Comware Unified Wired and Wireless Controllers (830, 850, 870)

General

License AP's - license register ap <license key that is obtained from the HP license center>

"remote forwarding" is the same thing as "Distributed forwarding" in the MSM

"local forwarding" is the same as "access controlled" in the MSM

In the WWLAN Controller engine

 port-security enable

 oap management-ip 10.0.124.3 slot 0    (10.0.124.3 is the switch's ip)

 undo interface Vlan-interface1

To See Clients on AP's

 For tunneled client , you will have to enable arp-snooping with the command 

[HP] arp-snooping enable

 For locally switched client, there are several ways but the easiest way is to use the command 

[HP]wlan client  learn-ipaddr enable

Remote forwarding

 wlan ap a048-1234-5678 model MSM430-AM id 61

  serial-id CN3ABCDEF

  provision

   vlan tagged 128

   vlan untagged 1 124

  country-code US

  radio 1

   service-template 1

   service-template 2

   radio enable

  radio 2

   service-template 1

   service-template 2

   radio enable

Switch and Controller Engine Contexts

The appliance has 2 devices built into one: A switch and a Controller; each with their own context (or engines as the docs refer to them as)

When you log into to an 830/850/870, you are place at the Controller engine context.

The controller has only virtual interfaces in BAGG1 which link to the switch engine via the backplane.

The default ip (192.168.0.100) can be changed.  Vlan tagging/untagging is applied to BAGG 1 as needed to forward traffic to the switch.

The switch has a BAGG1 by default with virtual interfaces that link directly to the Controllers BAGG1. 

All interfaces on the front panel of the wwlan controller belong to the switch engine. 

The only existent interface for the controller is BAGG1.  The interfaces that are virtual for the various platforms can be found by looking at the interfaces in BAG1 (dis link-agg verbose bridge 1).

From the Controller context, to move to the switch context:

 <HP> oap connect slot 0

to Return to Controller Engine

 cntrl-k

Flash

The switch uses flash while the controller use a compact flash:  switch=flash  controller=cfa0

 Switch

 <HP>save

 Please input the file name(*.cfg)[flash:/startup.cfg]

 To move back into the Controller engine

  <HP> cntrl-k

 Controller

  <HP>save

 Please input the file name(*.cfg)[cfa0:/startup.cfg]

Moving from gui to cli

When I wasn’t able to figure out how to configure something in the gui, I'd use the cli commands from the configs and would then look at the gui to see what changed

Auto discovery of AP's

To discover AP's, turn auto-ap on from global context.  After they are discovered, you can turn auto discovery off and then move the AP's int a group. I moved mine into the default group.  It would be easy enough to create other groups and move some AP's into those groups (same concept as MSM AP groups).

Creating group with the cli:  

[AC1] ap-group <group_name>

Portal 

 Load Authentication Web Pages on the Unified Controller

 Create a directory called “portal” on the root directory

 <AC1>mkdir portal

 %Created dir cfa0:/portal.

 Verify the directory was created by issuing the “dir” command again

 <AC1>dir

 Directory of cfa0:/

    .

    .

    6     -rw- 102913024  Dec 19 2013 10:51:12   hp6000-cmw520-r2308p29.bin

    7     drw-         -  Feb 11 2014 09:55:36   portal

 Change to the portal directory

 <AC1>cd portal

Upload the portal web pages zip file to the portal directory (via tftp,ftp,sftp,scp,usb)

This was my portal configuration

 portal server WEB ip 10.0.132.2 url http://10.0.132.2/portal/logon.htm

 portal free-rule 0 source interface Bridge-Aggregation1 destination any

 portal free-rule 1 source ip any destination ip 10.0.132.1 mask 255.255.255.255

 portal wlan ssid GUEST server WEB domain wireless

 portal local-server http

 portal local-server bind ssid GUEST file defaultfile.zip

NOTE:  10.0.132.2 is the controllers ip while 10.0.132.1 was the gateway for vlan 10.0.132.0/23

 domain wireless

  authentication portal local

  authorization portal local

  accounting portal local

  access-limit disable

  state active

  idle-cut enable 120 10240

  self-service-url disable

Some Other Links on Portal Auth

http://abouthpnetworking.com/2014/06/02/hp-unified-wireless-free-access-option-on-guest-portal/

http://abouthpnetworking.com/2014/05/29/hp-unified-wireless-guest-central-authentication-with-data-local-breakout/