ap provisioning-profile

ap provisioning-profile {default | }

ap-lldp-pse-detect {disabled | enabled}

ap-poe-power-optimization

ap2xx-prestandard-poe-detection

apdot1x-factory-cert

apdot1x-passwd

apdot1x-timeout-bypass

apdot1x-timeout-retries

apdot1x-tls

apdot1x-tls-suffix

apdot1x-tls-suffix-domain

apdot1x-username

cellular_nw_preference {3g-only | 4g-only | advanced | auto}

clone {default | }

link-priority-cellular

link-priority-ethernet

master/conductor {clear | set /}

master-prefernce /conductor-preference

no

pppoe-passwd

pppoe-service-name

pppoe-user

remote-ap

uplink-vlan

usb-csr

usb-dev

usb-dial

usb-init

usb-modeswitch

usb-passwd

usb-power-mode {auto | enable | disable}

usb-tty

usb-tty-control

usb-type

usb-user

Description

This command defines a provisioning profile for an AP or group of APs. The AP provisioning profile allows you to define a set of provisioning parameters to an AP group. These settings can be saved or assigned to an AP group by using theap-group provisioning-profile command.

In order to enable cellular uplink for a Remote AP it must have the device driver for the USB data card and the correct configuration parameters.ArubaOSincludes device drivers for the most common hardware types, but you can use the usb commands in this profile to configure a Remote AP to recognize and use an unknown USB modem type.

Parameter

Description

ap provisioning-profile

Configures a provisioning profile for an AP or a group of APs. Give a name for the profile.

ap-lldp-pse-detect

Enabling causes the AP to detect the POE type via LLDP POE TLV. Use one of the following parameters:

enabled: The AP uses PSE TYPE in the POE TLV to detect the PSE type.

disabled: The AP detects the POE using the HW classification.

ap-poe-power-optimization

Enabling optimization minimizes the POE draw of the AP. Enabling optimization may disable some parts of the AP. Disabling optimization ensures all features are enabled. Use one of the following parameters:

enabled:USB and Ethernet port (eth1) are shut down on AP.

disabled:AP operates in normal mode.

Default:disabled

ap2xx-prestandard-poe-detection

Configures the prestandard PoE detection on200 SeriesAPs.

The POE+ pre-standard detection is only available on200 SeriesAPs.

It consists of a basic voltage comparator. If the line voltage is equal to or greater than 51 V, the PSE is assumed to be 802.3at compatible.

apdot1x-factory-cert

Enables AP to use factory certificates when doing 802.1x EAP-TLS.Custom cert available.

apdot1x-timeout-bypass

Enables AP to be provisioned when 802.1X authentication times out.

apdot1x-timeout-retries

Sets the apdot1x timeout threshold. If the auth timeouts over this threshold, the AP will bypass apdot1x auth.

apdot1x-passwd

Sets the password of the AP to authenticate to 802.1X using PEAP.

apdot1x-tls

使执行802.1 x认证使用美联社EAP-TLS.

apdot1x-tls-suffix

Enables AP to use EAP-TLS username as suffix.

Default:disabled

apdot1x-tls-suffix-domain

Sets the suffix domain for AP dot1x EAP-TLS username. If defined, use EAP-TLS username as suffix, else usearuba.ap.

Range:1-63

apdot1x-username

Sets the username of the AP to authenticate to 802.1X using PEAP.

cellular_nw_preference

{3g-only | 4g-only | advanced | auto}

The cellular network preference setting allows you to select how the modem should operate.

auto (default)

3g_only:Locks the modem to operate only in 3G.

4g_only:Locks the modem to operate only in 4G.

advanced:The Remote AP controls the cellular network service selection based on an Received Signal Strength Indication (RSSI) threshold-based approach. Initially the modem is set to the default auto mode. This allows the modem firmware to select the available network. The Remote AP determines the RSSI value for the available network type (for example 4G), checks whether the RSSI is within required range, and if so, connects to that network. If the RSSI for the modem’s selected network is not within the required range, the Remote AP will then check the RSSI limit of an alternate network (for example, 3G), and reconnect to that alternate network.

The Remote AP will repeat the above steps each time it tries to connect using a 4G multimode modem in this mode.

The Remote AP determines the RSSI value for the available network type (for example 4G), checks whether the RSSI is within required range, and if so, connects to that network.

If the RSSI for the modem’s selected network is not within the required range, the Remote AP will then check the RSSI limit of an alternate network (for example, 3G), and reconnect to that alternate network. The Remote AP will repeat the above steps each time it tries to connect using a 4G multimode modem in this mode.

Default:auto

clone

Clones an existing AP provisioning profile.

link-priority-cellular

Sets the priority of the cellular uplink. By default, the cellular uplink is a lower priority than the wired uplink; making the wired link the primary link and the cellular link the secondary or backup link.

Configuring the cellular link with a higher priority than your wired link priority will set your cellular link as the primarycontrollerlink.

Range:0-255

Default:0

link-priority-ethernet

Sets the priority of the wired uplink. Each uplink type has an associated priority; wired ports having the highest priority by default.

master /conductor

Changes the FQDN or IP address for theMobility Conductor.

set /

Specifies the IP address or FQDN for theMobility Conductor.

clear

Clear the definition for theMobility Conductorin this profile.

master preference /conductor preference

Configures the preferred IP protocol (IPv4 or IPv6) for APConductordiscovery.

Default:Default: IPv4

no

Negates any configured parameter.

pppoe-passwd

PPPoE password for the AP.

pppoe-servicename

PPPoE service name for the AP.

pppoe-user

PPPoE username for the AP.

remote-ap

Specifies that the profile is to be associated with a remote AP using certificates.

uplink-vlan

If you configure an uplink VLAN on an AP connected to a port in trunk mode, the AP sends and receives frames tagged with this VLAN on its Ethernet uplink.

By default, an AP has an uplink vlan of 0, which disables this feature.

If an AP is provisioned with an uplink VLAN, it must be connected to a trunk mode port or the frames of the AP will be dropped.

Range:0-4095

Default:0

usb-csr

Configures the USB storage for CSR and private Key file

usb-dev

Configures the USB device identifier.

usb-dial

Configures the dial string for the USB modem. This parameter only needs to be specified if the default string is not correct.

usb-init

The initialization string for the USB modem. This parameter only needs to be specified if the default string is not correct.

usb-modeswitch

-v for default_vendor

-p for default_product

-V for target_vendor

-P for target_product

-M for message_content

USB cellular devices on remote APs typically register as modems, but may occasionally register as a mass-storage device. If a remote AP cannot recognize its USB cellular modem, use the usb-modeswitch command to specify the parameters for the hardware model of the USB cellular data-card.

You must enclose the entire modeswitch parameter string in quotation marks.

usb-passwd

A PPP password, if provided by the cellular service provider.

usb-power-mode

{auto| enable|disable}

Set the USB power mode to control the power to the USB port.

usb-tty

The TTY device path for the USB modem. This parameter only needs to be specified if the default path is not correct.

usb-tty-control

The TTY device control path for the USB modem. This parameter only needs to be specified if the default path is not correct.

usb-type

Specify the USB driver type.

acm:Use ACM driver

airprime:Use Airprime driver

ether:Use CDC Ether driver for direct IP 4G device

hso:Use HSO driver for newer Option

huawei-cdc:Use Huawei driver for 4G device

lnetgear-gobi:使用戈壁驱动美国网件公司340 u或341 u 4 g设备

none:Disable 3G or 2G network on USB

option:Use Option driver

option-novatel-u620:Use Option driver for Novatel U620L 4G device

pantech-3g:Same as "pantech-uml290" - to support upgrade

pantech-auto:Use Pantech driver for Automatic modem mode

pantech-uml290:Use Pantech USB driver for UML290 device

ptumlusbnet:Use Pantech USB driver for 4G device

rndis:Use a RNDIS driver for a 4G device

rndis-1800:Same as RNDIS - to use for L800 4G device

rndis-pantech-uml295:使用RNDIS泛泰UML 295 4 g设备驱动程序

sierra-evdo:Use EVDO Sierra Wireless driver

sierra-gsm:Use GSM Sierra Wireless driver

sierrausbnet:Use SIERRA Direct IP driver for 4G device

storage:Use USB flash as storage device for storing Remote AP certificates

usb-user

The PPP username provided by the cellular service provider.

Examples

The following commands create a provisioning profile named profile_branch, in which the cellular link is the primary uplink because it has a higher priority than the Ethernet link:

(host) [mynode] (config) #ap provision-profile profile_branch

(host) [mynode] (Provisioning profile "profile_branch") #link-priority-cellular 2

(host) [mynode] (Provisioning profile "profile_branch") #link-priority-ethernet 1

(host) [mynode] (Provisioning profile "profile_branch") #usb-type acm

(host) [mynode] (Provisioning profile "profile_branch") #usb-modeswitch "-v 0x106c -p 0x3b06 -V 0x106c -P 0x3717 -M 5534243b82e238c24000000800008ff020000000000000000000000000000"

The following example configures the preferred IP protocol for AP master /conductordiscovery:

(host) [mynode] (config) #ap provision-profile profile_branch

(host) [mynode] (Provisioning profile "profile_branch") #master/conductor-preference ipv6

Related Commands

Command

Description

provision-ap

Change provisioning parameters for an individual AP. This command does not save the provisioning parameters settings in a reusable profile.

Command History

Release

Modification

ArubaOS8.9.0.0

The following parameters have been modified:

All instances ofmasterhave been replaced withconductor.

All instance ofmaster-preferencehave been replaced withconductor-preference.

All instance ofmasterstrhave been replaced withconductorstr.

ArubaOS8.8.0.0

The following parameters were added:

apdot1x-timeout-bypass

apdot1x-timeout-retries

ArubaOS8.7.0.0

Themaster-preferenceparameter was introduced.

ArubaOS8.4.0.0

The following parameters were added:

apdot1x-tls-suffix

apdot1x-tls-suffix-domain

ArubaOS8.2.0.0

The following parameters were added:

apdot1x-factory-cert

apdot1x-tls

ap-lldp-pse-detect

ArubaOS8.0.0.0

Command introduced.

Command Information

Platforms

License

Command Mode

All platforms

Base operating system.

Config mode onMobility Conductor.