CISCO Wireless LAN Pūmanawa Kaiwhakahaere

Whakatakotoranga

• Āhuahira: Whakapai Atahanga Pai
• Compatibility: Not recommended for controllers running Cisco IOS XE Amsterdam 17.3.x with Cisco Catalyst 9124AX and Cisco Catalyst 9130AX APs in the same group.

Nga Tohutohu Whakamahi Hua

QEnable Pre-Download (GUI)

1. Haere ki te Whirihoranga> Ahokore> Nga Tohu Uru.
2. In the Access Points page, expand the All Access Points section and click the name of the AP to edit.
3. I te whārangi Whakatika AP, pawhiria te ripa Arā Atu Anō.
4. I raro i te waahanga AP Image Management, pawhiria Predownload.
5. Paatohia te Whakahou & Hoatu ki te Pūrere kia taea ai te tango-mua.

Whakahohe Tikiake-mua (CLI)

1. Whakauruhia te aratau whirihoranga ao ma te whakamahi i te whakahau:
   configure terminal.
2. Waihangahia he pro ahokorefile ngawari ma te whakauru: wireless
profile flex flex-profile.
3. Whakahohea te tikiake o te atahanga ma te whakamahi:
   predownload.
4. Putaatu i te aratau whirihoranga ma te whakauru: end.

Whirihorahia he Pae Tag (CLI)

1. Uru ki te aratau whirihoranga ao me: configure
terminal.
2. Waihangatia he pae tag mā te whakamahi: wireless tag site
site-name.
3. Whirihorahia he pro flexfile mā te whakauru: flex-profile
flex-profile-name.
4. Tāpirihia he whakaahuatanga mo te pae tag me: description
site-tag-name.
5. Tiakina ka puta te aratau whirihoranga ma te whakamahi:
   end.

Whakapai Atahanga Pai

• Efficient Image upgrade is an efficient way of pre-downloading the image to the APs. It works similarly to – subordinate model. An AP per model becomes the primary AP and downloads the image from the controller through the WAN link. Once the primary AP has downloaded the image, the subordinate APs start downloading the image from the primary AP. In this way, WAN latency is reduced. Primary AP selection is dynamic and random. A maximum of three subordinate APs per AP model can download the image from the primary AP.

Tuhipoka: Do not enable this feature on controllers running Cisco IOS XE Amsterdam 17.3.x when there are Cisco Catalyst 9124AX and Cisco Catalyst 9130AX APs in the same group.

Whakahohe Tikiake-mua (GUI)

• Hipanga 1: Kōwhiri Whirihoranga> Waeakore> Tohu Uru.
• Step 2: In the Access Points page, expand the All Access Points section and click the name of the AP to edit.
• Step 3: In the Edit AP page, click the Advanced tab and from the AP Image Management section, click Predownload.
• Step 4: Click Update & Apply to Device.

Whakahohe Tikiake-mua (CLI)

Tikanga

	Whakahau, Mahi ranei	Te kaupapa
Hipanga 1	whirihora te tauranga Example: Pūrere# whirihora kāpeka	Ka uru ki te aratau whirihoranga o te ao.
Hipanga 2	ahokore profile whakapiko flex-profile Example: Pūrere(whiriwhiringa)# ahokore profile flex rr-xyz-flex-profile	Ka whirihora i te pro flexfile ka uru ki te flex profile aratau whirihoranga.
Hipanga 3	tango-mua Example: Pūrere(config-wireless-flex-profile)# tango mua	Ka taea te tango i mua i te atahanga.
Hipanga 4	mutunga Example: Pūrere(config-wireless-flex-profile)# mutunga	Ka puta i te aratau whirihoranga ka hoki ki te aratau EXEC whaimana.

Whirihorahia he Pae Tag (CLI)

Whaia te tikanga i raro iho nei hei whirihora i tetahi pae tag:

Tikanga

	Whakahau, Mahi ranei	Te kaupapa
Hipanga 1	whirihora te tauranga Example: Pūrere# whirihora kāpeka	Ka uru ki te aratau whirihoranga ao.
Hipanga 2	ahokore tag pae site-name Example: Pūrere(whiriwhiringa)# ahokore tag pae rr-xyz-pae	Whirihorahia he pae tag ka uru ki te waahi tag aratau whirihoranga.
Hipanga 3	flex-profile flex-profile-ingoa Example: Pūrere(config-site-tag)# flex-profile rr-xyz-flex-profile	Ka whirihora i te pro flexfile. Tuhipoka: Kaore e taea e koe te tango i te flex profile whirihoranga mai i tetahi pae tag if the local site is configured on the site tag.   Tuhipoka: The no local-site command needs to be used to configure the Site Tag as Flexconnect; otherwise, the Flex profile config does not take effect.
Hipanga 4	whakaahuatanga pae-tag-ingoa Example: Pūrere(config-site-tag)# whakaahuatanga “pae taunoa tag”	Ka taapirihia he whakaahuatanga mo te waahi tag.
Hipanga 5	mutunga Example: Pūrere(config-site-tag)# mutunga	Ka tiakina te whirihoranga ka puta ki te aratau whirihoranga ka hoki ki te aratau EXEC whai mana.
Hipanga 6	whakaatu ahokore tag whakarāpopototanga pae Example: Pūrere# whakaatu ahokore tag whakarāpopototanga pae	(Kōwhiringa) Ka whakaatu i te maha o te pae tags. Not:  To view nga korero taipitopito about a site, use the show wireless tag site detailed pae-tag-ingoa whakahau.   Note: The output of the show wireless loadbalance tag hononga wncd wncd-instance-number command displays the default tag (pae-tag) type if both sthe ite tag me te kaupapa here tag are not configured.

Kaupapa Here Tag me te Pae Tag ki tetahi AP (CLI)

Whaia te tikanga i raro iho nei hei taapiri kaupapa here tag me tetahi pae tag ki te AP:

Tikanga

	Whakahau, Mahi ranei	Te kaupapa
Hipanga 1	whirihora te tauranga Example: Pūrere# whirihora kāpeka	Ka uru ki te aratau whirihoranga ao.
Hipanga 2	ap mac-wāhitau Example: Pūrere(whiriwhiringa)# ap F866.F267.7DFB	Ka whirihora i te Cisco AP ka uru ki te AP profile aratau whirihoranga. Tuhipoka: Ko te wahitau MAC should be wired.
Hipanga 3	kaupapa here-tag kaupapa here-tag-ingoa Example: Pūrere(config-ap-tag)# kaupapa-tag rr-xyz-kaupapa-tag	Mahere he kaupapa here tag ki te AP.
Hipanga 4	pae-tag pae-tag-ingoa Example: Pūrere(config-ap-tag)# pae-tag rr-xyz-pae	Mahere he pae tag ki te AP.
Hipanga 5	rf-tag rf-tag-ingoa Example: Pūrere(config-ap-tag)# rf-tag rf-tag1	Ka hono te RF tag.
Hipanga 6	mutunga Example: Pūrere(config-ap-tag)# mutunga	Ka tiakina te whirihoranga, ka puta i te aratau whirihoranga, ka hoki ki te aratau EXEC whaimana.
Hipanga 7	whakaatu ap tag whakarāpopototanga Example: Pūrere# whakaatu ap tag whakarāpopototanga	(Kōwhiringa) Whakaatuhia nga taipitopito AP me te tags e hono ana ki a ia.
Hipanga 8	whakaatu ingoa ap <ap-name> tag korero Example: Pūrere# whakaatu ingoa ap ingoa-ap tag korero	(Kōwhiringa) Whakaatuhia te ingoa AP me tag nga korero.
Hipanga 9	whakaatu ingoa ap <ap-name> tag taipitopito Example:	(Kōwhiringa) Whakaatuhia te ingoa AP me tag taipitopito.

	Whakahau, Mahi ranei	Te kaupapa
	Pūrere# whakaatu ingoa ap ingoa-ap tag detail..

Keu Tuhinga o mua ki tetahi Pae Tag

Whaia te tikanga i raro nei hei whakaoho i te tango pikitia ki nga AP:

Tikanga

	Whakahau, Mahi ranei	Te kaupapa
Hipanga 1	taea Example: Pūrere> whirihora kāpeka	Enters the privileged EXEC mode.
Hipanga 2	ap image predownload site-tag pae-tag timata Example: Pūrere# ap atahanga pae tango-mua-tag rr-xyz-pae timata	Instructs the primary APs to start image predownload.
Hipanga 3	show ap master list Example: Pūrere# whakaatu i te raarangi matua	Ka whakaatu i te rarangi o nga AP tuatahi mo ia tauira AP mo ia waahi tag.
Hipanga 4	show ap image Example: Pūrere# whakaatu whakaahua ap	Displays the pre-downloading state of primary and subordinate APs Note: To check if the Flexefficient image upgrade is enabled in the AP, use the show capwap client rcb whakahau i runga i te papatohu AP.

Ko nga s e whai ake neiampKo nga putanga e whakaatu ana i te mahi o te waahanga Whakapai Atahanga Pai:

Ko te putanga e whai ake nei e whakaatu ana i te AP tuatahi.

• Pūrere# whakaatu i te raarangi matua
• AP Name Site TagWTP Mac AP Model ———–
• AP0896.AD9D.3124
• f80b.cb20.2460 AIR-AP2802I-D-K9 ST1

The following output shows that the primary AP has started pre-downloading the image.

• Pūrere# whakaatu whakaahua ap
• Te maha o nga AP: 6
• AP Name Primary Image Backup Image Predownload Status Predownload Version
• Next Retry Time Retry Count ———————————–APE00E.DA99.687A 16.6.230.37 0.0.0.0 None 0.0.0.0

The following output shows that the primary AP has completed predownload, and the predownload has been initiated in the subordinate AP.

Device# show ap image.

The following output shows the mage status of a particular AP.

• Device# show ap name APe4aa.5dd1.99b0 image
• AP Name: APe4aa.5dd1.99b0
• Primary Image  16.6.230.46
• Backup Image: 3.0.51.0
• Predownload Status  None
• Predownload Version:000.000.000.000
• Next Retry Time: /A
• Retry Count : 0
• Ko te putanga e whai ake nei e whakaatu ana i te whakaotinga o mua tango i nga AP katoa.
• Pūrere# whakaatu whakaahua ap
• Te maha o nga AP: 6
• Te maha o nga AP
• Initiated : 0
• Predownloading : 0
• Completed predpre-downloading
• Not Supported : 0
• Failed to Predownload : 0

Hītori Āhuahira mō te Tikiake Atahanga AP waho-o-Pine

• Ko tenei ripanga he tuku korero me nga korero e pa ana mo te waahanga kua whakamaramatia i tenei waahanga.
• This feature is available in all the releases after the one in which it is introduced, unless noted otherwise.

Ripanga 1: Hītori Āhuahira mō te Tikiake Atahanga AP waho-o-Pee

Tukua	Āhuahira	Nga korero mo te waahanga
Cisco IOS XE Dublin 17.11.1	Tango Atahanga AP-waho-o-Pee	Ko te tikanga whakamohoa whakaahua AP he mea whakarei ake kia tere ake ai nga whakamohoatanga.

Nga korero mo te tango whakaahua AP-waho

• I roto i nga whakatakotoranga WLAN, ka kohia e nga AP o raatau ahua rorohiko me te whirihoranga mai i te kaiwhakahaere (i roto i te roopu) i te wa o te whakauru, te tango i mua, me te whakahou i nga waahanga i runga i te ara whakahaere CAPWAP. He herenga tenei tikanga i roto i te horopaki o te rahinga matapihi CAPWAP, te tukatuka o nga paatete CAPWAP, me te tango whakaahua whakarara. Na te mea he mahi nui te whakamohoatanga o te ahua i roto i te huringa ora o nga AP, ka noho nga mahi whakamohoatanga hei mahi pau i te wa ka nui haere te rahi o te tuku, ina koa mo nga whakatakotoranga mamao, na te mea ka puta mai te ahua mai i te kaiwhakahaere, ahakoa nga momo tuku.
• Kia tere ake te whakamohoatanga me te ngawari ake, ka whakareihia te tikanga whakamohoatanga ahua AP i roto i te tukunga Cisco IOS XE Dublin 17.11.1. He whakarei web Ko te server (nginx) e rere ana i runga i te kaiwhakahaere ka awhina i nga tango whakaahua AP kia waatea mai i te ara CAPWAP (i waho o te roopu).

Tuhipoka

• HTTPS configuration done at the global level applies to all the APs joining the controller.
• When AP image download over an Out-of-Band method fails, the download falls back to the CAPWAP method, as a result of which the APs will not be stranded.
• AP image download over HTTPS may fail if the HTTPS server Trustpoint has a chain of CA certificates.
• Before you downgrade from Cisco IOS XE Dublin 17.11.1 to an earlier version, ensure that the Out-of-Band AP Image Download feature is disabled, as it is not supported in previous releases.

Nga Rahui mo te Tikiake Atahanga AP-waho-o-Paepu

This feature is not supported on the following platforms:

• Cisco Embedded Wireless Controller on Catalyst Access Points
• Cisco Embedded Wireless Controller on Catalyst Switches
• Cisco Wave 1 Access Points

Tikiake Atahanga AP mai i te Kaiwhakahaere Ma te whakamahi HTTPS (CLI)

I mua i to tiimata

• HTTPS configuration must be enabled.
• The NGINXx server must be running on the controller. Use the show platform software yang-management process command to check whether the nginx server is running.
• The custom-configured port must be reachable between the controller and the corresponding AP.

Tikanga

	Whakahau, Mahi ranei	Te kaupapa
Hipanga 1	whirihora te tauranga Example: Pūrere# whirihora kāpeka	Ka uru ki te aratau whirihoranga o te ao.
Hipanga 2	ap tikanga whakahou https Example: Device(config)# ap upgrade method https	Configures the corresponding AP to download the image over HTTPS from the controller if the AP supports the out-of-band AP image download method. You can check whether the AP supports efficient download method using the show ap config general whakahau. Whakamahia te kahore form of this command to disable the out-of-band AP image download method.
Hipanga 3	ap file-transfer https port port_number Example: Pūrere(whiriwhiringa)# ap file-whakawhitinga https tauranga 8445	Whirihorahia he tauranga ritenga mo te tango whakaahua mai i te tūmau nginx e rere ana i runga i te pūmana. For the HTTPS port, the valid values range from 0 to 65535, with a default of 8443. You cannot use port 443 for AP file transfers because it is the default port used for other HTTPS requests. Also, avoid configuring standard and well-known ports because the configuration may fail.

	Whakahau, Mahi ranei	Te kaupapa
		By default, the Efficient AP image download feature uses port 8443 for HTTPS. If the same port is configured for HTTPS access for controller GUI, then GUI access will not work. In such instances, use a port number other than 8443 for controller GUI Access or configure a different port for AP file whakawhiti ma runga HTTPS hei utu mo te 8443. Port 8443 is customizable. A sampKo te whirihora kei raro nei: Source= wireless controller Destination= Access Point Protocol=HTTPS Destination Port=8443 Source Port=any Description= “Out of Band AP Image Download”
Hipanga 4	mutunga Example: Pūrere(whiriwhiringa)# mutunga	Ka hoki ki te aratau EXEC whaimana.

Tikiake Atahanga AP mai i te Kaiwhakahaere Ma te whakamahi i te HTTPS (GUI)

Tikanga

• Hipanga 1: Choose Configuration >Wireless >Wireless Global.
• Hipanga 2: I roto i te waahanga AP Image Upgrade, whakaaheitia te Tikanga HTTPS ki te tuku whakaahua ki nga AP mai i te kaiwhakahaere, ki runga HTTPS. Ko tenei roopu-waho file Ko te whakawhitinga he tikanga pai mo te whakapai ake i te ahua AP.
  Tuhipoka
  • The AP should support out-of-band image download. You can verify this in the Configuration >Wireless > Access Points window. Select the AP, and in the Edit AP > Advanced tab, view nga korero mo te tautoko i te waahanga Whakahaere Atahanga AP.
• Hipanga 3: Whakauruhia te Tauranga HTTPS hei tohu AP file nga whakawhitinga i runga i taua tauranga. Ko nga uara whaimana mai i te 0 ki te 65535, me te taunoa ko te 8443. Kia mahara kaore e taea e koe te whakamahi tauranga 443 mo AP file nga whakawhitinga na te mea koinei te tauranga taunoa mo etahi atu tono HTTPS.
  • By default, the Efficient AP image download feature uses port 8443 for HTTPS. If the same port is configured for HTTPS access for the controller GUI, then GUI access will not work. In such instances, use a port number other than 8443 for controller GUI Access or configure a different port for AP file whakawhiti ma runga HTTPS hei utu mo te 8443.
• Hipanga 4: Pāwhiritia Hoatu ki te Pūrere hei tiaki i te whirihoranga.

Manatoko Whakapai Atahanga
To check whether an AP supports an efficient download method, use the following command:

• Pūrere# whakaatu te whirihoranga ap whānui
• Cisco AP Name AP002C.C862.E880
• Cisco AP Identifier:002c.c88b.0300
• Country Code: multiple Countries: I, US
• Re gulatory Domain Allowed by Country: 82.11bg:-A 802.11a:-ABDN
• AP Country Code: US – United States
• AP Regulatory Domain
• 802.11bg : -A
• AP Upgrade Out-Of-Band Capability  Enabled
• AP statistics: Disabled

Ki view the AP image download statistics, use the following command.

Use the show ap image command to see the detailed output.

• Pūrere# whakaatu whakarāpopoto whakaahua ap
• Total number of APs :
• Te maha o nga AP
• Initiated : 0
• Downloading : 0
  Predownloading : 0
• Completed downloading : 0
• Completed predpre-downloading
• Not Supported : 0
• Failed to Predownload : 0
• Predownload in progress: No
• Ki view te tikanga i whakamahia hei tango i te ahua AP, whakamahia te whakahau e whai ake nei:
• Pūrere# whakaatu tatauranga ahokore ap whakaahua-tangohanga

Ki view te tikanga i whakamahia hei tango i te ahua AP, whakamahia te whakahau e whai ake nei:

• Device# show ap upgrade method
• AP upgrade method HTTPS  Disabled

Ki view te tauranga i whakamahia mo te whakawhiti whakaahua AP, whakamahia te whakahau e whai ake nei:

• Pūrere# whakaatu ap file-whakawhitinga whakarāpopototanga https
• Configured port:8443
• Operational port  443

!If different ports are shown under ‘Configured port’ and ‘Operations port’

• That customer’s Tom tTomportheiTomation has failed, and is continuing with the previous port.
• !Ko te take i kore ai ko te tauranga whakauru, he tauranga rongonui, kua whakamahia.
• Ki view whether an AP supports image download over HTTPS, use the following command:
• Pūrere# whakaatu ingoa ap AP2800 whirihora whānui | hekona Whakapai ake
• AP Upgrade Out-Of-Band Capability: Enabled

Ki view the detailed output of Aan’s pre-image, use the following command:

• Pūrere# whakaatu whakaahua ap
• Te maha o nga AP: 2
• Te maha o nga AP
• Initiated : 0
• Downloading : 0
• Predownloading : 0
• Completed downloading  2
• Completed prpre-downloading0
• Not Supported : 0
• Failed to Predownload : 0
• Predownload in progress: No

!Ko te 'tikanga' tīwae e tohu ana i te tikanga tango e whakamahia ana e te AP.

FAQ

Q: Ka taea e au te whakamahi i te waahanga Whakapai Atahanga Pai mo nga momo kaiwhakahaere katoa?

A: No, it is not recommended to enable this feature on controllers running Cisco IOS XE Amsterdam 17.3.x when there are Cisco Catalyst 9124AX and Cisco Catalyst 9130AX APs in the same group.

Tuhinga / Rauemi

CISCO Wireless LAN Pūmanawa Kaiwhakahaere [pdf] Aratohu Kaiwhakamahi Pūmanawa Kaiwhakahaere LAN Ahokore, Pūmanawa Kaiwhakahaere LAN, Pūmanawa Kaiwhakahaere, Pūmanawa

Tohutoro

• Pukapuka Kaiwhakamahi