Build and Deploy Workflows

Catalyst Center workflow navigation

Catalyst Center workflows are similar to wizards. The workflows are embedded in the GUI to guide you through multistep tasks that would otherwise be too complex or advanced to complete. You can access many of them from various menu options or directly from the Workflows menu option.

Use these guidelines to help you navigate through the workflows:

Follow the steps in the workflow and click Next to go to the next page.
When you hover your cursor near the top of each page in the workflow, a Progress bar displays, showing you the steps to complete the process and which step you are currently on.
Some workflows open a dialog box that you can click through to see a visual overview of the task. At any point in the task overview, you can click Let’s Do it to jump directly to the beginning of the workflow.

To skip the task overview in the future, check the Don't show this to me again check box.
In the bottom-left corner, click Exit to leave a workflow. Then in the confirmation dialog box, click Exit. Your progress is saved automatically, and the Workflows window displays the workflow in-progress card for the task.
On the Workflows window, hover your cursor over the bottom-right corner ellipsis in a workflow in-progress card and click Resume to resume that workflow.

Discover devices

This workflow guides you from device discovery to network health.

Before you begin

Your devices must have the required device configurations, as described in Discovery prerequisites.
Enable CDP on your network devices, if you want to use CDP discovery protocol.
Enable LLDP on your network devices, if you want to use LLDP discovery protocol.
Configure your network device's host IP address as the client IP address. (A host is an end-user device, such as a laptop computer or mobile device.)

Procedure

Step 1

From the main menu, choose Workflows > Discover Devices.

Step 2

If a task overview window opens, click Let's Do it to go directly to the workflow.

Step 3

In the Discover Devices window, complete these fields:

Enter a name for the discovery job.
Under Discovery Type, choose the protocol used to discover devices and complete the corresponding fields:
- CDP: Enter the IP Address, CDP Level, and Subnet Filter.
- IP Address Range: Enter the Starting IP Address and Ending IP Address.
- LLDP: Enter the IP Address, LLDP Level, and Subnet Filter.
Choose the Preferred Management IP Address.

Step 4

In the Provide Credentials window, configure the discovery credentials and other settings as required.

Enter at least one CLI credential and one SNMP credential that Catalyst Center will configure for the devices it discovers. You can have a maximum of five global credentials and one task-specific credential for each type. For more details, see Discovery credentials.

In the left pane, click CLI to add CLI credentials.
Expand SNMP to add SNMP credentials.

Expand Advanced Settings and configure these settings:


Setting	Task
Protocol Order	Select SSH or Telnet. If you select both, you can specify the order in which they are used by dragging the protocols up or down.
SNMP Polling Properties	Use the global SNMP polling properties defined in the Network Settings > Device Credentials window or modify for this discovery instance.

Note

You can configure other credentials such as, NETCONF, HTTP, and HTTPS, if required.

Step 5

In the Schedule Job window, do these steps:

Click Now to start device discovery immediately or click Later to schedule device discovery at a specific time.

If you select the Daily or Weekly recurrence option, the Discover new devices only option is disabled.
Click the toggle button to enable or disable the Discover new devices only option.

Click the Assign devices to an existing site link.

The Visibility and Control of Configurations dialog box appears with information about the settings that will be enabled on the devices during site assignment. If Visibility of Configurations is enabled and a site is assigned during discovery, a configuration preview will not be generated.

During the discovery workflow, devices can be assigned to existing sites only, new site creation is not supported.

In the dialog box, select any one of these options:


Option	Task
Assign to site without Configuration Preview	Use the Search Hierarchy search field or the filter icon to find a site, building, or area. For more details, see Search the network hierarchy.
Skip site assignment for now	Use this option if you want the devices to be assigned to sites later from inventory.

Step 6

In the Summary window, review the configuration settings. (To make any changes, click Edit.)

Step 7

Click Start Discovery.

You can view the status of the task in the Activities > Tasks window.

What to do next

The Device Discovery window displays an option to view the discovered devices based on the site assignment. Use this option to view devices assigned to a site or a network or the unassigned devices in the inventory.

AP Refresh workflow

The AP Refresh feature allows you to replace both provisioned and unprovisioned older AP models with newer AP models, using the Access Point Refresh workflow. You can use this procedure to replace old APs with new ones in Catalyst Center for these use cases:

Automation use case: Deployments where wireless controller and APs are provisioned through Catalyst Center network intent configurations. After AP refresh, the new AP is provisioned with the network intent configuration.
Assurance use case: Deployments where Catalyst Center is used primarily for Assurance purposes and the wireless controller and APs are not provisioned through Catalyst Center network intent configurations. The new AP isn’t provisioned after AP refresh and only the old configuration is copied to the new AP.

For device compatibility information, see the Catalyst Center Compatibility Matrix.

Before you begin

Ensure that the old AP is in the Unreachable state and assigned to a site.
The new AP must not be assigned to any site.
For the automation use case, the old AP site must be provisioned as a managed AP location for the wireless controller to which the new AP is associated.
For the Assurance use case, the new AP must join the same wireless controller where the old AP was previously associated.
For the automation use case, you must connect the new AP to a wireless controller. The new AP must either be available in the Catalyst Center inventory or be able to contact Catalyst Center through Plug and Play (PnP). It must be in the Reachable state.

For the Assurance use case, you must connect the new AP to a wireless controller. The new AP must be available in the Catalyst Center inventory.

Note

The Assurance use case isn't supported for APs onboarded through PnP.

Procedure

Step 1

From the main menu, choose Workflows > Access Point Refresh.

Note

If an Overview window opens, click Let's Do it to start the workflow.

Step 2

In the Before you begin window, view the prerequisites for the AP refresh workflow.

Step 3

In the Get started window, enter a unique name for the task.

Step 4

In the Select your scenario window, click the radio button next to the required use case: Automation Usecase or Assurance Usecase

Step 5

In the Select Access Points window, do these steps:

In the left pane, check the check box next to the floor where you want to refresh the AP.
In the right pane, check the check box next to the device name that you want to replace.

Step 6

In the Assign New APs to Old APs window, do these steps:

(Optional) To automatically detect the new APs using SwitchPort, click the corresponding toggle button.

Ensure that the Cisco Discovery Protocol (CDP) is enabled on the wireless controller or AP for automatic detection of new APs.

Note

Automatic detection of the new AP using SwitchPort isn't supported when it’s onboarded through PnP.

When you enable the automatic detection of new APs, this workflow does these tasks:

If the new AP is connected to the same switch port where the old AP is connected, the serial number of the new AP is automatically populated.
If the new AP isn’t onboarded yet, the serial number of the new AP is detected after it’s discovered. Alternatively, you can enter the serial number of the new AP.

Select a method through which you want to provide new AP details:

To add the new AP details using the GUI, click the edit icon () for the AP, and in the Edit details window, do these steps:

(Optional) Update the new AP name.
(Optional) From the Choose Platform ID drop-down list, choose the platform of the new AP.

From the Choose Serial Number drop-down list, choose the serial number of the new AP.

If the new AP is already associated with a wireless controller and is available in the inventory, Catalyst Center displays the serial number of that AP as Managed in the Choose Serial Number drop-down list.

If the new AP has contacted Catalyst Center through PnP, Catalyst Center displays the serial number of that AP as Unclaimed in the Choose Serial Number drop-down list.

If the serial number of the new AP isn’t available in the Inventory, the Serial Number drop-down list doesn’t contain the serial number. To add a new serial number that isn’t present in the inventory, from the Choose Serial Number drop-down list, enter the serial number and click +.

Note

If you enable the automatic detection of new APs using SwitchPort, choosing the serial number is optional.

Click Save.

To add the new AP details using a comma-separated value (CSV) file, do these steps:
1. Click Download CSV. The downloaded CSV template file contains the old AP details. Update the device name and add the serial number of the new AP.
2. To import the CSV file, click Upload CSV.
3. In the Upload CSV window, you can either drag and drop the CSV file into the drag-and-drop area or click Choose a file, browse to the location of the CSV file, and click Open.
  
  Catalyst Center performs a validation check. If the uploaded CSV file doesn’t meet the requirement, an error message is displayed. Click View Details to get more details about the error message.
4. Click Upload.

Step 7

In the Configuration to be copied from Old APs to New window, view the configuration that will be copied from the old AP to the new AP.

Step 8

If Catalyst Center detects any errors or unresolved dependencies, the Resolve Dependencies window displays. You must resolve any errors and dependencies before proceeding, including:

Device EULA Acceptance: Accept the device End-User License Agreement (EULA) by providing your Cisco.com credentials.
Update the Cisco Wireless Controller software image version: You must resolve this dependency even though it doesn’t stop you from proceeding with the AP refresh.
AP Connected SwitchPort: You must resolve this dependency even though it doesn’t stop you from proceeding with the AP refresh.

Step 9

In the Schedule Access Point Refresh Task window, click Now or Run Later to schedule the AP refresh task for a later date and time.

Step 10

In the Summary window, review the configuration settings. (To make any changes, click Edit.)

Step 11

In the Track Replacement Status window, monitor the AP replacement status:

If the AP replacement succeeds, the Replacement Status shows REPLACED.

If the AP replacement fails, the Replacement Status shows Error.

Note

If the new AP isn’t yet discovered in the inventory and the corresponding AP refresh entry is waiting for the new device to be connected, or if the PnP claim process is in progress, resynchronize the Cisco Wireless Controller.

Step 12

(Optional) In the Track Replacement Status window, do any of these tasks:

To view the latest AP replacement status, click Refresh Data.
To get more information about the AP replacement status, click View Details.
To delete a replacement entry, under the Actions column, click the three blue dots and click Delete. In the Warning dialog box, click Yes.
To download the provisioning summary to a CSV file that you can save locally, click Export.
To download the provisioning status report, click Download Report.

Step 13

Click Next to view the refresh summary.

After a successful replacement, an AP refresh event is generated in Cisco Catalyst Assurance for the old and new APs.

Step 14

(Optional) View the AP refresh event under Event Viewer in the AP View 360 window.

Catalyst Center automatically updates the new APs on the respective floor maps in the Network Hierarchy window.

Configure User-Defined Network

These sections provide information about configuring the Cisco User-Defined Network service using workflows in Catalyst Center.

Overview of User-Defined Network service

Home, consumer, and IoT devices on the network, such as printers, speakers, Apple TV, Google Chromecast, ring doorbells, smart bulbs, and so on, depend on the Simple Service Discovery Protocols (SSDP) such as Apple Bonjour, multicast DNS (mDNS), and Universal Plug and Play (UPnP) to provide the easy discovery and usage of devices.

The Cisco User-Defined Network service provides secure and remote onboarding of client devices in shared environments such as dormitory rooms, residence halls, class rooms, and auditoriums. With the User-Defined Network service, users can securely use SSDPs such as Apple Bonjour, mDNS protocols such as AirPlay, AirPrint, Screen Mirroring, Print, or UPnP protocol to interact and share with only their registered device in the shared environment.

The User-Defined Network service provides this solution:

Easy and secure onboarding of client devices.
Automatic segmentation of client devices that belong to a particular user.
Ability to invite other users to share their devices.

Prerequisites for configuring the User-Defined Network service

Before configuring the Cisco User-Defined Network service, these prerequisites must be completed:

Confirm that APs have joined the Cisco Wireless Controller.
Discover Cisco Wireless Controllers and APs in your network using the Discovery functionality so that the discovered devices are listed in the Inventory window.
Map the AAA server client endpoint with Cisco Identity Services Engine.
Add the authentication tokens to Catalyst Center.
Create nonfabric enterprise SSIDs or guest wireless SSIDs with any security, and map them to the network profile.
Provision SSIDs.

Configure Cisco User-Defined Network

This procedure shows how to configure the Cisco User-Defined Network (UDN) using workflows.

Procedure

Step 1

From the main menu, choose Workflows > Configure Cisco UDN.

Alternatively, you can configure the Cisco UDN from Provision > Services > Cisco User Defined Network.

Step 2

If a task overview window opens, click Let's Do It to go directly to the workflow.

Click Click here.

The Cloud Authentication window opens.
Hover over Where did I get my token encryption key? and click Go to the Portal.

The Cisco Cloud Services application opens in a new tab.
Log in to Cisco Cloud Services using your Cisco.com account ID and password.

The Cisco Cloud Services home window lists the subscribed offers for your region as a card.

Step 3

Generate an authentication token using the Cisco Cloud Services portal to allow Catalyst Center to connect with Cisco Cloud Services:

In the Cisco Cloud Services GUI, click the menu icon and choose Applications > Product to register Catalyst Center to your cloud subscription.

By default, the ALL tab opens and is highlighted with a blue tick mark. You can register either from the ALL tab or from the Cisco DNA Center tab.

Note

Catalyst Center registration fails intermittently on the Cisco Cloud Services portal. This is an intermittent issue that occurs during every alternate deregistration due to communication failure from Cisco Cloud Services to Catalyst Center in all regions.

To register from the ALL tab:
- Click Register.
  
  The Register Product slide-in pane appears.
- In the Product Name field, enter a name.
- From the Product Type drop-down list, select Cisco DNA Center.
- Click Register.
- The OTP Generated dialog box appears after successful registration of Catalyst Center. To copy the OTP, click Copy, and click close.
Alternatively, to register from the Cisco DNA Center tab:
- Click Register to securely connect your products to the relevant cloud applications and services offered by Cisco and its partners.
  
  The Register Product slide-in pane appears.
- In the Cisco DNA Center Name field, enter the name of the on-premises Catalyst Center.
- In the OTP Generated dialog box, click Copy to copy the OTP and click close.

Step 4

Navigate back to the Cloud Authentication window to establish the connection:

In the Catalyst Center GUI, click the menu icon and choose System > Settings > External Services > Cloud Authentication.
Click Add OTP Key.
In the OTP Code field, paste the OTP that you generated and copied in the Cisco Cloud Services application, and click Done.
In the Success dialog box, click OK.

Step 5

Verify whether the connection has been established between Catalyst Center and Cisco Cloud Services on the Cisco Cloud Services > Applications > Products window.

The Registration Status column shows the status as Registered after a successful registration.

Step 6

Enable sites and provision Cisco UDN services on your network:

Navigate back to the Welcome to Cisco User Defined Network window in Catalyst Center.
Click Next.
In the Select Sites window, select the sites where you want to enable the Cisco UDN service.
In the SSID(s) window, do these tasks:
- From the SSID(s) drop-down list, select the SSIDs where you want to enable the Cisco UDN service.
- To limit the unicast traffic for the selected SSID, turn on Unicast Traffic Containment.
- Click Apply Individually to apply unicast traffic containment for a specific site.
- Click Apply to all to apply the unicast traffic containment for all sites.
- Click Next.

Step 7

In the Scheduling window, click Now or Later to indicate when you want to provision the Cisco UDN service. Then, click Next.

Step 8

In the Summary window, review the configuration settings. (To make any changes, click Edit.)

Expand the Connection Status area to view the connection status between Catalyst Center and Cisco UDN Cloud.

A "Paired with Cisco Cloud Services" message appears after establishing a connection between Catalyst Center and Cisco UDN Cloud.
Click Configure.

In the next window, a check mark is shown next to each step as it completes.

Enable application hosting on switches

Use this procedure to enable docker applications such as ThousandEyes Enterprise Agent and iPerf in selected switches at a specific site.

Before you begin

Complete the prerequisites. For more information, see Prerequisites for application hosting.
Add the application to Catalyst Center. For more information, see Add an application.
Check the readiness of the switch to host the application. For more information, see View device readiness to host an application.

Procedure

Step 1

From the main menu, choose Provision > Services > Application Hosting.

Step 2

Choose the application and click Install at the bottom of the window.

Alternatively, you can also launch the workflow by choosing Workflows > Enable Apps on Switches > Let's Do it.

Note

At the top of the workflow window, place your cursor on the blue progress bar and switch back to the previous step listed.

Step 3

In the Select Site window, navigate to the building where you want to enable the application.

Step 4

In the Select App window, click on the application you want to select.

Note

You can access the + New App link to add an application that is not present in Catalyst Center.

Step 5

In the Select Switches window, check the check box next to the device name for which you want to enable the application.

Note

You can import or export devices in bulk by providing the details in the specified template in the Select Switches dialog box.

Step 6

Complete these settings in the Configuration App window:

App Networking
- Device Network: From the Select Network drop-down list, choose a VLAN to configure the application.
- App IP address: From the Address Type drop-down list, choose Static or Dynamic. If you choose Static, click the thumbnail icon and enter the IP Address, Gateway, Prefix/Mask, and DNS for the application.
Resource Allocation: Check the Allocate resources as asked by the app or the Allocate all resources available on the device check box.
Custom Settings: (Applicable only for Cisco package applications) Enter the configuration details for the attributes that are specified by the application.
App Data: Browse and upload the application-specific files. To identify the required application-specific files, see the relevant application document.

Docker Runtime Options: Enter the docker runtime options required by the application.

Important

For ThousandEyes application, by default the docker runtime option mentions the hostname as a variable $(SYSTEM_NAME).

The variable $(SYSTEM_NAME) must be added with a domain name, as a Fully Qualified Domain Name (FQDN) is required. The FQDN consists of two parts, a hostname and the domain name.

You must manually add the domain name to the variable $(SYSTEM_NAME) in the format $(SYSTEM_NAME).domain.name. The variable $(SYSTEM_NAME) will be automatically replaced by the device hostname after deployment.

For example, if the FQDN of the device is ise.cisco.com, here the hostname is "ise" and the domain name is "cisco.com". In the docker runtime option you must manually add "cisco.com" to the variable; $(SYSTEM_NAME).cisco.com. The variable will be automatically replaced with "ise" after deployment.

Step 7

In the Summary window, review the configuration settings. (To make any changes, click Edit.)

The Provisioning Task window displays the task name that tracks the deployment of the application on the switches.

Step 8

Review the automatically generated task name and click Provision.

Step 9

In the Track Provisioning Status window, you can track the progress of the deployment.

Step 10

Click View Details to view the provisioning status of the individual devices and failures, if any and click Next.

The application is enabled successfully.

The summary of the task result and the success/failure counts display.

Step 11

Click Manage App, where you can manage the lifecycle operations of the application to perform day-n tasks.

Enable IoT services

These sections provide information about enabling IoT technologies such as Bluetooth, Zigbee, and ESL on Cisco Catalyst 9100 Series Access Points using Workflows in Catalyst Center.

Enable IoT services on Cisco Catalyst 9100 Series Access Points

This procedure shows how to enable IoT technologies such as Bluetooth, Zigbee, and ESL on selected Catalyst 9100 Series Access Points.

Procedure

Step 1

From the main menu, choose Workflows > Enable IOT Services.

Step 2

If a task overview window opens, click Let's Do It to go directly to the workflow.

Step 3

In the Select Site window, navigate to the floor where you want to enable the IoT service, and click Next.

Step 4

In the Select the Application window, select the SES-imagotag ESL Connector application to enable IoT in your network, and click Next.

Note

To add an application that is not present in the Catalyst Center, see Add an Application.

The Select Access Points window shows all the APs available on the particular floor.

Step 5

In the Select Access Points window, check the check box adjacent to the Device Name where you want to install the IoT connector application, and click Next.

Step 6

In the Summary window, review the configuration settings. (To make any changes, click Edit.)

Step 7

The Provisioning Task window, which displays the task name created to track deployment of any application on APs, displays. Review the auto-generated task name and click Provision.

Step 8

In the Track Provisioning Status window, you can track the progress of the deployment. Click View Details to view the provisioning status and click Next.

Step 9

The Done! Task Completed window displays. Click Manage IoT Application to do day-n tasks.

Manage IoT applications

Use this procedure to manage IoT applications.

Before you begin

You must have enabled IoT services on Cisco Catalyst 9000 Series Access Points.

Procedure

Step 1	After enabling IoT services, click Manage IoT Application in the Done! Task Completed window.
Step 2	Check the check box next to the Hostname and do these tasks: To start the application, from the Actions drop-down list, choose Start App. To stop the application, from the Actions drop-down list, choose Stop App. To edit the application configuration, from the Actions drop-down list, choose Edit App Config. To upgrade the application, from the Actions drop-down list, choose Upgrade App. To uninstall the application from the selected AP, from the Actions drop-down list, choose Uninstall App.
Step 3	Click the AP name to view details, such as the AP name, status, IP address, and health.
Step 4	Click Tech Support logs to collect Application Hosting logs.

AP configuration in Catalyst Center

The Configure Access Points workflow allows you to configure and deploy AP-level parameters, such as the AP location, admin status, mode, and so on. You can also configure radio-level parameters, such as the radio power level, channel settings, and so on.

Configure APs

Use this procedure to configure AP and radio parameters in Catalyst Center.

The settings configured using the Configure Access Points workflow that aren’t overwritten when the wireless controller or APs are reprovisioned include:

Admin status for radios (only applicable for Cisco AireOS Wireless Controllers),
AP primary controller, and
AP secondary controller.

Note

The AP configuration is generated from the information available in the Catalyst Center inventory. To ensure that the latest configuration is generated, complete an inventory sync on the controller.

Procedure

Step 1

From the main menu, choose Workflows > Configure Access Points.

If the Configure Your Access Points dialog box displays, click Let's Do It to go directly to the workflow.

Step 2

In the Get Started window, enter a unique name for the workflow in the Task Name field and click Next.

Step 3

In the How do you want to configure APs? window, configure the AP and radio parameters.

Click the Configure AP And Radio Parameters radio button.

Check the check box next to the tasks that you want to do:

Modify AP Name
Configure AP Geolocation Parameters
Configure AP Parameters
Configure 5 GHz Radio Parameters
Configure 2.4 GHz Radio Parameters
Configure 6 GHz Radio Parameters
Configure Dual-Band (XOR) Radio Parameters
Configure Tri-Radio Parameters
Create Template

Note

Based on the check boxes that you check, Catalyst Center displays the corresponding subsequent configuration steps.

Click Next.

Step 4

In the Select Access Points window, choose the APs that you want to configure.

Choose the assigned APs or unassigned APs that you want to configure.

If you chose the...

Then...

Assigned APs tab

Navigate to the site where you want to apply AP-related configurations.

The right pane lists all the APs available in the selected site.

Note

You can choose up to 2000 sites in this window.

Unassigned APs tab

Check the Unassigned Devices check box.

The right pane lists all the APs that aren’t assigned to any site.

Check the check boxes next to the AP names that you want to configure.

Tip

We recommend that you choose a maximum of 2000 APs in this window.

To filter APs based on specific details, click the search icon and choose from the filter options: Quick Filters, Advanced Filters, or Recent Filters. Choose the required option in the filter and click Apply.

To edit or customize the Access Points table, click the gear icon in the top-right corner of the table and do these tasks:

To define the Table Density, click Table Appearance.
To select the columns that you want to display in the table, click Edit Table Columns.
To customize your current view, click Edit Custom Views.
Click Apply to save the changes or click Reset All Settings to apply the default settings for the table.

Click Next.

Step 5

If you chose APs that don't meet the license requirements, Catalyst Center displays a dialog box with the details. In the dialog box, click the required option.

Option

Description

License Manager

Open the License Manager window and enable the corresponding licenses.

To enable the licenses, see "Manage Licenses" in the Cisco Catalyst Center Administrator Guide.

Continue With The Workflow

Continue with the workflow.

Note

APs that don't meet the license requirements are in worldwide safe mode (WWSM).

Cancel

Close the dialog box and choose different APs in the Select Access Points window.

Step 6

(Optional) In the Modify AP Name window, modify one or more AP names using one of these options.

Create a Naming Convention: Click this radio button, enter a name based on your naming convention, and click Apply Pattern. The Access Points table shows the new AP names based on the naming pattern that you entered.
Upload a CSV file: Click this radio button, download the sample CSV template file, and add your AP names to it. Then, upload the CSV file either by dragging and dropping it into the drop area or by clicking Choose a file and browsing to select it.

Step 7

In the Configure AP Geolocation Parameters window, configure the geolocation parameters for eligible APs.

Geolocation parameters are used for features like Automated Frequency Coordination (AFC). These parameters are available for only the APs that are running Cisco IOS XE Release 1.7.12 or later.

Note

To use the 6-GHz band at standard power, you must configure geolocation parameters and enable the Standard Power Service toggle button in the RF profile. For more information, see Create a wireless radio frequency profile.

This window lists the reachable APs that support geolocation parameters.

If you want to...

Then...

filter the APs

you can either:

click Search Table, enter a value, and then press the Enter key, or
click the filter icon () and enter any combination of values in the available fields for the table columns. For example, you can enter values in the AP Name, Ethernet MAC Address, and Site fields.

filter the APs based on standard power configuration status

click the All, Enabled, or Disabled toggle button.

configure height

complete these steps:

Check the check box next to the required APs.
Click Configure Height.
In the Height (m) field, enter the height from the ground in meters (rounded to the nearest whole number).

The valid range is from -100 to 1000.

In the Height Uncertainty (m) field, enter the height uncertainty in meters.

The valid range is from 1 to 100.

Note

Higher height uncertainty can lead to lower accuracy of power limits reported by AFC.

(Optional) If APs are connected through an antenna cable, in the Cable Length (m) field, enter the cable length in meters.

The valid range is from 1 to 100.

Note

If the AP doesn't support this data, this field is dimmed.

download the data in CSV format

complete these steps:

Check the check box next to the required APs.
Click Download CSV.

upload the data for multiple APs in CSV format

complete these steps:

Check the check box next to the required APs.
Click Upload CSV.
In the Warning dialog box, click Yes.

In the Upload CSV dialog box, you can either drag and drop the CSV file into the drag-and-drop area or click Choose a file, browse to the location of the CSV file.

Note

This CSV file must have the same format as the downloaded CSV file.

Click Upload.

Step 8

(Optional) In the Configure AP Parameters window, configure the AP parameters.

Admin Status: To disable the admin status, check this check box and click Disable.

AP Mode: Check this check box and choose the AP mode from the Select AP Mode drop-down list. Valid modes are Local/Flexconnect, Monitor, Sniffer, and Bridge/Flex+Bridge.

Note

When you change the AP mode from Monitor or Sniffer to Local/Flexconnect, Catalyst Center uses these settings:

If FlexConnect Local Switching is enabled on any associated SSID, Catalyst Center sets FlexConnect mode on the AP. Otherwise, it sets the Local mode on the AP.
For unassigned APs or the assigned APs aren't provisioned, Catalyst Center sets FlexConnect mode on the AP based on the device:
- For Cisco AireOS Wireless Controller: If FlexConnect Local Switching is enabled on any associated SSID in the AP group where the AP is present.
- For Cisco Catalyst 9800 Series Wireless Controller: If Local site is disabled on the current associated site tag of the AP.

AP Location: Check this check box to enter the AP location details in the Enter Location field.

To use the currently assigned site as the AP location, check the Use currently assigned site location check box. If you check this check box, the Enter Location field is disabled. You can view the AP location that is being configured for each AP by clicking Click here to see location details before pushing this change to the device.

Note

If you check the Use currently assigned site location check box, for APs that aren’t assigned to any site, Catalyst Center doesn't configure the AP location.

CleanAir Pro / CleanAir / Spectrum Intelligence: To disable the CleanAir spectrum intelligence for the 2.4-GHz, 5-GHz, or 6-GHz radio band, check the corresponding check box, and click Disable.

Note

You can configure CleanAir spectrum intelligence only on CleanAir spectrum intelligence-capable APs that are in the Local/FlexConnect or Monitor modes. If CleanAir spectrum intelligence is disabled on the 802.11a network, the operational status is down for the AP.

AP LED Status: To disable the APs LED status, check this check box and click Disable.
LED Brightness Level: Check this check box and choose the brightness level from the LED Brightness Level.
AP Failover Priority: Check this check box and, from the AP Failover Priority drop-down list, choose a failover priority.
- Low (Default): Level 1 priority, which is the lowest priority level.
- Medium: Level 2 priority.
- High: Level 3 priority.
- Critical: Level 4 priority, which is the highest priority level.

High Availability: Check this check box and configure the primary, secondary, and tertiary controller name and the IP address for the AP.

If you choose Inherit from site / Clear for the primary and secondary controllers:

For the APs that are in Provisioned state, the controllers that are configured as primary and secondary for the floor where the AP is assigned are configured as the primary and secondary controllers on the AP.
For the APs that aren’t in Provisioned state, the current primary and secondary controller configuration is cleared from the AP.

For the tertiary controller, only the Clear option is available.

Note

If AP fallback is disabled on the controller, the AP doesn't join the newly configured primary, secondary, and tertiary controller.
If the AP is a ROW AP, ensure that you have added support for the country of operation to the country list on the controller. You must configure at least one site from the country of operation as the managed AP location for the controller.

Step 9

(Optional) In the Configure 5 GHz Radio Parameters window, configure the 802.11 a/n/ac/ax parameters.

Admin Status: To disable the admin status, check this check box and click Disable.
Radio Role Assignment: To choose a radio role, check this check box and click Auto, Client-Serving, or Monitor.

To view the list of applicable APs for the 5-GHz radio parameter configuration, click View Devices. Catalyst Center displays the View Devices option only when APs that support the 5-GHz radio parameters are available.
Power Assignment: To choose a custom power value, check this check box and click Custom. Choose the power level from the Select Custom Power drop-down list.
Channel Assignment: To choose custom channel numbers, check this check box and click Custom. Choose a custom channel number from the Select Custom Channel drop-down list.
Channel Width: To choose channel width, check this check box and choose the channel bandwidth.

Antenna Gain: To choose an antenna, check this check box and choose an antenna from the Select Antenna drop-down list. If you choose Other as the antenna, enter the antenna gain value in the Antenna Gain (in dBi) (for Antenna-Other) field. Enter a number to specify the ability of an external antenna to direct or focus radio energy over a region. High-gain antennas have a more focused radiation pattern in a specific direction. The antenna gain value range is from 0 to 40.

Note

The selected antenna name isn't reflected in wireless maps.

Antenna Cable: To choose an antenna cable, check this check box and choose the antenna cable from the Select Antenna Cable drop-down list. If you choose Other as the antenna cable, enter the cable loss value in the Cable Loss (in dBi) (for Cable-Other) field. The cable loss value is from 0 to 40.

Note

The Azimuth and Elevation parameters are no longer available in the Configure Access Points workflow. You can configure these parameters in the Design > Network Hierarchy window. For more information, see Edit an AP.

Step 10

(Optional) In the Configure 2.4 GHz Radio Parameters window, configure the 2.4-GHz radio parameters.

To view the list of applicable APs for the 2.4-GHz radio parameter configuration, click View Devices.

Catalyst Center displays the View Devices option only when APs that support the 2.4-GHz radio parameters are available.

Configure the required 802.11 b/g/n parameters.

Admin Status: To disable the admin status, check this check box and click Disable.
Radio Role Assignment: To choose a radio role, check this check box and click Auto, Client-Serving, or Monitor.
Power Assignment: To choose a custom power value, check this check box and click Custom. Choose the power level from the Select Custom Power drop-down list.
Channel Assignment: To choose custom channel numbers, check this check box and click Custom. Choose a custom channel number from the Select Custom Channel drop-down list.

Note

The selected antenna name isn't reflected in wireless maps.

Antenna Cable: To choose an antenna cable, check this check box and choose the antenna cable from the Select Antenna Cable drop-down list. If you choose Other as the antenna cable, enter the cable loss value in the Cable Loss (in dBi) (for Cable-Other) field. The cable loss value is from 0 to 40.

Note

Step 11

(Optional) In the Configure 6 GHz Radio Parameters window, configure the 6-GHz radio parameters.

To view the list of applicable APs for the 6-GHz radio parameter configuration, click View Devices.

Catalyst Center displays the View Devices option only when APs that support the 6-GHz radio parameters are available.

Configure the required parameters.

Admin Status: To disable the admin status, check this check box and click Disable.
Radio Role Assignment: To choose a radio role, check this check box and click Auto, Client-Serving, or Monitor.
Power Assignment: To choose a custom power value, check this check box and click Custom. Choose the power level from the Select Custom Power drop-down list.
Channel Assignment: To choose a custom channel number, check this check box and click Custom. Choose a custom channel number from the Select Custom Channel drop-down list.

Channel Width: To choose channel width, check this check box and choose the channel bandwidth.

Note

The 320-MHz channel width is available only for the Wi-Fi 7 APs: Cisco Catalyst 9172H Series Access Points, Cisco Catalyst 9172I Series Access Points, Cisco Catalyst 9176D1 Series Access Points, Cisco Catalyst 9176I Series Access Points, and Cisco Catalyst 9178I Series Access Points.

Note

Step 12

(Optional) In the Configure Dual-Band (XOR) Radio Parameters window, configure the dual-band (XOR) radio parameters.

To view the list of applicable APs for the XOR radio parameter configuration, click View Devices.

Catalyst Center displays the View Devices option only when APs that support XOR parameters are available.

You can configure XOR radio parameters on these APs:

Cisco Aironet 2800 Series Access Points
Cisco Aironet 3800 Series Access Points
Cisco Aironet 4800 Series Access Points
Cisco Catalyst 9120 Series Access Points
Cisco Catalyst 9166 Series Access Points
Cisco Catalyst IW9165E Access Points
Cisco Catalyst IW9165D Heavy Duty Access Points
Cisco Catalyst IW9167E Heavy Duty Access Points

Note

Cisco Catalyst 9166 Series Access Point supports XOR between 5-GHz and 6-GHz radio modes. The other APs support XOR between 2.4-GHz and 5-GHz radio modes.

Configure the required parameters.

Admin Status: To disable the admin status, check this check box and click Disable.
Radio Role Assignment: To choose a radio role, check this check box and click Auto, Client-Serving, or Monitor.
Power Assignment: To choose a custom power value, check this check box and click Custom. Choose the power level from the Select Custom Power drop-down list.
Channel Assignment: To choose a custom channel number, check this check box and click Custom. Choose a custom channel number from the Select Custom Channel drop-down list.

Channel Width: To choose channel width, check this check box and choose the channel bandwidth.

Note

If the dual radio mode is enabled on an XOR-capable AP, its slot 2 can't be in the Client-Serving radio role with the 160-MHz channel width.

Note

The selected antenna name isn't reflected in wireless maps.

Antenna Cable: To choose an antenna cable, check this check box and choose the antenna cable from the Select Antenna Cable drop-down list. If you choose Other as the antenna cable, enter the cable loss value in the Cable Loss (in dBi) (for Cable-Other) field. The cable loss value is from 0 to 40.

Note

Step 13

(Optional) In the Configure Tri-Radio Parameters window, configure the tri-radio parameters.

To view the list of applicable APs for the tri-radio parameter configuration, click View Devices.

Note

Catalyst Center displays the View Devices option only when APs that support tri-radio parameters are available.
Catalyst Center doesn't support tri-radio parameter configuration for APs that are in Monitor or Sniffer modes.

You can configure tri-radio parameters on these APs:

Cisco Catalyst 9124AXE Series Access Points
Cisco Catalyst 9130AXI Series Access Points
Cisco Catalyst 9130AXE Series Access Points
Cisco Catalyst 9178I Series Access Points

Configure the required parameters.

Dual Radio Mode: To choose the dual radio mode, check this check box and click Auto, Enable, or Disable.

Note

When you enable dual radio mode, global tri-radio mode is enabled on the corresponding wireless controllers.

Radio Role Assignment: To choose a radio role, check this check box and click Auto, Client-Serving, or Monitor.
Admin Status: To disable the admin status, check this check box and click Disable.
Power Assignment: To choose a custom power value, check this check box and click Custom. Choose the power level from the Select Custom Power drop-down list.
Channel Assignment: To choose custom channel numbers, check this check box and click Custom. Choose a custom channel number from the Select Custom Channel drop-down list.

Channel Width: To choose channel width, check this check box and choose the channel width.

Note

Catalyst Center enables this parameter when you choose the Custom option for Channel Assignment.

Note

The selected antenna name isn't reflected in wireless maps.

Antenna Cable: To choose an antenna cable, check this check box and choose the antenna cable from the Select Antenna Cable drop-down list. If you choose Other as the antenna cable, enter the cable loss value in the Cable Loss (in dBi) (for Cable-Other) field. The cable loss value is from 0 to 40.

Note

Step 14

(Optional) In the Save As Reusable Template window, choose an option.

To save as a new template, click Create and enter a name for the template in the Template Name field. By default, the Template Name field is autofilled with the workflow name. You can use the same name or change as required.

Note

The maximum number of templates supported is 500.

To skip the template creation, click Do Not Save.

Step 15

In the Summary window, review the configuration settings. (To make any changes, click Edit.)

Step 16

Schedule the task for deployment.

Depending on Visibility and Control of Configurations settings, you can either:

Deploy the device configurations immediately or schedule the deployment for later. For details, see Deploy your device configurations now or later.
Preview and deploy the device configurations. For details, see Preview and deploy your device configurations.

Note

If you chose to save this configured workflow as a new template, it's created when you click Configure.

Step 17

On the Tasks window, monitor the task deployment.

Schedule recurring events for APs

Use this procedure to schedule recurring events for AP and radio parameters in Catalyst Center.

Procedure

Step 1	From the main menu, choose Workflows > Configure Access Points. If the Configure Your Access Points dialog box displays, click Let's Do It to go directly to the workflow.
Step 2	In the Get Started window, enter a unique name for the task in the Task Name field.
Step 3	In the How do you want to configure APs? window, click the Schedule Recurring Events For AP And Radio Parameters radio button.
Step 4	In the Select Access Points window, do these steps: Navigate to the site where you want to apply AP-related configurations. The right pane lists all the APs available in the selected site. Check the check boxes next to the names of the APs that you want to configure.
Step 5	In the Select AP and Radio Parameters window, choose the AP and radio parameters that you want to configure. Catalyst Center applies certain settings to only one of the AP slots, including: 5 GHz Admin Status: Applied to slot 1 of the AP. 2.4 GHz Admin Status: Applied to slot 0 of the AP. 6 GHz Admin Status: Applied to these slots: Slot 3 of the 6-GHz-capable Cisco Catalyst 9136 Series APs and Cisco Catalyst 9178I Series APs Slot 2 of the 6-GHz-capable Cisco Catalyst 9162 Series APs, Cisco Catalyst 9164 Series APs, Cisco Catalyst 9172H Series Access Points, Cisco Catalyst 9172I Series Access Points, Cisco Catalyst 9176D1 Series Access Points, Cisco Catalyst 9176I Series Access Points, and Cisco Catalyst IW9167I Heavy Duty APs. Dual-Band (XOR) Admin Status: Applied to slot 0 of these dual-band (XOR)-capable APs: Cisco Aironet 2800 Series Access Points Cisco Aironet 3800 Series Access Points Cisco Aironet 4800 Series Access Points Cisco Catalyst 9120 Series Access Points Cisco Catalyst 9166 Series Access Points Cisco Catalyst IW9165E Access Points Cisco Catalyst IW9165D Heavy Duty Access Points Cisco Catalyst IW9167E Heavy Duty Access Points Applied to slot 2 of the dual-band (XOR)-capable Cisco Catalyst 9166 Series APs, Cisco Catalyst IW9165E APs, Cisco Catalyst IW9165D Heavy Duty APs, and Cisco Catalyst IW9167E Heavy Duty APs. Tri-Radio Admin Status: Applied to slot 2 of the tri-radio-capable APs with dual radio mode enabled. To disable the configuration of a parameter, check the corresponding check box and click Disable.
Step 6	In the Summary window, review the configuration settings. (To make any changes, click Edit.)
Step 7	Schedule the task for deployment. Depending on Visibility and Control of Configurations settings, you can either: Deploy the device configurations immediately or schedule the deployment for later. For details, see Deploy your device configurations now or later. Preview and deploy the device configurations. For details, see Preview and deploy your device configurations.
Step 8	On the Tasks window, monitor the task deployment.

Configure APs using existing templates

Use this procedure to configure AP and radio parameters in Catalyst Center using an existing template.

Before you begin

Ensure that AP configuration templates are available. To create a new template, choose the Create Template option in the Configure AP And Radio Parameters workflow. For more information, see Configure APs.

Procedure

Step 1

From the main menu, choose Workflows > Configure Access Points.

If the Configure Your Access Points dialog box displays, click Let's Do It to go directly to the workflow.

Step 2

In the Get Started window, enter a unique name for the workflow in the Task Name field.

Step 3

In the How do you want to configure APs? window, complete these configurations:

Click the Configure AP Parameters Using Existing Templates radio button.

A list of templates displays.
(Optional) Click the template name to view its configurations.
Check the check box next to the required template name.

You can choose only one template at a time.

Step 4

In the Select Access Points window, do these steps:

Navigate to the site where you want to apply AP-related configurations.

The right pane lists all the APs available in the selected site.
Check the check boxes next to the AP names that you want to configure.

Step 5

Based on the configuration settings in the selected template, Catalyst Center displays the corresponding subsequent configuration windows. Each of these configuration windows displays the preconfigured settings according to the template. You can choose to continue with existing configurations or reconfigure as required. For more information on configuring the AP and radio parameters, see Configure APs.

Note

In the Modify AP Name window, the list of APs displayed is based on the APs that you selected previously on the Select Access Points window and not according to the template settings.

Modify AP Name
Configure AP Parameters
Configure 5 GHz Radio Parameters
Configure 2.4 GHz Radio Parameters
Configure 6 GHz Radio Parameters
Configure Dual-Band (XOR) Radio Parameters
Configure Tri-Radio Parameters

Step 6

(Optional) In the Save As Reusable Template window, choose one of these options to save the configuration changes as a template, or click Do Not Save if you don't want to save the changes at this point:

To save as a new template, click Create and enter a name in the Template Name field.
To update the existing template, click Update.

Step 7

In the Summary window, review the configuration settings. (To make any changes, click Edit.)

Step 8

Schedule the task for deployment.

Depending on Visibility and Control of Configurations settings, you can either:

Deploy the device configurations immediately or schedule the deployment for later. For details, see Deploy your device configurations now or later.
Preview and deploy the device configurations. For details, see Preview and deploy your device configurations.

Step 9

On the Tasks window, monitor the task deployment.

Learn device configurations from devices with pre-existing infrastructure

This procedure shows how to learn configuration from devices with pre-existing infrastructure using Catalyst Center.

Note

This workflow is being deprecated.

Procedure

Step 1

From the main menu, choose Workflows > Learn Device Configuration > Let's Do it to launch the workflow.

Note

At the top of the workflow window, place your cursor over the blue progress bar to see the current step you are on and also to switch back to any of the previous steps.

Step 2

In the Select a WLC to Learn Configuration window, click on the wireless controller whose configurations have not been learned by Catalyst Center and click Next.

Step 3

In the Site Assignment window, select sites that aren't associated with the existing wireless network profiles for wireless controllers and APs.

Note

While you can learn device configuration without site assignment, we recommend that you assign sites, which is required to manage the same wireless controller from Catalyst Center.

To assign a site to a wireless controller, click Assign Site next to the Device Name.
- In the Assign Site window, navigate to the building that you want to associate and click Save.
To assign sites to an AP, check the check box next to the AP name in the Unified APs table and click Assign Site.
- In the Assign Site window, navigate to the floor and click Save.
Click Next.

Step 4

In the Learned Network Settings window, review the learned network settings.

These settings are saved to the physical location of the device. The network servers that are displayed in this window are saved at the site level.

Enter the Shared Secret for AAA servers.

System Settings

To save a AAA server as a Cisco ISE server, click the Cisco ISE Server toggle button and enter the Username, Password, and FQDN details.

Note

If the Cisco ISE server is already present on Catalyst Center, you can’t save a AAA server as a Cisco ISE server.

After configuring a AAA server as a Cisco ISE server, the certificate from the Cisco ISE server is automatically accepted to establish the trust.

Click the Virtual IP Address(es) toggle button to enter the load balancer IP address.

AAA Server: Shows the network servers configured on Catalyst Center. These network servers are prepopulated.
- You can customize Network or Client/Endpoint for the AAA server. The servers and protocols are chosen by default.
- From the drop-down list, select IP Address (Primary) and IP Address (Secondary). These servers are saved at the global level.
  - DHCP Server: Shows all the DHCP servers available on the device.
  - NTP Server: Shows all the NTP servers available on the device.
Click Next.

Step 5

In the Assign Sites to Configurations Learned window, you can view the learned configurations if the configuration is available on the device. The configurations that aren't assigned to sites are ignored.

Flex Override
AAA Server
VLAN Entry
Mesh Configuration
Enable Remote Teleworker

Step 6

In the Learned Wireless Configuration window, review the configurations learned from the wireless controller. The wireless configurations that appear in this window are saved at the global level.

The Supported tab shows the list of learned configurations, such as SSID, RF Profiles, Interfaces, Interface Groups, aWIPS and Forensic Capture Enablement, Pre Auth ACLs, and VLAN.
- By default, the NAC configuration enabled SSIDs are learned as guest SSID. Click the Edit icon next to the SSID Type in the SSIDs table to change the SSID type from Guest to Enterprise.
- To ignore the configuration, check the check box next to the learned configuration, and click Ignore Config in the corresponding table.
- To relearn an ignored SSID, RF profile, interface, or interface group, select it, and click Relearn Config in the corresponding table.
The Unsupported tab shows the configurations that are not learned, such as SSIDs, RF Profiles, Interfaces, Pre Auth ACLs, and Interface Groups. You can address these unsupported or unknown configurations and use CLI templates.

Step 7

In the Assign Sites to Learned SSIDs window, review and resolve any multiple WLAN profile conflicts.

The SSIDs that are saved at the global level and learned with multiple WLAN profiles are listed. You can assign a WLAN profile from each SSID to global and another profile to a particular site to resolve the conflict.

(Optional) To assign a WLAN profile to a site, click Assign Site in the corresponding SSID row.

In the Assign Site window, select a site and click Save

Note

Only the sites that do not have any wireless configurations or profiles that are associated to them can be overwritten. If there is no fresh site, exit from the current workflow, create a new site, and then restart the workflow.

Step 8

In the Resolve Configuration Conflicts window, review and resolve the available conflicts.

Configurations learned from the device and the configurations saved at the global level are shown.

Select a configuration set to resolve the conflict:

Use DNAC Configuration: To save configurations at the global level.
Use Device Configuration: To learn configurations from the device.

Selecting device configuration overwrites the configurations saved at the global level.
Use Custom Configuration: To customize the configurations by choosing the required Wireless Interface.

Step 9

In the Model Configs Learned window, review the model configuration.

The model configurations are a set of model-based, discoverable, and customizable configuration capabilities that can be deployed on network devices. Model configurations can be deployed on various hardware platforms and software types. Catalyst Center discovers and learns model configs from device-specific configurations such as CLI. The learned model configs are saved in designs that can be attached to network profiles.

Expand and review these wireless model config design types:

AAA Radius Attributes Configuration
Advanced SSID Configuration
CleanAir Configuration
Dot11ax Configuration
Event Driven RRM Configuration
Global IPv6 Configuration
Multicast Configuration
RRM General Configuration

If you want to ignore any configuration from each model configuration design type, select the configuration in the corresponding table and click Ignore Config. To relearn the ignored configuration, select the ignored configuration and click Relearn Config.

Step 10

In the CLI Templates Learned window, review the CLI templates and use these templates to address the unknown or unsupported configurations.

All the ignored WLAN configs are chosen by default. Click Ignore Template to restrict the template from addressing the configs. Click Relearn Template to address the configs.
All the unknown or unsupported configs are chosen by default. Click Ignore Template to restrict the template from addressing the configs. Click Relearn Template to address the configs.

Step 11

In the Network Profiles window, review the learned network profile configuration. Based on the configurations learned, Catalyst Center creates the network profile. You can either use the learned network profile or create a new network profile. The SSIDs are learned and grouped while creating network profile.

For Cisco AireOS Wireless Controllers, the Flex group and AP groups are mapped to the network profile. Depending on the AP site assignment, the network profile is assigned to the appropriate site.

For Cisco Catalyst 9800 Series Wireless Controllers, the site tag, policy tag, and site hierarchy that is mapped to the network profile is displayed.

Based on the AP site assignment configuration, network profile is assigned to the appropriate site. Click Sites Assigned to view details on the site assigned to the network profile.
To create a new network profile, click Create New Profile.

The New Profile window appears.
- In the Network Profile Name field, enter a name for the network profile.
- From the SSIDs table, check the check box next to the Network Name to select the SSID.
- Click Save.
(Optional) Review the template details and edit if you want to make any changes.
- To assign a site to a network profile, click Assign Site. In the Assign Site window, select a site and click Save.
  
  Click Sites Assigned to view the sites assigned to this profile.
- To attach a template to a network profile, click Assign Template. In the Assign Template window, select templates from the Select Templates drop-down list for each device in the existing deployment and click Save.
  
  Click View Templates to view the templates assigned to the profile.
- To ignore a network profile, click Ignore Profile and click Continue.
  
  If a profile is marked as ignored, all the profile attributes of that profile are removed. This can’t be undone by relearning the profile. To relearn an ignored profile, click Relearn Profile.
- To add a site tag to a network profile, click Add in the Site Tag table. In the Add Site Tag window, select a site tag from the Select Site Tag drop-down list, select a site from the hierarchy, and click Save.

Step 12

(Optional) In the Network Profile - Model Configurations window, associate model configurations learned by Catalyst Center into the network profiles.

Click Add.
In the Add Model Configs to Network Profile window, do these tasks:
- Expand the model config design that you want to add.
- Select the design. For Advanced SSID Configuration, for each design, select SSIDs from the drop-down list in the Applicable SSID column.
- Click Apply.
To delete a model config added to the network profile, select the model config and click Delete.
Click Next.

Step 13

In the Summary window, review the configuration settings. To make any changes, click Edit.

Step 14

Click Save.

The network configurations are created at the global and site level appropriately.

Step 15

From the main menu, choose Design > Network Settings.

In the Network tab, you can view all the network configurations learned from devices.
In the Wireless tab, you can view all the wireless configurations learned from devices.

The learned configurations are pushed to devices when the devices are provisioned.

Replace Device

This procedure explains how to replace a faulty device.

For Cisco switch stacks (hardware stacking), you don't need to follow a separate procedure in Catalyst Center for member switch replacement, which is handled by the active switch. The member switch is replaced by the active switch by providing the software image and configuration. Full stack replacement is handled by Catalyst Center.

Before you begin

The software image version of the faulty device must be imported in the image repository before marking the device for replacement.
The faulty device must be in an unreachable state.
The faulty device must be assigned to a user-defined site, if the replacement device onboards to Catalyst Center through Plug and Play (PnP).
The replacement device must not be in a provisioning state while triggering the RMA workflow.
For switch stacks replacement, the number of stacks for the faulty and replacement device must be the same.

Procedure

Step 1

From the main menu, choose Workflows > Replace Device.

Step 2

In the Get started window, enter a unique task name for your workflow.

Step 3

In the Choose Device Type window, choose the type of faulty device that you want to replace.

Step 4

In the Choose Site window, choose the site in which you have the faulty device.

Step 5

In the Choose Faulty Device window, choose one faulty device that you want to replace.

If you can't find the faulty device, add the faulty device.

Click Add Faulty Device.
Choose the faulty device and click Next.
In the Mark for Replacement window, click Mark.

Note

In select windows, click Review in the bottom-right corner to view the current, summarized configuration details.

Step 6

In the Choose Replacement Device window, choose a replacement device from the Plug and Play tab or the Inventory tab.

The Plug and Play tab shows the devices that are onboarded through PnP. The Inventory tab shows the devices that are onboarded through inventory or discovery.

If the replacement device hasn't been onboarded through PnP, add it manually or automatically.

Manual: Under the Plug and Play tab, click Add Device. Then in the Add New Device window, enter the serial number of the device and click Add New Device.
Automatic: Under the Plug and Play tab, click Sync with Smart Account. Then, in the Sync with Smart Account window, click Sync.

Step 7

On the Summary window, review the summarized details.

If necessary, click Edit to update the device type or faulty device details.

Note

If Visibility and Control of Configurations is disabled, review the replacement device configuration by clicking View under Replacement Device.

Step 8

Schedule the task for deployment.

Depending on Visibility and Control of Configurations settings, you can either:

Deploy the device configurations immediately or schedule the deployment for later. For details, see Deploy your device configurations now or later.
Preview and deploy the device configurations. For details, see Preview and deploy your device configurations.

Switch refresh

Switch Refresh workflow allows you to replace an older switch that has reached its End of Life (EoX), with a new switch. For example, a Cisco Catalyst 3650 Switch can be replaced by a Cisco Catalyst 9300 Switch.

Note

Currently switch refresh is available for Cisco Catalyst 3650 and Cisco Catalyst 3850 Switches running on Cisco IOS XE.

The feature has these limitations:

Unsupported Operating System: The old devices (Cisco Catalyst 2000, 3000, 4000, 6000 Series Switches) running on Cisco IOS images are not supported. Only old devices running on Cisco IOS XE (Cisco Catalyst 3650 and 3850 Series Switches) are supported.
Inconsistent port type or speed: New devices having different port types or speeds compared to the older devices are not supported. For example, Gigabit Ethernet to 10-Gigabit Ethernet is not supported.
Minimum software version requirement for a new device: For Cisco Catalyst 3650 Series, 3850 Series, and 9300 Series switches, the minimum required software version is 16.9.x.
Plug and Play (PnP) onboarding in Fabric networks: PnP onboarding for the new devices in a fabric network is not supported. To onboard new device through PnP, you must manually set the IP address and PnP profile on the new device.

Before you begin

Make sure that these conditions are met:

Port count: The new device can have the same number of ports or more ports than the older device.

For example, a 24-port Cisco Catalyst 3650 Switch can be replaced with a 24-port Cisco Catalyst 9300 Switch or a 48-port Cisco Catalyst 9300 Switch.
Port type: The port type must be the same for old and new device.
Device reachability: Ensure that the older device is in unreachable state before proceeding with the workflow.
Stack member count: For a stacked switch, the switch member count should be same or more in the new device.
Role consistency: The devices that are selected in a workflow should be of the same role.
Port connection: Ensure that all ports on the new device are connected in the same manner as the old device.

Procedure

Step 1

From the main menu, choose Provision > Inventory.

Step 2

Check the check box next to the older device that you want to replace and choose Actions > Switch Refresh > Mark for Refresh.

Step 3

In the confirmation window, click Mark.

A Success message displays and the older device is successfully marked for replacement.

Step 4

Choose the older device or devices, and then choose Actions > Device Refresh > Refresh Device(s).

The Switch Refresh workflow is triggered.

Alternatively, to trigger the workflow, choose Workflows > Switch Refresh.

Step 5

If a task overview window displays, click Let's Do It to go directly to the workflow.

Step 6

In the Task Name field, enter a unique name and click Next.

Step 7

In the Pre-requisites window, if a golden image is already tagged to the new device, click Next. Otherwise, click Image Repository hyperlink to tag a golden image to the new device.

For information on how to tag a golden image, see Mark a software image as golden.

After completing the task, go to the Switch Refresh workflow tab, and click Next.

Note

If the older switch is configured with MD5 and the newer switch’s golden image is later than 17.14.1, the newer switch will be configured with SHA.

Step 8

In the Select Devices window, choose the older device that was marked for replacement and click Next.

Step 9

In the Replace old device with the new device window, do these steps:

If required, edit the default New Device Name.
Choose the device Platform and Serial Number from the drop-down list.
Click Next.

Step 10

In the Resolve Dependencies window, if the device is not assigned a golden image, you cannot proceed with the workflow.

To assign a golden image to the device, click Image Repository hyperlink and follow the procedure that is mentioned in Mark a software image as golden.
After completion of the task, go to the Switch Refresh workflow tab and click Next.

Step 11

In the View Device Configuration window, review the configuration that will be pushed to the new device from the older device and click Next.

Step 12

In the Schedule Task window, click Now to start device replacement immediately or click Later to schedule the device replacement at a specific time. Click Next.

Step 13

In the Summary window, review the configuration settings and click Refresh Devices.

The replacement of the older device with the new device is initiated.

Step 14

Click Monitor Refresh Status to view the replacement device status.

The Inventory window displays. You can view the device replacement status under the Refresh Status column.

Step 15

Click the link under the Refresh Status column to view the ongoing process.

Step 16

Click Refresh. This process might take some time.

Upon successful device replacement, the older device is replaced with the new device.

Create a remote support authorization

Use this procedure to create a remote support authorization.

Note

The Catalyst Center remote support authorization is supported only with RADKit version 1.2.1 and later.

Procedure

Step 1

From the main menu, choose Workflows > Create a Remote Support Authorization.

Step 2

If a task overview window is displayed, click Let's Do It to go directly to the workflow.

Step 3

In the Access Permission Agreement window, do these steps:

Check the I agree to provide access to network devices check box to provide access to network devices.

Check the I agree to provide access to Catalyst Center check box to allow a Cisco specialist to access your Catalyst Center setup using SSH credentials.

Note

You can revoke the authorization at any time before it expires. To revoke the authorization, see View the Remote Support Authorization Dashboard.

Step 4

Click Next Step.

Step 5

In the Set up the Authorization window, complete these fields:

Cisco Specialist Email Address
Access Role for the Cisco Specialist
Existing Case Number(s)
Access Justification

Step 6

Click Next Step.

Step 7

In the Schedule the Access window, click Now or Later to indicate when you want to allow the Cisco specialist to access Catalyst Center.

Step 8

Click Next Step.

Step 9

In the Summary window, review the configuration settings. (To make any changes, click Edit.)

Step 10

Click Create.

The Done! Authorization is created window displays.

Step 11

Click View All Authorizations to navigate to the Remote Support Authorization window. For information, see View the Remote Support Authorization Dashboard.

Create an event notification

Catalyst Center event notification allows you to associate multiple channels inside one notification that delivers the details of selected events that occur at multiple points.

Procedure

Step 1

From the main menu, choose Workflows > Create a New Notification.

Step 2

If a task overview window opens, click Let's Do It to go directly to the workflow.

Step 3

In the Select Channels window, select the notification channels.

The supported channels are REST, PAGERDUTY, SNMP, SYSLOG, WEBEX, EMAIL, and custom channels. Assurance events do not support SNMP.

Step 4

In the Select Site and Events window, from the Select a site drop-down list, select a specific site for which you want to be notified for the selected events.

Note

You can select multiple sites at a time.

Step 5

Click either the plus icon next to an event, or click Add All to add all the events to the respective notification.

Step 6

To remove an event from the notification, click either the cross icon next to the event that you want to remove, or click Remove All to remove all the event from the event list.

Note

When you select a notification channel, a table in the Select Site and Events window lists the number of events supported by the chosen notification channel.
When you select more than one notification channel, a table in the Select Site and Events window lists the number of supported events that are common in the chosen notification channels.

Step 7

In the Configure Notification window, configure these values:

If you select an EMAIL notification channel, configure these in the Email Settings window:

Click the link to access the Email GUI window and configure a new email server.

Note

Notification type can be set for either REST API endpoint (webhook), PAGERDUTY, SNMP, SYSLOG, WEBEX, and EMAIL. If you select EMAIL, but have not yet configured the email settings, you are prompted to access the GUI window where you can perform this task. Email settings are configured in the Email tab.

(Optional) To access the Email tab, click the menu icon and choose System > Settings > External Services.

Expand External Services, select Destinations, and click the Email tab.
Up to 20 email addresses per endpoint can be configured to receive email notifications. To add multiple email addresses, you need to add each email address separately and press Enter (on your keyboard) after each addition. Catalyst Center validates the email addresses and notifies you if the syntax is incorrect.
If you need to configure more than 20 email addresses per endpoint, you can use a group email alias.
When using email destinations for event subscriptions, the emails that are sent show events with a UTC timestamp.

Click either Select Existing Instance to use the existing email instance or Create New Instance to create a new email instance.
If you click Select Existing Instance, from the Select Instance drop-down list, select an email instance.
Enter the email addresses in the From and To fields and a subject for the Subject header in the email.

If you select a SYSLOG notification, configure these values in the Syslog Settings window:

Click the link to access the Syslog GUI window and configure a new syslog endpoint (syslog server hostname and port number).

Note

Notification type can be set for either REST API endpoint (webhook), PAGERDUTY, SNMP, SYSLOG, WEBEX, and EMAIL. If you select SYSLOG, but have not yet configured the syslog server settings, you are prompted to access the GUI window where you can perform this task. Syslog server settings are configured in the Syslog tab.

(Optional) To access the Syslog tab, click the menu icon and choose System > Settings > External Services.

Expand External Services, select Destinations, and click the Syslog tab.

In the Protocol field, enter either TCP or UDP.
In the Port field, enter the port number of the syslog server.
In the Hostname/IP field, enter the hostname or IP address of the syslog server.
From the Select Instance drop-down list, select the syslog instance.

If you select a REST notification, configure these values in the REST Settings window:

Click the link to access the REST Webhook GUI window and configure a new webhook endpoint.

Note

Notification type can be set for either REST API endpoint (webhook), PAGERDUTY, SNMP, SYSLOG, WEBEX, and EMAIL. If you select REST, but have not yet configured the webhook settings, you are prompted to access the GUI window where you can perform this task. Webhook settings are configured in the Webhook tab.

(Optional) To access the Webhook tab, click the menu icon and choose System > Settings > External Services.

Expand External Services, select Destinations, and click the Webhook tab.

From the Webhook Instance drop-down list, select a notification endpoint and URL.
In the URL field, enter the URL address of the REST API endpoint that the event will be sent to.

Trust certificate: Whether a trust certificate is required for REST API endpoint notification.

Method: Either the PUT or POST method.
Basic: Authentication where the client sends HTTP requests with the word Basic in the authorization header, followed by a space and a base64-encoded string username:password. If you select Basic in the GUI, the Headers field is automatically populated with the Authorization value.
Token: Authentication where users are authenticated using a security token provided by the server. If you select Token, the Headers field is automatically populated with the X-Auth-Token value.
No Authentication: No authentication needed.

Headers: The Header Name and Header Value.

Note

The Headers fields may be automatically populated depending on your Authentication selection.

If you select SNMP notification channel, configure these values in the SNMP Settings window:

Click the link to access the SNMP GUI window and configure a new SNMP endpoint.

Note

Notification type can be set for either REST API endpoint (webhook), PAGERDUTY, SNMP, SYSLOG, WEBEX, and EMAIL. If you select SNMP, but have not yet configured the SNMP settings, you are prompted to access the GUI window where you can do this task. SNMP settings are configured in the SNMP tab.

(Optional) To access the SNMP tab, click the menu icon and choose System > Settings > External Services.

Expand External Services, select Destinations, and click the SNMP tab.

The SNMP trap notification is only available for a system hardware event. When the health state of hardware components changes, a system hardware event triggers notifications to subscribers. Hardware components monitored for changes include CPU, memory, disk, NIC, fan, power supply, and RAID controller.

From the SNMP Instance drop-down list, select the notification endpoint.
Create a new endpoint: Enter a new endpoint name and description.
In the Hostname/IP Address field, enter the hostname or IP address for the SNMP trap receiver (server).
In the Port field, enter the port number for the SNMP trap receiver (server).

If you select PAGERDUTY notification channel, configure it in the PAGERDUTY settings window:
1. In the SERVICE CONFIGURATION area, click either Select Existing Instance to use the existing PagerDuty instance or Create New Instance to create a new PagerDuty instance.
2. From the Select Instance drop-down list, select a PagerDuty instance.
3. In the PagerDuty Events API URL field, enter a PagerDuty event API URL.
4. In the PagerDuty Integration Key field, enter a PagerDuty integration key.
If you select WEBEX notification channel, configure these values in the WEBEX Settings window:
1. From the Select Instance drop-down list, select a Webex instance.
2. In the Webex URL field, enter the Webex URL.
3. In the Webex Room ID field, enter the Webex room ID.
4. In the Webex Bot Access Token field, enter the Webex bot access token.

Step 8

Click Save.

In the Name and Description window, do these steps:

In the Name field, enter a unique name for the notification.
In the Description box, enter a description of the notification.

Step 9

In the Summary window, review the configuration settings. (To make any changes, click Edit.)

Step 10

Click Finish.

The Done! Your new notification is complete window appears.

Configure Remote LAN

Remote LAN (RLAN) allows you to configure RLAN ports on APs for Cisco Wireless Controller. A wireless controller authenticates the wired clients and allows them to connect to the network.

Catalyst Center supports RLAN configuration only on Cisco Catalyst 9800 Series Wireless Controller. You can configure RLAN for nonfabric sites on wireless controllers that run Cisco IOS XE Release 16.12 or later. You can configure RLAN for fabric sites on wireless controllers that run Cisco IOS XE Release 17.7 or later.

Any changes in the network settings or network profile (for example, AP profile, RF profile, site tags, and so on) are pushed as part of the RLAN workflow and may result in network disruption for the connected clients.

Note

Catalyst Center doesn't support RLAN configuration on Cisco AireOS Wireless Controllers.

Use this procedure to configure RLAN ports.

Before you begin

Ensure that you have provisioned a wireless controller and at least one AP for the sites where you want to configure the RLAN ports.
Any change in CLI templates and feature templates in the associated network profiles aren't configured in this workflow. Ensure that the provision status of the associated wireless controller is up to date on the Inventory window. If there’s an Out of Sync notification next to the provision status, reprovision the wireless controller before configuring RLAN.

To configure RLAN ports for fabric sites:

Ensure that you have provisioned the required fabric site.
Ensure that you have created IP pools and Security Group Tags (SGT).

Procedure

Step 1

From the main menu, choose Workflows > Configure RLAN.

Step 2

If a task overview window displays, click Let's Do It to go directly to the workflow.

Step 3

In the Get Started window, enter a unique name for the task.

Step 4

In the Select Sites window, select the sites where you want to configure RLAN ports.

Note

You can select multiple sites, but the selected sites must be managed by the same Cisco Catalyst 9800 Series Wireless Controller.

Assigning the RLAN configuration to APs on the selected sites can potentially impact the RLAN configuration for APs on the other sites based on the policy tag assignment.

The right pane shows the summary of the selected sites. Catalyst Center configures RLAN for all the APs provisioned on the floors of the selected sites.

Step 5

In the Select Policy Tags window, check the check box next to the policy tags for which you want to configure RLAN.

This selection can potentially impact the RLAN configuration for APs on the other sites based on the policy tag assignment.

To view the impacted sites for a policy tag, click the corresponding number under Impacted Sites. In the Impacted Sites dialog box, to search for a site, in the Search Table field, enter either the partial name or full name of the site and press Enter.
To view the impacted APs for a policy tag, click the corresponding number under Impacted APs. In the Impacted Access Points dialog box, to filter APs based on specific details, click the search icon and select from the filter options: Quick Filters, Advanced Filters, or Recent Filters. Select the required option in the filter and click Apply.

Step 6

In the Remote LAN Configuration window, do these steps:

Select the required RLAN port from the Port 1, Port 2, and Port 3 options.

Sites can have APs with different number of LAN ports. RLAN configuration is applied to the corresponding LAN port number. If an AP has a single RLAN port, Catalyst Center ignores the Port 2 and Port 3 configurations for the AP.

When a site is managed by a secondary wireless controller, the VLANs configured for the RLAN client on the secondary wireless controller are the same as the VLANs configured on the primary wireless controller.
To enable or disable RLAN for the corresponding port, use the AP LAN Port toggle button.
To configure RLAN ports for a fabric site, use the Fabric toggle button.
This toggle is available only if the device is in a fabric site. If you enable the Fabric toggle button, do these tasks:
- In the IP Address Pool field, enter the IP address.
- (Optional) From the Scalable Group Tag drop-down list, select the required option.

(Optional) In the RLAN Profile tab, from the RLAN Profile drop-down list, select an RLAN profile.

To create an RLAN profile, click Create New and do these steps:

In the RLAN Profile Name field of the Create new RLAN Profile dialog box, enter a name for the RLAN profile.

If there’s an existing RLAN profile, to copy the configurations from it, check the Copy Configuration from Existing RLAN Profile check box. From the RLAN Profile drop-down list, select an existing RLAN profile.
Click Save.

If you select an RLAN profile, do these tasks:

To enable or disable the RLAN profile, use the Admin Status toggle button.

In the Maximum End Points field, enter the number of endpoints. The valid range is from 0 through 10000.

Note

This field configures the client connections per RLAN. 0 indicates unlimited client connections.

(Optional) From the Layer 2 drop-down list, select the required option: Dot1x or Open
(Optional) From the Layer 3 drop-down list, select the required option: Open or Internal Web Authentication

(Optional) From the Select a AAA Server Group drop-down list, select an AAA server group.

This drop-down lists the AAA server groups configured as part of WLAN provisioning on the primary controller. If you don't select an AAA server group, Catalyst Center configures the default method under the RLAN profile for the selected security settings.

Note

This drop-down list is available only when the Layer 2 is Dot1x or Layer 3 is Internal Web Authentication.

(Optional) To enable MAC filtering, check the MAC Filtering check box.

(Optional) From the Fallback Authentication drop-down list, select the required fallback authentication: None, Dot1x on MAC Filtering Failure, or MAC Filtering on Dot1x Failure.

Note

Fallback authentication is available only if Layer 2 is Dot1x and MAC filtering is enabled.

(Optional) Click the RLAN Policy tab, from the RLAN Policy drop-down list, select an RLAN policy.

To create an RLAN policy, click Create New and do these steps:

In the RLAN Policy Name field of the Create new RLAN Policy dialog box, enter a name for the RLAN policy.

If there’s an existing RLAN policy, to copy the configurations from it, check the Copy Configuration from Existing RLAN Policy check box. From the RLAN Policy drop-down list, select an existing RLAN policy.
Click Save.

If you select an RLAN policy, do these tasks:

To enable or disable the RLAN policy, use the Admin Status toggle button.

From the Forwarding Mode drop-down list, select the required option: Local Switching or Central Switching

If you select local switching, in the VLAN field, enter the VLAN name. If you select central switching, in the VLAN ID field, enter the VLAN ID. The valid range for VLAN ID is from 1 through 4096.

Note

The Cisco Aironet 1815T Access Point doesn't support local switching for RLAN. For other AP models, when the AP is in local mode, local switching for RLAN is supported for Cisco IOS XE Release 17.2 or later.
If you enable the Fabric toggle button, the Central Switching option isn't available.

In the Timeout Period (in seconds) field, enter the timeout period, in seconds. The valid range for timeout is from 0 through 86400.

To enable or disable Point over Ethernet (PoE), use the PoE toggle button.

Note

Catalyst Center enables PoE only on APs with PoE-capable ports.

(Optional) To enable AAA override, check the AAA override check box.

In the Review Impacted Sites dialog box, review the details about the impacted sites and click Confirm.

Step 7

(Optional) In the Delete Unused RLAN Profiles and Policies window, check the next to the unused RLAN profiles and RLAN policies that you want to delete.

This window lists the unused RLAN profiles and RLAN policies on the selected wireless controller. Deleting them optimizes the wireless controller storage.

Step 8

In the Summary window, review the configuration settings. To make any changes, click Edit.

Step 9

Schedule the task for deployment.

Depending on Visibility and Control of Configurations settings, you can either:

Deploy the device configurations immediately or schedule the deployment for later. For details, see Deploy your device configurations now or later.
Preview and deploy the device configurations. For details, see Preview and deploy your device configurations.

Step 10

On the Tasks window, monitor the task deployment.

What to do next

You can view the status of the RLAN configuration in the Activities > Tasks window.

If you have provisioned a secondary wireless controller, reprovision the secondary wireless controller from the Provision > Inventory window.

Cisco Catalyst Center User Guide, Release 2.3.7.x

Bias-Free Language

Results

Chapter: Build and Deploy Workflows

Build and Deploy Workflows

Catalyst Center workflow navigation

Discover devices

Before you begin

Procedure

What to do next

AP Refresh workflow

Before you begin

Procedure

Configure User-Defined Network

Overview of User-Defined Network service

Prerequisites for configuring the User-Defined Network service

Configure Cisco User-Defined Network

Procedure

Enable application hosting on switches

Before you begin

Procedure

Enable IoT services

Enable IoT services on Cisco Catalyst 9100 Series Access Points

Procedure

Manage IoT applications

Before you begin

Procedure

AP configuration in Catalyst Center

Configure APs

Procedure

Schedule recurring events for APs

Procedure

Configure APs using existing templates

Before you begin

Procedure

Learn device configurations from devices with pre-existing infrastructure

Procedure

Replace Device

Before you begin

Procedure

Switch refresh

Before you begin

Procedure

Create a remote support authorization

Procedure

Create an event notification

Procedure

Configure Remote LAN

Before you begin

Procedure

What to do next

Was this Document Helpful?

Contact Cisco