Profiles

Profiles enable administrators to assign a common set of configuration parameters, policies, and WLANs to service platforms, controllers, and access points across a large, multi segment, site. The configuration parameters within a profile are based on the hardware model the profile was created to support.

The service platforms, wireless controllers, and access points support both default and user-defined profiles. Each default and user-defined profile contains policies and configurations that are applied to devices assigned to the profile. Changes made to these configurations are automatically inherited by the devices. The central benefit of a profile is its ability to update devices collectively without having to modify individual device configurations.

Default profiles are system maintained and are automatically applied to service platforms and wireless controllers. The default AP profile is automatically applied to a AP (discovered by a wireless controller or service platform), unless an AP auto-provisioning policy is defined specifically to assign APs to a user-defined profile. After adoption, changes made to a profile‘s parameters are reflected across all devices using the profile. Default profiles are ideal for single site deployments where service platforms, wireless controllers, and access points share a common configuration.

User-defined profiles, on the other hand, are manually created for each supported service platform, wireless controller, and access point model. User-defined profiles are recommended for larger deployments using centralized controllers and service platforms when groups of devices on different floors, buildings or sites share a common configuration. These user-defined profiles can be manually, or automatically assigned to through an auto provisioning policy. An auto provisioning policy provides the means to assign profiles to access points based on model, serial number, VLAN ID, DHCP options, IP address (subnet) and MAC address. For more information, see Auto-Provisioning Policy.

A user-defined profile can be created for each of the following device type:
  • AP505 - Adds an AP505 access point profile
  • AP510 - Adds an AP510 access point profile
  • AP560 - Adds an AP560 access point profile
  • NX5500 – Adds an NX5500 wireless controller profile
  • NX75XX – Adds an NX7500 series service platform profile
  • NX9000 – Adds an NX9500 series service platform profile
  • NX9600 – Adds an NX9600 series service platform profile
  • VX9000 – Adds a VX9000 virtual controller profile

Although profiles assign a common set of configuration parameters across devices, individual devices can still be assigned unique configuration parameters that follow the flat configuration model. As individual device updates are made, these devices no longer share the profile based configuration they originally supported. Therefore, changes made to a profile are not automatically inherited by devices who have had their configuration customized. These devices require careful administration, as they cannot be tracked as profile members. Their customized configurations overwrite their profile configurations until the profile is re-applied.

Note

Note

The commands present under ‘Profiles‘ are also available under the ‘Device mode‘. The additional commands specific to the ‘Device mode‘ are listed separately.

This chapter is organized into the following topics:

To view the list of device profiles supported, use the following command:

<DEVICE>(config)#profile ?

nx9500-6C8809#configure
Enter configuration commands, one per line.  End with CNTL/Z.
nx9500-6C8809(config)#profile ?
  anyap       Any access point profile
  ap505       AP505 access point profile
  ap510       AP510 access point profile
  ap560       AP560 access point profile
  ap621       AP621 access point profile
  ap622       AP622 access point profile
  ap650       AP650 access point profile
  ap6511      AP6511 access point profile
  ap6521      AP6521 access point profile
  ap6522      AP6522 access point profile
  ap6532      AP6532 access point profile
  ap6562      AP6562 access point profile
  ap71xx      AP71XX access point profile
  ap7502      AP7502 access point profile
  ap7522      AP7522 access point profile
  ap7532      AP7532 access point profile
  ap7562      AP7562 access point profile
  ap7602      AP7602 access point profile
  ap7612      AP7612 access point profile
  ap7622      AP7622 access point profile
  ap7632      AP7632 access point profile
  ap7662      AP7662 access point profile
  ap81xx      AP81XX access point profile
  ap82xx      AP82XX access point profile
  ap8432      AP8432 access point profile
  ap8533      AP8533 access point profile
  containing  Specify profiles that contain a sub-string in the profile name
  ex3524      EX3524 wireless controller profile
  ex3548      EX3548 wireless controller profile
  filter      Specify addition selection filter
  nx45xx      NX45XX integrated services platform profile
  nx5500      NX5500 wireless controller profile
  nx65xx      NX65XX integrated services platform profile
  nx75xx      NX75XX wireless controller profile
  nx9000      NX9000 wireless controller profile
  rfs4000     RFS4000 wireless controller profile
  rfs6000     RFS6000 wireless controller profile
  rfs7000     RFS7000 wireless controller profile
  t5          T5 DSL switch profile
  vx9000      VX9000 wireless controller profile
  <cr>

nx9500-6C8809(config)#

nx9500-6C8809(config)#profile nx9000 default-nx9000
nx9500-6C8809(config-profile-default-nx9000)#

nx9500-6C8809(config)#profile ap505 default-ap505
nx9500-6C8809(config-profile-default-ap505)#

<DEVICE>(config)#profile <DEVICE-TYPE> <PROFILE-NAME>
<DEVICE>(config-profile-<PROFILE-NAME>)#

nx9500-6C8809(config)#profile ap510 default-ap510
ap510-133C9B(config-profile-default-ap510)#?
Profile Mode commands:
  adopter-auto-provisioning-policy-lookup  Use centralized auto-provisioning
                                           policy when adopted by another
                                           controller
  adoption                                 Adoption configuration
  adoption-mode                            Configure the adoption mode for the
                                           access-points in this RF-Domain
  alias                                    Alias
  antenna-id                               Configure the antenna on the AP
  area                                     Set name of area where the system
                                           is located
  arp                                      Address Resolution Protocol (ARP)
  auto-learn                               Auto learning
  autogen-uniqueid                         Autogenerate a unique id
  autoinstall                              Autoinstall settings
  bridge                                   Ethernet bridge
  captive-portal                           Captive portal
  cdp                                      Cisco Discovery Protocol
  configuration-persistence                Enable persistence of configuration
                                           across reloads (startup config
                                           file)
  controller                               WLAN controller configuration
  critical-resource                        Critical Resource
  crypto                                   Encryption related commands
  device-upgrade                           Device firmware upgrade
  diag                                     Diagnosis of packets
  dot1x                                    802.1X
  dpi                                      Enable Deep-Packet-Inspection
                                           (Application Assurance)
  dscp-mapping                             Configure IP DSCP to 802.1p
                                           priority mapping for untagged
                                           frames
  eguest-server                            Configure ExtremeGuest server
  email-notification                       Email notification configuration
  enforce-version                          Check the firmware versions of
                                           devices before interoperating
  events                                   System event messages
  export                                   Export a file
  file-sync                                File sync between controller and
                                           adoptees
  floor                                    Set the floor within a area where
                                           the system is located
  gre                                      GRE protocol
  http-analyze                             Specify HTTP-Analysis configuration
  interface                                Select an interface to configure
  ip                                       Internet Protocol (IP)
  ipv6                                     Internet Protocol version 6 (IPv6)
  l2tpv3                                   L2tpv3 protocol
  led                                      Turn LEDs on/off on the device
  legacy-auto-downgrade                    Enable device firmware to auto
                                           downgrade when other legacy devices
                                           are detected
  lldp                                     Link Layer Discovery Protocol
  load-balancing                           Configure load balancing parameter
  logging                                  Modify message logging facilities
  mac-address-table                        MAC Address Table
  mac-auth                                 802.1X
  management-server                        Configure management server address
  memory-profile                           Memory profile to be used on the
                                           device
  min-misconfiguration-recovery-time       Time interval to check controller
                                           connectivity after configuration is
                                           received
  mint                                     MiNT protocol
  misconfiguration-recovery-time           Check controller connectivity after
                                           configuration is received
  neighbor-inactivity-timeout              Configure neighbor inactivity
                                           timeout
  neighbor-info-interval                   Configure neighbor information
                                           exchange interval
  no                                       Negate a command or set its
                                           defaults
  noc                                      Configure the noc related setting
  ntp                                      Ntp server WORD
  offline-duration                         Set duration for which a device
                                           remains unadopted before it
                                           generates offline event
  power-config                             Configure power mode
  preferred-controller-group               Controller group this system will
                                           prefer for adoption
  preferred-tunnel-controller              Tunnel Controller Name this system
                                           will prefer for tunneling extended
                                           vlan traffic
  purview-application-policy               Purview application policy
                                           configuration
  radius                                   Configure device-level radius
                                           authentication parameters
  remote-debug                             Configure remote debug parameters
  remove-override                          Remove configuration item override
                                           from the device (so profile value
                                           takes effect)
  rf-domain-manager                        RF Domain Manager
  router                                   Dynamic routing
  spanning-tree                            Spanning tree
  traffic-class-mapping                    Configure IPv6 traffic class to
                                           802.1p priority mapping for
                                           untagged frames
  trustpoint                               Assign a trustpoint to a service
  tunnel-controller                        Tunnel Controller group this
                                           controller belongs to
  use                                      Set setting to use
  virtual-controller                       Enable Controller AP
  vrrp                                     VRRP configuration
  vrrp-state-check                         Publish interface via OSPF/BGP only
                                           if the interface VRRP state is not
                                           BACKUP
  wep-shared-key-auth                      Enable support for 802.11 WEP
                                           shared key authentication
  ws-controller                            Configure websocket controller
  zone                                     Configure Zone name

  clrscr                                   Clears the display screen
  commit                                   Commit all changes made in this
                                           session
  do                                       Run commands from Exec mode
  end                                      End current mode and change to EXEC
                                           mode
  exit                                     End current mode and down to
                                           previous mode
  help                                     Description of the interactive help
                                           system
  revert                                   Revert changes
  service                                  Service Commands
  show                                     Show running system information
  write                                    Write running configuration to
                                           memory or terminal

ap510-133C9B(config-profile-default-ap510)#


nx9500-6C8809(config-profile-T5Profile)#?
T5 Profile Mode commands:
  cpe            T5 CPE configuration
  interface      Select an interface to configure
  ip             Internet Protocol (IP)
  no             Negate a command or set its defaults
  ntp            Configure NTP
  override-wlan  Configure RF Domain level overrides for wlan
  t5             T5 configuration
  t5-logging     Modify message logging facilities
  use            Set setting to use

  clrscr         Clears the display screen
  commit         Commit all changes made in this session
  do             Run commands from Exec mode
  end            End current mode and change to EXEC mode
  exit           End current mode and down to previous mode
  help           Description of the interactive help system
  revert         Revert changes
  service        Service Commands
  show           Show running system information
  write          Write running configuration to memory or terminal

nx9500-6C8809(config-profile-T5Profile)#

nx9500-6C8809(config-profile-Ex3524Profile)#?
EX35xx Profile Mode commands:
  interface  Select an interface to configure
  ip         Internet Protocol (IP)
  no         Negate a command or set its defaults
  power      Ex3500 Power over Ethernet Command
  upgrade    Configures upgrade option for ex3500 system
  use        Set setting to use

  clrscr     Clears the display screen
  commit     Commit all changes made in this session
  do         Run commands from Exec mode
  end        End current mode and change to EXEC mode
  exit       End current mode and down to previous mode
  help       Description of the interactive help system
  revert     Revert changes
  service    Service Commands
  show       Show running system information
  write      Write running configuration to memory or terminal

nx9500-6C8809(config-profile-Ex3524Profile)#
Note

Note

The input parameter <HOSTNAME>, wherever used in syntaxes across this chapter, cannot include an underscore (_) character. In other words, the name of a device cannot contain an underscore.