Network labs Docs Open simulator →

FlexConnect groups + AVC profiles + WIPS containment + hyperlocation

Four more 300-430 ENWLSI surfaces, all config + show. FlexConnect groups (Slice W1): branch-office APs survive WLC outages by sharing local RADIUS fall-back + ACLs through a named group; show wireless flexconnect summary lists groups + members. Cisco AVC profiles (Slice W2): per-application permit/drop + DSCP marking; show wireless avc-profile summary lists profiles + rules. WIPS containment (Slice W3): containment level (0..4) per rogue AP; the existing rogue summary now reports a Contain column. Hyperlocation (Slice W4): per-wifi-client (x, y) coordinate; show wireless client location reports each client's position.

Open this lab in your browser →

Free · no install · no account

Scenario

Four independent operator-visible knobs that each close a small but exam-weighted gap from the 300-430 ENWLSI blueprint. They land together because they're all "config + show + verification" — no new datapath, no new wire encap. FlexConnect lets branch-office APs keep authenticating users locally even when the central WLC is unreachable. A flexconnectGroup carries primary/secondary RADIUS targets, a list of member AP MACs, and a list of local ACL names. show wireless flexconnect summary walks the catalog, surfacing empty-config groups with <unset> RADIUS and <none> members so misconfigurations are obvious. AVC profiles attach NBAR2 application classification + per-app actions (permit | drop) + optional DSCP marking. show wireless avc-profile summary lists each profile and its rules; profiles with no rules surface <empty> rather than blank. Cisco WIPS responds to malicious rogues by transmitting deauth frames toward associated clients — "containment". The level (0..4) controls how many APs participate. Slice W3 stamps the level on each RogueAp.containmentLevel; the existing show wireless wps rogue ap summary now reports a Contain column and a Contained: count line. Cisco Hyperlocation modules report per-client (x, y) coordinates using AoA (Angle of Arrival). The simulator stores the coordinate as a static fact on wifiClient.location; show wireless client location reports each client's position, with <unknown> for clients whose location wasn't configured.

Topology

1 × wireless controller, 2 × wifi client · Cisco IOS-XE-style

What you will do

  1. On WLC1, run show wireless flexconnect summary. Two groups expected: BRANCH-FC (2 members, GUEST-DENY local ACL, RADIUS 10.40.0.5/6) and LOBBY-FC (no config — surfaces as <unset> / <none>).

  2. Run show wireless avc-profile summary. APP-CONTROL has 3 rules (youtube drop, webex-meeting permit DSCP 46, facebook drop). NOOP has 0 rules and surfaces <empty>.

  3. Run show wireless wps rogue ap summary. The malicious rogue carries containment level 4; the friendly rogue is not contained.

  4. Run show wireless client location. PHONE reports (12.5, 4); GUEST has no location and surfaces as <unknown>.

Open this lab in your browser →

More labs on this topic

This lab in other languages

FlexConnect-Gruppen + AVC-Profile + WIPS-Eindämmung + HyperlokationGrupos FlexConnect + perfiles AVC + contención WIPS + hiperlocalizaciónGrupos FlexConnect + perfis AVC + contenção WIPS + hiperlocalizaçãoGroupes FlexConnect + profils AVC + confinement WIPS + hyperlocationफ्लेक्सकनेक्ट समूह + एवीसी प्रोफाइल + WIPS रोकथाम + हाइपरलोकेशनFlexConnect 组 + AVC 配置文件 + WIPS 遏制 + 超定位Gruppi FlexConnect + profili AVC + contenimento WIPS + iperlocalizzazioneFlexConnect グループ + AVC プロファイル + WIPS 封じ込め + ハイパーロケーションFlexConnect 그룹 + AVC 프로필 + WIPS 억제 + 하이퍼로케이션Группы FlexConnect + профили AVC + сдерживание WIPS + гиперлокацияFlexConnect grupları + AVC profilleri + WIPS koruması + hiper konumNhóm FlexConnect + Cấu hình AVC + Ngăn chặn WIPS + siêu định vị