- All APs
- All APs Summary
- All APs Details
- Sniffer Feature
- Traffic Stream Metrics Collection
- OfficeExtend Access Points
- VLAN Mappings for FlexConnect Access Points
- WebAuth and WebPolicy ACL Mappings for FlexConnect Access Points
- Local Split ACL Mappings (for FlexConnect Access Points)
- Central DHCP ACL Mappings for FlexConnect Access Points
- VLAN Mappings for Mesh Access Points
- Neighbor Information of Access Points
- Link Details of Access Points
- Mesh Neighbor Statistics
- Access Points Statistics
- General
- Cisco Discovery Protocol
- Login Credentials
- 802.1X Supplicant Credentials
- AP Failover Priority
- AP Image Predownload
- High Availability
- TCP MSS
- AP Retransmit Config Parameters
- OEAP Config Parameters
- Flexconnect Ethernet Fallback
- Global Telnet SSH
- Global IPv6 UDP Lite
- Packet RSSI Location Config Parameters
Wireless Tab
The Wireless tab on the menu bar provides access to the Cisco WLAN Solution wireless network configuration. Use the left navigation pane to access specific wireless network parameters. Making this selection from the menu bar opens the All APs page.
You can access the following pages from the Wireless tab:
- All APs
- Load Balancing
- Band Select
- Preferred Calls
- SIP Snooping
- Rx SOP Threshold
- Optimized Roaming
- 802.11a/n/ac Radios
- 802.11b/g/n Radios
- Dual-Band Radios
- Global Configuration
- Mesh
- RF Profiles
- FlexConnect Groups
- FlexConnect ACLs
- 802.11a/n/ac Global Parameters
- 802.11a/n/ac RF Grouping
- 802.11a/n/ac Tx Power Control
- 802.11a/n/ac Dynamic Channel Assignment
- 802.11a/n/ac Coverage Hole Detection
- 802.11a/n/ac RRM
- 802.11a/n/ac Client Roaming
- 802.11a/n/ac Voice Parameters
- 802.11a/n/ac Video Parameters
- 802.11a/n/ac Media Parameters
- 802.11 EDCA Parameters
- 802.11h Global Parameters
- 802.11n/ac (5 GHz) Very High Throughput
- 802.11a/n/ac CleanAir
- 802.11b/g/n Global Parameters
- 802.11b/g/n RF Grouping
- 802.11b Tx Power Control
- 802.11b Dynamic Channel Assignment
- 802.11b Coverage Hole Detection
- 802.11b RRM
- 802.11b/g Client Roaming
- 802.11b/g Client Roaming
- 802.11b/g Voice Parameters
- 802.11b/g/n Video Parameters
- 802.11b/g Media Parameters
- 802.11b/g EDCA Parameters
- 802.11n (2.4 GHz) High Throughput
- Configuring Media Stream
- Media Streams
- Application Visibility and Control
- Country
- Timers
- NetFlow
- QoS Profiles
- QoS Roles for Guest Users
All APs
Choose WIRELESS > Access Points > All APs or MONITOR > Summary and click All APs under the AP Summary section to navigate to the All APs page.
This page displays the access points associated with the Cisco WLC. This section consists of the following topics:
- All APs Details
- VLAN Mappings for FlexConnect Access Points
- WebAuth and WebPolicy ACL Mappings for FlexConnect Access Points
- VLAN Mappings for Mesh Access Points
- Neighbor Information of Access Points
- Access Points Statistics
Click Change Filter to display the Search APs dialog box (see the following figure) and create or change filter parameters. Click Clear Filter to remove the filter and display the entire access point list.
The current filter parameters are displayed in the Current Filter field.
Note When you enable the MAC address filter, the other filters are disabled automatically. When you enable any of the other filters, the MAC address filter is disabled automatically.
- AP Name—Access point name. If you do not know the exact name of the AP, you can specify the name partially by entering one or more successive characters that are part of the AP name.
- AP Model—Access point model check box where you select and enter the model of the access point.
- Operating Status—Operating status of the access points:
– UP—The access point is up and running.
– DOWN—The access point is not operational.
– REG—The access point is registered to the controller.
– DEREG—The access point is not registered to the controller.
– DOWNLOAD—The controller is downloading its software image to the access point.
- Admin Status—Whether the access points are enabled or disabled on the controller.
- AP Mode—Options to specify the operating mode of the access points: Local, FlexConnect, REAP, Monitor, Rogue Detector, Sniffer, Bridge, and SE Connect. Depending on the capabilities and support available for the APs, one or more options are displayed.
Note The Cisco OEAP 600 Series access point uses Local mode and the settings cannot be altered. The Cisco OEAP 600 Series access point does not support the following AP Modes: Monitor, FlexConnect, Sniffer, Rogue Detector, Bridge, and SE Connect.
Note To configure an access point for wIPS, you must set the AP mode to one of the following from the AP Mode drop-down list: Local, FlexConnect, and Monitor.
- Certificate Type—Check boxes that you can select to specify the types of certificates installed on the access points:
– MIC—Manufactured-installed certificate
– LSC—Local significant certificate
Click Find to commit your changes. Only the access points that match your search criteria appear on the All APs page, and the Current Filter parameter at the top of the page specifies the filter used to generate the list (for example, MAC address:00:1e:f7:75:0a:a0, AP Name:pmsk-ap, Operational Status:UP, Status: Enabled, and so on).
Note If you want to remove the filter and display the entire access point list, click Clear Filter.
All APs Summary
This table describes the AP parameters.
For details on a particular access point, click the access point name to open the All APs Details page for that access point.
To view statistics for an access point in Bridge AP mode, click the blue arrow adjacent the desired access point and choose Statistics. The Access Points Statistics page for the selected access point appears.
To view neighbor statistics for an access point in Bridge AP mode, click the blue arrow adjacent the desired access point and choose Neighbor Information. The Neighbor Information of Access Points page for the selected access point appears.
All APs Details
Choose WIRELESS > Access Points > All APs and then click an AP name to navigate to the AP Details page.
This page shows the details of the selected access point including the hardware, operating system software, and boot version details.
General Tab
The following parameters are not displayed for ODM access point under General parameters:
This table describes the general AP parameters.
|
|
---|---|
User-definable location name for the access point. You can enter up to 254 characters. |
|
Access point mode of operation. The options are as follows: Note The Cisco OEAP 600 Series access point uses local mode and these settings cannot be altered. Monitor mode, Sniffer mode, Rogue detector mode, Bridge mode, and SE- Connect modes are not supported on the 600 OEAP series.
See the Sniffer Feature topic for more details. Note This option is displayed only if the AP is bridge capable. Note If the AP mode is set to “Bridge” and the AP is not REAP capable, an error is displayed.
Note Only Cisco CleanAir-enabled access point radios can be configured for Cisco CleanAir. Note When an access point is configured in SE-Connect mode, the access point reboots and rejoins the controller. Access points configured in this mode will not serve clients. Note To configure an access point for wIPS, you must set the AP mode to one of the following from the AP Mode drop-down list: Local, FlexConnect, or Monitor. |
|
Access Point submode. The available options are as follows:
Note wIPS ELM is not supported on 1130 and 1240 access points. |
|
Operational status of the access point that comes up as either registered (REG) or not registered (DEREG) automatically by the Cisco WLC. |
|
32-digit Network Spectrum Interface (NSI) key. The NSI key is required to configure spectrum expert mode. Note This parameter is shown only for CleanAir capable access points for only Local, FlexConnect, and SE-Connected mode. |
|
Drop-down list from which you can choose a Hotspot group that groups similar Hotspot venues. The following options are available: |
|
Drop-down list from which you can choose the type of venue based on the Venue Group that you choose. |
|
Venue name that you can provide for this access point. This name is associated with the basic service set (BSS). This name is used in cases where the SSID does not provide enough information about the venue. The venue name is case sensitive and can be up to 252 alphanumeric characters. |
|
Language used at the venue. ISO-639 encoded string defining the language used at the venue. This string is a three-character language code. For example, you can enter ENG for English. |
|
When an access point in SE-Connect mode joins a controller, it sends a Spectrum Capabilities notification message, and the controller responds with a Spectrum Configuration Request. The request contains the 16-byte random NSI key generated by the controller for use in NSI authentication. The controller generates one key per access point, which the access point stores until it is rebooted. |
|
The following parameters are applicable to Cisco 1570 Series Access Points |
|
The Internal Temperature of the AP is displayed in both Celsius and Fahrenheit. |
|
The Temperature State is shown to be in one of three states: GREEN, YELLOW, or RED. The GREEN state indicates that the AP is functioning normally and the internal temperature is at an optimal operating temperature; the YELLOW state indicates that the AP state is in transition to either GREEN or RED state; if the AP is in RED state, it means that the internal temperature of the AP has increased and the number of antennas that are used for transmission will be reduced. |
|
The PoE Out State shows the status of the Power over Ethernet output port from the AP. The PoE Out State can be in OFF or ON state depending on the input power source for the AP. |
The following parameters are not displayed for Cisco OEAP 600 Series access point:
- Predownload Status
- Predownloaded Version
- Predownloaded Next Retry Time
- Predownload Retry Count
- All the predownload parameters
- IOS Version
- Mini IOS Version
This table describes the GPS Location parameters. GPS parameters do not appear if the access point does not have a GPS module or the GPS information is invalid.
This table describes the Cable Modem statistics. The Cable Modem statistics are updated every 5 minutes after the AP is associated with the WLC. The Cable Modem statistics are applicable for Cisco 1572C (internal or external antenna cable modem) access points in local or bridge/Flex-bridge modes.
|
|
---|---|
This table describes the version parameters.
This table describes the IP config parameters.
This table describes the time statistics.
|
|
---|---|
Amount of time that the access point has been associated with the controller. |
|
Amount of time that the access point took to associate with the controller. |
Credentials Tab
Note The Credentials Tab is not displayed for ODM access points.
This table describes the credentials parameters.
|
|
---|---|
Access point that is prevented from inheriting the global username, password, and enable password from the controller. The default value is unselected. |
|
This table describes the controller configuration parameters.
Interfaces Tab
Note To enable or disable CDP either on an Ethernet or radio interface, you should enable the global CDP for that particular access point. See Global Configuration for more information.
Note CDP over radio interface is applicable only for mesh APs.
Note The CDP state and CDP configuration are not displayed for the Cisco OEAP 600 Series access point under the Ethernet Interfaces parameters.
This table describes the ethernet interface parameters.
|
|
---|---|
|
|
Current configured state of CDP on all or a specific Ethernet interface. The status could be enabled or disabled. Note You can enable or disable CDP on all or a specific Ethernet interface by choosing WIRELESS > Access points > Global Configuration and select CDP State check box over a particular Ethernet interface. |
|
Click an interface name to view its properties.
This table describes the interface parameters.
This table describes the radio interface parameters.
High Availability Tab
The high availability feature is used to help an AP move over to a controller when the current controller fails. The backup and secondary are the fourth and fifth in the order of controllers if primary, secondary, and tertiary controllers are configured under the AP. If the primary, secondary, and tertiary controllers are not configured, then the AP will use the backup primary if the current controller fails.
Note If the AP supports IPv6 then it can discover a WLC over IPv6 CAPWAP tunnel.
Note When the Cisco OEAP 600 Series access point joins the controller, the high availability settings have only the IP address that have been entered in the local UI of the OEAP 600 Series from the controller.
This table describes the high availability parameters.
Inventory Tab
This table describes the inventory parameters.
Mesh Tab
Note This tab appears if you set the AP Mode on the General Tab to Bridge.
This table describes the mesh parameters.
|
|
---|---|
Root APs have a wired CAPWAP (Control and Provisioning of Wireless Access Points) protocol connection back to a controller. This connection uses the backhaul wireless interface to communicate to neighboring Mesh APs. Root APs are parent nodes to any bridging or mesh network and connect a bridge or mesh network to the wired network. You can have only one Root AP for any bridged or mesh network. Mesh APs have no wired connection to a controller. They can be completely wireless supporting clients, communicating to other Mesh APs and a Root AP to get access to the network, or they can be wired and serve as a bridge to a remote wired network. |
|
(Display Only Field) Whether the access point is an indoor or outdoor access point. |
|
Use bridge group names to logically group the access points and to avoid two networks on the same channel from communicating with each other. Note For the access points to communicate with each other, they must have the same bridge group name. |
|
Ethernet bridging on the access point. If the AP Mode is Root AP, Ethernet bridging is enabled by default. If the AP Mode is Mesh AP, Ethernet bridging is disabled by default. Enable Ethernet bridging on a Mesh AP if you want to do one of the following: Note When you enable Ethernet Bridging and click Apply, the Ethernet Bridging Parameters area appears and lists the four Ethernet ports of the mesh access point. |
|
(Display Only Field) Backhaul interface (802.11a, 802.11b, 802.11g, or 802.11n). |
|
Rate at which data is shared between the access points. The drop-down list displays the data rates depending on the Backhaul Interface set. The correct range of values depend on the backhaul interfaces used by the access points. The data rates (Mbps) are as follows: Note In previous software releases, the default value for bridge data rate for 802.11a was 24 Mbps. In controller release 6.0, the default value for the bridge data rate is auto. If you configured the default bridge data rate value (24 Mbps) in a previous controller software release, the bridge data rate is configured with the new default value (auto) when you upgrade to controller software release 6.0. However, if you configured a nondefault value (for example, 18 Mbps) in a previous controller software release, that configuration setting is preserved when you upgrade to software release 6.0. |
|
Status of the Ethernet (LAP1510) or Gigabit Ethernet (LAP1522) links. For each link, the status can be Up, Dn, or Na. |
|
Internal temperature of the access point in Fahrenheit and Celsius. |
Note The following parameters appear when you enable Ethernet Bridging and click Apply.
This table describes the Ethernet bridging parameters.
|
|
---|---|
Name of the interface. Click the interface name to open the VLAN Mappings for Mesh Access Points page. To configure access mode on a Mesh access point, click the gigabitEthernet1 interface. To configure trunk mode on a Root or Mesh access point, click the gigabitEthernet0 interface. |
|
FlexConnect Tab
Note This tab appears if you set the AP Mode on the General Tab to FlexConnect.
This table describes the FlexConnect parameters.
|
|
---|---|
Check box to configure the native VLAN ID and the VLAN mappings. Note After you enable VLAN support, click Apply to activate the VLAN Mappings button. |
|
Shows the status of the VLAN Support configuration. If Native VLAN on AP is overridden, then this is shown as Group Specific. |
|
Drop-down list to configure VLAN support for the FlexConnect AP. When the override flag at the FlexConnect group is disabled, this additional inheritance level configuration is available for the FlexConnect AP. If you choose “Make VLAN AP Specific,” then the VLAN support, Native VLAN ID, and WLAN-VLAN mappings are made specific to this AP and not to the FlexConnect group. |
|
VLAN mappings for the locally switched WLANs. Click the VLAN Mappings button. You can also view VLAN-ACL mappings on the AP via FlexConnect groups. |
|
Name of the group if the access point belongs to a FlexConnect group. See the FlexConnect Groups page for more information about FlexConnect groups. |
|
|
|
ACLs for external web authentication. Click the External WebAuthentication ACLs link to view and configure the ACL mappings and web policy ACLs. |
|
ACLs for the local split WLANs. Click the Local Split ACLs link to view and configure the local split ACLs of the REAP groups. These ACLs locally switch traffic in centrally switched WLANs. |
|
Central DHCP processing parameters. Click the Central DHCP Processing link to view the WLAN DHCP mappings and configure WLAN DHCP parameters such as Central DHCP, Override DNS, and NAT/PAT. Click Add to create a new WLAN DHCP mapping. |
|
Note Only Cisco Aironet 1130 series and 1140 series access points that are joined to a Cisco 5500 Series Controller with a WPlus license can be configured to operate as OfficeExtend access points. For more information, see the OfficeExtend Access Points topic. |
|
OfficeExtend mode for this access point. The default value is enabled. Note Unselecting this check box disables OfficeExtend mode for this access point. It does not undo all the configuration settings on the access point. |
|
Access point to choose the controller with the least latency when joining. The default value is disabled. When you enable this feature, the access point calculates the time between the discovery request and the discovery response and joins the Cisco 5500 Series Controller that responds first. |
|
Access point’s personal SSID that you can clear. Note If you want to clear the access point’s configuration and return it to the default settings, enter the clear ap config Cisco_AP command on the controller CLI. |
Mesh Tab
Note This tab appears only for Mesh APs.
This table describes the mesh parameters.
Advanced Tab
The following parameters are not displayed for the Cisco OEAP 600 series access point:
This table describes the advanced parameters.
|
|
---|---|
Country code. See the Country topic for information on configuring the country code. |
|
Cisco Discovery Protocol that you can enable or disable. The default is unselected. Note If CDP is disabled at the controller level, a message “Controller CDP Disabled” appears. |
|
AP Group’s VLANs that you have created. To associate an AP group VLAN with an access point, follow these steps: 1. Select an AP group VLAN from the drop-down list. For more information on creating a new AP group and mapping it to an interface, see the AP Groups page. |
|
Time in seconds that the access point sends its 802.11 statistics to the Cisco WLC. |
|
Datagram Transport Layer Security (DTLS) data encryption that you can enable or disable. The default is unselected. Cisco 5500 Series Wireless Controllers enable you to encrypt CAPWAP control packets (and optionally, CAPWAP data packets) that are sent between the access point and the controller using DTLS. DTLS is a standards-track Internet Engineering Task Force (IETF) protocol based on TLS. CAPWAP control packets are management packets exchanged between a controller and an access point while CAPWAP data packets encapsulate forwarded wireless frames. CAPWAP control and data packets are sent over separate UDP ports: 5246 (control) and 5247 (data). If an access point does not support DTLS data encryption, DTLS is enabled only for the control plane, and a DTLS session for the data plane is not established. Note If an access point with data encryption enabled tries to join any other controller, the access point joins the controller, but data packets are sent unencrypted. DTLS data encryption is enabled automatically for OfficeExtend access points but disabled by default for all other access points. Most access points are deployed in a secure network within a company building, so data encryption is not necessary. The traffic between an OfficeExtend access point and the controller travels through an unsecure public network, so data encryption is more important for these access points. When data encryption is enabled, traffic is encrypted at the access point before it is sent to the controller and at the controller before it is sent to the client. Note Encryption limits throughput at both the controller and the access point, and maximum throughput is desired for most enterprise networks. The availability of data DTLS for the 7.1 release is as follows:
– Licensed DTLS—AS_5500_LDPE_x_x_x_x.aes – Non licensed DTLS—AS_5500_x_x_x_x.aes
Note If your controller does not have data DTLS license and if the access point associated with the controller has DTLS enabled, the data path will be unencrypted. The following are some of the guidelines when upgrading to or from a DTLS image:
|
|
Rogue detection for individual access points that you can enable or disable. Rogue detection is enabled by default for all access points joined to the controller (except for OfficeExtend access points). The default is unselected. |
|
AP submode that displays wIPS if the access point is in Monitor mode (from the AP Mode drop-down list on the General Tab) and the wIPS submode is configured on the access point or None if the access point is in local/FlexConnect modes and wIPS submode is not configured. Note wIPS ELM is not supported on 1130 and 1240 access points. |
|
Telnet or SSH connectivity on this access point. The default is unselected. These protocols make debugging the access point easier, especially when the access point is unable to connect to the controller. |
|
Enables the configuration of the maximum segment size (MSS) for transient packets that traverse a router on a per AP basis. From Release 8.0, the controller supports IPv6. Use the following Global TCP Adjust MSS values for: Note Any TCP MSS value that is below 1220 and above 1331 will not be effective for CAPWAP v6 AP |
|
Displays the per AP UDP lite status. Note The UDP Lite field is displayed only for APs that are associated using CAPWAP v6. This field is not displayed for APs associated using IPv4 address. |
|
Parameter that makes the AP work only as a wireless AP. Note This option is applicable only for Cisco 600 Series OfficeExtend Access Points. |
|
Parameter that disallows users from setting up personal SSIDs. Note This option is applicable only for Cisco 600 Series OfficeExtend Access Points. |
|
Parameter to enable or disable the LED state of the AP to be shown. |
|
Note The Link Latency parameters are not displayed for ODM access points. |
|
Link latency for this access point. Enable link latency to measure the link between an access point and the controller. This feature can be used with all access points joined to the controller but is especially useful for FlexConnect access points (in connected mode) and OfficeExtend access points, for which the link could be a slow or unreliable WAN connection. Note FlexConnect access points in standalone mode are not supported. |
|
Current round-trip time (in milliseconds) of CAPWAP heartbeat packets from the access point to the controller and back. |
|
Minimum round-trip time (in milliseconds) of CAPWAP heartbeat packets from the access point to the controller and back since link latency has been enabled or reset. |
|
Maximum round-trip time (in milliseconds) of CAPWAP heartbeat packets from the access point to the controller and back since link latency has been enabled or reset. |
|
Link latency statistics on the controller for this access point. |
|
Note The 1120, 1230, and 1310 access points do not support predownloading of images. |
|
Primary image predownload. Click Download Primary to perform a primary image predownload for this access point. An alert box displays the version that would be downloaded when the access point boots. Click OK to continue. |
|
Interchange of images. Click Interchange Image to change the images on this access point. A dialog box prompts you to confirm if you want to interchange the images. Click OK to continue. |
|
Backup image predownload. Click Download Backup to predownload a backup image for this access point. A pop-up window displays the version that would be downloaded when the access point boots. Click OK to continue. |
|
Note The Power Over Ethernet Settings parameters are not displayed for Cisco OEAP 600 Series access points. |
|
Status that applies only to 1250 series access points that are powered using PoE. This field shows the power level at which the access point is operating: High (20 W), Medium (16.8 W), or Medium (15.4 W). This field is not configurable. The controller automatically detects the access point’s power source and displays the power level here. Note There are two other ways to tell if the access point is operating at a lower power level. First, the “Due to low PoE, radio is transmitting at degraded power” message appears under the Tx Power Level Assignment section on the Configuring 802.11a/n APs page. Second, the “PoE Status: degraded operation” message appears in the controller’s trap log on the Trap Logs page. |
|
Whether the access point is being powered by a high-power Cisco switch. Unselect the check box if power is being provided by a power injector. |
|
Whether the attached switch supports intelligent power management (IPM) and a power injector is being used. If the attached switch supports IPM, you do not need to select this check box. |
|
If you want to configure the switch MAC address, enter the MAC address in the Injector Switch MAC address text box. |
|
Note The File Compression parameter is not displayed for ODM access points. |
|
IP address of the TFTP server. From release 8.0, the TFTP server supports IPv6 address too. |
|
File compression of the access point core dump file. When you enable this option, the file is saved with a.gz extension (for example, dump.log.gz). This file can be opened with WinZip. The default is disabled. |
|
|
|
Number of times that you want the access point to retransmit the request to the controller and vice versa. The range is from 3 to 8. |
|
Time duration between retransmission of requests. The range is from 2 to 5. |
|
|
|
VLAN tagging of the CAPWAP packets that you can enable or disable. |
|
If the access point is unable to route traffic through the specified trunk VLAN, it untags the packets and reassociates with the controller. The controller sends a trap to a trap server such as the Cisco PI, which indicates the failure of the trunk VLAN. If the trunk VLAN ID is zero, the access point untags the CAPWAP packets. |
|
Click Apply to send data to the controller, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
Sniffer Feature
When the sniffer feature is enabled on an access point, the access point functions as a sniffer and captures and forwards all the packets on a particular channel to a remote machine that runs AirMagnet Enterprise Analyzer, Airopeek, or Wireshark. These packets contain information on timestamps, signal strengths, packet sizes and so on.
Note You can enable the sniffer feature only if you are running Airopeek or Wireshark (third-party network analyzer software that supports decoding of data packets).
Note You must disable IP-MAC address binding in order to use an access point in sniffer mode if the access point is joined to a Cisco 5500 Series Controller, or a controller network module running software release 6.0. To disable IP-MAC address binding, enter the config network ip-mac-binding disable command from the controller CLI.
Note You must enable WLAN 1 to use an access point in sniffer mode if the access point is joined to a Cisco 5500 Series Controller, or a controller network module running software release 6.0. If WLAN 1 is disabled, the access point cannot send packets.
Before using the sniffer feature, you must configure an access point in sniffer mode at the remote site. See the Cisco Wireless LAN Controller Configuration Guide for installation information for AirMagnet Enterprise Analyzer, Airopeek, and Wireshark packet analyzers for IEEE 802.11 wireless LANs.
Traffic Stream Metrics Collection
Choose MONITOR > Wireless > Clients and then click 802aTSM or 802b/gTSM to navigate to the Traffic Stream Metrics page.
Traffic stream metrics involves collecting of uplink statistics and downlink statistics between an AP and a CCX v4 client and then propagating these statistics periodically back to the controller. If the client is not CCXv4 compliant, then only downlink statistics are captured.
Traffic stream metrics collection can be configured by the user for each interface band (for example, all 802.11a radios). The controller also saves this option in flash memory so that it persists across reboots. Once an AP receives this message, it enables traffic metrics collection feature on the specified interface type.
Every 5 seconds, the AP gets a measurement report for both the uplink (client side) and downlink (local side) measurements. The aggregation of 5-second reports and preparation of 90-second reports is done at the AP. Every 90 seconds, the AP prepares an IAPP data packet and sends it to the controller for further processing. The controller stores the data in its structures and then provides “usmdB” access APIs to the CLI module and the WCS for displaying it on the UI.
Four variables are affected by the WLAN that can affect audio quality: packet latency, packet jitter, packet loss and roaming time. You can isolate the problem of bad voice quality by studying these variables. The traffic stream metrics feature addresses the voice quality issue by providing an administrator with statistics for each of these four variables.
OfficeExtend Access Points
Currently, Cisco Aironet 1130, 1140, 3502I, 600 series access points that are joined to a Cisco 5500 Series Controller can be configured to operate as OfficeExtend access points.
An OfficeExtend access point provides secure communications from a controller to an access point at a remote location, seamlessly extending the corporate WLAN over the Internet to an employee’s residence. The experience of the teleworker at the home office is exactly the same as it would be at the corporate office. Datagram Transport Layer Security (DTLS) encryption between the access point and the controller ensures that all communications have the highest level of security.
1. OfficeExtend access points are designed to work behind a router or other gateway device that is using network address translation (NAT). NAT allows a device, such as a router, to act as an agent between the Internet (public) and a personal network (private), enabling an entire group of computers to be represented by a single IP address. In controller software release 6.0 or later releases, only one OfficeExtend access point can be deployed behind a single NAT device.
2. Rogue detection is disabled when you enable the OfficeExtend mode for an access point. However, you can enable or disable rogue detection for a specific access point by selecting the Rogue Detection check box on the All APs Details for (Advanced) page. Rogue detection is disabled by default for OfficeExtend access points because these access points, which are deployed in a home environment, are likely to detect a large number of rogue devices.
3. DTLS data encryption is enabled automatically when you enable the OfficeExtend mode for an access point. However, you can enable or disable DTLS data encryption for a specific access point by selecting the Data Encryption check box on the All APs Details for (Advanced) page.
4. Telnet and SSH access are disabled when you enable the OfficeExtend mode for an access point. However, you can enable or disable Telnet or SSH access for a specific access point by selecting the Telnet or SSH check box on the All APs Details for (Advanced) page.
5. Link latency is enabled when you enable the OfficeExtend mode for an access point. However, you can enable or disable link latency for a specific access point by selecting the Enable Link Latency check box on the All APs Details for (Advanced) page.
6. The Cisco OEAP 600 Series access point supports a maximum of two WLANs and one remote LAN. If you have configured more than two WLANs and one remote LAN, you can assign the Cisco OEAP 600 Series access point to an AP Group. The support for two WLANs and one remote LAN still applies to the AP Group if the Cisco OEAP 600 Series is in the default group. The WLAN/remote LAN IDs must be less than 8.
7. Only four clients can connect to an Cisco OEAP 600 Series access point through a remote LAN port. This number does not affect the 15-client limit imposed for the Cisco WLC WLANs. The remote LAN client limit supports connecting a switch or hub to the remote LAN port for multiple devices or connecting directly to a Cisco IP phone that is connected to that port. Only the first four devices will be able to connect until one of the devices is idle for more than one minute.
8. CAC is not supported on the Cisco OEAP 600 Series access points.
9. Your firewall must be configured to allow traffic from access points using CAPWAP. Make sure that UDP ports 5246 and 5247 are enabled and are not blocked by an intermediate device that could prevent an access point from joining the Cisco WLC.
controller release 7.1 and later supports OEAP 600 series access points on Cisco 5508, Catalyst 6500 Series Wireless Services Module (WISM-2), and 2500 Series Controllers. Unlike the 1130 and 1140 series access points which required configuration for FlexConnect and setting the sub-mode of the access point to OEAP, the 600 series uses local mode and these settings cannot be altered.
The following access point modes are not supported on the Cisco OEAP 600 Series access points:
VLAN Mappings for FlexConnect Access Points
Choose WIRELESS > Access Points > All APs, click the AP name of a FlexConnect access point, click the FlexConnect tab, and then click VLAN Mapping to navigate to the VLAN Mappings page. This page enables you to assign a VLAN ID to the FlexConnect access point and configure VLAN mappings for the locally switched WLANs. You can also view VLAN-ACL mappings on the AP via the FlexConnect group.
This table describes the VLAN mapping parameters.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
WebAuth and WebPolicy ACL Mappings for FlexConnect Access Points
Choose WIRELESS > Access Points > All APs, > AP_name > FlexConnect tab, and click the External WebAuthentication ACLs link to navigate to the External WebAuthentication ACLs page. This page enables you to configure WLAN ACL mappings for FlexConnect access points and to add WebPolicy ACLs.
This table describes the WebAuth and WebPolicy ACL mappings parameters.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
Local Split ACL Mappings (for FlexConnect Access Points)
Choose WIRELESS > Access Points > All APs, > AP_name > FlexConnect tab, and click the Local Split ACLs link to navigate to the Local Split ACLs page. This page enables you to configure local split ACLs for FlexConnect access points.
This table describes the local split ACL mappings parameters.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
Central DHCP ACL Mappings for FlexConnect Access Points
Choose WIRELESS > Access Points > All APs, > AP_name > FlexConnect tab, and click the Central DHCP Processing link to navigate to the Central DHCP Processing page. This page enables you to configure central DHCP, override DNS, and enable NAT/PAT on a WLAN.
This table describes the central DHCP mappings parameters.
|
|
---|---|
|
|
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
VLAN Mappings for Mesh Access Points
Choose WIRELESS > Access Points > All APs, click the AP name of a mesh (bridge) access point, click the Mesh tab, and then click an Ethernet interface from the Ethernet Bridging area to navigate to the VLAN Mappings page.
Note The Ethernet Bridging area appears after you enable Ethernet Bridging and click Apply.
Ethernet VLAN tagging allows specific application traffic to be segmented within a wireless mesh network and then forwarded (bridged) to a wired LAN (access mode) or bridged to another wireless mesh network (trunk mode).
Configure access mode on gigabitEthernet1. Configure trunk mode on gigabitEthernet0.
Note Configurations on gigabitEthernet2 and gigabitEthernet3 interfaces are not supported.
Configuring Access Mode
To configure a mesh access point (MAP) access port, follow these steps:
Step 1 Choose access from the mode drop-down list.
Step 2 Enter a VLAN ID. The VLAN ID can be any value between 1 and 4095.
Note VLAN ID 1 is not reserved as the default VLAN.
Note A maximum of 16 VLANs are supported across all of a RAP’s subordinate MAPs.
To configure a root access point (RAP) or MAP trunk port, follow these steps:
Step 1 Choose trunk from the mode drop-down list.
Step 2 Enter a native VLAN ID for the incoming traffic. The native VLAN ID can be any value between 1 and 4095. Do not assign any value assigned to a user-VLAN (access).
A trunk VLAN ID text box and a summary of configured VLANs appears at the bottom of the page. The trunk VLAN ID text box is for outgoing packets.
Step 4 Enter a trunk VLAN ID for outgoing packets:
a. If forwarding untagged packets, do not change the default trunk VLAN ID value of zero (MAP-to-MAP bridging, campus environment).
b. If forwarding tagged packets, enter a VLAN ID (1 to 4095) that is not already assigned (RAP to switch on wired network).
Step 5 Click Add to add the trunk VLAN ID to the allowed VLAN list. The newly added VLAN appears under Configured VLANs on the page.
To remove a VLAN from the list, click the blue arrow adjacent the desired VLAN and choose Remove.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
Neighbor Information of Access Points
Choose WIRELESS > Access Points > All APs, click the blue arrow adjacent the desired access point and choose Neighbor Information to navigate to the Neighbor Information page.
This page lists the parent, children, and neighbors of the access point. It provides each access point’s name and radio MAC address.
To perform a link test between the access point and its parent or children, click the blue arrow adjacent the desired access point and choose LinkTest. A dialog box appears.
Click Submit to start the link test. The link test results appear on the Mesh > LinkTest Results page.
- To view the details for any access point on this page, click the blue arrow adjacent the desired access point your cursor over the blue drop-down arrow for the desired access point and choose Details. The Link Details of Access Points page appears.
- To view statistics for any access point on this page, click the blue arrow adjacent the desired access point and choose Stats. The Mesh Neighbor Statistics page appears.
Link Details of Access Points
Choose WIRELESS > Access Points > All APs, click the blue arrow adjacent the desired access point and choose Details to navigate to the Link Details page.
Mesh Neighbor Statistics
Choose WIRELESS > Access Points > All APs, click the blue arrow adjacent the desired access point and choose Stats to navigate to the Neighbor Statistics page.
Access Points Statistics
Choose WIRELESS > Access Points > All APs, click the blue arrow adjacent the desired access point and choose Statistics to navigate to the Access Points Statistics page.
Mesh Node Stats
This table describes the mesh node parameters.
Queue Stats
This table describes the queue statistics.
Mesh Node Security Stats
This table describes the mesh node security statistics.
Link Test
Choose WIRELESS > Access Points > All APs / Detail, and then click Link Test to navigate to the Link Test page.
You can test the status of a bridge connection using the link test. Using the link test, you can configure and execute tests, check the status of a test, and access test data.
This test involves one transmitting WRAP and one receiving WRAP. A WRAP can run only one test at a time; you cannot have multiple WRAPs transmitting to one receiving WRAP.
The link test page displays the link test parameters and the results of the last link tests, sorted by the link test ID. The link test ID is the receiving access point’s ID.
This table describes the link test parameters.
Note Before conducting a link test on a receiving WRAP, go to the Link Test Results of that WRAP and click Clear to clear the existing Link Test Results.
Specify your link test values and click Link Test.
The link test is conducted for the duration that you specify. If the test is successful, the Link Test Results field parameters are populated with the latest link test results for the selected Bridged Neighbor AP (Link Test ID).
Link Test Results
This table lists the link test result parameters.
802.11a/n/ac Radios
Choose WIRELESS > Access Points > Radios > 802.11a/n/ac or MONITOR > Summary and click 802.11 a/n/ac radios to navigate to the 802.11 a/n/ac Radios page.
This page displays an overview of your 802.11a/n/ac Cisco Radio network. The status of each 802.11a/n/ac Cisco Radio configured on this Cisco WLC and its profile is detailed here.
Beginning in controller Release 7.5 and later, 802.11ac APs are supported in the controller. 802.11ac, a 5 GHz-only technology, is a faster and a more scalable version of 802.11n. The 802.11n inherits the properties of the 802.11n radio.
- To configure the identified Cisco Radio, click the blue arrow adjacent the desired radio and choose Configure (Configuring 802.11a/n APs).
- To view details about the identified Cisco Radio, click the blue arrow adjacent the desired radio and choose Details (802.11a/n/ac AP Interfaces Details).
Click Change Filter to display the Search APs dialog box (see the following figure) to create or change filter parameters. Click Clear Filter to remove the filter and display the entire access point list.
You can create a filter to display the list of access points by MAC addresses or AP names.
The current filter parameters are displayed in the Current Filter field.
- MAC Address — MAC address text box where you enter a MAC address.
- AP Name — AP Name text box where you enter an access point name.
- CleanAir Oper Status—Operational status of the CleanAir capable access point.
Note When you enable filtering by the MAC address, the other filters are disabled automatically. However, you can use a combination of the AP name and CleanAir operational status to filter access points.
Click Find to commit your changes. Only the access points that match your search criteria appear on the 802.11a/n/ac Radios page, and the Current Filter parameter at the top of the page specifies the filter used to generate the list (for example, MAC address:00:1e:f7:75:0a:a0 or AP Name:pmsk-ap).
Note If you want to remove the filter and display the entire access point list, click Clear Filter.
This table lists the 802.11 a/n/ac radio parameters.
Configuring 802.11a/n APs
Choose WIRELESS > Access Points > Radios > 802.11a/n/ac, click the blue arrow adjacent the desired access point and choose Configure to navigate to the Configure page. For details on configuring an 802.11ac radio on access points, see Configuring 802.11ac Radio in Access Points.
This page enables you to configure parameters specifically for this Cisco Radio including the antenna type, RF channel, and Tx power level assignments. The performance profile for this Cisco Radio is also accessed through this page.
General
This table describes the general 802.11a/n/ac parameters.
Link Parameters
These parameters are displayed for the 802.11a/n/ac radios on the Mesh access points.
This table describes the link parameters.
|
|
---|---|
11n Parameters
This table describes the 802.11n parameters.
Clean Air
This table describes the CleanAir configuration parameters.
Antenna Parameters
This table describes the antenna parameters.
|
|
---|---|
Specific antennae for the access point that you can enable or disable: By default, all are selected. For example, to enable transmissions from antenna ports A and B and receptions from antenna port C, you should select the following check boxes: Tx: A and B and Rx: C. Valid combinations are A, A+B, A+B+C, or A+B+C+D. When you select a dual-mode antenna, you can apply only a single spatial 802.11n stream rate. The range is from MCS 0 to 7. When you select two dual-mode antennae, you can apply only two spatial 802.11n stream rates: The range is from MCS 0 to 15. You must enable two antennae for dual-band access points such as Cisco Aironet 1600 Series Access Point and Cisco Aironet 3600 Series Access Point. |
|
If you have a high-gain antenna, enter a value that is twice the actual dBi value (see the Cisco Aironet Antenna Reference Guide for antenna dBi values). Otherwise, enter 0. For example, if your antenna has a 4.4 dBi gain, multiply the 4.4 dBi by 2 and round down to enter only the whole number (8). The controller reduces the actual equivalent isotropic radiated power (EIRP) to make sure that the antenna does not violate your country's regulations. Note This option is available only if the antenna type is set to external. |
Sniffer Channel Assignment
Note This area is displayed if you set the AP Mode on the General Tab to Sniffer.
This table describes the sniffer channel assignment parameters.
RF Channel Assignment
Note This area is displayed if you set the AP Mode on the General Tab to Sniffer.
This table describes the RF channel assignment parameters.
|
|
---|---|
Channel Width1 |
Set the RF channel Assignment Method to Custom, and select one of the following channel widths:
Note To select the channel width as 80-MHz, 802.11ac support must be enabled in WIRELESS > 802.11a/n/ac > High Throughput (802.11n/ac). |
Assignment method that you can choose:
Note The assignment method should be left at the global setting to enable the Cisco WLC to dynamically change the channel number based Radio Resource Management (RRM) directives. For the Cisco 3600 Access Points with the 802.11ac module, channel and transmit power assignments are not supported in the custom mode. The 802.11ac radio inherits the channel and power assignments applied to the 802.11n radio. When the assignment mode is custom, you can configure only the channel width settings on the 802.11ac radio. |
1.Statically configuring an access point’s radio for the 20-MHz, 40-MHz, or 80-MHz mode overrides the globally configured DCA channel width setting on the 802.11a/n/ac Dynamic Channel Assignment page. If you ever change the static RF channel assignment method back to Global on the access point radio, the global DCA configuration overrides the channel width configuration that the access point was previously using. |
Tx Power Level Assignment
This table describes the Tx power level assignment parameters.
Configuring Tx Power Levels
The Current Tx Power Level setting controls the maximum conducted transmit power. The maximum available transmit power varies according to the configured channel, individual country regulation, and access point capability. See the product guide or data sheet at http://www.cisco.com for each specific model in order to determine the access point capability.
The Current Tx Power Level setting of 1 represents the maximum conducted power setting for the access point. Each subsequent power level (for example, 2, 3, 4, and so on) represents approximately a 50 percent (or 3 dBm) reduction in the transmit power from the previous power level.
Note The actual power reduction may vary slightly for different models of access points.
Based on the configured antenna gain, the configured channel, and the configured power level, the actual transmit power at the access point can be reduced so that the specific country regulations are not exceeded.
Note Whether you choose the Global or Custom assignment method, the actual conducted transmit power at the access point is verified so that country specific regulations are not exceeded.
Performance Profile
See the Performance Profile of 802.11a/n/ac Access Points topic.
Tracking Optimization
Note If your access point is configured to operate in Monitor mode, you can enable tracking optimization on up to four channels within the 2.4 GHz band (802.11b/g radio) of an access point to enable you to focus channel scans only on those channels on which tags are usually programmed to operate (such as channels 1, 6 and 11).
This table describes the tracking optimization parameters.
|
|
---|---|
Channels on which you want to monitor tags. Note To eliminate a channel from monitoring tag, choose None from the channel drop-down list. |
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
Configuring 802.11ac Radio in Access Points
Beginning in Cisco WLC Release 7.5 and later, 802.11ac APs are supported by the Cisco WLC. 802.11ac, a 5 GHz-only technology, is a faster and a more scalable version of 802.11n.
Choose WIRELESS > Access Points > Radios > 802.11a/n/ac, click the blue arrow adjacent the desired 802.11ac slave radio on slot 2, and then click Configure to configure the 802.11ac slave radio.
802.11ac radio on slot 2 is a slave radio and you can configure only a few parameters specifically for this Cisco Radio. As 802.11ac is a slave radio, it inherits many properties from the main radio 802.11a/n on slot 1. The only parameters that you can configure for this radio are as follows:
- Admin Status—Interface status of the radio that can be enabled or disabled. The default is enabled. If you disable 802.11n, the 802.11ac radio is also disabled.
- Channel Width—You can choose the RF channel width as 20 MHz, 40 MHz, or 80 MHz. If you choose the channel width as 80 MHz, you must enable 802.11ac mode in the High Throughput page. To enable 802.11ac mode, choose WIRELESS > 802.11a/n/ac > High Throughput (802.11n/ac), and select the 11ac Mode check box.
The 11ac Supported field is a nonconfigurable parameter that appears for the 802.11ac slave radio on slot 2 and indicates that the radio is 802.11ac capable.
For the Cisco 3600 Access Points with the 802.11ac module, channel and transmit power assignments are not supported in the custom mode. The 802.11ac radio inherits the channel and power assignments applied to the 802.11n radio. When the assignment mode is custom, you can configure only the channel width settings on the 802.11ac radio.
Performance Profile of 802.11a/n/ac Access Points
Choose WIRELESS > Access Points > Radios > 802.11a/n/ac or 802.11b/g/n, click the blue drop-down arrow for an AP name, choose Configure, and then click Performance Profile to navigate to the Performance Profile page.
This page shows the details of the performance profile of the selected Cisco Radio.
This table describes the 802.11 parameters.
|
|
---|---|
Access point identification number that is automatically assigned by the Cisco WLC. |
|
|
Globally controlled parameters that you can enable or disable. You cannot change the following parameters if the Profile Parameters Globally Controlled check box is selected. |
Foreign 802.11a/n or 802.11b/g/n interference threshold between 0 and 100 percent. You can globally set this setting on the 802.11a/n/ac RF Grouping and 802.11b/g/n RF Grouping pages. |
|
Client threshold between 1 and 75 clients. You can globally set this setting on the 802.11a/n/ac RF Grouping and 802.11b/g/n RF Grouping pages. |
|
Noise threshold between –127 and 0 dBm. You can globally set this setting on the 802.11a/n/ac RF Grouping and 802.11b/g/n RF Grouping pages. |
|
802.11a/n or 802.11b/g/n coverage threshold between 3 and 50 dBm. You can globally set this setting on the 802.11a/n/ac RF Grouping and 802.11b/g/n RF Grouping pages. |
|
802.11a/n or 802.11b/g/n RF utilization threshold between 0 and 100 percent. You can globally set this setting on the 802.11a/n/ac RF Grouping and 802.11b/g/n RF Grouping pages. |
|
Coverage exception level between 0 and 100 percent. You can globally set this setting on the 802.11a/n/ac RF Grouping and 802.11b/g/n RF Grouping pages. |
|
802.11a/n or 802.11b/g/n throughput threshold between 1 Kbps and 1000 Kbps. You can globally set this setting on the 802.11a/n/ac RF Grouping and 802.11b/g/n RF Grouping pages. |
|
Client minimum exception level. You can globally set this setting on the 802.11a/n/ac RF Grouping and 802.11b/g/n RF Grouping pages. |
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11a/n/ac AP Interfaces Details
Choose WIRELESS > Access Points > Radios > 802.11a/n/ac, click the blue arrow adjacent the desired access point and choose Detail to navigate to the Details page.
This page primarily lists the read-only attributes of the selected Cisco Radio.
AP Details
Note The Monitor Mode parameter is not displayed for ODM access points.
This table describes the AP details.
Station Configuration Parameters
The following parameters are not displayed for Cisco OEAP 600 Series access points:
This table describes the station configuration parameters.
Operation Rate Set
This table describes the operation rate parameters.
MAC Operation Parameters
This table describes the MAC operation parameters.
Tx Power
The following parameters are not displayed for Cisco OEAP 600 Series access points:
This table describes the Tx power parameters.
Physical Channel Parameters
The following parameters are not displayed for the ODM access point:
This table describes the physical channel parameters.
|
|
---|---|
Energy Detect and Threshold that is used to detect a busy medium (frequency). CCA reports a busy medium upon detecting the RSSI above this threshold. |
RF Recommendation Parameters
This table describes the RF recommendation parameters.
802.11b/g/n Radios
Choose WIRELESS > Access Points > Radios > 802.11b/g/n or MONITOR > Summary and click Detail in the 802.11b/g/n Radios row under the Access Point Summary section to navigate to the 802.11b/g/n Radios page.
This page displays an overview of your 802.11b/802.11g Cisco Radio network. The status of each 802.11b/g Cisco Radio configured on this Cisco WLC and its profile is detailed in the following table.
- To configure the identified Cisco Radio, click the blue arrow adjacent the desired radio and choose Configure (Configuring 802.11b/g/n Radios).
- To view details about the identified Cisco Radio, click the blue arrow adjacent the desired radio and choose Details (802.11b/g/n AP Interfaces Details).
Click Change Filter to display the Search APs dialog box (see the following figure) and create or change filter parameters. Click Clear Filter to remove the filter and display the entire access point list.
You can create a filter to display the list of access points by MAC addresses or AP names. The current filter parameters are displayed in the Current Filter field.
- MAC Address—MAC address text box.
- AP Name—Access point name text box.
- CleanAir Oper Status—Operational status of the CleanAir capable access point.
Note When you enable filtering by the MAC address, the other filters are disabled. However, you can use a combination of the AP Name and CleanAir Oper Status to filter access points.
Click Find to commit your changes. Only the access points that match your search criteria appear on the 802.11b/g/n Radios page, and the Current Filter parameter at the top of the page specifies the filter used to generate the list (for example, MAC address:00:1e:f7:75:0a:a0 or AP Name:pmsk-ap).
Note If you want to remove the filter and display the entire access point list, click Clear Filter.
802.11b/g/n Radio Summary
This table describes the 802.11 b/g/n radio summary parameters.
Configuring 802.11b/g/n Radios
Choose WIRELESS > Access Points > Radios > 802.11b/g/n, and then click the blue arrow adjacent the desired access point and choose Configure to navigate to the Configure page.
This page enables you to configure parameters specifically for this Cisco Radio including antenna type, RF channel, and Tx power level assignments. The performance profile for this Cisco Radio is also accessed through this page.
General
This table describes the 802.11b/g/n parameters.
|
|
---|---|
11n Parameters
This table describes the 802.11n parameters.
|
|
---|---|
Clean Air
Note Only Cisco CleanAir-enabled access point radios can be configured for Cisco CleanAir.
This table describes the CleanAir parameters.
|
|
---|---|
Administration status of the spectrum sensor for the access point that you can enable or disable. Set this field to Enable or Disable from the drop-down list. |
Antenna Parameters
This table describes the antenna parameters.
Sniffer Channel Assignment
Note This area is displayed if you set the AP Mode on the General Tab to Sniffer.
This table describes the sniffer channel assignment parameters.
RF Channel Assignment
This table describes the RF channel assignment parameters.
Tx Power Level Assignment
This table describes the Tx power level parameters.
Configuring Tx Power Levels
The Current Tx Power Level setting controls the maximum conducted transmit power. The maximum available transmit power varies according to the configured channel, individual country regulation, and access point capability. See the product guide or data sheet at http://www.cisco.com for each specific model in order to determine the access point capability.
The Current Tx Power Level setting of 1 represents the maximum conducted power setting for the access point. Each subsequent power level (for example, 2, 3, 4, and so on) represents approximately a 50-percent (or 3 dBm) reduction in the transmit power from the previous power level.
Note The actual power reduction may vary slightly for different models of access points.
Based on the configured antenna gain, the configured channel, and the configured power level, the actual transmit power at the access point can be reduced so that the specific country regulations are not exceeded.
Note Whether you choose the Global or Custom assignment method, the actual conducted transmit power at the access point is verified so that country specific regulations are not exceeded.
See the Performance Profile of 802.11a/n/ac Access Points page.
Note If your access point is configured to operate in Monitor mode, you can enable tracking optimization on up to four channels within the 2.4 GHz band (802.11b/g radio) of an access point to enable you to focus channel scans only on those channels on which tags are usually programmed to operate (such as channels 1, 6 and 11).
This table describes the tracking optimization parameters.
|
|
---|---|
Channels on which you want to monitor tags. Note To eliminate a channel from monitoring tags, choose None from the channel drop-down list. |
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11b/g/n AP Interfaces Details
Choose WIRELESS > Access Points > Radios > 802.11b/g/n and then click Detail to navigate to the Details page.
This page lists primarily read-only attributes of the selected Cisco Radio.
AP Details
This table describes the AP details.
Station Configuration Parameters
This table describes the station configuration parameters.
Operation Rate Set
This table describes the operation rate set parameters.
|
|
|
---|---|---|
The data rates set are negotiated between the client and the controller. If the data rate is set to Mandatory, the client must support it in order to use the network.
If a data rate is set as Supported by the controller, any associated client that also supports that same rate may communicate with the Cisco Aironet 1000 Series IEEE 802.11a/b/g lightweight access point using that rate. It is not required that a client be able to use all the rates marked Supported in order to associate. Each data rate can also be set to Disabled to match Client settings.
MAC Operation Parameters
This table describes the MAC operation parameters.
This table describes the Tx power parameters.
|
|
---|---|
Eight or fewer power levels, depending on operator preference. |
|
Operating transmit power level from the transmit power table. |
Physical Channel Parameters
This table describes the physical channel parameters.
|
|
---|---|
Energy Detect and Threshold that is used to detect a busy medium (frequency). CCA reports a busy medium upon detecting the RSSI above this threshold. |
RF Recommendation Parameters
This table describes the RF recommendation parameters.
Enhanced Local Mode (ELM) Parameters
This table describes the ELM parameters.
CleanAir Parameters
The CleanAir operational status is displayed by the Operational Status parameter.
Persistent Devices
Note Only Cisco CleanAir-enabled access point radios can be configured for Cisco CleanAir.
This table describes the persistent device parameters.
|
|
---|---|
Received Strength Signal Indicator of the persistent device. |
|
Dual-Band Radios
Choose WIRELESS > Access Points > Radios > Dual-Band Radios or MONITOR > Summary and click Detail in the Dual-Band Radios row under the Access Point Summary section to navigate to this page.
This page displays an overview of your 802.11a/b/g Cisco Radio network. The status of each 802.11a/b/g Cisco Radio configured on this Cisco WLC and its profile is detailed in the following table.
- To configure the identified Cisco Radio, click the blue arrow adjacent the desired access point and choose Configure (Configuring Dual-Band Radios).
- To view details about the identified Cisco Radio, click the blue arrow adjacent the desired access point and choose Details (Dual-Band Radios Details).
Click Change Filter to display the Search APs dialog box (see the following figure) and create or change filter parameters. Click Clear Filter to remove the filter and display the entire access point list.
You can create a filter to display the list of access points by MAC addresses or AP names. The current filter parameters are displayed in the Current Filter field.
- MAC Address—MAC address text box.
- AP Name—Access point name text box.
- CleanAir Oper Status—Operational status of the CleanAir capable access point.
Note When you enable filtering by the MAC address, the other filters are disabled. However, you can use a combination of the AP Name and CleanAir Oper Status to filter access points.
Click Find to commit your changes. Only the access points that match your search criteria appear on the Dual-Band Radios page, and the Current Filter parameter at the top of the page specifies the filter used to generate the list (for example, MAC address:00:1e:f7:75:0a:a0 or AP Name:pmsk-ap).
Note If you want to remove the filter and display the entire access point list, click Clear Filter.
Dual-Band Radios Summary
This table describes the dual-band radios parameters.
Configuring Dual-Band Radios
Choose WIRELESS > Access Points > Radios > Dual-Band Radios, and click the blue arrow adjacent the desired access point and choose Configure to navigate to the Configure page.
This page enables you to configure parameters specifically for this Cisco Radio including antenna type, RF channel, and Tx power level assignments. The performance profile for this Cisco Radio is also accessed through this page.
General
This table describes the dual-band radios general parameters.
|
|
---|---|
11n and 11ac Parameters
This table describes the 802.11n and 802.11ac parameters.
|
|
---|---|
Clean Air
Note Only Cisco CleanAir-enabled access point radios can be configured for Cisco CleanAir.
This table describes the CleanAir parameters.
|
|
---|---|
CleanAir Administration status of the spectrum sensor for the access point that you can enable or disable. You can set this field to the following options: |
Dual-Band Radios Details
Choose WIRELESS > Access Points > Radios > Dual-Band Radios and then click Detail to navigate to the Dual-Band Radios page.
This page lists primarily read-only attributes of the selected Cisco Radio.
AP Details
This table describes the AP parameters.
CleanAir Parameters
The CleanAir operational status is displayed by the Operational Status parameter.
Global Configuration
Choose WIRELESS > Access Points > Global Configuration to navigate to the Global Configuration page. This page enables you to configure the following parameters:
General
LED State—Check box and drop-down list to enable or disable the LED state of the access points. When you have many APs deployed and want to locate a specific AP, you can disable the LED state of all APs and then enable the LED state of the AP you are looking for. Thus, the AP that has its LED state enabled is easily identifiable.
Cisco Discovery Protocol
The Cisco Discovery Protocol (CDP) is used between the network devices to discover properties of the other end of an interface and the device. When CDP is enabled on an interface, the device sends its properties and interface information to the device at the other end of the interface. The controller has an option to enable or disable CDP on all or a specific access point. This configuration is applied to the global CDP state on the access point.
Note CDP over radio interface is applicable only for mesh APs.
This table describes the CDP parameters.
Login Credentials
Cisco IOS access points are shipped from the factory with “Cisco” as the default enable password. This password allows users to log in to the unprivileged mode and execute show and debug commands, which poses a security threat. The default enable password must be changed to prevent unauthorized access and to enable users to execute configuration commands from the access point’s console port.
Note You must keep careful track of the credentials used by the access points. Otherwise, you might not be able to log in to an access point’s console port. If you need to return the access points to the default Cisco/Cisco username and password, you must clear the controller’s configuration and the access point’s configuration to return them to the default settings. To clear the controller’s configuration, choose Commands > Reset to Factory Default > Reset on the controller GUI, or enter the clear config command on the controller CLI. To clear the access point’s configuration, enter the clear ap config command Cisco_AP on the controller CLI. After the access point rejoins a controller, it adopts the default Cisco/Cisco username and password.
You can set a global username, password, and enable password that all access points inherit as they join the controller including access points that are currently joined to the controller and any that join in the future. You can override the global credentials and assign a unique username, password, and enable password for a specific access point. The following are requirements enforced on the password:
- The password should contain characters from at least three of the following classes: lowercase letters, uppercase letters, digits, and special characters.
- No character in the password can be repeated more than three times consecutively.
- The password should not contain the management username or the reverse of the username.
- The password should not contain words like Cisco, oscic, admin, nimda or any variant obtained by changing the capitalization of letters by substituting 1, |, or ! or substituting 0 for o, or substituting $ for s.
This table describes the login credentials parameters.
Note You can override the global credentials for a specific access point and assign a unique username, password, and enable password to this access point by selecting the Over-ride Global credentials check box on the Credentials tab on the All APs Details page.
802.1X Supplicant Credentials
You can configure 8021.1X authentication between lightweight access points and the switch. The access point acts as an 802.1X supplicant and is authenticated by the switch using EAP-FAST with anonymous PAC provisioning.
You can set global authentication settings that all access points inherit as they join the controller, which includes all access points that are currently joined to the controller and any that join in the future. If desired, you can override the global authentication settings and assign unique authentication settings for a specific access point.
This table describes the 802.1X supplicant credentials parameters.
Note You can override the global authentication settings for a specific access point and assign a unique username and password to this access point by selecting the Over-ride Global credentials check box on the Credentials tab on the All APs Details page.
AP Failover Priority
You can configure high-priority access points so that the backup controller recognizes and accepts those access points first, even if it means disassociating a lower-ranked device as a means to provide an available port.
You can assign priorities to the access points on the High Availability tab on the All APs Details page. By default, all access points are set to priority level 1, which is the lowest priority level. Therefore, you need to assign a priority level only to those access points that warrant a higher priority.
AP Image Predownload
You can predownload images for all access points that are associated to your controller on the network.
This table describes the AP image predownload parameters.
High Availability
You can configure primary and secondary backup controllers for all access points (which are used if primary, secondary, or tertiary controllers are not responsive) in this order: primary, secondary, tertiary, primary backup, and secondary backup. In addition, you can configure various timers, including heartbeat timers and discovery request timers. To reduce the controller failure detection time, you can configure the fast heartbeat interval (between the controller and the access point) with a smaller timeout value. When the fast heartbeat timer expires (at every heartbeat interval), the access point determines if any data packets have been received from the controller within the last interval. If no packets have been received, the access point sends a fast echo request to the controller.
Note You can configure the fast heartbeat timer only for access points in local and FlexConnect modes.
- AP Heartbeat Timeout—AP Heartbeat timeout value that you can enter. The valid range is 10 to 30 for the Cisco 7500 Series Controller and 1 to 30 for other platforms.
- Local Mode AP Fast Heartbeat Timer State—Fast heartbeat timer that you can enable or disable for access points in local mode. The default is disable.
- Local Mode AP Fast Heartbeat Timeout—If you enabled Local Mode AP Fast Heartbeat Timer, enter the timeout interval for this parameter. Specifying a small heartbeat interval reduces the amount of time it takes to detect a controller failure. The range for the AP Fast Heartbeat Timeout value for Cisco Flex 7500 Controllers is 10–15 (inclusive) and is 1–10 (inclusive) for other controllers. The default value for the heartbeat timeout for Cisco Flex 7500 Controllers is 10. The default value for other controllers is 1 second.
- FlexConnect Mode AP Fast Heartbeat Timer State—Fast heartbeat timer for FlexConnect access points that you can enable or disable. The default is disable.
- FlexConnect Mode AP Fast Heartbeat Timeout—If you enabled the FlexConnect mode AP fast heartbeat timer, enter the interval (in seconds) for the fast heartbeat timer for FlexConnect access points. Specifying a small heartbeat interval reduces the amount of time it takes to detect a controller failure. The range for the FlexConnect Mode AP Fast Heartbeat Timeout value for Cisco Flex 7500 Controllers is 10–15 (inclusive) and is 1–10 for other controllers. The default value for the heartbeat timeout for Cisco Flex 7500 Controllers is 10. The default value for other controllers is 1 second.
- AP Primary Discovery Timeout—Timeout that you can set. Enter a number between 30 and 3600 seconds (inclusive) to configure the access point primary discovery request timer. The default value is 120 seconds.
- Back-up Primary Controller IP Address—IPv4/IPv6 address of the primary backup controller. From Release 8.0, controller supports IPv6.
Note The default for the IP address is 0.0.0.0, which disables the primary backup controller.
- Back-up Primary Controller Name—Name of the primary backup controller.
- Back-up Secondary Controller IP Address—IP4/IPv6 address of the secondary backup controller. From Release 8.0, controller supports IPv6.
Note The default value for the IP address is 0.0.0.0, which disables the secondary backup controller.
TCP MSS
If the client’s maximum segment size (MSS) in a Transmission Control Protocol (TCP) three-way handshake is greater than the maximum transmission unit can handle, the client might experience reduced throughput and the fragmentation of packets. To avoid this problem in controller software release 6.0 or later releases, you can specify the MSS for all access points that are joined to the controller or for a specific access point.
When you enable this feature, the access point selects the MSS for TCP packets to and from wireless clients in its data path. If the MSS of these packets is greater than the value that you configured or greater than the default value for the CAPWAP tunnel, the access point changes the MSS to the new configured value.
- Global TCP Adjust MSS—Enable the check box and set the MSS for all access points that are associated with the controller.
From Release 8.0, the controller supports IPv6. Use the following Global TCP Adjust MSS values for:
– IPv4—Specify a value between 536 and 1363.
– IPv6—Specify a value between 1220 and 1331.
Note Any TCP MSS value that is below 1220 and above 1331 will not be effective for CAPWAP v6 AP.
AP Retransmit Config Parameters
When a controller goes out of service, the access point associated with it falls back to the next available controller. Before associating itself to a new controller, the access point first tries to establish a connection with the existing controller that it is associated with. It does so by sending a request (known as a retransmission) at regular intervals to the controller and for a specified number of times (retry count). If the access point does not get an acknowledgement from the controller, it tries to associate itself to the next available controller.
Note Retransmission intervals and retry counts are not applicable for mesh access points.
You can configure the retransmission intervals and retry counts both at a global as well as a specific access point level. A global configuration applies these configuration parameters to all the access points. That is, the retransmission interval and the retry count would be uniform for all access points. Alternatively, when you configure the retransmission level and retry counts at a specific access point level, the values are applied to that particular access point. Access point specific configurations have higher precedence compared to Cisco WLC global configurations.
This table describes the AP retransmit config parameters.
OEAP Config Parameters
This table describes the Cisco 600 Series OfficeExtend Access Point (OEAP) config parameters.
Flexconnect Ethernet Fallback
This table describes the FlexConnect Ethernet Fallback parameter.
Global Telnet SSH
This table describes the Global Telnet SSH parameter.
Global IPv6 UDP Lite
This table describes the global IPv6 UDP Lite parameters used to enable or disable an IPv6 CAPWAP UDPLite for CAPWAP AP on the Cisco Wireless LAN Controller.
Packet RSSI Location Config Parameters
This table describes the global Packet RSSI Location Config Parameters.
Wireless > Advanced
Load Balancing
Choose Wireless > Advanced > Load Balancing to navigate to the Load Balancing page. This page enables you to configure load balancing on the wireless network.
Important Guidelines and Limitations
- Load balancing is configurable only on a per-WLAN basis.
- Load balancing is not supported on the Cisco OEAP 600 Series access point.
This table describes the load balancing parameters.
Band Select
Choose Wireless > Advanced > Band Select to navigate to the Band Select page. This page enables you to configure the band select parameters on the wireless network.
Note Band select is not supported on the Cisco OEAP 600 Series access point.
This table describes the band select parameters.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
Preferred Calls
You can configure a controller to support calls from clients that do not support TSPEC-based calls. This is known as voice prioritization. These calls are given priority over other clients that use the voice pool. Voice prioritization is available only for SIP-based calls, not for TSPEC-based calls. If the bandwidth is available, the controller takes the normal flow and allocates the bandwidth to those calls.
You can configure up to six preferred call numbers. When a call comes to one of the configured preferred numbers, the controller does not check on the maximum call limit. It invokes the CAC to allocate bandwidth for the preferred call. The bandwidth allocation is 85 percent of the entire bandwidth pool, not just from the maximum configured voice pool. The bandwidth allocation is the same even for roaming calls.
Prerequisites for Voice Prioritization
- WLAN QoS should be set to platinum.
- ACM should be enabled for the radio.
- WLAN should have SIP call snooping enabled.
Note The Cisco 5500 Series Controllers and all nonmesh access points do not support the voice prioritization.
Choose Wireless > Advanced> Preferred Calls to navigate to this page. This page enables you to configure voice prioritization parameters on the wireless network.
Click Add Number to add a preferred call number.
This table describes the preferred calls parameters.
|
|
---|---|
The configured Call Index and Call Numbers are displayed.
SIP Snooping
Choose WIRELESS > Advanced > SIP Snooping to navigate to the SIP Snooping page. This page enables you to configure call snooping ports on the controller. If you need only a single port for call snooping, configure the start and end port with the same number.
The port used by the CIUS tablet is 5060 and the port range used by Facetime is from 16384 to 16402.
This table describes the SIP snooping parameters.
|
|
---|---|
Starting port for call snooping. The range is from 0 to 65535. |
|
Ending port for call snooping. The range is from 0 to 65535. |
Rx SOP Threshold
Receiver Start of Packet Detection Threshold (Rx SOP) determines the Wi-Fi signal level in dBm at which an access point's radio demodulates and decodes a packet. As the Wi-Fi level increases, the radio sensitivity decreases and the receiver cell size becomes smaller. Reduction of the cell size affects the distribution of clients in the network. Rx SOP is used to address clients with weak RF links, sticky clients, and client load balancing across access points.
Choose WIRELESS > Advanced > Rx SOP Threshold to navigate to the Rx SOP Threshold page. This page enables you to configure the Rx SOP threshold values for each 802.11 band.
This table shows the Rx SOP threshold values for high, medium and low levels for each 802.11 band.
|
|
|
|
---|---|---|---|
Optimized Roaming
Optimized roaming resolves the problem of sticky clients that remain associated to access points that are far away and outbound clients that attempt to connect to a Wi-Fi network without having a stable connection.
This feature disassociates clients based on the RSSI of the client data packets and data rate. The client is disassociated if the RSSI alarm condition is met and the current data rate of the client is lower than the optimized roaming data rate threshold. Optimized roaming also prevents client association when the client's RSSI is low. This feature checks the RSSI of the incoming client against the RSSI threshold. You can also configure the client coverage reporting interval for a radio.
Choose WIRELESS > Advanced > Optimized Roaming to navigate to the Rx SOP Threshold page. This page enables you to enable optimized roaming on a radio and configure the parameters.
This table describes the optimized roaming parameters.
Network Profile
Choose WIRELESS > Advanced > Network Profile to navigate to the Network Profile page.
|
|
---|---|
Check box that you can select to enable configuration of Client Density and Traffic Type. |
|
Mesh
Choose WIRELESS > Mesh to navigate to the Mesh page.
This page enables you to configure the access point to establish a connection with the controller.
General
This table describes the general mesh parameters.
Ethernet Bridging
This table describes the Ethernet bridging parameters.
Security
This table describes the security parameters.
|
|
---|---|
EAP (Extensible Authentication Protocol) or PSK (Preshared Key); the default option is EAP. Note If you enable the External MAC Filter Authorization option, you need to choose the EAP option. Note If you do not enable the External MAC Filter Authorization option, local EAP or PSK authentication is performed within the controller. |
|
Authorization that you can enable or disable. The default is disable. Enable this option to allow an external RADIUS server to perform MAC filter authorization. This option protects your network against rogue mesh access points by preventing access points that are not defined on the external server from joining. When you enable this option and click Apply, the access points reboot and then rejoin the controller if defined in the MAC filter list. Access points that are not defined in the MAC list cannot join the controller. Note When this option is not enabled, by default, the controller authorizes and authenticates mesh access points using the MAC address filter. Before you employ external authentication within the mesh network, you must perform the following configuration:
– For remote authorization and authentication, EAP-FAST uses the manufacturer’s certificate (CERT) to authenticate the child mesh access point. Additionally, this manufacturer certificate-based identity serves as the username for the mesh access point in user validation. – For Cisco IOS-based mesh access points (1240, 1522, 1524), the platform name of the mesh access point is located in front of its Ethernet address within the certificate; therefore, the username for external RADIUS servers is platform_name_string–Ethernet_MAC_address such as c1240-001122334455. |
|
Force external authentication that you can enable or disable. The default is disable. Enable this option with EAP and External MAC Filter Authorization to allow external authorization and authentication of mesh access points using a RADIUS server. |
|
|
|
RADIUS server index. The Cisco WLC tries Index 1 first, then Index 2, and so on, in an ascending order. This value should be 1 if your network is using only one authentication server. Click the index number to display the Updating RADIUS Authentication Servers page. |
|
Communication port number for the interface protocols. The default is 1812. |
|
RADIUS authentication server that you can enable or disable. |
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
RF Profiles
Choose WIRELESS > RF Profiles to navigate to the RF Profiles page. This page enables you to create and configure RF profiles in the controller.
Out of Box AP Group
You can select the Enable Out Of Box check box to create an Out of Box AP group that consists of newly installed access points that belong to the default AP group. When you enable this feature:
- Newly installed access points that are part of the default AP group will be part of the Out-of-Box AP group and their radios will be switched off. This eliminates any RF instability caused by the new access points.
- All access points that do not have a group name become part of the Out of Box AP group.
- Special RF profiles are created per 802.11 band. These RF profiles have default-settings for all the existing RF parameters and additional new configurations.
When you disable this feature after you enable it, only subscription of new APs to the Out of Box AP group stops. All APs that are subscribed to the Out of Box AP Group remain in this AP group. The network administrators can move such APs to the default-group or a custom AP group upon network convergence.
Click New to create a new RF profile.
This table describes the RF profile parameters.
|
|
---|---|
|
|
Whether the RF profile will be applied to the 802.11a or 802.11b/g radios. Note According to the selection of the Radio Policy, the other parameters may differ. |
|
|
|
Data rate that is Mandatory indicates that the clients that do not support this specific rate will not be able to associate with the AP. Data rate that is Supported indicates that any associated client that also supports this rate can communicate with the AP using this rate. Data rate that is Disabled indicates that clients do not support this specific rate. |
|
Select the check boxes of the desired rates to specify the modulation and coding scheme (MCS) rates at which data can be transmitted between the access point and the client. These data rates, which are calculated for a 20-MHz channel width using a short guard interval, are available:
|
|
|
|
Maximum transmit power used by the RRM. The range is from –10 to 30 dBm. The default value is 30 dBm. |
|
Minimum transmit power used by the RRM. The range is from –10 to 30 dBm. The default value is –10 dBm. |
|
Transmit Power Control v1 threshold value. The range is from –80 to –50 dBm. The default value is –70 dBm. Power Threshold is the cutoff signal level used by the RRM when determining whether to reduce an access point’s power. |
|
Configures the Transmit Power Control v2 threshold value. The range is from –80 to –50 dBm. The default value is –67 dBm. |
|
|
|
Minimum receive signal strength indication (RSSI) value for data packets received by the access point. The value that you enter is used to identify coverage holes (or areas of poor coverage) within your network. The range is from –60 to –90 dBm. The default value is –80 dBm. If the access point receives a packet in the data queue with an RSSI value below the value that you enter, it indicates that a potential coverage hole has been detected. The access point takes data RSSI measurements every 5 seconds and reports them to the controller in 90-second intervals. |
|
Minimum receive signal strength indication (RSSI) value for voice packets received by the access point. The value that you enter is used to identify coverage holes within your network. The range is from –60 to –90 dBm. The default value is –75 dBm. If the access point receives a packet in the voice queue with an RSSI value below the value that you enter, it indicates that a potential coverage hole has been detected. The access point takes voice RSSI measurements every 5 seconds and reports them to the controller in 90-second intervals. |
|
Minimum number of clients on an access point with an RSSI value at or below the data or voice RSSI threshold to trigger a coverage hole exception. |
|
Percentage of clients on an access point that are experiencing a low signal level but cannot roam to another access point. If an access point has more number of such clients than the configured coverage level it triggers a coverage hole event. The range is from 0 to 100%, and the default value is 25%. The controller determines if the coverage hole can be corrected and, if appropriate, mitigates the coverage hole by increasing the transmit power level for that specific access point. |
|
|
|
Select the Avoid Foreign AP Interference check box to cause the Cisco WLC’s RRM algorithms to consider 802.11 traffic from foreign access points (those not included in your wireless network) when assigning channels to lightweight |
|
Select the required bandwidth for the AP based on the type of clients available in the RF environment. |
|
|
|
The DCA Channels text box shows the channels that are currently selected. To choose a channel, select its check box in the Select column. To exclude a channel, unselect its check box. |
|
100, 104, 108, 112, 116,132, 136, and 140—These extended UNII-2 channels in the 802.11a band do not appear in the channel list. If you have Cisco Aironet 1520 series mesh access points in the -E regulatory domain, you must include these channels in the DCA channel list before you start operation. If you are upgrading from a previous release, verify that these channels are included in the DCA channel list. To include these channels in the channel list, select the Extended UNII-2 Channels check box. |
|
|
|
Number of clients present in the RF profile for which the trap is configured. |
|
|
|
Maximum number of clients that can communicate with the AP in a high-density environment. The range is from 1 to 200. The default value is 200. |
|
Threshold value of the number of clients that associate with an access point, after which an SNMP trap is sent to the controller and Cisco Prime Infrastructure. The range is from 0 to 200. The default value is 50. Traps are disabled if the threshold value is configured as zero. Client trap threshold value should be less than then maximum clients configuration. |
|
Multicast data rate of a client with the AP. The following multicast data rates are supported by 802.11a and 802.11b/g: If you choose auto, the AP automatically adjusts the data rate with the client. |
|
Drop-down list from which you can choose the high, medium, or low Rx SOP threshold value for a band. For more details, see Rx SOP Threshold. |
|
|
|
The window size is part of the algorithm that determines whether an access point is too heavily loaded to accept more client associations: load-balancing window + client associations on AP with lightest load = load-balancing threshold The range is from 0to 20. The default value is 5. In the group of access points accessible to a client device, each access point has a different number of client associations. The access point with the lowest number of clients has the lightest load. The client window size plus the number of clients on the access point with the lightest load forms the threshold. Access points with more client associations than this threshold is considered busy, and clients can associate only to access points with client counts lower than the threshold. |
|
The denial count sets the maximum number of association denials during load balancing. Enter a value between 1 and 10. The default value is 3. |
|
Note Band Select configurations are available only for 802.11BG RF profiles. |
|
Probe cycle count for the RF profile. The cycle count sets the number of suppression cycles for a new client. The range is from 1 to 10. The default value is 2. |
|
Time threshold for a new scanning RF Profile band select cycle period. This setting determines the time threshold during which new probe requests from a client come in a new scanning cycle. The range is from 1 to 1000 milliseconds. The default value is 200. |
|
Expiration time for pruning previously known 802.11b/g clients. After this time elapses, clients become new and are subject to probe response suppression. The range is from 10 to 200 seconds. The default value is 20 seconds. |
|
Expiration time for pruning previously known dual-band clients. After this time elapses, clients become new and are subject to probe response suppression. The range is from 10 to 300. The default value is 60 seconds. |
|
Minimum RSSI for a client to respond to a probe. The range is from –90 to –20 dBm. The default value is –80 dBm. |
Note Changing the data rates and minimum client count requires explicit network dependencies. You must disable the 802.11a or 802.11b/g network before changing data rates and minimum client count in RF Profiles.
Click Apply to send the RF Profile configuration data to the Cisco WLC.
FlexConnect Groups
Choose WIRELESS > FlexConnect Groups to navigate to the FlexConnect Groups page. This page lists any FlexConnect groups that have already been created.
All the FlexConnect access points in a group share the same FlexConnect configuration information.
If you want to delete an existing group, click the blue arrow adjacent the group and choose Remove.
Cisco Centralized Key Management
FlexConnect groups are required for Cisco Centralized Key Management (CCKM) fast roaming to work with FlexConnect access points. CCKM fast roaming is achieved by caching a derivative of the master key from a full EAP authentication so that a simple and secure key exchange can take place when a wireless client roams to a different access point. This feature prevents the need to perform a full RADIUS EAP authentication as the client roams from one access point to another. The FlexConnect access points need to obtain the CCKM cache information for all the clients that might associate so they can process it quickly instead of sending it back to the controller.
Note CCKM fast roaming among FlexConnect and non-FlexConnect access points is not supported.
FlexConnect access points support 802.1X authentication. FlexConnect access points forward the client authentication request to a local (backup) RADIUS server when the access point is in standalone mode (for example, when the WAN link is down or when the access point loses connectivity to the controller).
To enable 802.1X authentication, configure backup RADIUS servers on the FlexConnect access points to authenticate the clients when the access point is in standalone mode.
In standalone mode, if the client is connected and the session timeout has expired, the client reauthenticates with the local backup RADIUS server.
Local authentication is useful when you cannot maintain the criteria that a remote office setup has a minimum bandwidth of 128 Kbps with a round trip latency of no greater than 100 ms and the maximum transmission unit (MTU) no smaller than 500 bytes. In local switching, the authentication capabilities are present in the access point itself. Local authentication reduces the latency requirements of the branch office.
Note Local authentication can only be enabled on the WLAN of a FlexConnect AP that is in local switching mode.
Local authentication is not supported in the following scenarios:
- Guest authentication cannot be done on a FlexConnect local authentication-enabled WLAN.
- RRM information is not available at the controller for the FlexConnect local authentication-enabled WLAN.
- Local RADIUS is not supported.
- Once the client has been authenticated, roaming is only supported after the controller and the other FlexConnect access points in the group are updated with the client information
Note Only the session timeout RADIUS attribute is supported in the standalone mode. All other attributes are not supported.
Note RADIUS accounting is not supported in standalone mode.
Click New to add a new FlexConnect group.
Creating FlexConnect Groups
Choose WIRELESS > FlexConnect Groups and then click New to navigate to the FlexConnect Groups > New page.
This page allows you to create an FlexConnect group.
The number of FlexConnect groups and access point support depends on the platform that you are using. You can configure the following:
- Up to 100 FlexConnect groups for a Cisco 5500 Series Wireless Controller.
- Up to 1000 FlexConnect groups for a Cisco Flex 7500 Series Wireless Controller. The Cisco Flex 7500 Series Wireless Controller can accommodate up to 50 access points per group.
- Up to 2000 FlexConnect groups for a Cisco Flex 8500 Series Wireless Controller. The Cisco Flex 8500 Series Wireless Controller can accommodate up to 100 access points per group.
- Up to 20 FlexConnect groups with up to 25 access points per group for the remaining platforms.
You can add up to 20 FlexConnect groups per controller. For the Cisco 5500 Series Wireless Controller, you can add up to 100 FlexConnect groups.
When the FlexConnect Groups > New page appears, enter the name of the new group in the Group Name text box. You can enter up to 32 alphanumeric characters.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
Editing FlexConnect Groups
Choose WIRELESS > FlexConnect Groups and then click a group name to navigate to the FlexConnect Groups > Edit page.
This page enables you to configure or change the various parameters grouped under different tabs for an existing FlexConnect group. The different tabs are as follows:
General Tab
This table describes the FlexConnect general parameters.
|
|
---|---|
Check box that you can select to enable local AP authentication for a FlexConnect group. The default value is unselected. The FlexConnect AP can be configured as a RADIUS server for LEAP, EAP-FAST, PEAP, or EAP-TLS client authentication. Note You can configure LEAP, EAP-FAST, PEAP, or EAP-TLS authentication only if AP local authentication is enabled. |
|
|
|
To add an access point to the group, click Add AP. The Add AP area appears. To choose an access point that is connected to this controller, select the Select APs from Current Controller check box and then choose the name of the desired access point from the AP Name drop-down list. Note If you choose an access point on this controller, the MAC address of the access point is automatically entered in the Ethernet MAC field to prevent any mismatches from occurring. To choose an access point that is connected to a different controller, leave the Select APs from Current Controller check box unselected and then enter its MAC address in the Ethernet MAC text box. Note If the FlexConnect access points within a group are connected to different controllers, all controllers must belong to the same mobility group. Click Add to add the access point to this FlexConnect group. The access point's MAC address and name appear at the bottom of the page. |
|
Drop-down list from which you can choose a primary or secondary RADIUS server. See the RADIUS Authentication Servers topic for more details. |
|
Communication port number for the interface protocols. The default port number is 1812. Note Do not assign the port number that is used by another application. Use the default port or any other port unused by any other application. |
Click Add to add the RADIUS server to the list of RADIUS servers.
Local Authentication Tab
This table describes the local authentication parameters.
Image Upgrade Tab
This table describes the image upgrade parameters.
ACL Mapping Tab
AAA VLAN-ACL Mapping Tab
This table describes the AAA VLAN-ACL mapping tab parameters.
|
|
---|---|
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
WLAN-ACL Mapping Tab
This table describes the WLAN-ACL mapping parameters.
|
|
---|---|
|
|
Drop-down list from which you select the WebAuth ACL for external web authentication. Click Add to add the WebAuth ACL mapping. For more information about creating FlexConnect ACLs, see the Adding Access Control Lists topic. Note You can configure up to 16 WebAuth ACLs for an access point. |
|
|
|
Drop-down list from which you can choose the Local Split ACL to locally switch traffic in centrally switched WLANs. Click Add to add the local split ACL mapping. Local-split configuration is applied specific to a WLAN. You can also apply this configuration from a FlexConnect group or from an AP. If the local-split configuration is applied at both the FlexConnect group level and AP level, then the configuration applied at the AP level has higher priority. In other words, the FlexConnect ACL specific to the AP has higher priority. |
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
Policies Tab
This table describes the policies parameters.
|
|
---|---|
Drop-down list from which you can select a device-based Policy AC. Click Add to add the Policy ACL. For more information about creating FlexConnect ACLs, see the Adding Access Control Lists topic. Note You can configure up to 16 Policy ACLs that are specific to the FlexConnect group. |
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
Central DHCP Tab
This table describes the central DHCP tab parameters.
|
|
---|---|
WLAN to VLAN Mapping Tab
Until controller Release 7.4, WLAN to VLAN mapping was done per AP. From controller Release 7.5, you can map WLAN to VLAN from the FlexConnect groups. WLAN to VLAN mapping is configured on all the APs in the FlexConnect group and does not override the WLAN to VLAN mapping done on the access points. The order of priority for WLAN to VLAN mappings is highest for AP groups > FlexConnect group > WLAN.
In Release 8.1 VLAN Support/Native VLAN on FlexConnect Group feature is available, which enables you to configure VLAN Support and Native VLAN ID on a FlexConnect Group.
This table describes the WLAN to VLAN mapping parameters.
WLAN AVC Mapping Tab
|
|
---|---|
FlexConnect Groups and OKC
FlexConnect Groups enable Optimistic Key Caching (OKC) to enable fast roaming of clients. OKC facilitates fast roaming by using PMK Caching in access points that are in the same FlexConnect group.
This feature prevents the need to perform a full authentication as the client roams from one access point to another. Whenever a client roams from one FlexConnect access point to another, the FlexConnect group access point calculates the PMKID using the cached PMK.
To see the PMK cache entries at the FlexConnect access point, use the show capwap reap pmk command. This feature is supported on Cisco FlexConnect access points.
Note The FlexConnect access point must be in connected mode when the PMK is derived during WPA2/802.1X authentication.
FlexConnect ACLs
With FlexConnect ACLs, you can control access at the FlexConnect AP for protection and integrity of locally switched data traffic from the AP. Using the controller, you can create FlexConnect ACLs and then configure the FlexConnect ACL with the WLAN using WLAN-ACL mapping. These are then pushed to the AP.
Choose WIRELESS > FlexConnect ACLs to navigate to the FlexConnect ACLs page.
This page enables you to list the ACLs configured for FlexConnect access points. To remove a FlexConnect ACL, click the blue arrow adjacent the access point and choose Remove.
Click New to open the Access Control Lists > New page.
Adding FlexConnect ACLs
Choose WIRELESS > FlexConnect ACLs and click New. This page enables you to create an ACL. Enter the FlexConnect ACL name in the Access Control List Name text box.
Click Apply to create a new FlexConnect ACL with the configured name.
Editing Access Control List
Choose WIRELESS > FlexConnect ACLs and click the ACL name of an existing ACL to open the Access Control List > Edit page.
This table describes the FlexConnect ACL parameters.
Adding FlexConnect ACL Rules
Choose SECURITY > Access Control List > FlexConnect ACLs to navigate to the FlexConnect Access Control Lists page. Click an ACL name of an existing ACL to open the Access Control List > Edit page and click Add New Rule button to create a new ACL Rule.
This table describes the FlexConnect New ACL parameters.
802.11a/n/ac Global Parameters
Choose WIRELESS > 802.11a/n/ac > Global Parameters to navigate to the 802.11a/n/ac Global Parameters page. This page enables you to change the global parameters of your 802.11a/n network.
This table describes the 802.11a/n global parameters.
|
|
---|---|
Note You must enable this option to enable the 802.11a/n network after configuring other 802.11a/n parameters. This option enables only the global Cisco WLAN Solution 802.11a/n network. To disable the 802.11a, 802.11b, 802.11g, and/or 802.11n networks for an individual WLAN, see the Editing WLANs page. |
|
Rate (in milliseconds) at which the SSID is broadcast by the access point. Valid values are from 100 to 600; the default is 100. |
|
Fragmentation threshold that you can set. Valid values are from 256 to 2346 bytes; the default is 2346. |
|
DTPC support. Enable this option to advertise the transmit power level of the radio in the beacons and the probe responses. |
|
Check box that you can enable to reject a client association request if the Received Signal Strength Indicator (RSSI) is lower than the configured RSSI threshold. |
|
RSSI Threshold that is used to reject the client association request. The range is from –60 to –90 dBm. The default value is –80 dBm. |
|
Data rates that are negotiated here are negotiated between the client and the Cisco WLC. If the data rate is set to Mandatory, the client must support it in order to use the network. If a data rate is set as Supported by the Cisco WLC, the client may negotiate for the respective rate. Each data rate can also be set to Disabled to match client settings. |
|
Mode that enables CAPWAP access points to issue broadcast Radio Measurement Request messages to Cisco Compatible Extensions (V2 and higher) clients. This Measurement Request message is repeated periodically for every SSID over each enabled radio interface based on the specified interval. The response from the client is used to improve accuracy in location measurement. Interval (seconds)—Interval of the broadcast Radio Measurement Request messages. |
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11a/n/ac RF Grouping
Choose WIRELESS > 802.11a/n/ac > RRM > RF Grouping to navigate to the RF Groupingpage.
This page enables you to edit the RF grouping characteristics.
This table describes the RF grouping algorithm parameters.
RF Group Members
This table describes the RF group parameters.
|
|
---|---|
IPv4/IPv6 address of the controller that belong to a RF group. Note IPv6 is supported only for leader type (static-leader) of RF grouping. |
You can add a controller as a static group member by specifying the controller name and the management IP address. Click Add to add the controller as an RF group member.
When adding RF group members, the leader can allow the number of group members based on the following criteria:
- Maximum number of APs supported: The maximum limit for the number of access points in an RF group is 1000 or twice the maximum number APs licensed on the controller.
- Twenty controllers: Only 20 controllers (including the leader) can be part of an RF group if the sum of the access points of all controllers combined is less than or equal to the upper access point limit.
Note If a controller cannot be added as a static RF group member, the reason is indicated in parentheses.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11a/n/ac Tx Power Control
Choose WIRELESS > 802.11a/n/ac > RRM > TPC to navigate to this page.
This page enables you to edit the transmit power control (TPC) parameters.
Tx Power-Level Assignment
The TPC algorithm balances RF power in many diverse RF environments. Automatic power control may not be able to resolve some scenarios in which an adequate RF design was not possible to implement due to architectural restrictions or site restrictions—for example, when all access points must be mounted in a central hallway, placing the access points close together, but requiring coverage out to the edge of the building.
In these scenarios, you can configure maximum and minimum transmit power limits to override TPC recommendations. The maximum and minimum TPC power settings apply only to access points that are attached to a controller from which they are configured. The default settings disable this feature, and you should use care when overriding TPC recommendations.
To set the Maximum Power Level Assignment and Minimum Power Level Assignment text boxes, enter the maximum and minimum transmit power used by RRM on the Tx Power Control page. The range for these parameters is –10 to 30 dBm. The minimum value cannot be greater than the maximum value; the maximum value cannot be less than the minimum value.
This table describes the Tx power level assignment parameters.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11a/n/ac Dynamic Channel Assignment
Choose WIRELESS > 802.11a/n/ac > RRM > DCA to navigate to the Dynamic Channel Assignment page.
This page enables you to specify the channels that the dynamic channel assignment (DCA) algorithm considers when selecting the channels to be used for RRM scanning.
This functionality is helpful when you know that the clients do not support certain channels because they are legacy devices or they have certain regulatory restrictions.
Information About the RRM Start-Up Mode
- For a single controller setup, RRM start-up mode will take effect after a controller reboot.
- For a multicontroller setup, RRM start-up mode will take effect after RF Group leader election.
- The RRM start-up mode runs for 100 minutes (10 iterations at a 10-minute interval).
- The duration of the start-up mode is independent of the DCA interval, sensitivity, and network size.
- DCA start-up mode consists of 10 DCA runs with high sensitivity (making channel changes easy and sensitive to the environment) to converge to a steady state channel plan.
- After the start-up mode is finished, DCA continues to run at the interval and sensitivity specified by the user.
Dynamic Channel Assignment Algorithm
This table describes the DCA algorithm parameters.
|
|
---|---|
– Interval—How often the DCA algorithm has been configured to run. Note If your controller supports only OfficeExtend access points, we recommend that you set the DCA interval to 6 hours for optimal performance. For deployments with a combination of OfficeExtend access points and local access points, the range of 10 minutes to 24 hours can be used. – Anchor Time—The time of day when the DCA algorithm has been configured to start. The range is from 0 to 23 (12:00 a.m. to 11:00 p.m.)
Note The controller does not evaluate and update the channel assignment immediately after you click Invoke Channel Update Once. It waits for the next interval to elapse. |
|
Radio Resource Management (RRM) Foreign 802.11 interference-monitoring parameter that you can enable Radio Resource Management to consider interference from foreign (non-Cisco access point outside the RF/mobility domain) access points when assigning channels to Cisco access points. You can disable this parameter to have Radio Resource Management ignore this interference. In certain circumstances with significant interference energy (dBm) and load (utilization) from Foreign APs, Radio Resource Management may adjust the channel assignment to avoid these channels (and sometimes adjacent channels) in access points close to the Foreign APs to increase capacity and reduce variability for the Cisco WLAN Solution. |
|
Radio Resource Management (RRM) bandwidth-sensing parameter that you can enable or disable to have controllers consider the traffic bandwidth used by each access point when the controller assigns channels to the access points. Disable this parameter to have Radio Resource Management ignore this value. The default is enabled. In certain circumstances and with denser deployments, there may not be enough channels to properly create perfect channel reuse. In these circumstances, Radio Resource Management can assign better reuse patterns to those access points that carry more traffic load. |
|
Radio Resource Management (RRM) noise-monitoring parameter that you can enable to have access points avoid the channels that have interference from nonaccess point sources, such as microwave ovens or Bluetooth devices. You can disable this parameter to have Radio Resource Management ignore this interference. The default is enabled. In circumstances with significant interference energy (dBm) from non-802.11 noise sources, Radio Resource Management may adjust the channel assignment to avoid these channels (and sometimes adjacent channels) in access points close to the noise sources to increase capacity and reduce variability. |
|
Persistent non-Wi-Fi interference devices that you can enable or disable. |
|
Name and IP address of the channel assignment leader. This is the MAC address of the group leader. |
|
Last time that the Radio Resource Management (RRM) evaluated the current channel assignment on a periodic basis. This parameter does not imply that channels have changed, only that the Radio Resource Management has made an evaluation of the current assignment. |
|
Configured DCA sensitivity setting. This setting determines how sensitive the DCA algorithm is to environmental changes, such as signal, load, noise, and interference, when determining whether to change channels. Note To see why the DCA algorithm changed channels, click Monitor and then View All under Most Recent Traps. The trap provides the MAC address of the radio that changed channels, the previous channel and the new channel, the reason why the change occurred, the energy before and after the change, the noise before and after the change, and the interference before and after the change. |
|
Channel Width2 |
Channel bandwidth supported for all the 802.11n/ac radios in the 5-GHz band: 20 MHz, 40 MHz, or 80 MHz. 40-MHz channelization allows radios to achieve higher instantaneous data rates (potentially 2.25 times higher than 20-MHz channels). Note If you choose 40 MHz, be sure to choose at least two adjacent channels from the DCA Channel List (for example, a primary channel of 36 and an extension channel of 40). If you choose only one channel, that channel is not used for 40-MHz channel width. Note You cannot pair the following channels together: 116 and 112, 140 and 136, and 165 and 161. 80 MHz channelization allows radios to achieve Very High Throughput (VHT). Adjacent 40-MHz subchannels are grouped into pairs to make 80-MHz channels.
|
Check for non-DFS channels that you can enable or disable. DCA configuration requires at least one non-DFS channel to the list. In the EU countries, outdoor deployments do not support non-DFS channels. Customers based in EU or regions with a similar regulation must enable this option. |
2.To override the globally configured DCA channel width setting, you can statically configure an access point’s radio for 20-MHz, 40-MHz, or 80-MHz mode on the Configuring 802.11a/n APs page. If you change the static RF channel assignment method to Global on the access point radio, the global DCA configuration overrides the channel width configuration that the access point was previously using. |
DCA Channel List
This table describes the DCA channel list parameters.
Event Driven RRM
This table describes the event driven RRM parameters.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11a/n/ac Coverage Hole Detection
Choose WIRELESS > 802.11a/n/ac > RRM > Coverage to navigate to the Coverage page.
This page enables you to configure coverage-hole detection or to specify the Received Signal Strength Indicator (RSSI) parameters.
Coverage Parameters
This table describes the RRM coverage parameters.
802.11a/n/ac RRM
Choose WIRELESS > 802.11a/n/ac > RRM > General to navigate to the General page.
This page enables you to specify general radio resource management (RRM) parameters.
Profile Thresholds For Traps
This table describes the profile threshold parameters.
Noise/Interference/Rogue Monitoring Channels
This table describes the Noise/Interference/Rogue monitoring channel parameters.
|
|
---|---|
Country Channels drop-down list. Choose one of the following:
|
Monitor Intervals
This table describes the monitor interval parameters.
Click Set to Factory Default to set all Auto RF 802.11a parameters to the factory defaults.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11a/n/ac Client Roaming
Choose WIRELESS > 802.11a/n/ac > Client Roaming to navigate to the Client Roaming page.
This page enables you to set seamless client roaming within subnets across access points and virtual LANs (VLANs) under Layer 2 security, and between subnets under Layer 3 security.
CCX-capable clients after association receive a list of neighboring APs, which is used by the clients for selecting the appropriate APs while roaming. This list improves the roaming time. The values for RSSI and Hysteresis are used for fine tuning the roaming behavior and neighbor list.
This table describes the 802.11a/n/ac client roaming parameters.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11a/n/ac Voice Parameters
Choose WIRELESS > 802.11a/n/ac > Media to navigate to the Media page and click on the Voice tab.
This page enables you to set the parameters to adjust the voice quality over the 802.11a/n/ac link.
- Disable all WMM-enabled WLANs before changing voice parameters. Enable the WMM-enabled WLANs again after you have applied the voice settings.
- SIP CAC should only be used for phones that support status code of 17 and do not support TSPEC-based admission control.
- SIP CAC will be supported only if SIP snooping is enabled.
This table describes the 802.11a/n/ac voice CAC parameters.
|
|
---|---|
Voice CAC that you can enable for this radio band. The default is disable. For more information, see the “Call Admission Control” topic. |
|
CAC method to use. Use Load Based to enable channel-based CAC and use Static to enable bandwidth-based CAC. The default is load-based CAC. For more information, see the “Load-Based CAC” topic. |
|
Percentage of the maximum bandwidth allocated to clients for voice applications on this radio band that you can set. Once the client reaches the value specified, the access point rejects new calls on this radio band. |
|
Percentage of maximum allocated bandwidth reserved for roaming voice clients. The controller reserves this much bandwidth from the maximum allocated bandwidth for roaming voice clients. |
|
Parameter that enables CCXv5 clients to indicate the urgency of a WMM traffic specifications (TSPEC) request (for example, an e911 call) to the WLAN. This setting is disabled by default. For more information, see the “Expedited Bandwidth Request” topic. |
|
SIP CAC support that you can enable. The default is disabled. |
|
Note SIP CAC should only be used for phones that do not support TSPEC-based admission control. |
|
Codec name that you want to use on this radio. The available options are G.711, G.729, and User Defined. |
|
Bandwidth in kilobits per second that you want to assign per SIP call on the network. This parameter can be configured only when the SIP Codec selected is User Defined. The default value is 64; valid values are from 8 to 64. Note The SIP Bandwidth (Kbps) text box is highlighted only when you select the SIP codec as user-defined. If you choose the SIP codec as G.711, the SIP Bandwidth (Kbps) text box is set to 64. If you choose the SIP codec as G.729, the SIP Bandwidth (Kbps) text box is set to 8. |
|
Sample interval in milliseconds that the codec must operate. Note If SIP CAC is supported and CAC method is static, the Maximum Possible Voice Calls and Maximum Possible Roaming Reserved Calls fields are displayed. |
|
Maximum possible voice calls that can be made. This option is displayed if the SIP CAC method is static. |
|
Maximum possible roaming reserved calls that can be made. This option is displayed if the SIP CAC method is static. |
|
|
|
Note SIPs are available only on the following controllers: Cisco 4400, Cisco 2504, 5500, 7500, 8500 Series Wireless Controllers and on 1240, 1130, and 11n access points.
This table describes the 802.11a/n/ac TSM parameters.
|
|
---|---|
For more information, see the “Traffic Stream Metrics” topic. |
Call Admission Control
Call admission control (CAC) enables an access point to maintain controlled quality of service (QoS) when the wireless LAN is experiencing congestion.
CAC enables the client to specify how much bandwidth or shared medium time would be required to accept a new call and in turn enables the access point to determine whether it is capable of accommodating this particular call. The access point rejects the call if necessary in order to maintain the maximum allowed number of calls with acceptable quality.
To use CAC with voice applications, follow these steps:
Step 1 Configure the WLAN for Platinum QoS.
Step 2 Enable the Wi-Fi Multimedia (WMM) protocol for the WLAN.
Note You must enable admission control (ACM) for CCXv4 clients that have WMM enabled. Otherwise, CAC does not operate properly.
Unscheduled automatic power save delivery (U-APSD) is enabled automatically when WMM is enabled. U-APSD is a QoS facility defined in IEEE 802.11e that extends the battery life of mobile clients. In addition to extending battery life, this feature reduces the latency of traffic flow delivered over the wireless media. Because U-APSD does not require the client to poll each individual packet buffered at the access point, it allows delivery of multiple downlink packets by sending a single uplink trigger packet.
Bandwidth-based, or static, CAC enables the client to specify how much bandwidth or shared medium time is required to accept a new call and in turn enables the access point to determine whether it is capable of accommodating this particular call. The access point rejects the call if necessary in order to maintain the maximum allowed number of calls with acceptable quality.
Note You must enable admission control (ACM) for CCXv4 clients that have WMM enabled. Otherwise, bandwidth-based CAC does not operate properly.
Load-based CAC incorporates a measurement scheme that takes into account the bandwidth consumed by all traffic types from itself, from co-channel access points, and by collocated channel interference. Load-based CAC also covers the additional bandwidth consumption results from PHY and channel impairment.
In load-based CAC, the access point periodically measures and updates the utilization of the RF channel, channel interference, and the additional calls that the access point can admit. The access point admits a new call only if the channel has enough unused bandwidth to support that call. Load-based CAC prevents oversubscription of the channel and maintains QoS under all conditions of WLAN loading and interference.
The expedited bandwidth request feature enables CCXv5 clients to indicate the urgency of a WMM traffic specification (TSPEC) request (for example, an e911 call) to the WLAN. When the controller receives this request, the controller attempts to facilitate the urgency of the call in any way possible without potentially altering the quality of other TSPEC calls that are in progress.
You can apply expedited bandwidth requests to both static and load-based CAC.
Expedited bandwidth requests are disabled by default. If you configured the WLAN in such a way that it does not support CCX V5 or if you disabled expedited bandwidth requests, the controller ignores all expedited requests and processes TSPEC requests as normal TSPEC requests.
The following table provides examples of TSPEC request handling for normal TSPEC requests and expedited bandwidth requests.
This table describes the expedited bandwidth request parameters.
|
|
|
|
Bandwidth Request |
---|---|---|---|---|
Between 75% and 90% (reserved bandwidth for voice calls exhausted) |
||||
Between 75% and 90% (reserved bandwidth for voice calls exhausted) |
||||
If the voice traffic load is light relative to the data traffic load, then it is admitted. Otherwise, rejected |
In a Voice-over-Wireless LAN (VoWLAN) deployment, four variables can affect audio quality: packet latency, packet jitter, packet loss, and roaming time. These variables are referred to as traffic stream metrics (TSM). An administrator can isolate poor voice quality issues by studying these variables.
You can configure TSM on each radio-band (for example, all 802.11a radios). The controller saves the configuration in flash memory so that it persists across reboots. After an access point receives the configuration from the controller, it enables TSM on the specified radio band.
Note Access points support TSM in both local and FlexConnect modes.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11a/n/ac Video Parameters
Choose WIRELESS > 802.11a/n/ac > Media to navigate to the Media page and click the Video tab.
This page enables you to set video quality parameters over the 802.11a link.
Note Disable all WMM-enabled WLANs before changing video parameters. Re-enable the WMM-enabled WLANs after you have applied the video settings.
This table describes the 802.11a/n/ac video parameters.
|
|
---|---|
Video CAC for this radio band that you can enable or disable. The default is unselected. |
|
CAC method to use. Use Load Based to enable channel-based CAC and use Static to enable bandwidth-based CAC. The default is load-based CAC. For more information, see the “Bandwidth-Based CAC” and “Load-Based CAC” topics. |
|
Percentage of the maximum bandwidth allocated to clients for video applications on this radio band. Once the client reaches the value specified, the access point rejects new requests on this radio band. The range is from 5 to 85%; however, the maximum RF bandwidth cannot exceed 85% for voice and video. The default value is 0%. |
|
Percentage of maximum allocated bandwidth reserved for roaming video clients. The controller reserves this much bandwidth from the maximum allocated bandwidth for roaming video clients. |
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11a/n/ac Media Parameters
Choose WIRELESS > 802.11a/n/ac > Media to navigate to the Media page and click the Media tab. This page enables you to set voice and video quality parameters over the 802.11a link.
This table describes the media stream multicast direct parameters.
802.11 EDCA Parameters
Choose WIRELESS > 802.11a/n/ac or 802.11b/g/n > EDCA Parameters to navigate to the EDCA Parameters page.
This page enables you to configure enhanced distributed channel access (EDCA) parameters. EDCA parameters are designed to provide preferential wireless channel access for voice, video, and other quality of service (QoS) traffic.
Note You must disable the radio network before configuring the EDCA parameters. To disable the radio network, go to the 802.11a/n/ac Global Parameters page, unselect the 802.11a Network Status check box, and click Apply.
After you configure the EDCA parameter, re-enable the radio network. To re-enable the radio network, go to the 802.11a/n/ac Global Parameters page, select the 802.11a Network Status check box, and click Apply.
This table describes the EDCA general parameters.
|
|
---|---|
Options from the EDCA Profile drop-down box that you can choose:
Note If you deploy video services, admission control (ACM) must be disabled from the 802.11a/n/ac Video Parameters page. |
|
MAC optimization for voice that you can choose. This feature enhances voice performance by controlling packet retransmits and aging out voice packets on lightweight access points, improving the number of voice calls serviced for each access point. |
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11h Global Parameters
Choose WIRELESS > 802.11a/n/ac > DFS (802.11h) to navigate to the 802.11h Global Parameters page. This page enables you to set 802.11h parameters.
When DFS is enabled, it detects the presence of other devices that use the same radio channel and switches the WLAN operation to another channel if necessary.
This table describes the 802.11h parameters.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11n/ac (5 GHz) Very High Throughput
Choose WIRELESS > 802.11a/n/ac > High Throughput (802.11n/ac) to navigate to the 802.11n/ac (5 GHz) Throughput page.
This page enables you to configure 802.11n and 802.11ac support on the network and to enable or disable support of the different modulation coding scheme (MCS) settings. The MCS settings determine the number of spatial streams, modulation, coding rate, and data rate values.
Disabling the 802.11n/ac mode is applicable only to access radios. Backhaul radios always have the 802.11n/ac mode enabled if they are 802.11n capable.
This table describes the 802.11a/n/ac parameters.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11a/n/ac CleanAir
To configure the Cisco CleanAir functionality on the 802.11a/n/ac network using the controller GUI, follow these steps:
Step 1 Choose Wireless > 802.11a/n/ac > CleanAir to navigate to the 802.11a/n/ac > CleanAir page.
Note Only Cisco CleanAir-enabled access point radios can be configured for Cisco CleanAir.
Step 2 Select the CleanAir check box to enable the CleanAir functionality on the 802.11a/n/ac network, or unselect the check box to prevent the controller from detecting spectrum interference. The default is disabled.
Step 3 Select the Report Interferers check box to enable the CleanAir system to report any detected sources of interference, or unselect it to prevent the controller from reporting interferers. The default is enabled.
Note Device Security alarms, Event Driven RRM, and Persistence Device Avoidance algorithm will not work if Report Interferers is disabled.
Step 4 Select the Persistent Device Propagation check box to enable propagation of information about persistent devices that can be detected by CleanAir. Persistent device propagation enables designating information about interference types and propagating this information to the neighboring access points associated with the same controller. Persistent interferers are present at the location and interfere with the WLAN operations even if they are not detectable at all times.
Step 5 Make sure that any sources of interference that need to be detected and reported by the CleanAir system appear in the Interferences to Detect multiple select text box and any that do not need to be detected appear in the Interferences to Ignore multiple select text box. Use the > and < buttons to move interference sources between these two boxes. By default, all interference sources are detected. The possible sources of interference include the following:
- Canopy—A canopy bridge device
- Continuous Transmitter—A continuous transmitter
- DECT-like Phone—A digital enhanced cordless communication (DECT)-compatible phone
- Jammer—A jamming device
- SuperAG—An 802.11 SuperAG device
- TDD Transmitter—A time division duplex (TDD) transmitter
- Video Camera—A video camera
- WiFi Invalid Channel—A device using nonstandard Wi-Fi channels
- WiFi Inverted Channel—A device using spectrally inverted Wi-Fi signals
- WiMAX Fixed—A WiMAX fixed device (802.11a/n/ac only)
- WiMAX Mobile—A WiMAX mobile device (802.11a/n/ac only)
Note Access points associated to the controller send interference reports only for the type of interferer devices that appear in the Interferences to Detect text box. This functionality enables you to filter out a source of interference that you do not want as well as any that may be flooding the network and causing performance problems for the controller or Cisco PI. Filtering allows the system to resume normal performance levels.
Step 6 Configure CleanAir alarms as follows:
- Select the Enable AQI (Air Quality Index) Trap check box to enable the triggering of air quality alarms, or unselected the check box to disable this feature. The default value is selected.
- If you selected the Enable AQI Trap check box, enter a value between 1 and 100 (inclusive) in the AQI Alarm Threshold text box to specify the threshold at which you want the air quality alarm to be triggered. When the air quality falls below the threshold level, the alarm is triggered. A value of 1 represents the worst air quality, and 100 represents the best. The default is 35.
- Enter the AQI Alarm Threshold (1 to 100) that you want to set. An alarm is generated when the air quality falls below the configured threshold value. The default is 35. The range is from 1 to 100.
- Select the Enable trap for Unclassified Interferences check box to enable the traps to be generated for unclassified interferences. Cisco CleanAir can detect and monitor unclassified interferences. Unclassified interferences are interferences that are detected but do not correspond to any of the known interference types.
- Enter the Threshold for Unclassified category trap (1 to 99). Enter a value between 1 and 99. The default is 20. This is the severity index threshold for an unclassified interference category.
- Select the Enable Interference For Security Alarm check box to trigger interferer alarms when the controller detects specified device types, or unselect the check box to it to disable this feature. The default value is selected.
- Make sure that any sources of interference that need to trigger interferer alarms appear in the Trap on These Types multiple select text box and any that do not need to trigger interferer alarms appear in the Do Not Trap on These Types text box. Use the > and < buttons to move interference sources between these two boxes. By default, all interference sources trigger interferer alarms.
For example, if you want the controller to send an alarm when it detects a jamming device, select the Enable Interference Type Trap check box and move the jamming device to the Trap on These Types multiple select box.
Step 7 The Event Driven RRM section displays the current status or the event-driven radio resource management configured on this radio:
- EDRRM—Displays the current status of the spectrum event-driven RRM.
- Sensitivity Threshold—Displays the threshold level at which the event-driven RRM is invoked.
Note If you want to change the current status of event-driven RRM or the sensitivity level, click Change Settings. The 802.11a (or 802.11b) > RRM > Dynamic Channel Assignment (DCA) page appears.
Step 8 Click Apply to commit your changes.
802.11b/g/n Global Parameters
Choose WIRELESS > 802.11b/g/n > Network to navigate to the 802.11b/g/n Global Parameters page.
This page enables you to edit the global parameters of your 802.11b/g/n network.
This table describes the 802.11 b/g/n global parameters.
|
|
---|---|
General Parameters |
|
802.11b/g/n network parameters that you can enable or disable. The default is enabled. |
|
802.11g network support. Only available if 802.11b/g network is enabled. The default is enabled. Note You must use these commands to enable the 802.11b/g networks after configuring other 802.11b/g parameters. This command only enables the global Cisco WLAN Solution 802.11b/g networks. To disable the 802.11a, 802.11b and/or 802.11g networks for an individual WLAN, see the Editing WLANs page. |
|
Rate at which the SSID is broadcast by the access point, from 100 to 600 milliseconds. The default is 100 milliseconds. |
|
Short preamble that you can enable or disable. This parameter must be disabled to optimize this Cisco WLC for some clients, including SpectraLink NetLink Telephones. The default is enabled. |
|
Fragmentation threshold (in bytes) that you can set in the range 256 to 2346 bytes. The default is 2346. |
|
DTPC support that you can enable or disable to advertise the transmit power level of the radio in the beacons and the probe responses. The default is unselected. |
|
Maximum clients allowed per radio. The range is from 1 to 200. |
|
Mode that enables CAPWAP access points to issue broadcast Radio Measurement Request messages to Cisco Compatible Extensions (V2 and higher) clients. This Measurement Request message is repeated periodically for every SSID over each enabled radio interface based on the specified interval. The response from the client is used to improve accuracy in location measurement.
|
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11b/g/n RF Grouping
Choose WIRELESS > 802.11b/g/n > RRM > RF Grouping to navigate to the 802.11b > RRM > RF Grouping page.
This page enables you to configure RF grouping characteristics.
This table describes the RF grouping algorithm parameters.
This table describes the RF group member parameters.
|
|
---|---|
IPv4/IPv6 address of the Cisco WLC that belong to a RF group. Note IPv6 is supported only for leader type (static-leader) of RF grouping. |
You can add a Cisco WLC as a static group member by specifying the Cisco WLC name and the management IP address. Click Add to add the Cisco WLC as an RF group member.
When adding RF group members, the leader can allow the number of group members based on the following criteria:
- Maximum number of APs supported: The maximum limit for the number of access points in an RF group is 1000 or twice the maximum number APs licensed on the Cisco WLC.
- Twenty Cisco WLCs: Only 20 Cisco WLCs (including the leader) can be part of an RF group if the sum of the access points of all Cisco WLCs combined is less than or equal to the upper access point limit.
Note If a Cisco WLC cannot be added as a static RF group member, the reason is indicated in parentheses.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11b Tx Power Control
Choose WIRELESS > 802.11b/g/n > RRM > TPC to navigate to the 802.11b > RRM > Tx Power Control page.
This page enables you to edit the transmit power control (TPC) parameters.
Tx Power Level Assignment
The TPC algorithm balances RF power in many diverse RF environments. Automatic power control may not be able to resolve some scenarios in which an adequate RF design was not possible to implement due to architectural restrictions or site restrictions—for example, when all access points must be mounted in a central hallway, placing the access points close together, but requiring coverage out to the edge of the building.
In these scenarios, you can configure maximum and minimum transmit power limits to override TPC recommendations. The maximum and minimum TPC power settings only apply to access points that are attached to a controller from which they are configured. The default settings disable this feature, and you should use care when overriding TPC recommendations.
To set the Maximum Power Level Assignment and Minimum Power Level Assignment text boxes, enter the maximum and minimum transmit power used by RRM on the Tx Power Control page. The range for these parameters is –10 to 30 dBm. The minimum value cannot be greater than the maximum value; the maximum value cannot be less than the minimum value.
This table describes the Tx power level assignment parameters.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11b Dynamic Channel Assignment
Choose WIRELESS > 802.11b/g/n > RRM > DCA to navigate to the 802.11b > RRM > Dynamic Channel Assignment page.
This page enables you to specify the channels that the Dynamic Channel Assignment (DCA) algorithm considers when selecting the channels to be used for RRM scanning.
This functionality is helpful when you know that the clients do not support certain channels because they are legacy devices or they have certain regulatory restrictions.
Dynamic Channel Assignment Algorithm
This table describes the DCA algorithm parameters.
DCA Channel List
This table describes the DCA channel list parameters.
|
|
|
---|---|---|
Event Driven RRM
This table describes the event driven RRM parameters.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11b Coverage Hole Detection
Choose WIRELESS > 802.11b/g/n > RRM > Coverage to navigate to the 802.11b > RRM > Coverage page.
This page enables you to configure coverage-hole detection or to specify the RSSI parameters.
This table describes the RRM coverage parameters.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11b RRM
Choose WIRELESS > 802.11b/g/n > RRM > General to navigate to the 802.11b > RRM > General page.
This page enables you to specify general radio resource management (RRM) parameters.
Note The radios for the Cisco OEAP 600 Series access points are controlled through the local GUI on the Cisco OEAP 600 Series access points and not through the controller. It is not possible to control the spectrum channel, power, or disable the radios through the controller because it does not have any effect on the Cisco OEAP 600 Series access points. Therefore, RRM is not supported on the Cisco OEAP 600 Series access points.
This table describes the profile threshold parameters.
Noise/Interference/Rogue Monitoring Channels
This table describes the Noise/Interference/Rogue monitoring channels parameters.
|
|
---|---|
Country Channels drop-down box that you can choose one of the following:
|
Monitor Intervals
This table describes the monitor interval parameters.
Click Set to Factory Default to set all Auto RF 802.11b/g parameters to the factory defaults.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11b/g Client Roaming
Choose WIRELESS > 802.11b/g > Client Roaming to navigate to the 802.11b > Client Roaming page. Seamless client roaming within subnets across access points and virtual LANs (VLANs) is supported under Layer 2 security, and between subnets under Layer 3 security.
CCX-capable clients after association receive a list of neighboring APs, which is used by the clients for selecting the appropriate APs while roaming. This improves the roaming time. The values for RSSI and Hysteresis are used for fine tuning the roaming behavior and Neighbor list.
This table describes the 802.11b/g client roaming parameters.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11b/g Voice Parameters
Choose WIRELESS > 802.11b/g > Media to navigate to the 802.11b (2.4 GHz) > Media pageand click on the Voice tab.
This page enables you to set the voice quality parameters over the 802.11 b/g link.
Note Disable all WMM-enabled WLANs prior to changing voice parameters. Reenable the WMM-enabled WLANs after you have applied the voice settings.
CAC Parameters
This table describes the 802.11b/g CAC parameters.
|
|
---|---|
Voice CAC for this radio band that you can enable or disable. The default value is disabled. For more information, see the “Call Admission Control” topic. |
|
Load-based CAC that you can enable or disable. Load-based AC is disabled by default. For more information, see the “Load-Based CAC” topic. |
|
Percentage of the maximum bandwidth allocated to clients for voice applications on this radio band. Once the client reaches the value specified, the access point rejects new calls on this radio band. |
|
Percentage of maximum allocated bandwidth reserved for roaming voice clients. The controller reserves this much bandwidth from the maximum allocated bandwidth for roaming voice clients. |
|
Enables CCXv5 clients to indicate the urgency of a WMM traffic specifications (TSPEC) request (for example, an e911 call) to the WLAN. This setting is enabled by default. For more information, see the “Expedited Bandwidth Request” topic. |
|
Codec name that you want to use on this radio. The available options are G.711, G.729, and User Defined. |
|
Bandwidth in kilobits per second you want to assign per SIP call on the network. This parameter can be configured only when the SIP Codec selected is User Defined. |
|
Sample interval in milliseconds that the codec must operate. |
Note SIPs are available only on the Cisco 4400 Series Controllers and the Cisco 5500 Series Controllers and on for the following access points: 1240, 1130, and 11n.
802.11 b/g TSM Parameters
This table describes the 802.11b/g TSM parameters.
|
|
---|---|
TSM collection that you can enable or disable. The default is unselected. For more information, see the “Traffic Stream Metrics (TSM)” topic. |
Call Admission Control
Call admission control (CAC) enables an access point to maintain controlled quality of service (QoS) when the wireless LAN is experiencing congestion.
CAC enables the client to specify how much bandwidth or shared medium time would be required to accept a new call and in turn enables the access point to determine whether it is capable of accommodating this particular call. The access point rejects the call if necessary in order to maintain the maximum allowed number of calls with acceptable quality.
To use CAC with voice applications, do the following:
Note You must enable admission control (ACM) for CCXv4 clients that have WMM enabled. Otherwise, CAC does not operate properly.
Unscheduled automatic power save delivery (U-APSD) is a QoS facility defined in IEEE 802.11e that extends the battery life of mobile clients. In addition to extending battery life, this feature reduces the latency of traffic flow delivered over the wireless media. Because U-APSD does not require the client to poll each individual packet buffered at the access point, it allows delivery of multiple downlink packets by sending a single uplink trigger packet. U-APSD is enabled automatically when WMM is enabled.
Load-Based CAC
Load-based CAC incorporates a measurement scheme that takes into account the bandwidth consumed by all traffic types from itself, from co-channel access points, and by co-located channel interference. Load-based CAC also covers the additional bandwidth consumption resulting from PHY and channel impairment.
In load-based CAC, the access point periodically measures and updates the utilization of the RF channel, channel interference, and the additional calls that the access point can admit. The access point admits a new call only if the channel has enough unused bandwidth to support that call. By doing so, load-based CAC prevents over-subscription of the channel and maintains QoS under all conditions of WLAN loading and interference.
Expedited Bandwidth Request
The expedited bandwidth request feature enables CCXv5 clients to indicate the urgency of a WMM traffic specifications (TSPEC) request (for example, an e911 call) to the WLAN. When the controller receives this request, the controller attempts to facilitate the urgency of the call in any way possible without potentially altering the quality of other TSPEC calls that are in progress.
You can apply expedited bandwidth requests to both static and load-based CAC.
Expedited bandwidth requests are enabled by default. If you configured the WLAN in such a way that it does not support CCX V5 or if you disabled expedited bandwidth requests, the controller ignores all expedited requests and processes TSPEC requests as normal TSPEC requests.
See the following table for examples of TSPEC request handling for normal TSPEC requests and expedited bandwidth requests.
This table describes the expedited bandwidth request parameters.
|
|
|
|
Bandwidth Request |
---|---|---|---|---|
Between 75% and 90% (reserved bandwidth for voice calls exhausted) |
||||
Between 75% and 85% (reserved bandwidth for voice calls exhausted) |
||||
Traffic Stream Metrics (TSM)
In a voice-over-wireless LAN (VoWLAN) deployment, four variables can affect audio quality: packet latency, packet jitter, packet loss, and roaming time. These variables are referred to as TSM. An administrator can isolate poor voice quality issues by studying these variables.
You can configure TSM on a per radio-band basis (for example, all 802.11a radios). The controller saves the configuration in flash memory so that it persists across reboots. After an access point receives the configuration from the controller, it enables TSM on the specified radio band.
Note Access points support TSM in both local and FlexConnect modes.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11b/g/n Video Parameters
Choose WIRELESS > 802.11b/g/n > Media to navigate to the 802.11b(2.4 GHz) > Media page and click on the Video tab.
This page enables you to set the parameters to adjust video quality over an 802.11b/g/n link.
Note Disable all WMM-enabled WLANs prior to changing video parameters. Reenable the WMM-enabled WLANs after you have applied the video settings.
This table describes the 802.11b/g video parameters.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11b/g Media Parameters
Choose WIRELESS > 802.11b/g/n > Media to navigate to the 802.11b(2.4 GHz) > Media page and click on the Media tab.
This page enables you to set the video quality parameters over an 802.11b/g/n link.
This table describes the 802.11 b/g/n general media parameters.
|
|
---|---|
Enables unicast video redirect. The default value is enabled. |
This table describes the multicast direct admission control parameters.
802.11b/g EDCA Parameters
Choose WIRELESS > 802.11b/g/n > EDCA Parameters to navigate to the EDCA Parameters page.
This page enables you to configure enhanced distributed channel access (EDCA) parameters. EDCA parameters are designed to provide preferential wireless channel access for voice, video, and other quality-of-service (QoS) traffic.
Note You must disable the radio network before configuring EDCA parameters. To disable the radio network, go to the 802.11b/g/n Global Parameters page, unselect the 802.11b/g Network Status check box, and click Apply.
After you configure the EDCA parameter, reenable the radio network. To reenable the radio network, go to the 802.11b/g/n Global Parameters page, check the 802.11b/g Network Status check box, and click Apply.
This table describes the EDCA general parameters.
|
|
---|---|
Choose one of the following options from the EDCA Profile drop-down list:
Note If you deploy video services, admission control (ACM) must be disabled from the 802.11b/g/n Video Parameters page. |
|
MAC optimization for voice that you can enable or disable. This feature enhances voice performance by controlling packet retransmits and appropriately aging out voice packets on lightweight access points, thereby improving the number of voice calls serviced per access point. |
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11n (2.4 GHz) High Throughput
Choose WIRELESS > 802.11b/g/n > High Throughput (802.11n) to navigate to the High Throughput page.
This page enables you to configure 802.11n support on the network and support of the different Modulation Coding Schemes (MCS) settings. The MCS index determines the number of spatial streams, the modulation, the coding rate, and data rate values.
This table describes the 802.11n (2.4 GHz) high throughput parameters.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
802.11b CleanAir
To configure Cisco CleanAir functionality on the 802.11b/g/n network using the controller GUI, follow these steps:
Step 1 Choose Wireless > 802.11b/g/n > CleanAir to navigate to the 802.11b/g/n CleanAir page.
Note Only Cisco CleanAir-enabled access point radios can be configured for Cisco CleanAir.
Step 2 Select the CleanAir check box to enable CleanAir functionality on the 802.11b/g/n network, or unselect it to prevent the controller from detecting spectrum interference. The default is enabled.
Step 3 Select the Report Interferers check box to enable the CleanAir system to report any detected sources of interference, or unselect it to prevent the controller from reporting interferers. The default is enabled.
Note Device Security alarms, Event Driven RRM, and Persistence Device Avoidance algorithm will not work if Report Interferers is disabled.
Step 4 Select the Persistent Device Propagation check box to enable propagation of information about persistent devices that can be detected by CleanAir. Persistent device propagation enables designating information about interference types and propagating this information to the neighboring access points associated with the same controller. Persistent interferers are present at the location and interfere with the WLAN operations even if they are not detectable at all times
Step 5 Make sure that any sources of interference that need to be detected and reported by the CleanAir system appear in the Interferences to Detect multiple select text box and any that do not need to be detected appear in the Interferences to Ignore multiple select text box. Use the > and < buttons to move interference sources between these two boxes. By default, all interference sources are detected. The possible sources of interference include the following:
- Canopy—A canopy bridge device
- Continuous Transmitter—A continuous transmitter
- DECT-like Phone—A digital enhanced cordless communication (DECT)-compatible phone
- Jammer—A jamming device
- SuperAG—An 802.11 SuperAG device
- TDD Transmitter—A time division duplex (TDD) transmitter
- Video Camera—A video camera
- WiFi Invalid Channel—A device using nonstandard Wi-Fi channels
- WiFi Inverted Channel—A device using spectrally inverted Wi-Fi signals
- WiMAX Fixed—A WiMAX fixed device (802.11a/n/ac only)
- WiMAX Mobile—A WiMAX mobile device (802.11a/n/ac only)
Note Access points associated to the controller send interference reports only for the type of interferer devices that appear in the Interferences to Detect text box. This functionality enables you to filter out source of interference that you do not want as well as any that may be flooding the network and causing performance problems for the controller or Cisco PI. Filtering allows the system to resume normal performance levels.
Step 6 Configure CleanAir alarms as follows:
a. Select the Enable AQI (Air Quality Index) Trap check box to enable the triggering of air quality alarms, or unselect the check box to disable this feature. The default value is selected.
b. If you selected the Enable AQI Trap check box in the step above, enter a value between 1 and 100 (inclusive) in the AQI Alarm Threshold text box to specify the threshold at which you want the air quality alarm to be triggered. When the air quality falls below the threshold level, the alarm is triggered. A value of 1 represents the worst air quality, and 100 represents the best. The default is 35.
- Enter the AQI Alarm Threshold (1 to 100) that you want to set. An alarm is generated when the air quality reaches a threshold value. The default is 35. The valid range is between 1 and 100.
- Select the Enable trap for Unclassified Interferences check box to enable the traps to be generated for unclassified interferences. Cisco CleanAir can detect and monitor unclassified interferences. Unclassified interferences are interferences that are detected but do not correspond to any of the known interference types.
- Enter the Threshold for Unclassified category trap (1 to 99). Enter a value between 1 and 99. The default is 20. This configuration enables traps to be sent at a set threshold.
c. Select the Enable Interference For Security Alarm check box to trigger interferer alarms when the controller detects specified device types, or unselect the check box to disable this feature. The default value is selected.
d. Make sure that any sources of interference that need to trigger interferer alarms appear in the Trap on These Types multiple select text box and any that do not need to trigger interferer alarms appear in the Do Not Trap on These Types text box. Use the > and < buttons to move interference sources between these two boxes. By default, all interference sources trigger interferer alarms.
For example, if you want the controller to send an alarm when it detects a jamming device, select the Enable Interference Type Trap check box and move the jamming device to the Trap on These Types multiple select box.
Step 7 The Event Driven RRM section displays the current status or the event-driven radio resource management configured on this radio:
- EDRRM—Displays the current status of the spectrum event-driven RRM.
- Sensitivity Threshold—Displays the threshold level at which the event-driven RRM is invoked.
Note If you want to change the current status of event-driven RRM or the sensitivity level, click Change Settings. The 802.11a (or 802.11b) > RRM > Dynamic Channel Assignment (DCA) page appears.
Step 8 Click Apply to commit your changes.
Configuring Media Stream
Choose WIRELESS > Media Stream > General to navigate to the Media Stream > General page.
The IEEE 802.11 wireless multicast delivery mechanism does not provide a reliable way to acknowledge lost or corrupted packets. As a result, lost or corrupted packets are not sent and may cause an IP multicast stream to be not viewable.
This page allows you to enable or disable multicast direct support on the network. Additionally, you can also configure an acknowledgement mechanism in which an acknowledgment is sent to clients when the access point receives multicast frames.
This table describes the media stream general parameters.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
Media Streams
Choose WIRELESS > Media Stream > Streams to navigate to the Media Streams page.
This page enables you to list all the multicast media streams configured on the controller.
This table describes the media stream parameters.
Click Add New to configure a new media stream. See the “Configuring a New Media Stream and Enabling the Media Stream” topic.
Click Delete All delete the multicast media streams.
Configuring a New Media Stream and Enabling the Media Stream
To configure a new media stream, follow these steps:
Step 1 Choose WIRELESS > Media Stream > Streams to navugate to the Media Streams page.
Step 2 Click Add New to configure a new media stream.
Step 3 Specify the following details for the new stream as follows:
Note The Stream Name, Multicast Destination Start IP Address, and Multicast Destination End IP Address text boxes are mandatory. You must enter information in these text boxes.
- Stream Name—Specifies a unique name to the stream. The stream name can be up to 64 characters.
- Multicast Destination Start IP Address—Specifies the starting IP address (IPv4 or IPv6) of the multicast media stream.
- Multicast Destination End IP Address—Specifies the ending IP address (IPv4 or IPv6) of the multicast media stream.
- Maximum Expected Bandwidth (1 to 35000 Kbps)—Specifies the maximum expected bandwidth that you want to assign to the media stream. The values can range between 1 to 35000 Kbps.
Note We recommend that you use a template to add a media stream to the controller.
Step 4 From the Select from Predefined Templates drop-down list under Resource Reservation Control (RRC) Parameters, choose one of the following options to specify details about the resource reservation control:
- Very Coarse (below 300 Kbps)
- Coarse (below 500 Kbps)
- Ordinary (below 750 Kbps)
- Low (below 1 Mbps)
- Medium (below 3 Mbps)
- High (below 5 Mbps)
Note When you select a template from the drop-down list, the following text boxes under the Resource Reservation Control (RRC) Parameters list their default values that are assigned with the template.
- Average Packet Size (100–1500 bytes)—Specifies the average packet size. The range is 100 to 1500 bytes. The default value is 1200.
- RRC Periodic update—Enables the RRC Periodic update. The RRC Decision message is periodically sent to the access point to update the media stream status. This message is sent at the time of admission and re-RRC calculations. The default is enabled.
- RRC Priority (1–8)—Specifies the priority bit set in the media stream. The priority can be any number from 1 to 8. The larger the value means the higher the priority is. For example, a priority of 1 is the lowest value and a value of 8 is the highest value. The default priority is 4. The low priority stream may be denied in the RRC periodic update.
- Traffic Profile Violation—Specifies the action to perform in case of a violation after a re-RRC. Select an action from the drop-down list. The possible values are as follows:
– Drop—Specifies that a stream is dropped on periodic revaluation.
– Fallback—Specifies that a stream is demoted to best-effort class on periodic reevaluations.
Step 5 Click Apply to save the configuration changes.
Note To enable the media stream using the controller GUI, perform Step 5 to Step 8.
Note The media stream added needs to be enabled for multicast-direct.
Step 6 Choose WLANs > WLAN ID to open the WLANs > Edit page.
Step 7 Choose the QoS tab and select Gold (Video) from the Quality of Service (QoS) drop-down list.
Step 8 Enable Multicast Direct.
Step 9 Click Apply to save the configuration changes.
Application Visibility and Control
Application Visibility and Control (AVC) uses the Network Based Application Recognition (NBAR) deep packet inspection technology to classify applications based on the protocol they use. Using AVC, the controller can detect more than 1500 Layer 4 to Layer 7 protocols. AVC enables you to perform real-time analysis and create policies to reduce network congestion, costly network link usage, and infrastructure upgrades. AVC recognizes applications and passes this information to other features like QoS, NetFlow, or firewall, which can take action based on the classification
- Only WLANS on local mode access points, or centrally switched on FlexConnect access points can have applications recognized by NBAR.
- Only IPv4 traffic can be analyzed using AVC.
Note AVC is supported only on the Cisco 2500 and 5500 Series Wireless Controllers, Cisco WiSM2, and Cisco Flex 7500 Series Wireless Controllers and Cisco 8500 Series Wireless Controllers,
Choose WIRELESS > Application Visibility and Control to navigate to this page. From here, you can choose the following:
- WIRELESS > Application Visibility and Control > Applications to view all the supported applications.
See AVC Applications for more information.
- WIRELESS > Application Visibility and Control > Profiles to add new and view existing profiles to the controller.
See AVC Profiles for more information.
AVC Applications
Choose WIRELESS > Application Visibility and Control > Applications to navigate to the AVC Applications page. This page enables you to view details of all the 1536 applications.
This table describes the AVC application parameters.
To view all classified applications, choose Monitor > Applications, click the WLAN ID to navigate to the Monitor > Clients page.
AVC Profiles
Choose WIRELESS > Application Visibility and Control > Profiles to navigate to the AVC Profiles page.
This page allows you to view the AVC profiles configured on the Cisco WLC.
- You can configure only one AVC profile per WLAN.
- Each AVC profile can have up to 32 rules.
- Each rule states a Mark or Drop action for an application, which allows you to configure up to 32 application actions per WLAN.
- You can configure up to 16 AVC profiles on a controller.
- You can associate an AVC profile with multiple WLANs.
- AVC profiles do not support AAA Override.
- AVC profiles are applied per WLAN and not per user.
To delete an AVC profile, click the blue arrow adjacent the profile and choose Remove.
Configuring a New AVC Profile and Adding Rules to the Profile
To configure a new AVC profile, follow these steps:
Step 1 Choose WIRELESS > Application Visibility and Control > Profiles and click New to configure a new AVC profile.
Step 2 Specify the AVC profile name. The profile name can be up to 32 case-sensitive, alphanumeric characters.
Step 3 Click Apply. The new AVC profile appears in the list of AVC profiles configured on the Cisco WLC.
Step 4 Click the AVC Profile name to navigate to the AVC Profile > Edit page.
Step 5 Click Add New Rule to configure a policy for an application.
Step 6 Specify the following details for the AVC Profile as follows:
To edit a rule, click Add New Rule, select the application and configure a different action.
To apply an AVC profile to all clients in a WLAN, choose WLANs and click the Profile name to navigate to the WLANs > Edit page.
Lync Server
Microsoft Lync server manages services such as voice, video, application sharing and file transfer for clients. Microsoft has an SDN (software-defined network) support, which if subscribed to, sends information with respect to those calls.
The WLC solution subscribes to the Lync messages and apply relevant QoS Policies to active Lync calls for wireless clients, which belong to a given WLC.
For a detailed implementation information, see http://www.cisco.com/c/dam/en/us/products/collateral/wireless/lync.pdf.
Choose WIRELESS > Lync Server to navigate to the Global Lync Server Configuration page.
Country
Choose WIRELESS > Country to navigate to the Country page.
On this page, select the country code or codes where the Cisco WLC and associated access points are installed and operational. This selection ensures that the listed broadcast frequency bands, interfaces, channels, and transmit power levels are compliant with country-specific regulations.
For more information on configuring country codes, see the Configuring the Country Code topic.
Note Generally, you configure one country code per controller, (the one matching the physical location of the controller and its access points). However, you can configure up to 20 country codes per controller. This multiple-country support enables you to manage access points in various countries from a single controller.
For more information on configuring multiple country codes, see the Multiple Country Codes topic.
Note Both 802.11a/n/ac and 802.11b/g/n networks must be disabled in order to change the country code.
For a complete list of country codes supported per product, refer to this URL:
The currently supported countries are as follows:
http://www.cisco.com/c/en/us/products/collateral/wireless/access-points/product_data_sheet0900aecd80537b6a.html
- AE (United Arab Emirates)
- AR (Argentina)
- AT (Austria), which allows 802.11a/n/ac and 802.11b/g/n
- AU (Australia), which allows 802.11a and 802.11b
- BE (Belgium), which allows 802.11a and 802.11b/g
- BH (Bahrain)
- BG (Bulgaria)
- BR (Brazil), which allows 802.11a and 802.11b/g
- CA (Canada), which allows 802.11b/g
- CA2 (Canada) DCA excludes UNII-2
- CH (Switzerland and Liechtenstein), which allows 802.11a and 802.11b/g
- CL (Chile)
- CN (China)
- CO (Colombia)
- CY (Cyprus), which allows 802.11a and 802.11b/g
- CZ (Czech Republic), which allows 802.11a and 802.11b
- DE (Germany), which allows 802.11a and 802.11b/g
- DK (Denmark), which allows 802.11a and 802.11b/g
- DO (Dominican Republic)
- EE (Estonia), which allows 802.11a and 802.11b/g
- ES (Spain), which allows 802.11a and 802.11b/g
- FI (Finland), which allows 802.11a and 802.11b/g
- FR (France), which allows 802.11a and 802.11b/g
- GB (United Kingdom), which allows 802.11a and 802.11b/g
- GI (Gibraltar)
- GR (Greece), which allows 802.11b/g
- HK (Hong Kong), which allows 802.11a and 802.11b/g
- HU (Hungary), which allows 802.11a and 802.11b/g
- ID (Indonesia)
- IE (Ireland), which allows 802.11a and 802.11b/g
- IL (Israel), which allows 802.11a and 802.11b/g
- ILO (Israel Outdoors), which allows 802.11a and 802.11b/g
- IN (India), which allows 802.11a and 802.11b
- IQ (Iraq)
- IS (Iceland), which allows 802.11a and 802.11b/g
- IT (Italy), which allows 802.11a and 802.11b/g
- JP (Japan), which allows 802.11a and 802.11b/g
- J2 (Japan 2 P)
- J3 (Japan 3 U)
- KE (Korea Extended K)
- KR (Republic of Korea), which allows 802.11a and 802.11b/g
- KW (Kuwait)
- LI (Liechtenstein)
- LT (Lithuania), which allows 802.11a and 802.11b/g
- LU (Luxembourg), which allows 802.11a and 802.11b/g
- LV (Latvia), which allows 802.11b/g
- MC (Monaco)
- ME (Montenegro)
- MK (Macedonia)
- MT (Malta)
- MX (Mexico)
- MY (Malaysia), which allows 802.11b/g
- NL (Netherlands), which allows 802.11a and 802.11b/g
- NO (Norway), which allows 802.11a and 802.11b/g
- NZ (New Zealand), which allows 802.11a and 802.11b/g
- OM (Oman)
- PA (Panama)
- PE (Peru)
- PH (Philippines), which allows 802.11a and 802.11b
- PH2 (Philippines (DCA excludes UNII))
- PK (Pakistan)
- PL (Poland), which allows 802.11a and 802.11b/g
- PR (Puerto Rico)
- PT (Portugal), which allows 802.11a and 802.11b/g
- PY (Paraguay)
- QA (Qatar)
- RS (Serbia)
- RU (Russian Federation)
- RO (Romania)
- SA (Saudi Arabia)
- SE (Sweden), which allows 802.11a and 802.11b/g
- SG (Singapore), which allows 802.11a and 802.11b/g
- SI (Slovenia), which allows 802.11a and 802.11b/g
- SK (Slovak Republic), which allows 802.11a and 802.11b/g
- TH (Thailand), which allows 802.11b/g
- TN (Tunisia)
- TR (Turkey)
- TW (Taiwan), which allows 802.11a and 802.11b/g
- UA (Ukraine)
- US (United States of America), which allows an 802.11b/g operation, and 802.11a Low, Medium, and High bands
- USE (USA), which allows 802.11a and 802.11b/g
- USL (USA Low), which allows an 802.11b/g operation, and 802.11a Low and Medium bands. (Used for legacy 802.11a interface cards that do not support 802.11a High band)
- USX (USA Extended), which allows 802.11a and 802.11b/g
- VE (Venezuela)
- ZA (South Africa), which allows 802.11a and 802.11b/g
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
Configuring the Country Code
Note Disable both the 802.11a/n/ac and 802.11b/g/n networks to change the country code.
To configure the country code using the GUI, follow these steps:
Step 1 Disable the 802.11a/n/ac and 802.11b/g/n networks as follows:
a. Click Wireless > 802.11a/n/ac > Network.
b. Unselect the 802.11a Network Status Enabled check box.
c. Click Apply to commit your changes.
d. Click Wireless > 802.11b/g/n > Network.
e. Unselect the 802.11b/g Network Status Enabled check box.
f. Click Apply to commit your changes.
Step 2 Click Wireless > Country to access the Country page.
Step 3 Select the check box for the country where your access point is installed.
Step 4 Click Apply to commit your changes.
Step 5 Reenable the 802.11a/n/ac and 802.11b/g/n networks that you disabled in Step 1.
Step 6 Click Save Configuration to save your settings.
Multiple Country Codes
You can configure up to 20 country codes for each controller. This multiple-country support enables you to manage access points in various countries from a single controller.
Guidelines
Follow these guidelines when configuring multiple country codes:
- The multiple-country feature is not supported for use with Cisco Aironet 1500 series mesh access points.
- When multiple countries are configured and the radio resource management (RRM) auto-RF feature is enabled, the auto-RF feature is limited to only the channels that are legal in all configured countries and to the lowest power level common to all configured countries. The access points are always able to use all legal frequencies but uncommon channels can only be assigned manually.
- The access point can only operate on the channels for the countries that they are designed for.
Note If an access point is set to a higher legal power level or is configured manually, the power level is limited only by the particular country to which that access point is assigned.
- When multiple countries are configured, the 802.11a/n/ac network is disabled for all the countries if any country does not support the 802.11a radio, or there are no common channels on the 802.11a radio.
- The country list configured on the RF group leader determines what channels the members would operate on. This is independent of what countries have been configured on the RF Group members.
Configuring Multiple Country Codes
Note Disable both the 802.11a/n/ac and 802.11b/g/n networks to change the country code.
To configure country codes using the GUI, follow these steps:
Step 1 Disable the 802.11a/n/ac and 802.11b/g/n networks as follows:
a. Click Wireless > 802.11a/n/ac > Network.
b. Unselect the 802.11a Network Status Enabled check box.
c. Click Apply to commit your changes.
d. Click Wireless > 802.11b/g/n > Network.
e. Unselect the 802.11b/g Network Status Enabled check box.
f. Click Apply to commit your changes.
Step 2 Choose Wireless > Country to access the Country page.
Step 3 Choose the check box for each country where your access points are installed.
Step 4 If you selected more than one check box in Step 3, a message appears indicating that RRM channels and power levels are limited to common channels and power levels. Click OK to continue or Cancel to cancel the operation.
Step 5 Click Apply to commit your changes.
Step 6 Re-enable the 802.11a/n/ac and 802.11b/g/n networks if you did not re-enable them in Step 1.
Step 7 Click Save Configuration to save your settings.
Changing Default Country Codes
To see the default country chosen for each access point and to choose a different country if necessary, follow these steps:
Note If you remove a country code from the configuration, any access points that are assigned to the deleted country are reassigned to one of the remaining countries if possible.
Step 1 Click Wireless > Access Points > All APs to access the All APs page.
Step 2 Click the link for the desired access point.
The default country for the access point appears in the Country Code drop-down list. The drop-down list contains only those country codes that are compatible with the regulatory domain of at least one of the access point’s radios.
Step 3 If the access point is installed in a country other than the one shown, choose the correct country from the drop-down list.
Step 4 Click Apply to commit your changes.
Step 5 Repeat " CLASS="Hypertext">Step 4 to assign all the access points that are joined to the controller of a specific country.
Step 6 Re-enable the 802.11a/n/ac and 802.11b/g/n networks.
Step 7 Click Save Configuration to save your settings.
Timers
Choose WIRELESS > Timers to navigate to the Timers page. This page enables you to view the timeout parameter.
This table describes the timer parameters.
|
|
---|---|
802.11 authentication response timeout that is between 5 and 60 seconds. The default is 10 seconds. |
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
NetFlow
Choose WIRELESS > Netflow to navigate to the Netflow page.
NetFlow is a protocol that provides valuable information about network users and applications, peak usage times, and traffic routing. This protocol collects IP traffic information from network devices to monitor traffic. The NetFlow architecture consists of the following components:
- Collector—An entity that collects all the IP traffic information from various network elements. NBAR exports traffic data to a NetFlow Collector.
- Exporter—A network entity that exports the template with the IP traffic information. The controller acts as an exporter. Configuring an exporter on the controller enables the collection of application statistics for export to an external monitor.
In the controller you can choose the following:
See Netflow Monitor for more information.
See Netflow Exporter for more information.
Netflow Monitor
Choose WIRELESS > Netflow > Monitor to navigate to the Monitor page. NetFlow record monitoring and export are used for integration with Cisco Prime Infrastructure or any NetFlow analysis tool.
This table describes the NetFlow monitor parameters.
Netflow Exporter
Choose WIRELESS > Netflow > Exporter to navigate to the Exporter page.
This table describes the NetFlow exporter parameters.
|
|
---|---|
Name of the exporter. You can configure only one exporter on the controller. You cannot include spaces within an exporter name. |
|
QoS Profiles
Choose WIRELESS > QoS > Profiles to navigate to the QoS Profiles page. This page enables you to view the quality of service (QoS) settings.
This table describes the QoS profiles parameters.
Click the profile name to go to the Editing QoS Profile page and specify how much bandwidth a client is allocated in the network for that QoS profile.
Editing QoS Profile
Choose WIRELESS > QoS > Profiles and then click the profile name to navigate to the Edit QoS Profile page.
The top of the main page lists the selected quality of service (QoS) profile name.
This table describes the QoS profile parameters.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
Click Reset to defaults to reset the parameters to the factory default.
QoS Roles for Guest Users
Choose WIRELESS > QoS > Roles to navigate to the QoS Roles for Guest Users page.
This page enables you to view the quality of service (QoS) roles for guest users.
Choose New to display the Creating New QoS Roles page and to create a new QoS role.
Click the role name to display the Editing QoS Role Data Rates page and specify how much bandwidth a wired guest user is allocated in the network for that QoS role.
Note After you create the QoS role for guest user, you can assign a role to a guest user from the Local Net Users page.
To delete a role, click the blue arrow adjacent the desired access point and choose Remove.
Creating New QoS Roles
Choose WIRELESS > QoS > Roles and then click New to navigate to the QoS Role Name > New page.
This page enables you to create quality of service roles for guest users. Click the profile name to go to the Editing QoS Role Data Rates page and edit the QoS role parameters.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.
Editing QoS Role Data Rates
Choose WIRELESS > QoS > Roles, and then click the role name to navigate to the Edit QoS Role data rates page.
This page enables you to specify bandwidth limits for guest users of different roles. The top of the main page lists the selected role name.
This table describes the QoS role parameters.
Click Apply to send data to the Cisco WLC, but the data is not preserved across a power cycle; these parameters are stored temporarily in volatile RAM.