Mobility Express CLI Reference

Application Visibility Commands

config flexconnect group default-flexgroup avc 1 visibility { enable | disable }— To enable or disable Application Visibility in a WLAN

show flexconnect group detail default-flexgroup— To display the status of Application Visibility in each WLAN

show flexconnect avc statistics group default-flexgroup— To view Application Visibility statistics based on the flex group

show flexconnect avc statistics client client_MAC—To view Application Visibility statistics based on each client

ClearAir Commands

config 802.11b cleanair enable ap_MAC— To enable CleanAir on an associated AP. Not applicable to 1850 and 1830 series APs.

show 802.11b cleanair device ap ap_MAC—To list all the interference devices connected to the AP.

show 802.11b cleanair device type jammer—To jam a specific interference device

Controller Image Upgrade Commands

transfer download ap-images imagePath image_path— To set the path of the software image on the TFTP server

transfer download ap-images mode tftp— To set the file transfer mode as TFTP

transfer download ap-images serverIp ipv4_address—To specify the IP address of the TFTP server/

transfer download start—To save the configuration and start the image download

debug transfer all { enable | disable }—To debug the transfer and download with all sub commands enabled

debug transfer tftp { enable | disable }—To debug transfer download tftp

debug transfer trace { enable | disable }—To debug transfer trace

DNS Commands

config network dns default—To configure the default DNS servers.

show network summary—To view a network summary, with the default DNS servers listed, if they are enabled.

Flexconnect Commands

config flexconnect group default-flexgroup wlan-vlan wlan { WLAN id } add Vlan { VLAN ID}—To configure VLAN to WLAN on FlexConnect group

config flexconnect acl {apply | create | delete} acl_name—To apply access control lists that are configured on a FlexConnect access point, use the config flexconnect acl command

config flexconnect aclrule {action rule_name rule_index {permit | deny} | add rule_name rule_index | change index rule_name old_index new_index | delete rule_name rule_index | destination address rule_name rule_index ip_address netmask | destination port range rule_name rule_index start_port end_port | direction rule_name rule_index {in | out | any} | dscp rule_name rule_index dscp | protocol rule_name rule_index protocol | source address rule_name rule_index ip_address netmask | source port range rule_name rule_index start_port end_port | swap index rule_name index_1 index_2}

show flexconnect acl detailed acl-name—To display a detailed summary of FlexConnect access control lists, use the show flexconnect acl detailed command

Migration Commands

ap-type capwap—To convert ap-type from Mobility Express to CAPWAP

ap-type mobilityexpress tftp:// tftp_server / file_name —To convert ap-type from CAPWAP to MobilityExpress, when running an Mobility Express software image config ap unifiedmode switch_name switch_IP_address - To convert all APs to type to CAPWAP simultaneously from the switch

NTP Commands

config time ntp server 1 FQDN_of_server -—To configure the fully qualified domain name of the NTP server having, for example here, NTP index 1

config time ntp server 2 NTP_Server_IP_address —To configure the IP address of the NTP server having, for example here, NTP index 2

Ports and Interface Commands

show interface summary—To display summary details of the system interfaces, use the show interface summary command

show interfacedetailed {management}—To display details of the system interfaces, use the show interface command.

config interface address {management IP_address netmask gateway}—To configure address information for an interface, use the config interface address command

RRM Commands

Show Commands

show 802.11 {a | b} extended—To display access point radio extended configurations, use the show 802.11 extended command

show advanced 802.11{a | b} channel—To display the automatic channel assignment configuration and statistics, use the show advanced 802.11 channel command

show advanced 802.11{a | b} coverage —To display the configuration and statistics for coverage hole detection, use the show advanced 802.11 coverage command

show advanced 802.11{a | b} l2roam {rf-param | statistics} mac_address}—To display 802.11a or 802.11b/g Layer 2 client roaming information, use the show advanced 802.11 l2roam command

show advanced 802.11{a | b} logging—To display 802.11a or 802.11b RF event and performance logging, use the show advanced 802.11 logging command

show advanced 802.11{a | b} monitor —To display the 802.11a or 802.11b default Cisco radio monitoring, use the show advanced 802.11 monitor command

show advanced 802.11{a | b} profile {global | cisco_ap} —To display the 802.11a or 802.11b lightweight access point performance profiles, use the show advanced 802.11 profile command

show advanced 802.11{a | b} receiver—To display the configuration and statistics of the 802.11a or 802.11b receiver, use the show advanced 802.11receiver command

show advanced 802.11{a | b} summary—To display the 802.11a or 802.11b Cisco lightweight access point name, channel, and transmit level summary, use the show advanced 802.11 summary command

show advanced 802.11{a | b} txpower—To display the 802.11a or 802.11b automatic transmit power assignment, use the show advanced 802.11txpower command

Config Commands

config {802.11-a49 | 802.11-a58} {enable | disable} cisco_ap —To enable or disable the 4.9-GHz and 5.8-GHz public safety channels on an access point, use the config802.11-a command

config {802.11-a49 | 802.11-a58} antenna extAntGain ant_gain cisco_ap {global | channel_no}—To configure the external antenna gain for the 4.9-GHz and 5.8-GHz public safety channels on an access point, use the config 802.11-a antenna extAntGain commands

config {802.11-a49 | 802.11-a58} channel ap cisco_ap {global | channel_no}—To configure the channel properties for the 4.9-GHz and 5.8-GHz public safety channels on an access point, use the config 802.11-a channel ap command

config {802.11-a49 | 802.11-a58} txpower ap cisco_ap {global | power_level}—To configure the transmission power properties for the 4.9-GHz and 5.8-GHz public safety channels on an access point, use the config 802.11-a txpower ap command

config 802.11a 11acsupport {enable | disable | mcs tx mcs_index ss spatial_stream {enable | disable}}—To configure 802.11ac 5-GHz parameters, use the config 802.11a 11acsupport command

config 802.11b 11gSupport {enable | disable}—To enable or disable the Cisco wireless LAN solution 802.11g network, use the config 802.11b 11gSupport command

config 802.11b preamble {long | short}—To change the 802.11b preamble as defined in subclause 18.2.2.2 to long (slower, but more reliable) or short (faster, but less reliable), use the config 802.11b preamble command

config 802.11h channelswitch {enable {loud | quiet} | disable}—To configure an 802.11h channel switch announcement, use the config 802.11h channelswitch command

config 802.11h powerconstraint value—To configure the 802.11h power constraint value, use the config 802.11h powerconstraint command

config 802.11h setchannel cisco_ap—To configure a new channel using 802.11h channel announcement, use the config 802.11h setchannel command

config 802.11{a | b} 11nsupport {enable | disable}—To enable 802.11n support on the network, use the config 802.11 11nsupport command

config 802.11{a | b} 11nsupport antenna cisco_ap {A | B | C | D} {enable | disable}—To configure an access point to use a specific antenna, use the config 802.11 11nsupport antenna command

config 802.11 {a | b} 11nsupport guard-interval {any | long}—To configure the guard interval, use the config 802.11 11nsupport guard-interval command

config 802.11{a | b} 11nsupport mcs tx {0-15} {enable | disable}—To specify the modulation and coding scheme (MCS) rates at which data can be transmitted between the access point and the client, use the config 802.11 11nsupport mcs tx command

config 802.11{a | b} 11nsupport mcs tx {0-15} {enable | disable}—To configure the Reduced Interframe Space (RIFS) between data frames and its acknowledgment, use the config 802.11 11nsupport rifs command

config 802.11{a | b} antenna diversity {enable | sideA | sideB} cisco_ap—To configure the diversity option for 802.11 antennas, use the config 802.11 antenna diversity command

config 802.11{a | b} antenna extAntGain antenna_gain cisco_ap—To configure external antenna gain for an 802.11 network, use the config 802.11 antenna extAntGain command

config 802.11{a | b} antenna mode {omni | sectorA | sectorB} cisco_ap—To configure the Cisco lightweight access point to use one internal antenna for an 802.11 sectorized 180-degreecoverage pattern or both internal antennas for an 802.11 360-degree omnidirectional pattern, use the config 802.11 antenna mode command

config 802.11{a | b} antenna selection {internal | external} cisco_ap—To select the internal or external antenna selection for a Cisco lightweight access point on an 802.11 network, use the config 802.11 antenna selection command

config 802.11{a | b} channel {global [auto | once | off | restart]} | ap {ap_name [global | channel]}—To configure an 802.11 network or a single access point for automatic or manual channel selection, use the config 802.11 channel command

config 802.11{a | b} channel ap cisco_ap {global | channel_no}—To set the operating radio channel for an access point, use the config 802.11 channel ap command

config 802.11{a | b} chan_width cisco_ap {20 | 40 | 80}—To configure the channel width for a particular access point, use the config 802.11 chan_width command

config 802.11{a | b} txPower {global {power_level | auto | max | min | once } | ap cisco_ap}—To configure the transmit power level for all access points or a single access point in an 802.11 network, use the config 802.11 txPower command

config advanced 802.11{a | b} channel add channel_number—To add channel to the 802.11 networks auto RF channel list, use the config advanced 802.11 channel add command

config advanced 802.11{a | b} channel cleanair-event {enable | disable | sensitivity [low | medium | high] | custom threshold threshold_value}—To configure CleanAir event driven Radio Resource Management (RRM) parameters for all 802.11 Cisco lightweight access points, use the config advanced 802.11 channel cleanair-event command.

config advanced 802.11{a | b} channel dca anchor-time value—To specify the time of day when the Dynamic Channel Assignment (DCA) algorithm is to start, use the config advanced 802.11 channel dca anchor-time command.

config advanced 802.11{a | b} channel dca chan-width-11n {20 | 40 | 80}—To configure the Dynamic Channel Assignment (DCA) channel width for all 802.11n radios in the 5-GHz band, use the config advanced 802.11 channel dca chan-width-11n command.

config advanced 802.11{a | b} channel dca interval value—To specify how often the Dynamic Channel Assignment (DCA) is allowed to run, use the config advanced 802.11 channel dca interval command

config advanced 802.11{a | b} channel dca RSSI_value—To configure the 5-GHz minimum RSSI energy metric for DCA, use the config advanced 802.11 channel dca min-metric command

config advanced 802.11{a | b} channel dcasensitivity {low | medium | high}—To specify how sensitive the Dynamic Channel Assignment (DCA) algorithm is to environmental changes(for example, signal, load, noise, and interference) when determining whether or not to change channels, use the config advanced 802.11 channel dca sensitivity command

config advanced 802.11{a | b} channel foreign {enable | disable}—To have Radio Resource Management (RRM) consider or ignore foreign 802.11a interference avoidance inmaking channel selection updates for all 802.11a Cisco lightweight access points, use the config advanced 802.11 channel foreign command

config advanced 802.11{a | b} channel load {enable | disable}—To have Radio Resource Management (RRM) consider or ignore the traffic load in making channel selection updates for all 802.11a Cisco lightweight access points, use the config advanced 802.11 channel load command

config advanced 802.11{a | b} channel noise {enable | disable}—To have Radio Resource Management (RRM) consider or ignore non-802.11a noise in making channel selection updates for all 802.11a Cisco lightweight access points, use the config advanced 802.11 channel noise command.

config advanced 802.11{a | b} channel update—To have Radio Resource Management (RRM) initiate a channel selection update for all 802.11a Cisco lightweight access points, use the config advanced 802.11 channel update command

config advanced 802.11{a | b} coverage {enable | disable}—To enable or disable coverage hole detection, use the config advanced 802.11 coverage command

config advanced 802.11{a | b} coverage exception global percent—To specify the percentage of clients on an access point that are experiencing a low signal level but cannot roam to another access point, use the config advanced 802.11 coverage exception global command

config advanced 802.11{a | b} coverage {data | voice} fail-rate percent—To specify the failure rate threshold for uplink data or voice packets, use the config advanced 802.11 coverage fail-rate command

config advanced 802.11{a | b} coverage level global clients—To specify the minimum number of clients on an access point with an received signal strength indication(RSSI) value at or below the data or voice RSSI threshold, use the config advanced 802.11 coverage level global command

config advanced 802.11{a | b} coverage {data | voice} packet-count packets—To specify the minimum failure count threshold for uplink data or voice packets, use the config advanced 802.11 coverage packet-count command

config advanced 802.11{a | b} coverage {data | voice} rssi-threshold rssi—To specify the minimum receive signal strength indication (RSSI) value for packets that are received by an access point, use the config advanced 802.11 coverage rssi-threshold command

config advanced 802.11{a | b} factory—To reset 802.11a advanced settings back to the factory defaults, use the config advanced 802.11 factory command

config advanced 802.11{a | b} group-member {add | remove} controller controller-ip-address—To configure members in 802.11 static RF group, use the config advanced 802.11 group-member command

config advanced 802.11{a | b} group-mode {auto | leader | off | restart}—To set the 802.11a automatic RF group selection mode on or off, use the config advanced 802.11 group-mode command

config advanced 802.11{a | b} logging channel {on | off}—To turn the channel change logging mode on or off, use the config advanced 802.11 logging channel command

config advanced 802.11{a | b} logging coverage {on | off}—To turn the coverage profile logging mode on or off, use the config advanced 802.11 logging coveragecommand

config advanced 802.11{a | b} logging foreign {on | off}—To turn the foreign interference profile logging mode on or off, use the config advanced 802.11 logging foreign command

config advanced 802.11{a | b} logging load {on | off}—To turn the 802.11a load profile logging mode on or off, use the config advanced 802.11 logging load command

config advanced 802.11{a | b} logging noise {on | off}—To turn the 802.11a noise profile logging mode on or off, use the config advanced 802.11 logging noise command

config advanced 802.11{a | b} logging performance {on | off}—To turn the 802.11a performance profile logging mode on or off, use the config advanced 802.11 logging performance command

config advanced 802.11{a | b} logging txpower {on | off}—To turn the 802.11a transmit power change logging mode on or off, use the config advanced 802.11 logging txpower command

config advanced 802.11{a | b} profile noise {global | cisco_ap} dBm—To set the 802.11a foreign noise threshold between –127 and 0 dBm, use the config advanced 802.11 profile noise command

config advanced 802.11{a | b} profile throughput {global | cisco_ap} value—To set the Cisco lightweight access point data-rate throughput threshold between 1000 and 10000000 bytes per second, use the config advanced 802.11 profile throughput command

config advanced 802.11{a | b} profile utilization {global | cisco_ap} percent—To set the RF utilization threshold between 0 and 100 percent, use the config advanced 802.11 profile utilization command. The operating system generates a trap when this threshold is exceeded

config advanced 802.11{a | b} receiver {default | rxstart jumpThreshold value}—To set the advanced receiver configuration settings, use the config advanced 802.11 receiver command

config advanced 802.11{a | b} tpc-version {1 | 2}—To configure the Transmit Power Control (TPC) version for a radio, use the config advanced 802.11 tpc-version command

config advanced 802.11{a | b} tpcv1-thresh threshold—To configure the threshold for Transmit Power Control (TPC) version 1 of a radio, use the config advanced 802.11 tpcv1-thresh command

config advanced 802.11{a | b} tpcv2-intense intensity—To configure the computational intensity for Transmit Power Control (TPC) version 2 of a radio, use the config advanced 802.11 tpcv2-intense command

config advanced 802.11{a | b} tpcv2-per-chan {enable | disable}—To configure the Transmit Power Control Version 2 on a per-channel basis, use the config advanced 802.11 tpcv2-per-chan command

config advanced 802.11{a | b} tpcv2-thresh threshold—To configure the threshold for Transmit Power Control (TPC) version 2 of a radio, use the config advanced 802.11 tpcv2-thresh command

config advanced 802.11{a | b} txpower-update—To initiate updates of the 802.11a transmit power for every Cisco lightweight access point, use the config advanced 802.11 txpower-update command

config network rf-network-name name—To set the RF-Network name, use the config network rf-network-name command

Security Commands

Show Commands

show 802.11 { a | b | h }—To display basic 802.11a, 802.11b/g, or 802.11h network settings, use the show 802.11 command

show aaa auth— To display the configuration settings for the AAA authentication server database, use the show aaa auth command

show database summary —To display the maximum number of entries in the database, use the show database summary command

show local-auth certificates—To display local authentication certificate information, use the show local-auth certificates command

show local-auth config— To display local authentication configuration information, use the show local-auth config command.

show local-auth statistics—To display local Extensible Authentication Protocol (EAP) authentication statistics, use the show local-auth statistics command

show netuser { detail user_name | guest-roles | summary }—To display the configuration of a particular user in the local user database, use the show netuser command

show network summary—To display the network configuration of the Cisco wireless LAN controller, use the show network summary command

show radius acct detailed radius_index — To display RADIUS accounting server information, use the show radius acct detailed command

show radius acct statistics —To display the RADIUS accounting server statistics for the Cisco wireless LAN controller, use the show radius acct statistics command

show radius auth detailed radius_index —To display RADIUS authentication server information, use the show radius auth detailed command.

show radius summary—To display the RADIUS authentication and accounting server summary, use the show radius summary command

show radius auth statistics—To display the RADIUS authentication server statistics for the Cisco wireless LAN controller, use the show radius auth statistics command

Config Commands

config aaa auth mgmt [ radius | tacacs ]—To configure the order of authentication when multiple databases are configured, use the config aaa auth mgmt command

config radius acct{ {add index IP addr port {ascii | hex} secret} | delete index | disable index | enable index | ipsec {authentication {hmac-md5 index | hmac-sha1 index } 
| disable index | enable index | encryption{256-aes| 3des| aes|des} index | ike {auth-mode {pre-shared-key index type shared_secret_key | certificate index } 
| dh-group { 2048bit-group-14 | group-1 | group-2 | group-5} index | lifetime seconds index | phase1 {aggressive | main} index } } | {mac-delimiter {colon 
| hyphen | none | single-hyphen}} | {network index {disable | enable}} | {region {group | none | provincial}} 
| retransmit-timeout index seconds | realm {add | delete} index realm-string}
To configure settings for a RADIUS accounting server for the Cisco wireless LAN controller, use the config radius acct command
config radius auth {add index IP addr portascii/hexsecret} | {callStationIdType {ap-ethmac-only | ap-ethmac-ssid| ap-group-name | ap-label-address| ap-label-address-ssid
| ap-location| ap-macaddr-only | ap-macaddr-ssid | ap-name | ap-name-ssid | flex-group-name | ipaddr | macaddr| vlan-id}} | delete index | disable index | enable index | 
{ ipsec {authentication {hmac-md5 index | hmac-sha1 index } | disable index | enable index | encryption {256-aes | 3des | aes | des} index 
| ike {auth-mode {pre-shared-key index ascii/hex shared_secret | certificate index } |dh-group{ 2048bit-group-14 | group-1 | group-2 | group-5} index 
| lifetime secondsindex |phase1 {aggressive | main} index } } | { {keywrap{add ascii/hex kek mack index } | delete index | disable | enable} } 
| {mac-delimiter {colon | hyphen | none | single-hyphen}} | {{management index {enable |disable}} | { mgmt-retransmit-timeout index Retransmit Timeout } 
| { network index {enable | disable}} | {realm {add | delete} radius-index realm-string} } | {region{group|none |provincial}} | {retransmit-timeout index RetransmitTimeout} 
| { rfc3576 {enable | disable} index } - To configure settings for a RADIUS authentication server for the Cisco wireless LAN controller, use the config radius auth command.

config radius acct network index {enable | disable} —To configure a default RADIUS server for network users, use the config radius acct network command

config radius auth network index {enable | disable} —To configure a default RADIUS server for network users, use the config radius auth network command

config netuser add username password {wlan wlan_id | guestlan guestlan_id} userType guest lifetime lifetime description description—To add a guest user on a WLAN or wired guest LAN to the local user database on the controller, use the config netuser add command.

config netuser delete { username username | wlan-id wlan-id}—To delete an existing user from the local network, use the config netuser delete command

config netuser description username description—To add a description to an existing net user, use the config netuser description command.

config radius acct{ {add index IP addr port {ascii | hex} secret} | delete index | disable index | enable index | ipsec {authentication {hmac-md5 index | hmac-sha1 index } | disable index | enable index | encryption{256-aes| 3des| aes|des} index | ike {auth-mode {pre-shared-key index type shared_secret_key | certificate index } | dh-group { 2048bit-group-14 | group-1 | group-2 | group-5} index | lifetime seconds index | phase1 {aggressive | main} index } } | {mac-delimiter {colon | hyphen | none | single-hyphen}} | {network index {disable | enable}} | {region {group | none | provincial}} | retransmit-timeout index seconds | realm {add | delete} index realm-string}

config local-auth eap-profile {[ add | delete ] profile_name | cert-issuer { cisco | vendor } | method method local-cert { enable | disable } profile_name | method method client-cert { enable | disable } profile_name | method method peer-verify ca-issuer { enable | disable } | method method peer-verify cn-verify { enable | disable } | method method peer-verify date-valid { enable | disable } — To configure local Extensible Authentication Protocol (EAP) authentication profiles, use the config local-auth eap-profile command

System Management Commands

show snmpcommunity—To display Simple Network Management Protocol (SNMP) community entries, use the show snmpcommunity command

show snmptrap— To display Cisco wireless LAN controller Simple Network Management Protocol (SNMP) trap receivers and their status, use the show snmptrap command

show snmpv3user—To display Simple Network Management Protocol (SNMP) version 3 configuration, use the show snmpv3user command

show snmpversion—To display which versions of Simple Network Management Protocol (SNMP) are enabled or disabled on your controller, use the show snmpversion command

config snmp community accessmode { ro | rw } name—To modify the access mode (read only or read/write) of an SNMP community, use the config snmp community accessmode command

config snmp community create name—To create a new SNMP community, use the config snmp community create command

config snmp community delete name—To delete an SNMP community, use the config snmp community delete command

config snmp community mode { enable | disable } name— To enable or disable an SNMP community, use the config snmp community mode command

config snmp trapreceiver create name IP addr—To configure a server to receive SNMP traps, use the config snmp trapreceiver create command

config snmp trapreceiver delete name—To delete a server from the trap receiver list, use the config snmp trapreceiver delete command

config snmp trapreceiver mode { enable | disable } name— To send or disable sending traps to a selected server, use the config snmp trapreceiver mode command

config snmp v3user create username { ro | rw } { none | hmacmd5 | hmacsha } { none | des | aescfb128 } [ auth_key ] [ encrypt_key ]— To create a version 3 SNMP user, use the config snmp v3user create command

config snmp v3user delete username— To delete a version 3 SNMP user, use the config snmp v3user delete command

config snmp version { v1 | v2 | v3 } { enable | disable }— To enable or disable selected SNMP versions, use the config snmp version command

show sysinfo—To display high-level Cisco wireless LAN controller information, use the show sysinfo command.

show time —To display the Cisco wireless LAN controller time and date, use the show time command

show band-select —To display band selection information, use the show band-select command

transfer download datatype { eapdevcert | eapcacert }—To set the download file type, use the transfer download datatype command

UX Regulatory Domain Commands

config wlan disable 1 —To disable WLAN 1

config wlan universal-ap-admin enable 1 —To enable as universal-ap-admin for wlan 1

config wlan enable 1—To enable WLAN 1

config wlan enable 1—To enable WLAN 1

VRRP Command

config ap next-preferred-master—To configure the primary AP that has been elected to take over as the new primary AP

show ap next-preferred-master—To display the status of the primary AP

clear ap next-preferred-master—To clear the configuration of the primary AP

WGB Commands

show wgb summary—To display the summary of workgroup bridges

show wgb detail WGB_MAC—To display the details of a specific workgroup bridge

WLAN Commands

Config Commands

config wlan security wpa wpa2 enable wlan_id—To enable WPA2, use the config wlan security wpa wpa2 enable command

config wlan security wpa wpa2 disable wlan_id—To disable WPA2, use the config wlan security wpa wpa2 disable command

config wlan security wpa wpa2 ciphers {aes | tkip} {enable | disable} wlan_id—To configure WPA2 ciphers and enable or disable Advanced Encryption Standard (AES) or Temporal Key Integrity Protocol (TKIP) data encryption for WPA2, use the config wlan security wpa wpa2 ciphers command

config wlan security wpa akm 802.1x {enable | disable} wlan_id—To configure authentication key-management (AKM) using 802.1X, use the config wlan security wpa akm 802.1x command

config wlan radio wlan_id {all | 802.11a | 802.11bg | 802.11g | 802.11ag}—To set the Cisco radio policy on a wireless LAN, use the config wlan radio command

config wlan { enable | disable | create | delete } wlan_id [ name | all ]—To create, delete, enable, or disable a wireless LAN, use the config wlan command

config wlan band-select allow { enable | disable } wlan_id —To configure band selection on a WLAN, use the config wlan band-select allow command

config wlan broadcast-ssid { enable | disable } wlan_id —To configure an Service Set Identifier (SSID) broadcast on a wireless LAN, use the config wlan broadcast-ssid command

config wlan qos wlan_id { bronze | silver | gold | platinum }—To change the quality of service (QoS) for a wireless LAN, use the config wlan qos command

config wlan radius_server acct { enable | disable } wlan_id | add wlan_id server_id | delete wlan_id { all | server_id } | framed-ipv6 { address | both | prefix } wlan_id }—To configure RADIUS accounting servers of a WLAN, use the config wlan radius_server acct command

config wlan radius_server auth { enable wlan_id | disable wlan_id } { add wlan_id server_id | delete wlan_id { all | server_id }} - To configure RADIUS authentication servers of a WLAN, use the config wlan radius_server auth command

config wlan security 802.1X { enable { wlan_id } | disable { wlan_id } | }}—To change the state of 802.1X security on the wireless LAN Cisco radios, use the config wlan security 802.1X command

config wlan security wpa akm cckm { enable wlan_id | disable wlan_id | timestamp-tolerance }—To configure authentication key-management using Cisco Centralized Key Management (CCKM), use the config wlan security wpa akm cckm command

config wlan security wpa akm psk { enable | disable | set-key key-format key } wlan_id —To configure the Wi-Fi protected access (WPA) preshared key mode, use the config wlan security wpa akm psk command

config wlan security wpa wpa2 {enable | disable} wlan_id —To enable/disable WPA2, use the config wlan security wpa wpa2 enable/disable command

config wlan ssid wlan_id ssid —To edit an SSID associated to a WLAN, use the config wlan ssid command

config wlan security wpa akm ft [ over-the-air | over-the-ds | psk | [ reassociation-timeout seconds ]] { enable | disable } wlan_id —To configure authentication key-management using 802.11r fast transition 802.1X, use the config wlan security wpa akm ft command

config wlan security ft { enable | disable | reassociation-timeout timeout-in-seconds } wlan_id — To configure 802.11r fast transition parameters, use the config wlan security ft command

config wlan security ft { enable | disable | reassociation-timeout timeout-in-seconds } wlan_id — To configure 802.11r fast transition parameters, use the config wlan security ft command

config wlan security wpa akm cckm { enable wlan_id | disable wlan_id | timestamp-tolerance }— To configure authentication key-management using Cisco Centralized Key Management (CCKM), use the config wlan security wpa akm cckm command

config 802.11 { a | b } cac voice acm { enable | disable }— To enable or disable bandwidth-based voice Call Admission Control (CAC) for the 802.11a or 802.11b/g network, use the config 802.11 cac voice acm command

config 802.11 { a | b } cac voice tspec-inactivity-timeout { enable | ignore }— To process or ignore the Wi-Fi Multimedia (WMM) traffic specifications (TSPEC) inactivity timeout received from an access point, use the config 802.11 cac voice tspec-inactivity-timeout command

config 802.11 { a | b } cac voice stream-size stream_size number mean_datarate max-streams mean_datarate — To configure the number of aggregated voice Wi-Fi Multimedia (WMM) traffic specification (TSPEC) streams at a specified data rate for the 802.11a or 802.11b/g network, use the config 802.11 cac voice stream-size command

config 802.11 { a | b } cac voice max-bandwidth bandwidth — To set the percentage of the maximum bandwidth allocated to clients for voice applications on the 802.11a or 802.11b/g network, use the config 802.11 cac voice max-bandwidth command

config 802.11 { a | b } cac voice roam-bandwidth bandwidth — To configure the percentage of the Call Admission Control (CAC) maximum allocated bandwidth reserved for roaming voice clients on the 802.11a or 802.11b/g network, use the config 802.11 cac voice roam-bandwidth command

config 802.11 { a | b } cac voice load-based { enable | disable }— To enable or disable load-based Call Admission Control (CAC) for the 802.11a or 802.11b/g network, use the config 802.11 cac voice load-based command

config 802.11 { a | b } cac voice max-calls number — To configure the maximum number of voice call supported by the radio, use the config 802.11 cac voicemax-calls command


Note

Do not use the config 802.11 cac voice max-calls command if the SIP call snooping feature is disabled and if the SIP based Call Admission Control (CAC) requirements are not met


config 802.11 { a | b } cac voice sip bandwidth bw_kbps sample-interval number_msecs —To configure the bandwidth that is required per call for the 802.11a or 802.11b/g network, use the config 802.11 cac voice sip bandwidth command


Note

SIP bandwidth and sample intervals are used to compute per call bandwidth for the SIP-based Call Admission Control (CAC).


config 802.11 { a | b } cac voice sip codec { g711 | g729 } sample-interval number_msecs — To configure the Call Admission Control (CAC) codec name and sample interval as parameters and to calculate the required bandwidth per call for the 802.11a or 802.11b/g network, use the config 802.11 cac voice sip codec command

config 802.11 { a | b } cac voice stream-size stream_size number mean_datarate max-streams mean_datarate — To configure the number of aggregated voice Wi-Fi Multimedia (WMM) traffic specification (TSPEC) streams at a specified data rate for the 802.11a or 802.11b/g network, use the config 802.11 cac voice stream-size command

Show Commands

show wlan { apgroups | summary | wlan_id }—To display configuration information for a specified wireless LAN or a foreign access point, or to display wireless LAN summary information, use the show wlan command

show client wlan wlan_id [ devicetype device ]—To display the summary of clients associated with a WLAN, use the show client wlan command.

show client summary [ ssid / ip / username / devicetype ]—To display a summary of clients associated with a Cisco lightweight access point, use the show client summary command

show client detail mac_address —To display detailed information for a client on a Cisco lightweight access point, use the show client detail command