Configuring Service Holding upon CAPWAP Link Disconnection

Context

To mitigate impact of link disconnections on users in direct forwarding mode and improve service reliability, you can configure the function of service holding upon CAPWAP link disconnection. To allow new users to access APs after CAPWAP link disconnection, you can configure the function of user access upon CAPWAP link disconnection. After the disconnected CAPWAP link is restored, the AP forces all the STAs that went online during CAPWAP link disconnection to go offline. The AP then reassociates with these STAs and reports STA information through logs. For Portal or MAC address authentication STAs, after the broken CAPWAP link is restored, the AP forces all these STAs to go offline and reports STA information through logs.

Service holding upon CAPWAP link disconnection is only applicable to the direct forwarding mode.
User access upon CAPWAP link disconnection can be configured only when direct forwarding is used and open system, Portal, MAC address, WEP, or WPA/WPA2-PSK authentication is used.
WDS networks do not support service holding and user access upon CAPWAP link disconnection.
The offline management VAP function and service holding upon CAPWAP link disconnection are mutually exclusive. When the two functions are configured at the same time, service holding upon CAPWAP link disconnection cannot take effect.
When rogue device containment and service holding upon CAPWAP link disconnection are both configured, service holding upon CAPWAP link disconnection does not take effect.

Procedure

Run system-view
The system view is displayed.
Run wlan
The WLAN view is displayed.
Run ap-system-profile name profile-name
An AP system profile is created, and the AP system profile view is displayed.

By default, the system provides the AP system profile default.
Run keep-service enable
Service holding upon CAPWAP link disconnection is enabled. After that, the AP can still provide data services when the CAPWAP link is disconnected.

By default, all services on the AP are interrupted after the CAPWAP link between the AP and AC is disconnected.
Run keep-service enable allow new-access [ no-auth ]
User access upon CAPWAP link disconnection is enabled. After that, the AP can still allow new users to access when the CAPWAP link is disconnected.

By default, the APs in fault state are disabled from allowing access of new STAs.
Run quit
Return to the WLAN view.
Bind an AP system profile to an AP group or AP.
- Binding an AP system profile to an AP group.
  1. Run the ap-group name group-name command to enter the AP group view.
  2. Run the ap-system-profile profile-name command to bind the AP system profile to the AP group.
    
    By default, the AP system profile default is bound to an AP group.
- Binding an AP system profile to an AP.
  1. Run the ap-id ap-id, ap-mac ap-mac, or ap-name ap-name command to enter the AP view.
  2. Run the ap-system-profile profile-name command to bind the AP system profile to the AP.
    
    By default, no AP system profile is bound to an AP.