The H3C access controllers configuration guides describe the software features for the H3C access controllers, and guide you through the software configuration procedures. These configuration guides also provide configuration examples to help you apply the software features to different network scenarios.

Configuration guide	Content
Fundamentals Configuration Guide	Describes how to access the command line interface (CLI), log in to and set up the AC, upgrade the software, manage files and licenses, and use the basic management functions. This guide includes: · CLI · Login management · FTP and TFTP · File system management · Configuration file management · Software upgrade · License management · Device management
WLAN Configuration Guide	Describes how to configure WLAN services, WLAN security, IACTP tunnel and WLAN roaming, WLAN RRM, WLAN QoS, WLAN IDS, WLAN mesh link, WLAN high availability, advanced WLAN, and WLAN optimization. This guide includes: · WLAN interface · WLAN access · WLAN security · IATCP tunnel and WLAN roaming · WLAN RRM · WLAN IDS · WLAN QoS · WLAN mesh link · Advanced WLAN · WLAN high availability · WLAN IPS · WLAN optimization
Layer 2 Configuration Guide	Covers Layer 2 technologies and features used on a LAN switched network, such as Ethernet interface, loopback and null interfaces, VLAN technology, MAC address table management, spanning tree, and Layer 2 forwarding. This guide includes: · Ethernet interface · Loopback and null interfaces · VLAN · MAC address table · Ethernet link aggregation · Spanning tree · Layer 2 forwarding · PPPoE · FPGA fast forwarding · QinQ termination
Layer 3 Configuration Guide	Describes IP addressing (including static and dynamic IPv4 and IPv6 address assignment), network performance optimization, ARP, and interoperation between IPv4 and IPv6. This guide includes: · ARP · IP addressing · DHCP · DHCPv6 · DNS · IPv6 DNS · NAT · Adjacency table · Flow classification · IPv6 basics · IP performance optimization · IP routing basics · Static routing · IPv6 static routing · GRE · RIP · RIPng · Policy-based routing
IP Multicast Configuration Guide	Covers Layer 2 IPv4 multicast protocol IGMP snooping, and Layer 2 IPv6 multicast protocol MLD snooping. This guide includes: · IGMP snooping · MLD snooping · Multicast VLAN · IPv6 multicast VLAN
ACL and QoS Configuration Guide	Describes how to classify traffic with ACLs, and allocate network resources and manage congestions with QoS technologies to improve network performance and network use efficiency. You can use ACLs to help other function modules (such as QoS and IP routing) classify or filter traffic. This guide includes: · ACL · QoS
Security Configuration Guide	· Covers security features. The major security features available on the AC include: identity authentication (AAA, public Key, and PKI), access security (802.1X, MAC authentication, portal, and port security), secure management (SSH, user profile, and password control), SSL, and security protection. This guide includes: · Security overview · AAA · 802.1X · MAC authentication · Portal · Port security · User profile · Password control · Public key · PKI · SSH · SSL · SSL VPN · TCP attack protection · ARP attack protection · IPsec · ALG · Firewall · Session management · Web filtering · User isolation · Source IP address verification · FIPS · Protocol packet rate limit
High Availability Configuration Guide	Describes high availability technologies and features for network fault detection and diagnosis. This guide includes: · High availability overview · VRRP · Stateful failover · Track
Network Management and Monitoring Configuration Guide	Describes features that help you manage and monitor your network, for example, display system information, and use the ping and tracert commands to check and debug network connectivity. This guide includes: · System maintenance and debugging · NQA · NTP · IPC · SNMP · RMON · Mirroring · Information center · sFlow · Flow log
OAA Configuration Guide	Describes the open application architecture (OAA), how to log in to the H3C open application platform (OAP) card connected to your device and reset the operating system of the OAP card.
Access Controller Module Basic Configuration Guide	Describes the compatibility matrix between access controller modules and Ethernet switches, and the required configurations for an access controller module to cooperate with an Ethernet switch.

Models of H3C access controllers

H3C access controllers include the WX3000E series wireless switches, WX2540E, WAC360, WAC361, WX3500E, WX5000, WX6000, and WX5500E series access controllers.

Table 1 Models of H3C access controllers

Product	Model
WX2540E and WAC360 series access controllers	· WX2540E access controller · WAC360 access controller · WAC361 access controller
WX3000E series wireless switches	· WX3024E wireless switch · WX3010E wireless switch
WX5000 series access controllers	· WX5002V2 access controller · WX5004 access controller
WX3500E series access controllers	· WX3510E access controller · WX3540E access controller
WX6000 series access controllers	· WX6103 access controller · LSQM1WCMD0 access controller module · LSRM1WCM3A1 access controller module · LSUM3WCMD0 access controller module · EWPXM1WCME0 access controller module · LSUM1WCME0 access controller module NOTE: The WX6103 access controller supports EWPX1WCMD0 main boards.
WX5500E series access controllers	· WX5510E access controller · WX5540E access controller

Typical network scenarios

WX2540E and WAC360/WAC361 network scenario

As shown in Figure 1, the AC acts as the gateway device.

· The AC connects to a Layer 2 switch and a PC to operate as the gateway for the PC and APs.

· The AC connects to the ISP network through a Layer 2 or Layer 3 switch, a router, or a modem.

Figure 1 WX2540E and WAC360/WAC361 network scenario

AC network scenario

As shown in Figure 2, the AC connects to a Layer 2 or Layer 3 switch through GE 1/0/1, the switch is connected to APs directly or over an IP network, and clients access the network through the APs.

Figure 2 AC network scenario

Access controller module network scenario

As shown in Figure 3, the AC is installed on a Layer 2 or Layer 3 switch, the switch is connected to APs directly or over an IP network, and clients access the network through the APs.

Figure 3 Access controller module network Scenario

Wireless switch network scenario

As shown in Figure 4, the wireless switch that has both AC and switch functions is connected to APs directly or over an IP network, and clients access the network through the APs.

Figure 4 Wireless switch network scenario

Feature matrixes

In this document, "Yes" means a feature or command is supported, and "No" means not supported.

Feature matrix for the WX2540 and WAC360 series

Configuration guide	Feature	Function	WX2540E	WAC360	WAC361
Fundamentals Configuration Guide	Login management	AUX user interface	No.	No.	No.
	Login management	Console user interface	Yes.	Yes.	Yes.
	File system management	Storage media supported	Flash and USB.	Flash and USB.	Flash and USB.
	License management	License function	Yes.	No.	No.
	Device management	Configuring temperature alarm thresholds for boards (common)	No.	No.	No.
		Configuring temperature alarm thresholds for boards (enhanced)	No.	No.	No.
		Hot swappable modules	Yes.	No.	No.
	Automatic configuration	Automatic configuration	No.	No.	No.
WLAN Configuration Guide	WLAN interface configuration	WLAN mesh interfaces	No.	No.	No.
	WLAN interface configuration	WLAN mesh link interfaces	No.	No.	No.
	WLAN access	Maximum number of SSIDs	32.	32.	32.
		Maximum number of service templates	32.	32.	32.
		Maximum number of AP groups	No.	No.	No.
	IACTP tunnel and WLAN roaming	IACTP tunnel and WLAN roaming	No.	No.	No.
	WLAN IDS	Maximum number of dynamic blacklist entries	256.	256.	256.
		Maximum number of static blacklist entries	256.	256.	256.
		Maximum number of static whitelist entries	256.	256.	256.
	WLAN mesh link	WLAN mesh link	No.	No.	No.
	Advanced WLAN	WLAN sniffer	No.	No.	No.
		VLAN pool	Yes.	Yes.	Yes.
		Wireless location	Yes.	Yes.	Yes.
		MAC-BAC	No.	No.	No.
		Guest access tunnel	No.	No.	No.
		Bonjour gateway	Yes.	Yes.	Yes.
		Hotspot 2.0	No.	No.	No.
		Multicast optimization	No.	No.	No.
	WLAN high availability	AC stateful failover	No.	No.	No.
		Client information backup	No.	No.	No.
		VRRP for WLAN	No.	No.	No.
	WLAN IPS	WIPS	Yes.	Yes.	Yes.
	WLAN optimization	WLAN optimization	No.	No.	No.
Layer 2 Configuration Guide	Ethernet interface configuration	Combo interface	No.	No.	No.
		Shutting down an Ethernet interface	Yes.	Yes.	Yes.
		Duplex mode	Yes.	Yes.	Yes.
		Configuring loopback detection on an Ethernet interface	Yes.	Yes.	Yes.
		Configuring flow control on an Ethernet interface	Yes.	Yes.	Yes.
		Configuring the link mode of an Ethernet interface	Yes.	Yes.	Yes.
	Ethernet link aggregation	Layer 2 static link aggregation	Yes.	Yes.	Yes.
	Ethernet link aggregation	Layer 2 dynamic link aggregation	Yes.	Yes.	Yes.
	Spanning tree	Spanning tree	Yes.	Yes.	Yes.
	PPPoE	PPPoE server	Yes.	Yes.	Yes.
	PPPoE	PPPoE client	Yes.	Yes.	Yes.
	FPGA fast forwarding	FPGA fast forwarding	No.	No.	No.
	QinQ termination	QinQ termination	No.	No.	No.
Layer 3 Configuration Guide	NAT	NAT	Yes.	Yes.	Yes.
	DHCPv6	DHCPv6	Yes.	Yes.	Yes.
	Domain name resolution	DDNS	Yes.	Yes.	Yes.
	GRE	GRE	Yes.	Yes.	Yes.
	Policy-based routing	Policy-based routing	Yes.	Yes.	Yes.
	RIP	RIP	Yes.	Yes.	Yes.
	RIP next generation	RIPng	Yes.	Yes.	Yes.
IP Multicast Configuration Guide	MLD snooping	MLD snooping	Yes.	Yes.	Yes.
IP Multicast Configuration Guide	IPv6 multicast VLAN	IPv6 Multicast VLAN	Yes.	Yes.	Yes.
Security Configuration Guide	AAA	PPP users	No.	No.	No.
		Assigning PPP service types to a local user	No.	No.	No.
		Setting the expiration time for a local user	Yes.	Yes.	Yes.
		Specifying a backup source address for RADIUS packets	Yes.	Yes.	Yes.
		Specifying the authentication method for PPP users	No.	No.	No.
		Specifying the authorization method for PPP users	No.	No.	No.
		Specifying the accounting method for PPP users	No.	No.	No.
		Specifying the device ID used in stateful failover mode	No.	No.	No.
		Enabling buffering of stop-accounting requests to which no responses are received	No.	No.	No.
		Real-time accounting	No.	No.	No.
	802.1X	802.1X stateful failover	No.	No.	No.
	Portal	IPv6 portal server	Yes.	Yes.	Yes.
		Maximum number of portal servers	8.	8.	8.
		IPv6 portal-free rule	Yes.	Yes.	Yes.
		Configuring a portal-forbidden rule	Yes.	Yes.	Yes.
		Configuring a Layer 3 portal authentication to support Web proxy	Yes.	Yes	Yes.
		Configuring the MAC-based quick portal authentication	Yes.	Yes.	Yes.
		Configuring stateful failover for portal authentication	No.	No.	No.
		Specifying a device ID to be sent to a portal client	No.	No.	No.
		Enabling host identity check through DHCP snooping	No.	No.	No.
	Port security	Maximum number of PSK users	1024.	512.	512.
	Port security	Port security stateful failover	No.	No.	No.
	Password control	Password control	No.	No.	No.
	PKI	Maximum number of PKI domains	2.	2.	2.
	PKI	Peer entity	No.	No.	No.
	ARP attack protection	Enabling ARP black hole routing	Yes.	Yes.	Yes.
	IPsec	IPsec stateful failover	No.	No.	No.
	SSL VPN	SSL VPN	Yes.	Yes.	Yes.
	ALG	ALG	Yes.	Yes.	Yes.
	Firewall	Configuring a packet-filter firewall	Yes.	Yes.	Yes.
	Firewall	Configuring an ASPF	Yes.	Yes.	Yes.
	Session management	Session management	Yes.	Yes.	Yes.
	Web filtering	Web filtering	Yes.	Yes.	Yes.
	FIPS	FIPS	No.	No.	No.
High Availability Configuration Guide	VRRP	Creating a VRRP group and configuring virtual IP address	No.	No.	No.
	Stateful failover	Stateful failover	No.	No.	No.
	Interface backup	Interface backup	Yes.	Yes.	Yes.
Network Management and Monitoring Configuration Guide	IPC	IPC	No.	No.	No.
	SNMP	Configuring the SNMP proxy agent for an SNMP agent	No.	No.	No.
	Mirroring	Port mirroring	No.	No.	No.
	Information center	Log file	No.	No.	No.
OAA Configuration Guide	OAA	OAP module configuration	No.	No.	No.
Access Controller Module Basic Configuration Guide	Access controller module basic configuration	Access controller module basic configuration	No.	No.	No.

Feature matrix for the WX5000 series

Configuration guide	Feature	Function	WX5002V2	WX5004
Fundamentals Configuration Guide	Login management	AUX user interface	No.	No.
	Login management	Console user interface	Yes.	Yes.
	File system management	Storage media supported	CF.	CF.
	License management	License function	Supports 32 concurrent APs by default, and can be extended to support 64 APs. Supports ordinary license and enhanced license.	Supports 64 concurrent APs by default, and can be extended to support 256 APs. Supports ordinary license and enhanced license.
	Device management	Configuring temperature alarm thresholds for boards (common)	Yes.	Yes.
		Configuring temperature alarm thresholds for boards (enhanced)	No.	No.
		Pluggable modules	Yes.	Yes.
	Automatic configuration	Automatic configuration	Yes.	Yes.
WLAN Configuration Guide	WLAN interface configuration	WLAN mesh interfaces	Yes.	Yes.
	WLAN interface configuration	WLAN mesh link interfaces	Yes.	Yes.
	WLAN access	Maximum number of SSIDs	128.	256.
		Maximum number of service templates	128.	256.
		Maximum number of AP groups	64.	256.
	IACTP tunnel and WLAN roaming	IACTP tunnel and WLAN roaming	Yes.	Yes.
	WLAN IDS	Maximum number of dynamic blacklist entries	512.	512.
		Maximum number of static blacklist entries	256.	256.
		Maximum number of static whitelist entries	256.	256.
	WLAN mesh link	WLAN mesh link	Yes.	Yes.
	Advanced WLAN	WLAN sniffer	Yes.	Yes.
		VLAN pool	Yes.	Yes.
		Wireless location	Yes.	Yes.
		MAC-BAC	Yes.	Yes.
		Guest access tunnel	Yes.	Yes.
		Bonjour gateway	Yes.	Yes.
		Hotspot 2.0	Yes.	Yes.
		Multicast optimization	Yes.	Yes.
	WLAN high availability	AC hot backup	Yes.	Yes.
		Client information backup	Yes.	Yes.
		VRRP for WLAN	No.	No.
	WLAN IPS	WIPS	Yes.	Yes.
	WLAN optimization	WLAN optimization	Yes.	Yes.
Layer 2 Configuration Guide	Ethernet interface configuration	Combo interface	Yes.	Yes.
		Shutting down an Ethernet interface or a subinterface	Yes only in Ethernet interface and port group views.	Yes only in Ethernet interface and port group views.
		Duplex mode	Yes.	Yes.
		Configuring loopback detection on an Ethernet interface	Yes.	Yes.
		Configuring flow control on an Ethernet interface	Yes.	Yes.
		Configuring the link mode of an Ethernet interface	No.	No.
		Configuring a Layer 3 Ethernet interface or subinterface	No.	No.
	Ethernet link aggregation	Layer 2 static link aggregation	Yes.	Yes.
	Ethernet link aggregation	Layer 2 dynamic link aggregation	Yes.	Yes.
	Spanning tree	Spanning tree	Yes.	Yes.
	PPPoE	PPPoE server	No.	No.
	PPPoE	PPPoE client	No.	No.
	FPGA fast forwarding	FPGA fast forwarding	No.	No.
	QinQ termination	QinQ termination	No.	No.
Layer 3 Configuration Guide	NAT	NAT	Yes.	Yes.
	DHCPv6	DHCPv6	Yes.	Yes.
	Domain name resolution	DDNS	No.	No.
	GRE	GRE	No.	No.
	Policy-based routing	Policy-based routing	No.	No.
	RIP	RIP	No.	No.
	RIP next generation	RIPng	No.	No.
IP Multicast Configuration Guide	MLD snooping	MLD snooping	Yes.	Yes.
IP Multicast Configuration Guide	IPv6 multicast VLAN	IPv6 Multicast VLAN	Yes.	Yes.
Security Configuration Guide	AAA	PPP users	No.	No.
		Assigning PPP service types for a local user	No.	No.
		Setting the expiration time of a local user	Yes.	Yes.
		Specifying a backup source address for RADIUS packets	Yes.	Yes.
		Specifying the authentication method for PPP users	No.	No.
		Specifying the authorization method for PPP users	No.	No.
		Specifying the accounting method for PPP users	No.	No.
		Specifying the device ID used in stateful failover mode	Yes.	Yes.
		Enabling buffering of stop-accounting requests to which no responses are received	Yes.	Yes.
		Real-time accounting	Yes.	Yes.
	802.1X	802.1X stateful failover	Yes.	Yes.
	Portal	IPv6 portal server	Yes.	Yes.
		Specifying the maximum number of portal servers	32.	32.
		Configuring IPv6 portal-free rule	Yes.	Yes.
		Configuring a portal-forbidden rule	Yes.	Yes.
		Configuring a Layer 3 portal authentication to support Web proxy	Yes.	Yes
		Configuring the MAC-based quick portal authentication	Yes.	Yes.
		Configuring stateful failover for portal authentication	Yes.	Yes.
		Specifying a device ID to be sent to a portal client	Yes.	Yes.
		Enabling host identity check through DHCP snooping	Yes.	Yes.
	Port security	Maximum number of PSK users	2048.	4096.
	Port security	Port security stateful failover	Yes.	Yes.
	Password control	Password control	Yes.	Yes.
	PKI	Maximum number of PKI domains	32.	32.
	PKI	Peer entity	Yes.	Yes.
	ARP attack protection	Enabling ARP black hole routing	Yes.	Yes.
	IPsec	IPsec stateful failover	Yes.	Yes.
	SSL VPN	SSL VPN	No.	No.
	ALG	ALG	Yes.	Yes.
	Firewall	Configuring a packet-filter firewall	Yes.	Yes.
	Firewall	Configuring an ASPF	Yes.	Yes.
	Session management	Session management	Yes.	Yes.
	Web filtering	Web filtering	Yes.	Yes.
	FIPS	FIPS	Yes.	Yes.
High Availability Configuration Guide	VRRP	Creating a VRRP group and configuring virtual IP address	The maximum number of VRRP groups on an interface is 128.	The maximum number of VRRP groups on an interface is 128.
	Stateful failover	Stateful failover	Yes.	Yes.
	Interface backup	Interface backup	No.	No.
Network Management and Monitoring Configuration Guide	IPC	IPC	Yes.	Yes.
	SNMP	Configuring the SNMP proxy agent for an SNMP agent	Yes.	Yes.
	Mirroring	Port mirroring	Yes.	Yes.
	Information center	Log file	Yes.	Yes.
OAA Configuration Guide	OAA	OAP module configuration	No.	No.
Access Controller Module Basic Configuration Guide	Access controller module basic configuration	Access controller module basic configuration	No.	No.

Feature matrix for the WX3500E series

Configuration guide	Feature	Function	WX3510E	WX3540E
Fundamentals Configuration Guide	Login management	AUX user interface	No.	No.
	Login management	Console user interface	Yes.	Yes.
	File system management	Storage media supported	CF.	CF.
	License management	License function	Supports 0 concurrent APs by default, and can be extended to support 128 APs. Supports ordinary license and enhanced license.	Supports 0 concurrent APs by default, and can be extended to support 256 APs. Supports ordinary license and enhanced license.
	Device management	Configuring temperature alarm thresholds for boards (common)	Yes.	Yes.
		Configuring temperature alarm thresholds for boards (enhanced)	No.	No.
		Transceiver modules	Yes.	Yes.
	Automatic configuration	Automatic configuration	Yes.	Yes.
WLAN Configuration Guide	WLAN interface configuration	WLAN mesh interfaces	Yes.	Yes.
	WLAN interface configuration	WLAN mesh link interfaces	Yes.	Yes.
	WLAN access	Maximum number of SSIDs	128.	256.
		Maximum number of service templates	128.	256.
		Maximum number of AP groups	128.	256.
	IACTP tunnel and WLAN roaming	IACTP tunnel and WLAN roaming	Yes.	Yes.
	WLAN IDS	Maximum number of dynamic blacklist entries	256.	256.
		Maximum number of static blacklist entries	256.	256.
		Maximum number of static whitelist entries	256.	256.
	WLAN mesh link	WLAN mesh link	Yes.	Yes.
	Advanced WLAN	WLAN sniffer	Yes.	Yes.
		VLAN pool	Yes.	Yes.
		Wireless location	Yes.	Yes.
		MAC-BAC	Yes.	Yes.
		Guest access tunnel	Yes.	Yes.
		Bonjour gateway	Yes.	Yes.
		Hotspot 2.0	Yes.	Yes.
		Multicast optimization	Yes.	Yes.
	WLAN high availability	AC hot backup	Yes.	Yes.
		Client information backup	Yes.	Yes.
		VRRP hot backup	No.	No.
	WLAN IPS	WIPS	Yes.	Yes.
	WLAN optimization	WLAN optimization	Yes.	Yes.
Layer 2 Configuration Guide	Ethernet interface configuration	Combo interface	Yes.	Yes.
		Shutting down an Ethernet interface or a subinterface	Yes only in Ethernet interface and port group views.	Yes only in Ethernet interface and port group views.
		Duplex mode	Yes.	Yes.
		Configuring loopback detection on an Ethernet interface	Yes.	Yes.
		Configuring flow control on an Ethernet interface	Yes.	Yes.
		Configuring the link mode of an Ethernet interface	No.	No.
		Configuring a Layer 3 Ethernet interface or subinterface	No.	No.
	Ethernet link aggregation	Layer 2 static link aggregation	Yes.	Yes.
	Ethernet link aggregation	Layer 2 dynamic link aggregation	Yes.	Yes.
	Spanning tree	Spanning tree	Yes.	Yes.
	PPPoE	PPPoE server	No.	No.
	PPPoE	PPPoE client	No.	No.
	FPGA fast forwarding	FPGA fast forwarding	No.	No.
	QinQ termination	QinQ termination	No.	No.
Layer 3 Configuration Guide	NAT	NAT	Yes.	Yes.
	DHCPv6	DHCPv6	Yes.	Yes.
	Domain name resolution	DDNS	No.	No.
	GRE	GRE	No.	No.
	Policy-based routing	Policy-based routing	No.	No.
	RIP	RIP	No.	No.
	RIP next generation	RIPng	No.	No.
IP Multicast Configuration Guide	MLD snooping	MLD snooping	Yes.	Yes.
IP Multicast Configuration Guide	IPv6 multicast VLAN	IPv6 multicast VLAN	Yes.	Yes.
Security Configuration Guide	AAA	PPP users	No.	No.
		Assigning PPP service types for a local user	No.	No.
		Setting the expiration time for a local user	Yes.	Yes.
		Specifying a backup source address for RADIUS packets	Yes.	Yes.
		Specifying the authentication method for PPP users	No.	No.
		Specifying the authorization method for PPP users	No.	No.
		Specifying the accounting method for PPP users	No.	No.
		Specifying the device ID used in stateful failover mode	Yes.	Yes.
		Enabling buffering of stop-accounting requests to which no responses are received	Yes.	Yes.
		Real-time accounting	Yes.	Yes.
	802.1X	802.1X stateful failover	Yes.	Yes.
	Portal	IPv6 portal server	Yes.	Yes.
		Specifying the maximum number of portal servers	32.	32.
		Configuring IPv6 portal-free rule	Yes.	Yes.
		Configuring a portal-forbidden rule	Yes.	Yes.
		Configuring a Layer 3 portal authentication to support Web proxy	Yes.	Yes
		Configuring the MAC-based quick portal authentication	Yes.	Yes.
		Configuring stateful failover for portal authentication	Yes.	Yes.
		Specifying a device ID to be sent to a portal client	Yes.	Yes.
		Enabling host identity check through DHCP snooping	Yes.	Yes.
	Port security	Maximum number of PSK users	4096.	4096.
	Port security	Port security stateful failover	Yes.	Yes.
	Password control	Password control	Yes.	Yes.
	PKI	Maximum number of PKI domains	32.	32.
	PKI	Peer entity	Yes.	Yes.
	ARP attack protection	Enabling ARP black hole routing	Yes.	Yes.
	IPsec	IPsec stateful failover	Yes.	Yes.
	SSL VPN	SSL VPN	No.	No.
	ALG	ALG	Yes.	Yes.
	Firewall	Configuring a packet-filter firewall	Yes.	Yes.
	Firewall	Configuring an ASPF	Yes.	Yes.
	Session management	Session management	Yes.	Yes.
	Web filtering	Web filtering	Yes.	Yes.
	FIPS	FIPS	Yes.	Yes.
High Availability Configuration Guide	VRRP	Creating a VRRP group and configuring virtual IP address	The maximum number of VRRP groups on an interface is 128.	The maximum number of VRRP groups on an interface is 128.
	Stateful failover	Stateful failover	Yes.	Yes.
	Interface backup	Interface backup	No.	No.
Network Management and Monitoring Configuration Guide	IPC	IPC	Yes.	Yes.
	SNMP	Configuring the SNMP proxy agent for an SNMP agent Yes.	Yes.	Yes.
	Mirroring	Port mirroring	Yes.	Yes.
	Information center	Log file	Yes.	Yes.
OAA Configuration Guide	OAA	OAP module configuration	No.	No.
Access Controller Module Basic Configuration Guide	Access controller module basic configuration	Access controller module basic configuration	No.	No.

Feature matrix for the WX6000 series

The switch interface board of the WX6103 adopts OAA architecture and is installed on the slot with purple paint at slot sides. The WX6103 supports EWPX1WCMD0 main boards. The switch interface board exchanges data, and state and control information with the main board through internal interfaces. Do not configure services such as QoS rate limiting and 802.1X authentication on the internal interfaces.

This document only shows the feature matrix for the main boards (EWPX1WCMD0) of the WX6103. For configuration information about the switch interface board of the WX6103, see the H3C WX6103 Access Controller Switch Interface Board Configuration Guide and H3C WX6103 Access Controller Switch Interface Board Command Reference.

The LSQM1WCMD0/LSRM1WCM3A1/LSUM3WCMD0/EWPXM1WCME0/LSUM1WCME0 of WX6000 series are OAP cards. Each OAP card is installed on the expansion slot of the switch and exchanges data and status and control information with the switch through internal interfaces. Do not configure services such as QoS rate limiting and 802.1X authentication on the internal interfaces.

Table 2 Feature matrix for the WX6000 series

Configuration guide	Feature	Function	WX6103	LSQM1WCMD0	LSRM1WCM3A1	LSUM3WCMD0	EWPXM1WCME0	LSUM1WCME0
Fundamentals Configuration Guide	Login management	AUX user interface	No.	Yes.	Yes.	Yes.	Yes.	Yes.
	Login management	Console user interface	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	File system management	Storage media supported	CF and USB.	CF and USB.	CF and USB.	CF.	CF.	CF.
	License management	License function	EWPX1WCMD0 supports 128 concurrent APs by default, and can be extended to support 1024 APs. Only supports enhanced license.	Supports 128 concurrent APs by default, and can be extended to support 1024 APs. Only supports enhanced license.	Supports 128 concurrent APs by default, and can be extended to support 1024 APs. Only supports enhanced license.	Supports 0 concurrent APs by default, and can be extended to support 1024 APs. Only supports enhanced license.	Supports 128 concurrent APs by default, and can be extended to support 1536 APs. Only supports enhanced license.	Supports 0 concurrent APs by default, and can be extended to support 1536 APs. Only supports enhanced license.
	Device management	Configuring temperature alarm thresholds for boards (common)	No.	No.	No.	No.	No.	No.
		Configuring temperature alarm thresholds for boards (enhanced)	Only supported by EWPX1WCMD0.	Yes.	Yes.	Yes.	Yes.	Yes.
		Pluggable modules	No.	No.	No.	No.	No.	No.
	Automatic configuration	Automatic configuration	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
WLAN Configuration Guide	WLAN interface configuration	WLAN mesh interfaces	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	WLAN interface configuration	WLAN mesh link interfaces	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	WLAN access	Maximum number of SSIDs	1024.	1024.	1024.	1024.	512.	512.
		Maximum number of service templates	EWPX1WCMD0 supports up to 3072 service templates.	3072.	3072.	3072.	4608.	4608.
		Maximum number of AP groups	EWPX1WCMD0 supports up to 1024 AP groups.	1024.	1024.	1024.	1536.	1536.
	IACTP tunnel and WLAN roaming	IACTP tunnel and WLAN roaming	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	WLAN IDS	Maximum number of dynamic blacklist entries	512.	512.	512.	512.	512.	512.
		Maximum number of static blacklist entries	256.	256.	256.	256.	256.	256.
		Maximum number of static whitelist entries	256.	256.	256.	256.	256.	256.
	WLAN mesh link	WLAN mesh link	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	Advanced WLAN	WLAN sniffer	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
		VLAN pool	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
		Wireless location	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
		MAC-BAC	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
		Guest access tunnel	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
		Bonjour gateway	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
		Hotspot 2.0	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
		Multicast optimization	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	WLAN high availability	AC hot backup	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
		Client information backup	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
		VRRP hot backup	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	WLAN IPS	WIPS	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	WLAN optimization	WLAN optimization	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
Layer 2 Configuration Guide	Ethernet interface configuration	Combo interface	No.	No.	No.	No.	No.	No.
		Shutting down an Ethernet interface or a subinterface	Yes only in Ethernet interface and port group views.	Yes only in Ethernet interface and port group views.	Yes only in Ethernet interface and port group views.	Yes only in Ethernet interface and port group views.	Yes only in Ethernet interface and port group views.	Yes only in Ethernet interface and port group views.
		Duplex mode.	No.	No.	No.	No.	No.	No.
		Configuring loopback detection on an Ethernet interface	No.	No.	No.	No.	No.	No.
		Configuring flow control on an Ethernet interface	No.	No.	No.	No.	No.	No.
		Configuring the link mode of an Ethernet interface	No.	No.	No.	No.	No.	No.
		Configuring a Layer 3 Ethernet interface or subinterface	No.	No.	No.	No.	No.	No.
	Ethernet link aggregation	Layer 2 static link aggregation	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	Ethernet link aggregation	Layer 2 dynamic link aggregation	No.	No.	No.	No.	No.	No.
	Spanning tree	Spanning tree	No.	No.	No.	No.	No.	No.
	PPPoE	PPPoE server	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	PPPoE	PPPoE client	No.	No.	No.	No.	No.	No.
	FPGA fast forwarding	FPGA fast forwarding	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	QinQ termination	QinQ termination	Yes.	Yes.	Yes.	Yes.	No.	No.
Layer 3 Configuration Guide	NAT	NAT	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	DHCPv6	DHCPv6	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	Domain name resolution	DDNS	No.	No.	No.	No.	No.	No.
	GRE	GRE	No.	No.	No.	No.	No.	No.
	Policy-based routing	Policy-based routing	No.	No.	No.	No.	No.	No.
	RIP	RIP	No.	No.	No.	No.	No.	No.
	RIP next generation	RIPng	No.	No.	No.	No.	No.	No.
IP Multicast Configuration Guide	MLD snooping	MLD snooping	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
IP Multicast Configuration Guide	IPv6 multicast VLAN	IPv6 multicast VLAN	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
Security Configuration Guide	AAA	PPP users	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
		Assigning PPP service types for a local user	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
		Setting the expiration time of a local user	Yes.	Yes.	Yes.	Yes	Yes.	Yes.
		Specifying a backup source address for RADIUS packets	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
		Specifying the authentication method for PPP users	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
		Specifying the authorization method for PPP users	Yes.	Yes	Yes.	Yes.	Yes.	Yes.
		Specifying the accounting method for PPP users	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
		Specifying the device ID used in stateful failover mode	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
		Enabling buffering of stop-accounting requests to which no responses are received	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
		Real-time accounting	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	802.1X	802.1X stateful failover	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	Portal	IPv6 portal server	Yes.	Yes.	Yes.	Yes	Yes.	Yes
		Specifying the maximum number of portal servers	64.	64.	64.	64.	64.	64.
		Configuring IPv6 portal-free rule	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
		Configuring a portal-forbidden rule	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
		Configuring a Layer 3 portal authentication to support Web proxy	Yes.	Yes.	Yes.	Yes	Yes.	Yes.
		Configuring the MAC-based quick portal authentication	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
		Configuring stateful failover for portal authentication	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
		Specifying a device ID to be sent to a portal client	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
		Enabling host identity check through DHCP snooping	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	Port security	Maximum number of PSK users	20480.	20480.	20480.	20480.	30720.	30720.
	Port security	Port security stateful failover	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	Password control	Password control	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	PKI	Maximum number of PKI domains	32.	32.	32.	32.	32.	32.
	PKI	Peer entity	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	ARP attack protection	Enabling ARP black hole routing	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	IPsec	IPsec stateful failover	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	SSL VPN	SSL VPN	No.	No.	No.	No.	No.	No.
	ALG	ALG	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	Firewall	Configuring a packet-filter firewall	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	Firewall	Configuring an ASPF	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	Session management	Session management	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	Web filtering	Web filtering	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	FIPS	FIPS	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
High Availability Configuration Guide	VRRP	Creating a VRRP group and configuring virtual IP address	The maximum number of VRRP groups on an interface is 255.	The maximum number of VRRP groups on an interface is 255.	The maximum number of VRRP groups on an interface is 255.	The maximum number of VRRP groups on an interface is 255.	The maximum number of VRRP groups on an interface is 255.	The maximum number of VRRP groups on an interface is 255.
	Stateful failover	Stateful failover	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	Interface backup	Interface backup	No.	No.	No.	No.	No.	No.
Network Management and Monitoring Configuration Guide	IPC	IPC	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	SNMP	Configuring the SNMP proxy agent for an SNMP agent Yes.	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
	Mirroring	Port mirroring	No.	No.	No.	No.	No.	No.
	Information center	Log file	Yes.	Yes.	Yes.	Yes.	Yes.	Yes.
OAA Configuration Guide	OAA	OAP module configuration	Yes.	No.	No.	No.	No.	No.
Access Controller Module Basic Configuration Guide	Access controller module basic configuration	Access controller module basic configuration	No.	Yes.	Yes.	Yes.	Yes.	Yes.

Feature matrix for the WX5500E series wireless switch

The access controller engine and switching engine of the WX5540E series adopt the OAA architecture. The switching engine is integrated on the access controller engine as OAP software. You actually log in to the access controller engine when you log in to the wireless switch by default.

The XGE 1/0/29, XGE 1/0/30, XGE 1/0/31, and XGE 1/0/32 interfaces of the switching engine of the WX5540E form a logical interface BAGG1, the XGE 1/0/1, XGE 1/0/2, XGE 1/0/3 and XGE 1/0/4 interfaces of the switching engine of the WX5540E form a logical interface BAGG1. The two BAGG1 interfaces exchange data, status, and control information. Do not configure services such as QoS rate limiting and 802.1X authentication on these internal interfaces.

This document only shows the feature matrix for the access controller of the WX5540E series. For feature and configuration information about the switching engine of the WX5540E series, see H3C WX5540E Access Controller Switching Engine Configuration Guide and H3C WX5540E Access Controller Switching Engine Command Reference.

Table 3 Feature matrix for the WX5500E series

Configuration guide	Feature	Function	WX5510E	WX5540E
Fundamentals Configuration Guide	Login management	AUX user interface	No.	No.
	Login management	Console user interface	Yes.	Yes.
	File system management	Storage media supported	CF.	CF.
	License management	APs supported	Supports 0 concurrent APs by default, and can be extended to support 512 APs. Supports enhanced license.	Supports 0 concurrent APs by default, and can be extended to support 1536 APs. Supports enhanced license.
	Device management	Configuring temperature alarm thresholds for boards (common)	No.	No.
		Configuring temperature alarm thresholds for boards (enhanced)	Yes.	Yes.
		Pluggable modules	Yes.	No.
	Automatic configuration	Automatic configuration	Yes.	Yes.
WLAN Configuration Guide	WLAN interface configuration	WLAN mesh interfaces	Yes.	Yes.
	WLAN interface configuration	WLAN mesh link interfaces	Yes.	Yes.
	WLAN access	Maximum number of SSIDs supported	512.	512.
		Maximum number of service templates supported	512.	4608.
		Maximum number of AP groups	512.	1536.
	IACTP tunnel and WLAN roaming	IACTP tunnel and WLAN roaming	Yes.	Yes.
	WLAN IDS	Maximum number of dynamic blacklist entries	512.	512.
		Maximum number of static blacklist entries	256.	256.
		Maximum number of static whitelist entries	256.	256.
	WLAN mesh link	WLAN mesh link	Yes.	Yes.
	Advanced WLAN	WLAN sniffer	Yes.	Yes.
		VLAN pool	Yes.	Yes.
		Wireless location	Yes.	Yes.
		MAC-BAC	Yes.	Yes.
		Guest access tunnel	Yes.	Yes.
		Bonjour gateway	Yes.	Yes.
		Hotspot 2.0	Yes.	Yes.
		Multicast optimization	Yes.	Yes.
	WLAN high availability	AC hot backup	Yes.	Yes.
		Client information backup	Yes.	Yes.
		VRRP hot backup	No.	No.
	WIPS	WIPS	Yes.	Yes.
	WLAN network application policy	WLAN network application policy	Yes.	Yes.
Layer 2 Configuration Guide	Ethernet interface configuration	Combo interface	Yes.	Wireless controller does not support.
		Shutting down an Ethernet interface or a subinterface	Yes in Ethernet interface and port group views.	Yes in Ethernet interface and port group views. Do not shut down these ports to avoid affecting the switch.
		Duplex mode	Yes.	Does not support configuring half duplex or full duplex mode on Ethernet interfaces.
		Configuring loopback detection on an Ethernet interface	Yes.	No.
		Configuring flow control on an Ethernet interface	Yes.	No.
		Configuring the link mode of an Ethernet interface	No.	No.
		Configuring a Layer 3 Ethernet interface or subinterface	No.	No.
	Ethernet link aggregation	Layer 2 static link aggregation	Yes.	Yes.
	Ethernet link aggregation	Layer 2 dynamic link aggregation	Yes.	No.
	Spanning tree	Spanning tree	Yes.	No.
	PPPoE	PPPoE server	No.	No.
	PPPoE	PPPoE client	No.	No.
	FPGA fast forwarding	FPGA fast forwarding	No.	Yes.
	QinQ termination	QinQ termination	No.	No.
Layer 3 Configuration Guide	NAT	NAT	Yes.	Yes.
	DHCPv6	DHCPv6	Yes.	Yes.
	Domain name resolution	DDNS	No.	No.
	GRE	GRE	No.	No.
	Policy-based routing	Policy-based routing	No.	No.
	RIP	RIP	No.	No.
	RIP next generation	RIPng	No.	No.
IP Multicast Configuration Guide	MLD Snooping	MLD Snooping	Yes.	Yes.
IP Multicast Configuration Guide	IPv6 multicast VLAN	IPv6 multicast VLAN	Yes.	Yes.
Security Configuration Guide	AAA	PPP users	No.	No.
		Assigning PPP service types for a local user	No.	No.
		Setting the expiration time of a local user	Yes.	Yes.
		Specifying a backup source address for RADIUS packets	Yes.	Yes.
		Specifying the authentication method for PPP users	No.	No.
		Specifying the authorization method for PPP users	No.	No.
		Specifying the accounting method for PPP users	No.	No.
		Specifying the device ID used in stateful failover mode	Yes.	Yes.
		Enabling buffering of stop-accounting requests to which no responses are received	Yes.	Yes.
		Real-time accounting	Yes.	Yes.
	802.1X	802.1X stateful failover	Yes.	Yes.
	Portal	IPv6 Portal server	Yes.	Yes.
		Specifying the maximum number of portal servers	64.	64.
		Configuring IPv6 portal-free rule	Yes.	Yes.
		Configuring a portal-forbidden rule	Yes.	Yes.
		Configuring a Layer 3 portal authentication to support Web proxy	Yes.	Yes.
		Configuring the MAC-based quick portal authentication	Yes.	Yes.
		Configuring stateful failover for portal authentication	Yes.	Yes.
		Specifying a device ID to be sent to a portal client	Yes.	Yes.
		Enabling host identity check through DHCP snooping	Yes.	Yes.
	Port security	Maximum number of PSK users	10240.	30720.
	Port security	Port security stateful failover	Yes.	Yes.
	Password control	Password control	Yes.	Yes.
	PKI	Maximum number of PKI domains	32.	32.
	PKI	Peer entity	Yes.	Yes.
	ARP attack protection	Enabling ARP black hole routing	Yes.	Yes.
	IPsec	IPsec stateful failover	Yes.	Yes.
	SSL VPN	SSL VPN	No.	No.
	ALG	ALG	Yes.	Yes.
	Firewall	Configuring a packet-filter firewall	Yes.	Yes.
	Firewall	Configuring an ASPF	Yes.	Yes.
	Session management	Session management	Yes.	Yes.
	Web filtering	Web filtering	Yes.	Yes.
	FIPS	FIPS	Yes.	Yes.
High Availability Configuration Guide	VRRP	Creating a VRRP group and configuring virtual IP address	The maximum number of VRRP groups on an interface is 255.	The maximum number of VRRP groups on an interface is 255.
	Stateful failover	Stateful failover	Yes.	Yes.
	Interface backup	Interface backup	No.	No.
Network Management and Monitoring Configuration Guide	IPC	IPC	Yes.	Yes.
	SNMP	Configuring the SNMP proxy agent for an SNMP agent Yes.	Yes.	Yes.
	Mirroring	Port mirroring	Yes.	No.
	Information center	Log file	Yes.	Yes.
OAA Configuration Guide	OAA	OAP module configuration	No.	Yes.
Access Controller Module Basic Configuration Guide	Access Controller Module Basic Configuration Guide	Access Controller Module Basic Configuration	No.	No.

Feature matrix for the WX3000E series wireless switch

The access controller engine and switching engine of the WX3000E series adopt the OAA architecture. The switching engine is integrated on the access controller engine as OAP software. You actually log in to the access controller engine when you log in to the wireless switch by default.

The GE 1/0/29 and GE 1/0/30 interfaces of the switching engine of the WX3024E form a logical interface BAGG1, the GE 1/0/10 and GE 1/0/11 interfaces of the switching engine of the WX3010E form a logical interface BAGG1, and the GE 1/0/1 and GE 1/0/2 interfaces of the access controller engine of the WX3000E series form a logical interface BAGG1. The three BAGG1 interfaces exchange data, status, and control information. Do not configure services such as QoS rate limiting and 802.1X authentication on these internal interfaces.

This document only shows the feature matrix for the access controller of the WX3000E series. For feature and configuration information about the switching engine of the WX3000E series, see H3C WX3000E Series Wireless Switch Switching Engine Configuration Guide and H3C WX3000E Series Wireless Switch Switching Engine Command Reference.

Table 4 Feature matrix for the WX3000E series

Configuration guide	Feature	Function	WX3024E	WX3010E
Fundamentals Configuration Guide	Login management	AUX user interface	No.	No.
	Login management	Console user interface	Yes.	Yes.
	File system management	Storage media supported	Flash.	CF.
	License management	License function	Supports 24 concurrent APs by default, and can be extended to support 96 APs. Only supports enhanced license.	Supports 12 concurrent APs by default, and can be extended to support 36 APs. Only supports enhanced license.
	Device management	Configuring temperature alarm thresholds for boards (common)	No.	No.
		Configuring temperature alarm thresholds for boards (enhanced)	No.	No.
		Pluggable modules	No	No.
	Automatic configuration	Automatic configuration	Yes.	Yes.
WLAN Configuration Guide	WLAN interface configuration	WLAN mesh interfaces	Yes.	Yes.
	WLAN interface configuration	WLAN mesh link interfaces	Yes.	Yes.
	WLAN access	Maximum number of SSIDs supported	64.	64.
		Maximum number of service templates supported	64.	64.
		Maximum number of AP groups	96.	36.
	IACTP tunnel and WLAN roaming	IACTP tunnel and WLAN roaming	Yes.	Yes.
	WLAN IDS	Maximum number of dynamic blacklist entries	256.	256.
		Maximum number of static blacklist entries	256.	256.
		Maximum number of static whitelist entries	256.	256.
	WLAN mesh link	WLAN mesh link	Yes.	Yes.
	Advanced WLAN	WLAN sniffer	Yes.	Yes.
		VLAN pool	Yes.	Yes
		Wireless location	Yes.	Yes.
		MAC-BAC	Yes.	Yes.
		Guest access tunnel	Yes.	Yes.
		Bonjour gateway	Yes.	Yes.
		Hotspot 2.0	Yes.	Yes.
		Multicast optimization	Yes.	Yes.
	WLAN high availability	AC hot backup	No.	No.
		Client information backup	No.	No.
		VRRP hot backup	No.	No.
	WLAN IPS	WIPS	Yes.	Yes.
	WLAN optimization	WLAN optimization	Yes.	Yes
Layer 2 Configuration Guide	Ethernet interface configuration	Combo interface	No on the access controller engine. Yes on the switching engine, on which four 1000Base-X SFP ports and four 10/100/1000Base-T autosensing Ethernet ports numbered 21 through 24 form combo interfaces.	No.
		Shutting down an Ethernet interface or a subinterface	Yes in Ethernet interface and port group views. NOTE: GE 1/0/1 of the access controller engine communicates with GE 1/0/29 of the switching engine; GE 1/0/2 of the access controller engine communicates with GE 1/0/30 of the switching engine. Do not shut down these ports to avoid affecting the switch.	Yes in Ethernet interface and port group views. NOTE: GE 1/0/1 of the access controller engine communicates with GE 1/0/11 of the switching engine; GE 1/0/12 of the access controller engine communicates with GE 1/0/30 of the switching engine. Do not shut down these ports to avoid affecting the switch.
		Duplex mode	Does not support half duplex and full duplex.	Does not support half duplex and full duplex.
		Configuring loopback detection on an Ethernet interface	No.	No.
		Configuring flow control on an Ethernet interface	No.	No.
		Configuring the link mode of an Ethernet interface	No.	No.
		Configuring a Layer 3 Ethernet interface or subinterface	No.	No.
	Ethernet link aggregation	Layer 2 static link aggregation	Yes.	Yes.
	Ethernet link aggregation	Layer 2 dynamic link aggregation	No.	No.
	Spanning tree	Spanning tree	No.	No.
	PPPoE	PPPoE server	No.	No.
	PPPoE	PPPoE client	Yes.	Yes.
	FPGA fast forwarding	FPGA fast forwarding	No.	No.
	QinQ termination	QinQ termination	No.	No.
Layer 3 Configuration Guide	NAT	NAT	Yes.	Yes.
	DHCPv6	DHCPv6	Yes.	Yes.
	Domain name resolution	DDNS	No.	No.
	GRE	GRE	No.	No.
	Policy-based routing	Policy-based routing	No.	No.
	RIP	RIP	No.	No.
	RIP next generation	RIPng	No.	No.
IP Multicast Configuration Guide	MLD snooping	MLD snooping	Yes.	Yes.
IP Multicast Configuration Guide	IPv6 multicast VLAN	IPv6 multicast VLAN	Yes	Yes
Security Configuration Guide	AAA	PPP users	No.	No.
		Assigning PPP service types for a local user	No.	No.
		Setting the expiration time of a local user	Yes.	Yes.
		Specifying a backup source address for RADIUS packets	No.	No.
		Specifying the authentication method for PPP users	No.	No.
		Specifying the authorization method for PPP users	No.	No.
		Specifying the accounting method for PPP users	No.	No.
		Specifying the device ID used in stateful failover mode	No.	No.
		Enabling buffering of stop-accounting requests to which no responses are received	Yes.	Yes.
		Real-time accounting	Yes.	Yes.
	802.1X	802.1X stateful failover	No.	No.
	Portal	IPv6 portal server	Yes.	Yes.
		Specifying the maximum number of portal servers	32.	32.
		Configuring IPv6 portal-free rule	Yes.	Yes.
		Configuring a portal-forbidden rule	Yes.	Yes.
		Configuring a Layer 3 portal authentication to support Web proxy	Yes.	Yes.
		Configuring the MAC-based quick portal authentication	Yes.	Yes.
		Configuring stateful failover for portal authentication	No.	No.
		Specifying a device ID to be sent to a portal client	Yes.	Yes.
		Enabling host identity check through DHCP snooping	Yes.	Yes.
	Port security	Maximum number of PSK users	1024.	1024.
	Port security	Port security stateful failover	Yes.	Yes.
	Password control	Password control	Yes.	Yes.
	PKI	Maximum number of PKI domains	32.	32.
	PKI	Peer entity	Yes.	Yes.
	ARP attack protection	Enabling ARP black hole routing	Yes.	Yes.
	IPsec	IPsec stateful failover	No.	No.
	SSL VPN	SSL VPN	No.	No.
	ALG	ALG	Yes.	Yes.
	Firewall	Configuring a packet-filter firewall	Yes.	Yes.
	Firewall	Configuring an ASPF	Yes.	Yes.
	Session management	Session management	Yes	Yes
	Web filtering	Web filtering	Yes.	Yes.
	FIPS	FIPS	Yes.	Yes.
High Availability Configuration Guide	VRRP	VRRP	No.	No.
	Stateful failover	Stateful failover	No.	No.
	Interface backup	Interface backup	No.	No.
Network Management and Monitoring Configuration Guide	IPC	IPC	No.	No.
	SNMP	Configuring the SNMP proxy agent for an SNMP agent	Yes.	Yes.
	Mirroring	Port mirroring	No.	No.
	Information center	Log file	No.	No.
OAA Configuration Guide	OAA	OAP module configuration	Yes.	Yes.
Access Controller Module Basic Configuration Guide	Access controller module basic configuration	Access controller module basic configuration	No.	No.

00-About the H3C Access Controllers Configuration Guides

About the H3C access controllers configuration guides

Models of H3C access controllers

Typical network scenarios

WX2540E and WAC360/WAC361 network scenario

AC network scenario

Access controller module network scenario

Wireless switch network scenario

Feature matrixes

Feature matrix for the WX2540 and WAC360 series

Feature matrix for the WX5000 series

Feature matrix for the WX3500E series

Feature matrix for the WX6000 series

Feature matrix for the WX5500E series wireless switch

Feature matrix for the WX3000E series wireless switch

Cloud & AI

Intelligent Connection

Intelligent Computing

Intelligent Storage

Security

SMB Products

Intelligent Terminal Products

Industry Solutions

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Technical Blogs

Training & Certification

Become a Partner

Partner Policy & Program

Global Learning

Partner Sales Resources

Partner Business Management

Service Business

Profile

News & Events

Online Exhibition Center

Contact Us