Campus lan and Wireless lan solution Design Guide

Classifying and marking wireless mobile device applications
—Identifying and differentiating real-time 
voice, video, or business-critical applications from less important (but potentially bandwidth-hungry) 
applications in order to prioritize, de-prioritize, or drop specific application traffic. 
● 
Capacity planning and trending
—Baselining the network to gain a clearer understanding of what 
applications are consuming bandwidth and trending application use in order to help network 
administrators plan for infrastructure upgrades. 
Cisco Catalyst 9800 advanced wireless intrusion prevention system (wIPS) 
The Cisco Catalyst 9800 advanced wIPS architecture—available in Cisco IOS-XE 17.1 and higher—provides the 
following benefits: 
● 
Low footprint solution 
● 
Ease of Cisco DNA licensing (requires Cisco DNA Advantage licensing) 
● 
Alarm consolidation 

---

© 2020 Cisco and/or its affiliates. All rights reserved. 
Page 57 of 76
 
Cisco Catalyst 9800 wIPS architecture 
Figure 42. 
The basic system components for a Cisco Catalyst 9800 adaptive wIPS system include: 
● 
Cisco 802.11ax or 802.11ac Wave 2 APs (local-mode, Cisco FlexConnect mode, or monitor mode) 
● 
Cisco Catalyst 9800 Series Wireless controllers (local-mode, Cisco FlexConnect, or fabric deployments) 
● 
Cisco DNA Center 
Table 5.
 
Alarms supported in Cisco IOS-XE 17.1 
Alarm ID 
Alarm 
10001 
DoS: Authentication Flood Alarm 
10002 
DoS: Association Request Alarm 
10003 
DoS: Broadcast Probe Flood Alarm 
10004 
DoS: Dissociation Flood Alarm 
10005 
DoS: Broadcast Dis-Association Alarm 
10006 
DoS: De-Authentication Flood Alarm 
10007 
DOS: Broadcast De-authentication Alarm 
10008 
DOS: EAPOL-Logoff Attack Alarm