisioning view)

Function

The ap-group command configures an AP group.

The undo ap-group command restores the default AP group.

By default, no AP group is configured.

Format

ap-group ap-group

undo ap-group

Parameters

Parameter	Description	Value
ap-group	Specifies the group that an AP joins.	The AP group must exist.

Views

AP provisioning view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

After the group that an AP joins is changed, and the change is delivered to the AP, the AP automatically restarts and joins the new group.

Follow-up Procedure

Run the commit command to deliver configuration to APs and restart the APs to make the configuration take effect.

Example

# Change the group that the AP joins to group ap-new-group.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] provision-ap
[HUAWEI-wlan-provision-ap] ap-group ap-new-group

Related Topics

ap-group (AP view)

Function

The ap-group command configures an AP group.

The undo ap-group command restores the default AP group.

By default, no AP group is configured.

Format

ap-group ap-group

undo ap-group

Parameters

Parameter	Description	Value
ap-group	Specifies an AP group.	The AP group must exist.

Views

AP view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Each AP must be added to an AP group. If no AP group is configured for an AP, the AP automatically joins the AP group default.

Example

# Configure the AP group ap-new-group for an AP.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] ap-id 0
[HUAWEI-wlan-ap-0] ap-group ap-new-group
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration
s of the radio, Whether to continue? [Y/N]:y

ap-id

Function

The ap-id command adds an AP offline or displays the AP view.

By default, no AP is added offline.

Format

ap-id ap-id [ [ type-id type-id | ap-type ap-type ] { ap-mac ap-mac | ap-sn ap-sn | ap-mac ap-mac ap-sn ap-sn } ]

Parameters

Parameter	Description	Value
ap-id	Specifies the AP ID.	The value is an integer. The value range varies according to devices: S7703 and S9703: 0 to 511 S7706 and S7712 (The main control unit is not SRUH/SRUE.): 0 to 1023 S7706 and S7712 (The main control unit is SRUH/SRUE.): 0 to 4095 S9706 and S9712: 0 to 2047
type-id type-id	Specifies the AP type ID.	The value is an integer that ranges from 0 to 255.
ap-type ap-type	Specifies the AP type.	The value is a string of 1 to 31 characters.
ap-mac ap-mac	Specifies the MAC address of an AP.	The value is in H-H-H format. An H is a hexadecimal number of 4 digits.
ap-sn ap-sn	Specifies the serial number (SN) of an AP.	The value is a string of 1 to 31 characters, and can only contain letters and digits.

Views

WLAN view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

After an AP is successfully added to an AC, you can configure parameters for the AP offline. When the AP goes online, it uses the configured parameters.

You can run the undo ap command to delete an AP.

Precautions

To add an AP, you must enter the MAC address, SN, or MAC address+SN. In MAC address authentication mode, enter the MAC address of the AP. In SN authentication mode, enter the SN of the AP.

To enter the AP view, you only need to enter the AP ID.

Example

# Create an AP with ID 11, type ID 19, and MAC address 0025-9e07-8270.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap-id 11 type-id 19 ap-mac 0025-9e07-8270

Related Topics

ap-mac

Function

The ap-mac command adds an AP offline or displays the AP view.

By default, no AP is added offline.

Format

ap-mac ap-mac [ type-id type-id | ap-type ap-type ] [ ap-id ap-id ] [ ap-sn ap-sn ]

Parameters

Parameter	Description	Value
ap-mac	Specifies the MAC address of an AP.	The value is in H-H-H format. An H is a hexadecimal number of 4 digits.
type-id type-id	Specifies the AP type ID.	The value is an integer that ranges from 0 to 255.
ap-type ap-type	Specifies the AP type.	The value is a string of 1 to 31 characters.
ap-id ap-id	Specifies the AP ID.	The value is an integer. The value range varies according to devices: S7703 and S9703: 0 to 511 S7706 and S7712 (The main control unit is not SRUH/SRUE.): 0 to 1023 S7706 and S7712 (The main control unit is SRUH/SRUE.): 0 to 4095 S9706 and S9712: 0 to 2047
ap-sn ap-sn	Specifies the sequence number (SN) of an AP.	The value is a string of 1 to 31 characters, and can only contain letters and digits.

Views

WLAN view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

After an AP is successfully added to an AC, you can configure parameters for the AP offline. When the AP goes online, it uses the configured parameters.

Precautions

When adding an AP, you need to enter the MAC address of the AP. If the AP authentication mode is SN authentication, you also need to enter the SN of the AP.

To enter the AP view, you only need to enter the MAC address of the AP. If the entered MAC address does not exist, the system adds a new AP and displays the AP view.

The ap-mac ap-mac [ type-id type-id | ap-type ap-type ] [ ap-id ap-id ] [ ap-sn ap-sn ] and ap-id ap-id [ [ type-id type-id | ap-type ap-type ] { ap-mac ap-mac | ap-sn ap-sn | ap-mac ap-mac ap-sn ap-sn } ] commands have the same function. You can use either one according to the actual situation.

Example

# Add the AP with the MAC address 0025-9e07-8260.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap-mac 0025-9e07-8260

Related Topics

ap-mode

Function

The ap-mode command sets the working mode of an AP.

The undo ap-mode command restores the default working mode of an AP.

By default, an AP works in Fit mode.

Format

ap-mode { fat | cloud }

undo ap-mode

Parameters

Parameter	Description	Value
fat	Specifies the Fat mode.	-
cloud	Specifies the cloud mode.	-

Views

AP provisioning view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The working mode of an AP is configured on the AC and delivers to the AP. After a restart, the AP will switch the working mode accordingly.

Prerequisites

The AP has gone online on the AC in Fit mode.
Corresponding system files have been uploaded to the AC, FTP server, or SFTP server.

Follow-up Procedure

Run the commit command to commit the configuration.

Configuration Impact

After the working mode of the AP is switched to Fat or cloud, the AP will be out of control by the AC.

Only the AP1050DN-S, AP2050DN, AP2050DN-E, AP4050DN-E, AP4050DN-HD, AP4050DN, AP4050DN-S, AP4051DN, AP4151DN, AP8050DN, AP8050DN-S, AP8150DN, AP4051TN, AP6052DN, AP7052DN, AP7152DN, AP7052DE, AP8050TN-HD, AP8082DN, AP8182DN, AP6050DN, AP6150DN, AP7050DN-E, AP7050DE, AP8030DN, AP8130DN, AD9430DN-12, and AD9430DN-24 support this command. The AP4030TN and AD9431DN-24X can be switched only to the Fat mode.

Example

# Set the working mode of an AP to Fat.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] provision-ap
[HUAWEI-wlan-provision-ap] ap-mode fat
Warning: When the configuration is committed, the AP mode will be switched if supported and the AP will be out of control by the AC.Continue?[Y/N]: y

Related Topics

ap-name

Function

The ap-name command displays the AP view.

Format

ap-name ap-name

Parameters

Parameter	Description	Value
ap-name	Specifies the AP name.	The AP name must exist.

Views

WLAN view

Default Level

2: Configuration level

Usage Guidelines

After entering the AP view, you can perform personalized configuration on an AP.

Example

# Display the view of the AP named area_1.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap-name area_1
[HUAWEI-wlan-ap-2]

Related Topics

ap-name (AP provisioning view)

Function

The ap-name command sets the name of an AP.

The undo ap-name command restores the default name of an AP.

By default, no AP name is configured.

Format

ap-name ap-new-name

undo ap-name

Parameters

Parameter	Description	Value
ap-new-name	Specifies an AP name.	The value is a string of 1 to 31 case-sensitive characters. It does not contain question marks (?) or spaces, and cannot start or end with double quotation marks (" ").

Views

AP provisioning view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

After the name of an AP is changed, and the change is delivered to the AP, the AP automatically restarts and goes online using the new name.

Precautions

The new AP name cannot be the same as the existing AP name.

If the AP name is not configured, the default name of an AP is the AP's MAC address after the AP goes online.

Follow-up Procedure

Run the commit command to deliver configuration to APs and restart the APs to make the configuration take effect.

Example

# Change the AP name to AP-N1-2.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] provision-ap
[HUAWEI-wlan-provision-ap] ap-name AP-N1-2

Related Topics

ap-name (AP view)

Function

The ap-name command configures an AP name.

The undo ap-name command restores the default AP name.

By default, no AP name is configured for an AP.

Format

ap-name ap-name

undo ap-name

Parameters

Parameter	Description	Value
ap-name	Specifies an AP name.	The value is a string of 1 to 31 case-sensitive characters. It does not contain question marks (?) or spaces, and cannot start or end with double quotation marks (" ").

Views

AP view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To facilitate AP maintenance, management, and differentiation, you can name the AP according to actual situations.

Precautions

The new AP name cannot be the same as the existing AP name.

If a new AP name is the same as an existing AP name, the new AP is restarted after its name is changed.

If the AP name is not configured, the default name of an AP is the AP's MAC address after the AP goes online.

Example

# Change the AP name to AP-N1-2.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] ap-id 0
[HUAWEI-wlan-ap-0] ap-name AP-N1-2

ap-ping

Function

The ap-ping command uses a specified AP to ping a network device and displays the returned result.

Format

ap-ping { ap-name ap-name | ap-id ap-id } [ -c count | -s packetsize | -m time | -t timeout ] ^* host

Parameters

Parameter	Description	Value
ap-name ap-name	Specifies the name of an AP used to ping other network devices.	The AP name must already exist.
ap-id ap-id	Specifies the ID of an AP used to ping other network devices.	The AP ID must already exist.
-c count	Specifies the number of ICMP Echo Request packets to be sent.	The value is an integer that ranges from 1 to 10. The default value is 4.
-s packetsize	Specifies the length of an Echo Request packet excluding the IP header and ICMP header.	The value is an integer that ranges from 20 to 8100, in bytes. The default value is 56 bytes.
-m time	Specifies the time to wait before sending the next ICMP Request packet.	The value is an integer that ranges from 1 to 5000, in milliseconds. The default value is 2000 ms.
-t timeout	Specifies the timeout period for an ICMP Echo Response packet.	The value is an integer that ranges from 0 to 10000, in milliseconds. The default value is 2000 ms.
host	Specifies the domain name or IP address of the destination host.	The value is a string of 1 to 20 characters.

Views

WLAN view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

You can run this command to check the connectivity between an AP and network device by pinging a network device from an AP.
The prerequisite is that the AP is online and has been configured with an IP address.

Precautions

This command may cost much time because the parameters such as waiting time affects the command running.
Only one AP can perform the ping operation at a time.

Example

# Use the AP N1-2 to perform a ping operation.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] ap-ping ap-name N1-2 10.1.1.1
Warning: This operation maybe takes several minutes, continue?[Y/N]:y       
[HUAWEI-wlan-view]                       
  AP ping result                                                                
    Success count        : 4                                                    
    Failure count        : 0                                                    
    Average response time: 1 ms                                                 
    Minimum response time: 1 ms                                                 
    Maximum response time: 1 ms

ap-regroup

Function

The ap-regroup command changes the group that an AP joins.

Format

ap-regroup { ap-name ap-name | ap-id ap-id } new-group new-group-name

Parameters

Parameter

Description

Value

ap-name ap-name

Specifies an AP name.

The AP name must exist.

ap-id ap-id

Specifies an AP ID.

The AP ID must exist.

The value is a string of 1 to 255 characters. When multiple APs are selected, use commas (,) to separate AP IDs or use hyphens (-) to indicate continuous AP IDs. For example, 5,8,10-13,20 indicates the list of APs with IDs 5, 8, 10, 11, 12, 13, and 20.

new-group new-group-name

Specifies the name of the new group to which the AP is added.

The AP group must exist.

Views

WLAN view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

If the current AP group is not applicable to an AP or the AP is added to an incorrect group, you can run this command to delete the AP from the current AP group and add the AP to a new AP group.

Prerequisites

The AP group has been created using the ap-group command.

Configuration Impact

Changing the group of an AP will restart the AP and interrupt services. Exercise caution when you run the command.

Example

# Change the group that an AP joins to the AP group group1.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap-group name group1
[HUAWEI-wlan-ap-group-group1] quit
[HUAWEI-wlan-view] ap-regroup ap-name 1047-80b1-56a0 new-group group1
Warning: This operation may cause AP reset. If the country code changes, it will clear channel, power and antenna gain configuration
s of the radio, Whether to continue? [Y/N]:y

Related Topics

ap-group

ap-rename

Function

The ap-rename command changes the name of an AP.

Format

ap-rename { ap-name name | ap-mac ap-mac-address | ap-id ap-id } new-name ap-new-name

Parameters

Parameter	Description	Value
ap-name name	Specifies the old name of an AP.	The AP name must exist.
ap-mac ap-mac-address	Specifies the MAC address of an AP.	The AP's MAC address must exist.
ap-id ap-id	Specifies the ID of an AP.	The AP ID must exist.
new-name ap-new-name	Specifies the new name of an AP.	The value is a string of 1 to 31 case-sensitive characters. It does not contain question marks (?) or spaces, and cannot start or end with double quotation marks (" ").

Views

WLAN view

Default Level

2: Configuration level

Usage Guidelines

If the name of an AP conflicts with that of another or an AP requires a more proper name, you can run this command to change the name of the AP.

If a new AP name is the same as an existing AP name, the new AP is restarted after its name is changed.

Example

# Change the AP name from N1-2 to N2-2.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap-rename ap-name N1-2 new-name N2-2

Related Topics

ap-reset

Function

The ap-reset command resets an AP.

Format

ap-reset { all | ap-name ap-name | ap-mac ap-mac | ap-id ap-id | ap-group ap-group | ap-type { type type-name | type-id type-id } }

Parameters

Parameter	Description	Value
all	Resets all APs.	-
ap-name ap-name	Resets the AP with the specified AP name.	The AP name must exist.
ap-mac ap-mac	Resets the AP with the specified MAC address.	The AP's MAC address must exist.
ap-id ap-id	Resets the AP with the specified AP ID.	The AP ID must exist. The value is a string of 1 to 255 characters. When multiple APs are selected, use commas (,) or hyphens (-) to separate AP IDs. For example, 5,8,10-13,20 indicates the list of APs with IDs 5, 8, 10, 11, 12, 13, and 20.
ap-group ap-group	Resets APs in the specified AP group.	The AP group must exist.
ap-type	Resets APs of the specified AP type.	-
type type-name	Resets APs of the specified type name.	The AP type name must exist.
type-id type-id	Resets APs of the specified type ID.	The AP type ID must exist.

Views

WLAN view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

After in-service upgrade of APs is complete, you can run the ap-reset command to reset the APs. After the command is run, the APs restart with the upgraded software version. You can also use the command to restart APs for other reasons.

Prerequisites

An AP exists on the AC.

Example

# Reset the AP N1-2.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] ap-reset ap-name N1-2
Warning: Reset AP(s), continue?[Y/N]:y

ap-reset work-group

Function

The ap-reset work-group command restarts APs in a WLAN work group.

Format

ap-reset work-group { groupId | all | default }

Parameters

Parameter	Description	Value
groupId	Restarts APs in a specified WLAN work group.	The value is an integer ranging from 1 to 4.
all	Restarts APs in all WLAN work groups.	-
default	Restarts APs in the default WLAN work group.	-

Views

WLAN view

Default Level

3: Management level

Usage Guidelines

The ap-reset work-group command restarts APs in a WLAN work group. New APs can still go online during the restart.

To clear APs in a WLAN work group, run the state block command to set the WLAN work group in block state and then run the ap-reset work-group command.

Example

# Restart APs in WLAN work group 1.

<HUAWEI> system-view

[HUAWEI] wlan

[HUAWEI-wlan-view] ap-reset work-group 1
Warning: Reset AP(s). Continue? [Y/N]:y

Related Topics

state block

ap-system-profile (WLAN view)

Function

The ap-system-profile command creates an AP system profile and displays the AP system profile view, or displays the view of an existing AP system profile.

The undo ap-system-profile command deletes an AP system profile.

By default, the system provides the AP system profile default.

Format

ap-system-profile name profile-name

undo ap-system-profile { name profile-name | all }

Parameters

Parameter	Description	Value
name profile-name	Specifies the name of an AP system profile.	The value is a string of 1 to 35 case-insensitive characters. It does not contain question marks (?) or spaces, and cannot start or end with double quotation marks (" ").
all	Deletes all AP system profiles.	-

Views

WLAN view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

To manage and maintain multiple APs in a centralized manner, add the APs in an AP group, configure parameters in an AP system profile, and apply the AP system profile to the AP group.

To manage and maintain an AP independently, configure parameters in an AP system profile and apply the AP system profile to the AP specific profile.

Follow-up Procedure

Run the ap-system-profile (AP group view and AP view) command to bind the AP system profile to an AP or AP group so that the AP system profile can take effect.

Precautions

The AP system profile default cannot be deleted.
The AP system profile referenced by an AP or AP group cannot be deleted. To delete the AP system profile, unbind it from the AP or AP group first.

Example

# Create the AP system profile ap-system1 and display the AP system profile view.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap-system-profile name ap-system1 
[HUAWEI-wlan-ap-system-prof-ap-system1]

ap-system-profile (WLAN view)

ap-system-profile (AP group view and AP view)

Function

The ap-system-profile command binds an AP system profile to an AP or AP group.

The undo ap-system-profile command unbinds an AP system profile from an AP or AP group.

By default, the AP system profile default is bound to an AP group, but no AP system profile is bound to an AP.

Format

ap-system-profile profile-name

undo ap-system-profile

Parameters

Parameter	Description	Value
profile-name	Specifies the name of an AP system profile.	The AP system profile must exist.

Views

AP group view, AP view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

After you create an AP system profile using the ap-system-profile (WLAN view) command, bind it to an AP or AP group so that the AP system profile can take effect.

Precautions

After an AP system profile is bound to an AP or AP group, parameter settings in the AP system profile apply to all APs using the profile.

Example

# Create the AP system profile ap-system1 and bind it to AP group group1.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap-system-profile name ap-system1
[HUAWEI-wlan-ap-system-prof-ap-system1] quit
[HUAWEI-wlan-view] ap-group name group1
[HUAWEI-wlan-ap-group-group1] ap-system-profile ap-system1

Related Topics

ap-group

display references ap-system-profile

assignment

Function

The assignment command configures the VLAN assignment algorithm in a VLAN pool.

The undo assignment command restores the default VLAN assignment algorithm in a VLAN pool.

By default, the VLAN assignment algorithm is hash in a VLAN pool.

Format

assignment { even | hash }

undo assignment

Parameters

Parameter	Description	Value
even	Sets the VLAN assignment algorithm to even.	-
hash	Sets the VLAN assignment algorithm to hash.	-

Views

VLAN pool view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When the VLAN assignment algorithm is set to even, service VLANs are assigned to STAs from the VLAN pool based on the order in which STAs go online. Address pools mapping the service VLANs evenly assign IP addresses to STAs. If a STA goes online many times, it obtains different IP addresses.
When the VLAN assignment algorithm is set to hash, VLANs are assigned to STAs from the VLAN pool based on the harsh result of their MAC addresses. As long as the VLANs in the VLAN pool do not change, the STAs obtain fixed service VLANs. A STA is preferentially assigned the same IP address when going online at different times.

Precautions

For the even VLAN assignment algorithm, the aging time of IP addresses is set large on the DHCP server. A STA is assigned different IP addresses when going one at different times. As a result, a STA may occupy many IP addresses, which wastes IP addresses. Additionally, frequent IP address changes may lower user experience.

Configuration Impact

The VLAN assignment algorithm configuration affects only newly connected STAs, but not those that have been connected to the network.

Example

# Set the VLAN assignment algorithm to even in a VLAN pool.

<HUAWEI> system-view
[HUAWEI] vlan pool pool1
[HUAWEI-vlan-pool-pool1] assignment even

Related Topics

display vlan pool

vlan (VLAN pool view)

association-timeout

Function

The association-timeout command configures an association aging time for STAs.

The undo association-timeout command restores the default association aging time.

By default, the association aging time is 5 minutes.

Format

association-timeout association-timeout

undo association-timeout

Parameters

Parameter	Description	Value
association-timeout	Specifies the association aging time of STAs.	The value is an integer that ranges from 1 to 30, in minutes.

Views

SSID profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

The administrator can run the association-timeout command to set the association aging time for STAs. If the AP receives no data packet from a STA in a specified time, the STA goes offline after the association aging time expires.

Precautions

Changing the association aging time of a STA may interrupt the STA services.

Example

# Set the association aging time of STAs to 15 minutes in the SSID profile ssid1.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ssid-profile name ssid1
[HUAWEI-wlan-ssid-prof-ssid1] association-timeout 15
Warning: This action may cause service interruption. Continue?[Y/N]y

Related Topics

auto-off service

Function

The auto-off service command enables the scheduled VAP auto-off function and sets the time range within which the VAP is disabled.

The undo auto-off service command disables the scheduled VAP auto-off function.

By default, the scheduled VAP auto-off function is disabled.

Format

auto-off service start-time start-time end-time end-time

undo auto-off service

Parameters

Parameter	Description	Value
start-time start-time	Specifies the time when a VAP starts to be disabled.	The time is in hh:mm:ss format. hh indicates the hour that is an integer ranging from 0 to 23. mm indicates the minute that is an integer ranging from 0 to 59. ss indicates the second that is an integer ranging from 0 to 59.
end-time end-time	Specifies the time when a VAP stops being disabled.	The time is in hh:mm:ss format. hh indicates the hour that is an integer ranging from 0 to 23. mm indicates the minute that is an integer ranging from 0 to 59. ss indicates the second that is an integer ranging from 0 to 59.

Views

VAP profile view, 2G radio profile view, 5G radio profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

When an enterprise does not want employees to access the internal WLAN from 01:00 to 05:00, the administrator can run the auto-off service command to enable the scheduled VAP auto-off function.

Precautions

After the service mode of a VAP is enabled using the undo service-mode disable command, you can run the auto-off service command to configure the scheduled VAP auto-off function. In the scheduled time, the VAP is disabled and cannot be enabled using the undo service-mode disable command. To enable the VAP, run the undo auto-off service command.
The scheduled VAP auto-off function takes effect in the scheduled time only after the undo service-mode disable command is executed. If the service mode of a VAP is disabled using the service-mode disable command, the VAP auto-off function does not take effect.
The scheduled VAP auto-off function enabled in a VAP profile view takes effect only on the APs using the VAP profile, and the scheduled VAP auto-off function enabled in a radio profile view takes effect only on the APs using the radio profile.

Example

# Configure the scheduled VAP auto-off function in the VAP profile vap1, and configure the VAP to be disabled from 1:00:00 to 7:00:00.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] vap-profile name vap1
[HUAWEI-wlan-vap-prof-vap1] auto-off service start-time 1:00:00 end-time 7:00:00

Related Topics

display vap

service-mode disable

beacon-2g-rate

Function

The beacon-2g-rate command sets the transmit rate of 2.4 GHz Beacon frames.

The undo beacon-2g-rate command restores the default transmit rate of 2.4 GHz Beacon frames.

By default, the transmit rate of 2.4 GHz Beacon frames is 1 Mbit/s.

Format

beacon-2g-rate beacon-2g-rate

undo beacon-2g-rate

Parameters

Parameter	Description	Value
beacon-2g-rate	Specifies the transmit rate of Beacon frames.	Enumerated type: 1: 1 Mbit/s 2: 2 Mbit/s 5.5: 5.5 Mbit/s 6: 6 Mbit/s 9: 9 Mbit/s 11: 11 Mbit/s 12: 12 Mbit/s 18: 18 Mbit/s 24: 24 Mbit/s 36: 36 Mbit/s 48: 48 Mbit/s 54: 54 Mbit/s

Views

SSID profile view, WDS profile view, Mesh profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

In high-density wireless scenarios, too many Beacon frames occupy a large number of wireless resources. To reduce wireless resource occupation of Beacon frames and improve channel usage efficiency, you can run the beacon-2g-rate command to set a large transmit rate for 2.4 GHz Beacon frames.

Precautions

Modifying the transmit rate of Beacon frames will affect the association experience of STAs. Exercise caution when running the command.

The 802.11b protocol supports only 1 Mbit/s, 2 Mbit/s, 5.5 Mbit/s, and 11 Mbit/s. If you set the transmit rate of Beacon frames to a rate not supported by the 802.11b protocol, STAs supporting only 802.11b cannot connect to the wireless network.

If you run the radio-type dot11b command in the 2G radio profile view to set the radio type to dot11b, and the 2G radio profile is applied to an AP, beacon-2g-rate that takes effect on the 2 GHz radio of the AP is fixed as 1 Mbps, and beacon-2g-rate configured in the SSID profile view does not take effect on the AP.

Example

# Set the transmit rate of 2.4 GHz Beacon frames to 18 Mbit/s in the SSID profile ssid1.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ssid-profile name ssid1
[HUAWEI-wlan-ssid-prof-ssid1] beacon-2g-rate 18

Related Topics

radio-type (2G radio profile view)

beacon-5g-rate

Function

The beacon-5g-rate command sets the transmit rate of 5 GHz Beacon frames.

The undo beacon-5g-rate command restores the default transmit rate of 5 GHz Beacon frames.

By default, the transmit rate of 5 GHz Beacon frames is 6 Mbit/s.

Format

beacon-5g-rate beacon-5g-rate

undo beacon-5g-rate

Parameters

Parameter	Description	Value
beacon-5g-rate	Specifies the transmit rate of Beacon frames.	Enumerated type: 6: 6 Mbit/s 9: 9 Mbit/s 12: 12 Mbit/s 18: 18 Mbit/s 24: 24 Mbit/s 36: 36 Mbit/s 48: 48 Mbit/s 54: 54 Mbit/s

Views

SSID profile view, WDS profile view, Mesh profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

In high-density wireless scenarios, too many Beacon frames occupy a large number of wireless resources. To reduce wireless resource occupation of Beacon frames and improve channel usage efficiency, you can run the beacon-5g-rate command to set a large transmit rate for 5 GHz Beacon frames.

Precautions

Modifying the transmit rate of Beacon frames will affect the association experience of STAs. Exercise caution when running the command.

Example

# Set the transmit rate of 5 GHz Beacon frames to 18 Mbit/s in the SSID profile ssid1.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ssid-profile name ssid1
[HUAWEI-wlan-ssid-prof-ssid1] beacon-5g-rate 18

Related Topics

beacon-interval

Function

The beacon-interval command sets the interval for sending Beacon frames.

The undo beacon-interval restores the default interval for sending Beacon frames.

By default, the interval for sending Beacon frames is 100 TUs.

Format

beacon-interval beacon-interval

undo beacon-interval

Parameters

Parameter	Description	Value
beacon-interval	Specifies the interval for sending Beacon frames.	The value is an integer that ranges from 60 TUs to 1000 TUs.TU is a time unit equal to 1024 microseconds.

Views

2G radio profile view, 5G radio profile view

Default Level

2: Configuration level

Usage Guidelines

An AP broadcasts Beacon frames at intervals to notify STAs of an existing 802.11 network. After receiving a Beacon frame, a STA can modify parameters used to connect to the 802.11 network.

A long interval for sending Beacon frames lengthens the dormancy time of STAs, while a short interval for sending Beacon frames increases air interface costs. Therefore, you are advised to set the interval for sending Beacon frames for an AP based on the VAP quantity. The following intervals for sending Beacon frames are recommended for APs with different VAP quantities on a single radio (except the AP7030DE and AP9330DN):

No more than 4 VAPs: about 100 TUs
5 to 8 VAPs: about 200 TUs
9 to 12 VAPs: about 300 TUs
13 to 16 VAPs: about 400 TUs

Example

# Set the interval for sending Beacon frames to 200 TUs in the 2G radio profile default.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] radio-2g-profile name default
[HUAWEI-wlan-radio-2g-prof-default] beacon-interval 200

Related Topics

beamforming enable

Function

The beamforming enable command enables Beamforming.

The undo beamforming enable command disables Beamforming.

By default, Beamforming is disabled.

Format

beamforming enable

undo beamforming enable

Parameters

None

Views

2G radio profile view, 5G radio profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Beamforming is a signal processing technique that controls signal transmission direction, and transmission and reception of radio signals. The transmit end uses weight to transmit signals. The signals are transmitted to the destination as narrow beams. Beamforming increases the signal-to-noise ratio (SNR) for the destination device.

Precautions

If nodes on the WDS or Mesh network are fixed and distant from each other, enable Beamforming to increase WDS or Mesh link SNR. Mobile nodes may cause low link SNR in WDS or Mesh scenarios. To prevent this problem, disable Beamforming. Among Beamforming-capable APs, the AP2x10xN series, AP7x30xE series, and AP9330DN APs do not support WDS and Mesh.

The smart antenna function cannot take effect if MU-MIMO has been configured.

Table 11-1 describes the support of Huawei APs for beamforming.

Table 11-1 Support of APs for Beamforming

AP Model	Explicit 802.11ac Beamforming	Explicit 802.11n Beamforming		Implicit Beamforming
AP Model	Explicit 802.11ac Beamforming	2.4 GHz	5 GHz	Implicit Beamforming
AP3010DN, AP5010SN, AP5010DN, AP6010SN, AP6010DN, AP6310SN, AP6510DN, AP6610DN, AP7110SN, AP7110DN, and AP2010DN	N	Y	Y	N
AP5030DN, AP5130DN, AP2030DN, AP3030DN, AP4030DN, AP4130DN, AP9131DN, AP9132DN, AD9430DN-12 (with R240D), AD9430DN-24 (with R230D and R240D), AD9431DN-24X (with R230D and R240D), and AP4030TN	N	Y For AP4030TN, only the radio 0 supports this feature.	N	N
AP8030DN, AP8130DN, AP1050DN-S, and AP8130DN-W	N	N	N	N
AD9430DN-12 (with R250D), AD9430DN-24 (with R250D, R450D and R250D-E), AD9431DN-24X (with R250D, R450D and R250D-E), AP2050DN, AP2050DN-E, AP4050DN-E, AP4050DN-HD, AP4051TN , AP4050DN, AP4050DN-S, AP4051DN, AP4151DN, AP8050DN, AP8150DN, AP8050DN-S, AP6052DN, AP7052DN, AP7152DN, AP7052DE, AP8050TN-HD, AP8082DN, AP8182DN, AP6050DN, AP6150DN, AP7050DN-E, and AP7050DE	Y	N	N	Y
AP7030DE and AP9330DN	N	N	N	Y

Example

# Enable Beamforming.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] radio-2g-profile name default
[HUAWEI-wlan-radio-2g-prof-default] beamforming enable

Related Topics

capwap control-link-priority

Function

The capwap control-link-priority command configures the priority of CAPWAP management packets.

The undo capwap control-link-priority command restores the default priority of CAPWAP management packets.

By default, the priority of CAPWAP management packets is 7.

Format

capwap control-link-priority { local | remote } priority-value

undo capwap control-link-priority { local | remote }

Parameters

Parameter	Description	Value
local	Indicates the priority of CAPWAP management packets from an AC to an AP. The priority of CAPWAP management packets determines the reliability of the link between an AC and an AP.	-
remote	Indicates the priority of CAPWAP management packets from an AP to an AC. The priority of CAPWAP management packets determines the reliability of the link between an AP and an AC.	-
priority-value	Specifies the priority of CAPWAP management packets.	The value is an integer that ranges from 0 to 7. The value 0 indicates the lowest priority, and the value 7 indicates the highest priority.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

You can use the capwap control-link-priority command to configure the DSCP priority of CAPWAP management packets. A higher priority indicates a more reliable link between the AC and AP.

The configuration of the priority of CAPWAP management packets from an AC to an AP takes effect immediately. After the priority of CAPWAP management packets from an AP to an AC is changed, if the AP is online, the priority is sent to the AP in the Echo packet. If the AP is not online, the priority is delivered to the AP in the Echo packet when the AP goes online. The new priority takes effect once the AP receives it.

Precautions

Configure priority 4 to 7 for CAPWAP management packets from an AC to an AP, preventing the CAPWAP management tunnel from being interrupted due to large traffic.

Example

# Set the priority of CAPWAP management packets from an AC to an AP to 6.

<HUAWEI> system-view
[HUAWEI] capwap control-link-priority local 6

Related Topics

capwap dtls control-link encrypt

Function

The capwap dtls control-link encrypt command enables the function of encrypting the CAPWAP control tunnel using Datagram Transport Layer Security (DTLS).

The undo capwap dtls control-link encrypt command disables the function of encrypting the CAPWAP control tunnel using DTLS.

By default, the function of encrypting the CAPWAP control tunnel using DTLS is disabled.

Format

capwap dtls control-link encrypt

undo capwap dtls control-link encrypt

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

In the Discovery phase of the CAPWAP tunnel establishment between the AP and the AC, the AP obtains the AC IP address using the discovery mechanism. Then in the DTLS negotiation phase, the CAPWAP tunnel encrypts UDP packets using DTLS.

After this command is run, the CAPWAP control packets between the AP and AC are encrypted using DTLS, and the AP and AC use the PSK to perform DTLS negotiation. If the DTLS negotiation fails, the CAPWAP tunnel cannot be established.

Configuration Impact

After this command is run, the AP and AC reestablish a CAPWAP tunnel.

The HA function and DTLS encryption of an inter-AC tunnel cannot be enabled simultaneously on a device; otherwise, the AP waits until the original CAPWAP link is aged out before setting up a new one. During this process, AP services are interrupted. It is recommended that you disable DTLS encryption of an inter-AC tunnel on networks where HA is enabled.

Precautions

When HA is enabled or APs are being upgraded, the status of DTLS encryption cannot be changed.

Example

# Enable the function of encrypting the CAPWAP control tunnel using DTLS.

<HUAWEI> system-view
[HUAWEI] capwap dtls control-link encrypt
Warning: The DTLS PSK is the default one. It is recommended to change it to ensure security. Change it now?[Y/N]:y
New PSK:huawei@123
Configuring the new PSK, waiting......................done.
Warning: This operation may cause devices connected through CAPWAP to reset or go offline. Continue? [Y/N]:y

Related Topics

capwap dtls control-link encrypt

capwap dtls psk

Function

The capwap dtls psk command configures a pre-shared key used for DTLS encryption.

The undo capwap dtls psk command restores the default pre-shared key used for DTLS encryption.

By default, the pre-shared key used for DTLS encryption is huawei_seccwp.

Format

capwap dtls psk psk-value

undo capwap dtls psk

Parameters

Parameter	Description	Value
psk-value	Specifies the pre-shared key used for DTLS encryption.	The value is string of characters. The pre-shared key contains 48 or 68 characters in cipher text, for example, %^%#u(Oz:BL,QKYZw%-JWCP8aGC,="C&M'OIGmt.V(%^%#, or contains 6 to 32 characters in plain text, for example, a1234567. The password must contain at least two types of the following: uppercase letters, lowercase letters, digits, and special characters except the question mark (?) and space.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

During CAPWAP tunnel establishment, an AP establishes a DTLS session with an AC. If DTLS encryption has been enabled for CAPWAP control, sent management packets will be encrypted using DTLS. When a pre-shared key is used for DTLS encryption, you can use the capwap dtls psk command to change the pre-shared key.

NOTE:

It is recommended that you change the pre-shared key in a timely manner to ensure device security.

Follow-up Procedure

Run the capwap dtls control-link encrypt command to enable CAPWAP control tunnel encapsulation using DTLS.

Precautions

After the capwap dtls psk command configuration is complete, the new pre-shared key will be automatically synchronized to the online APs that are working properly, but the previous pre-shared key still takes effect. The new pre-shared key takes effect after these APs go online again.

Example

# Configure the pre-shared key for DTLS encryption as huawei123.

<HUAWEI> system-view
[HUAWEI] capwap dtls psk huawei123

Related Topics

capwap dtls psk-mandatory-match enable

capwap dtls psk-mandatory-match enable

Function

The capwap dtls psk-mandatory-match enable command enables an AP to establish a Datacom Transport Layer Security (DTLS) session with an AC using the default pre-shared key.

The undo capwap dtls psk-mandatory-match enable command disables an AP to establish a Datacom Transport Layer Security (DTLS) session with an AC using the default pre-shared key.

By default, an AP is disabled to establish a DTLS session with an AC using the default pre-shared key.

Format

capwap dtls psk-mandatory-match enable

undo capwap dtls psk-mandatory-match enable

Parameters

None.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

When a new AP is added to the WLAN or the passwords of the AP and AC are different (for example, the password of the AC is changed but the AP is not online), you can enable the AP to perform DTLS sessions with the AC using the default pre-shared key. After three DTLS session failures, the AP notifies the AC of DTLS sessions using the default pre-shared key. In this way, a CAPWAP tunnel is established between the AP and the AC.

Example

# Enable the AP to establish a DTLS session with the AC using the default pre-shared key.

<HUAWEI> system-view
[HUAWEI] capwap dtls psk-mandatory-match enable

Related Topics

capwap control-link-priority

capwap echo

Function

The capwap echo command sets the CAPWAP heartbeat detection interval and the number of CAPWAP heartbeat detections.

The undo capwap echo command restores the default CAPWAP heartbeat detection interval and the number of CAPWAP heartbeat detections.

By default, the CAPWAP heartbeat detection interval is 25s and the number of CAPWAP heartbeat detections is 6.

By default, If dual-link backup is enabled, the CAPWAP heartbeat detection interval is 25s and the number of CAPWAP heartbeat detections is 3.

Format

capwap echo { interval interval-value | times times-value } ^*

undo capwap echo { interval | times }

Parameters

Parameter	Description	Value
interval interval-value	Specifies the CAPWAP heartbeat detection interval, the interval at which two detection packets are sent.	The value is an integer ranging from 20 to 300, in seconds.
times times-value	Specifies the number of CAPWAP heartbeat detections. If no response is received after the specified number of times, the link is considered disconnected.	The value is an integer ranging from 3 to 120.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

As defined by CAPWAP, an AP and an AC send handshake packets periodically to maintain the data channel and management channel. If the AP does not receive packets from the AC within the heartbeat detection interval, it considers that the link between them is disconnected. Then the AP resets and releases its IP address, and reestablishes a link. If the AC does not receive packets from the AP within the heartbeat detection interval, it disconnects the link between the AC and the AP and reports an error message to the AP.

Precautions

If dual-link backup is enabled, the CAPWAP heartbeat detection interval is 25s and the number of CAPWAP heartbeat detections is 3. When the Wireless Distribution System (WDS) is required in dual-link backup configuration, the WDS link may be unstable and users may not access the network. You need to run this command to set the interval for CAPWAP heartbeat detection to 25 seconds and the number of CAPWAP heartbeat detections to 6.

After the CAPWAP heartbeat detection interval and the number of CAPWAP heartbeat detections are configured, the interval and the number of times for sending Echo packets are configured.

Radio traffic statistics packets are sent and received together with Echo packets.

If you set the CAPWAP heartbeat detection interval and the number of CAPWAP heartbeat detections smaller than the default values, the CAPWAP link reliability is degraded. Exercise caution when you set the values. The default values are recommended.

Example

# Set the CAPWAP heartbeat detection interval to 30s and the number of CAPWAP heartbeat detections to 3.

<HUAWEI> system-view
[HUAWEI] capwap echo interval 30 times 3

Related Topics

capwap message-integrity check disable

capwap echo-timeout trace logging

Function

The capwap echo-timeout trace logging command enables the Echo packet process trace and diagnosis log record functions upon AP Echo packet timeout.

The undo capwap echo-timeout trace logging command disables the Echo packet process trace and diagnosis log record functions upon AP Echo packet timeout.

By default, the Echo packet process trace and diagnosis log record functions are enabled upon AP Echo packet timeout.

Format

capwap echo-timeout trace logging

undo capwap echo-timeout trace logging

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

After you run the capwap echo-timeout trace logging command, the Echo packet process is traced and diagnosis logs are recorded upon AP Echo packet timeout.

Example

# Enable the Echo packet process trace and diagnosis log record functions upon AP Echo packet timeout.

<HUAWEI> system-view
[HUAWEI] capwap echo-timeout trace logging

capwap message-integrity psk

Function

The capwap message-integrity psk command configures a pre-shared key (PSK) for checking integrity of CAPWAP packets.

The undo capwap message-integrity psk command restores the default PSK for checking integrity of CAPWAP packets.

The default PSK for checking integrity of CAPWAP packets is huawei_seccwp.

Format

capwap message-integrity psk psk-value

undo capwap message-integrity psk

Parameters

Parameter	Description	Value
psk-value	Specifies the PSK for checking integrity of CAPWAP packets.	The value can be a string of 48 or 68 characters in cipher text (for example, *%^%#u(Oz:BL,QKYZw%-JWCP8aGC,="C&M'OIGmt.V(%^%#) or a string of 6 to 32 characters in plain text (for example, a1234567*). The key must contain at least two of the following: uppercase letters, lowercase letters, digits, and special characters except the question mark (?) and space.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

CAPWAP packets are transmitted between the AC and APs. To prevent the packets from being forged or tampered with and prevent malformed packet attacks, you can configure integrity check of of CAPWAP packets. When a PSK is used to check integrity of CAPWAP packets, you can run this command on the AC to configure a PSK.

NOTE:

It is recommended that you change the pre-shared key in a timely manner to ensure device security.

Follow-up Procedure

Run the undo capwap message-integrity check disable command to enable integrity check of CAPWAP packets.

Configuration Impact

After this configuration is complete, all online APs on the AC go offline.

Example

# Set the PSK for checking integrity of CAPWAP packets to z0020011@11.

<HUAWEI> system-view
[HUAWEI] capwap message-integrity psk z0020011@11
Warning: In a backup scenario, the PSK and status of CAPWAP message integrity check must be the same between the master and backup e
nds. This operation may cause devices using CAPWAP connections to reset or go offline. Continue? [Y/N]:y

Related Topics

capwap message-integrity psk

capwap message-integrity check disable

Function

The capwap message-integrity check disable command disables integrity check of CAPWAP packets.

The undo capwap message-integrity check disable command enables integrity check of CAPWAP packets.

By default, integrity check of CAPWAP packets is enabled.

Format

capwap message-integrity check disable

undo capwap message-integrity check disable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Configuration Impact

After this configuration is modified, all online APs on the AC go offline.

Example

# Enable integrity check of CAPWAP packets.

<HUAWEI> system-view
[HUAWEI] capwap message-integrity check disable
Warning: In a backup scenario, the PSK and status of CAPWAP message integrity check must be the same between the master and backup e
nds. This operation may cause devices using CAPWAP connections to reset or go offline. Continue? [Y/N]:y

Related Topics

capwap sensitive-info psk

Function

The capwap sensitive-info psk command modifies the pre-shared key (PSK) used for sensitive information encryption.

The undo capwap sensitive-info psk command restores the default PSK used for sensitive information encryption.

The default PSK used for sensitive information encryption is WLAN-KEYSTRING-AES256.

Format

capwap sensitive-info psk psk-value

undo capwap sensitive-info psk

Parameters

Parameter	Description	Value
psk-value	Specifies the PSK used for sensitive information encryption.	The value can be a string of 48 or 68 characters in cipher text (for example, *%^%#u(Oz:BL,QKYZw%-JWCP8aGC,="C&M'OIGmt.V(%^%#) or a string of 6 to 32 characters in plain text (for example, a1234567*). The key must contain at least two of the following: uppercase letters, lowercase letters, digits, and special characters except the question mark (?) and space.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Sensitive information transmitted between the AC and APs is encrypted, such as the FTP user name/password, AP login user name/password, and service configuration-related keys. You can use the capwap sensitive-info psk command to modify the PSK used for sensitive information encryption.

NOTE:

To ensure STA security, you are advised to modify the PSK value.

After the configuration is complete, all online APs will go offline from the AC and go online again.

Precautions

In hot backup (HSB) and dual-link cold backup scenarios, the PSKs configured on the active and standby ACs must be the same. Otherwise, APs cannot set up CAPWAP tunnels with the standby AC.

The pre-shared key for encrypting sensitive information cannot be modified when an AP is being upgraded on the

Example

# Modify the PSK for encrypting sensitive information to z0020011@11.

<HUAWEI> system-view
[HUAWEI] capwap sensitive-info psk z0020011@11
Warning: This operation may cause devices using CAPWAP connections to go offline. Continue? [Y/N]:y

Related Topics

capwap source interface

Function

The capwap source interface command configures the source interface that the AC uses to establish a CAPWAP tunnel with an access device.

The undo capwap source interface command restores the source interface that the AC uses to establish a CAPWAP tunnel with an access device to the default setting.

By default, no source interface is configured for the AC to establish a CAPWAP tunnel with the access device.

Format

capwap source interface { loopback loopback-number | vlanif vlan-id }

undo capwap source interface { loopback loopback-number | vlanif vlan-id }

Parameters

Parameter	Description	Value
loopback loopback-number	Configures a loopback interface as the source interface.	The value is an integer that ranges from 0 to 1023.
vlanif vlan-id	Configures a VLANIF interface as the source interface.	The value is an integer that ranges from 1 to 4094.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

An AC uses the IP address of the specified interface as the source IP address. All access devices connected to the AC can learn this IP address and use the IP address to communicate with the AC.

Prerequisites

An IP address has been assigned to the specified loopback or VLANIF interface.

Precautions

A maximum of eight AC source interfaces can be configured.

If the SVF function is enabled, only one source interface can be configured.

Configure multiple source interfaces. When the source interfaces are added to different VPN instances, the IP addresses of these interfaces cannot be the same.

When multiple CAPWAP source interfaces are configured, ensure that the management VLAN for APs is within the VLAN range mapping the source interfaces. Otherwise, APs cannot go online.

Changing configuration of the CAPWAP source interface will clear statistics of the CAPWAP packets in CPU attack defense.

Example

# Configure a loopback interface as the source interface.

<HUAWEI> system-view
[HUAWEI] interface loopback 20
[HUAWEI-LoopBack20] ip address 192.168.10.1 24
[HUAWEI-LoopBack20] quit
[HUAWEI] capwap source interface loopback 20

Related Topics

channel

Function

(AP group radio view) The channel command configures the working bandwidth and channel for all specified radios in an AP group.

(AP group radio view) The undo channel command restores the default working bandwidth and channel for all specified radios in an AP group.

(AP radio view) The channel command configures the working bandwidth and channel for an AP radio.

(AP radio view) The undo channel command cancels the configuration of the working bandwidth and channel on an AP radio. The working bandwidth and channel on the AP radio are then determined by those configured in the AP group radio view.

By default, the working bandwidth of a radio is 20 MHz, and no working channel is configured for a radio.

You can run the display ap config-info command to check the channel in use on a radio.

Format

channel { 20mhz | 40mhz-minus | 40mhz-plus | 80mhz | 160mhz } channel

channel 80+80mhz channel1 channel2

undo channel

Parameters

Parameter	Description	Value
20mhz	Sets the working bandwidth of a radio to 20 MHz.	-
40mhz-minus	Sets the working bandwidth of a radio to 40 MHz Minus.	-
40mhz-plus	Sets the working bandwidth of a radio to 40 MHz Plus.	-
80mhz	Sets the working bandwidth of a radio to 80 MHz.	-
160mhz	Sets the working bandwidth of a radio to 160 MHz.	-
80+80mhz	Sets the working bandwidth of a radio to 80+80 MHz.	-
channel/channel1/channel2	Specifies the working channel for a radio. The channel is selected based on the country code and radio mode.	The parameter is an enumeration value. The value range is determined according to the country code and radio mode.

Views

AP radio view, AP group radio view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

Different radios use different channels. Channels for radios also vary in different countries and regions. Select channels based on the actual situations.

Precautions

The configured channel parameters must match the radio frequency band. For details about mappings between channel parameters and frequency bands, see Country Codes & Channels Compliance. You can obtain this table at Huawei technical support website.

Enterprise technical support website: http://support.huawei.com/enterprise
Carrier technical support website: http://support.huawei.com

The channels you configure must be supported by the terminals; otherwise, the terminals cannot discover wireless signals. For example, when the country code is set to China, 5 GHz channels 36, 40, 44, 48, 52, 56, 60, and 64 can be configured. However, most terminals do not support these channels currently. If these channels are configured, the terminals cannot discover wireless signals. In this case, you can configure 5 GHz channels 149, 153, 157, 161, and 165, which are supported by the terminals.

If an AP detects radar signals on a channel, the channel cannot be configured as the radio channel of the AP in 30 minutes. However, the channel can be configured as the radio channel of other APs not detecting radar signals on it.

The configuration in the AP radio view has a higher priority than that in the AP group radio view.

If an AP works in dual-5G mode, the channels of the two 5G radios must be separated by at least one channel.

For example, a country supports 40 MHz 5G channels 36, 44, 52, and 60. When deploying 5G radio channels, if one radio is deployed on channel 36, it is recommended that the other radio be deployed on channel 52 or 60. Channel 44 is not recommended in this case.

NOTE:

The 80 MHz, 160 MHz, and 80+80 MHz working bandwidths are only supported in the 5G radio view.
Currently, only the 5 GHz radio of the AP6050DN, AP6150DN, AP7050DE, and 7050DN-E supports 160 MHz, and 80+80 MHz. Only the 5 GHz radio of the AD9430DN-24 (including the mapping RUs), AD9430DN-12 (including the mapping RUs), AD9431DN-24X (including the mapping RUs), AP7030DE, AP9330DN, AP2030DN, AP4051TN, AP6052DN, AP7052DN, AP7152DN, AP7052DE, AP8050TN-HD, AP8082DN, AP8182DN, AP3010DN-V2 (supporting 802.11ac after being upgraded from a version earlier than V200R008C10SPC300 to V200R008C10SPC300 or a later version), AP4030TN, AP4050DN-E, AP4050DN-HD, AP6050DN, AP6150DN, AP7050DN-E, AP7050DE, AP4050DN, AP4050DN-S, AP4051DN, AP4151DN, AP8050DN, AP8050DN-S, AP8150DN, AP1050DN-S, AP2050DN, AP2050DN-E, AP8130DN-W, AP5030DN, AP5130DN, AP8030DN, AP8130DN, AP4030DN, AP4130DN, AP9131DN, and AP9132DN supports 80 MHz.

Example

# Set the working bandwidth to 20 MHz and channel to 6 for radio 0 of AP 1.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap-id 1
[HUAWEI-wlan-ap-1] radio 0
[HUAWEI-wlan-radio-1/0] channel 20mhz 6

Related Topics

channel-load-mode indoor

Function

The channel-load-mode indoor command sets the AP channel mode to indoor mode.

The undo channel-load-mode indoor command restores the AP channel mode to outdoor mode.

The default channel mode of an AP is outdoor mode.

Format

channel-load-mode indoor

undo channel-load-mode indoor

Parameters

None

Views

Regulatory domain profile view

Default Level

2: Configuration level

Usage Guidelines

In scenarios where indoor and outdoor boundaries are unclear, such as subway and train platforms, it is recommended that outdoor APs be deployed. When a large volume of data is transmitted, outdoor APs in outdoor channel mode have no sufficient channels to meet data transmission requirements. In this case, you can run the channel-load-mode indoor command to set the channel mode of the APs to indoor mode, so that data can be transmitted on more channels.

Precautions

The AP is automatically reset after this command is executed, so exercise caution when using this command.

These commands are supported by only the AP8030DN, AP8130DN, AP8050DN, AP8050DN-S, AP8150DN, AP8130DN-W, AP8050TN-HD, AP8082DN, and AP8182DN.

Example

# Set the AP channel mode to indoor mode.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan] regulatory-domain-profile name default
[HUAWEI-wlan-regulate-domain-default] channel-load-mode indoor
Warning: Modifying the channel set mode may delete channels of AP radios in this
 domain and restart the AP. Continue?[Y/N]:y

channel-switch announcement disable

Function

The channel-switch announcement disable command disables an AP from sending an announcement when the channel is switched.

The undo channel-switch announcement disable command enables an AP to send an announcement when the channel is switched.

By default, an AP sends an announcement when the channel is switched.

Format

channel-switch announcement disable

undo channel-switch announcement disable

Parameters

None

Views

2G radio profile view, 5G radio profile view

Default Level

2: Configuration level

Usage Guidelines

When the AP works on a Depth First Select (DFS) channel, a radar detection is performed. The AP automatically switches to another channel because the DFS channel frequency may interfere with the radar frequency.

After the undo channel-switch announcement disable command is run, if the AP channel switches, the AP sends an Action frame to instruct STAs to switch channels after multiple Beacon intervals. The AP also switches the channel after the same intervals. The AP and STAs switch channels at the same time to prevent STA reassociations and ensure rapid service recovery.

NOTE:

The channel switching announcement function must be supported by both the AP and STA.

Example

# Disable the AP from sending an announcement after the channel is switched.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] radio-2g-profile name default
[HUAWEI-wlan-radio-2g-prof-default] channel-switch announcement disable

Related Topics

channel-switch mode

Function

The channel-switch mode command configures an announcement mode for channel switching.

The undo channel-switch mode command restores the default announcement mode for channel switching.

By default, data transmission from STAs continues on the current channel when the channel is switched.

Format

channel-switch mode { stop-transmitting | continue-transmitting }

undo channel-switch mode

Parameters

Parameter	Description	Value
stop-transmitting	Stops data transmission from STAs on the current channel during channel switching.	-
continue-transmitting	Continues data transmission from STAs on the current channel during channel switching.	-

Views

2G radio profile view, 5G radio profile view

Default Level

2: Configuration level

Usage Guidelines

During channel switching, STA communication is interrupted. The administrator can stop an associated STA sending data on the current channel until channel switching is complete. Alternatively, data transmission from STAs can be continued on the current channel before channel switching is complete.

Example

# Stop data transmission from STAs on the current channel during channel switching.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] radio-2g-profile name default
[HUAWEI-wlan-radio-2g-prof-default] channel-switch mode stop-transmitting

Related Topics

clear configuration this

Function

The clear configuration this command clears all configurations in the AP provisioning view.

Format

clear configuration this

Parameters

None

Views

AP provisioning view

Default Level

3: Management level

Usage Guidelines

Usage Scenario

To configure new AP provisioning parameters, run the clear configuration this command in the AP provisioning view to clear existing configurations.

Configuration Impact

Configurations in the AP provisioning view cannot be restored after they are cleared. Therefore, exercise caution when running the clear configuration this command.

Example

# Clear all configurations in the AP provisioning view.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] provision-ap
[HUAWEI-wlan-provision-ap] clear configuration this

Related Topics

commit (AP provisioning view)

Function

The commit command commits configuration to an AP, a group of APs or all the on-line APs.

Format

commit { ap-name ap-name | ap-mac ap-mac-address | ap-id ap-id | ap-group ap-group-name | all }

Parameters

Parameter	Description	Value
ap-name ap-name	Commits configuration to the AP with the specified AP name.	The AP name must already exist.
ap-mac ap-mac-address	Commits configuration to the AP with the specified MAC address.	The AP's MAC address must already exist.
ap-id ap-id	Commits configuration to the AP with the specified AP ID.	The AP ID must already exist.
ap-group ap-group-name	Commits configuration to the AP in the specified AP group.	The AP group must already exist.

Views

AP provisioning view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

You can configure AP provisioning parameters on the AC, such as the AP's management VLAN, static IP address, gateway, and AC list. After the configuration is complete, run the commit command, and the configuration will be delivered to the AP.

Prerequisites

APs have gone online on the AC.

Precautions

After the configuration is committed, the AP receives the configuration and compares the configuration with its local configuration.
- If they are consistent, the AP does not process the received configuration.
- If they are different, the AP saves the committed configuration and automatically restarts, and the received configuration takes effect.
If the name or static IP address of an AP is specified in the AP provisioning view, the configuration is delivered only to the AP by specifying the AP name or MAC address, but cannot be delivered to APs in the specified AP group.
If you commit configurations to a large number of APs simultaneously, some of the APs may fail to receive the configurations. In this case, you are advised to commit the configurations again.

Example

# Commit configuration to the AP with the MAC address 0023-0024-0080.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] provision-ap
[HUAWEI-wlan-provision-ap] commit ap-mac 0023-0024-0080
Warning: The incorrect configuration will cause the AP to go out of management. This operation will deliver parameter setting and ma
y cause reboot of AP(s). Continue?[Y/N]:y

Related Topics

console disable

Function

The console disable command disables a user from logging in to the AP through a console interface.

The undo console disable command enables a user from logging in to the AP through a console interface.

By default, a user can log in to the AP through a console interface.

Format

console disable

undo console disable

Parameters

None

Views

AP system profile view

Default Level

2: Configuration level

Usage Guidelines

When a user cannot telnet or stelnet to the AP, the user can log in to the AP through a console interface to manage and configure the AP.

After the console disable command is run, unauthorized users cannot log in to the AP through the console interface to perform operations.

Example

# Disable a user to log in to the AP through a console interface.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap-system-profile name ap-system1
[HUAWEI-wlan-ap-system-prof-ap-system1] console disable

Related Topics

display regulatory-domain-profile

coordinate

Function

The coordinate command sets the latitude and longitude of an AP.

The undo coordinate command restores the latitude and longitude of an AP to empty.

By default, no latitude or longitude is configured for an AP.

Format

coordinate longitude { e | w } longitude-value latitude { s | n } latitude-value

undo coordinate

Parameters

Parameter	Description	Value
longitude e longitude-value	Specifies the east longitude value of an AP.	The value supports two formats: degrees, minutes, and seconds (DMS) and decimal degrees (DD). The DMS format is XXX-XX-XX. XXX ranges from 0 to 180, and XX ranges from 0 to 59. The DD format is XXX.XXXXXXXXX. XXX ranges from 0 to 180, and XXXXXXXXX is a decimal supporting a maximum of 9 digits.
longitude w longitude-value	Specifies the west longitude value of an AP.	The value supports two formats: DMS and DD. The DMS format is XXX-XX-XX. XXX ranges from 0 to 180, and XX ranges from 0 to 59. The DD format is XXX.XXXXXXXXX. XXX ranges from 0 to 180, and XXXXXXXXX is a decimal supporting a maximum of 9 digits.
latitude s latitude-value	Specifies the south longitude value of an AP.	The value supports two formats: DMS and DD. The DMS format is XX-XX-XX. The first XX ranges from 0 to 90, and the other XXs range from 0 to 59. The DD format is XX.XXXXXXXXX. XX ranges from 0 to 90, and XXXXXXXXX is a decimal supporting a maximum of 9 digits.
latitude n latitude-value	Specifies the north longitude value of an AP.	The value supports two formats: DMS and DD. The DMS format is XX-XX-XX. The first XX ranges from 0 to 90, and the other XXs range from 0 to 59. The DD format is XX.XXXXXXXXX. XX ranges from 0 to 90, and XXXXXXXXX is a decimal supporting a maximum of 9 digits.

Views

AP view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

You can run this command to set the longitude and latitude of an AP for easily locating it.

Example

# Set the longitude and latitude of an AP to 114.3435°E and 14.3435°S, respectively.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] ap-id 0
[HUAWEI-wlan-ap-0] coordinate longitude e 114.3435 latitude s 14.3435

Related Topics

display ap coordinate

copy-from

Function

The copy-from command copies data to the current profile from a profile of the same type.

Format

copy-from profile-name

Parameters

Parameter	Description	Value
profile-name	Specifies the name of the profile from which data is copied.	The profile name must already exist.

Views

All WLAN profile views

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

You can run the copy-from command to copy data to the current profile from a profile of the same type. This simplifies profile configuration and improves configuration efficiency.

To create a profile that has the same configuration as an existing profile, enter the view of the profile to be created and run the copy-from command to copy data from the existing profile.
To create a profile that has most configurations the same as an existing profile, enter the view of the profile to be created, run the copy-from command to copy data from the existing profile, and modify the different configurations.

Precautions

If the current profile is referenced by another profile, you cannot run the command to copy data to the current profile.

Example

# Create the VAP profile huawei and copy data from the profile sample.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] vap-profile name huawei
[HUAWEI-wlan-vap-prof-huawei] copy-from sample

country-code

Function

The country-code command configures a country code.

The undo country-code command restores the default country code.

By default, the country code CN is configured.

Format

country-code country-code

undo country-code

Parameters

Parameter	Description	Value
country-code	Specifies a country code.	The value is a string of characters in enumerated type. For specific values, see Table 11-2.

Views

Regulatory domain profile view

Default Level

2: Configuration level

Usage Guidelines

Table 11-2 Country codes supported by ACs

Country Code	Country/Region
AE	United Arab Emirates
AM	Armenia
AR	Argentina
AT	Austria
AU	Australia
AZ	Azerbaijan
BE	Belgium
BG	Bulgaria
BH	Bahrain
BN	Brunei Darussalam
BO	Bolivia
BR	Brazil
BY	Belarus
BZ	Belize
CA	Canada
CH	Switzerland
CL	Chile
CN	China (default)
CO	Colombia
CR	Costa Rica
CY	Cyprus
CZ	Czech Republic
DE	Germany
DK	Denmark
DO	Dominican Republic
EC	Ecuador
EE	Estonia
EG	Egypt
ES	Spain
FI	Finland
FR	France
GB	United Kingdom
GE	Georgia
GR	Greece
GT	Guatemala
HK	Hong Kong, Special Administrative Region of China
HN	Honduras
HR	Croatia
HU	Hungary
ID	Indonesia
IE	Ireland
IL	Israel
IN	India
IQ	Iraq
IR	Iran
IS	Iceland
IT	Italy
JO	Jordan
JP	Japan
KP	Democratic People's Republic of Korea
KR	Republic of Korea
KW	Kuwait
KZ	Kazakhstan
LB	Lebanon
LI	Liechtenstein
LK	Sri Lanka
LT	Lithuania
LU	Luxembourg
LV	Latvia
MA	Morocco
MC	Monaco
MK	Macedonia
MO	Macau, Special Administrative Region of China
MT	Malta
MX	Mexico
MY	Malaysia
NG	Nigeria
NL	Netherlands
NO	Norway
NZ	New Zealand
OM	Oman
PA	Panama
PE	Peru
PH	Philippines
PK	Pakistan
PL	Poland
PR	Puerto Rico
PT	Portugal
QA	Qatar
RO	Romania
RS	SERBIA
RU	Russia
SA	Saudi Arabia
SE	Sweden
SG	Singapore
SI	Slovenia
SK	Slovakia
SV	El Salvador
SY	Syria
TH	Thailand
TN	Tunisia
TR	Turkey
TT	Trinidad & Tobago
TW	Taiwan, Province of China
UA	Ukraine
US	United States
UY	Uruguay
UZ	Uzbekistan
VE	Venezuela
VN	Vietnam
YE	Yemen
ZA	South Africa
ZW	Zimbabwe

Usage Scenario

When an AC controls APs in different countries or regions, different country codes can be configured based on the regulatory domain profile to meet different radio requirements in different countries or regions, such as power requirements and channel requirements.

Configuration Impact

Modifying the country code in a regulatory domain profile will restart APs using the profile.

Example

# Set the country code to US in the regulatory domain profile region1.

<HUAWEI> system-view                  
[HUAWEI] wlan                            
[HUAWEI-wlan-view] regulatory-domain-profile name region1           
[HUAWEI-wlan-regulate-domain-region1] country-code us        
Warning: Modifying the country code will clear channel, power and antenna gain configurations of the radio and reset the AP. Continu
e?[Y/N]:y

Related Topics

coverage distance

Function

(AP group radio view) The coverage distance command configures the radio coverage distance parameter for all specified radios in an AP group.

(AP group radio view) The undo coverage distance command restores the default radio coverage distance parameter for all specified radios in an AP group.

(AP radio view) The coverage distance command configures the radio coverage distance parameter for an AP radio.

(AP radio view) The undo coverage distance command cancels the configuration of the radio coverage distance parameter on an AP radio. The radio coverage distance parameter on the AP radio is then determined by that configured in the AP group radio view.

By default, the radio coverage distance parameter is 3 (unit: 100 m) for all radios.

Format

coverage distance distance

undo coverage distance

Parameters

Parameter

Description

Value

distance

Specifies the radio coverage distance parameter.

Each distance parameter corresponds to a group of slottime, acktimeout, and ctstimeout values. You can configure the distance parameter based on the AP distance. APs adjust the values of slottime, acktimeout, and ctstimeout values based on the distance parameter.

The value is an integer that ranges from 1 to 400, in 100 meters.

Views

AP radio view, AP group radio view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

In actual application scenarios, two APs may be connected over dozens of meters to dozens of kilometers. Due to different AP distances, the time to wait for ACK packets from the peer AP varies. A proper acktimeout value can improve data transmission efficiency between APs.

You can configure the radio coverage distance parameter based on distances between APs and the APs automatically adjust the values of slottime, acktimeout, and ctstimeout based on the configured distance parameter to improve data transmission efficiency.

Precautions

The configuration in the AP radio view has a higher priority than that in the AP group radio view.

Example

# Set the radio coverage distance parameter to 2 for radio 0 of AP 1.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap-id 1
[HUAWEI-wlan-ap-1] radio 0
[HUAWEI-wlan-radio-1/0] coverage distance 2

Related Topics

display port-link-profile

cpu-usage threshold

Function

The cpu-usage threshold command configures a CPU usage alarm threshold for APs.

The undo cpu-usage threshold command restores the default CPU usage alarm threshold.

By default, the CPU usage alarm threshold of APs is 90.

Format

cpu-usage threshold threshold

undo cpu-usage threshold

Parameters

Parameter	Description	Value
threshold	Specifies the CPU usage alarm threshold of APs.	The value is an integer that ranges from 50 to 100.

Views

AP system profile view

Default Level

2: Configuration level

Usage Guidelines

You can run the cpu-usage threshold command to configure the CPU usage alarm threshold in the AP system profile view. The configuration is delivered to all APs using the profile.

When the CPU usage of an AP exceeds the alarm threshold, the AP sends an alarm message to the AC, and the AC displays the alarm information.
When the CPU usage of an AP falls below the alarm threshold, the AP sends a clear alarm message to the AC, and the AC displays the clear alarm information.

Example

# Set the CPU usage alarm threshold to 60.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ap-system-profile name ap-system1
[HUAWEI-wlan-ap-system-prof-ap-system1] cpu-usage threshold 60

crc-alarm enable

Function

The crc-alarm enable command enables the alarm function for CRC errors on the AP wired interface and specifies the alarm threshold and clear alarm threshold.

The undo crc-alarm enable command disables the alarm function for CRC errors on the AP wired interface and restores the alarm threshold and clear alarm threshold to the default values.

By default, the alarm function for CRC errors is disabled on the AP wired interface. The alarm threshold for CRC errors is 50 and the clear alarm threshold is 20.

Format

crc-alarm enable [ high-threshold high-threshold-value | low-threshold low-threshold-value ]^*

undo crc-alarm enable

Parameters

Parameter

Description

Value

high-threshold high-threshold-value

Specifies the alarm threshold for CRC errors on the AP wired interface.

The value is an integer ranging from 1 to 100. The unit is 1/10000.

The value of high-threshold-value must be larger than the value of low-threshold-value.

low-threshold low-threshold-value

Specifies the clear alarm threshold for CRC errors on the AP wired interface.

The value is an integer ranging from 1 to 100.

Views

AP wired port link profile view

Default Level

2: Configuration level

Usage Guidelines

When the AP detects that the number of CRC errors exceeds the configured upper alarm threshold in a specified period (the time period can be configured using the sample-time command, and is 30s by default), it sends an alarm message to the AC. To prevent the AP from frequently sending alarm messages or alarm clearance messages to the AC, you need to configure the lower threshold for clearing the alarm. The AP sends an alarm clearance message to the AC only when the AP detects that the number of CRC errors is lower than the configured lower threshold.

Example

# Enable the alarm function for CRC errors on the AP's wired interface.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] port-link-profile name port-link1
[HUAWEI-wlan-port-link-prof-port-link1] crc-alarm enable

Related Topics

sample-time

dai enable (AP wired port profile view)

Function

The dai enable command enables dynamic ARP inspection (DAI) on an AP's wired interface.

The undo dai enable command disables DAI on an AP's wired interface.

By default, DAI is disabled on an AP's wired interface.

Format

dai enable

undo dai enable

Parameters

None

Views

AP wired port profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

You can enable DAI using this command to prevent Man in The Middle (MITM) attacks and theft on authorized user information. When a device receives an ARP packet, it compares the source IP address, source MAC address, interface number, and VLAN ID of the ARP packet with DHCP snooping binding entries. If the ARP packet matches a binding entry, the device allows the packet to pass through. If the ARP packet does not match any binding entry, the device discards the packet.

Prerequisites

Terminal address learning has been enabled on the AP's wired interface using the learn-client-address ipv4 enable command.

Follow-up Procedure

Bind the AP wired port profile to an AP group or AP.

Precautions

This command takes effect only on ARP packets transmitted on an AP's wired interface.

The AP wired interfaces added to an Eth-trunk interface do not support this function.

Example

# Enable DAI on an AP's wired interface.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] wired-port-profile name wire1
[HUAWEI-wlan-wired-port-wire1] dai enable

Related Topics

display wired-port-profile

deny-broadcast-probe enable

Function

The deny-broadcast-probe enable command configures an AP not to respond to broadcast Probe Request frames.

The undo deny-broadcast-probe enable command configures an AP to respond to broadcast Probe Request frames.

By default, an AP responds to broadcast Probe Request frames.

Format

deny-broadcast-probe enable

undo deny-broadcast-probe enable

Parameters

None

Views

SSID profile view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

In high-density wireless scenarios, too many Probe Response frames occupy a large number of wireless resources. To reduce wireless resource occupation of the frames and improve channel usage efficiency, you can run the deny-broadcast-probe enable command to configure an AP not to respond to broadcast Probe Request frames.

Precautions

Configuring an AP not to respond to broadcast Probe Request frames may reduce channel scan efficiency of some STAs.

Example

# Configure an AP not to respond to broadcast Probe Request frames.

<HUAWEI> system-view
[HUAWEI] wlan 
[HUAWEI-wlan-view] ssid-profile name ssid1
[HUAWEI-wlan-ssid-prof-ssid1] deny-broadcast-probe enable

Related Topics