Cisco Catalyst 9800-L Wireless Controller Configuration Guide

Cisco Catalyst 9800 Series Wireless Controller Software Configuration

Guide, Cisco IOS XE Gibraltar 16.10.x

First Published: 2018-11-20

Last Modified: 2019-03-14

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,

INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,

EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH

THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,

CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.

CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF

MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT

LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS

HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network

topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional

and coincidental.

All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.

Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:

https://www.cisco.com/c/en/us/about/legal/trademarks.html. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a

partnership relationship between Cisco and any other company. (1721R)

CONTENTS

Preface liii

PREFACE

Document Conventions liii

Related Documentation lv

Obtaining Documentation and Submitting a Service Request lv

Overview of Cisco 9800 Series Wireless Controllers 1

CHAPTER 1

Elements of the New Configuration Model 1

Configuration Workflow 2

Initial Setup 3

System Configuration 5

PART I

System Configuration 7

CHAPTER 2

Information About New Configuration Model 7

Configuring a Wireless Profile Policy (GUI) 9

Configuring a Wireless Profile Policy (CLI) 10

Configuring a Flex Profile (GUI) 11

Configuring a Flex Profile 11

Configuring an AP Profile (GUI) 12

Configuring an AP Profile (CLI) 17

Configuring User for AP Management (CLI) 17

Setting a Private Configuration Key for Password Encryption 18

Configuring an RF Profile (GUI) 19

Configuring an RF Profile (CLI) 19

Configuring a Site Tag (GUI) 20

Configuring a Site Tag (CLI) 21

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

iii

Configuring Policy Tag (GUI) 22

Configuring a Policy Tag (CLI) 22

Configuring Wireless RF Tag (GUI) 23

Configuring Wireless RF Tag (CLI) 23

Attaching a Policy Tag and Site Tag to an AP (GUI) 24

Attaching Policy Tag and Site Tag to an AP (CLI) 25

AP Filter 26

Introduction to AP Filter 26

Set Tag Priority (GUI) 26

Set Tag Priority 27

Create an AP Filter (GUI) 27

Create an AP Filter (CLI) 28

Set Up and Update Filter Priority (GUI) 28

Set Up and Update Filter Priority 29

Verify AP Filter Configuration 29

Configuring Access Point for Location Configuration 30

Information About Location Configuration 30

Prerequisite for Location Configuration 31

Configuring a Location for an Access Point (GUI) 31

Configuring a Location for an Access Point (CLI) 31

Adding an Access Point to the Location (GUI) 32

Adding an Access Point to the Location (CLI) 33

Configuring SNMP in Location Configuration 33

SNMP MIB 33

Verifying Location Configuration 34

Verifying Location Statistics 34

RF Profile 35

CHAPTER 3

RF Tag Profiles 35

Configuring an AP Tag (GUI) 35

Configuring AP Tag (CLI) 36

Configuring RF Profile (GUI) 37

Configuring an RF Profile (CLI) 38

Configuring Wireless RF Tag (GUI) 39

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

iv

Contents

Configuring Wireless RF Tag (CLI) 40

BIOS Protection 43

CHAPTER 4

BIOS Protection on the Controller 43

BIOS or ROMMON Upgrade with BIOS Protection 43

Upgrading BIOS 44

Smart Licensing 45

CHAPTER 5

Information About Cisco Smart Licensing 45

Creating a Smart Account 47

Using Smart Licensing 48

Reregister a License (GUI) 48

Using Specified License Reservation (SLR) 48

Enabling Smart Software Licensing 49

Enabling Smart Call Home Reporting 50

Configuring AIR License Level (GUI) 50

Configuring AIR License Level (CLI) 51

Configuring AIR Network Essentials License Level 51

Configuring AIR Network Advantage License Level 52

Verifying Smart Licensing Configurations 52

Best Practices 55

CHAPTER 6

Introduction 55

Lightweight Access Points 57

PART II

Country Codes 59

CHAPTER 7

Information About Country Codes 59

Prerequisites for Configuring Country Codes 59

Configuring Country Codes (GUI) 60

How to Configure Country Codes 60

Configuration Examples for Configuring Country Codes 62

Viewing Channel List for Country Codes 62

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

v

Contents

Sniffer Mode 65

CHAPTER 8

Finding Feature Information 65

Information about Sniffer 65

Prerequisites for Sniffer 65

Restrictions on Sniffer 66

How to Configure Sniffer 66

Configuring an Access Point as Sniffer (GUI) 66

Configuring an Access Point as Sniffer (CLI) 67

Enabling or Disabling Sniffing on the Access Point (GUI) 67

Enabling or Disabling Sniffing on the Access Point (CLI) 67

Verifying Sniffer Configurations 68

Examples for Sniffer Configurations and Monitoring 68

Monitor Mode 69

CHAPTER 9

Introduction to Monitor Mode 69

Enable Monitor Mode (GUI) 69

Enable Monitor Mode (CLI) 70

Sensor Mode 71

CHAPTER 10

Introduction to Sensor Mode 71

Enabling Sensor Mode 71

Verifying Sensor Mode Configuration 74

AP Priority 75

CHAPTER 11

Failover Priority for Access Points 75

Setting AP Priority (GUI) 75

Setting AP Priority 76

FlexConnect 77

CHAPTER 12

Information About FlexConnect 77

FlexConnect Authentication Process 79

Guidelines and Restrictions for FlexConnect 82

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

vi

Contents

Configuring a Site Tag 85

Configuring a Policy Tag (CLI) 86

Attaching a Policy Tag and a Site Tag to an AP (GUI) 87

Attaching Policy Tag and Site Tag to an AP (CLI) 87

Linking an ACL Policy to the Defined ACL (GUI) 88

Applying ACLs on FlexConnect 89

Configuring FlexConnect 90

Configuring a Switch at a Remote Site 90

Configuring the Controller for FlexConnect 91

Configuring Local Switching in FlexConnect Mode (GUI) 91

Configuring Local Switching in FlexConnect Mode (CLI) 92

Configuring Central Switching in FlexConnect Mode (GUI) 92

Configuring Central Switching in FlexConnect Mode 93

Configuring an Access Point for FlexConnect 93

Configuring an Access Point for Local Authentication on a WLAN (GUI) 93

Configuring an Access Point for Local Authentication on a WLAN (CLI) 94

Connecting Client Devices to WLANs 94

Configuring FlexConnect Ethernet Fallback 95

Information About FlexConnect Ethernet Fallback 95

Restrictions for FlexConnect Ethernet Fallback 95

Configuring FlexConnect Ethernet Fallback 95

Flex AP Local Authentication (GUI) 96

Flex AP Local Authentication (CLI) 97

Flex AP Local Authentication with External Radius Server 99

Configuration Example: FlexConnect with Central and Local Authentication 102

NAT-PAT for FlexConnect 102

Configuring NAT-PAT for a WLAN or a Remote LAN 102

Creating a WLAN 102

Configuring a Wireless Profile Policy and NAT-PAT (GUI) 103

Configuring a Wireless Profile Policy and NAT-PAT 103

Mapping a WLAN to a Policy Profile 104

Configuring a Site Tag 105

Attaching a Policy Tag and a Site Tag to an Access Point (GUI) 105

Attaching a Policy Tag and a Site Tag to an Access Point 106

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

vii

Contents

Split Tunneling for FlexConnect 106

Configuring Split Tunneling for a WLAN or Remote LAN 107

Defining an Access Control List for Split Tunneling (GUI) 107

Defining an Access Control List for Split Tunneling 107

Linking an ACL Policy to the Defined ACL 108

Creating a WLAN 109

Configuring a Wireless Profile Policy and a Split MAC ACL Name (GUI) 109

Configuring a Wireless Profile Policy and a Split MAC ACL Name 110

Mapping a WLAN to a Policy Profile (GUI) 111

Mapping WLAN to a Policy Profile 111

Configuring a Site Tag 112

Attaching a Policy Tag and Site Tag to an Access Point 112

VLAN-based Central Switching for FlexConnect 113

Configuring VLAN-based Central Switching (GUI) 113

Configuring VLAN-based Central Switching (CLI) 114

OfficeExtend Access Points for FlexConnect 115

Configuring OfficeExtend Access Points 115

Disabling OfficeExtend Access Point 116

Clearing Personal SSID from an OfficeExtend Access Point 117

Example: Viewing OfficeExtend Configuration 117

Proxy ARP 118

Enabling Proxy ARP for FlexConnect APs (GUI) 118

Enabling Proxy ARP for FlexConnect APs 118

Lawful Interception 119

Lawful Interception of Traffic 119

Configuring Lawful Interception 120

Verifying the Status of Lawful Interception 120

Data DTLS 123

CHAPTER 13

Information About Data Datagram Transport Layer Security 123

Configuring Data DTLS (GUI) 123

Configuring Data DTLS (CLI) 124

Converting Autonomous Access Points to Lightweight Mode 127

CHAPTER 14

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

viii

Contents

Guidelines for Converting Autonomous Access Points to Lightweight Mode 127

Information About Autonomous Access Points Converted to Lightweight Mode 128

Reverting from Lightweight Mode to Autonomous Mode 128

Using DHCP Option 43 and DHCP Option 60 128

How Converted Access Points Send Crash Information to the 129

Uploading Memory Core Dumps from Converted Access Points 129

Displaying MAC Addresses for Converted Access Points 129

Configuring a Static IP Address for a Lightweight Access Point 129

How to Convert a Lightweight Access Point Back to an Autonomous Access Point 130

Converting a Lightweight Access Point Back to an Autonomous Access Point (CLI) 130

Converting a Lightweight Access Point Back to an Autonomous Access Point (Using the Mode

Button and a TFTP Server) 130

Disabling the Reset Button on Converted Access Points (CLI) 131

Monitoring the AP Crash Log Information 132

How to Configure a Static IP Address on an Access Point 132

Configuring a Static IP Address on an Access Point (CLI) 132

Configuring a Static IP Address on an Access Point (GUI) 134

Recovering the Access Point Using the TFTP Recovery Procedure 134

Configuration Examples for Converting Autonomous Access Points to Lightweight Mode 134

Example: Displaying the IP Address Configuration for Access Points 134

Example: Displaying Access Point Crash File Information 135

Ethernet VLAN Tagging on Access Points 135

Information About Ethernet VLAN Tagging on Access Points 135

Configuring Ethernet VLAN Tagging on Access Points (GUI) 135

Configuring Ethernet VLAN Tagging on Access Points (CLI) 135

AP Crash File Upload 137

CHAPTER 15

AP Crash File Upload 137

Configuring AP Crash File Upload (CLI) 138

Rogue per AP 139

CHAPTER 16

Rogue per AP 139

Enabling Rogue Detection 140

Configuring an AP Profile (GUI) 140

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

ix

Contents

Configure an AP Profile 144

Define a Wireless Site Tag and Assign an AP Profile (GUI) 146

Define a Wireless Site Tag and Assign an AP Profile (CLI) 146

Associating Wireless Tag to an AP (GUI) 146

Associate Wireless Tag to an AP (CLI) 147

Access Point Plug-n-Play 149

CHAPTER 17

Overview of Access Point Plug-n-Play 149

Provisioning AP from PnP Server 149

Verifying AP Tag Configuration 150

802.11 Parameters for Cisco Access Points 151

CHAPTER 18

2.4-GHz Radio Support 151

Configuring 2.4-GHz Radio Support for the Specified Slot Number 151

5-GHz Radio Support 153

Configuring 5-GHz Radio Support for the Specified Slot Number 153

Information About Dual-Band Radio Support 155

Configuring Default XOR Radio Support 155

Configuring XOR Radio Support for the Specified Slot Number (GUI) 158

Configuring XOR Radio Support for the Specified Slot Number 158

Receiver Only Dual-Band Radio Support 160

Information About Receiver Only Dual-Band Radio Support 160

Configuring Receiver Only Dual-Band Parameters for Access Points 160

Enabling CleanAir with Receiver Only Dual-Band Radio on a Cisco Access Point (GUI) 160

Enabling CleanAir with Receiver Only Dual-Band Radio on a Cisco Access Point 160

Disabling Receiver Only Dual-Band Radio on a Cisco Access Point (GUI) 161

Disabling Receiver Only Dual-Band Radio on a Cisco Access Point 161

Configuring Client Steering (CLI) 161

Verifying Cisco Access Points with Dual-Band Radios 163

802.1x Support 165

CHAPTER 19

Introduction to the 802.1x Authentication 165

EAP-FAST Protocol 165

EAP-TLS/EAP-PEAP Protocol 166

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

x

Contents

Limitations of the 802.1x Authentication 166

Topology - Overview 166

Configuring 802.1x Authentication Type and LSC AP Authentication Type (GUI) 167

Configuring 802.1x Authentication Type and LSC AP Authentication Type 167

Configuring the 802.1x Username and Password (GUI) 168

Configuring the 802.1x Username and Password (CLI) 169

Enabling 802.1x on the Switch Port 170

Verifying 802.1x on the Switch Port 171

Verifying the Authentication Type 172

Configuring CAPWAP Link Aggregation Support 173

CHAPTER 20

Information About Link Aggregation 173

Information About CAPWAP LAG Support 173

Restrictions for CAPWAP LAG Support 174

Enabling CAPWAP LAG Support on Controller (GUI) 174

Enabling CAPWAP LAG Support on Controller 174

Enabling CAPWAP LAG Globally on Controller 175

Disabling CAPWAP LAG Globally on Controller 175

Enabling CAPWAP LAG for an AP Profile (GUI) 175

Enabling CAPWAP LAG for an AP Profile 176

Disabling CAPWAP LAG for an AP Profile 176

Disabling CAPWAP LAG Support on Controller 177

Verifying CAPWAP LAG Support Configurations 177

Radio Resource Management 179

PART III

Radio Resource Management 181

CHAPTER 21

Information About Radio Resource Management 181

Radio Resource Monitoring 182

Information About RF Groups 182

RF Group Leader 183

RF Group Name 185

Rogue Access Point Detection in RF Groups 185

Transmit Power Control 185

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

xi

Contents

Overriding the TPC Algorithm with Minimum and Maximum Transmit Power Settings 186

Dynamic Channel Assignment 186

Coverage Hole Detection and Correction 188

Restrictions for Radio Resource Management 188

How to Configure RRM 189

Configuring Neighbor Discovery Type (GUI) 189

Configuring Neighbor Discovery Type (CLI) 189

Configuring RF Groups 189

Configuring RF Group Selection Mode (GUI) 190

Configuring RF Group Selection Mode (CLI) 190

Configuring an RF Group Name (CLI) 191

Configuring Members in an 802.11 Static RF Group (GUI) 191

Configuring Members in an 802.11 Static RF Group (CLI) 192

Configuring Transmit Power Control 192

Configuring Transmit Power (GUI) 192

Configuring the Tx-Power Control Threshold (CLI) 193

Configuring the Tx-Power Level (CLI) 194

Configuring 802.11 RRM Parameters 194

Configuring Advanced 802.11 Channel Assignment Parameters (GUI) 194

Configuring Advanced 802.11 Channel Assignment Parameters (CLI) 196

Configuring 802.11 Coverage Hole Detection (GUI) 198

Configuring 802.11 Coverage Hole Detection (CLI) 198

Configuring 802.11 Event Logging (CLI) 199

Configuring 802.11 Statistics Monitoring (GUI) 200

Configuring 802.11 Statistics Monitoring (CLI) 201

Configuring the 802.11 Performance Profile (GUI) 202

Configuring the 802.11 Performance Profile (CLI) 202

Configuring Advanced 802.11 RRM 203

Enabling Channel Assignment (GUI) 203

Enabling Channel Assignment (CLI) 204

Restarting DCA Operation 204

Updating Power Assignment Parameters (GUI) 204

Updating Power Assignment Parameters (CLI) 205

Configuring Rogue Access Point Detection in RF Groups 205

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

xii

Contents

Configuring Rogue Access Point Detection in RF Groups (CLI) 205

Monitoring RRM Parameters and RF Group Status 206

Monitoring RRM Parameters 206

Verifying RF Group Status (CLI) 207

Examples: RF Group Configuration 208

Information About ED-RRM 208

Configuring ED-RRM on the Cisco Wireless LAN Controller (CLI) 208

Coverage Hole Detection 211

CHAPTER 22

Coverage Hole Detection and Correction 211

Configuring Coverage Hole Detection (GUI) 211

Configuring Coverage Hole Detection (CLI) 212

Configuring CHD for RF Tag Profile (GUI) 213

Configuring CHD for RF Tag Profile (CLI) 214

Optimized Roaming 215

CHAPTER 23

Optimized Roaming 215

Restrictions for Optimized Roaming 215

Configuring Optimized Roaming (GUI) 216

Configuring Optimized Roaming (CLI) 216

Cisco Flexible Radio Assignment 219

CHAPTER 24

Information About Flexible Radio Assignment 219

Benefits of the FRA Feature 220

Configuring an FRA Radio (CLI) 220

Configuring an FRA Radio (GUI) 222

XOR Radio Support 223

CHAPTER 25

Information About Dual-Band Radio Support 223

Configuring Default XOR Radio Support 224

Configuring XOR Radio Support for the Specified Slot Number (GUI) 226

Configuring XOR Radio Support for the Specified Slot Number 226

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

xiii

Contents

Cisco Receiver Start of Packet 229

CHAPTER 26

Information About Receiver Start of Packet Detection Threshold 229

Restrictions for Rx SOP 229

Configuring Rx SOP (CLI) 230

Customizing RF Profile (CLI) 230

Client Limit 233

CHAPTER 27

Information About Client Limit 233

Configuring Client Limit (GUI) 233

Configuring Client Limit (CLI) 233

IP Theft 235

CHAPTER 28

Introduction to IP Theft 235

Configuring IP Theft (GUI) 236

Configuring IP Theft 236

Configuring the IP Theft Exclusion Timer 236

Adding Static Entries for Wired Hosts 237

Verifying IP Theft Configuration 238

Unscheduled Automatic Power Save Delivery 241

CHAPTER 29

Information About Unscheduled Automatic Power Save Delivery 241

Viewing Unscheduled Automatic Power Save Delivery (CLI) 241

Enabling USB Port on Access Points 243

CHAPTER 30

USB Port as Power Source for Access Points 243

Configuring an AP Profile (CLI) 244

Configuring USB Settings for an Access Point (CLI) 244

Monitoring USB Configurations for Access Points (CLI) 245

Dynamic Frequency Selection 247

CHAPTER 31

Information About Dynamic Frequency Selection 247

Configuring Dynamic Frequency Selection (GUI) 247

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

xiv

Contents

Configuring Dynamic Frequency Selection 247

Verifying DFS 248

Network Management 249

PART IV

AP Packet Capture 251

CHAPTER 32

Introduction to AP Client Packet Capture 251

Enabling Packet Capture (GUI) 251

Enabling Packet Capture (CLI) 252

Create AP Packet Capture Profile and Map to an AP Join Profile (GUI) 252

Create AP Packet Capture Profile and Map to an AP Join Profile 252

Start or Stop Packet Capture 253

DHCP Option82 255

CHAPTER 33

Information About DHCP Option 82 255

Configuring DHCP Option 82 Global Interface 256

Configuring DHCP Option 82 Globally Through Server Override (CLI) 256

Configuring DHCP Option 82 Globally Through Different SVIs (GUI) 257

Configuring DHCP Option 82 Globally Through Different SVIs (CLI) 257

Configuring DHCP Option 82 Format 258

Configuring DHCP Option82 Through a VLAN Interface 259

Configuring DHCP Option 82 Through Option-Insert Command (CLI) 259

Configuring DHCP Option 82 Through the server-ID-override Command (CLI) 260

Configuring DHCP Option 82 Through a Subscriber-ID (CLI) 261

Configuring DHCP Option 82 Through server-ID-override and subscriber-ID Commands (CLI)

262

Configuring DHCP Option 82 Through Different SVIs (CLI) 263

RADIUS Realm 265

CHAPTER 34

Information About RADIUS Realm 265

Enabling RADIUS Realm 266

Configuring Realm to Match the RADIUS Server for Authentication and Accounting 266

Configuring the AAA Policy for a WLAN 267

Verifying the RADIUS-Realm Configuration 269

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

xv

Contents

Cisco StadiumVision 271

CHAPTER 35

Cisco StadiumVision Overview 271

Configure Wireless Controller Parameters for Cisco StadiumVision (GUI) 272

Configure Wireless Controller Parameters for Cisco StadiumVision (CLI) 272

Verify StadiumVision Configurations 273

Persistent SSID Broadcast 275

CHAPTER 36

Persistent SSID Broadcast 275

Configuring Persistent SSID Broadcast 275

Verifying Persistent SSID Broadcast 276

Network Monitoring 277

CHAPTER 37

Network Monitoring 277

Status Information Received Synchronously - Configuration Examples 277

Alarm and Event Information Received Asynchronously - Configuration Examples 279

System Management 281

PART V

Network Mobility Services Protocol 283

CHAPTER 38

Information About Network Mobility Services Protocol 283

Enabling NMSP on Premises Services 284

Modifying the NMSP Notification Interval for Clients, RFID Tags, and Rogues 284

Modifying the NMSP Notification Threshold for Clients, RFID Tags, and Rogues 285

Configuring NMSP Strong Cipher 286

Verifying NMSP Settings 286

Examples: NMSP Settings Configuration 288

NMSP by AP Groups with Subscription List from CMX 289

Verifying NMSP by AP Groups with Subscription List from CMX 289

Probe RSSI Location 290

Configuring Probe RSSI 291

RFID Tag Support 292

Configuring RFID Tag Support 293

Verifying RFID Tag Support 293

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

xvi

Contents

Application Visibility and Control 297

CHAPTER 39

Information About Application Visibility and Control 297

Prerequisites for Application Visibility and Control 299

Restrictions for Application Visibility and Control 299

AVC Configuration Overview 299

Create a Flow Monitor 300

Create a Flow Record 301

Create a Flow Exporter 303

Configure a WLAN for AVC 304

Configuring a Policy Tag 305

Attaching a Policy Profile to a WLAN Interface (GUI) 305

Attaching a Policy Profile to a WLAN Interface (CLI) 306

Attaching a Policy Profile to an AP 307

Verify the AVC Configuration 307

Default DSCP on AVC 308

Configuring Default DSCP for AVC Profile (GUI) 308

Configuring Default DSCP for AVC Profile 309

Creating Class Map 309

Creating Policy Map 310

AVC-Based Selective Reanchoring 311

Restrictions for AVC-Based Selective Reanchoring 311

Configuring the Flow Exporter 311

Configuring the Flow Monitor 312

Configuring the AVC Reanchoring Profile 313

Configuring the Wireless WLAN Profile Policy 313

Verifying AVC Reanchoring 314

Cisco Hyperlocation 319

CHAPTER 40

Information About Cisco Hyperlocation 319

Restrictions on Cisco Hyperlocation 321

Configuring Cisco Hyperlocation (GUI) 321

Configuring Cisco Hyperlocation (CLI) 322

Verifying Cisco Hyperlocation 323

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

xvii

Contents

Configuring Hyperlocation BLE Beacon Parameters for AP (GUI) 326

Configuring Hyperlocation BLE Beacon Parameters (CLI) 326

Verifying Hyperlocation BLE Beacon Configuration 327

Configuring Hyperlocation BLE Beacon Parameters for AP (CLI) 327

Verifying Hyperlocation BLE Beacon Configuration for AP 328

Cisco Connected Mobile Experiences Cloud 329

CHAPTER 41

Configuring Cisco CMX Cloud 329

Verifying Cisco CMX Cloud Configuration 330

EDCA Parameters 333

CHAPTER 42

Enhanced Distributed Channel Access Parameters 333

Configuring EDCA Parameters (GUI) 333

Configuring EDCA Parameters (CLI) 334

802.11 parameters and Band Selection 337

CHAPTER 43

Information About Configuring Band Selection, 802.11 Bands, and Parameters 337

Band Select 337

802.11 Bands 338

802.11n Parameters 338

802.11h Parameters 338

Restrictions for Band Selection, 802.11 Bands, and Parameters 338

How to Configure 802.11 Bands and Parameters 339

Configuring Band Selection (GUI) 339

Configuring Band Selection (CLI) 340

Configuring the 802.11 Bands (GUI) 341

Configuring the 802.11 Bands (CLI) 342

Configuring a Band-Select RF Profile (GUI) 344

Configuring 802.11n Parameters (GUI) 344

Configuring 802.11n Parameters (CLI) 345

Configuring 802.11h Parameters (CLI) 347

Monitoring Configuration Settings for Band Selection, 802.11 Bands, and Parameters 348

Verifying Configuration Settings Using Band Selection and 802.11 Bands Commands 348

Example: Viewing the Configuration Settings for the 5-GHz Band 348

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

xviii

Contents

Example: Viewing the Configuration Settings for the 2.4-GHz Band 350

Example: Viewing the status of 802.11h Parameters 351

Example: Verifying the Band-Selection Settings 352

Configuration Examples for Band Selection, 802.11 Bands, and Parameters 352

Examples: Band Selection Configuration 352

Examples: 802.11 Bands Configuration 353

Examples: 802.11n Configuration 353

Examples: 802.11h Configuration 354

Predownloading an Image to an Access Point 355

CHAPTER 44

Information About Predownloading an Image to an Access Point 355

Restrictions for Predownloading an Image to an Access Point 355

Predownloading an Image to Access Points (CLI) 356

Monitoring the Access Point Predownload Process 357

Efficient Image Upgrade 359

CHAPTER 45

Efficient Image Upgrade 359

Enable Pre-Download (GUI) 359

Enable Pre-Download (CLI) 360

Configuring a Site Tag (CLI) 360

Attaching Policy Tag and Site Tag to an AP (CLI) 361

Trigger Predownload to a Site Tag 362

N+1 Hitless Rolling AP Upgrade 365

CHAPTER 46

N+1 Hitless Rolling AP Upgrade 365

Configuring Hitless Upgrade 366

Verifying Hitless Upgrade 366

Wireless Sub-Package for Switch 369

CHAPTER 47

Introduction to Wireless Sub-package 369

Booting in Install Mode 370

Installing Sub-Package in a Single Step (GUI) 371

Installing Sub-Package in a Single Step 371

Multi-step Installation of Sub-Package 372

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

xix

Contents

Installing on a Stack 373

Upgrading to a Newer Version of Wireless Package 373

Deactivating the Wireless Package 373

Enabling or Disabling Auto-Upgrade 374

NBAR Protocol Discovery 375

CHAPTER 48

Introduction to NBAR Protocol Discovery 375

Configuring NBAR Protocol Discovery 375

Verifying Protocol Discovery Statistics 376

NBAR Dynamic Protocol Pack Upgrade 377

CHAPTER 49

NBAR Dynamic Protocol Pack Upgrade 377

Upgrading the NBAR2 Protocol Pack 378

Conditional Debug and Radioactive Tracing 379

CHAPTER 50

Introduction to Conditional Debugging 379

Introduction to Radioactive Tracing 380

Conditional Debugging and Radioactive Tracing 380

Location of Tracefiles 380

Configuring Conditional Debugging (GUI) 381

Configuring Conditional Debugging 381

Radioactive Tracing for L2 Multicast 383

Recommended Workflow for Trace files 383

Copying Tracefiles Off the Box 383

Configuration Examples for Conditional Debugging 384

Verifying Conditional Debugging 385

Example: Verifying Radioactive Tracing Log for SISF 385

Aggressive Client Load Balancing 387

CHAPTER 51

Information About Aggressive Client Load Balancing 387

Enabling Aggressive Client Load Balancing (GUI) 388

Configuring Aggressive Client Load Balancing (GUI) 388

Configuring Aggressive Client Load Balancing (CLI) 389

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE Gibraltar 16.10.x

xx

Contents

Page is loading ...

Cisco Catalyst 9800-L Wireless Controller Configuration Guide

This manual is also suitable for

Cisco Catalyst 9800-L Wireless Controller Configuration Guide

Related papers

Other documents