Примечания к выпуску для Cisco Cisco IOS XE 3.5E
8
Release Notes for the Cisco 5700 Series Wireless LAN Controller, Cisco IOS XE Release 3.3.xSE
OL-30562-05
Supported Hardware
•
Application Visibility and Control—Classifies applications using deep packet inspection techniques with the
Network-Based Application Recognition (NBAR2) engine and provides application-level visibility into Wi-Fi networks.
Network-Based Application Recognition (NBAR2) engine and provides application-level visibility into Wi-Fi networks.
Note
The capability of dropping or marking the data traffic (control part) is not supported in the Cisco IOS XE 3.3.0SE.
•
Security Enhancements
–
Manage Rogue devices—The controller continuously monitors all the nearby access points and automatically
discovers and collects information on rogue access points and clients. When the controller discovers a rogue access
point, it uses the Rogue Location Discovery Protocol (RLDP) to determine if the rogue is attached to your network.
For more information about managing rogue devices, see the “Managing Rogue Devices” section in the System
Management Configuration Guide.
discovers and collects information on rogue access points and clients. When the controller discovers a rogue access
point, it uses the Rogue Location Discovery Protocol (RLDP) to determine if the rogue is attached to your network.
For more information about managing rogue devices, see the “Managing Rogue Devices” section in the System
Management Configuration Guide.
–
Classify rogue access points—The controller software enables you to create rules that can organize and display rogue
access points as Friendly, Malicious, or Unclassified. For more information about classifying rogue access points, see
the “Classifying Rogue Access Points” section in the System Management Configuration Guide.
access points as Friendly, Malicious, or Unclassified. For more information about classifying rogue access points, see
the “Classifying Rogue Access Points” section in the System Management Configuration Guide.
–
wIPS—The Cisco Adaptive wireless intrusion prevention system (wIPS) continually monitors wireless traffic on both
the wired and wireless networks and uses network intelligence to analyze attacks and more accurately pinpoint and
proactively prevent attacks in the future. You can configure an access point to work in wIPS mode if the access point
is in the Monitor or Local mode.
the wired and wireless networks and uses network intelligence to analyze attacks and more accurately pinpoint and
proactively prevent attacks in the future. You can configure an access point to work in wIPS mode if the access point
is in the Monitor or Local mode.
–
Radio Frequency Grouping—A radio frequency (RF) group is a logical collection of controllers that coordinate to
perform radio resource management (RRM) in a globally optimized manner to perform network calculations on a
per-radio basis. An RF group exists for each 802.11 network type. Clustering controllers into a single RF group enables
the RRM algorithms to scale beyond the capabilities of a single controller.
perform radio resource management (RRM) in a globally optimized manner to perform network calculations on a
per-radio basis. An RF group exists for each 802.11 network type. Clustering controllers into a single RF group enables
the RRM algorithms to scale beyond the capabilities of a single controller.
•
Lightweight Directory Access Protocol Server mode—Operates as the backend database for web authentication to retrieve
user credentials and authenticate the user.
user credentials and authenticate the user.
•
Wireless Flexible NetFlow—Enables flow monitoring and control of wireless traffic.
•
Enhanced QoS support for wireless IPv6 clients—Support for IPv6 ACLs and DSCP-matching of IPv6 packets.
Supported Hardware
Catalyst 3850 Switch Models
Table 2
Catalyst 3850 Switch Models
Switch Model
Cisco IOS Image
Description
WS-C3850-24T-L
LAN Base
Cisco Catalyst 3850 Stackable 24 10/100/1000
Ethernet ports, with 350-WAC power supply 1
RU, LAN Base feature set (StackPower cables
must be purchased separately)
Ethernet ports, with 350-WAC power supply 1
RU, LAN Base feature set (StackPower cables
must be purchased separately)
WS-C3850-48T-L
LAN Base
Cisco Catalyst 3850 Stackable 48 10/100/1000
Ethernet ports, with 350-WAC power supply 1
RU, LAN Base feature set (StackPower cables
must be purchased separately)
Ethernet ports, with 350-WAC power supply 1
RU, LAN Base feature set (StackPower cables
must be purchased separately)