Feature Matrix for Wave 2 and 802.11ax (Wi-Fi 6) Access Points
Available Languages
Feature Matrix for Cisco Wave 2 and 802.11ax (Wi-Fi 6) Access Points
First Published: April 23, 2019
Last Updated: November 10, 2021
Table of Contents
Support in Cisco IOS XE Releases
Radio Frequency Feature Matrix (IOS XE)
Security Feature Matrix (IOS XE)
Services Feature Matrix (IOS XE)
Infrastructure Feature Matrix (IOS XE)
FlexConnect Feature Matrix (IOS XE)
Support in Cisco AireOS Releases
Radio Frequency Feature Matrix (AireOS)
Security Feature Matrix (AireOS)
Services Feature Matrix (AireOS)
Infrastructure Feature Matrix (AireOS)
FlexConnect Feature Matrix (AireOS)
Communications, Services, and Additional Information
Support in Cisco IOS XE Releases
This section lists support information for various features in Cisco Wave 2 and 802.11ax (Wi-Fi 6) Access Points in Cisco IOS XE releases.
Note: For a better reading experience, we recommend that you view this document with your browser window in full-screen mode.
Note: The documentation set for this product strives to use bias-free language. For purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product.
Table 1 Access Points and First Supported Cisco IOS XE Release
| Access Points |
First Supported Cisco IOS XE Release |
| 802.11ax (Wi-Fi 6) APs: 9124I and 9124D |
Cisco IOS XE Amsterdam 17.5 |
| 802.11ax (Wi-Fi 6) APs: 9105I and 9105W |
Cisco IOS XE Amsterdam 17.3 |
| 802.11ax (Wi-Fi 6) APs: 9130E |
Cisco IOS XE Amsterdam 17.1 |
| 802.11ax (Wi-Fi 6) APs: 9120E, 9120P, 9130I |
Cisco IOS XE Gibraltar 16.12 |
| 802.11ax (Wi-Fi 6) APs: 9115, 9117, and 9120I |
Cisco IOS XE Gibraltar 16.11 |
| Wave 2 APs—18xx, 1540, 1560, 2800, 3800, and 4800 |
Cisco IOS XE Gibraltar 16.10 |
Note: This document is updated for Cisco IOS XE Amsterdam 17.6.1.
Radio Frequency Feature Matrix (IOS XE)
Table 2 Radio Frequency Feature Matrix for Cisco Catalyst Controllers and Embedded Wireless Controllers
| Features |
CAT9105/9115/9117 |
CAT9120/9124/ 9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
| Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
|
| RRM–DCA, TPC, CHDM |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| FRA |
No |
No |
Yes |
Yes |
No |
No |
Yes |
Yes |
No |
No |
| Band Select |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Load Balancing |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| RF Profiles |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| HDX Turbo Performance |
No |
No |
Yes |
Yes |
No |
No |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
| Optimized Roaming |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| RX–SOP |
Yes |
Yes |
Yes |
Yes |
No |
No |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
| DBS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Off-channel Scanning |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Off-channel Scan Defer |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Flex DFS |
Yes |
Yes |
Yes |
Yes |
No |
No |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
| ClientLink |
TxBF |
TxBF |
TxBF |
TxBF |
TxBF |
TxBF |
Yes |
Yes |
TxBF on 1540; Yes for 1560 |
TxBF on 1540; Yes for 1560 |
| A-MSDU/A-MPDU aggregation config per priority |
No for 9115 |
No for 9115 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| EDRRM |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
| CleanAir/Spectrum Intelligence |
SI for 9115; No for 9105 and 9117 |
SI for 9115; No for 9105 and 9117 |
CleanAir |
CleanAir |
SI |
SI |
CleanAir |
CleanAir |
SI/ CleanAir |
SI/ CleanAir |
| Spectrum Expert |
No |
No |
Yes |
Yes |
No |
No |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
| Cisco DNA Center Spectrum Analyzer |
NA |
NA |
Yes |
Yes |
NA |
NA |
Yes |
Yes |
No for 1540; Yes for 1560 |
No for 1540; Yes for 1560 |
| ATF |
No |
No |
No |
No |
No |
No |
Yes |
Yes |
Yes |
Yes |
| UL OFDMA |
No for 9117 |
No for 9117 |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
| DL OFDMA |
Yes |
Yes |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
| UL MU MIMO |
No |
No |
Yes, for C9124/C9130 |
Yes, for C9124/C9130 |
No |
No |
No |
No |
No |
No |
| DL MU MIMO |
Yes |
Yes |
Yes |
Yes |
No |
No |
Yes (VHT) |
No |
No |
No |
| TWT |
No for C9105/C9117 |
No for C9105/C9117 |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
| BSS Coloring |
No for C9117 |
No for C9117 |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
| Wi-Fi 6 Analytics |
No for C9117 |
No for C9117 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| iCap - Anomaly/Scheduled PCAP Capture |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| iCap - Full Packet Capture |
NA |
NA |
Yes for C9124/C9130 |
Yes for C9124/C9130 |
NA |
NA |
Yes for 4800 |
Yes for 4800 |
NA |
NA |
| iCap - Specturm Analysis |
NA |
NA |
Yes |
Yes |
NA |
NA |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
| Apple iOS Analytics |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Samsung Analytics |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Intel Analytics |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Security Feature Matrix (IOS XE)
Table 3 Security Feature Matrix for Cisco Catalyst Controllers and Embedded Wireless Controllers
| Features |
CAT9105/9115/9117 |
CAT9120/9124/ 9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
| Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
|
| WPA2/AES |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WPA3 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WPA3 –Enterprise-192 |
No |
No |
No for C9120; Yes, for C9124/C9130 |
No for C9120; Yes, for C9124/C9130 |
No |
No |
No |
No |
No |
No |
| TKIP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Peer-to-Peer Blocking |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Adaptive wIPS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Client Exclusion |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Rogue Detection |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 11r |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 11k |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 11v BSS Transition Management |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 802.11v DMS |
Yes |
Yes |
Yes |
Yes |
No |
No |
Yes |
Yes |
No for 1540 |
No for 1540 |
| PMF (802.11w) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Local Policy with QoS and AVC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| TrustSec SXP, SGT |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WEP |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
| LSC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| TCP MSS Adjust |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| MAC Authentication |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| OKC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| CCKM |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| NDP Encryption |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
No |
No |
| HW DTLS Encryption |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 802.1x on AP (EAP-FAST) |
Yes TLS 1.2 |
Yes TLS 1.2
|
Yes TLS 1.2
|
Yes TLS 1.2
|
Yes TLS 1.2
|
Yes TLS 1.2
|
Yes TLS 1.2
|
Yes TLS 1.2
|
Yes TLS 1.2
|
Yes TLS 1.2
|
| 802.1x on AP (EAP-PEAP, EAP-TLS) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Services Feature Matrix (IOS XE)
Table 4 Services Feature Matrix for Cisco Catalyst Controllers and Embedded Wireless Controllers
| Features |
CAT9105/9115/9117 |
CAT9120/9124/ 9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
| Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
|
| AVC–Mark, Drop, RL |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override–VLAN |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override–ACL, QoS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override–Session Timeout |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override of AVC profile |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override BW contract |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Local Profiling |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| RADIUS Profiling |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Per-User Bandwidth Contract |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Per-SSID Bandwidth contract |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| VideoStream |
Yes |
Yes |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
| CAC, WMM Policy |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| QoS Profiles |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Bonjour GW, mDNS AP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| LSS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Adaptive 11r |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Fastlane |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Fastlane+ |
No |
No |
Yes for C9130 and C9124 |
Yes for C9130 and C9124 |
No |
No |
No |
No |
No |
No |
| MAC Authentication |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 802.11u |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| BYoD, NAC RADIUS, CWA |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Infrastructure Feature Matrix (IOS XE)
Table 5 Infrastructure Feature Matrix for Cisco Catalyst Controllers and Embedded Wireless Controllers
| Features |
CAT9105/9115/9117 |
CAT9120/9124/ 9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
| Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
|
| CDP, LLDP |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| Pre-image Download |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Fast SSID Change |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| BLE |
Yes |
No |
Yes |
No |
Yes, for 1830 and 1850 (1830 and 1850 require additional USB dongle.) |
No |
Yes. (2800 and 3800 require additional USB dongle.) |
No |
No |
No |
| Hyperlocation (AoA) |
No |
No |
No |
No |
No |
No |
Yes for 4800 |
No |
No |
No |
| User idle timeout per WLAN |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| DHCP Option 60 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Passpoint |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Fast Locate |
No |
No |
Yes |
No |
No |
No |
Yes |
No |
No |
No |
| AP Multicast Mode |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Multicast VLAN |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| IGMPv3 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Client IPv6 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AP PnP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| FlexConnect |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Local, Sniffer and Monitor Mode |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| RFID Tagging |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| FIPS Certification |
No for 9105 |
No for 9105 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Native IPv6 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Allow WGB Connection |
Yes |
Yes |
Yes
|
Yes
|
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Allow uWGB Connection |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| CAPWAP VLAN Tagging |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| DHCP Option 82 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WebAuth–Internal/External |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Mesh Mode |
No |
No |
Yes for C9124(17.6.1) |
Yes for C9124(17.6.1) |
1800i, 1810, 1815w, 1815t, 1840: No 1815i, 1815m, 1830, 1850: Yes |
1800i, 1810, 1815w, 1815t, 1840: No 1815i, 1815m, 1830, 1850: Yes |
Yes |
Yes |
Yes |
Yes |
FlexConnect Feature Matrix (IOS XE)
Table 6 FlexConnect Feature Matrix for Cisco Catalyst Controllers and Embedded Wireless Controllers
| Features |
CAT9105/9115/9117 |
CAT9120/9124/ 9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
| Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
Catalyst |
EWC |
|
| Local Switching |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Central Switching |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| WLAN-VLAN Mapping |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Local Auth w/External RADIUS Server |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Local Auth internal Server |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| TKIP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WPA2/AES |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| OEAP |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| Webauth–Internal/External |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth)) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
| EoGREv4/v6 on FlexConnect AP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| VLAN-based Central Switching |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| WIPS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| aWIPS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Rogue detection and Mitigation |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| CCKM Fast Roaming |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
| 802.11r |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
| Adaptive 11r |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| OKC |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
| AAA Override–VLAN ID, ACL |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override-VLAN Name |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
| AAA Override–QoS |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth)) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
| AAA Override-Session Timeout |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override of AVC Profile |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth)) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
| AAA Override Bandwidth contract |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
| VLAN ACL |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
| DNS ACL |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
| Limit Clients per WLAN/Radio |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| NetFlow Export |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| WGB |
No |
No |
No |
No |
No |
No |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
| Split Tunneling |
Yes |
No |
Yes |
No |
1800i, 1810, 1815w, 1840, 1815i, 1815m, 1830, 1850: Yes 1815T: No |
No |
Yes |
No |
Yes |
No |
| Passive Clients |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Client exclusion |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| TrustSec SXP/SGT |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| QoS Markings DSCP/dot1p Markings |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Native VLAN and VLAN Support on FlexConnect Group |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AVC Policy |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Proxy ARP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Syslog (no support for facility setting) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| ClientLink |
TxBF |
TxBF |
TxBF |
TxBF |
TxBF |
TxBF |
Yes |
Yes |
TxBF on 1540; Yes for 1560 |
TxBF on 1540; Yes for 1560 |
| Load Balancing |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Band Select |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Smart AP Image Upgrade |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Default Flex Group |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| NAT/PAT |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Ethernet fallback |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Bidirectional rate limiting (Per Client, Per BSSID) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Bidirectional rate limiting Per WLAN |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Peer to Peer Blocking |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| PMF (802.11w) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| BYOD, NAC RADIUS, CWA Flex Central Auth. |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
| BYOD, NAC RADIUS, CWA Local Auth |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
Yes(Central Auth) No(local Auth) |
| MAC Authentication Flex Central Auth |
No for 9115 |
No for 9115 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| GTK Randomization |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| VideoStream |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Multicast Direct |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| CAC |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| Umbrella |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| WSA |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| mDNS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Support in Cisco AireOS Releases
This section lists the support information for various features in Cisco Wave 2 and 802.11ax (Wi-Fi 6) Access Points in Cisco AireOS releases.
For information about the Cisco AireOS releases in which the APs were first supported, see the Software Release Support for Specific Access Point Modules section of the Cisco Wireless Solutions Software Compatibility Matrix document at:
https://www.cisco.com/c/en/us/td/docs/wireless/compatibility/matrix/compatibility-matrix.html
Note:
■ The Cisco Catalyst 9105 APs were first supported in Cisco AireOS Release 8.10.130.0
■ The Cisco Catalyst 9130 APs were first supported in Cisco AireOS Release 8.10.105.0.
■ The Cisco Catalyst 9120 APs were first supported in Cisco AireOS Release 8.9.111.0.
■ The Cisco Catalyst 9115 and 9117 APs were first supported in Cisco AireOS Release 8.9.100.0.
Note: This document is updated for Cisco AireOS Release 8.10.x.
Radio Frequency Feature Matrix (AireOS)
Table 7 Radio Frequency Feature Matrix for Cisco AireOS Controllers and Cisco Mobility Express
| Features |
CAT9105/9115/9117 |
CAT9120/9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
| Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
|
| RRM–DCA, TPC, CHDM |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| FRA |
No |
No |
Yes |
Yes |
No |
No |
Yes |
Yes |
No |
No |
| Band Select |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Load Balancing |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| RF Profiles |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| HDX Turbo Performance |
No |
No |
Yes |
Yes |
No |
No |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
| Optimized Roaming |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| RX–SOP |
Yes |
Yes |
Yes |
Yes |
Yes for 1852 only |
Yes for 1852 only |
Yes |
Yes |
Yes for 1560; No for 1540 |
Yes for 1560; No for 1540 |
| DBS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Off-channel Scanning |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Off-channel Scan Defer |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Flex DFS |
No |
No |
Yes |
Yes |
No |
No |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
| ClientLink |
TxBF |
TxBF |
TxBF |
TxBF |
TxBF |
TxBF |
Yes |
Yes |
TxBF on 1540; Yes for 1560 |
TxBF on 1540; Yes for 1560 |
| A-MSDU/A-MPDU aggregation config per priority |
No for 9115 |
No for 9115 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| EDRRM - Wi-Fi |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| EDRRM - Non-Wi-Fi |
No |
No |
Yes |
Yes |
No |
No |
Yes |
Yes |
No for 1540; Yes for 1560 |
No for 1540; Yes for 1560 |
| Configurable EDCA |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
| CleanAir/Spectrum Intelligence |
No |
No |
CleanAir |
CleanAir |
Deprecated |
Deprecated |
CleanAir |
CleanAir |
SI for 1540; CleanAir for 1560 |
SI for 1540; CleanAir for 1560 |
| SE Connect |
No |
No |
Yes |
Yes |
No |
No |
Yes |
Yes |
No for 1540; Yes for 1560 |
No for 1540; Yes for 1560 |
| Cisco DNA Center Spectrum Analyzer |
NA |
NA |
Yes |
Yes |
NA |
NA |
Yes |
Yes |
No for 1540; Yes for 1560 |
No for 1540; Yes for 1560 |
| ATF |
No |
No |
No |
No |
No |
No |
Yes |
Yes |
|
|
| UL OFDMA |
No for 9117 |
No for 9117 |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
| DL OFDMA |
Yes |
Yes |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
| UL MU MIMO |
No |
No |
Yes, for C9124/ C9130 |
Yes, for C9124/C9130 |
No |
No |
No |
No |
No |
No |
| DL MU MIMO |
Yes |
Yes |
Yes |
Yes |
No |
No |
No |
No |
No |
No |
| TWT |
No for C9105/C9117 |
No for C9105/C9117 |
Yes |
Yes |
NA |
NA |
NA |
NA |
NA |
NA |
| BSS Coloring |
No for C9117 |
No for C9117 |
Yes |
Yes |
NA |
NA |
NA |
NA |
NA |
NA |
| Wi-Fi 6 Analytics |
No for C9117 |
No for C9117 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| iCap - Anomaly/Scheduled PCAP Capture |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| iCap - Full Packet Capture |
NA |
NA |
Yes for C9130 |
Yes for C9130 |
NA |
NA |
Yes |
Yes |
NA |
NA |
| iCap - Specturm Analysis |
NA |
NA |
Yes for 9130 |
Yes for 9130 |
NA |
NA |
Yes for 4800 |
Yes for 4800 |
Yes for 1560 |
Yes for 1560 |
| Apple iOS Analytics |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Samsung Analytics |
NA |
NA |
NA |
NA |
NA |
NA |
NA |
NA |
NA |
NA |
Security Feature Matrix (AireOS)
Table 8 Security Feature Matrix for Cisco AireOS Controllers and Cisco Mobility Express
| Features |
CAT9105/9115/9117 |
CAT9120/9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
| Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
|
| WPA2/AES |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WPA3 – |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WPA3 –Enterprise-192 |
No |
No |
No for C9120; Yes for C9130 |
No for C9120; Yes for C9130 |
No |
No |
No |
No |
No |
No |
| TKIP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Peer-to-Peer Blocking |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Wireless IDS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Adaptive wIPS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| ELM |
No for 9115; limited support in 9117 |
No for 9115; limited support in 9117 |
Yes, but limited |
Yes, but limited |
Yes, but limited |
Yes, but limited |
Yes, but limited |
Yes, but limited |
Yes, but limited |
Yes, but limited |
| Client Exclusion |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Rogue Detection |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 11r |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 11k |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 11v BSS Transition Management |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 802.11v DMS |
Yes |
Yes |
Yes |
Yes |
No |
No |
Yes |
Yes |
No for 1540 |
No for 1540 |
| PMF (802.11w) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Local Policy with QoS and AVC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| TrustSec SXP, SGT |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WEP |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
| Wi-Fi Direct blocking |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| LSC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| TCP MSS Adjust |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| MAC Authentication |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Facebook Express Wi-Fi - Web Authentication |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| Facebook Express Wi-Fi - MAC Authentication |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| OKC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| SKC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| CCKM |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| NDP Encryption |
Yes |
Yes |
No |
No |
Yes |
Yes |
No |
No |
No |
No |
| Software Data DTLS Encryption |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 802.1x on AP (EAP-FAST |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 802.1x on AP (EAP-PEAP, EAP-TLS) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Services Feature Matrix (AireOS)
Table 9 Services Feature Matrix for Cisco AireOS Controllers and Cisco Mobility Express
| Features |
CAT9105/9115/9117 |
CAT9120/9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
| Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
|
| AVC–Mark, Drop, RL |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override–VLAN |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override–ACL, QoS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override–Session Timeout |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override of AVC profile |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override BW contract |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Local Profiling |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| RADIUS Profiling |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Per-User Bandwidth Contract |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Per-SSID Bandwidth contract |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| VideoStream |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| CAC, WMM Policy |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| QoS Profiles |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Bonjour GW, mDNS AP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| LSS |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| Priority MAC |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| Adaptive 11r |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Fastlane |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| 802.11u |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Full CCX Support |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| BYoD, NAC RADIUS, CWA |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Infrastructure Feature Matrix (AireOS)
Table 10 Infrastructure Feature Matrix for Cisco AireOS Controllers and Cisco Mobility Express
| Features |
CAT9105/9115/9117 |
CAT9120/9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
| Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
|
| CDP, LLDP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Pre-image Download |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Fast SSID Change |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Hyperlocation |
No |
No |
No |
No |
No |
No |
Yes for 4800 |
No |
No |
No |
| Fast CAPWAP Heartbeat |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| Client Packet Capture |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
Deprecated |
| User idle timeout per WLAN |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| DHCP Option 60 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Passpoint |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Fast Locate |
No |
No |
Yes |
No |
No |
No |
Yes |
No |
Yes for 1560 |
No |
| Multicast buffer configuration per WLAN |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| AP Multicast |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AP Multicast Mode |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| Multicast VLAN |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| IGMPv3 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Client IPv6 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AP PnP |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| FlexConnect |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Local, Sniffer and Monitor Mode |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| RFID Tagging |
Yes |
Yes |
Yes |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| FIPS Certification |
No for 9105 |
No for 9105 |
Yes |
Yes |
Yes |
Yes |
Yes for 2800 and 3800 (Release 8.5); No for 4800 |
Yes for 2800 and 3800 (Release 8.5); No for 4800 |
No for 1540; Yes for 1560 (Release 8.5) |
No for 1540; Yes for 1560 (Release 8.5) |
| Native IPv6 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Allow WGB Connection |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Allow uWGB Connection |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| CAPWAP VLAN Tagging |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| DHCP Option 82 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WebAuth–Internal/External |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Mesh Mode |
No |
No |
No |
No |
1800i, 1810, 1815w, 1815t, 1840: No 1815i,1815m, 1830, 1850: Yes ME (1815m): No |
1800i, 1810, 1815w, 1815t, 1840: No 1815i,1815m, 1830, 1850: Yes ME (1815m): No |
Yes |
Yes |
Yes |
Yes |
Note: Even though some of the AP radios do support BLE, the BLE feature itself is not supported in AireOS deployments.
FlexConnect Feature Matrix (AireOS)
Table 11 FlexConnect Feature Matrix for Cisco AireOS Controllers and Cisco Mobility Express
| Features |
CAT9105/9115/9117 |
CAT9120/9130 |
AP18xx |
AP4800/3800/2800 |
AP1560/1540 |
|||||
| Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
Controller |
ME |
|
| Local Switching |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Central Switching |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| WLAN-VLAN Mapping |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Local Auth w/External RADIUS Server |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Local Auth internal Server |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| TKIP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WPA2/AES |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| OEAP |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| Webauth–Internal/External |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
| EoGREv4/v6 on FlexConnect AP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| VLAN-based Central Switching |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| WIPS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| aWIPS |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Rogue detection and Mitigation |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| RLDP |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| CCKM Fast Roaming |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
| 802.11r |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
Yes - ME, Flex (Central Auth) & Local Mode |
| Adaptive 11r |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| OKC |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
| AAA Override–VLAN ID |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override-VLAN Name |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
| AAA Override–ACL, QoS |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
| AAA Override-Session Timeout |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA Override of AVC Profile |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
| AAA Override Bandwidth contract |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
| VLAN ACL |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
| DNS ACL |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
| L2 ACL |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
| Limit Clients per WLAN/Radio |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| NetFlow Export |
Yes-Flex-Central Auth,Flex-Local Auth; No-ME,Local Mode |
Yes-Flex-Central Auth,Flex-Local Auth; No-ME,Local Mode |
Yes-Flex-Central Auth,Flex-Local Auth; No-ME,Local Mode |
Yes-Flex-Central Auth,Flex-Local Auth; No-ME,Local Mode |
Yes-Flex-Central Auth,Flex-Local Auth; No-ME,Local Mode |
Yes-Flex-Central Auth,Flex-Local Auth; No-ME,Local Mode |
Yes-Flex-Central Auth,Flex-Local Auth; No-ME,Local Mode |
Yes-Flex-Central Auth,Flex-Local Auth; No-ME,Local Mode |
Yes-Flex-Central Auth,Flex-Local Auth; No-ME,Local Mode |
Yes-Flex-Central Auth,Flex-Local Auth; No-ME,Local Mode |
| WGB |
No |
No |
No |
No |
No |
No |
Yes |
Yes |
Yes for 1560 |
Yes for 1560 |
| Split Tunneling |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| Passive Clients |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Client exclusion |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| TrustSec SXP/SGT |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| QoS Markings DSCP/dot1p Markings |
Yes |
Yes, but no CAPWAP support on ME |
Yes |
Yes, but no CAPWAP support on ME |
Yes |
Yes, but no CAPWAP support on ME |
Yes |
Yes, but no CAPWAP support on ME |
Yes |
Yes, but no CAPWAP support on ME |
| CleanAir |
No |
No |
No |
No |
No |
No |
Yes |
Yes |
Yes |
Yes |
| Native VLAN and VLAN Support on FlexConnect Group |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AVC Policy |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Proxy ARP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Syslog (no support for facility setting) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| ClientLink |
TxBF |
TxBF |
TxBF |
TxBF |
TxBF |
TxBF |
Yes |
Yes |
TxBF for 1540; Yes for 1560 |
TxBF for 1540; Yes for 1560 |
| Load Balancing |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Band Select |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Smart AP Image Upgrade |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Default Flex Group |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| NAT/PAT |
Yes |
No |
Yes |
No |
Yes |
Centralized NAT |
Yes |
Centralized NAT |
Yes |
Centralized NAT |
| Ethernet fallback |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
| PPPoE client |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
Yes - Flex (Central Auth), Flex (Local Auth), No - Local Mode,ME |
| Bidirectional rate limiting (Per Client, Per BSSID) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Bidirectional rate limiting Per WLAN |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Peer to Peer Blocking |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| PMF (802.11w) |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| BYOD, NAC RADIUS, CWA Flex Central Auth. |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
| BYOD, NAC RADIUS, CWA Local Auth |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
No - Flex (Local Auth), Yes - Local mode, ME Mode, Flex (Central Auth) |
| MAC Authentication Flex Central Auth |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
| MAC Authentication Flex Local Auth |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
No - Flex (Local Auth) Yes - Local Mode, ME, Flex (Central Auth) |
| GTK Randomization |
No |
No |
No |
No |
No |
No |
No |
No |
No |
No |
| VideoStream |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Multicast Direct |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| CAC |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Data DTLS Encryption |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Umbrella |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| WSA |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| TLS Tunnel |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
| mDNS |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Yes |
No |
Communications, Services, and Additional Information
■ To receive timely, relevant information from Cisco, sign up at Cisco Profile Manager.
■ To get the business impact you’re looking for with the technologies that matter, visit Cisco Services.
■ To submit a service request, visit Cisco Support.
■ To discover and browse secure, validated enterprise-class apps, products, solutions, and services, visit Cisco DevNet.
■ To obtain general networking, training, and certification titles, visit Cisco Press.
■ To find warranty information for a specific product or product family, access Cisco Warranty Finder.
Cisco Bug Search Tool
Cisco Bug Search Tool (BST) is a web-based tool that acts as a gateway to the Cisco bug tracking system that maintains a comprehensive list of defects and vulnerabilities in Cisco products and software. BST provides you with detailed defect information about your products and software.
Documentation Feedback
To provide feedback about Cisco technical documentation, use the feedback form available in the right pane of every online document.
© 2021 Cisco Systems, Inc. All rights reserved.
FeedbackContact Cisco
- Open a Support Case
- (Requires a Cisco Service Contract)
This Document Applies to These Products
- Aironet 1540 Series
- Aironet 1560 Series
- Aironet 1800 Series
- Aironet 1810 Series OfficeExtend Access Points
- Aironet 1810w Series Access Points
- Aironet 1815 Series Access Points
- Aironet 1830 Series Access Points
- Aironet 1850 Series Access Points
- Aironet 2800 Series Access Points
- Aironet 3800 Series Access Points
- Aironet 4800 Access Points
- Catalyst 9100 Access Points
- Catalyst 9105AX Series Access Points
- Catalyst 9115AX Series Access Points
- Catalyst 9117AX Series Access Points
- Catalyst 9120AX Series Access Points
- Catalyst 9130AX Series Access Points
- Wireless LAN Controller Software