No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Enterprise
Worldwide
Huawei Global - English
Search
Support Documentation
Wireless Access Controller (AC and Fit AP) V200R008C10 CLI-based Configuration Guide
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring WDS

Configuring WDS

Pre-configuration Tasks

Before configuring WDS, complete the following tasks:

Procedure

Perform the following steps in the listed order.

Adding an AP

Context

You can add APs in any of the following modes:

  • Importing APs offline: The APs' MAC addresses and serial numbers (SNs) are configured on an AC before APs go online. The AC starts to set up connections with the APs if the MAC addresses or SNs of the APs match the configured ones.

  • Configuring the AC to automatically discover an AP: The AP authentication mode is set to no authentication; alternatively, the AP authentication mode is set to MAC or SN authentication and the AP whitelist is configured on the AC. When an AP in the whitelist connects to the AC, the AC discovers the AP, and the AP goes online.

  • Manually confirming APs added to the list of unauthorized APs: The AP authentication mode is set to MAC or SN authentication, and the AP whitelist is configured on the AC. When an AP out of the whitelist connects to the AC, the AC adds the AP to the list of unauthorized APs. After the AP identity is confirmed, the AP can go online.

Depending on its location on a WDS network, an AP can work in root, middle, or leaf mode. As shown in Figure 13-10, AP1 is a root node, AP2 is a middle node, and AP3 is a leaf node. You can configure an AP's working mode based on actual situations.

Figure 13-10  WDS networking

Procedure

  • Add an AP offline.
    1. Run the system-view command to enter the system view.
    2. Run the wlan command to enter the WLAN view.
    3. (Optional) Run the ap blacklist mac ap-mac1 [ to ap-mac2 ] command to add the AP to an AP blacklist.

      By default, no AP is in an AP blacklist.

    4. Run the ap auth-mode { mac-auth | sn-auth } command to set the AP authentication mode to MAC address authentication or SN authentication.

      The default AP authentication mode is MAC address authentication.

    5. Run the ap-id ap-id [ [ type-id type-id | ap-type ap-type ] { ap-mac ap-mac | ap-sn ap-sn | ap-mac ap-mac ap-sn ap-sn } ] or ap-mac ap-mac [ type-id type-id | ap-type ap-type ] [ ap-id ap-id ] [ ap-sn ap-sn ] command to import the AP offline and enter the AP view.
    6. Run the ap-name ap-name command to configure the AP name.

      By default, no AP name is configured for an AP.

    7. Run the ap-group group-name command to add the AP to an AP group.

      By default, no AP group is configured.

  • Configure the AC to automatically discover an AP.

    If no AP name or AP group is configured for an automatically discovered AP on the AC, the configuration file of the AP name or AP group will not be generated in the AP view.

    If an AP is deleted from the AC, the configuration in the AP view will be automatically deleted.

    • Set the AP authentication mode to no authentication.

      1. Run the system-view command to enter the system view.
      2. Run the wlan command to enter the WLAN view.

      3. (Optional) Run the ap blacklist mac ap-mac1 [ to ap-mac2 ] command to add the AP to an AP blacklist.

        By default, no AP is in an AP blacklist.

      4. Run the ap auth-mode no-auth command to set the AP authentication mode to no authentication.

        The default AP authentication mode is MAC address authentication.

        The non-authentication mode brings security risks. You are advised to set the authentication mode to MAC address authentication or SN authentication, which is more secure.

    • Set the AP authentication mode to MAC address or SN authentication.

      1. Run the system-view command to enter the system view.
      2. Run the wlan command to enter the WLAN view.

      3. (Optional) Run the ap blacklist mac ap-mac1 [ to ap-mac2 ] command to add the AP to an AP blacklist.

        By default, no AP is in an AP blacklist.

      4. Run the ap auth-mode { mac-auth | sn-auth } command to set the AP authentication mode to MAC address authentication or SN authentication.

        The default AP authentication mode is MAC address authentication.

      5. Configure the AP whitelist.

        • Run the ap whitelist mac ap-mac1 [ to ap-mac2 ] command to add the AP with the specified MAC address to the whitelist if the AP authentication mode is set to MAC address authentication.

          By default, no MAC address is added to the AP whitelist.

        • Run the ap whitelist sn ap-sn1 [ to ap-sn2 ] command to add the AP with the specified SN to the whitelist if the AP authentication mode is set to SN authentication.

          By default, no SN is added to the AP whitelist.

  • Manually confirm the AP added to the list of unauthorized APs.
    1. Run the system-view command to enter the system view.
    2. Run the wlan command to enter the WLAN view.
    3. (Optional) Run the ap blacklist mac ap-mac1 [ to ap-mac2 ] command to add the AP to an AP blacklist.

      By default, no AP is in an AP blacklist.

    4. Run the ap auth-mode { mac-auth | sn-auth } command to set the AP authentication mode to MAC address authentication or SN authentication.

      The default AP authentication mode is MAC address authentication.

    5. Run the display ap unauthorized record command to check information about unauthorized APs.
    6. Run the ap-confirm { all | mac ap-mac | sn ap-sn } command to confirm the unauthorized APs. After confirmation, the APs work in normal state.

(Optional) Enabling the Backhaul Function on the 4.9 GHz Frequency Band

Context

Before using the 4.9 GHz frequency band, ensure that you have obtained the 4.9 GHz license from the local administrative department and use the band properly.

Only the AP8130DN-W and AP8150DN support the 4.9 GHz frequency band.

The 4.9 GHz frequency band is applicable to outdoor backhaul scenarios but not wireless coverage services. It is mainly used by WDS and Mesh backhaul links. The 4.9 GHz frequency band is out of the channel range reselected using DFS.

The AP8130DN-W is sold only in regions outside China.
The following table lists channels and frequency distribution of the 4.9 GHz frequency band.
Channel No. Parameters Description
184 Frequency Band 4.9G
Center Frequency (MHz) 4920
Upper Frequency (MHz) 4910
Lower Frequency (MHz) 4930
188 Frequency Band 4.9G
Center Frequency (MHz) 4940
Upper Frequency (MHz) 4930
Lower Frequency (MHz) 4950
192 Frequency Band 4.9G
Center Frequency (MHz) 4960
Upper Frequency (MHz) 4950
Lower Frequency (MHz) 4970
196 Frequency Band 4.9G
Center Frequency (MHz) 4980
Upper Frequency (MHz) 4970
Lower Frequency (MHz) 4990

The 4.9 GHz frequency band supports channel bandwidths of 20 MHz and 40 MHz. Channels 184+188 or 192+196 can be bundled into a 40 MHz channel. Similar to the 5 GHz frequency band, the 4.9 GHz frequency band complies with 802.11a/n/ac.

Procedure

  1. Run: 

    system-view

    The system view is displayed.

  2. Run: 

    wlan

    The WLAN view is displayed.

  3. Run: 

    regulatory-domain-profile name profile-name

    The regulatory domain profile is displayed.

    By default, the system provides the regulatory domain profile default.

  4. Run: 

    wideband enable

    The wideband function, that is, the 4.9 GHz frequency band, of the regulatory domain profile is enabled.

    By default, the wideband function of the regulatory domain profile is disabled.

    After the wideband function of the regulatory domain profile is enabled, APs bound to this profile are automatically reset.

    Only after the wideband function of the regulatory domain profile is enabled, you can configure channels and bandwidth of the 4.9 GHz frequency band.

  5. Run: 

    quit

    Return to the WLAN view.

  6. Bind the regulatory domain profile to an AP group or AP.

    • Binding the regulatory domain profile to an AP group

      1. Run the ap-group name group-name command to enter the AP group view.

      2. Run the regulatory-domain-profile profile-name command to bind the regulatory domain profile to the AP group.

        By default, the regulatory domain profile default is bound to an AP group.

    • Binding the regulatory domain profile to an AP
      1. Run the ap-id ap-id, ap-mac ap-mac, or ap-name ap-name command to enter the AP view.

      2. Run the regulatory-domain-profile profile-name command to bind the regulatory domain profile to the AP.

        By default, no regulatory domain profile is bound to an AP.

Verifying the Configuration

  • Run the display regulatory-domain-profile { all | name profile-name } command to check the status of the wideband function in the regulatory domain profile.
  • Run the display references regulatory-domain-profile name profile-name command to check reference information about the regulatory domain profile.

Configuring WDS Radio Parameters

Context

To ensure that WDS links can be set up successfully on a WDS network, you need to configure radio parameters for WDS links according to actual service requirements.

  • On a WDS network, radios of APs must work on the same channel.

  • You need to configure the radio coverage distance parameter based on distances between APs. The APs automatically adjust the values of slottime, acktimeout, and ctstimeout based on the configured distance parameter to set up WDS links correctly.

Procedure

  1. Run: 

    system-view

    The system view is displayed.

  2. Run: 

    wlan

    The WLAN view is displayed.

  3. Enter the radio view.

    • Enter the AP group radio view.
      1. Run the ap-group name group-name command to enter the AP group view.
      2. Run the radio radio-id command to enter the radio view.
    • Enter the AP radio view.
      1. Run the ap-id ap-id, ap-mac ap-mac, or ap-name ap-name command to enter the AP view.
      2. Run the radio radio-id command to enter the radio view.

  4. Run: 

    channel { 20mhz | 40mhz-minus | 40mhz-plus | 80mhz | 160mhz } channel or channel 80+80mhz channel1 channel2.

    The working bandwidth and channel are configured for the radio.

    By default, the working bandwidth of a radio is 20 MHz, and no working channel is configured for a radio.

    On a WDS network, radios of APs must work on the same channel.

    The 80 MHz, 160 MHz, and 80+80 MHz working bandwidths are only supported in the 5G radio view.

    Currently, only the 5 GHz radio of the AP6050DN, AP6150DN, AP7050DE and AP7050DN-E supports 160 MHz and 80+80 MHz. Only the 5 GHz radio of the AD9430DN-24 (including the mapping RUs), AD9430DN-12 (including the mapping RUs), AD9431DN-24X (including the mapping RUs), AP7030DE, AP9330DN, AP2030DN, AP4030TN, AP4050DN-E, AP4050DN-HD, AP6050DN, AP6150DN, AP7050DN-E, AP7050DE, AP2050DN, AP2050DN-E, AP4050DN, AP4050DN-S, AP4051DN, AP4151DN, AP8050DN, AP8050DN-S, AP8150DN, AP1050DN-S, AP8130DN-W, AP4051TN, AP6052DN, AP7052DN, AP7152DN, AP7052DE, AP8050TN-HD, AP8082DN, AP8182DN, AP3010DN-V2 (supporting 802.11ac after being upgraded from a version earlier than V200R008C10SPC300 to V200R008C10SPC300 or a later version), AP5030DN, AP5130DN, AP8030DN, AP8130DN, AP4030DN, AP4130DN, AP9131DN, and AP9132DN supports 80 MHz.

    The AD9431DN-24X (including the mapping RUs), AD9430DN-24 (including the mapping RUs), AD9430DN-12 (including the mapping RUs), AP2010DN, AP2030DN, AP2050DN, AP2050DN-E, AP7030DE, AP9330DN, and AP6310SN-GN do not support the WDS function.

    Working channels of radios vary according to countries and regions. To conform to local laws and regulations, you need to configure different working channels under different country codes. You can run the display ap configurable channel { ap-name ap-name | ap-id ap-id } [ radio-id radio-id ] command to check the channels supported by the specified AP.

    To use the 4.9 GHz frequency band to configure backhaul links, see Usage Guide of wideband enable for channels and bandwidth of the 4.9 GHz frequency band. Only radios working on the 5 GHz frequency band can use the 4.9 GHz frequency band. For example, radio 1 of the AP8130DN-W can use the 4.9 GHz frequency band. Radio 0 of the AP8130DN-W can also use the 4.9 GHz frequency band after it is configured to work on the 5 GHz frequency band using the frequency 5g command.

  5. Run: 

    coverage distance distance

    The radio coverage distance parameter is specified.

    By default, the radio coverage distance parameter is 3 (unit: 100 m) for all radios.

    You can configure the radio coverage distance parameter based on distances between APs and the APs automatically adjust the values of slottime, acktimeout, and ctstimeout based on the configured distance parameter to improve data transmission efficiency.

  6. Run: 

    antenna-gain antenna-gain

    The antenna gain is configured for the radio.

    By default, no antenna gain is configured for AP radios.

    The antenna gain is the ratio of the power density produced by an antenna to the power density that should be obtained at the same point if the power accepted by the antenna were radiated equally. It can measure the capability for an antenna to receive and send signals in a specified direction, which is one of the most important parameters to select a BTS antenna. In the same condition, if the antenna gain is high, the wave travels far.

    The antenna gain of an AP radio configured using the command must be consistent with the gain of the antenna connected to the AP.

    The maximum antenna gain should comply with laws and regulations of the corresponding country. For details, see the Country Code & Channel Compliance Table. You can obtain this table at Huawei technical support website.

  7. Run: 

    eirp eirp

    The transmit power is configured for the radio.

    By default, the transmit power of a radio is 127 dBm. The transmit power that takes effect on APs is related to the AP type, country code, channel, and channel bandwidth. It is the maximum transmit power that the AP radio supports under the current configuration. Run the display radio { ap-name ap-name | ap-id ap-id } command to check the maximum value.

    You can configure the transmit power for a radio based on actual network environments, enabling radios to provide the required signal strength and improving signal quality on WLANs.

  8. Run: 

    frequency 5g

    Radio 0 is configured to work on the 5 GHz frequency band.

    By default, radio 0 works on the 2.4 GHz frequency band, and radio 2 works on the 5 GHz frequency band.

    Among all WDS-capable APs, radio 0 of the AP8130DN and AP8130DN-W supports both 2.4G and 5G frequency bands but can only work on one frequency band at a time. After radio 0 of the AP8130DN and AP8130DN-W is configured to work on the 5G frequency band, the AP8130DN and AP8130DN-W can work on dual 5G radios.

  9. Run: 

    quit

    Return to the AP group view or AP view.

  10. Run: 

    quit

    Return to the WLAN view.

  11. Run: 

    radio-2g-profile name profile-name or radio-5g-profile name profile-name

    The 2G or 5G radio profile view is displayed.

  12. Run: 

    wifi-light signal-strength

    The blinking frequency of the Wireless indicator on the AP is configured to reflect the signal strength.

    By default,
    • If the Mesh function is enabled on the AP, the blinking frequency of the Wireless LED reflects the weakest signal strength of all neighboring APs.
    • If WDS is enabled on an AP, the blinking frequency of the Wireless LED reflects the strength of signals received from a WDS AP.
      • If the AP works in leaf mode, the blinking frequency of the Wireless LED reflects the strength of signals received from a middle AP.
      • If the AP works in middle mode, the blinking frequency of the Wireless LED reflects the strength of signals received from a root AP.
      • If the AP works in root mode, the blinking frequency of the Wireless LED reflects the weakest signal strength of middle APs.
    • If the WDS and Mesh functions are disabled on an AP, the blinking frequency of the Wireless LED reflects the service traffic volume on the radio.

    During installation and commissioning of an AP that has the WDS or Mesh function enabled, you need to adjust AP locations and antenna directions to obtain strong signals. If the blinking frequency of the Wireless LED shows the signal strength, onsite installation personnel can know the signal strength in real time. The wifi-light command allows you to specify the parameter reflected by the blinking frequency of the Wireless LED. For example, you can specify the parameter to signal strength during installation and service traffic volume after installation.

    This command takes effect only when the AP has the WDS or Mesh function enabled. If the WDS and Mesh functions are disabled on the AP, the Wireless LED always shows service traffic volume.

  13. (Optional) Configure the frame aggregation function and length of the aggregated frames.

    The frame aggregation function can improve the channel resource usage efficiency and overall WDS network performance.
    • Configure the frame aggregation function for the 802.11n protocol.

      1. Run the undo ht a-mpdu disable command to enable the frame aggregation function for the 802.11n protocol.

        By default, aggregation of MPDUs is enabled.

      2. Run the ht a-mpdu max-length-exponent max-length-exponent-index command to set the length of aggregated frames for the 802.11n protocol.

        By default, the index for the maximum length of an A-MPDU is 3. The maximum length of the A-MPDU is 65535 bytes.

    • Configure the frame aggregation function for the 802.11ac protocol.

      Run the vht a-mpdu max-length-exponent max-length-exponent-index command to set the length of aggregated frames for the 802.11ac protocol.

      By default, the index for the maximum length of an A-MPDU is 7. The maximum length of the A-MPDU is 1048575 bytes.

      The length of an A-MPDU can only be configured in a 5G radio profile.

      All frames on radios working in 802.11ac mode are A-MPDUs. Therefore, you do not need to enable the frame aggregation function for the 802.11ac protocol.

  14. (Optional) Run: 

    beamforming enable

    The beamforming function is enabled.

    By default, Beamforming is disabled.

    Beamforming can enhance signals at a particular angle (for target users), attenuate signals at another angle (for non-target users or obstacles), and extend the radio coverage area.

    If nodes on the WDS or Mesh network are fixed and distant from each other, enable beamforming to increase WDS or Mesh link SNR. Mobile nodes may cause low link SNR in WDS or Mesh scenarios. To prevent this problem, disable beamforming.

    For details on how to configure other radio parameters, see (Optional) Adjusting Radio Parameters of basic WLAN service configuration.

Follow-up Procedure

In the AP group view or AP view, run the radio-2g-profile profile-name { radio { radio-id | all } } or radio-5g-profile profile-name { radio { id | all } } command to bind the 2.4G or 5G radio profile to the AP radio. Alternatively, you can run the radio-2g-profile profile-name or radio-5g-profile profile-name command in the AP group radio view or AP radio view to bind the 2.4G or 5G radio profile to the AP radio.

Configuring Parameters for an AP's Wired Interface

Context

You can configure the wired interface on a root AP to connect to the AC or configure the wired interface on an AP to deploy a Layer 2 network or directly associate with STAs.

On WDS networks, an AP wired interface can work in the following modes:

  • root mode: The wired interface that connects the root AP to the AC must work in root mode.
  • endpoint mode: When the wired interface of an AP works in endpoint mode, the AP's wired interface can directly connect to a STA or be used to deploy Layer 2 networks.

Procedure

  1. Run: 

    system-view

    The system view is displayed.

  2. Run: 

    wlan

    The WLAN view is displayed.

  3. Run: 

    wired-port-profile name profile-name

    An AP wired port profile is created and the AP wired port profile view is displayed.

    By default, the system provides the AP wired port profile default.

  4. Set parameters for an AP wired interface.

    • Configure a wired interface to work in root mode.

      1. Run the mode root command to configure an AP's wired interface to work in root mode.

        By default,
        • On a common AP: Its GE interfaces work in root mode, Ethernet interfaces in endpoint mode, and Eth-Trunk interfaces in root mode.
        • On a central AP: Its uplink GE interfaces in root mode and downlink GE interfaces work in middle mode.
        • On an R230D: Its Ethernet interface works in root mode.
        • On an R240D: Its Ethernet interface works in endpoint mode and GE interface in root mode.
        • On an R250D, R250D-E, AP2050DN, and AP2050DN-E: Their uplink GE interfaces work in root mode and downlink GE interfaces in endpoint mode.
        • On an R450D: Its GE interface works in root mode.
    • Configure a wired interface to work in endpoint mode.

      1. Run the mode endpoint command to configure an AP's wired interface to work in endpoint mode.

        By default,
        • On a common AP: Its GE interfaces work in root mode, Ethernet interfaces in endpoint mode, and Eth-Trunk interfaces in root mode.
        • On a central AP: Its uplink GE interfaces in root mode and downlink GE interfaces work in middle mode.
        • On an R230D: Its Ethernet interface works in root mode.
        • On an R240D: Its Ethernet interface works in endpoint mode and GE interface in root mode.
        • On an R250D, R250D-E, AP2050DN, and AP2050DN-E: Their uplink GE interfaces work in root mode and downlink GE interfaces in endpoint mode.
        • On an R450D: Its GE interface works in root mode.

      2. Run the vlan pvid vlan-id command to configure the PVID of an AP's wired interface.

        By default, no PVID is configured for an AP wired interface.

      3. Run the vlan { tagged | untagged } { vlan-id1 [ to vlan-id2 ] } &<1-10> command to add an AP's wired interface to VLANs.

        By default, an AP wired interface allows packets from all VLANs to pass. The wired interface is added to VLAN 1 in untagged mode and to other VLANs in tagged mode.

        An AP wired interface can be added to a maximum of 256 VLANs.

      4. Run the user-isolate { all | l2 } command to enable user isolation on an AP's wired interface.

        By default, user isolation is disabled on an AP's wired interface.

Follow-up Procedure

Run the wired-port-profile profile-name interface-type interface-number command in the AP group view or AP view to bind the specified AP wired port profile to the AP's wired interface.

Configuring a Security Profile

Context

You need to configure a security profile and a security policy for the WDS to ensure security. The WPA2+PSK+AES security policy is recommended for a WDS security profile. For details about WPA2, PSK, and AES, see WLAN Security Configuration Guide.

By default, the system provides the WDS profile default. By default, the security profile default-wds with the security policy WPA2+PSK+AES is referenced by a WDS profile regardless of whether the WDS profile is the default profile provided by the system or a WDS profile created by users. If the default security profile default-wds is used, you are advised to change the security key of the profile to ensure security. The default username and password are available in WLAN Default Usernames and Passwords (Enterprise Network or Carrier). If you have not obtained the access permission of the document, see Help on the website to find out how to obtain it.

Procedure

  1. Run: 

    system-view

    The system view is displayed.

  2. Run: 

    wlan

    The WLAN view is displayed.

  3. Run: 

    security-profile name profile-name

    A security profile is created, and the security profile view is displayed.

    By default, security profiles default, default-wds, and default-mesh are available in the system.

  4. Run: 

    security wpa2 psk { pass-phrase | hex } key-value aes

    A security policy is configured for the security profile.

(Optional) Configuring a WDS Whitelist

Context

A WDS whitelist profile contains MAC addresses of neighboring APs allowed to set up WDS links with an AP. After a WDS whitelist profile is applied to an AP radio, only APs with MAC addresses in the whitelist can access the AP, and other APs are denied. In the WDS, only APs with radios working in root mode and middle mode can have a whitelist configured. APs in leaf mode require no whitelist.

  • WDS links can be set up only when neighboring APs with MAC addresses in the whitelist succeed in authentication.
  • If the AP uses no whitelist, all the neighboring APs can connect to the bridge.

Procedure

  1. Run: 

    system-view

    The system view is displayed.

  2. Run: 

    wlan

    The WLAN view is displayed.

  3. Run: 

    wds-whitelist-profile name whitelist-name

    A WDS whitelist profile is created, and the WDS whitelist profile view is displayed.

    By default, no WDS whitelist profile is available in the system.

  4. Run: 

    peer-ap mac mac-address

    MAC addresses of neighboring APs that are allowed to connect to an AP are added to the WDS whitelist profile.

    By default, no MAC address of a neighboring AP is added to a WDS whitelist profile.

  5. Run: 

    quit

    Return to the WLAN view.

  6. Enter the radio view.

    • Enter the AP group radio view.
      1. Run the ap-group name group-name command to enter the AP group view.
      2. Run the radio radio-id command to enter the radio view.
    • Enter the AP radio view.
      1. Run the ap-id ap-id, ap-mac ap-mac, or ap-name ap-name command to enter the AP view.
      2. Run the radio radio-id command to enter the radio view.

  7. Run: 

    wds-whitelist-profile whitelist-name

    The Mesh whitelist profile is bound to the AP radio.

    By default, no WDS whitelist profile is bound to an AP radio.

Configuring a WDS Profile

Context

A WDS profile contains major parameters required for configuring the WDS function. To enable radios of an AP group or a specified AP to set up Mesh links, a WDS profile must be applied to the radios.

Procedure

  1. Run: 

    system-view

    The system view is displayed.

  2. Run: 

    wlan

    The WLAN view is displayed.

  3. Run: 

    wds-profile name profile-name

    A WDS profile is created and the WDS profile view is displayed.

    By default, the system provides the WDS profile default.

  4. Run: 

    wds-name name

    A WDS name is set for the WDS profile. WDS nodes use a WDS name to identify connections between them.

    By default, the WDS name of a WDS profile is HUAWEI-WLAN-WDS.

  5. Run: 

    wds-mode { root | middle | leaf }

    The WDS mode is configured in the WDS profile.

    By default, the WDS mode in a WDS profile is leaf.

  6. Run: 

    security-profile profile-name

    A security profile is bound to the WDS profile.

    By default, the security profile default-wds is bound to a WDS profile.

    By default, the system provides the WDS profile default. By default, the security profile default-wds with the security policy WPA2+PSK+AES is referenced by a WDS profile regardless of whether the WDS profile is the default profile provided by the system or a WDS profile created by users. If the default security profile default-wds is used, you are advised to change the security key of the profile to ensure security. The default username and password are available in WLAN Default Usernames and Passwords (Enterprise Network or Carrier). If you have not obtained the access permission of the document, see Help on the website to find out how to obtain it.

  7. Run: 

    vlan tagged { vlan-id1 [ to vlan-id2 ] } &<1-10>

    A VLAN or a group of VLANs are added to the WDS profile in tagged mode.

    By default, no VLAN is configured in a WDS profile.

    When configuring WDS, perform this step to configure service VLANs in the WDS profile so that packets from the service VLANs can be transmitted over WDS links.

    A maximum of 256 VLANs can be added to a WDS profile.

  8. (Optional) Improve channel usage efficiency.

    1. Run the beacon-2g-rate beacon-2g-rate command to set the transmit rate of 2.4 GHz Beacon frames.

      By default, the transmit rate of 2.4 GHz Beacon frames is 1 Mbit/s.

    2. Run the beacon-5g-rate beacon-5g-rate command to set the transmit rate of 5 GHz Beacon frames.

      By default, the transmit rate of 5 GHz Beacon frames is 6 Mbit/s.

  9. (Optional) Run: 

    undo mu-mimo disable

    MU-MIMO is enabled.

    By default, the MU-MIMO function is enabled.

    APs support MU-MIMO starting from 802.11ac Wave 2. If WDS VAPs need to support MU-MIMO, a WDS profile must be bound to 5 GHz radios of the AP.

    In WDS scenarios, ensure that the number of spatial streams on STA VAPs is smaller than that on AP VAPs. Otherwise, MU-MIMO cannot take effect. For example, if STA VAPs and AP VAPs are both configured with three spatial streams, an AP VAP can communicate with only one STA VAP even if MU-MIMO has been enabled.

  10. (Optional) Run: 

    dhcp trust port

    A DHCP trusted port is configured in the WDS profile.

    By default, no DHCP trusted port is configured in a WDS profile.

    After a DHCP trusted port is enabled in a WDS profile and the WDS profile is applied to an AP, the AP receives the DHCP OFFER, ACK, and NAK packets sent by authorized DHCP servers and forwards the packets to STAs so that the STAs can obtain valid IP addresses and go online.

  11. (Optional) Run: 

    nd trust port

    An ND trusted port is configured in the WDS profile.

    By default, an ND trusted port is enabled in a WDS profile.

    After an ND trusted port is enabled in a WDS profile and the WDS profile is applied to an AP, the AP receives valid ND protocol packets and forwards the packets to STAs or peer APs so that the STAs can obtain valid IPv6 addresses and go online.

  12. (Optional) Run: 

    priority-map trust { dot1p | dscp }

    The priority mapping trusted by the WDS air interface is configured.

    By default, the WDS air interface trusts the mapping from DSCP priorities to 802.11e user priorities.

  13. (Optional) Run: 

    priority-map dscp { dscp-value1 [ to dscp-value2 ] } &<1-10> dot11e dot11e-value

    The WDS air interface to configured to trust the mapping from DSCP priorities to 802.11e user priorities.

    Table 13-2 describes the mapping from DSCP priorities to 802.11e user priorities by default.
    Table 13-2  Mapping from DSCP priorities to 802.11e user priorities

    DSCP Priority

    802.11e User Priority

    0-7

    0

    8-15

    1

    16-23

    2

    24-31

    3

    32-39

    4

    40-47

    5

    48-55

    6

    56-63

    7

  14. Run: 

    quit

    Return to the WLAN view.

  15. Apply the WDS profile. You can use any of the following methods according to actual situations:

    • Bind the WDS profile to an AP group.

      1. Run the ap-group name group-name command to enter the AP group view.

      2. Run the wds-profile profile-name radio { all | radio-id } command to bind the WDS profile to the AP group.

        By default, no WDS profile is bound to an AP group or AP.

        A WDS link uses the VAPs with the WLAN ID 13 and ID 14, which cannot be occupied by other WLAN services.

    • Bind the WDS profile to an AP.

      1. Run the ap-id ap-id, ap-mac ap-mac, or ap-name ap-name command to enter the AP view.

      2. Run the wds-profile profile-name radio { all | radio-id } command to bind the WDS profile to the AP.

        By default, no WDS profile is bound to an AP group or AP.

        A WDS link uses the VAPs with the WLAN ID 13 and ID 14, which cannot be occupied by other WLAN services.

    • Bind the WDS profile to AP group radios.

      1. Run the ap-group name group-name command to enter the AP group view.
      2. Run the radio radio-id command to enter the radio view.

      3. Run the wds-profile profile-name command to bind the WDS profile to AP group radios.

        By default, no WDS profile is bound to an AP radio.

        A WDS link uses the VAPs with the WLAN ID 13 and ID 14, which cannot be occupied by other WLAN services.

    • Bind the WDS profile to an AP radio.

      1. Run the ap-id ap-id, ap-mac ap-mac, or ap-name ap-name command to enter the AP view.
      2. Run the radio radio-id command to enter the radio view.

      3. Run the wds-profile profile-name command to bind the WDS profile to the AP radio.

        By default, no WDS profile is bound to an AP radio.

        A WDS link uses the VAPs with the WLAN ID 13 and ID 14, which cannot be occupied by other WLAN services.

Verifying the WDS Configuration

Prerequisites

The WDS configuration is complete.

Procedure

  • Run the display references wds-profile name profile-name command to check reference information of a specified WDS profile.
  • Run the display wds-profile { all | name profile-name } command to check information of a WDS profile.
  • Run the display references wds-whitelist-profile name whitelist-name command to check reference information of a specified WDS whitelist profile.
  • Run the display wds-whitelist-profile { all | name whitelist-name } command to check information of a WDS whitelist profile.
Translation
简体中文
Download
Updated: 2021-02-27

Document ID: EDOC1100008282

Views: 1482325

Downloads: 3208

Average rating:
This Document Applies to these Products

Related Version

Related Documents

Share
Previous Next

Copyright © 2023 Huawei Technologies Co., Ltd. All rights reserved.

You are going to visit :