Profiles enable administrators to assign a common set of configuration parameters, policies, and WLANs to service and virtual platforms, controllers, and access points across a large, multi-segment site. The configuration parameters within a profile are based on the hardware model the profile is created to support.
The service and virtual platforms, wireless controllers, and access points support both default and user-defined profiles. Each default and user-defined profile contains policies and configurations that are applied to devices assigned to the profile. Changes made to these configurations are automatically inherited by the devices. The central benefit of a profile is its ability to update devices collectively without having to modify individual device configurations.
Default profiles are system maintained and are automatically applied to service and virtual platforms and wireless controllers. The default AP profile is automatically applied to a AP (discovered by a wireless controller, service platform, or virtual platform), unless an AP auto-provisioning policy is defined specifically to assign APs to a user-defined profile. After adoption, changes made to a profile‘s parameters are reflected across all devices using the profile. Default profiles are ideal for single site deployments where service platforms, wireless controllers, and access points share a common configuration.
User-defined profiles, on the other hand, are manually created for each supported service and virtual platform, wireless controller, and access point model. User-defined profiles are recommended for larger deployments using centralized controllers and service or virtual platforms when groups of devices on different floors, buildings or sites share a common configuration. These user-defined profiles can be manually, or automatically assigned to through an auto provisioning policy. An auto provisioning policy provides the means to assign profiles to access points based on model, serial number, VLAN ID, DHCP options, IP address (subnet) and MAC address. For more information, see Auto-Provisioning Policy.
Although profiles assign a common set of configuration parameters across devices, individual devices can still be assigned unique configuration parameters that follow the flat configuration model. As individual device updates are made, these devices no longer share the profile based configuration they originally supported. Therefore, changes made to a profile are not automatically inherited by devices who have had their configuration customized. These devices require careful administration, as they cannot be tracked as profile members. Their customized configurations overwrite their profile configurations until the profile is re-applied.
Note
The commands present under ‘Profiles‘ are also available under the ‘Device mode‘. The additional commands specific to the ‘Device mode‘ are listed separately.This chapter is organized into the following topics:
To view the list of device profiles supported, use the following command:
<DEVICE>(config)#profile ?
nx9500-6C8809#configure
Enter configuration commands, one per line. End with CNTL/Z.
nx9500-6C8809(config)#profile ?
anyap Any access point profile
ap5010 AP5010 access point profile
ap410 AP410 access point profile
ap460 AP460 access point profi
ap505 AP505 access point profile
ap510 AP510 access point profile
ap560 AP560 access point profile
ap621 AP621 access point profile
ap622 AP622 access point profile
ap650 AP650 access point profile
ap6511 AP6511 access point profile
ap6521 AP6521 access point profile
ap6522 AP6522 access point profile
ap6532 AP6532 access point profile
ap6562 AP6562 access point profile
ap71xx AP71XX access point profile
ap7502 AP7502 access point profile
ap7522 AP7522 access point profile
ap7532 AP7532 access point profile
ap7562 AP7562 access point profile
ap7602 AP7602 access point profile
ap7612 AP7612 access point profile
ap7622 AP7622 access point profile
ap7632 AP7632 access point profile
ap7662 AP7662 access point profile
ap81xx AP81XX access point profile
ap82xx AP82XX access point profile
ap8432 AP8432 access point profile
ap8533 AP8533 access point profile
containing Specify profiles that contain a sub-string in the profile name
ex3524 EX3524 wireless controller profile
ex3548 EX3548 wireless controller profile
filter Specify addition selection filter
nx45xx NX45XX integrated services platform profile
nx5500 NX5500 wireless controller profile
nx65xx NX65XX integrated services platform profile
nx75xx NX75XX wireless controller profile
nx9000 NX9000 wireless controller profile
rfs4000 RFS4000 wireless controller profile
rfs6000 RFS6000 wireless controller profile
rfs7000 RFS7000 wireless controller profile
t5 T5 DSL switch profile
vx9000 VX9000 wireless controller profile
<cr>
nx9500-6C8809(config)#
nx9500-6C8809(config)#profile nx9000 default-nx9000
nx9500-6C8809(config-profile-default-nx9000)#
nx9500-6C8809(config)#profile ap505 default-ap505
nx9500-6C8809(config-profile-default-ap505)#
<DEVICE>(config)#profile <DEVICE-TYPE> <PROFILE-NAME>
<DEVICE>(config-profile-<PROFILE-NAME>)#
nx9500-6C8809(config)#profile ap510 default-ap510
ap510-133C9B(config-profile-default-ap510)#?
Profile Mode commands:
adopter-auto-provisioning-policy-lookup Use centralized auto-provisioning
policy when adopted by another
controller
adoption Adoption configuration
adoption-mode Configure the adoption mode for the
access-points in this RF-Domain
alias Alias
antenna-id Configure the antenna on the AP
area Set name of area where the system
is located
arp Address Resolution Protocol (ARP)
auto-learn Auto learning
autogen-uniqueid Autogenerate a unique id
autoinstall Autoinstall settings
bridge Ethernet bridge
captive-portal Captive portal
cdp Cisco Discovery Protocol
configuration-persistence Enable persistence of configuration
across reloads (startup config
file)
controller WLAN controller configuration
critical-resource Critical Resource
crypto Encryption related commands
device-upgrade Device firmware upgrade
diag Diagnosis of packets
dot1x 802.1X
dpi Enable Deep-Packet-Inspection
(Application Assurance)
dscp-mapping Configure IP DSCP to 802.1p
priority mapping for untagged
frames
eguest-server Configure ExtremeGuest server
email-notification Email notification configuration
enforce-version Check the firmware versions of
devices before interoperating
events System event messages
export Export a file
file-sync File sync between controller and
adoptees
floor Set the floor within a area where
the system is located
gre GRE protocol
http-analyze Specify HTTP-Analysis configuration
interface Select an interface to configure
ip Internet Protocol (IP)
ipv6 Internet Protocol version 6 (IPv6)
l2tpv3 L2tpv3 protocol
led Turn LEDs on/off on the device
legacy-auto-downgrade Enable device firmware to auto
downgrade when other legacy devices
are detected
lldp Link Layer Discovery Protocol
load-balancing Configure load balancing parameter
logging Modify message logging facilities
mac-address-table MAC Address Table
mac-auth 802.1X
management-server Configure management server address
memory-profile Memory profile to be used on the
device
min-misconfiguration-recovery-time Time interval to check controller
connectivity after configuration is
received
mint MiNT protocol
misconfiguration-recovery-time Check controller connectivity after
configuration is received
neighbor-inactivity-timeout Configure neighbor inactivity
timeout
neighbor-info-interval Configure neighbor information
exchange interval
no Negate a command or set its
defaults
noc Configure the noc related setting
ntp Ntp server WORD
offline-duration Set duration for which a device
remains unadopted before it
generates offline event
power-config Configure power mode
preferred-controller-group Controller group this system will
prefer for adoption
preferred-tunnel-controller Tunnel Controller Name this system
will prefer for tunneling extended
vlan traffic
purview-application-policy Purview application policy
configuration
radius Configure device-level radius
authentication parameters
remote-debug Configure remote debug parameters
remove-override Remove configuration item override
from the device (so profile value
takes effect)
rf-domain-manager RF Domain Manager
router Dynamic routing
spanning-tree Spanning tree
traffic-class-mapping Configure IPv6 traffic class to
802.1p priority mapping for
untagged frames
trustpoint Assign a trustpoint to a service
tunnel-controller Tunnel Controller group this
controller belongs to
use Set setting to use
virtual-controller Enable Controller AP
vrrp VRRP configuration
vrrp-state-check Publish interface via OSPF/BGP only
if the interface VRRP state is not
BACKUP
wep-shared-key-auth Enable support for 802.11 WEP
shared key authentication
ws-controller Configure websocket controller
zone Configure Zone name
clrscr Clears the display screen
commit Commit all changes made in this
session
do Run commands from Exec mode
end End current mode and change to EXEC
mode
exit End current mode and down to
previous mode
help Description of the interactive help
system
revert Revert changes
service Service Commands
show Show running system information
write Write running configuration to
memory or terminal
ap510-133C9B(config-profile-default-ap510)#
nx9500-6C8809(config-profile-T5Profile)#?
T5 Profile Mode commands:
cpe T5 CPE configuration
interface Select an interface to configure
ip Internet Protocol (IP)
no Negate a command or set its defaults
ntp Configure NTP
override-wlan Configure RF Domain level overrides for wlan
t5 T5 configuration
t5-logging Modify message logging facilities
use Set setting to use
clrscr Clears the display screen
commit Commit all changes made in this session
do Run commands from Exec mode
end End current mode and change to EXEC mode
exit End current mode and down to previous mode
help Description of the interactive help system
revert Revert changes
service Service Commands
show Show running system information
write Write running configuration to memory or terminal
nx9500-6C8809(config-profile-T5Profile)#
nx9500-6C8809(config-profile-Ex3524Profile)#?
EX35xx Profile Mode commands:
interface Select an interface to configure
ip Internet Protocol (IP)
no Negate a command or set its defaults
power Ex3500 Power over Ethernet Command
upgrade Configures upgrade option for ex3500 system
use Set setting to use
clrscr Clears the display screen
commit Commit all changes made in this session
do Run commands from Exec mode
end End current mode and change to EXEC mode
exit End current mode and down to previous mode
help Description of the interactive help system
revert Revert changes
service Service Commands
show Show running system information
write Write running configuration to memory or terminal
nx9500-6C8809(config-profile-Ex3524Profile)#
Note
The input parameter <HOSTNAME>, wherever used in syntaxes across this chapter, cannot include an underscore (_) character. In other words, the name of a device cannot contain an underscore.