Hotspot 2.0 commands -- 3gpp-info

Use 3gpp-info to configure 3GPP information.

Use undo 3gpp-info to remove 3GPP information.

Syntax

3gpp-info country-code mobile-country-code network-code mobile-network-code

undo 3gpp-info country-code mobile-country-code network-code mobile-network-code

Default

No 3GPP information is configured.

Views

Hotspot 2.0 policy view

Predefined user roles

network-admin

mdc-admin

Parameters

mobile-country-code: Specifies a mobile country code (MCC). An MCC is a three-digit numeric code that uniquely identifies the country to which clients belong.

mobile-network-cod: Specifies a mobile network code (MNC). A mobile network code is a two-digit or three-digit numeric code that uniquely identifies the mobile network to which clients belong.

Usage guidelines

You can specify a maximum of 32 country code and mobile network code combinations in a Hotspot 2.0 policy.

One country code can be combined with multiple mobile network codes.

Examples

# Configure 3GPP information: set the country code to 460 and network code to 01.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] 3gpp-info country-code 460 network-code 01

Hotspot 2.0 commands -- authentication-type

Use authentication-type to specify a network authentication type.

Use undo authentication-type to delete a network authentication type.

Syntax

authentication-type { 0 [ redirect-url url ] | 1 | 2 redirect-url url | 3 }

undo authentication-type { 0 | 1 | 2 | 3 }

Default

No network authentication type is specified.

Views

Hotspot 2.0 policy view

Predefined user roles

network-admin

mdc-admin

Parameters

0: Specifies acceptance of terms and conditions.

1: Specifies on-line enrollment.

2: Specifies HTTP/HTTPS redirection.

3: Specifies DNS redirection.

redirect-url url: Specifies a redirected URL address.

Usage guidelines

You can specify a maximum of four network authentication types in a Hotspot 2.0 policy.

Examples

# Specify a network authentication type.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] authentication-type 1

Hotspot 2.0 commands -- comeback-delay

Use comeback-delay to set the comeback delay for clients to send GAS comeback requests.

Use undo comeback-delay to restore the default.

Syntax

comeback-delay value

undo comeback-delay

Default

The comeback delay is 1 TU.

Views

Hotspot 2.0 policy view

Predefined user roles

network-admin

mdc-admin

Parameters

value: Specifies the comeback delay in the range of 1 to 1024 TUs. One TU is equal to 1024 μs.

Usage guidelines

This command can prevent clients from sending too many GAS comeback requests.

Examples

# Set the comeback delay to 10 TUs.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] comeback-delay 10

Hotspot 2.0 commands -- dgaf enable

Use dgaf enable to enable Downstream Group-Addressed Forwarding (DGAF).

Use undo dgaf enable to disable DGAF.

Syntax

dgaf enable

undo dgaf enable

Default

DGAF is enabled.

Views

Hotspot 2.0 policy view

Predefined user roles

network-admin

mdc-admin

Usage guidelines

DGAF enables an AP to forward all downstream wireless broadcast ARP packets and wireless multicast packets. To prevent spoofing attacks by using downstream multicasts, you can disable DGAF for the AP.

Before disabling DGAF, make sure all service templates bound to the Hotspot 2.0 policy are disabled.

To avoid packet loss, enable proxy ARP and multicast optimization before disabling DGAF. For more information about proxy ARP, see Layer 3—IP Services Configuration Guide.

Examples

# Disable DGAF.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] undo dgaf enable

Hotspot 2.0 commands -- domain-name

Use domain-name to set a domain name.

Use undo domain-name to delete a domain name.

Syntax

domain-name domain-name

undo domain-name domain-name

Default

No domain name is set.

Views

Hotspot 2.0 policy view

Predefined user roles

network-admin

mdc-admin

Parameters

domain-name: Specifies a domain name, a case-sensitive string of 1 to 255 characters.

Usage guidelines

You can set a maximum of 32 domain names in one Hotspot 2.0 policy.

Examples

# Set the domain name to college in Hotspot 2.0 policy 1.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] domain-name college

Hotspot 2.0 commands -- gas-limit

Use gas-limit to set the maximum number of GAS initial requests that the AC can receive within the specified interval.

Use undo gas-limit to restore the default.

Syntax

gas-limit number number interval interval

undo gas-limit

Default

The number of GAS initial requests that the AC can receive is not limited.

Views

Hotspot 2.0 policy view

Predefined user roles

network-admin

mdc-admin

Parameters

number number: Specifies the maximum number of GAS initial requests that the AC can receive, in the range of 10 to 60.

interval interval: Specifies the interval at which the AC receive GAS initial requests, in the range of 10 to 60 seconds.

Usage guidelines

If the number of GAS initial requests received by the AC exceeds the limit, the exceeded frames will be discarded.

Examples

# Set the maximum number of GAS initial requests that the AC can receive within 15 seconds to 50.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] gas-limit number 50 interval 15

Hotspot 2.0 commands -- hessid

Use hessid to set a homogenous ESS identifier (HESSID).

Use undo hessid to restore the default.

Syntax

hessid hessid

undo hessid

Default

No HESSID is set.

Views

Hotspot 2.0 policy view

Predefined user roles

network-admin

mdc-admin

Parameters

hessid: Specifies an HESSID that uniquely identifies a homogeneous ESS, in the H-H-H format. The value cannot be all zeros.

Usage guidelines

Make sure all service templates bound to the Hotspot 2.0 policy are disabled before you set an HESSID.

Examples

# Set the HESSID to 0021-1bea-3660 in Hotspot 2.0 policy 1.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] hessid 0021-1bea-3660

Hotspot 2.0 commands -- hotspot-policy

Use hotspot-policy to bind a Hotspot 2.0 policy to a service template.

Use undo hotspot-policy to restore the default.

Syntax

hotspot-policy policy-number

undo hotspot-policy

Default

No Hotspot 2.0 policy is bound to a service template.

Views

Service template view

Predefined user roles

network-admin

mdc-admin

Parameters

policy-number: Specifies the number of a Hotspot 2.0 policy, in the range of 1 to 32.

Usage guidelines

When you bind a Hotspot 2.0 policy to a service template, follow these guidelines:

· Make sure the Hotspot 2.0 policy exists and the service template is disabled.

· Make sure the following settings are configured for the service template:

?span style='font:7.0pt "Times New Roman"'> 802.1X authentication and key management mode.

?span style='font:7.0pt "Times New Roman"'> RSN IE.

?span style='font:7.0pt "Times New Roman"'> AES-CCMP cipher suite.

Examples

# Bind Hotspot 2.0 policy 1 to service template 1.

<Sysname> system-view

[Sysname] wlan service-template 1

[Sysname-wlan-st-1] hotspot-policy 1

Hotspot 2.0 commands -- ip-protocol

Use ip-protocol to set the port status for an IP protocol.

Use undo ip-protocol to remove the configuration.

Syntax

ip-protocol { esp | icmp | tcp | udp } port-number port-number { closed | open | unknown }

undo ip-protocol { esp | icmp | tcp | udp } port-number port-number

Default

The port status is not set for an IP protocol.

Views

Hotspot 2.0 policy view

Predefined user roles

network-admin

mdc-admin

Parameters

esp: Specifies the ESP protocol.

icmp: Specifies the ICMP protocol.

tcp: Specifies the TCP protocol.

udp: Specifies the UDP protocol.

port-number: Specifies a port by its number.

Table 1 Port number and protocol type

Protocol type | Port number | Description
ICMP | 0 | ICMP, used for diagnostics
TCP | 20 | FTP
TCP | 22 | SSH
TCP | 80 | HTTP
TCP | 443 | Used by TLS VPNs
TCP | 1723 | Used by Point to Point Tunneling Protocol VPNs
TCP | 5060 | VoIP
UDP | 500 | Used by IKEv2 (IPSec VPN)
UDP | 5060 | VoIP
UDP | 4500 | May be used by IKEv2 (IPSec VPN)
ESP | 0 | ESP, used by IPSec VPNs

closed: Specifies the port status as closed.

open: Specifies the port status as open.

unknown: Specifies the port status as unknown.

Examples

# Set the port number to 20 and the port status to open for TCP.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] ip-protocol tcp port-number 20 open

Hotspot 2.0 commands -- ip-type

Use ip-type to configure IP address availability.

Use undo ip-type to restore the default.

Syntax

ip-type ipv4 ipv4-type ipv6 ipv6-type

undo ip-type

Default

The availability is 1 for IPv4 addresses and 2 for IPv6 addresses.

Views

Hotspot 2.0 policy view

Predefined user roles

network-admin

mdc-admin

Parameters

ipv4-type: Specifies the availability for an IPv4 address, in the range of 0 to 7.

Table 2 IPv4 address availability

Address value | Description
0 | Address type not available
1 | Public IPv4 address available
2 | Port-restricted IPv4 address available
3 | Single NATed private IPv4 address available
4 | Double NATed private IPv4 address available
5 | Port-restricted IPv4 address and single NATed IPv4 address available
6 | Port-restricted IPv4 address and double NATed IPv4 address available
7 | Availability of the address type is not known

ipv6-type: Specifies the availability for an IPv6 address, in the range of 0 to 2.

Table 3 IPv6 address availability

Address value | Description
0 | Address type not available
1 | Address type available
2 | Availability of the address type not known

Examples

# Set the availability to 2 for IPv4 addresses and 1 for IPv6 addresses.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] ip-type ipv4 2 ipv6 1

Hotspot 2.0 commands -- nai-realm

Use nai-realm to create a Network Access Identifier (NAI) realm and specify an authentication type for the NAI realm.

Use undo nai-realm to delete an NAI realm.

Syntax

nai-realm realm-name eap-method eap-method-id auth-method auth-method-id authentication authentication

undo nai-realm realm-name [ eap-method eap-method [ auth-method auth-method [ authentication authentication ] ] ]

Default

No NAI realm exists.

Views

Hotspot 2.0 policy view

Predefined user roles

network-admin

mdc-admin

Parameters

name: Specifies an NAI realm name, a case-sensitive string of 1 to 255 characters.

eap-method eap-method-id: Specifies an EAP authentication method by its ID.

Table 4 EAP authentication method

eap-method-id | Description
1 | EAP-Transport Layer Security (EAP-TLS)
2 | Lightweight Extensible Authentication Protocol (LEAP)
3 | EAP for GSM Subscriber Identity Module (EAP-SIM)
4 | EAP-Tunneled Transport Layer Security (EAP-TTLS)
5 | EAP-Authentication and Key Agreement(EAP-AKA)
6 | Protected EAP (PEAP)

auth-method auth-method-id: Specifies an authentication method by its ID.

authentication authentication: Specifies an authentication parameter by its ID.

Table 5 Authentication method and authentication parameter

auth-method-id | auth-method-type | authentication
2 | Non-EAP Inner Authentication Type | · 1—PAP. · 2—CHAP. · 3—MSCHAP. · 4—MSCHAPV2.
5 | Credential Type | · 1—SIM. · 2—USIM. · 3—NFC Secure Element. · 4—Hardware Token. · 5—Softoken. · 6—Certificate. · 7—username/password. · 8—none*.
6 | Tunneled EAP Method Credential Type | · 1—SIM. · 2—USIM. · 3—NFC Secure Element. · 4—Hardware Token. · 5—Softoken. · 6—Certificate. · 7—username/password. · 8—Reserved. · 9—Anonymous.

Usage guidelines

When you use the undo nai-realm command, follow these guidelines:

· The undo nai-realm realm-name command deletes all NAI realms that use the same name.

· The undo nai-realm realm-name eap-method eap-method-id command deletes all NAI realms that use the same name and EAP authentication method.

· The undo nai-realm realm-name eap-method eap-method-id auth-method auth-method-id command deletes all NAI realms that use the same name, EAP authentication method, and authentication method.

· The undo nai-realm realm-name eap-method eap-method-id auth-method auth-method-id authentication authentication command deletes all NAI realms that use the same name, EAP authentication method, authentication method, and authentication parameter.

You can configure a maximum of 32 NAI realm names in a Hotspot 2.0 policy.

Examples

# Specify the authentication type for NAI realm wifi in Hotspot 2.0 policy 1.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] nai-realm wifi eap-method 2 auth-method 5 authentication 1

Hotspot 2.0 commands -- network-type

Use network-type to set the access network type.

Use undo network-type to restore the default.

Syntax

network-type network-type [ access-internet ]

undo network-type

Default

The access network type is not set.

Views

Hotspot 2.0 policy view

Predefined user roles

network-admin

mdc-admin

Parameters

network-type: Specifies a network type in the range of 0 to 5, 14, and 15.

Table 6 Access network type

Value | Description
0 | Private network
1 | Private network with guest access
2 | Chargeable public network
3 | Free public network
4 | Personal device network
5 | Emergency services only network
14 | Test or experimental
15 | Wildcard

access-internet: Enables access to the Internet. If you do not specify this keyword, the Internet is not accessible.

Usage guidelines

Make sure all service templates bound to the Hotspot 2.0 policy are disabled before you set the access network type.

Examples

# Set the access network type to 1 and enable access to the Internet.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] network-type 1 access-internet

Hotspot 2.0 commands -- operator-name

Use operator-name to set service provider information.

Use undo operator-name to delete service provider information.

Syntax

operator-name operator-name lang-code lang-code

undo operator-name operator-name lang-code lang-code

Default

No service provider information is set.

Views

Hotspot 2.0 policy view

Predefined user roles

network-admin

mdc-admin

Parameters

operator-name: Specifies a service provider name, a case-sensitive string of 1 to 252 characters.

lang-code: Specifies a language code. The device supports both the ISO-639-1 and ISO-639-2 standards.

Usage guidelines

You can configure a maximum of 32 service provider and language code combinations in a Hotspot 2.0 policy.

Examples

# Set the language code to en for service provider cmcc.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] operator-name cmcc lang-code en

Hotspot 2.0 commands -- policy-name

Use policy-name to set a name for a Hotspot 2.0 policy.

Use undo policy-name to restore the default.

Syntax

policy-name name

undo policy-name

Default

A Hotspot 2.0 policy does not have a name.

Views

Hotspot 2.0 policy view

Predefined user roles

network-admin

mdc-admin

Parameters

name: Specifies a Hotspot 2.0 policy name, a case-insensitive string of 1 to 32 characters.

Examples

# Set the name of Hotspot 2.0 policy 1 to market.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] policy-name market

Hotspot 2.0 commands -- roam-oi

Use roam-oi to set an organization identifier (OI).

Use undo roam-oi to delete an OI.

Syntax

roam-oi oi [ in-beacon ]

undo roam-oi oi

Default

No OI is set.

Views

Hotspot 2.0 policy view

Predefined user roles

network-admin

mdc-admin

Parameters

oi: Specifies an OI that can uniquely identify a roaming consortium, a six-digit or ten-digit hexadecimal code.

in-beacon: Adds an OI to beacons. As a best practice, specify this keyword for clients to get OIs.

Usage guidelines

Make sure all service templates bound to the Hotspot 2.0 policy are disabled before you set an OI.

You can configure a maximum of 32 OIs in a Hotspot 2.0 policy, and can add a maximum of three OIs to beacons.

Examples

# Set the OI to 004096 and add the OI to beacons.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] roam-oi 004096 in-beacon

Hotspot 2.0 commands -- venue group

Use venue group to set venue group information for an AP.

Use undo venue group to restore the default.

Syntax

venue group venue-group-number type venue-type-number

undo venue group

Default

No venue group information is set for an AP.

Views

AP view

Predefined user roles

network-admin

mdc-admin

Parameters

venue-group-number: Specifies a venue group by its number, in the range of 1 to 11.

Table 7 Venue group number and description

Number | Description
1 | Assembly
2 | Business
3 | Educational
4 | Factory
5 | Institutional
6 | Mercantile
7 | Residential
8 | Storage
9 | Utility
10 | Vehicular
11 | Outdoor

venue-type-number: Specifies a venue type by its number. The value depends on the venue group number. For more information, see Table 8.

Table 8 Venue type number and description

Venue group number | Venue type number | Venue description
1 | 0 | Unspecified
1 | 1 | Arena
1 | 2 | Stadium
1 | 3 | Passenger Terminal
1 | 4 | Amphitheater
1 | 5 | Amusement Park
1 | 6 | Place of Worship
1 | 7 | Convention Center
1 | 8 | Library
1 | 9 | Museum
1 | 10 | Restaurant
1 | 11 | Theater
1 | 12 | Bar
1 | 13 | Coffee Shop
1 | 14 | Zoo or Aquarium
1 | 15 | Emergency Coordination Center
2 | 0 | Unspecified
2 | 1 | Doctor or Dentist office
2 | 2 | Bank
2 | 3 | Fire Station
2 | 4 | Police Station
2 | 6 | Post Office
2 | 7 | Professional Office
2 | 8 | Research and Development Facility
2 | 9 | Attorney Office
3 | 0 | Unspecified
3 | 1 | School Primary
3 | 2 | School Secondary
3 | 3 | University or College
4 | 0 | Unspecified
4 | 1 | Factory
5 | 0 | Unspecified
5 | 1 | Hospital
5 | 2 | Long-Term Care Facility
5 | 3 | Alcohol and Drug Rehabilitation Center
5 | 4 | Group Home
5 | 5 | Prison or Jail
6 | 0 | Unspecified
6 | 1 | Retail Store
6 | 2 | Grocery Market
6 | 3 | Automotive Service Station
6 | 4 | Shopping Mall
6 | 5 | Gas Station
7 | 0 | Unspecified
7 | 1 | Private Residence
7 | 2 | Hotel or Motel
7 | 3 | Dormitory
7 | 4 | Boarding House
8 | 0 | Unspecified
9 | 0 | Unspecified
10 | 0 | Unspecified
10 | 1 | Automobile or Truck
10 | 2 | Airplane
10 | 3 | Bus
10 | 4 | Ferry
10 | 5 | Ship or Boat
10 | 6 | Train
10 | 7 | Motor Bike
11 | 0 | Unspecified
11 | 1 | Muni-mesh Network
11 | 2 | City Park
11 | 3 | Rest Area
11 | 4 | Traffic Control
11 | 5 | Bus Stop
11 | 6 | Kiosk

Examples

# Specify venue group 1 and venue type 1 for AP ap3.

<Sysname> system-view

[Sysname] wlan ap ap3 model WA2610E-AGN

[Sysname-wlan-ap-ap3] venue group 1 type 1

Hotspot 2.0 commands -- venue name

Use venue name to set a venue name for an AP.

Use undo venue name to delete a venue name for an AP.

Syntax

venue name venue-name lang-code lang-code

undo venue name venue-name lang-code lang-code

Default

No venue name is set for an AP.

Views

AP view

Predefined user roles

network-admin

mdc-admin

Parameters

venue-name: Specifies a venue name, a case-sensitive string of 1 to 252 characters.

lang-code: Specifies the language code for a venue. The device supports both the ISO-639-1 and ISO-639-2 standards.

Usage guidelines

One venue can have multiple language codes.

You can configure a maximum of 32 venue name and language code combinations for an AP.

Examples

# Set the venue name to office and language codes to en for AP ap3.

<Sysname> system-view

[Sysname] wlan ap ap3 model WA2610E-AGN

[Sysname-wlan-ap-ap3] venue name office lang-code en

Hotspot 2.0 commands -- wan-metrics

Use wan-metrics to set WAN link status parameters.

Use undo wan-metrics to restore the default.

Syntax

wan-metrics { link-down | link-test | link-up } [ asymmetric downlink-speed downlink-speed uplink-speed uplink-speed | symmetric link-speed link-speed ]

undo wan-metrics

Default

No WAN link status parameters are set.

Views

Hotspot 2.0 policy view

Predefined user roles

network-admin

mdc-admin

Parameters

link-down: Sets the link status for the WAN to down.

link-test: Sets the link status for the WAN to testing.

link-up: Sets the link status for the WAN to up.

asymmetric: Specifies the asymmetric link.

downlink-speed downlink-speed: Specifies the downlink speed in the range of 1 to 4194304 Kbps.

uplink-speed uplink-speed: Specifies the uplink speed in the range of 1 to 4194304 Kbps.

symmetric: Specifies the symmetric link.

link-speed link-speed: Specifies the symmetric link speed in the range of 1 to 4194304 Kbps.

Examples

# Set the link status to up and the symmetric link rate to 67 Kbps for the WAN.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1] wan-metrics link-up symmetric link-speed 67

Hotspot 2.0 commands -- wlan hotspot-policy

Use wlan hotspot-policy to create a Hotspot 2.0 policy and enter its view, or enter the view of an existing Hotspot 2.0 policy.

Use undo wlan hotspot-policy to delete a Hotspot 2.0 policy.

Syntax

wlan hotspot-policy policy-number

undo wlan hotspot-policy policy-number

Default

No Hotspot 2.0 policies exist.

Views

System view

Predefined user roles

network-admin

mdc-admin

Parameters

policy-number: Specifies the number of a Hotspot 2.0 policy, in the range of 1 to 32.

Usage guidelines

You cannot delete a Hotspot 2.0 policy that has been bound to a service template.

Examples

# Create Hotspot 2.0 policy 1 and enter its view.

<Sysname> system-view

[Sysname] wlan hotspot-policy 1

[Sysname-wlan-hs-1]