Introduction To Converged Access Lab Guide v2.3

Introduction to New Mobility
Configuration
Lab Exercises
Version 2.3
Another hands-on lab from team MIDAS
6/18/2013
2
Table of Contents
Introduction......................................................................................................................... 3
Logical Topology ................................................................................................................. 4
Physical Topology ................................................................................................................ 5
Disclaimer............................................................................................................................ 6
Build Information ................................................................................................................ 6
Prerequisite Knowledge ...................................................................................................... 6
Lab Overview ....................................................................................................................... 7
Access Lab Pod .................................................................................................................... 8
Exercise 1: Familiarize with the Network and 3850 .......................................................... 12
Exercise 2: Configure the 3850 Switch .............................................................................. 30
Exercise 3: Setup New Mobility ......................................................................................... 57
Exercise 4: Create the Corp WLAN on the 3850 and Test Roaming .................................. 82
Appendix A: Answers to Exercise Questions ................................................................... 117
Appendix B: Final Device Configurations ........................................................................ 118
6/18/2013 Introduction to New Mobility Configuration

3
Introduction
The customer is going to be expanding into a new location. The new building is across a
courtyard in their current office complex. They want to utilize 3850s in conjunction with
the 5508 for better wireless performance and improved roaming. The customer intends
to install 40+ 3850s in the new location over the next two years, and wants to roam
directly within them when they are in a stack, or between stacks. The purpose of this
new solution is to alleviate the need to drag the roaming traffic back to the original
building’s 5508 Wireless LAN Controller. They are looking to use the existing 5508 as the
MC for the MAs which will be 3850s. They want to take advantage of the access point
license that they already have in the 5508. At some point, they may upgrade to a 5760,
and redeploy the 5508 as an oracle or dedicated guest controller.
These requirements are why the Cisco 3850 Unified Access Switch has been selected.
Your job is to set up the first 3850, proving the design, and to upgrade the 5508 to New
Mobility.
Based on the requirements, you will perform the following tasks:
• Verify current network state

• Configure the 3850 for network access
• Configure a Corporate WLAN on the 3850 to match the 5508.
• Configure the 5508 for “New Mobility”
• Configure the 5508 to act as the MC for the 3850
• Configure the 3850 to act as an MA for the 5508
• Register an AP with the 3850.
• Test Corporate WLAN access and roaming to prove the design
Before proceeding with the lab, please review the diagrams on the following pages
carefully. It may help to display them on a second screen, when completing the lab.

4
Logical Topology
The diagram below depicts the logical L3 topology of the completed prototype network.
Please note that the PCs and Servers are VMware images with non-persistent disks. If
you shut down any of these platforms, you will lose all changes made to them up to that
point. Please ensure that you carefully select restart or logoff as necessary. Avoid using
shutdown at all costs. If you accidently shutdown an image, you will need to contact
your lab proctor to get it restarted.

5
Physical Topology
The diagram below depicts the L2 topology of the network, as it is currently cabled and
ready for configuration.

6
Disclaimer
This exercise is intended to demonstrate one way to configure the network, to meet the
specified requirements of this lab. There are various ways that this can be accomplished,
depending on the situation and the customer’s goals/requirements. Please ensure that
you consult all current official Cisco documentation before proceeding with a design or
installation. This lab is primarily intended to be a learning tool, and may not necessarily
follow best practice recommendation at all times, in order to convey specific
information.
Build Information
As of the writing of this document, the current relevant documentation could be found
on CCO at the following links:
3850 Series configuration guides

http://www.cisco.com/en/US/products/ps12686/products_installation_and_configuration_guides_list.html
Converged Access whitepaper:

http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps12686/white_paper_c11-726107.pdf
The labs were constructed using the following software versions from CCO:
5508 7.3.112.0 (Model: AIR-CT5508-K9 )

3850 03.02.02SE (Model: WS-C3850-24P)
AP 3501 15.2.58-SE2 (Downloaded 1/8/2013)
ISE ISE 1.2 Beta code
Prerequisite Knowledge
A solid understanding of networking, including routing and switching is assumed. A basic

understanding of the concepts of wireless is very helpful. Familiarity with both IOS and
the IOS-XE command line is helpful. The 3850 is built on the IOS-XE software platform.
Some background with Cisco Wireless would be helpful, but is not necessary.

7
Lab Overview
This lab will focus on getting the 3850 out of the box, set up, and connected to
the 5508. You will configure network reachability, connect an access point, configure
the 5508 for New Mobility, configure the 5850 to act as an MA, and connect the
required CAPWAP tunnels. Once this is complete, we will test the improved roaming,
and prove the concept.
The key focus of the lab is to get comfortable with the 5508s New Mobility
features, as well as Converged Access. Upon completion of the lab, you should be
familiar with New Mobility, Mobility agent activities, Mobility controller activities,
Converged Access, and the expected movement of wireless traffic before and after
roaming.

8
Access Lab Pod
At this point, you should have been supplied with several pieces of information for
accessing your lab pod. You should have the following:
• The URL to access the MIDAS student portal

• The user ID and password used for logging into the MIDAS student portal
• Your pod number (very important for accessing your device consoles)
Using the information provided, please log into the lab now. Begin by opening a browser
and accessing the lab portal. The URL for accessing your pod is
typically https://128.107.69.142/student. When you are prompted with a certificate
warning from our VPN Gateway, please accept the self-signed certificate, and continue.
Carefully enter the username and password supplied, and click “Login”.

9
Click “Continue”, to acknowledge the resulting welcome message.
You are now logged into the student portal, and should be presented with a list of
bookmarks to access the images for your pod.
Verify access to the images by attempting to access PC1. Carefully click on the the
“double boxes with arrows” on the far left of the bookmark for PC1. This should open
PC1 in a new window. Please note that a current version of JAVA is required. (Disable
pop-up blocker to see java updates.) If you have an issue, please try updating java from
Java.com, before contacting the lab administrator.

10
You should see a new window open, and a connection attempt initiated. The new
browser window may require you to click to allow java, as shown below.
Take note; the IP addresses and port information in the connection attempt message
point at the VMware image on the backend of the VPN. You do not need direct access to
these addresses.
In just a moment, the TightVNC box should be connected to PC1. Note: A JAVA applet
will load in the browser enviornment, providing the TightVNC access to the VMware
image on the backend. This is why a current version of JAVA is required. The resulting
PC1 image is shown below. (Note: Your pod number, along with other informaion, is
displayed on the topmost, left side of the window in the upper blue bar.)
Make sure the pod number shown above matches what you were asigned before
starting the lab.

11
At this point, you are ready to proceed with the lab. During the lab, you will be asked to
access your images from the student portal. Simply use the bookmarks on the portal to
access the images, as you just did for PC1. You may open all your images concurrently,
using the “open in new window” functionality, just like you did for PC1. Stay logged into
the student portal, and proceed on.
Good luck with the lab! 

12
Exercise 1: Familiarize with the Network and 3850
The primary focus of this exercise is to review the 3850 and 5508 to get a current
baseline of the network. You will begin by ensuring that the 3850 is not stacked, and has
the correct version of code, followed by ensuring the current network is in working
order, then testing wireless access, and reviewing the configuration of the 5508 WLC.
Section 1.1 Access and Review the 3850
The goal of this section is to access the console of the 3850, using the out of band
console links on PC1, and review its’ current state and code.
Begin by accessing the “PC1 JumpBox” image from the student portal. (Should be open)
Log into PC1 using the default username “John Doe” and a password of “cisco123”. This
is a Local Machine account on this PC.
Password: cisco123
Access the Out of Band (OoB) consoles shortcut, located on the top left of the desktop
of PC1.

13
In the resulting window, carefully select your “Pod Number” and the “Introduction to
New Mobility Configuration” content pack from the drop down menus. Click the
“Access Console Map” button to the right.
***Note: It is crucial that the pod number selected is yours, or you will be connected to
the wrong equipment!
Before moving on, make sure that your pod number is displayed at the top of the page.
Click on the “3850 Switch” in the center of the picture. This will open the console
window.
***Note: This shortcut webpage has been created for lab purposes only. These
shortcuts simply connect you to the console port of each device represented. Cisco 2811
Terminal servers are used to provide this connectivity on the backend.

14
In the resulting console window, press “Enter”, so that the Configuration Dialog
message appears. Enter “no”, when prompted to skip the configuration dialog.
Press “Enter” to take the default value “yes” and terminate the autoinstall.
Press “Enter” a few times, in order to get to the “Switch>” prompt.
Access Privilege Exec mode, and verify that this is a single physical switch, and not part
of a stack. Also verify it is switch 1, and that it is a WS-C3850-24P running 03.02.02SE
code.
Enable
show switch

15
show version
At this point it has been confirmed that the 3850 is powered, not stacked, has the
correct version of code, and is ready for configuration.

16
Section 1.2 Test Wired Network Connectivity
The goal of this section is to test IP reachability of the current network and internet
access. In this process, review the current network and the respective diagrams, to
familiarize with the topology.
Still on PC1, open a new tab in Firefox.
Go to www.google.com to verify internet connectivity.
Accessing Google has also proven that the DNS server is functional, and resolving names
as expected.
Now test IP reachability of the rest of the wired network devices.

17
Click the start button and open the “cmd – shortcut” second from the top.
Test the following pings to get a baseline of the network. Each should be successful. The
Layer three & layer two diagrams below show the current state of the network. Make
sure to understand where each item pinged is, and its’ role in the current network.

18
From the new CMD window on PC1, ping the following devices as shown below.
ping 10.1.22.1 BLDG1-AP VLAN 22 interface on the 3750

ping 10.1.21.100 5508 interface in CAPWAP VLAN 21
ping 10.1.25.100 5508 interface in Corp-Wireless VLAN 25
ping 10.1.20.254 DC Server in VLAN 20
ping 10.1.100.254 Internet router inside interface in VLAN 100
ping 192.0.2.254 NTP server in the internet

19
At this point, all major wired IP addresses have been confirmed reachable. DNS and
internet access have been tested. Make sure you have an understanding of the current
network topology, based on the layer two and layer three diagrams shown above,
before continuing.

20
Section 1.3 Test Wireless and Review the 5508 WLC Configuration.
The goal of this section is to test wireless access and review the 5508 WLC configuration.
Access “PC2 – Wireless Client” from the student portal, and test wireless access. Use the
login information below, for the local machine account.
Username: Jane Doe (Should already be filled in)

Password: cisco123 (All lower case)

21
From the desktop of PC2, click on the wireless icon on the bottom right of the task bar,
and connect to the Corp Wireless LAN.
Select the SSID of “Conv-Corp-PodX” where X is your pod number. Make sure to select
the SSID that corresponds to your lab pod. In the lab guide, we use pod number 1, so
the SSID is “Conv-Corp-Pod1”, as shown in the screen shots below.
Click on the SSID, and note that “Connect automatically” has been checked.
Now click the “Connect” button, and enter the below key. Press “OK” when you are
done.
Key: cisco123

22
After pressing “OK”, Windows will attempt to connect to the WLAN.
After a moment, Windows will establish the connection. Hover the mouse over the
wireless icon to make sure it was successful. It should appear as displayed below.
Now, test network access over the WLAN. Open Firefox, using the desktop shortcut at
the left of the desktop, and make sure Google loads.

23
Open the Command prompt, using the shortcut at the top left of the desktop, and enter
the command shown below.
Ipconfg

24
Make sure that pc2 has received an address in the 10.1.25.0/24 range. Take a moment
to look at the below portion of the layer three diagram, and think about the current
wireless configuration.
With the current centralized deployment, the client’s wireless traffic for PC2 travels to
the AP in VLAN 22, where it is passed in a CAPWAP tunnel through the switch, and over
VLAN 21 into the 5508. The 5508 terminates the CAPWAP tunnel, and releases the
traffic into VLAN 25. In this solution, the 5508 must service all traffic for each client on
each of their respective wired subnets, as well as carry each CAPWAP tunnel from the
AP.
It is easy to see how bandwidth and throughput could become an issue as more
and more clients use wireless, and with the coming of 802.11ac. Now that you have an
understanding of how wireless traffic moves through the current topology, take a closer
look at the 5508.
Return to the desktop of PC1, and open Firefox. Navigate to the address below, to
access the 5508 WLC web GUI.
https://10.1.21.100

25
This web page will require an exception in Firefox. Expand the “I Understand the Risk”
dropdown, and click the “Add Exception…” button.
Click to confirm the security exception, to continue to the 5508 WLC web GUI.

26
In the resulting page, click “Login” on the right, and enter the credentials shown below
to access the GUI.
Username: admin
Password: Cisco123 (First “C” is uppercase)
Click “OK” to submit.
***Note: It may take a moment to log in the first time it is accessed in the lab.

27
Take a moment to look over the summary page of the 5508 GUI. Look at the current
version of software on the left under “Controller Summary”.
Q1.1: What version of code is required on the 5508 for New Mobility features?
Navigate in the GUI to “MANAGEMENT” on the top bar.

28
On the resulting page, expand the “Software Activation” drop down on the left side.
Select “licenses” in the resulting list on the left.
Note the current licenses listed on the resulting page.
As mentioned previously, the New Mobility design with the 3850 acting as an MA
(Mobility Agent) and the 5508 acting as an MC (Mobility Controller), will allow the
customer to use their current AP licenses globally. This means that no AP licenses are
required on the 3850s in an MA role. This is a critical point. The MC holds all AP licenses
for both directly connected APs and remote MA connected APs.
Q1.2: Where are AP licenses placed; on the MA or on the MC?
Additional detail on Mobility Agent and Control roles can be found at the following
converged Access whitepaper:
http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps12686/white_paper_c11-726107.pdf

29
At this point the network has been tested, and you should have a basic understanding of
the current design. The two main drivers behind the New Mobility design have been
reviewed. Continue to the next exercise to begin implementation of the new design.

30
Exercise 2: Configure the 3850 Switch
The focus of this exercise is to complete basic configuration of the 3850, as well as
creating the needed DHCP scopes. Take a moment to review the layer two diagram, and
the placement of the 3850 and AP in Building 2. This exercise will lay the groundwork for
the move from a centralized deployment to a New Mobility configuration.
Section 2.1 Basic Configuration of the 3850
In this section you will lay down a base configuration on the 3850, enabling IP
reachability. Create VLANs 222 and 225 for the AP and to support the Corporate SSID in
roaming. Then install the required ipbase license on the 3850 for MA capability. Before
beginning, take a close look below at the Layer three diagram of the intended design.

31
Begin by accessing the console of the 3850, from the student consoles on PC1.
Enter enable mode and configure a hostname, specifying this is the building 2 3850.
en
config t
hostname 3850-Bldg2
Now configure a few basic parameters, including a username, password encryption, log
timestamps, and an NTP server.
***Note: Synchronized time across MA and MC is critical to proper roaming, as well as

the formation of CAPWAP tunnels.

32
no ip domain-lookup
service password-encryption
service timestamp log datetime show-timezone localtime msec

service timestamp debug datetime show-timezone localtime msec
clock timezone edt -5

clock summer-time edt reoccurring
ntp server 192.0.2.254
username admin privilege 15 secret cisco123
Now configure the console and VTY lines, domain name, spanning tree, logging, and
generate a crypto key.
line console 0
login local
logging sync
exec-timeout 60 0
priv lev 15
exit
line vty 0 15
login local
logging sync
exec-timeout 60 0
priv lev 15
transport input telnet ssh
exit

33
ip domain-name example.com
crypto key generate rsa mod 1024
spanningtree mode rapid

span vlan 200-299 pri 4096
err recovery cause bpdug

err recovery in 60

34
Build and name VLANs 222 and 225, to support the new AP and the corporate WLAN.
vlan 222
name Bldg2-APs
exit
vlan 225
name Bldg2-Corp-Wireless
exit
exit
Save the configuration to flash before continuing.
copy running-conifg startup-config
Before continuing with the configuration of the 3850, check the current license level.
There are three license levels available for the 3850 Switch. The three license levels are
as follows; lanbase, ipbase, and ipservices. Ipbase is the minimum required for MA MC
Functionality. Ipservices also supports these features, as well as more. For this
implementation, ipbase will be used.
show license right-to-use

35
Based on the display above, remove any AP license if they exist, and apply an ipbase
license.
License right-to-use deact ap 5 slot 1 (enter only if AP licenses are present)
license right-to-use active ipbase all acceptEULA
Check to make sure there are no AP licenses, and that the ipbase license is listed.
Make sure that the 3850s license level on reboot is ipbase before continuing in the lab.
Reload the 3850 to invoke the new license level.
reload
This will take a few moments. The 3850 has been configured for manual boot. After
approximately two minutes, the 3850 will reach ROMMON. Enter the command shown
below to boot the system.

36
boot flash:packages.conf
After about 5 minutes, the 3850 will be ready to login. Enter the username and
password that you created, and display the licenses.
Username: admin

37
Now that the license level has been confirmed for MA support, continue with device
configurations. Start by configuring the 3850 for a point to point link to the core switch.
config t
int g1/0/1
no switchport
ip address 10.1.101.2 255.255.255.0
desc L3 link to Bldg1 Core Switch
no shut
Access the console of the core switch, to configure the other side of the link and test
connectivity. Open the 3750 switch console from the student consoles page. Log in with
the username and password shown below, before entering configuration terminal
mode.
Username: admin
Password: cisco123
config t

38
View the interface to confirm it is unused, and then configure the interface, followed by
testing connectivity to the 3850 with pings.
do sho run int fa1/0/8
int fa1/0/8
no switchport
desc L3 link to Bldg2 3850 Switch
ip address 10.1.101.1 255.255.255.0
no shut
exit
exit
ping 10.1.101.2 (3850 side of link)

39
Make sure that the pings are successful before continuing with the lab. This link is
critical to the function of the design.
Still on the 3750 switch, create routes for the new 3850 subnets from the core switch.
config t
ip route 10.1.255.2 255.255.255.255 10.1.101.2 (3850 Loopback)
ip route 10.1.222.0 255.255.255.0 10.1.101.2 (AP subnet)
ip route 10.1.225.0 255.255.255.0 10.1.101.2 (WLAN subnet)
exit
Now, return to the 3850 and create a default route to the 3750 core switch.
config t
ip route 0.0.0.0 0.0.0.0 10.1.101.1
exit
Test the 3850s network connectivity with the pings below.
ping 10.1.255.1 (loopback on the 3750 core switch)

ping 192.0.2.254 (NTP server in the Internet)

40
Now that the 3850 has network and internet reachability, complete the device
configuration. Start by creating a primary loopback.
config t
int lo 0
desc Primary Loopback
ip address 10.1.255.2 255.255.255.255
no shut
exit
Create interfaces on the 3850 in VLANs 222 and 225. Utilize the “helper-address” on
both, to direct DHCP requests to the DC server.
int vlan 222

desc Bldg2 AP VLAN
ip address 10.1.222.1 255.255.255.0
ip helper-address 10.1.20.254
no shut
exit
int vlan 225

desc Bldg2 Corp Wireless Users
ip address 10.1.225.1 255.255.255.0
ip helper-address 10.1.20.254
no shut
exit
exit

41
Save the 3850 configuration to flash.
Copy running-config startup-config

42
Section 2.2 Configure DHCP Scopes for Corp and AP VLANs on the 3850
In this section, you will configure two DHCP scopes in the DC server, to support VLANs
222 and 225.
Begin by accessing the DC from the student portal.
Click the “Send Ctrl-Alt-Del” button at the top of the VNC window.
Log in with the credentials below.
Username: Administrator

43
From the desktop of the DC server, open the DHCP shortcut.

44
Select “dc.example.com [10.1.20.254]” and click “New Scope” under “Action”.

45
In the resulting “New Scope Wizard”, click the “Next” button.
Name the scope and give it a description. Then, click “Next”.
Name: AP-Scope
Description: Scope for APs on the 3850

46
Specify the IP address range and subnet mask of the scope. Then, click “Next”.
Start IP address: 10.1.222.50

End IP address: 10.1.222.99
Length: 24
Subnet mask: 255.255.255.0
Click “Next” on the resulting page.

47
Click “Next” on the Lease Duration page.
Take the default and click “Next” to continue.

48
Enter the default route, and then click “Add” before clicking “Next”.
There is no need to enter a domain or DNS server, as this scope is for APs which are
directly connected to the 3850. Just click “Next”.

49
Click “Next” on the WINS Server page.
Take the default of “Yes” and click “Next” to activate the DHCP scope.

50
Click “Finish” to complete the scope.
Back in the DHCP window, expand “dc.example.com [10.1.20.254]” to confirm the new
AP-Scope was created.
To create the second scope for corporate wireless, once again under action, click “New
Scope” with “dc.example.com [10.1.20.254]”.

51
On the first page of the “New Scope Wizard”, click “Next”, just like before.
Enter the name and description of the scope. Click “Next” when complete.
Name: Bldg2-Corp-WLAN
Description: DHCP Scope for Corporate Wireless users on the 3850

52
Enter the information shown below onto the “IP Address Range” page. Click “Next”
when done.
Start IP address: 10.1.225.50

End IP address: 10.1.225.99
Length: 24
Subnet mask: 255.255.255.0
There is no need to add any exclusion, so click “Next”.

53
On the “Lease Duration”, click “Next”.
On the “Configure DHCP Options” page, click “Next”.

54
Enter the default gateway shown below, and click “Add”. Then, click “Next”.
Default Gateway: 10.1.225.1
Enter the domain name shown below and DNS server. Make sure to click “Add” after
entering the DNS server’s address. Click “Next” when complete.
Parent domain: example.com

IP address: 10.1.20.254

55
On the “WINS Servers” page, click “Next”.
On the “Activate Scope” page, click “Next”.

56
On the final page of the “New Scope Wizard”, click “Finish”.
Make sure that both scopes appear on the left side of the DHCP window, and that the
status of each is “**Active**”.

57
Exercise 3: Setup New Mobility
In this exercise, you will configure the 5508 WLC for New Mobility, and setup a switch
peer group for the 3850. Then you will designate the 3850 as a switch peer group
member in the 5508, followed by configuring the 3850 as a Mobility Agent, and
specifying the 5508 as its’ Mobility controller. When complete, a CAPWAP tunnel will
form between the two devices for control traffic.
Section 3.1 Configure the 5508 for New Mobility
The goal of this section is to enable New Mobility on the 5508 WLC and configure a
Switch peer group and membership for the 3850 switch.
Begin by accessing the PC1-Jumpbox from the student portal and log in with “cisco123”.

58
Open Firefox using the desktop shortcut on the left of the desktop, and navigate to the
address shown below, to access the GUI of the 5508.
https://10.1.21.100
Expand the “I understand the Risks” dropdown on the resulting webpage, and click “Add
Exception” to continue.

59
In the resulting window, click “Confirm Security Exception”, to access the 5508 WLC GUI.
From the “Wireless LAN Controller” login page, click the “Login” button.

60
Enter the credentials shown below, and click “OK” to access the 5508s GUI.
Username: admin
Password: Cisco123 (First C is uppercase)
From the initial GUI screen click, “CONTROLLER” on the top bar.
On the “CONTROLLER” page, click “Mobility Management” on the left, to expand the
list. Click “Mobility Configuration” in the resulting options.

61
On the resulting page, check the box to “Enable New Mobility”. Click “Apply” at the top
right when done.
Upon clicking “Apply”, this message will appear. Read the message, and click “Ok” to
begin the reload process.
***Note: The 5508 requires a reboot to enable New Mobility features, disconnecting
clients for upwards of five minutes.
***Note: The 5508 requires 7.3.112.0 for the New Mobility feature set.

62
Q3.1: What did clicking this check box and rebooting the 5508 do?
This process will take a few minutes. Please be patient. Re-enter https://10.1.21.100
after the boot process has completed, to access the 5508 GUI again.
Log in again with the username and password shown below.
Username: admin

63
From the dashboard of the 5508, expand the “Access Points” dropdown, and click
“802.11b/g/n” to make sure both APs re-register after the reboot.
The resulting “802.11b/g/n Radios” page should appear as shown below. There should
be two APs listed. It may take a few moments after the reboot for the APs to register.

64
Once both APs are confirmed to be registered with the 5508 again, check that PC2 can
still access the network via them.
Return to PC2 from the student portal, and log in with the password shown below. PC2
should have automatically reconnected when the Corp WLAN became active again.
Confirm this.
Password: cisco123
Hover with the mouse over the wireless icon on the bottom right of the task bar, to
confirm PC2 has reconnected to the Corporate WLAN as shown below.
***Note: The SSID should be “Conv-Corp-PodX” where X is YOUR pod number.

65
From the desktop, test internet access using Firefox. Make sure PC 2 can
access www.google.com successfully.
At this point, the corporate wireless LAN is again active and tested. Return to PC1 and
the 5508s GUI, to review the effects of enabling “New Mobility”.
Click on “Controller” at the top bar of the GUI.
From the controller page of the GUI, expand the “Mobility Management” dropdown,
and take a close look at the options presented.

66
Notice that there are now far more options listed here. Enabling “New Mobility” has
added features to the GUI after the reboot. Before moving on, let’s take a moment to
discuss New Mobility and the key principles to its configuration.
The key to understanding New Mobility is to understand the difference between

Mobility Agent and Mobility Controller functions. It is critical to note that in a traditional
or “Flat” wireless deployment, that both of these functions would be contained within
the WLC.
Mobility Agent: A mobility agent or “MA” is a function to manage a wireless

client database that includes client association or authentication status. The
mobility agent is also responsible for providing access point connectivity and
CAPWAP termination for clients with a local point of attachment.
Mobility Controller: A mobility controller or “MC” provides mobility

management tasks. These include inter switch peer group roaming, which occurs
when a client has roamed from within one switch peer group into another.
Q3.2: Can the 5508 WLC with New Mobility enabled, act as both an MA and MC,
simultaneously?

67
It is also essential to understand the difference between Point of Presence and Point of
Attachment for clients in this new design. In a traditional or “Flat” deployment, the two
would never be separated.
Point of Presence: the Point of Presence or “PoP” is where the user appears to
be within the wired network when connected over wireless. In a traditional or
“Flat” network, the point of presence would be at the controller.
Point of Attachment: The Point of Attachment or “PoA” is through which AP the

client traffic is entering the network. Each AP through which a client could access
the network has a single PoA.
Both Mobility controllers and Mobility Agents can be grouped in the configuration. This
is where Switch Peer Groups and Mobility Groups come into play.
Mobility Group: Mobility Group is used to link two or more MCs together to
support roaming and RF management, etc.
Switch Peer Group: A Switch Peer Group or “SPG” is configured to build a full-
mesh of CAPWAP tunnels between MAs where roaming will be frequent. The
purpose of which is to enable roaming directly between members, without the
need to pass the client traffic through the MC. Roaming between SPGs requires
the client traffic be passed through an MC.
In summary, New Mobility really defines three changes from the Legacy, or “Flat”
deployment. The first is the switch from EoIP tunnels to CAPWAP tunnels for ALL 5508
tunnel traffic. This means that in a larger deployment consisting of more than one
legacy WLC, that all controllers must be moved to New Mobility at the same time in
order to continue communication. Upon moving to New Mobility, the 5508 can no
longer talk EoIP. (Make sure to plan for this in deployment) The second is, as described
above, many components of wireless are now decentralized; for instance the MA
functionality or the Point of Presence. The key benefit here being the diminished need
to backhaul client data to the WLC. Third, Mobility Groups and SPGs are now available
for implementation. Benefits of this include the ability to structure MAs and MCs into
full-mesh groups to best eliminate the need to Backhaul client data, and when the need
arises, to backhaul it in a deliberate fashion.
Q3.3: Upon upgrading to New Mobility what protocol or protocols are used for tunnels?
Q3.4: For an inter-SPG roam of a client, would the PoA move to the MC?
On the following page, continue in the 5508 GUI, and begin configuration.

68
Navigate to “Controller>Mobility Management>Mobility Configuration” as shown

below. Confirm that “New Mobility” is enabled and take note of the 5508s IP address.
This address (10.1.21.100) will be where CAPWAP tunnels will source and terminate for
MAs and MCs when configured.
Navigate to “Controller>Mobility Management>Switch Peer Group” in the left pane as

shown below. From here, you will name and create the first Switch Peer Group in which
the 3850 can be added as a Mobility Agent.

69
Click the “New…” button located at the top right.
On the resulting page, enter the name shown below for the Switch Peer Group, and click
the “Apply” button at the top right.
Switch Peer Group Name: Bldg2-3850s
On the resulting page, click the “Apply” button at the top right.

70
The resulting page will display the new Switch Peer Group. Review the name and
continue.
Now create the Switch Peer Group member (the 3850) in the 5508 WLC. Navigate to
“Controller>Mobility Management> Switch Peer Group Member” using the left pane.
Click the “New…” button on the top right to create the SPG member.
On the resulting page, enter the information shown below to identify the new SPG
Member.
Switch Peer Group Name: Bldg2-3850s (Drop down menu)

71
IP Address: 10.1.222.1 (3850s Wireless MGMT Interface)

When completed as below, click the “Apply” button at the top right.
Confirm the configuration of the SPG member on the resulting page. It should appear as
shown below.
At this point, the 5508 has had New Mobility enabled, a SPG has been configured for the
Building 2 3850, and the 3850 has been added as a SPG member. The required
configuration to support CAPWAP communications has been completed on the 5508
side.

72
Section 3.2 Configure the 3850 as a Mobility Agent
The goal of this section is to configure the 3850 as a Mobility Agent and specify the 5508
as its Mobility controller. This will include specifying its Switch Peer Group and
confirming the CAPWAP tunnel is formed.
Begin by accessing the console of the 3850 for the student consoles page, and logging in
with the credentials shown below.
Username: admin
Begin by configuring the Wireless Management Interface as VLAN as 222.
config t
wireless management int vlan 222
exit
The above command designates the SVI’s IP for VLAN 222 (10.1.222.1) as the source of
CAPWAP tunnels on the 3850. This will act just like the 10.1.21.100 address on the 5508.

73
Now configure the 5508s IP address below as the Mobility controller, automatically
making the 3850 a Mobility Agent.
config t
wireless mobility controller ip 10.1.21.100 (CAPWAP address of the 5508)
Note that specifying the controller automatically designates the 3850 as an MA. Both
VLAN 222 and VLAN 225 SVIs changed state to up. Also note that the 3850 created a
CAPWAP interface known as “Capwap0” which also changed state to up. The most
critical result to note is the last. The mobility member 10.1.21.100 has changed state to
UP. Take a moment to review the configuration. Begin with the below show command.
exit
show wireless mobility summary

74
Note that the “Mobility Role” is Mobility Agent as expected. Look at the status of the
Mobility Controller. Notice that the link status of 10.1.21.100 (5508 WLCs Wireless
Management Interface) is in the “UP : UP” state. The 5508 has disseminated the Switch
Peer Group information, as can be seen by the name at the top and the 3850s address
at the bottom.
***Note: configuration of SPGs is controlled from the MC and passed to MAs via the
CAPWAP tunnel. After specifying the controller on the 3850, all other Mobility
commands will be disabled.
Take a closer look at the newly formed Capwap0 interface on the 3850. Note the source
and destination addresses are the respective Wireless Management Interfaces of the
3850 and 5508.
show interface Capwap 0

75
Also note that on the second line of the display, “Hardware is Capwap”, and that farther
down, “Tunnel type MOBILITY” as expected.
***Note: You may have noticed the message below after the Capwap0 tunnel changed
state to UP. This message means that the 3850 was unable to upload a list of its’ APs to
the 5508 over this new tunnel. This is not a problem. Because the 3850 does not yet
have any APs, the list does not yet exist; hence the message.

76
Section 3.3 Connect an AP to the 3850 Mobility Agent
The focus of this section is to add a switch to the 3850, which is now configured as a
Mobility Agent. After adding the AP, you will review the 5508 Mobility Controller to see
the license usage count and management capabilities.
Begin on the console of the 3850 switch. It can be accessed from Student Consoles web
page if not already open.
Username: admin
Password: cisco123
With the console of the 3850 open, open the console of AP 3 directly to the left of the
3850 on the Student Consoles web page.

77
Enter the commands shown below to bring up the interface of the AP on the 3850
through its console. Keep the APs console window open and in view, to watch the
registration process.
conf t
int g1/0/24
desc to Bldg2-AP VLAN AP3
sw access vlan 222
sw mode access
span portfast
span bpduguard enable
no shut

78
Notice that after completing the configuration, Capwap1 interface changed state to up.
This new CAPWAP tunnel is from the AP to the 3850. Look at the output from AP 3 as it
registers. You should find the AP join 10.1.222.1 and that the DTLS connection was
created successfully.
From the console of the 3850, confirm the AP has registered using the commands
shown below.
exit
exit
show ap summ

79
Above is the AP listed by MAC address and its status is registered. Now look at the new
Capwap 1 interface; specifically the source and destination address.
show int capwap 1

80
The tunnel source is the 3850’s 10.1.222.1 and the destination is 10.1.222.50, which was
the first available address in the DHCP scope created to support APs in the subnet.
***Note: With New Mobility, the AP no longer has to tunnel back to the MC (5508) to
register, and can now terminate on the MA (3850), eliminating the need to backhaul
across the network. Review the diagram below and consider the volume of extraneous
tunnel traffic that is eliminated by this design, if for instance 30 APs connected at this
point.
Return to the GUI of the 5508, and log in to review the changes.
https://10.1.21.100
Username: admin
Password: cisco123

81
Navigate to “Monitor>Access Points>Radios>802.11b/g/n” to view the list of connected

APs. Notice that only the two original APs are listed here.
This however does not mean that the 5508 is unaware of the new AP connected to the
MA. Navigate in the GUI to “Management>Software Activation>License Usage” to view
the current counts.
As can be seen, there are three AP licenses in use. AP 3 connected to the 3850 in
Mobility Agent mode is using the AP license stored on the 5508. Remember that in a
New Mobility deployment that APs connected through MAs will require AP licenses
from the MC, even though they do not appear under “Access Points” in the GUI.

82
Exercise 4: Create the Corp WLAN on the 3850 and Test Roaming
In this exercise, you will configure the corporate WLAN on the 3850, which will be
advertised from AP 3. Once completed, you will test roaming between the three APs,
and discuss the location of PoP and PoA ,as well as the path of the client’s traffic.
Section 4.1 Configure the Corporate WLAN on the 3850
Create the corporate WLAN on the 3850 with a matching SSID of the one configured on
the 5508 currently. Configure security to match, and review the configuration.
Start by accessing the console of the 3850 just as before from the Student Consoles web
page.
Username: admin
Password: cisco123
Config t
Create the WLAN with the command shown below. Then specify the VLAN that the
clients will access from the WLAN.
wlan Conv-Corp-Pod1 1 Conv-Corp-PodX (Where X is YOUR pod number)

client vlan 225
exit
exit

83
Verify the WLAN was created and utilizes the correct VLAN, with the command shown
below.
show wlan all
Now configure the WLAN security features to match that of the 5508s.
config t
wlan Conv-Corp-Pod1
no sec wpa akm dot1x
sec wpa akm psk set-key ascii 0 cisco123
no shut
exit
exit

84
Review the WLAN, using command shown below, and make sure it is active.
Show wlan all

85

86
Note that the WLAN is now enabled. Make sure that WPA2 with AES and PSK are also
enabled. At this point the WLAN is active and ready for testing.

87
Section 4.4 Test Roaming and Review Configurations
In this section, you will test roaming between the two WLANs, and review the PoP and
PoA. You will then review the CAPWAP tunnels, as well as the path of the client traffic.
Begin testing, by accessing PC2 through the student portal, and logging in.
Password: cisco123
Confirm from the bottom right of the desktop that PC2 is still connected to the correct
Corporate SSID.
Open a CMD prompt, and verify the DHCP obtained IP address on PC2. This is the
quickest way to tell from the client which Mobility Agent holds the clients Point of
Presence. The client should still be attached to the 5508 and therefore in the 10.1.25.0
network. Confirm this.

88
Now that you have confirmed the Point of Presence of the client, access the 5508 WLC
and confirm that one of its APs is the Point of Attachment. On PC1,
access https://10.1.21.100 and log in with the credentials shown below.
Username: admin
From the first page under “Monitor” in the bottom right is a list of “Top WLANs”. Make
sure that the corporate WLAN has 1 client as shown above before continuing.

89
Still on PC1, open the console of the 3750 core switch from the Student Consoles web
page. Log in with the credentials below.
Username: admin
Before forcing the roam, start a streaming ping from the desktop of PC2, and keep an
eye on it during the roam.
ping 10.1.255.1 -t
In order to force a roam in the lab, you must power off the two APs registered with the
5508. Access the console of the 3750 core switch, and shutdown the ports connected to
the APs.
config t
int range fa1/0/23 – 24
shut

90
Quickly return to the desktop of PC2, and make sure the roam was successful. Notice
that only one or two pings were lost.
Still on PC2, check the address of the client with the command shown below. Notice
that although the client has roamed to a completely different subnet, it still maintains
its original address.
ipconfig
Take a moment to review the layer three diagrams below.

91
At this moment, PC2 is connected to AP 3 on the left. This is now the Point of
attachment for the client. But with this New Mobility architecture, the client still
appears (Point of Presence) to be in the Corporate Wireless VLAN on the other side of
the network. The 3850 has used a CAPWAP tunnel to send the client traffic to the 5508
to deploy. This means that PC2s user is undisrupted.
From the console of the 3850, review the client data for PC2 and the CAPWAP tunnels.
show wireless client summary
show capwap summary

92
Notice that there is now a CAPWAP data tunnel for the new client.
Take a look at the DTLS connection with the command below.
show wireless dtls connections
Enter the following command to see the origin of the client.
show wcdb database all

93
Take a close look at the “Mob” at the far right. The client is listed as “FOREIGN” because
it was obtained via a roam and still has its old IP address.
Copy the mac address from the last display, and use it to enter the command shown
below. This command is an excellent source of information.
Show wireless client mac XXXX.XXXX.XXXX detail (X is MAC of client)

94
Take note of the “Mobility State” which is Foreign, the “Anchor IP” which is the 5508s
10.1.21.100 address, and the “Move Count” which is one.
Now force the client to roam back to the 5508. In order to do this, first bring the two
APs on the 3750 that connect to the 5508 back online. Then once they reappear in the
5508s GUI, close the port on the 3850 connecting to AP3.

95
From the console of the 3750, enter the commands shown below.
config t
no shut
Confirm that the two APs again associate with the 5508 WLC. In the GUI, navigate to
“MONITOR>Access Points>Radios>802.11b/g/n” to confirm the association. It may take
a few moments, so be patient.
Once the APs have associated, you can now disconnect AP3 from the 3850 forcing the
roam, but before doing so, make sure to start a streaming ping on PC2, and keep an eye
on the roam as it happens.
From the command line of PC2, enter the following command.

96
ping 10.1.225.1 –t
Now from the console of the 3850, remove AP3 with the commands below.
config t
int g1/0/24
shut
exit
exit
Notice that on PC2 few if any of the Pings were lost.
Return to the 5508 GUI, and confirm the client has connected. Navigate in the GUI to
“MONITOR>Clients” to view it.

97
At this point, the client has roamed from the 5508 to the 3850 and back, without being
disconnected and requiring a change of address. Now test the roam in the other
direction, with the Point of Attachment & Point of Presence beginning on the 3850.
Now disconnect PC2 from the Corporate WLAN, and clear it from the 5508 database.

98
Once PC2 has been disconnected, clear it from the client list in the 5508 WLC. Navigate
in the GUI to “MONITOR>Clients”, and scroll to the left of the page. Hover over the blue
button shown below, and click “Remove” in the appearing list.
Click “OK” in the resulting window, to remove the client from the database.

99
Now that the client has been removed, test a roam in the other direction. To do this,
begin by bringing back up the AP connected to the 3850. From the console of the 3850,
enter the following commands.
config t
int g1/0/24
no shut
exit
exit
While AP3 takes a few moments to associate with the 3850, disconnect AP1 and AP2
that are associated with the 5508. By disconnecting all but the intended starting point,
you guarantee that PC2 will associate with the 3850 when it is reconnected.
Access the console of the 3750 and disconnect APs 1 & 2 with the following commands.
config t
shut
exit
exit

100
At this point, confirm that AP3 associated with the 3850, using the command below on
the console of the 3850. (This may take a few moments.)
show ap summary
Return to PC2, and connect to the corporate WLAN, which is now only offered from AP3
on the 3850.

101
Make sure that PC2 connects successfully by hovering over the wireless icon on the task
bar.
After a few moments, the Corporate WLAN will appear as “No Internet access” ,as
shown below.
Attempt to access www.google.com from the Firefox shortcut on the left of the desktop.
PC2 is unable to access the internet when connected to the corporate WLAN on AP3
through the 3850. Now check the DHCP settings PC2 received with the following
command in the CMD prompt, using the shortcut at the top of the desktop.

102
ipconfg
PC2 has received an address from the DHCP scope as expected; including an IP address
in the 10.1.225.0/24 network, a default gateway of 10.1.225.1, and a domain name of
example.com.
Test network connectivity from the open CMD prompt on PC2. Enter the pings to
addresses shown below, in order of proximity to PC2, starting with the closest.
Beforehand, take a look at the layer three diagrams below, to get an idea of the data
path.

103
ping 10.1.225.1 (Default Gateway)

ping 10.1.255.2 (Loopback0 on 3850)
ping 10.1.101.2 (3850 side of L3 Handoff)
ping 10.1.101.1 (3750 side of L3 Handoff)
As you can see, all three addresses on the 3850 could be pinged successfully, but the
3750 side of the L3 Handoff link could not be reached. This link is known functional, so
the problem is that PC2 can pass traffic to the 3850, but not through it. Why?

104
Q4.1: Why can PC2 not pass traffic through the 3850?
The answer is on the next page.

105
The reason that PC2 cannot reach the rest of the network is the result of the 3850. The
3850 is built on the IOS-XE platform. One of the major changes with this new platform is
in the routing table. The 3850 now has two routing tables, as opposed to one. The 3850
has one routing table for itself and the traffic it sources. This is why the previous roam
was successful. Think about how the traffic was processed in the previous roam. The
3850 took the traffic from PC2 and encapsulated it in a CAPWAP tunnel to be sent to the
5508. Now that PC2 is accessing the 3850 without roaming, it is accessing the network
directly. The 3850, because it runs IOS-XE, has a second routing table for traffic that
passes through the device. This routing table does not become active until entering an
“ip routing” command from configuration terminal mode. Access the 3850 to have a
closer look at this.
From the console of the 3850, enter the below shown command.
show ip route
Here you can see that there is an active routing table on the 3850, with routes for the
network. Now take a look at the configuration.
Enter the command below in order to view the running configuration on the 3850.
show run

106

107

108

109
After carefully looking through the running configuration on the 3850, think about what
is missing from a typical switch configuration. The answer is “IP routing”.
Enter the commands shown below from the console of the 3850.
config t
ip routing
exit
Now return to PC2, and see if this had any effect on the connectivity problems. From the
CMD prompt on PC2, retry the last ping that failed to the 3750 side of the L3 Handoff.

110
ping 10.1.101.1
The pings should now be successful. This is a CRITICAL point to be made when
implementing the 3850. Take a moment to review. The 3850 has two different routing
tables, and unlike previous IOS devices, even without “IP routing” configured, the device
will display a routing table. Always MAKE SURE that “IP routing” is enabled, because
displaying the routing table or testing pings will not prove it to be on.
Now that an important lesson has been learned when working with the 3850, confirm
that PC2 can access www.google.com using Firefox.

111
At this point, PC2 is connected to the corporate WLAN through the 3850. Now, before a
roam can be forced to the 5508, you must re-associate its’ two APs.
Access the console of the 3750 core switch, and enter the following commands to bring
up AP1 and AP2.
config t
int range fa1/0/23 -24
no shut
exit
exit
Access the GUI of the 5508, and confirm that the APs associate. In the GUI of the 5508,
navigate to “MONITOR>Access Points>Radios>802.11b/g/n”, and make sure the two
APs appear in the list.

112
Once the APs are associated with the 5508, return to the console of the 3850. From the
console of the 3850, enter the following commands to disconnect AP3, and force PC2
“the client” to roam to the 5508.
config t
int g1/0/24
shut
exit
exit
Return to PC2, and confirm it is still connected to the corporate WLAN. Hover over the
wireless icon and make sure it appears as shown below.
Open Firefox and test access to www.cisco.com to confirm internet connectivity after
the roam.

113
Now open the CMD prompt from the desktop shortcut, and enter the command below
to check its DHCP settings.
ipconfig

114
Note that just as before, the client (post roam) has kept its original IP address and
settings. The 5508 is now tunneling the client data back to the 3850. Return to the GUI
of the 5508 WLC, and take a look at the client count.
In the GUI of the 5508 WLC, navigate to “MONITOR>Clients”, and notice there is now
one client (PC2) listed.
Click on the blue link under “Client MAC Addr” to see more details about PC2.

115
From the resulting details page, notice the client’s IP address is in the 10.1.225.0/24
space, which is located only on the 3850. Also note that the “Mobility Role” is “Foreign”,
just as was seen in the CLI of the 3850 after the first roam. Note that the “Mobility peer
IP Address” (The MA or MC that originated the client) is 10.1.222.1 AKA the 3850.
This all confirms the roam was successful. Now take a look at the 3850. Return to the
console of the 3850, and enter the command shown below.
show wireless mobility statistic

116
Notice that the counter for “Anchored clients” has a count of 1. This is PC2 ,which has its
PoP (Point of Presence) on the 3850.
Show wcdb database all
Notice that the client does still show up in the 3850, but under “MOB” is specified
“ANCHOR”, as again this is the PoP and the 5508 is the clients PoA (Point of
Attachment).
Also see that the counter for “Anchor Clients” is 1.
This is the key to understanding Mobility. When clients roam, the device holding the PoP
is seen as the “Anchor” or anchoring it on the network, and the device holding the PoA
is seen as the “Foreign” or remote device, enabling its connection utilizing CAPWAP
tunnels.
Please keep in mind that the New Mobility on the 5508 WLC uses CAPWAP for all
tunnels, and that legacy EoIP is disabled. Remember that the 3850 uses IOS-XE code,
and performs in very much the same way as legacy IOS, with the exception of the
routing tables. We hope that you enjoyed the lab and picked up at least a few new
things along the way. The Solutions Readiness Engineering crew on team MIDAS thanks
you for investing your time!
Congratulations. This completes the lab! 

117
Appendix A: Answers to Exercise Questions
Q1.1: What are the two ways the 3850 can be deployed to support wireless and what
are the licensing requirements for each? The 3850 can be deployed as a Mobility
Agent, or a Mobility Controller with a license level of IPbase, or IPservices. In order for a
3850 acting as an MC to utilize APs it must have an AP or group of AP licenses. A 3850
acting as an MA inherits its AP licenses from its respective MC.
Q1.2: When acting as both the Mobility Agent and Controller, what is the maximum
number of APs and clients that a 3850 or stack of 3850s can support? A single 3850, or
stack of 3850s can support up to 50 APs and 2000 clients.
Q3.1: What did clicking this check box and rebooting the 5508 do? Reloading the 5508
will enable the “New Mobility” feature set. This will enable the 5508 to form CAPWAP
tunnels but will disable its ability to use EoIP tunnels for connections. This gives the
5508 the ability to interface with the 3850 and other New Mobility devices.
Q3.2: Can the 5508 WLC with New Mobility enable act as both an MA and MC
simultaneously? Yes. The 5508 can support both directly connected APs and act as the
Mobility Controller (MC) for other Mobility Agents (MA) simultaneously.
Q3.3: Upon upgrading to New Mobility what protocol or protocols are used for
tunnels? After the 5508 WLC has been upgraded to “New Mobility” it will utilize
CAPWAP tunnels exclusively.
Q3.4: For an inter-SPG roam of a client, would the PoA move to the MC? No. There is
now need to backhaul the client traffic through the MC. MAs in an Switch Peer Group
(SPG) from a Full-Mesh of tunnels to support this type of roam.
Q4.1: Why can PC2 not pass traffic through the 3850? The 3850 is an IOS-XE device.
This means there are now two routing tables. One is for traffic sourced from the 3850
and the other if for traffic passing through the 3850. The routing table for traffic
traversing the 3850 requires an “ip routing” command to activate. This command is
missing from the configuration at present.

118
Appendix B: Final Device Configurations
Cisco 3750 Final Device Configuration
!
! Last configuration change at 01:57:08 edt Sat Jun 8 2013 by admin
! NVRAM config last updated at 02:35:41 edt Sat Jun 8 2013 by admin
!
version 15.0
no service pad
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
no service password-encryption
!
hostname Core-Sw1
!
boot-start-marker
boot-end-marker
!
!
enable secret 5 $1$dQz/$TCIXcTm1dcbwFH85f.D981
!
username admin privilege 15 password 0 cisco123
no aaa new-model
clock timezone est -5 0
clock summer-time edt recurring
switch 1 provision ws-c3750v2-24ps
system mtu routing 1500
ip routing
!
ip dhcp excluded-address 10.1.25.1 10.1.25.110
ip dhcp excluded-address 10.1.22.1 10.1.22.110
!
ip dhcp pool 5508-BASE
network 1.1.1.0 255.255.255.0
option 66 ip 1.1.1.1
default-router 1.1.1.1
!
ip dhcp pool Wired-Clients
network 10.1.10.0 255.255.255.0
dns-server 10.1.20.254
!
ip dhcp pool Corp-Wireless
network 10.1.25.0 255.255.255.0
!
ip dhcp pool ap-pool
network 10.1.22.0 255.255.255.0
domain-name example.com
!
!
!
!
crypto pki trustpoint TP-self-signed-184428032
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-184428032
revocation-check none
rsakeypair TP-self-signed-184428032
!
!
crypto pki certificate chain TP-self-signed-184428032

119
certificate self-signed 01 nvram:IOS-Self-Sig#4.cer

!
!
!
errdisable recovery cause bpduguard
errdisable recovery interval 60
!
spanning-tree mode rapid-pvst
spanning-tree extend system-id
spanning-tree vlan 1-199 priority 4096
!
vlan internal allocation policy ascending
!
!
!
!
!
!
!
interface Loopback0
ip address 10.1.255.1 255.255.255.255
!
interface FastEthernet1/0/1
description Internet Uplink
switchport access vlan 100
switchport mode access
switchport nonegotiate
spanning-tree portfast
spanning-tree bpduguard enable
!
description PC1 Jumpbox
!
description DC Server
!
!
description WLC5508 Trunk to Core
switchport trunk encapsulation dot1q
switchport trunk native vlan 2
switchport trunk allowed vlan 2,21,25
switchport mode trunk
spanning-tree portfast trunk
!
!
!
description L3 link to Bldg2 3850 Switch
no switchport
ip address 10.1.101.1 255.255.255.0
!
!

120
!
!
!
!
!
!
!
!
!
!
!
!
!
description AP1
!
description AP2
!
interface GigabitEthernet1/0/1
shutdown
!
!
interface Vlan1
description Keep this interface down!!
no ip address
shutdown
!
interface Vlan2
description description USED FOR AUTO-INSTALL of 5508 BASE CONFIG AT BOOT
ip address 1.1.1.1 255.255.255.0
!
interface Vlan10
description Wired Client SVI
ip address 10.1.10.1 255.255.255.0
!
interface Vlan20
description Servers SVI
ip address 10.1.20.1 255.255.255.0
!
interface Vlan21
description Wireless Managemnet VLAN - CAPWAP from AP to WLC
ip address 10.1.21.1 255.255.255.0
!
interface Vlan22
description Building 1 APs
ip address 10.1.22.1 255.255.255.0

121
!
interface Vlan25
description Corp-Wireless SVI
ip address 10.1.25.1 255.255.255.0
!
interface Vlan100
description Internet Edge SVI
ip address 10.1.100.1 255.255.255.0
!
ip http server
ip http secure-server
!
!
ip route 0.0.0.0 0.0.0.0 10.1.100.254
ip route 10.1.222.0 255.255.255.0 10.1.101.2
ip route 10.1.225.0 255.255.255.0 10.1.101.2
ip route 10.1.255.2 255.255.255.255 10.1.101.2
!
logging esm config
logging trap debugging
logging 10.1.20.254
!
tftp-server flash:ciscowlc.cfg
!
!
line con 0
exec-timeout 30 0
logging synchronous
login local
line vty 0 4
exec-timeout 60 0
privilege level 15
logging synchronous
login local
line vty 5 15
exec-timeout 60 0
privilege level 15
logging synchronous
login local
!
end
!
!
!
!
version 15.0
parser cache
parser config partition
parser command serializer
parser maximum utilization 100
parser maximum latency 40
downward-compatible-config 15.0
no service log backtrace
no service config
no service exec-callback
no service nagle
service slave-log
no service slave-coredump
no service pad to-xot
no service pad from-xot

122
no service pad cmns

no service pad
no service telnet-zeroidle
no service tcp-keepalives-in
no service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
service password-encryption
no service exec-wait
no service linenumber
no service internal
no service scripting
service compress-config
service prompt config
no service old-slip-prompts
no service pt-vty-logging
no service disable-ip-fast-frag
no service sequence-numbers
service counters max age 0
service dhcp
no service call-home
!
hostname 3850-Bldg2
!
boot-start-marker
boot config
boot-end-marker
!
shell processing
!
vrf definition Mgmt-vrf
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
no logging discriminator
logging exception 4096
no logging count
no logging message-counter log
no logging message-counter debug
logging message-counter syslog
no logging snmp-authfail
no logging userinfo
logging buginf
logging queue-limit 100
logging queue-limit esm 0
logging queue-limit trap 100
logging buffered 16384 debugging
logging reload message-limit 1000 notifications
no logging persistent
logging rate-limit console 10 except errors
logging console guaranteed
logging console debugging
logging monitor debugging
logging cns-events informational
logging on
!
username admin privilege 15 secret 4 1wLgDhbOLsU0GdsP0B9e5YU2KA7gxZujqOLWf0j48q6
!
no software auto-upgrade source url
!
no software auto-upgrade enable
!
spd extended-headroom 10
spd headroom 100
spd enable
no aaa new-model

123
ipc holdq threshold upper 20

ipc holdq threshold lower 1
ipc header-cache permanent 6000 100
ipc buffers max-free 1200
ipc buffers min-free 400
ipc buffers permanent 1200
clock timezone edt -5 0
clock summer-time edt recurring 60
clock save interval 0
clock initialize nvram
cef table consistency-check IPv4 type lc-detect count 71 period 60
cef table consistency-check IPv4 type scan-lc-rp count 71 period 60
cef table consistency-check IPv4 type scan-rp-lc count 71 period 60
cef table consistency-check IPv4 type scan-rib-ios count 1000 period 60
cef table consistency-check IPv4 type scan-ios-rib count 1000 period 60
no cef table consistency-check IPv4 data-checking
no cef table consistency-check IPv4 error-message
cef table consistency-check IPv4 auto-repair delay 10 holddown 300
cef table consistency-check IPv6 type lc-detect count 26 period 60
cef table consistency-check IPv6 type scan-lc-rp count 26 period 60
cef table consistency-check IPv6 type scan-rp-lc count 26 period 60
cef table consistency-check IPv6 type scan-ios-rib count 1000 period 60
no cef table consistency-check IPv6 data-checking
no cef table consistency-check IPv6 error-message
cef table consistency-check IPv6 auto-repair delay 10 holddown 300
cef table vrf tree IPv4 type MTRIE short-mask-protection 4 stride-pattern 8-8-8-8 hardware-api-notify off
cef table vrf tree IPv6 type RTREE
cef table output-chain build favor default
cef table rate-monitor-period 5
cef table download recursive-dependents priority 1
cef table download default-route priority 1
cef table download connected-route priority 2
cef table download receive-route priority 2
cef table download route-in-vrf priority 3
cef table download catch-all priority 4
switch 1 provision ws-c3850-24p
authentication mac-move deny
no authentication logging verbose
authentication command bounce-port ignore
authentication command disable-port ignore
authentication critical recovery delay 100
nmsp notification interval attachment 30
nmsp notification interval location 30
nmsp notification interval rssi clients 2
nmsp notification interval rssi rogues ap 2
nmsp notification interval rssi rogues client 2
nmsp notification interval rssi rfid 2
passwd encryption on
passwd key obfuscate
no cisp enable
ip subnet-zero
ip source-route
ip routing protocol purge interface
ip routing
ip arp poll queue 1000
ip arp poll rate 1000
no ip arp proxy disable
ip arp gleaning tftp
ip arp gleaning udp
ip arp incomplete retry 20
ip arp incomplete entries 5000
ip arp incomplete enable
ip arp inspection log-buffer entries 32
ip arp inspection log-buffer logs 5 interval 1
ip sticky-arp
ip gratuitous-arps non-local
ip icmp redirect subnet
ip spd queue max-threshold 74
ip spd queue min-threshold 73
ip verify drop-rate compute window 300

124
ip verify drop-rate compute interval 30

ip verify drop-rate notify hold-down 300
ip cef optimize neighbor resolution
no ip cef accounting
ip cef load-sharing algorithm universal 5D88263C
!
ip sap cache-timeout 1440
ip multicast route-limit 2147483647
ip mfib
no ip domain-lookup
ip domain-name example.com
ip dhcp-client broadcast-flag
ip dhcp-client default-router distance 254
ip device tracking probe count 3
ip device tracking probe interval 30
ip device tracking probe use-svi
ip device tracking probe delay 0
ip device tracking
ip accounting-threshold 512
ip admission ratelimit 100
no ip admission watch-list enable
ip admission watch-list expiry-time 10
ip admission max-login-attempts 5
ip admission init-state-time 2
no ip admission auth-proxy-audit
ip admission inactivity-timer 60
ip admission absolute-timer 0
ip dhcp relay information policy replace
ip dhcp relay information check
ip dhcp relay override giaddr link-selection
ip dhcp use class
ip dhcp use vrf connected
ip dhcp binding cleanup interval 120
no ip dhcp snooping information option allow-untrusted
ip dhcp snooping information option
no ip dhcp snooping database
ip dhcp snooping database write-delay 300
ip dhcp snooping database timeout 300
ip dhcp snooping verify mac-address
ip dhcp snooping verify no-relay-agent-address
no ip dhcp snooping wireless bootp-broadcast enable
ip dhcp conflict logging
ip dhcp ping packets 2
ip dhcp ping timeout 500
!
!
ip igmp ssm-map query dns
ip igmp snooping report-suppression
no ip igmp snooping tcn query solicit
ip igmp snooping tcn flood query count 2
ip igmp snooping robustness-variable 2
ip igmp snooping last-member-query-count 2
ip igmp snooping last-member-query-interval 1000
ip igmp snooping querier version 2
ip igmp snooping querier query-interval 60
ip igmp snooping querier max-response-time 10
ip igmp snooping querier timer expiry 120
ip igmp snooping querier tcn query count 2
ip igmp snooping querier tcn query interval 10
no ip igmp snooping querier
ip igmp snooping
ipv6 hop-limit 64
ipv6 icmp error-interval 100 10
ipv6 nd cache expire 14400
ipv6 nd nsf convergence 120
ipv6 nd nsf throttle 512
ipv6 nd nsf dad suppress 60
ipv6 nd nud limit 256
ipv6 nd reachable-time 0
ipv6 nd ns-interval 0

125
ipv6 nd resolution data limit 16

ipv6 nd dad time 0
ipv6 nsf-converge 10
ipv6 traffic interface-statistics
ipv6 cef optimize neighbor resolution
ipv6 cef load-sharing algorithm universal 5D88263C
ipv6 mld snooping listener-message-suppression
no ipv6 mld snooping tcn query solicit
ipv6 mld snooping tcn flood query count 2
ipv6 mld snooping robustness-variable 2
ipv6 mld snooping last-listener-query-count 2
ipv6 mld snooping last-listener-query-interval 1000
no ipv6 mld snooping
no ipv6 snooping logging packet drop
ipv6 dhcp ping packets 0
ipv6 dhcp server join all-dhcp-servers
ntp max-associations 100
qos wireless-default-untrust
call-home
alert-group configuration
alert-group diagnostic
alert-group environment
alert-group inventory
alert-group syslog
rate-limit 20
profile "CiscoTAC-1"
no active
destination preferred-msg-format xml
destination message-size-limit 3145728
no destination transport-method http
destination transport-method email
destination address email callhome@cisco.com
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
subscribe-to-alert-group diagnostic severity minor
subscribe-to-alert-group environment severity warning
subscribe-to-alert-group inventory
subscribe-to-alert-group syslog severity major pattern ".*"
subscribe-to-alert-group configuration periodic monthly 1 9:15
subscribe-to-alert-group inventory periodic monthly 1 9:00
no mab request format attribute 32
no mab logging verbose
xdr multicast-group mode individual
xdr multicast-group internal split threshold 7000
xdr multicast-group internal issu-slots-split
setup express
scripting tcl low-memory 110662324
!
crypto pki trustpoint TP-self-signed-0
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-0
revocation-check none
rsakeypair TP-self-signed-0
!
!
crypto pki certificate chain TP-self-signed-0
certificate self-signed 01
3082023C 308201A5 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
28312630 24060355 0403131D 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 30301E17 0D313330 35333131 38313734 335A170D 32303031
30313030 30303030 5A302831 26302406 03550403 131D494F 532D5365 6C662D53
69676E65 642D4365 72746966 69636174 652D3030 819F300D 06092A86 4886F70D
01010105 0003818D 00308189 02818100 E2770992 B13D1BF9 7A0B85B7 3BE593B0
37516D89 9FF86CCE 4E970A72 DC1C5389 61B18040 D45AB68F B01EE431 36001E91
E87743FF 45D97796 D7B6B556 6DF93FD0 52FB5297 E88E2E50 44915B2D A49B4D35
D18F8417 BE1C2B59 4C687E63 1D1F53BE 052F2110 71C739D1 21442EBF CAB8FB91
15A490F6 66EE7DD8 062E20D9 F161A013 02030100 01A37630 74300F06 03551D13
0101FF04 05300301 01FF3021 0603551D 11041A30 18821633 3835302D 426C6467
322E6578 616D706C 652E636F 6D301F06 03551D23 04183016 8014CD99 F695A7C6
F6428B1D FF0408CE C29DFAEA 3A39301D 0603551D 0E041604 14CD99F6 95A7C6F6
428B1DFF 0408CEC2 9DFAEA3A 39300D06 092A8648 86F70D01 01040500 03818100

126
38791A6A 5C17E715 E33AF792 5136E11A 9AE8D010 CEA6248E B89C72DC A8BB26A3

D976F577 87FF4F6C CFBE16CE 392DFBB7 5CD972E7 89019CBA A5DAEF8C 23F84939
C49DDDEB 220F88AC 01A50C7F 81DF3739 10CE508C E9223C53 BBD4C757 BA18B2FA
50705B4A 52100A40 07B9FB37 1B6578AE 34366A43 F49E9D85 F7FA6571 AB5CFF3A
quit
dot1x system-auth-control
no dot1x logging verbose
dot1x guest-vlan supplicant
dot1x supplicant force-multicast
dot1x supplicant controlled transient
no dot1x critical eapol
system fnf bytes-count layer2
location algorithm rssi-average
location expiry calibrating-client 5
location expiry client 5
location expiry rogue-aps 5
location expiry tags 5
location notify-threshold client 0
location notify-threshold rogue-aps 0
location notify-threshold tags 5
location rssi-half-life calibrating-client 0
location rssi-half-life client 0
location rssi-half-life rogue-aps 0
location rssi-half-life tags 0
location rfid timeout 1200
no location rfid vendor-name pango
location prefer static weight 0
location prefer lldp-med weight 2
location prefer cdp weight 1
!
!
!
!
!
errdisable recovery cause bpduguard
errdisable recovery interval 60
diagnostic event-log size 500
diagnostic bootup level minimal
no diagnostic monitor syslog
diagnostic monitor interval switch 1 test DiagThermalTest 00:01:30 0 0 cardindex 4
diagnostic monitor interval switch 1 test DiagFanTest 00:01:30 0 0 cardindex 4
diagnostic monitor interval switch 1 test DiagScratchRegisterTest 00:01:30 0 0 cardindex 4
diagnostic monitor threshold switch 1 test DiagThermalTest failure count 5 cardindex 4
diagnostic monitor threshold switch 1 test DiagFanTest failure count 5 cardindex 4
diagnostic monitor threshold switch 1 test DiagScratchRegisterTest failure count 5 cardindex 4
diagnostic monitor switch 1 test DiagThermalTest cardindex 4
diagnostic monitor switch 1 test DiagFanTest cardindex 4
diagnostic monitor switch 1 test DiagScratchRegisterTest cardindex 4
port-channel load-balance src-mac
lacp system-priority 32768
memory check-interval 60
memory statistics history table 24
memory validate-checksum 60
memory lite
memory chunk siblings threshold 10000
identity policy webauth-global-inactive
inactivity-timer 3600
file verify auto
!
spanning-tree mode rapid-pvst
no spanning-tree dispute
spanning-tree transmit hold-count 6
no spanning-tree optimize bpdu transmission
spanning-tree queue maxsize 12288
spanning-tree etherchannel guard misconfig
spanning-tree extend system-id
spanning-tree uplinkfast max-update-rate 137
spanning-tree pathcost method short
spanning-tree vlan 200-299 priority 4096
issu set rollback-timer 2700

127
hw-switch switch 1 logging onboard message level 3

!
redundancy
mode sso
no policy config-sync lbl prc reload
no policy config-sync bulk prc reload
!
process-max-time 50
!
!
no ip finger
no ip tcp selective-ack
no ip tcp timestamp
ip tcp delayed-ack
ip tcp chunk-size 0
ip tcp mss 0
ip tcp window-size 4128
ip tcp queuemax 20
ip tcp synwait-time 30
no ip tcp path-mtu-discovery
ip tcp async-mobility server
ip telnet tos C0
ip telnet quiet
ip telnet hidden hostnames
ip telnet hidden addresses
no ip telnet comport enable
ip telnet comport flow level 16
ip telnet comport receive window 4128
ip telnet comport disconnect delay 0
ip ftp passive
no ip tftp claim-netascii
ip ssh time-out 120
ip ssh authentication-retries 3
ip ssh break-string ~break
ip ssh dh min size 1024
!
class-map match-any non-client-nrt-class
match non-client-nrt
!
policy-map port_child_policy
class non-client-nrt-class
bandwidth remaining ratio 10
!
buffers element permanent 500
buffers element minimum 100
buffers fastswitching permanent 384
buffers fastswitching max-free 1024
buffers fastswitching min-free 128
buffers fastswitching initial 0
buffers small permanent 600
buffers small max-free 1250
buffers small min-free 100
buffers small initial 0
buffers middle permanent 450
buffers middle max-free 1000
buffers middle min-free 50
buffers middle initial 0
buffers big permanent 450
buffers big max-free 1500
buffers big min-free 25
buffers big initial 0
buffers verybig permanent 10
buffers verybig max-free 300
buffers verybig min-free 0
buffers verybig initial 0
buffers large permanent 10
buffers large max-free 30
buffers large min-free 0
buffers large initial 0
buffers huge permanent 5

128
buffers huge max-free 13

buffers huge min-free 0
buffers huge size 18024
buffers huge initial 0
no buffers tune automatic
!
!
!
!
!
interface Loopback0
description Primary Loopback
ip address 10.1.255.2 255.255.255.255
ip redirects
ip unreachables
ip proxy-arp
ip mtu 1500
ip load-sharing per-destination
ip cef accounting non-recursive internal
ip pim dr-priority 1
ip pim query-interval 30
ip mfib forwarding input
ip mfib forwarding output
ip mfib cef input
ip mfib cef output
ip route-cache cef
ip route-cache
ip split-horizon
ip igmp last-member-query-interval 1000
ip igmp last-member-query-count 2
ip igmp query-max-response-time 10
ip igmp version 2
ip igmp query-interval 60
ip igmp tcn query count 2
ip igmp tcn query interval 10
load-interval 300
ipv6 nd prefix framed-ipv6-prefix
ipv6 nd nud igp
ipv6 nd ra lifetime 1800
ipv6 nd ra interval 200
ipv6 redirects
ipv6 unreachables
snmp trap link-status
no arp arpa
arp timeout 0
spanning-tree port-priority 128
spanning-tree cost 0
hold-queue 75 in
hold-queue 0 out
no bgp-policy accounting input
no bgp-policy accounting output
no bgp-policy accounting input source
no bgp-policy accounting output source
no bgp-policy source ip-prec-map
no bgp-policy source ip-qos-map
no bgp-policy destination ip-prec-map
no bgp-policy destination ip-qos-map
!
interface GigabitEthernet0/0
vrf forwarding Mgmt-vrf
no ip address
ip redirects
ip unreachables
ip proxy-arp
ip mtu 1500

129
ip mfib cef input
ip mfib cef output
ip route-cache cef
ip route-cache
ip split-horizon
ip igmp version 2
load-interval 300
negotiation auto
ipv6 nd dad attempts 1
ipv6 nd nud igp
ipv6 redirects
ipv6 unreachables
cdp tlv location
cdp tlv server-location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 75 in
hold-queue 0 out
!
description L3 link to Bldg1 Core Switch
no switchport
no ip arp inspection trust
ip arp inspection limit rate 15 burst interval 1
ip arp inspection limit rate 15
ip address 10.1.101.2 255.255.255.0
ip redirects
ip unreachables
ip proxy-arp
ip mtu 1500
ip mfib cef input
ip mfib cef output
ip route-cache cef
ip route-cache
ip split-horizon

130
ip igmp version 2
load-interval 300
power inline port priority low
power inline auto max 30000
power inline static
power inline never
power inline police
ipv6 nd nud igp
ipv6 redirects
ipv6 unreachables
no mab
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 75 in
hold-queue 0 out
!
switchport
switchport private-vlan trunk encapsulation dot1q
switchport private-vlan trunk native vlan tag
no switchport nonegotiate
no switchport protected
no switchport block multicast
no switchport block unicast
switchport port-security maximum 1
no switchport port-security
switchport port-security aging time 0
switchport port-security violation shutdown
switchport port-security aging type absolute
switchport port-security limit rate invalid-source-mac 10
no switchport port-security mac-address sticky
no switchport port-security aging static
load-interval 300
power inline static
power inline never
power inline police
ipv6 mld snooping tcn flood
snmp trap mac-notification change added
snmp trap mac-notification change removed
cdp tlv location

131

cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
ip igmp snooping tcn flood
!
switchport
load-interval 300
power inline static
power inline never
power inline police
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
!
switchport

132

load-interval 300
power inline static
power inline never
power inline police
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
!
switchport
load-interval 300
power inline static

133
power inline never

power inline police
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
!
switchport
load-interval 300
power inline static
power inline never
power inline police
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out

134

!
switchport
load-interval 300
power inline static
power inline never
power inline police
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
!
switchport

135

load-interval 300
power inline static
power inline never
power inline police
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
!
switchport
load-interval 300
power inline static
power inline never
power inline police
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in

136
hold-queue 0 out
!
switchport
load-interval 300
power inline static
power inline never
power inline police
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
!
switchport

137
load-interval 300
power inline static
power inline never
power inline police
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
!
switchport
load-interval 300
power inline static
power inline never
power inline police
cdp tlv location

138

cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
!
switchport
load-interval 300
power inline static
power inline never
power inline police
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
!
switchport

139

load-interval 300
power inline static
power inline never
power inline police
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
!
switchport
load-interval 300
power inline static

140
power inline never

power inline police
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
!
switchport
load-interval 300
power inline static
power inline never
power inline police
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out

141

!
switchport
load-interval 300
power inline static
power inline never
power inline police
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
!
switchport

142

load-interval 300
power inline static
power inline never
power inline police
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
!
switchport
load-interval 300
power inline static
power inline never
power inline police
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in

143
hold-queue 0 out
!
switchport
load-interval 300
power inline static
power inline never
power inline police
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
!
switchport

144
load-interval 300
power inline static
power inline never
power inline police
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
!
switchport
load-interval 300
power inline static
power inline never
power inline police
cdp tlv location

145

cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
!
switchport
load-interval 300
power inline static
power inline never
power inline police
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
!
description to Bldg2-AP VLAN AP3
switchport

146

switchport port-security maximum 65535 vlan
switchport port-security maximum 65535 vlan access
switchport port-security maximum 65535 vlan voice
load-interval 300
shutdown
power inline static
power inline never
power inline police
no mab
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
spanning-tree portfast disable
spanning-tree portfast trunk
hold-queue 2000 in
hold-queue 0 out
!
switchport

147

load-interval 300
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
!
switchport
load-interval 300
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out

148

!
switchport
load-interval 300
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
!
switchport
load-interval 300

149

cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
!
interface TenGigabitEthernet1/1/1
switchport
load-interval 300
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
!
switchport

150

load-interval 300
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
!
switchport
load-interval 300
cdp tlv location
cdp tlv app
arp arpa

151
arp timeout 14400

hold-queue 2000 in
hold-queue 0 out
!
switchport
load-interval 300
cdp tlv location
cdp tlv app
arp arpa
arp timeout 14400
hold-queue 2000 in
hold-queue 0 out
!
interface Vlan1
no ip address
ip redirects
ip unreachables
ip proxy-arp
ip mtu 1500

152

ip mfib cef input
ip mfib cef output
ip route-cache cef
ip route-cache
ip split-horizon
ip igmp version 2
load-interval 300
shutdown
ipv6 nd nud igp
ipv6 redirects
ipv6 unreachables
arp arpa
arp timeout 14400
hold-queue 75 in
hold-queue 0 out
!
interface Vlan222
description Bldg2 AP VLAN
ip address 10.1.222.1 255.255.255.0
ip helper-address global 10.1.20.254
ip redirects
ip unreachables
ip proxy-arp
ip mtu 1500
ip mfib cef input
ip mfib cef output
ip route-cache cef
ip route-cache
ip split-horizon
ip igmp version 2
load-interval 300

153

ipv6 nd nud igp
ipv6 redirects
ipv6 unreachables
arp arpa
arp timeout 14400
hold-queue 75 in
hold-queue 0 out
!
interface Vlan225
description Bldg2 Corp Wireless Users
ip address 10.1.225.1 255.255.255.0
ip helper-address global 10.1.20.254
ip redirects
ip unreachables
ip proxy-arp
ip mtu 1500
ip mfib cef input
ip mfib cef output
ip route-cache cef
ip route-cache
ip split-horizon
ip igmp version 2
load-interval 300
ipv6 nd nud igp
ipv6 redirects
ipv6 unreachables
arp arpa
arp timeout 14400
hold-queue 75 in
hold-queue 0 out

154

!
ip classless
ip nsf-converge 10
ip pim dm-fallback
ip pim autorp
ip pim bidir-offer-interval 100 msec
ip pim bidir-offer-limit 3
ip pim v1-rp-reachability
ip pim log-neighbor-changes
ip msdp timer 30
no ip http server
ip http port 80
ip http authentication enable
ip http secure-server
ip http secure-port 443
ip http secure-active-session-modules all
ip http max-connections 50
ip http timeout-policy idle 180 life 180 requests 25
ip http active-session-modules all
ip http client cache memory pool 100
ip http client cache memory file 2
ip http client cache ager interval 5
ip http client connection timeout 10
ip http client connection retry 1
ip http client connection idle timeout 30
ip http client response timeout 30
ip http path webui:/express
ip route static adjust-time 60
ip route static inter-vrf
ip route 0.0.0.0 0.0.0.0 10.1.101.1
!
!
ip prefix-list sequence-number
ip sla low-memory 100814309
logging history size 1
logging history warnings
logging trap informational
logging delimiter tcp
no logging origin-id
logging facility local7
no logging source-interface
logging server-arp
cdp run
cdp tlv location
cdp tlv app
!
ipv6 prefix-list sequence-number
ipv6 neighbor binding reachable-lifetime 300 stale-lifetime 86400 down-lifetime 86400
no ipv6 neighbor binding logging
snmp-server inform retries 3 timeout 15 pending 25
snmp mib flowmon alarmhistorysize 500
snmp mib notification-log globalsize 500
snmp mib notification-log globalageout 15
tacacs-server cache expiry 24 enforce hours
ipv6 access-list log-update threshold 2147483647
!
vstack join-window mode auto
alias exec h help
alias exec lo logout
alias exec p ping
alias exec r resume
alias exec s show
alias exec u undebug
alias exec un undebug
alias exec w where
no configuration mode exclusive
default-value exec-character-bits 7

155
default-value special-character-bits 7
default-value data-character-bits 8
!
line con 0
exec-timeout 60 0
timeout login response 30
privilege level 15
no media-type rj45 switch 1
logging synchronous
login local
modem answer-timeout 15
modem dtr-delay 5
data-character-bits 8
exec-character-bits 7
special-character-bits 7
length 24
width 80
history size 20
monitor
escape-character soft DEFAULT
escape-character DEFAULT
databits 8
stopbits 1
start-character 17
stop-character 19
speed 9600
line aux 0
exec-timeout 10 0
privilege level 1
modem dtr-delay 5
length 24
width 80
history size 20
monitor
databits 8
stopbits 1
start-character 17
stop-character 19
speed 9600
line vty 0 4
exec-timeout 60 0
privilege level 15
logging synchronous
login local
modem dtr-delay 5
length 24
width 80
history size 20
monitor

156

start-character 17
stop-character 19
line vty 5 15
exec-timeout 60 0
privilege level 15
logging synchronous
login local
modem dtr-delay 5
length 24
width 80
history size 20
monitor
start-character 17
stop-character 19
!
monitor event-trace stacktrace
monitor event-trace timestamps datetime msec
scheduler max-task-time 2000
scheduler process-watchdog normal
ntp maxdistance 8
ntp broadcastdelay 0
cns id hostname
cns id hostname event
cns id hostname image
cns image retry 60
wsma id hostname
mac address-table notification change interval 1
mac address-table notification change history-size 1
mac address-table notification change
netconf max-sessions 4
netconf lock-time 10
netconf max-message 0
event manager scheduler script thread class default number 1
event manager scheduler applet thread class default number 32
event manager scheduler call-home thread class default number 32
event manager scheduler shell thread class default number 1
event manager scheduler shell thread class Z number 1
event manager history size events 10
event manager history size traps 10
event manager detector rpc max-sessions 4
event manager detector routing bootup-delay 0
wireless mobility controller ip 10.1.21.100 public-ip 10.1.21.100
wireless mobility group keepalive count 3
wireless mobility group keepalive interval 10
wireless mobility group name default
wireless mobility oracle ip 0.0.0.0
wireless mobility load-balance threshold 1000
wireless mobility dscp 0
wireless mobility multicast ip 0.0.0.0
wireless management interface Vlan222
wireless wps rogue ap rldp retries 1
wireless wps rogue ap timeout 1200
wireless wps rogue auto-contain level 1
wireless wps rogue detection report-interval 10
wireless wps ap-authentication threshold 1
wireless linktest frame-size 500
wireless linktest number-of-frames 20
wireless load-balancing denial 3
wireless load-balancing window 5

157
wireless client band-select client-rssi -80

wireless client band-select cycle-count 2
wireless client band-select cycle-threshold 200
wireless client band-select expire dual-band 60
wireless client band-select expire suppression 20
wireless client max-user-login 0
wireless client timers auth-timeout 10
wireless client user-timeout 300
wireless peer-blocking forward-upstream
wireless probe limit 2 500
wireless rf-network default
wireless security dot1x eapol-key retries 2
wireless security dot1x eapol-key timeout 1000
wireless security dot1x group-key interval 3600
wireless security dot1x identity-request retries 2
wireless security dot1x identity-request timeout 30
wireless security dot1x radius call-station-id ipaddress
wireless security dot1x request retries 2
wireless security dot1x request timeout 30
wireless security dot1x wep key index 0
wireless wgb client-macfilter
wireless media-stream message Email
wireless media-stream message Notes
wireless media-stream message URL
wireless media-stream message phone
wlan Conv-Corp-Pod1 1 Conv-Corp-Pod1
accounting-list
channel-scan defer-time 100
client association limit 0
client vlan 225
dtim dot11 24ghz 1
dtim dot11 5ghz 1
exclusionlist timeout 60
ip access-group web none
ip access-group none
ip dhcp server 0.0.0.0
ipv6 traffic-filter web none
ipv6 traffic-filter none
mac-filtering
radio all
no security wpa akm dot1x
security wpa akm psk set-key ascii 0 cisco123
security dot1x authentication-list
security dot1x encryption 104
security static-wep-key authentication open
security tkip hold-down 60
security web-auth authentication-list
security web-auth parameter-map
service-policy client input unknown
service-policy client output unknown
service-policy input unknown
service-policy output unknown
session-timeout 0
no shutdown
ap capwap retransmit count 5
ap capwap retransmit interval 3
ap cdp interface ethernet 0
ap dot1x username password clear
ap ethernet duplex auto speed auto
ap mgmtuser username password clear secret clear
ap reporting-period 120
ap static-ip domain default
ap static-ip name-server 0.0.0.0
ap syslog host 255.255.255.255
ap syslog level information
ap tftp-downgrade 0.0.0.0 default
no ap auth-list ap-policy authorize-ap
no ap auth-list ap-policy authorize-lsc-ap
ap auth-list ap-policy mic
no ap auth-list ap-policy ssc

158
ap capwap timers discovery-timeout 10

ap capwap timers heartbeat-timeout 30
no ap dot11 24ghz edca-parameters custom-voice
no ap dot11 24ghz edca-parameters optimized-video-voice
no ap dot11 24ghz edca-parameters optimized-voice
no ap dot11 24ghz edca-parameters svp-voice
no ap dot11 24ghz edca-parameters wmm-default
ap dot11 24ghz edca-parameters wmm-default
no ap dot11 5ghz edca-parameters custom-voice
no ap dot11 5ghz edca-parameters optimized-video-voice
no ap dot11 5ghz edca-parameters optimized-voice
no ap dot11 5ghz edca-parameters svp-voice
no ap dot11 5ghz edca-parameters wmm-default
ap dot11 5ghz edca-parameters wmm-default
ap country US
ap dot1x max-sessions 0
ap dot11 24ghz rrm group-mode auto
ap dot11 24ghz rrm channel dca anchor-time 0
ap dot11 24ghz rrm channel dca global auto
no ap dot11 24ghz rrm channel dca global once
ap dot11 24ghz rrm channel dca interval 0
ap dot11 24ghz rrm channel dca min-metric -95
ap dot11 24ghz rrm channel dca sensitivity medium
ap dot11 24ghz rrm channel dca 1
ap dot11 24ghz rrm channel foreign
no ap dot11 24ghz rrm channel load
ap dot11 24ghz rrm channel noise
ap dot11 24ghz rrm coverage
ap dot11 24ghz rrm coverage data fail-percentage 50
ap dot11 24ghz rrm coverage data packet-count 50
ap dot11 24ghz rrm coverage data rssi-threshold -80
ap dot11 24ghz rrm coverage exception global 25
ap dot11 24ghz rrm coverage level global 3
ap dot11 24ghz rrm coverage voice fail-percentage 50
ap dot11 24ghz rrm coverage voice packet-count 100
ap dot11 24ghz rrm coverage voice rssi-threshold -80
no ap dot11 24ghz rrm logging channel
no ap dot11 24ghz rrm logging coverage
no ap dot11 24ghz rrm logging foreign
no ap dot11 24ghz rrm logging load
no ap dot11 24ghz rrm logging noise
no ap dot11 24ghz rrm logging performance
no ap dot11 24ghz rrm logging txpower
ap dot11 24ghz rrm monitor
ap dot11 24ghz rrm monitor channel-list country
ap dot11 24ghz rrm monitor coverage 180
ap dot11 24ghz rrm monitor load 60
ap dot11 24ghz rrm monitor noise 180
ap dot11 24ghz rrm monitor signal 60
ap dot11 24ghz rrm ndp-type transparent
ap dot11 24ghz rrm profile clients 12
ap dot11 24ghz rrm profile foreign 10
ap dot11 24ghz rrm profile noise -70
ap dot11 24ghz rrm profile throughput 1000000
ap dot11 24ghz rrm profile utilization 80
ap dot11 24ghz rrm txpower auto
ap dot11 24ghz rrm txpower max 30
ap dot11 24ghz rrm txpower min -10
ap dot11 24ghz rrm channel cleanair-event sensitivity low
ap dot11 24ghz cleanair alarm air-quality
ap dot11 24ghz cleanair alarm air-quality threshold 10
ap dot11 24ghz cleanair alarm device
no ap dot11 24ghz cleanair alarm device bt-discovery
no ap dot11 24ghz cleanair alarm device bt-link
no ap dot11 24ghz cleanair alarm device canopy
no ap dot11 24ghz cleanair alarm device cont-tx
no ap dot11 24ghz cleanair alarm device dect-like
no ap dot11 24ghz cleanair alarm device fh

159
ap dot11 24ghz cleanair alarm device inv

no ap dot11 24ghz cleanair alarm device jammer
no ap dot11 24ghz cleanair alarm device mw-oven
ap dot11 24ghz cleanair alarm device nonstd
no ap dot11 24ghz cleanair alarm device superag
no ap dot11 24ghz cleanair alarm device tdd-tx
no ap dot11 24ghz cleanair alarm device video
no ap dot11 24ghz cleanair alarm device wimax-fixed
no ap dot11 24ghz cleanair alarm device wimax-mobile
no ap dot11 24ghz cleanair alarm device xbox
no ap dot11 24ghz cleanair alarm device zigbee
ap dot11 24ghz cleanair device bt-discovery
ap dot11 24ghz cleanair device bt-link
ap dot11 24ghz cleanair device canopy
ap dot11 24ghz cleanair device cont-tx
ap dot11 24ghz cleanair device dect-like
ap dot11 24ghz cleanair device fh
ap dot11 24ghz cleanair device inv
ap dot11 24ghz cleanair device jammer
ap dot11 24ghz cleanair device mw-oven
ap dot11 24ghz cleanair device nonstd
ap dot11 24ghz cleanair device report
ap dot11 24ghz cleanair device superag
ap dot11 24ghz cleanair device tdd-tx
ap dot11 24ghz cleanair device video
ap dot11 24ghz cleanair device wimax-fixed
ap dot11 24ghz cleanair device wimax-mobile
ap dot11 24ghz cleanair device xbox
ap dot11 24ghz cleanair device zigbee
ap dot11 24ghz rrm tpc-threshold -70
ap dot11 24ghz rrm txpower 1
ap dot11 24ghz beaconperiod 100
ap dot11 24ghz cac media-stream multicast-direct max-retry-percent 80
ap dot11 24ghz cac media-stream multicast-direct min-client-rate six
ap dot11 24ghz cac multimedia max-bandwidth 85
ap dot11 24ghz media-stream multicast-direct client-maximum 0
ap dot11 24ghz media-stream multicast-direct radio-maximum 0
ap dot11 24ghz cac video max-bandwidth 0
ap dot11 24ghz cac video roam-bandwidth 0
ap dot11 24ghz cac voice max-bandwidth 75
ap dot11 24ghz cac voice load-based
ap dot11 24ghz cac voice roam-bandwidth 6
ap dot11 24ghz cac voice sip bandwidth 64 sample-interval 20
ap dot11 24ghz cac voice stream-size 84000 max-streams 2
ap dot11 24ghz cac voice tspec-inactivity-timeout ignore
ap dot11 24ghz dot11g
ap dot11 24ghz dot11n a-mpdu tx priority 0
ap dot11 24ghz dot11n a-msdu tx priority 0
no ap dot11 24ghz dot11n guard-interval any
ap dot11 24ghz dot11n guard-interval any
no ap dot11 24ghz dot11n guard-interval long
ap dot11 24ghz dot11n rifs rx
no ap dot11 24ghz exp-bwreq
ap dot11 24ghz fragmentation 2346
ap dot11 24ghz preamble short
ap dot11 24ghz rate RATE_1M mandatory
ap dot11 24ghz rate RATE_5_5M mandatory
ap dot11 24ghz rate RATE_6M supported

160

no ap dot11 24ghz shutdown
no ap dot11 24ghz tsm
ap dot11 24ghz world-mode
ap dot11 5ghz rrm group-mode auto
no ap dot11 5ghz rrm ccx location-measurement
ap dot11 5ghz rrm channel dca anchor-time 0
ap dot11 5ghz rrm channel dca chan-width-11n 20
ap dot11 5ghz rrm channel dca global auto
no ap dot11 5ghz rrm channel dca global once
ap dot11 5ghz rrm channel dca interval 0
ap dot11 5ghz rrm channel dca min-metric -95
ap dot11 5ghz rrm channel dca sensitivity medium
ap dot11 5ghz rrm channel foreign
no ap dot11 5ghz rrm channel load
ap dot11 5ghz rrm channel noise
ap dot11 5ghz rrm coverage
ap dot11 5ghz rrm coverage data fail-percentage 50
ap dot11 5ghz rrm coverage data packet-count 50
ap dot11 5ghz rrm coverage data rssi-threshold -80
ap dot11 5ghz rrm coverage exception global 25
ap dot11 5ghz rrm coverage level global 3
ap dot11 5ghz rrm coverage voice fail-percentage 50
ap dot11 5ghz rrm coverage voice packet-count 100
ap dot11 5ghz rrm coverage voice rssi-threshold -80
no ap dot11 5ghz rrm logging channel
no ap dot11 5ghz rrm logging foreign
no ap dot11 5ghz rrm logging load
no ap dot11 5ghz rrm logging performance
no ap dot11 5ghz rrm logging txpower
ap dot11 5ghz rrm monitor
ap dot11 5ghz rrm monitor channel-list country
ap dot11 5ghz rrm monitor coverage 180
ap dot11 5ghz rrm monitor load 60
ap dot11 5ghz rrm monitor noise 180
ap dot11 5ghz rrm monitor signal 60
ap dot11 5ghz rrm ndp-type transparent
ap dot11 5ghz rrm profile clients 12
ap dot11 5ghz rrm profile foreign 10
ap dot11 5ghz rrm profile noise -70
ap dot11 5ghz rrm profile throughput 1000000
ap dot11 5ghz rrm profile utilization 80
ap dot11 5ghz rrm txpower auto
ap dot11 5ghz rrm txpower max 30
ap dot11 5ghz rrm txpower min -10
ap dot11 5ghz rrm channel cleanair-event sensitivity low
ap dot11 5ghz cleanair alarm air-quality
ap dot11 5ghz cleanair alarm air-quality threshold 10
ap dot11 5ghz cleanair alarm device
no ap dot11 5ghz cleanair alarm device canopy
no ap dot11 5ghz cleanair alarm device cont-tx
no ap dot11 5ghz cleanair alarm device dect-like
ap dot11 5ghz cleanair alarm device inv
no ap dot11 5ghz cleanair alarm device jammer
ap dot11 5ghz cleanair alarm device nonstd

161
no ap dot11 5ghz cleanair alarm device radar

no ap dot11 5ghz cleanair alarm device superag
no ap dot11 5ghz cleanair alarm device tdd-tx
no ap dot11 5ghz cleanair alarm device video
no ap dot11 5ghz cleanair alarm device wimax-fixed
no ap dot11 5ghz cleanair alarm device wimax-mobile
ap dot11 5ghz cleanair device canopy
ap dot11 5ghz cleanair device cont-tx
ap dot11 5ghz cleanair device dect-like
ap dot11 5ghz cleanair device inv
ap dot11 5ghz cleanair device jammer
ap dot11 5ghz cleanair device nonstd
ap dot11 5ghz cleanair device radar
ap dot11 5ghz cleanair device report
ap dot11 5ghz cleanair device superag
ap dot11 5ghz cleanair device tdd-tx
ap dot11 5ghz cleanair device video
ap dot11 5ghz cleanair device wimax-fixed
ap dot11 5ghz cleanair device wimax-mobile
ap dot11 5ghz rrm tpc-threshold -70
ap dot11 5ghz rrm txpower 1
ap dot11 5ghz beaconperiod 100
ap dot11 5ghz cac media-stream multicast-direct max-retry-percent 80
ap dot11 5ghz cac media-stream multicast-direct min-client-rate six
ap dot11 5ghz cac multimedia max-bandwidth 85
ap dot11 5ghz media-stream multicast-direct client-maximum 0
ap dot11 5ghz media-stream multicast-direct radio-maximum 0
ap dot11 5ghz cac video load-based
ap dot11 5ghz cac video max-bandwidth 0
ap dot11 5ghz cac video roam-bandwidth 0
ap dot11 5ghz cac voice max-bandwidth 75
ap dot11 5ghz cac voice load-based
ap dot11 5ghz cac voice roam-bandwidth 6
ap dot11 5ghz cac voice sip bandwidth 64 sample-interval 20
ap dot11 5ghz cac voice stream-size 84000 max-streams 2
ap dot11 5ghz cac voice tspec-inactivity-timeout ignore
ap dot11 5ghz dot11n
no ap dot11 5ghz dot11n guard-interval any
ap dot11 5ghz dot11n guard-interval any
no ap dot11 5ghz dot11n guard-interval long
ap dot11 5ghz dot11n rifs rx
no ap dot11 5ghz exp-bwreq
ap dot11 5ghz fragmentation 2346
no ap dot11 5ghz shutdown
no ap dot11 5ghz tsm
ap dot11 5ghz world-mode
no ap dot11 5ghz channelswitch mode 0
ap dot11 5ghz power-constraint 0
ap group default-group
description
end

162
System Inventory
NAME: "Chassis" , DESCR: "Cisco 5500 Series Wireless LAN Controller"
PID: AIR-CT5508-K9, VID: V01, SN: FCW1452L0CU
Burned-in MAC Address............................ C4:71:FE:97:86:E0

Power Supply 1................................... Present, OK
Power Supply 2................................... Absent
Maximum number of APs supported.................. 12
System Information
Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 7.3.112.0
Bootloader Version............................... 1.0.1
Field Recovery Image Version..................... 6.0.182.0
Firmware Version................................. FPGA 1.3, Env 1.6, USB console 1.27
Build Type....................................... DATA + WPS
System Name...................................... WLC5508

System Location..................................
System Contact...................................
System ObjectID.................................. 1.3.6.1.4.1.9.1.1069
Redundancy Mode.................................. Disabled
IP Address....................................... 10.1.21.100
Last Reset....................................... Software reset
System Up Time................................... 8 days 13 hrs 14 mins 55 secs
System Timezone Location.........................
Configured Country............................... US - United States

Operating Environment............................ Commercial (0 to 40 C)
Internal Temp Alarm Limits....................... 0 to 65 C
Internal Temperature............................. +39 C
External Temperature............................. +23 C
Fan Status....................................... OK
State of 802.11b Network......................... Enabled

State of 802.11a Network......................... Enabled
Number of WLANs.................................. 1
Number of Active Clients......................... 0
Burned-in MAC Address............................ C4:71:FE:97:86:E0
Power Supply 1................................... Present, OK
Power Supply 2................................... Absent
Maximum number of APs supported.................. 12
AP Bundle Information
Primary AP Image Size

---------------- ----
ap1g2 10596
ap3g1 11088
ap3g2 10968
ap801 7092
ap802 8436
c1130 5072
c1140 9288
c1250 6784
c1520 7852
c602i 3736
Secondary AP Image Size

------------------ ----
ap1g1 10776
ap1g2 10108
ap3g1 10916
ap3g2 12452
ap801 7432
ap802 8828

163
c1130 5084
c1140 9996
c1250 7172
c1520 8276
c602i 3756
Switch Configuration
802.3x Flow Control Mode......................... Disable
FIPS prerequisite features....................... Disabled
secret obfuscation............................... Enabled
Strong Password Check Features:
case-check ...........Enabled
consecutive-check ....Enabled
default-check .......Enabled
username-check ......Enabled
Network Information
RF-Network Name............................. corp
Web Mode.................................... Disable
Secure Web Mode............................. Enable
Secure Web Mode Cipher-Option High.......... Disable
Secure Web Mode Cipher-Option SSLv2......... Disable
Secure Web Mode RC4 Cipher Preference....... Disable
OCSP........................................ Disabled
OCSP responder URL..........................
Secure Shell (ssh).......................... Enable
Telnet...................................... Disable
Ethernet Multicast Forwarding............... Disable
Ethernet Broadcast Forwarding............... Disable
AP Multicast/Broadcast Mode................. Unicast
IGMP snooping............................... Disabled
IGMP timeout................................ 60 seconds
IGMP Query Interval......................... 20 seconds
MLD snooping................................ Disabled
MLD timeout................................. 60 seconds
MLD query interval.......................... 20 seconds
User Idle Timeout........................... 300 seconds
ARP Idle Timeout............................ 300 seconds
Cisco AP Default Master..................... Disable
AP Join Priority............................ Disable
Mgmt Via Wireless Interface................. Disable
Mgmt Via Dynamic Interface.................. Disable
Bridge MAC filter Config.................... Enable
Bridge Security Mode........................ EAP
Mesh Full Sector DFS........................ Enable
AP Fallback ................................ Enable
Web Auth Redirect Ports .................... 80
Web Auth Proxy Redirect ................... Disable
Web Auth Captive-Bypass .................. Disable
Web Auth Secure Web ....................... Enable
Fast SSID Change ........................... Disabled
AP Discovery - NAT IP Only ................. Enabled
IP/MAC Addr Binding Check .................. Enabled
CCX-lite status ............................ Disable
oeap-600 dual-rlan-ports ................... Disable
oeap-600 local-network ..................... Enable
Port Summary
STP Admin Physical Physical Link Link
Pr Type Stat Mode Mode Status Status Trap POE SFPType
-- ------- ---- ------- ---------- ---------- ------ ------- ------- ----------
1 Normal Forw Enable Auto 1000 Full Up Enable N/A 1000BaseTX
2 Normal Disa Enable Auto Auto Down Enable N/A 1000BaseTX
3 Normal Disa Enable Auto Auto Down Enable N/A Not Present
AP Summary
Number of APs.................................... 2

164
Global AP User Name.............................. Not Configured

Global AP Dot1x User Name........................ Not Configured
AP Name Slots AP Model Ethernet MAC Location Port Country Priority

------------------ ----- -------------------- ----------------- ---------------- ---- ------- ------
APfc99.4744.1d73 1 AIR-CAP3501I-A-K9 fc:99:47:44:1d:73 default location LAG US 1
APfc99.475f.6225 1 AIR-CAP3501I-A-K9 fc:99:47:5f:62:25 default location LAG US 1
AP Tcp-Mss-Adjust Info
AP Name TCP State MSS Size
------------------ -------- -------
APfc99.4744.1d73 disabled -
APfc99.475f.6225 disabled -
AP Location
Total Number of AP Groups........................ 0
Site Name........................................ default-group

Site Description................................. <none>
AP Operating Class............................... Not-configured
RF Profile
----------
2.4 GHz band..................................... <none>
5 GHz band....................................... <none>
WLAN ID Interface Network Admission Control Radio Policy

------- ----------- -------------------------- ------------
1 corp Disabled None
AP Name Slots AP Model Ethernet MAC Location Port Country Priority

------------------ ----- ------------------- ----------------- ---------------- ---- ------- --------
APfc99.4744.1d73 1 AIR-CAP3501I-A-K9 fc:99:47:44:1d:73 default location LAG US 1
APfc99.475f.6225 1 AIR-CAP3501I-A-K9 fc:99:47:5f:62:25 default location LAG US 1
RF Profile
Number of RF Profiles............................ 0
Out Of Box State................................. Disabled
RF Profile Name Band Description Applied

------------------------- ------- ------------------------- -------
AP Config
Cisco AP Identifier.............................. 6
Cisco AP Name.................................... APfc99.4744.1d73
Country code..................................... US - United States
Regulatory Domain allowed by Country............. 802.11bg:-A 802.11a:-A
AP Country code.................................. US - United States
AP Regulatory Domain............................. -A
Switch Port Number .............................. 13
MAC Address...................................... fc:99:47:44:1d:73
IP Address Configuration......................... DHCP
IP Address....................................... 10.1.22.118
IP NetMask....................................... 255.255.255.0
Gateway IP Addr.................................. 10.1.22.1
NAT External IP Address.......................... None
CAPWAP Path MTU.................................. 1485
Telnet State..................................... Disabled
Ssh State........................................ Disabled
Cisco AP Location................................ default location
Cisco AP Group Name.............................. default-group
Primary Cisco Switch Name........................
Primary Cisco Switch IP Address.................. Not Configured
Secondary Cisco Switch Name......................
Secondary Cisco Switch IP Address................ Not Configured
Tertiary Cisco Switch Name.......................
Tertiary Cisco Switch IP Address................. Not Configured
Administrative State ............................ ADMIN_ENABLED

165
Operation State ................................. REGISTERED

Mirroring Mode .................................. Disabled
AP Mode ......................................... Local
Public Safety ................................... Disabled
AP SubMode ...................................... Not Configured
Remote AP Debug ................................. Disabled
Logging trap severity level ..................... informational
Logging syslog facility ......................... kern
S/W Version .................................... 7.3.112.0
Boot Version ................................... 12.4.2.4
Mini IOS Version ................................ 7.3.1.73
Stats Reporting Period .......................... 180
LED State........................................ Enabled
PoE Pre-Standard Switch.......................... Disabled
PoE Power Injector MAC Addr...................... Disabled
Power Type/Mode.................................. Power injector / Normal mode
Number Of Slots.................................. 1
AP Model......................................... AIR-CAP3501I-A-K9
AP Image......................................... C3500-K9W8-M
IOS Version...................................... 15.2(2)JA1$
Reset Button..................................... Enabled
AP Serial Number................................. FTX1642K92U
AP Certificate Type.............................. Manufacture Installed
AP User Mode..................................... AUTOMATIC
AP User Name..................................... Not Configured
AP Dot1x User Mode............................... Not Configured
AP Dot1x User Name............................... Not Configured
Cisco AP system logging host..................... 255.255.255.255
AP Up Time....................................... 4 days, 12 h 38 m 42 s
AP LWAPP Up Time................................. 4 days, 12 h 37 m 26 s
Join Date and Time............................... Sat Jun 8 06:00:01 2013
Join Taken Time.................................. 0 days, 00 h 01 m 15 s
Attributes for Slot 0

Radio Type................................... RADIO_TYPE_80211n-2.4
Administrative State ........................ ADMIN_ENABLED
Operation State ............................. UP
Radio Role .................................. ACCESS
CellId ...................................... 0
Station Configuration
Configuration ............................. AUTOMATIC
Number Of WLANs ........................... 1
Medium Occupancy Limit .................... 100
CFP Period ................................ 4
CFP MaxDuration ........................... 60
BSSID ..................................... 20:3a:07:cb:ed:d0
Operation Rate Set
1000 Kilo Bits........................... MANDATORY
11000 Kilo Bits.......................... MANDATORY
6000 Kilo Bits........................... SUPPORTED
9000 Kilo Bits........................... SUPPORTED
12000 Kilo Bits.......................... SUPPORTED
MCS Set
MCS 0.................................... SUPPORTED
MCS 1.................................... SUPPORTED
MCS 2.................................... SUPPORTED
MCS 3.................................... SUPPORTED
MCS 4.................................... SUPPORTED
MCS 5.................................... SUPPORTED
MCS 6.................................... SUPPORTED
MCS 7.................................... SUPPORTED

166
MCS 8.................................... SUPPORTED

MCS 9.................................... SUPPORTED
MCS 10................................... SUPPORTED
MCS 11................................... SUPPORTED
MCS 12................................... SUPPORTED
MCS 13................................... SUPPORTED
MCS 14................................... SUPPORTED
MCS 15................................... SUPPORTED
MCS 16................................... DISABLED
MCS 17................................... DISABLED
MCS 18................................... DISABLED
MCS 19................................... DISABLED
MCS 20................................... DISABLED
MCS 21................................... DISABLED
MCS 22................................... DISABLED
MCS 23................................... DISABLED
Beacon Period ............................. 100
Fragmentation Threshold ................... 2346
Multi Domain Capability Implemented ....... TRUE
Multi Domain Capability Enabled ........... TRUE
Country String ............................ US
Multi Domain Capability

First Chan Num ............................ 1
Number Of Channels ........................ 11
MAC Operation Parameters

Fragmentation Threshold ................... 2346
Packet Retry Limit ........................ 64
Tx Power
Num Of Supported Power Levels ............. 8
Tx Power Level 1 .......................... 20 dBm
Tx Power Level 8 .......................... -1 dBm
Tx Power Configuration .................... AUTOMATIC
Current Tx Power Level .................... 1
Phy OFDM parameters

Current Channel ........................... 11
Extension Channel ......................... NONE
Channel Width.............................. 20 Mhz
Allowed Channel List....................... 1,2,3,4,5,6,7,8,9,10,11
TI Threshold .............................. -50
Legacy Tx Beamforming Configuration ....... CUSTOMIZED
Legacy Tx Beamforming ..................... ENABLED
Antenna Type............................... INTERNAL_ANTENNA
Internal Antenna Gain (in .5 dBi units).... 8
Diversity.................................. DIVERSITY_ENABLED
802.11n Antennas
A....................................... ENABLED
B....................................... ENABLED
C....................................... ENABLED
Performance Profile Parameters

Interference threshold..................... 10 %
Noise threshold............................ -70 dBm
RF utilization threshold................... 80 %
Data-rate threshold........................ 1000000 bps
Client threshold........................... 12 clients
Coverage SNR threshold..................... 12 dB

167
Coverage exception level................... 25 %

Client minimum exception level............. 3 clients
Rogue Containment Information
Containment Count............................ 0
CleanAir Management Information

CleanAir Capable......................... Yes
CleanAir Management Admin State.......... Enabled
CleanAir Management Operation State...... Down
Rapid Update Mode........................ Off
Spectrum Expert connection............... Enabled
CleanAir NSI Key....................... CEF9759DAE10DC7BAE4D0D1222288B31
Spectrum Expert Connections counter.... 0
CleanAir Sensor State.................... Configured
Radio Extended Configurations

Beacon period.............................. 100 milliseconds
Beacon range............................... AUTO
Multicast buffer........................... AUTO
Multicast data-rate........................ AUTO
RX SOP threshold........................... AUTO
CCA threshold.............................. AUTO
AP does not have the 802.11a radio.

AP Airewave Director Configuration
Number Of Slots.................................. 1
AP Name.......................................... APfc99.4744.1d73
MAC Address...................................... fc:99:47:44:1d:73
Slot ID........................................ 0
Radio Type..................................... RADIO_TYPE_80211b/g
Sub-band Type.................................. All
Noise Information
Noise Profile................................ PASSED
Channel 1.................................... -99 dBm
Channel 2.................................... -98 dBm
Channel 3.................................... -97 dBm
Channel 4.................................... -94 dBm
Channel 5.................................... -100 dBm
Channel 6.................................... -96 dBm
Channel 7.................................... -99 dBm
Channel 8.................................... -93 dBm
Channel 9.................................... -96 dBm
Channel 10................................... -98 dBm
Channel 11................................... -95 dBm
Interference Information
Interference Profile......................... FAILED
Channel 1.................................... -58 dBm @ 34 % busy
Channel 2.................................... -54 dBm @ 33 % busy
Channel 3.................................... -128 dBm @ 0 % busy
Channel 4.................................... -62 dBm @ 1 % busy
Channel 5.................................... -55 dBm @ 10 % busy
Channel 6.................................... -73 dBm @ 26 % busy
Channel 7.................................... -62 dBm @ 7 % busy
Channel 8.................................... -47 dBm @ 1 % busy
Channel 9.................................... -128 dBm @ 0 % busy
Channel 10................................... -58 dBm @ 29 % busy
Channel 11................................... -58 dBm @ 46 % busy
Load Information
Load Profile................................. PASSED
Receive Utilization.......................... 0 %
Transmit Utilization......................... 2 %
Channel Utilization.......................... 88 %
Attached Clients............................. 1 clients
Coverage Information
Coverage Profile............................. PASSED
Failed Clients............................... 0 clients
Client Signal Strengths
RSSI -100 dbm................................ 0 clients
RSSI -92 dbm................................ 0 clients
RSSI -84 dbm................................ 0 clients

168
RSSI -76 dbm................................ 0 clients

RSSI -68 dbm................................ 0 clients
RSSI -60 dbm................................ 0 clients
RSSI -52 dbm................................ 1 clients
Client Signal To Noise Ratios
SNR 0 dB.................................. 0 clients
SNR 5 dB.................................. 0 clients
SNR 10 dB.................................. 0 clients
SNR 15 dB.................................. 0 clients
SNR 20 dB.................................. 0 clients
SNR 25 dB.................................. 0 clients
SNR 30 dB.................................. 0 clients
SNR 35 dB.................................. 0 clients
SNR 40 dB.................................. 0 clients
SNR 45 dB.................................. 1 clients
Nearby APs
AP 20:3a:07:cb:f7:40 slot 0.................. -31 dBm on 1 (10.1.21.100)
Radar Information
Channel Assignment Information
Current Channel Average Energy............... unknown
Previous Channel Average Energy.............. unknown
Channel Change Count......................... 0
Last Channel Change Time..................... Sat Jun 8 06:00:01 2013
Recommended Best Channel..................... 11
RF Parameter Recommendations
Power Level.................................. 1
RTS/CTS Threshold............................ 2347
Fragmentation Threshold...................... 2346
Antenna Pattern.............................. 0
Persistent Interference Devices

Class Type Channel DC (%%) RSSI (dBm) Last Update Time
------------------------- ------- ------ ---------- ------------------------
All third party trademarks are the property of their respective owners.
AP does not have the 802.11a radio.
802.11a Configuration
802.11a Network.................................. Enabled
11nSupport....................................... Enabled
802.11a Low Band........................... Enabled
802.11a Mid Band........................... Enabled
802.11a High Band.......................... Enabled
802.11a Operational Rates
802.11a 6M Rate.............................. Mandatory
802.11a 9M Rate.............................. Supported
802.11a 12M Rate............................. Mandatory
802.11a 18M Rate............................. Supported
802.11a 24M Rate............................. Mandatory
802.11n MCS Settings:
MCS 0........................................ Supported
MCS 1........................................ Supported
MCS 2........................................ Supported
MCS 3........................................ Supported
MCS 4........................................ Supported
MCS 5........................................ Supported
MCS 6........................................ Supported
MCS 7........................................ Supported
MCS 8........................................ Supported
MCS 9........................................ Supported
MCS 10....................................... Supported
MCS 11....................................... Supported
MCS 12....................................... Supported
MCS 13....................................... Supported
MCS 14....................................... Supported
MCS 15....................................... Supported
MCS 16....................................... Supported
MCS 17....................................... Supported
MCS 18....................................... Supported

169
MCS 19....................................... Supported

MCS 20....................................... Supported
MCS 21....................................... Supported
MCS 22....................................... Supported
MCS 23....................................... Supported
802.11n Status:
A-MPDU Tx:
Priority 0............................... Enabled
Priority 1............................... Disabled
Aggregation scheduler.................... Enabled
Realtime Timeout..................... 10
A-MSDU Tx:
Rifs Rx ..................................... Enabled
Guard Interval .............................. Any
Beacon Interval.................................. 100
CF Pollable mandatory............................ Disabled
CF Poll Request mandatory........................ Disabled
CFP Period....................................... 4
CFP Maximum Duration............................. 60
Default Channel.................................. 36
Default Tx Power Level........................... 0
DTPC Status..................................... Enabled
Fragmentation Threshold.......................... 2346
TI Threshold..................................... -50
Legacy Tx Beamforming setting.................... Disabled
Traffic Stream Metrics Status.................... Disabled
Expedited BW Request Status...................... Disabled
World Mode....................................... Enabled
EDCA profile type................................ default-wmm
Voice MAC optimization status.................... Disabled
Call Admission Control (CAC) configuration
Voice AC:
Voice AC - Admission control (ACM)............ Disabled
Voice Stream-Size............................. 84000
Voice Max-Streams............................. 2
Voice max RF bandwidth........................ 75
Voice reserved roaming bandwidth.............. 6
Voice CAC Method ............................. Load-Based
Voice tspec inactivity timeout................ Disabled
CAC SIP-Voice configuration
SIP based CAC ................................ Disabled
SIP Codec Type ............................... CODEC_TYPE_G711
SIP call bandwidth ........................... 64
SIP call bandwith sample-size ................ 20
Video AC:
Video AC - Admission control (ACM)............ Disabled
Video max RF bandwidth........................ Infinite
Video reserved roaming bandwidth.............. 0
Video load-based CAC mode..................... Disabled
Video CAC Method ............................. Static
CAC SIP-Video Configuration
Best-effort AC - Admission control (ACM)...... Disabled
Background AC - Admission control (ACM)....... Disabled
Maximum Number of Clients per AP Radio........... 200
802.11a Advanced Configuration

170
Member RRM Information

AP Name MAC Address Admin Oper Channel TxPower
-------------------------------- ----------------- -------- ----------- ---------- -------------
802.11a Airewave Director Configuration
RF Event and Performance Logging
Channel Update Logging......................... Off
Coverage Profile Logging....................... Off
Foreign Profile Logging........................ Off
Load Profile Logging........................... Off
Noise Profile Logging.......................... Off
Performance Profile Logging.................... Off
TxPower Update Logging......................... Off
Default 802.11a AP performance profiles
802.11a Global Interference threshold.......... 10 %
802.11a Global noise threshold................. -70 dBm
802.11a Global RF utilization threshold........ 80 %
802.11a Global throughput threshold............ 1000000 bps
802.11a Global clients threshold............... 12 clients
Default 802.11a AP monitoring
802.11a Monitor Mode........................... enable
802.11a Monitor Mode for Mesh AP Backhaul...... disable
802.11a Monitor Channels....................... Country channels
802.11a RRM Neighbor Discover Type............. Transparent
802.11a AP Coverage Interval................... 180 seconds
802.11a AP Load Interval....................... 60 seconds
802.11a AP Noise Interval...................... 180 seconds
802.11a AP Signal Strength Interval............ 60 seconds
802.11a AP Neighbor Report Interval............ 180 seconds
802.11a AP Interference Report Interval........ 120 seconds
Leader Automatic Transmit Power Assignment
Transmit Power Assignment Mode................. AUTO
Transmit Power Update Interval................. 600 seconds
Transmit Power Threshold....................... -70 dBm
Transmit Power Neighbor Count.................. 3 APs
Min Transmit Power............................. -10 dBm
Max Transmit Power............................. 30 dBm
Transmit Power Update Contribution............. SNI..
Transmit Power Assignment Leader............... WLC5508 (10.1.21.100)
Last Run....................................... 150 seconds ago
TPC Mode....................................... Version 1
TPCv2 Target RSSI.............................. -67 dBm
TPCv2 VoWLAN Guide RSSI........................ -67.0 dBm
TPCv2 SOP...................................... -85.0 dBm
TPCv2 Default Client Ant Gain.................. 0.0 dBi
TPCv2 Path Loss Decay Factor................... 3.6
TPCv2 Search Intensity......................... 10 Iterations
AP Name Channel TxPower Allowed Power Levels

-------------------------------- ---------- ------------- ------------------------
Coverage Hole Detection
802.11a Coverage Hole Detection Mode........... Enabled
802.11a Coverage Voice Packet Count............ 100 packets
802.11a Coverage Voice Packet Percentage....... 50%
802.11a Coverage Voice RSSI Threshold.......... -80 dBm
802.11a Coverage Data Packet Count............. 50 packets
802.11a Coverage Data Packet Percentage........ 50%
802.11a Coverage Data RSSI Threshold........... -80 dBm
802.11a Global coverage exception level........ 25 %
802.11a Global client minimum exception lev.... 3 clients
Leader Automatic Channel Assignment
Channel Assignment Mode........................ AUTO
Channel Update Interval........................ 600 seconds
Anchor time (Hour of the day).................. 0
Channel Update Contribution.................... SNI..
CleanAir Event-driven RRM option............... Disabled
CleanAir Event-driven RRM sensitivity.......... Medium
Channel Assignment Leader...................... WLC5508 (10.1.21.100)

171
DCA Sensitivity Level.......................... MEDIUM (15 dB)

DCA 802.11n Channel Width...................... 20 MHz
DCA Minimum Energy Limit....................... -95 dBm
Channel Energy Levels
Minimum...................................... unknown
Average...................................... unknown
Maximum...................................... unknown
Channel Dwell Times
Minimum...................................... unknown
Average...................................... unknown
Maximum...................................... unknown
802.11a 5 GHz Auto-RF Channel List
Allowed Channel List......................... 36,40,44,48,52,56,60,64,149,
153,157,161
Unused Channel List.......................... 100,104,108,112,116,132,136,
140,165
802.11a 4.9 GHz Auto-RF Channel List
Allowed Channel List.........................
Unused Channel List.......................... 1,2,3,4,5,6,7,8,9,10,11,12,
13,14,15,16,17,18,19,20,21,
22,23,24,25,26
DCA Outdoor AP option.......................... Disabled
Radio RF Grouping
802.11a Group Mode............................. AUTO
802.11a Group Update Interval.................. 600 seconds
802.11a Group Leader........................... WLC5508 (10.1.21.100)
802.11a Group Member......................... WLC5508 (10.1.21.100)
802.11a Last Run............................... 160 seconds ago
802.11a CleanAir Configuration
Clean Air Solution............................... Disabled

Air Quality Settings:
Air Quality Reporting........................ Enabled
Air Quality Reporting Period (min)........... 15
Air Quality Alarms........................... Enabled
Air Quality Alarm Threshold................ 35
Unclassified Interference.................. Disabled
Unclassified Severity Threshold............ 20
Interference Device Settings:
Interference Device Reporting................ Enabled
Interference Device Types:
TDD Transmitter.......................... Enabled
Jammer................................... Enabled
Continuous Transmitter................... Enabled
DECT-like Phone.......................... Enabled
Video Camera............................. Enabled
WiFi Inverted............................ Enabled
WiFi Invalid Channel..................... Enabled
SuperAG.................................. Enabled
Canopy................................... Enabled
WiMax Mobile............................. Enabled
WiMax Fixed.............................. Enabled
Interference Device Alarms................... Enabled
Interference Device Types Triggering Alarms:
TDD Transmitter.......................... Disabled
Jammer................................... Enabled
Continuous Transmitter................... Disabled
DECT-like Phone.......................... Disabled
Video Camera............................. Disabled
SuperAG.................................. Disabled
Canopy................................... Disabled
WiMax Mobile............................. Disabled
WiMax Fixed.............................. Disabled
Additional Clean Air Settings:
CleanAir ED-RRM State........................ Disabled
CleanAir ED-RRM Sensitivity.................. Medium
CleanAir ED-RRM Custom Threshold............. 50
CleanAir Persistent Devices state............ Disabled

172
CleanAir Persistent Device Propagation....... Disabled
802.11a CleanAir AirQuality Summary

AQ = Air Quality
DFS = Dynamic Frequency Selection
AP Name Channel Avg AQ Min AQ Interferers DFS

------------------ ------- ------ ------ ----------- ---
802.11b Configuration
802.11b Network.................................. Enabled
11gSupport....................................... Enabled
11nSupport....................................... Enabled
802.11b/g Operational Rates
802.11b/g 1M Rate............................ Mandatory
802.11b/g 2M Rate............................ Mandatory
802.11b/g 5.5M Rate.......................... Mandatory
802.11b/g 11M Rate........................... Mandatory
802.11g 6M Rate.............................. Supported
802.11g 9M Rate.............................. Supported
802.11g 12M Rate............................. Supported
802.11n MCS Settings:
MCS 0........................................ Supported
MCS 1........................................ Supported
MCS 2........................................ Supported
MCS 3........................................ Supported
MCS 4........................................ Supported
MCS 5........................................ Supported
MCS 6........................................ Supported
MCS 7........................................ Supported
MCS 8........................................ Supported
MCS 9........................................ Supported
MCS 10....................................... Supported
MCS 11....................................... Supported
MCS 12....................................... Supported
MCS 13....................................... Supported
MCS 14....................................... Supported
MCS 15....................................... Supported
MCS 16....................................... Supported
MCS 17....................................... Supported
MCS 18....................................... Supported
MCS 19....................................... Supported
MCS 20....................................... Supported
MCS 21....................................... Supported
MCS 22....................................... Supported
MCS 23....................................... Supported
802.11n Status:
A-MPDU Tx:
Aggregation scheduler.................... Enabled
Realtime Timeout..................... 10
A-MSDU Tx:

173

Rifs Rx ..................................... Enabled
Guard Interval .............................. Any
Beacon Interval.................................. 100
CF Pollable mode................................. Disabled
CF Poll Request mandatory........................ Disabled
CFP Period....................................... 4
CFP Maximum Duration............................. 60
Default Channel.................................. 1
Default Tx Power Level........................... 0
DTPC Status..................................... Enabled
Call Admission Limit ........................... 105
G711 CU Quantum ................................. 15
ED Threshold..................................... -50
Fragmentation Threshold.......................... 2346
PBCC mandatory................................... Disabled
RTS Threshold.................................... 2347
Short Preamble mandatory......................... Enabled
Short Retry Limit................................ 7
Legacy Tx Beamforming setting.................... Disabled
Traffic Stream Metrics Status.................... Disabled
Expedited BW Request Status...................... Disabled
World Mode....................................... Enabled
Faster Carrier Tracking Loop..................... Disabled
EDCA profile type................................ default-wmm
Voice MAC optimization status.................... Disabled
Call Admission Control (CAC) configuration
Voice AC - Admission control (ACM)............ Disabled
Voice Stream-Size............................. 84000
Voice Max-Streams............................. 2
Voice max RF bandwidth........................ 75
Voice reserved roaming bandwidth.............. 6
Voice CAC Method.............................. Load-Based
Voice tspec inactivity timeout................ Disabled
CAC SIP-Voice configuration
SIP Codec Type ............................... CODEC_TYPE_G711
SIP call bandwidth: .......................... 64
SIP call bandwidth sample-size ............... 20
Video AC - Admission control (ACM)............ Disabled
Video max RF bandwidth........................ Infinite
Video reserved roaming bandwidth.............. 0
Video load-based CAC mode..................... Disabled
Video CAC Method ............................. Static
CAC SIP-Video configuration
Best-effort AC - Admission control (ACM)...... Disabled
Background AC - Admission control (ACM)....... Disabled
Maximum Number of Clients per AP................. 200
802.11b Advanced Configuration
Member RRM Information
AP Name MAC Address Admin Oper Channel TxPower
-------------------------------- ----------------- -------- ----------- ---------- -------------
APfc99.4744.1d73 20:3a:07:cb:ed:d0 ENABLED UP 11* *1/8 (20 dBm)
APfc99.475f.6225 20:3a:07:cb:f7:40 ENABLED UP 1* *1/8 (20 dBm)
802.11b Airewave Director Configuration
RF Event and Performance Logging
Channel Update Logging......................... Off
Coverage Profile Logging....................... Off
Foreign Profile Logging........................ Off
Load Profile Logging........................... Off
Noise Profile Logging.......................... Off
Performance Profile Logging.................... Off
Transmit Power Update Logging.................. Off
Default 802.11b AP performance profiles
802.11b Global Interference threshold.......... 10 %
802.11b Global noise threshold................. -70 dBm
802.11b Global RF utilization threshold........ 80 %
802.11b Global throughput threshold............ 1000000 bps
802.11b Global clients threshold............... 12 clients

174
Default 802.11b AP monitoring

802.11b Monitor Mode........................... enable
802.11b Monitor Channels....................... Country channels
802.11b RRM Neighbor Discovery Type............ Transparent
802.11b AP Coverage Interval................... 180 seconds
802.11b AP Load Interval....................... 60 seconds
802.11b AP Noise Interval...................... 180 seconds
802.11b AP Signal Strength Interval............ 60 seconds
802.11b AP Neighbor Report Interval............ 180 seconds
802.11b AP Interference Report Interval........ 120 seconds
Leader Automatic Transmit Power Assignment
Transmit Power Assignment Mode................. AUTO
Transmit Power Update Interval................. 600 seconds
Transmit Power Threshold....................... -70 dBm
Transmit Power Neighbor Count.................. 3 APs
Min Transmit Power............................. -10 dBm
Max Transmit Power............................. 30 dBm
Transmit Power Update Contribution............. SNI..
Transmit Power Assignment Leader............... WLC5508 (10.1.21.100)
TPC Mode....................................... Version 1
TPCv2 Target RSSI.............................. -67 dBm
TPCv2 VoWLAN Guide RSSI........................ -67.0 dBm
TPCv2 SOP...................................... -85.0 dBm
TPCv2 Default Client Ant Gain.................. 0.0 dBi
TPCv2 Path Loss Decay Factor................... 3.6
TPCv2 Search Intensity......................... 10 Iterations
AP Name Channel TxPower Allowed Power Levels

-------------------------------- ---------- ------------- ------------------------
APfc99.4744.1d73 *11 *1/8 (20 dBm) [20/17/14/11/8/5/2/-1]
APfc99.475f.6225 *1 *1/8 (20 dBm) [20/17/14/11/8/5/2/-1]
Coverage Hole Detection
802.11b Coverage Hole Detection Mode........... Enabled
802.11b Coverage Voice Packet Count............ 100 packets
802.11b Coverage Voice Packet Percentage....... 50%
802.11b Coverage Voice RSSI Threshold.......... -80 dBm
802.11b Coverage Data Packet Count............. 50 packets
802.11b Coverage Data Packet Percentage........ 50%
802.11b Coverage Data RSSI Threshold........... -80 dBm
802.11b Global coverage exception level........ 25 %
802.11b Global client minimum exception lev.... 3 clients
Leader Automatic Channel Assignment
Channel Assignment Mode........................ AUTO
Channel Update Interval........................ 600 seconds
Anchor time (Hour of the day).................. 0
Channel Update Contribution.................... SNI..
CleanAir Event-driven RRM option............... Disabled
CleanAir Event-driven RRM sensitivity.......... Medium
Channel Assignment Leader...................... WLC5508 (10.1.21.100)
DCA Sensitivity Level: ...................... MEDIUM (10 dB)

DCA Minimum Energy Limit....................... -95 dBm
Channel Energy Levels
Minimum...................................... unknown
Average...................................... unknown
Maximum...................................... unknown
Channel Dwell Times
Minimum...................................... 4 days, 12 h 37 m 25 s
Average...................................... 4 days, 12 h 37 m 25 s
Maximum...................................... 4 days, 12 h 37 m 26 s
802.11b Auto-RF Allowed Channel List........... 1,6,11
Auto-RF Unused Channel List.................... 2,3,4,5,7,8,9,10
Radio RF Grouping
802.11b Group Mode............................. AUTO
802.11b Group Update Interval.................. 600 seconds
802.11b Group Leader........................... WLC5508 (10.1.21.100)

175
802.11b Group Member......................... WLC5508 (10.1.21.100)

802.11b Last Run............................... 121 seconds ago
802.11a CleanAir Configuration
Clean Air Solution............................... Disabled

Air Quality Settings:
Air Quality Reporting........................ Enabled
Air Quality Reporting Period (min)........... 15
Air Quality Alarms........................... Enabled
Air Quality Alarm Threshold................ 35
Unclassified Interference.................. Disabled
Unclassified Severity Threshold............ 20
Interference Device Settings:
Interference Device Reporting................ Enabled
Interference Device Types:
Bluetooth Link........................... Enabled
Microwave Oven........................... Enabled
802.11 FH................................ Enabled
Bluetooth Discovery...................... Enabled
TDD Transmitter.......................... Enabled
Jammer................................... Enabled
Continuous Transmitter................... Enabled
DECT-like Phone.......................... Enabled
Video Camera............................. Enabled
802.15.4................................. Enabled
SuperAG.................................. Enabled
Canopy................................... Enabled
Microsoft Device......................... Enabled
WiMax Mobile............................. Enabled
WiMax Fixed.............................. Enabled
Interference Device Alarms................... Enabled
Interference Device Types Triggering Alarms:
Bluetooth Link........................... Disabled
Microwave Oven........................... Disabled
802.11 FH................................ Disabled
Bluetooth Discovery...................... Disabled
TDD Transmitter.......................... Disabled
Jammer................................... Enabled
Continuous Transmitter................... Disabled
DECT-like Phone.......................... Disabled
Video Camera............................. Disabled
802.15.4................................. Disabled
SuperAG.................................. Disabled
Canopy................................... Disabled
Microsoft Device......................... Disabled
WiMax Mobile............................. Disabled
WiMax Fixed.............................. Disabled
Additional Clean Air Settings:
CleanAir ED-RRM State........................ Disabled
CleanAir ED-RRM Sensitivity.................. Medium
CleanAir ED-RRM Custom Threshold............. 50
CleanAir Persistent Devices state............ Disabled
CleanAir Persistent Device Propagation....... Disabled
802.11a CleanAir AirQuality Summary

AQ = Air Quality
DFS = Dynamic Frequency Selection
AP Name Channel Avg AQ Min AQ Interferers DFS

------------------ ------- ------ ------ ----------- ---
Mobility Configuration
Mobility Architecture ........................... Hierarchical
Mobility Protocol Port........................... 16666
Default Mobility Domain.......................... corp
Multicast Mode .................................. Disabled
DTLS Mode ....................................... Enabled

176
Mobility Domain ID for 802.11r................... 0x2a48

Mobility Keepalive Interval...................... 10
Mobility Keepalive Count......................... 3
Mobility Group Members Configured................ 1
Mobility Control Message DSCP Value.............. 0
Mobility Oracle.................................. Disabled
Mobility MC public IP ........................... 10.1.21.100
Mobility Oracle IP address ...................... 0.0.0.0
Controllers configured in the Mobility Group

IP Address Public IP Address Group Name Multicast IP MAC Address Status
10.1.21.100 10.1.21.100 corp 0.0.0.0 c4:71:fe:97:86:e0 Up
Switch Peer Group Configuration:
Switches configured in Switch Peer Group: Bldg2-3850s
IP Address Public IP Address Status

10.1.222.1 10.1.222.1 Up
Mobility Hash Configuration
Default Mobility Domain.......................... corp
IP Address Hash Key

---------------------------------------------------------
Self Signed Certificate details

Display Self Signed Device Certificate (SSC)
Mobility Foreign Map Configuration

WLAN ID Foreign Mac Address Interface
------- ------------------- ---------
Advanced Configuration
Probe request filtering.......................... Enabled
Probes fwd to controller per client per radio.... 2
Probe request rate-limiting interval............. 500 msec
Aggregate Probe request interval................. 500 msec
EAP-Identity-Request Timeout (seconds)........... 30

EAP-Identity-Request Max Retries................. 2
EAP Key-Index for Dynamic WEP.................... 0
EAP Max-Login Ignore Identity Response........... enable
EAP-Request Timeout (seconds).................... 30
EAP-Request Max Retries.......................... 2
EAPOL-Key Timeout (milliseconds)................. 1000
EAPOL-Key Max Retries............................ 2
EAP-Broadcast Key Interval....................... 3600
Fastpath Packet Capture.......................... disable

Fastpath Fast Cache Control...................... enable
Fastpath Fast Testmode........................... 0x0
dot11-padding.................................... Disabled
Advanced Hotspot Commands
ANQP 4-way state................................. Disabled

GARP Broadcast state: ........................... Enabled
GAS request rate limit .......................... Disabled
ANQP comeback delay in TUs(TU=1024usec).......... 50
Location Configuration
RFID Tag data Collection......................... Enabled
RFID timeout.................................... 1200 seconds
RFID mobility....................................
Interface Configuration
Interface Name................................... corp
MAC Address...................................... c4:71:fe:97:86:ef

177
IP Address....................................... 10.1.25.100
IP Netmask....................................... 255.255.255.0
IP Gateway....................................... 10.1.25.1
External NAT IP State............................ Disabled
External NAT IP Address.......................... 0.0.0.0
VLAN............................................. 25
Quarantine-vlan.................................. 0
Active Physical Port............................. LAG (13)
Primary Physical Port............................ LAG (13)
Backup Physical Port............................. Unconfigured
Primary DHCP Server.............................. 10.1.25.1
Secondary DHCP Server............................ Unconfigured
DHCP Option 82................................... Disabled
ACL.............................................. Unconfigured
AP Manager....................................... No
Guest Interface.................................. No
L2 Multicast..................................... Enabled
Interface Name................................... management

IP Address....................................... 10.1.21.100
IP Netmask....................................... 255.255.255.0
IP Gateway....................................... 10.1.21.1
External NAT IP State............................ Disabled
External NAT IP Address.......................... 0.0.0.0
VLAN............................................. 21
Quarantine-vlan.................................. 0
Active Physical Port............................. LAG (13)
Primary Physical Port............................ LAG (13)
Backup Physical Port............................. Unconfigured
Primary DHCP Server.............................. 10.1.21.1
Secondary DHCP Server............................ Unconfigured
DHCP Option 82................................... Disabled
ACL.............................................. Unconfigured
AP Manager....................................... Yes
L2 Multicast..................................... Enabled
Interface Name................................... redundancy-management

IP Address....................................... 0.0.0.0
Interface Name................................... redundancy-port

MAC Address...................................... c4:71:fe:97:86:e2
IP Address....................................... 0.0.0.0
Interface Name................................... service-port

MAC Address...................................... c4:71:fe:97:86:e1
IP Address....................................... 0.0.0.0
DHCP Protocol.................................... Enabled
AP Manager....................................... No
Interface Name................................... virtual

MAC Address...................................... c4:71:fe:97:86:e0
IP Address....................................... 1.1.1.254
Virtual DNS Host Name............................ Disabled
AP Manager....................................... No
Interface Group Configuration

ACL Configuration
CPU ACL Configuration
CPU Acl Name................................ NOT CONFIGURED

Wireless Traffic............................ Disabled
Wired Traffic............................... Disabled
RADIUS Configuration
Vendor Id Backward Compatibility................. Disabled

178
Call Station Id Case............................. lower

Call Station Id Type............................. Mac Address
Aggressive Failover.............................. Enabled
Keywrap.......................................... Disabled
Fallback Test:
Test Mode.................................... Off
Probe User Name.............................. cisco-probe
Interval (in seconds)........................ 300
MAC Delimiter for Authentication Messages........ hyphen
MAC Delimiter for Accounting Messages............ hyphen
Authentication Servers
Idx Type Server Address Port State Tout MgmtTout RFC3576 IPSec - AuthMode/Phase1/Group/Lifetime/Auth/Encr
--- ---- ---------------- ------ -------- ---- -------- ------- ------------------------------------------------
Accounting Servers
Idx Type Server Address Port State Tout MgmtTout RFC3576 IPSec - AuthMode/Phase1/Group/Lifetime/Auth/Encr
--- ---- ---------------- ------ -------- ---- -------- ------- ------------------------------------------------
TACACS Configuration
Authentication Servers
Accounting Servers
Idx Server Address Port State Tout MgmtTout

--- ---------------- ------ -------- ---- --------
LDAP Configuration
Local EAP Configuration
User credentials database search order:
Primary ..................................... Local DB
Timer:
Active timeout .............................. 300
Configured EAP profiles:
EAP Method configuration:

EAP-FAST:
Server key ................................ <hidden>
TTL for the PAC ........................... 10
Anonymous provision allowed ............... Yes
Authority ID .............................. 436973636f0000000000000000000000
Authority Information ..................... Cisco A-ID
FlexConnect Group Summary
FlexConnect Group Detail
Route Info
Number of Routes................................. 0
Destination Network Netmask Gateway

------------------- ------------------- -------------------
Peer Route Info
Number of Routes................................. 0
Destination Network Netmask Gateway

------------------- ------------------- -------------------
Qos Queue Length Info
Platinum queue length............................ 100
Gold queue length................................ 75
Silver queue length.............................. 50
Bronze queue length.............................. 25
Mac Filter Info
Authorization List
Authorize MIC APs against AAA ................... disabled

Authorize LSC APs against Auth-List ............. disabled
APs Allowed to Join
AP with Manufacturing Installed Certificate.... yes

179
AP with Self-Signed Certificate................ no

AP with Locally Significant Certificate........ no
Load Balancing Info

Aggressive Load Balancing........................ per WLAN enabling
Aggressive Load Balancing Window................. 5 clients
Aggressive Load Balancing Denial Count........... 3
Statistics
Total Denied Count............................... 0 clients
Total Denial Sent................................ 0 messages
Exceeded Denial Max Limit Count.................. 0 times
None 5G Candidate Count.......................... 0 times
None 2.4G Candidate Count........................ 0 times
DHCP Info
No leases allocated.
DHCP Opt-82 RID Format: <AP radio MAC address>

DHCP Opt-82 Format: binary
DHCP Proxy Behaviour: enabled
DHCP Server IP Address:.......................... 10.1.25.1

DHCP DISCOVER Count:........................... 6
DHCP REQUEST Count:............................ 26
DHCP INFORM Count:............................. 2
DHCP DECLINE Count:............................ 0
DHCP RELEASE Count:............................ 0
DHCP REPLY Count:.............................. 0
DHCP OFFER Count:.............................. 4
DHCP ACK Count:................................ 18
DHCP NAK Count:................................ 0
Tx Fails:...................................... 0
Last Rx Time:.................................. 389007 seconds ago
Last Tx Time:.................................. 389007 seconds ago
Exclusion List ConfigurationUnable to retrieve exclusion-list entry
CDP Configuration
cdp version v2
Country Channels Configuration
Configured Country............................. US - United States

KEY: * = Channel is legal in this country and may be configured manually.
A = Channel is the Auto-RF default in this country.
. = Channel is not legal in this country.
C = Channel has been configured for use by Auto-RF.
x = Channel is available to be configured for use by Auto-RF.
(-,-) = (indoor, outdoor) regulatory domain allowed by this country.
-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-
802.11bg :
Channels : 11111
:12345678901234
-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-
US (-A ,-AB ): A * * * * A * * * * A . . .
-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-
802.11a : 111111111111111111
Channels : 3 3 3 4 4 4 4 4 5 5 6 6 0 0 0 1 1 2 2 2 3 3 4 4 5 5 6 6 6 7
:468024682604048260482609371593
-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-
US (-A ,-AB ): . A . A . A . A A A A A * * * * * . . . * * * A A A A * . .
-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-

180
4.9GHz 802.11a :
Channels : 11111111112222222
:12345678901234567890123456
-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-
US (-A ,-AB ): * * * * * * * * * * * * * * * * * * * A * * * * * A
-----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-
WPS Configuration Summary
Auto-Immune
Auto-Immune.................................... Disabled
Client Exclusion Policy

Excessive 802.11-association failures.......... Enabled
Excessive 802.11-authentication failures....... Enabled
Excessive 802.1x-authentication................ Enabled
IP-theft....................................... Enabled
Excessive Web authentication failure........... Enabled
Signature Policy
Signature Processing........................... Enabled
Management Frame Protection

Global Infrastructure MFP state................ DISABLED (*all infrastructure settings are overridden)
Controller Time Source Valid................... True
WLAN Client
WLAN ID WLAN Name Status Protection
------- ------------------------- --------- ----------
1 Conv-Corp-Pod1 Enabled Optional
Spanning Tree Switch Configuration
STP Specification...................... IEEE 802.1D

STP Base MAC Address................... C4:71:FE:97:86:E0
Spanning Tree Algorithm................ Disable
STP Bridge Priority.................... 32768
STP Bridge Max. Age (seconds).......... 20
STP Bridge Hello Time (seconds)........ 2
STP Bridge Forward Delay (seconds)..... 15
Custom Web Configuration
Radius Authentication Method..................... PAP

Cisco Logo....................................... Enabled
CustomLogo....................................... None
Custom Title..................................... None
Custom Message................................... None
Custom Redirect URL.............................. None
Web Authentication Type.......................... Internal Default
Logout-popup..................................... Enabled
External Web Authentication URL.................. None
Configuration Per Profile:
Core dump Configuration
Core Dump is disabled
Rogue AP Configuration
Rogue on wire Auto-Contain....................... Disabled

Rogue using our SSID Auto-Contain................ Disabled
Valid client on rogue AP Auto-Contain............ Disabled
Rogue AP timeout................................. 1200
Rogue Detection Report Interval.................. 10
Rogue Detection Min Rssi......................... -128
Rogue Detection Transient Interval............... 0
Total Rogues(AP+Ad-hoc) supported................ 2000

181
Total Rogues classified.......................... 100
MAC Address Classification # APs # Clients Last Heard

----------------- ------------------ ----- --------- -----------------------
00:15:c7:fe:fe:60 Pending 2 0 Wed Jun 12 18:35:31 2013
00:17:0f:d9:80:f0 Unclassified 1 0 Wed Jun 12 18:23:21 2013
00:17:0f:d9:98:90 Unclassified 1 0 Wed Jun 12 18:29:33 2013
00:17:df:aa:e5:80 Unclassified 2 0 Wed Jun 12 18:35:17 2013
00:1a:e3:75:91:d0 Unclassified 2 0 Wed Jun 12 18:29:19 2013
00:21:29:00:86:70 Unclassified 2 0 Wed Jun 12 18:32:32 2013
00:21:29:00:86:71 Unclassified 2 0 Wed Jun 12 18:32:32 2013
00:24:c4:ac:fe:70 Unclassified 2 0 Wed Jun 12 18:23:35 2013
00:26:99:bc:1d:40 Unclassified 2 0 Wed Jun 12 18:35:31 2013
00:26:99:bc:53:80 Unclassified 2 0 Wed Jun 12 18:32:32 2013
04:c5:a4:09:2b:c0 Unclassified 2 0 Wed Jun 12 18:35:31 2013
04:c5:a4:09:42:70 Unclassified 2 0 Wed Jun 12 18:32:32 2013
04:c5:a4:09:5c:00 Unclassified 2 1 Wed Jun 12 18:35:31 2013
04:c5:a4:09:8d:13 Unclassified 1 0 Wed Jun 12 18:29:33 2013
08:17:35:d0:4e:d6 Unclassified 1 0 Wed Jun 12 18:26:20 2013
08:17:35:d0:4f:9a Unclassified 2 0 Wed Jun 12 18:26:20 2013
08:17:35:d0:50:16 Unclassified 2 0 Wed Jun 12 18:32:18 2013
08:17:35:d0:50:7e Unclassified 1 0 Wed Jun 12 18:29:19 2013
08:17:35:d0:57:b6 Unclassified 1 0 Wed Jun 12 18:23:35 2013
0c:d9:96:39:24:92 Unclassified 1 0 Wed Jun 12 18:32:32 2013
1c:e6:c7:f1:88:20 Unclassified 1 0 Wed Jun 12 18:23:35 2013
54:78:1a:0d:99:e0 Unclassified 2 0 Wed Jun 12 18:32:32 2013
58:bc:27:12:e7:61 Unclassified 2 0 Wed Jun 12 18:35:31 2013
58:bc:27:12:ef:10 Unclassified 2 0 Wed Jun 12 18:35:31 2013
58:bc:27:13:21:e1 Unclassified 2 0 Wed Jun 12 18:35:31 2013
64:16:8d:ee:2a:e0 Unclassified 1 0 Wed Jun 12 18:35:17 2013
64:16:8d:ee:2a:e1 Unclassified 2 0 Wed Jun 12 18:32:32 2013
64:d9:89:c4:87:c0 Unclassified 2 0 Wed Jun 12 18:32:32 2013
64:d9:89:f7:24:c0 Unclassified 2 0 Wed Jun 12 18:35:17 2013
68:bc:0c:2c:86:f0 Unclassified 1 0 Wed Jun 12 18:32:18 2013
9c:4e:20:72:ba:00 Unclassified 2 0 Wed Jun 12 18:35:17 2013
9c:4e:20:72:e2:00 Unclassified 2 0 Wed Jun 12 18:29:19 2013
9c:4e:20:73:0f:90 Unclassified 2 0 Wed Jun 12 18:35:31 2013
9c:4e:20:73:10:60 Unclassified 2 0 Wed Jun 12 18:29:19 2013

182

9c:4e:20:73:3c:00 Unclassified 2 0 Wed Jun 12 18:29:19 2013
9c:af:ca:0e:9c:60 Unclassified 2 0 Wed Jun 12 18:35:31 2013
b4:e9:b0:d5:09:d0 Unclassified 2 0 Wed Jun 12 18:35:17 2013
c4:71:fe:6d:c4:95 Unclassified 2 0 Wed Jun 12 18:35:31 2013
ec:c8:82:7a:39:f0 Unclassified 2 0 Wed Jun 12 18:35:31 2013
f0:25:72:12:63:30 Unclassified 2 0 Wed Jun 12 18:35:17 2013
f0:25:72:3c:40:80 Unclassified 2 0 Wed Jun 12 18:35:31 2013
f0:25:72:3c:40:81 Unclassified 2 0 Wed Jun 12 18:35:17 2013
f0:25:72:3c:41:b0 Unclassified 2 0 Wed Jun 12 18:23:35 2013
f0:25:72:3c:48:a0 Unclassified 2 0 Wed Jun 12 18:32:32 2013
f0:25:72:3c:48:a1 Unclassified 2 0 Wed Jun 12 18:35:17 2013
f0:25:72:71:b5:50 Unclassified 2 0 Wed Jun 12 18:35:17 2013
f0:25:72:db:8d:d0 Unclassified 2 0 Wed Jun 12 18:35:17 2013
Adhoc Rogue Configuration
Detect and report Ad-Hoc Networks................ Enabled

Auto-Contain Ad-Hoc Networks..................... Disabled
Total Rogues(Ad-Hoc+AP) supported ............... 2000
Total Ad-Hoc entries ............................ 1
Client MAC Address Adhoc BSSID State # APs Last Heard

------------------ ------------------ ----------------- ------ -----------------------
0e:17:35:d0:57:b6 0e:17:35:d0:57:b6 Alert 1 Wed Jun 12 18:23:35 2013
Rogue Client Configuration
Validate rogue clients against AAA............... Disabled

Total Rogue Clients supported.................... 2500
Total Rogue Clients present...................... 1
MAC Address State # APs Last Heard

----------------- ------------------ ----- -----------------------
40:a6:d9:c1:b9:2e Alert 1 Wed Jun 12 18:29:33 2013
Ignore List Configuration
MAC Address
-----------------
Rogue Rule Configuration
Priority Rule Name State Type Match Hit Count

-------- ----------------------- -------- ------------- ----- ---------
Media-Stream Configuration
Multicast-direct State........................... disable

183
Allowed WLANs....................................
Stream Name Start IP End IP Operation Status

------------- --------------------------------------- --------------------------------------- ----------------
URL..............................................
E-mail...........................................
Phone............................................
Note.............................................
State............................................ disable
2.4G Band Media-Stream Configuration
Multicast-direct................................. Enabled
Best Effort...................................... Disabled
Video Re-Direct.................................. Enabled
Max Allowed Streams Per Radio.................... Auto
Max Allowed Streams Per Client................... Auto
Max Video Bandwidth.............................. 0
Max Voice Bandwidth.............................. 75
Max Media Bandwidth.............................. 85
Min PHY Rate..................................... 6000
Max Retry Percentage............................. 80
5G Band Media-Stream Configuration
Multicast-direct................................. Enabled
Best Effort...................................... Disabled
Video Re-Direct.................................. Enabled
Max Allowed Streams Per Radio.................... Auto
Max Allowed Streams Per Client................... Auto
Max Video Bandwidth.............................. 0
Max Voice Bandwidth.............................. 75
Max Media Bandwidth.............................. 85
Min PHY Rate..................................... 6000
Max Retry Percentage............................. 80
Number of Clients................................ 0
Client Mac Stream Name Stream Type Radio WLAN QoS Status
----------------- ----------- ----------- ---- ---- ------ -------
WLC Voice Call Statistics
WLC Voice Call Statistics for 802.11b Radio
WMM TSPEC CAC Call Stats

Total num of Calls in progress................. 0
Num of Roam Calls in progress.................. 0
Total Num of Calls Admitted.................... 0
Total Num of Roam Calls Admitted............... 0
Total Num of exp bw requests received.......... 0
Total Num of exp bw requests Admitted.......... 0
Total Num of Calls Rejected.................... 0
Total Num of Roam Calls Rejected............... 0
Num of Calls Rejected due to insufficent bw.... 0
Num of Calls Rejected due to invalid params.... 0
Num of Calls Rejected due to PHY rate.......... 0
Num of Calls Rejected due to QoS policy........ 0
SIP CAC Call Stats
Total Num of Calls in progress................. 0
Total Num of Preferred Calls Received.......... 0

184
Total Num of Preferred Calls Admitted.......... 0

Total Num of Ongoing Preferred Calls........... 0
Total Num of Calls Rejected(Insuff BW)......... 0
Total Num of Roam Calls Rejected(Insuff BW).... 0
KTS based CAC Call Stats
WLC Voice Call Statistics for 802.11a Radio
WMM TSPEC CAC Call Stats

Total num of Calls in progress................. 0
Total Num of exp bw requests received.......... 0
Total Num of exp bw requests Admitted.......... 0
Total Num of Calls Rejected.................... 0
Total Num of Roam Calls Rejected............... 0
Num of Calls Rejected due to insufficent bw.... 0
Num of Calls Rejected due to invalid params.... 0
Num of Calls Rejected due to PHY rate.......... 0
Num of Calls Rejected due to QoS policy........ 0
SIP CAC Call Stats
Total Num of Preferred Calls Received.......... 0
Total Num of Preferred Calls Admitted.......... 0
Total Num of Ongoing Preferred Calls........... 0
KTS based CAC Call Stats
WLC IPv6 Summary
Global Config............................... Enabled

Reachable-lifetime value.................... 300
Stale-lifetime value........................ 86400
Down-lifetime value......................... 30
RA Throttling............................... Disabled
RA Throttling allow at-least................ 1
RA Throttling allow at-most................. 1
RA Throttling max-through................... 10
RA Throttling throttle-period............... 600
RA Throttling interval-option............... passthrough
NS Mulitcast CacheMiss Forwarding........... Disabled

Introduction To Converged Access Lab Guide v2.3

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Introduction To Converged Access Lab Guide v2.3

Uploaded by

Copyright:

Available Formats

Introduction to New Mobility

Another hands-on lab from team MIDAS

6/18/2013 Introduction to New Mobility Configuration

Based on the requirements, you will perform the following tasks:

• Verify current network state

6/18/2013 Introduction to New Mobility Configuration

6/18/2013 Introduction to New Mobility Configuration

6/18/2013 Introduction to New Mobility Configuration

3850 Series configuration guides

Converged Access whitepaper:

5508 7.3.112.0 (Model: AIR-CT5508-K9 )

A solid understanding of networking, including routing and switching is assumed. A basic

6/18/2013 Introduction to New Mobility Configuration

6/18/2013 Introduction to New Mobility Configuration

Access Lab Pod

• The URL to access the MIDAS student portal

6/18/2013 Introduction to New Mobility Configuration

Click “Continue”, to acknowledge the resulting welcome message.

6/18/2013 Introduction to New Mobility Configuration

6/18/2013 Introduction to New Mobility Configuration

Good luck with the lab! 

6/18/2013 Introduction to New Mobility Configuration

Exercise 1: Familiarize with the Network and 3850

Section 1.1 Access and Review the 3850

6/18/2013 Introduction to New Mobility Configuration

6/18/2013 Introduction to New Mobility Configuration

Press “Enter” a few times, in order to get to the “Switch>” prompt.

6/18/2013 Introduction to New Mobility Configuration

6/18/2013 Introduction to New Mobility Configuration

Section 1.2 Test Wired Network Connectivity

Still on PC1, open a new tab in Firefox.

Go to www.google.com to verify internet connectivity.

Now test IP reachability of the rest of the wired network devices.

6/18/2013 Introduction to New Mobility Configuration

6/18/2013 Introduction to New Mobility Configuration

ping 10.1.22.1 BLDG1-AP VLAN 22 interface on the 3750

6/18/2013 Introduction to New Mobility Configuration

6/18/2013 Introduction to New Mobility Configuration

Username: Jane Doe (Should already be filled in)

6/18/2013 Introduction to New Mobility Configuration

6/18/2013 Introduction to New Mobility Configuration

After pressing “OK”, Windows will attempt to connect to the WLAN.

6/18/2013 Introduction to New Mobility Configuration

6/18/2013 Introduction to New Mobility Configuration

6/18/2013 Introduction to New Mobility Configuration

6/18/2013 Introduction to New Mobility Configuration

Click “OK” to submit.

6/18/2013 Introduction to New Mobility Configuration

Navigate in the GUI to “MANAGEMENT” on the top bar.

6/18/2013 Introduction to New Mobility Configuration

Note the current licenses listed on the resulting page.

Q1.2: Where are AP licenses placed; on the MA or on the MC?

6/18/2013 Introduction to New Mobility Configuration

6/18/2013 Introduction to New Mobility Configuration

Exercise 2: Configure the 3850 Switch

Section 2.1 Basic Configuration of the 3850

6/18/2013 Introduction to New Mobility Configuration

***Note: Synchronized time across MA and MC is critical to proper roaming, as well as

6/18/2013 Introduction to New Mobility Configuration

service timestamp log datetime show-timezone localtime msec

clock timezone edt -5

username admin privilege 15 secret cisco123