Cisco Catalyst 9800-L Wireless Controller Configuration Guide

Brand: Cisco

Model: Catalyst 9800-L Wireless Controller

Category: Networking

Type: Configuration Guide

This manual is also suitable for

Cisco Catalyst 9800 Series Wireless Controller Software Configuration

Guide, Cisco IOS XE Gibraltar 16.10.x

First Published: 2018-11-20

Last Modified: 2019-03-14

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,

INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,

EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH

THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,

CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.

CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF

MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT

LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS

HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network

topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional

and coincidental.

All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.

Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:

https://www.cisco.com/c/en/us/about/legal/trademarks.html. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a

partnership relationship between Cisco and any other company. (1721R)

CONTENTS

Preface liii

PREFACE

Document Conventions liii

Related Documentation lv

Obtaining Documentation and Submitting a Service Request lv

Overview of Cisco 9800 Series Wireless Controllers 1

CHAPTER 1

Elements of the New Configuration Model 1

Configuration Workflow 2

Initial Setup 3

System Configuration 5

PART I

System Configuration 7

CHAPTER 2

Information About New Configuration Model 7

Configuring a Wireless Profile Policy (GUI) 9

Configuring a Wireless Profile Policy (CLI) 10

Configuring a Flex Profile (GUI) 11

Configuring a Flex Profile 11

Configuring an AP Profile (GUI) 12

Configuring an AP Profile (CLI) 17

Configuring User for AP Management (CLI) 17

Setting a Private Configuration Key for Password Encryption 18

Configuring an RF Profile (GUI) 19

Configuring an RF Profile (CLI) 19

Configuring a Site Tag (GUI) 20

Configuring a Site Tag (CLI) 21

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

iii

Configuring Policy Tag (GUI) 22

Configuring a Policy Tag (CLI) 22

Configuring Wireless RF Tag (GUI) 23

Configuring Wireless RF Tag (CLI) 23

Attaching a Policy Tag and Site Tag to an AP (GUI) 24

Attaching Policy Tag and Site Tag to an AP (CLI) 25

AP Filter 26

Introduction to AP Filter 26

Set Tag Priority (GUI) 26

Set Tag Priority 27

Create an AP Filter (GUI) 27

Create an AP Filter (CLI) 28

Set Up and Update Filter Priority (GUI) 28

Set Up and Update Filter Priority 29

Verify AP Filter Configuration 29

Configuring Access Point for Location Configuration 30

Information About Location Configuration 30

Prerequisite for Location Configuration 31

Configuring a Location for an Access Point (GUI) 31

Configuring a Location for an Access Point (CLI) 31

Adding an Access Point to the Location (GUI) 32

Adding an Access Point to the Location (CLI) 33

Configuring SNMP in Location Configuration 33

SNMP MIB 33

Verifying Location Configuration 34

Verifying Location Statistics 34

RF Profile 35

CHAPTER 3

RF Tag Profiles 35

Configuring an AP Tag (GUI) 35

Configuring AP Tag (CLI) 36

Configuring RF Profile (GUI) 37

Configuring an RF Profile (CLI) 38

Configuring Wireless RF Tag (GUI) 39

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

Contents

Configuring Wireless RF Tag (CLI) 40

BIOS Protection 43

CHAPTER 4

BIOS Protection on the Controller 43

BIOS or ROMMON Upgrade with BIOS Protection 43

Upgrading BIOS 44

Smart Licensing 45

CHAPTER 5

Information About Cisco Smart Licensing 45

Creating a Smart Account 47

Using Smart Licensing 48

Reregister a License (GUI) 48

Using Specified License Reservation (SLR) 48

Enabling Smart Software Licensing 49

Enabling Smart Call Home Reporting 50

Configuring AIR License Level (GUI) 50

Configuring AIR License Level (CLI) 51

Configuring AIR Network Essentials License Level 51

Configuring AIR Network Advantage License Level 52

Verifying Smart Licensing Configurations 52

Best Practices 55

CHAPTER 6

Introduction 55

Lightweight Access Points 57

PART II

Country Codes 59

CHAPTER 7

Information About Country Codes 59

Prerequisites for Configuring Country Codes 59

Configuring Country Codes (GUI) 60

How to Configure Country Codes 60

Configuration Examples for Configuring Country Codes 62

Viewing Channel List for Country Codes 62

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

Contents

Sniffer Mode 65

CHAPTER 8

Finding Feature Information 65

Information about Sniffer 65

Prerequisites for Sniffer 65

Restrictions on Sniffer 66

How to Configure Sniffer 66

Configuring an Access Point as Sniffer (GUI) 66

Configuring an Access Point as Sniffer (CLI) 67

Enabling or Disabling Sniffing on the Access Point (GUI) 67

Enabling or Disabling Sniffing on the Access Point (CLI) 67

Verifying Sniffer Configurations 68

Examples for Sniffer Configurations and Monitoring 68

Monitor Mode 69

CHAPTER 9

Introduction to Monitor Mode 69

Enable Monitor Mode (GUI) 69

Enable Monitor Mode (CLI) 70

Sensor Mode 71

CHAPTER 10

Introduction to Sensor Mode 71

Enabling Sensor Mode 71

Verifying Sensor Mode Configuration 74

AP Priority 75

CHAPTER 11

Failover Priority for Access Points 75

Setting AP Priority (GUI) 75

Setting AP Priority 76

FlexConnect 77

CHAPTER 12

Information About FlexConnect 77

FlexConnect Authentication Process 79

Guidelines and Restrictions for FlexConnect 82

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

Contents

Configuring a Site Tag 85

Configuring a Policy Tag (CLI) 86

Attaching a Policy Tag and a Site Tag to an AP (GUI) 87

Attaching Policy Tag and Site Tag to an AP (CLI) 87

Linking an ACL Policy to the Defined ACL (GUI) 88

Applying ACLs on FlexConnect 89

Configuring FlexConnect 90

Configuring a Switch at a Remote Site 90

Configuring the Controller for FlexConnect 91

Configuring Local Switching in FlexConnect Mode (GUI) 91

Configuring Local Switching in FlexConnect Mode (CLI) 92

Configuring Central Switching in FlexConnect Mode (GUI) 92

Configuring Central Switching in FlexConnect Mode 93

Configuring an Access Point for FlexConnect 93

Configuring an Access Point for Local Authentication on a WLAN (GUI) 93

Configuring an Access Point for Local Authentication on a WLAN (CLI) 94

Connecting Client Devices to WLANs 94

Configuring FlexConnect Ethernet Fallback 95

Information About FlexConnect Ethernet Fallback 95

Restrictions for FlexConnect Ethernet Fallback 95

Configuring FlexConnect Ethernet Fallback 95

Flex AP Local Authentication (GUI) 96

Flex AP Local Authentication (CLI) 97

Flex AP Local Authentication with External Radius Server 99

Configuration Example: FlexConnect with Central and Local Authentication 102

NAT-PAT for FlexConnect 102

Configuring NAT-PAT for a WLAN or a Remote LAN 102

Creating a WLAN 102

Configuring a Wireless Profile Policy and NAT-PAT (GUI) 103

Configuring a Wireless Profile Policy and NAT-PAT 103

Mapping a WLAN to a Policy Profile 104

Configuring a Site Tag 105

Attaching a Policy Tag and a Site Tag to an Access Point (GUI) 105

Attaching a Policy Tag and a Site Tag to an Access Point 106

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

vii

Contents

Split Tunneling for FlexConnect 106

Configuring Split Tunneling for a WLAN or Remote LAN 107

Defining an Access Control List for Split Tunneling (GUI) 107

Defining an Access Control List for Split Tunneling 107

Linking an ACL Policy to the Defined ACL 108

Creating a WLAN 109

Configuring a Wireless Profile Policy and a Split MAC ACL Name (GUI) 109

Configuring a Wireless Profile Policy and a Split MAC ACL Name 110

Mapping a WLAN to a Policy Profile (GUI) 111

Mapping WLAN to a Policy Profile 111

Configuring a Site Tag 112

Attaching a Policy Tag and Site Tag to an Access Point 112

VLAN-based Central Switching for FlexConnect 113

Configuring VLAN-based Central Switching (GUI) 113

Configuring VLAN-based Central Switching (CLI) 114

OfficeExtend Access Points for FlexConnect 115

Configuring OfficeExtend Access Points 115

Disabling OfficeExtend Access Point 116

Clearing Personal SSID from an OfficeExtend Access Point 117

Example: Viewing OfficeExtend Configuration 117

Proxy ARP 118

Enabling Proxy ARP for FlexConnect APs (GUI) 118

Enabling Proxy ARP for FlexConnect APs 118

Lawful Interception 119

Lawful Interception of Traffic 119

Configuring Lawful Interception 120

Verifying the Status of Lawful Interception 120

Data DTLS 123

CHAPTER 13

Information About Data Datagram Transport Layer Security 123

Configuring Data DTLS (GUI) 123

Configuring Data DTLS (CLI) 124

Converting Autonomous Access Points to Lightweight Mode 127

CHAPTER 14

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

viii

Contents

Guidelines for Converting Autonomous Access Points to Lightweight Mode 127

Information About Autonomous Access Points Converted to Lightweight Mode 128

Reverting from Lightweight Mode to Autonomous Mode 128

Using DHCP Option 43 and DHCP Option 60 128

How Converted Access Points Send Crash Information to the 129

Uploading Memory Core Dumps from Converted Access Points 129

Displaying MAC Addresses for Converted Access Points 129

Configuring a Static IP Address for a Lightweight Access Point 129

How to Convert a Lightweight Access Point Back to an Autonomous Access Point 130

Converting a Lightweight Access Point Back to an Autonomous Access Point (CLI) 130

Converting a Lightweight Access Point Back to an Autonomous Access Point (Using the Mode

Button and a TFTP Server) 130

Disabling the Reset Button on Converted Access Points (CLI) 131

Monitoring the AP Crash Log Information 132

How to Configure a Static IP Address on an Access Point 132

Configuring a Static IP Address on an Access Point (CLI) 132

Configuring a Static IP Address on an Access Point (GUI) 134

Recovering the Access Point Using the TFTP Recovery Procedure 134

Configuration Examples for Converting Autonomous Access Points to Lightweight Mode 134

Example: Displaying the IP Address Configuration for Access Points 134

Example: Displaying Access Point Crash File Information 135

Ethernet VLAN Tagging on Access Points 135

Information About Ethernet VLAN Tagging on Access Points 135

Configuring Ethernet VLAN Tagging on Access Points (GUI) 135

Configuring Ethernet VLAN Tagging on Access Points (CLI) 135

AP Crash File Upload 137

CHAPTER 15

AP Crash File Upload 137

Configuring AP Crash File Upload (CLI) 138

Rogue per AP 139

CHAPTER 16

Rogue per AP 139

Enabling Rogue Detection 140

Configuring an AP Profile (GUI) 140

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

Contents

Configure an AP Profile 144

Define a Wireless Site Tag and Assign an AP Profile (GUI) 146

Define a Wireless Site Tag and Assign an AP Profile (CLI) 146

Associating Wireless Tag to an AP (GUI) 146

Associate Wireless Tag to an AP (CLI) 147

Access Point Plug-n-Play 149

CHAPTER 17

Overview of Access Point Plug-n-Play 149

Provisioning AP from PnP Server 149

Verifying AP Tag Configuration 150

802.11 Parameters for Cisco Access Points 151

CHAPTER 18

2.4-GHz Radio Support 151

Configuring 2.4-GHz Radio Support for the Specified Slot Number 151

5-GHz Radio Support 153

Configuring 5-GHz Radio Support for the Specified Slot Number 153

Information About Dual-Band Radio Support 155

Configuring Default XOR Radio Support 155

Configuring XOR Radio Support for the Specified Slot Number (GUI) 158

Configuring XOR Radio Support for the Specified Slot Number 158

Receiver Only Dual-Band Radio Support 160

Information About Receiver Only Dual-Band Radio Support 160

Configuring Receiver Only Dual-Band Parameters for Access Points 160

Enabling CleanAir with Receiver Only Dual-Band Radio on a Cisco Access Point (GUI) 160

Enabling CleanAir with Receiver Only Dual-Band Radio on a Cisco Access Point 160

Disabling Receiver Only Dual-Band Radio on a Cisco Access Point (GUI) 161

Disabling Receiver Only Dual-Band Radio on a Cisco Access Point 161

Configuring Client Steering (CLI) 161

Verifying Cisco Access Points with Dual-Band Radios 163

802.1x Support 165

CHAPTER 19

Introduction to the 802.1x Authentication 165

EAP-FAST Protocol 165

EAP-TLS/EAP-PEAP Protocol 166

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

Contents

Limitations of the 802.1x Authentication 166

Topology - Overview 166

Configuring 802.1x Authentication Type and LSC AP Authentication Type (GUI) 167

Configuring 802.1x Authentication Type and LSC AP Authentication Type 167

Configuring the 802.1x Username and Password (GUI) 168

Configuring the 802.1x Username and Password (CLI) 169

Enabling 802.1x on the Switch Port 170

Verifying 802.1x on the Switch Port 171

Verifying the Authentication Type 172

Configuring CAPWAP Link Aggregation Support 173

CHAPTER 20

Information About Link Aggregation 173

Information About CAPWAP LAG Support 173

Restrictions for CAPWAP LAG Support 174

Enabling CAPWAP LAG Support on Controller (GUI) 174

Enabling CAPWAP LAG Support on Controller 174

Enabling CAPWAP LAG Globally on Controller 175

Disabling CAPWAP LAG Globally on Controller 175

Enabling CAPWAP LAG for an AP Profile (GUI) 175

Enabling CAPWAP LAG for an AP Profile 176

Disabling CAPWAP LAG for an AP Profile 176

Disabling CAPWAP LAG Support on Controller 177

Verifying CAPWAP LAG Support Configurations 177

Radio Resource Management 179

PART III

Radio Resource Management 181

CHAPTER 21

Information About Radio Resource Management 181

Radio Resource Monitoring 182

Information About RF Groups 182

RF Group Leader 183

RF Group Name 185

Rogue Access Point Detection in RF Groups 185

Transmit Power Control 185

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

Contents

Overriding the TPC Algorithm with Minimum and Maximum Transmit Power Settings 186

Dynamic Channel Assignment 186

Coverage Hole Detection and Correction 188

Restrictions for Radio Resource Management 188

How to Configure RRM 189

Configuring Neighbor Discovery Type (GUI) 189

Configuring Neighbor Discovery Type (CLI) 189

Configuring RF Groups 189

Configuring RF Group Selection Mode (GUI) 190

Configuring RF Group Selection Mode (CLI) 190

Configuring an RF Group Name (CLI) 191

Configuring Members in an 802.11 Static RF Group (GUI) 191

Configuring Members in an 802.11 Static RF Group (CLI) 192

Configuring Transmit Power Control 192

Configuring Transmit Power (GUI) 192

Configuring the Tx-Power Control Threshold (CLI) 193

Configuring the Tx-Power Level (CLI) 194

Configuring 802.11 RRM Parameters 194

Configuring Advanced 802.11 Channel Assignment Parameters (GUI) 194

Configuring Advanced 802.11 Channel Assignment Parameters (CLI) 196

Configuring 802.11 Coverage Hole Detection (GUI) 198

Configuring 802.11 Coverage Hole Detection (CLI) 198

Configuring 802.11 Event Logging (CLI) 199

Configuring 802.11 Statistics Monitoring (GUI) 200

Configuring 802.11 Statistics Monitoring (CLI) 201

Configuring the 802.11 Performance Profile (GUI) 202

Configuring the 802.11 Performance Profile (CLI) 202

Configuring Advanced 802.11 RRM 203

Enabling Channel Assignment (GUI) 203

Enabling Channel Assignment (CLI) 204

Restarting DCA Operation 204

Updating Power Assignment Parameters (GUI) 204

Updating Power Assignment Parameters (CLI) 205

Configuring Rogue Access Point Detection in RF Groups 205

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

xii

Contents

Configuring Rogue Access Point Detection in RF Groups (CLI) 205

Monitoring RRM Parameters and RF Group Status 206

Monitoring RRM Parameters 206

Verifying RF Group Status (CLI) 207

Examples: RF Group Configuration 208

Information About ED-RRM 208

Configuring ED-RRM on the Cisco Wireless LAN Controller (CLI) 208

Coverage Hole Detection 211

CHAPTER 22

Coverage Hole Detection and Correction 211

Configuring Coverage Hole Detection (GUI) 211

Configuring Coverage Hole Detection (CLI) 212

Configuring CHD for RF Tag Profile (GUI) 213

Configuring CHD for RF Tag Profile (CLI) 214

Optimized Roaming 215

CHAPTER 23

Optimized Roaming 215

Restrictions for Optimized Roaming 215

Configuring Optimized Roaming (GUI) 216

Configuring Optimized Roaming (CLI) 216

Cisco Flexible Radio Assignment 219

CHAPTER 24

Information About Flexible Radio Assignment 219

Benefits of the FRA Feature 220

Configuring an FRA Radio (CLI) 220

Configuring an FRA Radio (GUI) 222

XOR Radio Support 223

CHAPTER 25

Information About Dual-Band Radio Support 223

Configuring Default XOR Radio Support 224

Configuring XOR Radio Support for the Specified Slot Number (GUI) 226

Configuring XOR Radio Support for the Specified Slot Number 226

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

xiii

Contents

Cisco Receiver Start of Packet 229

CHAPTER 26

Information About Receiver Start of Packet Detection Threshold 229

Restrictions for Rx SOP 229

Configuring Rx SOP (CLI) 230

Customizing RF Profile (CLI) 230

Client Limit 233

CHAPTER 27

Information About Client Limit 233

Configuring Client Limit (GUI) 233

Configuring Client Limit (CLI) 233

IP Theft 235

CHAPTER 28

Introduction to IP Theft 235

Configuring IP Theft (GUI) 236

Configuring IP Theft 236

Configuring the IP Theft Exclusion Timer 236

Adding Static Entries for Wired Hosts 237

Verifying IP Theft Configuration 238

Unscheduled Automatic Power Save Delivery 241

CHAPTER 29

Information About Unscheduled Automatic Power Save Delivery 241

Viewing Unscheduled Automatic Power Save Delivery (CLI) 241

Enabling USB Port on Access Points 243

CHAPTER 30

USB Port as Power Source for Access Points 243

Configuring an AP Profile (CLI) 244

Configuring USB Settings for an Access Point (CLI) 244

Monitoring USB Configurations for Access Points (CLI) 245

Dynamic Frequency Selection 247

CHAPTER 31

Information About Dynamic Frequency Selection 247

Configuring Dynamic Frequency Selection (GUI) 247

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

xiv

Contents

Configuring Dynamic Frequency Selection 247

Verifying DFS 248

Network Management 249

PART IV

AP Packet Capture 251

CHAPTER 32

Introduction to AP Client Packet Capture 251

Enabling Packet Capture (GUI) 251

Enabling Packet Capture (CLI) 252

Create AP Packet Capture Profile and Map to an AP Join Profile (GUI) 252

Create AP Packet Capture Profile and Map to an AP Join Profile 252

Start or Stop Packet Capture 253

DHCP Option82 255

CHAPTER 33

Information About DHCP Option 82 255

Configuring DHCP Option 82 Global Interface 256

Configuring DHCP Option 82 Globally Through Server Override (CLI) 256

Configuring DHCP Option 82 Globally Through Different SVIs (GUI) 257

Configuring DHCP Option 82 Globally Through Different SVIs (CLI) 257

Configuring DHCP Option 82 Format 258

Configuring DHCP Option82 Through a VLAN Interface 259

Configuring DHCP Option 82 Through Option-Insert Command (CLI) 259

Configuring DHCP Option 82 Through the server-ID-override Command (CLI) 260

Configuring DHCP Option 82 Through a Subscriber-ID (CLI) 261

Configuring DHCP Option 82 Through server-ID-override and subscriber-ID Commands (CLI)

262

Configuring DHCP Option 82 Through Different SVIs (CLI) 263

RADIUS Realm 265

CHAPTER 34

Information About RADIUS Realm 265

Enabling RADIUS Realm 266

Configuring Realm to Match the RADIUS Server for Authentication and Accounting 266

Configuring the AAA Policy for a WLAN 267

Verifying the RADIUS-Realm Configuration 269

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

Contents

Cisco StadiumVision 271

CHAPTER 35

Cisco StadiumVision Overview 271

Configure Wireless Controller Parameters for Cisco StadiumVision (GUI) 272

Configure Wireless Controller Parameters for Cisco StadiumVision (CLI) 272

Verify StadiumVision Configurations 273

Persistent SSID Broadcast 275

CHAPTER 36

Persistent SSID Broadcast 275

Configuring Persistent SSID Broadcast 275

Verifying Persistent SSID Broadcast 276

Network Monitoring 277

CHAPTER 37

Network Monitoring 277

Status Information Received Synchronously - Configuration Examples 277

Alarm and Event Information Received Asynchronously - Configuration Examples 279

System Management 281

PART V

Network Mobility Services Protocol 283

CHAPTER 38

Information About Network Mobility Services Protocol 283

Enabling NMSP on Premises Services 284

Modifying the NMSP Notification Interval for Clients, RFID Tags, and Rogues 284

Modifying the NMSP Notification Threshold for Clients, RFID Tags, and Rogues 285

Configuring NMSP Strong Cipher 286

Verifying NMSP Settings 286

Examples: NMSP Settings Configuration 288

NMSP by AP Groups with Subscription List from CMX 289

Verifying NMSP by AP Groups with Subscription List from CMX 289

Probe RSSI Location 290

Configuring Probe RSSI 291

RFID Tag Support 292

Configuring RFID Tag Support 293

Verifying RFID Tag Support 293

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

xvi

Contents

Application Visibility and Control 297

CHAPTER 39

Information About Application Visibility and Control 297

Prerequisites for Application Visibility and Control 299

Restrictions for Application Visibility and Control 299

AVC Configuration Overview 299

Create a Flow Monitor 300

Create a Flow Record 301

Create a Flow Exporter 303

Configure a WLAN for AVC 304

Configuring a Policy Tag 305

Attaching a Policy Profile to a WLAN Interface (GUI) 305

Attaching a Policy Profile to a WLAN Interface (CLI) 306

Attaching a Policy Profile to an AP 307

Verify the AVC Configuration 307

Default DSCP on AVC 308

Configuring Default DSCP for AVC Profile (GUI) 308

Configuring Default DSCP for AVC Profile 309

Creating Class Map 309

Creating Policy Map 310

AVC-Based Selective Reanchoring 311

Restrictions for AVC-Based Selective Reanchoring 311

Configuring the Flow Exporter 311

Configuring the Flow Monitor 312

Configuring the AVC Reanchoring Profile 313

Configuring the Wireless WLAN Profile Policy 313

Verifying AVC Reanchoring 314

Cisco Hyperlocation 319

CHAPTER 40

Information About Cisco Hyperlocation 319

Restrictions on Cisco Hyperlocation 321

Configuring Cisco Hyperlocation (GUI) 321

Configuring Cisco Hyperlocation (CLI) 322

Verifying Cisco Hyperlocation 323

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

xvii

Contents

Configuring Hyperlocation BLE Beacon Parameters for AP (GUI) 326

Configuring Hyperlocation BLE Beacon Parameters (CLI) 326

Verifying Hyperlocation BLE Beacon Configuration 327

Configuring Hyperlocation BLE Beacon Parameters for AP (CLI) 327

Verifying Hyperlocation BLE Beacon Configuration for AP 328

Cisco Connected Mobile Experiences Cloud 329

CHAPTER 41

Configuring Cisco CMX Cloud 329

Verifying Cisco CMX Cloud Configuration 330

EDCA Parameters 333

CHAPTER 42

Enhanced Distributed Channel Access Parameters 333

Configuring EDCA Parameters (GUI) 333

Configuring EDCA Parameters (CLI) 334

802.11 parameters and Band Selection 337

CHAPTER 43

Information About Configuring Band Selection, 802.11 Bands, and Parameters 337

Band Select 337

802.11 Bands 338

802.11n Parameters 338

802.11h Parameters 338

Restrictions for Band Selection, 802.11 Bands, and Parameters 338

How to Configure 802.11 Bands and Parameters 339

Configuring Band Selection (GUI) 339

Configuring Band Selection (CLI) 340

Configuring the 802.11 Bands (GUI) 341

Configuring the 802.11 Bands (CLI) 342

Configuring a Band-Select RF Profile (GUI) 344

Configuring 802.11n Parameters (GUI) 344

Configuring 802.11n Parameters (CLI) 345

Configuring 802.11h Parameters (CLI) 347

Monitoring Configuration Settings for Band Selection, 802.11 Bands, and Parameters 348

Verifying Configuration Settings Using Band Selection and 802.11 Bands Commands 348

Example: Viewing the Configuration Settings for the 5-GHz Band 348

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

xviii

Contents

Example: Viewing the Configuration Settings for the 2.4-GHz Band 350

Example: Viewing the status of 802.11h Parameters 351

Example: Verifying the Band-Selection Settings 352

Configuration Examples for Band Selection, 802.11 Bands, and Parameters 352

Examples: Band Selection Configuration 352

Examples: 802.11 Bands Configuration 353

Examples: 802.11n Configuration 353

Examples: 802.11h Configuration 354

Predownloading an Image to an Access Point 355

CHAPTER 44

Information About Predownloading an Image to an Access Point 355

Restrictions for Predownloading an Image to an Access Point 355

Predownloading an Image to Access Points (CLI) 356

Monitoring the Access Point Predownload Process 357

Efficient Image Upgrade 359

CHAPTER 45

Efficient Image Upgrade 359

Enable Pre-Download (GUI) 359

Enable Pre-Download (CLI) 360

Configuring a Site Tag (CLI) 360

Attaching Policy Tag and Site Tag to an AP (CLI) 361

Trigger Predownload to a Site Tag 362

N+1 Hitless Rolling AP Upgrade 365

CHAPTER 46

N+1 Hitless Rolling AP Upgrade 365

Configuring Hitless Upgrade 366

Verifying Hitless Upgrade 366

Wireless Sub-Package for Switch 369

CHAPTER 47

Introduction to Wireless Sub-package 369

Booting in Install Mode 370

Installing Sub-Package in a Single Step (GUI) 371

Installing Sub-Package in a Single Step 371

Multi-step Installation of Sub-Package 372

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

xix

Contents

Installing on a Stack 373

Upgrading to a Newer Version of Wireless Package 373

Deactivating the Wireless Package 373

Enabling or Disabling Auto-Upgrade 374

NBAR Protocol Discovery 375

CHAPTER 48

Introduction to NBAR Protocol Discovery 375

Configuring NBAR Protocol Discovery 375

Verifying Protocol Discovery Statistics 376

NBAR Dynamic Protocol Pack Upgrade 377

CHAPTER 49

NBAR Dynamic Protocol Pack Upgrade 377

Upgrading the NBAR2 Protocol Pack 378

Conditional Debug and Radioactive Tracing 379

CHAPTER 50

Introduction to Conditional Debugging 379

Introduction to Radioactive Tracing 380

Conditional Debugging and Radioactive Tracing 380

Location of Tracefiles 380

Configuring Conditional Debugging (GUI) 381

Configuring Conditional Debugging 381

Radioactive Tracing for L2 Multicast 383

Recommended Workflow for Trace files 383

Copying Tracefiles Off the Box 383

Configuration Examples for Conditional Debugging 384

Verifying Conditional Debugging 385

Example: Verifying Radioactive Tracing Log for SISF 385

Aggressive Client Load Balancing 387

CHAPTER 51

Information About Aggressive Client Load Balancing 387

Enabling Aggressive Client Load Balancing (GUI) 388

Configuring Aggressive Client Load Balancing (GUI) 388

Configuring Aggressive Client Load Balancing (CLI) 389

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

Contents

Page is loading ...

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152

Cisco Catalyst 9800-L Wireless Controller Configuration Guide

Brand: Cisco

Model: Catalyst 9800-L Wireless Controller

Category: Networking

Type: Configuration Guide

This manual is also suitable for

Download PDF

report

Cisco Catalyst 9800-L Wireless Controller Configuration Guide

This manual is also suitable for

Cisco Catalyst 9800-L Wireless Controller Configuration Guide

Related papers

Other documents