Catalyst 9800-L Wireless Controller

Cisco Catalyst 9800-L Wireless Controller , Catalyst 9800 Series Wireless Controllers, Catalyst 9800-40 Wireless Controller , Catalyst 9800-80 Wireless Controller , Catalyst 9800-L-C Wireless Controller , Catalyst 9800-L-F Wireless Controller Configuration Guide

  • Hello! I am an AI chatbot trained to assist you with the Cisco Catalyst 9800-L Wireless Controller Configuration Guide. I’ve already reviewed the document and can help you find the information you need or explain it in simple terms. Just ask your questions, and providing more details will help me assist you more effectively!
Cisco Catalyst 9800 Series Wireless Controller Software Configuration
Guide, Cisco IOS XE Gibraltar 16.12.x
First Published: 2019-07-31
Last Modified: 2019-07-31
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of
the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.
Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:
https://www.cisco.com/c/en/us/about/legal/trademarks.html. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a
partnership relationship between Cisco and any other company. (1721R)
©2019 Cisco Systems, Inc. All rights reserved.
CONTENTS
Preface lix
PREFACE
Document Conventions lix
Related Documentation lxi
Obtaining Documentation and Submitting a Service Request lxi
Overview of Cisco 9800 Series Wireless Controllers 1
CHAPTER 1
Elements of the New Configuration Model 1
Configuration Workflow 2
Initial Setup 3
System Configuration 5
PART I
System Configuration 7
CHAPTER 2
Information About New Configuration Model 7
Configuring a Wireless Profile Policy (GUI) 9
Configuring a Wireless Profile Policy (CLI) 10
Configuring a Flex Profile (GUI) 11
Configuring a Flex Profile 12
Configuring an AP Profile (GUI) 12
Configuring an AP Profile (CLI) 17
Configuring User for AP Management (CLI) 18
Setting a Private Configuration Key for Password Encryption 18
Configuring an RF Profile (GUI) 19
Configuring an RF Profile (CLI) 19
Configuring a Site Tag (GUI) 20
Configuring a Site Tag (CLI) 21
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x
iii
Configuring Policy Tag (GUI) 22
Configuring a Policy Tag (CLI) 22
Configuring Wireless RF Tag (GUI) 23
Configuring Wireless RF Tag (CLI) 24
Attaching a Policy Tag and Site Tag to an AP (GUI) 25
Attaching Policy Tag and Site Tag to an AP (CLI) 25
AP Filter 26
Introduction to AP Filter 26
Set Tag Priority (GUI) 27
Set Tag Priority 27
Create an AP Filter (GUI) 28
Create an AP Filter (CLI) 28
Set Up and Update Filter Priority (GUI) 29
Set Up and Update Filter Priority 29
Verify AP Filter Configuration 29
Configuring Access Point for Location Configuration 30
Information About Location Configuration 30
Prerequisite for Location Configuration 31
Configuring a Location for an Access Point (GUI) 31
Configuring a Location for an Access Point (CLI) 31
Adding an Access Point to the Location (GUI) 32
Adding an Access Point to the Location (CLI) 33
Configuring SNMP in Location Configuration 33
SNMP MIB 33
Verifying Location Configuration 34
Verifying Location Statistics 34
Wireless Management Interface (WMI) 37
CHAPTER 3
Information About Wireless Management Interface 37
Recommendations for Wireless Management Interface 38
Configuring your Controller with Wireless Management Interface (CLI) 39
Verifying Wireless Management Interface Settings 40
Information About Network Address Translation (NAT) 41
Information About CAPWAP Discovery 41
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x
iv
Contents
Configuring Wireless Management Interface with a NAT Public IP (CLI) 42
Configuring CAPWAP Discovery to Respond Only with Public or Private IP (CLI) 43
Configuring the Controller to Respond only with a Public IP (CLI) 43
Configuring the Controller to Respond only with a Private IP (CLI) 43
Verifying NAT Settings 44
BIOS Protection 45
CHAPTER 4
BIOS Protection on the Controller 45
BIOS or ROMMON Upgrade with BIOS Protection 45
Upgrading BIOS 46
Smart Licensing 47
CHAPTER 5
Information About Cisco Smart Licensing 47
Creating a Smart Account 49
Using Smart Licensing 50
Reregister a License (GUI) 50
Using Specified License Reservation (SLR) 50
Enabling Smart Software Licensing 51
Enabling Smart Call Home Reporting 52
Configuring AIR License Level (GUI) 52
Configuring AIR License Level (CLI) 53
Configuring AIR Network Essentials License Level 53
Configuring AIR Network Advantage License Level 54
Verifying Smart Licensing Configurations 54
Best Practices 57
CHAPTER 6
Introduction 57
Lightweight Access Points 59
PART II
Country Codes 61
CHAPTER 7
Information About Country Codes 61
Prerequisites for Configuring Country Codes 61
Configuring Country Codes (GUI) 62
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x
v
Contents
How to Configure Country Codes 62
Configuration Examples for Configuring Country Codes 64
Viewing Channel List for Country Codes 64
Sniffer Mode 67
CHAPTER 8
Information about Sniffer 67
Prerequisites for Sniffer 67
Restrictions on Sniffer 67
How to Configure Sniffer 68
Configuring an Access Point as Sniffer (GUI) 68
Configuring an Access Point as Sniffer (CLI) 68
Enabling or Disabling Sniffing on the Access Point (GUI) 69
Enabling or Disabling Sniffing on the Access Point (CLI) 69
Verifying Sniffer Configurations 70
Examples for Sniffer Configurations and Monitoring 70
Monitor Mode 71
CHAPTER 9
Introduction to Monitor Mode 71
Enable Monitor Mode (GUI) 71
Enable Monitor Mode (CLI) 72
Sensor Mode 73
CHAPTER 10
Introduction to Sensor Mode 73
Enabling Sensor Mode 73
Verifying Sensor Mode Configuration 76
AP Priority 77
CHAPTER 11
Failover Priority for Access Points 77
Setting AP Priority (GUI) 77
Setting AP Priority 78
FlexConnect 79
CHAPTER 12
Information About FlexConnect 79
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x
vi
Contents
FlexConnect Authentication Process 81
Guidelines and Restrictions for FlexConnect 84
Configuring a Site Tag 86
Configuring a Policy Tag (CLI) 87
Attaching a Policy Tag and a Site Tag to an AP (GUI) 88
Attaching Policy Tag and Site Tag to an AP (CLI) 89
Linking an ACL Policy to the Defined ACL (GUI) 90
Applying ACLs on FlexConnect 90
Configuring FlexConnect 91
Configuring a Switch at a Remote Site 91
Configuring the Controller for FlexConnect 92
Configuring Local Switching in FlexConnect Mode (GUI) 93
Configuring Local Switching in FlexConnect Mode (CLI) 93
Configuring Central Switching in FlexConnect Mode (GUI) 94
Configuring Central Switching in FlexConnect Mode 94
Configuring an Access Point for FlexConnect 95
Configuring an Access Point for Local Authentication on a WLAN (GUI) 95
Configuring an Access Point for Local Authentication on a WLAN (CLI) 95
Connecting Client Devices to WLANs 95
Configuring FlexConnect Ethernet Fallback 96
Information About FlexConnect Ethernet Fallback 96
Configuring FlexConnect Ethernet Fallback 96
Flex AP Local Authentication (GUI) 97
Flex AP Local Authentication (CLI) 98
Flex AP Local Authentication with External Radius Server 100
Configuration Example: FlexConnect with Central and Local Authentication 103
NAT-PAT for FlexConnect 103
Configuring NAT-PAT for a WLAN or a Remote LAN 103
Creating a WLAN 103
Configuring a Wireless Profile Policy and NAT-PAT (GUI) 104
Configuring a Wireless Profile Policy and NAT-PAT 104
Mapping a WLAN to a Policy Profile 105
Configuring a Site Tag 106
Attaching a Policy Tag and a Site Tag to an Access Point (GUI) 106
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x
vii
Contents
Attaching a Policy Tag and a Site Tag to an Access Point 107
Split Tunneling for FlexConnect 107
Configuring Split Tunneling for a WLAN or Remote LAN 108
Defining an Access Control List for Split Tunneling (GUI) 108
Defining an Access Control List for Split Tunneling 108
Linking an ACL Policy to the Defined ACL 109
Creating a WLAN 110
Configuring a Wireless Profile Policy and a Split MAC ACL Name (GUI) 110
Configuring a Wireless Profile Policy and a Split MAC ACL Name 111
Mapping a WLAN to a Policy Profile (GUI) 112
Mapping WLAN to a Policy Profile 112
Configuring a Site Tag 113
Attaching a Policy Tag and Site Tag to an Access Point 113
VLAN-based Central Switching for FlexConnect 114
Configuring VLAN-based Central Switching (GUI) 114
Configuring VLAN-based Central Switching (CLI) 115
OfficeExtend Access Points for FlexConnect 116
Configuring OfficeExtend Access Points 116
Disabling OfficeExtend Access Point 117
Clearing Personal SSID from an OfficeExtend Access Point 118
Example: Viewing OfficeExtend Configuration 118
Proxy ARP 119
Enabling Proxy ARP for FlexConnect APs (GUI) 119
Enabling Proxy ARP for FlexConnect APs 119
Data DTLS 121
CHAPTER 13
Information About Data Datagram Transport Layer Security 121
Configuring Data DTLS (GUI) 121
Configuring Data DTLS (CLI) 122
Converting Autonomous Access Points to Lightweight Mode 125
CHAPTER 14
Guidelines for Converting Autonomous Access Points to Lightweight Mode 125
Information About Autonomous Access Points Converted to Lightweight Mode 126
Reverting from Lightweight Mode to Autonomous Mode 126
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x
viii
Contents
Using DHCP Option 43 and DHCP Option 60 126
How Converted Access Points Send Crash Information to the Device 127
Uploading Memory Core Dumps from Converted Access Points 127
Displaying MAC Addresses for Converted Access Points 127
Configuring a Static IP Address for a Lightweight Access Point 127
How to Convert a Lightweight Access Point Back to an Autonomous Access Point 128
Converting a Lightweight Access Point Back to an Autonomous Access Point (CLI) 128
Converting a Lightweight Access Point Back to an Autonomous Access Point (Using the Mode
Button and a TFTP Server) 128
Authorizing Access Points 129
Authorizing Access Points Using Local Database (CLI) 129
Authorizing Access Points Using RADIUS Server (CLI) 130
Disabling the Reset Button on Converted Access Points (CLI) 132
Monitoring the AP Crash Log Information 132
How to Configure a Static IP Address on an Access Point 133
Configuring a Static IP Address on an Access Point (CLI) 133
Configuring a Static IP Address on an Access Point (GUI) 134
Recovering the Access Point Using the TFTP Recovery Procedure 135
Configuration Examples for Converting Autonomous Access Points to Lightweight Mode 135
Example: Displaying the IP Address Configuration for Access Points 135
Example: Displaying Access Point Crash File Information 135
AP MAC Authorization 136
Configuring AP MAC Authorization (CLI) 136
Ethernet VLAN Tagging on Access Points 137
Information About Ethernet VLAN Tagging on Access Points 137
Configuring Ethernet VLAN Tagging on Access Points (GUI) 137
Configuring Ethernet VLAN Tagging on Access Points (CLI) 137
AP Crash File Upload 139
CHAPTER 15
AP Crash File Upload 139
Configuring AP Crash File Upload (CLI) 140
Access Point Plug-n-Play 141
CHAPTER 16
Overview of Access Point Plug-n-Play 141
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x
ix
Contents
Provisioning AP from PnP Server 141
Verifying AP Tag Configuration 142
802.11 Parameters for Cisco Access Points 143
CHAPTER 17
2.4-GHz Radio Support 143
Configuring 2.4-GHz Radio Support for the Specified Slot Number 143
5-GHz Radio Support 145
Configuring 5-GHz Radio Support for the Specified Slot Number 145
Information About Dual-Band Radio Support 147
Configuring Default XOR Radio Support 147
Configuring XOR Radio Support for the Specified Slot Number (GUI) 150
Configuring XOR Radio Support for the Specified Slot Number 150
Receiver Only Dual-Band Radio Support 152
Information About Receiver Only Dual-Band Radio Support 152
Configuring Receiver Only Dual-Band Parameters for Access Points 152
Enabling CleanAir with Receiver Only Dual-Band Radio on a Cisco Access Point (GUI) 152
Enabling CleanAir with Receiver Only Dual-Band Radio on a Cisco Access Point 152
Disabling Receiver Only Dual-Band Radio on a Cisco Access Point (GUI) 153
Disabling Receiver Only Dual-Band Radio on a Cisco Access Point 153
Configuring Client Steering (CLI) 153
Verifying Cisco Access Points with Dual-Band Radios 155
802.1x Support 157
CHAPTER 18
Introduction to the 802.1x Authentication 157
EAP-FAST Protocol 157
EAP-TLS/EAP-PEAP Protocol 158
Limitations of the 802.1x Authentication 158
Topology - Overview 158
Configuring 802.1x Authentication Type and LSC AP Authentication Type (GUI) 159
Configuring 802.1x Authentication Type and LSC AP Authentication Type 159
Configuring the 802.1x Username and Password (GUI) 160
Configuring the 802.1x Username and Password (CLI) 161
Enabling 802.1x on the Switch Port 162
Verifying 802.1x on the Switch Port 163
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x
x
Contents
Verifying the Authentication Type 164
Configuring CAPWAP Link Aggregation Support 165
CHAPTER 19
Information About Link Aggregation 165
Information About CAPWAP LAG Support 165
Restrictions for CAPWAP LAG Support 166
Enabling CAPWAP LAG Support on Controller (GUI) 166
Enabling CAPWAP LAG Support on Controller 166
Enabling CAPWAP LAG Globally on Controller 167
Disabling CAPWAP LAG Globally on Controller 167
Enabling CAPWAP LAG for an AP Profile (GUI) 167
Enabling CAPWAP LAG for an AP Profile 168
Disabling CAPWAP LAG for an AP Profile 168
Disabling CAPWAP LAG Support on Controller 169
Verifying CAPWAP LAG Support Configurations 169
Configuring DHCP and NAT Functionality on Root Access Point 171
CHAPTER 20
Information About DHCP and NAT Functionality on Root AP (RAP) 171
Configuring DHCP Server on Root Access Point (RAP) 172
Verifying DHCP Server for Root AP Configuration 172
OFDMA Support for 11ax Access Points 173
CHAPTER 21
Information About OFDMA Support for 11ax Access Points 173
Supported Modes on 11ax Access Points 173
Configuring 11AX (GUI) 174
Configuring Channel Width 174
Configuring 802.11ax Radio Parameters (GUI) 175
Configuring 802.11ax Radio Parameters (CLI) 175
Setting up the 802.11ax Radio Parameters 176
Configuring OFDMA on a WLAN 177
Verifying Channel Width 178
Verifying Client Details 179
Verifying Radio Configuration 180
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x
xi
Contents
Radio Resource Management 183
PART III
Radio Resource Management 185
CHAPTER 22
Information About Radio Resource Management 185
Radio Resource Monitoring 186
Information About RF Groups 186
RF Group Leader 187
RF Group Name 189
Rogue Access Point Detection in RF Groups 190
Transmit Power Control 190
Overriding the TPC Algorithm with Minimum and Maximum Transmit Power Settings 190
Dynamic Channel Assignment 191
Dynamic Bandwidth Selection 192
Coverage Hole Detection and Correction 193
Restrictions for Radio Resource Management 193
How to Configure RRM 194
Configuring Neighbor Discovery Type (GUI) 194
Configuring Neighbor Discovery Type (CLI) 194
Configuring RF Groups 194
Configuring RF Group Selection Mode (GUI) 195
Configuring RF Group Selection Mode (CLI) 195
Configuring an RF Group Name (CLI) 196
Configuring Members in an 802.11 Static RF Group (GUI) 196
Configuring Members in an 802.11 Static RF Group (CLI) 197
Configuring Transmit Power Control 197
Configuring Transmit Power (GUI) 197
Configuring the Tx-Power Control Threshold (CLI) 198
Configuring the Tx-Power Level (CLI) 198
Configuring 802.11 RRM Parameters 199
Configuring Advanced 802.11 Channel Assignment Parameters (GUI) 199
Configuring Advanced 802.11 Channel Assignment Parameters (CLI) 200
Configuring 802.11 Coverage Hole Detection (GUI) 203
Configuring 802.11 Coverage Hole Detection (CLI) 203
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x
xii
Contents
Configuring 802.11 Event Logging (CLI) 204
Configuring 802.11 Statistics Monitoring (GUI) 205
Configuring 802.11 Statistics Monitoring (CLI) 206
Configuring the 802.11 Performance Profile (GUI) 207
Configuring the 802.11 Performance Profile (CLI) 207
Configuring Advanced 802.11 RRM 208
Enabling Channel Assignment (GUI) 208
Enabling Channel Assignment (CLI) 209
Restarting DCA Operation 209
Updating Power Assignment Parameters (GUI) 209
Updating Power Assignment Parameters (CLI) 210
Configuring Rogue Access Point Detection in RF Groups 210
Configuring Rogue Access Point Detection in RF Groups (CLI) 210
Monitoring RRM Parameters and RF Group Status 211
Monitoring RRM Parameters 211
Verifying RF Group Status (CLI) 212
Examples: RF Group Configuration 213
Information About ED-RRM 213
Configuring ED-RRM on the Cisco Wireless LAN Controller (CLI) 213
Coverage Hole Detection 217
CHAPTER 23
Coverage Hole Detection and Correction 217
Configuring Coverage Hole Detection (GUI) 217
Configuring Coverage Hole Detection (CLI) 218
Configuring CHD for RF Tag Profile (GUI) 219
Configuring CHD for RF Tag Profile (CLI) 220
Optimized Roaming 223
CHAPTER 24
Optimized Roaming 223
Restrictions for Optimized Roaming 223
Configuring Optimized Roaming (GUI) 224
Configuring Optimized Roaming (CLI) 224
Cisco Flexible Radio Assignment 227
CHAPTER 25
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x
xiii
Contents
Information About Flexible Radio Assignment 227
Benefits of the FRA Feature 228
Configuring an FRA Radio (CLI) 228
Configuring an FRA Radio (GUI) 230
XOR Radio Support 231
CHAPTER 26
Information About Dual-Band Radio Support 231
Configuring Default XOR Radio Support 232
Configuring XOR Radio Support for the Specified Slot Number (GUI) 234
Configuring XOR Radio Support for the Specified Slot Number 234
Cisco Receiver Start of Packet 237
CHAPTER 27
Information About Receiver Start of Packet Detection Threshold 237
Restrictions for Rx SOP 237
Configuring Rx SOP (CLI) 238
Customizing RF Profile (CLI) 238
Client Limit 241
CHAPTER 28
Information About Client Limit 241
Configuring Client Limit (GUI) 241
Configuring Client Limit (CLI) 241
IP Theft 243
CHAPTER 29
Introduction to IP Theft 243
Configuring IP Theft (GUI) 244
Configuring IP Theft 244
Configuring the IP Theft Exclusion Timer 244
Adding Static Entries for Wired Hosts 245
Verifying IP Theft Configuration 246
Unscheduled Automatic Power Save Delivery 249
CHAPTER 30
Information About Unscheduled Automatic Power Save Delivery 249
Viewing Unscheduled Automatic Power Save Delivery (CLI) 249
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x
xiv
Contents
Enabling USB Port on Access Points 251
CHAPTER 31
USB Port as Power Source for Access Points 251
Configuring an AP Profile (CLI) 252
Configuring USB Settings for an Access Point (CLI) 252
Monitoring USB Configurations for Access Points (CLI) 253
Dynamic Frequency Selection 255
CHAPTER 32
Information About Dynamic Frequency Selection 255
Configuring Dynamic Frequency Selection (GUI) 255
Configuring Dynamic Frequency Selection 255
Verifying DFS 256
Network Management 257
PART IV
AP Packet Capture 259
CHAPTER 33
Introduction to AP Client Packet Capture 259
Enabling Packet Capture (GUI) 259
Enabling Packet Capture (CLI) 260
Create AP Packet Capture Profile and Map to an AP Join Profile (GUI) 260
Create AP Packet Capture Profile and Map to an AP Join Profile 260
Start or Stop Packet Capture 261
DHCP Option82 263
CHAPTER 34
Information About DHCP Option 82 263
Configuring DHCP Option 82 Global Interface 264
Configuring DHCP Option 82 Globally Through Server Override (CLI) 264
Configuring DHCP Option 82 Globally Through Different SVIs (GUI) 265
Configuring DHCP Option 82 Globally Through Different SVIs (CLI) 265
Configuring DHCP Option 82 Format 266
Configuring DHCP Option82 Through a VLAN Interface 267
Configuring DHCP Option 82 Through Option-Insert Command (CLI) 267
Configuring DHCP Option 82 Through the server-ID-override Command (CLI) 268
Configuring DHCP Option 82 Through a Subscriber-ID (CLI) 269
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x
xv
Contents
Configuring DHCP Option 82 Through server-ID-override and subscriber-ID Commands (CLI)
270
Configuring DHCP Option 82 Through Different SVIs (CLI) 271
RADIUS Realm 273
CHAPTER 35
Information About RADIUS Realm 273
Enabling RADIUS Realm 274
Configuring Realm to Match the RADIUS Server for Authentication and Accounting 274
Configuring the AAA Policy for a WLAN 275
Verifying the RADIUS-Realm Configuration 277
Cisco StadiumVision 279
CHAPTER 36
Cisco StadiumVision Overview 279
Configure Wireless Controller Parameters for Cisco StadiumVision (GUI) 280
Configure Wireless Controller Parameters for Cisco StadiumVision (CLI) 280
Verify StadiumVision Configurations 281
Persistent SSID Broadcast 283
CHAPTER 37
Persistent SSID Broadcast 283
Configuring Persistent SSID Broadcast 283
Verifying Persistent SSID Broadcast 284
Network Monitoring 285
CHAPTER 38
Network Monitoring 285
Status Information Received Synchronously - Configuration Examples 285
Alarm and Event Information Received Asynchronously - Configuration Examples 287
Creating a Lobby Ambassador Account 289
CHAPTER 39
Information About Lobby Ambassador Account 289
Creating a Lobby Ambassador User Account (GUI) 289
Creating a User Account 290
Logging In Using the Lobby Account 291
Creating a Lobby Ambassador Account (CLI) 291
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x
xvi
Contents
Configuring Guest User Accounts 293
CHAPTER 40
Information About Creating Guest User Accounts 293
Creating a Guest User Account (GUI) 293
Creating a Guest User Account (CLI) 294
Verifying Guest User Account 295
Assigning Username to Guest Users in a WLAN (CLI) 296
System Management 297
PART V
Network Mobility Services Protocol 299
CHAPTER 41
Information About Network Mobility Services Protocol 299
Radioactive Tracing for NMSP 300
Enabling NMSP on Premises Services 300
Modifying the NMSP Notification Interval for Clients, RFID Tags, and Rogues 301
Modifying the NMSP Notification Threshold for Clients, RFID Tags, and Rogues 301
Configuring NMSP Strong Cipher 302
Verifying NMSP Settings 302
Examples: NMSP Settings Configuration 305
NMSP by AP Groups with Subscription List from CMX 305
Verifying NMSP by AP Groups with Subscription List from CMX 305
Probe RSSI Location 307
Configuring Probe RSSI 307
RFID Tag Support 309
Configuring RFID Tag Support 309
Verifying RFID Tag Support 310
Application Visibility and Control 313
CHAPTER 42
Information About Application Visibility and Control 313
Prerequisites for Application Visibility and Control 315
Restrictions for Application Visibility and Control 315
AVC Configuration Overview 315
Create a Flow Monitor 316
Create a Flow Record 317
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x
xvii
Contents
Create a Flow Exporter 319
Configure a WLAN for AVC 320
Configuring a Policy Tag 321
Attaching a Policy Profile to a WLAN Interface (GUI) 321
Attaching a Policy Profile to a WLAN Interface (CLI) 322
Attaching a Policy Profile to an AP 323
Verify the AVC Configuration 323
Default DSCP on AVC 324
Configuring Default DSCP for AVC Profile (GUI) 324
Configuring Default DSCP for AVC Profile 325
Creating Class Map 325
Creating Policy Map 326
AVC-Based Selective Reanchoring 327
Restrictions for AVC-Based Selective Reanchoring 327
Configuring the Flow Exporter 327
Configuring the Flow Monitor 328
Configuring the AVC Reanchoring Profile 329
Configuring the Wireless WLAN Profile Policy 329
Verifying AVC Reanchoring 330
Cisco Hyperlocation 335
CHAPTER 43
Information About Cisco Hyperlocation 335
Restrictions on Cisco Hyperlocation 337
Configuring Cisco Hyperlocation (GUI) 338
Configuring Cisco Hyperlocation (CLI) 338
Verifying Cisco Hyperlocation 339
Configuring Hyperlocation BLE Beacon Parameters for AP (GUI) 342
Configuring Hyperlocation BLE Beacon Parameters (CLI) 343
Verifying Hyperlocation BLE Beacon Configuration 343
Configuring Hyperlocation BLE Beacon Parameters for AP (CLI) 344
Verifying Hyperlocation BLE Beacon Configuration for AP 344
BLE Beacons in CiscoWave 2 Access Points 347
CHAPTER 44
Managing BLE Beacons in Cisco Wave 2 and 802.11ax Access Points 347
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x
xviii
Contents
Monitoring BLE Management 349
Cisco DNA Spaces 351
CHAPTER 45
Configuring Cisco DNA Spaces 351
Verifying Cisco DNA Spaces Configuration 352
EDCA Parameters 355
CHAPTER 46
Enhanced Distributed Channel Access Parameters 355
Configuring EDCA Parameters (GUI) 355
Configuring EDCA Parameters (CLI) 356
802.11 parameters and Band Selection 359
CHAPTER 47
Information About Configuring Band Selection, 802.11 Bands, and Parameters 359
Band Select 359
802.11 Bands 360
802.11n Parameters 360
802.11h Parameters 360
Restrictions for Band Selection, 802.11 Bands, and Parameters 361
How to Configure 802.11 Bands and Parameters 361
Configuring Band Selection (GUI) 361
Configuring Band Selection (CLI) 362
Configuring the 802.11 Bands (GUI) 363
Configuring the 802.11 Bands (CLI) 364
Configuring a Band-Select RF Profile (GUI) 366
Configuring a Band-Select RF Profile (CLI) 367
Configuring 802.11n Parameters (GUI) 367
Configuring 802.11n Parameters (CLI) 368
Configuring 802.11h Parameters (CLI) 370
Monitoring Configuration Settings for Band Selection, 802.11 Bands, and Parameters 371
Verifying Configuration Settings Using Band Selection and 802.11 Bands Commands 371
Example: Viewing the Configuration Settings for the 5-GHz Band 371
Example: Viewing the Configuration Settings for the 2.4-GHz Band 373
Example: Viewing the status of 802.11h Parameters 374
Example: Verifying the Band-Selection Settings 375
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x
xix
Contents
Configuration Examples for Band Selection, 802.11 Bands, and Parameters 376
Examples: Band Selection Configuration 376
Examples: 802.11 Bands Configuration 377
Examples: 802.11n Configuration 377
Examples: 802.11h Configuration 378
Predownloading an Image to an Access Point 379
CHAPTER 48
Information About Predownloading an Image to an Access Point 379
Restrictions for Predownloading an Image to an Access Point 379
Predownloading an Image to Access Points (CLI) 380
Monitoring the Access Point Predownload Process 381
Efficient Image Upgrade 383
CHAPTER 49
Efficient Image Upgrade 383
Enable Pre-Download (GUI) 383
Enable Pre-Download (CLI) 384
Configuring a Site Tag (CLI) 384
Attaching Policy Tag and Site Tag to an AP (CLI) 385
Trigger Predownload to a Site Tag 386
N+1 Hitless Rolling AP Upgrade 389
CHAPTER 50
N+1 Hitless Rolling AP Upgrade 389
Configuring Hitless Upgrade 390
Verifying Hitless Upgrade 391
Wireless Sub-Package for Switch 393
CHAPTER 51
Introduction to Wireless Sub-package 393
Booting in Install Mode 394
Installing Sub-Package in a Single Step (GUI) 395
Installing Sub-Package in a Single Step 395
Multi-step Installation of Sub-Package 396
Installing on a Stack 397
Upgrading to a Newer Version of Wireless Package 397
Deactivating the Wireless Package 397
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x
xx
Contents
/