HCIP-WLAN V2.0 Training Material PDF

WLAN Networking Architectures
Foreword
⚫ Wireless local area networks (WLANs) overcome some disadvantages of wired

networks, such as poor mobility. With the development of Wi-Fi 6 technology, the
bandwidth performance gap between wireless and wired networks is narrowing
down. WLANs featuring flexible networking can adapt to complex and changeable
application scenarios.
⚫ This course describes common WLAN networking architectures, including Fat AP,
leader AP, WAC + Fit AP, agile distributed, Navi AC, and mesh.
2 Huawei Confidential
Objectives
⚫ On completion of this course, you will be able to:
 Describe WLAN networking modes.
 Configure WLAN services.
 Describe the WLAN networking application scenarios.
Contents
1. WLAN Networking Overview
2. WLAN Networking Architectures
3. WLAN Networking Application Scenarios
Main NEs on an Enterprise WLAN
Manager +
controller + Portal server DHCP server RADIUS server
analyzer
IP Aggregation
Core switch Access switch Firewall
network switch
Wireless Wireless access

Native WAC
control controller (WAC)
Wireless Wireless access

Central AP Remote unit (RU)
access point (AP)
Wireless Barcode scanner, automated guided

Laptop Tablet Mobile phone
terminal vehicle (AGV), smart wristband, etc.
WLAN Networking Architecture Overview (1/3)
Fat AP Leader AP
Fat AP Leader AP
STA STA
• Networking characteristics: A Fat AP works independently and • Networking characteristics: A leader AP can work independently or
requires separate configurations. It provides only simple functions manage a small number of APs to implement basic roaming
and is cost-effective. functions. This networking is cost-effective and has low no high
• Application scenarios: homes, mini stores, etc. requirements on skills of network maintenance personnel.
• Application scenarios: micro and small enterprises
WAC + Fit AP Agile distributed
WAC
WAC
Central AP Central AP
RU
Fit AP
Room Room Room Room Room Room Room Room

1 2 3 N 1 2 3 N
STA
• Networking characteristics: Fit APs are centrally managed and • Networking characteristics: The agile distributed architecture divides
configured by a WAC, and provide a variety of functions. This an AP into a central AP and RUs. Each central AP can manage
networking has high requirements on skills of network maintenance multiple RUs, providing good coverage at low costs. Agile distributed
personnel. APs can be used in the Fat AP, WAC + Fit AP, and cloud
• Application scenarios: large and midsize enterprises management architectures.
• Application scenarios: scenarios with densely distributed rooms
Navi AC Mesh
MP
CAPWAP
Local AC Navi AC
STA1
CAPWAP
STA2
Fit AP WAC MPP
STA3
STA
• Networking characteristics: Guest traffic can be directed to a • Networking characteristics: A wireless mesh network (WMN) is a
specified WAC (Navi AC) for centralized management, which is dynamic self-organizing, and auto-configured star-type network that
isolated from employee traffic. consists of multiple wirelessly connected APs in a mesh topology,
• Application scenarios: large enterprises where guest traffic needs and connects to a wired network through one or two portal nodes.
to be isolated • Application scenarios: outdoor backhaul scenarios
Contents

◼ Fat AP
▫ Leader AP
▫ WAC + Fit AP
▫ Agile Distributed
▫ Navi AC
▫ Mesh
Fat AP Networking
Networking description
Router ⚫ The Fat AP networking architecture is also called autonomous network

architecture because it can implement functions such as wireless user
access, service data encryption, and service data forwarding, without the
Switch need of a dedicated device for centralized control.
⚫ Fat APs work independently and require no additional centralized control

device. Therefore, this networking is easy to deploy and cost-effective, and
is mainly applicable to homes and micro stores.
Fat AP Fat AP
⚫ Since each Fat AP works independently and no centralized control device is
used, the Fat APs are difficult to manage and maintain. Therefore, the Fat
AP architecture is not recommended for enterprises.
STA STA
• In the Fat AP networking, APs work in Fat mode.

Managing a Fat AP
Step 1: Connect a PC to an AP (working in Fit mode by default) in wired or wireless mode and
run the following command to switch the AP to the Fat mode:
STA1 Managing the

[Huawei] ap-mode-switch fat Fat AP in wired
mode
Warning: The system will reboot and start in fat mode of V200R021C00SPC200. Continue?
(y/n)[n]: y
Switch
Step 2: Connect the PC to the Fat AP.
Wired mode: Set the IP address of the PC's wired network adapter to 169.254.1.X/24 (except
169.254.1.1).
Wireless mode: Set the IP address of the PC's wireless network adapter to 192.168.1.X/24 (except
192.168.1.1).
Fat AP
Step 3: Manage the Fat AP.
Wired mode: Access http://169.254.1.1 or https://169.254.1.1 using a browser.
Wireless mode: Use the PC to search for the WLAN with the management SSID HUAWEI-LeaderAP- Managing the
xxxx (xxxx indicates the last four digits of the AP's MAC address) and associate with the WLAN. STA2 Fat AP in
wireless mode
Then access http://192.168.1.1 or https://192.168.1.1 using a browser.
• Connecting a PC to a Fit AP in wireless mode:
▫ Use the PC to search for the management SSID, which is hw_manage_xxxx

by default (xxxx indicates the last four digits of the AP's MAC address). To
obtain the default password, see the AP product documentation.
▫ Set the IP address of the PC's wireless network adapter to 192.168.1.X/24

(except 192.168.1.1) and access http://192.168.1.1 or https://192.168.1.1
using a browser.
• Connecting a PC to a Fit AP in wired mode:
▫ Set the IP address of the PC's wired network adapter to 169.254.1.X (except
169.254.1.1) and access http://169.254.1.1 or https://169.254.1.1 using a
browser.
• Connecting a PC to a Fat AP in wireless mode:
▫ In wireless management mode, the default access address of APs running

versions later than V200R021C01 is http://169.254.2.1 or https://169.254.2.1.
To connect a PC to such an AP, set the IP address of the PC's wireless
network adapter to 169.254.2.X/24 (except 169.254.2.1).
Working Modes of Fat APs
Bridge mode Gateway mode
Service Router
Router
gateway
VLAN 20 Public IP address
VLAN 10 Service
Service
gateway Fat AP gateway Fat AP
Fat AP
Service VLAN 10
Service VLAN 10 Service VLAN 10
A Fat AP connects to a wired network in A Fat AP connects to a wired network in A Fat AP in gateway mode functions as an
bridge mode. A router functions as the gateway mode. A router functions as an Internet egress, and has a public IP
WLAN service gateway. The AP's uplink independent gateway to connect the Fat address configured and the NAT function
interface needs to allow packets from the AP to the Internet. The Fat AP functions as enabled. The Fat AP functions as the
service VLAN to pass through. the WLAN service gateway. WLAN service gateway.
• When wired and wireless users are in the same VLAN and use the same address
segment and gateway address, you can configure the Fat AP to work in bridge
mode.
• When wired and wireless users are in different VLANs and managed separately,
or the Fat AP functions as an Internet egress, you can configure the Fat AP to
work in gateway mode.
Example for Configuring a Fat AP to Work in Bridge Mode
⚫ Log in to a Fat AP through the web system, choose Wizard > Config Wizard > Single AP Configuration,
and set parameters as prompted.
Example for Configuring a Fat AP to Work in Gateway Mode
⚫ Log in to a Fat AP through the web system, choose Wizard > Config Wizard > Single AP Configuration,
and set parameters as prompted.
Contents

▫ Fat AP
◼ Leader AP
▫ WAC + Fit AP
▫ Navi AC
▫ Mesh
Leader AP Networking
⚫ In the leader AP networking, one AP works in Fat mode, and the other APs
work in Fit mode. The AP working in Fat mode is also called a leader AP.
⚫ The leader AP and other Fit APs are generally located on the same Layer 2
network.
⚫ Similar to a WAC, the leader AP uses the Control And Provisioning of

Wireless Access Points (CAPWAP) protocol to centrally manage and
configure Fit APs. To enable all APs to provide the same wireless services,
you only need to log in to the leader AP to perform configurations.
⚫ This networking requires low network construction costs because no WAC

Fit AP Leader AP Fit AP Fit AP
is needed. In addition, this networking has certain scalability and security,
and is applicable to WLANs of small and micro enterprises.
CAPWAP tunnel
⚫ The wireless roaming function is supported in this networking.
• Leader APs are managed in a similar way as Fat APs. For details, see "Managing
a Fat AP".
Working Modes of Leader APs
Bridge mode Gateway mode
Independent Switch
gateway
Switch
Room
Room Leader AP Fit AP Fit AP

Built-in gateway
Leader AP Fit AP Fit AP
• A leader AP in bridge mode functions as a network bridge and works with an

independent gateway in the uplink direction. The leader AP and Fit APs
communicate with each other on a Layer 2 network. The independent gateway
has the DHCP service enabled and allocates IP addresses to STAs and APs. The
direct forwarding mode is used, which reduces the load on the leader AP, so that
the leader AP can manage more Fit APs. Therefore, this networking mode is
recommended.
• A leader AP in gateway mode functions as a gateway, and no independent

gateway is required. The leader AP and Fit APs communicate with each other on
a Layer 2 network. In the uplink direction, the leader AP has NAT enabled and
connects to the Internet. In the downlink direction, the leader AP connects to a
switch and communicates with Fit APs. The leader AP has the DHCP service
enabled and allocates IP addresses to Fit APs and STAs. The networking is more
simplified than that in bridge mode. In this mode, service traffic is forwarded
through CAPWAP tunnels to the leader AP for processing. Therefore, the leader
AP is heavily loaded and can manage a limited number of Fit APs. When the
service traffic is heavy, the leader AP may become a bottleneck for service
forwarding.
• When the number of APs exceeds 24, it is recommended that an external

gateway be configured for STAs.
How APs Obtain IP Address for in the Leader AP Networking
An external DHCP server allocates IP The built-in DHCP server allocates IP

Static IP addresses are configured for APs.
addresses to APs. addresses to APs.
DHCP server
IP address
allocation
IP address
allocation
Fit AP Leader AP Fit AP Fit AP Leader AP Fit AP

DHCP server Static IP Static IP Static IP
address address address
Fit AP Leader AP Fit AP
• By default, other APs on the same network as a leader AP do not need to be

authenticated when going online on the leader AP.
• Mode in which Fit APs connect to a leader AP:
▫ An external DHCP server can allocate IP addresses to all APs. Ensure that
the leader AP and Fit APs are in the same VLAN so that the Fit APs can
discover the leader AP through CAPWAP broadcast.
▫ The leader AP can function as a DHCP server to allocate IP addresses to Fit

APs. In this case, it is recommended that the leader AP and Fit APs be in the
same VLAN.
▫ Fit APs can connect to the leader AP using static IP addresses. In this case, it
is recommended that the leader AP and Fit APs be in the same VLAN.
• Mode in which a CAPWAP interface is created on the leader AP:
▫ To simplify configuration, the leader AP does not support manual

configuration of a CAPWAP interface. Instead, the CAPWAP interface is
automatically created by the leader AP.
• Layer 3 networking is supported between the leader AP and Fit APs.
▫ Static WAC-List (the leader AP's IP address) can be configured on Fit APs.
▫ Fit APs can obtain the IP address of the leader AP through DHCP Option 43.
Leader AP Deployment Process — Through the Web System
⚫ Deployment process:
Start
1. Select an AP as the leader AP and log in to the AP
(working in Fit mode by default). You can log in to the AP
in wired or wireless mode. For details, see "Fat AP Select the leader AP
Networking".
Switch the AP's working
2. Switch the AP's working mode to Fat. Then the AP restarts. mode to Fat
3. Log in to the leader AP. Associate a laptop with the SSID
HUAWEI-LeaderAP-XXXX. Open a browser on the laptop Log in to the leader AP
and enter 192.168.1.1 in the address box to access the web
system. Configure basic information
about the leader AP
4. Configure basic information about the leader AP, including
the AP name, time zone, date, and time. Configure wireless services
5. Access the Config Wizard page, click Multi-AP
Configuration, and configure wireless services. End
• Prerequisites:
▫ One AP has been selected as the leader AP.
▫ WLAN planning and design have been completed.
▫ The APs have been connected and powered on according to the networking
diagram.
▫ The MAC address of the leader AP is available.
▫ The Windows operating system has been installed on a laptop, and the
Internet Explorer, Firefox, or Chrome browser has been installed.
▫ You have prepared one Ethernet cable if you want to connect the laptop to
the AP in wired mode. When the leader AP works in gateway mode, it does
not support the login in wired mode.
• The default wireless login address of an AP is 192.168.1.1 in V200R021C00 and

169.254.2.1 in V200R021C01 and later versions.
Key Configurations for a Leader AP
⚫ Switch the AP's working mode. ⚫ Configure wireless services for the leader AP.
Contents

▫ Fat AP
▫ Leader AP
◼ WAC + Fit AP
▫ Navi AC
▫ Mesh
WAC + Fit AP Networking
Overview Networking Network planning Service deployment
In-path and off-path Configuring AP

Architecture overview VLAN planning
networking onboarding
Layer 2 and Layer 3 Configuring WLAN

IP address planning
networking services
Verifying the
Data forwarding mode
configuration
WAC + Fit AP Networking
CAPWAP tunnel 1
CAPWAP tunnel 2
⚫ A WAC provides WLAN access control, data forwarding, AP configuration
management, roaming management, and security control.
WAC
⚫ Fit APs encrypt and decrypt 802.11 packets, provide 802.11 physical layer
(PHY) functions, collect air interface statistics, and are managed by the WAC.
⚫ The WAC communicates with Fit APs using CAPWAP.
⚫ Compared with the Fat AP architecture, the WAC + Fit AP architecture has the
following advantages:
Fit AP Fit AP
 Easier configuration and deployment in multi-AP scenarios
 Higher security
 Easier upgrade and expansion

• This architecture is applicable to large, midsize, and small campus networks
and scenarios where enterprises need to centrally manage WLANs.
The WAC + Fit AP networking is determined based on the networking mode, data forwarding mode, and the number of WACs.
• A WAC communicates with Fit APs using CAPWAP. With CAPWAP, APs
automatically discover the WAC, the WAC authenticates the APs, and the APs
obtain software packages and the initial and dynamic configurations from the
WAC. CAPWAP tunnels are established between the WAC and APs.
• CAPWAP tunnels include control tunnels and data tunnels.
▫ CAPWAP control tunnels mainly transmit control packets (also called

management packets, which are used by the WAC to manage and control
APs).
▫ CAPWAP data tunnels mainly transmit data packets. The CAPWAP tunnels
allow for Datagram Transport Layer Security (DTLS) encryption, so that
transmitted packets are more secure.
• Compared with the Fat AP architecture, the WAC + Fit AP architecture has the
following advantages:
▫ Easier configuration and deployment: The WAC centrally configures and

manages the wireless network so that each AP does not need to be
configured separately. In addition, the channels and power of APs on the
entire network are automatically adjusted, eliminating the need for manual
adjustment.
▫ Higher security: Fat APs cannot be upgraded in a unified manner, so that

the latest security patches may not be installed on APs of all versions. In the
WAC + Fit AP architecture, security capabilities are mainly implemented on
the WAC, and software upgrade and security configuration only need to be
performed on the WAC. As such, global security settings can be quickly
performed. Additionally, to prevent malicious code from being loaded, the
WAC performs digital signature authentication for the software, enhancing
security of the upgrade process. The WAC also implements some security
functions that are not supported in the Fat AP architecture, including
advanced security features such as virus detection, uniform resource locator
(URL) filtering, and stateful inspection firewall.
• Easier upgrade and extension: The centralized management mode of this

architecture enables APs on the same WAC to run the same software version.
When an upgrade is required, the WAC obtains the new software package or
patch and then upgrades the AP version. The separation of AP and WAC
functions prevents frequent AP version upgrades. User authentication, network
management, and security functions only need to be implemented on the WAC.
Networking Modes: In-Path and Off-Path Networking
In-path networking Off-path networking
WAC Core switch

Core switch
WAC
(Optional) Aggregation switch
Access switch
Access switch
Fit AP Fit AP Fit AP

Fit AP
• Description: The WAC provides functions of both a WAC and an • Description: The WAC is connected to the existing network in off-path mode
aggregation switch. Data and management services of APs are all and processes management services of APs. Data services of APs can be
forwarded and processed by the WAC. directly sent to the upper-layer network or centrally forwarded by the WAC.
• Applicability: new deployment of small and midsize centralized • Applicability: network reconstruction or deployment of new large and midsize
WLANs campus networks
Networking Modes: Layer 2 and Layer 3 Networking
Layer 2 networking Layer 3 networking
WAC WAC
L2
Core switch
L2 L3
Access switch L2 Access switch
Fit AP Fit AP
Fit AP Fit AP • Description: The WAC and Fit APs are located on different network segments. The
intermediate network must ensure that the WAC and Fit APs are reachable to each
• Description: The WAC and Fit APs are located in the same other. Additional configurations are required to enable the Fit APs to discover the
broadcast domain. The APs can discover the WAC by WAC. This networking is flexible and facilitates scale-out.
broadcasting packets. The networking, configuration, and
management are simple. • Applicability: Layer 3 networking is applicable to large and midsize WLANs. For
example, in a large campus, APs can be deployed in each office building to provide
• Applicability: This networking applies to small-scale WLANs, wireless coverage, and a WAC can be deployed in the core equipment room to
such as small enterprise networks, but is not applicable to manage and configure all APs. It is recommended that the APs and WAC be
complex and refined WLANs of large enterprises. connected through a Layer 3 network.
• When the APs and WAC are connected through a Layer 3 network and the APs
discover the WAC through DHCP (the WAC functions as a DHCP server), the
intermediate devices between the APs and WAC must support the DHCP relay
function.
Data Forwarding Mode — Direct Forwarding
Direct forwarding (also called local forwarding)
CAPWAP tunnel
• No traffic bypassing occurs. APs directly forward users' data packets
Management traffic
Egress router
to the upper-layer network without encapsulating them in CAPWAP
Service data traffic
tunnels. All service data is forwarded locally by APs. Data traffic does
not pass through the WAC, thereby reducing the burden on the WAC.
• Direct forwarding is often used in the in-path networking. This

WAC Core switch
networking mode simplifies the network architecture and applies to
small and midsize centralized WLANs.
• Direct forwarding can also be used in the off-path networking. In this

Access switch networking mode, data packets do not need to be processed by the
WAC, eliminating the bandwidth bottleneck and facilitating the usage
of existing security policies. This networking mode applies to wired
Fit AP Fit AP
and wireless convergence on large-scale campus networks or HQ-
branch scenarios.
Data Forwarding Mode — Tunnel Forwarding
Tunnel forwarding (also called centralized forwarding)
CAPWAP tunnel
• Traffic forwarding: Service data packets are encapsulated by APs and
Management traffic
Egress router then sent to the WAC through CAPWAP tunnels. The WAC then
forwards the packets to the upper-layer network. All data traffic and
management traffic pass through the WAC, facilitating security
control policy enforcement for wireless users.
WAC Core switch
• The WAC serves as the control and forwarding center on a WLAN. It
manages and configures APs and also forwards service data traffic.
• Tunnel forwarding is typically used in the off-path networking. In

Access switch
this networking mode, the WAC centrally forwards data packets,
ensuring high security and facilitating centralized management and
control.
Fit AP Fit AP
• Service data traffic between the WAC and APs is transmitted over CAPWAP data
tunnels, while management traffic is transmitted over CAPWAP control tunnels.
In-Path Mode + Layer 2 Networking
Router
• A WAC is directly connected to APs or Layer 2 access switches, and provides

functions of both a WAC and an aggregation switch.
Core switch
• The WAC and APs are in the same broadcast domain, and APs can discover
the WAC by broadcasting patches. The network architecture is simple.
• Since the WAC is deployed in in-path mode, the direct data forwarding mode
WAC
is used in most cases. In this networking mode, wireless traffic must pass
through the WAC, regardless of the data forwarding mode. Therefore, the
WAC may become a performance bottleneck on the live network.
Access switch L2
Application scenarios and networking characteristics
• This networking mode applies to deployment of new small-scale WLANs,

such as small enterprise and branch networks.
AP1 AP2 AP3 AP4
• The network architecture is simple and easy to maintain.
In-Path Mode + Layer 3 Networking
Router
• A WAC is connected to the network in in-path mode and located between

the aggregation and core switches. Depending on the network scale, the
Core switch WAC can be connected to multiple aggregation switches.
• The WAC communicates with APs at Layer 3 and the APs can obtain the
WAC's IP address through DHCP.
WAC • Since the WAC is deployed in in-path mode, the direct data forwarding mode
is used in most cases. Compared with in-path + Layer 2 networking, Layer 3
L2 networking is applicable to larger-scale WLANs and facilitates scale-out. In
Aggregation addition, since all wireless traffic must pass through the WAC, the WAC
switch performance may become a performance bottleneck on the live network.
L3
Access switch
L2 Application scenarios and networking characteristics
Access switch
• This networking mode applies to deployment of new small- and medium-

scale WLANs, such as office networks of small and midsize enterprises.
• The network architecture is simple and easy to maintain, and facilitates
AP1 AP2 AP3 AP4 scale-out.
Off-Path Mode + Layer 2 Networking
Router
• A WAC is connected to the core switch (or another network device) in off-
path mode. The WAC and APs are located in the same broadcast domain
and communicate with each other at Layer 2.
Core switch • APs can discover the WAC by broadcasting packets.
WAC • If the direct forwarding mode is used, wireless traffic does not need to pass
through the WAC. If the tunnel forwarding mode is used, all wireless traffic
must be forwarded by the WAC.
Access switch L2
• This networking mode applies to new WLAN deployment for small and
midsize enterprises and campuses.
• This networking mode is applicable to WLAN construction based on an

AP1 AP2 existing network, and requires only a few changes to the existing network.
Off-Path Mode + Layer 3 Networking
Router
• A WAC is connected to the core switch (or another network device) in off-
L3 path mode. The WAC and APs are located in different broadcast domains
L2 and communicate with each other at Layer 3.
• Typically, APs obtain the WAC's IP address through DHCP.

Core switch
• Compared with off-path + Layer 2 networking, Layer 3 networking is
WAC
applicable to larger-scale WLANs and supports flexible scale-out. The
traffic forwarding characteristics are similar to those in the off-path Layer
2 networking, and are not described here.
Access switch L2
• This networking mode applies to new WLAN deployment for large and
midsize enterprises and campuses.
• This networking mode is applicable to WLAN construction based on an

AP1 AP2 existing network, and requires only a few changes to the existing network.
Comparison of Typical WAC + Fit AP Networking Modes
Networking Mode Advantage Disadvantage
In-path mode + Layer 2 Low scalability, not applicable to large-scale enterprise WLANs
No data traffic bypassing, simple networking, and
networking + direct or tunnel Applicable only to new WLAN deployment, but not applicable to
simple management
forwarding network reconstruction
In-path mode + Layer 3 Possible WAC performance bottleneck on large-scale networks

No data traffic bypassing, clear network architecture,
networking + direct or tunnel Applicable only to new WLAN deployment, but not applicable to
and high network scalability
forwarding network reconstruction
No data traffic bypassing, high forwarding efficiency

Off-path mode + Layer 2 Low scalability, not applicable to large-scale enterprise WLANs
Easy WAC discovery for APs by broadcasting packets,
networking + direct forwarding Complex service VLAN configuration
easy deployment
Centralized data traffic forwarding by the WAC,
Off-path mode + Layer 2 facilitating policy control and ensuring high security Low scalability, not applicable to large-scale enterprise WLANs
networking + tunnel forwarding Easy WAC discovery for APs by broadcasting packets, Data traffic bypassing, low forwarding efficiency
easy deployment
No data traffic bypassing, high forwarding efficiency

Off-path mode + Layer 3
High scalability, applicable to large-scale WLAN Complex service VLAN configuration
networking + direct forwarding
deployment
Centralized data traffic forwarding by the WAC,

Off-path mode + Layer 3 facilitating policy control and ensuring high security Possible WAC performance bottleneck on large-scale networks
networking + tunnel forwarding High scalability, applicable to large-scale WLAN Data traffic bypassing, low forwarding efficiency
deployment
VLAN Planning on a WLAN
VLAN planning in the WAC + Fit AP networking
CAPWAP tunnel
Management traffic
Egress router ⚫ Two types of VLANs on a WLAN:
 Management VLAN: transmits packets that are forwarded through
CAPWAP tunnels, including management packets and service data
WAC Core switch packets forwarded through CAPWAP tunnels.
 Service VLAN: transmits service data packets.
⚫ VLAN planning rules:

Access switch
 The management VLAN must be different from service VLANs.
Fit AP Fit AP
 Service VLANs need to map to SSIDs based on service requirements.
Mapping Between Service VLANs and SSIDs (1/2)
SSID:VLAN = 1:1 SSID:VLAN = 1:N
Campus Campus
network network
Area A Area B Area A Area B
SSID: Guest SSID: Guest SSID: Guest SSID: Guest

VLAN: 100 VLAN: 100 VLAN: 100 VLAN: 200
An enterprise needs to provide WLAN coverage for areas A and B. An enterprise needs to provide WLAN coverage for areas A and B.
To allow users to detect only one SSID and use the same data To allow users to detect only one SSID but use different data
forwarding control policy, plan only one SSID and one VLAN. In forwarding control policies, plan one SSID and two VLANs for the
this case, one SSID maps to one VLAN. areas. In this case, one SSID maps to two VLANs.
Mapping Between Service VLANs and SSIDs (2/2)
SSID:VLAN = N:1 SSID:VLAN = N:M
Campus Campus
network network
Area A Area B Area A Area B
SSID: AreaA SSID: AreaB SSID: AreaA SSID: AreaB

VLAN: 100 VLAN: 100 VLAN: 100 VLAN: 200
An enterprise needs to provide WLAN coverage for areas A and B. An enterprise needs to provide WLAN coverage for areas A and B.
To allow users to learn area information upon detecting the WLAN To allow users to learn area information upon detecting the WLAN
but use the same data forwarding control policy, plan one VLAN but use different data forwarding control policies, plan two SSIDs
and two SSIDs (AreaA and AreaB) for the areas. In this case, two and two VLANs for the areas. In this case, two SSIDs map to two
SSIDs map to one VLAN. VLANs.
VLAN Pool Use Case
Problem: entry effect Solution
If a large number of STAs access the network

3
from an area, expanding the corresponding Campus Campus
subnet can ensure that STAs can obtain IP network network
addresses. However, this will expand the
broadcast domain, leading to transmission of
a large number of broadcast packets and
causing network congestion.
Entry area Another area Entry area Another area
SSID: Guest SSID: Guest SSID: Guest SSID: Guest

2 So many STAs in VLAN: 100 (a large VLAN: 200 VLAN pool VLAN pool
this area require a number of IP addresses)
large number of Roaming
IP addresses. • In this scenario, a VLAN pool can be configured to provide
service VLANs.
• The VLAN pool provides the VLAN management and assignment
1 A large number of STAs access the network algorithms. In this way, one SSID can map to multiple VLANs so
from an area and then roam to other areas. that a large number of STAs can be distributed to different
VLANs, narrowing down the broadcast domain.
• This is a special WLAN scenario, in which a large number of STAs access the
network from an area and then roam to other areas. As a result, the number of
STAs in this area increases greatly, requiring a large number of IP addresses.
Typical areas include the entrance of a stadium and the lobby of a hotel.
Therefore, this phenomenon is generally called the entry effect. In this scenario, if
one SSID maps to only one VLAN that maps to one subnet, when a large number
of STAs access the network from an area, expanding the corresponding subnet
can ensure that STAs can obtain IP addresses. However, this may enlarge the
broadcast domain, leading to transmission of a large number of broadcast
packets, such as ARP and DHCP packets, and causing severe network congestion.
In this scenario, a VLAN pool can be configured to provide service VLANs. The
VLAN pool provides the VLAN management and assignment algorithms. In this
way, one SSID can map to multiple VLANs so that a large number of STAs can be
distributed to different VLANs, narrowing down the broadcast domain.
Example for Configuring the WAC + Fit AP Networking (1/2)
⚫ Requirement description:
Router
 An enterprise uses the WAC + Fit AP networking architecture, in which
a WAC is connected to a core switch in off-path mode and
communicates with Fit APs at Layer 3.
 The management VLAN is different from service VLANs. The VLANs
and IP addresses are planned by engineers. Core switch
WAC Service gateway

 The core switch functions as a DHCP server to dynamically allocate IP
addresses to APs and STAs. It also functions as the gateway of service
VLANs.
 The SSID Employee is used to provide wireless Internet access services Access switch Access switch
for employees. The PSK authentication and direct data forwarding
mode are used. Multiple VLANs are allocated for employees.
 The SSID Guest is used to provide wireless Internet access services for
guests. The open-system authentication and tunnel data forwarding AP1 AP2 AP3
mode are used. One VLAN is allocated for guests.
Example for Configuring the WAC + Fit AP Networking (2/2)
⚫ Configuration roadmap:
Start
1. Plan the network. Plan VLANs and IP addresses. Note that the management
VLAN must be different from service VLANs. Plan the network
2. Configure basic network services. Configure VLANs and IP addresses. Configure

DHCP for the management VLAN to which APs belong to dynamically allocate Configure basic network services
IP addresses to APs.
Configure AP onboarding
3. Configure AP onboarding. Configure the CAPWAP protocol to onboard APs.
4. Configure WLAN services for employees. Create SSID Employee and configure
Configure WLAN services for employees
service parameters as required.
5. Configure WLAN services for guests. Create SSID Guest and configure service Configure WLAN services for guests
parameters as required.
6. Check WLAN services. Run the display command to check whether the WLAN Check WLAN services
services run normally, and verify that STAs can access the network.
End
Planning the Network
VLAN ID Description IP Address Segment IP Address
Management network Core switch: 10.1.5.254/24

VLAN 5 10.1.5.0/24
segment for the WAC WAC: 10.1.5.1/24
Core switch: 10.1.6.254/24

Management network AP1: IP address dynamically obtained through DHCP
VLAN 6 10.1.6.0/24
segment for APs AP2: IP address dynamically obtained through DHCP
AP3: IP address dynamically obtained through DHCP
VLAN 10 10.1.10.0/24 Core switch: 10.1.10.254/24
Network services for

VLAN 11 10.1.11.0/24 Core switch: 10.1.11.254/24
employees
VLAN 12 10.1.12.0/24 Core switch: 10.1.12.254/24
VLAN 20 Network services for guests 10.1.20.0/24 Core switch: 10.1.20.254/24
Configuring AP Onboarding
⚫ Configure a DHCP address pool on the core switch and specify the WAC's IP address in DHCP Option 43.
[Core-SW] ip pool ap-pool

[Core-SW-ip-pool-ap-pool] network 10.1.6.0 mask 255.255.255.0
[Core-SW-ip-pool-ap-pool] gateway-list 10.1.6.254
[Core-SW-ip-pool-ap-pool] option 43 sub-option 2 ip-address 10.1.5.1
⚫ Configure the CAPWAP source IP address of the WAC and configure AP onboarding. (The following uses AP1 as an example.)
# Enable the function of establishing CAPWAP DTLS sessions in none authentication mode.
[WAC] capwap dtls no-auth enable
# Configure the CAPWAP source IP address.
[WAC] capwap source ip-address 10.1.5.1
# Set the authentication mode of APs to MAC address authentication and add APs to the AP group.
[WAC] wlan
[WAC-wlan-view] ap auth-mode mac-auth
[WAC-wlan-view] ap-id 0 ap-mac F4DE-AF36-B3E0
[WAC-wlan-ap-0] ap-name AP1
[WAC-wlan-ap-0] ap-group default
[WAC-wlan-ap-0] quit
• The configurations for onboarding AP2 and AP3 are similar to those for
onboarding AP1, and are not mentioned here.
• Add all APs to the AP group default. Set the country code for the AP group based
on the site requirements.
• If DTLS encryption for CAPWAP control tunnels has been enabled, when adding
an AP running a version earlier than V200R021C00 to the AP group, you can
enable the function of establishing CAPWAP DTLS sessions in none
authentication mode to allow the APs to establish DTLS sessions in none
authentication mode so that the APs can properly go online. After the APs go
online, they obtain new DTLS certificates to initiate DTLS sessions in secure mode
and go online again. To ensure network security, disable this function
immediately after the APs go online again to prevent unauthorized APs from
accessing the network.
Checking the AP Onboarding Status
⚫ Run the following command to check the AP status and basic information. If State is displayed as nor, the APs
go online successfully.
[WAC] display ap all

......
-------------------------------------------------------------------------------------------------------------------------------
ID MAC Name Group IP Type State STA Uptime ExtraInfo
-------------------------------------------------------------------------------------------------------------------------------
0 f4de-af36-b3e0 AP1 default 10.1.6.75 AirEngine5760-10 nor 0 13M:37S -
1 f4de-af36-b540 AP2 default 10.1.6.38 AirEngine5760-10 nor 0 13M:4S -
2 b4fb-f9b7-de40 AP3 default 10.1.6.164 AirEngine5760-10 nor 0 12M:42S -
-------------------------------------------------------------------------------------------------------------------------------
Total: 3
Configuring WLAN Services for Employees
⚫ Create an SSID profile and configure an SSID. ⚫ Create a VLAN pool and add VLANs to it.
[WAC] wlan [WAC] vlan pool Employee

[WAC-wlan-view] ssid-profile name Employee [WAC-vlan-pool-Employee] vlan 10 to 12
[WAC-wlan-ssid-prof-Employee] ssid Employee [WAC-vlan-pool-Employee] assignment hash
[WAC-wlan-ssid-prof-Employee] quit [WAC-vlan-pool-Employee] quit
⚫ Create a security profile and configure a security policy. ⚫ Create a VAP profile and bind it to the AP group.
[WAC] wlan [WAC-wlan-view] vap-profile name Employee

[WAC-wlan-view] security-profile name Employee [WAC-wlan-vap-prof-Employee] ssid-profile Employee
[WAC-wlan-sec-prof-Employee] security wpa-wpa2 psk pass-phrase [WAC-wlan-vap-prof-Employee] security-profile Employee
abc12345678 aes [WAC-wlan-vap-prof-Employee] forward-mode direct-forward
[WAC-wlan-sec-prof-Employee] quit [WAC-wlan-vap-prof-Employee] service-vlan vlan-pool Employee
[WAC-wlan-vap-prof-Employee] quit
[WAC-wlan-view] ap-group name default
[WAC-wlan-ap-group-default] vap-profile Employee wlan 1 radio all
• The assignment command is used to configure the VLAN assignment algorithm

in a VLAN pool. By default, the VLAN assignment algorithm is hash in a VLAN
pool.
• When the VLAN assignment algorithm is set to even, service VLANs are assigned
to STAs from the VLAN pool based on the order in which STAs go online. Address
pools mapping the service VLANs evenly assign IP addresses to STAs. If a STA
goes online many times, it obtains different IP addresses.
• When the VLAN assignment algorithm is set to hash, VLANs are assigned to STAs
from the VLAN pool based on the hash result of their MAC addresses. As long as
the VLANs in the VLAN pool do not change, fixed service VLANs are assigned to
STAs. A STA is preferentially assigned the same IP address when going online at
different times.
Configuring WLAN Services for Guests
⚫ Create an SSID profile and configure an SSID. ⚫ Configure the link between the WAC and core switch to allow
packets from the service VLAN of guests to pass through.
[WAC] wlan [WAC] vlan batch 20

[WAC-wlan-view] ssid-profile name Guest [WAC] interface GigabitEthernet 0/0/1
[WAC-wlan-ssid-prof-Guest] ssid Guest [WAC-GigabitEthernet0/0/1] description To_Core_SW
[WAC-wlan-ssid-prof-Guest] quit [WAC-GigabitEthernet0/0/1] port link-type trunk
[WAC-GigabitEthernet0/0/1] port trunk allow-pass vlan 5 20
⚫ Create a security profile and configure a security policy. ⚫ Create a VAP profile and bind it to the AP group.
[WAC] wlan [WAC-wlan-view] vap-profile name Guest

[WAC-wlan-view] security-profile name Guest [WAC-wlan-vap-prof-Guest] ssid-profile Guest
[WAC-wlan-sec-prof-Guest] security open [WAC-wlan-vap-prof-Guest] security-profile Guest
[WAC-wlan-sec-prof-Guest] quit [WAC-wlan-vap-prof-Guest] forward-mode tunnel
Note: Configure a security policy for guests as required. In this [WAC-wlan-vap-prof-Guest] service-vlan vlan-id 20
example, open-system authentication is configured. [WAC-wlan-vap-prof-Guest] quit
[WAC-wlan-view] ap-group name default
[WAC-wlan-ap-group-default] vap-profile Guest wlan 2 radio all
[WAC-wlan-ap-group-default] quit
• Guest traffic is forwarded in tunnel forwarding mode. Guests' service data is

forwarded by the APs to the WAC, which then forwards the data to the service
gateway (located on the core switch in this example). Therefore, the link
between the WAC and core switch must allow packets from related VLANs
(VLAN 20 in this example) to pass through.
• The service VLAN (VLAN 20 in this example) must be created on the WAC.
Checking WLAN Services
⚫ Check the running status of VAPs. (The following uses AP1 as an example.)
[WAC] display vap ap-name AP1

WID : WLAN ID
----------------------------------------------------------------------------------------------------------------------
AP ID AP name RfID WID BSSID Status Auth type STA SSID
----------------------------------------------------------------------------------------------------------------------
0 AP1 0 1 F4DE-AF36-B3E0 ON WPA/WPA2-PSK 0 Employee
0 AP1 0 2 F4DE-AF36-B3E1 ON Open 0 Guest
0 AP1 1 1 F4DE-AF36-B3F0 ON WPA/WPA2-PSK 0 Employee
0 AP1 1 2 F4DE-AF36-B3F1 ON Open 0 Guest
----------------------------------------------------------------------------------------------------------------------
Total: 4
Contents

▫ Fat AP
▫ Leader AP
▫ WAC + Fit AP
◼ Agile Distributed
▫ Navi AC
▫ Mesh
Agile Distributed Networking
⚫ An agile distributed WLAN consists of a WAC and

Room Room Room Room
agile distributed APs. An agile distributed AP is a
special AP, and consists of two independent
RU RU RU
components: central AP and RU.
⚫ The WAC centrally manages the central APs and

PoE cable
Corridor RUs. The central APs are connected to RUs via
Ethernet cables. Central APs do not provide radio
Central AP
functions. Instead, RUs function as radios of central
RU RU RU APs. A Layer 2 reachable tree network must be
deployed between the RUs and central AP.
WAC
Room Room Room Room
• A central AP can be deployed in an equipment room, ELV room, or corridor, and

connects to RUs in rooms via Ethernet cables, providing high-quality wireless
access services.
• The agile distributed networking applies to scenarios with densely distributed
rooms, such as dormitories, hotels, and hospital wards. In these scenarios, if the
WAC + Fit AP architecture is used and an AP is deployed in each room, a large
number of packets will be sent to the WAC, which may become a performance
bottleneck. To eliminate the performance bottleneck and provide independent
signal coverage for each room, APs can be deployed in corridors to transmit
signals to each room through antennas. However, this solution limits the
coverage distance. A longer distance causes higher signal attenuation. In
addition, multiple rooms share one AP, which causes poor signal quality and low
performance.
• The agile distributed networking has the following advantages:
▫ Easy management: Only a few central APs need to be managed. Only 200
APs are required to manage nearly 10,000 rooms (a single central AP can
manage up to 48 RUs).
▫ Flexible deployment and full signal coverage without coverage holes: The
central APs are connected to RUs in rooms via Ethernet cables without wall
penetration loss or feeder loss, providing high-quality signal coverage. The
RUs can be flexibly mounted to wall plates, walls, or ceilings.
▫ Ultra-long-distance coverage: Traditional APs can provide a maximum
coverage distance of 15 m with the help of antennas, while the connection
distance between central APs and RUs using Ethernet cables can reach up
to 100 m. The network coverage scope is therefore expanded by several
times. In addition, central APs can be deployed in corridors and support
ultra-long-distance coverage of over 100 m.
RU Onboarding Process on an AirEngine Series WAC
⚫ RU onboarding process:
Start
1. The central AP goes online. RUs go online only after the central AP goes online.
The onboarding process of the central AP is similar to that of a common AP.
The central AP goes online
2. RUs obtain IP addresses. RUs must be on the same Layer 2 network as the
central AP. RUs have static IP addresses configured or obtain IP addresses
RUs obtain IP addresses
through DHCP.
3. RUs establish CAPWAP tunnels with the WAC. RUs broadcast packets to discover
RUs establish CAPWAP tunnels
the central AP. The central AP returns the IP address of the associated WAC to with the WAC
the RUs. Then, the RUs establish CAPWAP tunnels with the WAC.
4. RUs upgrade their versions. Each RU determines whether its system software RUs upgrade their versions
version is the same as that specified on the WAC according to parameters in the
received packet. If the versions are different, the RU upgrades its version. The WAC delivers service
configurations to RUs
5. The WAC delivers service configurations. The WAC delivers service configurations
to RUs, and the RU then goes online successfully. End
Contents

▫ Fat AP
▫ Leader AP
▫ WAC + Fit AP
◼ Navi AC
▫ Mesh
Navi AC Networking
⚫ A large enterprise needs to deploy a WLAN to provide
Demilitarized zone (DMZ)
wireless access services for both employees and guests.
Navi AC
However, guest data may bring potential security threats
to the network.
Local AC ⚫ In the Navi AC networking, guest traffic can be directed
to a dedicated WAC for centralized management, which
Authentication server is isolated from employee traffic for security purposes.
for guests
The dedicated WAC is called Navi AC, and the original
WAC that manages APs is called local AC.
Intranet
authentication ⚫ The local AC centrally manages APs, and the Navi AC
server
CAPWAP tunnel 1 authenticates identities of guest STAs and forwards their
SSID1: Employee service data. A CAPWAP tunnel is established between
SSID2: Guest CAPWAP tunnel 2
the local AC and Navi AC to forward guests' service data.
Employee STA Guest STA
• The Demilitarized Zone (DMZ) is an independent zone on an enterprise network

and is isolated from the enterprise intranet. Generally, specific services on the
enterprise network are deployed in the DMZ, for example, the server that
provides web services for external networks, Navi AC, and guest authentication
server.
Example for Configuring the Navi AC Networking (1/2)
 An enterprise deploys a WLAN to provide wireless Internet
DMZ
access services for both employees and guests. Employees Navi AC
use the SSID Employee, and guests use the SSID Guest.
 The enterprise uses the Navi AC networking to implement 10.1.99.1/24
Local AC
isolation between employee traffic and guest traffic,
ensuring network security.
10.1.5.1/24 Authentication
 VLAN 100 is planned for guest services. The Navi AC server for guests
functions as a DHCP server to allocate IP addresses to
guest STAs. Intranet
authentication server
 Guests' service data is forwarded in tunnel forwarding
CAPWAP tunnel 1
mode and sent by the local AC to the Navi AC for SSID1: Employee
centralized management. SSID2: Guest CAPWAP tunnel 2
 The IP address of the local AC is 10.1.5.1/24, and that of

Employee STA Guest STA
the Navi AC is 10.1.99.1/24.
Example for Configuring the Navi AC Networking (2/2)
⚫ Configuration roadmap
Start
1. Plan and configure basic network data. Plan VLANs and IP addresses to
ensure that the local AC can communicate with the Navi AC at Layer 3. Plan and configure basic network
data
2. Configure AP onboarding to ensure that the APs go online successfully
on the local AC. Configure AP onboarding
3. Configure the Navi AC function. Specify the Navi AC on the local AC and
specify the local AC on the Navi AC. Configure the Navi AC function
4. Configure WLAN services for guests on the local AC and set the guest
Configure WLAN services for
service type to service-navi. guests on the local AC
5. Configure WLAN services for guests on the Navi AC (the service

Configure WLAN services for
parameter settings must be the same as those on the local AC) and guests on the Navi AC
bind the services to the local AC.

Verify the Navi AC function
6. Verify the Navi AC function.
End
Configuring the Navi AC Function
⚫ Specify the Navi AC on the local AC.
[Local_AC] capwap source ip-address 10.1.5.1

[Local_AC] wlan
[Local_AC-wlan-view] navi-ac ac-id 1 ip-address 10.1.99.1 description Navi_AC
⚫ Enable the Navi AC function on the Navi AC and specify the local AC.
[Navi_AC] capwap source ip-address 10.1.99.1

[Navi_AC] wlan
[Navi_AC-wlan-view] navi-ac enable
[Navi_AC-wlan-view] navi-ac
[Navi_AC-wlan-view-navi-ac] local-ac ac-id 1 ip-address 10.1.5.1 description Local_AC
• The default role of a WAC is local AC. After the navi-ac enable command is
configured, the WAC becomes a Navi AC.
• The CAPWAP source IP addresses must be specified on both the local AC and
Navi AC and must be reachable to each other.
• The ac-id parameter is specified to identify the local ID of the local AC or Navi
AC. The value ranges from 0 to 15.
Configuring WLAN Services for Guests on the Local AC and
Navi AC
⚫ Configure WLAN services for guests on the local AC. ⚫ Configure WLAN services for guests on the Navi AC.
[Local_AC-wlan-view] vap-profile name Guest [Navi_AC-wlan-view] vap-profile name Guest

[Local_AC-wlan-vap-prof-Guest] ssid-profile Guest [Navi_AC-wlan-vap-prof-Guest] ssid-profileGuest
[Local_AC-wlan-vap-prof-Guest] service-vlan vlan-id 100 [Navi_AC-wlan-vap-prof-Guest] service-vlan vlan-id 100
[Local_AC-wlan-vap-prof-Guest] security-profile Guest [Navi_AC-wlan-vap-prof-Guest] security-profile Guest
[Local_AC-wlan-vap-prof-Guest] forward-mode tunnel [Navi_AC-wlan-vap-prof-Guest] forward-mode tunnel
[Local_AC-wlan-vap-prof-Guest] type service-navi navi-ac-id 1 navi- [Navi_AC-wlan-vap-prof-Guest] navi-ac service-vlan-check enable
wlan-id 1 [Navi_AC-wlan-vap-prof-Guest] quit
[Local_AC-wlan-vap-prof-Guest] quit [Navi_AC-wlan-view] navi-ac
[Local_AC-wlan-view] ap-group name default [Navi_AC-wlan-view-navi-ac] local-ac ac-id 1
[Local_AC-wlan-ap-group-default] vap-profile Guest wlan 1 radio all [Navi_AC-wlan-view-navi-local-ac-1] vap-profile Guest wlan 1
• The VAP service parameter settings on the local AC must be the same as those
on the Navi AC.
• The type service-navi command sets the VAP type to Navi AC. When the VAP
type is Navi AC, local traffic can be diverted to a specified WAC (Navi AC), which
can implement security, control, and management functions for STAs, such as
identity authentication, authorization, and accounting. The local AC provides
centralized AP management and coordination functions, for example, STA
onboarding and configuration delivery.
• On the local AC, the value of the navi-wlan-id parameter in the type service-navi
command must be the same as the value of the wlan-id parameter in the vap-
profile profile-name wlan wlan-id command.
• The navi-ac service-vlan-check enable command enables service VLAN check on

the Navi AC. After this function is enabled, a STA is allowed to go online on the
Navi AC only when the STAs' access VLAN (service VLAN on the local AC) meets
the following conditions:
▫ The STA's access VLAN is the same as the service VLAN on the Navi AC.
▫ The STA's access VLAN is in the service VLAN pool configured in the VAP
profile on the Navi AC.
▫ The STA's access VLANs (all VLANs in a VLAN pool) belong to the service
VLAN pool configured in the VAP profile on the Navi AC.
Verifying the Navi AC Function
⚫ Check the running status of the local AC and Navi AC. ⚫ Check Navi VAP information and STA access information on
the Navi AC.
[Local_AC] display navi-ac run-status all [Navi_AC] display navi-ac vap all
Current role:local WID : WLAN ID
------------------------------------------------------------------------------- -----------------------------------------------------------------------------
AC ID AC IP Mac Role Status STA Description AC ID AC IP AC MAC WID Status Auth type STA SSID
------------------------------------------------------------------------------- -----------------------------------------------------------------------------
1 10.1.99.1 642c-ac86-7dd6 navi normal 1 Navi_AC 1 10.1.5.1 642C-AC86-7DCD 1 ON Open 1 Guest
------------------------------------------------------------------------------- -----------------------------------------------------------------------------
Total:1 Total: 1
[Navi_AC] display navi-ac run-status all [Navi_AC] display navi-ac station all
Current role:navi WLAN: WLAN ID
------------------------------------------------------------------------------ ----------------------------------------------------------------------
AC ID AC IP Mac Role Status STA Description STA MAC AC ID WLAN VLAN IPv4 address SSID
------------------------------------------------------------------------------ ----------------------------------------------------------------------
1 10.1.5.1 642c-ac86-7dcd local normal 0 Local_AC 081f-7153-901b 1 1 100 10.1.100.110 Guest
------------------------------------------------------------------------------ ----------------------------------------------------------------------
Total:1 Total: 1
Contents

▫ Fat AP
▫ Leader AP
▫ WAC + Fit AP
▫ Navi AC
◼ Mesh
Introduction to Mesh Technology
⚫ A WMN is a dynamic self-organizing, auto-configured network that consists of multiple wirelessly connected APs
in a mesh topology and connects to a wired network through one or multiple portal nodes.
⚫ A WMN has the following advantages:
Various application High cost-

Fast deployment High robustness Flexible networking
scenarios effectiveness
Building a traditional A WMN is a self- An AP can join or leave a In addition to traditional On a WMN, only portal
LAN requires a long organizing network that WMN at any time as WLAN scenarios such as nodes need to connect to
period of time. In is not affected by a required, allowing for office spaces and a wired network. This
contrast, building a failure of a single node. flexible networking. campuses, a WMN also reduces investments on
WMN takes only a few If a node fails, data As more mesh nodes are applies to scenarios such wired devices, cables,
hours, as it requires only packets are forwarded to deployed on a WMN, the as large-scale and engineering.
APs to be installed. warehouses, docks,
the destination node WMN coverage area can
along the backup path. be rapidly expanded. MANs, metro lines, and
emergency
communications.
• On a traditional WLAN, APs exchange data with STAs using wireless channels
and connect to a wired network through uplinks. If no wired network is available
before a WLAN is constructed, it takes much time and money to construct a
wired network. If positions of some APs on a WLAN are adjusted, the wired
network must be adjusted accordingly, increasing the difficulty in network
adjustment. A traditional WLAN requires a long construction period and high
costs, and has poor flexibility and poor flexibility, so it does not apply to
emergency communications, wireless MANs, or areas with weak wired network
infrastructure. The construction of a WMN requires only APs to be installed,
which greatly speeds up network construction.
Basic Concepts of Mesh
• Mesh point (MP): a mesh-capable node that uses IEEE 802.11 MAC and PHY protocols
for wireless communication. This node supports automatic topology discovery,
automatic route discovery, and data packet forwarding. An MP can provide both mesh
services and user access services.
MPP • Mesh portal point (MPP): an MP that connects a WMN to other types of networks. This
node provides the portal function to allow mesh nodes to communicate with external
networks.
• Neighboring MP: an MP that directly communicates with another MP or MPP.

MP MP MP
• Candidate MP: a neighboring MP with which an MP prepares to establish a mesh link.
• Peer MP: a neighboring MP that has established a mesh link with an MP.
Key Points for WMN Design
• MPP deployment:
 The MPP needs to connect to MPs over the air interface. Therefore, the MPP
deployment position must be determined based on the convenience of
connecting to the wired network and the line of sight (LOS) conditions for
connecting to each MP.
• Planning and design:

MPP
 Backhaul channel selection: To ensure high throughput and good user experience,
5 GHz channels with better air interface quality are often used as backhaul
channels. To prevent channel switching from affecting backhaul services, do not
MP MP MP use radar channels as backhaul channels.

 Frequency bandwidth selection: The 40 MHz or 80 MHz frequency bandwidth is
recommended for backhaul links to provide a high backhaul speed. The network
between MPs and STAs can use the 2.4 GHz or 5 GHz frequency band to
implement signal coverage. Generally, the 20 MHz frequency bandwidth is used.
Mesh Networking Mode — Mesh Wireless Bridging
⚫ In the following figure, AP1 to AP3 provide network access services for wired and wireless users. The three APs,
however, cannot access the Internet in wired mode because of geographical or environmental restrictions. To
address this issue, AP1 to AP3 can work with AP4 to construct a WMN so that wireless users can connect to the
Internet.
AP1
AP2 AP4 WAC
Access switch
AP3
Mesh Networking — WMN with One MPP
⚫ In the following figure, AP2 to AP5 provide network access services for wireless users, and AP1 provides users with
wired access to the Internet. AP1 to AP5 are meshed to establish a secure, auto-configured, and self-healing WMN.
This networking mode facilitates fast and cost-effective WLAN deployment in outdoor environments where cabling
is difficult.
AP4 AP2
AP1 WAC
AP5 AP3
Mesh Networking — WMN with Multiple MPPs
⚫ In the following figure, AP1 and AP11 provide users with wired access to the Internet. AP2 to AP5 provide network access services
for wired and wireless users in Area 1, and AP7 to AP10 provide network access services for wired and wireless users in Area 2.
AP6 resides in the overlapping area between Area 1 and Area 2.
AP4 AP2
AP1
Area 1
AP5 AP3
AP6
AP9 AP7 WAC
Area 2
AP11
AP10 AP8
Example for Configuring the Mesh Networking (1/2)
Core switch
 An enterprise uses the WAC + Fit AP networking architecture,
WAC
in which a WAC is connected to a core switch in off-path
mode and communicates with Fit APs at Layer 3.
 AP4 and AP5 use the mesh networking because cabling is
inconvenient for them. Access switch Access switch
 AP3 functions as an MPP, and AP4 and AP5 function as MPs.

 Mesh links need to provide security encryption mechanisms.
MPP
 5 GHz channels with the 40 MHz frequency bandwidth are
AP1 AP2 AP3
used as the channels for mesh backhaul.
 The distance between AP3 and AP4 and between AP3 and AP5
is about 120 m.
MP
MP
AP4 AP5
Example for Configuring the Mesh Networking (2/2)
⚫ Configuration roadmap:
Configure MPP and MP roles
1. Configure MPP and MP roles. Configure an AP system profile and AP
groups. Specify AP3 as an MPP and AP4 and AP5 as MPs.
Configure the MPP to go online
2. Configure the MPP to go online and create a security profile for mesh
links. For details, see "WAC + Fit AP Networking".
Configure a security profile for
mesh links
3. Configure a mesh profile that defines a WMN ID and a mesh whitelist
that defines a list of neighbors that are allowed to establish mesh links
Configure a mesh profile and a
with them. mesh whitelist
4. Configure mesh service parameters, including the channel, frequency Configure mesh service
bandwidth, and coverage distance of mesh links. parameters
5. Bind the mesh profile and mesh whitelist to the AP groups, so that the Bind the mesh profile and mesh
APs can automatically discover mesh neighbors and establish mesh links whitelist to AP groups
with them.
Mesh links are established
successfully
Basic Configurations for the Mesh Networking (1/2)
⚫ Create an AP system profile and an AP group for ⚫ Create an AP system profile and an AP group for MPs,
MPPs, and specify AP3 as an MPP. and specify AP4 and AP5 as MPs.
[WAC-wlan-view] ap-system-profile name sys-mpp [WAC-wlan-view] ap-system-profile name sys-mp

[WAC-wlan-ap-system-prof-sys-mpp] mesh-role mesh-portal [WAC-wlan-ap-system-prof-sys-mp] mesh-role mesh-node
[WAC-wlan-view] ap-group name mesh-mpp [WAC-wlan-view] ap-group name mesh-mp
[WAC-wlan-ap-group-mesh-mpp] ap-system-profile sys-mpp [WAC-wlan-ap-group-mesh-mp] ap-system-profile sys-mp
[WAC-wlan-view] ap-id 2 ap-mac b4fb-f9b7-de40 [WAC-wlan-view] ap-id 3 ap-mac f898-ef7f-b400
[WAC-wlan-ap-2] ap-name AP3 [WAC-wlan-ap-3] ap-name AP4
[WAC-wlan-ap-2] ap-group mesh-mpp [WAC-wlan-ap-3] ap-group mesh-mp
⚫ Configure a security profile for mesh links. ⚫ Create a mesh profile and bind the security profile
for mesh links to it.
[WAC-wlan-view] security-profile name mesh [WAC-wlan-view] mesh-profile name mesh
[WAC-wlan-sec-prof-mesh] security wpa2 psk pass-phrase a12345678 [WAC-wlan-mesh-prof-mesh] mesh-id mesh-net
aes [WAC-wlan-mesh-prof-mesh] link-aging-time 30
[WAC-wlan-mesh-prof-mesh] security-profile mesh
[WAC-wlan-mesh-prof--mesh] quit
• In the command for creating a mesh profile, the mesh-id parameter specifies a
WMN ID. In this example, the WMN ID is set to mesh-net.
Basic Configurations for the Mesh Networking (2/2)
⚫ Configure a mesh whitelist. ⚫ Configure mesh service parameters. (The following uses AP
group mesh-mpp as an example. The configuration for AP group
mesh-mp is similar.)
[WAC-wlan-view] mesh-whitelist-profile name mesh-list [WAC-wlan-view] ap-group name mesh-mpp

[WAC-wlan-mesh-whitelist-mesh-list] peer-ap mac b4fb-f9b7-de40 [WAC-wlan-ap-group-mesh-mpp] radio 1
[WAC-wlan-mesh-whitelist-mesh-list] peer-ap mac f898-ef7f-b400 [WAC-wlan-group-radio-mesh-mpp/1] calibrate auto-channel-select disable
[WAC-wlan-mesh-whitelist-mesh-list] peer-ap mac 60f1-8a9c-2b40 [WAC-wlan-group-radio-mesh-mpp/1] calibrate auto-txpower-select disable
[WAC-wlan-mesh-whitelist-mesh-list] quit [WAC-wlan-group-radio-mesh-mpp/1] channel 40mhz-plus 157
[WAC-wlan-group-radio-mesh-mpp/1] coverage distance 2
⚫ Bind the mesh profile and mesh whitelist to radio 1 of APs in the AP groups mesh-mpp and mesh-mp.
[WAC-wlan-view] ap-group name mesh-mpp [WAC-wlan-view] ap-group name mesh-mp

[WAC-wlan-ap-group-mesh-mpp] radio 1 [WAC-wlan-ap-group-mesh-mp] radio 1
[WAC-wlan-group-radio-mesh-mpp/1] mesh-profile mesh [WAC-wlan-group-radio-mesh-mp/1] mesh-profile mesh
[WAC-wlan-group-radio-mesh-mpp/1] mesh-whitelist-profile [WAC-wlan-group-radio-mesh-mp/1] mesh-whitelist-profile mesh-list
mesh-list [WAC-wlan-group-radio-mesh-mp/1] quit
[WAC-wlan-group-radio-mesh-mpp/1] quit [WAC-wlan-ap-group-mesh-mp] quit
[WAC-wlan-ap-group-mesh-mpp] quit
Checking Mesh Link Information
⚫ After mesh services take effect, run the display wlan mesh link all command to check mesh link information.
<WAC> display wlan mesh link all

Rf : radio ID Dis : coverage distance(100m)
Ch : channel Per : drop percent(%)
TSNR : total SNR(dB) P- : peer
Mesh : Mesh mode Re : retry ratio(%)
RSSI : RSSI(dBm) MaxR : max RSSI(dBm)
--------------------------------------------------------------------------------------------------------------------
APName P-APName P-APMAC Rf Dis Ch Mesh P-Status RSSI MaxR Per Re TSNR SNR(Ch0~3:dB) Tx(Mbps) Rx(Mbps)
--------------------------------------------------------------------------------------------------------------------
AP3 AP5 60f1-8a9c-2b40 1 2 157 portal normal -13 -10 0 1 67 66/59/-/- 400 400
AP3 AP4 f898-ef7f-b400 1 2 157 portal normal -18 -18 0 3 67 66/59/-/- 400 400
AP4 AP5 60f1-8a9c-2b40 1 2 157 node normal -14 -12 0 4 64 58/63/-/- 400 400
AP4 AP3 b4fb-f9b7-de40 1 2 157 node normal -20 -20 0 4 64 58/63/-/- 400 400
AP5 AP4 f898-ef7f-b400 1 2 157 node normal -12 -1 0 6 69 68/62/-/- 400 400
AP5 AP3 b4fb-f9b7-de40 1 2 157 node normal -13 -2 0 4 69 68/62/-/- 400 400
--------------------------------------------------------------------------------------------------------------------
Total: 6
Contents
Small and Micro Enterprises and Small Stores
Solution description
⚫ In the single-AP networking, a Fat AP functions as the gateway

and Internet egress device for STAs.
Fat AP
⚫ This networking applies to small and micro enterprises and stores
with small areas.
⚫ The number of concurrent online STA is usually less than 50.
⚫ Only wireless user access is required, and roaming is not

STA required.
⚫ STAs have simple Internet access requirements.
Small Enterprises
⚫ Multiple APs are connected to the network through a switch,
providing a larger wireless coverage area than a single AP. In addition,
the switch can provide network access for wired terminals.
⚫ The leader AP networking is used to implement centralized AP

management and configuration and support WLAN roaming.
⚫ This networking applies to small and midsize experience stores and

Leader AP
logistics stores. It also applies to small enterprises that require
wireless coverage and access of a certain number of wired terminals
such as monitoring devices and printers.
⚫ If there are special Internet access requirements, an independent

gateway is generally used as the Internet egress device.
Small and Midsize Enterprises
WAN
Branch
⚫ The HQ and branches of an enterprise are
HQ
interconnected across a wide area network (WAN)
and internal network connectivity is implemented
through routing protocols. A WAC and an
authentication server are deployed in the HQ. The
WAC manages all Fit APs in the HQ and branches.
Authentication WAC
server ⚫ Fit APs in the HQ can use the direct or tunnel
forwarding mode as required.
Fit AP
⚫ Fit APs in branches usually use the local
Fit AP Fit AP forwarding mode. Users are assigned IP addresses
by branch gateways and directly access Internet
resources through branch egresses.
Large and Midsize Enterprises
WAN Solution description
HQ Branch ⚫ The HQ and branches of an enterprise

are interconnected across a WAN, and
internal network connectivity is
implemented through routing protocols.
⚫ WACs are deployed in the HQ and

Authentication HQ WAC Branch WAC branches to manage Fit APs in the HQ
server
and branches, respectively.
Fit AP ⚫ Generally, the authentication server is
deployed only in the HQ.
Fit AP Fit AP
⚫ This networking applies to large and
midsize enterprises and branches.
Large Campuses with Standalone WACs
Egress zone Heartbeat
Server zone ⚫ If a wired network has been deployed for a large campus
and a wireless network needs to be deployed, or the
DC
wireless network scale is large, you are advised to deploy
Core layer
standalone WACs.
Active WAC Standby WAC ⚫ Generally, the WACs are connected to the aggregation or
core switches in off-path mode.
Eth-Trunk
Aggregation
layer
⚫ To reduce changes to the existing wired network and
enable the WACs to centrally manage and control wireless
traffic, the tunnel forwarding mode is recommended.
Access layer
⚫ To improve WAC reliability, the standalone WACs are
Fit AP Fit AP typically deployed in HSB mode.
Quiz
1. (Single-answer question) An enterprise WLAN does not have heavy user traffic or traffic
bottlenecks. To ensure WLAN security, the enterprise expects to centrally manage WLAN
data. Which of the following networking modes is applicable to this scenario? ( )
A. WAC off-path networking + direct data forwarding
B. WAC off-path networking + tunnel data forwarding
C. Layer 3 networking + direct data forwarding
D. Layer 2 networking + direct data forwarding
1. B
Summary
⚫ This course describes common WLAN networking architectures, including Fat AP, leader AP,
WAC + Fit AP, agile distributed, Navi AC, and mesh.
⚫ Upon completing this course, you will be able to understand common WLAN networking
architectures and construct suitable WLANs based on site environments and actual
requirements.
Recommendations
⚫ Huawei official websites:
 Enterprise service: https://e.huawei.com/en/
 Technical support: https://support.huawei.com/enterprise/en/index.html
 Online learning: https://www.huawei.com/en/learning
Acronyms and Abbreviations (1/2)
Acronym/Abbreviation Full Name

AGV Automated Guided Vehicle
AP Access Point
CAPWAP Control and Provisioning of Wireless Access Points
DHCP Dynamic Host Configuration Protocol
DMZ Demilitarized Zone
DTLS Datagram Transport Layer Security
IP Internet Protocol
MAC Media Access Control
MP Mesh Point
MPP Mesh Portal Point

NAT Network Address Translation
RADIUS Remote Authentication Dial-In User Service
RU Remote Unit
SSID Service Set Identifier
STA Station
URL Uniform Resource Locater
VLAN Virtual Local Area Network

WAC Wireless Access Controller
WLAN Wireless Local Area Network
WMN Wireless Mesh Network
Thank you. 把数字世界带入每个人、每个家庭、
每个组织，构建万物互联的智能世界。
Bring digital to every person, home, and
organization for a fully connected,
intelligent world.
Copyright© 2022 Huawei Technologies Co., Ltd.

All Rights Reserved.
The information in this document may contain predictive

statements including, without limitation, statements regarding
the future financial and operating results, future product
portfolio, new technology, etc. There are a number of factors that
could cause actual results and developments to differ materially
from those expressed or implied in the predictive statements.
Therefore, such information is provided for reference purpose
only and constitutes neither an offer nor an acceptance. Huawei
may change the information at any time without notice.
WLAN Reliability Technologies
Foreword
⚫ With the popularization of mobile applications, wireless local area networks (WLANs) are
carrying more and more services. It is becoming increasingly important to ensure network
stability and reliability. In practice, however, network faults and service interruption are
almost inevitable and affect services. An effective way to ensure system reliability is to
improve fault tolerance capabilities of the system, speed up fault recovery, and reduce the
impact of faults on services.
⚫ This course introduces you to Huawei WLAN reliability solutions, including Virtual Router
Redundancy Protocol (VRRP) hot standby (HSB), dual-link cold backup, and N+1 backup,
CAPWAP link failover.
Objectives
 Describe common WLAN reliability networking modes.
 Know how to configure WLAN reliability solutions.
Contents
1. WLAN Reliability Technology Overview
2. VRRP HSB
3. Dual-Link HSB
4. Dual-Link Cold Backup
5. N+1 Backup
WLAN Reliability Technology Overview
⚫ On live networks, faults caused by various factors are inevitable. Reliability technologies focus on quickly recovering
networks from faults. Depending on methods for resolving network faults, WLAN reliability technologies are
categorized as fault detection or protection switching technologies.
Fault detection: focusing on fault detection and diagnosis
BFD EFM
Two network devices establish a Bidirectional Devices periodically exchange detection

Forwarding Detection (BFD)session and packets to report the link status. Ethernet in
periodically send BFD control packets to the First Mile (EFM) supports the following
detect the availability of the link between functions: peer discovery, link monitoring,
them. fault notification, and remote loopback.
Protection switching: focusing on network fault recovery
VRRP HSB Dual-link HSB Dual-link cold backup N+1 backup
Multiple devices are Two WACs are used to Two WACs are used to
virtualized into one gateway. manage the same APs and manage the same AP. One WAC functions as the
When the master device fails, back up STA information. When the active WAC is standby WAC to provide
traffic is quickly switched to When the active WAC is faulty, the standby WAC backup services for
the backup device to ensure faulty, the standby WAC replaces the active WAC multiple active WACs.
continuous forwarding. takes over services. to manage the AP.
• BFD is a standard link detection protocol based on UDP. It is used to quickly

detect and monitor the link status on the network, regardless of direct or indirect
links.
• EFM is a protocol working at the data link layer and is used to detect the
connectivity of direct links.
• This courses focuses on the device protection switching technology. Therefore,

fault detection technologies are not mentioned here.
Comparison of WAC Backup Modes
Item VRRP HSB Dual-Link HSB Dual-Link Cold Backup N+1 Backup
The master and backup WACs Each AP sets up a primary and a
configured with VRRP have secondary CAPWAP link with the Each AP sets up a primary and a
independent IP addresses and active and standby WACs, secondary CAPWAP link with the Each AP sets up a CAPWAP link with
Implementation
share a virtual IP address. Each respectively. active and standby WACs, only one WAC.
AP sets up a CAPWAP link with The active and standby WACs respectively.
this virtual IP address. back up STA information.
The AP status switchover is slow The AP status switchover is slow The AP status switchover is slow and
and occurs only when CAPWAP and occurs only when CAPWAP occurs only when CAPWAP link
Switchover The switchover is fast and has link disconnection timeout is link disconnection timeout is disconnection timeout is detected. APs
speed little impact on services. detected. After the AP status is detected. STAs need to go online and STAs need to go online again, and
switched, STAs do not need to again, and services are interrupted services are interrupted for a short
go offline and online again. for a short period of time. period of time.
This backup mode supports only
Load balancing the active/standby mode but not This backup mode supports both the active/standby and load balancing modes.
the load balancing mode.
Deployment of
WACs at Not supported Supported Supported Supported
different places
The software versions of the two The models and software versions of
The models and software The models and software
WACs must be the same. No the master and backup WACs can be
Constraints versions of the two WACs must versions of the two WACs must
constraint is placed on the WAC different. However, it is recommended
be the same. be the same.
model. that they be the same for the WACs.
Scenarios with high reliability Scenarios with high reliability Scenarios with low reliability
Application requirements requirements Scenarios with low reliability requirements
scope Geographically centralized WAC Geographically separate WAC requirements Scenarios with high cost control
deployment deployments requirements
Contents
2. VRRP HSB
3. Dual-Link HSB
5. N+1 Backup
VRRP Overview
⚫ Virtual Router Redundancy Protocol (VRRP) is a fault tolerance protocol that enables a standby router to
automatically replace a faulty active router — the next hop of a host (default gateway). In this way, the standby
router can forward packets if a fault occurs, thereby ensuring the continuity and reliability of network
communication. Routers in a VRRP group play two roles: master and backup.
⚫ When Router A is working properly:

 Router A functions as the master device in the VRRP group and
Router A Router B is responsible for forwarding data traffic.
Master Backup
⚫ When Router A is faulty:
VRRP group
 Router B detects VRRP heartbeat timeout and is elected as the
Primary link Secondary link
new master device.
Switch
 Router B sends a gratuitous ARP packet. After receiving the
packet, the switch updates its MAC address table.
Intranet host
 Router B responds to users' ARP requests and forwards traffic.
• VRRP group: A group of routers in the same broadcast domain form a virtual
router, namely, a VRRP group. It provides a virtual IP address as the gateway
address of the intranet to implement gateway redundancy.
• When the master device is working properly, hosts on the network communicate
with external networks through the master device. If the master device fails, the
backup device becomes the new master device and takes over packet forwarding
to ensure network continuity.
▫ Master: indicates the master state. A device whose VRRP group state is
Master is called the master device. The master device is the owner of the
virtual IP address and virtual MAC address of the VRRP group. When the
master device receives an ARP request with the destination IP address being
the virtual IP address, it responds to the ARP request. Among multiple
routers in the same VRRP group, only one router is in active state, and only
the master router can forward the packets with the virtual IP address as the
next hop.
▫ Backup: indicates the backup state. A device whose VRRP group state is
Backup is called a backup device. The backup device does not respond to
ARP requests with the destination IP address being the virtual IP address.
Among the routers in the same VRRP group, all the routers except the
master router are backup routers. When the master device fails, a new
master device is elected from the remaining backup devices.
▫ Master election rules: The device with a higher priority (ranging from 0 to
255) is elected as the master device. If all devices have the same priority,
the device with a larger interface IP address is elected as the master device.
The running priority of the master device then automatically changes to
255.
• When Router A is working properly, the traffic forwarding process is as follows:
▫ Router A sends a gratuitous ARP packet that contains the VRRP virtual IP
address and virtual MAC address.
▫ The switch updates its MAC address table. That is, in the MAC address
table, the virtual MAC address is mapped to the interface that receives the
gratuitous ARP packet.
▫ An intranet user sends an ARP request to query the gateway address, which
is the virtual IP address.
▫ Router A responds to the ARP request by sending the virtual MAC address
to the user.
▫ Traffic from the intranet user is sent to the gateway, Router A. The intranet
user sends traffic to the virtual MAC address, and the switch forwards the
traffic to Router A based on the MAC address table.
• When Router A is faulty, the traffic forwarding process is as follows:
▫ If Router B does not receive VRRP packets from Router A within three
packet sending intervals, Router B automatically becomes the new master.
▫ Router B sends a gratuitous ARP packet that contains the VRRP virtual IP
address and virtual MAC address.
▫ The switch updates its MAC address table. That is, in the MAC address
table, the virtual MAC address is mapped to the interface that receives the
gratuitous ARP packet.
▫ An intranet user sends an ARP request to query the gateway address, which
is the virtual IP address.
▫ Router B responds to the ARP request by sending the virtual MAC address
to the user.
▫ Traffic from the intranet user is sent to the gateway, Router B. The intranet
user sends traffic to the virtual MAC address, and the switch forwards the
traffic to Router B based on the MAC address table.
VRRP HSB Solution
⚫ VRRP hot standby (HSB) is implemented through VRRP and HSB.
WAC1 HSB channel WAC2

⚫ VRRP virtualizes two physical WACs into one WAC. An AP can only detect
10.1.5.1 10.1.5.2 the existence of the virtual WAC and establish a CAPWAP tunnel with the
Master Backup
virtual WAC.
VRRP
⚫ In VRRP HSB, one WAC functions as the active WAC and the other
functions as the standby WAC. Generally, the active and standby WACs are
Virtual WAC
Switch 10.1.5.3/24 deployed in the same geographical location, and the active/standby
switchover is fast.
⚫ HSB establishes a TCP-based HSB channel between the active and standby
Switch WACs to implement data synchronization and backup.
⚫ VRRP HSB supports wireless configuration synchronization. A dedicated

CAPWAP tunnel (not an HSB channel) can be established between the
CAPWAP tunnel
AP active and standby WACs to synchronize wireless configuration data from
the active WAC to the standby WAC.
• VRRP virtualizes the master and backup WACs into one WAC on a Layer 2
network.
• HSB backs up the following data between the active and standby WACs:
▫ AP entries
▫ AP entries
▫ CAPWAP tunnel information
▫ DHCP address allocation information
• The HSB channel can be carried by the direct physical link between two WACs or
by a switch. For example, the HSB channel can reuse the physical channel
through which VRRP packets are exchanged.
• VRRP HSB supports only the active/standby networking but not the load
balancing networking.
HSB Mechanism
⚫ Data backup between WACs is implemented through HSB. HSB ensures that session entries on the active and
standby WACs are consistent. This ensures that sessions are not interrupted during an active/standby switchover.
⚫ HSB provides two types of public services:
 HSB service: establishes and maintains a TCP-based HSB channel for service exchange of service modules, and notifies the
service modules of channel connect/disconnect events.
 HSP group: instructs service modules to perform batch, real-time, or periodic backup. An HSB group depends on the TCP-based
channels provided by the HSB service, and can work properly only after being bound to the HSB service. In addition, the HSB
group needs to be bound to the VRRP group. The HSB group negotiates the master/backup status of service modules based on
the VRRP status.
Physical HSB channel Standby WAC
Active WAC
TCP-based HSB channel
HSB service HSB service
Bound Bound
Bound Bound
VRRP group HSB group HSB group VRRP group
• HSB service module: establishes and maintains an HSB channel, and notifies the
related service modules of channel connect/disconnect events. An HSB service
establishes active and standby channels based on TCP. The TCP port number
ranges from 10240 to 49152.
• HSB group module:
▫ An HSB group is bound to a VRRP instance, and the active and standby
instances are negotiated using the VRRP mechanism.
▫ It is responsible for active/standby negotiation, batch, real-time, or periodic

backup, and instructs service modules to back up service information.
• Service module: responds to active/standby events in service modules, and

performs batch, real-time, or periodic backup.
• Currently, the WAC supports the configurations of only one HSB service and one
HSB group.
• HSB heartbeat packets are frequently exchanged between the active and standby
WACs, and directly affect the working and negotiation results of the active and
standby WACs. To ensure normal running of the HSB system and prevent backup
data loss, it is recommended that an independent physical link be planned for the
HSB channel.
Working Process of VRRP HSB
⚫ Master/backup negotiation: Two WACs send VRRP packets
WAC1 HSB channel WAC2 carrying priority information on a Layer 2 network for
10.1.5.1 10.1.5.2
negotiation.
Master Backup
VRRP ⚫ Data backup: VRRP HSB backs up STA entries, AP entries,
and CAPWAP link information in batch, real-time, or
Virtual WAC periodic mode.
Switch 10.1.5.3/24
⚫ Active/standby switchover: When the master WAC, the

downlink of the master WAC, or the uplink of the master
Switch WAC fails, an active/standby switchover is triggered.
⚫ Active/standby switchback: When the link of the original

CAPWAP tunnel master WAC recovers, the active/standby switchback is
AP
triggered in preemption mode.
• HSB supports the batch, real-time, and periodic backup modes for data
synchronization.
▫ Batch backup: When the active and standby devices are determined, the
active device synchronizes the existing session entries to the new standby
device at a time to ensure that the session entries on the active and
standby devices are the same.
▫ Real-time backup: When the active device generates new session entries or
modifies existing session entries, it synchronizes new or modified session
entries to the standby device in real time.
▫ Periodic backup: To ensure that entries on the active and standby devices
are consistent, the standby device checks whether session entries are the
same as those on the active device at an interval of 30 minutes. If session
entries are inconsistent, the session entries on the active device are updated
to the standby device.
• Active/standby switchover: Three common scenarios may trigger an
active/standby switchover.
▫ The active WAC is faulty. This causes the disconnection of the HSB channel.
By default, HSB heartbeat packets are sent at an interval of 3 seconds and
the number of detection times is 5. Therefore, after about 15 seconds, the
standby WAC takes over the work of the active WAC.
▫ The downlink of the active WAC is faulty. This causes the VRRP status
switching. After about 6 seconds, the standby WAC takes over services from
the active WAC.
▫ The uplink of the active WAC is faulty. VRRP association needs to be

configured to monitor uplink interfaces or links. When a fault is detected,
the VRRP priority of the active WAC automatically decreases. When the
preemption mode is enabled on the standby WAC, a VRRP switchover is
triggered, leading to an active/standby switchover. The switchover time
depends on the preemption delay configured for the VRRP.
Example for Configuring VRRP HSB
 To improve WLAN reliability, the enterprise uses VRRP HSB
10.1.88.1/30 10.1.88.2/30
networking (two WACs are located in the same HSB channel
WAC1 WAC2
geographical location). When the master WAC is faulty, Master CAPWAP tunnel for wireless Backup
configuration synchronization
services are automatically switched to the backup WAC. 10.1.5.1 10.1.5.2
VLAN 5
When the master WAC recovers, services are automatically VRRP VRID 1
switched back to the master WAC.
Switch
 Virtual IP address of the management VRRP (mVRRP) Virtual WAC
10.1.5.3
group: 10.1.5.3/24.
 IP address and port number of the HSB channel on WAC1:
Switch
10.1.88.1/24 and 10241.
 IP address and port number of the HSB channel on WAC2:
10.1.88.2/24 and 10241.
AP CAPWAP tunnel
 To reduce the configuration workload, enable wireless
configuration synchronization between the master and
backup WACs.
VRRP HSB Configuration Roadmap
Configuring wireless
Verifying the
Configuring VRRP Configuring HSB configuration
configuration
synchronization
Planning IP addresses Configuring an HSB service Checking the VRRP status
configuration synchronization
Configuring a VRRP group Configuring an HSB group Checking the HSB service
Binding services Checking the HSB group
Checking wireless
Enabling the HSB group configuration synchronization
Configuring VRRP
⚫ # Create a mVRRP group on WAC1. Set the ⚫ Create an mVRRP group on WAC2 and retain
priority of WAC1 in the mVRRP group to 120 the default priority (100) and preemption
and the preemption delay to 300 seconds. function.
[WAC1] interface vlan 5 [WAC2] interface vlan 5

[WAC1-Vlanif5] vrrp vrid 1 virtual-ip 10.1.5.3 [WAC2-Vlanif5] vrrp vrid 1 virtual-ip 10.1.5.3
[WAC1-Vlanif5] vrrp vrid 1 priority 120 [WAC2-Vlanif5] admin-vrrp vrid 1
[WAC1-Vlanif5] vrrp vrid 1 preempt-mode timer delay 300 [WAC2-Vlanif5] quit
[WAC1-Vlanif5] admin-vrrp vrid 1
[WAC1-Vlanif5] quit
Configuring an HSB Service and an HSB Group
⚫ Create an HSB service on WAC1. Configure the IP ⚫ Create an HSB service on WAC2. Configure the IP
addresses and port numbers for the HSB channels, addresses and port numbers for the HSB channels,
and set the retransmission time and interval of the and set the retransmission time and interval of the
HSB service. HSB service.
[WAC1] hsb-service 0 [WAC2] hsb-service 0

[WAC1-hsb-service-0] service-ip-port local-ip 10.1.88.1 peer-ip [WAC2-hsb-service-0] service-ip-port local-ip 10.1.88.2 peer-ip
10.1.88.2 local-data-port 10241 peer-data-port 10241 10.1.88.1 local-data-port 10241 peer-data-port 10241
[WAC1-hsb-service-0] service-keep-alive detect retransmit 5 [WAC2-hsb-service-0] service-keep-alive detect retransmit 5
interval 3 interval 3
⚫ Create an HSB group on WAC1, and bind the HSB ⚫ Create an HSB group on WAC2, and bind the HSB
service and the mVRRP group to the HSB group. service and the mVRRP group to the HSB group.
[WAC1] hsb-group 0 [WAC2] hsb-group 0

[WAC1-hsb-group-0] bind-service 0 [WAC2-hsb-group-0] bind-service 0
[WAC1-hsb-group-0] track vrrp vrid 1 interface Vlanif 5 [WAC2-hsb-group-0] track vrrp vrid 1 interface Vlanif 5
[WAC1-hsb-group-0] quit [WAC2-hsb-group-0] quit
Binding Service Modules and Enabling the HSB Group
⚫ The HSB group can be bound to different services to provide the backup function, improving service
reliability.
 On WAC1, bind the NAC, WLAN, and DHCP services to the HSB group, and enable the HSB group.
[WAC1] hsb-service-type access-user hsb-group 0

[WAC1] hsb-service-type ap hsb-group 0
[WAC1] hsb-service-type dhcp hsb-group 0
[WAC1] hsb-group 0
[WAC1-hsb-group-0] hsb enable
 On WAC2, bind the NAC, WLAN, and DHCP services to the HSB group, and enable the HSB group.
[WAC2] hsb-service-type access-user hsb-group 0

[WAC2] hsb-service-type ap hsb-group 0
[WAC2] hsb-service-type dhcp hsb-group 0
[WAC2] hsb-group 0
[WAC2-hsb-group-0] hsb enable
• Run the hsb-service-type ap hsb-group group-index command to bind the WLAN

service to an HSB group so that AP entries, CAPWAP link information, and STA
information can be transmitted through the HSB channel.
• Run the hsb-service-type access-user hsb-group group-index command to bind

the NAC service to the HSB group so that STA authentication information can be
transmitted through the HSB channel.
• Run the hsb-service-type dhcp hsb-group group-index command to bind the

DHCP service to the HSB group so that STA address allocation information can
be transmitted through the HSB channel (when the WAC functions as the DHCP
server).
Wireless Configuration Synchronization
⚫ Wireless configuration synchronization refers to automatic configuration synchronization between the master and
backup master WACs. After a CAPWAP tunnel is established between the master and backup master WACs, the
master WAC can automatically synchronize some configurations to the backup master WAC. This reduces the
configuration workload of the backup master WAC and prevents missing configurations of the backup master WAC.
 Configure wireless configuration synchronization on WAC1.
[WAC1-wlan-view] master controller

[WAC1-master-controller] master-redundancy peer-ip ip-address 10.1.88.2 local-ip ip-address 10.1.88.1 psk Huawei@123
[WAC1-master-controller] master-redundancy track-vrrp vrid 1 interface vlanif 5
 Configure wireless configuration synchronization on WAC2.

[WAC2-master-controller] master-redundancy peer-ip ip-address 10.1.88.1 local-ip ip-address 10.1.88.2 psk Huawei@123
[WAC2-master-controller] master-redundancy track-vrrp vrid 1 interface vlanif 5
 Manually trigger wireless configuration synchronization on WAC1.
[WAC1-wlan-view] synchronize-configuration
• The wireless configuration synchronization function classifies configurations into

two types: Configurations that must be consistent on the WACs are public
configurations, while those that can be inconsistent on the WACs are private
configurations. Public configurations can be automatically synchronized, but
private configurations cannot.
• During wireless configuration synchronization in a VRRP HSB scenario, the two

WACs are bound to the same VRRP group, and the VRRP protocol negotiates to
elect the master and backup master WACs and establishes a CAPWAP tunnel
between the WACs based on the local and peer IP addresses configured on the
WACs. Through the CAPWAP tunnel, the master WAC synchronizes wireless
configuration data to the backup master WAC.
• It is recommended that wireless configuration synchronization and VRRP HSB use

the same VRRP group. In this way, the master WAC in wireless configuration
synchronization is the the same as the master AC in VRRP. You only need to
configure public configurations on the master WAC. The configurations are
automatically synchronized to the backup master WAC.
• After the master AC and backup master AC are configured, the existing public
configurations on the two WACs are inconsistent. You need to manually trigger
wireless configuration synchronization to ensure that the existing public
configurations are consistent. Any subsequent public configuration operations on
the master AC will be automatically synchronized to the backup master AC.
Verifying the Configuration
⚫ Run the display hsb-group group-index ⚫ Run the display hsb-service service-index
command to check HSB group information. command to check HSB service information.
[WAC1] display hsb-group 0 [WAC1] display hsb-service 0

Hot Standby Group Information: Hot Standby Service Information:
---------------------------------------------------------- ----------------------------------------------------------
HSB-group ID :0 Local IP Address : 10.1.88.1
Vrrp Group ID :1 Peer IP Address : 10.1.88.2
Vrrp Interface : Vlanif5 Source Port : 10241
Service Index :0 Destination Port : 10241
Group Vrrp Status : Master Keep Alive Times :5
Group Status : Active Keep Alive Interval :3
Group Backup Process : Realtime Service State : Connected
Peer Group Device Name : AirEngine9700-M Service Batch Modules :
Peer Group Software Version : V200R021C00SPC200 ----------------------------------------------------------
Group Backup Modules :-
----------------------------------------------------------
• Check the configuration parameters and status of the VRRP group.
▫ Run the display vrrp command.
• Check the configuration parameters and status of the HSB service.
▫ display hsb-service service-index
• Check the configuration parameters and status of the HSB group.
▫ Run the display hsb-group group-index command.
• Check the configuration parameters and status of wireless configuration

synchronization.
▫ Run the display sync-configuration master-redundancy command.
▫ Run the display sync-configuration status command.

Contents
2. VRRP HSB
3. Dual-Link HSB
5. N+1 Backup
Dual-Link HSB Overview
⚫ An AP establishes active and standby CAPWAP tunnels with
two WACs, and an HSB channel is established between the
10.1.88.1/30 10.1.88.2/30
HSB channel active and standby WACs to synchronize service data. This
WAC1 WAC2
backup mode is called dual-link HSB. In dual-link mode, an AP
Active WAC Standby WAC
has two CAPWAP links.
10.1.5.1/24 10.1.5.2/24
⚫ In dual-link HSB mode, STA information can be synchronized
from the active WAC to the standby WAC in real time through
Switch the HSB channel. When the active WAC fails, the standby WAC
Primary link Secondary link immediately switches to the active state to take over WLAN
services.
Switch
⚫ The active and standby WACs can be deployed in different
places and do not need to work on the same Layer 2 network,
making deployment more flexible.
CAPWAP tunnel
AP ⚫ Dual-link HSB supports the active/standby and load balancing

networking modes.
• To ensure that both WACs provide the same services, it is recommended that the
same service parameters be configured on the active and standby WACs.
Working Process of Dual-Link HSB
⚫ Active/Standby negotiation: The active WAC is preferentially
selected and the primary link is established. After the active
10.1.88.1/30 10.1.88.2/30
HSB channel WAC delivers configurations, the secondary link is established.
WAC1 WAC2
⚫ Data backup: The active and standby WACs back up STA
10.1.5.1/24 10.1.5.2/24 entries through the HSB channel to ensure service continuity
during an active/standby switchover or switchback.
⚫ Active/Standby switchover: The AP determines whether to

Switch perform an active/standby switchover. If the active WAC fails
Primary link Secondary link or the downlink is disconnected, an active/standby switchover
is performed between the active and standby WACs to activate
Switch the standby link. User traffic is switched to the new active
WAC.
CAPWAP tunnel ⚫ Active/Standby switchback: Global switchback is enabled. After

AP an active/standby switchover is performed, a switchback is
triggered when the link of the original active WAC recovers.
• The AP determines whether to perform an active/standby switchover. The process

is as follows:
▫ After establishing links with the active and standby WACs, the AP
periodically sends Echo packets to the WACs for CAPWAP heartbeat
detection to monitor the CAPWAP link status.
▫ When a link is faulty, the WAC cannot respond to Echo packets from the
AP. If the active WAC does not respond to the AP within a specified number
of consecutive CAPWAP heartbeat detection intervals, the AP determines
that the primary link is faulty.
▫ The AP sends an Echo Request packet carrying information about the active
WAC to the standby WAC. After receiving the packet, the standby WAC
switches to the working state. The secondary CAPWAP link also switches to
the working state. The AP sends STA data services to the new active WAC.
• Heartbeat detection is performed on CAPWAP links between the AP and WAC. By
default, heartbeat packets are sent at an interval of 25 seconds, and the number
of heartbeat packet detections is 3. That is, if the AP does not receive heartbeat
packets from the WAC for three consecutive times, the AP considers the WAC
faulty. By default, a dual-link cold backup switchover takes about 75 seconds.
After an active/standby switchover, original users on the AP need to go online
again. If you set the CAPWAP heartbeat detection interval and the number of
CAPWAP heartbeat detections smaller than the default values, CAPWAP link
reliability is degraded. Exercise caution when you set the values. The default
values are recommended.
• To configure dual-link cold backup on a mesh network, set the CAPWAP

heartbeat interval to 25 seconds and the number of heartbeat packet detections
to at least 6. If this configuration is not performed, the WAC sends heartbeat
packets three times at an interval of 25 seconds by default. This may cause
unstable mesh link status.
• The active/standby switchback process is as follows:
▫ The AP periodically sends Discovery Request messages to check whether the

original primary tunnel recovers.
▫ If the original primary link has recovered, the AP triggers switchback

waiting when detecting that this link has a higher priority than the working
one. After detecting that WAC1 recovers, STA entries are updated from
WAC2 to WAC1 through the HSB channel.
▫ To prevent frequent switchovers caused by network flapping, the AP

requests WACs to perform an active/standby switchback after 20 Echo
intervals. Then WAC1 recovers to the working state and WAC2 recovers to
the backup state. If the original primary link fails again, the switchback is
canceled. After the active/standby switchback, the AP sends STAs' data
services to WAC1.
Active/Standby Negotiation Process
⚫ In active/standby negotiation, an AP selects an active WAC and a standby WAC from multiple WACs, and then sets
up a primary and a backup CAPWAP tunnel with the active and standby WACs, respectively.
 If the IP addresses of active and standby WACs have been allocated in static, DHCP, or DNS mode, the AP sends the Discovery Request packet in
unicast mode to request connections with the WACs.
 If no IP addresses are allocated to WACs or there is no response to the unicast packet, the AP sends another Discovery Request packet in broadcast
mode to discover available WACs in the same network segment. If both the active and standby WACs are working properly, they respond with
Discovery Response packets. The selects the active WAC based on the parameters in the Discovery Response packets. The selection sequence is as
follows:
Is there a No Is there a No Are the WAC No The WAC with a smaller priority
No
primary WAC? backup WAC? priorities the same? value is used as the active WAC.
Yes
Yes
Yes No
Are there multiple primary Are the WAC loads The WAC with the lightest load
or backup WACs? the same? is used as the active WAC.
No Yes
The configured primary Compare the IP The WAC with a smaller IP

or backup WAC is used addresses of WACs. address is used as the active
as the active WAC. WAC.
• Load comparison mode: Compare the loads of WACs, that is, the number of APs
and STAs. The WAC with the lightest load is the active WAC. The WAC with the
largest number of allowed APs is preferentially selected as the active WAC. If the
number of allowed APs is the same, the WAC with the largest number of allowed
STAs is selected as the active WAC.
• After the AP establishes an active CAPWAP tunnel with the active WAC and
delivers configurations to the AP, the AP starts standby WAC election and
establishes a standby CAPWAP tunnel. The standby WAC election process is
similar and is not described here.
Example for Configuring Dual-Link HSB
 To improve WLAN reliability and implement remote 10.1.88.1/30 10.1.88.2/30
disaster recovery, the enterprise uses the dual-link HSB HSB channel
WAC1 WAC2
CAPWAP tunnel for wireless
networking. When the active WAC is faulty, services are configuration synchronization Standby WAC
Active WAC
automatically switched to the standby WAC. When the 10.1.5.2/24
10.1.5.1/24
active WAC recovers, services are automatically switched
back to the active WAC.
 The IP address and port number of the HSB channel of Switch
WAC1 are 10.1.88.1/30 and 10241, respectively. The IP Primary link Secondary link
address and port number of the HSB channel of WAC2 are

10.1.88.2/30 and 10241, respectively. Switch
 To reduce the configuration workload, enable wireless
configuration synchronization between the master and CAPWAP tunnel
backup WACs. AP
Dual-Link HSB Configuration Roadmap
Planning the active and Verifying the
Configuring HSB configuration
standby WACs configuration
synchronization
Planning IP addresses and Configuring dual-link Configuring wireless

Enabling dual-link backup
VLANs backup configuration synchronization
Planning the active and

Configuring an HSB service Checking dual-link backup
standby WACs
Binding services Checking the HSB service

status
Configuring the link

switchover mode Checking wireless
(Optional) configuration synchronization
Configuring Dual-Link HSB
⚫ On WAC1, configure the IP address of the ⚫ On WAC2, configure the IP address of the
primary WAC as the source IP address of WAC1 primary WAC as the source IP address of WAC1
and the IP address of the backup WAC as the and the IP address of the backup WAC as the
source IP address of WAC2. source IP address of WAC2.
[WAC1-wlan-view] ap-system-profile name test [WAC2-wlan-view] ap-system-profile name test

[WAC1-wlan-ap-system-prof-test] primary-access ip-address [WAC2-wlan-ap-system-prof-test] primary-access ip-address
10.1.5.1 10.1.5.1
[WAC1-wlan-ap-system-prof-test] backup-access ip-address [WAC2-wlan-ap-system-prof-test] backup-access ip-address
10.1.5.2 10.1.5.2
[WAC1-wlan-ap-system-prof-test] quit [WAC2-wlan-ap-system-prof-test] quit
[WAC1-wlan-view] ap-group name ap-group1 [WAC2-wlan-view] ap-group name ap-group1
[WAC1-wlan-ap-group-ap-group1] ap-system-profile test [WAC2-wlan-ap-group-ap-group1] ap-system-profile test
[WAC1-wlan-ap-group-ap-group1] quit [WAC2-wlan-ap-group-ap-group1] quit
[WAC1-wlan-view] ac protect enable [WAC2-wlan-view] ac protect enable
• In this example, the primary and backup WACs are configured in the AP system
profile view. Therefore, the primary WAC serves as the active WAC, and the
backup WAC serves as the standby WAC, without the need to compare WAC
priorities.
• By default, dual-link backup is disabled, and running the ac protect enable

command restarts all APs. After the APs are restarted, the dual-link backup
function takes effect.
Configuring an HSB Service
⚫ On WAC1, configure an HSB service and bind the WLAN and NAC services to the HSB service.
[WAC1] hsb-service 0
[WAC1-hsb-service-0] service-ip-port local-ip 10.1.88.1 peer-ip 10.1.88.2 local-data-port 10241 peer-data-port 10241
[WAC1-hsb-service-0] quit
[WAC1] hsb-service-type ap hsb-service 0
[WAC1] hsb-service-type access-user hsb-service 0
⚫ On WAC2, configure an HSB service and bind the WLAN and NAC services to the HSB service.
[WAC2] hsb-service 0
[WAC2-hsb-service-0] service-ip-port local-ip 10.1.88.2 peer-ip 10.1.88.1 local-data-port 10241 peer-data-port 10241
[WAC2-hsb-service-0] quit
[WAC2] hsb-service-type ap hsb-service 0
[WAC2] hsb-service-type access-user hsb-service 0
(Optional) Configuring the Link Switchover Mode
⚫ Two link switchover modes are available:
 Priority mode (default): An AP preferentially switches traffic to the primary link.
 Network stabilization mode: An AP preferentially uses the link with high stabilization.
To change the priority mode to the network stability mode, run the following commands:
[WAC1-wlan-view] ap-system-profile name test

[WAC1-wlan-ap-system-prof-test] ac protect link-switch mode network-stabilization
Configure the number of Echo packets sent within a statistics collection interval.

[WAC1-wlan-ap-system-prof-test] ac protect link-switch packet-loss echo-probe-time 30
Configure the packet loss rate start and difference thresholds for an active/standby link switchover.

[WAC1-wlan-ap-system-prof-test] ac protect link-switch packet-loss start-threshold 25
[WAC1-wlan-ap-system-prof-test] ac protect link-switch packet-loss gap-threshold 20
• To allow an AP to use a link with high network stabilization, set the

active/standby link switchover mode to the network stabilization mode. When
the condition for triggering an active/standby link switchover is met, the AP
preferentially switches service traffic to the link on a network with higher
network stabilization. In this case, whether an active/standby link switchover is
performed is only related to the network stabilization of links but not related to
the active and standby roles of links.
• In dual-link HSB and cold backup scenarios, the network stabilization of the
primary and secondary links is determined based on the Echo packet loss rate.
The primary/secondary link switchover is performed when the following
conditions are met:
▫ An AP collects statistics about Echo packets on the current link for a

specified number of times, and determines that the packet loss rate of the
link exceeds the packet loss rate start threshold.
▫ The packet loss rate on the current link is higher than that of the other link,
and the difference between the two links is higher than the packet loss rate
difference threshold.
Verifying the Dual-Link HSB Configuration
⚫ Run the display ac protect command on WAC1 and WAC2 to view the dual-link backup configurations.
[WAC1] display ac protect [WAC2] display ac protect

------------------------------------------------------------ ------------------------------------------------------------
Protect state : enable Protect state : enable
Protect AC IPv4 : 10.1.5.2 Protect AC IPv4 : 10.1.5.1
Protect AC IPv6 :- Protect AC IPv6 :-
Priority :0 Priority :1
Protect restore : enable Protect restore : enable
... ...
------------------------------------------------------------ ------------------------------------------------------------

• If dual-link backup is enabled, running the ac protect enable command does not
restart APs. You need to run the ap-reset command on the active WAC to restart
all APs and make the dual-link backup function take effect.
Configuring Wireless Configuration Synchronization
⚫ On WAC1, configure WAC1 as the master AC and specify the IP address of the local AC.
[WAC1] wlan
[WAC1-master-controller] local-controller ip-address 10.1.5.2 psk Huawei@123
[WAC1-master-controller] quit
⚫ On WAC2, configure WAC2 as the local AC and specify the IP address of the master AC.
[WAC2] wlan
[WAC2-wlan-view] master-controller ip-address 10.1.5.1 psk Huawei@123
⚫ Manually trigger wireless configuration synchronization.
[WAC1-wlan-view] synchronize-configuration
• To implement wireless configuration synchronization in dual-link HSB scenarios,

you need to manually configure the master AC (active WAC) and local AC
(standby WAC) roles and specify their IP address on each other. In this manner,
the master AC and local AC can be identified correctly to establish a CAPWAP
tunnel for transmitting wireless configuration synchronization data.
• After the master AC and local AC are configured, the existing public
configurations on the two WACs are inconsistent. In this case, manually trigger
wireless configuration synchronization to ensure that the existing public
configurations are consistent. Any subsequent public configuration operations on
the master AC will be automatically synchronized to the local AC.
Verifying the Wireless Configuration Synchronization Status
⚫ Run the display sync-configuration status command on the master AC and local AC to view the wireless
configuration synchronization status. If the status is up, the wireless configuration synchronization
function is normal.
[WAC1-wlan-view] display sync-configuration status
Controller role:Master/Backup/Local
--------------------------------------------------------------------------------------------------
Controller IP Role Device Type Version Status Last synced
--------------------------------------------------------------------------------------------------
10.1.5.2 Local AirEngine9700-M V200R021C00 up
--------------------------------------------------------------------------------------------------
Total: 1
[WAC2-wlan-view] display sync-configuration status

Controller role:Master/Backup/Local
--------------------------------------------------------------------------------------------------
--------------------------------------------------------------------------------------------------
10.1.5.1 Master AirEngine9700-M V200R021C00 up
--------------------------------------------------------------------------------------------------
Total: 1
Contents
2. VRRP HSB
3. Dual-Link HSB
5. N+1 Backup
Dual-Link Cold Backup Overview
⚫ In dual-link cold backup mode, each AP sets up a primary and
10.1.5.1/24 10.1.5.2/24 a secondary CAPWAP link with the active and standby WACs,
respectively without an HSB channel between the active and
WAC1 WAC2
standby WACs.
⚫ Because there is no HSB channel between the active and
standby WACs, they do not synchronize information with each
other. When the active WAC fails, the standby WAC switches to
Switch the working state to provide services. STAs need to go online
Primary link Secondary link again, and services are interrupted for a short period of time.
This mode applies to scenarios that do not require high WLAN
Switch service reliability.

⚫ Dual-link cold backup allows active and standby WACs to be
CAPWAP tunnel deployed at different places, and supports the active/standby
AP and load balancing networking modes.
⚫ Dual-link cold backup does not support wireless configuration
synchronization.
• To ensure that both WACs provide the same services, it is recommended that the
same service parameters be configured on the active and standby WACs.
Working Process of Dual-Link Cold Backup
10.1.5.1/24 10.1.5.2/24 ⚫ Active/standby negotiation: The active WAC is preferentially
WAC1 WAC2 selected and the primary link is established. After the active
Active WAC Standby WAC WAC delivers configurations, the secondary link is established.
⚫ Active/Standby switchover: The AP determines whether to

perform an active/standby switchover. If the active WAC fails
or the downlink is disconnected, an active/standby switchover
Switch is performed between the active and standby WACs to activate
Primary link Secondary link the standby link. Existing STAs on the APs go offline and then
online again.
Switch ⚫ Active/Standby switchback: Global switchback is enabled. After
an active/standby switchover is performed, a switchback is
CAPWAP tunnel
triggered when the link of the original active WAC recovers.
AP
• The active/standby negotiation and active/standby switchover are similar to

those in dual-link HSB and are not described here.
• Active/Standby switchback:
▫ The AP periodically sends Discovery Request messages to check whether the

original primary link recovers.
▫ If the original primary link has recovered, the AP triggers switchback

waiting when detecting that this link has a higher priority than the working
one.
▫ To prevent frequent switchovers caused by network flapping, the AP

requests WACs to perform an active/standby switchback after 20 Echo
intervals. Then WAC1 recovers to the working state and WAC2 recovers to
the backup state. The original primary link recovers to the working state. If
the original primary link fails again, the switchback is canceled. After the
active/standby switchback, the AP sends STAs' data services to WAC1.
Example for Configuring Dual-Link Cold Backup
 An enterprise deploys two WACs in geographic redundancy
10.1.5.1/24 10.1.5.2/24
mode to improve WLAN reliability. When the active WAC is
WAC1 WAC2
faulty, services are automatically switched to the standby
WAC. When the active WAC recovers, services are
automatically switched back to the active WAC.
 The WLAN of the enterprise carries non-key enterprise
services and does not require high network reliability. Switch
Therefore, the dual-link cold backup networking is Primary link Secondary link
applicable.
 Management IP addresses of WAC1 and WAC2: 10.1.5.1/24
Switch
and 10.1.5.2/24, respectively (WAC1 as the active WAC;
WAC2 as the standby WAC) CAPWAP tunnel
AP
Dual-Link Cold Backup Configuration Roadmap
Planning the active and

Configuring dual-link cold backup Viewing the configuration
standby WACs
Planning IP addresses and Configuring dual-link cold

Checking dual-link backup
VLANs backup
Planning the active and Configuring the active/standby Checking the link
standby WACs switchback function switchover mode
Configuring the link switchover

mode
(Optional)
Enabling dual-link backup
Configuring Dual-Link HSB
⚫ On WAC1, configure the IP address of the ⚫ On WAC2, configure the IP address of the
primary WAC as the source IP address of WAC1 primary WAC as the source IP address of WAC1
and the IP address of the backup WAC as the and the IP address of the backup WAC as the
source IP address of WAC2. source IP address of WAC2.
[WAC1-wlan-view] ap-system-profile name test [WAC2-wlan-view] ap-system-profile name test

[WAC1-wlan-ap-system-prof-test] primary-access ip-address [WAC2-wlan-ap-system-prof-test] primary-access ip-address
10.1.5.1 10.1.5.1
[WAC1-wlan-ap-system-prof-test] backup-access ip-address [WAC2-wlan-ap-system-prof-test] backup-access ip-address
10.1.5.2 10.1.5.2
[WAC1-wlan-ap-system-prof-test] quit [WAC2-wlan-ap-system-prof-test] quit
[WAC1-wlan-ap-group-ap-group1] ap-system-profile test [WAC2-wlan-ap-group-ap-group1] ap-system-profile test
[WAC1-wlan-view] ac protect enable [WAC2-wlan-view] ac protect enable

⚫ Run the display ac protect command to ⚫ Run the display ap-system-profile command
check the dual-link backup status. to check the IP addresses of the active and
standby WACs.
[WAC1] display ac protect [WAC1] display ap-system-profile name test

------------------------------------------------------------ ------------------------------------------------------------
Protect state : enable AC priority :-
... Protect AC IP address :-
------------------------------------------------------------ Primary AC : 10.1.5.1
Backup AC : 10.1.5.2
...
[WAC2] display ac protect ------------------------------------------------------------
------------------------------------------------------------
Protect state : enable [WAC2] display ap-system-profile name test
... ------------------------------------------------------------
------------------------------------------------------------ AC priority :-
Protect AC IP address :-
Primary AC : 10.1.5.1
Backup AC : 10.1.5.2
...
------------------------------------------------------------
Contents
2. VRRP HSB
3. Dual-Link HSB
5. N+1 Backup
N+1 Backup Overview
Enterprise HQ CAPWAP tunnel
Standby ⚫ In N+1 backup, multiple active WACs share one standby WAC,
WAC
and an AP joins only one active WAC and one standby WAC.
Switch ⚫ In this example, the WAC in the enterprise HQ can function as

the standby WAC for local WACs in branch 1 and branch 2.
⚫ When WACs and the network are working properly, APs

WAN
establish CAPWAP tunnels only with their own active WACs.
⚫ When the active WAC is faulty or the CAPWAP link between

the active WAC and AP fails, the standby WAC takes over
Active Active WAC
WAC services from the active WAC and establishes a CAPWAP link
Switch with the AP to manage and provide services for the AP.
⚫ The N+1 backup mode supports active/standby switchover and
AP
switchback.
Enterprise branch 1 Enterprise branch 2
• When the CAPWAP tunnel between an AP and the active WAC is disconnected,
the AP attempts to establish a CAPWAP tunnel with the standby WAC. After the
new CAPWAP tunnel is established, the AP restarts and obtains configurations
from the standby WAC. During this process, services are affected.
Working Process of N+1 Backup
Enterprise HQ CAPWAP tunnel
Standby
WAC ⚫ Active/Standby negotiation: An AP selects an active
WAC based on the algorithm and establishes a
Switch
CAPWAP tunnel with the active WAC.
⚫ Active/Standby switchover: When the active WAC or
WAN
the CAPWAP link between the active WAC and AP is
faulty, the standby WAC sets up a CAPWAP link with
the AP and the AP goes online again.
Active Active WAC
WAC ⚫ Active/Standby switchback: Global switchback is
Switch
enabled. After an active/standby switchover is
performed, a switchback is triggered when the link of
AP the original active WAC recovers.
Enterprise branch 1 Enterprise branch 2
• Active/Standby negotiation: The process is similar to that for active WAC

selection in dual-link backup, and is not described here.
• Active/Standby switchover: When the AP detects a heartbeat packet transmission
timeout, it considers that the link between the AP and the active WAC is
disconnected and sets up a CAPWAP link with the standby WAC. The AP sets up a
CAPWAP link with the standby WAC in the following situations:
▫ If the IP address of the standby WAC is configured on the active WAC, the
AP sets up a CAPWAP link with the standby WAC directly.
▫ If the IP address of the standby WAC is not configured on the active WAC,
the AP broadcasts Discovery Request packets to discover WACs and selects
the standby WAC to establish a CAPWAP link.
• Active/Standby switchback:
▫ The AP periodically sends Primary Discovery Request packets to detect the
active WAC status.
▫ After the active WAC recovers, it returns a response packet carrying the
WAC priority to the AP. When the AP receives the response packet from the
active WAC, the AP learns that the active WAC recovers and has a higher
priority than its currently connected WAC. If the switchback function is
enabled, an active/standby switchback is triggered.
▫ To prevent frequent switchovers caused by network flapping, the WACs
perform an active/standby switchback after 20 heartbeat intervals.
Example for Configuring N+1 Backup
CAPWAP tunnel
 AP_1 is managed and configured by WAC1 (active) and Standby WAC3
WAC3 (standby). 10.1.5.3/24
 AP_2 is managed and configured by WAC2 (active) and Management
WAC3 (standby). VLAN for WACs:
VLAN 5
 AP_1 is in the management VLAN 6. The switch functions Active WAC1 Active WAC2
as the DHCP server. The WAC address lists 10.1.5.1 and
10.1.5.3 are carried through the DHCP option field. Switch
10.1.5.1/24 10.1.5.2/24
 AP_2 is in the management VLAN 7. The switch functions
as the DHCP server. The WAC address lists 10.1.5.2 and
10.1.5.3 are carried through the DHCP option field.
 The AP determines the active/standby relationship based Management Management
on the configurations of the primary and backup WACs. VLAN for AP_1: VLAN for AP_2:
VLAN 6 AP_1 AP_2 VLAN 7
N+1 Backup Configuration Roadmap
Verifying the
Planning N+1 backup Configuring N+1 backup
configuration
Planning IP addresses
Configuring N+1 backup Checking N+1 backup
and VLANs
Configuring the link Checking the link

Planning WAC priorities
switchover mode switchover mode
(Optional)
Configuring the
active/standby
switchback function
Enabling N+1 backup
Configuring N+1 Backup (1/2)
⚫ On WAC1, configure the IP addresses of the ⚫ On WAC2, configure the IP addresses of the
active and standby WACs in the AP system active and standby WACs in the AP system
profile and enable N+1 backup. profile and enable N+1 backup.
[WAC1-wlan-view] ap-system-profile name test1 [WAC2-wlan-view] ap-system-profile name test2

[WAC1-wlan-ap-system-prof-test1] primary-access ip-address [WAC2-wlan-ap-system-prof-test2] primary-access ip-address
10.1.5.1 10.1.5.2
[WAC1-wlan-ap-system-prof-test1] backup-access ip-address [WAC2-wlan-ap-system-prof-test2] backup-access ip-address
10.1.5.3 10.1.5.3
[WAC1-wlan-ap-system-prof-test1] quit [WAC2-wlan-ap-system-prof-test2] quit
[WAC1-wlan-ap-group-ap-group1] ap-system-profile test1 [WAC2-wlan-ap-group-ap-group2] ap-system-profile test2
[WAC1-wlan-view] undo ac protect enable [WAC2-wlan-view] undo ac protect enable
Configuring N+1 Backup (2/2)
⚫ On WAC3, configure the IP addresses of the active and standby WACs in the AP system profile and
enable N+1 backup.
[WAC3-wlan-view] ap-system-profile name test1
[WAC3-wlan-ap-system-prof- test1] primary-access ip-address 10.1.5.1
[WAC3-wlan-ap-system-prof- test1] backup-access ip-address 10.1.5.3
[WAC3-wlan-ap-system-prof- test1] quit
[WAC3-wlan-view] ap-group name ap-group1
[WAC3-wlan-ap-group-ap-group1] ap-system-profile test1
[WAC3-wlan-ap-group-ap-group1] quit
[WAC3-wlan-view] ap-system-profile name test2
[WAC3-wlan-ap-system-prof- test2] primary-access ip-address 10.1.5.2
[WAC3-wlan-ap-system-prof- test2] backup-access ip-address 10.1.5.3
[WAC3-wlan-ap-system-prof- test2] quit
[WAC3-wlan-view] ap-group name ap-group2
[WAC3-wlan-ap-group-ap-group2] ap-system-profile test2
[WAC3-wlan-ap-group-ap-group2] quit
[WAC-wlan-view] undo ac protect enable
• Note that dual-link backup (HSB or cold backup) and N+1 backup are mutually
exclusive.
• The ac protect enable command enables dual-link backup globally and disables
N+1 backup. The undo ac protect enable command enables N+1 backup and
disables dual-link backup.
• VRRP HSB and N+1 backup are mutually exclusive, but they can be configured
together. That is, VRRP HSB is configured between every two WACs to function
as one virtual WAC, and N+1 backup can be configured between different virtual
WACs.
⚫ Run the display ac protect command to check ⚫ Run the display ap-system-profile command
N+1 backup information on the WACs. to check the IP addresses of the active and
standby WACs.
[WAC1-wlan-view] display ac protect
------------------------------------------------------------ [WAC1] display ap-system-profile name test1
Protect state : disable ------------------------------------------------------------
Protect AC IPv4 :- AC priority :-
Protect AC IPv6 :- Protect AC IP address :-
Priority :0 Primary AC : 10.1.5.1
Protect restore : enable Backup AC : 10.1.5.3
... ...
------------------------------------------------------------ ------------------------------------------------------------
[WAC2-wlan-view] display ac protect
------------------------------------------------------------ [WAC2] display ap-system-profile name test2
Protect state : disable ------------------------------------------------------------
Protect AC IPv4 :- AC priority :-
Protect AC IPv6 :- Protect AC IP address :-
Priority :0 Primary AC : 10.1.5.2
Protect restore : enable Backup AC : 10.1.5.3
... ...
------------------------------------------------------------ ------------------------------------------------------------
Quiz
1. (Single-answer question) An enterprise has high requirements on WLAN reliability and

requires WACs to be deployed at different places. Which of the following WAC backup
solutions is recommended? ( )
A. VRRP HSB
B. Dual-link cold backup
C. Dual-link HSB
D. N+1 backup
1. C
Summary
⚫ This courses describes WAC reliability technologies on a WLAN, including VRRP HSB, dual-
link HSB, dual-link cold backup, and N+1 backup.
⚫ On completion of this chapter, you will be able to master the common WLAN reliability
networking architectures and independently establish reliability networking based on the
lab environment.
Recommendations

ARP Address Resolution Protocol
BFD Bidirectional Forwarding Detection
DNS Domain Name Server
EFM Ethernet in the First Mile
HSB Hot-Standby Backup

NAC Network Admission Control
STA Station

TCP Transmission Control Protocol
UDP User Datagram Protocol
VRRP Virtual Router Redundancy Protocol
Thank you. Bring digital to every person, home, and
intelligent world.
Copyright © 2022 Huawei Technologies Co., Ltd.


portfolio, new technology, etc. There are a number of factors
that
WLAN Cloud Management Solution
Foreword
⚫ With the rapid development of cloud computing, the on-demand cloud service mode
becomes more popular so that the traditional network management mode also experiences
great changes. In this situation, the cloud-based network management has been a trend, as
well as a new model for enterprise network construction, operations and maintenance
(O&M).
⚫ This course describes common WLAN cloud-based management networking: cloud-based
WAC management and cloud-based AP management.
Objectives
 Understand the architecture and main functions of iMaster NCE-Campus.
 Understand the cloud-based WAC management network architecture.
 Understand how to configure cloud-based WAC management.
 Understand the cloud-based AP management network architecture.
 Understand how to configure cloud-based AP management.
Contents
1. Introduction to iMaster NCE-Campus
2. Cloud-based WAC Management
3. Cloud-based AP Management
Introduction to iMaster NCE-Campus
⚫ As the cloud management platform of the CloudCampus Solution, iMaster NCE-Campus provides services such as
service configuration and O&M monitoring for network devices, and can function as an authentication server to
implement access control on end users.
iMaster NCE-Campus Device Access Performance

management authentication collection Big data service
service service service
Carrier network
Cloud Cloud Cloud

AP Cloud AP Cloud AP
WAC firewall switch
Tenant network
Site 1 Site 2 Site
Tenant A Tenant B
iMaster NCE-Campus Functional Architecture
One-stop management
Network service planning Device and site management Device plug-and-play Topology management Application management
Network connectivity configuration (general configuration and service

LAN service configuration Security policy QoS
configuration of WACs, APs, switches, and firewalls)
Network connectivity Traffic

Site-to-site/Site-to-Internet/Site-to-legacy site service orchestration QoS
WAN service configuration configuration steering policy
ACL Security policy WAN optimization Cloud security NAT Redirection
Network service monitoring Network monitoring End user monitoring Service alarm IP address management WAN service monitoring
Network service maintenance File management Log management Device maintenance
Authentication Value- Authentication

User Guest Terminal Free Certificate
Access control added component
management management management and authorization mobility authentication
management service management
Network resource Underlay routing domain External network or service

BGP EVPN configuration
Campus network virtualization pool management automation resource management
Access management Virtual network management
WAN virtual network

Virtual network management WAN-side overlay service LAN-WAN interconnection
configuration
• The WLAN cloud management technology mainly involves functions such as

network service planning and network service monitoring.
• This course does not describe how to install and deploy iMaster NCE-Campus. For
details, see the iMaster NCE-Campus Product Documentation.
Contents
Cloud WAC Networking
⚫ In this architecture, iMaster NCE-Campus is used to centrally manage and configure WLAN devices,
with the WAC working in cloud mode and APs working in Fit AP mode.
⚫ iMaster NCE-Campus: provides unified cloud-based

management for Huawei network devices (including WACs,
Registration Cloud management
query center platform APs, routers, switches, and firewalls), and supports
Gateway independent service provisioning and routine O&M for
multi-tenant networks.
Cloud WAC ⚫ Registration query center: is used to query the management
mode and home cloud management platform (IP address of
Fit AP the platform) of a device. The address of the registration
query center is preset on a WAC before delivery.
⚫ Cloud WAC: controls and manages all APs on a WLAN.
STA STA
• All WACs running V200R010C00 and later versions support cloud-based

management.
• Compared with the traditional "WAC + Fit AP" architecture, the cloud-based
management architecture has the following advantages:
▫ Automatic deployment through plug-and-play reduces network deployment

costs.
▫ All network elements (NEs) are centrally monitored and managed on the
cloud management platform.
▫ Cloud solutions usually provide various tools on the cloud, such as the
CloudCampus APP.
Switching the WAC to the Cloud Mode
⚫ A WAC must be switched to the cloud mode in one of the following ways before it can register with
iMaster NCE-Campus:
Through the registration
Through DHCP Through the CLI
query center
• The DHCP Option 148 • Switch the WAC to the cloud • After a WAC with factory
parameter is pre-defined on a mode through the CLI or the settings connects to an
DHCP server, carrying the WAC's web system. enterprise network, it sends a
specified cloud mode and • Log in to the WAC and query request to the
iMaster NCE-Campus address manually configure the registration query center
information. address information of deployed on the Internet using
• When obtaining an IP address iMaster NCE-Campus. the preset domain name
from the DHCP server, the (register.naas.huawei.com)
WAC can parse the Option and port number (10020) of
148 field in the DHCP the registration query center.
message and then switches to • If the query result is the cloud
the cloud mode. mode, the WAC switches to
the cloud mode.
• The requirements for configuring Option 148 on the DHCP server are as follows:
▫ To use the URL of iMaster NCE-Campus for registration, on the DHCP
server, set the Option 148 field to option 148 ascii "agilemode=agile-
cloud;agilemanage-mode=domain;agilemanage-domain=domain-
name;agilemanage-port=port-number;ap-agilemode=tradition-fit;".
▫ To use the IP address of iMaster NCE-Campus for registration, on the DHCP
server, set the Option 148 field to option 148 ascii "agilemode=agile-
cloud;agilemanage-mode=ip;agilemanage-domain=ip-
address;agilemanage-port=port-number;ap-agilemode=tradition-fit;".
• Log in to the WAC, manually switch the working mode, and configure the IP
address of the cloud management platform.
▫ Run the ac-mode cloud command to switch the WAC to a cloud WAC.
▫ Run the cloud-mng controller { url url-string | ip-address ip-address } port
port-number [ source-interface { LoopBack loopback-number | Vlanif vlan-
id } ] command to configure iMaster NCE-Campus address information on
the WAC.
• A WAC can obtain its working mode and the iMaster NCE-Campus address in
following modes in descending order of priority:
▫ Through a DHCP server
▫ Through the CLI or the web system
▫ Through the registration query center
Process for a WAC to Be Managed by the Cloud
Management Platform (Through DHCP)
⚫ When deploying a WLAN, you can deploy a WAC through plug-and-play (PnP) to simplify initial configuration operations and
accelerate WAC onboarding. A WAC can obtain the cloud mode and cloud management platform address information from the
DHCP server and register with iMaster NCE-Campus in PnP mode. The process is as follows:
Cloud management platform
3 Manage the WAC.
NETCONF
2 Perform registration and
(Cloud) gateway
authentication and establish
1 a NETCONF channel.
The WAC obtains the working
mode and registration
address and switches to the
obtained mode.
Cloud WAC
• Negotiation phase:
▫ After a WAC with factory settings is connected to the local network, it

establishes a communication with the upstream device through PnP VLAN
auto-negotiation and functions as a DHCP client to broadcast a DHCP
request. After receiving the request, the DHCP server (usually the egress
gateway or a standalone device) returns a response packet. When
allocating an IP address to the WAC, the DHCP server also sends the cloud
mode and iMaster NCE-Campus address information to it through the
DHCP Option 148 field.
▫ The WAC parses the Option 148 field to obtain the cloud mode and iMaster
NCE-Campus address information and switches to the cloud mode.
• Registration and authentication phase:
▫ The WAC uses its CA certificate to register with iMaster NCE-Campus. After
the two parties authenticate each other's certificate, a secure NETCONF
channel is established between the WAC and iMaster NCE-Campus.
• Cloud management phase:
▫ After the NETCONF transmission channel is established, you can remotely

manage and maintain the WAC through iMaster NCE-Campus.
Process for a WAC to Be Managed by the Cloud Management
Platform (Through the Registration Query Center)
⚫ A WAC can obtain the cloud mode and cloud management platform address from the registration query center and
then register with iMaster NCE-Campus in PnP mode. The process is as follows:
Synchronize Registration query center
device
3 information.
Manage the WAC.
1 The WAC obtains the working

mode and registration address and
switches to the obtained mode.
Perform registration 2
and authentication
(Cloud) gateway
and establish a
NETCONF channel.
Cloud WAC
• Negotiation phase:
▫ After a network administrator adds a device ESN on iMaster NCE-Campus,
iMaster NCE-Campus automatically synchronizes the ESN to the
registration query center. The registration query center records the device
ESN and iMaster NCE-Campus address.
▫ After the WAC with factory settings is connected to the local network, it
establishes a communication with the upstream device through PnP VLAN
auto-negotiation, obtains an IP address from the DHCP server, and accesses
the Internet through the egress gateway.
▫ The WAC sends an HTTP packet to the registration query center for query
based on its own ESN as well as the preset domain name
register.naas.huawei.com and port number 10020 of the registration query
center. The WAC thereby obtains the cloud mode and iMaster NCE-Campus
address information and switches to the cloud mode.
▫ The WAC uses its CA certificate to register with iMaster NCE-Campus. After
the two parties authenticate each other's certificate, a secure NETCONF
channel is established between them.
• Cloud management phase:
▫ After the NETCONF channel is established, you can remotely manage and
maintain the WAC through iMaster NCE-Campus.
Fit AP Onboarding Process
⚫ The following figure shows how a Fit AP registers with and joins a WAC in the cloud-based WAC
management solution.
Fit AP Cloud WAC Cloud management platform
The WAC goes online successfully.

Deliver AP entries and license
information.
The AP discovers the WAC

and initiates registration.
AP onboarding
Check AP entries and licenses

and allow the AP to go online.
process
A CAPWAP tunnel is established,

and the AP goes online successfully.
Report AP status.
Deduct license
resources.
• When a WAC goes online on iMaster NCE-Campus, iMaster NCE-Campus delivers

AP entries and corresponding license resources to the WAC based on the
association relationships between the WAC and APs.
▫ After connecting to the network, a Fit AP sends a Discovery Request packet

to the WAC, discovers the WAC based on the Discovery Response packet
replied by the WAC, and initiates registration with it. The process is the
same as that in the traditional scenario.
▫ The WAC determines whether to allow the AP to go online based on the AP

entries and licenses. If the AP matches an entry and the license for the AP
has not expired, the WAC allows the AP to go online.
▫ A CAPWAP tunnel is established between the AP and WAC, and the AP goes
online successfully.
▫ The WAC reports the AP online status to iMaster NCE-Campus.
▫ iMaster NCE-Campus deducts the corresponding license resources.

Example for Configuring Cloud-based WAC Management
 An enterprise hopes to deploy the cloud-based WAC
management solution on its intranet to centrally manage
Core switch Cloud
and monitor the WLAN on the cloud management platform.
Cloud WAC management
 An engineer manually switches the WAC's working mode platform
and configures the cloud management platform address, so

that the WAC can register with the cloud management
Access switch
platform.
 The planned information is as follows:
◼ IP address of the cloud WAC: 192.168.200.2/24 Fit AP
◼ IP address and port number of the cloud management platform:
172.21.10.1/24 and 10020
◼ A core switch functions as the DHCP server to assign IP addresses to
Fit APs, and the assigned IP addresses and the WAC's IP address STA STA STA
reside on the same network segment.
Configuration Roadmap
⚫ Perform pre-configurations for WAC onboarding on
iMaster NCE-Campus: Start
 Create a site of the WAC type and add the WAC ESN to the
site. Perform pre-configurations for
WAC onboarding on NCE.
 Import the license.
Configure WAC
⚫ Complete network connectivity configurations to Configure network connectivity. onboarding.
ensure that the WAC is reachable to the cloud
management platform and Fit APs.
Switch the WAC's working mode.
⚫ Switch the WAC's working mode to cloud mode.
⚫ Log in to the WAC and configure address information Configure address information of
of the cloud management platform. the cloud management platform.
⚫ Perform pre-configurations for Fit AP onboarding on Perform pre-configurations for Fit

iMaster NCE-Campus: AP onboarding on NCE.
Configure Fit
 Import the AP list.
Configure Fit AP onboarding and AP onboarding.
 Configure association relationships between APs and the wireless services.
WAC.
⚫ Log in to the cloud WAC and configure Fit AP End
onboarding and wireless services.
Configuring WAC Onboarding (1/2)
⚫ Perform pre-configurations for WAC onboarding on iMaster NCE-Campus:
 Log in to iMaster NCE-Campus.
 Choose Design > Device Management > Add Device > Add, add a WAC as prompted, and click OK.
Configuring WAC Onboarding (2/2)
⚫ Log in to the WAC and run the ac-mode cloud command to switch the WAC to the cloud mode.
[WAC3] ac-mode cloud

Warning: This operation will switch the AC mode to cloud, Continue? [Y/N] y
This operation will take several minutes, please wait...
Warning: The authentication mode is switched to SN authentication. Ensure that the APs added offline have SN information.
Otherwise, configurations of these APs may be lost..
⚫ Run the following command to configure iMaster NCE-Campus address information:
[WAC3] cloud-mng controller ip-address 172.21.10.1 port 10020 source-interface Vlanif 100
Checking the WAC Online Status
⚫ Log in to iMaster NCE-Campus. On the Device Management page, verify that the WAC status is
Normal, which indicates that the WAC goes online successfully.
Configuring Fit AP Onboarding
⚫ Log in to the WAC's web system through iMaster NCE-Campus and configure the CAPWAP source address.
 In the device list of iMaster NCE-Campus, click the WAC name. The device details page is displayed.
 Click Open Web System in the upper right corner to access the WAC's web system.
 Configure the CAPWAP source address.
Checking the Fit AP Online Status
⚫ Log in to iMaster NCE-Campus. On the WAC management page, verify that the AP status is Normal
and the running status is normal, which indicates that the AP goes online successfully.
Contents
Cloud AP Networking
⚫ The cloud AP networking is also a cloud-based management architecture.
Different from the "cloud WAC + Fit AP" networking, the cloud AP
networking does not need a WAC.
Registration Cloud management ⚫ APs in this networking work in cloud mode and are remotely managed and
query center platform
configured on iMaster NCE-Campus in a unified manner.
Gateway
⚫ After a cloud AP is deployed, the network administrator does not need to go
to the site for cloud AP software commissioning. After power-on, the cloud
Access switch AP automatically connects to the specified cloud management platform to
load specified system files such as the configuration file, software package,
and patch file. In this manner, the cloud AP can go online with zero touch
Cloud AP
configuration. The network administrator can deliver configurations to cloud
APs through the cloud management platform anytime and anywhere,
facilitating batch service configurations.
STA STA ⚫ This networking is simple and cost-effective, and requires no WACs. It is
applicable to small- and medium-sized enterprises, such as chain stores,
shopping malls, and supermarkets.
Switching an AP to the Cloud Mode
⚫ APs work in Fit mode by default, and need to be switched to the cloud mode so that they can be centrally managed
by iMaster NCE-Campus. An AP can be switched to the cloud mode in any of the following ways:
Through the Through the registration

Through DHCP Through the CLI
CloudCampus APP query center
• On the DHCP server, the • After the command for • On the CloudCampus • An AP uses the
Option 148 field is switching an AP to the APP, scan the barcode of registration query center's
configured to carry the cloud mode is configured, an AP or log in to the AP URL and port number
AP mode and iMaster the system displays a through the management that are preconfigured or
NCE-Campus message, indicating that SSID and then switch it to obtained through a
information, based on the current configuration the cloud mode. software upgrade to
which the AP restarts will be cleared and the access the registration
and switches to the AP will restart. After the query center, obtains the
cloud mode. AP restarts, it switches to device management
the cloud mode. mode based on its ESN,
• Log in to the cloud AP and restarts to switch to
and manually configure the cloud mode.
the address information
of iMaster NCE-Campus.
• The requirements for configuring the Option 148 field of the DHCP server are as
follows:
▫ To register a cloud AP with iMaster NCE-Campus using the URL of iMaster

NCE-Campus, on the DHCP server, set the Option 148 field to option 148
ascii "agilemode=agile-cloud;agilemanage-mode=domain;agilemanage-
domain=domain-name;agilemanage-port=port-number;ap-
agilemode=agile-cloud;".
▫ To register a cloud AP with iMaster NCE-Campus using the IP address of

iMaster NCE-Campus, on the DHCP server, set the Option 148 field to
option 148 ascii "agilemode=agile-cloud;agilemanage-
mode=ip;agilemanage-domain=ip-address;agilemanage-port=port-
number;ap-agilemode=agile-cloud;".
• By default, an AP works in Fit mode. You can switch the AP to the cloud mode
through the CLI:
▫ Run the ap-mode-switch cloud command to switch the AP to the cloud

mode.
▫ Run the cloud-mng controller { ip-address ip-address | url url-string } port

port-number command to configure the IP address or URL of iMaster NCE-
Campus.
Process for an AP to Be Managed by the Cloud Management
Platform (Through DHCP)
⚫ An AP is managed by iMaster NCE-Campus through NETCONF. This process involves the following phases: DHCP
phase, registration and authentication phase, and iMaster NCE-Campus unified management phase, as shown in
the following figure.
3 iMaster NCE-Campus manages

APs in a unified manner.
Gateway
NETCONF
2 Perform registration and
authentication and establish
a NETCONF channel.
1 During the DHCP
phase, the AP switches
to the cloud mode.
Cloud AP
• DHCP phase:
▫ If an AP is unconfigured, the automatic address obtaining function is

enabled by default on the default management interface VLANIF 1, and the
AP initiates a DHCP request to apply for an IP address. After receiving the
request, the DHCP server replies with a DHCP response packet carrying
iMaster NCE-Campus information in the Option 148 field. After receiving
the response packet, the AP parses the Option 148 field in the packet,
restarts, and switches to the cloud mode.
▫ After the AP switches to the cloud mode, it sends a DHCP request again,
parses the Option 148 field in the response packet to obtain the IP
address/URL of iMaster NCE-Campus, and saves the information locally.
Alternatively, you can use commands to configure the IP address/URL of
iMaster NCE-Campus on the AP. If the AP obtains the IP address/URL of
iMaster NCE-Campus through both DHCP and the CLI, the information
obtained through DHCP is preferentially used.
▫ After obtaining the IP address/URL of iMaster NCE-Campus, the AP sends a

connection request carrying its own certificate. iMaster NCE-Campus
authenticates the AP certificate first. If the authentication succeeds, it
replies with a response packet carrying its CA certificate. The AP will then
authenticate the CA certificate. After the bidirectional authentication
succeeds, a NETCONF transmission channel is established.
• iMaster NCE-Campus unified management phase:
▫ After the NETCONF transmission channel is established, you can manage

and operate the AP on iMaster NCE-Campus. All the data exchanged
between iMaster NCE-Campus and the AP will be encrypted.
Process for an AP to Be Managed by the Cloud Management
Platform (Through the Registration Query Center)
⚫ Two HTTP/2 connections are established in the process where an AP is managed by the cloud management platform through the
registration query center:
 iMaster NCE-Campus connects to the registration query center through HTTP/2 to synchronize information about the AP to be managed.
 The AP establishes an HTTP/2 connection with the registration query center, switches the mode, and obtains the NCE address information.
AP Registration query center Cloud management platform
Establish an HTTP/2 bidirectional

authentication connection. Import information about
Establish an HTTP/2 bidirectional Upload the device ESN and cloud the AP to be managed.
authentication connection. management platform information.
Send a query packet carrying the device ESN.

Send a response packet carrying the
cloud mode.
Switch to the Establish an HTTP/2 bidirectional
cloud mode. authentication connection.
Send a query packet carrying the device ESN.
Send a response packet carrying cloud
management platform information.
Perform registration and authentication.
Example for Configuring Cloud-based AP Management
 An enterprise hopes to deploy the cloud-based AP management
solution on its intranet to centrally manage and monitor the WLAN
Core switch
on the cloud management platform. Cloud
management
 A core switch functions as the DHCP server to allocate IP addresses platform
to APs. The DHCP Option 148 field is configured with the AP cloud
mode and the IP address and port number of the cloud
Access switch
management platform.
 Through DHCP, an AP automatically switches to the cloud mode and
obtains the IP address of the cloud management platform, and then Cloud AP
registers with the cloud management platform and goes online.
 The planned information is as follows:
◼ DHCP address pool for APs: 10.23.200.0/24
STA
◼ IP address and port number of the cloud management platform:
172.21.10.1/24 and 10020
Configuration Roadmap
⚫ Perform pre-configurations for AP onboarding on iMaster NCE-Campus:
 Import the ESN of the AP and the related CA certificate.
Start
 Add the AP to be imported to the site.
 Import the license. Perform pre-configurations for

AP onboarding on NCE.
⚫ Complete network connectivity configurations to ensure that the AP
and cloud management platform are reachable to each other.
Configure network connectivity.
⚫ DHCP server configuration: Configure the AP cloud mode and the IP
address and port number of the cloud management platform in the
Configure the DHCP server.
DHCP Option 148 field.
⚫ AP onboarding: An unconfigured AP connects to the network, obtains

Onboard the AP and configure
information from the DHCP server, and goes online on the cloud wireless services.
⚫ Wireless service configuration: Log in to the cloud AP and configure End

wireless services.
Configuring iMaster NCE-Campus
⚫ Manage APs in a unified manner through iMaster NCE-Campus. The procedure is as follows:
 Log in to iMaster NCE-Campus.
 Choose Design > Device Management > Add Device > Add, add an AP as prompted, and click OK.
Configuring the DHCP Server
⚫ Configure VLANIF 200 on the core switch to allocate an IP address to the AP, and configure the DHCP Option 148
field to carry the AP cloud mode the IP address and port number of the cloud management platform.
[SW-Core] interface Vlanif 200

[SW-Core-Vlanif200] dhcp select interface
[SW-Core-Vlanif200] dhcp server option 148 ascii "agilemode=agile-cloud;agilemanage-mode=ip;agilemanage-
domain=172.21.10.1;agilemanage-port=10020;ap-agilemode=agile-cloud;"
[SW-Core-Vlanif200] quit
⚫ After the AP starts, log in to the core switch and check information obtained by the AP such as the cloud
management platform information.
[SW-Core] display ip pool interface Vlanif200 used

...
Option-value : "agilemode=agile-cloud;agilemanage-mode=ip;agilemanage-domain=172.21.10.1;agilemanage-
port=10020;ap-agilemode=agile-cloud;"
...
Checking the AP Status
⚫ Log in to iMaster NCE-Campus, choose Design > Device Management, and verify that the AP status is
Normal, which indicates that the AP goes online successfully. In this example, AP5 is in cloud mode.
Quiz
1. (Multiple-answer question) In the cloud-based AP management solution, which of the

following methods can be used to switch an AP to the cloud mode? ( )
A. Through DHCP
B. Through the registration query center
C. Through the CLI
D. Through the CloudCampus APP
1. ABCD
Summary
⚫ This course describes the WLAN cloud-based management architecture, including cloud-
based WAC management and cloud-based AP management.
⚫ On completion of this course, you will understand the common WLAN cloud-based
management networking and independently set up a cloud management network based on
the actual environment.
Recommendations

ACL Access Control List
BGP Border Gateway Protocol
CA Certification Authority
ESN Equipment Serial Number
EVPN Ethernet VPN

HTTP Hypertext Transfer Protocol
LAN Local Area Network

NETCONF Network Configuration Protocol
PnP Plug and Play
QoS Quality of Service
WAN Wide Area Network
intelligent world.


User Access and Authentication
Foreword
⚫ As wireless communication is based on open media, the security performance of a wireless

local area network (WLAN) becomes the main focus of concern.
⚫ IEEE 802.11-based WLANs provide increasingly higher wireless access bandwidth and carry
more and more services, which in turn poses higher requirements on WLAN security. How to
ensure user access security and data transmission security is a challenge for WLANs.
⚫ This course introduces you to user access authentication security policies, implementation of
STA blacklist and whitelist, and common access authentication modes. This course also
describes the implementation and configurations of 802.1X, MAC address, and Portal
authentication modes.
Objectives
 Describe the basic process for WLAN access.
 Understand the implementation of the STA blacklist and whitelist.
 Describe common user access security policies.
 Understand how to configure different security policies.
 Describe common access control technologies.
 Understand how to configure different access control technologies.
Contents
1. User Access Security
2. STA Blacklist and Whitelist
3. Security Policy
4. Access Control
User Access Security
⚫ A set of security measures are taken to safeguard STA access on a WLAN, and secure association is
established through authentication to ensure that all communication parties have valid identities. The
detailed process for users to access a WLAN is as follows:
Scan
Link authentication:
• Open system authentication Access authentication security policies:
Access
Link • Shared key authentication • Open

authentication
• Wired equivalent privacy (WEP)
• Wi-Fi Protected Access (WPA)
Association Association: • WPA2
• After link authentication is complete, a • WPA3
STA initiates link service negotiation using • WLAN Authentication and Privacy
Access Association frames. Infrastructure (WAPI)
Authentication
authentication • Whether a STA can associate with an AP is

determined by the maximum number of
Key negotiation access STAs supported by the AP and
Data encryption configured user access control functions,
such as STA blacklist and whitelist and
control over the number of users.
Network access
Link Authentication
⚫ To ensure wireless link security, an AP needs to authenticate STAs that attempt to access the AP. IEEE 802.11
defines two link authentication modes: open system authentication and shared key authentication.
 Open system authentication: No authentication, allowing any STA to be successfully authenticated.
 Shared key authentication: The same shared key is preconfigured on a STA and an AP. During link authentication, the AP checks
whether the STA has the same shared key. If so, the STA is authenticated successfully. If not, STA authentication fails.
⚫ Shared key authentication is used for link authentication only when the access authentication security policy is
static WEP. Otherwise, open system authentication is used.
STA AP STA AP
Authentication Request Authentication Request
Authentication Response Authentication Response (Challenge)
Authentication Response (Encrypted Challenge)
Authentication Response (success)
Open system authentication process Shared key authentication process
• The shared key authentication process is as follows:
▫ The STA sends an Authentication Request frame to the AP.
▫ The AP generates a challenge and sends it to the STA.
▫ The STA uses the preconfigured key to encrypt the challenge and sends the
encrypted challenge to the AP.
▫ The AP uses the preconfigured key to decrypt the encrypted challenge and
compares the decrypted challenge with the challenge earlier sent to the
STA. If the two challenges are the same, the STA is authenticated
successfully. Otherwise, STA authentication fails.
Contents
3. Security Policy
4. Access Control
Overview of the STA Blacklist and Whitelist
⚫ On a WLAN, a STA blacklist or whitelist can be configured to filter access from STAs based on specific
rules. The blacklist or whitelist allows authorized STAs to connect to the WLAN and rejects access from
unauthorized STAs.
 A whitelist contains MAC addresses of STAs that are allowed to connect to a WLAN. After the STA whitelist
function is enabled, only the STAs matching the whitelist can connect to the WLAN.
 A blacklist contains MAC addresses of STAs that are not allowed to connect to a WLAN. After the STA blacklist
function is enabled, STAs matching the blacklist cannot connect to the WLAN.
STA1 STA1
STA2 Switch WAC STA2 Switch WAC

AP AP
STA3 STA3
STA whitelist STA blacklist
• STA whitelist:
▫ As shown in the left figure, visiting employees often bring their laptops in
an AP's coverage area on a campus network. If only STAs of a few local
employees are allowed to connect to the WLAN, the enterprise can
configure the whitelist function on the WAC and add MAC addresses of
these STAs to the whitelist. For example, STA2 in the figure is added to the
whitelist. Then only STA2 can connect to the WLAN, and STAs not in the
whitelist (STA1 and STA3 in the figure, for example) cannot connect to the
WLAN through the AP.
• STA blacklist:
▫ As shown in the right figure, many STAs of local employees exist in an AP's
coverage area on a campus network. Guests or visiting employees
sometimes bring their laptops to this AP's coverage area. If only STAs of
guests or visiting employees are not allowed to connect to the WLAN, the
enterprise can configure the blacklist function the WAC and add MAC
addresses of these STAs to the blacklist. For example, STA3 is added to the
blacklist. Then STA3 cannot connect to the WLAN through the AP, and STAs
not in the blacklist (STA1 and STA2 in the figure, for example) can connect
to the WLAN.
Implementation of the STA Blacklist and Whitelist
⚫ The flowchart for implementing the STA blacklist Start
and whitelist function is described as follows:

Check the access control
 The device checks the access control mode of a STA. mode of the STA.
 If the whitelist function is enabled, the device checks The whitelist The blacklist and The blacklist
whether the source MAC address of the packet is in function enabled. whitelist function function enabled.
is disabled.
the whitelist. If so, the device allows the STA to go Yes
Is the whitelist
online. If not, the device rejects the STA's access empty?
request.
No
 If the blacklist function is enabled, the device checks
No
Is the source MAC Is the source MAC Yes
whether the source MAC address of the packet is in
address in the address in the
the blacklist. If so, the device rejects the STA's access whitelist? blacklist?
request. If not, the device allows the STA to go online. Yes No
 If neither the blacklist nor the whitelist function is STA access allowed
enabled, STAs are allowed to go online.
STA access denied
• If the STA whitelist or blacklist function is enabled but the whitelist or blacklist is
empty, all STAs can connect to the WLAN.
• Multiple STA whitelist and blacklist profiles can be configured on a WLAN device
and bound to different VAP profiles or AP system profiles. In a VAP profile or an
AP system profile, either the STA whitelist profile or STA blacklist profile takes
effect at one time.
STA Whitelist Configuration
⚫ A STA whitelist profile contains MAC addresses of STAs allowed to connect to the WLAN. To allow only
a few STAs to connect to the WLAN, configure a STA whitelist profile and bind it to an AP system
profile or a VAP profile. When a STA whitelist is bound to both an AP system profile and a VAP profile,
a STA that does not match any rule cannot go online.
⚫ The effective scope of the STA whitelist profile differs according to the profiles to which it is applied.
 AP system profile: The STA whitelist profile takes effect based on the AP. If an AP uses the AP system profile,
the STA whitelist profile takes effect on all STAs connected to the AP (including all its VAPs).
 VAP profile: The STA whitelist profile takes effect based on the VAP. If an AP uses the VAP profile, the STA
whitelist profile takes effect on all STAs on the corresponding VAP.
[WAC-wlan-view] sta-whitelist-profile name sta-whitelist

[WAC-wlan-whitelist-prof-sta-whitelist] sta-mac mac-address //Add the MAC address of a STA.
[WAC-wlan-whitelist-prof-sta-whitelist] oui oui //Add the OUI of a STA.
[WAC-wlan-whitelist-prof-sta-whitelist] quit
• When configuring the STA blacklist and whitelist function, note that some
mainstream smart terminals (such as Android terminals) can use random MAC
addresses to associate with a WLAN to improve privacy protection capabilities.
The MAC addresses used by terminals to associate with a WLAN may not be their
real physical MAC addresses. Therefore, MAC address-based services cannot take
effect.
STA Blacklist Configuration
⚫ A STA blacklist profile contains MAC addresses of wireless terminals forbidden to connect to the WLAN.
To forbid only a few STAs to connect to the WLAN, configure a STA blacklist profile and bind it to an
AP system profile or a VAP profile. When a STA blacklist is bound to both an AP system profile and a
VAP profile, a STA that does not match any rule cannot go online.
⚫ The effective scope of the STA blacklist profile differs according to the profiles to which it is applied.
 AP system profile: The STA blacklist profile takes effect based on the AP. If an AP uses the AP system profile, the
STA blacklist profile takes effect on all STAs connected to the AP (including all its VAPs).
 VAP profile: The STA blacklist profile takes effect based on the VAP. If an AP uses the VAP profile, the STA
blacklist profile takes effect on all STAs on the corresponding VAP.
[WAC-wlan-view] sta-blacklist-profile name sta-blacklist
[WAC-wlan-blacklist-prof-sta-blacklist] sta-mac mac-address //Add the MAC address of a STA.
[WAC-wlan-whitelist-prof-sta-whitelist] quit
• Note that a STA blacklist profile does not support OUI-based configuration
commands.
Contents
3. Security Policy
4. Access Control
Overview of Security Policies
⚫ The following WLAN security policies are available: open, WEP, WPA, WPA2, WPA3, and WAPI. Each
security policy has a series of security mechanisms, including link authentication used to establish a
wireless link, user authentication used when users attempt to connect to a wireless network, and data
encryption used during data transmission.
OPEN WEP WPA
• Open authentication means • WEP encryption uses a • WPA defines the Temporal
no authentication and no static shared key. STAs use Key Integrity Protocol
encryption, and any one can the same WEP key for (TKIP) encryption algorithm
connect to the network encryption, resulting in low based on WEP.
without authentication. security.
WPA2 WPA3 WAPI

• Subsequent to WPA, IEEE • WPA3 introduces a variety • WAPI provides higher
802.11i launched WPA2, of new functions based on security than WEP and WPA
which uses a more secure WPA2 and leverages and consists of WAI and
encryption algorithm — Protected Management WPI.
Counter Mode with Cipher Frames (PMF) to protect
Block Chaining Message data security on a WLAN.
Authentication Code
Protocol (CCMP).
• Open: involves no authentication or encryption, which is not mentioned here.

Application Scenarios of WLAN Security Policies
Security policy for Security policy for

Security policy for Security policy for
home and SOHO retail and hotel
enterprise networks carrier networks
networks industries
• Home and SOHO • In the retail industry, • Enterprise networks • Use security policies
networks have low WPA/WPA2-PPSK require high WLAN unique to STAs, such as
requirements on WLAN authentication can be security. Typically, WEP,
security. Typically, used for scanners. Each 802.1X-based WPA/WPA2/WPA3, or
WPA/WPA2/WPA3- scanner is configured WPA/WPA2/WPA3- WAPI.
Personal is applicable. with a unique key and Enterprise is applicable. • Combine security
• This scenario requires connected to the same • This scenario requires policies and user access
no authentication SSID. an authentication authentication.
server. • In guest access server, involving Common access
scenarios of the hotel complex configurations. authentication modes
industry, WPA/WPA2- include 802.1X, MAC
PPSK authentication can address, and Portal
be used to authenticate authentication.
and authorize guests.
WEP
⚫ Wired Equivalent Privacy (WEP), defined in IEEE 802.11, is used to protect data of authorized users
from being intercepted by third parties during transmission on a WLAN.
 Static WEP: uses a shared key to authenticate STAs and encrypt data. All STAs associating with the same SSID
use the same key to access the WLAN.
 Dynamic WEP: works with 802.1X authentication. An 802.1X authentication server dynamically delivers different
WEP encryption keys to STAs for encryption.
STA AP
Authentication Request
Authentication Response (Challenge)
Authentication Response (Encrypted Challenge)
Authentication Response (success)
Static WEP
• Static WEP: uses the RC4 algorithm to encrypt data through a 64-bit, 128-bit, or
152-bit encryption key. Each encryption key contains a 24-bit IV generated by the
system. Therefore, the length of the key configured on the WLAN server and STA
is 40 bits, 104 bits, or 128 bits. A WEP security policy defines a link authentication
mechanism and a data encryption mechanism. Link authentication mechanisms
include open system authentication and shared key authentication.
▫ If open system authentication is used, data is not encrypted during link
authentication. After a STA goes online, service data can be encrypted by
WEP or not, depending on the configuration.
▫ If shared key authentication is used, key negotiation is completed during
link authentication. After a STA goes online, service data is encrypted using
the negotiated key.
• Dynamic WEP: Before IEEE 802.11i is launched, no unified wireless encryption
standard is available. Vendors enhance WEP encryption by leveraging 802.1X
authentication to achieve dynamic WEP encryption. The 40-bit, 104-bit, or 128-bit
dynamic WEP key is dynamically generated and delivered by the 802.1X
authentication server. In this manner, different WEP keys are used for encrypting
different STAs. In the link authentication phase of dynamic WEP, only open
system authentication is supported. After STAs go online, service data is
encrypted using the key that is dynamically generated and delivered by the
server.
• WEP keys are exchanged in clear text, which is insecure and not recommended.
WPA/WPA2
⚫ WPA still uses RC4 as the core encryption algorithm, and proposes the TKIP encryption algorithm based on WEP.
Subsequent to WPA, WPA2 uses the CCMP encryption algorithm, which is more secure.
⚫ Both WPA and WPA2 support 802.1X access authentication and the TKIP or CCMP encryption algorithm. With
almost the same security level, they mainly differ in the protocol packet format.
⚫ WPA/WPA2 is available in the enterprise and personal editions, both involving link authentication, access
authentication, key negotiation, and data encryption.
• WPA/WPA2-Personal uses pre-shared keys (WPA/WPA2-PSK) for simpler implementation
and management.
WPA/WPA2 • No dedicated authentication server is required, and only one PSK needs to be set in
Personal advance on each STA and WLAN node. In this way, users only need to enter the correct
PSK on the STAs for authentication.
WPA/WPA2
• WPA/WPA2-802.1X access authentication is used.
WPA/WPA2 • An authentication server and Extensible Authentication Protocol (EAP) are used for
Enterprise authentication.
• Users provide credentials for authentication, such as the user name and password, and
are authenticated by a specified authentication server (typically a RADIUS server).
• WPA/WPA2-Enterprise is typically used on large-scale enterprise networks.

WPA/WPA2-PSK (1/2)
⚫ Access authentication phase: A PSK needs to be preconfigured on each WLAN node, which is used only for authentication but not for
encryption.
⚫ Key negotiation phase: A pairwise transient key (PTK) and a group temporal key (GTK) are generated based on the pairwise master
key (PMK) generated during access authentication. The method for generating a PMK varies depending on the PSK format:
 If a PSK is in hexadecimal format, it is used as the PMK.
 If a PSK is a string of characters, the PMK is calculated using the hash algorithm based on the PSK and SSID.
STA AP
STA AP
Generates an Generates an
SNonce. ANonce.
Generates a random
EAPOL-Key (ANonce) EAPOL-Key (GNonce, Key RSC,
Generates a PTK. number GNonce.
MIC, GTK, IGTK)
EAPOL-Key (SNonce, MIC, RSNE)
Generates a PTK.
EAPOL-Key (Key RSC, ANonce, EAPOL-Key (GNonce, MIC)
MIC, RSNE, GTK, IGTK)
Installs a PTK.
EAPOL-Key (MIC)
Installs a PTK.
PTK negotiation process GTK negotiation process
• The WPA/WPA2 security policy supports only open system authentication in the
link authentication phase, and is not mentioned here.
• Unicast key negotiation is completed through a four-way handshake by

exchanging Extensible Authentication Protocol over LAN (EAPOL)-Key frames.
▫ The AP sends an EAPOL-Key frame with an authenticator nonce (ANonce),

which is a random number, to the STA.
▫ The STA calculates the PTK based on its own MAC address, MAC address of
the AP, PMK, ANonce, and supplicant nonce (SNonce). Then the STA sends
an EAPOL-Key frame to the AP. This frame carries the SNonce, robust
security network element (RSNE), and message integrity code (MIC). The
AP then calculates the PTK using its own MAC address, MAC address of the
STA, PMK, ANonce, and SNonce, and validates the MIC to determine
whether the STA's PMK is the same as its own PMK.
▫ The AP sends an EAPOL-Key frame carrying the ANonce, RSNE, MIC, and
encrypted GTK to the STA, requesting the STA to install the PTK.
▫ The STA sends an EAPOL-Key frame to the AP, notifying the AP that the
PTK has been installed and will be used. After receiving the frame, the AP
installs the PTK.
• Group key negotiation is completed through a two-way handshake, which begins
after a PTK is generated and installed through a four-way handshake.
▫ The AP calculates the GTK, uses the unicast key to encrypt the GTK, and
sends an EAPOL-Key frame to the STA.
▫ After receiving the EAPOL-Key frame, the STA validates the MIC, decrypts
and installs the GTK, and sends an EAPOL-Key ACK frame to the AP. After
receiving the EAPOL-Key ACK frame, the AP validates the MIC and installs
the GTK.
WPA/WPA2-PSK (2/2)
⚫ Data encryption phase: WPA/WPA2 supports TKIP and CCMP algorithms for data encryption:
 TKIP encryption algorithm: It is inherited from WEP and consists of data encryption and information integrity
check.
◼ Data encryption: The stream cipher mechanism is used. The encryption key is generated based on the PTK, sender's MAC
address, and packet sequence number.
◼ Information integrity check: The message integrity code (MIC) authentication and replay attack prevention are supported.
 CCMP encryption algorithm: It uses the Advanced Encryption Standard (AES) encryption algorithm based on the
block cipher mechanism. AES is a more secure encryption algorithm. In addition to data encryption and integrity
check, AES can effectively defend against network attacks such as brute force cracking.
◼ Data encryption: The AES encryption algorithm is used.
◼ Information integrity check: The CBC-MAC mode is used to check data integrity.
Data encryption and decryption
STA1 Information integrity check

AP Switch WAC
• CCMP uses the AES encryption algorithm, Counter Mode for encryption, and CBC-
MAC for integrity check.
• CBC-MAC is short for cipher block chaining message authentication code. It is an

algorithm used to check data integrity.
WPA/WPA2-802.1X (1/2)
⚫ Access authentication: The 802.1X authentication system consists of the client, access device, and authentication
server. EAP is used for information exchange between components in the authentication system.
802.1X client AP Access device (WAC) Authentication server
 The EAP packets transmitted between the client and access device are encapsulated in EAPOL format and transmitted on the
LAN.
 You can determine to use the EAP termination or EAP relay authentication modes between the access device and authentication
server based on the client support and network security requirements.
 Common EAP authentication methods include MD5-Challenge, EAP-TLS, EAP-TTLS, and EAP-PEAP. When EAP termination is
used, only MD5-Challenge authentication is supported. When EAP relay is used, all the preceding authentication methods are
supported.
• Compared with the EAP relay mode, in EAP termination mode, the access device
randomly generates an MD5 challenge for encrypting the user password, and
sends the user name, MD5 challenge, and password encrypted by the client to
the RADIUS server for authentication. In EAP relay mode, the challenge used to
encrypt the user password is generated by the authentication server, and the
access device is only responsible for encapsulating EAP packets into RADIUS
packets and transparently transmitting them to the authentication server. The
entire authentication process is implemented by the authentication server.
WPA/WPA2-802.1X (2/2)
⚫ Key negotiation: A PMK can be generated based on EAP-TLS or EAP-PEAP, as shown in the following figures.
⚫ Data encryption: WPA/WPA2-802.1X supports TKIP and CCMP algorithms for data encryption.
STA AP WAC RADIUS server STA AP WAC RADIUS server
Open system Open system

authentication authentication
Association
Association
EAP start
EAP start EAP request for user identification
EAP response for user identification User identification
EAP request for user identification
PEAP authentication start PEAP authentication start
EAP response for user identification User identification Sends messages such as the Sends messages such as the
encryption algorithm list, TLS encryption algorithm list, TLS
Server certificate (public key) Server certificate (public key) protocol version, and session ID protocol version, and session ID
STA certificate STA certificate Server certificate (public key) Server certificate (public key)
Authentication success Authentication success, STA certificate STA certificate

a PMK generated
Authentication success, a
Authentication success
PMK generated
EAP-TLS-based PMK generation process EAP-PEAP-based PMK generation process
WPA/WPA2-PPSK (1/2)
⚫ In WPA/WPA2-PSK authentication, all STAs connected to a specified SSID use the same key, which may bring security risks.
⚫ WPA/WPA2-PPSK authentication inherits the advantages of WPA/WPA2-PSK authentication and is easy to deploy. In addition,
WPA/WPA2-PPSK authentication provides different PSKs for different STAs, improving network security.
WPA/WPA2-PSK WPA/WPA2-PPSK
SSID = huawei SSID = huawei
PSK = huawei123 PSK = huawei123 PSK = huawei123 PSK = huawei456
• In WPA/WPA2-PSK authentication, all STAs connected to • Multiple users connected to the same SSID can each
a specified SSID use the same key, which may bring have a unique key.
security risks. • If a user has multiple STAs, the STAs can connect to
the network using the same PPSK account.
• In WPA/WPA2-PSK authentication, all STAs connected to a specified SSID use the

same key, which may bring security risks. In WPA/WPA2-PPSK authentication
mode, users connected to the same SSID can have different keys and be
authorized with different permissions. If a user has multiple STAs, these STAs can
connect to the network using the same PPSK account.
WPA/WPA2-PPSK (2/2)
⚫ WPA/WPA2-PPSK authentication has the following characteristics:
 Multiple users connected to the same SSID can each have a unique key.
 The configuration and deployment are simple.
 If a user has multiple STAs, the STAs can connect to the network using the same PPSK account.
 A PPSK user is bound to a user group or authorization VLAN so that different authorization policies can be assigned to different
PPSK users.
⚫ WPA/WPA2-PPSK implementation: Create a PPSK user on the WAC and bind the user name, VLAN ID, STA's MAC
address, and access SSID to the user.
Create a PPSK user

⚫ User name ⚫ Branch AP group
(i.e. password) ⚫ User group ⚫ MAC address bound
to the user
⚫ VLAN
⚫ SSID
⚫ Expiration time
Set PPSK user parameters
⚫ Maximum number
of access users
• Specify the PPSK user name. If user-name is not specified, the user name
ppsk_auto_user_xxx is automatically generated, in which xxx indicates a serial
number. If user-name is specified, ensure that the user name is unique.
• Specify the user group to which the PPSK user is bound. Authorization is
delivered to the PPSK user based on the user group.
• Specify the authorization VLAN to which the PPSK user is bound. Authorization is
delivered to the PPSK user based on the authorization VLAN.
• Specify the expiration time of the PPSK user. The user cannot access the network
after the specified date. If this parameter is not specified, the PPSK user is valid
until December 31, 2099.
• Specify the maximum number of access users. After this parameter is specified,
only a specified number of access users are allowed to access the network.
• Specify the branch AP group to which the PPSK user belongs. After this
parameter is specified, the PPSK user in the branch can access the network even
after the link between the headquarters and branch is disconnected.
• Specify the MAC address bound to the PPSK user. After this parameter is
specified, only the user bound to the MAC address is allowed to access the
network.
• Specify the SSID for PPSK user access.

WPA/WPA2-DPSK
⚫ Compared with WPA/WPA2-802.1X authentication and Portal authentication, WPA/WPA2-PPSK authentication is
easier to deploy. However, when multiple WACs are deployed on the network, PPSK account information must be
configured on each WAC. This makes PPSK account operations complex and does not support unified management
of PPSK accounts. In this case, WPA/WPA2-DPSK authentication is a good choice to replace WPA/WPA2-PPSK.
⚫ DPSK is short for Dynamic Pre-Shared Key. In WPA/WPA2-DPSK authentication, all user accounts are configured
and managed on an authentication server. The following figure shows the authentication process.
STA AP WAC RADIUS server
Association request
Association request MAC address
authentication request
MAC address
authentication response
Authorization
4-way handshake message delivery
key negotiation
• The DPSK authentication process is as follows:

▫ A STA sends an Association Request message to the AP.
▫ The AP forwards the Association Request message to the WAC.
▫ After receiving the Association Request message, the WAC sends a MAC
address authentication request carrying the MAC address of the STA to the
RADIUS server.
▫ Upon receiving the authentication request, the RADIUS server queries local
authorization information such as the shared key, VLAN, and user group
configured for this MAC address, and sends the authorization information
to the WAC. In this case, the RADIUS server sends the HW-DPSK-Info
attribute value in cipher or plain text to the WAC based on the attribute
configuration.
▫ After receiving the response from the RADIUS server, the WAC delivers the
authorization information to the AP.
▫ The AP and STA perform a four-way handshake to negotiate the key. When
the negotiation succeeds, STA authentication succeeds.
• Ensure that user information, including the shared keys, VLANs, and user groups
for different MAC addresses, has been pre-configured on the RADIUS server
before DPSK authentication.
• WPA/WPA2-DPSK must be used together with MAC address authentication.
WPA3
⚫ WPA3 is the next-generation Wi-Fi encryption protocol released by the Wi-Fi Alliance. On the basis of
WPA2, WPA3 adds new functions to simplify Wi-Fi security assurance methods, implement more
reliable identity authentication, and improve data transmission security.
⚫ Based on application scenarios and security requirements of Wi-Fi networks, two WPA3 modes are
available: WPA3-Personal and WPA3-Enterprise, that is, WPA3-SAE and WPA3-802.1X.
⚫ WPA3 provides the Enhanced Open network authentication mode — Opportunistic Wireless Encryption
(OWE) — based on open system authentication.
Open: no WEP: weak WPA: strong WPA2: strong WPA3: strongest

encryption encryption encryption encryption encryption
• Introduced in 1999 • Introduced in 2003 • Introduced in 2004 • Currently the most

• Cracked in 2001 • Replaced by WPA2 in 2004 • Replaced by WPA3 secure
in 2018 • Meeting high security
requirements
• Compared with WPA and WPA2, WPA3 has the following improvements:
▫ WPA3 introduces SAE, which is a more secure handshake protocol.

Theoretically, SAE provides forward secrecy. Even if an attacker knows the
password on a network, the attacker cannot decrypt the obtained traffic.
However, on a WPA2 network, an attacker can decrypt obtained traffic
using the password.
▫ The algorithm strength is enhanced, and the Cipher Suite B is supported.

WPA3-SAE
⚫ WPA3-Personal introduces Simultaneous Authentication of Equals (SAE) that provides higher security.
SAE adds an SAE handshake before the four-way handshake process of WPA/WPA2-PSK to dynamically
negotiate a PMK. The PMK used in WPA/WPA2-PSK is related only to the SSID and PSK. SAE leverages
dynamic random variables to negotiate the PMK. With SAE, the PMK negotiated using SAE each time is
different, improving security.
⚫ WPA3-Personal supports only the AES encryption algorithm.
STA AP
Generates a PWE Generates a PWE encapsulated

encapsulated with a with a random number.
random number. SAE Commit
Generates a PMK.
SAE Commit
Generates a PMK.
SAE Confirm Verifies the PMK.
SAE Confirm
Verifies the PMK.
SAE exchange process
• The SAE handshake can be initiated by either the STA or AP and involves the
following phases:
▫ SAE Commit phase: In this phase, a four-way handshake PMK is generated.

The two authentication entities (AP and STA) both send a password
element of an ECC group (PWE) encapsulated by random numbers. The
PWE is a key derived from the password and the MAC address of the peer
end. Based on the encapsulated PWE, the PMK is generated through
calculation. When the SAE Commit phase is complete, both the
authentication entities generate PMKs but do not know whether their PMKs
are the same.
▫ SAE Confirm phase: The purpose of this phase is to verify that the two
entities have the same PMK. A part of the PMK is used to check the
integrity of the Commit packet sent in the previous phase. If both entities
can pass the check, they have the same PMK and can perform the four-way
handshake.
• WPA3-Personal:
▫ WPA3-Personal introduces the SAE handshake protocol. Compared with

WPA/WPA2-PSK authentication, WPA3-SAE can effectively defend against
offline dictionary attacks and increase the difficulty of brute force cracking.
In addition, the SAE handshake protocol provides forward secrecy. Even if
an attacker knows the password on the network, the attacker cannot
decrypt or obtain traffic, greatly improving the security of the WPA3-
Personal network.
• WPA2/WPA3 transition mode:
▫ WPA2 is still widely used. To enable WPA3-incapable STAs to access a

WPA3-configured network, the Wi-Fi Alliance defines the WPA3-Personal
transition mode. That is, WPA3 and WPA2 can coexist for a period of time
in the future. The transition mode supports only the AES encryption mode
but does not support the TKIP encryption mode.
▫ In WPA3 transition mode, the access process for WPA2 STAs is the same as
that for STAs using WPA2-PSK authentication, with PMF in optional mode.
However, for WPA3 STAs, the access process uses WPA3-SAE
authentication, with PMF in mandatory mode.
WPA3-802.1X
⚫ WPA3-Enterprise still uses the authentication system of WPA2-Enterprise and uses EAP for identity
authentication, but it enhances security.
 Encryption algorithm: The 256-bit Galois/Counter Mode Protocol (GCMP-256) encryption algorithm is
supported. This algorithm also uses the AES encryption algorithm, and the key length is 256 bits.
 Integrity check: The 384-bit SHA data integrity check algorithm is supported to ensure data integrity.
⚫ WPA3-Enterprise supports the Cipher Suite B, including the following algorithms:

 TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
OWE Authentication
⚫ In addition to WPA3-Personal and WPA3-Enterprise, WPA3 provides the Enhanced Open network
authentication mode — OWE — based on open system authentication.
⚫ OWE authentication is a Wi-Fi Enhanced Open authentication mode that allows for network access
without the need to enter the password. In OWE authentication mode, a device uses the AES
encryption algorithm to encrypt data on the network, thereby protecting data exchange between STAs
and the Wi-Fi network.
Access authentication Key negotiation Data encryption
Users can connect to The Diffie–Hellman The AES encryption

the WLAN without algorithm is used for algorithm is used to
entering the password. key exchange to encrypt data traffic on
generate a PMK for the the network.
subsequent four-way
handshake.
• OWE transition mode:
▫ The OWE transition mode provides backward compatibility with STAs that
do not support OWE authentication. That is, these STAs access the network
in open-system authentication mode, while OWE-capable STAs access the
network in OWE authentication mode.
▫ In OWE transition mode, only the AES encryption mode is supported.

WAPI
⚫ WLAN Authentication and Privacy Infrastructure (WAPI) is a Chinese national security standard for WLANs and was
developed based on IEEE 802.11. WAPI provides higher security than WEP and WPA and consists of the following
parts:
 WLAN Authentication Infrastructure (WAI): authenticates user identities and manages keys.
 WLAN Privacy Infrastructure (WPI): protects data transmitted on WLANs and provides the data encryption, data verification, and
anti-replay functions.
⚫ WAPI involves identity authentication and key negotiation, which begin after a STA associates with a WAC. After
the key negotiation is complete, the SMS4 algorithm is used for data encryption.
2. Identity authentication
1. STA association with the WAC
STA AP WAC Authentication server
3. Key negotiation
• WAPI has the following advantages:
▫ Bidirectional identity authentication: prevents access from unauthorized

STAs and protects a WLAN against attacks from unauthorized WLAN
devices.
▫ Digital certificate identity: A WAPI system has an independent certificate

server. STAs and WLAN devices use digital certificates to prove their
identities, improving network security. When a STA requests to join or leave
a network, the administrator only needs to issue a certificate to the STA or
revoke the certificate of the STA.
▫ Complete authentication protocol: WAPI uses digital certificates to identify

STAs. During identity authentication, the elliptic curve digital signature
algorithm (ECDSA) is used to verify a digital certificate. In addition, the
secure message hash algorithm is used to ensure message integrity,
preventing attackers from tampering with or forging information
transmitted during identity authentication.
Identity Authentication
⚫ WAPI provides two identity authentication modes: certificate-based mode (WAPI-CERT) and PSK-based mode
(WAPI-PSK).
 WAPI-CERT: A STA and a WAC authenticate each other's certificate. The certificates must be loaded on the STA and WAC and
verified by an authentication server. After certificate authentication is complete, the STA and WAC use the temporal public key
and private key to generate a base key (BK) for key negotiation.
 WAPI-PSK: A STA and a WAC authenticate each other's identities based on the PSK. The STA and WAC must be configured with
the same PSK before authentication. The PSK is converted into a BK during authentication.
STA WAC Authentication server
Authentication activation packet
Access authentication request

Certificate
authentication request
Certificate authentication
response
Access authentication response
WAPI certificate authentication process
• The WAPI-CERT mode is applicable to large-scale enterprise networks or carrier

networks that can deploy and maintain an expensive certificate system.
• The WAPI-PSK mode does not require an expensive certificate system, so it is

applicable to individual users or small-scale enterprise networks.
• The WAPI certificate authentication process is described as follows:
▫ Authentication activation: When a STA requests to associate or re-associate

with a WAC, the WAC checks whether the STA is a WAPI STA. If so, the
WAC sends an authentication activation packet to trigger the certificate
authentication process.
▫ Access authentication request: The STA sends an access authentication

request carrying the STA's certificate and system time to the WAC. The
system time is the access authentication request time.
▫ Certificate authentication request: When the WAC receives the access

authentication request, it records the access authentication request time
and sends a certificate authentication request to the authentication server.
The certificate authentication request carries the STA's certificate, access
authentication request time, WAC's certificate, and signature generated
using the WAC's private key and the preceding information.
▫ Certificate authentication response: When the authentication server receives
the certificate authentication request, it authenticates the WAC's signature
and the STA's certificate. If the WAC's signature and certificate are invalid,
the authentication fails. If they are valid, the authentication server
authenticates the STA's certificate. After the authentication is complete, the
authentication server constructs a certificate authentication response with
the STA's certificate authentication result, WAC's certificate authentication
result, and signature generated using the authentication results, and sends
the certificate authentication response to the WAC.
▫ Access authentication response: When the WAC receives the certificate

authentication response, it checks the signature to obtain the STA's
certificate authentication result, and controls access of the STA based on
the certificate authentication result. The WAC then forwards the certificate
authentication response to the STA. The STA checks the signature
generated by the authentication server to obtain the WAC's certificate
authentication result, and determines whether to associate with the WAC
based on the result. If the certificate authentication succeeds, the WAC
accepts the access request. Otherwise, the WAC disassociates the STA.
Key Negotiation
⚫ After the WAC is authenticated by the authentication server, the WAC initiates key negotiation with the
STA. Key negotiation consists of unicast key negotiation and group key negotiation.
 Unicast key negotiation: A unicast key is generated using a BK based on a specific algorithm.
 Group key negotiation: Based on unicast key negotiation, the WAC advertises a multicast key to the STA after
multicast key negotiation succeeds.
STA WAC STA WAC
Unicast key negotiation request Group key advertisement
Unicast key negotiation response

Group key response
Unicast key negotiation ACK
Obtains or delivers Obtains or delivers a
a unicast key. group key.
WAPI unicast key negotiation process WAPI group key negotiation process
Comparison Between Different Security Policies
Security Access Encryption
Link Authentication Recommended Scenario Description
Policy Authentication Algorithm
Open system authentication No encryption Networks with low security This security policy is not recommended due to
WEP None
or shared key authentication or RC4 requirements its low security.
This security policy has higher security than
WPA/WPA2-
Open system authentication None TKIP or AES Home and SMB networks WEP. Additionally, no third-party server is
PSK
required and the cost is low.
WPA/WPA2- 802.1X Large-scale enterprise networks This security policy provides high security and
Open system authentication TKIP or AES
802.1X authentication with high security requirements requires a third-party server.
WPA/WPA2- The deployment is simple, and "one password
Open system authentication None TKIP or AES Hotels and retail stores
PPSK for one device" can be implemented.
WPA/WPA2- MAC Address This security policy provides high security and
Open system authentication TKIP or AES Hotels and retail stores
DPSK Authentication requires a third-party server.
This security policy provides high security and
WPA3-SAE Open system authentication None AES Home and SOHO networks
does not require a third-party server.
WPA3- 802.1X Government and large- This security policy is applied to scenarios that
Open system authentication GCMP-256
802.1X authentication enterprise networks require extremely high security.
Portal or MAC Public places, such as airports,
It is more secure than open system
OWE Open system authentication address AES stations, business centers, and
authentication and encrypts data.
authentication conference venues
This security policy is supported only by some
WAPI-PSK Open system authentication None SMS4 Home and SMB networks
terminals.
Large-enterprise and carrier This security policy requires an authentication
WAPI-CERT Open system authentication None SMS4
networks server and is supported only by some terminals.
Configuring a WLAN Security Policy (1/2)
⚫ Configure WPA/WPA2-PSK authentication.
[WAC-wlan-view] security-profile name test
[WAC-wlan-sec-prof-test] security { wpa | wpa2 | wpa-wpa2 } psk { pass-phrase | hex } key-value { aes | tkip | aes-tkip }
[WAC-wlan-sec-prof-test] quit
⚫ Configure WPA/WPA2-802.1X authentication.

[WAC-wlan-sec-prof-test] security { wpa | wpa2 | wpa-wpa2 } dot1x { aes | tkip | aes-tkip }
⚫ Configure WPA/WPA2-PPSK authentication.

[WAC-wlan-sec-prof-test] security { wpa | wpa2 | wpa-wpa2 } ppsk { aes | tkip | aes-tkip }
[WAC-wlan-view] ppsk-user psk { pass-phrase | hex } key-value [ user-name user-name | user-group user-group | vlan vlan-
id | expire-date expire-date [ expire-hour expire-hour ] | max-device max-device-number | branch-group branch-group | mac-
address mac-address ]* ssid ssid
Configuring a WLAN Security Policy (2/2)
⚫ Configure WPA/WPA2-DPSK authentication.
[WAC-wlan-sec-prof-test] security { wpa | wpa2 | wpa-wpa2 } dpsk { aes | tkip | aes-tkip }
⚫ Configure WPA3-SAE authentication.

[WAC-wlan-sec-prof-test] security wpa3 sae pass-phrase key-value aes
⚫ Configure WAPI-PSK authentication.

[WAC-wlan-sec-prof-test] security wapi psk { pass-phrase | hex } key-value
Contents
3. Security Policy
4. Access Control
◼ Access Control Solution
▫ Access Control Configuration
Overview of NAC
⚫ Network Access Control (NAC) is an end-to-end security technology that authenticates access clients
and users to ensure network security.
⚫ NAC provides three authentication modes: 802.1X authentication, MAC address authentication, and
Portal authentication.
User terminal Network access device Access server • User terminal: various terminals, such as PCs, mobile
phones, printers, and cameras.
• Network access device: authentication control point
for terminals to access the network. A network access
device authenticates access users and executes
network security policies to implement admission
control (for example, allowing or rejecting network
access of users). The access device can be a device,
router, WAC, AP, or other network devices.
... ... • Access server: is also known as the AAA server and
implements authentication, authorization, and
NAC system architecture accounting for users.
• Authentication, authorization, and accounting (AAA) provides a management

mechanism for network security.
▫ Authentication: verifies whether users are permitted to access the network.
▫ Authorization: authorizes users to use particular services.
▫ Accounting: records the network resources used by users.
• AAA can be implemented using multiple protocols. RADIUS is most frequently

used in actual scenarios.
802.1X Authentication
⚫ 802.1X authentication is a port-based network access control technology. User identities are verified and network
access permissions are controlled on ports of access devices. 802.1X authentication uses EAP to exchange
authentication information between the client, access device, and authentication server.
Networking mode
802.1X client AP Access device Authentication

• 802.1X clients are usually user terminals. A user can start the (WAC) server
client software to initiate 802.1X authentication.
• A network access device is usually an 802.1X-capable
network device that provides physical or logical ports for
clients to access LANs.
• An authentication server (generally, a RADIUS server) is used
to perform authentication, authorization, and accounting for
users.
Application scenario
• 802.1X authentication applies to enterprise users who have
high security requirements.
• 802.1X is a Layer 2 protocol that requires no Layer 3 processing. It also has low
performance requirements of access devices, reducing network construction costs.
• 802.1X authentication packets and data packets are transmitted through

different logical ports, improving security.
Portal Authentication
⚫ Portal authentication is also called web authentication. Users can enter their user names and passwords on the web
authentication page for identity authentication. Two ways are available for accessing the authentication page:
⚫ Proactive authentication: A user proactively accesses the Portal authentication website through browsers.
⚫ Redirected authentication: When the access address entered by a user is not the address of the Portal authentication website,
the access device redirects the user to the Portal authentication website.
Portal server
Client AP Access device RADIUS server

(WAC)
• Client: In most cases, a client is a host where an HTTP/HTTPS-capable browser is

installed. Sometimes, corresponding client software (such as browsers) is
installed.
• Access device: a network device such as a switch or router, which provides the
following functions:
▫ Redirects all HTTP and HTTPS requests of users on authentication network

segments to the Portal server before authentication is performed.
▫ Interacts with the portal server and authentication server to implement user
identity authentication, authorization, and accounting during
authentication.
▫ Grants users access to the network resources authorized by the

administrator upon successful authentication.
• Portal server: a server system that receives authentication requests from clients,
provides Portal services and authentication pages, and exchanges client
authentication information with access devices.
• Authentication server: interacts with access devices to implement user

authentication, authorization, and accounting.
• Portal authentication does not require dedicated client software. Therefore, it is
typically used in access scenarios requiring no client software or guest access
scenarios.
• A Portal server can be an external Portal server or a built-in Portal server

integrated into an access device. The built-in Portal server implements basic
functions of the Portal server, including web-based login and logout. It cannot
replace the independent Portal server or extensions. For example, the built-in
Portal server does not support MAC address-prioritized Portal authentication.
• Portal authentication has the following advantages:
▫ Ease of use: In most cases, Portal authentication authenticates a user on a

web page, without any additional software required on the client.
▫ Convenient operations: Portal authentication allows for value-added

services on the web page, including advertisement push and enterprise
publicity.
▫ Mature technology: Portal authentication has been widely used on

networks of carriers, fast food chains, hotels, schools, etc.
▫ Flexible deployment: Portal authentication implements access control at the

access layer or at the ingress of key data.
▫ Flexible user management: Portal authentication can be performed on users

based on the combination of usernames and any one of VLANs, IP
addresses, and MAC addresses.
MAC Address Authentication
⚫ MAC address authentication (MAC authentication for short) controls network access permissions of
users based on ports and MAC addresses. User terminals are authenticated by the authentication server
based on their MAC addresses.
⚫ By default, the device triggers MAC address authentication on users after receiving DHCP, ARP,
DHCPv6, or ND packets.
• Terminal: refers to a terminal that attempts to access the
network.
• Access device: functions as the network access control point

that enforces security policies. It permits, denies, isolates, or
Terminal AP Access device Authentica
(WAC) tion server restricts network access of users based on the security policies
customized for customer networks.
• Authentication server: checks whether the identities of users

who attempt to access the network are valid and assigns
network access permissions to users who have valid identities.
• MAC authentication does not require users to install any client software. It
applies to scenarios where dumb terminals such as IP phones and printers need
to access the network.
• Dumb terminal: Compared with other terminals, dumb terminals have limited
functions and simple interaction modes. Its specific meaning varies according to
the scenario (context). Here, dumb terminals refer to terminals that do not
support the input of authentication information such as usernames and
passwords.
• By default, a MAC address without hyphens (-) is used as the user name and
password for MAC address authentication, for example, 0005e0112233.
Comparison Between Three Authentication Modes
⚫ The three authentication modes have different authentication principles and are applicable to different
scenarios. In actual applications, you can use a proper authentication mode or multiple authentication
modes based on scenarios.
Item 802.1X Authentication MAC Authentication Portal Authentication
New networks with Authentication of dumb Scenario where users are

Application
concentrated users and high terminals such as printers sparsely distributed or
scenario
security requirements and fax machines move freely
Client requirement Yes No No
Advantages High security No client required Flexible deployment
A dedicated authentication MAC addresses need to be

Disadvantages server needs to be deployed, registered, complicating Low security
which is complex. management.
• Currently, the following multi-mode authentication modes are supported:
▫ MAC address-prioritized Portal authentication allows disconnected users

who have passed Portal authentication to access the network again within
a certain period of time, without having to reenter their user names and
passwords, as long as they pass MAC authentication.
▫ In this authentication mode, the device performs MAC address

authentication and 802.1X authentication on terminals in sequence. The
terminals pass authentication only when the two types of authentication
succeed.
Contents
3. Security Policy
4. Access Control
▫ Access Control Solution
◼ Access Control Configuration
Access Control Solution for Wireless Users
⚫ Solution architecture
Router
 Client: terminals with wireless network adapters,
Authentication
such as laptops, mobile phones, and printers, which server
can wirelessly access the network.
Aggregation
 Access device: WAC switch
WAC
◼ Network access control point for terminals.
◼ Implements access control (permit, deny, isolate, or Access switch
restrict) based on the security policies formulated by
customer networks.
◼ Enforcement point of authorization policies. AP AP AP AP
 Authentication server: iMaster NCE-Campus

◼ Checks whether the identity of the terminal that
attempts to access the network is valid.
◼ Specifies the network access permissions that a valid Wireless terminal Wireless terminal
terminal can have.
• With the popularization of wireless devices, we have entered the fully-wireless

office era which is wireless-centric. In the office environment, wired networks are
replaced by wireless networks. Terminals such as laptops, mobile phones, and
printers now mainly access the network in wireless mode. Therefore, this course
describes the NAC configuration solution in wireless scenarios.
NAC Configuration Process — WAC
Configuring an access profile
802.1X access profile

802.1X access control
parameters Configuring an
authentication profile
MAC access profile Authentication profile

Configuring a security MAC access control Applying NAC
parameters Access profile
profile
VAP profile
Security profile Authentication scheme
Portal access profile used by the user Security profile
(external)
Security Policy External Portal server Authorization scheme
used by the user Authentication
Portal access control profile
parameters Accounting scheme
used by the user
...
Portal access profile (built-
in)
Built-in Portal server
Portal access control

parameters
NAC Configuration Process — iMaster NCE-Campus
Configuring an
authentication rule
Configuring an
Authentication mode authorization rule
Adding a device Configuring an
authorization result
Access mode Authentication
mode
Device IP address Authorization
Matching rule policy: ACL, VLAN,
Access mode
RADIUS interconnection security group,
parameters user-defined
Data source selection parameters, etc.
Matching rule
Portal interconnection
parameters Authorization
Authentication protocol
result reference
Default action
802.1X Authentication Portal Authentication MAC Authentication
802.1X Authentication Configuration — WAC (1/2)

⚫ Configure a security profile.
[WAC] wlan
[WAC-wlan] security-profile name test
[WAC-wlan-sec-prof-test] security wpa-wpa2 dot1x aes (security policy: WPA/WPA2-8021.X)
⚫ Configure an access profile.

[WAC] dot1x-access-profile name test
[WAC-dot1x-access-profile-test] dot1x authentication-method { chap | pap | eap } //Configure the 802.1X authentication mode.
[WAC-dot1x-access-profile-test] quit
⚫ Configure a RADIUS server.

[WAC] radius-server template test
[WAC-radius-test] radius-server authentication X.X.X.X (IP address of the RADIUS server) 1812
[WAC-radius-test] radius-server accounting X.X.X.X (IP address of the RADIUS server) 1813
[WAC-radius-test] radius-server shared-key cipher Huawei@123 (shared key, which must be the same as that configured on the
RADIUS server)
[WAC-radius-test] quit
[WAC] radius-server authorization X.X.X.X (IP address of the RADIUS server) shared-key cipher Huawei@123 (shared key)
802.1X Authentication Configuration — WAC (2/2)

⚫ Configure AAA schemes.
[WAC-aaa] authentication-scheme test
[WAC-aaa-authen-test] authentication-mode radius
[WAC-aaa] accounting-scheme test
[WAC-aaa-accounting-test] accounting-mode radius
[WAC-aaa] domain test
[WAC-aaa-domain-test] authentication-scheme test
[WAC-aaa-domain-test] accounting-scheme test
[WAC-aaa-domain-test] radius-server test
⚫ Configure an authentication profile.

[WAC] authentication-profile name test
[WAC-authentication-profile-test] dot1x-access-profile test
[WAC-authentication-profile-test] access-domain test
⚫ Apply the authentication profile and security profile.

[WAC-wlan-view] vap-profile name dot1x
[WAC-wlan-vap-prof-dot1x] authentication-profile test
[WAC-wlan-vap-prof-dot1x] security-profile test
[WAC-wlan-vap-prof-dot1x] quit
802.1X Authentication Configuration — NCE (1/2)

⚫ Add an access device. Choose Admission > Admission Device > Admission Device Management > Create.
⚫ Add an authentication user. Choose Admission > User Management > User > Create.
• If the local data source is used as the data source in the authentication rule, you
need to create an authentication user (by configuring information such as the
username and password) on iMaster NCE-Campus. You can also use an external
data source.
802.1X Authentication Configuration — NCE (2/2)

⚫ Configure authentication and authorization rules, which can be matched by end users based on specific conditions.
 Choose Admission > Admission Policy > Authentication Authorization > Authentication Rules, and modify the default
authentication rule or create an authentication rule.
 Choose Admission > Admission Policy > Authentication and Authorization > Authentication Rules, and bind an authorization
rule to specify resources available to users after successful authentication.
• The default authorization result of iMaster NCE-Campus can be used. To deliver

a customized authorization result, you need to configure authorization result
rules in advance.
Troubleshooting 802.1X Authentication Failures

⚫ Check whether the dot1x-access-profile is bound to the authentication profile.
 Error-prone configuration: security wpa-wpa2 dot1x aes is configured in the security profile. However, dot1x-
access-profile is not bound to the authentication profile.
 Suggestion: Bind the corresponding access profile to the authentication profile.
⚫ Check whether the service VLAN is created on the WAC.

 Error-prone configuration: In 802.1X authentication scenarios, EAP packets are control packets and need to be
sent to the WAC through a CAPWAP tunnel. Therefore, the corresponding VLAN must be created on the WAC
regardless of whether direct forwarding or tunnel forwarding is used.
 Suggestion: Create the corresponding service VLAN on the WAC.
⚫ 802.1X authentication configurations need to be performed on different terminals. For details, see
related documents on Huawei official website.
Portal Authentication Configuration — WAC (1/2)

⚫ Configure a security profile.
[WAC-wlan] security-profile name test
[WAC-wlan-sec-prof-test] security open
[WAC] url-template name portal
[WAC-url-template-portal] url https://X.X.X.X:19008/portal (X.X.X.X is the IP address of the Portal server.)
[WAC-url-template-portal] url-parameter redirect-url redirect-url ssid ssid user-ipaddress userip user-mac umac device-ip ac-ip
[WAC-url-template-portal] quit
[WAC] web-auth-server portal

[WAC-web-auth-server-portal] server-ip X.X.X.X (IP address of the Portal server)
[WAC-web-auth-server-portal] source-ip Y.Y.Y.Y (source IP address of the WAC)
[WAC-web-auth-server-portal] shared-key cipher Huawei@123 (shared key, which must be the same as that configured on the
Portal server)
[WAC-web-auth-server-portal] url-template portal
[WAC-web-auth-server-portal] quit
[WAC] portal-access-profile name portal

[WAC-portal-access-profile-portal] web-auth-server portal direct
[WAC-portal-access-profile-portal] quit
• The URL parameter names configured on the device must be the same as those
supported by the Portal authentication server. iMaster NCE-Campus supports the
following URL parameter names:
▫ redirect-url: The name can be url or redirect-url.
▫ user-ipaddress: The name can be userip.
▫ user-mac: The name can be usermac or umac.
▫ ssid: The name can be ssid.
▫ device-ip: The name can be ac-ip.
▫ ap-mac: The name can be apmac or ap-mac.

Portal Authentication Configuration — WAC (2/2)

⚫ Configure the RADIUS server (same as the 802.1X authentication configuration).
⚫ Configure an AAA scheme (same as the 802.1X authentication configuration).
[WAC] authentication-profile name portal
[WAC-authentication-profile-portal] portal-access-profile portal
[WAC-authentication-profile-portal] access-domain test
[WAC-authentication-profile-portal] quit

[WAC-wlan-view] vap-profile name portal
[WAC-wlan-vap-prof-portal] authentication-profile portal
[WAC-wlan-vap-prof-portal] security-profile test
[WAC-wlan-vap-prof-portal] quit
Portal Authentication Configuration — NCE

⚫ Add an access device. Choose Admission > Admission Device > Create and add a WAC. Both RADIUS and Portal
authentication parameters need to be configured.
⚫ For details about how to add authentication users, authentication rules, and authorization rules, see the
configuration method in 802.1X authentication.
Portal Authentication Issue (1/3) — Authentication Failure

⚫ Check whether the shared key is configured on the WAC.
 Error-prone configuration: The shared key configured on the WAC must be the same as that on the server.
 Suggestion: Reconfigure the shared key and then perform the Portal user authentication test.
[WAC-web-auth-server-portal] shared-key cipher XXX (shared key, which must be the same as that configured on the
Portal server)
⚫ Check whether STA address learning is disabled on the WAC.
 Error-prone configuration: When processing an authentication request from the Portal server, the WAC searches
for user MAC addresses based on user IP addresses. If the user IP addresses are not reported by APs, the WAC
does not record the user IP addresses. As a result, the WAC fails to find the matched user MAC addresses based
on the recorded user IP addresses, and thereby cannot process the authentication request.
 Suggestion: Enable STA address learning.
[WAC-wlan-view] vap-profile name portal
[WAC-wlan-vap-prof-portal] undo learn-client-address ipv4 disable
Portal Authentication Issue (1/3) — Authentication Failure

(Continued)
⚫ If built-in Portal authentication is used, check whether the service type for the local user is configured
correctly.
 Error-prone configuration: The web service type is not configured for the local user.
<WAC> display local-user username user-a
The contents of local user(s):
Password : ****************
State : active
Service-type-mask : -
...
 Suggestion: Set the service type of the local user to web, and then perform the Portal user authentication test.
[WAC] aaa
[WAC-aaa] local-user user-a service-type web
[WAC-aaa] quit
Portal Authentication Issue (2/3) — Portal Server Not

Automatically Pushing an Authentication Page
⚫ Check whether the detection function is enabled in the web-auth-server profile.
 Error-prone configuration: The detection function is enabled on the WAC, but the Portal server is not enabled. In
this case, the Portal server status is displayed as Abnormal on the WAC.
[WAC-web-auth-server-portal] server-detect
 Suggestion: If the Portal server does not support the detection function or the detection function
is not enabled, disable the detection function on the WAC.
[WAC-web-auth-server-portal] undo server-detect
Portal Authentication Issue (3/3) — iOS Terminals Not

Automatically Displaying an Authentication Page
⚫ Check whether the Portal bypass function is configured on the WAC.
 Error-prone configuration: The Portal bypass function is enabled on the WAC.
[WAC] portal captive-bypass enable
 Suggestion: Disable the Portal bypass function and perform the test again.
[WAC] undo portal captive-bypass enable
⚫ Check whether the Portal server pushes an authentication page through HTTPS.
 Error-prone configuration: If the Portal server pushes an authentication page through HTTPS, but no valid
certificate issued by the CA is installed on the Portal server, the Portal authentication page is not automatically
displayed on iOS terminals.
 Suggestion: Check whether the Portal server pushes an authentication page through HTTPS. If so, you are
advised to install a valid certificate or change the protocol to HTTP for authentication page pushing.
• The iOS operating system provides the Captive Network Assistant (CNA) function.
With the CNA function, the iOS terminals (including iPhone, iPad, and iMac)
automatically detects wireless network connectivity after associating with a
wireless network. If the network connection cannot be set up, the iOS terminals
ask users to enter user names and passwords. If users do not enter the user
names and passwords, the iOS terminals automatically disconnect from the
WLAN.
• However, Portal authentication allows users to access certain resources before

authentication is successful. If the iOS terminals are disconnected, users cannot
access the specified resources. The CNA bypass function addresses this problem.
If the users do not enter user names and passwords immediately, the CNA bypass
function keeps the iOS terminals online before the Portal authentication is
successful. Therefore, the iOS users are allowed to access authentication-free
resources.
MAC Authentication Configuration — WAC

⚫ Configure a security profile. (The security profile configuration is the same as that for Portal authentication, and the
security policy is set to open.)
[WAC] mac-access-profile name test
[WAC-mac-access-profile-test] quit
⚫ Configure the RADIUS server (same as the 802.1X authentication configuration).
⚫ Configure an AAA scheme (same as the 802.1X authentication configuration).
[WAC] authentication-profile name mac
[WAC-authentication-profile-mac] mac-access-profile mac
[WAC-authentication-profile-mac] access-domain test
[WAC-authentication-profile-mac] quit
[WAC-wlan-view] vap-profile name mac
[WAC-wlan-vap-prof-mac] authentication-profile mac
[WAC-wlan-vap-prof-mac] security-profile test
[WAC-wlan-vap-prof-mac] quit
MAC Authentication Configuration — NCE (1/2)

⚫ Add an access device. Choose Admission > Admission Resources > Admission Device Management > Create.
⚫ Add an authentication user. Choose Admission > User Management > MAC Account > Create.
MAC Authentication Configuration — NCE (2/2)

⚫ Configure authentication and authorization rules, which can be matched by end users based on specific conditions.
 Choose Admission > Admission Policy > Authentication Authorization > Authentication Rules, and modify the default
authentication rule or create an authentication rule.
 Choose Admission > Admission Policy > Authentication and Authorization > Authentication Rules, and bind an authorization
rule to specify resources available to users after successful authentication.
Quiz
1. (Single-answer question) Which of the following statements about security policies is

incorrect? ( )
A. WPA/WPA2-802.1X authentication provides high security but is complex to deploy. In addition,
some clients do not support 802.1X authentication.
B. WPA/WPA2-PSK authentication requires multiple PSKs to be preconfigured on each WLAN node.
C. In WPA/WPA2-PSK authentication, all STAs connected to a specified SSID use the same key.
D. In WPA/WPA2-PPSK authentication, users connected to the same SSID can have different keys, and
different authorizations can be delivered to different users.
1. B
Quiz
2. (Single-answer question) Which of the following access control modes is recommended for
newly deployed, high-traffic enterprise networks with strict information security
requirements? ( )
A. 802.1X authentication
B. Portal authentication
C. MAC authentication
D. MAC address-prioritized Portal authentication
2. A
Summary
⚫ This course systematically describes user access authentication security policies,
implementation of STA blacklist and whitelist, and common access authentication modes.
This course also describes the implementation and configurations of 802.1X, MAC address,
and Portal authentication modes.
⚫ After learning this course, you will be able to independently complete the design,
deployment, and configuration of user access and authentication, and understand the
typical deployment solution of user access and authentication.
Recommendations
Acronym or Abbreviation Full Name

AAA Authentication, Authorization and Accounting
AES Advanced Encryption Standard
CBC-MAC Cipher-Block Chaining Message Authentication Code
CCMP Counter Mode with CBC-MAC Protocol
DH Diffie-Hellman
DHCPv6 Dynamic Host Configuration Protocol version 6
DPSK Dynamic Pre-Shared Key
EAP Extensible Authentication Protocol
EAPoL Extensible Authentication Protocol over LAN
ECDHE Elliptic Curve Diffie-Hellman Ephemeral

ECDSA Elliptic Curve Digital Signature Algorithm
GCMP Galois Counter Mode Protocol
GTK Group Temporal Key
MD5 Message Digest Algorithm 5
MIC Message Integrity Code
NAC Network Access Control
ND Neighbor Discovery
OWE Opportunistic Wireless Encryption
PEAP Protected Extensible Authentication Protocol

PMF Protected Management Frame
PMK Pairwise Master Key
PPSK Private Pre-Shared Key
PSK Pre-Shared Key
PTK Pairwise Transient Key
RADIUS Remote Authentication Dial-In User Service
RC4 Rivest Cipher 4
RSA Rivest-Shamir-Adleman
SAE Simultaneous Authentication of Equals
SHA Secure Hash Algorithm

SOHO Small Office and Home Office
TKIP Temporary Key Integrity Protocol
TLS Transport Layer Security
TTLS Tunneled Transport Layer Security
WAI WLAN Authentication Infrastructure
WLAN Authentication and
WLAN Authentication and Privacy Infrastructure
Privacy Infrastructure (WAPI)
Wired equivalent privacy (WEP) Wired Equivalent Privacy
Wi-Fi Protected Access (WPA) Wi-Fi Protected Access
WPI WLAN Privacy Infrastructure
intelligent world.


that
WLAN Roaming
Foreword
⚫ The most obvious advantage of the WLAN is that a STA can move within a WLAN without
physical media restrictions. WLAN roaming allows the STA to move within a WLAN without
service interruption.
⚫ WLAN roaming ensures that the STA's IP address remains unchanged. After roaming, the
STA can still access the initially associated network without service interruption.
⚫ This course describes basic concepts of WLAN roaming, roaming technologies, roaming
experience optimization methods, and smart roaming.
Objectives
⚫ Upon completion of this course, you will be able to:
 Understand basic concepts of roaming.
 Understand the data forwarding path of a STA after roaming.
 Understand common roaming optimization technologies.
 Understand the implementation principles of smart roaming.
Contents
1. WLAN Roaming Overview
2. Process of Traffic Forwarding During Roaming
3. Roaming Optimization Technologies
4. Smart Roaming
Background of Roaming
⚫ The most obvious advantage of the WLAN is that a STA can move within a WLAN without physical media restrictions. WLAN
roaming allows the STA to move within a WLAN without service interruption. Multiple APs are located within an extend service set
(ESS). When a STA moves from an AP to another, WLAN roaming ensures seamless transition of STA services between APs.
⚫ WLAN roaming offers the following advantages:

 Retains STAs' IP addresses. After roaming, a STA can still access the initially associated network and its access permission remains unchanged.
 Avoids packet loss or service interruption caused by long-time authentication.
WAC
AP1 AP2
SSID: Huawei Roaming SSID: Huawei
STA STA
• Extend service set (ESS): a group of BSSs that share the same service set identifier
(SSID).
Definition of Roaming
⚫ Roaming on a WLAN allows stations (STAs) to move within the coverage areas of access points (APs) belonging to
the same ESS with nonstop service transmission. As shown in the following figure, a STA moves from the coverage
area of AP1 to that of AP2 without service interruption.
⚫ The APs involved in WLAN roaming must have the same SSID, same security profile configurations (different profile
names allowed), and the same authentication mode and parameter settings in their authentication profiles.
WAC
Switch
AP1 AP2
SSID: Huawei Roaming SSID: Huawei
STA STA
WLAN Roaming Modes
⚫ Layer 2 roaming: The service VLAN and gateway of the APs remain unchanged before and after roaming.
⚫ Layer 3 roaming: The service VLANs of the SSIDs are different before and after roaming, and APs provide different Layer 3 service
networks with different STA gateways. In this case, to ensure that the IP address of a roaming STA remains unchanged, the STA's
traffic needs to be sent back to the AP on the initial access network segment to implement inter-VLAN Layer 3 roaming.
Layer 2 roaming Layer 3 roaming
WAC WAC
Switch Switch
AP1 AP2 AP1 AP2
VLAN10 VLAN10 VLAN10 VLAN20

Roaming Roaming
SSID: Huawei SSID: Huawei SSID: Huawei SSID: Huawei
STA STA STA STA
• In some cases, two subnets have the same VLAN ID but belong to different
network segments. Based on the VLAN ID, the system may incorrectly consider
that STAs roaming between two subnets roam at Layer 2. To prevent such an
error, configure a roaming domain to determine whether the STAs roam within
the same subnet. STAs are considered roaming at Layer 2 only when they roam
within the same VLAN and same roaming domain; otherwise, the STAs roam at
Layer 3.
• Run the vlan-mobility-group vlan-mobility-group-id command to configure a

roaming domain in the VAP profile. The roaming domain ID ranges from 1 to
4094. By default, the roaming domain is 1.
Network Architecture of WLAN Roaming
Mobility group: STAs can roam

between WACs in the same
Inter-WAC tunnel (CAPWAP WAC1 WAC2 group. This group is called
tunnel): is established using Mobility group mobility group.
CAPWAP to synchronize CAPWAP tunnel
information about STAs and APs
managed by each WAC in a
mobility group.
Switch Switch
AP1 AP2 AP3

Intra-WAC Inter-WAC
Roaming Roaming
STA STA STA
• In this example, AP1 and AP2 are managed by WAC1, while AP3 is managed by
WAC2.
Intra-WAC Roaming
⚫ Intra-WAC roaming: A STA associates with the same WAC before and after roaming. As shown in the following
figure, intra-WAC roaming occurs when the STA roams from AP1 to AP2.
⚫ Intra-WAC roaming can be regarded as a special case of inter-WAC roaming where one WAC serves as both the
HAC (Home AC) and FAC (Foreign AC).
HAC=FAC
WAC Switch
AP1 AP2
Intra-WAC SSID: Huawei

SSID: Huawei
Roaming
STA STA
Inter-WAC Roaming
⚫ Inter-WAC roaming: A STA roams between APs connected to different WACs. As shown in the figure,
inter-AC roaming occurs when the STA roams from AP1 managed by WAC1 to AP2 managed by WAC2.
CAPWAP tunnel
WAC1 WAC2
AP1 AP2
VLAN 10 Roaming VLAN 20
SSID: Huawei SSID: Huawei

STA STA
• Inter-WAC tunnel: To support inter-WAC roaming, WACs in a mobility group

need to synchronize STA and AP information with each other. Therefore, two
WACs establish a tunnel between each other to synchronize data and forward
packets. An inter-WAC tunnel is established using the CAPWAP protocol. As
shown in the figure, WAC1 and WAC2 set up a CAPWAP tunnel for data
synchronization and packet forwarding.
• Note that a WAC can be added to only one roaming group.
• Mobility server: When a STA roams between WACs, a WAC is selected as the
mobility server to maintain the membership table of the mobility group and
deliver member information to other WACs in the group. In this way, WACs in
the same mobility group can identify one another and set up inter-WAC tunnels.
▫ The mobility server can be a WAC outside or inside a mobility group.
▫ A WAC can function as the mobility server for multiple mobility groups.
▫ A mobility server managing other WACs in a mobility group cannot be
managed by another mobility server. That is, if a WAC functions as a
mobility server to synchronize roaming configurations to other WACs, it
cannot be managed by another mobility server or synchronize roaming
configurations from other WACs.
▫ As a centralized configuration point, a mobility server must be able to
communicate with all managed WACs but does not need to provide a high
data forwarding capability.
Concepts of WLAN Roaming
Home WAC (HAC): WAC in a Foreign WAC (FAC): WAC with

mobility group with which a STA which a STA associates after
associates before roaming. roaming.
Mobility group
WAC1 WAC2
CAPWAP tunnel
Home AP (HAP): AP in a mobility Foreign AP (FAP): AP with which

group with which a STA Switch Switch a STA associates after roaming.
associates before roaming.
AP1 AP2 AP3
Intra-WAC Inter-WAC
Roaming Roaming
STA STA STA
• Home agent: a device that can communicate with the gateway on the home
network of a STA at Layer 2. To enable a STA to access the home network after
roaming, service packets of the STA need to be forwarded to the home agent
through a tunnel. The home agent then sends the packets to the home network.
The HAC or HAP takes the role of the STA's home agent. As shown in the figure,
you can configure WAC1 or AP1 as the home agent for the STA.
• By default, the HAP serves as the home agent of roaming STAs, which can be
changed manually.
Contents
4. Smart Roaming
Intra-WAC Layer 2 Roaming — Tunnel Forwarding
⚫ Before roaming:
 The STA sends service packets to the HAP. CAPWAP tunnel
 After receiving the service packets, the HAP sends

them to the WAC through the CAPWAP tunnel. 3
 The WAC forwards the service packets to the upper- WAC Switch
layer network through the switch.

2
⚫ After roaming:
 The STA sends service packets to the FAP.
HAP FAP
 After receiving the service packets, the FAP sends
them to the WAC through the CAPWAP tunnel. VLAN 10 Roaming VLAN 10
1
 The WAC forwards the service packets to the upper-
STA STA
Intra-WAC Layer 2 Roaming — Direct Forwarding
⚫ Before roaming:
 The STA sends service packets to the HAP.
 After receiving the service packets, the HAP forwards
them to the upper-layer network through the
WAC Switch
gateway (switch).
⚫ After roaming: Flow direction of Flow direction of

traffic before traffic after
 The STA sends service packets to the FAP. roaming roaming
 After receiving the service packets, the FAP forwards
HAP FAP
them to the upper-layer network through the
gateway (switch). VLAN 10 Roaming VLAN 10
STA STA
Intra-WAC Layer 3 Roaming — Tunnel Forwarding
⚫ In tunnel forwarding mode, the HAP and WAC can be
considered in the same subnet. Instead of forwarding the
CAPWAP tunnel
packets back to the HAP, the WAC directly forwards the
packets to the upper-layer network.
⚫ Before roaming: 3
 The STA sends service packets to the HAP. WAC Switch

 After receiving the service packet, the HAP forwards it to the WAC.
2
 The WAC forwards the service packet to the upper-layer network.
⚫ After roaming:
HAP FAP
 After receiving the service packet, the FAP forwards it to the WAC
through a CAPWAP tunnel. VLAN 10 Roaming VLAN 20
SSID: Huawei
1 SSID: Huawei
 The WAC forwards the service packet to the upper-layer network.
STA STA
• STAs move from one subnet to another during Layer 3 roaming. To allow the
STAs to access the original network after roaming, ensure that their traffic is
forwarded to the original subnet over CAPWAP tunnels.
(Scenario 1)
⚫ In direct forwarding mode, after a STA roams to
CAPWAP tunnel
another AP, the STA uses the HAP as its home agent by
default. The STA's traffic is forwarded by the home
agent to ensure that the STA can still access the
WAC
original network after roaming.
Switch
⚫ After roaming: 2
3
 After receiving the service packet, the FAP forwards it to the
HAP 4 FAP
WAC through a CAPWAP tunnel.
 The WAC sends the service packets to the HAP through a VLAN 10 Roaming VLAN 20
1
CAPWAP tunnel. SSID: Huawei SSID: Huawei
 The HAP forwards the service packets to the upper-layer STA STA
network.
(Scenario 2)
⚫ If the WAC and a STA's gateway can communicate
CAPWAP tunnel
with each other at Layer 2, the WAC can be configured
as the STA's home agent. This configuration reduces 3
traffic load of the HAP and the length of the tunnel
between the FAP and home agent, improving data WAC
forwarding efficiency. Switch

2
⚫ After roaming:
 After receiving the service packet, the FAP forwards it to the HAP FAP
WAC through a CAPWAP tunnel.
1
 The WAC forwards the service packet to the upper-layer SSID: Huawei SSID: Huawei
network. STA STA
• If the WAC and a STA's gateway cannot communicate with each other at Layer 2,
the WAC cannot be configured as the STA's home agent. Otherwise, the service
network will be interrupted after roaming. As shown in the above figure, the
WAC needs to communicate with the gateway of VLAN 10 at Layer 2.
• The home agent takes effect only in Layer 3 roaming scenarios where user data
is transmitted in direct forwarding mode. Changing the home agent will
temporarily interrupt services of Layer 3 roaming users.
• The command line for configuring the home agent is as follows:
▫ [WAC] wlan
▫ [WAC] vap-profile name huawei
▫ [WAC-wlan-vap-prof-huawei] home-agent ac
Inter-WAC Layer 2 Roaming — Tunnel Forwarding
⚫ Before roaming:
CAPWAP tunnel
 After receiving the service packets, the HAP sends
3
them to the HAC through the CAPWAP tunnel.
 The HAC forwards the service packets to the upper- HAC FAC
2
⚫ After roaming:
 The STA sends service packets to the FAP. HAP FAP
 After receiving the service packets, the FAP sends VLAN 10 Roaming VLAN 10
1
them to the FAC through the CAPWAP tunnel. SSID: Huawei SSID: Huawei
STA STA
 The FAC forwards the service packets to the upper-
• STAs stay in the same subnet before and after Layer 2 roaming. The FAP or FAC
forwards packets of Layer 2 roaming STAs in the same way as that it forwards
packets of new access STAs. That is, the FAP or FAC forwards the packets on the
local network, but does not send the packets back to the HAP over the inter-
WAC tunnel.
Inter-WAC Layer 2 Roaming — Direct Forwarding
⚫ Before roaming:
 The STA sends service packets to the HAP. CAPWAP tunnel
 After receiving the service packets, the HAP

forwards them to the upper-layer network
through the gateway (switch). HAC FAC
Flow direction of Flow direction
⚫ After roaming: traffic before of traffic after
roaming roaming
 After receiving the service packets, the FAP HAP FAP
forwards them to the upper-layer network VLAN 10 Roaming VLAN 10

through the gateway (switch). SSID: Huawei SSID: Huawei
STA STA
Inter-WAC Layer 3 Roaming — Tunnel Forwarding
⚫ Before roaming:
CAPWAP tunnel
 After receiving the service packets, the HAP sends them
to the HAC through the CAPWAP tunnel. 4
 The HAC forwards the service packets to the upper-layer 3
network through the switch. HAC FAC
⚫ After roaming:
2
 After receiving the service packets, the FAP sends them HAP FAP
to the FAC through the CAPWAP tunnel.
 The FAC forwards the service packets to the HAC 1
through the inter-WAC tunnel.
STA STA
 The HAC forwards the service packets to the upper-layer
network through the switch.
• STAs move from one subnet to another during Layer 3 roaming. To allow the
STAs to access the original network after roaming, ensure that their traffic is
forwarded to the original subnet over CAPWAP tunnels.
• In tunnel forwarding mode, service packets exchanged between the HAP and
HAC are encapsulated in the CAPWAP tunnel, and the HAP and HAC can be
considered in the same subnet. Instead of forwarding the packets back to the
HAP, the HAC directly forwards the packets to the upper-layer network.
(Scenario 1)
⚫ In direct forwarding mode, after a STA roams to
another AP, the STA uses the HAP as its home agent by CAPWAP tunnel
default.
⚫ After roaming:
3
 The STA sends service packets to the FAP. HAC FAC
 After receiving the service packets, the FAP forwards them

4 5 2
to the FAC through a CAPWAP tunnel.
 The FAC forwards the service packets to the HAC through
HAP FAP
the inter-WAC tunnel.
 The HAC sends the service packets to the HAP through a 1
CAPWAP tunnel. SSID: Huawei SSID: Huawei
STA STA
 The HAP forwards the service packets to the upper-layer
network.
• By default, the HAP functions as the home agent in direct forwarding scenarios
of Layer 3 roaming.
(Scenario 2)
⚫ If the HAC and a STA's gateway can communicate with
CAPWAP tunnel
each other at Layer 2, the HAC can be configured as the
STA's home agent. This configuration reduces traffic load
4
of the HAP and the length of the tunnel between the FAP
3
and home agent, improving data forwarding efficiency.
HAC FAC
⚫ After roaming:
2
 After receiving the service packets, the FAP forwards them to
HAP FAP
the FAC through a CAPWAP tunnel.
 The FAC forwards the service packets to the HAC through the 1
inter-WAC tunnel. SSID: Huawei SSID: Huawei
STA STA
 The HAC forwards the service packets to the upper-layer
network.
• In direct forwarding mode of inter-WAC Layer 3 roaming, service packets

exchanged between the HAP and HAC are not encapsulated in the CAPWAP
tunnel; therefore, whether the HAP and HAC reside in the same subnet cannot be
determined. Packets are sent back to the HAP for forwarding by default. If the
HAP and HAC reside in the same subnet, the HAC with higher performance can
be configured as the home agent. This reduces traffic load on the HAP and
improves data forwarding efficiency.
Contents
4. Smart Roaming
Roaming Duration
⚫ Compared with open system authentication, 802.1X authentication has two additional processes: STA identity authentication and key
negotiation. Compared with PSK authentication, 802.1X authentication takes a longer time in STA identity authentication and
roaming.
⚫ The impact of roaming on services lies in the roaming duration. Therefore, the roaming handover time is a key factor that affects
WLAN service experience during STA roaming.
STA AP WAC RADIUS server
Link
authentication
Reassociation
STA identity authentication

The STA identity
authentication and key
Key exchange
exchange take a long time.
• The roaming optimization technologies described in the following sections are

mainly used to shorten the roaming time.
Fast Roaming Using PMK Caching
⚫ Fast roaming is implemented by using pairwise master key (PMK) caching.
⚫ When the security policy is WPA2-802.1X or WPA3-802.1X, or the security policy is WPA/WPA2-802.1X and the WPA2 authentication
mode is configured on the 802.1X client, fast roaming allows STAs to perform only key negotiation during roaming, without having
to be 802.1X authenticated again and being authenticated for the access.
WAC1 WAC2 • When the STA accesses the network for the first time,
Mobility group the STA is authenticated by WAC1 and a PMK is
generated. The WAC synchronizes the PMK information
CAPWAP tunnel
to WAC2 through the inter-WAC tunnel.
• During roaming, the STA sends AP2 a Reassociation
Request frame that carries the PMK-ID.
Switch Switch • After receiving the Reassociation Request frame, AP2
notifies the WAC2 that the STA needs to roam from
AP1 to AP2.
• The WAC2 searches the PMK caching table for the PMK
AP1 AP2 corresponding to the STA based on the PMK-ID in the
Roaming Reassociation Request frame. If the matched PMK is
found, the WAC2 considers that the STA has passed
802.1X authentication and uses the cached PMK for
STA STA key negotiation.
802.11r fast roaming
⚫ The 802.11r protocol defines the Fast BSS Transition (FT) function that reduces the number of
information exchanges in a mobility domain (MD) and does not require 802.1X authentication or key
negotiation during STA roaming. In this manner, users are unaware of any in-roaming service
interruption and experience low-latency data services during roaming, improving user experience.
⚫ According to protocol specifications, 802.11r fast roaming can be implemented in either of the
following modes:
 Over-the-Air: A STA directly performs FT authentication with the FAP.
 Over-the-DS: A STA communicates with a FAP for FT authentication through a HAP.
Intra-WAC 802.11r Fast Roaming
STA AP1 AP2 STA AP1 AP2
Associated with AP1 Associated with AP1
FT Auth Request Generate FT Auth Request Generate

and install and install
the PTK the PTK
Generate FT Auth Response Generate FT Auth Response
and install and install
the PTK the PTK
FT Reassociation Request FT Reassociation Request
FT Reassociation Response FT Reassociation Response
Roaming to AP2 Roaming to AP2
Over-the-Air Over-the-DS
• Intra-WAC 802.11r fast roaming (Over-the-Air):
▫ When a STA accesses the network through AP1 for the first time, the STA is
authenticated by the WAC and a PMK is generated. If open system
authentication is used, no PMK is generated in this step.
▪ The WAC generates PMK-R0 (calculated based on the SSID, MDID,

WAC MAC address, and STA MAC address) and PMK-R1 (calculated
based on the PMK-R0, AP MAC address, and STA MAC address) of
each AP based on the PMK, and delivers the PMK-R1 to AP1.
▪ The STA and WAC generate and install the pairwise transient key
(PTK) and the group temporal key (GTK) by performing the 4-way
and 2-way handshakes.
▫ During roaming, the STA initiates an FT authentication request to AP2 and

delivers PMK-R1 to AP2.
▫ After receiving the request, AP2 generates and installs a PTK based on
PMK-R1 and information contained in the request. At the same time, AP2
starts the reassociation timer, and sends an 802.11 FT authentication
response to the STA.
▫ After receiving the response, the STA generates and installs a PTK based on
the information contained in the response. The STA sends a reassociation
request to AP2.
▫ After receiving the reassociation request, AP2 stops the reassociation timer,
and then sends a reassociation response to the STA. If a STA blacklist or
whitelist is configured on the WAC, the AP reports a reassociation response
to the STA during FT reassociation and then reports the STA's reassociation
request to the WAC for processing.
▫ After the STA receives the response, the roaming is complete.

Inter-WAC 802.11r Fast Roaming
WAC1 WAC2 WAC1 WAC2
PMK update for STA PMK update for STA
STA AP1 AP2 STA AP1 AP2

Associated with AP1 Associated with AP1
Generate
FT Auth Request Generate FT Auth Request and
and install install the
Generate FT Auth Response FT Auth Response
the PTK Generate PTK
and
and install
install the
FT Reassociation Request the PTK FT Reassociation Request
PTK
FT Reassociation Response FT Reassociation Response
Roaming to AP2 Roaming to AP2
Over-the-Air Over-the-DS
• Inter-WAC 802.11r fast roaming (Over-the-Air):
▫ When a STA accesses the network through AP1 for the first time, the STA is
authenticated by WAC1 and a PMK is generated. If open system
authentication is used, no PMK is generated in this step.
▪ WAC1 generates PMK-R0 (calculated based on the SSID, MDID, WAC

MAC address, and STA MAC address) and PMK-R1 (calculated based
on the PMK-R0, AP MAC address, and STA MAC address) of AP1
based on the PMK, and delivers the PMK-R1 to AP1.
▪ The STA and WAC generate and install the pairwise transient key
(PTK) and the group temporal key (GTK) by performing the 4-way
and 2-way handshakes.
▪ WAC1 synchronizes the PMK information to WAC2 through the tunnel

between them.
▪ WAC2 generates PMK-R0 and PMK-R1 of AP2 based on the PMK, and
delivers PMK-R1 to AP2.
▫ During roaming, the STA initiates an FT authentication request to AP2.
▫ After receiving the request, AP2 generates and installs a PTK based on
PMK-R1 and information contained in the request. At the same time, AP2
starts the reassociation timer, and sends an 802.11 FT authentication
response to the STA.
▫ After receiving the response, the STA generates and installs a PTK based on
the information contained in the response. The STA sends a reassociation
request to AP2.
▫ After receiving the reassociation request, AP2 stops the reassociation timer,
and then sends a reassociation response to the STA. If a STA blacklist or
whitelist is configured on the WAC, the AP reports a reassociation response
to the STA during FT reassociation and then reports the STA's reassociation
request to the WAC for processing.
▫ After the STA receives the response, the roaming is complete.

Comparison of WLAN Roaming Modes
Whether the STA

Roaming Mode Applied Security Policy Description
Support Is Required
It is applicable to all scenarios and

involves easy configuration. Services may
Common roaming N/A All security policies
be interrupted for a short period of time
during roaming.
It is applicable to only a few scenarios.

WPA2-802.1X
During roaming, only key negotiation is
Fast Roaming using WPA3-802.1X
Yes required, without the need to perform
PMK caching WPA/WPA2-802.1X (WPA2
802.1X authentication again, therefore
specified on the 802.1X client)
reducing the roaming delay.
Open system authentication It is applicable to multiple scenarios.

WPA2-PSK-AES During roaming, users do not need to
802.11r fast roaming Yes
WPA2-PPSK-AES perform authentication or key
WPA2-802.1X-AES negotiation. The latency is low.
Contents
4. Smart Roaming
Sticky STAs in Mobility Scenarios
⚫ Sticky STAs: Some STAs stick to the initially connected APs regardless of the far distance to the APs, weak signals, or
low rates. The STAs that fail to roam to neighboring APs with better signals are called sticky STAs.
AP1 AP2 AP3 AP4
Short distance, low Short distance, low

path loss, path loss,
high-quality signal, high-quality signal,
high speed high speed
2 The STA is moving.

1 Before the STA moves, it connects to AP1 3 After the STA moves, it still connects to
with the best signal quality by now. AP1. However, for the STA, AP4 has the
best signal quality now.
• Sticky STAs may bring the following problems:
▫ Poor service experience: The STAs stick to weak-signal APs, causing a sharp
decrease in the data transmission speed of the radio channel.
▫ WLAN performance degradation: The STAs have poor signals or low rates,
and packet loss and retransmissions occur. As a result, the sticky STAs
occupy the wireless channels for a long time, and other good-signal STAs
cannot obtain sufficient time for using channel resources.
Smart Roaming Overview
⚫ Smart roaming solves the problem that sticky STAs cannot proactively roam to new APs. After smart
roaming is configured, the system proactively steers the STAs to neighboring APs with better signals.
⚫ Common roaming indicates that STAs actively roam from one AP to another. The roaming is initiated
by STAs. In smart roaming, an AP steers a STA to roam to another AP.
WAC
Switch
AP1 AP2
An AP steers a
SSID: Huawei STA to roam SSID: Huawei
to another AP
STA STA
• Smart roaming brings the following benefits:
▫ Improved performance
▪ Common coverage scenarios: Smart roaming can steer sticky STAs to

APs with better signals, improving user service experience and overall
WLAN performance.
▪ High-density coverage scenarios: STAs generally have good signals.

Smart roaming can enable STAs to associate with APs with better
signals, significantly improving WLAN performance.
▫ Traffic load balancing
▪ Smart roaming ensures that each STA is associated with the nearest
AP, achieving inter-AP load balancing.
Introduction to 802.11k/v/r
802.11k (neighbor report): enables an AP to transmit information

about its neighboring APs to STAs.
CAPWAP tunnel
WAC1 WAC2
Mobility group 802.11v (BSS Transition Management): enables an AP to steer STAs to
another AP.
802.11r (fast BSS transition): defines the FT authentication process to

shorten the STA reassociation time.
1 AP2 uses 802.11k to notify the STA of its neighboring APs (AP1 and AP3).
AP1 AP2 AP3
2
AP2 uses 802.11v to steer the STA to roam to AP3.
STA STA
3 The STA quickly roams to AP3 using 802.11r.
• The following packets are used to advertise whether an AP or STA supports

802.11k/v/r:
▫ AP capabilities: displayed in Beacon, Probe Response, or Association

Response frames;
▫ STA capabilities: displayed in Probe Request or Association Request frames.

Working Process of Smart Roaming
A STA supports 802.11k. A STA does not support 802.11k.
Enable the STA to The AP enables channel

Collecting information perform 802.11k-based scanning to collect
about neighboring APs measurement. neighbor information.
Identify sticky STAs.

Identifying sticky STAs
The WAC selects a

Selecting a roaming target more appropriate AP
for the STA.
Whether
802.11v is
supported.
Yes No
Enable the STA to The current AP disconnects

roam to the target AP the STA. It needs to select
Roaming using 802.11v. and associate to another AP.
Collecting Information About Neighboring APs
802.11k-capable STA 802.11k-incapable STA
⚫ When detecting a sticky STA, an AP proactively triggers ⚫ For 802.11k-capable STA, an AP listens on Probe frames
the STA to collect neighboring AP information based on sent by the STAs or periodically switches channels to
the 802.11k mechanism. The Beacon Report mechanism is scan the STAs.
used to require STAs to report information about
neighboring APs.
AP AP AP AP
Proactive scanning Proactive scanning
802.11k-capable STA 802.11k-incapable STA
• Sticky STAs require the network to help them select more appropriate APs.
Therefore, the network side needs to collect information about neighboring APs
of the STAs through the measurement and information collection mechanism
defined in the 802.11k protocol. This mechanism, however, is not applicable to
802.11k-incapable STAs. For them, APs discover neighboring APs of the STAs
through proactive channel scanning.
Identifying Sticky STAs
⚫ Identifying sticky STAs: When a STA associates with an AP, the AP collects the signal-to-noise ratio (SNR) and
access rate of the STA in real time and determines whether the STA is sticky. If the AP considers the STA as a sticky
one, the AP reports the STA information to the WAC. The WAC then determines whether to perform smart roaming.
⚫ By default, an AP determines whether a STA is sticky based on the SNR threshold of 20 dB. That is, if the SNR of a
STA is lower than 20 dB for several times in a period, the AP identifies the STA as a sticky one.
The AP periodically The AP determines Yes

whether the SNR is less The associated STA is
checks the SNR of the
than the threshold in a sticky.
currently associated STA.
period.
No
The associated STA is

not sticky.
• Signal-to-Noise Ratio (SNR), in dB.

Selecting a Roaming Target
⚫ The WAC queries the neighboring AP list of STAs and selects neighboring APs whose received signal strength indicator (RSSI) and
received signal to noise indicator (RSNI) exceed those of the AP currently associated with the STA based on the specified threshold.
The selected neighboring APs are candidate APs to which the STA is to roam.
⚫ Among all candidate APs, the WAC selects the optimal AP based on the SNR, access rate, and load balancing information, and then
triggers STA roaming to the target AP.
⚫ The process for 802.11k-capable STAs to select the target AP to roam to is shown below.
Yes
Determine that Whether latency- Do not trigger smart
the STA is sticky. sensitive services roaming.
exist
No
Select APs meeting Select the AP with

Filter out APs that Filter out APs that
the roaming the strongest signal
do not meet the CAC do not support load
difference threshold strength as the
requirement balancing
conditions target AP
• To prevent frequent STA roaming due to STA movements or signal fluctuations,

STA roaming is triggered only when the STA is detected a sticky STA for three
consecutive times. This slide shows the process for 802.11k-capable STAs to select
the target AP to roam to.
• Check whether latency-sensitive services exist:
▫ When delay-sensitive services exist on the STA currently, Roaming may

have a great impact on the service. In this case, roaming may bring poorer
user experience than non-roaming. To ensure user experience, network-
controlled smart roaming is not triggered for a STA that currently has a
delay-sensitive service.
• Filter out APs that do not meet the CAC requirement:
▫ On a WLAN, as the number of access STAs increases, channel preemption

among STAs becomes increasingly fierce, thereby worsening user
experience. Calling Access Control (CAC) is usually deployed to ensure
network experience of online users. CAC allows an AP to collect statistics on
the channel usage of a radio or the number of online STAs on the radio
and set thresholds to control user access.
▫ In smart roaming, the AP that meets the difference condition is checked

based on CAC. This prevents the impact on online users' and their own
experience after roaming.
• Filter out APs that do not support load balancing:
▫ When load balancing is enabled on a network, a STA initiates an

association request to an AP, the WAC connected to the AP first checks
whether the number of access STAs on the AP exceeds the start threshold
for load balancing. If not, the WAC allows the STA to go online. If so, the
WAC determines whether to allow the STA to go online based on the load
balancing algorithm.
• Select the AP with the strongest signal strength as the target AP:
▫ An optimal AP is selected from APs that meet requirements as a target AP,

and the network side steers the sticky STA to roam to the target AP in the
handover phase.
Roaming
⚫ For 802.11v-capable STA: An AP forces a STA to roam to the target AP based on the BSS transition mechanism
defined in the 802.11v protocol.
⚫ For 802.11v-incapable STA: The WAC instructs the AP that the STA is currently associated with to disconnect this
sticky STA and delivers a STA blacklist to the AP.
Before- After- Before- After-

STA STA
roaming AP roaming AP roaming AP roaming AP
BSS Transition Disassociation
Management Request Probe Request
Probe Request
BSS Transition
Management Response Probe Response
Probe Request
Probe Response Authentication Request
Authentication Request Authentication Response
Authentication Response Association Request

Association Request
Association Response
Association Response
Roaming for 802.11v-capable STA Roaming for 802.11v-incapable STA
• For an 802.11k-capable STA:
▫ The network side specifies an AP as the target AP for the STA, and sends
the target AP information to the STA through a BSS Transition
Management Request message, which is responded by a BSS Transition
Management Response frame sent by the STA. After authentication
information has been exchanged between the STA and target AP, the STA
connects to the target AP through a reassociation message.
• For an 802.11k-incapable STA
▫ For an 802.11v-incapable STA or a STA that claims to support 802.11v but

actually does not support 802.11v, the WAC instructs the AP that the STA is
currently associated with to disconnect this sticky STA and delivers a STA
blacklist to the AP.
Review of the Smart Roaming Process
⚫ The working process of smart roaming is as follows:
3
 An AP collects information about surrounding STAs,
discovers neighboring APs, and periodically reports the
information to the WAC. WAC
 When the STA associates with AP1, AP1 collects the SNR
and access rate of the STA in real time and determines
whether it is a sticky STA. If AP1 considers the STA as a 1 2 1 1
sticky one, AP1 reports the STA information to the WAC.
 After receiving the reported information, the WAC selects
the optimal neighboring AP of STA (AP_2) as the target AP AP2
AP1 AP3
to which the STA is to roam and delivers the target AP
information to AP1. 4 5
STA STA
 AP1 forces the STA to roam to AP2 through the BSS
transition mechanism defined in the 802.11v protocol or the
forced logout mode.
 The STA roams to AP2.
Key Configurations of Smart Roaming
⚫ Configure smart roaming.
 Create an RRM profile.
 Enable smart roaming.
 Set the smart roaming triggering mode to check-snr.
 Configure the SNR threshold for triggering smart roaming.
[WAC-wlan-view] rrm-profile name wlan-rrm
[WAC-wlan-rrm-prof-wlan-rrm] smart-roam enable
[WAC-wlan-rrm-prof-wlan-rrm] smart-roam roam-threshold check-snr
[WAC-wlan-rrm-prof-wlan-rrm] smart-roam roam-threshold snr snr-threshold
Quiz
1. (Single-Answer Question) Which of the following helps to shorten the roaming latency in fast roaming
using PMK caching? ( )
A. Key negotiation is omitted.
B. 802.1X authentication is omitted.
C. 802.1X authentication and key negotiation are omitted.
D. STA reassociation is omitted.
2. (Single-Answer Question) Which of the following roaming technologies is used to solve the problem
that sticky STAs fail to proactively roam to another AP? ( )
A. 802.11r roaming
B. Roaming using PMK caching
C. Smart roaming
D. Layer 3 roaming
1. B
2. C
Summary
⚫ This course describes the basic concepts of WLAN roaming and forwarding process of
roaming traffic in different data forwarding modes. Roaming optimization technologies,
such as PMK roaming, 802.11r roaming, and smart roaming, ensure smooth and fast
roaming and greatly reduce the packet loss rate. In this way, service data flows are
transmitted at a low latency during roaming, improving user experience.
⚫ After learning, you will have an understanding of the basic concepts of roaming
technologies and the implementation principles of different roaming technologies.
Recommendations
Acronyms and Abbreviations

AES Advanced Encryption Standard
BSS Basic Service Set
ESS Extended Service Set
PPSK Private Pre-Shared Key
PSK Pre-Shared Key
PTK Pairwise Transient Key
RRM Radio Resource Management
SNR Signal-to-Noise Ratio
WEP Wired Equivalent Privacy
WPA Wi-Fi Protected Access
intelligent world.


WLAN Radio Resource Management
Foreword
⚫ WLANs use radio signals (such as 2.4 GHz or 5 GHz radio waves) as transmission media.
Radio signals are attenuated during transmission in the air, reducing WLAN stability and
thereby degrading network experience of wireless users.
⚫ Radio resource management (RRM) enables APs to automatically detect the surrounding
radio environment, dynamically adjust radio resources such as channels and transmit power,
and intelligently balance STA access loads. RRM helps adjust radio coverage, reduce radio
signal interference, enable a WLAN to quickly adapt to changes in the radio environment,
and ensure WLAN service continuity.
⚫ This course describes the main factors that affect air interface performance and the RRM
technologies such as radio calibration, STA steering, band steering, and load balancing.
Objectives
 Describe the main factors that affect air interface performance.
 Describe common RRM technologies, including radio calibration, band steering, load balancing, and
user CAC.
Contents
1. Air Interface Performance
2. Radio Calibration
3. STA Steering
4. Band Steering
5. AP-based Load Balancing
6. User CAC
Factors Affecting Air Interface Performance
⚫ An air interface is a virtual logical interface on an AP or STA. Wireless links can be established between
air interfaces. Air interface performance is affected by the following factors:
 Link setup rate: radio mode, bandwidth, number of spatial streams, modulation and coding scheme (MCS), and
guard interval (GI) mode
 Co-channel and adjacent-channel interference between WLAN devices
 Interference from non-Wi-Fi devices
 Signal strength of STAs
 Number of STAs
 STA capability differences (such as supported protocols and number of spatial streams)
• MCS: modulation and coding scheme
• GI mode: During data transmission, the receive and transmit ends do not receive
or send data at all times. During data receiving or sending or multiple
transmissions, mulitipath interference can affect transmission of radio signals.
Setting a GI between data transmissions can improve the transmission effect.
Wi-Fi Interference: Co-Channel and Adjacent-Channel
Interference
Co-channel interference Adjacent-channel interference
AP1 Channel 1 Channel 1 AP2 AP1 Channel 1 Channel 2 AP2
Channel 1: 2.412
Channel 1: 2.412 Channel 1: 2.412 Channel 2: 2.417
• When two neighboring APs work on overlapping

• When two neighboring APs work on the same
channels, the APs affect each other, leading to
channel, they perform backoff according to the carrier
adjacent-channel interference.
sense multiple access with collision avoidance
• When two neighboring APs are deployed closely to
(CSMA/CA) mechanism, which greatly degrades air
each other and have high transmit power, they affect
interface performance.
each other even if they work on non-overlapping
channels (for example, 2.4 GHz channels 1 and 6).
Non-Wi-Fi Interference
⚫ The 2.4 GHz Industrial, Scientific, and Medical (ISM) frequency band is open and widely used around the world. Various wireless
products working on the 2.4 GHz frequency band, such as microwave ovens, cordless phones, and Bluetooth devices, can cause
frequency interference to 2.4 GHz WLANs.
⚫ Compared with the 2.4 GHz frequency band, the 5 GHz frequency band has less interference. Currently, radars, wireless sensors,
digital satellites, wireless ATM networks, and software-defined radio devices typically work on the 5 GHz frequency band.
⚫ These non-Wi-Fi devices can cause radio signal conflicts and severe interference to WLANs, resulting in poor network experience of
users.
Bluetooth device Satellite receiver
How the Signal Strength Affects Air Interface Performance
⚫ High signal strength is fundamental to good wireless user experience. With a low signal strength, packets can be transmitted only
at low rates, and issues such as packet loss, delay, and retransmission will increase, greatly degrading air interface performance.
Throughput (Gbps)
1.8
1.6
1.4
1.2
0.8
0.6
0.4
0.2
0
0 5 10 15 20 25 Distance (m)
Coverage performance of Huawei AirEngine

6761-21T at different distances
* Source: Tolly's report Huawei AirEngine Series Wi-Fi 6 Access Points Performance Evaluation and Feature Validation
• According to the free-space signal attenuation model, the signal strength is

related to the frequency and distance. A higher frequency indicates a larger
signal attenuation. As the distance increases, the signal attenuation increases.
How the Number of STAs Affects Air Interface Performance
⚫ In case of a single STA, the maximum air interface performance can be reached because no channel contention exists. As the number
of STAs increases, however, the air interface performance deteriorates due to increased consumption of channel resources.
⚫ The following graph shows the performance test result of a Huawei AP with different numbers of STAs. As the number of STAs
increases, the AP's total throughput decreases continuously.
900
Throughput (Mbps)
800
700
600
500
400
300
200
100
0
0 10 20 30 40 50 Number of STAs
Multi-user performance test result of the AirEngine

8760-X1-PRO obtained from Huawei lab
STA Capability Differences
STA equipped with a Wi-Fi network adapter that STA equipped with a Wi-Fi network adapter that
supports multiple spatial streams supports only one spatial stream
"123456" AP "123456" AP
"12" "34" "56" "12"
STA STA
When both the AP and STA support three spatial streams, When the AP supports three spatial streams but the STA's
the data to be exchanged between them can be divided into Wi-Fi network adapter supports only one spatial stream, the
three parts for simultaneous transmission, which greatly AP and STA can use only one spatial stream to exchange
improves transmission efficiency. data with each other over the air interface. This triples the
data transmission time.
Contents
3. STA Steering
4. Band Steering
6. User CAC
Overview of Radio Calibration
⚫ On a WLAN, the operating performance of APs is affected by the radio environment. For example, a high-power AP
can interfere with adjacent APs if they work on overlapping channels. Radio calibration can dynamically adjust the
channels, power, and frequency bands of APs managed by the same WAC to ensure signal coverage while
minimizing interference. This ensures that the APs can work at the optimal performance.
Dynamic Transmit Dynamic Dynamic

channel power frequency bandwidth
assignment control assignment selection
(DCA) (TPC) (DFA) (DBS)
On a large-scale network, manual radio calibration is time-consuming, and therefore

automatic radio calibration is recommended.
• Radio calibration is triggered when a new AP is connected to the network, an AP

is out of service, or the radio environment deteriorates.
Channel Adjustment
⚫ On a WLAN, adjacent APs must work on non-overlapping channels to avoid radio interference. The 2.4 GHz frequency band is
divided into fourteen 20 MHz channels, with adjacent channels overlapping. The 5 GHz frequency band provides more
frequency resources. In addition to 20 MHz channels, APs working on the 5 GHz frequency band support 40 MHz, 80 MHz, and
160 MHz channels.
⚫ In the following figure, before channel adjustment, both AP2 and AP4 work on channel 6, leading to co-channel interference.
After channel adjustment, AP2 is switched to channel 11 so that neighboring APs work on non-overlapping channels,
eliminating interference. Channel adjustment ensures that each AP is assigned an optimal channel to minimize interference
from co-channel or adjacent-channel APs, ensuring reliable network transmission.
AP2 AP2
AP1 Channel 6 AP1 Channel 11
Channel 1 Channel 1
AP4 AP4
AP3 Channel 6 AP3 Channel 6
Channel 11 Channel 11
Before channel adjustment After channel adjustment
• In addition to radio calibration, channel adjustment can also be used for DFS. In
some regions, radar systems work on the 5 GHz frequency band, which may
interfere with radio signals of APs working on the 5 GHz frequency band. The
DFS function enables APs to automatically switch to other channels when they
detect interference on their working channels.
Power Adjustment
⚫ An AP's transmit power determines its radio coverage area. APs with higher power have larger coverage areas. Power adjustment
enables APs to dynamically adjust their transmit power according to the real-time radio environment.
Decreasing the transmit power Increasing the transmit power
Coverage area
Decreasing the Increasing the

AP2 transmit power AP2 AP2 transmit power AP2
AP1 AP1
AP1 AP1
AP3 AP3 AP3

AP3 AP4
AP4
New
• After AP4 is connected to the network, neighboring APs • When AP4 leaves the network, the WLAN cannot meet
decrease their transmit power to minimize interference the coverage requirements. In this case, neighboring APs
while meeting coverage requirements. increase their transmit power.
Wi-Fi signal coverage requirements of STAs
• A traditional method to control the radio power is to set the transmit power to
the maximum value to maximize the radio coverage area. However, a high
transmit power level may cause interference to other wireless devices. Therefore,
the optimal power is required to balance the coverage range and signal quality.
Redundant Radio
⚫ A 2.4 GHz redundant radio (redundant radio for short) has co-channel or adjacent-channel interference with
neighboring radios. The area covered by a redundant radio is also covered by neighboring 2.4 GHz radios.
⚫ As shown in the figure, all the four APs work on the 2.4 GHz frequency band. No matter which channel AP4 works
on, co-channel or adjacent-channel interference exists between AP4 and its neighboring APs, and the area covered
by AP4 can also be covered by the other three APs. AP4 is a redundant AP on this WLAN.
Channel 6
AP2
Channel 1
AP1
AP4
Coverage area of
neighboring APs
AP3
Coverage area of
Coverage area of the
AP4 (redundant AP) Channel 11 redundant AP
DFA
⚫ Redundant radios on a WLAN not only generate co-channel interference but also waste network capacity. The
following policies are available to process a redundant radio:
 Switching to the 5 GHz mode: If 5 GHz channel resources are available, a redundant radio can be switched to the 5 GHz mode,
increasing the maximum capacity of 5 GHz radios.
 Switching to the monitor mode: If no more 5 GHz channel resources are available, a redundant radio can be switched to the
monitor mode and used for scanning services.
 Disabling it: Disabling a redundant radio decreases co-channel interference but does not affect coverage.
2.4 GHz 5 GHz
AP2 AP2
AP1 AP4 AP1 AP4
All APs work on the 2.4

AP3 AP3 AP4 switches to the 5
GHz frequency band and
GHz frequency band.
there is a redundant radio.
• Manually identifying, switching, or disabling redundant radios will greatly

increase network maintenance costs. To resolve this issue, DFA is adopted to
automatically identify, switch, or disable redundant radios, reducing co-channel
interference on the 2.4 GHz frequency band and increasing system capacity.
• DFA processes a redundant radio as follows:
▫ After identifying a redundant radio, the DCA algorithm switches the radio
to the 5 GHz or monitor mode based on the channels, bandwidth, and
interference of other radios on the network.
▫ After the redundant radio is switched to the 5 GHz mode, it works on the
default 5 GHz channel. In this case, the DCA algorithm is used to adjust the
radio channel.
▫ During this process, if a coverage hole is detected on 2.4 GHz radios, the 5
GHz radio is switched back to the 2.4 GHz mode.
▫ If the WAC restarts, the AP goes online again with the original
configurations before the WAC restart, including the channel, power,
frequency band, and radio status. If the AP goes online after a long period
of time, the WAC determines redundant radios and allocates frequency
bands to radios again.
▫ When the DFA function is disabled, the redundant radio configuration will
be restored. That is, the radio in 5 GHz or monitor mode will be restored to
the 2.4 GHz mode.
DBS
⚫ For 5 GHz networks in non-high-density indoor scenarios, adjusting the frequency bandwidth does not cause extra interference.
Therefore, the DBS algorithm can increase the frequency bandwidth of APs in hotspot areas to 40 MHz or 80 MHz based on
channel allocation to improve network throughput. If other APs interfere with APs in hotspot areas after the frequency bandwidth
is increased, the DBS algorithm reduces the frequency bandwidth of APs in hotspot areas to reduce network interference.
Hotspot area Hotspot area
Channel: 11 Channel: 1 Channel: 6 Channel: 6

2.4 GHz 2.4 GHz Channel: 11 Channel: 1
HT20 MHz HT20 MHz HT20 MHz HT20 MHz HT20 MHz HT20 MHz
Channel: 60 Channel: 44 Channel: 149 Channel: 60 Channel: 44 Channel: 149
5 GHz 5 GHz
2.4 GHz HT20 MHz HT20 MHz HT20 MHz 2.4 GHz
HT20 MHz HT20 MHz HT20 MHz
5 GHz HT20 MHz HT20 MHz HT20 MHz 5 GHz HT80 MHz HT40 MHz HT20 MHz
2.4 GHz Channel: 11 Channel: 1 Channel: 6 2.4 GHz Channel: 11 Channel: 1 Channel: 6
5 GHz HT20 MHz 5 GHz HT20 MHz HT40 MHz HT20 MHz
HT20 MHz HT20 MHz
5 GHz radios are configured to work in HT20 mode, The DBS algorithm automatically increases the 5 GHz
which limits the user bandwidth. frequency bandwidth to improve the user bandwidth.
• From IEEE 802.11ac, Wi-Fi systems support four types of frequency bandwidth: 20
MHz, 40 MHz, 80 MHz, and 160 MHz. Higher bandwidth brings higher
throughput. However, because the number of available channels is limited, the
single-radio frequency bandwidth of 80 MHz or 160 MHz cannot be configured
for all APs. For 5 GHz networks in non-high-density indoor scenarios (AP spacing:
10–15 m), the DBS algorithm enables WACs to automatically identify the service
priority, service throughput, and interference, and then preferentially assign more
network resources to heavily loaded areas and dynamically allocate proper
frequency bandwidth to radios of each AP, thereby improving user experience.
• The DBS algorithm takes effect in the following ways:
▫ Groups available 5 GHz channels based on the capability of forming 80

MHz or 40 MHz channels.
▫ Sorts APs by topology distance.
▫ Assigns primary channels based on factors such as the interference index,

bandwidth fulfillment degree, channel isolation degree, and channel
multiplexing index.
▫ Bond 20 MHz channels of APs into 40 MHz or 80 MHz channels according

to the channel assignment sequence.
Implementation of Radio Calibration — Global Radio Calibration
⚫ Radio calibration requires the following components for implementation:
 AP: actively or passively collects radio environment information, sends the collected information to the WAC, and performs
radio calibration based on the calibration results delivered by the WAC.
 WAC: maintains the AP neighbor topology based on the radio environment information reported by APs, uses calibration
algorithms to allocate channels and transmit power to APs, and delivers calibration results to APs.
⚫ WACs support global radio calibration and partial radio calibration. Global radio calibration takes effect on all
APs managed by a WAC. The WAC allocates channels and transmit power to all APs connected to it to achieve
optimal radio performance. Typically, this calibration mode is used on a newly deployed WLAN or a WLAN with
only a few services.
AP WAC
Instruct the AP to start neighbor probe.
Report the probe result.

Allocate channels and power to the
AP based on the calibration policy.
Deliver the calibration result.
• Global radio calibration is implemented as follows:
▫ After global radio calibration is enabled on a WAC, the WAC instructs each
AP to perform neighbor probe periodically.
▫ The APs perform neighbor probe periodically.
▫ All APs report probe results to the WAC.
▫ After the WAC receives neighbor information reported by all APs, it uses
global radio calibration algorithms to allocate channels and power to the
APs.
▫ The WAC delivers calibration results to the APs. After the WAC implements
global radio calibration for the first time, it starts the next global radio
calibration until it receives neighbor information from APs. The WAC
continuously implements global radio calibration to obtain optimal and
accurate calibration results.
• The global calibration algorithms include DCA, TPC, DBS, and DFA.
Implementation of Radio Calibration — Partial Radio Calibration
⚫ Partial radio calibration aims to adjust the working channels and power of some APs to optimize the radio
environment if it deteriorates in only some areas. Similar to global radio calibration, partial radio calibration uses
the DCA and TPC algorithms.
⚫ Partial radio calibration is triggered in the following scenarios:
After detecting that a new AP goes online, the WAC allocates channels and transmit power to the AP and may
A new AP goes online. re-allocate channels or transmit power to direct neighbors of the AP.
When detecting that an AP goes offline, the WAC executes radio calibration algorithms to properly
An AP goes offline. increase the transmit power of its neighboring APs to compensate for coverage holes.
Interference from a rogue If a rogue AP is identified through neighbor probe, interference information is collected and used
AP is detected. for triggering partial radio calibration.
The radio environment If an AP detects that the channel utilization or noise floor is too high or it cannot send Beacon frames,
deteriorates. the AP reports the issue to the WAC to trigger partial radio calibration.
If the spectrum analysis module identifies interference from non-Wi-Fi devices, it outputs interference
Interference from non-Wi-Fi information as the input for the calibration module and determine whether to trigger partial radio calibration
devices is detected. based on the interference level.
Partial radio calibration is Partial radio calibration is manually triggered for a specified AP or AP group.
manually triggered.
Key Configurations for Radio Calibration
⚫ Configure radio calibration.
[WAC-wlan-view] calibrate enable auto

[WAC-wlan-view] calibrate flexible-radio auto-switch
[WAC-wlan-view] ap-group name ap-group1
[WAC-wlan-ap-group-ap-group1] radio 0
[WAC-wlan-group-radio-ap-group1/0] calibrate auto-channel-select enable
[WAC-wlan-group-radio-ap-group1/0] calibrate auto-txpower-select enable
[WAC-wlan-group-radio-ap-group1/0] calibrate auto-bandwidth-select enable
[WAC-wlan-group-radio-ap-group1/0] undo calibrate flexible-radio disable
[WAC-wlan-group-radio-ap-group1/0] radio 1
[WAC-wlan-group-radio-ap-group1/1] calibrate auto-bandwidth-select enable
[WAC-wlan-group-radio-ap-group1/1] undo calibrate flexible-radio disable
[WAC-wlan-group-radio-ap-group1/1] quit
Contents
3. STA Steering
4. Band Steering
6. User CAC
Overview of STA Steering
⚫ The STA steering function allows STAs with poor service experience to associate with more suitable APs based on
the WLAN environment, improving service experience of STAs.
 Before a STA is associated with an AP, the AP checks whether the STA supports dual bands. If so, the AP suppresses Probe
frames from the STA on the 2.4 GHz frequency band so that the STA preferentially accesses the 5 GHz radio. For details, see
the overview to band steering.
 After a STA is associated with an AP, the target AP selection algorithm is used to measure the AP's dual-band capability, AP
load, and signal quality, steering the STA to a better AP.
Load balancing is The WAC
Periodic load A WAC sorts APs by performed for APs in determines the The STA is steered
balancing load. descending order by target AP based on to the target AP.
load. the algorithm.
The WAC selects the

A WAC periodically Are there any Yes The WAC instructs
STAs that have been
Periodic identification traverses all online
online for more than
better APs for the APs to steer
STAs. these STAs? these STAs.
10 minutes.
When a STA is determined as a sticky STA, it is steered

Sticky STA steering using smart roaming.
Neighboring AP List of a STA
⚫ Before steering a STA, the WAC needs to determine the target AP, which is selected from the neighboring AP list
of the STA. Therefore, the WAC needs to collect, store, and maintain the neighboring AP lists of STAs.
⚫ Neighboring AP information can be obtained through Probe frame collection and Beacon Report measurement.
WAC
The WAC generates a neighboring AP list based on the STA information.
APs collect STA information

AP AP through Probe frames and
management frames and
Send the collected periodically report the STA
information to the information to the WAC.
WAC.
Measurement STA
Probe frame collection
STA
Send Probe frames to Beacon Report
obtain AP information measurement (active)
returned by other STAs.
• Probe frame collection: APs proactively scan channels and collect STA
information (for example, through Probe frames and management frames). After
collecting STA information, APs periodically report the collected information to
the WAC. The WAC then generates a neighboring AP list based on STA
information.
• Beacon report measurement: applies only to scenarios where both APs and STAs
support 802.11k. Beacon report measurement can be performed in one of the
following modes:
▫ Active: In this mode, the measurement STA obtains AP information returned

by other STAs after sending Probe frames to other STAs.
▫ Passive: In this mode, the measurement STA only obtains AP information on

other STAs but does not send Probe frames to other STAs.
▫ Beacon table: In this mode, the measurement STA directly obtains AP

information on other STAs.
STA Steering Mode
⚫ When a STA meets the steering conditions, the AP steers the STA.
WAC
• The STA steering mode depends on whether
the STA supports 802.11v. If so, the AP steers
Switch
the STA in BSS Transition Management (BTM)
mode. If not, the AP steers the STA in
AP3 Instruct neighboring AP1 AP2 deauthentication mode.
APs to suppress
association of the STA Deauthentication
• Before sending a BTM or deauthentication
BTM
To-be- message to steer the STA, the AP instructs
steered
STA neighboring APs to suppress Probe or
STA6 STA7 STA2 STA3 STA4 STA5 STA1
Authentication frames from the STA.
Supporting 802.11v Not supporting 802.11v
• BTM mode: BTM is a STA steering mode defined in 802.11v.
• Deauthentication mode: An AP forces a STA to go offline, and the STA then

selects target AP to associate.
• STAs with voice or video services running are steered.
• After a STA goes online again or roams, it will not be steered within five minutes.
Contents
3. STA Steering
4. Band Steering
6. User CAC
Overview of Band Steering
⚫ Most STAs on the live network support both 2.4 GHz and 5 GHz frequency bands. By default, some STAs connect to the network
through APs on the 2.4 GHz frequency band. As a result, the 2.4 GHz frequency band with fewer channels is congested and has
severe interference. The 5 GHz frequency band with more channels and less interference is not well utilized.
⚫ The band steering function enables an AP to steer STAs preferentially to the 5 GHz frequency band, reducing traffic load and
interference on the 2.4 GHz frequency band. This function also implements load balancing among radios on different frequency
bands (2.4 GHz and 5 GHz) of the same AP, improving user experience.
⚫ To implement band steering, an AP must have the same SSID and security policy on the 5 GHz and 2.4 GHz frequency bands.
AP
Access STA on Access STAs on

the 5 GHz radio the 2.4 GHz radio
Uneven STA distribution among radios
Implementation of Band Steering
⚫ Band steering enables STAs to preferentially connect to the 5 GHz frequency band based on the start threshold
for 5G-prior access and the percentage threshold for access STAs on 5 GHz radios.
⚫ A WAC periodically traverses APs and uses STA steering technology to steer STAs from the 2.4 GHz frequency
band to the 5 GHz frequency band based on the preceding thresholds.
A STA requests to
access an AP radio. Is the start
No The AP obtains Does the STA Yes The STA is steered to
threshold for 5G-
the STA's dual- support dual preferentially connect to
prior access
band capability. bands? the 5 GHz frequency band.
reached?
Yes
No
The STA is allowed to

Is the percentage access the radio.
No
threshold for access
STAs on 5 GHz radios
reached?
Yes The STA randomly selects

the 2.4 GHz or 5 GHz
frequency band.
Key Configurations for Band Steering
⚫ Configure band steering.
[WAC-wlan-view] vap-profile name vap1
[WAC-wlan-vap-vap1] undo band-steer disable
[WAC-wlan-vap-vap1] quit
[WAC-wlan-rrm-prof-wlan-rrm] band-steer balance start-threshold start-threshold
[WAC-wlan-rrm-prof-wlan-rrm] band-steer balance gap-threshold gap-threshold
[WAC-wlan-rrm-prof-wlan-rrm] band-steer deny-threshold deny-threshold
[WAC-wlan-rrm-prof-wlan-rrm] quit
[WAC-wlan-view] radio-2g-profile name default
[WAC-wlan-radio-2g-prof-default] rrm-profile wlan-rrm
[WAC-wlan-radio-2g-prof-default] quit
• Only the band steering parameters configured in the 2G radio profile take effect.
Therefore, after an RRM profile is configured, it should be bound to the 2G radio
profile.
Contents
3. STA Steering
4. Band Steering
6. User CAC
Overview of Load Balancing
⚫ Load balancing can evenly distribute AP traffic loads to ensure sufficient bandwidth for each STA.
⚫ After load balancing is enabled on a WAC, if some APs are heavily loaded, the WAC steers some STAs on these APs to lightly
loaded APs based on the dual-band capability of STAs, AP load, and AP signal quality, effectively utilizing AP resources.
⚫ The load balancing function applies to high-density WLANs to ensure proper access of STAs. Depending on whether a load
balancing group needs to be manually created, load balancing is classified into static load balancing and dynamic load balancing.
WAC
APs enabled with load balancing must

be connected to the same WAC. Switch
AP1 AP2
STAs must be able to scan the SSIDs
of the APs engaged in load balancing. New STA
• Currently, load balancing cannot be implemented among APs connected to

different WACs.
Static Load Balancing
⚫ In static load balancing mode, APs providing the same services need to be manually added to a static load
balancing group. Each AP in the group periodically reports STA association information to the WAC, and the WAC
then performs load balancing based on the received information. When a STA sends an association request to an
AP, the WAC uses the load balancing algorithm to determine whether to permit access from the STA.
WAC
A radio of an AP can join only one Switch

load balancing group.
AP1 AP2
Each load balancing group supports

a maximum of 16 members. 2.4 GHz 2.4 GHz
New STA
• Static load balancing can be implemented when the following conditions are
met:
▫ A radio of an AP can join only one load balancing group. The APs in the
figure above are single-band APs. That is, each AP has only one 2.4 GHz or
5 GHz radio. For APs with multiple radios, load balancing can be
implemented among radios of the APs working on the same frequency
band. This means that a dual-band AP can join two load balancing groups.
▫ Each load balancing group supports a maximum of 16 members.

Dynamic Load Balancing
⚫ In dynamic load balancing mode, after a STA goes online, the WAC obtains the frequency bands supported by the
STA and information about neighboring APs through Probe frame collection and Beacon Report measurement.
Then the WAC uses the load balancing algorithm to determine whether to connect the STA to a lightly loaded AP.
AP1 and AP2 form

WAC 3
a dynamic load balancing
group.
• Before a new STA goes online, it broadcasts Probe
2 Report the STA 2 Report the STA
information to the Request frames to scan surrounding APs.
information to the
WAC. WAC. • APs that receive the Probe Request frames report
the STA information to the WAC.
AP1 1 Probe Request AP2 • The WAC adds all the APs that report the STA
information to a dynamic load balancing group,
1
and then uses the load balancing algorithm to
New STA determine whether to permit access from the STA.
• In static load balancing mode, a load balancing group supports a limited number
of members, and all members must be manually added to the group and on the
same frequency band. Dynamic load balancing overcomes these limitations.
Implementation of Load Balancing (1/2)
⚫ AP-based load balancing is implemented in three phases: proactive AP load advertisement, setup of a load
balancing group, and STA steering.
⚫ Proactive AP load advertisement: APs proactively advertise their loads, and STAs select and access the optimal
radios. The following figure shows the AP load advertisement process:
A STA broadcasts its capabilities,

and APs identify STA capabilities.
No Yes
Does the STA support
802.11k?
When advertising their loads, the APs send

APs advertise their loads in the QBSS
responses for Neighbor Report Request frames
Load IE field of Beacon frames and
sent from the STA to notify the STA of
Probe Response frames.
neighboring AP information.
The STA selects and accesses the optimal radio (with

the minimum number of STAs and the minimum
channel utilization) based on the load information.
• A STA broadcast its capabilities through Probe Request frames and Association
Request frames.
Implementation of Load Balancing (2/2)
⚫ Setup of a load balancing group:
 Manual generation: AP radios are manually added to a static load balancing group.
 Automatic generation: APs around a STA collect some management frames, control frames, and data frames of the STA and
report the AP information to the WAC. The WAC adds all APs that report the STA information to a dynamic load balancing group.
⚫ STA steering: STAs are steered from a heavily loaded radio to a lightly loaded radio in a load balancing group.
A WAC periodically traverses APs to determine whether to The STA is steered.

steer a STA.
The STA is steered when the following conditions are met: A STA is steered in either of the following modes:
⚫ A neighboring AP exists. ⚫ If the STA supports 802.11v, it is steered in BTM mode.
⚫ The load of the neighboring AP's radio is less than that ⚫ If the STA does not support 802.11v or fails to be
of the original AP. steered in BTM mode, it is steered in deauthentication
mode.
⚫ The signal quality of the neighboring AP's radio is higher
than the lower threshold.
⚫ The signal quality of the neighboring AP's radio is higher
than or slightly lower than that of the original AP.
Key Configurations for Load Balancing
⚫ Configure dynamic load balancing.
[WAC-wlan-rrm-prof-wlan-rrm] undo sta-load-balance dynamic disable
[WAC-wlan-rrm-prof-wlan-rrm] sta-load-balance dynamic sta-number start-threshold start-threshold-value
[WAC-wlan-rrm-prof-wlan-rrm] sta-load-balance dynamic sta-number gap-threshold { percentage percentage-value |

number number-value }
[WAC-wlan-rrm-prof-wlan-rrm] quit
[WAC-wlan-view] radio-5g-profile name default
[WAC-wlan-radio-5g-prof-default] rrm-profile wlan-rrm
[WAC-wlan-radio-5g-prof-default] quit
Contents
3. STA Steering
4. Band Steering
6. User CAC
User CAC
⚫ On WLANs where many users exist, such as in high density scenarios, users compete fiercely to occupy channels as
the number of online users increases. As a result, network quality deteriorates. To ensure network experience of
online users, the user CAC function can be configured. This function allows an AP to control user access based on
the threshold specified according to the number of online users or terminal SNR, ensuring network access quality of
online users. User CAC is implemented in either of the following modes:
Based on the number of users Based on the terminal SNR
The AP allows the The AP allows the

user to go online. user to go online.
No No
An AP receives An AP receives Does the

an access Does the number of an access terminal SNR of the
request from a online users reach the request from a user reach the
new user. threshold? new user. threshold?
Yes The AP denies Yes The AP denies

access from the access from the
new user. new user.
• User CAC based on the number of users uses a simple algorithm. This mode is
recommended when most users have the same type of services and similar
service traffic volumes.
▫ When receiving an access request from a new user, an AP calculates the
current number of online users on the radio and checks whether the
number reaches the threshold. If not, the AP allows the user to go online. If
so, the AP denies access from the user.
▫ If the number of online users reaches the threshold after the new user goes
online, the AP will deny the access request from the new user and send an
alarm, and can hide its SSID. When a user roams to the AP, the AP checks
whether the number of online users reaches the threshold set for roaming
users. If so, the AP denies access from the user.
▫ When the number of online users falls below the threshold set for new
users, the AP sends a clear alarm, unhides the SSID, and allows new users
to go online.
• CAC based on the terminal SNR controls access from weak-signal users, and is
applicable to scenarios where WLANs have good signal coverage and weak
signals only at the edge of WLAN coverage areas.
▫ When receiving an access request from a new user, an AP checks whether
the terminal SNR reaches the threshold specified for new users. If not, the
AP allows the user to go online. If so, the AP denies access from the user.
Key Configurations for User CAC
⚫ Configure CAC based on the number of users.
[WAC-wlan-rrm-prof-wlan-rrm] uac client-number enable
[WAC-wlan-rrm-prof-wlan-rrm] uac client-number threshold access access-threshold [ roam roam-threshold ]
[WAC-wlan-rrm-prof-wlan-rrm] uac reach-access-threshold hide-ssid
⚫ Configure CAC based on the terminal SNR.
[WAC-wlan-rrm-prof-wlan-rrm] uac client-snr enable
[WAC-wlan-rrm-prof-wlan-rrm] uac client-snr threshold threshold
[WAC-wlan-rrm-prof-wlan-rrm] uac reach-access-threshold hide-ssid
Quiz
1. (Multiple-answer question) Which of the following functions are supported in the automatic radio
calibration solution? ( )
A. Dynamic frequency assignment (DFA)
B. Dynamic bandwidth selection (DBS)
C. Dynamic channel assignment (DCA)
D. Transmit power control (TPC)
2. (True or false) If radio channel switching is triggered during channel scanning, the service data delay
increases at the moment the channel switches, which may affect wireless service experience. ( )
A. True
B. False
1. ABCD
2. A
Summary
⚫ This course describes the RRM solution, including radio calibration, band steering, load
balancing, and user CAC. RRM helps dynamically adjust radio resources to adapt to changes
in the radio environment, provide high service quality for wireless network access, maintain
the optimal radio resource status, and improve user experience.
⚫ Upon completion of this course, you will be able to understand the main factors that affect
air interface performance and master the RRM technologies.
Recommendations

BTM BSS Transition Management
CSMA/CA Carrier Sense Multiple Access with Collision Avoidance
DCA Dynamic Channel Allocation
GI Guard Interval
MCS Modulation and Coding Scheme
intelligent world.


WLAN Planning Basics
Foreword
⚫ WLAN planning is an indispensable part before network deployment. Proper network

planning can better support customer communication and quotation and reduce risks that
may occur in subsequent delivery.
⚫ This course introduces the basic knowledge of network planning in terms of coverage and
capacity.
Objectives
 Understand the factors that affect WLAN coverage.
 Understand the concepts of and relationship between power and signal strength.
 Understand the factors that affect WLAN capacity.
Contents
1. WLAN Planning Overview
2. WLAN Coverage Design
3. WLAN Capacity Design
Current WLAN Status
⚫ A WLAN uses radio signals to transmit data. The strength of radio signals becomes weaker as the transmission
distance increases. In addition, adjacent radio signals cause interference overlapping. All these factors reduce the
signal quality or even cause network unavailability.
⚫ During WLAN project delivery, if professional network planning and design are not performed in the early stage,
rework operations such as AP reinstallation and re-cabling may be required after the construction is complete.
⚫ WLAN planning is performed to address the following issues:
VIP
Weak signal Severe co-channel No obvious experience

Slow Internet access
strength interference advantage in VIP areas
• Weak signal strength: If the actual transmit power of APs is not considered
during the wireless network coverage design, coverage holes may exist. In this
case, the signal strength is weak or even no signal is available. As a result, users
suffer from slow Internet access or even cannot access the Internet. Therefore,
the coverage area of each AP needs to be properly planned during WLAN
planning to ensure that each area is covered by strong wireless signals.
• Severe co-channel interference: Co-channel interference is generated when radios
of two neighboring APs work on the same channel. When co-channel
interference occurs, signals of the APs are interfered and delays arise when the
APs receive and send data simultaneously, which greatly reduces network
performance. Therefore, different working channels that do not interfere with
each other need to be allocated for APs with overlapping coverage areas.
• Slow Internet access: WLAN data transmission uses the Carrier Sense Multiple
Access with Collision Avoid (CSMA/CA) mechanism. The probability of wireless
packet collisions grows as the number of concurrent access users increases,
thereby slowing down the Internet access speed. For example, in high-density
scenarios such as stadium stands, a large number of wireless users connect to
each radio of APs, causing a high probability of wireless packet collisions. In these
scenarios, three-radio APs are recommended to control the number of access
users on each radio and reduce the packet collision probability.
• No obvious experience advantage in VIP areas: VIP areas require special attention
during WLAN planning. The Internet access experience of users in VIP areas
should be preferentially guaranteed.
Introduction to WLAN Planning
⚫ To improve the wireless network quality, meet the customer's network construction requirements, and avoid rework
operations such as AP redeployment due to network optimization in the subsequent delivery phase, the WLAN
needs to be planned and designed before project delivery.
Network planning
AP installation positions
AP models and quantity Cabling deployment
and modes
Ensure
No network
Good signal coverage Fast Internet access Good network experience
coverage holes
WLAN coverage design WLAN capacity design
Country code EIRP MIMO Antenna Number of radios Bandwidth Spatial stream
Frequency band Channel bonding

Signal attenuation MCS GI mode
and channel
Contents

◼ Coverage Design Overview
▫ Introduction to Coverage Design Parameters
WLAN Coverage Design Overview
⚫ During network coverage design, you need to design and plan coverage for common, simple,
and VIP areas to ensure that the signal strength in each area meets user requirements and
to minimize interference between neighboring APs.
⚫ WLAN coverage design involves the following phases:
Factors affecting the

Coverage scenarios Coverage areas
coverage effect
Determine the Determine the signal

Determine all factors
coverage scenarios of coverage of WLAN
that affect signal
WLAN projects, such projects and the
coverage, such as
as indoor coverage methods of
obstacle materials
and outdoor measuring the
and thickness.
coverage. coverage.
Coverage Scenarios
⚫ Coverage scenarios are classified into indoor coverage, outdoor coverage, and backhaul scenarios.
 Indoor coverage: It involves many scenarios and needs to be analyzed based on specific scenarios. Indoor signals are greatly
affected by walls, and concurrent bandwidth requirements vary greatly.
 Outdoor coverage: The signal coverage in the outdoor area is typically large with diversified service types and highly mobile
STAs. The requirement for bandwidth is not high, but that for the protection level of devices is high.
 Backhaul scenario: The construction is difficult and the cabling cost is high. Compared with wired transmission, the WLAN
bandwidth is limited.
Enterprise office scenario (indoor) Square scenario (outdoor) Traffic scenario (backhaul)
Coverage Area
⚫ APs transmit radio signals using antennas. With an antenna as the center, longer distance indicates weaker signal strength.
Generally, the area where the signal strength around an antenna is greater than the edge field strength is called wireless network
coverage area. The field strength of radio signals at the edge of a network coverage area is called edge field strength.
⚫ For example, if the signal strength indicator value in a common coverage area is –65 dBm, the edge field strength must be greater
than or equal to –65 dBm during network planning and design.
Edge field strength

≥ –65 dBm
Coverage
distance
AP Coverage area
Edge field strength
Coverage area ≥ –65 dBm
AP
Top view of an omnidirectional antenna Top view of a directional antenna
• Network indicator values refer to the recommended values of edge field strength
provided by network planning in different scenarios. The network indicator values
vary according to the coverage requirements.
Coverage Area - Measurement Modes
⚫ Omnidirectional antennas and directional antennas use different methods to measure the coverage
range. Coverage radius and coverage distance are used for omnidirectional antennas and directional
antennas respectively. To calculate the coverage range using the two methods, the maximum
transmission distance needs to be determined in addition to the height measured during site survey.
Directional antenna
Maximum
Maximum transmission
transmission Antenna distance
Height distance height
Coverage radius
Coverage distance
Coverage area
Measurement for an omnidirectional antenna Measurement for a directional antenna
Calculating Maximum Transmission Distance
⚫ Path loss can be calculated using the final signal field strength formula. Then the maximum transmission distance
can be calculated based on its relationship with the path loss.
⚫ The Received Signal Strength Indicator (RSSI) is calculated as follows (regardless of factors such as the interference
and line loss):
Final signal field strength = AP transmit power + MIMO gain + Antenna gain – Path loss – Obstacle signal attenuation
The relationship between the path loss and the maximum transmission distance is as follows (indoor semi-open scenario):2.4G: L
= 46 + 25lg(d) 5G: L = 53 + 30lg(d) L: path loss (dB); d: maximum transmission distance (m)
Final signal field strength –65 dBm For example, to calculate the maximum transmission distance of 5
GHz signals in an indoor semi-open scenario, the known information
AP transmit power 20 dBm is listed in the left table. The calculation process is as follows:
–65 = 20 + 6 + 0 – [53 + 30lg(d)] – 8

5G antenna gain 6 dBi
d = 10
Obstacle signal attenuation 8 dB
The maximum transmission distance of 5 GHz radio signals with the
Antenna gain (mobile phone) 0 signal field strength of –65 dBm is 10 m.
• Formula for calculating the path loss in the indoor semi-open environment:
▫ 2.4 GHz frequency band: (attenuation factor D = 2.5; penetration factor p =

6);
▫ L = 20 x lg(f) + 10 x D x lg(d) + p – 28 = 46 + 25 x lg(d);
▫ 5 GHz frequency band: (attenuation factor D = 3; penetration factor p = 6);
▫ L = 20 x lg(f) + 10 x D x lg(d) + p – 28 = 53 + 30 x lg(d);
▫ In this formula, L indicates the path loss (dB), f indicates the working
frequency (MHz), D indicates the attenuation factor, d indicates the
distance (m), and p indicates the penetration factor.
Contents

▫ Coverage Design Overview
◼ Introduction to Coverage Design Parameters
Antenna
⚫ An antenna is used to transmit or receive radio waves, providing three basic attributes for the wireless system:
 Gain: measures the density of the energy radiated by an antenna.
 Directivity: refers to the signal transmission pattern.
 Polarization: refers to the radiation specification that describes the orientation of electromagnetic wave field.
⚫ Antennas are classified into the following types:
By radiation
By polarization By appearance By location
direction
• Omnidirection • Single-
• Whip antenna • External
al antenna polarized
• Plate-shaped antenna
• Directional antenna
antenna • Built-in
antenna • Dual-polarized
• Panel antenna antenna
• Smart antenna antenna
• Omnidirectional antenna:
▫ An omnidirectional antenna radiates energy with the same intensity in all
directions on the horizontal plane but with different intensities in each
direction on the vertical plane.
▫ The radiation pattern of an omnidirectional antenna is similar to that of an
incandescent lamp, which radiates visible light in all directions on the
horizontal plane.
• Directional antenna:
▫ A directional antenna radiates energy with different intensities in each
direction on both the horizontal and vertical planes.
▫ The radiation pattern of a directional antenna is similar to that of a
flashlight, which radiates visible light towards a certain direction. With the
same radio energy, a directional antenna provides a longer coverage
distance than an omnidirectional antenna in a particular direction at the
expense of coverage in other areas.
• Smart antenna:
▫ A smart antenna has multiple directional radiation patterns and one
omnidirectional radiation pattern on the horizontal plane.
▫ A smart antenna receives signals from transmitters in the omnidirectional
pattern. The smart antenna algorithm can determine the location of a
transmitter based on the received signals, and control the CPU to send
control signals to the transmitter in a directional radiation pattern with the
direction of the maximum radiation.
▫ Advantages of smart antennas:
▪ Large coverage area: Smart antennas concentrate energy more
effectively and have high gains, and therefore provide wider coverage.
A smart omnidirectional antenna's coverage scope is equivalent to a
directional antenna's coverage scope.
▪ High anti-interference capability: A smart antenna produces
directional beams in space, with the main lobe pointing to useful
signals' direction of arrival and side lobes and nulling beams point to
interference signals' direction of arrival.
▪ Low pollution to the environment: A smart antenna provides satisfied
power for STAs using low transmit power. This reduces the
electromagnetic wave pollution to the environment.
• Polarized antenna: Both single polarization and dual polarization are essentially
linear polarizations, which include horizontal polarization and vertical
polarization.
▫ Single-polarized antenna: an antenna that only transmits or receives radio
waves. Therefore, radio waves that are received or transmitted by a single-
polarized antenna are either horizontally or vertically polarized. Single-
polarized antennas require a large installation space and heavy
maintenance workload.
▫ Dual-polarized antenna: an antenna that transmits and receives radio
waves on both the horizontal and vertical planes.
• Whip antenna:
▫ Whip antennas are usually delivered with wireless devices, for example,
external antennas of indoor settled APs or Wi-Fi-capable devices. Whip
antennas have high gains, simple working mechanism, and low costs.
• Plate-shaped antenna:
▫ Plate-shaped antennas are widely used and very important. For example,
directional antennas used in outdoor scenarios are mostly plate-shaped
antennas. Plated-shape antennas have the following advantages: high
gains, good radiation pattern in the sector, small back lobe, easy control of
the downtilt in the vertical radiation pattern, reliable sealing performance,
and long service life.
• Built-in and external antennas are commonly used on indoor settled APs.
Currently, for better appearance, most APs use built-in omnidirectional antennas,
whose quantity and angles are invisible from the exterior of an AP.
Antenna Forms
Omnidirectional Directional Directional antenna Backhaul antenna

antenna (outdoor) antenna (outdoor) (indoor) (outdoor)
Ceiling-mounted Panel antenna

Whip antenna Smart antenna
antenna (built-in)
• All smart antennas are built-in antennas.

Antenna Angle
⚫ Antenna angles include the azimuth and downtilt angles, which are formed between an antenna and the north and
horizontal directions, respectively.
⚫ A small antenna angle provides a high antenna gain. However, the key to selecting an antenna gain is to meet
signal coverage requirements. The signal coverage range of an antenna can be controlled by adjusting the antenna
azimuth and downtilt angles.
Y
North
Azimuth
X
Antenna downtilt 8°
Antenna
height Vertical beamwidth 30°
Inner radius Coverage area

Outer radius
Antenna Gain
⚫ Antenna gain is the ratio of the power density in a given direction to the power density of a reference antenna
(using an ideal radiation source) in the same direction. It is expressed in dBd or dBi, where dBi = dBd + 2.15.
⚫ Antenna gain can be used to measure the capability of an antenna to receive and send signals in a specified
direction, which is one of the most important parameters to consider when selecting an antenna. The antenna gain
is closely related to the antenna radiation pattern. The narrower main lobe indicates smaller side lobe, higher gain,
and longer propagation distance of radio waves.
⚫ In practice, select a proper antenna gain to ensure that beamwidth matches the target coverage area. If the
coverage distance is small, select low-gain antennas with wide vertical lobes to ensure the coverage effect in the
area near the antenna.
Low gain High gain
• The antenna gain is a passive phenomenon and does not increase the power of
antennas. Instead, the antenna gain enables antennas to radiate more energy in
a certain direction than omnidirectional antennas by reallocating the power. It is
a quantitative measure to describe how much input power an antenna can
radiate in a given direction.
• Basic concepts:
▫ dBd: defines the gain of an antenna compared to the symmetrical dipole.
▫ dBi: defines the gain of an antenna compared to an isotropic antenna,

which radiates energy with the same intensity in all directions.
▫ Lobe angle: defined as the angle between the points in the main lobe that
are down from the maximum gain by 3 dB.
▫ Ideal radiation source: ideal isotropic antenna, that is, a simple point-
shaped radiation source that provides the same radiation performance in
all directions.
Antenna Specifications - Beamwidth
⚫ Beamwidth is the angular separation between the points in the main lobe that are down from the maximum gain
by 3 dB. It is also called main-lobe width, half-power angle, or lobe angle. The radiation pattern of an antenna
usually has two or more lobes. The lobe with the maximum radiation is the main lobe, and the other lobes are back
and side lobes.
⚫ An antenna has horizontal beamwidth and vertical beamwidth, forming a horizontal lobe angle and a vertical lobe
angle, respectively. When the beamwidth is narrow, radiation distance is long and interference is prevented.
Main lobe
-3 dB point
Side lobe
Beamwidth Peak direction

(direction of
maximum radiation)
-3 dB point
Horizontal pattern Vertical pattern
• Main lobe: Antennas have various radiation patterns. Some of them look like
petals. The one with the strongest radiation "sticks out". It is the main lobe.
• Side lobe: lobes other than the main lobe on a radiation pattern.
• When deploying antennas, side lobes will interfere with peripheral areas.
Typically, the main-lobe radiation needs to be enhanced, and the side-lobe
radiation needs to be suppressed. However, in the areas near the antennas, we
can enhance the side-lobe radiation to eliminate coverage holes.
Antenna Directivity
⚫ Antenna directivity indicates the capability of antennas radiating electromagnetic waves to a certain direction. For
receive antennas, the directivity indicates the capability of receiving electromagnetic waves from different
directions. External antennas can be classified into omnidirectional antennas and directional antennas by direction.
Omnidirectional The direction of maximum radiation is on the horizontal plane. An antenna has equal radiation in all
antenna directions on the horizontal plane.
• An omnidirectional antenna does not have

the direction of maximum radiation on the
horizontal plane.
• Omnidirectional antennas are undirectional,
so they are usually used for point-to-
Donut-shaped
Horizontal plane Vertical plane multipoint communication.
radiation pattern
Directional antenna The reflector reflects electromagnetic waves to one side to enhance the gain.
Plane reflector • A directional antenna has one or more directions of maximum

radiation on the horizontal plane.
• Directional antennas are suitable for long-distance
communication because of their directivity, energy
Omnidirectional radiation Directional enhancement concentration, and strong anti-interference capability.
(without a plane reflector) (with a plane reflector)
Antenna Polarization
⚫ Polarization is radiation specification that describes the orientation of electromagnetic wave field. The electric field vector in the
direction of the antenna's strongest radiation is usually used as the polarization direction of electromagnetic wave. If the receive
antenna needs to receive signals properly, ensure that the polarization direction of the electromagnetic wave is the same as that of
the receive antenna.
⚫ WLAN antennas are classified into single-polarized antennas and dual-polarized antennas. Both of them use the linear polarization
which can be horizontal polarization or vertical polarization.
Single-polarized antenna Dual-polarized antenna
Antenna
Electrical field direction
Vertical polarization Horizontal polarization
Vertical and horizontal ±45°cross polarization

polarization
±45°cross polarization outperforms vertical and horizontal
+45°polarization –45°polarization polarization in terms of signal reception balance.
• The polarization direction of the antenna is the electric field direction of the
electromagnetic field of antenna radiation.
▫ Vertical polarized wave: The electric field direction of the electromagnetic

wave is perpendicular to the ground.
▫ Horizontal polarized wave: The electric field direction of the

electromagnetic wave is parallel to the ground.
• Single-polarized antenna: transmits and receives signals separately. One antenna

contains only one polarization mode. Radio waves that are received or
transmitted by a single-polarized antenna are either horizontally or vertically
polarized.
• Dual-polarized antenna: One antenna is used for receiving and transmitting

signals. It supports vertical and horizontal polarization modes.
• Due to the characteristics of electrical waves, the horizontally polarized signals

generate current when approaching to the ground. Polarized current generates
heat due to ground impedance. As a result, electrical field signals are attenuated.
The vertically polarized signals do not generate current, so energy will not be
attenuated, and effective signal propagation is ensured. Therefore, vertical
polarization is widely used in mobile communication. For example, Huawei uses
vertically polarized antennas or ±45° dual-polarized antennas in wireless
communication systems.
• A dual-polarized antenna is a combination of vertically polarized antennas and
horizontally polarized antennas, or a combination of +45° polarized antennas
and -45° polarized antennas.
• With development of new technologies, dual-polarized antennas are widely used

now. There are two polarization modes: vertical and horizontal polarization and
±45° polarization. The ±45° polarization mode has better performance than
the vertical and horizontal polarization modes. Therefore, the ±45° polarization
mode is used in most cases. A dual-polarized antenna combines two orthogonal
antennas with polarization directions of +45° and –45° and works in duplex
mode, which greatly reduces the number of antennas in each area. In addition,
the orthogonal polarization (±45°) ensures the good effect of receive diversity.
SISO, MISO, SIMO, and MIMO
Transmit antenna Receive antenna Transmit antenna Receive antenna
Unique path Path 1
Multiple-input single-output (MISO)

Single-input single-output (SISO)
There are two paths between transmit antennas and the receive antenna.
There is a unique path between the transmit antenna and the receive
Only one receive antenna exists, and therefore the transmit antennas can
antenna, along which one signal is transmitted. Each signal is defined as
send only the same one signal along the two paths. The effect is similar to
one spatial stream.
that of SIMO.
Transmit antenna Receive antenna Transmit antenna Receive antenna

Path 1
Path 1
Path 4
Single-input multiple-output (SIMO)

Multiple-input multiple-output (MIMO)
There are two paths between the transmit antenna and receive antennas.
There are four paths between transmit and receive antennas, along which
Data is sent from the same transmit antenna, and therefore only one signal
two signals are transmitted at the same time, thereby doubling the rate.
is transmitted, doubling reliability.
• SISO
▫ In SISO, there is a unique path between the transmit antenna and the
receive antenna. Apparently, such transmission is unreliable and rate
limited. To address this issue, we add more antennas on the receive end
(STA) so that two or more signals can be received concurrently, that is,
single-input multiple-output (SIMO).
• SIMO
▫ There are two paths between the transmit antenna and receive antennas.
Data is sent from the same transmit antenna, and therefore only one signal
is transmitted, doubling reliability. This mode is also known as receive
diversity.
• MISO
▫ There are two paths between transmit antennas and the receive antenna.
Only one receive antenna exists, and therefore the transmit antennas can
send only the same data along the two paths. The effect is similar to that
of SIMO. This mode is also known as transmit diversity.
• MIMO
▫ MIMO technology allows multiple antennas to send and receive spatial
streams (multiple signals) simultaneously and to differentiate the signals
sent to or received from different spaces. By leveraging technologies such
as spatial reuse (SR) and space diversity (SD), MIMO boosts system
capacity, coverage scope, and signal to noise ratio (SNR) without increasing
the occupied bandwidth.
MIMO
⚫ MIMO is a technology that can multiply the system spectrum efficiency. MIMO transmission is also
called spatial multiplexing. The technology uses multiple antennas at the transmit end and receive end
and employ certain signal processing technologies at both ends to complete data communication,
bringing power gains, multiplexing gains, diversity gains, and array gains.
TX#1 RX#1
Power Improves the SNR at the receive end and the signal
gain receiving quality.
Transmit signal
Received signal
processing
processing
...
...
Source
TX#M RX#N Multiple Increases the signal transmission rate, throughput,

xing gain and peak capacity.
Diversity Improves the stability of the SNR at the receive end

gain and the reliability of signal reception.
Process of MIMO
Often referred to M xN MIMO system
M and N indicate the number of transmit antennas Array Increases average SNR as a result of combining
and receive antennas respectively. gain multiple signals.
• Power gain: In noise-limited scenarios, power gains increase the SNR at the
receive end, thereby improving the signal receiving quality and enhancing the
system capacity and coverage performance. For example, if each antenna has the
same transmit power, M antennas bring a power gain of 10lg(M) dB compared
with one antenna.
• Multiplexing gain: Multiplexing gains are derived from the theoretical

multiplexing orders of spatial channels. Theoretically, the capacity of an MxN
MIMO system is min(M,N) times that of a SISO system. For example, assuming
that the theoretical peak rate is 75 Mbps in 1x1 SISO mode, 150 Mbps can be
achieved in 2x2 MIMO mode, and approximately 300 Mbps in 4x4 MIMO mode.
• Diversity gain: a performance gain achieved by reducing the fluctuation of the

SNR of the combined signals based on the independence of spatial channel
fading. If channels between transmit and receive antennas are mutually
independent and signals from all transmit antennas are the same, the theoretical
diversity order of an MxN MIMO system is MxN times that of a SISO system.
• Array gain: performance gain achieved by increasing the average SNR of the
combined signals based on the correlation between signals and the non-
correlation between noises on different antennas. Compared with a SISO system,
a 1xN SIMO system and an Mx1 MISO system bring array gains of 10lg(N) dB
and 10lg(M) dB, respectively.
MU-MIMO
⚫ MIMO can be classified into single-user MIMO (SU-MIMO) and multi-user MIMO (MU-MIMO) by the
number of users.
 SU-MIMO: Multiple parallel spatial streams that occupy the same time-frequency resource are transmitted to
the same user, improving the throughput of a single user.
 MU-MIMO: Multiple parallel spatial streams that occupy the same time-frequency resources are transmitted to
different users, improving the throughput and capacity of multiple users.
User 1
AP User 1
AP User 2
User 3
SU-MIMO MU-MIMO
The AP sends data to a single user at a time. The AP sends data to three users at a time.
• The time-frequency resources combine time domain resources and frequency

domain resources.
• A wireless device that supports MU-MIMO technology can transmit data

simultaneously with multiple STAs, which changes serial to parallel transmission
mode and shortens the waiting time for STAs to obtain data from the wireless
device. Additionally, the bandwidth resources obtained by each STA are not
compromised. Therefore, this technology maximizes the resource utilization and
thereby increases the capacity of the wireless device and the Internet access
speed of STAs.
Country Code
⚫ During WLAN planning, network planning engineers need to determine the country code first. WLANs in different
countries or regions comply with different laws and regulations, and can use different channels and maximum
transmit power of radios.
⚫ Different country codes correspond to different channels and maximum transmit power, which cannot exceed the
ranges supported by the country codes. Otherwise, the network planning solution cannot be applied to actual
situations.
Maximum Transmit Power of 5 GHz Channel
2.4 GHz Maximum Transmit (dBm)
Country/ Applicable
Country Code Channel Power of 2.4 GHz 5 GHz Channel (20 MHz)
Region AP Type Channels: 36– Channels: Channels:
(20 MHz) Channel (dBm)
48 and 52–64 100–144 149–165
36, 40, 44, 48, 52, 56, 60, 64,
People's Indoor AP 20
149, 153, 157, 161, 165
Republic of CN 1–13 23 N/A 33
China Outdoor AP 27 149, 153, 157, 161, 165
36, 40, 44, 48, 52, 56, 60, 64,

Macao, All AP 100, 104, 108, 112, 116, 120,
MO 1–13 23 23 30 30
China models 124, 128, 132, 136, 140, 144,
149, 153, 157, 161, 165
• For details about the supported channels and maximum transmit power of radios
in different countries or regions, see WLAN Country Codes and Channels
Compliance.
Frequency Band and Channel
⚫ Radio signals are transmitted using electromagnetic waves (also called radios) at 2.4 GHz, 5 GHz, or 6 GHz. The frequency range of
a radio is referred to as a frequency band, for example, 2.4 GHz and 5 GHz frequency bands. Frequency ranges divided based on a
frequency band are called channels, which are classified into overlapping channels (for example, 1 and 2) and non-overlapping
channels (for example, 1 and 5). To avoid signal interference, information is exchanged through non-overlapping channels on the
live network.
Channels on the 5 GHz frequency band

Channels on the 2.4 GHz frequency band
(non-overlapping)
Channel: 1 3 5 7 9 11 13 5170 5250 5330 5490 5730 5735 5835

Center 2.412 2.422 2.432 2.442 2.452 2.462 2.472 Frequency
frequency (MHz): UNII-2
2 4 6 8 10 12 14 UNII-1 UNII-2 UNII-3
(GHz): 2.417 2.427 2.437 2.447 2.457 2.467 2.484 Extend
153 161
Channel: 36 40 44 48 52 56 60 64 100 ... ... 144 149 157 165
Frequency The 2.4 GHz frequency band is divided into 14 Gray channels are unavailable in China.
bandwidth channels, each with 20 MHz frequency
bandwidth (except 802.11b). Some of them For the 5 GHz frequency band, frequency resources are richer, and a
20 MHz
overlap with each other. Non-overlapping large number of non-overlapping channels are available. 5 GHz channels
channels 1, 5, 9, and 13 are typically used on the that can be used vary slightly in different countries. In China, 13 non-
live network. overlapping channels can be used.
• UNII is short for Unlicensed National Information Infrastructure.
• The 5 GHz Wi-Fi frequency band is much higher than the 2.4 GHz frequency
band in terms of frequency, speed, and anti-interference. However, as this band
has a higher frequency and therefore a shorter wavelength than its 2.4 GHz
counterpart, it delivers poor penetration capabilities and shorter transmission
distances. While 5 GHz frequency band ranges vary from country to country, its
wide frequency bandwidth and reduced interference make it suitable for high-
speed transmission.
EIRP
⚫ Equivalent Isotropically Radiated Power (EIRP) is the power radiated by an antenna in a specific
direction, in dBm. The maximum EIRP values vary with countries, frequency bands, and channels,
thereby imposing great restrictions on outdoor signal coverage. Therefore, the maximum EIRP values of
the corresponding countries need to be determined before network planning and design.
⚫ The EIRP is usually calculated based on the conducted power.
 The relationship between EIRP, transmit power, and antenna gain is shown as the following:
EIRP ≤ AP transmit power + MIMO gain + Antenna gain

 The power of a product usually refers to the combined power. The relationship is as follows:
Combined power = AP transmit power + MIMO gain

 MIMO gains are provided based on the following specifications when a STA supports a single spatial stream:
MIMO Specification 2×2 4×4 8×8

MIMO gain 3 dBm 6 dBm 9 dBm
Signal Attenuation
⚫ Signal attenuation mainly includes path loss and obstacle attenuation. The signal strength of a radio signal
gradually attenuates during transmission. When the signal attenuation is too large, the receive end cannot identify
the radio signal. Therefore, unnecessary signal attenuation should be minimized during WLAN coverage design.
⚫ Common factors that cause signal attenuation are as follows:
 Obstacles: They are commonly seen in wireless network environments, such as walls, glass, and doors.
 Transmission distance: It refers to the path loss, which cannot be avoided and can be calculated using the formula.
 Frequency: Shorter wavelength of an electromagnetic wave indicates more severe attenuation.
2.4 GHz 5 GHz
Mobile phone AP Laptop
Transmission distance (path loss) Obstacle (wall)
Signal Interference
⚫ Signal interference mainly refers to the interference and noise in the environment. Generally, the SNR or the signal
to interference plus noise ratio (SINR) is used to measure the impact of interference and noise on radio signals. SNR
and SINR are main technical indicators for measuring the communication quality and reliability of a
communications system. A larger SNR or SINR indicates higher communication quality and reliability.
 SNR: refers to the ratio of signals to noises.
 SINR: refers to the ratio of the strength of signals to the strength of interference and noise.
The SNR is calculated The SINR is calculated
using the following using the following
formula: formula:
SINR = 10lg [PS/(PI + PN)]
SNR = 10lg (PS/PN) • SINR: in dB
• SNR: in dB • PS: effective power of signals
• PS: effective power of signals • PI: effective power of interference
• PN: effective power of noise signals signals
• PN: effective power of noise signals
• Interference refers to the interference caused by the system and other systems,
such as co-channel interference and adjacent-channel interference.
• Noise refers to irregular extra signals that do not exist in original signals
generated by a device. Noise signals are related to the environment and do not
change as the original signals change.
• If there is no special requirement for the SNR or SINR during the WLAN planning
and design, you do not need to consider the SNR or SINR. If there are
requirements for the SNR or SINR, perform field signal simulation and SINR
simulation during the WLAN planning and design.
Contents

◼ Capacity Design Overview
▫ Parameters Related to AP Performance
WLAN Capacity Design Overview
⚫ During network capacity design, you need to design the number of APs required based on the bandwidth
requirements, the number of STAs, concurrency rate, and per-AP performance. This ensures that the WLAN
performance can meet the Internet access requirements of all STAs.
 The bandwidth requirement, number of STAs, and concurrency rate are estimated based on user requirements and site survey.
 The performance of a single AP is the bandwidth of a single STA multiplied by the number of concurrent STAs supported by a
single AP. Different single-STA bandwidths correspond to different number of concurrent STAs supported by an AP.
⚫ In network capacity design, the number of required APs is calculated using the following formula:
Number of STAs x Concurrency rate x

Bandwidth of a single STA
Number of required APs =
Bandwidth of a single STA x Number of
concurrent STAs supported a single AP
• Different types of STAs or STAs of the same type but with different services
require different bandwidths. For example, STAs of the same type require
different bandwidths for watching videos and browsing web pages. Network
planning engineers should calculate the currently required bandwidth for a single
STA based on its service and type.
Formula for Calculating the Theoretical WLAN Rate
⚫ The number of concurrent STAs supported by a single AP refers to the maximum number of concurrent
STAs supported by the single AP which meets user bandwidth requirements. The main factors include
the Wi-Fi standards, number of spatial streams, and number of radios supported by the AP as well as
working frequency bandwidth.
⚫ Different Wi-Fi standards correspond to different theoretical WLAN rates. The theoretical WLAN rate
refers to the link setup rate over the air interface. It is determined by the number of spatial streams,
symbol, guard interval (GI) length, modulation mode, bit rate, and number of valid subcarriers.
⚫ The formula for calculating the theoretical WLAN rate is as follows:
Number of spatial streams x Number of encoded bits per

subcarrier x Bit rate x Number of valid subcarriers
Theoretical WLAN rate =
Symbol length + Short GI or GI
• The theoretical WLAN rate refers to the maximum transmission rate theoretically
calculated based on a protocol standard. For example, the theoretical rate of
802.11ac Wave 2 can reach 6.9 Gbps.
• The implementation rate refers to the maximum rate that a product developed
by a vendor based on a standard can reach.
• The actual rate refers to the rate at which the AP forwards data after a STA is
connected to the AP.
• The difference between the actual rate and the theoretical rate is caused by the
following reasons:
▫ Distance: The distance from an AP and any physical obstacles (such as

walls, signal barriers, or reflection materials) affects signal transmission and
reduces the transmission speed.
▫ Interference: Devices on other wireless networks with the same frequency in

the same area affect network performance.
▫ Shared bandwidth: The available bandwidth is shared by all users on the

same wireless network.
Formula for Calculating the Theoretical WLAN Rate (Example)
Number of spatial streams x Number of encoded bits per subcarrier x Bit rate x Number of
valid subcarriers/(Symbol length + Short GI or GI)
Symbol and GI Length

11ac 11ax
Modulation and Coding Scheme (MCS)
Subcarrier
802.11 Modulation 312.5 KHz 78.125 KHz
Subcarrier Bit Rate bandwidth
Standard Scheme
Symbol 3.2 us 12.8 us
802.11ac 256-QAM 8 5/6
Short GI 0.4 us /
802.11ax 1024-QAM 10 5/6
GI 0.8 us 0.8 us
Number of Spatial Streams Number of Valid Subcarriers

802.11ac 802.11ax 802.11ac 802.11ax
4 8 160 MHz 468 1960
Wi-Fi 6: 8 x 10 bits per subcarrier x 5/6 x 1960/(12.8 + 0.8) us = 9607 Mbps
Wi-Fi 5 Wave 2: 4 x 8 bits per subcarrier x 5/6 x 468/(3.2 + 0.4) us = 3466 Mbps
• Number of spatial streams: It equals to the number of antennas of an AP. A

larger number of antennas indicate higher throughput of the entire system.
Similar to lanes on a highway, an 8-lane expressway carries more traffic than a
4-lane one.
• Symbol and GI: Symbol is the transmission signal in the time domain. There must
be a GI between two adjacent symbols to avoid interference between each other.
Take high-speed trains as an example. Each train is equivalent to a symbol. There
must be a time interval between the two trains departing from the same station.
Otherwise, the two trains may collide. The GI varies depending on Wi-Fi
standards. In most cases, a large GI is required when the transmission speed is
high. For example, the time interval between two 350 km/h high-speed trains
running on the same lane is larger than that of two 250 km/h high-speed trains.
• Encoding scheme: It is a modulation technology, that is, the number of bits that
can be carried in a symbol.
• Bit rate: Theoretically, lossless transmission is supported based on the encoding
scheme. During actual transmission, some information codes used for error
correction need to be added. Redundancy is used for achieving high reliability.
The bit rate is the ratio of the actually transmitted data code with the error
correction code excluded to the theoretical value.
• Valid subcarrier: A carrier is a symbol in the frequency domain. One subcarrier
carries one symbol, and the number of subcarriers varies according to the
modulation mode and frequency bandwidth.
Contents

▫ Capacity Design Overview
◼ Parameters Related to AP Performance
Wi-Fi Standards
⚫ Different Wi-Fi standards have different parameters such as frequency bands, encoding schemes,
number of spatial streams, channel bandwidth, and theoretical rate.
Number of
Encoding Channel
Standard Released In Frequency Band Spatial Theoretical Rate
Scheme Bandwidth (MHz)
Streams
- 802.11 1997 2.4 GHz - - 20 2 Mbps
- 802.11b 1999 2.4 GHz - - 22 11 Mbps
- 802.11a 1999 5 GHz - - 20 54 Mbps
- 802.11g 2003 2.4 GHz 64-QAM - 20 54 Mbps
2.4 GHz: 450 Mbps
Wi-Fi 4 802.11n 2009 2.4 GHz or 5 GHz 64-QAM 4 20 and 40
5 GHz: 600 Mbps
802.11ac Wave1 2013 5 GHz 64-QAM 4+4 20 and 40 3.74 Gbps
Wi-Fi 5 20, 40, 80, 160, and
802.11ac Wave2 2015 5 GHz 256-QAM 8 6.9 Gbps
80+80
20, 40, 80, 160, and 2.4 GHz: 1.15 Gbps
Wi-Fi 6 802.11ax 2019 2.4 GHz or 5 GHz 1024-QAM 4+8
80+80 5 GHz: 9.6 Gbps
*In October 2018, the Wi-Fi Alliance has renamed different Wi-Fi standards, and 80.11ax was named as Wi-Fi 6. Standards before Wi-Fi 4 were not
renamed.
Spatial Stream
⚫ A radio system sends multiple radio signals at the same time. Each of these signals is called a spatial stream. Spatial streams are
transmitted using antennas at the transmit end, and each spatial stream reaches the receive end through different paths. One spatial
stream can be created between one transmit antenna and one receive antenna.
⚫ A MIMO system is generally written as MxN MIMO, with M and N indicating the number of antennas at the transmit end and
receive end, respectively. The number of spatial streams in MIMO is generally less than or equal to the number of antennas at the
transmit or receive end. If the number of receive antennas is different from that of transmit antennas, the number of spatial streams
is smaller than or equal to the minimum number of antennas on the receive or transmit end. For example, a 4x4 MIMO system can
transmit four or less spatial streams, whereas a 3x2 MIMO system can transmit two or fewer spatial streams.
⚫ According to 802.11ac and 802.11ax, a radio supports a maximum of eight spatial streams. Therefore, even if an AP has 12 antennas,
the AP supports a maximum of eight spatial streams.
AP Wireless Laptop
network
adapter
Antenna Spatial stream Transmission path
Number of Radios
⚫ A radio is a radio electromagnetic wave that can be transmitted and received by antennas. One radio
module can use multiple antennas to exchange data between an AP and a STA through multiple
spatial streams, improving the transmission rate. The number of radios depends on the AP models.
Common AP models support one, two, or three radios. Users can select AP models as required.
Single-radio AP Dual-radio AP Three-radio AP
2.4 GHz
or 2.4 GHz 5 GHz 5 GHz
5 GHz
5 GHz 2.4 GHz

⚫ Two radios work at 5 GHz, and one works
⚫ The radio works at 2.4 GHz or 5 GHz. ⚫ The radios work at 2.4 GHz and 5 GHz. at 2.4 GHz.
⚫ APs are applicable to the scenario where ⚫ APs are applicable to various WLAN ⚫ APs are applicable to electronic classrooms,
STAs of the same type are used. scenarios. high-density scenarios, and shopping malls
and supermarkets.
• Compared with a single-band AP, a dual-band AP allows more STAs to connect

to a network while ensuring STA performance. For example, in a bandwidth-
demanding scenario, a single RF module can connect to 20 to 25 STAs. However,
if an AP can work on both the 2.4 GHz and 5 GHz frequency bands, it can
connect to 40 to 50 STAs. That is, the number of STAs connected to the AP can
be doubled in the same physical space. Therefore, dual-band APs can be used in
high-density scenarios, such as libraries, conference rooms, academic lecture
halls, and student dormitories.
• Compared with a dual-radio AP, a three-radio AP provides one more radio. The
radio can be used for spectrum monitoring, air interface scanning, wireless
location, as well as service coverage to improve STA access capabilities. The radio
effectively solves problems such as difficult STA access and data congestion in
high-density scenarios.
• Dual-radio and three-radio APs are typically used on live networks.

Symbol and GI
⚫ The 802.11 protocols transmit the data modulated on each channel together. The data transmitted at a
time is called a symbol. The unit of symbols is us, indicating a duration.
⚫ During data transmission, the front end of the next symbol may arrive at the receive end earlier than
the tail end of the previous symbol. As a result, inter-symbol interference occurs. Guard interval (GI)
can be configured to reduce the impact of interference. GI can be classified into common GI and short
GI. Short GI has a shorter interval. A smaller GI indicates higher transmission efficiency. A larger GI
indicates a higher anti-interference capability.
...
Frequency domain
Symbol GI Symbol GI Symbol GI

...
Symbol GI Symbol GI ... Symbol GI
Symbol GI Symbol GI ... Symbol GI
Time domain
• Short GI is recommended when the interference is light. Common GI is

recommended when the interference is strong.
Encoding Scheme
⚫ The encoding scheme is the modulation technology, that is, the number of bits that can be carried in a symbol. During actual
transmission, some information codes used for error correction need to be added. Redundancy is used for achieving high reliability.
The bit rate is the ratio of the actually transmitted data code with the error correction code excluded to the theoretical value. The
following table lists the coding schemes and bit rates corresponding to different standards.
Negotiation Modulation 802.11a/g 802.11n 802.11ac 802.11ax

Mode Scheme Coding Bit Rate Bit Rate Coding Bit Rate Bit Rate Coding Bit Rate Bit Rate Coding Bit Rate Bit Rate
MCS0 BPSK 1 1/2 1 1/2 1 1/2 1 1/2
MCS1 QPSK 2 1/2 2 1/2 2 1/2 2 1/2
MCS2 QPSK 2 3/4 2 3/4 2 3/4 2 3/4
MCS3 16-QAM 4 1/2 4 1/2 4 1/2 4 1/2
MCS4 16-QAM 4 3/4 4 3/4 4 3/4 4 3/4
MCS5 64-QAM 6 2/3 6 2/3 6 2/3 6 2/3
MCS6 64-QAM 6 3/4 6 3/4 6 3/4 6 3/4
MCS7 64-QAM 6 5/6 6 5/6 6 5/6 6 5/6
VMCS8 256-QAM - - 8 3/4 8 3/4
VMCS9 256-QAM - - 8 5/6 8 5/6
VMCS10 1024-QAM - - - 10 3/4
VMCS11 1024-QAM - - - 10 5/6
• A larger Modulation and Coding Scheme (MCS) value indicates a higher

transmission rate.
Channel Bonding
⚫ The number of valid subcarriers varies according to the frequency bandwidth. A larger frequency bandwidth indicates a larger
number of valid subcarriers. For wireless technologies, you can increase the channel bandwidth of a radio to improve the
transmission rate of a STA. Two or more adjacent non-overlapping channels are bonded to a channel. Theoretically, if the bandwidth
of the data transmission channel is doubled, the transmission rate is also doubled.
⚫ By default, an AP works at the 20 MHz channels. Two adjacent 20 MHz channels can be bonded to a 40 MHz channel. According to
different channel bonding methods, the operating channel bandwidth can be categorized as 40 MHz plus, 40 MHz minus, 80 MHz,
80+80 MHz, or 160 MHz.
149 149
153 153
157 Bonded channel
161
165 Channel
• Channel types:
▫ 40 MHz plus and 40 MHz minus: Two adjacent 20 MHz channels that do
not interfere with each other are bonded into a 40 MHz channel. One 20
MHz channel is the primary channel, and the other is the auxiliary channel.
The primary channel and auxiliary channel have different center
frequencies, which determine the minus or plus state of the 40 MHz
channel. If the center frequency of the former is higher, the channel
bandwidth is 40 MHz minus; if that of the latter is higher, the channel
bandwidth is 40 MHz plus. For example, channels 36 and 40 are bonded
into a 40 MHz channel. If channel 40 is deployed as the primary channel, 40
MHz minus is configured; if channel 36 is deployed as the primary channel,
40 MHz plus is configured.
▫ 80 MHz: Two contiguous 40 MHz channels can be bonded into an 80 MHz
channel. Any of the four 20 MHz channels in the 80 MHz channel can be
selected as the primary channel. For example, channel 36, 40, 44, and 48
can be bonded into an 80 MHz channel.
▫ 80+80 MHz: Two non-contiguous 80 MHz channels can be bonded into an
80+80 MHz channel. For example, channels 36, 40, 44, 48, 100, 104, 108,
and 112 can be bonded into an 80+80 MHz channel.
▫ 160 MHz: Two contiguous 80 MHz channels can be bonded into a 160 MHz
channel. Any of the eight 20 MHz channels can be selected as the primary
channel. For example, channels 36, 40, 44, 48, 52, 56, 60, and 64 can be
bonded into a 160 MHz channel.
• Since 802.11ac, eight channels can be bonded into 160 MHz, achieving a
transmission rate of over 1000 Mbps.
Quiz
1. (True or False) An antenna has horizontal beamwidth and vertical beamwidth, forming a
horizontal lobe angle and a vertical lobe angle, respectively. A wider beamwidth indicates
better directionality, larger coverage, and stronger anti-interference capabilities. ( )
A. True
B. False
1. B
Summary
⚫ This course describes the basic knowledge of WLAN planning, including network coverage
design and network capacity design. In the network coverage design, the coverage areas are
classified into indoor areas and outdoor areas that user different types of antennas. The
network capacity design part describes how to estimate the AP capacity based on customer
requirements and Wi-Fi standards.
⚫ After learning this course, you will have a basic understanding of WLAN planning and the
formula for calculating the theoretical WLAN rate.
Recommendations

MISO Multiple-Input Single-Output
MU-MIMO Multi-User MIMO
SIMO Single-Input Multi-ple-Output
SISO Single-Input Single-Output
SU-MIMO Single-User MIMO
UNII Unlicensed National Information Infrastructure
intelligent world.


that
WLAN Planning Tools
Foreword
⚫ With the popularity of wireless networks in governments, enterprises, finance sectors, and
campuses, there are increasingly higher requirements on wireless network experience, which
poses challenges to Wi-Fi builders. Strict pre-sales network planning and delivery
acceptance are important processes for ensuring and evaluating wireless network quality.
⚫ This course will introduce how to use the WLAN Planner and CloudCampus APP to conduct
network planning and delivery acceptance.
• This course mainly introduces Huawei software WLAN Planner (V1.0.0) and
CloudCampus APP (V3.22.9.1).
Objectives
 Master skills of using the WLAN Planner.
 Use the WLAN Planner for indoor 3D simulation.
 Use the network planning functions of the CloudCampus APP.
Contents
1. WLAN Planner
◼ Product Overview
▫ Product GUI Introduction
▫ Network Planning in Five Steps
▫ 3D Simulation
2. CloudCampus APP
WLAN Planner Introduction
⚫ The WLAN Planner is a cloud architecture–based wireless network planning tool that provides onsite environment
planning, AP deployment, network signal simulation, and report generation functions. It helps engineers efficiently
plan wireless networks.
• The WLAN Planner is applicable to the pre-sales and after-sales phases of WLAN
projects. For example, the signal simulation function of the WLAN Planner allows
you to determine whether the AP models and quantity meet the requirements in
the pre-sales phase, and determine AP installation positions and signal coverage
effect during high level design (HLD) in the after-sales phase.
Logging In to ServiceTurbo Cloud
⚫ The WLAN Planner is hosted on the ServiceTurbo Cloud platform and can be used only after you log in to the
platform.
⚫ Login and account application
 Visit ServiceTurbo Cloud at https://serviceturbo-cloud.huawei.com (available only on Google Chrome).
 Click Log In in the upper right corner of the page, and use an account to log in. If you do not have an account, click Register and
register one.
WLAN Planner Usage Permission
⚫ After successful login, click Tool Application Market and search for WLAN Planner.
⚫ By default, Huawei engineers and channel partner (ASP/CSP) engineers have the permission to use the WLAN
Planner.
⚫ If you do not have the permission, click the WLAN Planner card and fill in the application information as prompted
to unlock the tool. After the application is submitted, you can choose My WorkSpace > My Application > Permission
Application to view the approval progress.
Contents
1. WLAN Planner
▫ Product Overview
◼ Product GUI Introduction
▫ 3D Simulation
2. CloudCampus APP
WLAN Planner Home Page
⚫ The WLAN Planner home page consists of two parts: the upper part shows the Running, Merge, Import, and Export
buttons and the tool contact information, while the lower part mainly shows the task list and WLAN Planner usage
guide.
Project Creation – Running
⚫ Click Running. In the dialog box that is displayed, select I have read and agree to the Customer Network Data
Security Management Regulations and click Confirm. The Project Info page is displayed.
⚫ Select Create Project or Existing Project for Project Type, and set project information as required. If you select
Create Project, the country code corresponding to the value of Country/Region regulates available channels and
equivalent isotropically radiated power (EIRP) requirements.
• Note: Set Customer Network Data Involved to No. If you use the default value
Yes, you need to click Create Authorization and apply for customer privacy data
authorization.
▫ Before designing a solution, Huawei and ASP engineers need to submit

customer authorization information. For details about customer network
management authorization information, log in to
https://eplus.huawei.com/eRight#/ and click Operation Guide for customer
authorization in STC under Operation Guide to download and view this
document.
▫ Other users must obtain explicit authorization from the network data
subjects before uploading third-party network data to ServiceTurbo Cloud.
Project Management – Merge
⚫ Click Merge to merge a baseline project and one or more involved projects in the task list. Then, you
can export these projects as a new one.
 Baseline Project: Select an existing project from the drop-down list box to be the baseline project of the projects
to be merged. The task name of this project will be used as the name of the new project after merging.
 Involved Projects: Select one or more existing projects from the drop-down list box to merge with the baseline
project.
• Note: Only projects with the same country code can be merged.
Project Management – Import
⚫ Click Import to import an existing or a shared project file (a package whose name starts with wpt). The name of
the imported project file will be displayed in the task list. You can view and edit the network planning and design in
the project.
⚫ An imported shared project is independent of its source project. You can edit the network planning and design in
the shared project without affecting the source project.
• Note: Only one project file can be imported at a time.

Project Management – Export
⚫ Click Export. In the dialog box that is displayed, select one or more project files to be exported and click
Confirm. You can share an exported project file with other users so that they can import this file to the
WLAN Planner to view or edit the corresponding network planning and design.
• Note: A maximum of 10 records can be exported at a time.

Task List – Edit
⚫ The task list displays information (such as the task name, task creator, and last update time) about the latest five
edited projects. Click a task name to enter the project for network planning and design. Click the edit icon in the
Operation column. In the dialog box that is displayed, view or edit the basic information about the project, for
example, change the task name and add or delete shared users.
Task List – Share
⚫ Click the share icon in the Operation column of a project in the task list. In the dialog box that is displayed, enter
the full employee ID or email address to share the project with other engineers. Then, those who obtain the shared
project file can import this project file to view or edit the corresponding network planning and design.
• Unlike the import function, the sharing function shares the source project. The
edit operation performed by any user that shares the project will be updated to
the project, and only one user is allowed to edit the project at a time. Only the
creator of a project has the permission to delete and share the project. Other
users that share the project can only edit the project.
WLAN Planner Main Page
⚫ After you create a project, the WLAN Planner main page is displayed for network planning and design. You can also
click the task name on the home page to open this page.
⚫ The left column lists three phases by function: survey, planning, and test. This chapter mainly describes the PLAN
page.
SETTING – Template Settings
⚫ Choose SETTING. On the Template settings page that is displayed, you can view the default template, custom
templates (if you have created any), and the New button for creating a custom template.
 Default template: The settings modified in the default template take effect only in the current project. The settings will be reset
for a new project.
 Custom template: You can set parameters for a custom template and apply the settings to all the projects under your account.
• After you click any template, different setting pages are available. The Basic
Settings page contains the parameters that are frequently adjusted during
network planning and design.
▫ Multiple Floor Emulation: If this parameter is set to Yes, the tool analyzes
interference between APs on adjacent floors.
▫ Propagation Model: This parameter allows you to switch between the path
loss and ray tracing algorithms for heat map calculation.
▫ EIRP Compliance: If this parameter is set to Yes, the tool automatically

adjusts the sum of the AP power, MIMO gain, and antenna gain to be less
than or equal to the EIRP.
▫ Antenna Separation: If this parameter is set to Yes, external antennas and

APs are displayed separately.
PLAN – Creating a Floor
⚫ On the PLAN page, the selected node is displayed in the upper left corner. When you hover the mouse pointer
over the node, the structure view of the entire project is displayed. A project can contain one or more buildings
and regions.
⚫ There are four icons under the project name. Their functions are as follows:
: creates an outdoor area. You can import an image, a PDF drawing, or a map file, but not a
CAD drawing.
: creates a building. You can import an image and one or more PDF or CAD drawings. If you
import N drawings, N floors will be generated.
: creates a floor. You can import an image, a PDF drawing, or a CAD drawing. If no building is
selected, the icon is dimmed, indicating that floors cannot be created.
: deletes the selected node (building/floor/region). If the node is a project, the icon is dimmed,
indicating that the node cannot be deleted.
• Note: You can also right-click a node and choose an option from the shortcut
menu to complete the corresponding operation. In addition, before importing a
drawing, ensure that the drawing name contains no special character. Otherwise,
it will fail to be imported.
PLAN – Toolbar
⚫ When you select a floor or an outdoor area on the main planning page, a toolbar is displayed in the upper left
corner of the page. The toolbar provides the following functions (corresponding to the icons from left to right):
Clockwise rotation
network planning
Scenario-specific
Drag drawing
Anticlockwise
Modify scale
3D building
AutoCheck
Ranging
3D floor
rotation
Replace
Restore
Sort AP
Select
Undo
Hide
Displays network
Measures the distance
planning and design Checks the network
between any two Modifies attributes for
rules and AP planning and design
points on a drawing Corrects the scale of all obstacles or APs of
deployment of the current floor
to control the distance an imported drawing. the same type on a
suggestions dedicated for common basic
between AP selected floor.
to the current problems.
deployment locations.
scenario.
PLAN – Function Panel
⚫ The upper part of the main planning page displays the five steps of network planning and design. The function panel on the right
displays the modules that assist the current network planning step, and therefore it varies according to the step you select. To hide
the panel, click Hide Right Panel.
Network planning
in five steps
Function panel
Contents
1. WLAN Planner

◼ Network Planning in Five Steps
▫ 3D Simulation
2. CloudCampus APP
Network Planning Procedure
⚫ You need to import a drawing first and then perform five steps to quickly and effectively complete the network
planning and design in a WLAN project. The WLAN Planner supports automatic obstacle identification, automatic
AP deployment, professional signal simulation, and 3D simulation, which are easy to use and improve network
planning efficiency.
Import a drawing that contains the scale, and perform the
Import drawings
following steps on the drawing:
Set up the
Set regions Deploy devices Simulate signals Export reports
Network Planning in
environment
Five Steps
Manually draw Deploy APs

Draw regions Export reports
obstacles or manually or View simulation
with different in Word format
enable automatically, diagrams by
field strength and the
automatic calculate field strength or
and capacity material list in
obstacle channels, and SINR.
requirements. Excel format.
identification. calibrate power.
• Note: The preceding five-step network planning procedure is applicable to indoor

network planning using the WLAN Planner. For outdoor network planning, the
WLAN Planner does not support obstacle drawing, region setting, or automatic
AP deployment.
Set up the Deploy Simulate Export
Import drawings Set regions
environment devices signals reports
Import Drawings
⚫ After creating a building or region for the project on the network planning page, determine the scenario and sub
scenario, and then import a drawing, which can be a PDF, PNG, JPG, or DWG file. If a CAD drawing (DWG file) is
imported, the WLAN Planner can quickly identify obstacles and mark them on the drawing.
Import Drawings – Example
Set Up the Environment

⚫ Setting up the environment is to draw the layout structure of various types of walls on the imported floor plan drawing to restore
the site environment, ensuring the signal simulation effect.
⚫ To set up the environment, perform the following steps:

 Set the scale. If you import a CAD drawing, the tool automatically generates a scale. If you import a drawing of another type, you need to manually set
the scale.
 Set obstacles. If you import a CAD drawing, you can identify obstacles with one click or manually draw obstacles. If you import a drawing of another
type, you can enable automatic obstacle identification and then manually adjust the obstacles.
 Deploy interference sources on the drawing based on the site survey result.
• Note: Generally, a floor plan drawing has a scale. If no scale is available, you can
select some common objects in daily life as reference objects, for example, 0.8 m
to 1 m wide for a single door.
• If a desired wall type is unavailable when you set obstacles, click User-Defined
under Type, and add the wall type on the Obstacle Preset page that is displayed.
• In indoor scenarios, you are advised to use insulation boundaries to mark the
building periphery to prevent signal overflow from affecting the overall
simulation effect.
Set Up the Environment – Toolbar
⚫ Automatic Identification: The tool automatically identifies walls and draws obstacles
based on the imported drawing. (This function does not apply to CAD drawings.)
⚫ Manually: You can manually draw obstacles after selecting an obstacle shape and type.
 Shape: The shape of an obstacle can be a rectangle, line, or slope.
 Type: You can add preset obstacles, such as walls, windows, and doors, to the drawing. If the
preset obstacles do not meet the scenario requirements, click User-Defined under Type and
customize obstacles.
⚫ Auto-adsorption: When this function is enabled, end points of adjacent obstacles will be
automatically connected.
⚫ Interfere Deployment: Deploy interference sources based on the site survey result. For
example, a microwave oven occupies the entire 2.4 GHz frequency band.
CAD Drawing – Automatic Identification

⚫ If a CAD drawing (DWG file) is imported, the WLAN Planner can quickly identify obstacles and mark them
on the drawing.
identification
background
resolution
One-click
Adjust
Select
Undo
Black
Redo
Drag
Tip
• Select: After a CAD drawing is imported, you can select one or more target
regions. If you select multiple target regions, the tool automatically generates
multiple floors accordingly.
• Note: Obstacles on a CAD drawing can be automatically drawn only on the Floor
Image Extract page. After the drawing is submitted, you can only manually draw
obstacles. The tool automatically obtains the scale of the CAD drawing. The scale
can be modified after the drawing is submitted.
Set Up the Environment – Procedure

⚫ The procedure for setting up the environment varies according to the drawing type (CAD or non-CAD).
CAD drawing Non-CAD drawing
Manually draw
Set obstacle types. Set the scale.
obstacles.
Identify obstacles by (Optional) Change (Optional) Automatically

one click. the scale. identify obstacles.
Manually draw
Select target regions. Submit the drawing.
obstacles.
• Note: Tips for manual drawing.
▫ Scroll the mouse wheel to zoom in or out on the drawing.
▫ Press and hold the space bar and move the mouse to move the drawing.
▫ When drawing an obstacle, hold down Shift to draw a straight line.
▫ Press Ctrl+Z to undo an operation.

Set Up the Environment – Example
Set Regions
⚫ Region setting is to mark each region on the floor plan drawing based on the actual requirements.
⚫ Regions must be set before automatic AP deployment. You can use the automatic identification function or
manually draw a region, set basic properties such as the name, type, coverage type, and concurrency rate of the
target region, and then determine the terminal status.
 When manually drawing a region, you can use shapes and types in the toolbar.
✓ Automatic Identification: The coverage area is automatically drawn based on the edge of
an obstacle.
✓ Shape: Select a shape (polygon or rectangle), click to draw, and right-click to end the
drawing.
✓ Type: If you do not select AP Area, this parameter uses the default value Signal Area.
• Signal Area: area with signal coverage
• AP Area: area with APs deployed
Set Regions – Basic Properties

⚫ You can select one or more target regions as required, and set the
following basic properties for them:
 Region: region name that marks and distinguishes a coverage area.
 Region Type Select: The options include Signal Area and AP Area.
 Cover Type: The options include VIP Coverage(>=-60 dBm), Common
Coverage(>=-65 dBm), and Location Coverage(>=-70 dBm), which are
represented by green, red, and gray, respectively.
⚫ Terminal Situation: capacity requirement of a coverage area. The tool

calculates the value based on the number of selected terminals, the
terminal type, and the service type.
• Note: By default, the field strength threshold is set based on 5 GHz signals, and
this method is recommended. You can modify the setting on the SETTING > Basic
Settings page.
Set Regions – Example
Location
coverage area
VIP coverage
area
Common
coverage area
Deploy Devices
⚫ Device deployment includes AP deployment, channel calculation, and power calibration.
 AP deployment: The tool supports automatic and manual AP deployment. It is recommended that you manually deploy APs in
most scenarios, and use automatic deployment only in the scenarios with simple network structures.
 Channel calculation and power calibration: Use these functions to increase the signal-to-interference-plus-noise ratio (SINR) as
much as possible and minimize the signal interference between APs. After AP deployment is complete, it is recommended that
you calculate channels and then calibrate power.
⚫ The number of APs deployed on the current node is displayed in the lower left corner of the WLAN Planner main
page. After selecting a floor, you can click View Resources in the lower right corner to view detailed settings of
deployed APs, such as AP types, channels, power, and installation modes.
• Click Set Display in the lower right corner of the WLAN Planner main page, and
adjust the AP icons or obstacles on the drawing. For example:
▫ Display or hide obstacles, AP channels, AP types, or antenna information.
▫ Adjust the size of AP icons and thickness of obstacle lines.
▫ Change the color of the label under an AP icon.

Deploy Devices – Toolbar

⚫ Automatic deployment:
 Automatic deployment: Based on the region settings, the tool automatically calculates the
number of needed APs and deploys APs. (This function supports only APs with omnidirectional
antennas in indoor scenarios.)
 W-shaped/Equal spacing deployment: Draw a region or a line and configure AP parameters.
Then, the tool automatically calculates the number of needed APs and deploys APs.
⚫ Equipment deployment (manual): Select a proper AP model and deploy APs on the
drawing according to the network construction standards in various scenarios. After
all APs are deployed, calculate channels and calibrate power. (If the desired AP model
is not displayed on the toolbar, click Choose Other AP and add the model.)
⚫ Channel calculation/Power calibration: These functions can take effect on the current
floor or multiple floors. Select floors as required.
⚫ Equipment recording: Enter device information (such as the SN, MAC address, and
name) in a template, and import the template.
• Note: After APs are deployed, you can double-click an AP icon, or right-click an
AP icon and choose Property from the shortcut menu to open the properties
panel where you can edit properties, such as the model, icon information,
antenna, power, and channel of the AP.
Deploy Devices – Procedure

⚫ The procedure for automatic deployment is the same as that for manual deployment. Both of them have four steps:
select areas, select APs, configure channels, and configure power.
2 3 4
Deploy Devices – Example
W-shaped
deployment
Manual
deployment
Simulate Signals
⚫ In this step, the WLAN Planner simulates and renders signals in the planned indoor or outdoor regions on the drawing based on the
signal propagation model, and displays signal strengths in different colors, allowing you to intuitively view the current coverage
effect.
⚫ The WLAN Planner supports the path loss and ray tracing algorithms (which can be switched through parameter setting). Compared
with the path loss algorithm, the ray tracing algorithm contains reflection and refraction, improving the simulation precision but
taking a longer time.
Simulate Signals – Toolbar

⚫ Open/Refresh simulation: These functions are implemented on all APs. To view the
simulation effect of APs in a desired region, select these APs, right-click them, and
choose Simulation from the shortcut menu.
⚫ Coverage satisfaction: View the signal strength proportion statistics under the current
simulation.
⚫ Simulation terminal: You can deploy mobile phones, laptops, and tablets to simulate
signal access, and double-click a deployed STA to view the simulation result. The result
contains the signal strength of the signal source near the STA, SINR after the optimal AP
is associated with, and the rates at the physical and application layers.
⚫ Simulation map settings: You can set the frequency band to 2.4 GHz, 5 GHz, or 6 GHz,
and select an option from the Type drop-down list box.
⚫ Simulation diagram: Set the boundary value of the simulation diagram. You can click the
drop-down arrow to switch the color or customize it.
• If the simulation effect is unsatisfactory, you need to repeat step 3 (deploy

devices) to adjust or add/delete APs, and then simulate signals to verify the effect
until the wireless coverage meets the requirement.
Simulate Signals – Example (1/2)

Global simulation
View signal strength proportion statistics.
Partial simulation
Simulate Signals – Example (2/2)
Connect the
simulation terminal.
• The simulation terminal is a laptop and the height is set to 1.5 m.

Export Reports
⚫ After the preceding network planning steps are complete, you can export a network planning report, which contains the number of
materials used for the project, AP position diagram, signal simulation diagram, and product introduction.
⚫ Before exporting the report, you can set the report content, such as the report language, customized logo, company name, and
simulation diagram parameters. If you have imported a CAD drawing for the network planning and design, you can also export the
CAD drawing with AP positions together with the network planning report.
✓ Before exporting a report, you can check the network

planning result to avoid errors. The tool provides 11
check items in five categories, including environment
settings, deployment, AP settings, antenna settings,
and delivery effect.
✓ The check results include:
• : Passed
• : Failed
• : One-click repair
• : Click this button to ignore an error result.
Export Reports – Example

⚫ Use the following process to export a report on the WLAN Planner:
3
1
Export the network
Select the planning report and
building or floor material list in one-
for which the click mode. (Before
network planning performing the export
report is to be operation, ensure that
exported. automatic review of
network planning has
2 been completed.)
Set report
parameters.
Contents
1. WLAN Planner

◼ 3D Simulation
2. CloudCampus APP
3D Simulation
⚫ In indoor scenarios, the WLAN Planner provides the 3D simulation function. This function converts an original two-dimensional (2D)
floor plan into a three-dimensional (3D) structural diagram based on the obstacles drawn by users and AP positions, clearly
displaying the layout of each floor and the AP positions.
⚫ The 3D simulation function is displayed on the toolbar in the upper left corner of the WLAN Planner main page. This function
involves 3D Floor and 3D Building. A 3D floor is a 3D display of a single floor, while a 3D building is a 3D display of multiple floors.
These two 3D functions have different operation modes.
3D simulation
3D floor
Walking ✓ Orbit mode: You can use the mouse to rotate, flip, zoom in, and
mode zoom out the 3D model to view the floor layout and AP
3D positions.
building ✓ Walking mode: This mode simulates the roaming effect through
Free walking
mode
Orbit
automatic walking or free walking. During 3D simulation in

Automatic
walking
walking mode, the WLAN Planner displays real-time Wi-Fi

information about the STA.
• Automatic walking: Draw a traveling route for the STA and
click Start. The tool will move the STA along the route to
simulate the 3D effect.
• Free walking: Also called manual walking, free walking
allows you to control the movement using the keyboard.
• During 3D simulation in walking mode, the WLAN Planner displays real-time Wi-
Fi information (such as the associated AP, RSSI, and current rate) about the STA.
• After 3D simulation in either walking mode is complete, you can click the
roaming record button in the upper right corner to view the roaming status of
the STA during movement, or export the roaming report on the report export
page.
3D Floor – Orbit Mode
3D Floor – Automatic Walking Mode (1/3)
Step 1
Switch to the
walking mode.
Step 2
Click OK to
enter the
automatic
walking mode.
Step 3
Draw a route.
Step 4
Simulate the
3D effect in
walking mode.
• In the upper right corner of the walking page, a thumbnail is displayed to locate
the STA and corresponding APs.
Check
point
Step 5
View the
roaming result.
3D Floor – Free Walking Mode
Step 1
Click Cancel in the
dialog box that is
displayed to enter the
free walking mode.
Step 2
Use the mouse and the
W/S/A/D keys to control
the up, down, left, and
right directions in
manual walking mode.
3D Building
⚫ The 3D Building function supports only the orbit mode. You can select the image display information on the left as
required to simulate the desired 3D effect.
Contents
1. WLAN Planner
2. CloudCampus APP
CloudCampus APP Overview
⚫ The CloudCampus APP is a mobile app that integrates field strength and interference testing, and can
be used for test acceptance after network deployment. It reduces the workload for WLAN O&M
personnel and simplifies O&M.
⚫ How to obtain:
 Scan the QR code below.
 Search for CloudCampus APP on AppGallery
CloudCampus APP – Toolkit
⚫ The CloudCampus APP provides a variety of utility tools. The Tool screen
contains project delivery, coverage test, business test, scene test, and
manufacturer customization.
⚫ This course describes the tools related to network planning, that is, AP
Calculator and Site Survey in the Project Delivery area.
✓ AP Calculator: quickly generates a material list based on project scenarios and capacity
requirements.
✓ Site Survey: allows you to perform site surveys, record environment information, test
attenuation, and synchronize site survey information to WLAN Planner.
✓ WLAN Planner: provides engineering information to the APP, which allows you to view
AP positions and heat map information at any time.
✓ WLAN Tester: performs quality acceptance on the network environment. The APP
allows you to perform dotting tests. After data is uploaded, you can view and export
the acceptance report on the WLAN Planner.
• The WLAN Planner and WLAN Tester in the Project Delivery area need to be used
together with actual WLAN Planner projects, which are not detailed in this
course. For more information about them, see the product documentation.
CloudCampus APP – Login Methods
⚫ Project delivery tools except the AP Calculator are available only after you log in to WLAN Planner
using an account and enter a project. The login method is as follows.
• Note: The user name and password of the Uniportal account are those for
logging in to the WLAN Planner. If you do not have an account, apply for one.
AP Calculator
⚫ After you set basic parameters in the tool as required, the AP Calculator quickly calculates the number of APs required in the
selected scenario.
Step 1 Step 2
Set parameters as View the calculation
required. result.
Currently, the tool supports

the following five scenarios:
• Office,Supermarket
• Hotel,Dormitory,Hospital
• Electronic learning classroom
• Wireless positioning
• High-density coverage
Site Survey
⚫ After successful login, obtain the WLAN Planner project list in the current environment, and select a project to perform site survey.
⚫ Add survey points on the project drawing to test the signal strength at the current position. Touch an obstacle on the drawing and
choose Attenuation test. Touch Display detail to view the current attenuation value of the obstacle.
Step 3
Touch an obstacle
and choose
Attenuation test.
Step 1 Step 2
Add survey points.
Select a project
(Both images and
for site survey.
texts are supported.)
Quiz
1. (Multiple-answer question) Which of the following types of drawings can be imported to

the WLAN Planner for creating an indoor region? ( )
A. PDF
B. DWG
C. PNG
D. JPG
2. (True or false) The CloudCampus APP allows users to export site survey reports. ( )
A. True
B. False
1. ABCD
2. A
Summary
⚫ This course describes two network planning tools: WLAN Planner (used for network
planning and design) and CloudCampus APP (used for site survey and project acceptance).
You can use the WLAN Planner to plan indoor or outdoor networks, and use its 3D
simulation function to check whether the current network planning and design meet
coverage requirements. During the project acceptance phase, you can use the WLAN Tester
function of the CloudCampus APP to perform quality acceptance on the network
environment.
⚫ After learning this course, you can understand the operation procedures of the WLAN
Planner and CloudCampus APP and use them to quickly and easily complete network
planning and design.
Recommendations
intelligent world.


WLAN Planning Process
Foreword
⚫ On the journey to digital transformation, the efficiency and reliability of a WLAN are critical
to improving network performance and user experience. As the WLAN scale expands and
the number of access terminals on the network increases exponentially, the WLAN
environment becomes more complex and it is difficult to guarantee the network quality. As
such, planning and designing a WLAN is now an indispensable part in WLAN construction.
⚫ Proper network planning and design can greatly reduce the possible WLAN signal coverage
holes, signal interference, and network congestion, delivering better network experience.
⚫ This course describes the WLAN planning process.
Objectives
 Understand the WLAN planning process.
 Understand requirements collection and site survey in WLAN planning.
 Understand device selection, coverage analysis, and capacity design in WLAN planning.
 Understand the channel planning, power supply cabling design, and AP installation mode design in
WLAN planning.
Contents
2. WLAN Planning Process
3. WLAN Planning Case
WLAN Planning Overview
⚫ WLAN planning consists of four phases: preparation, planning and design, deployment design, and delivery.
 Preparation: focuses on onsite information collection, including requirements collection and site survey.
 Planning and design: focuses on AP deployment, including device selection, coverage design, and capacity design.
 Deployment design: focuses on optimization and installation, including power supply and cabling design and installation mode
design.
 Delivery: involves installation, construction, acceptance, and delivery according to design results.
Preparation Planning and design Deployment design Delivery
Requirements Signal coverage Installation and

Channel planning
collection analysis construction
Power supply and Acceptance and

Site survey Capacity design
cabling design delivery
Installation mode
Device selection
design
• Installation and construction: Install devices at the planned positions based on

WLAN planning and design results.
• Acceptance and delivery: Use the CloudCampus APP that has built-in acceptance
function on a mobile phone to perform project acceptance.
• (Note: This course does not detail the installation and construction or acceptance
and delivery.)
Contents

◼ Preparation
▫ Planning and Design
▫ Deployment Design
Preparation
⚫ Preparation for WLAN planning consists of requirements collection and site survey. Requirements
collection is the first step for WLAN planning. Communicate with the customer to collect complete and
comprehensive project and requirement information. Then, use auxiliary tools to perform site survey
and collect more detailed information on site.
Requirements collection Site survey
Requirements Collection
⚫ Requirements collection is the first as well as a critical step in WLAN planning. Engineers design the planning
solution based on user requirements. If complete and valid information is not obtained in the requirements
collection phase, the subsequent WLAN planning may fail or even needs to be redesigned.
⚫ The information to be obtained in the requirement collection phase is classified into the following types:
Basic requirements Service requirements Installation requirements
• Coverage area
• Laws and regulations
• Field strength
• Building drawings with • Power supply mode
• Number of access STAs
scale information • Switch location
• STA type
• Coverage mode
• Bandwidth requirements
Requirements Collection — Basic Requirements
• Country code
Laws and Check the restrictions of local laws and • Equivalent isotropic
regulations regulations on network deployment. radiated power (EIRP)
• Available channels
• Building drawings with

Building Obtain complete floor plans that contain scale information
drawing scale information from the customer. • Drawing format
(CAD/PDF/PNG/JPG)
• Indoor coverage
Determine whether the customer has
Coverage • Outdoor coverage
specific requirements on coverage
mode • Agile distributed
scenarios.
coverage
Requirements Collection — Service Requirements
Coverage Determine the key coverage areas (such as office areas and conference rooms) and
area common coverage areas (such as staircases and restrooms) required by the customer.
Determine whether the customer has requirements on the signal field strength in the
Field strength coverage area. Generally, the signal field strength in key coverage areas (VIP areas) is
greater than –60 dBm, and that in common coverage areas is greater than –65 dBm.
Number of Calculate the total number of access STAs in a coverage area, and estimate the
access users number of concurrent access users in a coverage area.
STA type Determine the types of STAs and the proportion of MIMO types supported by these
STAs to estimate AP performance.
Bandwidth Determine the main types of network services and per-user bandwidth requirement in
target areas.
• Among the STA types, common STAs include mobile phones, tablets, and
notebook computers, and special STAs include scanners and cash registers.
Determine the proportion of MIMO types supported by STAs based on the
customer's technical capability. Collect the MIMO types from the customer. If the
customer cannot provide the MIMO types, assume 2x2 MIMO for calculation.
Requirements Collection — Installation Requirements
Determine the power supply mode

• PoE power supply
Power supply required by the customer and the
• Power supply by a power
mode available power supply areas and
adapter
facilities on site.
Determine the locations of upstream • PoE power supply: < 80 m

Switch
switches. Check whether the PoE power • PoE++ power supply: <
location
supply distance meets the requirements. 200 m
Site Survey — Tools
⚫ A site survey is conducted to obtain site environment information, such as interference sources, signal attenuation
caused by obstacles, floor height, new obstacles, and extra-low voltage (ELV) room locations. Determine AP models,
installation positions and modes, and power supply and cabling design based on the construction drawings.
⚫ The site survey is typically completed using auxiliary tools, helping ensure the completeness and accuracy of site
survey information. Site survey tools are categorized as software tools, hardware tools, and other tools (building
drawings).
Software
tools
WLAN Planner CloudCampus APP
Hardware
tools
Indoor rangefinder Camera Test AP
Other tools
Building drawing
• Software tools:
▫ The WLAN Planner developed by Huawei is a professional WLAN planning

tool used to set up the WLAN planning environment, deploy devices,
simulate radio signals, and export WLAN planning reports, helping users
easily complete WLAN planning and design.
▫ The CloudCampus APP provides a built-in site survey module that supports
multiple functions such as AP locating, terminal query, and interference
check.
• Hardware tools:
▫ Indoor rangefinder: is used to measure the AP installation height, distance

between APs and obstacles, and the length, width, and height of a venue
when an indoor WLAN is deployed.
▫ Camera: is used to record information about the site environment, such as

the AP installation environment and obstacle information in WDS
networking scenarios.
▫ Test AP (including the matching power supply and bracket): works with the
CloudCampus APP to test obstacle attenuation in indoor scenarios. It is
recommended that the test AP be carried during site survey.
Site Survey — Information Collection Process
⚫ Information collected during the site survey is critical to the network planning and design phase as well as the final
network display effect. The site survey collection items vary according to the WLAN planning scenario, and need to
be adjusted as required. The process of collecting site survey information is as follows:
Determining Determining Determining

Determining AP Determining switch
drawing interference special
parameters positions
information sources requirements
Check the
location of the
Determine the AP
ELV room, verify
Verify that models,
Check the switch
drawing installation Confirm with the
interference deployment in
information is mode, and customer about
sources on site the ELV room,
consistent with installation other
and record them and check
the onsite positions based requirements.
using tools. whether power
situation. on site
supply and
requirements.
cabling meet the
requirements.
• Before starting a site survey, use the WLAN Planner to design a draft WLAN
planning solution, which can provide guidance during the site survey. The design
idea of this WLAN planning draft should be the same as that of the WLAN
planning, except that the data collected during the site survey is not available as
a reference.
Site Survey Information Collection (1/5)
Determining drawing
information
Site Survey Item Record (Example) Description
Determining If there are atriums, halls, or lecture

interference sources Floor height Common indoor floor height: 3 m halls, use a rangefinder to measure the
floor height and record the value.
240 mm brick wall (attenuation of 15 dB Obtain the thickness and signal

Determining AP Building materials
@ 2.4 GHz and 25 dB @ 5 GHz) attenuation values of the building
parameters and signal
80 mm colored thick glass (attenuation materials on site. If possible, test the
attenuation
of 8 dB @ 2.4 GHz and 10 dB @ 5 GHz) signal attenuation values on site.
Determining switch New obstacles whose positions and signal Check whether the site is consistent with
positions New obstacles attenuation values have been marked on that on the drawing. If not, mark the
the drawing inconsistent areas and take photos.
Determining special
requirements
* Note: The enterprise office scenario is used as an example.
Determining drawing
information
Site Survey
Record (Example) Description
Determining
Item
interference sources
Check whether there are interference
sources, for example, mobile
hotspots, Wi-Fi devices of other
Determining AP Wi-Fi interference is detected. vendors, and non-Wi-Fi devices (such
parameters Interference
The interference sources have as Bluetooth devices and microwave
source
been marked on the drawing. ovens).
The CloudCampus APP can be used
Determining switch to record interference source
positions information.
Determining special
requirements
Determining drawing
information

Determining
Select indoor APs with
Indoor APs with omnidirectional antennas, agile
AP selection
omnidirectional antennas distributed APs, outdoor APs, or
high-density APs based on scenarios.
Determining AP
parameters Check whether APs can be mounted
AP installation
Ceiling or wall mounting on the ceiling. If not, mount APs on
mode and position
the walls or junction boxes.
Determining switch
positions
Determining special
requirements
Determining drawing
information
Mark the locations of ELV rooms

Determining ELV room locations marked
ELV room location where switches are to be deployed
interference sources on the drawing.
on the drawing.
Mark PoE power supply cables to be

Determining AP Network cables to be
Power supply routed on the drawing. It is
parameters routed have been marked
cabling recommended that the length of a
on the drawing.
PoE cable be no more than 80 m.
Check whether APs can be
Determining switch
deployed, distance to Check whether there is a fireproof
positions Implementation
switches, distance to power door or whether it is difficult to drill
feasibility
supply, and whether the holes on the concrete bearing wall.
cabling is feasible.
Determining special
requirements
Determining drawing
information

Determining
Special In-roaming packet loss rate: Record special requirements of the
requirements < 1%; latency: < 20 ms customer.
Determining AP
parameters
Collect and record other information
Other Other information
if any.
Determining switch
positions
Determining special
requirements
Site Survey — Obstacle Attenuation Testing
⚫ Obstacles cause strong attenuation of radio signals. If the attenuation data is inaccurate, network planning, design,
and deployment will be greatly affected. Therefore, you can obtain accurate attenuation data by using the obstacle
attenuation test method during site survey.
⚫ Generally, the attenuation of obstacles is tested on typical indoor obstacles or obstacles with uncertain materials,
such as ceilings or decorative walls.
Test procedure
Test point 1 Test point 2 1. Test AP deployment: Ensure that the AP and the obstacle to be
tested are not blocked and the distance between them is 4 m to 5
m. Do not place the AP close to the obstacle to be tested, because
the field strength near the signal source fluctuates greatly, which
affects the test accuracy.
About 4–5 m 2. Signal field strength test: Test the signal field strength at test
Test AP
Obstacle to points 1 and 2, as shown in the figure.
(Fat AP)
be tested
3. Attenuation calculation method:
Signal attenuation of the obstacle to be tested = Field strength
tested at test point 1 – Field strength tested at test point 2
• When using a signal scanning tool (CloudCampus APP installed on a mobile

phone) to connect to a Fat AP WLAN to test the signal field strength, you are
advised to measure several groups of data to reduce the error. Note that the
attenuation values of signals on each frequency band need to be tested
separately. For example, if the 2.4 GHz field strength values on both sides of an
obstacle are –60 dBm and –65 dBm, respectively, the signal attenuation caused
by the obstacle is 5 dB.
Contents

▫ Preparation
◼ Planning and Design
▫ Deployment Design
Planning and Design
⚫ In the planning and design phase, the device model and device performance are determined based on
the data collected in the preparation phase to ensure the WLAN coverage and to meet the Internet
access service requirements of all terminals.
⚫ The planning and design phase includes signal coverage analysis, capacity design, and device selection.
Signal coverage analysis Capacity design Device selection
• Coverage area
• Field strength • MIMO
• Per-user bandwidth
• Coverage area of a single • Antenna selection or gain
• Number of access STAs
AP • Combined power
• Concurrency rate
• Signal attenuation caused • Power supply mode
• Per-AP performance
by obstacles • Wi-Fi standard
• AP antenna selection
Signal Coverage Analysis Capacity Design Device Selection
Signal Coverage Design Rules

⚫ During signal coverage design, you need to design and plan coverage for different areas to ensure that the signal
strength in each area meets user requirements and to minimize co-channel interference between neighboring APs.
⚫ The signal coverage effect can be simply understood as the number of Wi-Fi signal bars on a mobile phone. The
field strength of no less than –65 dBm is an empirical value obtained in engineering practice. Different projects may
have special requirements.
Objective Good coverage (good signal)
Factors to be Coverage of a single Signal attenuation AP installation AP antenna

considered AP caused by obstacles positions selection
Acceptance
Field strength in all areas ≥ –65 dBm
criteria
Coverage Area
⚫ Before network planning, communicate with the customer to determine the WLAN coverage areas
based on the onsite environment and drawing. For example, offices are key coverage areas, and
corridors are common coverage areas. After confirmation, mark the information on the drawing for
future planning.
Office 1 Office 2 Lounge Key coverage area
Common coverage
Corridor Lecture hall area
Restroom Restroom Meeting room
Coverage Area Field Strength Typical Scenarios in Common Projects

Key coverage area (VIP) –40 dBm to –60 dBm Dorm room, classroom, hotel room, office, meeting room, etc.
Common coverage area ≥ –65 dBm Lobby, exhibition hall, library, corridor, etc.
Areas where coverage or installation is limited or not allowed, for
Special coverage area N/A
the sake of service security or property management.
Signal Attenuation Caused by Obstacles

Signal attenuation caused by common obstacles
Obstacle Thickness (mm) 2.4 GHz Signal Attenuation (dB) 5 GHz Signal Attenuation (dB)
Synthetic material 20 2 3
Asbestos 8 3 4
Wooden door 40 3 4
Glass window 50 4 7
Thick colored glass 80 8 10
Brick wall 120 10 20
Brick wall 240 15 25
Armored glass 120 25 35
Concrete 240 25 30
Metal 80 30 35
Relationship between the signal attenuation and transmission distance
Distance 1m 2m 5m 10 m 20 m 40 m 80 m 100 m
2.4 GHz attenuation 46 dB 53.5 dB 63.5 dB 71 dB 78.5 dB 86 dB 93.6 dB 96 dB
5.8 GHz attenuation 53 dB 62 dB 74 dB 83 dB 92 dB 101 dB 110.1 dB 113 dB
Single AP Coverage
⚫ A single AP provides limited wireless coverage. Therefore, multiple APs need to be deployed to offer full network
coverage in a WLAN project. To determine the number of APs, you need to calculate the coverage area of each AP.
⚫ The Received Signal Strength Indicator (RSSI) is calculated as follows (regardless of factors such as the interference
and line loss):
Final signal field strength = AP transmit power + MIMO gain + Antenna gain – Path loss – Obstacle
signal attenuation
Relationship between the path loss and signal transmission distance
(Indoor coverage scenario) 2.4 GHz: L = 46 + 25lg(d); 5 GHz: L = 53 + 30lg(d)
(Outdoor coverage scenario) 2.4 GHz/5 GHz: L = 42.6 + 26lg(d) + 20lg(f)
(Backhaul scenario) 5 GHz: L = 32.4 + 26lg(d) + 20lg(f)
* L indicates the path loss (dB), f indicates the working frequency (MHz), and
d indicates the signal transmission distance (m).
Signal Attenuation Analysis (Example)

Requirements analysis Site survey Coverage analysis
• APs cannot be installed in • Calculate the signal field

lounges. strength of the mobile phone
• The signal attenuation of the
• APs in the lecture hall are used based on the final signal field
wooden partition wall is 5 dB.
to provide signal coverage (with strength formula, as shown in
–75 dBm field strength). the following figure.
Signal field strength at the position of the mobile phone shown in the figure = 20 (recommended AP transmit power) + 3 (antenna
gain) – 60 (transmission attenuation) – 5 (signal attenuation caused by obstacles) = –42 dBm.
This meets network planning requirements. If the field strength cannot reach this value, deploy more APs as needed.
Office 1 Office 2 Lounge
Corridor Lecture hall
Restroom Restroom Meeting room Wooden

partition wall
• Note: During the calculation of built-in antennas, the transmit power and
antenna gain are often calculated together to simplify memory.
Key Points for Indoor AP Coverage Design

⚫ Pay attention to the following key points when designing indoor AP coverage:
 Reduce the number of obstacles that signals pass through. It is not recommended that signals penetrate a 240 mm thick brick
wall, concrete wall, or metal wall.
 Deploy APs separately in key areas and areas with special requirements to ensure user experience.
 Deploy APs separately at intersections or corners to ensure signal coverage continuity (≥ –65 dBm) and that neighboring APs
can establish neighbor relationship tables for good roaming experience.
 Install APs at least 3 m away from bearing pillars.
 Deploy APs in equal-triangle (W-shaped) or equal-spacing mode based on site requirements.
2 2
1 1
Improper location: Signals penetrate several walls. Proper location: Signals penetrate only one wall.
• Minimize the number of obstacles that signals pass through. Generally, it is

recommended that signals pass through a single-layer wall (120 mm brick wall).
In some special scenarios (such as gypsum walls and glass walls), signals can
pass through two layers of walls.
• It is not recommended that signals penetrate a 240 mm thick brick wall, concrete
wall, or metal wall. If the AP penetration coverage solution is used without
meeting the specified constraints, weak signals and discontinuous roaming may
occur after signals penetrate the wall. In this case, to ensure good coverage and
roaming, add APs based on the wall structure during network planning.
Key Points for Outdoor AP Coverage Design

⚫ Pay attention to the following key points when designing outdoor AP coverage:
 Select a proper antenna coverage mode based on WLAN scenarios. For example, omnidirectional antennas are recommended in
open areas such as squares and parks.
 It is recommended that outdoor directional and omnidirectional antennas be installed at a height of 3 m to 5 m. Outdoor
omnidirectional antennas must be installed vertically.
 Directional APs or antennas are recommended for roads around buildings to reduce interference to indoor signals and provide
codirectional coverage.
 Due to obstacles such as trees, it is recommended that devices be installed on the monitoring pole. Avoid strong electromagnetic
interference and other signal interference near the site.
Antenna
Teaching building
3–5 m
Lab building
Example of installing outdoor directional Example of installing APs with

and omnidirectional antennas directional antennas around a building
• APs with built-in directional antennas are recommended for coverage in narrow
and long areas such as roads. APs with external small-angle directional antennas
are recommended for coverage in high-density, backhaul, and ultra-long-
distance coverage scenarios.
Capacity Design Rules

⚫ During network capacity design, you need to design the number of APs required based on the bandwidth
requirements, the number of STAs, concurrency rate, and per-AP performance. This ensures that the WLAN
performance can meet the Internet access requirements of all STAs.
⚫ User bandwidth can be simply understood as the network bandwidth required by a STA to use a service. User
concurrency and bandwidth requirements vary depending on specific areas. Therefore, the capacity design must be
performed based on different scenarios and areas.
Objective Meeting users' bandwidth requirements (concurrent scenario)
Factors to be Number of
Per-user bandwidth Number of access STAs Capacity of a single AP
considered concurrent STAs
Acceptance The bandwidth of key services meets the multi-user concurrent requirements in the
criteria target area.
Bandwidth Requirements of a Single User (Office Scenario

as an Example)
⚫ After the signal coverage design is determined, analyze and evaluate the average bandwidth of each area based on
the specified service bandwidth requirements, actual scenarios, and concurrency. If no bandwidth requirement in a
scenario is specified, evaluate the required bandwidth based on the typical scenario.
Single-Service Baseline
Proportion of Services in Office Scenarios
Rate (Mbps)
Service Type
Conference High-Density Common Office Leisure Exhibition
Excellent Good Canteen Parking Lot Restroom
Room Office Area Area Area Hall
4K video 50 30 10% 10% 10% 10% 10% 10% 10% 10%
1080p video 16 12 10% 10% 10% 10% 10% 10% 10% 10%
720p video 8 4 10% 10% 10% 10% 10% 10% 10% 10%
E-whiteboard (wireless
32 16 10% 20% 0% 0% 0% 0% 0% 0%
projection)
Email 32 16 10% 10% 10% 0% 0% 0% 0% 0%
Web browsing 8 4 30% 20% 20% 30% 30% 30% 10% 30%
Gaming 2 1 0% 5% 10% 10% 0% 10% 10% 10%
Instant messaging 0.512 0.256 10% 5% 20% 20% 30% 20% 30% 20%
VoIP (voice) 0.256 0.128 10% 10% 10% 10% 10% 10% 20% 10%
Average single-user bandwidth (Mbps) —
16 19 13 10 10 10 9 10
excellent
*Data comes from Huawei labs.
• Bandwidth requirements vary depending on STA types and network services

running on STAs. For example, the bandwidth required by a STA used for
watching HD videos is higher than that required by a STA used only for browsing
web pages. Therefore, plan sufficient bandwidth based on STA services and types
to avoid bandwidth insufficiency or waste.
Number of Concurrent STAs on a Single AP

⚫ The number of concurrent STAs supported by a single AP refers to the maximum number of concurrent STAs
supported by the single AP which meets user bandwidth requirements. The main factors include the user access
bandwidth, number of AP spatial streams, number of AP radios, and frequency bandwidth.
⚫ The following table lists the maximum number of concurrent STAs supported by a Wi-Fi 6 AP at different access
bandwidths.
Wi-Fi 6 AP (20 MHz @ 2.4 GHz; 40 MHz @ 5 GHz)

Single Radio Dual Radios Triple Radios
No. Access Bandwidth
(5 GHz) (2.4 GHz + 5 GHz) (2.4 GHz + 5 GHz-1 + 5 GHz-2)
1 2 Mbps 56 85 141
2 4 Mbps 39 56 95
3 6 Mbps 27 38 65
4 7 Mbps 21 30 51
5 16 Mbps 12 18 30
* Note: The number of concurrent STAs varies depending on the AP model. The preceding data is obtained from Huawei labs.
• The user access bandwidth in the table refers to the rate at the application layer.
The rate at the application layer refers to the actual effective rate excluding
various overheads over the air interface. The rate at the application layer is lower
than that the PHY rate.
• Note: All test STAs in the table support the corresponding wireless technology
and work with dual spatial streams.
WLAN Capacity Design (Example)

Maximum Number of Concurrent STAs at Different Bandwidths (Dual Spatial
Streams, 802.11ax Supported) Prerequisites
STA Access Maximum Number of Maximum Number of
Bandwidth Concurrent STAs (Single-Radio) Concurrent STAs (Dual-Radio) Scenario: Conference room
... ... ... Number of access STAs: 300
16 Mbps 12 18 Access concurrency rate: 30%
... ... ... Bandwidth required by a single STA (Excellent): 16 Mbps
Single-Service Baseline Rate (Mbps) Percentage
Number of concurrent STAs supported by a single AP
Service Type (dual-band, 16 Mbps): 18
Conference
Excellent Good
Room
4K video 50 30 10% Calculation result
1080p video 16 12 10%
Number of APs required to meet capacity
720p video 8 4 10%
E-whiteboard
requirements in this area =
32 16 10%
(wireless projection)
Email 32 16 10% Number of access STAs x Access concurrency rate
Web browsing 8 4 30%
Number of concurrent STAs on a single AP
Gaming 2 1 0%
Instant messaging 0.512 0.256 10% 300 x 30%
VoIP (voice) 0.256 0.128 10% =5
Average single-user bandwidth (Mbps) — excellent 16 Mbps 18
Device Selection Factors

⚫ Select proper AP models based on customer requirements and the following factors:
Factor Description
An AP typically supports 4 to 12 spatial streams. An AP with more spatial streams supports higher throughput and larger access
MIMO
capacity. Therefore, select APs with a proper number of spatial streams based on the application scenario and access density.
Indoor APs have three types of antennas: omnidirectional, directional, and smart antennas. Outdoor APs support
omnidirectional and directional antennas.
Antenna
APs with smart antennas are recommended for indoor scenarios. Select APs with directional antennas if APs need to be
installed at high places.
Maximum transmit Limitations over the Wi-Fi transmit power vary depending on the country or region code. When the transmit power gets closer
power to the specified upper limit, the transmitted signal is stronger and the coverage distance is longer. For details, see the Country
(combined power) Codes and Channels Compliance in the product documentation.
A higher antenna gain indicates a stronger signal strength and longer coverage distance. Select antennas with a proper gain
Antenna gain
based on site requirements.
The power supply mode depends on the deployment scenario. Currently, in most scenarios, PoE power supply is used, or both
Power supply mode PoE and power supply are used for mutual backup. Pay attention to the power consumption of the AP and the power supply
capability of the PoE switch.
The Wi-Fi standard has evolved to the sixth generation, and each generation is compatible with earlier ones. The latest Wi-Fi 6
Wi-Fi standard
standard greatly improves the Wi-Fi speed and capacity. Therefore, Wi-Fi 6 APs are recommended.
For example, the Internet of Things (IoT) feature may be required. As the IoT comes into widespread use, deploying an IoT
Other features network independently will cause repeated cabling, separate management and O&M, and high hardware and O&M investment.
Therefore, it is recommended that IoT scalability be considered when you select Wi-Fi APs.
• In addition to the scenarios described in the table, antenna selection also includes
the following:
▫ Indoor scenario: Omnidirectional antennas are applicable when there is no

high capacity requirement and dense deployment is not involved in the
target coverage area.
▫ Outdoor scenario: Directional antennas are used for long-distance signal

coverage and wireless backhaul, while omnidirectional antennas are used
for short-distance signal coverage. (For example, in China, when the
coverage distance is greater than 80 m, use directional antennas; when the
coverage distance is less than 80 m, use omnidirectional antennas. The
actual coverage distance is subject to the local EIRP limit.)
Contents

▫ Preparation
▫ Planning and Design

◼ Deployment Design
Deployment Design
⚫ In the deployment design phase, after determining the WLAN coverage area, AP model, and number of APs, design
the AP deployment location, deployment mode, and power supply cabling mode based on the actual situation.
⚫ The deployment design phase includes channel planning, power supply cabling design, and installation mode
design. The work contents are as follows:
Power supply and cabling

Channel planning Installation mode design
design
• Installation of indoor APs

with omnidirectional
antennas
• Horizontal • AP power supply mode • Installation of agile
• Vertical • AP cabling mode distributed APs
• Installation of outdoor APs
and external directional
antennas
Channel Planning Power Supply and Cabling Design Installation Mode Design
Channel Design Rules

⚫ To avoid coverage holes or poor roaming experience, multiple APs are used to provide complete network coverage.
Therefore, channel selection and channel planning are involved. Before channel design, comply with the following
rules:
Determine the local available channels.
• Available channels vary with countries or regions, and some channels may be reserved in some regions. Therefore, confirm
the channels before network planning to avoid duplicate channels.
• For example, in China, 40 MHz channels 36, 44, 52, 60, 149, and 157 can be used on the indoor 5 GHz frequency band. In
common scenarios, 40 MHz networking is recommended by default.
Avoid co-channel interference.
• Properly plan channels to ensure the reuse distance of intra-frequency channels.

• On the premise of ensuring coverage, lower the power to reduce co-channel interference.
• AP channels need to be staggered in multiple dimensions (for example, the horizontal and vertical directions) when APs are
deployed on multiple floors.
• If channels cannot be staggered, disable some radios to reduce interference.
• WLAN Country Codes and Channels Compliance:

https://support.huawei.com/enterprise/en/doc/EDOC1000014876/82579c28?idPat
h=24030814|21782164|21782201|22318529|22039827
Channel Planning
⚫ In WLAN planning, overlapping coverage areas are inevitable between neighboring APs. Generally, 10% to 15%
overlapping buffer areas need to be reserved. This area may cause co-channel interference.
⚫ To address this, you can plan channels horizontally or vertically based on site requirements. In the horizontal
direction, neighboring APs must use radio frequency bands that do not interfere with each other. When a WLAN is
deployed across multiple floors, ensure that channels do not interfere with each other in the vertical direction.
Horizontal Vertical
Floor Planned Channels

11 36
1 1 149 165 5th floor 1 6 11
6 64 4th floor 11 1 6
11 11 44 52
1 157 3rd floor 6 11 1
2nd floor 1 6 11
2.4 GHz cellular 5 GHz cellular 1st floor 11 1 6
coverage coverage
AP Power Supply Design

⚫ When designing the AP power supply mode, select a proper power supply mode based on customer requirements and onsite
conditions. AP power supply modes include:
 Power supply using a PoE switch: PoE switches forward data of and supply power to APs (through Ethernet cables or hybrid cables).
 Power supply using a DC power adapter (supported only by indoor APs): An independent DC power adapter is used to supply power to APs.
 Power supply using a PoE adapter: PoE adapters are used for data transmission and power supply of APs. Alternatively, use optical fibers for data
transmission of AP and PoE adapters only for power supply.
Fiber mechanical splicer

AC power supply
Data port
connecting
RJ45 power to a switch
connector
Power indicator
PoE port connecting

to an AP
PoE power supply

PoE switch DC power adapter PoE adapter
over a hybrid cable
AP Cabling Rules
⚫ Observe the following rules when routing cables:
 Reserve a length of around 5 meters for Ethernet cables and hybrid cables for fine-tuning AP positions to reduce interference or
optimize signal coverage.
 It is recommended that the length of an Ethernet cable between an AP and a PoE switch be less than or equal to 80 m.
 Hybrid cables can only be used indoors and cannot be connected to outdoor APs. It is recommended that the length of a hybrid
cable between an AP and a switch be less than or equal to 300 m.
 The WLAN must be kept far away from strong electric and magnetic fields.
 Before deployment, confirm with the customer about the network cable deployment scheme to ensure that project construction
will not be affected due to property and aesthetics reasons.
< 80 m < 300 m
AP PoE switch AP PoE switch
Power supply over an Power supply over a

Ethernet cable hybrid cable
Indoor Settled AP Installation

⚫ When designing indoor AP installation, select a proper installation mode based on site conditions and customer
requirements. Indoor settled APs can be installed in the following modes:
 Ceiling mounting: If the installation height is smaller than 6 m, use APs with omnidirectional antennas. If the installation height is
greater than 6 m, use APs with directional antennas.
 Wall mounting: If ceiling mounting is not allowed, wall mounting can be used. The recommended installation height is 3 m.
 Support mounting: This mode can be temporarily used when APs cannot be mounted on the ceiling or walls, applying to
temporary exhibition scenarios.
 Threaded rod installation: This mode is recommended when the ceiling is high or there are many obstacles on the ceiling.
Threaded rod
Ceiling mounting Wall mounting Support mounting
mounting
Agile Distributed AP Installation

⚫ Wall plate APs and agile distributed RUs can be installed on walls, junction boxes, or ceilings.
Junction box (86

Wall mounting Ceiling mounting
mm) mounting
• Note: Some AP models, such as the AirEngine 5760-22W, do not support ceiling
mounting. Therefore, before mounting an AP on the ceiling, check whether the
AP supports this installation mode.
Installation Modes of Outdoor APs and Antennas

⚫ Outdoor APs can be mounted on poles or walls. Pay attention to the following points during the installation:
 Outdoor APs and antennas are equipped with mounting brackets that allow you to adjust the azimuth and downtilt in a range of
±30°.
 If the antenna angle does not need to be adjusted, APs can be directly installed on the wall.
 The recommended installation height of outdoor omnidirectional and directional antennas is 3–5 m.
Pole mounting Wall mounting
Installation diagram Installation diagram
Contents
Project Background
⚫ A company plans to construct a WLAN in its indoor office area. The following figure shows the floor plan of the
building. To meet the mobile office requirements of employees and Internet access requirements of guests, the
indoor WLAN design and planning are performed to ensure that the WLAN covers all areas required by the
customer and meets service requirements.
WLAN Planning Roadmap
⚫ The detailed WLAN planning procedure is as follows: Requirements
collection
 Analyze requirements based on the existing information.
 Select devices based on requirements and calculate the
Site survey
number of APs.
Environment
 Log in to the WLAN Planner and import the building drawing. setting
Requirements
 Set the environment and draw obstacles. analysis
Region setting
 Deploy APs.
 Adjust AP parameters and antenna angles. Creating a project
AP deployment
 Lay out switches and cables.
 Perform signal simulation. Importing a
Signal simulation
drawing
 Adjust the AP positions and repeatedly perform signal
simulation until the signal coverage is complete.
Network planning Report export
 Export the network planning report. in five steps
Requirements Collection (1/2)
⚫ The information to be obtained in the requirements collection phase includes basic requirements, service
requirements, and installation requirements.
⚫ After thorough communication with the customer, the collected basic requirements and installation requirements
are listed as follows:
Basic requirements collection checklist Installation requirements collection checklist
Requirement Type Collection Result Requirement Type Collection Result

Power supply mode PoE switch
Laws and regulations Country code: CN
AP installation mode Ceiling mounting
JPG scale drawing (building length:
Floor plan
100 m)
Switch location ELV rooms
Indoor APs with omnidirectional
Coverage mode Acceptance items and criteria No special requirements
antennas
Requirements Collection (2/2)
⚫ After thorough communication with the customer, the collected service requirements are listed as follows:
Requirement Type Collection Result

• VIP coverage areas: exhibition hall, reception room, and manager's office
• Common coverage areas: open office areas, meeting rooms, printing room, and leisure areas
Coverage area
• Simple coverage areas: restrooms
• Areas not covered: ELV rooms, storage rooms, staircases, and elevators
• VIP coverage area: ≥ –60 dBm
• Common coverage area: ≥ –65 dBm
Field strength
• Simple coverage area: ≥ –70 dBm
• Leakage field strength: no requirement
• Open office area: 250 office cubes in each area, with two STAs in each office cube
Number of access
• Conference room: 40 seats, with one STA at each seat
STAs
• Meeting room and exhibition hall: 10 seats in each room or hall, with two STAs at each seat
STA type Laptops, mobile phones, and tablets that support 2x2 MIMO and 40 MHz frequency bandwidth @ 5 GHz
Bandwidth • Open office area: 8 Mbps, with a concurrency rate of 72%

requirements (per-user • Conference room: 16 Mbps, with a concurrency rate of 90%
bandwidth) • Meeting room and exhibition hall: 16 Mbps, with a concurrency rate of 90%
Site Survey
⚫ A site survey is conducted to obtain site environment information, such as interference sources, signal attenuation caused by
obstacles, floor height, new obstacles, and ELV room locations. Determine AP models, installation positions and modes, and power
supply and cabling design based on the construction drawings.
Collection Item Survey Result

• The onsite building information is consistent with that on the floor plan provided by the customer.
• The floor height is 2.6 m.
Drawing information
• Inside the building, tables and chairs are at normal heights and have little interference to signals. Therefore, they
can be ignored.
• The external walls are 240 mm concrete walls.
Building materials and signal
• The walls of meeting rooms, offices, and reception room are 240 mm thick brick walls.
attenuation
• The leisure area walls are 12 mm thickened glass.
• There is a microwave oven in both the left and right leisure areas.
• There are four load-bearing pillars (length x width: about 1 m x 1 m) in each of the greening areas, which have
Interference sources been marked on the drawing.
• There are potted plants (half-meter high) in greening areas, which have little impact on signals and can be
ignored.
Switch location Either of the left or right ELV room
Network cables between switches and APs are routed above the ceiling. Hidden cabling is required, and hole
Cabling rules
drilling is allowed.
Installation admission Approved
Calculating the Number of APs
Single-AP concurrency specifications ⚫ Calculate the number of APs required in each area based on
Maximum Number of Concurrent STAs at Different the average STA bandwidth requirements in each scenario and
Bandwidths (Dual Spatial Streams, 802.11ax Supported) the concurrent number of STAs on the 5 GHz radio of a single
Maximum Number of Maximum Number of AP provided by the customer. The calculation formula is as
STA Access Bandwidth Concurrent STAs Concurrent STAs
(Single-Radio) (Dual-Radio) follows:
4 Mbps 39 56 Number of access STAs x
8 Mbps 21 30 Number of Access concurrency rate
16 Mbps 12 18 required APs = Number of concurrent
... ... ... STAs on a single AP
Average per-STA bandwidth in each scenario
Number of Per-STA Concurrency Calculation results:
Scenario
STAs Bandwidth Rate • Open office area = 500 x 72%/30 = 12
Open office area 500 8 Mbps 72%
• Conference room = 40 x 90%/18 = 2
Conference room 40 16 Mbps 90%
• Meeting room = 20 x 90%/18 = 1
Meeting room and
20 16 Mbps 90%
exhibition hall • Leisure area = 20 x 60%/30 ≈ 1
Leisure area 20 8 Mbps 60%
• Restroom = 10 x 90%/56 ≈ 1
Restroom 10 4 Mbps 90%
• In other rooms with a small number of STAs, only one AP needs to be deployed.
Creating a Project
⚫ Log in to the WLAN Planner, click Running, read the Security Management Regulations on Customer
Network Data, and fill in the project information.
3
6
• WLAN Planner address: https://serviceturbo-cloud-

cn.huawei.com/serviceturbocloud/#/toolsummary?entityId=d59de9ac-e4ef-409e-
bbdc-eff3d0346b42
Creating a Floor
⚫ Create a region, select Indoor, set the building name to HCIP-WLAN, and click Select File.
1
Selecting a Scenario
⚫ Select a WLAN scenario. For this project, select Office and click Next. You can specify a built-in network
construction standard as required. For this project, select Other and click OK.
2 4
Importing a Drawing
⚫ Select the drawing file and click OK.
Setting the Scale
⚫ Click Click here to set the scale in the middle of the drawing, draw a straight line from left to right
anywhere on the drawing, set the length to 100 meters, and click OK.
3
1
4
Setting the Environment
⚫ Draw obstacles on the drawing. Use insulation boundaries to draw drawing frames. Draw 240 mm thick brick walls
as indoor walls, 240 mm concrete as ELV rooms, and 12 mm thick glass as leisure areas.
Microwave
oven
Load-bearing
pillar
Setting Regions
⚫ Drag-select VIP coverage areas, common coverage areas, and simple coverage areas based on customer
requirements, and set basic attributes for these areas.
Open office Manager's
area A office
• This slide shows the settings of basic attribute parameters for open office area A
and manager's office. For other areas, set the parameters based on customer
requirements.
Deploying APs (1/4)
⚫ Click Automatic deployment, select Current Floor in Auto Place Config, and click Next.
Deploying APs (2/4)
⚫ In Auto Place Config, select a proper AP model and channel calculation mode, enable the power calibration
function, and click Place AP.
3
1
Deploying APs (3/4)
⚫ After automatic deployment, the number and positions of APs may be insufficient to meet service requirements. In
this case, manually adjust the number and positions of APs. In open office areas, you can deploy APs in equal
triangle mode and set the distance between APs to 15–18 m.
Effect after automatic deployment Effect after manual adjustment
Deploying APs (4/4)
⚫ After APs are deployed, set AP parameters, such as
the installation mode, height, and working mode.
If directional antennas are used, you need to set
the antenna downtilt and azimuth.
⚫ Right-click an AP in the activity area and choose
Property from the shortcut menu. (You can drag-
select all APs and right-click them for the setting).
The AP Attributes page is displayed, allowing you
to configure AP parameters based on customer
requirements.
 The customer requires ceiling mounting for APs. As
such, retain the default installation mode T-rail, set the
height to 2.6 m, set the working mode to dual-radio
mode, and retain the default values for other
parameters. The attribute configurations of APs in
other areas are the same.
Deploying Switches
⚫ Select a switch model (S5731-S24P4X switch in this project). Place switches in the ELV rooms on both sides.
Drawing Network Cables
⚫ Network cables can be routed above the ceilings to directly connect APs and switches.
• Note: You can hide network cables by clicking the Set Display button on the
bottom of the page.
Simulating Signals (1/2)
⚫ Adjust the bar in the simulation diagram to –65 dBm, and then click Open simulation to view the coverage of common areas.
• To view the coverage of VIP areas and simple areas, set the signal strength in the
simulation diagram to –60 dBm and –70 dBm, respectively.
Simulating Signals (2/2)
⚫ If the signal coverage is poor, adjust the number and positions of repeatedly to ensure normal signal
simulation. View the coverage satisfaction to check whether any area has only poor signal coverage.
Exporting the Report (1/2)
⚫ You can set the parameters to be included in the report, and then click Export to export the WLAN planning report.
Exporting the Report (2/2)
⚫ Before the report is exported, you need to review the network planning. The report can be exported only after all
items are correct.
1 2
Quiz
1. (Single-answer question) Which of the following obstacles causes the largest attenuation of 2.4 GHz
signals when materials have the same thickness? ( )
A. Metal
B. Asbestos
C. Wooden door
D. Colored glass
2. (Single-answer question) Which of the following are rules for AP deployment? ( )

A. When installing an AP, try to reduce the number of obstacles that signals traverse.
B. Ensure that the front side of an AP faces the target coverage area.
C. Deploy APs in concealed places.
D. Deploy APs far away from interference sources.
1. A
2. ABD
Summary
⚫ This course describes the importance of WLAN planning. If WLAN planning is not properly
performed in the early stage, rework may occur during WLAN project delivery due to a
failure to meet customer requirements. Additionally, this course introduces you to the
WLAN planning process, including preparation, planning and design, deployment design,
and construction and delivery. Before WLAN planning, fully communicate with the customer
to understand the customer's requirements and expectations. During the site survey,
carefully check onsite conditions against the drawing to facilitate subsequent WLAN
planning and design.
⚫ After learning this course, you will have a basic understanding of the WLAN planning
process and master the methods of WLAN planning and design.
Recommendations
intelligent world.


that could cause actual results and developments to differ
materially from those expressed or implied in the predictive
statements. Therefore, such information is provided for reference
purpose only and constitutes neither an offer nor an acceptance.
Huawei may change the information at any time without notice.
WLAN Planning for Enterprise Office Scenarios
Foreword
⚫ The enterprise office scenario refers to the office area of an enterprise, including the
centralized office area, conference room, and manager's office. WLAN planning for this
scenario instructs you to plan a WLAN before deployment to meet Internet access
requirements for enterprise office. With a high user density, this scenario has a high
requirement for network capacity and is sensitive to network quality.
⚫ This course introduces you to the WLAN service characteristics of enterprise office scenarios
as well as methods, rules, and precautions for WLAN planning in these scenarios.
Objectives
 Describe common WLAN service types in enterprise office scenarios.
 Describe WLAN planning methods in enterprise office scenarios.
 Describe WLAN deployment solutions in enterprise office scenarios.
Contents
1. Introduction to Enterprise Office Scenarios
2. WLAN Planning Process in Enterprise Office Scenarios
3. WLAN Planning Solutions in Enterprise Office Scenarios
Overview of Enterprise Office Scenarios
• Space: In most cases, the height does not exceed 4 m. The specific area greatly varies from several square meters to thousands of
square meters.
• Blocking: Obstacles are common in offices, such as gypsum boards and glass walls, causing little signal attenuation.
• Interference: The interference is low in independent office areas. However, if several companies lease offices on the same floor, the
WLANs of the companies may be severely interfered.
• Capacity: Office scenarios require high bandwidth. Some enterprises use fully-wireless office, and some enterprises use wired and
wireless office.
Office Meeting room
Service Types in Enterprise Office Scenarios
Office personal service Non-office personal service Enterprise IoT service
Services running on mobile Services running on mobile Asset management, energy

phones, office laptops, and devices such as mobile phones, efficiency control (air
tablets, for example, office for example, video, gaming, and conditioners and lighting
software, email, file transfer, social networking. system), etc.
desktop sharing, and desktop
cloud.
Requirements on WLANs differ for these services.
• Note: This course does not assume IoT services on a WLAN.

Development of Enterprise Office Networks
2000 2009 Today
Mobile 1.0 Mobile 2.0 Mobile 3.0
4K
VR/AR
Fully-wireless era
BYOD Diversified terminals:

• Refined online service
Wireless office era
• AR/VR, 4K video, etc.
Basic mobile office Mobile phone, tablet, and • Wi-Fi 6 -> Wi-Fi 7
Fixed office Ultrabook:
Laptop:
• Video, voice, and data services
• Voice and data services
Desktop computer • A large number of real-time
• Wi-Fi 3
• Data service services
• Wi-Fi 4 -> Wi-Fi 5
• Phase 1: In the era of basic mobile office, wireless network was a supplement to
wired network.
▫ The application of WaveLAN technology can be considered as the earliest

form of enterprise WLAN. The early Wi-Fi technology was mainly used on
IoT devices such as wireless radios. However, with the introduction of
802.11a/b/g, the advantages of wireless connectivity become obvious.
Enterprises and consumers began to realize the potential of Wi-Fi, and
wireless hotspots emerged in coffee shops, airports, and hotels.
▫ This was the first phase of WLAN application, mostly focused on solving the
wireless access problem. Its key value is that it broke away from the
constraints of wired networks so that devices can move within a certain
range, and wired networks were extended by wireless networks. However,
in this phase, there were no requirements on WLAN's security, capacity, and
roaming performance. An AP was used independently for networking
coverage. Such an AP is called a Fat AP.
• Phase 2: In the wireless office era, wired and wireless were integrated.
▫ With the widespread adoption of wireless devices, the WLAN developed

from a supplement to wired networks into a network as indispensable as
wired networks, hence the second phase.
▫ In this phase, as part of the network, the WLAN also needed to provide
network access for enterprise guests.
▫ In office scenario, there are many services that require high bandwidth,
such as video and voice. Since 2012, 802.11ac standard became mature,
which included many improvements on frequency bands, channel
bandwidth, modulation and encoding. Compared with previous Wi-Fi
standards, 802.11ac standard offers higher throughput, less interference,
and more connections.
• Phase 3: All wireless office era, with wireless network at the center.
▫ Now, the WLAN has entered the third phase. In office environments, Wi-Fi
networks have fully replaced wired networks. Offices now are fully covered
by Wi-Fi. No wired network ports are provided by desks anymore. The office
environment is more open and intelligent.
▫ In the future, high-bandwidth services, such as cloud desktop, video

conference, and 4K video, will be migrated from wired to wireless networks.
New technologies such as VR/AR will be directly deployed on wireless
networks. These new application scenarios raise the requirements on WLAN
design and planning.
Challenges in Enterprise Office Scenarios
High-density access Video conferencing
• In some scenarios (such as conference rooms and high-density • Video conference rooms and office areas have increasing
office areas), the number of access STAs is large, the requirements for video conferencing access.
concurrency rate is high, and high bandwidth is required. • The video conferencing service is characterized by burst traffic,
• The WLAN may be congested, causing the bandwidth to high bandwidth, large concurrency, and latency sensitivity.
decrease sharply. Therefore, the service has high requirements on the bandwidth,
• Other uncertain Wi-Fi interference such as personal Wi-Fi latency, and stability for WLANs.
hotspots may exist.
• In video conferencing scenarios, 12–16 Mbps bandwidth is required for 1080p

videos, and 30–50 Mbps bandwidth is required for 4K videos. The burst traffic of
video conferencing is three to five times or even higher than the average traffic.
Contents
WLAN Planning Process in Enterprise Office Scenarios
⚫ Requirements collection
Requirements collection
 Collect complete and comprehensive project and requirement information to provide basis
for WLAN design.
⚫ Site survey
Site survey
 Carry out a site survey and record more detailed information, such as the floor height,
interference sources, and obstacles.
⚫ Device selection Device selection

 Determine the models of devices and antennas based on the collected information.
⚫ Coverage design
Coverage design
 Determine the coverage range and field strength requirements, and plan AP deployment
positions.
⚫ Capacity design
Capacity design
 Estimate the number of APs based on the number of access STAs and service requirements.
Requirements Collection Site Survey Device Selection Coverage Design Capacity Design
Requirements Collection in Enterprise Office Scenarios

Requirement Type Description
Drawing information Collect complete drawings that contain scale information in CAD, PDF, PNG, or JPG format.
Determine the VIP coverage areas (such as office areas and meeting rooms), common coverage areas (such as leisure areas, break
Coverage area rooms, and activity areas), and simple coverage areas (such as corridors, stairs, and restrooms), and areas that do not need to be
covered (such as storage rooms and equipment rooms).
Determine the signal field strength requirements in coverage areas. Generally, the coverage requirements are as follows:
Field strength
VIP coverage area ≥ –60 dBm, common coverage area ≥ –65 dBm, and simple coverage area ≥ –70 dBm
Wall type Determine the material and thickness of indoor walls, such as 240 mm brick walls, 240 mm concrete walls, and 12 mm glass walls.
Determine the types and number of access STAs in the coverage area. In wireless office scenarios, a single user usually has a mobile
Access STAs
phone and a laptop; therefore, the number of access STAs is twice the number of access users.
Bandwidth Determine the main service types and bandwidth requirements of access STAs.
Switch location Determine the locations of upstream switches and check whether the PoE power supply distance meets the requirements.
Power supply mode Determine the power supply mode as well as the available power supply areas and facilities on site.
Interference source Determine whether there are interference sources such as microwave ovens, Bluetooth devices, and external Wi-Fi devices.
Check whether there are special requirements in some scenarios, such as the aesthetic requirements for AP deployment in the
Other
exhibition hall.
Site Survey in Enterprise Office Scenarios

Site Survey Item Description
Building materials and
Obtain the thickness and attenuation of building materials. If possible, test the attenuation onsite.
signal attenuation
Measure the floor height. The common indoor floor height is 3 m to 5 m. If an atrium or large exhibition
Floor height
hall exists, use a rangefinder to measure the floor height and record the result.
Check whether there are interference sources, for example, mobile hotspots, Wi-Fi devices of other vendors,
Interference source
and non-Wi-Fi devices (such as Bluetooth devices and microwave ovens).
Check whether obstacles at the site are consistent with those on the drawings. If not, mark the inconsistent
New obstacles areas and take photos. For example, if there are new partitions onsite, mark the positions and attenuation
values of the partitions on the drawings.
Site photos Take photos of the site to record the environment and convey survey information.
AP installation mode
Determine the AP installation modes (ceiling mounting, wall mounting, etc.) and positions.
and position
ELV room locations Mark the locations of ELV rooms where switches are to be deployed on the drawings.
Mark PoE cables to be routed on the drawings. It is recommended that the length of a PoE cable be less
Power supply cabling
than or equal to 80 m.
Record the customer's special requirements, such as requirements on latency, in-roaming packet loss rate,
Special requirements
and concurrency rate in special areas.

Factor Description
MIMO
Indoor APs have three types of antennas: omnidirectional, directional, and smart antennas. Outdoor APs support omnidirectional and
directional antennas.
Antenna
APs with smart antennas are recommended for indoor scenarios. Select APs with directional antennas if APs need to be installed at
high places.
Maximum transmit Limitations over the Wi-Fi transmit power vary depending on the country or region code. When the transmit power gets closer to
power the specified upper limit, the transmitted signal is stronger and the coverage distance is longer. For details, see the Country Codes
(combined power) and Channels Compliance in the product documentation.
A higher antenna gain indicates a stronger signal strength and longer coverage distance. Select antennas with a proper gain based
Antenna gain
on site requirements.
The power supply modes vary according to the deployment scenarios. Currently, PoE is used in most scenarios. In other scenarios,
Power supply mode the DC power supply can be used, or both power supply modes can be used together for mutual backup. Ensure that the power
consumption of APs matches the power supply capability of PoE switches.
Wi-Fi standard
For example: As the Internet of Things (IoT) comes into widespread use, deploying an IoT network independently will cause
Other features repeated cabling, separate management and O&M, and high hardware and O&M investment. Therefore, it is recommended that IoT
scalability be considered when you select Wi-Fi APs.
Common APs in Enterprise Office Scenarios (1/2)

AP Model AirEngine 8760-X1-PRO AirEngine 6760-X1/X1E AirEngine 6761-21/21E
Appearance
4+12/4+4+8/ 4+8/4+4+4/
MIMO 4+4
4+8+independent scanning 4+6+independent scanning
Built-in dual-radio omnidirectional Built-in dual-radio omnidirectional
Built-in dual-radio or triple-radio antennas (AirEngine 6760-X1) or antennas (AirEngine 6761-21) or
Antenna
omnidirectional antennas external antennas (AirEngine 6760- external antennas (AirEngine 6761-
X1E) 21E)
Maximum Transmit Power
26 dBm/29 dBm 26 dBm/29 dBm 26 dBm/26 dBm
(Combined Power)
Antenna Gain 4.5 dBi/6 dBi 4.5 dBi/6 dBi 4.5 dBi/5.5 dBi
Maximum Power Consumption 50 W (excluding USB) 48 W (excluding USB) 22.6 W (excluding USB)
PoE (802.3bt) PoE (802.3bt) PoE (802.3at)
Power Supply Mode
DC: 48 V DC: 48 V DC: 48 V
Wi-Fi 6, smart antenna, USB, IoT, BLE Wi-Fi 6, smart antenna (AirEngine Wi-Fi 6, smart antenna, USB, IoT, BLE
Other Features
5.0 6760-X1), USB, IoT, and BLE 5.0 5.0
Office, conference room, and lecture Meeting room, live streaming studio,
Recommended Scenario VIP areas and important offices
hall and lecture hall
• The table lists only some common AP models. For details about other AP models,
see the product documentation.
Common APs in Enterprise Office Scenarios (2/2)

AP Model AirEngine 5761-21 AirEngine 5761-11
Appearance
MIMO 2+4 2+2
Antenna Built-in dual-radio omnidirectional antennas Built-in dual-radio omnidirectional antennas

25 dBm/28 dBm 27 dBm/27 dBm
(Combined Power)
Antenna Gain 4 dBi/5 dBi 4 dBi/5 dBi
Maximum Power Consumption 17.9 W (excluding USB) 15.3 W (excluding USB)
PoE (802.3at/af) PoE (802.3at/af)

Power Supply Mode
DC: 12 V DC: 12 V
Other Features Wi-Fi 6, smart antenna, USB, IoT, BLE 5.0 Wi-Fi 6, smart antenna, USB, IoT, BLE 5.0
Recommended Scenario Office, meeting room, and live streaming studio Small office, corridor, and parking lot
Common Antennas in Enterprise Office Scenarios

Antenna Part Number 27011172 27012545 27013720
Model ANTDG0304A1SR ANTDG0404D4SR ANTDG0808D4NR
Antenna Type Omnidirectional Omnidirectional Directional
Radios 2.4 GHz and 5 GHz 2.4 GHz and 5 GHz 2.4 GHz and 5 GHz
Gain (2.4 GHz/5 GHz) 3 dBi/4 dBi 4 dBi/5 dBi 8 dBi/8 dBi
Horizontal Beamwidth (2.4 GHz/5 GHz) 360°/360° 360°/360° 70°/70°
Vertical Beamwidth (2.4 GHz/5 GHz) 90°/60° 110°/110° 70°/70°
Dimensions (H x W x D) 20 mm x 149 mm x 20 mm 20 mm x 150 mm x 150 mm 40 mm x 220 mm x 220 mm
4 x Type N female connector

Connector Type 1 x RP-SMA-J (single-polarized) 4 x RP-SMA-J (single-polarized)
(dual-polarized)
Used in scenarios where the floor Used in scenarios with high floor
Used in elevators or areas with
Remarks height is high and the bandwidth
high aesthetic requirements
heights and common coverage
requirement is not high requirements
Note: The antenna models above can be used by the outdoor APs mentioned on the previous page.
Coverage Design Rules

⚫ Minimize the number of obstacles that signals pass through. Generally, it is recommended that signals pass through a single-layer
wall (120 mm brick wall). In some special scenarios (such as gypsum walls and glass walls), signals can pass through two layers of
walls.
⚫ It is not recommended that APs be deployed to transmit signals to penetrate a 240 mm thick brick wall, concrete wall, or metal wall.
If the AP penetration coverage solution is used without meeting the specified constraints, weak signals and discontinuous roaming
may occur after signals penetrate the wall. In this case, to ensure good coverage and roaming, add APs based on the wall structure
during WLAN planning.
⚫ Deploy APs separately in key areas and VIP areas to ensure user experience.
⚫ Deploy APs separately at intersections or corners to ensure signal coverage continuity (≥ –65 dBm) and that neighboring APs can
establish neighbor relationship tables for good roaming experience.
⚫ Install APs at least 3 m away from load-bearing pillars.
2 2
1 1
Precautions for Coverage Design in Enterprise Office

Scenarios
APs can be mounted on the ceiling (at a height of no more than 6 m) or on walls (at a height of
AP with omnidirectional
⚫
about 3 m).
⚫ Indoor office is a semi-open scenario. Assuming that the edge field strength is –65 dBm, the
antennas
maximum coverage distance at 2.4 GHz is 35 m, and that at 5 GHz is 15 m.
⚫ When planning APs in a sub-scenario, consider factors such as obstacles and the number of access
STAs. For details about the AP deployment spacing, see the WLAN construction standards.
⚫ When an AP is installed on a load-bearing pillar or wall, assume that signals at the rear of the AP
are completely blocked.
AP supporting external
directional antennas
⚫ Recommended AP model: AirEngine 6760-X1E or AirEngine 6761-21E.

⚫ It is mainly used in high ceiling scenarios such as exhibition halls. It is recommended that APs with
external directional antennas be installed on the ceiling at a height of 6 m to 12 m.
⚫ The 70° directional antennas (27013720) are recommended, and APs are deployed at an equal
spacing of 18 m to 20 m.
Common Services and Average Bandwidth in Enterprise

Office Scenarios
Proportion of Services in Office Scenarios
Rate (Mbps)
Service Type
Conference High-Density Common Leisure Exhibition Parking
Excellent Good Canteen Restroom
Room Office Area Office Area Area Hall Lot
4K video 50 30 10% 10% 10% 10% 10% 10% 10% 10%
1080p video 16 12 10% 10% 10% 10% 10% 10% 10% 10%
720p video 8 4 10% 10% 10% 10% 10% 10% 10% 10%
E-whiteboard 32 16 10% 20% 0% 0% 0% 0% 0% 0%
Email 32 16 10% 10% 10% 0% 0% 0% 0% 0%
Web browsing 8 4 30% 20% 20% 30% 30% 30% 10% 30%
Gaming 2 1 0% 5% 10% 10% 0% 10% 10% 10%
Instant
0.512 0.256 10% 5% 20% 20% 30% 20% 30% 20%
messaging
VoIP 0.256 0.128 10% 10% 10% 10% 10% 10% 20% 10%
Average Bandwidth in Each Scenario
16 19 13 10 10 10 9 10
(Excellent, in Mbps)
Note: The data above is based on experience and can be adjusted according to user bandwidth requirements.
• If the bandwidth requirement in a specific scenario is not specified, evaluate the

required bandwidth based on the table above.
• The average bandwidth required in different scenarios is the sum of the single-
service baseline rates of different service types multiplied by their proportions.

⚫ The number of concurrent STAs supported by an AP is used to calculate the number of required APs on the premise that the
coverage and capacity requirements are met. For example:
 Two hundred STAs are connected to the network, with the concurrency rate of 30%. That is, services are running on only 60 STAs concurrently. When
both APs and STAs comply with Wi-Fi 6, a single STA requires 8 Mbps bandwidth and a dual-band AP (4x4 MIMO) supports concurrent access of 30
STAs (2x2 MIMO). Therefore, two APs are required to meet the capacity requirement.
⚫ The following table lists the maximum number of concurrent STAs supported by a Wi-Fi 6 AP (4x4 MIMO, HE40) at different
bandwidths.
Maximum Number of Concurrent STAs (All STAs Support Wi-Fi 6 and Dual Spatial Streams) Supported by a Wi-Fi 6 AP (4x4 MIMO, HE40)
Maximum Number of Concurrent STAs Maximum Number of Concurrent STAs Maximum Number of Concurrent
(Single-Radio) (Dual-Radio) STAs (Triple-Radio)
1 2 Mbps 56 85 141
2 4 Mbps 39 56 95
3 6 Mbps 27 38 65
4 8 Mbps 21 30 51
5 16 Mbps 12 18 30
Note: The maximum number of concurrent STAs varies according to the AP model.
• The access bandwidth in the table above is the rate at the application layer, and
is an actual rate calculated by subtracting various overheads from the air
interface rate. Therefore, the rate at the application layer is lower than the PHY
rate.
Contents
Common Enterprise Office Sub-scenarios
Common office area High-density office area Meeting room Exhibition hall
Canteen Leisure area Parking lot Restroom
WLAN Construction Standards for Office Areas
Scenario description WLAN construction standards
⚫ Service types: web browsing, email, video conferencing, instant ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 20
messaging, etc. Mbps
⚫ User density: about 1 per 4–5 m2 ⚫ Capacity KPI: 40 STAs on a single AP, 30% concurrency rate
⚫ Floor height: 3 m to 4 m ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm
⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95%
area < 1%
⚫ Access KPI: average time required for access < 3s
⚫ Roaming KPI: roaming success rate > 97%, average roaming delay
< 100 ms, in-roaming packet loss rate < 0.1%
Recommended solution
Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode Deployment Solution
Indoor AP with built-in Deploy APs in W-shaped mode at

Common omnidirectional antennas, an equal spacing of 15 m to 18 m.
High Medium High Ceiling mounting
office area supporting 2+4 or higher Channel planning: HE20 @ 2.4 GHz,
spatial streams HE40 @ 5 GHz
• Experience rate: perceived data rate under a light network load
▫ An experience rate is the target rate that can be achieved in 95% of areas
according to SpeedTest on a light-loaded network where the channel
utilization is less than 20%. The rate is typically considered as the peak rate.
• Service-assured rate: guaranteed rate under a heavy network load
▫ A service-assured rate is the target rate that can be achieved in 90% of

time according to SpeedTest in a multi-user concurrency scenario where the
network load is less than 80%. The rate is typically considered as the
guaranteed rate.
• HE20 @ 2.4 GHz indicates that the 2.4 GHz frequency band uses 20 MHz
bandwidth, and HE40 @ 5 GHz indicates that the 5 GHz frequency band uses 40
MHz bandwidth.
WLAN Deployment Solution for Office Areas
Suggestions for WLAN planning and deployment
⚫ Mount indoor APs with omnidirectional antennas on T-rails. It is recommended that APs be deployed in W-shaped mode at an
equal spacing of 15 m to 18 m.
⚫ Considering limited available 2.4 GHz channels, disable some 2.4 GHz radios to reduce co-channel interference.
⚫ Due to hardware restrictions, the distance between APs with omnidirectional antennas cannot be less than 6 m. Otherwise,
adjacent-channel interference occurs, affecting throughput performance.
15–18 m
15–18 m 15–18 m
Network Construction Standards for Meeting Rooms
⚫ Service types: web browsing, email, video conferencing, instant ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 20
⚫ User distribution: ⚫ Capacity KPI: 40 STAs on a single AP, 30% concurrency rate
 Typical meeting room: 20 per 50 m2 ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm
 Typical conference room: 60 per 200 m2 ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95%
⚫ Floor height: 3–5 m area < 1%
⚫ Access KPI: average time required for 802.1X access < 3s
Indoor AP with built-in Deploy APs evenly in a room and
Meeting omnidirectional antennas, far away from the door.
High High High Ceiling mounting
room supporting 2+4 or higher Channel planning: HE20 @ 2.4
spatial streams GHz, HE40 @ 5 GHz
WLAN Deployment Solution for Meeting Rooms
⚫ Mount APs with omnidirectional antennas on the ceiling to cover the entire room.
 If the area of a room is less than 60 square meters and partition walls between rooms are made of gypsum boards or other materials that
signals can easily penetrate, deploy one AP for two rooms, as shown in solution A.
 If the area of a single room is 60–120 square meters, deploy one AP in each room, as shown in solution B.
 If the area of a single room is 120–240 square meters, deploy two APs in each room, as shown in solution C.
⚫ Install APs in a room evenly and far away from the door. Keep a specified distance between an AP in the corridor and the
exterior walls of rooms. Depending on the wall material, at least a distance of 3 m is required for solid walls (brick or
concrete) and 6 m is required for non-solid walls (gypsum or glass walls).
Single room < 60 m2 Single room < 60 m2 Single room: 60–120 m2 Single room: 120–240 m2
Gypsum
board
Spacing Spacing Spacing

Corridor Corridor Corridor
Solution A: area < 60 m2 Solution B: area of 60–120 m2 Solution C: 120–240 m2
WLAN Construction Standards for Exhibition Halls
⚫ Service types: web browsing, HD video, instant messaging, etc. ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 10
Mbps
⚫ User density: about 1 per 9–10 m2
⚫ Capacity KPI: 30 STAs on a single AP, 40% concurrency rate
⚫ Floor height:
⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm
 Common exhibition hall: 3–6 m
 Large exhibition hall: > 6 m
area < 1%
Common Deploy APs in W-shaped mode
exhibition hall Indoor AP with built-in at an equal distance of 20–25 m.
(floor height < omnidirectional antennas Channel planning: HE20 @ 2.4
6 m) GHz, HE40 @ 5 GHz
Large Deploy APs in W-shaped mode
Indoor AP with external
exhibition hall at an equal distance of 20–25 m.
High Medium High directional antennas Ceiling mounting
(floor height > Channel planning: HE20 @ 2.4
connected
6 m) GHz, HE40 @ 5 GHz
WLAN Deployment Solution for Exhibition Halls
⚫ At a floor height of less than 6 m, deploy indoor APs with built-in omnidirectional antennas in W-shaped mode at an equal
spacing of 20–25 m.
⚫ At a floor height of higher than 6 m, deploy indoor APs with external directional antennas (70 °) connected in W-shaped
mode at equal spacing of 20–25 m.
20–25 m 20–25 m
20–25 m 20–25 m 20–25 m 20–25 m
Solution A: Use APs with omnidirectional antennas Solution B: Use APs with directional antennas at a
at a floor height of less than 6 m floor height of higher than 6 m
WLAN Construction Standards for Leisure Areas
⚫ Service types: web browsing, HD video, gaming, email, instant ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 10
⚫ User density: about 1 per 4–9 m2 ⚫ Capacity KPI: 40 STAs on a single AP, 40% concurrency rate
⚫ Floor height: ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm
 Indoor leisure area: 3–5 m ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95%
 Outdoor leisure area: N/A (because it is typically an open-air area < 1%
scenario) ⚫ Access KPI: average time required for access < 3s
Deploy APs with a coverage radius of
Indoor
Indoor AP with built-in 18 m to 20 m.
leisure High Medium High Ceiling mounting
omnidirectional antennas Channel planning: HE20 @ 2.4 GHz,
area
HE40 @ 5 GHz
Deploy APs on one side of the leisure
Outdoor
Outdoor AP with built-in Wall mounting or pole area to cover the seat area.
leisure High Low High
directional antennas mounting Channel planning: HE20 @ 2.4 GHz,
area
HE40 @ 5 GHz
WLAN Deployment Solution for Leisure Areas
⚫ For indoor leisure areas, deploy indoor APs with omnidirectional antennas on T-rails with a coverage radius of 18 m to 20 m.
⚫ For outdoor leisure areas, deploy outdoor APs with built-in directional antennas on one side of an area to provide coverage to
the seat area. The coverage range is 15 m to 20 m on both sides of an AP.
Seat area
18–20 m
15–20 m
Outdoor Coffee making table

Indoor leisure area leisure area
WLAN Construction Standards for Enterprise Canteens
Mbps
⚫ Floor height: 3–5 m
area < 1%

Enterprise omnidirectional antennas, an equal spacing of 15 m to 18 m.
Low High Medium Ceiling mounting
canteen supporting 2+4 or higher Channel planning: HE20 @ 2.4 GHz,
WLAN Deployment Solution for Enterprise Canteens
⚫ Mount APs with omnidirectional antennas on the ceiling in W-shaped mode at equal spacing of 15–18 m.
15–18 m
15–18 m 15–18 m
WLAN Construction Standards for Parking Lots
⚫ Service types: web browsing, email, video, instant messaging, etc. ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 10
Mbps
area < 1%
omnidirectional antennas, an equal distance of 35–40 m.
Parking lot Low Low Medium Ceiling mounting
supporting 2+2 or higher Channel planning: HE20 @ 2.4 GHz,
WLAN Deployment Solution for Parking Lots
⚫ Install APs with omnidirectional antennas on the ceiling with equal spacing of 35 m to 40 m in W-shaped mode.
⚫ Deploy APs above lanes and independent APs at entrances and exits to ensure continuous signal coverage and good roaming
experience.
35–40 m
Lane
35–40 m
Parking area
Lane
35–40 m
WLAN Construction Standards for Restrooms
⚫ Service type: web browsing, video, etc. ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 20
Mbps
⚫ User density: about 1 per 3 m2
⚫ Floor height: 3 m to 4 m
area < 1%
Indoor AP with built-in Ceiling-mount APs in the middle

omnidirectional antennas, of the restroom.
Restroom Low Low Medium Ceiling mounting
supporting 2+2 or higher Channel planning: HE20 @ 2.4
WLAN Deployment Solution for Restrooms
⚫ Mount indoor APs with omnidirectional antennas on the ceiling.

⚫ In scenarios with aesthetic requirements, take corresponding aesthetic measures for AP installation.
⚫ The walls between adjacent restrooms are thick. Therefore, it is not recommended that signals penetrate such walls. As such,
deploy one AP in each restroom.
Basin
Basin
Basin
table
table
table
Quiz
1. (Single-answer question) An enterprise has about 280 employees. Daily office work requires
8 Mbps bandwidth, and the concurrent rate is 50%. The enterprise plans to provide wireless
coverage for office areas using dual-band APs. Assuming that a single AP can connect to 30
STAs, how many APs are required at least to meet wireless office requirements? ( )
A. 8
B. 6
C. 5
D. 4
1. C
Summary
⚫ This course describes the characteristics of enterprise office sub-scenarios, including
conference rooms, exhibition halls, and open offices. WLAN construction standards and
planning rules vary according to sub-scenarios and relevant WLAN planning solutions are
different as well. This course also provides suggestions on WLAN planning and deployment
for common enterprise office sub-scenarios, facilitating WLAN solution design in WLAN
projects relating to enterprise office scenarios.
⚫ On completion of this course, you will have a basic understanding of the WLAN planning
process and master the WLAN design methods for each sub-scenario.
Recommendations

BYOD Bring Your Own Device
IoT Internet of Things
KPI Key Performance Indicator
VoIP Voice over IP
VR/AR Virtual Reality/Augmented Reality
intelligent world.


WLAN Planning for Education Scenarios
Foreword
⚫ Evolving information technologies have made life easier and transformed the way education
is delivered — boring textbooks replaced by multimedia teaching aids, and heavy
schoolbags replaced by thin, electronic ones. All these changes require the support of a
mature and stable network.
⚫ Typical education scenarios include classrooms, auditoriums, libraries, and labs, where
students are densely distributed. Such a scenario is usually characterized by high user
density, a large number of concurrent users, a high volume of burst traffic, and sensitivity to
network quality.
⚫ This course describes WLAN service characteristics of education scenarios, as well as
methods, rules, and precautions for WLAN planning in these scenarios.
Objectives
 Describe common service types and challenges in education scenarios.
 Describe WLAN planning methods in education scenarios.
 Describe WLAN deployment solutions in education scenarios.
Contents
1. Introduction to Education Scenarios
2. WLAN Planning Process in Education Scenarios
3. WLAN Planning Solutions in Education Scenarios
Overview of Education Scenarios
• Space: large area, diversified building structures, and many sub-scenarios
• Blocking: many types of obstacles, such as 240 mm brick walls and 240 mm concrete walls, causing signal
attenuation
• Interference: severe interference, such as that caused by students' hotspots and school electronic devices
• Capacity: high concurrency and certain WLAN quality requirements
Classroom Playground
Service Types in Education Scenarios
Learning in classroom After-class entertainment Enterprise IoT service
The services include office, The services include video, The services include asset
online learning, instant gaming, and social networking. management and energy
messaging, email, file transfer, These services are mainly efficiency control (air
online live broadcast, desktop carried on mobile terminals conditioners and lighting
sharing, and desktop cloud. such as laptops, mobile phones, system).
These services are mainly and tablets.
carried on office laptops, e-
schoolbags, and tablets.

Typical Services in Education Scenarios — E-schoolbag
Scenario description IP network
⚫ With the rapid development of the Internet, online Router

teaching resources are increasingly abundant. More
teaching activities are carried out based on Internet
resources, and e-schoolbags are gradually put into use. Switch B
⚫ E-schoolbags are mobile digital classrooms: Students

can use electronic terminals carrying learning resources Resource WAC
in pre-study, class, homework, tutoring, and evaluation server
Switch A
phases.
Service description E-classroom

AP
Management VLAN 100

⚫ An e-schoolbag is a complete teaching application
Service VLAN: VLAN 101
system. The core elements are mobile terminals,
teaching contents, and service platforms (servers that
provide education resources). PC
⚫ Students' terminals connect to the WLAN and request
E-whiteboard
resources. Teachers' terminals connect to the WLAN or
the wired network to deliver instructions. Teacher terminal Student terminal
• Networking description:
▫ A resource server stores resources such as courseware and videos for e-

schoolbags and can be deployed on the public network (more common) or
school network.
▫ Generally, WACs are centrally deployed in the core equipment room of a

district/county education bureau. APs are deployed in schools and connect
to the WACs through private lines.
▫ Switch A supplies PoE power to APs, and Switch B functions as the DHCP
server and gateway for wireless users.
▫ Generally, teachers use laptops or desktop computers and access the

network through wired ports (recommended). If teachers use STAs such as
tablets, it is recommended that an independent SSID be planned for
teachers' STAs to guarantee bandwidth.
Characteristics and Challenges of Education Scenarios
• Open or semi-open Classroom Auditorium

• Aesthetic requirements • 80–300 people in a single room
• Concealed antennas • Large number of concurrent users
• High concurrency, large number of • High ceiling: many restrictions and
access users difficult installation
• High bandwidth requirements
• High dustproof and waterproof

requirements in outdoor
• Densely distributed walls
environments
• Severe signal attenuation
• Large coverage area
• High concurrency during peak hours
• Trees and buildings affecting signals
• High bandwidth requirements
• Inconvenient and expensive fiber
Dormitory Playground
deployment
Contents
WLAN Planning Process in Education Scenarios
for design.
⚫ Site survey
Site survey

⚫ Coverage design
Coverage design
positions.
⚫ Capacity design
Capacity design
Requirements Collection in Education Scenarios

Determine the VIP coverage areas (such as classrooms, conference rooms, and offices), common coverage
Coverage area areas (such as canteens and student dormitories), and simple coverage areas (such as corridors, stairs, and
bathrooms).
Determine the signal field strength requirements in coverage areas. Generally, the coverage requirements are
Field strength as follows:
Determine the total number of access STAs in a coverage area. Generally, this number can be determined
Number of access STAs based on the number of seats. Assuming that each person uses one mobile phone and one laptop, the number
of access STAs is twice the number of seats.
Bandwidth Determine the main types of network services and per-user bandwidth requirement.
Wall type Determine the material and thickness of indoor walls, such as 240 mm brick walls and 240 mm concrete walls.
Power supply mode Determine the power supply mode and confirm the available power supply areas and facilities on site.
Determine the locations of switches upstream to the WLAN and confirm whether the PoE power supply
Switch location
distance meets the requirements.
Determine whether there are interference sources such as lab instruments, Bluetooth devices, and external Wi-
Interference source
Fi devices.
Site Survey in Education Scenarios

signal attenuation
Measure the floor height. The common indoor floor height is 3 m to 5 m. If there are atriums, halls, or
Floor height
lecture halls, use a rangefinder to measure the floor height and record the result.
Check whether there is interference caused by, for example, mobile hotspots, third-party Wi-Fi devices, and
Interference source
non-Wi-Fi devices (such as Bluetooth devices and microwave ovens).
Determine the AP installation modes (ceiling mounting, wall mounting, etc.) and locations.
and position
ELV room locations On the drawings, mark the locations of extra-low voltage (ELV) rooms where switches are to be deployed.
Mark PoE power supply cable routes on the drawings. It is recommended that the length of a PoE cable be
less than or equal to 80 m.
Record the customer's special requirements, such as requirements on delay, in-roaming packet loss rate, and
concurrency rate in special areas.

Factor Description
An AP typically supports 4 to 12 spatial streams. An AP with more spatial streams supports higher throughput
MIMO and larger access capacity. Therefore, select APs with a proper number of spatial streams based on the
application scenario and access density.
Antenna
APs with smart antennas are recommended for indoor scenarios. Select APs with directional antennas if APs need
to be installed at high places.
Maximum transmit Limitations over the Wi-Fi transmit power vary depending on the country or region code. When the transmit
power power gets closer to the specified upper limit, the transmitted signal is stronger and the coverage distance is
(combined power) longer. For details, see the Country Codes and Channels Compliance in the product documentation.
A higher antenna gain indicates a stronger signal strength and longer coverage distance. Select antennas with a
Antenna gain
proper gain based on site requirements.
The power supply mode varies with the deployment scenario. Currently, PoE is used in most scenarios. In other
Power supply mode scenarios, a power supply can be used, or both PoE and a power supply can be used for mutual backup. Ensure
that the power consumption of APs matches the power supply capability of PoE switches.
The Wi-Fi standard has evolved to the sixth generation, and each generation is compatible with earlier ones. The
Wi-Fi standard
latest Wi-Fi 6 standard greatly improves the Wi-Fi speed and capacity. Therefore, Wi-Fi 6 APs are recommended.
For example: As the Internet of Things (IoT) comes into widespread use, deploying an IoT network independently
Other features will cause repeated cabling, separate management and O&M, and high hardware and O&M investment.
Therefore, it is recommended that IoT scalability be considered when you select Wi-Fi APs.
Indoor APs Commonly Used in Education Scenarios (1/2)

AP Model AirEngine 8760-X1-PRO AirEngine 6760-X1E AirEngine 6761-21E
Appearance
4+12/4+4+8/ 4+8/4+4+4/
MIMO 4+8+independent scanning 4+6+independent scanning
4+4
Built-in dual-radio or triple-radio

Antenna omnidirectional antennas
External antennas External antennas

(Combined Power)
Antenna Gain 4.5 dBi/6 dBi N/A N/A
Maximum Power
55 W (excluding USB) 39.9 W (excluding USB) 22.6 W (excluding USB)
Consumption
Power Supply Mode PoE (802.3bt) PoE (802.3bt) PoE (802.3at/af)
Wi-Fi 6, smart antenna, USB, IoT, BLE
Other Features 5.0
Wi-Fi 6, USB, IoT, BLE 5.0 Wi-Fi 6, USB, IoT, BLE 5.0
Scenarios with uncommon floor Scenarios with uncommon floor

Recommended Scenario VIP areas and important offices heights, such as auditoriums, lecture heights, such as auditoriums, lecture
halls, and stadiums halls, and stadiums
• This page lists some common indoor AP models. For details about other models,
Indoor APs Commonly Used in Education Scenarios (2/2)

AP Model AirEngine 6761-21T AirEngine 5761-11 AirEngine 5761-11W
Appearance
MIMO 2+2+4 2+2 2+2

Built-in triple-radio omnidirectional Built-in dual-radio omnidirectional Built-in dual-radio omnidirectional
Antenna antennas antennas antennas
Maximum Transmit Power 25 dBm/23 dBm
(Combined Power) /26 dBm
Antenna Gain 4 dBi/5 dBi 4 dBi/5 dBi 2.5 dBi/3 dBi
Maximum Power
21.2 W (excluding USB) 15.3 W (excluding USB) 12.7 W (excluding USB)
Consumption
Power Supply Mode PoE (802.3at) PoE (802.3at/af) PoE (802.3af)
Wi-Fi 6, smart antenna, USB, IoT, BLE Wi-Fi 6, smart antenna, USB, IoT, BLE
Other Features 5.0 5.0
Wi-Fi 6, smart antenna, USB, BLE 5.0
High-bandwidth and high-concurrency Common coverage scenarios, such as

Recommended Scenario scenarios such as classrooms and large labs, offices, conference rooms, Dormitories and small offices
conference rooms corridors, and parking lots
• This page lists some common indoor AP models. For details about other models,
Outdoor APs Commonly Used in Education Scenarios

AP Model AirEngine 5761R-11 AirEngine 5761R-11E AirEngine 6760R-51 AirEngine 6760R-51E
Appearance
MIMO 2+2 2+2 4+4 4+4

Built-in directional antennas Built-in directional antennas
Antenna 2.4 GHz: 65°_40° External antennas 2.4 GHz: 60°_40° External antennas
5 GHz: 65°_20° 5 GHz: 60°_20°
28 dBm/27 dBm 28 dBm/27 dBm 30 dBm/30 dBm 30 dBm/30 dBm
(Combined Power)
Antenna Gain 10 dBi/11 dBi N/A 10 dBi/11 dBi N/A
Maximum Power
17.7 W 19.6 W 35.3 W 35.3 W
Consumption
Power Supply Mode PoE (802.3at/af) PoE (802.3at/af) PoE (802.3at/bt) PoE (802.3at/bt)
Wi-Fi 6, smart antenna, BLE Wi-Fi 6, flexible radio Wi-Fi 6, smart antenna, BLE
Other Features 5.0 switching, BLE 5.0 5.0
Wi-Fi 6, BLE 5.0
Roads, squares, play fields, Roads, squares, play fields, Roads, squares, play fields, Roads, squares, play fields,
Recommended Scenario playgrounds, and parking parking lots, and playground playgrounds, and parking parking lots, and playground
lots stands lots stands
• This page lists some common outdoor AP models. For details about other
models, see the product documentation.
• 2.4 GHz: 65°_40° indicates that the 2.4 GHz horizontal beamwidth and vertical
beamwidth are 65° and 40°, respectively. The rest can be deduced by analogy.
Common Antennas in Education Scenarios

Antenna Part Number 27013720 27012565
Model ANTDG0808D4NR ANTDG1211D4NR
Antenna Type Directional Directional
Radios 2.4 GHz and 5 GHz 2.4 GHz and 5 GHz
Gain (2.4 GHz/5 GHz) 8 dBi/8 dBi 12 dBi/11 dBi
Horizontal Beamwidth
70°/70° 35°/26°
(2.4 GHz/5 GHz)
Vertical Beamwidth
70°/70° 35°/26°
(2.4 GHz/5 GHz)
Dimensions (H x W x D) 40 mm x 220 mm x 220 mm 40 mm x 450 mm x 420 mm
Connector Type 4 x Type N female connector (dual-polarized) 4 x Type N female connector (dual-polarized)
Used in uncommon floor height scenarios Used in uncommon floor height scenarios with
Remarks requiring wireless coverage high-density access requirements
Note: The antenna models above can be used by the outdoor APs mentioned on the previous page.

⚫ Minimize the number of obstacles that signals pass through. Generally, it is recommended that signals pass through a single-layer wall (120 mm brick
wall). In some special scenarios (such as gypsum walls and glass walls), signals can pass through two layers of walls.
⚫ It is not recommended that signals penetrate a 240 mm thick brick wall, concrete wall, or metal wall. If the AP penetration coverage solution is used
without meeting the specified constraints, weak signals and discontinuous roaming may occur after signals penetrate the wall. In this case, to ensure good
coverage and roaming, add APs based on the wall structure during network planning.
⚫ Deploy APs separately at intersections or corners to ensure signal coverage continuity (≥ –65 dBm) and that neighboring APs can establish neighbor
relationship tables for good roaming experience.
⚫ Install APs at least 3 m away from load-bearing columns.
2 2
1 1
Precautions for Coverage Design in Education Scenarios

⚫
about 3 m).
⚫ Indoor office is a semi-open scenario. Assuming that the edge field strength is –65 dBm, the
antennas
maximum coverage distance at 2.4 GHz is 35 m, and that at 5 GHz is 15 m.
⚫ Before deploying APs in a sub-scenario, consider factors such as obstacles and the number of
access STAs. For details about the AP deployment spacing, see the WLAN construction standards.
⚫ When an AP is installed on a load-bearing column or wall, assume that signals at the rear of the
AP are completely blocked.
⚫ Recommended AP model: AirEngine 6760-X1E or AirEngine 6761-21E.

⚫ It is mainly used in high ceiling scenarios such as auditoriums and lecture halls. It is recommended
that APs with external directional antennas be installed on the ceiling at a height of 6 m to 12 m.
⚫ Common coverage: 70° directional antennas are recommended. APs are installed on the ceiling
in W-shaped mode at an equal spacing of 15 m to 20 m.
⚫ High-density coverage: 35° directional antennas are recommended. APs are installed on the
ceiling or walls at an equal spacing of about 12 m.
Common Services and Average Bandwidth in Education Scenarios

Proportion of Services in Education Scenarios
Service Type Rate (Mbps)
Excellent Good Classroom Office Lab Library Auditorium Stadium Canteen Dormitory Playground
4K video 50 30 10% 10% 10% 10% 10% 10% 10% 10% 10%
1080p video 16 12 10% 10% 10% 10% 10% 10% 10% 20% 10%
720p video 8 4 10% 10% 10% 20% 20% 20% 20% 20% 20%
E-whiteboard 32 16 10% 0% 10% 0% 0% 0% 0% 0% 0%
Email 32 16 0% 10% 0% 0% 0% 0% 0% 0% 0%
Web browsing 8 4 20% 20% 20% 20% 20% 20% 20% 10% 20%
Gaming 2 1 10% 0% 10% 10% 10% 10% 10% 20% 10%
Instant
0.512 0.256 20% 20% 20% 20% 20% 20% 20% 10% 20%
messaging
VoIP 0.256 0.128 10% 20% 10% 10% 10% 10% 10% 10% 10%
Average Bandwidth in Each Scenario

13 12 13 10 10 10 10 11 10
(Excellent, in Mbps)


 200 STAs are connected to the network, with the concurrency rate of 30%. That is, only 60 STAs run services concurrently. When both APs and STAs
comply with Wi-Fi 6, a single STA requires 8 Mbps bandwidth and a dual-band AP (4x4 MIMO) supports concurrent access of 30 STAs (2x2 MIMO).
Therefore, two APs are required to meet the capacity requirement.
bandwidths.
Maximum Number of Concurrent STAs Supported by a Wi-Fi 6 AP in 4x4 MIMO HE40 Mode (All STAs Support Wi-Fi 6 and Dual Spatial Streams)
Maximum Number of Concurrent Maximum Number of Concurrent Maximum Number of Concurrent

STAs (Single-Radio) STAs (Dual-Radio) STAs (Triple-Radio)
1 2 Mbps 56 85 141
2 4 Mbps 39 56 95
3 6 Mbps 27 38 65
4 8 Mbps 21 30 51
5 16 Mbps 12 18 30
rate.
Contents
Common Education Sub-scenarios
Classroom Lab Library Auditorium
Stadium Canteen Dormitory Playground
WLAN Construction Standards for Classrooms
⚫ Service type: web browsing, HD video, e-whiteboard, instant ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 16
⚫ User density: about 2 per m2 during class ⚫ Capacity KPI: 100 STAs on a single AP, 30% concurrency rate
area < 1%
Recommended AP Installation
Scenario Aesthetics Capacity Coverage Deployment Solution
Type Mode
Indoor triple-radio AP with Deploy at least one AP in each classroom, with each
Common Ceiling
Medium High High built-in omnidirectional AP covering 100 users.
classroom mounting
antennas Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz
Indoor triple-radio AP with Deploy APs at a spacing of 10 m to 12 m, with each
Lecture Ceiling
Medium High High built-in omnidirectional AP covering 100 users.
hall mounting
antennas Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz
WLAN Deployment Solution for Classrooms
⚫ Common classroom: Install APs with omnidirectional antennas on the ceiling, with one AP covering 100 users.
⚫ Lecture hall: Install APs with omnidirectional antennas on the ceiling at a spacing of 10 m to 12 m, with one AP covering 100 users.
10–12 m
6–10 m
10–12 m
Common classroom Lecture hall
WLAN Construction Standards for Offices
⚫ User density: about 2 per m2 in peak hours ⚫ Capacity KPI: 30 STAs on a single AP, 40% concurrency rate
area < 1%
Installation
Scenario Aesthetics Capacity Coverage Recommended AP Type Deployment Solution
Mode
Deploy APs evenly in an office and
Indoor AP with built-in
Ceiling far away from the door.
Open office Medium High High omnidirectional antennas, supporting
mounting Channel planning: HE20 @ 2.4 GHz,
2+4 or higher spatial streams
HE40 @ 5 GHz
Indoor AP with built-in Deploy one AP in an office.
Independent Ceiling
High High High omnidirectional antennas, supporting Channel planning: HE20 @ 2.4 GHz,
office mounting
2+2 or higher spatial streams HE40 @ 5 GHz
WLAN Deployment Solution for Offices
⚫ Open office:
 Deploy one AP in an office with an area < 120 m 2.
 Deploy two APs in an office with an area of 120–240 m2.
⚫ Independent office: Deploy one AP in an office with an area < 30 m 2.
Open office area Independent office area
Single room: 30–120 m2 Single room: 120–240 m2 Single room < 30 m2 Single room < 30 m2
WLAN Construction Standards for Libraries
⚫ User density: about 1 per 2 m2 in peak hours ⚫ Capacity KPI: 60 STAs on a single AP, 30% concurrency rate
area < 1%
Bookshelf omnidirectional antennas, a spacing of about 20 m.
Medium High High Ceiling mounting
area supporting 2+4 or higher Channel planning: HE20 @ 2.4
Self-study omnidirectional antennas, a spacing of 15 m to 20 m.
Medium High High Ceiling mounting
area supporting 2+4 or higher Channel planning: HE20 @ 2.4
WLAN Deployment Solution for Libraries
⚫ Bookshelf area: Install APs on the ceiling in W-shaped mode at a spacing of about 20 m. If there are seats around, install APs
close to the seats.
⚫ Self-study area: Install APs on the ceiling in W-shaped mode at a spacing of 15 m to 20 m, with each AP covering 100 users.
20 m
15–20 m
15–20 m 15–20 m
20 m
Bookshelf area Self-study area
WLAN Construction Standards for Auditoriums
area < 1%
Floor height omnidirectional antennas, an equal spacing of 12 m to 15 m.
High High High Ceiling mounting
<6m supporting 4+4 or higher Channel planning: HE20 @ 2.4
Indoor AP with external Deploy APs in W-shaped mode at a
Floor height directional antennas, Ceiling or wall spacing of 12 m to 15 m.
High High High
>6m supporting 4+4 or higher mounting Channel planning: HE20 @ 2.4
WLAN Deployment Solution for Auditoriums
⚫ If the floor height is smaller than 6 m, use solution A: Install indoor APs with built-in omnidirectional antennas on the ceiling in W-shaped mode at an
equal spacing of 12 m to 15 m.
⚫ If the floor height is greater than 6 m, use solution A or B. In solution B, install indoor APs with 35° external directional antennas on the ceiling or walls
at a spacing of 12 m to 15 m.
⚫ Considering limited available 2.4 GHz channels, disable some 2.4 GHz radios to reduce co-channel interference when a large number of APs are deployed.
12–15 m 12–15 m
12–15 m
12–15 m
12–15 m
12–15 m
12–15 m
Solution A: ceiling mounting Solution B: wall mounting
WLAN Construction Standards for Stadiums
⚫ Service type: web browsing, HD video, instant messaging, etc. ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 8
Mbps
⚫ User density: about 2 per m2 in peak hours
area < 1%
Indoor AP with external Deploy APs at an equal spacing of 20
Stadium directional antennas Ceiling or wall m to 25 m (optional: W-shaped mode).
Medium Medium Medium
field Indoor AP with built-in mounting Channel planning: HE20 @ 2.4 GHz,
omnidirectional antennas HE40 @ 5 GHz
Indoor AP with external Deploy APs at an equal spacing of
directional antennas Ceiling or wall about 15 m.
Stand area Medium Medium High
Indoor AP with built-in mounting Channel planning: HE20 @ 2.4 GHz,
omnidirectional antennas HE40 @ 5 GHz
WLAN Deployment Solution for Stadiums (1/2): Stadium Field
⚫ Solution A uses the ceiling mounting mode: Install indoor APs with 70° external directional antennas at a spacing of 20 m to 25 m.
⚫ Solution B uses the wall mounting mode: Install indoor APs with built-in omnidirectional antennas at a spacing of 20 m to 25 m and a height of 3
m to 5 m.
⚫ Considering limited available 2.4 GHz channels, disable some 2.4 GHz radios to reduce co-channel interference when a large number of APs are
deployed.
20–25 m 20–25 m
20–25 m
30–50 m
20–25 m 20–25 m
20–25 m 20–25 m
Solution A: ceiling mounting Solution B: wall mounting
WLAN Deployment Solution for Stadiums (2/2): Stand Area
⚫ If there are fewer than 10 rows of seats, use solution A: Install indoor APs with built-in omnidirectional antennas on walls at
an equal spacing of about 15 m.
⚫ If there are more than 10 rows of seats, use solution A or B. In solution B, install indoor APs with 35 ° external directional
antennas on the ceiling or walls at a spacing of 10 m to 12 m.
15 m 15 m 10–12 m 10–12 m
15 m 15 m 10–12 m 10–12 m
Solution A: wall mounting (using APs Solution B: ceiling mounting (using APs
with omnidirectional antennas) with directional antennas)
WLAN Construction Standards for Playgrounds
⚫ Service type: web browsing, HD video, instant messaging, etc. ⚫ Rate KPI: experience rate ≥ 50 Mbps, service-assured rate ≥ 4 Mbps
area < 1%
Type Mode
Outdoor AP with
Playground Deploy APs at an equal spacing of 12 m to 15 m.
Medium High High external directional Pole mounting
stand Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz
antennas
Playground Outdoor AP with built- Deploy APs on the edge to ensure full coverage.
Low Medium Medium Pole mounting
field in directional antennas Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz
WLAN Deployment Solution for Playgrounds
⚫ For the stand area, install outdoor APs with 35 ° external directional antennas on poles at an equal spacing of 12 m to 15 m.
⚫ For the field area, install outdoor APs with built-in directional antennas on poles at an equal spacing of about 30 m.
12–15 m 12–15 m 12–15 m 12–15 m

Playground
Stand Rostrum Stand
Field
30 m 30 m 30 m 30 m
WLAN Construction Standards for Canteens
Mbps
⚫ User density: about 1 per 2 m2 in peak hours
area < 1%
Deploy APs in W-shaped mode at a

Indoor AP with built-in spacing of 15 m to 20 m.
Canteen Medium High High Ceiling mounting
omnidirectional antennas Channel planning: HE20 @ 2.4 GHz,
HE40 @ 5 GHz
WLAN Deployment Solution for Canteens
⚫ Install indoor APs with built-in omnidirectional antennas on the ceiling in W-shaped mode at an equal spacing of 15 m to 20 m.
15–20 m
15–20 m 15–20 m
15–20 m
Canteen
WLAN Construction Standards for Dormitory Rooms
⚫ Service type: web browsing, HD video, gaming, instant messaging, ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 16
etc. Mbps
⚫ User density: about 6–12 per room in peak hours ⚫ Capacity KPI: 8–12 STAs on a single AP, 100% concurrency rate
area < 1%
Deploy one AP in each

Student dormitory room.
Medium Medium High Wall plate AP Wall mounting
dormitory Channel planning: HE20 @
2.4 GHz, HE40 @ 5 GHz
WLAN Deployment Solution for Dormitory Rooms
⚫ Install one wall plate AP on the wall for each dormitory room.
⚫ Generally, an AP is installed on the wall above the door. Determine the installation position based on the actual environment.
Dormitory Dormitory Dormitory Dormitory Dormitory

room 1 room 2 room 3 room 4 room 5
Corridor
Quiz
1. (Single-answer question) During WLAN construction, it is recommended that an indoor AP

with omnidirectional antennas be installed at a height of no more than ( ) m.
A. 4
B. 6
C. 8
D. 10
1. B
Summary
⚫ This course describes the characteristics of education sub-scenarios, including auditoriums,
lecture halls, stadiums, and playgrounds. Different sub-scenarios use different WLAN
construction standards and planning rules and thereby have different WLAN planning
solutions. This course also provides suggestions on WLAN planning and deployment in
common education sub-scenarios, facilitating WLAN solution design in education WLAN
projects.
process and master the WLAN design methods of each sub-scenario.
Recommendations
intelligent world.


WLAN Planning for Hotel Scenarios
Foreword
⚫ The rapid development of the mobile Internet promotes hotels to provide convenient
network services for increasing customer flows, improving service quality, and implementing
intelligent management. This leads to increased WLAN requirements in hotels. However,
hotels have densely distributed rooms and many partitions, which restricts radio signal
transmission and causes high deployment costs if common indoor networking modes are
used. Therefore, WLAN deployment has been a pain point in hotels.
⚫ This course describes the service characteristics and WLAN requirements in hotel scenarios,
and details the rules of and precautions for designing the WLAN deployment solution in this
scenario.
Objectives

 Describe common service types and challenges in hotel scenarios.
 Describe WLAN planning methods in hotel scenarios.
 Understand WLAN deployment solutions in hotel scenarios.
Contents
1. Introduction to Hotel Scenarios
2. WLAN Planning Process in Hotel Scenarios
3. WLAN Planning Solutions in Hotel Scenarios
Hotel Scenario Overview
⚫ Space: Guest rooms, hotel lobbies, restaurants, and banquet halls have various heights.
⚫ Blocking: Rooms are densely distributed. Many walls exist and usually cause high signal attenuation.
⚫ Appearance: Hotels have high aesthetic requirements and generally hope that the decoration is not
damaged during AP deployment and cabling.
⚫ Capacity: Scenarios such as restaurants and banquet halls have a large number of concurrent users.
Hotel guest room Hotel lobby Hotel restaurant Banquet hall
Service Types in Hotel Scenarios
Hotel guest service Hotel staff service Enterprise IoT service
The services provided for hotel The services provided for hotel The services include asset
guests include video, gaming, staff include office software, management and energy
and social software services, instant messaging software, efficiency control (air
which are the major services in and email services, which conditioners and lighting
a hotel and have certain require high network stability. system).
requirements on network
bandwidth and stability.
• Diversified services are involved in hotel guest rooms, lobbies, and restaurants.
Entertainment services such as 4K video service require high bandwidth. Most
STAs are mobile phones, laptops, and tablets, with low mobility.
Challenges in Hotel Scenarios
Many walls, restricting signal Network congestion due to a Complex management of a
transmission large number of users large number of APs
...
...
AP AP
Obstacle (wall) 50–100 mobile

50–100 APs
phones
• 240 mm brick walls are mostly

• High-density user access in
used, causing severe signal
lecture halls or banquet halls • Configuration and management
attenuation.
causes network congestion and on a single-AP basis; too many
• APs with omnidirectional
sharp decrease in wireless nodes to be managed.
antennas in rooms provide poor
network bandwidth.
coverage for corridors.
Contents
WLAN Planning Process in Hotel Scenarios
for design.
⚫ Site survey Site survey

⚫ Coverage design
Coverage design
positions.
⚫ Capacity design Capacity design

Requirements Collection in Hotel Scenarios

Determine VIP coverage areas (such as guest rooms and hotel lobbies), common coverage areas (such as
Coverage area
banquet halls, restaurants, and corridors), and simple coverage areas (such as staircases and storage rooms).
Determine the signal field strength requirements in coverage areas. Generally, the coverage requirements are
Field strength as follows:
Determine the material and thickness of indoor walls, such as 240 mm brick walls, 240 mm concrete walls,
Wall type
and 12 mm glass walls.
Determine the types and number of access STAs in a coverage area. Generally, the number of access STAs can
Access STA
be estimated based on the number of access users.
Bandwidth Determine the main service types and bandwidth requirements of access users.
Determine the locations of switches upstream to the WLAN and confirm whether the PoE power supply
Switch location
distance meets the requirements.
Power supply mode Determine the power supply mode and confirm the available power supply areas and facilities on site.
Determine whether there are interference sources such as microwave ovens, Bluetooth devices, and external
Interference source
Wi-Fi devices.
Other Determine whether there are special requirements in some scenarios.
Site Survey in Hotel Scenarios

signal attenuation
Measure the floor height. The common indoor floor height is 3 m to 5 m. If there are atriums, hotel
Floor height
lobbies, or banquet halls, use a rangefinder to measure the floor height and record the result.
Check whether there is interference caused by, for example, mobile hotspots, third-party Wi-Fi devices,
Interference source
Check whether the site is consistent with that on the floor plans. If not, mark the inconsistent areas and
New obstacles take photos. For example, if there are new partitions onsite, mark the positions and attenuation values of
the partitions on the drawings.
AP installation mode Record the layout of guest rooms and determine the AP installation mode (ceiling mounting, wall
and position mounting, etc.) and locations.
ELV room location Mark the locations of ELV rooms where switches are to be deployed on the floor plans.
Mark PoE power supply cable routes on the drawings. It is recommended that the length of a PoE cable
be less than or equal to 80 m.
Record the customer's special requirements, such as requirements on delay, in-roaming packet loss rate,

Factor Description
MIMO
Indoor APs have three types of antennas: omnidirectional, directional, and smart antennas. Outdoor APs support omnidirectional
and directional antennas.
Antenna
APs with smart antennas are recommended for indoor scenarios. Select APs with directional antennas if APs need to be installed
at high places.
power the specified upper limit, the transmitted signal is stronger and the coverage distance is longer. For details, see the Country
Antenna gain
The power supply mode varies with the deployment scenario. Currently, PoE is used in most scenarios. In other scenarios, a
Power supply mode power supply can be used, or both PoE and a power supply can be used for mutual backup. Ensure that the power consumption
of APs matches the power supply capability of PoE switches.
Wi-Fi standard
Other features repeated cabling, separate management and O&M, and high hardware and O&M investment. Therefore, it is recommended that
IoT scalability be considered when you select Wi-Fi APs.
Common APs in Hotel Scenarios (1/2)

AP Model AirEngine 5762-12SW AirEngine 5762-15HW AirEngine 5761-12W
Appearance
MIMO 2+2 2+2 2+2
Built-in dual-radio omnidirectional Built-in dual-radio omnidirectional Built-in dual-radio omnidirectional

Antenna antennas antennas antennas

(Combined Power)
Antenna Gain 2 dBi/3 dBi 2.5 dBi/3 dBi 2.5 dBi/3 dBi
Maximum Power
12 W (excluding USB) 12.7 W (excluding USB) 12.7 W (excluding USB)
Consumption
Power Supply Mode PoE (802.3af) PoE (802.3af) PoE (802.3at/af)
Wi-Fi 6, smart antenna, USB, IoT, BLE

Other Features 5.0
Wi-Fi 6, smart antenna, USB, BLE 5.0 Wi-Fi 6, smart antenna, USB, BLE 5.0
Common guest rooms and hotel Common guest rooms and hotel Common guest rooms and hotel
Recommended Scenario offices offices offices
Common APs in Hotel Scenarios (2/2)

AP Model AirEngine 5761-11WD AirEngine 6760-X1/X1E
Appearance
4+8/4+4+4/
MIMO 2+2
4+6+independent scanning
Built-in dual-radio omnidirectional antennas (AirEngine
Antenna Built-in dual-radio omnidirectional antennas
6760-X1) or external antennas (AirEngine 6760-X1E)
(Combined Power)
Antenna Gain 3.5 dBi/5 dBi 4.5 dBi/6 dBi
Maximum Power
12.7 W (excluding USB) 48 W (excluding USB)
Consumption
PoE (802.3bt)
Power Supply Mode PoE (802.3at/af)
DC: 48 V
Wi-Fi 6, smart antenna (AirEngine 6760-X1), USB, IoT, and
Other Features Wi-Fi 6, smart antenna, USB, IoT, BLE 5.0
BLE 5.0
Recommended Scenario Common guest rooms and hotel offices Hotel offices, restaurants, and banquet halls
Common Antennas in Hotel Scenarios

Horizontal Beamwidth (2.4 GHz/5 GHz) 70°/70° 35°/26°
Vertical Beamwidth (2.4 GHz/5 GHz) 70°/70° 35°/26°
Used in uncommon floor height scenarios Used in uncommon floor height scenarios with
Remarks requiring wireless coverage high-density access requirements
* Note: The external directional antennas above can be used in high ceiling scenarios such as banquet halls.
Agile Distributed Networking

⚫ Agile distributed networking is recommended for WLAN deployment in guest rooms.
⚫ A central AP can supply PoE power to remote units (RUs). If the power supply distance exceeds 80 m or
more than 24 RUs are deployed, a switch can be used for extension. Each central AP can connect to a
maximum of 48 RUs.
Central AP: AirEngine 9700D-M1
Switch
RU RU RU RU RU RU
• The central AP model AirEngine 9700D-M1 usually works with RU models such
as the AirEngine 5761-11WD.
Precautions for Coverage Design in Hotel Scenarios

AP with omnidirectional antennas AP supporting external directional antennas
⚫ APs can be mounted on the ceiling (recommended, ⚫ It is mainly used in high ceiling scenarios such as
at a height of no more than 6 m) or on walls (at a hotel lobbies and banquet halls. It is recommended
height of about 3 m). that APs with directional antennas be installed on
⚫ Hotels are indoor semi-open scenarios. Assuming the ceiling at a height of 6 m to 12 m.
that the edge field strength is –65 dBm, the ⚫ Common coverage: 70° directional antennas are
maximum coverage distance at 2.4 GHz is 35 m, and recommended. APs are installed on the ceiling in W-
that at 5 GHz is 15 m. shaped mode at an equal spacing of 15 m to 20 m.
⚫ When an AP is installed on a load-bearing column ⚫ High-density coverage: 35° directional antennas
or wall, assume that signals at the rear of the AP are recommended. APs are installed on the ceiling
are completely blocked. or walls at an equal spacing of about 12 m
(optional: W-shaped mode).
⚫ Deploy a wall plate AP or an agile distributed RU in
a guest room.
Common Services and Average Bandwidth in Hotel

Scenarios
Single-Service Baseline Rate (Mbps) Proportion of Services in Hotel Scenarios
Service Type Guest Hotel Banquet
Excellent Good Restaurant Restroom
Room Area Lobby Hall
Streaming media (4K) 50 25 10% 0% 0% 0% 0%
E-whiteboard 32 16 5% 0% 0% 0% 0%
Email 32 16 3% 0% 0% 0% 0%
File transfer 32 16 2% 0% 0% 0% 0%
Streaming media (1080p) 16 12 0% 10% 10% 10% 20%
Web browsing 8 4 20% 70% 80% 70% 60%
Desktop sharing 2.5 1.2 10% 0% 0% 0% 0%
Gaming 2 1 0% 20% 0% 0% 0%
Instant messaging 0.5 0.25 30% 0% 10% 20% 20%
VoIP (voice) 0.25 0.125 20% 0% 0% 0% 0%
Average Bandwidth in Each Scenario (Excellent, in Mbps) 11 11 8 8 8


 200 STAs are connected to the network, with the concurrency rate of 30%. That is, only 60 STAs run services concurrently. When both APs and STAs
comply with Wi-Fi 6, a single STA requires 8 Mbps bandwidth and a dual-band AP (4x4 MIMO) supports concurrent access of 30 STAs (2x2 MIMO).
Therefore, two APs are required to meet the capacity requirement.
bandwidths.
Maximum Number of Concurrent STAs Supported by a Wi-Fi 6 AP in 4x4 MIMO HE40 Mode (All STAs Support Wi-Fi 6 and Dual Spatial Streams)

1 2 Mbps 56 85 141
2 4 Mbps 39 56 95
3 6 Mbps 27 38 65
4 8 Mbps 21 30 51
5 16 Mbps 12 18 30
rate.
Contents
Common Hotel Sub-scenarios
Hotel guest room Banquet hall
Hotel lobby Restaurant
WLAN Construction Standards for Guest Rooms
⚫ Service type: web browsing, HD video, gaming, instant messaging, ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 20
etc. Mbps
⚫ User density: 1 or 2 per room ⚫ Capacity KPI: 4 STAs on a single RU, 100% concurrency rate
area < 1%
Deploy one RU or wall plate AP to cover
Junction box (86
Common Agile distributed RU or wall one room.
Low High Medium mm) or wall
guest room plate AP Channel planning: HE20 @ 2.4 GHz,
mounting
HE20 @ 5 GHz
Deploy one wall plate AP to cover one or
Wall plate AP supporting
Deluxe Ceiling or wall two rooms based on wall materials.
Low High Medium 2+2 or higher spatial
suite mounting Channel planning: HE20 @ 2.4 GHz,
streams
HE20 @ 5 GHz
WLAN Deployment Solution for Guest Rooms (1/2):
Common Guest Rooms
⚫ Common guest rooms are typically partitioned by solid walls (brick walls or concrete walls). It is recommended that one RU or
wall plate AP be deployed in each guest room. The RU or wall plate AP is usually installed under a desk and on a junction box
(86 mm) or the wall. Keep the RU or wall plate AP away from metal obstacles during installation.
⚫ Deploy APs in corridors and away from the doors of guest rooms to avoid interference to the RUs or APs in the rooms.
Desk Desk Desk Desk Desk Desk
Bed Bed Bed Bed Bed Bed
Bathroom Bathroom Bathroom Bathroom Bathroom Bathroom
WLAN Deployment Solution for Guest Rooms (2/2): Deluxe
Suites
⚫ Generally, a deluxe suite consists of two or more rooms. Before deploying APs, determine the material of walls between the rooms.
 If the wall between two rooms is made of wooden or gypsum boards, use solution A: Install one AP on the ceiling and close to the partition wall to
cover the two rooms.
 If the wall between two rooms is made of bricks or concrete, use solution B: Install one AP on the ceiling or wall in each room.
Desk Desk
Bed Bed
Gypsum board wall
Concrete wall
Sofa
Sofa
Solution A: One AP Solution B: One AP
covers two rooms. covers one room.
Desk Desk
Bathroom Bathroom
WLAN Construction Standards for Lobbies
Mbps
area < 1%
Lobby floor omnidirectional antennas, an equal spacing of 18 m to 20 m.
height < 6 m supporting 2+4 or higher Channel planning: HE20 @ 2.4 GHz,
Indoor AP with external Deploy APs at an equal spacing of
Lobby floor directional antennas, 18 m to 20 m.
High Medium High Wall mounting
height > 6 m supporting 2+4 or higher Channel planning: HE20 @ 2.4 GHz,
WLAN Deployment Solution for Lobbies
⚫ If the floor height of a hotel lobby is smaller than 6 m, use solution A: Install indoor APs with built-in omnidirectional
antennas in W-shaped mode at an equal spacing of 18 m to 20 m.
⚫ If the floor height of a hotel lobby is greater than 6 m, use solution B: Install indoor APs with 70 ° external directional
antennas on walls at a spacing of 18 m to 20 m and a height of 3 m to 5 m.
18–20 m 18–20 m
18–20 m
18–20 m 18–20 m
18–20 m
Solution A: Mount APs with omnidirectional Solution B: Mount APs with directional
antennas on the ceiling. antennas on walls.
WLAN Construction Standards for Banquet Halls
Mbps
⚫ User density: about 1 per 2 m2 in peak hours
area < 1%
Indoor AP with built-in Deploy APs in W-shaped mode at an equal
Banquet hall
omnidirectional antennas, spacing of 12 m to 15 m.
(floor height High High High Ceiling mounting
supporting 4+4 or higher Channel planning: HE20 @ 2.4 GHz, HE40
< 6 m)
spatial streams @ 5 GHz
Indoor AP with external Deploy APs at an equal spacing of 12 m to
Banquet hall
directional antennas, Ceiling or wall 15 m (optional: W-shaped mode).
(floor height High High High
supporting 4+4 or higher mounting Channel planning: HE20 @ 2.4 GHz, HE40
> 6 m)
WLAN Deployment Solution for Banquet Halls
⚫ If the floor height of a banquet hall is smaller than 6 m, deploy indoor APs with built-in omnidirectional antennas according to solution A.
⚫ If the floor height of a banquet hall is greater than 6 m, deploy indoor APs with 35° external directional antennas according to solution A or B.
⚫ Considering limited available 2.4 GHz channels, disable some 2.4 GHz radios to reduce co-channel interference when a large number of APs are
deployed.
12–15 m 12–15 m
12–15 m
12–15 m 12–15 m
12–15 m
Solution A: Install APs on the ceiling in W-shaped mode Solution B: Install APs on walls at an equal spacing of
at an equal spacing of 12 m to 15 m. 12 m to 15 m.
WLAN Construction Standards for Restaurants
Mbps
⚫ User density: about 1 per 4–5 m2 during meal periods
area < 1%
Indoor AP with built-in Deploy APs in W-shaped mode at an

omnidirectional antennas, equal spacing of 15 m to 18 m.
Restaurant Low High Medium Ceiling mounting
WLAN Deployment Solution for Restaurants
⚫ Install indoor APs with built-in omnidirectional antennas on the ceiling in W-shaped mode at an equal spacing of 15 m to 18 m.
15–18 m
15–18 m 15–18 m
15–18 m
AP deployment positions in a restaurant (ceiling mounting)
Quiz
1. (Multi-answer question) Which of the following methods can be used to install an agile
distributed RU? ( )
A. Wall mounting
B. Junction box (86 mm) mounting
C. Ceiling mounting
D. Pole mounting
1. ABC
Summary
⚫ This course describes the characteristics of hotel sub-scenarios, including hotel guest rooms,
restaurants, and banquet halls. Different sub-scenarios use different WLAN construction
standards and planning rules and thereby have different WLAN planning solutions. This
course also provides suggestions on WLAN planning and deployment in common hotel sub-
scenarios, facilitating WLAN solution design in hotel WLAN projects.
process and master the WLAN design methods of each sub-scenario.
Recommendations
intelligent world.


WLAN Planning for Healthcare Scenarios
Foreword
⚫ Mobile healthcare is becoming a hot topic in hospitals' informatization construction. It is

transforming the traditional wired applications of hospitals into wireless and mobile
applications. The wireless local area network (WLAN) is typically the basis for carrying
mobile healthcare services.
⚫ This course describes WLAN service characteristics of healthcare scenarios, as well as
Objectives
 Describe common WLAN service types in healthcare scenarios.
 Describe WLAN planning methods in healthcare scenarios.
 Understand WLAN deployment solutions in healthcare scenarios.
Contents
1. Introduction to Healthcare Scenarios
2. WLAN Planning Process in Healthcare Scenarios
3. WLAN Planning Solutions for Healthcare Scenarios
Overview of Healthcare Scenarios
⚫ Space: The structure is complex in healthcare scenarios. The wall structure varies greatly in different functional areas. Most of the
scenarios involve only common floor heights, and the atrium structure in the hall may exceed 6 m.
⚫ Roaming: Service continuity is required when medical personnel are moving, ensuring no information loss and guaranteeing work
experience of medical personnel.
⚫ Networking: Hospital WLANs are divided into the intranet for medical personnel and the extranet for patients and family members.
Ward Consulting room Hall
Service Characteristics of Healthcare Scenarios
Medical personal service Patient personal service Healthcare IoT service
Services running on handheld Services running on mobile Infant abduction prevention,

PDAs and office laptops, phones of patients and family infusion monitoring, asset
including mobile ward-round, members, for example, video, management, personnel
wireless infusion, web browsing, gaming, and social media positioning, etc.
instant messaging, etc.

Service Requirements in Healthcare Scenarios
Security Quality Experience Coverage Management
• Ensures WLAN • In healthcare • Medical personnel, • Full coverage is • The deployment of

security. scenarios, a large patients, and visitors required for all numerous APs and
• Isolates the intranet number of images in have high scenarios such as the the subsequent
and extranet. the picture archiving requirements on registration hall, upgrade and
and communication WLAN roaming. consulting rooms, maintenance bring
• Avoids mutual system (PACS) need wards, and operating new pressure to
interference between to be transmitted. rooms, meeting O&M personnel.
WLAN devices and Therefore, high service requirements Therefore, WLANs
various medical bandwidth is the such as ward round must be manageable
devices. prerequisite for and Internet access. and easy to maintain.
normal medical
work.
Challenges in Healthcare Scenarios
Dense small rooms High roaming requirements
• There are many wards, with complex wall structures • High requirements are imposed on WLAN roaming to
and high wall penetration loss. ensure normal services for medical personnel.
• The WLAN may be congested, causing the bandwidth • Medical devices are sensitive to in-roaming packet
to decrease sharply. loss. Therefore, the packet loss rate must be low.
• Other uncertain Wi-Fi interference such as personal
Wi-Fi hotspots may exist.
Contents
WLAN Planning Process in Healthcare Scenarios
for WLAN design.
⚫ Site survey
Site survey

⚫ Coverage design
Coverage design
positions.
⚫ Capacity design
Capacity design
Requirements Collection in Healthcare Scenarios

Determine the VIP coverage areas (such as wards, consulting areas, and office areas), common coverage areas (such as the
Coverage area registration hall and leisure areas), and simple coverage areas (such as corridors, stairs, and restrooms), and areas that do not
need to be covered (such as storage rooms and equipment rooms).
Field strength
Wall type Determine the material and thickness of indoor walls, such as 240 mm brick walls, 240 mm concrete walls, and 12 mm glass walls.
Determine the types and number of access STAs in the coverage area, such as handheld medical devices, mobile phones, and
Access STAs
laptops.
IoT requirements Determine whether there are IoT requirements.
Interference source Determine whether there are interference sources such as medical instruments, Bluetooth devices, and external Wi-Fi devices.
Check whether medical devices have requirements on WLAN roaming and whether there are specific requirements for AP
Other
installation positions.
Site Survey in Healthcare Scenarios


signal attenuation
Measure the floor height. The common indoor floor height is 3 m to 5 m. If an atrium or hall exists, use a rangefinder to measure
Floor height
the floor height and record the result.
Check whether there are interference sources, for example, mobile hotspots, Wi-Fi devices of other vendors, and non-Wi-Fi devices
Interference source
(such as Bluetooth devices and microwave ovens).
Check whether obstacles at the site are consistent with those on the drawings. If not, mark the inconsistent areas and take photos.
New obstacles
For example, if there are new partitions onsite, mark the positions and attenuation values of the partitions on the drawings.
AP installation mode Determine the AP installation modes (ceiling mounting, wall mounting, etc.) and positions. Check whether there are special
and position requirements in consulting rooms and wards.
Power supply cabling Mark PoE cables to be routed on the drawings. It is recommended that the length of a PoE cable be less than or equal to 80 m.
Record the customer's special requirements, such as requirements on latency, in-roaming packet loss rate, and concurrency rate in
special areas.

Factor Description
MIMO
Antenna
APs with smart antennas are recommended for indoor scenarios. Select APs with directional antennas if APs need to be installed at
high places.
power the specified upper limit, the transmitted signal is stronger and the coverage distance is longer. For details, see the Country Codes
(combined power) and Channels Compliance in the product documentation.
A higher antenna gain indicates a stronger signal strength and longer coverage distance. Select antennas with a proper gain based
Antenna gain
on site requirements.
Wi-Fi standard
Common APs in Healthcare Scenarios (1/2)

AP Model AirEngine 5761-21 AirEngine 6760-X1/X1E
Appearance
4+8/4+4+4
MIMO 2+4
4+6+independent scanning
Antenna Built-in smart antennas Built-in smart antennas

(Combined Power)
Antenna Gain 4.5 dBi/5.5 dBi 4.5 dBi/6 dBi
Maximum Power
17.9 W (excluding USB) 39.9 W (excluding USB)
Consumption
Power Supply Mode PoE (802.3at/af) PoE (802.3bt/at)
Installation Mode T-rail and wall mounting T-rail and wall mounting
Other Features Wi-Fi 6, IoT via USB, BLE 5.0 Wi-Fi 6, IoT via USB, BLE 5.0
Recommended Scenario Waiting area and infusion area Conference room and office
* The table lists only some common AP models. For details about other AP models, see the product documentation.
Common APs in Healthcare Scenarios (2/2)

AP Model AirEngine 5761-11W AirEngine 5761-12W AirEngine 5761-11WD
Appearance
MIMO 2+2 2+2 2+2

Built-in dual-radio omnidirectional
Antenna Built-in smart antennas Built-in smart antennas
antennas
(Combined Power)
Antenna Gain 3.5 dBi/5 dBi 2 dBi/3 dBi 3.5 dBi/5 dBi
Maximum Power
12.7 W (excluding USB) 13.1 W (excluding USB and PoE OUT) 12.7 W (excluding USB)
Consumption
Power Supply Mode PoE (802.3at/af) PoE (802.3at/af) PoE (802.3at/af)
Junction box (86 mm), wall, and Junction box (86 mm), wall, and Junction box (86 mm), wall, and
Installation Mode ceiling mounting ceiling mounting ceiling mounting
Wi-Fi 6, smart antenna, IoT via USB,
Other Features Wi-Fi 6, IoT via USB, BLE 5.0 Wi-Fi 6, IoT via USB, BLE 5.0
BLE 5.0
Recommended Scenario Ward and consulting room Ward and consulting room Ward and consulting room
* The table lists only some common AP models. For details about other AP models, see the product documentation.
Common Antennas in Healthcare Scenarios

70°/70° 35°/26°
(2.4 GHz/5 GHz)
Vertical Beamwidth
70°/70° 35°/26°
(2.4 GHz/5 GHz)
Used in uncommon floor height scenarios requiring Used in uncommon floor height scenarios with high-
Remarks wireless coverage density access requirements
* Note: The external directional antennas above can be used in atrium scenarios such as halls.
Agile Distributed Networking in Healthcare Scenarios

⚫ Agile distributed networking is recommended for WLAN deployment in wards.
⚫ A central AP can supply PoE power to remote units (RUs). If the power supply distance exceeds 80 m or more than
24 RUs are deployed, a switch can be used for extension. Each central AP can connect to a maximum of 48 RUs.
Central AP: AirEngine 9700D-M1
Switch
RU RU RU RU RU RU
• The central AP model AirEngine 9700D-M1 usually works with RU models such
as the AirEngine 5761-11WD.

⚫ It is not recommended that APs be deployed to transmit signals to penetrate a 240 mm thick brick wall, concrete wall, or metal wall. If the AP penetration
coverage solution is used without meeting the specified constraints, weak signals and discontinuous roaming may occur after signals penetrate the wall. In
this case, to ensure good coverage and roaming, add APs based on the wall structure during WLAN planning.
2 2
1 1
Precautions for Coverage Design in Healthcare Scenarios
⚫ APs can be mounted on the ceiling (recommended, at a height of no more than 6 m) or on walls
(at a height of about 3 m).
Healthcare scenarios are indoor semi-open scenarios. Assuming that the edge field strength is –
antennas
⚫
65 dBm, the maximum coverage distance at 2.4 GHz is 35 m, and that at 5 GHz is 15 m.
⚫ When planning APs in a sub-scenario, consider factors such as obstacles and the number of
access STAs. For details about the AP deployment spacing, see the WLAN construction standards.
⚫ When an AP is installed on a load-bearing pillar or wall, assume that signals at the rear of the
AP are completely blocked.
Agile distributed AP
⚫ Deploy agile distributed APs in areas consisting of multiple independent rooms that are isolated
from each other, such as wards and consulting rooms.
⚫ It is recommended that a wall plate AP or agile distributed RU be deployed in each room.
Common Services and Average Bandwidth in Healthcare

Scenarios
Single-Service Baseline Rate
Proportion of Services in Healthcare Scenarios
(Mbps)
Service Type
Ward/Consulting Waiting Area/ Nurse Office/Conference Parking
Excellent Good Hall Canteen
Room Infusion Room Station Room Lot
4K video 50 30 10% 5% 5% 5% 10% 10% 5%
1080p video 16 12 10% 5% 5% 5% 10% 10% 5%
720p video 8 4 10% 10% 10% 20% 20% 20% 10%
Mobile ward round 8 4 10% 10% 0% 20% 0% 0% 0%
Web browsing 8 4 20% 20% 20% 20% 20% 20% 20%
Gaming 2 1 10% 10% 10% 0% 10% 10% 10%
Instant messaging 0.512 0.256 20% 20% 30% 20% 20% 20% 30%
VoIP 0.256 0.128 10% 20% 20% 10% 10% 10% 20%
Average Bandwidth in Each Scenario (Excellent, in

10 7 6 8 10 10 6
Mbps)
* Note: The data above is based on experience and can be adjusted according to user bandwidth requirements.
• If the bandwidth requirement in a scenario is not specified, evaluate the required

bandwidth based on the table above.

bandwidths.

1 2 Mbps 56 85 141
2 4 Mbps 39 56 95
3 6 Mbps 27 38 65
4 8 Mbps 21 30 51
5 16 Mbps 12 18 30
rate.
Contents
Common Healthcare Sub-scenarios
Ward Consulting room Parking lot
Hospital hall Nurse station Corridor
• In healthcare scenarios, common sub-scenarios also include the waiting area,

infusion room, and other areas with high user density.
WLAN Construction Standards for Wards and Consulting
Rooms
⚫ Service types: mobile ward round, web browsing, HD video, instant ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 16
⚫ User distribution: 1–3 three beds in a ward, with 1 or 2 users per ⚫ Capacity KPI: 12 STAs on a single AP, 50% concurrency rate
bed; 2–6 users in a consulting room ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm
2
⚫ Area: about 60 m (max) ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95%
⚫ Similar scenarios: Duty room, leader's office, treatment room, etc. area < 1%
Deploy APs evenly in a room and
Ward and Wall plate AP or agile Junction box (86 mm),
far away from the door.
consulting Medium Medium High distributed RU supporting 2+2 ceiling, or wall
Channel planning: HE20 @ 2.4
room or higher spatial streams mounting
GHz, HE40 @ 5 GHz
WLAN Deployment Solution for Wards and Consulting
Rooms
⚫ It is recommended that wall plate APs or distributed RUs be installed on walls or ceilings. If ceiling mounting is used, additional
mounting brackets are required.
⚫ If the walls between rooms are brick walls, deploy one wall plate AP or RU in each room by referring to solution A. If the walls
between rooms are made of gypsum boards or foam materials, use one AP or RU to cover two rooms by referring to solution B.
⚫ Deploy APs or RUs in the rooms evenly far away from the doors. Keep APs or RUs in the corridor at least 3 m away from the
doors of rooms.
Single room Single room Single room Single room Single room Single room Single room Single room
< 60 m2 < 60 m2 < 60 m2 < 60 m2 < 60 m2 < 60 m2 < 60 m2 < 60 m2
Gypsum Gypsum Gypsum Gypsum

Solid wall Solid wall Solid wall Solid wall board board board board
Solution A: wall mounting Solution B: ceiling mounting
WLAN Construction Standards for Waiting Areas and
Infusion Rooms
⚫ Service types: web browsing, gaming, video, instant messaging, etc. ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 8
Mbps
⚫ User density: 1 per 2 m2
⚫ Similar scenarios: Hospital pharmacy, rest area, and registration
area ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95%
area < 1%
Indoor AP with built-in Deploy APs at an equal spacing
Waiting area
omnidirectional antennas, Ceiling or wall of 15 m to 18 m.
and infusion Low High Medium
supporting 2+4 or higher mounting Channel planning: HE20 @ 2.4
room
WLAN Deployment Solution for Waiting Areas and Infusion
Rooms
⚫ Mount indoor APs with omnidirectional antennas on the ceiling.

⚫ Deploy APs at spacing of 15–18 m based on the area size.
⚫ Deploy APs at least 3 m away from load-bearing pillars.
15–18 m
15–18 m 15–18 m
WLAN Construction Standards for Hospital Halls
Mbps
⚫ Floor height:
 Common structure: 3–6 m
 Unconventional structure: > 6 m
area < 1%
Hospital hall Deploy APs evenly on the ceiling.
omnidirectional antennas,
(floor height Medium Medium High Ceiling mounting Channel planning: HE20 @ 2.4
supporting 2+4 or higher
< 6 m) GHz, HE40 @ 5 GHz
spatial streams
Indoor AP with external Deploy APs evenly on the walls of
Hospital hall
directional antennas, the hall.
(floor height Medium Medium High Wall mounting
> 6 m)
WLAN Deployment Solution for Hospital Halls
⚫ Hall with a floor height of 3–6 m: Deploy APs at an equal spacing of 15 m to 20 m and keep them at least 3 m away from
load-bearing pillars.
⚫ Hall with a floor height of greater than 6 m: Mount APs with external directional antennas evenly on the walls of the hall at
an equal spacing of 15 m to 20 m. If there is a suspended ceiling with a common floor height around the hall, APs can also be
mounted on the suspended ceiling.
15–20 m 15–20 m
15–20 m
Hall edge
Hall edge
Hall edge
Hall edge
15–20 m 15–20 m
15–20 m 15–20 m
Solution A: Ceiling mounting (3–6 m floor height) Solution B: Wall mounting (> 6 m floor height)
WLAN Construction Standards for Nurse Stations and
Corridors
⚫ Service types: Smart healthcare devices, web browsing, gaming, ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 16
video, instant messaging, etc. Mbps
2
⚫ User density: about 1 per 8–10 m ⚫ Capacity KPI: 20 STAs on a single AP, 50% concurrency rate
⚫ Floor height: 3–5 m ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm
area < 1%
Indoor AP with built-in Deploy APs at an equal
Nurse station omnidirectional antennas, spacing of 20 m to 30 m.
Low Medium Medium Ceiling mounting
and corridor supporting 2+4 or higher Channel planning: HE20 @ 2.4
WLAN Deployment Solution for Nurse Stations and
Corridors
⚫ Deploy one AP in the nurse station, and deploy APs in the corridor at a spacing of 20–30 m.
⚫ Deploy APs in corridors to ensure continuous coverage of radio signals and good roaming experience during mobile ward
rounds.
Ward Ward Ward Ward Ward Ward Ward Ward Ward

Nurse
station
20–30 m 20–30 m 20–30 m
Corridor
Ward Ward Ward Ward Ward Ward Ward Ward Ward Ward Ward
⚫ Service types: web browsing, email, instant messaging, etc. ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 10
Mbps
area < 1%

omnidirectional antennas, equal spacing of 35–40 m.
⚫ Install APs with omnidirectional antennas on the ceiling with an equal spacing of 35 m to 40 m in W-shaped mode.
experience.
35–40 m
Lane
35–40 m
Parking area
Lane
35–40 m
Quiz
1. (Single-answer question) On an agile distributed network, how many RUs can a central AP
manage at most? ( )
A. 12
B. 24
C. 36
D. 48
1. D
Summary
⚫ This course describes the service characteristics of each healthcare sub-scenario, including
wards, consulting rooms, nurse stations, and hospital halls. WLAN construction standards
and planning rules vary according to sub-scenarios and relevant WLAN planning solutions
are different as well. This course also provides suggestions on WLAN planning and
deployment for common healthcare sub-scenarios, facilitating WLAN solution design in
WLAN projects relating to healthcare scenarios.
Recommendations
intelligent world.


WLAN Planning for Retail Scenarios (Shopping
Malls and Supermarkets)
Foreword
⚫ With the rapid development of the mobile Internet, people have more and more requirements for
WLANs, and the requirements become increasingly strict. Wireless networks in shopping malls and
supermarkets are typically provided for free to attract customers, increase customer traffic, and
increase revenues.
⚫ In shopping malls and supermarkets, WLANs provide a wide coverage with a large number of access
STAs and strong signal interference. In addition, Users of different identities need to access the WLANs
and move frequently, posing great challenges to WLAN deployment in shopping malls and
supermarkets.
⚫ This course describes the service characteristics of and WLAN requirements for the shopping mall and
supermarket scenario, and describes the design rules and precautions of WLAN planning solutions in
the scenario.
Objectives
 Understand common service types and challenges in the shopping mall and supermarket scenarios.
 Understand the WLAN planning process in shopping mall and supermarket scenarios.
 Understand WLAN construction standards and deployment solutions in shopping mall and
supermarket scenarios.
Contents
1. Introduction to Shopping Mall and Supermarket Scenarios
2. WLAN Planning Process in Shopping Mall and Supermarket Scenarios
3. WLAN Planning Solutions for Shopping Mall and Supermarket Scenarios
Overview of Shopping Mall and Supermarket Scenarios
⚫ Shopping malls and supermarkets, also called commodity supermarkets, typically refer to large shopping malls that
gather a large number of merchants with the following features:
 Space: Functional areas are divided by floor, including shopping areas, food courts, and entertainment areas.
 Obstacles: Many obstacles exist in shopping malls, including partition walls between stores and load-bearing pillars. In addition,
store decoration may block signals.
 Interference: There are many Wi-Fi hotspots deployed by merchants, leading to severe interference.
Outside a shopping mall Inside a shopping mall
Characteristics of WLAN Services in Shopping Mall and
Supermarket Scenarios
Consumer services Office services in shopping malls Services of stores
Services running on users' Daily office services in Operations-related services

STAs, such as web browsing, shopping malls running on running on dedicated PCs, TVs,
instant messaging, email, office laptops, such as web large screens, POS terminals,
online music, HD videos, and browsing, instant messaging, and tablets, such as the
online gaming. email, file transfer, desktop commodity management
sharing, video conferencing, system, cashier system,
and service data transmission. advertising services, and
ordering services.
WLAN Challenges in Shopping Mall and Supermarket Scenarios
Sharp increase in the Weak signals or Signal disconnections

Much interference
number of users coverage holes during roaming
• In shopping malls, the • Some store owners set

• Different shopping
• During holidays and roaming path of a user up Wi-Fi hotspots by
malls have different
marketplace activities, is uncertain. When the themselves or
building structures and
the user concurrency user moves, the signal customers temporarily
may have coverage
rate is high, which may may be blocked or the enable personal
holes or some areas
cause network user may walk to a hotspots, thereby
with weak Wi-Fi signal
congestion, web page blind spot. As a result, interfering WLANs in
coverage. These "blind
freezing, and even Wi- the roaming is shopping malls and
spots" will lead to poor
Fi access failures. interrupted, affecting reducing the WLAN
user experience.
user experience. quality.
Contents
WLAN Planning Process in the Shopping Mall and
 Collect complete and comprehensive project and requirement information to provide
basis for design.
⚫ Site survey
Site survey
⚫ Device selection
Device selection
⚫ Coverage design
 Determine the coverage area and field strength requirements, and plan AP deployment Coverage design
positions.
⚫ Capacity design
 Estimate the number of needed APs based on the number of access STAs and service
Capacity design
requirements.
Requirements Collection in Shopping Mall and Supermarket

Scenarios
Determine VIP coverage areas (such as stores and catering areas), common coverage areas (such as public areas and
Coverage area
corridors), and simple coverage areas (such as staircases and bathrooms).
Field strength
Wall type Determine the material and thickness of indoor walls, such as 240 mm brick walls, 12 mm glass, and 240 mm concrete walls.
Access STAs Determine the types and number of access STAs in the coverage area, such as mobile phones, tablets, and laptops.
Determine the locations of the uplink wired-side switches on the WLANs and check whether the PoE power supply distance
Switch positions
meets the requirements.
Interference sources Check whether interference sources exist, such as microwave ovens, Bluetooth devices, and external Wi-Fi devices.
Check whether there are special requirements in some scenarios. High aesthetic requirements are typically exerted on stores
Others and catering areas. If APs can be installed only above the ceiling, focus on the ceiling, ventilation pipes, and fire shutter doors
that block signals.
Site Survey in Shopping Mall and Supermarket Scenarios

signal attenuation
Measure the floor height. The common indoor floor height is 3 m to 5 m. If an atrium exists, use a
Floor height
rangefinder to measure the floor height and record the result.
Check whether there is interference caused by, for example, mobile hotspots, third-party Wi-Fi devices, and
Interference sources
non-Wi-Fi devices (such as Bluetooth devices and microwave ovens).
Check whether the site is consistent with that on the floor plans. If not, mark the inconsistent areas and
New obstacles take photos. For example, if there are new partitions onsite, mark the positions and attenuation values of
the partitions on the drawings.
AP installation modes
Determine the AP installation modes (ceiling-mounted, wall-mounted, etc.) and locations.
and positions
ELV room location Mark the locations of ELV rooms where switches are to be deployed on the floor plans.
Device Model Selection Factors

Factor Description
An AP typically supports 4 to 12 spatial streams. An AP with more spatial streams supports higher throughput and larger
MIMO access capacity. Therefore, select APs with a proper number of spatial streams based on the application scenario and access
density.
Antenna
APs with smart antennas are recommended for indoor scenarios. Select APs with directional antennas if APs need to be
installed at high places.
Maximum transmit Limitations over the Wi-Fi transmit power vary depending on the country or region code. When the transmit power gets closer
power to the specified upper limit, the transmitted signal is stronger and the coverage distance is longer. For details, see the Country
Antenna gain
The power supply modes vary according to the deployment scenarios. Currently, PoE is used in most scenarios. In other
Power supply mode scenarios, the DC power supply can be used, or both power supply modes can be used together for mutual backup. Ensure
that the power consumption of APs matches the power supply capability of PoE switches.
The Wi-Fi standard has evolved to the sixth generation, and each generation is compatible with earlier ones. The latest Wi-Fi
Wi-Fi standard
6 standard greatly improves the Wi-Fi speed and capacity. Therefore, Wi-Fi 6 APs are recommended.
Other features repeated cabling, separate management and O&M, and high hardware and O&M investment. Therefore, it is recommended
that IoT scalability be considered when you select Wi-Fi APs.
Common APs in Shopping Mall and Supermarket Scenarios

AP Model AirEngine6761-21T AirEngine6760-X1 AirEngine5760-51 AirEngine5761-21
Image
MIMO 2+2+4 4+6+independent scanning 2+4+independent scanning 2+4
Built-in triple-radio Built-in dual-radio Built-in dual-radio Built-in dual-radio

Antenna omnidirectional antennas omnidirectional antennas omnidirectional antennas omnidirectional antennas

25 dBm/23 dBm/26 dBm 26 dBm/29 dBm 26 dBm/26 dBm 25 dBm/28 dBm
(Combined Power)
Antenna Gain 4 dBi/5 dBi 4.5 dBi/6 dBi 4.5 dBi/5.5 dBi 4 dBi/5 dBi
Maximum Power 48 W (excluding USB and 30 W (excluding USB and

Consumption PoE_OUT) PoE_OUT)
Power Supply Mode PoE (802.3at) PoE (802.3bt) PoE (802.3at/bt) PoE (802.3at/af)
Smart antenna, USB, and Smart antenna, USB, IoT, Smart antenna, USB, IoT, Smart antenna, USB, and
Other Features Bluetooth 5.0 BLE 5.0 BLE 5.0 Bluetooth 5.0
Important flagship stores Important flagship stores Public areas such as stores Public areas such as stores
Recommended Scenario and high-end stores and high-end stores and corridors and corridors

⚫ It is not recommended that APs be deployed to transmit signals to penetrate a 240 mm thick brick wall, concrete wall, or metal wall. If the AP penetration
coverage solution is used without meeting the specified constraints, weak signals and discontinuous roaming may occur after signals penetrate the wall. In
this case, to ensure good coverage and roaming, add APs based on the wall structure during WLAN planning.
2 2
1 1
Precautions for Coverage Design in Shopping Mall and

⚫ In shopping malls and supermarkets, indoor APs with built-in omnidirectional antennas are used in most cases. Note the following
points:
 APs can be installed on ceilings or walls. The height for ceiling-mounted installation is less than or equal to 6 m, and that for the wall-mounted
installation is about 3 m.
 Shopping malls and supermarkets are semi-open. At the edge field strength of –65 dBm, the maximum coverage distance at 2.4 GHz is 35 m, and that
at 5 GHz is 15 m.
 When planning APs in a sub-scenario, consider factors such as obstacles and the number of access STAs. For details about the AP deployment spacing,
see the WLAN construction standards.
 When an AP is installed on a load-bearing pillar or wall, signals at the rear of the AP are considered to be completely blocked.
Ceiling mounting
Wall mounting
Maximum Maximum
Height: ≤ 6 m transmission Height: about 3 m transmission
distance distance
Coverage radius Coverage radius
Common Consumer Services and Average Bandwidth in

Shopping Mall and Supermarket Scenarios
Proportion of Services
(Mbps)
Service Type
Excellent Good Corridor Catering Store Supermarket Cinema Parking Lot
Web browsing 8 4 60% 50% 50% 60% 60% 60%
Streaming media (1080p) 16 12 10% 20% 20% 10% 0% 10%
VoIP 0.25 0.125 10% 10% 0% 10% 10% 10%
Gaming 2 1 10% 10% 10% 10% 10% 10%
Instant messaging 0.5 0.25 10% 10% 20% 10% 20% 10%
Average Bandwidth in Each Scenario (Excellent, in Mbps) 7 8 8 7 6 7


bandwidths.

1 2 Mbps 56 85 141
2 4 Mbps 39 56 95
3 6 Mbps 27 38 65
4 8 Mbps 21 30 51
5 16 Mbps 12 18 30
rate.
Contents
Common Sub-scenarios in the Shopping Mall and
Corridor Store Catering
Supermarket Cinema Parking lot
WLAN Construction Standards for Public Areas and Corridors
Mbps
⚫ User density: about 1 per 6–8 square meters in peak hours
area < 1%
Installation
Mode
It is recommended that APs be
deployed near the store entrances
Public omnidirectional antennas, Ceiling
High Medium High at a spacing of 20–25 m.
area/Passageway supporting 2+4 or higher mounting
Channel planning: HE20 @ 2.4 GHz,
spatial streams
HE40 @ 5 GHz
WLAN Deployment Solution for Public Areas and Corridors
⚫ Mount indoor APs with omnidirectional antennas on the T-rails of the ceiling. For areas near store doors (far from the atrium
area), deploy the APs at a spacing of 20–25 m.
Store Store Store Store Store Store Store Store
Corridor 20–25 m 20–25 m

AP AP AP
Fence
(glass)
Atrium area
WLAN Construction Standards for Store Scenarios
Mbps
area < 1%
Type Mode
Indoor AP with built-in APs are deployed far away from corridors
omnidirectional antennas, Ceiling at an equal distance of 15 m in stores.
Store Medium Low Medium
WLAN Deployment Solution for Store Scenarios
⚫ For a store with an area of less than 60 m2 and the stores are separated by plasterboard walls, deploy APs by referring to
solution A.
⚫ For a store with an area of 60 m2 to 150 m2, deploy one AP in each store by referring to solution B.
⚫ For a store with an area of greater than 150 m2, deploy APs at an interval of 15 m to 20 m in W-shaped mode by referring to
solution C.
⚫ For counters without partitions, deploying APs above aisles by referring to solution C as well.
Area < 60 m2 Area < 60 m2 60–150 m2 60–150 m2 Area > 150 m2

15–20 m
Plasterboard wall 15–20 m

15–20 m
15–20 m
Solution A Solution B Solution C

WLAN Construction Standards for Catering Scenarios
Mbps
area < 1%
Installation
Mode
Indoor AP with built-in Deploy APs at an equal spacing of 15 m

omnidirectional antennas, Ceiling (optional: W-shaped mode).
Catering High Medium Medium
WLAN Deployment Solution for Catering Scenarios
⚫ Food court: Mount APs on the ceiling at equal spacing of 15 m over the aisles.
⚫ Catering stores: Mount APs on the ceiling in W-shaped mode at equal spacing of 15 m.
Seat Seat Seat Seat

area area area area 15 m
Aisle 15 m 15 m
Seat Seat Seat Seat 15 m 15 m

area area area area
Aisle 15 m
Food court Catering store
WLAN Construction Standards for Supermarkets
⚫ Service types: web browsing, music, HD video, instant messaging, ⚫ Rate KPI: experience rate ≥ 50 Mbps, service-assured rate ≥ 10
etc. Mbps
⚫ User density: about 1 per 3–4 square meters in peak hours ⚫ Capacity KPI: 30 STAs on a single AP, 40% concurrency rate
⚫ Floor height: 3–5 m ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm
area < 1%
Type Mode
Indoor AP with built-in Deploy APs in W-shaped mode at an equal

omnidirectional antennas, Ceiling spacing of 20 m.
Supermarket Medium Low Medium
supporting 2+4 or higher mounting Channel planning: HE20 @ 2.4 GHz, HE40 @
spatial streams 5 GHz
WLAN Deployment Solution for Super Market Scenarios
⚫ Mount indoor APs with built-in omnidirectional antennas on the ceiling in W-shaped mode at an equal spacing of 20 m.
20 m
20 m 20 m
20 m
Supermarket
WLAN Construction Standards for Cinemas
⚫ Service types: web browsing, instant messaging, etc. ⚫ Rate KPI: experience rate ≥ 50 Mbps, service-assured rate ≥ 10
Mbps
⚫ User density: about 1 per 2 square meters in peak hours
area < 1%
Installation
Scenario Aesthetics Capacity Coverage Recommended AP Type WLAN Planning Solution
Mode
Small projection hall: Only one AP needs to be

deployed in each hall.
omnidirectional antennas, Ceiling
Cinema Medium Low Medium Large projection hall: APs are deployed at an
supporting 2+4 or higher mounting
interval of 15 m to 20 m in W-shaped mode.
spatial streams
Channel planning: HE20 @ 2.4 GHz, HE40 @ 5 GHz
WLAN Deployment Solution for Cinemas
⚫ Small projection hall (with an area of less than 200 m2): Only one AP needs to be installed on the ceiling in each projection hall.
⚫ Large projection hall (with an area of more than 200 m2): APs are installed at equal spacing of 15 m to 20 m on the ceiling.
Area < 200 m2 Area < 200 m2 Area < 200 m2 Area > 200 m2
15–20 m
Small projection hall Large projection hall
⚫ Service types: web browsing, email, video, instant messaging, etc. ⚫ Rate KPI: experience rate ≥ 50 Mbps, service-assured rate ≥ 10
Mbps
area < 1%

omnidirectional antennas, an equal distance of 35–40 m.
⚫ Install APs with omnidirectional antennas on the ceiling with equal spacing of 35 m to 40 m in W-shaped mode.
experience.
35–40 m
Lane
35–40 m
Parking area
Lane
35–40 m
Quiz
1. (Multiple-Answer Question) Which of the following statements about sub-scenario

deployment solutions in shopping mall and supermarket scenarios are correct? ( )
A. In stores, APs with built-in omnidirectional antennas are usually mounted on the ceiling. The
specific solution varies according to the store size.
B. In food courts, it is recommended that APs be deployed at equal intervals over aisles to ensure
user experience.
C. In cinema scenarios, the number of APs to be deployed depends on the size of the cinemas.
D. In supermarket scenarios, it is recommended that APs be mounted on the ceiling in W-shaped

mode.
1. ABCD
Summary
⚫ This course describes the characteristics of each sub-scenario in the shopping mall and
supermarket scenarios, including stores, catering areas, and cinemas. WLAN construction
standards and planning rules vary according to sub-scenarios and relevant WLAN planning
solutions are different as well. This course also provides suggestions on WLAN planning and
deployment for common shopping mall and supermarket sub-scenarios, facilitating WLAN
solution design in WLAN projects relating to shopping mall and supermarket scenarios.
Recommendations
intelligent world.


WLAN Planning for Shop Floor and Warehouse
Scenarios
Foreword
⚫ With the introduction of Industry 4.0 and Made in China 2025, more and more data-based,
intelligent application innovations are emerging, and the manufacturing industry is also
going automated and intelligent. All these changes require the support of a mature and
stable network.
⚫ Shop floors and warehouses are characterized by large area, high floor height, severe
blocking by obstacles, and difficult deployment. In addition, some terminals in these
scenarios are sensitive to network quality, such as automated guided vehicles (AGVs).
⚫ This course describes WLAN service characteristics of shop floor and warehouse scenarios,
as well as methods, rules, and precautions for WLAN planning in these scenarios.
Objectives
 Describe common service types and challenges in shop floor and warehouse scenarios.
 Describe WLAN planning methods in shop floor and warehouse scenarios.
 Understand WLAN deployment solutions in shop floor and warehouse scenarios.
Contents
1. Introduction to Shop Floor and Warehouse Scenarios
2. WLAN Planning Process in Shop Floor and Warehouse Scenarios
3. WLAN Planning Solutions in Shop Floor and Warehouse Scenarios
Overview of Shop Floor and Warehouse Scenarios
⚫ Space: The floor height of a warehouse is high and even exceeds 10 m in some areas. Additionally, areas in the warehouse are large
and can be categorized as high or low shelf areas by shelf height.
⚫ Blocking: There are many obstacles in shop floors and warehouses, such as production devices, cable trays, load-bearing pillars,
shelves, and goods on the shelves. All these obstacles block Wi-Fi signals to some extent.
⚫ Service type: The main service types of workshops and warehouses include handheld personal digital assistants (PDAs), barcode
scanners, sensor data backhaul, AGVs, and programmable logic controller (PLC) devices.
⚫ Roaming: AGVs in shop floors and warehouses move frequently and are sensitive to packet loss and latency during roaming.
Shop floor Warehouse
• The PLC is an electronic device designed for digital operation in industrial

environments.
• The AGV is a wheeled mobile robot that can move along the conducting wires,
marking blocks, and magnetic stripes on the floor. It is mainly used in industrial
production scenarios to transport goods in shop floors and warehouses.
• After receiving dispatch instructions, AGVs automatically move to the shelves

where the goods are stacked based on the QR codes on the ground or image
identification, lift the goods to the shelves, and then transport the shelves to the
pickers. After the goods picking is complete, the AGVs carry the shelves to the
shelf area for storage.
Warehousing Industry Development Trend
⚫ The modern warehousing industry is gradually developing from manual, mechanized, to automated, intelligent
warehousing.
Phase 1 Phase 2 Phase 3 Phase 4
Intelligent
warehousing
Automated
warehousing On the basis of
Mechanized automated
warehousing AGVs, automatic warehousing, modern
Manual warehousing
shelves, and automatic application software,
Mechanical equipment Internet, and IoT
identification and
The transportation, (such as transport technologies are used
sorting technologies
storage, regulation, vehicles, robotic arms, for intelligent
are widely applied to
and control of goods and lifters) is manually warehousing control.
transport and manage
are performed operated to transport,
goods.
manually. store, and manage
goods.
Challenges of Shop Floor and Warehouse Scenarios
Complex environments IoT device access AGV roaming
• In shop floor and warehouse • The number of PLC-based • AGVs are widely used in shop
scenarios, the floor height is smart devices and sensors is floor and warehouse
high, making WLAN greatly increasing in pace scenarios. High requirements
deployment difficult. with the Industry 4.0 era. As are imposed on WLAN
• Production device, shelves, such, WLANs need to support quality (such as latency and
and goods severely block concurrent access of a large packet loss rate) to prevent
signals. number of terminals while AGV suspension or stop.
• Some production devices ensuring reliability. • AGVs frequently roam when
may interfere with Wi-Fi • There are various types of they are moving, which has
signals. terminals and high high requirements on
compatibility requirements. roaming quality.
Contents
WLAN Planning Process in Shop Floor and Warehouse
Scenarios
⚫ Requirements collection Requirements collection
for WLAN design.
⚫ Site survey Site survey

 Carry out a site survey and record more detailed information, such as the floor height, shelf
height, interference sources, and obstacles.
⚫ Coverage design
Coverage design
positions.
⚫ Capacity design
Capacity design
Requirements Collection in Shop Floor and Warehouse

Scenarios
Determine the VIP coverage areas (such as shop floors, shelf areas of warehouses, and AGV areas), common coverage areas
Coverage area
(such as office areas and goods acceptance areas), and simple coverage areas (such as corridors and restrooms).
Field strength
Wall type Determine the material and thickness of indoor walls, such as 240 mm brick walls, 12 mm glass, and 240 mm concrete walls.
Device and shelf heights Collect device and shelf heights, distribution, and goods stacking types.
Types and number of STAs Determine the types and number of access STAs in a coverage area.
Bandwidth Determine the main service types and per-user bandwidth requirement.
Interference source Check whether there are interference sources such as Bluetooth devices and external Wi-Fi devices.
Site Survey in Shop Floor and Warehouse Scenarios

signal attenuation
The floor height of a shop floor or warehouse ranges from 3 m to 12 m. Use a rangefinder to measure the
Floor height
floor height and record the result. In a warehouse scenario, you also need to measure the heights of shelves.
Check whether there are interference sources, for example, mobile hotspots, Wi-Fi devices of other vendors,
Interference source
and position

Factor Description
MIMO
Antenna
at high places.
power the specified upper limit, the transmitted signal is stronger and the coverage distance is longer. For details, see the Country
Antenna gain
Wi-Fi standard
Common APs in Shop Floor and Warehouse Scenarios (1/2)

AP Model AirEngine 6760-X1E AirEngine 6760-X1
Appearance
4+8/4+4+4/ 4+8/4+4+4/
MIMO 4+6+independent scanning 4+6+independent scanning
Antenna External antennas Built-in dual-radio or triple-radio omnidirectional antennas

(Combined Power)
Antenna Gain / 4.5 dBi/6 dBi
Maximum Power
Consumption
Power Supply Mode PoE (802.3bt) PoE (802.3bt)
Other Features Wi-Fi 6, USB, IoT, BLE 5.0 Wi-Fi 6, smart antenna, USB, IoT, BLE 5.0
Shop floors, warehouses, or AGV areas with a floor height Shop floors, warehouses, or AGV areas with a floor height
Recommended Scenario of more than 6 m of less than 6 m
Common APs in Shop Floor and Warehouse Scenarios (2/2)

AP Model AirEngine 6761-21E AirEngine 6761-21 AirEngine 5761-21
Appearance
MIMO 4+4 4+4 2+4
Built-in dual-radio omnidirectional Built-in dual-radio omnidirectional

Antenna External antennas
antennas antennas

(Combined Power)
Antenna Gain / 4.5 dBi/5.5 dBi 4 dBi/5 dBi
Maximum Power
22.6 W (excluding USB) 22.6 W (excluding USB) 17.9 W (excluding USB)
Consumption
Power Supply Mode PoE (802.3at/af) PoE (802.3at/af) PoE (802.3at/af)
Wi-Fi 6, smart antenna, USB, IoT, BLE Wi-Fi 6, smart antenna, USB, IoT, BLE
Other Features Wi-Fi 6, USB, IoT, BLE 5.0
5.0 5.0
Shop floors, warehouses, or AGV areas Shop floors, warehouses, or AGV areas Shop floors, warehouses, or AGV areas
Recommended Scenario with a floor height of more than 6 m with a floor height of less than 6 m with a floor height of less than 6 m
APs in Shop Floors and Warehouses with Harsh Environments

AP Model AirEngine 5761R-11 AirEngine 5761R-11E AirEngine 6760R-51 AirEngine 6760R-51E
Appearance
MIMO 2+2 2+2 4+4 4+4

Built-in directional antennas Built-in directional antennas
Antenna 2.4 GHz: 65°_40° External antennas 2.4 GHz: 60°_40° External antennas
5 GHz: 65°_20° 5 GHz: 60°_20°
(Combined Power)
Antenna Gain 10 dBi/11 dBi / 10 dBi/11 dBi /
Maximum Power
17.7 W 19.6 W 35.3 W 35.3 W
Consumption
Power Supply Mode PoE (802.3at/af) PoE (802.3at/af) PoE (802.3at/bt) PoE (802.3at/bt)
Wi-Fi 6, smart antenna, BLE Wi-Fi 6, flexible radio Wi-Fi 6, smart antenna, BLE
Other Features Wi-Fi 6, BLE 5.0
5.0 switching, BLE 5.0 5.0
Scenarios with high Scenarios with high Scenarios with high Scenarios with high
requirements on AP requirements on AP requirements on AP requirements on AP
Recommended Scenario protection, such as high- and protection, such as high- and protection, such as high- and protection, such as high- and
low-temperature scenarios low-temperature scenarios low-temperature scenarios low-temperature scenarios
and corrosion-prone scenarios and corrosion-prone scenarios and corrosion-prone scenarios and corrosion-prone scenarios
Common Antennas in Shop Floor and Warehouse Scenarios

70°/70° 35°/26°
(2.4 GHz/5 GHz)
Vertical Beamwidth
70°/70° 35°/26°
(2.4 GHz/5 GHz)
Remarks AGV area with a floor height of higher than 6 m Passageways between shelves
Note: The antenna models above can be used by the APs with external directional antennas mentioned on the previous page.
Precautions for Coverage Design in Shop Floor and

Warehouse Scenarios
⚫
about 3 m).
⚫ Shop floors and warehouses are semi-open scenarios. Assuming that the edge field strength is –
antennas
65 dBm, the maximum coverage distance at 2.4 GHz is 35 m, and that at 5 GHz is 15 m.
⚫ When planning APs in a sub-scenario, consider factors such as obstacles and the number of access
STAs. For details about the AP deployment spacing, see the WLAN construction standards.
⚫ When an AP is installed on a load-bearing pillar or wall, assume that signals at the rear of the AP
are completely blocked.
⚫ Recommended AP model: AirEngine 6760-X1E or AirEngine 6761-21E

⚫ In shop floors and AGV areas with a floor height of more than 6 m, 70 ° directional antennas are
recommended. Install antennas vertically to provide downward coverage at a height ranging from
6 m to 12 m, with a coverage radius ranging from 10 m to 15 m.
⚫ It is recommended that 35° directional antennas be used for covering passageways between
shelves. The installation height ranges from 3 m to 5 m, and the coverage length is 70 m.
Common Services and Average Bandwidth in Shop Floor and

Warehouse Scenarios
Proportion of Services
Single-Service Baseline Rate (Mbps) Proportion of Services in Warehouse Scenarios
Service Type in Shop Floor Scenarios
Excellent Good Shop Floor Shelf Area AGV Area
PLC 0.512 0.256 30% 0% 0%
Handheld PDA 8 4 20% 0% 0%
AGV 0.512 0.256 10% 0% 50%
Barcode scanner 0.512 0.256 20% 70% 20%
Web browsing 8 4 10% 10% 10%
Instant messaging 0.512 0.256 5% 10% 10%
VoIP 0.256 0.128 5% 10% 10%
Average Bandwidth in Each Scenario (Excellent, in Mbps) 3 2 2

bandwidths.

1 2 Mbps 56 85 141
2 4 Mbps 39 56 95
3 6 Mbps 27 38 65
4 8 Mbps 21 30 51
5 16 Mbps 12 18 30
Contents
Common Sub-scenarios of Shop Floors and Warehouses
Shop floor High-shelf area in a warehouse
Low-shelf area in a warehouse AGV area
WLAN Construction Standards for Shop Floors
⚫ Service types: handheld PDA, PLC, barcode scanner, AGV, etc. ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 4
Mbps
⚫ Floor height: < 6 m for a common shop floor; 6–12 m for an
atrium shop floor ⚫ Capacity KPI: 50 STAs on a single AP, 40% concurrency rate
⚫ Service characteristics: low bandwidth, frequent roamings, and ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm
sensitivity to delay and packet loss ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95%
area < 1%
Scenario Aesthetics Capacity Coverage Recommended AP Type Installation Mode WLAN Planning Solution
Common shop
omnidirectional antennas, equal spacing of 20–25 m.
floor (floor Low Low High Rod mounting
height < 6 m)
Indoor AP with external Deploy APs in W-shaped mode at an
Atrium shop
directional antennas equal spacing of 20–25 m.
floor (floor Low Low High Beam mounting
connected, supporting 2+4 Channel planning: HE20 @ 2.4 GHz,
height: 6–12 m)
or higher spatial streams HE20 @ 5 GHz
WLAN Deployment Solution for Shop Floors
⚫ If the height of a floor shop is less than 6 m, deploy indoor APs with built-in omnidirectional antennas along passageways at a
spacing of 20 m to 25 m. The rod mounting mode is recommended to reduce the installation height and reduce signal
blocking caused by cable trays.
⚫ If the height of a floor shop ranges from 6 m to 12 m, deploy indoor APs with external 70 ° directional antennas connected in
W-shaped mode at an equal spacing of 20 m to 25 m. The beam mounting mode is recommended.
⚫ Keep APs more than 2 m away from load-bearing pillars.
20–25 m 20–25 m
Production
20–25 m 20–25 m line 20–25 m 20–25 m
20–25 m
20–25 m
Solution A: APs with omnidirectional antennas Solution B: APs with directional antennas
(floor height < 6 m) (floor height: 6–12 m)
WLAN Construction Standards for High-Shelf Areas
⚫ Service types: barcode scanning using handheld PDAs or barcode ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 2
scanners Mbps
⚫ Shelf height: 3–12 m ⚫ Capacity KPI: 50 STAs on a single AP, 30% concurrency rate
sensitivity to latency and packet loss ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95%
area < 1%
Scenario and Recommended AP Installation
Aesthetics Capacity Coverage WLAN Planning Solution
Solution Type Mode
Solution A for Indoor AP with built-in Ceiling Deploy APs in W-shaped mode at an equal spacing
high-shelf Low Low High omnidirectional mounting or of around 45 m.
scenarios antennas rod mounting Channel planning: HE20 @ 2.4 GHz, HE20 @ 5 GHz
Deploy APs and antennas at both ends of a
Solution B for Indoor AP with Wall
passageway to provide coverage for the
high-shelf Low Low High external directional mounting or
passageway.
scenarios antennas connected rod mounting
Channel planning: HE20 @ 2.4 GHz, HE20 @ 5 GHz
WLAN Deployment Solution for High-Shelf Areas
⚫ Solution A: Mount APs with built-in omnidirectional antennas on the ceiling. The AP height is less than 12 m, and the spacing
between APs in a single passageway is about 45 m.
⚫ Solution B: Install APs with external directional antennas at both ends of a passageway. It is recommended that the APs be
installed at a height of 3 m to 5 m. A single AP can cover one or two passageways, depending on the AP model.
AP
Antenna
70 m 70 m 70 m 70 m 70 m
45 m 45 m
45 m
70 m 70 m 70 m 70 m 70 m
High-shelf solution A: APs with

omnidirectional antennas High-shelf solution B: APs with directional antennas
• You can select either of the preceding solutions based on the site requirements.
WLAN Construction Standards for Low-Shelf Areas
⚫ Service types: barcode scanning using handheld PDAs or barcode ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 2
scanners Mbps
⚫ Shelf height: around 2 m ⚫ Capacity KPI: 50 STAs on a single AP, 30% concurrency rate
sensitivity to latency and packet loss ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95%
area < 1%
Deploy APs in W-shaped mode at

Low-shelf AP with built-in Ceiling or rod an equal spacing of around 30 m.
Low Low High
area omnidirectional antennas mounting Channel planning: HE20 @ 2.4
GHz, HE40 @ 5 GHz
WLAN Deployment Solution for Low-Shelf Areas
⚫ The height of a low shelf is about 2 m, and the height of an AP is less than 6 m. Deploy APs with built-in omnidirectional
antennas in W-shaped mode at an equal spacing of 30 m on the ceiling.
30 m
30 m 30 m
30 m
Low-shelf scenario (APs with omnidirectional

antennas mounted on the ceiling)
WLAN Construction Standards for AGV Areas
⚫ Service type: AGV data transmission ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 8
Mbps
⚫ Service characteristics: low bandwidth, frequent roamings, and
sensitivity to latency and packet loss ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm
area < 1%
Deploy APs in W-shaped mode at an
AP height < Indoor AP with built-in equal spacing of 20–25 m.
Low Low High Ceiling mounting
6m omnidirectional antennas Channel planning: HE20 @ 2.4 GHz,
HE20 @ 5 GHz
Deploy APs in W-shaped mode at an
Indoor AP with external
AP height: Ceiling or rod equal spacing of 20–25 m.
Low Low High directional antennas
6–12 m mounting Channel planning: HE20 @ 2.4 GHz,
connected
HE20 @ 5 GHz
WLAN Deployment Solution for AGV Areas
⚫ At an AP height of less than 6 m, deploy APs with built-in omnidirectional antennas in W-shaped mode at an equal spacing of
20–25 m on the ceiling.
⚫ At an AP height of 6–12 m, deploy AirEngine 6761-21E APs with external 70° directional antennas connected in W-shaped
mode at an equal spacing of 20–25 m on the ceiling.
20–25 m 20–25 m
Production
20–25 m 20–25 m line 20–25 m 20–25 m
20–25 m
20–25 m
Solution A: AP with omnidirectional antennas Solution B: AP with directional antennas

(at a height of less than 6 m) (at a height of 6–12 m)
Quiz
1. (Multiple-answer question) Which of the following statements are true about WLAN
planning for a warehouse scenario? ( )
A. APs with omnidirectional antennas can be used for coverage in the low-shelf area of the
warehouse.
B. APs with directional antennas can be used for coverage in the high-shelf area of the warehouse.
C. AGVs in the warehouse do not have high requirements on the WLAN packet loss rate.
D. AGVs in the warehouse have high requirements on the WLAN roaming delay.
1. ABD
Summary
⚫ This course describes the characteristics of each sub-scenario in the shop floor and
warehouse scenario, including the shop floor, high-/low-shelf area, and AGV area. WLAN
construction standards and planning rules vary according to sub-scenarios and relevant
WLAN planning solutions are different as well. This course also provides suggestions on
WLAN planning and deployment for common shop floor and warehouse sub-scenarios,
facilitating WLAN solution design in WLAN projects relating to these scenarios.
Recommendations
intelligent world.


WLAN Planning for Outdoor Coverage
Scenarios
Foreword
⚫ The development of wireless communications has made interconnections between smart

terminals and people closer than ever. As indoor wireless coverage only cannot meet user
requirements, outdoor wireless coverage is also required more and more.
⚫ This course describes WLAN service characteristics of outdoor coverage scenarios, as well as
Objectives
 Understand common service types and challenges in outdoor coverage scenarios.
 Master WLAN planning methods for outdoor coverage scenarios.
 Master WLAN deployment solutions for outdoor coverage scenarios.
Contents
1. Introduction to Outdoor Coverage Scenarios
2. WLAN Planning Process in Outdoor Coverage Scenarios
3. WLAN Planning Solutions for Outdoor Coverage Scenarios
Overview of Outdoor Coverage Scenarios
⚫ The outdoor coverage environment is complex. Therefore, a proper network planning solution needs to be formulated based on the
actual situation. The outdoor coverage has the following characteristics:
 STAs: STAs mainly include mobile phones, tablets, and laptops which feature diversity and high mobility, and require high compatibility.
 Space: Outdoor scenarios typically involve large WLAN coverage areas, including squares and streets.
 Obstacles: Major obstacles in outdoor scenarios include buildings and trees.
 Other: In some areas, the operating environment for devices is harsh. Therefore, waterproof, dustproof, surge protection, and high and low
temperature resistance requirements must be considered.
Outdoor square Outdoor street
Challenges to WLANs in Outdoor Coverage Scenarios
Large coverage area Complex environments Much interference
• In outdoor scenarios, WLANs • Environments in outdoor • Many uncontrollable factors exist

typically provide large signal scenarios are complex with in outdoor scenarios, such as
coverage and a single AP is different building layouts, and non-Wi-Fi interference,
connected to a great number of various obstacles, such as trees temporary personal hotspots, and
STAs, thereby imposing high and large billboards. AP weather. These factors cause
requirements on AP performance. deployment positions are critical interference to WLANs, thereby
• In addition, if a temporary and need to be determined based reducing WLAN stability and
outdoor activity is held, burst on local conditions. As a result, performance.
traffic is generated. In this case, WLAN planning and design are
additional APs need to be added difficult.
temporarily to the existing WLAN • Outdoor APs with external
to improve the concurrency directional antennas are typically
capability. used, which increases the
difficulty in AP installation.
Contents
WLAN Planning Process for Outdoor Coverage Scenarios
 Collect complete and comprehensive project and requirement Requirements collection
information to provide basis for WLAN design.
⚫ Site survey
 Carry out a site survey and record more detailed information, such Site survey
as the floor height, interference sources, and obstacles.
 Determine the models of devices and antennas based on the Device selection
collected information.
⚫ Coverage design
 Determine the coverage area and field strength requirements, and Coverage design
plan AP deployment positions.
⚫ Capacity design
 Estimate the number of needed APs based on the number of access
Capacity design
STAs and service requirements.
Collecting Requirements for Outdoor Coverage Scenarios

Collect complete drawings that contain scale information in CAD, PDF, PNG, or JPG format, and learn
Drawing information
about the general environment of the coverage area in advance.
Determine the VIP coverage areas (such as pedestrian streets and squares) and common coverage
Coverage area
areas (such as passages between buildings) required by the customer.
Determine requirements for the signal field strength in the coverage area. Generally, the signal field
Field strength strength in outdoor VIP coverage areas is greater than or equal to –65 dBm, and that in common areas
is greater than or equal to –70 dBm.
Access STAs Determine the types and number of access STAs in the coverage area.
Bandwidth requirements Determine the main types of network services and per-user bandwidth requirement.
Buildings and trees Determine and record the layout of buildings and trees in the coverage area.
Installation positions and Determine the positions where APs can be installed, such as lamp poles or walls, and determine the
power supply modes available power supply facilities and areas.
Determine the locations of the uplink wired-side switches on the WLANs and check whether the PoE
Switch positions
power supply distance meets the requirements.
Check whether interference sources such as city monitoring based on wireless backhaul and microwave
stations exist.
Site Survey in Outdoor Coverage Scenarios

Obtain the environment information of the coverage area, such as the layout of surrounding buildings,
Environment
trees, obstacles, and streets.
Check the installation positions of APs, such as high buildings, street lamp poles, and surveillance poles.
Measure the height of the installation positions to check whether optical cables and power supplies can be
AP installation position
connected.
If proper installation positions do not exist, consider whether poles can be erected for AP installation.
Check whether there is interference caused by, for example, wireless backhaul, third-party Wi-Fi devices,
and non-Wi-Fi devices.
Check whether the site is consistent with that on the floor plans and maps. If not, mark the inconsistent
New obstacles areas and take photos. For example, if there are obstacles such as trees onsite, mark the positions on the
drawings.
AP installation methods Outdoor APs are usually installed on poles or walls.
Switch positions Determine the positions of the uplink switches and mark them on the drawings.
Power supply cabling than or equal to 80 m.
It is recommended that the PoE adapter be used for power supply when the outdoor distance is too long.
Device Model Selection Factors

Factor Description
An AP typically supports 4 to 12 spatial streams. An AP with more spatial streams supports higher
MIMO throughput and larger access capacity. Therefore, select APs with a proper number of spatial streams
based on the application scenario and access density.
Outdoor APs support omnidirectional and directional antennas.
Antenna APs with omnidirectional antennas are recommended for coverage in open areas such as squares and
parks. APs with directional antennas are recommended for coverage in narrow areas such as streets.
Limitations over the Wi-Fi transmit power vary depending on the country or region code. When the
Maximum transmit power transmit power gets closer to the specified upper limit, the transmitted signal is stronger and the
(combined power) coverage distance is longer. For details, see the Country Codes and Channels Compliance in the product
documentation.
A higher antenna gain indicates a stronger signal strength and longer coverage distance. Select
Antenna gain
antennas with a proper gain based on site requirements.
The power supply mode depends on the deployment scenario. It is recommended that the PoE adapter
Power supply mode
be used for power supply when the outdoor distance is long.
The Wi-Fi standard has evolved to the sixth generation, and each generation is compatible with earlier
Wi-Fi standard ones. The latest Wi-Fi 6 standard greatly improves the Wi-Fi speed and capacity. Therefore, Wi-Fi 6 APs
are recommended.
In outdoor scenarios, pay attention to special requirements for APs, such as waterproof and dustproof
Other features
capabilities, operating temperature range, and surge protection.
Common APs in Outdoor Coverage Scenarios

AP Model AirEngine 8760R-X1 AirEngine 8760R-X1E AirEngine 6760R-51 AirEngine 6760R-51E AirEngine 5761R-11 AirEngine 5761R-11E
Appearance
Built-in directional Built-in directional Built-in directional

Antenna External antennas External antennas External antennas
antennas antennas antennas
4+12/8+8/ 4+12/8+8/
MIMO 4+8+independent 4+8+independent 4+4 4+4 2+2 2+2
scanning scanning
2.4 GHz Beamwidth
180°/40° / 60°/40° / 65°/40° /
(H/V)
5 GHz Beamwidth (H/V) 180°/20° / 60°/20° / 65°/20° /
Maximum Power 53.2 W (excluding 53.2 W (excluding
35.3 W 35.3 W 17.7 W 19.6 W
Consumption PoE_OUT) PoE_OUT)
Type N female Type N female Type N female
RF port / / /
connector connector connector
Pole-mounted or Pole-mounted or Pole-mounted or Pole-mounted or Pole-mounted or Pole-mounted or
Installation Mode
wall-mounted wall-mounted wall-mounted wall-mounted wall-mounted wall-mounted
IP68 waterproof and
IP68 waterproof and IP68 waterproof and IP68 waterproof and IP68 waterproof and IP68 waterproof and
Other Features dustproof, smart
dustproof, BLE 5.0 dustproof, BLE 5.0 dustproof, BLE 5.0 dustproof, BLE 5.0 dustproof, BLE 5.0
antenna, and BLE 5.0
Note: The table lists some AP models. For details about other models, see the product documentation.
Common Antennas in Outdoor Coverage Scenarios

Antenna Part Number 27013721 27012565 27013720 27010904 27011145
Model ANTDG0407A1NS ANTDG1211D4NR ANTDG0808D4NR AD24145D00 AD5G1915
Antenna Type Omnidirectional Directional Directional Directional Directional
Radio 2.4 GHz and 5 GHz 2.4 GHz and 5 GHz 2.4 GHz and 5 GHz 2.4G 5G
Gain (2.4 GHz/5 GHz, dBi) 4/7 12/11 8/8 14 19
360/360 35/35 70/70 30/- -/15
(2.4 GHz/5 GHz)
Vertical Beamwidth
30/15 26/26 70/70 30/- -/15
(2.4 GHz/5 GHz)
Diameter x Length: 40 mm x 450 mm x 40 mm x 220 mm x 25 mm x 250 mm x 30 mm x 450 mm x

Dimensions (H x W x D) 23.8 mm x 235 mm 420 mm 220 mm 250 mm 245 mm
1 x Type N female 4 x Type N female 4 x Type N female 2 x Type N female 2 x Type N female
Connector Type connector (vertically connector (dual- connector (dual- connector (dual- connector (dual-
polarized) polarized) polarized) polarized) polarized)
Note: The antennas listed on the table are used for AP models with external antennas.
Precautions for Coverage Design in Outdoor Scenarios

⚫ In outdoor scenarios, APs are usually installed on poles or walls. It is recommended that APs and antennas be installed at a height of
3 m to 5 m.
⚫ In typical outdoor open areas (such as squares and parks), APs with external omnidirectional antennas connected are recommended.
The coverage radius of a single AP ranges from 60 m to 80 m, and the distance between APs ranges from 100 m to 120 m equally in
W-shaped mode.
⚫ APs with built-in directional antennas or APs with external directional antennas connected are recommended in typical long and
narrow outdoor areas (such as pedestrian streets and long parking lots). The coverage distance of 120 m is recommended, and the
maximum coverage distance cannot exceed 150 m. In single-side deployment, the coverage width of about 20 m is recommended,
and the maximum coverage width cannot exceed 35 m for common APs. If AirEngine8760R-X1 is used, the coverage width of about
35 m is recommended and the maximum coverage width cannot exceed 60 m. (without EIRP restriction by default)
Coverage width
Coverage distance: 120 m
AP with directional antennas
• Outdoor APs are used only for outdoor coverage and indoor APs are required for
indoor coverage.
• Outdoor omnidirectional whip antennas must be installed vertically (the

antennas must be vertical to the ground).
• Directional APs or directional antennas are recommended for roads around

buildings, and coverage in the same direction is recommended.
• Outdoor APs must not be blocked by obstacles such as trees, buildings, and
billboards, and must be far away from interference sources.
• Signals along the roads may be blocked by trees. It is recommended that the APs
be installed on the surveillance poles.
Common Services and Average Bandwidth in Outdoor

Coverage Scenarios
Single-Service Baseline Rate (Mbps) Proportion of Services
Service Type
Excellent Good Square Street Outdoor Parking Lot
Web browsing 8 4 50% 60% 35%
Streaming media
16 12 10% 10% 20%
(1080p)
VoIP 0.25 0.125 10% 10% 0%
Gaming 2 1 10% 0% 30%
Instant messaging 0.5 0.25 20% 20% 15%
Average Bandwidth in Each Scenario (Excellent, in Mbps) 6 8 8

bandwidths.
Maximum Number of Maximum Number of Maximum Number of

Concurrent STAs (Single-Radio) Concurrent STAs (Dual-Radio) Concurrent STAs (Triple-Radio)
1 2 Mbps 56 85 141
2 4 Mbps 39 56 95
3 6 Mbps 27 38 65
4 8 Mbps 21 30 51
5 16 Mbps 12 18 30
Contents
Common Sub-scenarios in Outdoor Coverage Scenarios
Square Park
Street Parking lot
WLAN Construction Standards for Square and Park Scenarios
⚫ User density: about 1 per 50–100 square meters in peak hours Mbps
area < 1%
Installation
Mode
Squares and Outdoor AP with
parks (plane- external Pole- Deploy APs in W-shaped mode at an equal spacing of 120 m.
Medium Medium Large
shaped omnidirectional mounted Channel planning: HE20 @ 2.4 GHz, HE20 or HE40 @ 5 GHz
deployment) antennas
Squares and Outdoor APs with built- Common APs are deployed at an equal distance of 20-30 m.
parks in directional antennas Pole- AirEngine8760R-X1 APs are deployed at an equal spacing of
Medium Medium Large
(single-side or with external mounted 35 m to 50 m.
deployment) directional antennas Channel planning: HE20 @ 2.4 GHz, HE20 or HE40 @ 5 GHz
Deployment Solutions for Squares and Parks
⚫ In squares and parks with large areas and many available locations, outdoor APs with external omnidirectional antennas connected can be used
with a distance of no more than 120 m.
⚫ When squares and parks are rectangular (width < 120 m), APs can be deployed on one side. When APs with built-in directional antennas are used,
the distance between APs is 20 m to 30 m. When AirEngine 8760R-X1 models are used, the distance between APs is 35 m to 50 m. In single-side
deployment mode, it is recommended that the AP coverage distance be within 120 m.
⚫ If there are EIRP restrictions, evaluate the coverage distance based on the local restrictions of different country or region codes.
120 m
120 m Width < 120 m

120 m
120 m
35–50 m 35–50 m
Solution A: Plane-shaped deployment Solution B: Single-side deployment (AirEngine 8760R-X1)
WLAN Construction Standards for Street Scenarios
area < 1%
Outdoor APs with built-in Deploy APs at an equal spacing of

directional antennas or Pole-mounted or 100 m.
Street Medium Medium Large
with external directional wall-mounted Channel planning: HE20 @ 2.4 GHz,
antennas HE20 or HE40 @ 5 GHz
WLAN Deployment Solution for Street Scenarios
⚫ APs with directional antennas are used to cover streets to reduce radio interference to buildings on both sides of the streets.
The distance between APs is about 100 m. Adjust the antenna angle to cover streets.
⚫ APs with built-in directional antennas are aesthetically pleasing and easy to deploy. The antennas do not need to be installed
but cannot be replaced and be used in complex scenarios. APs with external directional antennas connected can be flexibly
used in various complex scenarios.
100 m 100 m 100 m 100 m
Coverage area
Street
Street scenario
WLAN Construction Standards for Outdoor Parking Lot
Scenarios
area < 1%
Deploy APs in W-shaped mode at an equal
Parking lot without
Outdoor AP with external spacing of 120 m.
surrounding Low Medium Medium Pole-mounted
omnidirectional antennas Channel planning: HE20 @ 2.4 GHz, HE20
buildings
or HE40 @ 5 GHz
Parking lot with Outdoor APs with built-in Deploy APs at an equal spacing of 100 m.
Pole-mounted or
surrounding Low Medium Medium directional antennas or with Channel planning: HE20 @ 2.4 GHz, HE20
wall-mounted
buildings external directional antennas or HE40 @ 5 GHz
WLAN Deployment Solution for Outdoor Parking Lots
Without Surrounding Buildings
⚫ If there are no buildings around an outdoor parking lot, outdoor APs with external omnidirectional antennas connected can be
installed on poles with an equal spacing of about 120 m in W-shaped mode.
⚫ APs must be installed away from obstacles, such as trees and walls. Existing street lamp poles and surveillance poles, or new
erected poles can be used for AP installation.
120 m 120 m
...
...
120 m 120 m 120 m
120 m 120 m
WLAN Deployment Solution for Outdoor Parking Lots With
Surrounding Buildings
⚫ If there are buildings around an outdoor parking lot, APs with directional antennas can be installed on poles with an equal
spacing of 100 m to reduce interference to indoor areas.
⚫ APs must be installed away from obstacles, such as trees and walls. Existing street lamp poles and surveillance poles, or new
erected poles can be used for AP installation. APs can also be installed on walls if conditions permit.
100 m
Coverage area
Building
Coverage area
100 m
Quiz
1. (Multiple-Answer Question) Which of the following types of antennas are recommended

for wireless coverage in long and narrow outdoor areas (such as pedestrian streets and
long parking lots)? ( )
A. Built-in directional antennas
B. External directional antennas
C. Built-in omnidirectional antennas
D. External omnidirectional antennas
1. AB
Summary
⚫ This course describes the characteristics of each sub-scenario in outdoor coverage scenarios,
including squares, parks, streets, and parking lots. WLAN construction standards and
for common outdoor coverage sub-scenarios, facilitating WLAN solution design in WLAN
projects relating to outdoor coverage scenarios.
Recommendations
intelligent world.


WLAN Planning for Outdoor Backhaul Scenarios
Foreword
⚫ In some harsh environments facing difficult wired network construction and high costs,
wireless backhaul becomes the optimal choice for fast network connectivity. Among wireless
solutions, Wi-Fi has advantages such as proper bandwidth, long backhaul distance, and low
costs. These make Wi-Fi the best way to carry the last mile of the video security network.
⚫ This course describes WLAN service characteristics of outdoor backhaul scenarios, as well as
Objectives
 Describe common services, characteristics, and challenges in outdoor backhaul scenarios.
 Understand AP and antenna selection policies in outdoor backhaul scenarios.
 Understand how to calculate the mesh link bandwidth in outdoor backhaul scenarios.
 Describe the WLAN planning process in outdoor backhaul scenarios.
 Master WLAN deployment solutions for outdoor backhaul scenarios.
Contents
1. Introduction to Outdoor Backhaul Scenarios
2. WLAN Planning Process in Outdoor Backhaul Scenarios
3. WLAN Planning Solutions in Outdoor Backhaul Scenarios
Overview of Outdoor Backhaul Scenarios
⚫ Wireless backhaul refers to the wireless bridging between APs in mesh networking. It allows wireless local area
networks (WLANs) to be constructed in places where optical fibers and network cables are unavailable.
⚫ Outdoor backhaul scenarios have the following characteristics:
 In open outdoor scenarios, bridge APs can reach each other in line of sight (LOS) mode without obstacles between.
 The networking is flexible. You can select the point-to-point (P2P) or point-to-multipoint (P2MP) networking scheme based on
the site requirements.
Port Oil field
Challenges in Outdoor Backhaul Scenarios
High network quality
Complex environments High deployment requirements
requirements
• Outdoor backhaul can be used in • A common type of service in • Outdoor backhaul uses the mesh
multiple industries, involving outdoor backhaul is video networking architecture, which is
complex environments and backhaul. As the number and flexible and has high technical
difficult deployment. definition of cameras increase, requirements.
• There may be irresistible higher bandwidth is required for • Due to the complex environment,
obstacles (such as buildings and backhaul links. high requirements are imposed
mountains) on the backhaul • Services such as voice and real- on engineers in terms of
links, affecting the backhaul time control also have high device/antenna selection and
function. requirements on network quality, antenna alignment.
• Uncontrollable interference such as low delay and low jitter.
factors may exist in outdoor
environments, affecting backhaul
signals.
Contents
WLAN Planning Process in Outdoor Backhaul Scenarios
 Collect complete and comprehensive project and requirement information to provide
basis for WLAN design.
⚫ Site survey
Site survey
 Carry out a site survey and record more detailed information, such as the backhaul
distance, AP positions, and obstacles.
⚫ Link design Link design

 Determine the mesh network topology, such as P2P or P2MP.
Device selection
⚫ Bandwidth design
 Determine the backhaul link bandwidth based on the device model, coverage distance, Bandwidth design
and service requirements.
Requirements Collection Site Survey Link Design Device Selection Bandwidth Design
Requirements Collection in Outdoor Backhaul Scenarios

Collect complete drawings that contain scale information in CAD, PDF, PNG, or JPG format. Learn
Drawing information
about the general environment of the coverage area and deployment area in advance.
Coverage area Determine the coverage area required by the current scenario.
Field strength Determine the signal field strength requirements in the coverage area.
Access STAs Determine the types and number of access STAs in the coverage area.
Bandwidth Determine the main types of network services and per-user bandwidth requirement.
Determine and record the layout of buildings and trees in the coverage area, and check whether
Buildings and trees
there are obvious obstacles in the signal propagation path.
Installation position and Determine the positions where APs can be installed, and determine the available power supply
power supply mode facilities and areas.
Determine the locations of upstream switches and check whether the PoE power supply distance
Switch location
meets the requirements.
Interference source Check whether there are other interference sources.
Check whether there are restrictions on outdoor site construction, for example, whether outdoor
Other
sites can be deployed on the rooftop of a building.
Site Survey in Outdoor Backhaul Scenarios

Check whether there are obvious obstacles on the propagation path between the MPP and MP, such as
Environment
high-rise buildings, mountains, and trees. Mark the location and size information on the drawing.
Check the installation positions of APs, such as high buildings, street lamp poles, and monitoring poles.
Measure the heights of these positions and check whether optical cables and power supplies can be
AP installation position
connected.
If no installation condition is available, check whether new poles can be installed.
Check whether there are interference sources, for example, wireless backhaul, Wi-Fi devices of other
Interference source
vendors, and non-Wi-Fi devices.
Check whether the site is consistent with that on the floor plans and maps. If not, mark the inconsistent
New obstacles areas and take photos. For example, if there are new obstacles onsite (such as trees), mark the
positions of the obstacles on the drawings.
AP installation mode Outdoor APs are usually installed on poles or walls.
Switch location Determine the locations of uplink switches and mark them on the drawings.
Mark the PoE power supply cabling on the drawings. A PoE adapter is recommended for power supply
if the outdoor distance is long.
Record the customer's special requirements, such as network delay requirements, packet loss rate
requirements, and site construction restrictions.
Site Construction Rules

⚫ Install APs (also called sites) far away from strong-current and strong-magnetic areas, such as radar stations and
high-voltage substations.
⚫ Scan Wi-Fi interference channels near a site. Do not configure backhaul channels the same as interference
channels, or disable interference sources through coordination.
⚫ If obstacles exist on the backhaul path, the AP pole height equals the obstacle height plus the Fresnel radius.
Fresnel zone
AP1 AP2
Backhaul distance (d)
Backhaul Distance d (km) 1 2 3 4 5
Fresnel radius (r)
Fresnel Radius r (m)
4 6 7 8 9
(Rounded Up)
Obstacle height
* Take the 5 GHz frequency band as an example.
• If the Fresnel zone is blocked by obstacles, the actual bandwidth is calculated as

follows: Actual bandwidth = Theoretical bandwidth without obstacles x [1 –
(Blocked length of the Fresnel zone/2r)], where r indicates the radius of the
Fresnel zone.
Backhaul Link Design

P2P backhaul P2MP backhaul
• Each mesh point portal (MPP) establishes a backhaul link with • Each MPP establishes backhaul links with multiple MPs.
only one mesh point (MP). • Multiple MPs share backhaul link bandwidth, providing low
• One MP exclusively uses backhaul link bandwidth, providing throughput.
high throughput. • If the MPP-MP distance is less than or equal to 1 km, it is
• The P2P transmission distance should not exceed 5 km. recommended that an MPP connect to six MPs at most.
• If the MPP-MP distance ranges from 1 km to 3 km, it is
recommended that an MPP connect to three MPs at most.
• If the MPP-MP distance exceeds 3 km, P2MP transmission is
not recommended.
MP1
Backhaul link 1
MPP MP MPP
Backhaul link
MP2
Backhaul link 2
P2P backhaul P2MP backhaul
• The backhaul distance varies according to the version, model, and antenna
model. During project implementation, select the P2P or P2MP backhaul mode
based on the site requirements.
Channel Planning for Backhaul Links

⚫ Channel planning in outdoor backhaul scenarios must comply with local laws and regulations. Do not use radar channels.
⚫ The 2.4 GHz channels suffer from great interference. Therefore, the 5 GHz frequency band is recommended in backhaul scenarios.
⚫ In backhaul scenarios, the backhaul channels of the MPP and MP must be the same. For example, if the MPP uses channel 149, an
MP connected to the MPP must also use channel 149.
Mesh link 1 MP
Channel 149
MPP
Channel 149
Mesh link 2 MP
Channel 149

Factor Description
An AP typically supports 4 to 12 spatial streams. An AP with more spatial streams supports higher throughput
MIMO and larger access capacity. Therefore, select APs with a proper number of spatial streams based on the
application scenario and access density.
Directional antennas are used for long-distance wireless backhaul. The main lobes of antennas on the MPP must
Antenna cover all MPs' antennas.
Omnidirectional antennas are used for short-distance wireless backhaul.
Maximum Limitations over the Wi-Fi transmit power vary depending on the country or region code. When the transmit
transmit power power gets closer to the specified upper limit, the transmitted signal is stronger and the coverage distance is
(combined power) longer. For details, see the Country Codes and Channels Compliance in the product documentation.
A larger antenna gain indicates stronger signals and a longer backhaul distance. However, a larger antenna gain
Antenna gain also indicates a smaller antenna angle and fewer MPs that can be covered by an MPP. Therefore, select proper
antennas based on specific scenarios.
The power supply modes vary according to the deployment scenarios. Currently, PoE is used in most scenarios. In
Power supply
other scenarios, the DC power supply can be used, or both power supply modes can be used together for mutual
mode
backup. Ensure that the power consumption of APs matches the power supply capability of PoE switches.
The Wi-Fi standard has evolved to the sixth generation, and each generation is compatible with earlier ones. The
Wi-Fi standard
latest Wi-Fi 6 standard greatly improves the Wi-Fi speed and capacity. Therefore, Wi-Fi 6 APs are recommended.
Common APs in Outdoor Backhaul Scenarios (1/2)

AP Model AirEngine 8760R-X1 AirEngine 6760R-51 AirEngine 5761R-11
Appearance
MIMO 4+8 4+4 2+2
Antenna Built-in directional antennas Built-in directional antennas Built-in directional antennas

(Combined Power)
Antenna Gain 10 dBi/11 dBi 10 dBi/11 dBi 10 dBi/11 dBi
Maximum Power
53.2 W (excluding PoE OUT) 35.3 W 17.7 W
Consumption
Power Supply Mode PoE (802.3bt) PoE (802.3at/bt) PoE (802.3at/af)
Other Features Wi-Fi 6, smart antenna, BLE 5.0 Wi-Fi 6, smart antenna, BLE 5.0 Wi-Fi 6, smart antenna, BLE 5.0
* Note: The table lists some AP models. For details about other models, see the product documentation.
Common APs in Outdoor Backhaul Scenarios (2/2)

AP Model AirEngine 8760R-X1E AirEngine 6760R-51E AirEngine 5761R-11E
Appearance
8+8/4+4+4 4+4 2.4 GHz (2x2) + 5 GHz (2x2)

MIMO Or 5 GHz (2x2) + 5 GHz (2x2)
Antenna External antennas External antennas External antennas
(Combined Power)
Antenna Gain Depending on the antenna Depending on the antenna Depending on the antenna
Maximum Power
53.2 W (excluding PoE OUT) 35.3 W 19.6 W
Consumption
Power Supply Mode PoE++ (802.3bt) PoE++ (802.3bt) PoE+ (802.3at)
Wi-Fi 6, IP68 waterproof and Wi-Fi 6, IP68 waterproof and Wi-Fi 6, IP68 waterproof and
dustproof, Ethernet port surge dustproof, Ethernet port surge dustproof, Ethernet port surge
Other Features protection, antenna surge protection, protection, antenna surge protection, protection, antenna surge protection,
BLE 5.0 BLE 5.0 BLE 5.0
* Note: The table lists some AP models. For details about other models, see the product documentation.
Common Antennas in Outdoor Backhaul Scenarios

Antenna Part Number 27013721 27010904 27010906 27010889 27010890
Model ANTDG0407A1NS AD24145D00 AD515145D00 ASB115G00 ASB185G00
External directional External directional External directional External directional

Antenna Type antenna antenna antenna antenna
Directional antenna
Radios 2.4 GHz and 5 GHz 5 GHz 5 GHz 5 GHz 5 GHz
Gain (2.4 GHz/5 GHz) 12 dBi/7 dBi -/14 dBi -/14 dBi -/11.5 dBi -/19 dBi
360°/360° -/30° -/32° -/60° -/15°
(2.4 GHz/5 GHz)
Vertical Beamwidth
35°/15° -/30° -/32° -/30° -/15°
(2.4 GHz/5 GHz)
Diameter x Height: 25 mm x 250 mm x 25 mm x 220 mm x 55 mm x 230 mm x 25 mm x 250 mm x
Dimensions (H x W x D) 23.8 mm x 235 mm 250 mm 120 mm 145 mm 250 mm
1 x Type N male 2 x Type N female 2 x Type N female 2 x Type N female 2 x Type N female
Connector Type connector (single- connector (dual- connector (dual- connector (dual- connector (dual-
polarized) polarized) polarized) polarized) polarized)
Directly installed on
Remarks the AP
Pole mounting Pole mounting Pole mounting Pole mounting
* Note: The antennas listed on the table are used for AP models with external antennas.
Backhaul Antenna Selection Rules

⚫ If the MPP-MP distance is less than 500 m, the number of MPs is large, and the distribution angle is large, use omnidirectional
antennas for the MPP.
⚫ If the MPP-MP distance is greater than 500 m, the number of MPs is small, and the angles and directions are centralized, use
directional antennas for the MPP.
⚫ When directional antennas are used for the MPP, ensure that the main lobes of antennas on the MPP cover all MPs' antennas.
⚫ High-gain antennas are recommended for MPs to improve the signal strength. You only need to align MPs' antennas with the MPP's
antennas during installation.
MP1 MP2
MP1
MPP MPP
Long distance and centralized
MP distribution
Directional antennas
Omnidirectional MP2
for the MPP
antennas for the MPP
MP3 MP4
Antenna Alignment Method

Antenna azimuth measurement Preliminary alignment Fine-tuning
• Import a floor plan drawing to the • Use a compass tool to adjust the MPP • Use the antenna alignment function of
WLAN Planner. Use the ranging antenna to the corresponding angle the CloudCampus APP to fine-tune the
function of the tool to measure the based on the obtained MPP antenna antenna angle.
azimuths from the MPP to MPs and angle. • Start the CloudCampus APP, connect
from the MPs to the MPP. (Note: • Based on the obtained MP antenna to the MP, fine-tune the MP antenna
Ensure that the top of the drawing angle, use the compass tool to adjust angle, and observe the signal strength
directs to the due north.) the MP antenna to the corresponding change to find the angle when the
• When there is only one MP, the angle to align it with the MPP. optimal signal is received.
measurement result can be used as • In most cases, you only need to slightly
the azimuth of the MPP and MP. adjust the angle of the MP antenna to
• When there are multiple MPs, the align it with the MPP.
azimuth of the MPP is calculated as
MP1
follows:
antenna
 Measure the azimuth from the
MPP to each MP and record the MPP Lobe
maximum angle (X) and minimum antenna
angle (Y). Lobe MP2
 When the difference between X antenna
and Y is less than 180°: MPP Lobe
antenna angle = (X + Y)/2
 When the difference between X
and Y is greater than 180°: MPP
antenna angle = (X + Y)/2 + 180°
Bandwidth Design — P2P Scenario

⚫ In P2P scenarios, the actual bandwidth of a mesh link is related to the MIMO capability, antenna gain, backhaul
distance, frequency bandwidth, interference, and environment. Determine the backhaul link bandwidth based on
the device model, coverage distance, and service requirements.
Throughput Reference for P2P Backhaul Links (Wi-Fi 6, 5 GHz Backhaul, AirEngine 8700R or 6700R Series, 21 dBm)
Antenna Gain HE40 RSSI & Throughput (Mbps) HE80 RSSI & Throughput (Mbps)
MIMO
MPP MP 100 m 200 m 500 m 1 km 100 m 200 m 500 m 1 km
–38 dBm –46 dBm –56 dBm –64 dBm –38 dBm –46 dBm –56 dBm –64 dBm
7 dBi-360 deg 16 dBi-18 deg
270 240 200 160 550 500 380 250
4x4 11 dBi-60 deg 16 dBi-18 deg
270 250 240 180 550 500 420 380
16 dBi-18 deg 16 dBi-18 deg
270 270 240 240 550 550 500 420
* The preceding data is the bandwidth reference values for the AirEngine 8700R and AirEngine 6700R series working at the 21 dBm power in suburban
and rural areas. The EIRP restriction is not considered.
• To estimate bandwidth at a transmission distance between two distance values

listed in the table, refer to the bandwidth value of the larger distance. For
example, to estimate bandwidth value at a distance of 400 m, refer to the
bandwidth value at a transmission distance of 500 m.
Bandwidth Design — P2MP Scenario

⚫ The throughput of P2MP transmission is multiplied by the throughput impact factor based on the P2P
transmission performance. The throughput impact factor is related to the MPP:MP ratio. The following table lists
the specific ratios.
Throughput Impact Factor ⚫ The following is an example of bandwidth calculation

MPP:MP in the P2MP scenario:
MPP MP  A video backhaul scenario uses the P2MP networking
topology, where one MPP sets up backhaul links with three
1:1 1 1 MPs. Assuming that the bandwidth of a P2P backhaul link is
320 Mbps, the P2MP bandwidth is calculated as follows:
1:2 0.8 0.40  MPP's total bandwidth = 320 x 0.75 = 240 Mbps
1:3 0.75 0.25  Bandwidth of each MP = 320 x 0.25 = 80 Mbps

⚫ If the bandwidth does not meet service requirements,
1:4 0.7 0.18
use high-bandwidth channels, shorten the mesh
1:5 0.65 0.13 backhaul distance, use high-gain antennas, or reduce
the MPP:MP ratio to increase the backhaul link
1:6 0.6 0.10 bandwidth.
Contents
Common Sub-scenarios in Outdoor Backhaul Scenarios
Port (Quay crane) Metal mine haulageway
Steel plant (Bridge crane) Wind farm (Engineering vehicle inspection)
WLAN Deployment Solution for Port Backhaul Scenarios (1/2)
Scenario description
Typical Backhaul Bandwidth 2.4 GHz Number of STAs Bandwidth per Number of Networking
Scenario Service on the Mesh Network
Distance (Mbps) Coverage Per Bridge Crane Bridge Crane Bridge Cranes Topology
Video security (720p and 1080p) 4–8 No 4

Port (Quay
0.1–3 km About 35 Mbps ≤ 20 P2MP
crane)
SMS (non-real-time control) 2 Yes 1
Node Frequency Backhaul Throughput Packet Loss
Device Type Product Model Latency
Type Bandwidth MPP:MP = 1:3 MPP:MP = 1:6 Rate
AP AirEngine 5761R-11E
MPP 27010906 outdoor 5 GHz dual-polarized directional 187.5 Mbps 150 Mbps
Backhaul antenna
antenna (H32 V32 G14)
80 MHz < 20 ms < 0.1%
27010890 outdoor 5 GHz dual-polarized directional
Backhaul antenna
MP antenna (H15 V15 G19) 62.5 Mbps 25 Mbps
27013721 outdoor 2.4 GHz & 5 GHz single-polarized
Coverage antenna
omnidirectional antenna (H360 V30 G4 & H360 V15 G7)
* The backhaul throughput in the table is calculated based on the P2P rate of 250 Mbps. The actual backhaul throughput is subject to the measurement result.
• The quay crane is also called container crane on the shore. It is a professional
device for loading and unloading container ships and is usually installed on the
shore of a container terminal.
WLAN Deployment Solution for Port Backhaul Scenarios (2/2)
⚫ In a port (quay crane) backhaul scenario, the MPP-MP distance is usually less than 3 km, and the P2MP networking topology is used.
⚫ An MPP is installed on a lamp pole and connects to an uplink switch through optical fibers or network cables. MPs are installed on the quay cranes to
provide wireless data backhaul and Internet access services for STAs.
⚫ Backhaul channel: HE80 @ 5 GHz; coverage channel: HE20 @ 2.4 GHz. Small-angle high-gain directional antennas are used as backhaul antennas, and
omnidirectional antennas are used as coverage antennas.
MP1
MPP MP2
Distance ≤ 3 km, frequency bandwidth ≤ 80 MHz
MP3
5 GHz backhaul antenna
2.4 GHz & 5 GHz
coverage antenna Port (quay crane) backhaul deployment solution (P2MP)
WLAN Deployment Solution for Metal Mine Haulageway
Backhaul Scenarios (1/2)
Distance (Mbps) Coverage on Each Node Node Mining Vehicles Topology
Metal mine
10–200 m Video backhaul of dashcams 4 Yes 2 About 10 Mbps ≤ 20 P2MP
haulageway
Frequency Backhaul Throughput Packet Loss
Node Type Device Type Product Model Latency
Bandwidth MPP:MP = 1:3 MPP:MP = 1:6 Rate
MPP 27010906 outdoor 5 GHz dual-polarized 412.5 Mbps 330 Mbps
Backhaul antenna
directional antenna (H32 V32 G14)
80 MHz < 20 ms < 0.1%
27010890 outdoor 5 GHz dual-polarized
Backhaul antenna
MP directional antenna (H15 V15 G19) 137.5 Mbps 55 Mbps
27010904 outdoor 2.4 GHz dual-polarized
Coverage antenna
directional antenna (H30 V30 G14)
WLAN Deployment Solution for Metal Mine Haulageway
Backhaul Scenarios (2/2)
⚫ In a metal mine haulageway backhaul scenario, the MPP-MP distance is generally less than 200 m, and the P2MP networking topology is used.
⚫ An MPP is installed on a wall and connects to an uplink switch through optical fibers or network cables. MPs are installed on the wall of the drivage
drift to provide wireless data backhaul and Internet access services for STAs.
⚫ Backhaul channel: HE80 @ 5 GHz; coverage channel: HE20 @ 2.4 GHz. Directional antennas are used for backhaul and coverage considering that the
haulageway space is narrow.
MP1
Distance ≤ 200 m, frequency

MPP MP2
bandwidth ≤ 80 MHz
5 GHz backhaul antenna MP3
2.4 GHz & 5 GHz

coverage antenna Metal mine haulageway backhaul deployment solution (P2MP)
• In haulageway scenarios, mesh backhaul must be available in LOS. When signals

are blocked by curves, relay nodes need to be added, which must be supported
by the AP version (V200R022 recommended).
WLAN Deployment Solution for Steel Plant Backhaul
Scenarios (1/2)
Distance (Mbps) Coverage on Each Node Node Bridge Cranes Topology
Steel plant Video security (720p and 1080p) 4–8 No 4

10–500 m About 35 Mbps 1 P2P
(Bridge crane) SMS (non-real-time control) 2 Yes 1
Frequency Backhaul Throughput Packet
Bandwidth MPP:MP = 1:1 Loss Rate
MPP 27010889 outdoor 5 GHz dual-polarized directional antenna 420 Mbps
Backhaul antenna
(H60 V30 G11.5)
80 MHz < 20 ms < 0.1%
27010890 outdoor 5 GHz dual-polarized directional antenna
Backhaul antenna
MP (H15 V15 G19) 420 Mbps
Coverage antenna
WLAN Deployment Solution for Steel Plant Backhaul
Scenarios (2/2)
⚫ In a steel plant (bridge crane) backhaul scenario, the MPP-MP distance is usually no more than 500 m, and the P2P
networking topology is recommended.
⚫ An MPP is installed on the wall of a shop floor and connects to an uplink switch through optical fibers or network cables. An
MP is installed on a bridge crane to provide wireless data backhaul and Internet access services for STAs.
⚫ The bridge crane moves along the driving track. Because the moving distance is relatively short, roaming does not need to be
considered.
⚫ Backhaul channel: HE80 @ 5 GHz; coverage channel: HE20 @ 2.4 GHz.
Distance ≤ 500 m, frequency

MPP MP

Steel plant (bridge crane) backhaul deployment solution (P2P)
2.4 GHz & 5 GHz
coverage antenna
WLAN Deployment Solution for Wind Farm Backhaul
Scenarios (1/2)
Typical Number of Number of
Bandwidth 2.4 GHz Bandwidth Networking
Scenario Backhaul Service on the Mesh Network STAs on Inspection
(Mbps) Coverage per Node Topology
Distance Each Node Vehicles
Wind farm (Engineering O&M inspection (voice call, video, etc.) 4 Yes 2 About 12
0.1–1 km 1 P2P
vehicle inspection) O&M inspection (text, image, etc.) 2 Yes 2 Mbps
Frequency Backhaul Throughput Packet
Bandwidth MPP:MP = 1:1 MPP:MP = 1:2 Loss Rate
MPP 27010889 outdoor 5 GHz dual-polarized directional 80 Mbps 64 Mbps
Backhaul antenna
antenna (H60 V30 G11.5)
80 MHz < 20 ms < 0.1%
Backhaul antenna
MP omnidirectional antenna (H360 V30 G4 & H360 V15 G7) 80 Mbps 32 Mbps
Coverage antenna
WLAN Deployment Solution for Wind Farm Backhaul
Scenarios (2/2)
⚫ In a wind farm (engineering vehicle inspection) backhaul scenario, the P2P backhaul distance between the MPP and MP does
not exceed 1 km, and the P2P networking topology is used.
⚫ An MPP is installed at the bottom of a wind turbine tower and connects to an uplink switch through optical fibers or network
cables. An MP is installed on an engineering vehicle to provide wireless data backhaul and Internet access services for STAs.
⚫ Backhaul channel: HE80 @ 5 GHz; coverage channel: HE20 @ 2.4 GHz. The MP uses omnidirectional antennas for backhaul.
⚫ The engineering vehicle inspects the entire wind farm area along the road. During the process, the MP switches between
different MPP nodes (disconnection and reconnection).
MPP Distance ≤ 1 km, frequency MP

Wind farm (engineering vehicle inspection) backhaul deployment solution (P2P)

2.4 GHz & 5 GHz
backhaul/coverage antenna
Quiz
1. (Single-answer question) In outdoor backhaul scenarios, if the P2MP networking topology

is used, with how many MPs should an MPP set up backhaul links at most? ( )
A. 2
B. 4
C. 6
D. 8
1. C
Summary
⚫ This course describes the characteristics of outdoor backhaul scenarios, including ports,
metal mine haulageways, steel plants, and wind farms. WLAN construction standards and
for common outdoor backhaul sub-scenarios, facilitating WLAN solution design in WLAN
projects relating to outdoor backhaul scenarios.
Recommendations
intelligent world.


WLAN Planning for High-Density Scenarios
Foreword
⚫ With the popularization of Wi-Fi, more and more public places (such as stadiums and
venues) provide Wi-Fi hotspot coverage, facilitating people's access to Wi-Fi networks
anytime and anywhere. However, the access of a large number of users poses great
challenges to Wi-Fi builders, and how to provide good service experience in high-density
and high-concurrency scenarios becomes the key to high-density scenario coverage.
⚫ This course describes the characteristics of WLAN services in high-density scenarios, as well
as methods, rules, and precautions for WLAN planning in these scenarios.
Objectives
 Describe common service types and challenges in high-density scenarios.
 Describe the WLAN planning process in high-density scenarios.
 Understand WLAN deployment solutions in high-density scenarios.
Contents
1. Introduction to High-Density Scenarios
2. WLAN Planning Process in High-Density Scenarios
3. WLAN Planning Solutions for High-Density Scenarios
High-Density Scenario Overview
⚫ If a large number of users gather in an area, the user density (number of users per unit area) is high, and all these
users need to access the WLAN, this scenario is a high-density scenario.
⚫ To meet the access requirements of a large number of users in high-density scenarios, you need to deploy a large
number of APs. That means the distance between APs is much smaller than that in common scenarios.
⚫ Typical high-density scenarios include stadiums, exhibition centers, and concerts. This course uses stadiums as an
example.
Stadium Concert
Challenges in High-Density Scenarios
High-density access Complex scenarios Complex policies
• A large number of access • Complex scenarios, involving • Various types of terminals

terminals, distributed in high multiple industries with and high compatibility
density different service requirements
• High concurrency rate and requirements • Frequent multi-user
high capacity • Complex physical contention for resources,
• Short distance between APs, environments, and restricted resulting in poor user
generating severe device installation experience
interference • Multiple interference factors • Possible sticky STAs during
roaming, causing load
imbalance
Contents
WLAN Planning Process in High-Density Scenarios
for WLAN design.
⚫ Site survey
Site survey

⚫ Coverage design
Coverage design
positions.
⚫ Capacity design
Capacity design
Requirements Collection in High-Density Scenarios

Coverage area Determine the VIP coverage areas (such as stands and boxes) and common coverage areas (such as stairs and restrooms).
Field strength
Determine the material and thickness of indoor walls, such as 240 mm brick walls, 240 mm concrete walls, and 12 mm glass
Wall type
walls.
Access STAs Determine the types, number, and concurrency rate of access STAs in the coverage area.
Channel and EIRP

Determine the local available channels and EIRP restrictions.
restrictions
AP installation position Determine the installation positions of APs (side, overhead, or under seats).
Interference source Determine whether there are interference sources such as microwave ovens, Bluetooth devices, and external Wi-Fi devices.
Others Determine whether there are special requirements in some scenarios.
Site Survey in High-Density Scenarios


signal attenuation
Measure the floor height. The common indoor floor height is 3 m to 5 m. If an atrium, large exhibition hall, or stand area exists,
Floor height
use a rangefinder to measure the floor height and record the result.
Check whether there are interference sources, for example, mobile hotspots, Wi-Fi devices of other vendors, and non-Wi-Fi
Interference source
devices (such as Bluetooth devices and microwave ovens).
Check whether obstacles at the site are consistent with those on the drawings. If not, mark the inconsistent areas and take
New obstacles photos. For example, if there are new partitions onsite, mark the positions and attenuation values of the partitions on the
drawings.
AP installation mode and

position
Power supply cabling Mark PoE cables to be routed on the drawings. It is recommended that the length of a PoE cable be less than or equal to 80 m.
Record the customer's special requirements, such as requirements on latency, in-roaming packet loss rate, and concurrency rate
in special areas.

Factor Description
MIMO
Antenna
at high places.
Limitations over the Wi-Fi transmit power vary depending on the country or region code. When the transmit power gets closer to
Maximum transmit power
the specified upper limit, the transmitted signal is stronger and the coverage distance is longer. For details, see the Country
(combined power)
Codes and Channels Compliance in the product documentation.
Antenna gain
Wi-Fi standard
For example, in outdoor scenarios, pay attention to special requirements for APs, such as waterproof and dustproof capabilities,
Other features
operating temperature range, and surge protection.
Common APs in High-Density Scenarios

AP Model AirEngine 8760R-X1E AirEngine 6761-21E AirEngine 6760R-51E AirEngine 5761R-11E
Appearnce
2.4 GHz (2x2) + 5 GHz (2x2)

MIMO 8+8/4+4+4 4+4 4+4 Or
5 GHz (2x2) + 5 GHz (2x2)
Antenna External antennas External antennas External antennas External antennas
(Combined Power)
Antenna Gain Depending on the antenna Depending on the antenna Depending on the antenna Depending on the antenna
Maximum Power
53.2 W (excluding PoE OUT) 22.6 W (excluding USB) 35.3 W 19.6 W
Consumption
Power Supply Mode PoE++ (802.3bt) PoE+ (802.3at) PoE++ (802.3bt) PoE+ (802.3at)
Wi-Fi 6, IP68 waterproof and Wi-Fi 6, IP68 waterproof and Wi-Fi 6, IP68 waterproof and
dustproof, Ethernet port Wi-Fi 6, USB, and dustproof, Ethernet port dustproof, Ethernet port
Other Features surge protection, antenna Bluetooth surge protection, antenna surge protection, antenna
surge protection, Bluetooth surge protection, Bluetooth surge protection, Bluetooth
Recommended Scenario Outdoor stand Indoor stand and site Outdoor stand Outdoor stand
Note: The table lists some AP models with external antennas. For details about other models, see the product documentation.
• The AirEngine 6760-X1E supports the triple-radio mode, which is also applicable
to indoor stands and conference sites. For details about the parameters, see the
product manual.
Common Antennas in High-Density Scenarios

Model ANTDG1211D4NR ASB185G00
Radios 2.4 GHz and 5 GHz 5 GHz
Gain (2.4 GHz/5 GHz) 12 dBi/11 dBi 19 dBi
35°/26° 15°
(2.4 GHz/5 GHz)
Vertical Beamwidth
35°/26° 15°
(2.4 GHz/5 GHz)
Remarks Wall mounting or pole mounting Pole mounting
* Note: The antennas listed on the table are used for AP models with external antennas.
Common Installation Modes in High-Density Scenarios (1/2)
Side mode Overhead mode Under seats
Common Installation Modes in High-Density Scenarios (2/2)

Installation
Description Advantage Disadvantage
Mode
1. Line of sight (LOS) transmission between STAs and APs,
Deployed on
and controllable transmission attenuation. 1. When the installation position of APs is low, the APs
the wall in
2. APs are deployed in a line, and co-channel APs are far away are easy to reach, with poor aesthetics.
Side mode the back row
from each other, ensuring good anti-interference effect. 2. For a stand with a large row depth, supplementary
of the stand
3. The installation height is proper, making it easy to install coverage is required.
area
and maintain devices.
1. APs are difficult to install if the ceiling has a simple

1. LOS transmission between STAs and APs, and controllable
structure and high height. The construction costs are
Deployed on transmission attenuation.
high and maintenance is difficult.
Overhead the ceiling 2. Devices are easy to install if there is a catwalk in the
2. During channel planning, both the interference from
mode above the stadium.
left and right APs and the interference from front and
stand area 3. Devices are inaccessible to people, providing high safety
back APs need to be considered. The anti-interference
and better aesthetics.
effect is not as good as that in the side coverage mode.
1. The AP coverage is small, and therefore a larger

1. Through signal attenuation by obstacles such as chairs,
number of APs are required.
crowds, and stands, the coverage of a single AP can be
2. The existing building surface will be damaged,
Deployed effectively controlled. This increases the AP deployment
including the deployment of steel pipes for cabling and
under seats density and allows more users to access the network.
Under seats auxiliary materials such as AP protection boxes or
in the stand 2. It can be used as a supplement to the other two coverage
camouflage boxes.
area modes.
3. The signal coverage model varies with the number of
3. APs are installed under seats and are not easy to find,
STAs. Interference is uncontrollable compared with the
ensuring good aesthetics.
other two modes.
Common Services and Average Bandwidth in High-Density

Scenarios
Proportion of Each Service in High-Density Scenarios
Single-Service Baseline Rate (Mbps)
Service Type (Stadium as an Example)
Excellent Good Stand Area VIP Box Hall Outdoor Area
4K video 50 30 0% 20% 10% 5%
1080p video 16 12 5% 20% 10% 5%
720p video 8 4 5% 10% 10% 10%
Web browsing 8 4 30% 20% 20% 20%
Gaming 2 1 10% 10% 10% 10%
Instant messaging 0.512 0.256 30% 10% 20% 30%
VoIP 0.256 0.128 20% 10% 20% 20%
Average Bandwidth in Each Scenario (Excellent, in Mbps) 4 16 9 6

⚫ The number of concurrent STAs supported by an AP is used to calculate the number of required APs on the premise
that the coverage and capacity requirements are met. For example:
 Two hundred STAs are connected to the network, with the concurrency rate of 30%. That is, services are running on only 60 STAs
concurrently. When both APs and STAs comply with Wi-Fi 6, a single STA requires 8 Mbps bandwidth and a dual-band AP (4x4
MIMO) supports concurrent access of 30 STAs (2x2 MIMO). Therefore, two APs are required to meet the capacity requirement.
⚫ The following table lists the maximum number of concurrent STAs supported by a Wi-Fi 6 AP (4x4 MIMO, HE40) at
different bandwidths.

1 2 Mbps 56 85 141
2 4 Mbps 39 56 95
3 6 Mbps 27 38 65
4 8 Mbps 21 30 51
5 16 Mbps 12 18 30
* Note: The maximum number of concurrent STAs varies according to the AP model.
Contents
Common Sub-scenarios in High-Density Scenarios
Stand VIP box
Hall Outdoor area
WLAN Construction Standards for the Stand Area
⚫ Service type: web browsing, HD video, instant messaging, etc. ⚫ Rate KPI: experience rate ≥ 50 Mbps, service-assured rate ≥ 2 Mbps
⚫ User distribution: 2 per m2 (in the stand area) ⚫ Capacity KPI: 360 seats covered by a single AP, 70% access rate,
20% concurrency rate
⚫ Location distribution: The stands of a large- and medium-sized
stadium are divided into two to three floors and distributed in a ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm
ladder shape. ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95%
area < 1%
Deploy APs at equal spacings.
AP with external directional Side mode
Stand area Low High High Channel planning: HE20 @ 2.4 GHz,
antennas connected Overhead mode
HE20 @ 5 GHz
Indoor AP with built-in Install APs in the protection boxes
omnidirectional antennas, under the seats.
Stand area Low High High Under seats
Edge Coverage Mode for the Stand Area Scenario (1/3)
⚫ In side coverage mode, it is recommended that the coverage distance of APs be 20 rows and the maximum coverage distance be 30 rows. In
addition, you need to adjust the antenna downtilt to ensure that the antenna coverage direction is aligned with the middle of the seat.
⚫ When the antenna is installed on a wall or pole, the downtilt adjustment range is ±30°. The gradient of the outer ring stand is large, and the
downtilt adjustment may exceed 30°. Therefore, it is recommended that the antenna be installed on a horizontal pole or steel beam.
Ceiling
It is recommended
that 20 rows of
seats be covered.
It is recommended Stadium
that 20 rows of
seats be covered. Ground
⚫ In solution A, all APs work in dual-radio mode. The 2.4 GHz radio needs to be disabled for some APs. APs are deployed at an equal spacing of 6 m.
⚫ In solution B, blue APs work in dual-radio mode, and yellow APs work in dual-5G mode. APs are deployed at an equal spacing of 9 m.
⚫ Ensure that the horizontal spacing between 5 GHz radios is greater than 6 m and that between 2.4 GHz radios is greater than 18 m. The bandwidth of
all channels is 20 MHz.
6m 6m 6m 9m 9m
AP AP
Antenna Antenna 6m 6m 6m
Back Back
2.4 GHz + 5 GHz 5 GHz 5 GHz 2.4 GHz + 5 GHz 2.4 GHz + 5 GHz 5 GHz 5 GHz 2.4 GHz + 5 GHz
row row
Stand seats Stand seats

Front row Front row
Antenna feeder Antenna feeder

Solution A: Dual-radio mode Solution B: Dual-radio mode + Dual-5G mode
• Note: Not all dual-radio APs support the dual-5G mode. When selecting solution
B, ensure that the yellow APs support the dual-5G mode.
⚫ In solution C, all APs need to be configured to work in three-radio mode (two antennas are connected and the antenna spacing is
6 m). The APs are deployed at an equal spacing of 12 m.
⚫ Ensure that the horizontal spacing between 5 GHz radios is greater than 6 m and that between 2.4 GHz radios is greater than 12
m. The bandwidth of all channels is 20 MHz.
12 m 12 m
AP
6m 6m
Antenna
2.4 GHz + 5 GHz 5 GHz 2.4 GHz + 5 GHz 5 GHz 2.4 GHz + 5 GHz 5 GHz Back row
Stand seats
Front row
Antenna feeder
Solution C: Triple-radio mode
Ceiling Installation Mode for the Stand Area Scenario
⚫ When APs are installed on the ceiling, it is recommended that a single AP cover 20 rows. The maximum number of rows is 30. For details about the
AP deployment solution, see the edge installation solution (solutions A, B, and C).
⚫ If the AP installation height is less than 20 m, the minimum horizontal spacing between 5 GHz radios is 6 m. If the AP installation height is greater
than 20 m but less than 30 m, the minimum horizontal spacing between 5 GHz radios is 8 m.
⚫ If the ceiling height is greater than 30 m, the ceiling installation mode is not recommended. It is recommended that the ceiling be installed on the
edge or seat.
20 rows 20 rows 1 Installation height < 20 m AP
Ceiling
Minimum: 6 m
Antenna Antenna
2.4 GHz + 5 GHz 5 GHz
2 Installation height: 20–30 m AP

No more than 30 m
Antenna Antenna
Minimum: 8 m
2.4 GHz + 5 GHz 5 GHz
* Only AP positions are shown in the figure. Ground Horizontal spacing between antennas
(solution C is used as an example) Antenna feeder
Seat Installation Mode for the Stand Area Scenario
⚫ Indoor APs with built-in omnidirectional antennas are installed in non-metal protection boxes under seats.
⚫ The horizontal distance between APs is 6 m. One AP is deployed every four rows of seats in the vertical direction. The
following figure shows the staggered AP deployment positions. Each AP covers three rows to its front and one row to its rear.
6m 6m 6m
9F Back row
8F
7F
6F Vertical coverage: 5 rows
5F
4F
3F
2F
1F Front row
Stadium
WLAN Construction Standards for VIP Boxes
⚫ Service types: web browsing, HD video, game, instant messaging, ⚫ Rate KPI: experience rate ≥ 100 Mbps, service-assured rate ≥ 20
etc. Mbps
⚫ User distribution: 6–10 persons per 20 m2 for a small VIP box or ⚫ Capacity KPI: 20 STAs on a single AP, 50% concurrency rate
30–40 persons per 100 m2 for a large VIP box ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm
⚫ Location distribution: Generally, VIP boxes are located right below ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95%
the stand on the second floor.
area < 1%

VIP box High High High Ceiling mounting Channel planning: HE20 @ 2.4 GHz,
HE20 @ 5 GHz
spatial streams
WLAN Deployment Solution for VIP Boxes
⚫ If the area of a single room is less than 50 m2, deploy one AP in each room by referring to solution A.
⚫ If the area of a single room is greater than 50 m2, deploy APs are deployed at an equal spacing of about 15 m near the wall
by referring to solution B.
Stadium Stadium
Glass Glass
Room area < 50 m2 Room area > 50 m2
15 m
One side of the wall One side of the wall
Solution A Solution B
WLAN Construction Standards for Hall Scenarios
⚫ Service types: web browsing, file transfer, HD video, instant ⚫ Rate KPI: experience rate ≥ 50 Mbps, service-assured rate ≥ 6 Mbps
messaging, etc. ⚫ Capacity KPI: 40 STAs on a single AP, 30% concurrency rate
⚫ User distribution: one user per 4–5 m2 ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm
⚫ Floor height: 3 m to 6 m in common areas; depending on the ⚫ Stability KPI: delay @ 95% area < 20 ms, packet loss rate @ 95%
actual situation in atrium areas
area < 1%

Hall Medium Medium High Ceiling or wall mounting Channel planning: HE20 @ 2.4
GHz, HE20 @ 5 GHz
spatial streams
WLAN Deployment Solution for Hall Scenarios
⚫ For areas with a floor height of 3 m to 6 m, install APs on the ceiling at an equal spacing of 18 m to 25 m by referring to
solution A.
⚫ For areas with a floor height of more than 6 m, install APs on load-bearing pillars or other existing buildings at an equal
spacing of 18 m to 25 m by referring to solution B.
⚫ Deploy APs far away from the seat areas of the stadium.
Stadium seats Stadium seats

Entrance Entrance Entrance Entrance Entrance Entrance
Floor height < 6 m Floor height > 6 m
18–25 m 18–25 m 18–25 m 18–25 m
Load-bearing Load-bearing pillar Load-bearing

pillar pillar
Solution A: Ceiling mounting Solution B: Wall mounting
WLAN Construction Standards for Outdoor Areas
⚫ Service types: web browsing, HD video, instant messaging, etc. ⚫ Rate KPI: experience rate ≥ 50 Mbps, service-assured rate ≥ 4 Mbps
⚫ User distribution: about one user per 20–30 m2 ⚫ Capacity KPI: 80 STAs on a single AP, 20% concurrency rate
⚫ Floor height: not involved in outdoor open areas ⚫ Coverage KPI: RSSI @ 95% area ≥ –65 dBm
area < 1%
Deploy APs at an equal

Outdoor AP with built-in antennas,
Outdoor spacing of 40 m.
Low Low High supporting 2+2 or more spatial Wall mounting
area Channel planning: HE20
streams
@ 2.4 GHz, HE20 @ 5 GHz
WLAN Deployment Solution for Outdoor Areas
⚫ Outdoor APs with built-in directional antennas are recommended in outdoor areas (such as stadiums and the periphery).
⚫ Deploy APs along the exterior wall at a height of 3 m to 6 m and at a spacing of 40 m. The maximum coverage distance of a
single AP is about 180 m (without considering EIRP restrictions).
Exterior wall
Distance between APs: 40 m
Stadium
Quiz
1. In high-density scenarios, what is the recommended minimum horizontal distance between

5 GHz radios? ( )
A. 4 m
B. 6 m
C. 8 m
D. 10 m
1. B
Summary
⚫ This course describes the characteristics of high-density sub-scenarios, including the stand,
VIP box, hall, and outdoor area. Different sub-scenarios use different WLAN construction
standards and planning rules and thereby have different WLAN planning solutions. This
course also provides suggestions on WLAN planning and deployment in common high-
density sub-scenarios, facilitating WLAN solution design in high-density WLAN projects.
process and master the WLAN design methods of each high-density sub-scenario.
Recommendations
intelligent world.


WLAN Optimization Solution
Foreword
⚫ With the rapid development of wireless local area networks (WLANs), more and more
enterprises have entered the fully-wireless office era and are replacing wired networks with
WLANs. As such, WLAN optimization becomes an important process in WLAN construction,
optimization, and maintenance, and is also the most important guarantee for network
quality and user experience.
⚫ This course introduces you to the overall WLAN optimization process, adjustment in each
optimization phase, and how to use related tools.
Objectives
 Describe the WLAN optimization process.
 Describe the contents of WLAN optimization.
 Understand how to use WLAN optimization tools.
Contents
1. Overview of WLAN Optimization
2. WLAN Optimization Tools
3. WLAN Optimization Solutions
4. WLAN Optimization Cases
Background of WLAN Optimization
Increasing Wi-Fi nodes make planning, deployment, and maintenance difficult.
Difficult planning, lack of professional planning Complex WLAN deployment
1 Difficult to evaluate the signal strength and radio 2 SSID, security, authentication, traffic, and
interference application configurations
⚫ No professional evaluation and design, OA Production Surveillance
and ransom site selection network network network
⚫ Sharp increase in AP
⚫ Improper channel design quantity
⚫ Insufficient consideration for network ⚫ Doubling parameters
security ⚫ Two sets of wired and
AP AP AP wireless networks
Difficult to ensure network reliability Increased O&M costs

3 Problems such as wireless intrusion, wireless
interference, and reliability technology faults
? 4 Complex network, deteriorated overall
network quality
⚫ Network coverage holes, causing ⚫ Poor network quality, increasing
access failures in some areas O&M costs
⚫ Severe radio interference and ⚫ No consideration for reuse, and
increased network loss repeated construction
⚫ Security risks, vulnerable to attacks ⚫ Imbalance between coverage,
WAC Web
⚫ Weak disaster recovery (DR) capacity, and costs
capability
Introduction to WLAN Optimization
⚫ WLAN optimization involves site survey on customers' requirements, network evaluation, and a series
of optimization actions to resolve problems such as poor wireless service experience, high O&M costs,
and difficult fault locating.
Evaluation
High level Low level and
design (HLD) design (LLD) optimization
Site Deployment
survey and
acceptance
WLAN optimization is an indispensable part of WLAN construction.
WLAN Optimization Panorama
WLAN optimization
Network Network solution
Network
information Optimization solution design implementation, optimization,
evaluation
collection and acceptance
Customer requirement Networking Configuration

Service test Performance acceptance test
checklist optimization optimization
Modules
Version and Coverage Capacity

User questionnaire optimization optimization Function acceptance test
configuration analysis
Channel Client
optimization Optimization
Ranging instrument eDesk WLAN Tester 2.0
GPS CloudCampus APP WLAN Planner iPerf

Tools
Telescope
WLAN Tester 2.0

Reports
Network survey Network quality Network implementation,

Optimization solution report
report evaluation report optimization, & acceptance report
Contents
1. WLAN Optimization Overview
Functions of the CloudCampus APP
⚫ The CloudCampus APP is a mobile app that integrates functions such as field strength detection and interference
test. It is used for actual test and acceptance for a deployed WLAN, reducing the workload of wireless O&M
personnel and simplifying maintenance. The CloudCampus APP consists of the following functional modules:
 Network: displays basic information about the currently connected network. The title displays the SSID name (including the
frequency band and Wi-Fi protocol). Other information includes the BSSID, RSSI, channel, MAC address, negotiated link rate, and
IP address. It also provides functions such as Wi-Fi experience and speed test.
 Tool: includes various tools, including project delivery, coverage test, business test, scene test, and manufacturer customization.
Network Tool
• This course uses the CloudCampus APP 3.22.9.1 for Android as an example.
• In the Tool module, the network evaluation mainly uses the coverage test and
business test. Other functions are not described in this course.
Network
Basic network information Wi-Fi experience Speed test
✓ Wi-Fi protocol ✓ Signal strength Internet
✓ Signal strength ✓ Ping packet delay ✓ Network delay
✓ Channel ✓ Download Rate ✓ Download rate
✓ Frequency ✓ Website loading time ✓ Upload rate
bandwidth ✓ Security detection
✓ Negotiated rate Intranet
✓ Network delay
✓ Download rate
✓ Upload rate
Tool
• Wi-Fi Status: displays the status of the current Wi-Fi network, such as the signal strength,
channel, and negotiated rate.
• Find AP: displays the vendors of neighboring APs, roughly locates the APs, and checks
interference in the environment.
• Interference: displays the signal interference of the current network, including the name,
working channel, and strength of the interference signal.
• Terminal Scan: obtains information about unauthorized access terminals anytime, facilitating
terminal management by network O&M personnel.
• Ping: allows you to perform connectivity test, with common ping addresses preset in the APP.
• Speed Test: supports network speed tests for the Internet and intranet.
• iPerf: works with an iPerf server to test the iPerf performance on the intranet.
• Roaming experience: allows you to walk in the entire network coverage area and perform
continuous dotting tests to test the roaming function.
• Game Test: allows you to check the network stability and test the fluctuation and packet loss
rate of the network.
• Tracert: is a route tracing function used to trace the path along which data is routed to the
destination address.
• Wi-Fi stability: allows you to test the stability of the current Wi-Fi network based on the real-
time signal strength and connection rate.
• Walking Test: is a test conducted while you are walking. It allows you to detect changes in the
Wi-Fi network status and services, and monitor the Wi-Fi signal strength and gateway
connectivity in real time.
Contents

◼ Networking Optimization
▫ Configuration Optimization
▫ Capacity Optimization
▫ Coverage Optimization
▫ Channel Optimization
▫ Client Optimization

WLAN Optimization Solution Design
⚫ Based on the problems found in network evaluation, the WLAN optimization solution design formulates a detailed
network rectification solution and provides guidance for customers to adjust the network. It is recommended that
the optimization solution be designed from the following six modules:
Module Description Optimization Object Optimization Mode

Network architecture optimization, VLAN assignment, device
Networking Wired network connected
security configuration optimization, device reliability Manual design
optimization to APs
optimization, version upgrade, etc.
Radio parameter optimization (power, channel, EDCA
Configuration
parameters, short GI, etc.), authentication policy optimization, WAC Manual design
optimization
security policy optimization, reliability optimization, etc.
Adjustment for the number of APs, AP upgrade and Manual design +
Capacity optimization AP
replacement, etc. Simulation tool
Adjustment for AP installation positions, the number of APs, Manual design +
Coverage optimization AP
antenna positions, AP transmit power, etc. Simulation tool
Manual design +
Channel optimization Adjustment for APs' working channels AP
Simulation tool
Adjustment for the driver version and preferred frequency band
Client optimization STA Manual design
of the wireless network adapter, WLAN bearer mode, etc.
Overview of Networking Optimization
⚫ Networking optimization is a wired network optimization solution, which includes the following contents:
Networking architecture Network planning Wired-side function

optimization optimization optimization
• Networking: WAC + Fit AP, mesh, or • Networking between the WAC and • Control broadcast domain: user
cloud management APs: Layer 2 or Layer 3 isolation and port isolation
• WAC deployment: in-path or off-path • Data forwarding mode: direct • Address pool capacity: IP pool
• Reliability: VRRP, dual-link, N+1, etc. forwarding or tunnel forwarding • DHCP function: DHCP aging time and
• Device selection: WAC, AP, switch, etc. • VLAN planning: management VLAN lease renewal
and service VLAN • Control multicast: multicast packet
...
• IP address planning: management suppression
address and service address ...
• SSID planning: SSIDs for employees
and guests
• Access control policy: ACL, etc.
• Security policy: WPA/WPA2/WPA3
...
• Networking architecture optimization: Before project implementation, the

networking architecture is determined based on the customer network status and
requirements. The networking architecture will not change greatly in the future
and is not be described in detail here. We can learn more about different WLAN
architectures and networking modes in the course WLAN Networking
Architectures.
Network Planning Optimization
Optimization Item Optimization Description
Management addresses of APs and WACs are separated from service addresses of STAs, facilitating
management and control.
The address pool resources match the network capacity plan. This prevents STA access failures caused by
insufficient IP addresses in the address pool.
IP address
optimization Avoid using 169.254.1.1 as the gateway address of the address pool, which conflicts with the default address
when the AP is not online.
In scenarios where users move frequently, the IP addresses used by online STAs are not released in the address
pool, wasting IP address resources. You are advised to shorten the lease of the address pool so that IP
addresses can be reclaimed in a timely manner.
It is recommended that the AP management VLAN be separated from the user service VLAN to prevent loops.
Do not set the AP management VLAN and user service VLAN to VLAN 1 to prevent loops.
VLAN division For a project with a large number of APs, different SSIDs can use different service VLANs to prevent broadcast
storms caused by large VLAN broadcast domains.
Ensure that the single service VLAN is not excessively large.
Wired-Side Function Optimization — Layer 2 Isolation
⚫ When the Layer 2 broadcast domain on a network is large, normal broadcast packets (such as ARP packets) affect
the network, especially on a WLAN (where broadcast packets are sent at the lowest rate), consuming a large
amount of air interface resources. Therefore, on a WLAN, if no Layer 2 communication is required, you are advised
to enable Layer 2 isolation.
 User isolation
[WAC-wlan-view] traffic-profile name test

[WAC-wlan-traffic-prof-test] user isolate l2
 In direct forwarding scenarios, configure port isolation on the switch port connected to the AP.
[SW] interface GigabitEntherent 0/0/1

[SW-GigabitEntherent0/0/1] port-isolate enable
• After Layer 2 isolation is enabled, STAs in the same network segment cannot
transfer files to each other or ping each other. Therefore, do not enable Layer 2
isolation for sites that require mutual access between LANs.
Wired-Side Function Optimization — Multicast Packet Suppression
⚫ Similar to broadcast packets, multicast packets are sent at low rates on the wireless side. If there are a large number of multicast
packets on the network, a large number of air interface bandwidth resources are wasted, causing fluctuation on the WLAN.
Therefore, multicast packets need to be suppressed in both the uplink and downlink directions.
 In direct forwarding scenarios, configure a traffic policy on the switch interface directly connected to the AP to control the multicast rate.
[SW] traffic classifier test

[SW-classifier-test] if-match destination-mac 0100-5e00-0000 mac-address mask ffff-ff00-0000
[SW] traffic behavior test
[SW-behavior-test] statistic enable
[SW-behavior-test] car cir 100
[SW] traffic policy test
[SW-policy-test] classifier test behavior test
[SW] interface GigabitEthernet 0/0/1
[SW-GigabitEthernet0/0/1] traffic-policy test outbound
[SW-GigabitEthernet0/0/1] traffic-policy test inbound
 The AP performs multicast suppression on uplink packets from STAs.
[AC-wlan-view] traffic-profile name test

[AC-wlan-traffic-prof-test] traffic-optimize multicast-suppression packets 1000
• In scenarios with multicast services, you are advised to set this parameter based
on the site requirements.
Contents

▫ Networking Optimization
◼ Configuration Optimization

Configuration Optimization
⚫ Configuration optimization is mainly implemented for software features. Different parameter settings of the same function affect the
implementation effect and are also applicable to different scenarios. You can adjust function configurations to ensure WLAN
experience.
Access control for weak- Disconnecting weak- Application protocol-
Smart roaming Airtime fair scheduling
signal STAs signal STAs based QoS policy
STA1 STA2 STA1 STA2

WAC
Within the same
STA3 STA4 STA3 STA4 transmission time Voice
AP 150 450 300

STA5 STA6 STA5 STA6 Mbps Mbps Mbps Video
Higher than the RSSI Higher than the RSSI
threshold threshold STA STA Data
Lower than the RSSI Lower than the RSSI
threshold threshold
High-rate STAs can
Other
STA7 STA7 STA8 send more packets.
Roaming
Access denied Disconnected
Restricts the access of Automatically Enables STAs to roam to Enables users to fairly
Enables important
low-speed STAs to disconnects low-speed neighboring APs with share wireless
services to be
improve air interface STAs, improving air better signals in a timely resources and transmit
scheduled first.
efficiency. interface efficiency. manner. more data.
Access Control for Weak-Signal STAs
⚫ If a WLAN has good signal coverage but signals at the coverage edge area are weak, you can configure SNR-based
user CAC to restrict access from weak-signal STAs, thereby ensuring network access quality for online STAs.
[WAC-wlan-view] rrm-profile name test

[WAC-wlan-rrm-prof-test] uac client-snr enable
[WAC-wlan-rrm-prof-test] uac client-snr threshold threshold
 threshold: specifies the user CAC threshold based on the STA's SNR. The value ranges from 5 dB to 45 dB. The default value is 15.
 Assume that the SNR threshold is 25 dB and the default noise floor is –95 dBm. When the signal strength of a STA is lower than
25 dB + (–95 dBm) = –70 dBm, the STA cannot access the network.
Key area Common area

If the SNR is lower than –65 dBm, the STA If the SNR is lower than –75 dBm, the STA
is not allowed to access the network. In is not allowed to access the network. In
this case, you are advised to set the SNR this case, you are advised to set the SNR
threshold to 30 dB. threshold to 20 dB.
* Note: Engineers can adjust the parameter values based on the customer's requirements on the
STAs' signal strengths. If the threshold is set too high, STAs may fail to access the network.
• The signal-to-noise ratio (SNR) refers to the ratio of signals to noise (noise floor)
in the system. Generally, the SNR is used to measure the impact of interference
and noise on radio signals.
• The SNR is expressed as follows: SNR = 10lg (P1/P2), where:
▫ P1: valid power of the signal
▫ P2: effective power of the noise

Disconnecting Weak-Signal STAs
⚫ You can configure the device to quickly disconnect weak-signal STAs so that the STAs can reassociate with or roam
to APs with better signals. This ensures the Internet access quality of online STAs.
[WAC-wlan-rrm-prof-test] undo smart-roam quick-kickoff-threshold disable
[WAC-wlan-rrm-prof-test] smart-roam quick-kickoff-threshold check-snr
[WAC-wlan-rrm-prof-test] smart-roam quick-kickoff-threshold snr snr-threshold
 threshold: specifies the SNR-based threshold for quickly disconnecting STAs. The value ranges from 5 dB to 45 dB. The default
value is 15.
 Assume that the SNR threshold is 25 dB and the default noise floor is –95 dBm. When the signal strength of a STA is lower than
25 dB + (–95 dBm) = –70 dBm, the STA is disconnected from the WLAN.

is disconnected. In this case, you are is disconnected. In this case, you are
advised to set the SNR threshold to 30 dB. advised to set the SNR threshold to 20 dB.
* Note: Engineers can adjust the parameter values based on the customer's requirements on the
STAs' signal strengths. If the threshold is set too high, STAs may fail to access the network.
Smart Roaming
⚫ In common coverage scenarios, STAs with poor signals can roam to APs with better signals to improve STA service experience and
overall wireless channel performance.
⚫ In high-density coverage scenarios, STAs usually have good signals and "stick" to APs even if the wireless rates are low. In this case,
configure mart roaming so that STAs are steered to APs with better signals to further improve wireless channel performance.
[WAC-wlan-rrm-prof-wlan-rrm] undo smart-roam disable
[WAC-wlan-rrm-prof-wlan-rrm] smart-roam roam-threshold check-snr
[WAC-wlan-rrm-prof-wlan-rrm] smart-roam roam-threshold snr snr-threshold
 snr-threshold: specifies the SNR-based smart roaming threshold. The value ranges from 15 dB to 45 dB. The default value is 20.
 Assume that the SNR threshold is 25 dB and the default noise floor is –95 dBm. When the signal strength of a STA is lower than 25 dB + (–95 dBm) =
–70 dBm, the signal strength is lower than the SNR threshold. In this case, the STA is steered.

is forced to go offline. In this case, you are is forced to go offline. In this case, you are
advised to set the SNR threshold to 30 dB. advised to set the SNR threshold to 20 dB.
* Note: Engineers can adjust the parameter values based on the customer's requirements on the STAs' signal
strengths. If the threshold is set too high, STAs may be steered frequently. The default value is recommended.
Airtime Fair Scheduling
⚫ Due to different radio modes supported by STAs or different radio environments where STAs are located, the actual PHY rates of
STAs differ greatly. If a STA with a low PHY rate occupies a wireless channel for a long time, user experience on the entire WLAN is
affected. After airtime fair scheduling is enabled, the device preferentially schedules the user who occupies the channel for the
shortest time before each data transmission. This ensures that each user occupies the channel fairly.

[WAC-wlan-rrm-prof-test] airtime-fair-schedule enable
User1 3 User1 5
User2 4 User2 4
✓ Airtime fair scheduling:
After a round of preferentially schedules STAs
User3 6 transmission of User1 User3 6 that occupy wireless channels
for a short time.
User4 7 User4 7 ✓ You can enable this function
based on customer requirements
After airtime fair scheduling is The channel occupation time of User1 on the live network (without
enabled, the device schedules channel increases to 5. Similarly, the device involving parameter settings).
resources preferentially for User1 schedules channel resources
since User1 occupies the channel for preferentially for User2 that occupies
the shortest time. the channel for the shortest time.
• There are four users on a radio waiting to transmit data. They have occupied the
channel for time periods of 3, 4, 6, and 7 respectively, and require a
corresponding time period of 2, 4, 6, and 7 for a round of data transmission.
1. After airtime fair scheduling is enabled, the device collects the channel
occupation time periods of the four users. The channel occupation time
periods of User1, User2, User3, and User4 become 3, 4, 6, and 7
respectively. User1 occupies the channel for the shortest time. Therefore,
the device allocates channel resources to User1 first.
2. It takes a time period of 2 for User1 to finish a round of data transmission.

The channel occupation time of User1 then increases to 5. The channel
occupation time periods of User1, User2, User3, and User4 become 5, 4, 6,
and 7 respectively. In this case, User2 occupies the channel for the shortest
time. Therefore, the data of User2 is preferentially transmitted.

The channel occupation time of User2 increases to 8. The channel
occupation time periods of User1, User2, User3, and User4 become 5, 8, 6,
and 7 respectively. User1 occupies the channel for the shortest time. Then
the device preferentially schedules channel resources for User1.
4. If User1 finishes all data transmissions, the device collects the channel
occupation time periods of only the remaining users. The channel
occupation time periods of User2, User3, and User 4 are 8, 6, and 7
the data of User3 is preferentially transmitted.

The channel occupation time period of User3 increases to 12. The channel
occupation time periods of User2, User3, and User4 become 8, 12, and 7
channel resources are preferentially scheduled for User4.
Application Protocol-based QoS Policy
⚫ With the rapid development of multimedia technologies, many P2P applications maliciously occupy network resources, resulting in
network congestion. Such traffic is mixed with key applications. As a result, non-key services occupy a large number of resources,
packet loss occurs on core services, and service quality cannot be guaranteed. You can configure application protocol-based QoS
policies to prevent non-key services from occupying too many network resources.
[WAC-wlan-view] sac-profile name test

[WAC-wlan-sac-prof-test] application-group group-name app-protocol app-protocol-name remark dscp dscp-value
[WAC-wlan-sac-prof-test] application-group group-name app-protocol app-protocol-name deny
[WAC-wlan-sac-prof-test] application-group group-name app-protocol app-protocol-name car cir-value
Identifying application protocols Action
skypeforbusiness Mapping policy remark: changes the packet priority.

Traffic
facetime deny: discards packets.
qq_voip
car: limits the packet rate.
......
Note: Set different policies for related applications based on the actual scenario, that is, services on the customer's live network.
• application-group group-name: specifies the name of an application list. The

application list must be supported by the SAC signature database file.
• app-protocol app-protocol-name: specifies the name of an application. The

application must exist in the list.
Contents

◼ Capacity Optimization

Overview of Capacity Optimization (1/2)
⚫ During capacity optimization, service types and user models in different scenarios must be considered, and capacity
optimization suggestions must be provided based on network construction standards.
Service types and user models
Baseline Rate of a Single Service (Mbps) Proportion of Each Service in Education Scenarios (%)
Service Type
Excellent Normal Classroom Office Meeting Room Lecture Hall Library Lab Canteen Playground
4K video 50 30 10 20 10 10 10 10 10 10
1080p video 16 12 10 0 10 10 0 10 10 10
720p video 8 4 0 10 10 0 0 0 0 0
E-whiteboard 32 16 20 20 10 0 0 10 0 0
Email 32 16 10 5 10 10 0 0 0 0
Web browsing 8 4 40 30 30 50 70 60 60 60
Gaming 2 1 0 5 0 10 0 0 10 10
Instant messaging 0.512 0.256 0 10 10 10 20 10 10 0
VoIP 0.256 0.128 10 0 10 0 0 0 0 10
Overview of Capacity Optimization (1/2)
WLAN construction standards Capacity optimization suggestions
Experience rate: 50 Mbps

Service-assured rate: 10 Mbps STA rate limiting
Capacity KPI
• Number of STAs connected to a single AP: 50
• Concurrency rate: 40% Load balancing
• Test speed (using SpeedTest): meets the
network construction standard.
Coverage KPI AP capacity expansion

• RSSI @ 95% areas ≥ –65 dBm
Other KPIs
• Roaming delay < 20 ms, in-roaming packet loss AP replacement
rate ≤ 10-5
• Delay of key services such as video and voice ...
services < 10 ms
• Experience rate: perceived data rate under a light network load
▫ When the network load is light (channel utilization is less than 20%), the
target rate that can be reached by a speed test in 95% areas can be
regarded as the experience rate or peak rate.
• Service-assured rate: guaranteed rate under a heavy network load
▫ A service-assured rate is the target rate that can be achieved in 90% of

time according to SpeedTest in a multi-user concurrency scenario where the
network load is less than 80%. The rate is typically considered as the
guaranteed rate.
STA Rate Limiting
⚫ In an actual WLAN, due to different services accessed by STAs, some STAs may occupy too many network resources.
As a result, the STA experience of the entire WLAN deteriorates. In this case, you can configure rate limiting for
STAs to ensure relatively fair network resource usage and improve overall user experience.
[WAC-wlan-view] traffic-profile name test

[WAC-wlan-rrm-prof-test] rate-limit client up rate-value
[WAC-wlan-rrm-prof-test] rate-limit client down rate-value
 Set the STA rate limit based on the actual scenario, that is, the bandwidth required by services on the customer's live network.
Evaluate the rate limit of the corresponding STA based on the bandwidth required by each service type in the network planning
process course.
Service Type Single-Service Baseline Rate (Mbps) Recommended Terminal Rate Limit (Mbps)
4K video 50 60
1080p video 16 20
E-whiteboard (wireless projection) 32 40
Email 32 40
Web browsing 8 10
Instant messaging 0.512 2
Load Balancing
⚫ In scenarios with high overlapping coverage areas (such as lecture halls), some APs may be heavily loaded,
affecting user experience. You can configure the load balancing function to steer some STAs to APs with light loads.
In this way, AP resources are effectively used and the bandwidth of each STA is ensured.
[WAC-wlan-rrm-prof-test] sta-load-balance dynamic sta-number start-threshold start-threshold-value
[WAC-wlan-rrm-prof-test] sta-load-balance dynamic sta-number gap-threshold { percentage percentage-value | number
number-value }
Start threshold for Load difference threshold for dynamic load balancing
dynamic load balancing
optimization
Parameter
Based on the percentage

Based on the number of STAs
of STAs
• Default value: 10
• High AP density: 5–10 • Default value: 3
• High AP density: 5–10
• Common AP density: 10–20 • High AP density: 1–3
• Common AP density: 1-20
• Common AP density: 3–10
* Note: The default configuration is recommended for load balancing. (The values here are
for reference only. Evaluate the specific values based on the actual project situation.)
• The preceding load balancing configuration commands use dynamic load

balancing based on the number of STAs as an example.
• start-threshold-value: specifies the start threshold for dynamic load balancing

based on the number of STAs. The value ranges from 1 to 40.
• percentage-value: specifies the dynamic load difference threshold for based on

the number of STAs (percentage). The value ranges from 1 to 100. The load
difference between radios in a load balancing group is expressed in percentage,
that is, the percentage difference between the number of STAs on radios.
• number-value: specifies the load difference threshold for dynamic load balancing
based on the number of STAs. The value ranges from 1 to 20. The actual number
of STAs indicates the load difference between radios in a group, that is, the
difference between the number of STAs on each radio.
AP Capacity Expansion
⚫ Evaluate the number of required APs based on service types and network construction standards in different scenarios, and add APs
to meet service requirements. The following uses the conference room scenario as an example:
Single-Service Baseline Rate (Mbps) Percentage Capacity evaluation
Service Type
Excellent Good Conference Room
Number of APs required to meet capacity
4K video 50 30 10% requirements in this area =
1080p video 16 12 10%
Number of access STAs x
720p video 8 4 10%
Access concurrency rate
E-whiteboard
32 16 10%
(wireless projection) Number of concurrent
Email 32 16 10% STAs on a single AP
300 x 30%
Gaming 2 1 0%
=5
Instant messaging 0.512 0.256 10% 18
VoIP (voice) 0.256 0.128 10%
Average Single-User Bandwidth (Mbps) — Excellent 16 Mbps
Scenario: conference room

Number of access STAs: 300
Access concurrency rate: 30%
AP capacity expansion: Increase the number
Bandwidth required by a single STA (Excellent): 16 Mbps of APs and deploy five APs in this area.
Number of concurrent STAs supported by a single AP (dual-band, 16 Mbps): 18
Contents

◼ Coverage Optimization

Overview of Coverage Optimization
⚫ During coverage optimization, consider the access capacity, roaming, and interference. A larger receive field
strength indicates better user experience. Common coverage optimization methods are as follows:
AP power adjustment AP position adjustment
1 11 1 11 1 11
1 11
6 6 6 6
Before optimization After optimization Before optimization After optimization
Adjusting the number of APs
1 1 11
6 6 1
Before optimization After optimization
• In outdoor scenarios, APs use external antennas. In addition to adjusting AP

deployment positions, you can adjust antenna directions to meet coverage
requirements.
AP Power Adjustment
⚫ AP power adjustment can be used to meet signal coverage requirements. On the live network, different coverage areas have
different requirements. You are advised to adjust AP power based on the customer requirements. According to the network planning,
it is recommended that the field strength in all areas be greater than or equal to –65 dBm.
Network-wide coverage effect Automatic power adjustment

evaluation Failed to meet the signal [WAC-wlan-ap-group-ap-group1] radio 0
strength requirement at a
large number of positions [WAC-wlan-group-radio-ap-group1/0] calibrate auto-txpower-select enable
[WAC-wlan-ap-group-ap-group1] radio 1
[WAC-wlan-view] calibrate enable manual
[AC-wlan-view] calibrate manual startup
Manual power adjustment
Failed to meet the signal [WAC-wlan] ap-id 1

strength requirement at [WAC-wlan-ap-1] radio 0
only a few positions
[WAC-wlan-radio-1/0] calibrate auto-txpower-select disable
[WAC-wlan-radio-1/0] eirp eirp
Use the CloudCampus APP to test [WAC-wlan-radio-1/0] radio 1
the signal strength at different [WAC-wlan-radio-1/1] calibrate auto-txpower-select disable
points in the coverage area. [WAC-wlan-radio-1/1] eirp eirp
• In addition to the preceding methods, you can use the WLAN Planner to simulate
the AP coverage effect on the entire network, configure the AP power based on
the simulation data, and manually adjust the AP power for some points that do
not meet the requirements.
AP Position Adjustment
⚫ The AP deployment design may vary in different scenarios. During network optimization, check whether the current AP deployment
positions are proper. If the positions do not meet requirements or affect services, adjust the corresponding AP deployment positions.
The following uses the AP deployment design for large classrooms in education scenarios as an example:
Incorrect: Install an AP on the wall at the door Correct: Install an AP in the middle of the ceiling
Large Large Large Large Large Large

classroom A classroom B classroom C classroom A classroom B classroom C
• The detailed AP position planning and design methods have been described in
the network planning process and are not described here.
• In outdoor scenarios, in addition to AP position adjustment, antenna angle

adjustment is also involved.
Antenna Angle Adjustment
⚫ In outdoor scenarios, do not place antennas randomly. Install an antenna correctly according to the radiation
direction of the antenna to ensure that the beam direction evenly covers the specified area. The following figure
uses an outdoor AP with external omnidirectional antennas as an example. In actual installation, the AP must be
vertical.
Incorrect Correct
Adjusting the Number of APs (1/2)
⚫ If coverage holes exist in the coverage area, you are advised to add APs. The following uses AP deployment in
dormitories in education scenarios as an example:
Incorrect: A single AP covers multiple Correct 1: Each AP covers two Correct 2: Each AP covers a
rooms. rooms. single room.
Dorm 1 Dorm 2 Dorm 3 Dorm 4 Dorm 1 Dorm 2 Dorm 3 Dorm 4 Dorm 1 Dorm 2 Dorm 3 Dorm 4
Common glass or wooden Metal, brick wall, or concrete

partition wall structure wall structure
Adjusting the Number of APs (2/2)
⚫ If too many APs are deployed in the coverage area, co-channel interference is severe, affecting user experience on
the entire network. You are advised to reduce the number of APs.
Incorrect: Deploy excessive APs, causing severe Correct: Correctly deploy APs based on coverage
interference requirements
Contents

◼ Channel Optimization

Overview of Channel Optimization
⚫ On a WLAN, the operating performance of APs is affected by the radio environment. For example, a high-power AP can interfere
with adjacent APs if they work on overlapping channels. To ensure user experience, channel optimization can be used to reduce the
impact of air interface interference.
⚫ If multiple floors are involved, plan channels horizontally and vertically. During channel optimization, in addition to the signal
interference used in the project, the interference of third-party signals must be considered to ensure the access performance of the
WLAN.
Horizontal Vertical
Floor Channel Plan

11 36
5th floor 1 6 11
1 1 149 165
6 64 4th floor 11 1 6
11 11 44 52 3rd floor 6 11 1
1 157
2nd floor 1 6 11
2.4 GHz cellular coverage 5 GHz cellular coverage 1st floor 11 1 6
Channel Optimization
⚫ Through channel optimization, co-channel APs and adjacent-channel APs are kept as far as possible to improve the
channel reuse rate and ensure user experience on the entire network.
Network-wide evaluation for the working Automatic channel adjustment

channels of APs
Severe interference [WAC-wlan-ap-group-ap-group1] radio 0
from a large [WAC-wlan-group-radio-ap-group1/0] calibrate auto-channel-select enable
number of APs [WAC-wlan-ap-group-ap-group1] radio 1
[WAC-wlan-view] calibrate enable manual
[AC-wlan-view] calibrate manual startup
Manual channel adjustment
• Log in to the WAC to check whether Interference only [WAC-wlan] ap-id 1

between some APs [WAC-wlan-ap-1] radio 0
neighboring APs use the same or adjacent
channels. [WAC-wlan-radio-1/0] calibrate auto-channel-select disable
• Log in to the WAC and check the AP [WAC-wlan-radio-1/0] channel 20mhz channel
channel utilization to determine the AP [WAC-wlan-radio-1/0] radio 1
interference. [WAC-wlan-radio-1/1] calibrate auto-channel-select disable
[WAC-wlan-radio-1/1] channel 20mhz channel
• In addition to the preceding methods, you can also use the WLAN Planner to
simulate the working channels of APs on the entire network, configure AP
channels based on the simulated data, and manually adjust the channels of APs
that do not meet the requirements.
Parameter Optimization for Automatic Channel Adjustment
⚫ For the 2.4 GHz radio, non-overlapping channel combinations 1, 6, 11 or 1, 5, 9, and 13 are
recommended. For the 5 GHz radio, non-overlapping channels 36, 40, 44, 48, 52, 56, 60, 64, 149, 153,
157, 161, and 165 are recommended.
⚫ The radio calibration function depends on the channel scanning function. During channel scanning,
radio channel switching is triggered. At the moment of channel switching, the delay of user service
data increases, affecting wireless service experience. Therefore, you are advised to set the calibration to
the off-duty period, for example, in the early morning.
[AC-wlan-view] calibrate enable schedule time 02:00:00

[AC-wlan-view] regulatory-domain-profile name default
[AC-wlan-regulatory-domain-prof-default] dca-channel 2.4g channel-set 1,5,9,13
[AC-wlan-regulatory-domain-prof-default] dca-channel 5g channel-set 36,40,44,48,52,56,60,64,149,153,157,161,165
• You can specify a calibration channel set for APs. The APs then select channels
from the channel set to calibrate. This reduces the burden on the APs.
• When configuring a calibration channel set, avoid radar channels and configure
channels supported by STAs. Otherwise, STAs cannot search for radio signals.
Contents

◼ Client Optimization

Client Optimization
⚫ The air interface is a complex environment, and WLAN user experience is related to many factors. In addition to the networking,
configuration, and working channels of the WLAN, you can adjust the parameter settings of STAs to ensure user experience.
1. Upgrade the driver of the wireless network 2. Set the preferred frequency band to 5 GHz.
adapter to the latest version.
3. Ensure that the energy saving mode of the wireless adapter in

the power supply solution is the highest performance version.
Optimal parameter settings on STAs can ensure user experience.
• Typical optimization design solutions include:
▫ Upgrade the driver of the wireless network adapter to the latest version.
▫ Set the preferred frequency band of the wireless network adapter to 5 GHz.
▫ In the power supply solution, the energy saving mode of the wireless
adapter is the highest performance.
▫ Disable the WLAN bearer mode.
▫ Disable the U-APSD function.

Contents
Background of an Indoor WLAN Project
⚫ After communicating with the project contact person about
WLAN deployment in a new office area of a company, the
project requirements are collected as follows:
 The figure on the right shows the building floor plan. The length of
the building is 50 meters, and services include web browsing and
email.
 Among indoor areas, VIP coverage areas include office areas, meeting
rooms, and activity area are VIP coverage areas; common coverage
areas include restrooms, break rooms, and equipment rooms.
Elevators are not covered.
 The two office areas can accommodate 400 persons, with each
accommodating 200 persons.
 The maximum number of users in the activity area is 100, and the
concurrency rate is 60%. The maximum number of users in each
meeting room is 30, and the concurrency rate is 50%.
 The WLAN must support 802.11ax.
 The activity area is an atrium area.
Information Collection — Analysis of Bandwidth Required by
a Single User
⚫ The following table lists the service types and proportions of users. Based on the following data, you can calculate the average
bandwidth required by each user. With the single-bandwidth requirement of a single user, you can further calculate the total
bandwidth of the WLAN, select APs, and calculate the number of APs.

Service Type (Mbps) Percentage Bandwidth required by a single user (Excellent)
Excellent Good
Streaming media (1080p) 16 12 13%
8 x 40% + 16 x 13% + 50 x 10% + 0.25 x 10% + 32 x 5% + 32 x 5% +
Streaming media (4K) 50 22.5 10% 32 x 5% + 0.5 x 12%
VoIP (voice) 0.25 0.125 10%
E-whiteboard 32 16 5%
Email 32 16 5%
File transfer 32 16 5% 15.165 Mbps
Instant messaging 0.5 0.25 12%
Excellent and good criteria indicate user service experience at different

bandwidths. The planned bandwidth for a single user is 16 Mbps.
In this project, excellent user experience is used to plan user bandwidth.
Information Collection — Requirements Collection
⚫ Optimize the WLAN project requirements collection based on the per-user bandwidth.
Requirement Type Result

Laws and regulations Country code: CN
Floor plan JPEG scale drawing (building length: 50 m)
Coverage mode Indoor AP with omnidirectional antennas
Office area 1: 200 users, 16 Mbps per-user bandwidth, 70% concurrency rate
Office area 2: 200 users, 16 Mbps per-user bandwidth, 70% concurrency rate
Bandwidth
Meeting room: 30 users, 16 Mbps per-user bandwidth, 50% concurrency rate
Activity area: 100 users, 16 Mbps per-user bandwidth, 60% concurrency rate
Key coverage areas: office areas, meeting rooms, and activity area
Coverage area
Common coverage areas: break room, restrooms, grocery room, and equipment rooms
Field strength in key coverage areas ≥ –65 dBm; field strength in common coverage areas ≥ –80 dBm
Field strength
Edge field strength: ≤ -80 dBm; interference field strength: –60 dBm; leakage field strength: no requirement
Networking mode AC off-path networking + direct forwarding
Power supply mode PoE switch for supplying power to APs
STA type Common mobile phones and laptops that support 2x2 MIMO, 40 MHz @ 2.4 GHz, 80 MHz @ 5 GHz
Acceptance items and criteria No special requirements
Network Evaluation — AP Quantity Evaluation
⚫ When evaluating a WLAN, consider the number and models of APs to meet service requirements.
 Take an office area as an example. The number of users in an office area reaches 200, the concurrency rate is 70%, and each user has two STAs (only
one STA is assumed in the activity area). The number of STAs in a single office area is calculated as follows:
Total number of STAs in a single office area = 200 x 2 x 70% = 280
 Assume that the bandwidth requirement of a single user is 16 Mbps, a maximum of 18 concurrent STAs can be connected on dual radios or 30
concurrent STAs can be connected on triple radios of a Wi-Fi 6 AP. That is, 16 dual-radio APs or 10 triple-radio APs are required. Considering costs and
scenarios, triple-radio APs are recommended.
 According to the preliminary plan, 10 APs are deployed in a single office area, and one AP is deployed in each meeting room. Three to four APs are
deployed in the activity area that is narrow and long and does not allow ceiling mounting for APs.
1 2 Mbps 56 85 141
2 4 Mbps 39 56 95
3 6 Mbps 27 38 65
4 8 Mbps 21 30 51
5 16 Mbps 12 18 30
• When evaluating the number of APs, check whether the number of onsite APs
meets service requirements. If not, add APs.
Network Evaluation — CloudCampus APP
⚫ Use the CloudCampus APP to perform coverage test and business test.
 The Wi-Fi status and stability tests are performed to evaluate the network quality. The overall quality is good.
 The roaming experience test result shows that the coverage effect is good.
 The interference test result shows that neighboring APs use the same channel. This requires channel optimization.
Network Optimization — AP Channel Optimization
⚫ Channel bandwidth planning:
 2.4 GHz: The user bandwidth requirement is 16 Mbps, and APs Omnidirectional coverage
are densely deployed. Using 40 MHz will cause adjacent-
channel or co-channel interference. Therefore, 20 MHz
bandwidth is recommended.
13 minus &
 5 GHz: Channel resources on this frequency band are sufficient 50 plus
to meet the requirements of 40 MHz. However, only a few

1& 5&
STAs support 80 MHz channel resources. Therefore, 40 MHz 36 plus 149 plus
bandwidth is recommended. 9&

165 minus
⚫ Available channels for indoor deployment: 5&
1 & 36 plus
50 plus
 2.4 GHz: channels 1, 5, 9, and 13
13 minus &
 5 GHz: channels 36–64 and 149–165 149 plus
⚫ AP power:
 Automatic AP power adjustment is enabled on APs by default.
Quiz
1. (Multiple-answer question) The CloudCampus APP can be used for test acceptance after
network deployment. Which of the following items are included in the acceptance? ( )
A. Field strength
B. Interference
C. Rate
D. Network delay
1. ABCD
Summary
⚫ This course describes the entire WLAN optimization process and solutions, as well as
functions and usage of optimization tools such as the CloudCampus APP.
⚫ Upon completion of this course, you will have a clear understanding of the WLAN
optimization solutions and be able to leverage the optimization tools to optimize WLANs in
practice.
Recommendations

ACL Access Control List
ARP Address Resolution Protocol
BSSID Basic Service Set Identifier
CAC Call Admission Control
EDCA Dynamic EDCA Parameter Adjustment
MIMO Multiple-Input Multiple-Output
P2P Point-to-Point
PoE Power over Ethernet
QoS Quality of Service
RSSI Received Signal Strength Indication

GI Guard Interval
vMoS Video Mean Opinion Score
intelligent world.


WLAN O&M
Foreword
⚫ Traditional operations and maintenance (O&M) solutions for wireless local area networks (WLANs)
ensure normal network operation through routine maintenance, fault information collection, and
troubleshooting.
⚫ However, traditional O&M monitors only device indicators but lacks user and network association
analysis. That means that user experience may be poor in spite of normal indicators. In addition, issues
that may affect user experience cannot be effectively and proactively identified or analyzed. To address
this, iMaster NCE-CampusInsight uses telemetry technology to collect performance indicators and logs
of network devices in real time and detects network anomalies based on real service traffic. This big
data platform supports centralized data collection, storage, and analysis to process big data efficiently.
It resolves problems faced by traditional O&M, such as difficulties in locating and analyzing faults, in
measuring user experience, and in proactively identifying issues.
• We will refer iMaster NCE-CampusInsight as CampusInsight for short.

Objectives
On completion of this course, you will be able to:

 Describe the traditional WLAN O&M solution.
 Describe the CampusInsight intelligent O&M solution.
 Describe CampusInsight functions and features.
 Understand how to locate common WLAN problems or faults.
Contents
1. Overview of Network O&M
2. Traditional WLAN O&M
3. CampusInsight Intelligent O&M
Overview of WLAN O&M
⚫ The life cycle of a network typically includes network planning and design, implementation, optimization, and
maintenance. Network maintenance can be classified into routine O&M and troubleshooting.
⚫ Routine O&M aims to prevent problems and minimize unexpected faults. Troubleshooting aims to rectify faults,
locate fault causes, and provide reference cases for routine O&M, thereby improving O&M efficiency.
Network planning Routine O&M

and design • By checking the versions, network bandwidth, and network security of
network devices, you can obtain the network parameters in normal cases,
Network helping to lay a solid foundation for troubleshooting.
implementation
• Routine O&M can prevent problems and minimize unexpected faults.
Troubleshooting
Network optimization
• Check and locate problems on the live network, and use technical means
to resolve them.
Network O&M • The accumulated troubleshooting cases can be used as a reference for
routine maintenance.
• This chapter focuses on routine maintenance. For details about troubleshooting,

see the following chapters.
Routine O&M Contents and Methods
⚫ Routine O&M involves maintenance for device running environments and device software and hardware.
 Device running environment maintenance:
◼ The device running environment is the basis for stable device running, including the equipment room, power supply, and heat dissipation.
◼ Maintenance personnel need to maintain the device running environment onsite. They sometimes need to use professional tools for observation
and measurement.
 Device software and hardware maintenance:

◼ The running status of device software and hardware is closely related to running services. Huawei products use the universal Versatile Routing
Platform (VRP). Network engineers must understand common maintenance commands on the VRP.
◼ Maintenance personnel can maintain device software and hardware onsite or remotely, in most cases, using the display command for check and
maintenance.
⚫ You can use either of the following methods to perform routine maintenance:
 Onsite observation: Observe the hardware running environment of devices.
 Remote operation: Learn about the running status of the device software and hardware.
• This course focuses on how to maintain the software and hardware running
status of devices. The physical environment check is not described here.
Routine O&M Means
Traditional WLAN O&M CampusInsight intelligent O&M
• Visualized experience management

• Device management
• User journey playback
WAC web • Performance management
system • Potential fault identification
• Alarm management
• Root cause locating
• Configuration management
AP and STA
Telemetry • Predictive network optimization
data collection Second-level network data collection
• Visualized experience: Telemetry-based second-level data collection is supported,

• Check the versions, network bandwidth, visualizing experience of any user in any application at any moment.
network security, and network performance
• Minute-level proactive identification and root cause locating for potential faults:
of network devices on the WAC web
system.  Proactively identifies potential faults based on dynamic baselines and big data
correlation analysis.
• Professional engineers are required to
locate faults and optimize networks based  Accurately locates root causes using KPI correlation analysis and protocol trace.
on O&M results. • Predictive network optimization: AI technologies are used to intelligently analyze
the load trend of APs to complete predictive optimization of wireless networks.
• Traditional network management:
▫ Web system: The built-in web server of the device provides a graphical user
interface (GUI). You need to log in to the device to be managed from a
terminal through Hypertext Transfer Protocol Secure (HTTPS).
▫ CLI mode: You can log in to a device through the console port, Telnet, or
SSH to manage and maintain the device. This mode provides refined device
management but requires that users be familiar with command lines.
Therefore, this course focuses on the web system.
• CampusInsight intelligent O&M:
▫ Huawei CampusInsight, an intelligent network analysis platform, radically

changes the traditional resource status-centric monitoring mode and
applies AI to the network O&M field. Based on existing O&M data (such as
device performance indicators and terminal logs), Huawei CampusInsight
uses Big Data analytics, AI algorithms, and more cutting-edge analytics
technologies to digitize user experience, helping customers quickly detect
network problems and improve user experience accordingly.
▫ CampusInsight uses Telemetry technology to performance indicators and

logs of network devices and detects network anomalies based on real
service traffic. Telemetry is a next-generation network monitoring
technology. It uses HTTP/2 and ProtoBuf to collect data from remote
devices, which is much more efficient than the traditional SNMP mode.
▫ This big data platform supports centralized data collection, storage, and
analysis to process big data efficiently.
▫ In addition to using algorithms to improve efficiency, CampusInsight

leverages scenario-based continuous learning and accumulated expert
experience to free O&M personnel from complex alarms and noises, making
O&M more automated and intelligent.
Contents
WLAN Maintenance
⚫ You can perform routine maintenance for WACs and Fit APs on the WAC web system, including:
Device inspection User experience
⚫ Check the WAC indicator status. ⚫ Check the online status of STAs.
⚫ Check WAC alarm information. ⚫ Check reasons for STAs'
WAC User onboarding failures.
⚫ Check the WAC status. statistics ⚫ Check the overall STA distribution.
⚫ Check the WAC license status.
⚫ Check the AP indicator status. ⚫ Check the radio health.

⚫ Check the AP status. ⚫ Check the radio status.
Fit AP Radio
⚫ Check whether APs need to be ⚫ Check radio parameters such as
replaced. channel utilization.
Checking the Indicator Status
⚫ Observe indicators on each device. If you find any indicator in an abnormal state, record fault information
immediately and take measures based on the description of the indicator states.
Category Indicator State Description

PWR (power supply) Steady green: The power module is working properly.
SYS (system) Slow blinking green: The system is running properly.
USB (USB port) Steady green: A USB flash drive is connected and works properly.
WAC CLOUD (cloud management) Steady green: The cloud management controller is properly connected.
Fan indicator Blinking green: The fan module is working properly.
Steady green: The link is established.

Service port indicator Blinking green: Data is being received or transmitted.
Off: No link is established.
Slowly blinking white: The system is running properly, the Ethernet connection is normal.
Quickly blinking white: This indicator state indicates a software upgrade, onboarding request,
AP Single indicator
or onboarding failure.
Steady red: The system is faulty.
* In this example, the AirEngine 9700-M1 is used as the WAC, and the AirEngine 5761-11 is
used as the AP. For details about other models, see related product manuals.
• If all indicators on an AP are off, the indicators may have been turned off
through the configuration. It is recommended that you run the undo led off
command on the WAC to turn on the indicators and then check the indicator
status again.
Checking WAC Alarm Information
⚫ Log in to the web system, choose Maintenance > AC Maintenance > Alarm & Event, and check whether critical or
major alarms exist.
⚫ Alarms can be classified as critical, major, minor, warning, indeterminate, or cleared alarms in descending order of
severity. During routine maintenance, critical and major alarms must be handled in a timely manner.
• Critical: A fault affects normal operation of the system. Effective measures must
be taken immediately.
• Major: A fault affects the QoS and requires emergency measures.
• Minor: A fault does not affect the QoS. To avoid worse faults, you need to
observe or process the fault properly.
• Warning: A potential fault exists and may affect services. You need to
troubleshoot the fault accordingly.
• Indeterminate: The alarm severity is not determined and the alarm impact varies
depending on the live network.
• Cleared: One or more previous alarms have been cleared.

Checking the WAC Status
⚫ Log in to the web system, and choose Monitoring > AC > AC to check whether the WAC is working properly.
 Check whether the CPU usage and memory usage of the WAC are lower than 80%. If either of them is high, observe the CPU usage or memory usage
for a period of time (5-10 minutes). If the CPU usage or memory usage remains high during this period, record fault information and rectify the fault.
 Check whether the WAC temperature is normal. If the WAC temperature is out of the operating temperature range, check whether fans of the WAC
are running normally and whether the ambient temperature is in the normal range. If the temperature keeps increasing and exceeds the upper
threshold, the device will be powered off automatically, causing service interruption.
Checking the WAC License Status
⚫ Log in to the web system, and choose Maintenance > AC Maintenance > License to check whether License status
displays Normal. If License status does not display Normal, reload and activate the license.
⚫ Check whether the number of APs connected to the WAC is in the expected range. If an AP fails to go online, check
the AP status to analyze the cause. For details, see the following part describing how to check the AP status.
Checking the AP Status (1/3)
⚫ Log in to the web system, choose Monitoring > ⚫ If the AP health score is 100, choose Monitoring >
Summary, and check the AP health score. AP to view the CPU usage and memory usage.
 A higher score indicates better health. If the score is  Check whether the CPU usage of the AP exceeds 90%
greater than or equal to 60, the indicator is normal. If and whether its memory usage exceeds 80%. If the CPU
the score is less than 60, the indicator is low. usage or memory usage is high, observe the CPU usage
or memory usage for 5–10 minutes. If it remains high,
record the CPU usage and memory usage data.
• AP health score = (100% – Number of APs with an abnormal indicator/Total

number of APs) x 100
• Four indicators that affect the AP health:
▫ Proportion of abnormal APs (for example, APs in the idle or fault state)
▫ Access failure rate > 20%
▫ Disconnection rate > 20%
▫ Number of access STAs > 40

⚫ If the AP health score is lower than 100, check the version, status, STA access failure ratio, STA going-offline ratio,
number of STAs, CPU usage, and memory usage.
 Check AP version information. Check whether the AP version matches the WAC version. If not, upgrade the AP to a version
matching the WAC version. Choose Maintenance > Device Upgrade > AP Upgrade to check the APs whose versions do not match
the WAC version.
 Check the AP status. Choose Monitoring > AP and check whether the AP status is normal.
• Check the AP status.

▫ Check whether the AP status displays as normal. Common AP states and
corresponding handling suggestions are described as follows:
▪ normal: The AP is running properly, and no action is required.
▪ fault: The AP failed to go online. Check the network environment and
AP onboarding configuration, and reconfigure the AP to go online.
▪ name-conflicted: Another AP with the same name has already gone
online. Rename the current AP.
▪ ver-mismatch: The AP and WAC versions do not match. Upgrade the
AP to a version matching the WAC version by referring to the AP
upgrade guide.
▪ download: The AP is upgrading. Wait until the upgrade is complete.
▪ config: The AP is initializing the configuration. Wait until the
initialization is complete.
▪ committing: The WLAN configuration is being delivered to the AP.
Wait until the configuration delivery is complete.
▪ standby: This is the AP status displayed on the standby WAC, and no
action is required.
▪ countryCode-mismatch: The AP version does not support the country
code configured on the WAC. Upgrade the AP or modify the country
code on the WAC.
▪ If the AP is in another state or its state cannot restore to normal after
you perform the preceding operations, collect network configuration
information.
 Check the STA access failure ratio and logout ratio. Generally, the user access failure rate and logout rate cannot exceed 20%.
 Check the number of STAs. Check whether more than 40 STAs connect to the same AP. If more than 40 STAs associate with the same AP, user
experience will deteriorate. In this case, reduce the maximum number of STAs that can associate with a VAP to deliver good experience to each user.
 Choose Diagnosis > Intelligent Diagnosis, select an AP, and start the diagnosis. Handle the problem found in the diagnosis according to the
suggestions provided in the diagnostic result.
• Check the STA access failure ratio and logout ratio.
▫ Check whether STA Access Failure Ratio and Logout Ratio values exceed
20%. If the STA access failure ratio or logout ratio exceeds 20%, record the
values.
• Check the number of STAs.
▫ Check whether more than 40 STAs connect to the same AP. More STAs
connected to a single AP mean fewer resources for each STA and therefore
deteriorated user experience.
• Only APs of specific models support the intelligent diagnosis function.

Checking Whether APs Need to Be Replaced
⚫ If you suspect that an AP is faulty, perform the following operations to quickly replace the AP and retain the original AP
configuration:
 Replace the AP hardware.
 Log in to the web system and choose Configuration > AP Config > AP Config > AP Info. Select the AP to be replaced and click Replace.
 Enter the MAC address of the new AP and click OK.
 After the replacement, the new AP with the ID of the original AP re-associates with the WAC and inherits all the data configured for the original AP.
• Note: The model of the new AP must be the same as that of the original AP.
Checking the STA Status (1/2)
⚫ Log in to the web system, choose Monitoring > ⚫ If the user health score is 100, check Login Failure
Summary, and check the user health score. Record and User Distribution.
 A higher score indicates better health. If the score is  Choose Monitoring > User > Online User Statistics >
greater than or equal to 60, the indicator is normal. User Login Failure Records to view users' login failure
If the score is less than 60, the indicator is low. records. Locate and rectify the fault based on the login
failure causes.
 Choose Monitoring > User > User Distribution to view

the user distribution. Check whether too many STAs
are connected to a single AP or a single radio. If STAs
are unevenly distributed, record STA distribution.
• User health score = (100% – Number of users with an abnormal indicator/Total

number of users) x 100
• Four indicators that affect the user health:
▫ Rate < 12 Mbps
▫ SNR < 20 dB
▫ Downlink retransmission rate > 50%
▫ Downlink packet loss rate > 5%

Checking the STA Status (2/2)
⚫ If the user health score is lower than 100, check the negotiated rate, SNR, retransmission rate, packet loss rate,
login failure records, and user distribution.
⚫ Choose Monitoring > User > Online User Statistics. In the user list, check whether the negotiated rate, SNR, retransmission rate,
and packet loss rate of each user are normal.
• Check whether the negotiated rate is lower than 12 Mbps. If the negotiation rate
of a user is lower than 12 Mbps, choose Configuration > AP Config > Profile >
Radio Management, select 2G Radio Profile or 5G Radio Profile, and set a larger
value for Maximum rate.
• Check whether the SNR of the user is lower than 20 dB. If the SNR of a user is
lower than 20 dB, check whether there is severe interference in the radio
environment, and record configuration, network deployment, and SNR data.
• Check whether the retransmission rate is greater than 50% and whether the
packet loss rate is greater than 5%. If the retransmission ratio exceeds 50% or
the packet loss ratio exceeds 5%, check whether network communication is
normal and whether the radio environment affects data transmission on the
network, and record related information.
Checking the Radio Status
⚫ Log in to the web system, choose Monitoring > Summary, and check the radio health score.
⚫ If the radio health score is lower than 100, choose Monitoring > Radio to view the number of access STAs, noise
strength, channel utilization, rate, downlink retransmission rate, and downlink packet loss rate of a radio.
• Radio health score = (100% – Number of radios with an abnormal

indicator/Total number of radios) x 100
• Four indicators that affect the radio health:
▫ Channel utilization > 70%
▫ Noise strength > –80 dBm
▫ Interference ratio > 40%
▫ Downlink retransmission rate > 50%
▫ Downlink packet loss rate > 5%
• Check whether the radio channel utilization exceeds 70%. If so, choose
Configuration > AP Config > Radio Planning/Calibration to adjust the working
channel of the AP radio during off-peak hours.
• Check the noise strength and interference ratio. If the noise strength is greater
than –80 dBm or the interference ratio is greater than 40%, check the quality of
the radio network environment, check whether there are wireless interference
devices, and record related information.
• Check the downlink retransmission rate and downlink packet loss rate. If the
downlink retransmission rate exceeds 50% or the downlink packet loss rate
exceeds 5%, check whether the network communication quality and wireless
network environment affect network data transmission, and record related
information.
Contents

◼ Overview of Intelligent O&M
▫ Real-Time Experience Visualization
▫ Minute-Level Fault Demarcation
▫ Intelligent Network Optimization
Challenges Faced by Traditional WLAN O&M
Precise Experience Issue

detection awareness identification
Traditional O&M collects data within In traditional O&M, only device Traditional O&M personnel
minutes based on SNMP. The data metrics are monitored. However, cannot proactively identify
cannot be obtained in real time once user experience may be poor and analyze issues that may
an issue occurs. Moreover, convenient when the metrics are normal. affect user experience until
backtracking method is unavailable. There is no correlation analysis users complain about them.
between users and networks.
Difficult issue locating Difficult user experience Difficult proactive issue

and analysis measuring identification
CampusInsight: Improving User and Service Experience
Minute-level
Real-time experience visualization Intelligent network optimization
fault demarcation
• Each area: provides multi-dimensional • Proactive issue identification: uses the AI • Real-time simulation feedback: evaluates
wired and wireless network health algorithm continuously trained by more channel conflicts on wireless networks in
graphs to intuitively display the than 200,000 Huawei devices to real time and provides optimization
network status and user experience on proactively identifies 85% of potential suggestions based on neighbor and radio
information about devices on each floor.
the entire network or in each area. network faults.
• Predictive optimization: identifies edge APs
• Each user: displays network experience • Minute-level fault locating: uses the
and predicts the AP load trend based on
(who, when, which AP is connected to, fault inference engine to locate issues historical data analysis, and performs
experience, and issue) of each user in within minutes, identify root causes of predictive optimization on wireless
real time throughout the journey, the issues, and provide effective fault networks.
making faults easier to be traced. rectification suggestions.
• AI roaming: establishes roaming baselines
• Each application: perceives experience • Intelligent fault prediction: learns based on different terminal types, and
of audio and video applications in real historical data through AI to dynamically intelligently determine the optimal
time, demarcates faulty devices quickly generate a baseline, and compares and roaming time, providing users with
and intelligently, and analyzes the root analyzes real-time data with the intelligent lossless roaming experience.
cause of poor-QoE issues. baseline to predict possible faults.
CampusInsight: Logical Architecture
⚫ CampusInsight leverages the Huawei-developed big data analytics platform, receives device data
through telemetry, and analyzes and displays network data using intelligent algorithms.
Issue Access Performance
Service User
analysis analysis experience
APIs
Intelligent analysis system
AI engine
CampusInsight Big data analytics platform
Machine learning
algorithm library
Machine learning
Spark Druid Kafka HDFS
framework
Telemetry
Campus
...
• Service:
▫ Issue identification: identifies issues related to connections, air interface

performance, roaming, and devices.
▫ Access analysis and performance experience: analyzes the connection and

performance experience issues of wireless users.
▫ User and network profiles: retrospects user journeys.
• Data analysis:
▫ Data storage: real-time flow preprocessing, distributed processing of offline

flows, and data storage services
▫ Data analysis: mode identification, AI engine, and data aggregation and

query
• Data collection:
▫ Data collection: multi-dimensional data related to users, radios, APs,

switches, and user logs
CampusInsight: External Interfaces
⚫ The southbound interfaces of CampusInsight are used to connect to and manage devices, using the
following protocols: SNMP, HTTP/2 + ProtoBuf, Syslog, and SFTP.
SNMP HTTP/2 + ProtoBuf Syslog SFTP
• Standard SNMPv2c and • It is used to collect device metric • It is a protocol that • It provides a secure
SNMPv3 are supported. packets. forwards system logs network encryption
• SNMP enables southbound • HTTP/2 can be used to on an IP network. method for file
interfaces of CampusInsight authenticate and encrypt • It is an industry transfer.
to connect network devices. communication channels over standards-compliant • CampusInsight uses
• SNMP is an application-layer Secure Sockets Layer (SSL) and protocol for SFTP to collect AP-
network management Transport Layer Security (TLS). recording device logs. related features.
protocol based on the TCP/IP • ProtoBuf is a Google-developed • CampusInsight
architecture. SNMP uses UDP data serialization protocol receives log data
as its transport-layer (similar to XML, JSON, and reported by devices
protocol, and can be used to Hessian), which can serialize data through the Syslog
manage network devices and is widely used in data storage protocol.
that support proxy processes. and communication protocols.
• SNMPv1 and SNMPv2c are insecure and may bring security risks. You are advised
to use the secure SNMPv3.
CampusInsight Application Scenario: On-Premises Scenario
⚫ When deployed in independent mode,
CampusInsight can intelligently analyze wireless
and wired devices on the campus network of an
enterprise. The following networks are Router
supported: WAC
 All WACs (including native ACs) + Fit APs Core switch
 All WACs (including native ACs) + Central APs +

Access switch
RUs
 Switches + WLAN devices + BRAS devices
AP AP
• Broadband remote access server (BRAS): a network device that implements

access, authentication, accounting, control, and management of users connected
in various broadband network access modes. The NE8000 or ME60 provides the
BRAS function.
CampusInsight Application Scenario: Interconnection with
CloudCampus (Huawei Public Cloud Scenario)
⚫ In the Huawei public cloud scenario, the cloud
Cloud management
management platform (iMaster NCE-Campus and platform
CampusInsight) is uniformly managed by Huawei Huawei public cloud DC
cloud management and operations team and

Carrier network
provides the SaaS service for end users. Devices on
tenant networks are connected to the Huawei cloud
management platform through the carrier network.
WAC WAC
Enterprise
network
Tenant A Tenant B
• Device restrictions: Management and intelligent analysis are supported for

Huawei switches, WACs, and APs.
• Networking structure: Huawei cloud management and operations team deploys

CampusInsight and iMaster NCE-Campus on Huawei public cloud DC, and
manages devices through iMaster NCE-Campus. CampusInsight synchronizes
device management information from iMaster NCE-Campus. Tenants need to
purchase management licenses of iMaster NCE-Campus and CampusInsight.
CloudCampus (MSP-owned Cloud Scenario)
⚫ MSPs purchase the controller (iMaster NCE-Campus)
Cloud
and analyzer (CampusInsight) for operational management
platform
purposes. Software can be deployed in their DCs or MSP DC
on the public cloud. MSPs develop their tenants and

Carrier network
provide SaaS services for tenants. Tenant network
devices connect to the DCs of MSPs or public cloud
through the carrier network. WAC WAC
Tenant network
Tenant A Tenant B

Huawei switches, WACs, and APs.
CloudCampus (On-Premises Scenario)
⚫ An enterprise purchases the Huawei cloud
Cloud
management platform (iMaster NCE-Campus and management
platform
CampusInsight) and deploys the platform in the Enterprise DC
enterprise DC. O&M personnel of the enterprise Carrier network

maintain the cloud management platform and
enterprise network. The platform is used within the
enterprise. The enterprise purchases related licenses WAC WAC
from the Huawei service team.

Enterprise
network
Enterprise HQ Enterprise branch

Huawei cloud switches, cloud WACs, cloud APs, and BRAS devices.
• Networking structure: An enterprise deploys CampusInsight and iMaster NCE-

Campus in its DC, and manages devices through iMaster NCE-Campus.
CampusInsight synchronizes device management information from iMaster NCE-
Campus. The enterprise needs to purchase management licenses of iMaster NCE-
Campus and CampusInsight.
CampusInsight: Functions and Features
Network User Application

Real-time experience Network Spectrum Large-screen Topology Third-party User Terminal Mainstream Visualization
visualization health analysis dashboard management device journey dialing application and traffic
management management test analysis
Minute-level fault Individual fault analysis Group fault analysis

demarcation Protocol Mainstream Poor-QoE Wireless group Wired group
trace application analysis user analysis fault analysis fault analysis
Intelligent network
optimization Intelligent radio calibration AI roaming
Contents

▫ Overview of Intelligent O&M
◼ Real-Time Experience Visualization
Wireless Network Health: Network-wide Status Visualization
Rank different networks or different Evaluate the overall health of a Automatically evaluate network quality
areas of one network in terms of campus network based on a and send evaluation reports.
comprehensive experience evaluation. weighted algorithm.
Diagnose and display details

about key experience metrics.
• Wireless network health refers to the comprehensive experience evaluation of a

wireless network.
• Diagnose and display details about key experience metrics.
▫ With this module, the system diagnoses the health of experience metrics
and factors that affect the metrics.
▫ Key metrics that affect campus network service experience include access
success rate, time required for access, and signal coverage and interference,
as well as roaming, capacity, and throughput fulfillment rates.
• Evaluate the overall health of a campus network based on a weighted algorithm.
▫ The weighted algorithm can be used to comprehensively evaluate key

metrics of the campus network.
• Rank different networks or different areas of one network in terms of

comprehensive experience evaluation.
▫ With this module, the system identifies networks or areas at the bottom of
the ranking in terms of overall health status or key metrics. The network
O&M team can then upgrade the overall health of the campus network by
continuously improving the metrics at the bottom of the ranking.
• Automatically evaluate network quality, send evaluation reports, and provide

professional evaluation services.
▫ Network quality evaluation reports including the network overview, metric

details, and rectification suggestions are periodically generated, enabling
data-based network experience evaluation.
Network Health Evaluation Model
⚫ Intuitive display of wireless network quality based on six categories in three dimensions:
Access experience Check whether users can access the network properly.
Check whether the network experience is smooth and

Roaming experience whether frame freezing occurs during user movement.
Check whether interference exists on the wireless

Performance experience network and whether capacity expansion is required.
Dimension Evaluation Metric Root Cause Metric

Access success rate Association/Authentication/DHCP success rate
Access
experience Timed required for Time required for
access association/authentication/DHCP allocation
Roaming Roaming
Roaming success rate/Roaming duration
experience fulfillment rate
Signal and RSSI fulfillment rate and interference
interference fulfillment rate
Channel utilization fulfillment rate and user
Performance Capacity health
quantity fulfillment rate
experience
Proportion of dual band capable client
Throughput
preferring 2.4G, air interface congestion
fulfillment rate
fulfillment rate, and physical layer bandwidth
Exporting Health Reports
⚫ Network quality evaluation reports including the network overview, metric details, and rectification suggestions are
generated periodically or in real time, enabling data-based network experience evaluation.
Network overview Metric details Rectification suggestions
Intuitively display the resource Identify issue objects from seven Identify root causes of top network issues and
overview, user overview, and quality dimensions of the quality evaluation provide rectification suggestions to guide
overview across the entire network. system and improve user experience . users to continuously improve network quality.
User Journey: Real-Time Experience Visualization for
Each User at Each Moment
Step 1: Experience overview
View the overall user experience metrics, such as

the average latency, experience time on the day,
traffic, average RSSI, average bandwidth, and
average packet loss rate.
Step 2: Experience trend
View the fluctuations of user experience metrics

(including RSSI, bandwidth,
rate, packet loss rate, and latency) and identify
issue objects, driving continuous improvement from
poor experience to good experience.
Step 3: Journey playback
View the user experience data at each moment,

including the connected AP and experience metric.
Service Topology: Fault Visualization
⚫ The service topology collects statistics on the status, access, congestion, and error packet issues, as well as displays
the number of users and traffic volume based on sites, regions, buildings, and floors. This allows administrators to
quickly search for and view the buildings that users pass by, helping administrators quickly identify campus network
issues. It is recommended that the total number of sites, regions, buildings, and floors to be viewed be within 10.
Otherwise, the sites, regions, buildings, and floors may overlap.
Category Issue
Port alternating between up and down
Abnormal status states, and port of switch alternating
between up and down states.
Failed authentication and timed out

Access fault
authentication.
Congestion Port congestion and queue congestion.
Port error packets exceeding threshold and

Error packets error packets continuously increasing on
the port.
Spectrum Analysis: Interference Visualization
⚫ With spectrum analysis, CampusInsight displays the status of all channels by AP in a user-friendly
manner.
3 All-channel status monitoring
CampusInsight displays the status of
all channels by AP in real time and
allows administrators to view the
historical trend chart, non-Wi-Fi
interference source types, and RSSI.
2 Historical trend in the channel dimension

The AP reports channel scanning
data to CampusInsight through WMI.
1
CampusInsight scans the status of
all channels by AP in real time, Wi-Fi/Non-Wi-Fi interference source detection list
including the co-channel
... interference ratio, non-Wi-Fi
interference ratio, and normal usage
ratio of these channels.
• WLAN Maintaining Insight (WMI): CampusInsight can function as the WMI server
to receive KPI information reported by APs.
Application Analysis: Network-wide Application Visualization
⚫ Signature identification: determines an application by detecting the signatures in data packets after the system
analyzes service flows passing through a device, and compares the analysis result with the signature database on
the device.
⚫ Devices report traffic statistics to CampusInsight based on NetStream or applications. It is recommended that traffic
statistics be reported based on applications.
Traffic statistics of multiple applications on the entire network Traffic analysis details of a single application
Alarm Monitoring
⚫ The current alarm list is provided. The system proactively displays alarms in the current alarm list, including unacknowledged and
uncleared alarms, acknowledged and uncleared alarms, and acknowledged and cleared alarms. O&M personnel can monitor and
handle alarms on the current alarm page.
⚫ From the perspective of wireless networks, alarms include high channel utilization, weak-signal coverage, air interface congestion,
high interference, client capacity, authentication failure, multiple users going offline, and dual-band-capable client preferring 2.4G.
• Alarm logs:
▫ The alarm log list is provided. O&M personnel can view current and
historical alarms.
• Historical alarms
▫ The historical alarm list is provided. O&M personnel can view

acknowledged and cleared alarms and export historical alarms for network
analysis.
• Masked alarms
▫ The masked alarm list is provided. O&M personnel can view masked alarms
and determine whether masking rules are appropriate.
• Alarm log statistics
▫ Alarms are collected and analyzed from different dimensions, enabling

O&M personnel to centrally analyze network alarms.
• Alarm setting
▫ Visualized pages are provided for managing alarm rules and settings.
• Remote notification
▫ Remote alarm notifications can be sent through emails and SMS messages.
When O&M personnel cannot browse alarms on the Current Alarms page,
remote alarm notification enables them to receive SMS or email
notifications about alarms so that they can handle alarms in real time.
Contents


◼ Minute-Level Fault Demarcation
CampusInsight: Individual and Group Issue Analysis
⚫ During campus network O&M, administrators may encounter the following issues:
 Individual issues: for example, access failures caused by incorrect terminal configurations.
 Group issues: for example, group authentication failures caused by authentication server faults and weak-signal coverage issues
caused by insufficient AP coverage.
Individual fault analysis Group fault analysis
1 Connectivity issues
1 Journey analysis 2 Access analysis ⚫ Association failure ⚫ Authentication ⚫ DHCP failure
⚫ Slow association failure ⚫ Slow DHCP
User journey Protocol trace ⚫ Authentication ⚫ User gateway
(wireless + wired) (wireless + wired) timeout unreachable
⚫ Slow authentication
Air interface
3 Experience analysis 4 Application analysis 2 Roaming issues 3 performance issues
⚫ Repeated roaming ⚫ Weak coverage ⚫ Failure of 5G-
Correlation analysis of Voice/Video application ⚫ Roaming exception ⚫ High channel prior access
poor-QoE users quality awareness utilization ⚫ Client capacity
(Wireless) (wireless + wired) ⚫ High ⚫ Air interface
interference congestion
• CampusInsight analyzes individual issues encountered during network O&M from

the perspective of the access network, user journey, experience, and application
detection. It analyzes protocol processes, visualizes user journey, performs
correlation analysis of poor experience, and detects poor-QoE applications,
helping administrators maintain networks and ensure high-quality user
experience.
• In terms of group issue analysis, CampusInsight:
▫ Quickly identifies a variety of network access issues such as group failure

and slow interaction that occur at the association, authentication, and
DHCP phases. It also quickly and accurately identifies the root causes of
each issue by matching them against a fault knowledge base and provides
troubleshooting suggestions accordingly.
▫ Monitors air interface performance data in real time. On the basis of real-
time performance monitoring and Huawei's expertise in WLAN field,
CampusInsight intelligently identifies six types of air interface issues that
affect network access experience after users get connected to the wireless
network and provides troubleshooting suggestions accordingly.
▫ Analyzes the process when a user roams between APs to intelligently

identify network access experience issues when the user moves and
provides troubleshooting suggestions accordingly.
Individual Issue Analysis: Journey Analysis
⚫ A user at a site reports that the Wi-Fi experience is poor. With the user journey function, the O&M personnel find that the packet
loss rate is high, the RSSI is low, and the weak-signal coverage issue occurs during the user's access to the wireless network.
Step 1: Experience overview
It shows that the average packet loss rate of the user is

high (> 18%).
Step 2: Experience trend
View the Wi-Fi experience trend of the user. It shows that

the user's Wi-Fi experience deteriorates in a period of time
when the RSSI is low and the packet loss rate is high.
Step 3: Journey playback
View the user journey playback details. It shows that the

packet loss rate is high and the RSSI is low, together with a
weak-signal coverage issue.
• With user journey, CampusInsight focuses on the actual Wi-Fi experience of users
and accurately traces the entire Wi-Fi access process of each user. The traced
information vividly presents the user, time, location, connected AP, experience,
and issue.
Individual Fault Analysis: Protocol Trace
⚫ A user at a site reports that the Wi-Fi cannot be connected. With the protocol trace function of CampusInsight, O&M personnel
detect that the DHCP address pool is full, causing the failure to assign IP addresses to mobile phones. Then the O&M personnel
modify the configuration to expand the range of available IP addresses in the DHCP address pool.
Step 1: Check the status
Check the access result in the session list to determine

whether access issues have occurred.
Step 2: Check the interaction
Check the protocol interaction at the association,

authentication, and DHCP phases to determine the
phase where an issue occurred. Ultimately, it is
confirmed that the issue occurred in the DHCP phase,
leading to the access failure.
Step 3: Check root causes
Check the possible root causes and rectification

suggestions.
• With protocol trace, CampusInsight performs refined protocol-level analysis for

the three Wi-Fi access phases (association, authentication, and DHCP), presents
protocol interaction details at each phase, and provides root causes and
rectification suggestions for user access issues. This makes protocol trace a useful
tool for resolving Wi-Fi connection failures.
Individual Fault Analysis: Poor-QoE User Analysis
⚫ O&M personnel at a site perform routine inspection on users and the Wi-Fi experience of a user is poor. With the correlation analysis
function, they find that the most possible cause for the poor Wi-Fi experience is the high radio interference. Then they perform
troubleshooting based on the rectification suggestions. The fault is rectified.
Step 1: AI-based identification

Use AI algorithms to perform outlier detection and
intelligently identify the moments when Wi-Fi experience
deterioration occurs (marked by red shadows).
Step 2: AI-based analysis

During the Wi-Fi deterioration period, the radio
interference ratio is high, with a metric correlation of
71%, the highest among all related metrics.
Step 3: AI-based issue closure
CampusInsight provides appropriate rectification

suggestions based on the long-term O&M expertise of
Huawei engineers.
• With correlation analysis for Wi-Fi experience deterioration, CampusInsight uses

the AI algorithm to perform outliers and intelligently identify users whose Wi-Fi
experience deteriorates. In addition, CampusInsight uses the correlation analysis
algorithm to analyze the most relevant network metric, so as to locate the root
causes of issues and provide appropriate rectification suggestions based on the
long-term O&M expertise of Huawei engineers.
Individual Fault Analysis: Audio Quality Analysis
⚫ O&M personnel at a site provide assurance for important video conferences attended by company executives and proactively inspect
the conference application quality. After detecting a quality issue, O&M personnel use the application troubleshooting function to
quickly demarcate the packet loss location of application flows and rectify the issue.
Step 1: Application quality identification
View basic information such as the 5-tuple of an

application flow and quality overview such as
packet loss, out-of-order, and jitter.
Step 2: Analysis and demarcation
Check the physical topology path and actual path

of the application flow. Yellow links indicate that
the air interface quality is poor. It is suspected
that the quality issue occurs on AP4.
Step 3: Correlation analysis
View the quality metric trend of application flows

on the device and metrics of ports to facilitate
issue locating.
• With application quality awareness and fault demarcation, CampusInsight allows

O&M personnel to view the quality of specific application flows and demarcate
issues for application flows with poor quality. When an issue occurs on the
campus network, the O&M personnel can rectify the issue based on the packet
loss location. The network is fault-free if the issue occurs on the external
networks of the campus.
Group Fault Analysis: Connectivity Issue Analysis (1/2)
⚫ Exception identification: exception detection for network access behaviors.
 Non-fault failure scenario (area A): Wireless network user access failures always exist, but they may not be faults.
 Denoising of abnormal clients (area B): Impacts of individual clients are excluded. The failure rate increases sharply due to
abnormal clients. Although the failure rate exceeds the baseline, it is not an issue.
 Intelligently identifying issues with a large number of failed clients and a large failure rate through machine learning (area C):
Intelligently identify group issues with large impact scopes.
User quantity from low to high

Area A Area B Area C
Failure rate from low to high
Area A Wireless network user access failures always exist.
Area B Impacts of individual clients are excluded.
Green curve: Blue curve: Gray shadow: Area C A large number of failed clients exist.
user quantity failure rate failure rate baseline
Group Fault Analysis: Connectivity Issue Analysis (2/2)
⚫ Pattern identification: Causes may be different for issues with the same symptom. Through pattern identification,
possible causes can be found. In addition, features of clients that fail to access the network are abstracted and
analyzed using clustering algorithms.
⚫ Root cause analysis: Analyze possible root causes based on client online logs and provide rectification suggestions,
helping O&M personnel resolve issues.
Root cause analysis and rectification suggestions
Fault pattern
Group Fault Analysis: Weak-Signal Coverage
⚫ The system identifies coverage issues when a batch of users have weak-signal coverage for a period and displays
the duration of weak-signal coverage, average RSSI of users, and number of affected users. Then the system
analyzes possible causes of the weak-signal coverage issues, and provides rectification suggestions on the issues.
Step 1: Issue detection
Intelligently identify weak-signal coverage issues.
Step 2: Issue analysis
Provide the RSSI distribution of users related to the

weak-signal coverage issues and fluctuations of the
AP power, facilitating issue analysis.
Step 3: Issue locating
Rectify issues based on the rectification suggestions.
Group Fault Analysis: High Interference Issue
⚫ The system quickly identifies high co-channel interference issues lasting for a period of time. The high interference lasting duration,
number of affected users, and traffic used under the high interference radio can be analyzed. Then the system dynamically analyzes
possible root causes of high interference in different scenarios and provides operation suggestions.
Step 1: Intelligent identification
Quickly identify high co-channel interference issues

lasting for a period of time and record them as high
interference issues.
Step 2: Association analysis
Analyze metrics associated with high interference,

such as high interference lasting duration, number
of affected users, and traffic used under the high
interference radio.
Step 3: Issue locating
Provide possible causes and suggestions to help

locate root causes of the issues.
Group Fault Analysis: Roaming Exception
⚫ The system identifies issues indicating that roaming exceptions frequently occur on an AP. The number of APs and
users affected by roaming exceptions can be analyzed.
Step 1: Roaming exception overview
Display the trend charts of Roaming Exception Rate and

Number of Roaming Clients&Number of Roaming Clients
Exception Rate.
Step 2: Issue identification
Display information such as the roaming time, user MAC

address, user name, and roaming result of each roaming
exception event in the original event list. You can view the
roaming-out and roaming-in details, and information
about APs that the user connects to in the roaming
process.
Step 3: Distribution
Display the issue overview and distribution of APs affected

by roaming exception issues to help locate root causes.
Contents


◼ Intelligent Network Optimization
Big Data Calibration Overview
⚫ It is recommended that radio calibration be enabled during off-peak hours at night to prevent impact on services. If
the radio environment of an AP differs significantly during off-peak hours and peak hours, the radio calibration
effect during off-peak hours may be inapplicable to service requirements during peak hours.
⚫ With the big data calibration function, CampusInsight — Huawei's data analyzer — analyzes KPI information
collected by APs on a daily basis and provides prediction data. In this manner, the radio calibration result during
off-peak hours may better suit service requirements during peak hours.
AI algorithm
Historical running data Baseline

Load prediction
within seven days training
Data Guidance for device

reporting calibration
Device
• In densely populated scenarios such as canteens, offices, waiting rooms, and

cafes, a large number of STAs connect to APs and then disconnect from them
within a short period of time. The air interface resources of these APs are
occupied by these STAs, resulting in performance deterioration. In addition, the
network access experience of such STAs is affected due to unnecessary switching
of network access modes. For ease of description, these APs are called edge APs,
and STAs that are temporarily connected and quickly leave are called nomadic
STAs. The big data analyzer can determine whether an AP is an edge AP based
on the network metric data reported by the AP. In the next big data calibration,
the big data analyzer adjusts the AP's transmit power to suppress access of
nomadic STAs and improve the health of AP radios.
Big Data Calibration Process
⚫ An AP reports KPI information to the big data
CampusInsight WAC AP
analyzer through the KPI information reporting
function. The big data analyzer then
Enable KPI reporting.
summarizes, analyzes, and predicts the KPI Report KPI information.
information. When scheduled radio calibration Perform analysis and prediction
based on historical data.
is triggered next time, the device performs
Request the prediction data.
radio calibration based on the real-time
Deliver the prediction data.
channel quality and the prediction data Enable channel scanning.
provided by the big data analyzer. The radio Report scanning information.
calibration result can help avoid non-
Perform radio calibration.
continuous interference sources and better Deliver calibration results.
meet service requirements.
Big Data Calibration Case (1/2)
⚫ A company temporarily re-allocates its employees from the original office area that needs a wireless network upgrade and
reconstruction to Building C4. With more employees in Building C4, the network load increases and employees complain that the
wireless network becomes slow. To solve this, the company enables the intelligent radio calibration function to automatically identify
high-load areas in Building C4 and adjust the AP bandwidth, improving the bandwidth and Wi-Fi experience for employees.
1 Choose Optimization > Big Data Calibration. 2 Enable Intelligent Radio Calibration and click Next. On the Load
Optimization page, high-load APs on the third floor of C4 are displayed.
Big Data Calibration Case (2/2)
3 On the second day after big data calibration is enabled, the 4 Check the calibration details. The 5 GHz frequency bandwidth
average bandwidth of APs on the third floor of C4 increases of high-load APs on the third floor of C4 is changed from 20
to 252 Mbit/s and the average channel utilization decreases MHz to 40 MHz. As a result, the Internet access experience of
to 4%. employees is improved and no frame freezing occurs.
Quiz
1. (Multiple-answer question) CampusInsight uses southbound interfaces to connect to devices. Which of

the following protocols are supported by CampusInsight southbound interfaces? ( )
A. SNMP
B. FTP
C. HTTP/2 + ProtoBuf
D. Syslog
2. (Multiple-answer question) Which of the following functions can CampusInsight implement? ( )

A. Wireless health evaluation
B. Protocol trace
C. User journey analysis
D. Application analysis
1. ACD
2. ABCD
Summary
⚫ The course describes the traditional WLAN O&M solution. You can log in to the WAC's web
system to perform routine maintenance, including viewing the status of the WAC, APs, and
users, and radio conditions.
⚫ After learning this course, you will be able to understand the traditional WLAN O&M
solution and CampusInsight intelligent O&M solution, improving the capabilities of
analyzing and resolving issues during routine wireless network O&M.
Recommendations

AI Artificial Intelligence
API Application Programming Interface
BRAS Broadband Remote Access Server
CLI Command-Line Interface
FTP File Transfer Protocol

HDFS Hadoop Distributed File System
HTTP2 Hypertext Transfer Protocol version 2
HTTPS Hypertext Transfer Protocol Secure
IaaS Infrastructure as a Service
JSON JavaScript Object Notation

KPI Key Performance Indicator
MSP Managed Service Provider
ProtoBuf Protocol Buffers
RSSI Received Signal Strength Indication
RU Remote Unit
SaaS Software as a Service
SFTP Secure File Transfer Protocol
SNMP Simple Network Management Protocol
SSH Secure Shell Protocol

SSL Secure Sockets Layer
TCP Transmission Control Protocol
TLS Transport Layer Security
UDP User Datagram Protocol
VRP Versatile Routing Platform

WMI WLAN Maintaining Insight
XML Extensible Markup Language
intelligent world.


that could cause actual results and developments to differ
materially from those expressed or implied in the predictive
statements. Therefore, such information is provided for reference
purpose only and constitutes neither an offer nor an acceptance.
Huawei may change the information at any time without notice.
WLAN Troubleshooting
Foreword
⚫ The wireless local area network (WLAN) has become the most cost-effective and convenient
network access mode. WLAN technology allows users to easily access a wireless network
and move around within the coverage area of the wireless network. However, when a fault
occurs on the wireless network, services on the entire network may be interrupted.
Therefore, wireless network engineers must be capable of troubleshooting WLAN faults.
⚫ This course describes the WLAN troubleshooting methods.
Objectives
 Describe the troubleshooting process.
 Understand WLAN troubleshooting methods.
Contents
1. Overview of WLAN Troubleshooting
2. Reliability Faults
3. Cloud Management Faults
4. Wireless Bridge Faults
5. Radio Resource Management Faults
6. Roaming Faults
Introduction to WLAN Faults
⚫ With increasing requirements for network portability and mobility, WLANs have been applied to various industries. The WLAN
functions as the access layer of the network. Once a fault occurs on the WLAN, services may be interrupted.
⚫ WLAN faults can be detected on the network side (for example, device exception alarms) or on the user side (for example, Internet
access failure). After a fault is detected, you need to collect fault information about each device immediately. Common wireless
network faults are as follows:
Device faults STA experience WLAN service Cloud management Reliability faults
faults faults faults
✓ High CPU usage ✓ Failure to associate with ✓ Ineffective radio ✓ Onboarding failures of ✓ VRRP HSB fault
✓ PoE exception an AP calibration cloud APs ✓ Dual-link HSB
✓ Device upgrade ✓ Internet access failure ✓ Ineffective user rate ✓ Roaming failures of fault
failure ✓ Slow network speed limiting STAs between cloud APs ✓ Dual-link
✓ ... ✓ Unexpected going-offline ✓ MPs' failures to go online ✓ Failure to deliver switchover failure
✓ ... on a mesh network configurations to cloud ✓ ...
✓ ... APs
✓ ...
Troubleshooting Process
⚫ The basic idea of troubleshooting is to systematically reduce or isolate all the possible causes of a fault into several subsets, thus
reducing the complexity of the fault. Troubleshooting is to find fault causes step by step, and finally resolve the fault.
⚫ After a fault is detected, collect fault information about each device immediately, analyze fault information, and then locate and
rectify the fault. For solution-level troubleshooting on the entire network, the key is to quickly locate the failure point to a
component or device based on the fault symptom and then rectify the fault. The following figure shows the troubleshooting process.
Fault detection
Fault information collection Fault information collection

• Basic fault information: fault occurrence time, fault symptom, severity,
Fault information analysis networking information, and measures that have been taken.
• Running status information: startup configuration, current configuration,
interface information, and system version.
Fault locating • Device log information: logs recorded when the fault occurs on the device.
• Intelligent diagnostic information: diagnostic information generated after
Fault rectification the intelligent diagnosis tool diagnoses the WAC/AP or users.
• Troubleshooting rules:
▫ Recover the system as soon as possible.
▫ During fault locating, collect fault data in a timely manner and save the
data to mobile storage media or PCs on the network.
▫ Before determining the fault handling solution, evaluate the solution's

impact and ensure normal running of services.
Contents
6. Roaming Faults
Reliability Faults
⚫ In real-world applications, many non-technical factors can cause network failures and service interruptions. An effective way to
enhance system reliability is to improve fault tolerance capabilities of the system, speed up fault recovery, and reduce the impact of
faults on services.
⚫ Common WLAN reliability technologies focus on network fault recovery, such as VRRP HSB, dual-link HSB, dual-link cold backup,
and N+1 backup. WLAN reliability faults refer to the faults related to the preceding reliability technologies.
HSB channel Common faults

WAC1 WAC2
!
• Failure to deploy VRRP HSB
• Failure to deploy dual-link backup
Core switch • Wireless configuration synchronization failure

• Active/Standby switchover failure when the active WAC is
faulty
Access switch • Active/Standby switchback failure
• Incorrect selection of the active WAC in dual-link mode
AP
• Dual-link HSB failure
• ...
Flowchart for Troubleshooting a Failure to Deploy VRRP HSB
Is the HSB channel

Failure to deploy between the master and No Modify the link
VRRP HSB backup WACs configuration.
normal?
Yes
No Test services
Is the HSB service Configure the HSB to verify the
configured? service. troubleshooting result.
Yes
No Yes
Is VRRP is correctly Modify the VRRP Is the fault
configured? configuration. rectified?
No
Yes
No Configure the VRRP Collect information

Is the source address
virtual IP address as and seek help.
correctly configured?
the source address.
Yes
No
Is HSB enabled? Enable HSB.
Yes
• The possible causes are as follows:
▫ The active/standby relationship fails to be established.
▫ The HSB service is incorrectly configured.
▫ The VRRP virtual IP address is not configured.
▫ The source address is not configured.
▫ HSB is disabled.
Procedure for Troubleshooting a Failure to Deploy VRRP HSB (1/3)
⚫ Step 1: Check whether the HSB channel between the master and backup WACs is normal.
 Log in to the master WAC and check whether the link between the master and backup WACs is normal. Run the display hsb-service 0 command to
check whether the link status is Connected.
 Connected indicates that the link is normal, and Disconnected indicates that the link is disconnected. You need to check the link to restore it to the
Connected state.
[WAC] display hsb-service 0

Hot Standby Service Information:
----------------------------------------------------------
Local IP Address : 10.1.1.1
Peer IP Address : 10.1.1.2
Source Port : 10241
Destination Port : 10242
Keep Alive Times :5
Keep Alive Interval :2
Service State : Connected
Service Batch Modules :
----------------------------------------------------------
⚫ Step 2: Check whether the VRRP HSB service is configured on the master and backup WACs. For details, see Step 1.
 To back up AP information, you need to bind the AP module. To back up user information, you need to bind the Access-user module.
 Log in to the master and backup WACs and check the bound service types.
⚫ Step 3: Check whether the VRRP virtual IP address is configured on the master and backup WACs.
 Log in to the master and backup WACs to check the VRRP status and virtual IP address using the display vrrp brief command.
[WAC] display vrrp brief

Total:1 Master:1 Backup:0 Non-active:0
VRID State Interface Type Virtual IP
----------------------------------------------------------------
2 Master Vlanif1360 Normal 10.1.1.6
⚫ Step 4: Check whether the CAPWAP source address is correctly configured.

 Run the display capwap configuration command. The CAPWAP source address must be set to the VRRP virtual IP address.
[WAC] display capwap configuration

------------------------------------------------------------
Source interface :-
Source ip-address : 10.1.1.6
Echo interval(seconds) : 25
Echo times :6
......
⚫ Step 5: Check whether HSB is enabled.
 Run the display this command in the HSB group view.
[WAC-hsb-group-0] display this

#
hsb-group 0
track vrrp vrid 2
interface Vlanif1360
bind-service 0
hsb enable
#
return
Flowchart for Troubleshooting a Failure to Deploy Dual-Link HSB
Is dual-link backup No
Failure to deploy Enable the dual-link
dual-link backup enabled on the active and backup function.
standby WACs?
Yes Test services

to verify the
No troubleshooting result.
Is the IP address of the Change the IP address of
standby WAC correct? the standby WAC.
Yes
Yes Is the fault
rectified?
No
No
Does the standby WAC start Restart the standby WAC.
properly?
Analyze packets
and seek help.
Yes
No
Are the IP addresses of the Configure the IP addresses
active and standby WACs of the active and standby
specified on the standby WACs.
WAC?
Yes
• The possible causes of a failure to establish dual links between the active and
standby WACs include:
▫ The dual-link backup function is disabled on the active WAC.
▫ The standby WAC IP address is not configured on the active WAC, or the
configured standby WAC IP address is different from the standby WAC IP
address.
▫ The standby WAC is not started properly.
▫ The dual-link backup function is disabled on the standby WAC.
▫ The active WAC IP address is not specified on the standby WAC.
▫ When the AP selects a WAC, the selected active WAC has not started.
Procedure for Troubleshooting a Failure to Deploy Dual-Link
Backup (1/2)
⚫ Step 1: Check whether the dual-link backup function is enabled on the active and standby WACs.
 Run the display ac protect command on the active and standby WACs to check whether the dual-link backup function is enabled. If not, run the ac
protect enable command to enable the dual-link backup function.
[WAC] display ac protect

------------------------------------------------------------
Protect state : disable
Protect AC IPv4 : 10.23.100.3
Protect AC IPv6 :-
Priority :0
Protect restore : enable
Coldbackup kickoff station : disable
Alarm restrain : disable
------------------------------------------------------------
⚫ Step 2: Check whether the configured IP address of the standby WAC is the same as the actual IP address of the standby WAC.
 Check the IP address of the standby WAC on the active WAC. For details, see step 1.
 Run the display capwap configuration command on the standby WAC. If the source address is an IP address, it is directly displayed. If the source
address is a VLANIF interface, check the IP address of the VLANIF interface.
 Check whether the two IP addresses are the same. If they are different, change the IP address of the standby WAC configured on the active WAC.
Procedure for Troubleshooting a Failure to Deploy Dual-Link
Backup (2/2)
⚫ Step 3: Check whether the standby WAC is running properly. If the standby WAC is not running properly, rectify the fault as required.
⚫ Step 4: Check whether the IP addresses of the active and standby WACs are correctly specified on the standby WAC. If this parameter
is not configured, the standby WAC does not deliver dual-link information to APs during link establishment with the APs. As a result,
dual links cannot be established.
[WAC] display ap-system-profile name wlan-net

------------------------------------------------------------------------------
AC priority :-
Protect AC IP address :-
Primary AC : 10.23.100.2
Backup AC : 10.23.100.3
...
Flowchart for Troubleshooting a Wireless Configuration
Synchronization Failure
Check the configuration to
Wireless configuration No Test services
Is the wireless configuration ensure that the master and
synchronization to verify the
synchronization link backup master WACs can
failure troubleshooting result.
established? communicate.
Yes
Yes
Manually add inconsistent
Are the master and backup No configurations or manually Is the fault
master WACs configured trigger wireless configuration rectified?
Consistent? synchronization. No
Yes
Manually run the commands

Is wireless configuration No that fail to be synchronized
synchronization executed or manually trigger wireless
successfully? configuration Collect information
synchronization. and seek help.
Yes
• In active/standby scenarios, the possible causes of wireless configuration

synchronization failures are as follows:
▫ The wireless configuration synchronization link is not set up.
▫ The configurations of the master and backup master WACs are inconsistent.
▫ When wireless configuration synchronization is manually performed, the

configuration fails to be restored after the standby WAC restarts.
Procedure for Troubleshooting a Wireless Configuration
Synchronization Failure (1/2)
⚫ Step 1: Check whether the wireless configuration synchronization link is properly set up.
 If the status of the wireless configuration synchronization link is up, the configurations of the master and backup master WACs
have been synchronized.
 If the wireless configuration synchronization link is down, the configuration synchronization link is not established. Ensure that
the master and backup master WACs can ping each other and check whether the wireless configuration synchronization
configuration is correct.
[WAC] display sync-configuration status

Info: This operation may take a few seconds. Please wait for a moment. done.
Controller role: Master/Backup/Local
--------------------------------------------------------------------------------------
--------------------------------------------------------------------------------------
192.168.10.1 Local - - up –
--------------------------------------------------------------------------------------
Total: 1
• The following lists the status of a wireless configuration synchronization link. You
can rectify the fault based on the site requirements.
▫ down: The configuration synchronization link is not established.
▫ initial: The configuration synchronization link starts to be established.
▫ up: The configurations of the active and standby WACs have been
synchronized.
▫ psk-mismatch: The PSKs of the active and standby WACs are inconsistent.
▫ ver-mismatch: The versions of the active and standby WACs are

inconsistent.
▫ cfg-mismatch(config proc fail): The configuration synchronization link is set

up successfully. The configuration on the active WAC is synchronized to the
standby WAC, but the configuration fails to be executed.
▫ cfg-mismatch(config check fail): When a link is established for the first time
during configuration synchronization, the configurations of the active and
standby WACs are inconsistent.
▫ dev-mismatch: The models of the active and standby WACs are different.
▫ cfg-mismatch(sync failed): The configuration synchronization message fails

to be sent. As a result, the configuration synchronization fails.
Procedure for Troubleshooting a Wireless Configuration
Synchronization Failure (2/2)
⚫ Step 2: Check whether the configurations of the master and backup master WACs are consistent. If the status of the wireless
configuration synchronization link in step 1 is cfg-mismatch(config check fail), the configurations of the master and backup master
WACs are inconsistent. In this case, perform the following operations:
 Run the display unresumed-configuration command in the diagnostic view of the backup master WAC to check whether configuration restoration
failure records exist.
 Run the display sync-configuration compare command on the master WAC to check whether the public configurations of the master and backup
master WACs are consistent.
⚫ Step 3: Check whether there are commands that fail to be executed during configuration synchronization. If the status in step 1 is
cfg-mismatch(config proc fail), the configuration synchronization link is successfully established, but the command for synchronizing
configurations from the master WAC to the backup master WAC fails to be executed.
 Run the display sync-configuration fail-record command on the backup master WAC to check which commands fail to be executed.
⚫ Step 4: Run the synchronize-configuration command in the WLAN view of the master WAC to manually trigger wireless
configuration synchronization.
Contents
6. Roaming Faults
Cloud Management Faults
⚫ Huawei wireless cloud management solution includes cloud-based WAC management and cloud-based AP
management.
 Cloud-based WAC: After WACs are registered with iMaster NCE-Campus, administrators can remotely manage and control WACs and Fit APs on
enterprise networks, implementing automatic deployment, service provisioning, monitoring, and O&M of wireless networks.
 Cloud-based APs: APs are registered with iMaster NCE-Campus, and iMaster NCE-Campus delivers operations to APs in a unified manner, facilitating
batch service configuration.
Router
Management faults Service faults

Core switch
Cloud WAC • Onboarding failures of • Ineffective radio
cloud WACs calibration on cloud APs
• Onboarding failures of • Roaming failures of STAs
Access switch
cloud APs between cloud APs
• Failure to deliver • In cloud AP scenarios, STA
Fit AP Cloud AP configurations to cloud signals are weak.
APs • ...
• Cloud AP upgrade failure
• ...
STAs
Flowchart for Troubleshooting Onboarding Failures of Cloud
WACs and APs
No Test services
Onboarding failures of Is the basic configuration Change the basic to verify the
cloud WACs and APs correct? configuration. troubleshooting result.
Yes
Yes
No
Resolve network Is the fault
Is the network connectivity
connectivity issues. rectified?
normal?
No
Yes
Can the onboarding Yes Rectify the fault based

failure cause be on the login failure
displayed? cause. Collect information
and seek help.
No
• Common causes of cloud WAC/AP onboarding failures are as follows:
▫ The current device is not working in cloud mode.
▫ The device is not correctly registered with the cloud management platform.
▫ The onboarding configuration on the device is incorrect.
▫ The network between the device and cloud management platform fails.
Procedure for Troubleshooting Onboarding Failures of Cloud
WACs and APs (1/3)
⚫ Step 1: Check basic configurations.
 Check whether the device is in cloud mode. If not, switch to the cloud mode.
 Run the display cloud-mng info command to check information about the cloud management platform on the device.
<Huawei> display cloud-mng info

------------------------------------------------------------
AP status : Online
Controller URL :-
Controller IP address : 10.1.1.1
Controller port : 10020
Controller address source : configuration
------------------------------------------------------------
 Run the display cloud-mng register-center status command to check the status of the registration query center.
<Huawei> display cloud-mng register-center status

--------------------------------------------------------------------------------------
Register center URL : register.naas.huawei.com
Register center IP :-
Register center port: 10020 Current status : sleeping
--------------------------------------------------------------------------------------
• If the configuration is incorrect, perform the following operations to reconfigure

the cloud AP or cloud WAC. To configure the cloud AP or cloud WAC to go
online, you need to obtain the IP address or URL of the cloud management
platform.
▫ Using DHCP:
▪ When a device sends a DHCP request to obtain the IP address of the

cloud management platform, the DHCP response packet returned by
the DHCP server carries the Option 148 field (IP address/URL of the
cloud management platform). The AP proactively registers with the
platform based on the IP address.
▫ Manual configuration using commands:
▪ <Huawei> system-view
▪ [Huawei] cloud-mng controller ip-address 10.1.1.1 port 10020
▫ Using the registration query center:
▪ If an AP cannot obtain the IP address of the cloud management

platform through DHCP or manually, the AP sends a query packet to
the registration query center to obtain the IP address of the cloud
WACs and APs (2/3)
⚫ Step 2: Check the network connectivity between the device and the cloud management platform.
 Check whether Ethernet0/0/47 is Up and has a correct IP address.
#
interface Ethernet0/0/47
ip address 169.254.3.1 255.255.255.0
#
 Use bidirectional ping packets to check whether the two devices can ping each other.
<Huawei> ping -c 1000 10.1.1.1

PING 10.1.1.1: 56 data bytes, press CTRL_C to break
Reply from 10.1.1.1: bytes=56 Sequence=1 ttl=128 time=3 ms
 During a bidirectional ping test, specify the ping packet size to check whether the ping operation is successful.
 If the ping operation fails, check the network between the AP and iMaster NCE-Campus. Ensure that they can communicate with
each other.
WACs and APs (3/3)
⚫ Step 3: Run the display cloud-mng online-fail-record command in the diagnostic view to check the cause of the
device onboarding failure and rectify the fault based on the failure cause.
Failure Cause Troubleshooting Method
AP can't obtain address Check the DHCP server configuration and ensure that the device can obtain an IP address.
Check the DNS server and ensure that the device can correctly resolve the IP address of
DNS failed
the cloud management platform.
Contact the system administrator of the cloud management platform to ensure that the
Register Fail: Internal error, the controller is not already
cloud management platform is running properly.
The license is not authorized or has expired. Ensure that the license resources on the
Register Fail: License is not authorized or expired
cloud management platform are sufficient.
Register Fail: The device is not added to the controller Add the ESN of the device to a site of the cloud management platform.
Register Fail: The cloud APs cannot add to AC site Add the device to a site of the AP type.
Contact the system administrator of the cloud management platform to check the
Register Fail: The ESN is not in allow rule
configuration and add the ESN of the current device to the device whitelist.
Check the network connectivity and port to ensure that the device can access port 10020
Connect to controller failed
of the cloud management platform.
Other Collect related information and contact technical support personnel.
• The preceding troubleshooting methods are performed on the device side. You
can also perform troubleshooting on the cloud management platform side, which
is not described in detail. The possible causes are as follows:
▫ The device version does not match.
▫ The ESN added to the cloud platform is inconsistent with the actual ESN of
the device.
▫ The controller license has expired.
▫ The registration service is not started.
▫ The network IP addresses conflict.
▫ The device fails to obtain an IP address due to management VLAN

switching.
▫ The length of the registration response packet exceeds the MTU of the
device. As a result, the device fails to process the packet.
Flowchart for Troubleshooting a Failure to Deliver
Configurations to Cloud APs
Failure to deliver No Test services
Is the cloud AP status Ensure that the AP to verify the
configurations to
normal? status is normal. troubleshooting result.
cloud APs
Yes
Yes
Ensure network stability
Is the network between No between cloud APs and Is the fault
the cloud AP and cloud
the cloud management rectified?
management platform
platform. No
stable?
Yes
Is the MTU properly No

Modify the MTU.
configured?
Collect information
and seek help.
Yes
▫ The configuration fails to be delivered due to network problems.
▪ When the network is unstable, the time when an AP goes offline is

almost the same as the time when the configuration fails.
▫ The configuration fails to be delivered due to AP restart.
▪ After the AP is restarted, the configuration fails to be delivered. After

the AP is restarted, the configuration is delivered successfully.
▫ The configuration fails to be delivered because the MTU is small.
▪ The default tunnel MTU of a cloud AP is 1400, corresponding to the

maximum segment size (MSS) of 1360. Tunnels are configured on
some networks, and the actual MTU or MSS is smaller than the value
of this parameter. As a result, the configuration fails to be delivered.
Procedure for Troubleshooting a Failure to Deliver
Configurations to Cloud APs (1/2)
⚫ Step 1: Check whether the AP goes online on the cloud management platform. If not, ensure that the cloud AP is online.
⚫ Step 2: Check the network connectivity between the device and cloud management platform. Run the ping command to check
whether packet loss occurs between the AP and cloud management platform. If packet loss occurs, configurations may fail to be
delivered. In this case, ensure network stability.
 If the ping operation fails, check the network between the AP and cloud management platform. Ensure that they can communicate with each other. If
the ping operation succeeds but Telnet fails, check whether port 10020 is disabled.
# Ping packets in both directions to check whether the ping operation is successful.
<Huawei> ping -c 1000 10.1.1.1
# Telnet the cloud management platform on the cloud AP.

<Huawei> telnet 10.1.1.1 10020
Procedure for Troubleshooting a Failure to Deliver
Configurations to Cloud APs (2/2)
⚫ Step 3: Check whether the MTU is properly configured.
 Check whether the cloud AP and cloud management platform can ping each other using packets of a specified size.
 If the ping operation fails, the MTU between the AP and cloud management platform is improper. Change the MTU to a value
greater than 1400 (default MTU value of a cloud AP).
<Huawei> ping -s 1372 -f 10.1.1.1 // parameter, 1372 indicates that the MTU value is 1400 and the MSS value is 1360.
--- 10.1.1.1 ping statistics ---
5 packet(s) transmitted
5 packet(s) received
0.00% packet loss
round-trip min/avg/max = 1/1/3 ms
• To change the MTU, perform the following steps:
▫ In an on-premises scenario, change the MTU value of the network between

the cloud AP and cloud management platform.
▫ For a Huawei public cloud, run the tcp adjust-mss command in the
interface wan0 view of the cloud AP to change the MSS of TCP packets on
the interface, or run the mtu command in the system view to change the
MTU.
▫ For devices connected across the public network, the MTU on the public
network may change dynamically or the configuration may fail to be
delivered. In this case, adjust the MTU value based on the actual situation.
Flowchart for Troubleshooting Ineffective Radio Calibration
on Cloud APs
Are the automatic

No Enable the automatic Test services
Ineffective radio channel and power
channel and power to verify the
calibration on cloud APs calibration functions enabled
calibration functions. troubleshooting result.
for the cloud APs?
Yes
Yes
Are the APs at the No Allocate APs to the same Is the fault
same site? site. rectified?
No
Yes
No Modify the configuration

Is the calibration group to ensure Layer 2
established? connectivity between APs. Collect information
and seek help.
Yes
▫ Cloud APs belong to different sites.
▫ The calibration group is not created.
▫ The fixed channel mode or power mode is used.

Procedure for Troubleshooting Ineffective Radio Calibration
on Cloud APs (1/2)
⚫ Step 1: On the cloud management platform, check the states of the automatic channel and power calibration
functions for a cloud AP. Enable these two functions if they are disabled.
⚫ Step 2: On the cloud management platform, check whether the cloud APs involved in radio calibration are at the
same site. APs at different sites cannot establish a calibration group. Ensure that the cloud APs involved in radio
calibration are at the same site.
Procedure for Troubleshooting Ineffective Radio Calibration
on Cloud APs (2/2)
⚫ Step 3: Check whether the calibration group is properly established.
 Log in to the AP and run the display wem leader-info all command in the AP diagnostic view to check the leader
AP.
[AP] diagnose
[AP-diagnose] display wem leader-info all
-----------------------------------------------------------------------------------
MAC IP Address IsValid Role DeviceSn
-----------------------------------------------------------------------------------
4cfa-cab7-4ca0 192.168.1.232 1 SLAVE 56a943fc0bfba650
c4ff-1fac-d210 192.168.1.131 1 LEADER 56a943fc0bfba650
-----------------------------------------------------------------------------------
Total: 2
 If no leader AP exists, no calibration group is created and unified calibration cannot be performed. In this case,
check whether Layer 2 isolation is configured. If so, modify the configuration to ensure that APs can
communicate with each other at Layer 2.
Flowchart for Troubleshooting STA Roaming Failures in
Cloud AP Scenarios
Roaming failures of No Ensure that the HAP Test services

STAs between cloud Are the HAP and FAP at and FAP are at the to verify the
APs the same site? same site. troubleshooting result.
Yes
Check whether Layer 2 Yes

No
Is a mobility group isolation is configured Is the fault
established? and whether APs can rectified?
scan each other.
No
Yes
Is the NAT No Configure the NAT

networking networking on upper-
configured? layer NEs. Collect information
and seek help.
Yes
• The possible causes for STA roaming failures in cloud AP scenarios are as follows:
▫ Cloud APs are not deployed at the same site.
▫ No mobility group is established between cloud APs.
▫ Cloud APs go online in NAT mode.

Procedure for Troubleshooting STA Roaming Failures in
Cloud AP Scenarios (1/2)
⚫ Step 1: On the cloud management platform, check whether the cloud APs involved in roaming are at the same site. APs at different
sites do not allow STA roaming.
⚫ Step 2: Log in to the APs before and after roaming and run the display wlan wmg mobility-group command to check whether the
mobility group is set up.
 If the value of State in the command output is 2, the inter-AP roaming link is successfully set up.
 If other APs exist in the mobility group but links fail to be established in the mobility group, ensure that the APs before and after roaming can ping
each other and NAT is not configured between the APs.
 If no other AP exists in the mobility group, query information about neighboring APs on the AP. If no neighboring AP can be scanned, check the AP
signal strength, whether obstacles exist between APs, or whether coverage holes exist between APs.
[Huawei-diagnose] display wlan wmg mobility-group
MemSet Size: 512, MemSet CurSize: 0, MemSet LocalMemID: -
--------------------------------------------------------------------------------------------------------------------------
MemID Local-IP Peer-IP Role IsLoc IsAct IsTun State GrpID RSSI(dBm) Description Time
--------------------------------------------------------------------------------------------------------------------------
-----------------------------------------------------------------------------------------------------
GrpSet Size : 32, GrpSet CurSize : 0
-----------------------------------------------------------------------------------------------------
GrpID LocalMemID MemCount Name MemSet[X,X,X,X]
• Run the following command on the AP to query neighboring APs:
▫ [AP-diagnose] display umac calibrate neighbor info radio radio-id all

Procedure for Troubleshooting STA Roaming Failures in
Cloud AP Scenarios (2/2)
⚫ Step 3: Check the reason why the STA goes offline during roaming. Check whether the roaming failure is caused by
the NAT mode configured on the cloud AP.
<Huawei> display station offline-record all

Reason distribution
----------------------------------------------------------------------------------------
Reason Count Percent
----------------------------------------------------------------------------------------
The device in NAT mode does not support roaming. 1 100%
----------------------------------------------------------------------------------------
Total Count: 1
Recent records
Rf/WLAN: Radio ID/WLAN ID
--------------------------------------------------------------------------------------------------------------------------------------
STA MAC Ap name Rf/WLAN Last record time Reason
--------------------------------------------------------------------------------------------------------------------------------------
044b-ed3f-3db9 0006-f499-9880 1/3 XXXX-XX-XX/12:10:26 The device in NAT mode does not support roaming.
--------------------------------------------------------------------------------------------------------------------------------------
Total stations: 1 Total records: 1
Contents
6. Roaming Faults
Flowchart for Troubleshooting MP Onboarding Failures
No Check the reason of the MPP
MP onboarding failure Is the MPP online? onboarding failure and ensure
that the MPP is online.
Yes Test services
to verify the
Is the MP imported No troubleshooting
Import the MP manually.
manually? result.
Yes
Yes
Is the link is created Yes Perform multiple queries to Is the fault
normally? ensure the link is stable. rectified?
No
No
Is the basic No
configuration Modify configurations. Collect information
correct? and seek help.
Yes
Does the Adjust the threshold or reduce
number of links exceed the No
the number of APs that
specifications? establish links.
Yes
Is information about No
neighboring APs detected? Adjust parameters
Yes
• The possible causes for MP onboarding failures are as follows:
▫ The MPP is not online.
▫ The MP is not imported.
▫ Mesh links are not established.
▫ Configurations on the WAC are incorrect, such as the Mesh function state,
Mesh whitelist, and Mesh role.
▫ The number of links reaches the upper limit.
▫ The distance parameter is not properly configured.
▫ The signal strength is improper.
▫ The AP does not obtain neighbor information of the peer AP.
▫ The possible causes listed here do not include the AP model or antenna
hardware problems. Before troubleshooting, ensure that the AP model is
correct, the Mesh function is supported, and antennas match the
corresponding APs.
Procedure for Troubleshooting MP Onboarding Failures (1/4)
⚫ Step 1: Check whether the MPP is online.
 Similar to common APs, the MPP must go online before MPs can go online in bridging mode.
<WAC> display ap all
Total AP information:
nor : normal [17]
------------------------------------------------------------------------------------------------------------------
ID MAC Name Group IP Type State STA Uptime
------------------------------------------------------------------------------------------------------------------
0 dcd2-fcf6-20c0 MPP1 ap-group1 192.168.120.254 AP_XXX nor 0 4H:49M:11S
...
⚫ Step 2: Check whether the MP is imported manually.

 On a mesh network, MPs connect to the network in wireless mode. Before going online on a WAC, you need to import MP
information.
nor : normal [17]
------------------------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------------------------
1 dcd2-fcf6-18c0 MP1 ap-group1 192.168.120.25 AP_XXX nor 0 4H:49M:11S
...
⚫ Step 3: Check whether mesh links are set up.
 Check mesh links on the WAC.
[WAC-wlan-view] display wlan mesh link all

Info: Mesh link does not exist.
 Check mesh link information, and mesh link setup and disconnection records on the MPP.
[AP-diagnose] display umac mesh link-info
...
radio_1 mesh link info as follow:
-----------------------------------------------------------------------------------------------
Peer MAC Link ID Channel Current RSSI(dBm)
-----------------------------------------------------------------------------------------------
00e0-fc67-080f 123 157 -56
-----------------------------------------------------------------------------------------------
[AP-diagnose] display umac mesh link-record

-----------------------------------------------------------------------------------------------
RadioID PeerMac Time Action
-----------------------------------------------------------------------------------------------
1 4CFA-CAC1-845F XXXX-XX-XX/16:19:49 delete link (peer VAP down)
1 4CFA-CAC1-845F XXXX-XX-XX/16:19:02 create link
-----------------------------------------------------------------------------------------------
Total:2
⚫ Step 4: Check whether the mesh configuration is correct.
 Log in to the WAC to check whether the mesh function is enabled, whether the whitelist is configured, whether the mesh role is
correct, whether the security profile is correctly configured, whether the mesh ID in the mesh profile is correct, and whether the
country code and channel set configured on the MP are the same as those configured on the MPP. Ensure that mesh
configurations are correct. For details, see the Mesh Configuration in the WLAN product documentation.
 Log in to the AP to check whether the configuration is correctly delivered.
[AP-diagnose] display umac mesh fsm //Query the current mesh state machine. [AP-diagnose] display umac mesh fsm
---------------------------------------------------------------------- ---------------------------------------------
State : MESH_FSM_STATE_STOP radio_0 mesh config as follow:
Checked counts : 0 ---------------------------------------------
---------------------------------------------------------------------- Mesh switch : On
Mesh role : mesh portal
Mesh id : mesh-net
Mesh max link num : 32
Mesh rssi threshold(dBm) : -89
Mesh report interval(s) : 30
Mesh link aging time(s) : 60
Mesh whitelist num :2
Mesh whitelist mac0 : 00e0-fc64-4600
Mesh whitelist mac1 : 00e0-fcc0-0ac0
⚫ Step 5: Check whether the number of mesh links reaches the upper limit.
 If there are multiple APs on the network and all APs are configured with whitelists, all APs can set up mesh links. If the number
of links established by the AP reaches the upper limit, subsequent APs cannot establish mesh links with the AP. For details about
the query method, see step 3.
⚫ Step 6: Check whether the AP has obtained neighbor information of the peer AP.
 If neighbor information is displayed but the link cannot be established, check whether the RSSI of the peer AP in the neighbor list
is small. If so, reduce the link establishment threshold to allow the peer AP to establish a link.
[mp-diagnose] display umac mesh neighbor-info

F: Is link full
---------------------------------------------------------------------------------------------
Neighbour MAC MPP MAC RadioID Channel HopCount RSSI F
---------------------------------------------------------------
60d7-55b5-3c00 00e0-fc74-9640 1 157 1 -33 0
---------------------------------------------------------------------------------------------
Total: 1
Contents
6. Roaming Faults
Flowchart for Troubleshooting Ineffective Radio Calibration
No Configure the AP to go online,
Ineffective radio Is the basic service configuration enable the radio, and correctly
calibration of the AP is correct? configure the VAP profile.
Yes Test services
to verify the
Are the automatic channel Yes troubleshooting
Enable automatic channel and
and power adjustment result.
power adjustment.
functions disabled?
No
Yes
Is a WDS or mesh Yes Delete the bound WDS or mesh Is the fault
profile bound? profile. rectified?
No
No
No Properly configure the

Is the calibration channel Collect
calibration channel set and
set properly configured? information
power bandwidth.
and seek help.
Yes
Does the AP detect No Switch the channel for neighbor

neighbor information? AP detection.
Yes
Is the calibration No Wait until the optimization is

process complete? complete.
Yes
▫ No VAP profile is configured.
▫ A WDS or mesh profile is bound.
▫ The radio is disabled.
▫ The calibration channel set is incorrectly configured.
▫ The AP does not detect information about neighboring APs.
▫ The channel is blocked.

Procedure for Troubleshooting Ineffective Radio Calibration (1/5)
⚫ Step 1: Check the basic service configuration of the AP.
 Check whether the status of all APs is normal on the WAC.
nor : normal [2]
------------------------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------------------------
0 dcd2-fcf6-76a0 area_1 ap-group1 192.168.120.254 AP_XXX nor 0 4H:49M:11S
1 60de-4474-9640 area_2 ap-group1 192.168.120.253 AP_XXX nor 0 6H:3M:40S
------------------------------------------------------------------------------------------------------------------
Total: 2
 Check whether the AP radio is disabled. If the status of an AP radio is off, the radio is disabled. In this case, enable the radio.
<WAC> display radio all
...
ST:Status
----------------------------------------------------------------------------------------------
AP ID Name RfID Band Type ST CH/BW CE/ME STA CU WM
----------------------------------------------------------------------------------------------
1 area_1 0 2.4G bgn on 6/20M 24/24 0 55% normal
1 area_1 1 5G an on 56/20M 25/25 0 3% normal
---------------------------------------------------------------------------------------------
Total:2
 Check whether a VAP profile is configured and whether the VAP status is ON.
<WAC> display vap all

WID : WLAN ID
----------------------------------------------------------------------------------------------
AP ID AP name RfID WID BSSID Status Auth type STA SSID
----------------------------------------------------------------------------------------------
0 area_1 0 1 dcd2-fcf6-76a0 ON Open 0 wlan-net
0 area_1 1 1 dcd2-fcf6-76b0 ON Open 0 wlan-net
1 area_2 0 1 60de-4474-9640 ON Open 0 wlan-net
1 area_2 1 1 60de-4474-9650 ON Open 0 wlan-net
----------------------------------------------------------------------------------------------
Total: 4
 If no VAP information is displayed, no VAP profile is configured. In this case, configure a VAP profile and bind it to the AP group.
If the VAP status is OFF, the VAP service is disabled. Check whether the VAP service is manually disabled or whether the
scheduled VAP auto-off function is configured.
⚫ Step 2: Check whether automatic channel and power selection is disabled.
 If automatic channel and power selection is disabled, radio calibration cannot adjust the channels or power for APs.
<WAC> display ap-group name ap-group1

-----------------------------------------------------------------------------
...
Radio 0
...
Auto channel select : enable
Auto transmit power select : enable
...
Radio 1
...
Auto channel select : enable
Auto transmit power select : enable
...
⚫ Step 3: Check whether the WDS/Mesh profile is bound to the AP or AP group.

 For details about how to query the WDS or mesh profile, see step 2. If a WDS or mesh profile is incorrectly bound, delete the
configuration.
⚫ Step 4: Check whether the calibration channel set and calibration bandwidth are correctly configured.
 Check whether the calibration channel set is correctly configured.
<WAC> display regulatory-domain-profile name default

----------------------------------------------------------------------------------------------
Profile name : default
Country code : CN
2.4G dca channel-set : 1,6,11
5G dca bandwidth : 20mhz 5G
dca channel-set : 149,153,157,161,165
Wideband switch : enable
Channel load mode : outdoor
----------------------------------------------------------------------------------------------
 If the calibration bandwidth is set to 40 MHz or 80 MHz, ensure that the configured calibration channel set contains valid 40
MHz or 80 MHz channels.
 Outdoor APs may not support low frequency channels according to WLAN Country Code & Channels Compliance. In this case,
configure calibration channel set containing channels supported by outdoor APs based on this table.
 If the calibration bandwidth is set to 40 MHz or 80 MHz, the configured calibration bandwidth takes effect only after the next
calibration is triggered.
⚫ Step 5: Check whether the AP detects neighbor information.
 If the AP does not detect neighbor information, check whether there are obstacles between APs and whether the signals of the current AP are normal.
<WAC> display ap neighbor ap-id 1

Radio: Radio ID of AP
In control AP:
------------------------------------------------------------------------------
Radio AP ID AP name Channel Received RSSI(dbm) Path loss(db)
------------------------------------------------------------------------------
0 0 area_1 1 -38 56
------------------------------------------------------------------------------
Total: 1 ...
⚫ Step 6: Check whether the current calibration status is complete.

 Global radio calibration takes a period of time. If radio calibration does not take effect, check whether the current radio calibration is complete.
[AC-diagnose] display wlan wrfm calibrate status

RRM calibrate status :
----------------------------------------------------------------------
Calibrate mode : manual
Calibrate phase(2.4g) : stop
Calibrate phase(5g) : stop
Calibrate sensitivity : middle
Calibrate policy :-
...
• The Calibrate phase field has the following states:
▫ deploy: deployment phase
▫ prerun: trial running (global calibration)
▫ period: periodic calibration
▫ stop: Calibration stops.
• If Calibrate phase is not in the prerun state, the current global calibration is
complete.
Contents
6. Roaming Faults
Flowchart for Troubleshooting STA Roaming Failures
Is the security profile Modify the security profile to make
STA roaming No
configured consistent? the configurations consistent before
fails.
and after roaming.
Yes Test services
Yes to verify the
Is Layer 3 roaming Enable Layer 3 roaming. troubleshooting
disabled? result.
No
Yes
Is the VLAN configuration No Is the fault
Modify the VLAN configurations
correct? rectified?
No
Yes
Is the mobility group No Modify the mobility group Analyze packets

status normal? configuration. and seek help.
Yes
Is continuous signal No Increase the transmit power or add

coverage available? APs.
Yes
Does a rogue SSID with Yes

Disable rogue SSIDs.
the same name exist?
No
Procedure for Troubleshooting STA Roaming Failures (1/3)
⚫ Step 1: Check whether the security profile configurations on the APs before and after roaming are the same.
 Enter the security profile view. Configure a new key and ensure that the same key is configured in the security profiles of APs
before and after roaming.
[WAC-wlan-view] security-profile name default

[WAC-wlan-sec-prof-default] security wpa2 psk pass-phrase huawei123 aes
⚫ Step 2: Check whether Layer 3 roaming is disabled.

[WAC] display vap-profile name default
--------------------------------------------------------------------------------
......
Service VLAN ID : 101
Service VLAN Pool :-
Permit VLAN ID :-
Auto off service switch : disable
Auto off starttime :-
Auto off endtime :-
STA access mode : disable
STA blacklist profile :
STA whitelist profile :
Home agent : ap
VLAN mobility group :2
Layer3 roam : enable
• Check the VLAN IDs and roaming domains corresponding to the VAPs of the APs
before and after roaming. Layer 2 roaming is performed only when the VAPs
have the same VLAN and roaming domain. Otherwise, Layer 3 roaming is
performed.
• If the STA initiates Layer 3 roaming but Layer 3 roaming is disabled, the roaming
fails. You can determine whether to disable Layer 3 roaming based on service
requirements. To enable Layer 3 roaming, run the undo layer3-roam disable
command.
⚫ Step 3: Check whether the VLAN configurations before and after roaming are correct.
⚫ Step 4: If the STA roams between WACs, check whether the mobility group status is normal.
 Run the display mobility-group command on the WAC to check whether members in the mobility group are in normal state. If
members are not in normal state, inter-WAC roaming fails.
<WAC> display mobility-group name roam

--------------------------------------------------------------------------------
AC ID State IP address
--------------------------------------------------------------------------------
1 normal 192.168.10.3
2 fault 192.168.10.4
--------------------------------------------------------------------------------
 If the state of a mobility group member is fault, check whether the mobility group configuration is correct.
[AC-mc-mg-mobility] display this
#
member ip-address 192.168.10.1
member ip-address 192.168.10.2
#
return
 If the configuration is correct, run the ping command to check whether the WACs can communicate with each other.
⚫ Step 5: Check whether the signal coverage of APs before and after roaming is continuous.
 If two APs are too far away from each other, STAs may go offline and online again due to discontinuous signal coverage, causing
roaming failures.
 If the signal coverage of APs is discontinuous, increase the transmit power of the APs or add APs to ensure continuous signal
coverage.
⚫ Step 6: Check whether a rogue SSID with the same name exists on the WLAN.
 Check whether a rogue SSID with the same name exists on the rogue neighboring AP. If so, disable the rogue SSID.
<WAC> display ap neighbor ap-id 0
Radio: Radio ID of AP
......
Uncontrol AP:
--------------------------------------------------------------------------------------------------------------
Radio BSSID Channel RSSI(dBm) Last Update Time SSID
--------------------------------------------------------------------------------------------------------------
0 d0d0-4b22-df00 1 -50 XXXX-XX-XX/15:32:18
0 c4b8-b4f0-6980 1 -44 XXXX-XX-XX/15:31:06
0 10c1-72dd-12e0 11 -41 XXXX-XX-XX/15:28:27 test
0 9c50-ee45-6240 1 -54 XXXX-XX-XX/15:32:06
--------------------------------------------------------------------------------------------------------------
Total: 4
Quiz
1. (Multiple-answer question) A WLAN functions as the access layer of a network. Once a

fault occurs on the WLAN, services may be interrupted. What are the common wireless
network faults? ( )
A. Internet access failures of STAs
B. Poor user experience, such as low network speeds and long roaming time
C. Unexpected going-offline of STAs
D. Failures to deliver configurations to APs
1. ABCD
Summary
⚫ This course describes the troubleshooting process and measures for reliability, cloud
management, wireless bridge, radio resource management, and roaming service faults.
⚫ On completion of this course, you will be able to understand the WLAN troubleshooting
process and troubleshoot common network faults.
Recommendations

DCA Dynamic Channel Allocation
HSB Hot-Standby Backup
MSS Maximum Segment Size
MTU Maximum Transmission Unit
VRRP Virtual Router Redundancy Protocol

WDS Wireless Distribution System
intelligent world.



HCIP-WLAN V2.0 Training Material PDF

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

HCIP-WLAN V2.0 Training Material PDF

Uploaded by

Copyright:

Available Formats

WLAN Networking Architectures

⚫ Wireless local area networks (WLANs) overcome some disadvantages of wired

1. WLAN Networking Overview

2. WLAN Networking Architectures

3. WLAN Networking Application Scenarios

Wireless Wireless access

Wireless Wireless access

Wireless Barcode scanner, automated guided

Room Room Room Room Room Room Room Room

Fit AP WAC MPP

1. WLAN Networking Overview

2. WLAN Networking Architectures

3. WLAN Networking Application Scenarios

Router ⚫ The Fat AP networking architecture is also called autonomous network

⚫ Fat APs work independently and require no additional centralized control

• In the Fat AP networking, APs work in Fat mode.

STA1 Managing the

• Connecting a PC to a Fit AP in wireless mode:

▫ Use the PC to search for the management SSID, which is hw_manage_xxxx

▫ Set the IP address of the PC's wireless network adapter to 192.168.1.X/24

• Connecting a PC to a Fit AP in wired mode:

• Connecting a PC to a Fat AP in wireless mode:

▫ In wireless management mode, the default access address of APs running

1. WLAN Networking Overview

2. WLAN Networking Architectures

3. WLAN Networking Application Scenarios

⚫ Similar to a WAC, the leader AP uses the Control And Provisioning of

⚫ This networking requires low network construction costs because no WAC

Room Leader AP Fit AP Fit AP

Leader AP Fit AP Fit AP

• A leader AP in bridge mode functions as a network bridge and works with an

• A leader AP in gateway mode functions as a gateway, and no independent

• When the number of APs exceeds 24, it is recommended that an external

An external DHCP server allocates IP The built-in DHCP server allocates IP

Fit AP Leader AP Fit AP Fit AP Leader AP Fit AP

• By default, other APs on the same network as a leader AP do not need to be

• Mode in which Fit APs connect to a leader AP:

▫ The leader AP can function as a DHCP server to allocate IP addresses to Fit

• Mode in which a CAPWAP interface is created on the leader AP:

▫ To simplify configuration, the leader AP does not support manual

• Layer 3 networking is supported between the leader AP and Fit APs.

▫ One AP has been selected as the leader AP.

▫ WLAN planning and design have been completed.

▫ The MAC address of the leader AP is available.

• The default wireless login address of an AP is 192.168.1.1 in V200R021C00 and

1. WLAN Networking Overview

2. WLAN Networking Architectures

3. WLAN Networking Application Scenarios

Overview Networking Network planning Service deployment

In-path and off-path Configuring AP

Layer 2 and Layer 3 Configuring WLAN

⚫ The WAC communicates with Fit APs using CAPWAP.

 Easier upgrade and expansion

• CAPWAP tunnels include control tunnels and data tunnels.

▫ CAPWAP control tunnels mainly transmit control packets (also called

▫ Easier configuration and deployment: The WAC centrally configures and

▫ Higher security: Fat APs cannot be upgraded in a unified manner, so that

• Easier upgrade and extension: The centralized management mode of this

WAC Core switch

Fit AP Fit AP Fit AP

• Direct forwarding is often used in the in-path networking. This

• Direct forwarding can also be used in the off-path networking. In this

• Tunnel forwarding is typically used in the off-path networking. In