Configuring Profiles Through the CLI
Configuring a Wireless Profile Policy (CLI)
Follow the procedure given below to configure a wireless profile policy:
![]() Note |
When a client moves from an old controller to a new controller (managed by Cisco Prime Infrastructure), the old IP address of the client is retained, if the IP address is learned by ARP or data gleaning. To avoid this scenario, ensure that you enable ipv4 dhcp required command in the policy profile. Otherwise, the IP address gets refreshed only after a period of 24 hours. |
SUMMARY STEPS
- configure terminal
- wireless profile policy profile-policy
- idle-timeout timeout
- vlan vlan-id
- no shutdown
- show wireless profile policy summary
DETAILED STEPS
Command or Action | Purpose | |||
---|---|---|---|---|
Step 1 |
configure terminal Example:
|
Enters global configuration mode. |
||
Step 2 |
wireless profile policy profile-policy Example:
|
Configures WLAN policy profile and enters wireless policy configuration mode. |
||
Step 3 |
idle-timeout timeout Example:
|
(Optional) Configures the duration of idle timeout, in seconds. |
||
Step 4 |
vlan vlan-id Example:
|
Configures VLAN name or VLAN ID. |
||
Step 5 |
no shutdown Example:
|
Saves the configuration and exits configuration mode and returns to privileged EXEC mode. |
||
Step 6 |
show wireless profile policy summary Example:
|
Displays the configured policy profiles.
|
Configuring a Flex Profile (CLI)
Follow the procedure given below to set a flex profile:
SUMMARY STEPS
- configure terminal
- wireless profile flex flex-profile
- description
- arp-caching
- end
- show wireless profile flex summary
DETAILED STEPS
Command or Action | Purpose | |||
---|---|---|---|---|
Step 1 |
configure terminal Example:
|
Enters global configuration mode. |
||
Step 2 |
wireless profile flex flex-profile Example:
|
Configures a Flex profile and enters Flex profile configuration mode. |
||
Step 3 |
description Example:
|
(Optional) Enables default parameters for the flex profile. |
||
Step 4 |
arp-caching Example:
|
(Optional) Enables ARP caching. |
||
Step 5 |
end Example:
|
Saves the configuration and exits configuration mode and returns to privileged EXEC mode. |
||
Step 6 |
show wireless profile flex summary Example:
|
(Optional) Displays the flex-profile parameters.
|
Configuring an AP Profile (CLI)
When you modify an AP join profile in the controller, the Network Time Protocol (NTP) server IP is not pushed to the AP. This is because, the AP profile-specific NTP server IP is introduced to address the time sensitivity of the Hyperlocation feature and is pushed to the AP only when the operational status of Hyperlocation is Up. This behavior is applicable to all Hyperlocation-related TLVs (trigger threshold, reset threshold, and detection threshold) as well.
Configure the options that are required. Not all options are mandatorily required.
SUMMARY STEPS
- enable
- configure terminal
- ap profile ap-profile
- description ap-profile-name
- accounting method-listmethod-list-name
- antenna monitoring
- apphost
- auxiliary-client interface vlan vlan-ID
- awips forensic
- bssid-neighbor-stats interval interval
- bssid-stats bssid-stats-frequency seconds
- capwap {backup | fallback | retransmit | timers | udplite | window}
- capwap-discovery {private | public}
- cdp
- cisco-dna grpc
- client-rssi-stats interval interval
- core-dump tftp-server ipv4/ipv6 filename filename {compress | uncompress}
- dhcp-server
- dot11 {24ghz | 5ghz} reporting-interval interval
- dot1x {eap-type | 5ghz | lsc-ap-auth-state | max-sessions sessions | username}
- ext-module
- gas-ap-rate-limit maximum-requests-allowed request-limit-interval
- hyper-location
- icap subscription ap rf spectrum enable
- ip dhcp fallback
- jumbo-mtu
- lag
- ledflash {duration duration | indefinite}
- link-encryption
- link-latency
- mesh-profile name
- mgmtuser username username password {0 | 8} passwordsecret {0 | 8 } secret
- ntp ip{ipv4-address | ipv6-address }
- oeap {link-encryption | local-access | provisioning-ssid | rogue-detection}
- packet-capture profile-name
- pakseq-jump-delba
- power {injector {installed | override | switch-mac-address} | pre-standard}
- preferred-mode {disable | ipv4 | ipv6}
- qos-map action-frame
- rogue detection report-interval interval
- ssh
- ssid broadcast persistent
- statistics traffic-distribution interval interval
- stats-timer duration
- syslog level {alerts | critical | debugging | emergencies | errors | informational | notifications | warnings }
- tcp-adjust-mss {enable | size mss-value
- telnet
- trace profile-name
- usb-enable
- end
- show ap profile nameprofile-name detailed
DETAILED STEPS
Command or Action | Purpose | |||
---|---|---|---|---|
Step 1 |
enable Example:
|
Enables privileged EXEC mode.
|
||
Step 2 |
configure terminal Example:
|
Enters global configuration mode. |
||
Step 3 |
ap profile ap-profile Example:
|
Configures an AP profile and enters AP profile configuration mode.
|
||
Step 4 |
description ap-profile-name Example:
|
Adds a description for the AP profile. |
||
Step 5 |
accounting method-listmethod-list-name Example:
|
Configures an accounting method-list. |
||
Step 6 |
antenna monitoring Example:
|
Configures detection of broken AP antennas. |
||
Step 7 |
apphost Example:
|
Enables the application hosting framework on Cisco APs. |
||
Step 8 |
auxiliary-client interface vlan vlan-ID Example:
|
Configures the auxiliary-client interface VLAN. |
||
Step 9 |
awips forensic Example:
|
Enables Adaptive Wireless Intrusion Prevention System (wIPS). |
||
Step 10 |
bssid-neighbor-stats interval interval Example:
|
Configures the interval at which BSSID neighbor statistics is sent from the AP.
|
||
Step 11 |
bssid-stats bssid-stats-frequency seconds Example:
|
Sets the frequency timer for BSSID statistics. |
||
Step 12 |
capwap {backup | fallback | retransmit | timers | udplite | window} Example:
|
Sets the Control and Provisioning of Wireless Access Points Protocol (CAPWAP) parameters. |
||
Step 13 |
capwap-discovery {private | public} Example:
|
Configures the CAPWAP discovery response.
|
||
Step 14 |
cdp Example:
|
Configures Cisco Discovery Protocol. |
||
Step 15 |
cisco-dna grpc Example:
|
Enables the GRPC channel to Cisco DNA. |
||
Step 16 |
client-rssi-stats interval interval Example:
|
Configures the client Received Signal Strength Indicator (RSSI) statistics reporting interval. |
||
Step 17 |
core-dump tftp-server ipv4/ipv6 filename filename {compress | uncompress} Example:
|
Enables core dump of the memory. |
||
Step 18 |
dhcp-server Example:
|
Configures a DHCP server. |
||
Step 19 |
dot11 {24ghz | 5ghz} reporting-interval interval Example:
|
Configures a interval at which client report needs to be sent from AP to clients on the specified radio frequency. |
||
Step 20 |
dot1x {eap-type | 5ghz | lsc-ap-auth-state | max-sessions sessions | username} Example:
|
Configures IEEE 802.1X credentials for all APs . |
||
Step 21 |
ext-module Example:
|
Enables the extended module on all APs. |
||
Step 22 |
gas-ap-rate-limit maximum-requests-allowed request-limit-interval Example:
|
Limits the number of Generic Advertisement Services (GAS) request action frames to be sent to the controller by an AP in a given interval. |
||
Step 23 |
hyper-location Example:
|
Configures the hyperlocation feature on all supported APs. |
||
Step 24 |
icap subscription ap rf spectrum enable Example:
|
Configures the radio frequency spectrum subscription. |
||
Step 25 |
ip dhcp fallback Example:
|
Configures DHCP fallback.
|
||
Step 26 |
jumbo-mtu Example:
|
Enables jumbo maximum transmission unit (MTU) status. |
||
Step 27 |
lag Example:
|
Enables CAPWAP lag for Cisco APs. |
||
Step 28 |
ledflash {duration duration | indefinite} Example:
|
Enables LED-state for all Cisco APs. |
||
Step 29 |
link-encryption Example:
|
Enables the link encryption state on all Cisco APs. |
||
Step 30 |
link-latency Example:
|
Enables link latency on all Cisco APs. |
||
Step 31 |
mesh-profile name Example:
|
Configures the mesh profile. |
||
Step 32 |
mgmtuser username username password {0 | 8} passwordsecret {0 | 8 } secret Example:
|
Configures an username, password and a secret for privileged AP management. |
||
Step 33 |
ntp ip{ipv4-address | ipv6-address } Example:
|
Configures the NTP server IP/IPv6 address. |
||
Step 34 |
oeap {link-encryption | local-access | provisioning-ssid | rogue-detection} Example:
|
Enables link encryption for Cisco OfficeExtend access points (OEAPs). |
||
Step 35 |
packet-capture profile-name Example:
|
Configures a profile for packet capturing. |
||
Step 36 |
pakseq-jump-delba Example:
|
Configures the AP radio to send DELBA on packet sequence. |
||
Step 37 |
power {injector {installed | override | switch-mac-address} | pre-standard} Example:
|
Enables the power over Ethernet (PoE) switch state. |
||
Step 38 |
preferred-mode {disable | ipv4 | ipv6} Example:
|
Disables preferred-mode. |
||
Step 39 |
qos-map action-frame Example:
|
Sends 802.11 QoS map-action frame when the QoS map-configuration changes. |
||
Step 40 |
rogue detection report-interval interval Example:
|
Configures rogue-detection report-interval for monitor mode. |
||
Step 41 |
ssh Example:
|
Enables SSH, if the AP user management credentials are nondefault. |
||
Step 42 |
ssid broadcast persistent Example:
|
Enables persistent Service Set Identifier (SSID) broadcast on the profile. |
||
Step 43 |
statistics traffic-distribution interval interval Example:
|
Enables traffic distribution statistics. |
||
Step 44 |
stats-timer duration Example:
|
Configures the duration of the statistics timer. |
||
Step 45 |
syslog level {alerts | critical | debugging | emergencies | errors | informational | notifications | warnings } Example:
|
Configures the system error message logging settings. |
||
Step 46 |
tcp-adjust-mss {enable | size mss-value Example:
|
Enables the TCP maximum segment size configuration for all Cisco APs. |
||
Step 47 |
telnet Example:
|
Enables Telnet, if the AP user management credentials are nondefault. |
||
Step 48 |
trace profile-name Example:
|
Configures the AP trace profile. |
||
Step 49 |
usb-enable Example:
|
Enables USBs for Cisco APs. |
||
Step 50 |
end Example:
|
Exits AP profile configuration mode and returns to privileged EXEC mode. |
||
Step 51 |
show ap profile nameprofile-name detailed Example:
|
(Optional) Displays detailed information about an AP join profile. |
Configuring an RF Profile (CLI)
All steps given in this task may not be required for your configuration, use the ones that are required.
Before you begin
Ensure that you use the same RF profile name that you create here, when you configure the wireless RF tag. If there is a mismatch in the RF profile name (for example, if the RF tag contains an RF profile that does not exist), the corresponding radios will not come up.
SUMMARY STEPS
- enable
- configure terminal
- ap dot11 24ghz rf-profile rf-profile
- default
- airtime {bridge-client-access airtime-allocation allocation-percentage | mode {enforce-policy | monitor} | optimization}
- band-select cycle {count cycles-not-responding | threshold threshold-value}
- channel {add channel-number | foreign | remove channel-number}
- client-network-preference {connectivity | default | throughput}
- coverage {data rssi threshold threshold-value | exception exception-level | level exception-level | voice rssi threshold threshold-value}
- description description
- dot11ax spatial-reuse obss-pd [non-srg-max tnon-SRG-value]
- high-density {clients count maximum-client-connections | multicast data-rate options| rx-sop threshold {auto | custom RX-SOP-value | high | low | medium}
- hsr-mode [neighbor-timeout neighbor-timeout]
- load-balancing {denial denial-count | window number-of-clients }
- ndp-mode {auto | off-channel}
- rate {options {disable | mandatory | supported } | mcs index-number}
- trap threshold {clients | interference | noise | utilization } threshold
- tx-power {max | min | v1 threshold } threshold
- no shutdown
- end
- show ap rf-profile summary
- show ap rf-profile name rf-profile detail
DETAILED STEPS
Command or Action | Purpose | |
---|---|---|
Step 1 |
enable Example:
|
Enables privieged EXEC mode.
|
Step 2 |
configure terminal Example:
|
Enters global configuration mode. |
Step 3 |
ap dot11 24ghz rf-profile rf-profile Example:
|
Configures an RF profile and enters RF profile configuration mode. |
Step 4 |
default Example:
|
(Optional) Enables default parameters for the RF profile. |
Step 5 |
airtime {bridge-client-access airtime-allocation allocation-percentage | mode {enforce-policy | monitor} | optimization} Example:
|
Configures airtime-fairness in enforce-policy mode. |
Step 6 |
band-select cycle {count cycles-not-responding | threshold threshold-value} Example:
|
Sets the time threshold for a new scanning cycle. |
Step 7 |
channel {add channel-number | foreign | remove channel-number} Example:
|
Specifies the channel number to be added to the DCA allowed channel list. |
Step 8 |
client-network-preference {connectivity | default | throughput} Example:
|
Applies connectivity preference for the client network. |
Step 9 |
coverage {data rssi threshold threshold-value | exception exception-level | level exception-level | voice rssi threshold threshold-value} Example:
|
Sets the Cisco AP coverage exception level. |
Step 10 |
description description Example:
|
(Optional) Adds a description to the RF profile. |
Step 11 |
dot11ax spatial-reuse obss-pd [non-srg-max tnon-SRG-value] Example:
|
Configures the maximum 802.11ax non-SRG OBSS PD value. |
Step 12 |
high-density {clients count maximum-client-connections | multicast data-rate options| rx-sop threshold {auto | custom RX-SOP-value | high | low | medium} Example:
|
Configures the maximum client connections per AP radio. |
Step 13 |
hsr-mode [neighbor-timeout neighbor-timeout] Example:
|
Enables High-Speed Roam (HSR) mode for the RF profile. |
Step 14 |
load-balancing {denial denial-count | window number-of-clients } Example:
|
Sets the aggressive load-balancing client window. |
Step 15 |
ndp-mode {auto | off-channel} Example:
|
Enables Neighbor Discovery Protocol (NDP) auto mode. |
Step 16 |
rate {options {disable | mandatory | supported } | mcs index-number} Example:
|
Configures modulation and coding scheme (MCS) data rates for the RF profile. |
Step 17 |
trap threshold {clients | interference | noise | utilization } threshold Example:
|
Configures the trap threshold for noise. |
Step 18 |
tx-power {max | min | v1 threshold } threshold Example:
|
Configures the minimum auto-RF transmit power. |
Step 19 |
no shutdown Example:
|
Enables the RF profile on the device. |
Step 20 |
end Example:
|
Exits RF profile configuration mode and returns to privileged EXEC mode. |
Step 21 |
show ap rf-profile summary Example:
|
(Optional) Displays the summary of the available RF profiles. |
Step 22 |
show ap rf-profile name rf-profile detail Example:
|
(Optional) Displays detailed information about a particular RF profile. |