Ruijie RG-WLAN Series User manual

RG-WLAN Series Access Point
RGOS Configuration Guide, Release 11.1(5)B8

·
Copyright Statement
Ruijie Networks© 2016
Ruijie Networks reserves all copyrights of this document. Any reproduction, excerption, backup, modification,
transmission, translation or commercial use of this document or any portion of this document, in any form or by any means,
without the prior written consent of Ruijie Networks is prohibited.
, , , , ,
, , , ,
, , are registered trademarks of Ruijie Networks.
Counterfeit is strictly prohibited.
Exemption Statement
This document is provided “as is”. The contents of this document are subject to change without any notice. Please obtain
the latest information through the Ruijie Networks website. Ruijie Networks endeavors to ensure content accuracy and will
not shoulder any responsibility for losses and damages caused due to content omissions, inaccuracies or errors.

·
Preface
Thank you for using our products. This manual matches the RGOS Release 11.1(5)B8.
Audience
This manual is intended for:
Network engineers
Technical support and servicing engineers
Network administrators
Obtaining Technical Assistance
Ruijie Networks website: http://www.ruijienetworks.com/
Ruijie service portal: http://case.ruijienetworks.com
Related Documents
Documents
Description
Command Reference
Describes the related configuration commands, including command modes,
parameter descriptions, usage guides, and related examples.
Hardware Installation and Reference
Guide
Describes the functional and physical features and provides the device
installation steps, hardware troubleshooting, module technical specifications,
and specifications and usage guidelines for cables and connectors.
Conventions
This manual uses the following conventions:
Convention
Description
boldface font
Commands, command options, and keywords are in boldface.
italic font
Arguments for which you supply values are in italics.
[ ]
Elements in square brackets are optional.
{ x | y | z }
Alternative keywords are grouped in braces and separated by vertical bars.
[ x | y | z ]
Optional alternative keywords are grouped in brackets and separated by
vertical bars.

·
Symbols
Means reader take note. Notes contain helpful suggestions or references.
Means reader be careful. In this situation, you might do something that could result in equipment damage or loss of
data.

RG-WLAN Series Access Point
RGOS Configuration Guide,
Release 11.1(5)B8
WLAN Basic Configuration
1. Configuring AP Management
2. Configuring STA Management
3. Configuring Ethernet Management
4. Configuring Data Plane
5. Configuring WLAN Log

Configuration Guide Configuring AP Management
1 Configuring AP Management
1.1 Overview
N/A
1.2 Application
N/A
1.3 Features
Basic Concepts
AP
AP is an access point used by wireless terminals to access a wired network. It is equivalent to a bridge for communication
between wireless terminals and a wired network.
1.4 Configuration
Configuration
Description and Command
Configuring the Fit or Fat AP
Mode
(Optional) The AP mode can be switched between the fit AP mode and the fat AP mode
according to requirements.
switch2fat
Switches the mode of a specified AP to the fat AP mode in
AC configuration mode on the AC device.
ap-mode
Configures the fit or fat AP mode in global configuration
mode on the AP device.
1.4.1 Configuring the Fit or Fat AP Mode
Configuration Effect
On the AC device, run the switch2fat command in AC configuration mode to switch the mode of an online AP to the fat
AP mode.
On the AC device, run the ap-mode command in global configuration mode to switch between the fit AP mode and the
fat AP mode.

Configuration Guide Configuring AP Management
Notes
N/A
Configuration Steps

On the AP device, run the ap-mode command in global configuration mode to switch between the fit AP mode and the
fat AP mode.
Command
ap-mode { fit | fat [ dhcp ] }
Parameter
Description
fit: indicates that the AP mode is switched to the fit AP mode.
fat: indicates that the AP mode is switched to the fat AP mode.
dhcp: If the ap-mode fat command contains this parameter, the AP obtains the IP address through DHCP
by default after the AP mode is switched to the fat AP mode; otherwise, the AP uses the static IP address by
default after the AP mode is switched to the fat AP mode.
Defaults
None
Command
Mode
AP global configuration mode
Usage Guide
After the AP mode is switched between the fit and fat AP modes, the AP must be restarted to ensure the
configuration consistency.
For WALL-APs supplied by Ruijie Networks, when the fat AP mode is used, the default IP address of
the rear wired network interface (connected to the PoE switching device) is
192.168.110.1/255.255.255.0, and the default IP address of the front wired network interface (Ethernet
interface) is 192.168.111.1/255.255.255.0.
If ap-mode fat dhcp is configured, when the AP mode is switched to the fat AP mode, the IP address
is obtained through DHCP by default. After the AP is restarted, if related configuration is not available,
the IP address is still obtained through DHCP by default. In addition, the following two issues should
also be noted:
1. If ap-mode fat dhcp is configured for the WALL-AP, only the IP address of the rear wired network
interface is obtained through DHCP, and the front wired network interface uses the static IP address by
default. 2. In fat AP mode, the ap-mode fat dhcp and ap-mode fat commands cannot be mutually
switched, and must be switched to the fit AP mode first.
Verification
On the AP, run the show ap-mode command to check the current mode of the AP.
Configuration Example
Switching the mode of the AP to the fit AP mode on the AP
Configuration
Enter the global configuration mode.

Configuration Guide Configuring AP Management
Steps
Run the ap-mode command.
AP
Ruijie(config)#ap-mode fit
Verification
On the AP, run the show ap-mode command to check the current mode of the AP.
AP
Ruijie#show ap-mode
current mode: fit
Common Errors
None
1.5 Monitoring
Displaying
Description
Command
Displays the fit or fat mode of the AP
show ap-mode

Configuration Guide Configuring STA Management
2 Configuring STA Management
2.1 Overview
STA Management (STAMG) implements station (STA) management, including STA access control management and STA
event notification. Event notification is mainly used to serve other function modules. Applications of the STAMG functions are
as follows:
The dynamic blacklist is used on a security-sensitive network to prevent user attacks.
The STA limit is used when the number of STAs exceeds the AP capacity.
Load balancing is used when STAs need to be evenly distributed to multiple APs.
Association control is used in the E-bag scenario.
Protocols and Standards
N/A
2.2 Applications
N/A
2.3 Features
Overview
Feature
Description
Association Control
Associates secondary STAs with APs in the same control zone if the primary STA is associated with
these APs.
2.3.1 Association Control
Association control is a method for controlling association behaviors of wireless STAs. STAs are divided into two groups. In
each group, only one STA is defined as the primary STA, and the other STAs are defined as secondary STAs. The
secondary STAs must follow the association behaviors of the primary STA. That is, the primary and secondary STAs must be
associated with the same wireless network. In this way, association behaviors of wireless STAs can be properly controlled.
Working Principle
The coverage area of a wireless network is divided into several association control zones. One or several APs are deployed
in each zone, and wireless terminals are divided into groups. The control zones that can be associated with the terminals are
strictly controlled. For example, a school has many classrooms, and a wireless AP is deployed in each classroom. Radio

Configuration Guide Configuring STA Management
signals travel in the space.When E-bags are used in two adjacent classrooms at the same time, the ideal condition is that all
the teacher and student terminals are associated with the AP of their own classrooms so that the two classrooms will not
interfere with each other. In this case, a classroom must be defined as an association control zone and all the teacher and
student terminals in a classroom must be associated with the AP of the classroom.
Association control aims to prevent terminals from associating with a wireless network at random when multiple wireless
networks are available for selection. The following are prerequisites for network configurations:
Based on the pre-configured association control zones and package information, the AC pushes the information about
primary STAs in all packages to all APs in the association control zones and generates a whitelist of primary STAs on
these APs.
The information about primary STAs in all packages is available in the AP whitelist. Therefore, before the association
control function is enabled, the primary STA must associate itself with the corresponding SSID in the specified control
zone. After that, the AC pushes all corresponding secondary STAs to all APs in the association control zone and
generates a whitelist according to the configuration of the primary STA package to allow the secondary STAs to
associate themselves with the control zone.
When the primary STA is de-associated from the control zone, all the secondary STAs will also be de-associated and
deleted from the AP whitelist.
The above process can be summarized as follows: The secondary STAs must follow the primary STA to associate
themselves with an AP in the same control zone, with which the primary STA is associated. Only the APs of this control
zone have a whitelist of the corresponding secondary STAs. This ensures that STAs are not randomly associated with
APs.
2.4 Configuration
Configuration
Description and Command
Configuring Association
Control
(Mandatory) It is used to enable the association control function.
package
Configures a package.
primary-sta
Configures the primary STA in the
package.
secondary-sta
Configures the secondary STA in the
package.
control-zone
Configures an association control zone.
ap
Configures the AP information.
assoc-control
Enables association control.
2.4.1 Configuring Association Control
Configuration Effect
Secondary STAs must be associated with APs in the same group as the primary STA when being associated.

Configuration Guide Configuring STA Management
Notes
When a package is deleted, all its related configurations are deleted as well. If some STAs in this package are currently
associated, all these STAs will be deassociated.
A package can only be configured with one primary STA. If the information about the primary STA in the package is
configured for multiple times, the latest configuration prevails.
When a primary STA is deleted from a package, the primary STA and all secondary STAs in this package may be
deassociated.
When a secondary STA is deleted from a package, this secondary STA may be deassociated.
The association control zone name cannot be duplicated; otherwise, an error will be prompted. In addition, if an
association control zone is deleted, all configurations related to this zone will be deleted. Consequently, STAs in the
package associated with this control zone may be deassociated.
When the AP information in an association control zone is deleted, STAs in the package associated with this AP be
deassociated.
Configuration Steps
Configuring a Package
(Mandatory) The configuration is performed on a fat AP.
The primary and secondary STA information can be configured only after a package is configured.
Command
package pkg-name
Parameter
Description
pkg-name: Indicates the name of a package. The package name is a string of 1 to 32 characters.
Defaults
No package is configured by default.
Command
Mode
Global configuration mode
Usage Guide
N/A
Configuring the Primary and Secondary STAs in a Package
(Mandatory) The configuration is performed on a fat AP.
Run the primary-sta command to configure the primary STA. Only one primary STA can be configured. The secondary
STAs will be associated with APs in the same group as the primary STA.
Run the secondary-sta command to configure a secondary STA. After the secondary STA is configured, the secondary
STA will be associated with an AP in the same group as the primary STA.
Command
primary-sta mac-address
Parameter
Description
mac-address: Indicates the MAC address of the STA.
Defaults
No primary STA is configured by default.
Command
Package configuration mode

Configuration Guide Configuring STA Management
Mode
Usage Guide
N/A
Command
secondary-sta mac-address
Parameter
Description
mac-address: indicates the MAC address of the STA.
Defaults
No secondary STA is configured by default.
Command
Mode
Package configuration mode
Usage Guide
-
Configuring an Association Control Zone
(Mandatory) The configuration is performed on a fat AP.
Configure an association control zone.
APs can be added to an association control zone only after this association control zone is configured.
Command
control-zone czone-name
Parameter
Description
czone-name: Indicates the name of an association control zone. The name is a string of 1 to 64 characters.
Defaults
No association control zone is configured by default.
Command
Mode
Global configuration mode
Usage Guide
N/A
Adding an AP to an Association Control Zone
(Mandatory) The configuration is performed on a fat AP.
Add an AP to an association control zone.
Association control can be performed on only APs that are added to the association control zone.
Command
ap WORD
Parameter
Description
WORD: Indicates the name of an AP. The name is a string of 1 to 64 characters.
Defaults
No AP is added to an association control zone by default.
Command
Mode
Association control zone configuration mode
Usage Guide
N/A
Enabling the Association Control Function
(Mandatory) The configuration is performed on a fat AP.The assoc-control command must be used to enable the
association control function.

Configuration Guide Configuring STA Management
Enable the association control function.
Command
assoc-control
Parameter
Description
N/A
Defaults
The association control function is disabled by default.
Command
Mode
Global configuration mode
Usage Guide
N/A
Verification
Verify that secondary STAs can be associated with APs in the same group as the primary STA.
Configuration Example
Configuring the E-bag in Fat AP Structure
Scenario
Figure 2-1
Configuration
Steps
Configure packages and related primary STAs and secondary STAs.
Configure association control zones and related APs.
Enable the association control function.
AP1
AP1#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
AP1(config)# packageCart 1
AP1(config-package)#primary-sta 00d0.f800.0001
AP1(config-package)#secondary-sta 00d0.f800.0002
AP1(config-package)#secondary-sta 00d0.f800.0003
AP1(config-package)# exit
AP1(config)# control-zone Classroom 1
AP1(config-czone)# apAP1

Configuration Guide Configuring STA Management
AP1(config-czone)# exit
AP1(config)#assoc-control
AP3
AP3#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
AP3 (config)# package Cart 1
AP3(config-package)#primary-sta 00d0.f800.0001
AP3(config-package)#secondary-sta 00d0.f800.0002
AP3(config-package)#secondary-sta 00d0.f800.0003
AP3(config-package)# exit
AP3(config)# control-zone Classroom 2
AP3(config-czone)# apAP3
AP3(config-czone)# exit
AP3(config)#assoc-control
Verification
Display the association control running state.
Display the package configuration.
Display the association control zone configurations.
AP1
AP1#show assoc-control
Association control is enabled.
AP1# show package
total package num : 1
========= Cart 1 =========
primary STA : 00d0.f800.0001
secondary STA num : 2
00d0.f800.0002
00d0.f800.0003
AP1# show control-zone
control zone num : 1
control-zoneAP
------------- ------------------------
Classroom 1 AP1 00d0.f800.889e
AP3
AP3#show assoc-control

Configuration Guide Configuring STA Management
Association control is enabled.
AP3# show package
========= Cart 1 =========
primary STA : 00d0.f800.0001
secondary STA num : 2
00d0.f800.0002
00d0.f800.0003
AP3# show assoc-control
control zone num : 1
control-zoneAP
------------- ------------------------
Classroom 1 AP3 00d0.f800.889f
Common Errors
N/A
2.5 Monitoring
Displaying
Description
Command
Displays the status of the association control function.
show assoc-control
Displays the association control zone configuration.
show control-zone [ summary | czone-name ]
Displays the package configuration.
show package [ pkt-name ]

Configuration Guide Configuring Ethernet Management
3 Configuring Ethernet Management
3.1 Overview
Ethernet Management (ETH-MNG) is an AP wired parameter management service used to configure wired parameters of
APs.
The LAN port bandwidth restriction function, as a fundamental service of ETH-MNG, is used to configure the maximum
bandwidth of various LAN ports of APs, so as to avoid the slow Internet access of wireless users in a scenario where wireless
and wired users coexist and wired users occupy a substantial bandwidth.
3.1.1.1 Protocols and Standards
N/A
3.2 Applications
N/A
3.3 Features
3.3.1.1 Basic Concepts
N/A
3.3.1.2 Overview
Feature
Description
Maximum LAN Port Bandwidth
Configure the maximum bandwidth of various LAN ports of APs so as to avoid the slow
Internet access of wireless users in a scenario where wireless and wired users coexist and
wired users occupy a substantial bandwidth.

Configuration Guide Configuring Ethernet Management
3.3.2 LAN port Bandwidth Restriction
3.3.2.1 Working Principle
The LAN port bandwidth restriction function is used to configure the maximum bandwidth of various LAN ports of APs so as
to avoid the slow Internet access of wireless users caused in a scenario where wireless and wired users coexist and wired
users occupy a substantial bandwidth.
3.4 Configuration
Configuration
Description and Command
Configuring the Maximum
Bandwidth of LAN ports
(Optional) It is used to configure the maximum bandwidth of LAN ports of APs.
wired-rate value
Configures the maximum bandwidth (in
Mbps) of various LAN ports of the AP.
3.4.1 LAN port Bandwidth Restriction
3.4.1.1 Networking Requirements
Configure the maximum bandwidth of various LAN ports.
3.4.1.2 Notes
The wired-rate value command is supported only on AP120-W and AP130-W.
Model
Maximum Speed
AP120-W
100Mbps
AP130-W
100Mbps
3.4.1.3 Configuration Steps
Configuring the LAN Port Bandwidth Restriction Function
The configuration is optional.
Perform this configuration on a fat AP.

Configuration Guide Configuring Ethernet Management
Run the wired-rate command to configure the maximum bandwidth of various LAN ports.
Command
wired-rate value
Parameter Description
N/A
Defaults
By default, the maximum bandwidths of various LAN ports are not limited.
Command Mode
Interface configuration mode
Usage Guide
N/A
3.4.1.4 Verification
Run the show running-config command to display the configuration about the bandwidth restriction of various LAN
ports.
3.4.1.5 Configuration Example
N/A
3.5 Monitoring
N/A

Configuration Guide Configuring Data Plan
4 Configuring Data Plan
4.1 Overview
The data plane provides broadcast forwarding control functions, including broadcast forwarding weight control and broadcast
wireless forwarding control.
Broadcast forwarding weight control means restricting the weights of packet types for broadcast forwarding, so as to prevent
STAs from being influenced when a certain type of packets occupy all resources.
Broadcast wireless forwarding control means forwarding only necessary packets to the wireless network, so as to prevent
some useless broadcast packets from occupying substantial radio frequency (RF) resources.
Broadcast forwarding weight control is applicable to all packets to be flooded.
Broadcast wireless forwarding control is applicable to all packets to be sent to the radio interface.
Protocols and Standards
N/A
4.2 Applications
N/A
4.3 Features
4.3.1 Basic Concepts
Broadcast Forwarding Weight Control
A network switching device may need to flood broadcast packets, multicast packets, and some unicast packets. A weight can
be set for each type of packets to prevent a certain type of broadcast packets from exhausting all broadcast forwarding
capabilities, thereby improving STAs' network experience.
Broadcast Wireless Forwarding Control
The broadcast wireless forwarding control function is used to forward only necessary broadcast packets to the wireless
network, so as to prevent certain broadcast packets from occupying substantial air interface resources and improve the
network rates of STAs.

Configuration Guide Configuring Data Plan
4.3.2 Overview
Feature
Description
Broadcast Forwarding
Weight Control
Restricts the weights of packet types for broadcast forwarding, so as to protect RF resources from
being occupied by a certain type of packets and thereby guarantee normal forwarding of other
packets.
Broadcast Wireless
Forwarding Control
Controls whether to forward broadcast packets to the wireless network, so as to prevent useless
broadcast packets from occupying substantial RF resources.
4.3.3 Broadcast Forwarding Weight Control
Broadcast forwarding weight control is used to restrict a certain type of packets, so that the ratio of this type of packets is no
greater than the specified weight during broadcast forwarding.
4.3.3.1 Working Principle
The broadcast forwarding weight control function classifies packets at first into unicast packets, multicast packets, broadcast
packets, unknown multicast packets, and unknown unicast packets.
Classify packets. Packets may be roughly classified into the following types: unicast packets, multicast packets,
broadcast packets, unknown multicast packets, and unknown unicast packets.
Allocate a token bucket to each type of packets, and record the number of packets permitted to pass at this moment.
According to the configured broadcast forwarding weights, calculate the number of packets permitted to pass within
each interval, and adjust the sizes of the token buckets accordingly.
When a packet arrives, determine the type of the packet and check whether there is any token in the token bucket
corresponding to the packet type. If the token bucket contains a token, the packet is permitted to pass; otherwise, the
packet is discarded.
4.3.4 Broadcast Wireless Forwarding Control
The broadcast wireless forwarding control function is used to forward only partial packets that affect STAs to the wireless
network, so as to prevent useless broadcast packets from occupying substantial air interface resources.
4.3.4.1 Working Principle
Wireless networks differ from wired networks in performance. In a wireless network, air interface resources are shared by
STAs and APs which often becomes a bottleneck for STAs. Meanwhile, they are seized for a long time because broadcast
packets are sent at low rates.
In practice, some broadcast packets are useless for STAs. Forwarding these packets to the wireless network will result in
fewer air interface resources and worse user experience.
One solution is to classify broadcast packets for forwarding control. Only the packets of specified types are forwarded to the
wireless network.