Skip to main contentSkip to search
Skip to main content

Huawei WLAN Controller (AC)

Legacy Hardware

This vendor's wireless products have been discontinued or are no longer widely deployed. This guide is maintained for reference but may not reflect current firmware versions. For modern alternatives, see our Configuration Guides.

Huawei WLAN Controller – Guest WiFi Configuration Guide​

  1. Log In Access the Huawei WLAN Controller web interface.
  2. Navigate to Configuration at the top menu.
  3. Configure VLAN Go to AC Config > VLAN on the left panel.
  4. Click Add and set the following: VLAN ID: (e.g., 
    100
    )
  5. Enable Create VLANIF and configure: Description: 
    ironwifi
  6. IP Address Format: IPv4
  7. IPv4 Address/Mask: 
    10.1.0.1 / 255.255.255.0
  8. Click OK to save.
  9. Enable DHCP Go to IP on the left.
  10. Ensure DHCP Status is enabled.
  11. Click Create and set: Address Pool Type: Interface address pool
  12. Select Interface: VLAN100
  13. Click Advanced and configure: Primary DNS: 
    8.8.8.8
  14. Secondary DNS: 
    8.8.4.4
  15. Click OK to save.
  16. Domain Whitelisting Navigate to Security > ACL > Domain Name Configuration tab.
  17. For each domain: Click Create
  18. Set: Domain Name ID: (e.g., 
    1
    )
  19. Domain Name: 
    *insert domain here*
  20. Create ACL Rules Go to the User ACL Settings tab.
  21. Click Create and set: ACL Name: 
    ironwifi
  22. ACL Number: 
    6030
  23. Click OK.
  24. For each domain added: Click Add Rule
  25. Set: Rule ID: Start at 
    1
    and increment
  26. Action: Permit
  27. Protocol Type: IP
  28. Destination Domain: select corresponding domain
  29. Click OK.
  30. Portal Server Configuration Go to Security > AAA > External Portal Server tab.
  31. Set under External Portal Interoperation Protocol: HTTP Protocol: Enabled
  32. Interoperation Mode: HTTP-based
  33. Port: 
    8000
  34. Click Apply.
  35. Under Portal Authentication Server List, click Create and configure: Server Name: 
    ironwifi
  36. Server IP: 
    10.1.0.1
  37. URL: insert access_url here
  38. Under URL Option Settings:Set: AC-IP: 
    ac-ip
  39. User Access URL: 
    url
  40. User IP: 
    user-ip
  41. SSID: 
    ssid
  42. Login URL Keyword/URL:
  43. User MAC: 
    user-mac
  44. AP MAC: 
    ap-mac
  45. MAC Format: Normal
  46. Separator: 
    -
  47. Under Parameter Parsing Configuration: Protocol Type: HTTP
  48. Login Success Response: Redirect to URL – insert redirect_url here
  49. Click OK.
  50. RADIUS Configuration Go to the RADIUS tab.
  51. Under RADIUS Server Profile, click Create: Profile Name: 
    ironwifi
  52. Key: insert radius_secret here
  53. Confirm Key: same as above
  54. Click OK.
  55. Under Authentication/Accounting Server:Click Create: Profile: 
    ironwifi
  56. Server Type: Authentication
  57. IP Address: insert radius_server_ip here
  58. Port: insert radius_server_auth_port here
  59. Weight: 
    1
  60. Click + to add second server: IP: insert radius_server2_ip here
  61. Port: insert radius_server2_auth_port here
  62. Weight: 
    2
  63. Click OK.
  64. Click Create again: Server Type: Accounting
  65. IPs/Ports: same as above but using acct_port
  66. Authentication ProfilesGo to Authentication Profile, click Create: Profile Name: 
    ironwifi
  67. Expand it in the tree, go to Portal Profile, click Add: Name: 
    ironwifi
  68. Portal Authentication: External portal server
  69. Active Server: 
    ironwifi
  70. Authentication Mode: Layer 3
  71. Click Apply.
  72. Assign the RADIUS Server Profile: Choose 
    ironwifi
    , click Apply.
  73. Authentication and Accounting SchemesUnder Authentication Scheme: Click Add > Name: 
    ironwifi
    , click OK
  74. First Authentication: RADIUS
  75. Under Accounting Scheme: Click Add > Name: 
    ironwifi
    , click OK
  76. Real-time Accounting: On
  77. Interval: 3 seconds
  78. Click Apply.
  79. Authentication-Free Rule Profile Click Add, name: 
    ironwifi
    , click OK
  80. Control Mode: ACL
  81. ACL Number: 
    6030
  82. Go to Advanced tab: HTTPS Redirection: Off
  83. Portal URL Encoding/Decoding: Off
  84. Click Apply.
  85. AP ConfigurationGo to AP Config > Profile > VAP Profile: Click Create: name 
    ironwifi
    , click OK
  86. Set: Status: On
  87. VAP Type: Service VAP
  88. Forwarding Mode: Tunnel
  89. Service VLAN ID: 
    100
  90. Home Agent: AP
  91. Layer 3 Roaming: On
  92. IP Learning: On
  93. Click Apply.
  94. SSID ConfigurationGo to SSID Profile, click Create: Name: 
    ironwifi
  95. SSID: 
    Iron WiFi
    (or custom name)
  96. Click Apply.
  97. Assign VAP to AP Group Go to AP Config > AP Group
  98. Select group > VAP Configuration
  99. Click Add: VAP Profile: 
    ironwifi
  100. WLAN ID: 
    2
    (or available ID)
  101. Click OK.
  102. Link SSID and Security Expand 
    ironwifi
    profile, assign SSID Profile: 
    ironwifi
  103. Go to Security Profile, click Create: Name: 
    ironwifi
  104. Security Policy: Open
  105. Click Apply.
  106. Set Authentication Profile to 
    ironwifi
    , then Apply.
  107. Finalize Click Save at the top to store all changes.

Shared configuration

Was this page helpful?