wapi bk

Function

The wapi bk command sets the interval for updating a BK and the BK lifetime percentage.

The undo wapi bk command restores the default interval for updating a BK and the BK lifetime percentage.

By default, the interval for updating a BK is 43200s, and the BK lifetime percentage is 70%.

Format

wapi { bk-threshold bk-threshold | bk-update-interval bk-update-interval }

undo wapi { bk-threshold | bk-update-interval }

Parameters

Parameter	Description	Value
bk-threshold bk-threshold	Specifies the BK lifetime percentage.	The value is an integer that ranges from 1 to 100.
bk-update-interval bk-update-interval	Specifies the interval for updating a BK.	The value is an integer that ranges from 600 to 604800, in seconds.

Views

Security profile view

Default Level

2: Configuration level

Usage Guidelines

You can set the intervals for updating a BK to ensure security.

The value obtained by multiplying the interval for updating a BK by the BK lifetime percentage should be greater than or equal to 300 seconds. If the interval for updating a BK is less than 300s, the BK may be updated before negotiation is complete due to low STA performance. In this case, some STAs may be forced offline or cannot go online.

Example

# Set the interval for updating a BK to 10000s and the BK lifetime percentage to 80%.

<HUAWEI> system-view
[HUAWEI] wlan
[HUAWEI-wlan-view] security-profile name p1
[HUAWEI-wlan-sec-prof-p1] wapi bk-update-interval 10000
Warning: If the product of bk-update-interval and bk-threshold is smaller than 300s, users may be forced offline. Continue? [Y/N]:y
[HUAWEI-wlan-sec-prof-p1] wapi bk-threshold 80