10 Device Management

10.1 AC Management

10.1.1 AC Configuration

Context

An AC manages APs, controls WLAN user access, and guarantees security. APs can communicate with the AC only after the basic AC attributes are configured.

Procedure

Choose Device Management > AC Management > AC Configuration.
Figure 10-1 AC Configuration
On the AC Configuration tab page, set parameters described in Table 10-1.

Click Apply.

NOTICE:

When the country code is changed on an AC, information about APs connected to the AC is deleted and the APs are reset.

Table 10-1 AC configuration parameter

Parameter	Description
ID	AC ID.
Country code	AC country code.
AP authentication mode	Authentication mode used to authenticate APs. By default, the AC authenticates APs using MAC address authentication. NOTE: MAC: The AP authentication mode can be set to MAC address authentication. SN: The AP authentication mode can be set to SN authentication. No authentication: The AP authentication mode can be set to non-authentication.
AC source interface	Source interface of the AC. VLANIF: A VLANIF interface is used as the source interface. LoopBack: A loopback interface is used as the source interface. Virtual IP address: The virtual IP address of the VRRP group is used as the source interface. NOTE: The selected source interface must have an IP address. To delete the AC's source interface, click .
AP data buffer	Whether to enable the AC to buffer AP data.
Buffer duration (min)	Period during which the AC buffers AP data.
Forwarding mode	Forwarding mode of the AC.

10.2 AP Management

10.2.1 AP Information

Context

You can view information about the AP only after an AP goes online or add an AP offline.

NOTICE:

If the status of an AP is fault, the AP cannot be restarted.
During the restart, you are disconnected from the AP.

Procedure

Available APs

Adding an AP

Choose Device Management > AP Management > AP Info.
Figure 10-2 AP Info
In the Available APs area, click Create. In the Create AP dialog box that is displayed, set parameters. See Table 10-2 for description of the parameters.

Click OK. The AP is added to the Available APs.

Table 10-2 Parameters for adding an AP

Parameter	Description
ID	ID of an AP to be added.
Name	Name of an AP to be added.
Type	Type of an AP to be added. NOTE: If you select Customize, configure the name and type ID of the customized AP. The name must begin with WA, AP, wa, or ap.
Type name	Name of the self-defined AP to be added.
Type ID	ID of the self-defined AP to be added.
MAC address	MAC address of an AP to be added. NOTE: When the authentication mode is non-authentication on the AC, you must set MAC address or SN. When the authentication mode is MAC address authentication on the AC, you must set MAC address.
SN	SN of an AP to be added. NOTE: When the authentication mode is non-authentication on the AC, you must set MAC address or SN. When the authentication mode is SN authentication on the AC, you must set SN.
Access-mode	Radio that the AP allows STAs to use. 2.4 GHz: STAs access the AP through the 2.4 GHz radio. 5 GHz: STAs access the AP through the 5 GHz radio preferentially. NOTE: When the AP and STAs support both 5 GHz and 2.4 GHz, the AP can allow the STAs to access only the 5 GHz radio.
AC priority	Priority of the AC. NOTE: A smaller value indicates a higher priority.
Region	Region to which the AP is added.
Profile	Profile used by the AP.

Modifying an AP

Choose Device Management > AP Management > AP Info.
In the Available APs area, click corresponding to an AP.
In the Modify AP dialog box that is displayed, set parameters described in Table 10-3. Parameter AP ID cannot be modified.

Click OK.

Table 10-3 Parameters for modifying an AP

Parameter	Description
ID	ID of an AP.
Name	Name of an AP to be modified.
Access mode	Radio that the AP allows STAs to use. 2.4 GHz: STAs access the AP through the 2.4 GHz radio. 5 GHz: STAs access the AP through the 5 GHz radio. NOTE: When the AP and STAs support both 5 GHz and 2.4 GHz, the AP can allow the STAs to access only the 5 GHz radio.
AC priority	Priority of the AC. NOTE: A smaller value indicates a higher priority.
Profile	Profile used by the AP.
Forwarding mode	Data forwarding mode of an AP. This parameter cannot be set when service set-based forwarding is used.
Channel bandwidth	Channel bandwidth of the specified radio on the AP.
Channel	Channel of the specified radio on the AP. NOTE: After an AP region is configured, this parameter can be set to a channel supported by the AP region.
Power level	Power level of a specified radio on the AP.
MCS value	MCS value of a specified radio on the AP. NOTE: This parameter is available only when radio type is 802.11n, 802.11a/n, 802.11g/n, or 802.11b/g/n.
Multicast MCS value	Multicast MCS value of a specified radio on the AP. NOTE: This parameter is available only when radio type is 802.11n, 802.11a/n, 802.11g/n, or 802.11b/g/n.
Multicast Rate value	Multicast rate of a specified radio on the AP. NOTE: By default, the rate of wireless multicast packets is 11 Mbit/s for a 80211b, 80211bg, 80211bgn, or 80211n radio and 6 Mbit/s for radios of other types. If you configure the maximum rate for a radio but the radio does not support the configured maximum rate, the configuration fails. MCS value and rate of multicast packets cannot be configured simultaneously.
Multi-user traffic load balancing	Whether to enable the multi-user load balancing function.
AP wired interface working mode	Working mode of an AP wired interface. root: The wired interface connects to the AC. endpoint: The wired interface connects to a host or Layer 2 network.
AP wired interface user isolate	User isolation on an AP wired interface. The user isolation function prevents STAs associated with the same AP from forwarding Layer 2 packets to each other. This function ensures communication security on wired interfaces and allows uniform charging for users. NOTE: Before you enable user isolation on an AP wired interface, the AP wired interface must work in endpoint mode.
AP wired interface STP	STP function on an AP wired interface. The STP function prevents loops on the network.
Default VLAN	Default VLAN on an AP wired interface.
Untagged VLAN	Wired interfaces are added to a VLAN in untagged mode.
Tagged VLAN	Wired interfaces are added to a VLAN in tagged mode.

Replacing an AP

Choose Device Management > AP Management > AP Info.
In the Available APs area, click corresponding to an AP.

In the AP Replace dialog box that is displayed, set parameters described in Table 10-4.

Table 10-4 Parameters for replacing an AP

Parameter	Description
MAC address	MAC address of the new AP. If the MAC address is null, the MAC address of the AP remains unchanged. If MAC address authentication is used, the MAC address cannot be null.
SN	SN of the new AP. If the SN is null, the SN of the AP remains unchanged. If SN authentication is used, the SN cannot be null.

Deleting an AP

Choose Device Management > AP Management > AP Info.
In the Available APs area, select an AP and click Delete. In the Information dialog box that is displayed, click OK.

Restarting an AP

Choose Device Management > AP Management > AP Info.
In the Available APs area, select an AP to be restarted and click Restart. In the Information dialog box that is displayed, click OK.

Restarting all APs

Choose Device Management > AP Management > AP Info.
In the Available APs area, click Restart All APs. In the Information dialog box that is displayed, click OK.

Adding an AP to a specified AP region

Choose Device Management > AP Management > AP Info.
In the Available APs area, select an AP and click Add to Region. In the AP Region listdialog box that is displayed, select a region and click OK.

Delivering configurations to an AP

Choose Device Management > AP Management > AP Info.
In the Available APs area, select an AP and click Commit Configuration. In the Information dialog box that is displayed, click OK.

Searching for an AP

Choose Device Management > AP Management > AP Info.
Set Search and the query criteria, and click Go. You can view, modify, delete, restart, and deliver configurations to an AP, and add an AP to a region.

Unauthorized APs
- Allowing an unauthorized AP to go online on an AC
1. Choose Device Management > AP Management > AP Info.
2. In the Unauthorized APs area, select an AP and click Confirm. In the Information dialog box that is displayed, click OK.
- Allowing all unauthorized APs to go online on an AC
1. Choose Device Management > AP Management > AP Info.
2. In the Unauthorized APs area, click Confirm All. In the Information dialog box that is displayed, click OK.
- Adding unauthorized APs to the MAC address whitelist and SN whitelist.
1. Choose Device Management > AP Management > AP Info.
2. In the Unauthorized APs area, click located at the right of an AP. In the Add To Whitelist dialog box that is displayed, enter the MAC address and SN and click OK.
  NOTE:
  If the AP authentication mode is set to non-authentication, either the MAC address or the SN must be entered; if the AP authentication mode is set to MAC authentication, the MAC address must be entered; if the AP authentication mode is set to SN authentication, the SN must be entered.

10.2.2 AP Region

Context

Adjusting the radio channel and power of an AP may lead to adjustment of another AP. To quicken adjustment, minimize the impact, and reduce the workload, all the APs accessing the same AC can be divided into several regions. The impact of adjustment on an AP is limited within the local region. An AP region can also be used for batch AP upgrade. You can upgrade APs of the same type in the same region in batches.

Procedure

Creating an AP region

Choose Device Management > AP Management > AP Region.
Figure 10-3 AP Region
In the AP Region, click Create. In the Create AP Region dialog box that is displayed, set parameters described in Table 10-5.

Click OK. The AP region is added to the AP region list.

Table 10-5 Parameters for creating an AP region

Parameter	Description
Region ID	ID of an AP region to be added.
Region name	Name of an AP region to be added.
Deployment mode	Deployment mode of an AP region. The default value is Common.
Country code	Country code specified for an AP region.

Modifying an AP region
1. Choose Device Management > AP Management > AP Region.
2. In AP Region, click corresponding to an AP region.
3. In the Modify AP Region dialog box that is displayed, set parameters described in Table 10-5. Parameter Region ID cannot be modified.
4. Click OK.
Deleting an AP region
1. Choose Device Management > AP Management > AP Region.
2. In the AP Region, select an AP region and click Delete. In the Information dialog box that is displayed, click OK.
  NOTICE:
  The configured default AP region, system default AP region, and AP regions contains any AP cannot be deleted.
Configuring the default AP region
1. Choose Device Management > AP Management > AP Region.
2. In AP Region, click corresponding to an AP region to configure the region as the default region.
Configuring a calibration channel set in the AP region
1. Choose Device Management > AP Management > AP Region.
2. In AP Region, click corresponding to an AP region to configure a calibration channel set in the AP region.
  You can specify a calibration channel set for the AP. When implementing radio calibration, the device can select channels from the calibration channel set. This reduces the burden on the device. There are global calibration channel set and region calibration channel set.
  The device implements radio calibration according to the following principles:
  - If no country code is configured in the AP region, the device implements radio calibration on global calibration channels.
  - If a country code is configured in the AP region, the device implements radio calibration based on whether calibration channels are specified in the AP region.
    - If calibration channels are specified in the AP region, the device implements radio calibration only on channels specified in the AP region.
    - If no calibration channel is specified in the AP region, the device implements radio calibration on channels in the calibration channel set that corresponds to the country code in the AP region.
    - For configurations about the region calibration channel set, see Configuring a Calibration Channel Set in the AP Region in 10.2.2 AP Region.
  See 10.3.1 Radio Calibration for configurations of the global calibration channel set.
Searching for an AP region
1. Choose Device Management > AP Management > AP Region.
2. Set Search and the query criteria, and click Go. AP regions matching the query criteria are displayed. You can view, modify, and delete the AP regions.

10.2.3 AP Profile

Procedure

Creating an AP profile

Choose Device Management > AP Management > AP Profile.
Figure 10-4 AP Profile
In the AP Profile List area, click Create. In the Create AP Profile dialog box that is displayed, set parameters described in Table 10-6.

Click OK. The AP profile is added to the AP profile list.

Table 10-6 Parameters for creating an AP profile

Parameter	Description
Profile name	Name of an AP profile to be added.
Eapol-response packet encapsulation	Eapol-Response packet encapsulation mode. If the authentication server can process only EAP broadcast packets, configure the AP to encapsulate Eapol-Response packets into broadcast packets. If the authentication server can process only EAP multicast packets, configure the AP to encapsulate Eapol-Response packets into multicast packets. If the authentication server can process only EAP unicast packets, configure the AP to encapsulate Eapol-Response packets into unicast packets with specified MAC addresses or MAC addresses learned by the AP. By default, an AP encapsulates Eapol-Response packets into unicast packets with MAC addresses learned by the AP.
MAC address	MAC address specified for Eapol-Response packets.
Eapol-start packet encapsulation	Eapol-Start packet encapsulation mode. If the authentication server can process only EAP broadcast packets, configure the AP to encapsulate Eapol-Start packets into broadcast packets. If the authentication server can process only EAP multicast packets, configure the AP to encapsulate Eapol-Start packets into multicast packets. If the authentication server can process only EAP unicast packets, configure the AP to encapsulate Eapol-Start packets into unicast packets with specified MAC addresses. By default, an AP encapsulates Eapol-Start packets into multicast packets.
MAC address	MAC address specified for Eapol-Start packets.
Eapol-response packet transform	Eapol-Response packets to be transformed by the AP. Specified: Configures the AP to transform only the Eapol-Response packets with the destination MAC address being the AP's BSSID. All: Configures the AP to transform all Eapol-Response packets. By default, the AP transforms only the Eapol-Response packets with the destination MAC address being the AP's BSSID.
Eapol-start packet transform	Eapol-Start packets to be transformed by the AP. Specified: Configures the AP to transform only the Eapol-Start packets with the destination MAC address being the AP's BSSID. All: Configures the AP to transform all Eapol-Start packets. By default, the AP transforms only the Eapol-Start packets with the destination MAC address being the AP's BSSID.
MTU(bytes)	Specifies the maximum size of packets sent and received on an Ethernet port.
Log backup mode	Log backup mode. The value can be automatic backup or non-backup. By default, logs are auto backed up.
Log backup server IP	IP address of the log backup server.
Offline management	Whether to enable the offline management function. By default, offline management is disabled.
Sampling interval (s)	Sampling interval on an AP.
Statistics interval (s)	Interval for collecting statistics on an AP.
4-way-handshake	Specifies the device on which the key negotiation is performed when STAs using WPA/WPA2 authentication are roaming. By default, the key negotiation is performed on the AC when STAs using WPA/WPA2 authentication are roaming.

Modifying an AP profile
1. Choose Device Management > AP Management > AP Profile.
2. In AP Profile List area, click corresponding to an AP profile.
3. In the Modify AP Profile dialog box that is displayed, set parameters described in Table 10-6. Parameter Profile Name cannot be modified.
4. Click OK.
Deleting an AP profile
1. Choose Device Management > AP Management > AP Profile.
2. In the AP Profile List area, select an AP profile and click Delete. In the Informationdialog box that is displayed, click OK.
  NOTICE:
  The configured default AP profile, system default AP profile, and bound AP profiles cannot be deleted.
Configuring the default AP profile
1. Choose Device Management > AP Management > AP Profile.
2. In AP Profile List area, click corresponding to an AP profile to configure the profile as the default profile.
Searching for an AP profile
1. Choose Device Management > AP Management > AP Profile.
2. Set Profile name, and click Search. AP profiles matching the query criteria are displayed. You can view, modify, and delete the AP profiles.

10.2.4 AP Whitelist

Procedure

Adding an AP MAC address to the AP whitelist
1. Choose Device Management > AP Management > AP Whitelist.
  Figure 10-5 AP Whitelist
2. In the MAC Whitelist area, click Add. In the Add to MAC Whitelist dialog box that is displayed, set parameters described in Table 10-7.
3. Click OK. The AP MAC address is added to the AP whitelist.
  Table 10-7 Parameters for adding an AP MAC address to the AP whitelist
  Parameter
  Description
  MAC address
  MAC address of an AP to be added to the AP whitelist.

Parameter	Description
MAC address	MAC address of an AP to be added to the AP whitelist.

Adding AP MAC addresses to the AP whitelist in batches

Choose Device Management > AP Management > AP Whitelist.
In the MAC Whitelist area, click Batch Add. In the Batch Add to MAC Whitelist dialog box that is displayed, set parameters described in Table 10-8.

Click OK. The AP MAC addresses are added to the AP whitelist.

Table 10-8 Parameters for adding AP MAC addresses to the AP whitelist in batches

Parameter	Description
Start MAC address	Start MAC address when you add AP MAC addresses to the AP whitelist in batches.
End MAC address	End MAC address when you add AP MAC addresses to the AP whitelist in batches. The end MAC address must be larger than or equal to the start MAC address. AC6605: A maximum of 512 MAC addresses can be added in batches. AC6005: A maximum of 256 MAC addresses can be added in batches.

Deleting an AP MAC address from the AP whitelist
1. Choose Device Management > AP Management > AP Whitelist.
2. In the MAC Whitelist area, select an AP MAC address and click Delete. In the Information dialog box that is displayed, click OK.
Deleting AP MAC addresses from the AP whitelist in batches
1. Choose Device Management > AP Management > AP Whitelist.
2. In the MAC Whitelist area, click Batch Delete. In the Batch Delete MAC Whitelist dialog box that is displayed, set parameters described in Table 10-8.
3. Click OK. The AP MAC addresses are deleted from the AP whitelist.
Searching for an AP MAC address in the AP whitelist
1. Choose Device Management > AP Management > AP Whitelist.
2. Set MAC address and click Search. You can delete the found AP MAC address from the AP whitelist.
Operations on the SN whitelist are similar to those on the AP whitelist.
NOTE:
- When adding SNs to the whitelist in batches, ensure that the end SN is larger than or equal to the start SN and the two SNs are of the same length.
- AC6605: A maximum of 512 SNs can be deleted in batches.
- AC6005: A maximum of 256 SNs can be deleted in batches.

10.2.5 AP Blacklist

Procedure

Adding an AP MAC address to the AP blacklist
1. Choose Device Management > AP Management > AP Blacklist.
  Figure 10-6 AP Blacklist
2. In the MAC Blacklist area, click Add. In the Add to MAC Blacklist dialog box that is displayed, set parameters described in Table 10-9.
3. Click OK. The AP MAC address is added to the AP blacklist.
  Table 10-9 Parameters for adding an AP MAC address to the AP blacklist
  Parameter
  Description
  MAC address
  MAC address of an AP to be added to the AP blacklist.

Parameter	Description
MAC address	MAC address of an AP to be added to the AP blacklist.

Adding AP MAC addresses to the AP blacklist in batches

Choose Device Management > AP Management > AP Blacklist.
In the MAC Blacklist area, click Batch Add. In the Batch Add to MAC Blacklist dialog box that is displayed, set parameters described in Table 10-10.

Click OK. The AP MAC addresses are added to the AP blacklist.

Table 10-10 Parameters for adding AP MAC addresses to the AP blacklist in batches

Parameter	Description
Start MAC address	Start MAC address when you add AP MAC addresses to the AP blacklist in batches.
End MAC address	End MAC address when you add AP MAC addresses to the AP blacklist in batches. The end MAC address must be larger than or equal to the start MAC address. A maximum of 128 MAC addresses can be added to the AP blacklist in batches.

Deleting an AP MAC address from the AP blacklist
1. Choose Device Management > AP Management > AP Blacklist.
2. In the MAC Blacklist area, select an AP MAC address and click Delete. In the Information dialog box that is displayed, click OK.
Deleting AP MAC addresses from the AP blacklist in batches
1. Choose Device Management > AP Management > AP Blacklist.
2. In the MAC Blacklist area, click Batch Delete. In the Batch Delete MAC Blacklist dialog box that is displayed, set parameters described in Table 10-10.
3. Click OK. The AP MAC addresses are deleted from the AP blacklist.
Searching for an AP MAC address in the AP blacklist
1. Choose Device Management > AP Management > AP Blacklist.
2. Set MAC address and click Search. You can delete the found AP MAC address from the AP blacklist.

10.3 AP Maintenance

10.3.1 Radio Calibration

Procedure

Configure manual calibration.

Click Device Management > AP Maintenance > Radio Calibration. The Radio Calibration page is displayed.
In Radio Calibration Setting, set Calibration mode to Manual.

Click Advanced to set the calibration policy and sensitivity. See Table 10-11 for description of the parameters.

6f16040f160c4d60a573907a113378a3

Table 10-11 Calibration policy and sensitivity descriptions

Item	Description
Prevent rogue-ap	Set the radio calibration policy to Prevent rogue-ap. When rogue APs (rogue APs cannot be controlled by an AC) exist on a network, set the radio calibration policy to Prevent rogue-ap. The device then implements radio calibration to minimize the rogue AP interference on the entire network.
Prevent load ap	Set the radio calibration policy to Prevent load ap. When an AP is heavily loaded, set the radio calibration policy to Prevent load ap. The device then preferentially allocates channels with a little interference to the heavily loaded APs.
Prevent non-wifi	Set the radio calibration policy to Prevent non-wifi. When non-Wi-Fi devices exist on a network, set the radio calibration policy to Prevent non-wifi. The device then implements radio calibration to reduce interference of non-Wi-Fi devices on the network.
Calibration sensitivity	Configure radio calibration sensitivity. There are three levels of radio calibration sensitivity: Low Medium High
2.4G calibrate channel set 5G calibrate channel set	Configure the global calibration channel set. There are calibration channel sets for 2.4 GHz and 5 GHz radios. You can specify a calibration channel set for the AP. When implementing radio calibration, the device can select channels from the calibration channel set. This reduces the burden on the device. There are global calibration channel set and region calibration channel set. The device implements radio calibration according to the following principles: If no country code is configured in the AP region, the device implements radio calibration on global calibration channels. If a country code is configured in the AP region, the device implements radio calibration based on whether calibration channels are specified in the AP region. If calibration channels are specified in the AP region, the device implements radio calibration only on channels specified in the AP region. If no calibration channel is specified in the AP region, the device implements radio calibration on channels in the calibration channel set that corresponds to the country code in the AP region. For configurations about the region calibration channel set, see Configuring a Calibration Channel Set in the AP Regionin 10.2.2 AP Region.

Click Apply. The configuration is complete.
Click Start. Manual radio calibration is triggered.

Configure automatic calibration.

Click Device Management > AP Maintenance > Radio Calibration. The Radio Calibration page is displayed.
In Radio Calibration Setting, set Calibration mode to Auto and specify the value of Calibration interval.

Click Advanced to set the calibration policy and sensitivity. See Table 10-12 for description of the parameters.

6f16040f160c4d60a573907a113378a3

Table 10-12 Calibration policy and sensitivity descriptions

Item	Description
Prevent rogue-ap	Set the radio calibration policy to Prevent rogue-ap. When rogue APs (rogue APs cannot be controlled by an AC) exist on a network, set the radio calibration policy to Prevent rogue-ap. The device then implements radio calibration to minimize the rogue AP interference on the entire network.
Prevent load ap	Set the radio calibration policy to Prevent load ap. When an AP is heavily loaded, set the radio calibration policy to Prevent load ap. The device then preferentially allocates channels with a little interference to the heavily loaded APs.
Prevent non-wifi	Set the radio calibration policy to Prevent non-wifi. When non-Wi-Fi devices exist on a network, set the radio calibration policy to Prevent non-wifi. The device then implements radio calibration to reduce interference of non-Wi-Fi devices on the network.
Calibration sensitivity	Configure radio calibration sensitivity. There are three levels of radio calibration sensitivity: Low Medium High
2.4G calibrate channel set 5G calibrate channel set	Configure the global calibration channel set. There are calibration channel sets for 2.4 GHz and 5 GHz radios. You can specify a calibration channel set for the AP. When implementing radio calibration, the device can select channels from the calibration channel set. This reduces the burden on the device. There are global calibration channel set and region calibration channel set. The device implements radio calibration according to the following principles: If no country code is configured in the AP region, the device implements radio calibration on global calibration channels. If a country code is configured in the AP region, the device implements radio calibration based on whether calibration channels are specified in the AP region. If calibration channels are specified in the AP region, the device implements radio calibration only on channels specified in the AP region. If no calibration channel is specified in the AP region, the device implements radio calibration on channels in the calibration channel set that corresponds to the country code in the AP region. For configurations about the region calibration channel set, see Configuring a Calibration Channel Set in the AP Regionin 10.2.2 AP Region.

Click Apply. The configuration is complete.

Configure scheduled calibration.

Click Device Management > AP Maintenance > Radio Calibration. The Radio Calibration page is displayed.
In Radio Calibration Setting, set Calibration mode to Periodic and specify the value of Calibration time.

Click Advanced to set the calibration policy and sensitivity. See Table 10-13 for description of the parameters.

6f16040f160c4d60a573907a113378a3

Table 10-13 Calibration policy and sensitivity descriptions

Item	Description
Prevent rogue-ap	Set the radio calibration policy to Prevent rogue-ap. When rogue APs (rogue APs cannot be controlled by an AC) exist on a network, set the radio calibration policy to Prevent rogue-ap. The device then implements radio calibration to minimize the rogue AP interference on the entire network.
Prevent load ap	Set the radio calibration policy to Prevent load ap. When an AP is heavily loaded, set the radio calibration policy to Prevent load ap. The device then preferentially allocates channels with a little interference to the heavily loaded APs.
Prevent non-wifi	Set the radio calibration policy to Prevent non-wifi. When non-Wi-Fi devices exist on a network, set the radio calibration policy to Prevent non-wifi. The device then implements radio calibration to reduce interference of non-Wi-Fi devices on the network.
Calibration sensitivity	Configure radio calibration sensitivity. There are three levels of radio calibration sensitivity: Low Medium High
2.4G calibrate channel set 5G calibrate channel set	Configure the global calibration channel set. There are calibration channel sets for 2.4 GHz and 5 GHz radios. You can specify a calibration channel set for the AP. When implementing radio calibration, the device can select channels from the calibration channel set. This reduces the burden on the device. There are global calibration channel set and region calibration channel set. The device implements radio calibration according to the following principles: If no country code is configured in the AP region, the device implements radio calibration on global calibration channels. If a country code is configured in the AP region, the device implements radio calibration based on whether calibration channels are specified in the AP region. If calibration channels are specified in the AP region, the device implements radio calibration only on channels specified in the AP region. If no calibration channel is specified in the AP region, the device implements radio calibration on channels in the calibration channel set that corresponds to the country code in the AP region. For configurations about the region calibration channel set, see Configuring a Calibration Channel Set in the AP Regionin 10.2.2 AP Region.

Click Apply. The configuration is complete.

Check the calibration result.
1. Click Device Management > AP Maintenance > Radio Calibration. The Radio Calibration page is displayed.
2. Click Real-Time Channel And Power List to check the current working channel and power of the radio.
3. Set search criteria in Search and click Go. Channel and power of the APs matching the search conditions are displayed. You can check the channel and power of specified APs.

10.4 Backup Configuration

10.4.1 Backup Configuration

Context

In the AC + Fit AP networking, the AC manages and controls WLAN services of users. An AC may control hundreds of APs and thousands of STAs; therefore, the AC must be highly reliable. If the AC is faulty, the services of all users connected to the AC are interrupted. An AC can perform dual-link cold backup, dual-link hot backup, or VRRP hot backup based on actual requirements.

Dual-Link Cold Backup
As shown in Figure 10-7, an active AC and a standby AC are deployed on the WLAN. The AP establishes CAPWAP tunnels with the two ACs, and periodically exchanges CAPWAP packets with the ACs to monitor link status. The active AC controls access of STAs. If the AP detects a fault on the link between the AP and active AC, the AP requests the standby AC to trigger an active/standby switchover, that is, the standby AC becomes the active AC to control access of STAs. This mechanism improves WLAN reliability. After the original active AC is restored, the AP requests the active and standby ACs to perform revertive switchover. The restored AC becomes the active AC again.
Figure 10-7 Dual-link cold backup networking diagram
Dual-Link Hot Backup
An AP establishes CAPWAP tunnels with the active AC and standby AC. The two ACs synchronize control information and implement the heartbeat mechanism through the hot standby (HSB) function. When a fault occurs on the active AC, the standby AC can immediately detect it and fast switch the standby CAPWAP tunnel as the new active CAPWAP tunnel to prevent user services from being interrupted.
Figure 10-8 Dual-link hot backup networking diagram
VRRP Hot Backup
An AP can only obtain the IP address of one AC, which is the virtual IP address of the active and standby ACs in the VRRP group. The active and standby ACs are elected among the ACs in the VRRP group based on their priorities. The active AC manages and controls all APs and users, and periodically sends the standby AC the status information and information that needs to be backed up, including AP entries, CAPWAP link information, and user information. When a fault occurs on the active AC, the standby AC can immediately detect it using VRRP and fast switch the standby AC as the new active AC to prevent user services from being interrupted.
Figure 10-9 VRRP hot backup networking diagram

Procedure

Configuring device backup

Log in to the web platform and choose Device Management > Backup Configuration > Backup Configuration. The Backup Configuration page is displayed, as shown Figure 10-10.
Figure 10-10 Backup Configuration
Select Dual-link cold backup, Dual-link hot backup, or VRRP hot backup according to service requirements, as shown in Figure 10-11, Figure 10-12, and Figure 10-13. Set or enter corresponding backup parameters. For description of the parameters, see Table 10-14, Table 10-15, and Table 10-16.

Click Apply to complete the backup configuration.

Figure 10-11 Dual-link cold backup
06c373add89a4305a109169e3bffb702

Table 10-14 Description of dual-link cold backup parameters

Parameter	Description
AC dual-link backup state	Whether to enable dual-link backup. By default, dual-link backup is disabled globally.
AC dual-link restore state	Whether to enable the active/standby link switchback function. By default, the active/standby link switchback function is enabled. Assume that AC1 is the active AC and AC2 is the backup AC. When the link between AC1 and an AP fails, AC2 takes the active role and the link between AC2 and the AP becomes the active link. In the case that active/standby link switchback is enabled, when the link between AC1 and the AP recovers, the AP detects that AC1 priority is higher than AC2 and instructs AC1 and AC2 to perform switchback. AC1 becomes the active AC again.
Local priority	Priority of the AC. In dual-link backup mode, the AC with a higher priority acts as the active AC and the AC with a lower priority acts as the standby AC. A smaller value indicates a higher priority.
Standby AC IP address	IP address of the standby AC.

Figure 10-12 Dual-link hot backup
719f5a287ea141999ef54b531d524198

Table 10-15 Description of dual-link hot backup parameters

Parameter	Description
AC dual-link backup state	For description of this parameter, see Table 10-14.
AC dual-link restore state	For description of this parameter, see Table 10-14.
Local priority	For description of this parameter, see Table 10-14.
Standby AC IP address	For description of this parameter, see Table 10-14.
HSB channel	HSB channel. You need to create or modify the HSB channel on the HSB page.
Backup service	User: enables or disables backup of user access services. AP: enables or disables backup of WLAN services.

Figure 10-13 VRRP hot backup
b730bafb02bf4cb79196d91c20d9dc63

Table 10-16 Description of VRRP hot backup parameters

Parameter	Description
HSB function	Whether to enable the HSB function. To configure VRRP hot backup, the HSB function must be enabled.
VRRP version	VRRP has two versions: Version2 and Version3. VRRPv3 does not support authentication, whereas VRRPv2 supports. VRRPv3 uses the centiseconds, whereas VRRPv2 uses the seconds.
Learning the interval for VRRP packets	Whether to enable the function that learns the interval for sending VRRP packets. When the VRRP group switches to the active status due to a link failure, the forwarding of service traffic will be interrupted. Therefore, VRRP smooth switching must be enabled. Before that, you must enable the function that learns the interval for sending VRRP advertisement packets. After this function is enabled, the non-master devices learn the interval for sending VRRP advertisement packets and synchronize their timers with the master device.
Sending gratuitous ARP packets	Whether to enable the function that sends gratuitous ARP packets. To enable the network elements connected to the AC to learn the virtual IP address of the VRRP group, the VRRP group needs to send gratuitous ARP packets to the network elements.
Interval for sending gratuitous ARP packets (s)	Interval for sending gratuitous ARP packets.
HSB group	HSB group. You need to create or modify an HSB group on the HSB page.
Recover delay time(s)	Specifies the delay in recovering a VRRP group.

10.4.2 VRRP

Context

The Virtual Router Redundancy Protocol (VRRP) integrates multiple routing devices to a virtual router and uses a certain mechanism to switch traffic to a standby router when the next hop router of the host fails, ensuring continuous and reliable communication.

Procedure

Creating a VRRP

Log in to the web platform and choose Device Management > Backup Configuration > VRRP. The VRRP configuration page is displayed, as shown in Figure 10-14.
Figure 10-14 VRRP
Click Create. In the displayed Create VRRP text box, select or enter each parameter for VRRP configuration. For description of the parameters, see Table 10-17.

Click OK to complete VRRP configuration.

Table 10-17 Description of the parameters for creating a VRRP group

Parameter		Description
VLANIF/IP		VLANIF interface that requires VRRP configuration. The VLANIF interface must exist in the system.
VRID		ID of a VRRP group. The value range is 1-255.
Virtual IP		Virtual IP address of the VRRP group. The virtual IP address can be either an idle IP address in the network segment of the VRRP group or the IP address of an interface in the VRRP group.
VRRP type		VRRP group type. Two types of VRRP groups are available: common VRRP group and management VRRP group.
VRID		Specifies the VRID of a VRRP group.
VRRP interface		Specifies the type and number of the interface configured with an mVRRP group.
Preemption mode		Whether to enable the preempt mode. In preempt mode, once a backup device has a higher priority than the current master device, it will automatically take the role as a master device.
Preemption delay		Preempt delay time set for the VRRP group. By default, the preempt delay time is 0, indicating immediate preemption. A backup device working in immediate preempt mode preempts to be the master device immediately when it detects that its priority is higher than the priority of the current master device.
Authentication mode		Available authentication modes for VRRP: None: The device neither authenticates VRRP advertisement packets to be sent nor authenticates received VRRP packets. It considers all the received VRRP packets as valid. MD5: The device uses the Message Digest 5 (MD5) algorithm to encrypt the authentication key and encapsulates the key in an outgoing VRRP advertisement packet. The device that receives the VRRP advertisement packet matches the authentication mode in the packet with the decrypted authentication key to check the validity of the packet. Simple: The device encapsulates the authentication mode and authentication key into an outgoing VRRP advertisement packet. The device that receives the VRRP advertisement packet compares the authentication mode and authentication key in the packet with those configured on itself. NOTE: MD5 authentication ensures higher security than simple authentication.
VRRP authentication key		VRRP authentication modes key.
Advertisement duration		Interval (in seconds) for sending VRRP advertisement packets by devices in the VRRP group. For VRRP version2, the value range is 1-255; for VRRP version3, the value range is 1-40. The master device sends VRRP advertisement packets to backup devices at intervals to notify the backup devices that it works normally. If backup devices do not receive any VRRP advertisement packets after the timer expires, the backup device with the highest priority becomes the new master device.
Priority		Priority of a device in the VRRP group, based on which the device role is determined.
Monitored Interface NOTE: The monitored interface is configured only when the VRRP type is set to a management VRRP group.	Interface name	Interface that needs to be tracked by VRRP.
	Priority	Whether to increase or reduce the VRRP priority of the interface to be monitored when the interface is Down.

Modifying the VRRP group
1. Log in to the web platform and choose Device Management > Backup Configuration > VRRP. The VRRP configuration page is displayed, as shown in Figure 10-14.
2. On the VRRP page, select the VRRP to be modified and click on the right.
3. On the Modify VRRP page, select the VRRP parameters to be modified and enter or select each parameter. For description of the parameters, see Table 10-17.
4. Click OK to complete VRRP modification.
Deleting the VRRP group
1. Log in to the web platform and choose Device Management > Backup Configuration > VRRP. The VRRP configuration page is displayed, as shown in Figure 10-14.
2. On the VRRP page, select the check box next to the VRRP to be deleted and click Delete.
3. In the dialog box that is displayed, click OK. The VRRP is deleted.
Searching for VRRP groups
1. Log in to the web platform and choose Device Management > Backup Configuration > VRRP. The VRRP configuration page is displayed, as shown in Figure 10-14.
2. In the VRRP area, set the search criteria and click Search. All VRRP groups matching the set conditions are displayed.

10.4.3 HSB

Context

In hot-standby backup mode, there are two devices, one acting as a master device and the other a backup one. The master device forwards services and the backup device monitors the forwarding. The master device periodically sends the backup device the status information and information that needs to be backed up.

To reduce impact of single-point failures on a wireless access network, a traditional backup solution deploys two devices on an access node for backup. Access devices on a wireless network usually run Dynamic Host Configuration Protocol (DHCP), network admission control (NAC), and wireless local area network (WLAN) services, which require real-time information backup from the master device to the backup device. For example, the master DHCP device must synchronize user status information to the backup DHCP device in real time. Otherwise, services will be interrupted after link switching.

Hot Standby (HSB) can implement redundancy between access devices while ensuring uninterrupted service transmission. The HSB service supports batch backup and real-time backup between the two access devices. Before link switching, the backup device synchronizes information from the master device. When the master device fails, service traffic is immediately switched to the backup device without interrupting services. This improves connection availability.

Procedure

HSB Channel List

Creating an HSB channel

Log in to the web platform and choose Device Management > Backup Configuration > HSB. The HSB configuration page is displayed, as shown in Figure 10-15.
Figure 10-15 HSB
On the Channel List page, click Create. In Create HSB Channel, select or enter each parameter to configure an HSB channel. For description of the parameters, see Table 10-18.

Click OK to complete HSB channel configuration.

Table 10-18 Description of the parameters for creating an HSB channel

Parameter	Description
Channel ID	HSB channel ID.
Local IP	Local IP address on the HSB channel.
Peer IP	Peer IP address on the HSB channel.
Local port	Local port on the HSB channel.
Peer port	Peer port on the HSB channel.
Retransmission count	Number of times for retransmitting heartbeat packets.
Retransmission interval(s)	Interval for sending heartbeat packets through the HSB channel. Heartbeat packets are used to detect the status of the data synchronization channel in a hot standby group. If the local end does not receive heartbeat packets of the peer end in the interval specified by Retransmit Times*Retransmit Interval, the local end considers that the channel where dual-system HSB data is synchronized is faulty.

Modifying an HSB channel

Log in to the web platform and choose Device Management > Backup Configuration > HSB. The HSB configuration page is displayed, as shown in Figure 10-15.
On the Channel List page, select the HSB channel to be modified and click on the right.
On the Modify HSB Channel page, choose the HSB channel parameters to be modified and enter or select each parameter. For description of the parameters, see Table 10-18.
Click OK to complete HSB channel modification.

Deleting an HSB channel

Log in to the web platform and choose Device Management > Backup Configuration > HSB. The HSB configuration page is displayed, as shown in Figure 10-15.
On the Channel List page, select the check box next to the HSB channel to be deleted and click Delete.
In the dialog box that is displayed, click OK. The HSB channel is deleted.

Searching for HSB channels

Log in to the web platform and choose Device Management > Backup Configuration > HSB. The HSB configuration page is displayed, as shown in Figure 10-15.
In the Channel List area, set the search criteria and click Search. All HSB channels matching the set conditions are displayed.

HSB Group

Creating an HSB group

Log in to the web platform and choose Device Management > Backup Configuration > HSB. The HSB configuration page is displayed, as shown in Figure 10-15.
On the Group List page, click Create. In Create HSB Group, select or enter each parameter to configure an HSB group. For description of the parameters, see Table 10-19.

Click OK to complete HSB group configuration.

Table 10-19 Description of the parameters for creating an HSB group

Parameter	Description
Group ID	HSB group ID.
HSB channel	HSB channel that has been created.
Backup service	DHCP: enables or disables backup of DHCP services. User: enables or disables backup of user access services. AP: enables or disables backup of WLAN services.
VRID	VRRP group ID.
Interface name	Interface configured with a VRRP group.

Modifying an HSB group

Log in to the web platform and choose Device Management > Backup Configuration > HSB. The HSB configuration page is displayed, as shown in Figure 10-15.
On the Group List page, select the HSB group to be modified and click on the right.
On the Modify HSB Group page, choose the HSB group parameters to be modified and enter or select each parameter. For description of the parameters, see Table 10-19.
Click OK to complete HSB group modification.

Deleting an HSB group

Log in to the web platform and choose Device Management > Backup Configuration > HSB. The HSB configuration page is displayed, as shown in Figure 10-15.
On the Group List page, select the check box next to the HSB channel to be deleted and click Delete.
In the dialog box that is displayed, click OK. The HSB group is deleted.

Searching for HSB groups

Log in to the web platform and choose Device Management > Backup Configuration > HSB. The HSB configuration page is displayed, as shown in Figure 10-15.
In the Group List area, set the search criteria and click Search. All HSB groups matching the set conditions are displayed.

From group: WLAN

Huawei Wireless Access Controllers V200R003C00 Web Platform Configuration Guide-Device Management

10 Device Management

10.1 AC Management

10.1.1 AC Configuration

Context

Procedure

10.2 AP Management

10.2.1 AP Information

Context

Procedure

10.2.2 AP Region

Context

Procedure

10.2.3 AP Profile

Procedure

10.2.4 AP Whitelist

Procedure

10.2.5 AP Blacklist

Procedure

10.3 AP Maintenance

10.3.1 Radio Calibration

Procedure

10.4 Backup Configuration

10.4.1 Backup Configuration

Context

Procedure

10.4.2 VRRP

Context

Procedure

10.4.3 HSB

Context

Procedure

Third Party’s Trade Secret

`@trans`drinking_poetry`~trans`

`@trans`bright_future`~trans`

`@trans`universal_genius`~trans`

My Followers

Enterprise

Consumer

Corporate

Carriers

Huawei Wireless Access Controllers V200R003C00 Web Platform Configuration Guide-Device Management

10 Device Management

10.1 AC Management

10.1.1 AC Configuration

Context

Procedure

10.2 AP Management

10.2.1 AP Information

Context

Procedure

10.2.2 AP Region

Context

Procedure

10.2.3 AP Profile

Procedure

10.2.4 AP Whitelist

Procedure

10.2.5 AP Blacklist

Procedure

10.3 AP Maintenance

10.3.1 Radio Calibration

Procedure

10.4 Backup Configuration

10.4.1 Backup Configuration

Context

Procedure

10.4.2 VRRP

Context

Procedure

10.4.3 HSB

Context

Procedure

Third Party’s Trade Secret

`@trans`drinking_poetry`~trans`

`@trans`bright_future`~trans`

`@trans`universal_genius`~trans`

My Followers