H3C WX Series Access Controllers

Transcription

1 H3C WX Series Access Controllers WLAN Command Reference Hangzhou H3C Technologies Co., Ltd. Software version: WX3000-CMW520-R3308 (WX3024E) WX5004-CMW520-R2308 (WX5000 series) WX6103-CMW520-R2308 (WX6000 series) Document version: 6W

2 Copyright , Hangzhou H3C Technologies Co., Ltd. and its licensors All rights reserved Trademarks No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Hangzhou H3C Technologies Co., Ltd. H3C,, Aolynk,, H 3 Care,, TOP G,, IRF, NetPilot, Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V 2 G, V n G, PSPT, XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd. Notice All other trademarks that may be mentioned in this manual are the property of their respective owners The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute the warranty of any kind, express or implied.

3 Preface The H3C WX documentation set includes 10 command references, which describe the commands and command syntax options available for the H3C WX Series Access Controllers. The WLAN Command Reference describes the configuration commands for system maintenance and debugging, NQA, NTP, IPC, SNMP, RMON, mirroring, and information center. NOTE: Support of the H3C WX series access controllers for commands may vary by device model. For the command matrixes, see About the WX Series Access Controllers Command References. This preface includes: Audience Conventions About the H3C WX documentation set Obtaining documentation Technical support Documentation feedback Audience This documentation is intended for: Network planners Field technical support and servicing engineers Network administrators working with the WX series Conventions This section describes the conventions used in this documentation set. Command conventions Convention Boldface Italic Bold text represents commands and keywords that you enter literally as shown. Italic text represents arguments that you replace with actual values. [ ] Square brackets enclose syntax choices (keywords or arguments) that are optional. { x y... } [ x y... ] Braces enclose a set of required syntax choices separated by vertical bars, from which you select one. Square brackets enclose a set of optional syntax choices separated by vertical bars, from which you select one or none.

4 Convention { x y... } * [ x y... ] * &<1-n> Asterisk marked braces enclose a set of required syntax choices separated by vertical bars, from which you select at least one. Asterisk marked square brackets enclose optional syntax choices separated by vertical bars, from which you select one choice, multiple choices, or none. The argument or keyword and argument combination before the ampersand (&) sign can be entered 1 to n times. # A line that starts with a pound (#) sign is comments. GUI conventions Convention Boldface Window names, button names, field names, and menu items are in Boldface. For example, the New User window appears; click OK. > Multi-level menus are separated by angle brackets. For example, File > Create > Folder. Symbols Convention WARNING CAUTION IMPORTANT NOTE TIP An alert that calls attention to important information that if not understood or followed can result in personal injury. An alert that calls attention to important information that if not understood or followed can result in data loss, data corruption, or damage to hardware or software. An alert that calls attention to essential information. An alert that contains additional or supplementary information. An alert that provides helpful information. Port numbering in examples The port numbers in this document are for illustration only and might be unavailable on your device. About the H3C WX documentation set The H3C WX documentation set includes: Category Documents Purposes Product description and specifications Marketing brochures Technology white papers Describe product specifications and benefits. Provide an in-depth description of software features and technologies. Hardware specifications and installation Card manuals Installation guide Provide the hardware specifications of cards and describe how to install and remove the cards. Provides a complete guide to hardware installation and hardware specifications.

5 Category Documents Purposes Software configuration Operations and maintenance Getting started guide Configuration guides Command references Web-based configuration guide Release notes Guides you through the main functions of your device, and describes how to install and log in to your device, perform basic configurations, maintain software, and troubleshoot your device. Describe software features and configuration procedures. Provide a quick reference to all available commands. Describes configuration procedures through the web interface. Provide information about the product release, including the version history, hardware and software compatibility matrix, version upgrade information, technical support information, and software upgrading. Obtaining documentation You can access the most up-to-date H3C product documentation on the World Wide Web at Click the links on the top navigation bar to obtain different categories of product documentation: [Technical Support & Documents > Technical Documents] Provides hardware installation, software upgrading, and software feature configuration and maintenance documentation. [Products & Solutions] Provides information about products and technologies, as well as solutions. [Technical Support & Documents > Software Download] Provides the documentation released with the software version. Technical support service@h3c.com Documentation feedback You can your comments about product documentation to info@h3c.com. We appreciate your comments.

6 Contents WLAN interface configuration commands 1 default 1 description 1 display interface wlan-dbss 2 display interface wlan-ess 4 display interface wlan-mesh 5 interface wlan-ess 6 interface wlan-mesh 7 WLAN configuration commands 8 WLAN global service control commands 8 wlan enable MAC configuration commands 8 a-mpdu enable 8 a-msdu enable 9 ani enable 10 antenna type 10 beacon ssid-hide 11 beacon-interval 11 bind wlan-ess 12 broadcast-probe reply 13 channel 13 channel band-width 14 channel lock 15 client dot11n-only 16 client forwarding-mode local 16 client idle-timeout 17 client keep-alive 18 client max-count (radio policy view) 18 client max-count (service template view) 19 country-code 19 display wlan client 20 display wlan country-code 24 display wlan radio-policy 25 display wlan service-template 29 display wlan statistics ap connect-history 30 display wlan statistics client 31 display wlan statistics radio 33 display wlan statistics service-template 37 distance 39 dtim 40 fast-association enable 40 fragment-threshold 41 long-retry threshold 41 max-power 42 max-rx-duration 43 nas-id 43 nas-port-id 44 power lock 44 i

7 preamble 45 protection-mode 46 radio 46 radio type 47 radio-policy 48 reset wlan client 48 reset wlan statistics 49 rts-threshold 49 service-template (radio view) 50 service-template (service template view) 51 short-gi enable 51 short-retry threshold 52 shut-all-led enable 53 ssid 53 trap enable 54 wlan country-code 54 wlan link-test 57 wlan radio 58 wlan radio-policy 59 wlan radio-policy auto-create 60 wlan service-template 60 AC-AP tunnel configuration commands 61 ac 61 ap-name 62 backup-ac 63 cir 63 cpu-usage threshold 64 data-tunnel encryption enable 64 description 65 display wlan ap 66 display wlan ap address 73 display wlan ap radio 74 display wlan ap reboot-log 75 display wlan ap-model 76 dns domain 78 dns server 78 echo-interval 79 gateway 80 hybrid-remote-ap enable 80 ip address 81 ipv6 address 82 jumboframe enable 82 map-configuration 83 memory-usage threshold 84 priority level 84 provision 85 reset wlan ap 85 reset wlan ap provision 86 reset wlan ap reboot-log 86 save wlan ap provision 87 serial-id 87 tunnel encryption ipsec pre-shared-key 88 vlan pvid 89 vlan tagged 89 ii

8 vlan untagged 90 wlan ap 91 wlan apdb 91 wlan ap-execute 92 wlan ap-provision ac 92 wlan ap-provision dns domain 93 wlan ap-provision dns server 94 wlan auto-ap enable 94 wlan auto-ap persistent 95 wlan backup-ac 96 wlan lwapp discovery-policy 96 User isolation commands 97 display user-isolation statistics 97 reset user-isolation statistics 98 user-isolation enable 98 user-isolation permit broadcast 99 user-isolation vlan enable 99 user-isolation vlan permit-mac 100 AP group configuration commands 101 ap 101 description 101 display wlan ap-group 102 wlan ap-group 103 wlan permit-ap-group 103 SSID-based access control configuration commands 104 wlan permit-ssid 104 Uplink detection commands 105 wlan uplink track 105 AC hot backup configuration commands 105 display hot-backup state 105 hot-backup enable 106 hot-backup hellointerval 107 hot-backup vlan 108 wlan backup-ac switch-delay 108 WLAN security configuration commands 110 authentication-method 110 cipher-suite 110 gtk-rekey client-offline enable 111 gtk-rekey enable 112 gtk-rekey method 112 ptk-lifetime 113 security-ie 113 tkip-cm-time 114 wep default-key 115 wep key-id 117 wep mode 117 WLAN roaming configuration commands 119 display wlan client 119 display wlan client roam-track 121 IACTP configuration commands 122 authentication-mode 122 display wlan mobility-group 124 member 125 iii

9 mobility-group enable 126 mobility-tunnel 127 source 127 wlan mobility-group 128 WLAN RRM configuration commands 129 ap radio 129 autochannel-set avoid-dot11h 130 channel holddown-time 130 description 131 display wlan ap rrm-history 132 display wlan ap rrm-status 133 display wlan mesh calibrate-channel history 135 display wlan rrm 136 display wlan rrm-calibration-group 139 dot11a 140 dot11a adjacency-factor 141 dot11a calibrate-channel 141 dot11a calibrate-channel pronto 142 dot11a calibrate-channel self-decisive 143 dot11a calibrate-power 143 dot11a calibrate-power min 144 dot11a calibrate-power pronto 144 dot11a calibrate-power self-decisive 145 dot11a calibrate-power threshold 145 dot11a calibration-interval 146 dot11a crc-error-threshold 146 dot11a exclude-channel 147 dot11a interference-threshold 148 dot11a max-bandwidth 148 dot11a tolerance-level 149 dot11b 149 dot11b max-bandwidth 150 dot11bg adjacency-factor 151 dot11bg calibrate-channel 151 dot11bg calibrate-channel pronto 152 dot11bg calibrate-channel self-decisive 152 dot11bg calibrate-power 153 dot11bg calibrate-power min 154 dot11bg calibrate-power pronto 154 dot11bg calibrate-power self-decisive 155 dot11bg calibrate-power threshold 155 dot11bg calibration-interval 156 dot11bg crc-error-threshold 156 dot11bg exclude-channel 157 dot11bg interference-threshold 158 dot11bg tolerance-level 158 dot11g 159 dot11g max-bandwidth 160 dot11g protection enable 160 dot11g protection-mode 161 dot11n mandatory maximum-mcs 161 dot11n max-bandwidth 162 dot11n multicast-rate 163 dot11n protection enable 163 iv

10 dot11n protection-mode 164 dot11n support maximum-mcs 164 mesh calibrate-channel 165 mesh calibrate-channel pronto 166 mesh calibrate-channel self-decisive 166 power-constraint 167 power holddown-time 167 scan channel 168 scan report-interval 168 scan type 169 spectrum-management enable 169 wlan rrm 170 wlan rrm-calibration-group 171 WLAN load balancing configuration commands 171 ap radio 171 description 172 display wlan load-balance-group 173 load-balance access-denial 173 load-balance rssi-threshold 174 load-balance session 175 load-balance traffic 175 wlan load-balance-group 176 Band navigation configuration commands 177 band-navigation aging-time 177 band-navigation balance access-denial 177 band-navigation balance session 178 band-navigation enable (AP template view) 178 band-navigation enable (WLAN RRM view) 179 band-navigation rssi-threshold 180 WLAN IDS configuration commands 181 WLAN IDS rogue detection configuration commands 181 countermeasures enable 181 countermeasures mode 181 device aging-duration 182 device attack mac-address 183 device permit 183 device-detection enable 184 display wlan ids attack-list 185 display wlan ids detected 187 display wlan ids permitted 191 display wlan ids rogue-history 192 wlan ids 194 work-mode monitor 194 reset wlan ids detected 195 reset wlan ids rogue-history 195 WLAN IDS attack detection configuration commands 196 attack-detection enable 196 display wlan ids history 196 display wlan ids statistics 198 reset wlan ids history 199 reset wlan ids statistics 200 WLAN frame filtering configuration commands 201 display wlan blacklist 201 v

11 display wlan whitelist 202 dynamic-blacklist enable 203 dynamic-blacklist lifetime 203 reset wlan dynamic-blacklist 204 static-blacklist mac-address 204 whitelist mac-address 205 WLAN QoS configuration commands 207 bandwidth-guarantee enable 207 bandwidth-guarantee service-template 207 client-rate-limit direction (WLAN service-based) 208 client-rate-limit direction (radio-based) 209 display wlan bandwidth-guarantee 209 display wlan client-rate-limit 211 display wlan wmm 213 reset wlan wmm 216 wmm cac policy 217 wmm edca radio 218 wmm edca client (ac-vo and ac-vi) 219 wmm edca client (ac-be and ac-bk) 220 wmm enable 221 wmm svp map-ac 222 WLAN mesh link configuration commands 224 bind wlan-mesh 224 display wlan mesh-link ap 224 display wlan mesh-profile 226 display wlan mp-policy 227 link-backhaul-rate 229 link-initiation enable 230 link-keep-alive 230 link-hold-rssi 231 link-hold-time 231 link-saturation-rssi 232 link-switch-margin 232 link-maximum-number 233 link rate-mode 234 mesh-id 234 mesh-profile 235 mesh-profile enable 235 mesh peer-mac-address 236 mkd-service enable 237 mlsp enable 237 mlsp-proxy mac-address 238 mp-policy 239 portal-service enable 239 probe-request-interval 240 role-authenticator enable 240 temporary-link enable 241 wlan mesh-link-test 241 wlan mesh-profile 242 wlan mkd-id 243 wlan mp-policy 243 WLAN sniffer configuration commands 245 display wlan capture 245 vi

12 wlan capture packet-limit 246 wlan capture file-name 246 wlan capture start 247 wlan capture stop 248 Wireless location configuration commands 249 display wlan rfid-tracking radio 249 rfid-tracking mode 250 wlan rfid-tracking enable 250 wlan rfid-tracking vendor-port 251 WLAN optimization commands 252 wlan option blink enable 252 wlan option broadcast-buffer enable 252 wlan option channel-reuse 253 wlan option channel-share 253 wlan option client-reconnect-trigger 254 wlan option client-reject 255 wlan option dot11n-restraint 255 wlan option fair-schedule enable 256 wlan option green-ap enable 256 wlan option multi-service enable 257 wlan option power-supply 257 wlan option rate-algorithm 258 wlan option rx-broadcast-all enable 259 wlan option signal-ignore 259 wlan option tpc enable 260 wlan option traffic-shaping enable 260 Index 262 vii

13 WLAN interface configuration commands default default WLAN-ESS interface view, WLAN mesh interface view None Use default to restore the default settings for a WLAN-ESS or WLAN-MESH interface. # Restore the default settings of WLAN-ESS interface 1. [Sysname] interface WLAN-ESS 1 [Sysname-WLAN-ESS1] default This command will restore the default settings. Continue? [Y/N]:y description description text undo description WLAN-ESS interface view, WLAN mesh interface view text: for the current interface, a string of 1 to 80 characters. The device supports the following types of characters or symbols: standard English characters (numbers and case-sensitive letters), special English characters, spaces, and other characters or symbols that conform to the Unicode standard. 1

14 NOTE: An interface description can be the mixture of English characters and other Unicode characters. The mixed description cannot exceed the specified length. To use a type of Unicode characters or symbols in an interface description, you must install the corresponding Input Method Editor (IME) and log in to the device through remote login software that supports this character type. Each Unicode character or symbol (non-english characters) takes the space of two regular characters. When the length of a description string reaches or exceeds the maximum line width on the terminal software, the software starts a new line, possibly breaking a Unicode character into two parts. As a result, garbled characters may be displayed at the end of a line. Use description to set the description of the current interface. Use undo description to restore the default. By default, the description for an interface is interface-name + interface, for example WLAN-ESS1 Interface. # Set the description for WLAN-ESS 1 to WLAN-ESS Interface. [Sysname] interface WLAN-ESS 1 [Sysname-WLAN-ESS1] description WLAN-ESS Interface display interface wlan-dbss Any view display interface [ wlan-dbss ] [ brief [ down ] ] [ { begin exclude include } regular-expression ] display interface wlan-dbss interface-number [ brief ] [ { begin exclude include } regular-expression ] 1: Monitor level interface-number: Specifies the number of a WLAN-DBSS interface. brief: Displays brief interface information. If you do not provide this keyword, the command displays detailed interface information. down: Displays down interface information and the cause. If you do not provide this keyword, the command output is not filtered based on the down interface status. : Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. 2

15 include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Use display interface wlan-dbss to display information about a WLAN-DBSS interface. If you do not specify the wlan-dbss keyword, the command displays information about all interfaces on the device. If you specify the wlan-dbss keyword, the command displays information about all WLAN-DBSS interfaces. # Display information about all WLAN-DBSS interfaces. <Sysname> display interface wlan-dbss WLAN-DBSS1:0 current state: UP IP Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: 000f-e212-ff01 : WLAN-DBSS1:0 Interface PVID: 2 Port link-type: access Tagged VLAN ID : none Untagged VLAN ID : 2 Port priority: 0 Last clearing of counters: Never Maximum client number: 64 Clients: 0 associating, 1 associated Input (total): 18 packets, 1830 bytes 15 unicasts, 1500 bytes 3 multicasts/broadcasts, 330 bytes Output (total): 5 packets, 384 bytes 2 unicasts, 102 bytes 3 multicasts/broadcasts, 282 bytes Table 1 Command output Field WLAN-DBSS1:0 current state IP Packet Frame Type Physical link state of a WLAN-DBSS interface. Output frame encapsulation type. MAC address of output frames. Hardware Address PVID Port link-type Tagged VLAN ID Untagged VLAN ID IMPORTANT: WLAN-DBSS is dynamically generated, so the displayed information is meaningless. of the interface. Default VLAN ID of the interface. Port link type, which can be access only. VLANs whose packets are sent through the port with VLAN tag kept. VLANs whose packets are sent through the port with VLAN tag stripped off. 3

16 Field Last clearing of counters: Never Maximum client number Clients: 0 associating, 0 associated Input (total) : 18 packets, 1830 bytes : 15 unicasts, 1500 bytes : 3 multicasts/broadcasts, 282 bytes Output (total): 5 packets, 384 bytes : 2 unicasts, 102 bytes : 3 multicasts/broadcasts, 282 bytes Time when the reset counts interface command was last used to clear statistics on the interface. Never indicates that the reset counts interface command was never used since the device was started. Maximum number of clients allowed to access. Number of clients being associating, number of clients associated. Input packet statistics of the interface: Number of packets, number of bytes. Number of unicast packets, number of bytes of unicast packets. Number of multicast/broadcast packets, number of bytes of multicast/broadcast packets. Output packet statistics of the interface: Number of packets, number of bytes. Number of unicast packets, number of bytes of unicast packets. Number of multicast/broadcast packets, number of bytes of multicast/broadcast packets. display interface wlan-ess Any view display interface [ wlan-ess ] [ brief [ down ] ] [ { begin exclude include } regular-expression ] display interface wlan-ess interface-number [ brief ] [ { begin exclude include } regular-expression ] 1: Monitor level interface-number: Specifies the number of a WLAN-ESS interface. The value range for this argument varies by device model. brief: Displays brief interface information. If you do not provide this keyword, the command displays detailed interface information. down: Displays down interface information and the cause. If you do not provide this keyword, the command output is not filtered based on the down interface status. : Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. 4

17 Use display interface wlan-ess to display information about a WLAN-ESS interface. If you do not specify the wlan-ess keyword, the command displays information about all interfaces on the device. If you specify the wlan-ess keyword, and do not specify the interface-number argument, the command displays information about all WLAN-ESS interfaces. # Display information about interface WLAN-ESS 1. <Sysname> display interface wlan-ess 1 WLAN-ESS1 current state: UP IP Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: 000f-e212-ff01 : WLAN-ESS1 Interface PVID: 2 Port link-type: access Tagged VLAN ID : none Untagged VLAN ID : 2 Port priority: 0 Last clearing of counters: Never For the display interface wlan-ess command output description, see Table 1. display interface wlan-mesh Any view display interface [ wlan-mesh ] [ brief [ down ] ] [ { begin exclude include } regular-expression ] display interface wlan-mesh interface-number [ brief ] [ { begin exclude include } regular-expression ] 1. Monitor level interface-number: Specifies a WLAN mesh interface by its interface number. The specified interface must be one that already exists. brief: Displays brief interface information. If you do not provide this keyword, the command displays detailed interface information. down: Displays down interface information and the cause. If you do not provide this keyword, the command output is not filtered based on the down interface status. : Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. 5

18 regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Use display interface wlan-mesh to display information about the specified WLAN mesh interface or all WLAN mesh interfaces that already exist if no interface is specified. If you do not specify the wlan-mesh keyword, the command displays information about all interfaces on the device. If you specify the wlan-mesh keyword, and do not specify the interface-number argument, the command displays information about all WLAN-MESH interfaces. # Display information about WLAN mesh interface 3. <Sysname> display interface wlan-mesh 3 WLAN-MESH3 current state: DOWN IP Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: 000f-e2c : WLAN-MESH3 Interface PVID: 1 Port link-type: access Tagged VLAN ID : none Untagged VLAN ID : 1 Port priority: 0 Last clearing of counters: Never For more information about the fields in the output, see Table 1. interface wlan-ess interface wlan-ess interface-number undo interface wlan-ess interface-number System view interface-number: Number of a WLAN-ESS interface. The value range for this argument varies by device model. Use interface wlan-ess to enter WLAN-ESS interface view. If the WLAN-ESS interface identified by the interface-number argument does not exist, this command creates the WLAN-ESS interface first. Use undo interface wlan-ess to remove a WLAN-ESS interface. The operation to remove a WLAN-ESS interface fails if WLAN-DBSS interfaces created on the WLAN-ESS interface exist. # Create the WLAN-ESS interface numbered 1. 6

19 [Sysname] interface wlan-ess 1 [Sysname-WLAN-ESS1] interface wlan-mesh interface wlan-mesh interface-number undo interface wlan-mesh interface-number System view 1. System level interface-number: Specifies a WLAN mesh interface by its number, in the range of 1 to 32. Use interface wlan-mesh to enter WLAN mesh interface view. If the specified WLAN mesh interface does not exist, the command creates the WLAN mesh interface first. Use undo interface wlan-mesh to delete the specified WLAN mesh interface. # Create WLAN mesh interface 2. [Sysname] interface wlan-mesh 2 [Sysname-WLAN-MESH2] 7

20 WLAN configuration commands WLAN global service control commands wlan enable wlan enable undo wlan enable System view None Use wlan enable to enable WLAN service. Use undo wlan enable to disable WLAN service. By default, WLAN service is enabled. NOTE: All WLAN services are available if and only if WLAN service is enabled. # Enable WLAN service if it is disabled. [Sysname] wlan enable MAC configuration commands a-mpdu enable a-mpdu enable undo a-mpdu enable Radio view 8

21 None Use a-mpdu enable to enable the A-MPDU function for the radio. Use undo a-mpdu enable to disable the A-MPDU function for the radio. By default, the A-MPDU function is enabled. This command is only effective on n radios. If you change the radio type of an n radio, the default setting for this function of the new radio type is restored. # Disable the A-MPDU function. [Sysname] wlan ap ap3 model WA2620-AGN [Sysname-wlan-ap-ap3] radio 1 type dot11an [Sysname-wlan-ap-ap3-radio-1] undo a-mpdu enable a-msdu enable a-msdu enable undo a-msdu enable Radio view None Use a-msdu enable to enable the A-MSDU function for the radio. Use undo a-msdu enable to disable the A-MSDU function for the radio. By default, the A-MSDU function is enabled. This command is only effective on n radios. If you change the radio type of an n radio, the default setting for this function of the new radio type is restored. The device only receives but does not send A-MSDU frames. # Disable the A-MSDU function. 9

22 ani enable [Sysname] wlan ap ap3 model WA2620-AGN [Sysname-wlan-ap-ap3] radio 1 type dot11an [sysname-wlan-ap-ap3-radio-1] undo a-msdu enable ani enable undo ani enable Radio view None Use ani enable to enable the Adaptive Noise Immunity (ANI) function. Use undo ani enable to disable the ANI function. By default, ANI is enabled. After the ANI function is enabled, the device automatically adjusts the noise immunity level according to the surrounding signal environment to eliminate RF interference. # Disable ANI. [Sysname] wlan ap ap1 model WA2100 [Sysname-wlan-ap-ap1] radio 1 [Sysname-wlan-ap-ap1-radio-1] undo ani enable antenna type antenna type type undo antenna type Radio view type: Specifies the antenna type. 10

23 Use antenna type to specify the antenna type. Use undo antenna type to restore the default. The default setting of the command depends on the device model. # Specify the antenna type. [Sysname] wlan ap ap1 model wa2620e-agn [Sysname-wlan-ap-ap1] radio 1 [Sysname-wlan-ap-ap1-radio-1] antenna type C5060 beacon ssid-hide beacon ssid-hide undo beacon ssid-hide Service template view None Use beacon ssid-hide to configure hiding the Service Set Identifier (SSID) in beacon frames. Use undo beacon ssid-hide to restore the default. By default, the SSID is not hidden in beacon frames. If the SSID in beacon frames is hidden, the SSID must be configured for the clients to associate with the AP. Hiding the SSID in beacon frames does little good to wireless security. Allowing the advertising of the SSID in beacon frames enables a client to discover an AP more easily. # Hide the SSID in beacon frames. [Sysname] wlan service-template 1 clear [Sysname-wlan-st-1] beacon ssid-hide beacon-interval beacon-interval interval undo beacon-interval 11

24 Radio policy view interval: Specifies the interval for sending beacon frames. The value is in the range of 32 to 8191 time units (TUs). Use beacon-interval to set the interval for sending beacon frames. Beacon frames are transmitted at a regular interval to allow mobile clients to join the network. Use undo beacon-interval to restore the default beacon interval. By default, the beacon interval is 100 TUs. # Specify the beacon interval as 1000 TUs. [Sysname] wlan radio-policy radio1 [Sysname-wlan-rp-radio1] beacon-interval 1000 bind wlan-ess bind wlan-ess interface-index undo bind wlan-ess Service template view interface-index: Specifies the index of the WLAN-ESS interface. The value range varies with AC models. For more information about AC models, see About the WX Series Access Controllers Command References. Use bind wlan-ess to bind the specified WLAN-ESS interface to the service template. Use undo bind wlan-ess to unbind the WLAN-ESS interface to the service template. By default, no WLAN-ESS interface is bound to the service template. # Bind interface WLAN-ESS 1 to service template 1. [Sysname] interface WLAN-ESS 1 [Sysname-WLAN-ESS1] quit 12

25 [Sysname] wlan service-template 1 clear [Sysname-wlan-st-1] bind wlan-ess 1 broadcast-probe reply broadcast-probe reply undo broadcast-probe reply AP template view None Use broadcast-probe reply to enable the AP to respond to the probe requests that carry no SSID. Use undo broadcast-probe reply to configure the AP to respond only to probe requests that carry an SSID. By default, an AP responds to probe requests that carry no SSID. channel # Enable AP3 to respond to probe requests that carry no SSID. [Sysname] wlan ap ap3 model WA2100 [Sysname-wlan-ap-ap3] broadcast-probe reply channel { channel-number auto } undo channel Radio view channel-number: Specifies a channel. The working channels depend on the country code and radio mode. auto: Specifies that the channel is automatically selected by the device according to the actual environment during system initialization. 13

26 Use channel to specify a channel for the radio. Different radios support different channels. Channels may differ for each country. Use undo channel to restore the default. By default, auto mode is set. The channel channel-number, if specified, is always used, and you do not need to configure the channel lock command. If you configure the channel lock command first, and then the channel channel-number command, the earlier configuration is overwritten. Before configuring DFS, be sure that the AC adopts the auto mode. Otherwise, DFS does not work. For more information about DFS, see WLAN Configuration Guide. Related commands: channel lock, dot11a calibrate-channel, and dot11bg calibrate-channel. # Specify channel 6 for radio 1 of AP3. [Sysname] wlan ap ap3 model WA2100 [Sysname-wlan-ap-ap3] radio 1 type dot11b [Sysname-wlan-ap-ap3-radio-1] channel 6 channel band-width channel band-width { } undo channel band-width Radio view 20: Specifies the channel bandwidth of the n radio as 20 MHz. 40: Specifies the channel bandwidth of the n radio as 40 MHz. Use channel band-width to specify the channel bandwidth of the n radio. Use undo channel band-width to restore the default. By default, the channel bandwidth of the an radio is 40 MHz, and that of the gn radio is 20 MHz. This command is only effective on n radios. If you change the radio type of an n radio, the default setting for this function of the new radio type is restored. If the channel bandwidth of the radio is set to 40 MHz, a 40 MHz channel is used as the working channel. If no 40 MHz channel is available, only a 20 MHz channel can be used. 14

27 # Configure the channel bandwidth of the radio as 20 MHz. [Sysname]wlan ap ap3 model WA2620-AGN [Sysname-wlan-ap-ap3] radio 1 type dot11an [Sysname-wlan-ap-ap3-radio-1] channel band-width 20 channel lock channel lock undo channel lock Radio view None Use channel lock to lock the current channel. Use undo channel lock to unlock the current channel. By default, the current channel is not locked. The channel clock command takes effect only when the radio adopts the auto mode (configured with the channel auto command). If you configure the channel lock command and then enable the radio by using the radio enable command, the radio automatically selects an optimal channel, and then locks the channel. When the AC detects any radar signals on its channel, it immediately selects another channel even if the channel lock command is configured, and locks the new channel. If you configure the channel lock command first, and then enable dynamic frequency selection (DFS), DFS does not work because the channel is locked. Therefore, before enabling DFS, make sure the current channel is not locked. If you enable DFS and then configure the channel lock command, the last selected channel is locked. For more information about DFS, see the WLAN Configuration Guide. Related commands: channel, dot11a calibrate-channel, and dot11bg calibrate-channel. # Lock the current channel. [Sysname] wlan ap ap3 model WA2100 [Sysname-wlan-ap-ap3] radio 1 type dot11g [Sysname-wlan-ap-ap3-radio-1] channel lock 15

28 client dot11n-only client dot11n-only undo client dot11n-only Radio view None Use client dot11n-only to allow only n clients to access. Use undo client dot11n-only to restore the default. By default, an an radio permits both a and an clients to access, and an gn radio permits both b/g and gn clients to access. An n radio supports both 2.4GHz and 5GHz bands and can allow a/b/g stations to access, providing good compatibility. The client dot11n-only command prohibits non n clients from access. Therefore, if you want to provide access for all a/b/g clients, disable this command. Related commands: dot11n mandatory maximum-mcs. # Configure the radio to allow only n clients to access. [Sysname]wlan ap ap3 model WA2620-AGN [Sysname-wlan-ap-ap3] radio 1 type dot11an [Sysname-wlan-ap-ap3-radio-1] client dot11n-only client forwarding-mode local client forwarding-mode local [ vlan vlan-id-list ] undo client forwarding-mode local Service template view vlan vlan-id-list: VLANs used for local forwarding. This argument is expressed in the format of vlan-id-list = { vlan-id1 [ to vlan-id2 ] }& <1-10>, where vlan-id is in the range of 1 to 4094 and &<1-10> indicates that you can specify up to 10 VLAN IDs or VLAN ID ranges. If this parameter is not specified, local forwarding is enabled on all the VLANs. 16

29 Use client forwarding-mode local to enable AP local forwarding in the service template. Use undo client forwarding-mode local to disable AP local forwarding in the service template. By default, remote forwarding is enabled in the service template. After the service template is bound with an AP: If local forwarding is enabled in the service template, the AP forwards data frames from associated clients. If remote forwarding is enabled, the AC forwards data frames from associated clients. Local forwarding greatly reduces the load of the AC by enabling APs to forward client traffic, especially in a WLAN servicing many clients. # Enable local forwarding in service template 1. [Sysname] wlan service-template 1 clear [Sysname-wlan-st-1] client forwarding-mode local client idle-timeout client idle-timeout interval undo client idle-timeout AP template view interval: Specifies the time for which the link between AP and client ( power-save or awake ) can be idle. The value is in the range of 60 to seconds. Use client idle-timeout to specify the client idle timeout interval. If a client is idle for more than the specified interval, or, if the AP does not receive any data from the client within a specified interval, the client is removed from the network. Use undo client idle-timeout to restore the default. By default, the client idle timeout interval is 3600 seconds. # Specify the client idle timeout as 600 seconds. [Sysname] wlan ap ap3 model WA2100 [Sysname-wlan-ap-ap3] client idle-timeout

30 client keep-alive client keep-alive interval undo client keep-alive AP template view interval: Interval between keep-alive requests. The value is in the range of 3 to 1800 seconds. Use client keep-alive to specify the client keep-alive interval. Use undo client keep-alive to disable the client keep-alive functionality. The client keep-alive mechanism is used to detect clients segregated from the system due to various reasons such as power failure or crash, and disconnect them from AP. By default, the client keep-alive functionality is disabled. # Specify the client keep-alive interval as 60 seconds. [Sysname] wlan ap ap3 model WA2100 [Sysname-wlan-ap-ap3] client keep-alive 60 client max-count (radio policy view) client max-count max-number undo client max-count Radio policy view max-number: Maximum number of allowed clients, in the range of 1 to 124. Use client max-count to specify the maximum number of allowed clients for the radio policy. Use undo client max-count to restore the default. The default maximum number is

31 # Specify that radio policy radio1 can accommodate at most 10 clients. [Sysname] wlan radio-policy radio1 [Sysname-wlan-rp-radio1] client max-count 10 client max-count (service template view) client max-count max-number undo client max-count Service template view max-number: Maximum number of clients associated to an SSID, in the range of 1 to 64. Use client max-count to specify the maximum number of clients associated to an SSID on a radio. Use undo client max-count to restore the default. By default, up to 64 clients can be associated to an SSID on a radio. When the number of clients associated to an SSID on a radio reaches the maximum number, the SSID is automatically hidden. # Specify the maximum number of clients associated to the SSID service on a radio as 10. [Sysname] wlan service-template 1 clear [Sysname-wlan-st-1] ssid service [Sysname-wlan-st-1] client max-count 10 country-code country-code code undo country code AP template view code: Country code. For information about country codes, see Table

32 Use country-code to specify the country code of the AP. Use undo country-code to remove the configuration. By default, no country code is configured for the AP, and the AP uses the global country code. An AP configured with a country code uses its own country code. Related commands: wlan country-code, display wlan country-code. # Specify the country code for the AP as US. [Sysname] wlan ap ap1 model WA2620-AGN [Sysname-wlan-ap-ap1] country-code us display wlan client Any view display wlan client [ ap ap-name [ radio radio-number ] mac-address mac-address service-template service-template-number ] [ verbose ] [ { begin exclude include } regular-expression ] 1: Monitor level ap ap-name: Displays the information of clients which are connected to the specified AP. radio radio-number: Displays the information of clients attached to the specified radio. The radio number value is 1. mac-address mac-address: Specifies the MAC address of a client. service-template service-template-number: Displays client information based on the specified service template. The service template number is in the range of 1 to verbose: Displays detailed client information. : Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Use display wlan client to display WLAN client information. The information is displayed in the order of client MAC address. 20

33 # Display information about all clients. <Sysname> display wlan client Total Number of Clients : 3 Client Information SSID: office MAC Address User Name APID/RID IP Address VLAN f-e NA- 1/ f-e user 1024/ f-e mac@office.com 103 /1 FE:11:12:03::11:25:13 1 Table 2 Command output Field SSID MAC address User Name APID/RID IP Address VLAN SSID with which the client is associated. MAC address of the client. Username of the client: The field displays -NA- if the client adopts plaintext authentication or ciphertext authentication with no username. The field is irrelevant to the portal authentication method. If the client uses the portal authentication method, the field does not display the portal username of the client. ID of the AP or radio that the client is associated with. IP address of the client. VLAN to which the client belongs. # Display detailed information about all clients. <Sysname> display wlan client verbose Total Number of Clients : 1 Client Information MAC Address : 001e-58f6-01bf User Name : -NA- AID : 1 AP Name : 2 Radio Id : 2 SSID : office BSSID : e Port : WLAN-DBSS0:3 VLAN : 1 State : Running Power Save Mode : Active Wireless Mode : 11gn Channel Band-width : 20MHz SM Power Save Enable : Disabled Short GI for 20MHz : Not Supported 21

34 Short GI for 40MHz : Supported Support MCS Set : 0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15 BLOCK ACK-TID 0 : IN QoS Mode : WMM Listen Interval (Beacon Interval) : 10 RSSI : 62 Rx/Tx Rate : 130/11 Client Type : PRE-RSNA Authentication Method : Open System AKM Method : None 4-Way Handshake State : -NA- Group Key State : -NA- Encryption Cipher : Clear Roam Status : Normal Roam Count : 0 Up Time (hh:mm:ss) : 00:01: Table 3 Command output Field MAC address User Name AID AP Name Radio ID SSID BSSID Port VLAN State Power Save Mode Wireless Mode Channel Band-width SM Power Save Enable MAC address of the client. Username of the client: The field displays -NA- if the client adopts plaintext authentication or ciphertext authentication with no username. The field is irrelevant to the portal authentication method. If the client uses the portal authentication method, the field does not display the portal username of the client. Association ID of the client. Name of the associated access point. ID of the radio associated with the client. SSID of the client. ID of the BSS. WLAN-DBSS interface associated with the client. VLAN to which the client belongs. State of the client such as running. Backup indicates a backup client. Client's power save mode such as active or sleep. Wireless mode such as a, b, g, gn, an. Channel bandwidth, 20 MHz or 40 MHz. SM Power Save enables a client to have one antenna in the active state, and others in sleep state to save power. Enabled SM Power Save is enabled. Disabled SM Power Save is disabled. 22

35 Field Short GI for 20MHz Short GI for 40MHz Support MCS Set BLOCK ACK-TID 0 BLOCK ACK-TID 3 QoS Mode Listen Interval RSSI Rx/Tx Rate Client Type Authentication Method AKM Method 4-Way Handshake State Group Key State Encryption Cipher Roam Status Whether the client supports short GI when its channel bandwidth is 20 MHz. Whether the client supports short GI when its channel bandwidth is 40 MHz. MCS supported by the client. BLOCK ACK is negotiated based on traffic identifier (TID) 0: OUT Outbound direction. IN Inbound direction. BOTH Both outbound and inbound directions. BLOCK ACK is negotiated based on TID 3: OUT Outbound direction. IN Inbound direction. BOTH Both outbound and inbound directions. WMM indicates that the WMM function is supported; None indicates that the WMM function is not supported. WMM information negotiation is carried out between an AP and a client that both support WMM. Number of times the client has woken up to listen to beacon frames. Received signal strength indication. This value indicates the client signal strength detected by the AP. Represents the receiving and sending rates of the frames such as data, management, and control frames. For the AC + fit AP architecture, there is delay because Rx Rate is transmitted from AP to AC periodically depending on the statistics interval. Client type such as WPA2(RSN), WPA, or Pre-RSNA. Authentication method such as open system or shared key. AKM suite used such as Dot1X or PSK. Displays either of the 4-way handshake states: IDLE Displayed in initial state. PTKSTART Displayed when the 4 way handshake is initialized. PTKNEGOTIATING Displayed after sending valid message 3. PTKINITDONE Displayed when the 4-way handshake is successful. Displays the group key state such as: IDLE Displayed in initial state. REKEYNEGOTIATE Displayed after the AC sends the initial message to the client. REKEYESTABLISHED Displayed when re-keying is successful. Encryption cipher such as clear or crypto. Displays the roam status such as Normal or Fast Roaming. 23

36 Field Roam Count Up Time Roaming count of the client, including intra-ac roaming and inter-ac roaming. For intra-ac roaming, this field is reset after the client is de-associated with the AP connected to the AC. For inter-ac roaming, this field is reset after the client leaves the mobility group to which the AC belongs. Time for which the client has been associated with the AP. display wlan country-code Any view display wlan country-code ap { name ap-name all } [ { begin exclude include } regular-expression ] 1: Monitor level name ap-name: Specifies the name of the AP, a case-insensitive string of 1 to 32 characters that can contain letters, digits, underlines, square brackets, slashes, and hyphens, but not spaces. all: Displays the country code information of all APs. : Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Use display wlan country-code to display the country code information of a specified AP or all APs. Related commands: country-code. # Display the country code information of all APs. <Sysname> display wlan country-code ap all Country Code AP Country Code ap1 CN China ap2 US United States

37 display wlan radio-policy display wlan radio-policy [ radio-policy-name ] [ { begin exclude include } regular-expression ] Any view 1: Monitor level radio-policy-name: Name of a radio policy, a case-insensitive string of 1 to 15 characters which can contain letters, digits and underscores, with spaces excluded. : Filters command output by specifying a regular expression. For more information about regular expressions, see Fundamentals Configuration Guide. begin: Displays the first line that matches the specified regular expression and all lines that follow. exclude: Displays all lines that do not match the specified regular expression. include: Displays all lines that match the specified regular expression. regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters. Use display wlan radio-policy to display information about a radio policy or all radio policies. The information displayed is in the order of radio-policy name. # Display the configuration information for radio policy rp. <Sysname> display wlan radio-policy rp Radio Policy Radio Policy Name : rp Fragmentation Threshold (Bytes) : 2346 Beacon Interval (TU) : 100 RTS Threshold (Bytes) : 2346 DTIM Period (Beacon Interval) : 1 Long Retry Threshold : 4 Short Retry Threshold : 7 Maximum Rx Duration (ms) : 2000 Maximum clients per Radio : QoS Mode : WMM Admission Control Policy : Users Threshold users count : 20 CAC-Free's AC Request Policy : Response Success CAC Unauthed Frame Policy : Downgrade CAC Medium Time Limitation(us) : CAC AC-VO's Max Delay(us) : CAC AC-VI's Max Delay(us) :