VAP Profile

Context

The administrator needs to deliver service parameters to an AP so that the AP can provide network access services for wireless users. A VAP profile is a set of service parameters. You can configure different VAP profiles and deliver configurations in the profiles to APs to provide differentiated WLAN services.

Procedure

Create a VAP profile.

Choose Configuration > Wireless Services > Profile > Wireless Service > VAP Profile. The VAP Profile List page is displayed.
Click Create. The Create VAP Profile page is displayed.
Enter the name of the new VAP profile in Profile name.
To copy all parameters from another profile to the new profile, select the name of the profile in Copy parameters from other profiles. If None is selected, parameters are not copied from another profile.
Click OK. The parameter setting page of the new VAP profile is displayed.

Set parameters for creating a VAP profile. Table 1 describes the parameters for creating a VAP profile.

**Table 1** Parameters for creating a VAP profile
Parameter		Description
VAP Profile		Name of the VAP profile, which cannot be modified.
Status		Whether to enable the service mode of a VAP.
Service VLAN		Service VLAN of a VAP. When a specific VLAN is configured as the service VLAN of a VAP, STAs connected to the VAP join the same VLAN. When VLANs in a VLAN pool are configured as service VLANs of a VAP, STAs connected to the VAP join different VLANs.
Service VLAN ID		ID of the service VLAN. This parameter can be configured only when Service VLAN is set to Single VLAN.
VLAN Pool		VLAN pool used for service VLANs. This parameter can be configured only when Service VLAN is set to VLAN Pool. Click Configuration. The VLAN Pool page is displayed.
VAP type		VAP type. If the type of a VAP is set to Service VAP, STAs connected to the VAP can only access network resources but not APs. Service VAPs are used in regular WLAN deployment scenarios. If the type of a VAP is set to Service backup, STAs can access the network through the backup service VAP after the AP goes offline. For example, on a headquarters-branch network, when APs at branches connect to the AC at the headquarters through a WAN, APs may go offline due to the WAN instability. You can configure a backup service VAP to allow new STAs to access the network if the AP goes offline. If the type of a VAP is set to AP management, STAs connected to the VAP can only access APs but not network resources. AP management VAPs are used in STA access and AP management scenarios.
Monitor RADIUS server		Name of a RADIUS server template. This parameter can be configured only when VAP type is set to Service backup.
Forwarding mode		Service forwarding mode.
SoftGRE profile		Name of the soft GRE profile referenced by the VAP profile. This parameter can be configured only when Forwarding mode is set to SoftGRE.
Band steering		Whether to enable band steering.
ARP probe		Whether to enable dynamic ARP probing.
IP binding check		Whether to enable IP source guard on an AP.
IP learning		Whether to enable STA IPv4/IPv6 address learning.
Strict IPv4 address learning		Whether to enable strict STA IP address learning through DHCP. This parameter can be configured only when IP learning is set to IPv4.
Dynamic blacklist of static IPv4 addresses		Whether to add STAs with bogus IPv4 addresses to a dynamic blacklist. This parameter can be configured only when Strict IPv4 address learning is enabled.
Strict IPv6 address learning		Whether to enable strict STA IP address learning through DHCPv6. This parameter can be configured only when IP learning is set to IPv6.
Dynamic blacklist of static IPv6 addresses		Whether to add STAs with bogus IPv6 addresses to a dynamic blacklist. This parameter can be configured only when Strict IPv6 address learning is not set to none.
ND trusted port		Whether to enable the ND trusted port function on an AP.
Appending Option 82		Whether to enable an AP to insert the Option 82 field in DHCP packets sent from a STA.
RID format		Format of the remote-ID in the Option 82 field inserted in DHCP packets sent from a STA. This parameter can be configured only when Appending Option 82 is set to ON.
CID format		Format of the circuit-ID in the Option 82 field inserted in DHCP packets sent from a STA. This parameter can be configured only when Appending Option 82 is set to ON.
MAC address format		Format of the AP's MAC address in the Option 82 field. This parameter can be configured only when RID forma or CID format is set to AP-MAC.
User-defined		User-defined format in the Option 82 field. This parameter is mandatory when RID forma or CID format is set to User-defined.
Separator		Delimiter between fields in Option 82.
Effective after logout		Whether to enable offline management VAP and antenna alignment VAP functions.
Automatically disable VAP		Whether to enable the scheduled VAP auto-off function.
Automatic disabling time		Scheduled time during which a VAP is disabled. This parameter can be configured only when Automatically disable VAP is set to ON.
Disconnect STAs without traffic		Whether to enable the device to monitor user traffic and forcibly disconnect STAs without traffic.
iConnect		Whether to enable the iConnect function.
mDNS Snooping		Whether to enable mDNS snooping function.
DFI		Whether to enable the Dynamic Flow Inspection (DFI) function.
DNS Snooping		Whether to enable DNS snooping function.
SNF		Whether to enable agile distributed SFN roaming.
Flood attack detection
Protocol type		Whether to enable flood attack detection for ARP/DHCP/DHCPv6/IGMP/mDNS/ND multicast, broadcast, and unicast packets.
ARP traffic threshold (pps)		Rate threshold for ARP flood attack detection. This parameter can be configured only when Protocol type is set to ALL or ARP.
IGMP traffic threshold (pps)		Rate threshold for IGMP flood attack detection. This parameter can be configured only when Protocol type is set to ALL or IGMP.
ND traffic threshold (pps)		Rate threshold for ND flood attack detection. This parameter can be configured only when Protocol type is set to ALL or ND.
DHCP traffic threshold (pps)		Rate threshold for DHCP flood attack detection. This parameter can be configured only when Protocol type is set to ALL or DHCP.
DHCPV6 traffic threshold (pps)		Rate threshold for DHCPv6 flood attack detection. This parameter can be configured only when Protocol type is set to ALL or DHCPv6.
mDNS traffic threshold (pps)		Rate threshold for MDNS flood attack detection. This parameter can be configured only when Protocol type is set to ALL or mDNS.
Other broadcast traffic threshold (pps)		Rate threshold for broadcast flood attack detection of the protocols except ARP/IGMP/ND/DHCP/DHCPv6/MDNS. This parameter can be configured only when Protocol type is set to ALL or Other broadcast.
Other multicast traffic threshold (pps)		Rate threshold for multicast flood attack detection of the protocols except ARP/IGMP/ND/DHCP/DHCPv6/MDNS. This parameter can be configured only when Protocol type is set to ALL or Other multicast.
Adding attackers to the blacklist		Whether to enable the broadcast flood blacklist function. This parameter can be configured only when Protocol type is set to ALL, ARP, IGMP, DHCP, DHCPv6, mDNS, Other broadcast, or Other multicast.
SEA
Service experience analysis		Whether to enable the SEA function.
SIP packet port number		Number of the SIP listening port. This parameter can be configured only when the SEA function is enabled.
Poor-QoE application analysis		UCL group and application for poor-QoE analysis. The UCL group ID and application name can be selected separately or together.
UCL group ID		UCL group ID to be detected.
Application name		Application name to be detected.
iPCA2.0
Flow-based Detection	Flow index	Measurement flow ID.
	Direction	Measurement flow direction.
	Measurement point	Location of the measurement point.
	Bidirectional flow	Whether to enable the bidirectional flow function.
Application/UCL group-based Detection	UCL group ID	UCL group ID.
Application/UCL group-based Detection	Application name	Application name.
Clearing the color bit (ingress)		Whether to enable the function of clearing the color bit at the edge.

Click Apply.

Modify a VAP profile.
1. Choose Configuration > Wireless Services > Profile > Wireless Service > VAP Profile. The VAP Profile List page is displayed.
2. Click the name of the VAP profile that you want to modify. The VAP Profile page is displayed.
3. Set parameters for modifying the VAP profile. Table 1 describes the parameters for modifying a VAP profile.
4. Click Apply.
Delete a VAP profile.
1. Choose Configuration > Wireless Services > Profile > Wireless Service > VAP Profile. The VAP Profile List page is displayed.
2. Select the profile that you want to delete and click Delete. In the Confirm dialog box that is displayed, click OK.
Display the profile reference relationship.
1. Choose Configuration > Wireless Services > Profile > Wireless Service > VAP Profile. The VAP Profile List page is displayed.
2. Select the profile of which you want to display the reference relationship and click Display Reference Relationship. The system displays the types and names of the objects that reference the profile.
  
  Click Hide Reference Relationship. The system hides the displayed results.
Configure profiles referenced by a VAP profile.
1. Choose Configuration > Wireless Services > Profile > Wireless Service > VAP Profile. The VAP Profile List page is displayed. Click next to VAP Profile. The system displays names of the VAP profiles. Click next to a VAP profile name. The profiles referenced by the VAP profile are displayed in the menu navigation area.
2. Click any profile referenced by the VAP profile. The configuration page of the referenced profile is displayed on the right. You can select another profile from the drop-down list and set the profile parameters. For descriptions of the profile parameters, see its configuration page.
3. Click Apply. In the Info dialog box that is displayed, click OK.