ExtremeCloud IQ Controller v10.17.01 User Guide
>
Administration
>
System Configuration
> Software Upgrade
Extreme Networks, Inc. December 15, 2025
Search this document
Print this page
Email this page
View PDF
Previous
Next
Abstract
Preface
Text Conventions
Documentation and Training
Send Feedback
Help and Support
AP Regulatory Information
New in this Guide
Release 10.17.01
New Features
Updates
Release 10.15.01
New Features
Updates
Welcome to ExtremeCloud IQ Controller
ExtremeCloud IQ Controller Overview
Appliances and Container Applications
Wireless AP Overview
Support for World-Wide Universal Access Points with Wi-Fi 6E or Wi-Fi 7 Technology
World-Wide Universal Access Points Compliance Regions
AP3000 Series Radios and 6 GHz Support
AP4000/AP4000-1 Radios and 6 GHz Support
AP4020 Series Radios and 6 GHz Support
AP4060 Series Radios and 6 GHz Support
AP5010 and AP5050 Radios and 6 GHz Support
AP5020 Radios and 6 GHz Support
AP5000 Series Power Management
6 GHz Channel Allocation and Notation
Universal AP Operational Modes
AP Client Bridge
Managing Client Bridge in ExtremeCloud IQ Controller
GRE Point-to-Point Tunnel
Cloud Visibility
Sites Overview
Centralized Site
Use Case: Large Centralized Site
Device Groups
Profiles
RF Management
Floor Plans
Position Aware Services
Position Aware Deployment
Floor Plan Limits
AFC Overview
Navigate the User Interface
Search Facility
Configuring Column Display
Understanding Date and Time
Dashboard
Add a New Dashboard
Modify a Dashboard
Utilization Stats by Network SSID
Controller High-Availability Deployment Status
Monitor
Sites
Site-Level Monitoring Options
Site Default Dashboard
Venue Dashboard
Site Access Points List
General Tab
Site-Level AP Actions
Radio Settings Buttons
AFC Tab
Geo Diagnostics Tab
Subgraphs
Subgraph Statistics
Floor Plan View
Viewing a Floor Plan
User Interface Controls
Assigning Badges
Device Context Menu
Filtering Floor Plan By Badge Information
Understanding Readiness Maps
Positioning Heatmaps
Smart RF Widgets Per Site
Clients
Understanding Client Status
Client Access Lists
Global Client Access Lists
Site Client Access Lists
Client Address Protection Lists
Client Actions
Network Snapshot: Clients Dashboard
Station Events
Client Widgets
Device List
Access Points List
Understanding Access Point States
Query Builder
Build a Query for Devices or Clients
Visualize a Query
Network Snapshot: AP Details
AP Widgets
LLDP Switch Port Connectivity
AP Tunnel Information
Troubleshooting
Smart RF Widgets Per Device
Channel Inspector Report — Smart RF
AP Events
View AP Events — Single Access Point
Switches List
Understanding Switch States
Network Snapshot: Switch Details
Switch Widgets
PoE Budget AP Estimator
Ports List
Port Dashboard
LAG Ports
Traces
Troubleshoot a Switch Using the CLI
VLANs
Networks List
Network Snapshot: Network Dashboard
Network Widgets
Mesh Point Network Diagram
Policy
Roles List
Preconfigured Policy Roles
Role Widgets
Rule-Level Statistics
Configure
Sites
Site-Level Configuration Options
Add a Site
Modify, Clone, or Delete a Site Configuration
Adding Device Groups to a Site
Device Group Parameters
Add or Edit a Configuration Profile
Associated Profiles
Associated Networks
Mesh Point Profile Configuration
Configure Client Bridge
Understand Radio Mode
Radio as a Sensor
Advanced AP Radio Settings
VLAN Profile Settings
AirDefense Profile Settings
ESL Profile Settings
IoT Profile Settings
Positioning Profile Settings
Analytics Profile Settings
RTLS Settings
Advanced Configuration Profile Settings
Configuring RF Management
Basic RF Management Settings
Channel and Power Settings
Configuring ACS RF Policy
Configuring Smart RF Policy
Configuring a Floor Plan
Displaying an Existing Floor Plan
Use Case: Device Group Filtering
Displaying Floors with Non-Assigned APs and Empty Floors
Use Case: Importing A Floor Plan with Unknown APs
Add a New Floor Plan
Floor Plan Settings
Importing or Exporting a Floor Plan
Setting a Background Image
Setting Floor Plan Scale
Drawing Boundary Walls
Drawing Inner Walls
Placing Devices
Configuring AP Orientation
Configuring Camera AP Angle
Configuring Floor Plan Zones
Deleting APs from the Map
Site Location
Site Access Points List
Site-Level RADIUS Configuration for Switches
Site Allow List/Deny List
Configure IP Address Protection List
Advanced Tab
Adoption Preference
Devices
Access Points
AP Actions
Adoption Preference Override
Multiple APs Event Level Override
AP Certificates
Generate CSR
Apply Signed Certificate
Add APs
Configure AP Details and Radio Settings
Channel Select Dialog
Configuring RF Management
AP Feature Restrictions in Low Power Mode
Advanced AP Settings
Advanced Setting Overrides
IP Address Assignment
AP Location Information
Professional Install Settings
AP305CX Professional Install
AP310e/AP360e Professional Install Settings
AP410e Professional Install Settings
AP460e Professional Install Settings
AP510e Professional Install Settings
AP560h Professional Install
AP3000X Professional Install Settings
AP4020X/FX Professional Install Settings
AP4060/X Professional Install Settings
AP5050D Professional Install Settings
Switches
Switch Actions
Understanding Switch States
Adding a Switch
Configure a Switch
LAG Configuration
Switch Port Configuration
Advanced Switch Settings
Access the Switch CLI
Tunnel Concentrators
Configure VPN Concentrators
Assign Devices to Site
Networks
WLAN Service Settings
Privacy Settings WPA3
Settings for WPA3 Personal with SAE and H2E
Settings for WPA3 Enterprise
WPA3-Enterprise with 192-bit mode
Privacy Settings WPA2
Privacy Settings for WPA2 with PSK
Privacy Settings for WPA2 Enterprise with RADIUS
Privacy Settings for WEP
Mesh Point Network
Configure a Mesh Point Network
Mesh Point Network Settings
Transparent Bridge
Hotspot
Hotspot WBA OpenRoaming
Configure Hotspot for WBA OpenRoaming
Configure Hotspot
Hotspot Identification
SP Identification
Network Characteristics
Online Signup
Configuring the OSU Service Provider
Captive Portal Settings
Internal Captive Portal Settings
External Captive Portal Settings
Centralized Web Authentication
CWA Network Settings
CWA Policy Redirection Role
ExtremeGuest Captive Portal Settings
Walled Garden Rules
Adding Walled Garden Rules
Captive Portal Redirect Port List
Advanced Network Settings
Configuring DSCP Classification
Vendor Specific Attributes
Managing a Network Service
Network Configuration Steps
Extreme Networks AFC Solution Overview and Configuration
Anchor and Non-Anchor APs
Geo-Location Agent
Understanding Geo-Location Coordinates
Supported APs for AFC in Canada and the United States
6GHz Radio Power AFC
AFC Mobile App
AFC Mobile App Requirements
AFC Mobile App Restrictions
AFC Deployment Workflow
Conduct a GPS Survey with a Smart Phone for AFC
Site Configuration for AFC
Floor Plan Requirements for AFC
Configure APs for AFC
AP Placement for AFC
Set or Refresh Geo-Location Coordinates
Monitoring and Troubleshooting AFC
Policy
Configuring Roles
Add Policy Roles
Policy Role Settings
Policy Rules for OSI L2 to L4
Configuring L2 Rules
Configuring L3, L4 Rules
Configuring L3, L4 with Source and Destination Rules
Application (Layer 7) Rules
Configuring L7 Application Rules
Adding Custom Apps to the Application List
Custom Application Settings
Class of Service
Configuring CoS
Configuring ToS/DSCP
Bandwidth Rate
VLANs
Configuring VLANs
VLAN Advanced Setting
Pre-defined Multicast Rules
Configuring a Multicast Rule
Local DHCP Management Settings
Fabric Attach Topology
VxLAN Topology
Configuring a VxLAN in ExtremeCloud IQ Controller
VxLAN ExtremeXOS Considerations
GRE Topology
Configure a GRE Topology
VLAN Groups
VLAN Group Settings
Configuring Rates
AAA RADIUS Authentication
AAA Policy Network Configuration
NAI Routing and Dynamic Discovery
AAA Policy Settings for NAI Routing
Configure a Regular Expression Realm
AAA Policy Settings
RADIUS Settings
Automatic Adoption
Adoption Rules
Adding or Editing Adoption Rules
Configure AP Adoption Rule
Configure Switch Adoption Rule
Pattern-Based Matching
Configure Device Redirection
Adoption Rule Filters
Deleting Adoption Rules
ExtremeGuest Integration
ExtremeGuest Server Settings
Callback Manager
ExtremeGuest Essentials and AirDefense Essentials Integration
ExtremeGuest Essentials Network Configuration
AirDefense Essentials Configuration
Onboard
Onboard AAA Authentication
Setting Default AAA Config
Managing RADIUS Servers
RADIUS Settings
Advanced RADIUS Settings
LDAP Configurations
LDAP Configuration Settings
LDAP Schema Definition Settings
LDAP Test Results
Managing The Local Password Repository
User Account Settings
Certificates
Generate Browser Certificates
Generate RADIUS Server Certificates
AAA Certificate Authorities
Manage Captive Portal
Portal Website Configuration
Guest Portal: Guest Web Access
Guest Portal: Guest Registration
Authentication with Third-party Credentials
Third-party Registration Requirements
Authenticated Portal: Authenticated Web Access
Authenticated Portal: Authenticated Registration Settings
Look and Feel Settings
Portal Network Configuration
Portal Administration Configuration
Login Configuration Settings
Message String Settings
Manage Access Control Groups
Access Control Group Settings
Working with Group Entries
Cloning Groups
Default Groups Provided with Your Installation
Access Control Rules
Configuring Network Policy Roles and Dynamic Access Control
Managing Access Control Rules
Default Rules for Captive Portal
Rule Settings
Tools
AFC Explorer
View a Projected Coverage Area
Workflow
Navigating ExtremeCloud IQ Controller Using Workflow
How to Navigate Using Workflow
Adding Components from Workflow
Deleting Components from Workflow
Modifying a Component
Logs
Advanced Filtering
Build a Query for Logs
View Events
View Station Events
View Audit Events
View All AP Events
View Smart RF Events
View Access Events
Set a Logging Filter
AP Upgrade Reports
Diagnostics
System Health Best Practice Widget
Configuration Best Practices
Operational Best Practices
Network Health Widget
Network Health Reports
Smart Poll
Network Utilities
TCP Dump Management
AP Service Tab
AP Test Suites
Test Suite Parameters
Optional Parameters for Each Test
AP Test Run
Test Run Parameters
Example Testing Script
AP Test Results
Test Result Details
RADIUS Servers
AFC Server Status tab
Reports
Create Report Template
Define Venue User Groups
Run Report
Schedule Report
Report Settings
Generated Reports
Administration
System Configuration
Interfaces
Add an Interface
Add a Management Access Rule
Multiple LAG Interface Support
Add a Static Route
L2 Port Details
Network Time
Software Upgrade
Perform a Backup and Restore of the System Configuration
Generate a Backup of the System Configuration
Schedule a Backup of the System Configuration
Manage and Restore System Configuration Backup Files
Upgrade Software
Rescue Image
Copy Upgrade Image
Remote Server Properties
Configuring an Upgrade Schedule
View Upgrade Logs
Upgrade AP Images
Install AP Firmware Image
Maintenance
Availability
Session Availability
Configure Controller Availability
Configure Mobility Settings
Configuration Updates with an Availability Pair
Settings
SNMP Configuration
Configure SNMPv2 Communities
Configure SNMPv3 Users
Configure SNMP Notifications and Traps
MAC Format
AP Transmit Power Representation
External NAT
Broadcast Multicast Traffic Control
Web Proxy
Dynamic Authorization Server Configuration
System Logging Configuration
System Information
Trust Points
Add a Trust Point
Manage Accounts
Create an Administrator Account
Configure User Authentication
Custom User Account Access
ExtremeCloud IQ Controller Applications
Install an Application
Configuration Template Details
Access an Application
Upgrade an Application
Uninstall an Application
Application Details
Extreme Defender for IoT
Extreme Scheduler
AirDefense Base Application
REST API Access for Docker Container Applications
Generate API Keys
Delete API Keys
Associate API Key File with a Docker Application
Remove a Configuration File from a Docker Application
Product Subscription License
Licensed Devices
Generate and Install the Activation Package
Air Gap Licensing File
Install Air Gap File
Revoke Air Gap License
Pilot-only Licensing
Upgrade to ExtremeCloud IQ Controller
Licensing States
Entitlement Health Checks
Licensing an Availability Pair
License Details
Entitlements
Activations
Software Upgrade
The following are components of the software upgrade process:
Rescue Images
System Configuration Backup
Restore
Software Upgrade
AP Images
Logs
Section contents:
Perform a Backup and Restore of the System Configuration
Learning about the configuration backup and restore procedures.
Upgrade Software
How to perform a software upgrade.
View Upgrade Logs
How to view upgrade logs.
Upgrade AP Images
Learn about upgrading AP firmware.
Perform a Backup and Restore of the System Configuration
Upgrade Software
Rescue Image
Upgrade AP Images
View Upgrade Logs
