t_config_tp_ap_join

Available Languages

Updated:November 29, 2020

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

AP Join

AP Join

The default AP join profile values will have the global AP parameters and the AP group parameters. The AP join profile contains the following parameters – CAPWAP IPv4/IPv6, UDP Lite, High Availability, retransmit configuration parameters, global AP failover, Hyperlocation configuration parameters, Telnet/SSH, 11u parameters, and so on.

On the Configuration > Tags & Profiles > AP Join page, click Add. In the Add AP Join Profile window that is displayed, you can configure the following:

General

  1. Enter a name and description for the AP join profile.
  2.  Check the LED State check box to set the LED state of all APs connected to the device to blink so that the APs are easily located.
  3. Check the LAG Mode check box to set the CAPWAP LAG for an AP profile.
  4. Enter the NTP Server IP address.
  5. Check the GAS AP Rate Limit check box to enable the Generic Advertisement Services (GAS) request action frames to be sent to the controller by an AP at a given interval.
  6. Enter the Maximum Allowed GAS/ANQP Requests value. Value range is between 1 and 100 requests.
  7. Enter the GAS Request limit interval (msec) value. The limit interval value is between 100 and 10000 msec.
  8. In the Antenna Monitoring section, check the Antenna Monitoring check box to enable antenna monitoring.
  9. In the RSSI Fail Threshold(dB) field, enter the RSSI failure threshold value, in dB. Valid values range between 10 and 90, with a default of 40.
  10. In the Weak RSSI(dBm) field, enter the weak RSSI value, in dBm. Valid values range between -90 and -10, with a default of 60.
  11. In the Detection Time(min) field, enter the antenna disconnection detection time, in minutes. Valid values range between 9 and180, with a default of 120.

  12. Click Update & Apply to Device.

Client

  1. In the Statistics Timer section, enter the time in seconds that the AP sends its 802.11 statistics to the controller.
  2. In the TCP MSS Configuration section, check the Adjust MSS Enable check box to enter value for Adjust MSS. You can enter or update the maximum segment size (MSS) for transient packets that traverse a router. TCP MSS adjustment enables the configuration of the maximum segment size (MSS) for transient packets that traverse a router, specifically TCP segments with the SYN bit set.

CAPWAP

In a CAPWAP environment, a lightweight access point discovers a device by using CAPWAP discovery mechanisms, and then sends a CAPWAP join request to the device. The device sends a CAPWAP join response to the access point that allows the access point to join the device.

When the access point joins the device, the device manages its configuration, firmware, control transactions, and data transactions.

ClosedHigh Availability

You can configure primary and secondary backup controllers for all access points (which are used if primary, secondary, or tertiary controllers are not responsive) in this order: primary, secondary, tertiary, primary backup, and secondary backup. In addition, you can configure various timers, including heartbeat timers and discovery request timers. To reduce the controller failure detection time, you can configure the fast heartbeat interval (between the controller and the access point) with a smaller timeout value. When the fast heartbeat timer expires (at every heartbeat interval), the access point determines if any data packets have been received from the controller within the last interval. If no packets have been received, the access point sends a fast echo request to the controller.

  1. In the High Availability tab and Fast Heartbeat Timeout field, enter the time (in seconds) to configure the heartbeat timer for all access points. Specifying a small heartbeat interval reduces the amount of time it takes to detect device failure.
  2. In the Heartbeat Timeout field, enter the time (in seconds) to configure the heartbeat timer for all access points. Specifying a small heartbeat interval reduces the amount of time it takes to detect device failure.
  3. In the Discovery Timeout field, enter a value between 1 and 10 seconds (inclusive) to configure the AP discovery request timer.
  4. In the Primary Discovery Timeout field, enter a value between 30 and 3000 seconds (inclusive) to configure the access point primary discovery request timer.
  5. In the Primed Join Timeout field, enter a value between 120 and 43200 seconds (inclusive) to configure the access point primed join timeout.
  6. In the Retransmit Timers Count field, enter the number of times that you want the AP to retransmit the request to the device and vice-versa. Valid range is between 3 and 8.
  7. In the Retransmit Timers Interval field, enter the time duration between retransmission of requests. Valid range is between 2 and 5.
  8. Check the Enable Fallback check box to enable fallback.
  9. Enter the Primary Controller name and IP address.
  10. Enter the Secondary Controller name and IP address.
  11. Click Apply to Device.
ClosedAdvanced
  1. In the Advanced tab, select Enable Data Encryption check box to enable Datagram Transport Layer Security (DTLS) data encryption.

Note: A warning message is displayed informing you that if you enable or disable Data Encryption, all the APs will reboot except the Master AP. The Master AP requires the controller to save and reload for the changes to take effect.

  1. Select Enable Jumbo MTU to enable big maximum transmission unit (MTU). MTU is the largest physical packet size, measured in bytes, that a network can transmit. Any messages larger than the MTU are divided into smaller packets before transmission. Jumbo frames are frames that are bigger than the standard Ethernet frame size, which is 1518 bytes (including Layer 2 (L2) header and FCS). The definition of frame size is vendor-dependent, as these are not part of the IEEE standard.
  2. Use the Link Latency drop-down list to select the link latency. Link latency monitors the round-trip time of the CAPWAP heartbeat packets (echo request and response) from the AP to the controller and back.
  3. Use the Preferred Mode drop-down list to select IPV4, IPV6, or Disable them.
  4. Click Apply to Device.

Management

ClosedDevice
  1. In the Device tab, enter the IP Address of the TFTP server in the TFTP Downgrade section.
  2. In the Image File Name field, enter the name of the software image file.
  3. From the Facility Value drop-down list, choose the appropriate facility.
  4. Enter the IP address of the host.
  5. Choose the appropriate Log Trap Value.
  6. Check the Secured check box, if required.
  7. Enable Telnet and/or SSH configuration, if required.
  8. Check the Enable Core Dump check box, and enter the TFTP server and file name.
  9. Check the Enable File Compression check box to enable file compression.
  10. Click Apply to Device.
ClosedUser
  1. In the User tab, enter username and password details.
  2. Choose the appropriate password type.
  3. In the Secret field, enter a custom secret code.
  4. Choose the appropriate secret type.
  5. Click Apply to Device.
ClosedCredentials
  1. In the Credentials tab, enter 802.1x username and password details.
  2. Choose the appropriate 802.1x password type.
  3. Click Apply to Device.
ClosedCDP Interface
  1. In the CDP Interface tab, enable the CDP State, if required.
  2. Click Apply to Device.

Security

Rogue AP is an AP installed on a wired enterprise network without authorization from the network administrator.

  1. In the Rogues section, check the Rogue Detection check box to enable rogue detection.
  2. In the Rogue Detection Minimum RSSI field, enter the RSSI value.
  3. In the Rogue Detection Transient Interval field, enter the interval.
  4. In the Rogue Detection Report Interval field, enter the report interval value.
  5. Check the Rogue Containment Automatic Rate Selection check box to enable rogue containment automatic rate selection.
  6. Check the Auto Containment on FlexConnect Standalone check box to enable auto containment on FlexConnect standalone selection.
  7. In the aWIPS section, check the aWIPS Enable check box to enable aWIPS.
  8. Check the Forensic Enable check box to enable forensic support.
  9. Click Apply to Device.

ICap

Client Subscription

On the ICap > Client Subscription page, you can configure the following:

ClosedFull Packet Trace
  1. In the Full Packet Trace tab, enable the Topic Status.
  2. In the Client MAC Filters section, enter the MAC address.
  3. Click Apply to Device.
ClosedPartial Packet Trace
  1. In the Partial Packet Trace tab, enable the Topic Status.
  2. In the Client MAC Filters area, enter the MAC address and click + sign to add the address to the preferred list.
  3. In the Protocol Filter area and Protocol Filter Type field, choose All.
  4. In the Management Type field, choose one of the following options:
    • All
    • Assoc
    • Auth
    • Probe
  5. In the Data Type field, choose one of the following options:
    • All
    • ARP
    • DHCP
    • DHCPv6
    • DNS
    • EAP
    • ICMP
    • ICMPv6
  6. In the Cisco Type field, choose one of the following options:
    • All
    • NDP
  7. Click Apply to Device.
ClosedAnomaly Detection
  1. In the Anomaly Detection tab, enable the Topic Status.
  2. Enable the Packet-trace Trigger AP.

  3. In the Client MAC Filters section, enter the MAC address and click + sign to add the address to the preferred list.

  4. In the Timeout section, enter a value for the DHCP Frequency in seconds. The valid values range between 1 second and 120 seconds. The default value is 5 seconds.
  5. Enter a value for Dot1x Frequency. The valid values range between 1 second and 60 seconds. The default value is 3 seconds.
  6. Click Apply to Device.
ClosedStatistics
  1. In the Statistics tab, enable the Topic Status.
  2. In the Frequency field, enter the frequency value in seconds. The valid values range between 30 and 3600 seconds. The default value is 30 seconds.
  3. In the Client MAC Filters area, enter the MAC address and click + sign to add the address to the preferred list.
  4. Click Apply to Device.

AP Subscription

On the ICap > AP Subscription page, you can configure the following:

  1. In the Subscriptions for AP section, enable or disable RF Spectrum, Slot 0, Slot 1, and Slot 2:
  2. In the Topic section, set the status and frequency for system, memory, interface, routing, radio, WLAN, and DNS statistics appropriately. The valid values for frequency ranges between 30 and 3600 seconds. The default frequency value is 30 seconds.
  3. Click Apply to Device.

 

Related Topics Link IconRelated Topics

 

© 2020 Cisco Systems, Inc. All rights reserved.

 

Was this Document Helpful?

FeedbackFeedback

Contact Cisco

This Document Applies to These Products