User Guide for the CiscoWorks WLSE and WLSE Express, 2.11
Index

Table Of Contents

Symbols - Numerics - A - B - C - D - E - F - G - H - I - J - L - M - N - O - P - Q - R - S - T - U - V - W - X -

Index

Symbols

/tftpboot/public directory 16-63

Numerics

11a radio (non-IOS), configuring 6-85

advanced 6-95

data encryption 6-104

filters 6-88

hardware 6-90

identification 6-86

module service sets 6-108

primary module service set 6-112

QoS 6-115

searched channels 6-102

11b radio (non-IOS), configuring 6-66

advanced 6-76

filters 6-70

hardware 6-71

identification 6-67

searched channels 6-82

802.11a radio (IOS)

configuring 5-40

definition GL-1

802.11b/g radio (IOS)

configuring 5-27

definition of GL-1

A

AAA, definition GL-1

AAA-accounting.log file 18-40

AAA-cli.log file 18-40

AAA-daemon-manager.log file 18-40

AAA-database.log file 18-40

AAA server, external

ACS failed login report 16-80

AP 1100 or AP 1210 used as AAA server 4-24

AP usage report 11-123

Cisco ACS, ports used by 16-2

faults 3-1

monitoring 4-22

services supported 4-23

summary report 11-122

using both interfaces on WLSE 17-21

AAA server, internal

AP usage report 11-123

backup and restore, about 18-7

certificates, about 18-8

Cisco-PEAP

configuring, using CLI 18-45

configuring, using UI 18-26

clients

managing, using CLI 18-46

managing, using UI 18-33

configuring

overview 18-9

using CLI commands 18-43

using UI 18-11

database, reinitializing 18-58

domain authentication

configuring, using CLI 18-62

configuring, using UI 18-22

domain authentication, port used for 16-3

EAP-FAST

configuring, using CLI 18-49

configuring, using UI 18-30

EAP services supported 18-5

EAP-TLS

configuring, using CLI 18-30

configuring, using UI 18-30

fault monitoring 18-7

faults 3-1

groups

defining 18-37

mapping, using CLI 18-47

mapping, using UI 18-22

LDAP central server

configuring, using CLI 18-51

configuring, using UI 18-16

LDAP local server

configuring, using CLI 18-51

configuring, using UI 18-18

LDAP parameters, about 18-19

LEAP

configuring, using CLI 18-54

configuring, using UI 18-25

local user database

configuring, using CLI 18-61

configuring, using UI 18-35

logging

configuring 18-55

local 18-55

syslog 18-55

logs 18-40

monitoring 18-41

MS-PEAP

configuring, using CLI 18-57

configuring, using UI 18-28

naming guidelines 18-9

overview 18-2

ports used 18-7

processes 18-13

RADIUS attributes of the AAA server 18-64

reports

about 18-7

enabling 18-41

RSA keys, about 18-8

sessions

managing, using CLI 18-59

managing, using UI 18-39

software upgrade, about 18-7

starting and stopping 18-59

status

displaying, using CLI 18-13

displaying, using UI 18-60

summary report 11-122

syslog, using 18-55

trace levels

setting, using the CLI 18-61

setting, using the UI 18-14

trace log 18-40

tunneling attributes 18-69

users

database, methods for storing 18-4

local database, configuring using CLI 18-61

local database, configuring using UI 18-35

AAA-server.log file 18-40

aaa-server cisco-peap command (WLSE Express) 18-45

aaa-server client command (WLSE Express) 18-46

aaa-server domain-auth command (WLSE Express) 18-47

aaa-server ldap command (WLSE Express) 18-51

aaa-server leap command (WLSE Express) 18-54

aaa-server logging command (WLSE Express) 18-55

aaa-server reinit command (WLSE Express) 18-58

aaa-server start command (WLSE Express) 18-59

aaa-server status command (WLSE Express) 18-60

AAA-server-trace.log file 18-40

aaa-server trace command (WLSE Express) 18-61

aaa-server user command (WLSE Express) 18-61

aaa-server usergroup command (WLSE Express) 18-62

AAA-status.log file 18-40

access point

Aironet 4800 4-110

configured as an AAA server 4-24

configuring

ports used for 16-2

updating firmware 10-5

using Deployment Wizard 2-1

using Deployment Wizard templates 8-1

using IOS templates 5-1

using non-IOS templates 6-1

using radio manager assisted configuration 14-93

using WLSM templates 7-1

credentials

entering on WLSE 4-8

definition GL-1

duplicate IP addresses, handling 4-90

faults

displaying 3-6

notification settings 3-79

policy settings 3-14

thresholds settings 3-14

firmware

updating 10-5

versions, support for 16-67

HTTP username and password, specifying 4-15

infrastructure AP, definition GL-6

IOS

converting to 10-22

limitation on number of 4-89

limit on number of, displaying A-85

replacing 4-90

rogue AP detection 15-16

scanning-only APs 13-29

SSH passwords, entering on WLSE 4-17

system-defined groups for 4-108

Telnet passwords, entering on WLSE 4-17

user-defined groups for 4-112

viewing in Location Manager 14-2

WDS access point 12-9

access point reports

AP and bridge connected to router report 11-121

AP and bridge connected to switch report 11-119

associated client statistics real-time report 11-149

associations report 11-99

auto config retry report 11-84

CPU utilization real-time report 11-145

detailed report 11-92

EAP and MAC failed authentications report 11-116

Ethernet transmission statistics report 11-134

Ethertype protocol filters report 11-101

failed authentication and login attempt per AP report 11-117

group CDP inline power report 11-77

group client association report 11-51

group client port 11-72

group identity report 11-74

group inventory 11-81

group MBSSID report 11-64

group performance report

Ethernet utilization 11-128

RF utilization 11-127

group policy port 11-78

group security report 11-55

group security violation report 11-76

group serial number report 11-75

group SSID report 11-60

group VLAN report 11-65

hot standby report 11-113

IOS reports 11-49

LBS 11-82

MBSSID report 11-109

memory utilization real-time report 11-144

non-IOS reports 11-49

packet errors real-time report 11-147

packet statistics real-time report 11-146

per VLAN client (group) report 11-69

per VLAN client (individual) report 11-111

policy report 11-104

QoS report 11-105

radio utilization real-time report 11-148

RF and Ethernet utilization graph 11-135

RF and Ethernet utilization tabular report 11-136

RF transmission statistics report 11-132

SSID report 11-107

summary report 11-86

top n busiest clients report 11-137

top n client bit error rate report 11-140

top n client MIC error rate report 11-139

top n number of associations graph report 11-130

top n number of associations tabular report 11-129

top n percentage errors report 11-131

version summary report 11-83

VLAN report 11-110

accounting (non-IOS), configuring 6-146

ACS Failed Login report

running 16-83

address filters, configuring 6-19

ad-hoc network detection, IDS 15-46

admin access

(IOS) setting 5-52

local (non-IOS), setting 6-118

advanced

associations (non-IOS), configuring 6-51

security (IOS), configuring 5-92

settings, Ethernet port (non-IOS) 6-64

aggregation data for reports, intervals

about 4-100

resetting 4-97

understanding 4-100

apptyp command A-12

AP radio scans 14-58

AP summary report 11-86

AP usage report 11-123

AP usage report, displaying 11-123

archives

managing, configuration 9-1

ARP, definition GL-2

ARP cache, configuring

IOS template 5-144

assisted configuration, radio manager

guidelines 14-93

jobs 14-94

calculating parameters 14-103

copying 14-97

deleting 14-97

editing 14-97

filtering 14-97

refreshing job list 14-97

viewing details 14-97

viewing run log 14-97

assisted site survey

client walkabout 14-25

performing radio scan 14-23

radio parameters, generating 14-26

selecting APs 14-22

associations (non IOS), setting up

address filters 6-19

Ethertype filters 6-22

spanning tree protocol 6-17

associations (non-IOS), setting up

advanced 6-51

DSCP to CoS 6-58

IP port filters 6-30

IP protocol filters 6-26

policy groups 6-34

port assignments 6-57

primary service set 6-48

quality of service 6-42

service sets 6-43

VLANs 6-36

audience for this document xxviii

auth command A-12

authentication (WLSE)

CLI

displaying A-59

enabling A-12

external authentication of WLSE users 16-23

HTTPS

displaying A-59

enabling A-12

modules supported 16-23

overview 16-23

setting up

using CLI command 17-6

using Web interface 16-24

authentication, access point

failed and login attempt per AP report 11-117

failed for EAP and MAC report, displaying 11-116

authentication and protection attack detection 15-73

auto config retry group report 11-84

auto-managed configuration 9-56

assigning 9-56

options for email 9-60

automatic configurations, creating 9-49

auto re-site survey 13-9

checking for performance degradations 13-14

collecting baseline data 13-11

enabling, disabling 13-11

guidelines for running 13-10

monitoring AP performance 13-14

reviewing run log 13-11

running 13-11

selecting floors 13-11

understanding 13-9

AVVID, definition GL-2

B

backing up and restoring WLSE configuration

backing up

using CLI commands 17-9

using SCP (secure copy) 16-30

using Web interface 16-32

backup and restore log

clearing 16-29

displaying 16-7

backup CLI command A-13

backupconfig CLI command A-15

backup location, configuring

on Windows server 16-31

using the CLI 17-7

using the Web interface 16-29

files in /tftpboot/public directory 16-63

listbackup CLI command A-39

pre-released to released software not allowed 16-28

redundant nodes, backup and restore on 16-51

restore CLI command A-55

restoring

from one WLSE to another 17-13

using the CLI 17-10

using Web interface 16-34

secure copy (SCP) 16-30

show backupconfig CLI command A-60

backup command A-13

backupconfig command A-15

basic security template, configuring

IOS template 5-17

basic template, configuring

IOS template 5-10

non-IOS template 6-11

BDPU, definition GL-11

beta software, on WLSE

upgrade not allowed 16-10

black hole mitigation

definition GL-2

enabling 14-103

booting, WLSE

boot messages, displaying A-61

from the maintenance image 17-26

from Web interface 16-9

reload command A-52

BOOTP

definition GL-2

bridge

definition GL-2

firmware, updating 10-5

IOS, configuring 5-1

limitation on number of 4-89

non-IOS, configuring 6-1

bridge reports

AP and bridge connected to router report 11-121

AP and bridge connected to switch report 11-119

associations report 11-99

detailed report 11-92

Ethernet transmission statistics report 11-134

group auto config retry report 11-84

group client association report 11-51

group client report 11-72

group identity report 11-74

group inventory report 11-81

group LBS report 11-82

group MBSSID report 11-64

group performance report

Ethernet utilization 11-128

RF utilization 11-127

group policy report 11-78

group security report 11-55

group serial number report 11-75

group SSID report 11-60

group version summary report 11-83

group VLAN report 11-65

per VLAN client (group) report 11-69

per VLAN client (individual) report 11-111

RF and Ethernet utilization graph 11-135

RF transmission statistics report 11-132

top n number associations graph report 11-130

top n number associations tabular report 11-129

top n percentage errors report 11-131

browser

configuring 1-5

date and time display 1-15

supported browsers 1-5

BSS, definition GL-2

BSSID

definition GL-2

multiple 12-17

C

cautions

backup from pre-released to released software on WLSE not allowed 16-28

configuring for redundancy 16-45

converting APs to IOS 10-1

erase config command A-25

losing data

jobs, configuration 9-13

jobs, firmware 10-18

NAT, not supported on WLSE 1-1

reload command A-53

shutdown command, failure to run A-89

significance of xxviii

upgrading from pre-release software not allowed 16-10

CCK, definition GL-2

CCKM, definition GL-3

CCMP, definition GL-3

CDP (Cisco Discovery Protocol)

alternatives to 4-42

configuring

template (IOS) 5-108

template (non-IOS) 6-139

definition GL-3

individual device seeding 4-42

neighbors of WLSE, displaying A-62

status on WLSE, displaying A-63

understanding 4-39

cdp command A-16

CDP distance

definition GL-3

specifying 4-55

channel load data

determining 11-25

historical 11-27

reviewing 11-25

channels, monitoring 13-6

character set, allowable (in WLSE UI) B-1

ciscoinstall.log 16-7

CiscoWorks server

adding links to a WLSE 1-4

exporting devices to 4-103

importing devices from

procedure for 4-58

understanding 4-47

linking to CiscoWorks server 16-80

CKIP, definition GL-3

clearbackuphosts command A-18

clear command A-17

CLI

access to, configuring 16-71

command history feature A-3

command privileges A-2

commands A-1

command summary (table) A-4

conventions A-2

definition GL-3

help for commands A-3

maintenance image commands A-99

erase config A-99

fsck A-100

reload A-100

Privilege Level 0 commands A-11

apptyp A-12

exit A-26

ping A-48

show clock A-63

show domain-name A-67

show interfaces A-71

show version A-85

traceroute A-96

Privilege Level 15 commands A-11

aaa-server cisco-peap (WLSE Express) 18-45

aaa-server client (WLSE Express) 18-46

aaa-server domain-auth (WLSE Express) 18-47

aaa-server ldap (WLSE Express) 18-51

aaa-server leap (WLSE Express) 18-54

aaa-server logging (WLSE Express) 18-55

aaa-server reinit (WLSE Express) 18-58

aaa-server session (WLSE Express) 18-59

aaa-server start (WLSE Express) 18-59

aaa-server status (WLSE Express) 18-60

aaa-server trace (WLSE Express) 18-61

aaa-server user (WLSE Express) 18-61

aaa-server usergroup (WLSE Express) 18-62

auth A-12

backup A-13

backupconfig A-15

cdp A-16

clear A-17

clearbackuphosts A-18

clock A-19

debug A-20

diagnostic-info A-22

dumptcp A-22

dumptech A-24

erase config A-25

firewall A-27

gethostbyname A-29

hostname A-29

http-server A-30

import A-31

interface A-35

ip domain-name A-37

ip name-server A-38

listbackup A-39

mail A-40

mailcntrl clear A-42

mailroute A-43

mkcert A-44

nslookup A-45

ntp server A-46

ps A-49

redundancy A-50

reload A-52

repository A-53

restore A-55

route A-56

services A-57

setup A-58

show auth-cli A-59

show auth-http A-59

show backupconfig A-60

show backuplog A-61

show bootlog A-61

show cdp-neighbor A-62

show cdp-run A-63

show config A-64

show import A-69

show process A-74

show redundancy A-76

show route A-78

show ssh-server A-80

show ssh-version A-81

show syslog A-81

show tech A-82

show time A-84

shutdown A-89

snmp-server A-90

ssh host A-91

ssh-server accept A-91

ssh-version A-92

tarlog A-93

telnetenable A-94

tftpserver A-95

username A-97

webtimeout A-99

wlseconfig (do not use this command) A-11

syntax, checking A-3

typographical conventions A-4

use of quotes in commands A-2

using A-2

client

inventory of associations 4-92

of internal AAA server 18-33

tracking, through WDS 4-28

client polling interval, setting 4-98

client reports

access failure report, displaying 11-41

associated clients statistics real-time report, displaying 11-149

detail report, displaying 11-31

enhanced (WDS) client tracking 4-28

group association report, displaying 11-51

group report 11-72

historical association report 11-37

per VLAN (group) report, displaying 11-69

per VLAN (individual) report, displaying 11-111

RADIUS username in 4-34

statistics report 11-36

top n bit error rate report 11-140

top n buiest clients 11-137

top n busiest report, displaying 11-137

top n client MIC error rate report 11-139

top n MIC error rate report, displaying 11-139

client tracking, WDS

about 4-30

configuring 4-29

client walkabout

AP locations, viewing 14-81

AP power setting, choosing 14-86

client MAC addresses, entering 14-85

guidelines for running 14-75

jobs

checking status 14-78

creating 14-82

deleting 14-81

details, viewing 14-81

managing 14-80

refreshing job list 14-82

run logs 14-89

running 14-87

starting and stopping 14-81

viewing 14-82

radio location data, collecting 14-73

results

viewing 14-80

understanding 14-73

clock set command A-19

CMIC, definition GL-3

collector log, displaying A-64

command reference, WLSE CLI A-1

community strings

definition GL-4

guidelines 4-13

recommendations 4-12

requirement for 4-9

specifying 4-9

configbackup.log 16-7

configexport.log 16-7

configuration, access points

configuration history, viewing device's 11-10

configuration history report 11-16

radio manager assisted configuration 14-93

configuration, WLSE

backing up

by using the CLI 17-7

using Web interface 16-28

copying to another WLSE 17-13

Ethernet interfaces 17-18

high availability 16-45

master configuration file (WLSE Express) 16-36

redundancy 16-45

restoring

by using the CLI 17-10

using Web interface 16-28

using DHCP for 16-36

configuration archives

recommendations for using 9-34

configured radio parameters report 11-20

connectivity (WLSE), testing 16-65

console, using with WLSE 17-2

console/Telnet services (non-IOS), configuring 6-134

conventions

CLI A-2

in command descriptions A-4

conversion templates, non-IOS to IOS 6-5

converting non-IOS APs to IOS 10-1

CoS (class of service)

configuring from DSCP 6-58

definition GL-4

CPU (on WLSE), displaying information on A-85

credentials, devices

configuring

Deployment Wizard 2-7

entering on WLSE

manually 4-8

entering on WLSE, using Deployment Wizard 2-6

HTTP 4-15

HTTP port 4-20

SNMP 4-9

Telnet/SSH 4-17

WLCCP 4-21

CSR, definition GL-4

CSV

definition GL-4

files, about 4-45

current reports 11-45

AP and bridge connected to router report 11-121

AP and bridge connected to switch report 11-119

AP summary 11-86

AP usage report 11-123

associations 11-99

detailed 11-92

EAP and MAC failed authentications report 11-116

Ethertype protocol filters report 11-101

failed authentications and login attempt per AP report 11-117

group auto config retry report 11-84

group CDP inline power report 11-77

group client association 11-51

group client report 11-72

group identity report 11-74

group inventory report 11-81

group LBS report 11-82

group MBSSID 11-64

group policy report 11-78

group security 11-55

group security violation report 11-76

group serial number report 11-75

group SSID 11-60

group version summary report 11-83

group VLAN 11-65

hot standby report 11-113

MBSSID report 11-109

per VLAN (group) client report 11-69

per VLAN client (individual) report 11-111

policy report 11-104

QoS report 11-105

RADIUS authentication 11-100

router summary 11-120

server summary report 11-122

SSID report 11-107

switch summary 11-118

VLAN report 11-110

current users of WLSE, listing 16-27

custom values, configuring

IOS template 5-160

non-IOS template 6-161

WLSM template 7-12

cwexport.log 16-7

D

daemon log, displaying

using CLI command A-65

using Web interface 16-7

daemon manager log, displaying

using CLI command A-66

using Web interface 16-7

daemons.log file 16-7

database

backing up 16-28

purging 17-25

reinitializing A-51

restoring 16-28

dataUpdate.log 16-7

date and time

in WLSE displays 1-15

setting

browser time 16-59

by using CLI command A-19

by using NTP 17-16

current local time 16-59

synchronizing to a time server

using CLI command A-46

using Web interface 16-60

db2runstatlast.log 16-7

db2runstattimes.log 16-7

db2uext2.log file 16-8

debug command A-20

Deployment Wizard

about 2-1

deploying devices 2-13

launch at login, enable or disable 2-4

requirements 2-5

templates, creating 2-6

templates, managing 8-1

wlsestartup.ini file 2-4

detailed report 11-92

device_events.log 16-8

device center 11-10

Device Credentials option 4-8

device name

characters allowed in B-2

display of, configuring 4-61

display of, effects of reverse DNS lookup 4-65

format of 4-61

devices

adding to location manager 14-18

auto-management 4-66

configuring

archive jobs 9-41

configuration jobs 9-13

Deployment Wizard 2-1

Deployment Wizard templates, managing 8-1

firmware, updating 10-1

IOS templates, using 5-1

managing configuration jobs 9-8

managing Deployment Wizard templates 8-1

non-IOS templates, using 6-1

using IOS templates 5-1

using non-IOS templates 6-1

using WLSM templates 7-1

connectivity, testing 16-65

credentials, setting manually 4-8

deleting 4-88

device history report, displaying 11-15

device identifier, selecting the type 4-61

device name, display of 1-14

specifying the format 4-61

exporting

to a file 4-105

to CiscoWorks server 4-103

fault summary, viewing 11-10

firmware, updating 10-1

grouping 4-108

history viewing 11-10

how WLSE communicates with devices 4-5

limitation on number of access points 4-89

managing

auto-management 4-66

device detail display 4-85

limitation on number of 4-89

management state, changing 4-80

understanding 4-37

new versions, supporting 16-67

unmanaged 4-80

DFS, definition GL-4

DHCP

definition GL-4

used with Deployment Wizard 2-1

using for initial configuration of WLSE Express 16-36

dhcp.log 16-8

diagnostic-info.log 16-8

diagnostic-info command A-22

diagnostics, WLSE

log files 16-5

processes, viewing 16-58

self-test 16-55

status reports 16-54

discovery

advanced options 4-61

after WLSE restarts 16-9

CDP discovery, running 4-52

device import

running 4-56

understanding 4-43

Discovery Run Details window 4-71

filtering

by IP address 4-69

by MAC address (access points) 4-67

history 4-101

individual device seeding 4-42

logs

deleting 4-95

viewing 4-71

messages 4-73

port used for 16-2

troubleshooting, common problems 4-76

understanding 4-37

wizard 4-50

Discovery Run Details window 4-71

disk

checking and repairing A-100

usage, viewing A-20

disk capacity (on WLSE), displaying A-85

dmgtd.log file 16-8

DNS

configuring (IOS) 5-109

configuring (non-IOS) 6-140

definition GL-4

name servers, specifying

using CLI command A-38

using Web interface 16-61

port for IOS AP configuration 16-2

reverse lookup

effect on device name display 4-65

enabling 4-65

documentation xxix

audience for this xxviii

locating on Cisco.com xxix

typographical conventions in xxviii

domain name

default, defining A-37

displaying A-67

DSCP, definition GL-4

DSCP to CoS (non-IOS), configuring 6-58

DTIM, definition GL-4

dumptcp

command description A-22

log file 16-8

dumptech.tgz 16-8

dumptech command A-24

Duplicate IP folder (Managed Devices)

contents of 4-90

description 4-82

duplicate IP detection, fault policy for 3-74

E

EAP and MAC failed authentications

report, displaying 11-116

EAP-FAST

definition GL-5

server

adding to WLSE 4-25

prerequisites for adding to WLSE 4-24

EAP-MD5 server

AP usage report, displaying 11-123

definition GL-5

summary report, displaying 11-122

EAPOL, definition GL-5

EAP-TLS

configuring 18-30

definition GL-5

email

automatic configuration results 9-60

fault notifications 3-86

logs and queues

managing A-42

viewing, using CLI command A-73

viewing, using Web interface 16-6

mail server

specifying by using the CLI 17-21

mail server, specifying

by using Web interface 16-62

redundancy messages 16-43

report 11-4

scheduling 11-6

testing and debugging A-40

EMF detection, IDS 15-61

erase config command A-25

erasing system configuration

CLI command for A-25

procedure for 17-25

error.log file 16-8

Ethernet, configuring fast (IOS) 5-24

Ethernet, WLSE

firewall CLI command A-27

interface CLI command A-35

ports, configuring 17-18

Ethernet filters (non-IOS), configuring 6-61

Ethernet port (non-IOS), configuring 6-59

advanced settings 6-64

filters 6-61

hardware 6-62

identification 6-59

Ethertype filters, configuring

IOS template 5-120

non IOS template 6-22

Ethertype protocol filters report, displaying 11-101

event

handling (non-IOS), configuring 6-155

log (IOS), configuring 5-153

notification (non-IOS), configuring 6-159

excessive management frame transmissions (EMF) 15-61

exit command A-26

exporting

Deployment Wizard templates 8-4

devices 4-103

IOS templates 5-7

non-IOS templates 6-8

reports

GUI-based, using 11-3

URL-based, using 11-3

WLSM templates 7-7

F

failed authentication and login attempt per AP

report, displaying 11-117

fastEthernet (IOS), configuring 5-24

fast secure roaming, definition GL-5

faults

access/point bridge thresholds

associated clients 3-52

CPU utilization 3-47

Ethernet port packet errors 3-51

Ethernet port status 3-49

Ethernet port utilization 3-50

memory utilization 3-48

SNMP reachable 3-46

access point/bridge policies 3-21

EAP per SSID, Enforced for Cisco-Supplicant 3-28

EAP per SSID Enforced, for Mixed-Cisco-Supplicant 3-30

EAP per SSID Enforced, for Non-Cisco-Supplicant 3-29

firmware version 3-26

hotstandby status 3-26

HTTP authentication 3-25

HTTP disabled 3-22

Key Rotation per VLAN 3-33

MIC per VLAN 3-31

PSPF enabled 3-23

registration error 3-27

Telnet disabled 3-23

User Manager enforced 3-24

WEP Encryption per VLAN 3-35

WEP per VLAN 3-32

acknowledging 3-10

ad hoc network detection 15-52

ad hoc network faults 15-49

authentication and protection attack 15-96

clearing 3-9

current 3-77

defined 3-3

displaying 3-6

displaying details 3-10

Duplicate IP fault 4-90

emailing 3-86

EMF detection 15-64

exception, definition of GL-5

fault history truncation interval, setting 16-67

faults log (WLSE), displaying 16-7

fault status report, displaying 11-15

IDS 15-5

interference detection 15-54

notification, ports used for 16-2

notification settings

email 3-86

syslog 3-84

trap notification 3-79

types of 3-79

parameters for fault reporting 16-67

policies

radio-802.11x policies 3-36

WLSE 3-73

policy profiles 3-14

radio-801.11x thresholds 3-54

associated clients 3-62

association rate 3-63

max retry count 3-60

RF port AdminStatus 3-55

RF port packet errors 3-57

RF port status 3-54

RF port utilization 3-56

RF port WEP errors 3-58

radio-811x policies

Broadcast Disabled 3-39

Broadcast SSID 3-37

Dynamic Frequency Selection 3-45

EAP Enforced-Cisco Supplicant 3-42

EAP Enforced-Mixed Supplicant 3-44

EAP Enforced-Other Supplicant 3-43

Infrastructure SSID 3-38

PSPF Enabled 3-39

WEP Enforced 3-40

WEP Key Length 3-41

rogue AP detection 15-23

rogue AP faults 15-23

router thresholds

SNMP reachable 3-71

security policy, specifying 3-14

security policy monitoring, understanding 3-2

settings

assigning to devices 3-19

copying 3-16

creating 3-15

deleting 3-18

editing 3-17

notifications 3-79

policies and thresholds 3-20

renaming 3-17

understanding 3-14

viewing 3-18

states, understanding 3-3

switch thresholds

CPU utilization 3-66

memory utilization 3-67

module status threshold 3-70

port status 3-68

port utilization 3-69

SNMP reachable 3-65

threshold-related, understanding 3-4

thresholds 3-75

AAA server response time 3-72

access point/bridge 3-45

radio-802.11x thresholds 3-53

router 3-71

specifying 3-14

switch 3-64

trap notification settings 3-79

understanding 3-2

unregistered clients 15-68

WDS policies

authentication failures 3-75

WLSE-WDS link status 3-76

WLSE policies

dot11 MIB view policy 3-73

duplicate IP detection 3-74

faults.log file 16-8

files

managing with WLSE TFTP server 16-63

master configuration file (WLSE Express) 16-36

WLSE log files 16-5

filters

discovery

by IP Address 4-69

by MAC address (access points) 4-67

Ethernet (non-IOS), configuring 6-61

Ethertype (IOS), configuring 5-120

Ethertype (non-IOS), configuring 6-22

Ethertype protocol report, displaying 11-101

IP (IOS), configuring 5-115

IP port (non-IOS), configuring 6-30

IP protocol (non-IOS), configuring 6-26

MAC address (IOS), configuring 5-111

firewall

firewall CLI command A-27

ports on WLSE 16-2

firmware

"not verified" status 10-39

converting non-IOS device to IOS 10-1

estimating change window 10-3

firmware history report, displaying 11-17

history, viewing device's 11-10

how firmware upgrades work 10-2

images

deleting 10-8

editing on WLSE 10-6

importing 10-8

storing on remote TFTP server 10-13

transfer, ports used for 16-2

viewing 10-6

jobs

copying 10-36

creating 10-18

deleting 10-35

details, displaying 10-36

displaying 10-34

editing 10-34

failures 10-39

job choices 10-18

parameters for 10-14

protocol, changing 10-36

scheduling 10-21

status, checking 10-31

status, details 10-38

validating 10-22

new versions, support for 16-67

supported versions, displaying 16-68

upgrading

about 10-2

procedures 10-5

versions supported by WLSE

updating 16-68

viewing 16-67

frame monitoring 13-28

configuring 13-30

displaying APs 13-34

enabling, disabling 13-30

guidelines for running 13-29

scanning-only APs 13-29

selecting APs 13-30

selecting radio types 13-30

understanding 13-28

fsck command A-100

FTP

configuring 6-141

port for IOS AP configuration 16-2

G

gethostbyname command A-29

getting started

with device management 4-2

with WLSE 1-1

GRE, definition GL-6

group reports

auto config retry report, displaying 11-84

CDP inline power report, displaying 11-77

client association report, displaying 11-51

client report, displaying 11-72

group client association report, displaying 11-51

identity report, displaying 11-74

inventory report, displaying 11-81

IOS reports 11-46

LBS report, displaying 11-82

MBSSID report, displaying 11-64

non-IOS reports 11-46

performance report for Ethernet utilization, displaying 11-128

performance report for RF utilization, displaying 11-127

per VLAN client report, displaying 11-69

policy report, displaying 11-78

security report, displaying 11-55

security violation report, displaying 11-76

serial number report, displaying 11-75

SSID report, displaying 11-60

top number of associations graph report, displaying 11-130

top number of associations tabular report, displaying 11-129

top percentage errors report, displaying 11-131

version summary report, displaying 11-83

VLAN report, displaying 11-65

groups

copying

rule-based 4-120

static 4-119

creating

rules-based 4-117

static 4-115

deleting 4-124

editing

rule-based 4-123

static 4-122

overview 4-108

rule-based

copying 4-120

creating 4-117

deleting 4-124

editing 4-123

static

creating 4-115

creating by copying 4-119

deleting 4-124

editing 4-122

system-defined 4-108

understanding 4-108

user-defined 4-111

GUI, WLSE

About button 1-13

dashboard 1-9

device name display 1-14

Help button 1-13

Logout button 1-13

Overview button 1-13

tabs and subtabs 1-9

time display 1-15

timeout period

default 1-19

resetting 16-61

Wizard button 1-13

H

hardware configuration (non-IOS), Ethernet port 6-62

hardware type (WLSE), displaying A-12

help

CLI, displaying A-3

Web interface 1-13

high availability, WLSE 16-39

host file

displaying, show hosts command A-68

displaying, show import command A-69

importing A-31

hostname (WLSE)

changing system hostname A-29

characters allowed A-29

hostname command A-29

hostnames (in WLSE dialogs), characters allowed in B-2

hostnames, translating to IP addresses A-45

hot standby

configuring

IOS template 5-105

non-IOS template 6-136

report, displaying 11-113

using with Self Healing 13-20

HTTP

access to WLSE, configuring A-30

configuring

IOS template 5-123

non-IOS template 6-142

credentials for non-IOS access points 4-15

definition GL-6

http-server command A-30

port for VxWorks access point configuration 16-2

WLSE HTTP port, configuring A-30

WLSE Web port for 16-3

HTTPS

access to WLSE, configuring A-30

certificate signed request, obtaining 16-26, A-44

definition GL-6

http-server command A-30

log, viewing 16-5

port used for 16-3

using to export devices 4-105

http-server command

description of A-30

on redundant WLSEs 16-53

I

IBSS, definition GL-6

ICMP, definition GL-6

IDS (Intrusion Detection System)

access point category types 15-16

ad-hoc network detection

faults 15-59

guidelines for running 15-47

managing faults 15-49

understanding 15-46

authentication/protection attack detection

enabling, disabling 15-76

faults 15-96

guidelines for running 15-75

policies and thresholds 15-76

understanding 15-73

EAPOL flooding

understanding 15-74

EAPOL flooding thresholds

EAPOL detection (IOS) policy 15-86

EAPOL settings (IOS) Policy 15-85

EMF detection

displaying faults 15-64

enabling, disabling 15-63

guidelines for running 15-62

reports 15-65

understanding 15-61

viewing EMF statistics 15-65

encryption failures

understanding 15-74

faults

assigning devices to profile 15-12

copying 15-9

creating profiles 15-8

deleting profiles 15-11

displaying 15-5

editing profiles 15-10

renaming profiles 15-9

rogue AP faults 15-23

viewing fault profile summary 15-12

interference detection

understanding 15-55

viewing faults 15-59

MAC spoofing

policy 15-83

understanding 15-74

MIC/encryption failure thresholds

CcmpDecryptErrorsClient policy 15-82

CcmpReplaysClient policy 15-81

TkipLocalMicFailureClient policy 15-78, 15-83

TkipRemoteMicFailureClient policy 15-79

TkipReplayClient Policy 15-77

MIC failure

definition GL-7

MIC failures

understanding 15-74

notification settings 15-15

radio interference thresholds

authentiction error rate policy 15-87

CCMP replays discarded policy 15-94

TKIP counter measure invoked policy 15-91

TKIP local MIC failures policy 15-89

TKIP remote MIC failures policy 15-90

TKIP replays detected policy 15-93

reports

ad-hoc network reports 15-52

EMF detection reports 15-65

friendly AP reports 15-34

rogue AP reports 15-32

unregistered client reports 15-72

viewing 15-6

rogue AP

automatic suppression 15-36

detecting 15-23

detection, enabling/disabling 15-21

detection guidelines 15-18

fault history 15-29

faults 15-23

managing 15-30

reports 15-32

switch port

guidelines for detecting and suppressing 15-39

locating and detecting 15-36

viewing suppressed ports 15-40

unregistered client detection

displaying faults 15-71

enabling, disabling 15-69

guidelines for using 15-69

reports 15-72

understanding 15-68

IGMP, definition GL-6

images

access point firmware 10-1

using WLSE TFTP server to download 16-63

WLSE software 16-10

import command A-31

importing

device firmware 10-8

devices

about CSV files 4-45

from CiscoWorks server 4-58

from file 4-56

understanding 4-43

templates

IOS 5-5

non-IOS 6-6

WLSM 7-5

infrastructure access point, definition GL-6

installation (WLSE)

configuring the web browser 1-5

installing a replacement WLSE 17-11

interface command A-35

interference detection, IDS 15-54

inventory

after WLSE restarts 16-9

automatic

polling interval 4-94

understanding 4-92

client associations inventory 4-92

group report, displaying 11-81

history 4-101

immediate 4-96

logs

deleting 4-95

viewing 4-101

performance inventory 4-92

polling intervals

guidelines for 4-95

setting 4-97

port used for 16-2

run by Radio Manager 4-101

running 4-96

scheduled 4-92

troubleshooting

common problems 4-102

IOS

access point reports 11-49

access points, converting to IOS 10-1

group reports 11-46

templates, converting from non-IOS 6-5

templates, using 5-1

IP address (WLSE), changing 17-20

IP addresses

in UI, display of 1-14

of devices

displaying 4-65

display of 4-61

translating to hostnames A-45

IP chains, displaying A-68

ip domain-name command A-37

IP filters (IOS), configuring 5-114

ip name-server command A-38

IP port filters (non-IOS), configuring 6-30

IP protocol filters (non-IOS), configuring 6-26

J

Java Plugin

general requirement 1-6

requirement for Windows XP repository 16-15

job history truncation interval, setting 4-99

jobs, AP radio scan 14-65

jobs, archive

copying 9-46

creating 9-41

deleting 9-46

editing 9-44

filtering 9-44

job run details, viewing 9-47

managing 9-1

overview 9-33

recommendations 9-34

running again 9-46

viewing status 9-41

jobs, client walkabout 14-80

jobs, configuration

copying 9-30

creating 9-23

deleting 9-30

editing 9-29

filtering 9-28

managing 9-8

naming guidelines B-1

overview 9-9

recommendations 9-11

running again 9-29

undoing 9-31

viewing status 9-23

jobs, discovery

CDP discovery, running 4-50

import from CiscoWorks server 4-58

job run log 4-71

server time discrepancy message 1-16

jobs, email 11-6

jobs, firmware

copying 10-36

creating 10-17

deleting 10-35

duration 10-28

editing 10-34

filtering 10-34

job run details 10-36

managing 10-16

naming guidelines B-1

parameters for 10-14

server time discrepancy message 1-16

viewing 10-31

jobs, radio manager assisted configuration 14-96

jobs log (jobvm.log), displaying 16-8

L

LBS

group report, displaying 11-82

LDAP

definition GL-7

in built-in AAA server (WLSE Express) 18-5

LEAP server

AP usage report, displaying 11-123

definition GL-7

monitoring 3-14

summary report, displaying 11-122

Links subtab 16-80

listbackup command A-39

local

admin access (non-IOS), configuring 6-118

AP/client security (non-IOS), configuring 6-122

location manager

editing antenna placement 14-37

images

adding 14-16

interference reports 14-45

locating devices 14-36

measuring tool 14-47

prerequisites for using 14-2

server information, obtaining 14-45

setting up 14-3

system-defined groups for 4-110

viewing 14-1

view modes 14-39

window

tools 14-46

understanding 14-48

logging in (to the WLSE)

from Web interface 1-18

splash screen, adding a message 16-59

via the CLI 17-3

logging out (from the WLSE)

from the CLI 17-4

from the Web interface 1-18

logs, WLSE

AAA server logs (WLSE Express) 18-40

archiving A-93

ciscoinstall.log 16-7

collector log A-64

configbackup.log 16-7

configexport.log 16-7

cwexport.log 16-7

daemon manager log, viewing

from Web interface 16-5

show dmgtdlog command A-66

daemons log, viewing

from the Web interface 16-5

show daemonslog command A-65

database logs 16-7

dataUpdate.log 16-7

db2runstatlast.log 16-7

db2runstattimes.log 16-7

device_events.log 16-8

dhcp.log 16-8

diagnostic-info.log 16-8

discovery logs

deleting 4-95

viewing 4-71

displaying, using the CLI 17-22

displaying, using Web interface 16-5

downloading 16-5

dumptcp log 16-8

dumptech.tgz 16-8

emailing 16-6

faults 16-8

HTTPS events 16-8

install logs A-70

inventory logs

deleting 4-95

viewing 4-101

jobvm log 16-8

logs_tgz.log 16-8

procps_last.log 16-8

radio management 16-8

redundancy.log 16-8

rendundancy events 16-50

Repository.log 16-7

runstats.log 16-8

searching 16-6

SNMP agent 16-8

software installation 16-8

syslog A-81

system log 16-58

tftp.log 16-9

Tomcat log 16-5, A-84

trace logging, enabling (WLSE Express) 18-14

var_logs_tgz.log 16-9

View Log File option 16-5

web access log

viewing from CLI A-86

viewing from UI 16-7

Web error log

viewing from CLI A-87

viewing from Web interface 16-5

web SSL access log

viewing, from CLI A-88

viewing, from Web interface 16-7

M

MAC address

filters (discovery) 4-67

filters (IOS), configuring 5-111

WLSE MAC address, displaying A-71

MAC spoofing, IDS 15-74

mailcntrl clear command A-42

mail command A-40

mailroute command A-43

mail server

specifying by using Web interface 16-62

mail server, specifying

by using the CLI 17-21

maintenance image, WLSE

booting from 17-26

CLI commands for A-99

using 17-25

Managed folder (Managed Devices) 4-82

management services (WLSE), stopping/starting 17-22

Manage Roles option 16-69

Manage Users option 16-71

managing devices

auto-manage options 4-66

changing device state 4-83

deleting devices 4-88

device descriptions, entering 4-86

device details

understanding 4-85

viewing 4-84

Managed Devices folders 4-81

using the Deployment Wizard 2-1

MBSSID

report, displaying 11-109

understanding 12-17

MBSSID report, displaying 11-109

memory (on WLSE), displaying A-85

mfgtest.log file 16-8

MHAE, definition GL-7

Misconfigured Devices system group, description 4-111

mkcert command A-44

mod_jk.log file 16-8

MOK, definition GL-7

N

name servers, specifying

ip name-server command A-38

using Web interface 16-61

names of devices

display of 4-61

rules for B-2

naming guidelines B-1

built-in AAA server (WLSE Express) B-4

descriptions B-2

device names B-2

hostnames B-2

other names B-2

roles B-1

users B-1

NAT, not supported by WLSE 1-1

neighbors (of WLSE), displaying A-62

Network Address Translation (NAT), not supported by WLSE 1-1

network connectivity, testing 16-65

network interfaces

configuring

fastEthernet (IOS) 5-24

radio-802.11a (IOS) 5-40

radio-802.11b/g (IOS) 5-27

on WLSE

configuring, interface CLI command A-35

configuring, procedures for 17-18

information about, displaying A-71

IP chains, displaying A-68

using both interfaces 17-20

template 5-24

network management systems, integrating with WLSE 1-3

New folder (Managed Devices) 4-82

non-IOS

access point reports 11-49

access points, converting to IOS 10-1

group reports 11-46

templates, configuration 6-9

templates, converting to IOS 6-5

non-serving channels

definition GL-8

monitoring 13-6

notification settings, faults 3-79

nslookup

definition GL-8

from CLI A-45

from Web interface 16-65

NTP (Network Time Protocol)

configuring IOS template 5-139

configuring time servers on WLSE

ntp server CLI command A-46

using Web interface 16-60

definition GL-8

setting current date and time 16-60

setting system date and time 17-16

ntp server command A-46

O

OFDM, definition GL-8

P

PAC

definition GL-8

provisioning, on internal AAA server 4-27

packet content, command for displaying A-22

parameters, system 16-67

passwords (WLSE)

changing your password 16-77

loss of, recovering from 17-31

WLSE users 16-71

passwords, devices

HTTP password, intering on WLSE 4-15

SSH password, entering on WLSE 2-1, 4-17

Telnet password, entering on WLSE 2-1, 4-17

path loss data

collecting 12-19

historical 11-24

reviewing 11-22

PEAP server, external

definition GL-9

monitoring 4-22

performance

inventory 4-92

parameters for data collection 16-67

polling interval, setting 4-99

per VLAN client (group) report, displaying 11-69

ping

definition GL-9

from CLI A-48

from Web interface 16-65

policy

group report, displaying 11-78

groups, configuring 6-34

report, displaying 11-104

polling

aggregation parameters 4-99

fault and job data truncation parameters 4-99

inventory parameters 4-98

pop-up blocker software 1-5

port assignments, configuring 6-57

ports, on the WLSE

HTTP access port, configuring A-30

port filtering, configuring A-27

ports hosted by WLSE 16-3

ports used by WLSE 16-2

primary service set

association service set, configuring 6-48

radio11a service set, configuring 6-112

processes, WLSE

AAA server processes (WLSE express 18-13

active statistics, displaying A-74

displaying

using CLI A-49

using Web interface 16-56

starting and stopping 16-56

procps_last.log 16-8

protocols, on WLSE

configuring Ethernet interface 17-18

ports used for 16-2

proxy mobile IP

(IOS), configuring 5-124

definition GL-9

proxy server, for firmware import 10-11

ps CLI command A-49

PSPF, definition GL-9

Q

quality of service (QoS)

configuring

802.11b/g (IOS) 5-132

associations (non-IOS) 6-42

policies (IOS) 5-127

radio 11a (non-IOS) 6-115

definition GL-9

report, displaying 11-105

R

radio

11a (non-IOS), configuring 6-85

advanced 6-95

data encryption 6-104

filters 6-88

hardware 6-90

identification 6-86

module service sets 6-108

primary module service set 6-112

QoS 6-115

searched channels 6-102

11b (non-IOS), configuring 6-66

advanced 6-76

filters 6-70

hardware 6-71

identification 6-67

searched channels 6-82

802.11a (IOS), configuring 5-40

802.11b/g (IOS), configuring 5-27

AP/client relationships 12-13

coverage and capacity 12-13

performance regions 12-15

reports, displaying 11-19

uplink contention regions 12-16

radio location data

AP radio scans, collecting 12-19

collecting 12-18

radio monitoring data, collecting 13-2

radio management

network, configuring for 12-5

overview 12-1

radio management capability, verifying 14-35

understanding 12-8

radio manager

assisted configuration 14-93

auto re-site survey 13-9

client walkabout 14-73

frame monitoring 13-28

getting started 13-2

location manager 14-2

log file for 16-8

managing data 14-106

radio monitoring 13-2

radio performance 13-9

reports, displaying 13-37

self healing 13-16

understanding 12-8

WLSE, configuring for 4-21

radio measurement aggregation, definition GL-9

radio monitoring 13-2

enabling, disabling 13-6

guidelines for running 13-4

selecting APs 13-6

understanding 13-3

radio parameters, generating 14-90

radio performance

evaluating 13-9

understanding 12-13

radio scans

filtering 14-66

guidelines for running 14-61

jobs

copying 14-66

creating 14-67

deleting 14-66

editing 14-66

job run logs 14-72

managing 14-65

naming 14-68

run logs, viewing 14-72

running 14-66

scheduling 14-69

stopping 14-66

selecting devices 14-69

selecting radio types 14-69

understanding 14-59

viewing results 14-65

RADIUS

attributes for internal AAA server (WLSE Express) 18-64

authentication module 16-24

definition GL-10

port for WLCCP authentication 16-2

RADIUS server

AP usage report, displaying 11-123

authentication report, displaying 11-100

built-in (on WLSE Express) 18-1

monitoring 3-14

ports for 16-2

summary report, displaying 11-122

RAM (on WLSE), displaying A-85

real-time reports

AP CPU utilization 11-145

AP memory utilization 11-144

AP packet errors 11-147

AP packet statistics 11-146

AP radio utilization 11-148

associated client statistics 11-149

rebooting, WLSE

using the CLI A-52

using Web interface 16-9

recovery (WLSE)

maintenance image 17-25

recovery CD

creating 17-27

using 17-27

reimaging the WLSE 17-27

rescue image, using 17-30

resetting WLSE to factory defaults 17-25

redundancy, WLSE

backup and restore on redundant nodes 16-51

checking settings 16-48

configuring 16-45

email messages 16-43

event log 16-50

files in /tftpboot/public directory 16-63

http-server accept command, using 16-53

manual failover 16-50

nodes, replacing 16-51

prerequisites for 16-40

redundancy CLI command A-50

show redundancy CLI command A-76

software, upgrading 16-51

system check timeout period 16-47

web timeout period, resetting 16-53

redundancy.log 16-8

redundancy command A-50

reimaging the WLSE 17-27

reload (IOS APs), configuring 5-157

reload command A-52

replacement WLSE, installing 17-11

reports

ACS failed login report 16-83

ad-hoc network reports 15-52

AP and bridge connected to router 11-121

AP and bridge connected to switch 11-119

AP CPU utilization, real-time 11-145

AP memory utilization, real-time 11-144

AP packet errors, real-time 11-147

AP packet statistics, real-time 11-146

AP radio scan results, viewing 14-65

AP radio utilization, real-time 11-148

APs registered with WDS 11-14

AP summary 11-86

AP usage, displaying 11-123

associated client statistics, real-time 11-149

associations 11-99

auto config retry 11-18

channel loading 11-25

channel loading, historical 11-27

client access failure 11-41

client detail 11-31

client historical association 11-37

client statistics 11-36

configuration history 11-16

configured radio parameters 11-20

current 11-45

detailed 11-92

device center, using 11-10

device fault status 11-15

device history 11-15

EAP and MAC failed authentication 11-116

emailing 11-4

EMF detection 15-65

Ethernet transmission statistics 11-134

exporting 11-3

failed authentication and login attempt per AP 11-117

filter 11-101

firmware history 11-17

friendly AP reports, IDS 15-34

group auto config retry 11-84

group CDP inline power 11-77

group client 11-72

group client association 11-51

group identity 11-74

group inventory 11-81

group LBS 11-82

group MBSSID 11-64

group performance, Ethernet utilization 11-128

group performance, RF utilization 11-127

group policy 11-78

group security 11-55

group security violation 11-76

group serial number 11-75

group SSID 11-60

group version summary 11-83

group VLAN 11-65

hot standby 11-113

interference reports (Location Manager) 14-45

links to from Group Details display 4-114

MBSSID 11-109

parameters for 16-67

path loss between managed APs 11-22

path loss between managed APs, historical 11-24

per VLAN client 11-69, 11-111

policy 11-104

QoS 11-105

radio manager reports 11-19

RADIUS authentication 11-100

real-time, displaying 11-143

RF and Ethernet utilization, tabular 11-136

RF and utilization, graph 11-135

RF transmission statistics 11-132

rogue AP reports 15-32

router summary 11-120

scheduling email 11-6

server response time, graph 11-142

server summary 11-122

SSID 11-107

switch summary 11-118

top n busiest clients 11-137

top n client bit error rate 11-140

top n client MIC error rate 11-139

top n number of associations graph 11-130

top n number of associations tabular 11-129

top n percentage errors 11-131

trend, using for capacity planning 11-126

trends, displaying 11-124

unregistered clients 15-72

VLAN 11-110

WDS summary 11-12

wireless client 11-31

repository

browsing 16-19

defining

using CLI A-53

using Web interface 16-16

definition GL-10

install configure CLI command A-33

install list CLI command A-35

port for 16-2

repository CLI command A-53

show repository CLI command A-77

Repository.log 16-7

rescue image, WLSE 17-30

resetting WLSE to factory defaults 17-25

restarting (rebooting) WLSE

bootlog, displaying A-61

from Web interface 16-9

reload command A-52

restore command A-55

restoring data from backups

from pre-released to released not allowed 16-28

restoring from one WLSE to another 17-13

using the CLI

procedure for 17-10

restore command reference A-55

using Web interface 16-34

reverse DNS lookup 4-65

rogue AP

detection of 15-16

displaying information about 14-29

displaying location of 14-30

roles

creating and modifying 16-70

deleting 16-69

for users created by using the CLI 17-4

naming guidelines B-1

predefined 16-69

XML API privileges 16-69

roque AP

displaying location of 14-30

route command A-56

router

AP and Bridge connected to, displaying 11-121

fault monitoring 3-1

fault thresholds, setting 3-14

summary report, displaying 11-120

system-defined group for 4-108

routes (WLSE)

adding or deleting A-56

displaying

show route CLI command A-78

traceroute CLI command A-96

routing (non-IOS), configuring 6-137

RSA, definition GL-10

RSSI, definition GL-10

runstats.log 16-8

S

scanning AP

system group for 4-111

using 15-61

scheduling

archive jobs 9-39

backups 16-32

configuration jobs 9-18

discovery 4-50

email 11-6

firmware jobs 10-17

SCP

definition GL-10

using for backups 16-30

searching for devices 1-17

security

last 10 logged in users, viewing 16-27

SSL

certificate signed request, obtaining 16-26

Telnet, enabling or disabling 16-27

security (devices)

advanced (IOS), configuring 5-92

IOS templates 5-51

admin access 5-52

advanced 5-92

local RADIUS server 5-98

server manager 5-86

SSID 802.11b/g 5-55

WEP 802.11a 5-80

WEP 802.11b/g 5-75

non-IOS templates 6-117

authentication server 6-125

local admin access 6-118

local AP/client 6-122

security, WLSE

authentication

enabling A-12

modules 16-23

HTTP access to WLSE, controlling A-30

HTTPS 16-26

log, displaying A-78

SSH 16-27

access to WLSE, controlling A-92

access to WLSE, enabling A-92

seed

CDP-based discovery 4-39

definition GL-10

individual device seeding 4-42

self healing

assigning severity level 13-23

clearing faults 13-25

enabling, disabling 13-23

guidelines for running 13-21

reviewing history 13-25

running 13-25

selecting floors 13-23

tracking progress 13-25

understanding 13-17

server

AAA server, internal 18-2

local RADIUS server (IOS), configuring 5-98

manager (IOS), configuring 5-86

security (non-IOS), configuring 6-125

SMTP server 17-21

server, AAA

response time graph report, displaying 11-142

server manager, configuring

WLSM template 7-9

services (IOS), configuring 5-102

ARP cache 5-144

CDP 5-108

DNS 5-109

Ethertype filters 5-120

hot standby 5-105

HTTP 5-123

IP filters 5-115

MAC address filters 5-111

NTP 5-139

proxy mobile IP 5-124

QoS 802.11b/g 5-132

QoS policies 5-127

SNMP 5-135, 6-117

SNTP 5-139

STP 5-145

Telnet/SSH 5-103

VLAN 5-140

services (non-IOS), configuring

accounting 6-146

CDP 6-139

console/Telnet 6-134

DNS 6-140

FTP 6-141

hot standby 6-136

HTTP 6-142

routing 6-137

SNMP 6-144

SNTP 6-145

start-up 6-130

services (WLSE)

managing

procedure for 17-22

using CLI services command A-57

ports used for 16-2

reintdb command, effect on A-51

stopping and starting 17-22

time reset, requirement for stopping services A-19

services command A-57

service sets (non-IOS)

configuring

primary service set 6-48

service sets 6-43

serving channels

definition GL-10

monitoring 13-6

setting system date and time

using the CLI 17-16

using the Web interface 16-59

setup command A-58

short term trending inventory truncation interval, setting 16-67

show auth-cli command A-59

show auth-http A-59

show backupconfig command A-60

show backuplog command A-61

show bootlog command A-61

show cdp-neighbor A-62

show cdp-run command A-63

show clock command A-63

show config command A-64

show domain-name command A-67

show import command A-69

show interfaces command A-71

show process command A-74

show redundancy CLI command A-76

show route command A-78

show ssh-server command A-80

show ssh-version command A-81

show syslog command A-81

show tech command A-82

show time command A-84

show version command A-85

shutdown command A-89

shutting down (WLSE)

from the CLI 17-15

using CLI A-89

Sites tab options

AP radio scan, using 14-58

assisted configuration, using 14-90

client walkabouts, using 14-73

location manager, using 14-2

radio manager data, managing 14-106

SMTP

definition GL-10

port for fault notification 16-2

server, specifying by using the CLI 17-21

server, specifying by using the Web interface 16-62

SNMP

agent, configuring A-90

agent log, displaying 16-7

community strings

for WLSE server, displaying A-80

for WLSE server, setting A-90

community strings, for devices

entering on WLSE 4-9

guidelines for 4-13

recommendations 4-12

configuring

IOS template 5-135, 6-117

non-IOS template 6-144

definition GL-11

faults

trap notification settings 3-79

port for 16-2

reachability, testing 16-65

retries, recommendations for 4-14

timeouts, recommendations for 4-14

traps supported 1-3

variables, querying 16-66

snmp-server command A-90

SNMPTRAP

port for fault notification 16-2

SNTP (Simple Network Time Protocol)

configuring 6-145

configuring IOS template 5-139

software, on devices

firmware, managing 10-1

groups for 4-108

software, on WLSE

installation logs, displaying 16-7

maintenance image A-99

overview 16-10

recovery CD

creating 17-27

using to reimage 17-27

reimaging the WLSE

locally 17-27

remotely 17-29

repository

browsing 16-19

port for 16-2

status, viewing 16-11

updates

data preserved 16-22

history, viewing 16-20

installing, by using Web interface 16-17

not allowed from pre-released version 16-10

transferring to WLSE A-53

upgrading on a redundancy (high availability) cluster 16-51

version, viewing

from Web interface 1-14

using the CLI A-85

spanning tree protocol

configuring

IOS template 5-145

non-IOS template 6-17

definition GL-11

splash screen, adding a message 16-59

SSH, definition GL-11

SSH access to WLSE

access control

displaying A-80

controlling A-91

enabling A-92

show ssh-server command A-80

show ssh-version command A-81

ssh-server accept command A-91

ssh-version command A-92

type, displaying A-81

version, displaying A-81

version, setting

using CLI A-92

using Web interface 16-27

ssh host command A-91

SSH on access points

credentials, entering on WLSE 4-17

port for IOS AP configuration 16-2

ssh-server accept command A-91

ssh-version command A-92

SSID

802.11b/g (IOS), configuring 5-55

definition GL-11

report, displaying 11-107

system-defined groups for 4-108

SSL

definition GL-11

log, displaying 16-7

web SSL access log, displaying A-88

SSL certificate

certificate signed request, viewing 16-26

for built-in AAA server 18-8

mkcert CLI command A-44

signed, obtaining 16-26

unsigned certificate, obtaining A-44

STA, definition GL-11

startup configuration

assigning 9-53

creating a template for 9-49

startup configuration, WLSE

configbackup.log file 16-7

start-up settings (non-IOS), configuring 6-130

STP

configuring

IOS template 5-145

non-IOS template 6-17

definition GL-11

subnet, system-defined group for 4-108

summary report

access point, displaying 11-86

router 11-120

server 11-122

switch 11-118

SWAN

configuring, using Deployment Wizard 2-1

definition GL-11

switch

AP and bridge connected to report, displaying 11-119

fault monitoring 3-1

fault thresholds, setting 3-14

summary report, displaying 11-118

system-defined group for 4-108

switch port

locating and detecting 15-36

syntax of commands, checking A-3

syslog

displaying A-81

faults

notification settings 3-84

port for 16-2

using for AAA server logging (WLSE express) 18-55

sysName

display of 1-14

effect of single quote on display 1-14

reverse DNS lookup, effect on display 4-65

system (WLSE)

configuration

displaying A-64

erasing A-25

date and time A-19, A-46

hostname, changing A-29

information, viewing 17-22

logs, displaying 17-22

processes, managing 16-56

rebooting

from the Web interface 16-9

using the CLI 17-14

shutting down

procedure for 17-15

shutdown CLI command A-89

status, displaying 16-55

storage usage, displaying A-21

system log, using 16-58

system parameters, setting 16-67

system time, setting

using CLI A-19

using Web interface 16-59

T

TAC (Technical Assistance Center), obtaining information for A-82

TACACS+ (for WLSE login)

authentication module 16-23

definition GL-12

tarlog command A-93

TCP/IP packet content, displaying A-22

TCP Port Scan tool 16-65

TCP ports used by WLSE 16-2

Telnet

credentials for IOS access points, entering 4-17

port for IOS AP configuration 16-2

Telnet/console services (non-IOS), configuring 6-134

Telnet/SSH services (IOS) , configuring 5-103

Telnet access to WLSE

access from selected IP addresses, specifying A-94

enabling/disabling

using CLI A-94

using Web interface 16-27

status, displaying A-84

telnetenable command A-94

templates

automatic configurations 9-49

converting from non-IOS to IOS 6-5

copying

Deployment Wizard 8-2

IOS 5-3

non-IOS 6-3

WLSM 7-3

creating

Deployment Wizard 2-6

IOS 5-3

non-IOS 6-3

WLSM 7-2, 7-3

deleting

Deployment Wizard 8-4

IOS 5-5

non-IOS 6-6

WLSM 7-4

editing

IOS 5-4

non-IOS 6-4

WLSM 7-4

exporting

Deployment Wizard 8-4

IOS 5-7

non-IOS 6-8

WLSM 7-7

for Deployment Wizard, defined 8-2

for IOS configuration, defined 5-2

for non-IOS configuration, defined 6-2

for WLSM configuration, defined 7-2

importing

IOS 5-5

non-IOS 6-6

WLSM 7-5

non-IOS choices 6-9

using

for IOS access points 5-1

for non-IOS access points 6-1

TFTP

definition GL-12

ports used for firmware upgrade 16-3

tftp.log 16-9

TFTP server, on WLSE Express

managing from Web interface 16-63

tftpserver CLI command A-95

tftpserver command A-95

threshold

definition GL-12

time

browser time, setting 16-59

display of, on WLSE 1-15

server time discrepancy when scheduling jobs 1-16

synchronizing to an NTP server 16-60

UTC

definition GL-12

display of 1-15

timeout period

WLSE web interface

default 1-19

resetting, from Web interface 16-61

resetting, using CLI A-99

TKIP

Counter Measure Invoked Policy 15-91

definition GL-12

Local MIC Failures Policy 15-89

Remote MIC Failures Policy 15-90

Replays Detected Policy 15-93

tomcat.log file 16-9

tomcat log, displaying

from Web interface 16-7

using CLI A-84

traceroute

definition GL-12

from CLI A-96

from Web interface 16-65

transmission statistics

displaying Ethernet report 11-134

displaying RF 11-132

traps

notification settings 3-79

versions supported 1-3

trending data

aggregation parameters 4-99

data retention parameters 4-99

trend reports, using for capacity planning 11-126

trends, displaying 11-124

Ethernet transmission statistics report 11-134

group performance report, Ethernet utilization 11-128

group performance report, RF utilization 11-127

RF and Ethernet tablular report 11-136

RF and Ethernet utilization graph 11-135

RF transmission statistics report 11-132

server response time graph report 11-142

top n busiest clients report 11-137

top n client bit error rate report 11-140

top n client MIC error rate report 11-139

top n number of associations graph report 11-130

top n number of associations tabular report 11-129

top n percentage errors report 11-131

troubleshooting (WLSE)

diagnostics tools 16-54

passwords, loss of 17-31

process management 16-56

recovery procedures 17-24

troubleshooting guide

displaying from online help 1-13

locating on Cisco.com 1-21

typographical conventions

in command descriptions A-4

in this document xxviii

U

UDP ports used by WLSE 16-2

undoing a job 9-31

unknown radio, displaying 14-30

Unmanaged folder (Managed Devices) 4-82

unregistered client detection, IDS 15-68

updateWLSE-x.x.x.log file 16-9

upgrade

access point firmware 10-1

WLSE software (by using the CLI) 17-14

WLSE software (by using Web interface) 16-10

WLSE software, data preserved 16-22

usage report, AP 11-123

user-defined

groups 4-111

roles 16-69

user guide

displaying from online help 1-13

locating on Cisco.com 1-21

username command A-97

users (WLSE)

authentication servers 16-24

CLI access 16-71

creating

using the CLI 17-4, A-97

using Web interface 16-71

current users, listing 16-27

deleting

from Web interface 16-77

using the CLI A-97

home page, modifying 16-79

last 10 logged in users. viewing 16-27

modifying

using the CLI A-97

using the Web interface 16-71

naming guidelines B-1

of internal AAA server (WLSE Express) 18-35

roles

assigning to users 16-72

managing 16-69

username CLI command A-97

UTC

definition GL-12

displayed on WLSE 1-15

utilization

RF and Ethernet graph, displaying 11-135

RF and Ethernet tabular report, displaying 11-136

V

version summary

group report, displaying 11-83

VLAN

configuring

IOS template 5-140

non-IOS template 6-36

definition GL-13

group report, displaying 11-65

per client report (group), displaying 11-69

per client report (individual), displaying 11-69

report, displaying 11-110

VLAN ID, definition GL-13

W

WDC, definition GL-13

WDS

access points 2-11, 12-9

and radio manager 12-9

configuring

using Deployment Wizard 2-1

configuring on APs 5-150

definition GL-13

discovery through 4-41

enhanced client tracking 4-28

fault thresholds for 3-75

infrastructure access point, definition GL-6

registered APs report 11-14

summary report 11-12

system-defined groups for 4-111

understanding 12-9

WDS access points

understanding 12-9

WDS device, definition GL-13

WLCCP

credentials, configuring manually 4-21

port for 16-2

WLSM

discovery of 4-41

understanding 12-9

Web access log, displaying

from CLI (show webaccesslog command) A-86

from Web interface 16-7

Web error log, displaying

from CLI (show weberrorlog command) A-87

from Web interface 16-7

Web interface (WLSE)

browsers, configuring 1-5

browsers, supported 1-6

overview 1-5

Web session timeout (WLSE)

default 1-19

resetting from Web interface 16-61

Web session timeout, WLSE

resetting, using the CLI A-99

Web SSL log, displaying A-88

webtimeout command A-99

WEP 802.11a (IOS), configuring 5-80

WEP 802.11b/g (IOS), configuring 5-75

WEP keys

definition GL-13

WGB, definition GL-13

WHISK port 16-2

Windows server

as backup location 16-31

as repository 16-15

WINS, definition GL-13

wireless client reports

access failure, displaying 11-41

client detail, displaying 11-31

client historical association, displaying 11-37

client statistics, displaying 11-36

displaying 11-31

polling interval, setting 4-98

WISPr, definition GL-14

wizard

assisted site survey 14-22

Deployment Wizard 2-3

Discovery wizard 4-50

WLCCP

credentials, adding from Deployment Wizard 2-8

credentials, entering on WLSE 4-21

definition GL-14

discovery through 4-41

WLSE 1030 Express

built-in AAA server on 18-1

configuring A-58

number of devices managed 4-89

WLSE 1130

Ethernet port labelling 17-18

number of devices managed 4-89

WLSE 1130-19

number of devices managed 4-89

wlseconfig command (do not use this command) A-11

wlsestartup.ini file 2-4

WLSM

configuring

using Deployment Wizard 2-1

using templates 7-1

definition GL-14

discovery of 4-41

WNM, definition GL-14

workgroup bridge, definition GL-13

WPA, definition GL-14

X

XML API, privileges in roles 16-69