Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE 26.1.x

PDF

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE 26.1.x

Cisco regulatory domain

Want to summarize with AI?

Log in

Details regulatory domain management for APs, providing guidance on country code assignment, best practices, examples of country code resolution, and step-by-step instructions for configuring and verifying regulatory activation via GUI and CLI.


Determining the regulatory domain is very important for wireless AP deployments. Unlike the mode of operation, which is a choice that can be made by the customers, provisioning the regulatory domain follows some strict rules and guidelines. With single PID, regulatory domain is automatically determined from where the APs are deployed.


Country code and regulatory domain

A country code is an identifier that enables Wi-Fi 7 APs to operate in compliance with the regulations of the country where they are deployed. Regulatory domains ensure that APs adhere to local compliance requirements through methods such as

  • Compliance through geo-location: For APs operating in Meraki mode, regulatory standards are enforced using geo-location and network-wide settings.

  • Hardware-independent enforcement: With certain AP models, such as the CW917x series, compliance is achieved through software rather than hardware-specific SKUs allowing worldwide deployment.

Regulatory domain information is determined based on the location and country where APs are deployed.

Determining AP Location

Various methods exist for determining the location of APs, which affect regulatory domain information.

  • Meraki determined location: APs use IP addresses, shipping destinations, or dashboard configurations to reveal their location, essential for regulatory enforcement.

  • GPS or GNSS-based location: If an AP is unable to identify the country-of-presence through Cisco cloud, the AP makes use of GPS or GNSS-based location. When the AP is located close to the open sky and there are enough satellites to get a location fix, the AP tries to use the satellites to locate country of operation.

  • Proximity-based AP location: The proximity-based AP location method is useful for determining AP location based on proximity to other APs, especially when the APs are unable to find their location using the standard location techniques.

    For example, Anchored APs are APs that are closer to the periphery of a building and may be able to receive GPS signals, whereas the Non-Anchored APs are APs located in the middle of building, which may not be able to receive signals. The controller learns about the neighboring APs using radio resource management (RRM). Using RRM, you can propagate the location from the Anchored APs to the Non-Anchored APs.

    This method is effective when the Wi-Fi 7 APs hear the Neighbor Discovery Protocols (NDPs) over 2.4 GHz from any other AP (Wi-Fi 7 or other APs) joined to the same controller.

    Proximity-based location determination is faster compared to the other approaches, such as GPS or GNSS-based location.

  • AP Regulatory Activation File: When automated methods are unsuccessful, a manual configuration via the appropriate activation file is implemented.


Best practices for Cisco regulatory domain

  • In some deployment scenarios, without a clear sky view or with thick windows and neighboring buildings, the AP may take a long time or fail to obtain a GPS/GNSS signal. In such cases, other methods like Proximity, Migration, or Regulatory Activation File can be used to obtain the country code and regulatory information for the controller management mode.

    For greenfield deployments, we recommend that you use GPS/GNSS. Use Migration through Meraki Dashboard if you encounter issues obtaining the GPS/GNSS signal.

  • For Cisco Wireless 9176I APs, configure the country code in the AP join profile to match the country code assigned through the Regulatory Activation File, proximity-based discovery, or GPS/GNSS. If the AP join profile does not include the matching country code, AP radios may remain operationally down or operate with limited functionality.


Examples of country code resolution

This section aims to provide detailed examples and explanations of the methods used by Wi-Fi 7 APs to determine and resolve their country codes, including GPS or GNSS-based location, proximity-based location, migration, and regulatory activation file methods.

These examples show how Wi-Fi 7 APs determine their country code:

  • GPS or GNSS-based location: APs obtain geolocation via the integrated GPS or GNSS antenna. The CW917x series AP have a built-in GPS or GNSS. They can obtain the geolocation co-ordinates, as long as they can get a clear sky view, typically placed near a window, to obtain the satellite signal. The controller maps geolocation coordinates to the country. Until the AP obtains the country code, it will have -UN as the regulatory domain.

    For APs joining without domain the output displays -UN as the regulatory domain.

    For example, this show command displays the details of a Wi-Fi 7 AP which has the regulatory domain as -UN:

    Device# show ap summary
    Number of APs: 1
    CC = Country Code
    RD = Regulatory Domain
    
    AP Name Slots AP Model  Ethernet MAC   Radio MAC      CC   RD   IP Address    State         Location
    -------------------------------------------------------------------------------------------------------
    AP-B2E0   4   CW9178I   c414.a26f.b2e0 c414.a26f.b2f0 --   -UN  20.20.20.52  Registered default location
    
    

    This show commands display the results after the controller determines the country code and the AP reloads and joins back with a country code:

    Device# show ap name Wi-Fi7-AP-B2E0 config general | inc Country
    Country Code                                    : US
    Regulatory Domain Allowed by Country            : 802.11bg:-A 802.11a:-AB 802.11 6GHz:-B
    AP Country Code                                 : US  - United States
    Country Code Resolution Method                  : GPS
    
    
    Device# show ap summary
    Number of APs: 1
    CC = Country Code
    RD = Regulatory Domain
    AP Name Slots AP Model  Ethernet MAC   Radio MAC      CC   RD   IP Address    State         Location
    -------------------------------------------------------------------------------------------------------
    AP-B2E0   4   CW9178I   c414.a26f.b2e0 c414.a26f.b2f0 US   -B  20.20.20.52  Registered default location
    
  • Proximity-based AP location: For brownfield deployments, if your APs cannot obtain the GPS/GNSS signal due to existing legacy APs, use proximity-based discovery.

    Device# show ap summary
    Number of APs: 2
    CC = Country Code
    RD = Regulatory Domain
    AP Name  Slots AP Model  Ethernet MAC  Radio MAC       CC   RD   IP Address     State        Location
    -----------------------------------------------------------------------------------------------------------
    AP-B2E0    4     CW9178I c414.a26f.b2e0 c414.a26f.b2f0 --   -UN  20.20.20.52  Registered   default location
    AP-E040    3     CW9176I 8c88.814f.e040 ecf4.0caf.6a60 US   -B   20.20.20.51  Registered   default location
    

    In the example above, the AP named AP-E040 has a country code and regulatory domain and the AP named AP-B2E0 that does not have a country code and regulatory domain, are in close proximity. AP-B2E0 learns its country code from AP-E040. The APs reload, after they learn their country code from the neighboring APs.

    This example displays the state of the AP after obtaining the country code:

    Device# show ap summary
    Number of APs: 2
    CC = Country Code
    RD = Regulatory Domain
    AP Name  Slots AP Model  Ethernet MAC  Radio MAC       CC   RD   IP Address     State        Location
    -----------------------------------------------------------------------------------------------------------
    AP-B2E0    4     CW9178I c414.a26f.b2e0 c414.a26f.b2f0 US  -B  20.20.20.52  Registered   default location
    AP-E040    3     CW9176I 8c88.814f.e040 ecf4.0caf.6a60 US  -B  20.20.20.51  Registered   default location
    
    C9800-L# show ap name Wi-Fi7-AP-B2E0 config general | inc Country
    Country Code                                    : US
    Regulatory Domain Allowed by Country            : 802.11bg:-A 802.11a:-AB   802.11 6GHz:-B
    AP Country Code                                 : US  - United States
    Country Code Resolution Method                  : Proximity
    
  • Migration: When you migrate APs from Meraki Dashboard, the APs keep their existing country code.

    For greenfield users, where

    • there are no legacy deployments,

    • the deployment restrictions make it difficult to obtain the GPS or GNSS signal, and

    • there is easy workflow of migrating the APs to the controller mode for Day 0, and obtaining country information,

    we recommend the migration method.

    This example displays the country code resolution method as Installed through Meraki Dashboard

    Device# show ap name Wi-Fi7-AP-B2E0 config general | inc Country
    Country Code                                    : US
    Regulatory Domain Allowed by Country            : 802.11bg:-A  802.11a:-AB 802.11 6GHz:-B
    AP Country Code                                 : US  - United States
    Country Code Resolution Method                  : Installed via Meraki Dashboard
    
  • Regulatory Activation File: Download a Regulatory Activation File (RAF) from the Meraki Dashboard, that can be installed on the controller. See the section on Regulatory Activation File method for more details.


Regulatory activation file

The Cisco Meraki dashboard creates a regulatory activation file that has AP details such as the AP location, serial numbers, MAC addresses, country code, and site tags that can be imported to the controller through the Cisco Meraki Dashboard or saved to an external server or device.

To download the file from the Meraki Dashboard, choose Meraki Dashboard > Network-wide > General > Regulatory info > Download regulatory file.


Configure AP regulatory activation (GUI)

This task guides you through the process of activating the regulatory domain on APs that have not been factory-programmed with a specific regulatory domain, using the GUI.

Complete this task to activate the country code and regulatory domain of APs, which are in the worldwide mode.

Before you begin

To provision a specific regulatory domain on APs that are not factory-programmed with a regulatory domain, download the regulatory activation file from the Meraki dashboard.

Procedure

1.

Choose Administration > Regulatory Activation.

2.

Click the upload area to select the regulatory activation file from your local folder, or, drag and drop the file into the upload area.

Note

Ensure that you add a new file every time regulatory activation has to be performed.

3.

Click Upload to upload and validate the regulatory activation file.

A message indicates the activation file has been validated. The records display the AP MAC details, Country Code, Serial Number, and the following validation results:

  • Invalid Domain: In this mode, APs do not have a country code, resulting in an undefined (UN) regulatory domain. The country code from the activation file is applied to APs that match this condition.

  • Regulatory Mismatch: In this mode, APs have a country code, but the country code is not configured on the controller.

    Note

    To resolve a regulatory mismatch issue, enable the country code on the controller.

  • Not World Wide Mode: The APs in this mode are currently not affected by the regulatory activation process.

4.

Click Apply to start the activation process.

The activation process resolves the country code and regulatory domain of APs in Invalid Domain.

A warning message is displayed that the regulatory activation process will cause the joined APs to be non-operational and hence get disconnected.

5.

Click OK to start the process.

The process runs in the background. A message is displayed if none of the records is impacted by the uploaded regulatory activation file.

The result of this task is that the APs are configured with the appropriate country code and regulatory domain, ensuring compliance and operational readiness.

What to do next

Go to the Access Point Configuration page to monitor the results.


Configure AP regulatory domain (CLI)

The purpose of this task is to guide users through the CLI commands necessary to configure AP regulatory activation, ensuring compliance with regional regulations.

Procedure

1.

Enable privileged EXEC mode

Example:

Device# enable

Enables privileged EXEC mode. Enter your password if prompted.

2.

Apply the regulatory domain configuration

Example:

Device# ap regulatory activation apply

Applies the regulatory domain configuration.

3.

Clear all the AP MAC to country mapping records

Example:

Device# ap regulatory activation clear all

Clears all the AP MAC to country mapping records or a specific AP MAC to country mapping record.

4.

Configure the regulatory domain activation file

Example:

Device# ap regulatory activation file reg-ap-act.json

Configures the regulatory domain activation file.

This configures the activation file necessary for domain settings.

What to do next

Verify that the AP regulatory domain configurations are operational and comply with regional requirements.


Verifying regulatory activation

Describes the verification details of the regulatory activation feature.

Verifying Regulatory Activation Details for All APs

To verify regulatory activation details for all APs, run the following command:

Device# show ap regulatory activation all
Regulatory Activation file Meta-data
------------------------------------
Date Created     : 2024-06-28T08:55:13Z
Created By       : ciscoap.user@meraki.net/SSO
Device count     : 10
Organization Id  : 1130091
AP MAC              Serial Number      Country code
----------------------------------------------------
00XX.0a0X.5dXX       Q2XX-LUXX-DDXX       US   
00XX.0a0X.5fXX       Q2XX-MUXX-4RXX       US   
00XX.0a0X.01XX       Q2XX-ALXX-4UXX       US   
00XX.0a0X.63XX       Q2XX-G8XX-7WXX       US   
00XX.0a1X.0dXX       Q2XX-BBXX-ELXX       US   
00XX.0a1X.19XX       Q2XX-E8XX-ZZXX       US   
00XX.0a1X.1dXX       Q2XX-2LXX-FSXX       US   
00XX.0a1X.04XX       Q2XX-5RXX-AFXX            
00XX.0a3X.08XX       Q2XX-3YXX-D3XX       US   
00XX.0a1X.0aXX       Q2XX-5QXX-ERXX       US   
.
.
.
   

Verifying Regulatory Activation Details for Specific APs

To verify the regulatory activation details for specific APs, run the following command:
Device# show ap regulatory activation 38XX.79XX.9fXX
AP MAC          Serial Number         Country Code     
-----------------------------------------------------
38XX.79XX.9fXX  Q3XX-XKXX-F3XX