Contents

AC hierarchy commands· 1

display wlan ac-role· 1

display wlan client 1

display wlan local-ac (on local ACs) 7

display wlan local-ac connection-record· 8

display wlan local-ac online-time· 9

location (AP group view) 10

location (RRM holddown group view) 10

location (service template view) 11

reset wlan local-ac· 12

roam central-ac-auth enable· 12

wlan central-ac· 13

wlan local-ac capwap source-vlan· 14

wlan local-ac enable· 14

wlan location· 15

 

AC hierarchy commands

display wlan ac-role

Use display wlan ac-role to display the current AC role.

Syntax

display wlan ac-role

Views

Any view

Predefined user roles

network-admin

network-operator

Usage guidelines

Only central ACs support this command.

Examples

# Display the current AC role.

<Sysname> display wlan ac-role

Current AC role: Central AC

Table 1 Command output

Field	Description
Current AC role	AC role: ·         Common. ·         Central AC. ·         Local AC. ·         Unknown.

 

display wlan client

Use display wlan client to display client information.

Syntax

display wlan client distributed-sys [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

distributed-sys: Specifies the AC hierarchical network.

verbose: Displays detailed client information. If you do not specify this keyword, the command displays brief client information.

Examples

# Display brief information about all clients.

<Sysname> display wlan client distributed-sys

Total number of clients: 3

 

MAC address    Username         AP name       RID   IPv4 address        VLAN

000f-e265-6400 N/A              ap1           1     1.1.1.1             100

000f-e265-6401 user             ap2           1     3.0.0.3             200

84db-ac14-dd08 N/A              ap1           1     5.5.5.3             1

Table 2 Command output

Field	Description
MAC address	Client MAC address.
Username	Client username: ·         The field displays the client username if the client uses 802.1X or MAC authentication. ·         The field displays N/A if the client does not use 802.1X or MAC authentication. NOTE: If the client uses portal authentication, this field does not display the portal username of the client.
AP name	Name of the AP that the client is associated with.
RID	ID of the radio that the client is associated with.
IPv4 address	IPv4 address of the client.
VLAN ID	ID of the VLAN to which the client belongs.

 

# Display detailed information about all clients.

<Sysname> display wlan client distributed-sys verbose

Total number of clients: 1

 

MAC address                        : 000f-e265-6400

IPv4 address                       : 10.1.1.114

IPv6 address                       : 2001::1234:5678:0102:0304

Username                           : N/A

AID                                : 1

AP ID                              : 1

AP name                            : ap1

Radio ID                           : 1

SSID                               : office

BSSID                              : 0026-3e08-1150

VLAN ID                            : 3

Sleep count                        : 3

Wireless mode                      : 802.11ac

Channel bandwidth                  : 80MHz

SM power save                      : Enabled

SM power save mode                 : Dynamic

Short GI for 20MHz                 : Supported

Short GI for 40MHz                 : Supported

Short GI for 80MHz                 : Supported

Short GI for 160/80+80MHz          : Not supported

STBC RX capability                 : Not supported

STBC TX capability                 : Not supported

LDPC RX capability                 : Not supported

SU beamformee capability           : Not supported

MU beamformee capability           : Not supported

Beamformee STS capability          : N/A

Block Ack                          : TID 0 In

Supported VHT-MCS set              : NSS1 0, 1, 2, 3, 4, 5, 6, 7, 8

                                     NSS2 0, 1, 2, 3, 4, 5, 6, 7, 8

Supported HT MCS set                 : 0, 1, 2, 3, 4, 5, 6, 7,

                                     8, 9, 10, 11, 12, 13, 14,

                                     15, 16, 17, 18, 19, 20,

                                     21, 22, 23

Supported rates                    : 6, 9, 12, 18, 24, 36,

                                     48, 54 Mbps

QoS mode                           : WMM

Listen interval                    : 10

RSSI                               : 62

Rx/Tx rate                         : 130/195 Mbps

Authentication method              : Open system

Security mode                      : PRE-RSNA

AKM mode                           : Not configured

Cipher suite                       : N/A

User authentication mode           : Bypass

Authorization ACL ID               : 3001(Not effective)

Authorization user profile         : N/A

Roam status                        : N/A

Key derivation                     : SHA1

PMF status                         : Enabled

Forward policy name                : Not configured

Online time                        : 0days 0hours 1minutes 13seconds

FT status                          : Inactive

Table 3 Command output

Field	Description
MAC address	Client MAC address.
IPv4 address	Client IPv4 address.
IPv6 address	Client IPv6 address.
Username	Client username: ·         The field displays the client username if the client uses 802.1X or MAC authentication. ·         The field displays N/A if the client does not use 802.1X or MAC authentication. NOTE: If the client uses portal authentication, this field does not display the portal username of the client.
AID	Association ID.
AP ID	ID of the AP that the client is associated with.
AP name	Name of the AP that the client is associated with.
Radio ID	ID of the radio that the client is associated with.
SSID	SSID with which the client is associated.
VLAN ID	ID of the VLAN to which the client belongs.
Sleep count	Client sleep times.
Wireless mode	Wireless mode: ·         802.11a. ·         802.11b. ·         802.11g. ·         802.11gn. ·         802.11an. ·         802.11ac.
Channel bandwidth	Channel bandwidth: ·         20 MHz. ·         40 MHz. ·         80 MHz. ·         160 MHz.
SM Power Save	SM Power Save status: ·         Enabled—Only one antenna of the client operates in active state, and others operate in sleep state to save power. ·         Disabled.
SM power save mode	Power saving mode: ·         Dynamic. ·         Static.
Short GI for 20MHz	Whether the client supports short GI when its channel bandwidth is 20 MHz: ·         Supported. ·         Not supported.
Short GI for 40MHz	Whether the client supports short GI when its channel bandwidth is 40 MHz: ·         Supported. ·         Not supported.
Short GI for 80MHz	Whether the client supports short GI when its channel bandwidth is 80 MHz: ·         Supported. ·         Not supported.
Short GI for 160/80+80MHz	Whether the client supports short GI when its channel bandwidth is 160 MHz or 80 + 80 MHz: ·         Supported. ·         Not supported.
STBC Rx Capability	Client STBC receive capability; ·         Not Supported. ·         Supported.
STBC Tx Capability	Client STBC transmission capability: ·         Not Supported. ·         Supported.
LDPC Rx capability	Client LDPC receive capability; ·         Not Supported. ·         Supported.
SU beamformee capability	Client SU beamformee capability: ·         Not Supported. ·         Supported. This field is supported only by 802.11ac radios.
MU beamformee capability	Client MU beamformee capability: ·         Not Supported. ·         Supported. This field is supported only by 802.11ac radios.
Beamformee STS capability	Client beamformee STS capability. This field displays N/A if the feature is not supported.
Block Ack	Negotiation result of Block ACK with TID: ·         TID 0 In—Sends Block ACK for inbound traffic. ·         TID 0 Out—Sends Block ACK for outbound traffic. ·         TID 0 Both—Sends Block ACK for both inbound and outbound traffic. ·         N/A—Does not send Block ACK for both inbound and outbound traffic.
Supported VHT-MCS set	VHT-MCS supported by the client.
Supported HT MCS set	HT-MCS supported by the client.
QoS mode	QoS mode: ·         N/A—WMM is not supported. ·         WMM—WMM is supported. WMM information is negotiated between an AP and a client that both support WMM.
Listen interval	Interval at which the client wakes up to listen for beacon frames. It is counted by beacon interval.
RSSI	Received signal strength indication. This value indicates the client signal strength detected by the AP.
Rx/Tx rate	Sending and receiving rates of data, management, and control frames.
Authentication method	Authentication method: ·         Open system. ·         Shared key.
Security mode	Security mode: ·         RSN—Beacons and probe responses carry RSN IE. ·         WPA—Beacons and probe responses carry WPA IE. ·         PRE-RSNA—Beacons and probe responses do not carry RSN IE or WPA IE.
AKM mode	AKM mode: ·         802.1X. ·         PSK. ·         Not configured.
Cipher suite	Cipher suite: ·         N/A. ·         WEP40. ·         WEP104. ·         WEP128. ·         CCMP. ·         TKIP.
User authentication mode	User authentication mode: ·         Bypass—No client authentication. ·         MAC. ·         802.1X. ·         OUI.
Authorization ACL ID	Authorized ACL number: ·         This field displays the ACL number if the authorization ACL takes effect. ·         This field displays ACL number(Not effective) if the authorization ACL does not take effect. ·         This field displays N/A if the authentication server is configured without any authorization ACL.
Authorization user profile	Name of the authorization user profile: ·         This field displays the authorized user profile name if the authorization user profile takes effect. ·         This field displays authorized user profile name + Not effective if the authorization user profile does not take effect. ·         This field displays N/A if the authentication server is configured without any authorization user profile.
Roam status	Roam status: ·         Roaming in progress. ·         Inter-AC slow roaming. ·         Inter-AC fast roaming. ·         Intra-AC slow roaming. ·         Intra-AC fast roaming. ·         This field displays N/A if the client stays in one BSS after coming online.
Key derivation	Key derivation type: ·         SHA1—Uses the HMAC-SHA1 hash algorithm. ·         SHA256—Uses the HMAC-SHA256 hash algorithm. ·         N/A—No key derivation algorithm is involved for the authentication type.
PMF status	PMF status: ·         Enabled—Management frame protection is enabled. ·         Disabled—Management frame protection is disabled. ·         N/A—Management frame protection is not involved.
Forward policy name	WLAN forwarding policy name: ·         Not configured. ·         Policy-name.
Online time	Client online duration.
FT status	Fast BSS transition (FT): ·         Active—FT is enabled. ·         Inactive—FT is disabled.

 

display wlan local-ac (on local ACs)

Use display wlan local-ac to display local AC information on the local AC.

Syntax

display wlan local-ac

Views

Any view

Predefined user roles

network-admin

network-operator

Usage guidelines

If you specify a central AC and enable the local AC feature, this command displays both local AC and central AC information.

Examples

# Display local AC information on the local AC.

<Sysname> display wlan local-ac

Local AC information:

  Model                          : WA4320H

  Serial ID                      : 219801A0YG8165E00001

  MAC address                    : 00EF-003C-0001

  Local AC address               : 1.1.1.55

  H/W version                    : Ver.A

  S/W version                    : c5419

  Boot version                   : 1.01

  Static central AC IPv4 address : 1.1.1.5

  Static central AC IPv6 address : 10::1

 

Central AC information:

  Central AC address             : 1.1.1.5

  State                          : Run

  Sent control packets           : 100

  Received control packets       : 100

Table 4 Command output

Field	Description
Local AC address	IP address of the local AC. This field displays N/A if the local AC has not established a tunnel with a central AC.
H/W version	Hardware version of the local AC.
S/W version	Software version of the local AC.
Boot version	BootWare version of the local AC.
Static central AC IPv4 address	Static IPv4 address of the central AC. This field displays Not configured if it is not configured.
Static central AC IPv6 address	Static IPv6 address of the central AC. This field displays Not configured if it is not configured.
State	Tunnel state: ·         Idle. ·         Sulking—The local AC fails to discover the central AC. ·         Discovery—The local AC is discovering the central AC. ·         Join—The local AC sends a join request to the central AC to establish the tunnel. ·         Image Download—The local AC is downloading a version from the central AC. ·         Config—The local AC is downloading initial configuration from the central AC. ·         Data Check—The local AC is checking data. ·         Run—The tunnel has been established successfully. ·         N/A—The local AC cannot come online for specific reasons such as local AC feature disabled.
Sent control packets	Number of control packets sent by the central AC in Run state.
Received control packets	Number of control packets received by the central in Run state.

‌

display wlan local-ac connection-record

Use display wlan local-ac connection-record to display local AC connection records on the central AC.

Syntax

display wlan local-ac { all | name local-ac-name } connection-record

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

all: Specifies all local ACs.

name local-ac-name: Specifies a local AC by its name, a case-sensitive string of 1 to 64 characters. The string can contain letters, digits, underscores (_), dots (.), left brackets ([), right brackets (]), forward slashes (/), and hyphens (-).

Usage guidelines

Only central ACs support this command.

Examples

# Display connection records of all local ACs on the central AC.

<Sysname> display wlan local-ac all connection-record

Local AC Information

 State : D = Discovery,       J  = Join,       O = Offline,    R = Run

 

AC name                         IP address       State      State changed at

bac                             192.168.100.27   R          01-06 09:06:40

Table 5 Command output

Field	Description
State	Local AC state: ·         D—The local AC discovered the central AC. ·         J—The management tunnel has been established. ·         O—The local AC has been disconnected from the central AC. ·         R—The local AC is operating. It indicates that the local AC and the central AC have established a CAPWAP tunnel successfully.
State changed at	Time at which the local AC entered the current state.

‌

display wlan local-ac online-time

Use display wlan local-ac online-time to display the online duration of an online local AC on the central AC.

Syntax

display wlan local-ac { all | name local-ac-name } online-time

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

all: Specifies all online local ACs.

name local-ac-name: Specifies an online local AC by its name, a case-sensitive string of 1 to 64 characters. The string can contain letters, digits, underscores (_), dots (.), left brackets ([), right brackets (]), forward slashes (/), and hyphens (-).

Usage guidelines

Only central ACs support this command.

Examples

# Display the online duration of all online local ACs on the central AC.

<Sysname> display wlan local-ac all online-time

AC name              IP address        Time

bac1                 1.1.1.10          1 days 2 hours 13 minutes 39 seconds

bac2                 100:100:100::12   0 days 3 hours 10 minutes 20 seconds

Table 6 Command output

Field	Description
AC name	Name of the local AC.
IP address	IP address of the local AC.
Time	Online duration of the local AC.

‌

location (AP group view)

Use location to assign a location identifier to an AP group.

Use undo location to restore the default.

Syntax

location location-name

undo location

Default

The default location identifier default-location is assigned to an AP group.

Views

AP group view

Predefined user roles

network-admin

Parameters

location-name: Specifies a location identifier, a case-insensitive string of 1 to 31 characters. It can contain letters, digits, underscores (_), left brackets ([), right brackets (]), forward slashes (/), and hyphens (-).

Usage guidelines

After you assign a location identifier to an AP group, the AP group will be assigned to that location.

An administrator can view and manage only an AP group whose location identifier is accessible to his user role when he logs in to the central AC from the CLI and the Web interface.

Examples

# Assign location identifier area1 to AP group g1.

<Sysname> system-view

[Sysname] wlan ap-group g1

[Sysname-wlan-ap-group-g1] location area1

Related commands

wlan location

location (RRM holddown group view)

Use location to assign a location identifier to an RRM holddown group.

Use undo location to restore the default.

Syntax

location location-name

undo location

Default

The default location identifier default-location is assigned to an RRM holddown group.

Views

RRM holddown group view

Predefined user roles

network-admin

Parameters

location-name: Specifies a location identifier, a case-insensitive string of 1 to 31 characters. It can contain letters, digits, underscores (_), left brackets ([), right brackets (]), forward slashes (/), and hyphens (-).

Usage guidelines

After you assign a location identifier to an RRM holddown group, the RRM holddown group will be assigned to that location.

An administrator can view and manage only an RRM holddown group whose location identifier is accessible to his or her user role when the administrator logs in to the central AC from the CLI and the Web interface.

Examples

# Assign location identifier area1 to RRM holddown group 1.

<Sysname> system-view

[Sysname] wlan rrm-calibration-group 1

[Sysname-wlan-rrm-calibration-group-1] location area1

Related commands

wlan location

location (service template view)

Use location to assign a location identifier to a service template.

Use undo location to restore the default.

Syntax

location location-name

undo location

Default

The default location identifier default-location is assigned to a service template.

Views

Service template view

Predefined user roles

network-admin

Parameters

location-name: Specifies a location identifier, a case-insensitive string of 1 to 31 characters. It can contain letters, digits, underscores (_), left brackets ([), right brackets (]), forward slashes (/), and hyphens (-).

Usage guidelines

After you assign a location identifier to a service template, the service template will be assigned to that location.

An administrator can view and manage only a service template whose location identifier is accessible to his user role when he logs in to the central AC from the CLI and the Web interface.

Examples

# Assign location identifier area1 to service template 1.

<Sysname> system-view

[Sysname] wlan service-template service1

[Sysname-wlan-st-service1] location area1

Related commands

wlan location

reset wlan local-ac

Use reset wlan local-ac to reboot the specified local AC or all local ACs.

Syntax

reset wlan local-ac { all | name ac-name }

Views

User view

Predefined user roles

network-admin

Parameters

all: Specifies all local ACs.

name ac-name: Specifies the name of a local AC, a case-sensitive string of 1 to 64 characters. The string can contain letters, digits, underscores (_), dots (.), left brackets ([), righ brackets (]), forward slashes (/), and hyphens (-).

Usage guidelines

Only central ACs support this command.

Rebooting a local AC logs off all the online APs associated with the local AC. If the central AC has other connected local ACs, the offline APs will come online again from these local ACs.

Examples

# Reboot local AC local-ac1.

<Sysname> reset wlan local-ac name local-ac1

Related commands

wlan local-ac name

roam central-ac-auth enable

Use roam central-ac-auth enable to enable client roaming when the central AC acts as the authenticator.

Use undo roam central-ac-auth enable to disable client roaming when the central AC acts as the authenticator.

Syntax

roam central-ac-auth enable

undo roam central-ac-auth enable

Default

Client roaming is enabled when the central AC acts as the authenticator.

Views

Service template view

Predefined user roles

network-admin

Usage guidelines

Only central ACs support this command.

In AC hierarchy network, clients cannot perform inter- or intra-local AC roaming when the central AC acts as the authenticator because roaming entries are generated only on the central AC. Perform this task to enable local ACs to generate roaming entries when the central AC is specified as the authenticator and enable clients to perform roaming.

When the central AC acts as the authenticator, RSN + 802.1X clients cannot perform fast roaming even if this feature is enabled.

Make sure the service template is disabled before you execute this command.

Examples

# Enable client roaming when the central AC acts as the authenticator.

<Sysname> system-view

[Sysname] wlan service-template service1

[Sysname-wlan-st-service1] roam central-ac-auth enable

wlan central-ac

Use wlan central-ac to specify a central AC for a local AC.

Use undo wlan central-ac to delete an IP address of a central AC.

Syntax

wlan central-ac { ip ipv4-address | ipv6 ipv6-address }

undo wlan central-ac { ip [ ipv4-address ] | ipv6 [ ipv6-address ] }

Default

No central AC is specified for a local AC.

Views

System view

Predefined user roles

network-admin

Parameters

ip ipv4-address: Specifies an IPv4 address of a central AC.

ipv6 ipv6-address: Specifies an IPv6 address of a central AC.

Usage guidelines

Only local ACs support this command.

You can specify a maximum of three IPv4 addresses and three IPv6 addresses.

If you do not specify any keywords when executing the undo command, the command deletes all IP addresses.

Examples

# Specify the central AC with IP address 192.168.100.11 for the local AC.

<Sysname> system-view

[Sysname] wlan central-ac ip 192.168.100.11

wlan local-ac capwap source-vlan

Use wlan local-ac capwap source-vlan to specify a VLAN that the local AC uses to establish a tunnel with the central AC.

Use undo wlan local-ac capwap source-vlan to restore the default.

Syntax

wlan local-ac capwap source-vlan vlan-id

undo wlan local-ac capwap source-vlan

Default

A local AC uses VLAN 1 to establish a tunnel with the central AC.

Views

System view

Predefined user roles

network-admin

Parameters

vlan-id: Specifies a VLAN ID in the range of 1 to 4094.

Usage guidelines

Only local ACs support this command.

Examples

# Configure the local AC to use VLAN 2 to establish a tunnel with the central AC.

<Sysname> system-view

[Sysname] wlan local-ac capwap source-vlan 2

wlan local-ac enable

Use wlan local-ac enable to enable the local AC feature.

Use undo wlan local-ac enable to disable the local AC feature.

Syntax

wlan local-ac enable

undo wlan local-ac enable

Default

The local AC feature is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

Only common ACs and local ACs support this command.

After you enable the local AC feature on the AC and specify a central AC, the AC acts as a local AC to establish a CAPWAP tunnel with the central AC.

The undo command terminates the CAPWAP tunnel between the local AC and the central AC.

Examples

# Enable the local AC feature.

<Sysname> system-view

[Sysname] wlan local-ac enable

wlan location

Use wlan location to create a location identifier.

Use undo wlan location to delete a location identifier.

Syntax

wlan location location-name

undo wlan location location-name

Default

The default location identifier default-location exists.

Views

System view

Predefined user roles

network-admin

Parameters

location-name: Specifies a location identifier, a case-insensitive string of 1 to 31 characters. It can contain letters, digits, underscores (_), left brackets ([), right brackets (]), forward slashes (/), and hyphens (-).

Usage guidelines

The default location identifier is accessible to all user roles and cannot be deleted.

You can create a maximum of 512 location identifiers.

Examples

# Create location identifier area1.

<Sysname> system-view

[Sysname] wlan location area1