Cisco Catalyst 9800-L Wireless Controller Configuration Guide

Brand: Cisco

Model: Catalyst 9800-L Wireless Controller

Category: Routers

Type: Configuration Guide

This manual is also suitable for

Cisco Catalyst 9800 Series Wireless Controller Software Configuration

Guide, Cisco IOS XE Gibraltar 16.12.x

First Published: 2019-07-31

Last Modified: 2019-07-31

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,

INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,

EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH

THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,

CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.

CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF

MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT

LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS

HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network

topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional

and coincidental.

All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.

Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:

https://www.cisco.com/c/en/us/about/legal/trademarks.html. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a

partnership relationship between Cisco and any other company. (1721R)

CONTENTS

Preface lix

PREFACE

Document Conventions lix

Related Documentation lxi

Obtaining Documentation and Submitting a Service Request lxi

Overview of Cisco 9800 Series Wireless Controllers 1

CHAPTER 1

Elements of the New Configuration Model 1

Configuration Workflow 2

Initial Setup 3

System Configuration 5

PART I

System Configuration 7

CHAPTER 2

Information About New Configuration Model 7

Configuring a Wireless Profile Policy (GUI) 9

Configuring a Wireless Profile Policy (CLI) 10

Configuring a Flex Profile (GUI) 11

Configuring a Flex Profile 12

Configuring an AP Profile (GUI) 12

Configuring an AP Profile (CLI) 17

Configuring User for AP Management (CLI) 18

Setting a Private Configuration Key for Password Encryption 18

Configuring an RF Profile (GUI) 19

Configuring an RF Profile (CLI) 19

Configuring a Site Tag (GUI) 20

Configuring a Site Tag (CLI) 21

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

iii

Configuring Policy Tag (GUI) 22

Configuring a Policy Tag (CLI) 22

Configuring Wireless RF Tag (GUI) 23

Configuring Wireless RF Tag (CLI) 24

Attaching a Policy Tag and Site Tag to an AP (GUI) 25

Attaching Policy Tag and Site Tag to an AP (CLI) 25

AP Filter 26

Introduction to AP Filter 26

Set Tag Priority (GUI) 27

Set Tag Priority 27

Create an AP Filter (GUI) 28

Create an AP Filter (CLI) 28

Set Up and Update Filter Priority (GUI) 29

Set Up and Update Filter Priority 29

Verify AP Filter Configuration 29

Configuring Access Point for Location Configuration 30

Information About Location Configuration 30

Prerequisite for Location Configuration 31

Configuring a Location for an Access Point (GUI) 31

Configuring a Location for an Access Point (CLI) 31

Adding an Access Point to the Location (GUI) 32

Adding an Access Point to the Location (CLI) 33

Configuring SNMP in Location Configuration 33

SNMP MIB 33

Verifying Location Configuration 34

Verifying Location Statistics 34

Wireless Management Interface (WMI) 37

CHAPTER 3

Information About Wireless Management Interface 37

Recommendations for Wireless Management Interface 38

Configuring your Controller with Wireless Management Interface (CLI) 39

Verifying Wireless Management Interface Settings 40

Information About Network Address Translation (NAT) 41

Information About CAPWAP Discovery 41

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

Contents

Configuring Wireless Management Interface with a NAT Public IP (CLI) 42

Configuring CAPWAP Discovery to Respond Only with Public or Private IP (CLI) 43

Configuring the Controller to Respond only with a Public IP (CLI) 43

Configuring the Controller to Respond only with a Private IP (CLI) 43

Verifying NAT Settings 44

BIOS Protection 45

CHAPTER 4

BIOS Protection on the Controller 45

BIOS or ROMMON Upgrade with BIOS Protection 45

Upgrading BIOS 46

Smart Licensing 47

CHAPTER 5

Information About Cisco Smart Licensing 47

Creating a Smart Account 49

Using Smart Licensing 50

Reregister a License (GUI) 50

Using Specified License Reservation (SLR) 50

Enabling Smart Software Licensing 51

Enabling Smart Call Home Reporting 52

Configuring AIR License Level (GUI) 52

Configuring AIR License Level (CLI) 53

Configuring AIR Network Essentials License Level 53

Configuring AIR Network Advantage License Level 54

Verifying Smart Licensing Configurations 54

Best Practices 57

CHAPTER 6

Introduction 57

Lightweight Access Points 59

PART II

Country Codes 61

CHAPTER 7

Information About Country Codes 61

Prerequisites for Configuring Country Codes 61

Configuring Country Codes (GUI) 62

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

Contents

How to Configure Country Codes 62

Configuration Examples for Configuring Country Codes 64

Viewing Channel List for Country Codes 64

Sniffer Mode 67

CHAPTER 8

Information about Sniffer 67

Prerequisites for Sniffer 67

Restrictions on Sniffer 67

How to Configure Sniffer 68

Configuring an Access Point as Sniffer (GUI) 68

Configuring an Access Point as Sniffer (CLI) 68

Enabling or Disabling Sniffing on the Access Point (GUI) 69

Enabling or Disabling Sniffing on the Access Point (CLI) 69

Verifying Sniffer Configurations 70

Examples for Sniffer Configurations and Monitoring 70

Monitor Mode 71

CHAPTER 9

Introduction to Monitor Mode 71

Enable Monitor Mode (GUI) 71

Enable Monitor Mode (CLI) 72

Sensor Mode 73

CHAPTER 10

Introduction to Sensor Mode 73

Enabling Sensor Mode 73

Verifying Sensor Mode Configuration 76

AP Priority 77

CHAPTER 11

Failover Priority for Access Points 77

Setting AP Priority (GUI) 77

Setting AP Priority 78

FlexConnect 79

CHAPTER 12

Information About FlexConnect 79

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

Contents

FlexConnect Authentication Process 81

Guidelines and Restrictions for FlexConnect 84

Configuring a Site Tag 86

Configuring a Policy Tag (CLI) 87

Attaching a Policy Tag and a Site Tag to an AP (GUI) 88

Attaching Policy Tag and Site Tag to an AP (CLI) 89

Linking an ACL Policy to the Defined ACL (GUI) 90

Applying ACLs on FlexConnect 90

Configuring FlexConnect 91

Configuring a Switch at a Remote Site 91

Configuring the Controller for FlexConnect 92

Configuring Local Switching in FlexConnect Mode (GUI) 93

Configuring Local Switching in FlexConnect Mode (CLI) 93

Configuring Central Switching in FlexConnect Mode (GUI) 94

Configuring Central Switching in FlexConnect Mode 94

Configuring an Access Point for FlexConnect 95

Configuring an Access Point for Local Authentication on a WLAN (GUI) 95

Configuring an Access Point for Local Authentication on a WLAN (CLI) 95

Connecting Client Devices to WLANs 95

Configuring FlexConnect Ethernet Fallback 96

Information About FlexConnect Ethernet Fallback 96

Configuring FlexConnect Ethernet Fallback 96

Flex AP Local Authentication (GUI) 97

Flex AP Local Authentication (CLI) 98

Flex AP Local Authentication with External Radius Server 100

Configuration Example: FlexConnect with Central and Local Authentication 103

NAT-PAT for FlexConnect 103

Configuring NAT-PAT for a WLAN or a Remote LAN 103

Creating a WLAN 103

Configuring a Wireless Profile Policy and NAT-PAT (GUI) 104

Configuring a Wireless Profile Policy and NAT-PAT 104

Mapping a WLAN to a Policy Profile 105

Configuring a Site Tag 106

Attaching a Policy Tag and a Site Tag to an Access Point (GUI) 106

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

vii

Contents

Attaching a Policy Tag and a Site Tag to an Access Point 107

Split Tunneling for FlexConnect 107

Configuring Split Tunneling for a WLAN or Remote LAN 108

Defining an Access Control List for Split Tunneling (GUI) 108

Defining an Access Control List for Split Tunneling 108

Linking an ACL Policy to the Defined ACL 109

Creating a WLAN 110

Configuring a Wireless Profile Policy and a Split MAC ACL Name (GUI) 110

Configuring a Wireless Profile Policy and a Split MAC ACL Name 111

Mapping a WLAN to a Policy Profile (GUI) 112

Mapping WLAN to a Policy Profile 112

Configuring a Site Tag 113

Attaching a Policy Tag and Site Tag to an Access Point 113

VLAN-based Central Switching for FlexConnect 114

Configuring VLAN-based Central Switching (GUI) 114

Configuring VLAN-based Central Switching (CLI) 115

OfficeExtend Access Points for FlexConnect 116

Configuring OfficeExtend Access Points 116

Disabling OfficeExtend Access Point 117

Clearing Personal SSID from an OfficeExtend Access Point 118

Example: Viewing OfficeExtend Configuration 118

Proxy ARP 119

Enabling Proxy ARP for FlexConnect APs (GUI) 119

Enabling Proxy ARP for FlexConnect APs 119

Data DTLS 121

CHAPTER 13

Information About Data Datagram Transport Layer Security 121

Configuring Data DTLS (GUI) 121

Configuring Data DTLS (CLI) 122

Converting Autonomous Access Points to Lightweight Mode 125

CHAPTER 14

Guidelines for Converting Autonomous Access Points to Lightweight Mode 125

Information About Autonomous Access Points Converted to Lightweight Mode 126

Reverting from Lightweight Mode to Autonomous Mode 126

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

viii

Contents

Using DHCP Option 43 and DHCP Option 60 126

How Converted Access Points Send Crash Information to the Device 127

Uploading Memory Core Dumps from Converted Access Points 127

Displaying MAC Addresses for Converted Access Points 127

Configuring a Static IP Address for a Lightweight Access Point 127

How to Convert a Lightweight Access Point Back to an Autonomous Access Point 128

Converting a Lightweight Access Point Back to an Autonomous Access Point (CLI) 128

Converting a Lightweight Access Point Back to an Autonomous Access Point (Using the Mode

Button and a TFTP Server) 128

Authorizing Access Points 129

Authorizing Access Points Using Local Database (CLI) 129

Authorizing Access Points Using RADIUS Server (CLI) 130

Disabling the Reset Button on Converted Access Points (CLI) 132

Monitoring the AP Crash Log Information 132

How to Configure a Static IP Address on an Access Point 133

Configuring a Static IP Address on an Access Point (CLI) 133

Configuring a Static IP Address on an Access Point (GUI) 134

Recovering the Access Point Using the TFTP Recovery Procedure 135

Configuration Examples for Converting Autonomous Access Points to Lightweight Mode 135

Example: Displaying the IP Address Configuration for Access Points 135

Example: Displaying Access Point Crash File Information 135

AP MAC Authorization 136

Configuring AP MAC Authorization (CLI) 136

Ethernet VLAN Tagging on Access Points 137

Information About Ethernet VLAN Tagging on Access Points 137

Configuring Ethernet VLAN Tagging on Access Points (GUI) 137

Configuring Ethernet VLAN Tagging on Access Points (CLI) 137

AP Crash File Upload 139

CHAPTER 15

AP Crash File Upload 139

Configuring AP Crash File Upload (CLI) 140

Access Point Plug-n-Play 141

CHAPTER 16

Overview of Access Point Plug-n-Play 141

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

Contents

Provisioning AP from PnP Server 141

Verifying AP Tag Configuration 142

802.11 Parameters for Cisco Access Points 143

CHAPTER 17

2.4-GHz Radio Support 143

Configuring 2.4-GHz Radio Support for the Specified Slot Number 143

5-GHz Radio Support 145

Configuring 5-GHz Radio Support for the Specified Slot Number 145

Information About Dual-Band Radio Support 147

Configuring Default XOR Radio Support 147

Configuring XOR Radio Support for the Specified Slot Number (GUI) 150

Configuring XOR Radio Support for the Specified Slot Number 150

Receiver Only Dual-Band Radio Support 152

Information About Receiver Only Dual-Band Radio Support 152

Configuring Receiver Only Dual-Band Parameters for Access Points 152

Enabling CleanAir with Receiver Only Dual-Band Radio on a Cisco Access Point (GUI) 152

Enabling CleanAir with Receiver Only Dual-Band Radio on a Cisco Access Point 152

Disabling Receiver Only Dual-Band Radio on a Cisco Access Point (GUI) 153

Disabling Receiver Only Dual-Band Radio on a Cisco Access Point 153

Configuring Client Steering (CLI) 153

Verifying Cisco Access Points with Dual-Band Radios 155

802.1x Support 157

CHAPTER 18

Introduction to the 802.1x Authentication 157

EAP-FAST Protocol 157

EAP-TLS/EAP-PEAP Protocol 158

Limitations of the 802.1x Authentication 158

Topology - Overview 158

Configuring 802.1x Authentication Type and LSC AP Authentication Type (GUI) 159

Configuring 802.1x Authentication Type and LSC AP Authentication Type 159

Configuring the 802.1x Username and Password (GUI) 160

Configuring the 802.1x Username and Password (CLI) 161

Enabling 802.1x on the Switch Port 162

Verifying 802.1x on the Switch Port 163

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

Contents

Verifying the Authentication Type 164

Configuring CAPWAP Link Aggregation Support 165

CHAPTER 19

Information About Link Aggregation 165

Information About CAPWAP LAG Support 165

Restrictions for CAPWAP LAG Support 166

Enabling CAPWAP LAG Support on Controller (GUI) 166

Enabling CAPWAP LAG Support on Controller 166

Enabling CAPWAP LAG Globally on Controller 167

Disabling CAPWAP LAG Globally on Controller 167

Enabling CAPWAP LAG for an AP Profile (GUI) 167

Enabling CAPWAP LAG for an AP Profile 168

Disabling CAPWAP LAG for an AP Profile 168

Disabling CAPWAP LAG Support on Controller 169

Verifying CAPWAP LAG Support Configurations 169

Configuring DHCP and NAT Functionality on Root Access Point 171

CHAPTER 20

Information About DHCP and NAT Functionality on Root AP (RAP) 171

Configuring DHCP Server on Root Access Point (RAP) 172

Verifying DHCP Server for Root AP Configuration 172

OFDMA Support for 11ax Access Points 173

CHAPTER 21

Information About OFDMA Support for 11ax Access Points 173

Supported Modes on 11ax Access Points 173

Configuring 11AX (GUI) 174

Configuring Channel Width 174

Configuring 802.11ax Radio Parameters (GUI) 175

Configuring 802.11ax Radio Parameters (CLI) 175

Setting up the 802.11ax Radio Parameters 176

Configuring OFDMA on a WLAN 177

Verifying Channel Width 178

Verifying Client Details 179

Verifying Radio Configuration 180

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

Contents

Radio Resource Management 183

PART III

Radio Resource Management 185

CHAPTER 22

Information About Radio Resource Management 185

Radio Resource Monitoring 186

Information About RF Groups 186

RF Group Leader 187

RF Group Name 189

Rogue Access Point Detection in RF Groups 190

Transmit Power Control 190

Overriding the TPC Algorithm with Minimum and Maximum Transmit Power Settings 190

Dynamic Channel Assignment 191

Dynamic Bandwidth Selection 192

Coverage Hole Detection and Correction 193

Restrictions for Radio Resource Management 193

How to Configure RRM 194

Configuring Neighbor Discovery Type (GUI) 194

Configuring Neighbor Discovery Type (CLI) 194

Configuring RF Groups 194

Configuring RF Group Selection Mode (GUI) 195

Configuring RF Group Selection Mode (CLI) 195

Configuring an RF Group Name (CLI) 196

Configuring Members in an 802.11 Static RF Group (GUI) 196

Configuring Members in an 802.11 Static RF Group (CLI) 197

Configuring Transmit Power Control 197

Configuring Transmit Power (GUI) 197

Configuring the Tx-Power Control Threshold (CLI) 198

Configuring the Tx-Power Level (CLI) 198

Configuring 802.11 RRM Parameters 199

Configuring Advanced 802.11 Channel Assignment Parameters (GUI) 199

Configuring Advanced 802.11 Channel Assignment Parameters (CLI) 200

Configuring 802.11 Coverage Hole Detection (GUI) 203

Configuring 802.11 Coverage Hole Detection (CLI) 203

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

xii

Contents

Configuring 802.11 Event Logging (CLI) 204

Configuring 802.11 Statistics Monitoring (GUI) 205

Configuring 802.11 Statistics Monitoring (CLI) 206

Configuring the 802.11 Performance Profile (GUI) 207

Configuring the 802.11 Performance Profile (CLI) 207

Configuring Advanced 802.11 RRM 208

Enabling Channel Assignment (GUI) 208

Enabling Channel Assignment (CLI) 209

Restarting DCA Operation 209

Updating Power Assignment Parameters (GUI) 209

Updating Power Assignment Parameters (CLI) 210

Configuring Rogue Access Point Detection in RF Groups 210

Configuring Rogue Access Point Detection in RF Groups (CLI) 210

Monitoring RRM Parameters and RF Group Status 211

Monitoring RRM Parameters 211

Verifying RF Group Status (CLI) 212

Examples: RF Group Configuration 213

Information About ED-RRM 213

Configuring ED-RRM on the Cisco Wireless LAN Controller (CLI) 213

Coverage Hole Detection 217

CHAPTER 23

Coverage Hole Detection and Correction 217

Configuring Coverage Hole Detection (GUI) 217

Configuring Coverage Hole Detection (CLI) 218

Configuring CHD for RF Tag Profile (GUI) 219

Configuring CHD for RF Tag Profile (CLI) 220

Optimized Roaming 223

CHAPTER 24

Optimized Roaming 223

Restrictions for Optimized Roaming 223

Configuring Optimized Roaming (GUI) 224

Configuring Optimized Roaming (CLI) 224

Cisco Flexible Radio Assignment 227

CHAPTER 25

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

xiii

Contents

Information About Flexible Radio Assignment 227

Benefits of the FRA Feature 228

Configuring an FRA Radio (CLI) 228

Configuring an FRA Radio (GUI) 230

XOR Radio Support 231

CHAPTER 26

Information About Dual-Band Radio Support 231

Configuring Default XOR Radio Support 232

Configuring XOR Radio Support for the Specified Slot Number (GUI) 234

Configuring XOR Radio Support for the Specified Slot Number 234

Cisco Receiver Start of Packet 237

CHAPTER 27

Information About Receiver Start of Packet Detection Threshold 237

Restrictions for Rx SOP 237

Configuring Rx SOP (CLI) 238

Customizing RF Profile (CLI) 238

Client Limit 241

CHAPTER 28

Information About Client Limit 241

Configuring Client Limit (GUI) 241

Configuring Client Limit (CLI) 241

IP Theft 243

CHAPTER 29

Introduction to IP Theft 243

Configuring IP Theft (GUI) 244

Configuring IP Theft 244

Configuring the IP Theft Exclusion Timer 244

Adding Static Entries for Wired Hosts 245

Verifying IP Theft Configuration 246

Unscheduled Automatic Power Save Delivery 249

CHAPTER 30

Information About Unscheduled Automatic Power Save Delivery 249

Viewing Unscheduled Automatic Power Save Delivery (CLI) 249

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

xiv

Contents

Enabling USB Port on Access Points 251

CHAPTER 31

USB Port as Power Source for Access Points 251

Configuring an AP Profile (CLI) 252

Configuring USB Settings for an Access Point (CLI) 252

Monitoring USB Configurations for Access Points (CLI) 253

Dynamic Frequency Selection 255

CHAPTER 32

Information About Dynamic Frequency Selection 255

Configuring Dynamic Frequency Selection (GUI) 255

Configuring Dynamic Frequency Selection 255

Verifying DFS 256

Network Management 257

PART IV

AP Packet Capture 259

CHAPTER 33

Introduction to AP Client Packet Capture 259

Enabling Packet Capture (GUI) 259

Enabling Packet Capture (CLI) 260

Create AP Packet Capture Profile and Map to an AP Join Profile (GUI) 260

Create AP Packet Capture Profile and Map to an AP Join Profile 260

Start or Stop Packet Capture 261

DHCP Option82 263

CHAPTER 34

Information About DHCP Option 82 263

Configuring DHCP Option 82 Global Interface 264

Configuring DHCP Option 82 Globally Through Server Override (CLI) 264

Configuring DHCP Option 82 Globally Through Different SVIs (GUI) 265

Configuring DHCP Option 82 Globally Through Different SVIs (CLI) 265

Configuring DHCP Option 82 Format 266

Configuring DHCP Option82 Through a VLAN Interface 267

Configuring DHCP Option 82 Through Option-Insert Command (CLI) 267

Configuring DHCP Option 82 Through the server-ID-override Command (CLI) 268

Configuring DHCP Option 82 Through a Subscriber-ID (CLI) 269

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

Contents

Configuring DHCP Option 82 Through server-ID-override and subscriber-ID Commands (CLI)

270

Configuring DHCP Option 82 Through Different SVIs (CLI) 271

RADIUS Realm 273

CHAPTER 35

Information About RADIUS Realm 273

Enabling RADIUS Realm 274

Configuring Realm to Match the RADIUS Server for Authentication and Accounting 274

Configuring the AAA Policy for a WLAN 275

Verifying the RADIUS-Realm Configuration 277

Cisco StadiumVision 279

CHAPTER 36

Cisco StadiumVision Overview 279

Configure Wireless Controller Parameters for Cisco StadiumVision (GUI) 280

Configure Wireless Controller Parameters for Cisco StadiumVision (CLI) 280

Verify StadiumVision Configurations 281

Persistent SSID Broadcast 283

CHAPTER 37

Persistent SSID Broadcast 283

Configuring Persistent SSID Broadcast 283

Verifying Persistent SSID Broadcast 284

Network Monitoring 285

CHAPTER 38

Network Monitoring 285

Status Information Received Synchronously - Configuration Examples 285

Alarm and Event Information Received Asynchronously - Configuration Examples 287

Creating a Lobby Ambassador Account 289

CHAPTER 39

Information About Lobby Ambassador Account 289

Creating a Lobby Ambassador User Account (GUI) 289

Creating a User Account 290

Logging In Using the Lobby Account 291

Creating a Lobby Ambassador Account (CLI) 291

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

xvi

Contents

Configuring Guest User Accounts 293

CHAPTER 40

Information About Creating Guest User Accounts 293

Creating a Guest User Account (GUI) 293

Creating a Guest User Account (CLI) 294

Verifying Guest User Account 295

Assigning Username to Guest Users in a WLAN (CLI) 296

System Management 297

PART V

Network Mobility Services Protocol 299

CHAPTER 41

Information About Network Mobility Services Protocol 299

Radioactive Tracing for NMSP 300

Enabling NMSP on Premises Services 300

Modifying the NMSP Notification Interval for Clients, RFID Tags, and Rogues 301

Modifying the NMSP Notification Threshold for Clients, RFID Tags, and Rogues 301

Configuring NMSP Strong Cipher 302

Verifying NMSP Settings 302

Examples: NMSP Settings Configuration 305

NMSP by AP Groups with Subscription List from CMX 305

Verifying NMSP by AP Groups with Subscription List from CMX 305

Probe RSSI Location 307

Configuring Probe RSSI 307

RFID Tag Support 309

Configuring RFID Tag Support 309

Verifying RFID Tag Support 310

Application Visibility and Control 313

CHAPTER 42

Information About Application Visibility and Control 313

Prerequisites for Application Visibility and Control 315

Restrictions for Application Visibility and Control 315

AVC Configuration Overview 315

Create a Flow Monitor 316

Create a Flow Record 317

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

xvii

Contents

Create a Flow Exporter 319

Configure a WLAN for AVC 320

Configuring a Policy Tag 321

Attaching a Policy Profile to a WLAN Interface (GUI) 321

Attaching a Policy Profile to a WLAN Interface (CLI) 322

Attaching a Policy Profile to an AP 323

Verify the AVC Configuration 323

Default DSCP on AVC 324

Configuring Default DSCP for AVC Profile (GUI) 324

Configuring Default DSCP for AVC Profile 325

Creating Class Map 325

Creating Policy Map 326

AVC-Based Selective Reanchoring 327

Restrictions for AVC-Based Selective Reanchoring 327

Configuring the Flow Exporter 327

Configuring the Flow Monitor 328

Configuring the AVC Reanchoring Profile 329

Configuring the Wireless WLAN Profile Policy 329

Verifying AVC Reanchoring 330

Cisco Hyperlocation 335

CHAPTER 43

Information About Cisco Hyperlocation 335

Restrictions on Cisco Hyperlocation 337

Configuring Cisco Hyperlocation (GUI) 338

Configuring Cisco Hyperlocation (CLI) 338

Verifying Cisco Hyperlocation 339

Configuring Hyperlocation BLE Beacon Parameters for AP (GUI) 342

Configuring Hyperlocation BLE Beacon Parameters (CLI) 343

Verifying Hyperlocation BLE Beacon Configuration 343

Configuring Hyperlocation BLE Beacon Parameters for AP (CLI) 344

Verifying Hyperlocation BLE Beacon Configuration for AP 344

BLE Beacons in CiscoWave 2 Access Points 347

CHAPTER 44

Managing BLE Beacons in Cisco Wave 2 and 802.11ax Access Points 347

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

xviii

Contents

Monitoring BLE Management 349

Cisco DNA Spaces 351

CHAPTER 45

Configuring Cisco DNA Spaces 351

Verifying Cisco DNA Spaces Configuration 352

EDCA Parameters 355

CHAPTER 46

Enhanced Distributed Channel Access Parameters 355

Configuring EDCA Parameters (GUI) 355

Configuring EDCA Parameters (CLI) 356

802.11 parameters and Band Selection 359

CHAPTER 47

Information About Configuring Band Selection, 802.11 Bands, and Parameters 359

Band Select 359

802.11 Bands 360

802.11n Parameters 360

802.11h Parameters 360

Restrictions for Band Selection, 802.11 Bands, and Parameters 361

How to Configure 802.11 Bands and Parameters 361

Configuring Band Selection (GUI) 361

Configuring Band Selection (CLI) 362

Configuring the 802.11 Bands (GUI) 363

Configuring the 802.11 Bands (CLI) 364

Configuring a Band-Select RF Profile (GUI) 366

Configuring a Band-Select RF Profile (CLI) 367

Configuring 802.11n Parameters (GUI) 367

Configuring 802.11n Parameters (CLI) 368

Configuring 802.11h Parameters (CLI) 370

Monitoring Configuration Settings for Band Selection, 802.11 Bands, and Parameters 371

Verifying Configuration Settings Using Band Selection and 802.11 Bands Commands 371

Example: Viewing the Configuration Settings for the 5-GHz Band 371

Example: Viewing the Configuration Settings for the 2.4-GHz Band 373

Example: Viewing the status of 802.11h Parameters 374

Example: Verifying the Band-Selection Settings 375

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

xix

Contents

Configuration Examples for Band Selection, 802.11 Bands, and Parameters 376

Examples: Band Selection Configuration 376

Examples: 802.11 Bands Configuration 377

Examples: 802.11n Configuration 377

Examples: 802.11h Configuration 378

Predownloading an Image to an Access Point 379

CHAPTER 48

Information About Predownloading an Image to an Access Point 379

Restrictions for Predownloading an Image to an Access Point 379

Predownloading an Image to Access Points (CLI) 380

Monitoring the Access Point Predownload Process 381

Efficient Image Upgrade 383

CHAPTER 49

Efficient Image Upgrade 383

Enable Pre-Download (GUI) 383

Enable Pre-Download (CLI) 384

Configuring a Site Tag (CLI) 384

Attaching Policy Tag and Site Tag to an AP (CLI) 385

Trigger Predownload to a Site Tag 386

N+1 Hitless Rolling AP Upgrade 389

CHAPTER 50

N+1 Hitless Rolling AP Upgrade 389

Configuring Hitless Upgrade 390

Verifying Hitless Upgrade 391

Wireless Sub-Package for Switch 393

CHAPTER 51

Introduction to Wireless Sub-package 393

Booting in Install Mode 394

Installing Sub-Package in a Single Step (GUI) 395

Installing Sub-Package in a Single Step 395

Multi-step Installation of Sub-Package 396

Installing on a Stack 397

Upgrading to a Newer Version of Wireless Package 397

Deactivating the Wireless Package 397

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.12.x

Contents

Page is loading ...

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
1180
1181
1182
1183
1184
1185
1186
1187
1188
1189
1190
1191
1192
1193
1194
1195
1196
1197
1198
1199
1200
1201
1202
1203
1204
1205
1206
1207
1208
1209
1210
1211
1212
1213
1214
1215
1216
1217
1218
1219
1220
1221
1222
1223
1224
1225
1226
1227
1228
1229
1230
1231
1232
1233
1234
1235
1236
1237
1238
1239
1240
1241
1242
1243
1244
1245
1246
1247
1248
1249
1250
1251
1252
1253
1254
1255
1256
1257
1258
1259
1260
1261
1262
1263
1264
1265
1266
1267
1268
1269
1270
1271
1272
1273
1274
1275
1276
1277
1278
1279
1280
1281
1282
1283
1284
1285
1286
1287
1288
1289
1290
1291
1292
1293
1294
1295
1296
1297
1298
1299
1300
1301
1302
1303
1304
1305
1306
1307
1308
1309
1310
1311
1312
1313
1314
1315
1316
1317
1318
1319
1320

Cisco Catalyst 9800-L Wireless Controller Configuration Guide

Brand: Cisco

Model: Catalyst 9800-L Wireless Controller

Category: Routers

Type: Configuration Guide

This manual is also suitable for

Download PDF

report

Cisco Catalyst 9800-L Wireless Controller Configuration Guide

This manual is also suitable for

Cisco Catalyst 9800-L Wireless Controller Configuration Guide

Related papers

Other documents