To configure authorization policy for all Cisco lightweight access points joined to the switch, use the
apauth-listap-policy command. To disable authorization policy for all Cisco lightweight access points joined to the switch, use the no form of this command.
Enables the locally significant certificate authorization policy.
lsc
Enables access points with locally significant certificates to connect.
mic
Enables access points with manufacture-installed certificates to connect.
ssc
Enables access points with self signed certificates to connect.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to enable the access point authorization policy:
Switch(config)# ap auth-list ap-policy authorize-ap
This example shows how to enable the locally significant certificate authorization policy:
Switch(config)# ap auth-list ap-policy authorize-lsc-ap
This example shows how to enable access points with locally significant certificates to connect:
Switch(config)# ap auth-list ap-policy lsc
This example shows how to enable access points with manufacture-installed certificates to connect:
Switch(config)# ap auth-list ap-policy mic
This example shows how to enable access points with self-signed certificates to connect:
Switch(config)# ap auth-list ap-policy ssc
ap bridging
To enable Ethernet to 802.11 bridging on a Cisco lightweight access point, use the
apbridging command. To disable Ethernet to 802.11 bridging on a Cisco lightweight access point, use the
no form of this command.
apbridging
noapbridging
Syntax Description
This command has no keywords and arguments.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to enable Ethernet-to-Ethernet bridging on a lightweight access point:
Switch(config)# ap bridging
This example shows how to disable Ethernet-to-Ethernet bridging on a lightweight access point:
Switch(config)# no ap bridging
ap capwap backup
To configure a primary or secondary backup switch for all access points that are joined to a specific switch, use the apcapwapbackup command.
To configure the multicast address used by all access points to receive multicast traffic when multicast forwarding is enabled and to configure the outer Quality of Service (QoS) level of those multicast packets sent to the access points, use the apcapwapmulticast command.
To configure Control and Provisioning of Wireless Access Points (CAPWAP) control packet retransmit count and control packet retransmit interval, use the apcapwapretransmit command.
Specifies the Cisco lightweight access point discovery timeout.
Note
The Cisco lightweight access point discovery timeout is how long a Cisco switch waits for an unresponsive access point to answer before considering that the access point failed to respond.
seconds
Cisco lightweight access point discovery timeout from 1 to 10 seconds.
Note
The default is 10 seconds.
fast-heartbeat-timeoutlocal
Enables the fast heartbeat timer that reduces the amount of time it takes to detect a switch failure for local or all access points.
seconds
Small heartbeat interval (from 1 to 10 seconds) that reduces the amount of time it takes to detect a switch failure.
Note
The fast heartbeat time-out interval is disabled by default.
heartbeat-timeout
Specifies the Cisco lightweight access point heartbeat timeout.
Note
The Cisco lightweight access point heartbeat timeout controls how often the Cisco lightweight access point sends a heartbeat keep-alive signal to the Cisco switch.
This value should be at least three times larger than the fast heartbeat timer.
seconds
Cisco lightweight access point heartbeat timeout value from 1 to 30 seconds.
Note
The default is 30 seconds.
primary-discovery-timeout
Specifies the access point primary discovery request timer.
The timer determines the amount of time taken by an access point to discovery the configured primary, secondary, or tertiary switch.
seconds
Access point primary discovery request timer from 30 to 3600 seconds.
Note
The default is 120 seconds.
primed-join-timeout
Specifies the authentication timeout.
Determines the time taken by an access point to determine that the primary switch has become unresponsive. The access point makes no further attempts to join the switch until the connection to the switch is restored.
seconds
Authentication response timeout from 120 to 43200 seconds.
Note
The default is 120 seconds.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to configure an access point discovery timeout with the timeout value of 7:
Switch(config)# ap capwap timers discovery-timeout 7
This example shows how to enable the fast heartbeat interval for all access points:
Switch(config)# ap capwap timers fast-heartbeat-timeout 6
This example shows how to configure an access point heartbeat timeout to 20:
Switch(config)# ap capwap timers heartbeat-timeout 20
This example shows how to configure the access point primary discovery request timer to 1200 seconds:
Switch(config)# ap capwap timers primary-discovery-timeout 1200
This example shows how to configure the authentication timeout to 360 seconds:
Switch(config)# ap capwap timers primed-join-timeout 360
Configures the CAPWAP control packet retransmit count and interval.
ap cdp
To enable the Cisco Discovery Protocol (CDP) on a Cisco lightweight access point, use the
apcdp command. To disable the Cisco Discovery Protocol (CDP) on a Cisco lightweight access point, use the
no form of this command.
The noapcdp command disables CDP on all access points that are joined to the switch and all access points that join in the future. CDP remains disabled on both current and future access points even after the switch or access point reboots. To enable CDP, enter the apcdp command.
Note
CDP over Ethernet/radio interfaces is available only when CDP is enabled. After you enable CDP on all access points joined to the switch, you can disable and then reenable CDP on individual access points using the apnameCisco-APcdp command. After you disable CDP on all access points joined to the switch, you can enable and then disable CDP on individual access points.
Examples
This example shows how to
enable CDP on all access points:
Switch(config)# ap cdp
This example shows how to enable CDP for Ethernet interface number 0 on all access points:
Displays the CDP information for all access points.
ap core-dump
To enable a Cisco lightweight access point’s memory core dump settings, use the
apcore-dump command. To disable a Cisco lightweight access point’s memory core dump settings, use the
no form of this command.
Manages crash data and radio core files for an access point.
ap country
To configure one or more country codes for a switch, use the
apcountry command.
apcountrycountry-code
Syntax Description
country-code
Two-letter or three-letter country code or several country codes separated by a comma.
Command Default
US (country code of the United States of America).
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
The
Cisco switch must be installed by a network administrator or qualified IT professional and the installer must select the proper country code. Following installation, access to the unit should be password protected by the installer to maintain compliance with regulatory requirements and to ensure proper unit functionality. See the related product guide for the most recent country codes and regulatory domains.
Examples
This example shows how to configure country codes on the switch to IN (India) and FR (France):
To enable only a short preamble as defined in subclause 17.2.2.2 , use the
apdot1124ghzpreamble command. To enable long preambles (for backward compatibility with pre-802.11b devices, if these devices are still present in your network) or short preambles (recommended unless legacy pre-802.11b devices are present in the network), use the
no form of this command.
apdot1124ghzpreambleshort
noapdot1124ghzpreambleshort
Syntax Description
short
Specifies the short 802.11b preamble.
Command Default
short preambles
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
Note
You must reboot the Cisco switch (reset system) with the Save command before you can use the apdot1124ghzpreamble command.
This parameter may need to be set to long to optimize this Cisco switch for some legacy clients, including SpectraLink NetLink telephones.
This command can be used any time that the CLI interface is active.
Examples
This example shows how to enable both long and short preamblest:
Switch(config)# no ap dot11 24ghz preamble short
ap dot11 24ghz dot11g
To enable the Cisco wireless LAN solution 802.11g network, use the
apdot1124ghzdot11g command. To disable the Cisco wireless LAN solution 802.11g network, use the
no form of this command.
apdot1124ghzdot11g
noapdot1124ghzdot11g
Syntax Description
This command has no keywords and arguments.
Command Default
Enabled
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
Before you enter the apdot1124ghzdot11g command, disable the 802.11 Cisco radio with the apdot1124ghzshutdown command.
After you configure the support for the 802.11g network, use the noapdot1124ghzshutdown command to enable the 802.11 2.4 Ghz radio.
Examples
This example shows how to enable the 802.11g network:
Displays the 802.11a and 802.11b configuration information.
ap dot11 5ghz channelswitch mode
To configure a 802.11h channel switch announcement, use the
apdot115ghzchannelswitchmode command. To disable a 802.11h channel switch announcement, use the
no form of this command.
apdot115ghzchannelswitchmodevalue
noapdot115ghzchannelswitchmode
Syntax Description
value
802.11h channel announcement value.
Note
You can specify anyone of the following two values:
0—Indicates that the channel switch announcement is disabled.
1—Indicates that the channel switch announcement is enabled.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to enable the 802.11h switch announcement:
Switch(config)# ap dot11 5ghz channelswitch mode 1
ap dot11 5ghz power-constraint
To configure the 802.11h power constraint value, use the
apdot115ghzpower-constraint command. To remove the 802.11h power constraint value, use the
no form of this command.
apdot115ghzpower-constraintvalue
noapdot115ghzpower-constraint
Syntax Description
value
802.11h power constraint value.
Note
The range is from 0 to 30 dBm.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to configure the 802.11h power constraint to 5 dBm:
Switch(config)# ap dot11 5ghz power-constraint 5
ap dot11 beaconperiod
To change the beacon period globally for 2.4 GHz or 5 GHz bands, use the
apdot11beaconperiod command.
Note
Disable the 802.11 network before using this command. See the “Usage Guidelines” section.
apdot11
{ 24ghz | 5ghz }
beaconperiodtime
Syntax Description
24ghz
Specifies the settings for 2.4 GHz band.
5ghz
Specifies the settings for 5 GHz band.
beaconperiod
Specifies the beacon for a network globally.
time
Beacon interval in time units (TU). One TU is 1024 microseconds.
The range is from 20 to 1000.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
In Cisco wireless LAN 802.11 networks, all Cisco lightweight access point wireless LANs broadcast a beacon at regular intervals. This beacon notifies clients that the wireless service is available and allows the clients to synchronize with the lightweight access point.
Before you change the beacon period, make sure that you have disabled the 802.11 network by using the apdot11 {24ghz | 5ghz} shutdown command. After changing the beacon period, enable the 802.11 network by using the noapdot11 {24ghz | 5ghz} shutdown command.
Examples
This example shows how to configure the 5 GHZ band for a beacon period of 120 time units:
Switch(config)# ap dot11 5ghz beaconperiod 120
ap dot11 beamforming
To enable beamforming on the network or on individual radios, use the
apdot11beamforming command.
apdot11
{ 24ghz | 5ghz }
beamforming
Syntax Description
24ghz
Specifies the 2.4 GHz band.
5ghz
Specifies the 5 GHz band.
beamforming
Specifies beamforming on the network.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
When you enable beamforming on the network, it is automatically enabled for all the radios applicable to that network type.
Follow these guidelines for using beamforming:
Beamforming is supported for legacy orthogonal frequency-division multiplexing (OFDM) data rates (6, 9, 12, 18, 24, 36, 48, and 54 Mbps).
Note
Beamforming is not supported for Direct Sequence Spread Spectrum data rates ( 1 and 2 Mbps) and Complementary-Code Key (CCK) data rates (5.5 and 11 Mbps).
Beamforming is supported only on access points that support 802.11n (AP1260, AP3500, and AP3600).
Two or more antennas must be enabled for transmission.
All three antennas must be enabled for reception.
OFDM rates must be enabled.
If the antenna configuration restricts operation to a single transmit antenna, or if OFDM rates are disabled, beamforming is not used.
Examples
This example shows how to enable beamforming on the 5 GHz band:
Switch(config)# ap dot11 5ghz beamforming
ap dot11 cac media-stream
To configure media stream Call Admission Control (CAC) voice and video quality parameters for 2.4 GHz and 5 GHz bands, use the
apdot11cacmedia-stream command.
Specifies CAC parameters for multicast-direct media streams.
max-retry-percent
Specifies the percentage of maximum retries that are allowed for multicast-direct media streams.
retryPercent
Percentage of maximum retries that are allowed for multicast-direct media streams.
Note
The range is from 0 to 100.
min-client-rate
Specifies the minimum transmission data rate to the client for multicast-direct media streams (rate at which the client must transmit in order to receive multicast-direct unicast streams).
If the transmission rate is below this rate, either the video will not start or the client may be classified as a bad client. The bad client video can be demoted for better effort QoS or subject to denial.
min-client-rate
You can choose the following rates:
eighteen
eleven
fiftyFour
fivePointFive
fortyEight
nine
one
oneFifty
oneFortyFourPointFour
oneThirty
oneThirtyFive
seventyTwoPointTwo
six
sixtyFive
thirtySix
threeHundred
twelve
twentyFour
two
twoSeventy
Command Default
The default value for the maximum retry percent is 80. If it exceeds 80, either the video will not start or the client might be classified as a bad client. The bad client video will be demoted for better effort QoS or is subject to denial.
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
CAC commands require that the WLAN you are planning to modify is configured for the Wi-Fi Multimedia (WMM) protocol.
Before you can configure CAC parameters on a network, you must complete the following prerequisites:
Disable all WLANs with WMM enabled by entering the wlanwlan_nameshutdown command.
Disable the radio network you want to configure by entering the apdot11 {24ghz | 5ghz} shutdown command.
Save the new configuration.
Enable voice or video CAC for the network you want to configure by entering the apdot11 {24ghz | 5ghz} cacvoiceacm or apdot11 {24ghz | 5ghz} cacvideoacm commands.
Examples
This example shows how to configure the maximum retry percent for multicast-direct media streams as 90 on a 802.11a network:
Switch(config)# ap dot11 5ghz cac media-stream multicast max-retry-percent 90
To configure multimedia Call Admission Control (CAC) voice and video quality parameters for 2.4 GHz and 5 GHz bands, use the
apdot11cacmultimedia command.
Specifies the percentage of maximum bandwidth allocated to Wi-Fi Multimedia (WMM) clients for voice and video applications on the 2.4 GHz or 5 GHz band.
bandwidth
Percentage of the maximum bandwidth allocated to WMM clients for voice and video applications on the 802.11a or 802.11b/g network. Once the client reaches the specified value, the access point rejects new multimedia flows this radio band. The range is from 5 to 85%.
Command Default
The default value is 75%.
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
CAC commands require that the WLAN you are planning to modify is configured for the Wi-Fi Multimedia (WMM) protocol.
Before you can configure CAC parameters on a network, you must complete the following prerequisites:
Disable all WLANs with WMM enabled by entering the wlanwlan_nameshutdown command.
Disable the radio network you want to configure by entering the apdot11 {24ghz | 5ghz} shutdown command.
Save the new configuration.
Enable voice or video CAC for the network you want to configure by entering the apdot11 {24ghz | 5ghz} cacvoiceacm or apdot11 {24ghz | 5ghz} cacvideoacm commands.
Examples
This example shows how to configure the percentage of the maximum bandwidth allocated to WMM clients for voice and video applications on the 5 GHz band:
Switch(config)# ap dot11 5ghz cac multimedia max-bandwidth 5
To configure Call Admission Control (CAC) parameters for the video category, use the
apdot11cacvideo command. To disable the CAC parameters for video category, use the
no form of this command.
Enables bandwidth-based video CAC for the 2.4 GHz or 5 GHz band.
Note
To disable bandwidth-based video CAC for the 2.4 GHz or 5 GHz band, use the noapdot11 {24ghz | 5ghz} cacvideoacm command.
max-bandwidth
Sets the percentage of the maximum bandwidth allocated to clients for video applications on the 2.4 GHz or 5 GHz band.
value
Bandwidth percentage value from 5 to 85%.
roam-bandwidth
Sets the percentage of the CAC maximum allocated bandwidth reserved for roaming video clients on the 2.4 GHz or 5 GHz band.
value
Bandwidth percentage value from 0 to 85%.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
CAC commands require that the WLAN you are planning to modify is configured for the Wi-Fi Multimedia (WMM) protocol.
Before you can configure CAC parameters on a network, you must complete the following prerequisites:
Disable all WLANs with WMM enabled by entering the wlanwlan_nameshutdown command.
Disable the radio network you want to configure by entering the apdot11 {24ghz | 5ghz} shutdown command.
Save the new configuration.
Enable voice or video CAC for the network you want to configure by entering the apdot11 {24ghz | 5ghz} cacvoiceacm or apdot11 {24ghz | 5ghz} cacvideoacm command.
Examples
This example shows how to enable the bandwidth-based CAC:
Switch(config)# ap dot11 24ghz cac video acm
This example shows how to specify the percentage of the maximum allocated bandwidth for video applications on the selected radio band:
Switch(config)# ap dot11 24ghz cac video max-bandwidth 50
This example shows how to configure the percentage of the maximum allocated bandwidth reserved for roaming video clients on the selected radio band:
Switch(config)# ap dot11 24ghz cac video roam-bandwidth 10
Enables bandwidth-based voice CAC for the 2.4 GHz or 5 GHz band.
Note
To disable bandwidth-based voice CAC for the 2.4 GHz or 5 GHz band, use the noapdot11 {24ghz | 5ghz} cacvoiceacm command.
load-based
Enable load-based CAC on voice access category.
Note
To disable load-based CAC on voice access category for the 2.4 GHz or 5 GHz band, use the noapdot11 {24ghz | 5ghz} cacvoiceload-based command.
max-bandwidth
Sets the percentage of the maximum bandwidth allocated to clients for voice applications on the 2.4 GHz or 5 GHz band.
value
Bandwidth percentage value from 5 to 85%.
roam-bandwidth
Sets the percentage of the CAC maximum allocated bandwidth reserved for roaming voice clients on the 2.4 GHz or 5 GHz band.
value
Bandwidth percentage value from 0 to 85%.
sip
Specifies the CAC codec name and sample interval as parameters and calculates the required bandwidth per call for the 802.11 networks.
bandwidth
(Optional) Specifies bandwidth for a SIP-based call.
bw
Bandwidth in kbps. The following bandwidth values specify parameters for the SIP codecs:
64kbps—Specifies CAC parameters for the SIP G711 codec.
8kbps—Specifies CAC parameters for the SIP G729 codec.
Note
The default value is 64 Kbps.
sample-interval
Specifies the packetization interval for SIP codec.
value
Packetization interval in msecs. The sample interval for SIP codec value is 20 seconds.
stream-size
Specifies the number of aggregated voice Wi-Fi Multimedia (WMM) traffic specification (TSPEC) streams at a specified data rate for the 2.4 GHz or 5 GHz band.
x
Stream size. The range of the stream size is from 84000 to 92100.
max-streams
Specifies the maximum number of streams per TSPEC.
y
Number (1 to 5) of voice streams.
Note
The default number of streams is 2 and the mean data rate of a stream is 84 kbps.
Use this keyword to process or ignore the Wi-Fi Multimedia (WMM) traffic specifications (TSPEC) inactivity timeout received from an access point. When the inactivity timeout is ignored, a client TSPEC is not deleted even if the access point reports an inactivity timeout for that client.
enable
Processes the TSPEC inactivity timeout messages.
ignore
Ignores the TSPEC inactivity timeout messages.
Note
The default is ignore (disabled).
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
CAC commands require that the WLAN you are planning to modify is configured for the Wi-Fi Multimedia (WMM) protocol and the quality of service (QoS) level be set to Platinum.
Before you can configure CAC parameters on a network, you must complete the following prerequisites:
Disable all WLANs with WMM enabled by entering the wlanwlan_nameshutdown command.
Disable the radio network you want to configure by entering the apdot11 {24ghz | 5ghz} shutdown command.
Save the new configuration.
Enable voice or video CAC for the network you want to configure by entering the apdot11 {24ghz | 5ghz} cacvoiceacm or apdot11 {24ghz | 5ghz} cacvideoacm commands.
Examples
This example shows how to enable the bandwidth-based CAC:
Switch(config)# ap dot11 24ghz cac voice acm
This example shows how to enable the load-based CAC on the voice access category:
Switch(config)# ap dot11 24ghz cac voice load-based
This example shows how to specify the percentage of the maximum allocated bandwidth for voice applications on the selected radio band:
Switch(config)# ap dot11 24ghz cac voice max-bandwidth 50
This example shows how to configure the percentage of the maximum allocated bandwidth reserved for roaming voice clients on the selected radio band:
Switch(config)# ap dot11 24ghz cac voice roam-bandwidth 10
This example shows how to configure the bandwidth and voice packetization interval for the G729 SIP codec on a 2.4 GHz band:
This example shows how to configure the number of aggregated voice traffic specifications stream with a stream size of 85000 and with a maximum of 5 streams:
Switch(config)# ap dot11 24ghz cac voice stream-size 85000 max-streams 5
This example shows how to enable the voice TSPEC inactivity timeout messages received from an access point:
Switch(config)# ap dot11 24ghz cac voice tspec-inactivity-timeout enable
To configure the CleanAir interference devices alarms on the 2.4 GHz or 5 GHz bands, use the
apdot11cleanairalarmdevice command. To disable the CleanAir interference devices alarms on the 802.11 networks, use the
no form of this command.
To configure settings for an 802.11n network, use the
apdot11dot11n command.
apdot11
{ 24ghz | 5ghz }
dot11n
{ a-mpdutxpriority { priority_value | all } | a-msdutxpriority { priority_value | all } | guard-interval
{ any | long } | mcstxrate | rifsrx }
Syntax Description
24ghz
Specifies the 2.4 GHz band.
5ghz
Specifies the 5 GHz band.
dot11n
Enables 802.11n support.
a-mpdutxpriority
Specifies the traffic that is associated with the priority level that uses A-MPDU transmission.
priority_value
Aggregated MAC protocol data unit priority level from 0 to 7.
all
Specifies all of the priority levels at once.
a-msdutxpriority
Specifies the traffic that is associated with the priority level that uses A-MSDU transmission.
priority_value
Aggregated MAC protocol data unit priority level from 0 to 7.
all
Specifies all of the priority levels at once.
guard-interval
Specifies the guard interval.
any
Enables either a short or a long guard interval.
long
Enables only a long guard interval.
mcstxrate
Specifies the modulation and coding scheme (MCS) rates at which data can be transmitted between the access point and the client.
rate
Specifies the modulation and coding scheme data rates.
Note
The range is from 0 to 23.
rifsrx
Specifies the Reduced Interframe Space (RIFS) between data frames.
Command Default
By default, priority 0 is enabled.
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
Aggregation is the process of grouping packet data frames together rather than transmitting them separately. Two aggregation methods are available: Aggregated MAC Protocol Data Unit (A-MPDU) and Aggregated MAC Service Data Unit (A-MSDU). A-MPDU is performed in the software; A-MSDU is performed in the hardware.
Aggregated MAC Protocol Data Unit priority levels assigned per traffic type are as follows:
0—Best effort
1—Background
2—Spare
3—Excellent effort
4—Controlled load
5—Video, less than 100-ms latency and jitter
6—Voice, less than 10-ms latency and jitter
7—Network control
all—Configure all of the priority levels at once.
Note
Configure the priority levels to match the aggregation method used by the clients.
Examples
This example shows how to enable 802.11n support on a 2.4 GHz band:
Switch(config)# ap dot11 24ghz dot11n
This example shows how to configure all the priority levels at once so that the traffic that is associated with the priority level uses A-MSDU transmission:
Switch(config)# ap dot11 24ghz dot11n a-msdu tx priority all
This example shows how to enable only long guard intervals:
Switch(config)# ap dot11 24ghz dot11n guard-interval long
To configure Dynamic Transmit Power Control (DTPC) settings, Cisco Client eXtension (CCX) version 5 expedited bandwidth request feature, and the fragmentation threshold on an 802.11 network, use the
apdot11dtpc command.
Changes the beacon period globally for 2.4 GHz or 5 GHz bands.
ap dot11 edca-parameters
To enable a specific enhanced distributed channel access (EDCA) profile on the 2.4 GHz or 5 GHz bands, use the
apdot11edca-parameters command. To disable an EDCA profile on the 2.4 GHz or 5 GHz bands, use the
no form of this command.
Specifies a specific enhanced distributed channel access (EDCA) profile on the 802.11 networks.
custom-voice
Enables custom voice EDCA parameters.
optimized-video-voice
Enables EDCA voice- and video-optimized profile parameters. Choose this option when both voice and video services are deployed on your network.
optimized-voice
Enables EDCA voice-optimized profile parameters. Choose this option when voice services other than SpectraLink are deployed on your network.
svp-voice
Enables SpectraLink voice priority parameters. Choose this option if SpectraLink phones are deployed on your network to improve the quality of calls.
wmm-default
Enables the Wi-Fi Multimedia (WMM) default parameters. Choose this option when voice or video services are not deployed on your network.
Command Default
wmm-default
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to enable SpectraLink voice priority parameters:
Switch(config)# ap dot11 24ghz edca-parameters svp-voice
ap dot11 rrm group-mode
To set the 802.11 automatic RF group selection mode on, use the
apdot11rrmgroup-mode command. To set the 802.11 automatic RF group selection mode off, use the
no form of this command.
apdot11
{ 5ghz | 24ghz }
rrmgroup-mode
{ auto | leader | off | restart }
noapdot11
{ 5ghz | 24ghz }
rrmgroup-mode
Syntax Description
5ghz
Specifies the 2.4 GHz band.
24ghz
Specifies the 5 GHz band.
auto
Sets the 802.11 RF group selection to automatic update mode.
leader
Sets the 802.11 RF group selection to static mode, and sets this switch as the group leader.
off
Sets the 802.11 RF group selection to off.
restart
Restarts the 802.11 RF group selection.
Command Default
auto
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to turn the auto RF group selection mode on the 5 GHz band:
Configures the 802.11 access point radio resource management neighbor discovery protocol type.
ap dot11 rrm channel cleanair-event
To configure CleanAir event-driven Radio Resource Management (RRM) parameters for all 802.11 Cisco lightweight access points, use the
apdot11rrmchannelcleanair-event command. When this parameter is configured, CleanAir access points can change their channel when a source of interference degrades the operations, even if the RRM interval has not expired yet.
Minimum received signal strength indicator (RSSI) that is required for the client to associate to the access point. If the client’s average received signal power dips below this threshold, reliable communication is usually impossible. Clients must already have found and roamed to another access point with a stronger signal before the minimum RSSI value is reached. The valid range is –80 to –90 dBm, and the default value is –85 dBm.
roam-hyst
How much greater the signal strength of a neighboring access point must be in order for the client to roam to it. This parameter is intended to reduce the amount of roaming between access points if the client is physically located on or near the border between the two access points. The valid range is 2 to 4 dB, and the default value is 2 dB.
scan-thresh
Minimum RSSI that is allowed before the client should roam to a better access point. When the RSSI drops below the specified value, the client must be able to roam to a better access point within the specified transition time. This parameter also provides a power-save method to minimize the time that the client spends in active or passive scanning. For example, the client can scan slowly when the RSSI is above the threshold and scan more rapidly when the RSSI is below the threshold. The valid range is –70 to –77 dBm, and the default value is –72 dBm.
trans-time
Maximum time allowed for the client to detect a suitable neighboring access point to roam to and to complete the roam, whenever the RSSI from the client’s associated access point is below the scan threshold. The valid range is 1 to 10 seconds, and the default value is 5 seconds.
Command Default
min-rssi
-85
roam-hyst
2
scan-thresh
-72
trans-time
5
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to configure custom Layer 2 client roaming parameters on an 802.11a network:
Specifies the multicast-direct for the 2.4 GHz or a 5 GHz band.
admission-besteffort
Admits the media stream to the best-effort queue.
client-maximumvalue
Specifies the maximum number of streams allowed on a client.
radio-maximumvalue
Specifies the maximum number of streams allowed on a 2.4 GHz or a 5 GHz band.
video-redirect
Specifies the media stream video-redirect for the 2.4 GHz or a 5 GHz band.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
Before you configure the media stream multicast-direct or video-redirect on a 802.11 network, ensure that the network is nonoperational.
Examples
This example shows how to enable media stream multicast-direct settings on the 5 GHz band:
Switch(config)# ap dot11 5ghz media-stream multicast-direct
This example shows how to admit the media stream to the best-effort queue if there is not enough bandwidth to prioritize the flow:
Switch(config)# ap dot11 5ghz media-stream multicast-direct admission-besteffort
This example shows how to set the maximum number of streams allowed on a client:
Switch(config)# ap dot11 5ghz media-stream multicast-direct client-maximum 10
This example shows how to enable media stream traffic redirection on the 5 GHz band:
Switch(config)# ap dot11 5ghz media-stream video-redirect
ap dot11 rrm ccx location-measurement
To configure cisco client Extensions (CCX) client location measurements for 2.4 GHz and 5 GHz bands, use the
apdot11rrmccxlocation-measurement command.
Configures the 802.11 access point radio resource management neighbor discovery protocol type.
ap dot11 rrm channel dca
To configure Dynamic Channel Assignment (DCA) algorithm parameters on 802.11 networks, use the
apdot11rrmchanneldca command.
apdot11
{ 24ghz | 5ghz }
rrmchanneldca { channel_number | anchor-timevalue | global { auto | once } | intervalvalue | min-metricvalue | sensitivity { high | low | medium } }
Syntax Description
24ghz
Specifies the 2.4 GHz band.
5ghz
Specifies the 5 GHz band.
channel_number
Channel number to be added to the DCA list.
Note
The range is from 1 to 14.
anchor-time
Specifies the anchor time for DCA.
value
Hour of time between 0 and 23. These values represent the hour from 12:00 a.m. to 11:00 p.m.
global
Specifies the global DCA mode for the access points in the 802.11 networks.
auto
Enables auto-RF.
once
Enables one-time auto-RF.
interval
Specifies how often the DCA is allowed to run.
value
Interval between the times when DCA is allowed to run. Valid values are 0, 1, 2, 3, 4, 6, 8, 12, or 24 hours. 0 is 10 minutes (600 seconds). Default value is 0 (10 minutes).
min-metric
Specifies the DCA minimum RSSI energy metric.
value
Minimum RSSI energy metric value from –100 to –60.
sensitivity
Specifies how sensitive the DCA algorithm is to environmental changes (for example, signal, load, noise, and interference) when determining whether or not to change channels.
high
Specifies that the DCA algorithm is not particularly sensitive to environmental changes. See the “Usage Guidelines” section for more information.
low
Specifies that the DCA algorithm is moderately sensitive to environmental changes. See the “Usage Guidelines” section for more information.
medium
Specifies that the DCA algorithm is highly sensitive to environmental changes. See the “Usage Guidelines” section for more information.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
The DCA sensitivity thresholds vary by radio band as shown in the table below.
To aid in troubleshooting, the output of this command shows an error code for any failed calls. The table below explains the possible error codes for failed calls.
Table 1 DCA Sensitivity Threshold
Sensitivity
2.4 Ghz DCA Sensitivity Threshold
5 Ghz DCA Sensitivity Threshold
High
5 dB
5 dB
Medium
15 dB
20 dB
Low
30 dB
35 dB
Examples
This example shows how to configure the switch to start running DCA at 5 pm for the 2.4 GHz band:
Switch(config)# ap dot11 24ghz rrm channel dca anchor-time 17
This example shows how to set the DCA algorithm to run every 10 minutes for the 2.4 GHz band:
Switch(config)# ap dot11 24ghz rrm channel dca interval 0
This example shows how to configure the value of DCA algorithm’s sensitivity to low on the 2.4 GHz band:
Switch(config)# ap dot11 24ghz rrm channel dca sensitivity low
Configures the 802.11 access point radio resource management neighbor discovery protocol type.
ap dot11 rrm group-member
To configure members in an 802.11 static RF group, use the
apdot11rrmgroup-member command. To remove members from 802.11 RF group, use the
no form of this command.
Specifies the Tx RRM protected (encrypted) neighbor discovery protocol.
transparent
Specifies the Tx RRM transparent (not encrypted) neighbor discovery protocol.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
Before you configure the 802.11 access point RRM neighbor discovery protocol type, ensure that you have disabled the network by entering the apdot11 {24ghz | 5ghz} shutdown command.
Examples
This example shows how to enable the 802.11a access point RRM neighbor discovery protocol type as protected:
Switch(config)# ap dot11 5ghz rrm ndp-type protected
To configure the maximum number of simultaneous 802.1X sessions allowed per access point, use the
apdot1xmax-sessions command.
apdot1xmax-sessionsnum-of-sessions
Syntax Description
num-of-sessions
Number of maximum 802.1X sessions initiated per AP at a time. The range is from 0 to 255, where 0 indicates unlimited.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
It is required to limit the number of simultaneous 802.1X sessions initiated per access point to protect against flooding attacks caused by using 802.1X messages.
Examples
This example shows how to configure the maximum number of simultaneous 802.1X sessions:
Switch(config)# ap dot1x max-sessions 100
ap dot1x username
To configure the 802.1X username and password for all access points that are currently joined to the switch and any access points that join the switch in the future, use the
apdot1xusername command. To disable the 802.1X username and password for all access points that are currently joined to the switch, use the
no form of this command.
To configure the Ethernet port duplex and speed settings of the lightweight access points, use the
apethernetduplex command. To disable the Ethernet port duplex and speed settings of lightweight access points, use the
no form of this command.
apethernetduplexduplexspeedspeed
noapethernet
Syntax Description
duplex
Ethernet port duplex settings. You can specify the following options to configure the duplex settings:
auto—Specifies the Ethernet port duplex auto settings.
half—Specifies the Ethernet port duplex half settings.
full—Specifies the Ethernet port duplex full settings.
speed
Specifies the Ethernet port speed settings.
speed
Ethernet port speed settings. You can specify the following options to configure the speed settings:
auto—Specifies the Ethernet port speed to auto.
10—Specifies the Ethernet port speed to 10 Mbps.
100—Specifies the Ethernet port speed to 100 Mbps.
1000—Specifies the Ethernet port speed to 1000 Mbps.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to configure the Ethernet port duplex full settings as 1000 Mbps for all access points:
Switch(config)# ap ethernet duplex full speed 1000
To create a new access point group, use the
apgroup command. To remove an access point group, use the
no form of this command.
apgroupgroup-name
noapgroupgroup-name
Syntax Description
group-name
Access point group name.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
An error message appears if you try to delete an access point group that is used by at least one access point. Before you can delete an AP group, move all APs in this group to another group. The access points are not moved to the default-group access point group automatically. To see the APs, enter the showapsummary command. To move access points, enter the apnameCisco-APap-groupnameGroup-Name command.
Examples
This example shows how to create a new access point group:
To enable the LED state for an access point, use the
apled command. To disable the LED state for an access point, use the
no form of this command.
apled
noapled
Syntax Description
This command has no keywords and arguments.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to enable the LED state for an access point:
Switch(config)# ap led
ap link-encryption
To enable Datagram Transport Layer Security (DTLS) data encryption for access points, use the
aplink-encryption command. To disable the DTLS data encryption for access points, use the
no form of this command.
aplink-encryption
noaplink-encryption
Syntax Description
This command has no keywords and arguments.
Command Default
Disabled
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to enable data encryption for all the access points that are joined to the controller:
Enables or disables link latency for access points.
ap link-latency
To enable link latency for all access points that are currently associated to the switch, use the
aplink-latency command. To disable link latency all access points that are currently associated to the switch, use the
no form of this command.
aplink-latency
[reset]
noaplink-latency
Syntax Description
reset
(Optional)
Resets all link latency for all access points.
Command Default
Link latency is disabled by default.
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
This command enables or disables link latency only for those access points that are currently joined to the switch. It does not apply to access points that join in the future.
Examples
This example shows how to enable the link latency for all access points:
Specifies the username for access point management.
password
Specifies the password for access point management.
password_type
Password type. You can specify any one of the following two password types:
0—Specifies that an unencrypted password will follow.
8—Specifies that an AES encrypted password will follow.
password
Access point management password.
secret
Specifies the secret password for privileged access point management.
secret_type
Secret type. You can specify any one of the following two secret types:
0—Specifies that an unencrypted secret password will follow.
8—Specifies that an AES encrypted secret password will follow.
secret
Access point management secret password.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
To specify a strong password, the following password requirements should be met:
The password should contain characters from at least three of the following classes: lowercase letters, uppercase letters, digits, and special characters.
No character in the password can be repeated more than three times consecutively.
The password should not contain a management username or the reverse of a username.
The password should not contain words such as Cisco, oscic, admin, nimda or any variant obtained by changing the capitalization of letters by substituting 1, |, or ! or substituting 0 for o or substituting $ for s.
To specify a strong secret password, the following requirement should be met:
The secret password should contain characters from at least three of the following classes: lowercase letters, uppercase letters, digits, or special characters.
Examples
This example shows how to add a username, password, and secret password for access point management:
To configure the Cisco bridge backhaul Tx rate, use the
apnamebhrate command.
apnameap-namebhratekbps
Syntax Description
ap-name
Name of the Cisco access point.
kbps
Cisco bridge backhaul Tx rate in kbps. The valid values are 6000, 12000, 18000, 24000, 36000, 48000, and 54000.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to configure the Cisco bridge backhaul Tx rate to 54000 kbps:
Switch# ap name AP02 bhrate 54000
ap name bridgegroupname
To set a bridge group name on a Cisco lightweight access point, use the
apnamebridgegroupname command. To delete a bridge group name on a Cisco lightweight access point, use the no form of this command.
apnameap-namebridgegroupnamebridge_group_name
apnameap-namenobridgegroupname
Syntax Description
ap-name
Name of the Cisco lightweight access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
Only access points with the same bridge group name can connect to each other. Changing the access point bridgegroupname may strand the bridge access point.
Examples
This example shows how to set a bridge group name on Cisco access point’s bridge group name AP02:
Switch# ap name AP02 bridgegroupname West
This example shows how to delete a bridge group name on Cisco access point’s bridge group name AP02:
Switch# ap name AP02 no bridgegroupname
ap name capwap retransmit
To configure the access point control packet retransmission interval and control packet retransmission count, use the
apnamecapwapretransmit command.
Sets the number of times control packet will be retransmitted.
count-value
Number of times that the control packet will be retransmitted from 3 to 8.
interval
Sets the control packet retransmission timeout interval.
interval-time
Control packet retransmission timeout from 2 to 5 seconds.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to configure the retransmission interval for an access point:
Switch# ap name AP01 capwap retransmit interval 5
This example shows how to configure the retransmission retry count for a specific access point:
Switch# ap name AP01 capwap retransmit count 5
ap name command
To execute a command remotely on a specific Cisco access point, use the
apnamecommand command.
apnameap-namecommandcommand
Syntax Description
ap-name
Name of the Cisco access point.
command
Command to be executed on a Cisco access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to remotely enter the show ip interface brief command on the Cisco access point named TSIM_AP2:
Switch# ap name AP2 command show ip interface brief
ap name core-dump
To configure a Cisco lightweight access point’s memory core dump, use the
apnamecore-dump command. To disable a Cisco lightweight access point’s memory core dump, use the
no form of this command.
To configure the country of operation for a Cisco lightweight access point, use the
apnamecountry command.
apnameap-namecountrycountry-code
Syntax Description
ap-name
Name of the Cisco lightweight access point.
country-code
Two-letter or three-letter country code.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
Cisco switchs must be installed by a network administrator or qualified IT professional and the installer must select the proper country code. Following installation, access to the unit should be password protected by the installer to maintain compliance with regulatory requirements and to ensure proper unit functionality. See the related product guide for the most recent country codes and regulatory domains. Also, access point regulatory domains are defined during the access point manufacturing process. You can change the access point country code if the new country code matches a country that is valid within the access point regulatory domain. If you try to enter a country that is not valid to the access point regulatory domain, the command fails.
Examples
This example shows how to configure the Cisco lightweight access point's country code to DE:
Specifies the percentage of clients on an access point that are experiencing a low signal level but cannot roam to another access point.
value
Percentage of clients. Valid values are from 0 to 100%.
Note
The default is 25%.
level
Specifies the minimum number of clients on an access point with a received signal strength indication (RSSI) value at or below the data or voice RSSI threshold.
value
Minimum number of clients. Valid values are from 1 to 75.
Note
The default is 3.
Command Default
The default for the exception parameter is 25% and the default for the level parameter is 3.
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
If you enable coverage hole detection, the switch automatically determines, based on data that is received from the access points, whether any access points have clients that are potentially located in areas with poor coverage.
If both the number and percentage of failed packets exceed the values that you entered in the apdot1124ghzrrmcoveragedatapacket-countcount and apdot1124ghzrrmcoveragedatafail-percentagepercentage commands for a 5-second period, the client is considered to be in a pre-alarm condition. The switch uses this information to distinguish between real and false coverage holes and excludes clients with poor roaming logic. A coverage hole is detected if both the number and percentage of failed clients meet or exceed the values entered in the apdot1124ghzrrmcoverageexception and apdot1124ghzrrmcoveragelevel commands over a 90-second period. The switch determines whether the coverage hole can be corrected and, if appropriate, mitigates the coverage hole by increasing the transmit power level for that specific access point.
Examples
This example shows how to specify the percentage of clients for an access point 2.4 GHz radio that is experiencing a low signal level:
Switch# ap name AP2 dot11 24ghz rrm coverage exception 25%
This example shows how to specify the minimum number of clients on an 802.11b access point with an RSSI value at or below the RSSI threshold:
Switch# ap name AP2 dot11 24ghz rrm coverage level 60
Configures a new channel using an 802.11h channel announcement.
ap name dot11 49ghz rrm profile
To configure Radio Resource Management (RRM) performance profile settings for a Cisco lightweight access point on a 4.9 GHz public safety channel, use the
apnamedot1149ghzrrmprofile command.
Specifies the external antenna gain for an 802.11 network.
Note
Before you enter this command, disable the Cisco radio by using the apdot11 {24ghz | 5ghz} shutdown command. After you enter this command, reenable the Cisco radio by using the noapdot11 {24ghz | 5ghz} shutdown command.
gain
Antenna gain in 0.5 dBm units (for example, 2.5 dBm = 5).
mode
Specifies that the Cisco lightweight access point is to use one internal antenna for an 802.11 sectorized 180-degree coverage pattern or both internal antennas for an 802.11 360-degree omnidirectional pattern.
omni
Specifies to use both internal antennas.
sectorA
Specifies to use only the side A internal antenna.
sectorB
Specifies to use only the side B internal antenna.
selection
Selects the internal or external antenna selection for a Cisco lightweight access point on an 802.11 network.
external
Specifies the external antenna.
internal
Specifies the internal antenna.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to configure a 5 GHz external antenna gain of 0.5 dBm for AP1:
Switch# ap name AP1 dot11 5ghz antenna ext-ant-gain 0.5
This example shows how to configure access point AP01 antennas for a 360-degree omnidirectional pattern on a 2.4 GHz band:
Switch# ap name AP01 dot11 24ghz antenna mode omni
This example shows how to configure access point AP02 on a 2.4 GHz band to use the internal antenna:
Switch# ap name AP02 dot11 24ghz antenna selection interval
Configures radio antenna settings on 4.9 GHz and 5.8 GHz public safety chaannels.
ap name dot11 antenna extantgain
To configure radio antenna settings for Cisco lightweight access points on 4.9 GHz and 5.8 GHz public safety channels, use the
apnamedot11antennaextantgain command.
Antenna gain in 0.5 dBm units (for example, 2.5 dBm = 5).
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
Before you enter this command, disable the Cisco radio by using the apdot11 {24ghz | 5ghz} shutdown command. After you enter this command, reenable the Cisco radio by using the noapdot11 {24ghz | 5ghz} shutdown command.
Examples
This example shows how to configure an external antenna gain of 0.5 dBm for AP1 on a 4.9 GHz public safety channel:
Switch# ap name AP1 dot11 49ghz antenna extantgain 0.5
Configures radio antenna settings on different 802.11 networks.
ap name dot11 cleanair
To configure CleanAir settings for a specific Cisco lightweight access point on 802.11 networks, use the
apnamedot11cleanair command.
apnameap-namedot11
{ 24ghz | 5ghz }
cleanair
Syntax Description
ap-name
Name of the Cisco lightweight access point.
24ghz
Specifies the 2.4 GHz band.
5ghz
Specifies the 5 GHz band.
Command Default
Disabled.
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to enable CleanAir on the 2.4 GHz band:
Switch# ap name AP01 dot11 24ghz cleanair
ap name dot11 dot11n antenna
To configure an access point to use a specific antenna, use the
apnamedot11dot11nantenna command.
apnameap-namedot11
{ 24ghz | 5ghz }
dot11nantenna
{ A | B | C | D }
Syntax Description
ap-name
Access point name.
24ghz
Specifies the 2.4 GHz band.
5ghz
Specifies the 5 GHz band.
A
Specifies antenna port A.
B
Specifies antenna port B.
C
Specifies antenna port C.
D
Specifies antenna port D.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to enable antenna B on access point AP02:
Switch# ap name AP02 dot11 5ghz dot11n antenna B
This example shows how to disable antenna C on access point AP02:
Switch# ap name AP02 no dot11 5ghz dot11n C
ap name dot11 rrm ccx
To configure Cisco Client eXtension (CCX) Radio Resource Management (RRM) settings for specific Cisco lightweight access points on 802.11 networks, use the
apnamedot11rrmccx command.
Displays the detailed configuration of 802.11-58G radios on access points.
ap name dot1x-user
To configure the global authentication username and password for an access point that is currently joined to the switch, use the
apnamedot1x-user command. To disable 802.1X authentication for a specific access point, use the no form of this command.
Forces the access point to use the switch's global authentication settings.
username
Specifies to add a username.
user-id
Username.
password
Specifies to add a password.
passwd
Password.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
You should enter a strong password. Strong passwords have the following characteristics:
They are at least eight characters long.
They contain a combination of uppercase and lowercase letters, numbers, and symbols.
They are not words in any language.
You can set the values for a specific access point.
You can disable 802.1X authentication for a specific access point only if global 802.1X authentication is not enabled. If global 802.1X authentication is enabled, you can disable 802.1X for all access points only.
Examples
This example shows how to configure a specific username and password for dot1x authentication:
Switch# ap name AP02 dot1x-user username Cisco123 password Cisco2020
This example shows how to disable the authentication for access point cisco_ap1:
To configure ethernet port settings of a Cisco lightweight access point, use the
apnameethernet command. To remove configured port settings or set of defaults, use the no form of this command.
To configure the username, password, and secret password for access point management, use the
apnamemgmtuser command. To force a specific access point to use the switch’s global credentials, use the no form of this command.
Specifies the username for access point management.
username
Management username.
password
Specifies the password for access point management.
password
Access point management password.
secret
Specifies the secret password for privileged access point management.
secret
Access point management secret password.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
To specify a strong password, you should
adhere to the following requirements:
The password should contain characters from at least three of the following classes: lowercase letters, uppercase letters, digits, and special characters.
No character in the password can be repeated more than three times consecutively.
The password cannot contain a management username or the reverse of a username.
The password cannot contain words such as Cisco, oscic, admin, nimda or any variant obtained by changing the capitalization of letters by substituting 1, |, or ! or substituting 0 for o or substituting $ for s.
The following requirement is enforced on the secret password:
The secret password cannot contain characters from at least three of the following classes: lowercase letters, uppercase letters, digits, or special characters.
Examples
This example shows how to add a username, password, and secret password for access point management:
Switch# ap name AP01 mgmtuser username acd password Arc_1234 secret Mid_1234
ap name mode
To change a Cisco switch communication option for an individual Cisco lightweight access point, use the
apnamemode command.
Converts from an indoor mesh access point (MAP or RAP) to a nonmesh lightweight access point (local mode).
submode
Specifies wIPS submode on an access point.
none
Disables the wIPS on an access point.
monitor
Specifies monitor mode settings.
wips
Enables the wIPS submode on an access point.
rogue
Enables wired rogue detector mode on an access point.
se-connect
Enables spectrum expert mode on an access point.
sniffer
Enables wireless sniffer mode on an access point.
Command Default
Local
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
The sniffer mode captures and forwards all the packets from the clients on that channel to a remote machine that runs AiroPeek or other supported packet analyzer software. It includes information on the timestamp, signal strength, packet size and so on.
Examples
This example shows how to set the switch to communicate with access point AP01 in local mode:
Switch# ap name AP01 mode local submode none
This example shows how to set the switch to communicate with access point AP01 in a wired rogue access point detector mode:
Switch# ap name AP01 mode rogue
This example shows how to set the switch to communicate with access point AP02 in wireless sniffer mode:
Displays the global syslog server settings for access points.
ap name bridging
To enable Ethernet-to-Ethernet bridging on a Cisco lightweight access point, use the
apnamebridging command. To disable Ethernet-to-Ethernet bridging on a Cisco lightweight access point, use the no form of this command.
apnameap-namebridging
apnameap-namenobridging
Syntax Description
ap-name
Name of the Cisco lightweight access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to enable Ethernet-to-Ethernet bridging on an access point:
Enables or disables Ethernet to 802.11 bridging on access points.
ap name cdp interface
To enable the Cisco Discovery Protocol (CDP) on a Cisco lightweight access point, use the
apname command. To disable the Cisco Discovery Protocol (CDP) on a Cisco lightweight access point, use the
no form of this command.
CDP over Ethernet/radio interfaces is available only when CDP is enabled. After you enable CDP on all access points that are joined to the switch, you can disable and then reenable CDP on individual access points by using the apnameap-namecdpinterfaceethernetethernet-id cisco_ap command. After you disable CDP on all access points that are joined to the switch, you cannot enable and then disable CDP on individual access points.
Examples
This example shows how to enable CDP for Ethernet interface number 0 on an access point:
Switch# ap name TSIM_AP2 cdp interface ethernet 0
ap name console-redirect
To redirect the remote debug output of a Cisco lightweight access point to the console, use the
apnameconsole-redirect command. To disable the redirection of the remote debug output of a Cisco lightweight access point to the console, use the
no form of this command.
apnameap-nameconsole-redirect
apnameap-name
[no]
console-redirect
Syntax Description
ap-name
Name of the Cisco lightweight access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to enable redirecting remote debug output of a Cisco access point named AP02 to the console:
Switch# ap name AP02 console-redirect
ap name no dot11 shutdown
To enable radio transmission for an individual Cisco radio on an 802.11 network, use the
apnamenodot11shutdown command.
apnameap-namenodot11 { 24ghz | 5ghz }
shutdown
Syntax Description
ap-name
Name of the Cisco lightweight access point.
24ghz
Specifies the 2.4 GHz radios.
5ghz
Specifies the 5 GHz radios.
Command Default
The transmission is enabled for the entire network by default.
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
Note
Use this command with the apnameCisco-APdot115ghzshutdown command when configuring 802.11 settings.
This command can be used any time that the CLI interface is active.
Examples
This example shows how to enable radio transmission on the 5 GHz band for access point AP1:
Switch# ap name AP1 no dot11 5ghz shutdown
ap name link-encryption
To enable Datagram Transport Layer Security (DTLS) data encryption for specific Cisco lightweight access points, use the
apnamelink-encryption command. To disable DTLS data encryption for specific Cisco lightweight access points, use the
no form of this command.
apnameap-namelink-encryption
apnameap-namenolink-encryption
Syntax Description
ap-name
Name of the Cisco lightweight access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to enable data encryption for an access point:
Switch# ap name AP02 link-encryption
ap name link-latency
To enable link latency for a specific Cisco lightweight access point that is currently associated to the switch, use the
apnamelink-latency command. To disable link latency for a specific Cisco lightweight access point that is currently associated to the switch, use the
no form of this command.
apnameap-namelink-latency
apnameap-namenolink-latency
Syntax Description
ap-name
Name of the Cisco lightweight access point.
Command Default
Link latency is disabled by default.
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
This command enables or disables link latency only for access points that are currently joined to the switch. It does not apply to access points that join in the future.
Examples
This example shows how to enable link latency on access points:
Switch# ap name AP2 link-latency
ap name mfp
To enable management frame protection (MFP), use the
apnamemfp command. To disable MFP, use the
no form of this command.
apnameap-namemfpinfrastructure-validation
apnameap-namenomfpinfrastructure-validation
Syntax Description
ap-name
Name of the Cisco lightweight access point.
infrastructure-validation
Disables infrastructure validation.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to enable MFP on a Cisco lightweight access point:
Switch# ap name AP2 mfp infrastructure-validation
ap name power
To enable the Cisco Power over Ethernet (PoE) feature for access points, use the
apnamepower command. To disable the Cisco PoE feature for access points, use the
no form of this command.
apnameap-namepower
{ injector | pre-standard }
apnameap-namenopower
{ injector | pre-standard }
Syntax Description
ap-name
Name of the Cisco lightweight access point.
injector
Specifies the power injector state for an access point.
pre-standard
Enables the inline power Cisco prestandard switch state for an access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to enable the power injector state for all access points:
Switch# ap name AP01 power injector
This example shows how to enable the inline power Cisco prestandard switch state for access point AP02:
Switch# ap name AP02 power pre-standard
ap name shutdown
To disable a Cisco lightweight access point, use the
apnameshutdown command. To enable a Cisco lightweight access point, use the
no form of this command.
apnameap-nameshutdown
apnameap-namenoshutdown
Syntax Description
ap-name
Name of the Cisco lightweight access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example how to disable a specific Cisco lightweight access point:
Switch# ap name AP2 shutdown
ap name slot shutdown
To disable a slot on a Cisco lightweight access point, use the
apnameslotshutdown command. To enable a slot on a Cisco lightweight access point, use the
no form of the command.
apnameap-nameslot
{ 0 | 1 | 2 | 3 }
shutdown
apnameap-namenoslot
{ 0 | 1 | 2 | 3 }
shutdown
Syntax Description
ap-name
Name of the Cisco lightweight access point.
0
Enables slot number 0 on a Cisco lightweight access point.
1
Enables slot number 1 on a Cisco lightweight access point.
2
Enables slot number 2 on a Cisco lightweight access point.
3
Enables slot number 3 on a Cisco lightweight access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to enable slot 0 on a Cisco access point named TSIM_AP2:
Switch# ap name TSIM_AP2 no slot 0 shutdown
ap name sniff
To enable sniffing on an access point, use the
apnamesniff command. To disable sniffing on an access point, use the
no form of this command.
apnameap-namesniff
{ dot11a | dot11b }
apnameap-namenosniff
{ dot11a | dot11b }
Syntax Description
ap-name
Name of the Cisco lightweight access point.
dot11a
Specifies the 2.4 GHz band.
dot11b
Specifies the 5 GHz band.
channel
Valid channel to be sniffed.
For the 5 GHz band, the range is 36 to 165. For the 2.4 GHz band, the range is 1 to 14.
server-ip-address
IP address of the remote machine running Omnipeek, Airopeek, AirMagnet, or Wireshark software.
Command Default
Channel 36
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
When the sniffer feature is enabled on an access point, it starts sniffing the signal on the given channel. It captures and forwards all the packets to the remote computer that runs Omnipeek, Airopeek, AirMagnet, or Wireshark software. It includes information about the timestamp, signal strength, packet size and so on.
Before an access point can act as a sniffer, a remote computer that runs one of the listed packet analyzers must be set up so that it can receive packets that are sent by the access point.
Examples
This example shows how to enable the sniffing on the 5 GHz band for an access point on the primary wireless LAN controller:
Switch# ap name AP2 sniff dot11a 36 192.0.2.54
ap name ssh
To enable Secure Shell (SSH) connectivity on a specific Cisco lightweight access point, use the
apnamessh command. To disable SSH connectivity on a specific Cisco lightweight access point, use the
no form of this command.
apnameap-namessh
apnameap-namenossh
Syntax Description
ap-name
Name of the Cisco lightweight access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
The Cisco lightweight access point associates with this Cisco switch for all network operations and in the event of a hardware reset.
Examples
This example shows how to enable SSH connectivity on access point Cisco_ap2:
Switch# ap name Cisco_ap2 ssh
ap name telnet
To enable Telnet connectivity on an access point, use the
apnametelnet command. To disable Telnet connectivity on an access point, use the
no form of this command.
apnameap-nametelnet
apnameap-namenotelnet
Syntax Description
ap-name
Name of the Cisco lightweight access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to disable Telnet connectivity on access point cisco_ap1:
Switch# ap name cisco_ap1 no telnet
ap name power injector
To configure the power injector state for an access point, use the
apnamepowerinjector command. To disable the Cisco Power over Ethernet (PoE) feature for access points, use the
no form of this command.
Detects the MAC address of the current switch port that has a power injector.
override
Overrides the safety checks and assumes a power injector is always installed.
switch-mac-address
Specifies the MAC address of the switch port with an installed power injector.
switch-MAC-address
MAC address of the switch port with an installed power injector.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to enable the power injector state for an access point:
Switch# ap name AP01 power injector switch-mac-address aaaa.bbbb.cccc
ap name power pre-standard
To enable the inline power Cisco prestandard switch state for an access point, use the
apnamepowerpre-standard command. To disable the inline power Cisco prestandard switch state for an access point, use the no form of this command.
apnameap-namepowerpre-standard
apnameap-namenopowerpre-standard
Syntax Description
ap-name
Name of the Cisco lightweight access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to enable the inline power Cisco prestandard switch state for access point AP02:
Switch# ap name AP02 power pre-standard
This example shows how to disable the inline power Cisco prestandard switch state for access point AP02:
Switch# ap name AP02 no power pre-standard
ap name reset-button
To configure the Reset button for an access point, use the
apnamereset-button command.
apnameap-namereset-button
Syntax Description
ap-name
Name of the Cisco lightweight access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to enable the Reset button for access point AP03:
Switch# ap name AP03 reset-button
ap name reset
To reset a specific Cisco lightweight access point, use the
apnamereset command.
apnameap-namereset
Syntax Description
ap-name
Name of the Cisco lightweight access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to reset a Cisco lightweight access point named AP2:
Displays the global syslog server settings for access points.
ap name slot
To configure various slot parameters, use the
apnameslot command. To disable a slot on a Cisco lightweight access point, use the
no form of this command.
Slot downlink radio to which the channel is assigned.
You can specify the following slot numbers:
0—Enables slot number 0 on a Cisco lightweight access point.
1—Enables slot number 1 on a Cisco lightweight access point.
2—Enables slot number 2 on a Cisco lightweight access point.
3—Enables slot number 3 on a Cisco lightweight access point.
channel
Specifies the channel for the slot.
global
Specifies channel global properties for the slot.
number
Specifies the channel number for the slot.
channel-number
Channel number from 1 to 169.
width
Specifies the channel width for the slot.
channel-width
Channel width from 20 to 40.
rtsthreshold
Specifies the RTS/CTS threshold for an access point.
value
RTS/CTS threshold value from 0 to 65535.
shutdown
Shuts down the slot.
txpower
Specifies Tx power for the slot.
global
Specifies auto-RF for the slot.
channel-level
Transmit power level for the slot from 1 to 7.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to enable slot 3 for the access point abc:
Switch# ap name abc slot 3
This example shows how to configure RTS for the access point abc:
Switch# ap name abc slot 3 rtsthreshold 54
ap name static-ip
To configure lightweight access point static IP settings, use the
apnamestatic-ip command. To disable the Cisco lightweight access point static IP address, use the
no form of this command.
Specifies the Cisco access point static IP address.
ip-address
Cisco access point static IP address.
netmask
Specifies the Cisco access point static IP netmask.
netmask
Cisco access point static IP netmask.
gateway
Specifies the Cisco access point gateway.
gateway
IP address of the Cisco access point gateway.
nameserver
Specifies a DNS server so that a specific access point can discover the switch using DNS resolution.
ip-address
IP address of the DNS server.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
An access point cannot discover the switch using Domain Name System (DNS) resolution if a static IP address is configured for the access point unless you specify a DNS server and the domain to which the access point belongs.
Examples
This example shows how to configure an access point static IP address:
Switch# ap name AP2 static-ip ip-address 192.0.2.54 netmask 255.255.255.0 gateway 192.0.2.1
ap name stats-timer
To set the time in seconds that the Cisco lightweight access point sends its DOT11 statistics to the Cisco switch, use the
apnamestats-timer command.
apnameap-namestats-timertimer-value
Syntax Description
ap-name
Name of the Cisco lightweight access point.
timer-value
Time in seconds from 0 to 65535. A zero value disables the timer.
Command Default
0 (Disabled).
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
A value of 0 (zero) means that the Cisco lightweight access point does not send any DOT11 statistics. The acceptable range for the timer is from 0 to 65535 seconds, and the Cisco lightweight access point must be disabled to set this value.
Examples
This example shows how to set the stats timer to 600 seconds for access point AP2:
Switch# ap name AP2 stats-timer 600
ap name syslog host
To configure a syslog server for a specific Cisco lightweight access point, use the
apnamesysloghost command.
apnameap-namesysloghostsyslog-host-ip-address
Syntax Description
ap-name
Name of the Cisco lightweight access point.
syslog-host-ip-address
IP address of the syslog server.
Command Default
255.255.255.255
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
By default, the syslog server IP address for each access point is 255.255.255.255, which indicates that it is not yet set. When the default value is used, the global access point syslog server IP address is pushed to the access point.
Examples
This example shows how to configure a syslog server:
This example shows how to configure alert level system logging:
Switch# ap name AP2 syslog level alert
ap name tcp-adjust-mss
To enable or disable the TCP maximum segment size (MSS) on a particular access point, use the
apnametcp-adjust-mss command. To disable the TCP maximum segment size (MSS) on a particular access point, use the no form of this command.
apnameap-nametcp-adjust-msssizesize
apnameap-namenotcp-adjust-mss
Syntax Description
ap-name
Name of the access point.
size
Maximum segment size, from 536 to 1363 bytes.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
When you enable this feature, the access point checks for TCP packets to and from wireless clients in its data path. If the MSS of these packets is greater than the value that you configured or greater than the default value for the Control and Provisioning of Wireless Access Points (CAPWAP) tunnel, the access point changes the MSS to the new configured value. If the MSS of these packets is greater than the value that you have configured or greater than the default value for the CAPWAP tunnel, the access point changes the MSS to the newly configured value.
Examples
This example shows how to enable the TCP MSS on access point Cisco_ap1:
To configure the settings used for downgrading a lightweight access point to an autonomous access point, use the
apnametftp-downgrade command.
apnameap-nametftp-downgradetftp-server-ipfilename
Syntax Description
ap-name
Name of the Cisco lightweight access point.
tftp-server-ip
IP address of the TFTP server.
filename
Filename of the access point image file on the TFTP server.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to configure the settings for downgrading access point AP1:
Switch# ap name Ap01 tftp-downgrade 172.21.12.45 ap3g1-k9w7-tar.124-25d.JA.tar
ap power injector
To configure the power injector state for all the Cisco lightweight access points that are joined to the switch, use the
appowerinjector command. To delete the power injector state for all access points, use the
no form of this command.
Detects the MAC address of the current switch port that has a power injector.
override
Overrides the safety checks and assumes a power injector is always installed.
switch-mac-address
Specifies the MAC address of the switch port with an installed power injector.
switch-MAC-address
Specifies the MAC address of the switch port with an installed power injector.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to enable the power injector state for all the Cisco lightweight access points that are joined to the switch:
Switch(config)# ap power injector switch-mac-address aaaa.bbbb.cccc
ap power pre-standard
To set the Cisco lightweight access points that are joined to the switch to be powered by a high-power Cisco switch, use the appowerpre-standard command. To disable the pre standard power for all access points, use the no form of this command.
appowerpre-standard
noappowerpre-standard
Syntax Description
This command has no keywords and arguments.
Command Default
Disabled
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to enable the inline power Cisco prestandard switch state for access point AP02:
Controller(config)# ap power pre-standard
ap reporting-period
To configure the access point rogue/error reporting period, use the
apreporting-period command. To disable the access point rogue/error reporting period, use the
no form of this command.
apreporting-periodvalue
noapreporting-period
Syntax Description
value
Time period in seconds from 10 to 120.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example show how to configure the access point rogue/error reporting:
Switch(config)# ap reporting-period 100
This example show how to disable the access point rogue/error reporting:
Switch(config)# no ap reporting-period 100
ap reset-button
To configure the Reset button for all Cisco lightweight access points that are joined to the switch, use the
apreset-button command. To disable the Reset button for all access points, use the
no form of this command.
apreset-button
noapreset-button
Syntax Description
This command has no keywords and arguments.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to configure the Reset button for all access points that are joined to the controller:
Switch(config)# ap reset-button
ap static-ip
To configure Cisco lightweight access point static IP address settings, use the
apstatic-ip command. To disable access point static IP settings, use the no form of this command.
Specifies the domain to which a specific access point or all access points belong.
domain-name
Domain name.
name-server
Specifies a DNS server so that a specific access point or all access points can discover the switch using DNS resolution.
ip-address
DNS server IP address.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
An access point cannot discover the switch using Domain Name System (DNS) resolution if a static IP address is configured for the access point, unless you specify a DNS server and the domain to which the access point belongs.
Examples
This example shows how to configure a static IP address for all access points:
Switch(config)# ap static-ip domain cisco.com
ap syslog
To configure the system logging settings for all Cisco lightweight access points that are joined to the switch, use the
apsyslog command.
Specifies a global syslog server for all access points that join the switch.
ipaddress
IP address of the syslog server.
level
Specifies the system logging level for all the access points joined to the switch.
alert
Specifies alert level system logging for all Cisco access points.
critical
Specifies critical level system logging for all Cisco access points.
debug
Specifies debug level system logging for all Cisco access points.
emergency
Specifies emergency level system logging for all Cisco access points.
errors
Specifies errors level system logging for all Cisco access points.
information
Specifies information level system logging for all Cisco access points.
notification
Specifies notification level system logging for all Cisco access points.
warning
Specifies warning level system logging for all Cisco access points.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
By default, the global syslog server IP address for all access points is 255.255.255.255. Make sure that the access points can reach the subnet on which the syslog server resides before configuring the syslog server on the switch. If the access points cannot reach this subnet, the access points are unable to send out syslog messages.
Examples
This example shows how to configure a global syslog server for all access points:
Switch(config)# ap syslog host 172.21.34.45
ap tcp-adjust-mss size
To enable the TCP maximum segment size (MSS) on all Cisco lightweight access points, use the
aptcp-adjust-msssize command. To disable the TCP maximum segment size (MSS) on all Cisco lightweight access points no form of this command.
aptcp-adjust-msssizesize
noaptcp-adjust-mss
Syntax Description
size
Maximum segment size, from 536 to 1363 bytes.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
When you enable this feature, the access point checks for TCP packets to and from wireless clients in its data path. If the MSS of these packets is greater than the value that you configured or greater than the default value for the Control and Provisioning of Wireless Access Points (CAPWAP) tunnel, the access point changes the MSS to the new configured value.
Examples
This example shows how to enable the TCP MSS on all access points with a segment size of 1200:
To configure the settings used for downgrading a lightweight access point to an autonomous access point, use the
aptftp-downgrade command. To disable the settings used for downgrading a lightweight access point to an autonomous access point, use the
no form of this command.
aptftp-downgradetftp-server-ipfilename
noaptftp-downgrade
Syntax Description
tftp-server-ip
IP address of the TFTP server.
filename
Filename of the access point image file on the TFTP server.
Command Default
None
Command Modes
Global configuration
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to configure the settings for downgrading all access points:
Switch(config)# ap tftp-downgrade 172.21.23.45 ap3g1-k9w7-tar.124-25d.JA.tar
clear ap name tsm dot11 all
To clear the traffic stream metrics (TSM) statistics for a particular access point or all the access points, use the
clearapnametsmdot11all command.
clearapnameap-nametsmdot11
{ 24ghz | 5ghz }
all
Syntax Description
ap-name
Name of the Cisco lightweight access point.
24ghz
Specifies the 2.4 GHz band.
5ghz
Specifies the 5 GHz band.
all
Specifies all access points.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to clear the TSM statistics for an access point on the 2.4 GHz band:
Switch# clear ap name AP1 tsm dot11 24ghz all
clear ap config
To clear (reset to the default values) a lightweight access point’s configuration settings, use the
clearapconfig command.
(Optional) Deletes the existing event log and creates an empty event log file for a specific access point or for all access
points joined to the switch.
keep-ip-config
(Optional)
Specifies not to erase the static IP configuration of the Cisco access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
Entering this command does not clear the static IP address of the access point.
Examples
This example shows how to clear the access point’s configuration settings for the access point named AP01:
Displays the global syslog server settings for access points.
clear ap eventlog-all
To delete the existing event log and create an empty event log file for all access points, use the
clearapeventlog-all command.
clearapeventlog-all
Syntax Description
This command has no keywords and arguments.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to delete the event log for all access points:
Switch# clear ap eventlog-all
clear ap join statistics
To clear the join statistics for all access points or for a specific access point, use the
clearapjoinstatistics command.
clearapjoinstatistics
Syntax Description
This command has no keywords and arguments.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to clear the join statistics of all the access points:
Switch# clear ap join statistics
clear ap mac-address
To clear the MAC address for the join statistics for a specific Cisco lightweight access point, use the
clearapmac-address command.
clearapmac-addressmacjoinstatistics
Syntax Description
mac
Access point MAC address.
joinstatistics
Clears join statistics.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to clear the join statistics of an access point:
Switch# clear ap mac-address aaaa.bbbb.cccc join statistics
clear ap name wlan statistics
To clear WLAN statistics, use the
clearapnamewlanstatistics command.
clearapnameap-namewlanstatistics
Syntax Description
ap-name
Name of the Cisco lightweight access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to clear the WLAN configuration elements of the access point cisco_ap:
Switch# clear ap name cisco_ap wlan statistics
show ap cac voice
To display the list of all access points with brief voice statistics, which include bandwidth used, maximum bandwidth available, and the call information, use the showapcacvoice command.
showapcacvoice
Syntax Description
This command has no keywords and arguments.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to display
voice CAC details that correspond to Cisco lightweight access points:
To display the Control and Provisioning of Wireless Access Points (CAPWAP) configuration that is applied to all access points, use the
showapcapwap command.
showapcapwap
{ retransmit | timers | summary }
Syntax Description
retransmit
Displays the access point CAPWAP retransmit parameters.
timers
Displays the rogue access point entry timers.
summary
Displays the network configuration of the Cisco switch.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to display the
access point CAPWAP retransmit parameters:
Controller# show ap capwap retransmit
Global control packet retransmit interval : 3
Global control packet retransmit count : 5
AP Name Retransmit Interval Retransmit Count
---------------------------------------------------------------------------------
AP01 3 5
AP02 3 5
AP03 3 5
AP04 3 5
AP05 3 5
AP07 3 5
AP08 3 5
AP09 3 5
AP10 3 5
AP11 3 5
AP12 3 5
This example shows how to display the
rogue access point entry timers:
Controller# show ap capwap timers
AP Discovery timer : 10
AP Heart Beat timeout : 30
Primary Discovery timer : 120
Primed Join timeout : 0
Fast Heartbeat : Disabled
Fast Heartbeat timeout : 1
This example shows how to display the
the network configuration of the Cisco switch:
Controller# show ap capwap summary
AP Fallback : Enabled
AP Join Priority : Disabled
AP Master : Disabled
Primary backup Controller Name :
Primary backup Controller IP : 0.0.0.0
Secondary backup Controller Name :
Secondary backup Controller IP : 0.0.0.0
show ap cdp
To display the Cisco Discovery Protocol (CDP) information for all Cisco lightweight access points that are joined to the switch, use the
showapcdp command.
showapcdp
[ neighbors
[detail] ]
Syntax Description
neighbors
(Optional)
Displays neighbors using CDP.
detail
(Optional)
Displays details about a specific access point neighbor that is using CDP.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to display the CDP status of all access points:
Switch# show ap cdp
This example shows how to display details about all neighbors that are using CDP:
To display the air-quality summary information and air-quality worst information for the 802.11 networks, use the
showapdot11cleanairair-quality command.
Displays a summary of 802.11 radio band air-quality information.
worst
Displays the worst air-quality information for 802.11 networks.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to display the worst air-quality information for the 5 GHz band:
Switch# show ap dot11 5ghz cleanair air-quality worst
AQ = Air Quality
DFS = Dynamic Frequency Selection
AP Name Channel Avg AQ Min AQ Interferers DFS
------------ ------- ------ ------ ----------- -----
CISCO_AP3500 36 95 70 0 40
This example shows how to display the worst air-quality information for the 2.4 GHz band:
Switch# show ap dot11 24ghz cleanair air-quality worst
AQ = Air Quality
DFS = Dynamic Frequency Selection
AP Name Channel Avg AQ Min AQ Interferers DFS
------------ ------- ------ ------ ----------- -----
CISCO_AP3500 1 83 57 3 5
show ap dot11 cleanair config
To display the CleanAir configuration for the 802.11 networks, use the
showapdot11cleanairconfig command.
showapdot11
{ 24ghz | 5ghz }
cleanairconfig
Syntax Description
24ghz
Displays the 2.4 GHz band.
5ghz
Displays the 5 GHz band.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to display the CleanAir configuration for the 2.4 GHz band:
This example shows how to display Cisco radio RF group settings:
Switch# show ap dot11 5ghz group
Radio RF Grouping
802.11a Group Mode : STATIC
802.11a Group Update Interval : 600 seconds
802.11a Group Leader : web (10.10.10.1)
802.11a Group Member : web(10.10.10.1)
nb1(172.13.21.45) (*Unreachable)
802.11a Last Run : 438 seconds ago
Mobility Agents RF membership information
------------------------------------------------------------
No of 802.11a MA RF-members : 0
This example shows how to display 802.11a RF event and performance logging:
Switch# show ap dot11 5ghz logging
RF Event and Performance Logging
Channel Update Logging : Off
Coverage Profile Logging : Off
Foreign Profile Logging : Off
Load Profile Logging : Off
Noise Profile Logging : Off
Performance Profile Logging : Off
TxPower Update Logging : Off
This example shows how to display the 802.11a media stream configuration:
Switch# show ap dot11 5ghz media-stream
Multicast-direct : Disabled
Best Effort : Disabled
Video Re-Direct : Disabled
Max Allowed Streams Per Radio : Auto
Max Allowed Streams Per Client : Auto
Max Video Bandwidth : 0
Max Voice Bandwidth : 75
Max Media Bandwidth : 85
Min PHY Rate (Kbps) : 6000
Max Retry Percentage : 80
This example shows how to display the radio monitoring for the 802.11b network:
Switch# show ap dot11 5ghz monitor
Default 802.11a AP monitoring
802.11a Monitor Mode : Enabled
802.11a Monitor Mode for Mesh AP Backhaul : disabled
802.11a Monitor Channels : Country channels
802.11a RRM Neighbor Discover Type : Transparent
802.11a AP Coverage Interval : 180 seconds
802.11a AP Load Interval : 60 seconds
802.11a AP Noise Interval : 180 seconds
802.11a AP Signal Strength Interval : 60 seconds
This example shows how to display the global configuration and statistics of an 802.11a profile:
Switch# show ap dot11 5ghz profile
Default 802.11a AP performance profiles
802.11a Global Interference threshold.............. 10%
802.11a Global noise threshold..................... -70 dBm
802.11a Global RF utilization threshold............ 80%
802.11a Global throughput threshold................ 1000000 bps
802.11a Global clients threshold................... 12 clients
802.11a Global coverage threshold.................. 12 dB
802.11a Global coverage exception level............ 80%
802.11a Global client minimum exception lev........ 3 clients
This example shows how to display the network configuration of an 802.11a profile:
This example shows how to display the global configuration and statistics of an 802.11a profile:
Switch# show ap dot11 5ghz receiver
Default 802.11a AP performance profiles
802.11a Global Interference threshold.............. 10%
802.11a Global noise threshold..................... -70 dBm
802.11a Global RF utilization threshold............ 80%
802.11a Global throughput threshold................ 1000000 bps
802.11a Global clients threshold................... 12 clients
802.11a Global coverage threshold.................. 12 dB
802.11a Global coverage exception level............ 80%
802.11a Global client minimum exception lev........ 3 clients
This example shows how to display the global configuration and statistics of an 802.11a profile:
Switch# show ap dot11 5ghz service-policy
This example shows how to display a summary of the 802.11b access point settings:
Switch# show ap dot11 5ghz summary
AP Name MAC Address Admin State Operation State Channel TxPower
------- ----------------- ----------- --------------- ------- -------
CJ-1240 00:21:1b:ea:36:60 ENABLED UP 161 1( )
CJ-1130 00:1f:ca:cf:b6:60 ENABLED UP 56* 1(*)
This example shows how to display the configuration and statistics of the 802.11a transmit power cost:
Switch# show ap dot11 5ghz txpower
Automatic Transmit Power Assignment
Transmit Power Assignment Mode : AUTO
Transmit Power Update Interval : 600 seconds
Transmit Power Threshold : -70 dBm
Transmit Power Neighbor Count : 3 APs
Min Transmit Power : -10 dBm
Max Transmit Power : 30 dBm
Transmit Power Update Contribution : SNI.
Transmit Power Assignment Leader : web (10.10.10.1)
Last Run : 437 seconds ago
This example shows how to display the configuration and statistics of the 802.11a transmit power cost:
Switch# show ap dot11 5ghz ccx global
802.11a Client Beacon Measurements:
disabled
To display Ethernet statistics for all Cisco lightweight access points, use the
showapethernetstatistics command.
showapethernetstatistics
Syntax Description
This command has no keywords and arguments.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to display Ethernet statistics for all access points:
Switch# show ap ethernet statistics
show ap groups
To display information about all access point groups that are defined in the system, use the
showapgroups command.
showapgroups
Syntax Description
This command has no keywords and arguments.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to display information about all access point groups:
Switch# show ap groups
show ap image
To display the images present on Cisco lightweight access points, use the
showapimage command.
showapimage
Syntax Description
This command has no keywords and arguments.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to display
images on the access points:
Switch# show ap image
show ap join stats summary
To display the last join error detail for a specific access point, use the
showapjoinstatssummary command.
showapjoinstatssummary
Syntax Description
This command has no keywords and arguments.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Usage Guidelines
To obtain the MAC address of the 802.11 radio interface, enter the show interface command on the access point.
Examples
This example shows how to display specific join information for an access point:
Switch# show ap join stats summary
Number of APs : 1
Base MAC Ethernet MAC AP Name IP Address Status
--------------- --------------- --------------------- ---------------- -------------
-
c8f9.f91a.aa80 0000.0000.0000 N A 0.0.0.0 Not Joined
show ap link-encryption
To display the link encryption status, use the
showaplink-encryption command.
showaplink-encryption
Syntax Description
This command has no keywords and arguments.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example show how to display the link-encryption status:
Switch# show ap link-encryption
show ap mac-address
To display join-related statistics collected and last join error details for access points, use the
showapmac-address command.
Access point Ethernet MAC address or the MAC address of the 802.11 radio interface.
joinstats
Displays join information and statistics for Cisco access points.
detailed
Displays all join-related statistics collected.
summary
Displays the last join error detail.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to display join information for a specific access point that is trying to join the switch:
Switch# show ap mac-address d0c2.8267.8b00 join stats detailed
Discovery phase statistics
Discovery requests received : 6
Successful discovery responses sent : 6
Unsuccessful discovery request processing : 0
Reason for last unsuccessful discovery attempt : Not applicable
Time at last successful discovery attempt : Nov 20 17:25:10.841
Time at last unsuccessful discovery attempt : Not applicable
Join phase statistics
Join requests received : 3
Successful join responses sent : 3
Unsuccessful join request processing : 0
Reason for last unsuccessful join attempt : Not applicable
Time at last successful join attempt : Nov 20 17:25:20.998
Time at last unsuccessful join attempt : Not applicable
Configuration phase statistics
Configuration requests received : 8
Successful configuration responses sent : 3
Unsuccessful configuration request processing : 0
Reason for last unsuccessful configuration attempt : Not applicable
Time at last successful configuration attempt : Nov 20 17:25:21.177
Time at last unsuccessful configuration attempt : Not applicable
Last AP message decryption failure details
Reason for last message decryption failure : Not applicable
Last AP disconnect details
Reason for last AP connection failure : Number of message retransmission to the AP has reached maximum
Last join error summary
Type of error that occurred last : AP got or has been disconnected
Reason for error that occurred last : Number of message retransmission to the AP has reached maximum
Time at which the last join error occurred : Nov 20 17:22:36.438
This example shows how to display specific join information for an access point:
Switch# show ap mac-address d0c2.8267.8b00 join stats detailed
Is the AP currently connected to controller.......................... No
Time at which the AP joined this controller last time................ Aug 21 12:50:36:061
Type of error that occurred last..................................... Lwapp join request
rejected
Reason for error that occurred last.................................. RADIUS authorization
is pending for the AP
Time at which the last join error occurred........................... Aug 21 12:50:34:374
show ap monitor-mode summary
To display the current channel-optimized monitor mode settings, use the
showapmonitor-modesummary command.
showapmonitor-modesummary
Syntax Description
This command has no keywords and arguments.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to display current channel-optimized monitor mode settings:
Switch# show ap monitor-mode summary
AP Name Ethernet MAC Status Scanning Channel List
------- ------------- -------- -------- ----------------
AP_004 xx:xx:xx:xx:xx:xx Tracking 1,6,11, 4
show ap name auto-rf
To display the auto-RF settings for a Cisco lightweight access point, use the
showapnameauto-rf command.
showapnameap-nameauto-rfdot11
{ 24ghz | 5ghz }
Syntax Description
ap-name
Name of the Cisco lightweight access point.
24ghz
Displays the 2.4 GHz band.
5ghz
Displays the 5 GHz band.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to display auto-RF information for an access point:
Switch# show ap name AP01 auto-rf dot11 24ghz
Number of Slots : 2
AP Name : TSIM_AP-1
MAC Address : 0000.2000.02f0
Slot ID : 0
Radio Type : 802.11b/g
Subband Type : All
Noise Information
Noise Profile : Failed
Channel 1 : 24 dBm
Channel 2 : 48 dBm
Channel 3 : 72 dBm
Channel 4 : 96 dBm
Channel 5 : 120 dBm
Channel 6 : -112 dBm
Channel 7 : -88 dBm
Channel 8 : -64 dBm
Channel 9 : -40 dBm
Channel 10 : -16 dBm
Channel 11 : 8 dBm
Interference Information
Interference Profile : Passed
Channel 1 : -128 dBm @ 0% busy
Channel 2 : -71 dBm @ 1% busy
Channel 3 : -72 dBm @ 1% busy
Channel 4 : -73 dBm @ 2% busy
Channel 5 : -74 dBm @ 3% busy
Channel 6 : -75 dBm @ 4% busy
Channel 7 : -76 dBm @ 5% busy
Channel 8 : -77 dBm @ 5% busy
Channel 9 : -78 dBm @ 6% busy
Channel 10 : -79 dBm @ 7% busy
Channel 11 : -80 dBm @ 8% busy
Load Information
Load Profile : Passed
Receive Utilization : 10%
Transmit Utilization : 20%
Channel Utilization : 50%
Attached Clients : 0 clients
Coverage Information
Coverage Profile : Passed
Failed Clients : 0 clients
Client Signal Strengths
RSSI -100 dBm : 0 clients
RSSI -92 dBm : 0 clients
RSSI -84 dBm : 0 clients
RSSI -76 dBm : 0 clients
RSSI -68 dBm : 0 clients
RSSI -60 dBm : 0 clients
RSSI -52 dBm : 0 clients
Client Signal to Noise Ratios
SNR 0 dB : 0 clients
SNR 5 dB : 0 clients
SNR 10 dB : 0 clients
SNR 15 dB : 0 clients
SNR 20 dB : 0 clients
SNR 25 dB : 0 clients
SNR 30 dB : 0 clients
SNR 35 dB : 0 clients
SNR 40 dB : 0 clients
SNR 45 dB : 0 clients
Nearby APs
AP 0000.2000.0300 slot 0 : -68 dBm on 11 (10.10.10.1)
AP 0000.2000.0400 slot 0 : -68 dBm on 11 (10.10.10.1)
AP 0000.2000.0600 slot 0 : -68 dBm on 11 (10.10.10.1)
Radar Information
Channel Assignment Information
Current Channel Average Energy : 0 dBm
Previous Channel Average Energy : 0 dBm
Channel Change Count : 0
Last Channel Change Time : Wed Oct 17 08:13:36 2012
Recommended Best Channel : 11
RF Parameter Recommendations
Power Level : 1
RTS/CTS Threshold : 2347
Fragmentation Threshold : 2346
Antenna Pattern : 0
Persistent Interference Devices
show ap name bhmode
To display Cisco bridge backhaul mode, use the
showapnamebhmode command.
showapnameap-namebhmode
Syntax Description
ap-name
Name of the Cisco lightweight access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to display Cisco bridge backhaul mode of an access point:
Switch# show ap name TSIM_AP-1 bhmode
show ap name bhrate
To display the Cisco bridge backhaul rate, use the
showapnamebhrate command.
showapnameap-namebhrate
Syntax Description
ap-name
Name of the Cisco lightweight access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to display the Cisco bridge backhaul rate for an access point:
Switch# show ap name AP01 bhrate
show ap name cac voice
To display voice call admission control details for a specific Cisco lightweight access point, use the
showapnamecacvoice command.
showapnameap-namecacvoice
Syntax Description
ap-name
Name of the Cisco lightweight access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to display voice call admission control details for an access point:
This example shows how to display metrics for successful calls for an access point:
Switch# show ap name AP01 dot11 24ghz call-control metrics
Slot# Call Count Call Duration
---------------------------------
0 0 0
show ap name capwap retransmit
To display Control and Provisioning of Wireless Access Points (CAPWAP) retransmit settings, use the
showapnamecapwapretransmit command.
showapnameap-namecapwapretransmit
Syntax Description
ap-name
Name of the Cisco lightweight access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to display CAPWAP retransmit settings of an access point:
Switch# show ap name AP01 capwap retransmit
AP Name Retransmit Interval Retransmit Count
-------- ------------------- ----------------
AP01 3 5
show ap name ccx rm
To display an access point’s Cisco Client eXtensions (CCX) radio management status information, use the
showapnameccxrm command.
showapnameap-nameccxrmstatus
Syntax Description
ap-name
Name of the Cisco lightweight access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to display CCX radio management information for an access point:
Switch# show ap name AP01 ccx rm status
802.11b/g Radio
Beacon Request : Disabled
Channel Load Request : Disabled
Frame Request : Disabled
Noise Histogram Request : Disabled
Path Loss Request : Disabled
Interval : 60
Iteration : 0
802.11a Radio
Beacon Request : Disabled
Channel Load Request : Disabled
Frame Request : Disabled
Noise Histogram Request : Disabled
Path Loss Request : Disabled
Interval : 60
Iteration : 0
show ap name cdp
To display the Cisco Discovery Protocol (CDP) information for an access point, use the
showapnamecdp command.
showapnameap-namecdp
[ neighbors
[detail] ]
Syntax Description
ap-name
Name of the Cisco lightweight access point.
neighbors
(Optional) Displays neighbors that are using CDP.
detail
(Optional)
Displays details about a specific access point neighbor that is using CDP.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to display CDP information for an access point:
Switch# show ap name AP01 cdp neighbors detail
show ap name channel
To display the available channels for a specific mesh access point, use the
showapnamechannel command.
showapnameap-namechannel
Syntax Description
ap-name
Name of the Cisco lightweight access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to display the available channels for a particular access point:
Switch# show ap name AP01 channel
Slot ID : 0
Allowed Channel List : 1, 2, 3, 4, 5, 6, 7, 8, 9
10, 11
Slot ID : 1
Allowed Channel List : 36, 40, 44, 48, 52, 56, 60, 64, 100
104, 108, 112, 116, 132, 136, 140, 149, 153
157, 161
show ap name config
To display common information and Ethernet VLAN tagging information for a specific Cisco lightweight access point, use the
showapnameconfig command.
showapnameap-nameconfig
{ ethernet | general }
Syntax Description
ap-name
Name of the Cisco lightweight access point.
ethernet
Displays Ethernet tagging configuration information for an access point.
general
Displays common information for an access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to display Ethernet tagging information for an access point:
Switch# show ap name AP01 config ethernet
VLAN Tagging Information for AP01
This example shows how to display common information for an access point:
Switch# show ap name AP01 config general
Cisco AP Name : AP01
Cisco AP Identifier : 5
Country Code : US - United States
Regulatory Domain Allowed by Country : 802.11bg:-A 802.11a:-A
AP Country Code : US - United States
AP Regulatory Domain : Unconfigured
Switch Port Number : Te1/0/1
MAC Address : 0000.2000.02f0
IP Address Configuration : Static IP assigned
IP Address : 10.10.10.12
IP Netmask : 255.255.0.0
Gateway IP Address : 10.10.10.1
Fallback IP Address Being Used : 10.10.10.12
Domain : Cisco
Name Server : 0.0.0.0
CAPWAP Path MTU : 1485
Telnet State : Enabled
SSH State : Disabled
Cisco AP Location : sanjose
Cisco AP Group Name : default-group
Primary Cisco Controller Name : CAPWAP Controller
Primary Cisco Controller IP Address : 10.10.10.1
Secondary Cisco Controller Name :
Secondary Cisco Controller IP Address : Not Configured
Tertiary Cisco Controller Name :
Tertiary Cisco Controller IP Address : Not Configured
Administrative State : Enabled
Operation State : Registered
AP Mode : Local
AP Submode : Not Configured
Remote AP Debug : Disabled
Logging Trap Severity Level : informational
Software Version : 7.4.0.5
Boot Version : 7.4.0.5
Stats Reporting Period : 180
LED State : Enabled
PoE Pre-Standard Switch : Disabled
PoE Power Injector MAC Address : Disabled
Power Type/Mode : Power Injector/Normal Mode
Number of Slots : 2
AP Model : 1140AG
AP Image : C1140-K9W8-M
IOS Version :
Reset Button :
AP Serial Number : SIM1140K001
AP Certificate Type : Manufacture Installed
Management Frame Protection Validation : Disabled
AP User Mode : Customized
AP User Name : cisco
AP 802.1X User Mode : Not Configured
AP 802.1X User Name : Not Configured
Cisco AP System Logging Host : 255.255.255.255
AP Up Time : 15 days 16 hours 19 minutes 57
seconds
AP CAPWAP Up Time : 4 minutes 56 seconds
Join Date and Time : 10/18/2012 04:48:56
Join Taken Time : 15 days 16 hours 15 minutes 0
seconds
Join Priority : 1
Ethernet Port Duplex : Auto
Ethernet Port Speed : Auto
AP Link Latency : Disabled
Rogue Detection : Disabled
AP TCP MSS Adjust : Disabled
AP TCP MSS Size : 6146
show ap name config dot11
To display 802.11 configuration information that corresponds to specific Cisco lightweight access points, use the
showapnameconfigdot11 command.
This example shows how to display 802.11b configuration information that corresponds to a specific Cisco lightweight access point:
Switch# show ap name AP01 config dot11 24ghz
Cisco AP Identifier : 5
Cisco AP Name : AP01
Country Code : US - United States
Regulatory Domain Allowed by Country : 802.11bg:-A 802.11a:-A
AP Country Code : US - United States
AP Regulatory Domain : -A
Switch Port Number : Te1/0/1
MAC Address : 0000.2000.02f0
IP Address Configuration : Static IP assigned
IP Address : 10.10.10.12
IP Netmask : 255.255.0.0
Gateway IP Address : 10.10.10.1
Fallback IP Address Being Used : 10.10.10.12
Domain : Cisco
Name Server : 0.0.0.0
CAPWAP Path MTU : 1485
Telnet State : Enabled
SSH State : Disabled
Cisco AP Location : sanjose
Cisco AP Group Name : default-group
Administrative State : Enabled
Operation State : Registered
AP Mode : Local
AP Submode : Not Configured
Remote AP Debug : Disabled
Logging Trap Severity Level : informational
Software Version : 7.4.0.5
Boot Version : 7.4.0.5
Mini IOS Version : 3.0.51.0
Stats Reporting Period : 180
LED State : Enabled
PoE Pre-Standard Switch : Disabled
PoE Power Injector MAC Address : Disabled
Power Type/Mode : Power Injector/Normal Mode
Number of Slots : 2
AP Model : 1140AG
AP Image : C1140-K9W8-M
IOS Version :
Reset Button :
AP Serial Number : SIM1140K001
AP Certificate Type : Manufacture Installed
Management Frame Protection Validation : Disabled
AP User Mode : Customized
AP User Name : cisco
AP 802.1X User Mode : Not Configured
AP 802.1X User Name : Not Configured
Cisco AP System Logging Host : 255.255.255.255
AP Up Time : 15 days 17 hours 9 minutes 41
seconds
AP CAPWAP Up Time : 54 minutes 40 seconds
Join Date and Time : 10/18/2012 04:48:56
Join Taken Time : 15 days 16 hours 15 minutes 0
seconds
Attributes for Slot 0
Radio Type : 802.11n - 2.4 GHz
Administrative State : Enabled
Operation State : Up
Cell ID : 0
Station Configuration
Configuration : Automatic
Number of WLANs : 1
Medium Occupancy Limit : 100
CFP Period : 4
CFP Maximum Duration : 60
BSSID : 000020000200
Operation Rate Set
1000 Kbps : MANDATORY
2000 Kbps : MANDATORY
5500 Kbps : MANDATORY
11000 Kbps : MANDATORY
6000 Kbps : SUPPORTED
9000 Kbps : SUPPORTED
12000 Kbps : SUPPORTED
18000 Kbps : SUPPORTED
24000 Kbps : SUPPORTED
36000 Kbps : SUPPORTED
48000 Kbps : SUPPORTED
54000 Kbps : SUPPORTED
MCS Set
MCS 0 : SUPPORTED
MCS 1 : SUPPORTED
MCS 2 : SUPPORTED
MCS 3 : SUPPORTED
MCS 4 : SUPPORTED
MCS 5 : SUPPORTED
MCS 6 : SUPPORTED
MCS 7 : SUPPORTED
MCS 8 : SUPPORTED
MCS 9 : SUPPORTED
MCS 10 : SUPPORTED
MCS 11 : SUPPORTED
MCS 12 : SUPPORTED
MCS 13 : SUPPORTED
MCS 14 : SUPPORTED
MCS 15 : SUPPORTED
MCS 16 : DISABLED
MCS 17 : DISABLED
MCS 18 : DISABLED
MCS 19 : DISABLED
MCS 20 : DISABLED
MCS 21 : DISABLED
MCS 22 : DISABLED
MCS 23 : DISABLED
Beacon Period : 100
Fragmentation Threshold : 2346
Multi Domain Capability Implemented : True
Multi Domain Capability Enabled : True
Country String : US
Multi Domain Capability
Configuration : Automatic
First Channel : 0
Number of Channels : 0
Country String : US
MAC Operation Parameters
Configuration : Automatic
Fragmentation Threshold : 2346
Packet Retry Limit : 64
Legacy Tx Beamforming Setting : Disabled
Tx Power
Number of Supported Power Levels : 8
Tx Power Level 1 : 20 dBm
Tx Power Level 2 : 17 dBm
Tx Power Level 3 : 14 dBm
Tx Power Level 4 : 11 dBm
Tx Power Level 5 : 8 dBm
Tx Power Level 6 : 5 dBm
Tx Power Level 7 : 2 dBm
Tx Power Level 8 : -1 dBm
Tx Power Configuration : Automatic
Current Tx Power Level : 1
Phy OFDM Parameters
Configuration : Automatic
Current Channel : 11
Extension Channel : None
Channel Width : 20 MHz
Allowed Channel List : 1, 2, 3, 4, 5, 6, 7, 8, 9
10, 11
TI Threshold : 0
Antenna Type : Internal
Internal Antenna Gain (in .5 dBi units) : 0
Diversity : Diversity enabled
802.11n Antennas
Tx : A, B, C
Rx : A, B, C
Performance Profile Parameters
Configuration : Automatic
Interference Threshold : 10%
Noise Threshold : -70 dBm
RF Utilization Threshold : 80%
Data Rate Threshold : 1000000 bps
Client Threshold : 12 clients
Coverage SNR Threshold : 15 dB
Coverage Exception Level : 25%
Client Minimum Exception Level : 3 clients
RTS/CTS Threshold : 2347
Short Retry Limit : 7
Long Retry Limit : 4
Max Tx MSDU Lifetime : 512
Max Rx Lifetime : 512
CleanAir Management Information
CleanAir Capable : Yes
CleanAir Management Admin State : Enabled
CleanAir Management Operation State : Up
Rapid Udpate Mode : Disabled
Spectrum Expert connection : Disabled
CleanAir NSI Key : 377313C8F290E246E640C4EF177BED
88
Spectrum Expert connections counter : 0
CleanAir Sensor State : Configured
Rogue Containment Information
Containment Count : 0
show ap name config slot
To display configuration information for slots on a specific Cisco lightweight access point, use the
showapnameconfigslot command.
showapnameap-nameconfigslot
{ 0 | 1 | 2 | 3 }
Syntax Description
ap-name
Name of the Cisco lightweight access point.
0
Displays slot number 0.
1
Displays slot number 1.
2
Displays slot number 2.
3
Displays slot number 3.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to display configuration information
for slots on an access point:
Switch# show ap name AP01 config slot 0
Cisco AP Identifier : 3
Cisco AP Name : AP01
Country Code : US - United States
Regulatory Domain Allowed by Country : 802.11bg:-A 802.11a:-A
AP Country Code : US - United States
AP Regulatory Domain : -A
Switch Port Number : Te1/0/1
MAC Address : 0000.2000.02f0
IP Address Configuration : Static IP assigned
IP Address : 10.10.10.12
IP Netmask : 255.255.0.0
Gateway IP Address : 10.10.10.1
Fallback IP Address Being Used : 10.10.10.12
Domain : Cisco
Name Server : 0.0.0.0
CAPWAP Path MTU : 1485
Telnet State : Enabled
SSH State : Disabled
Cisco AP Location : sanjose
Cisco AP Group Name : default-group
Administrative State : Enabled
Operation State : Registered
AP Mode : Local
AP Submode : Not Configured
Remote AP Debug : Disabled
Logging Trap Severity Level : informational
Software Version : 7.4.0.5
Boot Version : 7.4.0.5
Mini IOS Version : 3.0.51.0
Stats Reporting Period : 180
LED State : Enabled
PoE Pre-Standard Switch : Disabled
PoE Power Injector MAC Address : Disabled
Power Type/Mode : Power Injector/Normal Mode
Number of Slots : 2
AP Model : 1140AG
AP Image : C1140-K9W8-M
IOS Version :
Reset Button :
AP Serial Number : SIM1140K001
AP Certificate Type : Manufacture Installed
Management Frame Protection Validation : Disabled
AP User Mode : Customized
AP User Name : cisco
AP 802.1X User Mode : Not Configured
AP 802.1X User Name : Not Configured
Cisco AP System Logging Host : 255.255.255.255
AP Up Time : 15 days 16 hours 1 minute 19 s
econds
AP CAPWAP Up Time : 20 hours 21 minutes 37 seconds
Join Date and Time : 10/17/2012 08:13:36
Join Taken Time : 14 days 19 hours 39 minutes 41
seconds
Attributes for Slot 0
Radio Type : 802.11n - 2.4 GHz
Administrative State : Enabled
Operation State : Up
Cell ID : 0
Station Configuration
Configuration : Automatic
Number of WLANs : 1
Medium Occupancy Limit : 100
CFP Period : 4
CFP Maximum Duration : 60
BSSID : 000020000200
Operation Rate Set
1000 Kbps : MANDATORY
2000 Kbps : MANDATORY
5500 Kbps : MANDATORY
11000 Kbps : MANDATORY
6000 Kbps : SUPPORTED
9000 Kbps : SUPPORTED
12000 Kbps : SUPPORTED
18000 Kbps : SUPPORTED
24000 Kbps : SUPPORTED
36000 Kbps : SUPPORTED
48000 Kbps : SUPPORTED
54000 Kbps : SUPPORTED
MCS Set
MCS 0 : SUPPORTED
MCS 1 : SUPPORTED
MCS 2 : SUPPORTED
MCS 3 : SUPPORTED
MCS 4 : SUPPORTED
MCS 5 : SUPPORTED
MCS 6 : SUPPORTED
MCS 7 : SUPPORTED
MCS 8 : SUPPORTED
MCS 9 : SUPPORTED
MCS 10 : SUPPORTED
MCS 11 : SUPPORTED
MCS 12 : SUPPORTED
MCS 13 : SUPPORTED
MCS 14 : SUPPORTED
MCS 15 : SUPPORTED
MCS 16 : DISABLED
MCS 17 : DISABLED
MCS 18 : DISABLED
MCS 19 : DISABLED
MCS 20 : DISABLED
MCS 21 : DISABLED
MCS 22 : DISABLED
MCS 23 : DISABLED
Beacon Period : 100
Fragmentation Threshold : 2346
Multi Domain Capability Implemented : True
Multi Domain Capability Enabled : True
Country String : US
Multi Domain Capability
Configuration : Automatic
First Channel : 0
Number of Channels : 0
Country String : US
MAC Operation Parameters
Configuration : Automatic
Fragmentation Threshold : 2346
Packet Retry Limit : 64
Tx Power
Number of Supported Power Levels : 8
Tx Power Level 1 : 20 dBm
Tx Power Level 2 : 17 dBm
Tx Power Level 3 : 14 dBm
Tx Power Level 4 : 11 dBm
Tx Power Level 5 : 8 dBm
Tx Power Level 6 : 5 dBm
Tx Power Level 7 : 2 dBm
Tx Power Level 8 : -1 dBm
Tx Power Configuration : Automatic
Current Tx Power Level : 1
Phy OFDM Parameters
Configuration : Automatic
Current Channel : 11
Extension Channel : None
Channel Width : 20 MHz
Allowed Channel List : 1, 2, 3, 4, 5, 6, 7, 8, 9
10, 11
TI Threshold : 0
Antenna Type : Internal
Internal Antenna Gain (in .5 dBi units) : 0
Diversity : Diversity enabled
802.11n Antennas
Tx : A, B, C
Rx : A, B, C
Performance Profile Parameters
Configuration : Automatic
Interference Threshold : 10%
Noise Threshold : -70 dBm
RF Utilization Threshold : 80%
Data Rate Threshold : 1000000 bps
Client Threshold : 12 clients
Coverage SNR Threshold : 15 dB
Coverage Exception Level : 25%
Client Minimum Exception Level : 3 clients
Rogue Containment Information
Containment Count : 0
show ap name core-dump
To display the memory core dump information for a lightweight access point, use the
showapnamecore-dump command.
showapnameap-namecore-dump
Syntax Description
ap-name
Name of the Cisco lightweight access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to display the memory core dump information:
Switch# show ap name 3602a core-dump
TFTP server IP : 172.31.25.21
Memory core dump file : 3602a.dump
Memory core dump file compressed : Disabled
To display the data plane status of a specific Cisco lightweight access point, use the
showapnamedata-plane command.
showapnameap-namedata-plane
Syntax Description
ap-name
Name of the Cisco lightweight access point.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to display the data plane status of an access point:
Switch# show ap name AP01 data-plane
Min Data Data Max Data Last
AP Name Round Trip Round Trip Round Trip Update
------------------ -------------- -------------- -------------- --------
AP01 0.000s 0.000s 0.000s 00:00:00
show ap name dot11
To display 802.11a or 802.11b configuration information that corresponds to specific Cisco lightweight access points, use the
showapnamedot11 command.
Displays the list of all access points to which the client has associations.
client-mac
MAC address of the client.
Command Default
None
Command Modes
Any command mode
Command History
Release
Modification
Cisco IOS XE 3.2SE
This command was introduced.
Examples
This example shows how to display the service policy that is associated with the access point:
Switch# show ap name test-ap dot11 24ghz service-policy output
Policy Name : test-ap1
Policy State : Installed
This example shows how to display the CCX RRM 802.11 configuration for a specific access point:
Switch# show ap name AP01 dot11 24ghz ccx
This example show how to display CDP information for a specific access point:
Switch# show ap name AP01 dot11 24ghz cdp
AP Name AP CDP State
--------------------- --------------
AP03 Disabled
This example show how to display the configuration and statistics of 802.11b profiling for a specific access point:
Switch# show ap name AP01 dot11 24ghz profile
802.11b Cisco AP performance profile mode : GLOBAL
802.11b Cisco AP Interference threshold : 10 %
802.11b Cisco AP noise threshold : -70 dBm
802.11b Cisco AP RF utilization threshold : 80 %
802.11b Cisco AP throughput threshold : 1000000 bps
802.11b Cisco AP clients threshold : 12 clients
This example show how to display downstream service policy information for a specific access point:
Switch# show ap name AP01 dot11 24ghz service-policy output
Policy Name : def-11gn
Policy State : Installed
This example show how to display statistics for a specific access point:
Switch# show ap name AP01 dot11 24ghz stats
Number of Users................................: 0
TxFragmentCount................................: 0
MulticastTxFrameCnt............................: 0
FailedCount....................................: 0
RetryCount.....................................: 0
MultipleRetryCount.............................: 0
FrameDuplicateCount............................: 0
RtsSuccessCount................................: 0
RtsFailureCount................................: 0
AckFailureCount................................: 0
RxIncompleteFragment...........................: 0
MulticastRxFrameCnt............................: 0
FcsErrorCount..................................: 0
TxFrameCount...................................: 0
WepUndecryptableCount..........................: 0
TxFramesDropped................................: 0
Call Admission Control (CAC) Stats
Voice Bandwidth in use(% of config bw).........: 0
Video Bandwidth in use(% of config bw).........: 0
Total BW in use for Voice(%)...................: 0
Total BW in use for SIP Preferred call(%)......: 0
Load based Voice Call Stats
Total channel MT free..........................: 0
Total voice MT free............................: 0
Na Direct......................................: 0
Na Roam........................................: 0
WMM TSPEC CAC Call Stats
Total num of voice calls in progress...........: 0
Num of roaming voice calls in progress.........: 0
Total Num of voice calls since AP joined.......: 0
Total Num of roaming calls since AP joined.....: 0
Total Num of exp bw requests received..........: 0
Total Num of exp bw requests admitted..........: 0
Num of voice calls rejected since AP joined....: 0
Num of roam calls rejected since AP joined.....: 0
Num of calls rejected due to insufficent bw....: 0
Num of calls rejected due to invalid params....: 0
Num of calls rejected due to PHY rate..........: 0
Num of calls rejected due to QoS policy........: 0
SIP CAC Call Stats
Total Num of calls in progress.................: 0
Num of roaming calls in progress...............: 0
Total Num of calls since AP joined.............: 0
Total Num of roaming calls since AP joined.....: 0
Total Num of Preferred calls received..........: 0
Total Num of Preferred calls accepted..........: 0
Total Num of ongoing Preferred calls...........: 0
Total Num of calls rejected(Insuff BW).........: 0
Total Num of roam calls rejected(Insuff BW)....: 0
Band Select Stats
Num of dual band client .......................: 0
Num of dual band client added..................: 0
Num of dual band client expired ...............: 0
Num of dual band client replaced...............: 0
Num of dual band client detected ..............: 0
Num of suppressed client ......................: 0
Num of suppressed client expired...............: 0
Num of suppressed client replaced..............: 0
This example show how to display the traffic stream configuration for all clients that correspond to a specific access point:
Switch# show ap name AP01 dot11 24ghz tsm all
show ap name dot11 cleanair
To display CleanAir configuration information that corresponds to an access point, use the
showapnamedot11cleanair command.