Cisco Wireless Control System Configuration Guide, Release 5.2
Index

Table Of Contents

Numerics - A - B - C - D - E - F - G - H - I - K - L - M - N - O - P - Q - R - S - T - U - V - W -

Numerics

40 MHz channel bonding 10-16

802.11a policy name 11-57

802.11b/g RRM interval template 11-69, 11-70

802.11b/g RRM threshold templates 11-67

802.11b/g voice templates 11-62

802.11 counters report 16-26, 16-27

802.11h template

configuring 11-70

802.11 security trap 11-76

802.11 tags layer 5-38

802.1n scaling reports 16-5

802.1X association 6-40

802.1X authentication 6-40

802.3 bridging

configuring 10-15

880 series ISRs 1-6

A

AAA override 11-17

AAA servers 11-16

AAA traps 11-76

absolute 19-2

access control list template 11-4, 11-56

accessing the schedule panel 16-4

access mode 9-6

access point

configuring 11-40

configuring for hybrid REAP 14-8

credentials 9-2

friendly 11-48

access point/radio templates 11-83

access point authentication and MFP templates 11-51

access point authorization template 11-40

access point configuration

importing 9-21

access point inventory report 16-23

access point layer 5-35

access point load

avoiding 11-59

access point placement 5-23

access point positions

changing with import or export of file 5-32

access point reports 16-5

modifying 16-8

viewing 16-8

access points

adding 5-22

configuring 9-16

configuring for LOMM 9-24

converting to LWAPP C-2

detecting 15-12

disabling ineligible 9-14

embedded 1-6

searching 9-26

selecting 11-94

access point security statistics

for mesh 6-52

access point templates

adding 11-83

access point threats 6-12

access point traps 11-76

acknowledged alarms

hiding 15-4

ACL template 11-42

configuring 11-42

ACS server

adding WCS to 17-5

ACS View Server credentials 6-35

active interferer count per channel 9-30

active interferers 9-29

active interferers count chart 9-30

active sessions

monitoring 7-4

adaptive scan threshold 11-66

add config groups 8-18

add group members 8-10

adding access points 5-21

adding access point templates 11-83

adding a license B-5

adding a migration template 9-14

adding a mobility services engine 12-2

adding a spectrum expert 9-28

adding autonomous access points

by CSV file 9-10

by device information 9-10

adding auto-provisioning filter 17-18

adding controllers 10-1

adding controllers from config group 8-20

adding guest user accounts 7-15

adding IOS access points 9-10

by device information 9-10

adding launch points

for Google Earth 19-7

adding templates from config group 8-21

adding WCS as TACACS+ server 17-6

adding WCS to ACS server

for use with RADIUS 17-11

adding WCS to an ACS server 17-5

adding WCS to a non-Cisco ACS server 17-14

adding WCS usergroups

into ACS for RADIUS 17-12

into ACS for TACACS+ 17-7

add known rogue 11-72

adhoc rogues 2-23

adjusted link metric 6-43

administration menu 2-27

advanced debug 5-32, 5-49

advanced options 5-17

Advanced tab

on WLAN template 11-19

Aironet IE 11-20

alarm 15-1

alarm dashboard 2-28, 15-1

alarm monitor 2-28, 6-18

alarms 15-1

config audit 8-25

monitoring 15-4

rogue access point 15-8

rogue adhoc 15-11

alarm trigger threshold 11-52

all groups window 17-8

alternate parent

for mesh 16-24

altitude mode 19-2

anonymous provisioning 11-34

antenna gain 6-34

antenna type 6-34

AP attack details 2-19

AP by hop count 2-24

AP failover priority

setting 9-1, 10-9

AP join taken time 2-24

AP list by location 16-8

AP list by location report 16-8

AP list by SSID 16-8

AP manager IP 9-15

AP mesh layer info 5-36

AP parameters tab 11-83

applying CLI commands 11-81

applying config groups 8-21

applying controller templates 11-80

AP policies 3-7

AP policies template 11-44

AP profile status report 16-8

APs not assigned to maps 2-18

AP status report

viewing for scheduled task 11-89

AP template task history

viewing 11-90

AP template tasks 11-89

AP up time 2-23, 6-48

assigned virtual domain components 18-8

assigning location presence 5-3

assigning virtual domains 7-22

association request failures 6-55

association request success 6-55

association request timeouts 6-55

attacks

access points 6-12

audience of document 19

AUDIT_STATUS_DIFFERENCE 15-65

auditing config groups 8-22

auditing H-REAP groups 14-15

audit reports16-9, 17-34

configuring 9-26, 10-6

audit status 6-51

viewing 10-6

viewing for access points 9-26

viewing for controllers 10-6

audit trails

enabling for guest user activities 7-11

viewing 7-9

authentication order

managing 10-6

authentication priority 10-6

authentication process

Hybrid REAP 14-2

authentication request failures 6-55

authentication request success 6-55

authentication request timeout 6-55

auto key generation 11-23

automated upgrade 13-9

automatic backups, scheduling 13-3, 17-1

automatic client exclusion 11-20

automatic client troubleshooting 17-32

automatic database synchronization 12-5

autonomous access points

adding 9-10

adding by CSV file 9-10

downloading images 9-11

upgrading 9-14

viewing 9-11

autonomous AP images

downloading 9-21

autonomous to lightweight migration 9-9

autonomous to LWAPP migration support 9-9

auto provisioning 17-17

setting 17-22

auto provisioning device information

detailed 17-20

auto provisioning filter

deleting 17-21

editing 17-21

auto refresh 17-35

avoid access point load 11-59

avoid Cisco AP load 11-59

avoid foreign AP interference 11-59

avoid non-802.11 noise 11-59

B

background scanning 10-34

on templates 11-73

background scanning in mesh networks

described10-32to 10-34

scenarios 10-33

background Scan parameter 10-34

background tasks

running 17-1

backhaul interface 6-53

backing up the WCS database

on Linux 13-5

on Windows 13-4

backup and restore license B-5

bandwidth

making expedited 11-63

basic auditing 8-23

best practices A-1

bridge group name 6-53

bridging link information 6-58

bridging mesh statistics 6-53

broadcast deauthentication frame signatures 3-10

bronze 11-18

bronze queue 6-55

buildings

adding to a campus map 5-2

adding to WCS database 5-4

busiest APs report 16-8

busiest clients report 16-10

C

CAC

enabling 10-10

CA certificates 4-5

CAD files 5-2

calculating access point requirements 5-14

call admission control 11-62

campus map, adding to WCS database 5-1

CAS 12-1

cascade reboot 8-26

caution, defined 21

CCA sensitivity 11-61

certificate signing request 3-22

changing access point positions 5-32

by importing or exporting a file 5-32

changing station role

root mode 9-14

channel bonding

configuring 10-16

channel change AP 6-80

channel change notifications 6-76

channels

monitoring on a floor map 5-41

channel width

monitoring 6-60

checking the status of WCS

on Linux 13-2

on Windows 13-1

Cisco Aironet 1510 Access Points

in Mesh network 10-32

Cisco AP load

avoiding 11-59

Cisco Discovery Protocol 9-20

Cisco UDI 5-18

Cisco Unified Wireless Network Solution 5-48

Cisco WCS base B-1

Cisco WCS location B-1

Cisco wired IPS events 2-23

Cisco Wireless LAN Solution

overview1-1

security solutions3-1to 3-5

civic address 5-3

clamped to ground 19-2

classification rule 11-45

clear config 9-21

CLI commands

applying to template 11-81

client alarms

most recent 2-19

client association report 16-11

client authentication provision 11-34

client count 2-18

client count graph report 16-5

client count report 16-11

client devices

connecting to WLANs 14-11

client exclusion 11-20

happening automatically 11-20

client exclusion policies template 11-50

client MFP 3-7

client properties 6-27

client related traps 11-75

client report

creating new 16-12

client reports

modifying 16-9, 16-11

viewing 16-9, 16-11

clients

finding6-36

manually disabled 2-19

map 6-39

monitoring on a floor map 5-43

monitoring on a floormap 5-43

parameters 5-43

clients, monitoring on floor map 5-43

clients detected by location server 2-23

client security component 2-23

client security events 2-23

clients layer 5-37

client statistics 6-39

client tab

home page 2-18

client troubleshooting

automatic 17-32

CLI sessions 17-35

combined inventory report 16-23

command buttons 2-28

components

of virtual domain 18-8

config audit 8-25

config audit alarms 8-25

config group

adding controllers 8-20

adding templates 8-21

configuring 8-19

downloading IDS signatures 8-28

downloading sw to controllers 8-27

removing controllers 8-20

removing templates 8-21

config group audits 8-22

config groups

applying 8-21

auditing 8-22

creating 8-17

downloading customized webauth 8-29

rebooting 8-26

reporting 8-26

config group task

deleting 11-92

config group task history

viewing 11-92

config group tasks 11-90

configuration audit summary 8-25

configuration mismatch 6-80

configuration sync 17-4

configure menu 2-26

configuring 40 MHz channel bonding 10-16

configuring an 802.11h template 11-70

configuring 802.3 bridging 10-15

configuring access control lists 11-56

configuring access points 9-16

configuring an access point for hybrid REAP 14-8

configuring alarm severity 15-71

configuring audit reports 10-6

configuring a client exclusion policy template 11-46

configuring config group 8-18

configuring the controller for hybrid REAP 14-5

configuring a CPU ACL template 11-42

configuring an EAP-FAST template 11-33

configuring EDCA parameters

for individual controllers 10-17

through a template 11-64

configuring firewall for WCS 3-6

configuring general templates 11-4

configuring global credentials 9-2

configuring global email parameters 17-30

configuring high availability 17-37

configuring high density templates 11-60

configuring a high throughput template 11-70

configuring H-REAP AP groups 11-21

configuring Hybrid REAP 12-1, 14-1

configuring Hybrid-REAP groups 14-13

configuring hybrid REAP access point groups 14-11

configuring IDS 3-9

configuring IDS signatures 3-9

configuring intrusion detection systems 3-9

configuring LDAP bind requests 10-3

configuring a local EAP general template 11-30

configuring a local EAP profile template 11-31

configuring a manually disabled client template 11-41

configuring a mesh template 11-70, 11-72

configuring multiple country codes 8-15

configuring NAC out-of-band 10-19

configuring a policy name template 11-57

configuring radio templates 11-92

configuring RADIUS servers 17-24

configuring a roaming parameters template 11-64

configuring a rogue policies template 11-43

configuring an RRM interval template 11-69

configuring an RRM threshold template 11-67

configuring scheduled configuration tasks 11-89

configuring SNMPv3 10-18

configuring spectrum experts 9-28

configuring the switch

for hybrid REAP 14-4

configuring TACACS+ servers 17-17

configuring a TACACS+ server template 11-27

configuring template

ACL 11-41

for rogue AP rule groups 11-46

802.11a policy name 11-56

802.11b/g RRM interval 11-69

802.11b/g RRM threshold 11-63

802.11b/g voice 11-62

access point/radio 11-83

access point authentication and MFP 11-44

access point authorization 11-40

file encryption 11-23

guest users 11-37

known rogue access point 11-70

local management user 11-79

MAC filter 11-39

QoS 11-7

RADIUS accounting 11-26

RADIUS authentication 11-24

syslog 11-77

Telnet SSH 11-76

traffic stream metrics QoS 11-8

trap control 11-74

trap receiver 11-73

web authentication 11-52

WLAN 11-10

configuring a TFTP server template 11-73

configuring a trusted AP policies template 11-44

configuring a user authentication priority template 11-80

configuring a user login policies template 11-38

configuring a video parameter template 11-63

configuring a voice parameter template 11-62

configuring wired guest access 10-25

connecting client devices

to WLANs 14-11

connecting to the Guest WLAN 3-21

containment

of rogue access points 6-17

content

customizing 2-22

context aware configuring 12-8

context aware planning 12-8

context-aware software 12-1

controller

configuring for hybrid REAP 14-5

controller audit report 17-34

controller CPU utilization 2-23

controller details 9-15

controller inventory report 16-23

controller memory utilization 2-23

controllers

adding 10-1

adding to WCS database 4-1

pinging network devices 10-9

searching 10-5

specified 1-1

controller status report

viewing 11-91

controller templates

applying 11-83

controller upgrade settings 17-35

controller utilization report 16-26

controller values

refreshing 10-7

conventions of document 21

converting WLSE autonomous to WCS controller C-1

counters report

for 802.11 16-26

country codes

multiple 8-15, 10-4

setting 10-4

coverage holes2-18, 6-70, 6-80

finding 5-7

monitoring on a floor map5-42to 5-43

coverage hole summary report 16-26

creating calibration models 5-36

creating guest user accounts 7-11

creating a lobby ambassador account 7-12

creating a network configuration audit 16-10

creating a network design 5-26

creating a new access point report 16-8

creating a new client report 16-12

creating a new inventory report 16-23

creating a new mesh report 16-10, 16-25

creating a new performance report 16-27

creating a new report

for guest association 16-16

for guest count 16-18

for guest operations 16-22

for guest user sessions 16-20

guest acount status 16-15

creating a new security report 16-29

creating placemarks 19-3

creating virtual domains 18-1

CSR 3-22

CSV files19-4, 9-10, 17-19

method for adding autonomous access points 9-10

current AP template task

deleting 11-90

disabling 11-90

enabling 11-90

modifying 11-89

current config group task

disabling 11-91

enabling 11-91

modifying 11-91

currently logged guest users 2-25

current templates

viewing 10-18

customized web auth 10-29

downloading 8-29

customized Web authentication 3-18

downloading 11-54

customizing content on WCS Home page 2-22

customizing tabs on WCS Home page 2-21

custom signature 3-15

D

dashboard

RRM 6-76

data/coverage 5-18

database synchronization

automatic 12-5

data management tasks

performing 17-27

debug commands A-4

debug strategy A-4

default lobby ambassdor credentials

editing 7-9

deleting a current AP template task 11-90

deleting a current config group task 11-92

deleting a guest user 3-21

deleting guest user templates 7-17

deleting a license B-5

deleting a mobility services engine 12-3

deleting a report 16-3

deleting WCS user accounts 7-4

designing a network 5-26

detailed auto provisioning device information 17-20

detecting access points 15-12

detecting rogue access points 6-18

device certificates 4-5

device information 9-10

method for adding autonomous access points 9-10

DHCP 6-40

DHCP server

overriding 11-21

DHCP statistics 6-72

diagnostic channel A-1

disable report schedule 16-2

disabling a current config group task 11-91

disabling current AP template task 11-90

disabling IDS signatures 3-14

disabling ineligible access points 9-14

DNS ping 6-40

DNS resolution 6-40

document

audience 1-19

conventions 21

organization 20

downloading autonomous AP images 9-21

downloading customized webauth 3-18, 8-29, 11-54

downloading IDS signatures 3-13

from your config group 8-28

downloading images

to autonomous access points 9-11

downloading sw to controllers

after adding config group 8-27

downloading vendor CA certificates 4-5

downloading vendor device certificates 4-5

downstream delay 11-9

downstream packet loss rate 11-9

drawing polygon areas

using map editor 5-12

DTIM 11-58

E

EAP-FAST template 11-33

EAPOL flood signature 3-11

EDCA parameters

configuring for individual controllers 10-17

configuring through a template 11-64

editing the default lobby ambassador credentials 7-9

editing guest users 7-16

editing home page tabs 2-22

editing signature parameters 3-16

edit link 5-6

home page 2-21

edit location presence information 5-3

edit tabs 2-22

edit view 15-5

email

configuring parameters 17-29

email notifications

monitoring 15-14

embedded access points 1-6

enable background audit 8-18

enable enforcement 8-18

enable report schedule 16-2

enabling audit trails

for guest user activities 7-11

enabling current AP template task 11-90

enabling a current config group task 11-91

enabling high density 10-12

enabling IDS signatures 3-14

enabling load-based CAC 10-8

enabling Web login 3-17

end user license agreement B-8

establishing logging options 17-26

Ethernet bridging 9-3

Ethernet VLAN tagging guidelines 9-5

event history 6-23

event notification 1-4

events 15-1

monitoring 15-13

excluded packets 6-54

executing CLI commands 17-35

expedited 11-63

expedited bandwidth 11-63

exporting a file

to change access point position 5-32

exporting WLSE map data 5-45

export task list 17-8

extend to ground 19-2

external web auth 10-29

extracting task list 17-15

F

failed objects

monitoring 15-7

failover 17-36

failover mechanism 17-36

failover scenario 17-36

feature license B-2

file encryption template 11-23

filter

deleting auto provisiioning 17-21

editing current auto provisioning 17-21

filtering

using to modify maps 6-58

filter member management 17-19

filter mode 17-18

filter properties 17-19

finding clients 6-35

finding coverage holes 5-7

firewall, configuring for WCS 3-6

floor plans

adding to a campus building5-8to 5-9

adding to a standalone building5-10to 5-11

enhancing with map editor 5-11

foreign access point interference

avoiding 11-59

foreign AP interference

avoiding 11-59

frame type 3-15

friendly access point template 11-48

friendly rogue 11-45

friendly rogue access points 6-11

friendly rogue APs 2-24

FTP

turning on and off 17-32

G

general tab

client properties 6-27

home page 2-18

RF properties 6-29

security 6-30

general templates

configuring 11-4

generate password 11-37

generating migration analysis report 9-14

geographical coordinates 19-1

global credentials

configuring 9-2

global settings

for standard and custom signatures 3-16

global username and password

overriding 9-20

gold 11-18

gold queue 6-54

Google Earth

adding launch points 19-7

Google Earth coordinates 19-2

Google Earth maps 19-1

viewing 6-62

Google KML or CSV

importing into WCS 19-5

GPS markers 5-3

groups

for hybrid-REAP 14-12

for rogue access point rules 11-46

group setup window on ACS server 17-10

GUEST_USER_ADDED 15-62

GUEST_USER_AUTHENTICATED 15-63

guest account status 16-14

guest association 16-16

guest count 16-18

guest operations 16-21

guest user

deleting 3-21

guest user account 2-19

adding 7-15

creating 7-11

managing 7-14

guest user activities 7-11

guest user credentials 7-16

guest user details

emailing 7-19

print 7-19

guest user monitoring 6-74

guest user reports 6-74, 16-14

guest users

currently logged 2-25

viewing and editing 7-16

guest user sessions 16-20

guest user templates 11-37

deleting 7-17

Guest WLAN

connecting 3-21

guidelines

for Ethernet VLAN tagging 9-5

for NAC out-of-band integration 10-20

guidelines for using the map editor 5-11

H

heater status 6-48

heat map

described 5-23

graphic 5-23

help menu 2-27

hide acknowledged alarms 15-4

hierarchy

of mesh network 6-57

hierarchy of mesh parent to child 6-59

high density

enabling 10-12

high density requirements 10-12

high density templates 11-60

high reliability 17-36

high throughput template

configuring 11-70

historical report type 16-1

Home page

customizing content 2-22

customizing tabs 2-21

H-REAP AP groups

configuring 11-21

H-REAP configuration tab 11-22

H-REAP groups

auditing 14-15

HTTP

turning on and off 17-32

Hybrid REAP

configuring 9-1, 10-1, 14-1

hybrid REAP access point groups 14-11

hybrid-REAP groups 14-12

Hybrid REAP local switching 11-19

hysteresis 11-66

I

identical audit status 6-51

IDS 3-9

configuring 3-9

IDS sensors 3-9

IDS signature events

viewing 3-17

IDS signatures 3-9

disabling 3-14

downloading 3-13

downloading from config group 8-28

enabling 3-14

uploading 3-12

images

downloading to autonomous access points 9-11

importing access point configuration 9-21

importing a file

to change access point position 5-32

importing coordinates

as CSV file 19-4

into Google Earth 19-2

importing Google KML or CSV into WCS 19-5

importing WLSE map data 5-45

indicator of alarms 2-28

information elements

Aironet 11-20

infrastructure MFP 3-7

input type 17-19

inspect location readiness 5-20

inspect VoWLAN readiness 5-21

installer

using to upgrade 13-9

installing a license B-4

installing WCS

for WLSE conversion C-2

insufficient memory 6-54

integrating NAC out-of-band 10-19

interferers

summary 9-29

internal web auth 10-29

inter-subnet roaming 8-4

intrusion detection systems 3-9

invalid association request 6-55

invalid reassociation request 6-55

invalid reauthentication request 6-56

inventory detail status 2-18

inventory reports 16-12

creating 16-23

modifying 16-23

viewing 16-23

inventory status 2-23

IOS access points

adding 9-10

adding by device information 9-10

IOSAP_DOWN 15-64

IOSAP_LINK_DOWN 15-63

IOSAP_LINK_UP 15-63

IOSAP_UP 15-64

IP connectivity 6-40

IPSEC failures 6-13

K

KEK

key encryption key 11-25

key wrap 11-25

KML file 19-2

L

laptop icon 6-38

latest network audit report 10-8

latitude 19-2

Layer 1 security solutions 3-1

Layer 2 11-12

Layer 2 security solutions 3-2

Layer 3 11-15

Layer 3 security solutions 3-2

Layer 3 to Layer 2 mode, converting Cisco Wireless LAN Solution 3-5

LBS authorization 11-40

LDAP 10-3

LDAP bind requests

configuring 10-3

LEAP authentication

requirements 8-8

legacy syslog template 11-77

license

adding B-5

backup and restore B-5

deleting B-5

license agreementB-8

license installation B-4

license management B-4

licenses B-1

license types B-1

licensing

on WLSE network management C-4

lifetime 7-17

limitations for high reliability 17-36

link aggregation 11-6

link aggregation (LAG)

guidelines 14-4

link metric

adjusted 6-43

unadjusted 6-43

link SNR 6-43

link stats

for mesh 16-24

link test

running 6-64

link test results6-43, 6-66

list all filters 17-20

list filters 17-20

load 5-33

load-based CAC 11-62

enabling 10-10

Lobby ambassador 7-11

logging activites 7-19

lobby ambassador account

creating 7-12

editing 7-13

lobby ambassador defaults

setting 7-7

local authentication

for hybrid-REAP groups 14-12

Local EAP check box 11-17

local EAP general template 11-30

local EAP profile template 11-31

local management user template 11-79, 11-80

local net users template 11-35

local password policy 17-23

local switching

Hybrid REAP 11-19

locating rogue access points 6-18

location

of rogue access points 6-17

location accuracy

analyzing 5-48

using testpoints 5-48

location appliance

importing 12-3

location appliance functionality 4-3

location appliance importing 12-3

location appliances

adding to WCS database 4-2

auto-synchronizing 12-5

relationship with WCS Location 1-4

location menu 2-27

location optimized monitor mode 9-18

location presence

assigning 5-3

location readiness

inspecting 5-20

location server inventory report 16-23

location server utilization 16-26

location tab 6-32

location upgrade B-2

log analysis 6-22

logging 17-4

logging in

to the WCS user interface2-15to 2-17, 7-13

logging options 17-26

logging the lobby ambassador activities 7-19

login.html 3-18

LOMM 9-18

configuring access point radios 9-24

longitude 19-3

long preambles, enabling for SpectraLink NetLink phones 4-6

LWAPP migration 9-9

LWAPP uptime 2-24

M

MAC filtering 11-14

MAC filter template 11-39

MAC frequency 3-15

MAC information 3-15

MACK

message authenticator code keys 11-25

maintain image aspect ratio 5-44

maintaining WCS13-1to 13-13

malformed neighbor packets 6-53

malicious rogue 11-45

malicious rogue access points 6-3

managed network

security index 6-3

management frame flood signatures 3-10

management frame protection3-7, 11-51

management queue 6-55

managing guest user accounts 7-14

managing licenses B-4

managing multiple WCSs 1-9

managing user authentication order 10-6

managing virtual domains 18-6

manually disabled client

template for 11-41

manually disabled clients 2-19

manufacturer information 6-34

map editor

enhancing floor plans 5-11

general notes 5-11

guidelines for using 5-11

using to draw polygon areas 5-12

maps

creating5-1to 5-23

monitoring5-33, 5-33to 5-44

searching 5-6

using to monitor link stats 6-41

using to monitor mesh AP neighbors 6-46

map view

updating 6-59

menu bar 2-26

mesh access points

monitoring 6-44

mesh access point neighbors

monitoring 6-46

mesh alarms

most recent 2-20

mesh alternate parent 16-24

mesh health 6-48

monitoring 6-48

mesh link statistics 6-41

monitoring 6-41

mesh link stats 16-24

mesh neighbors 6-47

mesh networks

background scanning 10-32

monitoring 6-41

monitoring using maps 6-41

mesh network hierarchy 6-57

mesh node hops 16-24

mesh packet error statistics 16-24

mesh packet statistics 16-24

mesh parent changing AP 2-23

mesh parent-child hierarchical view 5-36

mesh reports 16-24

creating 16-10, 16-25

modifying 16-25

viewing 16-25

mesh security statistics

for an AP 6-48

mesh statistics

for an access point 6-52

mesh stranded APs 16-24

mesh tab

home page 2-20

mesh template

configuring 11-72

mesh tree

viewing 6-57

mesh worst node hops 16-25

mesh worst SNR links 16-25

message integrity check information element 11-51

metrics

in QoS 11-9

MFP 3-7

for clients 3-7

MFP client protection 11-21

MFP signature generation 11-21

MFP templates 11-51

MIC IE 11-51

migration analysis

running 9-14

migration analysis report

generating 9-14

migration analysis summary

viewing 9-12

migration template 9-12

minimum RSSI 11-66

MIR 12-1

mirror mode 9-19

mismatched audit status 6-51

mobile announce messages 8-8

mobile intelligent roaming

planning and configuring 12-9

mobility 8-1

mobility anchors 8-13

mobility groups 8-7

configuring 8-8

prerequisites 14-4

mobility scalability 8-11

mobility services 12-1

mobility services engine

adding to WCS 12-2

deleting from WCS 12-3

keeping synchronized 12-3

modifying access point reports 16-8

modifying audit reports 16-9

modifying client reports 16-9, 16-11

modifying a current AP template task 11-89

modifying a current config group task 11-91

modifying inventory reports 16-23

modifying map displays 6-58

using filters 6-58

modifying mesh reports 16-25

modifying a migration template 9-15

modifying performance reports 16-27

modifying security reports 16-29

monitoring active sessions 7-5

monitoring alarms 15-4

monitoring channels

on a floor map 5-41

monitoring channel width 6-60

monitoring clients

on a floormap 5-43

monitoring coverage holes

on a floormap 5-42

monitoring email notifications 15-14

monitoring events 15-13

monitoring failed objects 15-7

monitoring guest users 6-74

monitoring maps 5-33

monitoring mesh access point neighbors 6-46

using maps 6-46

monitoring mesh health 6-43, 6-48, 6-60

monitoring mesh link statistics

using maps 6-41

monitoring mesh networks

using maps 6-41

monitoring neighboring channels 10-32

monitoring outdoor areas 5-36, 5-44

monitoring pre-coverage holes 6-70

monitoring predicted coverage 5-34

monitoring rogue access points 6-13

monitoring rogue access point alarms 15-8

monitoring rogue access point details 15-9

monitoring rogue adhocs 6-14

monitoring rogue adhoc alarms 15-10

monitoring rogue clients 6-15, 15-13

monitoring security configurations 15-14, 17-32

monitoring shunned clients 6-16

monitoring spectrum experts 9-28

monitoring transmit power levels 5-36

on a floormap 5-41

monitor menu 2-26

monitor mode

location optimized 9-18

most recent AP alarms 2-23

most recent audit alarms 8-26

most recent client alarms 2-19

most recent mesh alarms 2-20

most recent rogue adhocs 3-4

most recent rogue AP alarms 2-24

most recent security alarms 2-20, 2-24

MSE

synchronizing with WCS 12-3

MSE synchronization status 12-7

multicast mobility mode 8-12

multiple country codes

configuring 8-15

setting 10-4

multiple syslog template 11-78

N

N+1 redundancy 8-5

NAC out-of-band

configuring 10-19

NAT 8-11

Navigator 1-9

NetStumbler signature 3-11

network address translation 8-11

network audit report

viewing latest 10-8

network design 5-26

network protection 3-9

Network Summary page 2-16

new rogue AP count 16-28

new rogue AP count report 16-28

new rogue APs 16-28

new rogue APs report 16-28

new search 5-6

node hop count

worst 2-20

node hops 6-54

for mesh 16-24

noise

avoiding non-802.11 types 11-59

non-802.11 noise

avoiding 11-59

non-Cisco ACS server

for use with RADIUS 17-14

normal mode

for Ethernet port 9-6

note, defined 21

notifications

of channel change 6-76

of RF grouping 6-77

of transmission power change 6-77

NTP server template 11-3

null probe response signatures 3-10

O

optimizing the controller for high density 10-12

organizationally unique identifier 6-34

organization of document 20

outdoor areas

adding to a campus map5-5to 5-6

monitoring 5-44

outdoor location

creating with Google Earth 19-1

out of sync alarms 12-6

out of sync alerts 12-5

override global username password 9-20

overview

Cisco Wireless LAN Solution 1-1

WCS 1-2

P

packet error rate

worse 2-20

packet error rate link color 6-59

packet error statistics

for mesh 16-24

packet jitter 11-9

packet latency 11-9

packet loss 11-9

packet loss rate 11-9

packets received 6-56

packet statistics

for mesh 16-24

packets transmitted 6-56

parent changes 6-54

parent TSF 6-40

passthrough 11-16

password rules

turning on or off 17-23

PEAP 11-32

peer-to-peer blocking 11-20

guidelines 10-20

percent time at maximum power 6-81

performance reports 16-26

creating 16-27

modifying 16-27

viewing 16-27

performing data management tasks 17-27

pico cell mode 11-58

pinging network devices from a controller 10-9

placemarks

creating 19-3

placement of access points 5-24

planning mode 5-16

to calculate access point requirements 5-14

platinum 11-18

platinum queue 6-54

PLR 11-9

POE status 6-51

policy manager solutions 3-2

policy name template

configuring 11-57

polygon areas

drawing with map editor 5-12

poor neighbor SNR 6-53

power injector setting 9-20, 11-86

power-over-ethernet status 6-51

pre-coverage holes

monitoring 6-70

predicted coverage, monitoring 5-34

predictive tool

distance based 5-20

prerequisites 2-1

prerequisites for high reliability 17-36

present map 6-38

print guest user details 7-19

protection type 11-52

purpose of document 19

Q

QoS 11-18

QoS templates 11-7

quarantine 10-22

queues 16-24

silver, gold, platinum, bronze, management 6-54

quiet time 3-15

R

radio measurements

receiving 6-40

radio receiver sensitivity 6-34

radio resource management 11-59

Radio Resource Management statistics 6-76

radio status

scheduling 9-25

radio templates

configuring 11-92

radio utilization report 16-27

RADIUS accounting template 11-26

RADIUS and TACACS+ attributes

for virtual domain 7-23, 18-7

virtual domains 7-23, 18-7

RADIUS authentication template 11-24

RADIUS servers

configuring 17-24

reachability status 9-28

reassociation request failures 6-56

reassociation request success 6-56

reassociation request timeouts 6-56

reauthentication request failures 6-56

reauthentication request success 6-56

reauthentication request timeout 6-56

rebooting config groups 8-23

receiving radio measurements 6-40

recent alarms 2-23

recent coverage holes 2-18

recent map 6-38

recent rogue adhoc alarm 2-20

recent rogue alarms 2-23

recent rogue AP alarms 2-19

recovering the WCS password 13-14

refresh

automatically 17-35

refresh browser 5-33

refresh controller values 10-7

refresh from network 5-33

refresh heatmap 5-33

related publications 21

relative to ground 19-2

removing controllers from config group 8-20

removing switches 10-32

removing templates from config group 8-21

report

802.11 counters 16-26

access point inventory 16-23

busiest APs 16-8

busiest clients 16-10

client association 16-11

client count 16-11

combined inventory 16-23

controller inventory 16-23

controller utilization 16-26

coverage hole summary 16-26

deleting 16-3

location server inventory 16-23

location server utilization 16-26

mesh alternate parent 16-24

mesh worst node hops 16-25

radio utilization 16-27

security summary 16-28

traffics stream metrics 16-8

traffic stream metrics 16-11

Tx power level and channel 16-27

unique client 16-11

voice statistics 16-27

reports 16-7

802.11n scaling 16-5

access point type 16-7

disable schedule 16-2

enable schedule 16-2

mesh link stats 16-24

mesh node hops 16-24

mesh packet error statistics 16-24

mesh packet statistics 16-24

mesh worst SNR links 16-25

running 16-1

reset AP now 9-21

restore WCS values 10-7

restoring WCS database on Linux 13-7

retain WCS value 8-23

retrieving UDI 6-66

RF calibration model, creating 4-7

RF calibration tool 1-9

RF grouping notifications 6-77

RF prediction heat map 5-23

RF profile traps 11-76

RF properties 6-29

RF update traps 11-76

RLDP 11-44

roaming 8-1

roaming parameters template

configuring 11-65

roaming time 11-9

rogue access point alarms

monitoring 15-8

rogue access point details 15-9

rogue access point location 6-17

rogue access point rule groups 11-46

rogue access point rules

configuring a template 11-44

viewing or editing 9-27

rogue access points

alarm monitor 6-18

detecting 6-18

detecting and locating6-18to 6-19

friendly 6-11

locating 6-18

malicious 6-10

monitoring 6-1, 6-13

solutions for 3-2

unclassified 6-11

rogue adhoc alarm 2-20

monitoring 15-10

rogue adhocs

monitoring 6-14

most recent 3-4

rogue adhocs event report 16-28

rogue AP alarms 2-19

rogue AP detail summary 2-24

rogue APs event report 16-28

rogue APs layer 5-39

rogue APs report 16-28

rogue clients

monitoring 6-15, 15-13

rogue clients layer 5-40

rogue detail summary 2-24

rogue detector 9-18

rogue location discovery protocol 11-44

rogue management 3-4

rogue policies

template for 11-43

rogues detected by APs 16-28

role criteria 9-13

root access points (RAPs)

selecting 9-9

root mode

changing from station role 9-14

routing state 6-53

RRM dashboard 6-74

RRM DCA 10-16

RRM intervals 11-69, 11-70, 11-71

RRM interval template

configuring 11-69, 11-70

RRM thresholds 11-67

RRM threshold template

configuring 11-67

rules

for rogue access points 11-44

viewing or editing for rogue access points 9-27

running a link test 6-64

running background tasks 17-1

running migration analysis 9-14

running report 16-1

RX neighbor requests 6-54

RX neighbor responses 6-54

Rx sensitivity 11-61

S

saved searches 5-6

scalability parameters 8-11

scaling reports

802.11n 16-5

scan threshold 11-66

scheduled configuration tasks

configuring 11-89

scheduled tasks

viewing 9-25

schedule panel

accessing 16-4

scheduling guest user account 7-18

scheduling radio status 9-25

search

using for alarms 15-6

search clients 6-37

searching controllers 10-5

secondary WCS operation 17-36

security alarms

most recent 2-20

security color range 6-3

security configurations

monitoring 15-14, 17-32

security index 6-3

security index detailed report 6-5

security mesh statistics 6-55

security reports 16-28

creating 16-29

modifying 16-29

viewing 16-29

security solutions3-1to 3-5

security statistics

for mesh 6-52

security summary report 16-28

security summary window 6-2

security tab

home page 2-19

selecting access points 11-94

sending mobile announce messages 8-8

sensors

viewing IDS types 3-9

sequence parameter 11-57

serial number 6-34

server settings 17-32

setting AP failover 9-1

setting AP failover priority 10-9

setting lobby ambassodor defaults 7-7

setting multiple country codes 10-4

shunned clients

monitoring 6-16

shutting switch port 10-32

sidebar area 2-27

signature attacks 6-12

signature attacks summary 2-19

silver 11-18

silver queue 6-54

single device 17-19

skull-and-crossbones indicator 6-19

sniffer 11-84

sniffer mode 9-19

SNMP authentication 11-75

SNMPv3

configuring 10-18

SNR definition 6-59

SNR down 6-43

SNR link

worst 2-20

SNR up 6-43

software

downloading config groups to controllers 8-27

updating 4-4

SpectraLink NetLink phones, enabling long preambles 4-6

spectrum experts

adding 9-28

configuring 9-28

monitoring 9-28

summary 9-29

spectrum expert details 9-30

standard signatures 3-10, 3-15

starting WCS

on Linux 2-15

on Windows 2-14

station role

changing to root mode 9-14

statistics

DHCP 6-72

statistics tab 6-31

status, checking 13-1

status report

AP profile 16-8

stopping WCS

on Linux 13-3

on Windows 13-2

supported Cisco WLSE management stations C-2

switches

configuring for hybrid REAP 14-4

removing 10-32

switch port

shutting 10-32

switch port tracing

using 10-30

symmetric mobility tunneling 11-6

symmetric tunneling 8-5

synchronization 12-5

of configuration 17-4

viewing information from 12-7

synchronization history 12-7

synchronizing mobility services engines 12-3

synchronizing WCS and MSE 12-3

syslog templates 11-77, 11-78

system requirements 2-2

T

TACACS+ server

configuring 17-23

configuring a template for 11-29

tagged packets 9-8

tagging

of rogue access points 6-17

target 6-40

target TSF 6-40

tasks

importing into ACS 17-5

Telnet SSH templates 11-76

temperature 6-48

templates

configuring for rogue AP rules 11-44

using 11-1

template-based auditing 8-23

template for configuring network user credentials 11-34

test analysis 6-40

testpoints 5-48

TFTP

turning on and off 17-32

TFTP details 9-15

TFTP server 3-12

TFTP server template

configuring 11-73

thermometer color range 6-3

threats

access points 6-12

throughput report 16-6

tilt 19-2

top APs by client count 2-18

top over subscribed AP 2-23

top security issues 6-4

total APs not assigned to maps 2-18

total interferer count 9-30

total mismatched controllers 8-25

trace switch port 10-30

traffic indicator message 11-58

traffic stream metrics 11-63

traffic stream metrics QoS status 11-9

traffic stream metrics QoS template 11-8

traffic stream metrics report 16-8, 16-11

graphical 16-8

transition time 11-66

transmission power change notifications 6-77

transmit power levels 5-42, 11-59

monitoring on a floor map 5-41

values 5-42

trap

802.11 security 11-76

trap control templates 11-74

trap receiver template 11-73

traps

AAA 11-76

access point 11-76

client related 11-75

RF profile 11-76

RF update 11-76

unsupported 15-70

WPS 11-76

traps added in 2.1 15-35

traps added in 2.2 15-39

traps added in 3.0 15-42

traps added in 3.1 15-44

traps added in 3.2 15-47

traps added in 4.0 15-48

traps added in 4.0.96.0 15-53

traps added in 4.1 15-55, 15-62

trend report type 16-1

troubleshooting A-1

troubleshooting voice RF coverage 5-21

trunk mode 9-6

trusted AP policies

template for 11-44

trusted AP policies template 11-44

tunneling 8-5

turning password rules on or off 17-17

Tx channel report 16-27

TX neighbor requests 6-54

TX neighbor responses 6-54

Tx power level report 16-27

U

UDI

retrieving on controllers and access points 6-66

unadjusted link metric 6-43

unclassified rogue 11-45

unclassified rogue APs 2-24

understanding virtual domains 7-24, 18-8

uninstalling WCS

on Linux 13-8

on Windows 13-8

unique client report 16-11

unique device identifier 6-66

unknown association requests 6-56

unknown reassociation request 6-56

unknown reauthentication request 6-56

untagged packets 9-8

update map view 6-59

updating system software 4-4

upgrading autonomous access points 9-14

upgrading the network 13-14

upgrading to Linux 4

during WLSE conversion C-3

upgrading WCS

on Linux 13-13

on Windows 13-13

uploading IDS signatures 3-12

upstream delay 11-9

upstream packet loss rate 11-9

user accounts

for guest 7-11

user authentication order

managing 10-6

user authentication priority template

configuring 11-80

user credential retrieval priority 11-34

user details

emailing 7-19

printing 7-19

user groups 7-2

user interface 2-25

user login policies

configuring a template 11-38

user preferences 17-40

using chokepoints 5-32

to enhance tag location reporting 5-32

using edit view 15-5

using filtering 6-58

using maps

to monitor mesh AP neighbors 6-46

to monitor mesh link statistics 6-41

using maps to monitor mesh networks 6-41

using planning mode 5-12

using search 15-6

using template

ACL 11-42

for friendly access point 11-48

using templates 11-1

802.11a policy name 11-57

802.11b/g RRM interval 11-69, 11-70

802.11b/g RRM threshold 11-67

802.11b/g voice 11-62

access point/radio 11-83

access point authentication & MFP 11-51

access point authorization 11-40

file encryption 11-23

for legacy syslog 11-77

for multiple syslog 11-78

guest users 11-37

local management user 11-79, 11-80

local net users 11-35

MAC filter 11-39

NTP server 11-3

QoS 11-7

RADIUS accounting 11-26

RADIUS authentication 11-24

syslog 11-77, 11-78

Telnet SSH 11-76

traffic stream metrics QoS 11-8

trap control 11-74

trap receiver 11-73

web authentication 11-52

WLAN 11-10

using testpoints

to analyze element location accuracy 5-48

using the installer to upgrade 13-9

utilization report

for controllers 16-26

V

V5 client statistics report 16-11

vendor CA certificates

downloading 4-5

vendor device certificates

downloading 4-5

video parameter templates

configuring 11-63

view audit reports 10-6

view filters icon 5-35, 5-41, 5-42, 5-43

view in grid 2-23

viewing access point reports 16-8

viewing the audit trail 7-9

viewing all current templates 10-18

viewing an AP template task history 11-90

viewing AP status report

for scheduled task 11-89

viewing audit reports 16-9

viewing audit status 10-6

for access points 9-26

viewing autonomous access points 9-11

viewing clients

identified as WGBs 6-64

viewing client reports 16-11

viewing controller status report

for the scheduled task 11-91

viewing DHCP statistics 6-72

viewing Google Earth maps 6-60, 19-6

viewing guest users 7-16

viewing IDS signature events 3-17

viewing inventory reports 16-23

viewing mesh reports 16-25

viewing mesh tree 6-49, 6-52

viewing MFP events 15-4

viewing the migration analysis 9-12

viewing performance reports 16-27

viewing the RRM dashboard 6-78

viewing security reports 16-29

viewing shunned clients 3-9

viewing synchronization history 12-7

viewing synchronization info 12-7

virtual domain hierarchy 18-3

virtual domains 18-1

assigning 7-22

attributes 7-23, 18-7

creating 18-1

hierarchy 18-3

managing 18-6

understanding 7-24, 18-8

VLAN tagging 9-3

voice parameter template

configuring 11-62

voice RF coverage

troubleshooting 5-21

voice statistics report 16-27

voice traffic 5-18

VoWLAN readiness

inspecting 5-21

W

WCS

checking status

on Linux 13-2

on Windows 13-1

installing 2-4

maintaining13-1to 13-13

overview 1-2

servers supported 1-2

starting

on Linux 2-15

on Windows 2-14

stopping

on Linux 13-3

on Windows 13-2

uninstalling

on Linux 13-8

on Windows 13-8

upgrading

on Linux 13-13

on Windows 13-13

versions1-3to 1-6

WCS_EMAIL_FAILURE 15-64

WCS-ADV-SI-SE-10 B-2

WCS Base, described 1-3, 1-5

WCS controller deployment

from WLSE autonomous C-1

WCS database

adding location appliances 4-2

backing up

on Linux 13-5

on Windows 13-4

restoring

on Linux 13-7

on Windows 13-5

scheduling automatic backups 13-3, 17-1

WCS home 2-16

WCS home page

customizing content 2-22

customizing tabs 2-21

WCS licenses B-1

WCS location

described1-4to 1-6

relationship with Cisco location appliances 1-4

WCS Navigator 1-9

WCS on WLSE

licensing C-7

WCS password

recovering 13-14

WCS user accounts

adding 7-1

changing passwords 7-4

deleting 7-4

WCS user interface 7-14

described 1-2, 1-9

logging into2-15to 2-17

WCS values

restoring 10-7

web authentication template 11-52

web authentication types 3-18

web auth security A-3

web auth types 10-29

web login

enabling 3-17

Wellenreiter signature 3-11

WGBs 9-12

viewing those clients 6-64

wIPS 12-1

planning and configuring 12-10

wired guest access

configuring 10-25

Wireless Control System (WCS)

See WCS

WLANs

web auth security A-3

WLAN templates 11-10

WLSE autonomous deployment conversion C-1

WLSE management stations C-2

WLSE map data

exporting 5-45

importing 5-45

WLSE upgrade B-2

WLSE upgrade license C-7

WMM policy 11-18

work group bridge mode 9-12

worst node hop count 2-20

worst node hops

for mesh 16-25

worst packet error rate 2-20

worst SNR links 2-20

for mesh 16-25

WPS traps 11-76