Full Cisco Trademarks with Software License
Overview of the Controller
Outlines the architecture, configuration workflows, setup procedures, interactive help, support tools, and analytics features for the Cisco Catalyst 9800 Series Wireless Controller to facilitate comprehensive understanding and effective deployment. Outlines initial setup methods for the controller, describing available setup options, associated restrictions, and providing instructions to access the controller GUI using the provisioning SSID in EWC mode.
New Configuration Model
Introduces the tag-based configuration model for wireless networks and guides through creating and associating various profile types including wireless, flex, access point, and radio frequency profiles with network infrastructure.
Wireless Management Interface
Guides the configuration and operation of the Wireless Management Interface, including setup, migration procedures, and interface verification to ensure optimal management of wireless controllers.
Configure Network Address Translation for Wireless Management IP
Guides the configuration of Network Address Translation for wireless management interfaces and outlines Control and Provisioning of Wireless Access Points discovery settings for public and private IP environments.
Hardware Features
Outlines hardware security and management capabilities for controllers, detailing BIOS protection and upgrade procedures, as well as USB disablement via CLI to enhance device integrity and reduce vulnerabilities.
Smart Licensing Using Policy
Management over Wireless
This feature allows operators to monitor and configure the controller using wireless clients connected to the wireless controller network.
Boot Integrity Visibility
Outlines key concepts and verification procedures for Boot Integrity Visibility, focusing on feature history, software image and hardware validation, and platform identity and software integrity assessment to ensure secure and trustworthy device operation.
SUDI99 Certificate Support
Explains how devices use new SUDI99 certificates for device-specific authentication, details migration and backward-compatibility behavior, and provides GUI and CLI procedures to disable migration or verify SUDI certificate status.
Link Aggregation Group
Introduces Link Aggregation Group functionality, outlining Multi-LAG implementation using LACP and PAgP protocols to enhance link redundancy and load balancing in network environments.
Reload Reason History
Introduces the reload reason history feature for tracking device restart events and guides users through retrieving and verifying reload information using YANG data models.
Upgrade the Cisco Catalyst 9800 Wireless Controller Software
Details upgrade procedures for the Cisco Catalyst 9800 Wireless Controller, outlining key concepts, step-by-step instructions for both GUI and CLI methods, conversion between bundle and install modes, and the process for copying a WebAuth tar bundle to a standby controller.
In-Service Software Upgrade
Outlines Cisco In-Service Software Upgrade concepts, procedures, requirements, and best practices to enable seamless software upgrades on Cisco devices without impacting live traffic or causing service disruptions.
Staggered AP Upgrade
Explains access point upgrade configurations and how you can use them to customize upgrade processes in your network.
Software Maintenance Upgrade
Outlines software maintenance upgrade procedures for AP images, including implementation steps and feature enhancements introduced by new AP models using the AP Device Package (APDP).
Efficient Image Upgrade and Out-of-band AP Image Download
Outlines the Efficient Image Upgrade process for wireless networks, including concepts, restrictions, download procedures, GUI-based pre-download, FlexConnect AP configuration, site tag setup, tag attachment, and verification steps. Details configuration steps for Efficient Image Upgrade on FlexConnect APs, including enabling pre-download, configuring site tags, verifying site tag settings, attaching policy and site tags to APs, and triggering pre-download by site tag.
Predownloading an Image to an Access Point
Outlines AP image pre-download processes, including feature history, restrictions, and comprehensive procedures for deploying images to access points using CLI, GUI, and YANG, along with monitoring methods for the image pre-download process. Outlines methods and techniques for optimizing Access Point image download processes to reduce deployment time and improve network efficiency.
N+1 Hitless Rolling AP Upgrade
Outlines the N+1 hitless rolling AP upgrade process, describing its operations, configuration procedures, and verification methods to ensure seamless AP upgrades without client service interruptions. Outlines site-based rolling AP upgrade functionality in N+1 networks, covering prerequisites, restrictions, use cases, configuration workflows, CLI procedures, hitless software upgrades, and verification steps to ensure seamless AP migration and operational continuity. Provides an overview of new client steering enhancements for access points, including procedures and reference information for deauthenticating clients before an AP image upgrade.
NBAR Dynamic Protocol Pack Upgrade
Outlines the process for upgrading NBAR Dynamic Protocol Packs, emphasizing procedures for setting custom applications to optimize protocol recognition and enhance network visibility.
Wireless Sub-Package for Switch
Outlines procedures and concepts for installing, removing, upgrading, and managing wireless sub-packages, including single-step and multi-step installation, stack deployment, auto-upgrade options, and package deactivation to ensure effective wireless infrastructure management.
Global Use Access Points
Outlines the capabilities, regulatory requirements, operating modes, onboarding workflows, and compliance features of global use APs, guiding users through configuration, migration, and verification procedures to ensure optimal operation within regulatory domains.
Countries and Regulations
Describes the purpose, usage, and reference details of country codes, outlining standardized code sets and their application in international data exchange and identification.
Security
AP Joining
Outlines the AP joining process, detailing workflow concepts, and provides instructions for configuring filter priming profiles and AP priming with regex to facilitate efficient network device onboarding.
AP Crash File Upload
Outlines AP crash file upload functionality, describing core concepts, key restrictions, and step-by-step CLI configuration procedures to facilitate access point troubleshooting and recovery processes.
LED States for Access Points
Outlines LED state functionality for access points, encompassing configuration methods via GUI and CLI, AP profile adjustments, and verification procedures to optimize device visibility and status monitoring.
AP Support Bundle
Outlines the generation and export of Access Point Support Bundles, covering bundle creation, export procedures via GUI and CLI, and status monitoring to facilitate wireless troubleshooting and diagnostics.
Access Point Memory Information
Outlines AP memory details, covering conceptual information about access point memory and providing verification procedures to help users assess and validate AP memory characteristics and status.
Access Point Tag Persistency
Explains AP tag persistency, including principles, requirements, and redundancy scenarios, and guides the configuration and verification of tag persistency on access points using GUI and CLI methods.
AP Power Save
Explains how AP power save features allow network administrators to reduce access point power consumption.
Real-Time Access Points Statistics
Outlines real-time statistics collection, monitoring, configuration, restrictions, SNMP traps, and verification procedures for access points, enabling users to efficiently manage AP status and performance through GUI and CLI interfaces.
AP Configuration
Explains various types of access point (AP) configurations, the components involved, and their role in wireless network operations.
Secure Data Wipe
Wi-Fi 7 Operations
Introduces Wi-Fi 7 operational features, detailing performance enhancements, configuration procedures, and best practices for deploying and managing next-generation wireless networks.
Troubleshooting Lightweight Access Points
Outlines methods and best practices for diagnosing and resolving issues with lightweight access points, covering connectivity failures, deployment challenges, configuration errors, and system health checks to optimize wireless network performance.
Sniffer Mode
Explains sniffer mode functionality for access points, outlining prerequisites, restrictions, GUI and CLI configuration methods, XOR radio role sniffer support, monitoring procedures, and verification examples to help users enable and manage sniffer mode in wireless networks.
Monitor Mode
Describes Monitor Mode operation in wireless networks, outlining core concepts and providing step-by-step instructions for enabling Monitor Mode through GUI and CLI workflows.
Management Mode Migration in Cisco Catalyst 916X Access Points
Provides an overview of management mode migration capabilities and key features for Cisco Catalyst 916X Series Access Points.
OEAP Link Test
Outlines OEAP Link Test functionality, guiding configuration procedures via CLI and GUI and detailing verification methods to assess link status and performance for OfficeExtend access points.
Cisco OEAP Split Tunneling
Explains Cisco OEAP split tunneling, encompassing traffic management, prerequisites, restrictions, use cases, and complete configuration workflows, including ACL creation, policy profile setup, and verification procedures for secure and efficient remote access.
Access Points Survey Mode
Outlines AP survey modes, describing their purpose for RF parameter configuration and site surveys, provides login and SSID access details, recommends browser usage, and guides you through enabling survey mode on supported Cisco Catalyst APs.
AP Deployment Mode
Outlines AP deployment modes, highlighting use cases, step-by-step configuration using GUI and CLI, monitoring deployment status, and verification of AP deployment for effective wireless network setup.
Access Point Location
Outlines AP Auto Location Support, detailing advanced location functionalities, ultra wide band ranging, GNSS data streaming, and comprehensive configuration and verification procedures for geolocation features using both GUI and CLI.
SS IOT: Implement Wi-Fi Coexistence with ESL
Smart Spaces - AnyLocate capabilities
Outlines AnyLocate capabilities for Smart Spaces, covering UWB and Wi‑Fi FTM-based indoor wayfinding and asset tracking features, prerequisites, clock synchronization, AP configuration, and step-by-step procedures for deployment and verification using GUI and CLI.
Radio Resource Management
Coverage Hole Detection
Outlines coverage hole detection strategies, configuration methods, and troubleshooting procedures for identifying and resolving wireless signal gaps to optimize network performance.
Optimized Roaming
Explains optimized roaming features, including core capabilities, deployment restrictions, and step-by-step configuration through both GUI and CLI interfaces to enhance wireless client connectivity and network performance.
Cisco Flexible Radio Assignment
Details Flexible Radio Assignment, outlining XOR support, configuration workflows via GUI and CLI, hardware compatibility, RF profile integration, and verification procedures, empowering users to implement and validate FRA features for robust wireless deployments.
XOR Radio Support
Cisco Receiver Start of Packet
Outlines the configuration, application, and operational impact of receiver start of packet detection threshold, emphasizing best practices, adjustment guidelines, and troubleshooting considerations for optimizing packet detection sensitivity.
Client Limit
Outlines platform-imposed restrictions on client capacity, detailing supported connection limits, usage guidelines, and operational considerations to ensure optimal client management within the system.
IP Theft
Describes IP theft concepts, common attack methods, detection strategies, prevention techniques, and response steps to help organizations safeguard networks and sensitive data from unauthorized access and misuse.
Unscheduled Automatic Power Save Delivery
Outlines Unscheduled Automatic Power Save Delivery, describing power save delivery concepts and providing step-by-step configuration instructions for U-APSD features on wireless devices.
Target Wake Time
Enabling USB Port on Access Points
Outlines the capabilities of USB ports on Access Points, guiding users through profile configuration, USB settings management via CLI and GUI, and monitoring USB configurations for optimal power usage and device integration.
Dynamic Frequency Selection
Outlines Dynamic Frequency Selection principles and functionality, including Channel Availability Check history, configuration procedures via GUI and CLI, and verification steps for optimizing wireless spectrum management.
Cisco Access Points with Tri-Radio
Introduces Cisco tri-radio access point technology and provides configuration guidelines for deploying these advanced wireless infrastructure devices.
Cisco Catalyst Center Assurance Wi-Fi 6 Dashboard
Guides users through the Wi-Fi 6 Dashboard interface and provides command-line instructions for configuring and verifying Wi-Fi 6 access point parameters and DFS counters.
Antenna Disconnection Detection
Outlines antenna disconnection detection features, including operational principles, configuration procedures for CLI and GUI, SNMP trap detection methods, recommendations, limitations, and verification steps to ensure reliable antenna status monitoring.
Neighbor Discovery Protocol Mode on Access Points
Describes Neighbor Discovery Protocol (NDP) Mode functionality on access points, outlining key concepts, configuration procedures using GUI and CLI, advanced RF profile settings, monitoring techniques, and verification methods to optimize wireless network performance.
6-GHz Band Operations
The 6-GHz band operations section introduces features and considerations unique to wireless communication on the 6-GHz radio band, enhancing connectivity and performance in modern Wi-Fi networks.
AP Packet Capture
DHCP Option82
Outlines the functions and security benefits of DHCP Option 82, describes its suboptions and relay agent information, and details controller configuration options for including network-specific identifiers and enabling address allocation based on topology or client characteristics. Outlines global DHCP Option 82 configuration using server override settings and different SVIs, including relay agent information setup, link selection suboption enablement, and use of specified source interfaces for DHCP message relaying. Outlines procedures for configuring DHCP Option 82 on VLAN interfaces and SVIs using commands such as option-insert, server-ID-override, and subscriber-ID, including steps for VLAN and SVI setup, suboption configuration, IP assignment, UDP relay settings, and disabling MOP features for DHCP relay control. Explains how to configure and verify DHCP Option 82 support for access points operating in FlexConnect local switching mode.
RADIUS Authentication and Accounting
Outlines RADIUS authentication and accounting mechanisms, including configuration of realms, call station identifiers, VSA attributes, realm matching, AAA policy application, and accounting for AP events to support secure and auditable network access. Introduces RADIUS realms for authentication and accounting, providing instructions to enable realms on WLANs, configure realm matching and AAA policies, and verify RADIUS-realm configurations for robust user access management. Details RADIUS accounting for AP events by guiding configuration of accounting method lists for AP profiles, verification of AP accounting data, and setup of AAA and HTTP command accounting using named method lists via CLI. Explains the use and configuration of RADIUS call station identifiers, offering procedures to properly set up these identifiers for enhanced tracking and management of authentication sessions. Describes the deployment of RADIUS Vendor-Specific Attributes, guiding creation of attribute lists and mapping AAA policies to WLAN policy profiles and WLANs for flexible and granular network authentication controls.
Cisco StadiumVision
Introduces Cisco StadiumVision, outlining its key features and guiding users through wireless controller parameter configuration via GUI and CLI, along with reference procedures for verification and successful deployment.
Persistent SSID Broadcast
Introduces the concept and configuration of Persistent SSID Broadcast, outlining its functionality, setup procedures, and operational considerations for maintaining SSID visibility in wireless network environments.
Network Monitoring
Creating a Lobby Ambassador Account
Lobby Ambassador Account
Explains the Lobby Ambassador Account feature, including user management, guest access procedures, security considerations, and step-by-step instructions for configuring and operating lobby accounts in network environments.
Guest User Accounts
Outlines the management, configuration, and security considerations of guest user accounts, enabling administrators to provide temporary and controlled access while maintaining network integrity and compliance.
Link Local Bridging
Web Admin Settings
Explains how to configure controller web administration—enabling HTTP/HTTPS, PIV two-factor, trustpoints, NETCONF/YANG, session timeouts, and VTY access—to secure and manage remote GUI and CLI access.
Web UI Configuration Command Accounting in TACACS Server
Outlines the process of enabling command accounting for Web UI configuration activities using a TACACS+ server, including system requirements, setup procedures, and verification steps to ensure comprehensive user action tracking and auditing.
Embedded Packet Capture
Outlines embedded packet capture features, including configuration steps, operational use cases, packet analysis procedures, and best practices for monitoring network traffic on supported devices.
Layer 3 Access
Outlines Layer 3 access configuration, emphasizing procedures for enabling multicast traffic with VRF using both GUI and CLI methods to support flexible and robust network management.
Network Mobility Services Protocol
Outlines Cisco Network Mobility Services Protocol (NMSP) fundamentals, configuration, and integration, guiding users through protocol functionality, deployment procedures, troubleshooting steps, and verifying seamless mobility services across network devices.
Application Visibility and Control
Introduces application visibility and control features, detailing how to monitor, analyze, and manage application traffic, configure policies, and ensure optimal network performance and security across managed environments.
Software-Defined Application Visibility and Control
Explains how to enable and configure the controller-based application recognition and telemetry on WLAN devices, manage controller connectivity and protocol packages, and verify deployment and AP status.
Cisco Hyperlocation
Introduces Cisco Hyperlocation solution, outlining location tracking technologies, deployment architecture, configuration procedures, and integration methods to enhance wireless visibility, security, and accuracy across enterprise environments.
FastLocate for Cisco Catalyst Series Access Points
Outlines FastLocate capabilities for Cisco access points, including deployment restrictions, supported hardware, network components, GUI configuration procedures, and verification methods to optimize location tracking in wireless environments.
IoT Services Management
Outlines essential IoT services management features, including device onboarding, service provisioning, lifecycle administration, policy enforcement, and monitoring strategies to ensure reliable and secure IoT operations at scale.
IoT Module Management in the Controller
Outlines IoT module management capabilities within the controller, including module onboarding, configuration, monitoring, and troubleshooting procedures to optimize device integration, security, and operations in IoT environments.
EDCA Parameters
Outlines the principles, configuration procedures, and operational guidelines for Enhanced Distributed Channel Access, focusing on traffic prioritization, access categories, and optimization strategies within wireless network environments.
Adaptive Client Load-Based EDCA
Explains adaptive client load-based EDCA mechanisms, outlining dynamic prioritization of wireless traffic, optimization strategies for client performance, and configuration procedures to improve QoS in enterprise WLAN environments.
802.11 parameters and Band Selection
Outlines the principles of band selection, usage of 802.11 frequency bands, and key wireless parameters to optimize network performance and ensure compatibility across various devices and environments.
NBAR Protocol Discovery
Introduces NBAR Protocol Discovery, outlining protocol identification, traffic monitoring capabilities, configuration options, and verification procedures to enhance network visibility and optimize bandwidth usage.
Conditional Debug, Radioactive Tracing, and Packet Tracing
Introduces conditional debug and radioactive tracing functionality, outlining configuration methods, operational workflow, and processes for targeted debugging and analysis on network devices.
Aggressive Client Load Balancing
Outlines the principles, configuration steps, and operational guidelines for Aggressive Client Load Balancing, enabling efficient management of client associations and optimal distribution across wireless access points.
RF based Automatic AP Load Balancing
Introduces RF-based automatic AP load balancing features, explaining key concepts and guiding users through on-demand load balancing tasks to optimize wireless network performance.
Accounting Identity List
Shows how to configure accounting identity lists and enable client accounting via GUI and CLI, enabling RADIUS-based logging of user actions, start/stop session records, and assignment of accounting lists to WLAN policy profiles for auditing.
Accounting Session ID
Accounting session ID explains how it uniquely identifies each wireless client session generated by the AAA module, and is included in RADIUS packets. The feature covers CLI configuration steps (enabling attribute 44, setting AAA accounting identity, applying it to a WLAN policy) and shows verification commands to view the accounting session ID on the device.
Interim Accounting
Interim Accounting documents the RADIUS interim accounting feature that sends updates from a NAS between start/stop messages to report session changes (e.g., DHCP, HTTP, IP, roaming). It explains that interim updates may be event‑driven or periodic, lists downsides (increased congestion, higher error rates, distorted metrics), notes the feature is enabled by default, and shows CLI steps to disable and verify the setting introduced in Cisco IOS XE Cupertino 17.9.1.
Wireless Multicast
This chapter explains how to configure and verify wireless multicast on Cisco controllers, covering multicast modes, IPv6 snooping/MLD, IGMP, multicast VLANs, directed multicast service, non‑IP multicast, and multicast filtering.
Map-Server Per-Site Support
Outlines Map Server Per Site Support functionality, covering deployment strategies, configuration procedures, operational guidelines, and considerations for optimizing per-site mapping in network environments.
Volume Metering
Outlines Volume Metering concepts and configuration procedures, enabling users to understand the principles of volume-based monitoring and perform step-by-step setup within a wireless network environment.
Enabling Syslog Messages in Access Points and Controller for Syslog Server
Explains how to configure syslog messaging on access points and controllers, including setup for syslog servers and logging to in-memory buffers and flash storage.
Login Banner
Introduces login banner concepts and provides configuration procedures for setting up login banners using both GUI and CLI methods to enhance system messaging and access control.
Wi-Fi Alliance Agile Multiband
Introduces WiFi Alliance Agile Multiband technology and its capabilities for optimizing wireless network performance across multiple frequency bands.
SNMP Traps
Introduces SNMP wireless trap configuration, guiding users through understanding trap functionality and providing step-by-step procedures for enabling a variety of wireless traps using both GUI and CLI, along with verification methods.
Disabling Clients with Random MAC Address
Explains strategies for managing and blocking clients using locally administered and random MAC addresses, including configuration steps and verification methods to enhance network security and control unauthorized device access.
Dataplane Packet Logging
Outlines Dataplane Packet Logging capabilities, including enabling and disabling debug levels, configuring packet logging in various trace buffers, verifying packet logs, and managing logs and buffer conditions through CLI procedures.
Streaming Telemetry
Outlines streaming telemetry concepts, configuration procedures, supported features, scale considerations, and troubleshooting for wireless controllers, including Cisco Catalyst Center Client Event and SSID telemetry filter capabilities with workflows, restrictions, and data verification methods.
Application Performance Monitoring
Outlines application performance monitoring for Cisco wireless deployments, covering configuration and verification processes, including flow monitor creation, WLAN policy profiles, policy tags, profile attachment to APs, supported platforms, available monitors, and associated restrictions.
Wireless Clients Threshold Warning
Explains the purpose and structure of the Wireless Clients Threshold Warning chapter, which covers concepts and procedures for configuring and monitoring wireless client thresholds and warnings in a network environment.
Intelligent Capture Hardening
Outlines Cisco Intelligent Capture hardening measures, highlighting anomaly detection, RF statistics, and the configuration and verification procedures necessary to enhance wireless network security and monitoring.
Amazon S3 Support
Outlines Amazon S3 support features, encompassing restrictions, configuration procedures, and verification steps to enable seamless integration and management of Amazon S3 services within the network infrastructure.
Amazon Web Services CloudWatch
Explains how to use AWS CloudWatch support, outlining service benefits, CloudWatch profile configuration procedures, and methods for verifying configuration to ensure effective monitoring and integration with Amazon Web Services environments.
Kernel Minidump and Trustzone Upgrade
Outlines kernel minidump and Trustzone upgrade functionality, highlighting configuration procedures from both access point and controller perspectives, and offering verification steps to ensure proper minidump setup and upgrade operations.
Cisco Spaces
Outlines Cisco CMX and Cisco Spaces cloud-based solutions, focusing on location analytics, deployment workflows, configuration options, APIs, and integration strategies for wireless network environments.
Using Cloud Monitoring as a Solution for Network Monitoring
The Cisco Meraki dashboard architecture is designed to accommodate all the Enterprise devices to perform Cloud Monitoring.
Wireless Active Testing with ThousandEyes
This chapter explains how to enable and configure wireless active testing with ThousandEyes on Catalyst controllers and APs, including security support, radio/RF tagging, proxy setup, AP onboarding, and verification commands.
MAC Filtering
Web-Based Authentication
Outlines wireless web authentication concepts, internal and external authentication methods, policies for sleeping clients, multi-authentication combinations, and step-by-step configuration procedures with practical examples for secure WLAN access.
Central Web Authentication
Private Shared Key
Outlines Private PSK functionality for wireless client authentication, highlighting authentication mechanisms, system limitations, configuration on WLAN and policy profiles, GUI procedures, and verification steps for secure network access.
Multi-Preshared Key
Outlines Multi-Preshared Key functionality, including operational concepts, configuration methods using GUI and CLI, usage restrictions, and verification procedures to help manage secure wireless authentication.
Wireless AAA Authentication Survivability Cache
Wi-Fi Protected Access 3
Introduces WPA3 security enhancements for Wi-Fi networks, highlighting authentication and encryption protocols, configuration tasks for SAE, OWE, and Transition Disable, and providing verification procedures for WPA3 deployment and advanced features.
WPA3 Security Enhancements for Access Points
About WPA3 security enhancements for APs.
IP Source Guard
Outlines IP Source Guard functionality, configuration steps, use cases, and validation methods for enhancing network security and mitigating address spoofing on network interfaces.
Traffic Filtering on AP by Source IP ACL
802.11w
Outlines 802.11w wireless security enhancements, covering protected management frames concepts, integrity protocols, requirements, restrictions, and detailed instructions for configuring, disabling, and monitoring 802.11w on wireless networks.
Management Frame Protection
IPv4 ACLs
Defines, applies, and monitors IPv4 and MAC access control lists to segment networks, control traffic at Layer 2 and Layer 3 interfaces, and troubleshoot ACL operations and logging.
Downloadable ACL
Outlines the Downloadable ACL feature, covering its functionality, history, scale considerations, configuration steps in ISE and controllers, guidelines, and verification procedures for centralized ACL management using Cisco ISE.
DNS-Based Access Control Lists
Outlines DNS-based access control strategies, emphasizing the configuration of ISE for central web authentication and covering FlexConnect client IPv6 support with pre- and post-ACL enforcement for secure wireless network management.
Allowed List of Specific URLs
Outlines the process for managing an allowed list of specific URLs in network environments, covering URL addition, handling portals resolving to multiple IP addresses, and verifying URL allowed-listing on network controllers.
Cisco Umbrella WLAN
Outlines Cisco Umbrella WLAN integration, covering overview concepts, registration steps, DNS enforcement restrictions, and comprehensive configuration procedures—including certificate import, parameter mapping, DNScrypt management, Flex Profile setup, and verification methods—for secure wireless networking.
RADIUS Server Load Balancing
Outlines RADIUS server load balancing concepts, prerequisites, restrictions, and provides instructions for configuring load balancing on named RADIUS server groups using CLI procedures.
AAA Dead-Server Detection
Outlines AAA dead-server detection concepts, prerequisites, restrictions, configuration procedures, and verification steps to help users improve network reliability by managing unresponsive AAA servers.
ISE Simplification and Enhancements
This chapter provides step-by-step configurations to simplify RADIUS/AAA setup, enable captive portal and bypass behaviors, configure DHCP options for ISE profiling, and tune EAP timeouts to enforce secure wireless authentication.
RADIUS DTLS
RADIUS protocol provides centralized security for users attempting to gain management access to a network.
Policy Enforcement and Usage Monitoring
Outlines policy enforcement and usage monitoring concepts, guides through configuration using the command-line interface, and provides methods for verifying policy application and effectiveness.
Local Extensible Authentication Protocol
Introduces Local Extensible Authentication Protocol fundamentals and provides essential information for implementing EAP-based authentication in network environments.
Local EAP Ciphersuite
Explains the configuration and implementation of local Extensible Authentication Protocol cipher suites for secure wireless network authentication.
Authentication and Authorization Between Multiple RADIUS Servers
Describes authentication and authorization workflows when integrating multiple RADIUS servers, covering configuration best practices, redundancy strategies, and security considerations for managing multi-server network access environments.
CUI Information in RADIUS Accounting
Explains how Chargeable User Identity information is transmitted and processed within RADIUS accounting messages for user session tracking and billing purposes.
Secure LDAP
Explains Secure LDAP integration, covering configuration procedures, security considerations, and best practices for enabling secure directory authentication and access within enterprise environments.
Network Access Server Identifier
Introduces NAS ID concepts and usage, providing guidance on configuration, integration, and best practices for implementing NAS ID in network environments.
Locally Significant Certificates
Outlines the concepts, provisioning workflows, renewal processes, controller integration, fallback mechanisms, and configuration procedures for Locally Significant Certificates (LSC) in wireless deployments, guiding users through AP certificate management, controller settings, and related operational tasks. Explains how to configure a wireless controller and LAP to use the locally significant certificate (LSC). Details the configuration, provisioning, management, and verification of locally significant certificates (LSCs), including RSA key and PKI trustpoint setup, certificate enrollment, AP LSC provisioning, trustpool management, and secure wireless network authentication using both GUI and CLI procedures Explains AP certificate renewal with LSC, describing benefits, prerequisites, restrictions, and procedures for configuring automatic and forced renewal through GUI and CLI, including verification steps. Explains the authorization policy, configuration workflows, and verification steps for enabling MIC and LSC APs to securely join the controller, highlights behavioral changes, and outlines recommendations and limitations for policy deployment. Explains LSC fallback mechanisms for CAPWAP authentication, provides methods to identify APs in fallback state, guides troubleshooting and syslog analysis, and details recovery commands to restore normal LSC functionality. Outlines the process of configuring and managing controller self-signed certificates to enable wireless AP join, covering use cases, prerequisites, setup steps, PKI server and trustpoint configuration, verification, and server management.
Public Key Infrastructure Management
Outlines Public Key Infrastructure Management, detailing GUI-based concepts, operational restrictions, and comprehensive configuration tasks including certificate enrollment, trustpoint authentication, CA server integration, key management, and certificate generation and import procedures.
Controller Self-Signed Certificate for Wireless AP Join
Explains how to configure and manage controller self-signed certificates to enable secure wireless access point authentication and join processes.
Managing Rogue Devices
Outlines rogue device detection, classification, containment strategies, protocol configurations, wireless service assurance integration, and scale optimization features to help manage, secure, and monitor rogue devices across enterprise wireless networks. Provides an overview of rogue Protected Management Frame (PMF) concepts, configuration tasks, and verification references for wireless security management.
Classifying Rogue Access Points
Explains how unauthorized wireless access points are detected, classified, and contained using controller rules or manual actions.
Advanced WIPS
Outlines the Advanced WIPS solution, detailing its key components, supported modes and platforms, signature definitions, configuration through GUI and CLI, syslog integration, verification procedures, and implementation guidelines for robust wireless intrusion prevention.
Cisco TrustSec
Introduces Cisco TrustSec, outlining its architecture, component technologies, policy enforcement mechanisms, security group tag integration, and deployment best practices to enhance segmentation, access control, and network security within enterprise environments.
SGT Inline Tagging and SXPv4
Introduces Security Group Tags and Security Exchange Protocol version 4 as foundational components of Cisco TrustSec architecture for network segmentation and policy enforcement.
Ciphersuites for CAPWAP-DTLS
Outlines the supported ciphersuites for CAPWAP-DTLS connections, covering their compatibility, configuration guidelines, and best practices to ensure secure communication between access points and controllers.
Configure Secure Shell
Introduces Secure Shell protocol fundamentals, configuration options, and security considerations for establishing encrypted remote connections to network devices.
MACsec support on APs
Outlines MACsec support on access points, covering common terminology, supported AP models, MACsec modes, ciphers, restrictions, and comprehensive procedures for configuring and verifying MACsec using PSK and 802.1X authentication on controllers, APs, and switches.
FIPS
Outlines FIPS and Common Criteria compliance, detailing guidelines, configuration steps, monitoring, self-tests, and verification procedures to help ensure secure and standards-based wireless controller operation. Introduces FIPS, outlining its guidelines and restrictions, providing instructions for self-tests and configuration, explaining FIPS operation in HA setups, and describing procedures for monitoring and verifying FIPS compliance. Details Common Criteria, offering configuration procedures, verification steps, and guidelines for operating in CC mode to achieve and maintain relevant security certification requirements. Outlines TLS signature algorithm enhancements for NDcPP v3.0e, including compliance in FIPS CC mode, removal of outdated algorithms and ciphersuites, and strengthened protection against vulnerabilities for both TLS clients and servers.
Internet Protocol Security
Guides users through configuring Internet Protocol Security protocols and settings to establish secure network communications and protect data transmission.
Transport Layer Security Tunnel Support
Configuring RFC 5580 Location Attributes
Outlines procedures and requirements for configuring RFC 5580 location attributes, including attribute delivery methods, location profiles, operator name assignment, and verification of location attribute configuration for enhanced location capabilities in network environments.
IP MAC Binding
Explains the IP-MAC binding feature and provides guidance on configuring and managing MAC address to IP address associations for network security.
Disabling IP Learning in FlexConnect Mode
Guides you through the process of disabling Internet Protocol learning functionality when operating network devices in FlexConnect mode.
Disabling Device Tracking to Support NAC Devices
Outlines the considerations and procedures for disabling device tracking to ensure compatibility with Network Access Control devices.
Disabling IP Learning in Local Mode
Outlines the process and considerations for disabling Internet Protocol learning in local mode, highlighting its impact on network behavior and configuration.
Security-Enhanced Linux
Introduces Security-Enhanced Linux concepts and mandatory access controls for implementing enhanced system security policies and protections.
Mobility
Introduces mobility concepts including roaming types, SDA roaming, and mobility groups, with platform support information, configuration procedures via GUI and CLI, and monitoring commands.
NAT Support on Mobility Groups
Explains how to configure Network Address Translation support for wireless mobility groups to enable seamless client roaming across different network segments.
Static IP Client Mobility
Explains how static IP clients maintain network connectivity while moving between different network locations and access points.
Mobility Domain ID - 802.11i Roaming
Explains the implementation and configuration of Mobility Domain ID for secure 802.11i roaming across wireless network infrastructure.
802.11r Support for Flex Local Authentication
Introduces 802.11r fast transition capabilities for FlexConnect local authentication and provides verification procedures for ensuring proper implementation.
Opportunistic Key Caching
Introduces Opportunistic Key Caching mechanisms and explains how this security feature enables faster client roaming by pre-authenticating devices across wireless access points.
High Availability
Outlines high availability concepts, auto-upgrade strategies, LLDP configuration, reload reason history, prerequisites, fault handling, verification, and deployment—including ACI integration—to ensure resilient wireless controller operations and uninterrupted client connectivity.
Redundancy Management Interface
Details the Redundancy Management Interface for monitoring gateway statistics, standby controller health, and configuring redundancy parameters across network infrastructure.
Quality of Service
Outlines comprehensive strategies for configuring wireless QoS on controllers and APs, covering QoS targets, metal policies, rate limiting, DSCP/user priority mappings, AAA overrides, and step-by-step procedures for policy implementation and verification using GUI and CLI.
Wireless Auto-QoS
Introduces the automatic Quality of Service configuration features for wireless networks and explains how Auto Quality of Service simplifies traffic prioritization and bandwidth management.
Native Profiling
Outlines native profiling functionality, covering class, service, parameter, and policy map creation, configuration procedures in local mode, and verification steps to optimize network device profiling and management.
Air Time Fairness
Introduces Air Time Fairness technology and explains how it optimizes wireless network performance by ensuring equitable bandwidth distribution among connected devices.
IPv6 Non-AVC QoS Support
Introduces IPv6 Non-AVC QoS capabilities, outlining key concepts, DSCP marking procedures, packet dropping options, traffic policing, and verification methods to help manage IPv6 traffic quality across your network infrastructure.
QoS Basic Service Set Load
Introduces Quality of Service Basic Service Set Load concepts and explains how to manage network traffic prioritization and bandwidth allocation for optimal performance.
IPv6 Client IP Address Learning
Introduces IPv6 client address learning, detailing the mechanisms, best practices, and network behaviors involved, including neighbor discovery suppression techniques to optimize wireless client connectivity and address acquisition.
IPv6 ACL
Outlines IPv6 ACL features, highlighting monitoring procedures and task-based instructions for reviewing IPv6 ACL activity and ensuring effective network security.
Configuring IPv6 Mobility
Outlines IPv6 client mobility concepts, configuration steps, roaming functionality, and verification procedures to enable seamless movement and connectivity for IPv6-enabled clients within a network infrastructure.
IPv6 Support on Flex and Mesh
Outlines IPv6 functionality across FlexConnect and Mesh architectures, detailing configuration steps, operational guidelines, feature support, and integration procedures to enable seamless IPv6 network deployment and management.
IPv6 CAPWAP UDP Lite Support
Introduces IPv6 CAPWAP UDP Lite support, outlining its functionality, configuration procedures, operational requirements, and considerations for enabling efficient IPv6-based wireless communication using the UDP Lite protocol.
Neighbor Discovery Proxy
Describes the Neighbor Discovery Proxy feature, covering its role, operational principles, configuration procedures, and recommendations for optimizing IPv6 device communication within a network environment.
Address Resolution Protocol Proxy
Outlines Address Resolution Protocol (ARP) Proxy mechanisms, configuration procedures, operational considerations, and verification steps for optimizing network address mapping and improving communication efficiency in complex environments.
IPv6 Ready Certification
Outlines IPv6 Ready Certification requirements by detailing hop-by-hop processing configuration, referencing hbh-option specifics, and providing commands for verifying IPv6 Neighbor Discovery router advertisement specific-route information.
Cisco CleanAir
Outlines Cisco CleanAir’s capabilities for detecting and mitigating RF interference using CleanAir-enabled APs and controllers, covering configuration procedures, prerequisites, monitoring, EDRRM, high availability, Spectrum Expert integration, CleanAir Pro scanning, troubleshooting, and practical usage guidelines.
Bluetooth Low Energy
Introduces Bluetooth Low Energy fundamentals, device pairing, connection processes, data exchange methods, and security protocols for implementing efficient wireless communication in embedded and mobile environments.
Persistent Device Avoidance
Outlines the features and configuration procedures for Cisco CleanAir Persistent Device Avoidance, guiding users in mitigating persistent RF interference using CleanAir capabilities to improve wireless network performance and reliability.
Spectrum Intelligence
Introduces Spectrum Intelligence features and functionality, highlighting tools, capabilities, and best practices for monitoring, analyzing, and troubleshooting wireless RF environments to ensure optimal network performance and reliability.
Spectrum Analysis
Introduces spectrum analysis principles and procedures, outlining techniques for measuring, interpreting, and troubleshooting wireless spectrum to optimize network performance and resolve interference issues.
Mesh Access Points
Outlines mesh network architecture, security, authorization, radio resource management, backhaul options, AP roles and topology, convergence, and feature configuration for robust wireless mesh deployments.
Redundant Root Access Point (RAP) Ethernet Daisy Chaining
Introduces redundant RAP support for Ethernet daisy chaining, describing required prerequisites, CLI configuration steps, and verification methods to establish robust Root Access Point redundancy in network deployments.
URWB
Ultra-Reliable Wireless Backhaul (URWB) is a wireless technology developed for mission and business critical applications that demand high reliability, low latency, and robust performance. It operates in the 5 GHz frequency band and is based on the widely adopted IEEE 802.11 standards. Leveraging the 802.11 framework simplifies implementation for Information Technology (IT) and Operational Technology (OT) teams. As a result, URWB enables greater deployment flexibility, reduced infrastructure costs, and accelerated installation when connecting fixed and mobile devices.
VideoStream
Software-Defined Access Wireless
Introduces Software-Defined Access wireless architecture and provides guidance on configuring, monitoring, and managing wireless mesh networks with inter-fabric edge switch roaming protection.
Passive Client
Fabric in a Box with External Fabric Edge
Outlines step-by-step procedures, configuration requirements, and validation tasks for integrating Fabric in a Box deployments with external fabric edge components to enable seamless connectivity and optimized network performance.
VLANs
Explains configuring and managing VLANs on the controller, including VLAN types, port membership modes, normal and extended-range VLAN guidelines, configuration procedures (CLI/GUI), VTP behavior, and monitoring commands.
VLAN Groups
Describes how VLAN groups are configured on Catalyst controllers, including prerequisites, assignment to policy profiles, DHCP/static IP behavior, and methods to view and manage group membership.
WLANs
Explains wireless LAN fundamentals, configuration requirements, and restrictions, then guides through WLAN setup and verification procedures for access points.
WLAN Security
Outlines wireless security protocols including WPA1 and WPA2 configurations, AAA override functionality, and provides guidance for implementing Layer 2 security measures on wireless networks.
Remote LANs
Explains the concept of Remote LANs (RLANs) for authenticating and managing wired clients using a controller, covering limitations, profile and policy configuration, port and tag assignment, fast switching, and verification procedures.
RLAN External Module
Introduces the External Module functionality and provides step-by-step guidance for configuring and verifying the module through both graphical and command-line interfaces.
802.11ax Per WLAN
Guides you through enabling and configuring 802.11ax wireless mode for individual Wireless Local Area Networks using both graphical and command-line interfaces.
BSS Coloring
Explains BSS Coloring technology and provides comprehensive configuration guidance for implementing BSS Color and Overlapping BSS Packet Detection features across access points and RF profiles.
DHCP for WLANs
Explains how to configure Dynamic Host Configuration Protocol services for wireless networks, including internal server setup, relay configuration, and FlexConnect requirements.
Aironet Extensions IE (CCX IE)
Explains how to configure and verify Aironet Extensions Information Element settings to enable enhanced wireless functionality and access point identification.
Device Analytics
Explores device ecosystem analytics capabilities and details the implementation of Adaptive 802.11r for seamless wireless roaming.
Device Classifier Dynamic XML Support
Introduces the dynamic XML support feature for device classifier functionality and explains how it enables flexible device identification and classification.
BSSID Counters
Explains how to configure and monitor Basic Service Set Identifier counters for wireless network performance analysis and troubleshooting.
Fastlane+
Introduces the Fastlane+ feature for enhanced network performance and provides comprehensive guidance on configuration, monitoring, and verification across both command-line and graphical interfaces.
Workgroup Bridges
Introduces Cisco Workgroup Bridges technology, explaining how it enables wireless connectivity for wired devices within enterprise networks and outlining key concepts and operational benefits. Guides you through streamlined workgroup bridge configuration processes, including setup of multiple workgroup bridges and verification procedures.
Peer-to-Peer Client Support
Introduces peer-to-peer client support functionality and guides through configuration processes while outlining system restrictions and limitations.
Deny Wireless Client Session Establishment Using Calendar Profiles
Introduces calendar-based profiles for controlling wireless client access and outlines the guidelines and limitations for implementing session denial policies.
Ethernet over GRE
Introduces Ethernet over Generic Routing Encapsulation tunnels and guides through configuring tunnel gateways, domains, profiles, and wireless policy associations for secure network connectivity.
Wireless Guest Access
Guides the configuration and management of wireless guest access, including mobility tunnels, load balancing, and guest anchor setups for secure visitor connectivity.
Wired Guest Access
Guides the configuration of wired guest access solutions including switch setup, controller authentication methods, and session management for secure network access.
Data Rate Selection at SSID Level
User Defined Network
Introduces User Defined Network capabilities, allowing administrators to create customized network topologies and configurations tailored to specific organizational requirements.
Hotspot 2.0
Introduces Hotspot 2.0 technology and Open Roaming concepts, then guides through the configuration process for seamless wireless network access.
Client Roaming Across Policy Profile
Introduces client roaming across policy profiles, outlining concepts, configuration steps, and verification procedures essential for ensuring seamless client mobility in network environments.
Assisted Roaming
Explains assisted roaming technology and its implementation to improve wireless client connectivity and seamless handoffs between access points.
802.11r BSS Fast Transition
Explains the 802.11r Fast Transition feature for seamless wireless roaming and provides configuration procedures for various security methods including Dot1x, PSK, and SAE authentication.
802.11v
Outlines 802.11v capabilities, focusing on prerequisites, restrictions, BSS Transition Management features, and step-by-step procedures for configuring and enabling 802.11v BSS Transition Management on wireless networks using both GUI and CLI methods.
Virtual Routing and Forwarding
Outlines Virtual Routing and Forwarding implementation, including creation and configuration of VRF definitions, mapping to switched virtual interfaces, and DHCP relay integration.
Automated Frequency Coordination
Introduces Automated Frequency Coordination technology and guides users through configuring access point height settings via priming profiles for optimal wireless performance.
Cisco DNA Service for Bonjour Solution Overview
Introduces the Cisco Digital Network Architecture Center Bonjour solution, outlining its core components, supported platforms, and compatible network designs for seamless device discovery and management.
Configuring Local and Wide Area Bonjour Domains
Introduces Cisco DNA Service for Bonjour solution architecture, provides configuration procedures for local and wide area Bonjour domains across wired and wireless networks, and details verification commands for service discovery functionality.
Configuring Local Area Bonjour for Wireless Local Mode
Explains how to configure and verify Local Area Bonjour services for wireless networks operating in local mode, including multicast settings and mDNS gateway configuration.
Configuring Local Area Bonjour for Wireless FlexConnect Mode
Guides Local Area Bonjour configuration in Wireless FlexConnect mode, outlining service discovery concepts, prerequisites, mDNS gateway alternatives, deployment considerations, and detailed CLI-based setup and verification procedures to optimize wireless service advertisement and resolution.
Configuration Example for Local Mode - Wireless and Wired
Outlines local mode deployment scenarios for integrated wireless and wired networks, covering wireless AP multicast modes, default and customized service and policy configurations, Cisco Catalyst Center setup with service and SDG agent filters, verification steps, and references for Wide Area Bonjour.
Configuration Example for FlexConnect Mode - Wireless and Wired
Outlines configuration and verification procedures for implementing FlexConnect mode in wireless and wired environments, covering default and customized service lists, policy settings, and integration with Cisco Catalyst Center, along with comprehensive references for deployment and validation.
Multicast Domain Name System
Introduces multicast-based service discovery using mDNS Gateway, detailing configuration, security considerations, and deployment options for integrating seamless device discovery across Layer 2 and Layer 3 network segments.