Controllers (WLC) & Access Points(AP) are designed for use in many countries with varying regulatory requirements. The radios within APs are assigned to a specific regulatory domain at the factory level. Configuring a country code ensures that each radio’s broadcast frequency bands, interfaces, channels and transmit power levels are compliant with country-specific regulations.
Generally you configure one country code per controller, however WLC code 4.1 onwards allows you to configure up to 20 country codes per controller. This enables you to manage APs in various countries from a single controller. For a given AP all radios should be in same regulatory domain. There is an exception for MESH APs where you have to configure single country code on WLC for them to register.
Here is an example of regulatory domain for different type of AP model (controller based). Complete document you can find from here WLAN Compliance Status
Here are the guidelines when configuring multiple country code on a controller.
1. When the multiple country feature is being used, all controllers that are going to join the same RF group must be configured with the same set of countries, configured in the same order.
2. When multiple countries are configured and the radio resource management (RRM) and auto-RF feature is enabled, the common channel allowed is derived by performing union (or superset) of the allowed channels in the countries.
3. The AP can only operate on the channels for the countries that they are designed for.
4. The country list configured on the RF group leader determines what channels the members would operate on. This list is independent of what countries have been configured on the RF group members.
You can configure country codes through GUI or CLI of a controller. You have to disable 802.11a/n, 802.11b/g/n network before configuring country codes. Through GUI, you have to go to “Wireless -> Country” section to do this as shown below (all countries selected not shown under tick boxes).
Then you can go to individual AP and change the country code where they are in (should be in multiple countries). AP should be set to correct domain at factory level. Since I do not have diffrent regulatory domain AP I have simply configured one of my AP courntry as NZ which is part of same regulatory domain as AU.
By using CLI you can configure this as follows. “show country” & “show ap summary” CLI commands can be used to verify settings.
(4402-a) >config 802.11a disable network (4402-a) >config 802.11b disable network (4402-a) >config country AU,LK,NZ Changing country code could reset channel & RRM grouping configuration. If running in RRM One-Time mode, reassign channels after this command. Check customized APs for valid channel values after this command. Are you sure you want to continue? (y/n) y Configured Country............................. Multiple Countries:AU,LK,NZ KEY: * = Channel is legal in this country and may be configured manually. A = Channel is the Auto-RF default in this country. . = Channel is not legal in this country. C = Channel has been configured for use by Auto-RF. x = Channel is available to be configured for use by Auto-RF. (-,-) = (indoor, outdoor) regulatory doamin allowed by this country. -----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+- 802.11bg : Channels : 1 1 1 1 1 : 1 2 3 4 5 6 7 8 9 0 1 2 3 4 -----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+- AU (-A ,-NA ): A * * * * A * * * * A . . . LK (-E , ): A * * * * A * * * * A * * . NZ (-A ,-NA ): A * * * * A * * * * A . . . Auto-RF : C x x x x C x x x x C x x . -----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- 802.11a : 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 Channels : 3 3 3 4 4 4 4 4 5 5 6 6 0 0 0 1 1 2 2 2 3 3 4 4 5 5 6 6 : 4 6 8 0 2 4 6 8 2 6 0 4 0 4 8 2 6 0 4 8 2 6 0 9 3 7 1 5 -----------------:+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+- AU (-N ,-N ): . A . A . A . A A A A A . . . . . . . . . . . A A A A * LK (-E , ): . A . A . A . A A A A A * * * * * * * * * * * . . . . . NZ (-N ,-N ): . A . A . A . A A A A A . . . . . . . . . . . A A A A * Auto-RF : . C . C . C . C C C C C x x x x x x x x x x x C C C C x (4402-a) >config 802.11a enable network (4402-a) >config 802.11b enable network (4402-a) >config ap disable 1252-c (4402-a) >config ap country NZ 1252-c To change country code: first disable target AP(s) (or disable all networks). Changing the country may reset any customized channel assignments. Changing the country may reboot disabled target AP(s). Are you sure you want to continue? (y/n) y 1252-c NZ changed (New country configured) (4402-a) >config ap enable 1252-c (4402-a) >show ap summary Number of APs.................................... 2 Global AP User Name.............................. Not Configured Global AP Dot1x User Name........................ Not Configured AP Name Slots AP Model Ethernet MAC Location Port Country Priority ------------------ ----- -------------------- ----------------- ---------------- ---- ------- ------ 3502-d 2 AIR-CAP3502I-N-K9 44:d3:ca:af:43:43 3750-A Port4 1 AU 1 1252-c 2 AIR-LAP1252AG-N-K9 c8:4c:75:2c:95:c0 3750-a-PORT3 1 NZ 1 (4402-a) >show country Configured Country............................. Multiple Countries:AU,LK,NZ Configured Country Codes AU - Australia................................. 802.11a Indoor,Outdoor / 802.11b / 802.11g LK - Sri Lanka................................. 802.11a Indoor,Outdoor / 802.11b / 802.11g NZ - New Zealand............................... 802.11a Indoor,Outdoor / 802.11b / 802.11g
.
Hi Rasika,
Is there a way to configure multiple APs with the same Country Code?
An option on the AP Group or FlexConnect Group maybe?
When dealing with tens of APs in more than one Country admin has to take each AP individually?
Hi Rasik,
if my Ap1602 is in different CC then the wlc will it cause any issue?
If your AP belongs to different regulatory domains, then common power/channel will be used.
So you will have certain limitations. Therefore it is not recommend to configure different regulatory domain country codes in single WLC.
HTH
Rasika
Hi ,
Is it possible to use different regulatory domains access points in same mesh network, example one as RAP and another as MAP, is it allowed?, what are the limitations.
Hello,
I know that your original post is a few years old now but, we are trying to do exactly this.
We have an Old WLC running v7.0.116.0 with 28 AP’s (a mix of AIR-LAP-1131AG-E-K9 and AIR-LAP-1041N-E-AG). Currently I have the GB regulatory domain enabled.
I have just purchased 10x AIR-LAP1131AG-A-K9 from the US. So to join them to my WLC I understand that I have to disable the A and N networks…
config 802.11a disable network
config 802.11b disable network
Then add the US country code
config country GB,US
Then enable the radio’s again
config 802.11a enable network
config 802.11b enable network
Is that all I have todo? I am aware that I will lose some of the channels but, the AP’s were only $24 so I’m not too concerned.
Thank you
Jonathon
Yes, that will do the work. As long as you understand the restrictions of conflicting reg domain config, it is ok
Rasika
Thanks Rasika.
One last thing, presumably it’s not possible to change an American (A) access point to a European (GB) one. Maybe by a firmware patch to unlock the frequencies that are not restricted in GB but are in the US.
Thanks
Jonathon
It is not possible to change regulatory domain if they came with a fixed domain. In recent time Cisco send AP with universal (-UX ) regulatory domain where you can program it to domain where you use the AP
HTH
Rasika
does disabling the networks affects the current connected AP’s?
Yes, it will affect the connected clients. All clients will be disconnected and reconnect once you enable the network.
HTH
Rasika
Dear nayarasi,
can i configure AIR-AP1572EAC-E-K9 in different Regulatory Domain ?
i understand in your post, we can enable two country in wlc its ok .
also please let me know how can convert mesh ap image to local lightweight image
You can’t change AP regulatory domain once it is manufactured to be used in specific regulatory domain.
If an AP comes with – UX reg domain, you can provision it for a country that you deploy.
You can change AP mode to local using “capwap ap mode local” CLI command on AP
https://supportforums.cisco.com/document/12398556/converting-mesh-ap-local-mode-and-vice-versa-using-ap-cli
HTH
Rasika
do you have experience to change ap regulatory domain from GB to US.
i have model air-cap1702I-E-K9 so we see it have Txpower max is 16dBm but country code US have Txpower 22dBm
Thanks!
You can’t change it once set it in factory (exception is UX reg domain AP where you can change it via software)
HTH
Rasika
Hello Nayarasi,
I am migrating after a controller with country code US and TW that are active for another controller that has only the active country code BR, and the ap’s are in the same regulatory domain that in the case would be the BR, you think it prudent to activate these codes US And TW on the destination controller?
Regards,
Does addition of country code in WLC need a reboot ..?
No, you do not require a reboot.
HTH
Rasika
Hello ,
Kindly i tried to add a new country codes BE and NL to the existing one : DE,CH,US,FR,J2,JP,RO using your steps in this blog but i have this error:
“Unsupported country code.”
can you please help me ?
what software versions you use & what model of WLC is it ?
Folks,
One thing that is not part of the post scope but it’s reasonable to consider in this scenario is the latency between the WLC and AP should be lower than 100ms, otherwise you may have EAP authentication issue.
While I was preforming WLC fail over test( Please note: the WLC’s are placed at two different regions { US & China}), The AP was not getting attach to one of the WLC, when other was powered down.
Below is the error message
=========================
spamApTask4: Jun 08 04:26:43.774: %CAPWAP-3-POST_DECODE_ERR: capwap_ac_sm.c:6250 Post decode processing failed for Config status from AP 6c:99:89:b0:XX:XX
*spamApTask4: Jun 08 04:26:43.773: %LWAPP-3-RD_ERR4: capwap_ac_sm.c:3345 The system detects an invalid regulatory domain 802.11bg:-A 802.11a:-AB for AP 6c:99:89:b0:XX:XX
*spamApTask4: Jun 08 04:26:43.773: %LOG-3-Q_IND: spam_lrad.c:11366 Country code (CN ) not configured for AP 6c:99:89:b0:XX:XX[…It occurred 2 times.!]
*spamApTask4: Jun 08 04:26:43.771: %LWAPP-3-RD_ERR8: spam_lrad.c:11366 Country code (CN ) not configured for AP 6c:99:89:b0:XX:XX
*spamApTask7: Jun 08 04:26:40.744: %CAPWAP-3-POST_DECODE_ERR: capwap_ac_sm.c:6250 Post decode processing failed for Config status from AP 6c:99:89:98:XX:XX
spamApTask7: Jun 08 04:26:40.742: %LWAPP-3-RD_ERR4: capwap_ac_sm.c:3345 The system detects an invalid regulatory domain 802.11bg:-A 802.11a:-AB for AP 6c:99:89:98:XX:XX
==========================
Please let me know if I enable the country code, will it work successfully ?
Kindly assist on this topic.
Yes, it should work if you have configured both country codes in WLC.
Pls note that there may be channel & power level limitations could occur if you configure different regulatory domain country codes on same WLC.
HTH
Rasika
I have -E AP deployed, and the country code is FR, I want to add -I AP, -E and -I are both supported by Algeria (my country) country code, Can I just change county code to DZ? will there be no conflict?
If all APs are in Algeria, then no problem of doing it. For safe side, first add Algeria as country code without removing FR
Pls verify using below your AP model respective regulatory domain.
https://www.cisco.com/c/dam/assets/prod/wireless/wireless-compliance-tool/index.html
HTH
Rasika
Hi Rasika,
We have cisco 5520 WLC. Unfortunately we have a maintenance window once every few months. I’m planning to add the country code (reg domain) to the WLC after the firmware upgrade to 8.3.143 . However the AP which we want to connect is not received at location yet so I wont be able to set the code on the AP individually like mentioned in your guide above. Is it possible to do this step without disabling the radios?
You can’t. You have to disable 802.11a/n/ac & 802.11b/g/n network on controller before changing country code.
Rasika
AP admin status got disabled automatically for all AP’s in Hongkong, we had to manually enable each AP. Any suggestions is this is caused by reg domains.
AP Model – AIR-AP3802I-S-K9
on AMS20 – N+1 HA – Secondary HA controller
(Cisco Controller) >show ap config general HKG001-A1-16E4
Cisco AP Identifier………………………… 193
Cisco AP Name……………………………… HKG001-A1-16E4
Country code………………………………. Multiple Countries : AU,FR,GB,HK,IL,IN,J4,NL,SG,US
Regulatory Domain allowed by Country…………. 802.11bg:-AEIJPQU 802.11a:-ABDEIJNPQSUZ
AP Country code……………………………. SG – Singapore
AP Regulatory Domain……………………….. 802.11bg:-E 802.11a:-S
on SIN20 – Primary HA controller
Cisco AP Identifier………………………… 231
Cisco AP Name……………………………… HKG001-A1-16E4
Country code………………………………. Multiple Countries : AU,FR,GB,HK,IL,IN,J4,NL,SG
Regulatory Domain allowed by Country…………. 802.11bg:-AEIJPQU 802.11a:-DEIJNPQSUZ
AP Country code……………………………. SG – Singapore
AP Regulatory Domain……………………….. 802.11bg:-E 802.11a:-S
Thanks so much Rasika, this solution worked for me like charm. Also i found this link works great to reference the regulatory domain for the AP that fails to join the vWLC. This is the part of the error that i was getting when the AP tries to join the vWLC and fails: “AP has SHA2 MIC certificate – Using SHA2 MIC certificate for DTLS” . https://www.cisco.com/c/dam/assets/prod/wireless/wireless-compliance-tool/index.html
i have a AIR-AP3802E-B-K9 and AIR-AP3802E-E-K9, the E are being registered in the WLC 5508 with latest firmware but no the B.
Do you advice i change the regulatory domain in the controller to correspond to the B. if i do won’t it affect the existing ones that are already working which are the E’s.
And pls be clear if we are to change the regulatory domain
1: only in the WLC
or
2: another step needs to be done on the APs themselves.
thank you.
You can configure country code in WLC (not a regulatory domain). Whenever you configure two countries that are part of the different regulatory domains, then WLC has to consider both regulatory domain power/channel restriction. Therefore when you mix country codes like that, WLC will limit to the most restrictive rules among those regulatory rules. Eg, in your case you mixe Europe & North America, so even your US deployment UNII-3 frequencies will not assign as EU it is not being used.
Configuration point of view, you simply need to configure the country code in WLC.
HTH
Rasika
Hello Nayarasi, first thank you very much for your post.
Please, let me ask you… I have two WLCs (Primary and Secondary) working in a single RF Group. To avoid downtime when I disable 802.11, is it possible to disable 802.11 in the secondary, enable a new country code, enable 802.11 and then move the APs to the secondary before I do the same in the primary controller?
I saw in your text that both controllers in the same RF Group must have the same countries configured.
Thank you very much.
When you failover to secondary, that will cause an outage.
Otherwise your approach make sense
Rasika
My WLC was configured to work US and I’ve been using APs with that regional code “A&B” until I received some for my region “E”. My WLC version is 8.2.151.0. will I be able to add another country code to accommodate those new Aps?
you can add another country code. However when you do that, then WLC can use only common channel & limited to power level that you can have both regulatory domain (North America & Europe). Since those are not identical, it is best to keep one WLC for North America regions and another controller with Europe countires rather mixing them into a single WLC
HTH
Rasika
We have 5508 WLC where we have multiple access points from different country locations Joined. I have Some access points which are physically at India location but those access point Country code is showing as Taiwan. because of this all my clients are connecting to only 2.4 Ghz band not the 5Ghz band. when i try to change the country code on that APs its giving me an error as “Request failed: Disable AP before configuring country code”. The AP model is AIR-CAP2702I-D-K9, at the same time we have same model of couple of APs in the same office which point to India country code. how to change the country code on these APs ? do we need to follow the same process of WLC for AP country code change by disabling 802.11a & 802.11b and then changing the AP country code ?