01-03 Leader AP Configuration

Fat AP and Cloud AP
Web-based Configuration Guide 3 Leader AP Configuration
3 Leader AP Configuration
About This Chapter
3.1 Overview of the Leader AP

3.2 Understanding the Leader AP
3.3 Application Scenario of the Leader AP
3.4 Configuration Limitations for the Leader AP Function
3.5 Default Settings for a Leader AP
3.6 Summary of Leader AP Configuration Tasks
3.7 Configuring a Leader AP on the CloudCampus APP
3.8 Configuring a Leader AP (Using the Web System on a Mobile Phone)
3.9 Configuring a Leader AP (Using the Web System)
3.10 Example for Configuring Wi-Fi Internet Access Through a Leader AP
(CloudCampus APP)
3.11 Example for Configuring Wi-Fi Internet Access Through a Leader AP in
Gateway Mode (Using the Web Platform)
3.12 Example for Configuring Wi-Fi Internet Access Through a Leader AP in Bridge
Mode (Using the Web Platform)
3.13 FAQs
3.1 Overview of the Leader AP

Definition
The leader AP function is an extended function of Fat APs. Like a WAC, a Fat AP
enabled with the leader AP function can be deployed to build a WLAN together
with multiple Fit APs. On this WLAN, the Fat AP manages and configures the Fit
APs in a unified manner, enabling STAs to easily roam between APs.
Issue 03 (2022-08-31) Copyright © Huawei Technologies Co., Ltd. 14

Fat AP and Cloud AP
The functions of the leader AP can be distinguished in single-AP and multi-AP

networking scenarios. The Fat AP in multi-AP networking is called the leader AP to
make it easy to understand.
Purpose
Some large stores may require independent WLAN deployment and management.
A single Fat AP cannot meet coverage and roaming requirements. Multiple Fat APs
are difficult to configure and manage, and the roaming experience cannot be
ensured. The WAC + Fit AP architecture increases the cost (for example, due to the
use of WACs and licenses) for stores, and network resources in this architecture
cannot be fully leveraged.
This is where the leader AP function comes in. This function requires only simple
configurations when a few APs are available to deploy a WLAN while ensuring
good roaming experience. After one AP on the WLAN is switched to the Fat AP
mode, it can function as the leader AP to manage other Fit APs. You only need to
log in to the leader AP to configure WLAN services and perform routine O&M on
the entire WLAN.
3.2 Understanding the Leader AP

Networking Architecture
Figure 3-1 shows a leader AP + Fit AP networking architecture, which is similar to
the WAC + Fit AP networking architecture.
Figure 3-1 Leader AP networking architecture

Fat AP and Cloud AP
In the leader AP + Fit AP networking architecture, a Fat AP can be considered as a

combination of a WAC and a Fit AP. Without the leader AP function, the Fat AP
can manage only its own Fit AP module. After the leader AP function is
configured, the Fat AP can manage other Fit APs.
Similarities between a leader AP and a WAC:
● A leader AP functions as a WAC to manage multiple Fit APs. A leader AP
establishes a CAPWAP tunnel with each Fit AP to transmit management
packets. Fit APs can go online with zero configuration on a leader AP. All
configurations are delivered by the leader AP to the Fit APs.
● A leader AP supports direct and tunnel forwarding modes, depending on
whether service packets are transmitted over CAPWAP tunnels.
● STAs can roam between Fit APs.
Differences between a leader AP and a WAC:
● A leader AP also serves as a Fit AP and is used to build a WLAN together with
other Fit APs. Services configured on a leader AP take effect on both itself and
other Fit APs.
● The number of Fit APs managed by a leader AP is much fewer than that
managed by a WAC, but Fit AP management is not under license control.
● STAs can roam between a leader AP and Fit APs.
Networking Mode
A leader AP can work in bridge or gateway mode, depending on whether it
functions as a gateway.
Bridge mode
In bridge mode, a leader AP functions as a network bridge and works with an
independent gateway in the uplink direction. The leader AP and Fit APs
communicate with each other on a Layer 2 network, as shown in Figure 3-2. The
independent gateway has the DHCP service enabled and allocates IP addresses to
STAs and APs. The direct forwarding mode is recommended, which reduces the
load on the leader AP, so that the leader AP can manage more Fit APs.

Fat AP and Cloud AP
Figure 3-2 Network where a leader AP works in bridge mode
Gateway mode
In gateway mode, a leader AP itself functions as the gateway, and no independent
gateway is required. The leader AP and Fit APs communicate with each other on a
Layer 2 network, as shown in Figure 3-3. In the uplink direction, the leader AP has
NAT enabled and connects to the Internet. In the downlink direction, the leader
AP connects to a switch and communicates with Fit APs. The leader AP has the
DHCP service enabled and allocates IP addresses to Fit APs and STAs. In this mode,
services are forwarded through CAPWAP tunnels to the leader AP for processing.
Therefore, the leader AP is heavily loaded and can manage a limited number of Fit
APs. When the service traffic is heavy, the leader AP may become a bottleneck for
service forwarding.

Fat AP and Cloud AP
Figure 3-3 Network where a leader AP works in gateway mode
3.3 Application Scenario of the Leader AP

Networking of an Independent Gateway and a Leader AP Working in Bridge
Mode
In this scenario, an independent gateway has been deployed. Its uplink interface
uses a public IP address and connects to the Internet, and its downlink wired
interfaces allow wired terminals to access the Internet. A WLAN is built based on
the independent gateway, leader AP, and Fit APs for STAs to access the Internet.
Typically, a router or an optical modem functions as an independent gateway and

does not support PoE. If APs need to be powered through PoE over Ethernet
cables, connect a PoE switch to the PoE_IN interfaces of the APs. Otherwise, a
power adapter is needed for each AP. Note that the power supply standard of the
PoE switch must meet the requirements of APs. Typically, the PoE+ (802.3at)
standard is used. The PoE switch is selected based on the power supply
requirements of the AP model.
When an independent gateway is available, the bridge mode is recommended for

the leader AP. In this mode, packets of STAs are directly sent from APs to the
independent gateway, as shown in Figure 3-4.
NOTE
A leader AP needs to use the Multi-GE0 or GE0 interface as the uplink interface.
(V200R021C00)

Fat AP and Cloud AP
Figure 3-4 Application scenario of a leader AP in bridge mode
Networking of a Leader AP Working in Gateway Mode with No Independent

Gateway Deployed
If no independent gateway is available, a leader AP can be configured to work in
gateway mode to server as a gateway. The leader AP's uplink interface obtains a
public IP address to connect to the Internet, and its downlink interface connects to
Fit APs to build a WLAN for STAs to access the Internet.
When the leader AP functions as a gateway, dual-interface leader AP networking
or single-interface leader AP networking can be implemented based on the
number of used interfaces on the leader AP. A wall plate AP typically has only one
network interface at the rear panel, which is used in the single-interface leader AP
networking. Wall plate APs of some models also have network interfaces at the
front panel, which are used only for wired terminals to access the Internet and
therefore cannot be used in the dual-interface leader AP networking.
Dual-interface leader AP networking
Figure 3-5 shows the dual-interface leader AP networking. The leader AP's PoE_IN
interface is used as the downlink interface to connect to a PoE switch and its other
interface is used as the uplink interface to connect to an optical modem. In this
networking mode, the leader AP's uplink interface can obtain a public IP address
using PPPoE, DHCP, or static configuration, and the leader AP allocates IP
addresses to APs and terminals through the downlink interface. The leader AP's
PoE_IN interface functions as the uplink interface by default. In this networking
mode, the other interface should be configured as the uplink interface.

Fat AP and Cloud AP
NOTE
Wired terminals always connect to VLAN 1. Therefore, their IP addresses are on the same
network segment as those of Fit APs and are not on the same LAN as STAs. As such,
application protocols discovered at Layer 2 cannot take effect. For example, wireless access
is recommended for mDNS-based projection applications.
Figure 3-5 Dual-interface leader AP networking
If the leader AP manages only one Fit AP and does not need to connect to wired
terminals, no switch is required. The leader AP's downlink interface can be directly
connected to the Fit AP's uplink interface. Each AP must be equipped with an
independent power adapter. Otherwise, APs must be connected to a PoE switch.
Single-interface leader AP networking
If the AP has only one interface, the interface functions as both the uplink
interface connecting to an optical modem and the downlink interface connecting
to Fit APs. In this case, only single-interface leader AP networking can be
implemented. For the dual-interface leader AP, you can use only one interface to
implement single-interface leader AP networking. This scenario is supported by
AirEngine X762 series APs in V200R021C01 and later versions.
Figure 3-6 shows the single-interface leader AP networking. The leader AP
connects to the PoE switch through the PoE_IN interface. In this networking mode,
the leader AP's uplink interface can obtain a public IP address using PPPoE or
static configuration. The leader AP assigns IP addresses to APs and terminals
through the downlink interface. Wired terminals and Fit APs are in the same
network segment. When the uplink interface obtains a public IP address using
static configuration, the VLAN replacement function must be enabled on the
uplink interface, and no other DHCP server exists on the network. Otherwise, the
Fit APs cannot obtain IP addresses from the leader AP.

Fat AP and Cloud AP
Figure 3-6 Single-interface leader AP networking (through PPPoE dialup on the

leader AP)
With an External Authentication Server

On a large WLAN requiring high security, an independent authentication server is
deployed to perform 802.1X or Portal authentication for STAs. This authentication
mode is also known as external authentication. Typically, a RADIUS or Portal
server is used as the authentication server, depending on security access
requirements. The authentication server needs to communicate with the leader AP.
If a Portal server is deployed, it also needs to communicate with the user network,
as shown in Figure 3-7.

Fat AP and Cloud AP
Figure 3-7 Application scenario of an external authentication server in leader AP

networking
AP Upgrade
The AP upgrade in this scenario includes both the upgrade of a leader AP and the
upgrade of Fit APs managed by the leader AP.
Smart upgrade
If a leader AP can access the Internet, the smart upgrade function is
recommended. In smart upgrade mode, the leader AP accesses Huawei Online
Upgrade Platform (HOUP) on the Internet and automatically checks whether
there is a recommended new version. If so, you can download the upgrade file and
perform the upgrade in one-click mode. This upgrade mode is recommended as it
is easy to operate. Figure 3-8 shows the upgrade flowchart.
NOTE
When an AirEngine X762 AP functions as the leader AP, Fit APs must be able to access the
HOUP to download upgrade files.
1. Connect a laptop to the management SSID wirelessly and access the web
system of the leader AP. If the AP runs V200R021C01 or a later version, you
are advised to use the CloudCampus APP to complete the AP upgrade in one-
click mode.
2. The leader AP communicates with the HOUP to obtain the recommended
new versions of the leader AP and Fit APs.
3. After an upgrade starts, an AP automatically downloads the upgrade file and
restarts to complete the upgrade. You can also configure the scheduled
upgrade mode to reduce the impact on services.

Fat AP and Cloud AP
Figure 3-8 Connecting to the HOUP for a smart upgrade
Local upgrade in AC mode

In AC mode, the AP upgrade file needs to be prepared in advance and saved on a
leader AP. This upgrade mode requires sufficient storage space on the leader AP.
Figure 3-9 shows the upgrade flowchart.
1. Download the AP upgrade file from Huawei's official website.
2. Connect a laptop to the management SSID wirelessly and access the web
system of the leader AP. During the upgrade, upload the AP upgrade file to
the leader AP.
3. Upgrade Fit APs by AP type in batches. For example, upgrade model A and
wait until the upgrade is complete. Then upgrade model B and wait until the
upgrade is complete.
4. If the upgrade file of model A is different from that of model B, you need to
delete the upgrade file of model A, upload the upgrade file of model B, and
then upgrade model B.
5. After all Fit APs are upgraded, upgrade the leader AP.

Fat AP and Cloud AP
Figure 3-9 Local upgrade in AC mode
Upgrade in SFTP/FTP mode

In SFTP/FTP mode, the AP upgrade file needs to be prepared in advance and saved
on an SFTP or FTP server. Ensure that the leader AP and Fit APs can access the
SFTP or FTP server. In most cases, the SFTP or FTP server software is installed on a
laptop that is configured as the server. Figure 3-10 shows the upgrade flowchart.
1. Download the AP upgrade file from Huawei's official website, install the SFTP
or FTP server software on a laptop, and save the AP upgrade file in the file
service directory.
2. Connect the laptop to the management SSID wirelessly, access the web
system of the leader AP, specify an upgrade mode, configure the server
address and login information, and specify the upgrade file for the AP. If
multiple AP models are involved, wait until the upgrade file of one model is
downloaded, and then specify that for another model. Specify the model of
the leader AP at last.
3. Restart the APs to complete the upgrade.

Fat AP and Cloud AP
Figure 3-10 AP upgrade in SFTP/FTP mode
3.4 Configuration Limitations for the Leader AP

Function
Involved Network Elements
Fat AP
Fat APs support the leader AP function and can manage Fit APs. A leader AP can
work in gateway mode to serve as a gateway. In this mode, the leader AP can
manage only a small number of Fit APs.
Fit AP
Fit APs can go online with zero configuration on a leader AP so that they can be
managed by the leader AP in a unified manner.
Independent gateway
When an independent gateway is available, a leader AP can work in bridge mode
and manage a large number of Fit APs. Therefore, this networking mode is
recommended.
Switch
A switch is used to connect an AP to a gateway.
If the switch is a Layer 3 switch, use the uplink interface to connect to an optical
modem, and configure the leader AP to work in bridge mode. For details, see
3.13.1 FAQ: How Do I Set Up a Network with Different Switches in the Leader
AP Solution?.
If the switch supports the PoE function to supply power to APs, ensure that the
power supply meets the requirements of the APs to prevent insufficient power

Fat AP and Cloud AP
supply. If the switch does not support PoE power supply, prepare DC or PoE power
adapters for the APs and reserve power sockets near the AP installation positions.
Authentication server
In scenarios that require high security, an independent authentication server is

applicable. The leader AP supports external Portal and 802.1X authentication
modes.
In other scenarios, the built-in authentication mode of the leader AP can be used,
without the need of an independent authentication server.
NMS
A leader AP cannot connect to iMaster NCE-CampusInsight or eSight.
Feature Requirements
Networking
● A leader AP cannot be deployed together with a WAC. If a WAC is working on

the network, it is recommended that the leader AP be switched to the Fit
mode and be managed by the WAC.
● If there are multiple AP models on the network, it is recommended that a
high-performance AP be used as the leader AP. For example, if the AirEngine
6700 and AirEngine 5700 coexist, the AirEngine 6700 is recommended as the
leader AP.
● A leader AP can manage Fit APs running the same VxxxRxxxCxx version as
itself and Fit APs of the earlier two R versions. For example, a leader AP of
V200R020C10 can manage Fit APs of V200R010C00. It is recommended that
Wi-Fi 6 models be adopted as Fit APs and they run the same version as that
of the leader AP.
● The number of Fit APs that can be managed by a leader AP working in
gateway mode is smaller than that when the leader AP works in bridge mode.
Table 3-1 Maximum number of Fit APs managed by a leader AP
Model Maximum Number Maximum Number of

of APs Managed by APs Managed by a
a Leader AP in Leader AP in Gateway
Bridge Mode Mode
AirEngine 5760 24 12
(V200R021C00)
(V200R021C00)
(V200R021C00)
(V200R021C00)

Fat AP and Cloud AP
Model Maximum Number Maximum Number of

of APs Managed by APs Managed by a
a Leader AP in Leader AP in Gateway
Bridge Mode Mode
AirEngine 5761S AirEngine AirEngine 5761S-11W:

(V200R021C00) 5761S-11W: 24 12
AirEngine 5761S-12: AirEngine 5761S-12: 6
6 AirEngine 5761S-13: 12
AirEngine 5761S-13: AirEngine 5761S-21: 12
12
AirEngine 5761S-21:
24
(V200R021C00)
AirEngine 6761S 24 12
(V200R021C00)
AirEngine 5762 8 8
(V200R021C01)
AirEngine 5762S 8 8
(V200R021C01)
● A leader AP supports only direct forwarding when working in bridge mode,

and only tunnel forwarding when working in gateway mode. A leader AP does
not support the coexistence of two data forwarding modes. Therefore, when
multiple SSIDs are configured on the leader AP, they must use the same data
forwarding mode.
● If the switch between a leader AP and Fit APs supports the VLAN function,
the leader AP and Fit APs need to be added to VLAN 1 so that the Fit APs can
automatically discover and connect to the leader AP.
● The uplink interface on a leader AP (V200R021C00) must be Multi-GE0 or
GE0 (on models without the Multi-GE interface). Other interfaces on the
leader AP are connected to switches or Fit APs. A Fit AP must communicate
with the leader AP through the uplink interface Multi-GE0 or GE0.
● When a leader AP works in bridge mode, connect wired terminals to a switch
or an independent gateway but not to the leader AP. When a leader AP works
in gateway mode, wired terminals can be connected to the wired interfaces
on the leader AP. In this case, the wired terminals can obtain IP addresses only
from the default VLAN 1, and the leader AP cannot assign other VLANs to the
wired terminals.
● Wired and wireless terminals connected to a leader AP in gateway mode
belong to different VLANs. Therefore, application protocols discovered at
Layer 2 cannot take effect. For example, wireless access is recommended for
mDNS-based projection applications.
● In gateway mode, when the leader AP uses a single Ethernet port for
networking and performs PPPoE dialup, only a VLANIF interface can be

Fat AP and Cloud AP
configured as the CAPWAP source interface. If wired terminals exist on the

network, their IP addresses must be automatically assigned but not fixed.
● A leader AP cannot manage Fit central APs or RUs.
● The leader AP function is not supported by the Fat central APs, AirEngine
5761-10W, AirEngine 5761S-10W, or AirEngine 5761S-11, and they cannot
manage common Fit APs.
Login to a leader AP
The default working mode of an AP is not Fat. When you log in to an AP for the
first time, set the user name and password, log in to the AP, and switch the
working mode of the AP to Fat. After the working mode of the AP is switched, the
AP needs to be restarted and restored to factory settings. Therefore, you still need
to set the user name and password and log in to the AP again.
The web system of a leader AP allows a maximum of two concurrent login users.
To log in to a leader AP in wireless mode, connect to the management SSID.

Service SSIDs cannot be used to log in to the leader AP. In V200R021C01 and later
versions, the login to the leader AP through a service SSID is supported by default.
STA roaming
● Only Layer 2 roaming is supported.

● Roaming between leader APs is not supported.
AP upgrade
● The leader AP can be used to upgrade Fit APs through an external SFTP or
FTP server or in AC mode. If the Fit APs can access the Internet, the smart
upgrade mode is recommended.
● The AirEngine x762 does not support the local upgrade in AC mode.
3.5 Default Settings for a Leader AP

Table 3-2 Default settings for a leader AP
Parameter Default Setting
Wireless Name of the management SSID: HUAWEI-LeaderAP-XXXX

(XXXX specifies the last 4 digits of the AP's MAC address.)
Encryption and authentication: open system
IP address: 192.168.1.1/24 (V200R021C00)
IP address: 169.254.2.1/24 (V200R021C01)
DHCP server: enabled, allowing STAs connected to APs to
obtain IP addresses in the same network segment as the
APs
Interface: VLANIF 100
After the service configuration is complete, you are advised
to hide the management SSID and change the encryption
and authentication modes of the SSID.

Fat AP and Cloud AP
Wired (initial VLANIF 1: 169.254.1.1/24 (management interface, which

configuration) can be any network interface)
DHCP client: If a DHCP server exists on the network, VLANIF
1 can automatically obtain an IP address.
Wired (bridge VLANIF 1: 169.254.1.1/24 (management interface, which

mode) can be any network interface)
DHCP client: If a DHCP server exists on the network, VLANIF
1 can automatically obtain an IP address.
Wired (gateway VLANIF 1: 192.168.200.1 (management interface, which can

mode) be a downlink network interface)
DHCP server: enabled, assigning IP addresses in the network
segment 192.168.200.0/24 to Fit APs. Wired terminals
connected to the network also obtain IP addresses in this
network segment.
VLANIF 2: automatically obtains an IP address
(management interface in V200R021C00non-management
interface in V200R021C01, which can be an uplink network
interface, Multi-GE0, or GE0)
DHCP client: automatically obtains an IP address from the
DHCP server on the network.
VLAN Service VLAN: 101

Management VLAN: 1
Login mode Web system: enabled

STelnet service: enabled
Bluetooth serial port: enabled
To log in to a leader AP in wireless mode, connect to the
management SSID. Service SSIDs cannot be used to log in
to the leader AP. In V200R021C01 and later versions, the
login to the leader AP through a service SSID is supported
by default.
The default management IP address is 192.168.254.254. To
use this IP address to log in to the leader AP, you need to
associate the STA with the leader AP. If associating it with a
Fit AP, you log in to the Fit AP instead of the leader AP.
In addition to the default management IP address, you can
also directly log in to the leader AP through its
management IP address. In gateway mode, the
management IP address is the IP address of the leader AP's
interface which assigns IP addresses to Fit APs, and it is
192.168.200.1 by default. In bridge mode, the management
IP address is the IP address that the leader AP obtains from
the uplink gateway.

Fat AP and Cloud AP
Login user Set the user name and password upon the first login. When
you log in to the device for the first time on the
CloudCampus APP, the user name is set to admin.
AP authentication Disabled
After Fit APs go online, you are advised to enable AP
authentication to improve security.
3.6 Summary of Leader AP Configuration Tasks

You are advised to use the web system or a mobile app to configure a leader AP.
The CLI mode is not recommended.
Pre-configuration Tasks
Add all APs to the same LAN.
Plan AP deployment positions and prepare power supplies for the APs. For details,
see the WLAN Network Planning Guide.
Prepare a laptop for configuring the leader AP through the web system.
To configure the leader AP using a mobile app, download and install the
CloudCampus APP on your mobile phone.
Configuration Process
Table 3-3 Leader AP configuration tasks

Task Description Web System Mobile App
Leade Select a high- - Automatically

r AP specification AP as recommended
select the leader AP. If all
ion APs are of the same
model, select any AP
as the leader AP.

Fat AP and Cloud AP
Task Description Web System Mobile App
AP Log in to the Connect a laptop to Automatic switching

mode selected AP and the AP in wired or
switc switch the AP to the wireless mode, and
hing Fat mode. If the AP manually configure
is already in Fat the IP address of the
mode, skip this step. laptop to be in the
same network
segment as the
default IP address of
the AP. From
V200R021C01,
terminals can
automatically obtain
the IP address of the
AP, and the web
system on the mobile
phone is supported.
Open the browser and
access the default IP
address of the AP.
Netw Configure DHCP to Web system App configuration

ork allocate IP addresses configuration wizard wizard
conn to APs and STAs
ectivi based on the AP
ty networking mode.
SSID Log in to the AP and Web system App configuration

confi configure the WLAN configuration wizard wizard
gurat service following the
ion wizard.
User Configure enterprise- Configuration page of Not supported

acces level NAC services, the web system on
s including Portal the PC
authe authentication and
nticat 802.1X
ion authentication.
AP The smart upgrade Upgrade page of the Network management

upgra function is web system on the PC page on the APP
de recommended to
upgrade the leader
AP and other APs.
Netw Check the running Monitoring page of Network management

ork status of the WLAN the web system on page on the APP
O&M and perform routine the PC
management and
maintenance.

Fat AP and Cloud AP
Configuration Mode Comparison
Table 3-4 Comparison of different configuration modes supported by a leader AP

Item Web System Mobile App CLI
Configura Laptop Mobile phone Laptop

tion Browser CloudCampus APP SSH client software
preparati
on MAC address of the MAC address of
AP the AP
Login to Connecting and Automatic Connecting and

the AP logging in to the AP The user name and logging in to the
before and after the password are AP before and after
AP mode is switched automatically saved. the AP mode is
for twice switched
The user name and The user name and
password are required password are
for each login. required for each
login.
AP mode Manual Automatic Manual

switching
Configura Wizard-based Wizard-based Command

tion execution line by
procedure line based on the
configuration logic
Configura Several Some Many

tion steps
User Supported (on the Not supported Supported

access PC)
authentic
ation
Network Supported (on the Supported Supported

O&M PC)
AP Supported (on the Supported Supported

upgrade PC)
AP Supported (on the Supported Supported

system PC)
managem
ent
Overall Medium Low High

difficulty

Fat AP and Cloud AP
NOTE
The functions supported by the web system and mobile APP may vary depending on the AP
version and APP version. Follow the actual UIs when performing operations.
3.7 Configuring a Leader AP on the CloudCampus APP

Prerequisites
One AP has been selected as the leader AP.
WLAN network planning and design have been completed.
The APs have been connected and powered on according to the networking
diagram.
The CloudCampus APP has been installed on a mobile phone.
To use the Local management network function on the CloudCampus APP, the
AP version must be V200R021C01 or later. This configuration mode is also
applicable to a single AP.
Context
The configuration using the CloudCampus APP is simple, allowing you to complete
service configurations easily on a mobile phone. However, the configuration items
supported are fewer than those in the configuration using the web system. This
mode is recommended to quickly complete the basic coverage configuration.
Procedure
Step 1 Open the CloudCampus APP on the mobile phone and touch Local management
network to configure the Wi-Fi network.

Fat AP and Cloud AP
Step 2 The mobile phone automatically scans for nearby APs and connects to the AP with
the strongest signal strength. You need to set the login password when connecting
to the AP for the first time.

Fat AP and Cloud AP
Step 3 Select a proper tag for the current network. If multiple networks need to be
managed on the APP, the tag can help you easily distinguish different networks,
for example, Company and Store. Set the SSID name for the Wi-Fi network. By
default, the Wi-Fi password is the same as the password for logging in to the AP.
The APP automatically detects the network access mode based on the current
networking environment. If no optical modem is detected, dialup on the leader AP
is required. In this case, you need to set dialup Internet access parameters
(including PPPoE dialup account and password). You can manually change the
Internet access mode.

Fat AP and Cloud AP
Step 4 Submit the configuration and wait until the configuration is complete.
The initial configuration takes a long time. Do not exit this screen before the
configuration is complete. Otherwise, the configuration may be interrupted. When
the following dialog box is displayed, the configuration is complete. The mobile
phone then automatically connects to the configured Wi-Fi network for Internet
access. If the speed test is not required, touch Cancel.

Fat AP and Cloud AP
After the configuration is complete, you can view information about the Wi-Fi
network, including the network tag and Wi-Fi name. Touch the Wi-Fi network to
access the network management page. If multiple networks are configured and
managed, multiple networks are displayed on this page.

Fat AP and Cloud AP
----End
Result
The configured Wi-Fi name can be detected in any area within the coverage of the
APs. You can access the Internet after connecting to the Wi-Fi signal.
Network Management Functions

Touch a Wi-Fi network in the network list. On the management screen that is
displayed, you can modify Internet access parameters, manage terminals
connected to the Wi-Fi network, and manage APs.

Fat AP and Cloud AP
Modifying Wi-Fi settings

Touch Wi-Fi Settings to change the Wi-Fi name and password. You can separately
configure different passwords for the 2.4 GHz and 5 GHz signals.

Fat AP and Cloud AP
Managing online terminals

Touch Device Access to view online terminals and set whether to allow the
terminals to access the Internet. Terminals that are not allowed to access the
Internet will be added to the blacklist. To delete a terminal from the blacklist,
enable ALLOW for the terminal on the Blocked tab.

Fat AP and Cloud AP
Managing APs
Touch AP Management to control APs' indicators, restart APs, and restore the
factory defaults of APs.

Fat AP and Cloud AP
Performing automatic network diagnosis

Touch Network Diagnosis to check whether the network is faulty. Possible causes
for exceptions can help you resolve network faults.

Fat AP and Cloud AP
Performing automatic Wi-Fi optimization

Touch Wi-Fi Optimization to control the automatic optimization function. You are
advised to enable Automatic Optimization to automatically optimize the
network. If immediate optimization is required, disable and then enable it.

Fat AP and Cloud AP
Collecting log files

Choose More Settings > Log Collection and save logs as required. If a fault
occurs on the network, you need to collect logs for further check. This function
allows you to export the logs of each AP and send log files through applications
such as emails.

Fat AP and Cloud AP
Touch the icon in the upper right corner of the log collection screen to manage all
exported log files. You can share or delete a log file.

Fat AP and Cloud AP
Upgrading APs
Choose More Settings > Upgrade Management to automatically detect the new
version of the AP and complete the upgrade in one-click mode.

Fat AP and Cloud AP
To obtain the recommended software version, ensure that the AP is connected to

the Internet during the upgrade. Then the AP automatically restarts for the new
version to take effect.

Fat AP and Cloud AP
Modifying the signal strength

Choose More Settings > Signal Strength and set the signal strength. The Extra
strength mode provides the strongest signal coverage.

Fat AP and Cloud AP
Setting the health mode

Choose More Settings > Health Mode and set the scheduled Wi-Fi shutdown
function.

Fat AP and Cloud AP
3.8 Configuring a Leader AP (Using the Web System on

a Mobile Phone)
Prerequisites
diagram.
The MAC address of the leader AP is available.
Context
The configuration procedure using the web system on a mobile phone is similar to
that using the CloudCampus APP, and the latter is recommended.

Fat AP and Cloud AP
Procedure
Step 1 Log in to the AP.
1. In the preconfigured room where the AP is located, enable the WLAN function
on the mobile phone and search for the SSID named hw_manage_xxxx. (xxxx
in the SSID indicates the last 4 digits of the AP's MAC address.) Connect to
the SSID with the strongest signal strength. No password is required.
2. Open a browser on the mobile phone, enter 169.254.2.1 in the address box,
and touch Go to access the web system. Set the user name and password
upon the first login to the AP.
Step 2 Select SMB/Home Scenario and switch the AP mode to Fat. The AP automatically
restarts, which takes about 2 minutes.

Fat AP and Cloud AP
Step 3 Log in to the AP again.

1. In the WLAN list of the mobile phone, search for the SSID named HUAWEI-
LeaderAP-XXXX (XXXX HUAWEI-LeaderAP-XXXX indicates the last 4 digits
of the AP's MAC address), and connect to the SSID. No password is required.
2. Refresh the page on the mobile phone browser.
Upon your first login to the web system, set the user name and password for
subsequent login through the web system or STelnet, which will be delivered
to managed Fit APs for logging in to them. Additionally, the specified
password is used as the password for console port login and the PSK for the
offline management VAP, allowing you to connect to the offline management
SSID in wireless mode.

Fat AP and Cloud AP
Step 4 Go to the configuration wizard page and select Home Scenario.

Currently, Enterprise Scenario is available only for the PC-edition web system.

Fat AP and Cloud AP
Step 5 Select Multi-AP for configuration.

Fat AP and Cloud AP
Step 6 Configure Internet access parameters.
Step 7 Wait until the configuration is complete. If the following page is displayed, the
configuration is successful.

Fat AP and Cloud AP
----End
Result
The configured WLAN name is displayed on the mobile phone. After connecting to
this WLAN, you can access the Internet.
3.9 Configuring a Leader AP (Using the Web System)

Prerequisites
diagram.
The MAC address of the leader AP is available.
The Windows operating system has been installed on a laptop, and the Internet
Explorer, Firefox, or Chrome browser is available.
If the laptop is connected to the AP in wired mode, prepare one more Ethernet
cable. When the leader AP works in gateway mode, it does not support the login
in wired mode.

Fat AP and Cloud AP
Context
Compared with the mobile app-based configuration, the web system-based
configuration involves more complex procedure but provides more functions. The
wireless mode is recommended to connect to the leader AP.
Procedure
Step 1 Log in to the AP.
1. Place the laptop near the selected AP and search for the SSID named
hw_manage_xxxx. xxxx in the SSID indicates the last 4 digits of the AP's MAC
address. Connect the laptop to the SSID. No password is required.
2. On the laptop, set the IP address for wireless network connection to a fixed IP
address, which is in the same network segment (169.254.2.0) as the default IP
address of the AP. Specify the gateway IP address to the IP address of the AP,
that is, 169.254.2.1. If the AP version is V200R021C01 or later, the laptop can
automatically obtain an IP address from the AP, without the need of manual
configuration.
3. Open the browser on the laptop, enter 169.254.2.1 in the address box, and
press Enter to access the web system. When you log in to the AP for the first
time, set the user name and password.
Step 2 After the working mode of an AP is changed to Fat, the AP restarts.
Step 3 Log in to the AP again.

1. On the laptop, configure DHCP IP address allocation for wireless network
connection.
2. In the coverage area of any AP, search for the SSID named HUAWEI-
LeaderAP-XXXX (XXXX indicates the last 4 digits of the AP's MAC address)
and connect to the SSID. No password is required. The laptop obtains an IP
address.
3. Open the browser on the laptop, enter 192.168.1.1 (for
V200R021C00)169.254.2.1 (for V200R021C01) in the address box, and press
Enter to access the web system. (V200R021C00) When you log in to the AP
for the first time, set the user name and password. To improve security, you
are advised to set the PSK for DTLS encryption, the user name and password
for logging in to Fit APs, and the PSK for the global offline management VAP.
(V200R021C01) Upon the first login to the web system, you are prompted to
set the user name and password for subsequent login through the web

Fat AP and Cloud AP
system or STelnet, which will be delivered to managed Fit APs for logging in
to them. Additionally, the specified password is used as the password for
console port login and the PSK for the offline management VAP, allowing you
to connect to the offline management SSID in wireless mode.
Step 4 Configure basic information about the AP.
Step 5 Access the configuration wizard page and select Multi-AP Configuration.
Step 6 Configure WLAN services. From V200R021C01, the uplink interface can be
specified as required but is not fixed.

Fat AP and Cloud AP
Figure 3-11 Fixed uplink interface

Fat AP and Cloud AP
Figure 3-12 Optional uplink interface
----End
Result
STAs can detect the configured Wi-Fi name. After the correct password is entered
on a STA, the STA can access the Internet.
3.10 Example for Configuring Wi-Fi Internet Access

Through a Leader AP (CloudCampus APP)
Prerequisites
APs have been connected and powered on.
The CloudCampus APP of the latest version has been installed on a mobile phone.
Among the installed APs, one AP needs to be selected as the leader AP to manage
the Wi-Fi network. The CloudCampus APP automatically scans APs and connects
to the AP with the strongest signal. The closer the AP is to the mobile phone, the
stronger the signal is. In this case, hold the mobile phone close to the AP to be
configured, and then use the mobile phone APP to start the configuration.
Context
As shown in Figure 3-13, the optical modem connects to the Internet in the uplink
direction and connects to a PoE switch in the downlink direction. The PoE switch

Fat AP and Cloud AP
connects to APs and supplies power to the APs. One AP is selected as the leader
AP to manage other Fit APs in a unified manner. The administrator only needs to
connect to the leader AP to complete the configuration and management of the
entire Wi-Fi network, delivering roaming-capable Wi-Fi Internet access services to
users.
Figure 3-13 Leader AP networking
Procedure
Step 1 Open the CloudCampus APP on the mobile phone and touch Local management
network to configure the Wi-Fi network.

Fat AP and Cloud AP
Step 2 The mobile phone automatically scans for nearby APs and connects to the AP with
the strongest signal strength. You need to set the login password when connecting
to the AP for the first time.

Fat AP and Cloud AP
Step 3 Select a proper tag for the current network. If multiple networks need to be
managed on the APP, the tag can help you easily distinguish different networks,
for example, Company and Store. Set the SSID name for the Wi-Fi network. By
default, the Wi-Fi password is the same as the password for logging in to the AP.
The APP automatically detects the network access mode based on the current
networking environment. If no optical modem is detected, dialup on the leader AP
is required. In this case, you need to set dialup Internet access parameters
(including PPPoE dialup account and password). You can manually change the
Internet access mode.

Fat AP and Cloud AP
Step 4 Submit the configuration and wait until the configuration is complete.
The initial configuration takes a long time. Do not exit this screen before the
configuration is complete. Otherwise, the configuration may be interrupted. When
the following dialog box is displayed, the configuration is complete. The mobile
phone then automatically connects to the configured Wi-Fi network for Internet
access. If the speed test is not required, touch Cancel.

Fat AP and Cloud AP
After the configuration is complete, you can view information about the Wi-Fi
network, including the network tag and Wi-Fi name. Touch the Wi-Fi network to
access the network management page. If multiple networks are configured and
managed, multiple networks are displayed on this page.

Fat AP and Cloud AP
----End
Network Management Functions

Touch a Wi-Fi network in the network list. On the management screen that is
displayed, you can modify Internet access parameters, manage terminals
connected to the Wi-Fi network, and manage APs.

Fat AP and Cloud AP
Modifying Wi-Fi settings

Touch Wi-Fi Settings to change the Wi-Fi name and password. You can separately
configure different passwords for the 2.4 GHz and 5 GHz signals.

Fat AP and Cloud AP
Managing online terminals

Touch Device Access to view online terminals and set whether to allow the
terminals to access the Internet. Terminals that are not allowed to access the
Internet will be added to the blacklist. To delete a terminal from the blacklist,
enable ALLOW for the terminal on the Blocked tab.

Fat AP and Cloud AP
Managing APs
Touch AP Management to control APs' indicators, restart APs, and restore the
factory defaults of APs.

Fat AP and Cloud AP
Performing automatic network diagnosis

Touch Network Diagnosis to check whether the network is faulty. Possible causes
for exceptions can help you resolve network faults.

Fat AP and Cloud AP
Performing automatic Wi-Fi optimization

Touch Wi-Fi Optimization to control the automatic optimization function. You are
advised to enable Automatic Optimization to automatically optimize the
network. If immediate optimization is required, disable and then enable it.

Fat AP and Cloud AP
Collecting log files

Choose More Settings > Log Collection and save logs as required. If a fault
occurs on the network, you need to collect logs for further check. This function
allows you to export the logs of each AP and send log files through applications
such as emails.

Fat AP and Cloud AP
Touch the icon in the upper right corner of the log collection screen to manage all
exported log files. You can share or delete a log file.

Fat AP and Cloud AP
Upgrading APs
Choose More Settings > Upgrade Management to automatically detect the new
version of the AP and complete the upgrade in one-click mode.

Fat AP and Cloud AP
To obtain the recommended software version, ensure that the AP is connected to

the Internet during the upgrade. Then the AP automatically restarts for the new
version to take effect.

Fat AP and Cloud AP
Modifying the signal strength

Choose More Settings > Signal Strength and set the signal strength. The Extra
strength mode provides the strongest signal coverage.

Fat AP and Cloud AP
Setting the health mode

Choose More Settings > Health Mode and set the scheduled Wi-Fi shutdown
function.

Fat AP and Cloud AP

Through a Leader AP in Gateway Mode (Using the
Web Platform)
Prerequisites
diagram. If the downlink interface of the leader AP does not support PoE power
supply, a power adapter must be deployed for the leader AP even if a PoE+ switch
is available.
Context
As shown in Figure 3-14, the switch is a Layer 2 switch that supports PoE+ power
supply. The switch can connect to wired terminals and APs to provide access for

Fat AP and Cloud AP
STAs. The scale of the WLAN is small, and the number of APs is small. However,
wireless users need to roam between APs. Therefore, the leader AP solution is
used. In this solution, one AP is selected as the leader AP to manage other Fit APs
in a unified manner and construct a WLAN.
Figure 3-14 Networking diagram for configuring the leader AP to work in

gateway mode
Configuration Roadmap
1. If a Huawei switch is used, packets from VLAN 1 are allowed to pass through
by default. No additional configuration is required. If another vendor's switch
is used, the VLAN function is not required, and no additional configuration is
required.
2. Before selecting an AP as the leader AP, switch the AP's working mode to Fat.
3. Configure the leader AP to work in gateway mode to provide Internet access
for STAs.
In gateway mode, the gateway and DHCP are configured for Fit APs by
default. You can retain the default settings. The gateway address for Fit APs is
192.168.200.1 (VLANIF 1, downlink interface), and the address segment for Fit
APs is 192.168.200.0/24.
Configure Internet access parameters in the uplink direction to connect to the
Internet. By default, the uplink interface is Multi-GE0 or GE0.
Configure the gateway, DHCP, and SSID for STAs to access the Internet in the
downlink direction.
When wired users connect to the switch to access the network, they obtain IP
addresses on the same network segment as the AP. They are on a different
LAN from STAs. Therefore, wireless access mode is recommended.

Fat AP and Cloud AP
Procedure
Step 1 Switch the working mode of the leader AP to Fat.
address. Connect the laptop to the SSID.
address of the AP, for example, 169.254.2.100. Specify the gateway IP address
to the IP address of the AP, that is, 169.254.2.1.
4. After the AP mode is switched to Fat, the AP restarts and restores the factory
settings.
Step 2 Connect the laptop to the management SSID of the leader AP in wireless mode
and log in to the web system of the leader AP.
connection.
2. Search for the SSID named HUAWEI-LeaderAP-XXXX (XXXX specifies the last
4 digits of the AP's MAC address) and connect to the management SSID. No
password is required. The laptop obtains an IP address.

Fat AP and Cloud AP
Step 5 Configure WLAN services.

Fat AP and Cloud AP
Step 6 Verify the configuration.

STAs can detect and connect to the SSID wlan-net. After the correct password is
entered, the STAs can access the Internet.
----End
Appendix: CLI-based Configuration on Leader AP in Fat Mode

#
vlan batch 2 101
#
dhcp enable //Enable DHCP.
#
acl number 2001
rule 5 permit
#
interface Dialer1 //Configure a PPPoE dialup interface.
ppp chap user 1234567
ppp chap password cipher %^%#&%IKLuJ!uMK,q+!DcCJA6Tq<OUCx(~nI~[4x#CpN%^%#
ppp pap local-user 1234567 password cipher %^%#Jy(>X+>n]8}3c<2-YaXAZeY3R=75N)U|=1WS`6rN%^%#
ip address ppp-negotiate
dialer-rule ip permit
nat outbound 2001
#
interface Vlanif1 //Configure the downlink interface and set the gateway address of the AP.
ip address 192.168.200.1 255.255.255.0
dhcp select interface
#
interface Vlanif2 //Bind the dialup interface to the uplink interface.
pppoe-client dial-bundle-number 1
#
interface Vlanif101 //Configure the downlink interface and set the gateway address of STAs.

Fat AP and Cloud AP
ip address 192.168.20.1 255.255.255.0

dhcp server dns-list 192.168.20.1
#
interface GigabitEthernet0/0/0 //Configure VLANs for the physical port.
port hybrid pvid vlan 2
port hybrid tagged vlan 1 3 to 4094
port hybrid untagged vlan 2
dhcp snooping trusted
#
ip route-static 0.0.0.0 0.0.0.0 Dialer1 //Configure a static route.
#
capwap dtls control-link encrypt off //Disable DTLS.
#
wlan
temporary-management psk %^%#a8YRV:E9!M&~kHB!O[H*Hd0;-~=L@Q`'.9Xg@nbB%^%# //Configure
the PSK of the offline management VAP for Fit APs.
ap username admin password cipher %^%#d7QgAwww7Gk8'lQ}lx8-JmrKMYPX1VjW*d-p[!i/%^%# //
Configure the user name and password of Fit APs.
traffic-profile name example //Configure the traffic profile. By default, the rate is not limited.
security-profile name example //Configure the encryption mode.
security wpa-wpa2 psk pass-phrase %^%#u<iGN#|T'Tm86VB)1b>LMd('=qOCKJJh[J.;G)BQ%^%# aes
ssid-profile name example //Configure an SSID name.
ssid wlan-net
vap-profile name example //Configure a VAP profile.
service-vlan vlan-id 101
ssid-profile example
security-profile example
traffic-profile example
ap-zone default //Set the name of the AP zone, indicating the APs to which the VAP profile takes effect.
The default AP zone is default.
radio 0 1 2
inner-gateway enable //Configure the gateway mode.
ap-group name default
uplink gigabitethernet 0 vlan-replace //Configure GE0 as the uplink port and enable the VLAN
replacement function (required when a single network port is used).
#
return

Through a Leader AP in Bridge Mode (Using the Web
Platform)
Prerequisites
diagram.
Context
As shown in Figure 3-15, the router is a gateway connected to the Internet, and
the switch is a Layer 2 switch that supports PoE+ power supply. The switch can
connect to wired users and APs to provide access for STAs. The scale of the WLAN
is small, and the number of APs is small. However, wireless users need to roam

Fat AP and Cloud AP
between APs. Therefore, the leader AP solution is used. In this solution, one AP is
selected as the leader AP to manage other Fit APs in a unified manner and
construct a WLAN.
Figure 3-15 Networking diagram for configuring the leader AP to work in bridge
mode
Configuration Roadmap
1. Configure the router. In the uplink direction, configure Internet access
parameters to connect to the Internet. In the downlink direction, configure
VLANs and DHCP for APs and STAs to obtain IP addresses.
2. Configure the switch. Allow packets from the management VLAN (from Fit
APs to the leader AP) and service VLANs (from STAs to the user gateway) to
pass through.
3. Before selecting an AP as the leader AP, switch the AP's working mode to Fat.
4. Configure the leader AP to work in bridge mode and configure Internet access
parameters for STAs.
Procedure
Step 1 Configure the router.
1. Log in to the router. A Huawei AR router is used as an example. Connect a
laptop to the management interface of the AR. Configure an IP address for
the laptop to connect to the wired network. Ensure that the IP address is on
the same network segment as that of the management interface of the
router. On the laptop with SSH client software installed, log in to the router
through STelnet.

Fat AP and Cloud AP
2. Configure the uplink network. The PPPoE dialup interface is used as an

example.
#
vlan batch 2 //Create VLAN 2.
#
acl number 2001 //Create an ACL rule to match all packets.
rule 5 permit
#
interface Dialer1 //Create a dialup interface.
ppp chap user 1234567
ppp chap password cipher %^%#|6(i7IW=fVlcTUM)c>\J{Jy.)i+4PM>|B#/.QmC4%^%#
ppp pap local-user 1234567 password cipher %^%#`$8CA=r@Q4L^@K&Jxq+"|MdEUmK'O/
OuD<Dp0.31%^%#
ip address ppp-negotiate
dialer-rule ip permit
nat outbound 2001
management-interface
#
interface Vlanif2 //Bind the dialup interface to the uplink interface.
pppoe-client dial-bundle-number 1
management-interface
#
interface GE0/0/1 //Add the uplink physical interface to VLAN 2.
#
ip route-static 0.0.0.0 0.0.0.0 Dialer1 //Configure a static route and set the next hop to the dialup
interface.
3. Configure the gateway address and DHCP service for downlink APs and STAs.
#
vlan batch 1 101 //Create management VLAN 1 (default) and service VLAN 101.
#
dns resolve //Enable DNS resolution and proxy.
dns proxy enable
#
dhcp enable //Enable the DHCP service.
#
interface Vlanif1 //Create an interface to connect to APs. The interface functions as the gateway of
the APs and assigns IP addresses to them.
ip address 192.168.10.1 255.255.255.0
#
interface Vlanif101 //Create an interface to connect to STAs. The interface functions as the gateway
of the STAs and assigns IP addresses to them.
ip address 192.168.20.1 255.255.255.0
#
interface GE0/0/2 //Add the downlink physical interface to VLAN 1 (default) and VLAN 101.
port hybrid tagged vlan 101
Step 2 Configure the switch. A Huawei S series switch is used as an example. Connect a
laptop to the management interface of the switch. Configure an IP address for the
laptop to connect to the wired network. Ensure that the IP address is on the same
network segment as that of the management interface of the switch. On the
laptop with SSH client software installed, log in to the switch through STelnet.
#
vlan batch 1 101 //Create management VLAN 1 (default) and service VLAN 101.
#
interface GE0/0/1 //Configure the uplink physical interface to allow packets from VLAN 1 (default) and
VLAN 101 to pass through.
#
interface GE0/0/2 //Configure the downlink physical interface to connect to the AP, and allow packets from
VLAN 1 and VLAN 101 to pass through. This VLAN configuration shall prevail for other interfaces connected

Fat AP and Cloud AP
to the AP.
#
interface GE0/0/5 //Configure the downlink physical interface to wired users, and allow only packets from
VLAN 101 to pass through. Packets sent to wired users do not carry VLAN information. Disable the PoE
function on the interface.
undo poe enable
Step 3 Switch the working mode of the leader AP to Fat.

address. Connect the laptop to the SSID.
address of the AP, for example, 169.254.2.100. Specify the gateway IP address
to the IP address of the AP, that is, 169.254.2.1.
4. After the AP mode is switched to Fat, the AP restarts and restores the factory
settings.
Step 4 Connect the laptop to the management SSID of the leader AP in wireless mode
and log in to the web system of the leader AP.
connection.
2. Search for the SSID named HUAWEI-LeaderAP-XXXX (XXXX specifies the last
4 digits of the AP's MAC address) and connect to the management SSID. No
password is required. The laptop obtains an IP address.

Fat AP and Cloud AP
Step 7 Configure WLAN services.

Fat AP and Cloud AP
Step 8 Verify the configuration.

STAs can detect and connect to the SSID wlan-net. After the correct password is
entered, the STAs can access the Internet.
----End
Appendix: CLI-based Configuration on Leader AP in Fat Mode

#
dhcp enable
#
interface GigabitEthernet0/0/0 //Configure VLANs for the physical port.
port hybrid tagged vlan 2 to 4094
#
capwap dtls control-link encrypt off //Disable DTLS.
#
wlan
temporary-management psk %^%#2.~d~N8LC-(a=a!4N:ANgo(~BZ*NX5/v<hCWrNYR%^%# //Configure
the PSK of the offline management VAP for Fit APs.
ap username admin password cipher %^%#zWO92GK{n~W-9]DNc3YRQ=)o2sIC65xM|u(Kx]U2%^%# //
Configure the user name and password of Fit APs.
traffic-profile name example //Configure the traffic profile. By default, the rate is not limited.
security-profile name example //Configure the encryption mode.
security wpa-wpa2 psk pass-phrase %^%#AugBV){ec<nh6.L_][r,&=|AH!}F\@[6;,Q042t~%^%# aes
ssid-profile name example //Configure an SSID name.
ssid wlan-net
vap-profile name example //Configure a VAP profile.
ssid-profile example
security-profile example
traffic-profile example
ap-zone default //Set the name of the AP zone, indicating the APs to which the VAP profile takes effect.

Fat AP and Cloud AP
The default AP zone is default.

radio 0 1 2
ap-group name default
uplink gigabitethernet 0 //Configure GE0 as the uplink port.
#
return
3.13 FAQs
3.13.1 FAQ: How Do I Set Up a Network with Different

Switches in the Leader AP Solution?
When a leader AP is used to build a Wi-Fi network, a PoE switch is typically
deployed to supply power to APs and connect to the uplink and downlink
networks. Some switches available on the market support Layer 3 routing and can
function as gateways and DHCP servers, while others support only Layer 2
forwarding. In the leader AP networking, different switches have different
interface connection requirements.
Layer 3 Switch with a WAN Port

To determine a Layer 3 switch, you can check the product description or interface
name. If WAN and LAN silkscreens are found on the panel of a switch, the switch
is a Layer 3 switch. WAN indicates an uplink interface, which is connected to the
uplink network on the Internet side. Some switches have the Uplink silkscreen
instead of WAN. LAN indicates a downlink interface, which is connected to the
downlink network on the AP side.

Fat AP and Cloud AP
Figure 3-16 Layer 3 switch networking
In most cases, the DHCP client function is enabled on a WAN port of a Layer 3
switch to obtain an IP address from the uplink network. The DHCP server function
is enabled on a LAN port to assign IP addresses to devices on the downlink
network. In this scenario, configure the leader AP to work in bridge mode, so that
the leader AP, Fit APs, and STAs obtain IP addresses from the Layer 3 switch. The
switch configuration depends on the functions of the optical modem.
● If PPPoE dialup is performed on the optical modem and the DHCP server is
enabled on the LAN port of the optical modem to assign an IP address to the
Layer 3 switch, the default configuration can be retained for the Layer 3
switch.
● If the optimal modem does not support PPPoE dialup or DHCP server,
configure PPPoE dialup on the WAN port of the Layer 3 switch to obtain a
public network address.
Layer 2 Switch with Only LAN Ports

To determine a Layer 2 switch, you can check the product description or interface
name. If only the LAN silkscreen or port numbers are found on the panel of a
switch, the switch is a Layer 2 switch. The uplink and downlink devices can be
connected to any ports on this switch.

Fat AP and Cloud AP
Figure 3-17 Layer 2 switch networking
A Layer 2 switch only transparently transmits packets at Layer 2 but does not
support DHCP. No configuration is required on the switch. The working mode of
the leader AP depends on the functions of the optical modem.
● If PPPoE dialup is performed on the optical modem, enable the DHCP server
on the LAN port of the optical modem to assign IP addresses to downlink
devices. In this case, the optical modem functions as the gateway, and the
leader AP needs to be configured to work in bridge mode.
● If the optimal modem does not support PPPoE dialup or DHCP server,
configure PPPoE dialup on the leader AP to obtain a public network address.
In this case, the leader AP needs to be configured to work in gateway mode
and function as a gateway.
3.13.2 FAQ: How Do I Use the CloudCampus APP to

Synchronize the Existing Configuration on a Leader AP
(Master AP)?
A leader AP supports various configuration modes. The CloudCampus APP is
recommended for configuration and management. If a leader AP has been
configured using another method, such as the web system, to view the network or
modify the configuration on the CloudCampus APP, you need to synchronize the
existing configuration of the leader AP on the CloudCampus APP before
performing other operations.

Fat AP and Cloud AP
The CloudCampus APP only synchronizes the configuration based on the existing
functions on the page.
Currently, the CloudCampus APP does not support configuration synchronization
in CLI mode.
Scenario 1: No AP Is Detected
Touch Restore Configuration, enter AP information, and synchronize the
configuration.
Scenario 2: Other APs Are Detected

Touch the restoration icon in the upper right corner, enter AP information, and
synchronize the configuration.

Fat AP and Cloud AP
Scenario 3: Network Configurations of Other APs Exist

Touch the more icon in the upper right corner, touch Restore Configuration, enter
AP information, and synchronize the configuration.

Fat AP and Cloud AP
3.13.3 FAQ: How Can I Handle a Fault on the Leader AP?

If the leader AP goes offline due to a fault or the Ethernet cable is removed, Fit
APs on the network will go offline and be out of management. About 2 minutes
later, Wi-Fi signals will disappear. As a result, users cannot access the Internet. In
this case, the AP indicator state changes from slow blinking to fast blinking.
Check whether the Ethernet cable of the faulty AP is securely connected. If the
fault persists after the Ethernet cable is securely connected, use the following
methods to rectify the fault:
● (Recommended) Use the network diagnosis function of the CloudCampus APP
to rectify the fault. The following describes this method in detail.
● Hold down the Default button on each AP to restore factory defaults. Then
touch + in the device list on the CloudCampus APP to configure a new Wi-Fi
network.
Network Recovery Using the Network Diagnosis Function of the

CloudCampus APP
1. In the device list on the CloudCampus APP, select the faulty device and touch
Network Diagnosis.

Fat AP and Cloud AP
2. Perform rectification operations based on the diagnosis result. Select an AP

with the strongest signal strength as the leader AP.

Fat AP and Cloud AP
3. The network recovery takes about 3 minutes. Wait until a message indicating
that the network is recovered is displayed. The network is the same after the
recovery.
Reconnecting the Leader AP to the Network After Its Fault Is Rectified

If the leader AP is directly reconnected to the Wi-Fi network, it cannot work with
other APs. You need to use the network diagnosis function of the CloudCampus
APP to reconnect the leader AP to the Wi-Fi network.
After you touch Network Diagnosis, the CloudCampus APP replans APs on the
network so that only one leader AP is reserved on the network. Wait until a
message indicating that the network is recovered is displayed.

Fat AP and Cloud AP
3.13.4 FAQ: What Are the Differences Between the Default

and Reset Buttons on a Wall Plate 86x86 AP?
The Default and Reset buttons of a wall plate 86x86 AP are hidden within the
front panel, and can be found after the front panel is removed.
In the following figure, 3 is the Reset button, which can be pressed to restart the
AP; 4 is the Default button, which can be held for more than 3 seconds to restore
factory defaults of the AP and restart the AP. In V200R021C11 and later versions,
you need to press and hold the Default button for more than 6 seconds to restore
the factory settings and restart the AP. additionally, the AP will be restored to the
Fit mode regardless of its current working mode.

Fat AP and Cloud AP
3.13.5 FAQ: What Should I Do If I Forget the Password for

Logging In to an AP?
Press and hold the Default button on the AP to restore its factory defaults,
reconfigure the network, and set the login password.
The Default button of a wall plate 86x86 AP is hidden within the front panel, and
can be found after the front panel is removed.
3.13.6 FAQ: How Do I Hide the SSID on the CloudCampus

APP?
The CloudCampus APP support SSID hiding. After a Wi-Fi network is configured
using the CloudCampus APP, a network card is generated, allowing you to
configure the Wi-Fi network.
1. Touch the network card.

Fat AP and Cloud AP
2. Touch Wi-Fi Settings.

3. Select the SSID to be hidden, select Hide Wi-Fi, and touch Submit.

Fat AP and Cloud AP
3.13.7 FAQ: What Can I Do If Multiple Master APs Are

Configured on the CloudCampus APP?
It is recommended that you use the mode switching function of the CloudCampus
APP to retain one active AP and switch the other APs to the Fit mode.
Prerequisites: For the master APs that need to be switched to the Fit mode, you
have cleared their configurations by pressing and holding the Default button on
them. These APs are to be restarted.
1. On the Tool screen, touch AP Mode Switch.

Fat AP and Cloud AP
2. Set the target working mode to FIT and scan the MAC addresses of the APs to
be switched.

Fat AP and Cloud AP
3. Touch CONFIRM and wait for the APs to restart.

4. After a period of time, access the management page of the Wi-Fi network.
You can view online information about the APs that have been switched to
the Fit mode.
3.13.8 FAQ: How Do I Add an AP to the Existing Leader AP

Network?
If a new AP works in Fit AP mode (default), it supports plug-and-play. You only
need to connect the AP to a switch to access the network. The connection mode is
the same as that of other APs.
If the new AP works in Fat AP mode, switch it to the Fit mode before connecting it
to the network. For details about mode switching operations, see 3.13.7 FAQ:
What Can I Do If Multiple Master APs Are Configured on the CloudCampus
APP?.
3.13.9 FAQ: After a Wi-Fi Network Is Configured Using the

CloudCampus APP, the Mobile Phone Cannot Automatically
Connect to the Configured Wi-Fi Network, Requiring Manual
Connection. Why?
This is a normal situation. The automatic Wi-Fi connection function provided by
Android is restricted by permission and other factors. In this case, you need to

Fat AP and Cloud AP
manually select the target Wi-Fi network and enter the password to connect to
the Wi-Fi network. After connecting to the Wi-Fi network, you can view the
network status or modify network settings on the CloudCampus APP.
3.13.10 FAQ: What Do I Do If a Message Is Displayed During

the Wi-Fi Network Configuration on the CloudCampus APP?
The CloudCampus APP uses Wi-Fi to connect to and configure APs. The Wi-Fi
connection is easily affected by environmental interference. It is normal if the
following dialog boxes displayed. Follow the onscreen instructions to connect to
the corresponding Wi-Fi network.

Fat AP and Cloud AP
3.13.11 FAQ: After the Wi-Fi Network Is Configured on the

CloudCampus APP, Will the Configuration Be Lost After the
AP Is Restarted?
After the Wi-Fi network is configured on the CloudCampus APP, the configuration
information is automatically saved. Even if the AP is restarted, the configured Wi-
Fi network can be restored based on the saved configuration.

01-03 Leader AP Configuration

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

01-03 Leader AP Configuration

Uploaded by

Copyright:

Available Formats

Fat AP and Cloud AP

Web-based Configuration Guide 3 Leader AP Configuration

About This Chapter

3.1 Overview of the Leader AP

3.1 Overview of the Leader AP

Issue 03 (2022-08-31) Copyright © Huawei Technologies Co., Ltd. 14

The functions of the leader AP can be distinguished in single-AP and multi-AP

3.2 Understanding the Leader AP

Figure 3-1 Leader AP networking architecture

Issue 03 (2022-08-31) Copyright © Huawei Technologies Co., Ltd. 15

In the leader AP + Fit AP networking architecture, a Fat AP can be considered as a

Issue 03 (2022-08-31) Copyright © Huawei Technologies Co., Ltd. 16

Figure 3-2 Network where a leader AP works in bridge mode

Issue 03 (2022-08-31) Copyright © Huawei Technologies Co., Ltd. 17

Figure 3-3 Network where a leader AP works in gateway mode

3.3 Application Scenario of the Leader AP

Typically, a router or an optical modem functions as an independent gateway and

When an independent gateway is available, the bridge mode is recommended for

Issue 03 (2022-08-31) Copyright © Huawei Technologies Co., Ltd. 18

Figure 3-4 Application scenario of a leader AP in bridge mode

Networking of a Leader AP Working in Gateway Mode with No Independent

Issue 03 (2022-08-31) Copyright © Huawei Technologies Co., Ltd. 19

Figure 3-5 Dual-interface leader AP networking

Issue 03 (2022-08-31) Copyright © Huawei Technologies Co., Ltd. 20

Figure 3-6 Single-interface leader AP networking (through PPPoE dialup on the

With an External Authentication Server

Issue 03 (2022-08-31) Copyright © Huawei Technologies Co., Ltd. 21

Figure 3-7 Application scenario of an external authentication server in leader AP

Issue 03 (2022-08-31) Copyright © Huawei Technologies Co., Ltd. 22

Figure 3-8 Connecting to the HOUP for a smart upgrade

Local upgrade in AC mode

Issue 03 (2022-08-31) Copyright © Huawei Technologies Co., Ltd. 23

Figure 3-9 Local upgrade in AC mode

Upgrade in SFTP/FTP mode

Issue 03 (2022-08-31) Copyright © Huawei Technologies Co., Ltd. 24

Figure 3-10 AP upgrade in SFTP/FTP mode

3.4 Configuration Limitations for the Leader AP

Issue 03 (2022-08-31) Copyright © Huawei Technologies Co., Ltd. 25

In scenarios that require high security, an independent authentication server is

A leader AP cannot connect to iMaster NCE-CampusInsight or eSight.

● A leader AP cannot be deployed together with a WAC. If a WAC is working on

Table 3-1 Maximum number of Fit APs managed by a leader AP

Model Maximum Number Maximum Number of

Issue 03 (2022-08-31) Copyright © Huawei Technologies Co., Ltd. 26

Model Maximum Number Maximum Number of

AirEngine 5761S AirEngine AirEngine 5761S-11W:

● A leader AP supports only direct forwarding when working in bridge mode,

Issue 03 (2022-08-31) Copyright © Huawei Technologies Co., Ltd. 27

configured as the CAPWAP source interface. If wired terminals exist on the

To log in to a leader AP in wireless mode, connect to the management SSID.

● Only Layer 2 roaming is supported.

3.5 Default Settings for a Leader AP

Parameter Default Setting

Wireless Name of the management SSID: HUAWEI-LeaderAP-XXXX

Issue 03 (2022-08-31) Copyright © Huawei Technologies Co., Ltd. 28

Parameter Default Setting

Wired (initial VLANIF 1: 169.254.1.1/24 (management interface, which

Wired (bridge VLANIF 1: 169.254.1.1/24 (management interface, which

Wired (gateway VLANIF 1: 192.168.200.1 (management interface, which can

VLAN Service VLAN: 101

Login mode Web system: enabled

Issue 03 (2022-08-31) Copyright © Huawei Technologies Co., Ltd. 29

Parameter Default Setting

3.6 Summary of Leader AP Configuration Tasks