Profiles enable administrators to assign a common set of configuration parameters, policies, and WLANs to service platforms, controllers, and access points across a large, multi segment, site. The configuration parameters within a profile are based on the hardware model the profile was created to support.
The service platforms, wireless controllers, and access points support both default and user-defined profiles. Each default and user-defined profile contains policies and configurations that are applied to devices assigned to the profile. Changes made to these configurations are automatically inherited by the devices. The central benefit of a profile is its ability to update devices collectively without having to modify individual device configurations.
Default profiles are system maintained and are automatically applied to service platforms and wireless controllers. The default AP profile is automatically applied to a AP (discovered by a wireless controller or service platform), unless an AP auto-provisioning policy is defined specifically to assign APs to a user-defined profile. After adoption, changes made to a profile‘s parameters are reflected across all devices using the profile. Default profiles are ideal for single site deployments where service platforms, wireless controllers, and access points share a common configuration.
User-defined profiles, on the other hand, are manually created for each supported service platform, wireless controller, and access point model. User-defined profiles are recommended for larger deployments using centralized controllers and service platforms when groups of devices on different floors, buildings or sites share a common configuration. These user-defined profiles can be manually, or automatically assigned to through an auto provisioning policy. An auto provisioning policy provides the means to assign profiles to access points based on model, serial number, VLAN ID, DHCP options, IP address (subnet) and MAC address. For more information, see AUTO-PROVISIONING-POLICY.
A user-defined profile can be created for each of the following device type:
Note
A T5 profile can be created only on the following platforms: RFS 4000, NX 95XX, and NX 96XX.Although profiles assign a common set of configuration parameters across devices, individual devices can still be assigned unique configuration parameters that follow the flat configuration model. As individual device updates are made, these devices no longer share the profile based configuration they originally supported. Therefore, changes made to a profile are not automatically inherited by devices who have had their configuration customized. These devices require careful administration, as they cannot be tracked as profile members. Their customized configurations overwrite their profile configurations until the profile is re-applied.
Note
The commands present under ‘Profiles‘ are also available under the ‘Device mode‘. The additional commands specific to the ‘Device mode‘ are listed separately.This chapter is organized into the following topics:
To view the list of device profiles supported, use the following command:
<DEVICE>(config)#profile ? nx9500-6C8809(config)#profile ? anyap Any access point profile ap505 AP505 access point profile ap510 AP510 access point profile containing Specify profiles that contain a sub-string in the profile name ex3524 EX3524 wireless controller profile ex3548 EX3548 wireless controller profile filter Specify addition selection filter nx45xx NX45XX integrated services platform profile nx5500 NX5500 wireless controller profile nx65xx NX65XX integrated services platform profile nx75xx NX75XX wireless controller profile nx9000 NX9000 wireless controller profile rfs4000 RFS4000 wireless controller profile rfs6000 RFS6000 wireless controller profile rfs7000 RFS7000 wireless controller profile t5 T5 DSL switch profile vx9000 VX9000 wireless controller profile <cr> nx9500-6C8809(config)# nx9500-6C8809(config)#profile nx9000 default-nx9000 nx9500-6C8809(config-profile-default-nx9000)# nx9500-6C8809(config)#profile ap505 default-ap505 nx9500-6C8809(config-profile-default-ap505)# <DEVICE>(config)#profile <DEVICE-TYPE> <PROFILE-NAME> <DEVICE>(config-profile-<PROFILE-NAME>)# nx9500-6C8809(config)#profile ap505 testap505 nx9500-6C8809(config-profile-testap505)#? Profile Mode commands: adopter-auto-provisioning-policy-lookup Use centralized auto-provisioning policy when adopted by another controller adoption Adoption configuration adoption-mode Configure the adoption mode for the access-points in this RF-Domain alias Alias antenna-id Configure the antenna on the AP application-policy Application Poicy configuration area Set name of area where the system is located arp Address Resolution Protocol (ARP) auto-learn Auto learning autogen-uniqueid Autogenerate a unique id autoinstall Autoinstall settings bridge Ethernet bridge captive-portal Captive portal cdp Cisco Discovery Protocol cluster Cluster configuration configuration-persistence Enable persistence of configuration across reloads (startup config file) controller WLAN controller configuration critical-resource Critical Resource crypto Encryption related commands database Database command device-onboard Device-onboarding configuration device-upgrade Device firmware upgrade diag Diagnosis of packets dot1x 802.1X dpi Enable Deep-Packet-Inspection (Application Assurance) dscp-mapping Configure IP DSCP to 802.1p priority mapping for untagged frames eguest-server Configure ExtremeGuest server email-notification Email notification configuration enforce-version Check the firmware versions of devices before interoperating environmental-sensor Environmental Sensors Configuration events System event messages export Export a file file-sync File sync between controller and adoptees floor Set the floor within a area where the system is located gre GRE protocol http-analyze Specify HTTP-Analysis configuration interface Select an interface to configure ip Internet Protocol (IP) ipv6 Internet Protocol version 6 (IPv6) l2tpv3 L2tpv3 protocol l3e-lite-table L3e lite Table led Turn LEDs on/off on the device led-timeout Configure the time for the led to turn off after the last radio state change legacy-auto-downgrade Enable device firmware to auto downgrade when other legacy devices are detected legacy-auto-update Auto upgrade of legacy devices lldp Link Layer Discovery Protocol load-balancing Configure load balancing parameter logging Modify message logging facilities mac-address-table MAC Address Table mac-auth 802.1X management-server Configure management server address memory-profile Memory profile to be used on the device meshpoint-device Configure meshpoint device parameters meshpoint-monitor-interval Configure meshpoint monitoring interval min-misconfiguration-recovery-time Time interval to check controller connectivity after configuration is received mint MiNT protocol misconfiguration-recovery-time Check controller connectivity after configuration is received neighbor-inactivity-timeout Configure neighbor inactivity timeout neighbor-info-interval Configure neighbor information exchange interval no Negate a command or set its defaults noc Configure the noc related setting nsight NSight ntp Ntp server WORD offline-duration Set duration for which a device remains unadopted before it generates offline event otls Omnitrail Location Server power-config Configure power mode preferred-controller-group Controller group this system will prefer for adoption preferred-tunnel-controller Tunnel Controller Name this system will prefer for tunneling extended vlan traffic radius Configure device-level radius authentication parameters raid RAID remote-debug Configure remote debug parameters remove-override Remove configuration item override from the device (so profile value takes effect) rf-domain-manager RF Domain Manager router Dynamic routing slot PCI expansion Slot spanning-tree Spanning tree traffic-class-mapping Configure IPv6 traffic class to 802.1p priority mapping for untagged frames traffic-shape Traffic shaping trustpoint Assign a trustpoint to a service tunnel-controller Tunnel Controller group this controller belongs to use Set setting to use vrrp VRRP configuration vrrp-state-check Publish interface via OSPF/BGP only if the interface VRRP state is not BACKUP wep-shared-key-auth Enable support for 802.11 WEP shared key authentication zone Configure Zone name clrscr Clears the display screen commit Commit all changes made in this session do Run commands from Exec mode end End current mode and change to EXEC mode exit End current mode and down to previous mode help Description of the interactive help system revert Revert changes service Service Commands show Show running system information write Write running configuration to memory or terminal nx9500-6C8809(config-profile-testap505)# nx9500-6C8809(config-profile-T5Profile)#? T5 Profile Mode commands: cpe T5 CPE configuration interface Select an interface to configure ip Internet Protocol (IP) no Negate a command or set its defaults ntp Configure NTP override-wlan Configure RF Domain level overrides for wlan t5 T5 configuration t5-logging Modify message logging facilities use Set setting to use clrscr Clears the display screen commit Commit all changes made in this session do Run commands from Exec mode end End current mode and change to EXEC mode exit End current mode and down to previous mode help Description of the interactive help system revert Revert changes service Service Commands show Show running system information write Write running configuration to memory or terminal nx9500-6C8809(config-profile-T5Profile)# nx9500-6C8809(config-profile-Ex3524Profile)#? EX35xx Profile Mode commands: interface Select an interface to configure ip Internet Protocol (IP) no Negate a command or set its defaults power Ex3500 Power over Ethernet Command upgrade Configures upgrade option for ex3500 system use Set setting to use clrscr Clears the display screen commit Commit all changes made in this session do Run commands from Exec mode end End current mode and change to EXEC mode exit End current mode and down to previous mode help Description of the interactive help system revert Revert changes service Service Commands show Show running system information write Write running configuration to memory or terminal nx9500-6C8809(config-profile-Ex3524Profile)#
Note
The input parameter <HOSTNAME>, wherever used in syntaxes across this chapter, cannot include an underscore (_) character. In other words, the name of a device cannot contain an underscore.