wlan

Creates or updates WLAN configurations.
Syntax
wlan name
no wlan [ name ]

After the wlan command is entered to access WLAN configuration mode, the following configuration syntax is available (see several sections below):

{ access-network | acct-service { disabled| service-name } | acct-service-use-proxy| assoc-rssi-threshold num | auth-rssi-threshold num | bss-minrate { 1mbps | 2mbps | 5.5mbps | 12mbps | 24mbps | rate } }
{ called-sta { apgroup | apmac | bssid | none } | client-fingerprinting | client-tx-rx-statistics | |dhcp-option-82 | directed-multicast | directed-threshold num | disable-load-balancing | dtim-interval | enable-type { always-off | always-on | specific } | external-nas }
{ flow-log | force-dhcp seconds | hessid id | hide-ssid | inactivity-timeout mins | max-clients num | mgmt-tx-rate rate | ofdm-only | single-session-id-acct | ssid ssid | ssid-rate-limiting | support-802-11d | support-802-11k | transient-client-mgmt | venue-code code | vlan-id vlan-id | wireless-client-isolation }
Command Default

No WLANs are configured.

Parameters
name
Specifies the WLAN name or ESSID.
access-network
Enables tunnel WLAN traffic to the controller.
acct-service radius-server
Specifies the RADIUS Accounting server that you want to use for this WLAN. The server must already be set up.
acct-service-use-proxy
Allows the controller to proxy accounting messages to the AAA server.
assoc-rssi-threshold threshold
Specifies the minimum client Received Signal Strength Indicator (RSSI) threshold to allow joining. Range is from -60 through -90 dBm.
auth-rssi-threshold threshold
Specifies the authentication RSSI threshold.
bss-minrate
Specifies the BSS minute rate.
1mbps
Sets 1 Mbps as the BSS minute rate.
2mbps
Sets 2 Mbps as the BSS minute rate.
5.5mbps
Sets 5.5 Mbps as the BSS minute rate.
12mbps
Sets 12 Mbps as the BSS minute rate.
24mbps
Sets 24 Mbps as the BSS minute rate.
rate
Specifies the BSS minute rate.
called-sta
Specifies the Called Station ID format which is sent to the RADIUS server as a decision attribute.
apgroup
Sets the AP Group number as the Called Station ID format.
apmac
Sets the AP MAC address as the Called Station ID format.
bssid
Sets the BSS ID as the Called Station ID format.
none
Sets none as the Called Station ID format.
client-fingerprinting
Enables client fingerprinting.
client-tx-rx-statistics
Stops the controller from monitoring traffic statistics for unauthorized clients.
dhcp-option82
Enables DHCP option 82. Other sub-options may be available.
directed-multicast
Enables directed multicast.
directed-threshold num
Sets the directed MC/BC threshold. Defines the per radio client count at which an AP stops converting group addressed data traffic to unicast. Number from 0 to 128.
disable-load-balancing
Disables client load balancing on the WLAN.
dtim-interval num
Sets the frequency at which the Delivery Traffic Indication Message (DTIM) will be included in beacon frames. Number from 1 to 255.
enable-type
Specifies the WLAN service enable type.
always-on
The WLAN service is always turned on.
always-off
The WLAN service is always turned off.
specific
The WLAN service is turned on and off by schedule.
external-nas
Enables external NAS IP.
flow-log
Enables the sending of flow log messages to the external server.
force-dhcp seconds
Requires the clients to obtain a valid IP address from DHCP within the specified number of seconds.
hessid ssid
Sets the WLAN HESS ID. Number from ?.
hide-ssid
Hides the SSID in a beacon broadcast.
inactivity-timeout seconds
Sets the duration, in seconds, after which idle clients will be disconnected.
max-clients max-num
Limits the number of clients that can associate with this WLAN per AP radio. Default is 100.
mgmt-tx-rate rate
Sets the transmit rate for management frames type such as beacon and probes. The rate can be one of the following: 1, 2, 5.5, 6, 9, 11, 12, 18, 24, 36, 48, and 54 mbps.
ofdm-only
Disconnects 802.11b devices from the WLAN and all devices are forced to use higher data rates for more efficient airtime usage. Only affects 2.4GHz radio.
single-session-id-acct
Allows the APs to maintain one accounting session for a client roaming between APs.
ssid ssid
Specifies the SSID for the WLAN.
ssid-rate-limiting
Enforces an aggregate rate limit for all users of the WLAN. Rates from uplink and downlink are combined.
uplink rate
Sets rate to be limited on uplink.
downlink rate
Sets rate to be limited on downlink.
support-802-11d
Enables support for 802.11d.
support-802-11k
Enables 802.11k neighbor reports.
transient-client-mgmt
Enables transient client management.
venue-codecode
Specifies the venue code.
vlan vlan-id
Tags the WLAN traffic with a VLAN ID in the range of 2 to 4094. By default, all client traffic will be assigned to the native (untagged) VLAN on the Ethernet port of the AP, which we represent as VLAN ID 1.
wireless-client-isolation
Prevents wireless clients from communicating with each other.
Modes

AP group configuration mode

Domain configuration mode

Zone configuration mode

Usage Guidelines

The no form of the command deletes the WLAN configuration.

The wlan command is only visible after specific commands are entered. These commands include ap-group, domain, and zone. RUCKUS controllers only support the WeChat mobile app.

The following list of commands are available under zone WLAN configuration mode (config-zone-wlan) and are all documented as separate commands in the RUCKUS SmartZone Command Reference.

  • auth-method
  • auth-type
  • calea
  • dhcp-option-82
  • dns-server-profile
  • priority
  • proxy-arp
  • qos-map-enable
  • radius-nas-max-retries
  • radius-nas-reconnect-primary
  • radius-nas-request-timeout
  • radius-nas-type
  • roam
  • roam-factor
  • user-traffic-profile
  • vlan-pooling
Examples

The following example creates a WLAN with an authentication method of 802.1x EAP, a BSS minute rate of 5.5Mbps, and a timeout in 120 seconds when no activity is detected.

device# config
device(config)# zone zone-discovery
device(config-zone)# wlan wlan2
device(config-zone-wlan)# auth-method 8021x
device(config-zone-wlan)# bss-minrate 5.5
device(config-zone-wlan)# inactivity-timeout 120

The following example deletes a WLAN named WLAN20 from zone-discovery zone.

device# config
device(config)# zone zone-discovery
device(config-zone)# no wlan wlan20
Do you want to continue to delete (or input 'no' to cancel)? [yes/no] yes
Operation successful