Configuring WLAN Settings for an SSID Profile
You can configure settings using the WebUI or the .
In the Old WebUI
To configure settings:
1. Under the Networks tab of the Instant main window, select New. The New WLAN window is displayed.
2. Enter a name that uniquely identifies a wireless network in the Name field.
|
The name must be unique and may contain any special character except for ' and ".
|
3. Based on the type of network profile, select any of the following options under Primary usage:
Employee
Voice
Guest
4. Click the Show advanced options link at the bottom of the window. The advanced options for configuration are displayed. Specify the following parameters as required.
Table 1: WLAN Configuration Parameters
Parameter |
Description |
Broadcast filtering
|
Select any of the following values:
All—When set to All, the Instant AP drops all broadcast and multicast frames except and , group queries, and IPv6 neighbor discovery protocols.
—When set to , the Instant AP drops all broadcast and multicast frames except and , group queries, and IPv6 neighbor discovery protocols; additionally, it converts requests to unicast and send frames directly to the associated client. The broadcast filtering option is set to ARP by default when an profile is created.
Unicast-ARP-Only—When set to Unicast-ARP-Only, the Instant AP allows all broadcast and multicast frames as it is, however the requests are converted to unicast frames and sends them to the associated clients.
Disabled—When set to Disabled, all broadcast and multicast traffic is forwarded to the wireless interfaces.
|
Multicast transmission optimization
|
Select Enabled if you want the Instant AP to select the optimal rate for sending broadcast and multicast frames based on the lowest of unicast rates across all associated clients. When this option is enabled, multicast traffic can be sent at up to 24 . The default rate of sending frames for 2.4 is 1 and that for 5 is 6 . This option is disabled by default.
|
Dynamic multicast optimization
|
Select Enabled to allow the Instant AP to convert multicast streams into unicast streams over the wireless link. Enabling enhances the quality and reliability of streaming video, while preserving the bandwidth available to the non-video clients.
NOTE: When you enable on multicast profiles, ensure that the feature is enabled on all configured in the same .
|
DMO channel utilization threshold
|
Specify a value to set a threshold for channel utilization. With , the Instant AP converts multicast streams into unicast streams as long as the channel utilization does not exceed this threshold. The default value is 90% and the maximum threshold value is 100%. When the threshold is reached or exceeds the maximum value, the Instant AP sends multicast traffic over the wireless link.
|
Transmit Rates
|
Specify the following parameters:
2.4 GHz—If the 2.4 is configured on the Instant AP, specify the minimum and maximum transmission rate. The default value for minimum transmission rate is 1 and maximum transmission rate is 54 .
5 GHz—If the 5 is configured on the Instant AP, specify the minimum and maximum transmission rate. The default value for minimum transmission rate is 6 and maximum transmission rate is 54 .
|
Band
|
Select a value to specify the at which the network transmits radio signals. You can set the to 2.4 GHz, 5 GHz, or All. The All option is selected by default.
|
DTIM interval
|
The interval indicates the period in beacons, which can be configured for every profile. The interval determines how often the Instant AP should deliver the buffered broadcast and multicast frames to associated clients in the powersave mode. The default value is 1 beacon, which means the client checks for buffered data on the Instant AP at every beacon. You can also configure a higher value for power saving.
|
Min RSSI for probe request
|
Sets a minimum threshold for probe requests.
|
Min RSSI for auth request
|
Sets a minimum threshold for authentication requests.
|
Very high throughput
|
Enables the function on Instant AP devices that support . For Instant APs, the function is enabled by default. However, you can disable the function if you want the Instant APs to function as Instant APs.
If is configured or disabled on an , the changes will apply only to the on which it is enabled or disabled.
|
Zone
|
Specify the zone name for the profile. When the zone is defined in profile and if the same zone is defined on an Instant AP, the is created on that Instant AP. Enter multiple zone name as comma-separated values. For more information on configuring zone details, see Configuring Zone Settings on an Instant AP.
|
Time Range
|
Click Edit, select a Time Range Profile from the list and specify if the profile must be enabled or disabled for the , and then click OK.
|
Bandwidth Limits
|
Select the required options under Bandwidth Limits:
Airtime—Select this check box and specify an aggregate amount of airtime that all clients in this network can use for sending and receiving data. Specify the airtime percentage.
Each radio—Select this check box to specify an aggregate amount of throughput that each radio is allowed to provide for the connected clients.
Downstream and Upstream—Specify the downstream and upstream rates within a range of 1 to 65,535 for the users. If the assignment is specific for each user, select the Per user check box.
NOTE: The bandwidth limit set in this method is implemented at a per-AP level and not cluster level.
|
WMM
|
Configure the following options for traffic management. supports voice, video, best effort, and background access categories. To allocate bandwidth for the following types of traffic, specify a percentage value under Share. To configure mapping, specify a value under DSCP Mapping.
Background WMM—For background traffic such as file downloads or print jobs.
Best effort WMM—For best effort traffic such as traffic from legacy devices or traffic from applications or devices that do not support .
Video WMM—For video traffic generated from video streaming.
Voice WMM—For voice traffic generated from the incoming and outgoing voice communication.
NOTE: The traffic management feature is not supported on AP-203H, AP-203R, AP-203RP, AP-207, AP-228, AP-277, 200 Series, 210 Series, 220 Series, 340 Series, and 510 Series access points.
For more information on traffic and mapping, see WMM Traffic Management.
|
For voice traffic and Spectralink Voice Prioritization, configure the following parameters:
Traffic Specification (TSPEC)—To prioritize time-sensitive traffic such as voice traffic initiated by the client, select the Traffic Specification (TSPEC) check box.
TSPEC Bandwidth—To reserve bandwidth, set the TPSEC bandwidth to the desired value within the range of 200–600,000 . The default value is 2000 .
Spectralink Voice Protocol (SVP)—Select the check box to prioritize voice traffic for handsets.
|
Content filtering
|
Select Enabled to route all requests for the non-corporate domains to OpenDNS on this network.
|
Inactivity timeout
|
Specify an interval for session timeout in seconds, minutes, or hours. If a client session is inactive for the specified duration, the session expires and the user is required to log in again. You can specify a value within the range of 60–86,400 seconds (24 hours) for a client session. The default value is 1000 seconds.
|
Deauth Inactive Clients
|
Select Enabled to allow the Instant AP to send a deauthentication frame to the inactive client and clear client entry.
|
SSID
|
Select the Hide check box if you do not want the (network name) to be visible to users.
Select the Disable check box if you want to disable the . On selecting this, the will be disabled, but will not be removed from the network. By default, all are enabled.
|
Out of service (OOS)
|
Enable or disable the based on the following OOS states of the Instant AP:
down
Uplink down
Internet down
Primary uplink down
The network will be out of service when selected event occurs and the is enabled or disabled as per the configuration settings applied. For example, if you select the down option from the drop-down list and set the status to enabled, the is enabled when the connection is down and is disabled when the connection is restored.
|
OOS time (global)
|
Configure a hold time interval in seconds within a range of 30–300 seconds, after which the out-of-service operation is triggered. For example, if the is down and the configured hold time is 45 seconds, the effect of this out-of-service state impacts the availability after 45 seconds.
|
Max clients threshold
|
Specify the maximum number of clients that can be configured for each on a . You can specify a value within the range of 0–255. The default value is 64.
NOTE: When the Max clients threshold parameter is configured, the value is applicable to every Instant AP in a cluster.
|
SSID Encoding
|
To encode the , select UTF-8. By default, the are not encoded.
NOTE: When a wireless is encoded, by default, UTF-8 is added to the access rules that are active on the . However this does not apply for the access rules that are configured separately for the . UTF-8 is not supported for wired networks.
|
ESSID
|
Name that uniquely identifies a wireless network. The network name, or can be up to 32 characters, if it contains Unicode, depending on the language, the maximum characters vary. For example, could be up to 10 Chinese characters or 16 extended characters. If the includes spaces, you must enclose it in quotation marks.
|
Deny inter user bridging
|
When enabled, the bridging traffic
between two clients that are connected to the same on the same is disabled. The clients
can connect to the Internet, but cannot communicate with each other, and the bridging traffic between the clients is
sent to the upstream device to make the forwarding decision.
|
Openflow
|
When enabled, users can run and manage multiple instances of the control-plane and dataplane from a centralized location. also ensures uniform policy enforcement.
|
5. Click Next to configure settings. For more information, see In the Old WebUI.
In the New WebUI
To configure settings:
1. Navigate to the Configuration > Networks page.
2. Under Networks, click +. The Create a new network window is displayed.
3. Under Basic option, Enter a name that uniquely identifies a wireless network in the Name field.
|
The name must be unique and may contain any special character except for ' and ".
|
4. In the Type drop-down list, select Wireless.
5. Based on the type of network profile, select any of the following options for Primary usage:
Employee
Voice
Guest
6. Click the Show advanced options link at the bottom of the page. Specify the following parameters as required.
Table 2: WLAN Configuration Parameters
Parameter |
Description |
Broadcast/Multicast
|
Broadcast filtering
|
Select any of the following values:
All—When set to All, the Instant AP drops all broadcast and multicast frames except and , group queries, and IPv6 neighbor discovery protocols.
—When set to , the Instant AP drops all broadcast and multicast frames except and , group queries, and IPv6 neighbor discovery protocols; additionally, it converts requests to unicast and send frames directly to the associated client. The broadcast filtering option is set to ARP by default when an profile is created.
Unicast-ARP-Only—When set to Unicast-ARP-Only, the Instant AP allows all broadcast and multicast frames as it is, however the requests are converted to unicast frames and sends them to the associated clients.
Disabled—When set to Disabled, all broadcast and multicast traffic is forwarded to the wireless interfaces.
|
Multicast transmission optimization
|
Click the toggle switch if you want the Instant AP to select the optimal rate for sending broadcast and multicast frames based on the lowest of unicast rates across all associated clients. When this parameter is enabled, multicast traffic can be sent at up to 24 . The default rate of sending frames for 2.4 is 1 and that for 5 is 6 . This parameter is disabled by default.
|
Dynamic multicast optimization
|
Click the toggle switch to allow the Instant AP to convert multicast streams into unicast streams over the wireless link. Enabling enhances the quality and reliability of streaming video, while preserving the bandwidth available to the non-video clients.
NOTE: When you enable on multicast profiles, ensure that the feature is enabled on all configured in the same .
|
DMO channel utilization threshold
|
Specify a value to set a threshold for channel utilization. With , the Instant AP converts multicast streams into unicast streams as long as the channel utilization does not exceed this threshold. The default value is 90% and the maximum threshold value is 100%. When the threshold is reached or exceeds the maximum value, the Instant AP sends multicast traffic over the wireless link.
|
Transmit Rates
|
Transmit Rates
|
Specify the following parameters:
2.4 GHz—If the 2.4 is configured on the Instant AP, specify the minimum and maximum transmission rate. The default value for minimum transmission rate is 1 and maximum transmission rate is 54 .
5 GHz—If the 5 is configured on the Instant AP, specify the minimum and maximum transmission rate. The default value for minimum transmission rate is 6 and maximum transmission rate is 54 .
|
802.11
|
Band
|
Select a value to specify the at which the network transmits radio signals. You can set the to 2.4 GHz, 5 GHz, or All. The All option is selected by default.
|
DTIM interval
|
The interval indicates the period in beacons, which can be configured for every profile. The interval determines how often the Instant AP should deliver the buffered broadcast and multicast frames to associated clients in the powersave mode. The default value is 1 beacon, which means the client checks for buffered data on the Instant AP at every beacon. You can also configure a higher value for power saving.
|
Min RSSI for probe request
|
Sets a minimum threshold for probe requests.
|
Min RSSI for auth request
|
Sets a minimum threshold for authentication requests.
|
Very high throughput
|
Enables the function on Instant AP devices that support . For Instant APs, the function is enabled by default. However, you can disable the function if you want the Instant APs to function as Instant APs.
If is configured or disabled on an , the changes will apply only to the on which it is enabled or disabled.
|
High efficiency
|
Defines 802.11ax spectrum efficiency and area throughput on both the 2.4 and 5 frequency .
|
Zone
|
Specify the zone name for the profile. When the zone is defined in profile and if the same zone is defined on an Instant AP, the is created on that Instant AP. Enter multiple zone name as comma-separated values. For more information on configuring zone details, see Configuring Zone Settings on an Instant AP.
|
Time Range
|
Click Edit, select a Time Range Profile from the list, and specify if the profile must be enabled or disabled for the , and then click OK.
|
Bandwidth Limits
|
Select the required options under Bandwidth Limits:
Airtime—Click the toggle switch and specify an aggregate amount of airtime that all clients in this network can use for sending and receiving data. Specify the airtime percentage.
Each radio—Click the toggle switch to specify an aggregate amount of throughput that each radio is allowed to provide for the connected clients.
Downstream and Upstream—Specify the downstream and upstream rates within a range of 1 to 65,535 for the users. If the assignment is specific for each user, select the Per user check box.
NOTE: The bandwidth limit set in this method is implemented at a per-AP level and not cluster level.
|
WMM
|
Configure the following options for traffic management. supports voice, video, best effort, and background access categories. To allocate bandwidth for the following types of traffic, specify a percentage value under Share. To configure mapping, specify a value under DSCP Mapping.
Background WMM—For background traffic such as file downloads or print jobs.
Best effort WMM—For best effort traffic such as traffic from legacy devices or traffic from applications or devices that do not support .
Video WMM—For video traffic generated from video streaming.
Voice WMM—For voice traffic generated from the incoming and outgoing voice communication.
NOTE: The traffic management feature is not supported on AP-203H, AP-203R, AP-203RP, AP-207, AP-228, AP-277, 200 Series, 210 Series, 220 Series, 340 Series, and 510 Series access points.
For more information on traffic and mapping, see WMM Traffic Management.
|
For voice traffic and Spectralink Voice Prioritization, configure the following parameters:
Traffic Specification (TSPEC)—To prioritize time-sensitive traffic such as voice traffic initiated by the client, click the Traffic Specification (TSPEC) toggle switch.
TSPEC Bandwidth—To reserve bandwidth, set the TPSEC bandwidth to the desired value within the range of 200–600,000 . The default value is 2000 .
Spectralink Voice Protocol (SVP)—Click the toggle switch to prioritize voice traffic for handsets.
|
Miscellaneous
|
Content filtering
|
Click the toggle switch to route all requests for the non-corporate domains to OpenDNS on this network.
|
Inactivity timeout
|
Specify an interval for session timeout in seconds, minutes, or hours. If a client session is inactive for the specified duration, the session expires and the user is required to log in again. You can specify a value within the range of 60–86,400 seconds (24 hours) for a client session. The default value is 1000 seconds.
|
Deauth inactive clients
|
Click the toggle switch to allow the Instant AP to send a deauthentication frame to the inactive client and clear client entry.
|
SSID
|
Select the Hide check box if you do not want the (network name) to be visible to users.
Select the Disable check box if you want to disable the . On selecting this, the will be disabled, but will not be removed from the network. By default, all are enabled.
|
Out of service (OOS)
|
Enable or disable the based on the following OOS states of the Instant AP:
down
Uplink down
Internet down
Primary uplink down
The network will be out of service when selected event occurs and the is enabled or disabled as per the configuration settings applied. For example, if you select the down option from the drop-down list and set the status to enabled, the is enabled when the connection is down and is disabled when the connection is restored.
|
OOS time (global)
|
Configure a hold time interval in seconds within a range of 30–300 seconds, after which the out-of-service operation is triggered. For example, if the is down and the configured hold time is 45 seconds, the effect of this out-of-service state impacts the availability after 45 seconds.
|
Max clients threshold
|
Specify the maximum number of clients that can be configured for each on a . You can specify a value within the range of 0–255. The default value is 64.
NOTE: When the Max clients threshold parameter is configured, the value is applicable to every Instant AP in a cluster.
|
SSID Encoding
|
To encode the , select UTF-8. By default, the are not encoded.
NOTE: When a wireless is encoded, by default, UTF-8 is added to the access rules that are active on the . However this does not apply for the access rules that are configured separately for the . UTF-8 is not supported for wired networks.
|
ESSID
|
Name that uniquely identifies a wireless network. The network name, or can be up to 32 characters, if it contains Unicode, depending on the language, the maximum characters vary. For example, could be up to 10 Chinese characters or 16 extended characters. If the includes spaces, you must enclose it in quotation marks.
|
Deny inter user bridging
|
When enabled, the bridging traffic
between two clients that are connected to the same on the same is disabled. The clients
can connect to the Internet, but cannot communicate with each other, and the bridging traffic between the clients is
sent to the upstream device to make the forwarding decision.
|
Openflow
|
When enabled, users can run and manage multiple instances of the control-plane and dataplane from a centralized location. also ensures uniform policy enforcement.
|
7. Click Next to configure settings. For more information, see In the Old WebUI.
In the CLI
To configure settings for an profile, execute the following command in the configuration mode of the .
(Instant AP)(config)# wlan ssid-profile <name>
(Instant AP)(SSID Profile <name>)# essid <ESSID-name>
(Instant AP)(SSID Profile <name>)# type {<Employee>|<Voice>|<Guest>}
(Instant AP)(SSID Profile <name>)# broadcast-filter {All|ARP|Unicast-ARP-Only|Disabled}
(Instant AP)(SSID Profile <name>)# dtim-period <number-of-beacons>
(Instant AP)(SSID Profile <name>)# multicast-rate-optimization
(Instant AP)(SSID Profile <name>)# dynamic-multicast-optimization
(Instant AP)(SSID Profile <name>)# dmo-channel-utilization-threshold
(Instant AP)(SSID Profile <name>)# a-max-tx-rate <rate>
(Instant AP)(SSID Profile <name>)# a-min-tx-rate <rate>
(Instant AP)(SSID Profile <name>)# g-max-tx-rate <rate>
(Instant AP)(SSID Profile <name>)# g-min-tx-rate <rate>
(Instant AP)(SSID Profile <name>)# zone <zone>
(Instant AP)(SSID Profile <name>)# bandwidth-limit <limit>
(Instant AP)(SSID Profile <name>)# per-user-bandwidth-limit <limit>
(Instant AP)(SSID Profile <name>)# air-time-limit <limit>
(Instant AP)(SSID Profile <name>)# wmm-background-dscp <dscp>
(Instant AP)(SSID Profile <name>)# wmm-background-share <share>
(Instant AP)(SSID Profile <name>)# wmm-best-effort-dscp <dscp>
(Instant AP)(SSID Profile <name>)# wmm-best-effort-share <share>
(Instant AP)(SSID Profile <name>)# wmm-video-dscp <dscp>
(Instant AP)(SSID Profile <name>)# wmm-video-share <share>
(Instant AP)(SSID Profile <name>)# wmm-voice-dscp <dscp>
(Instant AP)(SSID Profile <name>)# wmm-voice-share <share>
(Instant AP)(SSID Profile <name>)# rf-band {<2.4>|<5>|<all>}
(Instant AP)(SSID Profile <name>)# content-filtering
(Instant AP)(SSID Profile <name>)# mfp-capable
(Instant AP)(SSID Profile <name>)# mfp-required
(Instant AP)(SSID Profile <name>)# hide-ssid
(Instant AP)(SSID Profile <name>)# out-of-service <def> <name>
(Instant AP)(SSID Profile <name>)# time-range <profile name> {<Enable>|<Disable>}
(Instant AP)(SSID Profile <name>)# inactivity-timeout <interval>
(Instant AP)(SSID Profile <name>)# work-without-uplink
(Instant AP)(SSID Profile <name>)# local-probe-req-thresh <threshold>
(Instant AP)(SSID Profile <name>)# max-clients-threshold <number-of-clients>
Temporal Diversity and Maximum Retries
When clients are not responding to packets with the temporal-diversity parameter disabled, which is the default setting, Instant APs can attempt only hardware retries. But if this parameter is enabled when the clients are not responding to packets, Instant APs can perform two hardware retries. When the hardware retry attempts fail, Instant APs can perform software retries.
The max-retries parameter indicates the maximum number of attempts the Instant AP performs when clients are not responding to packets. By default, the Instant AP attempts a maximum of eight retries when clients are not responding to packets.
The following example shows the configuration of temporal-diversity and max-retries in a profile:
(Instant AP) (config) # wlan ssid-profile Name
(Instant AP) (SSID Profile "Name") # temporal-diversity
(Instant AP) (SSID Profile "Name") # max-retries 3