Feature Matrix for Wave 2 and 802.11ax (Wi-Fi 6) Access Points
Available Languages
Feature Matrix for Cisco Wave 2 and 802.11ax (Wi-Fi 6) Access Points
First Published: April 23, 2019
Last Updated: September 17, 2020
Table of Contents
Support in Cisco IOS XE Releases
Radio Frequency Feature Matrix (IOS XE)
Security Feature Matrix (IOS XE)
Services Feature Matrix (IOS XE)
Infrastructure Feature Matrix (IOS XE)
FlexConnect Feature Matrix (IOS XE)
Support in Cisco AireOS Releases
Radio Frequency Feature Matrix (AireOS)
Security Feature Matrix (AireOS)
Services Feature Matrix (AireOS)
Infrastructure Feature Matrix (AireOS)
FlexConnect Feature Matrix (AireOS)
Support in Cisco IOS XE Releases
This section lists support information for various features in Cisco Wave 2 and 802.11ax (Wi-Fi 6) Access Points in Cisco IOS XE releases.
Note: For a better reading experience, we recommend that you view this document with your browser window in full-screen mode.
Table 1 Access Points and First Supported Cisco IOS XE Release
| Access Points |
First Supported Cisco IOS XE Release |
| Wave 2 APs—18xx, 1540, 1560, 2800, 3800, and 4800 |
Cisco IOS XE Gibraltar 16.10 |
| 802.11ax (Wi-Fi 6) APs: 9115, 9117, and 9120I |
Cisco IOS XE Gibraltar 16.11 |
| 802.11ax (Wi-Fi 6) APs: 9120E, 9120P, 9130I |
Cisco IOS XE Gibraltar 16.12 |
| 802.11ax (Wi-Fi 6) APs: 9130E |
Cisco IOS XE Amsterdam 17.1 |
| 802.11ax (Wi-Fi 6) APs: 9105I and 9105W |
Cisco IOS XE Amsterdam 17.3 |
Note: This document is updated for Cisco IOS XE Amsterdam 17.3.
Radio Frequency Feature Matrix (IOS XE)
Table 2 Radio Frequency Feature Matrix for Cisco Catalyst Controllers and Embedded Wireless Controllers
| Features |
CAT9105/9115/9117 |
CAT9120/9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
| Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
|
| RRM–DCA, TPC, CHDM |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| FRA |
No |
No |
Yes |
Yes |
No |
No |
Yes |
Yes |
No |
No |
| Band Select |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Load Balancing |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| RF Profiles |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| HDX Turbo Performance |
No |
No |
Yes |
Yes |
No |
No |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
| Optimized Roaming |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| RX–SOP |
Yes |
Yes |
Yes |
Yes |
No |
No |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
| DBS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Off-channel Scanning |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Off-channel Scan Defer |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Flex DFS |
Yes |
Yes |
Yes |
Yes |
No |
No |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
| ClientLink |
TxBF |
TxBF |
TxBF |
TxBF |
TxBF |
TxBF |
Yes |
Yes |
TxBF on 1540; Yes for 1560 |
TxBF on 1540; Yes for 1560 |
| A-MSDU/A-MPDU aggregation config per priority |
No for 9115 |
No for 9115 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| EDRRM |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
| Configurable EDCA |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| CleanAir/Spectrum Intelligence |
SI for 9115; No for 9105 and 9117 |
SI for 9115; No for 9105 and 9117 |
CleanAir |
CleanAir |
SI |
SI |
CleanAir |
CleanAir |
SI/CleanAir |
SI/CleanAir |
| Spectrum Expert |
No |
No |
Yes |
Yes |
No |
No |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
| ATF |
No |
No |
No |
No |
No |
No |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
| UL OFDMA |
No for 9117 |
No for 9117 |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
| DL OFDMA |
Yes |
Yes |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
| UL MU MIMO |
No |
No |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
| DL MU MIMO |
Yes |
Yes |
Yes for 9130 |
Yes for 9130 |
No |
No |
No |
No |
No |
No |
| TWT |
No |
No |
Yes for 9130 |
Yes for 9130 |
No |
No |
No |
No |
No |
No |
| BSS Coloring |
No for 9117 |
No for 9117 |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
| Wi-Fi 6 Analytics |
No for 9117 |
No for 9117 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| iCap - Anomaly/Scheduled PCAP Capture |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| iCap - Full Packet Capture |
No |
No |
Yes for 9130 |
Yes for 9130 |
No |
No |
Yes for 4800 |
Yes for 4800 |
Yes for 1560 |
Yes for 1560 |
| iCap - Specturm Analysis |
No |
No |
Yes |
Yes |
No |
No |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
| Apple iOS Analytics |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Samsung Analytics |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Security Feature Matrix (IOS XE)
Table 3 Security Feature Matrix for Cisco Catalyst Controllers and Embedded Wireless Controllers
| Features |
CAT9105/9115/9117 |
CAT9120/9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
| Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
|
| WPA2/AES |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WPA3 – Enterprise |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WPA3 –Enterprise-192 |
No for 9115; Yes for 9117 |
No for 9115; Yes for 9117 |
No for 9120; Yes for 9130 |
No for 9120; Yes for 9130 |
No |
No |
No |
No |
No |
No |
| TKIP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Peer-to-Peer Blocking |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Wireless IDS |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| Adaptive wIPS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Client Exclusion |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Rogue Detection |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 11r |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 11k |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 11v BSS Transition Management |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 802.11v DMS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| PMF (802.11w) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Local Policy with QoS and AVC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| TrustSec SXP, SGT |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WEP |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
| Wi-Fi Direct blocking |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| LSC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| TCP MSS Adjust |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| MAC Authentication |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| OKC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| CCKM |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| NDP Encryption |
Yes |
Yes |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
| Software Data DTLS Encryption |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 802.1x on AP (EAP-FAST) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 802.1x on AP (EAP-PEAP, EAP-TLS) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Services Feature Matrix (IOS XE)
Table 4 Services Feature Matrix for Cisco Catalyst Controllers and Embedded Wireless Controllers
| Features |
CAT9105/9115/9117 |
CAT9120/9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
| Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
|
| AVC–Mark, Drop, RL |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override–VLAN |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override–ACL, QoS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override–Session Timeout |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override of AVC profile |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override BW contract |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Local Profiling |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| RADIUS Profiling |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Per-User Bandwidth Contract |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Per-SSID Bandwidth contract |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| VideoStream |
Yes |
Yes |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
| CAC, WMM Policy |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| QoS Profiles |
No |
No |
Yes |
Yes |
No |
No |
Yes |
Yes |
No |
No |
| Bonjour GW, mDNS AP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| LSS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Priority MAC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Adaptive 11r |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Fastlane |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| MAC Authentication |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 802.11u |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Full CCX Support |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| BYoD, NAC RADIUS, CWA |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Infrastructure Feature Matrix (IOS XE)
Table 5 Infrastructure Feature Matrix for Cisco Catalyst Controllers and Embedded Wireless Controllers
| Features |
CAT9105/9115/9117 |
CAT9120/9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
| Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
|
| CDP, LLDP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Pre-image Download |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Fast SSID Change |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| BLE |
Yes |
Yes |
Yes |
Yes |
No |
No |
Yes for 4800; No for 2800 and 3800 |
Yes for 4800; No for 2800 and 3800 |
No |
No |
| Hyperlocation |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| Fast CAPWAP Heartbeat |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| Client Packet Capture |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| User idle timeout per WLAN |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| DHCP Option 60 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Passpoint |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Fast Locate |
No |
No |
Yes |
Yes |
No |
No |
No |
No |
Yes for 1560 |
Yes for 1560 |
| Multicast buffer configuration per WLAN |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| AP Multicast Mode |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Multicast VLAN |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| IGMPv3 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Client IPv6 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AP PnP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| FlexConnect |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Local, Sniffer and Monitor Mode |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| RFID Tagging |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| FIPS Certification |
No for 9105 |
No for 9105 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Native IPv6 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WGB Host |
No for 9105 |
No |
Yes |
No |
Yes |
Yes |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
| CAPWAP VLAN Tagging |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| DHCP Option 82 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WebAuth–Internal/External |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Mesh Mode |
No |
No |
No |
No |
1800i, 1810, 1815w, 1815t, 1840: No 1815i, 1815m, 1830, 1850: Yes |
1800i, 1810, 1815w, 1815t, 1840: No 1815i, 1815m, 1830, 1850: Yes |
Yes |
Yes |
Yes |
Yes |
FlexConnect Feature Matrix (IOS XE)
Table 6 FlexConnect Feature Matrix for Cisco Catalyst Controllers and Embedded Wireless Controllers
| Features |
CAT9105/9115/9117 |
CAT9120/9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
| Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
|
| Local Switching |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Central Switching |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| WLAN-VLAN Mapping |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Local Auth w/External RADIUS Server |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Local Auth internal Server |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| TKIP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WPA2/AES |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| OEAP |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| Webauth–Internal/External |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
| EoGREv4/v6 on FlexConnect AP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| VLAN-based Central Switching |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| WIPS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| aWIPS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Rogue detection and Mitigation |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| RLDP |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| CCKM Fast Roaming |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
| 802.11r |
Yes - Flex (Central Auth) , Local Mode & EWC Mode, No - Flex (Local Auth) |
Yes - Flex (Central Auth) , Local Mode & EWC Mode, No - Flex (Local Auth) |
Yes - Flex (Central Auth) , Local Mode & EWC Mode, No - Flex (Local Auth) |
Yes - Flex (Central Auth) , Local Mode & EWC Mode, No - Flex (Local Auth) |
Yes - Flex (Central Auth) , Local Mode & EWC Mode, No - Flex (Local Auth) |
Yes - Flex (Central Auth) , Local Mode & EWC Mode, No - Flex (Local Auth) |
Yes - Flex (Central Auth) , Local Mode & EWC Mode, No - Flex (Local Auth) |
Yes - Flex (Central Auth) , Local Mode & EWC Mode, No - Flex (Local Auth) |
Yes - Flex (Central Auth) , Local Mode & EWC Mode, No - Flex (Local Auth) |
Yes - Flex (Central Auth) , Local Mode & EWC Mode, No - Flex (Local Auth) |
| Adaptive 11r |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| OKC |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
| AAA Override–VLAN ID, ACL |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override-VLAN Name |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
| AAA Override–ACL, QoS |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
| AAA Override-Session Timeout |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override of AVC Profile |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
| AAA Override Bandwidth contract |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
| VLAN ACL |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
| DNS ACL |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
| L2 ACL |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
| Limit Clients per WLAN/Radio |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| NetFlow Export |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| WGB Client |
No |
No |
No |
No |
No |
No |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
| Split Tunneling |
Yes |
No |
Yes |
No |
1800i, 1810, 1815w, 1840, 1815i, 1815m, 1830, 1850: Yes 1815T: No |
No |
Yes |
No |
Yes |
No |
| Passive Clients |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Client exclusion |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| TrustSec SXP/SGT |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| QoS Markings DSCP/dot1p Markings |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Native VLAN and VLAN Support on FlexConnect Group |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AVC Policy |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Proxy ARP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Syslog (no support for facility setting) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| ClientLink |
TxBF |
TxBF |
TxBF |
TxBF |
TxBF |
TxBF |
Yes |
Yes |
TxBF on 1540; Yes for 1560 |
TxBF on 1540; Yes for 1560 |
| Load Balancing |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Band Select |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Smart AP Image Upgrade |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Default Flex Group |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| NAT/PAT |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Ethernet fallback |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| PPPoE client |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| Bidirectional rate limiting (Per Client, Per BSSID) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Bidirectional rate limiting Per WLAN |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Peer to Peer Blocking |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| PMF (802.11w) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| BYOD, NAC RADIUS, CWA Flex Central Auth. |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
| BYOD, NAC RADIUS, CWA Local Auth |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
| MAC Authentication Flex Central Auth |
No for 9115,No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No for 9115,No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
| MAC Authentication Flex Local Auth |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, EWC Mode, Flex (Central Auth) |
| GTK Randomization |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| VideoStream |
No |
No |
No |
No |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Data DTLS Encryption |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Umbrella |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| WSA |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| TLS Tunnel |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| mDNS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Support in Cisco AireOS Releases
This section lists the support information for various features in Cisco Wave 2 and 802.11ax (Wi-Fi 6) Access Points in Cisco AireOS releases.
For information about the Cisco AireOS releases in which the APs were first supported, see the Software Release Support for Specific Access Point Modules section of the Cisco Wireless Solutions Software Compatibility Matrix document at:
https://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html
Note:
■ The Cisco Catalyst 9115 and 9117 APs were first supported in Cisco AireOS Release 8.9.100.0.
■ The Cisco Catalyst 9120 APs were first supported in Cisco AireOS Release 8.9.111.0.
■ The Cisco Catalyst 9130 APs were first supported in Cisco AireOS Release 8.10.105.0.
■ The Cisco Catalyst 9105 APs were first supported in Cisco AireOS Release 8.10.130.0.
Note: This document is updated for Cisco AireOS Release 8.10.x.
Radio Frequency Feature Matrix (AireOS)
Table 7 Radio Frequency Feature Matrix for Cisco AireOS Controllers and Cisco Mobility Express
| Features |
CAT9105/9115/9117 |
CAT9120/9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
| Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
|
| RRM–DCA, TPC, CHDM |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| FRA |
No |
No |
Yes |
Yes |
No |
No |
Yes |
Yes |
No |
No |
| Band Select |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Load Balancing |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| RF Profiles |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| HDX Turbo Performance |
No |
No |
Yes |
Yes |
No |
No |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
| Optimized Roaming |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| RX–SOP |
Yes |
Yes |
Yes |
Yes |
Yes for 1852 only |
Yes for 1852 only |
Yes |
Yes |
Yes for 1560; No for 1540 |
Yes for 1560; No for 1540 |
| DBS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Off-channel Scanning |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Off-channel Scan Defer |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Flex DFS |
No |
No |
Yes |
Yes |
No |
No |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
| ClientLink |
TxBF |
TxBF |
TxBF |
TxBF |
TxBF |
TxBF |
Yes |
Yes |
TxBF on 1540; Yes for 1560 |
TxBF on 1540; Yes for 1560 |
| A-MSDU/A-MPDU aggregation config per priority |
No for 9115 |
No for 9115 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| EDRRM - Wi-Fi |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| EDRRM - Non-Wi-Fi |
No |
No |
Yes |
Yes |
No |
No |
Yes |
Yes |
No for 1540; Yes for 1560 |
No for 1540; Yes for 1560 |
| Configurable EDCA |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
| CleanAir/Spectrum Intelligence |
Yes for 9117 |
Yes for 9117 |
CleanAir |
CleanAir |
Deprecated |
Deprecated |
CleanAir |
CleanAir |
SI for 1540; CleanAir for 1560 |
SI for 1540; CleanAir for 1560 |
| SE Connect |
No |
No |
Yes |
Yes |
No |
No |
Yes |
Yes |
No for 1540; Yes for 1560 |
No for 1540; Yes for 1560 |
| Cisco DNA Center Spectrum Analyzer |
NA |
NA |
No |
No |
NA |
NA |
Yes |
Yes |
No for 1540; Yes for 1560 |
No for 1540; Yes for 1560 |
| ATF |
No |
No |
No |
No |
No |
No |
Yes |
Yes |
No for 1540; Yes for 1560 |
No for 1540; Yes for 1560 |
| UL OFDMA |
Yes for 9115; No for 9117 |
Yes for 9115; No for 9117 |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
| DL OFDMA |
Yes |
Yes |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
| UL MU MIMO |
No |
No |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
| DL MU MIMO |
Yes |
Yes |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
| TWT |
No |
No |
Yes for 9130 |
Yes for 9130 |
NA |
NA |
NA |
NA |
NA |
NA |
| BSS Coloring |
Yes for 9115; No for 9117 |
Yes for 9115; No for 9117 |
Yes |
Yes |
NA |
NA |
NA |
NA |
NA |
NA |
| Wi-Fi 6 Analytics |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| iCap - Anomaly/Scheduled PCAP Capture |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| iCap - Full Packet Capture |
No |
No |
Yes for 9130 |
Yes for 9130 |
No |
No |
Yes |
Yes |
No |
No |
| iCap - Specturm Analysis |
No |
No |
Yes for 9130 |
Yes for 9130 |
No |
No |
Yes for 4800 |
Yes for 4800 |
Yes for 1560 |
Yes for 1560 |
| Apple iOS Analytics |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Samsung Analytics |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
Security Feature Matrix (AireOS)
Table 8 Security Feature Matrix for Cisco AireOS Controllers and Cisco Mobility Express
| Features |
CAT9105/9115/9117 |
CAT9120/9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
| Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
|
| WPA2/AES |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WPA3 – Enterprise |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WPA3 –Enterprise-192 |
No for 9115; Yes for 9117 |
No for 9115; Yes for 9117 |
No for 9120; Yes for 9130 |
No for 9120; Yes for 9130 |
No |
No |
No |
No |
No |
No |
| TKIP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Peer-to-Peer Blocking |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Wireless IDS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Adaptive wIPS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| ELM |
No for 9115; limited support in 9117 |
No for 9115; limited support in 9117 |
Yes, but limited |
Yes, but limited |
Yes, but limited |
Yes, but limited |
Yes, but limited |
Yes, but limited |
Yes, but limited |
Yes, but limited |
| Client Exclusion |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Rogue Detection |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 11r |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 11k |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 11v BSS Transition Management |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 802.11v DMS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| PMF (802.11w) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Local Policy with QoS and AVC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| TrustSec SXP, SGT |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WEP |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
| Wi-Fi Direct blocking |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| LSC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| TCP MSS Adjust |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| MAC Authentication |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Facebook Express Wi-Fi - Web Authentication |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| Facebook Express Wi-Fi - MAC Authentication |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| OKC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| SKC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| CCKM |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| NDP Encryption |
Yes |
Yes |
No |
No |
Yes |
Yes |
No |
No |
No |
No |
| Software Data DTLS Encryption |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 802.1x on AP (EAP-FAST |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 802.1x on AP (EAP-PEAP, EAP-TLS) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Services Feature Matrix (AireOS)
Table 9 Services Feature Matrix for Cisco AireOS Controllers and Cisco Mobility Express
| Features |
CAT9105/9115/9117 |
CAT9120/9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
| Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
|
| AVC–Mark, Drop, RL |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override–VLAN |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override–ACL, QoS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override–Session Timeout |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override of AVC profile |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override BW contract |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Local Profiling |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| RADIUS Profiling |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Per-User Bandwidth Contract |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Per-SSID Bandwidth contract |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| VideoStream |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| CAC, WMM Policy |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| QoS Profiles |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Bonjour GW, mDNS AP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| LSS |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| Priority MAC |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| Adaptive 11r |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Fastlane |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 802.11u |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Full CCX Support |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| BYoD, NAC RADIUS, CWA |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Infrastructure Feature Matrix (AireOS)
Table 10 Infrastructure Feature Matrix for Cisco AireOS Controllers and Cisco Mobility Express
| Features |
CAT9105/9115/9117 |
CAT9120/9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
| Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
|
| CDP, LLDP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Pre-image Download |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Fast SSID Change |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| BLE |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
No |
No |
| Hyperlocation |
No |
No |
No |
No |
No |
No |
Yes for 4800 |
No |
No |
No |
| Fast CAPWAP Heartbeat |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| Client Packet Capture |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
| User idle timeout per WLAN |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| DHCP Option 60 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Passpoint |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Fast Locate |
No |
No |
Yes |
No |
No |
No |
Yes |
No |
Yes for 1560 |
No |
| Multicast buffer configuration per WLAN |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| AP Multicast |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AP Multicast Mode |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| Multicast VLAN |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| IGMPv3 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Client IPv6 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AP PnP |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| FlexConnect |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Local, Sniffer and Monitor Mode |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| RFID Tagging |
Yes |
Yes |
Yes |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| FIPS Certification |
No for 9105 |
No for 9105 |
Yes |
Yes |
Yes |
Yes |
Yes for 2800 and 3800 (Release 8.5); No for 4800 |
Yes for 2800 and 3800 (Release 8.5); No for 4800 |
No for 1540; Yes for 1560 (Release 8.5) |
No for 1540; Yes for 1560 (Release 8.5) |
| Native IPv6 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WGB Host |
No for 9105 |
Yes |
Yes |
Yes |
No |
No |
Yes |
Yes |
Yes |
Yes |
| CAPWAP VLAN Tagging |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| DHCP Option 82 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WebAuth–Internal/External |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Mesh Mode |
No |
No |
No |
No |
1800i, 1810, 1815w, 1815t, 1840: No 1815i,1815m, 1830, 1850: Yes ME (1815m): No |
1800i, 1810, 1815w, 1815t, 1840: No 1815i,1815m, 1830, 1850: Yes ME (1815m): No |
Yes |
Yes |
Yes |
Yes |
FlexConnect Feature Matrix (AireOS)
Table 11 FlexConnect Feature Matrix for Cisco AireOS Controllers and Cisco Mobility Express
| Features |
CAT9105/9115/9117 |
CAT9120/9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
| Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
|
| Local Switching |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Central Switching |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| WLAN-VLAN Mapping |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Local Auth w/External RADIUS Server |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Local Auth internal Server |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| TKIP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WPA2/AES |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| OEAP |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| Webauth–Internal/External |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
| EoGREv4/v6 on FlexConnect AP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| VLAN-based Central Switching |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| WIPS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| aWIPS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Rogue detection and Mitigation |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| RLDP |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| CCKM Fast Roaming |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
| 802.11r |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
| Adaptive 11r |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| OKC |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
| AAA Override–VLAN ID |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override-VLAN Name |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
| AAA Override–ACL, QoS |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
| AAA Override-Session Timeout |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override of AVC Profile |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
| AAA Override Bandwidth contract |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
| VLAN ACL |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
| DNS ACL |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
| L2 ACL |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
| Limit Clients per WLAN/Radio |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| NetFlow Export |
Yes-Flex-Central Auth,Flex-Local Auth; No-ME,Local Mode |
Yes-Flex-Central Auth,Flex-Local Auth; No-ME,Local Mode |
Yes-Flex-Central Auth,Flex-Local Auth; No-ME,Local Mode |
Yes-Flex-Central Auth,Flex-Local Auth; No-ME,Local Mode |
Yes-Flex-Central Auth,Flex-Local Auth; No-ME,Local Mode |
Yes-Flex-Central Auth,Flex-Local Auth; No-ME,Local Mode |
Yes-Flex-Central Auth,Flex-Local Auth; No-ME,Local Mode |
Yes-Flex-Central Auth,Flex-Local Auth; No-ME,Local Mode |
Yes-Flex-Central Auth,Flex-Local Auth; No-ME,Local Mode |
Yes-Flex-Central Auth,Flex-Local Auth; No-ME,Local Mode |
| WGB Client |
No |
No |
No |
No |
No |
No |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
| Split Tunneling |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| Passive Clients |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Client exclusion |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| TrustSec SXP/SGT |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| QoS Markings DSCP/dot1p Markings |
Yes |
Yes, but no CAPWAP support on ME |
Yes |
Yes, but no CAPWAP support on ME |
Yes |
Yes, but no CAPWAP support on ME |
Yes |
Yes, but no CAPWAP support on ME |
Yes |
Yes, but no CAPWAP support on ME |
| CleanAir |
No |
No |
No |
No |
No |
No |
Yes |
Yes |
Yes |
Yes |
| Native VLAN and VLAN Support on FlexConnect Group |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AVC Policy |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Proxy ARP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Syslog (no support for facility setting) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| ClientLink |
TxBF |
TxBF |
TxBF |
TxBF |
TxBF |
TxBF |
Yes |
Yes |
TxBF for 1540; Yes for 1560 |
TxBF for 1540; Yes for 1560 |
| Load Balancing |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Band Select |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Smart AP Image Upgrade |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Default Flex Group |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| NAT/PAT |
Yes |
No |
Yes |
No |
Yes |
Centralized NAT |
Yes |
Centralized NAT |
Yes |
Centralized NAT |
| Ethernet fallback |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
| PPPoE client |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
| Bidirectional rate limiting (Per Client, Per BSSID) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Bidirectional rate limiting Per WLAN |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Peer to Peer Blocking |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| PMF (802.11w) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| BYOD, NAC RADIUS, CWA Flex Central Auth. |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
| BYOD, NAC RADIUS, CWA Local Auth |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
| MAC Authentication Flex Central Auth |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
| MAC Authentication Flex Local Auth |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
| GTK Randomization |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| VideoStream |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Data DTLS Encryption |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Umbrella |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WSA |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| TLS Tunnel |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
| mDNS |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.
All printed copies and duplicate soft copies are considered un-Controlled copies and the original on-line version should be referred to for latest version.
Cisco has more than 200 offices worldwide. Addresses, phone numbers, and fax numbers are listed on the Cisco website at www.cisco.com/go/offices.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: https://www.cisco.com/c/en/us/about/legal/trademarks.html. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1721R)
© 2020 Cisco Systems, Inc. All rights reserved.
FeedbackContact Cisco
- Open a Support Case
- (Requires a Cisco Service Contract)
Related Cisco Community Discussions
This Document Applies to These Products
- Aironet 1540 Series
- Aironet 1560 Series
- Aironet 1800 Series
- Aironet 1810 Series OfficeExtend Access Points
- Aironet 1810w Series Access Points
- Aironet 1815 Series Access Points
- Aironet 1830 Series Access Points
- Aironet 1850 Series Access Points
- Aironet 2800 Series Access Points
- Aironet 3800 Series Access Points
- Aironet 4800 Access Points
- Catalyst 9100 Access Points
- Catalyst 9115AX Series Access Points
- Catalyst 9117AX Series Access Points
- Catalyst 9120AX Series Access Points
- Catalyst 9130AX Series Access Points
- Wireless LAN Controller Software