Cisco Prime Network Control System Configuration Guide, Release 1.0

Search for controller by

Choose All Controllers, IP Address, Controller Name, or Network.

Note Search parameters may change depending on the selected category. When applicable, enter the additional parameter or filter information to help identify the Search By category.

Enter Controller IP Address

This field only appears if you select IP Address from the Search for controller by field.

Enter Controller Name

This field only appears if you select Controller Name from the Search for controller by field.

Select a Network

Audit Status

Choose one of the following from the drop-down list:

–All Status

–Mismatch—Config differences were found between NCS and controller during the last audit.

–Identical—No config differences were found during the last audit.

–Not Available—Audit status is unavailable.

IP Address

Local network IP address of the controller management interface. Click an IP address in the list to display the controller details.

Controller Name

Name of the Controller.

Location

The geographical location (such as a campus or building).

Mobility Group Name

Name of the controller mobility or WPS group.

Reachability Status

Reachable or Unreachable. Click the title to toggle from ascending to descending order.

IP Address

Local network IP address of the controller management interface.

Name

User-defined name of the controller.

Device Type

Type of controller.

UP Time

Time in days, hours and minutes since the last reboot.

System Time

Time used by the controller.

Internal Temperature

The temperature of the controller.

Location

User-defined physical location of the controller.

Contact

Contact person or the owner of the controller.

Total Client Count

Total number of clients currently associated with the controller.

Current CAPWAP Transport Mode

Control and Provisioning of Wireless Access Points protocol (CAPWAP) transport mode. Communications between controllers and access points. Selections are Layer 2 or Layer 3.

Power Supply One

If the power supply is available and operation. This is only for 4400 series controller.

Power Supply Two

If the power supply is available and operation. This is only for 4400 series controller.

Software Version

The operating system release.version.dot.maintenance number of the code currently running on the controller.

Emergency Image Version

An image version of the controller.

Description

Description of the inventory item.

Model No

Specifies the machine model as defined by the Vital Product Data.

Serial No

Unique serial number for this controller.

Burned-in MAC Address

The burned-in MAC address for this controller.

Number of APs Supported

The maximum number of access points supported by the controller.

Gig Ethernet/Fiber Card

Displays the presence or absence of the optional 1000BASE-T/1000BASE-SX GigE card.

Crypto Card One

Displays the presence or absence of an enhanced security module which enables IPSec security and provides enhanced processing power.

Note By default, enhanced security module is not installed on a controller.

Maximum number of crypto cards that can be installed on a Cisco Wireless LAN controller:

–Cisco 2000 Series—None

–Cisco 4100 Series—One

–Cisco 4400 Series—Two

Crypto Card Two

Displays the presence or absence of a second enhanced security module.

GIGE Port(s) Status

Up or Down. Click to review the status of the port.

Name

Product type. Chassis for controller and Cisco AP for access points.

Description

Description of controller and may include number of access points.

Product ID

Orderable product identifier.

Version ID

Version of product identifier.

Serial No

Unique product serial number.

CPU Utilization

Displays a graph of the maximum, average, and minimum CPU utilization over the specified amount of time.

Memory Utilization

Displays a graph of the maximum, average, and minimum Memory utilization over the specified amount of time.

Spanning Tree Specification

An indication of what version of the Spanning Tree Protocol is being run. IEEE 802.1D implementations will return 'IEEE 802.1D'. If future versions of the IEEE Spanning Tree Protocol are released that are incompatible with the current version a new value will be defined.

Spanning Tree Algorithm

Specifies if this controller will participate in the Spanning Tree Protocol. May be enabled or disabled by selecting the corresponding line on the drop-down list entry field. The factory default is disabled.

Priority

The value of the writable portion of the Bridge ID, that is, the first two octets of the (8 octet long) Bridge ID. The other (last) 6 octets of the Bridge ID are given by the value of Bridge MAC Address. The value may be specified as a number between 0 and 65535. The factory default is 32768.

Topology Change Count

The total number of topology changes detected by this bridge since the management entity was last reset or initialized.

Time Since Topology Changed

The total number of topology changes detected by this bridge since the management entity was last reset or initialized.

Designated Root

The bridge identifier of the root of the spanning tree as determined by the Spanning Tree Protocol as executed by this node. This value is used as the Root Identifier parameter in all Configuration Bridge PDUs originated by this node.

Root Cost

The cost of the path to the root as seen from this bridge.

Root Port

The port number of the port which offers the lowest cost path from this bridge to the root bridge.

Maximum Age (seconds)

The value that all bridges use for MaxAge when this bridge is acting as the root.

Note The 802.1D-1990 specifies that the range for this parameter is related to the value of Stp Bridge Hello Time. The granularity of this timer is specified by 802.1D-1990 to be 1 second. Valid values are 6 through 40 seconds. The factory default is 20.

Hello Time (seconds)

The value that all bridges use for HelloTime when this bridge is acting as the root. The granularity of this timer is specified by 802.1D-1990 to be 1 second. Valid values are 1 through 10 seconds. The factory default is 2.

Forward Delay (seconds)

The value that all bridges use for ForwardDelay when this bridge is acting as the root. Note that 802.1D-1990 specifies that the range for this parameter is related to the value of Stp Bridge Maximum Age. The granularity of this timer is specified by 802.1D-1990 to be 1 second. An agent may return a badValue error if a set is attempted to a value which is not a whole number of seconds. Valid values are 4 through 30 seconds. The factory default is 15.

Hold Time (seconds)

The minimum time period to elapse between the transmission of Configuration BPDUs through a given LAN Port: at most one Configuration BPDU shall be transmitted in any Hold Time period.

Session Index

Session identification.

Username

Login username.

Connection Type

Telnet or serial session.

Connection From

IP address of the client computer system.

Session Time

Elapsed active session time.

Idle Time

Elapsed inactive session time.

Server IP

Identifies the IP address of the server.

Is Proxy

Identifies whether or not this server is proxy.

Discover Packets Sent

Identifies the total number of packets sent intended to locate available servers.

Request Packets Sent

Identifies the total number of packets sent from the client requesting parameters from the server or confirming the correctness of an address.

Decline Packets

Identifies the number of packets indicating that the network address is already in use.

Inform Packets

Identifies the number of client requests to the DHCP server for local configuration parameters because the client already has an externally configured network address.

Release Packets

Identifies the number of packets that release the network address and cancel the remaining lease.

Reply Packets

Identifies the number of reply packets.

Offer Packets

Identifies the number of packets that respond to the discover packets with an offer of configuration parameters.

Ack Packets

Identifies the number of packets that acknowledge successful transmission.

Nak Packets

Identifies the number of packets that indicate that the transmission occurred with errors.

Tx Failures

Identifies the number of transfer failures that occurred.

Last Response Received

Provides a timestamp of the last response received.

Last Request Sent

Provides a timestamp of the last request sent.

WLAN ID

Identification number of the WLAN.

Profile Name

User-defined profile name specified when initially creating the WLAN. Profile Name is the WLAN name.

SSID

User-defined SSID name.

Security Policies

Security policies enabled on the WLAN.

No of Mobility Anchors

Mobility anchors are a subset of a mobility group specified as the anchor controllers for a WLAN.

Admin Status

Status of the WLAN is either enabled or disabled.

No. of Clients

Current number of clients currently associated with this WLAN.

Port

Click the port number to view port details. See the "Port Details" section on page 5-10 for more information.

Physical Mode

Displays the physical mode of all ports. Selections include:

–100 Mbps Full Duplex

–100 Mbps Half Duplex

–10 Mbps Full Duplex

–10 Mbps Half Duplex

Admin Status

Displays the state of the port of either Enable or Disable.

STP State

Displays the STP state of the port of either Forwarding or Disabled.

Physical Status

Displays the actual port physical interface:

–Auto Negotiate

–Half Duplex 10 Mbps

–Full Duplex 10 Mbps

–Half Duplex 100 Mbps

–Full Duplex 100 Mbps

–Full Duplex 1 Gbps

Link Status

Red (down/failure), Yellow (alarm), Green (up/normal).

Operational Status

Displays the operational status of the controller: Options are UP or DOWN.

Unknown Protocol Packets

The number of packets of unknown type which were received from this server on this port.

Total Bytes

The total number of packets received.

Packets

The total number of packets (including bad packets) received that were within the indicated octet range in length (excluding framing bits but including FCS octets).

Ranges include:

–64 Octets

–65-127 Octets

–128-255 Octets

–256-511 Octets

–512-1023 Octets

–1024-1518 Octets

Total

Total number of packets received/transmitted.

Unicast Packets

The number of subnetwork-unicast packets delivered/sent to a higher-layer protocol.

Broadcast Packets

The total number of packets received/sent that were directed to the broadcast address.

Packets Discarded

Packets Discarded (Received/Transmitted): The number of inbound/outbound packets which were chosen to be discarded even though no errors had been detected to prevent their being deliverable to a higher-layer protocol. A possible reason for discarding a packet could be to free up buffer space.

Errors in Packets

The total number of packets received that were with errors.

Jabbers

The total number of packets received that were longer than 1518 octets (excluding framing bits, but including FCS octets), and had either a bad Frame Check Sequence (FCS) with an integral number of octets (FCS Error) or a bad FCS with a non-integral number of octets (Alignment Error).

Note This definition of jabber is different than the definition in IEEE-802.3 section 8.2.1.5 (10Base-5) and section 10.3.1.4 (10Base-2). These documents define jabber as the condition where any packet exceeds 20 ms. The allowed range to detect jabber is between 20 and 150 ms.

Fragments/Undersize

The total number of packets received that were less than 64 octets in length (excluding framing bits but including FCS octets).

Alignment Errors

The total number of packets received that had a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets, inclusive, but had a bad Frame Check Sequence (FCS) with a non-integral number of octets.

FCS Errors

The total number of packets received that had a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets, inclusive, but had a bad Frame Check Sequence (FCS) with an integral number of octets.

Single Collision Frames

A count of the number of successfully transmitted frames on a particular interface for which transmission is inhibited by exactly one collision.

Multiple Collision Frames

A count of the number of successfully transmitted frames on a particular interface for which transmission is inhibited by more than one collision.

Deferred Transmissions

A count of frames for which transmission on a particular interface fails due to deferred transmissions.

Late Collisions

A count of frames for which transmission on a particular interface fails due to late collisions.

Excessive Collisions

A count of frames for which transmission on a particular interface fails due to excessive collisions.

CRC Align Errors

The number of incoming packets with the Checksum (FCS) alignment error. This represents a count of frames received on a particular interface that are not an integral number of octets in length and do not pass the FCS check. Received frames for which multiple error conditions obtain are, according to the conventions of IEEE 802.3 Layer Management, counted exclusively according to the error status presented to the LLC.

Undersize Packets

The total number of packets received that were less than 64 octets in length (excluding framing bits but including FCS octets).

Oversize Packets

The total number of frames that exceeded the maximum permitted frame size. This counter has a maximum increment rate of 815 counts per second at 10 Mbps.

Ether Stats Collisions

The number of packets with collision errors.

SQE Test Errors

Signal Quality Error Test errors (that is, Heartbeat) during transmission. This tests the important collision detection electronics of the transceiver, and lets the Ethernet interface in the computer know that the collision detection circuits and signal paths are working correctly. The errors indicate a count of times that the SQE TEST ERROR message is generated by the PLS sublayer for a particular interface. The SQE TEST ERROR message is defined in section 7.2.2.2.4 of ANSI/IEEE 802.3-1985 and its generation is described in section 7.2.4.6 of the same document.

Internal MAC Receive Errors

A count of frames for which reception on a particular interface fails due to an internal MAC sublayer receive error. A frame is only counted by an instance of this object if it is not counted by the corresponding instance of either the FrameTooLong property, the AlignmentErrors property, or the FCSErrors property. The precise meaning of the count represented by an instance of this object is implementation-specific. In particular, an instance of this object may represent a count of receive errors on a particular interface that are not otherwise counted.

Internal MAC Transmit Errors

A count of frames for which transmission on a particular interface fails due to an internal MAC sublayer transmit error. A frame is only counted by an instance of this object if it is not counted by the corresponding instance of either the LateCollisions property, the ExcessiveCollisions property, or the CarrierSenseErrors property. The precise meaning of the count represented by an instance of this object is implementation-specific. In particular, an instance of this object may represent a count of transmission errors on a particular interface that are not otherwise counted.

Carrier Sense Errors

The Carrier Sense detects the presence of a carrier. The number of times that the carrier sense condition was lost or never asserted when attempting to transmit a frame on a particular interface.

Too Long Frames

A count of frames received on a particular interface that exceed the maximum permitted frame size. The count represented by an instance of this object is incremented when the FrameTooLong status is returned by the MAC layer to the LLC (or other MAC user). Received frames for which multiple error conditions obtain are, according to the conventions of IEEE 802.3 Layer Management, counted exclusively according to the error status presented to the LLC.

Local Interface

Local Port information.

Neighbor Name

The name of each CDP neighbor.

Neighbor Address

The IP address of each CDP neighbor.

Neighbor Port

The port used by each CDP neighbor for transmitting CDP packets.

Capability

The functional capability of each CDP neighbor.

Platform

The hardware platform of each CDP neighbor device.

Duplex

Indicates Full Duplex or Half Duplex.

Software Version

The software running on the CDP neighbor.

Server Index

Access priority number for RADIUS servers. Up to four servers can be configured, and controller polling of the servers starts with Index 1, Index 2 second, and so forth. Index number is based on when the RADIUS server is added to the controller.

IP Address

The IP address of the RADIUS server.

Ping

Click to icon to ping the RADIUS Server from the controller to verify the link.

Port

Controller port number for the interface protocols.

Admin Status

Indicates whether the server is enabled or disabled.

Msg Round Trip Time

The time interval (in milliseconds) between the most recent Access-Reply/Access-Challenge and the Access-Request that matched it from this RADIUS authentication server.

First Requests

The number of RADIUS Access-Request packets sent to this server. This does not include retransmissions.

Retry Requests

The number of RADIUS Authentication-Request packets retransmitted to this RADIUS authentication server.

Accept Responses

The number of RADIUS Access-Accept packets (valid or invalid) received from this server.

Reject Responses

The number of RADIUS Access-Reject packets (valid or invalid) received from this server.

Challenge Responses

The number of RADIUS Access-Challenge packets (valid or invalid) received from this server.

Malformed Msgs

The number of malformed RADIUS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or Signature attributes or unknown types are not included as malformed access responses.

Pending Requests

The number of RADIUS Access-Request packets destined for this server that have not yet timed out or received a response. This variable is incremented when an Access-Request is sent and decremented due to receipt of an Access-Accept, Access-Reject or Access-Challenge, a timeout, or retransmission.

Bad Authentication Msgs

The number of RADIUS Access-Response packets containing invalid authenticators or Signature attributes received from this server.

Timeouts Requests

The number of authentication timeouts to this server. After a timeout the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout.

Unknown Type Msgs

The number of RADIUS packets of unknown type which were received from this server on the authentication port.

Other Drops

The number of RADIUS packets received from this server on the authentication port and dropped for some other reason.

Server Index

Access priority number for RADIUS servers. Up to four servers can be configured, and controller polling of the servers starts with Index 1, Index 2 second, and so forth. Index number is based on when the RADIUS server is added to the controller.

IP Address

The IP address of the RADIUS server.

Ping

Click to icon to ping the RADIUS Server from the controller to verify the link.

Port

The Port of the RADIUS Server.

Admin Status

Indicates whether the server is enabled or disabled.

Msg Round Trip Time

The time interval (in milliseconds) between the most recent Accounting-Response and the Accounting-Request that matched it from this RADIUS accounting server.

First Requests

The number of RADIUS Accounting-Request packets sent. This does not include retransmissions.

Retry Requests

The number of RADIUS Accounting-Request packets retransmitted to this RADIUS accounting server. Retransmissions include retries where the Identifier and Acct-Delay have been updated, as well as those in which they remain the same.

Accounting Responses

The number of RADIUS packets received on the accounting port from this server.

Malformed Msgs

The number of malformed RADIUS Accounting-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators and unknown types are not included as malformed accounting responses.

Bad Authentication Msgs

The number of RADIUS Accounting-Response packets which contained invalid authenticators received from this server.

Pending Requests

The number of RADIUS Accounting-Request packets sent to this server that have not yet timed out or received a response. This variable is incremented when an Accounting-Request is sent and decremented due to receipt of an Accounting-Response, a timeout or a retransmission.

Timeouts Requests

The number of accounting timeouts to this server. After a timeout the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as an Accounting-Request as well as a timeout.

Unknown Type Msgs

The number of RADIUS packets of unknown type which were received from this server on the accounting port.

Other Drops

The number of RADIUS packets which were received from this server on the accounting port and dropped for some other reason.

Management Frame Protection

Indicates if infrastructure MFP is enabled globally for the controller.

Controller Time Source Valid

The Controller Time Source Valid field indicates whether the controller time is set locally (by manually entering the time) or through an external source (such as NTP server). If the time is set by an external source, the value of this field is "True." If the time is set locally, the value is "False." The time source is used for validating the timestamp on management frames between access points of different controllers within a mobility group.

WLAN ID

The WLAN ID, 1 through 17.

WLAN Name

User-defined profile name when initially creating the WLAN. Both the SSID name and profile name are user-defined. The WLAN name is same as the profile name.

MFP Protection

Management Frame Protection is either enabled or disabled.

Status

Status of the WLAN is either enabled or disabled.

AP Name

Operator defined name of access point.

MFP Validation

Management Frame Protection is enabled or disabled.

Radio

802.11a or 802.11b/g.

Operation Status

Displays the operational status of the: either UP or DOWN.

Protection

Full (All Frames).

Validation

Full (All Frames).

Rule Name

Name of the rule.

Rule Type

Malicious or Friendly

–Malicious Rogue—A detected access point that matches the user-defined Malicious rules or has been manually moved from the Friendly AP category.

–Friendly Rogue—Known, acknowledged, or trusted access point or a detected access point that matches user-defined Friendly rules.

Match Type

Match any or match all conditions.

Enabled Rule Conditions

Indicates all enabled rule conditions including:

–Open Authentication

–Match Managed AP SSID

–Match User Configured SSID

–Minimum RSSI

–Time Duration

–Minimum Number Rogue Clients

Guest User Name

Indicates the guest user login name.

Profile

Indicates the profile to which the guest user is connected.

Lifetime

Indicates the length of time that the guest user account is active. Length of time appears in days, hours, and minutes or as Never Expires.

Start Time

Indicates when the guest user account was activated.

Remaining Lifetime

Indicates the remaining time for the guest user account.

Role

Indicates the designated user role.

First Logged in at

Indicates the date and time of the user first log in.

Number of logins

Indicates the total number of log ins for this guest user.

Description

User-defined description of the guest user account for identification purposes.

Rx Errors

Generic protocol packet receive errors, such as packet too short or format incorrect.

Tx Errors

Generic protocol packet transmit errors, such as packet transmission fail.

Responses Retransmitted

The Mobility protocol uses UDP and it resends requests several times if it does not receive a response. Because of network or processing delays, the responder may receive one or more retry requests after it initially responds to a request. This is a count of the response resends.

Handoff Requests Received

Total number of handoff requests received, ignored or responded to.

Handoff End Requests

Total number of handoff end requests received. These are sent by the Anchor or the Foreign to notify the other about the close of a client session.

State Transitions Disallowed

PEM (policy enforcement module) has denied a client state transition, usually resulting in the handoff being aborted.

Resource Unavailable

A necessary resource, such as a buffer, was unavailable, resulting in the handoff being aborted.

Handoff Requests Ignored

Number of handoff requests/client announces that were ignored. The controller simply had no knowledge of that client.

Ping Pong Handoff Requests Dropped

Number of handoff requests that were denied because the handoff period was too short (3 sec).

Handoff Requests Dropped

Number of handoff requests that were dropped due to a either an incomplete knowledge of the client or a problem with the packet.

Handoff Requests Denied

Number of handoff requests that were actively denied.

Client Handoff as Local

Number of handoffs responses sent while in the local role.

Client Handoff as Foreign

Number of handoffs responses sent while in the foreign role.

Anchor Requests Received

Number of anchor requests received.

Anchor Requests Denied

Number of anchor requests denied.

Anchor Requests Granted

Number of anchor requests granted.

Anchor Transferred

Number of anchors transferred because the client has moved from a foreign controller to controller on the same subnet as the current anchor.

Handoff Requests Sent

Number of clients that have associated with controller and have been announced to the mobility group.

Handoff Replies Received

Number of handoff replies that have been received in response to the requests sent.

Handoff as Local Received

Number of handoffs in which the entire client session has been transferred.

Handoff as Foreign Received

Number of handoffs in which the client session was anchored elsewhere.

Handoff Denies Received

Number of handoffs that were denied.

Anchor Request Sent

Number of anchor requests that were sent for a three party (foreign to foreign) handoff. Handoff was received from another foreign and the new controller is requesting the anchor to move the client.

Anchor Deny Received

Number of anchor requests that were denied by the current anchor.

Anchor Grant Received

Number of anchor requests that were approved by the current anchor.

Anchor Transfer Received

Number of anchor transfers that were received by the current anchor.

RTS Threshold

Indicates the number of octets in an MPDU, below which an RTS/CTS handshake is not performed.

Note An RTS/CTS handshake is performed at the beginning of any frame exchange sequence where the MPDU is a data or management type, the MPDU has an individual address in the Address1 field, and the length of the MPDU is greater than this threshold. Setting this attribute higher than the maximum MSDU size turns off the RTS/CTS handshake for data or management type frames transmitted by this STA. Setting this attribute to zero turns on the RTS/CTS handshake for all transmitted data or management type frames.

Short Retry Limit

The maximum number of transmission attempts of a frame (less than or equal to dot11RTSThreshold) made before a failure condition is indicated. The default value is 7.

Long Retry Limit

The maximum number of transmission attempts of a frame (greater than dot11RTSThreshold) made before a failure condition is indicated. The default value is 4.

Max Tx MSDU Lifetime

The elapsed time in TU, after the initial transmission of an MSDU, after which further attempts to transmit the MSDU are terminated. The default value is 512.

Max Rx Lifetime

The elapsed time in TU, after the initial reception of a fragmented MMPDU or MSDU, after which further attempts to reassemble the MMPDU or MSDU are terminated. The default value is 512.

TI Threshold

The threshold being used to detect a busy medium (frequency). CCA shall report a busy medium upon detecting the RSSI above this threshold.

Channel Agility Enabled

Physical channel agility functionality is or is not implemented.

Medium Occupancy Limit

Indicates the maximum amount of time, in TU, that a point coordinator may control the usage of the wireless medium without relinquishing control for long enough to allow at least one instance of DCF access to the medium. The default value is 100, and the maximum value is 1000.

CFP Period

The number of DTIM intervals between the start of CFPs. It is modified by MLME-START.request primitive.

CFP Max Duration

The maximum duration of the CFP in TU that may be generated by the PCF. It is modified by MLME-START.request primitive.

CF Pollable

When this attribute is implemented, it indicates that the client is able to respond to a CF-Poll with a data frame within a SIFS time. This attribute is not implemented if the STA is not able to respond to a CF-Poll with a data frame within a SIFS time.

CF Poll Request

Specifies whether CFP is requested by the client.

DTIM Period

The number of beacon intervals that shall elapse between transmission of Beacon frames containing a TIM element whose DTIM Count field is 0. This value is transmitted in the DTIM Period field of Beacon frames.

Grouping Mode

Dynamic grouping has two modes: on and off. When the grouping is off, no dynamic grouping occurs. Each controller optimizes only its own access point's parameters. When grouping is on, the controller forms groups and elects leaders to perform better dynamic parameter optimization.

Grouping Role

There are five grouping roles:

–None—This grouping role appears when the RF Group Mode is configured as Off.

–Auto-Leader—This grouping role appears when the RF Group Mode is configured as Automatic and the controller is elected as a leader by the automatic grouping algorithm.

–Auto-Member—This grouping role appears when the RF Group Mode is configured as Automatic and the controller is selected as a member by the automatic grouping algorithm.

–Static-Leader—This grouping role appears when the RF Group Mode is configured as Leader.

–Static-member—This grouping role appears when the RF Group Mode is configured as automatic and the controller joins the leader as a result of the join request from the leader.

Group Leader IP Address

This is the IP address of the group leader.

Group Leader MAC Address

This is the MAC address of the group leader for the group containing this controller.

Is 802.11a Group Leader

Yes, if this controller is the group leader or No if the controller is not the group leader.

Last Update Time (secs)

The elapsed time since the last group update in seconds. This is only valid if this controller is a group leader.

Group Update Interval (secs)

When grouping is on, this interval (in seconds) represents the period with which the grouping algorithm is run by the Group Leader. Grouping algorithm will also run when the group contents changes and the automatic grouping is enabled. A dynamic grouping can be started upon request from the system administrator. Default value is 3600 seconds.

Group Member Name

Name of group member(s).

Group Member IP Address

IP address of group member(s).

Member Join Reason

Current state of the member(s).

RTS Threshold

Indicates the number of octets in an MPDU, below which an RTS/CTS handshake is not performed.

Note An RTS/CTS handshake is performed at the beginning of any frame exchange sequence where the MPDU is a data or management type, the MPDU has an individual address in the Address1 field, and the length of the MPDU is greater than this threshold. Setting this attribute higher than the maximum MSDU size turns off the RTS/CTS handshake for data or management type frames transmitted by this STA. Setting this attribute to zero turns on the RTS/CTS handshake for all transmitted data or management type frames.

Short Retry Limit

The maximum number of transmission attempts of a frame (less than or equal to dot11RTSThreshold) made before a failure condition is indicated. The default value is 7.

Long Retry Limit

The maximum number of transmission attempts of a frame (greater than dot11RTSThreshold) made before a failure condition is indicated. The default value is 4.

Max Tx MSDU Lifetime

The elapsed time in TU, after the initial transmission of an MSDU, after which further attempts to transmit the MSDU are terminated. The default value is 512.

Max Rx Lifetime

The elapsed time in TU, after the initial reception of a fragmented MMPDU or MSDU, after which further attempts to reassemble the MMPDU or MSDU are terminated. The default value is 512.

TI Threshold

The threshold being used to detect a busy medium (frequency). CCA shall report a busy medium upon detecting the RSSI above this threshold.

Channel Agility Enabled

Physical channel agility functionality is or is not implemented.

Medium Occupancy Limit

Indicates the maximum amount of time, in TU, that a point coordinator may control the usage of the wireless medium without relinquishing control for long enough to allow at least one instance of DCF access to the medium. The default value is 100, and the maximum value is 1000.

CFP Period

The number of DTIM intervals between the start of CFPs. It is modified by MLME-START.request primitive.

CFP Max Duration

The maximum duration of the CFP in TU that may be generated by the PCF. It is modified by MLME-START.request primitive.

CF Pollable

When this attribute is implemented, it indicates that the client is able to respond to a CF-Poll with a data frame within a SIFS time. This attribute is not implemented if the STA is not able to respond to a CF-Poll with a data frame within a SIFS time.

CF Poll Request

Specifies whether CFP is requested by the client.

DTIM Period

The number of beacon intervals that shall elapse between transmission of Beacon frames containing a TIM element whose DTIM Count field is 0. This value is transmitted in the DTIM Period field of Beacon frames.

Grouping Mode

Dynamic grouping has two modes: on and off. When the grouping is off, no dynamic grouping occurs. Each controller optimizes only its own access point's parameters. When grouping is on, the controller forms groups and elects leaders to perform better dynamic parameter optimization.

Grouping Role

There are five grouping roles:

–None—This grouping role appears when the RF Group Mode is configured as Off.

–Auto-Leader—This grouping role appears when the RF Group Mode is configured as Automatic and the controller is elected as a leader by the automatic grouping algorithm.

–Auto-Member—This grouping role appears when the RF Group Mode is configured as Automatic and the controller is selected as a member by the automatic grouping algorithm.

–Static-Leader—This grouping role appears when the RF Group Mode is configured as Leader.

–Static-member—This grouping role appears when the RF Group Mode is configured as automatic and the controller joins the leader as a result of the join request from the leader.

Group Leader IP Address

This is the IP address of the group leader.

Group Leader MAC Address

This is the MAC address of the group leader for the group containing this controller.

Is 802.11a Group Leader

Yes, if this controller is the group leader or No if the controller is not the group leader.

Last Update Time (secs)

The elapsed time since the last group update in seconds. This is only valid if this controller is a group leader.

Group Update Interval (secs)

When grouping is on, this interval (in seconds) represents the period with which the grouping algorithm is run by the Group Leader. Grouping algorithm will also run when the group contents changes and the automatic grouping is enabled. A dynamic grouping can be started upon request from the system administrator. Default value is 3600 seconds.

Group Member Name

Name of group member(s).

Group Member IP Address

IP address of group member(s).

Member Join Reason

Current state of the member(s).

Search for Switches by

Choose All Switches, IP Address, or Switch Name. You can use wildcards (*). For example, if you select IP Address and enter 172*, NCS returns all switches that begin with IP address 172.

Items per page

Select the number of switches to return per page.

IP Address

The IP address assigned to the switch. Click a list item to view access point details.

Device Name

Name of the switch.

Device Type

Type of switch.

Reachability Status

Indicates OK if the switch is reachable or Unreachable if the switch is not reachable.

Endpoint Count

Number of endpoints on the switch.

IP Address

IP address of the switch.

Device Name

Name of the switch.

Device Type

Switch type.

Up Time

Time since last reboot.

System Time

Time on the switch.

Reachability Status

which can be:

•Reachable

•Unreachable

Location

Location of the switch.

Contact

Contact name for the switch.

Cisco Identity Capable

Specifies if the switch is identity-capable.

Location Capable

Specifies if the switch is capable of storing the location information.

CPU Utilization

Displays a graph of the maximum, average, and minimum CPU utilization over the specified amount of time.

Name

Product type.

Description

Description of UDI.

Product ID

Orderable product identifier.

Version ID

Version of product identifier.

Serial Number

Unique product serial number.

Software Version

Version of software currently running on the switch.

Model No.

Model number of the switch.

Number of Ports Up

Number of ports up on the switch.

Number of Ports Down

Number of ports down on the switch.

Displays a graph of the maximum, average, and minimum memory utilization over the specified amount of time.

Type

Type of memory.

Name

Name assigned to the memory pool.

Used (MB)

Amount of memory (in MB) used.

Free (MB)

Amount of memory (in MB) available.

Model Name

Model name of the power supply.

Description

Description of the power supply.

Operational Status

Status of the associated power supply, which can be

•Green—Power supply is operational.

•Red—Power supply is inoperable.

Manufacturer Name

Name of the power supply manufacturer.

Free

Power supply free slots.

Vendor Equipment Type

Description of vendor equipment type.

Name

Name of fan.

Description

Description of fan.

Operational Status

Status of the fan which can be

•Green—Fan is operational.

•Red—Fan is inoperable.

Vendor Equipment Type

Description of vendor equipment type.

Serial Number

Serial number of the fan.

Product Name

Name of the module.

Physical Location

Location where the module is contained.

Number of Ports

Number of ports supported by the module.

Operational State

Operational status of the module.

Equipment Type

Type of equipment.

Inline Power Capable

Specifies whether the module has inline power capability.

VLAN ID

ID of the VLAN.

VLAN Name

Name of the VLAN.

VLAN Type

Type of VLAN.

VTP Domain Name

Name of the VTP domain.

VTP Version

Version of VTP in use.

VTP Mode

The VTP mode, which can be:

•Client

•Server

•Transparent—Does not generate or listen to VTP messages, but forwards messages.

•Off—Does not generate, listen to, or forward any VTP messages.

Pruning Enabled

Specifies whether VTP pruning is enabled.

Port Name

Name of the physical port.

Port Description

Description of the physical port.

Residing Module

Module on which the physical port resides.

Vendor Equipment Type

Description of vendor equipment type.

Sensor Name

Name of the sensor.

Sensor Description

Description of the sensor.

Type

Type of sensor.

Vendor Sensor Type

Description of vendor sensor type.

Equipment Name

Name of equipment.

Precision

When in the range 1 to 9, Sensor Precision is the number of decimal places in the fractional part of a Sensor Value fixed-point number. When in the range -8 to -1, Sensor Precision is the number of accurate digits in a SensorValue fixed-point number.

Status

Operational status of the sensor.

STP Instance ID

ID of the STP. Click on a STP Instance ID to see the spanning tree details as described in Viewing Spanning Tree Details.

VLAN ID

ID of the VLAN.

Root Path Cost

Root cost of the path.

Designated Root

Forwarding port.

Bridge Priority

Priority of the bridge.

Root Bridge Priority

Priority number of the root bridge.

Max Age (sec)

STP timer value for maximum age (in seconds).

Hello Interval (sec)

STP timer value (in seconds).

STP Port

Name of the STP port.

Port Role

Role of the port.

Port Priority

Priority number of the port.

Path Cost

Cost of the path.

Port State

State of the port.

Port Type

Type of port.

MAC Address

MAC address of the stack.

Role

Role of the stack, which can be:

•Master—Stack master

•Member—Active member of the stack

•Not Member—Non-active stack member

Switch Priority

Priority number of the switch.

State

Current state of the stack.

Software Version

Software image running on the switch.

Name

Name of the Ethernet interface. Click on an Ethernet interface name to see details as described in Monitoring Switch Ethernet Interface Details.

MAC Address

MAC address of the Ethernet interface.

Speed (Mbps)

Estimate of the Ethernet interface's current bandwidth in bits per second.

Operational Status

Current operational state of the Ethernet interface.

MTU

Size of the largest packet that can be sent/received on the interface.

Desired VLAN Mode

VLAN mode.

Access VLAN

VLAN on which the port is configured.

Name

Name of the Ethernet interface.

Admin Status

Administration status of the interface.

Duplex Mode

Duplex mode configured on the interface.

Operational VLAN Mode

Specifies the operational mode of the VLAN switch port, which can be either an access port or a trunk port.

Desired VLAN Mode

VLAN mode, which can be truck, access, dynamic, or desirable.

Access VLAN

VLAN on which the port is configured.

Operational Truck Encapsulation

Trunk encapsulation, which can be 802.1Q or none.

Native VLAN

Untagged VLAN on the trunk switch port.

Prune Eligible

Specifies whether VLANs on the trunk port can be pruned.

Allows VLANs

List of allowed VLANs on the trunk port.

Desired Trunking Encapsulation

Trunk encapsulation.

Trunking Encapsulation Negotiation

Specifies that the interface negotiate with the neighboring interface to become an ISL (preferred) or 802.1Q trunk, depending on the configuration and capabilities of the neighboring interface.

Interface

Name of the interface.

IP Address

IP address of the interface.

Address Type

Type of address (IPv4 or IPv6).

Port Name

Name of the VLAN port.

VLAN ID

ID of the VLAN port.

Operational Status

Current operational state of the VLAN interface.

Admin Status

Current administrative state of the VLAN interface.

Port Type

Type of VLAN port.

Maximum Speed (Mbps)

Maximum supported speed for the VLAN interface.

MTU

Size of the largest packet that can be sent/received on the VLAN interface.

Name

Name of the EtherChannel interface.

Channel Group ID

Numeric identifier for the EtherChannel.

Control Method

Protocol for managing the EtherChannel, which can be LACP or TAgP.

Actor Admin Key

Channel Identifier.

Number of (LAG) Members

Number of ports configured.

IP Address

IP address of the client.

MAC Address

MAC address of the client.

User Name

User Name of the client.

Vendor Name

Vendor Name of the client.

Map Location

Location of the client.

VLAN

VLAN on which the client is configured.

Interface

Interface on which the client is configured.

Association Time

Timestamp of the client association.

Authorization Profile Name

Authorization Profile Name stored.

AP Name Ethernet MAC

The name assigned to the access point. Click a list item to view access point details. See the "Monitoring Access Points Details" section on page 5-56 for more information.

IP Address

Local IP address of the access point.

Radio

Protocol of the rogue access point is 802.11a, 802.11b or 802.11g. Click a list item to view access point radio details. See the "Monitoring Access Point Radio Details" section on page 5-68 for more information.

Map Location

Click a list item to go to the location indicated on the list.

Controller

Click a list item to display a graphic and information about the controller. See the "Monitoring System Summary" section on page 5-4 for more information.

Client Count

Displays the total number of clients currently associated with the controller.

Admin Status

Displays the administration state of the access point as either enabled or disabled.

AP Mode

Displays the operational mode of the access point.

Oper Status

Displays the operational status of the Cisco WLAN Solution device, either Up or Down. If the admin status is disabled, the operation status is labeled as down and there will be no alarms.

Alarm Status

Alarms are color coded as follows:

–Clear—No Alarm

–Red—Critical Alarm

–Orange—Major Alarm

–Yellow—Minor Alarm

Note This status is radio alarm status ONLY and does not includes the admin status in the operation status.

AP Type

Indicates the type of access point (unified or autonomous).

Antenna Azim. Angle

Indicates the horizontal angle of the antenna.

Antenna Diversity

Indicates if antenna diversity is enabled or disabled. Antenna diversity refers to the access point sampling the radio signal from two integrated antenna ports to choose the preferred antenna.

Antenna Elev. Angle

Indicates the elevation angle of the antenna.

Antenna Gain

The peak gain of the dBi of the antenna for directional antennas and the average gain in dBi for omni-directional antennas connected to the wireless network adapter. The gain is in multiples of 0.5 dBm. An integer value 4 means 4 x 0.5 = 2 dBm of gain.

Antenna Mode

Indicates the antenna mode such as omni, directional, or non-applicable.

Antenna Name

Indicates the antenna name or type.

Audit Status

Indicates one of the following audit statuses:

–Mismatch—Config differences were found between NCS and controller during the last audit.

–Identical—No config differences were found during the last audit.

–Not Available—Audit status is unavailable.

Base Radio MAC

Indicates the MAC address of the base radio.

Bridge Group Name

Indicates the name of the bridge group used to group the access points, if applicable.

CDP Neighbors

Indicates all directly connected Cisco devices.

Channel Control

Indicates whether the channel control is automatic or custom.

Channel Number

Indicates the channel on which the Cisco Radio is broadcasting.

Controller Port

Indicates the number of controller ports.

Google Earth Location

Indicates whether or not a Google Earth location is assigned and indicates the location.

Location

Indicates the physical location of the access point.

Node Hops

Indicates the number of hops between access points.

OfficeExtend AP

Specifies whether or not OfficeExtend access is enabled. If it is disabled, the access point is remotely deployed which increases the security risk.

PoE Status

Indicates the power over ethernet status of the access point. The possible values include:

–Low—The access point draws low power from the ethernet.

–Lower than 15.4 volts—The access point draws lower than 15.4 volts from the ethernet.

–Lower than 16.8 volts—The access point draws lower than 16.8 volts from the ethernet.

–Normal—The power is high enough for the operation of the access point.

–Not Applicable—The power source is not from the ethernet.

Primary Controller

Indicates the name of the primary controller for this access point.

Radio MAC

Indicates the radio MAC address.

Reg. Domain Supported

Indicates whether or not the regulatory domain is supported.

Serial Number

Indicates the access point serial number.

Slot

Indicates the slot number.

Tx Power Control

Indicates whether the transmission power control is automatic or custom.

Tx Power Level

Indicates the transmission power level.

Up Time

Indicates how long the access point has been up in days, hours, minutes and seconds.

WLAN Override Names

Indicates the WLAN override profile names.

WLAN Override

Indicates whether WLAN Override is enabled or disabled.

Load

Generates a report with load information.

Monitoring Traffic Load, page 5-48

Dynamic Power Control

Generates a report with Dynamic Power Control information.

Monitoring Dynamic Power Control, page 5-49

Noise

Generates a report with Noise information.

Monitoring Access Points Noise, page 5-50

Interference

Generates a report with Interference information.

Monitoring Access Points Interference, page 5-50

Coverage (RSSI)

Generates a report with Coverage (RSSI) information.

Monitoring Access Points Coverage (RSSI), page 5-51

Coverage (SNR)

Generates a report with Coverage (SNR) information.

Monitoring Access Points Coverage (SNR), page 5-51

Up/Down Statistics

Time in days, hours and minutes since the last reboot. Generates a report with Up Time information.

Monitoring Access Points Up/Down Statistics, page 5-51

Voice Statistics

Generates a report for selected access points showing radio utilization by voice traffic.

Monitoring Access Points Voice Statistics, page 5-52

Voice TSM Table

Generates a report for selected access points and radio, organized by client device showing QoS status, PLR, and latency of its voice traffic stream.

Monitoring Access Points Voice TSM Table, page 5-52

Voice TSM Reports

Graphical representation of the TSM table except that metrics from the clients are averaged together on the graphs.

Monitoring Access Points Voice TSM Reports, page 5-54

802.11 Counters

Displays counters for access points at the MAC layer. Statistics such as error frames, fragment counts, RTS/CTS frame count, and retried frames are generated based on the filtering criteria and can help interpret performance (and problems, if any) at the MAC layer.

Monitoring Access Points 802.11 Counters, page 5-54

AP Profile Status

Displays access point load, noise, interference, and coverage profile status.

Monitoring Access Points AP Profile Status, page 5-55

Air Quality vs. Time

Displays the air quality index of the wireless network during the configured time duration.

Monitoring Air Quality, page 5-56

Traffic Stream Metrics

Useful in determining the current and historical quality of service (QoS) for given clients at the radio level. It also displays uplink and downlink statistics such as packet loss rate, average queuing delay, distribution of delayed packets, and roaming delays.

Monitoring Access Points Traffic Stream Metrics, page 5-55

Tx Power and Channel

Displays the channel plan assignment and transmit power level trends of devices based on the filtering criteria used when the report was generated. It could help identify unexpected behavior or issues with network performance.

Monitoring Access Points Tx Power and Channel, page 5-55

VoIP Calls Graph

Helps analyze wireless network usage from a voice perspective by providing details such as the number and duration of VoIP calls (per radio) on the network over time. To be able to gather useful data from this report, VoIP snooping must be enabled on the WLAN. This report displays information in a graph.

Monitoring VoIP Calls, page 5-56

VoIP Calls Table

Provides the same information as the VoIP Calls Graph report but in table form.

Monitoring VoIP Calls, page 5-56

Voice Statistics

Helps analyze wireless network usage from a voice perspective by providing details such as percentage of bandwidth used by voice clients, voice calls, roaming calls, and rejected calls (per radio) on the network. To be able to gather useful data from this report, make sure call admission control (CAC) is supported on voice clients.

Monitoring Voice Statistics, page 5-56

Worst Air Quality APs

Monitoring Air Quality, page 5-56

AP Name

Click the access point name to view access point details. See the "Monitoring Access Points Details" section on page 5-56 for more information.

Radio

Protocol of the rogue access point is either 802.11a, 802.11b or 802.11g. Click the radio to view On-Demand Statistics for this access point. See the "Monitoring Access Point Radio Details" section on page 5-68 for more information.

Attached Client Count

Number of clients attached (Actual and Threshold.)

Channel Utilization

802.11a RF utilization threshold between 0 and 100 percent (Actual and Threshold).

Receive Utilization

802.11a or 802.11b/g RF receive utilization threshold between 0 and 100 percent.

Transmit Utilization

802.11a or 802.11b/g RF transmit utilization threshold between 0 and 100 percent.

Status

Status of the client connection.

AP Name

This is the name assigned to the access point. Click an access point name in the list to access its parameters. See the "Monitoring Access Points Details" section on page 5-56 for more information.

Radio

Protocol of the rogue access point is either 802.11a, or 802.11b/g. Click a Cisco Radio on the list to access its parameters. See the "Monitoring Access Point Radio Details" section on page 5-68 for more information.

Current Power Level

Displays the operating transmit power level from the transmit power table. Access point transmit power level: 1 = Maximum power allowed per Country Code setting, 2 = 50% power, 3 = 25% power, 4 = 6.25 to 12.5% power, and 5 = 0.195 to 6.25% power.

Note The power levels and available channels are defined by the Country Code Setting, and are regulated on a country by country basis.

Power Assignment Mode

Dynamic transmit power assignment has three modes:

–Automatic—The transmit power will be periodically updated for all Cisco 1000 Series lightweight access points that permit this operation.

–On Demand—Transmit power is updated when the Assign Now button is selected.

–Fixed—No dynamic transmit power assignments occur and value are set to their global default. The default is Automatic.

–Recommended Power Level.

Time

Time that the statistics were gathered from the access point(s).

Client MAC

MAC address of the client. This shows a list of the clients evaluated during the most recent 90 second interval. The client could be a VoIP phone, laptop, PDA and refers to any client attached to the access point collecting measurements.

QoS

QoS values (packet latency, packet jitter, packet loss, roaming time) which can affect the WLAN are monitored. Access points and clients measure the metrics, access points collect the measurements and send them to the controller. The access points update the controller with traffic stream metric information every 90 seconds and 10 minutes of data is stored at one time.

% PLR (Downlink)

Percentage of packets lost on the downlink (access point to client) during the 90 second interval.

% PLR (Uplink)

Percentage of packets lost on the uplink (client to access point) during the 90 second interval.

Avg Queuing Delay (ms) (Downlink)

Average queuing delay in milliseconds for the downlink. Average packet queuing delay is the average delay of voice packets traversing the voice queue. Packet queue delay is measured beginning when a packet is queued for transmission and ending when the packet is successfully transmitted. It includes time for re-tries, if needed.

Avg Queuing Delay (ms) (Uplink)

Average queuing delay in milliseconds for the uplink. Average packet queuing delay is the average delay of voice packets traversing the voice queue. Packet queue delay is measured beginning when a packet is queued for transmission and ending when the packet is successfully transmitted. It includes time for re-tries, if needed.

% Packets > 40 ms Queuing Delay

Percentage of queuing delay packets greater than 40 ms.

% Packets > 20 ms Queuing Delay

Percentage of queuing delay packets greater than 20 ms.

Roaming Delay

Roaming delay in milliseconds. Roaming delay, which is measured by clients, is measured beginning when the last packet is received from the old access point and ending when the first packet is received from the new access point after a successful roam.

Average Queuing Delay (ms)

Average queuing delay in milliseconds. Average packet queuing delay is the average delay of voice packets traversing the voice queue. Packet queue delay is measured beginning when a packet is queued for transmission and ending when the packet is successfully transmitted. It includes time for re-tries, if needed.

% Packet with less than 10 ms delay

Percentage of packets with less than 10 milliseconds delay.

% Packet with more than 10 < 20 ms delay

Percentage of packets with more than 10 milliseconds delay but less than 20 milliseconds delay.

% Packet with more than 20 < 40 ms delay

Percentage of packets with more than 20 milliseconds delay but less than 40 milliseconds delay.

% Packet with more than 40 ms delay

Percentage of packets with more than 40 milliseconds delay.

Packet Loss Ratio

Ratio of lost packets.

Total Packet Count

Number of total packets.

Roaming Count

Number of packets exchanged for roaming negotiations in this 90 seconds metrics page.

Roaming Delay

Roaming delay in milliseconds.

AP Name

Operator defined name of access point.

AP IP address, Ethernet MAC address, and Base Radio MAC address

IP address, Ethernet MAC address and Radio MAC address.

Country Code

The codes of the supported countries. Up to 20 countries can be supported per controller.

Note Access points may not operate properly if they are not designed for use in your country of operation. For a complete list of country codes supported per product, refer to http://www.cisco.com/en/US/docs/wireless/wcs/4.0/configuration/guide/wcscod.html.

Link Latency Settings

You can configure link latency on the controller to measure the link between an access point and the controller. See the "Configuring Link Latency Settings for Access Points" section on page 9-203 for more information.

–Current Link Latency (in msec)—The current round-trip time (in milliseconds) of heartbeat packets from the access point to the controller and back.

–Minimum Link Latency (in msec)—Because link latency has been enabled or reset, the minimum round-trip time (in milliseconds) of heartbeat packets from the access point to the controller and back.

–Maximum Link Latency (in msec)—Because link latency has been enabled or reset, the maximum round-trip time (in milliseconds) of heartbeat packets from the access point to the controller and back.

LWAPP/CAPWAP Uptime

Displays how long the LWAPP/CAPWAP connection has been active.

LWAPP?CAPWAP Join Taken Time

Displays how long the LWAPP/CAPWAP connection has been joined.

Admin Status

The administration state of the access point as either enabled or disabled.

Local

Default mode. Data clients are serviced while configured channels are scanned for noise and rogues. The access point goes off-channel for 50 ms and listens for rogues. It cycles through each channel for the period specified under the Auto RF configuration.

Note To configure Local or H-REAP access points for Cisco Adaptive wIPS feature, choose Local or H-REAP and select the Enhanced wIPS Engine Enabled check box.

Monitor

Radio receive only mode. The access point scans all configured channels every 12 seconds. Only deauthenticated packets are sent in the air with an access point configured this way. A monitor mode access point detects rogues, but it cannot connect to a suspicious rogue as a client to prepare for the sending of RLDP packets.

Note To configure access points for Cisco Adaptive wIPS feature, select Monitor. Select the Enhanced wIPS Engine Enabled check box and choose wIPS from the Monitor Mode Optimization drop-down list.
Before you can enable an access point to be in wIPS mode, you must disable the access point radios. If you do not disable the access point radio, an error message displays.

Note Once you have enabled the access point for wIPS, re-enable the radios.

Rogue Detector

The access point radio is turned off and the access point listens to wired traffic only. The controllers that operate in this mode monitor the rogue access points. The controller sends all the rogue access point and client MAC address lists to the rogue detector, and the rogue detector forwards this information to the WLC. The MAC address list is compared to what the WLC access points heard over the network. If the MAC addresses match, you can determine which rogue access points are connected on the wired network.

Sniffer

The access point captures and forwards all the packets on a particular channel to a remote machine that runs AiroPeek. These packets contain information such as timestamp, signal strength, packet size, and so on. This feature can only be enabled if you run AiroPeek, which is a third-party network analyzer software that supports the decoding of data packets. For more information on AiroPeek, see www.wildpackets.com.

H-REAP

Enables hybrid REAP for up to six access points. The H-REAP access points can switch client data traffic locally and perform client authentication locally when their connection to the controller is lost.

Note H-REAP must be selected to configure an OfficeExtend access point. When the AP mode is H-REAP, H-REAP configuration options display including the option to enable OfficeExtend AP and to enable Least Latency Controller Join.

Bridge

This is a special mode where an autonomous access point functions as a wireless client and connects to a lightweight access point. The bridge and its wired clients are listed as client in NCS if the AP mode is set to Bridge, and the access point is bridge capable.

Spectrum Expert

This mode allows a CleanAir-enabled access point to be used extensively for interference detection on all monitored channels. All other functions such as IDS scanning and Wi-Fi are suspended.

Enhanced wIPs Engine

Enabled or Disabled, to enable the monitoring of the security attacks using Cisco Adaptive wIPS feature.

Operational Status

Registered or Not Registered, as determined by the controller.

Registered Controller

The controller to which the access point is registered. Click to display the registered controller details. See the "Monitoring System Summary" section on page 5-4 for more information.

Primary Controller

The name of the primary controller for this access point.

Port Number

The SNMP name of the access point primary controller. The access point attempts to associate with this controller first for all network operations and in the event of a hardware reset.

AP Uptime

Displays how long the access point has been active to receive and transmit.

Map Location

Customer-definable location name for the access point. Click to look at the actual location on a map. See Monitor > Access Points > name > Map Location for more information.

Google Earth Location

Indicates whether a Google Earth location is assigned.

Location

The physical location where the access point is placed (or Unassigned).

Statistics Timer

This counter sets the time in seconds that the access point sends its DOT11 statistics to the controller.

PoE Status

The power over ethernet status of the access point. The possible values include:

–Low—The access point draws low power from the Ethernet.

–Lower than 15.4 volts—The access point draws lower than 15.4 volts from the Ethernet.

–Lower than 16.8 volts—The access point draws lower than 16.8 volts from the Ethernet.

–Normal—The power is high enough for the operation of the access point.

–Not Applicable—The power source is not from the Ethernet.

Rogue Detection

Indicates whether or not Rogue Detection is enabled. See the "" section on page 5-152 for more information on rogue detection.

Note Rogue detection is disabled automatically for OfficeExtend access points because these access points, which are deployed in a home environment, are likely to detect a large number of rogue devices. For more information regarding OfficeExtend access points, see the Cisco Wireless LAN Controller Configuration Guide.

OfficeExtend AP

Indicates whether or not the access point is enabled as an OfficeExtend access point. The default is Enabled.

Encryption

Indicates whether or not encryption is enabled.

Note Enabling or disabling encryption functionality causes the access point to reboot which then causes a loss of connectivity for clients.

Note DTLS data encryption is enabled automatically for OfficeExtend access points to maintain security. Encryption is only available if the access point is connected to a 5500 series controller with a Plus license.

Least Latency Join

The access point switches from a priority order search (primary, secondary, and then tertiary controller) to a search for the controller with the best latency measurement (least latency). The controller with the least latency provides the best performance.

Telnet Access

Indicates whether or not Telnet Access is enabled.

SSH Access

Indicates whether or not SSH is enabled.

Note An OfficeExtend access point may be connected directly to the WAN which could allow external access if the default password is used by the access point. Because of this, Telnet and SSH access are disabled automatically for OfficeExtend access points.

Software Version

The operating system release.version.dot.maintenance number of the code currently running on the controller.

Boot Version

The operating system bootloader version number.

AP Type

Type of Access Point

AP Model

Access point model number.

Cisco IOS Version

The Cisco IOS version details

AP Certificate Type

Either Self Signed or Manufacture Installed.

H-REAP Mode Supported

Indicates if H-REAP mode is supported or not.

Profile Name

Click the user-assigned profile name to view wIPS profile details.

Profile Version

Name

Name of Cisco AP for access points.

Description

Description of access point.

Product ID

Orderable product identifier.

Version ID

Version of product identifier.

Serial Number

Unique product serial number.

Run Ping Test Link

Click to ping the access point. The results are displayed in a pop-up dialog box.

Alarms Link

Click to display alarms associated with this access point.

Events Link

Click to display events associated with this access point.

AP Name

Operator defined name of access point.

AP IP address and Ethernet MAC address

IP address, Ethernet MAC address of the access point.

AP UpTime

Indicates how long the access point has been up in number of days, hours, minutes, and seconds.

Map Location

Customer-definable location name for the access point. Click to look at the actual location on a map. See the"Monitoring Maps" section on page 6-8 for more information.

WGB Mode

Indicates whether or not the access point is in work group bridge mode.

SysObjectId

SysDescription

SysLocation

SysContact

System Object ID.

The system device type and current version of firmware.

The physical location of the device, such as a building name or room in which it is installed.

The name of the system administrator responsible for the device.

Software Version

The operating system release.version.dot.maintenance number of the code currently running on the controller.

CPU Utilization

Displays the maximum, average, and minimum CPU utilization over the specified amount of time.

Memory Utilization

Displays the maximum, average, and minimum memory utilization over the specified amount of time.

AP Type

Autonomous or lightweight.

AP Model

The Access Point model number.

AP Serial Number

Unique serial number for this access point.

H-REAP Mode Supported

If H-REAP mode is supported or not.

Name

Name of Cisco AP for access points.

Description

Description of access point.

Product ID

Orderable product identifier.

Version ID

Version of product identifier.

Serial Number

Unique product serial number.

Admin Status

Indicates whether the Ethernet interface is enabled.

Operational Status

Indicates whether the Ethernet interface is operational.

Rx Unicast Packets

Indicates the number of unicast packets received.

Tx Unicast Packets

Indicates the number of unicast packets sent.

Rx Non-Unicast Packets

Indicates the number of non-unicast packets received.

Tx Non-Unicast Packets

Indicates the number of non-unicast packets sent.

Protocol

802.11a/n or 802.11b/g/n.

Admin Status

Indicates whether the access point is enabled or disabled.

CleanAir Capable

Indicates whether the access point is able to use CleanAir.

CleanAir Status

Indicates the status of CleanAir.

Channel Number

Indicates the channel on which the Cisco Radio is broadcasting.

Extension Channel

Indicates the secondary channel on which Cisco radio is broadcasting.

Power Level

Access Point transmit power level: 1 = Maximum power allowed per Country Code setting, 2 = 50% power, 3 = 25% power, 4 = 6.25 to 12.5% power, and 5 = 0.195 to 6.25% power.

Channel Width

Indicates the channel bandwidth for this radio interface. See the "Configuring 802.11a/n RRM Dynamic Channel Allocation" section on page 9-121 for more information on configuring channel bandwidth.

Minimum (default) setting is 20 MHz. Maximum setting is the maximum channel width supported by this radio.

Antenna Name

Identifies the type of antenna.

AP Name

Name of the Access Point.

Link speed

Indicates the speed of the interface in Mbps.

RX Bytes

Indicates the total number of bytes in the error-free packets received on the interface.

RX Unicast Packets

Indicates the total number of unicast packets received on the interface.

RX Non-Unicast Packets

Indicates the total number of non-unicast or mulitcast packets received on the interface.

Input CRC

Indicates the total number of CRC error in packets received on the interface.

Input Errors

Indicates the sum of all errors in the packets while receiving on the interface.

Input Overrun

Indicates the number of times the receiver hardware was incapable of handing received data to a hardware buffer because the input rate exceeded the receiver capability to handle the data.

Input Resource

Indicates the total number of resource errors in packets received on the interface.

Runts

Indicates the number of packets that are discarded because they are smaller than the medium minimum packet size.

Throttle

Indicates the total number of times the interface advised a sending NIC that it was overwhelmed by packets being sent and to slow the pace of delivery.

Output Collision

Indicates the total number of packet retransmitted due to an Ethernet collision.

Output Resource

Indicates the total number of resource errors in packets transmitted on the interface.

Output Errors

Indicates the sum of all errors that prevented the final transmission of packets out of the interface.

Operational Status

Indicates the operational state of the physical Ethernet interface on the AP.

Duplex

Indicates the duplex mode of an interface.

TX Bytes

Indicates the total number of bytes in the error-free packets transmitted on the interface.

TX Unicast Packets

Indicates the total number of unicast packets transmitted on the interface.

TX Non-Unicast Packets

Indicates the total number of non-unicast or mulitcast packets transmitted on the interface.

Input Aborts

Indicates the total number of packet aborted while receiving on the interface.