Cisco WLCs Get New WPA2 and WPA3 Options

A beautiful dashboard doesn't necessarily mean a beautiful network. There is something wonderfully reassuring about a wireless LAN controller dashboard: everything is neatly organized; access points are green; clients are connected; channel assignments look sensible; the controller reports that Radio Resource Management (RRM) is optimizing the environment; and the health score is sitting comfortably in the high nineties.... life is good. Uhmm... except that users are complaining about dropped calls, sluggish applications, and mysterious connectivity problems. But the dashboard says everything is fine! Welcome to Wi-Fi Myth #16: The Controller Knows Best. Modern wireless controllers are remarkably sophisticated. They collect enormous amounts of information, automate complex decisions, and provide visibility that engineers could only dream of a couple of decades ago. But there's an important distinction between collecting information and understanding what's actually happening in the RF environment... and that's where things get interesting.

Modern Wi-Fi systems give us an impressive amount of information. Dashboards show signal strength, channel utilization, retry rates, client health scores, roaming events, application performance, access point statistics, and enough colorful graphs to make almost any troubleshooting session feel reassuringly scientific. And all of that information is useful. I’ll freely admit that most Wi-Fi problems can be investigated without immediately reaching for a packet analyzer. But “most” and “always” are very different words. There comes a point when a Wi-Fi engineer has to stop asking what the dashboard thinks happened, and start looking at what actually happened over the air. This is where packet captures enter the discussion. A packet capture is not required for every Wi-Fi problem. If an AP has lost power, you probably don’t need Wireshark to confirm your suspicions, but when the problem involves association, authentication, roaming, retries, retransmissions, connectivity, intermittent performance, or strange client behavior, packet analysis can turn speculation into evidence . Sometimes, you simply need to see the conversation, and what really happened, to resolve the issue.