WLAN Config via CLI – Part 3

Tags

In this post we will see QoS configuration of a WLAN via CLI. As you see previously here is the default settings.

(WLC2) > config wlan ?

qos            Configures Quality of Service policy.
wmm            Configures WMM (WME).
7920-support   Configures support for phones.
media-stream   Configures Media Stream.
uapsd          Configures UAPSD.

Prior to change the QoS profile you need to make sure correct 802.1p value configured for each profile. By default no value set for 802.1p value in any profile (Platinum, Gold, Silver & Bronze) and therefore no QoS tags pass onto wired network from the controller. You required to disable 802.11a/b network before configuring QoS profile values. Here are the CLI commands to configure these. You have to map 802.1p value of 6,5,3,1 for Platinum, Gold, Silver & Bronze respectively.

(WLC2) >config 802.11b disable network
(WLC2) >config 802.11a disable network

(WLC2) >config qos  ?

average-data-rate     Configure QoS Average Data Rate
average-realtime-rate Configure QoS Realtime Average Data Rate
burst-data-rate       Configure QoS Burst Data Rate
burst-realtime-rate   Configure QoS Realtime Burst Data Rate
description           Configure QoS Description
dot1p-tag             Configure QoS 802.1P Tag
protocol-type         Configure QoS Protocol Type

(WLC2) >config qos protocol-type platinum ?               
dot1p          QoS Protocol Type 'dot1p'
none           QoS Protocol Type 'none'

(WLC2) >config qos protocol-type platinum dot1p

(WLC2) >config qos  dot1p-tag ?             
bronze         [bronze profile]
gold           [gold profile]
platinum       [platinum profile]
silver         [silver profile]

(WLC2) >config qos  dot1p-tag platinum               
<dot1p>        802.1p Tag (0 ~ 7)

(WLC2) >config qos  dot1p-tag platinum 6

*** Here are the other QoS profile configurations ***

(WLC2) >config qos protocol-type gold dot1p
(WLC2) >config qos  dot1p-tag gold 5
(WLC2) >config qos protocol-type silver dot1p
(WLC2) >config qos dot1p-tag silver 3
(WLC2) >config qos protocol-type bronze dot1p
(WLC2) >config qos dot1p-tag bronze 1

(WLC2) >config 802.11b enable network
(WLC2) >config 802.11a enable network

Now you can assign the QoS profile to WLAN you created.

(WLC2) >config wlan qos ?               
<WLAN id>      Enter WLAN Identifier between 1 and 512.
foreignAp      Third Party Access Points.

(WLC2) >config wlan qos 17 ?             
bronze         Bronze QoS policy
gold           Gold QoS policy
platinum       Platinum QoS policy
silver         Silver QoS policy

(WLC2) >config wlan qos 17 platinum

You can configure the WMM setting as below. If you select “Require” option then non-WMM client cannot associate with this WLAN. Default option is “Allow” which permit both WMM & non-WMM client to join. But all non-WMM client will get the QoS setting configured under WLAN. In my case if I choose WMM-Allow all traffic coming from non-WMM client will mark as 802.1p of 6 which is equivalent to DSCP EF at the wired side of the network.

(WLC2) >config wlan wmm ?               
allow          Allows WMM on the WLAN.
disable        Disables WMM on the WLAN.
require        Requires WMM enabled clients on the WLAN.

(WLC2) >config wlan wmm require ?          
<WLAN id>      Enter WLAN Identifier between 1 and 512.

(WLC2) >config wlan wmm require 17

If you are not using WMM & you have old 7920 phones (which is not compatible with WMM anyway) you can enabe 7920 specific QoS as below. As you can see client-cac is use draft 802.11e QBSS IE you cannot configure WMM & this feature. Those are mutually exclusive.

(WLC2) >config wlan 7920-support ?               
ap-cac-limit   Supports phones that expect the Cisco Vendor-Specific IE.
client-cac-limit Supports phones that expect the IEEE 802.11e Draft 6 QBSS-Load IE.

(WLC2) >config wlan 7920-support ap-cac-limit ?              
enable         Supports phones that expect the Cisco Vendor-Specific IE.
disable        Supports phones that expect the Cisco Vendor-Specific IE 

(WLC2) >config wlan 7920-support client-cac-limit        
enable         Supports phones that expect the IEEE 802.11e Draft 6 QBSS-Load IE.
disable        Supports phones that expect the IEEE 802.11e Draft 6 QBSS-Load IE.

If you require to enable U-APSD (Unscheduled Auto Power Save Delivery) support when you enable WMM, you have to configure it like below.

(WLC2) >config wlan uapsd ?           
compliant-client Configures UAPSD Compliant Client support.

(WLC2) >config wlan uapsd compliant-client ?             
disable        Disables UAPSD Compliant Client support on the WLAN.
enable         Enables UAPSD Compliant Client support on the WLAN.

(WLC2) >config wlan uapsd compliant-client enable ?             
<WLAN id>      Enter WLAN Identifier between 1 and 512.

(WLC2) >config wlan uapsd compliant-client enable 17

If you have configured the video stream feature on the controller and you need to enable that on this WLAN you can use “config wlan media strem ” CLI command as shown below. If you haven’t configure a video stream, then this command would not accept.

(WLC2) >config wlan media-stream ?                           
multicast-direct Configures Multicast-direct for WLAN

(WLC2) >config wlan media-stream multicast-direct ?             
<WLAN id>      Enter WLAN Identifier between 1 and 512.

(WLC2) >config wlan media-stream multicast-direct 17 ?            
enable         Enables Multicast-direct on the WLAN
disable        Disables Multicast-direct on the WLAN.

(WLC2) >config wlan media-stream multicast-direct 17 enable

So here is the finally your WLAN QoS section looks like in GUI.

In CLI here is the corresponding CLI command to achieve the above

config wlan qos 17 platinum 
config wlan wmm require 17 
config wlan uapsd compliant-client enable 17 
config wlan media-stream multicast-direct 17 enable

You can verify your configuration using “show wlan 17” CLI command.

(4402-c) >show wlan 17
WLAN Identifier.................................. 17
Profile Name..................................... Test-17
Network Name (SSID).............................. Test-17
Status........................................... Disabled
MAC Filtering.................................... Disabled
Broadcast SSID................................... Enabled
AAA Policy Override.............................. Disabled
Network Admission Control
  Radius-NAC State............................... Disabled
  SNMP-NAC State................................. Disabled
  Quarantine VLAN................................ 0
Maximum number of Associated Clients............. 0
Number of Active Clients......................... 0
Exclusionlist Timeout............................ 60 seconds
Session Timeout.................................. 1800 seconds
CHD per WLAN..................................... Enabled
Webauth DHCP exclusion........................... Disabled
Interface........................................ management
Multicast Interface.............................. Not Configured
WLAN ACL......................................... unconfigured
DHCP Server...................................... Default
DHCP Address Assignment Required................. Disabled
Static IP client tunneling....................... Disabled
Quality of Service............................... Platinum (voice)
Scan Defer Priority.............................. 4,5,6
Scan Defer Time.................................. 100 milliseconds
WMM.............................................. Required
WMM UAPSD Compliant Client Support............... Enabled
Media Stream Multicast-direct.................... Enabled
CCX - AironetIe Support.......................... Enabled
CCX - Gratuitous ProbeResponse (GPR)............. Disabled
CCX - Diagnostics Channel Capability............. Disabled
Dot11-Phone Mode (7920).......................... Disabled
Wired Protocol................................... 802.1P (Tag=6)
IPv6 Support..................................... Disabled
Peer-to-Peer Blocking Action..................... Disabled
Radio Policy..................................... All
DTIM period for 802.11a radio.................... 1
DTIM period for 802.11b radio.................... 1
Radius Servers

In next post we will see how to configure Security Specific settings via CLI.