S5700 and S6700 V200R022C00 Configuration Guide - WLAN-AC
Licensing Requirements and Limitations for Basic WLAN Services
Involved Network Elements
- APs mentioned in this document are Huawei AP products. You are advised to use Huawei APs to connect to the AC.
- You can run the display ap-type all command to check the default AP types supported by the device.
- For details about the version mapping between ACs and APs, see AC-AP Mapping.
Licensing Requirements
- Wireless Access Controller AP Resource License-1AP
- Wireless Access Controller AP Resource License-16AP
- Wireless Access Controller AP Resource License-32AP
- Wireless Access Controller AP Resource License-64AP
- Wireless Access Controller AP Resource License-128AP
- Wireless Access Controller AP Resource License-512AP
For details about how to apply for a license, see Applying for Licenses in the S1720, S5700, and S6700 Series Switches License Usage Guide.
Feature Support in V200R022C00
This feature is supported only by the following models: S5731-H, S5731S-H, S5732-H, S6730-H, S6730S-H
Feature Limitations
It is recommended that you use different VLANs for the management VLAN and service VLAN.
It is not recommended that VLAN 1 be used as the management VLAN or service VLAN.
In tunnel forwarding mode, the management VLAN and service VLAN must be different.
In direct forwarding mode, ensure that the AP can exchange management VLAN packets with the AC and exchange service VLAN packets with upstream devices.
In tunnel forwarding mode, ensure that the AP can exchange management VLAN packets with the AC and the AC can exchange service VLAN packets with upstream devices.
In tunnel forwarding mode, the AC and APs do not support IP packet fragmentation for wireless data.
- In the AC + AP networking, to prevent loops, port flapping, or AP disconnection, do not use Smart Link, equal-cost routing, or port protection.
- The AC cannot manage APs through VPNs.
- APs cannot connect to physical Layer 3 interfaces or subinterfaces on the AC.
In versions earlier than V200R013C00, the AC can manage APs and STAs only through IPv4. In V200R013C00 and later versions, the AC can manage APs through IPv4 only and manage STAs through IPv4 or IPv6.
VXLAN is supported from V200R011C10. The VXLAN service cannot be configured on the CAPWAP source interface specified for the AC. Otherwise, APs cannot be managed and cannot go online.
- In V200R013C00, assume that two VAP profiles are configured for an AP connected to the S5720-HI, S5730-HI, and S6720-HI, the forwarding mode in one VAP profile is tunnel forwarding, and the forwarding mode in the other VAP profile is direct forwarding. When two users access the network using the two profiles, the user who accesses the network using the VAP profile configured with direct forwarding mode will receive both directly forwarded and tunnelled multicast traffic. You are not advised to configure two VAP profiles in tunnel forwarding and direct forwarding modes on the same AP.
- If VAPs in direct and tunnel forwarding modes are both configured on an AP, and the AC serves as an IPv6 gateway and has authentication configured, services of IPv6 STAs are unavailable.
The AC and AP exchange CAPWAP packets to communicate with each other. To prevent CAPWAP packet attacks from affecting normal device communication, you can configure local attack defense on devices. To configure local attack defense, specify a trusted AP source address in an ACL rule and then configure a whitelist in the attack defense policy or configure user-defined flows to limit the rate of specified CAPWAP packets. For details, see Local Attack Defense Configuration.
In wireless city scenarios, it is recommended that the STA aging time be reduced. The recommended value is 1 minute.
When channels are configured in batches for APs in an AP group, the configured channels may not take effect on some APs due to the following reasons:
- Radios with the same ID on different APs in the same AP group support different working frequency bands.
For example, radio 0 of an AirEngine 5761R-11 can be switched to the 5 GHz frequency band, but radio 0 of an AirEngine 5761R-11E supports only the 2.4 GHz frequency band.
For another example, radio 2 of an AirEngine 6761-22T fixedly supports the 6 GHz frequency band, but radio 2 of an AirEngine 6761-21T fixedly supports the 5 GHz frequency band.
- Radios with the same ID on different APs in the same AP group support the same working frequency band but different filtering attributes for high and low frequencies.
For example, in the country code of CN (China), radio 1 and radio 2 of a dual-5G indoor AP can use only 5 GHz high-frequency channels and 5 GHz low-frequency channels, respectively. If a single-5G AP and a dual-5G AP are in the same AP group, 5 GHz low-frequency channels configured for radio 1 do not take effect on the dual-5G AP.
- APs with the same country code in the same AP group support different indoor and outdoor working channels.
For example, channels 36 to 64 are not supported by outdoor APs in China. If channels 36 to 64 are configured for an AP group, this configuration does not take effect for outdoor APs in the AP group.
Therefore, when channels are configured based on the AP group, if the AP group contains both indoor and outdoor APs or APs that support different working frequency bands, the configured channels may not take effect for all APs. You are advised to add these APs to different AP groups and configure channels for them separately, or configure channels for a single AP.