User Guide for the CiscoWorks WLSE and WLSE Express, 2.12
Index

Table Of Contents

Symbols - Numerics - A - B - C - D - E - F - G - H - I - J - L - M - N - O - P - Q - R - S - T - U - V - W - X -

Index

Symbols

/tftpboot/public directory 15-63

Numerics

802.11a radio

configuring 5-39

802.11a radio (IOS)

definition GL-1

802.11b/g radio

configuring 5-26

802.11b/g radio (IOS)

definition of GL-1

A

AAA, definition GL-1

AAA-accounting.log file 17-40

AAA-cli.log file 17-40

AAA-daemon-manager.log file 17-40

AAA-database.log file 17-40

AAA server, external

ACS failed login report 15-80

AP 1100 or AP 1210 used as AAA server 4-22

AP usage report 10-93

Cisco ACS, ports used by C-2

faults 3-1

monitoring 4-21

services supported 4-21

summary report 10-92

using both interfaces on WLSE 16-20

AAA server, internal

AP usage report 10-93

backup and restore, about 17-7

certificates, about 17-8

Cisco-PEAP

configuring, using CLI 17-45

configuring, using UI 17-27

clients

managing, using CLI 17-46

managing, using UI 17-33

configuring

overview 17-9

using CLI commands 17-43

using UI 17-11

database, reinitializing 17-58

domain authentication

configuring, using CLI 17-62

configuring, using UI 17-23

domain authentication, port used for C-2

EAP-FAST

configuring, using CLI 17-49

configuring, using UI 17-30

EAP services supported 17-5

EAP-TLS

configuring, using CLI 17-30

configuring, using UI 17-30

fault monitoring 17-7

faults 3-1

groups

defining 17-37

mapping, using CLI 17-47

mapping, using UI 17-23

LDAP central server

configuring, using CLI 17-51

configuring, using UI 17-17

LDAP local server

configuring, using CLI 17-51

configuring, using UI 17-18

LDAP parameters, about 17-20

LEAP

configuring, using CLI 17-54

configuring, using UI 17-26

local user database

configuring, using CLI 17-61

configuring, using UI 17-35

logging

configuring 17-55

local 17-55

syslog 17-55

logs 17-40

monitoring 17-41

MS-PEAP

configuring, using CLI 17-57

configuring, using UI 17-28

naming guidelines 17-9

overview 17-2

ports used 17-7

processes 17-13

RADIUS attributes of the AAA server 17-64

reports

about 17-7

enabling 17-41

RSA keys, about 17-8

sessions

managing, using CLI 17-59

managing, using UI 17-39

software upgrade, about 17-7

starting and stopping 17-59

status

displaying, using CLI 17-13

displaying, using UI 17-60

summary report 10-92

syslog, using 17-55

trace levels

setting, using the CLI 17-61

setting, using the UI 17-14

trace log 17-40

tunneling attributes 17-69

users

database, methods for storing 17-4

local database, configuring using CLI 17-61

local database, configuring using UI 17-35

AAA-server.log file 17-40

aaa-server cisco-peap command (WLSE Express) 17-45

aaa-server client command (WLSE Express) 17-46

aaa-server domain-auth command (WLSE Express) 17-47

aaa-server ldap command (WLSE Express) 17-51

aaa-server leap command (WLSE Express) 17-54

aaa-server logging command (WLSE Express) 17-55

aaa-server reinit command (WLSE Express) 17-58

aaa-server start command (WLSE Express) 17-59

aaa-server status command (WLSE Express) 17-60

AAA-server-trace.log file 17-40

aaa-server trace command (WLSE Express) 17-61

aaa-server user command (WLSE Express) 17-61

aaa-server usergroup command (WLSE Express) 17-62

AAA-status.log file 17-40

access point

category types 14-16

configured as an AAA server 4-22

configuring

ports used for 15-1

updating firmware 9-4

using Deployment Wizard 2-1

using Deployment Wizard templates 7-1

using IOS templates 5-1

using radio manager assisted configuration 13-98

using WLSM templates 6-1

credentials

entering on WLSE 4-7

definition GL-1

duplicate IP addresses, handling 4-88

faults

displaying 3-6

notification settings 3-75

policy settings 3-14

thresholds settings 3-14

firmware

updating 9-4

versions, support for 15-67

friendly to rogue reclassification 14-16

infrastructure AP, definition GL-6

limitation on number of 4-86

replacing 4-88

reports 10-45

rogue AP detection 14-16

scanning-only APs 12-29

specific settings

configuring 5-161

exporting 8-62

importing 8-59

managing 8-59

report 8-64

viewing 8-63

SSH passwords, entering on WLSE 4-15

system-defined groups for 4-105

Telnet passwords, entering on WLSE 4-15

user-defined groups for 4-109

viewing in Location Manager 13-2

WDS access point 11-11

access point reports

AP and bridge connected to router report 10-91

AP and bridge connected to switch report 10-89

associated client statistics real-time report 10-118

associations report 10-77

auto config retry report 10-68

CPU utilization real-time report 10-114

detailed report 10-74

EAP and MAC failed authentications report 10-86

Ethernet transmission statistics report 10-104

failed authentication and login attempt per AP report 10-87

group CDP inline power report 10-64

group client association report 10-47

group client port 10-59

group identity report 10-61

group inventory 10-65

group MBSSID report 10-54

group performance report

Ethernet utilization 10-98

RF utilization 10-97

group security report 10-49

group security violation report 10-63

group serial number report 10-62

group SSID report 10-52

group VLAN report 10-55

hot standby report 10-84

LBS 10-66

MBSSID report 10-81

memory utilization real-time report 10-113

packet errors real-time report 10-116

packet statistics real-time report 10-114

per VLAN client (group) report 10-57

per VLAN client (individual) report 10-83

QoS report 10-79

radio utilization real-time report 10-117

RF and Ethernet utilization graph 10-105

RF and Ethernet utilization tabular report 10-106

RF transmission statistics report 10-102

SSID report 10-80

summary report 10-70

top n busiest clients report 10-107

top n client MIC error rate report 10-109

top n number of associations graph report 10-100

top n number of associations tabular report 10-99

top n percentage errors report 10-101

version summary report 10-67

VLAN report 10-82

ACS Failed Login report

running 15-83

ad-hoc network detection 14-52

disabled faults 11-5

faults 14-66

guidelines 14-53

managing faults 14-55

understanding 14-52

admin access

setting 5-52

advanced

security, configuring 5-91

aggregation data for reports, intervals

about 4-97

resetting 4-94

understanding 4-97

apptyp command A-12

AP radio scans 13-58

AP summary report 10-70

AP usage report 10-93

AP usage report, displaying 10-93

archives

managing, configuration 8-1

ARP, definition GL-2

ARP cache, configuring 5-145

assisted configuration, radio manager

guidelines 13-98

jobs 13-99

calculating parameters 13-108

copying 13-102

deleting 13-102

editing 13-102

filtering 13-102

refreshing job list 13-102

viewing details 13-102

viewing run log 13-102

assisted site survey

client walkabout 13-25

performing radio scan 13-23

radio parameters, generating 13-26

selecting APs 13-22

audience for this document xxviii

auth command A-13

authentication (WLSE)

CLI

displaying A-64

enabling A-13

external authentication of WLSE users 15-21

HTTPS

displaying A-64

enabling A-13

modules supported 15-21

overview 15-21

setting up

using CLI command 16-5

using Web interface 15-22

authentication, access point

failed and login attempt per AP report 10-87

failed for EAP and MAC report, displaying 10-86

authentication/protection attack detection 14-82

enabling, disabling 14-84

faults 14-105

guidelines 14-84

policies and thresholds 14-84

understanding 14-82

auto config retry group report 10-68

auto-managed configuration 8-53

assigning 8-53

options for email 8-57

automatic configurations, creating 8-47

auto re-site survey 12-9

checking for performance degradations 12-14

collecting baseline data 12-12

disabled faults 11-5

enabling, disabling 12-12

guidelines for running 12-10

monitoring AP performance 12-14

reviewing run log 12-12

running 12-12

selecting floors 12-12

understanding 12-10

AVVID, definition GL-2

B

backing up and restoring WLSE configuration

backing up

using CLI commands 16-8

using SCP (secure copy) 15-29

using Web interface 15-31

backup and restore log

clearing 15-28

displaying 15-7

backup CLI command A-14

backupconfig CLI command A-15

backup location, configuring

on Windows server 15-30

using the CLI 16-7

using the Web interface 15-28

files in /tftpboot/public directory 15-63

listbackup CLI command A-41

pre-released to released software not allowed 15-26

redundant nodes, backup and restore on 15-51

restore CLI command A-60

restoring

from one WLSE to another 16-12

using the CLI 16-9

using Web interface 15-32

secure copy (SCP) 15-29

show backupconfig CLI command A-65

backup command A-14

backupconfig command A-15

basic security template, configuring

IOS template 5-16

basic template, configuring

IOS template 5-10

BDPU, definition GL-11

beta software, on WLSE

upgrade not allowed 15-10

black hole mitigation

definition GL-2

enabling 13-108

booting, WLSE

boot messages, displaying A-66

from the maintenance image 16-25

from Web interface 15-9

reload command A-56

BOOTP

definition GL-2

bridge

definition GL-2

firmware, updating 9-4

IOS, configuring 5-1

limitation on number of 4-86

bridge reports

AP and bridge connected to router report 10-91

AP and bridge connected to switch report 10-89

associations report 10-77

detailed report 10-74

Ethernet transmission statistics report 10-104

group auto config retry report 10-68

group client association report 10-47

group client report 10-59

group identity report 10-61

group inventory report 10-65

group LBS report 10-66

group MBSSID report 10-54

group performance report

Ethernet utilization 10-98

RF utilization 10-97

group security report 10-49

group serial number report 10-62

group SSID report 10-52

group version summary report 10-67

group VLAN report 10-55

per VLAN client (group) report 10-57

per VLAN client (individual) report 10-83

RF and Ethernet utilization graph 10-105

RF transmission statistics report 10-102

top n number associations graph report 10-100

top n number associations tabular report 10-99

top n percentage errors report 10-101

browser

configuring 1-5

date and time display 1-15

supported browsers 1-5

BSS, definition GL-2

BSSID

definition GL-2

multiple 11-19

C

cautions

backup from pre-released to released software on WLSE not allowed 15-26

configuring for redundancy 15-44

erase config command A-26

losing data

jobs, configuration 8-13

jobs, firmware 9-17

NAT, not supported on WLSE 1-1

radiomanager command A-52

reload command A-56

shutdown command, failure to run A-94

significance of xxviii

upgrading from pre-release software not allowed 15-10

CCK, definition GL-2

CCKM, definition GL-3

CCMP, definition GL-3

CDP (Cisco Discovery Protocol)

alternatives to 4-40

configuring 5-107

definition GL-3

individual device seeding 4-40

neighbors of WLSE, displaying A-67

status on WLSE, displaying A-68

understanding 4-38

CDPbrdcast process (on WLSE) 15-58

cdp command A-17

CDP distance

definition GL-3

specifying 4-53

channel load data

determining 10-25

historical 10-27

reviewing 10-25

channels, monitoring 12-6

character set, allowable (in WLSE UI) B-1

ciscoinstall.log 15-7

CiscoWorks server

adding links to a WLSE 1-4

exporting devices to 4-101

importing devices from

procedure for 4-56

understanding 4-45

linking to CiscoWorks server 15-80

CKIP, definition GL-3

clearbackuphosts command A-18

clear command A-18

CLI

access to, configuring 15-72

command history feature A-3

command privileges A-2

commands A-1

command summary (table) A-4

conventions A-2

definition GL-3

help for commands A-3

logging into 16-3

maintenance image commands A-104

erase config A-104

fsck A-105

reload A-105

Privilege Level 0 commands A-12

apptyp A-12

exit A-27

ping A-50

show clock A-68

show domain-name A-72

show interfaces A-76

show version A-90

traceroute A-101

Privilege Level 15 commands A-12

aaa-server cisco-peap (WLSE Express) 17-45

aaa-server client (WLSE Express) 17-46

aaa-server domain-auth (WLSE Express) 17-47

aaa-server ldap (WLSE Express) 17-51

aaa-server leap (WLSE Express) 17-54

aaa-server logging (WLSE Express) 17-55

aaa-server reinit (WLSE Express) 17-58

aaa-server session (WLSE Express) 17-59

aaa-server start (WLSE Express) 17-59

aaa-server status (WLSE Express) 17-60

aaa-server trace (WLSE Express) 17-61

aaa-server user (WLSE Express) 17-61

aaa-server usergroup (WLSE Express) 17-62

auth A-13

backup A-14

backupconfig A-15

cdp A-17

clear A-18

clearbackuphosts A-18

clock A-20

debug A-21

diagnostic-info A-23

dumptcp A-23

dumptech A-25

erase config A-26

firewall A-28

gethostbyname A-30

hostname A-31

http-server A-31

import A-33

interface A-37

ip domain-name A-39

ip name-server A-40

listbackup A-41

mail A-42

mailcntrl clear A-44

mailroute A-45

mkcert A-45

nslookup A-47

ntp server A-48

ps A-51

radiomanager A-52

redundancy A-53

reload A-56

repository A-56

reset device-snmp A-59

restore A-60

route A-61

services A-62

setup A-63

show auth-cli A-64

show auth-http A-64

show backupconfig A-65

show backuplog A-66

show bootlog A-66

show cdp-neighbor A-67

show cdp-run A-68

show config A-69

show import A-74

show process A-79

show redundancy A-81

show route A-83

show ssh-server A-85

show ssh-version A-86

show syslog A-86

show tech A-88

show time A-89

shutdown A-94

snmp-server A-95

ssh host A-96

ssh-server accept A-96

ssh-version A-97

tarlog A-98

telnetenable A-99

tftpserver A-100

username A-102

webtimeout A-104

wlseconfig (do not use this command) A-11

syntax, checking A-3

timeout period 16-3

typographical conventions A-4

use of quotes in commands A-2

using A-2

client

inventory of associations 4-90

of internal AAA server 17-33

tracking, through WDS 4-27

unregistered clients, detecting 14-75

client polling interval, setting 4-96

client reports

access failure report, displaying 10-38

associated clients statistics real-time report, displaying 10-118

detail report, displaying 10-31

enhanced (WDS) client tracking 4-27

group association report, displaying 10-47

group report 10-59

historical association report 10-35

per VLAN (group) report, displaying 10-57

per VLAN (individual) report, displaying 10-83

RADIUS username in 4-32

statistics report 10-34

top n buiest clients 10-107

top n busiest report, displaying 10-107

top n client MIC error rate report 10-109

top n MIC error rate report, displaying 10-109

client tracking, WDS

about 4-29

configuring 4-27

client walkabout

AP locations, viewing 13-81

AP power setting, choosing 13-85

client MAC addresses, entering 13-85

guidelines for running 13-75

jobs

checking status 13-77

creating 13-82

deleting 13-80

details, viewing 13-80

managing 13-79

refreshing job list 13-81

run logs 13-88

running 13-87

starting and stopping 13-80

viewing 13-81

radio location data, collecting 13-73

results

viewing 13-79

understanding 13-73

clock set command A-20

CMIC, definition GL-3

collector log, displaying A-69

command reference, WLSE CLI A-1

community strings

definition GL-4

guidelines 4-12

recommendations 4-12

requirement for 4-9

specifying 4-9

community strings, WLSE

configuring A-95

displaying A-85

resetting A-59

configbackup.log 15-7

configexport.log 15-7

configuration, access points

configuration history, viewing device's 10-10

configuration history report 10-16

radio manager assisted configuration 13-98

configuration, WLSE

backing up

by using the CLI 16-7

using Web interface 15-26

copying to another WLSE 16-12

Ethernet interfaces 16-17

high availability 15-44

master configuration file (WLSE Express) 15-35

redundancy 15-44

restoring

by using the CLI 16-9

using Web interface 15-26

using DHCP for 15-35

configuration archives

recommendations for using 8-32

configured radio parameters report 10-20

connectivity (WLSE), testing 15-65

console, using with WLSE 16-2

conventions

CLI A-2

in command descriptions A-4

CoS (class of service)

definition GL-4

CPU (WLSE), displaying A-91

credentials, devices

configuring

Deployment Wizard 2-7

entering on WLSE

manually 4-7

entering on WLSE, using Deployment Wizard 2-6

HTTP port 4-18

SNMP 4-9

Telnet/SSH 4-15

WLCCP 4-20

CSR, definition GL-4

CSV

definition GL-4

files, about

device 4-43

CSV files, about

device specific settings 8-60

current reports 10-42

AP and bridge connected to router report 10-91

AP and bridge connected to switch report 10-89

AP summary 10-70

AP usage report 10-93

associations 10-77

detailed 10-74

EAP and MAC failed authentications report 10-86

failed authentications and login attempt per AP report 10-87

group auto config retry report 10-68

group CDP inline power report 10-64

group client association 10-47

group client report 10-59

group identity report 10-61

group inventory report 10-65

group LBS report 10-66

group MBSSID 10-54

group security 10-49

group security violation report 10-63

group serial number report 10-62

group SSID 10-52

group version summary report 10-67

group VLAN 10-55

hot standby report 10-84

MBSSID report 10-81

per VLAN (group) client report 10-57

per VLAN client (individual) report 10-83

QoS report 10-79

RADIUS authentication 10-78

router summary 10-90

server summary report 10-92

SSID report 10-80

switch summary 10-88

VLAN report 10-82

current users of WLSE, listing 15-26

custom values, configuring

IOS template 5-161

WLSM template 6-12

cwexport.log 15-7

D

daemon log, displaying

using CLI command A-70

using Web interface 15-6

daemon manager log, displaying

using CLI command A-71

using Web interface 15-6

daemons.log file 15-7

database

backing up 15-26

purging 16-24

reinitializing A-55

restoring 15-26

dataUpdate.log 15-7

date and time

in WLSE displays 1-15

setting

browser time 15-59

by using CLI command A-20

by using NTP 16-15

current local time 15-59

synchronizing to a time server

using CLI command A-48

using Web interface 15-60

db2runstatlast.log 15-7

db2runstattimes.log 15-7

db2uext2.log file 15-7

debug command A-21

Deployment Wizard

about 2-1

deploying devices 2-14

launch at login, enable or disable 2-4

requirements 2-5

templates, creating 2-6

templates, managing 7-1

wlsestartup.ini file 2-4

detailed report 10-74

device_events.log 15-7

device center 10-10

Device Credentials option 4-7

device name

characters allowed in B-2

display of, configuring 4-59

display of, effects of reverse DNS lookup 4-63

format of 4-59

devices

adding to location manager 13-18

auto-management 4-64

configuring

archive jobs 8-39

configuration jobs 8-13

Deployment Wizard 2-1

Deployment Wizard templates, managing 7-1

firmware, updating 9-1

IOS templates, using 5-1

managing configuration jobs 8-8

managing Deployment Wizard templates 7-1

using IOS templates 5-1

using WLSM templates 6-1

connectivity, testing 15-65

credentials, setting manually 4-7

deleting 4-85

device history report, displaying 10-15

device identifier, selecting the type 4-59

device name, display of 1-14

specifying the format 4-59

exporting

to a file 4-103

to CiscoWorks server 4-101

fault summary, viewing 10-10

firmware, updating 9-1

grouping 4-105

history viewing 10-10

how WLSE communicates with devices 4-4

limitation on number of access points 4-86

managing

auto-management 4-64

device detail display 4-82

limitation on number of 4-86

limitations, displaying A-90

management state, changing 4-77

understanding 4-35

new versions, supporting 15-67

unmanaged 4-77

DFS, definition GL-4

DHCP

definition GL-4

used with Deployment Wizard 2-1

using for initial configuration of WLSE Express 15-35

dhcp.log 15-7

diagnostic-info.log 15-7

diagnostic-info command A-23

diagnostics, WLSE

log files 15-5

processes, viewing 15-58

self-test 15-54

status reports 15-53

discovery

advanced options 4-59

after WLSE restarts 15-9

CDP discovery, running 4-50

device import

running 4-54

understanding 4-41

Discovery Run Details window 4-69

filtering

by IP address 4-67

by MAC address (access points) 4-65

history 4-98

individual device seeding 4-40

logs

deleting 4-93

viewing 4-69

messages 4-71

port used for C-2

troubleshooting, common problems 4-74

understanding 4-35

wizard 4-48

Discovery Run Details window 4-69

disk

capacity, displaying A-90

checking and repairing A-105

usage, viewing A-21

dmgtd.log file 15-7

DNS

configuring 5-108

definition GL-4

name servers, specifying

using CLI command A-40

using Web interface 15-61

port for IOS AP configuration C-2

reverse lookup

effect on device name display 4-63

enabling 4-63

documentation xxix

audience for this xxviii

locating on Cisco.com xxix

typographical conventions in xxviii

domain name

default, defining A-39

displaying A-72

DSCP, definition GL-4

DTIM, definition GL-4

dumptcp

command description A-23

log file 15-7

dumptech.tgz 15-8

dumptech command A-25

Duplicate IP folder (Managed Devices)

contents of 4-88

description 4-79

duplicate IP detection, fault policy for 3-70

E

EAP and MAC failed authentications

report, displaying 10-86

EAP-FAST

definition GL-5

server

adding to WLSE 4-23

prerequisites for adding to WLSE 4-22

EAP-MD5 server

AP usage report, displaying 10-93

definition GL-5

summary report, displaying 10-92

EAPOL, definition GL-5

EAPOL flooding

understanding 14-83

EAPOL flooding thresholds

EAPOL detection (IOS) policy 14-95

EAPOL settings (IOS) policy 14-93

EAP-TLS

configuring 17-30

definition GL-5

email

automatic configuration results 8-57

fault notifications 3-82

logs and queues

managing A-44

viewing, using CLI command A-78

viewing, using Web interface 15-6

mail server

specifying by using the CLI 16-20

mail server, specifying

by using Web interface 15-62

redundancy messages 15-42

report 10-4

scheduling 10-6

testing and debugging A-42

EMF (excessive management frame transmissions), detecting 14-67

EMF detection 14-67

displaying faults 14-71

enabling, disabling 14-70

guidelines 14-69

reports 14-73

understanding 14-68

viewing EMF statistics 14-73

encryption failures

understanding 14-82

erase config command A-26

erasing system configuration

CLI command for A-26

procedure for 16-24

error.log file 15-8

Ethernet, configuring fast 5-23

Ethernet, WLSE

firewall CLI command A-28

interface CLI command A-37

ports, configuring 16-17

Ethertype filters, configuring 5-119

event

log, configuring 5-154

ExcepReporter process (on WLSE) 15-58

excessive management frame transmissions (EMF) 14-67

exit command A-27

exporting

Deployment Wizard templates 7-5

devices 4-101

IOS templates 5-7

reports

GUI-based, using 10-3

URL-based, using 10-3

WLSM templates 6-7

F

failed authentication and login attempt per AP

report, displaying 10-87

fastEthernet, configuring 5-23

fast secure roaming, definition GL-5

faults

access/point bridge thresholds

CPU utilization 3-45

Ethernet port packet errors 3-49

Ethernet port status 3-47

Ethernet port utilization 3-48

memory utilization 3-46

SNMP reachable 3-44

access point/bridge policies 3-21

disabled 11-5

EAP per SSID, Enforced for Cisco-Supplicant 3-26

EAP per SSID Enforced, for Mixed-Cisco-Supplicant 3-28

EAP per SSID Enforced, for Non-Cisco-Supplicant 3-27

firmware version 3-23

hotstandby status 3-24

HTTP disabled 3-22

Key Rotation per VLAN 3-31

MIC per VLAN 3-29

PSPF per Vlan 3-34

registration error 3-25

Telnet disabled 3-23

WEP Encryption per VLAN 3-33

WEP per VLAN 3-30

acknowledging 3-10

ad hoc network detection 14-58

ad hoc network faults 14-55

authentication and protection attack 14-105

clearing 3-9

current 3-73

defined 3-3

displaying 3-6

displaying details 3-10

Duplicate IP fault 4-88

emailing 3-82

EMF detection 14-71

exception, definition of GL-5

fault history truncation interval, setting 15-67

faults log (WLSE), displaying 15-6

fault status report, displaying 10-15

IDS 14-5

assigning devices to profile 14-12

copying profiles 14-9

creating profiles 14-8

deleting profiles 14-11

disabled 11-5

displaying 14-5

editing profiles 14-10

renaming profiles 14-9

viewing fault profile summary 14-12

interference detection 14-61

notification, ports used for 15-1

notification settings

email 3-82

syslog 3-80

trap notification 3-75

types of 3-75

parameters for fault reporting 15-67

policies

radio-802.11x policies 3-35

WLSE 3-70

policy profiles 3-14

process for 15-57

radio-801.11x thresholds 3-50

associated clients 3-59

association rate 3-60

max retry count 3-57

RF port AdminStatus 3-52

RF port packet errors 3-54

RF port status 3-50

RF port utilization 3-53

RF port WEP errors 3-55

radio-811x policies

Broadcast Disabled 3-37

Broadcast SSID 3-35

disabled 11-5

Dynamic Frequency Selection 3-43

EAP Enforced-Cisco Supplicant 3-40

EAP Enforced-Mixed Supplicant 3-42

EAP Enforced-Other Supplicant 3-41

Infrastructure SSID 3-36

PSPF Enabled 3-38

WEP Key Length 3-39

rogue AP detection 14-26

rogue AP faults 14-26

router thresholds

SNMP reachable 3-68

security policy, specifying 3-14

security policy monitoring, understanding 3-2

settings

assigning to devices 3-19

copying 3-16

creating 3-15

deleting 3-18

editing 3-18

notifications 3-75

policies and thresholds 3-20

renaming 3-17

understanding 3-14

viewing 3-19

states, understanding 3-3

switch thresholds

CPU utilization 3-63

memory utilization 3-64

module status threshold 3-67

port status 3-65

port utilization 3-66

SNMP reachable 3-62

threshold-related, understanding 3-4

thresholds 3-71

AAA server response time 3-69

access point/bridge 3-43

radio-802.11x thresholds 3-50

router 3-68

specifying 3-14

switch 3-61

trap notification settings 3-75

understanding 3-2

unregistered clients 14-75

WDS

disabled 11-5

WDS policies

authentication failures 3-71

WLSE-WDS link status 3-72

WLSE policies

duplicate IP detection 3-70

faults.log file 15-8

files

managing with WLSE TFTP server 15-63

master configuration file (WLSE Express) 15-35

WLSE log files 15-5

filters

discovery

by IP Address 4-67

by MAC address (access points) 4-65

Ethertype, configuring 5-119

IP, configuring 5-114

MAC address, configuring 5-110

firewall

firewall CLI command A-28

ports on WLSE 15-1

firmware

"not verified" status 9-36

estimating change window 9-2

firmware history report, displaying 10-17

history, viewing device's 10-10

how firmware upgrades work 9-2

images

deleting 9-7

editing on WLSE 9-6

importing 9-8

storing on remote TFTP server 9-12

transfer, ports used for C-2

viewing 9-5

jobs

copying 9-32

creating 9-16

deleting 9-31

details, displaying 9-33

displaying 9-30

editing 9-31

failures 9-36

job choices 9-16

parameters for 9-13

protocol, changing 9-32

scheduling 9-19

status, checking 9-28

status, details 9-35

validating 9-20

new versions, support for 15-67

supported versions, displaying 15-68

upgrading

about 9-1

procedures 9-4

versions supported by WLSE

updating 15-68

viewing 15-67

frame monitoring 12-28

configuring 12-30

displaying APs 12-34

enabling, disabling 12-30

guidelines for running 12-29

scanning-only APs 12-29

selecting APs 12-30

selecting radio types 12-30

understanding 12-28

frame transmissions (EMF), detecting 14-67

friendly AP

reclassifying to rogue 14-24

reports, viewing 14-39

fsck command A-105

FTP

port for IOS AP configuration C-1

G

gethostbyname command A-30

getting started

with device management 4-2

with WLSE 1-1

GRE, definition GL-6

group reports 10-42

auto config retry report, displaying 10-68

CDP inline power report, displaying 10-64

client association report, displaying 10-47

client report, displaying 10-59

group client association report, displaying 10-47

identity report, displaying 10-61

inventory report, displaying 10-65

LBS report, displaying 10-66

MBSSID report, displaying 10-54

performance report for Ethernet utilization, displaying 10-98

performance report for RF utilization, displaying 10-97

per VLAN client report, displaying 10-57

security report, displaying 10-49

security violation report, displaying 10-63

serial number report, displaying 10-62

SSID report, displaying 10-52

top number of associations graph report, displaying 10-100

top number of associations tabular report, displaying 10-99

top percentage errors report, displaying 10-101

version summary report, displaying 10-67

VLAN report, displaying 10-55

groups

copying

rule-based 4-117

static 4-116

creating

rules-based 4-114

static 4-112

deleting 4-121

editing

rule-based 4-120

static 4-119

overview 4-105

rule-based

copying 4-117

creating 4-114

deleting 4-121

editing 4-120

static

creating 4-112

creating by copying 4-116

deleting 4-121

editing 4-119

system-defined 4-105

understanding 4-105

user-defined 4-108

GUI, WLSE

About button 1-13

dashboard 1-9

device name display 1-14

Help button 1-13

Logout button 1-13

Overview button 1-13

tabs and subtabs 1-9

time display 1-15

timeout period

default 1-19

resetting 15-61

Wizard button 1-13

H

HaMibDaemon process (on WLSE) 15-58

hardware type (WLSE), displaying A-12

help

CLI, displaying A-3

Web interface 1-14

high availability, WLSE 15-38

host file

displaying, show hosts command A-73

displaying, show import command A-74

importing A-33

hostname (WLSE)

changing system hostname A-31

characters allowed A-31

hostname command A-31

hostnames (in WLSE dialogs), characters allowed in B-2

hostnames, translating to IP addresses A-47

hot standby

configuring 5-104

report, displaying 10-84

HTTP

access to WLSE, configuring A-31

configuring 5-122

definition GL-6

http-server command A-31

port for VxWorks access point configuration C-2

WLSE HTTP port, configuring A-31

WLSE Web port for C-2

HTTPS

access to WLSE, configuring A-31

certificate signed request, obtaining 15-24, A-45

definition GL-6

http-server command A-31

log, viewing 15-5

port used for C-2

using to export devices 4-103

http-server command

description of A-31

on redundant WLSEs 15-53

I

IBSS, definition GL-6

ICMP, definition GL-6

IDS (Intrusion Detection System)

ad-hoc networks, detecting 14-52

authentication attacks, detecting 14-82

EMF, detecting 14-67

enable/disable A-52

fault profiles 14-8

interference, detecting 14-61

MIC failure

definition GL-7

network-wide settings 14-15

policies and thresholds 14-13

protection attacks, detecting 14-82

reports 14-6

rogue AP detection 14-16

settings 14-7

settings, remaining 14-14

summary of intrusions 14-3

switch ports, detecting and suppressing 14-42

understanding 14-2

unregistered clients, detecting 14-75

IGMP, definition GL-7

images

access point firmware 9-1

using WLSE TFTP server to download 15-63

WLSE software 15-10

import command A-33

importing

device firmware 9-8

devices

about CSV files 4-43

from CiscoWorks server 4-56

from file 4-54

understanding 4-41

templates

IOS 5-5

WLSM 6-5

infrastructure access point, definition GL-6

installation (WLSE)

configuring the web browser 1-5

installing a replacement WLSE 16-10

interface command A-37

interference detection 14-61

disabled faults 11-5

understanding 14-61

viewing faults 14-66

intrusion detection

enable/disable A-52

using 14-1

inventory

after WLSE restarts 15-9

automatic

polling interval 4-91

understanding 4-90

client associations inventory 4-90

group report, displaying 10-65

history 4-98

immediate 4-93

logs

deleting 4-93

viewing 4-98

performance inventory 4-90

polling intervals

guidelines for 4-92

setting 4-94

port used for C-2

run by Radio Manager 4-98

running 4-93

scheduled 4-89

troubleshooting

common problems 4-100

IOS

access point reports 10-45

templates, using 5-1

IP address (WLSE), changing 16-19

IP addresses

in UI, display of 1-14

of devices

displaying 4-63

display of 4-59

translating to hostnames A-47

IP chains, displaying A-73

ip domain-name command A-39

IP filters, configuring 5-113

ip name-server command A-40

J

Java Plugin

general requirement 1-6

requirement for Windows XP repository 15-14

job history truncation interval, setting 4-96

jobs, AP radio scan 13-65

jobs, archive

copying 8-44

creating 8-39

deleting 8-44

editing 8-42

filtering 8-42

job run details, viewing 8-45

managing 8-1

overview 8-31

recommendations 8-32

running again 8-44

viewing status 8-39

jobs, client walkabout 13-79

jobs, configuration

copying 8-28

creating 8-22

deleting 8-28

editing 8-27

filtering 8-26

managing 8-8

naming guidelines B-1

overview 8-9

recommendations 8-11

running again 8-27

undoing 8-29

viewing status 8-22

jobs, discovery

CDP discovery, running 4-48

import from CiscoWorks server 4-56

job run log 4-69

server time discrepancy message 1-16

jobs, email 10-6

jobs, firmware

copying 9-32

creating 9-15

deleting 9-31

duration 9-25

editing 9-31

filtering 9-30

job run details 9-33

managing 9-15

naming guidelines B-1

parameters for 9-13

server time discrepancy message 1-16

viewing 9-28

jobs, radio manager assisted configuration 13-101

jobs log (jobvm.log), displaying 15-8

L

LBS

group report, displaying 10-66

LDAP

definition GL-7

in built-in AAA server (WLSE Express) 17-5

LEAP server

AP usage report, displaying 10-93

definition GL-7

monitoring 3-14

summary report, displaying 10-92

Links subtab 15-80

listbackup command A-41

location manager

editing antenna placement 13-37

enabling/disabling A-52

interference reports 13-45

locating devices 13-37

measuring tool 13-47

prerequisites for using 13-3

server information, obtaining 13-45

setting up 13-3

system-defined groups for 4-107

viewing 13-1

view modes 13-39

window

tools 13-46

understanding 13-48

logging in (to the WLSE)

from Web interface 1-18

splash screen, adding a message 15-59

via the CLI 16-3

logging out (from the WLSE)

from the CLI 16-4

from the Web interface 1-18

logs, WLSE

AAA server logs (WLSE Express) 17-40

archiving A-98

ciscoinstall.log 15-7

collector log A-69

configbackup.log 15-7

configexport.log 15-7

cwexport.log 15-7

daemon manager log, viewing

from Web interface 15-5

show dmgtdlog command A-71

daemons log, viewing

from the Web interface 15-5

show daemonslog command A-70

database logs 15-7

dataUpdate.log 15-7

db2runstatlast.log 15-7

db2runstattimes.log 15-7

device_events.log 15-7

dhcp.log 15-7

diagnostic-info.log 15-7

discovery logs

deleting 4-93

viewing 4-69

displaying, using the CLI 16-21

displaying, using Web interface 15-5

downloading 15-5

dumptcp log 15-7

dumptech.tgz 15-8

emailing 15-6

faults 15-7

HTTPS events 15-8

install logs A-75

inventory logs

deleting 4-93

viewing 4-98

jobvm log 15-8

logs_tgz.log 15-8

procps_last.log 15-8

radio management 15-8

redundancy.log 15-8

redundancy logs

redundancy.log 15-8

systemCheck.log 15-8

rendundancy events 15-49

Repository.log 15-6

runstats.log 15-8

searching 15-6

SNMP agent 15-8

software installation 15-8

syslog A-86

systemCheck.log 15-8

system log 15-58

tftp.log 15-8

Tomcat log 15-5, A-89

trace logging, enabling (WLSE Express) 17-14

var_logs_tgz.log 15-8

View Log File option 15-5

web access log

viewing from CLI A-91

viewing from UI 15-6

Web error log

viewing from CLI A-92

viewing from Web interface 15-5

web SSL access log

viewing, from CLI A-93

viewing, from Web interface 15-6

M

MAC address

filters (discovery) 4-65

filters, configuring 5-110

WLSE MAC address, displaying A-76

MAC spoofing

policy 14-92

understanding 14-83

mailcntrl clear command A-44

mail command A-42

mailroute command A-45

mail server

specifying by using Web interface 15-62

mail server, specifying

by using the CLI 16-20

maintenance image, WLSE

booting from 16-25

CLI commands for A-104

using 16-24

Managed folder (Managed Devices) 4-79

management services (WLSE), stopping/starting 16-20

Manage Roles option 15-69

Manage Users option 15-72

managing devices

auto-manage options 4-64

changing device state 4-80

deleting devices 4-85

device descriptions, entering 4-83

device details

understanding 4-82

viewing 4-81

Managed Devices folders 4-78

using the Deployment Wizard 2-1

MBSSID

report, displaying 10-81

understanding 11-19

MBSSID report, displaying 10-81

memory (WLSE), displaying A-90

mfgtest.log file 15-8

MHAE, definition GL-7

MIC/encryption failure thresholds

CcmpDecryptErrorsClient policy 14-91

CcmpReplaysClient policy 14-89

TkipLocalMicFailureClient policy 14-87, 14-92

TkipRemoteMicFailureClient policy 14-88

TkipReplayClient Policy 14-85

MIC failures

understanding 14-82

mkcert command A-45

mod_jk.log file 15-8

MOK, definition GL-7

N

name servers, specifying

ip name-server command A-40

using Web interface 15-61

names of devices

display of 4-59

rules for B-2

naming guidelines B-1

built-in AAA server (WLSE Express) B-5

descriptions B-3

device names B-2

hostnames B-2

other names B-3

roles B-1

users B-1

NAT, not supported by WLSE 1-1

neighbors (of WLSE), displaying A-67

Network Address Translation (NAT), not supported by WLSE 1-1

network connectivity, testing 15-65

network interfaces

configuring

fastEthernet 5-23

radio-802.11a 5-39

radio-802.11b/g 5-26

on WLSE

configuring, interface CLI command A-37

configuring, procedures for 16-17

information about, displaying A-76

IP chains, displaying A-73

using both interfaces 16-19

template 5-23

network management systems, integrating with WLSE 1-3

New folder (Managed Devices) 4-79

non-serving channels

definition GL-8

monitoring 12-6

notification settings, faults 3-75

notification settings, IDS faults 14-15

nslookup

definition GL-8

from CLI A-47

from Web interface 15-65

NTP (Network Time Protocol)

configuring time servers on WLSE

ntp server CLI command A-48

using Web interface 15-60

definition GL-8

setting current date and time 15-60

setting system date and time 16-15

ntp server command A-48

O

OFDM, definition GL-8

P

PAC

definition GL-8

provisioning, on internal AAA server 4-25

packet content, command for displaying A-23

parameters, system 15-67

passwords (WLSE)

changing your password 15-77

loss of, recovering from 16-30

WLSE users 15-72

passwords, devices

SSH password, entering on WLSE 2-1, 4-15

Telnet password, entering on WLSE 2-1, 4-15

path loss data

collecting 11-22

historical 10-24

reviewing 10-22

PEAP server, external

definition GL-9

monitoring 4-21

performance

inventory 4-90

parameters for data collection 15-67

polling interval, setting 4-96

per VLAN client (group) report, displaying 10-57

ping

definition GL-9

from CLI A-50

from Web interface 15-65

polling

aggregation parameters 4-97

fault and job data truncation parameters 4-96

inventory parameters 4-95

pop-up blocker software 1-5

ports, on the WLSE

HTTP access port, configuring A-31

port filtering, configuring A-28

ports hosted by WLSE C-2

ports used by WLSE 15-1

processes

failure of 15-55

processes, WLSE

AAA server processes (WLSE express 17-13

active statistics, displaying A-79

displaying

using CLI A-51

using Web interface 15-55

starting and stopping

from the CLI A-62

from the UI 15-55, A-62

procps_last.log 15-8

protection attacks, detecting 14-82

protocols, on WLSE

configuring Ethernet interface 16-17

ports used for 15-1

proxy mobile IP

definition GL-9

proxy server, for firmware import 9-10

ps CLI command A-51

PSPF, definition GL-9

Q

quality of service (QoS)

configuring

802.11b/g 5-131

policies 5-123

definition GL-9

report, displaying 10-79

R

radio

802.11a, configuring 5-39

802.11b/g, configuring 5-26

AP/client relationships 11-15

coverage and capacity 11-15

performance regions 11-17

reports, displaying 10-19

uplink contention regions 11-18

radio interference thresholds

authentication error rate policy 14-96

CCMP replays discarded policy 14-104

TKIP counter measure invoked policy 14-101

TKIP local MIC failures policy 14-98

TKIP remote MIC failures policy 14-99

TKIP replays detected policy 14-102

radio location data

AP radio scans, collecting 11-22

collecting 11-21

radio monitoring data, collecting 12-2

Radio Management

CLI command 11-5

disabled faults 11-5

disabled fault settings 14-14

enabling/disabling 11-5

radio management

network, configuring for 11-6

overview 11-1

radio management capability, verifying 13-36

understanding 11-10

radio manager

assisted configuration 13-98

auto re-site survey 12-9

client walkabout 13-73

enable/disable A-52

frame monitoring 12-28

getting started 12-2, 13-2

location manager 13-2

log file for 15-8

managing data 13-111

processes for 15-57

radio monitoring 12-2

radio performance 12-9

reports, displaying 12-37

self healing 12-16

understanding 11-10

WLSE, configuring for 4-20

radiomanager command A-52

radio measurement aggregation, definition GL-9

radio monitoring 12-2

enabling, disabling 12-6

guidelines for running 12-5

selecting APs 12-6

understanding 12-3

radio parameters, generating 13-89

radio performance

evaluating 12-9

understanding 11-15

radio scans

filtering 13-66

guidelines for running 13-61

jobs

copying 13-66

creating 13-67

deleting 13-66

editing 13-66

job run logs 13-72

managing 13-65

naming 13-68

run logs, viewing 13-72

running 13-66

scheduling 13-69

stopping 13-66

selecting devices 13-69

selecting radio types 13-69

understanding 13-59

viewing results 13-65

RADIUS

attributes for internal AAA server (WLSE Express) 17-64

authentication module 15-22

definition GL-10

port for WLCCP authentication C-2

RADIUS server

AP usage report, displaying 10-93

authentication report, displaying 10-78

built-in (on WLSE Express) 17-1

monitoring 3-14

ports for C-2

summary report, displaying 10-92

RAM (WLSE), displaying A-90

real-time reports

AP CPU utilization 10-114

AP memory utilization 10-113

AP packet errors 10-116

AP packet statistics 10-114

AP radio utilization 10-117

associated client statistics 10-118

rebooting, WLSE

using the CLI A-56

using Web interface 15-9

recovery (WLSE)

maintenance image 16-24

recovery CD

creating 16-26

using 16-26

reimaging the WLSE 16-26

rescue image, using 16-29

resetting WLSE to factory defaults 16-24

redundancy, WLSE

backup and restore on redundant nodes 15-51

checking settings 15-47

configuring 15-44

email messages 15-42

event log 15-49

files in /tftpboot/public directory 15-63

hardware requirements 15-39

http-server accept command, using 15-53

manual failover 15-49

message log 15-8

nodes, replacing 15-50

prerequisites for 15-39

redundancy CLI command A-53

show redundancy CLI command A-81

software, upgrading 15-50

system check log 15-8

system check timeout period 15-46

web timeout period, resetting 15-52

redundancy.log 15-8

redundancy command A-53

reimaging the WLSE 16-26

reload, configuring 5-158

reload command A-56

replacement WLSE, installing 16-10

reports

ACS failed login report 15-83

ad-hoc network 14-58

AP and bridge connected to router 10-91

AP and bridge connected to switch 10-89

AP CPU utilization, real-time 10-114

AP memory utilization, real-time 10-113

AP packet errors, real-time 10-116

AP packet statistics, real-time 10-114

AP radio scan results, viewing 13-65

AP radio utilization, real-time 10-117

APs registered with WDS 10-14

AP summary 10-70

AP usage, displaying 10-93

associated client statistics, real-time 10-118

associations 10-77

auto config retry 10-18

channel loading 10-25

channel loading, historical 10-27

client access failure 10-38

client detail 10-31

client historical association 10-35

client statistics 10-34

configuration history 10-16

configured radio parameters 10-20

current 10-42

detailed 10-74

device center, using 10-10

device fault status 10-15

device history 10-15

device specific 8-64

EAP and MAC failed authentication 10-86

emailing 10-4

EMF detection 14-73

Ethernet transmission statistics 10-104

exporting 10-3

failed authentication and login attempt per AP 10-87

firmware history 10-17

friendly AP reports 14-39

group auto config retry 10-68

group CDP inline power 10-64

group client 10-59

group client association 10-47

group identity 10-61

group inventory 10-65

group LBS 10-66

group MBSSID 10-54

group performance, Ethernet utilization 10-98

group performance, RF utilization 10-97

group security 10-49

group security violation 10-63

group serial number 10-62

group SSID 10-52

group version summary 10-67

group VLAN 10-55

hot standby 10-84

IDS

viewing 14-6

interference reports (Location Manager) 13-45

links to from Group Details display 4-111

MBSSID 10-81

parameters for 15-67

path loss between managed APs 10-22

path loss between managed APs, historical 10-24

per VLAN client 10-57, 10-83

QoS 10-79

radio manager reports 10-19

RADIUS authentication 10-78

real-time, displaying 10-111

RF and Ethernet utilization, tabular 10-106

RF and utilization, graph 10-105

RF transmission statistics 10-102

router summary 10-90

scheduling email 10-6

server response time, graph 10-110

server summary 10-92

SSID 10-80

switch summary 10-88

top n busiest clients 10-107

top n client MIC error rate 10-109

top n number of associations graph 10-100

top n number of associations tabular 10-99

top n percentage errors 10-101

trend, using for capacity planning 10-96

trends, displaying 10-94

unregistered clients 14-79

VLAN 10-82

WDS summary 10-12

wireless client 10-31

repository

browsing 15-18

defining

using CLI A-56

using Web interface 15-15

definition GL-10

install configure CLI command A-34

install list CLI command A-36

port for C-2

repository CLI command A-56

show repository CLI command A-82

Repository.log 15-6

rescue image, WLSE 16-29

reset device-snmp command A-59

resetting WLSE to factory defaults 16-24

restarting (rebooting) WLSE

bootlog, displaying A-66

from Web interface 15-9

reload command A-56

restore command A-60

restoring data from backups

from pre-released to released not allowed 15-26

restoring from one WLSE to another 16-12

using the CLI

procedure for 16-9

restore command reference A-60

using Web interface 15-32

reverse DNS lookup 4-63

rogue AP

automatic suppression 14-42

changing to friendly 14-33

detection, enabling/disabling 14-22

detection guidelines 14-19

displaying information about 13-29

displaying location of 13-30

fault history 14-32

managing 14-33

maximum limit 14-19

reclassification, enabling/disabling 14-24

reports 14-36

rogue APs

detecting 14-16

disabled faults 11-5

roles

creating and modifying 15-71

debug tools privilege 15-71

deleting 15-69

for users created by using the CLI 16-4

naming guidelines B-1

predefined 15-70

XML API privileges 15-69

roque AP

displaying location of 13-30

route command A-61

router

AP and Bridge connected to, displaying 10-91

fault monitoring 3-1

fault thresholds, setting 3-14

summary report, displaying 10-90

system-defined group for 4-105

routes (WLSE)

adding or deleting A-61

displaying

show route CLI command A-83

traceroute CLI command A-101

RSA, definition GL-10

RSSI, definition GL-10

runstats.log 15-8

S

scanning AP

system group for 4-108

using 14-68

scheduling

archive jobs 8-37

backups 15-31

configuration jobs 8-18

discovery 4-48

email 10-6

firmware jobs 9-15

SCP

definition GL-10

using for backups 15-29

searching for devices 1-17

security

last 10 logged in users, viewing 15-26

SSL

certificate signed request, obtaining 15-24

Telnet, enabling or disabling 15-25

security (devices)

advanced, configuring 5-91

templates 5-51

admin access 5-52

advanced 5-91

local RADIUS server 5-97

server manager 5-85

SSID 802.11b/g 5-55

WEP 802.11a 5-80

WEP 802.11b/g 5-75

security, WLSE

authentication

enabling A-13

modules 15-21

HTTP access to WLSE, controlling A-31

HTTPS 15-24

log, displaying A-83

SSH 15-25

access to WLSE, controlling A-97

access to WLSE, enabling A-97

seed

CDP-based discovery 4-38

definition GL-10

individual device seeding 4-40

self healing

assigning severity level 12-23

clearing faults 12-25

enabling, disabling 12-23

guidelines for running 12-21

reviewing history 12-25

running 12-25

selecting floors 12-23

tracking progress 12-25

understanding 12-17

server

AAA server, internal 17-2

local RADIUS server, configuring 5-97

manager, configuring 5-85

SMTP server 16-20

server, AAA

response time graph report, displaying 10-110

server manager, configuring

WLSM template 6-9

services (WLSE)

managing

procedure for 16-20

using CLI services command A-62

ports used for 15-1

reintdb command, effect on A-55

stopping and starting 16-20

time reset, requirement for stopping services A-20

services, configuring 5-101

ARP cache 5-145

CDP 5-107

DNS 5-108

Ethertype filters 5-119

hot standby 5-104

HTTP 5-122

IP filters 5-114

MAC address filters 5-110

QoS 802.11b/g 5-131

QoS policies 5-123

SNMP 5-134

SNTP 5-139

STP 5-146

Telnet/SSH 5-102

VLAN 5-141

services command A-62

serving channels

definition GL-10

monitoring 12-6

setting system date and time

using the CLI 16-15

using the Web interface 15-59

setup command A-63

short term trending inventory truncation interval, setting 15-67

show auth-cli command A-64

show auth-http A-64

show backupconfig command A-65

show backuplog command A-66

show bootlog command A-66

show cdp-neighbor A-67

show cdp-run command A-68

show clock command A-68

show config command A-69

show domain-name command A-72

show import command A-74

show interfaces command A-76

show process command A-79

show redundancy CLI command A-81

show route command A-83

show ssh-server command A-85

show ssh-version command A-86

show syslog command A-86

show tech command A-88

show time command A-89

show version command A-90

shutdown command A-94

shutting down (WLSE)

from the CLI 16-14

using CLI A-94

Sites tab options

AP radio scan, using 13-58

assisted configuration, using 13-89

client walkabouts, using 13-73

enabling/disabling A-52

location manager, using 13-2

radio manager data, managing 13-111

SMTP

definition GL-10

port for fault notification C-1

server, specifying by using the CLI 16-20

server, specifying by using the Web interface 15-62

SNMP

agent, configuring A-95

agent log, displaying 15-6

community strings

for WLSE server, displaying A-85

for WLSE server, resetting A-59

for WLSE server, setting A-95

community strings, for devices

entering on WLSE 4-9

guidelines for 4-12

recommendations 4-12

configuring 5-134

definition GL-11

faults

trap notification settings 3-75

trap version supported 3-76

port for for discovery, inventory, and AP configuration C-2

port for SNMPTRAP C-1

port on trap receiver for traps from APs C-2

port on WLSE for traps from APs C-3

reachability, testing 15-65

retries, recommendations for 4-14

timeouts, recommendations for 4-14

traps, version supported 3-76

traps supported 1-3

variables, querying 15-66

snmp-server command A-95

SNTP (Simple Network Time Protocol)

configuring 5-139

software, on devices

firmware, managing 9-1

groups for 4-105

software, on WLSE

installation logs, displaying 15-6

maintenance image A-104

overview 15-10

recovery CD

creating 16-26

using to reimage 16-26

reimaging the WLSE

locally 16-26

remotely 16-28

repository

browsing 15-18

port for C-2

status, viewing 15-11

updates

data preserved 15-20

history, viewing 15-19

installing, by using Web interface 15-16

not allowed from pre-released version 15-10

transferring to WLSE A-56

upgrading on a redundancy (high availability) cluster 15-50

version, viewing

from Web interface 1-14

using the CLI A-90

spanning tree protocol

configuring 5-146

definition GL-11

specific settings, device

configuring 5-161

exporting 8-62

importing 8-59

managing 8-59

report 8-64

viewing 8-63

splash screen, adding a message 15-59

SSH, definition GL-11

SSH access to WLSE

access control

displaying A-85

controlling A-96

enabling A-97

show ssh-server command A-85

show ssh-version command A-86

ssh-server accept command A-96

ssh-version command A-97

type, displaying A-86

version, displaying A-86

version, setting

using CLI A-97

using Web interface 15-25

ssh host command A-96

SSH on access points

credentials, entering on WLSE 4-15

port for IOS AP configuration C-1

ssh-server accept command A-96

ssh-version command A-97

SSID

802.11b/g, configuring 5-55

definition GL-11

report, displaying 10-80

system-defined groups for 4-105

SSL

definition GL-11

log, displaying 15-6

web SSL access log, displaying A-93

SSL certificate

certificate signed request, viewing 15-24

for built-in AAA server 17-8

mkcert CLI command A-45

signed, obtaining 15-24

unsigned certificate, obtaining A-45

STA, definition GL-11

startup configuration

assigning 8-49

creating a template for 8-47

startup configuration, WLSE

configbackup.log file 15-7

STP

configuring 5-146

definition GL-11

subnet, system-defined group for 4-105

summary report

access point, displaying 10-70

router 10-90

server 10-92

switch 10-88

SWAN

configuring, using Deployment Wizard 2-1

definition GL-11

switch

AP and bridge connected to report, displaying 10-89

fault monitoring 3-1

fault thresholds, setting 3-14

summary report, displaying 10-88

system-defined group for 4-105

switch port

guidelines for detecting and suppressing 14-45

locating and detecting 14-42

viewing suppressed ports 14-46

syntax of commands, checking A-3

syslog

displaying A-86

faults

notification settings 3-80

port for C-2

using for AAA server logging (WLSE express) 17-55

sysName

display of 1-14

effect of single quote on display 1-14

reverse DNS lookup, effect on display 4-63

system (WLSE)

configuration

displaying A-69

erasing A-26

date and time A-20, A-48

hostname, changing A-31

information, viewing 16-21

logs, displaying 16-21

processes, managing 15-55

rebooting

from the Web interface 15-9

using the CLI 16-13

shutting down

procedure for 16-14

shutdown CLI command A-94

status, displaying 15-54

storage usage, displaying A-22

system log, using 15-58

system parameters, setting 15-67

systemCheck.log 15-8

system time, setting

using CLI A-20

using Web interface 15-59

T

TAC (Technical Assistance Center), obtaining information for A-88

TACACS+ (for WLSE login)

authentication module 15-21

definition GL-12

tarlog command A-98

TCP/IP packet content, displaying A-23

TCP Port Scan tool 15-65

TCP ports used by WLSE C-1

Telnet

credentials for IOS access points, entering 4-15

port for IOS AP configuration C-1

Telnet/SSH services, configuring 5-102

Telnet access to WLSE

access from selected IP addresses, specifying A-99

enabling/disabling

using CLI A-99

using Web interface 15-25

status, displaying A-89

telnetenable command A-99

templates

automatic configurations 8-47

copying

Deployment Wizard 7-3

IOS 5-3

WLSM 6-3

creating

Deployment Wizard 2-6, 7-2

IOS 5-3

WLSM 6-2, 6-3

deleting

Deployment Wizard 7-4

IOS 5-5

WLSM 6-4

editing

IOS 5-4

WLSM 6-4

exporting

Deployment Wizard 7-5

IOS 5-7

WLSM 6-7

for Deployment Wizard, defined 7-1

for IOS configuration, defined 5-2

for WLSM configuration, defined 6-2

importing

IOS 5-5

WLSM 6-5

using

5-1

TFTP

definition GL-12

ports used for firmware upgrade C-2

tftp.log 15-8

TFTP process (on WLSE) 15-57

TFTP server, on WLSE Express

managing from Web interface 15-63

tftpserver CLI command A-100

tftpserver command A-100

threshold

definition GL-12

time

browser time, setting 15-59

display of, on WLSE 1-15

server time discrepancy when scheduling jobs 1-16

synchronizing to an NTP server 15-60

UTC

definition GL-12

display of 1-15

timeout period

WLSE CLI 16-3

WLSE web interface

default 1-19

resetting, from Web interface 15-61

resetting, using CLI A-104

TKIP

counter measure invoked policy 14-101

definition GL-12

local MIC failures policy 14-98

remote MIC failures policy 14-99

replays detected policy 14-102

tomcat.log file 15-8

tomcat log, displaying

from Web interface 15-6

using CLI A-89

Tomcat process 15-58

tomcat process, failure of A-59

traceroute

definition GL-12

from CLI A-101

from Web interface 15-65

transmission statistics

displaying Ethernet report 10-104

displaying RF 10-102

traps

notification settings 3-75

received from APs, port for C-3

version supported 3-76

trending data

aggregation parameters 4-97

data retention parameters 4-97

trend reports, using for capacity planning 10-96

trends, displaying 10-94

Ethernet transmission statistics report 10-104

group performance report, Ethernet utilization 10-98

group performance report, RF utilization 10-97

RF and Ethernet tablular report 10-106

RF and Ethernet utilization graph 10-105

RF transmission statistics report 10-102

server response time graph report 10-110

top n busiest clients report 10-107

top n client MIC error rate report 10-109

top n number of associations graph report 10-100

top n number of associations tabular report 10-99

top n percentage errors report 10-101

troubleshooting (WLSE)

diagnostics tools 15-53

passwords, loss of 16-30

process management 15-55

recovery procedures 16-24

troubleshooting guide

displaying from online help 1-14

locating on Cisco.com 1-21

typographical conventions

in command descriptions A-4

in this document xxviii

U

UDP ports used by WLSE C-1

undoing a job 8-29

unknown radio, displaying 13-30

Unmanaged folder (Managed Devices) 4-79

unregistered client detection 14-75

displaying faults 14-78

enabling, disabling 14-77

guidelines 14-76

reports 14-79

understanding 14-76

updateWLSE-x.x.x.log file 15-8

upgrade

access point firmware 9-1

WLSE software (by using the CLI) 16-13

WLSE software (by using Web interface) 15-10

WLSE software, data preserved 15-20

usage report, AP 10-93

user-defined

groups 4-108

roles 15-69

user guide

displaying from online help 1-14

locating on Cisco.com 1-21

username command A-102

users (WLSE)

authentication servers 15-22

CLI access 15-72

creating

using the CLI 16-4, A-102

using Web interface 15-72

current users, listing 15-26

deleting

from Web interface 15-77

using the CLI A-102

home page, modifying 15-79

last 10 logged in users. viewing 15-26

modifying

using the CLI A-102

using the Web interface 15-72

naming guidelines B-1

of internal AAA server (WLSE Express) 17-35

roles

assigning to users 15-73

managing 15-69

username CLI command A-102

UTC

definition GL-12

displayed on WLSE 1-15

utilization

RF and Ethernet graph, displaying 10-105

RF and Ethernet tabular report, displaying 10-106

V

version summary

group report, displaying 10-67

VLAN

configuring 5-141

definition GL-13

group report, displaying 10-55

per client report (group), displaying 10-57

per client report (individual), displaying 10-57

report, displaying 10-82

VLAN ID, definition GL-13

W

WDC, definition GL-13

WDS

access points 2-11, 11-11

and radio manager 11-11

configuring

using Deployment Wizard 2-1

configuring on APs 5-151

definition GL-13

discovery through 4-39

enhanced client tracking 4-27

fault thresholds for 3-71

infrastructure access point, definition GL-6

registered APs report 10-14

summary report 10-12

system-defined groups for 4-108

understanding 11-11

WDS access points

understanding 11-11

WDS device, definition GL-13

WLCCP

credentials, configuring manually 4-20

port for C-2

WLSM

discovery of 4-39

understanding 11-11

Web access log, displaying

from CLI (show webaccesslog command) A-91

from Web interface 15-6

Web error log, displaying

from CLI (show weberrorlog command) A-92

from Web interface 15-6

Web interface (WLSE)

browsers, configuring 1-5

browsers, supported 1-6

overview 1-5

Web session timeout (WLSE)

default 1-19

resetting from Web interface 15-61

Web session timeout, WLSE

resetting, using the CLI A-104

Web SSL log, displaying A-93

webtimeout command A-104

WEP 802.11a, configuring 5-80

WEP 802.11b/g, configuring 5-75

WEP keys

definition GL-13

WGB, definition GL-13

WHISK port C-2

Windows server

as backup location 15-30

as repository 15-14

WINS, definition GL-14

wireless client reports

access failure, displaying 10-38

client detail, displaying 10-31

client historical association, displaying 10-35

client statistics, displaying 10-34

displaying 10-31

polling interval, setting 4-96

WirelessSvcMgr process 15-57

WISPr, definition GL-14

wizard

assisted site survey 13-22

Deployment Wizard 2-3

Discovery wizard 4-48

WLCCP

credentials, adding from Deployment Wizard 2-9

credentials, entering on WLSE 4-20

definition GL-14

discovery through 4-39

WLSE

device limit, displaying A-90

memory

amount of displaying A-90

WLSE 1030 Express

built-in AAA server on 17-1

documentation for xxix

number of devices managed 4-87

redundancy, hardware requirements 15-39

WLSE 1130

redundancy, hardware requirements 15-39

WLSE 1130 series

Ethernet port labelling 16-17

number of devices managed 4-86

wlseconfig command (do not use this command) A-11

WLSEFaults process 15-57

WLSEIdleServer process (on WLSE) 15-57

WLSEjobvm process 15-57

WLSERepository process (on WLSE) 15-57

wlsestartup.ini file 2-4

WLSM

configuring

using templates 6-1

configuring (using Deployment Wizard) 2-1

definition GL-14

discovery of 4-39

WNM, definition GL-14

workgroup bridge, definition GL-13

WPA, definition GL-14

X

XML API, privileges in roles 15-69