capwap dtls data-link encrypt (AP system profile view)
Parameters
| Parameter | Description | Value |
|---|---|---|
| enable | Enables CAPWAP data tunnel encryption using DTLS. | - |
| disable | Disables CAPWAP data tunnel encryption using DTLS. | - |
Usage Guidelines
Usage Scenario
When the data forwarding mode is tunnel forwarding, service data packets between an AP and an AC are transmitted over a CAPWAP data tunnel. To improve service data security, you can run the capwap dtls data-link encrypt enable command to enable CAPWAP data tunnel encryption using DTLS. This configuration ensures that packets are encrypted and then transmitted over the CAPWAP data tunnel.
Configuration Impact
After this command is executed, all the APs that go online the AC, reference the AP system profile, and support this function will restart. Therefore, exercise caution when using this command.
Precautions
When VRRP hot backup is being enabled or the AP is being upgraded, it is not allowed to change the enabling status of CAPWAP data tunnel encryption using DTLS.
This configuration takes effect for the APs that go online on the AC and support this function. The configuration in the AP system profile view takes precedence over that in the system view.
This function takes effect only when the data forwarding mode is tunnel forwarding.
When the AP system profile is referenced in the AP view or AP group view, APs need to be restarted if the enabling status of CAPWAP data tunnel encryption using DTLS is changed. If the AP system profile is referenced in the AP group view, it takes a long period to restart APs.
Example
# Enable CAPWAP data tunnel encryption using DTLS in the AP system profile system1.
<AC6605> system-view [AC6605] wlan [AC6605-wlan-view] ap-system-profile name system1 [AC6605-wlan-ap-system-prof-system1] capwap dtls data-link encrypt enable Info: This function is supported only by APs with hardware encryption and decryption capabilities. Warning: This operation will reset the APs that reference this profile. Continue? [Y/N]:y
