Huawei WLAN Certification Training

HCIA-WLAN
Lab Guide
V3.0

Huawei Technologies Co., Ltd.

Copyright © Huawei Technologies Co., Ltd. 2020. All rights reserved.

No part of this document may be reproduced or transmitted in any form or by any means without prior
written consent of Huawei Technologies Co., Ltd.

2020-12-22 Huawei confidential. Page 1 of 63

Trademarks and Permissions

and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.
All other trademarks and trade names mentioned in this document are the property of their respective
holders.

Notice
The purchased products, services and features are stipulated by the contract made between Huawei
and the customer. All or part of the products, services and features described in this document may
not be within the purchase scope or the usage scope. Unless otherwise specified in the contract, all
statements, information, and recommendations in this document are provided "AS IS" without
warranties, guarantees or representations of any kind, either express or implied.
The information in this document is subject to change without notice. Every effort has been made in
the preparation of this document to ensure accuracy of the contents, but all statements, information,
and recommendations in this document do not constitute a warranty of any kind, express or implied.

Huawei Technologies Co., Ltd.

Address: Huawei Industrial Base, Bantian, Longgang, Shenzhen

518129
Website: https://e.huawei.com/

2020-12-22 Huawei confidential. Page 2 of 63

 HCIA-WLAN Lab Guide INTERNAL

Huawei Certificate System

Huawei Certification follows the "platform + ecosystem" development strategy, which is
a new collaborative architecture of ICT infrastructure based on "Cloud-Pipe-Terminal".
Huawei has set up a complete certification system consisting of three categories: ICT
infrastructure certification, Platform and Service certification, and ICT vertical
certification, and grants Huawei certification the only all-range technical certification in
the industry.
Huawei offers three levels of certification: Huawei Certified ICT Associate (HCIA),
Huawei Certified ICT Professional (HCIP), and Huawei Certified ICT Expert (HCIE).
Huawei certifications cover all ICT fields and adapt to the industry trend of ICT
convergence. With its leading talent development system and certification standards,
Huawei is committed to fostering new ICT talents in the digital era, and building a
healthy ICT talent ecosystem.
Huawei Certified Network Associate-Wireless Local Area Network (HCIA-WLAN) is
designed for frontline engineers at Huawei local offices and representative offices, and
other people who want to understand Huawei WLAN products and technologies. HCIA-
WLAN certification covers Huawei WLAN basics, implementation, CAPWAP protocol,
networking modes, features and security configurations of Huawei WLAN products,
advanced WLAN technologies, antenna technology, WLAN troubleshooting, and project
deployment.
The HCIA-WLAN certificate system introduces you to the industry and market, helps
you in innovation, and enables you to stand atop the WLAN frontiers.

2020-12-22 Huawei confidential. Page 3 of 63

 HCIA-WLAN Lab Guide INTERNAL

2020-12-22 Huawei confidential. Page 4 of 63

 HCIA-WLAN Lab Guide INTERNAL

About This Document

Introduction
This document is an HCIA-WLAN certification training course. It is intended for
trainees who are preparing for the HCIA-WLAN exam or readers who want to
understand Huawei WLAN basics, implementation, CAPWAP protocol, networking
modes, features and security configurations of Huawei WLAN products, advanced
WLAN technologies, antenna technology, WLAN troubleshooting, and project
deployment.

Description
This document contains six experiments, including basic VRP configuration, WLAN
device upgrade, WLAN Layer 2 off-path networking, WLAN Layer 3 off-path
networking, WLAN radio resource management and troubleshooting.

● Lab 1: Basic VRP configuration. This lab aims to familiarize you with the
operations and commands related to Huawei wireless access controllers
(ACs).
● Lab 2: WLAN device upgrade. This lab aims to instruct you to upgrade Huawei
WLAN devices, helping you get familiar with the procedures and commands
for upgrading ACs and access points (APs).
● Lab 3: Layer 2 off-path networking. This lab aims to instruct you to configure
Layer 2 networking for a Huawei WLAN and helps you deploy a small-scale
WLAN.
● Labs 4: Layer 3 off-path networking. These labs aim to instruct you to
configure Layer 3 networking for a Huawei WLAN using the CLI and web, and
helps you deploy a medium- to large-sized WLAN.
● Lab 5: WLAN RRM. This lab aims to introduce basic Huawei WLAN RRM
configurations, helping you understand basic WLAN network optimization
methods.
● Lab 6: WLAN Troubleshooting Basics. This lab aims to introduce WLAN
troubleshooting process and typical WLAN faults, helping you understand
how to conducting a WLAN troubleshooting.

Background Knowledge Required

This course is for Huawei's basic certification. To better understand this course,
familiarize yourself with the following requirements:

2020-12-22 Huawei confidential. Page 5 of 63

 HCIA-WLAN Lab Guide INTERNAL

Basic knowledge about WLAN and data communication

Symbol Conventions

AC AP Core switch Access switch

Router PC STA

Lab Environment
Network Description
This experiment environment is intended for WLAN engineers who are preparing
for the HCIA-WLAN exam. Each lab environment includes two ACs, two APs, one
core switch, and one access switch, and is applicable to 2 trainees.

Device Requirements
The following table lists the recommended device configurations in each lab
environment of HCIA-WLAN.

Table 1-1 Devices required for labs

Device Type Device Model Software Version

Switch S5731-H24P4XC V200R019C10SPC500

AC AirEngine 9700-M V200R019C00SPC500

AP AirEngine 5760-10 V200R019C00SPC501

Router AR2220E V300R019C10SPC300

2020-12-22 Huawei confidential. Page 6 of 63

 HCIA-WLAN Lab Guide INTERNAL

Lab Environment Preparation

Device Check
Before starting a lab, ensure that the devices listed in the following table are
ready.

Device Name Quantity Remarks

S5731-H24P4XC 2/group

AirEngine 9700-M 1/group

AirEngine 5760-10 1/group

Test Laptop 1/group

Lab Topology

2020-12-22 Huawei confidential. Page 7 of 63

 HCIA-WLAN Lab Guide INTERNAL

Contents

About This Document ............................................................................................................... 5

1 Basic VRP Configurations ...................................................................................................11
1.1 Introduction ................................................................................................................................................................... 11
1.1.1 About This Lab .......................................................................................................................................................... 11
1.1.2 Objectives .................................................................................................................................................................... 11
1.1.3 Networking Topology ............................................................................................................................................. 11
1.1.4 Lab Planning .............................................................................................................................................................. 11
1.2 Lab Procedure ............................................................................................................................................................... 12
1.2.1 Configuration Roadmap ........................................................................................................................................ 12
1.2.2 Configuration Procedure........................................................................................................................................ 12
1.3 Verification ..................................................................................................................................................................... 14
1.3.1 Checking the Device Configuration After a Device Is Restarted ............................................................. 14
1.4 Configuration Reference ........................................................................................................................................... 15
1.4.1 Configuration on SW .............................................................................................................................................. 15
1.4.2 Configuration on the AC ........................................................................................................................................ 15

2 WLAN Device Upgrade ........................................................................................................16

2.1 Introduction ................................................................................................................................................................... 16
2.1.1 About This Lab .......................................................................................................................................................... 16
2.1.2 Objectives .................................................................................................................................................................... 16
2.1.3 Networking Topology ............................................................................................................................................. 16
2.1.4 Lab Planning .............................................................................................................................................................. 16
2.2 Lab Procedure ............................................................................................................................................................... 18
2.2.1 Configuration Roadmap ........................................................................................................................................ 18
2.2.2 Configuration Procedure........................................................................................................................................ 18
2.3 Verification ..................................................................................................................................................................... 23
2.3.1 Verifying the AC and AP Upgrade Results ...................................................................................................... 23
2.4 Configuration Reference ........................................................................................................................................... 25
2.4.1 Configuration on the AC ........................................................................................................................................ 25

3 WLAN Layer 2 Off-Path Networking ...............................................................................26

3.1 Introduction ................................................................................................................................................................... 26
3.1.1 About This Lab .......................................................................................................................................................... 26
3.1.2 Objectives .................................................................................................................................................................... 26

2020-12-22 Huawei confidential. Page 8 of 63

 HCIA-WLAN Lab Guide INTERNAL

3.1.3 Networking Topology ............................................................................................................................................. 27

3.1.4 Lab Planning .............................................................................................................................................................. 27
3.2 Lab Procedure ............................................................................................................................................................... 29
3.2.1 Configuration Roadmap ........................................................................................................................................ 29
3.2.2 Configuration Procedure........................................................................................................................................ 29
3.3 Verification ..................................................................................................................................................................... 34
3.3.1 Verifying that the APs Emit Signals ................................................................................................................... 34
3.3.2 Testing STA Connections and Network Connectivity .................................................................................. 34
3.4 Configuration Reference ........................................................................................................................................... 34
3.4.1 Configuration on SW1 ............................................................................................................................................ 34
3.4.2 Configuration on SW2 ............................................................................................................................................ 35
3.4.3 Configuration on the AC ........................................................................................................................................ 35
3.4.4 Configuration on R1 ................................................................................................................................................ 36

4 WLAN Layer 3 Off-Path Networking (CLI) ....................................................................37

4.1 Introduction ................................................................................................................................................................... 37
4.1.1 About This Lab .......................................................................................................................................................... 37
4.1.2 Objectives .................................................................................................................................................................... 37
4.1.3 Networking Topology ............................................................................................................................................. 38
4.1.4 Lab Planning .............................................................................................................................................................. 38
4.2 Lab Procedure ............................................................................................................................................................... 40
4.2.1 Configuration Roadmap ........................................................................................................................................ 40
4.2.2 Configuration Procedure........................................................................................................................................ 40
4.3 Verification ..................................................................................................................................................................... 46
4.3.1 Verifying that the APs Emit Signals ................................................................................................................... 46
4.3.2 Testing STA Connections and Network Connectivity .................................................................................. 46
4.4 Configuration Reference ........................................................................................................................................... 47
4.4.1 Configuration on SW1 ............................................................................................................................................ 47
4.4.2 Configuration on SW2 ............................................................................................................................................ 48
4.4.3 Configuration on the AC ........................................................................................................................................ 48
4.4.4 Configuration on R1 ................................................................................................................................................ 49

5 WLAN RRM ............................................................................................................................50

5.1 Introduction ................................................................................................................................................................... 50
5.1.1 About This Lab .......................................................................................................................................................... 50
5.1.2 Objectives .................................................................................................................................................................... 50
5.1.3 Networking Topology ............................................................................................................................................. 51
5.1.4 Lab Planning .............................................................................................................................................................. 51
5.2 Lab Procedure ............................................................................................................................................................... 52

2020-12-22 Huawei confidential. Page 9 of 63

 HCIA-WLAN Lab Guide INTERNAL

5.2.1 Configuration Roadmap ........................................................................................................................................ 52

5.2.2 Configuration Procedure........................................................................................................................................ 52
5.3 Verification ..................................................................................................................................................................... 53
5.3.1 Checking AP Radio Information .......................................................................................................................... 53
5.4 Configuration Reference ........................................................................................................................................... 54
5.4.1 Configuration on the AC ........................................................................................................................................ 54

6 WLAN Troubleshooting Basics ..........................................................................................55

6.1 Introduction ................................................................................................................................................................... 55
6.1.1 About This Lab .......................................................................................................................................................... 55
6.1.2 Objectives .................................................................................................................................................................... 55
6.1.3 Networking Topology ............................................................................................................................................. 56
6.1.4 Data Planning ............................................................................................................................................................ 57
6.1.5 Fault Symptom .......................................................................................................................................................... 58
6.2 Troubleshooting Process and Common Commands ....................................................................................... 58
6.2.1 Troubleshooting Roadmap ................................................................................................................................... 58
6.2.2 Common WLAN Maintenance Commands ..................................................................................................... 59
6.3 Troubleshooting Process ........................................................................................................................................... 60
6.4 Troubleshooting Result .............................................................................................................................................. 61
6.5 Quiz................................................................................................................................................................................... 62
6.6 Reference Answers ...................................................................................................................................................... 62
6.7 Appendix ......................................................................................................................................................................... 62

2020-12-22 Huawei confidential. Page 10 of 63

 HCIA-WLAN Lab Guide INTERNAL

1 Basic VRP Configurations

1.1 Introduction
1.1.1 About This Lab
In this lab activity, you will learn the basic commands of Huawei devices by
configuring an AC to communicate with a switch.

1.1.2 Objectives
Understand the basic configuration of Huawei devices.

1.1.3 Networking Topology

Figure 1-1 Lab topology for basic VRP configurations

1.1.4 Lab Planning

This lab aims to achieve communication between an AC and a switch, help you
get familiar with basic configurations of Huawei devices and help information.

Table 1-1 IP address design

Device Interface IP Address

SW VLANIF 1 192.168.1.1

AC VLANIF 1 192.168.1.2

2020-12-22 Huawei confidential. Page 11 of 63

 HCIA-WLAN Lab Guide INTERNAL

1.2 Lab Procedure

1.2.1 Configuration Roadmap

Configure the device names.

Configure IP addresses.

Save the configuration.

1.2.2 Configuration Procedure

Step 1 Configure the device names.

Configure names for the switch and AC.

# On the switch, enter the system view from the user view. Enter the first letters
of a keyword in a command, and enter a question mark (?) or press Tab to
display a complete keyword.
<Huawei>sys?
system-view SystemView from terminal
<Huawei>sys
<Huawei>system-view
Enter system view, return user view with Ctrl+Z.
[Huawei]

# After entering the system view, run the sysname command to change the
device name to SW.
[Huawei]sysname SW
[SW]

# On the AC, enter the system view from the user view. Enter the first letters of a
keyword in a command, and enter a question mark (?) or press Tab to display a
complete keyword.
<AirEngine9700-M>sys?
system-view SystemView from terminal
< AirEngine9700-M >sys
< AirEngine9700-M >system-view
Enter system view, return user view with Ctrl+Z.
[AirEngine9700-M]

# After entering the system view, run the sysname command to change the
device name to AC.
[AirEngine9700-M]sysname AC

2020-12-22 Huawei confidential. Page 12 of 63

 HCIA-WLAN Lab Guide INTERNAL

[AC]

Step 2 Configure IP addresses for the devices.

Configure IP addresses for the interfaces connecting the switch and AC according
to the IP address design.

# Set the IP address of VLANIF 1 on SW to 192.168.1.1 and the subnet mask to 24.
[SW]display ip int brief
*down: administratively down
^down: standby
(l): loopback
(s): spoofing
(E): E-Trunk down
The number of interface that is UP in Physical is 2
The number of interface that is DOWN in Physical is 1
The number of interface that is UP in Protocol is 2
The number of interface that is DOWN in Protocol is 1

Interface IP Address/Mask Physical Protocol

MEth0/0/1 172.21.42.22/17 down down
NULL0 unassigned up up(s)
Vlanif1 192.168.1.1/24 up up

# Set the IP address of VLANIF 1 on the AC to 192.168.1.2 and the subnet mask to
24.
[AC]interface Vlanif 1
[AC-Vlanif1]ip address 192.168.1.2 24

# Run the display this command on the AC's interface to verify the configuration
result.
[AC-Vlanif1]display this
#
interface Vlanif1
ip address 192.168.1.2 255.255.255.0
#
return

# Run the ping command on SW to test the connectivity between the AC and SW.
The command output shows that SW can ping the AC.
[SW]ping 192.168.1.2
PING 192.168.1.2: 56 data bytes, press CTRL_C to break
Reply from 192.168.1.2: bytes=56 Sequence=1 ttl=255 time=90 ms
Reply from 192.168.1.2: bytes=56 Sequence=2 ttl=255 time=20 ms
Reply from 192.168.1.2: bytes=56 Sequence=3 ttl=255 time=10 ms
Reply from 192.168.1.2: bytes=56 Sequence=4 ttl=255 time=10 ms
Reply from 192.168.1.2: bytes=56 Sequence=5 ttl=255 time=10 ms

--- 192.168.1.2 ping statistics ---

5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 10/28/90 ms

2020-12-22 Huawei confidential. Page 13 of 63

 HCIA-WLAN Lab Guide INTERNAL

Step 3 Save the configuration.

In the production environment, to prevent the configuration from becoming

invalid after power-off or fault recovery, save the device configuration.

# Run the save command in the user view of the AC and SW to save the device
configurations. If the message "saved successfully" is displayed, the configuration
is saved successfully.
[SW]quit
<SW>save
The current configuration will be written to the device.
Are you sure to continue? (y/n)[n]:y
It will take several minutes to save configuration file, please wait.......
Configuration file had been saved successfully
Note: The configuration file will take effect after being activated
<SW>
[AC]quit
<AC>save
The current configuration will be written to the device.
Are you sure to continue? (y/n)[n]:y
It will take several minutes to save configuration file, please wait.......
Configuration file has been saved successfully
Note: The configuration file will take effect after being activated
<AC>

# If the eNSP simulator is used for the lab, save the topology after saving the
device configurations.

----End

1.3 Verification
1.3.1 Checking the Device Configuration After a Device Is
Restarted
# Run the reboot command to restart a device.
<SW>reboot
Info: The system is comparing the configuration, please wait.
System will reboot! Continue ? [y/n]:y
Info: system is rebooting ,please wait...

# After the device restarts, run the display current-configuration command to

check the device configuration.
<SW>display current-configuration
#
sysname SW
#
interface Vlanif1
ip address 192.168.1.1 255.255.255.0
#

2020-12-22 Huawei confidential. Page 14 of 63

 HCIA-WLAN Lab Guide INTERNAL

return

1.4 Configuration Reference

1.4.1 Configuration on SW
#
sysname SW
#
interface Vlanif1
ip address 192.168.1.1 255.255.255.0
#
return

1.4.2 Configuration on the AC

#
sysname AC
#
interface Vlanif1
ip address 192.168.1.2 255.255.255.0
#
Return

2020-12-22 Huawei confidential. Page 15 of 63

 HCIA-WLAN Lab Guide INTERNAL

2 WLAN Device Upgrade

2.1 Introduction
2.1.1 About This Lab
An enterprise has been using Huawei devices to build its WLAN. The enterprise
wants to upgrade ACs and APs to fix bugs in some versions and obtain new
functions.

2.1.2 Objectives
● Understand the reason why WLAN devices need an upgrade.
● Learn how to upgrade the WLAN devices.

2.1.3 Networking Topology

Figure 2-1 WLAN device upgrade topology

2.1.4 Lab Planning

This lab aims to upgrade WLAN devices by connecting a PC directly to an AC to
upgrade the AC and upgrading an AP in AC mode.

2020-12-22 Huawei confidential. Page 16 of 63

 HCIA-WLAN Lab Guide INTERNAL

Table 2-1 VLAN port types and parameters

Device Port Port Type VLAN Settings

AC GE0/0/1 Access PVID: VLAN 10

GE0/0/2 Access PVID: VLAN 1

Table 2-2 IP address plan

Device Interface IP Address

PC GE 192.168.1.1/24

AC VLANIF 1 192.168.1.2/24

VLANIF 10 10.1.10.1/24

Table 2-3 WLAN data plan

Item Configuration

DHCP server The AC functions as a DHCP server to assign IP

addresses to APs and as the gateway of APs.

IP address pool for APs 10.1.10.2–10.1.10.254/24

AC's source interface VLAN 10

address

2020-12-22 Huawei confidential. Page 17 of 63

 HCIA-WLAN Lab Guide INTERNAL

2.2 Lab Procedure

2.2.1 Configuration Roadmap
Configure network
connectivity.

Download upgrade files.

Upgrade the AC.

Upgrade the AP.

2.2.2 Configuration Procedure

Step 1 Configure network connectivity.

# Create VLAN 10 on the AC.

<AirEngine9700-M >system-view
[AirEngine9700-M]sysname AC
[AC]vlan batch 10

# Configure interface types on the AC and configure the AC to allow packets from
the corresponding VLANs to pass through according to Table 2-1.
[AC]interface GigabitEthernet 0/0/1
[AC-GigabitEthernet0/0/1]port link-type access
[AC-GigabitEthernet0/0/1]port default vlan 10
[AC-GigabitEthernet0/0/1]quit

Configure IP addresses on devices to ensure network connectivity.

# Create VLANIF interfaces on the AC and configure IP addresses for them.

[AC]interface Vlanif 1
[AC-Vlanif1]ip address 192.168.1.2 24
[AC-Vlanif1]quit
[AC]interface Vlanif 10
[AC-Vlanif10]ip address 10.1.10.1 24
[AC-Vlanif10]quit

# Ping the PC from the AC. The ping operation succeeds.

<AC>ping 192.168.1.1
PING 192.168.1.1: 56 data bytes, press CTRL_C to break
Reply from 192.168.1.1: bytes=56 Sequence=1 ttl=128 time=2 ms

2020-12-22 Huawei confidential. Page 18 of 63

 HCIA-WLAN Lab Guide INTERNAL

Reply from 192.168.1.1: bytes=56 Sequence=2 ttl=128 time=1 ms

Reply from 192.168.1.1: bytes=56 Sequence=3 ttl=128 time=1 ms
Reply from 192.168.1.1: bytes=56 Sequence=4 ttl=128 time=1 ms
Reply from 192.168.1.1: bytes=56 Sequence=5 ttl=128 time=1 ms

--- 192.168.1.1 ping statistics ---

5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 1/1/2 ms

Step 2 Download upgrade files.

Download the required AC and AP software packages to the AC through FTP.

# Run the display version command to check the running device version.
<AC>display version
Huawei Versatile Routing Platform Software
VRP (R) software, Version 5.170 (AirEngine9700-M V200R019C00SPC300)
Copyright (C) 2011-2019 HUAWEI TECH CO., LTD
Huawei AirEngine9700-M Router uptime is 0 week, 5 days, 17 hours, 59 minutes

MPU 0(Master) : uptime is 0 week, 5 days, 17 hours, 59 minutes

SDRAM Memory Size : 16384 M bytes
Flash Memory Size : 2048 M bytes
MPU version information :
1. PCB Version : H852V26S VER.B
2. MAB Version : 0
3. Board Type : AirEngine9700-M
4. CPLD0 Version : 273
5. CPLD1 Version : 277
6. CPLD2 Version : 273
7. BootROM Version : 1080

PWRCARD I information
PCB Version : PWR VER VER.NC

# The running device version is V200R019C00SPC300. To support new functions,

upgrade the device to V200R019C00SPC500.

# Download the software package of the corresponding version from Huawei

official website to the local PC. Configure the local PC as the FTP server so that
the AC downloads the software package through FTP.

# The FTP server is the local PC, with the user name and password of admin and
huawei, respectively. Run the ftp 192.168.1.1 command to log in to the FTP
server.
<AC>ftp 192.168.1.1
Trying 192.168.1.1 ...
Press CTRL+K to abort
Connected to 192.168.1.1.
220 3Com 3CDaemon FTP server 2.0
User(192.168.1.1:(none)):admin
331 Correct user name. Enter the password.

2020-12-22 Huawei confidential. Page 19 of 63

 HCIA-WLAN Lab Guide INTERNAL

Enter password:
230 You have successfully logged in.

[AC-ftp]

# Run the dir command to check the files in the current directory.
[AC-ftp]dir
200 PORT The command is executed successfully.
150 The file status is normal. Ready to start the data connection.
-rwxrwxrwx 1 owner group 89296660 May 25 17:32 AirEngine9700-M_V200R019C00SPC500.cc
-rwxrwxrwx 1 owner group 21255580 May 22 17:07 FitAirEngine5760-10_V200R019C00SPC800.bin
226 The data connection is being closed.
FTP: 1858 byte(s) received in 0.134 second(s) 13.86Kbyte(s)/sec.

# Run the get command to download the software packages of the AC and AP to
the AC.
[AC-ftp]get AirEngine9700-M_V200R019C00SPC500.cc
200 PORT The command is executed successfully.
150 The file status is normal. Ready to start the data connection.
226 Closing the data connection. The file is successfully transferred.
FTP: 89296660 byte(s) received in 515.622 second(s) 173.18Kbyte(s)/sec.
Now begins to save file, please
wait....................................................................................................................................................................................................................
..........
File has been saved successfully.
[AC-ftp]get FitAirEngine5760-10_V200R019C00SPC800.bin
200 PORT The command is executed successfully.
150 The file status is normal. Ready to start the data connection.
226 Closing the data connection. The file is successfully transferred.
FTP: 21255580 byte(s) received in 14.445 second(s) 1471.48Kbyte(s)/sec.
Now begins to save file, please
wait....................................................................................................................................................................................................................
..........................................................................
File has been saved successfully.

Step 3 Upgrade the AC.

Configure the downloaded AC software package as the startup configuration

software package to upgrade the AC.

# Run the display startup command to check the startup software package of the
AC.
<AC>display startup
Configed startup system software: flash:/AirEngine9700-M_V200R019C00SPC300.cc
Startup system software: flash:/AirEngine9700-M_V200R019C00SPC300.cc
Next startup system software: flash:/AirEngine9700-M_V200R019C00SPC300.cc
Startup saved-configuration file: flash:/vrpcfg.zip
Next startup saved-configuration file: flash:/vrpcfg.zip
Startup patch package: NULL
Next startup patch package: NULL

# Run the startup system-software AirEngine9700-M_V200R019C00SPC500.cc

command to update the startup software package.

2020-12-22 Huawei confidential. Page 20 of 63

 HCIA-WLAN Lab Guide INTERNAL

<AC>startup system-software AirEngine9700-M_V200R019C00SPC500.cc

Info: Verifying the file, please wait....
Info: Succeeded in setting the software for booting system.

# Run the save command to save the configuration.

<AC>save
The current configuration will be written to the device.
Are you sure to continue? (y/n)[n]:y
It will take several minutes to save configuration file, please wait........
Configuration file has been saved successfully
Note: The configuration file will take effect after being activated

# Run the reboot fast command to restart the AC.

<AC>reboot fast
System will reboot! Continue ? [y/n]:y

# After the AC restarts, run the display version command to check the running
device version.
<AC>display version
Huawei Versatile Routing Platform Software
VRP (R) software, Version 5.170 (AirEngine9700-M V200R019C00SPC500)
Copyright (C) 2011-2020 HUAWEI TECH CO., LTD
Huawei AirEngine9700-M Router uptime is 0 week, 0 day, 0 hour, 0 minute

MPU 0(Master) : uptime is 0 week, 0 day, 0 hour, 0 minute

SDRAM Memory Size : 16384 M bytes
Flash Memory Size : 2048 M bytes
MPU version information :
1. PCB Version : H852V26S VER.B
2. MAB Version : 0
3. Board Type : AirEngine9700-M
4. CPLD0 Version : 273
5. CPLD1 Version : 277
6. CPLD2 Version : 273
7. BootROM Version : 1080

PWRCARD I information
PCB Version : PWR VER VER.NC

# The command output shows that the AC version is V200R019C00SPC500,

indicating that the upgrade is successful.

Step 4 Upgrade the AP.

# Configure the DHCP service on the AC to assign IP addresses to APs.

[AC]dhcp enable
[AC]interface Vlanif 10
[AC-Vlanif10]dhcp select interface
[AC-Vlanif10]quit

# Configure VLANIF 10 as the AC's source interface.

[AC]capwap source interface Vlanif 10

2020-12-22 Huawei confidential. Page 21 of 63

 HCIA-WLAN Lab Guide INTERNAL

# Configure the AP authentication mode to non-authentication.

[AC]wlan
[AC-wlan-view]ap auth-mode no-auth

# Run the display ap all command to check the AP status.

[AC-wlan-view]display ap all
Total AP information:
vmiss : ver-mismatch [1]
ExtraInfo : Extra information
P : insufficient power supply
-----------------------------------------------------------------------------------------------------------------
ID MAC Name Group IP Type State STA Uptime
ExtraInfo
-----------------------------------------------------------------------------------------------------------------
0 b4fb-f9b7-de40 AP1 default 10.1.10.231 AirEngine5760-10 vmiss 0 - -
-----------------------------------------------------------------------------------------------------------------
Total: 1

# The AP status is vmiss, indicating an AP version mismatch. If the major version

numbers are the same (for example, V200R019C00SPC500 and
V200R019C00SPC800), vmiss is not displayed and the AP can go online normally.
[AC-wlan-view]ap-group name Huawei

# Change the AP upgrade mode to AC mode.

[AC-wlan-view]ap update mode ac-mode
Info: The current upgrade mode is AC mode, which may affect performance and take a long time. The FTP or
SFTP upgrade mode is recommended. Continue? [Y/N]:y

# Specify the AP upgrade version to upgrade the AP.

[AC-wlan-view]ap update update-filename FitAirEngine5760-10_V200R019C00SPC800.bin ap-type 115
Warning: If an AP is performing the automatic upgrade, the AP will be upgraded to the latest version.
Continue?[Y/N]:y
Warning: If AP update mode is AC-mode, update-file's default path is sdcard:/. Continue?[Y/N]:y
Info: The current upgrade mode is AC mode, which may affect performance and take a long time. The FTP or
SFTP upgrade mode is recommended. Continue? [Y/N]:y
Info: This operation may take a few seconds. Please wait for a moment.
done.

# Run the ap-reset all command to restart all APs.

[AC-wlan-view]ap-reset all
Warning: Reset AP(s), continue?[Y/N]:y

# Run the display ap all command to check the AP status.

<AC>display ap all
Total AP information:
dload : download [1]
ExtraInfo : Extra information
P : insufficient power supply
---------------------------------------------------------------------------------------------------------------
ID MAC Name Group IP Type State STA Uptime
ExtraInfo

2020-12-22 Huawei confidential. Page 22 of 63

 HCIA-WLAN Lab Guide INTERNAL

---------------------------------------------------------------------------------------------------------------
0 b4fb-f9b7-de40 AP1 default 10.1.10.231 AirEngine5760-10 dload 0 - -
---------------------------------------------------------------------------------------------------------------
Total: 1

# The AP status is dload, indicating that the AP is downloading the software

package.

# Run the display ap update status all command to check the AP upgrade status.
<AC>display ap update status all
FT : File Type
--------------------------------------------------------------------------------------------------------------------------------
----
ID Name AP Type AP Group AP MAC FT Update Version Last Update Time
Update Status
--------------------------------------------------------------------------------------------------------------------------------
----
0 AP1 AirEngine5760-10 default b4fb-f9b7-de40 FIT V200R019C00SPC800 2020-05-29/09:53:09
downloading(progress: 100%/47%)
--------------------------------------------------------------------------------------------------------------------------------
----
Total: 1

# Wait for a period of time, and run the display ap all command again to check
the AP status.
<AC>display ap all
Total AP information:
nor : normal [1]
ExtraInfo : Extra information
P : insufficient power supply
------------------------------------------------------------------------------------------------
ID MAC Name Group IP Type State STA Uptime
ExtraInfo
------------------------------------------------------------------------------------------------
0 b4fb-f9b7-de40 AP1 default 10.1.10.231 AirEngine5760-10 nor 0 23S -
------------------------------------------------------------------------------------------------
Total: 1

# The AP status is nor, indicating that the AP is online.

----End

2.3 Verification
2.3.1 Verifying the AC and AP Upgrade Results
# Run the display version command on the AC to check the AC version. The
command output shows that the AC has been successfully upgraded.
<AC>display version
Huawei Versatile Routing Platform Software
VRP (R) software, Version 5.170 (AirEngine9700-M V200R019C00SPC500)

2020-12-22 Huawei confidential. Page 23 of 63

 HCIA-WLAN Lab Guide INTERNAL

Copyright (C) 2011-2020 HUAWEI TECH CO., LTD

Huawei AirEngine9700-M Router uptime is 0 week, 0 day, 0 hour, 0 minute

MPU 0(Master) : uptime is 0 week, 0 day, 0 hour, 0 minute

SDRAM Memory Size : 16384 M bytes
Flash Memory Size : 2048 M bytes
MPU version information :
1. PCB Version : H852V26S VER.B
2. MAB Version : 0
3. Board Type : AirEngine9700-M
4. CPLD0 Version : 273
5. CPLD1 Version : 277
6. CPLD2 Version : 273
7. BootROM Version : 1080

PWRCARD I information
PCB Version : PWR VER VER.NC

# Run the display ap run-info ap-id 0 command on the AC to check the AP

version. The command output shows that the AP has been upgraded successfully.
<AC>display ap run-info ap-id 0
Info: Waiting for AP response.
-----------------------------------------------------------------------------------------------------
AP type : AirEngine5760-10
Country code : CN
Software version : V200R019C00SPC800
Hardware version : Ver.A
BIOS version : 627
BOM version : 000
Memory size(MB) : 256
Flash size(MB) : 64
SD Card size(MB) :-
Manufacture : Huawei Technologies Co., Ltd.
Software vendor : Huawei Technologies Co., Ltd.
Online time(ddd:hh:mm:ss) : 16H:57M:1S
Run time(ddd:hh:mm:ss) : 16H:58M:12S
IP address : 10.1.10.231
IP mask : 255.255.255.0
Gateway : 10.1.10.1
DNS server : 0.0.0.0
AP mode : campus
GigabitEthernet port 0
Port speed(Mbps) : 1000
Port speed mode : auto
Port duplex : full
Port duplex mode : auto
Port state : up
STP down recovery time(ddd:hh:mm:ss) :-
Card status :
-----------------------------------------------------------------------------------------------------

2020-12-22 Huawei confidential. Page 24 of 63

 HCIA-WLAN Lab Guide INTERNAL

2.4 Configuration Reference

2.4.1 Configuration on the AC
#
sysname AC
#
vlan batch 10
#
dhcp enable
#
interface Vlanif1
ip address 192.168.1.2 255.255.255.0
#
interface Vlanif10
ip address 10.1.10.1 255.255.255.0
dhcp select interface
#
interface GigabitEthernet0/0/1
port link-type access
port default vlan 10
#
capwap source interface vlanif10
#
wlan
ap auth-mode no-auth
#
return

2020-12-22 Huawei confidential. Page 25 of 63

 HCIA-WLAN Lab Guide INTERNAL

3 WLAN Layer 2 Off-Path Networking

3.1 Introduction
3.1.1 About This Lab
On a Layer 2 WLAN, network traffic is usually sent to the upper-layer network
through a switch, without passing through an AC. This networking mode applies
to small- and medium-scale centralized WLANs.

3.1.2 Objectives
● Understand the Layer 2 networking mode.
● Understand the advantages of off-path networking.
● Learn how to configure WLAN services.

2020-12-22 Huawei confidential. Page 26 of 63

 HCIA-WLAN Lab Guide INTERNAL

3.1.3 Networking Topology

Figure 3-1 WLAN Layer 2 off-path networking topology

3.1.4 Lab Planning

This lab aims to instruct how to configure Layer 2 off-path networking, with the
AC as the AP gateway and SW1 as the STA gateway. The two APs can both cover
PC1, and STA traffic does not pass through the AC.

Table 3-1 VLAN port types and parameters

Device Port Port Type VLAN Settings

SW1 GE0/0/1 Access PVID: VLAN 30

GE0/0/2 Trunk PVID: 1

Allow-pass: VLAN 10

GE0/0/3 Trunk PVID: 1

Allow-pass: VLANs 10 and 20

SW2 GE0/0/1 Trunk PVID: VLAN 10

Allow-pass: VLANs 10 and 20

2020-12-22 Huawei confidential. Page 27 of 63

 HCIA-WLAN Lab Guide INTERNAL

Device Port Port Type VLAN Settings

GE0/0/2 Trunk PVID: VLAN 10

Allow-pass: VLANs 10 and 20

GE0/0/3 Trunk PVID: 1

Allow-pass: VLANs 10 and 20

AC GE0/0/2 Trunk PVID: VLAN 1

Allow-pass: VLAN 10

Table 3-2 IP address plan

Device Interface IP Address

R1 GE0/0/1 10.1.30.1/24

SW1 VLANIF 20 10.1.20.1/24

VLANIF 30 10.1.30.2/24

AC VLANIF 10 10.1.10.1/24

Table 3-3 WLAN data plan

Item Configuration

DHCP server The AC functions as a DHCP server to assign IP addresses

to APs and as the gateway of APs.
SW1 functions as a DHCP server to assign IP addresses to
STAs and as the gateway of STAs.

IP address pool for 10.1.10.2–10.1.10.254/24

APs

IP address pool for 10.1.20.2–10.1.20.254/24

STAs

AC's source 10.1.10.1/24

interface address

AP group Name: Huawei

Referenced profiles: VAP profile and regulatory domain
profile

Regulatory domain Name: Huawei

profile Country code: CN

2020-12-22 Huawei confidential. Page 28 of 63

 HCIA-WLAN Lab Guide INTERNAL

Item Configuration

SSID profile Name: Huawei

SSID name: Huawei

Security profile Name: Huawei

Security policy: WPA-WPA2+PSK+AES
Password: a1234567

VAP profile Name: Huawei

Forwarding mode: direct forwarding
Service VLAN: VLAN 20
Referenced profiles: SSID profile and security profile

3.2 Lab Procedure

3.2.1 Configuration Roadmap
Configure network
connectivity.

Configure APs to go online.

Configure WLAN services.

3.2.2 Configuration Procedure

Step 1 Configure network connectivity.

Configure VLANs and interface types on the devices to ensure that services can be
transparently transmitted at Layer 2.

# Create VLAN 10, VLAN 20, and VLAN 30 on SW1.

<Huawei>system-view
[Huawei]sysname SW1
[SW1]vlan batch 10 20 30

# Configure interface types on SW1 and configure SW1 to allow packets from the
corresponding VLANs to pass through according to Table 3-1.

2020-12-22 Huawei confidential. Page 29 of 63

 HCIA-WLAN Lab Guide INTERNAL

[SW1]interface GigabitEthernet 0/0/1

[SW1-GigabitEthernet0/0/1]port link-type access
[SW1-GigabitEthernet0/0/1]port default vlan 30
[SW1-GigabitEthernet0/0/1]quit
[SW1]interface GigabitEthernet 0/0/2
[SW1-GigabitEthernet0/0/2]port link-type trunk
[SW1-GigabitEthernet0/0/2]port trunk allow-pass vlan 10
[SW1-GigabitEthernet0/0/2]quit
[SW1]interface GigabitEthernet 0/0/3
[SW1-GigabitEthernet0/0/3]port link-type trunk
[SW1-GigabitEthernet0/0/3]port trunk allow-pass vlan 10 20
[SW1-GigabitEthernet0/0/3]quit

# Create VLAN 10 and VLAN 20 on SW2.

<Huawei>system-view
[Huawei]sysname SW2
[SW2]vlan batch 10 20

# Configure interface types on SW2 and configure SW2 to allow packets from the
corresponding VLANs to pass through according to Table 3-1.
[SW2]interface GigabitEthernet 0/0/1
[SW2-GigabitEthernet0/0/1]port link-type trunk
[SW2-GigabitEthernet0/0/1]port trunk pvid vlan 10
[SW2-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 20
[SW2-GigabitEthernet0/0/1]quit
[SW2]interface GigabitEthernet 0/0/2
[SW2-GigabitEthernet0/0/2]port link-type trunk
[SW2-GigabitEthernet0/0/2]port trunk pvid vlan 10
[SW2-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 20
[SW2-GigabitEthernet0/0/2]quit
[SW2]interface GigabitEthernet 0/0/3
[SW2-GigabitEthernet0/0/3]port link-type trunk
[SW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 10 20
[SW2-GigabitEthernet0/0/3]quit

# Create VLAN 10 on the AC.

<AC6508>system-view
[AC6508]sysname AC
[AC]vlan batch 10

# Configure interface types on the AC and configure the AC to allow packets from
the corresponding VLANs to pass through according to Table 3-1.
[AC]interface GigabitEthernet 0/0/2
[AC-GigabitEthernet0/0/2]port link-type trunk
[AC-GigabitEthernet0/0/2]port trunk allow-pass vlan 10
[AC-GigabitEthernet0/0/2]quit

Configure IP addresses and routing information on the devices to ensure network

connectivity.

# Create VLANIF 20 and VLANIF 30 on SW1 and assign IP addresses to them.

[SW1]interface Vlanif 20
[SW1-Vlanif20]ip address 10.1.20.1 24

2020-12-22 Huawei confidential. Page 30 of 63

 HCIA-WLAN Lab Guide INTERNAL

[SW1-Vlanif20]quit
[SW1]interface Vlanif 30
[SW1-Vlanif30]ip address 10.1.30.2 24
[SW1-Vlanif30]quit

# Create VLANIF 10 on the AC and configure an IP address for the VLANIF

interface.
[AC]interface Vlanif 10
[AC-Vlanif10]ip address 10.1.10.1 24
[AC-Vlanif10]quit

# On R1, configure an IP address for the interface connected to SW1 and create a
static route destined for the STA network segment.
<Huawei>system-view
[Huawei]sysname R1
[R1]interface GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1]ip address 10.1.30.1 24
[R1-GigabitEthernet0/0/1]quit
[R1]ip route-static 10.1.20.0 24 10.1.30.2

# Ping the IP address 10.1.20.1 on R1 from SW1. The ping operation succeeds.
[SW1]ping -a 10.1.20.1 10.1.30.1
PING 10.1.30.1: 56 data bytes, press CTRL_C to break
Reply from 10.1.30.1: bytes=56 Sequence=1 ttl=255 time=90 ms
Reply from 10.1.30.1: bytes=56 Sequence=2 ttl=255 time=30 ms
Reply from 10.1.30.1: bytes=56 Sequence=3 ttl=255 time=10 ms
Reply from 10.1.30.1: bytes=56 Sequence=4 ttl=255 time=30 ms
Reply from 10.1.30.1: bytes=56 Sequence=5 ttl=255 time=30 ms

--- 10.1.30.1 ping statistics ---

5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 10/38/90 ms

Step 2 Configure APs to go online.

Configure DHCP servers to assign IP addresses to APs and STAs.

# Enable DHCP and configure an interface address pool on SW1.

[SW1]dhcp enable
[SW1]interface Vlanif 20
[SW1-Vlanif20]dhcp select interface
[SW1-Vlanif20]quit

# Enable DHCP and configure an interface address pool on the AC.

[AC]dhcp enable
[AC]interface Vlanif 10
[AC-Vlanif10]dhcp select interface
[AC-Vlanif10]quit

Configure the AC's source interface address and configure a proper AP

authentication mode so that the APs can go online normally.

2020-12-22 Huawei confidential. Page 31 of 63

 HCIA-WLAN Lab Guide INTERNAL

# Set the AC's source interface to 10.1.10.1.

[AC]capwap source ip-address 10.1.10.1

# Create an AP group named Huawei on the AC.

[AC]wlan
[AC-wlan-view]ap-group name Huawei
[AC-wlan-ap-group-Huawei]quit

# Set the AP authentication mode to non-authentication and wait for APs to go

online.
[AC-wlan-view]ap auth-mode no-auth

# Run the display ap all command to check the AP online status. The command
output shows that the two APs have gone online.
[AC-wlan-view]display ap all
Info: This operation may take a few seconds. Please wait for a moment.done.
Total AP information:
nor : normal [2]
--------------------------------------------------------------------------------------------------
ID MAC Name Group IP Type State STA Uptime
--------------------------------------------------------------------------------------------------
0 00e0-fc1f-4ee0 00e0-fc1f-4ee0 default 10.1.10.177 AP4050DN-E nor 0 22S
1 00e0-fc54-64a0 00e0-fc54-64a0 default 10.1.10.122 AP4050DN-E nor 0 3S
--------------------------------------------------------------------------------------------------
Total: 2

# Name the two APs AP1 and AP2, and add them to the AP group Huawei.
[AC-wlan-view]ap-id 0
[AC-wlan-ap-0]ap-name AP1
[AC-wlan-ap-0]ap-group Huawei
Warning: This operation may cause AP reset. If the country code changes, it will
clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
[AC-wlan-ap-0]quit
[AC-wlan-view]ap-id 1
[AC-wlan-ap-1]ap-name AP2
[AC-wlan-ap-1]ap-group Huawei
Warning: This operation may cause AP reset. If the country code changes, it will
clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
[AC-wlan-ap-1]quit

# Run the display ap all command to check whether the configuration takes
effect. The command output shows that the configuration has taken effect.
[AC-wlan-view]display ap all
Info: This operation may take a few seconds. Please wait for a moment.done.
Total AP information:
nor : normal [2]
---------------------------------------------------------------------------------------
ID MAC Name Group IP Type State STA Uptime
---------------------------------------------------------------------------------------
0 00e0-fc1f-4ee0 AP1 Huawei 10.1.10.177 AP4050DN-E nor 0 49S

2020-12-22 Huawei confidential. Page 32 of 63

 HCIA-WLAN Lab Guide INTERNAL

1 00e0-fc54-64a0 AP2 Huawei 10.1.10.122 AP4050DN-E nor 0 36S

---------------------------------------------------------------------------------------
Total: 2

# To prevent unauthorized APs from accessing the network, change the AP

authentication mode to MAC address authentication.
[AC-wlan-view]ap auth-mode mac-auth

Step 3 Configure WLAN services.

Configure the SSID profile, security profile, and VAP profile according to the WLAN
data plan to ensure that the APs can emit signals for STAs to access.

# Create the SSID profile Huawei and set the SSID to Huawei.
[AC-wlan-view]ssid-profile name Huawei
[AC-wlan-ssid-prof-Huawei]ssid Huawei
[AC-wlan-ssid-prof-Huawei]quit

# Create the security profile Huawei and set the password.

[AC-wlan-view]security-profile name Huawei
[AC-wlan-sec-prof-Huawei]security wpa-wpa2 psk pass-phrase a1234567 aes
[AC-wlan-sec-prof-Huawei]quit

# Create the VAP profile Huawei, bind the SSID profile and security profile to the
VAP profile, and configure the service VLAN and forwarding mode.
[AC-wlan-view]vap-profile name Huawei
[AC-wlan-vap-prof-Huawei]ssid-profile Huawei
[AC-wlan-vap-prof-Huawei]security-profile Huawei
[AC-wlan-vap-prof-Huawei]service-vlan vlan-id 20
[AC-wlan-vap-prof-Huawei]forward-mode direct-forward
[AC-wlan-vap-prof-Huawei]quit

# Create the regulatory domain profile Huawei and set the country code to CN.
[AC-wlan-view]regulatory-domain-profile name Huawei
[AC-wlan-regulate-domain-Huawei]country-code CN
[AC-wlan-regulate-domain-Huawei]quit

# Enter the AP group Huawei, and bind the regulatory domain profile Huawei
and VAP profile Huawei to the AP group.
[AC-wlan-view]ap-group name Huawei
[AC-wlan-ap-group-Huawei]regulatory-domain-profile Huawei
Warning: Modifying the country code will clear channel, power and antenna gain c
onfigurations of the radio and reset the AP. Continue?[Y/N]:y
[AC-wlan-ap-group-Huawei]vap-profile Huawei wlan 1 radio all
[AC-wlan-ap-group-Huawei]quit

----End

2020-12-22 Huawei confidential. Page 33 of 63

 HCIA-WLAN Lab Guide INTERNAL

3.3 Verification
3.3.1 Verifying that the APs Emit Signals
# Run the display vap ssid Huawei command on the AC. The command output
shows that both APs send dual-band signals.
[AC-wlan-view]display vap ssid Huawei
Info: This operation may take a few seconds, please wait.
WID : WLAN ID
---------------------------------------------------------------------------
AP ID AP name RfID WID BSSID Status Auth type STA SSID
---------------------------------------------------------------------------
0 AP1 0 1 00E0-FC1F-4EE0 ON WPA/WPA2-PSK 0 Huawei
0 AP1 1 1 00E0-FC1F-4EF0 ON WPA/WPA2-PSK 0 Huawei
1 AP2 0 1 00E0-FC54-64A0 ON WPA/WPA2-PSK 0 Huawei
1 AP2 1 1 00E0-FC54-64B0 ON WPA/WPA2-PSK 0 Huawei
---------------------------------------------------------------------------
Total: 4

3.3.2 Testing STA Connections and Network Connectivity

# Connect a STA to an AP and ping R1 from the STA to test network connectivity.
STA>ping 10.1.30.1
Ping 10.1.30.1: 32 data bytes, Press Ctrl_C to break
From 10.1.30.1: bytes=32 seq=1 ttl=254 time=157 ms
From 10.1.30.1: bytes=32 seq=2 ttl=254 time=171 ms
From 10.1.30.1: bytes=32 seq=3 ttl=254 time=157 ms
From 10.1.30.1: bytes=32 seq=4 ttl=254 time=156 ms
From 10.1.30.1: bytes=32 seq=5 ttl=254 time=156 ms
--- 10.1.30.1 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 156/159/171 ms

3.4 Configuration Reference

3.4.1 Configuration on SW1
#
sysname SW1
#
vlan batch 10 20 30
#
dhcp enable
#
interface Vlanif20
ip address 10.1.20.1 255.255.255.0
dhcp select interface

2020-12-22 Huawei confidential. Page 34 of 63

 HCIA-WLAN Lab Guide INTERNAL

#
interface Vlanif30
ip address 10.1.30.2 255.255.255.0
#
interface GigabitEthernet0/0/1
port link-type access
port default vlan 30
#
interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 10
#
interface GigabitEthernet0/0/3
port link-type trunk
port trunk allow-pass vlan 10 20
#
return

3.4.2 Configuration on SW2

#
sysname SW2
#
vlan batch 10 20
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk pvid vlan 10
port trunk allow-pass vlan 10 20
#
interface GigabitEthernet0/0/2
port link-type trunk
port trunk pvid vlan 10
port trunk allow-pass vlan 10 20
#
interface GigabitEthernet0/0/3
port link-type trunk
port trunk allow-pass vlan 10 20
return

3.4.3 Configuration on the AC

#
sysname AC
#
vlan batch 10
#
dhcp enable
#
interface Vlanif10
ip address 10.1.10.1 255.255.255.0
dhcp select interface
#
interface GigabitEthernet0/0/2
port link-type trunk

2020-12-22 Huawei confidential. Page 35 of 63

 HCIA-WLAN Lab Guide INTERNAL

port trunk allow-pass vlan 10

#
capwap source ip-address 10.1.10.1
#
wlan
security-profile name Huawei
security wpa-wpa2 psk pass-phrase %^%#6z\~7+HUhK[FjBC!)3gUEvFu>@],Y)]H))N.RiI@
%^%# aes
ssid-profile name Huawei
ssid Huawei
vap-profile name Huawei
service-vlan vlan-id 20
ssid-profile Huawei
security-profile Huawei
regulatory-domain-profile name Huawei
ap-group name Huawei
regulatory-domain-profile Huawei
radio 0
vap-profile Huawei wlan 1
radio 1
vap-profile Huawei wlan 1
radio 2
vap-profile Huawei wlan 1
ap-id 0 type-id 61 ap-mac 00e0-fc1f-4ee0 ap-sn 210235448310CE11E816
ap-name AP1
ap-group Huawei
ap-id 1 type-id 61 ap-mac 00e0-fc54-64a0 ap-sn 21023544831065281D1F
ap-name AP2
ap-group Huawei
#
return

3.4.4 Configuration on R1
#
sysname R1
#
interface GigabitEthernet0/0/1
ip address 10.1.30.1 255.255.255.0
#
ip route-static 10.1.20.0 255.255.255.0 10.1.30.2
#
return

2020-12-22 Huawei confidential. Page 36 of 63

 HCIA-WLAN Lab Guide INTERNAL

4 WLAN Layer 3 Off-Path Networking

(CLI)

4.1 Introduction
4.1.1 About This Lab
In WLAN Layer 3 networking, the off-path deployment is an overlay networking
mode, which requires little reconstruction on the live network and is easy to
deploy. You can select the direct or tunnel forwarding mode according to
networking requirements.

4.1.2 Objectives
● Understand the Layer 3 networking mode.
● Understand the advantages of off-path networking.
● Learn how to configure WLAN services.

2020-12-22 Huawei confidential. Page 37 of 63

 HCIA-WLAN Lab Guide INTERNAL

4.1.3 Networking Topology

Figure 4-1 WLAN Layer 3 off-path networking topology

4.1.4 Lab Planning

This lab aims to deploy Layer 3 bypass networking, with SW1 as the gateway of
both APs and STAs. Enterprise employees and guests are provided network
services.

Table 4-1 VLAN port types and parameters

Device Port Port Type VLAN Settings

SW1 GE0/0/1 Access PVID: VLAN 50

GE0/0/2 Trunk PVID: 1

Allow-pass: VLANs 20 and 60

GE0/0/3 Trunk PVID: 1

Allow-pass: VLANs 10 and 30

SW2 GE0/0/1 Trunk PVID: VLAN 10

Allow-pass: VLANs 10 and 30

GE0/0/2 Trunk PVID: VLAN 10

2020-12-22 Huawei confidential. Page 38 of 63

 HCIA-WLAN Lab Guide INTERNAL

Device Port Port Type VLAN Settings

Allow-pass: VLANs 10 and 30

GE0/0/3 Trunk PVID: 1

Allow-pass: VLANs 10 and 30

AC GE0/0/1 Trunk PVID: VLAN 1

Allow-pass: VLANs 20 and 60

Table 4-2 IP address plan

Device Interface IP Address

R1 GE0/0/1 10.1.50.1/24

SW1 VLANIF 10 10.1.10.1/24

VLANIF 20 10.1.20.1/24

VLANIF 30 10.1.30.2/24

VLANIF 50 10.1.50.2/24

VLANIF 60 10.1.60.2/24

AC VLANIF 60 10.1.60.1/24

Loopback 0 10.10.10.10/32

Table 4-3 WLAN data plan

Item Configuration

DHCP server SW1 functions as a DHCP server to assign IP addresses to

APs and STAs and as their gateway.

IP address pool 10.1.10.2–10.1.10.254/24

for APs

IP address pool Employee: 10.1.20.2–10.1.20.254/24

for STAs Guest: 10.1.30.2–10.1.30.254/24

AC's source Loopback 0

interface address

AP group Name: Huawei

Referenced profiles: VAP profile and regulatory domain
profile

2020-12-22 Huawei confidential. Page 39 of 63

 HCIA-WLAN Lab Guide INTERNAL

Item Configuration

Regulatory Name: Huawei

domain profile Country code: CN

SSID profile Name: Employee Name: Guest

SSID name: Employee SSID name: Guest

Security profile Name: Employee Name: Guest

Security policy: Security policy: open
WPA2+PSK+AES system
Password: a1234567

VAP profile Name: Employee Name: Guest

Forwarding mode: tunnel Forwarding mode: direct
forwarding forwarding
Service VLAN: VLAN 20 Service VLAN: VLAN 30
Referenced profiles: SSID Referenced profiles: SSID
profile and security profile profile and security profile

4.2 Lab Procedure

4.2.1 Configuration Roadmap
Configure network
connectivity.

Configure APs to go online.

Configure WLAN services.

4.2.2 Configuration Procedure

Step 1 Configure network connectivity.

Configure VLANs and interface types on the devices to ensure that services can be
transparently transmitted at Layer 2.

# Create VLANs 10, 20, 30, 50, and 60 on SW1.

2020-12-22 Huawei confidential. Page 40 of 63

 HCIA-WLAN Lab Guide INTERNAL

<Huawei>system-view
[Huawei]sysname SW1
[SW1]vlan batch 10 20 30 50 60

# Configure interface types on SW1 and configure SW1 to allow packets from the
corresponding VLANs to pass through according to Table 4-1.
[SW1]interface GigabitEthernet 0/0/1
[SW1-GigabitEthernet0/0/1]port link-type access
[SW1-GigabitEthernet0/0/1]port default vlan 50
[SW1-GigabitEthernet0/0/1]quit
[SW1]interface GigabitEthernet 0/0/2
[SW1-GigabitEthernet0/0/2]port link-type trunk
[SW1-GigabitEthernet0/0/2]port trunk allow-pass vlan 20 60
[SW1-GigabitEthernet0/0/2]quit
[SW1]interface GigabitEthernet 0/0/3
[SW1-GigabitEthernet0/0/3]port link-type trunk
[SW1-GigabitEthernet0/0/3]port trunk allow-pass vlan 10 30
[SW1-GigabitEthernet0/0/3]quit

# Create VLAN 10 and VLAN 30 on SW2.

<Huawei>system-view
[Huawei]sysname SW2
[SW2]vlan batch 10 30

# Configure interface types on SW2 and configure SW2 to allow packets from the
corresponding VLANs to pass through according to Table 4-1.
[SW2]interface GigabitEthernet 0/0/1
[SW2-GigabitEthernet0/0/1]port link-type trunk
[SW2-GigabitEthernet0/0/1]port trunk pvid vlan 10
[SW2-GigabitEthernet0/0/1]port trunk allow-pass vlan 10 30
[SW2-GigabitEthernet0/0/1]quit
[SW2]interface GigabitEthernet 0/0/2
[SW2-GigabitEthernet0/0/2]port link-type trunk
[SW2-GigabitEthernet0/0/2]port trunk pvid vlan 10
[SW2-GigabitEthernet0/0/2]port trunk allow-pass vlan 10 30
[SW2-GigabitEthernet0/0/2]quit
[SW2]interface GigabitEthernet 0/0/3
[SW2-GigabitEthernet0/0/3]port link-type trunk
[SW2-GigabitEthernet0/0/3]port trunk allow-pass vlan 10 30
[SW2-GigabitEthernet0/0/3]quit

# Create VLAN 20 and VLAN 60 on the AC.

<AirEngine9700-M>system-view
[AirEngine9700-M]sysname AC
[AC]vlan batch 20 60

# Configure interface types on the AC and configure the AC to allow packets from
the corresponding VLANs to pass through according to Table 4-1.
[AC]interface GigabitEthernet 0/0/1
[AC-GigabitEthernet0/0/1]port link-type trunk
[AC-GigabitEthernet0/0/1]port trunk allow-pass vlan 20 60
[AC-GigabitEthernet0/0/1]quit

2020-12-22 Huawei confidential. Page 41 of 63

 HCIA-WLAN Lab Guide INTERNAL

Configure IP addresses and routing information on the devices to ensure network

connectivity.

# Create VLANIF interfaces on SW1 and configure IP addresses for them.

[SW1]interface Vlanif 10
[SW1-Vlanif10]ip address 10.1.10.1 24
[SW1-Vlanif10]quit
[SW1]interface Vlanif 20
[SW1-Vlanif20]ip address 10.1.20.1 24
[SW1-Vlanif20]quit
[SW1]interface Vlanif 30
[SW1-Vlanif30]ip address 10.1.30.1 24
[SW1-Vlanif30]quit
[SW1]interface Vlanif 50
[SW1-Vlanif50]ip address 10.1.50.2 24
[SW1-Vlanif50]quit
[SW1]interface Vlanif 60
[SW1-Vlanif60]ip address 10.1.60.2 24
[SW1-Vlanif60]quit

# Create VLANIF 60 and loopback 0 on the AC and configure IP addresses for

them.
[AC]interface Vlanif 60
[AC-Vlanif60]ip address 10.1.60.1 24
[AC-Vlanif60]quit
[AC]interface LoopBack 0
[AC-LoopBack0]ip address 10.10.10.10 32
[AC-LoopBack0]quit

# On R1, configure an IP address for the interface connected to SW1 and create a
static route destined for the STA network segment.
<Huawei>system-view
[Huawei]sysname R1
[R1]interface GigabitEthernet 0/0/1
[R1-GigabitEthernet0/0/1]ip address 10.1.50.1 24
[R1-GigabitEthernet0/0/1]quit
[R1]ip route-static 10.1.20.0 24 10.1.50.2
[R1]ip route-static 10.1.30.0 24 10.1.50.2

# Ping the IP address 10.1.20.1 on R1 from SW1. The ping operation succeeds.
[SW1]ping -a 10.1.20.1 10.1.50.1
PING 10.1.50.1: 56 data bytes, press CTRL_C to break
Reply from 10.1.50.1: bytes=56 Sequence=1 ttl=255 time=90 ms
Reply from 10.1.50.1: bytes=56 Sequence=2 ttl=255 time=50 ms
Reply from 10.1.50.1: bytes=56 Sequence=3 ttl=255 time=40 ms
Reply from 10.1.50.1: bytes=56 Sequence=4 ttl=255 time=30 ms
Reply from 10.1.50.1: bytes=56 Sequence=5 ttl=255 time=20 ms

--- 10.1.50.1 ping statistics ---

5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 20/46/90 ms

2020-12-22 Huawei confidential. Page 42 of 63

 HCIA-WLAN Lab Guide INTERNAL

Step 2 Configure APs to go online.

Configure a DHCP server to assign IP addresses to APs and STAs.

# Enable DHCP and create an IP address pool for APs on SW1.

[SW1]dhcp enable
[SW1]ip pool ap
[SW1-ip-pool-ap]network 10.1.10.0 mask 24
[SW1-ip-pool-ap]option 43 sub-option 2 ip-address 10.10.10.10
[SW1-ip-pool-ap]quit

# Create an address pool for employees and guests on SW1.

[SW1]ip pool employee
[SW1-ip-pool-employee]network 10.1.20.0 mask 24
[SW1-ip-pool-employee]gateway-list 10.1.20.1
[SW1-ip-pool-employee]dns-list 114.114.114.114
[SW1-ip-pool-employee]quit
[SW1-ip-pool-employee]quit
[SW1-ip-pool-guest]network 10.1.30.0 mask 24
[SW1-ip-pool-guest]gateway-list 10.1.30.1
[SW1-ip-pool-guest]dns-list 114.114.114.114
[SW1-ip-pool-guest]quit

# Enable the global address pool function on the VLANIF interfaces of SW1.
[SW1]interface Vlanif 10
[SW1-Vlanif10]dhcp select global
[SW1-Vlanif10]quit
[SW1]interface Vlanif 20
[SW1-Vlanif20]dhcp select global
[SW1-Vlanif20]quit
[SW1]interface Vlanif 30
[SW1-Vlanif30]dhcp select global
[SW1-Vlanif30]quit

Configure the AC's source interface address and configure a proper AP

authentication mode so that the APs can go online normally.

# Configure loopback 0 as the AC's source interface.

[AC]capwap source interface LoopBack 0

# Create an AP group named Huawei on the AC.

[AC]wlan
[AC-wlan-view]ap-group name Huawei
[AC-wlan-ap-group-Huawei]quit

# Set the AP authentication mode to MAC address authentication, add APs to the
AP group, and name them AP1 and AP2.
[AC-wlan-view]ap auth-mode mac-auth
[AC-wlan-view]ap-mac 00e0-fc41-6340
[AC-wlan-ap-0]ap-name AP1
[AC-wlan-ap-0]ap-group Huawei
Warning: This operation may cause AP reset. If the country code changes, it will

2020-12-22 Huawei confidential. Page 43 of 63

 HCIA-WLAN Lab Guide INTERNAL

clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
[AC-wlan-ap-0]quit
[AC-wlan-view]ap-mac 00e0-fca2-5970
[AC-wlan-ap-1]ap-name AP2
[AC-wlan-ap-1]ap-group Huawei
Warning: This operation may cause AP reset. If the country code changes, it will
clear channel, power and antenna gain configurations of the radio, Whether to c
ontinue? [Y/N]:y
[AC-wlan-ap-1]quit

# Run the display ap all command to check the AP online status. The command
output shows that the two APs are not online.
[AC-wlan-view]display ap all
Info: This operation may take a few seconds. Please wait for a moment.done.
Total AP information:
idle : idle [2]
------------------------------------------------------------------------------
ID MAC Name Group IP Type State STA Uptime
------------------------------------------------------------------------------
0 00e0-fc41-6340 AP1 Huawei - - idle 0 -
1 00e0-fca2-5970 AP2 Huawei - - idle 0 -
------------------------------------------------------------------------------
Total: 2

# Troubleshoot the fault and find that the reason is that the APs fail to
communicate with the AC's source address.

# On SW1, add a route to the AC's source address. On the AC, add a route to the
AP network segment.
[SW1]ip route-static 10.10.10.10 32 10.1.60.1
[AC]ip route-static 10.1.10.0 24 10.1.60.2

# Wait for a period of time, and then run the display ap all command to check
the AP online status. The command output shows that the two APs have gone
online.
[AC]display ap all
Info: This operation may take a few seconds. Please wait for a moment.done.
Total AP information:
nor : normal [2]
-------------------------------------------------------------------------------------------------------------------
ID MAC Name Group IP Type State STA Uptime
-------------------------------------------------------------------------------------------------------------------
0 00e0-fc41-6340 AP1 Huawei 10.1.10.253 AirEngine5760-10 nor 0 9S
1 00e0-fca2-5970 AP2 Huawei 10.1.10.254 AirEngine5760-10 nor 0 10S
-------------------------------------------------------------------------------------------------------------------
Total: 2

Step 3 Configure WLAN services.

Configure the SSID profile, security profile, and VAP profile according to the WLAN
data plan to ensure that the APs can emit signals for STAs to access.

2020-12-22 Huawei confidential. Page 44 of 63

 HCIA-WLAN Lab Guide INTERNAL

# Create SSID profiles Employee and Guest, and set the SSIDs to Employee and
Guest, respectively.
[AC-wlan-view]ssid-profile name Employee
[AC-wlan-ssid-prof-Employee]ssid Employee
[AC-wlan-ssid-prof-Employee]quit
[AC-wlan-view]ssid-profile name Guest
[AC-wlan-ssid-prof-Guest]ssid Guest
[AC-wlan-ssid-prof-Guest]quit

# Create security profiles Employee and Guest, and configure their security
policies.
[AC-wlan-view]security-profile name Employee
[AC-wlan-sec-prof-Employee]security wpa2 psk pass-phrase a1234567 aes
[AC-wlan-sec-prof-Employee]quit
[AC-wlan-view]security-profile name Guest
[AC-wlan-sec-prof-Guest]security open
[AC-wlan-sec-prof-Guest]quit

# Create VAP profiles Employee and Guest, and configure them according to the
WLAN data plan.
[AC-wlan-view]vap-profile name Employee
[AC-wlan-vap-prof-Employee]ssid-profile Employee
[AC-wlan-vap-prof-Employee]security-profile Employee
[AC-wlan-vap-prof-Employee]service-vlan vlan-id 20
[AC-wlan-vap-prof-Employee]forward-mode tunnel
[AC-wlan-vap-prof-Employee]quit
[AC-wlan-view]vap-profile name Guest
[AC-wlan-vap-prof-Guest]ssid-profile Guest
[AC-wlan-vap-prof-Guest]security-profile Guest
[AC-wlan-vap-prof-Guest]service-vlan vlan-id 30
[AC-wlan-vap-prof-Guest]forward-mode direct-forward
[AC-wlan-vap-prof-Guest]quit

# Create the regulatory domain profile Huawei and set the country code to CN.
[AC-wlan-view]regulatory-domain-profile name Huawei
[AC-wlan-regulate-domain-Huawei]country-code CN
[AC-wlan-regulate-domain-Huawei]quit

# Enter the AP group Huawei, and bind the regulatory domain profile Huawei
and VAP profiles Employee and Guest and to the AP group.
[AC-wlan-view]ap-group name Huawei
[AC-wlan-ap-group-Huawei]regulatory-domain-profile Huawei
Warning: Modifying the country code will clear channel, power and antenna gain c
onfigurations of the radio and reset the AP. Continue?[Y/N]:y
[AC-wlan-ap-group-Huawei]vap-profile Employee wlan 1 radio all
[AC-wlan-ap-group-Huawei]vap-profile Guest wlan 2 radio all
[AC-wlan-ap-group-Huawei]quit

----End

2020-12-22 Huawei confidential. Page 45 of 63

 HCIA-WLAN Lab Guide INTERNAL

4.3 Verification
4.3.1 Verifying that the APs Emit Signals
# Run the display vap ssid Employee command on the AC. The command output
shows that both APs send dual-band signals.
[AC-wlan-view]display vap ssid Employee
Info: This operation may take a few seconds, please wait.
WID : WLAN ID
--------------------------------------------------------------------------
AP ID AP name RfID WID BSSID Status Auth type STA SSID
--------------------------------------------------------------------------
0 AP1 0 1 00E0-FC41-6340 ON WPA2-PSK 0 Employee
0 AP1 1 1 00E0-FC41-6350 ON WPA2-PSK 0 Employee
1 AP2 0 1 00E0-FCA2-5970 ON WPA2-PSK 0 Employee
1 AP2 1 1 00E0-FCA2-5980 ON WPA2-PSK 0 Employee
--------------------------------------------------------------------------
Total: 4
[AC-wlan-view]display vap ssid Guest
Info: This operation may take a few seconds, please wait.
WID : WLAN ID
--------------------------------------------------------------------------
AP ID AP name RfID WID BSSID Status Auth type STA SSID
--------------------------------------------------------------------------
0 AP1 0 2 00E0-FC41-6341 ON Open 0 Guest
0 AP1 1 2 00E0-FC41-6351 ON Open 0 Guest
1 AP2 0 2 00E0-FCA2-5971 ON Open 0 Guest
1 AP2 1 2 00E0-FCA2-5981 ON Open 0 Guest
--------------------------------------------------------------------------
Total: 4

4.3.2 Testing STA Connections and Network Connectivity

# Connect a STA to the two SSIDs, and ping R1 from the STA to test network
connectivity.
STA>ping 10.1.50.1
Ping 10.1.50.1: 32 data bytes, Press Ctrl_C to break
From 10.1.50.1: bytes=32 seq=1 ttl=254 time=234 ms
From 10.1.50.1: bytes=32 seq=2 ttl=254 time=172 ms
From 10.1.50.1: bytes=32 seq=3 ttl=254 time=203 ms
From 10.1.50.1: bytes=32 seq=4 ttl=254 time=188 ms
From 10.1.50.1: bytes=32 seq=5 ttl=254 time=203 ms
--- 10.1.50.1 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 172/200/234 ms

2020-12-22 Huawei confidential. Page 46 of 63

 HCIA-WLAN Lab Guide INTERNAL

4.4 Configuration Reference

4.4.1 Configuration on SW1
#
sysname SW1
#
vlan batch 10 20 30 50 60
#
dhcp enable
#
ip pool ap
gateway-list 10.1.10.1
network 10.1.10.0 mask 255.255.255.0
option 43 sub-option 2 ip-address 10.10.10.10
#
ip pool employee
gateway-list 10.1.20.1
network 10.1.20.0 mask 255.255.255.0
dns-list 114.114.114.114
#
ip pool guest
gateway-list 10.1.30.1
network 10.1.30.0 mask 255.255.255.0
dns-list 114.114.114.114
#
interface Vlanif10
ip address 10.1.10.1 255.255.255.0
dhcp select global
#
interface Vlanif20
ip address 10.1.20.1 255.255.255.0
dhcp select global
#
interface Vlanif30
ip address 10.1.30.1 255.255.255.0
dhcp select global
#
interface Vlanif50
ip address 10.1.50.2 255.255.255.0
#
interface Vlanif60
ip address 10.1.60.2 255.255.255.0
#
interface GigabitEthernet0/0/1
port link-type access
port default vlan 50
#
interface GigabitEthernet0/0/2
port link-type trunk
port trunk allow-pass vlan 20 60
#
interface GigabitEthernet0/0/3
port link-type trunk

2020-12-22 Huawei confidential. Page 47 of 63

 HCIA-WLAN Lab Guide INTERNAL

port trunk allow-pass vlan 10 30

#
ip route-static 10.10.10.10 255.255.255.255 10.1.60.1
#
return

4.4.2 Configuration on SW2

#
sysname SW2
#
vlan batch 10 30
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk pvid vlan 10
port trunk allow-pass vlan 10 30
#
interface GigabitEthernet0/0/2
port link-type trunk
port trunk pvid vlan 10
port trunk allow-pass vlan 10 30
#
interface GigabitEthernet0/0/3
port link-type trunk
port trunk allow-pass vlan 10 30
#
return

4.4.3 Configuration on the AC

#
sysname AC
#
vlan batch 20 60
#
interface Vlanif60
ip address 10.1.60.1 255.255.255.0
#
interface GigabitEthernet0/0/1
port link-type trunk
port trunk allow-pass vlan 20 60
#
interface LoopBack0
ip address 10.10.10.10 255.255.255.255
#
ip route-static 10.1.10.0 255.255.255.0 10.1.60.2
#
capwap source interface loopback0
#
wlan
security-profile name Guest
security-profile name Employee
security wpa2 psk pass-phrase %^%#AD:[8l4P;UxL2B9*`b4H+Bj}AXMFiI+mr-,nFy|D%^%#
aes

2020-12-22 Huawei confidential. Page 48 of 63

 HCIA-WLAN Lab Guide INTERNAL

ssid-profile name Guest

ssid Guest
ssid-profile name Employee
ssid Employee
vap-profile name Guest
service-vlan vlan-id 30
ssid-profile Guest
security-profile Guest
vap-profile name Employee
forward-mode tunnel
service-vlan vlan-id 20
ssid-profile Employee
security-profile Employee
regulatory-domain-profile name Huawei
ap-group name Huawei
regulatory-domain-profile Huawei
radio 0
vap-profile Employee wlan 1
vap-profile Guest wlan 2
radio 1
vap-profile Employee wlan 1
vap-profile Guest wlan 2
radio 2
vap-profile Employee wlan 1
vap-profile Guest wlan 2
ap-id 0 type-id 61 ap-mac 00e0-fc41-6340 ap-sn 210235448310B37A293B
ap-name AP1
ap-group Huawei
ap-id 1 type-id 61 ap-mac 00e0-fca2-5970 ap-sn 210235448310FD475B70
ap-name AP2
ap-group Huawei
#
return

4.4.4 Configuration on R1
#
sysname R1
#
interface GigabitEthernet0/0/1
ip address 10.1.50.1 255.255.255.0
#
ip route-static 10.1.20.0 255.255.255.0 10.1.50.2
ip route-static 10.1.30.0 255.255.255.0 10.1.50.2
#
return

2020-12-22 Huawei confidential. Page 49 of 63

 HCIA-WLAN Lab Guide INTERNAL

5 WLAN RRM

5.1 Introduction
5.1.1 About This Lab
An enterprise deploys a WLAN at its reception hall and requires the WLAN service
for both employees and guests. To ensure good Internet access experience for
users, simple radio calibration on the WLAN is required.

5.1.2 Objectives
● Understand the basic principles of radio calibration.
● Know how to configure RRM.

2020-12-22 Huawei confidential. Page 50 of 63

 HCIA-WLAN Lab Guide INTERNAL

5.1.3 Networking Topology

Figure 5-1 WLAN RRM topology

5.1.4 Lab Planning

Table 5-1 Radio parameters

Item Parameter

Channel (2.4 GHz) AP1: 1; AP2: 6; AP3: 11

Channel bonding (5 GHz) AP1: 40 MHz; AP2: 40 MHz; AP3: 80 MHz

2020-12-22 Huawei confidential. Page 51 of 63

 HCIA-WLAN Lab Guide INTERNAL

5.2 Lab Procedure

5.2.1 Configuration Roadmap
Perform radio calibration.

5.2.2 Configuration Procedure

Perform radio calibration.

Adjust the radio parameters according to Table 5-1.

# Adjust the channels on the 2.4 GHz radios of AP1, AP2, and AP3 to 1, 6, and 11.
[AC]wlan
[AC-wlan-view]ap-name AP1
[AC-wlan-ap-0]radio 0
[AC-wlan-radio-0/0]channel 20mhz 1
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC-wlan-radio-0/0]quit
[AC-wlan-ap-0]quit
[AC-wlan-view]ap-name AP2
[AC-wlan-ap-1]radio 0
[AC-wlan-radio-1/0]channel 20mhz 6
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC-wlan-radio-1/0]quit
[AC-wlan-ap-1]quit
[AC-wlan-view]ap-name AP3
[AC-wlan-ap-2]radio 0
[AC-wlan-radio-2/0]channel 20mhz 11
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC-wlan-radio-2/0]quit
[AC-wlan-ap-2]quit

# Run the display radio all command to check the channel status of the three
APs.
[AC-wlan-view]display radio all
CH/BW:Channel/Bandwidth
CE:Current EIRP (dBm)
ME:Max EIRP (dBm)
CU:Channel utilization
ST:Status
----------------------------------------------------------------------
AP ID Name RfID Band Type ST CH/BW CE/ME STA CU
----------------------------------------------------------------------
0 AP1 0 2.4G bgn on 1/20M -/- 0 0%
0 AP1 1 5G an11ac on 149/20M -/- 0 0%
1 AP2 0 2.4G bgn on 6/20M -/- 0 0%
1 AP2 1 5G an11ac on 149/20M -/- 0 0%
2 AP3 0 2.4G bgn on 11/20M -/- 0 0%
2 AP3 1 5G an11ac on 149/20M -/- 0 0%

2020-12-22 Huawei confidential. Page 52 of 63

 HCIA-WLAN Lab Guide INTERNAL

----------------------------------------------------------------------
Total:6

# To improve user experience and network throughput, bond channels on the 5

GHz frequency band.
[AC-wlan-view]ap-name AP1
[AC-wlan-ap-0]radio 1
[AC-wlan-radio-0/1]channel 40mhz-plus 36
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC-wlan-radio-0/1]quit
[AC-wlan-ap-0]quit
[AC-wlan-view]ap-name AP2
[AC-wlan-ap-1]radio 1
[AC-wlan-radio-1/1]channel 40mhz-plus 44
Warning: This action may cause service interruption. Continue?[Y/N]y
[AC-wlan-radio-1/1]quit
[AC-wlan-ap-1]quit
[AC-wlan-view]ap-name AP3
[AC-wlan-ap-2]radio 1
[AC-wlan-radio-2/1] channel 80mhz 149
[AC-wlan-radio-2/1]quit
[AC-wlan-ap-2]quit

5.3 Verification
5.3.1 Checking AP Radio Information
# Run the display radio all command to check radio information about the three
APs.
[AC-wlan-view]display radio all
CH/BW:Channel/Bandwidth
CE:Current EIRP (dBm)
ME:Max EIRP (dBm)
CU:Channel utilization
ST:Status
----------------------------------------------------------------------
AP ID Name RfID Band Type ST CH/BW CE/ME STA CU
----------------------------------------------------------------------
0 AP1 0 2.4G bgn on 1/20M -/- 0 0%
0 AP1 1 5G an11ac on 36/40M+ -/- 0 0%
1 AP2 0 2.4G bgn on 6/20M -/- 0 0%
1 AP2 1 5G an11ac on 44/40M+ -/- 0 0%
2 AP3 0 2.4G bgn on 11/20M -/- 0 0%
2 AP3 1 5G an11ac on 149/80M -/- 0 0%
----------------------------------------------------------------------
Total:6

2020-12-22 Huawei confidential. Page 53 of 63

 HCIA-WLAN Lab Guide INTERNAL

5.4 Configuration Reference

5.4.1 Configuration on the AC
ap-id 0 type-id 61 ap-mac 00e0-fcbe-1fd0 ap-sn 210235448310181CFE48
ap-name AP1
ap-group Huawei
radio 0
channel 20mhz 1
radio 1
channel 40mhz-plus 36
ap-id 1 type-id 61 ap-mac 00e0-fc5a-7fd0 ap-sn 210235448310CF70816B
ap-name AP2
ap-group Huawei
radio 0
channel 20mhz 6
radio 1
channel 40mhz-plus 44
ap-id 2 type-id 61 ap-mac 00e0-fc54-3590 ap-sn 2102354483105749D902
ap-name AP3
ap-group Huawei
radio 0
channel 20mhz 11
radio 1
channel 80mhz 149

2020-12-22 Huawei confidential. Page 54 of 63

 HCIA-WLAN Lab Guide INTERNAL

6 WLAN Troubleshooting Basics

6.1 Introduction
6.1.1 About This Lab
Wired LANs are expensive and lack mobility. The increasing demand for portability
and mobility requires WLAN technologies. As the most cost-efficient and
convenient network access mode nowadays, WLAN allows users to freely move
within the covered area.

Common faults on a WLAN include AP join failures, STA access faults, and other
faults caused by incorrect configurations. This lab aims to introduce the basic
WLAN troubleshooting process and configuration based on typical AC + Fit AP
networking.

6.1.2 Objectives
● Understand the basic WLAN troubleshooting process.
● Know common WLAN troubleshooting commands.

2020-12-22 Huawei confidential. Page 55 of 63

 HCIA-WLAN Lab Guide INTERNAL

6.1.3 Networking Topology

Figure 6-1 Basic WLAN topology

1. S2 supports the WLAN AC function and serves as an AC. The AC hereinafter

refers to S2. (If the switch used in the actual environment does not support
the WLAN AC function, deploy a common AC instead.)
2. The AC is deployed in off-path mode and connects to APs through a Layer 2
network.
3. The AC functions as a DHCP server to assign IP addresses to APs, and S1
functions as a DHCP server to assign IP addresses to STAs.
4. The direct forwarding mode is configured.

2020-12-22 Huawei confidential. Page 56 of 63

 HCIA-WLAN Lab Guide INTERNAL

6.1.4 Data Planning

Table 6-1 AC data planning

Item Configuration

Management VLAN 100

VLAN for APs

Service VLAN for VLAN 200

STAs

DHCP server The AC functions as a DHCP server to assign IP addresses

to APs.

S1 functions as a DHCP server to assign IP addresses to

STAs. The default gateway address of STAs is
192.168.101.254.

IP address pool for 192.168.100.1-192.168.100.253/24

APs

IP address pool for 192.168.101.1-192.168.101.253/24

STAs

AC's source VLANIF 100: 192.168.100.254/24

interface address

AP group Name: ap-group1

Referenced profiles: VAP profile HCIA-WLAN and

regulatory domain profile default

Regulatory domain Name: default

profile
Country code: CN

SSID profile Name: HCIA-WLAN

SSID name: HCIA-WLAN

Security profile Name: HCIA-WLAN

Security policy: WPA-WPA2+PSK+AES

Password: HCIA-Datacom

VAP profile Name: HCIA-WLAN

Forwarding mode: direct forwarding

Service VLAN: VLAN 101

Referenced profiles: SSID profile HCIA-WLAN and security

profile HCIA-WLAN

2020-12-22 Huawei confidential. Page 57 of 63

 HCIA-WLAN Lab Guide INTERNAL

6.1.5 Fault Symptom

After the preceding configurations are complete, AP1 cannot go online, and a STA
cannot access the network although AP2 is online properly.

6.2 Troubleshooting Process and Common Commands

6.2.1 Troubleshooting Roadmap
Figure 6-2 Troubleshooting process for an AP's failure to go online

2020-12-22 Huawei confidential. Page 58 of 63

 HCIA-WLAN Lab Guide INTERNAL

Figure 6-3 Troubleshooting process for a STA's failure to go online

6.2.2 Common WLAN Maintenance Commands

Run commands on the AC and APs by referring to commands in the following
table. Take records of the results and try to understand them.

Table 6-2 Common WLAN maintenance commands

Command Description

display current-configuration Displays the running device configuration.

display ap Displays the AP status.

display ap-address-info Displays the IP address of an AP.

display capwap link Displays the CAPWAP link status of an AP.

display capwap configuration Displays the CAPWAP configuration on the

AC.

display ap online-fail-record Displays the online failure record of the AP

mac xxxx-xxxx-xxxx with the MAC address xxxx-xxxx-xxxx.

display ap unauthorized record Displays records of unauthenticated APs

display station online-fail-record Displays the online failure record of the STA
sta-mac xxxx-xxxx-xxxx with the MAC address xxxx-xxxx-xxxx.

2020-12-22 Huawei confidential. Page 59 of 63

 HCIA-WLAN Lab Guide INTERNAL

6.3 Troubleshooting Process

Briefly describe the troubleshooting process and commands based on the fault
symptom and your troubleshooting roadmap.

Procedure Operation Object Command Description

10

2020-12-22 Huawei confidential. Page 60 of 63

 HCIA-WLAN Lab Guide INTERNAL

Procedure Operation Object Command Description

6.4 Troubleshooting Result

Summarize the failure points you discover during the troubleshooting practice and
describe your handling methods.

Failure Point Troubleshooting Method

2020-12-22 Huawei confidential. Page 61 of 63

 HCIA-WLAN Lab Guide INTERNAL

6.5 Quiz
1. How do I check whether a STA is successfully connected to the network?
2. How can I know whether an AP has obtained an IP address?

6.6 Reference Answers

WLAN Troubleshooting Basics

1. Verify STA authentication results.

[AC6605- wlan-view]display access-user
------------------------------------------------------------------------------
UserID Username IP address MAC
------------------------------------------------------------------------------
3 admin 172.16.130.200 -
18 148fc661b424 10.0.0.253 148f-c661-b424
19 d46e5c8fc526 10.0.0.254 d46e-5c8f-c526
------------------------------------------------------------------------------

Check whether STA access is normal.

[AC6605- wlan-view]display station assoc-info sta 148f-c661-b424
------------------------------------------------------------------------------
STA MAC AP-IDRADIO-ID SS-ID SSID
------------------------------------------------------------------------------
148f-c661-b424 0 0 0 EnnWlan
------------------------------------------------------------------------------

2. If the address pool for APs is configured on the AC, run the display ip pool
name ip-pool-name used command on the AC. If the command output
displays an AP's MAC address and the corresponding IP address, the AP has
obtained an IP address.
Alternatively, run the display ap all command to verify that an AP has
obtained an IP address.

6.7 Appendix
6.7.1 Common Commands
AP State Description

commit-failed WLAN service configurations fail to be delivered to an AP after

the AP goes online on an AC.

committing WLAN service configurations are being delivered to an AP after

the AP goes online on an AC.

config WLAN service configurations are being delivered to an AP when

the AP is going online on an AC.

2020-12-22 Huawei confidential. Page 62 of 63

 HCIA-WLAN Lab Guide INTERNAL

AP State Description

config-failed WLAN service configurations fail to be delivered to an AP when

the AP is going online on an AC.

download An AP is in upgrade state.

fault An AP fails to go online.

idle It is the initialization state of an AP before it establishes a link

with the AC for the first time.

name- The name of an AP conflicts with that of an existing AP.

conflicted

normal An AP is working properly.

standby An AP is in normal state on the standby AC.

unauth An AP is not authenticated.

6.7.2 Documentation for the troubleshooting experiment

WLAN Troubleshooting Lab Documents.rar

2020-12-22 Huawei confidential. Page 63 of 63