Catalyst 9800 Series Wireless Controllers

Cisco Catalyst 9800 Series Wireless Controllers, Catalyst 9800-40 Wireless Controller , Catalyst 9800-80 Wireless Controller , Catalyst 9800-L Wireless Controller , Catalyst 9800-L-C Wireless Controller , Catalyst 9800-L-F Wireless Controller Configuration Guide

  • Hello! I am an AI chatbot trained to assist you with the Cisco Catalyst 9800 Series Wireless Controllers Configuration Guide. I’ve already reviewed the document and can help you find the information you need or explain it in simple terms. Just ask your questions, and providing more details will help me assist you more effectively!
Cisco Catalyst 9800 Series Wireless Controller Software Configuration
Guide, Cisco IOS XE Bengaluru 17.4.x
First Published: 2020-11-30
Last Modified: 2021-06-03
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of
the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.
Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:
https://www.cisco.com/c/en/us/about/legal/trademarks.html. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a
partnership relationship between Cisco and any other company. (1721R)
©2020–2021 Cisco Systems, Inc. All rights reserved.
CONTENTS
Preface lxxix
PREFACE
Document Conventions lxxix
Related Documentation lxxxi
Obtaining Documentation and Submitting a Service Request lxxxi
Overview of Cisco 9800 Series Wireless Controllers 1
CHAPTER 1
Elements of the New Configuration Model 1
Configuration Workflow 2
Initial Setup 3
System Configuration 5
PART I
New Configuration Model 7
CHAPTER 2
Information About New Configuration Model 7
Configuring a Wireless Profile Policy (GUI) 9
Configuring a Wireless Profile Policy (CLI) 10
Configuring a Flex Profile (GUI) 11
Configuring a Flex Profile 12
Configuring an AP Profile (GUI) 12
Configuring an AP Profile (CLI) 17
Configuring User for AP Management (CLI) 18
Setting a Private Configuration Key for Password Encryption 19
Configuring an RF Profile (GUI) 19
Configuring an RF Profile (CLI) 20
Configuring a Site Tag (GUI) 21
Configuring a Site Tag (CLI) 21
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Bengaluru 17.4.x
iii
Configuring Policy Tag (GUI) 22
Configuring a Policy Tag (CLI) 23
Configuring Wireless RF Tag (GUI) 24
Configuring Wireless RF Tag (CLI) 24
Attaching a Policy Tag and Site Tag to an AP (GUI) 25
Attaching Policy Tag and Site Tag to an AP (CLI) 25
AP Filter 27
Introduction to AP Filter 27
Set Tag Priority (GUI) 27
Set Tag Priority 27
Create an AP Filter (GUI) 28
Create an AP Filter (CLI) 28
Set Up and Update Filter Priority (GUI) 29
Set Up and Update Filter Priority 29
Verify AP Filter Configuration 30
Configuring Access Point for Location Configuration 31
Information About Location Configuration 31
Prerequisite for Location Configuration 31
Configuring a Location for an Access Point (GUI) 31
Configuring a Location for an Access Point (CLI) 32
Adding an Access Point to the Location (GUI) 33
Adding an Access Point to the Location (CLI) 33
Configuring SNMP in Location Configuration 34
SNMP MIB 34
Verifying Location Configuration 34
Verifying Location Statistics 35
Wireless Management Interface (WMI) 37
CHAPTER 3
Information About Wireless Management Interface 37
Recommendations for Wireless Management Interface 38
Configuring your Controller with Wireless Management Interface (CLI) 39
Verifying Wireless Management Interface Settings 40
Information About Network Address Translation (NAT) 41
Information About CAPWAP Discovery 41
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Bengaluru 17.4.x
iv
Contents
Configuring Wireless Management Interface with a NAT Public IP (CLI) 42
Configuring CAPWAP Discovery to Respond Only with Public or Private IP (CLI) 43
Configuring the Controller to Respond only with a Public IP (CLI) 43
Configuring the Controller to Respond only with a Private IP (CLI) 44
Verifying NAT Settings 44
BIOS Protection 45
CHAPTER 4
BIOS Protection on the Controller 45
BIOS or ROMMON Upgrade with BIOS Protection 45
Upgrading BIOS 46
Smart Licensing Using Policy 47
CHAPTER 5
Introduction to Smart Licensing Using Policy 47
Information About Smart Licensing Using Policy 48
Overview 48
Architecture 48
Product Instance 48
CSLU 49
CSSM 49
Controller 50
SSM On-Prem 51
Concepts 51
License Enforcement Types 51
License Duration 52
Authorization Code 52
Policy 53
RUM Report and Report Acknowledgement 54
Trust Code 54
Supported Topologies 54
Connected to CSSM Through CSLU 55
Connected Directly to CSSM 56
CSLU Disconnected from CSSM 57
Connected to CSSM Through a Controller 58
No Connectivity to CSSM and No CSLU 59
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Bengaluru 17.4.x
v
Contents
Supported Products 60
Interactions with Other Features 61
High Availability 61
Upgrades 62
Downgrades 63
How to Configure Smart Licensing Using Policy: Workflows by Topology 66
Workflow for Topology: Connected to CSSM Through CSLU 66
Workflow for Topology: Connected Directly to CSSM 69
Workflow for Topology: CSLU Disconnected from CSSM 70
Workflow for Topology: Connected to CSSM Through a Controller 73
Workflow for Topology: No Connectivity to CSSM and No CSLU 74
Migrating to Smart Licensing Using Policy 74
Example: Smart Licensing to Smart Licensing Using Policy 75
Example: SLR to Smart Licensing Using Policy 82
Example: Evaluation or Expired to Smart Licensing Using Policy 90
Task Library for Smart Licensing Using Policy 93
Logging into Cisco (CSLU Interface) 93
Configuring a Smart Account and a Virtual Account (CSLU Interface) 93
Adding a Product-Initiated Product Instance in CSLU (CSLU Interface) 94
Ensuring Network Reachability for Product Instance-Initiated Communication 94
Adding a CSLU-Initiated Product Instance in CSLU (CSLU Interface) 96
Collecting Usage Reports: CSLU Initiated (CSLU Interface) 96
Download All For Cisco (CSLU Interface) 97
Upload From Cisco (CSLU Interface) 98
Ensuring Network Reachability for CSLU-Initiated Communication 98
Setting Up a Connection to CSSM 102
Configuring Smart Transport Through an HTTPs Proxy 104
Configuring the Call Home Service for Direct Cloud Access 105
Configuring the Call Home Service for Direct Cloud Access through an HTTPs Proxy Server 108
Removing and Returning an Authorization Code 109
Removing the Product Instance from CSSM 111
Generating a New Token for a Trust Code from CSSM 112
Installing a Trust Code 112
Downloading a Policy File from CSSM 114
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Bengaluru 17.4.x
vi
Contents
Uploading Usage Data to CSSM and Downloading an ACK 114
Installing a File on the Product Instance 115
Setting the Transport Type, URL, and Reporting Interval 116
Configuring an AIR License 118
Sample Resource Utilization Measurement Report 120
Troubleshooting Smart Licensing Using Policy 120
System Message Overview 120
System Messages 122
Additional References for Smart Licensing Using Policy 129
Feature History for Smart Licensing Using Policy 130
Boot Integrity Visibility 131
CHAPTER 6
Overview of Boot Integrity Visibility 131
Verifying Software Image and Hardware 131
Verifying Platform Identity and Software Integrity 132
Best Practices 135
CHAPTER 7
Introduction 135
System Upgrade 137
PART II
Upgrading the Cisco Catalyst 9800 Wireless Controller Software 139
CHAPTER 8
Overview of Upgrading the Controller Software 139
Upgrading the Controller Software (GUI) 140
Upgrade the Controller Software (CLI) 141
Converting From Bundle-Mode to Install-Mode 142
Copying a WebAuth Tar Bundle to the Standby Controller 145
In-Service Software Upgrade 147
CHAPTER 9
Information About In-Service Software Upgrade 147
Prerequisites for Performing In-Service Software Upgrade 148
Guidelines and Restrictions for In-Service Software Upgrade 148
Upgrading Software Using In-Service Software Upgrade 149
Upgrading Software Using ISSU (GUI) 150
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Bengaluru 17.4.x
vii
Contents
Upgrading Software Using In-Service Software Upgrade with Delayed Commit 151
Monitoring In-Service Software Upgrade 152
Troubleshooting ISSU 154
Software Maintenance Upgrade 157
CHAPTER 10
Introduction to Software Maintenance Upgrade 157
Installing a SMU (GUI) 158
Installing SMU 159
Roll Back an Image (GUI) 160
Rollback SMU 160
Deactivate SMU 161
Configuration Examples for SMU 161
Information About AP Device Package 161
Installing AP Device Package (GUI) 162
Installing AP Device Package (CLI) 163
Verifying APDP on the Controller 164
Information About Per Site or Per AP Model Service Pack (APSP) 164
Rolling AP Upgrade 165
Rolling AP Upgrade Process 165
Installing AP Service Package (GUI) 167
Installing AP Service Package (CLI) 167
Adding a Site to a Filter 168
Deactivating an Image 169
Roll Back APSP 169
Canceling the Upgrade 170
Verifying the Upgrade 170
Verifying of AP Upgrade on the Controller 172
Efficient Image Upgrade 175
CHAPTER 11
Efficient Image Upgrade 175
Enable Pre-Download (GUI) 175
Enable Pre-Download (CLI) 176
Configuring a Site Tag (CLI) 176
Attaching Policy Tag and Site Tag to an AP (CLI) 177
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Bengaluru 17.4.x
viii
Contents
Trigger Predownload to a Site Tag 178
Predownloading an Image to an Access Point 181
CHAPTER 12
Information About Predownloading an Image to an Access Point 181
Restrictions for Predownloading an Image to an Access Point 181
Predownloading an Image to Access Points (CLI) 182
Monitoring the Access Point Predownload Process 184
Information About AP Image Download Time Enhancement (OEAP or Teleworker Only) 185
Configuring AP Image Download Time Enhancement (GUI) 186
Configuring AP Image Download Time Enhancement (CLI) 186
Verifying AP Image Download Time Enhancement Configuration 187
N+1 Hitless Rolling AP Upgrade 189
CHAPTER 13
N+1 Hitless Rolling AP Upgrade 189
Configuring Hitless Upgrade 190
Verifying Hitless Upgrade 191
NBAR Dynamic Protocol Pack Upgrade 193
CHAPTER 14
NBAR Dynamic Protocol Pack Upgrade 193
Upgrading the NBAR2 Protocol Pack 194
Wireless Sub-Package for Switch 195
CHAPTER 15
Introduction to Wireless Sub-package 195
Booting in Install Mode 196
Installing Sub-Package in a Single Step (GUI) 197
Installing Sub-Package in a Single Step 197
Multi-step Installation of Sub-Package 198
Installing on a Stack 198
Upgrading to a Newer Version of Wireless Package 199
Deactivating the Wireless Package 199
Enabling or Disabling Auto-Upgrade 199
Lightweight Access Points 201
PART III
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Bengaluru 17.4.x
ix
Contents
Country Codes 203
CHAPTER 16
Information About Country Codes 203
Prerequisites for Configuring Country Codes 203
Configuring Country Codes (GUI) 204
How to Configure Country Codes 204
Configuration Examples for Configuring Country Codes 206
Viewing Channel List for Country Codes 206
Sniffer Mode 209
CHAPTER 17
Information about Sniffer 209
Prerequisites for Sniffer 209
Restrictions on Sniffer 209
How to Configure Sniffer 210
Configuring an Access Point as Sniffer (GUI) 210
Configuring an Access Point as Sniffer (CLI) 210
Enabling or Disabling Sniffing on the Access Point (GUI) 211
Enabling or Disabling Sniffing on the Access Point (CLI) 211
Verifying Sniffer Configurations 212
Examples for Sniffer Configurations and Monitoring 212
Monitor Mode 213
CHAPTER 18
Introduction to Monitor Mode 213
Enable Monitor Mode (GUI) 213
Enable Monitor Mode (CLI) 214
AP Priority 215
CHAPTER 19
Failover Priority for Access Points 215
Setting AP Priority (GUI) 215
Setting AP Priority 216
FlexConnect 217
CHAPTER 20
Information About FlexConnect 217
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Bengaluru 17.4.x
x
Contents
FlexConnect Authentication Process 219
Guidelines and Restrictions for FlexConnect 222
Configuring a Site Tag 225
Configuring a Policy Tag (CLI) 226
Attaching a Policy Tag and a Site Tag to an AP (GUI) 227
Attaching Policy Tag and Site Tag to an AP (CLI) 227
Linking an ACL Policy to the Defined ACL (GUI) 228
Applying ACLs on FlexConnect 229
Configuring FlexConnect 230
Configuring a Switch at a Remote Site 230
Configuring the Controller for FlexConnect 231
Configuring Local Switching in FlexConnect Mode (GUI) 231
Configuring Local Switching in FlexConnect Mode (CLI) 232
Configuring Central Switching in FlexConnect Mode (GUI) 232
Configuring Central Switching in FlexConnect Mode 233
Configuring an Access Point for FlexConnect 233
Configuring an Access Point for Local Authentication on a WLAN (GUI) 233
Configuring an Access Point for Local Authentication on a WLAN (CLI) 234
Connecting Client Devices to WLANs 234
Configuring FlexConnect Ethernet Fallback 235
Information About FlexConnect Ethernet Fallback 235
Configuring FlexConnect Ethernet Fallback 235
Flex AP Local Authentication (GUI) 236
Flex AP Local Authentication (CLI) 236
Flex AP Local Authentication with External Radius Server 238
Configuration Example: FlexConnect with Central and Local Authentication 242
NAT-PAT for FlexConnect 242
Configuring NAT-PAT for a WLAN or a Remote LAN 242
Creating a WLAN 242
Configuring a Wireless Profile Policy and NAT-PAT (GUI) 243
Configuring a Wireless Profile Policy and NAT-PAT 243
Mapping a WLAN to a Policy Profile 244
Configuring a Site Tag 245
Attaching a Policy Tag and a Site Tag to an Access Point (GUI) 245
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Bengaluru 17.4.x
xi
Contents
Attaching a Policy Tag and a Site Tag to an Access Point 246
Split Tunneling for FlexConnect 246
Configuring Split Tunneling for a WLAN or Remote LAN 247
Defining an Access Control List for Split Tunneling (GUI) 247
Defining an Access Control List for Split Tunneling 247
Linking an ACL Policy to the Defined ACL 248
Creating a WLAN 249
Configuring a Wireless Profile Policy and a Split MAC ACL Name (GUI) 249
Configuring a Wireless Profile Policy and a Split MAC ACL Name 250
Mapping a WLAN to a Policy Profile (GUI) 251
Mapping WLAN to a Policy Profile 251
Configuring a Site Tag 252
Attaching a Policy Tag and Site Tag to an Access Point 252
VLAN-based Central Switching for FlexConnect 253
Configuring VLAN-based Central Switching (GUI) 253
Configuring VLAN-based Central Switching (CLI) 254
OfficeExtend Access Points for FlexConnect 255
Configuring OfficeExtend Access Points 256
Disabling OfficeExtend Access Point 256
Support for OEAP Personal SSID 257
Information About OEAP Personal SSID Support 257
Configuring OEAP Personal SSID (GUI) 257
Configuring OEAP Personal SSID (CLI) 258
Viewing OEAP Personal SSID Configuration 258
Clearing Personal SSID from an OfficeExtend Access Point 259
Example: Viewing OfficeExtend Configuration 259
Proxy ARP 260
Enabling Proxy ARP for FlexConnect APs (GUI) 260
Enabling Proxy ARP for FlexConnect APs 260
Overlapping Client IP Address in Flex Deployment 261
Overview of Overlapping Client IP Address in Flex Deployment 261
Enabling Overlapping Client IP Address in Flex Deployment (GUI) 261
Enabling Overlapping Client IP Address in Flex Deployment 262
Verifying Overlapping Client IP Address in Flex Deployment (GUI) 262
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Bengaluru 17.4.x
xii
Contents
Verifying Overlapping Client IP Address in Flex Deployment 263
Lawful Interception 264
Lawful Interception of Traffic 264
Configuring Lawful Interception 264
Verifying the Status of Lawful Interception 265
Data DTLS 267
CHAPTER 21
Information About Data Datagram Transport Layer Security 267
Configuring Data DTLS (GUI) 268
Configuring Data DTLS (CLI) 268
Converting Autonomous Access Points to Lightweight Mode 271
CHAPTER 22
Guidelines for Converting Autonomous Access Points to Lightweight Mode 271
Information About Autonomous Access Points Converted to Lightweight Mode 272
Reverting from Lightweight Mode to Autonomous Mode 272
Using DHCP Option 43 and DHCP Option 60 272
DHCP Client Option12 273
How Converted Access Points Send Crash Information to the Device 273
Uploading Memory Core Dumps from Converted Access Points 273
Displaying MAC Addresses for Converted Access Points 273
Configuring a Static IP Address for a Lightweight Access Point 274
How to Convert a Lightweight Access Point Back to an Autonomous Access Point 274
Converting a Lightweight Access Point Back to an Autonomous Access Point (CLI) 274
Converting a Lightweight Access Point Back to an Autonomous Access Point (Using the Mode
Button and a TFTP Server) 275
Authorizing Access Points 275
Authorizing Access Points Using Local Database (CLI) 275
Authorizing Access Points Using RADIUS Server (CLI) 277
Authorizing Access Points Using Serial Numbers 278
Information About Authorizing Access Points Using Serial Numbers 278
Authorizing Access Points Using Serial Numbers (GUI) 278
Authorizing Access Points Using Serial Numbers (CLI) 279
Viewing Serial Number Authorization 279
Disabling the Reset Button on Converted Access Points (CLI) 280
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Bengaluru 17.4.x
xiii
Contents
Monitoring the AP Crash Log Information 280
How to Configure a Static IP Address on an Access Point 281
Configuring a Static IP Address on an Access Point (CLI) 281
Configuring a Static IP Address on an Access Point (GUI) 282
Recovering the Access Point Using the TFTP Recovery Procedure 283
Configuration Examples for Converting Autonomous Access Points to Lightweight Mode 283
Example: Displaying the IP Address Configuration for Access Points 283
Example: Displaying Access Point Crash File Information 283
AP MAC Authorization 284
Configuring AP MAC Authorization (CLI) 284
Ethernet VLAN Tagging on Access Points 285
Information About Ethernet VLAN Tagging on Access Points 285
Configuring Ethernet VLAN Tagging on Access Points (GUI) 285
Configuring Ethernet VLAN Tagging on Access Points (CLI) 285
AP Crash File Upload 287
CHAPTER 23
AP Crash File Upload 287
Configuring AP Crash File Upload (CLI) 288
Access Point Plug-n-Play 289
CHAPTER 24
Overview of Access Point Plug-n-Play 289
Provisioning AP from PnP Server 289
Verifying AP Tag Configuration 290
802.11 Parameters for Cisco Access Points 291
CHAPTER 25
2.4-GHz Radio Support 291
Configuring 2.4-GHz Radio Support for the Specified Slot Number 291
5-GHz Radio Support 293
Configuring 5-GHz Radio Support for the Specified Slot Number 293
Information About Dual-Band Radio Support 295
Configuring Default XOR Radio Support 295
Configuring XOR Radio Support for the Specified Slot Number (GUI) 298
Configuring XOR Radio Support for the Specified Slot Number 298
Receiver Only Dual-Band Radio Support 300
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Bengaluru 17.4.x
xiv
Contents
Information About Receiver Only Dual-Band Radio Support 300
Configuring Receiver Only Dual-Band Parameters for Access Points 300
Enabling CleanAir with Receiver Only Dual-Band Radio on a Cisco Access Point (GUI) 300
Enabling CleanAir with Receiver Only Dual-Band Radio on a Cisco Access Point 300
Disabling Receiver Only Dual-Band Radio on a Cisco Access Point (GUI) 301
Disabling Receiver Only Dual-Band Radio on a Cisco Access Point 301
Configuring Client Steering (CLI) 301
Verifying Cisco Access Points with Dual-Band Radios 303
802.1x Support 305
CHAPTER 26
Introduction to the 802.1x Authentication 305
EAP-FAST Protocol 305
EAP-TLS/EAP-PEAP Protocol 306
Limitations of the 802.1x Authentication 306
Topology - Overview 306
Configuring 802.1x Authentication Type and LSC AP Authentication Type (GUI) 307
Configuring 802.1x Authentication Type and LSC AP Authentication Type 307
Configuring the 802.1x Username and Password (GUI) 308
Configuring the 802.1x Username and Password (CLI) 309
Enabling 802.1x on the Switch Port 310
Verifying 802.1x on the Switch Port 311
Verifying the Authentication Type 312
Configuring CAPWAP Link Aggregation Support 313
CHAPTER 27
Information About Link Aggregation 313
Information About CAPWAP LAG Support 313
Restrictions for CAPWAP LAG Support 314
Enabling CAPWAP LAG Support on Controller (GUI) 314
Enabling CAPWAP LAG Support on Controller 314
Enabling CAPWAP LAG Globally on Controller 315
Disabling CAPWAP LAG Globally on Controller 315
Enabling CAPWAP LAG for an AP Profile (GUI) 315
Enabling CAPWAP LAG for an AP Profile 316
Disabling CAPWAP LAG for an AP Profile 316
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Bengaluru 17.4.x
xv
Contents
Disabling CAPWAP LAG Support on Controller 317
Verifying CAPWAP LAG Support Configurations 317
Configuring DHCP and NAT Functionality on Root Access Point 319
CHAPTER 28
Information About DHCP and NAT Functionality on Root AP (RAP) 319
Configuring DHCP Server on Root Access Point (RAP) 320
Verifying DHCP Server for Root AP Configuration 320
OFDMA Support for 11ax Access Points 321
CHAPTER 29
Information About OFDMA Support for 11ax Access Points 321
Supported Modes on 11ax Access Points 321
Configuring 11AX (GUI) 322
Configuring Channel Width 322
Configuring 802.11ax Radio Parameters (GUI) 323
Configuring 802.11ax Radio Parameters (CLI) 323
Setting up the 802.11ax Radio Parameters 324
Configuring OFDMA on a WLAN 325
Verifying Channel Width 326
Verifying Client Details 327
Verifying Radio Configuration 328
AP Audit Configuration 331
CHAPTER 30
Information About AP Audit Configuration 331
Restrictions for AP Audit Configuration 331
Configure AP Audit Parameters (CLI) 332
Verifying AP Audit Report Summary 332
Verifying AP Audit Report Detail 332
AP Support Bundle 335
CHAPTER 31
Access Point Support Bundle 335
Exporting an AP Support Bundle (GUI) 335
Exporting an AP Support Bundle (CLI) 336
Monitoring the Status of Support Bundle Export 336
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Bengaluru 17.4.x
xvi
Contents
Cisco Flexible Antenna Port 337
CHAPTER 32
Information About Cisco Flexible Antenna Port 337
Configuring a Cisco Flexible Antenna Port (GUI) 337
Configuring a Cisco Flexible Antenna Port (CLI) 338
Verifying Flexible Antenna Port Configuration 338
LED States for Access Points 339
CHAPTER 33
Information About LED States for Access Points 339
Configuring LED State in Access Points (GUI) 339
Configuring LED State for Access Points in the Global Configuration Mode (CLI) 340
Configuring LED State in the AP Profile 340
Verifying LED State for Access Points 341
Access Points Memory Information 343
CHAPTER 34
Information About Access Point Memory Information 343
Verifying Access Point Memory Information 343
Radio Resource Management 345
PART IV
Radio Resource Management 347
CHAPTER 35
Information About Radio Resource Management 347
Radio Resource Monitoring 348
Information About RF Groups 348
RF Group Leader 349
RF Group Name 351
Rogue Access Point Detection in RF Groups 352
Transmit Power Control 352
Overriding the TPC Algorithm with Minimum and Maximum Transmit Power Settings 352
Dynamic Channel Assignment 353
Dynamic Bandwidth Selection 354
Coverage Hole Detection and Correction 355
Restrictions for Radio Resource Management 355
How to Configure RRM 356
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Bengaluru 17.4.x
xvii
Contents
Configuring Neighbor Discovery Type (GUI) 356
Configuring Neighbor Discovery Type (CLI) 356
Configuring RF Groups 356
Configuring RF Group Selection Mode (GUI) 357
Configuring RF Group Selection Mode (CLI) 357
Configuring an RF Group Name (CLI) 358
Configuring Members in an 802.11 Static RF Group (GUI) 358
Configuring Members in an 802.11 Static RF Group (CLI) 359
Configuring Transmit Power Control 359
Configuring Transmit Power (GUI) 359
Configuring the Tx-Power Control Threshold (CLI) 360
Configuring the Tx-Power Level (CLI) 360
Configuring 802.11 RRM Parameters 361
Configuring Advanced 802.11 Channel Assignment Parameters (GUI) 361
Configuring Advanced 802.11 Channel Assignment Parameters (CLI) 362
Configuring 802.11 Coverage Hole Detection (GUI) 365
Configuring 802.11 Coverage Hole Detection (CLI) 365
Configuring 802.11 Event Logging (CLI) 366
Configuring 802.11 Statistics Monitoring (GUI) 367
Configuring 802.11 Statistics Monitoring (CLI) 368
Configuring the 802.11 Performance Profile (GUI) 369
Configuring the 802.11 Performance Profile (CLI) 369
Configuring Advanced 802.11 RRM 370
Enabling Channel Assignment (GUI) 370
Enabling Channel Assignment (CLI) 371
Restarting DCA Operation 371
Updating Power Assignment Parameters (GUI) 371
Updating Power Assignment Parameters (CLI) 372
Configuring Rogue Access Point Detection in RF Groups 372
Configuring Rogue Access Point Detection in RF Groups (CLI) 372
Monitoring RRM Parameters and RF Group Status 373
Monitoring RRM Parameters 373
Verifying RF Group Status (CLI) 374
Examples: RF Group Configuration 375
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Bengaluru 17.4.x
xviii
Contents
Information About ED-RRM 375
Configuring ED-RRM on the Cisco Wireless LAN Controller (CLI) 375
Coverage Hole Detection 379
CHAPTER 36
Coverage Hole Detection and Correction 379
Configuring Coverage Hole Detection (GUI) 379
Configuring Coverage Hole Detection (CLI) 380
Configuring CHD for RF Tag Profile (GUI) 381
Configuring CHD for RF Tag Profile (CLI) 382
Optimized Roaming 385
CHAPTER 37
Optimized Roaming 385
Restrictions for Optimized Roaming 385
Configuring Optimized Roaming (GUI) 386
Configuring Optimized Roaming (CLI) 386
Cisco Flexible Radio Assignment 387
CHAPTER 38
Information About Flexible Radio Assignment 387
Benefits of the FRA Feature 388
Configuring an FRA Radio (CLI) 388
Configuring an FRA Radio (GUI) 390
XOR Radio Support 391
CHAPTER 39
Information About Dual-Band Radio Support 391
Configuring Default XOR Radio Support 392
Configuring XOR Radio Support for the Specified Slot Number (GUI) 394
Configuring XOR Radio Support for the Specified Slot Number 394
Cisco Receiver Start of Packet 397
CHAPTER 40
Information About Receiver Start of Packet Detection Threshold 397
Restrictions for Rx SOP 397
Configuring Rx SOP (CLI) 398
Customizing RF Profile (CLI) 398
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Bengaluru 17.4.x
xix
Contents
Client Limit 401
CHAPTER 41
Information About Client Limit 401
Configuring Client Limit (GUI) 401
Configuring Client Limit (CLI) 401
IP Theft 403
CHAPTER 42
Introduction to IP Theft 403
Configuring IP Theft (GUI) 404
Configuring IP Theft 404
Configuring the IP Theft Exclusion Timer 404
Adding Static Entries for Wired Hosts 405
Verifying IP Theft Configuration 406
Unscheduled Automatic Power Save Delivery 409
CHAPTER 43
Information About Unscheduled Automatic Power Save Delivery 409
Viewing Unscheduled Automatic Power Save Delivery (CLI) 409
Target Wake Time 411
CHAPTER 44
Target Wake Time 411
Extended Power-Savings Using Target Wake Time 411
Configuring Target Wake Time at the Radio Level (CLI) 412
Configuring Target Wake Time on WLAN 413
Enabling Target Wake Time on WLAN (CLI) 413
Disabling Target Wakeup Time on WLAN (CLI) 414
Configuring Target Wake Time (GUI) 415
Verifying Target Wakeup Time 415
Enabling USB Port on Access Points 417
CHAPTER 45
USB Port as Power Source for Access Points 417
Configuring an AP Profile (CLI) 418
Configuring USB Settings for an Access Point (CLI) 419
Configuring USB Settings for an Access Point (GUI) 419
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Bengaluru 17.4.x
xx
Contents
1/1,888