No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Configuration Guide - WLAN-AC

S5700 and S6720 V200R012C00

This document describes the configurations of WLAN, including WLAN Service Configuration, Radio Resource Management, Roaming, WLAN QoS, WLAN Security, WDS, Mesh, Location, Hotspot 2.0, Dual-Link Cold Backup, N+1 Backup.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Optimizing AP System Profile Parameters

Optimizing AP System Profile Parameters

Context

This task is to configure an AP to directly respond to association requests of STAs and configure the MTU of Ethernet port in the AP system profile and the Extensible Authentication Protocol (EAP) packet conversion function.

Procedure

  1. Run system-view

    The system view is displayed.

  2. Run wlan

    The WLAN view is displayed.

  3. Run ap-system-profile name profile-name

    An AP system profile is created, and the AP system profile view is displayed.

    By default, the system provides the AP system profile default.

  4. Run mtu mtu-value

    The MTU of the management VLANIF is configured in an AP system profile.

    By default, the MTU value of the management VLANIF and CAPWAP on an AP is 1500 bytes.

    The size of data packets is limited at the network layer. When a network layer device receives an IP packet, it determines the outbound interface and obtains the MTU configured on the interface.

    The device then compares the MTU with the IP packet length. If the IP packet length is longer than the MTU, the device fragments the IP packet. Each fragment has the smaller or equal size as the MTU.

    NOTE:

    If the MTU value is smaller than the DHCP packet length, the AP may be disconnected. In this case, restart the AP.

  5. Configure EAP packet conversion.

    Different vendors use different methods to encapsulate EAP packets in broadcast, multicast, or unicast packets.

    In 802.1X authentication, when an AP sends EAPOL-Start and EAPOL-Response packets to an AC, the method that the AP uses to encapsulate the two types of packets must be the same as the method that the access device directly connected to the AC uses. Otherwise, the two types of packets cannot be processed by the access device directly connected to the AP. Consequently, the user cannot pass 802.1X authentication.

    1. Run the eapol-start dest-address transform-condition { always | equal-bssid } command to specify EAPOL-Start packets to be encapsulated.

      By default, an AP encapsulates only the EAPOL-start packets with the destination MAC addresses being the AP's BSSID.

    2. Run the eapol-start dest-address transform-to { broadcast | multicast | mac mac-address } command to configure the AP to encapsulate EAPOL-Start packets into broadcast, multicast, or unicast packets.

      By default, an AP encapsulates EAPOL-start packets into multicast packets.

    3. Run the eapol-response dest-address transform-condition { always | equal-bssid } command to specify EAPOL-Response packets to be encapsulated.

      By default, an AP encapsulates only the EAPOL-response packets with the destination MAC addresses being the AP's BSSID.

    4. Run the eapol-response dest-address transform-to { broadcast | multicast | mac mac-address | learning } command to configure the AP to encapsulate EAPOL-Response packets into broadcast, multicast, or unicast packets.

      By default, an AP encapsulates EAPOL-response packets into unicast packets and actively learns the destination MAC address.

  6. Run quit

    Return to the WLAN view.

  7. Bind an AP system profile to an AP group or AP.

    • Binding an AP system profile to an AP group.
      1. Run the ap-group name group-name command to enter the AP group view.
      2. Run the ap-system-profile profile-name command to bind the AP system profile to the AP group.

        By default, the AP system profile default is bound to an AP group.

    • Binding an AP system profile to an AP.
      1. Run the ap-id ap-id, ap-mac ap-mac, or ap-name ap-name command to enter the AP view.
      2. Run the ap-system-profile profile-name command to bind the AP system profile to the AP.

        By default, no AP system profile is bound to an AP.

Translation
Download
Updated: 2018-12-24

Document ID: EDOC1100038361

Views: 157867

Downloads: 436

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next