第1页 / 共1384页
第2页 / 共1384页
第3页 / 共1384页
第4页 / 共1384页
第5页 / 共1384页
第6页 / 共1384页
第7页 / 共1384页
第8页 / 共1384页
WLC3504 配置手册.pdf
Cisco Wireless Controller Configuration Guide, Release 8.9
Full Cisco Trademarks with Software License
Contents
Preface
Audience
Conventions
Related Documentation
Overview
Cisco Wireless Solution Overview
Core Components
Overview of Cisco Mobility Express
Initial Setup
Cisco WLAN Express Setup
Restrictions on Cisco WLAN Express
Setting up Cisco Wireless Controller using Cisco WLAN Express (Wired Method)
RF Profile Configurations
Default Configurations
Configuring the Controller Using the Configuration Wizard
Configuring the Controller (GUI)
Configuring the Controller—Using the CLI Configuration Wizard
Using the AutoInstall Feature for Controllers Without a Configuration
Managing the Controller System Date and Time
Restrictions on Configuring the Controller Date and Time
Configuring the Date and Time (GUI)
Configuring the Date and Time (CLI)
Management of Controllers
Administration of Controller
Using the Controller Interface
Using the Controller GUI
Restrictions on using Controller GUI
Logging On to the GUI
Logging out of the GUI
Using the Controller CLI
Logging on to the Controller CLI
Using a Local Serial Connection
Using a Remote Telnet or SSH Connection
Logging Out of the CLI
Navigating the CLI
Enabling Web and Secure Web Modes
Enabling Web and Secure Web Modes (GUI)
Enabling Web and Secure Web Modes (CLI)
Telnet and Secure Shell Sessions
Configuring Telnet and SSH Sessions (GUI)
Configuring Telnet and SSH Sessions (CLI)
Managing and Monitoring Remote Telnet and SSH Sessions
Configuring Telnet Privileges for Selected Management Users (GUI)
Configuring Telnet Privileges for Selected Management Users (CLI)
Management over Wireless
Enabling Management over Wireless (GUI)
Enabling Management over Wireless (CLI)
Configuring Management using Dynamic Interfaces (CLI)
Monitoring Dashboard
Monitoring Dashboard
Numerical Statistics
Graphical Widgets
Network Summary
Network Summary—Access Points
Network Summary—Clients
Rogues
Rogue Access Points
Rogue Clients
Interferers
Wireless Dashboard
AP Performance
Client Performance
Best Practices
Managing Licenses
Cisco Wireless Controller Licensing
Installing a License
Installing a License (GUI)
Installing a License (CLI)
Viewing Licenses
Viewing Licenses (GUI)
Viewing Licenses (CLI)
Configuring the Maximum Number of Access Points Supported
Configuring Maximum Number of Access Points to be Supported (GUI)
Configuring Maximum Number of Access Points to be Supported (CLI)
Troubleshooting Licensing Issues
Activating an AP-Count Evaluation License
Information About Activating an AP-Count Evaluation License
Activating an AP-Count Evaluation License (GUI)
Activating an AP-Count Evaluation License (CLI)
Cisco Smart Software Licensing
Restrictions for Using Cisco Smart Software Licensing
Configuring Cisco Smart Software Licensing (GUI)
Configuring the Cisco Smart Software Licensing on WLC (CLI)
Right to Use Licensing
Configuring Right to Use Licensing (GUI)
Configuring Right to Use Licensing (CLI)
Rehosting Licenses
Information About Rehosting Licenses
Rehosting a License
Rehosting a License (GUI)
Rehosting a License (CLI)
License Agent
Configuring the License Agent (GUI)
Configuring the License Agent (CLI)
Call-Home
Configuring Call-Home (GUI)
Configuring Call-Home Parameters (CLI)
Retrieving the Unique Device Identifier on Controllers and Access Points
Retrieving the Unique Device Identifier on Controllers and Access Points (GUI)
Retrieving the Unique Device Identifier on Controllers and Access Points (CLI)
Managing Software
Upgrading the Controller Software
Considerations for Upgrading Controller Software
Upgrading Controller Software (GUI)
Upgrading Controller Software (CLI)
Predownloading an Image to an Access Point
Access Point Predownload Process
Guidelines and Restrictions for Predownloading an Image to an Access Point
Predownloading an Image to Access Points—Global Configuration (GUI)
Predownloading an Image to Access Points (CLI)
Bootloader and Recovery Image
Configuring Boot Order (GUI)
Recovering an Access Point Using TFTP
Managing Configuration
Resetting the Controller to Default Settings
Resetting the Controller to Default Settings (GUI)
Resetting the Controller to Default Settings (CLI)
Saving Configurations
Editing Configuration Files
Clearing the Controller Configuration
Restoring Passwords
Rebooting the Controller
Transferring Files to and from a Controller
Backing Up and Restoring Controller Configuration
Uploading Configuration Files
Uploading the Configuration Files (GUI)
Uploading the Configuration Files (CLI)
Downloading Configuration Files
Downloading the Configuration Files (GUI)
Downloading the Configuration Files (CLI)
Downloading a Login Banner File
Downloading a Login Banner File (GUI)
Downloading a Login Banner File (CLI)
Clearing the Login Banner (GUI)
Uploading Diagnostic Support Bundle
Uploading Diagnostic Support Bundle (GUI)
Uploading Diagnostic Support Bundle (CLI)
Network Time Protocol Setup
Authentication for the Controller and NTP/SNTP Server
Guidelines and Restrictions on NTP
Configuring the NTP/SNTP Server to Obtain the Date and Time (GUI)
Configuring the NTP/SNTP Server to Obtain the Date and Time (CLI)
Configuring NTPv4 Keys for Authentication (GUI)
High Availability
Restrictions on High Availability
Configuring High Availability (GUI)
Enabling High Availability (CLI)
Configuring High Availability Parameters
Troubleshooting Tips for IPsec Encryption for High Availability
vWLC and N+1 High Availability
Adding a Hash Key to a Cisco vWLC (GUI)
Adding a Hash Key to Cisco vWLC (CLI)
Monitoring High Availability Standby WLC
Replacing the Primary Controller in an HA Setup
Managing Certificates
Loading an Externally Generated SSL Certificate
Loading an SSL Certificate (GUI)
Loading an SSL Certificate (CLI)
Downloading Device Certificates
Downloading Device Certificates (GUI)
Downloading Device Certificates (CLI)
Uploading Device Certificates
Uploading Device Certificates (GUI)
Uploading Device Certificates (CLI)
Downloading CA Certificates
Download CA Certificates (GUI)
Downloading CA Certificates (CLI)
Uploading CA Certificates
Uploading CA Certificates (GUI)
Uploading CA Certificates (CLI)
Generating a Certificate Signing Request
Generating a Certificate Signing Request using OpenSSL
Generating a Certificate Signing Request using Cisco Wireless Controller (GUI)
Generating a Certificate Signing Request using Cisco Wireless Controller (CLI)
Downloading Third-Party Certificate
Downloading Third-Party Certificate (GUI)
Downloading Third-Party Certificate (CLI)
AAA Administration
Setting up RADIUS
Information About RADIUS
Restrictions on Configuring RADIUS
Configuring RADIUS (GUI)
Configuring RADIUS Authentication (GUI)
Configuring RADIUS Accounting Servers (GUI)
Configuring RADIUS (CLI)
RADIUS Authentication Attributes Sent by the Controller
Authentication Attributes Honored in Access-Accept Packets (Airespace)
RADIUS Accounting Attributes
Setting up TACACS+
Information About TACACS+
TACACS+ VSA
Configuring TACACS+ (GUI)
Configuring TACACS+ (CLI)
Maximum Local Database Entries
Information About Configuring Maximum Local Database Entries
Configuring Maximum Local Database Entries (GUI)
Configuring Maximum Local Database Entries (CLI)
Managing Users
Configuring Administrator Usernames and Passwords
Information About Configuring Administrator Usernames and Passwords
Configuring Usernames and Passwords (GUI)
Configuring Usernames and Passwords (CLI)
Creating a Lobby Ambassador Account
Creating a Lobby Ambassador Account (GUI)
Creating a Lobby Ambassador Account (CLI)
Creating Guest User Accounts as a Lobby Ambassador (GUI)
Configuring Guest User Accounts
Information About Creating Guest Accounts
Restrictions on Managing User Accounts
Viewing Guest User Accounts
Viewing the Guest Accounts (GUI)
Viewing the Guest Accounts (CLI)
Client Whitelisting
Information About Client Whitelisting
Restrictions for Client Whitelisting
Configuring Lobby Administrator by Global Administrator (GUI)
Configuring Lobby Administrator by Global Administrator (CLI)
Configuring Client Whitelist by Global Administrator (CLI)
Configuring Lobby Administrator Access on WLAN by Global Administrator (GUI)
Creating Client Whitelist by Lobby Administrator (GUI)
Adding MAC Addresses to a Whitelist by SSID
Adding Single MAC Address to Whitelist
Importing MAC Address CSV List to Whitelist
Deleting MAC Address from Whitelist (GUI)
Password Policies
Information About Password Policies
Configuring Password Policies (GUI)
Configuring Password Policies (CLI)
Ports and Interfaces
Ports
Information About Ports
Information About Distribution System Ports
Restrictions for Configuring Distribution System Ports
Information About Service Port
Configuring Ports (GUI)
Configuring Ports (CLI)
Monitoring Ports (CLI)
Link Aggregation
Information About Link Aggregation
Restrictions on Link Aggregation
Configuring Link Aggregation (GUI)
Configuring Link Aggregation (CLI)
Verifying Link Aggregation Settings (CLI)
Configuring Neighbor Devices to Support Link Aggregation
Choosing Between Link Aggregation and Multiple AP-Manager Interfaces
Interfaces
Information About Interfaces
Restrictions on Configuring Interfaces
Information About Dynamic AP Management
Information About WLANs
Management Interface
Information About the Management Interface
Configuring the Management Interface (GUI)
Configuring the Management Interface (CLI)
Virtual Interface
Information About the Virtual Interface
Configuring Virtual Interfaces (GUI)
Configuring Virtual Interfaces (CLI)
Service-Port Interfaces
Information About Service-Port Interfaces
Configuring Service-Port Interfaces Using IPv4 (GUI)
Configuring Service-Port Interfaces Using IPv4 (CLI)
Configuring Service-Port Interface Using IPv6 (GUI)
Configuring Service-Port Interfaces Using IPv6 (CLI)
Dynamic Interfaces
Information About Dynamic Interface
Prerequisites for Configuring Dynamic Interfaces
Restrictions on Configuring Dynamic Interfaces
Configuring Dynamic Interfaces (GUI)
Configuring Dynamic Interfaces (CLI)
AP-Manager Interface
Information About AP-Manager Interface
Restrictions for Configuring AP Manager Interface
Configuring the AP-Manager Interface (GUI)
Configuring the AP Manager Interface (CLI)
Multiple AP-Manager Interfaces
Information About Multiple AP-Manager Interfaces
Creating Multiple AP-Manager Interfaces (GUI)
Creating Multiple AP-Manager Interfaces (CLI)
Interface Groups
Information About Interface Groups
Restrictions on Configuring Interface Groups
Creating Interface Groups (GUI)
Creating Interface Groups (CLI)
Adding Interfaces to Interface Groups (GUI)
Adding Interfaces to Interface Groups (CLI)
Viewing VLANs in Interface Groups (CLI)
Adding an Interface Group to a WLAN (GUI)
Adding an Interface Group to a WLAN (CLI)
IPv6
Information About IPv6 Client Mobility
Prerequisites for Configuring IPv6 Mobility
Restrictions on Configuring IPv6 Mobility
Configuring IPv6 Globally
Restrictions on Global IPv6
Configuring IPv6 Globally (GUI)
Configuring IPv6 Globally (CLI)
Configuring RA Guard for IPv6 Clients
Information About RA Guard
Configuring RA Guard (GUI)
Configuring RA Guard (CLI)
Configuring RA Throttling for IPv6 Clients
Information about RA Throttling
Configuring RA Throttling (GUI)
Configuring the RA Throttle Policy (CLI)
Access Control Lists
Information About Access Control Lists
Guidelines and Restrictions on Access Control Lists
Configuring and Applying Access Control Lists (GUI)
Configuring Access Control Lists
Applying an Access Control List to an Interface
Applying an Access Control List to the Controller CPU
Applying an Access Control List to a WLAN
Applying a Preauthentication Access Control List to a WLAN
Configuring Access Control Lists
Applying Access Control Lists
Configuring Layer 2 Access Control Lists
Information About Configuring Layer 2 Access Control Lists
Restrictions on Layer 2 Access Control Lists
Configuring Layer 2 Access Control Lists (CLI)
Mapping of Layer 2 ACLs with WLANs (CLI)
Mapping of Layer 2 ACLs with Locally Switched WLANs Using FlexConnect Access Points (CLI)
Configuring Layer 2 Access Control Lists (GUI)
Applying a Layer2 Access Control List to a WLAN (GUI)
Applying a Layer2 Access Control List to an AP on a WLAN (GUI)
Configuring DNS-based Access Control Lists
Information About DNS-based Access Control Lists
Restrictions on DNS-based Access Control Lists
Configuring DNS-based Access Control Lists (CLI)
Configuring DNS-based Access Control Lists (GUI)
Configuring URL Filtering
Information About URL Filtering
Restrictions for URL Filtering
Configuring URL Filtering (GUI)
Configuring Access Control Lists (GUI)
Configuring an URL ACL List (GUI)
Applying a URL Filtering Access Control List Globally (GUI)
Applying a URL Filtering Access Control List to an Interface (GUI)
Applying a URL Filtering Access Control List for a WLAN (GUI)
Mapping the policy to a WLAN (GUI)
To delete a Policy-Mapping in a WLAN (GUI)
Mapping the policy to an AP Group (GUI)
Configuring URL Filtering (CLI)
Configuring URL Filtering (CLI)
Configuring Access Control List Rules (CLI)
Applying Local Policy (CLI)
Viewing URL Filtering (CLI)
Troubleshooting URL Filtering (CLI)
CNAME IPv6 Filtering
Information About CNAME IPv6 Filtering
Restrictions for CNAME IPv6 Filtering
Configuring CNAME URL ACL (GUI)
Configuring Web Authentication for CNAME IPv6 Filtering on a WLAN (GUI)
Configuring Web Authentication for CNAME IPv6 Filtering Using External RADIUS Server (GUI)
Configuring IPv6 CNAME Filtering (CLI)
Domain-Based Filtering
Information About Domain Based Filtering
Restrictions on Domain Based Filtering
Configuring Domain Based Filtering (GUI)
Configuring Access Control Lists (GUI)
Creating a URL ACL List (GUI)
Applying a URL Filtering Access Control List Globally (GUI)
Applying a URL Filtering Access Control List to an Interface (GUI)
Applying a URL Filtering Access Control List for a WLAN (GUI)
Mapping the Policy to a WLAN (GUI)
To Delete a Policy-Mapping in a WLAN (GUI)
Mapping the Policy to an AP Group (GUI)
Configuring DNS Filtering (CLI)
Configuring URL Filtering (CLI)
Configuring Access Control List Rules (CLI)
Applying Local Policy (CLI)
Viewing URL Filtering (CLI)
Troubleshooting URL Filtering (CLI)
Multicast/Broadcast Setup
Configuring Multicast Mode
Information About Multicast/Broadcast Mode
Restrictions on Configuring Multicast Mode
Enabling Multicast Mode (GUI)
Enabling Multicast Mode (CLI)
Viewing Multicast Groups (GUI)
Viewing Multicast Groups (CLI)
Viewing an Access Point’s Multicast Client Table (CLI)
Media Stream
Information about Media Stream
Prerequisites for Media Stream
Restrictions for Configuring Media Stream
Configuring Media Stream (GUI)
Configuring Media Stream (CLI)
Viewing and Debugging Media Stream
Configuring Multicast Domain Name System
Information About Multicast Domain Name System
Restrictions for Configuring Multicast DNS
Configuring Multicast DNS (GUI)
Configuring Multicast DNS (CLI)
Bonjour Gateway Based on Access Policy
Restrictions on Bonjour Gateway Based on Access Policy
Configuring mDNS Service Groups (GUI)
Configuring mDNS Service Groups (CLI)
Controller Security
FIPS, CC, and UCAPL
Information About FIPS
FIPS Self-Tests
Information About CC
Information About UCAPL
Configuring FIPS (CLI)
Configuring CC (CLI)
Configuring UCAPL (CLI)
Preparing Controller in FIPS Mode for Management in Cisco Prime Infrastructure (CLI)
Cisco TrustSec
Information About Cisco TrustSec
Guidelines and Restrictions on Cisco TrustSec
Configuring Cisco TrustSec
Configuring Cisco TrustSec on Controller (GUI)
Configuring Cisco TrustSec on Cisco WLC (CLI)
Configuring Cisco TrustSec Override for an Access Point (CLI)
SXP
Configuring SXP on Cisco WLC (GUI)
Configuring SXP on Cisco WLC (CLI)
Configuring SXP on Cisco Access Points (GUI)
Configuring SXP on Cisco Access Points (CLI)
Cisco TrustSec Credentials
Configuring Cisco TrustSec Credentials (GUI)
Configuring Cisco TrustSec Credentials (CLI)
Configuring a RADIUS AAA Server (GUI)
Configuring RADIUS AAA Server (CLI)
Monitoring Environment Data
Monitoring Environment Data (GUI)
Monitoring Environment Data (CLI)
Configuring a Static Security Group Tag on a WLAN
Configuring a Static Security Group Tag on a WLAN (GUI)
Configuring a Static Security Group Tag on a WLAN (CLI)
Configuring Inline Tagging
Configuring Inline Tagging in Cisco WLC (GUI)
Configuring Inline Tagging in Cisco WLC (CLI)
Configuring Inline Tagging in Cisco Access Points (GUI)
Configuring Inline Tagging in Cisco Access Points (CLI)
Verifying SGACL Policy Download
Verifying SGACL Policy Download in Cisco WLC (GUI)
Verifying SGACL Policy Download in Cisco WLC (CLI)
Configuring Policy Enforcement
Configuring Policy Enforcement (GUI)
Configuring Policy Enforcement (CLI)
Debugging Cisco TrustSec in Cisco WLC (CLI)
Cisco TrustSec Commands on Lightweight APs
IPSec Profile
Configuring an IPSec Profile (GUI)
Configuring an IPSec Profile (CLI)
Cisco Umbrella WLAN (OpenDNS)
Cisco Umbrella WLAN (OpenDNS)
Configuring Cisco Umbrella WLAN (GUI)
Configuring Cisco Umbrella WLAN (CLI)
Configuring Local Policies for Cisco Umbrella (GUI)
Mobility Groups
Overview
Information About Mobility
Guidelines and Restrictions
Configuring Auto-Anchor Mobility
Auto-Anchor Mobility
Restrictions on Auto-Anchor Mobility
Configuring Auto-Anchor Mobility (GUI)
Configuring Auto-Anchor Mobility (CLI)
Guest Anchor Priority
Configuring Guest Anchor Priority (GUI)
Configuring Guest Anchor Priority (CLI)
Mobility Groups
Information About Mobility Groups
Messaging Among Mobility Groups
Using Mobility Groups with NAT Devices
Rogue Detection Behavior in Mobility Groups
Prerequisites for Configuring Mobility Groups
Configuring Mobility Groups (GUI)
Configuring Mobility Groups (CLI)
Viewing Mobility Group Statistics
Viewing Mobility Group Statistics (GUI)
Viewing Mobility Group Statistics (CLI)
Encrypted Mobility Tunnel
Information About Encrypted Mobility Tunnel
Restrictions on Encrypted Mobility Tunnel
Configuring Mobility Groups for Inter-Release Controller Mobility (IRCM) (GUI)
Configuring Mobility Groups for Inter-Release Controller Mobility (IRCM) (CLI)
Monitoring and Validating Mobility
Running Mobility Ping Tests
Information About Mobility Ping Tests
Restrictions on Mobility Ping Tests
Running Mobility Ping Tests (CLI)
Information About WLAN Mobility Security Values
Wireless
Country Codes
Information About Configuring Country Codes
Restrictions on Configuring Country Codes
Configuring Country Codes (GUI)
Configuring Country Codes (CLI)
Radio Bands
Modulations and Data Rates
802.11 Bands
Configuring the 802.11 Bands (GUI)
Configuring the 802.11 Bands (CLI)
802.11n Parameters
Configuring the 802.11n Parameters (GUI)
Configuring the 802.11n Parameters (CLI)
802.11ac Parameters
Restrictions for 802.11ac Support
Configuring the 802.11ac/ax High-Throughput Parameters (GUI)
Configuring MU-MIMO (GUI)
Configuring the 802.11ac High-Throughput Parameters (CLI)
Configuring MU-MIMO (CLI)
802.11ax Parameters
Configuring the 802.11ax High-Throughput Parameters (GUI)
Configuring MU-MIMO on the 802.11ax Radio Band (GUI)
Configuring Orthogonal Frequency-Division Multiple Access on the 802.11ax Radio Band (GUI)
Configuring the 802.11ax High-Throughput Parameters (CLI)
Configuring MU-MIMO (CLI)
Configuring Orthogonal Frequency-Division Multiple Access (CLI)
Radio Resource Management
Information About Radio Resource Management
Radio Resource Monitoring
Benefits of RRM
Information About Configuring RRM
Configuring RRM (CLI)
Viewing RRM Settings (CLI)
RF Groups
Information About RF Groups
RF Group Leader
RF Group Name
Controllers and APs in RF Groups
Configuring RF Groups
Configuring an RF Group Name (GUI)
Configuring an RF Group Name (CLI)
Configuring the RF Group Mode (GUI)
Configuring the RF Group Mode (CLI)
Viewing RF Group Status
Viewing the RF Group Status (GUI)
Viewing the RF Group Status (CLI)
Rogue Access Point Detection in RF Groups
Enabling Rogue Access Point Detection in RF Groups (GUI)
Configuring Rogue Access Point Detection in RF Groups (CLI)
Off-Channel Scanning Deferral
Configuring Off-Channel Scanning Deferral for WLANs
Configuring Off-Channel Scanning Deferral for a WLAN (GUI)
Configuring Off Channel Scanning Deferral for a WLAN (CLI)
RRM NDP and RF Grouping
Configuring RRM NDP (CLI)
Channels
Dynamic Channel Assignment
Configuring Dynamic Channel Assignment (GUI)
Configuring RRM Profile Thresholds, Monitoring Channels, and Monitor Intervals (GUI)
Overriding RRM
Information About Overriding RRM
Prerequisites for Overriding RRM
Statically Assigning Channel and Transmit Power Settings (GUI)
Statically Assigning Channel and Transmit Power Settings (CLI)
Disabling Dynamic Channel and Power Assignment (CLI)
802.11h Parameters
Configuring the 802.11h Parameters (GUI)
Configuring the 802.11h Parameters (CLI)
Transmit Power Control
Overriding the TPC Algorithm with Minimum and Maximum Transmit Power Settings
Configuring Transmit Power Control (GUI)
Coverage Hole Detection and Correction
Configuring Coverage Hole Detection (GUI)
RF Profiles
Prerequisites for Configuring RF Profiles
Restrictions on Configuring RF Profiles
Configuring an RF Profile (GUI)
Configuring an RF Profile (CLI)
Applying an RF Profile to AP Groups (GUI)
Applying RF Profiles to AP Groups (CLI)
Flexible Radio Assignment
Advantages of Flexible Radio Assignment
Configuring Flexible Radio Assignment-Global (GUI)
Configuring Flexible Radio Assignment (CLI)
Configuring Flexible Radio Assignment for AP (GUI)
Configuring Auto Radio Role for the AP (CLI)
Configuring Manual Radio Role for the AP (CLI)
Configuring Radio Band for Client-Serving Radio (CLI)
Debug RRM Issues (CLI)
Wireless Quality of Service
CleanAir
Information About CleanAir
Role of the Cisco Wireless LAN Controller in a Cisco CleanAir System
Interference Types that Cisco CleanAir Can Detect
Persistent Devices
Persistent Devices Detection
Persistent Devices Propagation
Detecting Interferers by an Access Point
Prerequisites for CleanAir
Restrictions for CleanAir
Configuring Cisco CleanAir on the Controller
Configuring Cisco CleanAir on Cisco WLC (GUI)
Configuring Cisco CleanAir on Cisco WLC (CLI)
Configuring Cisco CleanAir on an Access Point
Configuring Cisco CleanAir on an Access Point (GUI)
Configuring Cisco CleanAir on an Access Point (CLI)
Configuring Spectrum Intelligence
Information About Spectrum Intelligence
Restrictions on Spectrum Intelligence
Configuring Spectrum Intelligence – Global (GUI)
Configuring Spectrum Intelligence per AP (GUI)
Configuring Spectrum Intelligence (CLI)
Monitoring Interference Devices
Prerequisites for Monitoring the Interference Devices
Monitoring the Interference Device (GUI)
Monitoring the Interference Device (CLI)
Detecting Interferers by an Access Point
Detecting Interferers by Device Type
Detecting Persistent Sources of Interference
Monitoring Persistent Devices (GUI)
Monitoring Persistent Devices (CLI)
Monitoring the Air Quality of Radio Bands
Monitoring the Air Quality of Radio Bands (GUI)
Monitoring the Air Quality of Radio Bands (CLI)
Viewing a Summary of the Air Quality
Viewing Air Quality for all Access Points on a Radio Band
Viewing Air Quality for an Access Point on a Radio Band (CLI)
Monitoring the Worst Air Quality of Radio Bands (GUI)
Monitoring the Worst Air Quality of Radio Bands (CLI)
Viewing a Summary of the Air Quality (CLI)
Viewing the Worst Air Quality Information for all Access Points on a Radio Band (CLI)
Viewing the Air Quality for an Access Point on a Radio Band (CLI)
Viewing the Air Quality for an Access Point by Device Type (CLI)
Detecting Persistent Sources of Interference (CLI)
Media and EDCA
Aggressive Load Balancing
Information About Configuring Aggressive Load Balancing
Configuring Aggressive Load Balancing (GUI)
Configuring Aggressive Load Balancing (CLI)
Media Session and Snooping
Information About Media Session Snooping and Reporting
Restrictions for Media Session Snooping and Reporting
Configuring Media Session Snooping (GUI)
Configuring Media Session Snooping (CLI)
QoS Enhanced BSS
Information About QoS Enhanced BSS
Prerequisites for Using QoS Enhanced BSS on Cisco 7921 and 7920 Wireless IP Phones
Restrictions for QoS Enhanced BSS
Configuring QBSS (GUI)
Configuring QBSS (CLI)
Reanchoring of Roaming Voice Clients
Information About Reanchoring of Roaming Voice Clients
Restrictions for Configuring Reanchoring of Roaming Voice Clients
Configuring Reanchoring of Roaming Voice Clients (GUI)
Configuring Reanchoring of Roaming Voice Clients (CLI)
Call Admission Control
Information About Configuring Voice and Video Parameters
Configuring Voice Parameters
Configuring Voice Parameters (GUI)
Configuring Voice Parameters (CLI)
Configuring Video Parameters
Configuring Video Parameters (GUI)
Configuring Video Parameters (CLI)
Viewing Voice and Video Settings
Viewing Voice and Video Settings (GUI)
Viewing Voice and Video Settings (CLI)
Configuring SIP-Based CAC
Restrictions for SIP-Based CAC
Configuring SIP-Based CAC (GUI)
Configuring SIP-Based CAC (CLI)
Configuring Media Parameters
Configuring Media Parameters (GUI)
Information About Configuring Voice Prioritization Using Preferred Call Numbers
Prerequisites for Configuring Voice Prioritization Using Preferred Call Numbers
Configuring a Preferred Call Number (GUI)
Configuring a Preferred Call Number (CLI)
Information About Enhanced Distributed Channel Access Parameters
Configuring EDCA Parameters (GUI)
Configuring EDCA Parameters (CLI)
Information About Key Telephone System-Based CAC
Restrictions for Key Telephone System-Based CAC
Configuring KTS-based CAC (GUI)
Configuring KTS-based CAC (CLI)
Related Commands
Application Visibility and Control
Information About Application Visibility and Control
Restrictions for Application Visibility and Control
Configuring Application Visibility and Control (GUI)
Configuring Application Visibility and Control (CLI)
AVC-Based Selective Reanchoring
Information About AVC Based Reanchoring
Restrictions in AVC Based Reanchoring
Configuring AVC-Based Selective Reanchoring (GUI)
Configuring AVC-based Selective Reanchoring (CLI)
Application Visibility Control for FlexConnect
Configuring Application Visibility and Control for FlexConnect (GUI)
Configuration Example
Configuring Application Visibility and Control for FlexConnect (CLI)
Configuration Example
NetFlow
Information About NetFlow
Restrictions for Using Netflow
Configuring NetFlow (GUI)
Configuring NetFlow (CLI)
QoS Profiles
Information About QoS Profiles
Configuring Quality of Service Profiles
Configuring QoS Profiles (GUI)
Configuring QoS Profiles (CLI)
QoS Profile per WLAN
Assigning a QoS Profile to a WLAN (GUI)
Assigning a QoS Profile to a WLAN (CLI)
Air Time Fairness
Information About Cisco Air Time Fairness
Configuring Cisco Air Time Fairness (GUI)
Configuring Cisco ATF Monitor Mode (GUI)
Configuring Cisco ATF Policy (GUI)
Configuring Cisco ATF Enforcement SSID (GUI)
Monitoring ATF Statistics (GUI)
Configuring Cisco Air Tme Fairness (CLI)
Location Services
Cisco Hyperlocation
Cisco Hyperlocation in a High Availability Environment
Cisco Hyperlocation Client Debug Tracing
Configuring Cisco Hyperlocation
Configuring Cisco Hyperlocation for all APs (GUI)
Configuring Cisco Hyperlocation for an AP (GUI)
Configuring Cisco Hyperlocation for an AP Group (GUI)
Configuring Cisco Hyperlocation for all APs (CLI)
Configuring Cisco Hyperlocation for an AP (CLI)
Configuring Cisco Hyperlocation for an AP Group (CLI)
FastLocate for Cisco Wave 2 Access Points
Configuring FastLocate on Cisco Wave 2 APs (GUI)
Optimizing RFID Tracking on Access Points
Optimizing RFID Tracking on Access Points (GUI)
Optimizing RFID Tracking on Access Points (CLI)
Location Settings
Configuring Location Settings (CLI)
Viewing Location Settings (CLI)
Modifying the NMSP Notification Interval for Clients, RFID Tags, and Rogues (CLI)
Viewing NMSP Settings (CLI)
Debugging NMSP Issues
Probe Request Forwarding
Configuring Probe Request Forwarding (CLI)
CCX Radio Management
Radio Measurement Requests
Location Calibration
Configuring CCX Radio Management
Configuring CCX Radio Management (GUI)
Configuring CCX Radio Management (CLI)
Viewing CCX Radio Management Information (CLI)
Debugging CCX Radio Management Issues (CLI)
Mobile Concierge
Configuring Mobile Concierge (802.11u) (GUI)
Configuring Mobile Concierge (802.11u) (CLI)
Online Sign Up
Configuring 802.11u Mobility Services Advertisement Protocol
Information About 802.11u MSAP
Configuring 802.11u MSAP (GUI)
Configuring MSAP (CLI)
Configuring 802.11u HotSpot
Information About 802.11u HotSpot
Configuring 802.11u HotSpot (GUI)
Configuring HotSpot 2.0 (CLI)
Configuring Access Points for HotSpot2 (GUI)
Configuring Access Points for HotSpot2 (CLI)
Downloading the Icon File (CLI)
Configuring ICONs
Downloading an ICON File (GUI)
Configuring an ICON (GUI)
Configuring OSEN Support (CLI)
Configuring OSEN Details (GUI)
Configuring OSU
Configuring OSU Details (GUI)
Configuring WAN Metrics
CMX Cloud Connector
Prerequisites for CMX Cloud Connector
Restrictions for CMX Cloud Connector
Configuring CMX Cloud Connector (GUI)
Configuring CMX Cloud Connector (CLI)
Installing CMX-Serv CA Certificate on a Controller (CLI)
NMSP by AP Groups with Subscription List from CMX
Guidelines and Restrictions on NMSP by AP Groups with Subscription List from CMX
Monitoring NMSP by AP Groups with Subscription List from CMX (GUI)
Monitoring NMSP by AP Groups with Subscription List from CMX (CLI)
Managing BLE Beacons in Cisco Wave 2 APs
Monitoring BLE Management Parameters (CLI)
Troubleshooting BLE Management (CLI)
Wireless Intrusion Detection System
Management Frame Protection
Information About Management Frame Protection
Restrictions for Management Frame Protection
Configuring Management Frame Protection (GUI)
Viewing the Management Frame Protection Settings (GUI)
Configuring Management Frame Protection (CLI)
Viewing the Management Frame Protection Settings (CLI)
Debugging Management Frame Protection Issues (CLI)
Client Exclusion Policies
Configuring Client Exclusion Policies (GUI)
Configuring Client Exclusion Policies (CLI)
Rogue Management
Rogue Detection
Information About Rogue Devices
Configuring Rogue Detection (GUI)
Configuring Rogue Detection (CLI)
Classifying Rogue Devices
Information About Classifying Rogue Access Points
Guidelines and Restrictions on Classifying Rogue Access Points
Configuring Rogue Classification Rules (GUI)
Viewing and Classifying Rogue Devices (GUI)
Configuring Rogue Classification Rules (CLI)
Viewing and Classifying Rogue Devices (CLI)
Cisco Intrusion Detection System
Information About Cisco Intrusion Detection System
Shunned Clients
Configuring IDS Sensors (GUI)
Viewing Shunned Clients (GUI)
Configuring IDS Sensors (CLI)
Viewing Shunned Clients (CLI)
IDS Signatures
Information About IDS Signatures
Configuring IDS Signatures (GUI)
Uploading or Downloading IDS Signatures
Enabling or Disabling IDS Signatures
Viewing IDS Signature Events (GUI)
Configuring IDS Signatures (CLI)
Viewing IDS Signature Events (CLI)
SNMP
Configuring SNMP (CLI)
SNMP Community Strings
Changing the SNMP Community String Default Values (GUI)
Changing the SNMP Community String Default Values (CLI)
Configuring Real Time Statistics (CLI)
SNMP Trap Enhancements
Configuring SNMP Trap Receiver (GUI)
wIPS
Information About wIPS
Restrictions for wIPS
Configuring wIPS on an Access Point (GUI)
Configuring wIPS on an Access Point (CLI)
Viewing wIPS Information (CLI)
Cisco Adaptive wIPS Alarms
Advanced Wireless Tuning
Band Selection
Band Selection Algorithm
Restrictions on Band Selection
Configuring Band Selection (GUI)
Configuring Band Selection (CLI)
Short and Long Preambles
SpectraLink NetLink Telephones
Enabling Long Preambles (GUI)
Enabling Long Preambles (CLI)
Configuring Enhanced Distributed Channel Access (CLI)
Receiver Start of Packet Detection Threshold
Restrictions for RxSOP
Configuring RxSOP (GUI)
Configuring RxSOP (CLI)
Timers
Information About Wireless Timers
Restrictions on Wireless Timers
Configuring Wireless Timers (GUI)
Configuring Wireless Timers (CLI)
Access Points
AP Power and LAN Connections
Power over Ethernet
Configuring Power over Ethernet (GUI)
Configuring Power over Ethernet (CLI)
Cisco Wave 2 AP’s USB Port as Power Source
Configuring Cisco Aironet AP’s USB Port as Power Source (GUI)
Configuring a Cisco AP Group to Use the Cisco AP’s USB Port as Power Source (GUI)
Configuring Cisco Aironet APs USB Port as Power Source (WLC-CLI)
Viewing Cisco Aironet APs USB Port as Power Source (AP-CLI)
Viewing AP Serviceability (AP CLI)
Cisco Discovery Protocol
Information About Configuring the Cisco Discovery Protocol
Restrictions on Configuring the Cisco Discovery Protocol
Configuring the Cisco Discovery Protocol
Configuring the Cisco Discovery Protocol (GUI)
Configuring the Cisco Discovery Protocol (CLI)
Viewing Cisco Discovery Protocol Information
Viewing Cisco Discovery Protocol Information (GUI)
Viewing Cisco Discovery Protocol Information (CLI)
Getting CDP Debug Information
Cisco Aironet 700 Series Access Points
Information About Cisco 700 Series Access Points
Configuring Cisco 700 Series Access Points
Enabling the LAN Ports (CLI)
Enabling 702W LAN Ports
RLAN Support for Wired Ports on Cisco Aironet 702w APs
Information About Remote LAN Support for Wired Ports on Cisco Aironet 702W APs
Role of the Cisco WLC
Role of an AP
Information About IEEE 802.1X Authentication Modes
Single-Host Mode
Multi-Host Mode
Violation Mode
Configuring Preauthentication Open (CLI)
Configuring IEEE 802.1X Authentication Modes (CLI)
Enabling IEEE 802.1X Authentication in Cisco WLC (GUI)
Enabling IEEE 802.1X Authentication (CLI)
Mapping an RLAN to an AP Port in Cisco WLC (GUI)
Mapping an RLAN to an AP Port in Cisco WLC (CLI)
Mapping an RLAN to an AP Port in Cisco WLC per AP (GUI)
MAB Authentication Support for AP Port LAN Client in Cisco Aironet 702w Access Points
MAB Authentication Support for AP Port LAN Client in Cisco Aironet 702w Access Points
Configuring MAB Support on AP Port LAN Clients (GUI)
Configuring MAB Support for AP Port LAN Clients (CLI)
Converting Cisco Wave 2 AP AUX Port to LAN Port (CLI)
Re-enabling LAG Mode on Cisco Wave 2 APs (CLI)
AP Connectivity to Cisco WLC
CAPWAP
Information About Access Point Communication Protocols
Restrictions for Access Point Communication Protocols
Viewing CAPWAP Maximum Transmission Unit Information
Debugging CAPWAP
Preferred Mode
Information About Prefer Mode
Guidelines for Configuring Preferred Mode
Configuring CAPWAP Preferred Mode (GUI)
Configuring CAPWAP Preferred Mode (CLI)
UDP Lite
Information About UDP Lite
Configuring UDP Lite Globally (GUI)
Configuring UDP Lite on AP (GUI)
Configuring the UDP Lite (CLI)
Data DTLS
Configuring Data Encryption
Restrictions on Data Encryption
Configuring Data Encryption (GUI)
Configuring Data Encryption (CLI)
Configuring VLAN Tagging for CAPWAP Frames from Access Points
Information About VLAN Tagging for CAPWAP Frames from Access Points
Configuring VLAN Tagging for CAPWAP Frames from Access Points (GUI)
Configuring VLAN Tagging for CAPWAP Frames from Access Points (CLI)
Discovering and Joining Cisco WLC
Controller Discovery Process
Guidelines and Restrictions on Controller Discovery Process
Using DHCP Option 43 and DHCP Option 60
Verifying that Access Points Join the Controller
Verifying that Access Points Join the Controller (GUI)
Verifying that Access Points Join the Controller (CLI)
Backup Cisco WLCs
Information About Configuring Backup Controllers
Restrictions for Configuring Backup Controllers
Configuring Backup Controllers (GUI)
Configuring Backup Controllers (CLI)
Failover Priority for APs
Information About Configuring Failover Priority for Access Points
Configuring Failover Priority for Access Points (GUI)
Configuring Failover Priority for Access Points (CLI)
Viewing Failover Priority Settings (CLI)
AP Retransmission Interval and Retry Count
Information About Configuring the AP Retransmission Interval and Retry Count
Restrictions for Access Point Retransmission Interval and Retry Count
Configuring the AP Retransmission Interval and Retry Count (GUI)
Configuring the Access Point Retransmission Interval and Retry Count (CLI)
Authorizing Access Points
Authorizing Access Points Using SSCs
Authorizing Access Points for Virtual Controllers Using SSC
Configuring SSC (GUI)
Configuring SSC (CLI)
Authorizing Access Points Using MICs
Authorizing Access Points Using LSCs
Configuring Locally Significant Certificates (GUI)
Configuring Locally Significant Certificates (CLI)
Authorizing Access Points (GUI)
Authorizing Access Points (CLI)
Plug and Play (PnP)
Information About Plug and Play (PnP)
AP 802.1X Supplicant
Information About Configuring Authentication for Access Points
Prerequisites for Configuring Authentication for Access Points
Restrictions for Authenticating Access Points
Configuring 802.1X Authentication Protocols for All Access Points (GUI)
Configuring 802.1X Authentication Protocols for All Access Points (CLI)
Configuring 802.1X Authentication Protocols for An Access Points (GUI)
Configuring 802.1X Authentication Protocols for An Access Points (CLI)
Configuring Cisco WLC – Cisco AP LSC Authentication State (GUI)
Configuring Cisco WLC – Cisco AP LSC Authentication State (CLI)
Adding AP to an LSC Provisioned Network
Configuring the Switch for Authentication
Infrastructure MFP
Information About Management Frame Protection
Restrictions for Management Frame Protection
Configuring Management Frame Protection (GUI)
Viewing the Management Frame Protection Settings (GUI)
Configuring Management Frame Protection (CLI)
Viewing the Management Frame Protection Settings (CLI)
Debugging Management Frame Protection Issues (CLI)
Troubleshooting the Access Point Join Process
Configuring the Syslog Server for Access Points (CLI)
Viewing Access Point Join Information
Viewing Access Point Join Information (GUI)
Viewing Access Point Join Information (CLI)
Managing APs
Converting Autonomous APs to Lightweight Mode
Information About Converting Autonomous Access Points to Lightweight Mode
Restrictions for Converting Autonomous Access Points to Lightweight Mode
Converting Autonomous Access Points to Lightweight Mode
Reverting from Lightweight Mode to Autonomous Mode
Reverting to a Previous Release (CLI)
Reverting to a Previous Release Using the MODE Button and a TFTP Server
Configuring a Static IP Address on a Lightweight Access Point
Configuring a Static IP Address (GUI)
Configuring a Static IP Address (CLI)
Retaining Static IP Address of an AP (CLI)
Supporting Oversized Access Point Images
Recovering the Access Point—Using the TFTP Recovery Procedure
Global Credentials for APs
Information About Configuring Global Credentials for Access Points
Restrictions for Global Credentials for Access Points
Configuring Global Credentials for Access Points
Configuring Global Credentials for Access Points (GUI)
Configuring Global Credentials for Access Points (CLI)
Configuring Telnet and SSH for Access Points
Configuring Telnet and SSH for APs (GUI)
Configuring Telnet and SSH for APs (CLI)
AP Modules
Spectrum Expert
Information About Spectrum Expert Connection
Configuring Spectrum Expert (GUI)
Cisco Universal Small Cell 8x18 Dual-Mode Module
Information About Cisco Universal Small Cell 8x18 Dual-Mode Module
Configuring Cisco Universal Small Cell 8x18 Dual-Mode Module
Configuring Cisco Universal Small Cell 8x18 Dual-Mode Module (GUI)
Configuring Cisco Universal Small Cell 8x18 Dual-Mode Module (CLI)
Configuring USC8x18 Dual-Mode Module in Different Scenarios
Configuring VLAN Tagging for USC8x18 Dual-Mode Module in FlexConnect Local Switching (GUI)
Configuring VLAN Tagging for USC8x18 Dual-Mode Module in FlexConnect Local Switching (CLI)
Configuring VLAN Tagging for USC8x18 Dual-Mode Module in FlexConnect Group Local Switching (GUI)
Configuring VLAN Tagging for USC8x18 Dual-Mode Module in FlexConnect Group Local Switching (CLI)
Configuring USC8x18 Dual-Mode Module in Local Mode Central Switching (GUI)
Configuring USC8x18 Dual-Mode Module in Local Mode Central Switching (CLI)
LED Settings
Information About Configuring LED States for Access Points
Configuring the LED State for Access Points in a Network Globally (GUI)
Configuring the LED State for Access Point in a Network Globally (CLI)
Configuring LED State on a Specific Access Point (GUI)
Configuring LED State on a Specific Access Point (CLI)
Configuring Flashing LEDs
Information About Configuring Flashing LEDs
Configuring Flashing LEDs (CLI)
Configuring LED Flash State on a Specific Access Point (GUI)
LED Brightness Settings
Configuring LED Brightness Level for AP Globally (GUI)
Configuring LED Brightness Level on a Specific AP (GUI)
Configuring LED Brightness Level (CLI)
Access Points with Dual-Band Radios
Configuring Access Points with Dual-Band Radios (GUI)
Configuring Access Points with Dual-Band Radios (CLI)
Link Latency
Information About Configuring Link Latency
Restrictions for Link Latency
Configuring Link Latency (GUI)
Configuring Link Latency (CLI)
Configuring Mesh Leaf Node
Mesh Access Points
Connecting Mesh Access Points to the Network
Overview
Adding Mesh Access Points to the Mesh Network
Adding MAC Addresses of Mesh Access Points to MAC Filter
Adding the MAC Address of the Mesh Access Point to the Controller Filter List (CLI)
Defining Mesh Access Point Role
Configuring the AP Role (CLI)
Configuring Multiple Controllers Using DHCP 43 and DHCP 60
Configuring External Authentication and Authorization Using a RADIUS Server
Configuring RADIUS Servers
Enable External Authentication of Mesh Access Points (CLI)
View Security Statistics (CLI)
Mesh PSK Key Provisioning
CLI Commands for PSK Provisioning
Configuring Global Mesh Parameters
Configuring Global Mesh Parameters (CLI)
Viewing Global Mesh Parameter Settings (CLI)
Backhaul Client Access
Configuring Backhaul Client Access (GUI)
Configuring Backhaul Client Access (CLI)
Configuring Local Mesh Parameters
Configuring Wireless Backhaul Data Rate
Configuring Ethernet Bridging
Configuring Native VLAN (CLI)
Configuring Bridge Group Names
Configuring Bridge Group Names (CLI)
Configuring Antenna Gain
Configuring Antenna Gain (CLI)
Configuring Advanced Features
Configuring Ethernet VLAN Tagging
Ethernet Port Notes
VLAN Registration
Ethernet VLAN Tagging Guidelines
Configuring Ethernet VLAN Tagging (CLI)
Viewing Ethernet VLAN Tagging Configuration Details (CLI)
Workgroup Bridge Interoperability with Mesh Infrastructure
Configuring Workgroup Bridges
Guidelines for Configuration
Configuration Example
WGB Association Check
Link Test Result
WGB Wired/Wireless Client
Client Roaming
WGB Roaming Guidelines
Configuration Example
Troubleshooting Tips
Configuring Voice Parameters in Indoor Mesh Networks
Call Admission Control
Quality of Service and Differentiated Services Code Point Marking
Guidelines For Using Voice on the Mesh Network
Voice Call Support in a Mesh Network
Enabling Mesh Multicast Containment for Video
Viewing the Voice Details for Mesh Networks (CLI)
Enabling Multicast on the Mesh Network (CLI)
IGMP Snooping
Locally Significant Certificates for Mesh APs
Guidelines for Configuration
Differences Between LSCs for Mesh APs and Normal APs
Certificate Verification Process in LSC AP
Getting Certificates for LSC Feature
Configuring a Locally Significant Certificate (CLI)
LSC only MAP Authentication using wild card MAC
Information about LSC-Only MAP Authentication using wild card MAC
Configuring LSC-Only Authentication for Mesh Access Points (GUI)
Configuring LSC-Only Authentication for Mesh Access Points (CLI)
LSC-Related Commands
Controller GUI Security Settings
Deployment Guidelines
Configuring Antenna Band Mode
Information About Configuring Antenna Band Modes
Configuring Antenna Band Mode (CLI)
Configuring Antenna Band Mode (AP CLI)
Configuring Daisy Chaining on Cisco Aironet 1530 Series Access Points
Information About Daisy Chaining the Cisco Aironet 1530 Series Access Points
Configuring Daisy Chaining (CLI)
Configuring Daisy Chaining (AP CLI)
Configuring a Daisy-Chain
Enabling Daisy-Chaining using the WLC GUI
Enabling Daisy-Chaining using the WLC CLI
Enabling Daisy-Chaining using the AP CLI
Setting a Preferred Parent for each Serial-Backhaul AP
Configuring Mesh Convergence
Information About Mesh Convergence
Restrictions on Mesh Convergence
Configuring Mesh Convergence (CLI)
Switching Between LWAPP and Autonomous Images (AP CLI)
Information About DHCP on RAP
Restrictions on DHCP on RAP
Configuring DHCP on RAP on a Controller (CLI)
Configuring DHCP on RAP on a Mesh AP (CLI)
Debugging DHCP on RAP on a Mesh AP (CLI)
Information About NAT-PAT on RAP
Restrictions on NAT-PAT on RAP
Viewing NAT-PAT on RAP on a Mesh AP (CLI)
Debugging NAT-PAT on RAP on a Mesh AP (CLI)
Checking the Health of the Network
Show Mesh Commands
Viewing General Mesh Network Details
Viewing Mesh Access Point Details
Viewing Global Mesh Parameter Settings
Viewing Bridge Group Settings
Viewing VLAN Tagging Settings
Viewing DFS Details
Viewing Security Settings and Statistics
Viewing GPS Status
Viewing Mesh Statistics for a Mesh Access Point
Viewing Mesh Statistics for a Mesh Access Point (GUI)
Viewing Mesh Statistics for an Mesh Access Point (CLI)
Viewing Neighbor Statistics for a Mesh Access Point
Viewing Neighbor Statistics for a Mesh Access Point (GUI)
Viewing the Neighbor Statistics for a Mesh Access Point (CLI)
Troubleshooting Mesh Access Points
Installation and Connections
Debug Commands
Remote Debug Commands
AP Console Access
Cable Modem Serial Port Access From an AP
Configuration
Mesh Access Point CLI Commands
Mesh Access Point Debug Commands
Defining Mesh Access Point Roles
Backhaul Algorithm
Passive Beaconing (Anti-Stranding)
Dynamic Frequency Selection
DFS in RAP
DFS in MAP
Preparation in a DFS Environment
Monitoring DFS
Frequency Planning
Good Signal-to-Noise Ratios
Access Point Placement
Bridge Group Name Misconfiguration
Misconfiguration of the Mesh Access Point IP Address
Misconfiguration of DHCP
Identifying the Node Exclusion Algorithm
Throughput Analysis
Client Network
Global Traffic Forwarding Configurations
Information About IPv6 Neighbor Discovery
Configuring Neighbor Binding (GUI)
Configuring Neighbor Binding (CLI)
Information About Configuring 802.3 Bridging
Restrictions on 802.3 Bridging
Configuring 802.3 Bridging (GUI)
Configuring 802.3 Bridging (CLI)
Enabling 802.3X Flow Control
Configuring Bridging of Link Local Traffic
Configuring Bridging of Link Local Traffic (GUI)
Configuring Bridging of Link Local Traffic (CLI)
Fast SSID Change
Information About Configuring Fast SSID Changing
Configuring Fast SSID Changing (GUI)
Configuring Fast SSID Changing (CLI)
IP-MAC Address Binding
Information About Configuring IP-MAC Address Binding
Configuring IP-MAC Address Binding (CLI)
AP TCP MSS Adjust
Information About Configuring the TCP MSS
Configuring TCP MSS (GUI)
Configuring TCP MSS (CLI)
Quality of Service
Configuring Quality of Service
Information About Quality of Service
Configuring Quality of Service Profiles
Configuring QoS Profiles (GUI)
Configuring QoS Profiles (CLI)
QoS Profile per WLAN
Information About QoS Profiles
Assigning a QoS Profile to a WLAN (GUI)
Assigning a QoS Profile to a WLAN (CLI)
Quality of Service Roles
Information About Quality of Service Roles
Configuring QoS Roles (GUI)
Configuring QoS Roles (CLI)
Configuring QoS Mapping
Information About QoS Map
Restrictions in QoS Map
Configuring QoS Map (GUI)
Configuring QoS Map (CLI)
Fastlane QoS
Configuring Fastlane QoS (CLI)
Restrictions on Fastlane QoS
Enabling Fastlane QoS per WLAN
Disabling Fastlane QoS in WLANs
Disabling Fastlane QoS Globally
Configuring Fastlane QoS (GUI)
Disabling Fastlane QoS Globally (GUI)
Media and EDCA
Aggressive Load Balancing
Information About Configuring Aggressive Load Balancing
Configuring Aggressive Load Balancing (GUI)
Configuring Aggressive Load Balancing (CLI)
Media Session and Snooping
Information About Media Session Snooping and Reporting
Restrictions for Media Session Snooping and Reporting
Configuring Media Session Snooping (GUI)
Configuring Media Session Snooping (CLI)
QoS Enhanced BSS
Prerequisites for Using QoS Enhanced BSS on Cisco 7921 and 7920 Wireless IP Phones
Information About QoS Enhanced BSS
Restrictions for QoS Enhanced BSS
Configuring QBSS (GUI)
Configuring QBSS (CLI)
WLANs
Prerequisites for WLANs
Restrictions for WLANs
Information About WLANs
Creating and Removing WLANs (GUI)
Enabling and Disabling WLANs (GUI)
Editing WLAN SSID or Profile Name for WLANs (GUI)
Creating and Deleting WLANs (CLI)
Enabling and Disabling WLANs (CLI)
Editing WLAN SSID or Profile Name for WLANs (CLI)
Viewing WLANs (CLI)
Searching WLANs (GUI)
Assigning WLANs to Interfaces
Configuring Network Access Identifier (CLI)
Per-WLAN Wireless Settings
DTIM Period
Information About DTIM Period
Configuring the DTIM Period (GUI)
Configuring the DTIM Period (CLI)
Cisco Client Extensions
Prerequisites for Configuring Cisco Client Extensions
Information About Cisco Client Extensions
Guidelines and Restrictions for Configuring Cisco Client Extensions
Configuring CCX Aironet IEs (GUI)
Viewing a Client’s CCX Version (GUI)
Configuring CCX Aironet IEs (CLI)
Viewing a Client’s CCX Version (CLI)
Client Profiling
Information About Client Profiling
Prerequisites for Configuring Client Profiling
Restrictions for Configuring Client Profiling
Restrictions for Configuring Custom HTTP Port Profiling
Configuring Client Profiling (GUI)
Configuring Client Profiling (CLI)
Custom HTTP Port for Profiling
Configuring Custom HTTP Port for Profiling (GUI)
Configuring Custom HTTP Port for Profiling (CLI)
Client Count per WLAN
Information About Setting the Client Count per WLAN
Restrictions for Setting Client Count for WLANs
Configuring the Client Count per WLAN (GUI)
Configuring the Maximum Number of Clients per WLAN (CLI)
Configuring the Maximum Number of Clients for each AP Radio per WLAN (GUI)
Configuring the Maximum Number of Clients for each AP Radio per WLAN (CLI)
Deauthenticating Clients (CLI)
WLAN Interfaces
Multicast VLAN
Information About Multicast Optimization
Configuring a Multicast VLAN (GUI)
Configuring a Multicast VLAN (CLI)
Passive Clients
Information About Passive Clients
Restrictions for Passive Clients
Configuring Passive Clients (GUI)
Enabling the Multicast-Multicast Mode (GUI)
Enabling the Global Multicast Mode on Controllers (GUI)
Enabling the Passive Client Feature on the Controller (GUI)
Configuring Passive Clients (CLI)
Information About Multicast-to-Unicast Support for Passive Client ARPs
Restrictions in Multicast-to-Unicast Support for Passive Client ARPs
Configuring Unicast mode on WLC (GUI)
Configuring Unicast mode on WLC (CLI)
Dynamic Anchoring for Clients with Static IP Addresses
Information About Dynamic Anchoring for Clients with Static IP
How Dynamic Anchoring of Static IP Clients Works
Restrictions on Dynamic Anchoring for Clients With Static IP Addresses
Configuring Dynamic Anchoring of Static IP Clients (GUI)
Configuring Dynamic Anchoring of Static IP Clients (CLI)
WLAN Timeouts
Timeouts
Timeout for Disabled Clients
Information About Configuring a Timeout for Disabled Clients
Configuring Timeout for Disabled Clients (CLI)
Session Timeout
Information About Session Timeouts
Configuring a Session Timeout (GUI)
Configuring a Session Timeout (CLI)
User Idle Timeout
Information About the User Idle Timeout Per WLAN
Configuring Per-WLAN User Idle Timeout (CLI)
Address Resolution Protocol Timeout
Configuring ARP Timeout (GUI)
Configuring ARP Timeout (CLI)
Multisession ID
Information About Multisession ID Support
Viewing Multisession ID Support (CLI)
Authentication for Sleeping Clients
Information About Authenticating Sleeping Clients
Restrictions for Authenticating Sleeping Clients
Configuring Authentication for Sleeping Clients (GUI)
Configuring Authentication for Sleeping Clients (CLI)
Authenticating Sleeping Clients on L2+L3 Enabled WLANs
Configuring Sleeping Client Authentication on L2+L3 Enabled WLANs (GUI)
Configuring Sleeping Client Authentication on L2+L3 Enabled WLANs (CLI)
WLAN Security
Layer 2 Security
Prerequisites for Layer 2 Security
Guidelines and Limitations
Authentication
Configuring Dynamic 802.1X Keys and Authorization (CLI)
RADIUS VSA
Information About RADIUS VSA
Sample RADIUS AVP List XML File
Downloading RADIUS AVP List (GUI)
Uploading RADIUS AVP List (GUI)
Uploading and Downloading RADIUS AVP List (CLI)
Custom NAS-ID for RADIUS Accounting Using Downloadable RADIUS AVP
Information About Custom NAS-ID for RADIUS Accounting Using Downloadable RADIUS AVP
Restrictions on Custom NAS-ID for RADIUS Accounting Using Downloadable RADIUS AVP
Configuring Custom NAS-ID AVP XML File
Deleting a NAS-ID AVP (GUI)
Viewing Custom NAS-ID Enhancement Configuration (GUI)
Viewing Custom NAS-ID Enhancement (CLI)
RADIUS Realm
Information About RADIUS Realm
Prerequisites for Configuring RADIUS Realm
Restrictions for Configuring RADIUS Realm
Configuring Realm on a WLAN (GUI)
Configuring Realm on a WLAN (CLI)
Configuring Realm on a RADIUS Authentication Server (GUI)
Configuring Realm on a RADIUS Authentication Server (CLI)
Configuring Realm on a RADIUS Accounting Server (GUI)
Configuring Realm on a RADIUS Accounting Server (CLI)
Identity Networking
Information About Identity Networking
RADIUS Attributes Used in Identity Networking
AAA Override
Information About AAA Override
Restrictions for AAA Override
Updating the RADIUS Server Dictionary File for Proper QoS Values
Configuring AAA Override (GUI)
Configuring AAA Override (CLI)
Per-WLAN RADIUS Source
Prerequisites for Per-WLAN RADIUS Source Support
Restrictions for Per-WLAN RADIUS Source Support
Information About Per-WLAN RADIUS Source Support
Configuring Per-WLAN RADIUS Source Support (GUI)
Configuring Per-WLAN RADIUS Source Support (CLI)
Monitoring the Status of Per-WLAN RADIUS Source Support (CLI)
LDAP
Information About LDAP
Configuring LDAP (GUI)
Configuring LDAP (CLI)
Local EAP
Information About Local EAP
Restrictions on Local EAP
Configuring Local EAP (GUI)
Configuring Local EAP (CLI)
Uploading PACs
Uploading PACs (GUI)
Uploading PACs (CLI)
MAC Filtering
MAC Filtering of WLANs
Information About MAC Filtering of WLANs
Restrictions for MAC Filtering
Enabling MAC Filtering
Local MAC Filters
Information About Local MAC Filters
Prerequisites for Configuring Local MAC Filters
Configuring Local MAC Filters (CLI)
MAC Authentication Failover to 802.1X
Configuring MAC Authentication Failover to 802.1X Authentication
Configuring MAC Authentication Failover to 802.1x Authentication (GUI)
Configuring MAC Authentication Failover to 802.1X Authentication (CLI)
Configuring 802.11w
Information About 802.11w
Restrictions for 802.11w
Configuring 802.11w (GUI)
Configuring 802.11w (CLI)
Fast Secure Roaming
802.11r Fast Transition
Information About 802.11r Fast Transition
Restrictions for 802.11r Fast Transition
Configuring 802.11r Fast Transition (GUI)
Configuring 802.11r Fast Transition (CLI)
Troubleshooting 802.11r BSS Fast Transition
Sticky Key Caching
Information About Sticky Key Caching
Restrictions for Sticky Key Caching
Configuring Sticky Key Caching (CLI)
Encryption
WLAN for Static WEP
Restrictions for Configuring Static WEP
WPA1 and WPA2
Configuring WPA1+WPA2 (GUI)
Configuring WPA1+WPA2 (CLI)
Cisco Key Integrity Protocol
Configuring CKIP (GUI)
Configuring CKIP (CLI)
Identity PSK
Information About Identity PSK
Prerequisites for Identity PSK
Configuring Identity PSK (GUI)
Configuring Identity PSK (CLI)
Layer 3 Security
Configuring Layer 3 Security Using Web Authentication
Prerequisites for Configuring Web Authentication on a WLAN
Restrictions for Configuring Web Authentication on a WLAN
Information About Web Authentication
Configuring Web Authentication
Configuring Web Authentication (GUI)
Configuring Web Authentication (CLI)
Choosing the Default Web Authentication Login Page
Information About Default Web Authentication Login Page
Choosing the Default Web Authentication Login Page (GUI)
Choosing the Default Web Authentication Login Page (CLI)
Example: Modified Default Web Authentication Login Page Example
Using a Customized Web Authentication Login Page from an External Web Server
Information About Customized Web Authentication Login Page
Choosing a Customized Web Authentication Login Page from an External Web Server (GUI)
Choosing a Customized Web Authentication Login Page from an External Web Server (CLI)
Example: Creating a Customized Web Authentication Login Page
Downloading a Customized Web Authentication Login Page
Prerequisites for Downloading a Customized Web Authentication Login Page
Downloading a Customized Web Authentication Login Page (GUI)
Downloading a Customized Web Authentication Login Page (CLI)
Example: Customized Web Authentication Login Page
Verifying the Web Authentication Login Page Settings (CLI)
Assigning Login, Login Failure, and Logout Pages per WLAN
Information About Assigning Login, Login Failure, and Logout Pages per WLAN
Assigning Login, Login Failure, and Logout Pages per WLAN (GUI)
Assigning Login, Login Failure, and Logout Pages per WLAN (CLI)
Web Authentication Proxy
Information About the Web Authentication Proxy
Configuring the Web Authentication Proxy (GUI)
Configuring the Web Authentication Proxy (CLI)
Captive Portal Bypass
Information About Captive Bypassing
Configuring Captive Bypassing (CLI)
Configuring Captive Network Assistant Bypass per WLAN (GUI)
Configuring Captive Network Assistant Bypass per WLAN (CLI)
MAC Authentication Fallback to Web Authentication
Information About Fallback Policy with MAC Filtering and Web Authentication
Configuring a Fallback Policy with MAC Filtering and Web Authentication (GUI)
Configuring a Fallback Policy with MAC Filtering and Web Authentication (CLI)
Web Redirect with 8021.X Authentication
Information About Web Redirect with 802.1X Authentication
Conditional Web Redirect
Splash Page Web Redirect
Configuring the RADIUS Server (GUI)
Configuring Web Redirect
Configuring Web Redirect (GUI)
Configuring Web Redirect (CLI)
Disabling Accounting Servers per WLAN (GUI)
Disabling Coverage Hole Detection per WLAN
Disabling Coverage Hole Detection on a WLAN (GUI)
Disabling Coverage Hole Detection on a WLAN (CLI)
Central Web Authentication
NAC Out-of-Band Integration
Information About NAC Out-of-Band Integration
Prerequisites for NAC Out Of Band
Restrictions for NAC Out of Band
Configuring NAC Out-of-Band Integration (GUI)
Configuring NAC Out-of-Band Integration (CLI)
ISE NAC
Information About ISE NAC Support
Device Registration
Central Web Authentication
Local Web Authentication
Guidelines and Restrictions on ISE NAC Support
Configuring ISE NAC Support (GUI)
Configuring ISE NAC Support (CLI)
Enabling ISE NAC on a WPA/WPA2-PSK WLAN
Information About Enabling ISE NAC on a WPA and WPA2-PSK WLAN
Enabling ISE NAC on WPA/WPA2-PSK WLAN (GUI)
Local Network Users
Information About Local Network Users on Controller
Configuring Local Network Users for the Controller (GUI)
Configuring Local Network Users for the Controller (CLI)
Client Exclusion Policies
Configuring Client Exclusion Policies (GUI)
Configuring Client Exclusion Policies (CLI)
Wi-Fi Direct Client Policy
Information About the Wi-Fi Direct Client Policy
Restrictions for the Wi-Fi Direct Client Policy
Configuring the Wi-Fi Direct Client Policy (GUI)
Configuring the Wi-Fi Direct Client Policy (CLI)
Monitoring and Troubleshooting the Wi-Fi Direct Client Policy (CLI)
Limit Clients per WLAN per AP Radio
Limit Clients per WLAN per AP Radio (GUI)
Limit Clients per WLAN per AP Radio (CLI)
Peer-to-Peer Blocking
Information About Peer-to-Peer Blocking
Peer-to-Peer Blocking Using IPSK Tags
Restrictions on Peer-to-Peer Blocking
Configuring Peer-to-Peer Blocking (GUI)
Configuring Peer-to-Peer Blocking (CLI)
Local Policies
Information About Local Policies
Guidelines and Restrictions for Local Policy Classification
Configuring Local Policies (GUI)
Configuring Local Policies (CLI)
Updating Organizationally Unique Identifier List
Updating Organizationally Unique Identifier List (GUI)
Updating Organizationally Unique Identifier List (CLI)
Updating Device Profile List
Updating Device Profile List (GUI)
Updating Device Profile List (CLI)
Wired Guest Access
Information About Wired Guest Access
Prerequisites for Configuring Wired Guest Access
Restrictions for Configuring Wired Guest Access
Configuring Wired Guest Access (GUI)
Configuring Wired Guest Access (CLI)
Supporting IPv6 Client Guest Access
Policy Enforcement and Quota Management
Configuring Quota Management and Policy Enforcement (GUI)
Viewing Quota Management and Policy Enforcement on a Controller (CLI)
Debugging Quota Management and Policy Enforcement on a Controller (CLI)
Viewing Quota Management and Policy Enforcement on an AP (CLI)
Debugging Quota Management and Policy Enforcement on an AP (CLI)
Client Roaming
Assisted Roaming
Restrictions for Assisted Roaming
Information About Assisted Roaming
Configuring Assisted Roaming (CLI)
802.11v
Information About 802.11v
Prerequisites for Configuring 802.11v
Configuring 802.11v Network Assisted Power Savings (CLI)
Monitoring 802.11v Network Assisted Power Savings (CLI)
Configuration Examples for 802.11v Network Assisted Power Savings
Enabling 802.11v BSS Transition Management
802.11 Bands
Configuring the 802.11 Bands (GUI)
Configuring the 802.11 Bands (CLI)
Optimized Roaming
Information About Optimized Roaming
Restrictions for Optimized Roaming
Configuring Optimized Roaming (GUI)
Configuring Optimized Roaming (CLI)
CCX Layer 2 Client Roaming
CCX Layer 2 Client Roaming
Restrictions on Client Roaming
Configuring CCX Client Roaming Parameters (GUI)
Configuring CCX Client Roaming Parameters (CLI)
Obtaining CCX Client Roaming Information (CLI)
Debugging CCX Client Roaming Issues (CLI)
DHCP
DHCP Proxy
Information About Configuring DHCP Proxy
Restrictions on Using DHCP Proxy
Configuring DHCP Proxy (GUI)
Configuring DHCP Proxy (GUI)
Configuring DHCP Proxy (CLI)
Configuring DHCP Proxy (CLI)
Configuring a DHCP Timeout (GUI)
Configuring a DHCP Timeout (CLI)
DHCP Link Select and VPN Select
Prerequisites for Configuring DHCP Link Select and VPN Select
Information About Configuring DHCP Link Select and VPN Select
DHCP Link Select
DHCP VPN Select
Mobility Considerations
Configuring DHCP Link Select and VPN Select (CLI)
Configuring DHCP Link Select and VPN Select (GUI)
DHCP Option 82
Information About DHCP Option 82
Restrictions on DHCP Option 82
Configuring DHCP Option 82 (GUI)
Configuring DHCP Option 82 (CLI)
Configuring DHCP Option 82 Insertion in Bridge Mode (CLI)
Internal DHCP Server
Information About Internal DHCP Server
Restrictions on Configuring Internal DHCP Server
Configuring DHCP Scopes (GUI)
Configuring DHCP Scopes (CLI)
DHCP for WLANs
Information About the Dynamic Host Configuration Protocol
Internal DHCP Servers
External DHCP Servers
DHCP Assignments
Restrictions for Configuring DHCP for WLANs
Configuring DHCP (GUI)
Configuring DHCP (CLI)
DHCP Release Override on Cisco APs
Debugging DHCP (CLI)
DHCP Client Handling
Client Data Tunneling
Ethernet over GRE Tunnels
Restrictions on EoGRE Tunneling
Configuring EoGRE on Cisco WLC (GUI)
Configuring EoGRE on WLC (CLI)
Configuring EoGRE for FlexConnect APs (GUI)
Configuring EoGRE for FlexConnect APs (CLI)
One-to-One Mapping of WLAN with EoGRE VLAN (GUI)
One-to-One Mapping of WLAN with EoGRE VLAN (CLI)
Proxy Mobile IPv6
Restrictions on Proxy Mobile IPv6
Configuring Proxy Mobile IPv6 (GUI)
Configuring Proxy Mobile IPv6 (CLI)
AP Groups
Prerequisites for Configuring AP Groups
Restrictions on Configuring Access Point Groups
Information About Access Point Groups
Configuring Access Point Groups
Creating Access Point Groups (GUI)
Creating Access Point Groups (CLI)
Viewing Access Point Groups (CLI)
802.1Q-in-Q VLAN Tagging
Information About 802.1Q-in-Q VLAN Tagging
Restrictions for 802.1Q-in-Q VLAN Tagging
Configuring 802.1Q-in-Q VLAN Tagging (GUI)
Configuring 802.1Q-in-Q VLAN Tagging (CLI)
Captive Portal Configuration for AP Groups
Restrictions for Captive Portal Configuration for AP Groups
Configuring Captive Portal for an AP Group (GUI)
Configuring Captive Portal for an AP Group (CLI)
Workgroup Bridges
Cisco WGBs
Information About Cisco Workgroup Bridges
Restrictions for Cisco Workgroup Bridges
Workgroup Bridge (WGB) Downstream Broadcast On Multiple VLANs
Parallel Redundancy Protocol Enhancement on AP and WGB
Verifying the PRP Configurations
Dual Radio Parallel Redundancy Protocol Enhancement on WGB
Sample Network Configuration
Configuration of Roaming Coordination on a Single WGB
WLC Configurations
Enabling PRP Under WLAN by CLI
Enabling PRP Under WLAN by GUI
Enabling Multiple Vlan Support by CLI
Enabling Multiple Vlan Support by GUI
WGB Configurations
Enabling PRP Mode on WGB
Submode PRP Configuration Commands
Configuring Dummy IP Address for Radio Interface
Configuring Vlan for BVI Under PRP Mode
Configuration Example of WGB
Aggregated Switch Configuration
PRP Switch Configuration
Verifying the Configuration
Debug Commands
DLEP Client Support on WGB
Configuring the Physical Interface
Configuring DLEP Local TCP Port and Server Address
Configuring Optional DLEP Timers
Configuring Heartbeat Timer
Configuring Neighbor Update Interval
Configuring DLEP Neighbors
Configuring Neighbor MAC Address
(Optional) Configuring RSSI Threshold and CDR Threshold
Verifying DLEP Configuration
Displaying DLEP Configuration
Displaying DLEP Peer Information
Displaying DLEP Neighbors
Displaying DLEP Client Counters
Debug Commands
Configuration Example
WLC Configuration
WGB Configuration
ESR Configuration
ISR-G2 Configuration
WGB Configuration Example
Viewing the Status of Workgroup Bridges (GUI)
Viewing the Status of Workgroup Bridges (CLI)
Debugging WGB Issues (CLI)
Third-Party WGBs and Client VMs
Information About Non-Cisco Workgroup Bridges
Restrictions for Non-Cisco Workgroup Bridges
Software-Defined Access Wireless
Introduction to Software-Defined Access Wireless
AP Bring-up Process
Onboarding the Wireless Clients
Platform Support
Migration From Converged Access
Restrictions
Configuring SD-Access Wireless (CLI)
Enabling SD-Access Wireless (GUI)
Configuring SD-Access Wireless VNID (GUI)
Configuring SD-Access Wireless WLAN (GUI)
Configuring DNS Access Control List on SD-Access (GUI)
Configuring Access Control List Templates (GUI)
FlexConnect
FlexConnect
Information About FlexConnect
FlexConnect Authentication Process
Restrictions on FlexConnect
Configuring FlexConnect
Configuring the Switch at a Remote Site
Configuring the Controller for FlexConnect
Configuring the Controller for FlexConnect for a Centrally Switched WLAN Used for Guest Access
Configuring the Controller for FlexConnect (GUI)
Configuring the Controller for FlexConnect (CLI)
Configuring an Access Point for FlexConnect
Configuring an Access Point for FlexConnect (GUI)
Configuring an Access Point for FlexConnect (CLI)
Configuring an Access Point for Local Authentication on a WLAN (GUI)
Configuring an Access Point for Local Authentication on a WLAN (CLI)
Connecting Client Devices to WLANs
Configuring FlexConnect Ethernet Fallback
Information About FlexConnect Ethernet Fallback
Restrictions for FlexConnect Ethernet Fallback
Configuring FlexConnect Ethernet Fallback (GUI)
Configuring FlexConnect Ethernet Fallback (CLI)
VideoStream for FlexConnect
Information About VideoStream for FlexConnect
Configuring VideoStream for FlexConnect (GUI)
Configuring VideoStream for FlexConnect (CLI)
Viewing and Debugging Media Streams
FlexConnect plus Bridge Mode
Information about Flex+Bridge Mode
Configuring Flex+Bridge Mode (GUI)
Configuring Flex+Bridge Mode (CLI)
FlexConnect Groups
Information About FlexConnect Groups
FlexConnect Groups and Backup RADIUS Servers
FlexConnect Groups and CCKM
FlexConnect Groups and Opportunistic Key Caching
FlexConnect Groups and Local Authentication
FlexConnect Groups and VLAN Support
Default FlexGroup
Restrictions for FlexConnect Groups
Configuring FlexConnect Groups
Configuring FlexConnect Groups (GUI)
Configuring FlexConnect Groups (CLI)
Moving APs from a Default FlexConnect Group to Another FlexConnect Group (GUI)
Viewing APs in a Default FlexGroup (GUI)
Viewing Default FlexGroup Details (CLI)
Configuring VLAN-ACL Mapping on FlexConnect Groups
Configuring VLAN-ACL Mapping on FlexConnect Groups (GUI)
Configuring VLAN-ACL Mapping on FlexConnect Groups (CLI)
Viewing VLAN-ACL Mappings (CLI)
Configuring WLAN-VLAN Mappings on FlexConnect Groups
Configuring WLAN-VLAN Mapping on FlexConnect Groups (GUI)
Configuring WLAN-VLAN Mapping on FlexConnect Groups (CLI)
FlexConnect Security
FlexConnect ACLs
Information About Access Control Lists
Restrictions for FlexConnect Access Control Lists
Configuring FlexConnect Access Control Lists (GUI)
Configuring FlexConnect Access Control Lists (CLI)
Viewing and Debugging FlexConnect Access Control Lists (CLI)
Configuring CAPWAP Message Aggregation (CLI)
AAA Overrides for FlexConnect
Information About Authentication, Authorization, Accounting Overrides
Restrictions on AAA Overrides for FlexConnect
Configuring AAA Overrides for FlexConnect on an Access Point (GUI)
Configuring VLAN Overrides for FlexConnect on an Access Point (CLI)
Software Defined Access and FlexConnect Post Authentication IPv6 ACL Support
Applying FlexConnect Access Control Lists (GUI)
Configuring Local Web Authentication for a WLAN with SDA and FlexConnect (GUI)
Configuring Local Web Authentication from FlexConnect Groups for FlexConnect APs (GUI)
Configuring Central Web Authentication and Post Authentication ACL from FlexConnect Groups for FlexConnect APs (GUI)
Configuring Post-Authentication Fabric ACL for a WLAN (GUI)
Applying FlexConnect Access Control Lists (CLI)
OfficeExtend Access Points
Information About OfficeExtend Access Points
OEAP in Local Mode
Implementing Security
Licensing for an OfficeExtend Access Point
Configuring OfficeExtend Access Points
Configuring OfficeExtend Access Points (GUI)
Configuring OfficeExtend Access Points (CLI)
Configuring Split Tunneling for a WLAN or a Remote LAN
Configuring Split Tunneling for a WLAN or a Remote LAN (GUI)
Configuring Split Tunneling for a WLAN or a Remote LAN (CLI)
Configuring OEAP ACLs
Configuring OEAP ACLs (GUI)
Configuring a Personal SSID on an OfficeExtend Access Point
Viewing OfficeExtend Access Point Statistics
Viewing Voice Metrics on OfficeExtend Access Points
Running Network Diagnostics
Information About Running Network Diagnostics
Running Network Diagnostics (GUI)
Running Network Diagnostics on the Controller
Running Network Diagnostics (CLI)
Remote LANs
Information About Remote LANs
Configuring a Remote LAN (GUI)
Configuring a Remote LAN (CLI)
FlexConnect AP Image Upgrades
Information About FlexConnect AP Image Upgrades
Restrictions on FlexConnect AP Image Upgrades
Configuring FlexConnect AP Upgrades (GUI)
Configuring FlexConnect AP Upgrades (CLI)
FlexConnect AP Easy Admin
Information About FlexConnect AP Easy Admin
Configuring FlexConnect AP Easy Admin on the Controller (GUI)
Configuring FlexConnect AP Easy Admin on the Controller (CLI)
WeChat Authentication Based Internet Access
Information About WeChat Client Authentication
Restrictions on WeChat Client Authentication
Configuring WeChat Client Authentication on WLC (GUI)
Configuring WeChat Client Authentication on WLC (CLI)
Authenticating Client Using WeChat App for Mobile Internet Access (GUI)
Authenticating Client Using WeChat App for PC Internet Access (GUI)
Lawful Interception of Traffic
Information About Lawful Interception of Traffic
Restrictions on Lawful Interception of Traffic
Configuring Lawful Interception of Traffic on a Cisco Controller (CLI)
Viewing and Debugging Lawful Interception of Traffic on a Cisco Access Point (CLI)
Monitoring the Network
Monitoring Cisco WLC
Viewing System Resources
Information About Viewing System Resources
Viewing System Resources (GUI)
Viewing System Resources (CLI)
System and Message Logging
Information About System and Message Logging
Configuring System and Message Logging (GUI)
Viewing Message Logs (GUI)
Configuring System and Message Logging (CLI)
Viewing System and Message Logs (CLI)
Viewing Access Point Event Logs
Information About Access Point Event Logs
Viewing Access Point Event Logs (CLI)
Using the Debug Facility
Configuring the Debug Facility (CLI)
Troubleshooting
Debugging on Cisco Wireless Controllers
Troubleshooting AAA RADIUS Interactions for WLAN Authentication
Understanding Debug Client on Wireless Controllers
Using the CLI to Troubleshoot Problems
Potential Reasons for Controller Reset
Cisco WLC Unresponsiveness
Uploading Logs and Crash Files
Prerequisites to Upload Logs and Crash Files
Uploading Logs and Crash Files (GUI)
Uploading Logs and Crash Files (CLI)
Uploading Core Dumps from the Controller
Information About Uploading Core Dumps from the Controller
Configuring the Controller to Automatically Upload Core Dumps to an FTP Server (GUI)
Configuring the Controller to Automatically Upload Core Dumps to an FTP Server (CLI)
Uploading Core Dumps from Controller to a Server (CLI)
Uploading Packet Capture Files
Information About Uploading Packet Capture Files
Restrictions for Uploading Packet Capture Files
Uploading Packet Capture Files (GUI)
Uploading Packet Capture Files (CLI)
Monitoring Memory Leaks
Monitoring Memory Leaks (CLI)
Troubleshooting Memory Leaks
Debugging on Cisco Access Points
Troubleshooting Access Points Using Telnet or SSH
Troubleshooting Access Points Using Telnet or SSH (GUI)
Troubleshooting Access Points Using Telnet or SSH (CLI)
Debugging the Access Point Monitor Service
Information About Debugging the Access Point Monitor Service
Debugging Access Point Monitor Service Issues (CLI)
Sending Debug Commands to Access Points Converted to Lightweight Mode
Understanding How Converted Access Points Send Crash Information to the Controller
Understanding How Converted Access Points Send Radio Core Dumps to the Controller
Retrieving Radio Core Dumps (CLI)
Uploading Radio Core Dumps (GUI)
Uploading Radio Core Dumps (CLI)
Uploading Memory Core Dumps from Converted Access Points
Uploading Access Point Core Dumps (GUI)
Uploading Access Point Core Dumps (CLI)
Viewing the AP Crash Log Information
Viewing the AP Crash Log information (GUI)
Viewing the AP Crash Log information (CLI)
Displaying MAC Addresses for Converted Access Points
Disabling the Reset Button on Access Points Converted to Lightweight Mode
Viewing Access Point Event Logs
Information About Access Point Event Logs
Viewing Access Point Event Logs (CLI)
FlexConnect
Troubleshooting Clients on FlexConnect Access Points
Troubleshooting OfficeExtend Access Points
Information About Troubleshooting OfficeExtend Access Points
Positioning OfficeExtend Access Points for Optimal RF Coverage
Troubleshooting Common Problems
Performing a Link Test
Information About Performing a Link Test
Performing a Link Test (GUI)
Performing a Link Test (CLI)
Packet Capture
Using the Debug Facility
Using the Debug Facility
Configuring the Debug Facility (CLI)
Configuring Wireless Sniffing
Information About Wireless Sniffing
Prerequisites for Wireless Sniffing
Restrictions on Wireless Sniffing
Configuring Sniffing on an Access Point (GUI)
Configuring Sniffing on an Access Point (CLI)
Cisco Wireless Controller Configuration Guide, Release 8.9
First Published: 2019-04-10
Last Modified: 2019-07-06
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of
the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.
Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com
go trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any
other company. (1721R)
© 2019 Cisco Systems, Inc. All rights reserved.
C O N T E N T S
Full Cisco Trademarks with Software License
?
P R E F A C E
Preface
lv
Audience
lv
Conventions
Related Documentation lvi
lv
P A R T I
Overview 59
C H A P T E R 1
Cisco Wireless Solution Overview 1
Core Components
2
Overview of Cisco Mobility Express
3
C H A P T E R 2
Initial Setup 5
Cisco WLAN Express Setup 5
Restrictions on Cisco WLAN Express
Setting up Cisco Wireless Controller using Cisco WLAN Express (Wired Method)
Default Configurations
10
8
8
Configuring the Controller Using the Configuration Wizard 12
12
Configuring the Controller (GUI)
Configuring the Controller—Using the CLI Configuration Wizard 22
Using the AutoInstall Feature for Controllers Without a Configuration 25
Managing the Controller System Date and Time
26
Restrictions on Configuring the Controller Date and Time
Configuring the Date and Time (GUI)
Configuring the Date and Time (CLI)
26
28
26
Cisco Wireless Controller Configuration Guide, Release 8.9
iii
Contents
P A R T I I
Management of Controllers
31
C H A P T E R 3
Administration of Controller
33
Using the Controller Interface
33
Using the Controller GUI
33
Restrictions on using Controller GUI
Logging On to the GUI
Logging out of the GUI
Using the Controller CLI
34
34
35
34
Logging on to the Controller CLI
35
Using a Local Serial Connection 35
Using a Remote Telnet or SSH Connection 36
Logging Out of the CLI
Navigating the CLI
37
37
Enabling Web and Secure Web Modes
38
Enabling Web and Secure Web Modes (GUI)
Enabling Web and Secure Web Modes (CLI)
38
39
Telnet and Secure Shell Sessions
41
Configuring Telnet and SSH Sessions (GUI)
Configuring Telnet and SSH Sessions (CLI)
Configuring Telnet Privileges for Selected Management Users (GUI)
Configuring Telnet Privileges for Selected Management Users (CLI)
41
42
44
44
Management over Wireless
45
Enabling Management over Wireless (GUI)
Enabling Management over Wireless (CLI)
45
45
Configuring Management using Dynamic Interfaces (CLI)
46
C H A P T E R 4
Monitoring Dashboard 47
Monitoring Dashboard 47
Numerical Statistics
Graphical Widgets
48
48
Network Summary 50
Network Summary—Access Points
50
Cisco Wireless Controller Configuration Guide, Release 8.9
iv
Contents
Network Summary—Clients
50
Rogues
50
Rogue Access Points
Rogue Clients
51
51
Interferers
Wireless Dashboard 51
51
AP Performance
51
Client Performance
51
Best Practices
51
C H A P T E R 5
Managing Licenses
53
Cisco Wireless Controller Licensing 53
Installing a License
54
Installing a License (GUI)
Installing a License (CLI)
54
54
Viewing Licenses
55
Viewing Licenses (GUI)
Viewing Licenses (CLI)
55
56
Configuring the Maximum Number of Access Points Supported 59
Configuring Maximum Number of Access Points to be Supported (GUI)
Configuring Maximum Number of Access Points to be Supported (CLI)
59
59
Troubleshooting Licensing Issues
Activating an AP-Count Evaluation License
60
60
Information About Activating an AP-Count Evaluation License
Activating an AP-Count Evaluation License (GUI)
Activating an AP-Count Evaluation License (CLI)
60
61
60
Cisco Smart Software Licensing 63
Restrictions for Using Cisco Smart Software Licensing 63
Configuring Cisco Smart Software Licensing (GUI)
Configuring the Cisco Smart Software Licensing on WLC (CLI)
64
65
Right to Use Licensing 66
Configuring Right to Use Licensing (GUI)
Configuring Right to Use Licensing (CLI)
67
67
Rehosting Licenses
68
Cisco Wireless Controller Configuration Guide, Release 8.9
v
Contents
Information About Rehosting Licenses
Rehosting a License
68
68
Rehosting a License (GUI)
Rehosting a License (CLI)
68
70
License Agent
71
Configuring the License Agent (GUI)
Configuring the License Agent (CLI)
72
72
Call-Home
74
Configuring Call-Home (GUI)
Configuring Call-Home Parameters (CLI)
74
76
Retrieving the Unique Device Identifier on Controllers and Access Points
77
Retrieving the Unique Device Identifier on Controllers and Access Points (GUI)
Retrieving the Unique Device Identifier on Controllers and Access Points (CLI)
77
77
C H A P T E R 6
Managing Software
79
79
Upgrading the Controller Software
Considerations for Upgrading Controller Software
Upgrading Controller Software (GUI)
Upgrading Controller Software (CLI)
Predownloading an Image to an Access Point
80
82
84
79
85
Access Point Predownload Process
Guidelines and Restrictions for Predownloading an Image to an Access Point
Predownloading an Image to Access Points—Global Configuration (GUI)
Predownloading an Image to Access Points (CLI)
88
88
87
Bootloader and Recovery Image
90
Configuring Boot Order (GUI)
Recovering an Access Point Using TFTP 91
90
C H A P T E R 7
Managing Configuration 93
Resetting the Controller to Default Settings
93
Resetting the Controller to Default Settings (GUI)
Resetting the Controller to Default Settings (CLI)
93
94
Saving Configurations
94
Editing Configuration Files
94
Cisco Wireless Controller Configuration Guide, Release 8.9
vi
Contents
Clearing the Controller Configuration 96
Restoring Passwords
96
Rebooting the Controller
Transferring Files to and from a Controller
97
97
Backing Up and Restoring Controller Configuration 97
Uploading Configuration Files
98
Downloading Configuration Files
100
Downloading a Login Banner File
102
Downloading a Login Banner File (GUI)
Downloading a Login Banner File (CLI)
Clearing the Login Banner (GUI)
105
103
104
Uploading Diagnostic Support Bundle
105
Uploading Diagnostic Support Bundle (GUI)
Uploading Diagnostic Support Bundle (CLI)
105
106
C H A P T E R 8
Network Time Protocol Setup 107
Authentication for the Controller and NTP/SNTP Server
107
Guidelines and Restrictions on NTP 107
Configuring the NTP/SNTP Server to Obtain the Date and Time (GUI)
Configuring the NTP/SNTP Server to Obtain the Date and Time (CLI)
Configuring NTPv4 Keys for Authentication (GUI)
109
108
108
C H A P T E R 9
High Availability 111
Restrictions on High Availability 115
Configuring High Availability (GUI)
Enabling High Availability (CLI)
120
118
Configuring High Availability Parameters
Troubleshooting Tips for IPsec Encryption for High Availability 122
121
vWLC and N+1 High Availability 123
Adding a Hash Key to a Cisco vWLC (GUI)
Adding a Hash Key to Cisco vWLC (CLI)
Monitoring High Availability Standby WLC 125
Replacing the Primary Controller in an HA Setup 126
123
124
Cisco Wireless Controller Configuration Guide, Release 8.9
vii
Contents
C H A P T E R 1 0
Managing Certificates
129
Loading an Externally Generated SSL Certificate
129
Loading an SSL Certificate (GUI)
Loading an SSL Certificate (CLI)
130
130
Downloading Device Certificates
131
Downloading Device Certificates (GUI)
Downloading Device Certificates (CLI)
132
133
Uploading Device Certificates
134
Uploading Device Certificates (GUI)
Uploading Device Certificates (CLI)
134
135
Downloading CA Certificates
135
Download CA Certificates (GUI)
Downloading CA Certificates (CLI)
136
Uploading CA Certificates
138
137
138
Uploading CA Certificates (GUI)
Uploading CA Certificates (CLI)
139
Generating a Certificate Signing Request
139
Generating a Certificate Signing Request using OpenSSL 140
Generating a Certificate Signing Request using Cisco Wireless Controller (GUI)
142
Downloading Third-Party Certificate
143
Downloading Third-Party Certificate (GUI)
Downloading Third-Party Certificate (CLI)
143
144
C H A P T E R 1 1
AAA Administration 145
Setting up RADIUS 145
Information About RADIUS 145
Restrictions on Configuring RADIUS 147
Configuring RADIUS (GUI)
147
Configuring RADIUS Authentication (GUI)
147
Configuring RADIUS Accounting Servers (GUI)
150
Configuring RADIUS (CLI)
RADIUS Authentication Attributes Sent by the Controller
Authentication Attributes Honored in Access-Accept Packets (Airespace)
152
157
159
Cisco Wireless Controller Configuration Guide, Release 8.9
viii
相关推荐
2023年江西萍乡中考道德与法治真题及答案.doc
2012年重庆南川中考生物真题及答案.doc
2013年江西师范大学地理学综合及文艺理论基础考研真题.doc
2020年四川甘孜小升初语文真题及答案I卷.doc
2020年注册岩土工程师专业基础考试真题及答案.doc
2023-2024学年福建省厦门市九年级上学期数学月考试题及答案.doc
2021-2022学年辽宁省沈阳市大东区九年级上学期语文期末试题及答案.doc
2022-2023学年北京东城区初三第一学期物理期末试卷及答案.doc
2018上半年江西教师资格初中地理学科知识与教学能力真题及答案.doc
2012年河北国家公务员申论考试真题及答案-省级.doc
2020-2021学年江苏省扬州市江都区邵樊片九年级上学期数学第一次质量检测试题及答案.doc
2022下半年黑龙江教师资格证中学综合素质真题及答案.doc
