The temporary-management enable command configures a VAP as the offline management VAP or antenna alignment VAP.
The undo temporary-management enable command restores a VAP to the default setting.
By default, a VAP is a service VAP.
Usage Scenario
After the offline management VAP function is enabled using the undo temporary-management disable command in the AP system profile view, an AP automatically generates a management VAP when it becomes faulty. The default SSID and password of the management VAP are hw_manage_xxxx and hw_manage respectively. xxxx indicates the last 4 digits of the AP's MAC address. The maintenance personnel can associate the maintenance device to the default VAP and log in to the AP using Telnet to troubleshoot the fault. However, using the default management VAP brings security risks. Any wireless user may use the default SSID and password to log in to the offline AP and perform unauthorized operations.
After the antenna alignment VAP function is enabled using the undo temporary-management disable command in the AP system profile view, an AP automatically generates an antenna alignment VAP when it works properly. The default SSID and password of the management VAP are hw_manage_xxxx and hw_manage respectively. xxxx indicates the last 4 digits of the AP's MAC address. Using the default antenna alignment VAP also brings security risks.
To improve security of the offline management VAP and antenna alignment VAP, bind a security profile of a high security level to a VAP profile, set new SSIDs and passwords, configure the VAPs generated by the VAP profile as the offline management VAP and antenna alignment VAP, and bind the VAP profile to an AP group or AP to replace the default offline management VAP and antenna alignment VAP.
Follow-up Procedure
Run the undo temporary-management disable command to enable the offline management VAP and antenna alignment VAP functions in the AP system profile view to make the offline management VAP and antenna alignment VAP in the VAP profile take effect.
Precautions
If the VAPs are configured as the offline management VAP and antenna alignment VAP in a VAP profile, the security profile referenced by the VAP profile supports only the WEP or WPA/WPA2 PSK security policy.
If the VAPs are configured as the offline management VAP and antenna alignment VAP in a VAP profile, VAPs generated by the VAP profile cannot be used as service VAPs for service transmission.
The offline management VAP and antenna alignment VAP cannot be modified. To modify the VAPs, delete them first, and then modify the VAP attributes in the VAP profile view.
The offline management VAP function does not take effect on 4.9 GHz radios.
The offline management VAP function and service holding upon CAPWAP link disconnection are mutually exclusive. When the two functions are configured at the same time, service holding upon CAPWAP link disconnection cannot take effect.
In offline management VAP scenarios, STA address learning does not take effect.