I85PREP
⌘ K
HCIA-WLAN study materials
HCIA-WLAN study resources

HCIA-WLAN: WLAN Configuration and Deployment

HCIA-WLAN · Work through your exam, one topic at a time.

All guide sections

WLAN Configuration and Deployment

Domain 3 - WLAN Configuration and Deployment

This domain tests Huawei VRP configuration for Fit AP deployment: CAPWAP source, AP authentication, regulatory domain, SSID/security/VAP profiles, and VLAN binding. The exam favors ordering and dependency questions.

Core rules

  • A Fit AP must obtain an IP address and reach the AC. The AC uses capwap source interface VlanifX; the AP discovers the AC by DHCP option 43, DNS, or broadcast.
  • AP authentication can be MAC-based (ap auth-mode mac-auth) or no-auth. Add the AP by MAC or allow automatic registration.
  • Profiles are reusable: regulatory-domain-profile sets country code; ssid-profile sets SSID; security-profile sets WPA2/WPA3; vap-profile binds SSID, security, and service VLAN.
  • Bind the VAP profile to an ap-group; APs inherit configuration from their group. Country code must match the installed region.

Worked example

Configure SSID guest with WPA2-PSK on VLAN 200. Create ssid-profile guest-ssid with ssid guest; create security-profile guest-sec with security wpa2 psk pass-phrase ... aes; create vap-profile guest-vap, set service-vlan vlan-id 200, and bind the two profiles. Bind guest-vap to ap-group default. Set capwap source interface Vlanif100 and ensure DHCP for AP management VLAN 100 returns option 43 pointing to the AC. The reasoning: the AP management path must work before the service VAP can be delivered.

Traps

A VAP without a reachable CAPWAP source never comes up. Forgetting service-vlan puts clients on the wrong subnet. MAC authentication fails if the AP MAC is mistyped. Changing country code after radios are up may reset radio settings.