In AP provision view, an AP uses the configuration in AP group provision view. If no configuration exists in AP group provision view, the AP uses the configuration in global provision view.

In AP group provision view, an AP uses the configuration in global provision view.

In global provision view, no AC is specified for an AP.

Views

AP provision view

AP group provision view

Global provision view

Predefined user roles

network-admin

Parameters

host-name host-name: Specifies an AC by its host name, a case-insensitive string of 1 to 253 characters. The string can contain letters, digits, hyphens (-), underscores (_), and dots (.).

ip ipv4-address: Specifies an AC by its IPv4 address.

Usage guidelines

You can configure a maximum of three AC IPv4 addresses and only one host name. If you configure multiple host names, the most recent configuration takes effect.

The configuration in AP provision view takes effect only on the AP. The configuration in AP group provision view takes effect on all APs in the AP group. The configuration in global provision view takes effect on all APs.

The priorities of configurations in AP provision view, AP group provision view, and global provision view are in descending order.

The undo form of the command deletes all AC IPv4 addresses if you do not specify the ipv4-address argument.

Examples

# Specify the AC whose IP address is 192.168.100.11 in AP provision view of AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] ac ip 192.168.100.11

# Specify the AC whose IP address is 192.168.100.11 in AP group provision view of AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] provision

[Sysname-wlan-ap-group-group1-prvs] ac ip 192.168.100.11

# Specify the AC whose IP address is 192.168.100.11 for APs in global provision view.

<Sysname> system-view

[Sysname] wlan global-configuration

[Sysname-wlan-global-configuration] provision

[Sysname-wlan-global-configuration-prvs] ac ip 192.168.100.11

ac discovery policy ipv6

Use ac discovery policy ipv6 to enable an AP to prefer discovering ACs by IPv6 address.

Use undo ac discovery policy ipv6 to restore the default.

Syntax

ac discovery policy ipv6

undo ac discovery policy ipv6

Default

In AP provision view, an AP uses the configuration in AP group provision view.

In AP group provision view, an AP prefers to discover ACs by IPv4 address.

Views

AP provision view

AP group provision view

Predefined user roles

network-admin

Usage guidelines

This feature enables an AP to discover ACs by using the static IP addresses, IPv6 multicast, DHCPv6 option, IPv6 DNS, DHCPv4 options, broadcast/IPv4 multicast, and IPv4 DNS successively. If the AP connects to an AC successfully with a discovered IP address, it stops AC discovery.

Examples

# Enable AP ap1 to prefer discovering ACs by IPv6 address.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] ac discovery policy ipv6

# Enable APs in AP group group1 to prefer discovering ACs by IPv6 address.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] provision

[Sysname-wlan-ap-group-group1-prvs] ac discovery policy ipv6

ap (AP group view)

Use ap to create an AP grouping rule by AP names.

Use undo ap to delete an AP grouping rule by AP names.

Syntax

ap ap-name-list

undo ap ap-name-list

Default

No AP grouping rules by AP names exist.

Views

AP group view

Virtual AP group view

Predefined user roles

network-admin

Parameters

ap-name-list: Specifies a maximum of 10 space-separated AP names. An AP name is a case-sensitive string of 1 to 64 characters that can contain letters, digits, underscores (_), dots (.), left brackets ([), right brackets (]), forward slashes (/), and hyphens (-).

Usage guidelines

This command does not identify whether the specified AP exists.

The priorities of AP grouping rules by AP names, serial IDs, MAC addresses, and IP addresses are in descending order. If an AP does not match any grouping rules, it is added to the default AP group.

If the created AP grouping rule already exists in another AP group, this command deletes the rule from that AP group.

You cannot execute this command in the view of the default AP group.

Examples

# Create an AP grouping rule by AP names to add APs ap1, ap2, and ap3 to AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] ap ap1 ap2 ap3

# Create an AP grouping rule by AP names to add APs ap1, ap2, and ap3 to virtual AP group group1.

<Sysname> system-view

[Sysname] wlan virtual-ap-group group1

[Sysname-wlan-virtual-ap-group-group1] ap ap1 ap2 ap3

Related commands

wlan ap-group

wlan virtual-ap-group

ap (vip-ap-group)

Use ap to add an AP to an AP monitor group.

Use undo ap to remove an AP from an AP monitor group.

Syntax

ap ap-name

undo ap ap-name

Default

No APs exist in an AP monitor group.

Views

Monitor group view

Predefined user roles

network-admin

Parameters

ap-name: Specifies an AP by its name, a case-sensitive string of 1 to 64 characters. The string can contain letters, digits, underscores (_), dots (.), left brackets ([), right brackets (]), forward slashes (/), and hyphens (-).

Usage guidelines

APs in an AP monitor group can report client quantity, radio traffic, channel usage, and AP anomalies to the AC.

The functions and services provided by an AP are not affected after the AP is added to an AP monitor group.

You can add a maximum of 32 APs to an AP monitor group.

Examples

# Add AP ap1 to an AP monitor group.

<Sysname> system-view

[Sysname] wlan vip-ap-group

[Sysname-wlan-vip-ap-group] ap ap1

Related commands

report-interval

wlan vip-ap-group

ap-mode

Use ap-mode to switch the AP operating mode.

Use undo ap-mode to cancel the AP operating mode setting. The AP will maintain the current operating mode.

Syntax

ap-mode { cloud | fit }

undo ap-mode

Default

In AP view, an AP uses the configuration in AP group view.

In AP group view, a cloud-managed AP operates in cloud mode, and a fit AP operates in fit mode.

Views

AP view

AP group view

Predefined user roles

network-admin

Parameters

cloud: Specifies the cloud mode.

fit: Specifies the fit mode.

Usage guidelines

Operating mechanism

Perform this task to switch an AP to the specified operating mode. After the AP restarts, the new operating mode takes effect. After the mode switch, the AP uses the factory settings or the settings saved from the last switch to that mode according to the AP model.

For a cloud-managed AP, an AC can perform simple operations, such as version update, but cannot configure wireless settings for the AP.

Restrictions and guidelines

When a cloud-managed AP is associated with an AC, the AC starts a 10-minute timer. If the cloud-managed AP configuration is not saved or the AP is switched to cloud mode before the timer expires, the cloud-managed AP automatically switches to fit mode and restarts for the fit mode to take effect.

For APs that have a separate image file for each operating mode, before switching the AP to a specific operating mode, make sure the corresponding image file is extracted to the root directory of the device storage medium. Make sure the name of the image file is not modified.

Examples

# Switch the AP operating mode to cloud.

<Sysname> system-view

[Sysname]wlan ap ap1

[Sysname-wlan-ap-ap1] ap-mode cloud

Changing the working mode will reboot the AP. For the operation to succeed, make

sure the corresponding AP image exists on the AC or AP. Continue? [Y/N]: y

ap-model

Use ap-model to create an AP model and enter its view, or enter the view of an existing AP model.

Use undo ap-model to remove an AP model and its configuration.

Syntax

ap-model ap-model

undo ap-model ap-model

Default

No AP models exist.

Views

AP group view

Virtual AP group view

Predefined user roles

network-admin

Parameters

ap-model: Specifies an AP model name.

Examples

# Create an AP model named WA6320 and enter its view.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] ap-model WA6320

[Sysname-wlan-ap-group-group1-ap-model-WA6320]

# In virutal AP group view, create an AP model named WA6320 and enter its view.

<System> system-view

[System] wlan virtual-ap-group group1

[System-wlan-virtual-ap-group-group1] ap-model WA6320

[System-wlan-virtual-ap-group-group1-ap-model-WA6320]

ap-tag

Use ap-tag to specify an AP tag.

Use undo ap-tag to delete the specified AP tags.

Syntax

ap-tag tag

undo ap-tag { all | tag }

Default

In AP view, the configuration in AP group view is used.

In AP group view, no AP tag is specified.

Views

AP view

AP group view

Predefined user roles

network-admin

Parameters

tag: Specifies an AP tag. Available options include high-density and meeting.

all: Specifies all the specified AP tags.

Usage guidelines

An AP tag is a collection of AP parameter attributes. Based on the business characteristics of each application scenario, the device provides predefined AP tags for you to reference according to the actual network application scenarios. After you specify a tag, the AP can inherit the AP parameters defined in the AP tag without the need for manual configuration.

Currently, the following predefined AP tags are available:

· meeting—Meeting room tag. This tag sets the bandwidth of 5GHz radios to 80 MHz.

· high-density—High-density tag.

· vip—VIP tag, which represents an AP in the monitor group. In monitor group view, you can use the ap ap-name command to add an AP to the AP monitor group. The monitor group allows the APs in it to collect and report data to the AC regarding client quantity, radio traffic, radio channel usage, and AP abnormal information.

· unstable—Unstable AP tag. When an AP with an unstable tag goes offline, it will not trigger automatic power adjustment for neighboring APs. This tag is assigned to APs automatically and does not support manual configuration.

If an AP tag is configured in both AP view and AP group view, the configuration in AP view takes precedence over the configuration in AP group view.

Examples

# Specify the high-density and meeting tags for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] ap-tag high-density meeting

# Specify the high-density tag for APs in AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] ap-tag high-density

Related commands

display wlan ap ap-tag

wlan vip-ap-group

bridge-aggregation

NOTE:

Support for this command depends on the AP model.

‌

Use bridge-aggregation to create a Layer 2 aggregate interface and enter its view, or enter the view of an existing Layer 2 aggregate interface.

Use undo bridge-aggregation to delete a Layer 2 aggregate interface.

Syntax

bridge-aggregation interface-number

undo bridge-aggregation interface-number

Default

In AP view, an AP uses the configuration in AP group view.

In an AP group's AP model view, no Layer 2 aggregate interfaces exist.

Views

AP view

AP group's AP model view

Predefined user roles

network-admin

Parameters

interface-number: Specifies a Layer 2 aggregate interface number. The value range for this argument varies by AP model.

Usage guidelines

When you create a Layer 2 aggregate interface, the system automatically creates a Layer 2 aggregation group with the same number. The aggregation group operates in static aggregation mode by default.

Deleting a Layer 2 aggregate interface also deletes the Layer 2 aggregation group. At the same time, the member ports of the aggregation group, if any, leave the aggregation group.

The configuration will be synchronized to all online APs if remote configuration synchronization is activated.

The configuration in AP view takes precedence over the configuration in an AP group's AP model view.

Examples

# Create Layer 2 aggregate interface 1 for AP ap1, and enter its view.

<Sysname> system-view

[Sysname] wlan ap ap1 model

[Sysname-wlan-ap-ap1] bridge-aggregation 1

[Sysname-wlan-ap-ap1-bridge-aggregation-1]

# Create Layer 2 aggregate interface 1 for APs in AP group group1, and enter its view.

<Sysname> system-view

[Sysname] wlan ap-group group1 WA6320

[Sysname-wlan-ap-group-1] ap-model WA6320

[Sysname-wlan-ap-group-1-ap-model-WA6320] bridge-aggregation 1

[Sysname-wlan-ap-group-1-ap-model-WA6320-bridge-aggregation-1]

Related commands

remote-configuration

remote-configuration synchronize

configuration-profile

Use configuration-profile to associate an AP with a configuration profile.

Use undo configuration-profile to restore the default.

Syntax

configuration-profile profile-name

undo configuration-profile

Default

An AP is not associated with any configuration profile.

Views

AP view

AP group's AP model view

Predefined user roles

network-admin

Parameters

profile-name: Specifies a configuration profile name, a case-sensitive string of 1 to 64 characters. The string can contain letters, digits, underscores (_), dots (.), left brackets ([), right brackets (]), forward slashes (/), and hyphens (-).

Usage guidelines

After you execute this command, the AC will deploy the settings in the configuration file associated with an AP to that AP. After you configure the undo configuration-profile command, the AC will restore the settings in the configuration file deployed to an AP to the factory default settings. For more information about configuration profiles, see "Managing configuration files" in Fundamentals Configuration Guide.

Examples

# Associate configuration profile profile1 with AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] configuration-profile profile1

# Associate configuration profile profile1 with APs in AP group apgroup1.

<Sysname> system-view

[Sysname] wlan ap-group apgroup1

[Sysname-wlan-ap-group-apgroup1] ap-model WA6320

[Sysname-wlan-ap-group-apgroup1-ap-model-WA6320] configuration-profile profile1

Related commands

configuration profile (Fundamentals Command Reference)

control-address

Use control-address to specify the IP address to be carried in the CAPWAP Control IP Address message element.

Use undo control-address to restore the default.

Syntax

control-address { ip ipv4-address | ipv6 ipv6-address }

undo control-address { ip | ipv6 }

Default

In AP view, an AP uses the configuration in AP group view. If no configuration exists in AP group view, the AP uses the configuration in global configuration view.

In AP group view, an AP uses the configuration in global configuration view.

In global configuration view, the IP address inserted in the CAPWAP Control IP Address element is the AC's IP address.

Views

AP view

AP group view

Global configuration view

Predefined user roles

network-admin

Parameters

ip ipv4-address: Specifies an IPv4 address in the CAPWAP Control IPv4 Address message element.

ipv6 ipv6-address: Specifies an IPv6 address in the CAPWAP Control IPv6 Address message element.

Usage guidelines

This command takes effect only when the AC rediscovery feature is enabled.

You can specify a maximum of three IPv4 or IPv6 addresses in the CAPWAP Control IP Address message element.

The configuration in AP view takes precedence over the configuration in AP group view. The configuration in AP group view takes precedence over the configuration in global configuration view.

Examples

# Specify 192.168.1.1 as the IPv4 address to be carried in the CAPWAP Control IPv4 Address message element in AP view.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] control-address ip 192.168.1.1

# Specify 192.168.1.1 as the IPv4 address to be carried in the CAPWAP Control IPv4 Address message element in AP group view.

<Sysname> system-view

[Sysname] wlan ap-group 10

[Sysname-ap-group-10] control-address ip 192.168.1.1

# Specify 192.168.1.1 as the IPv4 address to be carried in the CAPWAP Control IPv4 Address message element in global configuration view.

<Sysname> system-view

[Sysname] wlan global-configuration

[Sysname-wlan-global-configuration] control-address ip 192.168.1.1

Related commands

control-address enable

Use control-address enable to enable the AC rediscovery feature.

Use control-address disable to disable the AC rediscovery feature.

Use undo control-address to restore the default.

Syntax

control-address { disable | enable }

undo control-address

Default

In AP view, an AP uses the configuration in AP group view. If no configuration exists in AP group view, the AP uses the configuration in global configuration view.

In AP group view, an AP uses the configuration in global configuration view.

In global configuration view, the AC rediscovery feature is disabled.

Views

AP view

AP group view

Global configuration view

Predefined user roles

network-admin

Usage guidelines

An AC enabled with AC rediscovery adds the CAPWAP Control IP Address message element to the discovery responses sent to APs. Upon receiving such a discovery response, an AP establishes a CAPWAP tunnel with the IP address representing the optimal AC in the CAPWAP Control IP Address message element.

An AC disabled with AC rediscovery does not add the CAPWAP Control IP Address message element in discovery responses sent to APs. APs that receive the discovery responses will send join requests to the source IP address of the discovery responses to establish CAPWAP tunnels with the AC.

The configuration in AP view takes precedence over the configuration in AP group view. The configuration in AP group view takes precedence over the configuration in global configuration view.

AC rediscovery applies to CMCC WLAN networks. As required by CMCC, an AC must carry the CAPWAP Control IP Address message element in discovery responses.

Examples

# Enable the AC rediscovery feature in AP view.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] control-address enable

# Enable the AC rediscovery feature in AP group view.

<Sysname> system-view

[Sysname] wlan ap-group 10

[Sysname-ap-group-10] control-address enable

# Enable the AC rediscovery feature in global configuration view.

<Sysname> system-view

[Sysname] wlan global-configuration

[Sysname-wlan-global-configuration] control-address enable

Related commands

control-address

data-tunnel encryption

Use data-tunnel encryption enable to enable CAPWAP data tunnel encryption.

Use data-tunnel encryption disable to disable CAPWAP data tunnel encryption.

Use undo data-tunnel encryption to restore the default.

Syntax

data-tunnel encryption { disable | enable }

undo data-tunnel encryption

Default

In AP view, an AP uses the configuration in AP group view.

In AP group view, CAPWAP data tunnel encryption is disabled.

In virtual AP view, an AP uses the configuration in virtual AP group view.

In virtual AP group view, CAPWAP data tunnel encryption is disabled.

Views

AP view

AP group view

Virtual AP view

Virtual AP group view

Predefined user roles

network-admin

Usage guidelines

When this feature is enabled, an AP exchanges encryption information including keys with the AC through the CAPWAP control tunnel upon receiving the first keepalive packet from the AC. After the exchange, the AC and the AP will encrypt data packets transmitted in a CAPWAP data tunnel. Keepalive packets are not encrypted.

This feature will cause an AP to reassociate with the AC.

The configuration in AP view takes precedence over the configuration in AP group view.

The configuration in virtual AP view takes precedence over the configuration in virtual AP group view.

Examples

# Enable CAPWAP data tunnel encryption for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] data-tunnel encryption enable

This operation will reconnect the AP. Continue? [Y/N]

# Enable CAPWAP data tunnel encryption for APs in AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] data-tunnel encryption enable

This operation will reconnect member APs that are not enabled with CAPWAP data tunnel encryption. Continue? [Y/N]

# Enable CAPWAP data tunnel encryption for virtual AP ap1.

<Sysname> system-view

[Sysname] wlan virtual-ap ap1 model WA6320

[Sysname-wlan-virtual-ap-ap1] data-tunnel encryption enable

This operation will reconnect the AP. Continue? [Y/N]

# Enable CAPWAP data tunnel encryption for APs in virtual AP group group1.

<Sysname> system-view

[Sysname] wlan virtual-ap-group group1

[Sysname-wlan-virtual-ap-group-group1] data-tunnel encryption enable

This operation will reconnect member APs that are not enabled with CAPWAP data tunnel encryption. Continue? [Y/N]

Related commands

tunnel encryption

delete file

Use delete file to delete a file from an AP.

Syntax

delete file filename

Views

AP view

Predefined user roles

network-admin

Parameters

filename: Specifies a file by its file name, a string of 1 to 255 characters.

Usage guidelines

This command takes effect only after an AP establishes a CAPWAP tunnel with the master AC.

Examples

# Delete file startup.cfg from AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] delete file startup.cfg

Related commands

display wlan ap files

download file

description (AP group view/virtual AP group view)

Use description to configure a description for an AP group.

Use undo description to restore the default.

Syntax

description text

undo description

Default

An AP group does not have a description.

Views

AP group view

Virtual AP group view

Predefined user roles

network-admin

Parameters

text: Specifies a description, a case-sensitive string of 1 to 64 characters.

Usage guidelines

Configure a description for an AP group for easy identification and management purposes.

To view the configured description for an AP group, execute the display wlan ap-group command.

To view the configured description for a virtual AP group, execute the display wlan virtual-ap-group command.

Examples

# Configure a description for AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-ap-group-group1] description L3-office

# Configure a description for virtual AP group group1.

<Sysname> system-view

[Sysname] wlan virtual-ap-group group1

[Sysname-wlan-virtual-ap-group-group1] description L3-office

Related commands

display wlan ap-group

display wlan virtual-ap-group

wlan ap-group

wlan virtual-ap-group

description (AP view/virtual AP view)

Use description to configure a description for an AP.

Use undo description to restore the default.

Syntax

description text

undo description

Default

An AP does not have a description.

Views

AP view

Virtual AP view

Predefined user roles

network-admin

Parameters

text: Specifies a description, a case-sensitive string of 1 to 64 characters.

Examples

# Configure a description for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-ap-ap1] description L3-office

# Configure a description for virtual AP ap1.

<Sysname> system-view

[Sysname] wlan virtual-ap ap1 model WA6320

[Sysname-wlan-virtual-ap-ap1] description L3-office

Related commands

display wlan ap

dhcp snooping enable

Use dhcp snooping enable to enable DHCP snooping.

Use undo dhcp snooping enable to disable DHCP snooping.

Syntax

dhcp snooping enable

undo dhcp snooping enable

Default

DHCP snooping is disabled.

Views

AP view

Predefined user roles

network-admin

Usage guidelines

After you enable DHCP snooping on the AC, trusted ports forward responses from DHCP servers and untrusted ports discard responses. This mechanism ensures that DHCP clients obtain IP addresses from authorized DHCP servers.

When DHCP snooping is disabled, all ports on the device can forward responses from DHCP servers.

When DHCP snoop is disabled, Option 82 is not supported.

Examples

# Enable DHCP snooping for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] dhcp snooping enable

dhcp snooping information circuit-id

Use dhcp snooping information circuit-id to configure the padding mode and padding format for the Circuit ID sub-option.

Use undo dhcp snooping information circuit-id to restore the default.

Syntax

dhcp snooping information circuit-id { normal | wlan-private } [ format { ascii | hex } ]

undo dhcp snooping information circuit-id

Default

The padding mode is normal and the padding format is hex.

Views

AP view

Predefined user roles

network-admin

Parameters

normal: Specifies the normal mode. The padding content includes the VLAN ID and interface number.

wlan-private: Specifies the WLAN private padding format. The padding content includes the WLAN, interface name, VLAN ID, SSID, radio MAC (BSSID), host name, and AP MAC.

format: Specifies the padding format for the Circuit ID sub-option.

ascii: Specifies the ASCII padding format.

hex: Specifies the hex padding format.

Usage guidelines

If you execute this command multiple times, the most recent configuration takes effect.

The padding format for the string mode, the normal mode, or the verbose mode varies by command configuration. Table 1 shows how the padding format is determined for different modes.

Table 1 Padding format for different modes

Keyword (mode)	If no padding format is set	If the padding format is ascii	If the padding format is hex
normal	Hex for the VLAN ID and interface number.	ASCII.	Hex for the VLAN ID and interface number.
wlan-private	ASCII.	ASCII.	ASCII for the WLAN, interface name, SSID, and host name. Hex for the VLAN ID, radio MAC (BSSID), and AP MAC.

Keyword (mode)

If no padding format is set

If the padding format is ascii

If the padding format is hex

normal

Hex for the VLAN ID and interface number.

ASCII.

Hex for the VLAN ID and interface number.

wlan-private

ASCII.

ASCII for the WLAN, interface name, SSID, and host name.

Hex for the VLAN ID, radio MAC (BSSID), and AP MAC.

‌

Examples

# Configure WLAN private as the padding mode, and ASCII as the padding format for the Circuit ID sub-option.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] dhcp snooping information enable

[Sysname-wlan-ap-ap1] dhcp snooping information circuit-id wlan-private format ascii

Related commands

dhcp snooping information enable

Use dhcp snooping information enable to enable DHCP snooping to support Option 82.

Use undo dhcp snooping information enable to disable this feature.

Syntax

dhcp snooping information enable

undo dhcp snooping information enable

Default

DHCP snooping does not support Option 82.

Views

AP view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

This command enables DHCP snooping to add Option 82 into DHCP requests that do not contain Option 82 before forwarding the requests to the DHCP server. The content of Option 82 is determined by the dhcp snooping information circuit-id and dhcp snooping information remote-id commands. If the received DHCP request packets contain Option 82, DHCP snooping handles the packets according to the strategy configured by the dhcp snooping information strategy command. For more information about the dhcp snooping information remote-id and dhcp snooping information strategy commands, see DHCP commands in Layer 3—IP Services Command Reference.

Examples

# Enable DHCP snooping to support Option 82.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] dhcp snooping information enable

Related commands

dhcp snooping information circuit-id

discovery-response

Use discovery-response wait-time to set the discovery-response timeout timer.

Use undo discovery-response wait-time to restore the default.

Syntax

discovery-response wait-time seconds

undo discovery-response wait-time

Default

In AP view, an AP uses the configuration in AP group view.

In AP group view, the discovery-response timeout timer is 2 seconds.

Views

AP view

AP group view

Predefined user roles

network-admin

Parameters

seconds: Specifies the discovery-response timeout timer in the range of 2 to 20 seconds.

Usage guidelines

The discovery-response timeout timer specifies the timeout time for an AP to wait for another discovery response. Whenever an AP receives a discovery response packet, the discovery-response timeout timer is created or refreshed. When the timeout timer expires, the AP sends a join request to the optimal AC.

If the network condition is poor, set a larger discovery-response timeout timer.

The configuration in AP view takes precedence over the configuration in AP group view.

Examples

# Set the discovery-response timeout timer to 3 seconds for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap3

[Sysname-wlan-ap-ap3] discovery-response wait-time 3

# Set the discovery-response timeout timer to 3 seconds for all APs in AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] discovery-response wait-time 3

display wlan ap

Use display wlan ap to display AP information.

Syntax

display wlan ap { all | name ap-name } [ verbose [ filter { field }&<1-5> ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

all: Specifies all APs.

name ap-name: Specifies an AP by its name, a case-sensitive string of 1 to 64 characters. The string can contain letters, digits, underscores (_), dots (.), left brackets ([), right brackets (]), forward slashes (/), and hyphens (-).

verbose: Displays detailed information.

filter { field }: Specifies up to five filtering keywords. To obtain the supported keywords, enter a question mark (?) after the filter keyword. If you do not specify this option, the command does not filter detailed AP information and displays all detailed AP information.

Usage guidelines

To focus only on specific information, use the filter { field } option to filter the information to be displayed.

Examples

# Display information about all APs.

<Sysname> display wlan ap all

Total number of APs: 3

Total number of connected APs: 3

Total number of connected manual APs: 3

Total number of connected auto APs: 0

Total number of connected common APs: 2

Total number of connected WTUs: 1

Total number of inside APs: 0

Maximum supported APs: 128

Remaining APs: 125

Total AP licenses: 128

Local AP licenses: 128

Server AP licenses: 0

Remaining local AP licenses: 126.75

Sync AP licenses: 0

AP information

State : I = Idle, J = Join, JA = JoinAck, IL = ImageLoad

C = Config, DC = DataCheck, R = Run M = Master, B = Backup

AP name APID State Model Serial ID

ap1 1 I WA6320 219801A28N819CE0002T

Table 2 Command output

Field	Description
Total number of APs	Total number of fit APs, WTs, and WTUs.
Total number of connected APs	Total number of connected fit APs, WTs, and WTUs.
Total number of connected manual APs	Total number of connected manual fit APs, WTs, and WTUs.
Total number of connected auto APs	Total number of connected auto fit APs, WTs, and WTUs.
Total number of connected common APs	Total number of connected fit APs.
Total number of connected WTUs	Total number of connected WTUs.
Total number of inside APs	This field is not supported in the current software version. Total number of connected inside APs. Inside APs are manual APs that are automatically created when anchor APs act as ACs. The name and the serial ID of an inside AP are the local MAC address and local serial ID, respectively.
Maximum supported APs	Maximum number of APs supported by the AC, including fit APs and WTUs.
Remaining APs	Maximum number of APs minus the number of connected fit APs.
Total AP licenses	Total number of AP licenses.
Local AP licenses	Number of AP licenses installed on the AC.
Server AP licenses	‌ Number of AP licenses requested from the license server.
Remaining local AP licenses	Number of unused AP licenses installed on the AC. The number of licenses required by an AP varies by AP type. For example, a WA6320 requires one AP license, a WT does not require any AP license, and a WTU requires 0.25 AP licenses.
Sync AP licenses	‌ Number of synchronized AP licenses.
APID	ID of the AP to uniquely identify the AP on the AC.
State	Current state of the AP: · I—Idle. · J—Join. · JA—Join acknowledge. · IL—The AP is downloading the image file. · C—The AP is downloading initial configurations. · DC—The AP is checking data. · R—The CAPWAP tunnel is operating. It indicates that the AP and the AC have established a CAPWAP tunnel. · R/M—The master CAPWAP tunnel is operating. It indicates that the AP and the master AC have established a CAPWAP tunnel. · R/B—The backup CAPWAP tunnel is operating. It indicates that the AP and the backup AC have established a CAPWAP tunnel. · M—The AP is connected to the master AC. · B—The AP is connected to the backup AC. · R/IL—The AP is online and is downloading the image file from the AC.
Serial ID	Serial ID of the AP. This field displays Not configured if the serial ID of the AP is not configured.

‌

# Display detailed information about AP ap1.

<Sysname> display wlan ap name ap1 verbose

AP name : ap1

AP ID : 1

AP group name : default-group

State : Run

Backup type : Master

Online time : 0 days 1 hours 25 minutes 12 seconds

System uptime : 0 days 2 hours 22 minutes 12 seconds

Model : WA6320

Region code : CN

Region code lock : Disable

Serial ID : 219801A28N819CE0002T

MAC address : 0AFB-423B-893C

IP address : 192.168.1.50

UDP control port number : 18313

UDP data port number : N/A

H/W version : Ver.C

S/W version : E2321

Boot version : 1.01

Forwarding mode : NSS

USB state : N/A

Power level : N/A

Power info : N/A

Description : wtp1

Priority : 4

Echo interval : 10 seconds

Echo count : 3 counts

Keepalive interval : 10 seconds

Discovery-response wait-time : 2 seconds

Statistics report interval : 50 seconds

Fragment size (data) : 1500

Fragment size (control) : 1450

MAC type : Local MAC & Split MAC

Tunnel mode : Local Bridging & 802.3 Frame & Native Frame

CWPCAP data-tunnel status : Down

Discovery type : Static Configuration

Retransmission count : 3

Retransmission interval : 5 seconds

Firmware upgrade : Enabled

Sent control packets : 1

Received control packets : 1

Echo requests : 147

Lost echo responses : 0

Average echo delay : 3

Last reboot reason : User soft reboot

Last reboot reason (AP check) : The radio physical status was down

Last reboot reason (AC check) : The radio physical status was down

Latest IP address : 10.1.0.2

Current AC IP : 192.168.1.1

Tunnel down reason : Request wait timer expired

Connection count : 1

Backup IPv4 : Not configured

Backup IPv6 : Not configured

Ctrl-tunnel encryption : Disabled

Ctrl-tunnel encryption state : Not encrypted

Data-tunnel encryption : Disabled

Data-tunnel encryption state : Not encrypted

LED mode : Normal

Remote configuration : Enabled

EnergySaving Level :0

Radio 1:

Basic BSSID : 7848-59f6-3940

Admin state : Up

Radio type : 802.11ax(5GHz)

Antenna type : internal

Client dot11ac-only : Disabled

Client dot11n-only : Disabled

Channel bandwidth : 20/40/80MHz

Operating bandwidth : 20/40/80MHz

Secondary channel offset : SCA

Short GI for 20MHz : Supported

Short GI for 40MHz : Supported

Short GI for 80MHz : Supported

Short GI for 160MHz : Not supported

mimo : Not Config

Green-Energy-Management : Disabled

A-MSDU : Enabled

A-MPDU : Enabled

LDPC : Not Supported

STBC : Supported

Operational VHT-MCS Set:

Mandatory : Not configured

Supported : NSS1 0,1,2,3,4,5,6,7,8,9

NSS2 0,1,2,3,4,5,6,7,8,9

Multicast : Not configured

Operational HT MCS Set:

Mandatory : Not configured

Supported : 0, 1, 2, 3, 4, 5, 6, 7, 8, 9,

10, 11, 12, 13, 14, 15

Multicast : Not configured

Channel : 44(auto)

Channel usage(%) : 15

Max power : -102 dBm

Operational rate:

Mandatory : 6, 12, 24 Mbps

Multicast : Auto

Supported : 9, 18, 36, 48, 54 Mbps

Disabled : Not configured

Distance : 1 km

ANI : Enabled

Fragmentation threshold : 2346 bytes

Beacon interval : 100 TU

Protection threshold : 2346 bytes

Long retry threshold : 4

Short retry threshold : 7

Maximum rx duration : 2000 ms

Noise Floor : 5 dBm

Smart antenna : Enabled

Smart antenna policy : Auto

Protection mode : rts-cts

MU-TxBF : Enabled

SU-TxBF : Enabled

Continuous mode : N/A

Client dot11ax-only : Disabled

Operational HE-MCS Set:

Mandatory : Not configured

Supported : NSS1 0,1,2,3,4,5,6,7,8,9,10,11

NSS2 0,1,2,3,4,5,6,7,8,9,10,11

NSS3 0,1,2,3,4,5,6,7,8,9,10,11

NSS4 0,1,2,3,4,5,6,7,8,9,10,11

Multicast : Not configured

OFDMA random access RUs : Not Supported

DL-OFDMA : Enabled

UL-OFDMA : Enabled

UL-MU-MIMO : Disabled

BSS-COLOR : Enabled

TWT negotiation : Enabled

ATF : Enabled

Radar-detection : Disabled

HT protection mode : No protection

Radio 2:

Basic BSSID : 7848-59f6-3950

Admin state : Down

Radio type : 802.11ax(2.4GHz)

Antenna type : internal

Client dot11ac-only : Disabled

Client dot11n-only : Disabled

Channel bandwidth : 20

Operating bandwidth : 20MHz

Secondary channel offset : SCA

Channel auto-switch : Enabled

Short GI for 20MHz : Supported

Short GI for 40MHz : Supported

Short GI for 80MHz : Not supported

Short GI for 160MHz : Not supported

MIMO : 2*2

Green-Energy-Management : Disabled

A-MSDU : Enabled

A-MPDU : Enabled

LDPC : Not Supported

STBC : Supported

Operational HT MCS Set:

Mandatory : Not configured

Supported : 0, 1, 2, 3, 4, 5, 6, 7, 8, 9,

10, 11, 12, 13, 14, 15, 16, 17,

18, 19, 20, 21, 22, 23, 24, 25,

26, 27, 28, 29, 30, 31

Multicast : Not configured

Operational HT MCS Set:

Mandatory : Not configured

Supported : 0, 1, 2, 3, 4, 5, 6, 7, 8, 9,

10, 11, 12, 13, 14, 15

Multicast : Not configured

Channel : 5(auto)

Channel usage(%) : 0

Max power : 20 dBm

Preamble type : Short

Operational rate:

Mandatory : 1, 2, 5.5, 11 Mbps

Multicast : Auto

Supported : 6, 9, 12, 18, 24, 36, 48, 54 Mbps

Disabled : Not configured

Distance : 1 km

ANI : Enabled

Fragmentation threshold : 2346 bytes

Beacon interval : 100 TU

Protection threshold : 2346 bytes

Long retry threshold : 4

Short retry threshold : 7

Maximum rx duration : 2000 ms

Noise Floor : 0 dBm

Smart antenna : Enabled

Smart antenna policy : Auto

Protection mode : rts-cts

MU-TxBF : Enabled

SU-TxBF : Enabled

Continuous mode : N/A

Client dot11ax-only : Disabled

Operational HE-MCS Set:

Mandatory : Not configured

Supported : NSS1 0,1,2,3,4,5,6,7,8,9,10,11

NSS2 0,1,2,3,4,5,6,7,8,9,10,11

Multicast : Not configured

OFDMA random access RUs : Not Supported

DL-OFDMA : Enabled

UL-OFDMA : Enabled

UL-MU-MIMO : Disabled

BSS-COLOR : Enabled

TWT negotiation : Enabled

ATF : Enabled

Radar-detection : Disabled

HT protection mode : No protection

# Filter detailed AP information by keywords apid, hwver, conn-count, bootver, and echo-count.

<Sysname> display wlan ap name ap1 verbose filter apid hwver conn-count bootver echo-count

Filtered information

apid = AP ID, hwver = H/W version, conn-count = Connection count, bootver = Boot version, echo-count = Echo count

AP name apid hwver conn-count bootver echo-count

ap1 16 N/A 0 N/A 3

Table 3 Command output

Field	Description
State	Current state of the AP: · Idle—Idle. · Join—Join. · JoinAck—Join acknowledge. · Image—The AP is downloading the image file. · Config—The AP is downloading initial configurations. · Data Check—The AP is checking data. · Run—The CAPWAP tunnel is operating. It indicates that the AP and the AC have established a CAPWAP tunnel. · R/M—The master CAPWAP tunnel is operating. It indicates that the AP and the master AC have established a CAPWAP tunnel. · R/B—The backup CAPWAP tunnel is operating. It indicates that the AP and the backup AC have established a CAPWAP tunnel. · M—The AP is connected to the master AC. · B—The AP is connected to the backup AC. · R/IL—The AP is online and is downloading the image file from the AC.
Backup type	CAPWAP tunnel type: · Idle—The AP has not established a CAPWAP tunnel with the AC. · Master—The CAPWAP tunnel established between the AP and the master AC. · Backup—The CAPWAP tunnel established between the AP and the backup AC.
Region code lock	· Enabled. · Disabled.
Serial ID	Serial ID of the AP. If no serial ID is configured, this field displays Not configured.
MAC address	MAC address of the AP. If no MAC address is configured, this field displays Not configured.
UDP control port number	Port number used by the AP to establish the CAPWAP control tunnel.
UDP data port number	Port number used by the AP to establish the CAPWAP data tunnel.
H/W version	Hardware version of the AP.
S/W version	Software version of the AP.
WT serial ID	Serial ID of the WT that connects to the WTU. This field is displayed only for WTUs.
WT name	Name of the WT that connects to the WTU. This field is displayed only for WTUs.
WT MAC address	MAC address of the WT that connects to the WTU. This field is displayed only for WTUs.
Forwarding mode	Data forwarding mode of the AP: · DP—Data-path mode. In this mode, data is forwarded by the CPU. · NSS—NSS hardware forwarding mode. In this mode, data is forwarded by the NPU.
USB state	USB state: · Enabled. · Disabled. This field displays N/A if no USB state information is available.
Power level	Power level: · Low. · Middle. · High. This field displays N/A if the power level is unknown. Support for this field depends on the AP model.
Power info	Power supply information. · Power adapter—The AP uses local power supply. · PoE (port1+port2)—The AP uses PoE power supply. The port1 and port2 arguments represent the power supply status of PoE+ ports. ¡ N/A. ¡ 802.3af. ¡ 802.3at. Support for this field depends on the AP model.
PoE status	PoE power supply state for each PI: · Enabled. · Disabled. Support for this field depends on the AP model.
Description	Description for the AP. If no description is configured, this field displays Not configured.
Priority	AP connection priority for the AC.
Echo interval	Interval for an AP to send echo requests to the AC.
Echo count	Maximum number of echo request transmission attempts.
Keepalive interval	Interval for an AP to send keepalive packets through the CAPWAP data tunnel.
Discovery-response wait-time	Discovery-response timeout timer.
Statistics report interval	Interval for an AP to send statistics reports to the AC.
Fragment size (data)	Maximum fragment size for CAPWAP data packets.
Fragment size (control)	Maximum fragment size for CAPWAP control packets.
MAC type	MAC type of the AP-AC connection: · Local MAC—The AP encapsulates frames in 802.3 format before sending them to the AC. · Split MAC—The AP encapsulates frames in 802.11 format before sending them to the AC. · Local & Split MAC—The AP can encapsulate frames in either 802.3 format or 802.11 format before sending them to the AC.
Tunnel mode	Supported tunnel mode of the AP: · Local Bridging—The AP supports local bridging and does not forward data to the AC. · 802.3 Frame—The AP encapsulates the frames in 802.3 format to send them to the AC. · Native Frame—The AP encapsulates the frames in 802.11 format to send them to the AC. · Local Bridging & 802.3 Frame—The AP supports the Local Bridging mode and the 802.3 Frame mode. · 802.3 Frame & Native Frame—The AP supports the 802.3 Frame mode and the Native Frame mode. · Local Bridging & Native Frame—The AP supports the Local Bridging mode and the Native Frame mode.
CWPCAP data-tunnel status	Running status of the CAPWAP data tunnel: · Up. · Down.
Discovery type	Discovery method of the AP: · Static Configuration—The AP uses the manually configured IPv4 or IPv6 address of the AC. · DHCP—The AP gets the IP address of an AC through DHCP. · DNS—The AP gets the IP address of an AC through DNS. · Unknown. NOTE: In a dual-link backup network, the discovery method of an AP on the backup AC is consistent with that on the master AC.
Retransmission count	Number of retransmission attempts for an AC request.
Retransmission interval	Interval at which AC requests can be retransmitted.
Firmware upgrade	AP software upgrade: · Enabled. · Disabled.
Sent control packets	Number of sent packets, including Change State Event Response packets after the AC enters Run state. .
Received control packets	Number of received packets, including Change State Event Response packets after the AC enters Run state.
Echo requests	Number of echo requests sent by the AP in RUN state.
Lost echo responses	Number of echo responses not received by the AP in RUN state.
Average echo delay	Average echo delay in milliseconds.
Last reboot reason	Last reboot reason for the AP: · Power on. · Hard reboot. · Watchdog reboot. · Unknown reboot. · User soft reboot. · Kernel exception soft reboot. · Kernel deadloop soft reboot. · Auto update soft reboot. · Unknown soft reboot. · Memory exhausted. · Other unknown soft reboot.
Last reboot reason (AP check)	Reason for the most recent AP check failure that caused an AP reboot: · The radio state was incorrect. · The radio channel was incorrect. · The radio type was incorrect. · The radio bandwidth was incorrect. · The radio rate was incorrect. · The radio dependence was incorrect. · The radio physical status was down.
Last reboot reason (AC check)	Reason for the most recent AC check failure that caused an AP reboot: · The radio state was incorrect. · The radio channel was incorrect. · The radio type was incorrect. · The radio bandwidth was incorrect. · The radio rate was incorrect. · The radio dependence was incorrect. · The radio physical status was down.
Latest IP address	IP address that was most recently used by the AP.
Current AC IP	IP address of the AC that is associated with the AP.
Tunnel down reason	Cause for the CAPWAP tunnel to go down: · Failed to create timer. · Neighbor dead timer expired. · Request wait timer expired. · Data check timer expired. · Failed to process data channel keep-alive message. · Failed to process request. · AP was reset. · AP was deleted. · Failed to come online. · Serial number changed. · MAC address changed. · Number of APs exceeded the limit. · Processed join request in Run state. · Failed to create AP context. · Received failure result code. · Failed to retransmit message. · Failed to download image file. · Image file downloaded successfully. · File operation timer expired. · Failed to add tunnel. · Received WTP tunnel down event from AP. · Backup AC closed the backup tunnel. · Master and backup tunnel switchover. · Failed to inherit configuration. · AP authentication failed. · Encryption status mismatch. · AP was reset due to inconsistent local and reported radio statistics. · AP was reset due to inconsistent AP state on APMGR and lib. · AP was reset due to inconsistent BSS state on AC and AP. · Associated local AC went down. This field displays N/A if the CAPWAP tunnel did not go down.
Connection count	Number of times that the AP connects to the AC. It is cleared in either one of the following cases: · The AC reboots. · The serial ID of the AP changes. The reset wlan ap command does not clear the connection count.
Backup IPv4	IPv4 address of the backup AC. If no backup AC is specified, this field displays Not configured.
Backup IPv6	‌ IPv6 address of the backup AC. If no backup AC is specified, this field displays Not configured.
Ctrl-tunnel encryption	CAPWAP control tunnel encryption: · Enabled. · Disabled.
Ctrl-tunnel encryption state	CAPWAP control tunnel encryption state: · Encrypted. · Not encrypted.
Data-tunnel encryption	CAPWAP data tunnel encryption: · Enabled. · Disabled.
Data-tunnel encryption state	CAPWAP data tunnel encryption state: · Encrypted. · Not encrypted.
LED mode	LED lighting mode: · quiet—All LEDs are off. · awake—All LEDs flash once every minute. · always-on—All LEDs are steady on. · normal—How LEDs flash in this mode varies by AP model.
Remote configuration	Remote configuration assignment: · Enabled. · Disabled.
EnergySaving Level	Energy saving level: · 0—Disabled. · 1—Level 1. · 2—Level 2.
Basic BSSID	MAC address of the radio. This field displays N/A if the AP has not established a CAPWAP tunnel with the AC.
Admin state	Radio state: · Up. · Down.
Radio type	Wireless mode: · 6 GHz: ¡ 802.11ax(6GHz). ¡ 802.11be(6GHz). · 5 GHz: ¡ 802.11a. ¡ 802.11n(5GHz). ¡ 802.11ac(5GHz). ¡ 802.11ax(5GHz). ¡ 802.11be(5GHz). · 2.4 GHz: ¡ 802.11b. ¡ 802.11g. ¡ 802.11n(2.4GHz). ¡ 802.11ax(2.4GHz). ¡ 802.11be(2.4GHz).
Client dot11ac-only	· Disabled—Allows 802.11a/b/g/n/ac clients to associate with the radio. · Enabled—Allows only 802.11ac clients to associate with the radio.
Client dot11n-only	· Disabled—Allows 802.11a/b/g/n/ac clients to associate with the radio. · Enabled—Allows only 802.11n or 802.11ac clients to associate with the radio.
Channel bandwidth	Channel bandwidth mode: · 20 MHz. · 20 or 40 MHz. · 20/40/80 MHz. · 20/40/80/160MHz. · 20/40/80/160/(80+80)MHz.
Operating bandwidth	Bandwidth being used by the radio.
Channel auto-switch	Current bandwidth. This field is available only when 20/40 MHz auto switching is enabled and it is the same as the bandwidth value carried in beacon frames.
Secondary channel offset	Secondary channel information for the 802.11n and 802.11ac radio mode: · SCA (Second Channel Above)—The AP operates in 40 MHz bandwidth mode, and the secondary channel is above the primary channel. · SCB (Second Channel Below)—The AP operates in 40 MHz bandwidth mode, and the secondary channel is below the primary channel. · SCN—The AP does not operate in 40 MHz bandwidth mode. This field is available only when the bandwidth that the radio is using is 20/40/80MHz.
Secondary channel center frequency	Center frequency information about the 80 MHz bandwidth of the secondary channel when the radio operates in 802.11ac radio mode with a channel bandwidth of 160/(80+80)MHz. This field is available only when the bandwidth that the radio is using is 160/(80+80)MHz.
Short GI for 20MHz	Whether the radio supports short GI when it operates in 20 MHz mode.
Short GI for 40MHz	Whether the radio supports short GI when it operates in 40 MHz mode.
Short GI for 80MHz	Whether the radio supports short GI when it operates in 80 MHz mode.
Short GI for 160MHz	Whether the radio supports short GI when it operates in 160 MHz mode.
mimo	MIMO mode: · 1x1—The radio sends and receives signals through one spatial stream. · 2x2—The radio sends and receives signals through two spatial streams. · 3x3—The radio sends and receives signals through three spatial streams. · 4x4—The radio sends and receives signals through four spatial streams. · Not configured—The radio sends and receives signals through the maximum number of spatial streams supported by the radio. If this field also displays (PowerLow) after any value option to indicate low power level, the radio can send and receive signals only through one spatial stream.
Green-Energy-Management	Energy-saving: · Disabled. · Enabled.
A-MSDU	· Disabled. · Enabled.
A-MPDU	· Disabled. · Enabled.
LDPC	· Supported. · Not supported.
STBC	· Supported. · Not supported.
Operational HE-MCS Set	· Supported—Supported MCS set. · Mandatory—Mandatory MCS set. · Multicast—Multicast MCS set.
Operational VHT MCS Set	· Supported—Supported VHT MCS set. · Mandatory—Mandatory VHT MCS set. · Multicast—Multicast VHT MCS set.
Operational HT MCS Set	· Supported—Supported MCS set. · Mandatory—Mandatory MCS set. · Multicast—Multicast MCS set.
Channel	This field displays Number<auto> if the current channel is the optimal channel automatically selected by the AP. This field displays Number if the current channel is manually configured. This field displays Number<avoid radar> if the current channel is automatically selected by the AP to avoid radar signals.
Max power	Maximum transmission power of the radio.
Preamble type	Preamble type: · Short. · Long.
Operational rate	· Mandatory. · Supported. · Multicast. · Disabled. · Not configured.
Distance	Maximum distance that the radio signal can reach.
ANI	· Enabled. · Disabled.
Protection threshold	Frame length threshold required for triggering the protection mechanism.
Long retry threshold	Maximum number of retransmission attempts for frames whose length exceeds the RTS threshold.
Short retry threshold	Maximum number of retransmission attempts for frames whose length is below the RTS threshold.
Maximum rx duration	Maximum buffer duration for frames.
Smart antenna	· Enabled. · Disabled. This field is not supported in the current software version.
Smart antenna policy	· Auto. · High availability. · High throughput. This field is not supported in the current software version.
Protection mode	Conflict avoidance mode: · cts-to-self. · rts-cts.
Continuous mode	Continuous mode configuration: · Rate. · MCS index. · NSS index. · VHT-MCS index. This field displays N/A if the continuous mode is not configured.
Client dot11ax-only	· Enabled—Allows only 802.11ax clients to associate with the radio. · Disabled—Allows 802.11a/b/g/n/ac or 802.11ax clients to associate with the radio.
OFDMA random access RUs	· Supported. · Not Supported.
DL-OFDMA	Downlink OFDMA: · Enabled. · Disabled. Support for this field depends on the AP model.
UL-OFDMA	Uplink OFDMA: · Enabled. · Disabled. Support for this field depends on the AP model.
UL-MU-MIMO	Uplink MU-MIMO: · Enabled. · Disabled. Support for this field depends on the AP model.
BSS-COLOR	BSS coloring: · Enabled. · Disabled. Support for this field depends on the AP model.
TWT negotiation	TWT negotiation: · Enabled. · Disabled. Support for this field depends on the AP model.
ATF	ATF enabling status: · Enabled. · Disabled.
Radar-detection	Radar detection: · Enabled. · Disabled.
HT protection mode	802.11n protection mode: · No protection. ¡ AP-associated clients and nearby wireless devices are operating in 802.11n mode and AP-associated clients are 802.11n clients with a bandwidth of 40 MHz. ¡ AP-associated clients are 802.11n clients with a bandwidth of 20 MHz. · Non-member protection. In this mode, all AP-associated clients are 802.11n clients but some nearby wireless devices are non-802.11n clients. · 20 MHz protection. In this mode, the AP's radio has a bandwidth of 40 MHz. AP-associated clients and nearby wireless devices are operating in 802.11n mode and a minimum of one 802.11n client with a bandwidth of 20 MHz is associated with the AP's radio. · Non-HT mixed. The mode applies when none of the above mentioned modes can apply.
MU-TxBF	· Enabled. · Disabled. Support for this field depends on the AP model.
SU-TxBF	· Enabled. · Disabled. Support for this field depends on the AP model.
Operational EHT-MCS Set	EHT-MCS sets: · Supported. · Mandatory. · Multicast. Support for this field depends on the AP model.

‌

display wlan ap address

Use display wlan ap address to display AP address information.

Syntax

display wlan ap { all | name ap-name } address

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

all: Specifies all APs.

name ap-name : Specifies an AP by its name, a case-sensitive string of 1 to 64 characters. The string can contain letters, digits, underscores (_), dots (.), left brackets ([), right brackets (]), forward slashes (/), and hyphens (-).

Examples

# Display address information for all APs.

<Sysname> display wlan ap all address

Total number of APs: 1

Total number of connected APs: 1

Total number of connected manual APs: 1

Total number of connected auto APs: 0

Total number of inside APs: 0

AP name IP address MAC address

ap1 1.1.1.5 000b-6b8f-fc6a

Table 4 Command output

Field	Description
Total number of APs	Total number of fit APs, WTs, and WTUs.
Total number of connected APs	Total number of connected fit APs, WTs, and WTUs.
Total number of connected manual APs	Total number of connected manual fit APs, WTs, and WTUs.
Total number of connected auto APs	Total number of connected auto fit APs, WTs, and WTUs.
Total number of inside APs	This field is not supported in the current software version. Total number of connected inside APs. Inside APs are manual APs that are automatically created when anchor APs act as ACs. The name and the serial ID of an inside AP are the local MAC address and local serial ID, respectively.
IP address	IP address of an AP. This field displays N/A for an offline AP.
MAC address	MAC address of an AP. This field displays N/A for an offline AP.

‌

display wlan ap all feature band-navigation

Use display wlan ap all feature band-navigation to display the configuration status of the band navigation feature for all APs.

Syntax

display wlan ap all feature band-navigation

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display the configuration status of the band navigation feature for all APs.

<Sysname> display wlan ap all feature band-navigation

AP name Status

ap1 Enabled

Table 5 Command output

Field	Description
Status	Band navigation: · Enabled. · Disabled.

Field

Description

Status

Band navigation:

· Enabled.

· Disabled.

‌

display wlan ap all feature capwap

Use display wlan ap all feature capwap to display configuration status of CAPWAP tunnel features.

Syntax

display wlan ap all feature capwap

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display configuration status of CAPWAP tunnel features.

<Sysname> display wlan ap all feature capwap

AP name Upgrade Encryption Control-address Switch-back

ap1 Disabled Both Enabled Disabled

Table 6 Command output

Field	Description
Upgrade	AP software upgrade: · Enabled. · Disabled.
Encryption	CAPWAP tunnel encryption: · Control—Control tunnel encryption is enabled. · Data—Data tunnel encryption is enabled. · Both—Encryption is enabled for both control and data tunnels. · Disabled—Encryption is disabled for both control and data tunnels.
Control-address	AC rediscovery: · Enabled. · Disabled.
Switch-back	‌ The CAPWAP tunnel switch-back feature for AC hierarchy: · Horizontal. · Vertical. · Disabled. · Both.

‌

display wlan ap ap-tag

Use display wlan ap ap-tag to display AP tags.

Syntax

display wlan ap { all | name ap-name } ap-tag { all | tag }

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

all: Specifies all APs.

name ap-name: Specifies an AP. The ap-name argument represents the AP name, a case-sensitive string of 1 to 64 characters. Only letters, digits, underscores (_), dots (.), left brackets ([), right brackets (]), forward slashes (/), and hyphens (-) are supported.

all: Displays all tags.

tag: Displays the specified tag.

Examples

# Display the tags of all APs.

<Sysname> display wlan ap all ap-tag all

AP name Tag

ap1 vip, high-density, meeting

ap2 high-density

Table 7 Command output

Field

Description

AP name

AP name.

Tag

AP tag:

· high-density.

· meeting.

· vip.

· unstable.

‌

Related commands

ap-tag

wlan vip-ap-group

display wlan ap connection-record

Use display wlan ap connection-record to display AP connection records on the AC.

Syntax

display wlan ap { all | name ap-name } connection-record

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

all: Specifies all APs.

Examples

# Display all AP connection records on an AC.

<Sysname> display wlan ap all connection-record

AP name IP address State Time

ap2 192.168.100.27 Run 01-06 09:06:40

Table 8 Command output

Field	Description
State	Current state of the AP: · Discovery—AC discovery. · Join—The CAPWAP tunnel is being established. · Offline—Offline. · Run—The CAPWAP tunnel is operating. It indicates that the AP and the AC have established a CAPWAP tunnel successfully.
Time	Most recent time when the AP established a CAPWAP tunnel with the AC.

Field

Description

State

Current state of the AP:

· Discovery—AC discovery.

· Join—The CAPWAP tunnel is being established.

· Offline—Offline.

· Run—The CAPWAP tunnel is operating. It indicates that the AP and the AC have established a CAPWAP tunnel successfully.

Time

Most recent time when the AP established a CAPWAP tunnel with the AC.

‌

display wlan ap description

Use display wlan ap description to display AP descriptions on the AC.

Syntax

display wlan ap { all | name ap-name } description

Views

System view

Predefined user roles

network-admin

network-operator

Parameters

all: Specifies all APs.

name ap-name: Specifies an AP by its name, a case-sensitive string of 1 to 64 characters. The string can contain letters, digits, underscores (_), left brackets ([), right brackets (]), forward slashes (/), and hyphens (-).

Usage guidelines

This command displays descriptions only for manual APs. The description for an auto AP is Not configured.

Examples

# Display AP descriptions on the AC.

<Sysname> display wlan ap all description

AP information

AP name AP ID Description

ap1 1 Not configured

Table 9 Command description

Field

Description

AP ID

AP ID, a unique identifier of an AP on the AC.

Description

AP description.

This field displays Not configured for auto APs or manual APs that are not configured with any description.

‌

display wlan ap diagnostic-information

Use display wlan ap diagnostic-information to save AP diagnostic information on the AC.

Syntax

display wlan ap name ap-name diagnostic-information

Views

Any view

Predefined user roles

network-admin

Parameters

ap ap-name: Specifies an AP by its name, a case-sensitive string of 1 to 64 characters. It can contain letters, digits, underlines (_), left square brackets ([), right square brackets (]), forward slashes (/), and hyphens (-).

Usage guidelines

You can use this command to have an AP report diagnostic information to the AC. You can view or delete the diagnostic information file from the AC’s storage medium without logging in to that AP.

After you execute this command, the AP will generate a diagnostic information file, send it to the /apdiag/apdiag_ap1.tar.gz directory on the AC's storage medium, and then delete the local diagnostic information file.

To configure the diagnostic information type to be reported, use the display diagnostic-information command. For more information about the command, see device management configuration in Fundamentals Configuration Guide.

This feature takes effect only on online APs.

Examples

# Save diagnostic information for AP ap1 on the AC.

<Sysname> display wlan ap name ap1 diagnostic-information

Diagnostic information is being output to flash:/apdiag/apdiag_ap1.tar.gz.

Saved successfully.

display wlan ap files

Use display wlan ap files to display information about files and file folders on an AP.

Syntax

display wlan ap name ap-name files

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

Examples

# Display information about files and file folders on AP ap1.

<Sysname> display wlan ap name ap1 files

Directory of flash:

0 13638656 wa6300-system.bin

1 2573312 wa6300-boot.bin

131072 KB total (114208 KB free)

Table 10 Command output

Field	Description
0 13638656 xx.xx	File or file folder information: · 0—Serial number, which is automatically assigned by the system. · 13638656— File size in bytes. A hyphen (-) is displayed if it is a file folder. · xx.xx—Name of the file or file folder.

Field

Description

0 13638656 xx.xx

File or file folder information:

· 0—Serial number, which is automatically assigned by the system.

· 13638656— File size in bytes. A hyphen (-) is displayed if it is a file folder.

· xx.xx—Name of the file or file folder.

‌

Related commands

delete file

download file

display wlan ap gps

Use display wlan ap gps to display Global Positioning System (GPS) information for the specified APs.

Syntax

display wlan ap { all | name ap-name } gps

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

all: Specifies all APs.

Usage guidelines

This command takes effect only on APs that support the GPS module.

Examples

# Display GPS information for AP ap1.

<Sysname> display wlan ap name ap1 gps

AP name : ap1

Serial ID : 219801A17C817200001

Model : WA5630X

Longitude : 117.788887

Latitude : 30.822136

Velocity : 25.445878

Orientation: 8.054548

Elevation : 156.655897

Obtained at: 2017-02-20 15:32:19

Table 11 Command output

Field	Description
AP name	Name of the AP.
Serial ID	Serial ID of the AP.
Model	AP model.
Longitude	Longitude rounded to six decimal places.
Latitude	Latitude rounded to six decimal places.
Velocity	Horizontal velocity rounded to six decimal places.
Orientation	Orientation rounded to six decimal places.
Elevation	Elevation rounded to six decimal places.
Obtained at	Time when the GPS information was obtained.

‌

display wlan ap group

Use display wlan ap group to display AP groups to which the specified APs belong.

Syntax

display wlan ap { all | name ap-name } group

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

all: Specifies all APs.

Examples

# Display AP groups for all APs.

<Sysname> display wlan ap all group

Total number of APs: 3

Total number of connected APs: 3

Total number of connected manual APs: 3

Total number of connected auto APs: 0

Total number of connected common APs: 2

Total number of connected WTUs: 1

Total number of inside APs: 0

Maximum supported APs: 128

Remaining APs: 125

Total AP licenses: 128

Local AP licenses: 128

Server AP licenses: 0

Remaining local AP licenses: 126.75

Sync AP licenses: 0

AP information

State: I = Idle, J= Join, JA= JoinAck, IL= ImageLoad

C= Config, DC= DataCheck, R= Run M= Master, B= Backup

AP name APID State Model AP group name

ap1 1 I WA6320 default-group

Table 12 Command output

Field	Description
Total number of APs	Total number of fit APs, WTs, and WTUs.
Total number of connected APs	Total number of connected fit APs, WTs, and WTUs.
Total number of connected manual APs	Total number of connected manual fit APs, WTs, and WTUs. ‌
Total number of connected auto APs	Total number of connected auto fit APs, WTs, and WTUs. ‌
Total number of connected common APs	Total number of connected fit APs.
Total number of connected WTUs	Total number of connected WTUs.
Total number of inside APs	This field is not supported in the current software version. Total number of connected inside APs. Inside APs are manual APs that are automatically created when anchor APs act as ACs. The name and the serial ID of an inside AP are the local MAC address and local serial ID, respectively.
Maximum supported APs	Maximum number of APs supported by the AC, including fit APs and WTUs.
Remaining APs	Remaining AP capacity, maximum number of supported APs minus the number of connected fit APs and WTUs.
Total AP licenses	Total number of AP licenses, including the number of common AP licenses and a quarter of the WTU license quantity. The number of AP licenses used for activating an AP varies by AP type: · Common AP—One. · WTU—A quarter. · WT—None.
local AP licenses	Number of AP licenses installed on the AC.
Server AP licenses	‌ Number of AP licenses requested from the license server.
Remaining local AP licenses	Number of unused AP licenses installed on the AC.
Sync AP licenses	‌ Number of synchronized AP licenses.
APID	ID of the AP to uniquely identify the AP on the AC.
State	Current state of the AP: · I—Idle. · J—Join. · JA—Join acknowledge. · IL—The AP is downloading the image file. · C—The AP is downloading initial configurations. · DC—The AP is checking data. · R—The CAPWAP tunnel is operating. It indicates that the AP and the AC have established a CAPWAP tunnel. · R/M—The master CAPWAP tunnel is operating. It indicates that the AP and the master AC have established a CAPWAP tunnel. · R/B—The backup CAPWAP tunnel is operating. It indicates that the AP and the backup AC have established a CAPWAP tunnel. · M—The AP is connected to the master AC. · B—The AP is connected to the backup AC.
Model	AP model
AP group name	Name of the AP group to which the AP belongs.

‌

display wlan ap interface

Use display wlan ap interface to display Ethernet interface statistics for all online APs or a specified online AP.

Syntax

display wlan ap { all | name ap-name } interface [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

all: Specifies all APs.

name ap-name: Specifies an AP by its name ap-name, a case-sensitive string of 1 to 64 characters. It can contain letters, digits, underlines (_), dots (.), left square brackets ([), right square brackets (]), forward slashes (/), and hyphens (-).

verbose: Displays detailed information. If you do not specify this keyword, this command displays brief information.

Examples

# Display brief information about Ethernet interfaces on all online APs.

<Sysname> display wlan ap all interface

AP name Interface State Speed

ap1 GE1/0/1 UP 1Gbps

ap2 GE1/0/1 DOWN Unknown

ap3 GigabitEthernet1/0/1 DOWN N/A

# Display detailed information about Ethernet interfaces on all online APs.

<Sysname> display wlan ap all interface verbose

AP name: ap1

Interface: GigabitEthernet1/0/1

State : UP

Speed : 1 Gbps

Input : 10 packets, 200 bytes

2 unicasts, 6 broadcasts, 2 multicasts, 0 drops

0 errors

Output : 10 packets, 200 bytes

4 unicasts, 4 broadcasts, 2 multicasts, 0 drops

0 errors

AP name: ap2

Interface: GigabitEthernet1/0/1

State : DOWN

Speed : Unknown

Input : 0 packets, 0 bytes

0 unicasts, 0 broadcasts, 0 multicasts, 0 drops

0 errors

Output : 0 packets, 0 bytes

0 unicasts, 0 broadcasts, 0 multicasts, 0 drops

0 errors

AP name: ap3

Interface: GigabitEthernet1/0/1

State : DOWN

Speed : N/A

Input : 0 packets, 0 bytes

0 unicasts, 0 broadcasts, 0 multicasts, 0 drops

0 errors

Output : 0 packets, 0 bytes

0 unicasts, 0 broadcasts, 0 multicasts, 0 drops

0 errors

# Display brief information about Ethernet interfaces on an online AP.

<Sysname> display wlan ap name ap1 interface

AP name Interface State Speed

ap1 GE1/0/1 UP 1Gbps

# Display detailed information about Ethernet interfaces on an online AP.

<Sysname> display wlan ap name ap1 interface verbose

AP name: ap1

Interface: GigabitEthernet1/0/1

State : UP

Speed : 1 Gbps

Input : 10 packets, 200 bytes

2 unicasts, 6 broadcasts, 2 multicasts, 0 drops

0 errors

Output : 10 packets, 200 bytes

4 unicasts, 4 broadcasts, 2 multicasts, 0 drops

0 errors

Table 13 Command output

Field	Description
Interface	Interface name. If no interface information is obtained, the full interface name is displayed in the brief information.
State	Physical link state of the interface: · UP: The interface is physically up. · DOWN: The interface is physically down.
Speed	Interface speed. If this field displays N/A, no interface speed is obtained. If this field displays Unknown, the interface speed is unknown.
Input	Statistics about packets received by the interface
Output	Statistics about packets sent by the interface
packets	Number of packets sent or received by the interface
bytes	Number of bytes sent or received by the interface
unicasts	Number of unicast packets sent or received by the interface
broadcasts	Number of broadcast packets sent or received by the interface
multicasts	Number of multicast packets sent or received by the interface
drops	Number of packets dropped by the interface
errors	Number of error packets sent or received by the interface

‌

display wlan ap online-time

Use display wlan ap online-time to display the online duration for APs.

Syntax

display wlan ap { all | name ap-name } online-time

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

all: Specifies all APs.

Examples

# Display online duration for all APs.

<Sysname> display wlan ap all online-time

AP name IP address Time

ap1 1.1.1.2 0 days 0 hours 2 minutes 6 seconds

ap2 1.1.1.1 0 days 0 hours 5 minutes 6 seconds

ap3 1.1.1.6 0 days 0 hours 2 minutes 1 seconds

Table 14 Command output

Field	Description
IP address	IP address of an AP.
Time	Real-time association duration of an AP since the AP came online.

‌

display wlan ap reboot-log

Use display wlan ap reboot-log to display reboot logs for an AP.

Syntax

display wlan ap name ap-name reboot-log

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

Usage guidelines

If the AP has suffered a system crash, you can use this command to view detailed information about the crash.

To use this command, make sure the specified AP is in Run state.

Examples

# Display reboot logs for AP ap1.

<Sysname> display wlan ap name ap1 reboot-log

Debugging information is not available on the AC.

Downloading debugging data from AP. Continue? [Y/N]:y

Downloading debugging data. Please wait...

Please enter the same command again to view the log messages.

<Sysname>dis wlan ap name ap1 reboot-log

--------------------- Reboot record 1 ---------------------

Recorded at : 2018-07-20 03:29:43.324529

Occurred at : 2018-07-20 03:29:43.324529

Reason : 0x8

Thread : devd (TID: 50)

Context : thread context

Cpu : 0

Kernel module info : module name (system) module address (0xd145a000)

module name (addon) module address (0xd00d5000)

Last 5 thread switches : WDRVFwdKthread (3:29:43.323999)-->

swapper (3:29:43.324011)-->

WDRVFwdKthread (3:29:43.324467)-->

swapper (3:29:43.324478)-->

devd (3:29:43.324502)-->

…

Related commands

reset wlan ap reboot-log

display wlan ap region-code

Use display wlan ap region-code to display region code information for all APs or the specified AP.

Syntax

display wlan ap { all | name ap-name } region-code

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

all: Specifies all APs.

Examples

# Display region code information for all APs.

<Sysname> display wlan ap all region-code

Region Code

AP name Region Code

ap1 CN CHINA

ap2 CN CHINA

ap3 CN CHINA

Table 15 Command output

Field	Description
Region Code	Region code. For more information about region codes, see Table 36.

‌

display wlan ap running-configuration

Use display wlan ap running-configuration to display running configuration for the specified AP or all APs.

Syntax

display wlan ap { all | name ap-name } running-configuration [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

all: Specifies all APs.

verbose: Displays detailed running configuration.

Examples

# Display detailed running configuration for all APs.

<Sysname> display wlan ap all running-configuration verbose

(i) -- Inherited from AP group

(ir) -- Inherited from AP group RF configuration

(g) -- Inherited from AP global-configuration

wlan ap ap1 model WA6320 id 5

ap group name 1

serial-id 219801A28N819CE0002T

region code 156

echo interval 10 (i)

retransmission count 3 (i)

retransmission interval 5 (i)

statistics interval 50 (i)

fragment-size data 1500 (i)

fragment-size control 1450 (i)

tunnel-preempt disable (g)

firmware-upgrade disable (g)

priority 4 (i)

…

radio 1

radio type 802.11ax(5GHz) (i)

radio disable (i)

channel auto<64> (i)

channel unlock (i)

fragment-threshold 2346 (i)

max-power 20 (i)

power unlock (i)

distance 1 kilometer (i)

ANI Enabled (i)

…

radio 2

radio type 802.11ax(2.4GHz) (i)

radio disable (i)

channel auto<11> (i)

channel unlock (i)

fragment-threshold 2346 (i)

max-power 20 (i)

power unlock (i)

distance 1 kilometer (i)

ANI Enabled (i)

…

wlan ap ap2 model WA6320 id 6

ap group name 2

serial-id 219801A28N819CE0002T

region code 156

echo interval 10 (i)

retransmission count 3 (i)

retransmission interval 5 (i)

statistics interval 50 (i)

fragment-size data 1500 (i)

fragment-size control 1450 (i)

tunnel-preempt disable (g)

firmware-upgrade disable (g)

priority 4 (i)

…

radio 1

radio type 802.11ac (i)

radio disable (i)

channel auto<60> (i)

channel unlock (i)

fragment-threshold 2346 (i)

max-power 20 (i)

power unlock (i)

distance 1 kilometer (i)

ANI Enabled (i)

…

radio 2

radio type 802.11n(2.4GHz) (i)

radio disable (i)

channel auto<13> (i)

channel unlock (i)

fragment-threshold 2346 (i)

max-power 20 (i)

power unlock (i)

distance 1 kilometer (i)

ANI Enabled (i)

…

display wlan ap statistics association-failure-record

Use display wlan ap statistics association-failure-record to display association failure records for APs.

Syntax

display wlan ap statistics association-failure-record

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display association failure records for APs.

<Sysname> display wlan ap statistics association-failure-record

MAC address AP ID Last failed at Reason

9a48-45ed-0300 12312 07-07/15:56:25 AP authentication failed

Table 16 Command output

Field	Description
MAC address	MAC address of an AP.
AP ID	ID of an AP, which uniquely identifies the AP on the AC.
Last failed at	Last time an AP associated with the AC. The format is date/hh:mm:ss.
Reason	Association failure reason: · Failed to create data check timer. · Memory is not enough. · The AP model doesn't exist. · Lack of AP license. · MAC address conflict. · Failed to add APLB. · AP chose another AC. · Reached AC max capability. · Received join request in Run state. · APLB check failed. · Rejected AP access in HA smooth. · AP authentication failed. · Failed to create auto AP. · The AP information has already existed. · Failed to download AP image file. · Timer for waiting change state event request expired. · Time for waiting image data request or configuration request expired. · Received failure result code in change state event request. · Failed to add tunnel. · AP configuration was not found. · Inconsistent AP IDs. · Failed to send query message. · Open image file timer expired.

‌

display wlan ap statistics image-download

Use display wlan ap statistics image-download to display AP image downloading information.

Syntax

display wlan ap statistics image-download [ failed | in-progress | succeeded ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

failed: Displays APs that have failed to download the images.

in-progress: Displays APs that are downloading images.

succeeded: Displays APs that have successfully downloaded images.

Usage guidelines

If you do not specify any keyword, the command displays brief information about AP image downloading.

Examples

# Display brief information about AP image downloading.

<Sysname> display wlan ap statistics image-download

Completed : 50%

Time consumed : xxd hh:mm:ss

Max. concurrent image downloads of online APs : 412

AP count:

Total to download : 300

Succeeded : 152

In-progress : 140

Failed : 8

Table 17 Command output

Field	Description
Completed	Percentage of APs that have completed image downloading.
Time consumed	Time that has been consumed for image downloading.
Total to download	Total number of APs that need to be updated.
Succeeded	Number of APs that have successfully downloaded images.
In-progress	Number of APs that are downloading images.
Failed	Number of APs that have failed to download images.

‌

# Display APs that are downloading images.

<Sysname> display wlan ap statistics image-download in-progress

AP name Time consumed

ap6 xxd 00:45:11

ap7 N/A

ap8 xxd 00:14:05

ap9 xxd 01:16:09

....

------More----

Table 18 Command output

Field	Description
Time consumed	Time that has been consumed for image downloading. This field displays N/A if the AP has not started image downloading.

‌

# Display APs that have failed to download images.

<Sysname> display wlan ap statistics image-download failed

AP name Failure reason

ap1 Tunnel down

ap2 AP memory not enough

ap3 Image file does not exist

ap5 Others

....

------More----

Table 19 Command output

Field	Description
Time consumed	Failure reason: · Tunnel down. · AP memory not enough. · Image file does not exist. · Retransmission failed. · Others.

Field

Description

Time consumed

Failure reason:

· Tunnel down.

· AP memory not enough.

· Image file does not exist.

· Retransmission failed.

· Others.

‌

# Display APs that have downloaded images successfully.

<Sysname> display wlan ap statistics image-download succeeded

AP name Version Downloaded at

ap1 R5220 05-06 14:37:05

ap2 R5220 05-06 14:37:05

ap3 R5220 05-06 14:37:05

ap5 R5220 05-06 14:37:05

....

------More----

display wlan ap statistics online-record

Use display wlan ap statistics online-record to display online AP quantity records.

Syntax

display wlan ap statistics online-record [ datetime date time [ count count ] ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

datetime date time: Specifies the start time to display online AP quantity records. The date argument represents the date in the YYYY/MM/DD format. The value range for YYYY is 2000 to 2035. The value range for MM is 1 to 12. The value range for DD varies by month. The time argument represents the time in the hh:mm format. The value range for hh is 0 to 23. The value range for mm is 0 to 59. If you do not specify this option, the command displays all statistics about online AP quantity over the past 7 days in descending order of time.

count count: Specifies the number of online AP quantity records to be displayed, in the range of 1 to 256. If you do not specify this option, 10 online AP quantity records are displayed.

Usage guidelines

The online AP quantity records are displayed one by one at intervals of 1 minute. This command supports displaying records generated only over the past 7 days. If a time is specified, this command displays the specified number of online AP quantity records generated after the specified time point.

Examples

# Display 11 online AP quantity records generated after 2017/10/11 10:16.

<Sysname> display wlan ap statistics online-record datetime 2017/10/11 10:16 count 11

Time Manual AP Auto AP Virtual AP Total Total delta

2017-10-11 10:16:00 20 10 10 40 -2

2017-10-11 10:17:00 22 10 10 42 2

2017-10-11 10:18:00 16 10 10 36 -6

2017-10-11 10:19:00 16 10 10 36 0

2017-10-11 10:20:00 16 10 10 36 0

2017-10-11 10:21:00 16 10 10 36 0

2017-10-11 10:22:00 16 10 10 36 0

2017-10-11 10:23:00 16 10 10 36 0

2017-10-11 10:24:00 16 10 10 36 0

2017-10-11 10:25:00 16 10 10 36 0

2017-10-11 10:26:00 16 10 10 36 0

Table 20 Command output

Field	Description
Time	Date and time when the record was generated.
Manual AP	Number of online manual APs.
Auto AP	Number of online auto APs.
Virtual AP	Number of online virtual APs.
Total	Total number of online APs.
Total delta	Quantity change in comparison with the last minute.

‌

display wlan ap statistics tunnel-down-record

Use display wlan ap statistics tunnel-down-record to display CAPWAP tunnel down records.

Syntax

display wlan ap statistics tunnel-down-record

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display CAPWAP tunnel down records.

<Sysname> display wlan ap statistics tunnel-down-record

AP name AP ID Tunnel down at Tunnel Down Reason Tunnel Down Count

9a48-45ed-0300 123 07-07/15:56:25 Processed join request 3

in Run state

Table 21 Command output

Field	Description
AP name	Name of an AP. The first 30 characters are displayed.
AP ID	ID of an AP, which uniquely identifies the AP on the AC.
Tunnel down at	Time when the CAPWAP tunnel between an AP and the AC went down. The format is date/hh:mm:ss.
Tunnel down reason	CAPWAP tunnel down reason: · Failed to create data check timer. · Neighbor dead timer expired. · Request wait timer expired. · Data check timer expired. · Failed to process data channel keep-alive message. · Failed to process request. · AP was reset by admin. · AP was reset by Web. · AP was reset from cloud platform. · WTU went offline because the WT was down. · Manual AP was deleted. · Failed to come online. · Serial ID changed. · MAC address changed. · Exceeded AC max capability. · Processed join request in Run state. · Unauthenticated AP tunnel down. · Failed to create AP context. · Received failure result code in change state event request. · Failed to retransmit message. · Failed to download image file. · Image file downloaded successfully. · File operation timer expired. · Failed to add tunnel. · Received WTP tunnel down event from AP. · Backup AC closed the backup tunnel. · Master and backup tunnel switchover. · Failed to inherit configuration. · AP authentication failed. · Backup AP upgrade failed. · Board is inactive. · WT went offline. · Lack of AP license. · Encryption status mismatch. · Licenses for all APs remotely licensed by AP count were forcibly reclaimed. · Receiving AP serial ID based licenses timed out. · Request for AP serial ID based licenses was denied. · Failed to confirm for AP serial ID based licenses respond. · License for an AP remotely licensed by AP serial ID was forcibly reclaimed. · Licenses for all APs remotely licensed by AP serial ID were forcibly reclaimed. · License client configuration was disabled. · Failed to synchronize information about AP serial ID based licenses.
Tunnel Down Count	Number of tunnel down events.

‌

display wlan ap transceiver alarm

Use display wlan ap transceiver alarm to display alarms generated by transceiver modules on the specified AP or all APs.

Syntax

display wlan ap { all | name ap-name } transceiver alarm interface [ interface-type interface-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

all: Specifies all APs.

interface [ interface-type interface-number ]: Specifies an interface by its interface type and number. If you do not specify this option, the command displays information about all interfaces. If you specify the all keyword, you cannot specify the interface-type interface-number argument.

Usage guidelines

For alarm messages related to possible issues with hot swappable transceiver modules, see the table below.

Table 22 Alarm messages from an SFP/SFP+ module

Field	Description
RX signal loss	Loss of received signal.
RX power high	The received optical power is high.
RX power low	The received optical power is low.
TX fault	Transmit errors.
TX bias high	The bias current is high.
TX bias low	The bias current is low.
TX power high	The transmit optical power is high.
TX power low	The transmit optical power is low.
Temp high	The temperature is high.
Temp low	The temperature is low.
Voltage high	High voltage.
Voltage low	Low voltage.
Transceiver info I/O error	Module information read/write error.
Transceiver info checksum error	Module information checksum error.
Transceiver type and port configuration mismatch	The module type does not match the port configuration.
Transceiver type not supported by port hardware	This port does not support the module type.

‌

Examples

# Display the alarms from the transceiver module installed on GigabitEthernet1/0/1 of AP ap1.

<Sysname> display wlan ap name ap1 transceiver alarm interface gigabitethernet 1/0/1

GigabitEthernet1/0/1 transceiver current alarm information:

RX signal loss

RX power low

# Display the alarms from the transceiver module installed on all APs.

<Sysname> display wlan ap all transceiver alarm interface

AP name : ap1

GigabitEthernet1/0/1 transceiver current alarm information:

RX signal loss

RX power low

Table 23 Command output

Field	Description
AP name	AP name.
transceiver current alarm information	Current fault alarm information for the transceiver module.
RX signal loss	Loss of received signal.
RX power low	The received optical power is low.

display wlan ap transceiver diagnosis

Use display wlan ap transceiver diagnosis to display diagnostic information for transceiver modules on APs.

Syntax

display wlan ap { all | name ap-name } transceiver diagnosis interface [ interface-type interface-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

all: Specifies all APs.

interface [ interface-type interface-number ]: Specifies an interface by its interface type and interface number. If you do not specify this option, the command displays information about all interfaces. If you specify the all keyword, you cannot specify the interface-type interface-number argument.

Examples

# Display diagnostic information for the transceiver module installed on GigabitEthernet1/0/1 of AP ap1.

<Sysname> display wlan ap name ap1 transceiver diagnosis interface gigabitethernet 1/0/1

GigabitEthernet1/0/1 transceiver diagnostic information:

Current diagnostic parameters:

Temp(°C) Voltage(V) Bias(mA) RX power(dBm) TX power(dBm)

36 3.31 6.13 -35.64 -5.19

Alarm thresholds:

Temp(°C) Voltage(V) Bias(mA) RX power(dBM) TX power(dBM)

High 50 3.55 1.44 -10.00 5.00

Low 30 3.01 1.01 -30.00 0.00

# Display diagnostic information for the transceiver module installed on all APs.

<Sysname> display wlan ap all transceiver diagnosis interface

AP name Interface Temp(°C) Voltage(V) Bias(mA) RX power(dBm) TX power(dBm)

AP1 GE1/0/1 36(30,50) 3.31(3.01,3.55) 13(0.00,60.00) -35.64(-30.00,-10.00) -5.19(2.00,-7.00)

AP2 GE1/0/1 35(30,50) 3.21(3.01,3.55) 15(0.00,60.00) -32.64(-30.00,-10.00) -5.19(2.00,-7.00)

Table 24 Command output

Field	Description
transceiver diagnostic information	Diagnostic information about the transceiver module.
Current diagnostic parameters	Current diagnostic parameters.
Temp.(°C)	Temperature, measured in degrees Celsius (°C), accurate to 1°C.
Voltage(V)	Voltage, measured in volts, accurate to 0.01V.
Bias(mA)	Bias electricity, measured in mA, accurate to 0.01 mA.
RX power(dBm)	Receive optical power, measured in dBm, accurate to 0.01dBm.
TX power(dBm)	Transmit optical power, measured in dBm, accurate to 0.01dBm.
Alarm thresholds	Alarm thresholds.
High	Upper alarm threshold.
Low	Lower alarm threshold.
AP name	AP Name
Interface	Interface name.

display wlan ap transceiver parameter

Use display wlan ap transceiver parameter to display the specifications of transceiver modules on a specified or all APs.

Syntax

display wlan ap { all | name ap-name } transceiver parameter interface [ interface-type interface-number ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

all: Specifies all APs.

Examples

# Display the specifications of the transceiver module installed on GigabitEthernet1/0/1 of AP ap1.

<Sysname> display wlan ap name ap1 transceiver parameter interface gigabitethernet 1/0/1

GigabitEthernet1/0/1 transceiver information:

Transceiver Type : 1000_BASE_SX_SFP

Connector Type : LC

Wavelength(nm) : 850

Transfer Distance(m) : 550

Digital Diagnostic Monitoring : YES

Vendor Name : H3C

# Display the specifications of transceiver modules installed on all APs.

<Sysname> display wlan ap all transceiver parameter interface

AP name : ap1

GigabitEthernet1/0/1 transceiver information:

Transceiver Type : 1000_BASE_SX_SFP

Connector Type : LC

Wavelength(nm) : 850

Transfer Distance(m) : 550

Digital Diagnostic Monitoring : YES

Vendor Name : H3C

AP name : ap2

GigabitEthernet1/0/1 transceiver information:

Transceiver Type : 1000_BASE_SX_SFP

Connector Type : LC

Wavelength(nm) : 850

Transfer Distance(m) : 550

Digital Diagnostic Monitoring : YES

Vendor Name : H3C

Table 25 Command output

Field	Description
AP name	AP name.
Transceiver Type	Transceiver module type.
Connector Type	Optical connector type.
Wavelength(nm)	· For a fiber transceiver module, this field displays the center wavelength of the transmit laser in nm. For a module that supports multiple wavelengths (for example, 10GBASE-LX4), the wavelength values are separated with a comma (,). · For a copper transceiver module, this field displays N/A.
Transfer Distance(xx)	Transmission distance.
Digital Diagnostic Monitoring	Support for digital diagnostics. Options include: · YES—Digital diagnostics is supported. · NO—Digital diagnostics is not supported.
Vendor Name	Name of the module's manufacturer or customizer.

display wlan ap tunnel latency

Use display wlan ap tunnel latency to display tunnel latency information for an AP.

Syntax

display wlan ap name ap-name tunnel latency

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

Usage guidelines

Make sure CAPWAP tunnel latency detection is enabled before you execute this command.

Examples

# Display tunnel latency information for AP ap1.

<Sysname> display wlan ap name ap1 tunnel latency

AP name : ap1

Tunnel Latency : Enabled

Control Link Delay:

Current Delay : 1ms

Maximum Delay : 1ms

Minimum Delay : 1ms

Data Link Delay:

Current Delay : 1ms

Maximum Delay : 1ms

Minimum Delay : 1ms

Table 26 Command output

Field	Description
Tunnel Latency	· Disabled. · Enabled.
Current Delay	The most recent delay.

Field

Description

Tunnel Latency

· Disabled.

· Enabled.

Current Delay

The most recent delay.

‌

Related commands

reset wlan tunnel latency ap

tunnel latency-detect

display wlan ap unauthenticated

Use display wlan ap unauthenticated to display information about unauthenticated auto APs.

Syntax

display wlan ap unauthenticated [ verbose ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

verbose: Displays detailed information about unauthenticated auto APs. If you do not specify this keyword, this command displays brief information about unauthenticated auto APs.

Examples

# Display brief information about unauthenticated auto APs.

<Sysname> display wlan ap unauthenticated

Total number of APs: 1

Total number of connected APs: 1

Total number of connected manual APs: 0

Total number of connected auto APs: 1

Total number of inside APs: 0

Maximum supported APs: 3072

Remaining APs: 3071

Fit APs activated by license: 128

Remaining fit APs: 127

WTUs activated by license: 0

Remaining WTUs: 0

AP information

State : I = Idle, J = Join, JA = JoinAck, IL = ImageLoad

C = Config, DC = DataCheck, R = Run, M = Master, B = Backup

AP name APID State Model Serial ID

6649-99be-0300 6 R/M WA6320 219801A28N819CE0002T

Table 27 Command output

Field	Description
Total number of APs	Total number of fit APs, WTs, and WTUs.
Total number of connected APs	Total number of connected fit APs, WTs, and WTUs.
Total number of connected manual APs	Total number of connected manual fit APs, WTs, and WTUs.
Total number of connected auto APs	Total number of connected auto fit APs, WTs, and WTUs.
Total number of inside APs	This field is not supported in the current software version. Total number of inside APs. Inside APs are manual APs that are automatically created when anchor APs act as ACs. The name and the serial ID of an inside AP are the local MAC address and local serial ID, respectively.
Maximum supported APs	Maximum number of APs supported by the AC, including fit APs and WTUs. ‌
WTUs activated by license	‌ Activated WTU capacity on the AC.
Remaining WTUs	Remaining WTU capacity, the number of activated WTUs minus the number of connected WTUs.
APID	ID of the AP to uniquely identify the AP on the AC.
State	Current state of the AP: · I—Idle. · J—Join. · JA—Join acknowledge. · IL—The AP is downloading the software image file. · C—The AP is downloading initial configurations. · DC—The AP is checking data. · R—The CAPWAP tunnel is operating. It indicates that the AP and the AC have established a CAPWAP tunnel. · R/M—The master CAPWAP tunnel is operating. It indicates that the AP and the master AC have established a CAPWAP tunnel. · R/B—The backup CAPWAP tunnel is operating. It indicates that the AP and the backup AC have established a CAPWAP tunnel. · M—The AP is connected to the master AC. · B—The AP is connected to the backup AC.
Serial ID	Serial ID of the AP. This field displays Not configured if the serial ID of the AP is not configured.

‌

# Display detailed information about unauthenticated auto APs.

<Sysname> display wlan ap unauthenticated verbose

Total number of APs: 1

Total number of connected APs: 0

Total number of connected manual APs: 0

Total number of connected auto APs: 1

Total number of inside APs: 0

Maximum supported APs: 3072

Remaining APs: 3071

Fit APs activated by license: 128

Remaining fit APs: 127

WTUs activated by license: 0

Remaining WTUs: 0

AP name : ap1

AP ID : 1

AP group name : default-group

State : Run

Backup Type : Master

Online time : 0 days 1 hours 25 minutes 12 seconds

System up time : 0 days 2 hours 22 minutes 12 seconds

Model : WA6320

Region code : CN

Region code lock : Disable

Serial ID : 219801A28N819CE0002T

MAC address : 0AFB-423B-893C

IP address : 192.168.1.50

UDP port number : 65488

H/W version : Ver.C

S/W version : V700R001B49D001

Boot version : 1.01

Description : wtp1

Priority : 4

Echo interval : 10 seconds

Statistics report interval : 50 seconds

Fragment-size data : 1500

Fragment-size control : 1450

MAC type : Local MAC & Split MAC

Tunnel mode : Local Bridging & 802.3 Frame & Native Frame

Discovery type : Static Configuration

Retransmission count : 3

Retransmission interval : 5 seconds

Firmware upgrade : Enabled

Sent control packets : 1

Received control packets : 1

Echo requests : 147

Lost echo responses : 0

Average echo delay : 3

Last reboot reason : User soft reboot

Latest IP address : 10.1.0.2

Tunnel down reason : Request wait timer expired

Connection count : 1

Backup IPv4 : Not configured

Backup IPv6 : Not configured

Tunnel encryption : Disabled

Data-tunnel encryption : Disabled

LED mode : Normal

Remote configuration : Enabled

Radio 1:

Basic BSSID : 7848-59f6-3940

Admin state : Up

Radio type : 802.11ac

Antenna type : internal

Client dot11ac-only : Disabled

Client dot11n-only : Disabled

Channel band-width : 20/40/80MHz

Secondary channel offset : SCB

Short GI for 20MHz : Supported

Short GI for 40MHz : Supported

Short GI for 80MHz : Supported

Short GI for 160MHz : Not supported

A-MSDU : Enabled

A-MPDU : Enabled

LDPC : Not Supported

STBC : Supported

Operational VHT-MCS Set:

Mandatory : Not configured

Supported : NSS1 0,1,2,3,4,5,6,7,8,9

NSS2 0,1,2,3,4,5,6,7,8,9

Multicast : Not configured

Operational HT MCS Set:

Mandatory : Not configured

Supported : 0, 1, 2, 3, 4, 5, 6, 7, 8, 9,

10, 11, 12, 13, 14, 15

Multicast : Not configured

Channel : 44(auto)

Max power : 20 dBm

Operational rate:

Mandatory : 6, 12, 24 Mbps

Multicast : Auto

Supported : 9, 18, 36, 48, 54 Mbps

Disabled : Not configured

Distance : 1 km

ANI : Enabled

Fragmentation threshold : 2346 bytes

Beacon interval : 100 TU

Protection threshold : 2346 bytes

Long retry threshold : 4

Short retry threshold : 7

Maximum rx duration : 2000 ms

Noise Floor : 5 dBm

Smart antenna : Enabled

Smart antenna policy : Auto

Protection mode : cts-to-self

Continuous-mode : N/A

Radio 2:

Basic BSSID : 7848-59f6-3950

Admin state : Down

Radio type : 802.11b

Antenna type : internal

Client dot11n-only : Disabled

Channel band-width : 20MHz

Secondary channel offset : SCN

Short GI for 20MHz : Supported

Short GI for 40MHz : Supported

A-MSDU : Enabled

A-MPDU : Enabled

LDPC : Not Supported

STBC : Supported

Operational HT MCS Set:

Mandatory : Not configured

Supported : 0, 1, 2, 3, 4, 5, 6, 7, 8, 9,

10, 11, 12, 13, 14, 15

Multicast : Not configured

Channel : 5(auto)

Max power : 20 dBm

Preamble type : Short

Operational rate:

Mandatory : 1, 2, 5.5, 11 Mbps

Multicast : Auto

Supported : 6, 9, 12, 18, 24, 36, 48, 54 Mbps

Disabled : Not configured

Distance : 1 km

ANI : Enabled

Fragmentation threshold : 2346 bytes

Beacon interval : 100 TU

Protection threshold : 2346 bytes

Long retry threshold : 4

Short retry threshold : 7

Maximum rx duration : 2000 ms

Noise Floor : 5 dBm

Smart antenna : Enabled

Smart antenna policy : Auto

Protection mode : cts-to-self

Continuous-mode : N/A

Table 28 Command output

Field	Description
Total number of APs	Total number of fit APs, WTs, and WTUs.
Total number of connected APs	Total number of connected fit APs, WTs, and WTUs.
Total number of connected manual APs	Total number of connected manual fit APs, WTs, and WTUs.
Total number of connected auto APs	Total number of connected auto fit APs, WTs, and WTUs.
Total number of inside APs	This field is not supported in the current software version. Total number of inside APs. Inside APs are manual APs that are automatically created when anchor APs act as ACs. The name and the serial ID of an inside AP are the local MAC address and local serial ID, respectively.
Maximum supported APs	Maximum number of APs supported by the AC, including fit APs and WTUs.
WTUs activated by license	‌ Activated WTU capacity on the AC.
Remaining WTUs	‌ Remaining WTU capacity, the number of activated WTUs minus the number of connected WTUs.
AP ID	ID of the AP to uniquely identify the AP on the AC.
State	Current state of the AP: · Idle—Idle. · Join—Join. · JoinAck—Join acknowledge. · Image—The AP is downloading the software image file. · Config—The AP is downloading initial configurations. · Data Check—The AP is checking data. · Run—The CAPWAP tunnel is operating. It indicates that the AP and the AC have established a CAPWAP tunnel. · R/M—The master CAPWAP tunnel is operating. It indicates that the AP and the master AC have established a CAPWAP tunnel. · R/B—The backup CAPWAP tunnel is operating. It indicates that the AP and the backup AC have established a CAPWAP tunnel. · M—The AP is connected to the master AC. · B—The AP is connected to the backup AC.
Backup Type	CAPWAP tunnel type: · Idle—The AP has not established a CAPWAP tunnel with the AC. · Master—The CAPWAP tunnel established between the AP and the master AC. · Backup—The CAPWAP tunnel established between the AP and the backup AC.
Region code lock	· Enabled. · Disabled.
Serial ID	Serial ID of the AP. If no serial ID is configured, this field displays Not configured.
MAC address	MAC address of the AP. If no MAC address is configured, this field displays Not configured.
UDP port number	Port number used by the AP to establish the CAPWAP control tunnel.
H/W version	Hardware version of the AP.
S/W version	Software version of the AP.
Description	Description for the AP. If no description is configured, this field displays Not configured.
Priority	AP connection priority for the AC.
Echo interval	Interval for the AP to send echo requests to the AC.
Statistics report interval	Statistics report interval for the AP to send statistics reports to the AC
Fragment-size data	Maximum fragment size for CAPWAP data packets.
Fragment-size control	Maximum fragment size for CAPWAP control packets.
MAC type	MAC type of the AP-AC connection: · Local MAC—The AP encapsulates frames in 802.3 format before sending them to the AC. · Split MAC—The AP encapsulates frames in 802.11 format before sending them to the AC. · Local & Split MAC—The AP can encapsulate frames in either 802.3 format or 802.11 format before sending them to the AC.
Tunnel mode	Supported tunnel mode of the AP: · Local Bridging—The AP supports local bridging and does not forward data to the AC. · 802.3 Frame—The AP encapsulates the frames in 802.3 format to send them to the AC. · Native Frame—The AP encapsulates the frames in 802.11 format to send them to the AC. · Local Bridging & 802.3 Frame—The AP supports the Local Bridging mode and the 802.3 Frame mode. · 802.3 Frame & Native Frame—The AP supports the 802.3 Frame mode and the Native Frame mode. · Local Bridging & Native Frame—The AP supports the Local Bridging mode and the Native Frame mode.
Discovery type	Discovery type of the AP: · Static Configuration—The AP uses the manually configured IPv4 or IPv6 address of the AC. · DHCP—The AP gets the IP address of an AC through DHCP. · DNS—The AP gets the IP address of an AC through DNS. · Unknown.
Retransmission count	Number of retransmission attempts for an AC request.
Retransmission interval	Interval at which AC requests can be retransmitted.
Firmware upgrade	AP software upgrade: · Enabled. · Disabled.
Sent control packets	Number of sent packets, including Change State Event Response packets after the AC enters Run state. .
Received control packets	Number of received packets, including Change State Event Response packets after the AC enters Run state.
Echo requests	Number of echo requests sent by the AP in RUN state.
Lost echo responses	Number of echo responses not received by the AP in RUN state.
Average echo delay	Average echo delay in milliseconds.
Last reboot reason	Last reboot reason for the AP: · Power on. · Hard reboot. · Watchdog reboot. · Unknown reboot. · User soft reboot. · Kernel exception soft reboot. · Kernel deadloop soft reboot. · Auto update soft reboot. · Unknown soft reboot. · Memory exhausted. · Other unknown soft reboot.
Latest IP address	IP address that was most recently used by the AP.
Tunnel down reason	Cause for the CAPWAP tunnel to go down: · Failed to create timer. · Neighbor dead timer expired. · Request wait timer expired. · Data check timer expired. · Failed to process data channel keep-alive message. · Failed to process request. · AP was reset. · AP was deleted. · Failed to come online. · Serial number changed. · MAC address changed. · Number of APs exceeded the limit. · Processed join request in Run state. · Failed to create AP context. · Received failure result code. · Failed to retransmit message. · Failed to download image file. · Image file downloaded successfully. · File operation timer expired. · Failed to add tunnel. · Received WTP tunnel down event from AP. · Backup AC closed the backup tunnel. · Master and backup tunnel switchover. · Failed to inherit configuration. · AP authentication failed. This field displays N/A if the CAPWAP tunnel did not go down.
Connection count	Number of times that the AP connects to the AC. It is cleared in either one of the following cases: · The AC reboots. · The serial ID of the AP changes. The reset wlan ap command does not clear the connection count.
Backup IPv4	IPv4 address of the backup AC. If no backup AC is specified, this field displays Not configured.
Backup IPv6	‌ IPv6 address of the backup AC. If no backup AC is specified, this field displays Not configured.
Tunnel encryption	CAPWAP control tunnel encryption: · Enabled. · Disabled.
Data-tunnel encryption	CAPWAP data tunnel encryption: · Enabled. · Disabled.
LED mode	LED lighting mode: · Quiet—All LEDs are off. · Awake—All LEDs flash once every minute. · Always-on—All LEDs are steady on. · Normal—How LEDs flash in this mode varies by AP model.
Remote configuration	Remote configuration assignment: · Enabled. · Disabled.
Basic BSSID	MAC address of the radio. This field displays N/A if the AP has not established a CAPWAP tunnel with the AC.
Admin state	Radio state: · Up. · Down.
Radio type	Wireless mode: · 5 GHz: ¡ 802.11a. ¡ 802.11n(5GHz). ¡ 802.11ac(5GHz). ¡ 802.11ax(5GHz). · 2.4 GHz: ¡ 802.11b. ¡ 802.11g. ¡ 802.11n(2.4GHz). ¡ 802.11ac(2.4GHz). ¡ 802.11ax(2.4GHz).
Client dot11ac-only	· Disabled—Allows 802.11a/b/g/n/ac clients to associate with the radio. · Enabled—Allows only 802.11ac clients to associate with the radio.
Client dot11n-only	· Disabled—Allows 802.11a/b/g/n/ac clients to associate with the radio. · Enabled—Allows only 802.11n or 802.11ac clients to associate with the radio.
Channel band-width	Channel bandwidth: · 20 MHz. · 20 or 40 MHz. · 20/40/80 MHz.
Secondary channel offset	Secondary channel information for the 802.11n and 802.11ac radio mode: · SCA (Second Channel Above)—The AP operates in 40 MHz bandwidth mode, and the secondary channel is above the primary channel. · SCB (Second Channel Below)—The AP operates in 40 MHz bandwidth mode, and the secondary channel is below the primary channel. · SCN—The AP does not operate in 40 MHz bandwidth mode.
Short GI for 20MHz	Whether the radio supports short GI when it operates in 20 MHz mode.
Short GI for 40MHz	Whether the radio supports short GI when it operates in 40 MHz mode.
Short GI for 80MHz	Whether the radio supports short GI when it operates in 80 MHz mode.
Short GI for 160MHz	Whether the radio supports short GI when it operates in 160 MHz mode.
A-MSDU	· Disabled. · Enabled.
A-MPDU	· Disabled. · Enabled.
LDPC	· Supported. · Not supported.
STBC	· Supported. · Not supported.
Operational VHT MCS Set	· Supported—Supported VHT MCS set. · Mandatory—Mandatory VHT MCS set. · Multicast—Multicast VHT MCS set.
Operational HT MCS Set	· Supported—Supported MCS set. · Mandatory—Mandatory MCS set. · Multicast—Multicast MCS set.
Channel	This field displays Number<auto> if the current channel is the optimal channel automatically selected by the AP. This field displays Number if the current channel is manually configured. This field displays Number<avoid radar> if the current channel is automatically selected by the AP to avoid radar signals.
Max power	Maximum transmission power of the radio.
Preamble type	Preamble type: · Short. · Long.
Operational rate	· Mandatory. · Supported. · Multicast. · Disabled. · Not configured.
Distance	Maximum distance that the radio signal can reach.
ANI	· Enabled. · Disabled.
Protection threshold	Frame length threshold required for triggering the protection mechanism.
Long retry threshold	Maximum number of retransmission attempts for frames whose length exceeds the RTS threshold.
Short retry threshold	Maximum number of retransmission attempts for frames whose length is below the RTS threshold.
Maximum rx duration	Maximum buffer duration for frames.
Smart antenna	· Enabled. · Disabled. Support for this field depends on the AP model.
Smart antenna policy	· Auto. · High availability. · High throughput. Support for this field depends on the AP model.
Protection mode	Conflict avoidance mode: · cts-to-self. · rts-cts.
Continuous mode	Continuous mode configuration: · Rate. · MCS index. · NSS index. · VHT-MCS index. This field displays N/A if the continuous mode is not configured.

‌

display wlan ap-distribution

Use display wlan ap-distribution to display AP distribution information.

Syntax

display wlan ap-distribution all

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

all: Displays distribution information for APs attached to the current AC.

Examples

# Display distribution information for all APs.

<Sysname> display wlan ap-distribution all

Slot : 1

Total number of APs: 1

AP name : 722a-d561-0301

# On the central AC, display distribution information for APs attached to the central AC and all local ACs.

<Sysname> display wlan ap-distribution all

Central AC Slot 0 Total number of APs: 1

AP name AP ID AP IP AC IP

ap1 1 1.1.1.1 1.1.1.10

Local AC local-ac1 Total number of APs: 3

AP name AP ID AP IP AC IP

Ap2 2 1.1.1.2 1.1.1.11

Ap3 3 1.1.1.3 1.1.1.11

Ap4 4 1.1.1.4 1.1.1.11

Table 29 Command output

Field	Description
Central AC	Distribution information for APs attached to the central AC.
Slot	Member ID of the IRF member device. This field indicates the member ID only for centralized IRF devices.
AC IP	IP address of the associated AC. The AP can associate with a local AC or the central AC.
Local AC	Distribution information for APs attached to the local AC.
local-ac1	Local AC name.

‌

display wlan ap-distribution ap-name

Use display wlan ap-distribution ap-name to display the attachment location of an AP.

Syntax

display wlan ap-distribution ap-name ap-name

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

Examples

# On a non-AC hierarchical network, display the attachment location of AP ap1.

<Sysname> display wlan ap-distribution ap-name ap1

The AP is attached to slot 0.

display wlan ap-group

Use display wlan ap-group to display information about all AP groups or the specified AP group.

Syntax

display wlan ap-group [ brief | name group-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

brief: Displays brief information about all AP groups.

name group-name: Displays detailed information about the specified AP group. The group-name argument represents the name of an AP group, a case-insensitive string of 1 to 31 characters.

Usage guidelines

If you do not specify any parameter, this command displays detailed information about all AP groups.

Examples

# Display detailed information about all AP groups.

[Sysname] display wlan ap-group

Total number of AP groups: 2

AP group name : default-group

Description : Not configured

AP model : Not configured

APs : Not configured

AP group name : group1

Description : abcd

AP model : WA6320

AP grouping rules:

AP name : ap1, ap2

Serial ID : 219801A28N819CE0002T

MAC address : 0AFB-423B-893C

IPv4 address : Not configured

IPv6 address : Not configured

APs : ap1 (AP name)

# Display detailed information about AP group group1.

[Sysname] display wlan ap-group group1

AP group name : group1

Description : Not configured

AP model : WA6320

AP grouping rules:

AP name : ap1, ap2

Serial ID : 219801A28N819CE00021

MAC address : 0AFB-423B-893C

IPv4 address : Not configured

IPv6 address : Not configured

APs : ap1 (AP name)

# Display brief information about all AP groups.

<Sysname> display wlan ap-group brief

Total number of AP groups: 4

AP group name Group ID Member APs Online APs

default-group 1 1 0

group1 2 2006 1986

group2 3 10 10

group3 4 4 4

Related commands

wlan ap-group

display wlan ap-model

Use display wlan ap-model to display AP model information.

Syntax

display wlan ap-model { all | name model-name }

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

all: Specifies all AP models.

name model-name: Specifies an AP model by its name.

Examples

# Display information about AP model WA6320.

<Sysname> display wlan ap-model name WA6320

AP model : WA6320

Alias : WA6320

Vendor name : H3C

Vendor ID : 25506

License weight : 100

License type : 1

Radio count : 2

Radio 1:

Mode : 802.11a, 802.11an, 802.11ac

Default mode : 802.11ac

BSS count : 16

Radio 2:

Mode : 802.11b, 802.11g, 802.11gn

Default mode : 802.11gn

BSS count : 16

Version Support List :

Hardware Version Ver.A:

Software Version : R2206P02

Default Software Version : R2206P02

Image Name : wa6300.ipe

Hardware Version Ver.B:

Software Version : R2206P02

Default Software Version : R2206P02

Image Name : wa6300.ipe

Hardware Version Ver.C:

Software Version : R2206P02

Default Software Version : R2206P02

Image Name : wa6300.ipe

Hardware Version Ver.D:

Software Version : R2206P02

Default Software Version : R2206P02

Image Name : wa6300.ipe

Hardware Version Ver.E:

Software Version : R2206P02

Default Software Version : R2206P02

Image Name : wa6300.ipe

Hardware Version Ver.F:

Software Version : R2206P02

Default Software Version : R2206P02

Image Name : wa6300.ipe

Table 30 Command output

Field	Description
AP model	AP model name.
Alias	AP model alias.
License weight	Weight of the AP model in using an AP license, in percentage.
License type	AP type. · 1—Common AP. · 2—WTU. · 3—WT.
Radio count	Number of radios.
Mode	Supported radio types.
Default mode	Default radio type.
BSS count	Maximum number of BSSs that the radio supports.
Software Version	Fit AP' software version stored in the APDB used to compare with the software version reported by the AP.
Default Software Version	Default software version of the fit AP stored in the APDB.
Image Name	Name of the AP image file.

‌

display wlan device role

Use display wlan device role to display the WLAN device role.

Syntax

display wlan device role

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display the role of the WLAN device.

<Sysname> display wlan device role

Current device role: Local AC.

Table 31 Command output

Field

Description

Current device role

Current device role. Options include:

· AC.

· Local AC.

· FAT AP.

· FIT AP.

· WT.

· WTU.

‌

display wlan license

Use display wlan license to display the number of installed WLAN licenses.

Syntax

display wlan license

Views

Any view

Predefined user roles

network-admin

network-operator

Examples

# Display the number of installed WLAN licenses.

<Sysname> display wlan license

Installed common AP licenses : 64

Installed WTU licenses : 0

Licenses obtained from license server : 5

License server state : Valid

Licensing method : By AP serial ID

Table 32 Command output

Field	Description
Installed common AP licenses	Number of installed common AP licenses.
Installed WTU licenses	‌ Number of installed WTU licenses.
Licenses obtained from license server	Number of obtained AP licenses from the license server.
License server state	Remote license server state: · Valid—License server is available. · Invalid—License server is unavailable.
Licensing method	Remote license server method: · Unknown. · By AP serial ID. · By AP count.

‌

display wlan virtual-ap

Use display wlan virtual-ap to display information about a virtual AP.

Syntax

display wlan virtual-ap { all | name ap-name }

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

all: Specifies all virtual APs.

name ap-name: Specifies a virtual AP by its name, a case-sensitive string of 1 to 64 characters. The string can contain letters, digits, underscores (_), dots (.), left brackets ([), right brackets (]), forward slashes (/), and hyphens (-).

Examples

# Display information about all virtual APs.

<Sysname> display wlan virtual-ap all

Total number of virtual-APs: 1

Total number of connected virtual-APs: 1

Total number of connected common virtual-APs: 1

Total number of connected virtual-WTUs: 0

Maximum supported APs: 48

Remaining APs: 47

AP information

State : I = Idle, J = Join, JA = JoinAck, IL = ImageLoad

C = Config, DC = DataCheck, R = Run M = Master, B = Backup

AP name APID State Model Serial ID

ap1 1 R WA6320 210235A1BSC123000050

Table 33 Command output

Field	Description
Total number of connected virtual-APs	Total number of connected virtual APs and virtual WTUs.
Maximum supported APs	Maximum number of APs supported by the AC, including physical fit APs and WTUs and virtual fit APs and WTUs, excluding physical and virtual WTs.
Remaining APs	Number of unused AP licenses installed on the AC.
APID	ID of the virtual AP to uniquely identify the virtual AP on the AC.
State	Current state of the virtual AP: · I—Idle. · J—Join. · JA—Join acknowledge. · IL—The AP is downloading the image file. · C—The AP is downloading initial configurations. · DC—The AP is checking data. · R—The CAPWAP tunnel is operating. It indicates that the virtual AP and the AC have established a CAPWAP tunnel. · R/M—The master CAPWAP tunnel is operating. It indicates that the virtual AP and the master AC have established a CAPWAP tunnel. · R/B—The backup CAPWAP tunnel is operating. It indicates that the AP and the backup AC have established a CAPWAP tunnel. · M—The AP is connected to the master AC. · B—The AP is connected to the backup AC. · R/IL—The AP is online and is downloading the image file from the AC.
Serial ID	Serial ID of the virtual AP. This field displays Not configured if the serial ID of the virtual AP is not configured.

# Display information about virtual AP ap1.

<Sysname> display wlan virtual-ap name ap1

AP information

State : I = Idle, J = Join, JA = JoinAck, IL = ImageLoad

C = Config, DC = DataCheck, R = Run M = Master, B = Backup

AP name APID State Model Serial ID

ap1 1 R WA6320 210235A1BSC123000050

Table 34 Command output

Field	Description
APID	ID of the virtual AP to uniquely identify the virtual AP on the AC.
State	Current state of the virtual AP: · I—Idle. · J—Join. · JA—Join acknowledge. · IL—The AP is downloading the image file. · C—The AP is downloading initial configurations. · DC—The AP is checking data. · R—The CAPWAP tunnel is operating. It indicates that the virtual AP and the AC have established a CAPWAP tunnel. · R/M—The master CAPWAP tunnel is operating. It indicates that the virtual AP and the master AC have established a CAPWAP tunnel. · R/B—The backup CAPWAP tunnel is operating. It indicates that the AP and the backup AC have established a CAPWAP tunnel. · M—The AP is connected to the master AC. · B—The AP is connected to the backup AC. · R/IL—The AP is online and is downloading the image file from the AC.
Serial ID	Serial ID of the virtual AP. This field displays Not configured if the serial ID of the virtual AP is not configured.

‌

Related commands

wlan virtual-ap

display wlan virtual-ap-group

Use display wlan virtual-ap-group to display information about a virtual AP group.

Syntax

display wlan virtual-ap-group [ brief | name group-name ]

Views

Any view

Predefined user roles

network-admin

network-operator

Parameters

brief: Displays brief information for a virtual AP group.

name group-name: Specifies a virtual AP group by its name. group-name represents a virtual AP group name, a case-insensitive string of 1 to 31 characters. If you do not specify this option, this command displays information about all virtual AP groups.

Examples

# Display detailed information about all virtual AP groups.

<Sysname> display wlan virtual-ap-group

Total number of virtual AP groups: 2

AP group name : default-virtualapgroup

Description : Not configured

AP model : Not configured

APs : Not configured

AP group name : group1

Description : abcd

AP model : WA6320

AP grouping rules:

AP name : ap1, ap2

Serial ID : 219801A0CNC138011454

MAC address : 0AFB-423B-893C

IPV4 address : Not configured

IPV6 address : Not configured

APs : ap1 (AP name)

# Display detailed information about a virtual AP group.

<Sysname> display wlan virtual-ap-group name group1

Virtual-AP group information

AP group name : group1

Description : Not configured

AP model : WA6320

AP grouping rules:

AP name : ap1, ap2

Serial ID : 219801A0CNC138011454

MAC address : 0AFB-423B-893C

IPV4 address : Not configured

IPV6 address : Not configured

APs : ap1 (AP name)

# Display brief information about all virtual AP groups.

<Sysname> display wlan virtual-ap-group brief

Total number of virtual AP groups: 4

AP group name Group ID Member APs Online APs

default-virtualapgroup 1 1 0

group1 2 2006 1986

group2 3 10 10

group3 4 4 4

Related commands

wlan virtual-ap-group

dns domain

Use dns domain to specify a domain name for an AP.

Use undo dns domain to restore the default.

Syntax

dns domain domain-name

undo dns domain

Default

In AP provision view, an AP uses the configuration in AP group provision view. If no configuration exists in AP group provision view, the AP uses the configuration in global provision view.

In AP group provision view, an AP uses the configuration in global provision view.

In global provision view, no domain name is specified for an AP.

Views

AP provision view

AP group provision view

Global provision view

Predefined user roles

network-admin

Parameters

domain-name: Specifies a domain name, a case-insensitive string of 1 to 253 characters separated by dots. The string can contain letters, digits, hyphens (-), and underscores (_).

Usage guidelines

The priorities of configurations in AP provision view, AP group provision view, and global provision view are in descending order.

Examples

# Set the domain name to com in AP provision view of AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] dns domain com

# Set the domain name for APs to com in AP group provision view of AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] provision

[Sysname-wlan-ap-group-group-prvs] dns domain com

# Set the domain name for APs to com in global provision view.

<Sysname> system-view

[Sysname] wlan global-configuration

[Sysname-wlan-global-configuration] provision

[Sysname-wlan-global-configuration-prvs] dns domain com

Related commands

dns server

Use dns server to specify a DNS server for an AP.

Use undo dns server to delete the DNS server configuration.

Syntax

dns server { ip ipv4-address | ipv6 ipv6-address }

undo dns server { ip | ipv6 }

Default

In AP provision view, an AP uses the configuration in AP group provision view. If no configuration exists in AP group provision view, the AP uses the configuration in global provision view.

In AP group provision view, an AP uses the configuration in global provision view.

In global provision view, no DNS server is specified for an AP.

Views

AP provision view

AP group provision view

Global provision view

Predefined user roles

network-admin

Parameters

ip ipv4-address: Specifies a DNS server by its IPv4 address. Make sure you specify a valid IP address. Invalid IP addresses include loopback IP addresses, direct broadcast addresses, Class D IP addresses, Class E IP addresses, IP address 255.255.255.255, and IP addresses in the 0.X.X.X format.

ipv6 ipv6-address: Specifies a DNS server by its IPv6 address. This option is unavailable in global provision view.

Usage guidelines

You can specify only one IPv4 address and one IPv6 address in each view.

The priorities of configurations in AP provision view, AP group provision view, and global provision view are in descending order.

Examples

# Set the DNS server IP address to 192.168.100.123 in AP provision view of AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] dns server ip 192.168.100.123

# Set the DNS server IP address to 192.168.100.123 in AP group provision view of AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] provision

[Sysname-wlan-ap-group-group-prvs] dns server ip 192.168.100.123

# Set the DNS server IP address to 192.168.100.123 in global provision view.

<Sysname> system-view

[Sysname] wlan global-configuration

[Sysname-wlan-global-configuration] provision

[Sysname-wlan-global-configuration-prvs] dns server ip 192.168.100.123

Related commands

dns domain

download file

Use download file to download an image file to an AP.

Syntax

download file filename

Views

AP view

Predefined user roles

network-admin

Parameters

filename: Specifies an image file by its name, a string of 1 to 255 characters.

Usage guidelines

This feature takes effect only on the master AC after a CAPWAP tunnel is established in WLAN high availability networking. For more information about WLAN high availability, see "Configuring WLAN high availability."

In an AC hierarchy, you must upload the image file to the storage media of the associated local AC before executing this command on the central AC.

Examples

# Download image file main.ipe to AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan–ap-ap1] download file main.ipe

echo-count

Use echo-count to set the maximum number of echo request transmission attempts.

Use undo echo-interval to restore the default.

Syntax

echo-count count

undo echo-count

Default

In AP view, an AP uses the configuration in AP group view.

In AP group view, the maximum number of echo request transmission attempts is 3.

Views

AP view

AP group view

Predefined user roles

network-admin

Parameters

count: Specifies the maximum number of echo request transmission attempts in the range of 3 to 255.

Usage guidelines

An AP sends echo requests to the AC at the specified echo intervals to identify whether the CAPWAP control tunnel is operating correctly. The AC responds by sending echo responses. If the AP does not receive any echo responses before the keepalive timer expires, the AP terminates the connection. If the AC does not receive any echo requests before the keepalive timer expires, the AC terminates the connection. The keepalive timer is the echo interval multiplied by the maximum number of echo request transmission attempts.

The configuration in AP view takes precedence over the configuration in AP group view.

Examples

# Set the maximum number of echo request transmission attempts to 5 for AP ap3.

<Sysname> system-view

[Sysname] wlan ap ap3 model WA6320

[Sysname-wlan-ap-ap3] echo-count 5

# Set the maximum number of echo request transmission attempts to 5 for APs in AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] echo-count 5

echo-interval

Use echo-interval to set the interval for an AP to send echo requests to the AC.

Use undo echo-interval to restore the default.

Syntax

echo-interval interval

undo echo-interval

Default

In AP view, an AP uses the configuration in AP group view.

In AP group view, the interval for an AP to send echo requests is 10 seconds.

In virtual AP view, an AP uses the configuration in virtual AP group view.

In virtual AP group view, the interval for an AP to send echo requests is 10 seconds.

Views

AP view

AP group view

Virtual AP view

Virtual AP group view

Predefined user roles

network-admin

Parameters

interval: Specifies the interval for sending echo requests, in seconds. The value range is 0 and 5 to 255.

Usage guidelines

CAUTION:

Setting the echo interval to 0 seconds disables an AP from sending echo requests. This setting is for test use only. For correct AC and AP communication, do not set the echo interval to 0 seconds.

‌

An AP sends echo requests to the AC at the specified echo intervals to identify whether the CAPWAP control tunnel is operating correctly. If the AP does not receive any echo responses from the AC before the keepalive timer expires, the AP terminates the connection. If the AC does not receive any echo requests before the keepalive timer expires, the AC terminates the connection.

The keepalive time is the echo interval multiplied by the maximum number of echo request transmission attempts set by using the echo-count count command. If the calculated value exceeds 120 seconds, the keepalive time is rounded to 120 seconds.

The configuration in AP view takes precedence over the configuration in AP group view.

Examples

# Set the echo interval for AP ap3 to 15 seconds.

<Sysname> system-view

[Sysname] wlan ap ap3 model WA6320

[Sysname-wlan-ap-ap3] echo-interval 15

# Set the echo interval for APs in AP group group1 to 15 seconds.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] echo-interval 15

# Set the echo interval for virtual AP ap3 to 15 seconds.

<Sysname> system-view

[Sysname] wlan virtual-ap ap3 model WA6320

[Sysname-wlan-virtual-ap-ap3] echo-interval 15

# Set the echo interval for virtual APs in virtual AP group group1 to 15 seconds.

<Sysname> system-view

[Sysname] wlan virtual-ap-group group1

[Sysname-wlan-virtual-ap-group-group1] echo-interval 15

ethernet

NOTE:

Support for this command depends on the AP model.

‌

Use ethernet to enter Eth interface view of an AP.

Syntax

ethernet interface-number

Views

AP view

AP group's AP model view

Predefined user roles

network-admin

Parameters

interface-number: Specifies an interface number.

Examples

# Enter Eth1 interface view of AP ap1 with model SIC-AP220.

<Sysname> system-view

[Sysname] wlan ap ap1 model SIC-AP220

[Sysname-wlan-ap-ap1] ethernet 1

[Sysname-wlan-ap-ap1-ethernet-1]

# Enter Eth1 interface view of APs in AP group group1 with model SIC-AP220.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] ap-model SIC-AP220

[Sysname-wlan-ap-group-group1-ap-model-SIC-AP220] ethernet 1

[Sysname-wlan-ap-group-group1-ap-model-SIC-AP220-ethernet-1]

firmware-upgrade

Use firmware-upgrade enable to enable the software upgrade feature.

Use firmware-upgrade disable to disable the software upgrade feature.

Use undo firmware-upgrade to restore the default.

Syntax

firmware-upgrade { disable | enable }

undo firmware-upgrade

Default

In AP view, an AP uses the configuration in AP group view. If no software upgrade configuration exists in AP group view, the AP uses the configuration in global configuration view.

In AP group view, an AP uses the configuration in global configuration view.

In virtual AP view, an AP uses the configuration in virtual AP group view. If no software upgrade configuration exists in virtual AP group view, the AP uses the configuration in global configuration view.

In virtual AP group view, a virtual AP uses the configuration in global configuration view.

In global configuration view, the software upgrade feature is enabled.

Views

AP view

AP group view

Virtual AP view

Virtual AP group view

Global configuration view

Predefined user roles

network-admin

Usage guidelines

This feature enables the AC to examine whether an AP's software version matches the hardware version and software version mappings stored on the AC during CAPWAP tunnel establishment.

· If a match is found, the AC establishes a CAPWAP tunnel with the AP.

· If no match is found, the CAPWAP tunnel establishment proceeds as follows:

a. The AC notifies the AP of software version inconsistency.

b. After receiving the notification, the AP requests the software version from the AC, upgrades the software, and then establishes a CAPWAP tunnel with the AC.

When this feature is disabled, the AC does not examine the software version of an AP and establishes a CAPWAP tunnel with the AP.

The configuration in AP view takes precedence over the configuration in AP group view. The configuration in AP group view takes precedence over the configuration in global configuration view.

The configuration in virtual AP view takes precedence over the configuration in virtual AP group view. The configuration in virtual AP group view takes precedence over the configuration in global configuration view.

Examples

# Enable the software upgrade feature for AP ap3.

<Sysname> system-view

[Sysname] wlan ap ap3 model WA6320

[Sysname-wlan-ap-ap3] firmware-upgrade enable

# Enable the software upgrade feature for APs in AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] firmware-upgrade enable

# Enable the software upgrade feature for virtual AP ap3.

<Sysname> system-view

[Sysname] wlan virtual-ap ap3 model WA6320

[Sysname-wlan-virtual-ap-ap3] firmware-upgrade enable

# Enable the software upgrade feature for virtual APs in AP group group1.

<Sysname> system-view

[Sysname] wlan virtual-ap-group group1

[Sysname-wlan-virtual-ap-group-group1] firmware-upgrade enable

# Enable the software upgrade feature globally.

<Sysname> system-view

[Sysname] wlan global-configuration

[Sysname-wlan-global-configuration] firmware-upgrade enable

Related commands

wlan apdb

fragment-size

Use fragment-size to set the maximum fragment size for CAPWAP control or data packets.

Use undo fragment-size to remove the configuration.

Syntax

fragment-size { control control-size | data data-size }

undo fragment-size { control | data }

Default

In AP view, an AP uses the configuration in AP group view.

In AP group view, the maximum fragment size for CAPWAP control packets and data packets is 1450 bytes and 1500 bytes, respectively.

Views

AP view

AP group view

Predefined user roles

network-admin

Parameters

control control-size: Specifies the maximum fragment size for CAPWAP control packets in bytes. The value range for the control-size argument is 1000 to 1450.

data data-size: Specifies the maximum fragment size for CAPWAP data packets in bytes. The value range for the control-size argument is 1000 to 1748.

Usage guidelines

This command prevents packets between AC and AP from being dropped by intermediate devices if the AP connects to the AC across the Internet.

Any maximum fragment size modification takes effect immediately on online APs.

The configuration in AP view takes precedence over the configuration in AP group view.

Examples

# Set the maximum fragment size for CAPWAP data packets to 1500 bytes for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-ap-ap1] fragment-size data 1500

# Set the maximum fragment size for CAPWAP data packets to 1500 bytes for APs in AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] fragment-size data 1500

gateway

Use gateway to specify a gateway for an AP.

Use undo gateway to delete the gateway configuration.

Syntax

gateway { ip ipv4-address | ipv6 ipv6-address }

undo gateway { ip | ipv6 }

Default

No gateway is specified for an AP.

Views

AP provision view

Predefined user roles

network-admin

Parameters

ip ipv4-address: Specifies a gateway by its IPv4 address. Make sure you specify a valid IP address. Invalid IP addresses include loopback IP addresses, direct broadcast addresses, Class D IP addresses, Class E IP addresses, IP address 255.255.255.255, and IP addresses in the 0.X.X.X format.

ipv6 ipv6-address: Specifies a gateway by its IPv6 address.

Usage guidelines

You can set only one IPv4 address and one IPv6 address.

Examples

# Set the gateway IP address to 192.168.100.1 for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] gateway ip 192.168.100.1

gateway information report

Use gateway information report enable to enable gateway information reporting.

Use gateway information report disable to disable gateway information reporting.

Use undo gateway information report to restore the default.

Syntax

gateway information report { disable | enable }

undo gateway information report

Default

Gateway information reporting is disabled.

Views

Global configuration view

Predefined user roles

network-admin

mdc-admin

Examples

# Enable gateway information reporting.

<Sysname> system-view

[Sysname] wlan global-configuration

[Sysname-wlan-global-configuration] gateway information report enable

gigabitethernet

NOTE:

Support for this command depends on the AP model.

‌

Use gigabitethernet to enter the GigabitEthernet interface view of an AP.

Syntax

gigabitethernet interface-number

Views

AP view

AP group's AP model view

Predefined user roles

network-admin

Parameters

interface-number: Specifies an interface number. The value range varies by AP model.

Examples

# Enter the interface view of GigabitEthernet 1 from AP view.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] gigabitethernet 1

[Sysname-wlan-ap-ap1-gigabitethernet-1]

# Enter the interface view of GigabitEthernet 1 from the AP model view of AP group 1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] ap-model WA6320

[Sysname-wlan-ap-group-group1-ap-model-WA6320] gigabitethernet 1

[Sysname-wlan-ap-group-group1-ap-model-WA6320-gigabitethernet-1]

hybrid-remote-ap

Use hybrid-remote-ap enable to enable remote AP.

Use hybrid-remote-ap disable to disable remote AP.

Use undo hybrid-remote-ap to restore the default.

Syntax

hybrid-remote-ap { disable | enable }

undo hybrid-remote-ap

Default

In AP view, an AP uses the configuration in AP group view.

In AP group view, remote AP is disabled.

Views

AP view

AP group view

Predefined user roles

network-admin

Usage guidelines

By default, an AP stops providing services after the tunnel between the AP and the associated AC is disconnected. This command enables the AP to act as a remote AP to still provide services.

This command takes effect only on an AP that operates in local forwarding mode.

The configuration in AP view takes precedence over the configuration in AP group view.

Examples

# Enable remote AP for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] hybrid-remote-ap enable

# Enable remote AP for APs in AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] hybrid-remote-ap enable

if-match ip

Use if-match ip to create an AP grouping rule by IPv4 addresses.

Use undo if-match ip to delete AP grouping rules by IPv4 addresses.

Syntax

if-match ip ip-address { mask-length | mask }

undo if-match ip [ ip-address { mask-length | mask } ]

Default

No AP grouping rules by IPv4 addresses exist.

Views

AP group view

Virtual AP group view

Predefined user roles

network-admin

Parameters

ip-address: Specifies an IPv4 address in dotted decimal notation.

mask-length: Specifies the mask length in the range of 1 to 31.

mask: Specifies the mask in dotted decimal notation.

Usage guidelines

You cannot execute this command in the view of the default AP group.

AP grouping rules by IPv4 addresses for an AP group or for different AP groups cannot overlap with each other.

An AP group supports a maximum of 32 AP grouping rules by IPv4 addresses.

The priorities of AP grouping rules by AP names, serial IDs, MAC addresses, and IP addresses are in descending order. If an AP does not match any grouping rules, it is added to the default AP group.

You can create AP grouping rules by both IPv4 addresses and IPv6 addresses for an AP group.

If you do not specify any argument in the undo form of the command, the command deletes all AP grouping rules by IPv4 addresses.

Examples

# Add APs whose IP address belongs to 192.168.0.0/16 to AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-ap-group-group1] if-match ip 192.168.0.0 16

# Add virtual APs whose IP address belongs to 192.168.0.0/16 to virtual AP group group1.

<Sysname> system-view

[Sysname] wlan virtual-ap-group group1

[Sysname-wlan-virtual-ap-group-group1] if-match ip 192.168.0.0 16

if-match ipv6

Use if-match ipv6 to create an AP grouping rule by IPv6 addresses.

Use undo if-match ipv6 to delete AP grouping rules by IPv6 addresses.

Syntax

if-match ipv6 { ipv6-address prefix-length | ipv6-address/prefix-length }

undo if-match ip [ ipv6-address prefix-length | ipv6-address/prefix-length ]

Default

No AP grouping rules by IPv6 addresses exist.

Views

AP group view

Virtual AP group view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies an IPv6 address.

prefix-length: Specifies the IPv6 address prefix length in the range of 1 to 128.

Usage guidelines

You cannot execute this command in the view of the default AP group.

AP grouping rules by IPv6 addresses for an AP group or for different AP groups cannot overlap with each other.

An AP group supports a maximum of 32 AP grouping rules by IPv6 addresses.

The priorities of AP grouping rules by AP names, serial IDs, MAC addresses, and IP addresses are in descending order. If an AP does not match any grouping rules, it is added to the default AP group.

You can create AP grouping rules by both IPv4 addresses and IPv6 addresses for an AP group.

If you do not specify any argument in the undo form of the command, the command deletes all AP grouping rules by IPv6 addresses.

Examples

# Add APs whose IPv6 address belongs to 2001:DB0::/28 to AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-ap-group-group1] if-match ipv6 2001:DB8:: 28

# Add virtual APs whose IPv6 address belongs to 2001:DB0::/28 to virtual AP group group1.

<Sysname> system-view

[Sysname] wlan virtual-ap-group group1

[Sysname-wlan-virtual-ap-group-group1] if-match ipv6 2001:DB8:: 28

interface-management

NOTE:

Support for this command depends on the AP model.

‌

Use interface-management bringup to bring up an interface on a fit AP.

Use interface-management shutdown to shut down an interface on a fit AP.

Use undo interface-management to restore the default.

Syntax

interface-management { bringup | shutdown }

undo interface-management

Default

In an AP's Ethernet interface view, the AP uses the configuration in an AP group's Ethernet interface view.

In an AP group's Ethernet interface view, the interface is up.

Views

AP's Eth Ethernet interface view

AP group's Eth Ethernet interface view

AP's GE Ethernet interface view

AP group's GE Ethernet interface view

AP's 2.5GE Ethernet interface view

AP group's 2.5GE Ethernet interface view

AP's XGE Ethernet interface view

AP group's XGE Ethernet interface view

AP's Layer 2 aggregate interface view

AP group's Layer 2 aggregate interface view

Predefined user roles

network-admin

Usage guidelines

This command does not take effect on the uplink interface of a fit AP that connects the AP to the AC.

Do not shut down an interface when it is being removed from an aggregation group.

The interface-management shutdown command does not take effect on member interfaces of an aggregation group.

If remote configuration assignment is enabled, the settings can be deployed to online APs only after the remote-configuration synchronize command is executed. APs that come online after you bring up or shut down the interfaces can obtain the interface configuration automatically.

The configuration in an AP's Ethernet interface view takes precedence over the configuration in an AP group's Ethernet interface view.

Examples

# Shut down GigabitEthernet 1 on AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] gigabitethernet 1

[Sysname-wlan-ap-ap1-gigabitethernet-1] interface-management shutdown

The command does not take effect if the AP port is an uplink port. Continue? [Y/N]:y

# Shut down GigabitEthernet 1 on APs in AP group 1.

<Sysname> system-view

[Sysname] wlan ap-group 1

[Sysname-wlan-ap-group-1] ap-model WA6320

[Sysname-wlan-ap-group-1-ap-model-WA6320] gigabitethernet 1

[Sysname-wlan-ap-group-1-ap-model-WA6320-gigabitethernet-1] interface-management shutdown

The command does not take effect if the AP port is an uplink port. Continue? [Y/N]:y

Related commands

remote-configuration enable

remote-configuration synchronize

ip address

Use ip address to specify an IPv4 address for the management VLAN interface for an AP.

Use undo ip address to restore the default.

Syntax

ip address ip-address { mask | mask-length }

undo ip address

Default

No IPv4 address is specified for the management VLAN interface of an AP.

Views

AP provision view

Predefined user roles

network-admin

Parameters

ip-address: Specifies an IPv4 address in dotted decimal notation.

mask: Specifies the mask in dotted decimal notation.

mask-length: Specifies the mask length in the range of 1 to 31.

Usage guidelines

Make sure you specify a valid IP address. Invalid IP addresses include loopback IP addresses, direct broadcast addresses, Class D IP addresses, Class E IP addresses, IP address 255.255.255.255, and IP addresses in the 0.X.X.X format.

The IP address of the management VLAN interface for an AP must be different from the following IP addresses:

· IP address of the management VLAN interface of another AP.

· AC IP address specified in provision view of any APs.

Examples

# Set the IP address of the management VLAN interface to 10.1.1.1/24 for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] ip address 10.1.1.1 24

ipv6 address

Use ipv6 address to specify an IPv6 address for the management VLAN interface for an AP.

Use undo ipv6 address to restore the default.

Syntax

ipv6 address { ipv6-address prefix-length | ipv6-address/prefix-length }

undo ipv6 address

Default

No IPv6 address is specified for the management VLAN interface of an AP.

Views

AP provision view

Predefined user roles

network-admin

Parameters

ipv6-address: Specifies an IPv6 address.

prefix-length: Specifies the prefix length in the range of 1 to 128.

Usage guidelines

The IP address of the management VLAN interface for an AP must be different from the following IP addresses:

· IP address of the management VLAN interface of another AP.

· AC IP address specified in provision view of any APs.

Examples

# Set the IPv6 address of the management VLAN interface to 2001::1/64 for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] ipv6 address 2001::1/64

keepalive-interval

Use keepalive-interval to set the data tunnel keepalive interval.

Use undo keepalive-interval to restore the default.

Syntax

keepalive-interval interval

undo keepalive-interval

Default

In AP view, an AP uses the configuration in AP group view.

In AP group view, the data tunnel keepalive interval is 10 seconds.

Views

AP view

AP group view

Predefined user roles

network-admin

Parameters

interval: Specifies the interval for an AP to send keepalive packets over the CAPWAP data tunnel. The value range is 1 to 255 seconds.

Examples

# Set the data tunnel keepalive interval for AP ap1 to 15 seconds.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] keepalive-interval 15

# Set the data tunnel keepalive interval for APs in AP group 1 to 15 seconds.

<Sysname> system-view

[Sysname] wlan ap-group 1

[Sysname-ap-group-1] keepalive-interval 15

led-mode

Use led-mode to set a LED lighting mode.

Use undo led-mode to restore the default.

Syntax

led-mode { always-on | awake | normal | quiet }

undo led-mode

Default

In AP view, an AP uses the configuration in AP group view.

In AP group view, the LED lighting mode is normal.

Views

AP view

AP group view

Predefined user roles

network-admin

Parameters

always-on: Specifies the always-on mode, in which the LEDs are steady on. Support for this keyword depends on the AP model.

awake: Specifies the awake mode, in which the LEDs flash once every minute. Support for this keyword depends on the AP model.

normal: Specifies the normal mode. How LEDs flash in this mode varies by AP model.

quiet: Specifies the quiet mode, in which the LEDs are off.

Usage guidelines

If you set the LED lighting mode to awake or always-on in AP group view, the setting takes effect only on member APs that support the specified LED lighting mode.

The configuration in AP view takes precedence over the configuration in AP group view.

Examples

# Set the LED lighting mode to normal for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] led-mode normal

# Set the LED lighting mode to awake for APs in AP group ap1.

<Sysname> system-view

[Sysname] wlan ap-group g1

[Sysname-wlan-ap-group-g1] led-mode awake

mac-address (AP group view/virtual AP group view)

Use mac-address to create an AP grouping rule by MAC addresses.

Use undo mac-address to delete an AP grouping rule by MAC addresses.

Syntax

mac-address mac-address

undo mac-address mac-address

Default

No AP grouping rules by MAC addresses exist.

Views

AP group view

Virtual AP group view

Predefined user roles

network-admin

Parameters

mac-address: Specifies the MAC address of an AP.

Usage guidelines

This command does not identify whether the specified AP exists.

You can configure multiple AP grouping rules by MAC addresses.

The priorities of AP grouping rules by AP names, serial IDs, MAC addresses, and IP addresses are in descending order. If an AP does not match any grouping rules, it is added to the default AP group.

If the created AP grouping rule already exists in another AP group, this command deletes the rule from that AP group.

You cannot execute this command in the view of the default AP group.

The MAC address of a virtual AP is the MAC address of the AP to which the virtual AP belongs.

Examples

# Create an AP grouping rule by MAC addresses for AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] mac-address 0AC1-F9B2-B1C2

# Create a virtual AP grouping rule by MAC addresses for virtual AP group group1.

<Sysname> system-view

[Sysname] wlan virtual-ap-group group1

[Sysname-wlan-virtual-ap-group-group1] mac-address 0AC1-F9B2-B1C2

Related commands

wlan ap-group

wlan virtual-ap-group

mac-address (AP view/virtual AP view)

Use mac-address to assign a MAC address to an AP.

Use undo mac-address to restore the default.

Syntax

mac-address mac-address

undo mac-address

Default

No MAC address is assigned to an AP.

Views

AP view

Virtual AP view

Predefined user roles

network-admin

Parameters

mac-address: Specifies the MAC address in H-H-H format.

Usage guidelines

Changing or deleting the MAC address of an AP terminates the CAPWAP tunnel if the AP has established a CAPWAP tunnel with the AC. Then the AP will reestablish a CAPWAP tunnel with the AC.

The MAC address of a virtual AP is the MAC address of the AP to which the virtual AP belongs.

Examples

# Assign the MAC address 0001-0000-0000 to AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] mac-address 0001-0000-0000

# Assign the MAC address 0001-0000-0000 to virtual AP ap1.

<Sysname> system-view

[Sysname] wlan virtual-ap ap1 model WA6320

[Sysname-wlan-virtual-ap-ap1] mac-address 0001-0000-0000

poe port

NOTE:

Support for this command depends on the AP model.

‌

Use poe port enable to enable PoE for power interfaces (PIs).

Use poe port disable to disable PoE for PIs.

Use undo poe port to restore the default.

Syntax

poe port port-number1 [ to port-number2 ] { disable | enable }

undo poe port port-number1 [ to port-number2 ]

Default

In AP view, an AP uses the configuration in an AP group's AP model view.

In an AP group's AP model view, PoE is disabled for PIs.

Views

AP view

AP group's AP model view

Predefined user roles

network-admin

Parameters

port-number1: Specifies a PI by its port number. The value range varies by AP model.

port-number1 to port-number2: Specifies a port range. The port-number1 argument represents the start port number, and the port-number2 argument represents the end port number. The end port number cannot be smaller than the start port number. The value range for a port number varies by AP model.

Examples

# Disable PoE for PI 3 of AP ap1 with AP model UAP300.

<Sysname> system-view

[Sysname] wlan ap ap1 model UAP300

[Sysname-wlan-ap-ap1] poe port 3 disable

# Disable PoE for PI 3 of all APs with AP model UAP300 in AP group 1.

<Sysname> system-view

[Sysname] wlan ap-group 1

[Sysname-wlan-ap-group-1] ap-model UAP300

[Sysname-wlan-ap-group-1-ap-model-UAP300] poe port 3 disable

port-isolate enable

NOTE:

Support for this command depends on the AP model.

‌

Use port-isolate enable to enable port isolation.

Use port-isolate disable to disable port isolation.

Use undo port-isolate to restore the default.

Syntax

port-isolate { enable | disable }

undo port-isolate

Default

In an AP's Ethernet interface view, the AP uses the configuration in an AP group's Ethernet interface view.

In an AP group's Ethernet interface view, port isolation is enabled.

Views

AP's Eth interface view

AP group's Eth interface view

AP's GigabitEthernet interface view

AP group's GigabitEthernet interface view

AP's 2.5G Ethernet interface view

AP group's 2.5G Ethernet interface view

AP's 10-GE interface view

AP group's 10-GE interface view

AP's Layer 2 aggregate interface view

AP group's Layer 2 aggregate interface view

Predefined user roles

network-admin

Usage guidelines

The configuration in Ethernet interface view applies only to the interface.

The configuration in Layer 2 aggregate interface view applies to the Layer 2 aggregate interface and its aggregation member ports. If the device fails to apply the configuration to the aggregate interface, it does not assign any aggregation member port to the isolation group. If the failure occurs on an aggregation member port, the device skips the port and continues to assign other aggregation member ports to the isolation group.

The configuration will be synchronized to all online APs if remote configuration synchronization is activated.

The configuration in an AP's Ethernet interface view takes precedence over the configuration in an AP group's Ethernet interface view.

Examples

# Enable port isolation for GigabitEthernet 1 of AP ap1.

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] gigabitethernet 1

[Sysname-wlan-ap-ap1-gigabitethernet-1] port-isolate enable

# Enable port isolation for GigabitEthernet 1 of APs in AP group 1.

<Sysname> system-view

[Sysname] wlan ap-group 1

[Sysname-wlan-ap-group-1] ap-model WA6320

[Sysname-wlan-ap-group-1-ap-model-WA6320] gigabitethernet 1

[Sysname-wlan-ap-group-1-ap-model-WA6320-gigabitethernet-1] port-isolate enable

Related commands

remote-configuration

remote-configuration synchronize

port access vlan

NOTE:

Support for this command depends on the AP model.

‌

Use port access vlan to assign an access port on an AP to the specified VLAN.

Use undo port access vlan to restore the default.

Syntax

port access vlan vlan-id

undo port access vlan

Default

In an AP's Ethernet interface view, an access port uses the configuration in an AP group's Ethernet interface view.

In an AP group's Ethernet interface view, all access ports on an AP belong to VLAN 1.

Views

AP's Eth interface view

AP group's Eth interface view

AP's GigabitEthernet interface view

AP group's GigabitEthernet interface view

AP's 2.5G Ethernet interface view

AP group's 2.5G Ethernet interface view

AP's 10-GE interface view

AP group's 10-GE interface view

AP's Layer 2 aggregate interface view

AP group's Layer 2 aggregate interface view

Predefined user roles

network-admin

Parameters

vlan-id: Specifies a VLAN by its ID in the range of 1 to 4094.

Usage guidelines

Before assigning an access port to a VLAN, make sure the VLAN has been created.

For this command to take effect on an AP, make sure the remote configuration assignment feature is enabled.

The configuration in an AP's Ethernet interface view takes precedence over the configuration in an AP group's Ethernet interface view.

Examples

# Assign GigabitEthernet 1 on AP ap1 to VLAN 3.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] gigabitethernet 1

[Sysname-wlan-ap-ap1-gigabitethernet-1] port access vlan 3

# Assign GigabitEthernet 1 on APs in AP group 1 to VLAN 3.

<Sysname> system-view

[Sysname] wlan ap-group 1

[Sysname-wlan-ap-group-1] ap-model WA6320

[Sysname-wlan-ap-group-1-ap-model-WA6320] gigabitethernet 1

[Sysname-wlan-ap-group-1-ap-model-WA6320-gigabitethernet-1] port access vlan 3

Related commands

remote-configuration

port hybrid pvid

NOTE:

Support for this command depends on the AP model.

‌

Use port hybrid pvid to set the PVID of a hybrid port on an AP.

Use undo port hybrid pvid to set the PVID of a hybrid port on an AP to 1.

Syntax

port hybrid pvid vlan vlan-id

undo port hybrid pvid

Default

In an AP's Ethernet interface view, a hybrid port uses the configuration in an AP group's Ethernet interface view.

In an AP group's Ethernet interface view, the PVID of a hybrid port is the ID of the VLAN to which the port belongs when its link type is access.

Views

AP's Eth interface view

AP group's Eth interface view

AP's GigabitEthernet interface view

AP group's GigabitEthernet interface view

AP's 2.5G Ethernet interface view

AP group's 2.5G Ethernet interface view

AP's 10-GE interface view

AP group's 10-GE interface view

AP's Layer 2 aggregate interface view

AP group's Layer 2 aggregate interface view

Predefined user roles

network-admin

Parameters

vlan-id: Specifies a VLAN by its ID in the range of 1 to 4094.

Usage guidelines

You can use a nonexistent VLAN as the PVID of a hybrid port. When you delete the PVID of a hybrid port by using the undo vlan command, the PVID setting of the port does not change.

For correct packet transmission, set the same PVID for a hybrid port on an AP and the hybrid port on the switch connected to the AP.

To enable a hybrid port to transmit packets from its PVID, you must assign the hybrid port to the PVID by using the port hybrid vlan command.

For this command to take effect on an AP, make sure the remote configuration assignment feature is enabled.

The configuration in an AP's Ethernet interface view takes precedence over the configuration in an AP group's Ethernet interface view.

Examples

# Configure GigabitEthernet 1 on AP ap1 as a hybrid port, and set its PVID to VLAN 100.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] gigabitethernet 1

[Sysname-wlan-ap-ap1-gigabitethernet-1] port link-type hybrid

[Sysname-wlan-ap-ap1-gigabitethernet-1] port hybrid pvid vlan 100

# Configure GigabitEthernet 1 on APs in AP group 1 as a hybrid port, and set its PVID to VLAN 100.

<Sysname> system-view

[Sysname] wlan ap-group 1

[Sysname-wlan-ap-group-1] ap-model WA6320

[Sysname-wlan-ap-group-1-ap-model-WA6320] gigabitethernet 1

[Sysname-wlan-ap-group-1-ap-model-WA6320-gigabitethernet-1] port link-type hybrid

[Sysname-wlan-ap-group-1-ap-model-WA6320-gigabitethernet-1] port hybrid pvid vlan 100

Related commands

port hybrid vlan

port link-type

remote-configuration

port hybrid vlan

NOTE:

Support for this command depends on the AP model.

‌

Use port hybrid vlan to assign a hybrid port to the specified VLANs.

Use undo port hybrid vlan to remove a hybrid port from the specified VLANs

Syntax

port hybrid vlan vlan-id-list { tagged | untagged }

undo port hybrid vlan vlan-id-list

Default

In an AP's Ethernet interface view, a hybrid port uses the configuration in an AP group's Ethernet interface view.

In an AP group's Ethernet interface view, a hybrid port is an untagged member of the VLAN to which the port belongs when its link type is access.

Views

AP's Eth interface view

AP group's Eth interface view

AP's GigabitEthernet interface view

AP group's GigabitEthernet interface view

AP's 2.5G Ethernet interface view

AP group's 2.5G Ethernet interface view

AP's 10-GE interface view

AP group's 10-GE interface view

AP's Layer 2 aggregate interface view

AP group's Layer 2 aggregate interface view

Predefined user roles

network-admin

Parameters

vlan-id-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN ID or a range of VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094. The value for the vlan-id2 argument cannot be lower than the value for the vlan-id1 argument. The specified VLANs must already exist on the device.

tagged: Configures the port as a tagged member of the specified VLANs. A tagged member of a VLAN sends packets from the VLAN without removing VLAN tags.

untagged: Configures the port as an untagged member of the specified VLANs. An untagged member of a VLAN sends packets from the VLAN after removing VLAN tags.

Usage guidelines

A hybrid port can allow multiple VLANs. If you execute this command multiple times on a hybrid port, the hybrid port allows all the specified VLANs.

For this command to take effect on an AP, make sure the remote configuration assignment feature is enabled.

The configuration in an AP's Ethernet interface view takes precedence over the configuration in an AP group's Ethernet interface view.

Examples

# Configure GigabitEthernet 1 on AP ap1 as a hybrid port, and assign it to VLAN 2, VLAN 4, and VLAN 50 through VLAN 100 as a tagged member.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] gigabitethernet 1

[Sysname-wlan-ap-ap1-gigabitethernet-1] port link-type hybrid

[Sysname-wlan-ap-ap1-gigabitethernet-1] port hybrid vlan 2 4 50 to 100 tagged

# Configure GigabitEthernet 1 on APs in AP group 1 as a hybrid port, and assign it to VLAN 2, VLAN 4, and VLAN 50 through VLAN 100 as a tagged member.

<Sysname> system-view

[Sysname] wlan ap-group 1

[Sysname-wlan-ap-group-1] ap-model WA6320

[Sysname-wlan-ap-group-1-ap-model-WA6320] gigabitethernet 1

[Sysname-wlan-ap-group-1-ap-model-WA6320-gigabitethernet-1] port link-type hybrid

[Sysname-wlan-ap-group-1-ap-model-WA6320-gigabitethernet-1] port hybrid vlan 2 4 50 to 100 tagged

Related commands

port link-type

remote-configuration

port link-aggregation group

NOTE:

Support for this command depends on the AP model.

‌

Use port link-aggregation group to assign an interface to an aggregation group.

Use undo port link-aggregation group to remove an interface from the aggregation group to which it belongs.

Syntax

port link-aggregation group group-id

undo port link-aggregation

Default

In an AP's Ethernet interface view, the AP uses the configuration in an AP group's Ethernet interface view.

In an AP group's Ethernet interface view, an interface does not belong to an aggregation group.

Views

AP's Eth interface view

AP group's Eth interface view

AP's GigabitEthernet interface view

AP group's GigabitEthernet interface view

AP's 2.5G Ethernet interface view

AP group's 2.5G Ethernet interface view

AP's 10-GE interface view

AP group's 10-GE interface view

Predefined user roles

network-admin

Parameters

group-id: Specifies an aggregation group by its aggregate interface number. The value range for the argument varies by AP model.

Usage guidelines

A Layer 2 Ethernet interface can be assigned only to a Layer 2 aggregation group and an Ethernet interface can belong to only one aggregation group.

After joining an aggregation group, an interface inherits the settings configured for the group.

Before you execute this command, make sure the specified aggregation group already exists and the AP supports Layer 2 aggregate interfaces.

The configuration will be synchronized to all online APs if remote configuration synchronization is activated.

The configuration in an AP's Ethernet interface view takes precedence over the configuration in an AP group's Ethernet interface view.

Examples

# Assign interface GigabitEthernet 1 on AP ap1 to Layer 2 aggregation group 1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] gigabitethernet 1

[Sysname-wlan-ap-ap1-gigabitethernet-1] port link-aggregation group 1

# Assign interface GigabitEthernet 1 on APs in AP group 1 to Layer 2 aggregation group 1.

<Sysname> system-view

[Sysname] wlan ap-group 1

[Sysname-wlan-ap-group-1] ap-model WA6320

[Sysname-wlan-ap-group-1-ap-model-WA6320] gigabitethernet 1

[Sysname-wlan-ap-group-1-ap-model-WA6320-gigabitethernet-1] port link-aggregation group 1

Related commands

remote-configuration

remote-configuration synchronize

port link-type

NOTE:

Support for this command depends on the AP model.

‌

Use port link-type to set the link type of an Ethernet port on an AP.

Use undo port link-type to restore the default.

Syntax

port link-type { access | hybrid | trunk }

undo port link-type

Default

In an AP's Ethernet interface view, an Ethernet port uses the configuration in an AP group's Ethernet interface view.

In an AP group's Ethernet interface view, each Ethernet port is an access port.

Views

AP's Eth interface view

AP group's Eth interface view

AP's GigabitEthernet interface view

AP group's GigabitEthernet interface view

AP's 2.5G Ethernet interface view

AP group's 2.5G Ethernet interface view

AP's 10-GE interface view

AP group's 10-GE interface view

AP's Layer 2 aggregate interface view

AP group's Layer 2 aggregate interface view

Predefined user roles

network-admin

Parameters

access: Sets the port link type to access.

hybrid: Sets the port link type to hybrid.

trunk: Sets the port link type to trunk.

Usage guidelines

To change the link type of an Ethernet port from trunk to hybrid or vice versa, first set the link type to access.

For this command to take effect on an AP, make sure the remote configuration assignment feature is enabled.

The configuration in an AP's Ethernet interface view takes precedence over the configuration in an AP group's Ethernet interface view.

Examples

# Configure GigabitEthernet 1 on AP ap1 as a trunk port.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] gigabitethernet 1

[Sysname-wlan-ap-ap1-gigabitethernet-1] port link-type trunk

# Configure GigabitEthernet 1 on APs in AP group 1 as a trunk port.

<Sysname> system-view

[Sysname] wlan ap-group 1

[Sysname-wlan-ap-group-1] ap-model WA6320

[Sysname-wlan-ap-group-1-ap-model-WA6320] gigabitethernet 1

[Sysname-wlan-ap-group-1-ap-model-WA6320-gigabitethernet-1] port link-type trunk

Related commands

remote-configuration

port trunk permit vlan

NOTE:

Support for this command depends on the AP model.

‌

Use port trunk permit vlan to assign a trunk port to the specified VLANs.

Use undo port trunk permit vlan to remove a trunk port from the specified VLANs.

Syntax

port trunk permit vlan { vlan-id-list | all }

undo port trunk permit vlan { vlan-id-list | all }

Default

In an AP's Ethernet interface view, a trunk port uses the configuration in an AP group's Ethernet interface view.

In an AP group's Ethernet interface view, a trunk port allows packets only from VLAN 1 to pass through.

Views

AP's Eth interface view

AP group's Eth interface view

AP's GigabitEthernet interface view

AP group's GigabitEthernet interface view

AP's 2.5G Ethernet interface view

AP group's 2.5G Ethernet interface view

AP's 10-GE interface view

AP group's 10-GE interface view

AP's Layer 2 aggregate interface view

AP group's Layer 2 aggregate interface view

Predefined user roles

network-admin

Parameters

all: Specifies all VLANs.

Usage guidelines

A trunk port can allow multiple VLANs. If you execute this command multiple times on a trunk port, the trunk port allows all the specified VLANs.

On a trunk port, packets only from the PVID can pass through untagged.

To prevent unauthorized VLAN users from accessing restricted resources through the port, use the port trunk permit vlan all command with caution.

For this command to take effect on an AP, make sure the remote configuration assignment feature is enabled.

The configuration in an AP's Ethernet interface view takes precedence over the configuration in an AP group's Ethernet interface view.

Examples

# Configure GigabitEthernet 1 on AP ap1 as a trunk port, and assign it to VLAN 2, VLAN 4, and VLAN 50 through VLAN 100.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] gigabitethernet 1

[Sysname-wlan-ap-ap1-gigabitethernet-1] port link-type trunk

[Sysname-wlan-ap-ap1-gigabitethernet-1] port trunk permit vlan 2 4 50 to 100

# Configure GigabitEthernet 1 on APs in AP group 1 as a trunk port, and assign it to VLAN 2, VLAN 4, and VLAN 50 through VLAN 100.

<Sysname> system-view

[Sysname] wlan ap-group 1

[Sysname-wlan-ap-group-1] ap-model WA6320

[Sysname-wlan-ap-group-1-ap-model-WA6320] gigabitethernet 1

[Sysname-wlan-ap-group-1-ap-model-WA6320-gigabitethernet-1] port link-type trunk

[Sysname-wlan-ap-group-1-ap-model-WA6320-gigabitethernet-1] port trunk permit vlan 2 4 50 to 100

Related commands

port link-type

remote-configuration

port trunk pvid

NOTE:

Support for this command depends on the AP model.

‌

Use port trunk pvid to set the PVID for a trunk port on an AP.

Use undo port trunk pvid to restore the default.

Syntax

port trunk pvid vlan vlan-id

undo port trunk pvid

Default

In an AP's Ethernet interface view, a trunk port uses the configuration in an AP group's Ethernet interface view.

In an AP group's Ethernet interface view, the PVID of a trunk port is VLAN 1.

Views

AP's Eth interface view

AP group's Eth interface view

AP's GigabitEthernet interface view

AP group's GigabitEthernet interface view

AP's 2.5G Ethernet interface view

AP group's 2.5G Ethernet interface view

AP's 10-GE interface view

AP group's 10-GE interface view

AP's Layer 2 aggregate interface view

AP group's Layer 2 aggregate interface view

Predefined user roles

network-admin

Parameters

vlan-id: Specifies a VLAN by its ID in the range of 1 to 4094.

Usage guidelines

You can use a nonexistent VLAN as the PVID for a trunk port. When you delete the PVID of a trunk port by using the undo vlan command, the PVID setting of the port does not change.

For correct packet transmission, set the same PVID for a hybrid port on an AP and the hybrid port on the switch connected to the AP.

To enable a trunk port to transmit packets from its PVID, you must assign the trunk port to the PVID by using the port trunk permit vlan command.

For this command to take effect on an AP, make sure the remote configuration assignment feature is enabled.

The configuration in an AP's Ethernet interface view takes precedence over the configuration in an AP group's Ethernet interface view.

Examples

# Configure GigabitEthernet 1 on AP ap1 as a trunk port, set its PVID to VLAN 100, and assign it to VLAN 100.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] gigabitethernet 1

[Sysname-wlan-ap-ap1-gigabitethernet-1] port link-type trunk

[Sysname-wlan-ap-ap1-gigabitethernet-1] port trunk pvid vlan 100

[Sysname-wlan-ap-ap1-gigabitethernet-1] port trunk permit vlan 100

# Configure GigabitEthernet 1 on APs in AP group 1 as a trunk port, set its PVID to VLAN 100, and assign it to VLAN 100.

<Sysname> system-view

[Sysname] wlan ap-group 1

[Sysname-wlan-ap-group-1] ap-model WA6320

[Sysname-wlan-ap-group-1-ap-model-WA6320] gigabitethernet 1

[Sysname-wlan-ap-group-1-ap-model-WA6320-gigabitethernet-1] port link-type trunk

[Sysname-wlan-ap-group-1-ap-model-WA6320-gigabitethernet-1] port trunk pvid vlan 100

[Sysname-wlan-ap-group-1-ap-model-WA6320-gigabitethernet-1] port trunk permit vlan 100

Related commands

port link-type

port trunk permit vlan

remote-configuration

power-level default

NOTE:

Support for this command depends on the AP model.

‌

Use power-level default to set the default input power level for an AP in case the AP cannot obtain its input power level.

Use undo power-level default to restore the default.

Syntax

power-level default { high | low | middle }

undo power-level default

Default

In AP view, an AP uses the configuration in an AP group's AP model view.

In an AP group's AP model view, the default input power level of an AP is middle.

Views

AP view

AP group's AP model view

Predefined user roles

network-admin

Parameters

high: Specifies the high default input power level.

low: Specifies the low default input power level.

middle: Specifies the middle default input power level.

Usage guidelines

Configure this command for an AP in case the AP cannot obtain its input power level at startup.

The power level of an AP can be high, middle, or low. An AP automatically performs power supply mode detection to obtain its input power level at startup. If the AP fails to obtain the input power level, it operates at the low input power level before associating with an AC. After the association, it operates at the configured default input power level.

The following table shows the relationship between the AP's power supply mode and input power level:

Power supply mode	Input power level
· Power adapter. · Multiple PoE+ ports. · Combination of PoE and PoE+ ports.	High
· Single PoE+ port · Multiple PoE ports	Middle
Single PoE port	Low

‌

An AP's support for MIMO modes and USB interfaces varies by power level, as shown in Table 35.

Table 35 AP's support for MIMO modes and USB interfaces

Input power level	MIMO modes	Whether USB interfaces can be enabled
High	1×1, 2×2, 3×3, and 4×4.	Yes.
Middle	1×1, 2×2, 3×3, and 4×4.	Yes when the MIMO mode is 1×1 or 2×2.
Low	1×1.	No.

‌

The configuration in AP view takes precedence over the configuration in AP group' AP model view.

Examples

# Set the default input power level to high for AP ap1 in AP view.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] power-level default high

# Set the default input power level to high in AP model view of AP group g1.

<Sysname> system-view

[Sysname] wlan ap-group g1

[Sysname-wlan-ap-group-g1] ap-model WA6320

[Sysname-wlan-ap-group-g1-ap-model-WA6320] power-level default high

priority

Use priority to set the AP connection priority for the AC.

Use undo priority to restore the default.

Syntax

priority priority

undo priority

Default

In AP view, an AP uses the configuration in AP group view.

In AP group view, the AP connection priority for the AC is 4.

Views

AP view

AP group view

Predefined user roles

network-admin

Parameters

priority: Specifies the AP connection priority for the AC, in the range of 0 to 7. A larger value represents a higher connection priority.

Usage guidelines

The AP prefers to establish a CAPWAP tunnel with an AC that has higher connection priority.

The AP connection priority only takes effect during AC discovery.

The configuration in AP view takes precedence over the configuration in AP group view.

Examples

# Set the AP connection priority for the AC to 7 for AP ap3.

<Sysname> system-view

[Sysname] wlan ap ap3 model WA6320

[Sysname-wlan-ap-ap3] priority 7

# Set the AP connection priority for the AC to 7 for AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] priority 7

provision

Use provision to enable AP preprovisioning and enter AP provision view, or enter AP provision view. if AP preprovisioning is already enabled.

Use undo provision to disable AP preprovisioning.

Syntax

provision

undo provision

Default

In AP view, an AP uses the configuration in AP group view. If no configuration exists in AP group view, the AP uses the configuration in global configuration view.

In AP group view, an AP uses the configuration in global configuration view.

In global configuration view, AP preprovisioning is disabled.

Views

AP view

AP group view

Global configuration view

Predefined user roles

network-admin

Usage guidelines

AP preprovisioning allows you to configure network settings for APs on the AC. The AC automatically assigns these settings to the APs.

If you disable AP preprovisioning, network settings configured on the AC will be deleted. However, the operation does not affect the network settings already assigned to the APs.

The priorities of configurations in AP view, AP group view, and global configuration view are in descending order.

Examples

# Enable AP preprovisioning and enter AP provision view of AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs]

# Enable AP preprovisioning and enter AP provision view of AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] provision

[Sysname-wlan-ap-group-group1-prvs]

# Enable AP preprovisioning globally and enter global provision view.

<Sysname> system-view

[Sysname] wlan global-configuration

[Sysname-wlan-global-configuration] provision

[Sysname-wlan-global-configuration-prvs]

provision auto-recovery

Use provision auto-recovery enable to enable auto loading of preprovisioned settings.

Use provision auto-recovery disable to disable auto loading of preprovisioned settings.

Use undo provision auto-recovery to restore the default.

Syntax

provision auto-recovery { disable | enable }

undo provision auto-recovery

Default

In AP view, an AP uses the configuration in AP group view.

In AP group view, auto loading of preprovisioned settings is enabled.

Views

AP view

AP group view

Predefined user roles

network-admin

Usage guidelines

Auto loading of preprovisioned settings ensures successful CAPWAP tunnel establishment between AP and AC. An AP uses the following procedure to discover an AC when you enable this feature:

1. Uses the preprovisioned settings to discover an AC that has the AP's manual or auto AP configuration.

2. Reboots and uses other methods to discover ACs if AC discovery fails.

3. Reboots and uses the preprovisioned settings again to discover ACs if the AP still fails to discover the target AC.

This AC discovery process will be repeated until the AP discovers the target AC to establish a CAPWAP tunnel.

The configuration in AP view takes precedence over the configuration in AP group view.

Examples

# Disable auto loading of preprovisioned settings for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-ap-ap1] provision auto-recovery disable

# Disable auto loading of preprovisioned settings for APs in AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] provision auto-recovery disable

provision auto-update

Use provision auto-update enable to enable auto assignment of preprovisioned settings.

Use provision auto-update disable to disable auto assignment of preprovisioned settings.

Use undo provision auto-update to restore the default.

Syntax

provision auto-update { disable | enable }

undo provision auto-update

Default

In AP view, an AP uses the configuration in AP group view.

In AP group view, auto assignment of preprovisioned settings is disabled.

Views

AP view

AP group view

Predefined user roles

network-admin

Usage guidelines

This command enables the AC to automatically assign preprovisioned settings to an AP so that the AP can use the preprovisioned settings to come online.

This command applies only to offline APs. To deploy preprovisioned settings to online APs, use the save wlan ap provision command.

The configuration in AP provision view has higher priority than the configuration in AP group provision view.

The configuration in AP view takes precedence over the configuration in AP group view.

Examples

# Enable auto assignment of preprovisioned settings for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-ap-ap1] provision auto-update enable

# Enable auto assignment of preprovisioned settings for APs in AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] provision auto-update enable

region-code (AP provision view/AP group provision view)

Use region-code to specify a region code.

Use undo region-code to restore the default.

Syntax

region-code code

undo region-code

Default

In AP provision view, an AP uses the configuration in AP group provision view.

In AP group provision view, no region code is specified.

Views

AP provision view

AP group provision view

Predefined user roles

network-admin

Parameters

code: Specifies a region code. For more information about region codes, see Table 36.

Table 36 Region code information

Country	Code	Country	Code
Andorra	AD	Kenya	KE
United Arab Emirates	AE	Kuwait	KW
Albania	AL	Kazakhstan	KZ
Armenia	AM	Lebanon	LB
Australia	AU	Liechtenstein	LI
Argentina	AR	Sri Lanka	LK
Australia	AT	Lithuania	LT
Azerbaijan	AZ	Luxembourg	LU
Bosnia and Herzegovina	BA	Latvia	LV
Belgium	BE	Libyan	LY
Bulgaria	BG	Morocco	MA
Bahrain	BH	Monaco	MC
Brunei Darussalam	BN	Moldova	MD
Bolivia	BO	Macedonia	MK
Brazil	BR	Macau	MO
Bahamas	BS	Martinique	MQ
Belarus	BY	Malta	MT
Belize	BZ	Mauritius	MU
Canada	CA	Mexico	MX
Switzerland	CH	Malay Archipelago	MY
Cote d'ivoire	CI	Namibia	NA
Chile	CL	Nigeria	NG
China	CN	Nicaragua	NI
Colombia	CO	Netherlands	NL
Costarica	CR	Norway	NO
Serbia	RS	New Zealand	NZ
Cyprus	CY	Oman	OM
Czech Republic	CZ	Panama	PA
Germany	DE	Peru	PE
Denmark	DK	Poland	PL
Dominica	DO	Philippines	PH
Algeria	DZ	Pakistan	PK
Ecuador	EC	Puerto Rico	PR
Estonia	EE	Portugal	PT
Egypt	EG	Paraguay	PY
Spain	ES	Qatar	QA
Faroe Islands	FO	Romania	RO
Finland	FI	Russian Federation	RU
France	FR	Saudi Arabia	SA
Britain	GB	Sweden	SE
Georgia	GE	Singapore	SG
Gibraltar	GI	Slovenia	SI
Greenland	GL	Slovak	SK
Guadeloupe	GP	San Marino	SM
Greece	GR	Salvador	SV
Guatemala	GT	Syrian	SY
Guam	GU	Thailand	TH
Guyana	GY	Tunisia	TN
Honduras	HN	Turkey	TR
Hong Kong	HK	Trinidad and Tobago	TT
Croatia	HR	Taiwan, China	TW
Hungary	HU	Ukraine	UA
Iceland	IS	United States of America	US
India	IN	Uruguay	UY
Indonesia	ID	Uzbekistan	UZ
Ireland	IE	The Vatican City State	VA
Israel	IL	Venezuela	VE
Iraq	IQ	Virgin Islands	VI
Italy	IT	Vietnam	VN
Jamaica	JM	Yemen	YE
Jordan	JO	South Africa	ZA
Japan	JP	Zimbabwe	ZW
Korea, Republic of Korea	KR

‌

Usage guidelines

The region code will take effect after an AP reboots and become invalid after the AP associates with the target AC.

The configuration in AP provision view takes precedence over the configuration in AP group provision view.

Examples

# Specify US as the region code in AP provision view of AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] region-code US

# Specify US as the region code in AP group provision view of AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] provision

[Sysname-wlan-ap-group-group1-prvs] region-code US

region-code (AP view/AP group view)

Use region-code to specify a region code.

Use undo region-code to restore the default.

Syntax

region-code code

undo region-code

Default

In AP view, an AP uses the configuration in AP group view. If no region code is specified in AP group view, the AP uses the configuration in global configuration view.

In AP group view, an AP uses the configuration in global configuration view.

Views

AP view

AP group view

Predefined user roles

network-admin

Parameters

code: Specifies a region code. For more information about region codes, see Table 36.

Usage guidelines

A region code determines characteristics such as available frequencies, available channels, and transmit power level. Set a valid region code before configuring an AP.

The priorities for the configuration in AP view, AP group view, and global configuration view are in descending order.

Examples

# Specify US as the region code for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] region-code US

# Specify US as the region code for AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] region-code US

Related commands

region-code-lock

region-code (global configuration view)

Use region-code to specify a region code.

Syntax

region-code code

Default

The following matrixes show the default settings of this command:

Series

Model

Code

Default region code

WX2500X series

WX2560X

WX2580X

EWP-WX2560X

EWP-WX2580X

WX2500X-E series

WX2508X-E

EWP-WX2508X-E

‌

Series

Model

Code

Default region code

WX2500X-LI series

WX2510X-LI

WX2510X-PWR-LI

WX2520X-LI

WX2540X-LI

WX2550X-LI

WX2560X-LI

WX2580X-LI

EWP-WX2510X-LI

EWP-WX2510X-PWR-LI

EWP-WX2520X-LI

EWP-WX2540X-LI

EWP-WX2550X-LI

EWP-WX2560X-LI

EWP-WX2580X-LI

‌

Series

Model

Code

Default region code

WX2800X series

WX2812X-PWR

WX2860X

WX2880X

EWP-WX2812X-PWR

EWP-WX2860X

EWP-WX2880X

Not configured

WSG1800X series

WSG1808X-PWR

WSG1812X-PWR

WSG1840X

EWP-WSG1808X-PWR

EWP-WSG1808X-PWR-JP

EWP-WSG1812X-PWR

EWP-WSG1840X

EWP-WSG1808X-PWR: Not configured

EWP-WSG1808X-PWR-JP: JP

EWP-WSG1812X-PWR: Not configured

EWP-WSG1840X: Not configured

‌

Views

Global configuration view

Predefined user roles

network-admin

Parameters

code: Specifies a region code. For more information about region codes, see Table 36.

Usage guidelines

A region code determines characteristics such as available frequencies, available channels, and transmit power level. Set a valid region code before configuring an AP.

Examples

# Specify US as the global region code.

<Sysname> system-view

[Sysname] wlan global-configuration

[Sysname-wlan-global-configuration] region-code US

Related commands

region-code-lock

region-code-ie

Use region-code-ie to include or exclude region codes in beacon frames and probe responses and specify the installation environment type.

Use undo region-code-ie to restore the default.

Syntax

region-code-ie { disable | enable { any | indoor | outdoor } }

undo region-code-ie

Default

Beacon frames and probe responses contain region codes and the installation environment type is any.

Views

Service template view

Predefined user roles

network-admin

Parameters

disable: Excludes region codes in beacon frames and probe responses.

enable: Includes region codes in beacon frames and probe responses.

any: Specifies APs that can be installed both indoors and outdoors.

indoor: Specifies APs that can only be installed indoors.

outdoor: Specifies APs that can only be installed outdoors.

Usage guidelines

If you bind different service templates to radios of an AP, make sure the service templates are specified with the same installation environment type.

Examples

# Include region codes in beacon frames and probe responses and specify the type of installation environment as indoor.

<Sysname> system-view

[Sysname] wlan service-template service1

[Sysname-wlan-st-service1] region-code-ie enable indoor

Related commands

region-code

region-code-lock

Use region-code-lock enable to lock the region code.

Use region-code-lock disable to unlock the region code.

Use undo region-code-lock to restore the default.

Syntax

region-code-lock { disable | enable }

undo region-code-lock

Default

In AP view, an AP uses the configuration in AP group view. If no configuration exists in AP group view, the AP uses the configuration in global configuration view.

In AP group view, an AP uses the configuration in global configuration view.

In global configuration view, the region code is not locked.

Views

AP view

AP group view

Global configuration view

Predefined user roles

network-admin

Parameters

A locked region code cannot be changed.

The region-code-lock enable command does not take effect on an AP if you execute this command without specifying a region code first in AP view. The AP's region code is determined by the region code configuration for the AP group to which the AP belongs, or by the global configuration. The same rule applies to an AP group in the same situation.

The priorities for the configuration in AP view, AP group view, and global configuration view are in descending order.

Examples

# Lock the region code for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] region-code-lock enable

# Lock the region code for AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] region-code-lock enable

# Lock the global region code.

<Sysname> system-view

[Sysname] wlan global-configuration

[Sysname-wlan-global-configuration] region-code-lock enable

Related commands

region-code

remote-configuration

NOTE:

Support for this command depends on the AP model.

‌

Use remote-configuration enable to enable the remote configuration assignment feature.

Use remote-configuration disable to disable the remote configuration assignment feature.

Use undo remote-configuration to restore the default.

Syntax

remote-configuration { disable | enable }

undo remote-configuration enable

Default

In AP view, an AP uses the configuration in AP group view.

In AP group view, remote configuration assignment is disabled.

Views

AP view

AP group view

Predefined user roles

network-admin

Usage guidelines

The AC will assign related VLAN settings to APs only when the remote configuration assignment feature is enabled.

The configuration in AP view takes precedence over the configuration in AP group view.

Examples

# Enable the remote configuration assignment feature for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] remote-configuration enable

# Enable the remote configuration assignment feature for AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] remote-configuration enable

remote-configuration synchronize

NOTE:

Support for this command depends on the AP model.

‌

Use remote-configuration synchronize to activate remote configuration synchronization.

Syntax

remote-configuration synchronize

Default

In AP view, an AP uses the configuration in AP group view.

In AP group view, remote configuration synchronization is not activated.

Views

AP view

AP group view

Predefined user roles

network-admin

Usage guidelines

CAUTION:

This command clears all VLAN, link aggregation, and port settings (except for port isolation settings) on online APs and issues the settings on the AC to the APs. Please use it with caution.

‌

To update APs' configuration file or configure features that require a configuration file, you can use the map-configuration command to deploy a configuration file to APs. However, you must write related commands to the configuration file before deployment. This is time-consuming and is not applicable to a network with a large number of APs to deploy.

This feature enables the AC to directly synchronize AP settings such as VLAN, link aggregation, and port isolation changes to online APs.

Make sure remote configuration assignment is enabled before you execute this command.

As a best practice, do not execute both this command and the map-configuration command on the AC. If you must use both of them on the AC, make sure the VLAN, link aggregation, and port isolation settings in the configuration file to be deployed do not conflict with the settings on the AC.

The configuration in AP view takes precedence over the configuration in AP group view.

Examples

# Activate remote configuration synchronization for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320N

[Sysname-wlan-ap-ap1] remote-configuration synchronize

# Activate remote configuration synchronization for APs in AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] remote-configuration synchronize

Related commands

remote-configuration

report-interval

Use report-interval to set the interval at which APs in an AP monitor group report statistics to the AC.

Use undo report-interval to restore the default.

Syntax

report-interval interval

undo report-interval

Default

APs in an AP monitor group report statistics to the AC at intervals of 50 seconds.

Views

Monitor group view

Predefined user roles

network-admin

Parameters

interval: Specifies the interval at which APs in an AP monitor group report statistics to the AC, in the range of 10 to 120 seconds.

Examples

# Set the interval to 30 seconds for APs in an AP monitor group to report statistics to the AC.

<Sysname> system-view

[Sysname] wlan vip-ap-group

[Sysname-wlan-vip-ap-group] report-interval 30

Related commands

ap-name

wlan vip-ap-group

reset wlan ap

Use reset wlan ap to reset all APs or the specified APs.

Syntax

reset wlan ap { all | ap-group group-name | model model-name | name ap-name | native }

Views

User view

Predefined user roles

network-admin

Parameters

all: Specifies all APs connected to the AC.

ap-group group-name: Specifies an AP group by its name, a case-sensitive string of 1 to 31 characters.

model model-name: Specifies an AP model by model name.

native: Specifies all APs that have established CAPWAP tunnels with the AC.

Usage guidelines

This command terminates the CAPWAP tunnel between an AP and the AC and restarts the AP.

This command terminates the CAPWAP tunnel between a virtual AP and the AC but does not restart the virtual AP.

Examples

# Reset the AP ap1.

<Sysname> reset wlan ap name ap1

Resetting the APs will terminate the CAPWAP tunnels with the AC. Continue? [Y/N]:

reset wlan ap connection-record

Use reset wlan ap connection-record to clear AP connection records on the AC.

Syntax

reset wlan ap { all | name ap-name } connection-record

Views

User view

Predefined user roles

network-admin

Parameters

all: Specifies all APs.

Examples

# Clear all the AP connection records on the AC.

<Sysname> reset wlan ap all connection-record

reset wlan ap provision

Use reset wlan ap provision to delete configuration file wlan_ap_prvs.xml from all APs or the specified AP.

Syntax

reset wlan ap provision { all | name ap-name }

Views

Any view

Predefined user roles

network-admin

Parameters

all: Specifies all APs.

Usage guidelines

This command takes effect only on APs that have established CAPWAP tunnels with the master AC and are in Run state.

For this command to take effect on an AP, restart the AP.

Examples

# Delete configuration file wlan_ap_prvs.xml from AP ap1.

<Sysname> reset wlan ap provision name ap1

reset wlan ap reboot-log

Use reset wlan ap reboot-log to clear the reboot logs of all APs or the specified AP.

Syntax

reset wlan ap reboot-log { all | name ap-name }

Views

User view

Predefined user roles

network-admin

Parameters

all: Specifies all APs.

Examples

# Clear the reboot logs of AP ap1.

<Sysname> reset wlan ap reboot-log name ap1

Related commands

display wlan ap reboot-log

reset wlan ap statistics association-failure-record

Use reset wlan ap statistics association-failure-record to clear reason statistics for AP association failures.

Syntax

reset wlan ap statistics association-failure-record

Views

Any view

Predefined user roles

network-admin

Examples

# Clear reason statistics for AP association failures.

<Sysname> reset wlan ap statistics association-failure-record

reset wlan ap statistics image-download

Use reset wlan ap statistics image-download to clear AP image downloading statistics.

Syntax

reset wlan ap statistics image-download { all | failed | in-progress | succeeded }

Views

Any view

Predefined user roles

network-admin

Parameters

all: Specifies failed, in-progress, and successful image downloads.

failed: Specifies failed image downloads.

in-progress: Specifies in-progress image downloads.

succeeded: Specifies successful image downloads.

Examples

# Clear statistics about failed image downloadings, in-progress image downloadings, and successful image image downloadings

<Sysname> reset wlan ap statistics image-download all

reset wlan ap statistics online-record

Use reset wlan ap statistics online-record to clear AP online quantity statistics.

Syntax

reset wlan ap statistics online-record

Views

Any view

Predefined user roles

network-admin

Examples

# Clear AP online quantity statistics.

<Sysname> reset wlan ap statistics online-record

reset wlan ap statistics tunnel-down-record

Use reset wlan ap statistics tunnel-down-record to clear the reason statistics for CAPWAP tunnel down events.

Syntax

reset wlan ap statistics tunnel-down-record

Views

Any view

Predefined user roles

network-admin

Examples

# Clear the reason statistics for CAPWAP tunnel down events.

<Sysname> reset wlan ap statistics tunnel-down-record

reset wlan ap unauthenticated

Use reset wlan ap unauthenticated to restart unauthenticated auto APs for re-authentication.

Syntax

reset wlan ap unauthenticated

Views

User view

Predefined user roles

network-admin

Examples

# Restart unauthenticated auto APs.

<Sysname> reset wlan ap unauthenticated

reset wlan tunnel latency ap

Use reset wlan tunnel latency ap to clear tunnel latency information for all APs or the specified AP.

Syntax

reset wlan tunnel latency ap { all | name ap-name }

Views

User view

Predefined user roles

network-admin

Parameters

all: Specifies all APs.

Usage guidelines

This command takes effect only on APs that have established tunnels with the master AC and are in Run state.

Examples

# Clear tunnel latency information for AP ap1.

<Sysname> reset wlan tunnel latency ap name ap1

Related commands

display wlan ap tunnel latency

tunnel latency-detect

retransmit-count

Use retransmit-count to set the maximum number of AC request retransmission attempts.

Use undo retransmit-count to restore the default.

Syntax

retransmit-count value

undo retransmit-count

Default

In AP view, an AP uses the configuration in AP group view.

In AP group view, the maximum number of AC request retransmission attempts is 3.

Views

AP view

AP group view

Predefined user roles

network-admin

Parameters

value: Specifies the maximum number of AC request retransmission attempts, in the range of 2 to 5.

Usage guidelines

The AC sends a request to an AP at the retransmission interval until the maximum number of request retransmission attempts is reached or a response is received.

Requests sent by the AC to an AP include the following types:

· Image Data Request.

· Configuration Update Request.

· Reset Request.

· Data Transfer Request.

· IEEE 802.11 WLAN Configuration Request.

· Station Configuration Request.

The configuration in AP view takes precedence over the configuration in AP group view.

Examples

# Set the maximum number of AC request retransmission attempts to 4 for AP ap3.

<Sysname> system-view

[Sysname] wlan ap ap3 model WA6320

[Sysname-wlan-ap-ap3] retransmit-count 4

# Set the maximum number of AC request retransmission attempts to 4 for APs in AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] retransmit-count 4

Related commands

retransmit-interval

Use retransmit-interval to set the request retransmission interval for the AC to retransmit requests to an AP.

Use undo retransmit-interval to restore the default.

Syntax

retransmit-interval interval

undo retransmit-interval

Default

In AP view, an AP uses the configuration in AP group view.

In AP group view, the request retransmission interval is 5 seconds.

Views

AP view

AP group view

Predefined user roles

network-admin

Parameters

interval: Specifies the request retransmission interval in the range of 3 to 8 seconds.

Usage guidelines

The AC sends a request to an AP at the retransmission interval until the maximum number of request retransmission attempts is reached or a response is received.

Requests sent by the AC to an AP include the following types:

· Image Data Request.

· Configuration Update Request.

· Reset Request.

· Data Transfer Request.

· IEEE 802.11 WLAN Configuration Request.

· Station Configuration Request.

The configuration in AP view takes precedence over the configuration in AP group view.

Examples

# Set the request retransmission interval to 6 seconds for the AC to send requests to AP ap3.

<Sysname> system-view

[Sysname] wlan ap ap3 model WA6320

[Sysname-wlan-ap-ap3] retransmit-interval 6

# Set the request retransmission interval to 6 seconds for the AC to send requests to APs in AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] retransmit-interval 6

Related commands

retransmit-count

save wlan ap provision

Use save wlan ap provision to deploy the provision configuration to all APs or the specified AP.

Syntax

save wlan ap provision { all | name ap-name }

Views

Any view

Predefined user roles

network-admin

Parameters

all: Specifies all APs.

Usage guidelines

This command saves the added or modified preprovisioned settings to the wlan_ap_prvs.xml configuration file.

This command takes effect only on online APs that have established tunnels with the master AC.

This command has the same effect as the reset wlan ap provision command if no AP preprovisioned settings exist.

Preprovisioned settings configured in provision view take effect immediately when you execute the save wlan ap provision command.

Cancellations of preprovisioned settings in provision view do not take effect when you execute the save wlan ap provision command. For the cancellations to take effect on an AP, restart the AP.

Examples

# Save the configuration in AP provision view to configuration file wlan_ap_prvs.xml on AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] provision

[Sysname-wlan-ap-ap1-prvs] ac ip 192.168.0.1

[Sysname-wlan-ap-ap1-prvs] save wlan ap provision name ap1

serial-id (AP group view/virtual AP group view)

Use serial-id to create an AP grouping rule by serial IDs.

Use undo serial-id to delete an AP grouping rule by serial IDs.

Syntax

serial-id serial-id

undo serial-id serial-id

Default

No AP grouping rules by serial IDs exist.

Views

AP group view

Virtual AP group view

Predefined user roles

network-admin

Parameters

serial-id: Specifies an AP serial ID, a case-insensitive string of 1 to 63 characters.

Usage guidelines

This command does not identify whether the specified AP exists.

You can configure multiple AP grouping rules by serial IDs.

The priorities of AP grouping rules by AP names, serial IDs, MAC addresses, and IP addresses are in descending order. If an AP does not match any grouping rules, it is added to the default AP group.

If the created AP grouping rule already exists in another AP group, this command deletes the rule from that AP group.

You cannot execute this command in the view of the default AP group.

The serial ID for a virtual AP is the serial ID of the AP to which the virtual AP belongs.

Examples

# Create an AP grouping rule by serial IDs for AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] serial-id 210235A1BSC123000037

# Create an AP grouping rule by serial IDs for virtual AP group group1.

<Sysname> system-view

[Sysname] wlan virtual-ap-group group1

[Sysname-wlan-virtual-ap-group-group1] serial-id 210235A1BSC123000037

Related commands

wlan ap-group

wlan virtual-ap-group

serial-id (AP view/virtual AP view)

Use serial-id to specify the serial ID for an AP.

Use undo serial-id to restore the default.

Syntax

serial-id serial-id

undo serial-id

Default

No serial ID is specified for an AP.

Views

AP view

Virtual AP view

Predefined user roles

network-admin

Parameters

serial-id: Specifies the serial ID for an AP, a case-insensitive string of 1 to 63 characters.

Usage guidelines

Changing or deleting the serial ID of an AP terminates the CAPWAP tunnel if the AP has established a CAPWAP tunnel with an AC. Then the AP will reestablish a CAPWAP tunnel with the AC.

The serial ID for a virtual AP is the serial ID of the AP to which the virtual AP belongs.

Examples

# Set the serial ID of AP ap1 to 219801A28N819CE0002T.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-ap-ap1] serial-id 219801A28N819CE0002T

# Set the serial ID of virtual AP ap1 to 210235A1BSC123000050.

<Sysname> system-view

[Sysname] wlan virtual-ap ap1 model WA6320

[Sysname-wlan-virtual-ap-ap1] serial-id 210235A1BSC123000050

snmp-agent trap enable wlan ap

Use snmp-agent trap enable wlan ap to enable SNMP notifications for AP management.

Use undo snmp-agent trap enable wlan ap to disable SNMP notifications for AP management.

Syntax

snmp-agent trap enable wlan ap

undo snmp-agent trap enable wlan ap

Default

SNMP notifications are disabled for AP management.

Views

System view

Predefined user roles

network-admin

Usage guidelines

To report critical AP management events to an NMS, enable SNMP notifications for AP management. For AP management event notifications to be sent correctly, you must also configure SNMP on the device. For more information about SNMP configuration, see Network Management and Monitoring Configuration Guide.

Examples

# Enable SNMP notifications for AP management.

<Sysname> system-view

[Sysname] snmp-agent trap enable wlan ap

snmp-agent trap enable wlan capwap

Use snmp-agent trap enable wlan capwap to enable SNMP notifications for CAPWAP.

Use undo snmp-agent trap enable wlan capwap to disable SNMP notifications for CAPWAP.

Syntax

snmp-agent trap enable wlan capwap

undo snmp-agent trap enable wlan capwap

Default

SNMP notifications are disabled for CAPWAP.

Views

System view

Predefined user roles

network-admin

Usage guidelines

To report critical CAPWAP events to an NMS, enable SNMP notifications for CAPWAP. For CAPWAP event notifications to be sent correctly, you must also configure SNMP on the device. For more information about SNMP configuration, see Network Management and Monitoring Configuration Guide.

Examples

# Enable SNMP notifications for CAPWAP.

<Sysname> system-view

[Sysname] snmp-agent trap enable wlan capwap

statistics-interval

Use statistics-interval to set the statistics report interval for an AP to send statistics reports to the AC.

Use undo statistics-interval to restore the default.

Syntax

statistics-interval interval

undo statistics-interval

Default

In AP view, an AP uses the configuration in AP group view. If no configuration exists in AP group view, the AP uses the configuration in global configuration view.

In AP group view, an AP uses the configuration in global configuration view.

In virtual AP view, an AP uses the configuration in virtual AP group view. If no configuration exists in virtual AP group view, the AP uses the configuration in global configuration view.

In virtual AP group view, an AP uses the configuration in global configuration view.

In global configuration view, the statistics report interval is 50 seconds.

Views

AP view

AP group view

Virtual AP view

Virtual AP group view

Global configuration view

Predefined user roles

network-admin

Parameters

interval: Specifies the statistics report interval in the range of 0 to 240 seconds.

Usage guidelines

Execute this command to change the interval for an AP to report its statistics. You can use these statistics to monitor the operating status of radios on the AP.

To disable an AP from reporting radio statistics to the AC, set the statistics report interval to 0.

The priorities of configurations in AP view, AP group view, and global configuration view are in descending order.

The priorities of configurations in virtual AP view, virtual AP group view, and global configuration view are in descending order.

Examples

# Set the statistics reports interval to 10 seconds for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] statistics-interval 10

# Set the statistics reports interval to 10 seconds for APs in AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] statistics-interval 10

# Set the statistics reports interval to 10 seconds for virtual AP ap1.

<Sysname> system-view

[Sysname] wlan virtual-ap ap1 model WA6320

[Sysname-wlan-virtual-ap-ap1] statistics-interval 10

# Set the statistics reports interval to 10 seconds for virtual APs in virtual AP group group1.

<Sysname> system-view

[Sysname] wlan virtual-ap-group group1

[Sysname-wlan-virtual-ap-group-group1] statistics-interval 10

# Set the statistics reports interval to 10 seconds globally.

<Sysname> system-view

[Sysname] wlan global-configuration

[Sysname-wlan-global-configuration] statistics-interval 10

statistics-interval fast-report

Use statistics-interval fast-report to set the interval at which an AP fast reports specific statistics to the AC.

Use undo statistics-interval fast-report to restore the default.

Syntax

statistics-interval fast-report fast-report-interval

undo statistics-interval fast-report

Default

In AP view, an AP uses the configuration in AP group view.

In AP group view, the fast report interval is 0 seconds. An AP does not fast report statistics to the AC.

In virutal AP view, an AP uses the configuration in virutal AP group view.

In virutal AP group view, the fast report interval is 0 seconds. An AP does not fast report statistics to the AC.

Views

AP view

AP group view

Virtual AP view

Virtual AP group view

Predefined user roles

network-admin

Parameters

fast-report-interval: Specifies the fast report interval in the range of 0 to 120 seconds.

Usage guidelines

Setting the interval to 0 disables an AP from fast reporting statistics to the AC.

APs can fast report only channel usage statistics to the AC.

Examples

# Set the fast report interval to 10 seconds for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] statistics-interval fast-report 10

# Set the fast report interval to 10 seconds for APs in AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] statistics-interval fast-report 10

# Set the fast report interval to 10 seconds for virtual AP ap1.

<Sysname> system-view

[Sysname] wlan virtual-ap ap1 model WA6320

[Sysname-wlan-virtual-ap-ap1] statistics-interval fast-report 10

# Set the fast report interval to 10 seconds for virtual APs in virtual AP group group1.

<Sysname> system-view

[Sysname] wlan virtual-ap-group group1

[Sysname-wlan-virtual-ap-group-group1] statistics-interval fast-report 10

Related commands

statistics-interval

ten-gigabitethernet

NOTE:

Support for this command depends on the AP model.

‌

Use ten-gigabitethernet to enter 10-GE interface view of an AP.

Syntax

ten-gigabitethernet interface-number

Views

AP view

AP group's AP model view

Predefined user roles

network-admin

Parameters

interface-number: Specifies an interface number.

Examples

# Enter 10-GE 1 interface view of AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6628

[Sysname-wlan-ap-ap1] ten-gigabitethernet 1

[Sysname-wlan-ap-ap1-ten-gigabitethernet-1]

# Enter 10-GE 1 interface view of APs in AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] ap-model WA6628

[Sysname-wlan-ap-group-group1-ap-model-WA6628] ten-gigabitethernet 1

[Sysname-wlan-ap-group-group1-ap-model-WA6628-ten-gigabitethernet-1]

tunnel encryption

Use tunnel encryption enable to enable CAPWAP control tunnel encryption.

Use tunnel encryption disable to disable CAPWAP control tunnel encryption.

Use undo tunnel encryption enable to restore the default.

Syntax

tunnel encryption { disable | enable }

undo tunnel encryption enable

Default

In AP view, an AP uses the configuration in AP group view.

In AP group view, CAPWAP control tunnel encryption is disabled.

In virtual AP view, an AP uses the configuration in virtual AP group view.

In virtual AP group view, CAPWAP control tunnel encryption is disabled.

Views

AP view

AP group view

Virtual AP view

Virtual AP group view

Predefined user roles

network-admin

Usage guidelines

This feature will cause an AP to reassociate with the AC.

With this feature enabled, an AP performs a DTLS handshake and establishes a CAPWAP tunnel with the AC after receiving a discovery response with the encryption flag from the AC. Then, the AC and the AP encrypt control packets transmitted in the CAPWAP control tunnel after the DTLS handshake.

The configuration in AP view takes precedence over the configuration in AP group view.

The configuration in virtual AP view takes precedence over the configuration in virtual AP group view.

Examples

# Enable CAPWAP control tunnel encryption for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] tunnel encryption enable

This operation will reconnect the AP. Continue? [Y/N]

# Enable CAPWAP control tunnel encryption for APs in AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] tunnel encryption enable

This operation will reconnect member APs that are not enabled with CAPWAP control tunnel encryption. Continue? [Y/N]

# Enable CAPWAP control tunnel encryption for virtual AP ap1.

<Sysname> system-view

[Sysname] wlan virtual-ap ap1 model WA6320

[Sysname-wlan-virtual-ap-ap1] tunnel encryption enable

This operation will reconnect the AP. Continue? [Y/N]

# Enable CAPWAP control tunnel encryption for virtual APs in virtual AP group group1.

<Sysname> system-view

[Sysname] wlan virtual-ap-group group1

[Sysname-wlan-virtual-ap-group-group1] tunnel encryption enable

This operation will reconnect member APs that are not enabled with CAPWAP control tunnel encryption. Continue? [Y/N]

tunnel latency-detect

Use tunnel latency-detect to configure CAPWAP tunnel latency detection.

Syntax

tunnel latency-detect { start | stop }

Default

CAPWAP tunnel latency detection is not started.

Views

AP view

Predefined user roles

network-admin

Parameters

start: Starts CAPWAP tunnel latency detection.

stop: Stops CAPWAP tunnel latency detection.

Usage guidelines

CAPWAP tunnel latency detection enables the AC to detect the transmission latency of CAPWAP control frames or data frames from an AP to the AC and back.

When an AP goes offline, CAPWAP tunnel latency detection automatically stops. To restart CAPWAP tunnel latency detection when the AP comes online again, execute the tunnel latency-detect start command again.

The tunnel latency-detect start command takes effect only on APs that have established CAPWAP tunnels with the master AC and are in Run state.

Inside APs do not support this command.

Examples

# Start CAPWAP tunnel latency detection for AP ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] tunnel latency-detect start

Related commands

display wlan ap tunnel latency

reset wlan tunnel latency ap

usb

NOTE:

Support for this command depends on the AP model.

‌

Use usb enable to enable USB interfaces on APs.

Use usb disable to disable USB interfaces on APs.

Use undo usb to restore the default.

Syntax

usb { disable | enable }

undo usb

Default

In AP view, an AP uses the configuration in an AP group's AP model view.

In an AP group's AP model view, USB interfaces are disabled.

Views

AP view

AP group's AP model view

Predefined user roles

network-admin

Usage guidelines

This command takes effect on an AP only when either of the following requirements is met:

· The power level of the AP is high.

· The power level of the AP is middle and the MIMO mode is 1×1 or 2×2.

For information about power levels, see "power-level default." For information about MIMO modes, see radio management in Radio Resources Management Configuration Guide.

The configuration in AP view takes precedence over the configuration in AP group' AP model view.

Examples

# Enable USB interfaces in AP view.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1] usb enable

# Enable USB interfaces in AP model view of AP group g1.

<Sysname> system-view

[Sysname] wlan ap-group g1

[Sysname-wlan-ap-group-g1] ap-model WA6320

[Sysname-wlan-ap-group-g1-ap-model-WA6320] usb enable

Related commands

power-level default

virtual-ap

Use virtual-ap to create a virtual AP and specify the IP address of the AC to which the virtual AP connects.

Use undo virtual-ap to delete a virtual AP.

Syntax

virtual-ap ac-address { ip ipv4-address | ipv6 ipv6-address } [ management-vlan vlan ]

undo virtual-ap

Default

No virtual APs exist.

Views

AP view

AP group view

Predefined user roles

network-admin

Parameters

ipv4 ipv4-address: Specifies the IPv4 address of the AC to which the virtual AP connects.

ipv6 ipv6-address : Specifies the IPv6 address of the AC to which the virtual AP connects.

management-vlan vlan: Specifies a management VLAN for the virtual AP. If you do not specify this option, the virtual AP uses the same management VLAN as its physical AP.

Usage guidelines

Configure this command on the AC that connects to a physical AP.

Make sure the virtual AP feature has been enabled on the AC before you execute this command.

The IP address of the AC to which the virtual AP connects must be different from the IP address of the AC associated with a physical AP, but their IP version must be the same.

For security purposes, you can specify a management VLAN for a virtual AP different from its physical AP. If you do not specify a management VLAN for a virtual AP, you must enable port isolation for an Ethernet interface on that AP.

Before you can specify a management VLAN for a virtual AP, you must assign an Ethernet interface on that AP to the management VLAN and make sure the management VLAN-interface obtains an IP address through DHCP.

Examples

# Create a virtual AP for AP ap1, and specify the IP address of the AC to which the virtual AP connects as 1.1.1.1.

<Sysname> system-view

[Sysname] wlan ap ap1

[Sysname-wlan-ap-ap1] virtual-ap ac-address ip 1.1.1.1

Related commands

· port access vlan

· vlan

· wlan virtual-ap enable

wlan ap

Use wlan ap to create a manual AP and enter its view, or enter the view of an existing manual AP.

Use undo wlan ap to delete an AP.

Syntax

wlan ap ap-name [ model model-name ]

undo wlan ap ap-name

Default

No manual APs exist.

Views

System view

Predefined user roles

network-admin

Parameters

model model-name: Specifies the model name of the AP. You must specify the model name when you create an AP.

Usage guidelines

If the specified AP has established a CAPWAP tunnel, the undo wlan ap command also terminates the tunnel.

Examples

# Create an AP named ap1.

<Sysname> system-view

[Sysname] wlan ap ap1 model WA6320

[Sysname-wlan-ap-ap1]

wlan ap-authentication

Use wlan ap-authentication to manually authenticate unauthenticated auto APs.

Syntax

wlan ap-authentication { accept | reject } ap-unauthenticated { all | name ap-name }

Default

Manual authentication is not configured for unauthenticated auto APs.

Views

System view

Predefined user roles

network-admin

Parameters

accept: Enables unauthenticated auto APs to pass authentication and generate ACL permit rules. Authenticated auto APs can provide wireless services.

reject: Rejects unauthenticated auto APs and generates ACL deny rules. If you specify this keyword, the command logs off all online unauthenticated auto APs.

all: Specifies all unauthenticated auto APs.

name ap-name: Specifies an unauthenticated auto AP by its name, a case-sensitive string of 1 to 64 characters.

Usage guidelines

Unauthenticated auto APs can associate with the AC but cannot provide wireless services. You can execute this command to authenticate these APs.

Before you execute this command, perform the following tasks:

· Use the acl wlan ap command to create a WLAN AP ACL.

· Use the wlan ap-authentication acl command to specify the ACL as the ACL for authenticating unauthenticated auto APs.

The generated ACL rules will be added to the specified ACL.

Examples

# Enable unauthenticated auto APs to pass authentication and generate permit rules in ACL 200.

<Sysname> system-view

[Sysname] acl wlan ap 200

[Sysname-acl-ap-200] quit

[Sysname] wlan ap-authentication acl 200

[Sysname] wlan ap-authentication accept ap-unauthenticated all

Related commands

acl wlan ap

permit-unauthenticated

wlan ap-authentication

wlan ap-authentication acl

Use wlan ap-authentication acl to specify an ACL for authenticating auto APs.

Use undo wlan ap-authentication acl to restore the default.

Syntax

wlan ap-authentication acl { acl-number | name acl-name }

undo wlan ap-authentication acl

Default

No ACL is specified for authenticating auto APs.

Views

System view

Predefined user roles

network-admin

Parameters

acl-number: Specifies a WLAN AP ACL by its number, in the range of 200 to 299.

name acl-name: Specifies a WLAN AP ACL by its name, a case-insensitive string of 1 to 63 characters. The string must start with a letter and cannot be all.

Usage guidelines

Before you execute this command, use the acl wlan ap command to create a WLAN AP ACL and configure ACL rules. You can use either of the following methods to configure ACL rules:

· Use the ap-authentication import command.

· Use the rule command. If this method is used, make sure the match criterion used in the rule is consistent with the auto AP authentication method. To configure an auto AP authentication method, use the wlan ap-authentication method command.

Unauthenticated auto APs that match ACL permit rules are allowed to associate with the AC. Unauthenticated auto APs that match ACL deny rules or do not match any ACL rules are rejected to associate with the AC.

If you do not configure any ACL rules, all auto APs will become unauthenticated.

If you execute this command multiple times, the most recent configuration takes effect.

Examples

# Specify ACL 200 for authenticating auto APs by serial ID.

<Sysname> system-view

[Sysname] acl wlan ap 200

[Sysname-acl-ap-200] rule 0 permit serial-id 219801A28N819CE0002T

[Sysname-acl-ap-200] quit

[Sysname] wlan ap-authentication acl 200

Related commands

acl wlan ap

rule

wlan ap-authentication import

wlan ap-authentication method

wlan ap-authentication domain

Use wlan ap-authentication domain to configure an ISP domain for auto AP authentication.

Use undo wlan ap-authentication domain to restore the default.

Syntax

wlan ap-authentication domain domain-name

undo wlan ap-authentication domain

Default

No ISP domain is configured for auto AP authentication.

Views

System view

Predefined user roles

network-admin

Parameters

domain-name: Specifies an ISP domain by its name, a case-insensitive string of 1 to 255 characters. For information about ISP domains, see AAA in User Access and Authentication Configuration Guide.

Usage guidelines

You must configure this command when remote authentication is configured. If the remote authentication succeeds, the AC accepts the AP. If it does not succeed, the AC rejects the AP.

Examples

# Configure the authentication domain as office for auto AP authentication.

<Sysname> system-view

[Sysname] wlan ap-authentication domain office

wlan ap-authentication enable

Use wlan ap-authentication enable to enable auto AP authentication.

Use undo wlan ap-authentication enable to disable auto AP authentication.

Syntax

wlan ap-authentication enable

undo wlan ap-authentication enable

Default

Auto AP authentication is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

Auto AP authentication only takes effect on auto APs that have not come online. It does not take effect on online auto APs, manual APs, and manual APs converted from auto APs.

Auto AP authentication does not take effect on online auto APs.

Examples

# Enable auto AP authentication.

<Sysname> system-view

[Sysname] wlan ap-authentication enable

wlan ap-authentication import

Use wlan ap-authentication import to import an authentication file and generate corresponding ACL permit rules for auto AP authentication.

Syntax

wlan ap-authentication import file-name

Views

System view

Predefined user roles

network-admin

Parameters

file-name: Specifies the name of an auto AP authentication file. It is a case-insensitive string of 1 to 32 characters and must have extension .txt.

Usage guidelines

An auto AP authentication file contains either the MAC address or serial ID of auto APs but not both of them. The MAC addresses must be in the format of HH-HH-HH-HH-HH-HH. MAC addresses and serial IDs are comma-separated.

Before you execute this command, make sure the following tasks are completed:

· Use the wlan ap-authentication acl command to specify an ACL.

The generated permit rules will be added to the ACL.

· Use the wlan ap-authentication method command to specify an auto AP authentication method.

The ACL rules are generated according to the authentication method. Make sure the authentication file format is consistent with the authentication method.

Examples

# Import auto AP authentication file office.txt to generate ACL permit rules in ACL 200.

<Sysname> system-view

[Sysname] acl number 200

[Sysname-acl-ap-200] quit

[Sysname] wlan ap-authentication acl 200

[Sysname] wlan ap-authentication import office.txt

Related commands

wlan ap-authentication acl

wlan ap-authentication method

Use wlan ap-authentication method to specify an auto AP authentication method.

Use undo wlan ap-authentication method to restore the default.

Syntax

wlan ap-authentication method { mac-address | serial-id }

undo wlan ap-authentication method

Default

Auto APs are authenticated by MAC address.

Views

System view

Predefined user roles

network-admin

Parameters

mac-address: Specifies the MAC address authentication method.

serial-id: Specifies the serial ID authentication method.

Examples

# Authenticate auto APs by AP serial ID.

<Sysname> system-view

[Sysname] wlan ap-authentication method serial-id

wlan ap-authentication permit-unauthenticated

Use wlan ap-authentication permit-unauthenticated to enable unauthenticated auto APs to associate with the AC.

Use undo wlan ap-authentication permit-unauthenticated to disable unauthenticated auto APs from associating with the AC.

Syntax

wlan ap-authentication permit-unauthenticated

undo wlan ap-authentication permit-unauthenticated

Default

Unauthenticated auto APs are allowed to associate with the AC, but they cannot provide wireless services.

Views

System view

Predefined user roles

network-admin

Usage guidelines

Unauthenticated auto APs are auto APs that do not match an ACL rule in local authentication. Unauthenticated auto APs can associate with the AC but cannot provide wireless services. You can use the undo wlan ap-authentication permit-unauthenticated command to log off all unauthenticated auto APs.

Examples

# Disable unauthenticated auto APs from associating with the AC.

<Sysname> system-view

[Sysname] undo wlan ap-authentication permit-unauthenticated

wlan ap-certificate verification

Use wlan ap-certificate verification to enable AP certificate verification.

Use undo wlan ap-certificate verification to restore the default.

Syntax

wlan ap-certificate verification

undo wlan ap-certificate verification

Default

AP certificate verification is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

This feature takes effect at AP associations subsequent to feature enabling.

With this feature enabled, when an AP attempts to come online, the AC identifies whether any of its saved AP certificates uses the AP's MAC address as its CN. If a match is found, the AC permits the AP to come online. If no match is found, the AC denies the association request from the AP.

To use AP certificate verification, you must perform the following tasks:

· Generate AP certificates with APs' MAC addresses as certificate CNs. The MAC addresses must be in the aa:bb:cc:dd:ee:ff format.

· Upload the certificates to the AC through FTP or TFTP.

· Execute the download file command to download the certificates to the corresponding APs.

Examples

# Enable AP certificate verification.

<Sysname> system-view

[Sysname] wlan ap-certificate verification

Related commands

tunnel encryption

wlan capwap encryption

wlan ap-image-deploy

Use wlan ap-image-deploy to deploy an image file to all the online APs.

Syntax

wlan ap-image-deploy { all | ap-group group-name | name ap-name }

Views

System view

Predefined user roles

network-admin

Parameters

all: Specifies all APs.

ap-group group-name: Specifies an AP group by its name, a case-insensitive string of 1 to 32 characters. The specified AP group must already exist.

Usage guidelines

This feature enables you to upgrade the image of all the online APs. For the upgrade to take effect, reboot the APs after upgrade.

Before executing this command, you must upload the image file to the storage media of the AC. You can execute the wlan image-load filepath command to specify the storage media.

Examples

# Deploy an image file to all APs.

<Sysname> system-view

[Sysname] wlan ap-image-deploy all

Related commands

wlan image-load filepath

wlan apdb

Use wlan apdb to configure the mapping between a software version and a hardware version of an AP model.

Use undo wlan apdb to restore the default.

Syntax

wlan apdb [ fatap | oasisap ] model-name hardware-version software-version

undo wlan apdb [ fatap | oasisap ] model-name hardware-version

Default

For a fat AP, no mapping between a software version and a hardware version is specified for an AP model.

For a cloud-managed AP, no mapping between a software version and a hardware version is specified for an AP model.

For a fit AP, the software version for a hardware version of an AP model is the software version that is stored in APDB user scripts.

Views

System view

Predefined user roles

network-admin

Parameters

fatap: Specifies a mapping for a fat AP model. If the fatap and oasisap keywords are not specified, the command configures the mapping for the fit AP model.

oasisap: Specifies a mapping for a cloud-managed AP model. If the fatap and oasisap keywords are not specified, the command configures the mapping for the fit AP model.

model-name: Specifies an AP model name in the APDB.

hardware-version: Specifies a hardware version in the APDB.

software-version: Specifies an AP software version, a case-insensitive string of 1 to 31 characters.

Usage guidelines

CAUTION:

To avoid CAPWAP tunnel establishment failure, use this command under the guidance of H3C Support.

‌

Perform this task to configure the mapping between a software version and a hardware version of an AP model for software upgrade. When AP software upgrade is enabled, the AC checks whether the software version of an AP matches the hardware version in the corresponding mapping. If they match, no upgrade will be performed. If they do not match, the AP upgrades its software version.

For cloud-managed APs and fat APs, perform this task only when software upgrade is required for such as AP. You must save the target AP image to the apimage directory on the AC, and make sure the version number of the image is consistent with the version number specified in the command.

For fit APs, perform this task only when the AP software version for an AP model stored in the APDB is inconsistent with the software version you expect for the AP model. To display the AP software version for each AP model in the APDB, use the display wlan ap-model command.

Examples

# Configure the mapping between software version E2108 and hardware version Ver.C of AP model WA6320.

<Sysname> system-view

[Sysname] wlan apdb WA6320 Ver.C E2108

Related commands

firmware-upgrade

wlan apdb file

Use wlan apdb file to load an APDB user script.

Use undo wlan apdb file to delete an APDB user script.

Syntax

wlan apdb file user.apdb

undo wlan apdb file

Default

No APDB user script is loaded.

Views

System view

Predefined user roles

network-admin

Parameters

user.apdb: Specifies an APDB user profile by its name, a case-sensitive string of 1 to 63 characters. apdb is the filename extension.

Usage guidelines

When you load an APDB user script, follow these restrictions and guidelines:

· If you load multiple user scripts on the AC, the most recently loaded user script overwrites the old user scripts.

· Make sure the user script is valid. Invalid scripts can cause loading failure.

· The AP models in the user script must be different from the AP models in the system script.

· If you rename the user script in the file system, reload the user script to prevent AP model configuration in the user script from being lost after an AC reboot.

· If you replace the user script with a new user script in the file system, reload the new user script. If the new user script does not include AP model information saved in the replaced user script, the AP model information will be lost after an AC reboot.

· If you delete a user script in the file system, reload a new user script. If you do not reload a new user script, the AP model configuration in the user script will be lost after an AC reboot.

If an old user script already exists, follow these restrictions and guidelines when you load an APDB user script:

· If a manual AP or an online auto AP whose model is listed in the old user script exists ,you can load a new user script only when you delete the corresponding AP model information on the AC.

· If APs of an AP model listed in the old user script have been added to an AP group, you can load a new user script only when you remove the APs from the AP group.

· If the old user script includes an AP model whose software version was already configured, you can load a new user script only when you use the wlan apdb command to restore the original software version.

Examples

# Load user script user.apdb.

<Sysname> system-view

[Sysname] wlan apdb file user.apdb

Related commands

wlan apdb

wlan ap-group

Use wlan ap-group to create an AP group and enter its view, or enter the view of an existing AP group.

Use undo wlan ap-group to delete an AP group.

Syntax

wlan ap-group group-name

undo wlan ap-group group-name

Default

The default AP group default-group exists, and it cannot be deleted.

Views

System view

Predefined user roles

network-admin

Parameters

group-name: Specifies an AP group by its name, a case-insensitive string of 1 to 31 characters.

Examples

# Create an AP group named group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1]

Related commands

display wlan ap-group

wlan auto-ap enable

Use wlan auto-ap enable to enable the auto AP feature.

Use undo wlan auto-ap enable to disable the auto AP feature.

Syntax

wlan auto-ap enable

undo wlan auto-ap enable

Default

The auto AP feature is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

This command enables an AP to connect to an AC without manual AP configuration. It simplifies configuration when you deploy a large number of APs in a WLAN.

To configure an auto AP, you must use auto-AP persistence to convert the auto AP to a manual AP or configure it through an AP group.

Examples

# Enable the auto AP feature.

<Sysname> system-view

[Sysname] wlan auto-ap enable

wlan auto-ap persistent

Use wlan auto-ap persistent to convert online auto APs to manual APs.

Syntax

wlan auto-ap persistent { all | name auto-ap-name [ new-ap-name ] }

Views

System view

Predefined user roles

network-admin

Parameters

all: Specifies all online auto APs. If you specify this keyword, the command converts all online auto APs to manual APs with AP names unchanged.

name auto-ap-name: Specifies an online auto AP.

new-ap-name: Specifies a new name for the AP, a case-sensitive string of 1 to 64 characters. The string can contain letters, digits, underscores (_), dots (.), left brackets ([), right brackets (]), forward slashes (/), and hyphens (-). If you do not specify this argument, the converted manual AP uses the name of the auto AP.

Examples

# Convert the auto AP whose MAC address is 0001-ab12-cd36 to manual AP ap2.

<Sysname> system-view

[Sysname] wlan auto-ap persistent name 0001-ab12-cd36 ap2

wlan auto-persistent enable

Use wlan auto-persistent enable to convert auto APs to manual APs after they come online.

Use undo wlan auto-persistent enable to restore the default.

Syntax

wlan auto-persistent enable

undo wlan auto-persistent enable

Default

Auto AP conversion is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

This command takes effect only on auto APs that come online after you execute this command. For auto APs that are already online, use the wlan auto-ap persistent command to convert them to manual APs.

Examples

# Enable auto AP conversion.

<Sysname> system-view

[Sysname] wlan auto-persistent enable

wlan capwap discovery-policy unicast

Use wlan capwap discovery-policy unicast to enable an AC to respond only to unicast discovery requests.

Use undo wlan capwap discovery-policy to disable an AC to respond only to unicast discovery requests.

Syntax

wlan capwap discovery-policy unicast

undo wlan capwap discovery-policy

Default

An AC can respond to unicast, multicast, and broadcast discovery requests.

Views

System view

Predefined user roles

network-admin

Examples

# Enable the AC to respond only to unicast discovery requests.

<Sysname> system-view

[Sysname] wlan capwap discovery-policy unicast

wlan capwap encryption

Use wlan capwap encryption to specify the certificate used by CAPWAP control tunnel encryption.

Use undo wlan capwap encryption to restore the default.

Syntax

wlan capwap encryption certificate cer-name key key-name ca ca-name

undo wlan capwap encryption

Default

CAPWAP control tunnel encryption uses the built-in certificate.

Views

System view

Predefined user roles

network-admin

Parameters

certificate cer-name: Specifies the certificate name with the file suffix attached, cer-name.pem for example. The certificate must be in the .pem or .cer format.

key key-name: Specifies the key file name with the file suffix attached, key-name.pem for example. The key file must be in the .pem or .cer format.

ca ca-name: Specifies the CA certificate name with the file suffix attached, ca-name.pem for example. The CA certificate must be in the .pem or .cer format.

Usage guidelines

Before specifying a certificate, you must first save the certificate, key, and CA certificate to the file system of the AC.

For the configuration to take effect, perform this task before you enable CAPWAP control tunnel encryption.

Examples

# Specify a certificate for CAPWAP control tunnel encryption.

<Sysname> system-view

[Sysname] wlan capwap encryption certificate server.cer key server.key ca cacert.cer

Related commands

tunnel encryption

wlan ap-certificate verification

wlan description

Use wlan description to configure a description for the AC.

Use undo wlan description to restore the default.

Syntax

wlan description text

undo wlan description

Default

An AC does not have a description.

Views

System view

Predefined user roles

network-admin

Parameters

text: Specifies the description, a case-sensitive string of 1 to 64 characters.

Usage guidelines

If multiple ACs exist in a WLAN, you can specify a description for each AC to help identify them.

To display the description of an AC, execute the display this command.

Examples

# Configure the AC's description as test.

<Sysname> system-view

[Sysname] wlan description test

wlan enable

Use wlan enable to enable the WLAN function.

Use undo wlan enable to disable the WLAN function.

Syntax

wlan enable

undo wlan enable

Default

The WLAN function is enabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

CAUTION:

Disabling the WLAN function logs off all online APs. Please use this feature with caution.

‌

Examples

# Disable the WLAN function.

<Sysname> system-view

[Sysname] undo wlan enable

Disabling the WLAN function will log off all the online APs. Continue? [Y/N]

wlan global-configuration

Use wlan global-configuration to enter global configuration view.

Syntax

wlan global-configuration

Views

System view

Predefined user roles

network-admin

Usage guidelines

The configuration priorities for an AP in AP view, AP group view, and global configuration view are in descending order. If no settings are configured in one view, the settings in the view with a lower priority are used. If no settings are configured in any one of the three views, the AP uses the default configuration in the view that has the lowest priority.

Examples

# Enter global configuration view.

<Sysname> system-view

[Sysname] wlan global-configuration

[Sysname-wlan-global-configuration]

wlan image-load filepath

Use wlan image-load filepath to specify the preferred location for the AC to obtain an AP image file for software version assignment.

Use undo wlan image-load filepath to restore the default.

Syntax

wlan image-load filepath { local | ram }

undo wlan image-load filepath

Default

The AC prefers the AP image file stored in the RAM when assigning a software version to APs.

Views

System view

Predefined user roles

network-admin

Parameters

local: Specifies the local folder as the preferred location to obtain an AP image file. If the local folder does not contain an AP image file, the AC obtains the AP image file from the RAM. If the RAM does not contain an AP image file, the AC fails to obtain an AP image file.

ram: Specifies the RAM as the preferred location to obtain an AP image file. If the RAM does not contain an AP image file, the AC obtains the AP image file from the local folder. If the local folder does not contain an AP image file, the AC fails to obtain an AP image file.

Usage guidelines

The AC image file contains AP image files. The AC reads the AP image files into the RAM when it starts.

Specify the local keyword only when the following conditions are met:

· The required AP image file is not contained in the AC's image file.

· The software version an AP uses when it comes online has been specified using the wlan apdb command.

When you specify the local keyword, make sure the AC uses a CF or flash card as the default file system and the AP image file is stored in the root directory of the file system on the AC.

The AC can assign only .ipe AP image files to APs.

Examples

# Specify the local folder as the preferred location to obtain an AP image file for AP software version assignment.

<Sysname> system-view

[Sysname] wlan image-load filepath local

wlan re-group

Use wlan re-group to move an AP grouping rule or a list of AP grouping rules to the specified AP group.

Syntax

wlan re-group { ap ap-name | ap-group source-group-name | mac-address mac-address | serial-id serial-id } group-name

Views

System view

Predefined user roles

network-admin

Parameters

ap ap-name: Specifies an AP grouping rule by AP names.

ap-group source-group-name: Specifies the source AP group. The source AP group cannot be the default AP group.

mac-address mac-address: Specifies an AP grouping rule by MAC addresses.

serial-id serial-id: Specifies an AP grouping rule by serial IDs.

group-name: Specifies the target AP group. The target AP group cannot be the default AP group.

Examples

# Create an AP group named group1, and create AP grouping rules by AP names to add APs ap1, ap2, and ap3 to AP group group1.

<Sysname> system-view

[Sysname] wlan ap-group group1

[Sysname-wlan-ap-group-group1] ap ap1 ap2 ap3

[Sysname-wlan-ap-group-group1] quit

# Create an AP group named group2, and move an AP grouping rule by AP names to AP group group2.

[Sysname] wlan ap-group group2

[Sysname-wlan-ap-group-group2] quit

[Sysname] wlan re-group ap ap1 group2

wlan rename-ap

Use wlan rename-ap to rename a manual AP.

Syntax

wlan rename-ap ap-name new-ap-name

Views

System view

Predefined user roles

network-admin

Parameters

ap-name: Specifies a manual AP by its name, a case-sensitive string of 1 to 64 characters. The string can contain letters, digits, underscores (_), dots (.), left brackets ([), right brackets (]), forward slashes (/), and hyphens (-).

new-ap-name: Specifies a new AP name, a case-sensitive string of 1 to 64 characters. The string can contain letters, digits, underscores (_), dots (.), left brackets ([), right brackets (]), forward slashes (/), and hyphens (-).

Examples

# Change the name of AP ap1 to ap1-office.

<Sysname> system-view

[Sysname] wlan rename-ap ap1 ap1-office

wlan tcp mss

Use wlan tcp mss to set the maximum TCP segment size (TCP MSS) for CAPWAP tunnels.

Use undo wlan tcp mss to restore the default.

Syntax

wlan tcp mss value

undo wlan tcp mss

Default

The TCP MSS is 1460 bytes for CAPWAP tunnels.

Views

System view

Predefined user roles

network-admin

Parameters

value: Specifies the TCP MSS in bytes in the range of 128 to 2048.

Usage guidelines

This command sets the value of the MSS option in SYN packets transmitted over a CAPWAP tunnel.

The MSS option informs the receiver of the largest segment that the sender can accept. Each end announces its MSS during TCP connection establishment. If the size of a TCP segment is smaller than or equal to the MSS of the receiver, TCP sends the TCP segment without fragmentation. If not, TCP fragments the segment based on the receiver's MSS.

Examples

# Set the TCP MSS to 2000 bytes for CAPWAP tunnels.

<Sysname> system-view

[Sysname] wlan tcp mss 2000

wlan timezone-sync enable

Use wlan timezone-sync enable to enable time zone synchronization.

Use undo wlan timezone-sync enable to restore the default.

Syntax

wlan timezone-sync enable

undo wlan timezone-sync enable

Default

Time zone synchronization is enabled.

Views

System view

Predefined user roles

network-admin

Examples

# Enable time zone synchronization.

<Sysname> system-view

[Sysname] wlan timezone-sync enable

wlan trap ap-number threshold

Use wlan trap ap-number threshold to set the online AP quantity threshold for triggering an SNMP trap.

Use undo wlan trap ap-number threshold to restore the default.

Syntax

wlan trap ap-number threshold percent

undo wlan trap ap-number threshold

Default

The online AP quantity threshold for triggering an SNMP trap is 100. The AC will not send SNMP traps.

Views

System view

Predefined user roles

network-admin

Parameters

percent: Specifies the online AP quantity threshold for triggering an SNMP trap, in the range of 30 to 100, in percentage.

Usage guidelines

With SNMP notifications and this command configured, the AC sends overload traps to the SNMP module when the number of online APs to the number of APs allowed by the license exceeds the specified threshold. If the threshold is exceeded, the AC sends an SNMP recover trap every time an AP comes online. When the number drops below the threshold, the AC sends recover traps to the SNMP module.

If you set the threshold to 100, the AC will not send overload traps, because the number of online APs will not exceed the number of APs allowed by the license.

Examples

# Set the online AP quantity threshold for triggering an SNMP trap to 50.

<Sysname> system-view

[Sysname] wlan trap ap-number threshold 50

Related commands

snmp-agent trap enable wlan ap

wlan tunnel-down echo-check enable

Use wlan tunnel-down echo-check enable to enable APs to use ICMP echo requests to check reachability to the AC upon a CAPWAP control tunnel disconnection.

Use undo wlan tunnel-down echo-check enable to disable APs from using ICMP echo requests to check reachability to the AC upon a CAPWAP control tunnel disconnection.

Syntax

wlan tunnel-down echo-check enable

undo wlan tunnel-down echo-check enable

Default

APs are disabled from using ICMP echo requests to check reachability to the AC upon a CAPWAP control tunnel disconnection.

Views

System view

Predefined user roles

network-admin

Usage guidelines

With this feature enabled, an AP sends an ICMP echo request to the AC to check reachability to the AC when the CAPWAP control tunnel between them goes down. The check result is saved as a TXT file named ap-diag on the AP. The file contains information about whether the CAPWAP control tunnel disconnection is caused by link failure between the AC and the AP.

Disable this feature to reduce the load of an AC if that AC must send a large number of ICMP echo replies to APs. After you disable this feature, the ap-diag file will be deleted.

Examples

# Enable APs to use ICMP echo requests to check reachability to the AC upon a CAPWAP control tunnel disconnection.

<Sysname> sysname-view

[Sysname] wlan tunnel-down echo-check enable

wlan vip-ap-group

Use wlan vip-ap-group to create an AP monitor group and enter its view or enter the view of an existing AP monitor group.

Use undo wlan vip-ap-group to delete the AP monitor group.

Syntax

wlan vip-ap-group

undo wlan vip-ap-group

Default

No AP monitor group exists.

Views

System view

Predefined user roles

network-admin

Usage guidelines

APs in an AP monitor group can report client quantity, radio traffic, channel usage, and AP anomalies to the AC.

Examples

# Create an AP monitor group.

<Sysname> system-view

[Sysname] wlan vip-ap-group

[Sysname-wlan-vip-ap-group]

Related commands

ap-name

report-interval

wlan virtual-ap

Use wlan virtual-ap to manually create a virtual AP and enter its view to enter the view of an existing virtual AP.

Use undo wlan virtual-ap to delete the specified virtual AP.

Syntax

wlan virtual-ap ap-name [ model model-name ]

undo wlan virtual-ap ap-name

Default

No virtual APs exist.

Views

System view

Predefined user roles

network-admin

Parameters

ap-name: Specifies a virtual AP name, a case-sensitive string of 1 to 64 characters. The string can contain letters, digits, underscores (_), dots (.), left brackets ([), right brackets (]), forward slashes (/), and hyphens (-).

model model-name: Specifies the model name of the virtual AP. You must specify the model name when you create a virtual AP.

Usage guidelines

If the specified AP has established a CAPWAP tunnel, the undo wlan virtual-ap command also terminates the tunnel.

Execute this command on the AC associated with the virtual AP.

You cannot use this command to edit the model name for an existing virtual AP. To do so, you must delete that virtual AP and reconfigure a model name for it.

Examples

# Create a virtual AP named ap1, and enter its view.

<Sysname> system-view

[Sysname] wlan virtual-ap ap1 model WA6320

[Sysname-wlan-virtual-ap-ap1]

Related commands

wlan virtual-ap enable

Use wlan virtual-ap enable to enable the virtual AP feature.

undo wlan virtual-ap enable to disable the virtual AP feature.

Syntax

wlan virtual-ap enable

undo wlan virtual-ap enable

Default

The virtual AP feature is disabled.

Views

System view

Predefined user roles

network-admin

Usage guidelines

A physical AP can be virtualized into multiple virtual APs to provide different wireless services. You can use one AC to manage the physical AP and another AC to manage the virtual APs for isolation.

Execute this command on the AC associated with a physical AP.

Before you enable this feature, make sure the WLAN ID assigned to the service templates bound to all radios in all AP radio views and AP group radio views is not a value in the second half of the WLAN ID range. If such a WLAN ID exists, you must first unbind the service template and then enable this feature. To view the WLAN IDs assigned to a service template, execute the display system internal wlan bss list ap ap-id radio radio-id command in probe view. The value range for a WLAN ID is from 1 to the maximum number of BSSs that can be created on a radio before the virtual AP feature is enabled.

When the virtual AP feature is enabled, the number of BSSs that can be created on a radio decreases by 50%.

Before you disable the virtual AP feature, make sure no virtual AP exists in all AP views and AP group views. If any virtual AP exists, first delete that virtual AP and then disable the virtual AP feature.

Virtual APs do not support automatic channel selection. You must specify channels manually for virtual APs. Make sure the working channel configurations for a virtual AP and the corresponding physical AP are consistent.

Examples

# Enable the virtual AP feature.

<Sysname> system-view

[Sysname] wlan virtual-ap enable

Related commands

virtual-ap

wlan virtual-ap

wlan virtual-ap-group

Use wlan virtual-ap-group to create a virtual AP group and enter its view, or enter the view of an existing virtual AP group.

Use undo wlan virtual-ap-group to delete the specified virtual AP group.

Syntax

wlan virtual-ap-group group-name

undo wlan virtual-ap-group group-name

Default

A default virtual AP group named default-vitualapgroup exists.

Views

System view

Predefined user roles

network-admin

Parameters

group-name: Specifies a virtual AP group name, a case-insensitive string of 1 to 31 characters.

Usage guidelines

The default virtual AP group default-virtualapgroup cannot be deleted.

Execute this command on the AC associated with a virtual AP.

Adding APs to an AP group by specifying an AP grouping rule enables you to deploy the settings in AP group view to all APs in the AP group.

Examples

# Create a virtual AP group named group1, and enter its view.

<Sysname> system-view

[Sysname] wlan virtual-ap-group group1

[Sysname-wlan-virtual-ap-group-group1]

Related commands

display wlan virtual-ap-group

07-AP Management Command Reference

AP management commands‌

Operating mechanism

Restrictions and guidelines

display wlan ap connection-record

power-level default

provision auto-recovery

region-code (AP view/AP group view)

wlan capwap discovery-policy unicast

wlan image-load filepath