Login
- Table of Contents
-
- 25-WLAN Command Reference(AC)
- 00-Preface
- 01-Compatibility of hardware and AC functionality
- 02-AP management commands
- 03-Radio management commands
- 04-WLAN access commands
- 05-WLAN security commands
- 06-WLAN authentication commands
- 07-WIPS commands
- 08-WLAN QoS commands
- 09-WLAN roaming commands
- 10-WLAN load balancing commands
- 11-WLAN radio resource measurement commands
- 12-Channel scanning commands
- 13-Band navigation commands
- 14-WLAN multicast optimization commands
- 15-WLAN RRM commands
- 16-WLAN IP snooping commands
- 17-WLAN probe commands
- 18-Spectrum management commands
- Related Documents
-
| Title | Size | Download |
|---|---|---|
| 16-WLAN IP snooping commands | 55.29 KB |
client ip-snooping http-learning enable
client ipv4-snooping arp-learning enable
client ipv4-snooping dhcp-learning enable
client ipv4-snooping dhcp-learning timeout
client ipv6-snooping dhcpv6-learning enable
client ipv6-snooping nd-learning enable
client ipv6-snooping snmp-nd-report enable
wlan client ip-conflict-detection enable
WLAN IP snooping commands
For information about MSR routers that can function as ACs, see "Compatibility of hardware and AC functionality."
client ip-snooping http-learning enable
Use client ip-snooping http-learning enable to enable snooping HTTP and HTTPS requests redirected to the portal server.
Use undo client ip-snooping http-learning enable to disable snooping HTTP and HTTPS requests redirected to the portal server.
Syntax
client ip-snooping http-learning enable
undo client ip-snooping http-learning enable
Default
Snooping HTTP and HTTPS requests is disabled.
Service template view
Predefined user roles
network-admin
Usage guidelines
An AC can use this method to learn IP addresses of clients performing portal authentication. For more information about portal authentication, see Security Configuration Guide.
The priorities for learning IP addresses through snooping DHCP packets, ARP or ND packets, and HTTP/HTTPS requests are in descending order.
Make sure the service template is disabled when you execute this command.
Examples
# Enable snooping HTTP and HTTPS requests.
<Sysname> system-view
[Sysname] wlan service-template service1
[Sysname-wlan-st-service1] client ip-snooping http-learning enable
client ipv4-snooping arp-learning enable
Use client ipv4-snooping arp-learning enable to enable snooping ARP packets.
Use undo client ipv4-snooping arp-learning enable to disable snooping ARP packets.
Syntax
client ipv4-snooping arp-learning enable
undo client ipv4-snooping arp-learning enable
Default
Snooping ARP packets is enabled.
Views
Service template view
Predefined user roles
network-admin
Examples
# Disable snooping ARP packets.
<Sysname> system-view
[Sysname] wlan service-template service1
[Sysname-wlan-st-service1] undo client ipv4-snooping arp-learning enable
client ipv4-snooping dhcp-learning enable
Use client ipv4-snooping dhcp-learning enable to enable snooping DHCPv4 packets.
Use undo client ipv4-snooping dhcp-learning enable to disable snooping DHCPv4 packets.
Syntax
client ipv4-snooping dhcp-learning enable
undo client ipv4-snooping dhcp-learning enable
Default
Snooping DHCPv4 packets is enabled.
Views
Service template view
Predefined user roles
network-admin
Examples
# Disable snooping DHCPv4 packets.
<Sysname> system-view
[Sysname] wlan service-template service1
[Sysname-wlan-st-service1] undo client ipv4-snooping dhcp-learning enable
client ipv4-snooping dhcp-learning timeout
Use client ipv4-snooping dhcp-learning timeout to set the timeout for IPv4 address learning through DHCP.
Use undo client ipv4-snooping dhcp-learning timeout to restore the default.
Syntax
client ipv4-snooping dhcp-learning timeout time
undo client ipv4-snooping dhcp-learning timeout
Default
The timeout is 0 and the system does not log off clients that fail to obtain an IPv4 address through DHCP.
Views
Service template view
Predefined user roles
network-admin
Parameters
time: Specifies the timeout in the range of 1 to 600 seconds.
Usage guidelines
With the timeout set, the system logs off clients that fail to obtain an IPv4 address through DHCP within the specified period.
Make sure the service template is enabled before you execute this command.
This configuration takes effect only on clients coming online afterwards from the AC.
Examples
# Set the timeout to 180 seconds for IPv4 address learning through DHCP.
<Sysname> system-view
[Sysname] wlan service-template 1
[Sysname-wlan-st-1] client ipv4-snooping dhcp-learning timeout 180
client ipv6-snooping dhcpv6-learning enable
Use client ipv6-snooping dhcpv6-learning enable to enable snooping DHCPv6 packets.
Use undo client ipv6-snooping dhcpv6-learning enable to disable snooping DHCPv6 packets.
Syntax
client ipv6-snooping dhcpv6-learning enable
undo client ipv6-snooping dhcpv6-learning enable
Default
Snooping DHCPv6 packets is disabled.
Views
Service template view
Predefined user roles
network-admin
Examples
# Disable snooping DHCPv6 packets.
<Sysname> system-view
[Sysname] wlan service-template service1
[Sysname-wlan-st-service1] client ipv6-snooping dhcpv6-learning enable
client ipv6-snooping nd-learning enable
Use client ipv6-snooping nd-learning enable to enable snooping ND packets.
Use undo client ipv6-snooping nd-learning enable to disable snooping ND packets.
Syntax
client ipv6-snooping nd-learning enable
undo client ipv6-snooping nd-learning enable
Default
Snooping ND packets is disabled.
Views
Service template view
Predefined user roles
network-admin
Examples
# Disable snooping ND packets.
[Sysname] wlan service-template service1
[Sysname-wlan-st-service1] undo client ipv6-snooping nd-learning enable
client ipv6-snooping snmp-nd-report enable
Use client ipv6-snooping snmp-nd-report enable to enable SNMP to obtain client IPv6 addresses learned from ND packets.
Use undo client ipv6-snooping snmp-nd-report enable to disable SNMP from obtaining client IPv6 addresses learned from ND packets.
Syntax
client ipv6-snooping snmp-nd-report enable
undo client ipv6-snooping snmp-nd-report enable
Default
SNMP obtains client IPv6 addresses learned from both DHCPv6 and ND packets.
Views
Service template view
Predefined user roles
Usage guidelines
Make sure the service template is disabled when you execute this command.
Examples
# Disable SNMP from obtaining client IPv6 addresses learned from ND packets.
<Sysname> system-view
[Sysname] wlan service-template service1
[Sysname-wlan-st-service1] undo client ipv6-snooping snmp-nd-report enable
wlan client ip-conflict-detection enable
Use wlan client ip-conflict-detection enable to enable IP address conflict detection.
Use undo wlan client ip-conflict-detection enable to disable IP address conflict detection.
Syntax
wlan client ip-conflict-detection enable
undo wlan client ip-conflict-detection enable
Default
IP address conflict detection is enabled.
Views
Service template view
Predefined user roles
network-admin
Usage guidelines
This feature enables the system to detect IP address conflicts between a client attempting to come online and online clients. The system logs off the online clients that use the same IP address as the new client and creates IP address conflict entries for the clients. The system deletes the IP address conflict entry for a client when the client cache expires or the client's IP address changes.
In an AC hierarchy network, you can disable IP address conflict detection on the central AC if portal authentication has been disabled or accounting has been disabled for 802.1X or MAC authentication clients. This allows clients from different local ACs to come online with the same IP address, simplifying DHCP configuration.
Examples
# Disable IP address conflict detection.
<Sysname> system
[Sysname] undo wlan client ip-conflict enable
Related commands
client cache aging-time
