CISCO Wireless LAN Pule Polokalama

Fa'amatalaga

• Fa'aaliga: Fa'aleleia Ata Lelei
• Compatibility: Not recommended for controllers running Cisco IOS XE Amsterdam 17.3.x with Cisco Catalyst 9124AX and Cisco Catalyst 9130AX APs in the same group.

Fa'atonuga o le Fa'aaogaina o Mea

QEnable Pre-Download (GUI)

1. Alu i le Configuration> Wireless> Access Points.
2. In the Access Points page, expand the All Access Points section and click the name of the AP to edit.
3. I le Fa'asa'o AP itulau, kiliki le Advanced tab.
4. I lalo ole AP Image Management vaega, kiliki Predownload.
5. Kiliki Fa'afou & Fa'aoga i le Masini e fa'agaoioi ai le muai-Download.

Fa'agaoioi le muai la'uina (CLI)

1. Ulufale i le tulaga faʻatulagaina o le lalolagi e ala i le faʻaaogaina o le poloaiga:
   configure terminal.
2. Fausia se wireless profile fetuutuunai e ala i le ulufale: wireless
profile flex flex-profile.
3. Fa'agaoioi le la'uina muamua o le ata i le fa'aoga:
   predownload.
4. Tu'u ese le faiga fa'atulagaina e ala i le ulufale i totonu: end.

Fa'atulagaina o se Nofoaga Tag (CLI)

1. Avanoa i le faiga fa'atulagaina o le lalolagi ma: configure
terminal.
2. Fausia se saite tag fa'aaoga: wireless tag site
site-name.
3. Fa'atulaga se flex profile e ala i le ulufale: flex-profile
flex-profile-name.
4. Fa'aopoopo se fa'amatalaga mo le saite tag ma: description
site-tag-name.
5. Fa'asao ma alu ese mai le fa'atulagaga fa'aoga i le fa'aoga:
   end.

Fa'aleleia Ata Lelei

• Efficient Image upgrade is an efficient way of pre-downloading the image to the APs. It works similarly to – subordinate model. An AP per model becomes the primary AP and downloads the image from the controller through the WAN link. Once the primary AP has downloaded the image, the subordinate APs start downloading the image from the primary AP. In this way, WAN latency is reduced. Primary AP selection is dynamic and random. A maximum of three subordinate APs per AP model can download the image from the primary AP.

Fa'aaliga: Do not enable this feature on controllers running Cisco IOS XE Amsterdam 17.3.x when there are Cisco Catalyst 9124AX and Cisco Catalyst 9130AX APs in the same group.

Fa'agaoioi le muai la'uina (GUI)

• Laasaga 1: Filifili Configuration> Ueaea> Avanoa Points.
• Step 2: In the Access Points page, expand the All Access Points section and click the name of the AP to edit.
• Step 3: In the Edit AP page, click the Advanced tab and from the AP Image Management section, click Predownload.
• Laa 4: Kiliki Faʻafou & Faʻaoga i masini.

Fa'agaoioi le muai la'uina (CLI)

Taualumaga

	Poloaiga po o Gaioiga	Faamoemoega
Laasaga 1	fetuutuunai laina ExampLe: Meafaigaluega # fetuutuunai laina	Ulufale atu i le faiga fa'atulagaina o le lalolagi.
Laasaga 2	uaealesi profile fetuutuunai flex-profile ExampLe: Meafaigaluega(config)# wireless profile fetuutuunai rr-xyz-flex-profile	Fa'atulaga se flex profile ma ulufale i le flex profile faiga faatulagaina.
Laasaga 3	muai download ExampLe: Meafaigaluega(config-wireless-flex-profile)# muai download	Fa'aagaioi le la'uina muamua o le ata.
Laasaga 4	i'uga ExampLe: Meafaigaluega(config-wireless-flex-profile)# gata	Tu'u ese mai le tulaga fa'atulagaina ma toe fo'i i le tulaga fa'apitoa EXEC.

Fa'atulagaina o se Nofoaga Tag (CLI)

Mulimuli i le faʻagasologa o loʻo tuʻuina atu i lalo e faʻapipiʻi ai se saite tag:

Taualumaga

	Poloaiga po o Gaioiga	Faamoemoega
Laasaga 1	fetuutuunai laina ExampLe: Meafaigaluega # fetuutuunai laina	Ulufale atu i le faiga fa'atulagaina o le lalolagi.
Laasaga 2	uaealesi tag nofoaga site-name ExampLe: Meafaigaluega(config)# uaealesi tag nofoaga rr-xyz-site	Fa'atonu se saite tag ma ulufale i le nofoaga tag faiga faatulagaina.
Laasaga 3	flex-profile flex-profile-igoa ExampLe: Meafaigaluega(config-site-tag)# flex-profile rr-xyz-flex-profile	Fa'atulaga se flex profile. Fa'aaliga: E le mafai ona e aveese le fusu profile faatulagaga mai se nofoaga tag if the local site is configured on the site tag.   Fa'aaliga: The no local-site command needs to be used to configure the Site Tag as Flexconnect; otherwise, the Flex profile config does not take effect.
Laasaga 4	fa'amatalaga nofoaga-tag-igoa ExampLe: Meafaigaluega(config-site-tag)# fa'amatalaga “site default tag”	Fa'aopoopo se fa'amatalaga mo le saite tag.
Laasaga 5	i'uga ExampLe: Meafaigaluega(config-site-tag)# gata	Fa'asaoina le fa'atulagaga ma alu ese mai le fa'atulagaga fa'atulagaina ma toe fo'i i le tulaga fa'apitoa EXEC.
Laasaga 6	fa'aali uaea tag otootoga nofoaga ExampLe: Meafaigaluega# fa'aali uaea tag otootoga nofoaga	(Filifili) Fa'aali le numera o saite tags. Not:  To view fa'amatalaga auiliili about a site, use the show wireless tag site detailed nofoaga-tag-igoa poloaiga.   Note: The output of the show wireless loadbalance tag sootaga wncd wncd-instance-number command displays the default tag (nofoaga-tag) type if both sthe ite tag ma faiga faavae tag are not configured.

Fa'apipi'i Faiga Fa'avae Tag ma le Nofoaga Tag i se AP (CLI)

Mulimuli i le faʻagasologa o loʻo tuʻuina atu i lalo e faʻapipiʻi ai se faiga faʻavae tag ma se saite tag i se AP:

Taualumaga

	Poloaiga po o Gaioiga	Faamoemoega
Laasaga 1	fetuutuunai laina ExampLe: Meafaigaluega # fetuutuunai laina	Ulufale atu i le faiga fa'atulagaina o le lalolagi.
Laasaga 2	ap tuatusi mac ExampLe: Meafaigaluega(config)# ap F866.F267.7DFB	Fa'atulaga se Cisco AP ma ulufale i le AP profile faiga faatulagaina. Fa'aaliga: Le tuatusi MAC should be wired.
Laasaga 3	faiga-tag faiga-tag-igoa ExampLe: Meafaigaluega(config-ap-tag)# faiga-tag rr-xyz-faiga-tag	Fa'afanua se faiga fa'avae tag i le AP.
Laasaga 4	nofoaga-tag nofoaga-tag-igoa ExampLe: Meafaigaluega(config-ap-tag)# nofoaga-tag rr-xyz-site	Fa'afanua se nofoaga tag i le AP.
Laasaga 5	rf-tag rf-tag-igoa ExampLe: Meafaigaluega(config-ap-tag)# rf-tag rf-tag1	Faʻafesoʻotaʻi le RF tag.
Laasaga 6	i'uga ExampLe: Meafaigaluega(config-ap-tag)# gata	Fa'asaoina le fa'atulagaga, alu ese mai le fa'atulagaga fa'atulagaina, ma toe fo'i i le tulaga fa'apitoa EXEC.
Laasaga 7	faaali ap tag aotelega ExampLe: Meafaigaluega# fa'aali ap tag aotelega	(Filifili) Fa'aali fa'amatalaga AP ma le tags e fesootai i ai.
Laasaga 8	faaali le igoa ap <ap-name> tag fa'amatalaga ExampLe: Meafaigaluega# fa'aali le igoa ole app ap-igoa tag fa'amatalaga	(Filifili) Fa'aali le igoa AP ma tag fa'amatalaga.
Laasaga 9	faaali le igoa ap <ap-name> tag auiliiliga ExampLe:	(Filifili) Fa'aali le igoa AP ma tag fa'amatalaga.

	Poloaiga po o Gaioiga	Faamoemoega
	Meafaigaluega# fa'aali le igoa ole app ap-igoa tag detail..

Fa'aoso Predownload i se Nofoaga Tag

Mulimuli i le faʻataʻitaʻiga o loʻo tuʻuina atu i lalo e faʻaosoina ai ata e sii mai i APs:

Taualumaga

	Poloaiga po o Gaioiga	Faamoemoega
Laasaga 1	mafai ExampLe: Meafaigaluega> fetuutuunai laina	Enters the privileged EXEC mode.
Laasaga 2	ata app predownload site-tag nofoaga-tag amata ExampLe: Masini # app ata sa'o muamua download-tag rr-xyz-site amata	Instructs the primary APs to start image predownload.
Laasaga 3	show ap master list ExampLe: Meafaigaluega# fa'aali le lisi o matai	Fa'aali le lisi o AP muamua ile fa'ata'ita'iga AP ile nofoaga tag.
Laasaga 4	show ap image ExampLe: Meafaigaluega# fa'aali ata ata	Displays the pre-downloading state of primary and subordinate APs Note: To check if the Flexefficient image upgrade is enabled in the AP, use the show capwap client rcb fa'atonuga ile AP console.

O sampO galuega fa'atino e fa'aalia ai le fa'aogaina o le Fa'aleleia o ata lelei:

Ole fa'auluuluga lea e fa'aalia ai le AP muamua.

• Meafaigaluega# fa'aali le lisi o matai
• AP Name Site TagWTP Mac AP Model ———–
• AP0896.AD9D.3124
• f80b.cb20.2460 AIR-AP2802I-D-K9 ST1

The following output shows that the primary AP has started pre-downloading the image.

• Meafaigaluega# fa'aali ata ata
• Aofa'iga o AP: 6
• AP Name Primary Image Backup Image Predownload Status Predownload Version
• Next Retry Time Retry Count ———————————–APE00E.DA99.687A 16.6.230.37 0.0.0.0 None 0.0.0.0

The following output shows that the primary AP has completed predownload, and the predownload has been initiated in the subordinate AP.

Device# show ap image.

The following output shows the mage status of a particular AP.

• Device# show ap name APe4aa.5dd1.99b0 image
• AP Name: APe4aa.5dd1.99b0
• Primary Image  16.6.230.46
• Backup Image: 3.0.51.0
• Predownload Status  None
• Predownload Version:000.000.000.000
• Next Retry Time: /A
• Retry Count : 0
• O lo'o fa'aalia i lalo le fa'aulufaleina o le fa'amae'aina o AP uma.
• Meafaigaluega# fa'aali ata ata
• Aofa'iga o AP: 6
• Numera o APs
• Initiated : 0
• Predownloading : 0
• Completed predpre-downloading
• Not Supported : 0
• Failed to Predownload : 0

Tala'aga Fa'apitoa mo le Lafoaiina o Ata AP i fafo-of-Band

• O lenei laulau o lo'o tu'uina atu ai fa'amatalaga ma fa'amatalaga fa'atatau mo le vaega o lo'o fa'amatalaina i totonu o lenei module.
• This feature is available in all the releases after the one in which it is introduced, unless noted otherwise.

Laulau 1: Talafa'asolopito o Fa'aaliga mo le La'uina o Ata AP i fafo-of-Band

Fa'asa'oloto	Fa'aaliga	Fa'amatalaga Fa'aaliga
Cisco IOS XE Dublin 17.11.1	Lafoaiina Ata AP i fafo-o-faili	O le AP ata faʻaleleia auala e faʻaleleia ina ia faʻaleleia vave ma sili atu ona fetuutuunai.

Fa'amatalaga e uiga i fafo-of-Band AP Ata Download

• I fa'agaioiga WLAN, e aoina e le AP a latou ata fa'akomepiuta ma fa'atulagaina mai le pule (in-band) i le taimi o le fa'atasi, mua'i download, ma fa'aleleia vaega i luga o le ala fa'atonutonu CAPWAP. O lenei masini e iai tapula'a i le tulaga o le lapo'a o le fa'amalama o le CAPWAP, fa'agaioiga o pepa CAPWAP, ma ata fa'atusa e siiina mai. Faatasi ai ma le faʻaleleia o ata o se gaioiga taua i le olaga o APs, o le faʻaleleia e avea ma taimi e alu ai le taimi pe a faʻateleina le faʻapipiʻiina o le tele, aemaise lava mo le faʻapipiʻiina mamao, aua o le ata e masani lava ona sau mai le pule, e tusa lava po o le a le ituaiga faʻapipiʻiina.
• Ina ia faʻaleleia vave ma sili atu ona fetuutuunai, ua faʻaleleia le auala faʻaleleia o ata AP ile Cisco IOS XE Dublin 17.11.1 faʻamalolo. O se faaleleia web server (nginx) o loʻo taʻavale i luga o le pule e fesoasoani i le faʻapipiʻiina o ata AP ina ia avanoa mai le ala CAPWAP (i fafo o le band).

Manatua

• HTTPS configuration done at the global level applies to all the APs joining the controller.
• When AP image download over an Out-of-Band method fails, the download falls back to the CAPWAP method, as a result of which the APs will not be stranded.
• AP image download over HTTPS may fail if the HTTPS server Trustpoint has a chain of CA certificates.
• Before you downgrade from Cisco IOS XE Dublin 17.11.1 to an earlier version, ensure that the Out-of-Band AP Image Download feature is disabled, as it is not supported in previous releases.

Tapula'a mo le La'uina o Ata AP i fafo-of-Band

This feature is not supported on the following platforms:

• Cisco Embedded Wireless Controller on Catalyst Access Points
• Cisco Embedded Wireless Controller on Catalyst Switches
• Cisco Wave 1 Access Points

La'u Ata AP mai le Pule Fa'aaoga HTTPS (CLI)

Ae e te le'i amataina

• HTTPS configuration must be enabled.
• The NGINXx server must be running on the controller. Use the show platform software yang-management process command to check whether the nginx server is running.
• The custom-configured port must be reachable between the controller and the corresponding AP.

Taualumaga

	Poloaiga po o Gaioiga	Faamoemoega
Laasaga 1	fetuutuunai laina ExampLe: Meafaigaluega # fetuutuunai laina	Ulufale atu i le faiga fa'atulagaina o le lalolagi.
Laasaga 2	ap faʻaleleia auala https ExampLe: Device(config)# ap upgrade method https	Configures the corresponding AP to download the image over HTTPS from the controller if the AP supports the out-of-band AP image download method. You can check whether the AP supports efficient download method using the show ap config general poloaiga. Fa'aaoga le leai form of this command to disable the out-of-band AP image download method.
Laasaga 3	ap file-transfer https port port_number ExampLe: Meafaigaluega(config)# ap file-siitia https port 8445	Fa'atulaga se uafu fa'aaganu'u mo ata la'uina mai le server nginx o lo'o fa'agasolo i luga ole pule. For the HTTPS port, the valid values range from 0 to 65535, with a default of 8443. You cannot use port 443 for AP file transfers because it is the default port used for other HTTPS requests. Also, avoid configuring standard and well-known ports because the configuration may fail.

	Poloaiga po o Gaioiga	Faamoemoega
		By default, the Efficient AP image download feature uses port 8443 for HTTPS. If the same port is configured for HTTPS access for controller GUI, then GUI access will not work. In such instances, use a port number other than 8443 for controller GUI Access or configure a different port for AP file fesiitai ile HTTPS nai lo le 8443. Port 8443 is customizable. A sample config o loʻo tuʻuina atu i lalo: Source= wireless controller Destination= Access Point Protocol=HTTPS Destination Port=8443 Source Port=any Description= “Out of Band AP Image Download”
Laasaga 4	i'uga ExampLe: Meafaigaluega(config)# fa'ai'uga	Toe fo'i i le tulaga fa'apitoa EXEC.

La'u Ata AP mai le Pule Fa'aaogā le HTTPS (GUI)

Taualumaga

• Laasaga 1: Choose Configuration >Wireless >Wireless Global.
• Laasaga 2: I le vaega o le AP Image Upgrade, fa'ataga le Metotia HTTPS e fa'ataga ai le siiina mai o ata ile APs mai le pule, ile HTTPS. Lenei out-of-band file fesiitaiga o se auala lelei mo le faʻaleleia o ata AP.
  Manatua
  • The AP should support out-of-band image download. You can verify this in the Configuration >Wireless > Access Points window. Select the AP, and in the Edit AP > Advanced tab, view auiliiliga o le lagolago i le vaega AP Image Management.
• Laasaga 3: Ulufale i le Taulaga HTTPS e faʻasino AP file fesiitaiga i lea uafu. O tau aoga e amata mai le 0 i le 65535, ma le faaletonu o le 8443. Manatua e le mafai ona e fa'aogaina le port 443 mo AP file fesiitaiga aua o le taulaga le aoga mo isi talosaga HTTPS.
  • By default, the Efficient AP image download feature uses port 8443 for HTTPS. If the same port is configured for HTTPS access for the controller GUI, then GUI access will not work. In such instances, use a port number other than 8443 for controller GUI Access or configure a different port for AP file fesiitai ile HTTPS nai lo le 8443.
• Laasaga 4: Kiliki Apply to Device e fa'asaoina le fa'atulagaga.

Fa'amaonia le Fa'aleleia o Ata
To check whether an AP supports an efficient download method, use the following command:

• Meafaigaluega# fa'aali le fa'atonuga lautele
• Cisco AP Name AP002C.C862.E880
• Cisco AP Identifier:002c.c88b.0300
• Country Code: multiple Countries: I, US
• Re gulatory Domain Allowed by Country: 82.11bg:-A 802.11a:-ABDN
• AP Country Code: US – United States
• AP Regulatory Domain
• 802.11bg : -A
• AP Upgrade Out-Of-Band Capability  Enabled
• AP statistics: Disabled

I view the AP image download statistics, use the following command.

Use the show ap image command to see the detailed output.

• Meafaigaluega# fa'aali le aotelega ata o le app
• Total number of APs :
• Numera o APs
• Initiated : 0
• Downloading : 0
  Predownloading : 0
• Completed downloading : 0
• Completed predpre-downloading
• Not Supported : 0
• Failed to Predownload : 0
• Predownload in progress: No
• I view le auala na faʻaaogaina e sii mai ai le ata AP, faʻaaoga le poloaiga lenei:
• Meafaigaluega# fa'aali fuainumera uaealesi ap ata-la'i mai

I view le auala na faʻaaogaina e sii mai ai le ata AP, faʻaaoga le poloaiga lenei:

• Device# show ap upgrade method
• AP upgrade method HTTPS  Disabled

I view le taulaga na faʻaaogaina mo le faʻaliliuina o ata AP, faʻaaoga le poloaiga lenei:

• Meafaigaluega# fa'aali ap file-faaliliuina https aotelega
• Configured port:8443
• Operational port  443

!If different ports are shown under ‘Configured port’ and ‘Operations port’

• That customer’s Tom tTomportheiTomation has failed, and is continuing with the previous port.
• !O le mafua'aga o le toilalo e mafai ona avea ma taulaga fa'aoga, lea o se uafu ta'uta'ua ma ua uma ona fa'aoga.
• I view whether an AP supports image download over HTTPS, use the following command:
• Mea # fa'aali le igoa ole AP2800 config general | sec Fa'aleleia
• AP Upgrade Out-Of-Band Capability: Enabled

I view the detailed output of Aan’s pre-image, use the following command:

• Meafaigaluega# fa'aali ata ata
• Aofa'iga o AP: 2
• Numera o APs
• Initiated : 0
• Downloading : 0
• Predownloading : 0
• Completed downloading  2
• Completed prpre-downloading0
• Not Supported : 0
• Failed to Predownload : 0
• Predownload in progress: No

!O le 'auala' koluma o lo'o fa'ailoa mai ai le auala o lo'o fa'aogaina e le AP.

FAQs

Q: E mafai ona ou fa'aogaina le Fa'aleleia o ata o ata i luga o ituaiga uma e pulea?

A: No, it is not recommended to enable this feature on controllers running Cisco IOS XE Amsterdam 17.3.x when there are Cisco Catalyst 9124AX and Cisco Catalyst 9130AX APs in the same group.

Pepa / Punaoa

CISCO Wireless LAN Pule Polokalama [pdf] Taiala mo Tagata Fa'aoga Polokalama Pulea LAN uaealesi, Polokalama Pulea LAN, Polokalama Pule, Polokalama

Fa'asinomaga

• Tusi Taiala