H3C WA Series Access Points

Transcription

1 H3C WA Series Access Points WLAN Command Reference Hangzhou H3C Technologies Co., Ltd. Document version: 6W

2 Copyright , Hangzhou H3C Technologies Co., Ltd. and its licensors All rights reserved Trademarks No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Hangzhou H3C Technologies Co., Ltd. H3C,, H3CS, H3CIE, H3CNE, Aolynk,, H 3 Care,, IRF, NetPilot, Netflow, SecEngine, SecPath, SecCenter, SecBlade, Comware, ITCMM and HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd. Notice All other trademarks that may be mentioned in this manual are the property of their respective owners The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute the warranty of any kind, express or implied.

3 Preface The H3C WA series access points documentation set includes eight command references, which describe the commands and command syntax options available for the H3C WA series access points. The WLAN Command Reference describes the configuration commands for WLAN interface, WLAN service, WLAN security, WLAN RRM, WLAN QoS, WLAN IDS, WDS, and WLAN optimization. NOTE: Support of the H3C WA series access points for commands may vary by device model. For the command matrix, see About the WA Series Access Points Command References. The interface types and output information may vary by device model. This preface includes: Audience Conventions About the H3C WA series access points documentation set Obtaining documentation Technical support Documentation feedback Audience This documentation is intended for: Network planners Field technical support and servicing engineers Network administrators working with the WA series Conventions This section describes the conventions used in this documentation set. Command conventions Convention Boldface Italic Bold text represents commands and keywords that you enter literally as shown. Italic text represents arguments that you replace with actual values. [ ] Square brackets enclose syntax choices (keywords or arguments) that are optional. { x y... } [ x y... ] Braces enclose a set of required syntax choices separated by vertical bars, from which you select one. Square brackets enclose a set of optional syntax choices separated by vertical bars, from which you select one or none.

4 Convention { x y... } * [ x y... ] * &<1-n> Asterisk marked braces enclose a set of required syntax choices separated by vertical bars, from which you select at least one. Asterisk marked square brackets enclose optional syntax choices separated by vertical bars, from which you select one choice, multiple choices, or none. The argument or keyword and argument combination before the ampersand (&) sign can be entered 1 to n times. # A line that starts with a pound (#) sign is comments. GUI conventions Convention Boldface Window names, button names, field names, and menu items are in Boldface. For example, the New User window appears; click OK. > Multi-level menus are separated by angle brackets. For example, File > Create > Folder. Symbols Convention WARNING CAUTION IMPORTANT NOTE TIP An alert that calls attention to important information that if not understood or followed can result in personal injury. An alert that calls attention to important information that if not understood or followed can result in data loss, data corruption, or damage to hardware or software. An alert that calls attention to essential information. An alert that contains additional or supplementary information. An alert that provides helpful information. Port numbering in examples The port numbers in this document are for illustration only and might be unavailable on your device. About the H3C WA series access points documentation set The H3C WA series access points documentation set includes: Category Documents Purposes Product description and specifications Hardware specifications and installation Marketing brochures Compliance and safety manual Quick start Describe product specifications and benefits. Provides regulatory information and the safety instructions that must be followed during installation. Guides you through initial installation and setup procedures to help you quickly set up and use your AP with the minimum configuration.

5 Category Documents Purposes Software configuration Operations and maintenance Installation guide Getting started guide Configuration guides Command references Release notes Guides you through hardware specifications and installation methods to help you install your AP. Guides you through the main functions of your AP, and describes how to install and log in to your AP, perform basic configurations, maintain software, and troubleshoot your AP. Describe software features and configuration procedures. Provide a quick reference to all available commands. Provide information about the product release, including the version history, hardware and software compatibility matrix, version upgrade information, technical support information, and software upgrading. Obtaining documentation You can access the most up-to-date H3C product documentation on the World Wide Web at Click the links on the top navigation bar to obtain different categories of product documentation: [Technical Support & Documents > Technical Documents] Provides hardware installation, software upgrading, and software feature configuration and maintenance documentation. [Products & Solutions] Provides information about products and technologies, as well as solutions. [Technical Support & Documents > Software Download] Provides the documentation released with the software version. Technical support service@h3c.com Documentation feedback You can your comments about product documentation to info@h3c.com. We appreciate your comments.

6 Contents WLAN interface configuration commands 1 default 1 description 1 display interface wlan-bss 2 display interface wlan-radio 4 display interface wlan-mesh 7 display interface wlan-meshlink 8 interface wlan-bss 9 interface wlan-radio 10 interface wlan-mesh 10 shutdown (WLAN-Radio interface view) 11 shutdown (WLAN-BSS interface view) 11 WLAN service configuration commands 13 a-mpdu enable 13 a-msdu enable 13 ani enable 14 antenna type 14 beacon ssid-hide 15 beacon-interval 16 channel 16 channel band-width 17 client dot11n-only 18 client max-count 18 display wlan client 19 display wlan service-template 22 display wlan statistics 24 display wlan statistics service-template 26 distance 28 dtim 29 fast-association enable 29 fragment-threshold 30 green-energy-management enable 31 long-retry threshold 31 max-power 32 max-rx-duration 32 mimo 33 preamble 34 protection-mode 34 radio-type 35 reset wlan client 36 reset wlan statistics 36 rts-threshold 37 service-template (WLAN radio interface view) 37 service-template (WLAN service template view) 38 short-gi enable 38 short-retry threshold 39 shut-all-led enable 40 ssid 40 i

7 wlan broadcast-probe reply 41 wlan client idle-timeout 42 wlan client keep-alive 42 wlan country-code 43 wlan link-test 45 wlan service-template 46 wlan-client-isolation enable 47 wlan uplink-interface 48 Workgroup bridge configuration commands 48 client-mode authentication-method 48 client-mode cipher-suite 49 client-mode connect 50 client-mode disconnect 51 client-mode interface wlan-bss 51 client-mode ssid 52 display wlan client-mode radio 52 display wlan client-mode ssid 54 WLAN security configuration commands 56 authentication-method 56 cipher-suite 56 gtk-rekey client-offline enable 57 gtk-rekey enable 58 gtk-rekey method 58 ptk-lifetime 59 security-ie 59 tkip-cm-time 60 wep default-key 61 wep key-id 62 wep mode 63 WLAN RRM configuration commands 64 autochannel-set avoid-dot11h 64 display wlan rrm 64 dot11a 68 dot11a exclude-channel 69 dot11a max-bandwidth 70 dot11b 70 dot11b max-bandwidth 71 dot11bg exclude-channel 72 dot11g 72 dot11g max-bandwidth 73 dot11g protection enable 74 dot11g protection-mode 74 dot11n mandatory maximum-mcs 75 dot11n max-bandwidth 76 dot11n multicast-rate 76 dot11n protection enable 77 dot11n protection-mode 77 dot11n support maximum-mcs 78 power-constraint 79 scan report-interval 79 scan type 80 spectrum-management enable 80 wlan rrm 81 ii

8 Band navigation configuration commands 82 band-navigation aging-time 82 band-navigation balance access-denial 82 band-navigation balance session 83 band-navigation enable (WLAN RRM view) 84 band-navigation rssi-threshold 84 WLAN IDS configuration commands 86 WLAN rogue AP detection configuration commands 86 attack-detection enable 86 display wlan ids history 86 display wlan ids statistics 88 wlan device-detection enable 89 wlan ids 90 wlan work-mode monitor 90 reset wlan ids history 91 reset wlan ids statistics 91 WLAN frame filtering configuration commands 92 display wlan blacklist 92 display wlan whitelist 93 dynamic-blacklist enable 94 dynamic-blacklist lifetime 95 reset wlan dynamic-blacklist 95 static-blacklist mac-address 96 whitelist mac-address 96 WLAN QoS configuration commands 98 bandwidth-guarantee enable 98 bandwidth-guarantee service-template 98 client-rate-limit direction 99 display wlan bandwidth-guarantee 100 display wlan client-rate-limit 101 display wlan wmm 102 reset wlan wmm 107 wmm cac policy 108 wmm edca radio 109 wmm edca client (ac-vo and ac-vi) 110 wmm edca client (ac-be and ac-bk) 111 wmm enable 112 wmm svp map-ac 113 WDS configuration commands 115 bind wlan-mesh 115 display wlan mesh-link 115 display wlan mesh-profile 116 display wlan mp-policy 117 link-backhaul-rate 119 link-hold-rssi 119 link-hold-time 120 link-initiation enable 120 link-keep-alive 121 link-maximum-number 122 link rate-mode 122 link-saturation-rssi 123 link-switch-margin 123 mesh-id 124 iii

9 mesh-profile 124 mesh-profile enable 125 mesh peer-mac-address 126 mlsp enable 126 mlsp-proxy mac-address 127 mp-policy 128 probe-request-interval 128 wlan mesh-profile 129 wlan mp-policy 130 wlan uplink-interface mesh-link 130 WLAN optimization commands 132 wlan option broadcast-buffer enable 132 wlan option channel-reuse 132 wlan option channel-share 133 wlan option channel-rate-limit 134 wlan option client-reconnect-trigger 134 wlan option client-reject 135 wlan option dot11n-restraint 135 wlan option fair-schedule enable 136 wlan option fast-forwarding 137 wlan option green-ap enable 137 wlan option multi-service enable 138 wlan option power-supply 139 wlan option probe-response-try 139 wlan option roam-navigation level 140 wlan option rx-broadcast-all enable 140 wlan option signal-ignore 141 wlan option tpc enable 142 wlan option traffic-shaping enable 142 Multicast optimization configuration commands 144 display wlan multicast optimization 144 multicast optimization enable 145 wlan multicast optimization aging-time 146 wlan multicast optimization threshold 146 wlan multicast optimization threshold-action 147 Index 149 iv

10 WLAN interface configuration commands default default WLAN-BSS interface view, WLAN-Radio interface view, WLAN mesh interface view. None Use default to restore the default settings of the interface. # Restore the default settings of WLAN-BSS interface 1. [Sysname] interface WLAN-BSS 1 [Sysname-WLAN-BSS1] default This command will restore the default settings. Continue? [Y/N]:y description description text undo description WLAN-BSS interface view, WLAN-Radio interface view, WLAN mesh interface view. text: of the current interface, a string of 1 to 80 characters. The device supports the following types of characters or symbols: standard English characters (numbers and case-sensitive letters), special English characters, spaces, and other characters or symbols that conform to the Unicode standard. 1

11 NOTE: An interface description can be the mixture of English characters and other Unicode characters. The mixed description cannot exceed the specified length. To use a type of Unicode characters or symbols in an interface description, you must install the corresponding Input Method Editor (IME) and log in to the device through remote login software that supports this character type. Each Unicode character or symbol (non-english characters) takes the space of two regular characters. When the length of a description string reaches or exceeds the maximum line width on the terminal software, the software starts a new line, possibly breaking a Unicode character into two parts. As a result, garbled characters may be displayed at the end of a line. Use description to set the description of the current interface. Use undo description to restore the default. By default, the description of an interface is interface-name + interface, WLAN-Radio 1/0/1 interface for example. # Set the description of WLAN-Radio 1/0/1 to To AP1. [Sysname] interface WLAN-Radio 1/0/1 [Sysname-WLAN-Radio1/0/1] description To AP1 display interface wlan-bss Any view display interface [ wlan-bss] [ brief [ down ] ] [ { begin exclude include } regular-expression ] display interface wlan-bss interface-number [ brief ] [ { begin exclude include } regular-expression ] 1: Monitor level interface-number: Specifies a WLAN-BSS interface by its number in the range of 0 to 255. brief: Displays brief interface information. If you do not provide this keyword, the command displays detailed interface information. down: Displays down interface information and the cause. If you do not provide this keyword, the command output is not filtered based on the down interface status. : Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. 2

12 include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Use display interface wlan-bss to display the WLAN-BSS interface information. If you do not specify the wlan-bss keyword, the command displays information about all interfaces on the device. If you specify the wlan-bss keyword, the command displays information about all WLAN-BSS interfaces. # Display information about interface WLAN-BSS 1. <Sysname> display interface WLAN-BSS 1 WLAN-BSS1 current state: DOWN IP Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: 000f-e2c : WLAN-BSS1 Interface PVID: 1 Port link-type: access Tagged VLAN ID : none Untagged VLAN ID : 1 Port priority: 0 Last clearing of counters: Never Maximum client number: 64 Clients: 0 associating, 0 associated Input (total) : 0 packets, 0 bytes : 0 unicasts, 0 bytes : 0 multicasts/broadcasts, 0 bytes Output (total): 0 packets, 0 bytes : 0 unicasts, 0 bytes : 0 multicasts/broadcasts, 0 bytes Table 1 Command output Field WLAN-BSS1 current state IP Packet Frame Type Hardware Address PVID Port link-type Tagged VLAN ID Untagged VLAN ID Last clearing of counters: Never Physical link state of a WLAN-BSS interface. Output frame encapsulation type. MAC address of output frames. of the interface. Default VLAN ID of the interface. Port link type, access or hybrid. VLANs whose packets are sent through the port with VLAN tag kept. VLANs whose packets are sent through the port with VLAN tag stripped off. Time when the reset counts interface command was last used to clear statistics on the interface. Never indicates that the reset counts interface command was never used since the device was started. 3

13 Field Maximum client number Clients: 0 associating, 0 associated Input (total): 0 packets, 0 bytes : 0 unicasts, 0 bytes : 0 multicasts/broadcasts, 0 bytes Output (total): 0 packets, 0 bytes : 0 unicasts, 0 bytes : 0 multicasts/broadcasts, 0 bytes Maximum number of clients allowed to access. Number of clients being associating, number of clients associated. Input packet statistics of the interface: Number of packets, number of bytes. Number of unicast packets, number of bytes of unicast packets. Number of multicast/broadcast packets, number of bytes of multicast/broadcast packets. Output packet statistics of the interface: Number of packets, number of bytes. Number of unicast packets, number of bytes of unicast packets. Number of multicast/broadcast packets, number of bytes of multicast/broadcast packets. display interface wlan-radio display interface [ wlan-radio ] [ brief [ down ] ] [ { begin exclude include } regular-expression ] display interface wlan-radio interface-number [ brief ] [ { begin exclude include } regular-expression ] Any view 1: Monitor level interface-number: Specifies a WLAN-radio interface by its number. The value range depends on the device model. For example, if the device supports N radio interfaces, the value range for this argument is 1/0/1 to 1/0/N. brief: Displays brief interface information. If you do not provide this keyword, the command displays detailed interface information. down: Displays down interface information and the cause. If you do not provide this keyword, the command output is not filtered based on the down interface status. : Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Use display interface wlan-radio to display information about a WLAN-Radio interface. 4

14 If you do not specify the wlan-radio keyword, the command displays information about all interfaces on the device. If you specify the wlan-radio keyword, the command displays information about all WLAN-Radio interfaces. # Display information about interface WLAN-Radio 1/0/1. <Sysname> display interface WLAN-Radio 1/0/1 WLAN-Radio1/0/1 current state: UP IP Packet Frame Type: PKTFMT_IEEE_802.11, Hardware Address: 000f-e2c : WLAN-Radio1/0/1 Interface Radio-type dot11a, channel auto(157), power(dbm) 19 Antenna Type is C A 2/3dBi Omni Antenna Resource Usage is 0% Secondary channel offset: SCN, HT protection mode: no protection Received: 0 authentication frames, 0 association frames Sent out: 0 authentication frames, 0 association frames Stations: 0 associating, 0 associated Input : packets, bytes : unicasts, bytes : multicasts/broadcasts, bytes : 0 fragmented : 5687 discarded, bytes : 0 duplicates, 3054 FCS errors : 2 decryption errors Output: 2032 packets, bytes : 7 unicasts, 1776 bytes : 312 multicasts/broadcasts, bytes : 1713 others, bytes : 0 fragmented : 0 discarded, 0 bytes : 0 failed RTS, 335 failed ACK : 334 transmit retries, 122 multiple transmit retries Table 2 Command output Field WLAN-Radio1/0/1 current state IP Packet Frame Type Hardware Address Radio-type 11a channel auto(157) Physical link state of the WLAN-Radio interface. Output frame encapsulation type. MAC address of the interface. of the interface. Radio type used by the interface. Channel used by the interface. The keyword auto means the channel is automatically selected and 157 is the number of the selected channel. If the channel is manually selected, the field will be displayed in the format of channel configured-channel. 5

15 Field power(dbm) 19 auto (4) Transmit power of the interface (in dbm). The value 19 is the transmit power configured by the user; auto indicates that the actual power is different from that configured by the user; the bracketed number, is the current transmission power, 4 dbm in this sample output. (If spectrum management and power constraint have been configured for the a bands, the actual transmit power on the interface may be different from the configured value, depending on the configuration of two commands: max-power and power-constraint.) For more information about the max-power command and the power-constraint command, see the WLAN Command Reference. If the protocol being used is not a or the power constraint function on the a frequencies is not configured even though a is used, this field will be displayed as power(dbm) configured-power. Secondary channel offset HT protection mode Received: 0 authentication frames, 0 association frames Sent out: 0 authentication frames, 0 association frames Stations: 0 associating, 0 associated Secondary channel information for n radio mode: SCA (Second Channel Above) The AP operates in 40 MHz bandwidth mode, and the secondary channel has a higher bandwidth than the primary channel. SCB (Second Channel Below) The AP operates in 40 MHz bandwidth mode, and the secondary channel has a lower bandwidth than the primary channel. SCN The AP operates in 20 MHz bandwidth mode n protection modes: no protection mode(0) The clients associated with the AP, and the wireless devices within the coverage of the AP operate in n mode, and all the clients associated with the AP operate in either 40 MHz or 20 MHz mode. Non-member mode(1) The clients associated with the AP operate in n mode, but non n wireless devices exist within the coverage of the AP,. 20 MHz mode(2) The radio mode of the AP is 40 MHz. The clients associated with the AP and the wireless devices within the coverage of the AP operate in n mode, and at least one n client operating in 20 MHz mode is associated with the radio of the AP. Non-HT mix mode(3) All situations except the above three. Received: Number of authentication frames, number of association frames. Sent out: Number of authentication frames, number of association frames. Number of wireless users. 6

16 Field Input : packets, bytes : unicasts, bytes : multicasts/broadcasts, bytes : 0 fragmented : 5687 discarded, bytes : 0 duplicates, 3054 FCS errors : 2 decryption errors Output: 2032 packets, bytes : 7 unicasts, 1776 bytes : 312 multicasts/broadcasts, bytes : 1713 others, bytes : 0 fragmented : 0 discarded, 0 bytes : 0 failed RTS, 335 failed ACK : 334 transmit retries, 122 multiple transmit retries Input packet statistics of the interface: Number of packets, number of bytes. Number of unicast packets, number of bytes of unicast packets. Number of multicast/broadcast packets, number of bytes of multicast/broadcast packets. Number of fragmented packets. Number of discarded packets, number of discarded bytes. Number of duplicate frames, number of FCS errors. Number of encryption errors. Output packet statistics of the interface: Number of packets (unicasts + multicasts/broadcasts + others), number of bytes. Number of unicast packets, number of bytes of unicast packets. Number of multicast/broadcast packets, number of bytes of multicast/broadcast packets. Number of other types of packets, bytes. Number of fragmented packets. Number of discarded packets, number of discarded bytes. Number of failed RTS packets, number of failed ACK packets. Number of retransmitted frames, number of transmit retries. display interface wlan-mesh Any view display interface [ wlan-mesh ] [ brief [ down ] ] [ { begin exclude include } regular-expression ] display interface wlan-mesh interface-number [ brief ] [ { begin exclude include } regular-expression ] 1. Monitor level interface-number: Specifies a WLAN mesh interface by its number in the range of 1 to 32. brief: Displays brief interface information. If you do not provide this keyword, the command displays detailed interface information. down: Displays down interface information and the cause. If you do not provide this keyword, the command output is not filtered based on the down interface status. : Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. 7

17 exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Use display interface wlan-mesh to display information about the specified WLAN mesh interface or all WLAN mesh interfaces that already exist if no interface is specified. If you do not specify the wlan-mesh keyword, the command displays information about all interfaces on the device. If you specify the wlan-mesh keyword, the command displays information about all WLAN-mesh interfaces. # Display information about WLAN mesh interface 3. <Sysname> display interface WLAN-MESH 3 WLAN-MESH3 current state: DOWN IP Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: 000f-e2c : WLAN-MESH3 Interface PVID: 1 Port link-type: access Tagged VLAN ID : none Untagged VLAN ID : 1 Port priority: 0 Last clearing of counters: Never For more information about the fields in the output, see Table 1. display interface wlan-meshlink Any view display interface [ wlan-meshlink ] [ brief [ down ] ] [ { begin exclude include } regular-expression ] display interface wlan-meshlink interface-number [ brief ] [ { begin exclude include } regular-expression ] 1. Monitor level interface-number: Specifies a WLAN mesh link interface by its number. The value range depends on the dynamically created WLAN mesh link interfaces. brief: Displays brief interface information. If you do not provide this keyword, the command displays detailed interface information. down: Displays down interface information and the cause. If you do not provide this keyword, the command output is not filtered based on the down interface status. 8

18 : Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Use display interface wlan-meshlink to display information about the specified WLAN mesh link interface. If you do not specify the wlan-meshlink keyword, the command displays information about all interfaces on the device. If you specify the wlan-mesh keyword, the command displays information about all WLAN mesh link interfaces. # Display information about WLAN mesh link interface 1. <Sysname>display interface WLAN-MESHLINK 1 WLAN-MESHLINK1 current state: UP IP Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: : WLAN-MESHLINK1 Interface PVID: 1 Port link-type: access Tagged VLAN ID : none Untagged VLAN ID : 1 Port priority: 0 Last clearing of counters: Never Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec 9 packets input, 2890 bytes, 0 drops 392 packets output, bytes, 0 drops For more information about the fields in the output, see Table 1. interface wlan-bss interface wlan-bss interface-number undo interface wlan-bss interface-number System view interface-number: Specifies a WLAN-BSS interface by its number in the range of 0 to

19 Use interface wlan-bss to enter WLAN-BSS interface view. If the WLAN-BSS interface identified by the interface-number argument does not exist, this command creates the WLAN-BSS interface first. Use undo interface wlan-bss to remove a WLAN-BSS interface. # Create the WLAN-BSS interface numbered 1. [Sysname] interface WLAN-BSS 1 [Sysname-WLAN-BSS1] interface wlan-radio interface wlan-radio interface-number System view interface-number: Specifies a WLAN-radio interface by its number. The value range for this argument varies by device model. For example, if the device supports N radio interfaces, the interface number ranges from 1/0/1 to 1/0/N. Use interface wlan-radio to enter WLAN-Radio interface view. # Enter WLAN-Radio 1/0/1 interface view. [Sysname] interface wlan-radio 1/0/1 [Sysname-WLAN-Radio1/0/1] interface wlan-mesh interface wlan-mesh interface-number undo interface wlan-mesh interface-number System view 1. System level 10

20 interface-number: Specifies a WLAN mesh interface by its number in the range of 1 to 32. Use interface wlan-mesh to enter WLAN mesh interface view. If the specified WLAN mesh interface does not exist, the command creates the WLAN mesh interface first. Use undo interface wlan-mesh to delete the specified WLAN mesh interface. # Create WLAN mesh interface 2. [Sysname] interface WLAN-MESH 2 [Sysname-WLAN-MESH2] shutdown (WLAN-Radio interface view) shutdown undo shutdown WLAN-Radio interface view None Use shutdown to shut down the current WLAN-Radio interface. Use undo shutdown to bring up the current WLAN-Radio interface. By default, a WLAN-Radio interface is up. # Shut down interface WLAN-Radio 1/0/1. <Sysname>system-view [Sysname] interface wlan-radio 1/0/1 [Sysname-WLAN-Radio1/0/1] shutdown shutdown (WLAN-BSS interface view) shutdown undo shutdown WLAN-BSS interface view 11

21 None Use shutdown to shut down the current WLAN-BSS interface. Use undo shutdown to bring up the current WLAN-BSS interface. By default, a WLAN-BSS interface is up. After a WLAN-BSS interface is shut down, the connection between the interface and the wireless device will be torn down. # Shut down interface WLAN-BSS 1. <Sysname>system-view [Sysname] interface WLAN-BSS 1 [Sysname-WLAN-BSS1] shutdown 12

22 WLAN service configuration commands a-mpdu enable a-mpdu enable undo a-mpdu enable WLAN radio interface view Default Level None Use a-mpdu enable to enable the A-MPDU function for the radio. Use undo a-mpdu enable to disable the A-MPDU function for the radio. By default, the A-MPDU function is enabled on an n radio. This command is only effective on n radios. If you change the radio type of an n radio, the default setting for this function of the new radio type is restored. # Disable the A-MPDU function for interface WLAN-Radio 1/0/1. <sysname> system-view [sysname] interface WLAN-Radio 1/0/1 [sysname-wlan-radio1/0/1] undo a-mpdu enable a-msdu enable a-msdu enable undo a-msdu enable WLAN radio interface view Default Level 13

23 None Use a-msdu enable to enable the A-MSDU function for the radio. Use undo a-msdu enable to disable the A-MSDU function for the radio. By default, the A-MSDU function is enabled. This command is only effective on n radios. If you change the radio type of an n radio, the default setting for this function of the new radio type is restored. The AP can receive but cannot send A-MSDU frames. ani enable # Disable the A-MSDU function for WLAN-Radio 1/0/1. <sysname> system-view [sysname] interface WLAN-Radio 1/0/1 [sysname- WLAN-Radio1/0/1] undo a-msdu enable ani enable undo ani enable WLAN radio interface view Use ani enable to enable the Adaptive Noise Immunity (ANI) function. Use undo ani enable to disable the ANI function. By default, ANI is enabled. After the ANI function is enabled, the device automatically adjusts the noise immunity level according to the surrounding signal environment to eliminate RF interference. # Disable ANI. [Sysname] interface wlan-radio 1/0/1 [sysname-wlan-radio1/0/1] undo ani enable antenna type antenna type type 14

24 undo antenna type WLAN radio interface view type: Specifies the antenna type. Use antenna type to specify the antenna type. Use undo antenna type to restore the default. The default setting of the command depends on the device model. # Specify the antenna type. <sysname> system-view [sysname] interface wlan-radio 1/0/1 [sysname-wlan-radio1/0/1] antenna type 3CWE596 beacon ssid-hide beacon ssid-hide undo beacon ssid-hide WLAN service template view Default Level None Use beacon ssid-hide to hide the Service Set Identifier (SSID) in the beacon frames. Use undo beacon ssid-hide to restore the default configuration. By default, the SSID is not hidden in the beacon frames. If the SSID is hidden in beacon frames, the SSID must be configured for the clients to associate with the AP. Hiding the SSID in beacon frames does little good to wireless security. Allowing the advertising of the SSID in beacon frames enables clients to discover the AP more easily. # Hide the SSID in the beacon frames. 15

25 [Sysname] wlan service-template 1 clear [Sysname-wlan-st-1] beacon ssid-hide beacon-interval beacon-interval interval undo beacon-interval WLAN radio interface view Default Level interval: Specifies the interval between sending beacon frames. The value is in the range of 32 to 8191 Time Units (TUs). One TU equals 1024 microseconds. Use beacon-interval to set the interval for sending beacon frames. Use undo beacon-interval to restore the default. By default, the beacon interval is 100 TUs. The AP sends beacon frames at the specified interval to allow clients to access the WLAN. channel # Specify the beacon interval as 1000 TUs. [Sysname] interface WLAN-Radio 1/0/1 [Sysname-WLAN-Radio1/0/1] beacon-interval 1000 channel { channel-number auto } undo channel WLAN radio interface view Default Level channel-number: Channel number. The channel numbers depend on specific country code and radio mode. The channel list depends on your device model. auto: Specifies that the channel is automatically selected by the device according to the actual environment during system initialization. 16

26 Use channel to configure the operating channel for the radio. Use undo channel to restore the default. By default, auto mode is set. Different radios support different channels. Channels may differ for each country. # Configure interface WLAN-Radio 1/0/2 to operate on channel 6. [Sysname] interface WLAN-Radio 1/0/2 [Sysname-WLAN-Radio1/0/2] radio-type dot11b [Sysname-WLAN-Radio1/0/2] channel 6 channel band-width channel band-width { } [ auto-switch ] } undo channel band-width WLAN radio interface view Default Level 20: Specifies the n channel bandwidth as 20 MHz. 40: Specifies the n channel bandwidth as 40 MHz. auto-switch: Enables automatic bandwidth switch for a 2.4 GHz radio. Use channel band-width to specify the channel bandwidth of the n radio. Use undo channel band-width to restore the default. By default, the channel bandwidth of the an radio is 40 MHz, and that of the gn radio is 20 MHz. When the gn radio operates in 40 MHz mode, the automatic bandwidth switch function is disabled. To enable the function, execute the channel band-width 40 auto-switch command. This command is only effective on n radios. If you change the radio type of an n radio, the default setting for this function of the new radio type is restored. An an or gn radio working in 5 GHz or 2.4 GHz band selects an available 40 MHz channel as the operating channel. If no 40 MHz channel is available, it selects a 20 MHz channel. # Configure the channel bandwidth of the radio as 20 MHz. <sysname> system-view [sysname] interface WLAN-Radio 1/0/1 [sysname-wlan-radio1/0/1] radio-type dot11an 17

27 [sysname-wlan-radio1/0/1] channel band-width 20 client dot11n-only client dot11n-only undo client dot11n-only WLAN radio interface view Default Level None Use client dot11n-only to allow only n clients to access. Use undo client dot11n-only to restore the default. By default, an an radio permits both a and an clients to access, and an gn radio permits both b/g and gn clients to access. The client dot11n-only command prohibits non n clients from access. To provide access for all a/b/g clients, disable this command. # Configure the radio to allow only n clients to access. <sysname> system-view [sysname] interface WLAN-Radio 1/0/1 [sysname-wlan-radio1/0/1] radio-type dot11an [sysname-wlan-radio1/0/1] client dot11n-only client max-count client max-count max-number undo client max-count WLAN service template view Default Level max-number: Maximum number of clients associated to a radio, in the range of 1 to 124. Use client max-count to specify the maximum number of clients associated to an SSID. 18

28 Use undo client max-count to restore the default. By default, the max-number is 64. When the number of clients associated to an SSID reaches the maximum number, the SSID is automatically hidden. # Specify the maximum number of clients associated to SSID service as 10. [Sysname] wlan service-template 1 clear [Sysname-wlan-st-1] ssid service [Sysname-wlan-st-1] client max-count 10 display wlan client Any view Default Level display wlan client { interface wlan-radio [ radio-number ] mac-address mac-address service-template service-template-number } [ verbose ] [ { begin exclude include } regular-expression ] 1: Monitor level wlan-radio radio-number: Displays the information of the clients attached to the specified WLAN-Radio interface. mac-address mac-address: Specifies the MAC address of a client. service-template service-template-number: Displays the client information based on the specified service template. The service template value is in the range of 1 to verbose: Displays detailed client information. : Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Use display wlan client to view the information of a specified client or all clients. # Display information about all clients. <Sysname> display wlan client Total Number of Clients : 3 19

29 Client Information SSID: office MAC Address User Name APID/RID IP Address VLAN f-e NA- 1/ f-e user 1024/ f-e mac@office.com 103 /1 FE:11:12:03::11:25:13 1 Table 3 Command output Field SSID MAC address User Name APID/RID IP Address VLAN SSID with which the client is associated. MAC address of the client. Username of the client: The field is displayed as -NA- if the client adopts plain-text authentication or cipher-text authentication with no username. The field is irrelevant to the portal authentication method. If the client uses the portal authentication method, the field does not display the portal username of the client. ID of the AP or radio that the client is associated with. IP address of the client. VLAN to which the client belongs. # Display detailed information about all clients. <Sysname> display wlan client verbose Total Number of Clients : 1 Client Information MAC Address : ed-ab73 User Name : -NA- AID : 126 Radio Interface : WLAN-Radio1/0/2 SSID : H3C BSSID : a6b1 Port : WLAN-BSS35 VLAN : 1 State : Running Power Save Mode : Active Wireless Mode : 11gn Channel Band-width : 20MHz SM Power Save Enable : Disabled Short GI for 20MHz : Not Supported Short GI for 40MHz : Not Supported Support MCS Set : 0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15 BLOCK ACK-TID 0 : IN QoS Mode : WMM Listen Interval (Beacon Interval) : 1 RSSI : 57 20

30 Rx/Tx Rate : 130/11 Client Type : PRE-RSNA Authentication Method : Open System AKM Method : None 4-Way Handshake State : -NA- Group Key State : -NA- Encryption Cipher : Clear Roam Status : Normal Roam Count : 0 Up Time (hh:mm:ss) : 00:00: Table 4 Command output Field MAC address User Name AID Radio Interface SSID BSSID Port VLAN State Power Save Mode MAC address of the client. Username of the client: The field is displayed as -NA- if the client adopts plain-text authentication or cipher-text authentication with no username. The field is irrelevant to the portal authentication method. If the client uses the portal authentication method, the field does not display the portal username of the client. Association ID of the client. WLAN radio interface. SSID of the client. ID of the BSS. WLAN-BSS interface associated with the client. VLAN to which the client belongs. State of the client such as running. Backup indicates a backup client. Client's power save mode such as active or sleep. Wireless mode such as b, g, and gn. Wireless Mode Channel Band-width SM Power Save Enable Short GI for 20MHz Short GI for 40MHz Support MCS Set NOTE: Support for wireless modes depends on the device model. Channel bandwidth, 20 MHz or 40 MHz. SM Power Save enables a client to have one antenna in the active state, and others in sleep state to save power. Enabled SM Power Save is enabled. Disabled SM Power Save is disabled. Whether the client supports short GI when its channel bandwidth is 20 MHz. Whether the client supports short GI when its channel bandwidth is 40 MHz. MCS supported by the client. 21

31 Field BLOCK ACK-TID 0 BLOCK ACK-TID 3 QoS Mode Listen Interval RSSI Rx/Tx Rate Client Type Authentication Method AKM Method 4-Way Handshake State Group Key State Encryption Cipher Roam Status Roam Count Up Time BLOCK ACK is negotiated based on traffic identifier (TID) 0: OUT Outbound direction. IN Inbound direction. BOTH Both outbound and inbound directions. BLOCK ACK is negotiated based on TID 3: OUT Outbound direction. IN Inbound direction. BOTH Both outbound and inbound directions. WMM indicates that the WMM function is supported; None indicates that the WMM function is not supported. WMM information negotiation is carried out between an AP and a client that both support WMM. Interval for the client to waken up to listen to beacon frames (the unit is the beacon interval) Received signal strength indication. This value indicates the client signal strength detected by the AP. Represents the receiving and sending rates of the frames such as data, management, and control frames. Station type such as RSN, WPA, or Pre-RSN. Authentication method such as open system or shared key. AKM suite used such as Dot1X or PSK. Displays either of the 4-way handshake states: IDLE Displayed in initial state. PTKSTART Displayed when the 4 way handshake is initialized. PTKNEGOTIATING Displayed after sending valid message 3. PTKINITDONE Displayed when the 4-way handshake is successful. Displays the group key state such as: IDLE Displayed in initial state. REKEYNEGOTIATE Displayed after the AC sends the initial message to the client. REKEYESTABLISHED Displayed when re-keying is successful. Encryption cipher such as clear or crypto. Display the roam status such as Normal or Fast Roaming (only Normal available on fat AP) Roaming count of the client (not supported by fat AP) Time for which the client has been associated with the AP. display wlan service-template display wlan service-template [ service-template-number ] [ { begin exclude include } regular-expression ] 22

32 Any view 1: Monitor level service-template-number: Number of a service template, in the range of 1 to If no service template is specified, all service templates are displayed. : Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Use display wlan service-template to display WLAN service template information. # Display the configuration information of service template 1. <Sysname> display wlan service-template 1 Service Template Service Template Number : 1 SSID : nsw-nsw Service Template Type : Crypto Security IE : WPA2(RSN) WPA Authentication Method : Open System SSID-hide : Disabled Cipher Suite : TKIP AES-CCMP WEP Key Index 1 : WEP40 WEP Key Mode : ASCII WEP Key : TKIP Countermeasure Time(s) : 60 PTK Life Time(s) : 180 GTK Rekey : Enabled GTK Rekey Method : Packet-based GTK Rekey Packets : 5000 Service Template Status : Enabled Maximum clients per BSS : Table 5 Command output Field Service Template Number SSID Current service template number. SSID to be associated. 23

33 Field Service Template Type Security IE Authentication Algorithm SSID-hide Cipher Suite WEP Key Index WEP Key Mode TKIP Countermeasure Time(s) PTK Life Time(s) GTK Rekey GTK Rekey Method GTK Rekey Packets Service Template Status Maximum clients per BSS Service template type crypto or clear. Security IE such as WPA, RSN, or WPA2(RSN) Type of authentication used. Enabled or disabled. Cipher suite such as AES-CCMP, TKIP, WEP40, WEP104 or WEP128. Key index to encrypt or decrypt frames. WEP key format. HEX Hexadecimal string. ASCII ASCII character string. Counter measure time for Message Integrity Check (MIC) failure in seconds. PTK lifetime in seconds. GTK rekey configured. GTK rekey method configured such as packet based or time based. Number of GTK rekey packets. Status such as enabled or disabled. Maximum number of associated clients per BSS. display wlan statistics Any view display wlan statistics client { all mac-address mac-address } [ { begin exclude include } regular-expression ] 1: Monitor level all: Displays the statistics of all clients. mac-address mac-address: Displays the statistics of the client with the specified MAC address. : Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. 24

34 Use the display wlan statistics client command to display client statistics. # Display the radio statistics of all clients. <AP1> display wlan statistics client all Client Statistics AP Name : AP1 Radio Id : 1 SSID : office-1 BSSID : 000f-e2ff-7700 MAC Address : c8a-43ff RSSI : Transmitted Frames: Back Ground (Frames/Bytes) : 0/0 Best Effort (Frames/Bytes) : 9/1230 Video (Frames/Bytes) : 0/0 Voice (Frames/Bytes) : 2/76 Received Frames: Back Ground (Frames/Bytes) : 0/0 Best Effort (Frames/Bytes) : 18/2437 Video (Frames/Bytes) : 0/0 Voice (Frames/Bytes) : 7/468 Discarded Frames: Back Ground (Frames/Bytes) : 0/0 Best Effort (Frames/Bytes) : 0/0 Video (Frames/Bytes) : 0/0 Voice (Frames/Bytes) : 5/ Table 6 Command output Field AP Name Radio Id SSID BSSID MAC Address RSSI Transmitted Frames Back Ground Best Effort Video Access point name. Radio ID. SSID to which the client is associated. ID of the BSS. MAC address of the client. Received Signal Strength Indicator. It indicates the client signal strength detected by the AP. Transmitted Frames. Statistics of background traffic. Statistics of best effort traffic. Statistics of video traffic. 25

35 Field Voice Received Frames Discarded Frames Statistics of voice traffic. Received frames. Discarded frames. NOTE: Statistics for background, best effort, video, and voice traffic are only for QoS-capable clients. For QoS-incapable clients, only best effort traffic statistics are available (including SVP packets) and may be inconsistent with the real physical output queues because the priority-queue statistics can only identify priorities carried in Dot11E and WMM packets. Otherwise, statistics of received packets cannot be collected. display wlan statistics service-template Any view display wlan statistics service-template service-template-number [ connect-history ] [ { begin exclude include } regular-expression ] 1: Monitor level service-template-number: Service template number, in the range of 1 to connection-history: Displays the connection history. : Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Use display wlan statistics service-template to display service template statistics. Use display wlan statistics service-template service-template-number connect-history to display the connection statistics for all APs bound to the service template. # Display the statistics of service template 1. <Sysname> display wlan statistics service-template 1 Service Template Statistics Service Template : 1 26