Huawei wireless device configuration user CAC

To configure LAW and AC, send AP And AC Can transmit between CAPWAP message
[LSW1]vlan batch 10
[LSW1-GigabitEthernet0/0/1]port link-type trunk
[LSW1-GigabitEthernet0/0/1]port trunk allow-pass vlan 10
[LSW1-GigabitEthernet0/0/2]port link-type trunk
[LSW1-GigabitEthernet0/0/2]port trunk allow-pass vlan 10
[LSW1-GigabitEthernet0/0/2]port trunk pvid vlan 10
[AC1]vlan batch 10 20
[AC1-GigabitEthernet0/0/1]port link-type trunk
[AC1-GigabitEthernet0/0/1]port trunk allow-pass vlan 10

To configure AC Interworking with the upper network equipment
[AC1-GigabitEthernet0/0/2]port link-type trunk
[AC1-GigabitEthernet0/0/2]port trunk allow-pass vlan 20
[AC1-GigabitEthernet0/0/2]port trunk pvid vlan 20

To configure AC As DHCP The server , by STA and AP Distribute IP Address
[AC1]dhcp enable
[AC1-Vlanif10]ip add 10.1.1.1 24
[AC1-Vlanif10]dhcp select interface
[AC1-Vlanif20]ip add 10.1.2.1 24
[AC1-Vlanif20]dhcp select interface

To configure AP go online
[AC1]wlan
[AC1-wlan-view]ap-group name ap-group1 // establish AP Group
[AC1-wlan-view]regulatory-domain-profile name domain1 // Create domain management template , To configure AC My country code
[AC1-wlan-regulate-domain-domain1]country-code cn
[AC1-wlan-view]ap-group name ap-group1 // stay AP Reference domain management template under group
[AC1-wlan-ap-group-ap-group1]regulatory-domain-profile domain1
[AC1]capwap source interface Vlanif 10 // To configure AC Source interface of
[AC1]wlan
[AC1-wlan-view]ap auth-mode mac-auth
[AC1-wlan-view]ap-id 0 ap-mac 00e0-fc63-2780 // stay AC Import online and offline AP
[AC1-wlan-ap-0]ap-name ap1
[AC1-wlan-ap-0]ap-group ap-group1 // take AP Join in AP Group

To configure WLAN Business parameters
[AC1-wlan-view]security-profile name wlan-security // Create a security template , And configure the security policy
[AC1-wlan-sec-prof-wlan-security]security wpa2 psk pass-phrase [email protected] aes
[AC1-wlan-view]ssid-profile name wlan-ssid // establish SSID Templates , And configuration SSID name
[AC1-wlan-ssid-prof-wlan-ssid]ssid wlan-net
[AC1-wlan-view]vap-profile name wlan-vap // establish VAP Templates , Configure business data forwarding mode 、 Business VLAN, And reference security templates and SSID Templates
[AC1-wlan-vap-prof-wlan-vap]forward-mode tunnel
[AC1-wlan-vap-prof-wlan-vap]service-vlan vlan-id 20
[AC1-wlan-vap-prof-wlan-vap]security-profile wlan-security
[AC1-wlan-vap-prof-wlan-vap]ssid-profile wlan-ssid
[AC1-wlan-view]ap-group name ap-group1 // To configure AP Group reference VAP Templates
[AC1-wlan-ap-group-ap-group1]vap-profile wlan-vap wlan 1 radio all

To configure AP RF channel and power
[AC1-wlan-view]rrm-profile name default // Turn off the RF channel and power auto tuning function
[AC1-wlan-rrm-prof-default]calibrate auto-channel-select disable
[AC1-wlan-rrm-prof-default]calibrate auto-txpower-select disable
[AC1-wlan-view]ap-id 0
[AC1-wlan-ap-0]radio 0
[AC1-wlan-radio-0/0]channel 20mhz 6
[AC1-wlan-radio-0/0]eirp 127
[AC1-wlan-ap-0]radio 1
[AC1-wlan-radio-0/1]channel 20mhz 149
[AC1-wlan-radio-0/1]eirp 127

Configure users CAC function
[AC1-wlan-view]rrm-profile name user-cac // establish RRM Templates
[AC1-wlan-rrm-prof-user-cac]uac client-number enable // Open users based on the number of users CAC function
[AC1-wlan-rrm-prof-user-cac]uac client-number threshold access 32 roam 32 // Configure the threshold for the number of new users to be 32, The threshold number of roaming users is 32
[AC1-wlan-rrm-prof-user-cac]uac client-snr enable // Turn on the disable weak signal terminal access function
[AC1-wlan-rrm-prof-user-cac]uac client-snr threshold 25 // Configure the corresponding signal threshold to 25dB
[AC1-wlan-rrm-prof-user-cac]uac reach-access-threshold hide-ssid // Turn on user access threshold hiding SSID function
[AC1-wlan-view]radio-2g-profile name radio2g // establish 2G RF template , Reference under this template RRM Templates
[AC1-wlan-radio-2g-prof-radio2g]rrm-profile user-cac
[AC1-wlan-view]ap-group name ap-group1 // Of AP Group reference 2G RF template
[AC1-wlan-ap-group-ap-group1]radio-2g-profile radio2g radio all

Verify configuration