Configuring a Management VLAN on an AP

Context

In practice, the PVID of an AP wired interface is usually set to the management VLAN ID. For details, see VLAN Deployment Suggestions. When management packets from the AP or data packets forwarded in tunnel mode reach the access device through the CAPWAP tunnel, the access device tags the packets with the PVID.

If the PVID of the access device has been used for other purposes (for example, as the default VLAN ID of wired users), the PVID cannot be configured as the management VLAN ID on the access device interface. In this case, configure CAPWAP packets sent from an AP wired interface to carry the management VLAN tag. The AP then adds the management VLAN ID to the CAPWAP packets sent to the AC. You only need to configure the access device to allow the packets carrying the management VLAN ID to pass.

Procedure

Run system-view
The system view is displayed.
Run wlan
The WLAN view is displayed.
Run ap-system-profile name profile-name
An AP system profile is created, and the AP system profile view is displayed.

By default, the system provides the AP system profile default.
Run management-vlan vlan-id
CAPWAP packets sent from the AP wired interface are configured to carry a management VLAN tag.

By default, CAPWAP packets sent from an AP's wired interface do not carry a management VLAN tag.

On a Mesh network, ensure that CAPWAP packets sent from all APs carry the same management VLAN. Otherwise, MPs cannot go online.

The configuration takes effect only after the AP is restarted.
Run quit
Return to the WLAN view.
Bind an AP system profile to an AP group or AP.
- Binding an AP system profile to an AP group.
  1. Run the ap-group name group-name command to enter the AP group view.
  2. Run the ap-system-profile profile-name command to bind the AP system profile to the AP group.
    
    By default, the AP system profile default is bound to an AP group.
- Binding an AP system profile to an AP.
  1. Run the ap-id ap-id, ap-mac ap-mac, or ap-name ap-name command to enter the AP view.
  2. Run the ap-system-profile profile-name command to bind the AP system profile to the AP.
    
    By default, no AP system profile is bound to an AP.