Step 1

If you are using the Cisco Aironet AP 1800s Sensor without an Ethernet module, you must enable CiscoProvisioningSSID on the wireless controller.

Step 2

Create a backhaul configuration for the sensor.

Step 3

Provision the Cisco Aironet 1800s Active Sensor.

Step 4

(Optional) After the sensor device is available in the device inventory, you can select to upgrade the software image. See the "Provision Software Images" topic in the Cisco Catalyst Center User Guide.

Step 1

Log in to the Cisco Wireless Controller.

Step 2

Click the Advanced tab.

Step 3

In the top menu bar, click the Management tab.

Step 4

From the left-navigation pane, choose Cloud Services > Sensor.

Step 5

In the SSID field, enter TFTP.

Step 6

From the Auth-type drop-down list, select Open.

Step 7

From the Provisioning drop-down list, select Enable.

Step 8

Make sure that the DHCP Interface drop-down list is set to management.

Step 9

Click Apply.

Step 1

Log in to the Cisco Catalyst Wireless Controller GUI.

Step 2

From the left-navigation pane, choose Configuration > Cloud Services.

Step 3

In the Network Assurance tab, do these steps:

1. From the Network Assurance Configuration area, set the Service Status toggle to Enabled.

2. From the Provisioning area, set the Provisioning toggle to Enabled.

Step 4

(Optional) In the VLAN Interface field, enter the name of the VLAN interface.

Step 5

Click Apply.

Error in Configuring
CLI Line 2 Please associate the wlan and policy profile CiscoSensorProvisioning to the desired AP.

Step 6

Verify that the CiscoSensorProvisioning policy profile is created.

1. From the left-navigation pane, choose Configuration > Policy.

   The Policy Profile page appears.

2. Verify that the CiscoSensorProvisioning policy appears under the Policy Tag Name column.

Step 7

Associate the WLAN and policy profile CiscoSensorProvisioning to the appropriate AP. Do these steps:

1. From the left-navigation pane, choose Configuration > Tags.

   The Manage Tags page appears.

2. In the Policy tab, click Add.

3. In the Name field, enter a unique name for the Policy Tag.

4. Click Add.

5. From the WLAN Profile drop-down list, select CiscoSensorProvisioning.

6. From the Policy Profile drop-down list, select CiscoSensorProvisioning.

7. Click ✔.

8. Click Save & Apply to Device to save the Policy Tag.

   Note	Changing the Policy Tag on an AP may cause clients associated with the AP to disconnect and reconnect.

Step 1

From the main menu, choose Provision > Plug and Play.

Step 2

View the devices in the table.

Step 3

Check the check box next to the device or devices that you want to claim.

Step 4

From the menu bar above the device table, choose Actions > Claim.

Step 5

(Optional) In the Assign Site window, do these steps:

1. Change the device hostname, if needed.

2. Assign a site by doing any of these tasks:

   • To assign a different site to each device, click Assign, and from the Select a Site drop-down list, select a site.

   • To assign the same site as the first device to all other devices, in the Actions column, hover your cursor over the ellipsis icon and select Apply Site to All.

   • To assign a site from any device to some other devices, in the Actions column, hover your cursor over the ellipsis icon and select Assign this Site to Other Devices, select the devices, and click Assign.

   • To clear the site assigned to the devices, click Clear Site.

   If the wireless network profile associated with the assigned site has an onboarding template, Catalyst Center uses this template for PnP onboarding.

   Note

   In the System > Settings > Device Settings > PnP AP Location window: If the Configure AP Location check box is checked, Catalyst Center assigns this site as the AP location during PnP onboarding. If the Configure AP Location check box is unchecked, Catalyst Center does not configure this site as the AP location during PnP onboarding. You can configure the AP location using the Configure Access Points workflow. For more information, see "Configure AP Location for PnP Onboarding" in the Cisco Catalyst Center Administrator Guide.

3. Click Next.

Step 6

In the Assign Configuration window, do these steps:

1. In the Configuration column, click Assign for the device that you want to configure.

2. If the device configuration doesn't need any changes, click Cancel and continue to the next step. Otherwise, change or configure any of these settings:

   • Device Name: Change the device hostname, if needed.

   • Image: From this drop-down list, select a golden software image to apply to the device. If there is only one golden image for this device type in the image repository, it is chosen by default.

     Note

     If the device software image version or golden tagged version is 17.14.1 or later, the device claim is blocked if the selected site is configured with MD5 authentication for SNMP credentials. To claim the device, you must also configure SHA authentication for SNMP credentials, or the software image version must be earlier than 17.14.1. For more information, see "Edit Global Device Credentials" in the Cisco Catalyst Center User Guide.

   • Template: From this drop-down list, select an onboarding configuration template to apply to the device. If there is only one onboarding configuration template defined for this device type, it is chosen by default.

     Note	If you have not assigned the device to a site, you must select a template for the device to continue.

   • Catalyst Wireless LAN Controller Settings: For a wireless controller, enter values in these fields: Wireless management IP, Subnet mask, Gateway, IP interface name, and optionally, VLAN ID.

   • For an AP device, in the Radio Frequency Profile drop-down list, select a radio frequency profile to apply to the device. This may be set if you designated one profile as a default.

   • For a Mobility Express device, enter values in these fields: Wireless management IP, Subnet mask, and Gateway.

   • For a wireless sensor device, in the Sensor Settings drop-down list, select the sensor device profile (backhaul) to apply to the device.

     Note	For Cisco Aironet 1800s Active Sensor earlier than 1.3.1.2, make sure that you do not select the sensor device profile CiscoProvisioningSSID. Instead, select your own SSID for backhaul purposes.

   • If you made any changes, click Save; otherwise, click Cancel to return to the list and configure other devices.

3. From the Clear Configuration drop-down list, select any these options:

   • Clear Device Certificates: Select this option and check the check box next to each of the devices that you want to clear the certificate from, and click Clear.

   • Clear Images: Select this option and check the check box next to each of the devices that you want to clear the image from, and click Clear.

   • Clear Templates: Select this option and check the check box next to each of the devices that you want to clear the template from, and click Clear.

   • Clear License Levels: Select this option and check the check box next to each of the devices that you want to clear the license level from, and click Clear.

4. To apply an image or template from one device to other devices, in the Actions column, hover your cursor over the ellipsis icon and select Apply Image to Other Devices or Apply Template to Other Devices.

   For wireless controller devices, you can apply the device license level to other devices by clicking Apply License Level to Other Devices.

5. If you selected multiple devices to provision, click Assign for the next device in the list and repeat the configuration steps, until you have done this for all devices.

6. After you have configured all the devices, click Next.

Step 7

In the Provision Templates window, select the template from the Devices area, enter your domain name in the domain field, and click Next.

Step 8

In the Summary window, view details about the devices and their configuration preview.

Step 9

Check the Device Configuration column for each device to see if the configuration preview succeeded.

Step 10

In the Device Configuration column, click Preview Configuration to review the configuration.

Step 11

Click Claim.

Step 12

In the confirmation dialog box, click Yes to claim the devices and start the provisioning process.

Step 1

From the main menu, choose Assurance > Dashboards > Wireless Sensors.

Step 2

Use the Wireless Sensors dashboard top-menu bar for this functionality:

Timeline area
Item	Description
Time Range setting	Enables you to display data within a specified time range on the dashboard. Do these steps: From the drop-down menu, select the length of the range: 3 Hours, 24 Hours, or 7 Days. Specify the Start Date and time; and the End Date and time. Click Apply.
Hierarchy Location setting	Enables you to select the data displayed on the dashboard from the selected locations in your network. Check the check boxes for the sites, buildings, or floors in your network to display its sensor data on the dashboard. Note   You can't exclude all locations from displaying data on the dashboard. Unchecking all locations results in data from all locations to be displayed on the dashboard.
Filter icon	Enables you to select the data displayed on the dashboard based on SSIDs and radio frequency bands. To add filters: Click Filter. From the drop-down menu, click the SSID tab and check the check boxes for the desired SSIDs. From the drop-down menu, click the Band tab and select the radio button for 2.4 GHz or 5 GHz. Click Apply. To remove all selected filters: Click the Filter icon. Click Clear Filters.

Step 3

Use the Timeline to view the percentage of overall test failures for a specific time within a time range.

Step 4

Use the Overall Summary dashlet for this functionality:

Overall summary dashlet
Item	Description
Total Sensors area	Provides an overall view of all the sensors in your network and their status. The status types of the sensor include: Idle: The sensor is onboarded and does not have any scheduled tests. Running: The sensor is onboarded and is included in a test suite or test template. Unreachable: No heartbeat received from the sensor. Click the hyperlinked number next to the status type to open a slide-in pane that displays the sensors with that status. In the slide-in pane, you can click the sensor name under the Name column to get a 360° view of that sensor. See Monitor and troubleshoot network health with a wireless sensor.
Total Tests	Displays the total number of tests performed by all sensors and a breakdown of the test results based on these test categories: Onboarding RF Assessment Network Services Performance App. Connectivity Email You can click a test category to open a slide-in pane with additional details about its test results. In the slide-in pane, click the test type tabs on the left to populate the slide-in pane with data from the test type. The slide-in pane displays: A chart that displays the test results, future trends, and list of APs used in the tests. Note   For the RF Assessment test category, the chart displays the KPIs data rate and SNR, instead of test results. Data type categories: Top Failure Reasons (if applicable), Top APs, Top Locations, Top Bands, and Top SSIDs (if applicable). A table with detailed data of the sensors that ran the tests. You can click the data segments from the data type categories to filter the data that appears in the table.
Edit Threshold	Enables you to customize the thresholds of the color-coded ranges that indicate the severity of percentage of test result failures. To customize the thresholds: Click the edit () icon. In the Edit Threshold menu, enter the percentage values in the fields for each color-coded range. Click Apply.

Step 5

Use the Test Results dashlet to view the locations in your network with the most sensor test result failures:

Step 1

From the main menu, choose Assurance > Dashboards > Wireless Sensors.

Step 2

From the Sensors Dashboard, do one of these tasks:

• In the Overall Summary dashlet, click the hyperlinked number from the Running, Idle, or Unreachable areas.

  Then in the Sensor Status slide-in pane, click the hyperlinked name of the sensor.

• In the Overall Summary dashlet, click a hyperlinked test category.

  In the slide-in pane, click the hyperlinked name of the sensor from the table.

• In the Test Results dashlet, click a color-coded box from the heatmap.

  In the slide-in pane, click the hyperlinked name of the sensor from the table.

Step 3

Click the Time Range setting at the top-right corner to specify the time range of data that is displayed on the window:

1. From the drop-down menu, select a time range: 3 hours, 24 hours, or 7 days.

2. Specify the Start date and time; and the End date and time.

3. Click Apply.

Step 4

Use the header above the timeline to view the basic information of the sensor such as the sensor's serial number, current state, uptime, backhaul type, IP address, and so on. You can also view and download the sensor's event logs.

1. Click View Logs at the end of the header.

   The Event Logs slide-in pane appears which displays the event logs.

2. In the Event Logs slide-in pane, click Request Support Bundle to generate the support bundle file which contains the event logs.

   Attention

   It takes about three to five minutes for a support bundle request to be ready for download.

3. Click Download Support Bundle to open the download prompt for the support bundle.

Step 5

Use the timeline to view the percentage of overall test failures for a specific time within a specified time range. The timeline has this functionality:

Step 6

Use the collapsible categories to view information about test results, performance trends, and neighboring APs:

Step 1

From the main menu, choose Assurance > Settings > Sensors.

The Sensor List window appears.

Step 2

Use the left pane to specify the network hierarchy you want to view.

Step 3

Click the categories above the table to view the sensors that fit their criteria. The categories are:

Step 4

You can customize the data that is displayed in the table:

1. Click .

2. From the menu, check the check boxes of the data you want displayed in the table.

3. Click Apply.

Step 5

To configure the SSH settings for a sensor:

1. Check the check box of the sensor.

2. Hover your cursor over the Actions drop-down list and select Edit SSH.

   The Edit SSH slide-in pane appears.

3. In the Edit SSH slide-in pane, click the SSH toggle to enable SSH.

4. In the Username and Password fields, enter the desired SSH credentials.

5. Click Save.

Step 6

To change the status LED of a sensor:

1. Check the check box of the sensor.

2. Hover your cursor over the Actions drop-down list and select Edit LED.

   The Edit LED slide-in pane appears.

3. In the Edit LED slide-in pane, click the LED toggle to enable or disable the status LED.

Step 7

Click Save.

Step 8

To change the name of a sensor:

1. Check the check box of the sensor.

2. From the Actions drop-down list, select Edit Sensor Name(s).

   The Edit Sensor Name(s) slide-in pane appears.

3. In the Edit Sensor Name(s) slide-in pane, enter the name in the Name field.

4. Click Save.

Step 9

To enroll the sensors using SCEP profiles:

1. Check the check box of the sensor.

2. From the Actions drop-down list, select Enroll using SCEP.

   The Enroll using SCEP slide-in pane appears.

3. Select the SCEP profile from the Select SCEP Profile drop-down list.

   See Manage SCEP Profiles for more information.

4. Select the Username and Password and provide the required details. If you select the Custom username option, then select No Password.

5. Click Save.

6. To check status, see the SCEP Profile column in the Sensor List window. A green check mark (✔) indicates success, and a red X icon indicates failure. Hover your cursor over the ✔ or X icon to get more information.

Step 1

From the main menu, choose Assurance > Settings > Sensors.

Step 2

Hover your cursor over the Settings tab and select Backhaul Settings.

Step 3

You can add and manage backhaul SSIDs by doing these steps:

1. Click + Add Backhaul.

   The Create Sensor Backhaul SSID Assignment window appears with two areas: Wired Backhaul and Wireless Backhaul.

2. In the Settings Name field, enter a name for the backhaul SSID.

3. In the Wired Backhaul area, do this configuration:

   • Level of Security: Displays the encryption and authentication type used by the selected SSID. The available security options are:

     • 802.1x EAP: Standard used for passing Extensible Authentication Protocol (EAP) over wired LAN.

     • Open: No security or authentication is used.

   • EAP Method: If you select 802.1x EAP, you must select one of these EAP methods for user authentication from the drop-down list:

     • EAP-FAST: Enter the username and password in the fields provided.

     • PEAP-MSCHAPv2: Enter the username and password in the fields provided.

     • EAP-TLS: Select Enroll Using Certificate Bundle or Enroll Using SCEP.

       If you select Enroll Using Certificate Bundle, click the drop-down arrow under Certificate Bundle, click + Add New Certificate Bundle, and enter the username and certificate bundle password.

     • PEAP-TLS: Select Enroll Using Certificate Bundle or Enroll Using SCEP.

       If you select Enroll Using Certificate Bundle, click the drop-down arrow under Certificate Bundle, click + Add New Certificate Bundle, and enter the username and certificate bundle password.

4. In the Wireless Network Name (SSID) area, select the wireless network (SSID) and do this configuration.

   • Level of Security: Displays the encryption and authentication type used by the selected SSID. The available security options are:

     • WPA2 Enterprise: Provides a higher level of security using Extensible Authentication Protocol (EAP) (802.1x) to authenticate and authorize network users with a remote RADIUS server.

     • WPA2-Personal: Provides a good security using a passphrase or a preshared key (PSK). This allows anyone with the passkey to access the wireless network.

       If you select WPA2 Personal, enter the passphrase in the Passphrase text box.

     • PSK Format: The available preshared key formats are:

       • ASCII: Supports ASCII PSK passphrase.

       • HEX: Supports 64-character HEX key PSK password.

     • Open: No security or authentication is used.

5. Click Save.

Step 4

You can edit the existing backhaul configurations by doing these steps:

1. Check the check box of the backhaul configuration.

2. Hover your cursor over the Actions drop-down list and select Edit.

Step 5

You can delete a backhaul configuration by doing these steps:

1. Check the check box of the backhaul configuration.

2. Hover your cursor over the Actions drop-down list and select Delete.

Step 1

From the main menu, choose Assurance > Sensors.

Step 2

Click the Test Templates tab.

The Test Templates window appears.

Step 3

Click + Add Sensor Test to create a new sensor test template.

Step 4

On the Set up Sensor Test window, configure these settings:

Step 5

On the Enter SSID Credentials window, enter the credentials for the selected SSIDs:

Step 6

To enable proxy settings:

Step 7

On the Define Sensor Test Category Details window, check the check boxes for the tests that you want to include:

1. For the Onboarding test category, the test types are Association, Authentication, and DHCP.

   Note	All of these test types are selected by default and cannot be excluded from the test template.

2. For the RF Assessment test category, the test types are Data Rate and SNR.

   Note	All of these test types are selected by default and cannot be excluded from the test template.

3. For the Network Services Tests test category, select from these test types:

   • DNS: Resolves the IP address for the domain name.

   • RADIUS: The sensor acts as a Dot1x supplicant and authenticates through wireless.

4. For the Performance Tests test category, select from these test types:

   • Internet (NDT): Does a speed test using Network Diagnostic Tool (NDT).

     If you have a Network Diagnostics Test (NDT) server, enter the IP address of the NTD server in the field provided. If the NDT server is reachable through a proxy server, enter the IP address of the proxy server in the field provided.

   • iPerf3: iPerf3 test is a tool used to measure network performance. This feature allows you to perform a speed test in the network with a certain amount of traffic to determine whether the test is able to pass through the traffic.

     To run the iPerf3 test, check the iPerf3 check box, and then enter the IP address of the iPerf3 server, UDP bandwidth, and port details in the fields provided.

     iPerf3 Limitations

     • You can add up to five iPerf3 servers.

     • You can configure each iPerf3 server to use a maximum of five ports per template. Sensors randomly select the port in which it wants to run the iPerf3 test.

     • Two sensors cannot connect to the same port concurrently on a given iPerf3 server.

     • The “iPerf: Server Busy" error message indicates that there are not enough iPerf3 instances to support the number of the sensors that are running the iPerf3 test.

       To resolve this issue, do one of these tasks:

       • Add iPerf3 server instances. To do so, expand the ports that support iPerf3 testing on the existing servers.

       • Reduce the number of sensors that are configured to run the iPerf3 test. To do so, create a separate template for iPerf3 testing.

   • IP SLA: Runs UDP jitter, UDP echo, packet loss, and latency measurements from sensor to APs.

     To run the IPSLA test, select a Service Level option for each SSID from the drop-down list. Options are Platinum (voice), Gold (video), Silver (best effort), and Bronze (background).

5. For the Application Tests test category, select from these test types:

   • Host Reachability: Tests for reachability using (ICMP) echo request.

   • Web: Tests for access to the provided URL and verification of the response data.

   • FTP: Tests for file upload and download operations

     Note	The maximum file size for the sensor test is 5 MB.

6. For the Email test category, select from these test types:

   • POP3: Post Office Protocol3, connects to POP3 server TCP port (110).

   • IMAP: Internet Message Access Protocol, connects to IMAP server TCP port (143).

   • Outlook Web Access: Logs into the Outlook Web Server (OWS) and verifies access.

Step 8

On the Select AP Coverage window, do these steps:

1. Check the frequency band check boxes (2.4GHz and 5GHz) that you want to test.

2. From the Number of Target APs drop-list for the selected bands, select the number of APs that you want the sensor to test against.

   Note	You can select a maximum of five APs.

3. In the RSSI Range slider for the selected bands, drag the slider to the desired RSSI threshold.

Step 9

On the Summary window, review the template settings.

Step 10

Click Create Test to create the template.

Step 11

On the Done! Sensor Test Created confirmation window, click Deploy Test to Locations to configure the locations and schedule for the test template.

Step 12

On the Select Location window, from the left tree hierarchy, check the check boxes of the sites where you want to deploy the test template.

Step 13

On the Set Schedule window, select one of the test frequency options:

Step 14

On the Summary window, review the deployment details.

Step 15

Click Deploy Test.

Step 16

Click the test template's corresponding Run Now to run the test.

Step 1

From the main menu, choose Assurance > Sensors.

Step 2

Click the Test Templates tab.

The Test Templates window appears.

Step 3

To duplicate a test template:

1. Check the check box for the test template that you want to duplicate.

2. From the Actions drop-down list, select Duplicate.

3. In the Input the new Test Name dialog box, enter a name for the duplicate test template.

4. Click Save.

   The duplicate of the test template displays in the Test Templates window. To deploy the test, click the test template's corresponding Deploy Test from the Location column.

Step 4

To delete a test template:

1. Check the check box for the test template that you want to delete.

2. From the Actions drop-down list, select Delete.

3. In the Warning dialog box, click Yes.

   The test template is deleted.

Step 5

To undeploy a test template:

1. Check the check box for the running test template that you want to undeploy.

2. From the Actions drop-down list, select Undeploy.

3. In the Warning dialog box, click Undeploy.

   Note	If the test template is configured to run IP SLA performance tests, clicking Undeploy confirms that you want to disable IP SLA on the wireless controllers in the selected sites, so the sensors don't run IP SLA tests against the APs.

   The test template stops running.

   Warning

   If you undeploy a test template, its location and schedule settings are removed.