[huawei]wlan [huawei-wlan-view]provision-ap //进入AP上线参数配置视图 [huawei-wlan-provision-ap]ap-name ap1 //配置AP的名称 [huawei-wlan-provision-ap]ap-group ap-group1 //修改AP所加入的组 [huawei-wlan-provision-ap]address-mode static //配置AP获取IPv4地址的方式 [huawei-wlan-provision-ap]ip-address 10.1.1.1 24 gateway 10.1.1.254 //配置AP的静态IPv4地址和网关 [huawei-wlan-provision-ap]ac-list 10.1.1.0 //配置AP对应的AC的IPv4地址列表 [huawei]display provision-ap parameter-list //查看AP上线参数配置视图下的配置参数 [huawei-wlan-provision-ap]commit all //下发配置到所有AP [huawei-wlan-provision-ap]clear configuration this //清除AP上线参数配置视图下的所有配置 [huawei-wlan-view]ap-id 0 //进入AP视图 [huawei-wlan-view]ap-mac 1000-1000-1000 [huawei-wlan-view]ap-name ap1 [huawei-wlan-ap-0]ap-name ap1 //配置AP的名称 [huawei]display ap provision ap-id 0 //查看AP视图下的配置参数 [huawei-wlan-view]ap-rename ap-name ap1 new-name ap2 //配置AP的新名称 [huawei-wlan-view]ap-regroup ap-name ap1 new-group ap-group2 //配置AP加入新的AP组中 [huawei-wlan-view]ap-system-profile name a1 //创建AP系统模板，并进入模板视图 [huawei-wlan-ap-system-prof-a1]led off //配置关闭AP的指示灯 [huawei-wlan-view]radio-2g-profile name r1 //创建2G射频模板 [huawei-wlan-radio-2g-prof-r1]wifi-light signal-strength //配置AP的Wireless灯闪烁表示的信息(该命令只对开启WDS或Mesh功能的AP适用，未开启WDS或Mesh功能的AP，无论配置为哪种方式，Wireless灯的闪烁都表示为流量状态。只有带有Wireless灯的AP支持该命令) [huawei-wlan-radio-2g-prof-r1]wifi-light traffic [huawei-wlan-view]ap-group name ap-g1 //进入AP组视图 [huawei-wlan-ap-group-ap-g1]ap-system-profile a1 //在AP组中引用AP系统模板 [huawei-wlan-ap-group-ap-g1]radio-2g-profile r1 radio all //将指定的射频模板引用到射频 [huawei-wlan-view]ap-id 0 //进入AP视图 [huawei-wlan-ap-0]ap-system-profile a1 //在AP中引用AP系统模板 [huawei-wlan-ap-0]radio-2g-profile r1 radio all //将指定的射频模板引用到射频 [huawei-wlan-view]ap-system-profile name a1 [huawei-wlan-ap-system-prof-a1]usb enable //AP提供了USB接口，当用户需要使用USB接口扩展存储或传输文件时开启AP的USB功能, [huawei-wlan-view]ap update mode ac-mode //配置AP版本升级模式为AC模式，默认模式 [huawei-wlan-view]ap update mode ftp-mode //配置AP版本升级模式为FTP模式 [huawei-wlan-view]ap update ftp-server ip-address 10.1.1.100 ftp-username ftp1 ftp-password cipher abc@1234 //配置FTP基本信息, 缺省未配置FTP服务器IP地址，FTP服务器端用户名是anonymous，FTP服务器端用户密码是[email protected] [huawei-wlan-view]ap update ftp-server max-connect-number 50 //配置能够同时升级的AP最大数目,缺省为50个 [huawei-wlan-view]ap update mode sftp-mode //配置AP版本升级模式为SFTP模式 [huawei-wlan-view]ap update sftp-server ip-address 10.1.1.101 sftp-username sftp1 sftp-password cipher abc@1234 //配置SFTP基本信息, 缺省未配置SFTP服务器IP地址，SFTP服务器端用户名是anonymous，SFTP服务器端用户密码是[email protected] [huawei-wlan-view]ap update sftp-server max-connect-number 50 //配置能够同时升级的AP最大数目,缺省为50个 [huawei-wlan-view]ap update load ap-name ap1 update-filename f1 //在线升级指定AP [huawei-wlan-view]ap update load ap-id 0 update-filename f1 [huawei-wlan-view]ap update load ap-mac 1000-0000-0000 update-filename f1 [huawei-wlan-view]ap update reset ap-name ap1 //对指定AP进行升级复位 [huawei-wlan-view]ap update reset ap-id 0 [huawei-wlan-view]ap update reset ap-mac 1000-0000-0000 [huawei-wlan-view]ap update update-filename b1 ap-type 0 //配置指定类型AP对应的升级文件名 [huawei-wlan-view]ap update multi-load ap-type 0 //批量在线升级同一类型的AP [huawei-wlan-view]ap update multi-reset ap-type 0 //批量复位同一类型的AP [huawei-wlan-view]ap update multi-load ap-group ap-group1 //批量在线升级同一AP组的AP [huawei-wlan-view]ap update multi-reset ap-group ap-group1 //批量复位同一AP组的AP [huawei-wlan-view]ap update schedule-task task-id 0 start-time 1:00 2022/7/1 stop-time 5:00 2022/7/10 ap-type 0 //配置定时升级AP的任务 [huawei-wlan-view]ap update schedule-task task-id 0 start-time 1:00 2022/7/1 stop-time 5:00 2022/7/10 ap-group ap-group1 [huawei-wlan-view]provision-ap //进入AP上线参数配置视图 [huawei-wlan-provision-ap]ap-mode fat //配置AP的运行模式,缺省为FIT模式 [huawei-wlan-provision-ap]ap-mode cloud [huawei-wlan-provision-ap]commit ap-name ap1 //下发配置，一个AP、一组AP或所有AP重启后加载系统文件切换运行模式 [huawei-wlan-provision-ap]commit ap-mac 1000-0000-0000 [huawei-wlan-provision-ap]commit ap-id 0 [huawei-wlan-provision-ap]commit ap-group ap-group1 [huawei-wlan-view]ap-reset all //复位AP [huawei-wlan-view]ap manufacturer-config ap-id 0 //恢复AP的出厂配置 [huawei-wlan-view]ap manufacturer-config ap-name ap1 [huawei-wlan-view]ap manufacturer-config ap-mac 1000-0000-0000 [huawei-wlan-view]undo ap ap-name ap1 //删除AP [huawei-wlan-view]undo ap ap-id 0 [huawei-wlan-view]undo ap ap-mac 1000-0000-0000 [huawei-wlan-view]undo ap ap-group ap-group1 [huawei-wlan-view]report-sta-info enable //使能AC主动上报STA的流量信息和在AP中的上线时长信息的功能 [huawei-wlan-ap-0]coordinate longitude e 10 latitude s 20 //配置AP的经纬度坐标 [huawei-wlan-view]ap-system-profile name a1 //创建AP系统模板，并进入模板视图 [huawei-wlan-ap-system-prof-a1]management-vlan 10 //配置AP有线口发送CAPWAP报文携带管理VLAN Tag [huawei-wlan-ap-system-prof-a1]cpu-usage threshold 90 //配置AP的CPU使用率的告警阈值,缺省为90 [huawei-wlan-ap-system-prof-a1]high-temperature threshold 80 //配置AP的高温告警阈值 [huawei-wlan-ap-system-prof-a1]memory-usage threshold 80 //配置AP的内存使用率的告警阈值,缺省为80 [huawei-wlan-ap-system-prof-a1]low-temperature threshold 0 //配置AP的低温告警阈值 [huawei-wlan-ap-system-prof-a1]alarm-restriction period 60 //配置AP的告警抑制周期,缺省为60秒 [huawei]access-user syslog-restrain period 300 //配置Syslog日志抑制周期,缺省为300s [huawei]access-user syslog-restrain enable //使能Syslog日志抑制功能,缺省已使能 [huawei]wlan [huawei-wlan-view]ap-system-profile name a1 [huawei-wlan-ap-system-prof-a1]log-record-level info //配置AP需要备份的日志等级,缺省为info [huawei-wlan-ap-system-prof-a1]log-record-level alert [huawei-wlan-ap-system-prof-a1]log-record-level critical [huawei-wlan-ap-system-prof-a1]log-record-level debug [huawei-wlan-ap-system-prof-a1]log-record-level emergency [huawei-wlan-ap-system-prof-a1]log-record-level error [huawei-wlan-ap-system-prof-a1]log-record-level notice [huawei-wlan-ap-system-prof-a1]log-record-level warning [huawei-wlan-ap-system-prof-a1]log-server ip-address 10.1.1.102 //配置日志服务器IP地址并使能AP的日志备份功能 [huawei-wlan-view]ap lldp enable //使能WLAN视图下的LLDP功能 [huawei-wlan-view]port-link-profile name p1 [huawei-wlan-port-link-prof-p1]lldp enable //使能AP有线口的LLDP功能, 缺省已使能 [huawei-wlan-port-link-prof-p1]lldp tlv-enable basic-tlv all //配置AP有线口发布可选的TLV类型 [huawei-wlan-view]wired-port-profile name w1 //创建AP有线口链路模板，并进入模板视图 [huawei-wlan-wired-port-w1]port-link-profile p1 //在AP有线口模板下引用AP有线口链路模板 [huawei-wlan-view]ap-system-profile name a1 [huawei-wlan-ap-system-prof-a1]lldp admin-status rx //配置AP的LLDP的工作模式,缺省情为TxRx [huawei-wlan-ap-system-prof-a1]lldp admin-status tx [huawei-wlan-ap-system-prof-a1]lldp admin-status txrx [huawei-wlan-ap-system-prof-a1]lldp report-interval 30 //配置AP向AC上报邻居信息的最小时间间隔,缺省为30秒 [huawei-wlan-ap-system-prof-a1]lldp restart-delay 2 //配置AP的LLDP模块从禁用状态重新使能的延迟时间,缺省为2秒 [huawei-wlan-ap-system-prof-a1]lldp message-transmission interval 30 //配置AP向邻居设备发送LLDP报文的时间周期,缺省为30秒 [huawei-wlan-ap-system-prof-a1]lldp message-transmission delay 2 //配置AP向邻居设备发送LLDP报文的延迟时间,缺省为2秒 [huawei-wlan-ap-system-prof-a1]lldp message-transmission hold-multiplier 4 //配置AP信息在邻居设备中保持的时间倍数,缺省是4 [huawei-wlan-ap-system-prof-a1]sample-time 30 //配置AP的采样时间间隔,缺省为30秒 [huawei-wlan-ap-system-prof-a1]keep-service enable //使能CAPWAP断链业务保持功能，当AP与AC的CAPWAP链路中断后，AP能够继续提供数据服务 [huawei-wlan-ap-system-prof-a1]keep-service enable allow new-access //使能断链后允许新用户接入功能 [huawei-wlan-ap-system-prof-a1]mtu 1500 //配置AP上管理VLAN对应的VLANIF接口MTU值,缺省为1500字节 [huawei-wlan-ap-system-prof-a1]eapol-start dest-address transform-condition always //配置AP需要进行转换的EAPOL-Start报文特征,缺省只转换目的MAC为AP的BSSID的EAPOL-Start报文 [huawei-wlan-ap-system-prof-a1]eapol-start dest-address transform-condition equal-bssid [huawei-wlan-ap-system-prof-a1]eapol-start dest-address transform-to broadcast //配置AP将EAPOL-Start报文封装为广播、组播或单播报文,缺省AP将EAPOL-Start报文封装为组播报文 [huawei-wlan-ap-system-prof-a1]eapol-start dest-address transform-to multicast [huawei-wlan-ap-system-prof-a1]eapol-start dest-address transform-to mac 1000-0000-0000 [huawei-wlan-ap-system-prof-a1]eapol-response dest-address transform-condition always //配置AP需要进行转换的EAPOL-Response报文特征,缺省只转换目的MAC为AP的BSSID的EAPOL-Response报文 [huawei-wlan-ap-system-prof-a1]eapol-response dest-address transform-condition equal-bssid [huawei-wlan-ap-system-prof-a1]eapol-response dest-address transform-to broadcast //置AP将EAPOL-Response报文封装为广播、组播或单播报文,缺省AP将EAPOL-Response报文封装为自主学习MAC地址的单播报文 [huawei-wlan-ap-system-prof-a1]eapol-response dest-address transform-to multicast [huawei-wlan-ap-system-prof-a1]eapol-response dest-address transform-to mac 1000-0000-0000 [huawei-wlan-ap-system-prof-a1]eapol-response dest-address transform-to learning [huawei]display ap all //查看AP信息 [huawei]display ap update configuration //查看AP版本升级时的配置信息 [huawei]display ap update status all //查看AP升级进度的信息 [huawei]display ap update schedule-task //查看定时升级AP任务的信息 [huawei]display ap-type all //查看AP设备类型信息 [huawei]display ap version all //查看AP的版本信息 [huawei]display ap coordinate all //查看AP的经纬度信息 [huawei]display ap-system-profile all //查看AP系统模板的配置信息和引用信息 [huawei]display references ap-system-profile name a1 //查看AP系统模板的引用信息 [huawei-wlan-view]ap username admin password cipher //配置登录AP的用户名和密码,缺省用户名为“admin”，密码为“[email protected]” [huawei-wlan-view]display ap username //查看登录AP的用户信息 [huawei-wlan-view]display references ap-system-profile name a1 //查看AP系统模板的引用信息 [huawei-wlan-view]ap-system-profile name a1 [huawei-wlan-ap-system-prof-a1]telnet enable //使能AP的Telnet服务功能 [huawei-wlan-view]vap-profile name vap1 //进入VAP模板视图 [huawei-wlan-vap-prof-vap1]type ap-management //配置VAP的类型为管理AP型,缺省为service [huawei]display vap-profile all //查看VAP模板的配置信息和引用信息 [huawei]display references vap-profile name vap1 //查看VAP模板的引用信息 [huawei-wlan-view]security-profile name s1 //创建天线对准VAP使用的安全模板，并进入模板视图 [huawei-wlan-sec-prof-s1]security wpa psk pass-phrase abc@1234 aes //配置安全策略和安全密钥 [huawei-wlan-view]ssid-profile name s1 //创建SSID模板，并进入模板视图 [huawei-wlan-ssid-prof-s1]ssid ssid1 //配置SSID名称 [huawei-wlan-view]vap-profile name v1 //创建VAP模板，并进入模板视图 [huawei-wlan-vap-prof-v1]temporary-management enable //配置VAP为离线管理VAP和天线对准VAP,缺省为普通的业务VAP [huawei-wlan-vap-prof-v1]ssid-profile s1 //在VAP模板中引用SSID模板 [huawei-wlan-vap-prof-v1]security-profile s1 //在VAP模板中引用安全模板 [huawei-wlan-view]ap-system-profile name a1 //创建并进入AP系统模板视图 [huawei-wlan-ap-system-prof-a1]temporary-management enable //使能AP离线管理VAP功能和天线对准VAP功能 [huawei-wlan-view]ap-group name g1 //进入AP组视图 [huawei-wlan-ap-group-g1]vap-profile v1 wlan 1 radio all //将指定的VAP模板引用到射频 [huawei-wlan-view]ap-id 0 //进入AP视图 [huawei-wlan-ap-0] radio 0 //进入射频视图 [AC1-wlan-radio-0/0]vap-profile v1 wlan 1 //配置射频引用VAP模板 [huawei-wlan-ap-group-g1]ap-system-profile a1 //配置AP组引用AP系统模板 [huawei-wlan-view]ap-id 0 [huawei-wlan-ap-0] ap-system-profile a1 //配置AP引用AP系统模板 [huawei-wlan-view]wired-port-profile name w1 //创建AP有线口模板，并进入模板视图 [huawei-wlan-wired-port-w1]stp enable //开启AP有线口的STP功能 [huawei-wlan-wired-port-w1]mode root //配置AP有线口的工作模式；AP有线口作为上行接口连接AC时，需配置AP有线口为root模式，root模式下AP有线口会自动加入业务VLAN和用户的个性VLAN（如Radius服务器为用户分配的VLAN等）。AP有线口作为下行接口连接有线终端时，需配置AP有线口为endpoint模式，endpoint模式下AP有线口缺省不会加入任何VLAN [huawei-wlan-wired-port-w1]mode endpoint [huawei-wlan-wired-port-w1]mode middle [huawei-wlan-wired-port-w1]dhcp trust port //开启AP有线口的DHCP信任功能, 只对AP上行口生效 [huawei-wlan-wired-port-w1]learn-client-address enable //开启AP有线口下的终端地址学习功能 [huawei-wlan-wired-port-w1]ipsg enable //开启AP有线口下的IP报文绑定检查功能 [huawei-wlan-wired-port-w1]dai enable //开启AP有线口下的动态ARP检测功能 [huawei-wlan-wired-port-w1]traffic-optimize broadcast-suppression packets 10 //配置AP有线口下允许接收的最大广播报文流量 [huawei-wlan-wired-port-w1]traffic-optimize multicast-suppression packets 10 //配置AP有线口下允许接收的最大组播报文流量 [huawei-wlan-wired-port-w1]traffic-optimize unicast-suppression packets 10 //配置AP有线口下允许接收的最大未知单播报文流量 [huawei-wlan-wired-port-w1]stp auto-shutdown enable //开启AP有线口上的STP与接口Shutdown联动功能 [huawei-wlan-wired-port-w1]stp auto-shutdown recovery-time 600 //配置AP有线口上的STP与接口Shutdown联动自动恢复时间间隔,缺省为600秒 [huawei-wlan-wired-port-w1]vlan tagged 10 //配置AP有线口加入的VLAN, 缺省AP有线口放通所有VLAN，其中VLAN1以untagged方式加入AP有线口，其他VLAN以tagged方式加入AP有线口 [huawei-wlan-wired-port-w1]vlan untagged 10 [huawei-wlan-wired-port-w1]traffic-filter inbound ipv4 acl 3000 //配置AP有线口基于ACL对报文进行过滤功能 [huawei-wlan-wired-port-w1]traffic-filter outbound ipv4 acl 3000 [huawei-wlan-wired-port-w1]traffic-remark inbound ipv4 acl 3000 dot1p 1 //配置AP有线口模板下基于ACL对报文进行优先级重标记功能 [huawei-wlan-wired-port-w1]traffic-remark outbound ipv4 acl 3000 dot1p 1 [huawei-wlan-wired-port-w1]user-isolate all //配置AP有线口模板下用户隔离功能 [huawei-wlan-wired-port-w1]vlan pvid 10 //配置AP有线口pvid [huawei-wlan-view]port-link-profile name p1 //创建AP有线口链路模板，并进入模板视图 [huawei-wlan-port-link-prof-p1]crc-alarm enable //使能AP有线口的CRC错误告警功能q [huawei-wlan-view]wired-port-profile name w1 //进入AP有线口模板视图 [huawei-wlan-wired-port-w1]port-link-profile p1 //在AP有线口模板下引用AP有线口链路模板 [huawei-wlan-view]ap-group name g1 [huawei-wlan-ap-group-g1]wired-port-profile w1 gigabitethernet 1 //在AP中引用AP有线口模板 [huawei]display wired-port-profile all //查看AP有线口模板的配置信息和引用信息 [huawei]display port-link-profile all //查看AP有线口链路模板的配置信息和引用信息 [huawei]display references wired-port-profile name w1 //查看AP有线口模板的引用信息 [huawei]display references port-link-profile name p1 //查看AP有线口链路模板的引用信息 [huawei]display mac-address 1000-0000-0000 ap-all //查看所有AP上指定MAC地址的MAC表项 [huawei]display mac-address ap-id 0 ethernet 1 //查看AP有线口所有动态MAC地址表项 [huawei]display ap wired-port gigabitethernet 1 ap-id 0 //查看AP有线口的配置 [huawei-wlan-view]ap-system-profile name a1 [huawei-wlan-ap-system-prof-a1]poe max-power 15400 //配置AP的最大对外输出功率,缺省为PoE电源模块提供的功率总和 [huawei-wlan-ap-system-prof-a1]poe power-reserved 10 //配置AP的PoE预留功率占PoE可用功率的比例 [huawei-wlan-ap-system-prof-a1]poe power-threshold 100 //设置PoE电源的告警阈值功率百分比,缺省为100% [huawei-wlan-ap-system-prof-a1]poe high-inrush enable //开启允许上电瞬间的高冲击电流功能 [huawei-wlan-view]port-link-profile name p1 //创建AP有线口链路模板，并进入模板视图 [huawei-wlan-port-link-prof-p1]poe priority critical //配置AP的PoE接口供电的优先级,缺省为low [huawei-wlan-port-link-prof-p1]poe priority high [huawei-wlan-port-link-prof-p1]poe priority low [huawei]time-range t1 7:00 to 17:00 daily //定义一个PoE的下电时间段 [huawei-wlan-view]port-link-profile name p1 //创建AP有线口链路模板，并进入模板视图 [huawei-wlan-port-link-prof-p1]poe power-off time-range t1 //配置的PoE下电时间段 [huawei-wlan-port-link-prof-p1]poe legacy enable //开启AP对PD的兼容性检测功能 [huawei-wlan-view]ap-system-profile name ap1 //创建AP系统模板，并进入模板视图 [huawei-wlan-ap-system-prof-ap1]poe af-inrush enable //配置AP的PoE供电标准为IEEE 802.3af标准, 缺省为IEEE 802.3at标准 [huawei-wlan-view]port-link-profile name p1 //创建AP有线口链路模板，并进入模板视图 [huawei-wlan-port-link-prof-p1]poe force-power //开启AP接口PoE供电功能 [huawei-wlan-view]wired-port-profile name w1 //进入AP有线口模板视图 [huawei-wlan-wired-port-w1]port-link-profile p1 //在AP有线口模板下引用AP有线口链路模板 [huawei-wlan-view]ap-group name g1 //进入AP组视图 [huawei-wlan-ap-group-g1]wired-port-profile w1 gigabitethernet 1 //在AP组中引用AP有线口模板 [huawei-wlan-view]rf-ping 1000-0000-0000 //主动探测无线链路质量 [huawei-wlan-view]ap-ping ap-name ap1 10.1.1.1 //配置AP设备去Ping一个网络设备，检测从AP到指定网络设备之间的网络是否连通 [huawei]display ap run-info ap-id 0 //查看AP的运行信息 [huawei]display ap performance statistics ap-id 0 //查看AP性能统计信息 [huawei]display radio all //查看AP的射频信息 [huawei]display ap asyn-message err-info all //查看AP重启失败的记录 [huawei]display ap uncontrol all //查看非法AP的存在情况 [huawei]display channel switch-record all //查看设备信道切换的记录信息 [huawei]display ap traffic statistics wireless ap-id 0 radio 0 //查看指定AP射频上的报文统计信息 [huawei]display ap elabel all //查看AP的电子标签信息 [huawei]display ap port all //查看AP的端口状态和流量信息 [huawei]display distribute-ap all //查看RU的信息 [huawei]display ap statistics //查看添加到AC上的AP的AP类型统计信息 [huawei]display ap lldp neighbor ap-id 0 //查看指定AP的LLDP邻居信息 [huawei]display ap neighbor ap-id 0 //查看指定射频的邻居信息 [huawei]display ap around-ssid-list ap-id 0 //查看指定AP的邻居的SSID