- Table of Contents
-
- 02-WLAN
- 00-Preface
- 01-AP management commands
- 02-Radio management commands
- 03-WLAN access commands
- 04-WLAN security commands
- 05-WLAN authentication commands
- 06-WIPS commands
- 07-WLAN QoS commands
- 08-WLAN roaming commands
- 09-WLAN load balancing commands
- 10-WLAN radio resource measurement commands
- 11-Channel scanning commands
- 12-Band navigation commands
- 13-WLAN high availability commands
- 14-802.11r commands
- 15-Wireless location commands
- 16-Hotspot 2.0 commands
- 17-WLAN RRM commands
- 18-WT commands
- 19-IoT AP commands
- 20-CM tunnel commands
- 21-Cloud connection commands
- 22-WLAN IP snooping commands
- 23-WLAN fast forwarding commands
- 24-WLAN forwarding commands
- Related Documents
-
Title | Size | Download |
---|---|---|
22-WLAN IP snooping commands | 34.79 KB |
client ip-snooping http-learning enable
client ipv4-snooping arp-learning enable
client ipv6-snooping nd-learning enable
client ipv6-snooping snmp-nd-report enable
WLAN IP snooping commands
client ip-snooping http-learning enable
Use client ip-snooping http-learning enable to enable snooping HTTP requests redirected to the portal server.
Use undo client ip-snooping http-learning enable to disable snooping HTTP requests redirected to the portal server.
Syntax
client ip-snooping http-learning enable
undo client ip-snooping http-learning enable
Default
Snooping HTTP requests is disabled.
Views
Service template view
Predefined user roles
network-admin
Usage guidelines
The AC can use this method to learn IP addresses of clients performing portal authentication. For more information about portal authentication, see Security Configuration Guides.
The priorities for learning IP addresses through snooping DHCP packets, ARP or ND packets, and HTTP requests are in descending order.
Make sure the service template is disabled before you execute this command.
Examples
# Enable snooping HTTP requests redirected to the portal server.
<Sysname> system-view
[Sysname] wlan service-template service1
[Sysname-wlan-st-service1] client ip-snooping http-learning enable
client ipv4-snooping arp-learning enable
Use client ipv4-snooping arp-learning enable to enable snooping ARP packets.
Use undo client ipv4-snooping arp-learning enable to disable snooping ARP packets.
Syntax
client ipv4-snooping arp-learning enable
undo client ipv4-snooping arp-learning enable
Default
Snooping ARP packets is enabled.
Views
Service template view
Predefined user roles
network-admin
Usage guidelines
The priorities for learning IP addresses through snooping DHCP packets, ARP or ND packets, and HTTP requests are in descending order.
Make sure the service template is disabled before you execute this command.
Examples
# Disable snooping ARP packets.
<Sysname> system-view
[Sysname] wlan service-template service1
[Sysname-wlan-st-service1] undo client ipv4-snooping arp-learning enable
client ipv6-snooping nd-learning enable
Use client ipv6-snooping nd-learning enable to enable snooping ND packets.
Use undo client ipv6-snooping nd-learning enable to disable snooping ND packets.
Syntax
client ipv6-snooping nd-learning enable
undo client ipv6-snooping nd-learning enable
Default
Snooping ND packets is enabled.
Views
Service template view
Predefined user roles
network-admin
Usage guidelines
Make sure the service template is disabled when you execute this command.
By default, an AP learns clients' IPv6 addresses through snooping both ND and DHCPv6 packets. Disable this feature to configure an AP to learn clients' IPv6 addresses only from DHCPv6 packets.
Examples
# Disable snooping ND packets.
[Sysname] wlan service-template service1
[Sysname-wlan-st-service1] undo client ipv6-snooping nd-learning enable
client ipv6-snooping snmp-nd-report enable
Use client ipv6-snooping snmp-nd-report enable to enable SNMP to obtain client IPv6 addresses learned from ND packets.
Use undo client ipv6-snooping snmp-nd-report enable to disable SNMP from obtaining client IPv6 addresses learned from ND packets.
Syntax
client ipv6-snooping snmp-nd-report enable
undo client ipv6-snooping snmp-nd-report enable
Default
SNMP obtains client IPv6 addresses learned from both DHCPv6 and ND packets.
Views
Service template view
Predefined user roles
Usage guidelines
Make sure the service template is disabled when you execute this command.
Examples
# Disable SNMP from obtaining client IPv6 addresses learned from ND packets.
<Sysname> system-view
[Sysname] wlan service-template service1
[Sysname-wlan-st-service1] undo client ipv6-snooping snmp-nd-report enable