t_config_tp_flex_profile

Available Languages

Updated:November 29, 2020

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Flex Profile

Flex Profile

Flex profile contains attributes that are part of the FlexConnect group. However, policy attributes are grouped with the policy profile. The FlexConnect profile also contains the remote site-specific parameters. For example, the EAP profiles that can be used when the AP acts as an authentication server for local radius server information, VLAN-ACL mapping, VLAN name to ID mapping, and so on.

On the Configuration > Tags & Profiles > Flex page, click Add to configure the following:

ClosedGeneral
  1. In the General tab, enter a name and description for the Flex profile.
  2. Specify a Native VLAN ID.
  3. Specify HTTP proxy port number and IP address.
  4. Choose to enable or disable the following:
    • Multicast Overridden Interface: Override Interface contains a set of ports with specific properties that overrides the configuration in an assigned policy-group
    • Fallback Radio Shut: Allows you to configure APs so that if the non-root bridge link connecting the AP to the network infrastructure goes down, the root AP link through which a client connects to the AP shut down. Shutting down the root AP link causes the client to roam to another AP.
    • Flex Resilient: Enables or Disables Standalone mode in flex+bridge AP.
    • ARP Caching: ARP caching on the wireless device reduces the traffic on your wireless LAN by stopping ARP requests for client devices at the wireless device.
    • Join Minimum Latency: Enables least latency join for a FlexConnect AP.
    • IP Overlap: Enables IP overlap for a FlexConnect AP.
  5. Click Save & Apply to Device.
ClosedLocal Authentication
  1. In the Local Authentication tab, choose the appropriate RADIUS Server Group.
  2. Use the Local Accounting Radius Server Group drop-down to select the RADIUS server group.
  3. Check the Local Client Roaming check box to enable client roaming.

  4. Use the EAP Fast Profile drop-down to select the EAP profile.

  5. Choose to enable or disable the following:
    • LEAP—Lightweight Extensible Authentication Protocol (LEAP) is an 802.1X authentication type for wireless LANs and supports strong mutual authentication between the client and a RADIUS server using a logon password as the shared secret. It provides dynamic per-user, per-session encryption keys.
    • PEAP—Protected Extensible Authentication Protocol (PEAP) is a protocol that encapsulates the Extensible Authentication Protocol (EAP) within an encrypted and authenticated Transport Layer Security (TLS) tunnel.
    • TLS—Transport Layer Security (TLS) is a cryptographic protocol that provide communications security over a computer network.
    • RADIUS—Remote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA or Triple A) management for users who connect and use a network service.
  6. In the Users section, click Add.
  7. Specify username and password details and save.
  8. Click Save & Apply to Device.
ClosedPolicy ACL
  1. In the Policy ACL tab, click Add.
  2. Choose the appropriate ACL Name.
  3. Enable Central Webauth, if required.
  4. From the Pre Auth URL Filter drop-down list, choose an appropriate URL filter.
  5. Click Save and then Apply to Device.
ClosedVLAN
  1. In the VLAN tab, click Add.
  2. Enter VLAN name and ID.
  3. Choose the appropriate ACL name and save.
  4. Click Save & Apply to Device.

    5.  

ClosedUmbrella
  1. In the Umbrella tab, click Add.
  2. From the Parameter Map Name drop-down list, select the parameter map name, or search for the required parameter map name and click Save.
  3. Click Save & Apply to Device.

    4. The parameter map name is added to the list of Parameter Map Names under the Umbrella tab.

     

Related Topics Link IconRelated Topics

 

© 2020 Cisco Systems, Inc. All rights reserved.

 

Was this Document Helpful?

FeedbackFeedback

Contact Cisco

This Document Applies to These Products