Choose Configuration > Network > Network Devices, then from the Device Groups menu on the left, select Device Type > Wireless Controller.

To use the command buttons at the top of the page, select the check box next to one or more controllers. The following table describes the field available in this page.

To view specific information about a controller, click on a Device Name.

Choose Configuration > Network > Network Devices, then select Device Type > Wireless Controller.

Select the check box(es) of the applicable controller(s).

Click Configure > Audit Now.

Click OK in the pop-up dialog box to remove the template associations from configuration objects in the database as well as template associations for this controller from associated configuration groups (This is a template-based audit only).

Choose Configuration > Network > Network Devices, select Wireless Controllers.

Select the check box(es) of the applicable controller(s).

Click Download > Bulk Update Controllers.

Enter the CSV filename in the Select CSV File text box or click Browse to locate the desired file.

Click Update and Sync.

Choose Configuration > Network > Network Devices, select Wireless Controllers, then click Reboot > Reboot Controllers.

Select the required Reboot Controller option:

Click OK.

Choose Configuration > Network > Network Devices, then select Device Type > Wireless Controllers.

Select the check box(es) of the applicable controller(s).

Click Download and select one of the following options:

Complete the required fields.

Select the download type. The pre-download option is displayed only when all selected controllers are using Release 7.0.x.x or later.

Select the Schedule options.

Enter the FTP credentials including username, password, and port.

Select whether the file is located on the Local machine or an FTP Server. If you select FTP Server, the software files are uploaded to the FTP directory specified during the installation.

Click Download.

Choose Configuration > Network > Network Devices, then from the Device Groups menu on the left, select Device Type > Wireless Controller.

Click a Device Name, then click the Configuration tab.

From the left sidebar menu, choose System > Commands.

Select the FTP or TFTP radio button, then select Upload File from Controller and click Go.

Complete the required fields.

Click OK. The selected file is uploaded to your TFTP or FTP server and named what you entered in the File Name text box.

Choose Configuration > Network > Network Devices, then select Device Type > Wireless Controller.

Select the check box(es) of the applicable controller(s).

Click Download > Download IDS Signatures.

Complete the required fields.

Click Download.

Choose Configuration > Network > Network Devices, then select Device Type > Wireless Controller.

Select the check box(es) of the applicable controller(s).

Click Download > Download Customized WebAuth.

To download an example login.tar bundle file, click on the preview image displayed, then edit the login.html file and save it as a .tar or .zip file. The file contains the pages and image files required for the web authentication display.

Download the .tar or .zip file to the controller.

Select where the file is located.

Complete the required fields, then click Download.

Choose Configuration > Network > Network Devices, then select Device Type > Wireless Controller.

Select the check box(es) of the applicable controller(s).

Click Download > Download Vendor Device Certificate.

Complete the required fields, then click Download.

Choose Configuration > Network > Network Devices, then select Device Type > Wireless Controller.

Select the check box(es) of the applicable controller(s).

Click Download > Download Vendor Device Certificate.

Complete the required fields, then click Download.

1. Go to https://www.cisco.com/security/pki/ to see the list of Cisco’s CAs with their public certificates.

Download all the .cer files needed for WLCs for which you want to enable Network Assurance on an FTP server.

Log in as admin user in the Prime Infrastructure command shell.

Copy the certificates from the FTP server to the default repository.


Install the CA certificate trust on Prime Infrastructure server for all certificates.


After installing all the certificates on Prime Infrastructure server, you need to restart it for the certificates to become effective.

2017-10-30 21:34:01,890 [https-jsse-nio-443-exec-1] ERROR logging - IFM-SAM-ERROR: Sensor device X.509 Certificate chain mentioned below is not properly signed:
*********************START*******************************

MIIEdDCCA1ygAwIBAgIKG3upVgAAAA32cTANBgkqhkiG9w0BAQsFADA2MQ4wDAYDVQQKEwVDaXNjbzEkMCIGA1UEAxMbQ2lzY28gTWFudWZh
Y3R1cmluZyBDQSBTSEEyMB4XDTE1MTAwNzIzMDg1OFoXDTI1MTAwNzIzMTg1OFowgZQxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9
ybmlhMREwDwYDVQQHEwhTYW4gSm9zZTEWMBQGA1UEChMNQ2lzY28gU3lzdGVtczEjMCEGA1UEAxMaQUlSLUNUODUxMC1LOS1mNGNmZTI
wYTI3MDAxIDAeBgkqhkiG9w0BCQEWEXN1cHBvcnRAY2lzY28uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pBrBLWZJ+S3Sy23
23KzNGSGB1bAV71Y+YmPt+oJR7fVpZI/Vv39ncFcRGCpP0RH6ics9l20j0O/9BLQOwkRJ19d91GoPvCGc9hfU9W9ctRikg3ZPIOa1uLwElhQinB2Xo/wR
23KzNGSGB1bAV71Y+YmPt+oJR7fVpZI/Vv39ncFcRGCpP0RH6ics9l20j0O/9BLQOwkRJ19d91GoPvCGc9hfU9W9ctRikg3ZPIOa1uLwElhQinB2Xo/wR
VUjWI/l12zfEAuP9dsXdy29h5I0x19QfTCCjqJUtgTcoDx4QL2WjerZopCmCBlGL5ICFm+SeXADCh9OpZn1lbp4lQIDAQABo4IBIzCCAR8wCwYDVR0PBA
AQDAgWgMB0GA1UdDgQWBBQsA0phzTpk5VNFflYOK2mU8OZnmjAfBgNVHSMEGDAWgBR613mVyrtIK7hVFP2jwA+8pw+WGTBABgNVHR8EOTA
3MDWgM6Axhi9odHRwOi8vd3d3LmNpc2NvLmNvbS9zZWN1cml0eS9wa2kvY3JsL2NtY2EyLmNybDBNBggrBgEFBQcBAQRBMD8wPQYIKwYBBQU
HMAKGMWh0dHA6Ly93d3cuY2lzY28uY29tL3NlY3VyaXR5L3BraS9jZXJ0cy9jbWNhMi5jZXIwPwYJKwYBBAGCNxQCBDIeMABJAFAAUwBFAEMASQ
BuAHQAZQByAG0AZQBkAGkAYQB0AGUATwBmAGYAbABpAG4AZTANBgkqhkiG9w0BAQsFAAOCAQEANOilUIBV7mk3H/rhLGCW7acwiPxpAusb8
WOfSZdy0EukZ8gCoKScZyLHp7IEkDGueb4CMJnPi4oJOeDw2xrxS/AkSLWUw5aQ585Qi2J2JXlLAXQ9pgaatyZ0yjm+jkkISwB18bSkD61K5IR/aBcDgxb
by2ApXdI2HqpNateGZvB0NJ4ww6xnJMIUaSdGl+50CrKWLoCssH2DHp6Qo9a8oTZtM6cG/c5wsjDn0tSfFbt4+3JzUPLnPlAff1SldsPohQfDA9lwkp1IKa
a8pODdVe3BFe44pyMdgGCnVZnqJcevZiWtHMCG5OjaggbBhC0RObGJBxKOAGRgNlUej8hg1hWw==

**********************END******************************

Check the CA Server for device X.509 Certificate is in Prime: 'ncs key listcacerts'.

Choose Configuration > Network > Network Devices, then select Device Type > Wireless Controller.

Select the check box(es) of the applicable controller(s).

Click Download > Download NA Server CA Certificate.

Choose the file location, complete the required fields, and then click Download.

Choose Configuration > Network > Network Devices, then from the Device Groups menu on the left, select Device Type > Wireless Controller.

Select the check box(es) of the applicable controller(s).

Click Configure > Save Config to Flash.

Choose Configuration > Network > Network Devices, then from the Device Groups menu on the left, select Device Type > Wireless Controller.

Select the check box(es) of the applicable controller(s).

Click Sync, and Yes to proceed.

Choose Configuration > Network > Network Devices, then select Device Type > Wireless Controller.

Select the check box(es) of the applicable controller(s).

Click Configure > Discover Templates from Controller.

Select the Enabling this option will create association between discovered templates and the device listed above check box so that discovered templates are associated to the configuration on the device and are shown as applied on that controller.

Click OK in the warning dialog box to continue with the discovery.

Choose Configuration > Network > Network Devices, then from the Device Groups menu on the left, select Device Type > Wireless Controller.

Select the check box(es) of the applicable controller(s).

Click Configure > Templates Applied to a Controller.

Click the template name link to view the template details. See Check Which Configuration Templates Are Used by Controllers and Remove the Associations for more information.

Choose Configuration > Network > Network Devices, then select Device Type > Wireless Controller.

Select a wireless controller, then click Edit.

Modify the fields as desired, then click one of the following buttons:

Choose Configuration > Network > Network Devices, then select Device Type > Wireless Controller.

Click a Device Name, then click the Configuration tab.

From the left sidebar menu, choose System > General - System. The general system parameters appear. See Cisco Prime Infrastructure Reference Guide.

Make the required changes, then click Save.

Choose Configuration > Network > Network Devices, then from the Device Groups menu on the left, select Device Type > Wireless Controller.

Click a Device Name, then click the Configuration tab.

From the left sidebar menu, choose System > Commands.

From the Upload/Download Commands drop-down list, choose Upload File from Controller, then click Go.

To enable encryption before uploading files, click the link at the bottom of the Upload File from Controller page.

Complete the required fields, then click OK. The selected file is uploaded to your TFTP server with the name you specified.

Choose Configuration > Network > Network Devices, then select Device Type > Wireless Controller.

Click a Device Name, then click the Configuration tab.

From the left sidebar menu, choose System > Commands.

From the Upload/Download Commands drop-down list, choose Download Config, then click Go.

Complete the required fields, then click OK.

Choose Configuration > Network > Network Devices, then select Device Type > Wireless Controller.

Click a Device Name, then click the Configuration tab.

From the left sidebar menu, choose System > Interfaces.

From the Select a command drop-down list, choose Add Interface > Go.

Complete the required fields, then click Save.

Choose Configuration > Network > Network Devices, then from the Device Groups menu on the left, select Device Type > Wireless Controller.

Click a Device Name, then click the Configuration tab.

From the left sidebar menu, choose System > Interfaces. The following parameters appear:

Choose Configuration > Network > Network Devices, then from the Devices Groups menu on the left, select Device Type> Wireless Controller.

Click on a Device Name, then click the Controller tab.

Choose System > Interfaces from the left sidebar menu.

Choose Add Interface from the Select a command drop-down list, and click Go.

In the Interface Name text box, enter a name for this interface, such as guestinterface.

Enter a VLAN identifier for the new interface.

Select the Guest LAN check box.

Enter the primary and secondary port numbers.

Click Save.

Choose Configuration > Network > Network Devices, then from the Devices Groups menu on the left, select Device Type> Wireless Controller.

Click on a Device Name, then click the Controller tab.

Choose System > Interfaces from the left sidebar menu.

Choose Add Interface from the Select a command drop-down list, and click Go.

In the Interface Name text box, enter a name for this interface, such as quarantine.

In the vlan Id text box, enter a non-zero value for the access VLAN ID, such as 10.

Select the Quarantine check box and enter a non-zero value for the Quarantine VLAN identifier, such as 110.

Enter the IP address, Netmask, and Gateway information.

Enter the primary and secondary port numbers.

Provide an IP address for the primary and secondary DHCP server.

Configure any remaining fields for this interface, and click Save.

Choose Configuration > Network > Network Devices, then from the Device Groups menu on the left, select Device Type > Wireless Controller.

Click on a Device Name, then click the Controller tab.

ChooseSystem > Spanning Tree Protocol from the left sidebar menu. The Spanning Tree Protocol page displays the following parameters:

Choose Configuration > Network > Network Devices, then from the Devices Groups menu on the left, select Device Type> Wireless Controller.

Click an IP address of the applicable controller.

From the left sidebar menu, choose System > QoS Profiles. The following parameters appear:

Click the applicable profile to view or edit profile parameters.

Click Save.

Choose Configuration > Network > Network Devices, then from the Device Groups menu on the left, select Device Type > Wireless Controller.

Click the Device Name of the applicable controller.

From the left sidebar menu, choose System > User Roles.

Click a Template Name to view the User Role details.

Choose Configuration > Network > Network Devices, then from the Devices Groups menu on the left, select Device Type> Wireless Controller.

Click the Device Name of the applicable controller.

From the left sidebar menu, choose System > User Roles.

From the Select a command drop-down list, choose Add User Role.

Select a template from the Select a template to apply to this controller drop-down list.

Click Apply.

Choose Configuration > Network > Network Devices, then from the Devices Groups menu on the left, select Device Type> Wireless Controller.

Click the Device Name of a controller with a Release 5.0 or later.

From the left sidebar menu, choose System > AP Username Password.

Enter the username and password that you want to be inherited by all access points that join the controller.

Click Save.

Choose Configuration > Network > Network Devices, then from the Devices Groups menu on the left, select Device Type> Wireless Controller.

Click the Device Name of the desired controller.

From the left sidebar menu, choose System > Global CDP Configuration from the left sidebar menu. The Global CDP Configuration page appears.

Configure the required fields in the Global CDP Configuration page. In the Global CDP group box, configure the following parameters:

In the CDP for Ethernet Interfaces group box, select the slots of Ethernet interfaces for which you want to enable CDP.

In the CDP for Radio Interfaces group box, select the slots of Radio interfaces for which you want to enable CDP.

Click Save.

Choose Configuration > Network > Network Devices, then from the Devices Groups menu on the left, select Device Type> Wireless Controller.

Click the Device Name of the desired controller.

From the left sidebar menu, choose System > AP 802.1X Supplicant Credentials.

Select the Global Supplicant Credentials check box.

Enter the supplicant username.

Enter and confirm the applicable password.

Click Save. Once saved, you can click Audit to perform an audit on this controller.

Choose Configuration > Network > Network Devices, then from the Devices Groups menu on the left, select Device Type> Wireless Controller.

Click the Device Name of the desired controller.

From the left sidebar menu, choose System > AP 802.1X Supplicant Credentials.

Select the Global Supplicant Credentials check box.

Enter the supplicant username.

Enter and confirm the applicable password.

Click Save. Once saved, you can click Audit to perform an audit on this controller.

Choose Configuration > Network > Network Devices, then from the Devices Groups menu on the left, select Device Type> Wireless Controller.

Click the Device Name of the desired controller.

From the left sidebar menu, choose System > DHCP.

Add or modify the following parameters:

Enter the DHCP Timeout in seconds after which the DHCP request times out. The default setting is 5. Allowed values range from 5 to 120 seconds. DHCP Timeout is applicable for Controller Release 7.0.114.74 and later.

Click Save.

Choose Configuration > Network > Network Devices, then from the Devices Groups menu on the left, select Device Type > Wireless Controller.

Click the Device Name of the desired controller.

From the left sidebar menu, choose System > Multicast.

From the Ethernet Multicast Support drop-down list, choose the applicable Ethernet multicast support (Unicast or Multicast).

If Multicast is selected, enter the multicast group IP address.

Select the Global Multicast Mode check box to make the multicast mode available globally.

Choose Enable from the Multicast Mobility Mode drop-down list to change the IGMP snooping status or to set the IGMP timeout. When IGMP snooping is enabled, the controller gathers IGMP reports from the clients and then sends each access point a list of the clients listening to any multicast group. The access point then forwards the multicast packets only to those clients.

If you enabled the Multicast Mobility Mode, enter the mobility group multicast address.

Select the Multicast Direct check box to enable videos to be streamed over a wireless network.

Choose Enable from the Multicast Mobility Mode drop-down list to change MLD configuration.

Select the Enable MLD Snooping check box to enable IPv6 MLD snooping. If you have selected this check box, configure the following parameters:

Configure the Session Banner information, which is the error information sent to the client if the client is denied or dropped from a Media Stream.

Click Save.

Choose Configuration > Network > Network Devices , then from the Devices Groups menu on the left, select Device Type> Wireless Controller.

Choose the controller for which you want to set timer configuration.

From the left sidebar menu, choose System > AP Timers.

In the AP Timers page, click the applicable Access Point Mode link: Local Mode or FlexConnect Mode.

Configure the necessary parameters in the Local Mode AP Timer Settings page or in the FlexConnect Mode AP Timer Settings page accordingly.

Click Save.

Choose Configuration > Network > Network Devices, then select Device Type > Wireless Controller.

Click the Device Name of the applicable controller.

From the left sidebar menu, choose WLANs > WLAN Configuration.

Configure the required fields in the Configure WLAN Summary page.

Choose Configuration > Network > Network Devices, then from the Device Groups menu on the left, select Device Type > Wireless Controller.

Click the Device Name of the wireless controller whose WLAN configurations you want to see.

Click the Configuration tab.

Under Features, chooseWLANs > WLAN Configuration. The WLAN Configuration summary page appears, displaying the list of WLANs currently configured on the controller, including each:

To view WLAN configuration details, click the WLAN ID. The WLAN Configuration details page appears.

Use the tabs (General, Security, QoS, and Advanced) to view or edit parameters for the WLAN. Whenever you change a parameter, click Save.

Navigate to WLAN Configuration details page as described in View the WLANs Configured on a Controller.

Click Policy Mappings tab.

Click Add Row.

Select a policy name that you want to map to the WLAN, from the drop-down list.

Enter the priority. The priority ranges from 1 to 16.

Click Save.

Choose Configuration > Network > Network Devices, then select Device Type > Wireless Controller.

Click the Device Name of the wireless controller on which you want to configure Mobile Concierge.

Click the Configuration tab.

Under Features, choose WLANs > WLAN Configuration> . The WLAN Configuration summary page appears, displaying the list of WLANs currently configured on the controller,

Click the WLAN ID of the WLAN on which you want to configure Mobile Concierge.

Click the Hot Spot tab.

Click the 802.11u Configuration sub-tab and complete the fields as follows:

1. Select the 802.11u Status check box to enable 802.11u on the WLAN.

2. Select the Internet Access check box to enable this WLAN to provide Internet services.

3. From the Network Type drop-down list, choose the appropriate description for the 802.11u service you want to configure on this WLAN. The following options are available:

   • Private Network
   • Private Network with Guest Access
   • Chargeable Public Network
   • Free Public Network
   • Emergency Services Only Network
   • Personal Device Network
   • Test or Experimental
   • Wildcard

4. Choose the authentication type that you want to configure for the 802.11u parameters on this network:

   • Not configured
   • Acceptance of Terms and Conditions
   • Online Enrollment
   • DNS Redirection
   • HTTP/HTTPS Redirection

5. In the HESSID field, enter the Homogeneous Extended Service Set Identifier value. The HESSID is a 6-octet MAC address that identifies the homogeneous ESS.

6. In the IPv4 Address Type field, choose the method of assigning IPv4 addresses:

   • Not Available
   • Public
   • Port Restricted
   • Single NAT Private
   • Double NAT Private
   • Port Restricted and Single NAT Private
   • Port Restricted and Double NAT Private
   • Unknown

7. In the IPv6 Address Type field, choose the method of assigning IPv6 addresses:

   • Not Available
   • Available
   • Unknown

Click the Others sub-tab and complete the fields as follows:

1. In the OUI List group box, click Add Row and enter the following details:

   • OUI name
   • Is Beacon
   • OUI Index

   Click Save to add the OUI (Organizationally Unique Identifier) entry to this WLAN.

2. In the Domain List group box, click Add Row and enter the following details:

   • Domain Name—The domain name operating in the 802.11 access network.
   • Domain Index—Choose the domain index from the drop-down list.

   Click Save to add the domain entry to this WLAN.

3. In the Cellular section, click Add Row and enter the following details:

   • Country Code—The 3-character cellular country code.
   • Network Code—The 3-character cellular network code.

   Click Save to add the cellular entry to this WLAN.

Click the Realm sub-tab and complete the fields as follows:

1. Click Add Row and enter the realm name.

2. Click Save to add the realm entry to this WLAN.

Click the Service Advertisements sub-tab and complete the fields as follows:

1. Select the MSAP Enable check box to enable service advertisements.

2. If you enable MSAP, enter the server index for this WLAN. The server index field uniquely identifies an MSAP server instance serving a venue that is reachable through the BSSID.

   MSAP (Mobility Services Advertisement Protocol) is designed to be used primarily by mobile devices that are configured with a set of policies for establishing network services. These services are available for devices that offer higher-layer services, or network services that are enabled through service providers. Service advertisements use MSAP to provide services to mobile devices prior to association to a Wi-Fi access network. This information is conveyed in a service advertisement. A single-mode or dual-mode mobile device queries the network for service advertisements before association. The device's network discovery and the selection function may use the service advertisements in its decision to join the network.

Click the Hotspot 2.0 sub-tab and complete the fields as follows:

1. Choose the Enable option from the HotSpot2 Enable drop-down list.

2. In the WAM Metrics group box, specify the following:

   • WAN Link Status—The link status. The valid range is 1 to 3.
   • WAN SIM Link Status—The symmetric link status. For example, you can configure the uplink and downlink to have different speeds or same speeds.
   • Up Link Speed—The uplink speed. The maximum value is 4,194,304 kbps.
   • Down Link Speed—The downlink speed. The maximum value is 4,194,304 kbps.

3. In the Operator Name List, click Add Row and enter the following details:

   • Operator Name—Specify the name of the 802.11 operator.
   • Operator Index—Select an operator index. The range is from 1 to 32.
   • Language Code—An ISO-14962-1997 encoded string defining the language. This string is a three character language code.

   Click Save to add the operator to the list.

4. In the Port Config List, click Add Row and enter the following details:

   • IP Protocol—The IP protocol that you want to enable. The following options are ESP, FTP, ICMP, and IKEV2.
   • Port No—The port number that is enabled on this WLAN.
   • Status—The status of the port.

   Click Save to add the port configuration to the list.

Click Save to save the Mobile Concierge configuration.

Choose Configuration > Template > Features & Technologies > Controller > WLANsWLAN Configuration.

Hover your mouse cursor over the tool tip next to the template type and click New.

Complete the required fields in the General, Security, QoS, Advanced, HotSpot, Policy Mappings tabs, and then click Save as New Template.

Proceed to deploy the template by click Deploy.

Choose Configuration > Network > Network Devices, then select Device Type > Wireless Controller.

Click the Device Name of the appropriate controller.

From the left sidebar menu, choose WLANs > WLAN Configuration.

Select the check boxes of the WLANs that you want to delete.

Choose Select a command > Delete a WLAN > Go.

Click OK to confirm the deletion.

Choose Configuration > Network > Network Devices, then select Device Type > Wireless Controller.

Click the Device Name of the appropriate controller.

From the left sidebar menu, choose WLANs > WLAN Configuration.

Select the check boxes of the WLANs that you want to schedule for a status change.

From the Select a command drop-down list, choose Schedule Status to open the WLAN Schedule Task Detail page.

Enter a Scheduled Task Name to identify this status change schedule.

Choose the new Admin Status (Enabled or Disabled) from the drop-down list.

Choose the schedule time using the hours and minutes drop-down lists.

Click the calendar icon to choose a schedule date or enter the date in the text box (MM/DD/YYYY).

Select the appropriate Recurrence radio button to determine the frequency of the status change (Daily, Weekly, or No Recurrence).

Click Submit to initiate the status change schedule.

Choose Configuration > Network > Network Devices, then from the Device Groups menu on the left, select Device Type > Wireless Controller.

Click the Device Name of the appropriate controller.

From the left sidebar menu, choose WLANs > WLAN Configuration.

Click a WLAN ID to view the parameters for a specific WLAN.

Click the Advanced tab.

Click the Mobility Anchors link. Prime Infrastructure displays the IP address and current status (for example, reachable) for each anchor.

Choose Configuration > Network > Network Devices, then select Device Type > Wireless Controller.

Click the Device Name of the appropriate controller.

From the left sidebar menu, choose WLAN > AP Groups. The AP groups summary page displays.

Click the AP group name on the Access Points tab to view or edit its access point(s).

Click the WLAN Profiles tab to view, edit, add, or delete WLAN profiles.

Choose Configuration > Network > Network Devices, then select Device Type > Wireless Controller.

Click the Device Name of the appropriate controller.

From the left sidebar menu, choose WLAN > AP Groups.

Choose Select a command > Add AP Groups > Go. The AP Groups details page displays.

Create a new AP group, as follows:

1. Enter a name for the AP group.

2. Enter a description for the new AP group (this group description is optional).

Add access points to the new AP group, as follows:

1. Click the Access Points tab.

2. Click Add. The Access Point page displays a list of available access points.

3. Select the check boxes of the access points you want to add.

4. Click Select.

Add a WLAN profile, as follows:

1. Click the WLAN Profiles tab.

2. Click Add.

   To display all available WLAN profile names, delete the current WLAN profile name from the text box. When the current WLAN profile name is deleted from the text box, all available WLAN profiles appear in the drop-down list.

   Each access point is limited to 16 WLAN profiles. Each access point broadcasts all WLAN profiles unless the WLAN override feature is enabled. The WLAN override feature allows you to disable any of the 16 WLAN profiles per access point.

   The WLAN override feature applies only to older controllers that do not support the 512 WLAN feature (can support up to 512 WLAN profiles).

3. Type a WLAN profile name or choose one from the WLAN Profile Name drop-down list.

4. Enter an interface/interface group or choose one from the Interface/Interface Group drop-down list.

   To display all available interfaces, delete the current interface in the Interface text box. When the current interface is deleted from the Interface text box, all available interfaces appear in the drop-down list.

5. Select the NAC Override check box, if applicable. NAC override is disabled by default.

6. Specify the policy configuration parameters by clicking the Add/Edit link.

   • Policy Name—Name of the policy.
   • Policy Priority—Configure policy priority between 1 and 16. No two policies can have same priority.

   Only 16 Policy mappings are allowed per WLAN. Selected policy template for the mapping will be applied first if it does not exist on the controller.

7. When access points and WLAN profiles are added, click Save.

(Optional): Add an RF profile, as follows:

1. Click the RF Profiles tab:

2. Complete the fields as follows:

   • 802.11a—Choose an RF profile for APs with 802.11a radios.
   • 802.11b—Choose an RF profile for APs with 802.11b radios.

Add Hyperlocation configuration parameters, as follows:

When you are finished adding APs, WLAN profiles, and RF profiles to the new AP Group, click Save.

Choose Configuration > Network > Network Devices, then select Device Type > Wireless Controller.

Click the Device Name of the appropriate controller.

From the left sidebar menu, choose WLAN > AP Groups.

Select the check box(es) of the AP Groups that you want to delete.

Choose Select a command > Delete AP Groups > Go.

Click OK to confirm the deletion.

Choose Configuration > Network > Network Devices, then select Device Type > Wireless Controller.

Click the Device Name of the appropriate controller.

From the left sidebar menu, choose WLAN > AP Groups.

Click the name of the access point group that you want to audit.

Click Audit.