Licensing Requirements and Limitations for WLAN

Involved Network Elements

APs mentioned in this document are Huawei AP products. You are advised to use Huawei APs to connect to the AC.
You can run the display ap-type all command to check the default AP types supported by the device.
When central APs and RUs are used, ensure that their versions are the same. For example, if the central AP version is V200R007C10, the RU version must be V200R007C10.

**Table 1** Mapping between switch versions and AP versions
Product Software Version	AP Software Version
V200R019C10	V200R019C10 V200R019C00 V200R010C00 V200R009C00 V200R008C10 V200R008C00 V200R007C20 V200R007C10 V200R006C20 V200R006C10
V200R019C00	V200R019C00 V200R010C00 V200R009C00 V200R008C10 V200R008C00 V200R007C20 V200R007C10 V200R006C20 V200R006C10
V200R013C00	V200R010C00 V200R009C00 V200R008C10 V200R008C00 V200R007C20 V200R007C10 V200R006C20 V200R006C10
V200R012C00	V200R009C00 V200R008C10 V200R008C00 V200R007C20 V200R007C10 V200R006C20 V200R006C10
V200R011C10	V200R008C10 V200R008C00 V200R007C20 V200R007C10 V200R006C20 V200R006C10
V200R011C00	V200R007C20 V200R007C10 V200R006C20 V200R006C10
V200R010C00	V200R007C10 V200R006C20 V200R006C10
V200R009C00	V200R006C20 V200R006C10
V200R008C00	V200R005C30 V200R005C20 V200R005C10
V200R007	V200R005C20 V200R005C10
V200R006	V200R005C00

Licensing Requirements

When the device is used as a WLAN AC, the number of online APs supported by the device is controlled by licenses. The device supports a maximum of 16 online APs. To increase the number of online APs supported by the device, apply for and purchase a license from the agent.

AP resource license-1AP for WLAN access controller
AP resource license-16AP for WLAN access controller
AP resource license-32AP for WLAN access controller
AP resource license-64AP for WLAN access controller
AP resource license-128AP for WLAN access controller
AP resource license-512AP for WLAN access controller

For details about how to apply for a license, see Obtaining Licenses in the S1720, S5700, and S6700 Series Switches License Usage Guide.

Feature Support in V200R019C10

This feature is supported only by the following models: S5720-HI, S5730-HI, S5731-H, S5731S-H, S5732-H, S6720-HI, S6730S-H, and S6730-H.

Feature Limitations

Packets transmitted on a WLAN include management packets and service data packets.

It is recommended that you use different VLANs for the management VLAN and service VLAN.
You are not advised to use VLAN 1 as the management VLAN or service VLAN.
In tunnel forwarding mode, management VLAN and service VLAN must be different.

In actual WLAN networking, management VLANs and service VLANs must be properly planned. The following example assumes that an AP connects to an AC through a Layer 2 network.

In direct forwarding mode, ensure that the AP can exchange management VLAN packets with the AC and exchange service VLAN packets with upstream devices.
In tunnel forwarding mode, ensure that the AP can exchange management VLAN packets with the AC and the AC can exchange service VLAN packets with upstream devices.

Networking restrictions

In tunnel forwarding mode, the AC and AP do not support IP packet fragmentation.
In the AC + AP networking, to prevent loops, port flapping, or AP disconnection, do not use Smart Link, equal-cost routing, or port protection services.
The AC cannot manage APs through VPNs.
APs cannot connect to physical Layer 3 interfaces or subinterfaces on the AC.
In versions earlier than V200R013C00, the AC can manage APs and STAs only through IPv4. In V200R013C00 or later, the AC can manage APs through IPv4 and manage STAs through IPv4 or IPv6.
VXLAN is supported from V200R011C10. The VXLAN service cannot be configured on the CAPWAP source interface specified for the AC. Otherwise, the AC cannot manage APs, and APs fail to go online.
In V200R013C00, assume that two VAP profiles are configured for an AP connected to the S5720-HI, S5730-HI, and S6720-HI, the forwarding mode in one VAP profile is tunnel forwarding, and the forwarding mode in the other VAP profile is direct forwarding. When two users access the network using the two profiles, the user who accesses the network using the VAP profile configured with direct forwarding mode will receive both directly forwarded and tunnelled multicast traffic. You are not advised to configure two VAP profiles in tunnel forwarding and direct forwarding modes on the same AP.
If VAPs in direct and tunnel forwarding modes are both configured on an AP, and the AC serves and has authentication configured, services of IPv6 STAs are unavailable.

The AC and AP exchange CAPWAP packets to communicate with each other. To prevent CAPWAP packet attacks from affecting normal device communication, you can configure local attack defense on devices. To configure local attack defense, specify a trusted AP source address in an ACL rule and then configure a whitelist in the attack defense policy or configure user-defined flows to limit the rate of specified CAPWAP packets. For details, see Local Attack Defense Configuration.

In wireless city scenarios, it is recommended that the STA aging time be reduced. The recommended value is 1 minute.

The Unscheduled Automatic Power Save Delivery (U-APSD) function is not available for the AirEngine 8760-X1-PRO, AirEngine 8760R-X1, AirEngine 8760R-X1E, AirEngine 6760-X1, AirEngine 6760-X1E, AirEngine 6760R-51, AirEngine 6760R-51E, AirEngine 5760-51, AirEngine 5760-22W, and AirEngine 5760-22WD.