Skip to content
The XG Series hardware appliances will reach end-of-life (EOL) on March 31, 2025. Click here to see the XG to XGS migration documentation.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/20.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=CLI-system-wireless-controller

wireless-controller

Set VLAN tags for VLAN traffic passing through Sophos Firewall.

Command

system wireless-controller

Syntax

system wireless-controller
ap_localdebuglevel [get] [set] [number]`
global [ap_autoaccept] [value] [ap_debuglevel] [number] [log_level] [number] [radius_accounting_start_delay] [number] [show] [stay_online] [number] [store_bss_stats] [number] [tunnel_id_offset] [number]
remote_pktcap [disable | enable | show] [AP serial number]
set_channel_width [Wi-Fi interface name] [band] [Wi-Fi band] [channel_width] [number]

Options

ap_localdebuglevel [get] [set] [number]

Use the ap_localdebuglevel option to configure the debugging level the device will use when logging.

The level option must be between 0 (lowest) and 15 (highest).

You can view the current debug level using the get option.

global [ap_autoaccept] [value] [ap_debuglevel] [number] [log_level] [number] [radius_accounting_start_delay] [number] [show] [stay_online] [number] [store_bss_stats] [number] [tunnel_id_offset] [number]

The log_level option configures the logging level the device will use. When an event is logged, it's printed into the corresponding log if the message's log level is equal to or more than the configured log level. The level option must be between 0 (lowest) and 7 (highest).

Use the ap_debuglevel option to configure the debugging level the device will use when logging.

The radius_accounting_start_delay option sets the delay to start the 802.1x accounting for the Wi-Fi client. You can set the delay depending on the DHCP response time. You can set a value from 0 to 60 seconds. This allows the Wi-Fi client to receive the IP address first and then start the accounting. The Wi-Fi SSO uses the framed IP address from the accounting start message and allows the user to sign in to Sophos Firewall.

Available values for ap_autoaccept, stay_online, and store_bss_stats are, 0 (off) or 1 (on).

The tunnel_id_offset option value must be from 0 (lowest) to 65535 (highest).

remote_pktcap [disable | enable | show] [AP serial number]

The remote_pktcap command captures packets on access points when a packet capture is running. To start packet capturing, the value of the ap_debuglevel option must be equal to or greater than 4.

set_channel_width [Wi-Fi interface name] [band] [Wi-Fi band] [channel_width] [number]

You can choose Wi-Fi band 2.5GHz or 5GHz. Available channel widths are 20 and 40 for 2.5GHz, and 20, 40, or 80 for 5GHz.