Configuring the Hotspot Service

Context

The hotspot service provides WLAN coverage for STAs after they succeed in Portal authentication. For details on how to configure Portal authentication, choose Configuration Guide > User Access and Authentication Configuration > NAC Configuration > Configuring an Access Profile > Configuring a Portal Access Profile (for an External Portal Server-HTTP/HTTPS Protocol) and Configuration Guide > User Access and Authentication Configuration > NAC Configuration > Configuring an Authentication Profile in the S2720, S5700, and S6700 V200R019C10 Product Documentation.

This document provides only basic wireless coverage service configurations. For more information, see WLAN Service Configuration Guide.

Perform the following operations on the AC to configure an AP to go online.

Procedure

Run system-view
The system view is displayed.
Run vlan batch vlan-id
A VLAN is created.
Run wlan
The WLAN view is displayed.
Run security-profile name profile-name
A security profile is created and the security profile view is displayed.

By default, security profiles default, default-wds and default-mesh are available in the system.
Run security open
The security policy is set to open system authentication.

By default, the security policy is open system.

The security policy must be set to open system authentication for Portal authentication.
Run quit
Return to the WLAN view.
Run ssid-profile name profile-name
An SSID profile is created and the SSID profile view is displayed.

By default, the system provides the SSID profile default.
Run ssid ssid
An SSID name is configured.

By default, the SSID HUAWEI-WLAN is configured in an SSID profile.
Run quit
Return to the WLAN view.
Run vap-profile name profile-name
The VAP profile view is displayed.
Run security-profile profile-name
The security profile is bound to the VAP profile.

By default, the security profile default is bound to a VAP profile.
Run forward-mode { direct-forward | tunnel | softgre profile-name }
The data forwarding mode is configured in the VAP profile.

By default, the forwarding mode is direct-forward in the VAP profile.
Run service-vlan { vlan-id vlan-id | vlan-pool pool-name }
A service VLAN is configured for a VAP.

By default, VLAN 1 is the service VLAN of a VAP.
Run ssid-profile profile-name
The SSID profile is bound to the VAP profile.

By default, the SSID profile default is bound to a VAP profile.
Run quit
Return to the WLAN view.
Run ap-group name group-name
An AP group is created, and the AP group view is displayed.
Run vap-profile profile-name wlan wlan-id radio { radio-id | all } [ service-vlan { vlan-id vlan-id | vlan-pool pool-name } ]
The VAP profile is bound to radios.

By default, no VAP profile is bound to a radio.

Verifying the Configuration

Run the display vap { all | ssid ssid } or display vap { ap-group ap-group-name | { ap-name ap-name | ap-id ap-id } [ radio radio-id ] } [ ssid ssid ] command to check service VAP information.
Run the display vap-profile { all | name profile-name } command to check configuration and reference information about a VAP profile.
Run the display references vap-profile name profile-name command to check reference information about the VAP profile.
Run the display security-profile { all | name profile-name } command to check configuration and reference information about the security profile.
Run the display references security-profile name profile-name command to check reference information about the security profile.
Run the display ssid-profile { all | name profile-name } command to check configuration and reference information about the SSID profile.
Run the display references ssid-profile name profile-name command to check reference information about the SSID profile.