In Robust Security Network Association (RSNA) authentication, an AP and a client use EAPOL-Key packets in the four-way handshake to negotiate the keys. After that, the AP and the client periodically exchange EAPOL-Key packets to update the keys.

During key negotiation or update, the AP keeps retransmitting an EAPOL-Key packet until a response is received or the maximum number of retries for an EAPOL-Key packet is reached.

The system starts to count the retries when the maximum number of retransmissions is reached.

To ensure successful RSN key negotiation or update, you can increase the maximum number of retransmissions and the maximum number of retries for an EAPOL-Key packet.

For more information about RSN key negotiation or update, see "Configuring WLAN security."

Examples

# In service template view, set the maximum number of retransmissions for an EAPOL-Key packet to one and the retransmission interval to 400 milliseconds.

<Sysname> system-view

[Sysname] wlan service-template service1

[Sysname-wlan-st-svervice1] option 4-way-handshake resend 1 interval 400

Related commands

option 4-way-handshake retry

Use option 4-way-handshake retry to set the maximum number of retries for an EAPOL-Key packet and the retry interval.

Use undo option 4-way-handshake retry to restore the default.

Syntax

option 4-way-handshake retry max-count [ interval interval ]

undo option 4-way-handshake retry

Default

The maximum number of retries for an EAPOL-Key packet is three, and the retry interval is 5 seconds.

Views

Service template view

Predefined user roles

network-admin

Parameters

retry max-count: Specifies the maximum number of retries for an EAPOL-Key packet, in the range of 0 to 3.

interval interval: Specifies the retry interval in the range of 2 to 5 seconds.

Usage guidelines

During RSN key negotiation or update, an AP keeps retransmitting an EAPOL-Key packet until a response is received or the maximum number of retries for an EAPOL-Key packet is reached.

The system starts to count the retries when the maximum number of retransmissions is reached.

If you execute this command for multiple times, the most recent configuration takes effect.

Examples

# In service template view, set the maximum number of retries for an EAPOL-Key packet to two and the retry interval to 3 seconds.

<Sysname> system-view

[Sysname] wlan service-template service1

[Sysname-wlan-st-service1] option 4-way-handshake retry 2 interval 3

Related commands

option 4-way-handshake resend

option broadcast-multicast-buffer

Use option broadcast-multicast-buffer enable to enable multicast and broadcast buffering.

Use option broadcast-multicast-buffer disable to disable multicast and broadcast buffering.

Use undo option broadcast-multicast-buffer to restore the default.

Syntax

option broadcast-multicast-buffer { disable | enable [ limit limit ] }

undo option broadcast-multicast-buffer

Default

In radio view, a radio uses the configuration in an AP group's radio view.

In an AP group's radio view, multicast and broadcast buffering is enabled.

Views

Radio view

AP group's radio view

Predefined user roles

network-admin

Parameters

limit limit: Specifies the maximum number of multicast or broadcast packets that can be buffered. The value range for the limit argument is 1 to 600 and the default value is 100.

Usage guidelines

With this feature enabled, the AC stops sending broadcast and multicast packets and buffers them if an associated client is in sleep state. This mechanism affects the performance of real-time multicast applications.

With this feature disabled, the AC directly sends all broadcast and multicast packets regardless of whether an associated client is in sleep state.

Examples

# Disable multicast and broadcast buffering for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6330

[Sysname-wlan-ap-ap1] radio 1

[Sysname-wlan-ap-ap1-radio-1] option broadcast-multicast-buffer disable

# Disable multicast and broadcast buffering for APs with model WA6330 in AP group 1.

<Sysname> system-view

[Sysname] wlan ap-group 1

[Sysname-wlan-ap-group-1] ap-model WA6330

[Sysname-wlan-ap-group-1-ap-model-WA6330] radio 1

[Sysname-wlan-ap-group-1-ap-model-WA6330-radio-1] option broadcast-multicast-buffer disable

option capacity-adjust

Use option capacity-adjust enable to enable transmit power adjustment.

Use option capacity-adjust disable to disable transmit power adjustment.

Use undo capacity-adjust to restore the default.

Syntax

option capacity-adjust { disable | enable [ all ] { increase | decrease } value }

undo option capacity-adjust

Default

In radio view, a radio uses the configuration in an AP group's radio view.

In an AP group's radio view, transmit power adjustment is disabled.

Views

Radio view

AP group's radio view

Predefined user roles

network-admin

Parameters

all: Configures transmit power adjustment for all rates. If you do not specify this keyword, the command configures transmit power adjustment for mandatory rates.

increase: Increases the transmit power.

decrease: Decreases the transmit power.

value: Specifies the transmit power adjustment value in the range of 1 to 27 dBm.

Usage guidelines

This feature enables an AP to use the adjusted transmit power to transmit packets.

Examples

# Enable transmit power adjustment for AP ap1, and increase the transmit power by 1 dBm for all rates.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6330

[Sysname-wlan-ap-ap1] radio 1

[Sysname-wlan-ap-ap1-radio-1] option capacity-adjust all increase 1

# Enable transmit power adjustment for APs with model WA6330 in AP group apgroup1, and increase the transmit power by 1 dBm for all rates.

<Sysname> system-view

[Sysname] wlan ap-group apgroup1

[Sysname-wlan-ap-group-apgroup1] ap-model WA6330

[Sysname-wlan-ap-group-apgroup1-ap-model-WA6330] radio 1

[Sysname-wlan-ap-group-apgroup1-ap-model-WA6330-radio-1] option capacity-adjust all increase 1

option channel-reuse-optimization

Use option channel-reuse-optimization enable to enable channel reuse.

Use option channel-reuse-optimization disable to disable channel reuse.

Use undo option channel-reuse-optimization to restore the default.

Syntax

option channel-reuse-optimization { disable | enable level level }

undo option channel-reuse-optimization

Default

In radio view, a radio uses the configuration in an AP group's radio view.

In an AP group's radio view, channel reuse is disabled.

Views

Radio view

AP group's radio view

Predefined user roles

network-admin

Parameters

level level: Specifies the channel reuse level in the range of 1 to 10. The recommended channel reuse level is 6.

Usage guidelines

This feature enables an AP to ignore packets with a signal strength lower than the specified channel reuse level. This mechanism enables the AP to obtain more radio resources and improves the performance of APs working on the same channel.

Examples

# Enable channel reuse for AP ap1 and set the channel reuse level to 5.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6330

[Sysname-wlan-ap-ap1] radio 1

[Sysname-wlan-ap-ap1-radio-1] option channel-reuse-optimization enable level 5

# Enable channel reuse for APs with model WA6330 in AP group 1 and set the channel reuse level to 5.

<Sysname> system-view

[Sysname] wlan ap-group 1

[Sysname-wlan-ap-group-1] ap-model WA6330

[Sysname-wlan-ap-group-1-ap-model-WA6330] radio 1

[Sysname-wlan-ap-group-1-ap-model-WA6330-radio-1] option channel-reuse-optimization enable level 5

option client fast-forwarding

Use option client fast-forwarding enable to enable fast forwarding of AP-to-client data frames.

Use option client fast-forwarding disable to disable fast forwarding of AP-to-client data frames.

Use undo option client fast-forwarding to restore the default.

Syntax

option client fast-forwarding { disable | enable level level-value }

undo option client fast-forwarding

Default

In radio view, a radio uses the configuration in an AP group's radio view.

In an AP group's radio view, fast forwarding of AP-to-client data frames is disabled.

Views

Radio view

AP group's radio view

Predefined user roles

network-admin

Parameters

level level-value: Specifies the fast forwarding level in the range of 1 to 4.

Usage guidelines

This feature enables an AP to forward data frames to clients without extra processing (such as verification and counting) to improve processing efficiency.

Examples

# Enable fast forwarding of AP-to-client data frames for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6330

[Sysname-wlan-ap-ap1] radio 1

[Sysname-wlan-ap-ap1-radio-1] option client fast-forwarding enable level 1

# Enable fast forwarding of AP-to-client data frames for APs with model WA6330 in AP group 1.

<Sysname> system-view

[Sysname] wlan ap-group 1

[Sysname-wlan-ap-group-1] ap-model WA6330

[Sysname-wlan-ap-group-1-ap-model-WA6330] radio 1

[Sysname-wlan-ap-group-1-ap-model-WA6330-radio-1] option client fast-forwarding enable level 1

option client hide-node-protection

Use option client hide-node-protection enable to enable hidden node protection.

Use option client hide-node-protection disable to disable hidden node protection.

Use undo option client hide-node-protection to restore the default.

Syntax

option client hide-node-protection { disable | enable }

undo option client hide-node-protection

Default

In radio view, a radio uses the configuration in an AP group's radio view.

In an AP group's radio view, hidden node protection is disabled.

Views

Radio view

AP group's radio view

Predefined user roles

network-admin

Usage guidelines

This command takes effect only on 802.11g, 802.11n, and 802.11ac clients.

This feature enables clients to send RTS or CTS frames before transmitting frames to avoid interference from hidden nodes.

Examples

# Enable hidden node protection for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6330

[Sysname-wlan-ap-ap1] radio 1

[Sysname-wlan-ap-ap1-radio-1] option client hide-node-protection enable

# Enable hidden node protection for APs with model WA6330 in AP group 1.

<Sysname> system-view

[Sysname] wlan ap-group 1

[Sysname-wlan-ap-group-1] ap-model WA6330

[Sysname-wlan-ap-group-1-ap-model-WA6330] radio 1

[Sysname-wlan-ap-group-1-ap-model-WA6330-radio-1] option client hide-node-protection enable

option client reconnect

Use option client reconnect enable to enable AP-triggered client reassociation.

Use option client reconnect disable to disable AP-triggered client reassociation.

Use undo option client reconnect to restore the default.

Syntax

option client reconnect { disable | enable [ rssi rssi-value ] [ interval interval ] }

undo option client reconnect

Default

In radio view, a radio uses the configuration in an AP group's radio view.

In an AP group's radio view, AP-triggered client reassociation is disabled.

Views

Radio view

AP group's radio view

Predefined user roles

network-admin

Parameters

rssi rssi-value: Specifies the RSSI threshold in the range of 5 to 100. The default and recommended RSSI thresholds are 10 and 20, respectively.

interval interval: Specifies the interval at which an AP detects the signal strength of the clients. The value range for the interval argument is 3 to 10 seconds and the default interval is 3 seconds.

Usage guidelines

This feature enables an AP to send deauthentication frames to a client when the AP detects that the signal strength of the client is lower than the specified RSSI threshold. Then, the client can reassociate with the AP or roam to another AP.

Examples

# Enable AP-triggered client reassociation for AP ap1. Set the RSSI threshold and detection interval to 30 and 5 seconds, respectively.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6330

[Sysname-wlan-ap-ap1] radio 1

[Sysname-wlan-ap-ap1-radio-1] option client reconnect enable rssi 30 interval 5

# Enable AP-triggered client reassociation for APs with model WA6330 in AP group 1. Set the RSSI threshold and detection interval to 30 and 5 seconds, respectively.

<Sysname> system-view

[Sysname] wlan ap-group 1

[Sysname-wlan-ap-group-1] ap-model WA6330

[Sysname-wlan-ap-group-1-ap-model-WA6330] radio 1

[Sysname-wlan-ap-group-1-ap-model-WA6330-radio-1] option client reconnect enable rssi 30 interval 5

option client reject

Use option client reject enable to enable an AP to reject weak-signal clients.

Use option client reject disable to disable an AP from rejecting weak-signal clients.

Use undo option client reject to restore the default.

Syntax

option client reject { disable | enable [ rssi rssi-value ] }

undo option client reject

Default

In radio view, a radio uses the configuration in an AP group's radio view.

In an AP group's radio view, a radio does not reject weak-signal clients.

Views

Radio view

AP group's radio view

Predefined user roles

network-admin

Parameters

rssi rssi-value: Specifies the RSSI threshold in the range of 5 to 100. Both the default and recommended RSSI thresholds are 10.

Usage guidelines

This feature enables an AP to reject clients with an RSSI lower than the specified threshold to release channel resources and enhance WLAN performance.

After you enable this feature, wireless clients with an RSSI lower than the threshold might fail to access the WLAN.

After a client accesses the WLAN, an AP will not log off the client with an RSSI lower than the threshold but will reject the client after it disconnects from the network.

Examples

# Enable AP ap1 to reject clients with an RSSI lower than 30 dBm.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6330

[Sysname-wlan-ap-ap1] radio 1

[Sysname-wlan-ap-ap1-radio-1] option client reject enable rssi 30

# Enable APs with model WA6330 in AP group 1 to reject clients with an RSSI lower than 30 dBm.

<Sysname> system-view

[Sysname] wlan ap-group 1

[Sysname-wlan-ap-group-1] ap-model WA6330

[Sysname-wlan-ap-group-1-ap-model-WA6330] radio 1

[Sysname-wlan-ap-group-1-ap-model-WA6330-radio-1] option client reject enable rssi 30

option dot11n-restraint

Use option dot11n-restraint enable to enable 802.11n packet suppression.

Use option dot11n-restraint disable to disable 802.11n packet suppression.

Use undo dot11n-restraint to restore the default.

Syntax

option dot11n-restraint { disable | enable packet-number packet-number packet-length packet-length } [ inbound | outbound ] [ tid tid-number ]

undo option dot11n-restraint

Default

In radio view, a radio uses the configuration in an AP group's radio view.

In an AP group's radio view, 802.11n packet suppression is disabled.

Views

Radio view

AP group's radio view

Predefined user roles

network-admin

Parameters

packet-number packet-number: Specifies the maximum number of MPDUs that can be aggregated into an A-MPDU, in the range of 1 to 64. The recommended value is 8.

packet-length packet-length: Specifies the maximum A-MPDU length, in the range of 2000 to 380000 bytes. The recommended value is 6000.

inbound: Specifies 802.11n packet suppression in the inbound direction.

outbound: Specifies 802.11n packet suppression in the outbound direction.

tid tid-number: Specifies a traffic identifier, in the range of 0 to 7. The queue type varies by TID value.

· 0 and 3—AC-BE queue.

· 1 and 2—AC-BK queue.

· 4 and 5—AC-VI queue.

· 6 and 7—AC-VO queue.

If you do not specify this option, 802.11n packet suppression applies to all types of packets.

Usage guidelines

Perform this task to suppress 802.11n packets by defining the maximum number of aggregated MPDUs and the maximum A-MPDU length. The two thresholds take effect at the same time. If either threshold is reached, the AP stops aggregation and sends the A-MPDU.

Examples

# Enable 802.11n packet suppression for AP ap1. Set the maximum number of MPDUs that can be aggregated into an A-MPDU and the maximum A-MPDU length to 30 and 10000 bytes, respectively.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6330

[Sysname-wlan-ap-ap1] radio 1

[Sysname-wlan-ap-ap1-radio-1] option dot11n-restraint enable packet-number 30 packer-length 10000

# Enable 802.11n packet suppression for APs with model WA6330 in AP group apgroup1. Set the maximum number of MPDUs that can be aggregated into an A-MPDU and the maximum A-MPDU length to 30 and 10000 bytes, respectively.

<Sysname> system-view

[Sysname] wlan ap-group apgroup1

[Sysname-wlan-ap-group-apgroup1] ap-model WA6330

[Sysname-wlan-ap-group-apgroup1-ap-model-WA6330] radio 1

[Sysname-wlan-ap-group-apgroup1-ap-model-WA6330-radio-1] option dot11n-restraint enable packet-number 30 packer-length 10000

option immediate-transmit

Use option immediate-transmit enable to enable immediate packet sending.

Use option immediate-transmit disable to disable immediate packet sending.

Use undo immediate-transmit to restore the default.

Syntax

option immediate-transmit { disable | enable }

undo immediate-transmit

Default

In radio view, a radio uses the configuration in an AP group's radio view.

In an AP group's radio view, immediate packet sending is disabled.

Views

Radio view

AP group's radio view

Predefined user roles

network-admin

Usage guidelines

When you enable this feature, APs do not detect channel collision before sending packets to save system resources and improve network throughput. Enabling this feature might cause hidden node problems. When you disable this feature, wireless devices send RTS/CTS packets to avoid channel collision.

Examples

# Disable immediate packet sending for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6330

[Sysname-wlan-ap-ap1] radio 1

[Sysname-wlan-ap-ap1-radio-1] option immediate-transmit disable

# Disable immediate packet sending for APs with model WA6330 in AP group apgroup1.

<Sysname> system-view

[Sysname] wlan ap-group apgroup1

[Sysname-wlan-ap-group-apgroup1] ap-model WA6330

[Sysname-wlan-ap-group-apgroup1-ap-model-WA6330] radio 1

[Sysname-wlan-ap-group-apgroup1-ap-model-WA6330-radio-1] option immediate-transmit disable

option keep-active

Use option keep-active enable to enable decreasing the sleep interval of wireless clients.

Use option keep-active disable to disable decreasing the sleep interval of wireless clients.

Use undo option keep-active to restore the default.

Syntax

option keep-active { disable | enable }

undo option keep-active

The following compatibility matrixes show the support of hardware platforms for this command:

Hardware series	Model	Command compatibility
WA6600 series	WA6638 WA6638i WA6636 WA6630X WA6628 WA6628X WA6622 WA6620 WA6620X WA6620X-LI WA6620XE-LI	No
WA6500 series	WA6528i	Yes
WA6300 series	WA6338 WA6338-HI WA6338-LI WA6330 WA6330-LI WA6322 WA6322H WA6322H-LI WA6320 WA6320-C WA6320-D WA6320-SI WA6320S-C WA6320S-E WA6320H WA6320H-LI WA6320H-XEPON	Yes
WAP922 series	WAP922 WAP922E WAP922H WAP922X	Yes: · WAP922 · WAP922E · WAP922H No: · WAP922X
WAP923 series	WAP923	Yes

‌

Default

In radio view, a radio uses the configuration in an AP group's radio view.

In an AP group's radio view, decreasing the sleep interval of wireless clients is disabled.

Views

Radio view

AP group's radio view

Predefined user roles

network-admin

Usage guidelines

A wireless client in sleep state listens for traffic indication map (TIM) information in beacon frames to determine whether the associated AP has buffered packets for it. This feature enables an AP to modify the TIM information in beacon frames to decrease the sleep interval of wireless clients to improve transmission efficiency.

Examples

# Enable decreasing the sleep interval of wireless clients for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6330

[Sysname-wlan-ap-ap1] radio 1

[Sysname-wlan-ap-ap1-radio-1] option keep-active enable

# Enable decreasing the sleep interval of wireless clients for APs with model WA6330 in AP group apgroup1.

<Sysname> system-view

[Sysname] wlan ap-group apgroup1

[Sysname-wlan-ap-group-apgroup1] ap-model WA6330

[Sysname-wlan-ap-group-apgroup1-ap-model-WA6330] radio 1

[Sysname-wlan-ap-group-apgroup1-ap-model-WA6330-radio-1] option keep-active enable

option max-interfer-threshold

Use option max-interfer-threshold enable to set the maximum interference threshold.

Use option max-interfer-threshold disable to remove the configuration.

Use undo max-interfer-threshold to restore the default.

Syntax

option max-interfer-threshold { disable | enable value }

undo max-interfer-threshold

Default

In radio view, a radio uses the configuration in an AP group's radio view.

In an AP group's radio view, the maximum interference threshold is not set.

Views

Radio view

AP group's radio view

Predefined user roles

network-admin

Parameters

value: Specifies the maximum interference threshold in the range of 20 to 120 dBm. The recommended value is 50.

Examples

# Set the maximum interference threshold to 30 dBm for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6330

[Sysname-wlan-ap-ap1] radio 1

[Sysname-wlan-ap-ap1-radio-1] option max-interfer-threshold enable 30

# Set the maximum interference threshold to 30 dBm for APs with model WA6330 in AP group apgroup1.

<Sysname> system-view

[Sysname] wlan ap-group apgroup1

[Sysname-wlan-ap-group-apgroup1] ap-model WA6330

[Sysname-wlan-ap-group-apgroup1-ap-model-WA6330] radio 1

[Sysname-wlan-ap-group-apgroup1-ap-model-WA6330-radio-1] option max-interfer-threshold enable 30

option optimize-link-performance

Use option optimize-link-performance { inbound | outbound } enable to enable link performance optimization.

Use option optimize-link-performance { inbound | outbound } disable to disable link performance optimization.

Use undo optimize-link-performance to restore the default.

Syntax

option optimize-link-performance { inbound | outbound } { disable | enable } [ value ]

undo optimize-link-performance { inbound | outbound }

Default

In radio view, a radio uses the configuration in an AP group's radio view.

In an AP group's radio view, link performance optimization is disabled.

Views

Radio view

AP group's radio view

Predefined user roles

network-admin

Parameters

inbound: Optimizes downlink performance.

outbound: Optimizes uplink performance.

value: Specifies the packet fragmentation threshold in the range of 0 to 2048 bytes.

Examples

# Enable uplink performance optimization for AP ap1 and set the packet fragmentation threshold to 100 bytes.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6330

[Sysname-wlan-ap-ap1] radio 1

[Sysname-wlan-ap-ap1-radio-1] option optimize-link-performance outbound enable 100

# Enable uplink performance optimization for APs with model WA6330 in AP group apgroup1 and set the packet fragmentation threshold to 100 bytes.

<Sysname> system-view

[Sysname] wlan ap-group apgroup1

[Sysname-wlan-ap-group-apgroup1] ap-model WA6330

[Sysname-wlan-ap-group-apgroup1-ap-model-WA6330] radio 1

[Sysname-wlan-ap-group-apgroup1-ap-model-WA6330-radio-1] option optimize-link-performance outbound enable 100

option probe-response-try

Use option probe-response-try enable to set the maximum number of probe response attempts.

Use option probe-response-try disable to remove the configuration.

Use undo probe-response-try to restore the default.

Syntax

option probe-response-try { disable | enable number }

undo probe-response-try

The following compatibility matrixes show the support of hardware platforms for this command:

Hardware series	Model	Command compatibility
WA6600 series	WA6638 WA6638i WA6636 WA6630X WA6628 WA6628X WA6622 WA6620 WA6620X WA6620X-LI WA6620XE-LI	No
WA6500 series	WA6528i	Yes
WA6300 series	WA6338 WA6338-HI WA6338-LI WA6330 WA6330-LI WA6322 WA6322H WA6322H-LI WA6320 WA6320-C WA6320-D WA6320-SI WA6320S-C WA6320S-E WA6320H WA6320H-LI WA6320H-XEPON	Yes
WAP922 series	WAP922 WAP922E WAP922H WAP922X	Yes: · WAP922 · WAP922E · WAP922H No: · WAP922X
WAP923 series	WAP923	Yes

‌

Default

In radio view, a radio uses the configuration in an AP group's radio view.

In an AP group's radio view, the maximum number of probe response attempts is not limited.

Views

Radio view

AP group's radio view

Predefined user roles

network-admin

Parameters

number: Specifies the maximum number of probe response attempts, in the range of 1 to 16.

Usage guidelines

Perform this task to reduce the number of probe responses sent by a radio to save resources and improve network performance.

Examples

# Set the maximum number of probe response attempts to 10 for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6330

[Sysname-wlan-ap-ap1] radio 1

[Sysname-wlan-ap-ap1-radio-1] option probe-response-try enable 10

# Set the maximum number of probe response attempts to 10 for APs with model WA6330 in AP group apgroup1.

<Sysname> system-view

[Sysname] wlan ap-group apgroup1

[Sysname-wlan-ap-group-apgroup1] ap-model WA6330

[Sysname-wlan-ap-group-apgroup1-ap-model-WA6330] radio 1

[Sysname-wlan-ap-group-apgroup1-ap-model-WA6330-radio-1] option probe-response-try enable 10

option roam-navigation

Use option roam-navigation enable to enable roaming navigation.

Use option roam-navigation disable to disable roaming navigation.

Use undo option roam-navigation to restore the default.

Syntax

option roam-navigation { disable | enable rssi rssi-value { beacon-power power-value | probe-response-power power-value } }

undo option roam-navigation

The following compatibility matrix shows the support of hardware platforms for this command:

Hardware series	Model	Command compatibility
WA6600 series	WA6638 WA6638i WA6636 WA6630X WA6628 WA6628X WA6622 WA6620 WA6620X WA6620X-LI WA6620XE-LI	No
WA6500 series	WA6528i	Yes
WA6300 series	WA6338 WA6338-HI WA6338-LI WA6330 WA6330-LI WA6322 WA6322H WA6322H-LI WA6320 WA6320-C WA6320-D WA6320-SI WA6320S-C WA6320S-E WA6320H WA6320H-LI WA6320H-XEPON	Yes
WAP922 series	WAP922 WAP922E WAP922H WAP922X	Yes: · WAP922 · WAP922E · WAP922H No: · WAP922X
WAP923 series	WAP923	Yes

‌

Default

In radio view, a radio uses the configuration in an AP group's radio view.

In an AP group's radio view, roaming navigation is disabled.

Views

Radio view

AP group's radio view

Predefined user roles

network-admin

Parameters

rssi rssi-value: Specifies the RSSI threshold in the range of 1 to 50. The recommended RSSI threshold is 20.

beacon-power power-value: Specifies the transmit power for beacon frames, in the range of 1 to 30 dBm. The recommended transmit power is 10 dBm.

probe-response-power power-value: Specifies the transmit power for probe response frames, in the range of 1 to 30 dBm. The recommended transmit power is 10 dBm.

Usage guidelines

If you set the transmit power for beacons or probe responses, the system uses the default transmit power to transmit other packets.

Examples

# Enable roaming navigation for AP ap1. Set the RSSI threshold to 10 and the transmit power for beacon frames to 10 dBm.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6330

[Sysname-wlan-ap-ap1] radio 1

[Sysname-wlan-ap-ap1-radio-1] option roam-navigation enable rssi 10 beacon-power 10

# Enable roaming navigation for APs with model WA6330 in AP group apgroup1. Set the RSSI threshold to 10 and the transmit power for probe response frames to 10 dBm.

<Sysname> system-view

[Sysname] wlan ap-group apgroup1

[Sysname-wlan-ap-group-apgroup1] ap-model WA6330

[Sysname-wlan-ap-group-apgroup1-ap-model-WA6330] radio 1

[Sysname-wlan-ap-group-apgroup1-ap-model-WA6330-radio-1] option roam-navigation enable rssi 10 probe-response-power 10

option rx-opportunity-optimize

Use option rx-opportunity-optimize enable to enable packet receiving timing adjustment.

Use option rx-opportunity-optimize disable to disable packet receiving timing adjustment.

Use undo option rx-opportunity-optimize to restore the default.

Syntax

option rx-opportunity-optimize { disable | enable }

undo option rx-opportunity-optimize

The following compatibility matrixes show the support of hardware platforms for this command:

Hardware series	Model	Command compatibility
WA6600 series	WA6638 WA6638i WA6636 WA6630X WA6628 WA6628X WA6622 WA6620 WA6620X WA6620X-LI WA6620XE-LI	No
WA6500 series	WA6528i	Yes
WA6300 series	WA6338 WA6338-HI WA6338-LI WA6330 WA6330-LI WA6322 WA6322H WA6322H-LI WA6320 WA6320-C WA6320-D WA6320-SI WA6320S-C WA6320S-E WA6320H WA6320H-LI WA6320H-XEPON	Yes
WAP922 series	WAP922 WAP922E WAP922H WAP922X	Yes: · WAP922 · WAP922E · WAP922H No: · WAP922X
WAP923 series	WAP923	Yes

‌

Default

In radio view, a radio uses the configuration in an AP group's radio view.

In an AP group's radio view, packet receiving timing adjustment is disabled.

Views

Radio view

AP group's radio view

Predefined user roles

network-admin

Usage guidelines

This feature enables an AP to adjust the timing for receiving packet to achieve the optimal receiving effect.

Examples

# Enable packet receiving timing adjustment for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6330

[Sysname-wlan-ap-ap1] radio 1

[Sysname-wlan-ap-ap1-radio-1] option rx-opportunity-optimize enable

# Enable packet receiving timing adjustment for APs with model WA6330 in AP group apgroup1.

<Sysname> system-view

[Sysname] wlan ap-group apgroup1

[Sysname-wlan-ap-group-apgroup1] ap-model WA6330

[Sysname-wlan-ap-group-apgroup1-ap-model-WA6330] radio 1

[Sysname-wlan-ap-group-apgroup1-ap-model-WA6330-radio-1] option rx-opportunity-optimize enable

option smart-chip-protection

Use option smart-chip-protection enable to enable smart chip protection.

Use option smart-chip-protection disable to disable smart chip protection.

Use undo option smart-chip-protection to restore the default.

Syntax

option smart-chip-protection { disable | enable interval interval }

undo option smart-chip-protection

The following compatibility matrixes show the support of hardware platforms for this command:

Hardware series	Model	Command compatibility
WA6600 series	WA6638 WA6638i WA6636 WA6630X WA6628 WA6628X WA6622 WA6620 WA6620X WA6620X-LI WA6620XE-LI	No
WA6500 series	WA6528i	Yes
WA6300 series	WA6338 WA6338-HI WA6338-LI WA6330 WA6330-LI WA6322 WA6322H WA6322H-LI WA6320 WA6320-C WA6320-D WA6320-SI WA6320S-C WA6320S-E WA6320H WA6320H-LI WA6320H-XEPON	Yes
WAP922 series	WAP922 WAP922E WAP922H WAP922X	Yes: · WAP922 · WAP922E · WAP922H No: · WAP922X
WAP923 series	WAP923	Yes

‌

Default

In radio view, a radio uses the configuration in an AP group's radio view.

In an AP group's radio view, smart chip protection is disabled.

Views

Radio view

AP group's radio view

Predefined user roles

network-admin

Parameters

interval interval: Specifies the interval at which smart chip protection is enabled, in the range of 1 to 24 hours.

Examples

# Enable smart chip protection for AP ap1 and set the enabling interval to 10 hours.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6330

[Sysname-wlan-ap-ap1] radio 1

[Sysname-wlan-ap-ap1-radio-1] option smart-chip-protection enable interval 10

# Enable smart chip protection for APs with model WA6330 and set the enabling interval to 10 hours.

<Sysname> system-view

[Sysname] wlan ap-group 1

[Sysname-wlan-ap-group-1] ap-model WA6330

[Sysname-wlan-ap-group-1-ap-model-WA6330] radio 1

[Sysname-wlan-ap-group-1-ap-model-WA6330-radio-1] option smart-chip-protection enable interval 10

rrop arp ap-proxy-gateway enable

Use rrop arp ap-proxy-gateway enable to enable the AP to reply ARP requests of clients on behalf of the gateway.

Use undo rrop arp ap-proxy-gateway enable to disable the AP from replying ARP requests of clients on behalf of the gateway.

Syntax

rrop arp ap-proxy-gateway enable [ count count ]

undo rrop arp ap-proxy-gateway enable

Default

The AP does not reply ARP requests of clients on behalf of the gateway.

Views

System view

Predefined user roles

network-admin

Parameters

count count: Specifies the maximum number of ARP requests that the AP can reply on behalf of the gateway in a reply period. The value range for the count argument is 1 to 4096, and the default value is 10.

Usage guidelines

Perform this task to enable the AP to reply ARP requests of clients on behalf of the gateway. If the MAC address of the gateway changes during a reply period, ARP failures might occur. To resolve this issue, you can specify a limit for the number of ARP requests that the AP can reply on behalf of the gateway in a reply period. When the number of ARP requests that the AP has replied reaches the limit, the AP will forward an ARP request to the gateway and perform either of the following tasks:

· If the gateway replies to the ARP request, the AP starts a new reply period with the new MAC address of the gateway.

· If the gateway does not reply to the ARP request, the AP starts a new reply period with the original MAC address of the gateway.

As a best practice to reduce the gateway's service load, enable this feature when the gateway's service load is heavy or the network condition is poor.

Examples

# Enable the AP to reply ARP requests of clients on behalf of the gateway.

<Sysname> system-view

[Sysname] rrop arp ap-proxy-gateway enable

rrop software-retry

Use rrop software-retry enable to enable software retransmission and set the maximum number of software retransmissions.

Use rrop software-retry disable to disable software retransmission.

Use undo rrop software-retry to restore the default.

Syntax

rrop software-retry { unicast [ eap ] | broadcast-multicast } enable count count

rrop software-retry { unicast [ eap ] | broadcast-multicast } disable

undo rrop software-retry { unicast [ eap ] | broadcast-multicast }

Default

In radio view, a radio uses the configuration in an AP group's radio view.

In an AP group's radio view, the maximum number of software retransmissions varies by device model.

Views

Radio view

AP group's radio view

Predefined user roles

network-admin

Parameters

unicast: Configures software retransmission for unicast packets.

eap: Configures software retransmission for EAP packets.

broadcast-multicast: Configures software retransmission for broadcast and multicast packets.

count count: Specifies the maximum number of software retransmissions, in the range of 0 to 16.

Examples

# Set the maximum number of software retransmissions for EAP packets to the default for radio 1 of AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6330

[Sysname-wlan-ap-ap1] radio 1

[Sysname-wlan-ap-ap1-radio-1] undo rrop software-retry unicast eap

# Set the maximum number of software retransmissions for broadcast and multicast packets to the default for radio 1 of APs with model WA6330 in AP group 1.

<Sysname> system-view

[Sysname] wlan ap-group 1

[Sysname-wlan-ap-group-1] ap-model WA6330

[Sysname-wlan-ap-group-1-ap-model-WA6330] radio 1

[Sysname-wlan-ap-group-1-ap-model-WA6330-radio-1] undo rrop software-retry broadcast-multicast

rrop traffic-policy priority tcp

Use rrop traffic-policy priority tcp to specify a DSCP value for TCP packets with the specified port numbers.

Use undo rrop traffic-policy priority tcp to delete the DSCP value for TCP packets with the specified port numbers.

Syntax

rrop traffic-policy priority tcp port-num-list dscp value

undo rrop traffic-policy priority tcp { port-num-list | all }

Default

In AP view, an AP uses the configuration in AP group view.

In AP group view, no DSCP value is specified for TCP packets.

Views

AP view

AP group view

Predefined user roles

network-admin

Parameters

port-num-list: Specifies a list of up to 10 TCP ports. The port number range is 1 to 65535.

dscp value: Specifies a DSCP value in the range of 0 to 63.

all: Deletes all the DSCP values specified for TCP packets.

Usage guidelines

A greater DSCP value represents a higher packet priority.

This command takes effect only on downstream packets.

If you execute this command with the same DSCP value multiple times, you can specify the DSCP value for up to 10 TCP ports.

If you execute this command with different DSCP values multiple times, the most recent configuration takes effect.

Examples

# Configure AP ap1 to use 50 as the DSCP value for TCP packets with port numbers 8001 and 8002.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6330

[Sysname-wlan-ap-ap1] rrop traffic-policy priority tcp 8001 8002 dscp 50

# Configure APs in AP group 1 to use 50 as the DSCP value for TCP packets with port numbers 8001 and 8002.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] rrop traffic-policy priority tcp 8001 8002 dscp 50

rrop traffic-policy priority udp

Use rrop traffic-policy priority udp to specify a DSCP value for UDP packets with the specified port numbers.

Use undo rrop traffic-policy priority udp tcp to delete the DSCP value for UDP packets with the specified port numbers.

Syntax

rrop traffic-policy priority udp port-num-list dscp value

undo rrop traffic-policy priority udp { port-num-list | all }

Default

In AP view, an AP uses the configuration in AP group view.

In AP group view, no DSCP value is specified for UDP packets.

Views

AP view

AP group view

Predefined user roles

network-admin

Parameters

port-num-list: Specifies a list of up to 10 UDP ports. The port number range is 1 to 65535.

dscp value: Specifies a DSCP value in the range of 0 to 63.

all: Deletes all the DSCP values specified for UDP packets.

Usage guidelines

A greater DSCP value represents a higher packet priority.

This command takes effect only on downstream packets.

If you execute this command with the same DSCP value multiple times, you can specify the DSCP value for up to 10 UDP ports.

If you execute this command with different DSCP values multiple times, the most recent configuration takes effect.

Examples

# Configure AP ap1 to use 50 as the DSCP value for UDP packets with port numbers 8001 and 8002.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6330

[Sysname-wlan-ap-ap1] rrop traffic-policy priority udp 8001 8002 dscp 50

# Configure APs in AP group 1 to use 50 as the DSCP value for UDP packets with port numbers 8001 and 8002.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] rrop traffic-policy priority udp 8001 8002 dscp 50

rrop ul-arp attack-suppression enable

Use rrop ul-arp attack-suppression enable to enable upstream ARP packet suppression.

Use undo rrop ul-arp attack-suppression enable to disable upstream ARP packet suppression.

Syntax

rrop ul-arp attack-suppression enable [ threshold threshold-value ] [ block-time time ]

undo rrop ul-arp attack-suppression enable

Default

Upstream ARP packet suppression is disabled.

Views

System view

Predefined user roles

network-admin

Parameters

threshold threshold-value: Specifies the threshold for triggering upstream ARP packet suppression. If the number of ARP packets that an AP receives from a client in one second reaches the threshold, the AP discards all ARP packets from the client within the specified suppression period. The value range for the threshold-value argument is 2 to 4096, and the default value is 10.

block-time time: Specify the upstream ARP packet suppression period in the range of 10 to 6000 seconds. The default suppression period is 60 seconds.

Usage guidelines

Execute this command to protect APs against ARP flooding attacks. If the number of ARP packets that a client sends to an AP in one second reaches the specified threshold, the AP discards all ARP packets from the client within the specified time period.

This command does not take effect on ARP requests for the gateway.

Examples

# Enable upstream ARP packet suppression.

<Sysname> system-view

[Sysname] rrop ul-arp attack-suppression enable

sacp roam-optimize traffic-hold enable

Use sacp roam-optimize traffic-hold enable to enable data transmission holding during roaming.

Use undo sacp roam-optimize traffic-hold enable to disable data transmission holding during roaming.

Syntax

sacp roam-optimize traffic-hold enable

undo sacp roam-optimize traffic-hold enable

Default

Data transmission holding during roaming is disabled.

Views

Service template view

Predefined user roles

network-admin

Usage guidelines

With data transmission holding during roaming enabled, the device caches the packets during client roaming and sends the packets to the client after the client roams successfully to reduce the packet loss during client roaming. With data transmission holding during roaming disabled, the device ages out the cached packets after a period of time and will not send the packets to the client. As a best practice, enable this feature in a scenario that is sensitive to packet loss.

To make this feature take effect, enable client association at the AC and enable the AC to forward client data traffic.

This feature is not supported in an AC hierarchy network or inter-AC roaming network.

Examples

# Enable data transmission holding during roaming.

<Sysname> system-view

[Sysname] wlan service-template 1

[Sysname-wlan-st-1] sacp roam-optimize traffic-hold enable

sacp application forwarding-acceleration enable

NOTE:

Support for this command depends on the AP model.

‌

Use sacp application forwarding-acceleration enable to enable application traffic forwarding acceleration.

Use undo sacp application forwarding-acceleration enable to disable application traffic forwarding acceleration.

Syntax

sacp application forwarding-acceleration enable

undo sacp application forwarding-acceleration enable

Default

Application traffic forwarding acceleration is disabled.

Views

Wireless service template view

Predefined user roles

network-admin

Usage guidelines

Execute this command to accelerate the forwarding of downstream application traffic such as voice call traffic and video conference traffic to improve user experiences.

This feature is memory intensive. Please be cautious.

Examples

# Enable application traffic forwarding acceleration.

<Sysname> system-view

[Sysname] wlan service-template service

[Sysname-wlan-st-service] sacp application forwarding-acceleration enable

wlan client inspect

Use wlan client inspect enable to enable client inspection.

Use wlan client inspect disable to disable client inspection.

Use undo wlan client inspect to restore the default.

Syntax

wlan client inspect { disable | enable }

undo wlan client inspect

Default

In AP view, an AP uses the configuration in AP group view.

In AP group view, client inspection is disabled.

Views

AP view

AP group view

Predefined user roles

network-admin

Usage guidelines

The client inspection feature enables you to view information about packets exchanged and time consumed in each stage of the client association process.

In the current software version, the client inspection feature supports only client association, client association failure, and IP address lease extension events.

Examples

# Enable client inspection for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6330

[Sysname-wlan-ap-ap1] wlan client inspect enable

# Enable client inspection for APs in AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-ap-group-group1] wlan client inspect enable

11-WLAN Advanced Features Command Reference

1 WLAN optimization commands

rrop software-retry

sacp application forwarding-acceleration enable

Cloud & AI

InterConnect

Intelligent Terminal Products

Product Support Services

Technical Service Solutions

Resource Center

Policy

Online Help

Become a Partner

Partner Resources

Partner Business Management

Company Information

News & Events

Contact Us