Field	Description
Capture Type	Capture types: · Client—Client-based WLAN sniffer. · Radio—Radio-based WLAN sniffer.
AP Name	AP name.
Radio	Radio ID.
Radio Mode	Radio mode, which depends on the device model.
Channel	Channel where the radio operates to capture packets.
Capture ACL	Ethernet frame header ACL used to match the MAC addresses of clients.
Capture Limit	Maximum number of packets that can be captured.
File Name	Name of the file to save the captured packets.
Status	WLAN sniffer status: · Capturing. · Writing capture file.

wlan capture file-name

Use wlan capture file-name to set the name of the CAP file to which the captured packets are saved.

Use undo wlan capture file-name to restore the default.

Syntax

wlan capture file-name file-name

undo wlan capture file-name

Default

The name of the CAP file to which the captured packets are saved is CaptureRecord.

Views

System view

Default command level

2: System level

Parameters

file-name file-name: Specifies the name of the CAP file (without an extension) to which the captured packets are saved, a string of 1 to 31 characters.

Usage guidelines

The file has a fixed extension .dmp, which is not configurable.

You are not allowed to change the name of the CAP file during the WLAN sniffer process.

Examples

# Set the name of the CAP file to which the captured packets are saved to CaptureRecord_001.

<Sysname> system-view

[Sysname] wlan capture file-name CaptureRecord_001

wlan capture packet-limit

Use wlan capture packet-limit to set the maximum number of packets that can be captured by an AP.

Use undo wlan capture packet-limit to restore the default.

Syntax

wlan capture packet-limit packet-limit

undo wlan capture packet-limit

Default

The maximum number of packets that can be captured by an AP is 10000.

Views

System view

Default command level

2: System level

Parameters

packet-limit packet-limit: Specifies the maximum number of packets that can be captured by an AP, in the range of 1 to 10000.

Usage guidelines

You are not allowed to change the maximum number of packets that can be captured by an AP during the WLAN sniffer process.

WLAN sniffer stops when the maximum number is reached.

Examples

# Set the maximum number of packets that can be captured by an AP to 5000.

<Sysname> system-view

[Sysname] wlan capture packet-limit 5000

wlan capture start ap

Use wlan capture start ap to enable the radio-based WLAN sniffer function.

Syntax

wlan capture start ap ap-name radio radio-number

Views

System view

Default command level

2: System level

Parameters

ap ap-name: Specifies an AP name, a case-insensitive string of 1 to 32 characters.

radio radio-number: Specifies a radio number.

Usage guidelines

· An auto AP does not support the WLAN sniffer function.

· WLAN sniffer can be enabled for only one radio of an AP.

· To enable WLAN sniffer on a radio, the AP must operate in normal mode and must be in Run state, and the working channel of the radio must be manually specified.

· Disabling the sniffer-enabled radio or disabling WLAN sniffer stops the sniffer operation. The records are saved to the specified CAP file in the default storage medium with the specified name. The default storage medium varies by device model.

· The working mode of the AP cannot be changed using the work-mode monitor or device-detection enable command when it is capturing packets.

Examples

# Enable the radio-based WLAN sniffer function.

<Sysname> system-view

[Sysname] wlan capture start ap ap1 radio 1

wlan capture start client

Use wlan capture start client acl to enable the client-based WLAN sniffer function.

Syntax

wlan capture start client acl acl-number

Views

System view

Default command level

2: System level

Parameters

acl acl-number: Specifies an Ethernet frame header ACL by its number, in the range of 4000 to 4999. An Ethernet frame header ACL matches the source MAC addresses of clients.

Usage guidelines

If no rule is configured in an Ethernet frame header ACL, no MAC addresses are matched. The AP does not capture packets.

Examples

# Enable the client-based WLAN sniffer function, and configure the AP to capture the packets from MAC address 0011-0011-0011.

<Sysname> system-view

[Sysname] acl number 4400

[Sysname-acl-ethernetframe-4400] rule permit source-mac 0011-0011-0011 FFFF-FFFF-FFFF

[Sysname-acl-ethernetframe-4400] quit

[Sysname] wlan capture start client acl 4400

wlan capture stop

Use wlan capture stop to disable the WLAN sniffer function, and save the captured packets in the specified CAP file.

Syntax

wlan capture stop

Views

System view

Default command level

2: System level

Examples

# Disable the WLAN sniffer function.

<Sysname> system-view

[Sysname] wlan capture stop

AP provision configuration commands

ac

Use ac to specify the IP address or host name of an AC so that the AP can discover the AC.

Use undo ac to remove the AC configuration.

Syntax

ac { host-name host-name | ip ip-address | ipv6 ipv6-address }

undo ac { host-name | ip { ip-address | all } | ipv6 { ipv6-address | all } }

Default

No AC IP address or host name is specified.

Views

AP provision view

Default command level

2: System level

Parameters

host-name host-name: Specifies the host name of an AC, which is a case-insensitive string of 1 to 255 characters. The string can contain letters, digits, "-", "_" and ".", and must contain at least one letter.

ip ip-address: Specifies the IPv4 address of an AC.

ipv6 ipv6-address: Specifies the IPv6 address of an AC.

all: Removes the IPv4/IPv6 addresses of all ACs.

Usage guidelines

You can specify a maximum number of three AC IP addresses, three AC IPv6 addresses, and an AC host name for the AP.

The IPv6 address of an AC cannot be the link local address.

The wlan ap-provision ac command takes effect for all APs, and the ac command in AP provision view takes effect for the specified AP. If you configure both commands, the configuration in AP provision view takes effect for the AP.

Examples

# Specify the AC 192.168.100.11 so that AP 1 can discover the AC.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA3628i-AGN

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] ac ip 192.168.100.11

Related commands

wlan ap-provision ac

data-tunnel encryption enable

Use data-tunnel encryption enable to configure the AP to use IPsec to encrypt the data tunnel.

Use undo data-tunnel encryption enable to remove the configuration.

Syntax

data-tunnel encryption enable

undo data-tunnel encryption enable

Default

The AP does not encrypt the data tunnel.

Views

AP configuration view

Default command level

2: System level

Examples

# Configure the AP to use IPsec to encrypt the data tunnel.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA2620-AGN

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] tunnel encryption ipsec pre-shared-key simple 12345

[Sysname-wlan-ap-ap1-prvs] data-tunnel encryption enable

Related commands

tunnel encryption ipsec pre-shared-key

dns domain

Use dns domain to set a domain name for the AP.

Use undo dns domain to remove the configuration.

Syntax

dns domain domain-name

undo dns domain

Default

No domain name is specified for the AP.

Views

AP provision view

Default Level

2: System level

Parameters

domain-name: Specifies a domain name for the DNS server. It is a case-insensitive string of 1 to 238 characters separated by dots and can contain letters, digits, "-", and "_".

Usage guidelines

You can set only one domain name for the AP.

The wlan ap-provision dns domain command takes effect on all APs, and the dns domain command in AP provision view takes effect on the specified AP. If you configure both commands, the configuration in AP provision view applies to the specified AP.

Examples

# Set the domain name for AP 1 to com.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA3628i-AGN

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] dns domain com

Related commands

wlan ap-provision dns domain

dns server

Use dns server to set a DNS server for the AP.

Use undo dns server to remove the DNS server for the AP.

Syntax

dns server { ip ip-address | ipv6 ipv6-address }

undo dns server { ip | ipv6 }

Default

No DNS server is specified for the AP.

Views

AP provision view

Default Level

2: System level

Parameters

ip ip-address: Specifies the IPv4 address of the DNS server.

ipv6 ip-address: Specifies the IPv6 address of the DNS server.

Usage guidelines

You can specify only one IPv4 DNS server and one IPv6 DNS server.

The wlan ap-provision dns server command takes effect on all APs, and the dns server command in AP provision view takes effect on the specified AP. If you configure both commands, the configuration in AP provision view applies to the specified AP.

Examples

# Set the IPv4 address of the DNS server to 192.168.100.123.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA3628i-AGN

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] dns server ip 192.168.100.123

Related commands

wlan ap-provision dns server

dot1x supplicant eap-method

Use dot1x supplicant eap-method to set the authentication method for an AP acting as an 802.1X client.

Use undo dot1x supplicant eap-method to remove the authentication method.

Syntax

dot1x supplicant eap-method { md5 | peap-gtc | peap-mschapv2 | ttls-gtc | ttls-mschapv2 }

undo dot1x supplicant eap-method

Default

No authentication method is configured for an AP when it acts as an 802.1X client.

Views

AP template view

Default command level

2: System level

Parameters

md5: Specifies the MD5 authentication method.

peap-gtc: Specifies the PEAP-GTC authentication method.

peap-mschapv2: Specifies the PEAP-MSCHAPV2 authentication method.

ttls-gtc: Specifies the TTLS-GTC authentication method.

ttls-mschapv2: Specifies the TTLS-MSCHAPV2 authentication method.

Usage guidelines

The MD5 authentication method is used by default after you enable the 802.1X client function for the AP.

Examples

# Set the authentication method for AP 1 that acts as an 802.1X client to md5.

<Sysname> system-view

[Sysname] wlan ap ap1 model MSM460-WW

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] dot1x supplicant eap-method md5

dot1x supplicant enable

Use dot1x supplicant enable to enable the 802.1X client function for an AP.

Use undo dot1x supplicant enable to disable the 802.1X client function for an AP.

Syntax

dot1x supplicant enable

undo dot1x supplicant enable

Default

The 802.1X client is not enabled for an AP.

Views

AP template view

Default command level

2: System level

Examples

# Enable the 802.1X client function for AP 1.

<Sysname> system-view

[Sysname] wlan ap ap1 model MSM460-WW

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] dot1x supplicant enable

dot1x supplicant password

Use dot1x supplicant password to configure an authentication password for an AP acting as an 802.1X client.

Use undo dot1x supplicant password to remove the authentication password.

Syntax

dot1x supplicant password { cipher | simple } password

undo dot1x supplicant password

Default

No authentication password is configured for an AP when it acts as an 802.1X client.

Views

AP template view

Default command level

2: System level

Parameters

cipher: Sets a ciphertext password.

simple: Sets a plaintext password.

password: Specifies the password string. This argument is case sensitive. A cipher password is a string of 1 to 201 characters. A plaintext password is a string of 1 to 127 characters.

Examples

# Set the authentication password for AP 1 that acts as an 802.1X client to 123456.

<Sysname> system-view

[Sysname] wlan ap ap1 model MSM460-WW

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] dot1x supplicant password simple 123456

dot1x supplicant username

Use dot1x supplicant username to set an authentication username for an AP acting as an 802.1X client.

Use undo dot1x supplicant username remove the authentication username.

Syntax

dot1x supplicant username username

undo dot1x supplicant username

Default

No authentication username is configured for an AP when it acts as an 802.1X client.

Views

AP template view

Default command level

2: System level

Parameters

username: Specifies the authentication username for 802.1X authentication, a case-sensitive string of 1 to 253 characters.

Examples

# Set the authentication username for AP 1 that acts as an 802.1X client to aaa.

<Sysname> system-view

[Sysname] wlan ap ap1 model MSM460-WW

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] dot1x supplicant username aaa

gateway

Use gateway to set a gateway for the AP.

Use undo gateway to remove gateway configuration.

Syntax

gateway { ip ip-address | ipv6 ipv6-address }

undo gateway { ip | ipv6 | all }

Default

No gateway is specified for the AP.

Views

AP provision view

Default command level

2: System level

Parameters

ip ip-address: Specifies the IPv4 address of the gateway.

ipv6 ipv6-address: Specifies the IPv6 address of the gateway.

all: Removes all IP addresses of gateways.

Usage guidelines

You can specify only one IPv4 gateway and one IPv6 gateway for the AP.

Examples

# Set the gateway IP address for AP 1 to 192.168.100.1

<Sysname> system-view

[Sysname] wlan ap ap1 model WA3628i-AGN

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] gateway ip 192.168.100.1

initial-country-code

Use initial-country-code to set the initial country code for an AP when the AP scans the mesh network at the first startup.

Use undo initial-country-code to restore the default.

Syntax

initial-country-code code

undo initial-country-code

Default

No initial country code is configured for an AP.

Views

AP configuration view

Default command level

2: System level

Parameters

code: Specifies the initial country code for an AP.

Usage guidelines

An AP uses the initial country code configured with this command when it scans the mesh network at the first startup. Otherwise, it uses the default country code CN.

After the AP is associated with an AC, it uses the country code applied by the AC.

Examples

# Set the initial country code to AU for AP 1 when the AP scans the mesh network at the first startup.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA2620-AGN

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] initial-country-code AU

ip address

Use ip address to set the IP address of the management VLAN interface of the AP.

Use undo ip address to remove the IP address of the management VLAN interface of the AP.

Syntax

ip address ip-address { mask | mask-length }

undo ip address

Default

No IP address is specified for the management VLAN interface of an AP.

Views

AP configuration view

Default command level

2: System level

Parameters

ip-address: IP address of the management VLAN interface of the AP, in dotted decimal notation.

mask: Subnet mask in dotted decimal notation.

mask-length: Subnet mask length, the number of consecutive ones in the mask. It is in the range of 0 to 32.

Examples

# Set the IP address of the management VLAN interface of AP 1 to 192.168.100.100/24.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA3628i-AGN

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] ip address 192.168.100.100 24

ipv6 address

Use ipv6 address to set the IPv6 address of the management VLAN interface of the AP.

Use undo ipv6 address to remove the IPv6 address of the management VLAN interface of the AP.

Syntax

ipv6 address { ipv6-address prefix-length | ipv6-address/prefix-length }

undo ipv6 address

Default

No IPv6 address is specified for the management VLAN interface of the AP.

Views

AP configuration view

Default command level

2: System level

Parameters

ipv6-address: IPv6 address of the management VLAN interface of the AP.

prefix-length: Prefix length, in the range of 1 to 128.

Examples

# Set the IPv6 address of the management VLAN interface of AP 1 to 2001::1/64.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA3628i-AGN

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] ipv6 address 2001::1/64

provision

Use provision to create and enter AP provision view.

Use undo provision to remove the AP provision view and all configurations in the view.

Syntax

provision

undo provision

Default

No AP provision view is created.

Views

AP template view

Default command level

2: System level

Usage guidelines

After you create the AP provision view, the device automatically adds the vlan untagged 1 command.

An auto AP cannot be configured with the AP provision function.

Examples

# Create and enter the provision view for AP 1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA3628i-AGN

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs]

provision auto-recovery enable

Use provision auto-recovery enable to enable auto recovery of startup with zero-configuration.

Use undo provision auto-recovery enable to restore the default.

Syntax

provision auto-recovery enable

undo provision auto-recovery enable

Default

Auto recovery of startup with zero-configuration is enabled.

Views

AP template view, AP group view

Default command level

2: System level

Usage guidelines

When preprovisioned settings are configured, an AP restarts with the preprovisioned settings to establish a tunnel with the AC. If tunnel establishment fails, the AP restarts after a period of time.

If this feature is enabled, the AP restarts with zero-configuration. Otherwise, the AP continues to restart with the preprovisioned settings.

Examples

# Disable auto recovery of startup with zero-configuration for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap3 model WA3628i-AGN

[Sysname-wlan-ap-ap3] undo provision auto-recovery enable

# Disable auto recovery of startup with zero-configuration for APs in AP group office.

<Sysname> system-view

[Sysname] wlan ap-group office

[Sysname-ap-group-office] undo provision auto-recovery enable

reset wlan ap provision

Use reset wlan ap provision to remove the wlan_ap_cfg.wcfg file of the specified AP or all APs.

Syntax

reset wlan ap provision { all | name ap-name }

Views

Any view

Default command level

2: System level

Parameters

all: Specifies all APs.

name ap-name: Specifies an AP by its name, which is a string of 1 to 32 characters that can contain case-insensitive letters and digits, and special characters such as underscore(_), left bracket ([), right bracket (]), slash (/), hyphen (-), and spaces.

Usage guidelines

This command takes effect only on APs in Run state.

Examples

# AP 1 has been connected to the AC. Remove the wlan_ap_cfg.wcfg file of AP 1.

<Sysname> reset wlan ap provision name ap1

save wlan ap provision

Use save wlan ap provision to save the configuration in AP provision view to the wlan_ap_cfg.wcfg file of the specified AP or all APs.

Syntax

save wlan ap provision { all | name ap-name }

Views

Any view

Default command level

2: System level

Parameters

all: Specifies all APs.

name ap-name: Specifies an AP by its name, a string of 1 to 32 characters that can contain case-insensitive letters and digits, and special characters such as underscore(_), left bracket ([), right bracket (]), slash (/), hyphen (-), and spaces.

Usage guidelines

· This command takes effect only on APs in Run state. It does not take effect on APs that establish a connection with the AC after you execute the save wlan ap-provision command.

· After you execute the save wlan ap-provision command, restart the specified AP to validate the configuration.

· After restart, the AP executes the configuration file, the wlan_ap_cfg.wcfg file, and the configuration file specified by the map-configuration command in turn. Make sure the wlan_ap_cfg.wcfg file and the configuration file specified by the map-configuration command are correct because wrong configurations may make the three configuration files overwrite or conflict with one another.

· After you execute the save wlan ap provision command on the AC, the configuration is saved to the wlan_ap_cfg.wcfg file of the specified AP. When the wlan_ap_cfg.wcfg file takes effect, the AP can only be managed by the AC specified by the ac or wlan ap-provision ac command. Make sure the correct AC is specified; otherwise, the AP cannot be managed by the specified AC, and you have to log in to the AP to modify its configuration.

Examples

# AP 1 has established a connection with the AC. Save the configuration in AP provision view to the wlan_ap_cfg.wcfg file of AP 1.

<Sysname> save wlan ap provision name ap1

Related commands

· map-configuration

· reset wlan ap provision

· reset wlan ap

tunnel encryption ipsec pre-shared-key

Use tunnel encryption ipsec pre-shared-key to configure the AP to use IPsec to encrypt the control tunnel.

Use undo tunnel encryption ipsec pre-shared-key to remove the configuration.

Syntax

tunnel encryption ipsec pre-shared-key { cipher | simple } key

undo tunnel encryption ipsec pre-shared-key

Default

The AP does not encrypt the control tunnel.

Views

AP configuration view

Default command level

2: System level

Parameters

cipher: Specifies a ciphertext key.

simple: Specifies a plaintext key.

key: Encryption key. It is a case-sensitive string of 1 to 128 characters for a plaintext key, or a case-sensitive string of 1 to 201 characters for a ciphertext key.

Usage guidelines

This command only enables the AP to encrypt the control tunnel. To enable the AP to encrypt the data tunnel, use the data-tunnel encryption enable command. The undo tunnel encryption ipsec pre-shared-key command removes the configuration for both data tunnel encryption and control tunnel encryption.

Examples

# Configure the AP to use plaintext key 12345 to encrypt the control tunnel.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA2620-AGN

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] tunnel encryption ipsec pre-shared-key simple 12345

Related commands

data-tunnel encryption enable

vlan pvid

Use vlan pvid to set the default VLAN ID of the Ethernet interface on the AP.

Use undo vlan pvid to restore the default.

Syntax

vlan pvid vlan-id

undo vlan pvid

Default

The default VLAN ID of the Ethernet interface on an AP is 1.

Views

AP configuration view

Default command level

2: System level

Parameters

vlan-id: Default VLAN ID of the Ethernet interface on the AP. It is in the range of 1 to 4094.

Examples

# Set the default VLAN ID of the Ethernet interface on AP 1 to 5.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA3628i-AGN

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] vlan pvid 5

vlan tagged

Use vlan tagged to set a list of VLANs whose packets are sent tagged on the Ethernet interface of the AP.

Syntax

vlan tagged vlan-id-list

undo vlan tagged vlan-id-list

Default

No packets are sent tagged on the Ethernet interface on the AP.

Views

AP configuration view

Default command level

2: System level

Parameters

vlan-id-list: Specifies a list of VLANs whose packets are sent tagged on the Ethernet interface of the AP. It is in the format of vlan-id-list = { vlan-id1 [ to vlan-id2 ] }& <1-10>, where vlan-id ranges from 1 to 4094 and &<1-10> indicates that you can specify up to 10 VLAN IDs.

Examples

# Configure packets in VLAN 6 to be sent tagged on the Ethernet interface on AP 1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA3628i-AGN

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] vlan tagged 6

vlan untagged

Use vlan untagged to configure a list of VLANs whose packets are sent untagged on the Ethernet interface of the specified AP.

Use undo vlan tagged to remove the configuration.

Syntax

vlan untagged vlan-id-list

undo vlan untagged vlan-id-list

Default

The packets of VLAN 1 are sent untagged on the Ethernet interface of the specified AP.

Views

AP configuration view

Default command level

2: System level

Parameters

vlan-id-list: Specifies a list of VLANs whose packets are sent untagged on the Ethernet interface of the AP. It is in the format of vlan-id-list = { vlan-id1 [ to vlan-id2 ] }& <1-10>, where vlan-id ranges from 1 to 4094 and &<1-10> indicates that you can specify up to 10 VLAN IDs.

Examples

# Configure packets in VLAN 7 to be sent untagged on the Ethernet interface of AP 1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA3628i-AGN

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] vlan untagged 7

wlan ap-provision ac

Use wlan ap-provision ac to set a global AC so that all APs can discover the AC.

Use undo wlan ap-provision ac to restore the default.

Syntax

wlan ap-provision ac { host-name host-name | ip ip-address | ipv6 ipv6-address }

undo wlan ap-provision ac { host-name | ip { ip-address | all } | ipv6 { ipv6-address | all } }

Default

No global AC is specified.

Views

System view

Default command level

2: System level

Parameters

host-name host-name: Specifies the host name of a global AC. It is a case-insensitive string of 1 to 255 characters, which can contain letters, digits, "-", "_" and ".", and must contain at least one letter.

ip ip-address: Specifies the IPv4 address of a global AC.

ipv6 ipv6-address: Specifies the IPv6 address of a global AC.

all: Removes the IPv4/IPv6 addresses of all global ACs.

Usage guidelines

The wlan ap-provision ac command takes effect on all APs, and the ac command in AP provision view takes effect on the specified AP. If you configure both commands, the configuration in AP provision view is preferred by the specified AP.

You can specify a maximum number of three AC IP addresses, three AC IPv6 addresses, and an AC host name for all APs.

Examples

# Set the IPv4 address of the global AC to 192.168.100.11 so that all APs can discover the AC.

<Sysname> system-view

[Sysname] wlan ap-provision ac ip 192.168.100.11

Related commands

wlan ap-provision dns domain

Use wlan ap-provision dns domain to set a global domain name.

Use undo wlan ap-provision dns domain to remove the configuration.

Syntax

wlan ap-provision dns domain domain-name

undo wlan ap-provision dns domain

Default

No global domain name is specified.

Views

System view

Default Level

2: System level

Parameters

domain-name: Specifies a domain name. It is a case-insensitive string of 1 to 238 characters separated by dots, which can contain letters, digits, "-", and "_".

Usage guidelines

You can specify only one global domain name.

Examples

# Set the global domain name to com.

<Sysname> system-view

[Sysname] wlan ap-provision dns domain com

Related commands

dns domain

wlan ap-provision dns server

Use wlan ap-provision dns server to specify a global DNS server.

Use undo wlan ap-provision dns server to remove the configuration.

Syntax

wlan ap-provision dns server { ip ip-address | ipv6 ipv6-address }

undo wlan ap-provision dns server { ip | ipv6 }

Default

No global DNS server is specified.

Views

System view

Default Level

2: System level

Parameters

ip ip-address: Specifies a global DNS server by its IPv4 address.

ipv6 ip-address: Specifies a global DNS server by its IPv6 address.

Usage guidelines

You can specify only one global IPv4 DNS server and one global IPv6 DNS server.

Examples

# Specify the global DNS server with the IPv4 address 192.168.100.124.

<Sysname> system-view

[Sysname] wlan ap-provision dns server ip 192.168.100.124

Related commands

dns server

VLAN pool configuration commands

Support for the commands in this chapter depends on the device model. For more information, see About the H3C Access Controllers Command References.

display wlan statistics client vlan-pool

Use display wlan statistics client vlan-pool to display statistics about a VLAN pool.

Syntax

display wlan statistics client vlan-pool vlan-pool-name [ | { begin | exclude | include } regular-expression ]

Views

Any view

Default command level

1: Monitor level

Parameters

vlan-pool-name: Specifies a VLAN pool by its name, a case-insensitive string of 1 to 16 characters.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Examples

# Display statistics about the specified VLAN pool.

<Sysname> display wlan statistic client vlan-pool office

VLAN Pool Information

VLAN Pool Name : office

VLAN List : 1 to 6, 10, 12

VLANs in Use : 1 to 5, 10, 12

Total Clients : 59

--------------------------------------------------------------------------------

VLAN ID Number of Clients

--------------------------------------------------------------------------------

1 10

2 6

3 10

4 9

5 9

10 7

12 8

--------------------------------------------------------------------------------

Table 2 Command output

Field	Description
VLAN Pool Name	VLAN pool name.
VLAN List	VLAN IDs in the VLAN pool.
VLANs in Use	VLANs used by clients. After a client goes online by using the VLAN ID assigned by the VLAN pool, if you remove the VLAN ID from the VLAN pool, this field still displays the VLAN ID.
Total Clients	Total number of online clients that obtain VLAN IDs through the VLAN pool.
VLAN ID	Assigned VLAN IDs in the VLAN pool.
Number of Clients	Number of clients corresponding to each VLAN ID. This field displays the number of clients that obtain VLAN IDs through the VLAN pool, but not the clients that obtain VLAN IDs through other methods such as a server-assigned VLAN.

vlan-id

Use vlan-id to add VLANs to a VLAN pool.

Syntax

vlan-id vlan-list

undo vlan-id { vlan-list | all }

Views

VLAN pool view

Default command level

2: System level

Parameters

vlan-list: Specifies a list of VLANs, in the format of vlan-id-list = { vlan-id1 [ to vlan-id2 ] }, where vlan-id is in the range of 1 to 4094.

all: Specifies all VLANs in the VLAN pool.

Examples

# Add VLANs to a VLAN pool.

<Sysname> system

[Sysname] wlan vlan-pool office

[Sysname-wlan-vp-office] vlan-id 3 5 to 8

work-mode static

Use work-mode static to enable static VLAN assignment.

Use undo work-mode static to restore the default.

Syntax

work-mode static

undo work-mode static

Default

Static VLAN assignment is disabled.

Views

VLAN pool view

Default command level

2: System level

Usage guidelines

To avoid frequent VLAN changes, you can enable static VLAN assignment. This feature allows a client to use the VLAN that has been assigned to it when the client comes online again by using the same SSID.

Examples

# Enable static VLAN assignment.

<Sysname> system

[Sysname] wlan vlan-pool office

[Sysname-wlan-vp-office] work-mode static

wlan vlan-pool

Use wlan vlan-pool to create a VLAN pool and enter its view.

Use undo wlan vlan-pool to remove the specified VLAN pool.

Syntax

wlan vlan-pool vlan-pool-name

undo wlan vlan-pool vlan-pool-name

Default

No VLAN pool exists.

Views

System view

Default command level

2: System level

Parameters

vlan-pool-name: Specifies the VLAN pool name, a case-insensitive string of 1 to 16 characters.

Usage guidelines

You can create up to 32 VLAN pools.

Examples

# Create a VLAN pool named office.

<Sysname> system-view

[Sysname] wlan vlan-pool office

[Sysname-wlan-vp-office]

Wireless location configuration commands

Support for the commands in this chapter depends on the device model. For more information, see About the H3C Access Controllers Command References.

display wlan rfid-tracking radio

Use display wlan rfid-tracking radio to display radio information for wireless location.

Syntax

display wlan rfid-tracking radio [ ap ap-name radio radio-id ] [ | { begin | exclude | include } regular-expression ]

Views

Any view

Default command level

2: System level

Parameters

ap ap-name: Displays radio information about the specified AP. If no AP is specified, radio information about all APs is displayed.

radio radio-id: Displays information about the specified radio. If you do not provide the option, information about all radios is displayed.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Examples

# Display radio information for wireless location.

<Sysname> display wlan rfid-tracking radio

WLAN RFID Tracking

--------------------------------------------------------------------------------

AP Radio Mode

--------------------------------------------------------------------------------

2220 1 MU/Tag

AP_wa2620e_agn_1 1 MU

AP_wa2620e_agn_1 2 Tag

AP_wa2620e_agn_2 1 N/A

--------------------------------------------------------------------------------

Table 3 Command output

Field	Description
AP	AP name.
Radio	Radio ID.
Mode	Wireless location mode: · MU/Tag—Supports both MU and Tag modes. · MU—MU mode. · Tag—Tag mode. · N/A—No wireless location mode is configured.

rfid-tracking engine-address

Use rfid-tracking engine-address to set an IPv4 address for the wireless location server. The AP uses this IP address as the destination address to send location frames to the location server.

Use undo rfid-tracking engine-address to restore the default.

Syntax

rfid-tracking engine-address engine-address

undo rfid-tracking engine-address

Default

No IPv4 address is configured for the location server.

View

AP template view, AP group view

Default command level

2: System level

Parameters

engine-address: Specifies an IPv4 address for the location server.

Usage guidelines

This command is available only when the wireless location method is static.

When you change the wireless location method from static to dynamic, the command becomes unavailable and restores to its default setting.

Examples

# In AP template view, set the IPv4 address of the location server to 192.168.10.10.

<Sysname> system-view

[Sysname] wlan ap ap1 model MSM460-WW

[Sysname-ap-ap1] rfid-tracking engine-address 192.168.10.10

# In AP group view, set the IPv4 address of the location server to 192.168.10.10.

<Sysname> system-view

[Sysname] wlan ap-group 10

[Sysname-ap-group10] rfid-tracking engine-address 192.168.10.10

Related commands

wlan rfid-tracking engine-detection

rfid-tracking mode

Use rfid-tracking mode to set the wireless location mode.

Use undo rfid-tracking mode to restore the default.

Syntax

rfid-tracking mode { all | mu | tag }

undo rfid-tracking mode { all | mu | tag }

Default

No wireless location mode is configured.

Views

Radio view

Default command level

2: System level

Parameters

all: Supports both tag and mu modes.

tag: Specifies the AeroScout-proprietary mode. Wireless devices in this mode are provided by AeroScout.

mu: Specifies the mu mode. Wireless location devices in this mode refer to all wireless devices such as mobiles phones, wireless network interface cards, and APs compliant with 802.11 protocols.

Examples

# Set the wireless location mode.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA3628i-AGN

[Sysname-wlan-ap-ap1] radio 1

[Sysname-wlan-ap-ap1-radio-1] rfid-tracking mode tag

Related commands

wlan rfid-tracking engine-detection

rfid-tracking omnitrail apid

Use rfid-tracking omnitrail apid to set the AP identifier for OmniTrail location.

Use undo rfid-tracking omnitrail apid to restore the default.

Syntax

rfid-tracking omnitrail apid { ascii ascii-string | hex hex-string }

undo rfid-tracking omnitrail apid

Default

No AP identifier is specified for OmniTrail location.

Views

AP template view

Default command level

2: System level

Parameters

ascii ascii-string: Specifies an ASCII string of 1 to 12 characters.

hex hex-string: Specifies a hexadecimal string of 1 to 24 characters.

Examples

# Set the AP identifier for OmniTrail location to hexadecimal string 1234.

<Sysname> system-view

[Sysname] wlan ap ap3 model WA3628i-AGN

[Sysname-wlan-ap-ap3] rfid-tracking omnitrail apid hex 1234

rrm-report send-inhibitory enable

Use rrm-report send-inhibitory enable to enable channel scanning report suppression.

Use undo rrm-report send-inhibitory enable to restore the default.

Syntax

rrm-report send-inhibitory enable

undo rrm-report send-inhibitory

Default

Channel scanning report suppression is disabled.

Views

AP template view

Default command level

2: System level

Usage guidelines

When this feature is enabled, an AP reports a maximum of one scanning report every 10 seconds. Whether to send the report depends on the scanning status and scanning result.

This feature is available only when wireless location is enabled and WLAN RRM is not configured.

Examples

# Enable channel scanning report suppression.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA3628i-AGN

[Sysname-wlan-ap-ap1] rrm-report send-inhibitory enable

wlan rfid-tracking antenna-change-report min-interval

Use wlan rfid-tracking antenna-change-report min-interval to set the minimum interval at which APs report client antenna changes.

Use undo wlan rfid-tracking antenna-change-report min-interval to restore the default.

Syntax

wlan rfid-tracking antenna-change-report min-interval value

undo wlan rfid-tracking antenna-change-report min-interval

Default

APs report client antenna changes at a minimum interval of 10 seconds.

Views

System view

Default command level

2: System level

Parameters

value: Specifies the minimum interval at which APs report client antenna changes, in the range of 1 to 60 seconds.

Usage guidelines

This feature takes effect only when fingerprint location is enabled.

Examples

# Set the minimum interval at which APs report client antenna changes to 5 seconds.

<Sysname> system-view

[Sysname] wlan rfid-tracking antenna-change-report min-interval 5

wlan rfid-tracking client-rate-limit

Use wlan rfid-tracking client-rate-limit to set the rate at which a client sends wireless location frames to the location server. The excessive frames are discarded when the configured rate is exceeded.

Use undo wlan rfid-tracking client-rate-limit to restore the default.

Syntax

wlan rfid-tracking client-rate-limit cir [ cbs cbs ]

undo wlan rfid-tracking client-rate-limit

Default

Client wireless location frame sending rate is not limited.

Views

System view

Default command level

2: System level

Parameters

cir: Specifies the committed information rate in the range of 1 to 1300000 Kbps.

cbs cbs: Specifies the committed burst size in the range of 80 to 130000000 bytes.

Usage guidelines

The dilution factor and dilution timeout configurations do not take effect after you configure this command.

Examples

# Limit the committed information rate to 1 Kbps, and the committed burst size to 1000 bytes.

<Sysname> system-view

[Sysname] wlan rfid-tracking client-rate-limit 1 cbs 1000

Related commands

wlan rfid-tracking dilution

wlan rfid-tracking cupid ap-report enable

Use wlan rfid-tracking cupid ap-report enable to enable AP reporting for CUPID location.

Use undo wlan rfid-tracking cupid ap-report enable to restore the default.

Syntax

wlan rfid-tracking cupid ap-report enable

undo wlan rfid-tracking cupid ap-report enable

Default

AP reporting for CUPID location is disabled.

Views

System view

Default command level

2: System level

Usage guidelines

This feature enables APs to periodically send AP and client information to the CUPID location server for wireless location. The AP and client information includes AP serial ID, AP MAC address, radio information, client MAC address, and client encryption information.

Examples

# Enable AP reporting.

<Sysname> system-view

[Sysname] wlan rfid-tracking cupid ap-report enable

wlan rfid-tracking cupid ap-report interval

Use wlan rfid-tracking cupid ap-report interval to set the AP reporting interval.

Use undo wlan rfid-tracking cupid ap-report interval to restore the default.

Syntax

wlan rfid-tracking cupid ap-report interval interval

undo wlan rfid-tracking cupid ap-report interval

Default

The AP reporting interval is 2 seconds.

Views

System view

Default command level

2: System level

Parameters

interval: Specifies the AP reporting interval in the range of 1 to 10 seconds.

Examples

# Set the AP reporting interval to 5 seconds.

<Sysname> system-view

[Sysname] wlan rfid-tracking cupid ap-report interval 5

wlan rfid-tracking cupid unassociated-measurement enable

Use wlan rfid-tracking cupid unassociated-measurement enable to enable CUPID location for unassociated clients.

Use undo wlan rfid-tracking cupid unassociated-measurement enable to restore the default.

Syntax

wlan rfid-tracking cupid unassociated-measurement enable

undo wlan rfid-tracking cupid unassociated-measurement enable

Default

CUPID location for unassociated clients is disabled.

Views

System view

Default command level

2: System level

Examples

# Enable CUPID location for unassociated clients.

<Sysname> system-view

[Sysname] wlan rfid-tracking cupid unassociated-measurement enable

wlan rfid-tracking cupid unassociated-measurement rssi-threshold

Use wlan rfid-tracking cupid unassociated-measurement rssi-threshold to set the RSSI threshold for unassociated client CUPID location.

Use undo wlan rfid-tracking cupid unassociated-measurement rssi-threshold to restore the default.

Syntax

wlan rfid-tracking cupid unassociated-measurement rssi-threshold rssi

undo wlan rfid-tracking cupid unassociated-measurement rssi-threshold rssi

Default

No RSSI threshold is specified for unassociated client CUPID location.

Views

System view

Default command level

2: System level

Parameters

rssi: Specifies the RSSI threshold in the range of 5 to 100. The system does not perform CUPID location on an unassociated client if the RSSI of the client is lower than the threshold.

Examples

# Set the RSSI threshold for unassociated client CUPID location to 20.

<Sysname> system-view

[Sysname] wlan rfid-tracking cupid unassociated-measurement rssi-threshold 20

wlan rfid-tracking dilution

Use wlan rfid-tracking dilution to set a dilution factor and dilution timeout for wireless location frames.

Use undo wlan rfid-tracking dilution to restore the default.

Syntax

wlan rfid-tracking dilution factor factor timeout timeout

undo wlan rfid-tracking dilution

Default

No dilution factor and dilution timeout are configured.

Views

System view

Default command level

2: System level

Parameters

factor factor: Specifies the dilution factor for wireless location frames, in the range of 1 to 10000. A dilution factor restricts the number of frames reported by the AP to the location server. For example, if you configure the dilution factor as 10, the AP sends a wireless location frame to the location server every time it receives 10 wireless frames from a client (excluding management and broadcast frames).

timeout timeout: Specifies the dilution timeout for wireless location frames, in the range of 1 to 60 seconds. When this option is specified, if the number of wireless frames does not reach the dilution factor within the timeout, the AP sends the most recent frame it received to the location server.

Usage guidelines

This command is available only when the wireless location method is static.

When you change the wireless location method from static to dynamic, the command becomes unavailable and restores to its default setting.

This command does not take effect when wireless location frame rate limit is configured.

Examples

# Set both the dilution factor and timeout to 10 for wireless location packets.

<Sysname> system-view

[Sysname] wlan rfid-tracking dilution factor 10 timeout 10

Related commands

· wlan rfid-tracking engine-detection

· wlan rfid-tracking rate-limit

wlan rfid-tracking enable

Use wlan rfid-tracking enable to enable wireless location.

Use undo wlan rfid-tracking enable to restore the default.

Syntax

wlan rfid-tracking enable

undo wlan rfid-tracking enable

Default

Wireless location is disabled.

Views

System view

Default command level

2: System level

Examples

# Enable wireless location.

<Sysname> system-view

[Sysname] wlan rfid-tracking enable

wlan rfid-tracking engine-detection

Use wlan rfid-tracking engine-detection to set the wireless location method.

Use undo wlan rfid-tracking engine-detection to restore the default.

Syntax

wlan rfid-tracking engine-detection { static | dynamic }

undo wlan rfid-tracking engine-detection

Default

The static wireless location method is used.

Views

System view

Default command level

2: System level

Parameters

static: Specifies the static wireless location method.

dynamic: Specifies the dynamic wireless location method.

Usage guidelines

You can change the wireless location method only when wireless location is disabled.

This command is available only when the wireless location protocol is AeroScout.

Examples

# Set the wireless location method to dynamic.

<Sysname> system-view

[Sysname] wlan rfid-tracking engine-detection dynamic

wlan rfid-tracking engine-type

Use wlan rfid-tracking engine-type to set the wireless location protocol.

Use undo wlan rfid-tracking engine-type to restore the default.

Syntax

wlan rfid-tracking engine-type { aero-scout | general [ mode { fingerprint | cupid } ] | omnitrail }

undo wlan rfid-tracking engine-type

Default

The AeroScout protocol is used for wireless location.

Views

System view

Default command level

2: System level

Parameters

aero-scout: Specifies the AeroScout protocol.

general: Specifies a general wireless location protocol.

mode fingerprint: Specifies the fingerprint location mode. By default, the general wireless location protocol uses the fingerprint location mode.

mode cupid: Specifies the CUPID location mode.

omnitrail: Specifies the OmniTrail protocol.

Usage guidelines

If the wireless location protocol is general or OmniTrail, only the static wireless location method can be used. If the wireless location protocol is AeroScout, both static and dynamic wireless location methods can be used.

You can change the protocol for wireless location only when wireless location is disabled.

Examples

# Set the protocol for wireless location to AeroScout.

<Sysname> system-view

[Sysname] wlan rfid-tracking engine-type aero-scout

wlan rfid-tracking fingerprint cupid-report enable

Use wlan rfid-tracking fingerprint cupid-report enable to enable an AP to send fingerprint location packets in CUPID packet format.

Use undo wlan rfid-tracking fingerprint cupid-report enable to restore the default.

Syntax

wlan rfid-tracking fingerprint cupid-report enable

undo wlan rfid-tracking fingerprint cupid-report enable

Default

An AP sends fingerprint location packets in fingerprint packet format.

Views

System view

Default command level

2: System level

Examples

# Enable an AP to send fingerprint location packets in CUPID packet format.

<Sysname> system-view

[Sysname] wlan rfid-tracking fingerprint cupid-report enable

wlan rfid-tracking ignore

Use wlan rfid-tracking ignore to enable ignoring AP frames or beacon frames.

Use undo wlan rfid-tracking ignore to restore the default.

Syntax

wlan rfid-tracking ignore { ap-frame | beacon }

undo wlan rfid-tracking ignore { ap-frame | beacon }

Default

AP frames and beacon frames are not ignored.

Views

System view

Default command level

2: System level

Parameters

ap-frame: Specifies AP frames.

beacon: Specifies beacon frames.

Usage guidelines

Ignoring beacon frames prevents traffic flood to the location server. Ignoring AP frames saves uplink bandwidth and improves the server's performance. When this command is enabled, the wireless location module does not process received beacon frames or AP frames.

Examples

# Enable ignoring beacon frames.

<Sysname> system-view

[Sysname] wlan rfid-tracking ignore beacon

# Enable ignoring AP frames.

<Sysname> system-view

[Sysname] wlan rfid-tracking ignore ap-frame

wlan rfid-tracking ignore radio-mode

Use wlan rfid-tracking ignore radio-mode to enable the AC to ignore radio modes.

Use undo wlan rfid-tracking ignore radio-mode to restore the default.

Syntax

wlan rfid-tracking ignore radio-mode

undo wlan rfid-tracking ignore radio-mode

Default

Ignoring radio modes is enabled.

Views

System view

Default command level

2: System level

Usage guidelines

This command is available only when the wireless location method is dynamic.

Examples

# Disable the AC from ignoring radio modes.

<Sysname> system-view

[Sysname] undo wlan rfid-tracking ignore radio-mode

wlan rfid-tracking omnitrail

Use wlan rfid-tracking omnitrail to specify the server port to which OmniTrail location packets are reported.

Use undo wlan rfid-tracking omnitrail to restore the default.

Syntax

wlan rfid-tracking omnitrail { data-port-2g port-number | data-port-5g port-number }

undo wlan rfid-tracking omnitrail { data-port-2g | data-port-5g }

Default

No server port is specified for OmniTrail location packets to be reported.

Views

System view

Default command level

2: System level

Parameters

data-port-2g port-number: Specifies the server port to which 2.4 GHz radios report packets, in the range of 0 to 65535.

data-port-5g port-number: Specifies the server port to which 5 GHz radios report packets, in the range of 0 to 65535.

Examples

# Specify the server port to which 2.4 GHz radios report OmniTrail location packets as 1000.

<Sysname> system-view

[Sysname] wlan ap ap3 model WA3628i-AGN

[Sysname-wlan-ap-ap3] rfid-tracking omnitrail apid hex 1234

wlan rfid-tracking raw-frame-report enable

Use wlan rfid-tracking raw-frame-report enable to enable raw frame reporting.

Use undo wlan rfid-tracking raw-frame-report enable to restore the default.

Syntax

wlan rfid-tracking raw-frame-report enable

undo wlan rfid-tracking raw-frame-report enable

Default

Raw frame reporting is enabled.

Views

System view

Default command level

2: System level

Usage guidelines

This feature takes effect only when fingerprint location is enabled.

This feature enables an AP to encapsulate both the raw frames and the location information obtained from the frames in location packets.

Examples

# Enable raw frame reporting.

<Sysname> system-view

[Sysname] undo wlan rfid-tracking raw-frame-report enable

wlan rfid-tracking rate-limit

Use wlan rfid-tracking rate-limit to set the rate at which the AP sends wireless location frames to the location server to prevent wireless location frame flood to the location server. The excessive frames are discarded when the configured rate is exceeded.

Use undo wlan rfid-tracking rate-limit to restore the default.

Syntax

wlan rfid-tracking rate-limit cir [ cbs cbs ]

undo wlan rfid-tracking rate-limit

Default

AP wireless location frame sending rate is not limited.

Views

System view

Default command level

2: System level

Parameters

cir: Sets the committed information rate in the range of 8 to 1300000 Kbps.

cbs cbs: Sets the committed burst size in the range of 500 to 130000000 bytes.

Usage guidelines

The dilution factor and dilution timeout configurations do not take effect after you configure this command.

Examples

# Limit the committed information rate to 16 Kbps, and the committed burst size to 3000 bytes.

<Sysname> system-view

[Sysname] wlan rfid-tracking rate-limit 16 cbs 3000

Related commands

wlan rfid-tracking dilution

wlan rfid-tracking rssi-threshold

Use wlan rfid-tracking rssi-threshold to set an RSSI threshold for wireless location frames. When the RSSI of the wireless frames received by the AP is lower than the RSSI threshold, the wireless location module does not process these frames.

Use undo wlan rfid-tracking rssi-threshold to restore the default.

Syntax

wlan rfid-tracking rssi-threshold rssi-threshold

undo wlan rfid-tracking rssi-threshold

Default

No RSSI threshold is configured.

Views

System view

Default command level

2: System level

Parameters

rssi-threshold: Specifies an RSSI threshold for wireless location packets, in the range of 5 to 100.

Examples

# Set the RSSI threshold for wireless location packets to 40.

<Sysname> system-view

[Sysname] wlan rfid-tracking rssi-threshold 40

wlan rfid-tracking tag-multicast-address

Use wlan rfid-tracking tag-multicast-address to specify a multicast MAC address for Tags.

Use undo wlan rfid-tracking tag-multicast-address to restore the default.

Syntax

wlan rfid-tracking tag-multicast-address mac-address

undo wlan rfid-tracking tag-multicast-address

Default

No multicast MAC address is specified for Tags.

Views

System view

Default command level

2: System level

Parameters

mac-address: Specifies a MAC address.

Usage guidelines

An AP identifies a Tag by the destination MAC address in the received wireless packet. Location information about Tags with a matched destination MAC address will be reported to the location server.

Examples

# Specify a multicast MAC address for Tags as 010c-cc00-0000.

<Sysname> system-view

[Sysname] wlan rfid-tracking tag-multicast-address 010c-cc00-0000

wlan rfid-tracking vendor-port

Use wlan rfid-tracking vendor-port to set the port number for the location server vendor.

Use undo wlan rfid-tracking vendor-port to restore the default.

Syntax

wlan rfid-tracking vendor-port vendor-port-value

undo wlan rfid-tracking vendor-port

Default

The port number for the location server vendor is 1144.

Views

System view

Default command level

2: System level

Parameters

vendor-port vendor-port-value: Port number for the wireless location server vendor, in the range of 0 to 65535.

Examples

# Set the port number for the location server vendor to 3000.

<Sysname> system-view

[Sysname] wlan rfid-tracking vendor-port 3000

Multicast optimization configuration commands

Support for the commands in this chapter depends on the device model. For more information, see About the H3C Access Controllers Command References.

display wlan multicast optimization

Use display wlan multicast optimization to display multicast optimization information.

Syntax

display wlan multicast optimization { all | ap-name ap-name radio radio-id } [ | { begin | exclude | include } regular-expression ]

Views

Any view

Default command level

1: Monitor level

Parameters

all: Specifies all APs.

ap-name ap-name radio radio-id: Specifies an AP by its name and a radio by its ID.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Examples

# Display multicast optimization information for radios on all APs.

<Sysname> display wlan multicast optimization all

Multicast Optimization Information

AP Name: ap1

Radio: 2

Total clients: 7

Action: Optimize

Multicast Address: 229.0.0.1

MAC Address:

8234-1101-1116, 8234-1101-1117

Multicast Address: 229.0.0.2

MAC Address:

8234-1101-1116, 8234-1101-1117

Multicast Address: FF00:AC1E:A::1

MAC Address:

8234-1101-1116, 8234-1101-1117, 8234-1101-1118

# Display multicast optimization information for radio 2 on AP 1.

<Sysname> display wlan multicast optimization ap1 radio 2

Multicast Optimization Information

Total clients: 7

Action: Halt

Multicast Address: 229.0.0.1

MAC Address:

8234-1101-1116, 8234-1101-1117

Multicast Address: 229.0.0.2

MAC Address:

8234-1101-1116, 8234-1101-1117

Multicast Address: FF00:AC1E:A::1

MAC Address:

8234-1101-1116, 8234-1101-1117, 8234-1101-1118

Table 4 Command output

Field	Description
AP Name	The name of an AP.
Radio ID	The Radio ID clients used to access an AP.
Total clients	Total number of clients served by multicast optimization. If a client joins multiple multicast groups, the client is counted as multiple clients. For example, if a client has joined two multicast groups through a radio, the client is counted as two clients by multicast optimization.
Action	Operating status of the multicast optimization function: · Optimize—The multicast optimization function is operating. · Halt—The multicast optimization function is halted.
Multicast Address	Address of the multicast group that the clients has joined.
MAC Address	MAC addresses of the clients that have joined the multicast group.

multicast optimization enable

Use multicast optimization enable to enable multicast optimization.

Use undo multicast optimization enable to restore the default.

Syntax

multicast optimization enable

undo multicast optimization enable

Default

Multicast optimization is disabled.

Views

Service template view

Default command level

2: System level

Examples

# Enable multicast optimization for service template 1.

<Sysname> system-view

[Sysname] wlan service-template 1 clear

[Sysname-wlan-st-1] multicast optimization enable

wlan multicast optimization aging-time

Use wlan multicast optimization aging-time to set the aging time for multicast optimization entries.

Use undo wlan multicast optimization aging-time to restore the default.

Syntax

wlan multicast optimization aging-time time

undo wlan multicast optimization aging-time

Default

The aging time for multicast optimization entries is 260 seconds.

Views

System view

Default command level

2: System level

Parameters

time: Specifies the aging time for multicast optimization entries, in the range of 200 to 1000 seconds.

Usage guidelines

If the AP does not receive any IGMP report from a client within the aging time, the AP removes the client from the multicast optimization entry.

Enable IGMP snooping on the AC before enabling multicast optimization and configure the aging time of multicast optimization entries to be greater than the aging time of IGMP snooping dynamic member ports.

Examples

# Set the aging time for multicast optimization entries to 300 seconds.

<Sysname> system-view

[Sysname] wlan multicast optimization aging-time 300

Related commands

· display wlan multicast optimization

· igmp-snooping enable in IP Multicast Commands.

· igmp-snooping host-aging-time in IP Multicast Commands.

wlan multicast optimization threshold

Use wlan multicast optimization threshold to set the maximum number of clients supported by multicast optimization.

Use undo wlan multicast optimization threshold to restore the default.

Syntax

wlan multicast optimization threshold threshold-value

undo wlan multicast optimization threshold

Default

The maximum number of clients supported by multicast optimization is 6.

Views

System view

Default command level

2: System level

Parameters

threshold-value: Specifies the maximum number of clients supported by multicast optimization, in the range of 2 to 124.

Usage guidelines

If a client joins multiple multicast groups, the client is counted as multiple clients in multicast optimization statistics. For example, if a client has joined two multicast groups, the client is counted as two clients in the multicast optimization statistics.

Each client can join eight multicast groups at most.

Examples

# Set the maximum number of clients allowed for multicast optimization to 7.

<Sysname> system-view

[Sysname] wlan multicast optimization threshold 7

wlan multicast optimization threshold-action

Use wlan multicast optimization threshold-action to set the action to take when the maximum number of clients supported multicast optimization is reached.

Use undo wlan multicast optimization threshold-action to restore the default.

Syntax

wlan multicast optimization threshold-action { halt | reject-client }

undo wlan multicast optimization threshold-action

Default

The multicast optimization function is halted when the maximum number of clients supported by multicast optimization is reached.

Views

System view

Default command level

2: System level

Parameters

halt: Invalidates the multicast optimization function. A new client can join a multicast group and receive multicast packets, and a multicast optimization entry can be created for the client. However, the multicast optimization function for all clients in the multicast group becomes invalid. When the number of clients drops below the upper limit, the multicast optimization function takes effect again.

reject-client: Rejects new clients. A new client can join a multicast group, but no new multicast optimization entries can be created. If multicast optimization entries have been created for other clients in the multicast group, the client cannot receive multicast packets. If not, the client can receive multicast packets.

Usage guidelines

If you configure the halt mode first, and then configure the reject mode, the existing multicast optimization entries still take effect.

Examples

# Configure the AC to reject new clients when the maximum number of clients supported multicast optimization is reached.

<Sysname> system-view

[Sysname] wlan multicast optimization threshold-action reject-client

Related commands

· display wlan multicast optimization

· wlan multicast optimization threshold

Spectrum analysis configuration commands

Support for spectrum analysis depends on AP models.

display wlan spectrum-analysis channel-quality

Use display wlan spectrum-analysis channel-quality to display channel quality information detected by an AP.

Syntax

display wlan spectrum-analysis channel-quality [ ap ap-name ]

Views

Any view

Default command level

2: System level

Parameters

ap ap-name: Specifies an AP by its name, a case-insensitive string of 1 to 32 characters.

Examples

# Display channel quality information detected by AP 1.

<Sysname> display wlan spectrum-analysis channel-quality ap ap1

Channel Quality

--------------------------------------------------------------------------------

AP Name RID Channel Avg-AQ Min-AQ Interference

--------------------------------------------------------------------------------

ap1 1 1 95 84 1

--------------------------------------------------------------------------------

Table 5 Command output

Field	Description
AP Name	Name of the AP that is detecting channel quality.
RID	Radio ID of the AP that detected the interference device.
Channel	Detected channel.
Avg-AQ	Average channel quality of the detected channel.
Min-AQ	Worst channel quality of the detected channel.
Interference	Number of non-802.11n interference devices detected on the channel.

display wlan spectrum-analysis device

Use display wlan spectrum-analysis device to display information about non-802.11n interference devices detected by an AP.

Syntax

display wlan spectrum-analysis device [ ap ap-name ]

Views

Any view

Default command level

2: System level

Parameters

ap ap-name: Specifies an AP by its name, a case-insensitive string of 1 to 32 characters.

Examples

# Display information about non-802.11n interference devices detected by AP 1.

<Sysname> display wlan spectrum-analysis device ap ap1

SI : Interference Severity Index

1-Low Interference, 100-High Interference

Interference detected by ap1 Radio1

--------------------------------------------------------------------------------

Device ID : 0x0005

Type : Video device using fixed frequency

SI : 50

RSSI : -35

Duty Cycle (%) : 20

Affected Channels : 3,4,5,6,7

Detected Time : Jan 6 10:42:56 2012

--------------------------------------------------------------------------------

Device ID : 0x0007

Type : Bluetooth

SI : 80

RSSI : -49

Duty Cycle (%) : 35

Affected Channels : 1,3,5,6,10

Detected Time : Jan 6 10:42:56 2012

--------------------------------------------------------------------------------

Device ID : 0x000a

Type : Microwave oven

SI : 32

RSSI : -25

Duty Cycle (%) : 50

Affected Channels : 1,2,7,13,14

Detected Time : Jan 6 10:42:56 2012

Table 6 Command output

Field	Description
Interference detected by	AP and its radio that detected the interference device.
Device ID	ID assigned to the interference device.
Type	Interference type.
SI	Interference severity level. A larger value indicates a stronger interference.
RSSI	Signal strength of the interference device.
Duty Cycle (%)	Percentage of time for which the interference device was active.
Affected Channels	Channels affected by the interference device.
Detected Time	Time that the interference device was last detected.

dot11a calibrate-channel sensitivity

Use dot11a calibrate-channel sensitivity to set the sensitivity level that triggers channel adjustment on 5 GHz radios.

Use undo dot11a calibrate-channel sensitivity to restore the default.

Syntax

dot11a calibrate-channel sensitivity { high | low | medium }

undo dot11a calibrate-channel sensitivity

Default

The sensitivity level that triggers channel adjustment is medium.

Views

RRM view

Default command level

2: System level

Parameters

high: Specifies the high sensitivity level.

low: Specifies the low sensitivity level.

medium: Specifies the medium sensitivity level.

Usage guidelines

When the channel quality is lower than the sensitivity level, the AC begins to calculate the channel quality, and switches to a new channel with a higher quality.

This command takes effect only for spectrum analysis. Channel adjustment is triggered only when the channel quality calculated by spectrum analysis is lower than the sensitivity level specified by the dot11a calibrate-channel sensitivity command.

Examples

# Set the sensitivity level that triggers channel adjustment to high on 5 GHz radios.

<Sysname> system-view

[Sysname] wlan rrm

[Sysname-wlan-rrm] dot11a calibrate-channel sensitivity high

Related commands

dot11a calibrate-channel track spectrum-analysis

Use dot11a calibrate-channel track spectrum-analysis to enable spectrum analysis to trigger channel adjustment on 5 GHz radios.

Use undo dot11a calibrate-channel track spectrum-analysis to disable spectrum analysis from triggering channel adjustment on 5 GHz radios.

Syntax

dot11a calibrate-channel track spectrum-analysis

undo dot11a calibrate-channel track spectrum-analysis

Default

Spectrum analysis does not trigger channel adjustment.

Views

RRM view

Default command level

2: System level

Examples

# Enable spectrum analysis to trigger channel adjustment on 5 GHz radios.

<Sysname> system-view

[Sysname] wlan rrm

[Sysname-wlan-rrm] dot11a calibrate-channel track spectrum-analysis

Related commands

dot11a calibrate-channel sensitivity

dot11a spectrum-analysis device

Use dot11a spectrum-analysis device to set the type of interference devices to be detected on 5 GHz radios.

Use undo dot11a spectrum-analysis device to remove the configuration.

Syntax

dot11a spectrum-analysis device { device-type | all }

undo dot11a spectrum-analysis device { device-type | all }

Default

The type of interference devices to be detected on 5 GHz radios is cordless-Network-fh.

View

RRM view

Default level

2: System level

Parameters

device-type: Specifies the type of interference devices to be detected. The interference device that can be detected on 5 GHz radios is the cordless-Network-fh device.

all: Detects all interference devices.

Examples

# Set the type of interference devices to be detected on 5 GHz radios to cordless-Network-fh.

<Sysname> system-view

[Sysname] wlan rrm

[Sysname-wlan-rrm] dot11a spectrum-analysis device cordless-Network-fh

dot11a spectrum-analysis enable

Use dot11a spectrum-analysis enable to enable spectrum analysis on all 5 GHz radios.

Use undo dot11a spectrum-analysis enable to disable spectrum analysis on all 5 GHz radios.

Syntax

dot11a spectrum-analysis enable

undo dot11a spectrum-analysis enable

Default

Spectrum analysis is disabled on all 5 GHz radios.

Views

RRM view

Default command level

2: System level

Usage guidelines

Spectrum analysis takes effect on a radio only when both globally and on the radio are enabled.

Examples

# Enable spectrum analysis on all 5 GHz radios.

<Sysname> system-view

[Sysname] wlan rrm

[Sysname-wlan-rrm] dot11a spectrum-analysis enable

Related commands

spectrum-analysis enable

dot11a spectrum-analysis trap channel-quality enable

Use dot11a spectrum-analysis trap channel-quality enable to enable the AC to send SNMP traps to the NMS when the channel quality on 5 GHz radios is lower than the channel quality alarm threshold.

Use undo dot11a spectrum-analysis trap channel-quality enable to disable the function.

Syntax

dot11a spectrum-analysis trap channel-quality enable

undo dot11a spectrum-analysis trap channel-quality enable

Default

The AC sends SNMP traps to the NMS when the channel quality on 5 GHz radios is lower than the channel quality alarm threshold.

Views

RRM view

Default command level

2: System level

Examples

# Configure the AC to not send any SNMP traps to the NMS when the channel quality on 5 GHz radios is lower than the channel quality alarm threshold.

<Sysname> system-view

[Sysname] wlan rrm

[Sysname-wlan-rrm] undo dot11a spectrum-analysis trap channel-quality enable

Related commands

dot11a spectrum-analysis trap channel-quality threshold

Use dot11a spectrum-analysis trap channel-quality threshold to set the channel quality alarm threshold on 5 GHz radios.

Use undo dot11a spectrum-analysis trap channel-quality threshold to restore the default.

Syntax

dot11a spectrum-analysis trap channel-quality threshold threshold-value

undo dot11a spectrum-analysis trap channel-quality threshold

Default

The channel quality alarm threshold is 35.

Views

RRM view

Default command level

2: System view

Parameters

threshold-value: Specifies the channel quality alarm threshold in the range of 1 to 100. A smaller value represents a worse channel quality.

Examples

# Set the channel quality alarm threshold on 5 GHz radios to 45.

<Sysname> system-view

[Sysname] wlan rrm

[Sysname-wlan-rrm] dot11a spectrum-analysis trap channel-quality threshold 45

dot11a spectrum-analysis trap device

Use dot11a spectrum-analysis trap device to enable the AC to send SNMP traps to the NMS when an interference device is detected on 5 GHz radios.

Use undo dot11a spectrum-analysis trap device to remove the configuration.

Syntax

dot11a spectrum-analysis trap device { device-type | all }

undo dot11a spectrum-analysis trap device { device-type | all }

Default

The AC sends SNMP traps to the NMS when a cordless-Network-fh device is detected on 5 GHz radios.

Views

RRM view

Default command level

2: System level

Parameters

device-type: Specifies the device type. The interference device that can be detected on 5 GHz radios is the cordless-Network-fh device.

all: Specifies all device types.

Usage guidelines

The dot11a spectrum-analysis trap device command takes effect only when the dot11a spectrum-analysis trap device enable command is executed.

Before configuring this command, use the dot11a spectrum-analysis device device-type command to specify the type of interference devices to be detected. Otherwise, this command does not take effect.

Examples

# Configure the AC to not send any SNMP traps to the NMS when a cordless-Network-fh device is detected on 5 GHz radios.

<Sysname> system-view

[Sysname] wlan rrm

[Sysname-wlan-rrm] undo dot11a spectrum-analysis trap device cordless-Network-fh

dot11a spectrum-analysis trap device enable

Use dot11a spectrum-analysis trap device enable to enable the AC to send SNMP traps to the NMS when interference devices are detected on 5 GHz radios.

Use undo dot11a spectrum-analysis trap device enable to disable the function.

Syntax

dot11a spectrum-analysis trap device enable

undo dot11a spectrum-analysis trap device enable

Default

The AC sends SNMP traps to the NMS when interference devices are detected on 5 GHz radios.

Views

RRM view

Default command level

2: System level

Examples

# Configure the AC to not send any SNMP traps to the NMS when interference devices are detected on 5 GHz radios.

<Sysname> system-view

[Sysname] wlan rrm

[Sysname-wlan-rrm] undo dot11a spectrum-analysis trap device enable

Related commands

dot11a spectrum-analysis trap device.

dot11bg calibrate-channel sensitivity

Use dot11bg calibrate-channel sensitivity to set the sensitivity level that triggers channel adjustment on 2.4 GHz radios.

Use undo dot11bg calibrate-channel sensitivity to restore the default.

Syntax

dot11bg calibrate-channel sensitivity { high | low | medium }

undo dot11bg calibrate-channel sensitivity

Default

The sensitivity level that triggers channel adjustment is medium.

Views

RRM view

Default command level

2: System level

Parameters

high: Specifies the high sensitivity level.

low: Specifies the low sensitivity level.

medium: Specifies the medium sensitivity level.

Usage guidelines

When the channel quality is lower than the sensitivity level, the AC begins to calculate the channel quality, and switches to a new channel with a higher quality.

This command takes effect only for spectrum analysis. Channel adjustment is triggered only when the channel quality calculated in spectrum analysis is lower than the sensitivity level specified by the dot11bg calibrate-channel sensitivity command.

Examples

# Set the sensitivity level that triggers channel adjustment to high on 2.4 GHz radios.

<Sysname> system-view

[Sysname] wlan rrm

[Sysname-wlan-rrm] dot11bg calibrate-channel sensitivity high

Related commands

dot11bg calibrate-channel track spectrum-analysis.

dot11bg calibrate-channel track spectrum-analysis

Use dot11bg calibrate-channel track spectrum-analysis to enable spectrum analysis to trigger channel adjustment on 2.4 GHz radios.

Use undo dot11bg calibrate-channel track spectrum-analysis to disable spectrum analysis from triggering channel adjustment on 2.4 GHz radios.

Syntax

dot11bg calibrate-channel track spectrum-analysis

undo dot11bg calibrate-channel track spectrum-analysis

Default

Spectrum analysis does not trigger channel adjustment.

Views

RRM view

Default command level

2: System level

Examples

# Enable spectrum analysis to trigger channel adjustment on 2.4 GHz radios.

<Sysname> system-view

[Sysname] wlan rrm

[Sysname-wlan-rrm] dot11bg calibrate-channel track spectrum-analysis

Related commands

dot11bg calibrate-channel sensitivity

dot11bg spectrum-analysis device

Use dot11bg spectrum-analysis device to set the type of interference devices to be detected on 2.4 GHz radios.

Use undo dot11bg spectrum-analysis device to remove the configuration.

Syntax

dot11bg spectrum-analysis device { device-type | all }

undo dot11bg spectrum-analysis device { device-type | all }

Default

All interference devices are detected on 2.4 GHz radios.

Views

RRM view

Default command level

2: System level

Parameters

device-type: Specifies the type of interference devices to be detected, including microwave, Bluetooth, video-ff, cordless-network-fh, and xbox-fh.

all: Detects all interference devices.

Examples

# Set the type of interference devices to be detected on 2.4 GHz radios to bluetooth.

<Sysname> system-view

[Sysname] wlan rrm

[Sysname-wlan-rrm] dot11bg spectrum-analysis device bluetooth

dot11bg spectrum-analysis enable

Use dot11bg spectrum-analysis enable to enable spectrum analysis on all 2.4 GHz radios.

Use undo dot11bg spectrum-analysis enable to disable spectrum analysis on all 2.4 GHz radios.

Syntax

dot11bg spectrum-analysis enable

undo dot11bg spectrum-analysis enable

Default

Spectrum analysis is disabled on all 2.4 GHz radios.

Views

RRM view

Default command level

2: System level

Usage guidelines

Spectrum analysis takes effect on a radio only when enabled both globally and on the radio.

Examples

# Enable spectrum analysis on all 2.4 GHz radios.

<Sysname> system-view

[Sysname] wlan rrm

[Sysname-wlan-rrm] dot11bg spectrum-analysis enable

Related commands

spectrum-analysis enable

dot11bg spectrum-analysis trap channel-quality enable

Use dot11bg spectrum-analysis trap channel-quality enable to enable the AC to send SNMP traps to the NMS when the channel quality on 2.4 GHz radios is lower than the channel quality alarm threshold.

Use undo dot11bg spectrum-analysis trap channel-quality enable to disable the function.

Syntax

dot11bg spectrum-analysis trap channel-quality enable

undo dot11bg spectrum-analysis trap channel-quality enable

Default

The AC sends SNMP traps to the NMS when the channel quality on 2.4 GHz radios is lower than the channel quality alarm threshold.

Views

RRM view

Default command level

2: System level

Examples

# Configure the AC to not send any SNMP traps to the NMS when the channel quality on 2.4 GHz radios is lower than the channel quality alarm threshold.

<Sysname> system-view

[Sysname] wlan rrm

[Sysname-wlan-rrm] undo dot11bg spectrum-analysis trap channel-quality enable

Related commands

dot11bg spectrum-analysis trap channel-quality threshold

Use dot11bg spectrum-analysis trap channel-quality threshold to set the channel quality alarm threshold on 2.4 GHz radios.

Use undo dot11bg spectrum-analysis trap channel-quality threshold to restore the default.

Syntax

dot11bg spectrum-analysis trap channel-quality threshold threshold-value

undo dot11bg spectrum-analysis trap channel-quality threshold

Default

The channel quality alarm threshold is 35.

Views

RRM view

Default command level

2: System level

Parameters

threshold-value: Specifies the channel quality alarm threshold in the range of 1 to 100. A smaller value represents a worse channel quality.

Examples

# Set the channel quality alarm threshold on 2.4 GHz radios to 45.

<Sysname> system-view

[Sysname] wlan rrm

[Sysname-wlan-rrm] dot11bg spectrum-analysis trap channel-quality threshold 45

dot11bg spectrum-analysis trap device

Use dot11bg spectrum-analysis trap device to enable the AC to send SNMP traps to the NMS when an interference device is detected on 2.4 GHz radios.

Use undo dot11bg spectrum-analysis trap device to remove the configuration.

Syntax

dot11bg spectrum-analysis trap device { device-type | all }

undo dot11bg spectrum-analysis trap device { device-type | all }

Default

The AC sends SNMP traps to the NMS when all specified interference devices are detected on 2.4 GHz radios.

Views

RRM view

Default command level

2: System level

Parameters

device-type: Enables the AC to send SNMP traps to the NMS when the specified type of interference device is detected. The interference devices that can be detected include microwave, Bluetooth, video-ff, audio-ff, cordless-network-fh, and xbox-fh.

all: Enables the AC to send SNMP traps to the NMS when any specified interference devices are detected.

Usage guidelines

The dot11bg spectrum-analysis trap device command takes effect only if the dot11bg spectrum-analysis trap device enable command is executed.

Before configuring this command, use the dot11bg spectrum-analysis device device-type command to specify the type of interference devices to be detected. Otherwise, this command does not take effect.

Examples

# Configure the AC to not send any SNMP traps to the NMS when a Bluetooth device is detected on 2.4 GHz radios.

<Sysname> system-view

[Sysname] wlan rrm

[Sysname-wlan-rrm] undo dot11bg spectrum-analysis trap device Bluetooth

dot11bg spectrum-analysis trap device enable

Use dot11bg spectrum-analysis trap device enable to enable the AC to send SNMP traps to the NMS when interference devices are detected on 2.4 GHz radios.

Use undo dot11bg spectrum-analysis trap device enable to disable the function.

Syntax

dot11bg spectrum-analysis trap device enable

undo dot11bg spectrum-analysis trap device enable

Default

The AC sends SNMP traps to the NMS when interference devices are detected on 2.4 GHz radios.

Views

RRM view

Default command level

2: System level

Examples

# Configure the AC to not send any SNMP traps to the NMS when interference devices are detected on 2.4 GHz radios.

<Sysname> system-view

[Sysname] wlan rrm

[Sysname-wlan-rrm] undo dot11bg spectrum-analysis trap device enable

Related commands

dot11bg spectrum-analysis trap device

spectrum-analysis enable

Use spectrum-analysis enable to enable spectrum analysis on a radio.

Use undo spectrum-analysis enable to disable spectrum analysis on a radio.

Syntax

spectrum-analysis enable

undo spectrum-analysis enable

Default

Spectrum analysis is disabled on a radio.

Views

Radio view

Default command level

2: System level

Usage guidelines

Spectrum analysis takes effect only when both globally and on a radio are enabled.

Examples

# Enable spectrum analysis on a radio.

<Sysname> system-view

[Sysname] wlan ap ap3 model MSM460-WW

[sysname-wlan-ap-ap3] radio 1 type dot11an

[sysname-wlan-ap-ap3-radio-1] spectrum-analysis enable

Related commands

· dot11a spectrum-analysis enable

· dot11bg spectrum-analysis enable

MAC-BAC configuration commands

Support for the commands in this chapter depends on the device model. For more information, see About the H3C Access Controllers Command References.

wlan bas-ac enable

Use wlan bas-ac enable to enable BAS AC.

Use undo wlan bas-ac enable to disable BAS AC.

Syntax

wlan bas-ac enable

undo wlan bas-ac enable

Default

BAS AC is disabled.

Views

System view

Default command level

2: System level

Examples

# Enable BAS AC.

<Sysname> system-view

[Sysname] wlan bas-ac enable

wlan bas-ac ip

Use wlan bas-ac ip to specify the IP address that the BAS AC uses to connect to the master AC.

Use undo wlan bas-ac ip to remove the configuration.

Syntax

wlan bas-ac ip ip-address

undo wlan bas-ac ip

Default

No IP address is specified for the BAS AC.

Views

System view

Default command level

2: System level

Parameters

ip-address: Specifies the IP address that the BAS AC uses to connect to the master AC. It can only be an IPv4 address.

Examples

# Specify the IP address that the BAS AC uses to connect to the master AC as 1.1.1.1.

<Sysname> system-view

[Sysname] wlan bas-ac ip 1.1.1.1

wlan bas-ac retry-interval

Use wlan bas-ac retry-interval to specify the retry interval at which the BAS AC sends connection requests to the master AC.

Use undo wlan bas-ac retry-interval to restore the default.

Syntax

wlan bas-ac retry-interval seconds

undo wlan bas-ac retry-interval

Default

The retry interval is 15 seconds.

Views

System view

Default command level

2: System level

Parameters

seconds: Specifies the retry interval at which the BAS AC sends connection requests to the master AC after the connection between them fails or is terminated. The value range is 1 to 60 seconds.

Examples

# Specify the retry interval at which the BAS AC sends connection requests to the master AC as 10 seconds.

<Sysname> system-view

[Sysname] wlan bas-ac retry-interval 10

wlan bas-ac synchronize-configuration

Use wlan bas-ac synchronize-configuration to synchronize the configuration of the current BAS AC to other BAS ACs in the MAC-BAC network.

Use undo wlan bas-ac synchronize-configuration to disable the BAS AC configuration synchronization function.

Syntax

wlan bas-ac synchronize-configuration

undo wlan bas-ac synchronize-configuration

Views

System view

Default command level

2: System level

Examples

# Synchronize the configuration of the current BAS AC to other BAS ACs in the MAC-BAC network.

<Sysname> system-view

[Sysname] wlan bas-ac synchronize-configuration

wlan capwap address

Use wlan capwap address to specify a CAPWAP IP address.

Use undo wlan capwap address to remove the configured CAPWAP IP address.

Syntax

wlan capwap address { ip ip-address | ipv6 ipv6-address }

undo wlan capwap address { ip | ipv6 }

Default

No CAPWAP IP address is configured.

Views

System view

Default command level

2: System level

Parameters

ip ip-address: Specifies an IPv4 CAPWAP address for the BAS AC.

ipv6 ipv6-address: Specifies an IPv6 CAPWAP address for the BAS AC.

Usage guidelines

If a tunnel has been established between the master AC and each BAS AC, when receiving a discovery request from an AP, the master AC assigns one BAS AC with the smallest workload to the AP and sends back a discovery response. The IP address of the BAS AC assigned to the AP is called a CAPWAP IP address. The AP uses this address to establish a tunnel with the BAS AC.

Make sure the CAPWAP IP address and the IP address of the AP can reach each other at Layer 3.

You can use this command to configure one IPv4 CAPWAP address and one IPv6 CAPWAP address. They can exist at the same time.

Examples

# Specify the CAPWAP IP address as 1.1.1.1.

<Sysname> system-view

[Sysname] wlan capwap address ip 1.1.1.1

wlan master-ac

Use wlan master-ac to specify a master AC for the BAS AC.

Use undo wlan master-ac to remove the configuration about the master AC.

Syntax

wlan master-ac { ip ipv4-address | ipv6 ipv6-address } port port-number [ authentication { cipher | simple } authentication-key ]

undo wlan master-ac

Default

No master AC is specified for the BAS AC.

Views

System view

Default command level

2: System level

Parameters

ip ipv4-address: Specifies the IPv4 address of the master AC.

ipv6 ipv6-address: Specifies the IPv6 address of the master AC.

port port-number: Specifies the number of the port used to connect the master AC, in the range of 1 to 65535. By default, this value is 35001.

authentication: Specifies the MD5 authentication.

cipher: Specifies a ciphertext key.

simple: Specifies a plaintext key.

authentication-key: Specifies a ciphertext key or the plaintext key. A plaintext key is a case-sensitive string of 1 to 16 characters. A ciphertext key is a case sensitive string of 24 to 53 characters.

Usage guidelines

If authentication is configured, the master AC uses MD5 algorithm to calculate a message digest, adds the digest into the packet, and sends the packet to the BAS AC. The BAS AC does the same after receiving the packet and compares the result with the digest in the packet. If the two are identical, the packet passes the authentication and is accepted by the BAS AC. Otherwise the packet fails the authentication and is dropped.

For security purposes, all keys, including keys configured in plain text, are saved in cipher text.

Specify the same key on the BAS AC and the master AC.

Examples

# Assign a master AC to the BAS AC, specify the IP address of the master AC as 1.1.1.1, and specify a plaintext key abcdefg.

<Sysname> system-view

[Sysname] wlan master-ac ip 1.1.1.1 authentication simple abcdefg

Guest access tunnel configuration commands

Support for the commands in this chapter depends on the device model. For more information, see About the H3C Access Controllers Command References.

aggregation-ac

Use aggregation-ac ip to configure an aggregation AC on an edge AC.

Use undo aggregation-ac ip to remove the configuration.

Syntax

aggregation-ac ip ipv4-address source ip ipv4-address vlan vlan-id-list

undo aggregation-ac { all | ip ipv4-address [ vlan vlan-id-list ] }

Default

No aggregation AC information is available on the edge AC.

Views

Edge AC view

Default command level

2: System level

Parameters

ip ipv4-address: Specifies an aggregation AC by its IPv4 address.

source ip ipv4-address: Specifies the source IPv4 address for the edge AC to establish a guest access tunnel with the aggregation AC.

vlan vlan-id-list: Specifies a guest VLAN list. It is in the format of vlan-id-list = { vlan-id1 [ to vlan-id2 ] }& <1-10>, where vlan-id is in the range of 1 to 4094 and &<1-10> indicates that you can specify up to 10 VLAN IDs.

all: Deletes information about all aggregation ACs on the edge AC.

Examples

# Set the IP address of the aggregation AC configured on the edge AC to 192.168.2.21 and set the guest VLAN to VLAN 7.

<Sysname> system-view

[Sysname] wlan guest-tunnel edge-ac

[Sysname-wlan-edge-ac] aggregation-ac ip 192.168.2.21 source ip 192.168.2.20 vlan 7

display wlan guest-tunnel

Use display wlan guest-tunnel to display information about the guest access tunnels on the current AC.

Syntax

display wlan guest-tunnel { all | ip ipv4-address } [ | { begin | exclude | include } regular-expression ]

Views

Any view

Default command level

1: Monitor level

Parameters

all: Specifies all guest access tunnels.

ip ipv4-address: Specifies a peer AC by its IPv4 address.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Examples

# Display information about all guest access tunnels on the edge AC.

<Sysname> display wlan guest-tunnel all

Guest-Tunnel Information

Local Mode: Edge AC Tunnel Count: 2

-------------------------------------------------------------------------------

Peer IP Address Local IP Address VLAN State Interface

-------------------------------------------------------------------------------

2.2.2.2 5.5.5.1 4 Up WLAN-Tunnel9

2.2.2.3 5.5.5.1 5 Down WLAN-Tunnel10

-------------------------------------------------------------------------------

# Display information about all guest access tunnels on the aggregation AC.

<Sysname> display wlan guest-tunnel all

Guest-Tunnel Information

Local Mode: Aggregation AC Tunnel Count: 2

-------------------------------------------------------------------------------

Peer IP Address VLAN State Interface

-------------------------------------------------------------------------------

1.1.1.1 4-5 Down WLAN-Tunnel9

1.1.1.2 6 Down WLAN-Tunnel10

-------------------------------------------------------------------------------

# Display information about the guest access tunnel established with the AC with the IP address 1.1.1.1.

<Sysname> display wlan guest-tunnel ip 1.1.1.1

Guest-Tunnel Information

Local Mode: Edge AC

-------------------------------------------------------------------------------

Peer IP Address : 1.1.1.1

Local IP Address : 1.1.1.2

VLAN : 4

State : Down

Interface : WLAN-Tunnel9

Online time (hh:mm:ss) : -NA-

-------------------------------------------------------------------------------

Table 7 Command output

Field	Description
Local Mode	Role of the AC, Edge or Aggregation.
Tunnel Count	Number of guest access tunnels.
Peer IP Address	IP address of the peer AC.
Local IP Address	IP address of the local AC.
VLAN	Configured guest VLAN.
State	State of the guest access tunnel: · Up · Down
Interface	Local interface used to establish the guest access tunnel. This field is displayed as -NA- if the WLAN-Tunnel interface fails to be created.
Online time (hh:mm:ss)	Length of time when the guest access tunnel is in Up state.

edge-ac

Use edge-ac ip to configure an edge AC on an aggregation AC.

Use undo edge-ac ip to remove the configuration.

Syntax

edge-ac ip ipv4-address vlan vlan-id-list

undo edge-ac { all | ip ipv4-address [ vlan vlan-id-list ] }

Default

No aggregation AC information is available on the edge AC.

Views

Aggregation AC view

Default command level

2: System level

Parameters

ip ipv4-address: Specifies an edge AC by its IP address.

vlan vlan-id-list: Specifies a guest VLAN list. It is in the format of vlan-id-list = { vlan-id1 [ to vlan-id2 ] }& <1-10>, where vlan-id is in the range of 1 to 4094 and &<1-10> indicates that you can specify up to 10 VLAN IDs.

all: Deletes information about all edge ACs on the aggregation AC.

Examples

# Set the IP address of the edge AC configured on the aggregation AC to 192.168.2.20 and set the guest VLAN to VLAN 7.

<Sysname> system-view

[Sysname] wlan guest-tunnel aggregation-ac

[Sysname-wlan-aggregation-ac] edge-ac ip 192.168.2.20 vlan 7

keep-alive

Use keep-alive to set the interval at which the edge AC sends keep-alive requests to aggregation ACs.

Use undo keep-alive to restore the default.

Syntax

keep-alive time-interval

undo keep-alive

Default

The interval at which the edge AC sends keep-alive requests to aggregation ACs is 10 seconds.

Views

Edge AC view

Default command level

2: System level

Parameters

time-interval: Specifies the interval at which the edge AC sends keep-alive requests to aggregation ACs, in the range of 5 to 80 seconds.

Usage guidelines

When this command is configured, the edge AC sends a keep-alive request to the aggregation AC. Upon receiving the request, the aggregation AC determines whether the source IP address of the request belongs to one of the edge ACs configured on it. If it does, the aggregation AC sends a response and a guest access tunnel is established.

The edge AC sends keep-alive requests to the aggregation AC at a specific interval. If the edge AC does not receive any response from the aggregation AC after three successive attempts, the edge AC terminates the guest access tunnel. If the aggregation AC does not receive any keep-alive request three times the interval, it terminates the guest access tunnel.

Examples

# Set the interval at which the edge AC sends keep-alive requests to aggregation ACs to 7 seconds.

<Sysname> system-view

[Sysname] wlan guest-tunnel edge-ac

[Sysname-wlan-edge-ac] keep-alive 7

reset wlan guest-tunnel

Use reset wlan guest-tunnel to remove guest access tunnels.

Syntax

reset wlan guest-tunnel { all | ip ipv4-address }

View

User view

Default command level

2: System level

Parameters

all: Removes all guest access tunnels.

ip ipv4-address: Specifies a peer AC by its IP address.

Examples

# Remove all guest access tunnels.

<Sysname> reset wlan guest-tunnel all

wlan guest-tunnel aggregation-ac

Use wlan guest-tunnel aggregation-ac to specify the current AC as the aggregation AC and create an aggregation AC view. If the aggregation AC view has been created, this command enters the aggregation AC view.

Use undo wlan guest-tunnel aggregation-ac to delete the aggregation AC view and all configurations of the aggregation AC.

Syntax

wlan guest-tunnel aggregation-ac

undo wlan guest-tunnel aggregation-ac

Views

System view

Default command level

2: System level

Usage guidelines

When you delete the aggregation AC view, all guest access tunnels established with this aggregation AC are also removed.

Examples

# Specify the current AC as the aggregation AC.

<Sysname> system-view

[Sysname] wlan guest-tunnel aggregation-ac

[Sysname-wlan-aggregation-ac]

wlan guest-tunnel edge-ac

Use wlan guest-tunnel edge-ac to specify the current AC as the edge AC and create an edge AC view. If the edge AC view has been created, this command enters the edge AC view.

Use undo wlan guest-tunnel edge-ac to delete the edge AC view and all configurations of the edge AC.

Syntax

wlan guest-tunnel edge-ac

undo wlan guest-tunnel edge-ac

Views

System view

Default command level

2: System level

Usage guidelines

When you delete the edge AC view, all guest access tunnels established with this edge AC are also removed.

Examples

# Specify the current AC as the edge AC.

<Sysname> system-view

[Sysname] wlan guest-tunnel edge-ac

[Sysname-wlan-edge-ac]

Bonjour gateway commands

Support for the commands in this chapter depends on the device model. For more information, see About the H3C Access Controllers Command References.

bonjour-gateway enable

Use bonjour-gateway enable to enable Bonjour gateway.

Use undo bonjour-gateway enable to disable Bonjour gateway.

Syntax

bonjour-gateway enable

undo bonjour-gateway enable

Default

Bonjour gateway is enabled.

Views

AP template view, AP group view

Default command level

2: System level

Usage guidelines

Bonjour gateway takes effect only after you enable Bonjour gateway both globally and for an AP. You can enable Bonjour gateway for an AP in AP template view or AP group view.

Examples

# Enable Bonjour gateway.

<Sysname> system-view

[Sysname] wlan ap ap3 model WA3628i-AGN

[Sysname-wlan-ap-ap3] bonjour-gateway enable

# Enable Bonjour gateway for AP group office.

<Sysname> system-view

[Sysname] wlan ap-group office

[Sysname-ap-group-office] bonjour-gateway enable

Related commands

wlan bonjour-gateway enable

bonjour-policy

Use bonjour-policy to apply a Bonjour policy to an AP template, an AP group, or a service template.

Use undo bonjour-policy to remove the applied Bonjour policy.

Syntax

bonjour-policy policy-name

undo bonjour-policy

Default

No Bonjour policy is applied to an AP template, an AP group, or a service template.

Views

AP template view, AP group view, service template view

Default command level

2: System level

Parameters

policy-name: Specifies a Bonjour policy by its name, a case-sensitive string of 1 to 31 characters.

Examples

# Apply Bonjour policy teacher to an AP template.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA3628i-AGN

[Sysname-wlan-ap-ap1] bonjour-policy teacher

# Apply Bonjour policy teacher to an AP group.

<Sysname> system-view

[Sysname] wlan ap-group office

[Sysname-ap-group-office] bonjour-policy teacher

# Apply Bonjour policy teacher to a service template.

<Sysname> system-view

[Sysname] wlan service-template 1 clear

[Sysname-wlan-st-1] bonjour-policy teacher

display wlan bonjour-policy

Use display wlan bonjour-policy to display Bonjour policy information.

Syntax

display wlan bonjour-policy [ policy-name ] [ | { begin | exclude | include } regular-expression ]

Views

Any view

Default command level

2: System level

Parameters

policy-name: Specifies a Bonjour policy by its name, a case-sensitive string of 1 to 31 characters.

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Examples

# Display Bonjour policy information.

<Sysname> display wlan bonjour-policy

Total number of configured bonjour policies: 1

Bonjour policy parameters

--------------------------------------------------------------------------------

Bonjour policy name : student

VLAN : 1 2 to 5

Access-VLAN : Enabled

Service list:

Service type IP address/Instance name

ichat 192.168.0.1

printer

Table 8 Command output

Field	Description
VLAN	List of VLANs where the AC can forward queries and responses.
Access-VLAN	Whether the AC can forward queries and responses to the VLANs to which the clients belong: · Enabled. · Disabled.
Service type	Types of service that can be queried by clients.
IP address/Instance name	IP address or instance name of the service that can be queried by clients.

display wlan bonjour-service

Use display wlan bonjour-service to display information about services discovered by the AC.

Syntax

display wlan bonjour-service [ | { begin | exclude | include } regular-expression ]

Views

Any view

Default command level

2: System level

Parameters

|: Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide.

begin: Displays the first line that matches the specified regular expression and all lines that follow.

include: Displays all lines that match the specified regular expression.

regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.

Examples

# Display information about services discovered by the AC.

<Sysname> display wlan bonjour-service

Total number of discarded query packets : 0

Total number of discarded response packets: 20

Total number of bonjour services : 3

Bonjour Services

-------------------------------------------------------------------------------

Name Type VLAN TTL IP

-------------------------------------------------------------------------------

Apple TV airplay 1 4500 192.168.10.2

B8782E5101E7@Apple TV raop 2 4500 192.168.10.2

70-35-60-63.1 Apple TV sleep-proxy 3 4500 192.168.10.2

Table 9 Command output

Field	Description
Name	Instance name of the service.
Type	Service type.
VLAN	VLAN to which the service belongs.
TTL	TTL of the service, in seconds. When the Bonjour gateway receives a new response for the service, it resets the TTL for the service.
IP	IP address of the service.

service type

Use service type to configure the type of service that can be queried by clients.

Use undo service type to remove the service type.

Syntax

service type service-type [ ip ipv4-address | ipv6 ipv6-address | instance instance-name ]

undo service type service-type [ ip ipv4-address | ipv6 ipv6-address | instance instance-name ]

Default

Clients can query all services.

Views

Bonjour policy view

Default command level

2: System level

Parameters

service-type: Specifies the type of service that can be queried by clients. Table 10 lists some Bonjour protocols by their names and service type strings.

Table 10 Apple Bonjour protocols and service type strings

Service type	Protocol name
afpovertcp	AppleTalkFiling Protocol
airplay	Airplay
airport	Airport Base Station
apple-sasl	Apple Password Server
daap	Digital Audio Access Protocol
dacp	Digital Audio Control Protocol
distcc	Distributed Compiler
dpap	Digital Photo Access Protocol
eppc	Remote AppleEvents
ftp	File Transfer Protocol
http	Hypertext Transfer Protocol
Ica-networking	Image Capture Sharing
ichat	iChat Instant Messaging Protocol
ipp	Internet Printing Protocol
ipps	Internet Printing Protocol
nfs	Network File System
pdl-stream	PDL Data Stream
printer	Line Printer Daemon
raop	Remote Audio Output Protocol
riousbprint	Remote I/O USB Printer Protocol
servermgr	Server Admin
ssh	Secure Shell
telnet	Remote Login
webdav	WebDav File System
workstation	Workgroup Manager
xserveraid	Xerver RAID

ipv4-address: Specifies an IP address of the service that can be queried by clients.

ipv6-address: Specifies an IPv6 address of the service that can be queried by clients.

instance-name: Specifies the instance name of the service that can be queried by clients, a case-sensitive string of 1 to 63 characters. An instance name uniquely identifies a service.

Examples

# Set the type of service that can be queried by clients to ichat and the service IP address to 192.168.1.10.

<Sysname> system-view

[Sysname] wlan bonjour-policy teacher

[Sysname-wlan-bp-teacher] service type ichat ip 192.168.1.10

service vlan

Use service vlan to configure the VLANs to which the AC can forward queries and responses.

Use undo service vlan to remove the configuration.

Syntax

service vlan vlan-id-list [ access-vlan ]

undo service vlan [ vlan-id-list ] [ access-vlan ]

Default

The AC cannot forward queries and responses.

Views

Bonjour policy view

Default command level

2: System level

Parameters

vlan-id-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN ID or a range of VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094. The ID for vlan-id2 must be equal to or greater than the ID for vlan-id1.

access-vlan: Allows the AC to forward queries and responses to the VLANs to which the clients belong. If you delete all VLAN lists, the access-vlan keyword is unavailable.

Examples

# Enable the AC to forward queries and responses to VLAN 100.

<Sysname> system-view

[Sysname] wlan bonjour-policy teacher

[Sysname-wlan-bp-teacher] service vlan 100

wlan bonjour-gateway enable

Use wlan bonjour-gateway enable to enable Bonjour gateway globally.

Use undo wlan bonjour-gateway enable to disable Bonjour gateway globally.

Syntax

wlan bonjour-gateway enable

undo wlan bonjour-gateway enable

Default

Bonjour gateway is disabled globally.

Views

System view

Default command level

2: System level

Usage guidelines

Bonjour gateway takes effect only after you enable it both globally and for an AP. You can enable Bonjour gateway for an AP in AP template view or AP group view.

Examples

# Enable Bonjour gateway globally.

<Sysname> system-view

[Sysname] wlan bonjour-gateway enable

Related commands

bonjour-gateway enable

wlan bonjour-gateway multicast threshold

Use wlan bonjour-gateway multicast threshold to set the threshold for the AC to start sending multicast responses to clients.

Use undo wlan bonjour-gateway multicast threshold to restore the default.

Syntax

wlan bonjour-gateway multicast threshold threshold-number

undo wlan bonjour-gateway multicast threshold

Default

The threshold for the AC to start sending multicast responses to clients is 10.

Views

System view

Default command level

2: System level

Parameters

threshold-number: Specifies the threshold for the AC to start sending multicast responses to clients, in the range of 1 to 64.

Usage guidelines

The AC can send unicast or multicast responses to clients in Bonjour service advertisement snooping. When the AC sends a multicast response to clients, it converts the multicast response to multiple unicast responses by default.

This command prevents the AC from sending excessive unicast responses to clients.

With this function enabled, the AC sends one multicast response instead of multiple unicast responses to clients when the following conditions are met:

· The clients are associated with the same BSS.

· The clients query for the same service.

· The number of clients meeting the above conditions reaches the threshold within 500 ms.

Examples

# Set the threshold for the AC to start sending multicast responses to clients to 15.

<Sysname> system-view

[Sysname] wlan bonjour-gateway multicast threshold 15

wlan bonjour-gateway query enable

Use wlan bonjour-gateway query enable to enable active query for Bonjour services on the AC.

Use undo wlan bonjour-gateway query enable to disable the function.

Syntax

wlan bonjour-gateway query enable

undo wlan bonjour-gateway query enable

Default

Active query for Bonjour services is disabled on the AC.

Views

System view

Default command level

2: System level

Examples

# Enable active query for Bonjour services on the AC.

<Sysname> system-view

[Sysname] wlan bonjour-gateway query enable

Related commands

wlan bonjour-gateway query interval

Use wlan bonjour-gateway query interval to set the interval at which the AC sends queries for a service.

Use undo wlan bonjour-gateway query interval to restore the default.

Syntax

wlan bonjour-gateway query interval number

undo wlan bonjour-gateway query interval

Default

The AC sends queries for a service every 15 seconds.

Views

System view

Default command level

2: System level

Parameters

number: Specifies the interval at which the AC sends queries for a service, in the range of 5 to 600 seconds.

Examples

# Set the interval at which the AC sends queries for a service to 30 seconds.

<Sysname> system-view

[Sysname] wlan bonjour-gateway query interval 30

Related commands

wlan bonjour-gateway query enable

wlan bonjour-policy (system view)

Use wlan bonjour-policy to create a Bonjour policy.

Use undo wlan bonjour-policy to remove a Bonjour policy.

Syntax

wlan bonjour-policy policy-name

undo wlan bonjour-policy policy-name

Default

No Bonjour policy is created.

Views

System view

Default command level

2: System level

Parameters

policy-name: Specifies a Bonjour policy by its name, a case-sensitive string of 1 to 31 characters.

Usage guidelines

You can configure a maximum of 1000 Bonjour policies.

Examples

# Create Bonjour policy teacher.

<Sysname> system-view

[Sysname] wlan bonjour-policy teacher

wlan bonjour-policy (user profile view)

Use wlan bonjour-policy to apply a Bonjour policy to a user profile.

Use undo wlan bonjour-policy to remove the Bonjour policy.

Syntax

wlan bonjour-policy policy-name

undo wlan bonjour-policy

Default

No Bonjour policy is applied to a user profile.

Views

User profile view

Default command level

2: System level

Parameters

policy-name: Specifies a Bonjour policy by its name, a case-sensitive string of 1 to 31 characters.

Examples

# Apply Bonjour policy teacher to user profile a123.

<Sysname> system-view

[Sysname] user-profile a123

[Sysname-user-profile-a123] wlan bonjour-policy teacher

Hotspot 2.0 commands

Support for the commands in this chapter depends on the device model. For more information, see About the H3C Access Controllers Command References.

3gpp-info

Use 3gpp-info to configure 3rd Generation Partnership Project (3GPP) information.

Use undo 3gpp-info to remove the configuration.

Syntax

3gpp-info country-code country-code network-code network-code

undo 3gpp-info country-code country-code network-code network-code

Default

No 3GPP information is configured.

Views

Hotspot 2.0 policy view

Default command level

2: System level

Parameters

country-code country-code: Specifies a country or region code. A country or region code is a three-digit numeric code that uniquely identifies the country or region to which a client belongs.

network-code network-code: Specifies a mobile network code. A mobile network code is a two-digit or three-digit numeric code that uniquely identifies the mobile network to which a client belongs.

Usage guidelines

One country or region code can correspond to multiple mobile network codes.

You can configure a maximum of 32 country/region code and mobile network code combinations in a Hotspot 2.0 policy.

Examples

# Configure 3GPP information.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] 3gpp-info country-code 310 network-code 00

[Sysname-wlan-hs-1] 3gpp-info country-code 460 network-code 01

ap-venue group

Use ap-venue group to set a venue group and venue type for an AP.

Use undo ap-venue group to remove the configuration.

Syntax

ap-venue group venue-group type venue-type

undo ap-venue group

Default

No venue group and venue type are configured for an AP.

Views

AP template view, AP group view

Default command level

2: System level

Parameters

venue-group: Specifies a venue group by its name, in the range of 1 to 11.

Table 11 Venue group codes and description

Code	Description
1	Assembly
2	Business
3	Educational
4	Factory and Industrial
5	Institutional
6	Mercantile
7	Residential
8	Storage
9	Utility and Miscellaneous
10	Vehicular
11	Outdoor

venue-type: Specifies a venue by its type. The value depends on the venue group name. For more information, see Table 12.

Table 12 Venue type assignments

Venue group code	Venue type code	Venue description
1	0	Unspecified
1	1	Arena
1	2	Stadium
1	3	Passenger Terminal (e.g., airport, bus, ferry, train station)
1	4	Amphitheater
1	5	Amusement Park
1	6	Place of Worship
1	7	Convention Center
1	8	Library
1	9	Museum
1	10	Restaurant
1	11	Theater
1	12	Bar
1	13	Coffee Shop
1	14	Zoo or Aquarium
1	15	Emergency Coordination Center
2	0	Unspecified Business
2	1	Doctor or Dentist office
2	2	Bank
2	3	Fire Station
2	4	Police Station
2	6	Post Office
2	7	Professional Office
2	8	Research and Development Facility
2	9	Attorney Office
3	0	Unspecified Educational
3	1	School, Primary
3	2	School, Secondary
3	3	University or College
4	0	Unspecified Factory and Industrial
4	1	Factory
5	0	Unspecified Institutional
5	1	Hospital
5	2	Long-Term Care Facility (e.g., Nursing home, Hospice, etc.)
5	3	Alcohol and Drug Rehabilitation Center
5	4	Group Home
5	5	Prison or Jail
6	0	Unspecified Mercantile
6	1	Retail Store
6	2	Grocery Market
6	3	Automotive Service Station
6	4	Shopping Mall
6	5	Gas Station
7	0	Unspecified Residential
7	1	Private Residence
7	2	Hotel or Motel
7	3	Dormitory
7	4	Boarding House
8	0	Unspecified Storage
9	0	Unspecified Utility and Miscellaneous
10	0	Unspecified Vehicular
10	1	Automobile or Truck
10	2	Airplane
10	3	Bus
10	4	Ferry
10	5	Ship or Boat
10	6	Train
10	7	Motor Bike
11	0	Unspecified Outdoor
11	1	Muni-mesh Network
11	2	City Park
11	3	Rest Area
11	4	Traffic Control
11	5	Bus Stop
11	6	Kiosk

Examples

# Specify venue group 1 and venue type 2 for AP 3.

<Sysname> system-view

[sysname] wlan ap ap3 model WA4620i-CAN

[Sysname] ap-venue group 1 type 2

ap-venue name

Use ap-venue name to set a venue name and language code for an AP.

Use undo ap-venue name to remove the configuration.

Syntax

ap-venue name venue-name lang-code lang-code

undo ap-venue name venue-name lang-code lang-code

Default

No venue name information is configured for an AP.

Views

AP template view, AP group view

Default command level

2: System level

Parameters

venue-name: Specifies a venue by its name, a case-insensitive string of 1 to 255 characters.

lang-code lang-code: Specifies the language code corresponding to a venue name.

Usage guidelines

One venue name can correspond to multiple language codes.

You can configure a maximum of 32 venue name and language code combinations.

Examples

# Set the venue name to office and language codes to English and Japanese for AP 3.

<Sysname> system-view

[sysname] wlan ap ap3 model WA4620i-CAN

[sysname-wlan-ap-ap3] ap-venue office lang-code en

[sysname-wlan-ap-ap3] ap-venue office lang-code ja

authentication-type

Use authentication-type to set the network authentication type.

Use undo authentication-type to remove the configuration.

Syntax

authentication-type authentication-type [ redirect-url url-address ]

undo authentication-type network-authentication-type [ redirect-url url-address ]

Default

No network authentication type is configured.

Views

Hotspot 2.0 policy view

Default command level

2: System level

Parameters

authentication-type: Specifies a network authentication type in the range of 0 to 3.

Table 13 Network authentication type

Value	Description
0	Acceptance of terms and conditions
1	On-line enrollment supported
2	HTTP/HTTPS redirection
3	DNS redirection

url-address: Specifies a redirected URL address, a string of 1 to 64 characters.

Examples

# Set the network authentication type to 1.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] authentication-type 1

comeback-delay

Use comeback-delay to set the delay time before the clients can send GAS comeback frames.

Use undo comeback-delay to restore the default.

Syntax

comeback-delay value

undo comeback-delay

Default

The delay time is 1 TU.

Views

Hotspot 2.0 policy view

Default command level

2: System level

Parameters

value: Specifies the delay time in TU, in the range of 1 to 1024. 1 TU is equal to 1024 milliseconds. Clients will not send GAS comeback frames to the AC until the delay time is reached.

Examples

# Set the delay time to 10 TUs.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] comeback-delay 10

dgaf enable

Use dgaf enable to enable the Downstream Group-Addressed Forwarding (DGAF) function.

Use undo dgaf enable to disable the DGAF function.

Syntax

dgaf enable

undo dgaf enable

Default

The DGAF function is enabled.

Views

Hotspot 2.0 policy view

Default command level

2: System level

Usage guidelines

When the DGAF function is enabled for an AP, the AP forwards all downstream wireless broadcast ARP packets and wireless multicast packets. To prevent spoofing attacks by using downstream multicasts, you can disable the DGAF function for the AP.

As a best practice to avoid packet loss, enable proxy ARP and multicast optimization before disabling this function.

Examples

# Disable the DGAF function.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] undo dgaf enable

domain-name

Use domain-name to set a domain name.

Use undo domain-name to remove the configuration.

Syntax

domain-name name

undo domain-name name

Default

No domain name is configured.

Views

Hotspot 2.0 policy view

Default command level

2: System level

Parameters

name: Specifies a domain by its name, a case-insensitive string of 1 to 255 characters.

Usage guidelines

You can configure a maximum of 32 domain names in one Hotspot 2.0 policy.

Examples

# Set the domain name to abc in Hotspot 2.0 policy 1.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] domain abc

gas-limit

Use gas-limit to set the maximum number of GAS Initial frames the AC can receive from clients within the specified interval.

Use undo gas-limit to restore the default.

Syntax

gas-limit number number interval interval

undo gas-limit

Default

The number of GAS Initial frames the AC can receive is not restricted.

Views

Hotspot 2.0 policy view

Default command level

2: System level

Parameters

number number: Specifies the maximum number of GAS Initial frames that the AC can receive, in the range of 10 to 128.

interval interval: Specifies the interval at which GAS Initial frames received by the AC are counted, in the range of 10 to 60 seconds.

Usage guidelines

If the number of GAS Initial frames sent by clients exceeds the maximum number, the exceeded frames will be discarded.

Examples

# Set the maximum number of GAS Initial frames that the AC can receive within 15 seconds to 120.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] gas-limit number 120 interval 15

hessid

Use hessid to set a homogenous ESS identifier (HESSID).

Use undo hessid to remove the configuration.

Syntax

hessid hessid

undo hessid

Default

No HESSID is configured.

Views

Hotspot 2.0 policy view

Default command level

2: System level

Parameters

hessid: Specifies an HESSID that uniquely identifies a homogeneous ESS, in the H-H-H format.

Examples

# Set the HESSID to 0021-1bea-3660 in Hotspot 2.0 policy 1.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] hessid 0021-1bea-3660

hotspot-policy

Use hotspot-policy to apply a Hotspot 2.0 policy to a service template.

Use undo hotspot-policy to remove the application.

Syntax

hotspot-policy policy-number

undo hotspot-policy

Default

No Hotspot 2.0 policy is applied to a service template.

Views

Service template view

Default command level

2: System level

Parameters

policy-number: Specifies the number of the Hotspot 2.0 policy to be applied to the service template, in the range of 1 to 32.

Usage guidelines

You can only apply a Hotspot 2.0 policy to a crypto-type service template.

Examples

# Apply Hotspot 2.0 policy 1 to service template 1.

<Sysname> system-view

[Sysname] wlan service-template 1 crypto

[Sysname-wlan-st-1] hotspot-policy 1

ip-protocol

Use ip-protocol to configure the port status for an IP protocol.

Use undo ip-protocol to remove the configuration.

Syntax

ip-protocol { esp | icmp | tcp | udp } port-number port-number { closed | open | unknown }

undo ip-protocol { esp | icmp | tcp | udp } port-number port-number

Default

The port status is not configured for an IP protocol.

Views

Hotspot 2.0 policy view

Default command level

2: System level

Parameters

esp: Specifies the ESP protocol.

Icmp: Specifies the ICMP protocol.

tcp: Specifies the TCP protocol.

udp: Specifies the UDP protocol.

port-number port-number: Specifies a port by its number.

Table 14 Port number and protocol type

Protocol type	Port number	Description
ICMP	0	ICMP, used for diagnostics
TCP	20	FTP
TCP	22	SSH
TCP	80	HTTP
TCP	443	Used by TLS VPNs
TCP	1723	Used by Point to Point Tunneling Protocol VPNs
TCP	5060	VoIP
UDP	500	Used by IKEv2 (IPSec VPN)
UDP	5060	VoIP
UDP	4500	May be used by IKEv2 (IPSec VPN)
ESP	0	ESP, used by IPSec VPNs

closed: Specifies the port status as closed.

open: Specifies the port status as open.

unknown: Specifies the port status as unknown.

Examples

# Configure the port number for TCP as 20, and set the port status to open.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] ip-protocol tcp port-number 20 open

ip-type

Use ip-type to set the address type availability.

Use undo ip-type to restore the default.

Syntax

ip-type ipv4 ipv4-type ipv6 ipv6-type

undo ip-type

Default

The availability is 1 for IPv4 addresses and 2 for IPv6 addresses.

Views

Hotspot 2.0 policy view

Default command level

2: System level

Parameters

ipv4 ipv4-type: Specifies the availability for an IPv4 address, in the range of 0 to 7.

Table 15 IPv4 address availability

Address value	Description
0	Address type not available
1	Public IPv4 address available
2	Port-restricted IPv4 address available
3	Single NATed private IPv4 address available
4	Double NATed private IPv4 address available
5	Port-restricted IPv4 address and single NATed IPv4 address available
6	Port-restricted IPv4 address and double NATed IPv4 address available
7	Availability of the address type is not known

ipv6 ipv6-type: Specifies the availability for an IPv6 address, in the range of 0 to 3.

Table 16 IPv6 address availability

Address value	Description
0	Address type not available
1	Address type available
2	Availability of the address type not known

Examples

# Set the availability to 2 for IPv4 addresses and 1 for IPv6 addresses.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] ip-type ipv4 2 ipv6 1

nai-realm

Use nai-realm name to configure the authentication type supported by a Network Access Identifier (NAI) realm.

Use undo nai-realm name to remove the configuration.

Syntax

nai-realm name name eap-method eap-method-id authentication authentication

undo nai-realm name name [ eap-method eap-method [ authentication authentication ] ]

Default

No authentication type is configured for an NAI realm.

Views

Hotspot 2.0 policy view

Default command level

2: System level

Parameters

name name: Specifies an NAI realm by its name, a case-insensitive string of 1 to 255 characters.

eap-method eap-method-id: Specifies an EAP authentication method by its ID, in the range of 1 to 5.

authentication authentication: Specifies an authentication parameter by its ID.

Table 17 EAP parameter

Value	Description
1	EAP-Transport Layer Security (EAP-TLS)
2	Lightweight Extensible Authentication Protocol (LEAP)
3	EAP for GSM Subscriber Identity Module (EAP-SIM)
4	EAP-Tunneled Transport Layer Security (EAP-TTLS)
5	Protected EAP (PEAP)

Table 18 EAP method and authentication parameter

eap-method-id	eap-method	authentication
2	Non-EAP Inner Authentication Type	· 0—Reserved. · 1—PAP. · 2—CHAP. · 3—MSCHAP. · 4—MSCHAPV2.
5	Credential Type	· 1—SIM. · 2—USIM. · 3—NFC Secure Element. · 4—Hardware Token. · 5—Softoken. · 6—Certificate. · 7—username/password. · 8—none. · 9—Reserved. · 10—Vendor Specific. · none means server-side authentication only.
6	Tunneled EAP Method Credential Type	· 1—SIM. · 2—USIM. · 3—NFC Secure Element. · 4—Hardware Token. · 5—Softoken. · 6—Certificate. · 7—username/password. · 8—Reserved. · 9—Anonymous. · 10—Vendor Specific.

Usage guidelines

You can configure a maximum of 32 NAI realm names in a Hotspot 2.0 policy.

Examples

# Configure the authentication type for NAI realm wifi in Hotspot 2.0 policy 1.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] nai-realm name wifi eap-method 2 authentication 1

nai-realm unsorted

Use nai-realm unsorted to configure the NAI realms to use the manually configured storage sequence.

Use undo nai-realm unsorted to restore the default.

Syntax

nai-realm unsorted

undo nai-realm unsorted

Default

By default, NAI realms use the alphabetical storage sequence.

Views

Hotspot 2.0 policy view

Default command level

2: System level

Examples

# Configure the NAI realms to use the manually configured storage sequence.

<sysname> system-view

[sysname] wlan hotspot-policy 1

[sysname-wlan-hs-1] nai-realm unsorted

network-type

Use network-type to set the access network type.

Use undo network-type to remove the configuration.

Syntax

network-type network-type [ access-internet ]

undo network-type

Default

No access network type is configured.

Views

Hotspot 2.0 policy view

Default command level

2: System level

Parameters

network-type: Specifies an access network type in the range of 0 to 5, 14, and 15.

Table 19 Access network type

Value	Description
0	Private network
1	Private network with guest access
2	Chargeable public network
3	Free public network
4	Personal device network
5	Emergency services only network
14	Test or experimental
15	Wildcard

access-internet: Enables access to the Internet. By default, the Internet cannot be accessed.

Examples

# Set the access network type to 1 and enable access to the Internet.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] network-type 1 access-internet

operator-name

Use operator-name to set a language code for a service provider.

Use undo operator-name to remove the configuration.

Syntax

operator-name operator-name lang-code lang-code

undo operator-name operator-name lang-code lang-code

Default

No service provider information is configured.

Views

Hotspot 2.0 policy view

Default command level

2: System level

Parameters

operator-name: Specifies a service provider by its name, a case-insensitive string of 1 to 255 characters.

lang-code: Specifies a language code.

Usage guidelines

One service provider can correspond to multiple language codes.

You can configure a maximum of 32 service provider and language code combinations in a Hotspot 2.0 policy.

Examples

# Set the language code to en for service provider cmcc.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] operator-name cmcc lang-code en

policy-name

Use policy-name to set a Hotspot 2.0 policy name.

Use undo policy-name to remove the configuration.

Syntax

policy-name policy-name

undo policy-name

Default

A Hotspot 2.0 policy does not have a name.

Views

Hotspot 2.0 policy view

Default command level

2: System level

Parameters

policy-name: Specifies a Hotspot 2.0 policy by its name, a case-insensitive string of 1 to 32 characters.

Examples

# Set the name of Hotspot 2.0 policy 1 to market.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] policy-name market

roam-oui

Use roam-oui to set an OUI for a roaming consortium.

Use undo roam-oui to remove the configuration.

Syntax

roam-oui oui [ in-beacon ]

undo roam-oui oui

Default

No OUI is configured for a roaming consortium.

Views

Hotspot 2.0 policy view

Default command level

2: System level

Parameters

oui: Specifies an OUI that can uniquely identify a roaming consortium, a six-digit octet.

in-beacon: Adds the OUI to Beacon frames. By default, there is no OUI in a Beacon frame.

Usage guidelines

You can configure a maximum of 32 OUIs in a Hotspot 2.0 policy, and can add a maximum of three OUIs to Beacon frames.

Examples

# Set the OUI to 004096 for a roaming consortium.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] roam-oui 004096

wan-metrics

Use wan-metrics to configure WAN parameters.

Use undo wan-metrics to remove the configuration.

Syntax

wan-metrics { link-down | link-test | link-up } [ asymmetric downlink-speed downlink-speed uplink-speed uplink-speed | symmetric link-speed link-speed ]

undo wan-metrics

Default

No WAN parameters are configured.

Views

Hotspot 2.0 policy view

Default command level

2: System level

Parameters

link-down: Configures the link status for the WAN as down.

link-test: Configures the link status for the WAN as testing.

link-up: Configures the link status for the WAN as up.

asymmetric: Specifies the asymmetric link.

downlink-speed downlink-speed: Specifies the downlink speed in the range of 1 to 4194304 Kbps.

uplink-speed uplink-speed: Specifies the uplink speed in the range of 1 to 4194304 Kbps.

symmetric: Specifies the symmetric link.

link-speed link-speed: Specifies the symmetric link speed in the range of 1 to 4194304 Kbps.

Examples

# Configure the link status for the WAN as up.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] wan-matrics link-up

wlan hotspot-policy

Use wlan hotspot-policy to create a Hotspot 2.0 policy and enter its view.

Use undo wlan hotspot-policy to remove the configured Hotspot 2.0 policy.

Syntax

wlan hotspot-policy policy-number

undo wlan hotspot-policy policy-number

Views

System view

Default command level

2: System level

Parameters

policy-number: Specifies a Hotspot 2.0 policy number in the range of 1 to 32.

Examples

# Create Hotspot 2.0 policy 1.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

02-WLAN Command Reference

WLAN sniffer configuration commands

wlan capture packet-limit

wlan capture start ap

wlan capture start client

display wlan rfid-tracking radio

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help