The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
Your software release may not support all of the features documented in this module. For the latest feature information and caveats, see the release notes for your platform and software release.
Use Cisco Feature Navigator to find information about platform support and Cisco software image support. To access Cisco Feature Navigator, go to http://www.cisco.com/go/cfn. An account on Cisco.com is not required.
The regular local mode access point has been extended with a subset of Wireless Intrusion Prevention System (wIPS) capabilities. This feature enables you to deploy your access points to provide protection without needing a separate overlay network.
| Command or Action | Purpose | |||
|---|---|---|---|---|
| Step 1 |
ap name Cisco_AP mode local Example: |
Configures an access point for monitor mode. A message appears that indicates that changing the AP's mode causes the access point to reboot. This message also displays a prompt that enables you to specify whether or not you want to continue with changing the AP mode. Enter y at the prompt to continue. |
||
| Step 2 |
ap name Cisco_AP dot11 5ghz shutdown Example: |
Disables the 802.11a radio on the access point. |
||
| Step 3 |
ap name Cisco_AP dot11 24ghz shutdown Example: |
Disables the 802.11b radio on the access point. |
||
| Step 4 |
ap name Cisco_AP mode monitor submode wips Example: |
Configures the wIPS submode on the access point.
|
||
| Step 5 |
ap name Cisco_AP monitor-mode wips-optimized Example: |
Enables wIPS optimized channel scanning for the access point.
|
||
| Step 6 |
show ap dot11 24ghz monitor Example: |
Displays the monitor configuration channel set.
|
||
| Step 7 |
ap name Cisco_AP no dot11 5ghz shutdown Example: |
Enables the 802.11a radio on the access point. |
||
| Step 8 |
ap name Cisco_AP no dot11 24ghz shutdown Example: |
Enables the 802.11b radio on the access point. |
| Step 1 |
Choose The All APs page is displayed. |
| Step 2 |
Click the access point name. The AP > Edit page is displayed. |
| Step 3 |
From the AP Mode drop-down list, choose one of the following options to configure the AP mode parameters:
|
| Step 4 |
From the AP Sub Mode drop-down list, choose WIPS . |
| Step 5 |
Click Apply. |
| Step 6 |
Click Save Configuration. |
 Note |
The procedure to perform this task using the device GUI is not currently available. |
| Command or Action | Purpose | |
|---|---|---|
| Step 1 |
show ap name Cisco_AP config general Example: |
Displays information on the wIPS submode on the access point. |
| Step 2 |
show ap monitor-mode summary Example: |
Displays the wIPS optimized channel scanning configuration on the access point. |
| Step 3 |
show wireless wps wips summary Example: |
Displays the wIPS configuration forwarded by NCS or Prime to the device. |
| Step 4 |
show wireless wps wips statistics Example: |
Displays the current state of wIPS operation on the device. |
| Step 5 |
clear wireless wips statistics Example: |
Clears the wIPS statistics on the device. |
This example shows how to display the monitor configuration channel set:
Device# show ap dot11 24ghz monitor
Default 802.11b AP monitoring
802.11b Monitor Mode........................... enable
802.11b Monitor Channels....................... Country channels
802.11b AP Coverage Interval................... 180 seconds
802.11b AP Load Interval....................... 60 seconds
802.11b AP Noise Interval...................... 180 seconds
802.11b AP Signal Strength Interval............ 60 secondsThis example shows how to display information on the wIPS submode on the access point:
Device# show ap name AP01 config general
Cisco AP Identifier.............. 3
Cisco AP Name.................... AP1131:46f2.98ac
...
AP Mode ......................... Monitor
Public Safety ................... Disabled Disabled
AP SubMode ...................... WIPSThis example shows how to display the wIPS optimized channel scanning configuration on the access point:
Device# show ap monitor-mode summary
AP Name Ethernet MAC Status Scanning
Channel
List
------------- -------------- -------- ---------
AP1131:4f2.9a 00:16:4:f2:9:a WIPS 1,6,NA,NAThis example shows how to display the wIPS configuration forwarded by WCS to the device:
Device# show wireless wps wips summary
Policy Name.............. Default
Policy Version........... 3This example shows how to display the current state of wIPS operation on the device:
Device# show wireless wps wips statistics
Policy Assignment Requests............ 1
Policy Assignment Responses........... 1
Policy Update Requests................ 0
Policy Update Responses............... 0
Policy Delete Requests................ 0
Policy Delete Responses............... 0
Alarm Updates......................... 13572
Device Updates........................ 8376
Device Update Requests................ 0
Device Update Responses............... 0
Forensic Updates...................... 1001
Invalid WIPS Payloads................. 0
Invalid Messages Received............. 0
CAPWAP Enqueue Failed................. 0
NMSP Enqueue Failed................... 0
NMSP Transmitted Packets.............. 22950
NMSP Transmit Packets Dropped......... 0
NMSP Largest Packet................... 1377
Feedback