CISCO IUWNE Vol 3 v.2.0 640 722 2011

t~lld
CISCO .
Americas Headquarters
Cisco Systems. Inc
San Jose. CA
Asia Pacific Headquarters

Cisco Systems (USA) Pte. Ltd.
Sing~~re
Europe Headquarters
Cisco Systems International BV ftmsterdam,
Tb_e_Netherlands_
Cisco has more than 200 offices worldwide. Addresses, phone numbers. and fax numbers are listed on the Cisco Websne at www.cisco.com/gofoffices.
~Cisco
and the Cisco Logo are trademarks of Cisco Systems. Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks can be found at
"' wwwcisco.com/go/trademarks. Third party trademarks mentioned are the property of their respectrve owners. The use of the word partner does not imply a
partnership relacionship between Cisco and any other company. (1 005R)
DISCLA!l\.1ER WARRANTY: THIS CONTENT IS BEING PROVIDED "AS IS." CISCO MAKES AJ\TD YOU RECEIVE NO WARRANTIES IN
CONNECTION WITH THE CONTENT PROVIDED HEREUNDER, EXPRESS, IMPLIED, STATUTORY OR IN ANY OTHER PROVISION OF
THIS CONTENT OR COMMUNICATION BETWEEN CISCO AND YOU. CISCO SPECIFICALLY DJSCLA!MS ALL IMPLIED
WARRANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY, NON-INFRINGEMENT AND FITNESS FOR A PARTICULAR
PURPOSE, OR ARISING FROM A COtJRSE OF DEALING, USAGE OR TRADE PRACTICE. This learning product may contain early release
content, and while Cisco believes it to be accurate, it falls subject to the disclaimer above.
Student Guide
2011 Cisco and/or its affiliates. All rights reserved.
Table of Contents
Volume 3
Cisco WCS Basics ......................................................................................................... 5-1
r
r
Introducing Cisco WCS and Cisco WCS Navigator .............................................................S-3

Overview ............................................................................................................................................ 5-3
Objectives .................................................................................................................................... 5-3
Overview ............................................................................................................................................ 5-1

Module Objectives ....................................................................................................................... 5-1
Cisco WCS Position in the Management Layer ................................................................................. 5-4

Cisco WCS .................................................................................................................................. 5-4
Cisco MSE ................................................................................................................................... 5-5
Cisco WCS License Systems and Versions ...................................................................................... 5-6
Cisco WCS Versions ................................................................................................................... 5-6
Cisco WCS Base ......................................................................................................................... 5-6
Cisco WCS PLUS ........................................................................................................................ 5-7
Single-Server Licenses ............................................................................................................. 5-10
Enterprise License ..................................................................................................................... 5-11
Cisco WCS Navigator ...................................................................................................................... 5-13
Summary .......................................................................................................................................... 5-20
References ................................................................................................................................ 5-20
Navigating tile Cisco w.cs l.ntedace ........................... ., ......................................................5-2,1
Overview .......................................................................................................................................... 5-21

Objectives .................................................................................................................................. 5-21
Log Into Cisco WCS and Discover the Interface ............................................................................. 5-22
Administration Menu ........................................................................................................................ 5-24
Manage Background Tasks ............................................................................................................. 5-25
Manage Passwords and Understand How Users Are Grouped and Created ................................. 5-28
Administration > AAA > Users > Add User ............................................................................... 5-30
Administration > AAA > Groups > Group Name ....................................................................... 5-32
Administration > AAA > Users > Audit Trail .............................................................................. 5-33
Configure Cisco WCS Logs ............................................................................................................. 5-34
Configure Cisco WCS Files and Settings ........................................................................................ 5-36
Define Alarm Frequency and Preferences ...................................................................................... 5-40
Summary .......................................................................................................................................... 5-41
Working with Controllers from Cisco WCS ........................................................................5-43
Overview .......................................................................................................................................... 5~43

Objectives .................................................................................................................................. 5-43
Adding Controllers ........................................................................................................................... 5-44
Configure the Controller ................................................................................................................... 5-49
Configllrirlg Controller Templates ............................................................................................. 5~51
Configure APs .................................................................................................................................. 5-54
Audits ........................................................................................................................................ 5-56
Summary .......................................................................................................................................... 5-58
---.workrng-with-Preconfigured--Maps-..... ;.; .. ;.-...... ;...... ;~ ........... ;................ ;................................... ~-Overview .......................................................................................................................................... 5-69
L
l
L
L
l
Objectives .................................................................................................................................. 5-59

Add, Relocate, and Remove Access Points .................................................................................... 5-60
Display Heat Maps ........................................................................................................................... 5-66
Display Client Locations .................................................................................................................. 5-73
Summary .......................................................................................................................................... 5-75
Monitoring the Network with Cisco WCS .......................................................................... 5-77

Overview .......................................................................................................................................... 5-77
Objectives ................................................................................................................................. 5-77
Customizing the Monitor Page ........................................................................................................ 5-78
Displaying the Alarm Dashboard ..................................................................................................... 5-82
Using Alarms to Display Events and Track Devices ....................................................................... 5-84
Generating Reports in Cisco WCS .................................................................................................. 5-88
Summary ......................................................................................................................................... 5-98
Working with Cisco CleanAir in Cisco WCS ..................................................................... 5-99

Overview .......................................................................................................................................... 5-99
Objective ................................................................................................................................... 5-99
Cisco CleanAir Technology ........................................................................................................... 5-100
Cisco CleanAir Concepts ............................................................................................................... 5-105
Modes of Operation for Cisco CleanAir APs ................................................................................. 5-1 09
Configuring Cisco CleanAir on the WLC ....................................................................................... 5-112
View Cisco CleanAir Zones on a Map in Cisco WCS .................................................................... 5-119
Summary ....................................................................................................................................... 5-125
Module Summary ........................................................................................................................... 5-127
References .............................................................................................................................. 5-127
Module Self-Check ........................................................................................................................ 5-129
Module Self-Check Answer Key ............................................................................................. 5-132
WI::AN Maintenance and Troubleshgtting~ ................................................................... 6-1

Overview ............................................................................................................................................ 6-1
Module Objectives ....................................................................................................................... 6-1
Maintaining the System ......................................................................................................... 6-3

Overview ............................................................................................................................................ 6-3
Objectives ................................................................................................................................... 6-3
Saving and Restoring Cisco WLC Configuration Files ...................................................................... 6-4
Cisco WLC Configuration Backup ..................................................................................................... 6-8
Cisco WLC Code Upgrade .............................................................................................................. 6-12
Management Access Methods ........................................................................................................ 6-22
Summary ......................................................................................................................................... 6-26
Troubleshooting a Wireless Network ................................................................................. 6-27

Overview .......................................................................................................................................... 6-27
Objectives ................................................................................................................................. 6-27
Layer 2 and Layer 3 Troubleshooting .............................................................................................. 6-28
Common Connectivity Issues .......................................................................................................... 6-39
Visual Elements ............................................................................................................................... 6-46
Third-Party Tools ............................................................................................................................. 6-47
Packet Sniffers .......................................................................................................................... 6-47
Spectrum Analyzers .................................................................................................................. 6-4.&
Logs and SNMP ............................................................................................................................... 6-51
Useful show and debug Commands ................................................................................................ 6-60
Monitoring Pages and Alarm Dashboard ........................................................................................ 6-70
Cisco WCS Client Troubleshooting ................................................................................................. 6-74
-.. - ------- ---- ----------- ---------- - ------GlsGe- W-GS--CJ-i-eA-t--+-relJ-91esAeet-ffi-~ae-l-:--...................-.- ~ ~-~ .-. . ~-~~=-=-:-:-:-:- .---:-:-:--:-::--:-:. :~-.-~ -.-.-~----~ -.-. -:~ -:-: .-.-:--:-. -.-~----:~-:;: -:~ :--:-: :-:-~--=--:-. -. -:~::-U;;;r-s-Summary ......................................................................................................................................... 6-78
Module Summary ............................................................................................................................. 6-79
Module Self-Check .......................................................................................................................... 6-81
Module Self-Check Answer Key ............................................................................................... 6-83
r
I
r
r
I
f
(
f
1.
l
l
L
Implementing Cisco Unified Wireless Networking Essentials (IUWNE) v2.0
2011 Cisco Systems, Inc.
L
l.
Module
sl
s
to manage the network from a
networks are
with more than a
from one to the other is easy, there is a need for a ,uc""""'"'H"<H
alL
that works with
the main features of the Cisco WCS

you
This module will
you how to use this tool to increase the
and will shm.v
u
this
you will be able to manage the wireless network with Cisco

able to meet these r.h'"'''tnrPR
ill
Describe Cisco WCS and Cisco WCS
1111
Work with controllers from Cisco
1111
Work with preco:nfigured maps
ill
Monitor the network
ill
Describe the CleanAir feature in Cisco WCS
Cisco WCS
5-2
Lesson 1
n
r
"""''wlS""e the wireless network frorn a
is a
The Cisco Wireless Control
this
administrators to ~~0""'"'
from a central location. Cisco WCS also
many other features such as
location
on the
ofthe
Cisco WCS versions
and licenses may be used. This lesson will
you
you
an overview of the main
of this software.
fYHHHHHF,
you will be able to

Cisco WCS and Cisco WCS
includes
able to meet these
11111
Describe Cisco WCS and its
lil1ll
Describe Cisco WCS
Cisco WCS Position in the Management Layer

This
describes Cisco WCS and its position in the management layer.
' Centralized location for

managing devices
Wireless Control
System Navigator
Management devices
WLAN controller
Controller-based APs
with
CiscoWCS
~
Cisco MSE
Handsets, cfients, rogues, and tags
Standalone access
which can
controller-based APs can be
the Cisco Wireless LAN Controller
enable IT rnanagers to
wireless networks from a centralized v"'u"vH, -"-J
total cost of
with the WLAN
UH:tll<lt','Hl'-Hl solutions that work with
APs to v'!J'-"''~
Cisco WCS and the Cisco Wireless Location
monitor their
the
The Cisco WCS user interface enables

version 7.0 or lateL
-----
-----~-----------
Note
Internet Explorer 7.0 or later with the Flash plug-in, or Mozilla Firefox 3.5 or later is required
to conff'ofali JTermitfed CiscO Unified Wireless1-Jetwork
configuration, monitoring,
and control functions.
Operator pem1issions are defined

the administrator using the Cisco WCS user interface
administration menu, which enables the administrator to manage user accounts and schedule
periodic maintenance tasks.
Cisco WCS software is one of the leading platforms in the industry for WLAN planning,
configuration, and management. It provides a powerful foundation by which IT managers can
design, control, and monitor enterprise wireless networks from a central location, simplifying
operations and reducing the total cost of ownership.
5-4
Cisco MSE
Cisco has revolutionized Wi-Fi networking by providing advanced location tracking
functionality within the WLAN infrastructure. The Cisco Mobility Services Engine (MSE) can
map the location of thousands ofWi-Fi clients for IT management and
asset
The
can help enforce security policies
identifying and locating rogue
APs and devices. The appliance can be accessed from the Cisco WCS interface using Simple
Object Access Protocol (SOAP) and XML over HTTPS. The controller forwards data to the
MSE using the Network Mobility Services Protocol
Cisco WCS Basics
5-5
Cisco WCS icense Systems and Versions

This topic describes the different versions and licensing for Cisco WCS.
WCS Base
Supports Cisco WCS deployed on a single server
WCS Base features
WCS Plus
Cisco WCS deployed on a single server
Includes all Cisco WCS Base features
Additional features
High "'"~"'"''~"
device
servers
server or
Includes ail Cisco WCS Plus features
Additional features
Cisco WCS Base or Cisco WCS Plus.

A license is
for both versions.
Cisco WCS Base

wireless client data access, rogue AP
and containment
as on-demand location of rogue APs that are
next to the ,,,,,,.",.,.
functions
and Cisco Unif]ed Wireless Network
and controL
views of the
assoc1ate with controllers
notification
111
APs
of AP coverage areas. This feature is

spans more than one geographical area.
1111
Ad hoc rogue detection
111
User-supplied campus, building, and floor
graphics that show the following:
Locations and status of managed APs

Locations of rogue APs, based on the signal strength that is received by the nearest
managed Cisco APs
Coverage hole alarm information for APs that is based on the received signal
strength from clients
RF coverage maps
5-6
Cisco WCS Base also provides systemwide control of the following:
f
[
[
Streamlined network, controller, and managed AP configuration using customer-defined

templates
Network, controller, and managed AP status and alarm monitoring
Automated and manual data client monitoring and control functions
Automated monitoring of rogue APs, coverage holes, security violations, controllers, and
APs
Complete event logs for data clients, rogue APs, coverage holes, security violations,
controllers, and APs
Automatic channel and power-level assignment by Radio Resource Management (RRM)
User-defined automatic controller status audits, missed trap polling, configuration backups,
and policy cleanups
Real-time location of rogue APs and rogue ad hoc events (with an accuracy level of
"nearest Cisco AP")
Real-time and historical location of clients (with an accuracy level of"nearest Cisco AP")
Cisco WCS PLUS

Cisco WCS Plus includes all the features of Cisco WCS Base, as well as these enhancements:
On-demand location of rogue APs to within 33 feet (10m)
On-demand location of clients to within 33 feet (10m)
On-demand location of Cisco Spectrum Expert sensors
Ability to use location appliances to collect and return historical location data viewable in
the Cisco WCS Location user interface
Enabling Mobility Services and High Availability with WCS Plus License
A Cisco WCS PLUS license supports Cisco WCS Base license features and the following
capabilities:
Cisco 3300 Series Mobility Services Engine (MSE) management, which can expand
location capabilities by adding Cisco context-aware software to simultaneously track up to
18,000 assets.
Note
Cisco WCS location and enterprise licenses
High availability
The process to provision a Cisco WCS Plus license is the same as provisioning a current
Cisco WCS license. A Plus license is required to enable MSEs.
Cisco WC--8 Plus license procltlets, wl"lieh wer~ lntFOGIJGed in. Release 5.2arebackwardc
compatible with existing Cisco WCS location and enterprise licenses.
Note
Cisco WCS Base and Cisco WCS Plus licenses cannot be combined.
L
L
l
Cisco WCS Basics
5-7
WCS-ENT-PLUS-K9
Supports high availability, and Windows or Linux on multiple Cisco WCS servers.
WCS-STANDARD-K9
- Base version on a single server and support for up to 500 APs. Location is closest AP.
WCS-WLSE-UPG-K9
- License up to 2500 APs on a single server. Base and location versions available.
WCS-Pius-UPG-K9
For customers upgrading from their existing Cisco WCS Base licenses to equivalent
Cisco WCS Plus licenses.
WCS-ADV-SI-SE-10
- An incremental license that enables the integration of up to 10 Spectrum Experts.
AIR-WCS-DEMO-K9
- Fully functional 30-day license. Location, single-server version. Ten APs maximum.
Cisco WCS is based on a license system that allows support for a maximum number of APs.
This maximum can be reached on a single server (in the case of a single-server license) or
throughout the various Cisco WCS instances (in the case of an enterprise license).
Cisco WCS is licensed as either a single server or enterprise deployment. The following
licenses are available:
f
1
Cisco WCS Licenses
WCS..STANDARD-K9
WCSENT PLUS-K9
WC.SWLS_E-UPG-K9
This license is for customers buying new or expansion Cisco WCS

licenses running Cisco Unified Wireless Network Software. This
license is available as Cisco WCS Base or Cisco WCS Plus option
in increments of 50, 100, or 500 lightweight APs.
This license is a Cisco WCS Enterprise Plus license with mobility
services enablement. Supports high availability, and Windows or
Linux on multiple Cisco WCS servers.
TbisJicense~s-for-customeF&that-are-migrattngfr-om
theCiscoWorks
Wireless LAN Solution Engine (WLSE).

WCS-PLUS-UPG-K9
This license is for customers upgrading from their existing Cisco

WCS Base licenses to equivalent Cisco WCS Plus licenses. It is
available as Cisco WCS Plus in increments of 50, 100, or 500
-uligfltwelghfAPs.""""____ ---_u
____
- - - - -
--------------
l
Note
When the number of APs exceeds the limit of the licenses, WCS generates an alarm. When
users log into WCS, they are alerted if the licensed AP count has been exceeded.
l
l
5-8
Cisco WCS Licenses (Cont.)

License
Description
WCS-ADV-51-SE-10
This license is an incremental license that

enables the integration of up to 10 Spectrum
Experts. This license requires a valid Base or
Plus license.
AIR-WCS-DEMO-K9
This license is for customers wishing to download

the new full-featured, Cisco WCS Plus with
Spectrum Integration demonstration license that
supports ten APs for up to 30 days.
r
r
Note
The Cisco WLSE is a management tool for the standalone AP that also offers some
graphical representation of the network. When a network is migrated from standalone to
Control and Provisioning of Wireless Access Points (CAPWAP), the corresponding Cisco
WLSE can be migrated, under certain conditions, to become a Cisco WCS.
[
1.
t
[
L
l
L
Cisco WCS Basics
5-9
A common source of confusion is the difference between 0H''"'L'- '"~"

HV'~"u'""' and the features available for each
license is the
to
cases, the
license is the best
Si
There are three
licenses.
are as follows:
WCS- Standard-K9
WCS-PLUS-UPG-K9
WCS-WLSE-UPG-K9
reserved for network administrators that are

to Cisco WCS.
The
license is
Cisco AironetLightweight Access
onelicense
per
Authorization
certificate. It is available in configurations of
1
for the license families WCS-ST ANDARD-K9 and WCS-PLUS-UPG-K9. It is also available
as the WCS-WLSE-UPG-K9 license in configurations of 50, 100, 500, 1000, and 1500 APs, to
support the migration of the Cisco Works WLSE to operate as a Cisco WCS.
5-10
Enterprise License
This license type is only available with Cisco WCS Software Release 4.1 or later. It is suitable
for customers
500 or more Cisco Aironet Lightweight Access Points.
Multiple license files are linked to a single PAK certificate and can be deployed on one or more
Cisco WCS servers. Location services are included with all enterprise licenses. There is no
Base or WLSE migration in this
of license. The enterprise license is a full-featured license
on a native Cisco WCS installation. It is available in configurations of 1000, 2500, 10,000, and
50,000 APs for the WCS-ENT-PLUS-K9license family. With WCS-ENT-10000 and WCSENT--50000 licenses, a Cisco WCS Navigator license
is included to manage
up to 20 Cisco WCS management platfonns.
On each Cisco WCS
licenses up to the maximum AP
SKU can be redeemed. As individual AP licenses under a PAK are
count that is tied to the PAK is decremented <>rYnn1Honh'
Cisco WCS Basics
5-11
" WCS-ADV-K9:
License key for one sensor, single server
Includes location capabilities
WCS-ADV-SI-SE-1 0:
License key for up to 'I 0 sensors
Includes location capabilities
This license can be used as a spare to be deployed on multiple servers
license spares
the
SKUs:
WCS-ADV -SI-SE-1 0=
Note
Users that wish to purchase multiple licenses to be deployed across

rn'"'"''..r.r Gisee WCS-hosts-may purchase the-CiscoSpectrum
Intelligence license as a spare unit (WCS-ADV-SI-SE-10=). If a user
orders more than one spare, the system will generate a license pack
for each spare ordered. In this way, the number of license packs
the number of spares ordered.
Cisco CleanAir technology includes all troubleshooting functions from the spectrum analyzer
in an integrated solution that you can now perform remotely instead of sending a technician
to the site locally. You can still use a Cisco Spectrum Expert card for those facilities and
areas that do not have Cisco Aironet 3500 Series Access Points.
5-12
Cisco WCS Navigator

This topic describes Cisco WCS Navigator and its relationship to Cisco WCS .
. dh!l'
CISCO
is the
program to Cisco WCS. It is a
program that
""'''-'"''" Cisco WCS to its architecture. To
a
Cisco
a
that transfers
to the
Cisco WCS for actual
are
Ill!
and allows administration

of Cisco WCS
to 20 Cisco WCS servers. The
Centralized
Ill!
searches
Ill!
Ill!
Location
Ill!
Ill!
Secure
and TACACS+
Cisco WCS Basics
5-13
Minimum s19rver
requirements
Minimum client
requirements
Windows 2003 SP2 or greater, or Red Hat Unux Enterprise 5

Intel Xeon Quad CPU, 3.15 GHz, 8GB RAM, and 200GB
HDD
Internet Explorer 7
Managed devices
Some
are as follows:
for Cisco WCS
lilll
Cisco WCS and Cisco WCS
lilll
Cisco WCS
must be located on
servers
up to 20 Cisco WCS lHHu;~.'-''""'

to
Cisco Aironet
vVindows Server 2003 SP2 or later
Red Hat Linux
5.x 32-bit
Windows Server 2003 and Red Hat Linux

later
5-14
!Ill
Neither Windows Vista nor Windows XP can be used
111
Cisco WCS
Firefox 3.0 or later.
on VMWARE ESX 3.0.1 and
Manages 20 Cisco WCS servers (Cisco WCS 4.1 version and later)
Manages 30,000 CAPWAP* access points
Report generation
Search agent-client, tag, access point, rogue
Database backup
Regional Cisco WCS configuration
Must use controllers with version 4.1 or
or certain features will
not be
such as client troubleshooting
Points
Cisco WCS
is used in "".''"''""'
contain more than one Cisco WCS
APs
features.
is
up to
a central link to each Cisco
Cisco WCS
allows you to search for

and other wireless devices on the
uv.:nr.;.u-.,uto reduce administrative overhead and ease the
of
wireless environments.
user access
services customers
version 5J) and
Cisco WCS Basics
5-15
...,..______
Hostname of machine
IP address of
regional Cisco WCS
----
Login credentials for

regional Cisco WCS
Cisco WCS
uses
Cisco WCS devices to
its database and to
information. The ""'"'~""'"Cisco WCS devices are added to Cisco WCS
a manner similar to the way a controller is added to a Cisco WCS. Cisco WCS uses a URL or
IP address and the
credentials.
5-16
New Pa%w.ord 1
Confirm Password
Cisco WCS
have a ce1iain
level to manage the remote Cisco WCS. This
necessary to allow Cisco WCS
to
all of the ""'"'ro'"' '"'-r"'
1
Cisco WCS Basics
5-17
Cisco WCS
launches
infmmation on the current Cisco WCS
wcs
The links on each Cisco ViCS can also be used to
Cisco WCS.
5-18
states to Cisco
to that
r
f
r
[
APs: For the whole network or per Cisco WCS or controller

Combined inventory reports: All APs on all controllers and all Cisco
WCSs
Controllers: Whole network or per Cisco WCS
Location servers
Cisco WCS Navigator provides reporting on APs, controllers, and location servers. It is also
able to run a combined report that shows all Cisco Unified Wireless Network infrastructure
devices in one report.
The Access Points report lists all the APs and their network status. The Controllers report lists
all the controllers that are connected to any of the Cisco WCS systems that are controlled by
Cisco WCS Navigator. The MSE report shows all the MSEs and the status of each server.
L
l
L
Cisco WCS Basics
5-19
Summary
This topic summarizes the
points that were discussed in this lesson.
Cisco WCS is management software used to offer a single point of

control for the whole wireless network.
Several license versions exist, depending on the number of APs and
Cisco WCS instances to manage.
' When more than 10,000 APs are to be controlled, Cisco WCS
among Cisco WCS instances.
allows
refer to Release
5-20
Cisco Wireless Control
Lesson 2j
r
r
r
.. y,,_,,,w
, ..
0 v,w:
1lI:A""I:ii1III!JIIH#
The Cisco Wireless Control System (WCS) has many extended capabilities. Some of them
relate to day-to-day administration tasks and are about monitoring wireless devices. To help
you in these tasks, each user can have a personalized interface to have direct access to
important elements upon connecting. This lesson will guide you through the interface
personalization process and will describe some administrative tasks that are commonly
performed in Cisco WCS.
Objectives
Upon completing this lesson, you will be able to administer Cisco WCS. This ability includes
being able to meet these objectives:
..
L
l
l
l
Log into Cisco WCS and discover the interface
Describe the Administration menu
Manage background tasks
Manage your password and understand how users are grouped and created
Configure Cisco WCS logs
Configure Cisco W8S files and settings
_--~--_D_efinSljl.]gtrm frequenc;y_ and p!_eferen~~---
Log Into Cisco WCS and Discover the Interface

This topic describes the Cisco WCS login screen.
!ih!
CISCO
the client to have a
Cisco WCS
include the
7.0 or later with the

which allmvs you to control ali
and control
Cisco Unified Wireless Network Solution
fiJnctions.
1111
Mozilla Firefox 3.5 or later
In
Ill
you will need:

The URL of the server
Sockets
II
The default username and

that are created
the
before 4.1, the default username and
were "root" and
Note
5-22
access. A user not
Cisco recommends that a secondary administrative user is created as a backup. This

will allow you to recover from a iost primary user password.
The Cisco WCS
uses a web menu structure that includes the
three elements:
!lili
Horizontal menus; The horizontal menus are the main menus that are used to select a
and
!lili
Status
!lili
The menu that is found in the upper

see the current user,
refresh the screen, or
corner of the window is used to

VleW.
Alarms: 'When Cisco WCS receives an alarm message from a

alarm indicator at the
of the WCS window.
it
an
the network General pages show that the

When you use Cisco WCS for the first
5
and Most Recent
Most Recent
It also shows that no client devices are connected to the
'm'"'""'''"' with one or more
the WCS home
Cisco WCS Basics
5-23
Administration Menu
This topic describes the Administration menu.
5-24
20i 1 Cisco Systems, Inc.
Manage Background Tasks

This topic describes background task monitoring and configuration.
1-- Select a command -- J!

Select a command
r
j-
Background Tasks
Select a commar~d - jj @]
Adrnlnlstrallon,. O,_,kQ<undTesks
Data Collection Tasks
3lfDovd
30
Mmu~s
15
Minutes
15
Minutes
30
Idle
31
ldle
15
Minute~
5
Minute
"
Mmutes
15
Minutes
Wad Ma~ 04 15;12:56 CEST

2"011
Wed M11y 041$:15:48 CEST
2011
Wed May 0415:06:29 CEST
Idle
15
Minutes
7ft>y>)
15
M1nute5
15
No
3l(Dw>)
Minute>
~;:~:~,;~
Idle
Idle
Minute-s
~1 (!~H)
Idle
(~y:J
2011
Wf.ld May 04 15;12:56 CfST
2011
Wed May 0415:13:00 CEST
2011
Wed May 04 15.1300 CEST
2011
Idle
31(t>><)
Idle
:u (~av"J
Idle
3lJ!W'I
Idle
31{D;s)
Idle
Jl(l:wi;)
WedMi!!y 0415:13:09 CEST
2011
W1:1d M,;y 04 15:09:02 CI!ST
201:1
Wed M<IY 04 15:18:09 CfST
2011
Wed May 0415:12::59 CEST
2011
Wed May 04 15:13:09 CEST
2011
The Background Tasks window lets you see the status of scheduled Cisco WCS tasks. As a
server, Cisco WCS performs some actions in real time with minimal delay, while others are
scheduled on a regular basis to limit the load on machine resources. Understanding which tasks
are run at which interval is important to evaluate server performance and the accuracy of the
information that is displayed at any given time. It also allows a task to be run manually that
would be scheduled for a later time, if an immediate update is needed. Scheduled tasks are
divided into two types: data collection and other background tasks. The tasks are listed in tables
with the following columns:
Data Collection Tasks Columns
Cdblmn
Checkbox
[
[
l
l
Oeseription
....
-Select--to-.GOOose-tJ:le-.<:Jesired-task. Chosen tasks-are-targets-fo!"-operations that are initiated from the Select a Command menu.
Task
Task name that serves as a link to a configuration window. Click a

task name to go to the configuration window for that task.
Enabled
Indicates whether the task is enabled or disabled
Interval
Time period between executions of a task
Status
Indicates that the task is idle, disabled, or executing
Data Aggregation
(Data collections only) If set to Yes, the data set will aggregate data.
Non-Aggregation Data Retain

Period (Days)
(Data collections only) The number of days that nonaggregated data

will be retained.
L
Cisco WCS Basics
5-25
The Select a Command menu has the following parameters:
Select a Command Parameters

Parameter
Description
Execute Now
Runs all of the data sets with a selected check box.
----------------t------------------------------------
Enable Collection
Enables the data set to run at its scheduled interval.
Disable Collection
Prevents the data set from running at its scheduled interval
-------------t---------
Data Collections
Data collections are data set tasks that collect and organize a
specific type of information that is useful for creating reports. The
following data-collection tasks are available:
" Autonomous AP status
" Client Statistics
" Controller Performance
" Location Server Performance
"' Mesh link Performance
" Radio
"
Pc~rformance
AP
" Traffic Stream Metrics

" VS Client Statistic
ciick its name in the Data Collections

a table of the executions for that data set
The table has the
Each data set

Collection Set Details:
window contains the
and information under
Detail Parameters
Data Aggregation
the data set is aggregated
Used By Report(s)
5-26
Collection Status
Select the Enabled check box to enable the data set to collect data
Interval (minutes)
Enter the time (in minutes) for the data set execution interval
Each data set configuration window contains the following parameters under Data
Management:
Data Management Parameters
Parameter
Description
Non-Aggregation Data Retain

Period (Days)
Enter the number of days to retain non aggregated data that are
collected by the data set.
Aggregation Raw Data Retain

Period (Days)
Enter the number of days to retain aggregated data that are

collected by the data set.
Other Background Tasks
The following are subcommands within Other Background Tasks.
Client Status
View the history and status of client status polling backups.
Controller Configuration Backup
View the history and status of Cisco WLAN solution configuration

backups.
Controller License Status
View the history and status of controller licenses.
Data Cleanup
View the history and status of Cisco WLAN solution database

cleanups.
Device Status
View the history and status of the Cisco WLAN solution device
status tasks.
Guest Account Sync
View the history and status of Guest Account Synchronization tasks.
Mobility Server Backup
Schedule a backup of the mobility services engine database.
Mobility Server Status
View the status of the Cisco Mobility Services Engine (MSE).
Mobility Server Synchronization
Synchronize the MSE.
WCS Server Backup
Schedule automatic backups of the Cisco WCS database.
Wireless Status
View the history and status of wireless status polls.
l
l
l
l
L
l
Cisco WCS Basics
5-27
Manage Passwords and Understand How Users

Are Grouped and Created
This topic describes how to work with user accounts.
Change Password
User
root
r------
r----:onfirm PassNord
~~
~~~~---
authentication and authorization

for Cisco WCS. The
username that has
to
Cisco WCS authentication
."Individual administrative users can
their
and authorization is "root" or
tor
own
the user
RADIUS or
local mode.
fur
~'"'-~"''vu must be made on the remote serveL
The left sidebar menu includes these
for the root usemame.
or delete user accounts,

add, or edit group names and members.
11
5-28
and
11
Active Sessions: View a list of users that are currently logged in.
TACACS+:
Iiiii
RADIUS:
or delete a TACACS+ server.

add,
or delete a RADIUS server.
To change the root password, use the following procedure:
Step 1
Navigate to Administration> AAA.
Step 2
Click Change Password in the left sidebar menu to access the Change Password
screen.
Step 3
Enter the following information:
r
r
User: Applies to the root usemame
Old Password: Current password
New Password: Enter the new password, using ASCII characters
Confirm Password: Re-enter the new password
l
L
L
L
l
Cisco WCS Basics
5-29
Administration > AAA > Users >Add User

This subtopic describes how to create user accounts.
To create user
use the
to Administration > AAA.
Click Users in the left sidebar menu to access the Add User page. This page lets you
v1ew user
and
1111
Uscrname: Click an item in this column.
11
Member of: This
11
Status: This
defines if the user is active or locked
llil
Audit Trail
for how
Click this icon to check which user has been
defines the groups to which the user

an administrator.
Use the Select ~rCnmmarni 7'"'"''"~"7" listto add ordeiete users.

fullows:
Step 4
5-30
1111
Add User: Choose this
1111
Delete User(s): Choose this
1111
Lock User(s): An administrator can disable the selected account.
llil
Unlock User: An administrator can enable the selected account.
in and
areas
to add users.
to delete a selected user.
Choose the Add User command to add a user to Cisco WCS for administrative
purposes. You must be logged in as either "root" or "SuperU ser" to create or delete
Cisco WCS administrative user accounts. When adding a user, the following
information is required:
llli
Usemame
Password

Step 5
rI
Confirm Password
Assign the new user to a group in the Groups Assigned to This User field. User
groups are used to assign permissions to the user. Check the appropriate check boxes
to indicate the kind of user. The options are as follows:
Admin: Allows users to monitor and configure Cisco WCS operations and
perfonn all system administration tasks except administering Cisco WCS user
accounts and passwords.
ConfigManagers: Allows users to monitor and configure Cisco WCS

operations.
System Monitoring: Allows users to monitor Cisco WCS operations.
Users Assistant: Allows local net user administration only.
Lobby Ambassador: Allows guest access for configuration and management

only of user accounts.
Monitor Lite: Allows monitoring of the location of assets.
Northbound API User: User group that is used only with Cisco WCS
Navigator.
SuperUser: Allows users to monitor and configure Cisco WCS operations and
perform all system administration tasks, including administering Cisco WCS
user accounts and passwords.
Root: Allows users to monitor and configure Cisco WCS operations and
perform all system administration tasks including changing any passwords. Only
one user can be assigned to this group, and it is determined upon installation. It
cannot be removed from the system, and no task changes can be made for this
user.
User Defined: Allows users to define their own roles and sets of tasks.
l
l
l
Cisco WCS Basics
5-31
Administration > AAA > Groups > Group Name

This subtopic describes how to assign user accounts to a group.
All Groups
Administf'ation > ,L\AA ::> All Groups
Members
to
Use the
to Administration > AAA
1
2
Click
Click an item in the
Note
in the left sidebar menu.

Name colunm to access the
for that item.
A user must have superuser status to access this page.
5-32
user accounts to a group:
This page lets you edit user task
It groups
into related sets.
'-'H""-'Ha the group in the list
Administration > AAA > Users >Audit Trail

This subtopic describes the account audit screen.
r
Trail
r
1-- Select a command --J ~
Users
Administration > AAA > Users
Userl!ame
t<1
5/4/113:09 PM
4/24/1111:55 PM
Group Audit Trail : root

Admnstra!ion
r
r
r
r
r
r
r
r
r
r
r
"AN.~
f~ 5i 1112 ' 30 =;;:=-""""="-"'-'!
!--Select~ command j~
Usera,. Group Audit Trail
...,
mot
Authentication
May"',20113:09:27 PM
Suooess
mot
Authentication
May4,20113:09:271'M
Success
Success
mot
Authenticafum
MaJ4, 21Jl13:09:271'M
rl)ot
Logout
May4,20113:03:4SPM
root
Authentwet1o11
May4,20113:03:17PM
root
lo.gout
May 1,20113:36:59PM
mot
Autheni:Jcatian
MfJyl, 20112:35:44 PM
root
Logout
Ap-r28, 20114:06:14PM
""'
Authentlcation
Apr2B,20112:01<42PM
Success
Log aut
Apr28,20111:03:55PM
Suooess
mot
Success
Surness
The audit trial enables the viewing of a list of user operations over time. It is useful to know
who accessed Cisco WCS server.
Use the following procedure to access the audit trail:
Step 1
Navigate to Administration> AAA.
Step 2
Click Users in the left sidebar menu.
Step 3
Click an audit trail to access this information.
Note
A user must have superuser status to access the audit trail.
The audit trail shows the following information:
Audit Parameters
L
[
User
User-logiR name
Operation
Type of operation audited
Time
Time operation was audited
Status
Success or failure
Reason
Describes the reason why authentication failed
l
L
Cisco WCS Basics
5-33
Configure Cisco WCS logs

This topic describes the Logging
screen.
Ge-neral Logging Options

Ar!rYHnistcatiD!"! .,_ Log9ing Options '""Gmer.a!
element of Cisco WCS administration.

and how much information is contained
and the
of Cisco WCS to
track ofthis
which
of the
To access
.022Jlrl.2.
This window enables the

of Cisco
page is divided into four different
sections:
11
General: Set the minimum level of the messages that will be
as follows:
administration modules can be enabled:
111
Monitor:
111
Fault Analysis: Logs fault analysis infonnation
111111
General:
l!!l
1111
111111
5-34
monitored events
general infommtion
Navigator: Contains logs to debug issues when Cisco WCS does not respond to
periodic polling through the northbound web service application programming
interface (API) from the Cisco WCS Navigator.
Reports: Used to log messages related to creating, saving, scheduling, and
running reports
Database Administration: Contains logs to debug important database-related
operations in Cisco WCS
Communication Protocol: Contains logs to the protocols used in

conununication
UI General: Contains generic user interface validation logs
Administration: Contains administration-based logs, where all the

configuration changes performed using the administration console are logged
Tools: Contains logs related to different plug-in tools
Mobility Services Engine: Logs information about location servers
SOAP Communication: Contains logs that contain the Simple Object Access
Protocol (SOAP) header messages
Log File Settings: The following parameters can be set to control the conditions under
which a restart of logging occurs:
Restart Parameters
Max. file size (bytes)
Maximum size that is allowed per log file
Number of files
Maximum number of log files allowed
File prefix
Log file prefix, which can include the characters "%g" to sequentially
number the files
Download Logs: Click Download to download the log files to the local machine .
Email Log File: Click Email Log File to email the log files to a specified email address .
l
l
L
Cisco WCS Basics
5-35
Configure
isco WCS Files and Settings
This topic describes the administration Settings screen.
Data Management
il.dministration
Settings :::. Data Management
Audit
Client
Tr-a!nd Data Retain Periods

-------~----~---~-~~--~---~--~~------~~-
c:u
Hourlv
.~ggregated
Data Retain Period
Aggregated D.trt.:J Retain
S;n;~
Cisco \VCS
track ofvvireless network events. To save space, it is vital to
individual inforrnation and
that reflect network
Cisco WCS also has
event is
The
page lets you
the
to send emails to users when a
define this process.
to access Data
Use the
retention
Enter the number of

"''""''""'"~"4
111
5-36
Weekly
to retain
for
to
data. The default is 90.
Data Retain Period (weeks): Enter the number of weeks

aggregated data. The default is 54.
Use the following procedure to access Report settings:

Choose Administration > Settings.
Click Report in the sidebar menu to access this window.
The Report window lets you configure the following parameters:
Repository Path: Enter the path for saving the report data files on a local PC. A
user can edit the existing default path.
File Retain Period (days): Enter the number of days to retain the report data
files. The default is 31.
l
l
l
l
l
Cisco WCS Basics
5-37
Hostname/IP
U>emome (Optiocol)
r----
J25'~
~-
p"""'"d
Cisco WCS uses a

functions such as alarms and
to Administration >
2
>Mail Server to access this window.
Enter the Mail Server
SMTP Server: To use an SMTP server,
Hostname/IP
Port
the
Enter the domain name address or the IP address of the Sfv1TP

server.
number tilat is used to contact the SMTP serveL Port
Password
Confirm Password
illl
1111
5-38
Secondary SMTP Server

WCS to use in case the
SMTP server.
A secondary SMTP server can be set up for Cisco

SMTP server fails. The options are the same as the primary
Sender and Receivers: To use global "From" and "To" addresses in all emails that are
generated by Cisco WCS, configure the following parameters:
Send and Receive Parameters
Parameter
Description
From
Enter the email address that is to be displayed to recipients of

emails from Cisco WCS. The existing default address can be edited.
To (comma-separated email
addresses
Enter the addresses of one or more recipients.
Apply recipient list check box
Apply recipients list to all existing alarm notifications or configure

email notification for individual alarm categories.
Test
Sends a test email using the values that are configured in the Mail
Server Configuration page.
t
L
l
L
Cisco WCS Basics
5-39
Define Alarm Frequency and Preferences

This topic describes the Administration User Preferences page.
Admimstrat1on > User Preferences
!d~~!S.~~-~----
Iso
ltems PerL1stPage
Home Pa
Refresh home page components'..t:
17
Refresh horne paye components every~~
jl7"sm"";,---iJ.,.,._
User Idle Timeout

Logout1dle user
Logout1dleuserafter
j60min
Alarms
Refresh Map/Alarms page on new alarm
:::~sh Alarm count
10
the Alarm Summary
~~sa:~~ 6Aiarm Acknowledge Warn1ng
Select alarms for Alarm summ11ry Toolbar
r
jl7"
Jfi.
1 m = , : - - - -.
r
:i4~-At~;;;c~~Qf;Ji;~.-- -]
Alarm Summary
r
The User Preferences window lets you control certain display options in Cisco WCS. Use the
following procedure to set user preferences:
Step 1
Navigate to Administration> User Preferences to open the User Preferences

window.
Step 2
Configure the four categories of user preferences parameters.
User Preference Parameters
List Pages
The number of items to be displayed, such as controllers or APs, can be

set in windows that list these items. Choose the number of items to
display from the Items per List Page drop-down list.
Home Page
Select how often the home page refreshes.
User idle Timeout
Select when Cisco WCS will automatically log the user out when there is
no activity.
Alarms
Refresh Map/Alarms Page on New Alarm: To refresh map and

alarm windows each time a new alarm is generated, check this check
box.
Refresh Alarm Count in the Alarm Summary Every: Select a
refresh interval for the alarm summary.
Display Alarm Acknowledge Warning Message: Select this option
when an alarm warning message is required.
t
L
Select alarms for Alarm Summary Toolbar: Choose the alarms that
are to appear in the Alarm Summary Toolbar.
l
5-40
Summary
This topic summarizes the key points that were discussed in this lesson.
The Cisco WCS main page is organized around a vertical menu, two
horizontal menus, and a main summary page.
The Administration menu lets you manage the Cisco WCS server.
Background tasks can be monitored and stored manually.
TheAAA section of the Administration menu is where administrative
users are defined and managed.
The logging section gives access to log configuration items, such as file
number, size, and location.
To limit the size of the data, the Settings menu allows the configuration
of data aggregation overtime.
The Preferences section lets you define items such as the number of
lines per page and the alarm refresh rates.
r
(
t-l
[
l
L
l
L
l
Cisco WCS Basics
5-41
r
r
r
r
I
t
[
t.
l
[
l
t
l
5-42
t
l
Lesson
31
r
r
Working with Controllers from

Cis,co WCS
,
"'~#.
'""''~.
V
v-" "'I
V'; t.g'Y
The first task in the Cisco Wireless Control System (WCS) is to add the controllers and their
access points (APs). It is then possible to manage them from the Cisco WCS interface.
Although the interface looks and feels slightly different from the controller user interface, the
same configuration options exist. Cisco WCS also has the ability to deploy configuration
elements to many devices in one single click. You can also use it to audit the network to check
for changes. This lesson will give you an overview of these possibilities.
Objectives
Upon completing this lesson, you will be able to manage controllers and APs from the Cisco
WCS. This ability includes being able to meet these objectives:
l
l
L
L
l
l
Add controllers to Cisco WCS
Configure controllers from Cisco WCS
Configure APs from Cisco WCS
Adding Controllers
This topic describes how to add a controller from the Cisco WCS interface.
The
creation
5-44
tab is used to add devices to the Cisco WCS environment. It allows

and APs. It also allows the
the same
r
Controllers
r
r
Configure > ControDers
10.~10.' . .i0 !I
acs2
WLC2100
r
To add a controller, navigate to Configure> Controllers to access this page.
The Controllers page shows a summary of all controllers in the Cisco WCS database. It also
allows a user to perform the following tasks:
r
[
Add, remove, and reboot selected controllers.
Download software from the Cisco WCS server to selected controllers.
Save the current configuration to nonvolatile (flash) memory on selected controllers.
View audit reports for selected controllers.
The data area of this page contains a table with the following columns:
Add Controllers Columns
~Q(Ymn
De$cript1on
Check box
Select a controller by checking the appropriate check box.
L
[
L
L
-- --
----
-----
Local network IP address of the controller. Click the title to sort the
list items. Click a list item to display parameters for that IP address.
Controller Name
Name of the controller. Click the title to sort the list item.
Type
Indicates the type of hartlware platform.
Location
Indicates the location of the controller. Click the list item to reveal a
map showing the location of the device.
Software Version
The operating system number (in release.version.maintenance

number format) of the code currently running on the controller
Mobility Group Name
Name of the mobility or Microsoft Wireless Provisioning Service

(WPS) group
Reachability Status
Reachable or not reachable
Audit Status
Status of the differences between Cisco WCS and the Cisco WLC.
........
IP Address
Cisco WCS Basics
5-45
The Select a Command drop-down menu includes the following options:

Select a Command Options
Option
Description
Add Controllers
Add one or more controllers.
Remove Controllers
Select a controller by checking the check box. Select this command

and click Go.
Reboot Controllers
Select a controller by checking the check box. Select this command

and click Go.
Reboot Controllers and APs

(Swap AP Images)
Reboot controllers and APs by swapping AP images.
(See Note at the end of this table.)
Reboot Controllers and APs (Do Reboots controllers and APs without swapping AP images.
Not Swap AP Images)
(See Note at the end of this table.)
Download Software (FTP)
Select one or more controllers by checking their check boxes,

selecting this command, and clicking Go.
Download Software (TFTP)
Select one or more controllers by checking their check boxes,

selecting this command, and clicking Go.
Download IDS Signatures
Click to download a customized definition file for wireless-related

attacks.
Download Customized
WebAuth
Downloads a Customized Web Auth certificate to the selected

controller
r
r
Download Vendor Device

Certificate
Downloads a vendor device certificate to the selected controller
Download Vendor CA
Certificate
Downloads your own vendor-specific CA certificate to the selected

controller
Save Config to Flash
Saves the current configuration to flash memory
Refresh Config from Controller
Pulls the configuration that is read from the controller to refresh the
values that are seen on Cisco WCS.
Discover Template from

Controller
Cisco WCS searches for associated templates for a controller and

shows the results.
Templates Applied to Controller
Cisco WCS displays a list of templates that are applied to controllers

and shows the details for each template.
View Audit Reports
Compares the controller configuration that is seen on Cisco WCS to

the configuration really present in the controller.
View Latest Network

Configuration Audit Report
View the latest network configuration audit report
Go
Validates the choice
Note
-~
--
--
The two Reboot Controllers and AP options are supported only when the selected
controllers are using version 7.0.x.x or later.
l
[
l
5-46
The top right menu includes the Advanced Search button and the Saved Searches drop-down
list, both of which can be used to search for the following:
Networks
IP address
Controller name
Select a network: Drop-down list (All Networks, xxx.xxx.xxx.xxx)
Searching a controller from this list implies that the controller has already been added to the
Cisco WCS database.
l
r:
l
[
t
L
Cisco WCS Basics
5-47
l
Telnet'SSH Parameters \V
UserN<'lme
jadmln
Password
jr ,-:-,.-.- jr-.,,-,,-:-,- -
Confirm Password
Retries
Timeout
f<H$}
f
r
The Add Controllers screen is set up in three sections: General Parameters, SNMP Parameters,
and Telnet/SSH Parameters.
Adding controllers to Cisco WCS requires the IP address of the controller. Multiple controllers
can be added at one time by using a comma-separated list.
You can set the Simple Network Management Protocol (SNMP) settings that are used for
communications with the controllers.
I
I
Enter the Telnet credentials information for the controller. If you chose the File option and
added multiple controllers, the information will apply to all specified controllers.
Note
The Telnet Secure Shell (SSH) username must have sufficient privileges to execute
commands in CLI templates.
Note
When a controller is added to Cisco WCS, it acts as a trap receiver and the following traps
are enabled on the controller: 802.11 Disassociation, 802.11 Deauthentication, and 802.11
Authenticated.
l
L
[
L
5-48
L
l
Configure the Controller

This topic describes how to configure a controller from the Cisco WCS interface.
., Settings :
contlgure ,.
> 1.!l..,;;!Q.1JQ ,. Properties ,. settmge
Gene"'l Paramot<>rs
WLANs
i=
Software Version
7.0.114.113
11-REAP
Type
WLC2100
Location
Security
Restore on Cold Start Trap
Enable
Contact
~~:~ Refresh on Save Confu;~
Enable
Most Recent Backup
N/A
Save eafore Backup
<f;
"'
~0
Enable
Trap Destination Port
SNMP Parameters '-"f>
r
r
I
Cisco WCS can be used in two ways to configure controllers. The first method is to manually
configure the controller settings on an individual basis. The screen shows the controller
configuration menu options. Each of these options can be configured through the controller
interface or through Cisco WCS. The second method of configuration is through templates.
l
L
L
Cisco WCS Basics
5-49
Configure::::- Controllers> 10.30.1.10 >V\ILANs:::
~'VLANs
:"
WLAHSthedu!eT;i~skO~ail
Svstem
Wl/lNs
Groups
H-REAP
Enabled
podldata
securedata
(Current V=/CS serve; time: 05/09/2011 11:12 ;40 CEST)

~
~,;lost
i'Jo RectJrr-ence:
Daily
('
of the tasks that you "'0''"~'"'"'" on a Cisco WLC you can achieve on Cisco WCS and vice
versa.
The
that can be achieved from within Cisco WCS that
on a Cisco WLC. Cisco WCS enables you to
the status of
you are unable to do
more than one wireless LAN
at a time on a
controller. You can select
WLANs and choose the date and time for that status
to take
To schedule
> Controllers.
controller.
3
FronJ the left sidebar menu, select WLANs > WLAN
Select the check boxes of the WLANs that you want to schedule for a status
"'u'"u~;-.
choose Schedule Status to open the
From the Select a Command

\VLAN Schedule Task Detail page.
Enter a Scheduled Task Name to
1
Select the new Admin Status
or
Select the schedule time using the hours and minutes
lists.
Click the calendar icon to choose a schedule date or enter the date in the text box
5-50
Step 10
Click the appropriate Recunence radio button to detennine the frequency of the
status change (Daily, Weekly, or No Recunence).
Step 11
Click Submit to initiate the status change schedule.
Configuring Controller Templates

This topic describes how to configure templates on Cisco WCS.
r
IV
System
Controller Template Launch Pad

Configure > Controller Templete lounc:h Pad
@General
flij $NMP Com~lU!llty
~sy~
L,1 Network Tirroe PIDtocol
C.enerdl \-"""'
bfiUserRoles
~
AP Userl\larr.e PasSWclfd
[;:,';, AP fl02. 1X Supplicant Cr ...
illi Global CDP Corfil;lur.ation
~.t\'!.9.r.k.Ii.m.r... P.rn.t-;~r.f!.!
&1\DHCP
!Je'il'
;ffi'jDynC~miclnterface
Roammg Parameter" \_:
lliliinterfaceGrotJP$
J;jJQoSProflies
icliAPTimers
lhTlUDit lf!terhlU'> Y'
i.nt~.u.~.r.e.r-11.!!.\!Qfi ,.~
Medii! !arameters
r
Cisco WCS templates let you create a configuration object and then propagate it to one or more
Cisco WLCs on the network. This lets you apply parameters to multiple controllers without reentering configurations, and apply parameters consistently across multiple controllers.
Consider the following when using templates:
Templates can also be used to pull in parameters from controllers that are added to a Cisco
WCS instance.
Template information can be overridden on individual devices.
Templates cannot be used for unique configurations (for example, there is no available
template for IP addressing).
To create a template, use the following procedure:
Stell 1
Navigate toConfigure > Controller TemjilatiLaiinch Pad..
Step 2
Select a template and apply it to the chosen device or devices.
"
"
...
f-
L
L
L
Cisco WCS Basics
5-51
System
WLANs
New Controller Template

l
!0
Configure:. Controller Template Launch Ped:. Security:. RADIUS Auth Servers:. Hew Controlter Templllte
General
Template Name
'IRadlusSewerPdmary
Server Address
110.100.12
[;:iJ General
Port Number
J1812
tilii
Shared Secret Format
lscu
Shared Secret
j.....
Fde Encrypt1on
~ RADIUS Auth Servers
iillJ RADIUS Atct Servers

~RADIUS Fallback
di; LDAP Servers
Admin Status 1.
iilli General-Local EAP
Support for RFC 3576
u1iJ local EAP Profiles
Network User
w.1J EAP-FAST Parameters
Management User
tf~ local fJet Use~
Key WRAP
tllii TACACS+ Servers
ill1i Network Users Pnorlty
Confirm Shared Secret

Enable
P' Enable
I Enable
L~.Jenable
Enable
Retransmit Timeout
r-rse.:;,;;)
IPsec
illiGuestUsers:
Enable
liJ User Login Policies
f
Step 3
From the menu on the left sidebar, select the settings category that the template will
address.
Step4
Select the settings that the template will configure.
Step 5
Choose either an existing template to modify, or create a new template.
Step 6
Choose the settings to set for a category.
Step 7
Save the template.
Step 8
Click the Apply to Controllers button at the bottom of the settings page.
Step 9
Choose the controllers or controller group to which to apply the template, and then
click Apply.
t
l
t
l
5-52
~?.r~-e~
~\!~~N~~
'
~ti-.tt~A~
,~~~Utftr'.
)PAdatU
1o.3o.1.1o
,-
~~
acs2:
Templates can be saved and applied to additional controllers. Templates can be manually
created, or they can be taken from existing controllers. By allowing the current configurations
to be read from existing controllers, existing configurations can easily be copied from
controller to controller. There are separate templates for each configuration screen.
L
l
L
L
L
l
l
Cisco WCS Basics
5-53
Configure APs
This topic describes how to configure APs from Cisco WCS interface .
fb
r_:rn1t:!'.- ,.-
fl"'!::
""
l_i
.$,e>td ~"..,
.ft;:JJ1<"""
;!:id!i'll'S'
~11 1 '*'
[Guk
'it
t,iel~"
f)
Access Point Detail : AP5Q;Jd.~lO.cc3b
Confrgure,. ~ >
ll!M#iMirfflji
General q;
Versions
AP Name
Ethernet MAC
50:3d:e5:fO:cc:3b
Base Rad1o MAC
c0:62:6b:as:aa:lo
Country Code
joE
IP Address
10.30.1.50
Admm Status
P'
Enable
AP Static IP
Enable
Software Version
7.0.114.113
Boot Version
12.4.23.0
l
r
l
jLo~!
AP Mode '4)
Enhanced wiPS Engme
Enable
AP Fail over Priority
Registered Controller
Primary Controller Name
Secondary Controller Name
1-----------iii
rl
Like controllers, most settings for APs can also be configured using the Cisco WCS interface.
To configure APs, use the following procedure:
Step 1
Navigate to Configure > Access Points > Access Point Detail
Step2
Select an AP from the list.
Step3
Configure the settings.
Some of these settings can also be deployed by using templates.
l
5-54
~~--~~----~~~----------
i!t
[{!~<It'"'
.!i..r)rt
"'
o.otAr i:1\'"' ~
_~, '"~~"'
1l. '""n'.-""t~>.-r-."
New Lightweight AP Template

Collftgure
AP Contigura!lon Temp!l'lles
New Ughtwalght AP Telllfl'-te
j""""'""'"",;;---
Template Name
J"".-"""""'1~ra7d i o - , ; : A " ; - - - - - - -
Descnptlon
~ ~ ~
Lightweight AP Template Detail : 'Radlo-AP'

Configure > ftP Configuration TernPates >
,elect 602.11 a
;:J
l)ardnu.Yter:~,
> UghtWeight AP Templete Oeteil
that need:!. to be applied. J2..
;d Power Assignment
Channel Assignment
f.;;J Admin Status i

Q Antenna Mode
f.il
AntaoO' Dimity
;J
Antenna Typo
Antenna N"me ?.
11
I LefVSido B
r'l
~~In:=toSrna=l====:lt':jJ
j AIRANT1000
l"'f'l
;.I'-"o,ia,ble'--------'-'-'1
I
:;a
WLAN Omcide
GJ
Antenna Selection {l
[,J CleaoAic {i
[iJ ChentLink S.
AP and radio templates, like controller templates, allow settings to be applied to multiple APs
at one time.
The new AP template has radio parameters for each radio type.
I
t
The AP template will be based on AP type.

There are three options available when applying a template to APs:
Choose APs from a complete list of APs of the same type, which is defined in the template.
Choose controllers or controller groups. Cisco WCS will apply the template to the APs on
controllers of the same AP type.
Choose from a map hierarchy (a campus or a building or a floor), and Cisco WCS will
apply the template to the APs of the same type in the selected map region.
[
[
l
l
L
L
L
Cisco WCS Basics
5-55
Audits
This topic describes how to run an audit to compare Cisco \VCS settings to device settings.
the
the administrator the

to compare the
held in the Cisco WCS database. There are two audit
111
AP: Direct ,_,v,uum
111
Controller: Direct ~~v,uvu'

entire controller
on a controller to
with Cisco WCS entries

with Cisco WCS
for the
basis to maintain the

of the Cisco WCS
the audit
will show any differences in the
to a controller
which causes the two
items that
from what is stored in the Cisco WCS database will be
Administrators
have the ability to retain either the Cisco WCS configuration value or the Cisco WLC
value.
5-56
201 i Cisco Systems, Inc.
)
Audit Report : acs2
Conf!QUte>~>AudltRepol1
8Aud1t ~performed o~ d~vc~ confgur~t1on ,., WCS dat~b>~ aga'n~t !;.!Jrrel"lt WLC cu'lhgur<ltoor.
To chanQe the -3Udlt >etbnQ:$ gc to f\.df':'_'D'.~\:J~Q.:O..: .. ..~~!l:!!:'.Q.~...- t.;:::;l.tt page.
~or ~eo~rity .-~~>.on~,
the foll:w,;r.g
item~ ~re
not audFted
"SharedK6y> andP6ssword;'"AP
lJ1>':fN<>m~ ~o<j P~~w.oni
'Rc:;:tore WCS
lludi~
Time
~atues
to Controller' wdl try to resolv,- all the belu"'
~hu.;or,
di$CrepanciM or,
dew;o;~.
May 9, 201111:47:13 AM
r
{WLAN)podl/9
(AP Group$VLANs)l0.30.1.10/dBfi!!ult-group
Mismatch
lntarface Milppmg
management
(APGroupsVLANs}10.30.1.10/defaul1:-grQUP
Mism~tch
Profile
podl
f
I
When you select Audit Config, Cisco WCS will compare the controller configuration to the
configuration present in the Cisco WCS database and issue an audit report. Two options are
then available:
Restore WCS Values to Controller: Maintains the configuration as recorded in the Cisco
WCS database, and pushes this configuration to the controller
Refresh Config from Controller: Keeps the controller configuration and updates the
Cisco WCS database
L
[
L
Cisco WCS Basics
5-57
Summary
Managing the wireless network from Cisco WCS implies adding

controllers to the system. APs are brought along automatically.
Controllers and access points can be configured individually or using
templates.
Cisco WCS templates let you create a configuration object, and then
propagate it to one or more Cisco WLCs on the network.
r
r
l
l
[
5-58
Lesson 4j
,.
Working with Preconfigured

Ma. s.
'
'
...
'.lP
.....
'7"
.~~'
~<
r
An important feature of the Cisco Wireless Control System (WCS) is its ability to provide a
graphical representation of the wireless network using maps. Maps can be used to show access
point (AP) coverage or to locate devices. Information can be provided to Cisco WCS to
enhance the accuracy of the coverage area display.
Objectives
Upon completing this lesson, you will be able to work with maps in Cisco WCS. This ability
includes being able to meet these objectives:
l
l
l
L
L
L
Describe how to add, relocate, and remove APs using Cisco WCS
Display heat maps
Display client locations
Add, Relocate, and Remove Access Points

This topic describes Cisco WCS maps and planning features.
Points
M..ru!3.> il..il> F1oot1
RSSI c alar Lookup
loum
Refresh
f
I
Maps are used in Cisco WCS to give a visual representation of the Cisco Unified Wireless
Networking environment. It provides basic location information, or advanced location
information with the appropriate license and a location server. This feature can be useful in
locating devices in the network and for monitoring when devices leave or enter areas. The maps
feature also helps with implementations and planning. Planning mode allows administrators to
get a better idea of how many APs will be needed to cover a given area, building, or campus.
Navigate to Monitor> Maps to use the maps feature in Cisco WCS.
This window provides access to the controller map displays and details. In this window a
campus can be created, and outdoor areas or buildings and floors added. A building can be
created, and then floors can be added. APs can also be added.
l
l
L
5-60
-- Select a command--
System C.;,mpus
Campus
and outdoor area maps to the

AP icons on the maps to show where
and outdoor area
to add APs to floor
maps.
Monitor>
The
page opens.
Tree View or the Monitor >

From the
open the Floor View page.
click the
floor to
Cisco WCS Basics
5-61
3
4
Fro1n the Select a Comn1and """"'-""'un
and click
Go~
On the Add Access Points page, choose the APs to add to the map.
Click OK to add the APs to the map and
5-62
the Position Access Points map.
access points on Floor Area
r
Step7
The Position Access Points page opens.
Note
Each AP you have chosen to add to the floor map is represented by a gray circle
(differentiated by AP name or MAC address) and is lined up in the upper left part of the floor
map.
StepS
An AP can be positioned one of the following ways:
Click and drag each AP to the appropriate location. APs turn blue when
selected.
Click an AP. In the position bar, specifY the Horizontal, Vertical, and AP Height
of the AP.
L
L
L
l
L
Cisco WCS Basics
5-63
r
r
Make sure each AP is in the correct location on the map and has the correct antenna orientation.
Accurate AP positioning is critical when you use the maps to find coverage holes and rogue
APs.
Step 9
Step 10
When selecting the AP, the AP details display on the left side of the page. AP details
include the following:
AP Model: Indicates the model type of the selected AP.
Protocol: Select the protocol for this AP from the drop-clown list.
Antenna: Select the appropriate antenna type for this AP from the drop-clown
list.
Antenna or AP Image: The antenna image reflects the antenna that is selected
from the Antenna drop-clown list. Click the arrow at the top right of the antenna
image to expand the image size.
Antenna Orientation: Depending on the antenna type, enter the Azimuth and
theElev_ation .orientations_in.degrees.. The_ A zim11th _optiondoe_s_notappearfor
every antenna.
When you are finished placing and adjusting each AP, click Save.
Cisco WCS computes the RF prediction for the coverage area. These RF predictions are
popularly known as "heat maps" because they show the relative intensity of the RF signals on
the coverage area map.
l
l
l
5-64
L
L
Floor VIew
Monitor> ~> ~>
12Y&!irull>
ground floor
r
r
10.30,1.10
r
(
APs can be removed from a map at any time. When you remove an AP, the RF prediction is
automatically recomputed.
Step 1
From the Select a Command drop-down list, choose Remove Access Points, and
click Go.
Step2
On the Remove Access Points page, choose the APs to remove from the map.
Step3
Click OK to remove the APs from the map.
L
[
L
l
Cisco WCS Basics
5-65
Display Heat Maps

This topic describes how to turn heat on or off.
Floor View
Monitor>~,.~,.~"
jRecomputo RfPNldiction ...

groundflo!Jf
0Data may bP. d'll<!yed up to 1S rnmutQs or more dependmg on b<tckyruunc! polling interval
-$
Access Points
~ AP Heatmaps
P jgl
Clients
P" t!)
fi? II
RogueAPs
ra.
i P IJ
!f'
:r
:r
602.11 T<1gs
Rogue Clients
1lJI "c"'
~~"
"1.
~~-Chokepoints
:r,.
'rill
D!spta.,. MSE data within last
The RF prediction that is done is based upon the map, and on the effort the administrators have
put into the map. The map editor is used to create walls, doors, windows, and obstructions. If
done properly, the Cisco WCS map will use the data in the RF prediction algorithm to provide
a very accurate RF heat map.
The map is interactive, so as objects on the map are scrolled over, more information about that
object appears in a pop-up. Also, if an object such as an AP is clicked, the monitoring page for
that particular object is displayed. This feature allows easy access to the device statistics.
The map is automatically refreshed by default every 5 minutes. The setting can be changed by
clicking the Auto Refresh drop-down arrow.
l
l
L
5-66
l
l
I.J
P' -$ Access Points

P' ~ AP Heatmaps
b
>
Floor View
Monitor , flliilll. , System Campus , buildinq1 , grm
6 Data may be delayed up to 15 minutes or r
~ Clients
Contributing APs
P'
~ 802.11 Tags
Heatmap Type
ro
ru
I Air Quality (('
Total APs: 1
rill
r
r. Coverage Q;
13
P' !ielect/Deeleo::t All

Cl'/~~tageArea~"
!fiili
Loc.,i:icn
P' AP503d.e5fO.cc3b (Local)
Cisco WCS computes the RF prediction for the coverage area. These predictions are popularly
known as heat maps because they show the relative intensity of the RF signals on the coverage
area map.
Using the Floor Settings tool, you can change the results of the heat map.
When you enable the AP Heatmaps floor setting and click the blue arrow to the right of the
Floor Settings, the Contributing APs page opens with heat map filtering options.
AP Heatmap filtering options include the following:
Heatmap Type: Choose IDS (this information is only displayed if you have configured an
intrusion detection system [IDS]), Coverage, or Air Quality. If you choose Air Quality, you
can further filter the heat map type for APs with average air quality or minimum air quality.
Click the appropriate radio button.
Note
Note
Minimum Air Quality Index (1 to 100): The minimum air quality for this radio channel. An air
quality index (AQI) value of 100 is the best, and 1 is the worst.
If you have monitor mode APs on the floor plan, you have a choice between IDS or
coverage heat map types. A coverage heat map excludes monitor mode APs.
L
L
l
Cisco WCS Basics
5-67
Detected lnterferero'
Max, Interferers /!abe!
The results of the heat map can be

click the floor
and click the blue arrow to the
Access Points page opens \vith the
AP
111
Show: Choose to
the radio status or AP status.

select which radio
Note
Choose your
of the Access Points. The
1l
to
The
select what
tor the
information is
APs on the map

the Cisco Radio channel number or Unavailable
the AP is
The available cha11ne!s are defined

country.
Tx Power Level:
the current Cisco Radio transmit
1 being high) or Unavailable
AP is not connected).
power level
Channel and Tx Power:

both the channel and transmit power level
Unavailable if the AP is not connected).
Coverage Holes: Displays a percentage of clients whose signal has become weaker
until the client lost its connection, Unavailable for unconnected APs, or
MonitorOnly for APs in monitor-only mode.
MAC Addresses: Displays the MAC address of the AP, and whether the AP is
associated to a controJ!er.
Names: Displays the AP name. This name is the default value.
5-68
,
,
Profiles: Displays the load, noise, interference, and coverage components of the
corresponding operator-defined thresholds. Displays Okay for thresholds that are not
exceeded, Issue for exceeded thresholds, or Unavailable for unconnected APs.
CleanAir Status: Displays the CleanAir status of the AP, and whether CleanAir is
enabled on the AP.
Controller IP: Displays the IP address of the controller to which the AP is

associated, or Not Associated for disassociated APs.
Utilization: Displays the percentage of bandwidth that is used by the associated
client devices (including receiving, transmitting, and channel utilization). Displays
Unavailable for disassociated APs and MonitorOnly for APs in monitor-only mode.
Average Air Quality: Displays the average air quality on this AP. The details
include the band and the average air quality.
Minimum Air Quality: Displays the minimum air quality on this AP. The details
include the band and the minimum air quality.
Average and Minimum Air Quality: Displays the average and minimum air
quality on this AP. The details include the band, average air quality, and minimum
air quality.
l
)
Associated Clients: Displays the number of associated clients, Unavailable for

unconnected APs, or MonitorOnly for APs in monitor-only mode.
RSSI Cutoff: From the drop-down list, select the Received Signal Strength Indicator
(RSSI) cutoff level. The RSSI cutoff ranges from -60 to -90 dBm.
Show Detected Interferers: Select the check box to display all interferers that are detected
by the AP.
Max. Interferers/label: Select the maximum number of interferers to be displayed per

label from the drop-down list.
Click OK when all applicable filtering criteria are selected.
Cisco WCS Basics
5-69
ml
~,
Editing
Floor VIew
MonHor > M!m.t> ~> t!!.!ll!;lng1> ground floor
0 Data may be delayed up. to 15 minutes or more dependmg on background
1
After Editing
1
1
]
This figure shows an example of a heat map before and after making Floor Access Point RSSI
cutoff changes.
5-70
The yellow ic?n indicates a nAP with minor~ault. The top

half of the circle re.presentsthe ?ptiorJ'r;ll.aq2;11 a Cisco
Radl(). Tne boftortrh~lfbfttw circle r~presents tne state of
tne 802.11 big QisQoRadlo.
The red icon indicates an AP with a major or critical fault.
The top half of the circle represents tne optional802.11 a
Cisco Radio. Tne bottom half of the circle represents the
state of the 802.11 b/g Cisco Radio.
The grayed-ou:ticon with a question malt 1nthe middle
repres.ents /'iln 1Jnr.eacnableAP.It is gray b.ecause its stat\ls
cai:ln ot be deterinln ed.
Because the AP icon color is based on the AP status, the icon color may vary depending on the
status selected. The default on floor maps is radio status.
Icon
Description
The green icon indicates an AP with no faults. The top half of the circle represents
the optional 802.11 a Cisco Radio. The bottom half of the circle represents the state
of the 802.11 b/g Cisco Radio.
The yellow icon indicates an AP with a minor fault. The top half of the circle
represents the optional 802.11a Cisco Radio. The bottom half of the circle
represents the state of the 802.11 b/g Cisco Radio.
Note: A flashing yellow icon indicates that there has been an 802.11 a or 802.11 b/g
interference, noise, coverage or load Profile Failure.
The red icon indicates an AP with a major or critical fault. The top half of the circle
represents the optional 802.11 a Cisco Radio. The bottom half of the circle
represents the state of the 802.11 b/g Cisco Radio.
The grayed-out icon with a question mark in the middle represents an unreachable
AP. It is gray because its status cannot be determined .
.J
The grayed-out icon with no question mark in the middle represents an AP that is not
associated to any Cisco WLC.
The icon with a red "x" in the center of the circle represents an AP that has been
administratively disabled.
~
~~
The icon with the top half green and the lower half yellow indicates that the optional
802.11a Cisco Radio (top} has no faults, and the 802.11 b/g Cisco Radio (bottom}
has a minor fault. The worst of the two Cisco Radio colors determines the color of
the large triangular pointer.
Cisco WCS Basics
5-71
---~---,~~---~~-~---~~~-
5-72
implementing Cisco Unified 'Wireless Networking Essentials (!UWNE) v2.0
IS
This
describes how to
a client location on a map.
bar
this
this
the network
I\tonitor :>
1\P n1ap location_
201 '! Cisco Systems, !nc
The results
wm
the AP
Cisco WCS Basics
the
rnap~
not all i\._Ps
environment Ar
5-74
implementing Cisco Unified Wireless Networking Essentials (IUWNE) v2.0
rr1H]/
three
Summary
On each floor, APs can be added, relocated, and removed.

Maps are used to monitor the AP coverage and locate clients.
Once APs have been added to Cisco WCS, the heat map can be
displayed.
l
)
Cisco WCS Basics
5-75
--~---~~~~-----~----~~~-~------~
Implementing Cisco Unified Wireless Networking Essentials (iUWNE) v2.0
i Cisco Systems, Inc.
Lesson
sl
Monitoring the Network with

Cisco WCS
Overview
As a single point of management and control over the wireless network, the Cisco Wireless
Control System (WCS) offers many features to increase the efficiency of day-to-day network
monitoring and management. First, the Cisco WCS home page can be personalized so that
users will see the main events relevant to their roles. Also, each item in the wireless network
can be monitored directly or through combined summaries.
Objectives
Upon completing this lesson, you will be able to monitor the network and locate devices with
Cisco WCS. This ability includes being able to meet these objectives:
11
Personalize the Cisco WCS home page
11
Use the Alarms dashboard in Cisco WCS
11
Use alarms to display events and track devices in Cisco WCS
11
Generate reports in Cisco WCS
r
This
describes how to add or edit content on the Monitor page.
-The 1\!Jonitor page is '\Vhere the

a different c1nd custon1.izable h.ome page.
Edit
'The
oftabs a"/ai1alJ1e n--om the
the adrninistrators
(~ieneral
rtl
(:ontextA~\vare
Note
To enable C:ieanf.ldr on Cisco VVC;S, you nr::ed

To enable Contexi:J'\ware on Cisco
have
you need to
a.
C~sco VVC~S
Plus license
~nstalh;;d,
services
added to Cisco VVCS.
5-78
implementing Cisco Unified Wireless
Netwm~k
Essentials (iUWNE) v2.0
2011 Cisco Systems, inc.
Edit Tabs
I,..--------
1/1/CS Home > Edit Tabs
New Tab Name

Tab Order
General
Client
Security
Mesh
Clean Air
ContextAware
Enter the name of the new tab being created. Click Add. The new tab name appears in the Tab
Order window. Click the tab name in the Tab Order window and assign placement by clicking
Move Up or Move Down. Adding a tab is the only function that does not require a save after
its operation. When clicking Delete, Rename, Move Up, or Move Down, you must click Save
for the changes to be applied. If it is necessary to return to the factory defaults at any time, click
Reset to Factory Default.
2011 Cisco Systems. Inc.
Cisco WCS Basics
5-79
Edit Content
the
to
5-80
-----------------------
Implementing Cisco Unified Wireless Network Essentials
(IUW~JE)
v2.0
20i
Cisco Systems, Inc.
WCSHome
-~~h;F~(J---~Ii_~-~-~~---.(~~~-Cu~--- .f--.~~-~_h__ .! ... ~~~-~~-~i-~j___ Cnfi~~!~-~-~-~ ..j
0 2
iUwNE
AP3Qin.TakenTime
10dH:Ih44m2:9<
With a personalized home page, users connecting to Cisco WCS immediately see the
information critical for their role. This increases the efficiency of each role by providing only
crucial information where it is needed.
Cisco WCS Basics
5-81
h
This
describes the Alarm dashboard.
Three levels:
Yed!ovv
rninor alarrn
= ;naior a!arn1
Red= critical alann
When Cisco
the user interfi1ce
'\/
'
implementing Cisco Unified Wireless Network Essentials (!UWNE) v2.0
2011 Cisco Systems, inc.
Alatm Sutnmary '-~
ll
46
Access Points
tontrollel\0
Coverage Hole
Me-hUni!s
Mobility Services
Perfurtnance
Rogue AP
44
MalidousAP
Unclassified AP
44
Security
.i
wcs
To view a summary count for the various types of alarms, click the blue down arrow in the
Alarm Summary page to expand the alarm summary.
Click any of these alarms to display details about the alarms:
11
Access Points: Displays counts for AP alarms such as AP Disassociated from Controller,
Thresholds Violation for Load, Noise or Interference, AP Contained as Rogue, AP
Authorization Failure, AP Regulatory Domain Mismatch, or Radio Card Failure.
11
Controllers: Displays counts for controller alarms, such as reachability problems from
Cisco WCS and other controller failures (fan failure, Power over Ethernet [PoE] controller
failure, AP license expired, link down, temperature sensor failure, and low temperature
sensed).
11
Coverage Hole: Displays counts for coverage-hole alarms generated for APs whose clients
do not have enough coverage, which is set by thresholds.
11
Mesh Links: Displays counts for mesh link alarms, such as poor signal-to noise ratio
(SNR), console login, excessive parent change, authorization failure, or excessive
association failure.
11
Mobility: Displays counts for location alarms such as reachability problems from Cisco
WCS and location notifications (In/Out Area, Movement from Marker, or Battery Level).
11
Malicious AP: Displays counts for malicious rogue AP alarms.
11
Unclassified AP: Displays counts for unclassified rogue AP alarms.
11
Security: Displays counts for security alarms such as Signature Attacks, AP

Threats/Attacks, and Client Security Events.
11
WCS: Displays counts for Cisco WCS alarms such as email failures and license violation
alarms.
l
l
Cisco WCS Basics
5-83
ti
to
Sl
This
ispl
describes how to
events and track devices.
windovi
a1arn1_
d.ashbo.ard"
5-84
Implementing Cisco Unified \/Vireless l<etwork Essentials (IUWNE) v2.0
Alarms
Parameter
Description
(Check box)
Lets you select one or more alarms. You can take action on selected alarms using the Select a
Command drop-down menu.
Severity
Displays a color-coded alarm severity level, as follows:

Red upward triangle = Critical
Orange downward triangle = Major
Yellow circle= Minor
Failure Source
Displays the name and IP or MAC address of the device for which the alarm was generated.
Owner
Displays the name of the person to whom this alarm is assigned, if one was entered.
Date/Time
Displays the date and time that the alarm occurred.
Message
Displays a message explaining why the alarm occurred.
Acknowledged
Displays whether the alarm is acknowledged by the user.
Category
Displays the assigned alarm category, such Rogue AP, Controller, Switch, or Security.
This column does not appear by default. You can add this column to the table in the Edit View
window. To go to the Edit View window, click the Edit View link.
Condition
Displays the current condition that caused the alarm.

This column does not appear by default. You can add this column to the table in the Edit View
page.
J
J
When there are multiple alarm pages, the page numbers are displayed at the top of the page
with an arrow on each side. Use these arrows to view additional alarms.
To add, remove, or reorder columns in the table, click the Edit View link to go to the Edit View
window.
'
.J
Cisco WCS Basics
5-85
an alarrn.
select a con11nand and click Go,
the
current
ilii
Gear: Clear
from
WCS and you can search for all
can choose to
ilii
the
Alarms > Email Notification page where you can view
email notifications,
Entail Notification:
and
5-86
alan11.
an
lrnplernentlng Cisco Unified Wireless Network Essentials (IUWNE) v2.0
201
Cisco Systems, Inc.
arm Details: Rogue AP ~ Clsco:fe:a5:61

onttor>81ll!:r:n;i>AIEif"mDetK!!
Rogue MAC Addre>S
00.26:9"S:fe:a5:6l
Rogue Type
Controller: No, Switch Port Trace Not traced

AcknowledQed
Cla<<flc:l'ltinnType
Rad1oType
St>ongastAP RSSI
No. of Rogue Clients
May 5, 2011 7:56:19PM
, Lest Seen Time
Mtty 10,201112:0:2:42 PM
Generated By
Sev.,nty
GMmor
Rogue AP Events
Marll!or>~>R.ogueAPEvents
"
Rogue
MAC Ad!fres~
Vendor
Q.Q.;...;.C<2Lf.;.ii~...1.
Claslliti@!OIIT'!Jitt
Uncl11ssifu:-d
""""""'"'
1Jr~clas511ied
Cf~ca
Unclas~ified
._r,..
- S/10/1112:02:42 PM
Alert
""'
5/10/1112:02:42 PM
Alert
Lab02Z3
5/10/1111:52:21 AM
Removed
Lab0223
The Events page enables you to review history of information about alarm events. Events list
the sequence of occurrences for an element over time.
To open the Alarms Details page, follow these steps:

Step 1
In the Alarm Details page, click the device that you want to view. The Rogue AP
Alarm Details page appears.
Step 2
Click Event History.
Step 3
The Events page appears.
Cisco WCS Basics
5-87
n
This
rtsin
describes how to
in Cisco WCS,
on
for
'The
the
iill
Historical: This
database.
iill
Trend: This
retrievc~s
access
'"""~ ...-~
!ill
1111
5-88
fro1r1 the
data
all Cisco \VCS
1.-aunch -Pad: This itenJ is the hub for all C:isco \VCS
create nevv' reports,
and stores it 1n
(~isco
saved and
From this page, you
Scheduled Run Results: This item allows you to

scheduled runs in Cisco WCS.
Saved
Cisco WCS.
you to access and n1anage all
Implementing Cisco Unified Wireless Network Essentials (IUVVNE) v2,0
2011 Cisco Systems) Inc.
1
1
Pad
1
l
cl~<tnAir
Client
Comptianc~;
ContextAware
Jill AP lm3ge Predownload
Report Launch Pad

Report launch Ped
Cko.nAir
~tA<;.~P.!llii*--~-li!_tl,!_J;;
:i~.t!!rRv_.!U.t>.k.ln!K.tf.~..t.r.z ~,....;
~-
J!Y!i.!iL~.ffi.9.~!~ti9.!1 '..--'
!~6'N
.W.!!".tii.~.t!~.O'.II.ftiit.. 1.\~li \,-'
kt'i'~~
.Q.!!.!'I.'ft.[f!.Uill ~~-
!Sft.\"!
fif.!:'l-
'"""'
Me$h
N:.'w
\l'.liY.!
J:i!?.W,
~MfiJ.f<.tt~_!;Jl.~.'!!!i
\-...;
i!BfJPStJmmary
Guest
,_
~-
W.ortt!nta!f,csr:.:
@;APProfileStatus
j~U:Iirl.atlon
GU1!:9t:
A!r..!.l!H!.I!b'....tl...!lm~ Y
Meoh
!:4:.'6'.
.tl.'i'.\'f.
.BJ~t>J:!J.~1.!.:!;lJ:.Elflt 'v'
Client !i~ss!uns Y'
il!.f:Yt.
Unk -;,tats. v'
t!.'.':~
bli~llt li!!W!!H~I-)t:
"Ju~>
~y-)
!:!26:
t:@.~
~;.H.~~nt.ru!.n! ~~
Network Stirhmarv
PeriOrm~nee
:t1i!!rtt.Iril'.tf.i.f y-'
p_.gf.k.f!Uiif!.tf.
seburity
~CUF.".!i!.:Ir.ilffi.L2t!:fl-.!'!f!J.. ~l.-r<Xrl.r.:i
11.~
5.tr.?!.n:9...'.'J!.l\P.;<;. "-'
"'"""
"t<-'
!is:..~'!:_
~~
The Report Launch Pad provides access to all Cisco WCS reports from a single page. From this
page, you can view current reports, open specific types of reports, create and save new reports,
and manage scheduled runs.
Cisco WCS Basics
5-89
> Inventor-y Report Oet<!ll:!i
Sc~dule
RepcHtTitle
lin~~ni''V Rp~rt
Report Type
! Cornbtned rnventot;:-::}
SchedtJiing
Enable
Em.oil\
Export Format
Customize Report
Destmatfon
GS/10/2011
rt-'ioflthly
can be saved to be mn at a later date. You can also save and mn the
the
in CSV or PDF fonnat. The
1s an ""''"'H~H'-' of
follow these
>
Choose
Scroll to Device.
Click
Click New.
In the
Launch Part
Details page, enter the

enter a
name.
down list
ltll
Step 6
5-90
Customize
Allows you to customize the
results
fields and
how the
data is sorted.
and
Click Save and Run.
Implementing Cisco Unified Wireless Network Essentials (IUWNE) v2.0
1
Data ~eli.b: to include
Contro!ler!i/~:~me
IP Addre:>s
location
Interfaces
Reach.;.bility status
RFGroup
Neighbor Name
Neighbor Port
Neighbor Address
Duplex
(";' Ascending (" Descending
(.: As~;;endin!:l (" Desc;endinq

t:'!.' Aseendit'l ~ De$~dtnq
Ascending (':. Descending
0~111 f>!"ft~M:t in t~I>U"hrfo,m~t ,.~,, b~ s"'~-..<1.
On!v field;<
1
I
J
that~~""" ~?rt~<i app~"''
in
th~ l'ei~~tlm<r m<>n~~-
The Create Custom Report page allows you to customize the report results. From the Custom
Report Name drop-down list, select the report that you intend to run. The Available and
Selected column heading selections may change depending on the report selected.
Note
In future releases, all reports will be customizable.
To customize a report, perform these steps:
Step 1
From the Report View drop-down list, specifY if the report will appear in tabular,
graphical, or combined form (both). This option is not available on every report.
Step 2
Use the Add> and< Remove buttons to move highlighted column headings
between the two panels (Available Data Fields and Data Fields to Include).
Step 3
Use the Move Up or Move Down buttons to determine the order of the columns in
the results table. The higher the column heading appears in the Selected Columns
list, the farther left it appears in the results table.
Step4
In the Data Field Sorting section, indicate your sorting preference by choosing
fields and the sort order (Ascending or Descending).
Step 5
Click Apply to confirm the changes, or Reset to return columns to the default, or
Cancel to close this page with no changes made.
Note
The changes that are made in the Create Custom Report page are not saved until you click
Save from the Report Details page.
Cisco WCS Basics
5-91
> Utili~ation Report Details
!>c:heduie.
Scheduling
Export
Enable
For~n.3t
Destination
C" Email!
Start Date!Trme
Fcom ~--
lt<oJ/to~
:;)
fi"'3 : f4'0:iJ
Currer;t SO<rver Tirne: 85/10(;2011
:;J [:7.iJ , F.iJ
v;:
~---:;]
CEST
No
can be scheduled to run. The

Choose
>
Scroll to Device.
Click lJtilization.
Click New.
In the
Lm.llnch Pad.
Details page, enter the
name.
list.
list
Criteria: This
the
allows you to sort your results

selection made.
IIlii
Reporting Period:
IIlii
Customize Report: This parameter allows you to customize the report results
by adding and removing fields. The Data Field
section allows you to
determine how the report data is sorted.
the
from which you want to run the report
The Schedule parameters allow you to control when and how often the report runs:
IIlii
Enable Schedule: Select the check box to run the report on the set schedule.
1111
Export Format: Choose your format for exported files
11
5-92
Destination: Select your destination type

file location or the email address.
or
or
Enter the applicable
,
1
Note
The default file locations for CSV and PDF files are as follows:
/wcs-ftp/reports!lnventory/<ReportTitleName>_ <yyyymmdd>_ <HHMMSS>.csv
/wcs-ftp/reports/lnventory/<ReportTitleName>_ <yyyymmdd>_ <HHMMSS>.pdf
"1
1
Start Date/Time: Enter a date in the provided text box or click the calendar
icon to open a calendar from which you can choose a date. Select the time from
the Hours and Minutes drop-down lists. The report will begin running on this
date and at this time.
Recurrence: Enter the frequency of this report.
No Recurrence: The report runs only once (at the time that is indicated
for the Start Date/Time).
Hourly: The report runs on the interval that is indicated by the number of
hours you enter in the Entry text box.
Daily: The report runs on the interval that is indicated by the number of
days you enter in the Every text box.
Weekly: The report runs on the interval that is indicated by the number
of weeks you enter in the Every text box and on the days that are
specified by the selected check boxes.
Step 6
Click Save. The report will run on schedule as specified.
1
J
Cisco WCS Basics
5-93
Report
Cl~h,o.i.
Busiest Clients Reports
t11~i
Reports > Report launch Pad > Client > Busiest Clients 'v-'
tinttl%1 ~.1 ?'~'.t

I{ 1 :J!l'" ~ H- \>i-
@Busiest Clients
L~Cieni:Count
ill] Ckmt semms
!;ilictentSlJIYlmary
r ~~~iu-
'~riPe ,~...,5t#~ll .;;:.,.~
r z~-Ilti..: ~n::~t
~.!!bled ~rs.f/201111:10:00 ~~~~~~~!JEST
,..;,_,ti,...~
1/'J
,
,
,
ill,lc;:HentTrafflc
tillclientTrafflc:str ...
@Throughput
~Unique Clients
lJ~VSCftentstatlstlcs
Reports that have been saved for a specific report type can be accessed from the Report Launch
Pad.
To access current or saved reports from the Report Launch Pad, follow these steps:
Step 1
Choose Reports > Report Launch Pad.
Step2
Choose the specific report from the left sidebar menu or from the main section of the
Report Launch Pad. The page displays a list of current reports for this report type.
5-94
1
1
.,
Results
~,
Scheduled Run Results

Reports >Scheduled Run Results
Ri.~,.jr...
1
J
J
ft~ll:~t~J.i.~J::.tli ...::
!!.~m;
Busiest
Clients
Saved to Busiest_Clients__IUWNE_Z:0110510_111000_066
L-ltihzabon ltJW~JE
Utilization
Saved to utilization_IUWNE_20110510_110500_026
To view all currently scheduled runs in Cisco WCS, choose Report > Scheduled Run Results.
The Scheduled Run Results page displays the following information:
Report Title: Identifies the user-assigned report name.
Report Type: Identifies the specific report type.
Status: Indicates whether the report ran successfully.
Message: Indicates whether this report was saved and the filename for this report (if
saved).
Run Date/Time: Indicates the date and time that the report is scheduled to run.
History: Click the History icon to view all scheduled runs and their details for this report.
Download: Click the Download icon to open or save a .csv or .pdf file of the report result.
Cisco WCS Basics
5-95
Saved Reports
Reports >Saved Reports
Busiest C!ients
Inventor-y
Inventory
Utllizatror.
Enabled
05/11/201111:10:00 CEST
The Saved
05/10/2011
page
the
CEST
Identifies the
To open this page in
infonnation:
Title: Identifies the
5-96
Ruo How
Enabled 05/15/201110:35:00 CEST
f$1 Expwed
(i Erp!red
page, you can create and manage saved

>Saved
Cisco
Dnwntosd
0'3/10/201111:10:00 CEST
name.
"IJ'-'-'lLl'-'
il!ii
Scheduled: Indicates whether this
is enabled or disabled.
11
Next Schedule On: Indicates the date and time ofthe next scheduied run for this
!lili
:Last Run: Indicates the date and time of the most recent scheduled nm for this
!lili
Download:
il!ii
Run Now: Click the Run Now icon to
the Download icon to open or save a .csv file of the
Viewing or Editing Saved Report Details
To view or edit a saved report, follow these steps:
l
l
Step 1
Select Report > Saved Reports.
Step2
Click the Report Title link for the appropriate report to open the Report Details page.
Step 3
From this page, you can view or edit the details for the saved report.
Step4
When all report parameters have been edited, choose one of the following:
Save: Click to save this report setup without immediately running the report.
The report will automatically run at the scheduled time.
Save and Run: Click to save this report setup and to immediately run the report.
Run Now: Click to run the report without saving the report setup.
Cancel: Click to return to the previous page without running or saving this
report.
Delete: Click to delete the current saved report.
Running a Saved Report

In the Reports > Saved Reports page, click Run Now for the appropriate report.
Cisco WCS Basics
5-97
Summary
Cisco WCS has a home page that is unique to each user and can be
personalized.
~
Cisco WCS has a an Alarm dashboard where alarms are grouped and
displayed.
Alarm events can be displayed and devices tracked.
The Reports dashboard can
5-98
various
of
,
1
1
1
l
]
Lesson
61
Working with Cisco CleanAir in

Cisco WCS
Overview
The first enterprise Wi-Fi networks were an added convenience that was used for web surfing
in the lobby or conference rooms. For these applications, a best-effort level of performance was
acceptable. Now, Wi-Fi has matured to the point that it is being deployed for many missioncritical applications, and increasingly being used for voice and video, two applications that are
sensitive to the impact of interference. In enterprises of today, Wi-Fi networks are expected to
run with very high reliability. It is no longer acceptable for Wi-Fi networks to have unexpected
downtime due to interference. This lesson focuses on configuring the Cisco Unified Wireless
Network for Cisco CleanAir technologies, including interaction with the Cisco Wireless
Control System (WCS).
Objective
Upon completing this lesson, you will be able to describe and configure the Cisco CleanAir
technology. This ability includes being able to meet these objectives:
Understand the Cisco CleanAir solution
Describe the unique Cisco CleanAir concepts
Describe the three modes in which Cisco CleanAir APs are capable of operating
Configure CleanAir on the WLAN controller
Describe how to configure the Cisco WLC for Cisco CleanAir monitoring and reporting
Cisco CleanAir Technology

This topic introduces the Cisco CleanAir solution.
Uniquely identify and track multiple interferers

Assess unique impact on Wi-Fi performance
" Monitor air quality
feature of the Cisco Unified Wireless Network that

streamlines
and
wireless '"'"'rt"""''"'"
the wireless
Standard Wi-Fi chipsets are an.uvau'"
not IEEE 802.11-based. To overcome the
limitations inherent in standard Wi-Fi
Cisco first introduced the Cisco
tooL
CleanAir is a natural
distributed cw"''""'""'"
but very different
it is siroilar to Cisco
Cisco has taken the ''-'-'HH'VRI
it
into the mtra;;;tm
This cannot be done witb a standard Wi-Fi
and is a
omne11t that demonstrates that wireless has transitioned from nice-to-have to businesscritical in the enterprise.
The heart of the CleanAir

is the Spectrum Analysis Engine
the spectrum
on a chip. The
chipset is always online, SAgE scans are performed once per
second. If a Wi-Fi preamble is detected, it is passed through to the chipset directly and is not
affected by the parallel SAgE hardware. No packets are lost during SAgE scanning. SAgE is
disabled while a Wi-Fi packet is processed through the receiver. SAgE is very fast and
accurate. Even in a busy environment, there is more than enough scan time to
assess
the environment.
5-100
1
1
1
1
1
J
I
I
l
J
Wi-Fi is no longer just a convenience technology that is used for casual web surfing or simple
connectivity from conference rooms. With 802.lln, wireless performance is now on par with
wired networks, allowing enterprises to transition more business-critical applications like voice
and video to the wireless LAN (WLAN). However, today's wireless is a crowded space. With
many unlicensed devices competing for the available bandwidth and more business-critical
applications being deployed on the WLAN, interference from non-802.11 devices becomes an
issue that must be addressed.
Traditional Wi-Fi chipsets evaluate the spectrum by tracking all of the energy in the airwave
that can be attributed to their own transmissions or that can be demodulated as another 802.11
radio transmission. Any energy that remains in the spectrum that cannot be demodulated or
accounted for by receive or transmit (Rx or Tx) activity is lumped into a category called noise.
In reality, much of the noise is actually remnants of collisions or Wi-Fi packets that fall below
the receive threshold for reliable demodulation. This noise can come from many sources. Some
of which include: microwave ovens, cordless telephones, wireless video cameras, Bluetooth
and ZigBee devices, game controllers, fluorescent lights, or outdoor wireless links such as
WiMax.
The presence of any of this noise can result in your WLAN experiencing the following:
Low data rates
Lack of coverage
Poor voice or video quality
More support calls
Higher operational costs
Potential security issues such as non-Wi-Fi rogues
Intentional or unintentional RF jamming or denial of service (DoS) attacks
Cisco WCS Basics
5-101
Controller
Configures CleanAir APs
Maintains air quality database for attached APs
Consolidates individual air quality reports
Generates performance I securfty traps (alarms)
Maintains interference cluster db

Consolidates cluster reports
-~--::---1 ~z!~~~:~:~~:;;;~~ ~~~~:~:r~~sLC
With
soft\vare and hardware

are able to
measure Wi-Fi
and
non-Wi-Fi sources of channel interference. It
the
the source, locate it on a map, and then make
wireless coverage
Radio
With
if an interference source is
to
will
channels within 30 seconds to avoid
the
the interference and resume client
on another channel outside of the affected area. The
or wireless video
remembers intermittent interference from a microwave oven,
camera and
the channels where these devices
to '""'~"''"t
of the Cisco Aironet 3500
and the Cisco 3300
the CleanAir feature is
available on
on Cisco Aironet 3500 Series Access Points that are
Cisco WCS and
access to real-time and historic
about devices and assets that are located
in the wireless network Now IT managers can enforce
and
take action to
"'"'"~""'"'" network
based on
infonnation.
is enabled
5-102
,
1
Networks
~
1\11 obility Services
Engine (NISE)
1
1
Multi-interferer detection &

classification
Historical trending of air quality

and policy enforcement
Radio troubleshooting and

automatic interference
mitigation
Visibility into the performance

and security of the wireless
network
Air quality by AP
Locate physical DoS attacks

and hidden rogues
Air quality alarm threshold

SNMP interference traps
Monitor and alarm when

unwanted devices are present
Location tracking of
interferer and zone of
impact
Merges and correlates
interference data at a
system level
Historical reporting and
trending allows proactive
interference management
Third-party MIB
Spectrum Expert Connect
1
l
I
j
The basic Cisco CleanAir architecture consists of access points (APs) that are enabled for Cisco
CleanAir and a Cisco Wireless LAN Controller (WLC). Although Cisco WCS and the MSE are
optional components, and the information that CleanAir APs supply on their own provides
value in identifying interference, the MSE and Cisco WCS are key devices for leveraging more
CleanAir capabilities. Their advanced spectrum capabilities such as historic charts, tracking
interference devices, and location services are especially important.
An AP that is equipped with the Cisco CleanAir technology will collect information about nonWi-Fi interference sources, process it, and forward it to the Cisco WLC. The WLC is an
integral part of the CleanAir system. The WLC controls APs that have CleanAir capabilities,
collects and processes spectrum data, and provides the collected data to Cisco WCS or the
MSE. The WLC provides local user interfaces (GUI and CLI) to configure basic CleanAir
features and services, and to display spectrum information.
Cisco WCS provides advanced user interfaces for CleanAir including feature enabling and
configuration, visibility into the performance and security of the wireless network, monitoring,
and alarming when unwanted devices are present, providing historical trending of air quality
and policy enforcement.
The MSE is required for context-aware (location) services and historic tracking of interference
devices. It also provides additional services in a multi-WLC environment like coordination of
multiple interference reports and merging.
Cisco WCS Basics
5-103
,
,
,
,
1
by Device
The Cisco 3500 Series Wireless LAN Controller, Cisco WCS, and Cisco MSE are responsible
for managing different CleanAir features.
5-104
1
1
Cisco CleanAir Concepts

This topic describes the unique CleanAir concepts and terminology.
1
1
1
First step in effectively managing the environment is to know what is in

it.
Spectrum intelligence provides visibility to all users of the shared
spectrum.
Both Wi-Fi devices and non-Wi-Fi interferers
Spectrum Intelligence tells you:

- What the device is
- Where the device is
How it impacts the Wi-Fi network
Spectrum managementis the active use of spectrum intelligence data to

improve performance and lower the operational costs.
CleanAir provides spectrum management.
I
J
J
J
j
Maintaining a healthy wireless environment today requires knowledge of what is in the air or
spectrum intelligence. Spectrum intelligence is a core technology that is designed to proactively
manage the challenges of a shared wireless spectrum. Essentially, spectrum intelligence is data
about RF spectrum activity that is derived from advanced interference identification algorithms
similar to those used in the military. Spectrum intelligence provides visibility of all the users of
the shared spectrum, both Wi-Fi devices and non-Wi-Fi interferers. For every device that
operates in the unlicensed band, spectrum intelligence tells you what it is, where it is located,
and how it impacts the Wi-Fi network.
Spectrum management is the active use of spectrum intelligence data to improve performance
and lower the operational costs ofWi-Fi networks. Information about the severity and duration
of interference can be used to calculate its impact on the network and to troubleshoot problems.
This information can also be stored for historical analysis and trending.
Combined with contextual data like physical location and systemwide correlation, spectrum
management is a powerful, proactive tool that increases WLAN reliability, perfonnance, and
security.
Cisco WCS Basics
5-1 05
A severity value is calculated for each classified device

Severity of 0 is not severe
- Severity of 100 is very severe
" Severity is a local opinion of the reporting AP

" Reporting AP takes into account the following:
Type of device
Duty cycle
Power as measured by the AP
the same device will differ on each

of each AP to that device.
due to the
The
index is an
that nms on the CleanAir AP. A
index is calculated
for each classified interference source. The index is struct11red between 0 and
with 0
the least
and 100
the most severe.
and
the higher the index
which is
for a "IJ'v'''""
the same power,
on a
channel.
5-106
Air quality is a measurement of non-Wi-Fi and adjacent channel

interference.
- AQI of 100 is good.
- AQI of 1 is very severe.
Air quality is a measure of all devices and severities within a radio, floor,
building, or campus.
SAgE samples are taken every 1 second by the AP. AQI is calculated
every 15 seconds and summarized into 30-second intervals, which are
then reported to the controller every 15 minutes (by default).
The severity index directly affects the air quality index (AQI). The AQI is best at 100 and worst
at 1. Severity applies to each individual interference device. Air quality has an inverse
relationship to severity and captures the total impact to a channel, band, floor, building, and
campus.
The AQI is an inverse measure of how much interference is in the environment. Air quality is
at 100 percent when no interference is present, and is reduced based on energy strength and
duty cycle (airtime) occupied by interference sources. SAgE samples are taken every 1 second
by the AP. AQI is calculated every 15 seconds and summarized into 30-second intervals, which
are then reported up to the controller every 15 minutes (by default). The exception is when an
administrator is actively monitoring an AP radio interface from Cisco WCS or a WLC. In that
case, the AP is automatically instructed to switch into a rapid update mode, which changes the
default reporting period down to 30 seconds to provide more real-time information.
Note
To choose a report using rapid update mode, select Wireless> Access Points> Radios>
802.11 alb or 802.11 a in the Cisco WLC and choose CleanAir-RRM at the end of the line.
L
[
l
l
Cisco WCS Basics
5-107
Non Wi-Fi transmitters lack unique characteristics that can be used to

easily identify them.
PMAC solves this problem.
Genernted by each AP that hears interfering devices
- Created for each interfering device and used as a unique identifier
- Included in the AP interference device report
- While not identical, each will be similar
Controller compares and evaluates PMACs in a process called merging.
r
Pseudo-MACs (PMACs) are used to correlate interference sources being detected by multiple
APs and to merge report information on the device. The presence of interference is to be
expected in most enterprise deployments. CleanAir has to detect the interferer for a longenough period (classification requires 5-60 sec of activity) in order to correlate an interferer as
the same device being detected by multiple APs. Since interference sources do not have MAC
addresses, a pseudo-MAC is created to uniquely identify interference sources. "Clustering" is
used to represent a merged record for an interference source from multiple APs to the WLC.
Currently, cluster information is discarded once the detected energy source stops and is not
persistent for any length of time after the interference stops, or is removed from the
environment.
A new RRM component, called event-driven RRM, allows the controller to take immediate
action to mitigate severe interference issues rather than waiting for the RRM configured
interval to take action. The sensitivity threshold determines the AQI value for an individual AP
radio that is required in order for event-driven RRM to go into effect and make an adjustment
to avoid the source of interference. Three threshold settings are available to control what AQI
valu~!I"i_gg_e!_s__~ ey~11ts: High_en~!tivi!Y_requires the ~J:Q falLQ~l()}Y 60, Mejlium______ _
Sensitivity requires an AQI below 50, and Low Sensitivity requires an AQI below 35.
Additionally, air quality Simple Network Management Protocol (SNMP) trap alarms are sent
when the AQI drops below a value of 35 (by default).
Persistent device avoidance allows the CleanAir system to recognize devices that are fixed in
position and unlikely to move to avoid recurring interference issues in the areas that are
affected by such devices. The interference sources may be continuous or periodic in nature, but
both are likely to repeatedly impact the same physical area. Examples include microwave ovens
and mounted video cameras. CleanAir recognizes these persistent devices and instructs nearby
APs to operate on alternate channels even if the persistent device is no longer observed. The
CleanAir system will only allow APs in the affected areas to reuse those channels after a
persistent device is absent for more than seven days.
I
r
[
L
L
L
5-108
Modes of Operation for Cisco CleanAir APs

This topic describes the three modes in which CleanAir APs are capable of operating.
Versions
AP Name
IAPc~9c.ldla.e852
Primary Software Version
7.0.114.113
Location
!default location
Backup Software Version
0.0.0.0
AP MAC Address
c8:9c: ld:la:e8:52
Predownload Status
None
Base Radio MAC
44:e4:d9:00:be:20
Predownloaded Version
None
Pre download Next Retry Time
NA
Predownload Retry Count
NA
Admin Status
AP Mode
AP Sub Mode
l
L
l
jj
HREAP
monitor
Rogue Detector
Boot Version
12.4.23.0
Operational Status
lOS Version
12 .4(20110331: 165154
Port Number
Sniffer
Mini IOS Version
7 .0.94.21
Network Spectrum
SEConnect
Interface Key
(l~.<?el
Bridge
AC29EA3EB77BF585
JP f.onfig
IP Address
10.30.1.51
Static IP
The local mode AP deployment model requires that all APs are Cisco Aironet 3500 Series
Access Points with CleanAir technology and that they are configured in local mode. The tight
integration with the Wi-Fi radio allows the CleanAir hardware to listen between traffic on the
channel that is currently being served with absolutely no penalty to throughput of attached
clients. This integration means that a specific AP will not detect an interference device unless it
is active on the same channel as the AP. In a normal enterprise system one of the following will
occur:
The interference will be detected by another system AP on a different channel.
The interference is not interfering with the wireless system.
Local mode is the preferred method for implementing CleanAir APs for many reasons. It is
required for many of the advanced features to be effective. But one of the primary reasons is
that locaimodeAPssen(fan(rrece1ve ne!ghbormessagesand-are-ahle(over the air) to locate
one another via RF proximity. This type of location is far more accurate than simple x-y
location using careful placement on the map because it takes into account propagation
irregularities that are actually encountered within the RF domain.
The second advantage is event-driven RRM, which is a feature that allows an AP in distress to
bypass normal RRM intervals and immediately change channels. A CleanAir AP is always
monitoring air quality, and reports on it in 15-second intervals.
In a local mode implementation, each AP is aware of its RF neighbors, and increased accuracy
for location ofWi-Fi and non-Wi-Fi devices is achieved. When a Hybrid Remote-Edge Access
Point (H-REAP) AP is connected to the controller, its Cisco CleanAir functionality is identical
to local mode.
l
Cisco WCS Basics
5-109
AP Name
IAPc89c.1d1a.e852
Primary Software Version
7.0.114.113
Location
jdefault location
o.o.o.o
AP MAC Address
c8:9c:1d:1a:e8:52
Predownload Status
None
Base Radio MAC
44:e4:d9:00:be:20
None
Admin Status
Predownload Next Retry Time
NA
local
local
Predownload Retry Count
NA
Boot Version
12.4.23.0
lOS Version
12 .4(20110331: 16515
Mini lOS Version
7.0.94.21
AP Mode
AP Sub Mode
Operational Status
Port Number
Network Spectrum
Interface Key
H~REAP
Rogue Detector
Sniffer
Bridge
SE-Connect
AC29EA3EB77BF585
IP Looftg
IP Address
10.30.1.51
Static IP
r
f
The monitor mode AP deployment model is an overlay solution that uses Cisco Aironet 3500
Series Access Points that are configured in monitor mode. The 3500 Series Access Points are
usually deployed in a ratio of one 3500 Series Access Point to four or five existing APs. This
ratio, of course, depends on your coverage model.
A CleanAir monitor mode AP is dedicated full time to scanning all channels listed in the
dynamic channel assignment (DCA) channel list. CleanAir is supported with monitor mode
with intrusion protection system (IPS) deployments. In a dual radio configuration, this ensures
that all bands and channels are routinely scanned. The monitor mode AP is a passive device
that is simply listening to the surrounding spectrum, and as such, does not actively transmit
neighbor messages or maintain itself in RRM neighbor lists.
r
I
(
The amount of power that is required for processing spectrum data limits the number of
monitor mode APs that can be used for Cisco CleanAir monitoring. The Cisco CleanAir system
supports up to six monitor mode APs on the Cisco 2100 Series Wireless LAN Controller and
controller network modules. It supports up to 25 monitor mode APs on the Cisco 4400 Series
Wireless LAN Controllers, the Catalyst 3750G Integrated Wireless LAN Controller Switch,
and-eaGh-C-isoo-Wir~s~eJvi~-s-MeffiIe-(WiSMfc-entr-eller.~l+-alsB-Sll:flPSFt:-s-apte--+-5-mnnit&
mode access APs on the Cisco 5500 Series Wireless LAN Controller. Cisco 2500 Series
Wireless LAN Controllers can support up to 50 monitor-mode APs, depending on the installed
license.
l
L
L
5-110
Gtnu:ral
AP Name
Location
jdefault location
0.0.0.0
AP MAC Address
c8:9c:ld:1a:e8:52
Predownload Status
None
Base Radio MAC
44:e4:d9:00:be :20
None
Predownload Next Retry Time
NA
Admin Status
AP Mode
AP sub Mode
Operational Status
Port Number
Network Spectrum
lnt:erface Key
r
[
local
local
,?
H-REAP
monitor
Rogue Detector
Sniffer
B idee
----AC29EA3EB77BF565
Predown!oad Retry Count
NA
Boot Version
12.4.23.0
IOS Version
12 A(20110331: 165154)
Mini lOS Version
7 .0.94.21
IP Coofig
IP Address
10,30.1.51
Static IP
With the introduction of CleanAir, a new mode, called SE-Connect, has been added. SEConnect is also referred to as spectrum-only monitor mode (SOMM). When you configure an
AP for SE-Connect, the AP becomes a dedicated spectrum sensor for use with Cisco Spectrum
Expert software. This mode allows viewing ofthe raw spectrum data such as fast Fourier
transform (FFT) plots. This mode does not support gathering of interference device report and
air quality metrics at the system level. A spectrum-only monitor mode AP does not serve
clients while in the spectrum-only monitor mode. This mode is useful for detailed spectrum
analysis and is reserved as a troubleshooting tool for targeted use. This mode allows network
deployment of Spectrum Expert to any CleanAir AP location and would avoid an onsite trip
with a laptop set up with the Spectrum Expert hardware and software.
t
L
l
L
Cisco WCS Basics
5-111
Configuring Cisco CleanAir on the WLC

This topic describes how to configure the WLC for CleanAir monitoring and reporting.
WLC
Wireless
802.11aln Cisco APs >Configure
v Access Points
A!l APs
.,. Radios
802.11a/n
802.11b/g/n
Global Configuration
J. Advanced
Mesh
HREAP Groups
~
802.11afn
r 802.11b/g/n
General
AP Name
Admm Status
Operational Status
APc89c.1d1a.e852
IEnable 1i
UP
Slot#
11n Parameters
Media straam
lln Supported
country
Clientlink
Timers:
QnS
CleanAir Capable
CleanAir Admin Status
Number. of Spectrum Expert
r
You can enable and disable CleanAir for the entire controller, suppress the reporting of all
interferers, and determine which interferers to report or ignore. To configure Cisco CleanAir
functionality on the controller using the controller GUI, follow these steps:
Step 1
Choose Wireless > Access Points > Radios > 802.11a/n and 802/11 b/g/n.
Step2
Choose Enable from CleanAir Admin Status.
L
L
L..,
l
5-112
Wireless
Interferences to Detect
''ciiiifl
i.fl',l.l
Mesh
HREAP Groups
TDD Transmitter
Jammer
Continuous Transmitter
DECT -like Phone
Video Camera
802.11t~/fl
Net\'Vork
.,.. RRM
RF GroupmiJ
TPC
AQI Alarm Threshold (1 to 100)Z
[;CA
Coverage
Enable Interference for Security Alarm
GeMral
ClientRoammQ
t"ledia
EDCA Ptlrameters
Do not trap on these types

TDD Transmitter
Continuous Transmitter
DECT -like Phone
Video Camera
~
PEMbled
Trap on these types

Jammer
WiFi Inverted
WiFi Invalid Channel
SL!perAG
r,
I
Step 3
Choose Wireless> 802.11a/n or 802.11b/g/n > CleanAir to open the 802.11a (or
802.11 b) CleanAir page.
Step4
Check the CleanAir Enabled check box to enable Cisco CleanAir functionality on
the 802.11 a/n or 802.11 b/g/n network, or unselect it to prevent the controller from
detecting spectrum interference. The default value is Enabled.
Step5
Check the Report Interferers Enabled check box to enable the Cisco CleanAir
system to report any detected sources of interference, or uncheck it to prevent the
controller from reporting interferers. The default value is Enabled.
Selecting specific interference devices to ignore is a useful feature, for instance, you might not
want to track all Bluetooth headsets since they are relatively low impact and you have many of
them. Choosing to ignore these devices simply prevents them from being reported. The RF that
comes from the devices is still calculated into the total air quality for the spectrum.
Step 6
Make sure that any sources of interference that need to be detected and reported by
the Cisco CleanAir system appear in the Interferences to Detect box and any that do
11Qt l!~~d . tQ.be t~<.<.te.d~a.rjn the_Interferem<l::.SJO_lgnor.e.box.._Us_elh_e..angk...
bracket (> and <) buttons to move interference sources between these two boxes. By
default, all interference sources are detected. The possible sources of interference are
as follows:
Bluetooth Paging Inquiry: A Bluetooth discovery (802.11 b/g/n only)
Bluetooth Sco Acl: A Bluetooth link (802.11 b/g/n only)
Generic DECT: A digital enhanced cordless communication (DECT)compatible phone
Generic TDD: A time division duplex (TDD) transmitter
Generic Waveform: A continuous transmitter
Jammer: A jamming device
Microwave: A microwave oven (802.11 b/g/n only)
Cisco WCS Basics
5-113
A canopy device
111
1111
Radar: A radar device (802.11a/n

802.11 FH: An 802.11 frequency-hopping device
802.] 1 inverted: A device using
inverted Wi-Fi signals
802.11 non std channel: A device using nonstandard Wi-Fi channels
111
llll
11 b/g/n
Spectrum 802.11 SuperG: An 802.11 SuperAG device

11 b/g/n
Note
111
Video Camera: An analog video camera
111
WiMax Fixed: A WiMax fixed device (802.11a/n
111
WiMax Mobile: A WiMax mobile device
111
XBox: A Microsoft Xbox
11
APs that are associated to the controiler send interference
for the interferers
that appear in the Interferences to Detect bmc This

to
levels.
Cisco CleanAir alam1s.

7
Check the Enable

of air
default value is Enabled.
7, enter a value between 1

selected the Enable
check box in
and 100
in the
Alarm Threshold text box to
the threshold at
which you want the air
falls
below the threshold
the alarm is
the worst
mr
and 100 ,..,..,,..",""''ntc the best. The default value is 35.
Enabled check box to enable the
Check the Enable Interference for

Alarm Enabled check box to
interferer alarms when the controller detects "~"v'-'lin..u device
or uncheck it to
disable this feature. The default value is Enabled.
10
in the
Do Not
appear in
move interference sources between these two boxes.
sources
interferer alarrns.
11
5-114
interferer
Click
Channel Assignment Method
r.
Automatic
f"Freeze
('Off
DCA Channel List
AVOid Foreign AP Interference
P'
Enabled
Avoid Cisco AP lo<Jd
Enllbled
Avoid non-802.11a no1se
Enabled
Avoid Pers1stentNon-WiFi
Enabled
Interference
Channel Assignmrmtleader
Last Auto Channel Assignment
DCA Channel Sensitivity
DCA Channels
acs2(10.30.1.10)
135 .sees ago
IMedium iJ
(15 dB)
Select
Channel
Channel Width
~ 20 MHz ('" 40 MHZ
P'
36
Avoid checkfornon-DFS channel
40
P'
P'
P'
46
Enabled
44
52
Extended UNII-2 channels
Enabled
Event Driven RRM
EDRRM
Enabled
Configure spectrum event-driven RRM to run when a Cisco AP that is enabled for CleanAir AP
detects a significant level of interference.
I
(
Look at the event-driven RRM (EDRRM) field to see the status of spectrum event-driven RRM
and, if enabled, the Sensitivity Threshold field to see the threshold level at which event-driven
RRM is invoked.
If you want to change the status of event-driven RRM or the sensitivity level, perform these
steps:
Step 1
Click Change Settings. The 802.lla (or 802.llb) > RRM >Dynamic Channel
Assignment (DCA) page appears.
Step 2
Check the EDRRM check box to trigger RRM to run when an AP detects a certain
level of interference, or uncheck it to disable this feature. The default value is
selected.
Step 3
If you selected the EDRRM check box, choose Low, Medium, or High from the
Sensitivity Threshold drop-down list to speci:ty the threshold at which you want
ItR:Mtoi:Yetrtggere<t Wtrenlne1merrerente-fortl:feAp-i'lses~aoovetlieTilreS110I(f
level, RRM initiates a local DCA run and changes the channel of the affected AP
radio if possible to improve network performance. Low represents a decreased
sensitivity to changes in the environment while High represents an increased
sensitivity.
Step4
Click Apply to commit your changes.
t
L
L
L
Cisco WCS Basics
5-115
ll.<Jcll!i
S!~t-"
!!'terfeoTyp>"
To monitor the interference devices
the controller
follow these
Choose Monitor> Cisco CleanAir > 802.lla/n

802.1
Devices to open the CleanAir > Interference Devices page.
> Interference
This page shows the

lllll
AP Name: The name ofthe AP where the interference device
lllll
Radio Slot#: Slot where the radio is installed.
lllll
Interferer
lllll
Affected Channel: Channel that the device affects.
lllll
Detected Time: Time at which the interference was detected.
detected.
of interferer.
device.
which the
lllll
DeviD: Device identification number that
lllll
ClusteriD: Cluster identification number that
identified the
identifies the
of devices.
Step 2
Click Change Filter to

based on particular criteria.
Step 3
Click Clear Filter to remove the filter and display the entire AP list.
the information about interference
which is
You can create a filter to display a list of interference devices that is based on the following
filtering parameters:
5-116
11
Cluster ID: To filter based on the Cluster ID, check the check box and enter the Cluster ID
in the text box next to this field.
11
AP Name: To filter based on the AP name, check the check box and enter the AP name in
the text box next to this field.
Interferer Type: To filter based on the type of the interference device, check the check
box and select the interferer device from the options.
Step4
Click Find to commit your changes. The current filter parameters are displayed in
the Current Filter field.
An interference device report is a detailed report containing information about a classified

interference device. The report is sent from an AP that is enabled for CleanAir to the WLC.
This report is very similar to the information that would be seen in Cisco Spectrum Expert
active devices, or devices view. Basic information regarding an interference device report is
available on the WLC using advanced functions. Active interference device reports can be
viewed on the WLC GUI and CLI for all CleanAir radios on that WLC. Interference device
reports are forwarded to the MSE only. The format for an interference device report is shown in
the following table:
~w~rn~t~~:t~~~
&Wit'
I.
"
Device ID
The number uniquely identifies the interference device for the

specific radio. It consists of upper 4 bits generated during the
system boot and 12 lower bits incremented for each new
device found.
Class type
Device class type
Event type
Device down
Device up
Update
Radio Band ID
1 = 2.4 GHz, 2 = 5 GHz, 4 = 4.9 GHz; 2 MSBs reserved.

4.9 GHz is not supported for initial release
Timestamp
Initial device detection time
Interference Severity
Index
1-100, OxO is reserved for undefined or hidden severity.
r
I
.'?
''Kil>t'
.. i$
Channels Detected on
Bitmap
Support for detection on multiple channels within the same

radio band
Parameter name
Units
Notes
Interference Duty Cycle
1-100%
Antenna ID
Bitmap
Support for multiple antenna reports is reserved for future

releases.
Tx Power (RSSI) per

antenna
dBm
--
~---
---~
_,_
Device Signature length
Length of Device Signature field. Currently the length could be

in the range of 0-16 bytes.
Device Signature
This parameter represents either a unique device MAC

address or the device PMAC signature.
l
l
L
Cisco WCS Basics
5-117

CISCO IUWNE Vol 3 v.2.0 640 722 2011

Transféré par

Informations du document

Titre original

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

CISCO IUWNE Vol 3 v.2.0 640 722 2011

Transféré par

Droits d'auteur :

Formats disponibles

t~lld

Asia Pacific Headquarters

2011 Cisco and/or its affiliates. All rights reserved.

Cisco WCS Basics ......................................................................................................... 5-1

Introducing Cisco WCS and Cisco WCS Navigator .............................................................S-3

Overview ............................................................................................................................................ 5-1

Cisco WCS Position in the Management Layer ................................................................................. 5-4

Navigating tile Cisco w.cs l.ntedace ........................... ., ......................................................5-2,1

Overview .......................................................................................................................................... 5-21

Working with Controllers from Cisco WCS ........................................................................5-43

Overview .......................................................................................................................................... 5~43

Objectives .................................................................................................................................. 5-59

Monitoring the Network with Cisco WCS .......................................................................... 5-77

Working with Cisco CleanAir in Cisco WCS ..................................................................... 5-99

WI::AN Maintenance and Troubleshgtting~ ................................................................... 6-1

Maintaining the System ......................................................................................................... 6-3

Troubleshooting a Wireless Network ................................................................................. 6-27

2011 Cisco Systems, Inc.

the main features of the Cisco WCS

and will shm.v

you will be able to manage the wireless network with Cisco

Describe Cisco WCS and Cisco WCS

Work with controllers from Cisco

Work with preco:nfigured maps

Monitor the network

Describe the CleanAir feature in Cisco WCS

Implementing Cisco Unified Wireless Networking Essentials (IUWNE) v2.0

2011 Cisco Systems, Inc.

you will be able to

Describe Cisco WCS and its

Describe Cisco WCS

Cisco WCS Position in the Management Layer

describes Cisco WCS and its position in the management layer.

' Centralized location for

Handsets, cfients, rogues, and tags

the Cisco Wireless LAN Controller

The Cisco WCS user interface enables

and control functions.

Operator pem1issions are defined

Implementing Cisco Unified Wireless Networking Essentials (IUWNE) v2.0

2011 Cisco Systems, Inc.

2011 Cisco Systems, Inc.

Cisco WCS Basics

Cisco WCS icense Systems and Versions

Cisco WCS Base or Cisco WCS Plus.

for both versions.

Cisco WCS Base

of AP coverage areas. This feature is

Ad hoc rogue detection

User-supplied campus, building, and floor

graphics that show the following:

Locations and status of managed APs

Implementing Cisco Unified Wireless Networking Essentials (IUWNE) v2.0

2011 Cisco Systems, Inc.

Cisco WCS Base also provides systemwide control of the following:

Streamlined network, controller, and managed AP configuration using customer-defined

Network, controller, and managed AP status and alarm monitoring

Automated and manual data client monitoring and control functions

Automatic channel and power-level assignment by Radio Resource Management (RRM)

Cisco WCS PLUS

On-demand location of rogue APs to within 33 feet (10m)

On-demand location of clients to within 33 feet (10m)

On-demand location of Cisco Spectrum Expert sensors