wlan sta-profile

disable-on-mesh-point

essid <ESSID>

uplink-band <band>

wifi1x {peap <username> <password> | tls <tpm> <user>}

wifi1x-eap-server <validate-server>

wpa-passphrase <WPA-key>

no wpa-passphrase

Description

This command enables Wi-Fi uplink on an Instant AP. Use this command to configure Wi-Fi uplink for a client station connected to an Instant AP.

Parameter	Description
wlan sta-profile	Configures a Wi-Fi uplink profile for an Instant AP.
essid <ESSID>	Defines a unique name for the network on which the Wi-Fi uplink will be enabled.
cipher-suite <clear \| wpa-tkip-psk \| wpa2-ccmp-psk \| wpa-tkip \| wpa2-ccmp \| wpa3-sae-aes \| wpa3-ccm-128 \| wpa3-gcm-256 \| wpa3-cnsa>	Configures encryption settings. You can specify the following types of encryption: clear —To clear a cipher suite and use open key management. wpa-tkip-psk —To use WPA with TKIP encryption along with PSK. wpa2-ccmp-psk—To use WPA-2 with Counter Cipher Mode with Block CCMP, an AES-based encryption mode with strong security, along with PSK. wpa-tkip—To use WPA with TKIP encryption along with 802.1X authentication. wpa2-ccmp—To use WPA-2 with Counter Cipher Mode with Block CCMP, an AES-based encryption mode with strong security, along with 802.1X authentication. wpa3-sae-aes—To use WPA-3 Personal key management along with PSK. This cypher suite can be used only in Wi-Fi 6E capable access points. Other AP platforms do not support this cypher suite. wpa3-ccm-128—To use WPA-3 with AES CCM-128 encryption and dynamic keys along with 802.1X authentication. wpa3-gcm-256—To use WPA-3 with AES CCM-128 encryption, utilizing a 256-bit key for enhanced security. wpa3-cnsa—To use WPA-3 with AES GCM-256 encryption using CNSA (192 bit).
disable-on-mesh-point	In Mesh deployments, the configurations are synced to all peer APs, irrespective of their mesh roles. Use this command to disable the configuration of wifi uplink on mesh points. When this is configured the only the master AP uses wi-fi uplink to connect to the Internet.
wpa-passphrase <WPA-key>	Defines a WPA passphrase with which a PSK can be generated. The passphrase must be between 8 and 64 characters.
wifi1x {peap <username> <password> \| tls <tpm> <user>}	Defines the 802.1X authentication method used. this mode is available when wpa-tkip, wpa2-ccmp, and wpa3 modes are used.
wifi1x-eap-server <validate-server>	Validates the server certificate when TLS method is used for 802.1X authentication.
no wpa-passphrase	Removes the configuration of the wpa-passphrase parameter.
uplink-band <band>	Configures the band for uplink connection. Range: 802.11a, 802.11g, 802.116GHz (For Wi-Fi 6E capable access points) Default: 802.11g
no wlan sta-profile	Removes the WLAN sta-profile configuration.

Example

The following commands configure the Wi-Fi uplink profile:

(Instant AP)(config) # wlan sta-profile corpnet

(Instant AP)(sta uplink)# uplink-band dot11a

(Instant AP)(sta uplink)# cipher-suite wpa-tkip-psk

(Instant AP)(sta uplink)# wpa-passphrase user@123

Command History

Release	Modification
Instant Mode 8.13.0.0	New options for wpa3-ccm-128, wpa3-gcm-256, and wpa3-cnsa were added to the cypher-suite parameter.
Instant Mode 8.9.0.0	A new option, wpa3-sae-aes, was added to the cypher-suite parameter for Wi-Fi 6E capable access points. A new option, 802.116GHz, was added to the uplink band parameter for Wi-Fi 6E capable access points.
HPE Aruba Networking Instant 8.3.0.0	Command introduced.

Command Information

Platform	Command Mode
All platforms	Configuration mode and Wi-Fi uplink sub-mode.