Enabling the SVF Function on the Parent

Context

The SVF function is disabled on the parent by default and needs to be enabled using a command. Before enabling the SVF function, you need to perform the following configuration:

Establish a CAPWAP link between the parent and ASs.
- Configure a management VLAN on the parent for Layer 2 communication with ASs.
- Configure a DHCP address pool on the parent to allocate IP addresses to ASs.
- Configure a CAPWAP source interface.
Ensure that requirements for enabling the SVF function have been met.

Procedure

Run system-view
The system view is displayed.
(Optional) Run as-mode disable
Change the device working mode to the parent mode.

If the S5732-H24UM2CC, S5732-H48UM2CC, S6730-S, S6730S-S, S6720-SI, S6720S-SI, S6720-EI, and S6720S-EI function as the parent, change the working mode of the switch to the parent mode first. By default, a switch works in AS mode. The configured working mode takes effect after the switch restarts.
Run vlan batch vlan-id
The management VLAN is created for the SVF system and cannot be VLAN 1 or VLAN 4093.
Configure a DHCP address pool.
1. Run dhcp enable
  DHCP is enabled on the parent.
2. Run interface vlanif vlan-id
  A VLANIF interface is created and the VLANIF interface view is displayed.
  
  vlan-id must be consistent with that management VLAN.
3. Run ip address ip-address { mask | mask-length }
  An IP address is configured for the VLANIF interface.
  
  This address is also used as the source address for setting up a CAPWAP link.
4. Run dhcp select interface
  The DHCP server function is configured to assign IP addresses from the interface address pool to clients.
  
  The DHCP server function enables an AS to obtain an IP address from the parent.
5. (Optional) Run dhcp server option 43 ip-address ip-address
  The parent is configured to send its IP address in the Option 43 field to an AS.
  
  The parent can send its IP address in the Option 43 field to an AS. The IP address must be the same as that configured in step c.
  
  If the Option 43 field is not configured, an AS obtains the IP address of the parent in broadcast mode. If the Option 43 field is configured, an AS sets up a CAPWAP link with only a specified IP address, and does not obtain the IP address of the parent in broadcast mode. To improve service reliability, you are advised to configure the parent to send its IP address in the Option 43 field to an AS.
6. Run quit
  Exit from the VLANIF interface view.
Run capwap source interface vlanif vlan-id
The source interface on which the parent sets up a CAPWAP link with an AS is configured.

vlan-id must be consistent with that management VLAN.

You are not advised to configure other services except the preceding configurations in the management VLAN and corresponding VLANIF interface of the SVF system. Otherwise, ASs or APs cannot go online normally.

If the SVF function is enabled, only one source interface can be configured.

Check whether requirements for enabling the SVF function on the parent are met.

Requirements	Criteria	Commands to Be Executed If Requirements Are Not Met
The NAC configuration mode is unified mode.	By default, the NAC configuration mode is unified mode. When enabling the SVF function, ensure that the current and next startup NAC configuration modes are the unified mode. You can run the display authentication mode command to check the current and next startup NAC configuration modes. If the two modes are the unified mode, this step is not required. If the modes are not the unified mode, change them to the unified mode. After changing the NAC configuration mode, save the configuration and then restart the device to make the configuration take effect.	authentication unified-mode
The STP working mode is STP or RSTP mode.	By default, the STP working mode is MSTP mode. When enabling the SVF function, ensure that the STP working mode is STP or RSTP mode. You can run the display stp command to check the current STP working mode. If the mode is STP or RSTP mode, ignore this step. If the mode is not STP or RSTP mode, set the STP working mode to STP or RSTP mode.	stp mode { rstp \| stp }
The STP/RSTP port path cost is calculated using IEEE 802.1t (dot1t) standard.	The default STP/RSTP port path cost algorithm is restored. By default, IEEE 802.1t (dot1t) standard is used to calculate the STP/RSTP port path cost. When enabling the SVF function, ensure that the default STP/RSTP port path cost algorithm is used. You can run the display stp command to check the current STP/RSTP port path cost algorithm. If the algorithm is not the default value, restore the default STP/RSTP port path cost algorithm.	undo stp pathcost-standard
The device role on a transparent transmission network is customer. This requirement must be met only when the modular switches as the parent.	The default device role on a transparent transmission network is restored. By default, a device is a customer on a transparent transmission network. When enabling the SVF function, ensure that the default device role on a transparent transmission network is used. You can run the display bpdu-tunnel global config command to check the current device role. If the default device role is used, ignore this step. If the default device role is not used, restore the default device role.	undo bpdu-tunnel stp bridge role provider
No MSTP process is configured.	You can run the display current-configuration command to check whether the MSTP process configuration exists. If so, perform this step to delete the configuration. If not, ignore this step.	undo stp process process-id
Remote authorization is not configured.	By default, remote authorization is not configured. When enabling the SVF function, ensure that remote authorization is not configured. You can run the display current-configuration command to check whether remote authorization is configured. If remote authorization is not configured, ignore this step. If remote authorization is configured, disable remote authorization.	Run the aaa command to enter the AAA view. Run the service-scheme service-scheme-name command to enter the service scheme view. Run the undo remote-authorize command to disable remote authorization.

Run uni-mng
The SVF function is enabled and the uni-mng view is displayed.

By default, SVF is disabled.
(Optional) Run topology explore [ interval interval ]
The interval for collecting SVF network topology information is set.

By default, the interval for collecting SVF network topology information is 10 minutes. If interval interval is not specified, SVF network topology collection is triggered immediately.

You can adjust the interval for collecting SVF network topology information based on SVF network stability. When the network topology is stable, you can increase the interval or disable periodic topology information collection. When the network topology is unstable, you can shorten the interval.