CISCO Wireless LAN Controller Software

Especificacions

• Feature: Efficient Image Upgrade
• Compatibility: Not recommended for controllers running Cisco IOS XE Amsterdam 17.3.x with Cisco Catalyst 9124AX and Cisco Catalyst 9130AX APs in the same group.

Instruccions d'ús del producte

QEnable Pre-Download (GUI)

1. Go to Configuration > Wireless > Access Points.
2. In the Access Points page, expand the All Access Points section and click the name of the AP to edit.
3. In the Edit AP page, click the Advanced tab.
4. Under the AP Image Management section, click Predownload.
5. Click Update & Apply to Device to enable Pre-Download.

Enable Pre-Download (CLI)

1. Entra en el mode de configuració global mitjançant l'ordre:
   configure terminal.
2. Create a wireless profile flex by entering: wireless
profile flex flex-profile.
3. Enable predownload of the image by using:
   predownload.
4. Exit configuration mode by entering: end.

Configuring a Site Tag (CLI)

1. Access global configuration mode with: configure
terminal.
2. Crear un lloc tag by using: wireless tag site
site-name.
3. Configure a flex profile by entering: flex-profile
flex-profile-name.
4. Add a description for the site tag amb: description
site-tag-name.
5. Save and exit configuration mode by using:
   end.

Efficient Image Upgrade

• Efficient Image upgrade is an efficient way of pre-downloading the image to the APs. It works similarly to – subordinate model. An AP per model becomes the primary AP and downloads the image from the controller through the WAN link. Once the primary AP has downloaded the image, the subordinate APs start downloading the image from the primary AP. In this way, WAN latency is reduced. Primary AP selection is dynamic and random. A maximum of three subordinate APs per AP model can download the image from the primary AP.

Nota: Do not enable this feature on controllers running Cisco IOS XE Amsterdam 17.3.x when there are Cisco Catalyst 9124AX and Cisco Catalyst 9130AX APs in the same group.

Enable Pre-Download (GUI)

• Pas 1: Trieu Configuració > Sense fil > Punts d'accés.
• Step 2: In the Access Points page, expand the All Access Points section and click the name of the AP to edit.
• Step 3: In the Edit AP page, click the Advanced tab and from the AP Image Management section, click Predownload.
• Step 4: Click Update & Apply to Device.

Enable Pre-Download (CLI)

Procediment

	Comandament o acció	Propòsit
Pas 1	configurar el terminal ExampLI: Dispositiu # configura el terminal	Entra al mode de configuració global.
Pas 2	sense fil professionalfile flexionar flex-profile ExampLI: Dispositiu (configuració) # Wireless Profile flex rr-xyz-flex-profile	Configures a flex profile and enters the flex profile mode de configuració.
Pas 3	predownload ExampLI: Dispositiu (config-wireless-flex-profile)# predownload	Enables predownload of the image.
Pas 4	final ExampLI: Dispositiu (config-wireless-flex-profile)# final	Exits the configuration mode and returns to privileged EXEC mode.

Configuring a Site Tag (CLI)

Follow the procedure given below to configure a site tag:

Procediment

	Comandament o acció	Propòsit
Pas 1	configurar el terminal ExampLI: Dispositiu # configura el terminal	Entra en el mode de configuració global.
Pas 2	sense fil tag lloc site-name ExampLI: Device(config)# wireless tag site rr-xyz-site	Configures a site tag and enters site tag mode de configuració.
Pas 3	flex-profile flex-profile-nom ExampLI: Device(config-site-tag)# flex-profile rr-xyz-flex-profile	Configures a flex profile. Nota: You cannot remove the flex profile configuration from a site tag if the local site is configured on the site tag.   Nota: The no local-site command needs to be used to configure the Site Tag as Flexconnect; otherwise, the Flex profile config does not take effect.
Pas 4	descripció lloc-tag-nom ExampLI: Device(config-site-tag)# description “default site tag"	Adds a description for the site tag.
Pas 5	final ExampLI: Device(config-site-tag)# final	Saves the configuration and exits configuration mode and returns to privileged EXEC mode.
Pas 6	show wireless tag site summary ExampLI: Device# show wireless tag site summary	(Optional) Displays the number of site tags. Not:  To view informació detallada about a site, use the show wireless tag site detailed lloc-tag-nom comandament.   Note: The output of the show wireless loadbalance tag affinity wncd wncd-instance-number command displays the default tag (site-tag) type if both sthe ite tag and policy tag are not configured.

Attaching Policy Tag i Lloc Tag to an AP (CLI)

Follow the procedure given below to attach a policy tag and a site tag to an AP:

Procediment

	Comandament o acció	Propòsit
Pas 1	configurar el terminal ExampLI: Dispositiu # configura el terminal	Entra en el mode de configuració global.
Pas 2	ap adreça mac ExampLI: Device(config)# ap F866.F267.7DFB	Configures a Cisco AP and enters AP profile mode de configuració. Nota: L'adreça MAC should be wired.
Pas 3	policy-tag policy-tag-nom ExampLI: Device(config-ap-tag)# policy-tag rr-xyz-policy-tag	Maps a policy tag a l'AP.
Pas 4	lloc-tag lloc-tag-nom ExampLI: Device(config-ap-tag)# site-tag rr-xyz-site	Maps a site tag a l'AP.
Pas 5	rf-tag rf-tag-nom ExampLI: Device(config-ap-tag)# rf-tag rf-tag1	Associates the RF tag.
Pas 6	final ExampLI: Device(config-ap-tag)# final	Saves the configuration, exits configuration mode, and returns to privileged EXEC mode.
Pas 7	show ap tag resum ExampLI: Device# show ap tag resum	(Optional) Displays AP details and the tags associat amb això.
Pas 8	mostra el nom de l'ap <ap-name> tag informació ExampLI: El número de dispositiu mostra el nom de l'ap nom-ap tag informació	(Optional) Displays the AP name with tag informació.
Pas 9	mostra el nom de l'ap <ap-name> tag detall ExampLI:	(Optional) Displays the AP name with tag detalls.

	Comandament o acció	Propòsit
	El número de dispositiu mostra el nom de l'ap nom-ap tag detail..

Trigger Predownload to a Site Tag

Follow the procedure given below to trigger image download to the APs:

Procediment

	Comandament o acció	Propòsit
Pas 1	habilitar ExampLI: Device> configure terminal	Enters the privileged EXEC mode.
Pas 2	ap image predownload site-tag lloc-tag començar ExampLI: Device# ap image predownload site-tag rr-xyz-site start	Instructs the primary APs to start image predownload.
Pas 3	show ap master list ExampLI: Device# show ap master list	Displays the list of primary APs per AP model per site tag.
Pas 4	show ap image ExampLI: Device# show ap image	Displays the pre-downloading state of primary and subordinate APs Note: To check if the Flexefficient image upgrade is enabled in the AP, use the show capwap client rcb command on the AP console.

El següent sample outputs display the functioning of the Efficient Image Upgrade feature:

The following output displays the primary AP.

• Device# show ap master list
• AP Name Site TagWTP Mac AP Model ———–
• AP0896.AD9D.3124
• f80b.cb20.2460 AIR-AP2802I-D-K9 ST1

The following output shows that the primary AP has started pre-downloading the image.

• Device# show ap image
• Nombre total d'AP: 6
• AP Name Primary Image Backup Image Predownload Status Predownload Version
• Next Retry Time Retry Count ———————————–APE00E.DA99.687A 16.6.230.37 0.0.0.0 None 0.0.0.0

The following output shows that the primary AP has completed predownload, and the predownload has been initiated in the subordinate AP.

Device# show ap image.

The following output shows the mage status of a particular AP.

• Device# show ap name APe4aa.5dd1.99b0 image
• AP Name: APe4aa.5dd1.99b0
• Primary Image  16.6.230.46
• Backup Image: 3.0.51.0
• Predownload Status  None
• Predownload Version:000.000.000.000
• Next Retry Time: /A
• Retry Count : 0
• The following output shows predownload completion on all APs.
• Device# show ap image
• Nombre total d'AP: 6
• Number of APs
• Initiated : 0
• Predownloading : 0
• Completed predpre-downloading
• Not Supported : 0
• Failed to Predownload : 0

Feature History for Out-of-Band AP Image Download

• Aquesta taula proporciona la versió i informació relacionada per a la funció explicada en aquest mòdul.
• This feature is available in all the releases after the one in which it is introduced, unless noted otherwise.

Table 1: Feature History for Out-of-Band AP Image Download

Alliberament	Característica	Informació de les funcions
Cisco IOS XE Dublin 17.11.1	Out-of-Band AP Image Download	The AP image upgrade method is enhanced to make the upgrades faster and more flexible.

Information About Out-of-Band AP Image Download

• In WLAN deployments, the APs gather their software image and configuration from the controller (in-band) during the join, predownload, and upgrade phases over the CAPWAP control path. This mechanism has limitations in the context of CAPWAP window size, processing of CAPWAP packets, and parallel image downloads. With image upgrade being a significant activity in the lifecycle of APs, upgrades become a time-consuming activity when the deployment size increases, especially for remote deployments, because the image always comes from the controller, irrespective of the deployment types.
• To make upgrades faster and more flexible, the AP image upgrade method is enhanced in Cisco IOS XE Dublin 17.11.1 release. An enhanced web server (nginx) running on the controller helps the AP image downloads to be available out of the CAPWAP path (out of band).

Nota

• HTTPS configuration done at the global level applies to all the APs joining the controller.
• When AP image download over an Out-of-Band method fails, the download falls back to the CAPWAP method, as a result of which the APs will not be stranded.
• AP image download over HTTPS may fail if the HTTPS server Trustpoint has a chain of CA certificates.
• Before you downgrade from Cisco IOS XE Dublin 17.11.1 to an earlier version, ensure that the Out-of-Band AP Image Download feature is disabled, as it is not supported in previous releases.

Restrictions for Out-of-Band AP Image Download

This feature is not supported on the following platforms:

• Cisco Embedded Wireless Controller on Catalyst Access Points
• Cisco Embedded Wireless Controller on Catalyst Switches
• Cisco Wave 1 Access Points

Download AP Image from Controller Using HTTPS (CLI)

Abans de començar

• HTTPS configuration must be enabled.
• The NGINXx server must be running on the controller. Use the show platform software yang-management process command to check whether the nginx server is running.
• The custom-configured port must be reachable between the controller and the corresponding AP.

Procediment

	Comandament o acció	Propòsit
Pas 1	configurar el terminal ExampLI: Dispositiu # configura el terminal	Entra al mode de configuració global.
Pas 2	ap upgrade method https ExampLI: Device(config)# ap upgrade method https	Configures the corresponding AP to download the image over HTTPS from the controller if the AP supports the out-of-band AP image download method. You can check whether the AP supports efficient download method using the show ap config general comandament. Utilitza el no form of this command to disable the out-of-band AP image download method.
Pas 3	ap file-transfer https port port_number ExampLI: Device(config)# ap file-transfer https port 8445	Configures a custom port for image download from the nginx server running on the controller. For the HTTPS port, the valid values range from 0 to 65535, with a default of 8443. You cannot use port 443 for AP file transfers because it is the default port used for other HTTPS requests. Also, avoid configuring standard and well-known ports because the configuration may fail.

	Comandament o acció	Propòsit
		By default, the Efficient AP image download feature uses port 8443 for HTTPS. If the same port is configured for HTTPS access for controller GUI, then GUI access will not work. In such instances, use a port number other than 8443 for controller GUI Access or configure a different port for AP file transfer over HTTPS instead of 8443. Port 8443 is customizable. A sample config is given below: Source= wireless controller Destination= Access Point Protocol=HTTPS Destination Port=8443 Source Port=any Description= “Out of Band AP Image Download”
Pas 4	final ExampLI: Dispositiu (config) # final	Torna al mode EXEC privilegiat.

Download AP Image from Controller Using HTTPS (GUI)

Procediment

• Pas 1: Choose Configuration >Wireless >Wireless Global.
• Pas 2: In the AP Image Upgrade section, enable the HTTPS Method to allow image download on APs from the controller, over HTTPS. This out-of-band file transfer is an efficient method for AP image upgrade.
  Nota
  • The AP should support out-of-band image download. You can verify this in the Configuration >Wireless > Access Points window. Select the AP, and in the Edit AP > Advanced tab, view the details of the support in the AP Image Management section.
• Pas 3: Enter the HTTPS Port to designate AP file transfers on that port. Valid values range from 0 to 65535, with the default being 8443. Note that you cannot use port 443 for AP file transfers because that is the default port for other HTTPS requests.
  • By default, the Efficient AP image download feature uses port 8443 for HTTPS. If the same port is configured for HTTPS access for the controller GUI, then GUI access will not work. In such instances, use a port number other than 8443 for controller GUI Access or configure a different port for AP file transfer over HTTPS instead of 8443.
• Pas 4: Click Apply to Device to save the configuration.

Verifying Image Upgrade
To check whether an AP supports an efficient download method, use the following command:

• Device# show ap config general
• Cisco AP Name AP002C.C862.E880
• Cisco AP Identifier:002c.c88b.0300
• Country Code: multiple Countries: I, US
• Re gulatory Domain Allowed by Country: 82.11bg:-A 802.11a:-ABDN
• AP Country Code: US – United States
• AP Regulatory Domain
• 802.11bg : -A
• AP Upgrade Out-Of-Band Capability  Enabled
• AP statistics: Disabled

A view the AP image download statistics, use the following command.

Use the show ap image command to see the detailed output.

• Device# show ap image summary
• Total number of APs :
• Number of APs
• Initiated : 0
• Downloading : 0
  Predownloading : 0
• Completed downloading : 0
• Completed predpre-downloading
• Not Supported : 0
• Failed to Predownload : 0
• Predownload in progress: No
• A view the method used to download the AP image, use the following command:
• Device# show wireless stats ap image-download

A view the method used to download the AP image, use the following command:

• Device# show ap upgrade method
• AP upgrade method HTTPS  Disabled

A view the port used for the AP image transfer, use the following command:

• Device# show ap file-transferir https resum
• Configured port:8443
• Operational port  443

!If different ports are shown under ‘Configured port’ and ‘Operations port’

• That customer’s Tom tTomportheiTomation has failed, and is continuing with the previous port.
• !The failure reason could be the input port, which is a well-known port and already in use.
• A view whether an AP supports image download over HTTPS, use the following command:
• Device# show ap name AP2800 config general | sec Upgrade
• AP Upgrade Out-Of-Band Capability: Enabled

A view the detailed output of Aan’s pre-image, use the following command:

• Device# show ap image
• Nombre total d'AP: 2
• Number of APs
• Initiated : 0
• Downloading : 0
• Predownloading : 0
• Completed downloading  2
• Completed prpre-downloading0
• Not Supported : 0
• Failed to Predownload : 0
• Predownload in progress: No

!The ‘method’ column indicates the download method used by the AP.

Preguntes freqüents

Q: Can I use Efficient Image Upgrade feature on all controller types?

A: No, it is not recommended to enable this feature on controllers running Cisco IOS XE Amsterdam 17.3.x when there are Cisco Catalyst 9124AX and Cisco Catalyst 9130AX APs in the same group.

Documents/Recursos

CISCO Wireless LAN Controller Software [pdfGuia de l'usuari Wireless LAN Controller Software, LAN Controller Software, Controller Software, Software

Referències

• Manual d'usuari