Feature Matrix for Cisco Wave 2 and 802.11ax (Wi-Fi 6/6E) Access Points
First Published: April 23, 2019
Last Updated: April 4, 2022
Table of Contents
Support in Cisco IOS XE Releases
Radio Frequency Feature Matrix (IOS XE)
Security Feature Matrix (IOS XE)
Services Feature Matrix (IOS XE)
Infrastructure Feature Matrix (IOS XE)
FlexConnect Feature Matrix (IOS XE)
Support in Cisco AireOS Releases
Radio Frequency Feature Matrix (AireOS)
Security Feature Matrix (AireOS)
Services Feature Matrix (AireOS)
Infrastructure Feature Matrix (AireOS)
FlexConnect Feature Matrix (AireOS)
Communications, Services, and Additional Information
This section lists support information for various features in Cisco Wave 2 and 802.11ax (Wi-Fi 6/6E) Access Points in Cisco IOS XE releases.
Note: For a better reading experience, we recommend that you view this document with your browser window in full-screen mode.
Table 1 Access Points and First Supported Cisco IOS XE Release
Access Points |
First Supported Cisco IOS XE Release |
802.11ax (Wi-Fi 6E) APs: 9136 |
Cisco IOS XE Amsterdam 17.7 |
802.11ax (Wi-Fi 6) APs: 9124 AXE |
Cisco IOS XE Amsterdam 17.6 |
802.11ax (Wi-Fi 6) APs: 9124I and 9124D ROW |
Cisco IOS XE Amsterdam 17.5 |
802.11ax (Wi-Fi 6) APs: 9105I and 9105W |
Cisco IOS XE Amsterdam 17.3 |
802.11ax (Wi-Fi 6) APs: 9130E |
Cisco IOS XE Amsterdam 17.1 |
802.11ax (Wi-Fi 6) APs: 9120E, 9120P, 9130I |
Cisco IOS XE Gibraltar 16.12 |
802.11ax (Wi-Fi 6) APs: 9115, 9117, and 9120I |
Cisco IOS XE Gibraltar 16.11 |
Wave 2 APs—18xx, 1540, 1560, 2800, 3800, and 4800 |
Cisco IOS XE Gibraltar 16.10 |
Note:
1. C9136I AP features marked * are coming in future Cisco IOS XE Amsterdam 17.x1 releases
2. EWC does not support C9136I APs.
3. C9136I AP supports site survey mode. Other APs do not.
Table 2 Radio Frequency Feature Matrix for Cisco Catalyst Controllers and Embedded Wireless Controllers
Features |
CAT9105/9115/9117 |
CAT9120/9124/ 9130 |
CAT9136 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
RRM–DCA, TPC, CHDM |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
FRA-2.4 operations |
No |
Yes |
Yes |
No |
Yes |
No |
Band Select |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Load Balancing |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
RF Profiles |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
HDX Turbo Performance |
No |
Yes |
Yes |
No |
Yes |
Yes for 1560 |
Optimized Roaming |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
RX–SOP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes for 1560 |
DBS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Off-channel Scanning |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Off-channel Scan Defer |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Flex DFS |
Yes |
Yes |
Yes |
No |
Yes |
Yes for 1560 |
ClientLink |
TxBF |
TxBF |
TXBF |
TxBF |
Yes |
TxBF on 1540; Yes for 1560 |
A-MSDU/A-MPDU aggregation config per priority |
No for 9115 |
Yes |
Yes |
Yes |
Yes |
Yes |
EDRRM |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes for 1560 |
CleanAir/Spectrum Intelligence |
SI for 9105and 9115; No for 9117 ; |
CleanAir |
Yes* |
SI |
CleanAir |
SI/ CleanAir |
CleanAir Pro |
No |
No |
Yes* |
No |
No |
No |
Spectrum Expert |
No |
Yes |
Yes* |
No |
Yes |
Yes for 1560 |
ATF |
No |
No |
No |
No |
Yes |
Yes |
UL OFDMA |
No for 9117 |
Yes |
Yes |
No |
No |
No |
DL OFDMA |
Yes |
Yes |
Yes |
No |
No |
No |
UL MU MIMO |
No |
Yes, for C9124/C9130 |
Yes |
No |
No |
No |
DL MU MIMO |
Yes |
Yes |
Yes |
No |
Yes (VHT) |
No |
TWT |
No for C9105/C9117 |
Yes |
Yes |
No |
No |
No |
BSS Coloring |
No for C9117 |
Yes |
Yes |
No |
No |
No |
Wi-Fi 6 Analytics |
No for C9117 |
Yes |
Yes |
Yes |
Yes |
Yes |
iCap - Anomaly/Scheduled PCAP Capture |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
iCap - Full Packet Capture |
NA |
Yes, for C9124/C9130 |
Yes |
NA |
Yes for 4800 |
NA |
iCap - Spectrum Analysis |
NA |
Yes |
Yes* |
NA |
Yes |
Yes for 1560 |
Apple iOS Analytics |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Samsung Analytics |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Intel Analytics |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
6-GHz |
NA |
NA |
Yes |
NA |
NA |
NA |
Table 3 Security Feature Matrix for Cisco Catalyst Controllers and Embedded Wireless Controllers
Features |
CAT9105/9115/9117 |
CAT9120/9124/ 9130 |
CAT9136 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
WPA2/AES |
Yes |
Yes |
Yes (2.4/5GHz) |
Yes |
Yes |
Yes |
WPA3 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
WPA3 –Enterprise-192 |
No |
No for C9120; Yes, for C9124/C9130 |
Yes |
No |
No |
No |
TKIP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Peer-to-Peer Blocking |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Adaptive wIPS |
Yes |
Yes |
Yes* |
Yes |
Yes |
Yes |
Client Exclusion |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Rogue Detection |
Yes |
Yes |
Yes* |
Yes |
Yes |
Yes |
11r |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
11k |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
11v BSS Transition Management |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
802.11v DMS |
Yes |
Yes |
Yes |
No |
Yes |
No for 1540 |
PMF (802.11w) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Local Policy with QoS and AVC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
TrustSec SXP, SGT |
No for 9105 |
Yes |
Yes |
Yes |
Yes |
Yes |
WEP |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
LSC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
TCP MSS Adjust |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
MAC Authentication |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
OKC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
CCKM |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
NDP Encryption |
Yes |
No |
No |
No |
No |
No |
HW DTLS Encryption |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
802.1x on AP (EAP-FAST) |
Yes TLS 1.2 |
Yes TLS 1.2
|
Yes TLS 1.2 |
Yes TLS 1.2
|
Yes TLS 1.2
|
Yes TLS 1.2
|
802.1x on AP (EAP-PEAP, EAP-TLS) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Table 4 Services Feature Matrix for Cisco Catalyst Controllers and Embedded Wireless Controllers
Features |
CAT9105/9115/9117 |
CAT9120/9124/ 9130 |
CAT9136 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
AVC–Mark, Drop, RL |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
AAA Override–VLAN |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
AAA Override–ACL, QoS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
AAA Override–Session Timeout |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
AAA Override of AVC profile |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
AAA Override BW contract |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Local Profiling |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
RADIUS Profiling |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Per-User Bandwidth Contract |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Per-SSID Bandwidth contract |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
VideoStream |
Yes |
Yes |
Yes |
No |
No |
No |
CAC, WMM Policy |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
QoS Profiles |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Bonjour GW, mDNS AP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
LSS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Adaptive 11r |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Fastlane |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Fastlane+ |
No |
Yes, for C9130 and C9124 |
Yes |
No |
No |
No |
MAC Authentication |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
802.11u |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
BYOD, NAC RADIUS, CWA |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Power Policy ECO mode |
No |
Yes, for C9130/C9120 |
Yes |
No |
No |
No |
Table 5 Infrastructure Feature Matrix for Cisco Catalyst Controllers and Embedded Wireless Controllers
Features |
CAT9105/9115/9117 |
CAT9120/9124/ 9130 |
CAT9136 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
CDP, LLDP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Pre-image Download |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Fast SSID Change |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
BLE |
Yes |
Yes |
Yes* |
Yes, for 1830 and 1850. (1830 and 1850 require an additional USB dongle.) |
Yes. (2800 and 3800 require an additional USB dongle.) |
No |
Hyperlocation (AoA) |
No |
No |
No |
No |
Yes for 4800 |
No |
User idle timeout per WLAN |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
DHCP Option 60 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Passpoint |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Fast Locate |
No |
Yes |
Yes* |
No |
Yes |
No |
AP Multicast Mode |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Multicast VLAN |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
IGMPv3 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Client IPv6 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
AP PnP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
FlexConnect |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Local, Sniffer, and Monitor Mode |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
RFID Tagging |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
FIPS Certification |
No for 9105 |
Yes |
Future |
Yes |
Yes |
Yes |
Native IPv6 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Allow WGB Connection |
Yes |
Yes
|
Yes |
Yes |
Yes |
Yes |
Allow uWGB Connection |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
CAPWAP VLAN Tagging |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
DHCP Option 82 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
WebAuth–Internal/External |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Mesh Mode |
No |
Yes, for C9124(17.6.1) |
No |
1800i, 1810, 1815w, 1815t, 1840: No 1815i, 1815m, 1830, 1850: Yes |
Yes |
Yes |
Env Sensors (Humidity, Air quality, Temp) |
NA |
NA |
Yes |
NA |
NA |
NA |
Power Redundancy |
NA |
NA |
Yes |
NA |
NA |
NA |
Table 6 FlexConnect Feature Matrix for Cisco Catalyst Controllers and Embedded Wireless Controllers
Features |
CAT9105/9115/9117 |
CAT9120/9124/ 9130 |
CAT9136 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
Local Switching |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Central Switching |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
WLAN-VLAN Mapping |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Local Auth w/External RADIUS Server |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Local Auth internal Server |
No |
No |
No |
No |
No |
No |
TKIP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
WPA2/AES |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
OEAP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Webauth–Internal/External |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
EoGREv4/v6 on FlexConnect AP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
VLAN-based Central Switching |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
WIPS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
aWIPS |
Yes |
Yes |
Yes* |
Yes |
Yes |
Yes |
Rogue detection and Mitigation |
Yes |
Yes |
Yes* |
Yes |
Yes |
Yes |
CCKM Fast Roaming |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
802.11r |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Adaptive 11r |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
OKC |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
AAA Override–VLAN ID, ACL |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
AAA Override-VLAN Name |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
AAA Override–QoS |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
AAA Override-Session Timeout |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
AAA Override of AVC Profile |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth)) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
AAA Override Bandwidth contract |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
VLAN ACL |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
DNS ACL |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Limit Clients per WLAN/Radio |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
NetFlow Export |
No |
No |
No |
No |
No |
No |
WGB |
No |
No |
No |
No |
Yes |
Yes for 1560 |
Split Tunneling |
Yes |
Yes |
Yes |
1800i, 1810, 1815w, 1840, 1815i, 1815m, 1830, 1850: Yes 1815T: No |
Yes |
Yes |
Passive Clients |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Client exclusion |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
TrustSec SXP/SGT |
No |
No |
No |
Yes |
Yes |
Yes |
QoS Markings DSCP/dot1p Markings |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Native VLAN and VLAN Support on FlexConnect Group |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
AVC Policy |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Proxy ARP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Syslog (no support for facility setting) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
ClientLink |
TxBF |
TxBF |
TxBF |
TxBF |
Yes |
TxBF on 1540; Yes for 1560 |
Load Balancing |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Band Select |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Smart AP Image Upgrade |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Default Flex Group |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
NAT/PAT |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Ethernet fallback |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Bidirectional rate-limiting (Per Client, Per BSSID) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Bidirectional rate-limiting Per WLAN |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Peer to Peer Blocking |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
PMF (802.11w) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
BYOD, NAC RADIUS, CWA Flex Central Auth. |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
BYOD, NAC RADIUS, CWA Local Auth |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
MAC Authentication Flex Central Auth |
No for 9115 |
Yes |
Yes |
Yes |
Yes |
Yes |
GTK Randomization |
No |
No |
No |
No |
No |
No |
VideoStream |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Multicast Direct |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
CAC |
No |
No |
No |
No |
No |
No |
Umbrella |
No |
No |
No |
No |
No |
No |
WSA |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
mDNS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
This section lists the support information for various features in Cisco Wave 2 and 802.11ax (Wi-Fi 6) Access Points in Cisco AireOS releases.
For information about the Cisco AireOS releases in which the APs were first supported, see the Software Release Support for Specific Access Point Modules section of the Cisco Wireless Solutions Software Compatibility Matrix document at:
https://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html
Note:
■ The Cisco Catalyst 9105 APs were first supported in Cisco AireOS Release 8.10.130.0
■ The Cisco Catalyst 9130 APs were first supported in Cisco AireOS Release 8.10.105.0.
■ The Cisco Catalyst 9120 APs were first supported in Cisco AireOS Release 8.9.111.0.
■ The Cisco Catalyst 9115 and 9117 APs were first supported in Cisco AireOS Release 8.9.100.0.
Note: This document is updated for Cisco AireOS Release 8.10.x.
Table 7 Radio Frequency Feature Matrix for Cisco AireOS Controllers and Cisco Mobility Express
Features |
CAT9105/9115/9117 |
CAT9120/9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
|
RRM–DCA, TPC, CHDM |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
FRA |
No |
No |
Yes |
Yes |
No |
No |
Yes |
Yes |
No |
No |
Band Select |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Load Balancing |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
RF Profiles |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
HDX Turbo Performance |
No |
No |
Yes |
Yes |
No |
No |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
Optimized Roaming |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
RX–SOP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes for 1560; No for 1540 |
Yes for 1560; No for 1540 |
DBS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Off-channel Scanning |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Off-channel Scan Defer |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Flex DFS |
No |
No |
Yes |
Yes |
No |
No |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
ClientLink |
TxBF |
TxBF |
TxBF |
TxBF |
TxBF |
TxBF |
Yes |
Yes |
TxBF on 1540; Yes for 1560 |
TxBF on 1540; Yes for 1560 |
A-MSDU/A-MPDU aggregation config per priority |
No for 9115 |
No for 9115 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
EDRRM - Wi-Fi |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
EDRRM - Non-Wi-Fi |
No |
No |
Yes |
Yes |
No |
No |
Yes |
Yes |
No for 1540; Yes for 1560 |
No for 1540; Yes for 1560 |
Configurable EDCA |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
CleanAir/Spectrum Intelligence |
No |
No |
CleanAir |
CleanAir |
Deprecated |
Deprecated |
CleanAir |
CleanAir |
SI for 1540; CleanAir for 1560 |
SI for 1540; CleanAir for 1560 |
SE Connect |
No |
No |
Yes |
Yes |
No |
No |
Yes |
Yes |
No for 1540; Yes for 1560 |
No for 1540; Yes for 1560 |
Cisco DNA Center Spectrum Analyzer |
NA |
NA |
Yes |
Yes |
NA |
NA |
Yes |
Yes |
No for 1540; Yes for 1560 |
No for 1540; Yes for 1560 |
ATF |
No |
No |
No |
No |
No |
No |
Yes |
Yes |
|
|
UL OFDMA |
No for 9117 |
No for 9117 |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
DL OFDMA |
Yes |
Yes |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
UL MU MIMO |
No |
No |
Yes, for C9124/ C9130 |
Yes, for C9124/C9130 |
No |
No |
No |
No |
No |
No |
DL MU MIMO |
Yes |
Yes |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
TWT |
No for C9105/C9117 |
No for C9105/C9117 |
Yes |
Yes |
NA |
NA |
NA |
NA |
NA |
NA |
BSS Coloring |
No for C9117 |
No for C9117 |
Yes |
Yes |
NA |
NA |
NA |
NA |
NA |
NA |
Wi-Fi 6 Analytics |
No for C9117 |
No for C9117 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
iCap - Anomaly/Scheduled PCAP Capture |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
iCap - Full Packet Capture |
NA |
NA |
Yes for C9130 |
Yes for C9130 |
NA |
NA |
Yes |
Yes |
NA |
NA |
iCap - Spectrum Analysis |
NA |
NA |
Yes for 9130 |
Yes for 9130 |
NA |
NA |
Yes for 4800 |
Yes for 4800 |
Yes for 1560 |
Yes for 1560 |
Apple iOS Analytics |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Samsung Analytics |
NA |
NA |
NA |
NA |
NA |
NA |
NA |
NA |
NA |
NA |
Table 8 Security Feature Matrix for Cisco AireOS Controllers and Cisco Mobility Express
Features |
CAT9105/9115/9117 |
CAT9120/9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
|
WPA2/AES |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
WPA3 – |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
WPA3 –Enterprise-192 |
No |
No |
No for C9120; Yes for C9130 |
No for C9120; Yes for C9130 |
No |
No |
No |
No |
No |
No |
TKIP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Peer-to-Peer Blocking |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Wireless IDS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Adaptive wIPS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
ELM |
No for 9115; limited support in 9117 |
No for 9115; limited support in 9117 |
Yes, but limited |
Yes, but limited |
Yes, but limited |
Yes, but limited |
Yes, but limited |
Yes, but limited |
Yes, but limited |
Yes, but limited |
Client Exclusion |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Rogue Detection |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
11r |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
11k |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
11v BSS Transition Management |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
802.11v DMS |
Yes |
Yes |
Yes |
Yes |
No |
No |
Yes |
Yes |
No for 1540 |
No for 1540 |
PMF (802.11w) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Local Policy with QoS and AVC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
TrustSec SXP, SGT |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
WEP |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Wi-Fi Direct blocking |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
LSC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
TCP MSS Adjust |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
MAC Authentication |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Facebook Express Wi-Fi - Web Authentication |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Facebook Express Wi-Fi - MAC Authentication |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
OKC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
SKC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
CCKM |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
NDP Encryption |
Yes |
Yes |
No |
No |
Yes |
Yes |
No |
No |
No |
No |
Software Data DTLS Encryption |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
802.1x on AP (EAP-FAST |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
802.1x on AP (EAP-PEAP, EAP-TLS) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Table 9 Services Feature Matrix for Cisco AireOS Controllers and Cisco Mobility Express
Features |
CAT9105/9115/9117 |
CAT9120/9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
|
AVC–Mark, Drop, RL |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
AAA Override–VLAN |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
AAA Override–ACL, QoS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
AAA Override–Session Timeout |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
AAA Override of AVC profile |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
AAA Override BW contract |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Local Profiling |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
RADIUS Profiling |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Per-User Bandwidth Contract |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Per-SSID Bandwidth contract |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
VideoStream |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
CAC, WMM Policy |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
QoS Profiles |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Bonjour GW, mDNS AP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
LSS |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Priority MAC |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Adaptive 11r |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Fastlane |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
802.11u |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Full CCX Support |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
BYOD, NAC RADIUS, CWA |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Table 10 Infrastructure Feature Matrix for Cisco AireOS Controllers and Cisco Mobility Express
Features |
CAT9105/9115/9117 |
CAT9120/9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
|
CDP, LLDP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Pre-image Download |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Fast SSID Change |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Hyperlocation |
No |
No |
No |
No |
No |
No |
Yes for 4800 |
No |
No |
No |
Fast CAPWAP Heartbeat |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Client Packet Capture |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
User idle timeout per WLAN |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
DHCP Option 60 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Passpoint |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Fast Locate |
No |
No |
Yes |
No |
No |
No |
Yes |
No |
Yes for 1560 |
No |
Multicast buffer configuration per WLAN |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
AP Multicast |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
AP Multicast Mode |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Multicast VLAN |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
IGMPv3 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Client IPv6 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
AP PnP |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
FlexConnect |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Local, Sniffer, and Monitor Mode |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
RFID Tagging |
Yes |
Yes |
Yes |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
FIPS Certification |
No for 9105 |
No for 9105 |
Yes |
Yes |
Yes |
Yes |
Yes for 2800 and 3800 (Release 8.5); No for 4800 |
Yes for 2800 and 3800 (Release 8.5); No for 4800 |
No for 1540; Yes for 1560 (Release 8.5) |
No for 1540; Yes for 1560 (Release 8.5) |
Native IPv6 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Allow WGB Connection |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Allow uWGB Connection |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
CAPWAP VLAN Tagging |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
DHCP Option 82 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
WebAuth–Internal/External |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Mesh Mode |
No |
No |
No |
No |
1800i, 1810, 1815w, 1815t, 1840: No 1815i,1815m, 1830, 1850: Yes ME (1815m): No |
1800i, 1810, 1815w, 1815t, 1840: No 1815i,1815m, 1830, 1850: Yes ME (1815m): No |
Yes |
Yes |
Yes |
Yes |
Note: Even though some AP radios support BLE, AireOS deployments do not support the BLE feature.
Table 11 FlexConnect Feature Matrix for Cisco AireOS Controllers and Cisco Mobility Express
Features |
CAT9105/9115/9117 |
CAT9120/9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
|
Local Switching |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Central Switching |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
WLAN-VLAN Mapping |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Local Auth w/External RADIUS Server |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Local Auth internal Server |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
TKIP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
WPA2/AES |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
OEAP |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Webauth–Internal/External |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
EoGREv4/v6 on FlexConnect AP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
VLAN-based Central Switching |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
WIPS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
aWIPS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Rogue detection and Mitigation |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
RLDP |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
CCKM Fast Roaming |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
802.11r |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Adaptive 11r |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
OKC |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
AAA Override–VLAN ID |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
AAA Override-VLAN Name |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
AAA Override–ACL, QoS |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
AAA Override-Session Timeout |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
AAA Override of AVC Profile |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
AAA Override Bandwidth contract |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
VLAN ACL |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
DNS ACL |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
L2 ACL |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
Limit Clients per WLAN/Radio |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
NetFlow Export |
Yes-Flex-Central Auth, Flex-Local Auth; No-ME, Local Mode |
Yes-Flex-Central Auth, Flex-Local Auth; No-ME, Local Mode |
Yes-Flex-Central Auth, Flex-Local Auth; No-ME, Local Mode |
Yes-Flex-Central Auth, Flex-Local Auth; No-ME, Local Mode |
Yes-Flex-Central Auth, Flex-Local Auth; No-ME, Local Mode |
Yes-Flex-Central Auth, Flex-Local Auth; No-ME Local Mode |
Yes-Flex-Central Auth, Flex-Local Auth; No-ME, Local Mode |
Yes-Flex-Central Auth, Flex-Local Auth; No-ME, Local Mode |
Yes-Flex-Central Auth, Flex-Local Auth; No-ME, Local Mode |
Yes-Flex-Central Auth, Flex-Local Auth; No-ME, Local Mode |
WGB |
No |
No |
No |
No |
No |
No |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
Split Tunneling |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Passive Clients |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Client exclusion |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
TrustSec SXP/SGT |
No |
No |
No |
No |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
QoS Markings DSCP/dot1p Markings |
Yes |
Yes, but no CAPWAP support on ME |
Yes |
Yes, but no CAPWAP support on ME |
Yes |
Yes, but no CAPWAP support on ME |
Yes |
Yes, but no CAPWAP support on ME |
Yes |
Yes, but no CAPWAP support on ME |
CleanAir |
No |
No |
No |
No |
No |
No |
Yes |
Yes |
Yes |
Yes |
Native VLAN and VLAN Support on FlexConnect Group |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
AVC Policy |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Proxy ARP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Syslog (no support for facility setting) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
ClientLink |
TxBF |
TxBF |
TxBF |
TxBF |
TxBF |
TxBF |
Yes |
Yes |
TxBF for 1540; Yes for 1560 |
TxBF for 1540; Yes for 1560 |
Load Balancing |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Band Select |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Smart AP Image Upgrade |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Default Flex Group |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
NAT/PAT |
Yes |
No |
Yes |
No |
Yes |
Centralized NAT |
Yes |
Centralized NAT |
Yes |
Centralized NAT |
Ethernet fallback |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode, ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode, ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode, ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode, ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode, ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode, ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode, ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode, ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode, ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode, ME |
PPPoE client |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode, ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode, ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode, ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode, ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode, ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode, ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode, ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode, ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode, ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode, ME |
Bidirectional rate-limiting (Per Client, Per BSSID) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Bidirectional rate-limiting Per WLAN |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Peer to Peer Blocking |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
PMF (802.11w) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
BYOD, NAC RADIUS, CWA Flex Central Auth. |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
BYOD, NAC RADIUS, CWA Local Auth |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
MAC Authentication Flex Central Auth |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
MAC Authentication Flex Local Auth |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
GTK Randomization |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
VideoStream |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Multicast Direct |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
CAC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Data DTLS Encryption |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Umbrella |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
WSA |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
TLS Tunnel |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
mDNS |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
■ To receive timely, relevant information from Cisco, sign up at Cisco Profile Manager.
■ To get the business impact you’re looking for with the technologies that matter, visit Cisco Services.
■ To submit a service request, visit Cisco Support.
■ To discover and browse secure, validated enterprise-class apps, products, solutions, and services, visit Cisco DevNet.
■ To obtain general networking, training, and certification titles, visit Cisco Press.
■ To find warranty information for a specific product or product family, access Cisco Warranty Finder.
Cisco Bug Search Tool (BST) is a web-based tool that acts as a gateway to the Cisco bug tracking system that maintains a comprehensive list of defects and vulnerabilities in Cisco products and software. BST provides you with detailed defect information about your products and software.
To provide feedback about Cisco technical documentation, use the feedback form available in the right pane of every online document.
© 2022 Cisco Systems, Inc. All rights reserved.