- Preface
- Overview of the Controller
-
- Upgrade the Cisco Catalyst 9800 Wireless Controller Software
- In-Service Software Upgrade
- Staggered AP Upgrade
- Software Maintenance Upgrade
- Efficient Image Upgrade and Out-of-band AP Image Download
- Predownloading an Image to an Access Point
- N+1 Hitless Rolling AP Upgrade
- NBAR Dynamic Protocol Pack Upgrade
- Wireless Sub-Package for Switch
-
- Global Use Access Points
- Countries and Regulations
- Security
- AP Joining
- AP Crash File Upload
- LED States for Access Points
- AP Support Bundle
- Access Point Memory Information
- Access Point Tag Persistency
- AP Power Save
- Real-Time Access Points Statistics
- AP Configuration
- Secure Data Wipe
- Wi-Fi 7 Operations
- Troubleshooting Lightweight Access Points
-
- Radio Resource Management
- Coverage Hole Detection
- Optimized Roaming
- Cisco Flexible Radio Assignment
- XOR Radio Support
- Cisco Receiver Start of Packet
- Client Limit
- IP Theft
- Unscheduled Automatic Power Save Delivery
- Target Wake Time
- Enabling USB Port on Access Points
- Dynamic Frequency Selection
- Cisco Access Points with Tri-Radio
- Cisco Catalyst Center Assurance Wi-Fi 6 Dashboard
- Antenna Disconnection Detection
- Neighbor Discovery Protocol Mode on Access Points
- 6-GHz Band Operations
-
- AP Packet Capture
- DHCP Option82
- RADIUS Authentication and Accounting
- Cisco StadiumVision
- Persistent SSID Broadcast
- Network Monitoring
- Creating a Lobby Ambassador Account
- Lobby Ambassador Account
- Guest User Accounts
- Link Local Bridging
- Web Admin Settings
- Web UI Configuration Command Accounting in TACACS Server
- Embedded Packet Capture
- Layer 3 Access
-
- Network Mobility Services Protocol
- Application Visibility and Control
- Software-defined application visibility and control
- Cisco Hyperlocation
- FastLocate for Cisco Catalyst Series Access Points
- IoT Services Management
- IoT Module Management in the Controller
- EDCA Parameters
- Adaptive Client Load-Based EDCA
- 802.11 parameters and Band Selection
- NBAR Protocol Discovery
- Conditional Debug, Radioactive Tracing, and Packet Tracing
- Aggressive Client Load Balancing
- RF based Automatic AP Load Balancing
- Accounting Identity List
- Accounting Session ID
- Interim Accounting
- Wireless Multicast
- Map-Server Per-Site Support
- Volume Metering
- Enabling Syslog Messages in Access Points and Controller for Syslog Server
- Login Banner
- Wi-Fi Alliance Agile Multiband
- SNMP Traps
- Disabling Clients with Random MAC Address
- Dataplane Packet Logging
- Streaming Telemetry
- Application Performance Monitoring
- Wireless Clients Threshold Warning
- Intelligent Capture Hardening
- Amazon S3 Support
- Amazon Web Services CloudWatch
- Kernel Minidump and Trustzone Upgrade
-
- MAC Filtering
- Web-Based Authentication
- Central Web Authentication
- Private Shared Key
- Multi-Preshared Key
- Wireless AAA Authentication Survivability Cache
- Wi-Fi Protected Access 3
- WPA3 Security Enhancements for Access Points
- IP Source Guard
- Traffic Filtering on AP by Source IP ACL
- 802.11w
- Management Frame Protection
- IPv4 ACLs
- Downloadable ACL
- DNS-Based Access Control Lists
- Allowed List of Specific URLs
- Cisco Umbrella WLAN
- RADIUS Server Load Balancing
- AAA Dead-Server Detection
- ISE Simplification and Enhancements
- RADIUS DTLS
- Policy Enforcement and Usage Monitoring
- Local Extensible Authentication Protocol
- Local EAP Ciphersuite
- Authentication and Authorization Between Multiple RADIUS Servers
- CUI Information in RADIUS Accounting
- Secure LDAP
- Network Access Server Identifier
- Locally significant certificates
- Public Key Infrastructure Management
- Controller Self-Signed Certificate for Wireless AP Join
- Managing Rogue Devices
- Classifying Rogue Access Points
- Advanced WIPS
- Cisco TrustSec
- SGT Inline Tagging and SXPv4
- Ciphersuites for CAPWAP-DTLS
- Configuring Secure Shell
- MACsec support on APs
- FIPS
- Internet Protocol Security
- Transport Layer Security Tunnel Support
- Configuring RFC 5580 Location Attributes
- IP MAC Binding
- Disabling IP Learning in FlexConnect Mode
- Disabling Device Tracking to Support NAC Devices
- Disabling IP Learning in Local Mode
- Security-Enhanced Linux
-
- WLANs
- WLAN Security
- Remote LANs
- RLAN External Module
- 802.11ax Per WLAN
- BSS Coloring
- DHCP for WLANs
- Aironet Extensions IE (CCX IE)
- Device Analytics
- Device Classifier Dynamic XML Support
- BSSID Counters
- Fastlane+
- Workgroup Bridges
- Peer-to-Peer Client Support
- Deny Wireless Client Session Establishment Using Calendar Profiles
- Ethernet over GRE
- Wireless Guest Access
- Wired Guest Access
- Data Rate Selection at SSID Level
- User Defined Network
- Hotspot 2.0
- Client Roaming Across Policy Profile
- Assisted Roaming
- 802.11r BSS Fast Transition
- 802.11v
- Virtual Routing and Forwarding
- Automated Frequency Coordination
-
- Cisco DNA Service for Bonjour Solution Overview
- Configuring Local and Wide Area Bonjour Domains
- Configuring Local Area Bonjour for Wireless Local Mode
- Configuring Local Area Bonjour for Wireless FlexConnect Mode
- Configuration Example for Local Mode - Wireless and Wired
- Configuration Example for FlexConnect Mode - Wireless and Wired
Introduction
This chapter covers the best practices recommended for configuring a typical Cisco Catalyst 9800 Series wireless infrastructure. The objective is to provide common settings that you can apply to most wireless network implementations. However, not all networks are the same. Therefore, some of the tips might not be applicable to your installation. Always verify them before you perform any changes on a live network.
For more information, see Cisco Catalyst 9800 Series Configuration Best Practices guide.
Feedback