CCIE Enterprise Wireless (v1.0) – 3.4 Wireless segmentation with profiles and groups – TAGs

assigned to every AP and inside every tag, you can find all the settings that were applied to the AP.

There are three tags:

  1. Policy Tag
  2. Site Tag
  3. RF Tag

Visual scheme of an AP configuration:

Policy Tag
Policy Tag is the link between a WLAN Profile [Service Set Identifier (SSID)] and a Policy Profile.

Policy Profile

Inside a Policy Profile you can specify Virtual Local Area Network (VLAN) ID, If traffic is central or local switching, Mobiliy Anchors, Quality of Service (QoS), timers, among other settings.


Inside a SSID you can specify the WLAN name, Security type for the WLAN, advanced protocols like 802.11k among other settings.

TAGs – Policy, site and RF

Create a WLAN than can be tied to a policy tag… this is a “basic” WLAN, the entire WLAN flow will be covered in a later post.

Now that the WLAN is in an UP state it can now be tied to the policy.

Site TAG:

Site Tag defines if the APs are in Local Mode or Flexconnect mode . Other AP modes like Sniffer, Sensor, Monitor, Bridge can be configured directly on the AP. The Site Tag also contains the AP Join Profile and Flex Profile that are applied to the AP.

Note: Flex Profile Setting only becomes available if the Local Site setting is disabled.


Inside an RF tag you can either select any RF profile or select to use the Global RF configuration.

Once all of the policy tags are created they can be tied to the APs:

Video – attaching the tags to an AP:

Verify that the AP was correctly tagged:

The policy tag NPLLC_POLICY_TAG specifies that a particular SSID should be broadcast: (987E9E7D9) and the profile policy is tied to( NPLLC_POLICY_PROFILE_A) which defines that the user should be dropped of on VLAN 64

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.