Catalyst 9800-L Wireless Controller

Cisco Catalyst 9800-L Wireless Controller , Catalyst 9800 Series Wireless Controllers, Catalyst 9800-40 Wireless Controller , Catalyst 9800-80 Wireless Controller , Catalyst 9800-L-C Wireless Controller , Catalyst 9800-L-F Wireless Controller Configuration Guide

  • Hello! I am an AI chatbot trained to assist you with the Cisco Catalyst 9800-L Wireless Controller Configuration Guide. I’ve already reviewed the document and can help you find the information you need or explain it in simple terms. Just ask your questions, and providing more details will help me assist you more effectively!
Cisco Catalyst 9800 Series Wireless Controller Software Configuration
Guide, Cisco IOS XE Gibraltar 16.10.x
First Published: 2018-11-20
Last Modified: 2019-03-14
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: 408 526-4000
800 553-NETS (6387)
Fax: 408 527-0883
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of
the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.
Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:
https://www.cisco.com/c/en/us/about/legal/trademarks.html. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a
partnership relationship between Cisco and any other company. (1721R)
©2019 Cisco Systems, Inc. All rights reserved.
CONTENTS
Preface liii
PREFACE
Document Conventions liii
Related Documentation lv
Obtaining Documentation and Submitting a Service Request lv
Overview of Cisco 9800 Series Wireless Controllers 1
CHAPTER 1
Elements of the New Configuration Model 1
Configuration Workflow 2
Initial Setup 3
System Configuration 5
PART I
System Configuration 7
CHAPTER 2
Information About New Configuration Model 7
Configuring a Wireless Profile Policy (GUI) 9
Configuring a Wireless Profile Policy (CLI) 10
Configuring a Flex Profile (GUI) 11
Configuring a Flex Profile 11
Configuring an AP Profile (GUI) 12
Configuring an AP Profile (CLI) 17
Configuring User for AP Management (CLI) 17
Setting a Private Configuration Key for Password Encryption 18
Configuring an RF Profile (GUI) 19
Configuring an RF Profile (CLI) 19
Configuring a Site Tag (GUI) 20
Configuring a Site Tag (CLI) 21
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x
iii
Configuring Policy Tag (GUI) 22
Configuring a Policy Tag (CLI) 22
Configuring Wireless RF Tag (GUI) 23
Configuring Wireless RF Tag (CLI) 23
Attaching a Policy Tag and Site Tag to an AP (GUI) 24
Attaching Policy Tag and Site Tag to an AP (CLI) 25
AP Filter 26
Introduction to AP Filter 26
Set Tag Priority (GUI) 26
Set Tag Priority 27
Create an AP Filter (GUI) 27
Create an AP Filter (CLI) 28
Set Up and Update Filter Priority (GUI) 28
Set Up and Update Filter Priority 29
Verify AP Filter Configuration 29
Configuring Access Point for Location Configuration 30
Information About Location Configuration 30
Prerequisite for Location Configuration 31
Configuring a Location for an Access Point (GUI) 31
Configuring a Location for an Access Point (CLI) 31
Adding an Access Point to the Location (GUI) 32
Adding an Access Point to the Location (CLI) 33
Configuring SNMP in Location Configuration 33
SNMP MIB 33
Verifying Location Configuration 34
Verifying Location Statistics 34
RF Profile 35
CHAPTER 3
RF Tag Profiles 35
Configuring an AP Tag (GUI) 35
Configuring AP Tag (CLI) 36
Configuring RF Profile (GUI) 37
Configuring an RF Profile (CLI) 38
Configuring Wireless RF Tag (GUI) 39
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x
iv
Contents
Configuring Wireless RF Tag (CLI) 40
BIOS Protection 43
CHAPTER 4
BIOS Protection on the Controller 43
BIOS or ROMMON Upgrade with BIOS Protection 43
Upgrading BIOS 44
Smart Licensing 45
CHAPTER 5
Information About Cisco Smart Licensing 45
Creating a Smart Account 47
Using Smart Licensing 48
Reregister a License (GUI) 48
Using Specified License Reservation (SLR) 48
Enabling Smart Software Licensing 49
Enabling Smart Call Home Reporting 50
Configuring AIR License Level (GUI) 50
Configuring AIR License Level (CLI) 51
Configuring AIR Network Essentials License Level 51
Configuring AIR Network Advantage License Level 52
Verifying Smart Licensing Configurations 52
Best Practices 55
CHAPTER 6
Introduction 55
Lightweight Access Points 57
PART II
Country Codes 59
CHAPTER 7
Information About Country Codes 59
Prerequisites for Configuring Country Codes 59
Configuring Country Codes (GUI) 60
How to Configure Country Codes 60
Configuration Examples for Configuring Country Codes 62
Viewing Channel List for Country Codes 62
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x
v
Contents
Sniffer Mode 65
CHAPTER 8
Finding Feature Information 65
Information about Sniffer 65
Prerequisites for Sniffer 65
Restrictions on Sniffer 66
How to Configure Sniffer 66
Configuring an Access Point as Sniffer (GUI) 66
Configuring an Access Point as Sniffer (CLI) 67
Enabling or Disabling Sniffing on the Access Point (GUI) 67
Enabling or Disabling Sniffing on the Access Point (CLI) 67
Verifying Sniffer Configurations 68
Examples for Sniffer Configurations and Monitoring 68
Monitor Mode 69
CHAPTER 9
Introduction to Monitor Mode 69
Enable Monitor Mode (GUI) 69
Enable Monitor Mode (CLI) 70
Sensor Mode 71
CHAPTER 10
Introduction to Sensor Mode 71
Enabling Sensor Mode 71
Verifying Sensor Mode Configuration 74
AP Priority 75
CHAPTER 11
Failover Priority for Access Points 75
Setting AP Priority (GUI) 75
Setting AP Priority 76
FlexConnect 77
CHAPTER 12
Information About FlexConnect 77
FlexConnect Authentication Process 79
Guidelines and Restrictions for FlexConnect 82
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x
vi
Contents
Configuring a Site Tag 85
Configuring a Policy Tag (CLI) 86
Attaching a Policy Tag and a Site Tag to an AP (GUI) 87
Attaching Policy Tag and Site Tag to an AP (CLI) 87
Linking an ACL Policy to the Defined ACL (GUI) 88
Applying ACLs on FlexConnect 89
Configuring FlexConnect 90
Configuring a Switch at a Remote Site 90
Configuring the Controller for FlexConnect 91
Configuring Local Switching in FlexConnect Mode (GUI) 91
Configuring Local Switching in FlexConnect Mode (CLI) 92
Configuring Central Switching in FlexConnect Mode (GUI) 92
Configuring Central Switching in FlexConnect Mode 93
Configuring an Access Point for FlexConnect 93
Configuring an Access Point for Local Authentication on a WLAN (GUI) 93
Configuring an Access Point for Local Authentication on a WLAN (CLI) 94
Connecting Client Devices to WLANs 94
Configuring FlexConnect Ethernet Fallback 95
Information About FlexConnect Ethernet Fallback 95
Restrictions for FlexConnect Ethernet Fallback 95
Configuring FlexConnect Ethernet Fallback 95
Flex AP Local Authentication (GUI) 96
Flex AP Local Authentication (CLI) 97
Flex AP Local Authentication with External Radius Server 99
Configuration Example: FlexConnect with Central and Local Authentication 102
NAT-PAT for FlexConnect 102
Configuring NAT-PAT for a WLAN or a Remote LAN 102
Creating a WLAN 102
Configuring a Wireless Profile Policy and NAT-PAT (GUI) 103
Configuring a Wireless Profile Policy and NAT-PAT 103
Mapping a WLAN to a Policy Profile 104
Configuring a Site Tag 105
Attaching a Policy Tag and a Site Tag to an Access Point (GUI) 105
Attaching a Policy Tag and a Site Tag to an Access Point 106
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x
vii
Contents
Split Tunneling for FlexConnect 106
Configuring Split Tunneling for a WLAN or Remote LAN 107
Defining an Access Control List for Split Tunneling (GUI) 107
Defining an Access Control List for Split Tunneling 107
Linking an ACL Policy to the Defined ACL 108
Creating a WLAN 109
Configuring a Wireless Profile Policy and a Split MAC ACL Name (GUI) 109
Configuring a Wireless Profile Policy and a Split MAC ACL Name 110
Mapping a WLAN to a Policy Profile (GUI) 111
Mapping WLAN to a Policy Profile 111
Configuring a Site Tag 112
Attaching a Policy Tag and Site Tag to an Access Point 112
VLAN-based Central Switching for FlexConnect 113
Configuring VLAN-based Central Switching (GUI) 113
Configuring VLAN-based Central Switching (CLI) 114
OfficeExtend Access Points for FlexConnect 115
Configuring OfficeExtend Access Points 115
Disabling OfficeExtend Access Point 116
Clearing Personal SSID from an OfficeExtend Access Point 117
Example: Viewing OfficeExtend Configuration 117
Proxy ARP 118
Enabling Proxy ARP for FlexConnect APs (GUI) 118
Enabling Proxy ARP for FlexConnect APs 118
Lawful Interception 119
Lawful Interception of Traffic 119
Configuring Lawful Interception 120
Verifying the Status of Lawful Interception 120
Data DTLS 123
CHAPTER 13
Information About Data Datagram Transport Layer Security 123
Configuring Data DTLS (GUI) 123
Configuring Data DTLS (CLI) 124
Converting Autonomous Access Points to Lightweight Mode 127
CHAPTER 14
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x
viii
Contents
Guidelines for Converting Autonomous Access Points to Lightweight Mode 127
Information About Autonomous Access Points Converted to Lightweight Mode 128
Reverting from Lightweight Mode to Autonomous Mode 128
Using DHCP Option 43 and DHCP Option 60 128
How Converted Access Points Send Crash Information to the 129
Uploading Memory Core Dumps from Converted Access Points 129
Displaying MAC Addresses for Converted Access Points 129
Configuring a Static IP Address for a Lightweight Access Point 129
How to Convert a Lightweight Access Point Back to an Autonomous Access Point 130
Converting a Lightweight Access Point Back to an Autonomous Access Point (CLI) 130
Converting a Lightweight Access Point Back to an Autonomous Access Point (Using the Mode
Button and a TFTP Server) 130
Disabling the Reset Button on Converted Access Points (CLI) 131
Monitoring the AP Crash Log Information 132
How to Configure a Static IP Address on an Access Point 132
Configuring a Static IP Address on an Access Point (CLI) 132
Configuring a Static IP Address on an Access Point (GUI) 134
Recovering the Access Point Using the TFTP Recovery Procedure 134
Configuration Examples for Converting Autonomous Access Points to Lightweight Mode 134
Example: Displaying the IP Address Configuration for Access Points 134
Example: Displaying Access Point Crash File Information 135
Ethernet VLAN Tagging on Access Points 135
Information About Ethernet VLAN Tagging on Access Points 135
Configuring Ethernet VLAN Tagging on Access Points (GUI) 135
Configuring Ethernet VLAN Tagging on Access Points (CLI) 135
AP Crash File Upload 137
CHAPTER 15
AP Crash File Upload 137
Configuring AP Crash File Upload (CLI) 138
Rogue per AP 139
CHAPTER 16
Rogue per AP 139
Enabling Rogue Detection 140
Configuring an AP Profile (GUI) 140
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x
ix
Contents
Configure an AP Profile 144
Define a Wireless Site Tag and Assign an AP Profile (GUI) 146
Define a Wireless Site Tag and Assign an AP Profile (CLI) 146
Associating Wireless Tag to an AP (GUI) 146
Associate Wireless Tag to an AP (CLI) 147
Access Point Plug-n-Play 149
CHAPTER 17
Overview of Access Point Plug-n-Play 149
Provisioning AP from PnP Server 149
Verifying AP Tag Configuration 150
802.11 Parameters for Cisco Access Points 151
CHAPTER 18
2.4-GHz Radio Support 151
Configuring 2.4-GHz Radio Support for the Specified Slot Number 151
5-GHz Radio Support 153
Configuring 5-GHz Radio Support for the Specified Slot Number 153
Information About Dual-Band Radio Support 155
Configuring Default XOR Radio Support 155
Configuring XOR Radio Support for the Specified Slot Number (GUI) 158
Configuring XOR Radio Support for the Specified Slot Number 158
Receiver Only Dual-Band Radio Support 160
Information About Receiver Only Dual-Band Radio Support 160
Configuring Receiver Only Dual-Band Parameters for Access Points 160
Enabling CleanAir with Receiver Only Dual-Band Radio on a Cisco Access Point (GUI) 160
Enabling CleanAir with Receiver Only Dual-Band Radio on a Cisco Access Point 160
Disabling Receiver Only Dual-Band Radio on a Cisco Access Point (GUI) 161
Disabling Receiver Only Dual-Band Radio on a Cisco Access Point 161
Configuring Client Steering (CLI) 161
Verifying Cisco Access Points with Dual-Band Radios 163
802.1x Support 165
CHAPTER 19
Introduction to the 802.1x Authentication 165
EAP-FAST Protocol 165
EAP-TLS/EAP-PEAP Protocol 166
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x
x
Contents
Limitations of the 802.1x Authentication 166
Topology - Overview 166
Configuring 802.1x Authentication Type and LSC AP Authentication Type (GUI) 167
Configuring 802.1x Authentication Type and LSC AP Authentication Type 167
Configuring the 802.1x Username and Password (GUI) 168
Configuring the 802.1x Username and Password (CLI) 169
Enabling 802.1x on the Switch Port 170
Verifying 802.1x on the Switch Port 171
Verifying the Authentication Type 172
Configuring CAPWAP Link Aggregation Support 173
CHAPTER 20
Information About Link Aggregation 173
Information About CAPWAP LAG Support 173
Restrictions for CAPWAP LAG Support 174
Enabling CAPWAP LAG Support on Controller (GUI) 174
Enabling CAPWAP LAG Support on Controller 174
Enabling CAPWAP LAG Globally on Controller 175
Disabling CAPWAP LAG Globally on Controller 175
Enabling CAPWAP LAG for an AP Profile (GUI) 175
Enabling CAPWAP LAG for an AP Profile 176
Disabling CAPWAP LAG for an AP Profile 176
Disabling CAPWAP LAG Support on Controller 177
Verifying CAPWAP LAG Support Configurations 177
Radio Resource Management 179
PART III
Radio Resource Management 181
CHAPTER 21
Information About Radio Resource Management 181
Radio Resource Monitoring 182
Information About RF Groups 182
RF Group Leader 183
RF Group Name 185
Rogue Access Point Detection in RF Groups 185
Transmit Power Control 185
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x
xi
Contents
Overriding the TPC Algorithm with Minimum and Maximum Transmit Power Settings 186
Dynamic Channel Assignment 186
Coverage Hole Detection and Correction 188
Restrictions for Radio Resource Management 188
How to Configure RRM 189
Configuring Neighbor Discovery Type (GUI) 189
Configuring Neighbor Discovery Type (CLI) 189
Configuring RF Groups 189
Configuring RF Group Selection Mode (GUI) 190
Configuring RF Group Selection Mode (CLI) 190
Configuring an RF Group Name (CLI) 191
Configuring Members in an 802.11 Static RF Group (GUI) 191
Configuring Members in an 802.11 Static RF Group (CLI) 192
Configuring Transmit Power Control 192
Configuring Transmit Power (GUI) 192
Configuring the Tx-Power Control Threshold (CLI) 193
Configuring the Tx-Power Level (CLI) 194
Configuring 802.11 RRM Parameters 194
Configuring Advanced 802.11 Channel Assignment Parameters (GUI) 194
Configuring Advanced 802.11 Channel Assignment Parameters (CLI) 196
Configuring 802.11 Coverage Hole Detection (GUI) 198
Configuring 802.11 Coverage Hole Detection (CLI) 198
Configuring 802.11 Event Logging (CLI) 199
Configuring 802.11 Statistics Monitoring (GUI) 200
Configuring 802.11 Statistics Monitoring (CLI) 201
Configuring the 802.11 Performance Profile (GUI) 202
Configuring the 802.11 Performance Profile (CLI) 202
Configuring Advanced 802.11 RRM 203
Enabling Channel Assignment (GUI) 203
Enabling Channel Assignment (CLI) 204
Restarting DCA Operation 204
Updating Power Assignment Parameters (GUI) 204
Updating Power Assignment Parameters (CLI) 205
Configuring Rogue Access Point Detection in RF Groups 205
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x
xii
Contents
Configuring Rogue Access Point Detection in RF Groups (CLI) 205
Monitoring RRM Parameters and RF Group Status 206
Monitoring RRM Parameters 206
Verifying RF Group Status (CLI) 207
Examples: RF Group Configuration 208
Information About ED-RRM 208
Configuring ED-RRM on the Cisco Wireless LAN Controller (CLI) 208
Coverage Hole Detection 211
CHAPTER 22
Coverage Hole Detection and Correction 211
Configuring Coverage Hole Detection (GUI) 211
Configuring Coverage Hole Detection (CLI) 212
Configuring CHD for RF Tag Profile (GUI) 213
Configuring CHD for RF Tag Profile (CLI) 214
Optimized Roaming 215
CHAPTER 23
Optimized Roaming 215
Restrictions for Optimized Roaming 215
Configuring Optimized Roaming (GUI) 216
Configuring Optimized Roaming (CLI) 216
Cisco Flexible Radio Assignment 219
CHAPTER 24
Information About Flexible Radio Assignment 219
Benefits of the FRA Feature 220
Configuring an FRA Radio (CLI) 220
Configuring an FRA Radio (GUI) 222
XOR Radio Support 223
CHAPTER 25
Information About Dual-Band Radio Support 223
Configuring Default XOR Radio Support 224
Configuring XOR Radio Support for the Specified Slot Number (GUI) 226
Configuring XOR Radio Support for the Specified Slot Number 226
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x
xiii
Contents
Cisco Receiver Start of Packet 229
CHAPTER 26
Information About Receiver Start of Packet Detection Threshold 229
Restrictions for Rx SOP 229
Configuring Rx SOP (CLI) 230
Customizing RF Profile (CLI) 230
Client Limit 233
CHAPTER 27
Information About Client Limit 233
Configuring Client Limit (GUI) 233
Configuring Client Limit (CLI) 233
IP Theft 235
CHAPTER 28
Introduction to IP Theft 235
Configuring IP Theft (GUI) 236
Configuring IP Theft 236
Configuring the IP Theft Exclusion Timer 236
Adding Static Entries for Wired Hosts 237
Verifying IP Theft Configuration 238
Unscheduled Automatic Power Save Delivery 241
CHAPTER 29
Information About Unscheduled Automatic Power Save Delivery 241
Viewing Unscheduled Automatic Power Save Delivery (CLI) 241
Enabling USB Port on Access Points 243
CHAPTER 30
USB Port as Power Source for Access Points 243
Configuring an AP Profile (CLI) 244
Configuring USB Settings for an Access Point (CLI) 244
Monitoring USB Configurations for Access Points (CLI) 245
Dynamic Frequency Selection 247
CHAPTER 31
Information About Dynamic Frequency Selection 247
Configuring Dynamic Frequency Selection (GUI) 247
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x
xiv
Contents
Configuring Dynamic Frequency Selection 247
Verifying DFS 248
Network Management 249
PART IV
AP Packet Capture 251
CHAPTER 32
Introduction to AP Client Packet Capture 251
Enabling Packet Capture (GUI) 251
Enabling Packet Capture (CLI) 252
Create AP Packet Capture Profile and Map to an AP Join Profile (GUI) 252
Create AP Packet Capture Profile and Map to an AP Join Profile 252
Start or Stop Packet Capture 253
DHCP Option82 255
CHAPTER 33
Information About DHCP Option 82 255
Configuring DHCP Option 82 Global Interface 256
Configuring DHCP Option 82 Globally Through Server Override (CLI) 256
Configuring DHCP Option 82 Globally Through Different SVIs (GUI) 257
Configuring DHCP Option 82 Globally Through Different SVIs (CLI) 257
Configuring DHCP Option 82 Format 258
Configuring DHCP Option82 Through a VLAN Interface 259
Configuring DHCP Option 82 Through Option-Insert Command (CLI) 259
Configuring DHCP Option 82 Through the server-ID-override Command (CLI) 260
Configuring DHCP Option 82 Through a Subscriber-ID (CLI) 261
Configuring DHCP Option 82 Through server-ID-override and subscriber-ID Commands (CLI)
262
Configuring DHCP Option 82 Through Different SVIs (CLI) 263
RADIUS Realm 265
CHAPTER 34
Information About RADIUS Realm 265
Enabling RADIUS Realm 266
Configuring Realm to Match the RADIUS Server for Authentication and Accounting 266
Configuring the AAA Policy for a WLAN 267
Verifying the RADIUS-Realm Configuration 269
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x
xv
Contents
Cisco StadiumVision 271
CHAPTER 35
Cisco StadiumVision Overview 271
Configure Wireless Controller Parameters for Cisco StadiumVision (GUI) 272
Configure Wireless Controller Parameters for Cisco StadiumVision (CLI) 272
Verify StadiumVision Configurations 273
Persistent SSID Broadcast 275
CHAPTER 36
Persistent SSID Broadcast 275
Configuring Persistent SSID Broadcast 275
Verifying Persistent SSID Broadcast 276
Network Monitoring 277
CHAPTER 37
Network Monitoring 277
Status Information Received Synchronously - Configuration Examples 277
Alarm and Event Information Received Asynchronously - Configuration Examples 279
System Management 281
PART V
Network Mobility Services Protocol 283
CHAPTER 38
Information About Network Mobility Services Protocol 283
Enabling NMSP on Premises Services 284
Modifying the NMSP Notification Interval for Clients, RFID Tags, and Rogues 284
Modifying the NMSP Notification Threshold for Clients, RFID Tags, and Rogues 285
Configuring NMSP Strong Cipher 286
Verifying NMSP Settings 286
Examples: NMSP Settings Configuration 288
NMSP by AP Groups with Subscription List from CMX 289
Verifying NMSP by AP Groups with Subscription List from CMX 289
Probe RSSI Location 290
Configuring Probe RSSI 291
RFID Tag Support 292
Configuring RFID Tag Support 293
Verifying RFID Tag Support 293
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x
xvi
Contents
Application Visibility and Control 297
CHAPTER 39
Information About Application Visibility and Control 297
Prerequisites for Application Visibility and Control 299
Restrictions for Application Visibility and Control 299
AVC Configuration Overview 299
Create a Flow Monitor 300
Create a Flow Record 301
Create a Flow Exporter 303
Configure a WLAN for AVC 304
Configuring a Policy Tag 305
Attaching a Policy Profile to a WLAN Interface (GUI) 305
Attaching a Policy Profile to a WLAN Interface (CLI) 306
Attaching a Policy Profile to an AP 307
Verify the AVC Configuration 307
Default DSCP on AVC 308
Configuring Default DSCP for AVC Profile (GUI) 308
Configuring Default DSCP for AVC Profile 309
Creating Class Map 309
Creating Policy Map 310
AVC-Based Selective Reanchoring 311
Restrictions for AVC-Based Selective Reanchoring 311
Configuring the Flow Exporter 311
Configuring the Flow Monitor 312
Configuring the AVC Reanchoring Profile 313
Configuring the Wireless WLAN Profile Policy 313
Verifying AVC Reanchoring 314
Cisco Hyperlocation 319
CHAPTER 40
Information About Cisco Hyperlocation 319
Restrictions on Cisco Hyperlocation 321
Configuring Cisco Hyperlocation (GUI) 321
Configuring Cisco Hyperlocation (CLI) 322
Verifying Cisco Hyperlocation 323
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x
xvii
Contents
Configuring Hyperlocation BLE Beacon Parameters for AP (GUI) 326
Configuring Hyperlocation BLE Beacon Parameters (CLI) 326
Verifying Hyperlocation BLE Beacon Configuration 327
Configuring Hyperlocation BLE Beacon Parameters for AP (CLI) 327
Verifying Hyperlocation BLE Beacon Configuration for AP 328
Cisco Connected Mobile Experiences Cloud 329
CHAPTER 41
Configuring Cisco CMX Cloud 329
Verifying Cisco CMX Cloud Configuration 330
EDCA Parameters 333
CHAPTER 42
Enhanced Distributed Channel Access Parameters 333
Configuring EDCA Parameters (GUI) 333
Configuring EDCA Parameters (CLI) 334
802.11 parameters and Band Selection 337
CHAPTER 43
Information About Configuring Band Selection, 802.11 Bands, and Parameters 337
Band Select 337
802.11 Bands 338
802.11n Parameters 338
802.11h Parameters 338
Restrictions for Band Selection, 802.11 Bands, and Parameters 338
How to Configure 802.11 Bands and Parameters 339
Configuring Band Selection (GUI) 339
Configuring Band Selection (CLI) 340
Configuring the 802.11 Bands (GUI) 341
Configuring the 802.11 Bands (CLI) 342
Configuring a Band-Select RF Profile (GUI) 344
Configuring 802.11n Parameters (GUI) 344
Configuring 802.11n Parameters (CLI) 345
Configuring 802.11h Parameters (CLI) 347
Monitoring Configuration Settings for Band Selection, 802.11 Bands, and Parameters 348
Verifying Configuration Settings Using Band Selection and 802.11 Bands Commands 348
Example: Viewing the Configuration Settings for the 5-GHz Band 348
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x
xviii
Contents
Example: Viewing the Configuration Settings for the 2.4-GHz Band 350
Example: Viewing the status of 802.11h Parameters 351
Example: Verifying the Band-Selection Settings 352
Configuration Examples for Band Selection, 802.11 Bands, and Parameters 352
Examples: Band Selection Configuration 352
Examples: 802.11 Bands Configuration 353
Examples: 802.11n Configuration 353
Examples: 802.11h Configuration 354
Predownloading an Image to an Access Point 355
CHAPTER 44
Information About Predownloading an Image to an Access Point 355
Restrictions for Predownloading an Image to an Access Point 355
Predownloading an Image to Access Points (CLI) 356
Monitoring the Access Point Predownload Process 357
Efficient Image Upgrade 359
CHAPTER 45
Efficient Image Upgrade 359
Enable Pre-Download (GUI) 359
Enable Pre-Download (CLI) 360
Configuring a Site Tag (CLI) 360
Attaching Policy Tag and Site Tag to an AP (CLI) 361
Trigger Predownload to a Site Tag 362
N+1 Hitless Rolling AP Upgrade 365
CHAPTER 46
N+1 Hitless Rolling AP Upgrade 365
Configuring Hitless Upgrade 366
Verifying Hitless Upgrade 366
Wireless Sub-Package for Switch 369
CHAPTER 47
Introduction to Wireless Sub-package 369
Booting in Install Mode 370
Installing Sub-Package in a Single Step (GUI) 371
Installing Sub-Package in a Single Step 371
Multi-step Installation of Sub-Package 372
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x
xix
Contents
Installing on a Stack 373
Upgrading to a Newer Version of Wireless Package 373
Deactivating the Wireless Package 373
Enabling or Disabling Auto-Upgrade 374
NBAR Protocol Discovery 375
CHAPTER 48
Introduction to NBAR Protocol Discovery 375
Configuring NBAR Protocol Discovery 375
Verifying Protocol Discovery Statistics 376
NBAR Dynamic Protocol Pack Upgrade 377
CHAPTER 49
NBAR Dynamic Protocol Pack Upgrade 377
Upgrading the NBAR2 Protocol Pack 378
Conditional Debug and Radioactive Tracing 379
CHAPTER 50
Introduction to Conditional Debugging 379
Introduction to Radioactive Tracing 380
Conditional Debugging and Radioactive Tracing 380
Location of Tracefiles 380
Configuring Conditional Debugging (GUI) 381
Configuring Conditional Debugging 381
Radioactive Tracing for L2 Multicast 383
Recommended Workflow for Trace files 383
Copying Tracefiles Off the Box 383
Configuration Examples for Conditional Debugging 384
Verifying Conditional Debugging 385
Example: Verifying Radioactive Tracing Log for SISF 385
Aggressive Client Load Balancing 387
CHAPTER 51
Information About Aggressive Client Load Balancing 387
Enabling Aggressive Client Load Balancing (GUI) 388
Configuring Aggressive Client Load Balancing (GUI) 388
Configuring Aggressive Client Load Balancing (CLI) 389
Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x
xx
Contents
/