VAP Profile

Context

The administrator needs to deliver service parameters to an AP so that the AP can provide network access services for wireless users. A VAP profile is a set of service parameters. You can configure different VAP profiles and deliver configurations in the profiles to APs to provide differentiated WLAN services.

Procedure

Create a VAP profile.

Choose Configuration > Wireless Services > Profile > Wireless Service > VAP Profile. The VAP Profile List page is displayed.
Click Create. The Create VAP Profile page is displayed.
Enter the name of the new VAP profile in Profile name.
To copy all parameters from another profile to the new profile, select the name of the profile in Copy parameters from other profiles. If None is selected, parameters are not copied from another profile.
Click OK. The parameter setting page of the new VAP profile is displayed.

Set parameters for creating a VAP profile. Table 1 describes the parameters for creating a VAP profile.

**Table 1** Parameters for creating a VAP profile
Parameter	Description
VAP Profile	Name of the VAP profile, which cannot be modified.
Status	Whether to enable the service mode of a VAP.
Service VLAN	Service VLAN of a VAP. When a specific VLAN is configured as the service VLAN of a VAP, STAs connected to the VAP join the same VLAN. When VLANs in a VLAN pool are configured as service VLANs of a VAP, STAs connected to the VAP join different VLANs.
Service VLAN ID	ID of the service VLAN. This parameter can be configured only when Service VLAN is set to Single VLAN.
VLAN Pool	VLAN pool used for service VLANs. This parameter can be configured only when Service VLAN is set to VLAN Pool. Click Configuration. The VLAN Pool page is displayed.
VAP type	VAP type. If the type of a VAP is set to Service VAP, STAs connected to the VAP can only access network resources but not APs. Service VAPs are used in regular WLAN deployment scenarios. If the type of a VAP is set to Service backup, STAs can access the network through the backup service VAP after the AP goes offline. For example, on a headquarters-branch network, when APs at branches connect to the AC at the headquarters through a WAN, APs may go offline due to the WAN instability. You can configure a backup service VAP to allow new STAs to access the network if the AP goes offline. If the type of a VAP is set to AP management, STAs connected to the VAP can only access APs but not network resources. AP management VAPs are used in STA access and AP management scenarios.
Monitor RADIUS server	Name of a RADIUS server template. This parameter can be configured only when VAP type is set to Service backup.
Forwarding mode	Service forwarding mode.
SoftGRE profile	Name of the soft GRE profile referenced by the VAP profile. This parameter can be configured only when Forwarding mode is set to SoftGRE.
Band steering	Whether to enable band steering.
ARP probe	Whether to enable dynamic ARP probing.
IP binding check	Whether to enable IP source guard on an AP.
IP learning	Whether to enable STA IPv4/IPv6 address learning.
Strict IPv4 address learning	Whether to enable strict STA IP address learning through DHCP. This parameter can be configured only when IP learning is set to IPv4.
Dynamic blacklist of static IPv4 addresses	Whether to add STAs with bogus IPv4 addresses to a dynamic blacklist. This parameter can be configured only when Strict IPv4 address learning is enabled.
Strict IPv6 address learning	Whether to enable strict STA IP address learning through DHCPv6. This parameter can be configured only when IP learning is set to IPv6.
Dynamic blacklist of static IPv6 addresses	Whether to add STAs with bogus IPv6 addresses to a dynamic blacklist. This parameter can be configured only when Strict IPv6 address learning is not set to none.
ND trusted port	Whether to enable the ND trusted port function on an AP.
Appending Option 82	Whether to enable an AP to insert the Option 82 field in DHCP packets sent from a STA.
RID format	Format of the remote-ID in the Option 82 field inserted in DHCP packets sent from a STA. This parameter can be configured only when Appending Option 82 is set to ON.
CID format	Format of the circuit-ID in the Option 82 field inserted in DHCP packets sent from a STA. This parameter can be configured only when Appending Option 82 is set to ON.
MAC address format	Format of the AP's MAC address in the Option 82 field. This parameter can be configured only when RID forma or CID format is set to AP-MAC.
User-defined	User-defined format in the Option 82 field. This parameter is mandatory when RID forma or CID format is set to User-defined.
Separator	Delimiter between fields in Option 82.
Effective after logout	Whether to enable offline management VAP and antenna alignment VAP functions.
Automatically disable VAP	Whether to enable the scheduled VAP auto-off function.
Automatic disabling time	Scheduled time during which a VAP is disabled. This parameter can be configured only when Automatically disable VAP is set to ON.
Disconnect STAs without traffic	Whether to enable the device to monitor user traffic and forcibly disconnect STAs without traffic.
iConnect	Whether to enable the iConnect function.
Service experience analysis	Whether to enable the service experience analysis (SEA) function.
SIP packet port number	Number of the SIP listening port.
mDNS Snooping	Whether to enable mDNS snooping function.
DFI	Whether to enable the Dynamic Flow Inspection (DFI) function.
DNS Snooping	Whether to enable DNS snooping function.
SNF	Whether to enable agile distributed SFN roaming.
Flood attack detection
Protocol type	Whether to enable flood attack detection for ARP/DHCP/DHCPv6/IGMP/mDNS/ND multicast, broadcast, and unicast packets.
ARP traffic threshold (pps)	Rate threshold for ARP flood attack detection. This parameter can be configured only when Protocol type is set to ALL or ARP.
IGMP traffic threshold (pps)	Rate threshold for IGMP flood attack detection. This parameter can be configured only when Protocol type is set to ALL or IGMP.
ND traffic threshold (pps)	Rate threshold for ND flood attack detection. This parameter can be configured only when Protocol type is set to ALL or ND.
DHCP traffic threshold (pps)	Rate threshold for DHCP flood attack detection. This parameter can be configured only when Protocol type is set to ALL or DHCP.
DHCPV6 traffic threshold (pps)	Rate threshold for DHCPv6 flood attack detection. This parameter can be configured only when Protocol type is set to ALL or DHCPv6.
mDNS traffic threshold (pps)	Rate threshold for MDNS flood attack detection. This parameter can be configured only when Protocol type is set to ALL or mDNS.
Other broadcast traffic threshold (pps)	Rate threshold for broadcast flood attack detection of the protocols except ARP/IGMP/ND/DHCP/DHCPv6/MDNS. This parameter can be configured only when Protocol type is set to ALL or Other broadcast.
Other multicast traffic threshold (pps)	Rate threshold for multicast flood attack detection of the protocols except ARP/IGMP/ND/DHCP/DHCPv6/MDNS. This parameter can be configured only when Protocol type is set to ALL or Other multicast.
Adding attackers to the blacklist	Whether to enable the broadcast flood blacklist function. This parameter can be configured only when Protocol type is set to ALL, ARP, IGMP, DHCP, DHCPv6, mDNS, Other broadcast, or Other multicast.
SEA
Service experience analysis	Whether to enable the SEA function.
SIP packet port number	Number of the SIP listening port. This parameter can be configured only when the SEA function is enabled.
Poor-QoE application analysis	Poor-QoE application.
iPCA2.0
Measurement type	iPCA 2.0 measurement type.
Application name	Name of the application to be measured. This parameter can be configured only when Measurement type is set to Application-based.
Flow Index	Measurement flow ID. This parameter can be configured only when Measurement type is set to Flow-based.
Direction	Measurement flow direction. This parameter can be configured only when Measurement type is set to Flow-based.
Measured At	Location of the measurement point. This parameter can be configured only when Measurement type is set to Flow-based.
Bidirectional Flow	Whether to enable the bidirectional flow function. This parameter can be configured only when Measurement type is set to Flow-based.
Clearing the color bit (ingress)	Whether to enable the function of clearing the color bit at the edge.

Click Apply.

Modify a VAP profile.
1. Choose Configuration > Wireless Services > Profile > Wireless Service > VAP Profile. The VAP Profile List page is displayed.
2. Click the name of the VAP profile that you want to modify. The VAP Profile page is displayed.
3. Set parameters for modifying the VAP profile. Table 1 describes the parameters for modifying a VAP profile.
4. Click Apply.
Delete a VAP profile.
1. Choose Configuration > Wireless Services > Profile > Wireless Service > VAP Profile. The VAP Profile List page is displayed.
2. Select the profile that you want to delete and click Delete. In the Confirm dialog box that is displayed, click OK.
Display the profile reference relationship.
1. Choose Configuration > Wireless Services > Profile > Wireless Service > VAP Profile. The VAP Profile List page is displayed.
2. Select the profile of which you want to display the reference relationship and click Display Reference Relationship. The system displays the types and names of the objects that reference the profile.
  
  Click Hide Reference Relationship. The system hides the displayed results.
Configure profiles referenced by a VAP profile.
1. Choose Configuration > Wireless Services > Profile > Wireless Service > VAP Profile. The VAP Profile List page is displayed. Click next to VAP Profile. The system displays names of the VAP profiles. Click next to a VAP profile name. The profiles referenced by the VAP profile are displayed in the menu navigation area.
2. Click any profile referenced by the VAP profile. The configuration page of the referenced profile is displayed on the right. You can select another profile from the drop-down list and set the profile parameters. For descriptions of the profile parameters, see its configuration page.
3. Click Apply. In the Info dialog box that is displayed, click OK.