H3C WA Series Command Reference Manual
H3C WA Series Command Reference Manual

H3C WA Series Command Reference Manual

Wlan access points
Hide thumbs Also See for WA Series:
Table of Contents

Advertisement

H3C WA Series WLAN Access Points
WLAN Command Reference
Hangzhou H3C Technologies Co., Ltd.
http://www.h3c.com
Document Version: 6W100-20100910

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the WA Series and is the answer not in the manual?

Questions and answers

Summary of Contents for H3C WA Series

  • Page 1 H3C WA Series WLAN Access Points WLAN Command Reference Hangzhou H3C Technologies Co., Ltd. http://www.h3c.com Document Version: 6W100-20100910...
  • Page 2 SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V G, V G, PSPT, XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd. All other trademarks that may be mentioned in this manual are the property of their respective owners.
  • Page 3 Preface The H3C WA documentation set includes 10 command references, which describe the commands and command syntax options available for the H3C WA series WLAN access points. The WLAN Command Reference describes WLAN interface, WLAN service, WLAN security, WLAN RRM, WLAN IDS, WLAN QoS, and WDS configuration commands.
  • Page 4 Means an action or information that needs special attention to ensure successful configuration or good performance. Means a complementary description. Means techniques helpful for you to make configuration with ease. About the H3C WA Documentation Set The H3C WA documentation set includes: Category Documents...
  • Page 5 Obtaining Documentation You can access the most up-to-date H3C product documentation on the World Wide Web at http://www.h3c.com. Click the links on the top navigation bar to obtain different categories of product documentation: [Technical Support & Documents > Technical Documents] –...
  • Page 6: Table Of Contents

    Table of Contents 1 Applicable Models and Software Versions ·····························································································1-1 2 Feature Matrix ············································································································································2-1 3 Command/Parameter Matrix·····················································································································3-1 4 WLAN Interface Configuration Commands·····························································································4-1 WLAN Interface Configuration Commands·····························································································4-1 description ·······································································································································4-1 display interface wlan-bss ···············································································································4-2 display interface wlan-mesh ············································································································4-3 display interface wlan-radio ·············································································································4-4 interface wlan-bss····························································································································4-6 interface wlan-mesh ························································································································4-7 interface wlan-radio ·························································································································4-7...
  • Page 7 7 WLAN IDS Configuration Commands······································································································7-1 WLAN Rouge AP Configuration Commands ··························································································7-1 attack-detection enable ···················································································································7-1 display wlan ids history····················································································································7-2 display wlan ids statistics·················································································································7-3 wlan ids············································································································································7-4 reset wlan ids history ·······················································································································7-5 reset wlan ids statistics····················································································································7-5 WLAN Frame Filtering Configuration Commands ··················································································7-6 display wlan blacklist ·······················································································································7-6 display wlan whitelist ·······················································································································7-7 dynamic-blacklist enable ·················································································································7-8 dynamic-blacklist lifetime·················································································································7-8...
  • Page 8 10 WLAN Service Configuration Commands···························································································10-1 a-mpdu enable·······························································································································10-1 a-msdu enable·······························································································································10-2 beacon ssid-hide ···························································································································10-2 beacon-interval ······························································································································10-3 channel ··········································································································································10-3 channel band-width ·······················································································································10-4 client dot11n-only ··························································································································10-5 client max-count ····························································································································10-5 display wlan client··························································································································10-6 display wlan service-template ·······································································································10-9 display wlan statistics ··················································································································10-10 dtim ··············································································································································10-12 fragment-threshold ······················································································································10-13 long-retry threshold······················································································································10-13 max-power···································································································································10-14 max-rx-duration ···························································································································10-14...
  • Page 9: Applicable Models And Software Versions

    Read this chapter before using an H3C WA series WLAN access point. Applicable Models and Software Versions H3C WA series WLAN access points include the WA2200 series and WA2600 series. Table 1-1 shows the applicable models and software versions.
  • Page 10: Feature Matrix

    Feature Matrix Support of the H3C WA series WLAN access points for features, commands and parameters may vary by device model. See this document for more information. For information about feature support, see Table 2-1. For information about command and...
  • Page 11: Command/Parameter Matrix

    Command/Parameter Matrix Table 3-1 Command/Parameter matrix Document Module Command/Parameter WA2200 series WA2600 series display ip https Not supported Supported ip https acl Not supported Supported Fundamentals Command HTTP commands ip https certificate Not supported Supported Reference access-control-policy ip https enable Not supported Supported a-mpdu enable...
  • Page 12 Document Module Command/Parameter WA2200 series WA2600 series The maximum number of broadcast packets pps max-pps pps max-pps broadcast-suppression that can be ranges from 1 to ranges from 1 to { ratio | pps max-pps } forwarded on an 148810. 1488100. Ethernet interface per second The maximum...
  • Page 13: Wlan Interface Configuration Commands

    The models listed in this document are not applicable to all regions. Please consult your local sales office for the models applicable to your region. Support of the H3C WA series WLAN access points (APs) for commands may vary by AP model. For more information, see Feature Matrix.
  • Page 14: Display Interface Wlan-Bss

    An interface description can be the mixture of English characters and other Unicode characters. The mixed description cannot exceed the specified length. To use a type of Unicode characters or symbols in an interface description, install the corresponding Input Method Editor (IME) and log in to the AP through remote login software that supports this character type.
  • Page 15: Display Interface Wlan-Mesh

    PVID: 1 Port link-type: access Tagged VLAN ID : none Untagged VLAN ID : 1 Port priority: 0 Maximum client number: 64 Clients: 0 associating, 0 associated Input (total) : 0 packets, 0 bytes : 0 unicasts, 0 bytes : 0 broadcasts, 0 bytes Output (total): 0 packets, 0 bytes : 0 unicasts, 0 bytes : 0 broadcasts, 0 bytes...
  • Page 16: Display Interface Wlan-Radio

    View Any view Default Level 1. Monitor level Parameters interface-number: Specifies a WLAN mesh interface by its interface number. The specified interface must be one already created. Description Use the display interface wlan-mesh command to display information about the specified WLAN mesh interface or all WLAN mesh interfaces already created if no interface is specified.
  • Page 17 Radio-type 11a, channel auto(157), power(dBm) 19 auto (4) Received: 0 authentication frames, 0 association frames Sent out: 0 authentication frames, 0 association frames Stations: 0 associating, 0 associated Input : 30007 packets, 1536614 bytes : 13565 unicasts, 520774 bytes : 16442 broadcasts, 1015840 bytes : 0 fragmented : 5687 discarded, 263913 bytes : 0 duplicates, 3054 FCS errors...
  • Page 18: Interface Wlan-Bss

    Field Description The number of associating stations, and the number of Stations: 0 associating, 0 associated associated stations. Statistics on packets received at the physical layer: The total number of packets, and the total number of bytes. Input : 5620 packets, 254801 bytes The total number of unicast packets, and the total number of : 0 unicasts, 0 bytes unicast bytes.
  • Page 19: Interface Wlan-Mesh

    <Sysname> system-view [Sysname] interface wlan-bss 1 [Sysname-WLAN-BSS1] interface wlan-mesh Syntax interface wlan-mesh interface-number undo interface wlan-mesh interface-number View System view Default Level 2. System level Parameters interface-number: Number of a WLAN mesh interface. The value range for this argument is 1 to 32. Description Use the interface wlan-mesh command to enter WLAN mesh interface view.
  • Page 20: Shutdown (Wlan-Radio Interface View)

    shutdown (WLAN-Radio interface view) Syntax shutdown undo shutdown View WLAN-Radio interface view Default Level 2: System level Parameters None Description Use the shutdown command to shut down the current WLAN-Radio interface. Use the undo shutdown command to bring up the current WLAN-Radio interface. By default, a WLAN-Radio interface is up.
  • Page 21 <Sysname>system-view [Sysname] interface wlan-bss 1 [Sysname-WLAN-BSS1] shutdown...
  • Page 22: Wlan Security Configuration Commands

    The models listed in this document are not applicable to all regions. Please consult your local sales office for the models applicable to your region. Support of the H3C WA series WLAN access points (APs) for commands may vary by AP model. For more information, see Feature Matrix.
  • Page 23: Cipher-Suite

    Examples # Enable the open system authentication. <Sysname> system-view [Sysname] wlan service-template 1 clear [Sysname-wlan-st-1] authentication-method open-system # Enable shared key authentication. <Sysname> system-view [Sysname] wlan service-template 1 crypto [Sysname-wlan-st-1] authentication-method shared-key cipher-suite Syntax cipher-suite { ccmp | tkip | wep40 | wep104 | wep128}* undo cipher-suite { ccmp | tkip | wep40 | wep104 | wep128}* View WLAN service template view (crypto type)
  • Page 24: Gtk-Rekey Enable

    View WLAN service template view (crypto type) Default Level 2: System level Parameters None Description Use the gtk-rekey client-offline enable to enable refreshing group temporal key (GTK) when some client is off-line. This function is effective when the gtk-rekey enable command is executed. Use the undo gtk-rekey client-offline command to set not refreshing GTK when some client is off-line.
  • Page 25: Gtk-Rekey Method

    gtk-rekey method Syntax gtk-rekey method { packet-based [ packet ] | time-based [ time ] } undo gtk-rekey method View WLAN service template view (crypto type) Default Level 2: System level Parameters packet-based: Indicates GTK will be rekeyed after transmitting a specified number of packets. packet: Number of packets (including multicasts and broadcasts) that are transmitted before the GTK is refreshed.
  • Page 26: Ptk-Lifetime

    ptk-lifetime Syntax ptk-lifetime time undo ptk-lifetime View WLAN service template view (crypto type) Default Level 2: System level Parameters time: Lifetime in seconds, which ranges from 180 to 604800. Description Use the ptk-lifetime command to change the life time of pairwise transient key (PTK). Use the undo ptk-lifetime command is used to set the PTK lifetime to the default value.
  • Page 27: Tkip-Cm-Time

    Examples # Enable the WPA-IE in the frames. <Sysname> system-view [Sysname] wlan service-template 1 crypto [Sysname-wlan-st-1] security-ie wpa tkip-cm-time Syntax tkip-cm-time time undo tkip-cm-time View WLAN service template view (crypto type) Default Level 2: System level Parameters time: Counter measure time for Message Integrity Check (MIC) failure in seconds. The value ranges from 0 to 3600 seconds.
  • Page 28: Wep Key

    Parameters key-index: The key index values can be: 1: Configures the 1st wep default key. 2: Configures the 2nd wep default key. 3: Configures the 3rd wep default key. 4: Configures the 4th wep default key. wep40: Indicates the wep40 key option. wep104: Indicates the wep104 key option.
  • Page 29: Wep Mode

    View WLAN service template view (crypto type) Default Level 2: System level Parameters key-index: The key index ranges from 1 to 4: 1: Selects the key index as 1. 2: Selects the key index as 2. 3: Selects the key index as 3. 4: Selects the key index as 4.
  • Page 30 With dynamic WEP encryption configured, the device automatically uses the WEP 104 encryption method. To change the encryption method, use the cipher-suite command. With dynamic WEP encryption configured, the WEP key used to encrypt unicast frames is negotiated between client and server. If the WEP default key is configured, the WEP default key is used to encrypt multicast frames.
  • Page 31: Wlan Rrm Configuration Commands

    The models listed in this document are not applicable to all regions. Please consult your local sales office for the models applicable to your region. Support of the H3C WA series WLAN access points (APs) for commands may vary by AP model. For more information, see Feature Matrix.
  • Page 32 View Any view Default Level 1: Monitor level Parameters None Description Use the display wlan rrm command to display basic RRM configuration information. Examples # Display RRM configuration information. <Sysname> display wlan rrm RRM Configuration -------------------------------------------------------------------------- 11a Configured Rates (Mbps) Mandatory : 6, 12, 24 Supported...
  • Page 33: Dot11A

    Field Description Non-dot11h: Sets the channel set to non dot11h channels. After this function is enabled, the device selects the non 802.11h channels of the country Channel Set code only. all: Channel selection is not limited. dot11a Syntax dot11a { disabled-rate | mandatory-rate | supported-rate } rate-value undo dot11a { disabled-rate | mandatory-rate | supported-rate } View WLAN RRM view...
  • Page 34: Dot11B

    [Sysname-wlan-rrm] dot11a disabled-rate 12 24 [Sysname-wlan-rrm] dot11a supported-rate 6 dot11b Syntax dot11b { disabled-rate | mandatory-rate | supported-rate } rate-value undo dot11b { disabled-rate | mandatory-rate | supported-rate } View WLAN RRM view Default Level 2: System level Parameters disabled-rate: Specifies a disabled rate. mandatory-rate: Specifies a mandatory rate.
  • Page 35: Dot11G Protection Enable

    View WLAN RRM view Default Level 2: System level Parameters disabled-rate: Specifies a disabled rate. mandatory-rate: Specifies a mandatory rate. supported-rate: Specifies a supported rate. rate-value: Specifies a radio rate from the following rates: 1 Mbps 2 Mbps 5.5 Mbps 6 Mbps 9 Mbps 11 Mbps...
  • Page 36: Dot11N Mandatory Maximum-Mcs

    View WLAN RRM view Default Level 2: System level Parameters None Description Use the dot11g protection enable command to enable 802.11g protection. Use the undo dot11g protection enable command to disable 802.11g protection. By default, 802.11g protection is disabled. Examples # Enable 802.11g protection.
  • Page 37: Dot11N Support Maximum-Mcs

    [sysname-wlan-rrm] dot11n mandatory maximum-mcs 15 dot11n support maximum-mcs Syntax dot11n support maximum-mcs index undo dot11n support maximum-mcs View WLAN RRM view Default Level 2: System level Parameters index: Specifies the maximum MCS index for 802.11n supported rates, which ranges from 0 to 76. Description Use the dot11n support maximum-mcs command to specify the maximum MCS index for 802.11n supported rates.
  • Page 38: Spectrum-Management Enable

    Description Use the power-constraint command to configure power constraint for all 11a radios. Configured power constraint is advertised in the beacon if spectrum is enabled. By default, the power constraint is 0 dBm. Support for this command depends on your device model. Related commands: spectrum-management enable.
  • Page 39 View System view Default Level 2: System level Parameters None Description Use the wlan rrm command to enter RRM view. This view is useful for managing resources of Radio. Examples # Enter RRM view. <Sysname> system-view [Sysname] wlan rrm [Sysname-wlan-rrm]...
  • Page 40: Wlan Ids Configuration Commands

    The models listed in this document are not applicable to all regions. Please consult your local sales office for the models applicable to your region. Support of the H3C WA series WLAN access points (APs) for commands may vary by AP model. For more information, see Feature Matrix.
  • Page 41: Display Wlan Ids History

    display wlan ids history Syntax display wlan ids history View Any view Default Level 1: Monitor level Parameters None Description Use the display wlan ids history command to display the history of attacks detected in the WLAN system. It supports a maximum of 512 entries. Examples # Display the history of attacks.
  • Page 42: Display Wlan Ids Statistics

    Field Description Detected time Time at which this attack was detected Name of the AP that detected this attack display wlan ids statistics Syntax display wlan ids statistics View Any view Default Level 2: System level Parameters None Description Use the display wlan ids statistics command to display the count of attacks detected. Examples # Display WLAN IDS statistics.
  • Page 43: Wlan Ids

    Field Description This field provides the total count of the attacks total detected since the system startup. Probe Request Frame Flood Attack Number of probe request frame flood attacks detected Number of authentication request frame flood attack Authentication Request Frame Flood Attack detected Number of deauthentication frame flood attacks Deauthentication Frame Flood Attack...
  • Page 44: Reset Wlan Ids History

    reset wlan ids history Syntax reset wlan ids history View User view Default Level 2: System level Parameters None Description Use the reset wlan ids history command to clear the history information of attacks detected in the WLAN. After this command is executed, all the history information regarding attacks will be cleared, and the history table will be empty.
  • Page 45: Wlan Frame Filtering Configuration Commands

    WLAN Frame Filtering Configuration Commands display wlan blacklist Syntax display wlan blacklist { static | dynamic } View Any view Default Level 1: System level Parameters static: Displays only statically configured blacklist entries. dynamic: Displays all dynamically inserted blacklist entries. Description Use the display wlan blacklist command to display the statically or dynamically configured blacklist entries.
  • Page 46: Display Wlan Whitelist

    Table 7-4 display wlan blacklist dynamic command output description. Field Description MAC address of the device inserted into MAC-Address dynamic-blacklist Lifetime of the corresponding entry in Lifetime(s) dynamic-blacklist (in seconds) Last Updated Since(hh:mm:ss) Time elapsed since the entry was last updated Reason Reason why the entry is added into dynamic-blacklist display wlan whitelist...
  • Page 47: Dynamic-Blacklist Enable

    dynamic-blacklist enable Syntax dynamic-blacklist enable undo dynamic-blacklist enable View WLAN IDS view Default Level 2: System level Parameters enable: Enables the dynamic blacklist feature. Description Use the dynamic-blacklist enable command to enable the dynamic-blacklist feature to filter out unwanted clients from getting associated. Use the undo dynamic-blacklist enable command to disable the dynamic-blacklist feature.
  • Page 48: Reset Wlan Dynamic-Blacklist

    Examples # Specify the dynamic-blacklist lifetime as 1200 seconds. <Sysname> system-view [Sysname] wlan ids [Sysname-wlan-ids] dynamic-blacklist lifetime 1200 reset wlan dynamic-blacklist Syntax reset wlan dynamic-blacklist { mac-address mac-address | all } View User view Default Level 2: System level Parameters mac-address: MAC address of the client which should be deleted from the dynamic-blacklist.
  • Page 49: Whitelist Mac-Address

    The maximum number of entries in the list is 64. Examples # Add a client with mac-address aabb-cccc-dddd to the static-blacklist. <Sysname> system-view [Sysname] wlan ids [Sysname-wlan-ids] static-blacklist mac-address aabb-cccc-dddd whitelist mac-address Syntax whitelist mac-address mac-address undo whitelist { mac-address mac-address | all } View WLAN IDS view Default Level...
  • Page 50: Wlan Qos Configuration Commands

    The models listed in this document are not applicable to all regions. Please consult your local sales office for the models applicable to your region. Support of the H3C WA series WLAN access points (APs) for commands may vary by AP model. For more information, see Feature Matrix.
  • Page 51 Client EDCA update count : 25587704 QoS Mode : WMM Radio chip QoS mode : WMM Radio chip max AIFSN : 255 Radio chip max ECWmin : 10 Radio chip max TXOPLimit : 32768 Radio chip max ECWmax : 10 CAC Information Client accepted Voice...
  • Page 52 Video(us) Calls rejected due to insufficient resource Calls rejected due to invalid parameters Calls rejected due to invalid mediumtime Calls rejected due to invalid delaybound QoS Mode : WMM Admission Control Policy : Users Threshold users count : 20 CAC-Free's AC Request Policy : Response Success CAC Unauthed Frame Policy : Downgrade...
  • Page 53 Field Description The number of requests rejected due to insufficient Calls rejected due to insufficient resource resources The number of requests rejected due to invalid Calls rejected due to invalid parameters parameters The number of requests rejected due to invalid Calls rejected due to invalid mediumtime medium time The number of requests rejected due to invalid delay...
  • Page 54 information : Uplink CAC packets Downlink CAC packets Uplink CAC bytes Downlink CAC bytes Downgrade packets Discard packets Downgrade bytes Discard bytes : AC-VO User Priority Direction : Bidirectional Surplus Bandwidth Allowance : 1.0000 Medium Time(ms) : 39.108 Nominal MSDU Size(bytes) : 1500 Mean Data Rate(Kbps): 78.125 Minimum PHY Rate(Mbps)
  • Page 55: Reset Wlan Wmm

    Field Description Mean Data Rate(kbps) Average data transmission rate (in kbps) Minimum PHY Rate(Mbps) Minimum physical transmission rate (in Mbps) Surplus Bandwidth Allowance Surplus bandwidth allowance Medium Time(ms) Medium time (in microseconds) Create TS time time from when the TS was created to now Update TS time Time from when the TS was updated to now Uplink TS packets...
  • Page 56: Wmm Cac Policy

    The reset wlan wmm radio interface wlan-radio command is used to clear the WMM information of the specified radio interface. The reset wlan wmm client interface wlan-radio command is used to clear the WMM information of the clients attached to the specified radio interface. Examples # Clear the WMM statistics information of all radios.
  • Page 57: Wmm Edca Radio

    wmm edca radio Syntax wmm edca radio { ac-vo | ac-vi | ac-be | ac-bk } { aifsn aifsn-value | ecw ecwmin ecwmin-value ecwmax ecwmax-value | txoplimit txoplimit-value | noack } * undo wmm edca radio { ac-vo | ac-vi | ac-be | ac-bk } { aifsn | ecw | txoplimit | noack | all } View WLAN-radio interface view Default Level...
  • Page 58: Wmm Edca Client (Ac-Vo And Ac

    For description on each EDCA parameter, see WLAN QoS in the WLAN Configuration Guide. ECWmin must be no greater than ECWmax. The two parameters must be enabled or disabled simultaneously. When an AP uses 802.11b radio cards, it is recommended that you set TXOPLimit values of AC-BK, AC-BE, AC-VI, and AC-VO to 0, 0, 188, and 102.
  • Page 59 Table 8-4 The default EDCA parameters for clients AIFSN ECWmin ECWmax TXOP Limit AC-VI AC-VO For description on each EDCA parameter, see WLAN QoS in the WLAN Configuration Guide. ECWmin must not be greater than ECWmax. The two parameters must be enabled or disabled simultaneously.
  • Page 60: Wmm Enable

    ecwmax-value: ECWmax parameter of EDCA, which ranges from 0 to 15. txoplimit-value: TXOPLimit parameter of EDCA, which ranges from 0 to 65535 (in units of 32 microseconds). The TXOP value of 0 indicates that only one MPDU can be transmitted. Description Use the wmm edca client command to set the set of EDCA parameters for the specified AC (AC-BE or AC-BK) for clients.
  • Page 61: Wmm Svp Map

    Parameters None Description Use the wmm enable command to enable the WMM function. Use the undo wmm enable command to disable the WMM function. The WMM function is enabled by default. The 802.11n protocol stipulates that all 802.11n clients support WLAN QoS. Therefore, when the radio works in 802.11an or 802.11gn mode, you should enable WMM.
  • Page 62 It is recommended that you map SVP packets to AC-VO in normal cases. Examples # Map SVP packets to AC-VO. <Sysname> system-view [Sysname] interface wlan-radio 1/0/1 [Sysname-WLAN-Radio1/0/1] wmm svp map-ac ac-vo 8-13...
  • Page 63: Wds Configuration Commands

    The models listed in this document are not applicable to all regions. Please consult your local sales office for the models applicable to your region. Support of the H3C WA series WLAN access points (APs) for commands may vary by AP model. For more information, see Feature Matrix.
  • Page 64: Display Wlan Mesh-Profile

    View Any view Default Level 2: System level Parameters mesh-profile mesh-profile-number: Mesh profile number, which ranges from 1 to 32. radio radio-number: Radio number, which ranges from 1 to the number of maximum radios supported by the AP. peer-mac-address mac-address: MAC address of a peer MP. all: All the links formed by the AP.
  • Page 65: Display Wlan Mp-Policy

    Parameters mesh-profile-number: Mesh profile number, which ranges from 1 to 32. all: All mesh profiles. Description Use the display wlan mesh-profile command to display mesh profile information. Examples # Display the mesh profile information of mesh profile 1. <Sysname> display wlan mesh-profile 1 Mesh Profile Parameters -------------------------------------------------------------------------- Mesh Profile Number...
  • Page 66: Link-Hold-Rssi

    Description Use the display wlan mp-policy command to display MP policy information. Examples # Display the information of all MP policies. <Sysname> display wlan mp-policy all Mesh Policy Parameters -------------------------------------------------------------------------- MP Policy Name : default_mp_plcy Mesh Link Initiation : Enable Authenticator Role : Enable Max Links...
  • Page 67: Link-Initiation Enable

    Default Level 2: System level Parameters value: Link formation/Link hold RSSI (received signal strength indicator), namely, the minimum signal strength to allow a WDS link to be formed and held. The argument ranges from 5 to 100, in dBm. Description Use the link-hold-rssi command to configure the minimum signal strength to allow a WDS link to be formed and held.
  • Page 68: Link-Keep-Alive

    link-keep-alive Syntax link-keep-alive keep-alive-interval undo link-keep-alive View Mesh profile view Default Level 2: System level Parameters keep-alive-interval: Link keep alive interval in seconds, with an effective range of 1 to 1800. Description Use the link-keep-alive command to configure the WDS link keep alive interval. Use the undo link-keep-alive command to restore the system default.
  • Page 69: Link Rate-Mode

    [Sysname-wlan-mp-policy-sys_mp] link-maximum-number 5 link rate-mode Syntax link rate-mode { fixed | real-time } undo link rate-mode View MP policy view Default Level 2: System level Parameters fixed: Uses the maximum fixed rate of the current radio to calculate the cost of a WDS link. real-time: Uses the real-time RSSI to calculate the cost of a WDS link.
  • Page 70: Mesh-Profile

    Examples # Set the link saturation RSSI for MP policy sys_mp to 44 dBm. <Sysname> system-view [Sysname] wlan mp-policy sys_mp [Sysname-wlan-mp-policy-sys_mp] link-saturation-rssi 44 mesh-id Syntax mesh-id mesh-id-name undo mesh-id View Mesh profile view Default Level 2: System level Parameters mesh-id-name: Mesh ID name is a string of length 1 to 32. It is case sensitive and can have all characters except “?”.
  • Page 71: Mesh-Profile Enable

    Description Use the mesh-profile command to map the mesh profile to the current radio. Use the undo mesh-profile command to unmap the specified mesh profile from the radio. By default, no mesh profile is mapped to the radio. Only one mesh profile can be mapped to the radio. If a WLAN service template has been mapped to a radio, no mesh profile can be mapped to the radio, and vice versa.
  • Page 72: Mp-Policy

    View WLAN radio interface view Default Level 2: System level Parameters mac-address: MAC address of a peer MP. all: Removes all peer MAC addresses. Description Use the mesh peer-mac-address command to specify the MAC address of a WDS peer. The radio can only form WDS links with peers specified by using this command.
  • Page 73: Probe-Request-Interval

    Examples # Bind the MP policy sys_mp to WLAN-Radio 1/0/2. <Sysname> system-view [Sysname] interface WLAN-Radio 1/0/2 [Sysname-WLAN-Radio1/0/2] mp-policy sys_mp probe-request-interval Syntax probe-request-interval interval-value undo probe-request-interval View Mesh profile view Default Level 2: System level Parameters interval-value: Probe request interval in ms, with an effective range of 100 to 8191. Description Use the probe-request-interval command to configure the probe request interval.
  • Page 74: Wlan Mp-Policy

    The properties of mesh profile template can be changed only when it is disabled. Related commands: bind wlan-mesh, mesh-id, link-keep-alive, and mesh-profile enable. Examples # Create mesh profile 1 and enter mesh profile view. <Sysname> system-view [Sysname] wlan mesh-profile 1 [Sysname-wlan-mshp-1] wlan mp-policy Syntax...
  • Page 75 View System view Default Level 2: System level Parameters interface-type interface-number: Interface type and interface number. Description Use the wlan uplink-interface mesh-link command to configure a mesh-link radio interface as the uplink. Use the undo wlan uplink-interface mesh-link command to remove the configured uplink. By default, no radio interface is configured as an uplink interface.
  • Page 76: Wlan Service Configuration Commands

    The models listed in this document are not applicable to all regions. Please consult your local sales office for the models applicable to your region. Support of the H3C WA series WLAN access points (APs) for commands may vary by AP model. For more information, see Feature Matrix.
  • Page 77: A-Msdu Enable

    a-msdu enable Syntax a-msdu enable undo a-msdu enable View WLAN radio interface view Default Level 2: System level Parameters None Description Use the a-msdu enable command to enable the A-MSDU function for the radio. Use the undo a-msdu enable command to disable the A-MSDU function for the radio. Support for the command depends on the device model.
  • Page 78: Beacon-Interval

    If the advertising of the SSID in beacon frames is disabled, the SSID must be configured for the clients to associate with the AP. Disabling the advertising of the SSID in beacon frames does little good to wireless security. Allowing the advertising of the SSID in beacon frames enables an AP to discover a client more easily.
  • Page 79: Channel Band-Width

    Parameters channel-number: Channel number. The channel numbers depend on specific country code and radio mode. The channel list depends on your device model. auto: Specifies that the channel is automatically selected by the device according to the actual environment during system initialization. Description Use the channel command to configure the operating channel for the radio.
  • Page 80: Client Dot11N-Only

    <sysname> system-view [sysname] interface WLAN-Radio 1/0/1 [sysname-WLAN-Radio1/0/1] radio-type dot11an [sysname-WLAN-Radio1/0/1] channel band-width 20 client dot11n-only Syntax client dot11n-only undo client dot11n-only View WLAN radio interface view Default Level 2: System level Parameters None Description Use the client dot11n-only command to allow only 802.11n clients to access. Use the undo client dot11n-only command to restore the default.
  • Page 81: Display Wlan Client

    Parameters max-number: Maximum number of clients associated to a radio, which ranges from 1 to 124. Description Use the client max-count command to specify the maximum number of clients associated to a radio for an SSID. Use the undo client max-count command to restore the default. By default, the max-number is 64.
  • Page 82 -------------------------------------------------------------------------- 0011-95c3-9241 000f-e200-0500 Running Active 0013-4695-16dd 000f-e200-0500 Running Active None Table 10-1 display wlan client command output description. Field Description MAC Address MAC address of the client BSSID ID of a BSS Association ID of the client State of the client such as Running State “B”...
  • Page 83 Table 10-2 display wlan client verbose command output description Field Description MAC Address MAC address of the client Association ID of the client Radio Interface WLAN-Radio interface SSID The SSID with which the client is associated BSSID ID of a BSS Port WLAN-BSS interface associated with the client VLAN...
  • Page 84: Display Wlan Service-Template

    Field Description Displays the group key state such as: IDLE: Displayed when initial state. REKEYNEGOTIATE: Displayed when Group Key State sends the initial message to client. REKEYESTABLISHED: Displayed when re-keying is successful. Encryption Cipher Encryption cipher such as clear or crypto. Displays the roam status such as Normal or Fast Roam Status Roaming.
  • Page 85: Display Wlan Statistics

    Service Template Status : Enable Maximum clients per BSS : 35 -------------------------------------------------------------------------- Table 10-3 display wlan service-template command output description. Field Description Service Template Number Current service template number SSID Service set identifier for the ESS. Service Template Type Service template type,Crypto or Clear . Security IE Security IE such as WPA or RSN.
  • Page 86 Parameters client: Displays the statistics of the specified client. all: Displays the statistics of all the clients. mac-address mac-address: Specifies the MAC address of the client. Description Use the display wlan statistics command to view the client statistics. Examples # Display the statistics of all the clients. <Sysname>...
  • Page 87: Dtim

    Field Description Best Effort Statistics of best effort traffic Video Statistics of video traffic Voice Statistics of voice traffic Received Frames Received Frames Discarded Frames Discarded Frames Statistics for background, best effort, video and voice traffic are only for QoS-capable clients. For QoS-incapable clients, only best effort traffic statistics are available (including SVP packets) and may be inconsistent with the real physical output queues.
  • Page 88: Fragment-Threshold

    fragment-threshold Syntax fragment-threshold size undo fragment-threshold View WLAN radio interface view Default Level 2: System level Parameters size: Specifies the maximum length of the frame without fragmentation. The value ranges from 256 to 2346 bytes and must be an even number. Description Use the fragment-threshold command to specify the maximum length of packet that can be transmitted without fragmentation.
  • Page 89: Max-Power

    By default, the long retry threshold is 4. Examples # Set the long-retry threshold to 10. <Sysname> system-view [Sysname] interface wlan-radio 1/0/1 [Sysname-WLAN-Radio1/0/1] long-retry threshold 10 max-power Syntax max-power radio-power undo max-power View WLAN radio interface view Default Level 2: System level Parameters radio-power: Maximum radio power.
  • Page 90: Preamble

    Parameters interval: Specifies the interval for which a frame received by AP can remain in buffer memory. The value ranges from 500 to 250000 milliseconds. Description Use the max-rx-duration command to specify the interval for the AP to hold the received packets. AP holds these packets in its buffer memory.
  • Page 91: Radio-Type

    [Sysname-WLAN-Radio1/0/2] preamble long radio-type Syntax radio-type { dot11a | dot11an | dot11b | dot11g | dot11gn } View WLAN radio interface view Default Level 2: System level Parameters dot11a: Indicates that the wireless radio type is 802.11a (5 GHz). dot11an: Indicates that the wireless radio type is 802.11a/n (5 GHz). dot11b: Indicates that the wireless radio type is 802.11b (2.4 GHz).
  • Page 92: Reset Wlan Statistics

    When this command is used, the AP sends the de-authentication frame to the client and the client is removed from the WLAN service. Examples # Cut off the client with MAC address 0102-0304-0506. <Sysname> reset wlan client mac-address 0102-0304-0506 reset wlan statistics Syntax reset wlan statistics client { all | mac-address mac-address } View...
  • Page 93: Service-Template (Wlan Radio Interface View)

    Request to Send (RTS) is used to avoid data sending collisions in a WLAN. You need to set a rational value: A small value causes RTS packets to be sent more often, thus consuming more of the available bandwidth. However, the more often RTS packets are sent, the quicker the system can recover from interference or collisions.
  • Page 94: Short-Gi Enable

    Parameters disable: Disables the service template. enable: Enables the service template. Description Use the service-template enable command to enable the service template. Use the service-template disable command to disable the service template. By default, the service-template is disabled. Examples # Enable the service template 1. <Sysname>...
  • Page 95: Short-Retry Threshold

    [sysname] interface WLAN-Radio1/0/2 [sysname-WLAN-Radio1/0/2] undo short-gi enable short-retry threshold Syntax short-retry threshold count undo short-retry threshold View WLAN radio interface view Default Level 2: System level Parameters count: Number of retry times AP can send a short unicast frame (frame size less than the RTS threshold) without receiving an acknowledgment.
  • Page 96: Ssid

    Use the ssid command to set the SSID for the current service template. Use the undo ssid command to remove the SSID. By default, the SSID of service template 1 is set to H3C. An SSID should be as unique as possible.
  • Page 97: Wlan Client Idle-Timeout

    Description Use the wlan broadcast-probe reply command to enable the AP to respond to the probe requests with SSID null sent by the client. Use the undo wlan broadcast-probe reply command to remove the configuration. In other words, the AP responds only to probe requests that carry the specified SSID. By default, an AP responds to probe requests with SSID null sent by the client.
  • Page 98: Wlan Country-Code

    Default Level 2: System level Parameters interval: Specifies the interval between keep alive requests. The value ranges from 3 to 1800 seconds. Description Use the client keep-alive command to specify the keep alive interval. Use the undo client keep-alive command to cancel the keep-alive functionality. By default, client keep-alive function is disabled.
  • Page 99 Country Code Country Code Brunei Darussalam Monaco Bolivia Moldova Brazil Macedonia Bahamas Macau Belarus Martinique Belize Malta Canada Mauritius Switzerland Mexico Cote d'ivoire Malay Archipelago Chile Namibia China Nigeria Colombia Nicaragua Costarica Netherlands Serbia Norway Cyprus New Zealand Czech Republic Oman Germany Panama...
  • Page 100 Country Code Country Code Croatia Turkey Hungary Trinidad and Tobago Taiwan, Province of Iceland China India Ukraine The United Arab Indonesia Emirates Ireland United States of America Israel Uruguay Iraq Uzbekistan Italy The Vatican City State Iran Venezuela Jamaica Virgin Islands Jordan Vietnam Japan...
  • Page 101: Wlan Service-Template

    wlan service-template Syntax wlan service-template service-template-number { clear | crypto } undo wlan service-template service-template-number View System view Default Level 2: System level Parameters service-template-number: Specifies the service-template number. The value ranges from 1 to 1024. clear: Sets the current service template type to clear, that is, data will be sent in clear text after the template is mapped to an AP.
  • Page 102 Parameters interface-type interface-number: Interface type and interface number. Description Use the wlan uplink-interface command to specify an uplink interface. Use the undo wlan uplink-interface command to remove the uplink interface. By default, no uplink interface is configured. If the status of all configured uplink interfaces is down, WLAN service will not be provided. If at least one of them is up, WLAN service will be provided.
  • Page 103: Wireless User Isolation

    Wireless User Isolation l2fw wlan-client-isolation enable Syntax l2fw wlan-client-isolation enable undo l2fw wlan-client-isolation enable View System view Default Level 2: System level Parameters None Description Use the l2fw wlan-client-isolation enable command to enable wireless user Layer 2 isolation. Use the undo l2fw wlan-client-isolation enable command to disable wireless user Layer 2 isolation. By default, wireless user Layer 2 isolation is enabled.
  • Page 104: Index

    Index A B C D F G I L M P R S T W display wlan whitelist display wlan wmm a-mpdu enable 10-1 dot11a a-msdu enable 10-2 dot11b attack-detection enable dot11g authentication-method dot11g protection enable autochannel-set avoid-dot11h dot11n mandatory maximum-mcs dot11n support maximum-mcs beacon ssid-hide 10-2...
  • Page 105 max-power 10-14 wep default-key max-rx-duration 10-14 wep key-id mesh peer-mac-address wep mode mesh-id whitelist mac-address 7-10 mesh-profile enable wlan broadcast-probe reply 10-21 mesh-profile wlan client idle-timeout 10-22 mp-policy 9-10 wlan client keep-alive 10-22 wlan country-code 10-23 wlan ids power-constraint wlan mesh-profile 9-11 preamble 10-15...

Table of Contents