Licensing Requirements and Limitations for Free Mobility
Involved Network Elements
To use the free mobility function, a controller is required. Both Agile Controller-Campus and iMaster NCE-Campus can be used as the controller for implementation of the free mobility function. For details about the version mapping, see "Required Software Versions" in "Documentation Guide" in the appropriate product documentation of the corresponding device model.
To use the free mobility function in a VPN, connect the switches running V200R008C00 and later versions to the Agile Controller-Campus running the V100R002, V100R003 version.
When a Huawei switch functions as a DHCP server and assigns IP addresses to terminals based on the static MAC-IP bindings delivered by the Agile Controller-Campus, the switch must run V200R009C00 or a later version, and the Agile Controller-Campus must run V100R002, V100R003.
Licensing Requirements
Free mobility is a basic feature of the switch and is not under license control.
Feature Support in V200R019C10
Only the following models support free mobility:
S5720-HI, S5730-HI, S5731-H, S5731-S, S5731S-S, S5731S-H, S5732-H, S6720-HI, S6730-H, S6730S-H, S6730-S, and S6730S-S
Feature Limitations
In V200R011C10 and later versions, free mobility supports direct forwarding of wireless traffic. However, free mobility does not take effect in the following scenarios:
- The AC is connected in bypass mode.
- Users who are in the same VLAN and connect to the same AP access each other.
Before configuring free mobility on the switch, configure one or more combinations of 802.1X authentication, MAC address authentication, or Portal authentication in NAC unified mode. For details, see "NAC Configuration (Unified Mode)" in the Configuration Guide - User Access and Authentication of the corresponding product version.
When the controller delivers a UCL group name that is not supported by the switch, for example, this group name contains Chinese characters or special characters, the switch cannot parse the group name. A UCL group name that can be supported by the switch must be consistent with the value of group-name in the ucl-group group-index [ name group-name ] command, cannot be -, --, a, an, or any, and cannot contain any of the following characters: / \ : * ? " < > | @ ' %. Therefore, when configuring a UCL group name on the controller, do not use Chinese characters or special characters.
If the switch has been associated with an Agile Controller-Campus and has free mobility configured, perform the following steps to delete historical data and reconfigure the core switch.
- Run the undo group-policy controller command in the system view to disable free mobility and disconnect the switch from the Agile Controller-Campus.
- Run the undo acl all command to delete the access control policy.
- Run the undo ucl-group ip all command to delete IP addresses bound to security groups.
- Run the undo ucl-group all command to delete security groups.
- Return to the user view and run the save command. The system automatically deletes the configured version number.