Mobility Roadshow

Detailní pohled na naše technologie, dema a diskuze

Jaroslav Čížek, Cisco

November 2016

• Demo – Mobility Express, WLC 8.4, CMX Cloud

• Digital Network Architecture with Wave 2 11ac - AP2800/3800 Feature Highlights

• Mobility Express Details

• AP1560 – more details

Agenda

Digital Network Architecture with Wave 2 11ac - AP 2800/3800 Feature Highlights

Flexible Radio Assignment

Optimized Roaming

Turbo Performance

Zero Impact AVC

Cisco CleanAir®

Cisco ClientLink

Future Proof Expandability

Multi-Gigabit Uplinks Gb+

Flex Dynamic Frequency Selection

Wireless excellence and innovations delivered only by Cisco Aironet 2800, 3800 APs

Apple Fast Lane

LAS VEGAS TOKYO

Optimized Roaming

RX-SOP

Pervasive Wi-Fi

HDX Turbo

Performance

Event Driven

RRM

XOR Radio

FRA

Cisco CleanAir®

RF Profiles

RRM, DCA, TPC, CHDM

Load Balancing

Band Select

Client Link 4.0

Off-Channel

Scanning

Flex DFS

DBS

5GHz Serving

2.4GHz Serving

5/2.4GHz Monitor

• Enabled by Dual 5GHz • Adjust Radio Bands to Better Serve the

Environment

RF Optimized Connectivity

XOR Radio and FRA 2.4GHz

Serving

2.4-5GHz

Monitoring

5GHz.

Serving

5GHz.

Serving

2.4GHz

Serving 5GHz.

Serving

5GHz

Serving 5Hz

Serving

2.4GHz

Serving

FRA-auto (default value) or Manual

Auto 2.4 -> 5GHz or Monitor Mode

Transition to 2.4 GHz if coverage drops

Dual 5GHz – Macro/Micro Cell Improves Client Performanceand Capacity

• Improves the Effective Spectrum Usage

• Micro-Radio

• High Performance 802.11ac Clients

near the AP at 802.11ac data rates

• Excellent speed and performance

• Macro-Radio

• All legacy Clients join macro-cell

but …

• Cells must be isolated

– overlap in RF Frequency = shared

airtime = lost efficiency

• Begins in the Silicon design, extends to

the AP/Antenna selections

Users have a better overall experience on a Dual 5GHz Access Point

Micro

Macro

5GHz

Serving 5GHz

Serving

Micro

Cell

Macro

Cell

Macro

Cell

Micro Macro Cell Transitions

-51 dBm

-65 dBm

-51 dBm -51 dBm ≥ 55 dBm?

Probe Response

Client Steering

• 802.11v BSS Transition – Default Enable

• 802.11k – Default Enable

• Probe Suppression – Default Disable

Client Types

• 11v capable – 802.11v BSS Transition

• Non-11v capable – 802.11k neighbor list +

disassociation

• No 11k or 11v support – Probe Suppression Micro – 5GHz on XOR

Macro -- Dedicated 5 GHz

Optimize Wi-Fi with CleanAir Quickly Identify and Mitigate Wi-Fi Impacting Interference

Channel 48

48

48

48

48

48

48

48

48

48

48

48

Interference on 20/40/80/160 MHz

Air Quality and Interference by

AP/radio on WLC

AQ Threshold trap and Interference

Device trap (per radio)

CleanAir-enabled RRM

Network Air Quality and Interference Location with PI 3.1.x and MSE 8.0.

Interference Devices and Air Quality Report

CleanAir Enabled RRM Mitigated RF interference for improved

reliability and performance

Wi-Fi and

non-Wi-Fi

aware

Dynamic

mitigation

ED-RRM

Granular

spectrum

visibility and

control

Air Quality Performance

Improved Client

Performance

Complete Automatic Interference Mitigation Solution for Rogues and Non-Wi-Fi Interference

FlexDFS with Dynamic Bandwidth Selection

Identifies radar

frequency to

1 MHz

FlexDFS

isolates radar

event to

20MHz

DBS allows

best channel

and width

Interference is impacting

only channel 60

FlexDFS + DBS Automatic and intelligent use of spectrum

52

56

60

64

DBS combined with FlexDFS: Increased confidence in using wider channel bandwidth; reduced radio flapping

Primary

20

Secondary

20

Secondary

40

52 56 60 64

Optimizes

HD Experience

Better Support for Users on the Move Optimized Roaming

Optimized Roaming: Wireless Devices

Connect to the Most Effective AP Client Stickiness

Fine-tuning HDX with RF Profiles

Wi-Fi

Triggered ED-

RRM

Optimized

Roaming

RXSOP

Dynamic

Bandwidth

Selection

TPC, DCA

CHDM

FlexDFS

CORE:

• CleanAir

• ClientLink 4.0

• Turbo Performance

Pre-canned RF Profiles

Client Distribution

Data Rates

DCA, TPC, CHDM

Profile Threshold for Traps

High Density Features

Security and Threat Mitigation

Secure Access

P2P

Blocking

Client Exclusion

802.1x

WPA2/AES

TKIP Encryption

AAA Override

VLAN, ACL, QoS

Local Policy w/

QoS and AVC

MFP, 802.11w

TrustSec SXP

Inline Tagging awIPS, ELM

MAC Auth Rogue Detection

BYOD

NAC RADIUS

8.4

8.3 MR1

5GHz. / 2.4GHz.

. 5GHz. / Security

Cisco Wireless Security Deployment with AP3800/2800 Maintains Capacity and Avoids Interference

Good Better Best

Features ELM Monitor Mode AP ELM with FRA

Monitor Mode

Deployment Density Per AP 1 in 5 APs 1 radio per 5 APs

Client Serving with Security

Monitoring

Y N Y

wIPS Security Monitoring 50 ms off-channel scan on selected

channels on 2.4 and 5 GHz

7 x 24 All Channels on 2.4GHz and

5GHz

7 x 24 All Channels on 2.4GHz and

5GHz

CleanAir Spectrum Intelligence 7 x 24 on client serving channel

7 x 24 All Channels on 2.4GHz and

5GHz

7 x 24 All Channels on 2.4GHz and

5GHz

Serving channel Serving channel Off-Ch Off-Ch

Serving channel Serving channel Off-Ch Off-Ch

Enhanced Local Mode

Access Point

GOOD

2.4 GHz

5 GHz

t

t

Monitor Mode

Access Point

BETTER

2.4 GHz

5 GHz

t

t

Ch11 Ch2

Ch38

Ch1

Ch36

… Ch11 Ch2 Ch1

…

Ch11 Ch2 Ch1

…

…

Ch161 Ch157 Ch38 Ch36

… … …

t

2.4 GHz

5 GHz

t Ch11 Ch2 Ch1

…

Ch38 Ch36 Ch161 Ch157

… … … ELM with FRA Wireless Security

Monitoring

BEST

Serving channel Serving channel Off-Ch Off-Ch 5 GHz t

Serve Client on 2.4 GHz

50 ms off-channel

Serve Clients on 5

GHz

50 ms off-channel

Rogue Detection and Mitigation

Rogue Classification and

Containment

• Rogue Rules

• Manual Classification –

Friendly/Malicious

• Manual and Auto

Containment

CleanAir with Rogue AP

Types

• WiFi Invalid Channel

• WiFi Inverted

Rogue Location

• Real-time with PI, MSE,

CleanAir

• Location of Rogue APs

and Clients , Ad-hoc

Rogue, Non-wifi

interferers

Data Serving AP

Scan

1.2s per channel

Monitor Mode AP

FRA with MM

Serve Client on dedicated 5

GHz

Scan 1.2s per channel

Service Ready Feature Highlights

Videostream

Multicast VLAN

Per-Client/Per-SSID

BW Contract

Local Profiling

Bonjour

Apple Services

Service Ready

AVC

Netflow

AAA Override of

AVC Profile

Voice Optimization,

CAC, WMM Policy

Adaptive 11r ,11k, 11v

FastLane

QoS Profiles

OKC, CCKM

Fast Roaming

8.3 MR1

Zero Impact Application Visibility and Control

Maintain Performance with Zero Impact AVC

Gain Visibility

into the Network

Monitor Critical

Applications

Control Application

Performance

APP APP APP APP

APP APP APP APP

APP APP APP APP

APP APP APP APP

Setting up AVC profiles and rules Drop/ Mark for several video apps like YouTube and Netflix on iPhone, iPad Drop/ Mark for other apps such as Jabber and Webex Profiles with block and pass rules combined Rate Limiting of Video/Voice apps AAA override for AVC profile AVC Profile with Local Policy Classification

Adaptive 11r and Cisco Fastlane

Optimized Wi-Fi Connectivity Prioritized Business applications

Intelligent, and efficient

roaming is automatically

configured

iOS and Cisco devices recognize each other and enable

special capabilities

Business data gets priority

and speed even if network is

congested

Reduces complexity - IT can focus on the business– the network does

the heavy lifting

8.3 MR1

Aironet Wave 2 AP’s: AP1810

AP1815

AP1850

AP1830

AP3800

AP2800

AP1560

Aironet AP’s: • AP1600/2600 Series Access Points

• AP1700/2700 Series Access Points

• AP3500 Series Access Points

• AP3600 Series Access Points + 11ac Module,

WSM, HALO, 3602P, 5310, 8718, 8818

• AP3700 Series Access Points + WSM, HALO,

3702P, 5310, 8718, 8818

• OEAP600 Series OfficeExtend Access Points

• AP700 Series Access Points

• AP700W Series Access Points

• ASA55xx Integrated Access Point (AP702i)

• AP802 Integrated Access Point

• AP803 Integrated Access Point

• AP1530 Series Access Points

• AP1550 Series Access Points

• AP1570 Series Access Points

• AP1560 Series Access Point

• IW3700

• AP1040/1140/1260 Series Access Points

WLC’s: • 2504

• 5508

• 5520

• 7510

• 8510

• 8540

• WISM2

• vWLC

(KVM +

ESXi)

8.3

RF • Preferred 5 GHz network design • Apple client device should observe a minimum of 2 APs with an

RSSI measurement of -67 dBm • Average Channel Utilization < 40%. • Client SNR >= 25 dB. • 802.11 retransmissions < 15%, Packet Loss < 1% and Jitter < 100

ms. • Cisco highly recommends leaving all MCS rates enabled • Channel width 40 Mhz or Best for Typical deployments, 20 MHz for

High Density

QoS • Enable FastLane : Trust DSCP, Platinum for Unicast, EDCA as

FastLane and over 70 lines of Best Practice Configuration • WMM Set to Required • AVC profile is AUTOQOS-AVCPROFILE • 11k and 11v BSS Transition Enabled • mDNS Snooping Enabled • FT should be enabled or Adaptive, AKM Set to FT PSK or FT 802.1x

Cisco and Apple Best Practices

http://www.cisco.com/c/dam/en/us/td/docs/wireless/controller/technotes/8-3/Optimizing_WiFi_Connectivity_and_Prioritizing_Business_Apps.pdf http://www.cisco.com/c/dam/en/us/td/docs/wireless/controller/technotes/8-3/Enterprise_Best_Practices_for_Apple_Devices_on_Cisco_Wireless_LAN.pdf

Teacher Network Student Network

AirPrint AirPlay File

Share

Teacher

Service Profile

AirPlay File

Share

Student

Service Profile

iTunes

Sharing AirPrint

mDNS Service Instances Groups

Apple TV1 Apple TV1

Apple TV2

Teacher Service

Instance List Student Service

Instance List

mDNS and Bonjour Services

mDNS Profiles – Select

services

mDNS Profile with Local

Policy – Services per-user

and per-device

mDNS Policies – Services

based on AP Location and

user role

mDNS AP – Services Behind

a L3 boundary

Location Specific Services

Authentication

Time of Day

User Role

QoS Profile Metal Profiles

QoS Policy w/ Role and Device type

Per-User Bandwidth Contract

Per-SSID Bandwidth Contract

AAA Override of QoS profile

QoS Roles for Guest Users

QoS and Bidirectional Rate-limiting

Time of Day

Device Type

Lo

ca

l Po

licy E

lem

en

ts

POLICY

Radius Server

(e.g.. ISE Base, ACS)

AA

A

Ove

rrid

e

QoS Profile

Enterprise Infra Feature Highlights

Fast SSID

Client IPv6

Native IPv6 Flex, Local, Sniffer,

Monitor, ME

FIPS Support

Enterprise Infra

Pre-Image Download

AP Multicast

WiFi Tagging

OEAP

Webauth

Guest Access

Plug n Play

8.3 MR1 8.3 MR1

8.4

8.3

IPv4

IPv4 Client

Client and Native IPv6

CAPWAPv6 Tunnel

IPv4 Client

802.11

802.11

802.11

CAPWAPv6

Ethernet

IPv4

VLAN

Ethernet

Mgmt: 2001:db8:a::2/64 10.10.10.2

IP: 2001:db8:a:5/64 SNMP Server, Syslog Server,

tftp/ftp/scp Server

IP: 2001:db8:a:7/64

2001:db8:a:0:222:bdff:fef7:5594

2001:db8:a:0:8a56:caff:1547:9150

IP: 2001:db8:a:6/64 NTP Server

IPv4/v6 router 2001:db8:a::1/64

10.10.10.1 10.10.10.52

IPv6 Client

10.10.10.51

2001:db8:a:0:2329:9834:3231:1111

IPv6 Client

IPv6

IPv6

RADIUS

IPv6 Guest Access IPv6 Source Guard IPv6 RA Guard IPv6 Client Mobility RA Throttling IPv6 ACL – Local mode IPv6 Client Visibility IPv6 Neighbor discovery Caching IPv6 Bridging IPv6 multicast IPv6 AAA support IPv6 QOS

IPv6 CAPWAP ( DHCP option 52, DNS) Full DHCPv6/SLAAC or static v6 Control and Management IPv6 NTP over IPv6 Syslog over IPv6 Radius Over IPv6 CDP v6

8.4

8.2 MR1

2800/3800 as OEAP

DTLS

• Control – DTLS enabled • Data – DTLS for client traffic tunneled back to corporate WLC

CDP and LLDP • PoE Uplink – CDP and LLDP on the uplink PoE port for power negotiation

Authentication and Security • Advanced Encryption Standard (AES) for Wi-Fi Protected Access 2 (WPA2) • 802.1X, RADIUS authentication, authorization and accounting (AAA) on WLAN 802.11i • MAC filtering

Personal SSID support • Personal SSID support for local home networking

WiFi CCX Tag v1 Support

(Cisco Controller) >show rfid summary

Total Number of RFID : 1

----------------- -------- ------------------ ------ ---------------------

RFID ID VENDOR Closest AP RSSI Time Since Last Heard

----------------- -------- ------------------ ------ ---------------------

00:23:a7:8e:20:d0 Redpine APE00E.DA78.56C0 -57 28 seconds ago

Cisco Controller) >show ap summary

Number of APs.................................... 2

Global AP User Name.............................. Not Configured

Global AP Dot1x User Name........................ Not Configured

AP Name Slots AP Model Ethernet MAC Location Country IP Address Clients DSE Location

------------------ ----- -------------------- ----------------- ---------------- ---------- --------------- -------- --------------

AP_3802_1 2 AIR-AP3802I-S-K9 00:42:68:a0:d1:aa default location SG 192.168.6.35 0 [0 ,0 ,0 ]

APE00E.DA78.56C0 2 AIR-AP2802I-S-K9 e0:0e:da:78:56:c0 default location SG 192.168.6.94 0 [0 ,0 ,0 ]

Wireless LAN

Controller

Cisco Prime

Infrastructure

RFID Tags

8.3 MR1

FlexConnect Feature Parity on Wave 2 APs

FlexConnect

Local Switching/ Local Auth

WLAN-VLAN Mapping

Local Auth w/ External RADIUS

Data DTLS Encryption

VLAN Based Central Switching

Native VLAN, VLAN support on FCG

Proxy ARP

NAT/PAT

ClientLink

Load Balancing

Band Select

Smart AP Image upgrade

Default Flex Group

Syslog

Advanced WIPS

TrustSec SXP and SGT

WPA-PSK

802.1x(WPA/WPA2)

TKIP Encryption

Rogue Detection

AAA Override – ACL, VLAN

AAA Override – QoS

VLAN ACL

Per Client ACL

L2 ACL

Client Exclusion Policies

MFP

11w PMF (MFP)

AVC Policy

EoGRE v4/v6 on FC

Webauth – Internal/External

QoS Markings and Profiles

AP Plug and Play

OKC, CCKM, 802.11r

Adaptive 11r, FastLane 8.4

8.4 8.4

8.4 8.4

Feature Matrix : http://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-3/b_feature_matrix_wave2.html

Infrastructure Security Services

Wave2 11ac AP Feature Matrix http://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-

3/b_feature_matrix_for_802_11ac_wave2_access_points.html

8.3 Release Notes http://www.cisco.com/c/en/us/td/docs/wireless/controller/release/notes/crn83.html

Resources to find answers and drive adoption

Now Near Future

Wave2 & 5520/8540 8.2.130.0

8.3.110.0 ( Jan 2017 )

8.2.140.0

Code Recommendation

• 5520 WLC

• 8540 WLC

• AP1570

• AP1810 OE

• AP1810W Wall Plate

• AP1850

• AP2700/3700

• AP2800/3800

• AP702W

• APIC-EM Wireless AP PnP

• Flex7500 WLC

• Mesh APs

• Mobility Express

• Smart Licensing

• Univ. AP Regulatory Domain

• Virtual WLC

Cisco Wireless LAN Documentation INSTALLATION GUIDES

• 802.11r BSS Fast Transition

• Adaptive wIPS

• ATF Ph 1 & 2

• CleanAir

• CMX FastLocate

• High Density

• Rogue Management

• RRM RF Grouping Algorithm

• RRM White Paper

RADIO CONFIGURATION

• BYOD for FlexConnect

• BYOD with ISE

• Security Integration

ENCRYPTION

• Bi-Directional Rate Limiting

• Flex AP-EoGRE Tunnel Gtwy

• IPv6

• Jabber

• Jabber and UCM

• Microsoft Lync

• Passpoint Configuration

• Real-Time Traffic Over WLAN

• VideoStream

• Vocera IP Phone in WLAN

• VoWLAN Troubleshooting

CLIENT ADDRESSING POLICY ENGINE

• AVC

• Bonjour

• Chromecast

• Device Classification

• Domain Filtering

• mDNS Gateway w/Chromecast

• Wireless Device Profiling & Policy Classification

BEST PRACTICES

• Apple Devices

• Enterprise Mobility Design Guide

• High Availability (SSO)

• HyperLocation

• iPhone 6 Roaming

• N+1 High Availability

• WLAN Express

• WLC Configuration Best Practices

Cisco Mobility Express

Cisco Mobility Express - Recap

Uses 802.11ac Wave 2 technology: Fastest Wi-Fi available

Manages multiple Aironet Access Point models

Enables simple and fast IT: You’re up and running in ten

minutes

Embeds a virtual WLAN controller function into the access

point

Supports Cisco’s industry-leading WLAN features with no

price premium

On-Premises

NEW: Mobility Express

Simple deployment

Mobility Express is the Next Generation Autonomous.

Wave 2 APs will not support legacy autonomous mode

Evolution of Cisco Mobility Express Solution

OCT, 2016

8.3 MR1

JAN 2017

8.4

AUG, 2016

8.3

SEP, 2015

8.1 MR2

NOV, 2015

8.1 MR3

DEC, 2015

8.2

Support on 2800 and 3800 APs Internal DHCP server support Software Update – cisco.com Support for Standalone Mode Guest Access enhancements CMX Cloud Support SNMPv3 Support Ease of use enhancements Serviceability improvements Hardening

Setup Wizard via CLI Software Update – HTTP NTP Pool support Serviceability improvements

Mobility Express

Introduced

Site Survey Support on 1562

AP

• 4x4:3SS 80Mhz; 1.7 Gbps

• Spectrum Analysis*

• Internal or External antenna

• Tx Beam Forming

• 2 GE Ports

• USB 2.0

• Centralized, FlexConnect and Mobility Express

Enterprise Class

1850

Enterprise

• 3x3:2SS 80MHz; 867Mbps

• Spectrum Analysis*

• Internal antenna

• Tx Beam Forming

• 1 GE Port

• USB 2.0

• Centralized, FlexConnect and Mobility Express

Enterprise Class

1830

• 4x4:3SS 160 MHz; 5 Gbps

• 2.4, 5GHz or Dual 5GHz

• 2 GE or 1 GE + 1 mGig (5G)

• Internal or External antenna

• Smart Antenna Connector

• Enhanced Location* (External Antenna)

• CleanAir 160 MHz,

• ClientLink 4.0, StadiumVision

• USB 2.0

• Modularity

• Centralized, FlexConnect and Mobility Express*

Best in Class

3800

Best In Class Mission Critical

• 4x4:3SS 160 MHz; 5 Gbps

• 2.4, 5GHz or Dual 5GHz

• 2 GE Ports

• Internal or External antenna

• Smart Antenna Connector

• Enhanced Location*

• CleanAir 160MHz

• ClientLink 4.0

• USB 2.0

• Centralized, FlexConnect and Mobility Express*

Mission Critical

2800

Cisco Mobility Express capable APs - Indoor

8.3MR

1

• 3x3:3SS 1.3G,

• 2x2:2SS, 867M

• MU-MIMO

• 4.9 GHz (PS: Public Safety)

• CleanAir 160MHz

• ClientLink 4.0

• USB 2.0

• Centralized, FlexConnect, Mesh, Mobility Express

Enterprise Class

1562

New

Cisco Mobility Express capable AP - Outdoor

TFTP: Dependency on external TFTP server. ap_bundle has to be downloaded

and unzipped on TFTP server. TFTP parameters have to be configured on WebUI.

Mobility Express Software Update

Offline Software Update Methods

HTTP: ap_bundle to be downloaded locally and unzipped. Works for AP which

share the same image.

Online Software Update Method

cisco.com: Internet access required. If user licensing and SmartNet contract

requirements are met, upgrade is seamless. 8.3

8.2

8.1

MR2

Internet access is required for software download from cisco.com to APs. No

proxy is required

Software Update – cisco.com

A valid cisco.com (CCO) account with username & password required

EULA Acceptance on a per user basis. Master AP(not all APs in the network)

must have SmartNet contract else Software Update will not start

Software Update from cisco.com is supported via GUI. No CLI support

8.3

Works on all APs supported in a Cisco Mobility Express Deployment

Software Update – cisco.com Select cisco.com for Transfer Type

Enter cisco.com Username

Enter cisco.com Password

Click on the Apply Button

8.3

Latest Software Release is the most recent

software version on cisco.com

Recommended Software Release is the

recommended stable release on cisco.com

Click on Check Now

Software Update – cisco.com Can Automatic check for updates be done?

Select Enabled in Automatically Check for

Updates drop down list

Click on the Apply Button

Automatic Check is done once in 30 days

Software Update MUST be manually initiated

Software Update – cisco.com / Licensing 8.3

Are there any Licensing requirements?

EULA must be accepted else Software

Update will not start

Master AP must have SMARTnet contract

else Software Update will not start

Error message will shown saying Master

AP does not have SMARTnet contract

Performing Software Update – cisco.com 8.3

Select either the Recommended or the Latest

Software Release

Click Next

Select Reset or Schedule Later(Set Reboot Time)

Click Next

Performing Software Update – cisco.com

Click on Confirm to initiate image pre-download

How long does it take for image pre-download?

Depends on number of APs

Depends on the WAN speed

Download happens on 5 APs simultaneously

If there are 25 APs, it may take up to 40 minutes

Best seen is ~7 min on 5 APs

8.3

Multiple Cisco Mobility Express sites can be added for Guest Access and Presence

CMX Analytics in cloud

Deploy on premise devices for Guest Access and Presence Analytics. Really??

Use CMX service in the cloud and enjoy both CMX Connect for Guest Access & Presence

Analytics with Cisco Mobility Express

Simple configuration both on Cisco Mobility Express WebUI and CMX in the cloud

Internet connectivity is required but no external proxy is needed for this solution

A CMX cloud account is required

8.3

CMX Cloud Account – Why?

You get the CMX member host address (URL)

You get a token (Really long string)

CMX member host address has to be configured to

send client data for Presence Analytics

CMX portal URL has to be configured on Guest

WLANs for Guest Access using CMX Connect

Token has to be configured on Mobility Express for

sending client data for Presence Analytics

8.3

Click on Test Link to verify

connectivity to CMX host in the cloud

Configuring CMX Cloud Connector on WebUI

Navigate to Advanced > CMX

Enable CMX Status

Enter CMX Server URL

(Member host address)

Enter CMX Server Token

Click on the Apply Button

8.3

Configuring CMX Cloud Connector from CLI

Enter CMX Server URL (Member host address)

Enter CMX Server Token

Enable CMX Status

Check for CMX cloud services

(Cisco Controller) >config cloud-services server url <url>

(Cisco Controller) >config cloud-services id-token <token>

(Cisco Controller) >show cloud-services cmx summary

(Cisco Controller) >config cloud-services cmx enable

8.3

CMX Analytics in Cloud (Presence)

Create sites with one or more APs for Presence

Analytics

Monitor Dwell Time, Connected Clients, Visitor,

Passerby etc. information

8.3

Customized Guest Portal - CMX Connect

Supported on individual Guest WLANs

Custom Portal and Social login is supported

Internet connectivity is required but no external proxy is needed

for this solution

8.3

Configuring Guest WLAN with CMX Connect

Create WLAN and select Security as

Guest

Select Guest Type CMX Guest

Connect

Enter Site URL. Site URL can be

obtained from CMX Connect

Click on the Apply Button

Connect to Guest WLAN and

Custom Portal page will be displayed

Pre-auth ACL is automatically created and

applied to the Guest WLAN

8.3

Configuring Guest WLAN with External Server

Create WLAN and select Security as

Guest

Select Guest Type Captive Portal

(External Web Server)

Enter Site URL of the Guest Portal

Click on the Apply Button

Connect to Guest WLAN and

Custom Portal page will be displayed

Pre-auth ACL is automatically created and

applied to the Guest WLAN

8.3

Configuring Guest WLAN with WPA2 Personal

Create WLAN and select Security as

Guest

Select Guest Type as WPA2

Personal

Enter and confirm PSK Paraphrase

Click on the Apply button

8.3

Supported at Global level for Guest WLANs

Download customized WebAuth bundle from Cisco.com or create your custom bundle

Import the bundle using the controller WebUI and preview it

LWA - Import Customized Guest Page 8.3

Internal WebAuth page is primitive. Customer does not want to show Cisco logo

Import custom WebAuth bundle for LWA (internal)

Configuring Webauth bundle for Guest WLAN

Download sample Webauth bundle from cisco.com or create your own tar bundle

8.3

Configuring Webauth bundle for Guest WLAN

Select Page Type as Customized

Upload the custom WebAuth bundle

Click on Preview button to view the

guest portal page

Enter the Redirect URL after Login

Click on the Apply Button

8.3

Aironet 1560 Series Outdoor Access Point

Cisco Aironet Portfolio – Outdoor AP Enterprise Class Best in Class Cable Operators

1560 • 802.11ac W2

• 4 models (I/E/D/PS)

• 3x3:3, 80MHz, 1.3G (I)

• 2x2:2, 80MHz, 867M (D/E/PS)

• MU-MIMO

• SFP

• Internal Directional Ant. (D)

• 4.9 GHz (PS: Public Safety)

• Flexible Antenna Ports

• CleanAir 80 MHz

• ClientLink 4.0

• Centralized, FlexConnect, Mesh & Mobility Express

1572EAC

• 802.11ac W1

• 4x4:3 80 MHz; 1.3 G

• External antenna

• SFP

• GPS

• PoE-Out (803.2at)

• Flexible Antenna Ports

• CleanAir 80 MHz

• ClientLink 3.0

• Modularity

• Centralized, FlexConnect & Mesh

1572IC/EC

• 802.11ac W1

• 4x4:3 80 MHz; 1.3 G

• Internal or External antenna

• DOCSIS 3.0, 24x8

• SFP

• GPS

• PoE-Out (803.2at) (EC)

• Flexible Antenna Ports

• CleanAir 80 MHz

• ClientLink 3.0

• Modularity

• Centralized, FlexConnect & Mesh

1530

• 802.11n

• 2 models, low profile

• 2G: 3x3:3; 5G: 2x3:2

• Internal or External antenna

• Flexible Antenna Ports

• Centralized, FlexConnect, & Mesh

* Future availability Shipping Shipping FCS

January 2017

Next-Generation Wave 2 802.11ac Outdoor Access Point

Cisco Aironet® 1560 Series

• Evolution of AP1530 Similar small footprint, low price

• Upgrade to 802.11ac Wave 2

• Same internal (1562I) or external

(1562E) antennas

• Add internal directional antenna

(1562D)

• Add SFP support

Cisco Aironet 1562I Series Access Point Internal Antennas

Cisco Aironet® 1560 Series

• 3x3 with 3 spatial streams

• DC or UPoE power options • Available outdoor-rated AC/DC power adapter

• 2x3:2 with 802.3at PoE input in some Reg

domains

• Low-profile with internal antennas • 7 dBi (2.4 GHz) and 4 dBi (5 GHz)

• Wide coverage area

• Use Case: • General purpose outdoor coverage/hotspots

where aesthetics is critical

Next-Generation Wave 2 802.11ac Outdoor Access Point

AP-1562i Radiation Patterns 2.4 GHz

AP-1562i Radiation Patterns 5 GHz

Cisco Aironet 1562D Series Access Point Directional Antennas

Cisco Aironet® 1560 Series

• 2x2 with 2 spatial streams

• DC or PoE(.3at) power options • Available outdoor-rated AC/DC power adapter

• Low-profile with internal

directional antennas • 9 dBi (2.4 GHz) and 10 dBi (5 GHz)

• Tight/focused coverage area

Degree BW ~ 60@2.4 GHz & 40@5 GHz)

• Use Case: • Outdoor high-density applications

• P-P bridging

Next-Generation Wave 2 802.11ac Outdoor Access Point

AP-1562d Radiation Patterns 2.4 GHz

AP-1562d Radiation Patterns 5 GHz

Cisco Aironet 1562E Series Access Point External Antennas

Cisco Aironet® 1560 Series

• 2x2 with 2 spatial streams

• DC or PoE(.3at) power options • Available outdoor-rated AC/DC power adapter

• Low-profile with external antennas • Flexible Antenna Port for SW control for single

band or dual band antennas

• Supported by full range of Cisco outdoor antenna

portfolio

• Use Case: • Outdoor coverage/hotspots where user can

control desired coverage area

• Best omni coverage with external omni antennas

Next-Generation Wave 2 802.11ac Outdoor Access Point

Flexible Antenna Port: Support for Single-band or Dual-band Antennas

• Cisco Flexible Antenna Port can support either dual-band or single-band antennas on the

same platform – Allows control over antenna performance on each band.

• Configurable via a software command

• Dual-band ports, use the bottom 2 antenna ports to connect to dual-band omni or

directional antennas

• Single-band ports, use two separate 2.4 GHz and two 5 GHz antenna ports

SW

Configure

2.4 & 5GHz 2.4 GHz

5 GHz Not Used

Flexible Antenna Port: Single Radiating Element mode (SRE) and Dual Radiating mode (DRE)

(Cisco Controller) >config ap antenna-band-mode ?

single Single band antenna mode for the Cisco AP.

dual Dual band antenna mode for the Cisco AP.

(Cisco Controller) >config ap antenna-band-mode dual ?

<Cisco AP> Enter the name of the Cisco AP.

Cisco Flexible Port can be configured

SINGLE or DUAL mode

When in Single Band (SRE) mode

Ports 1 & 2 are 2.4 GHz only

Ports 3 & 4 are 5 GHz only

When in Dual Band (DRE) mode

Ports 1 & 2 are Duel Band 2.4/5 GHz

Ports 3 & 4 (top) are disabled. Flexible Antenna Port is

only supported on the

AP-1532, 1562 & 1572

AP-1562e Approved Antenna List

Frequency Part Number Antenna Type

Antenna

Gain (dBi)

>30 degree 5 GHz

Antenna Gain

(dBi)

AIR-ANT2450V-N Single Band Omni 5 NA

AIR-ANT2480V-N Single Band Omni 8 NA

AIR-ANT2450HG-N Horizontal Polarized Omni 5 NA

AIR-ANT2450VG-N Vertical Polarized Omni 5 NA

AIR-ANT2413P2M-N Single Band, Dual Polarized Directional Patch 13 NA

AIR-ANT5180V-N Single Band Omni 8 -3

AIR-ANT5150HG-N Horizontal Polarized Omni 5 -5

AIR-ANT5150VG-N Vertical Polarized Omni 5 -6

AIR-ANT5114P2M-N Single Band, Dual Polarized Directional Patch 14 5

AIR-ANT2547V-N= Dual-band Omni 4 / 7 -6

AIR-ANT2547VG-N= Dual-band Omni, Gray 4 / 7 -6

AIR-ANT2568VG-N Dual-band Omni 6 / 8 3

AIR-ANT2588P3M-N= Dual-band/Dual Polarized Directional, Patch 8 / 8 1

AIR-ANT2513P4M-N Dual-band Polarization Diverse Patch Array 13 / 13 -5

Internal Omni (I) 7 / 4 2

Internal Directional (D) (Cross Polarized) 9 / 10 5

2.4/5 GHz

5 GHz

2.4 GHz

AP1560 Powering Options

AP1560 Series Power Options 802.3at - PoE+ UPoE AC / DC

Power

AP1562I, full operation

3x3 mode X* ✔ ✔

AP1562I, 2x2 only ✔ ✔ ✔

AP1562D, full operation ✔ ✔ ✔

AP1562E, full operation ✔ ✔ ✔

802.3at is still a TBD with 3-SS. We are waiting for confirmation from

Engineering, but chances are if PoE+ (uPoE) is not available we will scale

back to 2-SS – There is not enough power to run with 802.3af (15.4W)

Supported AC Power adapter is AIR-PWRADPT-RGD1=

Supported PoE injector is AIR-PWRINJ-60RGD2=

Outdoor AC supply - AIR-PWRADPT-RGD1=

60 Watt AC Supply

Input – 90-264 VAC

Output – 48VDC @ 1.25A

Working temperature range

-30C to +60C

Mounted using

AIR-ACC1560-PMK1

30 Watt GbE injector Cisco PID = AIR-PWRINJ6

802.3at Midspan, 30W injector

CPN (Cisco Part Number) 341-100456-01

Outdoor PoE Injector

There are two Part #’s

AIR-PWRINJ-60RGD1=

(for US)

AIR-PWRINJ-60RGD2=

(Rest of World)

• AIR-ACC1530-PMK1 (=)

• Wall/pole mount bracket, available as option or spare

• AIR-ACC1560-PMK1 (=)

• Wall/Pole mount bracket, available as option or spare

• AIR-ACC1530-PMK2=

• Wall/Pole mount bracket with tilt mechanism, spare only

• AIR-ACC1560-CVR=

• Cover / Solar Shield for 1562, spare only

• AIR-PWRADPT-RGD1=

• AC/DC power adapter, spare only

• AIR-ACC1560-KIT1=

• Extra cable glands, power connector, ground lug, etc.

1560 Accessories

Range Recommendations Access Point (Domain

specific)

AP – Client @2.4 GHz AP to AP = 2 x (AP to Client)

1562I (-B ) Vert. mount = 1200ft/370m

Horz. Mount = 700 ft/210m

Vert. mount = 2400ft/740m

Horz. Mount = 1400 ft/420m

1562E (-B)

w/ AIR-ANT2547V-N antennas

1000 ft/300m 2000ft/600m

1562D (-B) 1200 ft/370 m 2400 ft/740 m

1562I (-E) Vert. mount = 600ft/180m

Horz. Mount = 300 ft/90m

Vert. mount = 1200ft/36m

Horz. Mount = 600 ft/180m

1562E (-E)

w/ AIR-ANT2547V-N antennas

600ft/180m 1200ft/360m

1562D (-E) 600ft/180m

1200ft/360m

1 meter = 3.28 ft 1 sq-meter = 10.7 sq-ft

1 mile = 1.61 km 1 sq-mile = 2.6 sq-km

WNG Outdoor

AP 1532I 1532E 1562I 1562D 1562E 1562PS 1572EAC 1572IC/EC

List Price $1295 $1495 $1695 $1795 $1795 $1995 $4495 $5295 / $6695

Type 802.11n 802.11n 802.11ac W2 802.11ac W2 802.11ac W2 802.11ac W2 802.11ac W1 802.11ac W1

Radios 2.4G: 3x3:3

5G: 2x3:2

2.4G: 2x2:2

5G: 2x2:2

2.4G: 3x3:3

5G: 3x3:3

2.4G: 2x2:2

5G: 2x2:2

2.4G: 2x2:2

5G: 2x2:2

2.4G: 2x2:2

4.9G: 2x2:2

2.4G: 4x4:3

5G: 4x4:3

2.4G: 4x4:3

5G: 4x4:3

Antennas Internal Flexible Antenna Port

(dual or single band) Internal

Internal -

Directional

Flexible Antenna

Port

(dual or single

band)

Flexible Antenna

Port

(dual or single

band)

Flexible Antenna Port

(dual or single band)

IC: Internal

EC: External

SPF Port n n n n n n

PoE out n n (EC)

Cable modem n

Power options UPoE/3at

24-57 VDC

PoE (802.3at)

24-57 VDC

UPoE/802.3at

48 VDC

PoE+ (802.3at)

48 VDC

PoE+ (802.3at)

48 VDC

PoE+ (802.3at)

48 VDC AC, 12 VDC, PoE

40-90V cable

plant

12VDC

Data rate (2.4/5G)

Mbps 216 / 300 144 / 300 216 / 1300 144 / 867 144 / 867 144 / 867 216 / 1300 216 / 1300

Clients per radio 100 100 200 200 200 200 200 200

CleanAir n n n n n n

ClientLink n n n n n n

BandSelect n n n n n n n n

FlexConnect n n n n n n n n

Wireless mesh n n n n n n n n

Temp Range °C -30 to 65 -30 to 65 -40 to 65 -40 to 65 -40 to 65 -40 to 65 -40 to 65 -40 to 65