Anomalies in CLI configuration display of WAPs? : AP330

  • 1
  • Question
  • Updated 5 years ago
  • Answered
So I noticed 2 things that threw me in the CLI on some AP330's we configured a while back:

a) user-profile for associated users when running 'show qos counter user' always shows 'User Profile=employee-profile;' rather than 1 of the 3 user-profiles that are exclusive to each of the 3 SSIDs (1 user profile per SSID) so in theory the command should reflect the configured user profiles rather than some default?

b) for some reason RRM looks to be disabled however we have gone to great lengths to optimise the configs and this struck me as strange (shouldn't it be on?)

show station Inspire9
RRM state: Disabled

How do I get this enabled?

Request:
=======
So the config of 1 of the WAPs is below and *any* help or suggestions would be most gratefully received.

{code}
radio profile Inspire9-ng
radio profile Inspire9-ng phymode 11ng
radio profile Inspire9-ng scan access interval 1440
no radio profile Inspire9-ng scan access client
radio profile Inspire9-ng interference-map enable
radio profile Inspire9-ng deny-client 11b
radio profile Inspire9-ng benchmark phymode 11b rate 11 success 70 usage 50
radio profile Inspire9-ng benchmark phymode 11b rate 5.5 success 80 usage 50
radio profile Inspire9-ng benchmark phymode 11g rate 48 success 70 usage 50
radio profile Inspire9-ng benchmark phymode 11g rate 36 success 80 usage 50
radio profile Inspire9-ng benchmark phymode 11a rate 48 success 70 usage 50
radio profile Inspire9-ng benchmark phymode 11a rate 36 success 80 usage 50
radio profile Inspire9-ng benchmark phymode 11n rate mcs14 success 70 usage 50
radio profile Inspire9-ng benchmark phymode 11n rate mcs13 success 80 usage 50
radio profile Inspire9-ng high-density enable
radio profile Inspire9-ng band-steering enable
radio profile Inspire9-ng high-density continuous-probe-suppress enable
radio profile Inspire9-ng client-load-balance enable
radio profile Inspire9-ng weak-snr-suppress enable
radio profile Inspire9-ng client-load-balance sta-mini-airtime 2
radio profile Inspire9-ng safety-net timeout 10
radio profile Inspire9-ng band-steering mode prefer-5g
radio profile Inspire9-na
radio profile Inspire9-na phymode 11na
radio profile Inspire9-na scan access interval 1440
no radio profile Inspire9-na scan access client
radio profile Inspire9-na interference-map enable
radio profile Inspire9-na deny-client 11b
radio profile Inspire9-na benchmark phymode 11b rate 11 success 70 usage 50
radio profile Inspire9-na benchmark phymode 11b rate 5.5 success 80 usage 50
radio profile Inspire9-na benchmark phymode 11g rate 48 success 70 usage 50
radio profile Inspire9-na benchmark phymode 11g rate 36 success 80 usage 50
radio profile Inspire9-na benchmark phymode 11a rate 48 success 70 usage 50
radio profile Inspire9-na benchmark phymode 11a rate 36 success 80 usage 50
radio profile Inspire9-na benchmark phymode 11n rate mcs14 success 70 usage 50
radio profile Inspire9-na benchmark phymode 11n rate mcs13 success 80 usage 50
radio profile Inspire9-na high-density enable
radio profile Inspire9-na band-steering enable
radio profile Inspire9-na high-density continuous-probe-suppress enable
radio profile Inspire9-na client-load-balance enable
radio profile Inspire9-na weak-snr-suppress enable
radio profile Inspire9-na client-load-balance sta-mini-airtime 2
radio profile Inspire9-na safety-net timeout 10
radio profile Inspire9-na band-steering mode prefer-5g
security-object Secure
security-object Secure security protocol-suite wpa2-aes-psk ascii-key **********
security-object Secure security roaming cache update-interval 60 ageout 500
security-object Secure default-user-profile-attr 3
security-object Inspire9-Legacy
security-object Inspire9-Legacy security roaming cache update-interval 60 ageout 500
security-object Inspire9-Legacy default-user-profile-attr 2
security-object Inspire9
security-object Inspire9 security roaming cache update-interval 60 ageout 500
security-object Inspire9 default-user-profile-attr 1
ssid Secure
ssid Secure security-object Secure
ssid Secure client-age-out 30
ssid Secure 11g-rate-set 18-basic 24 36 48 54
ssid Secure 11a-rate-set 18-basic 24 36 48 54
ssid Inspire9-Legacy
ssid Inspire9-Legacy security-object Inspire9-Legacy
ssid Inspire9-Legacy client-age-out 30
ssid Inspire9-Legacy 11g-rate-set 18-basic 24 36 48 54
ssid Inspire9-Legacy 11a-rate-set 18-basic 24 36 48 54
ssid Inspire9
ssid Inspire9 security-object Inspire9
ssid Inspire9 client-age-out 30
ssid Inspire9 11g-rate-set 18-basic 24 36 48 54
ssid Inspire9 11a-rate-set 18-basic 24 36 48 54
hive au-mel-i9-h01
hive au-mel-i9-h01 wlan-idp mitigation-mode manual
hive au-mel-i9-h01 password **********
interface eth1 mode bridge-access
interface eth1 mac-learning enable
interface eth1 shutdown
interface wifi0 radio profile Inspire9-ng
interface wifi0 radio channel 1
interface wifi0 radio power 15
interface wifi1 mode access
interface wifi1 radio profile Inspire9-na
interface wifi1 radio channel 165
interface wifi1 radio power 20
interface mgt0 hive au-mel-i9-h01
interface wifi0 ssid Secure
interface wifi1 ssid Secure
interface wifi0 ssid Inspire9-Legacy
interface wifi1 ssid Inspire9-Legacy
interface wifi1 ssid Inspire9
system led brightness dim
security wlan-idp profile au-mel-i9-h01-wips
security wlan-idp profile au-mel-i9-h01-wips ap-policy
security wlan-idp profile au-mel-i9-h01-wips ap-policy ap-oui
security wlan-idp profile au-mel-i9-h01-wips ap-policy ap-oui entry 00:17:59
security wlan-idp profile au-mel-i9-h01-wips ap-policy ap-oui entry 00:19:77
security wlan-idp profile au-mel-i9-h01-wips ap-policy ap-oui entry 00:15:70
security wlan-idp profile au-mel-i9-h01-wips ap-policy ap-oui entry 40:18:b1
security wlan-idp profile au-mel-i9-h01-wips ap-policy ap-oui entry 00:17:9a
security wlan-idp profile au-mel-i9-h01-wips ap-policy ap-oui entry 00:1b:63
security wlan-idp profile au-mel-i9-h01-wips ap-policy ap-oui entry 00:1d:a2
security wlan-idp profile au-mel-i9-h01-wips ap-policy ap-oui entry 00:09:ef
security wlan-idp profile au-mel-i9-h01-wips ap-policy ap-oui entry 00:0c:cc
security wlan-idp profile au-mel-i9-h01-wips ap-policy ap-oui entry 08:ea:44
security wlan-idp profile au-mel-i9-h01-wips ap-policy ap-oui entry e0:1c:41
security wlan-idp profile au-mel-i9-h01-wips ap-policy ssid
security wlan-idp profile au-mel-i9-h01-wips ap-policy short-preamble
security wlan-idp profile au-mel-i9-h01-wips ap-policy short-beacon
security wlan-idp profile au-mel-i9-h01-wips ap-detection connected
security wlan-idp profile au-mel-i9-h01-wips ap-detection client-mac-in-net
interface wifi0 wlan-idp profile au-mel-i9-h01-wips
interface wifi1 wlan-idp profile au-mel-i9-h01-wips
lldp
access-console security protocol-suite wpa-auto-psk ascii-key ***********
report statistic period 1
report statistic alarm-threshold interface crc-error-rate 15
report statistic alarm-threshold interface tx-drop-rate 20
report statistic alarm-threshold interface rx-drop-rate 20
report statistic alarm-threshold interface tx-retry-rate 20
report statistic alarm-threshold client tx-drop-rate 20
report statistic alarm-threshold client rx-drop-rate 20
report statistic alarm-threshold client tx-retry-rate 20
hostname au-mel-i9-ap01a
admin root-admin admin password ***************
interface mgt0 ip 192.168.1.10 255.255.255.0
ip route net 0.0.0.0 0.0.0.0 gateway 192.168.1.1
no interface mgt0 dhcp client
dns server-ip 139.130.4.4
dns server-ip 8.8.8.8 second
ntp server ntp1.aerohive.com
clock time-zone 10
clock time-zone daylight-saving-time 10-06 01:59:59 04-07 02:59:59
config version 70
config rollback enable
snmp location Level1@au-mel-i9-h01-lv01
mobility-threshold gre-tunnel permitted-load medium
track au-mel-i9-h01 default-gateway
track au-mel-i9-h01 action enable-access-console
track au-mel-i9-h01 multi-dst-logic and
os-detection method user-agent
capwap client server name hm-useast60-03.aerohive.com
capwap client dtls hm-defined-passphrase ************ key-id 1
capwap client vhm-name *******************
no capwap client dtls negotiation enable
qos classifier-map service dns qos 7 action permit
qos classifier-map service icmp qos 7 action permit
service "L7-HTTP VIDEO" app-id 658
qos classifier-map service "L7-HTTP VIDEO" qos 5 action permit
service "L7-GOOGLE VIDEO" app-id 244
qos classifier-map service "L7-GOOGLE VIDEO" qos 5 action permit
service L7-BACKBLAZE app-id 63
qos classifier-map service L7-BACKBLAZE qos 0 action permit
service "L7-GOOGLE TALK GADGET" app-id 256
qos classifier-map service "L7-GOOGLE TALK GADGET" qos 5 action permit
service "L7-GOOGLE TALK" app-id 255
qos classifier-map service "L7-GOOGLE TALK" qos 5 action permit
service "L7-APPLE UPDATE" app-id 42
qos classifier-map service "L7-APPLE UPDATE" qos 0 action permit
service NTP protocol udp port 123 timeout 60
qos classifier-map service NTP qos 7 action permit
service L7-SMTP app-id 573
qos classifier-map service L7-SMTP qos 0 action permit
service L7-BITTORRENT app-id 81
qos classifier-map service L7-BITTORRENT qos 0 action permit
service L7-SIP app-id 559
qos classifier-map service L7-SIP qos 7 action permit
service "L7-SKYPE AUTH" app-id 561
qos classifier-map service "L7-SKYPE AUTH" qos 7 action permit
service L7-ICLOUD app-id 284
qos classifier-map service L7-ICLOUD qos 0 action permit
service L7-SKYDRIVE app-id 560
qos classifier-map service L7-SKYDRIVE qos 0 action permit
service L7-FTP app-id 217
qos classifier-map service L7-FTP qos 0 action permit
service "L7-SKYPE OUT" app-id 563
qos classifier-map service "L7-SKYPE OUT" qos 7 action permit
service "L7-FTP CONTROL" app-id 218
qos classifier-map service "L7-FTP CONTROL" qos 0 action permit
service L7-SKYPE app-id 562
qos classifier-map service L7-SKYPE qos 7 action permit
service L7-DROPBOX app-id 166
qos classifier-map service L7-DROPBOX qos 0 action permit
service "L7-FTP DATA" app-id 219
qos classifier-map service "L7-FTP DATA" qos 0 action permit
service "L7-SKYPE PROBE" app-id 565
qos classifier-map service "L7-SKYPE PROBE" qos 7 action permit
service L7-FTPS app-id 220
qos classifier-map service L7-FTPS qos 0 action permit
service L7-FTPSDATA app-id 221
qos classifier-map service L7-FTPSDATA qos 0 action permit
service "L7-SKYPE P2P" app-id 564
qos classifier-map service "L7-SKYPE P2P" qos 7 action permit
service L7-SSH app-id 589
qos classifier-map service L7-SSH qos 5 action permit
qos airtime enable
qos classifier-profile eth0 service
qos classifier-profile eth1 service
qos classifier-profile red0 service
qos classifier-profile agg0 service
qos classifier-profile Secure service
qos classifier-profile Inspire9-Legacy service
qos classifier-profile Inspire9 service
interface eth1 qos-classifier eth1
interface eth0 qos-classifier eth0
ssid Secure qos-classifier Secure
ssid Inspire9-Legacy qos-classifier Inspire9-Legacy
ssid Inspire9 qos-classifier Inspire9
qos marker-profile eth0 diffserv
qos marker-profile eth1 diffserv
qos marker-profile red0 diffserv
qos marker-profile agg0 diffserv
qos marker-profile Secure diffserv
qos marker-profile Inspire9-Legacy diffserv
qos marker-profile Inspire9 diffserv
interface eth1 qos-marker eth1
interface eth0 qos-marker eth0
ssid Secure qos-marker Secure
ssid Inspire9-Legacy qos-marker Inspire9-Legacy
ssid Inspire9 qos-marker Inspire9
qos marker-map diffserv au-mel-i9-mark-normal
qos policy def-user-qos user-profile 2000000 10 user 1000000
qos policy def-user-qos qos 0 wrr 1000000 10
qos policy def-user-qos qos 1 wrr 1000000 20
qos policy def-user-qos qos 2 wrr 1000000 30
qos policy def-user-qos qos 3 wrr 1000000 40
qos policy def-user-qos qos 4 wrr 1000000 50
qos policy def-user-qos qos 5 wrr 1000000 60
qos policy def-user-qos qos 6 strict 20000 0
qos policy def-user-qos qos 7 strict 20000 0
qos policy au-mel-i9-5mbqos user-profile 20000 30 user 5000
qos policy au-mel-i9-5mbqos qos 0 wrr 5000 10
qos policy au-mel-i9-5mbqos qos 1 wrr 5000 20
qos policy au-mel-i9-5mbqos qos 2 wrr 5000 30
qos policy au-mel-i9-5mbqos qos 3 wrr 5000 40
qos policy au-mel-i9-5mbqos qos 4 wrr 5000 50
qos policy au-mel-i9-5mbqos qos 5 wrr 5000 60
qos policy au-mel-i9-5mbqos qos 6 strict 5000 0
qos policy au-mel-i9-5mbqos qos 7 strict 5000 0
user-profile Inspire9 qos-policy au-mel-i9-5mbqos vlan-id 64 attribute 1
user-profile Inspire9 qos-marker-map diffserv au-mel-i9-mark-normal
user-profile Inspire9 performance-sentinel enable
user-profile Inspire9 performance-sentinel guaranteed-bandwidth 5000
user-profile Inspire9-Legacy qos-policy au-mel-i9-5mbqos vlan-id 64 attribute 2
user-profile Inspire9-Legacy qos-marker-map diffserv au-mel-i9-mark-normal
user-profile Inspire9-Legacy performance-sentinel enable
user-profile Inspire9-Legacy performance-sentinel guaranteed-bandwidth 5000
user-profile Secure1 qos-policy au-mel-i9-5mbqos vlan-id 64 attribute 3
user-profile Secure1 qos-marker-map diffserv au-mel-i9-mark-normal
user-profile Secure1 performance-sentinel enable
user-profile Secure1 performance-sentinel guaranteed-bandwidth 5000
performance-sentinel notification-interval 30
roaming neighbor include ip 192.168.1.11 255.255.255.0
bonjour-gateway realm au-mel-i9-h01-lv01_au-mel-i9-h01
application reporting auto
application reporting app-id 29,33,42,63,81,160,166,191,217,252,255 enable
application reporting app-id 275,310,399,407,451,477,481,535,551 enable
application reporting app-id 559,562,564,589,590,626,636,641,645 enable
application reporting app-id 706 enable
Photo of irldexter

irldexter

  • 37 Posts
  • 1 Reply Like
  • sad

Posted 5 years ago

  • 1
Photo of Jonathan Hurtt

Jonathan Hurtt

  • 98 Posts
  • 48 Reply Likes
I do agree with you on #1, I have notified Support and we will be looking into it.

As for #2... RRM or 802.11k can be configured in within the SSID, Advanced, Voice Enterprise Configuration
Photo of irldexter

irldexter

  • 37 Posts
  • 1 Reply Like
Great stuff, and thank you.