Cisco Catalyst 9800-40 Wireless Controller Configuration Guide

Cisco Catalyst 9800 Series Wireless Controller Software Configuration

Guide, Cisco IOS XE Gibraltar 16.12.x

First Published: 2019-07-31

Last Modified: 2019-07-31

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,

INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,

EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH

THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,

CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.

CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF

MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT

LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS

HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network

topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional

and coincidental.

All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.

Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:

https://www.cisco.com/c/en/us/about/legal/trademarks.html. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a

partnership relationship between Cisco and any other company. (1721R)

CONTENTS

Preface lix

PREFACE

Document Conventions lix

Related Documentation lxi

Obtaining Documentation and Submitting a Service Request lxi

Overview of Cisco 9800 Series Wireless Controllers 1

CHAPTER 1

Elements of the New Configuration Model 1

Configuration Workflow 2

Initial Setup 3

System Configuration 5

PART I

System Configuration 7

CHAPTER 2

Information About New Configuration Model 7

Configuring a Wireless Profile Policy (GUI) 9

Configuring a Wireless Profile Policy (CLI) 10

Configuring a Flex Profile (GUI) 11

Configuring a Flex Profile 12

Configuring an AP Profile (GUI) 12

Configuring an AP Profile (CLI) 17

Configuring User for AP Management (CLI) 18

Setting a Private Configuration Key for Password Encryption 18

Configuring an RF Profile (GUI) 19

Configuring an RF Profile (CLI) 19

Configuring a Site Tag (GUI) 20

Configuring a Site Tag (CLI) 21

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

iii

Configuring Policy Tag (GUI) 22

Configuring a Policy Tag (CLI) 22

Configuring Wireless RF Tag (GUI) 23

Configuring Wireless RF Tag (CLI) 24

Attaching a Policy Tag and Site Tag to an AP (GUI) 25

Attaching Policy Tag and Site Tag to an AP (CLI) 25

AP Filter 26

Introduction to AP Filter 26

Set Tag Priority (GUI) 27

Set Tag Priority 27

Create an AP Filter (GUI) 28

Create an AP Filter (CLI) 28

Set Up and Update Filter Priority (GUI) 29

Set Up and Update Filter Priority 29

Verify AP Filter Configuration 29

Configuring Access Point for Location Configuration 30

Information About Location Configuration 30

Prerequisite for Location Configuration 31

Configuring a Location for an Access Point (GUI) 31

Configuring a Location for an Access Point (CLI) 31

Adding an Access Point to the Location (GUI) 32

Adding an Access Point to the Location (CLI) 33

Configuring SNMP in Location Configuration 33

SNMP MIB 33

Verifying Location Configuration 34

Verifying Location Statistics 34

Wireless Management Interface (WMI) 37

CHAPTER 3

Information About Wireless Management Interface 37

Recommendations for Wireless Management Interface 38

Configuring your Controller with Wireless Management Interface (CLI) 39

Verifying Wireless Management Interface Settings 40

Information About Network Address Translation (NAT) 41

Information About CAPWAP Discovery 41

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

iv

Contents

Configuring Wireless Management Interface with a NAT Public IP (CLI) 42

Configuring CAPWAP Discovery to Respond Only with Public or Private IP (CLI) 43

Configuring the Controller to Respond only with a Public IP (CLI) 43

Configuring the Controller to Respond only with a Private IP (CLI) 43

Verifying NAT Settings 44

BIOS Protection 45

CHAPTER 4

BIOS Protection on the Controller 45

BIOS or ROMMON Upgrade with BIOS Protection 45

Upgrading BIOS 46

Smart Licensing 47

CHAPTER 5

Information About Cisco Smart Licensing 47

Creating a Smart Account 49

Using Smart Licensing 50

Reregister a License (GUI) 50

Using Specified License Reservation (SLR) 50

Enabling Smart Software Licensing 51

Enabling Smart Call Home Reporting 52

Configuring AIR License Level (GUI) 52

Configuring AIR License Level (CLI) 53

Configuring AIR Network Essentials License Level 53

Configuring AIR Network Advantage License Level 54

Verifying Smart Licensing Configurations 54

Best Practices 57

CHAPTER 6

Introduction 57

Lightweight Access Points 59

PART II

Country Codes 61

CHAPTER 7

Information About Country Codes 61

Prerequisites for Configuring Country Codes 61

Configuring Country Codes (GUI) 62

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

v

Contents

How to Configure Country Codes 62

Configuration Examples for Configuring Country Codes 64

Viewing Channel List for Country Codes 64

Sniffer Mode 67

CHAPTER 8

Information about Sniffer 67

Prerequisites for Sniffer 67

Restrictions on Sniffer 67

How to Configure Sniffer 68

Configuring an Access Point as Sniffer (GUI) 68

Configuring an Access Point as Sniffer (CLI) 68

Enabling or Disabling Sniffing on the Access Point (GUI) 69

Enabling or Disabling Sniffing on the Access Point (CLI) 69

Verifying Sniffer Configurations 70

Examples for Sniffer Configurations and Monitoring 70

Monitor Mode 71

CHAPTER 9

Introduction to Monitor Mode 71

Enable Monitor Mode (GUI) 71

Enable Monitor Mode (CLI) 72

Sensor Mode 73

CHAPTER 10

Introduction to Sensor Mode 73

Enabling Sensor Mode 73

Verifying Sensor Mode Configuration 76

AP Priority 77

CHAPTER 11

Failover Priority for Access Points 77

Setting AP Priority (GUI) 77

Setting AP Priority 78

FlexConnect 79

CHAPTER 12

Information About FlexConnect 79

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

vi

Contents

FlexConnect Authentication Process 81

Guidelines and Restrictions for FlexConnect 84

Configuring a Site Tag 86

Configuring a Policy Tag (CLI) 87

Attaching a Policy Tag and a Site Tag to an AP (GUI) 88

Attaching Policy Tag and Site Tag to an AP (CLI) 89

Linking an ACL Policy to the Defined ACL (GUI) 90

Applying ACLs on FlexConnect 90

Configuring FlexConnect 91

Configuring a Switch at a Remote Site 91

Configuring the Controller for FlexConnect 92

Configuring Local Switching in FlexConnect Mode (GUI) 93

Configuring Local Switching in FlexConnect Mode (CLI) 93

Configuring Central Switching in FlexConnect Mode (GUI) 94

Configuring Central Switching in FlexConnect Mode 94

Configuring an Access Point for FlexConnect 95

Configuring an Access Point for Local Authentication on a WLAN (GUI) 95

Configuring an Access Point for Local Authentication on a WLAN (CLI) 95

Connecting Client Devices to WLANs 95

Configuring FlexConnect Ethernet Fallback 96

Information About FlexConnect Ethernet Fallback 96

Configuring FlexConnect Ethernet Fallback 96

Flex AP Local Authentication (GUI) 97

Flex AP Local Authentication (CLI) 98

Flex AP Local Authentication with External Radius Server 100

Configuration Example: FlexConnect with Central and Local Authentication 103

NAT-PAT for FlexConnect 103

Configuring NAT-PAT for a WLAN or a Remote LAN 103

Creating a WLAN 103

Configuring a Wireless Profile Policy and NAT-PAT (GUI) 104

Configuring a Wireless Profile Policy and NAT-PAT 104

Mapping a WLAN to a Policy Profile 105

Configuring a Site Tag 106

Attaching a Policy Tag and a Site Tag to an Access Point (GUI) 106

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

vii

Contents

Attaching a Policy Tag and a Site Tag to an Access Point 107

Split Tunneling for FlexConnect 107

Configuring Split Tunneling for a WLAN or Remote LAN 108

Defining an Access Control List for Split Tunneling (GUI) 108

Defining an Access Control List for Split Tunneling 108

Linking an ACL Policy to the Defined ACL 109

Creating a WLAN 110

Configuring a Wireless Profile Policy and a Split MAC ACL Name (GUI) 110

Configuring a Wireless Profile Policy and a Split MAC ACL Name 111

Mapping a WLAN to a Policy Profile (GUI) 112

Mapping WLAN to a Policy Profile 112

Configuring a Site Tag 113

Attaching a Policy Tag and Site Tag to an Access Point 113

VLAN-based Central Switching for FlexConnect 114

Configuring VLAN-based Central Switching (GUI) 114

Configuring VLAN-based Central Switching (CLI) 115

OfficeExtend Access Points for FlexConnect 116

Configuring OfficeExtend Access Points 116

Disabling OfficeExtend Access Point 117

Clearing Personal SSID from an OfficeExtend Access Point 118

Example: Viewing OfficeExtend Configuration 118

Proxy ARP 119

Enabling Proxy ARP for FlexConnect APs (GUI) 119

Enabling Proxy ARP for FlexConnect APs 119

Data DTLS 121

CHAPTER 13

Information About Data Datagram Transport Layer Security 121

Configuring Data DTLS (GUI) 121

Configuring Data DTLS (CLI) 122

Converting Autonomous Access Points to Lightweight Mode 125

CHAPTER 14

Guidelines for Converting Autonomous Access Points to Lightweight Mode 125

Information About Autonomous Access Points Converted to Lightweight Mode 126

Reverting from Lightweight Mode to Autonomous Mode 126

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

viii

Contents

Using DHCP Option 43 and DHCP Option 60 126

How Converted Access Points Send Crash Information to the Device 127

Uploading Memory Core Dumps from Converted Access Points 127

Displaying MAC Addresses for Converted Access Points 127

Configuring a Static IP Address for a Lightweight Access Point 127

How to Convert a Lightweight Access Point Back to an Autonomous Access Point 128

Converting a Lightweight Access Point Back to an Autonomous Access Point (CLI) 128

Converting a Lightweight Access Point Back to an Autonomous Access Point (Using the Mode

Button and a TFTP Server) 128

Authorizing Access Points 129

Authorizing Access Points Using Local Database (CLI) 129

Authorizing Access Points Using RADIUS Server (CLI) 130

Disabling the Reset Button on Converted Access Points (CLI) 132

Monitoring the AP Crash Log Information 132

How to Configure a Static IP Address on an Access Point 133

Configuring a Static IP Address on an Access Point (CLI) 133

Configuring a Static IP Address on an Access Point (GUI) 134

Recovering the Access Point Using the TFTP Recovery Procedure 135

Configuration Examples for Converting Autonomous Access Points to Lightweight Mode 135

Example: Displaying the IP Address Configuration for Access Points 135

Example: Displaying Access Point Crash File Information 135

AP MAC Authorization 136

Configuring AP MAC Authorization (CLI) 136

Ethernet VLAN Tagging on Access Points 137

Information About Ethernet VLAN Tagging on Access Points 137

Configuring Ethernet VLAN Tagging on Access Points (GUI) 137

Configuring Ethernet VLAN Tagging on Access Points (CLI) 137

AP Crash File Upload 139

CHAPTER 15

AP Crash File Upload 139

Configuring AP Crash File Upload (CLI) 140

Access Point Plug-n-Play 141

CHAPTER 16

Overview of Access Point Plug-n-Play 141

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

ix

Contents

Provisioning AP from PnP Server 141

Verifying AP Tag Configuration 142

802.11 Parameters for Cisco Access Points 143

CHAPTER 17

2.4-GHz Radio Support 143

Configuring 2.4-GHz Radio Support for the Specified Slot Number 143

5-GHz Radio Support 145

Configuring 5-GHz Radio Support for the Specified Slot Number 145

Information About Dual-Band Radio Support 147

Configuring Default XOR Radio Support 147

Configuring XOR Radio Support for the Specified Slot Number (GUI) 150

Configuring XOR Radio Support for the Specified Slot Number 150

Receiver Only Dual-Band Radio Support 152

Information About Receiver Only Dual-Band Radio Support 152

Configuring Receiver Only Dual-Band Parameters for Access Points 152

Enabling CleanAir with Receiver Only Dual-Band Radio on a Cisco Access Point (GUI) 152

Enabling CleanAir with Receiver Only Dual-Band Radio on a Cisco Access Point 152

Disabling Receiver Only Dual-Band Radio on a Cisco Access Point (GUI) 153

Disabling Receiver Only Dual-Band Radio on a Cisco Access Point 153

Configuring Client Steering (CLI) 153

Verifying Cisco Access Points with Dual-Band Radios 155

802.1x Support 157

CHAPTER 18

Introduction to the 802.1x Authentication 157

EAP-FAST Protocol 157

EAP-TLS/EAP-PEAP Protocol 158

Limitations of the 802.1x Authentication 158

Topology - Overview 158

Configuring 802.1x Authentication Type and LSC AP Authentication Type (GUI) 159

Configuring 802.1x Authentication Type and LSC AP Authentication Type 159

Configuring the 802.1x Username and Password (GUI) 160

Configuring the 802.1x Username and Password (CLI) 161

Enabling 802.1x on the Switch Port 162

Verifying 802.1x on the Switch Port 163

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

x

Contents

Verifying the Authentication Type 164

Configuring CAPWAP Link Aggregation Support 165

CHAPTER 19

Information About Link Aggregation 165

Information About CAPWAP LAG Support 165

Restrictions for CAPWAP LAG Support 166

Enabling CAPWAP LAG Support on Controller (GUI) 166

Enabling CAPWAP LAG Support on Controller 166

Enabling CAPWAP LAG Globally on Controller 167

Disabling CAPWAP LAG Globally on Controller 167

Enabling CAPWAP LAG for an AP Profile (GUI) 167

Enabling CAPWAP LAG for an AP Profile 168

Disabling CAPWAP LAG for an AP Profile 168

Disabling CAPWAP LAG Support on Controller 169

Verifying CAPWAP LAG Support Configurations 169

Configuring DHCP and NAT Functionality on Root Access Point 171

CHAPTER 20

Information About DHCP and NAT Functionality on Root AP (RAP) 171

Configuring DHCP Server on Root Access Point (RAP) 172

Verifying DHCP Server for Root AP Configuration 172

OFDMA Support for 11ax Access Points 173

CHAPTER 21

Information About OFDMA Support for 11ax Access Points 173

Supported Modes on 11ax Access Points 173

Configuring 11AX (GUI) 174

Configuring Channel Width 174

Configuring 802.11ax Radio Parameters (GUI) 175

Configuring 802.11ax Radio Parameters (CLI) 175

Setting up the 802.11ax Radio Parameters 176

Configuring OFDMA on a WLAN 177

Verifying Channel Width 178

Verifying Client Details 179

Verifying Radio Configuration 180

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

xi

Contents

Radio Resource Management 183

PART III

Radio Resource Management 185

CHAPTER 22

Information About Radio Resource Management 185

Radio Resource Monitoring 186

Information About RF Groups 186

RF Group Leader 187

RF Group Name 189

Rogue Access Point Detection in RF Groups 190

Transmit Power Control 190

Overriding the TPC Algorithm with Minimum and Maximum Transmit Power Settings 190

Dynamic Channel Assignment 191

Dynamic Bandwidth Selection 192

Coverage Hole Detection and Correction 193

Restrictions for Radio Resource Management 193

How to Configure RRM 194

Configuring Neighbor Discovery Type (GUI) 194

Configuring Neighbor Discovery Type (CLI) 194

Configuring RF Groups 194

Configuring RF Group Selection Mode (GUI) 195

Configuring RF Group Selection Mode (CLI) 195

Configuring an RF Group Name (CLI) 196

Configuring Members in an 802.11 Static RF Group (GUI) 196

Configuring Members in an 802.11 Static RF Group (CLI) 197

Configuring Transmit Power Control 197

Configuring Transmit Power (GUI) 197

Configuring the Tx-Power Control Threshold (CLI) 198

Configuring the Tx-Power Level (CLI) 198

Configuring 802.11 RRM Parameters 199

Configuring Advanced 802.11 Channel Assignment Parameters (GUI) 199

Configuring Advanced 802.11 Channel Assignment Parameters (CLI) 200

Configuring 802.11 Coverage Hole Detection (GUI) 203

Configuring 802.11 Coverage Hole Detection (CLI) 203

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

xii

Contents

Configuring 802.11 Event Logging (CLI) 204

Configuring 802.11 Statistics Monitoring (GUI) 205

Configuring 802.11 Statistics Monitoring (CLI) 206

Configuring the 802.11 Performance Profile (GUI) 207

Configuring the 802.11 Performance Profile (CLI) 207

Configuring Advanced 802.11 RRM 208

Enabling Channel Assignment (GUI) 208

Enabling Channel Assignment (CLI) 209

Restarting DCA Operation 209

Updating Power Assignment Parameters (GUI) 209

Updating Power Assignment Parameters (CLI) 210

Configuring Rogue Access Point Detection in RF Groups 210

Configuring Rogue Access Point Detection in RF Groups (CLI) 210

Monitoring RRM Parameters and RF Group Status 211

Monitoring RRM Parameters 211

Verifying RF Group Status (CLI) 212

Examples: RF Group Configuration 213

Information About ED-RRM 213

Configuring ED-RRM on the Cisco Wireless LAN Controller (CLI) 213

Coverage Hole Detection 217

CHAPTER 23

Coverage Hole Detection and Correction 217

Configuring Coverage Hole Detection (GUI) 217

Configuring Coverage Hole Detection (CLI) 218

Configuring CHD for RF Tag Profile (GUI) 219

Configuring CHD for RF Tag Profile (CLI) 220

Optimized Roaming 223

CHAPTER 24

Optimized Roaming 223

Restrictions for Optimized Roaming 223

Configuring Optimized Roaming (GUI) 224

Configuring Optimized Roaming (CLI) 224

Cisco Flexible Radio Assignment 227

CHAPTER 25

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

xiii

Contents

Information About Flexible Radio Assignment 227

Benefits of the FRA Feature 228

Configuring an FRA Radio (CLI) 228

Configuring an FRA Radio (GUI) 230

XOR Radio Support 231

CHAPTER 26

Information About Dual-Band Radio Support 231

Configuring Default XOR Radio Support 232

Configuring XOR Radio Support for the Specified Slot Number (GUI) 234

Configuring XOR Radio Support for the Specified Slot Number 234

Cisco Receiver Start of Packet 237

CHAPTER 27

Information About Receiver Start of Packet Detection Threshold 237

Restrictions for Rx SOP 237

Configuring Rx SOP (CLI) 238

Customizing RF Profile (CLI) 238

Client Limit 241

CHAPTER 28

Information About Client Limit 241

Configuring Client Limit (GUI) 241

Configuring Client Limit (CLI) 241

IP Theft 243

CHAPTER 29

Introduction to IP Theft 243

Configuring IP Theft (GUI) 244

Configuring IP Theft 244

Configuring the IP Theft Exclusion Timer 244

Adding Static Entries for Wired Hosts 245

Verifying IP Theft Configuration 246

Unscheduled Automatic Power Save Delivery 249

CHAPTER 30

Information About Unscheduled Automatic Power Save Delivery 249

Viewing Unscheduled Automatic Power Save Delivery (CLI) 249

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

xiv

Contents

Enabling USB Port on Access Points 251

CHAPTER 31

USB Port as Power Source for Access Points 251

Configuring an AP Profile (CLI) 252

Configuring USB Settings for an Access Point (CLI) 252

Monitoring USB Configurations for Access Points (CLI) 253

Dynamic Frequency Selection 255

CHAPTER 32

Information About Dynamic Frequency Selection 255

Configuring Dynamic Frequency Selection (GUI) 255

Configuring Dynamic Frequency Selection 255

Verifying DFS 256

Network Management 257

PART IV

AP Packet Capture 259

CHAPTER 33

Introduction to AP Client Packet Capture 259

Enabling Packet Capture (GUI) 259

Enabling Packet Capture (CLI) 260

Create AP Packet Capture Profile and Map to an AP Join Profile (GUI) 260

Create AP Packet Capture Profile and Map to an AP Join Profile 260

Start or Stop Packet Capture 261

DHCP Option82 263

CHAPTER 34

Information About DHCP Option 82 263

Configuring DHCP Option 82 Global Interface 264

Configuring DHCP Option 82 Globally Through Server Override (CLI) 264

Configuring DHCP Option 82 Globally Through Different SVIs (GUI) 265

Configuring DHCP Option 82 Globally Through Different SVIs (CLI) 265

Configuring DHCP Option 82 Format 266

Configuring DHCP Option82 Through a VLAN Interface 267

Configuring DHCP Option 82 Through Option-Insert Command (CLI) 267

Configuring DHCP Option 82 Through the server-ID-override Command (CLI) 268

Configuring DHCP Option 82 Through a Subscriber-ID (CLI) 269

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

xv

Contents

Configuring DHCP Option 82 Through server-ID-override and subscriber-ID Commands (CLI)

270

Configuring DHCP Option 82 Through Different SVIs (CLI) 271

RADIUS Realm 273

CHAPTER 35

Information About RADIUS Realm 273

Enabling RADIUS Realm 274

Configuring Realm to Match the RADIUS Server for Authentication and Accounting 274

Configuring the AAA Policy for a WLAN 275

Verifying the RADIUS-Realm Configuration 277

Cisco StadiumVision 279

CHAPTER 36

Cisco StadiumVision Overview 279

Configure Wireless Controller Parameters for Cisco StadiumVision (GUI) 280

Configure Wireless Controller Parameters for Cisco StadiumVision (CLI) 280

Verify StadiumVision Configurations 281

Persistent SSID Broadcast 283

CHAPTER 37

Persistent SSID Broadcast 283

Configuring Persistent SSID Broadcast 283

Verifying Persistent SSID Broadcast 284

Network Monitoring 285

CHAPTER 38

Network Monitoring 285

Status Information Received Synchronously - Configuration Examples 285

Alarm and Event Information Received Asynchronously - Configuration Examples 287

Creating a Lobby Ambassador Account 289

CHAPTER 39

Information About Lobby Ambassador Account 289

Creating a Lobby Ambassador User Account (GUI) 289

Creating a User Account 290

Logging In Using the Lobby Account 291

Creating a Lobby Ambassador Account (CLI) 291

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

xvi

Contents

Configuring Guest User Accounts 293

CHAPTER 40

Information About Creating Guest User Accounts 293

Creating a Guest User Account (GUI) 293

Creating a Guest User Account (CLI) 294

Verifying Guest User Account 295

Assigning Username to Guest Users in a WLAN (CLI) 296

System Management 297

PART V

Network Mobility Services Protocol 299

CHAPTER 41

Information About Network Mobility Services Protocol 299

Radioactive Tracing for NMSP 300

Enabling NMSP on Premises Services 300

Modifying the NMSP Notification Interval for Clients, RFID Tags, and Rogues 301

Modifying the NMSP Notification Threshold for Clients, RFID Tags, and Rogues 301

Configuring NMSP Strong Cipher 302

Verifying NMSP Settings 302

Examples: NMSP Settings Configuration 305

NMSP by AP Groups with Subscription List from CMX 305

Verifying NMSP by AP Groups with Subscription List from CMX 305

Probe RSSI Location 307

Configuring Probe RSSI 307

RFID Tag Support 309

Configuring RFID Tag Support 309

Verifying RFID Tag Support 310

Application Visibility and Control 313

CHAPTER 42

Information About Application Visibility and Control 313

Prerequisites for Application Visibility and Control 315

Restrictions for Application Visibility and Control 315

AVC Configuration Overview 315

Create a Flow Monitor 316

Create a Flow Record 317

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

xvii

Contents

Create a Flow Exporter 319

Configure a WLAN for AVC 320

Configuring a Policy Tag 321

Attaching a Policy Profile to a WLAN Interface (GUI) 321

Attaching a Policy Profile to a WLAN Interface (CLI) 322

Attaching a Policy Profile to an AP 323

Verify the AVC Configuration 323

Default DSCP on AVC 324

Configuring Default DSCP for AVC Profile (GUI) 324

Configuring Default DSCP for AVC Profile 325

Creating Class Map 325

Creating Policy Map 326

AVC-Based Selective Reanchoring 327

Restrictions for AVC-Based Selective Reanchoring 327

Configuring the Flow Exporter 327

Configuring the Flow Monitor 328

Configuring the AVC Reanchoring Profile 329

Configuring the Wireless WLAN Profile Policy 329

Verifying AVC Reanchoring 330

Cisco Hyperlocation 335

CHAPTER 43

Information About Cisco Hyperlocation 335

Restrictions on Cisco Hyperlocation 337

Configuring Cisco Hyperlocation (GUI) 338

Configuring Cisco Hyperlocation (CLI) 338

Verifying Cisco Hyperlocation 339

Configuring Hyperlocation BLE Beacon Parameters for AP (GUI) 342

Configuring Hyperlocation BLE Beacon Parameters (CLI) 343

Verifying Hyperlocation BLE Beacon Configuration 343

Configuring Hyperlocation BLE Beacon Parameters for AP (CLI) 344

Verifying Hyperlocation BLE Beacon Configuration for AP 344

BLE Beacons in CiscoWave 2 Access Points 347

CHAPTER 44

Managing BLE Beacons in Cisco Wave 2 and 802.11ax Access Points 347

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

xviii

Contents

Monitoring BLE Management 349

Cisco DNA Spaces 351

CHAPTER 45

Configuring Cisco DNA Spaces 351

Verifying Cisco DNA Spaces Configuration 352

EDCA Parameters 355

CHAPTER 46

Enhanced Distributed Channel Access Parameters 355

Configuring EDCA Parameters (GUI) 355

Configuring EDCA Parameters (CLI) 356

802.11 parameters and Band Selection 359

CHAPTER 47

Information About Configuring Band Selection, 802.11 Bands, and Parameters 359

Band Select 359

802.11 Bands 360

802.11n Parameters 360

802.11h Parameters 360

Restrictions for Band Selection, 802.11 Bands, and Parameters 361

How to Configure 802.11 Bands and Parameters 361

Configuring Band Selection (GUI) 361

Configuring Band Selection (CLI) 362

Configuring the 802.11 Bands (GUI) 363

Configuring the 802.11 Bands (CLI) 364

Configuring a Band-Select RF Profile (GUI) 366

Configuring a Band-Select RF Profile (CLI) 367

Configuring 802.11n Parameters (GUI) 367

Configuring 802.11n Parameters (CLI) 368

Configuring 802.11h Parameters (CLI) 370

Monitoring Configuration Settings for Band Selection, 802.11 Bands, and Parameters 371

Verifying Configuration Settings Using Band Selection and 802.11 Bands Commands 371

Example: Viewing the Configuration Settings for the 5-GHz Band 371

Example: Viewing the Configuration Settings for the 2.4-GHz Band 373

Example: Viewing the status of 802.11h Parameters 374

Example: Verifying the Band-Selection Settings 375

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

xix

Contents

Configuration Examples for Band Selection, 802.11 Bands, and Parameters 376

Examples: Band Selection Configuration 376

Examples: 802.11 Bands Configuration 377

Examples: 802.11n Configuration 377

Examples: 802.11h Configuration 378

Predownloading an Image to an Access Point 379

CHAPTER 48

Information About Predownloading an Image to an Access Point 379

Restrictions for Predownloading an Image to an Access Point 379

Predownloading an Image to Access Points (CLI) 380

Monitoring the Access Point Predownload Process 381

Efficient Image Upgrade 383

CHAPTER 49

Efficient Image Upgrade 383

Enable Pre-Download (GUI) 383

Enable Pre-Download (CLI) 384

Configuring a Site Tag (CLI) 384

Attaching Policy Tag and Site Tag to an AP (CLI) 385

Trigger Predownload to a Site Tag 386

N+1 Hitless Rolling AP Upgrade 389

CHAPTER 50

N+1 Hitless Rolling AP Upgrade 389

Configuring Hitless Upgrade 390

Verifying Hitless Upgrade 391

Wireless Sub-Package for Switch 393

CHAPTER 51

Introduction to Wireless Sub-package 393

Booting in Install Mode 394

Installing Sub-Package in a Single Step (GUI) 395

Installing Sub-Package in a Single Step 395

Multi-step Installation of Sub-Package 396

Installing on a Stack 397

Upgrading to a Newer Version of Wireless Package 397

Deactivating the Wireless Package 397

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

xx

Contents

Page is loading ...

Cisco Catalyst 9800-40 Wireless Controller Configuration Guide

This manual is also suitable for

Cisco Catalyst 9800-40 Wireless Controller Configuration Guide

Related papers

Other documents