To configure the controller IP address into the CAPWAP access point from the access point’s console port, use the capwap ap controller ip address command.

Command Default

None

Usage Guidelines

This command must be entered from an access point’s console port. This command is applicable for IPv4 addresses only.

Note	The access point must be running Cisco IOS Release 12.3(11)JX1 or later releases.

To configure the dot1x username and password into the CAPWAP access point from the access point’s console port, use the capwap ap dot1x command.

Command Default

None

Usage Guidelines

This command must be entered from an access point’s console port.

Note	The access point must be running Cisco Access Point IOS Release 12.3(11)JX1 or later releases.

To configure the access point host name from the access point’s console port, use the capwap ap hostname command.

Command Default

None

Usage Guidelines

This command must be entered from an access point’s console port.

Note	The access point must be running Cisco IOS Release 12.3(11)JX1 or later releases. This command is available only for the Cisco Lightweight AP IOS Software recovery image (rcvk9w8) without any private-config. You can remove the private-config by using the clear capwap private-config command.

To configure the IP address into the CAPWAP access point from the access point’s console port, use the capwap ap ip address command.

Command Default

None

Usage Guidelines

This command must be entered from an access point’s console port. This command supports only IPv4 address format.

Note	The access point must be running Cisco Access Point IOS Release 12.3(11)JX1 or later releases.

To configure the default gateway from the access point’s console port, use the capwap ap ip default-gateway command.

Command Default

None

Usage Guidelines

This command must be entered from an access point’s console port. This command supports only IPv4 address format.

Note	The access point must be running Cisco Access Point IOS Release 12.3(11)JX1 or later releases.

To configure the system log server to log all the CAPWAP errors, use the capwap ap log-server command.

Command Default

None

Usage Guidelines

This command must be entered from an access point’s console port. This command supports only IPv4 address format.

Note	The access point must be running Cisco Access Point IOS Release 12.3(11)JX1 or later releases.

To configure the primary controller name and IP address into the CAPWAP access point from the access point’s console port, use the capwap ap primary-base command.

Command Default

None

Usage Guidelines

This command must be entered from an access point’s console port. This command supports only IPv4 address format.

Note	The access point must be running Cisco Access Point IOS Release 12.3(11)JX1 or later releases.

To configure the primed timer into the CAPWAP access point, use the capwap ap primed-timer command.

Command Default

None

Usage Guidelines

This command must be entered from an access point’s console port.

Note	The access point must be running Cisco Access Point IOS Release 12.3(11)JX1 or later releases.

To configure the Cisco WLC IP address into the FlexConnect access point from the access point’s console port, use the lwapp ap controller ip address command.

Command Default

None

Usage Guidelines

This command must be entered from an access point’s console port. This command is applicable for IPv4 addresses only.

Prior to changing the FlexConnect configuration on an access point using the access point’s console port, the access point must be in standalone mode (not connected to a controller) and you must remove the current LWAPP private configuration by using the clear lwapp private-config command.

Note	The access point must be running Cisco IOS Release 12.3(11)JX1 or higher releases.

To configure the external antenna gain for the 4.9-GHz and 5.8-GHz public safety channels on an access point, use the config 802.11-a antenna extAntGain commands.

Command Default

Channel properties are disabled.

Usage Guidelines

Before you enter the config 802.11-a antenna extAntGain command, disable the 802.11 Cisco radio with the config 802.11-a disable command.

After you configure the external antenna gain, use the config 802.11-a enable command to reenable the 802.11 Cisco radio.

To configure the channel properties for the 4.9-GHz and 5.8-GHz public safety channels on an access point, use the config 802.11-a channel ap command.

Command Default

Channel properties are disabled.

To configure the transmission power properties for the 4.9-GHz and 5.8-GHz public safety channels on an access point, use the config 802.11-a txpower ap command.

Command Default

The default transmission power properties for the 4.9-GHz and 5.8-GHz public safety channels on an access point is disabled.

To configure the diversity option for 802.11 antennas, use the config 802.11 antenna diversity command.

Command Default

None

To configure external antenna gain for an 802.11 network, use the config 802.11 antenna extAntGain command.

Command Default

None

Usage Guidelines

Before you enter the config 802.11 antenna extAntGain command, disable the 802.11 Cisco radio with the config 802.11 disable command.

After you configure the external antenna gain, use the config 802.11 enable command to enable the 802.11 Cisco radio.

To configure the Cisco lightweight access point to use one internal antenna for an 802.11 sectorized 180-degree coverage pattern or both internal antennas for an 802.11 360-degree omnidirectional pattern, use the config 802.11 antenna mode command.

Command Default

None

To select the internal or external antenna selection for a Cisco lightweight access point on an 802.11 network, use the config 802.11 antenna selection command.

Command Default

None

To enable or disable Beamforming (ClientLink) on the network or on individual radios, enter the config 802.11 beamforming command.

Command Default

None

Usage Guidelines

When you enable Beamforming on the network, it is automatically enabled for all the radios applicable to that network type.

Follow these guidelines for using Beamforming:

• Beamforming is supported only for legacy orthogonal frequency-division multiplexing (OFDM) data rates (6, 9, 12, 18, 24, 36, 48, and 54 mbps).

  Note	Beamforming is not supported for complementary-code keying (CCK) data rates (1, 2, 5.5, and 11 Mbps).

• Beamforming is supported only on access points that support 802.11n (AP1250 and AP1140).

• Two or more antennas must be enabled for transmission.

• All three antennas must be enabled for reception.

• OFDM rates must be enabled.

  If the antenna configuration restricts operation to a single transmit antenna, or if OFDM rates are disabled, Beamforming is not used.

To disable radio transmission for an entire 802.11 network or for an individual Cisco radio, use the config 802.11 disable command.

Command Default

The transmission is enabled for the entire network by default.

Usage Guidelines

• You must use this command to disable the network before using many config 802.11 commands.
• This command can be used any time that the CLI interface is active.

To set the Cisco lightweight access point clients threshold between 1 and 75 clients, use the config advanced 802.11 profile clients command.

Command Default

The default Cisco lightweight access point clients threshold is 12 clients.

To turn customizing on or off for an 802.11a Cisco lightweight access point performance profile, use the config advanced 802.11 profile customize command.

Command Default

The default state of performance profile customization is Off.

To set the foreign 802.11a transmitter interference threshold between 0 and 100 percent, use the config advanced 802.11 profile foreign command.

Command Default

The default foreign 802.11a transmitter interference threshold value is 10.

To set the 802.11a foreign noise threshold between –127 and 0 dBm, use the config advanced 802.11 profile noise command.

Command Default

The default foreign noise threshold value is –70 dBm.

To set the Cisco lightweight access point data-rate throughput threshold between 1000 and 10000000 bytes per second, use the config advanced 802.11 profile throughput command.

Command Default

The default Cisco lightweight access point data-rate throughput threshold value is 1,000,000 bytes per second.

To set the RF utilization threshold between 0 and 100 percent, use the config advanced 802.11 profile utilization command. The operating system generates a trap when this threshold is exceeded.

Command Default

The default RF utilization threshold value is 80 percent.

To configure a secondary backup controller, use the config advanced backup-controller secondary command.

Command Default

None

Usage Guidelines

To delete a secondary backup controller entry (IPv4 or IPv6), enter 0.0.0.0 for the controller IP address.

Related Commands

show advanced back-up controller

To set the client handoff to occur after a selected number of 802.11 data packet excessive retries, use the config advanced client-handoff command.

Command Default

The default value for the number of 802.11 data packet excessive retries is 0.

To enable or disable over-the-air frame padding, use the config advanced dot11-padding command.

Command Default

The default over-the-air frame padding is disabled.

Related Commands

debug dot11


debug dot11 mgmt interface


debug dot11 mgmt msg


debug dot11 mgmt ssid

debug dot11 mgmt state-machine


debug dot11 mgmt station


show advanced dot11-padding


To configure the rate at which access point radios send association and authentication requests to the controller, use the config advanced assoc-limit command.

Command Default

The default state of the command is disabled state.

Usage Guidelines

When 200 or more wireless clients try to associate to a controller at the same time, the clients no longer become stuck in the DHCP_REQD state when you use the config advanced assoc-limit command to limit association requests from access points.

To configure the maximum number of simultaneous 802.1X sessions allowed per access point, use the config advanced max-1x-sessions command.

Command Default

None

To configure the backoff parameters for probe queue in a Cisco AP, use the config advanced probe backoff command.

Command Default

Disabled

To configure the filtering of probe requests forwarded from an access point to the controller, use the config advanced probe filter command.

Command Default

None

To limit the number of probes sent to the WLAN controller per access point per client in a given interval, use the config advanced probe limit command.

Command Default

The default number of probe requests is 2.
The default interval is 500 milliseconds.

To configure an advanced system timer, use the config advanced timers command.

Command Default

• The default access point discovery timeout is 10 seconds.

• The default access point heartbeat timeout is 30 seconds.

• The default access point primary discovery request timer is 120 seconds.

• The default authentication timeout is 10 seconds.

• The default packet forwarding watchdog timer is 240 seconds.

Usage Guidelines

The Cisco lightweight access point discovery timeout indicates how often a Cisco WLC attempts to discover unconnected Cisco lightweight access points.

The Cisco lightweight access point heartbeat timeout controls how often the Cisco lightweight access point sends a heartbeat keepalive signal to the Cisco Wireless LAN Controller.

To configure a Cisco lightweight access point or to add or delete a third-party (foreign) access point, use the config ap command.

Command Default

None

To configure the Cisco Discovery Protocol (CDP) on a Cisco lightweight access point, use the config ap cdp command.

Command Default

Enabled on radio interfaces of mesh APs and disabled on radio interfaces of non-mesh APs. Enabled on Ethernet interfaces of all APs.

Usage Guidelines

The config ap cdp disable all command disables CDP on all access points that are joined to the controller and all access points that join in the future. CDP remains disabled on both current and future access points even after the controller or access point reboots. To enable CDP, enter the config ap cdp enable all command.

Note

CDP over Ethernet/radio interfaces is available only when CDP is enabled. After you enable CDP on all access points joined to the controller, you may disable and then reenable CDP on individual access points using the config ap cdp {enable | disable} cisco_ap command. After you disable CDP on all access points joined to the controller, you may not enable and then disable CDP on individual access points.

To configure a Cisco lightweight access point’s memory core dump, use the config ap core-dump command.

Command Default

None

Usage Guidelines

The access point must be able to reach the TFTP server. This command is applicable for both IPv4 and IPv6 addresses.

To delete all crash and radio core dump files, use the config ap crash-file clear-all command.

Syntax Description

This command has no arguments or keywords.

Command Default

None

To delete a single crash or radio core dump file, use the config ap crash-file delete command.

Command Default

None

To collect the latest crash data for a Cisco lightweight access point, use the config ap crash-file get-crash-file command.

Command Default

None

Usage Guidelines

Use the transfer upload datatype command to transfer the collected data to the Cisco wireless LAN controller.

To get a Cisco lightweight access point’s radio core dump, use the config ap crash-file get-radio-core-dump command.

Command Default

None

To configure VLAN tagging of the Control and Provisioning of Wireless Access Points protocol (CAPWAP) packets, use the config ap ethernet tag command.

Command Default

None

Usage Guidelines

After you configure VLAN tagging, the configuration comes into effect only after the access point reboots.

You cannot configure VLAN tagging on mesh access points.

If the access point is unable to route traffic or reach the controller using the specified trunk VLAN, it falls back to the untagged configuration. If the access point joins the controller using this fallback configuration, the controller sends a trap to a trap server such as the Cisco Prime Infrastructure, which indicates the failure of the trunk VLAN. In this scenario, the "Failover to untagged" message appears in show command output.

To swap an access point’s primary and backup images, use the config ap image swap command.

Command Default

None

To configure the LED state of an access point or to configure the flashing of LEDs, use the config ap led-state command.

Usage Guidelines

Note	If an AP itself is configured with the keyword all, the all access points case takes precedence over the AP that is with the keyword all.

LEDs on access points with dual-band radio module will flash green and blue when you execute the led state flash command.

Command Default

None

To modify the descriptive location of a Cisco lightweight access point, use the config ap location command.

Command Default

None

Usage Guidelines

The Cisco lightweight access point must be disabled before changing this parameter.

To set the severity level for filtering syslog messages for a particular access point or for all access points, use the config ap logging syslog level command.

Command Default

None

Usage Guidelines

If you set a syslog level, only those messages whose severity is equal to or less than that level are sent to the access point. For example, if you set the syslog level to Warnings (severity level 4), only those messages whose severity is between 0 and 4 are sent to the access point.

To configure username, password, and secret password for AP management, use the config ap mgmtuser add command.

Command Default

None

Usage Guidelines

The following requirements are enforced on the password:

• The password should contain characters from at least three of the following classes: lowercase letters, uppercase letters, digits, and special characters.

• No character in the password can be repeated more than three times consecutively.

• The password sould not contain management username or reverse of usename.

• The password should not contain words like Cisco, oscic, admin, nimda or any variant obtained by changing the capitalization of letters by substituting 1, |, or ! or substituting 0 for o or substituting $ for s.

  The following requirement is enforced on the secret password:

• The secret password should contain characters from at least three of the following classes: lowercase letters, uppercase letters, digits, or special characters.

To force a specific access point to use the controller’s global credentials, use the config ap mgmtuser delete command.

Command Default

None

To configure Cisco lightweight access point channel optimization, use the config ap monitor-mode command.

Command Default

None

To modify the name of a Cisco lightweight access point, use the config ap name command.

Command Default

None

To configure the Packet Capture parameters on access points, use the config ap packet-dump command.

Command Default

The default buffer size is 2 MB. The default capture time is 10 minutes.

Usage Guidelines

Packet Capture does not work during intercontroller roaming.

The controller does not capture packets created in the radio firmware and sent out of the access point, such as a beacon or probe response. Only packets that flow through the Radio driver in the Tx path will be captured.

Use the command config ap packet-dump start to start the Packet Capture from the access point. When you start Packet Capture, the controller sends a Control and Provisioning of Wireless Access Points protocol (CAPWAP) message to the access point to which the client is associated and captures packets. You must configure the FTP server and ensure that the client is associated to the access point before you start Packet Capture. If the client is not associated to the access point, you must specify the name of the access point.

This command supports both IPv4 and IPv6 address formats.

To configure the port for a foreign access point, use the config ap port command.

Command Default

None

To configure the power injector state for an access point, use the config ap power injector command.

Command Default

None

To enable or disable the inline power Cisco pre-standard switch state for an access point, use the config ap power pre-standard command.

Command Default

Disabled.

To configure the preferred mode, use the config ap preferred-mode command.

Command Default

None

To set the Cisco lightweight access point primary Cisco WLC, use the config ap primary-base command.

Command Default

None

Usage Guidelines

The Cisco lightweight access point associates with this Cisco WLC for all network operations and in the event of a hardware reset.

OfficeExtend access points do not use the generic broadcast or over-the air (OTAP) discovery process to find a controller. You must configure one or more controllers because OfficeExtend access points try to connect only to their configured controllers.

This command supports both IPv4 and IPv6 address formats.

Related Commands

show ap config general

To reset a Cisco lightweight access point, use the config ap reporting-period command.

Command Default

None

To reset a Cisco lightweight access point, use the config ap reset command.

Command Default

None

To configure the access point control packet retransmission interval, use the config ap retransmit interval command.

Command Default

None

To configure the access point control packet retransmission count, use the config ap retransmit count command.

Command Default

None

To enable or disable sniffing on an access point, use the config ap sniff command.

Command Default

Channel 36.

Usage Guidelines

When the sniffer feature is enabled on an access point, it starts sniffing the signal on the given channel. It captures and forwards all the packets to the remote computer that runs Omnipeek, Airopeek, AirMagnet, or Wireshark software. It includes information on the timestamp, signal strength, packet size and so on.

Before an access point can act as a sniffer, a remote computer that runs one of the listed packet analyzers must be set up so that it can receive packets sent by the access point. After the Airopeek installation, copy the following .dll files to the location where airopeek is installed:

• socket.dll file to the Plug-ins folder (for example, C:\Program Files\WildPackets\AiroPeek\Plugins)

• socketres.dll file to the PluginRes folder (for example, C:\Program Files\WildPackets\AiroPeek\ 1033\PluginRes)

To enable Secure Shell (SSH) connectivity on an access point, use the config ap ssh command.

Command Default

None

Usage Guidelines

The Cisco lightweight access point associates with this Cisco wireless LAN controller for all network operation and in the event of a hardware reset.

To configure Static IP address settings on Cisco lightweight access point , use the config ap static-ip command.

Command Default

None

Usage Guidelines

An access point cannot discover the controller using Domain Name System (DNS) resolution if a static IP address is configured for the access point, unless you specify a DNS server and the domain to which the access point belongs.

After you enter the IPv6 address, Prefix-length and IPv6 gateway address, the CAPWAP tunnel will restart for access point. Changing the AP's IP address will cause the AP to disjoin. After the access point rejoins the controller, you can enter the domain and IPv6 DNS server information.

This command supports both IPv4 and IPv6 address formats.

Related Commands

show ap config general

To set the time in seconds that the Cisco lightweight access point sends its DOT11 statistics to the Cisco wireless LAN controller, use the config ap stats-timer command.

Command Default

The default value is 0 (disabled state).

Usage Guidelines

A value of 0 (zero) means that the Cisco lightweight access point does not send any DOT11 statistics. The acceptable range for the timer is from 0 to 65535 seconds, and the Cisco lightweight access point must be disabled to set this value.

To configure a global syslog server for all access points that join the controller, use the config ap syslog host global command.

Command Default

The default value of the IPv4 address of the syslog server is 255.255.255.255.

Usage Guidelines

By default, the global syslog server IP address for all access points is 255.255.255.255. Make sure that the access points can reach the subnet on which the syslog server resides before configuring the syslog server on the controller. If the access points cannot reach this subnet, the access points are unable to send out syslog messages.

This command supports both IPv4 and IPv6 address formats.

To configure a syslog server for a specific access point, use the config ap syslog host specific command.

Command Default

The default value of the syslog server IP address is 0.0.0.0.

Usage Guidelines

By default, the syslog server IP address for each access point is 0.0.0.0, indicating that it is not yet set. When the default value is used, the global access point syslog server IP address is pushed to the access point.

This command supports both IPv4 and IPv6 address formats.

To enable or disable the TCP maximum segment size (MSS) on a particular access point or on all access points, use the config ap tcp-mss-adjust command.

Command Default

None

Usage Guidelines

When you enable this feature, the access point checks for TCP packets to and from wireless clients in its data path. If the MSS of these packets is greater than the value that you configured or greater than the default value for the CAPWAP tunnel, the access point changes the MSS to the new configured value.

To enable Telnet connectivity on an access point, use the config ap telnet command.

Command Default

None

Usage Guidelines

• The Cisco lightweight access point associates with this Cisco WLC for all network operation and in the event of a hardware reset.

• Telnet is not supported on Cisco Aironet 1810 OEAP, 1810W, 1830, 1850, 2800, and 3800 Series APs.

To assign a username and password to access either a specific access point or all access points, use the config ap username command.

Command Default

None

To configure the venue information for 802.11u network on an access point, use the config ap venue command.

Command Default

None