Name
|
Name of the Instant AP.
|
(Instant AP)# name <name>
|
System location
|
Physical location of the Instant AP.
|
(Instant AP)#(config)# syslocation <location-name>
|
Virtual Controller IP
|
This parameter allows you to specify a single static IP address that can be used to manage a multi-Instant APInstant network. This IP address is automatically provisioned on a shadow interface on the Instant AP that takes the role of a virtual controller. When anInstant AP becomes a virtual controller, it sends three messages with the static IP address and its address to update the network cache.
|
(Instant AP)(config)# virtual-controller-ip <IP-address>
|
Allow IPv6 Management
|
Click the toggle switch to enable IPv6 configuration
|
|
Virtual Controller IPv6
|
This parameter is used to configure the IPv6 address.
|
(Instant AP)(config)# virtual-controller-ipv6 <ipv6 address>
|
Dynamic RADIUS Proxy
|
When dynamic proxy is enabled, the virtual controller network will use the IP address of the virtual controller for communication with external servers. Ensure that you set the virtual controller IP address as a client in the server if Dynamic proxy is enabled.
|
(Instant AP)(config)# dynamic-radius-proxy
|
Dynamic TACACS Proxy
|
When enabled, the virtual controller network will use the IP address of the virtual controller for communication with external servers. The IP address is chosen based on one of the following rules:
- If a tunnel exists between the Instant AP and the server, then the IP address of the tunnel interface will be used.
- If a virtual controller IP address is configured, the the same will be used by the virtual controller network to communicate with the external server.
- If a virtual controller IP is not configured, then the IP address of the bridge interface is used.
NOTE: When dynamic-tacacs-proxy is enabled on the Instant AP, the server cannot identify the member Instant AP that generates the traffic as the source IP address is changed.
|
(Instant AP)(config)# dynamic-tacacs-proxy
|
MAS Integration
|
Click the toggle switch to enable or disable the protocol for Mobility Access Switch integration. With this protocol, Instant APs can instruct the Mobility Access Switch to turn off ports where rogue access points are connected, as well as take actions such as increasing priority and automatically configuring on ports where Instant access points are connected.
|
(Instant AP)(config)# mas-integration
|
NTP Server
|
This parameter allows you to configure servers for the Instant AP. Up to four servers can be configured for the AP, each one separated by a comma.
To facilitate communication between various elements in a network, time synchronization between the elements and across the network is critical. Time synchronization allows you to:
- Trace and track security gaps, monitor network usage, and troubleshoot network issues.
- Validate certificates.
- Map an event on one network element to a corresponding event on another.
- Maintain accurate time for billing services and similar tasks.
helps obtain the precise time from a server and regulate the local time in each network element. Connectivity to a valid server is required to synchronize the Instant AP clock to set the correct time. If server is not configured in the Instant AP network, an Instant AP reboot may lead to variation in time data.
By default, the Instant AP tries to connect to pool.ntp.org to synchronize time. The server can also be provisioned through the option 42. If the server is configured, it takes precedence over the option 42 provisioned value. The server provisioned through the option 42 is used if no server is configured. The default server pool.ntp.org is used if no server is configured or provisioned through option 42.
NOTE: To facilitate using the , Central, or Activate, you must configure the and wired infrastructure to either allow the traffic to pool.ntp.org, or provide alternative servers under options.
|
To configure servers:
(Instant AP)(config)# ntp-server <name>,<name2>,<name3>,<name4>
To remove servers:
(Instant AP)(config)# no ntp-server
To view status:
(Instant AP)# show ntp status
(Instant AP)# show running-config | include ntp
To view debug logs:
(Instant AP)# show ntp debug
|
Timezone
|
Timezone in which the Instant AP must operate. You can also enable on Instant APs if the time zone you selected supports the . When enabled, the ensures that the Instant APs reflect the seasonal time changes in the region they serve.
|
To configure timezone:
(Instant AP)(config)# clock timezone <name> <hour-offset> <minute-offset>
To configure :
(Instant AP)(config)# clock summer-time <timezone> recurring
<start-week> <start-day> <start-month>
<start-hour> <end-week> <end-day> <end-month> <end-hour>
|
Preferred Band
|
The preferred for the Instant AP.
NOTE: Reboot the Instant AP after modifying the radio profile for changes to take effect.
|
(Instant AP)(config)# rf-band <band>
|
AppRF Visibility
|
Select one of the following options from the AppRF visibility drop-down list.
- App—Displays only inbuilt data.
- WebCC—Displays the data hosted on the cloud.
- All—Displays both and WebCC data.
- None—Does not display any AppRF content.
|
(Instant AP)(config)# dpi
|
URL Visibility
|
Click the toggle switch to enable visibility.
|
(Instant AP)(config)# url-visibility
|
Cluster security
|
Select Enabled to ensure that the control plane messages between access points are secured. This option is disabled by default.
NOTE: The Cluster security setting can be enabled only if the default server or a static server is reachable.
|
(Instant AP)(config)# cluster-security
|