AP Name

The name assigned to the access point.

Ethernet MAC

AP Ethernet MAC address.

IP Address

Local IP address of the access point.

Radio

Protocol of the rogue access point is 802.11a, 802.11b or 802.11g. Click a list item to view access point radio details.

Map Location

Click a list item to go to the location indicated on the list.

Controller

Click a list item to display a graphic and information about the controller.

Client Count

Displays the total number of clients currently associated with the controller.

Admin Status

Displays the administration state of the access point as either enabled or disabled.

AP Mode

Displays the operational mode of the access point.

Oper Status

Displays the operational status of the Cisco WLAN Solution device, either Up or Down. If the admin status is disabled, the operation status is labeled as down and there are no alarms.

Alarm Status

Alarms are color coded as follows:

• Clear-No Alarm

• Red-Critical Alarm

• Orange-Major Alarm

• Yellow-Minor Alarm

AP Type

Displays the type of access point (unified or autonomous).

Antenna Azim. Angle

Displays the horizontal angle of the antenna.

Antenna Diversity

Displays if antenna diversity is enabled or disabled. Antenna diversity refers to the access point sampling the radio signal from two integrated antenna ports to choose the preferred antenna.

Antenna Elev. Angle

Displays the elevation angle of the antenna.

Antenna Gain

The peak gain of the dBi of the antenna for directional antennas and the average gain in dBi for omni-directional antennas connected to the wireless network adapter. The gain is in multiples of 0.5 dBm. An integer value 4 means 4 x 0.5 = 2 dBm of gain.

Antenna Mode

Displays the antenna mode such as omni, directional, or non-applicable.

Antenna Name

Displays the antenna name or type.

Audit Status

Displays one of the following audit statuses:

• Mismatch-Configuration differences were found between Prime Infrastructure and controller during the last audit.

• Identical-No configuration differences were found during the last audit.

• Not Available-Audit status is unavailable.

Base Radio MAC

Displays the MAC address of the base radio.

Bridge Group Name

Displays the name of the bridge group used to group the access points, if applicable.

CDP Neighbors

Displays all directly connected Cisco devices.

Channel Control

Displays whether the channel control is automatic or custom.

Channel Number

Displays the channel on which the Cisco Radio is broadcasting.

Channel Width

Displays the channel bandwidth for this radio. The Channel Width field is supported only for 11n APs. Displays “N/A” for other APs.

Controller Port

Displays the number of controller ports.

Google Earth Location

Displays whether or not a Google Earth location is assigned and Displays the location.

Location

Displays the physical location of the access point.

Node Hops

Displays the number of hops between access points.

OfficeExtend AP

Specifies whether or not OfficeExtend access is enabled. If it is disabled, the access point is remotely deployed which increases the security risk.

PoE Status

Displays the power over Ethernet status of the access point. The possible values include the following:

• Low-The access point draws low power from the Ethernet.

• Lower than 15.4 volts-The access point draws lower than 15.4 volts from the Ethernet.

• Lower than 16.8 volts-The access point draws lower than 16.8 volts from the Ethernet.

• Normal-The power is high enough for the operation of the access point.

• Not Applicable-The power source is not from the Ethernet.

Primary Controller

Displays the name of the primary controller for this access point.

Radio MAC

Displays the radio MAC address.

Reg. Domain Supported

Displays whether or not the regulatory domain is supported.

Serial Number

Displays the access point serial number.

Slot

Displays the slot number.

Tx Power Control

Displays whether the transmission power control is automatic or custom.

Tx Power Level

Displays the transmission power level.

Up Time

Displays how long the access point has been up in days, hours, minutes and seconds.

WLAN Override Names

Displays the WLAN override profile names.

WLAN Override

Displays whether WLAN Override is enabled or disabled.

AP Name

Displays the name of the access point.

Radio

Displays the protocol of the rogue access point. It is either 802.11a, 802.11b or 802.11g. Click the radio to view On-Demand Statistics for this access point.

Attached Client Count

Displays the number of clients attached (Actual and Threshold.)

Channel Utilization

Displays the 802.11a RF utilization threshold between 0 and 100 percent (Actual and Threshold).

Receive Utilization

Displays the 802.11a or 802.11b/g RF receive utilization threshold between 0 and 100 percent.

Transmit Utilization

Displays the 802.11a or 802.11b/g RF transmit utilization threshold between 0 and 100 percent.

Status

Displays the status of the client connection.

AP Name

Displays the name of the AP.

Radio

Displays the protocol of the rogue access point. It is either 802.11a, 802.11b or 802.11g. Click the radio to view On-Demand Statistics for this access point.

Current Power Level

Displays the operating transmit power level from the transmit power table.

The power levels and available channels are defined by the Country Code Setting, and are regulated on a country by country basis.

The AP transmit power level are:

• 1—Maximum power allowed per Country Code setting

• 2—50% power

• 3—25% power

• 4—6.25 to 12.5% power

• 5—0.195 to 6.25% power

Power Assignment Mode

Displays the dynamic transmit power assignment. The three available modes are:

• Automatic—The transmit power is periodically updated for all Cisco 1000 Series lightweight access points that permit this operation.

• On Demand—Transmit power is updated when the Assign Now button is selected.

• Fixed—No dynamic transmit power assignments occur and value are set to their global default. The default is Automatic.

Time

Time that the statistics were gathered from the access point(s).

Client MAC

MAC address of the client. This shows a list of the clients evaluated during the most recent 90 second interval. The client could be a VoIP phone, laptop, PDA and refers to any client attached to the access point collecting measurements.

QoS

QoS values (packet latency, packet jitter, packet loss, roaming time) which can affect the WLAN are monitored. Access points and clients measure the metrics, access points collect the measurements and send them to the controller. The access points update the controller with traffic stream metric information every 90 seconds and 10 minutes of data is stored at one time.

% PLR (Downlink)

Percentage of packets lost on the downlink (access point to client) during the 90 second interval.

% PLR (Uplink)

Percentage of packets lost on the uplink (client to access point) during the 90 second interval.

Avg Queuing Delay (ms) (Downlink)

Average queuing delay in milliseconds for the downlink. Average packet queuing delay is the average delay of voice packets traversing the voice queue. Packet queue delay is measured beginning when a packet is queued for transmission and ending when the packet is successfully transmitted. It includes time for re-tries, if needed.

Avg Queuing Delay (ms) (Uplink)

Average queuing delay in milliseconds for the uplink. Average packet queuing delay is the average delay of voice packets traversing the voice queue. Packet queue delay is measured beginning when a packet is queued for transmission and ending when the packet is successfully transmitted. It includes time for re-tries, if needed.

% Packets > 40 ms Queuing Delay

Percentage of queuing delay packets greater than 40 ms.

% Packets > 20 ms Queuing Delay

Percentage of queuing delay packets greater than 20 ms.

Roaming Delay

Roaming delay in milliseconds. Roaming delay, which is measured by clients, is measured beginning when the last packet is received from the old access point and ending when the first packet is received from the new access point after a successful roam.

Average Queuing Delay (ms)

Average queuing delay in milliseconds. Average packet queuing delay is the average delay of voice packets traversing the voice queue. Packet queue delay is measured beginning when a packet is queued for transmission and ending when the packet is successfully transmitted. It includes time for re-tries, if needed.

% Packet with less than 10 ms delay

Percentage of packets with less than 10 milliseconds delay.

% Packet with more than 10 < 20 ms delay

Percentage of packets with more than 10 milliseconds delay but less than 20 milliseconds delay.

% Packet with more than 20 < 40 ms delay

Percentage of packets with more than 20 milliseconds delay but less than 40 milliseconds delay.

% Packet with more than 40 ms delay

Percentage of packets with more than 40 milliseconds delay.

Packet Loss Ratio

Ratio of lost packets.

Total Packet Count

Number of total packets.

Roaming Count

Number of packets exchanged for roaming negotiations in this 90 seconds metrics page.

Roaming Delay

Roaming delay in milliseconds.

General

AP Name

Operator defined name of the AP.

AP IP address, Ethernet MAC address, and Base Radio MAC address

IP address, Ethernet MAC address and Radio MAC address.

Country Code

The codes of the supported countries. Up to 20 countries can be supported per controller.

Access points might not operate properly if they are not designed for use in your country of operation. See http://www.cisco.com/en/US/docs/wireless/wcs/4.0/configuration/guide/wcscod.html for a complete list of country codes supported per product.

Link Latency Settings

The link latency settings. The link latencies available are:

• Current Link Latency—The current round-trip time in milliseconds of heartbeat packets from the access point to the controller and back.

• Minimum Link Latency—The minimum round-trip time in milliseconds of heartbeat packets from the access point to the controller and back when link latency has been enabled or reset.

• Maximum Link Latency—The maximum round-trip time in milliseconds of heartbeat packets from the access point to the controller and back when link latency has been enabled or reset.

LWAPP/CAPWAP Uptime

Displays how long the LWAPP/CAPWAP connection has been active.

LWAPP?CAPWAP Join Taken Time

Displays how long the LWAPP/CAPWAP connection has been joined.

Admin Status

The administration state of the access point as either enabled or disabled.

AP Mode

Local

Default mode. Data clients are serviced while configured channels are scanned for noise and rogues. The access point goes off-channel for 50 ms and listens for rogues. It cycles through each channel for the period specified under the Auto RF configuration.

To configure Local or FlexConnect access points for the Cisco Adaptive wIPS feature, choose Local or FlexConnect and select the Enhanced wIPS Engine Enabled check box.

Monitor

Radio receive only mode. The access point scans all configured channels every 12 seconds. Only deauthenticated packets are sent in the air with an access point configured this way. A monitor mode access point can connect as a client to a rogue access point.

To configure access points for Cisco Adaptive wIPS feature, select Monitor. Select the Enhanced wIPS Engine Enabled check box and choose wIPS from the Monitor Mode Optimization drop-down list.

Before you can enable an access point to be in wIPS mode, you must disable the access point radios. If you do not disable the access point radio, an error message appears.

Once you have re-enable the radios after you enable wIPS on the access point.

Rogue Detector

The access point radio is turned off and the access point listens to wired traffic only. The controllers that operate in this mode monitor the rogue access points. The controller sends all the rogue access point and client MAC address lists to the rogue detector, and the rogue detector forwards this information to the WLC. The MAC address list is compared to what the WLC access points heard over the network. If the MAC addresses match, you can determine which rogue access points are connected on the wired network.

Sniffer

The access point captures and forwards all the packets on a particular channel to a remote machine that runs AiroPeek. These packets contain information such as timestamp, signal strength, packet size, and so on. This feature can only be enabled if you run AiroPeek, which is a third-party network analyzer software that supports the decoding of data packets.

FlexConnect

Enables FlexConnect for up to six access points. The FlexConnect access points can switch client data traffic locally and perform client authentication locally when their connection to the controller is lost.

FlexConnect must be selected to configure an OfficeExtend access point. In the FlexConnect mode, the configuration options display the option to enable OfficeExtend AP and allows the Least Latency Controller to join it.

Bridge

This is a special mode where an autonomous access point functions as a wireless client and connects to a lightweight access point. The bridge and its wired clients are listed as client in the Prime Infrastructure if the AP mode is set to Bridge, and the access point is bridge capable.

Spectrum Expert

This mode allows a CleanAir-enabled access point to be used extensively for interference detection on all monitored channels. All other functions such as IDS scanning and Wi-Fi are suspended.

Enhanced wIPs Engine

Enabled or Disabled, to enable the monitoring of the security attacks using Cisco Adaptive wIPS feature.

Operational Status

Registered or Not Registered, as determined by the controller.

Registered Controller

The controller to which the access point is registered. Click to display the registered controller details.

Primary Controller

The name of the primary controller for this access point.

Port Number

The SNMP name of the access point primary controller. The access point attempts to associate with this controller first for all network operations and in the event of a hardware reset.

AP Uptime

Displays how long the access point has been active to receive and transmit.

Map Location

Customer-definable location name for the access point. Click to look at the actual location on a map. Choose Monitor > Access Points > name > Map Location for more information.

Google Earth Location

Indicates whether a Google Earth location is assigned.

Location

The physical location where the access point is placed (or Unassigned).

Statistics Timer

This counter sets the time in seconds that the access point sends its DOT11 statistics to the controller.

PoE Status

The power over Ethernet status of the access point. The possible values are:

• Low—The access point draws low power from the Ethernet.

• Lower than 15.4 volts—The access point draws lower than 15.4 volts from the Ethernet.

• Lower than 16.8 volts—The access point draws lower than 16.8 volts from the Ethernet.

• Normal—The power is high enough for the operation of the access point.

• Not Applicable—The power source is not from the Ethernet.

Rogue Detection

Indicates whether or not Rogue Detection is enabled.

Rogue detection is disabled automatically for OfficeExtend access points because these access points are deployed in a home environment and are likely to detect a large number of rogue devices.

OfficeExtend AP

Indicates whether or not the access point is enabled as an OfficeExtend access point. The AP is enabled by default.

Encryption

Indicates whether or not encryption is enabled. Enabling or disabling encryption functionality causes the access point to reboot which then leads to a loss of connectivity for clients.

DTLS data encryption is enabled automatically for OfficeExtend access points to maintain security. Encryption is only available if the access point is connected to a 5500 series controller with a Plus license.

Least Latency Join

The access point switches from a priority order search (primary, secondary, and then tertiary controller) to a search for the controller with the best latency measurement (least latency). The controller with the least latency provides the best performance.

Telnet Access

Indicates whether or not Telnet Access is enabled.

SSH Access

Indicates whether or not SSH is enabled.

An OfficeExtend access point might be connected directly to the WAN which could allow external access if the default password is used by the access point. Hence Telnet and SSH access are disabled automatically for OfficeExtend access points.

Versions

Software Version

The operating system release version number of the code currently running on the controller.

Boot Version

The operating system bootloader version number.

Inventory Information

AP Type

Type of Access Point

AP Model

Access point model number.

Cisco IOS Version

The Cisco IOS Release details.

AP Certificate Type

Self Signed or Manufacture Installed certificate.

FlexConnect Mode Supported

Indicates if FlexConnect mode is supported or not.

wIPS Profile (when applicable)

Profile Name

The wIPS profile details.

Profile Version

The zIPS profile version.

Unique Device Identifier (UDI)

Name

Name of the Cisco AP for access points.

Description

Description of the access point.

Product ID

Orderable product identifier.

Version ID

Version of product identifier.

Serial Number

Unique product serial number.

Run Ping Test Link

Click to ping the access point. The results are displayed in a pop-up dialog box.

Alarms Link

Click to display alarms associated with this access point.

Events Link

Click to display events associated with this access point.

AP Name

Operator defined name of access point.

AP IP address and Ethernet MAC address

IP address, Ethernet MAC address of the access point.

AP UpTime

Indicates how long the access point has been up in number of days, hours, minutes, and seconds.

Map Location

Customer-definable location name for the access point. Click to look at the actual location on a map.

WGB Mode

Indicates whether or not the access point is in work group bridge mode.

SNMP Info

SysObjectId

System Object ID.

SysDescription

The system device type and current version of firmware.

SysLocation

The physical location of the device, such as a building name or room in which it is installed.

SysContact

The name of the system administrator responsible for the device.

Versions

Software Version

The operating system release.version.dot.maintenance number of the code currently running on the controller.

CPU Utilization

Displays the maximum, average, and minimum CPU utilization over the specified amount of time.

Memory Utilization

Displays the maximum, average, and minimum memory utilization over the specified amount of time.

Inventory Information

AP Type

Displays the AP type.

AP Model

Displays the AP model number.

AP Serial Number

Displays the unique serial number for the AP.

FlexConnect Mode Supported

Displays whether the FlexConnect mode is supported or not on the selected AP.

Unique Device Identifier (UDI)

Name

Name of Cisco AP for access points.

Description

Description of access point.

Product ID

Orderable product identifier.

Version ID

Version of product identifier.

Serial Number

Unique product serial number.

Interface

Admin Status

Indicates whether the Ethernet interface is enabled.

Operational Status

Indicates whether the Ethernet interface is operational.

Rx Unicast Packets

Indicates the number of unicast packets received.

Tx Unicast Packets

Indicates the number of unicast packets sent.

Rx Non-Unicast Packets

Indicates the number of non-unicast packets received.

Tx Non-Unicast Packets

Indicates the number of non-unicast packets sent.

Radio Interfaces

Protocol

802.11a/n or 802.11b/g/n, XOR(2.4GHz), XOR(5GHz), or XOR (Monitor Mode).

Admin Status

Indicates whether the access point is enabled or disabled.

CleanAir Capable

Indicates whether the access point is able to use CleanAir.

CleanAir Status

Indicates the status of CleanAir.

Channel Number

Indicates the channel on which the Cisco Radio is broadcasting.

Extension Channel

Indicates the secondary channel on which Cisco radio is broadcasting.

Power Level

Access Point transmit power level: 1 = Maximum power allowed per Country Code setting, 2 = 50% power, 3 = 25% power, 4 = 6.25 to 12.5% power, and 5 = 0.195 to 6.25% power.

Channel Width

Indicates the channel bandwidth for this radio interface. The default setting is 20 MHz. This is also the minimum value. The maximum setting is the maximum channel width supported by this radio.

Antenna Name

Identifies the type of antenna.

AP Name

Name of the Access Point.

Link speed

Indicates the speed of the interface in Mbps.

RX Bytes

Indicates the total number of bytes in the error-free packets received on the interface.

RX Unicast Packets

Indicates the total number of unicast packets received on the interface.

RX Non-Unicast Packets

Indicates the total number of non-unicast or mulitcast packets received on the interface.

Input CRC

Indicates the total number of CRC error in packets received on the interface.

Input Errors

Indicates the sum of all errors in the packets while receiving on the interface.

Input Overrun

Indicates the number of times the receiver hardware was incapable of handing received data to a hardware buffer because the input rate exceeded the receiver capability to handle the data.

Input Resource

Indicates the total number of resource errors in packets received on the interface.

Runts

Indicates the number of packets that are discarded because they are smaller than the medium minimum packet size.

Throttle

Indicates the total number of times the interface advised a sending NIC that it was overwhelmed by packets being sent and to slow the pace of delivery.

Output Collision

Indicates the total number of packet retransmitted due to an Ethernet collision.

Output Resource

Indicates the total number of resource errors in packets transmitted on the interface.

Output Errors

Indicates the sum of all errors that prevented the final transmission of packets out of the interface.

Operational Status

Indicates the operational state of the physical Ethernet interface on the AP.

Duplex

Indicates the duplex mode of an interface.

TX Bytes

Indicates the total number of bytes in the error-free packets transmitted on the interface.

TX Unicast Packets

Indicates the total number of unicast packets transmitted on the interface.

TX Non-Unicast Packets

Indicates the total number of non-unicast or mulitcast packets transmitted on the interface.

Input Aborts

Indicates the total number of packet aborted while receiving on the interface.

Input Frames

Indicates the total number of packet received incorrectly having a CRC error and a non-integer number of octets on the interface.

Input Drops

Indicates the total number of packets dropped while receiving on the interface because the queue was full.

Unknown Protocol

Indicates the total number of packet discarded on the interface due to an unknown protocol.

Giants

Indicates the number of packets that are discarded because they exceed the maximum packet size of the medium.

Interface Resets

Indicates the number of times that an interface has been completely reset.

Output No Buffer

Indicates the total number of packets discarded because there was no buffer space.

Output Underrun

Indicates the number of times the transmitter has been running faster than the router can handle.

Output Total Drops

Indicates the total number of packets dropped while transmitting from the interface because the queue was full.

AP Name

The name assigned to the access point.

AP IP Address

IP address of the access point.

Port No

Port number connected or assigned to the access point.

Local Interface

Identifies the local interface.

Neighbor Name

Name of the neighboring Cisco device.

Neighbor Address

Network address of the neighboring Cisco device.

Neighbor Port

Port of the neighboring Cisco device.

Duplex

Indicates Full Duplex or Half Duplex.

Interface Speed

Speed at which the interface operates.

Username

Username of the associated client.

IP Address

IP address of the associated client.

Client MAC Address

MAC address of the associated client.

Association Time

Date and time of the association.

UpTime

Time duration of the association.

SSID

User-defined SSID name.

SNR (dB)

Signal to Noise Ratio in dB of the associated client.

RSSI

Received Signal Strength Indicator in dBm.

Bytes Tx

Total amount of data that has passed through the Ethernet interface either way.

Bytes Rx

Total amount of data that has been received through the Ethernet interface either way.

When the access point is not associated with the controller, then the database is used to retrieve the data (rather than the controller itself). If the access point is not associated, the following fields appear.

User Name

Username of the client.

IP Address

Local IP Address.

Client MAC Address

Client MAC Address.

Association Time

Time stamp of the client association.

Session Length

Time length of the session.

SSID

User-defined SSID name.

Protocol

Protocol of the associated client.

SSID

Service Set Identifier being broadcast by the access point radio.

SSID Vlan

SSID on an access point is configured to recognize a specific VLAN ID or name.

SSID Vlan Name

SSID on an access point is configured to recognize a specific VLAN ID or name.

MB SSID Broadcast

SSID broadcast disabled essentially makes your AP invisible unless a wireless client already knows the SSID, or is using tools that monitor traffic from an AP's associated clients.

MB SSID Time Period

The time period within which the internal communication within the SSID continues to work.

Severity

Indicates the severity of the alarm using icons. You can use the Severity Configuration feature to determine the level of severity for the following rogue access point alarm types:

• Rogue detected

• Rogue detected contained

• Rogue detected on network

Rogue MAC Address

Indicates the MAC address of the rogue access points.

Vendor

Rogue access point vendor name or Unknown.

Classification Type

Pending, Malicious, Friendly, or Unclassified.

Radio Type

Lists all radio types applicable to this rogue access point.

Strongest AP RSSI

Displays the strongest AP RSSI for this rogue access point across the life of the rogue The strongest AP RSSI over the life of the rogue displays to indicate the nearest distance that existed between the rogue access point and your building or location. The higher the RSSI, the closer the location.

No. of Rogue Clients

Indicates the number of rogue clients associated to this rogue access point. This number comes from the Prime Infrastructure database. It is updated every two hours. This number is a real-time number and it is updated each time you open the Alarm Details page for this rogue access point.

Owner

Name of person to which this alarm is assigned, or (blank).

Last Seen Time

Indicates the date and time that the rogue access point was last seen.

State

Indicates the state of the alarm. Possible states vary depending on the classification type of rogue access point.

• Malicious rogue states include: Alert, Contained, Threat, Contained Pending, and Removed.

• Friendly rogue states include: Internal, External, and Alert.

• Unclassified rogue states include: Pending, Alert, Contained, and Contained Pending.

SSID

Indicates the service set identifier being broadcast by the rogue access point radio. It is blank if the SSID is not being broadcast.

Map Location

Indicates the map location for this rogue access point.

Acknowledged

Displays whether or not the alarm is acknowledged by the user.

You can acknowledge the alarm to prevent it from showing up in the Alarm Summary page. The alarm remains in Prime Infrastructure and you can search for all Acknowledged alarms using the alarm search functionality.

Critical

Major

Minor

Warning

Information

Unknown

Clear—Appears if the rogue is no longer detected by any access point.

Change Status

• Acknowledge—Acknowledge the alarm to prevent it from showing up in the Alarm Summary page.The alarm remains in the Prime Infrastructure and you can search for all Acknowledged alarms using the alarm search functionality.

• Unacknowledge—Unacknowledge an already acknowledged alarm.

• Clear—Clear the selected alarm(s). Indicates that the alarm is no longer detected by any access point. Once the severity is Clear, the alarm is deleted from the Prime Infrastructure after 30 days.

Change State

• Unclassified-Alert —Choose this command to tag the rogue access point as the lowest threat, continue monitoring the rogue access point, and to turn off Containment. Indicates the MAC address of the rogue access points.

• Malicious-Alert —Choose this command to tag the rogue access point as ‘Malicious’.

• Friendly-Internal —Choose this command to tag the rogue access point as internal, add it to the Known Rogue APs list, and to turn off Containment.

• Friendly-External —Choose this command to tag the rogue access point as external, add it to the Known Rogue APs list, and to turn off Containment.

• Refresh from Network —Refresh the network.

Assign

• Assign to me—Assign the selected alarm(s) to the current user.

• Unassign—Unassign the selected alarm(s).

• Select Owner— Assign the selected alarm to a particular user.

Annotation

Type the note and click Post to save and display the note or Close to close the page without saving the note.

Email Notification

Takes you to the Monitor > Monitoring Tools > Alarms and Events> Email Notification page to view and configure email notifications.

Change Status

• Acknowledge—Acknowledge the alarm to prevent it from showing up in the Alarm Summary page.The alarm remains in the Prime Infrastructure and you can search for all Acknowledged alarms using the alarm search functionality.

• Unacknowledge—Unacknowledge an already acknowledged alarm.

• Clear—Clear the selected alarm(s). Indicates that the alarm is no longer detected by any access point. Once the severity is Clear, the alarm is deleted from the Prime Infrastructure after 30 days.

• Set State to ‘Unclassified - Alert’—Choose this command to tag the rogue access point as the lowest threat, continue monitoring the rogue access point, and to turn off Containment.

• Set State to ‘Malicious - Alert’—Choose this command to tag the rogue access point as ‘Malicious’.

• Set State to ‘Friendly - Internal’—Choose this command to tag the rogue access point as internal, add it to the Known Rogue APs list, and to turn off Containment.

• Set State to ‘Friendly - External’—Choose this command to tag the rogue access point as external, add it to the Known Rogue APs list, and to turn off Containment.

• Refresh from Network—Refresh the alarm details.

Assign

• Assign to me—Assign the selected alarm(s) to the current user.

• Unassign—Unassign the selected alarm(s).

• Select Owner— Assign an owner.

View

• View Detecting AP on Network

• View Details by Controller

AP Containment

• 1 AP Containment—Target the rogue access point for containment by one access point. (Lowest containment level.)

• 2 AP Containment—Target the rogue access point for containment by two Cisco 1000 Series lightweight access points.

• 3 AP Containment—Target the rogue access point for containment by three Cisco 1000 Series lightweight access points.

• 4 AP Containment—Target the rogue access point for containment by four Cisco 1000 Series lightweight access points. (Highest containment level.)

The higher the threat of the rogue access point, the higher the containment required.

Attempting to contain a rogue access point might lead to legal consequences. When you select any of the AP Containment commands, a message “Containing a Rogue AP may have legal consequences. Do you want to continue?” appears. Click OK if you are sure or click Cancel if you do not wish to contain any access points.

General

Rogue MAC Address

Displays the MAC address of the rogue access points.

Vendor

Displays the Rogue access point vendor name or Unknown.

An Airlink rogue access point alarm is displayed as Alpha instead of Airlink.

Rogue Type

Displays the rogue type such as AP.

On Network

Displays how the rogue detection occurred.

Controller

Displays the name of the controller that detected the rogue (Yes or No).

Switch Port Trace

Displays the switch port trace that detected the rogue. The switch port trace is one of the following types:

• Traced but not found

• Traced and found

• Not traced

Owner

Displays the name of the owner. It may be left blank in some cases.

Acknowledged

Displays whether or not the alarm is acknowledged by the user. You can acknowledge the alarm to prevent it from showing up in the Alarm Summary page. The alarm remains in the Prime Infrastructure and you can search for all acknowledged alarms using the alarm search functionality.

Classification Type

Displays the classification type of the rogue access point. The classifications are:

• Malicious

• Friendly

• Unclassified.

State

Displays the state of the alarm. The possible states vary depending on the classification type of rogue access point.

SSID

Displays the Service Set Identifier being broadcast by the rogue access point radio. This field is left blank if SSID is not broadcast.

Channel Number

Displays the channel of the rogue access point.

Containment Level

Displays the containment level of the rogue access point.

Radio Type

Lists all radio types applicable to this rogue access point.

Strongest AP RSSI

Displays the strongest AP RSSI for this rogue access point across the life of the rogue.

The strongest AP RSSI over the life of the rogue displays to indicate the nearest distance that existed between the rogue access point and your building or location. The higher the RSSI, the closer the location.

No. of Rogue Clients

Displays the number of rogue clients associated to this rogue access point.

This is the only real-time field. It updates each time you open the Alarm Details page for this rogue access point. All other fields on the Alarm Details page are populated through polling and are updated every two hours.

First Seen Time

Displays the date and time when the rogue access point was first detected. This information is populated from the controller.

Last Seen Time

Displays the date and time when the rogue access point was last detected. This information is populated from the controller.

Modified

Displays when the alarm event was modified.

Generated By

Displays how the alarm event was generated (either NMS or from a trap).

• NMS (Network Management System - Prime Infrastructure)—Generated through polling. Prime Infrastructure periodically polls the controllers and generates events. Prime Infrastructure generates events when the traps are disabled or when the traps are lost for those events. In this case, Generated by is displayed as NMS.

• Trap—Generated by the controller. Prime Infrastructure process these traps and raises corresponding events for them. In this case, “Generated by” is Controller.

Severity

Displays the severity of the alarm.

Previous Severity

Displays the previous severity of the alarm:

• Critical

• Major

• Minor

• Clear.

Event Details

Displays the event details.

Rogue AP History

Displays the historical Rogue AP Alarm details.

Switch Port Trace Status

Displays the switch port trace status. Switch port trace status may include:

• Traced, but not found

• Traced and found, Not traced

• Failed.

Rogue Clients

Displays the rogue clients for this access point including the client MAC address, the last date and time the client was heard, and the current client status.

Message

Displays the most recent message regarding this rogue access point. A message is sent for the following:

• The rogue access point that is first detected

• Any trap sent

• Any changed state.

Annotations

Displays the current notes regarding this rogue access point.

To add a new note, click New Annotation. Type the note and click Post to save and display the note or Cancel to close the page without saving the note.

Location Notifications

Displays the number of location notifications logged against the client.

Location

Displays the location information, if available.

Severity

The severity of the alarm.

Rogue MAC Address

MAC address of the rogue access points.

Classification Type

Malicious, Friendly, or Unclassified.

Radio Type

Lists all radio types applicable to this rogue access point.

Strongest AP RSSI

Displays the strongest AP RSSI for this rogue access point across the life of the rogue. The strongest AP RSSI over the life of the rogue displays to indicate the nearest distance that existed between the rogue access point and your building or location. The higher the RSSI, the closer the location.

No. of Rogue Clients

Indicates the number of rogue clients associated to this rogue access point.

First Seen Time

Indicates the date and time when the rogue access point was first detected. This information is populated from the controller.

Last Seen Time

Indicates the date and time when the rogue access point was last detected. This information is populated from the controller.

State

Indicates the state of the alarm. Possible states vary depending on the classification type of rogue access point.

SSID

Service Set Identifier being broadcast by the rogue access point radio. (Blank if SSID is not broadcast.)

Category

Indicates the category of this alarm such as Security or Prime Infrastructure.

On Network

Indicates how the rogue detection occurred.

• Controller—The controller detected the rogue (Yes or No).

• Switch Port Trace—The rogue was detected by a switch port trace. Indicated by one of the following: Traced but not found, Traced and found, Not traced.

Channel Number

Indicates the channel of the ad hoc rogue.

Containment Level

Indicates the containment level of the ad hoc rogue or Unassigned.

Switch Port Trace Status

Indicates the switch port trace status. Switch port trace status might include: Traced, but not found, Traced and found, Not traced, Failed.

Severity

The severity of the alarm.

Rogue MAC Address

MAC address of the rogue access points.

Vendor

Rogue access point vendor name or Unknown.

Classification Type

Malicious, Friendly, or Unclassified.

On Network

Indicates whether the rogue detection occurred.The controller detected the rogue (Yes or No).

Radio Type

Lists all radio types applicable to this rogue access point.

Date/Time

The date and time that the event was generated.

State

Indicates the state of the alarm. Possible states vary depending on the classification type of rogue access point.

SSID

Service Set Identifier being broadcast by the rogue access point radio. (Blank if SSID is not broadcast.)

Severity

Indicates the severity of the alarm using icons. You can use the Severity Configuration feature to determine the level of severity for the following rogue access point alarm types:

• Rogue detected

• Rogue detected contained

• Rogue detected on network

Rogue MAC Address

Indicates the MAC address of the rogue.

Vendor

Indicates ad hoc rogue vendor name, or Unknown.

Radio Type

Lists all radio types applicable to this rogue access point.

Strongest AP RSSI

Displays the strongest AP RSSI for this rogue across the life of the rogue. The strongest AP RSSI over the life of the rogue displays to indicate the nearest distance that existed between the rogue and your building or location. The higher the RSSI, the closer the location.

No. of Rogue Clients

Indicates the number of rogue clients associated to this rogue access point. The number of rogue clients is the only real-time field in the Alarm Details page. It updates each time you open the Alarm Details page for this rogue access point. All other fields in the Alarm Details page are populated through polling and are updated every two hours.

Owner

Indicates the owner or is left blank.

Last Seen Time

Indicates the date and time that the rogue access point was last seen.

State

Indicates the state of the alarm. Possible states for ad hoc rogues include Threat, Alert, Internal, External, Contained, Contained Pending, and Removed.

SSID

The Service Set Identifier that is being broadcast by the rogue ad hoc radio. It is blank if there is no broadcast.

Map Location

Indicates the map location for this ad hoc rogue.

Acknowledged

Displays whether or not the alarm is acknowledged by the user.

You can acknowledge the alarm to prevent it from showing up in the Alarm Summary page. The alarm remains in Prime Infrastructure and you can search for all Acknowledged alarms using the alarm search functionality.

Change Status

• Acknowledge—Acknowledge the alarm to prevent it from showing up in the Alarm Summary page. The alarm remains in the Prime Infrastructure and you can search for all Acknowledged alarms using the alarm search functionality.

• Unacknowledge—Unacknowledge an already acknowledged alarm.

• Clear—Clear the selected alarm(s). Indicates that the alarm is no longer detected by any access point. Once the severity is Clear, the alarm is deleted from the Prime Infrastructure after 30 days.

• Clear all of this Condition

Change State

• Unclassified - Alert—Choose this command to tag the rogue access point as the lowest threat, continue monitoring the rogue access point, and to turn off Containment. Indicates the MAC address of the rogue access points.

• Malicious - Alert—Choose this command to tag the rogue access point as ‘Malicious’.

• Friendly - Internal—Choose this command to tag the rogue access point as internal, add it to the Known Rogue APs list, and to turn off Containment.

• Friendly - External—Choose this command to tag the rogue access point as external, add it to the Known Rogue APs list, and to turn off Containment.

• Refresh from Network

Assign

• Assign to me—Assign the selected alarm(s) to the current user.

• Unassign—Unassign the selected alarm(s).

• Select Owner

Annotation

Type the note and click Post to save and display the note or Close to close the page without saving the note.

Delete

Delete the selected alarm(s).

Email Notification

Takes you to the Monitor > Alarms and Events> Email Notification page to view and configure email notifications.

Rogue MAC Address

Indicates the MAC address of the rogue.

Vendor

Indicates ad hoc rogue vendor name, or Unknown.

On Network

Indicates how the rogue detection occurred (controller or switch port trace).

The switch port tracing does not update any of the rogue attributes such as severity, state, and so on. As the rogue attributes are not updated by switch port tracing, alarms would not be triggered if a rogue is discovered to be 'on network' using switch port tracing.

Owner

Indicates the owner or is left blank.

Acknowledged

Indicates whether or not the alarm is acknowledged by the user.

Acknowledge the alarm to prevent it from showing up in the Alarm Summary page. The alarm remains in Prime Infrastructure and you can search for all Acknowledged alarms using the alarm search functionality.

State

Indicates the state of the alarm. Possible states for ad hoc rogues include Threat, Alert, Internal, External, Contained, Contained Pending, and Removed.

SSID

The Service Set Identifier that is being broadcast by the rogue ad hoc radio. It is blank if there is no broadcast.

Channel Number

Indicates the channel of the ad hoc rogue.

Containment Level

Indicates the containment level of the ad hoc rogue or Unassigned.

Radio Type

Lists all radio types applicable to this rogue access point.

Strongest AP RSSI

Displays the strongest AP RSSI for this rogue across the life of the rogue. The strongest AP RSSI over the life of the rogue displays to indicate the nearest distance that existed between the rogue and your building or location. The higher the RSSI, the closer the location.

No. of Rogue Clients

Indicates the number of rogue clients associated to this rogue access point. The number of rogue clients is the only real-time field in the Alarm Details page. It updates each time you open the Alarm Details page for this rogue access point. All other fields in the Alarm Details page are populated through polling and are updated every two hours.

Created

Indicates when the alarm event was created.

Modified

Indicates when the alarm event was modified.

Generated By

Indicates how the alarm event was generated (either NMS or from a trap).

Severity

Indicates the severity of the alarm.

Previous Severity

The previous severity of the alarm: Critical, Major, Minor, Clear. Color coded.

Last Seen Time

Indicates the date and time that the rogue access point was last seen.

Location Notification

Displays the number of location notifications logged against the client. Clicking a link displays the notifications.

Map Location

Indicates the map location for this ad hoc rogue.

Rogue Clients Details

Lists rogue clients for this access point including the client MAC address, the last date and time the client was heard, and the current client status.

Message

Indicates descriptive information about the alarm.

Help

Indicates the latest information about the alarm.

Event History

Displays the event history.

Annotations

Lists existing notes for selected alarm.f

MAC Address

The MAC address of the chokepoint.

Chokepoint Name

The user-defined name of the chokepoint.

Entry/Exit Chokepoint

Indicates whether or not the chokepoint is an entry/exit chokepoint.

Static IP

The static IP address of the chokepoint.

Map Location

A link to a map showing the location of the chokepoint.

Interferer ID

A unique identifier for the interferer. This is a pseudo-randomly generated ID. Though it is similar to a to a MAC address, it is not a real address, such as the one used by a Bluetooth headset.

Type

Indicates the category of the interferer. Click to read more about the type of device. A pop-up window appears displaying more details. The categories include the following:

• Bluetooth link—A Bluetooth link (802.11b/g/n only)

• Microwave Oven—A microwave oven (802.11b/g/n only)

• 802.11 FH—An 802.11 frequency-hopping device (802.11b/g/n only)

• Bluetooth Discovery—A Bluetooth discovery (802.11b/g/n only)

• TDD Transmitter—A time division duplex (TDD) transmitter

• Jammer—A jamming device

• Continuous Transmitter—A continuous transmitter

• DECT-like Phone—A digital enhanced cordless communication (DECT)-compatible phone

• Video Camera—A video camera

• 802.15.4—An 802.15.4 device (802.11b/g/n only)

• WiFi Inverted—A device using spectrally inverted Wi-Fi signals

• WiFi Invalid Channel—A device using non-standard Wi-Fi channels

• SuperAG—An 802.11 SuperAG device

• Canopy—A Motorola Canopy device

• Radar—A radar device (802.11a/n only)

• XBox—A Microsoft Xbox (802.11b/g/n only)

• WiMAX Mobile—A WiMAX mobile device (802.11a/n only)

• WiMAX Fixed—A WiMAX fixed device (802.11a/n only)

• WiFi AOCI—A WiFi device with AOCI

• Unclassified

Status

Indicates the status of the interfering device.

• Active—Indicates that the interferer is currently being detected by the CleanAir capable access point.

• Inactive—Indicates that the interferer is no longer being detected by the CleanAir capable access point or no longer reachable by the Prime Infrastructure.

Severity

Displays the severity ranking of the interfering device.

Affected Band

Displays the band in which this device is interfering.

Affected Channels

Displays the affected channels.

Duty Cycle (%)

The duty cycle of interfering device in percentage.

Discovered

Displays the time at which it was discovered.

Last Updated

The last time the interference was detected.

Floor

The location where the interfering device is present.

Interferer Properties

Type—Displays the type of the interfering device detected by the AP.

Status

The status of the interfering device. Indicates the status of the interfering device.

• Active—Indicates that the interferer is currently being detected by the CleanAir capable access point.

• Inactive—Indicates that the interferer is no longer being detected by the CleanAir capable access point or no longer reachable by the Prime Infrastructure.

• Severity—Displays the severity ranking of the interfering device.

• Duty Cycle (%)—The duty cycle of interfering device in percentage.

• Affected Band—Displays the band in which this device is interfering.

• Affected Channels—Displays the affected channels.

• Discovered—Displays the time at which it was discovered.

• Last Updated—The last time the interference was detected.

Status

Indicates the status of the interfering device.

• Active—Indicates that the interferer is currently being detected by the CleanAir capable access point.

• Inactive—Indicates that the interferer is no longer being detected by the CleanAir capable access point or no longer reachable by the Prime Infrastructure.

Location

• Floor—The location where this interfering device was detected.

• Last Located At—The last time where the interfering device was located.

• On MSE—The mobility server engine on which this interference device was located.

Clustering Information

• Clustered By—Displays the IP address of the controller or the MSE that clustered the interferer information from the access point.

• Detecting APs—Displays the details of the access point that has detected the interfering device. The details include: Access Point Name (Mac), Severity, and Duty Cycle(%).

Details

Displays a short description about the interfering type.

Interferer Information

Displays the basic information about the interfering device.

• Data Collected At—The time stamp at which the data was collected.

• Type—The type of the interfering device.

• Severity—The severity index of the interfering device.

• Duty Cycle—The duty cycle (in percentage) of the interfering device.

• Affected Channels—A comma separated list of the channels affected.

Interferer Location History

Displays the location history of the interfering devices.

• Time Stamp

• Floor

Clustering Information

Clustered By—Displays the IP address of the controller or the MSE that clustered the interferer information from the access point.

Detecting APs

• AP Name—The access point that detected the interfering device.

• Severity—The severity index of the interfering device.

• Duty Cycle(%)—The duty cycle (in percentage) of the interfering device.

Location

• Location Calculated At—Displays the time stamp at which this information was generated.

• Floor—Displays location information of the interfering device.

• A graphical view of the location of the interfering device is displayed in a map. Click the Enlarge link to view an enlarged image.

Host Name

Displays the hostname or IP Address depending on how it was added. Click the hostname to access the Spectrum Experts Details Page.

Active Interferers

Indicates the current number of interferes being detected by the Spectrum Experts.

Affected APs

The number of access points seen by the Spectrum Expert that are potentially affected by detected interferers.

Alarms

The number of active interference traps sent by the Spectrum Expert. Click to access the Alarm page that is filtered to the active alarms for this Spectrum Expert.

Reachability Status

Indicates “Reachable” in green if the Spectrum Expert is running and sending data to the Prime Infrastructure; otherwise indicates “Unreachable” in red.

Location

When the Spectrum is a wireless client, a link is available that displays the location of the Spectrum Expert. A red box around the Spectrum Expert indicates the effective range. Click to access the nearest mapped access point.

Interferer ID

An identifier that is unique across different spectrum experts. This is a pseudo-randomly generated ID. Though it is similar to a MAC address, it is not a real address, which you can use to find the interfering device.

Category

Indicates the category of the interferer. Categories include: Bluetooth, Cordless Phones, Microwave Ovens, 802.11 FH, Generic - Fixed-Frequency, Jammers, Generic - Frequency-Hopped, Generic - Continuous.

Type

Indicates the type of Interferer. Click to access a pop-up description of the type.

Status

Indicates Active or Inactive.

• Active—Indicates that the interferer is currently being detected by a spectrum expert.

• Inactive—Indicates that the interferer is no longer detected by a spectrum expert or the spectrum expert that saw the interferer is no longer reachable by the Prime Infrastructure.

Discover Time

Indicates the time of discovery.

Affected Channels

Identifies affected channels.

Number of APs Affected

An access point is listed as Affected if the following conditions are met:

• The access point is managed by the Prime Infrastructure.

• The spectrum expert detects the access point.

• The spectrum expert detects an interferer on the serving channel of the access point.

Power

Indicated in dBm.

Duty Cycle

Indicated in percentage. 100% indicates the worst value.

Severity

Indicates the severity ranking of the Interferer. 100% indicates the worst value where 0 indicates no interference.

Total Interferer Count

As seen by the specific Spectrum Expert.

Active Interferers Count Chart

Displays a pie chart that groups interferes by category.

Active Interferer Count Per Channel

Displays the number of interferes grouped by category on different channels.

AP List

Provides a list of access points detected by the Spectrum Expert that are on channels that have active interferers detected by the Spectrum Expert on those channels.

Affected Clients List

Provides a list of clients that are currently authenticated/associated to the radio of one of the access points listed in the access point list.

General

AP Name

Operator defined name of the AP.

AP IP address, Ethernet MAC address, and Base Radio MAC address

IP address, Ethernet MAC address and Radio MAC address.

Country Code

The codes of the supported countries. Up to 20 countries can be supported per controller.

Access points might not operate properly if they are not designed for use in your country of operation. See Cisco Wireless Control System Configuration Guide, Release 4.0 for a complete list of country codes supported per product.

Link Latency Settings

The link latency settings. The link latencies available are:

• Current Link Latency—The current round-trip time in milliseconds of heartbeat packets from the access point to the controller and back.

• Minimum Link Latency—The minimum round-trip time in milliseconds of heartbeat packets from the access point to the controller and back when link latency has been enabled or reset,

• Maximum Link Latency—The maximum round-trip time in milliseconds of heartbeat packets from the access point to the controller and back when link latency has been enabled or reset.

LWAPP/CAPWAP Uptime

Displays how long the LWAPP/CAPWAP connection has been active.

LWAPP/CAPWAP Join Taken Time

Displays how long the LWAPP/CAPWAP connection has been joined.

Admin Status

The administration state of the access point as either enabled or disabled.

AP Mode

Local

Default mode. Data clients are serviced while configured channels are scanned for noise and rogues. The access point goes off-channel for 50 ms and listens for rogues. It cycles through each channel for the period specified under the Auto RF configuration.

To configure Local or FlexConnect access points for the Cisco Adaptive wIPS feature, choose Local or FlexConnect and select the Enhanced wIPS Engine Enabled check box.

Monitor

Radio receive only mode. The access point scans all configured channels every 12 seconds. Only deauthenticated packets are sent in the air with an access point configured this way. A monitor mode access point can connect as a client to a rogue access point.

To configure access points for Cisco Adaptive wIPS feature, select Monitor. Select the Enhanced wIPS Engine Enabled check box and choose wIPS from the Monitor Mode Optimization drop-down list.

Before you can enable an access point to be in wIPS mode, you must disable the access point radios. If you do not disable the access point radio, an error message appears.

Once you have re-enable the radios after you enable wIPS on the access point.

Rogue Detector

The access point radio is turned off and the access point listens to wired traffic only. The controllers that operate in this mode monitor the rogue access points. The controller sends all the rogue access point and client MAC address lists to the rogue detector, and the rogue detector forwards this information to the WLC. The MAC address list is compared to what the WLC access points heard over the network. If the MAC addresses match, you can determine which rogue access points are connected on the wired network.

Sniffer

The access point captures and forwards all the packets on a particular channel to a remote machine that runs AiroPeek. These packets contain information such as timestamp, signal strength, packet size, and so on. This feature can only be enabled if you run AiroPeek, which is a third-party network analyzer software that supports the decoding of data packets.

FlexConnect

Enables FlexConnect for up to six access points. The FlexConnect access points can switch client data traffic locally and perform client authentication locally when their connection to the controller is lost.

FlexConnect must be selected to configure an OfficeExtend access point. In the FlexConnect mode, the configuration options display the option to enable OfficeExtend AP and allows the Least Latency Controller to join it.

Bridge

This is a special mode where an autonomous access point functions as a wireless client and connects to a lightweight access point. The bridge and its wired clients are listed as client in the Prime Infrastructure if the AP mode is set to Bridge, and the access point is bridge capable.

Spectrum Expert

This mode allows a CleanAir-enabled access point to be used extensively for interference detection on all monitored channels. All other functions such as IDS scanning and Wi-Fi are suspended.

Versions

Software Version

The operating system release version number of the code currently running on the controller.

Enhanced wIPs Engine

Enabled or Disabled, to enable the monitoring of the security attacks using Cisco Adaptive wIPS feature.

Operational Status

Registered or Not Registered, as determined by the controller.

Registered Controller

The controller to which the access point is registered. Click to display the registered controller details.

Primary Controller

The name of the primary controller for this access point.

Port Number

The SNMP name of the access point primary controller. The access point attempts to associate with this controller first for all network operations and in the event of a hardware reset.

AP Uptime

Displays how long the access point has been active to receive and transmit.

Map Location

Customer-definable location name for the access point. Click to look at the actual location on a map. Choose Monitor > Access Points > name > Map Location for more information.

Google Earth Location

Indicates whether a Google Earth location is assigned.

Location

The physical location where the access point is placed (or Unassigned).

Statistics Timer

This counter sets the time in seconds that the access point sends its DOT11 statistics to the controller.

PoE Status

The power over Ethernet status of the access point. The possible values are:

• Low—The access point draws low power from the Ethernet.

• Lower than 15.4 volts—The access point draws lower than 15.4 volts from the Ethernet.

• Lower than 16.8 volts—The access point draws lower than 16.8 volts from the Ethernet.

• Normal—The power is high enough for the operation of the access point.

• Not Applicable—The power source is not from the Ethernet.

Rogue Detection

Indicates whether or not Rogue Detection is enabled.

Rogue detection is disabled automatically for OfficeExtend access points because these access points are deployed in a home environment and are likely to detect a large number of rogue devices.

OfficeExtend AP

Indicates whether or not the access point is enabled as an OfficeExtend access point. The AP is enabled by default.

Encryption

Indicates whether or not encryption is enabled. Enabling or disabling encryption functionality causes the access point to reboot which then leads to a loss of connectivity for clients.

DTLS data encryption is enabled automatically for OfficeExtend access points to maintain security. Encryption is only available if the access point is connected to a 5500 series controller with a Plus license.

Least Latency Join

The access point switches from a priority order search (primary, secondary, and then tertiary controller) to a search for the controller with the best latency measurement (least latency). The controller with the least latency provides the best performance.

Telnet Access

Indicates whether or not Telnet Access is enabled.

SSH Access

Indicates whether or not SSH is enabled.

An OfficeExtend access point might be connected directly to the WAN which could allow external access if the default password is used by the access point. Hence Telnet and SSH access are disabled automatically for OfficeExtend access points.

Inventory Information

AP Type

Type of Access Point

AP Model

Access point model number.

Cisco IOS Version

The Cisco IOS Release details.

AP Certificate Type

Self Signed or Manufacture Installed certificate.

FlexConnect Mode Supported

Indicates if FlexConnect mode is supported or not.

wIPS Profile (when applicable)

Profile Name

The wIPS profile details.

Profile Version

The zIPS profile version.

Unique Device Identifier (UDI)

Name

Name of the Cisco AP for access points.

Description

Description of the access point.

Product ID

Orderable product identifier.

Version ID

Version of product identifier.

Serial Number

Unique product serial number.

Run Ping Test Link

Click to ping the access point. The results are displayed in a pop-up dialog box.

Alarms Link

Click to display alarms associated with this access point.

Events Link

Click to display events associated with this access point.

Global Username Password Configuration

Override Global Username Password

Select the check box to enable an override for the global username/password. Enter and confirm the new access point username and password in the appropriate text boxes.

Supplicant Credentials Configuration

Override Supplicant Credentials

Select the Override Supplicant Credentials check box to prevent this access point from inheriting the authentication username and password from the controller. The default value is unselected. The Override Supplicant Credentials option is supported in controller Release 6.0 and later.

In the Username, Password, and Confirm Password text boxes, enter the unique username and password that you want to assign to this access point.

Controller Configuration

Controllers Configuration

Select the check box to enable the drop-down lists for the primary, secondary, and tertiary controller names.

• Primary, Secondary, and Tertiary Controller Name—The Primary/Secondary/Tertiary Controller names.

• Primary, Secondary, and Tertiary Controller IP—The Primary/Secondary/Tertiary Controller IP is the Management IP of the controller.

Venue Configuration

• Venue Group

• Venue Type

• Secondary Venue Name

• Language

Power Over Ethernet Settings

Pre-Standard 802.3af Switches

Pre-Standard 802.3af Switches.

Power Injector State

When enabled, this allows you to manipulate power injector settings through Prime Infrastructure without having to go directly to the controllers. If the Enable Power Injector State is selected, power injector options appear.

Power Injector Selection

Choose installed or override from the drop-down list.

AP Transmit Config Parameters

AP Transmit Count

Enter the AP Retransmit Count and Intervals. The AP Retransmit Count default value is 5 and the range is from 3 to 8.

AP Retransmit Interval

The AP Retransmit Interval default value is 3. The range is from 2 to 5.

BLE Beacon Configuration

Enable the BLE Beacon Configuration check box and configure the following:

• Beacon Id

• Major Field

• Minor Field

• Tx Power (dBM)

AP LAN Port Configuration

AP LAN Override

Select the check box to enable the LAN Override on the access point.

Port

Displays the port number.

State

Select the check box to enable the port status.

POE Status

The first LAN port contains a POE through which you can configure the POE status. Select the check box to enable the POE status.

VLAN ID

Enter the VLAN ID.

Ethernet Interfaces

The group box provides information such as interface name, slot Id, and administration status of the interface.

Select the appropriate interface and specify its mode.

Radio Interfaces

• Protocol—802.11a/n or 802.11b/g/n, XOR(2.4GHz), XOR(5GHz), or XOR (Monitor Mode).

• Admin Status—Indicates whether the access point is enabled or disabled.

• Channel Number—Indicates the channel on which the Cisco Radio is broadcasting.

• Power Level —Access Point transmit power level: 1 = Maximum power allowed per Country Code Setting, 2 = 50% power, 3 = 25% power, 4 = 6.25 to 12.5% power, and 5 = 0.195 to 6.25% power.

• Antenna Diversity—Displays if antenna diversity is enabled or disabled. Antenna diversity refers to the access point sampling the radio signal from two integrated antenna ports to choose the preferred antenna.

• Antenna Type—Indicate an external or internal antenna.

• Sub Band

• Antenna Name—Identifies the type of antenna.

General

IP Address

Local network IP address of the controller management interface.

Name

User-defined name of the controller.

Device Type

Type of controller.

UP Time

Time in days, hours and minutes since the last reboot.

System Time

Time used by the controller.

Location

User-defined physical location of the controller.

Contact

Contact person or the owner of the controller.

Total Client Count

Total number of clients currently associated with the controller.

Current CAPWAP Transport Mode

Control and Provisioning of Wireless Access Points (CAPWAP) protocol transport mode. Communications between controllers and access points. Choose Layer 2 or Layer 3.

Power Supply One

If the power supply is available and operation. This is only for 4400 series controller.

Power Supply Two

If the power supply is available and operation. This is only for 4400 series controller.

Inventory

Software Version

The operating system release.version.dot.maintenance number of the code currently running on the controller.

Emergency Image Version

An image version of the controller.

Description

Description of the inventory item.

Model No

Specifies the machine model as defined by the Vital Product Data.

Serial No

Unique serial number for this controller.

Burned-in MAC Address

The burned-in MAC address for this controller.

Number of APs Supported

The maximum number of access points supported by the controller.

Gig Ethernet/Fiber Card

Displays the presence or absence of the optional 1000BASE-T/1000BASE-SX GigE card.

Crypto Card One

Displays the presence or absence of an enhanced security module which enables IPsec security and provides enhanced processing power.

Maximum number of crypto cards that can be installed on a Cisco Wireless LAN controller:

• Cisco 2000 Series—None

• Cisco 4100 Series—One

• Cisco 4400 Series—Two

Crypto Card Two

Displays the presence or absence of a second enhanced security module.

GIGE Port(s) Status

Up or Down. Click to review the status of the port.

Unique Device Identifier (UDI)

Name

Product type. Chassis for controller and Cisco AP for access points.

Description

Description of controller and might include number of access points.

Product ID

Orderable product identifier.

Version ID

Version of product identifier.

Serial No

Unique product serial number.

Utilization

CPU Utilization

Displays a graph of the maximum, average, and minimum CPU utilization over the specified amount of time.

Memory Utilization

Displays a graph of the maximum, average, and minimum memory utilization over the specified amount of time.

Peer Memory Utilization

Displays a graph of the maximum, average, and minimum peer memory utilization over the specified time.

Peer CPU Usage for Standby Controller

Displays a graph of the maximum, average, and minimum peer CPU utilization over the specified amount of time.

General

Spanning Tree Specification

An indication of what version of the Spanning Tree Protocol is being run. IEEE 802.1D implementations return 'IEEE 802.1D'. If future versions of the IEEE Spanning Tree Protocol are released that are incompatible with the current version, a new value is defined.

Spanning Tree Algorithm

Specifies if this controller participates in the Spanning Tree Protocol. Might be enabled or disabled by choosing the corresponding line in the drop-down list. The factory default is disabled.

Priority

The value of the writable portion of the Bridge ID, that is, the first two octets of the (8 octet long) Bridge ID. The other (last) 6 octets of the Bridge ID are given by the value of Bridge MAC Address. The value might be specified as a number between 0 and 65535. The factory default is 32768.

STP Statistics

Topology Change Count

The total number of topology changes detected by this bridge since the management entity was last reset or initialized.

Time Since Topology Changed

Time (in days, hours, minutes, and seconds) since a topology change was detected by the bridge.

Designated Root

The bridge identifier of the root of the spanning tree as determined by the Spanning Tree Protocol as executed by this node. This value is used as the Root Identifier parameter in all Configuration Bridge PDUs originated by this node.

Root Cost

The cost of the path to the root as seen from this bridge.

Root Port

The port number of the port which offers the lowest cost path from this bridge to the root bridge.

Maximum Age (seconds)

The value that all bridges use for MaxAge when this bridge is acting as the root.

Hello Time (seconds)

The value that all bridges use for HelloTime when this bridge is acting as the root. The granularity of this timer is specified by 802.1D-1990 to be 1 second. Valid values are 1 through 10 seconds. The factory default is 2.

Forward Delay (seconds)

The value that all bridges use for ForwardDelay when this bridge is acting as the root. Note that 802.1D-1990 specifies that the range for this parameter is related to the value of Stp Bridge Maximum Age. The granularity of this timer is specified by 802.1D-1990 to be 1 second. An agent might return a badValue error if a set is attempted to a value which is not a whole number of seconds. Valid values are 4 through 30 seconds. The factory default is 15.

Hold Time (seconds)

The minimum time period to elapse between the transmission of Configuration BPDUs through a given LAN Port: at most one Configuration BPDU shall be transmitted in any Hold Time period.

Server IP

Identifies the IP address of the server.

Is Proxy

Identifies whether or not this server is proxy.

Discover Packets Sent

Identifies the total number of packets sent intended to locate available servers.

Request Packets Sent

Identifies the total number of packets sent from the client requesting parameters from the server or confirming the correctness of an address.

Decline Packets

Identifies the number of packets indicating that the network address is already in use.

Inform Packets

Identifies the number of client requests to the DHCP server for local configuration parameters because the client already has an externally configured network address.

Release Packets

Identifies the number of packets that release the network address and cancel the remaining lease.

Reply Packets

Identifies the number of reply packets.

Offer Packets

Identifies the number of packets that respond to the discover packets with an offer of configuration parameters.

Ack Packets

Identifies the number of packets that acknowledge successful transmission.

Nak Packets

Identifies the number of packets that indicate that the transmission occurred with errors.

Tx Failures

Identifies the number of transfer failures that occurred.

Last Response Received

Provides a timestamp of the last response received.

Last Request Sent

Provides a timestamp of the last request sent.

WLAN ID

Identification number of the WLAN.

Profile Name

User-defined profile name specified when initially creating the WLAN. Profile Name is the WLAN name.

SSID

User-defined SSID name.

Security Policies

Security policies enabled on the WLAN.

No of Mobility Anchors

Mobility anchors are a subset of a mobility group specified as the anchor controllers for a WLAN.

Admin Status

Status of the WLAN is either enabled or disabled.

No. of Clients

Current number of clients currently associated with this WLAN.

Port

Click the port number to view port details.

Physical Mode

Displays the physical mode of all ports. The choices include the following:

• 100 Mbps Full Duplex

• 100 Mbps Half Duplex

• 10 Mbps Full Duplex

• 10 Mbps Half Duplex

Admin Status

Displays the port state as either Enable or Disable.

STP State

Displays the STP state of the port as either Forwarding or Disabled.

Physical Status

Displays the actual port physical interface:

• Auto Negotiate

• Half Duplex 10 Mbps

• Full Duplex 10 Mbps

• Half Duplex 100 Mbps

• Full Duplex 100 Mbps

• Full Duplex 1 Gbps

Link Status

Red (down/failure), Yellow (alarm), Green (up/normal).

RADIUS Authentication Servers

Server Index

Access priority number for RADIUS servers. Up to four servers can be configured, and controller polling of the servers starts with Index 1, Index 2 second, and so forth. The index number is based on when the RADIUS server is added to the controller.

IP Address

The IP address of the RADIUS server.

Ping

Click the icon to ping the RADIUS server from the controller to verify the link.

Port

Controller port number for the interface protocols.

Admin Status

Indicates whether the server is enabled or disabled.

Authentication Server Statistics

Msg Round Trip Time

The time interval (in milliseconds) between the most recent Access-Reply/Access-Challenge and the Access-Request that matched it from this RADIUS authentication server.

First Requests

The number of RADIUS Access-Request packets sent to this server. This does not include retransmissions.

Retry Requests

The number of RADIUS Authentication-Request packets retransmitted to this RADIUS authentication server.

Accept Responses

The number of RADIUS Access-Accept packets (valid or invalid) received from this server.

Reject Responses

The number of RADIUS Access-Reject packets (valid or invalid) received from this server.

Challenge Responses

The number of RADIUS Access-Challenge packets (valid or invalid) received from this server.

Malformed Msgs

The number of malformed RADIUS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators or Signature attributes or unknown types are not included as malformed access responses.

Pending Requests

The number of RADIUS Access-Request packets destined for this server that have not yet timed out or received a response. This variable is incremented when an Access-Request is sent and decremented due to receipt of an Access-Accept, Access-Reject or Access-Challenge, a timeout, or retransmission.

Bad Authentication Msgs

The number of RADIUS Access-Response packets containing invalid authenticators or Signature attributes received from this server.

Timeouts Requests

The number of authentication timeouts to this server. After a timeout the client might retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout.

Unknown Type Msgs

The number of RADIUS packets of unknown type which were received from this server on the authentication port.

Other Drops

The number of RADIUS packets received from this server on the authentication port and dropped for some other reason.

RADIUS Accounting Server

Server Index

Access priority number for RADIUS servers. Up to four servers can be configured, and controller polling of the servers starts with Index 1, Index 2 second, and so forth. Index number is based on when the RADIUS server is added to the controller.

IP Address

The IP address of the RADIUS server.

Ping

Click the icon to ping the RADIUS Server from the controller to verify the link.

Port

The port of the RADIUS server.

Admin Status

Indicates whether the server is enabled or disabled.

Accounting Statistics

Msg Round Trip Time

The time interval (in milliseconds) between the most recent Accounting-Response and the Accounting-Request that matched it from this RADIUS accounting server.

First Requests

The number of RADIUS Accounting-Request packets sent. This does not include retransmissions.

Retry Requests

The number of RADIUS Accounting-Request packets retransmitted to this RADIUS accounting server. Retransmissions include retries where the Identifier and Acct-Delay have been updated, as well as those in which they remain the same.

Accounting Responses

The number of RADIUS packets received on the accounting port from this server.

Malformed Msgs

The number of malformed RADIUS Accounting-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators and unknown types are not included as malformed accounting responses.

Bad Authentication Msgs

The number of RADIUS Accounting-Response packets which contained invalid authenticators received from this server.

Pending Requests

The number of RADIUS Accounting-Request packets sent to this server that have not yet timed out or received a response. This variable is incremented when an Accounting-Request is sent and decremented due to receipt of an Accounting-Response, a timeout or a retransmission.

Timeouts Requests

The number of accounting timeouts to this server. After a timeout the client might retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as an Accounting-Request as well as a timeout.

Unknown Type Msgs

The number of RADIUS packets of unknown type which were received from this server on the accounting port.

Other Drops

The number of RADIUS packets which were received from this server on the accounting port and dropped for some other reason.

General

Management Frame Protection

Indicates if the infrastructure MFP is enabled globally for the controller.

Controller Time Source Valid

The Controller Time Source Valid field indicates whether the controller time is set locally (by manually entering the time) or through an external source (such as NTP server). If the time is set by an external source, the value of this field is “True.” If the time is set locally, the value is “False.” The time source is used for validating the timestamp on management frames between access points of different controllers within a mobility group.

WLAN Details

WLAN ID

The WLAN ID, 1 through 17.

WLAN Name

User-defined profile name when initially creating the WLAN. Both the SSID name and profile name are user-defined. The WLAN name is same as the profile name.

MFP Protection

Management Frame Protection is either enabled or disabled.

Status

Status of the WLAN is either enabled or disabled.

AP Details

AP Name

Operator-defined name of access point.

MFP Validation

Management Frame Protection is enabled or disabled.

Radio

802.11a or 802.11b/g.

Operation Status

Displays the operational status: either UP or DOWN.

Protection

Full (All Frames).

Validation

Full (All Frames).

Rule Name

Name of the rule.

Rule Type

Malicious or Friendly

• Malicious Rogue—A detected access point that matches the user-defined Malicious rules or has been manually moved from the Friendly AP category.

• Friendly Rogue—Known, acknowledged, or trusted access point or a detected access point that matches user-defined Friendly rules.

Match Type

Match any or match all conditions.

Enabled Rule Conditions

Indicates all enabled rule conditions including:

• Open Authentication

• Match Managed AP SSID

• Match User Configured SSID

• Minimum RSSI

• Time Duration

• Minimum Number Rogue Clients

Guest User Name

Indicates the guest user login name.

Profile

Indicates the profile to which the guest user is connected.

Lifetime

Indicates the length of time that the guest user account is active. Length of time appears in days, hours, and minutes or as Never Expires.

Start Time

Indicates when the guest user account was activated.

Remaining Lifetime

Indicates the remaining time for the guest user account.

Role

Indicates the designated user role.

First Logged in at

Indicates the date and time of the user first login.

Number of logins

Indicates the total number of logins for this guest user.

Description

User-defined description of the guest user account for identification purposes.

Global Mobility Statistics

Rx Errors

Generic protocol packet receive errors, such as packet too short or format incorrect.

Tx Errors

Generic protocol packet transmit errors, such as packet transmission fail.

Responses Retransmitted

The Mobility protocol uses UDP and it resends requests several times if it does not receive a response. Because of network or processing delays, the responder might receive one or more retry requests after it initially responds to a request. This is a count of the response resends.

Handoff Requests Received

Total number of handoff requests received, ignored or responded to.

Handoff End Requests

Total number of handoff end requests received. These are sent by the Anchor or the Foreign to notify the other about the close of a client session.

State Transitions Disallowed

PEM (policy enforcement module) has denied a client state transition, usually resulting in the handoff being aborted.

Resource Unavailable

A necessary resource, such as a buffer, was unavailable, resulting in the handoff being aborted.

Mobility Responder Statistics

Handoff Requests Ignored

Number of handoff requests/client announces that were ignored. The controller simply had no knowledge of that client.

Ping Pong Handoff Requests Dropped

Number of handoff requests that were denied because the handoff period was too short (3 sec).

Handoff Requests Dropped

Number of handoff requests that were dropped due to a either an incomplete knowledge of the client or a problem with the packet.

Handoff Requests Denied

Number of handoff requests that were actively denied.

Client Handoff as Local

Number of handoffs responses sent while in the local role.

Client Handoff as Foreign

Number of handoffs responses sent while in the foreign role.

Anchor Requests Received

Number of anchor requests received.

Anchor Requests Denied

Number of anchor requests denied.

Anchor Requests Granted

Number of anchor requests granted.

Anchor Transferred

Number of anchors transferred because the client has moved from a foreign controller to controller on the same subnet as the current anchor.

Mobility Initiator Statistics

Handoff Requests Sent

Number of clients that have associated with controller and have been announced to the mobility group.

Handoff Replies Received

Number of handoff replies that have been received in response to the requests sent.

Handoff as Local Received

Number of handoffs in which the entire client session has been transferred.

Handoff as Foreign Received

Number of handoffs in which the client session was anchored elsewhere.

Handoff Denies Received

Number of handoffs that were denied.

Anchor Request Sent

Number of anchor requests that were sent for a three party (foreign to foreign) handoff. Handoff was received from another foreign and the new controller is requesting the anchor to move the client.

Anchor Deny Received

Number of anchor requests that were denied by the current anchor.

Anchor Grant Received

Number of anchor requests that were approved by the current anchor.

Anchor Transfer Received

Number of anchor transfers that were received by the current anchor.

Local State

Displays the status.

Peer State

Displays the peer state information.

Active Controller

Displays whether the active controller is a Primary or Secondary controller.

Unit Mac

Displays the unit MAC address.

Redundancy State

Displays the redundancy state.

Mobility MAC

Mobility MAC address.

Redundancy-Management IP

Redundancy management IP address

Peer Redundancy-Management IP

Peer redundancy management IP address information.

Redundancy port IP

Redundancy port IP address.

Peer Redundancy port IP

Peer redundancy port IP address.

Peer Service Port IP

Peer service port IP address.

Average Redundancy Peer Reachability Latency (Micro seconds)

Displays the average redundancy peer reachability latency in micro seconds.

Average Management Gateway Reachability Latency (Micro seconds)

Displays the average latency to reach the management gateway in micro seconds.

Primary to Standby BulkSync Status

Displays status of configuration sync from primary to standby controller.

Serial Number

Displays the serial number of the unit.

Fan Status

Displays status of the unit's fan.