WirelessGlobal Config

wireless profile policy [name]

Creates or modifies a wireless policy profile, which defines client access policies (e.g., VLAN, QoS, ACLs) for a WLAN on a Cisco wireless LAN controller.

Syntax·Global Config

wireless profile policy [name]

When to Use This Command

Assigning a specific VLAN to a WLAN for client traffic segmentation
Applying QoS policies (e.g., Platinum, Gold) to a WLAN for voice/video traffic
Configuring AAA override to allow RADIUS-assigned VLANs per user
Enabling multicast or broadcast filtering on a WLAN

Command Examples

Create a basic policy profile with VLAN and QoS

wireless profile policy guest-policy
 vlan guest-vlan
 service-policy input platinum-up
 service-policy output platinum-down
 no shutdown

wireless profile policy guest-policy
 vlan guest-vlan
 service-policy input platinum-up
 service-policy output platinum-down
 no shutdown
 end

Creates a policy profile named 'guest-policy', assigns VLAN 'guest-vlan', applies Platinum QoS policies for upstream and downstream traffic, and enables the profile with 'no shutdown'.

Configure AAA override and ACL in a policy profile

wireless profile policy employee-policy
 vlan employee-vlan
 aaa-override
 ip access-group employee-acl in
 no shutdown

wireless profile policy employee-policy
 vlan employee-vlan
 aaa-override
 ip access-group employee-acl in
 no shutdown
 end

Creates 'employee-policy' with VLAN 'employee-vlan', enables AAA override to allow RADIUS-assigned VLANs, and applies an IPv4 ACL 'employee-acl' for inbound traffic.

Understanding the Output

The output shows the configuration commands entered under the wireless policy profile. Each line represents a setting: 'vlan' specifies the VLAN for client traffic; 'service-policy' applies QoS policies; 'aaa-override' allows RADIUS to override VLAN/ACL; 'ip access-group' applies an ACL; 'no shutdown' activates the profile. Verify that all desired policies are present and that the profile is not in 'shutdown' state. Missing 'no shutdown' means the profile is disabled.

CCNA Exam Tips

Remember that policy profiles are applied to WLANs via 'wlan [name]' and 'policy profile [name]' under the WLAN configuration.

AAA override requires both the policy profile and the WLAN to have 'aaa-override' enabled.

QoS service-policy names (platinum-up, etc.) are predefined; you cannot create custom ones on the WLC.

The 'no shutdown' command is required to enable the policy profile; otherwise it remains administratively down.

Common Mistakes

Forgetting to issue 'no shutdown' after creating the profile, leaving it disabled.

Applying an ACL that does not exist, causing the profile to fail to apply to the WLAN.

Misconfiguring VLAN name (must match a VLAN interface on the WLC) or using a VLAN ID instead of name.

Related Commands

show wireless client summary

Displays a summary of all wireless clients currently associated with the controller, including their MAC addresses, IP addresses, SSIDs, and connection status, used for quick client monitoring and troubleshooting.

wlan [profile-name] [wlan-id] [ssid]

Creates or modifies a WLAN profile on a Cisco wireless LAN controller, associating it with a WLAN ID and SSID for wireless client access.

Practice for the CCNA 200-301

Test your knowledge with hundreds of CCNA practice questions covering all exam domains.

Practice CCNA Questions