Cisco Wireless Controller Online Help, Release 8.1

AP Name

Name assigned to the access point.

Radio Slot #

Slot where the radio is installed.

Base Radio MAC

MAC address of the access point.

Sub Band

Radio sub band, if it is active: 4.9 GHz or 5.8 GHz.

Operational Status

Operational status of the Cisco Radios: UP or DOWN.

Radio Role

Radio role: UPLINK or DOWNLINK.

Load Profile

Radio Resource Management (RRM) profile for the Cisco Radio. The profile status is displayed as a pass or fail with details provided on the Radio Statistics page.

Note For Cisco OEAP 600 Series access points, the following parameters show the value as N/A:

– Load Profile

– Noise Profile

– Interference Profile

– Coverage Profile

Noise Profile

Interference Profile

Coverage Profile

CleanAir Admin Status

CleanAir admin status.

CleanAir Oper Status

Spectrum sensor status for this access point.

Tx Fragment Count

Counter that is incremented for an acknowledged MPDU (MAC Protocol Data Unit) with an individual address in the address 1 field.

Tx Failed Count

Counter that increments when an MSDU (MAC Service Data Unit) is successfully transmitted after one or more retransmissions.

Multiple Retry Count (Graphics view only)

Counter that increments when an MSDU is successfully transmitted after more than one retransmission.

RTS Success Count

Counter that increments when a CTS (Clear To Send) is received in response to an RTS (Request To Send).

ACK Failure Count

Counter that increments when an ACK is not received when expected.

Multicast Rx Frame Count

Counter that increments when an MSDU is received with the multicast bit set in the destination MAC address.

Tx Frame Count

Counter that increments for each successfully transmitted MSDU.

Multicast Tx Frame Count

Counter that increments only when the multicast bit is set in the destination MAC address of a successfully transmitted MSDU. When operating as a STA in an ESS, where these frames are directed to the access point, this frame count implies having received an acknowledgment to all associated MPDUs.

Retry Count

Counter that increments when an MSDU is successfully transmitted after one or more retransmissions.

Frame Duplicate Count

Counter that increments when a frame is received that the Sequence Control field indicates is a duplicate.

RTS Failure Count

Counter that increments when a CTS is not received in response to an RTS.

Rx Fragment Count

Counter that increments for each successfully received MPDU of type Data or Management.

FCS Error Count

Counter that increments when an FCS error is detected in a received MPDU.

WEP Undecryptable Count

Counter that increments when a frame received with the WEP subfield of the Frame Control field is set to one and the WEP On value for the key that is mapped to the MAC address of the TA indicates that the frame should not have been encrypted or that the frame has been discarded because to the receiving STA has not implemented the privacy option.

AP Name

Name assigned to the access point.

Radio Slot #

Slot where the radio is installed.

Base Radio MAC

MAC address of the access point.

Operational Status

Operational status of the Cisco Radios: UP or DOWN.

Load Profile

Radio Resource Management (RRM) profile for the Cisco Radio. The profile status is displayed as a pass or fail with details provided on the Radio Statistics data page.

Noise Profile

Interference Profile

Coverage Profile

CleanAir Admin Status

Status of the CleanAir admin.

CleanAir Oper Status

Status of the spectrum sensor for this access point.

Interferer Type

Type of the interferer.

Affected Channel

Channel that the device affects.

Detected Time

Time at which the interference was detected.

Severity

Severity index of the interfering device.

Duty Cycle (%)

Proportion of time during which the interfering device was active.

RSSI (dBm)

Receive signal strength indicator (RSSI) of the access point.

DevID

Device identification number that uniquely identifies the interfering device.

ClusterID

Cluster identification number that uniquely identifies the type of the devices.

AP Name

Name assigned to the access point.

Radio Slot #

Slot where the radio is installed.

Base Radio MAC

MAC address of the access point.

Operational Status

Operational status of the Cisco Radios: UP or DOWN.

Load Profile

Radio Resource Management (RRM) profile for the Cisco Radio. The profile status is displayed as a pass or fail with details provided on the Radio Statistics data page.

Noise Profile

Interference Profile

Coverage Profile

CleanAir Admin Status

Status of the CleanAir admin.

CleanAir Oper Status

Status of the spectrum sensor for this access point.

AP Name

Name of the access point where the interference device is detected.

Radio Slot #

Slot that detects the interferes.

Interferer Type

Type of the interferer.

Affected Channel

Channel that the device affects.

Detected Time

Time at which the interference was detected.

Severity

Severity index of the interfering device.

Duty Cycle (%)

Proportion of time during which the interfering device was active.

RSSI

Receive signal strength indicator (RSSI) of the access point.

DevID

Device identification number that uniquely identifies the interfering device.

ClusterID

Cluster identification number that uniquely identifies the type of the devices.

When a CleanAir-enabled access point detects interference devices, these detections of the same device from multiple sensors are merged together to create clusters. Each cluster is given a unique ID. Some devices conserve power by limiting the transmit time until actually needed, which causes the spectrum sensor to temporarily stop detecting the device. This device is then correctly marked as down. A down device is removed from the spectrum database. In cases when all the interferer detections for a specific device are reported, the cluster ID is kept alive for an extended period of time to prevent possible device detection bouncing. If the same device is detected again, it is merged to the original cluster ID and the device detection history is preserved.

For example, some Bluetooth headsets operate on battery power. These devices employ methods to reduce power consumption such as turning off the transmitter when it is not actually needed. Such devices can appear to come and go from the classification. To manage these devices, CleanAir keeps the cluster IDs longer and merges them again into a single record upon detection. Preventing bouncing smoothens the interference device records and allows the records to accurately represent the device history.

AP Name

Name of the access point.

Radio Slot #

Slot where the interference is detected.

Channel

Channel where the air quality is monitored.

Average AQ

Average air quality observed.

Minimum AQ

Minimum air quality observed.

Interferer

Number of devices that affect a particular channel.

DFS (Dynamic Frequency Selection)

Whether DFS is enabled.

AP Name

Name of the access point that reported the worst air quality for the 802.11a/n/ac or 802.11b/g/n radio band.

Channel Number

Radio channel with the worst reported air quality.

Minimum Air Quality Index (1 to 100)

Minimum air quality for this radio channel. An air quality index (AQI) value of 100 is the best, and 1 is the worst.

Average Air Quality Index (1 to 100)

Average air quality for this radio channel. An air quality index (AQI) value of 100 is the best, and 1 is the worst.

Interference Device Count

Number of interferers detected by the radios on the 802.11a/n/ac or 802.11b/g/n radio band.

Octets Received

Total number of octets of data received by the processor (excluding framing bits but including FCS octets).

Packets Received Without Error

Total number of packets received by the processor.

Unicast Packets Received

Number of subnetwork-unicast packets delivered to a higher-layer protocol.

Multicast Packets Received

Total number of packets received that were directed to a multicast address. Note that this number does not include packets directed to the broadcast address.

Broadcast Packets Received

Total number of packets received that were directed to the broadcast address.

Receive Packets Discarded

Number of inbound packets that were chosen to be discarded even though no errors had been detected to prevent their delivery to a higher-layer protocol. A possible reason for discarding a packet could be to free up buffer space.

Octets Transmitted

Total number of octets transmitted out of the interface, including framing characters.

Packets Transmitted without Errors

Total number of packets transmitted out of the interface.

Unicast Packets Transmitted

Total number of packets that higher-level protocols requested be transmitted to a subnetwork-unicast address, including those packets that were discarded or not sent.

Multicast Packets Transmitted

Total number of packets that higher-level protocols requested be transmitted to a multicast address, including those that were discarded or not sent.

Broadcast Packets Transmitted

Number of packets that higher-level protocols requested be transmitted to the broadcast address, including those that were discarded or not sent.

Transmit Packets Discarded

Number of outbound packets that were chosen to be discarded even though no errors had been detected to prevent their delivery to a higher-layer protocol. A possible reason for discarding a packet could be to free up buffer space.

Most Address Entries Ever Used

Highest number of Forwarding Database Address Table entries that have been learned by this controller since the most recent reboot.

Address Entries in Use

Number of learned and static entries in the Forwarding Database Address Table for this controller.

Maximum VLAN Entries

Maximum number of Virtual LANs (VLANs) allowed on this controller.

Most VLAN Entries Ever Used

Largest number of VLANs that have been active on this controller since the last reboot.

Static VLAN Entries

Number of presently active VLAN entries on this controller that have been created statically.

Time Since Counters Last Cleared

Elapsed time, in days, hours, minutes, and seconds, since the statistics for this controller were last cleared.

Port No

Port number on the controller.

1–12 for 10/100BASE-T, 13 for 1000BASE-T or 1000BASE-SX.

1–24 for 10/100BASE-T, 25 for 1000BASE-T or 1000BASE-SX.

1 for 1000BASE-SX on a Cisco 4100 Series Wireless LAN Controller.

1 for 1000BASE-SX on a Cisco 4100 Series Wireless LAN Controller.

Admin Status

State of the port.

Enable or Disable.

Physical Mode

Configuration of the port physical interface.

Auto.

100 Mbps full duplex.

100 Mbps half duplex.

10 Mbps full duplex.

10 Mbps half duplex.

1000 Mbps full duplex.

Note In a Cisco NMWLC6 controller, the physical mode is always set to Auto.

Physical Status

Actual port physical interface.

Auto.

100 Mbps full duplex.

100 Mbps half duplex.

10 Mbps full duplex.

10 Mbps half duplex.

1000 Mbps full duplex.

Link Status

Displays the status of the link.

Link Up or Link Down.

Total Bytes

Total number of octets of data (including those octets in bad packets) received on the network (excluding framing bits but including FCS octets). This object can be used as a reasonable estimate of Ethernet utilization. If greater precision is desired, the etherStatsPkts and etherStatsOctets objects should be sampled before and after a common interval. The result of this equation is the value Utilization which is the percentage of utilization of the Ethernet segment on a scale of 0 to 100 percent.

Number of octets of data (including those octets in bad packets) received on the network (excluding framing bits but including FCS octets). This object can be used as a reasonable estimate of Ethernet utilization. If greater precision is desired, the etherStatsPkts and etherStatsOctets objects should be sampled before and after a common interval.

Packets (64 Octets)

Total number of packets (including bad packets) received that were 64 octets in length (excluding framing bits but including FCS octets).

Total number of packets (including bad packets) received that were 64 octets in length (excluding framing bits but including FCS octets).

Packets (65-127 Octets)

Total number of packets (including bad packets) received that were between 65 and 127 octets in length inclusive (excluding framing bits but including FCS octets).

Total number of packets (including bad packets) received that were between 65 and 127 octets in length inclusive (excluding framing bits but including FCS octets).

Packets (128-255 Octets)

Total number of packets (including bad packets) received that were between 128 and 255 octets in length inclusive (excluding framing bits but including FCS octets).

Total number of packets (including bad packets) received that were between 128 and 255 octets in length inclusive (excluding framing bits but including FCS octets).

Packets

(256-511 Octets)

Total number of packets (including bad packets) received that were between 256 and 511 octets in length inclusive (excluding framing bits but including FCS octets).

Total number of packets (including bad packets) received that were between 256 and 511 octets in length inclusive (excluding framing bits but including FCS octets).

Packets

(512-1023 Octets)

Total number of packets (including bad packets) received that were between 512 and 1023 octets in length inclusive (excluding framing bits but including FCS octets).

Total number of packets (including bad packets) received that were between 512 and 1023 octets in length inclusive (excluding framing bits but including FCS octets).

Packets

(1024-1518 Octets)

Total number of packets (including bad packets) received that were between 1024 and 1518 octets in length inclusive (excluding framing bits but including FCS octets).

Total number of packets (including bad packets) received that were between 1024 and 1518 octets in length inclusive (excluding framing bits but including FCS octets).

Packets

(> 1518 Octets)

Total number of packets received that were longer than 1518 octets (excluding framing bits, but including FCS octets) and were otherwise well formed.

Total number of packets transmitted that were longer than 1518 octets (excluding framing bits, but including FCS octets) and were otherwise well formed.

Total

Total number of packets received that were without errors.

Total number of packets transmitted that were without errors.

Unicast Packets

Number of subnetwork-unicast packets delivered to a higher-layer protocol.

Total number of packets that higher-level protocols requested be transmitted to a subnetwork-unicast address, including those packets that were discarded or not sent.

Multicast Packets

Total number of good packets received that were directed to a multicast address. Note that this number does not include packets directed to the broadcast address.

Total number of packets that higher-level protocols requested be transmitted to a multicast address, including those packets that were discarded or not sent.

Broadcast Packets

Total number of good packets received that were directed to the broadcast address.

Total number of packets that higher-level protocols requested be transmitted to the broadcast address, including those packets that were discarded or not sent.

802.3x Pause Frames Received

Media Access Control (MAC) frames received on this interface with an opcode indicating a PAUSE. This counter does not increment when the interface operates in half-duplex mode.

–

Total

Total number of inbound packets that contained errors preventing them from delivery to a higher-layer protocol.

Jabbers

Number of packets received that were longer than 1518 octets (excluding framing bits, but including FCS octets), and had either a bad Frame Check Sequence (FCS) with an integral number of octets (FCS Error) or a bad FCS with a nonintegral number of octets (Alignment Error). This definition of jabber differs from the definition in IEEE 802.3, section 8.2.1.5 (10BASE-5) and section 10.3.1.4 (10BASE-2). These documents define jabber as the condition where any packet exceeds 20 ms. The allowed range to detect jabber is between 20 ms and 150 ms.

Fragments/ Undersize

Number of packets received that were less than 64 octets in length (excluding framing bits but including FCS octets).

Alignment Errors

Number of packets received that had a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets, inclusive, but had a bad Frame Check Sequence (FCS) with a nonintegral number of octets.

FCS Errors

Number of packets received that had a length (excluding framing bits, but including FCS octets) of between 64 and 1518 octets, inclusive, but had a bad Frame Check Sequence (FCS) with an integral number of octets.

Overruns

Number of frames discarded because this port was overloaded with incoming packets and could not keep up with the inflow.

Total

Count of valid frames received that were discarded or filtered by the forwarding process.

Local Traffic Frames

Total number of dropped frames in the forwarding process because the destination address was located off of this port.

802.3x Pause Frames Received

Count of MAC control frames received on this interface with an opcode indicating the PAUSE operation. This counter does not increment when the interface operates in half-duplex mode.

Unacceptable Frame Type

Number of frames discarded from this port due to unacceptable frame types.

VLAN Membership Mismatch

Number of frames discarded on this port due to ingress filtering.

VLAN Viable Discards

Number of frames discarded on this port because a lookup on a particular VLAN occurred while that entry in the VLAN table was modified, or if the VLAN had not been configured.

Multicast Tree Viable Discards

Number of frames discarded because a lookup in the multicast tree for a VLAN occurred while that tree was modified.

Reserved Address Discards

Number of frames discarded that were destined to an IEEE 802.1 reserved address and were not supported by the system.

CFI Discards

Number of frames discarded that had the CFI bit set and the addresses in RIF were in noncanonical format.

Upstream Threshold

Number of frames discarded due to a lack of cell descriptors available for that packet's priority level.

Total Errors

Sum of Single, Multiple, and Excessive Collisions.

FCS Errors

Total number of packets transmitted that had a length (excluding framing bits, but including FCS octets) between 64 and 1518 octets, inclusive, but had a bad Frame Check Sequence (FCS) with an integral number of octets.

Oversized

Number of frames that exceeded the maximum permitted frame size. This counter has a maximum increment rate of 815 counts per second at 10 Mbps.

Underrun Errors

Number of frames discarded because the transmit FIFO buffer became empty during the frame transmission.

Total Discards

Sum of discarded single collision frames, discarded multiple collision frames, and discarded excessive frames.

Single Collision Frames

Count of the number of successfully transmitted frames on a particular interface for which transmission was inhibited by one collision.

Excessive Collisions

Count of frames for which transmission on a particular interface failed due to excessive collisions.

Port Membership

Number of frames discarded on egress for this port due to egress filtering being enabled.

VLAN Viable Discards

Number of frames discarded on this port because a lookup on a particular VLAN occurred while that entry in the VLAN table was modified, or if the VLAN had not been configured.

Multiple Collision Frames

Count of the number of successfully transmitted frames on a particular interface for which transmission was inhibited by more than one collision.

Index

Access priority number for RADIUS servers. Up to 17 authentication and 17 accounting servers can be configured. The controller polling of the servers starts with Index 1, Index 2 second, and so forth. The index number is based on the server index priority that is selected for a RADIUS server when it is added to the controller.

Address

IP address of the RADIUS server.

Port

Communication port.

Admin Status

Enabled or disabled.

Server Index

Access priority number for RADIUS servers. Up to 17 servers can be configured. The controller polling of the servers starts with Index 1 first, Index 2 second, and so on. The index number is based on the server index priority that is selected for a RADIUS server when it is added to the controller.

Server Address

IP address of the RADIUS server.

Admin Status

State of the server.

Msg Round Trip Time

Time interval between the most recent Access-Reply/Access-Challenge and the Access-Request that matched it from this RADIUS authentication server.

First Requests

Number of RADIUS Access-Request packets sent to this server. This number does not include retransmissions.

Retry Requests

Number of RADIUS Authentication-Request packets retransmitted to this RADIUS authentication server.

Accept Responses

Number of RADIUS Access-Accept packets (valid or invalid) received from this server.

Reject Responses

Number of RADIUS Access-Reject packets (valid or invalid) received from this server.

Challenge Responses

Number of RADIUS Access-Challenge packets (valid or invalid) received from this server.

Malformed Messages

Number of malformed RADIUS Access-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators, signature attributes, or unknown types are not included as malformed access responses.

Bad Authenticator Msgs

Number of RADIUS Access-Response packets that contain invalid authenticators or signature attributes received from this server.

Pending Requests

Number of RADIUS Access-Request packets destined for this server that have not yet timed out or received a response. This variable is incremented when an Access-Request is sent and decremented due to receipt of an Access-Accept, Access-Reject, Access-Challenge, a timeout, or retransmission.

Timeout Requests

Number of authentication timeouts to this server. After a timeout, the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as a Request as well as a timeout.

Unknown Type Msgs

Number of RADIUS packets of unknown type received from this server on the authentication port.

Other Drops

Number of RADIUS packets received from this server on the authentication port and dropped for some other reason.

Server Index

Access priority number for RADIUS servers. Up to 17 servers can be configured. The controller polling of the servers starts with Index 1 first, Index 2 second, and so on. The index number is based on the server index priority that is selected for a RADIUS server when it is added to the controller.

Server Address

IP address of the RADIUS server.

Admin Status

State of the server.

Msg Round Trip Time

Time interval between the most recent Accounting-Response and the Accounting-Request that matched it from this RADIUS accounting server.

First Requests

Number of RADIUS Accounting-Request packets sent. This number does not include retransmissions.

Retry Requests

Number of RADIUS Accounting-Request packets retransmitted to this RADIUS accounting server. Retransmissions include retries where the Identifier and Acct-Delay have been updated, as well as those in which they remain the same.

Accounting Responses

Number of RADIUS packets received on the accounting port from this server.

Malformed Messages

Number of malformed RADIUS Accounting-Response packets received from this server. Malformed packets include packets with an invalid length. Bad authenticators and unknown types are not included as malformed accounting responses.

Bad Authenticator Msgs

Number of RADIUS Accounting-Response packets that contained invalid authenticators received from this server.

Pending Requests

Number of RADIUS Accounting-Request packets sent to this server that have not yet timed out or received a response. This variable is incremented when an Accounting-Request is sent and decremented due to receipt of an Accounting-Response, a timeout, or a retransmission.

Timeout Requests

Number of accounting timeouts to this server. After a timeout, the client may retry to the same server, send to a different server, or give up. A retry to the same server is counted as a retransmit as well as a timeout. A send to a different server is counted as an Accounting-Request as well as a timeout.

Unknown Type Msgs

Number of RADIUS packets of unknown type received from this server on the accounting port.

Other Drops

Number of RADIUS packets that were received from this server on the accounting port and dropped for some other reason.

Rx Errors

Generic protocol packet receive errors (such as the packet was too short or format was incorrect).

Tx Errors

Generic protocol packet transmit errors, such as the packet transmission failed.

Responses Retransmitted

Number of retransmitted responses. The mobility protocol uses UDP and it resends requests several times if it does not receive a response. Because of network or processing delays, the responder may receive one or more retry requests after it initially responds to a request. This count includes the response resends.

Handoff Requests Received

Number of handoff requests received, ignored, or responded.

Handoff End Requests Received

Total number of handoff end requests received. These requests are sent by the anchor or the foreign controller to notify the other about the close of a client session.

State Transitions Disallowed

Number of disallowed state transitions. PEM (policy enforcement module) has denied a client state transition, which results in an aborted handoff.

Resource Unavailable

Unavailable resource, such as a buffer, which resulted in an aborted handoff.

Handoff Requests Sent

Number of clients that have associated with the controller and have been announced to the mobility group.

Handoff Replies Received

Number of handoff replies that have been received in response to the requests sent.

Handoff as Local Received

Number of handoffs in which the entire client session has been transferred.

Handoff as Foreign Received

Number of handoffs in which the client session was anchored elsewhere.

Handoff Denys Received

Number of handoffs that were denied.

Anchor Request Sent

Number of anchor requests that were sent for a three party (foreign to foreign) handoff. The handoff was received from another foreign controller and the new controller is requesting the anchor controller to move the client.

Anchor Deny Received

Number of anchor requests that were denied by the current anchor.

Anchor Grant Received

Number of anchor requests that were approved by the current anchor.

Anchor Transfer Received

Number of anchor requests that closed the session on the current anchor and transferred the anchor back to the requestor.

Handoff Requests Ignored

Number of handoff requests/client announcements that were ignored. The controller had no knowledge of that client.

Ping Pong Handoff Requests Dropped

Number of handoff requests that were denied because the handoff period was too short (3 seconds).

Handoff Requests Dropped

Number of handoff requests that were dropped due to a either an incomplete knowledge of the client or a problem with the packet.

Handoff Requests Denied

Number of handoff requests that were actively denied.

Client Handoff as Local

Number of handoffs responses sent while in the local role.

Client Handoff as Foreign

Number of handoffs responses sent while in the foreign role.

Anchor Requests Received

Number of anchor requests received.

Anchor Requests Denied

Number of anchor requests denied.

Anchor Requests Granted

Number of anchor requests granted.

Anchor Transferred

Number of anchors transferred because the client moved from a foreign controller to a controller on the same subnet as the current anchor.

NDP Router Solicitation

Number of received messages originated by the hosts to request a router to send a router advertisement.

NDP Router Advertisement

Number of received messages originated by the routers to advertise their presence and link-specific parameters such as link prefixes, link MTU, and hop limits. These messages are sent periodically and also in response to router solicitation messages.

NDP Neighbor Solicitation

Number of received messages originated by the nodes to request the link layer address of another node and also for functions such as duplicate address detection and neighbor unreachability detection.

NDP Neighbor Advertisement

Number of received messages in response to neighbor solicitation messages. If a node changes its link-layer address, it can send an unsolicited neighbor advertisement to advertise the new address.

NDP Redirect

Number of received messages to inform a host of a better first-hop node on the path to a destination. Hosts can be redirected to a better first-hop router but can also be informed by a redirect that the destination is in fact a neighbor.

NDP Certificate Solicit

Number of received messages to know the certification path to the trust anchor. Hosts will send the Certification Path Solicitations.

NDP Certificate Advert

Number of received messages to know the certification path to the trust anchor. Routers will send the Certification Path Advertisement messages.

DHCPv6 Solicitation

Number of received messages sent by a client to locate DHCPv6 servers.

DHCPv6 Advertisement

Number of received messages sent by a DHCPv6 server in response to a DHCPv6 solicitation message to indicate availability.

DHCPv6 Request

Number of received messages sent by a client to request addresses or configuration settings from a server.

DHCPv6 Reply

Number of received messages sent by a DHCPv6 server to a client in response to a Solicit, Request, Renew, Rebind, Information-Request, Confirm, Release, or Decline message.

DHCPv6 Inform

Number of received messages sent by a client to request configuration settings (but not addresses).

DHCPv6 Confirm

Number of received messages sent by a client to all servers to determine if a client's configuration is valid for the connected link.

DHCPv6 Renew

Number of received messages sent by a client to a server to extend the lifetime of assigned addresses and obtain updated configuration settings.

DHCPv6 Rebind

Number of received messages sent by a client to any server when a response to the DHCPv6 Renew message is not received.

DHCPv6 Release

Number of received messages sent by a server to a client in response to a Solicit, Request, Renew, Rebind, Information-Request, Confirm, Release, or Decline message.

DHCPv6 Decline

Number of received messages sent by a client to a server to indicate that the assigned address is already in use.

DHCPv6 Reconfigure

Number of received messages sent by a server to a client to indicate that the server has new or updated configuration settings.

DHCPv6 Relay Forward

Number of received messages sent by a relay agent to forward a message to a server. Contains a client message encapsulated as the DHCPv6 Relay-Message option.

DHCPv6 Relay Reply

Number of received messages sent by a server to send a message to a client through a relay agent. Contains a server message encapsulated as the DHCPv6 Relay-Message option.

NDP Router Solicitation

Number of received bridged messages originated by the hosts to request a router to send a router advertisement.

NDP Router Advertisement

Number of received bridged messages originated by the routers to advertise their presence and link specific parameters such as link prefixes, link MTU, and hop limits. These messages are sent periodically and also in response to Router Solicitation messages.

NDP Neighbor Solicitation

Number of received bridged messages originated by the nodes to request another node's link layer address and also for functions such as duplicate address detection and neighbor unreachability detection.

NDP Neighbor Advertisement

Number of received bridged messages in response to Neighbor Solicitation messages. If a node changes its link-layer address, it can send an unsolicited Neighbor Advertisement to advertise the new address.

NDP Redirect

Number of received bridged messages to inform a host of a better first-hop node on the path to a destination. Hosts can be redirected to a better first-hop router but can also be informed by a redirect that the destination is in fact a neighbor.

NDP Certificate Solicit

Number of received bridged messages to know the certification path to the trust anchor. Hosts will send the Certification Path Solicitations.

NDP Certificate Advert

Number of received bridged messages to know the certification path to the trust anchor. Routers will send the Certification Path Advertisement messages.

DHCPv6 Solicitation

Number of received bridged messages sent by a client to locate DHCPv6 servers.

DHCPv6 Advertisement

Number of received bridged messages sent by a DHCPv6 server in response to a DHCPv6 Solicitation message to indicate availability.

DHCPv6 Request

Number of received bridged messages sent by a client to request addresses or configuration settings from a server.

DHCPv6 Reply

Number of received bridged messages sent by a DHCPv6 server to a client in response to a Solicit, Request, Renew, Rebind, Information-Request, Confirm, Release, or Decline message.

DHCPv6 Inform

Number of received bridged messages sent by a client to request configuration settings (but not addresses).

DHCPv6 Confirm

Number of received bridged messages sent by a client to all servers to determine if a client's configuration is valid for the connected link.

DHCPv6 Renew

Number of received bridged messages sent by a client to a server to extend the lifetime of assigned addresses and obtain updated configuration settings.

DHCPv6 Rebind

Number of received bridged messages sent by a client to any server when a response to the DHCPv6 Renew message is not received.

DHCPv6 Release

Number of received bridged messages sent by a server to a client in response to a DHCPv6 Solicitation, Request, Renew, Rebind, Information-Request, Confirm, Release, or Decline message.

DHCPv6 Decline

Number of received bridged messages sent by a client to a server to indicate that the assigned address is already in use.

DHCPv6 Reconfigure

Number of received bridged messages sent by a server to a client to indicate that the server has new or updated configuration settings. The client then sends either a Renew or Information-Request message.

DHCPv6 Relay Forward

Number of received bridged messages sent by a relay agent to forward a message to a server. Contains a client message encapsulated as the DHCPv6 Relay-Message option.

DHCPv6 Relay Reply

Number of received bridged messages sent by a server to send a message to a client through a relay agent. Contains a server message encapsulated as the DHCPv6 Relay-Message option.

NDP RS Drop (Router Solicitation)

Number of messages dropped that are originated by the hosts to request a router to send a Router Advertisement.

NDP RA Drop (Router Advertisement)

Number of messages dropped that are originated by the routers to advertise their presence and link-specific parameters such as link prefixes, link MTU, and hop limits. These messages are sent periodically and also in response to Router Solicitation messages.

NDP NS Drop (Neighbor Solicitation)

Number of messages dropped that are originated by the nodes to request another node's link layer address and also for functions such as duplicate address detection and neighbor unreachability detection.

NDP NA Drop (Neighbor Advertisement)

Number of messages dropped in response to Neighbor Solicitation messages. If a node changes its link-layer address, it can send an unsolicited Neighbor Advertisement to advertise the new address.

DHCPv6 Solicitation

Number of messages dropped that are sent by a client to locate DHCPv6 servers.

DHCPv6 Advertisement

Number of messages dropped that are sent by a DHCPv6 server in response to a DHCPv6 Solicitation message to indicate availability.

DHCPv6 Reply

Number of messages dropped that are sent by a DHCPv6 server to a client in response to a Solicit, Request, Renew, Rebind, Information-Request, Confirm, Release, or Decline message.

DHCPv6 Inform

Number of messages dropped that are sent by a client to request configuration settings (but not addresses).

total

Total number of NDSUPRESS dropped messages.

silent

Number of silently dropped messages.

ns_in_out

Number of Neighbor Solicitation (NS) owner messages on the input interface.

ns_dad

Number of NS Duplicate Address Detection (DAD) messages suppressed.

unicast

Number of NS unicast messages suppressed.

multicast

Number of NS multicast messages suppressed.

internal

Number of internal failure messages.

Dropped Messages

Name of the dropped messages.

total

Total number of dropped messages.

silent

Number of silently dropped messages.

internal

Number of internal failure messages.

CGA_vfy

Number of messages where Cryptographically Generated Address (CGA) option is not getting verified.

RSA_vfy

Number of messages where RSA signature is not getting verified.

limit

Number of messages in which the address limit is reached.

martian

Number of Martian packets.

A Martian packet is an IP packet which specifies a source or destination address that is reserved for special-use by Internet Assigned Numbers Authority (IANA) and cannot actually originate as claimed or be delivered. Martian packets commonly arise from IP address spoofing in denial-of-service attacks, but can also arise from network equipment malfunction or misconfiguration of a host.

martian_mac

Number of Martian MAC packets.

no_trust

Number of packets marked for detection of policy and collision.

not_auth

Number of packets that are not authorized on port.

stop

Number of packets that are accepted, but not forwarded.

Multicast NS Forwarded

Total number of NS-forwarded multicast messages.

Multicast NS Dropped

Total number of NS-dropped multicast messages.

LMA Name

Name of the LMA.

Total Bindings

Total number of binding updates sent to the LMA by the controller.

PBU Sent

Total number of Proxy Binding Updates (PBUs) sent to the LMA by the controller.

PBU is a request message sent by the Mobile Access Gateway (MAG) to a mobile node’s LMA for establishing a binding between the mobile node’s interface and its current care-of address (Proxy-CoA).

PBA Received

Total number of Proxy Binding Acknowledgements (PBAs) received by the controller for the LMA.

PBA is a reply message sent by an LMA in response to a PBU message that it received from a MAG.

PBRI Sent

Total number of Proxy Binding Revocation Indications (PBRIs) sent by the controller to the LMA.

PBRI Received

Total number of PBRIs received from the LMA by the controller.

PBRA Sent

Total number of Proxy Binding Revocation Acknowledgements (PBRAs) sent by the controller to the LMA.

PBRA Received

Total number of PBRAs received from the LMA by the controller.

Number of Handoff

Number of handoffs between the controller and the LMA.

PBU Dropped

Number of PBUs dropped between the controller and the LMA.

Prefer Mode of Global/AP Groups

The name of the AP that is configured with either IPv4, IPv6 or global.

Total

The total count of APs configured with preferred mode.

Success

Counts the number of times the AP was successfully configured with the preferred mode.

Unsupported

The number of APs that are not supported with the controller.

Already Configured

Counts the attempts made to configure an already configured AP.

Per AP Group Configured

Preferred mode configured on per AP group

Failure

Counts the number of times the AP was failed to get configured with the preferred mode.

Local Interface

Local interface name.

Neighbor Name

Name of each CDP neighbor.

Neighbor Address

IPv4 or IPv6 address of the CDP neighbor.

Neighbor Port

IP address of each CDP neighbor.

TTL

Time left (in seconds) before each CDP neighbor entry expires.

Capability

Functional capability of each CDP neighbor:

• R—Router
• T—Trans Bridge
• B—Source Route Bridge
• S—Switch
• H—Host
• I—IGMP
• r—Repeater
• M—Remotely Managed Device

Platform

CDP neighbor device platform.

Local Interface

controller port on which the CDP packets were received.

Neighbor Name

Name of the CDP neighbor.

Neighbor Address

IPv4 or IPv6 address of the CDP neighbor.

Neighbor Port

Port used by the CDP neighbor for transmitting CDP packets.

Duplex

Duplex type of the CDP neighbor.

Advt Version

CDP version being advertised (v1 or v2).

TTL

Time left (in seconds) before the CDP neighbor entry expires.

Capability

Functional capability of the CDP neighbor:

• Router
• Trans Bridge
• Source Route Bridge
• Switch
• Host
• IGMP
• Repeater
• Remotely Managed Device

Platform

Hardware platform of the CDP neighbor device.

Software Version

Software running on the CDP neighbor.

AP Name

Access point name.

CDP Neighbors

CDP neighbor name.

AP Name

Access point name.

AP IP Address

IP address of the access point.

Neighbor Name

Name of the neighbor.

Neighbor Address

IP address of the neighbor.

Neighbor Port

Port number of the neighbor.

Advt Version

Advertised CDP version (v1 or v2).

Packets In

Number of CDP packets received by the controller.

Packet Out

Number of CDP packets sent from the controller.

Checksum Errors

Number of packets that experienced a checksum error.

No Memory Errors

Number of packets dropped due to insufficient memory.

Invalid Packets

Number of invalid packets.

MAC Address

MAC address of the rogue access point.

SSID

SSID that is broadcast by the rogue access point radio.

Channel

Channel number of the access point that has detected this friendly rogue access point.

# Detecting Radios

Number of Cisco Radios that detect the rogue access point radio.

Number of Clients

Number of clients associated with the rogue access point.

Status

Automatic and configurable state of this radio relative to the network or controller. The status of rogue access point radios is one of the following:

• Internal—The unknown access point is inside the network and poses no threat to WLAN security. For example, the access points in your lab network is an internal rogue access point.
• External—The unknown access point is outside the network and poses no threat to WLAN security. For example, the access points belonging to a neighboring coffee shop are external rogue access points.
• Alert—The unknown access point is not in the neighbor list or in the user-configured friendly MAC list.

MAC Address

MAC address of the rogue access point.

SSID

SSID being broadcast by the rogue access point radio.

Channel

Channel number of the access point that has detected this rogue access point.

# Detecting Radios

Number of Cisco Radios that detect the rogue access point radio.

Number of Clients

Number of clients associated with the rogue access point.

Status

Automatic and configurable state of the radio relative to the network or controller. The status of rogue access point radios is one of the following:

• Alert—The unknown access point is not in the neighbor list or in the user-configured friendly MAC list.
• Threat—The unknown access point is found to be on the network and poses a threat to WLAN security.
• Contained—The unknown access point is contained.
• Containment Pending—The unknown access point is marked “Contained,” but the action is delayed due to unavailable resources.

MAC Address

MAC address of the rogue access point.

SSID

SSID that is broadcast by the rogue access point radio.

Channel

Channel number of the access point that has detected this friendly rogue access point.

# Detecting Radios

Number of Cisco Radios that detect the rogue access point radio.

Number of Clients

Number of clients associated with the rogue access point.

Status

Automatic and configurable state of this radio relative to the network or controller. The status of rogue access point radios is one of the following:

• Internal—The unknown access point is inside the network and poses no threat to WLAN security. For example, the access points in your lab network is an internal rogue access point.
• External—The unknown access point is outside the network and poses no threat to WLAN security. For example, the access points belonging to a neighboring coffee shop are external rogue access points.
• Alert—The unknown access point is not in the neighbor list or in the user-configured friendly MAC list.

MAC Address

MAC address of the rogue access point.

SSID

SSID being broadcast by the rogue access point radio.

Channel

Channel number of the access point that has detected this unclassified rogue access point.

# Detecting Radios

Number of Cisco Radios that detect the rogue access point radio.

Number of Clients

Number of clients associated with the rogue access point.

Status

Automatic and configurable state of this radio relative to the network or controller. The status of rogue access point radios is one of the following:

• Pending—On first detection, the unknown access point is put in the “Pending” state for 3 minutes. During this time, the managed access points determine if the unknown access point is a neighbor access point.
• Alert—The unknown access point is not in the neighbor list or in the user-configured friendly MAC list.
• Contained—The unknown access point is contained.
• Containment Pending—The unknown access point is marked “Contained,” but the action is delayed due to unavailable resources.

MAC Address

MAC address of the rogue access point.

Type

Rogue access point type:

• AP—Infrastructure access point
• Ad Hoc—Client-to-Client

Is Rogue on Wired Network?

Yes or No. Unknown if WEP is enabled, as shown below on this page.

First Time Reported On

Date and time that the radio was first scanned by the controller.

Last Time Reported On

Date and time that the radio was last scanned by the controller.

Classification Change By

Classification of the rogue access point either manually, by default, or by rogue rule.

Class Type

Class of this radio as follows:

• Friendly—An unknown access point that matches the user-defined friendly rules or an existing known and acknowledged rogue access point. Friendly access points cannot be contained.
• Malicious—An unknown access point that matches the user-defined malicious rules or is moved manually by the user from the “Friendly” or “Unclassified” classification type.

Note Once an access point is classified as “Malicious,” you cannot apply rules to it in the future, and it cannot be moved to another classification type. If you want to move a malicious access point to the “Unclassified” classification type, you must delete the access point and allow the controller to reclassify it.

• Unclassified—An unknown access point that does not match the user-defined friendly or malicious rules. An unclassified access point can be contained. It can also be moved to the “Friendly” or “Malicious” classification type automatically in accordance with user-defined rules or manually by the user.
• Custom—An unknown access point that matches the user-defined classification type.

Manually Contained

Whether the rogue is manually contained or automatically contained.

State

Status of this radio as follows:

• Alert
• Internal
• External
• Contain
• Pending

Update Status¹

Configurable state of this rogue access point in the controller. You may set the status to one of the following:

• Internal—The controller trusts this rogue access point. This option is available if the Class Type is set to Friendly.
• External—The controller acknowledges the presence of this rogue access point. This option is available if the Class Type is set to Friendly.
• Contain—The controller contains the offending device so that its signals no longer interfere with authorized clients. This option is available if the Class Type is set to Malicious or Unclassified.
• Alert—The controller forwards an immediate alert to the system administrator for further action. This option is available if the Class Type is set to Malicious or Unclassified.

Maximum number of APs to contain this rogue

Maximum number of access points used to contain this rogue (1, 2, 3, or 4).

Base Radio MAC

MAC address of the Cisco access point that identified the rogue access point radio.

AP Name

Name of the Cisco access point that identified the rogue access point radio.

SSID

SSID being broadcast by the rogue access point radio.

Channel

Channel the rogue access point is broadcasting on.

Channel Width (Mhz)

Channel bandwidth: 20 MHz or 40 MHz.

Radio Type

Protocol of the rogue access point that is either 802.11a, 802.11b, 802.11g, or 802.11n.

WEP

Whether WEP is enabled or disabled.

WPA

Type of security protocol is Enabled or Disabled.

Pre-Amble

Preamble type of the AP that detected this rogue.

RSSI

Receive signal strength indicator (RSSI) of rogue access point radio at the access point.

If RSSI indicates –80 dBm or lower, the rogue access point is far away or transmitting at a low signal strength.

If RSSI indicates –60 dBm or higher, the rogue access point is close and/or transmitting at a high signal strength.

SNR

Signal to noise ratio (SNR) of rogue access point radio at the access point.

Containment Type

Contained if the rogue access point clients have been contained at Level 1 through Level 4 under Update Status Maximum Number; otherwise this field is blank.

Containment Channel

Current channel or channels if the rogue access point clients have been contained at Level 1 through Level 4 under Update Status; otherwise this field is blank.

MAC Address

MAC address of the rogue client.

Last Time Heard

Last time the Cisco access point detected the rogue access point client.

MAC Address

MAC address of the rogue client.

AP MAC Address

MAC address of the Cisco access point.

SSID

Service Set Identifier being broadcast by the rogue client.

# Detecting Radios

Number of Cisco radios detecting the rogue client.

Last Seen On

Last time that the Cisco access point detected the rogue access point client.

Status

Configurable state of this radio relative to the network or controller:

• Contain—The controller contains the offending device so that its signals no longer interfere with authorized clients.
• Alert—The controller forwards an immediate alert to the system administrator for further action.

Wired

Whether the client is on a wired network or not.

MAC Address

MAC address of the rogue access point.

APs MAC Address

MAC address of the Cisco access point that identified the rogue access point radio.

Radio Type

SSID

SSID being broadcast by the rogue access point radio.

IP Address

IPv4 or IPv6 address of the rogue client or Unknown.

First Time Reported On

Date and time that the radio was first scanned by the controller.

Last Time Reported On

Date and time that the radio was last scanned by the controller.

State

Status of this radio is as follows:

• Contain
• Alert

Update Status²

Configurable state of this rogue access point in the controller. You may set the status to one of the following:

• Contain—The controller contains the offending device so that its signals no longer interfere with authorized clients.
• Alert—The controller forwards an immediate alert to the system administrator for further action.

Base Radio MAC

MAC of the access point.

AP Name

Access points that identified the rogue access point radio.

Channel

Channel that the access point is broadcasting on.

Radio Type

Protocol of the rogue access point is either 802.11a, 802.11b, 802.11g, 802.11n, or Unknown.

RSSI

Receive signal strength indicator (RSSI) of access point radio at the access point.

–80 dBm or lower, the rogue access point is far away or transmitting at a low signal strength.

–60 dBm or higher, the rogue access point is close and/or transmitting at a high signal strength).

SNR

Signal to noise ratio (SNR) of the access point.

MAC Address

MAC address of the rogue client.

BSSID

MAC address of the Cisco access point.

SSID

SSID that is broadcast by the rogue client.

# Detecting Radios

Number of Cisco Radios that detect the rogue client.

Status

Status of this radio as follows:

• Contain—The controller contains the offending device so that its signals no longer interfere with authorized clients.
• Alert—The controller forwards an immediate alert to the system administrator for further action.
• Internal—The controller trusts this rogue access point.
• External—The controller acknowledges the presence of this rogue access point.

MAC Address

MAC address of the ad-hoc rogue.

BSSID

BSSID of the ad-hoc rogue.

First Time Reported On

Date and time that the rogue was first scanned by the controller.

Last Time Reported On

Date and time that the rogue was last scanned by the controller.

Classification Change By

Classification of the rogue access point either manually, by default, or by rogue rule.

Classified by AP

MAC address of the access point that classified the rogue access point.

Classified RSSI

RSSI of the rogue access point.

Rule Name

Name of the custom rogue rule.

Severity Score

Custom classification severity score for the rogue rule. The range is from 1 to 100.

State Change By

Cause of the state change of the rogue access point.

Class Type

Classification type of the rogue access point. It can be one of the following:

• Friendly—An unknown access point that matches the user-defined friendly rules or an existing known and acknowledged rogue access point. Friendly access points cannot be contained.
• Malicious—An unknown access point that matches the user-defined malicious rules or is moved manually by the user from the “Friendly” or “Unclassified” classification type.

Note Once an access point is classified as “Malicious,” you cannot apply rules to it in the future, and it cannot be moved to another classification type. If you want to move a malicious access point to the “Unclassified” classification type, you must delete the access point and allow the controller to reclassify it.

• Unclassified—An unknown access point that does not match the user-defined friendly or malicious rules. An unclassified access point can be contained. It can also be moved to the “Friendly” or “Malicious” classification type automatically in accordance with user-defined rules or manually by the user.
• Custom—An unknown access point that matches the user-defined classification type.

State

Current state of this rogue access point in the controller. It can be one of the following:

• Internal—The controller trusts this rogue access point. This option is available if the Class Type is set to Friendly.
• External—The controller acknowledges the presence of this rogue access point. This option is available if the Class Type is set to Friendly.
• Contain—The controller contains the offending device so that its signals no longer interfere with authorized clients. This option is available if the Class Type is set to Malicious or Unclassified.
• Alert—The controller forwards an immediate alert to the system administrator for further action. This option is available if the Class Type is set to Malicious or Unclassified.

Update Status³

Configurable state of this rogue access point in the controller. You may set the status to one of the following:

• Contain—The controller contains the offending device so that its signals no longer interfere with authorized clients.
• Alert—The controller forwards an immediate alert to the system administrator for further action.
• Internal—The controller trusts this rogue access point.
• External—The controller acknowledges the presence of this rogue access point.

Maximum number of APs to contain this rogue

Maximum number of access points used to contain this rogue (1, 2, 3, or 4).

Base Radio MAC

MAC of the access point.

AP Name

Access points that identified the access point radio.

SSID

SSID of the access point.

Channel

Channel on which the rogue access point is broadcasting.

Radio Type

Protocol of the rogue access point that is either 802.11a, 802.11b, 802.11g, 802.11n, or Unknown.

WEP

Whether WEP is enabled on the access point.

WPA

Whether WPA is enabled on the access point.

Pre-Amble

Preamble type of either Long or Short.

RSSI

RSSI of the access point.

SNR

Signal to noise ratio (SNR) of the access point at the Cisco access point.

Containment Type

Type of containment.

Containment Channels

Channels on which the access point contained the ad-hoc rogue.

Category

Drop down box from which you can select one of the following category:

• All
• Infra
• Transport
• Keepalive
• GW-Reachability
• Config-Sync
• None

RF Client Brief

Displays the RF Clients list.

Sanity Counters

Sanity Messages successfully sent

Displays the number of Sanity messages i.e. health check messages sent from this box.

Sanity Messages failed to send

Displays the number of Sanity messages failed to send from the controller.

Sanity Messages received from peer

Displays the number of Sanity messages received from the Peer WLC.

Transport Counters

Number of messages in the hold Queue

Displays information about number of IPC messages in queue.

Application message Max Size

Displays information about number of IPC messages in queue.

IPC message Max Size

Displays maximum supported MTU size IPC messages.

Time to hold IPC messages

Displays maximum time to hold the IPC messages if the IPC buffer is not full.

IPC sequence number in the TX side

Displays IPC sequence number in the transmitter window.

IPC sequence number in the RX side

Displays IPC sequence number in the receiver window.

IPC sequence number mismatches (Low)

Displays low watermark of IPC sequence number mismatches.

IPC sequence number mismatches (high)

Displays high watermark of IPC sequence number mismatches.

Keepalive Counters

Keep Alive Request Received

Displays the number of Keep Alive request received from the peer through RP.

Keep Alive Responses Received

Displays the number of Keep Alive response received from the peer through RP.

Keep Alive Request Sent

Displays the number of Keep Alive Requests sent to peer.

Keep Alive Response Sent

Displays the number of Keep Alive Responses sent from the controller.

Keep Alive Requests failed to send

Displays the number of Keep Alive Requests failed to send from the controller.

Keep Alive Responses to failed to send

Displays the number of Keep Alive Responses failed to send from the controller.

Number of times two Keep alives are lost consecutively

Displays the number of times 2 keepalives are lost consecutively. i.e twice did not get the response for keep alive requests.

Network Latencies (RTT) for the Peer Reachability in microsec

Peer Reachability Latency

Displays the latency between peers through RMI.

Gx Reachability

Gw Pings Succesfully sent

Displays the number of Pings successfully sent to Gateway from the controller.

Gw Pings Failed to send

Displays the number of Pings failed to send to Gateway from the controller.

Gw Responses Received

Displays the number of Pings successfully received from the Gateway to the controller.

Current consecutive Gw Responses Lost

Displays the number of consecutive GW responses lost i.e number of consecutive responses not received.

High Water Mark of Gw Responses Lost

Displays the highest consecutive GW responses lost to the controller.

Network Latencies (RTT) for the Management Gateway Reachability in microsec

Gateway Reachability Latency

Displays the latency between the controller and the GW.

Ping Request and Response

Ping Requests sent to Peer

Displays the number of ping requests sent to peer through RMI.

Ping Response received from Peer

Displays the number of ping responses received from the peer through RMI.

Config Sync Counter

Usmdb Functions sent for Sync

Displays the total number of Usmdb functions sent for Sync to Standby

Failed sync for Usmdb Sync

Displays the total number of Usmdb functions failed to send for Sync to Standby.

UsmDbs which failed to sync from Active to Standby

Index

Displays the index of UsmDb failed to sync.

Failed UsmDb

Displays the information about the UsmDb that is failed to sync to standby.

Port Information

Local Physical Ports

Indicate the ports that are operationally up in the controller.

Peer Physical Ports

Indicate the ports that are operationally up in the peer controller.

Local State

Current state of the Redundancy Facilitator of the controller. It can be Active, Standby HOT, or Standby COLD.

Peer State

Current state of the Redundancy Facilitator of the peer controller. It can be Active, or Standby HOT, or Standby COLD.

Unit

Type of controller that can be primary or secondary.

Unit ID

Unique ID of the redundant unit. It can be the MAC address of the controller.

Redundancy State

Redundancy mode operational on the controller. The redundancy modes are as follows:

• 0—No redundancy
• SSO—Hot Standby Mode
• RPR—Cold Standby Mode

Maintenance Mode

Maintenance mode that can be enabled or disabled. Indicates if the redundant units can communicate synch messages with each other.

If the controllers cannot reach each other through the redundant port or through the Redundant Management Interface, the standby controller goes into the maintenance mode.

Maintenance Cause

Cause of the switchover to the maintenance mode.

Average Redundancy Peer Reachability Latency

Average delay to reach the peer controller in seconds.

Average Management Gateway Reachability Latency

Average delay to reach the management gateway in seconds.

BulkSync Status

Indicates whether the bulk sync is completed once the Standby boots up and moves to STANDBY HOT state. This can be:

• In-Progress
• Pending and
• Complete

Redundancy Management

This is the IP address of Redundancy Management Interface of the controller.

Peer Redundancy Management

This is the IP address of the Redundancy Management Address of the Peer controller.

Redundancy port IP

This is the IP address of the Redundancy Port of the controller.

Peer Redundancy port IP

This is the IP address of the Redundancy Port of the Peer controller.

Peer Service Port IP

This is the IP address of the Service port of the Peer controller.

Switchover History Table

Previous Active

Information about controller that was previously Active before Switchover. This will have the RMI IP of previous Active.

Current Active

Information about controller that was currently Active after Switchover. This will have the RMI IP of current Active.

Switchover Reason

Information about the switchover reason whether it is User initiated, GW not reachable or Active Failed.

Switchover Time

Information about when the switchover has happened.

Redundancy Timeout Values

Keep Alive TimeOut

Information about the timeout the controller can wait for Keep Alive responses before considering keep alive is lost.

Peer Search TimeOut

Information about the timeout the controller can wait for peer search responses before considering peer is not reachable.

Network Routes Peer

Number of Routes

Total number of Network Routes this controller holds.

IP Address

IP address of target network/IP address.

IP Netmask

IP network mask information of the routes of this controller.

Gateway IP Address

Information about the next hop gateway for this route.

MAC Address

MAC address of the client.

IPv4 Address

List of IPv4 address of the clients.

IPv6 Address

List the IPv6 address of the clients.

Client Type

Regular, WGB, WGB client, or Unknown type.

Number of Wired Client(s)

Number of wired clients that are connected to this WGB if the client type is WGB.

User Name

Login client name from RADIUS or controller authentication.

Port Number

Controller port used for the client’s associated access point.

Interface

User-defined name for this interface; for example, management, service-port, virtual.

VLAN ID

VLAN tag identifier, or 0 for no VLAN tag.

CCX Version

Cisco Client Extensions (CCX) version in use, if supported.

If the client supports Cisco Client Extensions version 5, two additional button are displayed:

• Send CCXV5 Request
• Display

See the Client Reporting page for more information about Cisco Client Extensions version 5 client reporting.

E2E Version

End-to-End version in use, if supported.

Mobility Role

Local when the client has not roamed from its original controller or when the client has roamed to another controller on the same subnet.

Foreign when the client has roamed from its original controller to another controller on a different subnet.

Anchor when the client has roamed back to its original controller after roaming to another controller on a different subnet.

Mobility Peer IP Address

N/A when the client is Local (has not roamed from its original subnet).

Anchor IP address (the IP address of the original controller) when the client is Foreign (has roamed to another controller on a different subnet).

Foreign IP address (the IP address of the original controller) when the client is Anchor (has roamed back to another controller on a different subnet).

Policy Manager State

DHCP_REQD when a DHCP server is required to complete the security policy.

8021X_REQD when 802.1X is the required policy.

Other messages to be determined.

Management Frame Protection

Management frame protection (MFP) provides security for the unprotected and unencrypted 802.11 management messages passed between access points and clients. MFP provides both infrastructure and client support.

UpTime (Sec)

Time in seconds since the client has been up.

Power Save Mode

Power save mode of the client.

Current TxRateSet

Current transmission rate.

Data RateSet

Data rate for the client.

KTS CAC Capability

KTS-based CAC capability of the client.

802.11u

Hotspot is a solution that enables 802.1X capable clients to interwork with external networks. This feature provides service availability information to clients and can help them to associate available networks.

Security Policy Completed

No (when the security policy checks have not been completed) or
Yes (when the security policy checks have been completed).

Auth Key Mgmt

Type of Authenticated Key Management that can be one of the following:

• 802.1X
• CCKM
• PSK
• 802.1X+CCKM

EAP Type

–

SNMP NAC State

Current state of the client: Quarantine, Access, or Invalid.

RADIUS NAC State

Current state of the client in the RADIUS NAC-enabled WLAN. When a client is associated to the controller on a RADIUS NAC-enabled WLAN, the controller forwards the request to the ISE server. The state of the client can be DHCP_REQD or POSTURE_REQD.

CTS Security Group Tag

Cisco TrustSec Security Group Tag information.

AAA Override ACL Name

Name of the AAA Override ACL. This ACL is in addition to the VLAN ACL that is applied to the VLAN on the Ethernet interface.

If a client gets an AAA Override of the VLAN, the client is placed on the overridden VLAN and the ACL on the VLAN applies to the client. To support centralized access control through an AAA server, such as ISE or ACS, an ACL must be configured on the controller and the WLAN must be configured with the AAA override-enabled feature.

AAA Override ACL Applied Status

Status of the client that indicates if the client has been authenticated after the application of an AAA Override ACL.

AAA Override Flex ACL

Name of the IPv4 ACL that is the FlexConnect ACL for clients connected to FlexConnect access points.

AAA Override Flex ACL Applied Status

Status of the client that indicates if the client has been authenticated after the application of the AAA Override FlexConnect ACL.

Redirect URL

Redirect URL that the client should be directed to after authentication.

IPv4 ACL Name

Name of the IPv4 ACL.

IPv4 ACL Applied Status

Status of whether the IPv4 ACL was applied to the client’s WLAN.

IPv6 ACL Name

Name of the IPv6 ACL.

IPv6 ACL Applied Status

Status of whether the IPv6 ACL was applied to the client’s WLAN.

mDNS Profile Name

mDNS profile associated with the service that the client is using.

mDNS Service Advertisement Count

Count of the mDNS service advertisements that the client received for a requested service.

AAA Role Type

Role of the user.

Local Policy Applied

Policy applied to the client device.

WMM State

WMM state that you enable or disable.

Wi-Fi Multimedia (WMM) is a QoS protocol and a subset of 802.11e standard. WMM technology identifies packets of voice, video, audio or other types of data and prioritizes their delivery based on traffic conditions. Videos transmitted over wireless networks suffer greatly if packets are delayed or dropped. So video data is given priority over other types of data on a network.

QoS Level

Quality of Service level that you set on the Editing QoS Profile page:

• Platinum (Voice)—Assures a high QoS for Voice over Wireless.
• Gold (Video)—Supports the high-quality video applications.
• Silver (Best Effort)—Supports the normal bandwidth for clients.
• Bronze (Background)— Provides lowest bandwidth for guest services.

VoIP clients should be set to Platinum, Gold or Silver, while low-bandwidth clients can be set to Bronze.

Diff Serv Code Point (DSCP)

Prioritization of packets by the 6 bits in the DSCP that you set on the Editing QoS Profile page.

802.1P Tag

VLAN tag (1-7) received from the client, defining the access priority. This tag maps to the QoS Level for client-to-network packets. You set this tag on the Editing QoS Profile page.

Average Data Rate

Operator-defined average data rate for non-UDP traffic that you set on the Editing QoS Profile page.

Average Real-Time Rate

Operator-defined average data rate for UDP traffic that you set on the Editing QoS Profile page.

Burst Data Rate

Operator-defined peak data rate for non-UDP traffic that you set on the Editing QoS Profile page.

Burst Real-Time Rate

Operator-defined peak data rate for UDP traffic that you set on the Editing QoS Profile page.

Bytes Received

Number of bytes received by the controller from the client.

Bytes Sent

Number of bytes sent to the client from the controller.

Packets Received

Number of packets received by the controller from the client.

Packets Sent

Number of packets sent to the client from the controller.

Policy Errors

Number of policy errors for the client.

RSSI

Receive signal strength indicator of the client RF session.

SNR

Signal to Noise Ratio of the client.

Sample Time

Time that the client statistics snapshot was taken.

Excessive Retries

Number of excessive retries before the access point looks for another controller.

Retries

Number of retries before the access point finds a controller.

Success Count

Counter increments when a CTS is received in response to an RTS.

Fail Count

Modem failure count.

Tx Filtered

Number of filtered error frames.

Data Retries

Number of data retries by the client.

RTS Retries

Number of request-to-send retries by the client.

Duplicates

Number of duplicate packets received.

Decrypt Failed

Number of decrypt packets that failed.

Mic Errors

Number of packets that have MIC errors.

Mic Missing Frames

Number of packets that do not have MIC.

RA Packets Dropped

Number of router advertisement packets that are dropped.

Interim Updates Sent

Number of times the interim updates were sent.

Data Bytes Received

Number of data bytes received by the controller from the client.

Data Rx Bytes Dropped

Number of Rx data bytes dropped by the controller from the client.

Data Rx Packets Dropped

Number of Rx packets dropped by the controller from the client.

Real-time Packets Received

Number of real-time packets received by the controller from the client.

Real-time Rx Packets Dropped

Number of Rx real-time packets dropped by the controller from the client.

Real-time Bytes Received

Number of real-time bytes received by the controller from the client.

Rx Data Bytes Dropped

Number of Rx data bytes dropped by the controller from the client.

Rx Real-time Bytes Dropped

Number of Rx real-time bytes dropped by the controller from the client.

Data Packets Sent

Number of packets sent to the client from the controller.

Data Bytes Sent

Number of data bytes sent to the client from the controller.

Real-time Bytes Sent

Number of real-time bytes sent to the client from the controller.

Tx Data Bytes Dropped

Number of Tx data bytes dropped by the controller from the client.

Tx Real-time Bytes Dropped

Number of Tx real-time bytes dropped by the controller from the client.

Data Packets Received

Number of data packets received by the controller from the client.

Real-time Packets Sent

Number of real-time packets sent to the client from the controller.

Real-time Tx Packets Dropped

Number of Tx real-time packets dropped by the controller from the client.

Tx Data Packets Dropped

Number of Tx data packets dropped by the controller from the client.

Tx Real-time Bytes Dropped

Number of Tx real-time packets dropped by the controller from the client.