Document Outline

• Title Page
• Preface
  • Audience
  • Conventions
    • Command conventions
    • GUI conventions
    • Symbols
    • Network topology icons
    • Port numbering in examples
  • About the H3C Access Controllers documentation set
  • Obtaining documentation
  • Technical support
  • Documentation feedback
• Contents
• About the H3C Access Controllers Web-Based Configuration Guide
  • Typical network scenarios
    • WX2540E, WAC360, and WAC361 access controller network scenario
    • Access controller network scenario
    • Access controller module network scenario
    • Wireless switch network scenario
  • Feature matrixes
    • Feature matrix for the WX2540E and WAC360 series
    • Feature matrix for the WX5000 series
    • Feature matrix for the WX6000 series
    • Feature matrix for the WX5500E
    • Feature matrix for the WX3500E series
    • Feature matrix for the WX3000E series
• Web overview
  • Web interface
  • Web user level
  • Web-based NM functions
  • Common items on the Web pages
    • Buttons and icons
    • Page display
    • Search function
    • Sort function
• Logging in to the Web interface
  • Restrictions and guidelines
    • Operating system requirements
    • Web browser requirements
      • Enabling securing settings in a Microsoft Internet Explorer browser
      • Enabling JavaScript in a Firefox browser
    • Others
  • Logging in to the Web interface
  • Logging out of the Web interface
• Quick Start
  • Quick Start wizard home page
  • Basic configuration
  • Admin configuration
  • IP configuration
  • Wireless configuration
  • RADIUS configuration
  • Portal configuration
  • Encryption configuration
  • AP configuration
  • Configuration summary
• Displaying information summary
  • Device information
    • Device info
    • System resource state
    • Device interface information
    • Recent system logs
  • Displaying WLAN service
    • Displaying detailed information about WLAN service
    • Displaying WLAN service statistics
    • Displaying connection history information for the WLAN service
  • Displaying AP information
    • Displaying WLAN service information for an AP
    • Displaying AP connection history information
    • Displaying AP radio information
    • Displaying tunnel latency information
    • Displaying AP detailed information
    • Displaying AP connection records
  • Displaying clients
    • Displaying client detailed information
    • Displaying client statistics
    • Displaying client roaming information
    • Displaying RF ping information
    • Displaying beacon measurement reports
• Managing licenses
  • Adding a license
  • Displaying a license
  • Configuring enhanced licenses
    • Registering an enhanced license
    • Displaying registered enhanced licenses
• Configuring basic device settings
  • Configuring system name
  • Configuring Web idle timeout
• Maintaining devices
  • Upgrading software
  • Rebooting the device
  • Generating the diagnostic information file
• Configuring the system time
  • Configuration guidelines
  • Displaying the system time
  • Configuring the system time
  • Configuring the network time
  • Configuring the time zone and daylight saving time
  • System time configuration example
    • Network requirements
    • Configuring the switch
    • Configuring the AC
    • Verifying the configuration
• Managing logs
  • Displaying syslog
  • Setting the log host
  • Setting buffer capacity and refresh interval
• Managing the configuration
  • Backing up the configuration
  • Restoring the configuration
  • Saving the configuration
    • Fast
    • Common
  • Initializing the configuration
• Managing files
  • Displaying file list
  • Downloading a file
  • Uploading a file
  • Removing a file
  • Specifying the main boot file
• Managing interfaces
  • Interface management overview
  • Displaying interface information and statistics
  • Creating an interface
  • Modifying a Layer 2 interface
  • Modifying a Layer 3 interface
  • Interface management configuration example
    • Network requirements
    • Configuration procedure
• Configuring port mirroring
  • Overview
  • Configuration guidelines
  • Recommended configuration procedure
  • Adding a mirroring group
  • Configuring ports for a mirroring group
  • Port mirroring configuration example
    • Network requirements
    • Requirement analysis
    • Configuration procedure
• Managing users
  • Creating a user
  • Setting the super password
  • Switching the user access level to the management level
• Configuring SNMP
  • SNMP overview
  • SNMP configuration task list
    • SNMPv1 or SNMPv2c configuration task list
    • SNMPv3 configuration task list
  • Enabling SNMP agent
  • Configuring an SNMP view
    • Creating an SNMP view
    • Adding rules to an SNMP view
  • Configuring an SNMP community
  • Configuring an SNMP group
  • Configuring an SNMP user
  • Configuring SNMP trap function
  • Displaying SNMP packet statistics
  • SNMPv1/SNMPv2c configuration example
    • Network requirements
    • Configuring the AC (SNMP agent)
    • Configuring the NMS
    • Verifying the configuration
  • SNMPv3 configuration example
    • Network requirements
    • Configuring the AC (SNMP agent)
    • Configuring the NMS
    • Verifying the configuration
• Configuring loopback
  • Configuration guidelines
  • Loopback operation
• OAP management
  • Overview
  • Configuring a management IP address
• Configuring MAC addresses
  • Overview
  • Configuring a MAC address entry
  • Setting the aging time of MAC address entries
  • MAC address configuration example
    • Network requirements
    • Configuration procedure
• Configuring VLANs
  • Overview
  • Configuration guidelines
  • Recommended configuration procedure
  • Creating a VLAN
  • Modifying a VLAN
  • Modifying a port
  • VLAN configuration example
    • Network requirements
    • Configuring the AC
    • Configuring the switch
• Configuring ARP
  • Overview
    • Introduction to ARP
    • Introduction to gratuitous ARP
      • Gratuitous ARP packets
      • Learning of gratuitous ARP packets
  • Displaying ARP entries
  • Creating a static ARP entry
  • Removing ARP entries
  • Configuring gratuitous ARP
  • Static ARP configuration example
    • Network requirements
    • Configuration procedure
• Configuring ARP attack protection
  • Overview
    • ARP detection
    • Source MAC address based ARP attack detection
    • ARP active acknowledgement
    • ARP packet source MAC address consistency check
  • Configuring ARP detection
  • Configuring other ARP attack protection functions
• Configuring IGMP snooping
  • Overview
  • Recommended configuration procedure
  • Enabling IGMP snooping globally
  • Configuring IGMP snooping on a VLAN
  • Configuring IGMP snooping on a port
  • Displaying IGMP snooping multicast entry information
  • IGMP snooping configuration example
    • Network requirements
    • Configuring Router A
    • Configuring the AC
    • Verifying the configuration
• Configuring IPv4 and IPv6 routing
  • Overview
  • Configuration guidelines
  • Displaying the IPv4 active route table
  • Creating an IPv4 static route
  • Displaying the IPv6 active route table
  • Creating an IPv6 static route
  • IPv4 and IPv6 static route configuration examples
    • IPv4 static route configuration example
      • Network requirements
      • Configuration outlines
      • Configuration procedure
      • Verifying the configuration
    • IPv6 static route configuration example
      • Network requirements
      • Configuration outlines
      • Configuration procedure
      • Verifying the configuration
• Configuring DHCP
  • DHCP overview
  • DHCP snooping overview
    • Recording IP-to-MAC mappings of DHCP clients
    • Enabling DHCP clients to obtain IP addresses from authorized DHCP servers
  • Recommended configuration procedure (for DHCP server)
    • Enabling DHCP
    • Creating a static address pool for the DHCP server
    • Creating a dynamic address pool for the DHCP server
    • Enabling the DHCP server on an interface
    • Displaying information about assigned IP addresses
  • Recommended configuration procedure (for DHCP relay agent)
    • Enabling DHCP and configuring advanced parameters for the DHCP relay agent
    • Creating a DHCP server group
    • Enabling the DHCP relay agent on an interface
    • Configuring and displaying clients' IP-to-MAC bindings
  • Recommended configuration procedure (for DHCP snooping)
    • Enabling DHCP snooping
    • Configuring DHCP snooping functions on an interface
    • Displaying clients' IP-to-MAC bindings
  • DHCP configuration examples
    • DHCP server configuration example
      • Network requirements
      • Configuration procedure
    • DHCP relay agent configuration example
      • Network requirements
      • Configuration procedure
    • DHCP snooping configuration example
      • Network requirements
      • Configuration procedure
• Configuring link aggregation and LACP
  • Overview
    • Basic concepts of link aggregation
      • Aggregate interface
      • Aggregation group
      • States of the member ports in an aggregation group
      • LACP protocol
      • Operational key
      • Class-two configurations
    • Link aggregation modes
      • Static aggregation mode
      • Dynamic aggregation mode
      • Guidelines
    • Load sharing mode of an aggregation group
  • Configuration guidelines
  • Recommended link aggregation and LACP configuration procedures
    • Recommended static aggregation group configuration procedure
    • Recommended dynamic aggregation group configuration procedure
  • Creating a link aggregation group
  • Displaying aggregate interface information
  • Setting LACP priority
  • Displaying LACP-enabled port information
  • Link aggregation and LACP configuration example
    • Network requirements
    • Configuration procedure
• Configuring DNS
  • Overview
    • Static domain name resolution
    • Dynamic domain name resolution
    • DNS proxy
  • Recommended configuration procedure
    • Configuring static name resolution table
    • Configuring dynamic domain name resolution
    • Configuring DNS proxy
  • Configuring static name resolution table
  • Configuring dynamic domain name resolution
  • Configuring DNS proxy
  • Adding a DNS server address
  • Adding a domain name suffix
  • Clearing dynamic DNS cache
  • DNS configuration example
    • Network requirements
    • Configuring the DNS server
    • Configuring the AC
    • Verifying the configuration
• Configuring DDNS
  • Overview
  • Configuration prerequisites
  • Configuration procedure
  • DDNS configuration example
    • Network requirements
    • Configuring the AC
    • Verifying the configuration
• Configuring PPPoE
  • Overview
  • Configuration guidelines
  • Configuring a PPPoE client
  • Displaying PPPoE client session statistic information
  • Displaying PPPoE client session information
  • PPPoE client configuration example
    • Network requirements
    • Configuring the PPPoE client
    • Verifying the configuration
• Managing services
  • Overview
    • FTP service
    • Telnet service
    • SSH service
    • SFTP service
    • HTTP service
    • HTTPS service
  • Configuring service management
• Using diagnostic tools
  • Ping
  • Trace route
  • Ping operation
    • IPv4 ping operation
    • IPv6 ping operation
  • Trace route operation
• Configuring NAT
  • Overview
    • NAT control
    • NAT implementation
      • Basic NAT
      • NAPT
      • Easy IP
      • Internal server
      • DNS mapping
    • Low-priority address pool
  • Configuration guidelines
  • Recommended configuration procedure
    • Configuring address translation
      • Dynamic NAT
      • Static NAT
    • Configuring an internal server
  • Creating an address pool
  • Configuring dynamic NAT
  • Creating a static address mapping
  • Enabling static NAT on an interface
  • Configuring an internal server
    • Configuring basic internal server settings
    • Configuring advanced internal server settings
  • Configuring a DNS mapping
  • NAT configuration examples
    • Address translation configuration example
      • Network requirements
      • Configuring the AC
    • Internal server configuration example
      • Network requirements
      • Configuring the internal server
• Configuring ALG
  • ALG process
  • Configuration procedure
  • ALG configuration examples
    • FTP ALG configuration example
      • Network requirements
      • Configuration procedure
    • SIP ALG configuration example
      • Network requirements
      • Configuration procedure
    • NBT ALG configuration example
      • Network requirements
      • Configuration procedure
• Configuring WAN interfaces
  • Overview
  • Configuring a WAN interface
  • Displaying the general information and statistics of an interface
• Configuring APs
  • AC-AP tunnel
  • Auto AP
  • AP group
    • Overview
    • Client access control
  • Configuring an AP
    • Creating an AP
    • Setting AP parameters
    • Configuring advanced settings
  • Configuring auto AP
    • Enabling auto AP
    • Configuring auto-AP authentication
      • Configuring auto-AP authentication
      • Enabling unauthenticated auto APs to pass authentication and provide WLAN services
      • Displaying auto AP status
    • Converting auto APs to configured APs
      • Renaming an AP
      • Converting an auto AP to a configured AP
      • Enabling converting auto APs to configured APs
  • Configuring an AP group
    • Creating an AP group
    • Configuring IP address match criteria for an AP group
      • Configuration guidelines
      • Configuration procedure
    • Adding an AP to an AP group
    • Configuring an AP group
      • Configuring basic settings
      • Configuring advanced settings
      • Configuring a venue
  • Configuring AP-based client access control
    • Configuring a user profile
  • AP configuration examples
    • Auto AP configuration example
      • Network requirement
      • Configuring the AC
      • Verifying the configuration
    • Auto-AP authentication configuration example
      • Network requirements
      • Configuring the AC
      • Verifying the configuration
• Configuring access services
  • Access service overview
    • Terminology
    • Client access
      • Scanning
      • Authentication
      • Association
    • WLAN data security
    • Client access authentication
  • Configuring access service
    • Recommended configuration procedure
    • Creating a WLAN service
    • Configuring clear-type wireless service
      • Configuring basic settings for a clear-type wireless service
      • Configuring advanced settings for the clear-type wireless service
      • Configuring security settings for a clear-type wireless service
    • Configuring crypto-type wireless service
      • Configuring basic settings for a crypto-type wireless service
      • Configuring advanced settings for a crypto-type wireless service
      • Configuring management frame protection for a crypto-type wireless service
      • Configuring security settings for a crypto-type wireless service
    • Security parameter dependencies
    • Configuring an authentication mode
      • Configuration guidelines
      • Networking mode
      • Configuration prerequisites
      • Configuring an authentication mode
    • Configuring source IP address verification
      • Configuring source IP address verification
    • Enabling a wireless service
    • Binding an AP radio to a wireless service
      • Binding an AP radio to a wireless service
      • Binding an AP radio to a VLAN
      • Binding a service template to a VLAN pool
    • Enabling a radio
    • Displaying detailed information about a wireless service
      • Displaying detailed information about a clear-type wireless service
      • Displaying detailed information about a crypto-type wireless service
  • Configuring policy-based forwarding
    • Creating a forwarding policy
    • Applying a forwarding policy to an access service
    • Applying a forwarding policy to a user profile
  • Wireless service configuration example
    • Network requirements
    • Configuration guidelines
    • Configuring the AC
    • Verifying the configuration
  • WPA-PSK authentication configuration example
    • Network requirements
    • Configuring the AC
    • Configuring the client
    • Verifying the configuration
  • Local MAC authentication configuration example
    • Network requirements
    • Configuring the AC
    • Configuring the client
    • Verifying the configuration
  • Remote MAC authentication configuration example
    • Network requirements
    • Configuring the AC
    • Configuring the RADIUS server (IMC v3)
    • Configuring the RADIUS server (IMC v5)
    • Verifying the configuration
  • Remote 802.1X authentication configuration example
    • Network requirements
    • Configuring the AC
    • Configuring the RADIUS server (IMC v3)
    • Configuring the RADIUS server (IMC v5)
    • Configuring the wireless client
    • Verifying the configuration
  • Dynamic WEP encryption-802.1X authentication configuration example
    • Network requirements
    • Configuration procedure
    • Configuring the wireless client
    • Verifying the configuration
  • Backup client authentication configuration example
    • Network requirements
    • Adding commands to the configuration file of the AP
    • Configuring the AC
  • Local client authentication configuration example
    • Network requirements
    • Adding commands to the configuration file of the AP
    • Configuring the AC
  • Policy-based forwarding configuration example
    • Network requirements
    • Adding commands to the configuration file of the AP
    • Configuring the authentication server
    • Configuring the AC
    • Verifying the configuration
• Configuring mesh services
  • Mesh overview
    • Basic concepts in WLAN mesh
    • Advantages of WLAN mesh
    • Deployment scenarios
      • Normal fit MP scenario
      • One fit MP with two radios, each on a different mesh
      • One fit MP with two radios on the same mesh
      • Subway WLAN mesh deployment
    • WLAN mesh security
    • Mobile link switch protocol
      • MLSP advantages
      • MLSP operation
      • Formation of dormant links
      • Selection of active link
    • Mesh network topologies
      • Point to point connection
      • Point to multi-point connection
      • Self topology detection and bridging connection
  • Configuring mesh service
    • Configuring mesh service
      • Creating a mesh service
      • Configuring a mesh service
      • Binding an AP radio to a mesh service
      • Enabling a mesh service
      • Displaying detailed information about a mesh service
    • Configuring a mesh policy
      • Creating a mesh policy
      • Configuring a mesh policy
      • Binding an AP radio to a mesh policy
      • Displaying detailed information about a mesh policy
    • Mesh global setup
      • Mesh basic setup
      • Enabling mesh portal service
    • Configuring a working channel
      • Manual
      • Auto
    • Enabling radio
    • Configuring a peer MAC address
    • Configuring mesh DFS
      • Displaying radio information
      • Displaying channel switch information
    • Displaying the mesh link status
      • Mesh link monitoring
      • Mesh link test
  • WLAN mesh configuration example
    • Network requirements
    • Configuring the AC
    • Verifying the configuration
    • Subway WLAN mesh configuration example
      • Network requirements
      • Configuring the AC
    • Mesh point-to-multipoint configuration example
      • Network requirements
      • Configuration guidelines
      • Configuring mesh point-to-multipoint
  • Mesh DFS configuration example
    • Network requirements
    • Configuration guidelines
    • Configuration procedure
    • Verifying the configuration
• Configuring an IACTP tunnel and WLAN roaming
  • IACTP tunnel
  • WLAN roaming overview
  • Configuring an IACTP tunnel
  • Adding a member to the IACTP tunnel
  • Configuring WLAN roaming
    • Configuring WLAN roaming
    • Displaying client information
  • WLAN roaming configuration examples
    • Intra-AC roaming configuration example
      • Network requirements
      • Configuration guidelines
      • Configuring the AC
      • Verifying the configuration
    • Inter-AC roaming configuration example
      • Network requirements
      • Configuration guidelines
      • Configuring AC 1 and AC 2
      • Verifying the configuration
• Configuring WLAN RRM
  • Radio overview
  • WLAN RRM overview
    • Dynamic frequency selection
    • Transmit power control
  • Spectrum analysis
  • Configuring radios
    • Configuring radio parameters
    • Enabling a radio
    • Locking the channel
    • Locking the power
  • Configuring data transmit rates
    • Configuring 802.11a/802.11b/802.11g rates
    • Configuring 802.11n MCS
      • Introduction to MCS
      • Configuring 802.11n rates
    • Configuring 802.11ac NSS
      • Introduction to NSS
      • Configuring 802.11ac rates
  • Configuring channel scanning
  • Configuring calibration
    • Executing channel persistence
      • Configuration guidelines
      • Configuration procedure
    • Configuring power persistence
      • Configuration guidelines
      • Configuration procedure
    • Setting parameters
    • Configuring a radio group
    • Calibration operations
      • Displaying channel status
      • Displaying neighbor information
      • Displaying history information
  • Selecting an antenna
  • Configuring spectrum analysis
    • Configuring the operating mode for an AP
    • Configuring spectrum analysis
      • Enabling spectrum analysis
      • Configuring event-driven RRM
      • Enabling SNMP traps
    • Enabling spectrum analysis on a radio
    • Displaying interference device state
    • Displaying channel quality information
  • Manual channel adjustment configuration example
    • Network requirements
    • Configuration guidelines
    • Configuration procedure
    • Verifying the configuration
  • Automatic power adjustment configuration example
    • Network requirements
    • Configuration procedure
    • Verifying the configuration
  • Radio group configuration example
    • Network requirements
    • Configuration procedure
    • Verifying the configuration
  • Spectrum analysis configuration example
    • Network requirements
    • Configuration procedure
    • Verifying the configuration
• Configuring 802.1X
  • Overview
    • 802.1X architecture
    • Access control methods
    • 802.1X timers
  • Configuration prerequisites
  • Configuration procedure
  • Configuring 802.1X globally
  • Configuring 802.1X on a port
    • Configuring an 802.1X guest VLAN
      • Configuration guidelines
      • Configuration prerequisites
    • Configuring an Auth-Fail VLAN
      • Configuration guidelines
      • Configuration prerequisites
• Configuring portal authentication
  • Overview
  • Configuration prerequisites
  • Configuration procedure
  • Configuring the portal service
  • Configuring advanced parameters for portal authentication
  • Configuring a portal-free rule
  • Customizing authentication pages
    • File name rules
    • Page request rules
    • Post request attribute rules
    • Page file compression and saving rules
    • File size and content rules
    • Logging off a user who closes the logon success or online page
    • Redirecting authenticated users to a specific webpage
  • Portal authentication configuration example
    • Network requirements
    • Configuration prerequisites
    • Configuring the AC
    • Verifying the configuration
• Configuring AAA
  • Overview
  • Configuration prerequisites
  • Configuration procedure
  • Configuring an ISP domain
  • Configuring authentication methods for the ISP domain
  • Configuring authorization methods for the ISP domain
  • Configuring accounting methods for the ISP domain
  • AAA configuration example
    • Network requirements
    • Configuration procedure
      • Verifying the configuration
• Configuring RADIUS
  • Configuration guidelines
  • Configuring a RADIUS scheme
  • RADIUS configuration example
    • Network requirements
    • Configure the RADIUS server
    • Configuring the AC
    • Verifying the configuration
• Configuring the local EAP service
  • Configuration procedure
  • Local EAP service configuration example
    • Network requirements
    • Configuration guidelines
    • Configuration procedure
    • Verifying the configuration
• Configuring users
  • Overview
    • Local user
    • User group
    • Guest
    • User profile
  • Configuring a local user
  • Configuring a user group
  • Configuring a guest
    • Configuring a guest by a management level administrator
    • Configuring a guest by a guest administrator
  • Configuring a user profile
    • Configuration guidelines
    • Configuration procedure
• Managing certificates
  • Overview
  • Configuration guidelines
  • Configuration procedures
    • Configuration procedure for manual request
    • Configuration procedure for automatic request
  • Creating a PKI entity
  • Creating a PKI domain
  • Generating an RSA key pair
  • Destroying the RSA key pair
  • Retrieving and displaying a certificate
  • Requesting a local certificate
  • Retrieving and displaying a CRL
  • Certificate management configuration example
    • Network requirements
    • Configuring the CA server
    • Configuring the AC
    • Verifying the configuration
• Configuring WLAN security
  • WLAN security overview
    • Terminology
      • Detecting rogue devices
      • Taking countermeasures against rogue device attacks
    • WIDS attack detection
      • Flood attack detection
      • Spoofing attack detection
      • Weak IV detection
    • Blacklist and whitelist
  • Configuring rogue device detection
    • Recommended configuration procedure
    • Configuring AP operating mode
    • Configuring detection rules
    • Configuring detection rule lists
    • Enabling countermeasures and configuring aging time for detected rogue devices
    • Displaying monitor record
    • Displaying history record
  • Configuring WIDS
    • Configuring WIDS
    • Displaying history record
    • Displaying statistics information
  • Configuring the blacklist and whitelist functions
    • Configuring dynamic blacklist
    • Configuring static blacklist
    • Configuring whitelist
  • Rogue detection configuration example
    • Network requirements
    • Configuration guidelines
    • Configuration procedure
• Configuring authorized IP
• Configuring user isolation
  • User isolation overview
    • Before user isolation is enabled
    • After user isolation is enabled
  • Configuring user isolation
    • Configuring user isolation
    • Displaying user isolation information
  • User isolation configuration example
    • Network requirements
    • Configuration procedure
• Configuring session management
  • Displaying session table information
• Configuring ACL and QoS
  • ACL overview
  • QoS overview
    • Traditional packet forwarding services
    • New requirements from new applications
  • Configuration guidelines
  • Configuring an ACL
    • Recommended ACL configuration procedures
      • Recommended IPv4 basic ACL configuration procedure
      • Recommended IPv4 advanced ACL configuration procedure
      • Recommended Ethernet frame header ACL configuration procedure
      • Recommended WLAN-AP ACL configuration procedure
      • Recommended IPv6 basic ACL configuration procedure
      • Recommended IPv6 advanced ACL configuration procedure
    • Adding a time range
    • Adding an ACL
    • Configuring a rule for an IPv4 basic ACL
    • Configuring a rule for an IPv4 advanced ACL
    • Configuring a rule for an Ethernet frame header ACL
    • Configuring a rule for a WLAN-AP ACL
    • Adding an IPv6 ACL
    • Configuring a rule for an IPv6 basic ACL
    • Configuring a rule for an IPv6 advanced ACL
  • Configuring rate limit
  • Configuring the priority trust mode of a port
    • Priority mapping overview
    • Configuring priority mapping
      • Configuring the trust mode
      • Configuring the port priority
  • Configuring a QoS policy
    • Class
    • Traffic behavior
    • Policy
    • QoS policy configuration procedure
    • Adding a class
    • Configuring traffic classification rules
    • Adding a traffic behavior
    • Configuring actions for a traffic behavior
    • Adding a policy
    • Configuring classifier-behavior associations for the policy
    • Applying a policy to a port
    • Applying a QoS policy to a WLAN service
  • ACL and QoS configuration example
    • Network requirements
    • Configuration procedure
    • Verifying the configuration
• Configuring wireless QoS
  • Overview
    • Terminology
      • WMM
      • EDCA
      • AC
      • CAC
      • U-APSD
      • SVP
    • WMM protocol overview
      • EDCA parameters
      • CAC admission policies
      • U-APSD power-save mechanism
      • SVP service
      • ACK policy
  • Enabling wireless QoS
  • Setting the SVP service
  • Setting CAC admission policy
  • Setting radio EDCA parameters for APs
  • Setting EDCA parameters for wireless clients
    • Configuration restrictions and guidelines
    • Configuration procedure
  • Displaying radio statistics
  • Displaying client statistics
  • Setting rate limiting
    • Setting wireless service-based client rate limiting
    • Setting radio-based client rate limiting
  • Configuring the bandwidth guarantee function
    • Setting the reference radio bandwidth
    • Setting guaranteed bandwidth percents
    • Enabling bandwidth guaranteeing
    • Displaying guaranteed bandwidth settings
  • CAC service configuration example
    • Network requirements
    • Configuring the wireless service
    • Configuring CAC
    • Verifying the configuration
  • Wireless service-based static rate limiting configuration example
    • Network requirements
    • Configuring the wireless service
    • Configuring static rate limiting
    • Verifying the configuration
  • Wireless service-based dynamic rate limiting configuration example
    • Network requirements
    • Configuring the wireless service
    • Configuring dynamic rate limiting
    • Verifying the configuration
  • Bandwidth guarantee configuration example
    • Network requirements
    • Configuring the wireless services
    • Configuring bandwidth guaranteeing
    • Verifying the configuration
• Configuring advanced settings
  • Advanced settings overview
    • Country/Region code
    • 1+1 AC backup
      • Dual-link backup
      • 1+1 fast backup
    • 1+N AC backup
    • Client information backup
    • Continuous transmitting mode
    • Channel busy test
    • WLAN load balancing
      • Requirement of WLAN load-balancing implementation
      • Load-balancing modes
      • Load-balancing methods
    • Configuring the AC to accept APs with a different software version
    • Upgrading APs
    • Switching to fat AP
    • Wireless location
      • Architecture of the wireless location system
      • Wireless location method
      • Wireless locating process
      • Wireless location protocols
      • Wireless location rate limiting
      • CUPID location
    • Wireless sniffer
    • AP provision
    • Band navigation
    • BAS AC
      • Overview
      • MAC-BAC operating mechanism
    • VLAN pool
    • Multicast optimization
    • Guest access tunnel
    • Bonjour gateway
      • Benefits
      • Working mechanism
    • Hotspot 2.0
  • Configuring WLAN advanced settings
    • Setting a country/region code
    • Configuring 1+1 AC backup
      • Configuring an AP connection priority
      • Configuring 1+1 AC backup
      • Configuring 1+1 fast backup
      • Displaying status information for 1+1 fast backup
    • Configuring 1+N AC backup
      • Configuring an AP connection priority
      • Configuring 1+N AC backup
    • Configuring client information backup
    • Configuring continuous transmitting mode
    • Configuring a channel busy test
    • Configuring load balancing
      • Configuration prerequisites
      • Recommended configuration procedure
      • Configuring a load balancing mode
      • Configuring group-based load balancing
      • Configuring parameters that affect load balancing
    • Configuring AP
      • Upgrading AP version
      • Configuring the AC to accept APs with a different software version
      • Switching to fat AP
    • Configuring wireless location
    • Configuring wireless sniffer
      • Configuring radio-based wireless sniffer
      • Configuring client-based wireless sniffer
    • Configuring AP provision
      • Configuring global provision information
      • Configuring non provision APs
      • Configuring provision Aps
    • Configuring band navigation
      • Configuration prerequisites
      • Configuring band navigation
    • Configuring a BAS AC
    • Configuring a VLAN pool
      • Creating a VLAN pool
      • Binding a VLAN pool to a specific wireless service
      • Displaying VLAN pool information
    • Configuring multicast optimization
      • Enabling multicast optimization
      • Displaying multicast optimization information
    • Configuring a guest access tunnel
      • Configuration restrictions and guidelines
      • Configuring the edge AC
      • Configuring the aggregation AC
      • Viewing guest access tunnels
    • Configuring Bonjour gateway
      • Enabling Bonjour gateway
      • Configuring a Bonjour policy
      • Applying a Bonjour policy
      • Viewing information about Bonjour services discovered by the AC
    • Configuring a Hotspot2.0 policy
      • Creating a Hotspot2.0 policy
      • Configuring automatic network discovery
      • Disabling the DGAF function
      • Configuring network management parameters
      • Binding a Hotspot2.0 policy to a wireless service
  • Advanced settings configuration examples
    • 1+1 fast backup configuration example
      • Network requirements
      • Configuration guidelines
      • Configuring AC 1
      • Configuring AC 2
      • Verifying the configuration
    • 1+N backup configuration example
      • Network requirements
      • Configuring AC 1
      • Configuring AC 2
      • Verifying the configuration
    • Client information backup configuration example
      • Network requirements
      • Configuration procedure
      • Verifying the configuration
    • AP-based session-mode load balancing configuration example
      • Network requirements
      • Configuration guidelines
      • Configuration procedure
      • Verifying the configuration
    • AP-based traffic-mode load balancing configuration example
      • Network requirements
      • Configuration guidelines
      • Configuration procedure
      • Verifying the configuration
    • Group-based session-mode load balancing configuration example
      • Network requirements
      • Configuration procedure
      • Verifying the configuration
    • Group-based traffic-mode load balancing configuration example
      • Network requirements
      • Configuration procedure
      • Verifying the configuration
    • AP version upgrade configuration example
      • Network requirements
      • Configuration procedures
      • Verifying the configuration
    • Wireless location configuration example
      • Network requirements
      • Configuration guidelines
      • Configuring the AE
      • Configuring AP 1
      • Enabling 802.11n
      • Enabling wireless location
      • Verifying the configuration
    • Wireless sniffer configuration example
      • Network requirements
      • Configuring Capture_AP
      • Configuring and enabling wireless sniffer
      • Verifying the configuration
    • AP provision configuration example
      • Network requirements
      • Configuring AC 1
      • Configuring AC 2
      • Verifying the configuration
    • Band navigation configuration example
      • Network requirements
      • Configuring the AC
      • Verifying the configuration
    • BAS AC configuration example
      • Network requirements
      • Configuring BAS AC 1
      • Configuring BAS AC 2
    • VLAN pool configuration example
      • Network requirements
      • Configuring the AC
      • Verifying the configuration
    • Multicast optimization configuration example
      • Network requirements
      • Configuring the AC
      • Verifying the configuration
    • Guest access tunnel configuration example
      • Network requirements
      • Configuring AC 1
      • Configuring AC 2
      • Verifying the configuration
    • Bonjour gateway configuration example
      • Network requirements
      • Configuration procedures
      • Verifying the configuration
• Configuring stateful failover
  • Overview
    • Introduction to stateful failover
    • Stateful failover states
  • Configuration guidelines
  • Configuring stateful failover
  • Stateful failover configuration example
    • Network requirements
    • Configuring AC 1
    • Configuring AC 2
• Configuring IKE
  • Overview
    • IKE security mechanism
      • Data authentication
      • DH
      • PFS
    • IKE operation
    • Functions of IKE in IPsec
    • Relationship between IKE and IPsec
    • Protocols and standards
  • Configuration prerequisites
  • Recommended configuration procedure
  • Configuring global IKE parameters
  • Configuring an IKE proposal
  • Configuring IKE DPD
  • Configuring an IKE peer
  • Viewing IKE SAs
  • IKE configuration example
    • Network requirements
    • Configuring AC 1
    • Configuring AC 2
    • Verifying the configuration
• Configuring IPsec
  • Overview
    • Basic concepts
      • Security protocols
      • Security association
      • Encapsulation modes
      • Authentication algorithms and encryption algorithms
      • IPsec SA setup modes
      • IPsec tunnel
    • IPsec RRI
    • IPsec stateful failover
    • Protocols and standards
  • Configuration guidelines
  • Configuration considerations
  • Recommended configuration procedure
    • Configuring ACLs
      • Use of the Permit/Deny Actions in ACLs
      • Mirror image ACLs
      • Protection modes
    • Configuring an IPsec proposal
      • Configuring an IPsec proposal in suite mode
      • Configuring an IPsec proposal in custom mode
    • Configuring an IPsec policy template
    • Configuring an IPsec policy
    • Applying an IPsec policy group
    • Viewing IPsec SAs
    • Viewing packet statistics
  • IPsec configuration example
    • Network requirements
    • Configuring AC 1
    • Configuring Device B
    • Verifying the configuration
• SSL VPN overview
  • How SSL VPN operates
  • Advantages of SSL VPN
    • Support for various application protocols
    • Simple deployment
    • Support for multiple authentication methods
    • Granular access control of network resources
• Configuring SSL VPN gateway
  • Recommended configuration procedure
  • Viewing user information
    • Viewing online user information and logging out an online user
    • Logging out a user
    • Viewing history user information
  • Adding a local user manually
  • Importing local users in bulk
  • Configuring a user group
  • Customizing SSL VPN webpages
    • Configuring the text information
    • Configuring the login page logo
    • Configuring the service page logo
    • Configuring the service page background
  • Using a customized webpage file
  • Configuring Web proxy server resources
  • Configuring TCP application resources
    • Configuring a remote access service resource
    • Configuring a desktop sharing service resource
    • Configuring an email service resource
    • Configuring a Notes service resource
    • Configuring a common TCP service resource
  • Configuring IP network resources
    • Recommended configuration procedure
    • Configuring global parameters
    • Configuring host resources
    • Configuring a user-IP binding
    • Configuring a predefined domain name
  • Configuring a resource group
  • Performing basic configurations for the SSL VPN domain
    • Configuring the domain policy
    • Configuring the caching policy
    • Configuring a bulletin
  • Configuring authentication policies
    • Configuring local authentication
    • Configuring RADIUS authentication
    • Configuring LDAP authentication
    • Configuring AD authentication
    • Configuring combined authentication
  • Configuring a security policy
  • Configuring the SSL VPN service
• Configuring user access to SSL VPN
  • Logging in to the SSL VPN service interface
  • Accessing SSL VPN resources
  • Getting help information
  • Changing the login password
• SSL VPN configuration example
  • Network requirements
  • Configuration prerequisites
  • Configuring the SSL VPN service
  • Configuring SSL VPN resources
  • Configuring SSL VPN users
  • Configuring an SSL VPN domain
  • Verifying the configuration
• Index