华为设备WLAN基本业务配置命令

[AC6605]wlan //进入WLAN视图
[AC6605-wlan-view]ap-group name a1 //创建AP组并进入AP组视图
[AC6605]display ap-group all //查看AP组的信息
[Huawei]ip pool p1 //创建全局地址池并进入全局地址池视图
[Huawei-ip-pool-p1]option 43 sub-option 1 hex a1 //AC设备作为DHCP服务器为AP分配IP地址时配置option 43字段
[Huawei-ip-pool-p1]option 43 sub-option 3 ascii a1 [Huawei-ip-pool-p1]option 43 sub-option 3 ascii 123
[Huawei-ip-pool-p1]option 43 sub-option 2 ip-address 10.1.1.0
[Huawei-ip-pool-p1]option 43 sub-option 1 hex 123
[Huawei]ip pool p2 //创建全局地址池并进入全局地址池视图, AC设备作为DHCP服务器通过DNS方式为AP分配IP地址
[Huawei-ip-pool-p2]gateway-list 10.1.1.1
[Huawei-ip-pool-p2]network 10.1.1.0
[Huawei-ip-pool-p2]dns-list 8.8.8.8
[Huawei-ip-pool-p2]domain-name abc.com //为AP配置域名后缀。AP获取到该后缀后和“huawei-wlan-controller”拼接组成全量域名去DNS服务器请求AC的IP地址
[AC6605]wlan
[AC6605-wlan-view]regulatory-domain-profile name a1 //创建域管理模板&＃xff0c;并进入模板视图
[AC6605-wlan-regulate-domain-a1]country-code cn //配置国家码,缺省为“CN”
[AC6605-wlan-view]ap-group name a1
[AC6605-wlan-ap-group-a1]regulatory-domain-profile a1 //在AP组中引用域管理模板, 缺省引用了名为default的域管理模板
[AC6605]display regulatory-domain-profile all //查看域管理模板下配置的国家码
[AC6605]display references regulatory-domain-profile name a1 //查看域管理模板的引用信息
[AC6605-wlan-view]ap-id 1 //进入AP视图
[AC6605-wlan-view]ap-mac 1111-1111-1111
[AC6605-wlan-view]ap-name ap1
[AC6605-wlan-view]regulatory-domain-profile a1 //在AP上引用域管理模板
[AC6605]capwap source interface Vlanif 10 //配置VLANIF接口为AP与AC建立CAPWAP隧道的源接口
[AC6605]capwap source interface LoopBack 0 //配置Loopback接口为AP与AC建立CAPWAP隧道的源接口
[AC6605]display capwap configuration //查看AC的源接口
[AC6605]wlan
[AC6605-wlan-view]ac sysnetid AC1 //配置AC的网元名称
[AC6605]display ac global configuration //查看AC的全局配置信息&＃xff0c;即AC的网元名称
[AC6605]capwap control-link-priority local 7 //配置CAPWAP管理报文的优先级
[AC6605]capwap control-link-priority remote 7
[AC6605]capwap dtls psk-mandatory-match enable //配置允许AP以默认预共享密钥与AC进行DTLS会话
[AC6605]capwap dtls psk abc&＃64;1234 //配置DTLS加密使用的预共享密钥
[AC6605]capwap dtls control-link encrypt //开启控制隧道的DTLS加密功能
[AC6605]capwap message-integrity psk huawei_seccwp //配置CAPWAP报文完整性校验预共享密钥
[AC6605]capwap echo interval 25 //配置CAPWAP心跳检测的间隔时间
[AC6605]capwap echo times 6 //配置CAPWAP心跳检测的次数
[AC6605-wlan-view]ap update mode ac-mode //配置AP的升级模式为AC模式
[AC6605-wlan-view]ap update mode ftp-mode //配置AP的升级模式为FTP模式
[AC6605-wlan-view]ap update ftp-server ip-address 10.1.1.1 ftp-username anonymous ftp-password cipher anonymous&＃64;huawei.com //配置FTP基本信息
[AC6605-wlan-view]ap update ftp-server max-connect-number 50 //配置能够同时升级的AP最大数目
[AC6605-wlan-view]ap update mode sftp-mode //配置AP的升级模式为SFTP模式
[AC6605-wlan-view]ap update sftp-server ip-address 10.1.1.1 sftp-username anonymous sftp-password cipher anonymous&＃64;huawei.com //配置SFTP基本信息
[AC6605-wlan-view]ap update sftp-server max-connect-number 50 //配置能够同时升级的AP最大数目
[AC6605-wlan-view]ap update update-filename up1 ap-type 1 //配置指定AP类型的AP对应的升级文件
[AC6605]display ap update configuration //查看AP版本升级时的配置信息
[AC6605]display ap-type all //查看AP设备类型信息
[AC6605]display ap version all //查看AP的版本信息
[AC6605-wlan-view]ap auth-mode mac-auth //配置AP认证模式为MAC认证
[AC6605-wlan-view]ap auth-mode sn-auth //配置AP认证模式为SN认证
[AC6605-wlan-view]ap blacklist mac 1111-1111-1111 //将指定的AP添加到AP黑名单
[AC6605-wlan-view]ap-id 1 //离线导入AP并进入AP视图
[AC6605-wlan-view]ap-mac 1000-1000-1000 //离线导入AP并进入AP视图
[AC6605-wlan-view]ap-name ap1 //配置AP的名称
[AC6605-wlan-view]ap-group name ap-g1 //配置AP加入AP组
[AC6605-wlan-view]ap auth-mode no-auth //配置AP认证模式为不认证
[AC6605-wlan-view]ap whitelist mac 1000-1000-1000 //添加指定的MAC地址到AP白名单
[AC6605-wlan-view]ap whitelist sn 1 //添加指定的SN到AP白名单
[AC6605-wlan-view]display ap unauthorized record //查看未认证通过的AP信息
[AC6605-wlan-view]ap-confirm all //确认未认证通过的AP
[AC6605]display ap global configuration //查看AP的认证模式
[AC6605]display ap blacklist //查看AP黑名单信息
[AC6605]display ap whitelist mac //查看AP白名单信息
[AC6605]display ap whitelist sn
[AC6605]display ap all //查看AP的上线结果
[AC6605]wlan
[AC6605-wlan-view]wired-port-profile name p1 //创建AP有线口模板&＃xff0c;并进入模板视图
[AC6605-wlan-wired-port-p1]mode middle //配置中心AP有线口工作模式为“middle”, 中心AP下行口连接RU时&＃xff0c;需要将下行接口的工作模式配置为middle模式
[AC6605-wlan-view]ap-mac 1000-1000-1000 //进入AP视图
[AC6605-wlan-ap-0]wired-port-profile p1 gigabitethernet 0 //在AP中引用AP有线口模板
[AC6605-wlan-view]ap-group name ap1 //进入AP组视图
[AC6605-wlan-ap-group-ap1]radio 1 //进入射频视图
[AC6605-wlan-view]ap-mac 1000-1000-1000 //进入AP视图
[AC6605-wlan-ap-0]radio 0 //进入射频视图
[AC6605-wlan-radio-0/0]channel 20mhz 1 //配置指定射频的工作带宽和信道
[AC6605-wlan-radio-0/0]antenna-gain 1 //配置射频的天线增益, 必须与AP实际所接天线的天线增益保持一致
[AC6605-wlan-radio-0/0]eirp 127 //配置射频的发射功率
[AC6605-wlan-radio-0/0]coverage distance 3 //配置射频覆盖距离参数,缺省为3&＃xff0c;单位为100m
[AC6605-wlan-radio-0/0]frequency 2.4g //配置射频工作的频段,缺省射频0工作在2.4GHz频段&＃xff0c;射频2工作在5GHz频段
[AC6605-wlan-view]radio-2g-profile name p1 //创建2G射频模板并进入射频模板视图
[AC6605-wlan-view]radio-5g-profile name p1 //创建5G射频模板&＃xff0c;并进入射频模板视图
[AC6605-wlan-radio-2g-prof-p1]undo channel-switch announcement disable //使能信道切换通告功能, 缺省已使能
[AC6605-wlan-radio-2g-prof-p1]channel-switch mode continue-transmitting //配置信道切换通告模式为continue-transmitting
[AC6605-wlan-view]ssid-profile name s1 //创建SSID模板&＃xff0c;并进入SSID模板视图
[AC6605-wlan-ssid-prof-s1]mu-mimo enable //开启MU-MIMO功能
[AC6605]wlan
[AC6605-wlan-view]radio-2g-profile name p1
[AC6605-wlan-radio-2g-prof-p1]radio-type dot11n //配置射频的类型,默认值
[AC6605-wlan-radio-2g-prof-p1]radio-type dot11b
[AC6605-wlan-radio-2g-prof-p1]radio-type dot11g
[AC6605-wlan-radio-2g-prof-p1]dot11bg basic-rate all //配置射频802.11bg协议的基础速率集的速率
[AC6605-wlan-radio-2g-prof-p1]dot11bg supported-rate all //配置射频802.11bg协议的支持速率集的速率
[AC6605-wlan-view]radio-5g-profile name p5
[AC6605-wlan-radio-5g-prof-p5]radio-type dot11a
[AC6605-wlan-radio-5g-prof-p5]radio-type dot11ac //配置射频的类型,默认
[AC6605-wlan-radio-5g-prof-p5]radio-type dot11n
[AC6605-wlan-radio-5g-prof-p5]dot11a basic-rate all //配置射频802.11a协议的基础速率集的速率
[AC6605-wlan-radio-5g-prof-p5]dot11a supported-rate all //配置射频802.11a协议支持速率集的速率
[AC6605-wlan-radio-5g-prof-p5]vht mcs-map nss 4 max-mcs 9 //配置802.11ac协议空间流的最大MCS值
[AC6605-wlan-radio-5g-prof-p5]multicast-rate 54 //配置射频的无线报文组播发送速率
[AC6605-wlan-radio-5g-prof-p5]beacon-interval 100 //配置AP发送Beacon帧的周期
[AC6605-wlan-radio-5g-prof-p5]fragmentation-threshold 2346 //配置射频模板中的报文分段门限值
[AC6605-wlan-radio-5g-prof-p5]beamforming enable //使能波束成形功能
[AC6605-wlan-radio-5g-prof-p5]rts-cts-mode cts-to-self //配置射频模板中RTS-CTS的工作模式,默认
[AC6605-wlan-radio-5g-prof-p5]rts-cts-mode rts-cts
[AC6605-wlan-radio-5g-prof-p5]rts-cts-mode disable
[AC6605-wlan-radio-5g-prof-p5]rts-cts-threshold 2347 //配置射频模板中的RTS-CTS门限值
[AC6605-wlan-radio-5g-prof-p5]undo ht a-mpdu disable //使能MPDU帧汇聚功能
[AC6605-wlan-radio-5g-prof-p5]ht a-mpdu max-length-exponent 3 //配置MPDU汇聚的帧长度, 缺省MPDU帧长度索引为3&＃xff0c;对应帧最大长度为65535字节
[AC6605-wlan-radio-5g-prof-p5]vht a-mpdu max-length-exponent 7 //配置MPDU汇聚的帧长度, 缺省MPDU帧长度索引为7&＃xff0c;对应帧最大长度为1048575字节
[AC6605-wlan-radio-5g-prof-p5]vht a-msdu enable //使能以A-MSDU聚合方式发送802.11ac报文的功能
[AC6605-wlan-radio-5g-prof-p5]vht a-msdu max-frame-num 2 //配置A-MSDU聚合方式一次能聚合的最大子帧数
[AC6605-wlan-radio-5g-prof-p5]guard-interval-mode normal //配置GI模式, 缺省为normal
[AC6605-wlan-radio-5g-prof-p5]guard-interval-mode short
[AC6605-wlan-radio-5g-prof-p5]auto-off service start-time 1:00:00 end-time 5:00:00 //使能定时关闭VAP功能
[AC6605-wlan-radio-5g-prof-p5]utmost-power disable //去使能射频按照最大功率发送报文功能
[AC6605-wlan-ap-group-g1]radio-2g-profile p1 radio all //在AP组中将指定的射频模板引用到射频
[AC6605-wlan-ap-group-g1]radio-5g-profile p5 radio all
[AC6605-wlan-ap-group-g1]radio 0 //在AP组射频中引用射频模板
[AC6605-wlan-group-radio-g1/0]radio-2g-profile p1
[AC6605-wlan-group-radio-g1/0]radio-5g-profile p5
[AC6605-wlan-ap-0]radio-2g-profile p1 radio all //在AP中将指定的射频模板引用到射频
[AC6605-wlan-ap-0]radio-5g-profile p5 radio all
[AC6605-wlan-ap-0]radio 0 //在AP射频中引用射频模板
[AC6605-wlan-radio-0/0]radio-2g-profile p1
[AC6605-wlan-radio-0/0]radio-5g-profile p5
[AC6605]display radio-2g-profile all //查看2G射频模板的配置信息和引用信息
[AC6605]display radio-5g-profile all //查看5G射频模板的配置信息和引用信息
[AC6605]display references radio-2g-profile name p1 //查看2G射频模板的引用信息
[AC6605]display references radio-5g-profile name p5 //查看5G射频模板的引用信息
[AC6605] display ap configurable channel ap-id 0 //查看指定AP支持的可配置信道
[AC6605]display ap config-info ap-id 0 //查看AP的配置信息
[AC6605-wlan-view]vap-profile name v1 //创建VAP模板&＃xff0c;并进入模板视图
[AC6605-wlan-vap-prof-v1]forward-mode direct-forward //配置VAP模板下的数据转发方式,缺省为直接转发
[AC6605-wlan-vap-prof-v1]forward-mode tunnel
[AC6605]vlan pool p1 //创建VLAN pool&＃xff0c;并进入VLAN pool视图
[AC6605-vlan-pool-p1]vlan 10 to 20 //将指定VLAN添加到VLAN pool中
[AC6605-vlan-pool-p1]assignment even //配置VLAN pool中的VLAN分配算法,缺省为hash
[AC6605-vlan-pool-p1]assignment hash
[AC6605]wlan
[AC6605-wlan-view]vap-profile name v1
[AC6605-wlan-vap-prof-v1]service-vlan vlan-id 10 //配置VAP的业务VLAN, 缺省为VLAN1
[AC6605-wlan-vap-prof-v1]service-vlan vlan-pool p1 //配置VAP的业务VLAN, 缺省为VLAN1
[AC6605-wlan-vap-prof-v1]learn-client-address dhcp-strict //使能STA地址严格DHCP获取功能
[AC6605-wlan-vap-prof-v1]ip source check user-bind enable //使能AP的IPSG功能
[AC6605-wlan-vap-prof-v1]arp anti-attack check user-bind enable //使能动态ARP检测功能
[AC6605-wlan-vap-prof-v1]undo dhcp trust port //去使能AP的DHCP信任功能
[AC6605-wlan-vap-prof-v1]undo anti-attack broadcast-flood disable //使能广播泛洪攻击检测和防范功能
[AC6605-wlan-vap-prof-v1]anti-attack broadcast-flood sta-rate-threshold 10 //配置广播泛洪攻击检测速率阈值
[AC6605-wlan-vap-prof-v1]anti-attack broadcast-flood blacklist enable //使能广播泛洪攻击检测黑名单功能
[AC6605-wlan-vap-prof-v1]auto-off service start-time 1:00:00 end-time 5:00:00 //使能定时关闭VAP功能并配置定时关VAP的时间段
[AC6605-wlan-vap-prof-v1]type ap-management //配置VAP的类型, 缺省为service
[AC6605-wlan-vap-prof-v1]type service
[AC6605-wlan-vap-prof-v1]dhcp option82 insert enable //使能在STA发送的DHCP报文中添加Option82选项功能
[AC6605-wlan-vap-prof-v1]dhcp option82 circuit-id format ap-mac //配置在STA发送的DHCP报文中添加的Option82选项的格式, 缺省为ap-mac
[AC6605-wlan-vap-prof-v1]dhcp option82 remote-id format ap-mac
[AC6605-wlan-view]security-profile name s1 //创建安全模板并进入模板视图
[AC6605-wlan-view]vap-profile name v1
[AC6605-wlan-vap-prof-v1]security-profile s1 //在VAP模板中引用安全模板, 缺省引用了名称为default的安全模板
[AC6605-wlan-view]ssid-profile name ss1 //创建SSID模板&＃xff0c;并进入模板视图
[AC6605-wlan-ssid-prof-ss1]ssid 0 //配置SSID名称, 缺省为HUAWEI-WLAN
[AC6605-wlan-ssid-prof-ss1]ssid-hide enable //使能Beacon帧中隐藏SSID功能
[AC6605-wlan-ssid-prof-ss1]max-sta-number 64 //配置单个VAP下能够关联成功的最大用户数,缺省为64
[AC6605-wlan-ssid-prof-ss1]reach-max-sta hide-ssid disable //去使能用户数达到最大时自动隐藏SSID的功能
[AC6605-wlan-ssid-prof-ss1]legacy-station disable //禁止非HT终端接入
[AC6605-wlan-ssid-prof-ss1]association-timeout 5 //配置STA关联老化时间,缺省为5分钟
[AC6605-wlan-ssid-prof-ss1]dtim-interval 1 //配置DTIM周期参数,缺省为1
[AC6605-wlan-ssid-prof-ss1]u-apsd enable //使能U-APSD功能
[AC6605-wlan-ssid-prof-ss1]active-dull-client enable //使能抑制终端进入省电状态的功能
[AC6605-wlan-view]vap-profile name v1
[AC6605-wlan-vap-prof-v1]ssid-profile ss1 //在VAP模板中引用SSID模板
[AC6605-wlan-view]ap-group name g1
[AC6605-wlan-ap-group-g1]vap-profile v1 wlan 1 radio all //在AP组中将指定的VAP模板引用到射频
[AC6605-wlan-view]ap-mac 1000-1000-1000
[AC6605-wlan-ap-0]vap-profile v1 wlan 1 radio all //在AP中将指定的VAP模板引用到射频
[AC6605-wlan-view]ap-group name g1
[AC6605-wlan-ap-group-g1]radio 1 //进入射频视图
[AC6605-wlan-group-radio-g1/1]vap-profile v1 wlan 1 //在AP组射频中将指定的VAP模板引用到射频
[AC6605-wlan-view]ap-id 0
[AC6605-wlan-ap-0]radio 2
[AC6605-wlan-radio-0/2]vap-profile v1 wlan 1 //在AP射频中将指定的VAP模板引用到射频
[AC6605]display vap all //查看业务型VAP的相关信息
[AC6605]display vap-profile all //查看VAP模板的配置信息和引用信息
[AC6605]display references vap-profile name v1 //查看VAP模板的引用信息
[AC6605]display security-profile all //查看安全模板的配置信息和引用信息
[AC6605]display references security-profile name s1 //查看安全模板的引用信息
[AC6605]display ssid-profile all //查看SSID模板的配置信息和引用信息
[AC6605]display references ssid-profile name ss1 //查看SSID模板的引用信息
[AC6605]display vlan pool all //查看VLAN pool下的配置信息
[AC6605]display references vlan pool p1 //查看VLAN pool的引用信息
[AC6605]display vap create-fail-record all //查看所有VAP创建失败的记录
[AC6605]display wlan config-errors //查看WLAN的错误配置信息
[AC6605]display station all //查看STA的接入信息
[AC6605-wlan-view]rf-ping 1000-1000-1000 //主动探测无线链路质量
[AC6605-wlan-view]ap-ping ap-id 0 1 //配置AP设备去Ping一个网络设备&＃xff0c;检测从AP到指定网络设备之间的网络是否连通
[AC6605]display ap run-info ap-id 0 //查看AP的运行信息
[AC6605]display ap performance statistics ap-id 0 //查看AP性能统计信息
[AC6605]display radio all //查看AP的射频信息
[AC6605]display ap asyn-message err-info all //查看AP重启失败的记录
[AC6605]display ap uncontrol all //查看非法AP的存在情况
[AC6605]display channel switch-record all //查看设备信道切换的记录信息
[AC6605]display ap traffic statistics wireless ap-id 0 radio 0 //查看指定AP射频上的报文统计信息
[AC6605]display ap port all //查看AP的端口状态和流量信息
[AC6605]display ap elabel all //查看AP的电子标签信息
[AC6605]display distribute-ap all //查看RU的信息
[AC6605]display ap statistics //查看添加到AC上的AP的AP类型统计信息
[AC6605]display ap online-fail-record all //查看AP上线失败的记录信息
[AC6605]display ap offline-record all //查看AP下线的记录信息
[AC6605]reset ap online-fail-record all //清除AP上线失败的记录信息
[AC6605]reset ap offline-record all //清除AP下线的记录信息
[AC6605-wlan-view]reset ap unauthorized record //清除未认证AP列表中的信息
[AC6605]display station statistics //查看STA的统计信息
[AC6605]display ap sta-signal strength ap-id 0 //查看指定AP上STA的平均信号强度
[AC6605]display station online-fail-record all //查看STA上线失败的记录信息
[AC6605]display station offline-record all //查看STA下线的记录
[AC6605]reset station online-fail-record all //清除STA上线失败的记录信息
[AC6605]reset station offline-record all //清除STA下线的记录信息
[AC6605-wlan-view]report-sta-assoc enable //使能用户上线成功信息记录到日志功能