module Cisco-IOS-XE-wireless-apf-cfg {

    yang-version 1;

    namespace
      "http://cisco.com/ns/yang/Cisco-IOS-XE-wireless-apf-cfg";

    prefix wireless-apf-cfg;

    import Cisco-IOS-XE-wireless-enum-types {
      prefix wireless-enum-types;
    }
    import Cisco-IOS-XE-wireless-types {
      prefix wireless-types;
    }
    import cisco-semver {
      prefix cisco-semver;
    }

    organization "Cisco Systems, Inc.";

    contact
      "Cisco Systems, Inc.
Customer Service

Postal: 170 W Tasman Drive
San Jose, CA 95134

Tel: +1 1800 553-NETS

E-mail: cs-yang@cisco.com";

    description
      "Model for managing global dot11 parameters
Copyright (c) 2016-2021 by Cisco Systems, Inc.
All rights reserved.";

    revision "2021-07-01" {
      description
        "- Added default wireless password policy configuration
- Added configuration for AP tags persistence
- Added configuration for 6Ghz client steering
- Added configuration for Secure RRM";
      reference
        "8.1.0";

    }

    revision "2021-03-01" {
      description
        "- Add ASCII 32-126 and leading/trailing spaces restriction for RF network name
       - Added method list for MAC and serial number authorization";
      reference
        "8.0.0";

    }

    revision "2020-11-01" {
      description
        "- Modified the range for leaf nodes balancing-window and xor-roam-min-client-count
- Added priming controller configuration
- Added configuration for FRA Freeze";
      reference
        "7.0.0";

    }

    revision "2020-07-01" {
      description
        "- Added configuration for AP audit reporting
- Added configuration for calling id used in AP authorization
- Added configuration for client roaming across different policy profiles";
      reference
        "6.2.0";

    }

    revision "2020-03-01" {
      description
        "- Added tri-radio-mode
- Support to enable detailed client syslogs";
      reference
        "6.1.0";

    }

    revision "2019-06-02" {
      description
        "- Updated constraint for xor-roam-probe-suppress-op-mode configuration.
- Add locally-administered-mac.
- Added semantic version
- Update the default values as per WLC configuration best practice";
      reference
        "6.0.0";

    }

    revision "2019-03-18" {
      description
        "- Add led-brightness-level
- Cleaned up spelling errors in descriptions.
- Default configuration for FRA is changed from Disable to Enable.
- Cleaned up unused variables, renamed few appropriately.
- Updated name for leaf nodes from SIP prefered call data
- Restrict values for fra-service-priority";
      reference
        "5.0.0";

    }

    revision "2018-08-13" {
      description
        "- Add FRA sensor support
- name changed for blacklist flags
- Default value of country code changed
- SIP prefered call configuration added";
      reference
        "4.0.0";

    }

    revision "2018-05-25" {
      description
        "AP auth support with serial number and Client Onboarding Event";
      reference
        "3.0.0";

    }

    revision "2018-01-24" {
      description
        "The first generally available version";
      reference
        "2.0.0";

    }

    revision "2017-05-05" {
      description "Initial revision";
      reference
        "1.0.0";

    }

    cisco-semver:module-version "8.1.0";
    cisco-semver:module-version "8.0.0";
    cisco-semver:module-version "7.0.0";
    cisco-semver:module-version "6.2.0";
    cisco-semver:module-version "6.1.0";
    cisco-semver:module-version "6.0.0";
    cisco-semver:module-version "5.0.0";
    cisco-semver:module-version "4.0.0";
    cisco-semver:module-version "3.0.0";
    cisco-semver:module-version "2.0.0";
    cisco-semver:module-version "1.0.0";

    container apf-cfg-data {
      description
        "AP functionality configuration data";
      container apf {
        presence "apf";
        description
          "AP functionality configuration";
        leaf dot11-country-code {
          type string;
          default "00";
          description
            "This field configures the country of operation";
        }

        leaf system-mgmt-via-wireless {
          type boolean;
          default "false";
          description
            "This field enables management access from wireless clients";
        }

        leaf enable-client-onboarding-event {
          type boolean;
          default "false";
          description
            "Enable Client Onboarding Event";
        }

        leaf network-name {
          type string {
            pattern '[!-~]([ -~]*[!-~])?';
          }
          default "default";
          description
            "This field sets RF-Network name";
        }

        leaf blacklist-dot1x-timeout {
          type boolean;
          default "true";
          description
            "This flag specifies if client should be excluded (blacklisted) if repeated 802.1x Authentication Timeout occurs with a client.";
        }

        leaf blacklist-dot1x-auth {
          type boolean;
          default "true";
          description
            "This flag specifies if client should be excluded (blacklisted) if repeated 802.1x Authentication Failures occurs with a client.";
        }

        leaf blacklist-dot11-assoc {
          type boolean;
          default "true";
          description
            "This flag specifies if client should be excluded (blacklisted) if repeated 802.11 Association Failures occurs with a client.";
        }

        leaf blacklist-ip-theft {
          type boolean;
          default "true";
          description
            "This flag specifies if client should be excluded (blacklisted) if it appears to be reusing an IP Address.(Possible IP Theft)";
        }

        leaf blacklist-web-auth {
          type boolean;
          default "true";
          description
            "This flag specifies if client should be excluded (blacklisted) if repeated Web Authentication Failures occurs with a client.";
        }

        leaf blacklist-failed-qos-policy {
          type boolean;
          default "true";
          description
            "This flag specifies if client should be excluded (blacklisted) due to failed qos policy";
        }

        leaf probe-limit {
          type uint16 {
            range "1 .. 100";
          }
          default "2";
          description
            "This value indicates probe request limit";
        }

        leaf probe-interval {
          type uint16 {
            range "100 .. 64000";
          }
          default "500";
          description
            "This value indicates probe request interval";
        }

        leaf max-user-logins {
          type uint32 {
            range "0 .. 8";
          }
          default "0";
          description
            "This attribute specifies the maximum number of concurrent logins that the switch will allow for a single user. A value 0 implies that there is no restriction on the number of concurrent logins with a single username.";
        }

        leaf web-auth-max-retries {
          type uint8 {
            range "0 .. 20";
          }
          default "3";
          description
            "Value specifies Maximum number of WebAuth request retries";
        }

        leaf dot1x-eapol-key-max-retries {
          type uint8 {
            range "0 .. 4";
          }
          default "2";
          description
            "Value specifies Maximum number of EAPOL key retries";
        }

        leaf dot1x-eapol-key-timeout {
          type uint32 {
            range "200 .. 5000";
          }
          default "1000";
          description
            "value specify EAPOL key retransmission timeout in milliseconds";
        }

        leaf dot1x-eap-id-request-retries {
          type uint8 {
            range "1 .. 20";
          }
          default "2";
          description
            "Value specify maximum number of EAP ID request retransmissions";
        }

        leaf dot1x-eap-id-request-timeout {
          type uint8 {
            range "1 .. 120";
          }
          default "30";
          description
            "Value specify EAP ID request-timeout value in seconds";
        }

        leaf dot1x-eap-request-max-retries {
          type uint8 {
            range "0 .. 20";
          }
          default "2";
          description
            "Maximum number of EAP request retransmissions";
        }

        leaf dot1x-eap-request-timeout {
          type uint8 {
            range "1 .. 120";
          }
          default "30";
          description
            "EAP request retransmission timeout value in seconds";
        }

        leaf dot1x-eap-broadcast-interval {
          type uint32 {
            range "120 .. 86400";
          }
          default "3600";
          description
            "EAP-broadcast key renew interval time in seconds";
        }

        leaf probe-filter {
          type boolean;
          default "true";
          description
            "Configure filtering of probe requests from AP";
        }

        leaf assisted-roam-floor-bias {
          type uint16 {
            range "5 .. 25";
          }
          default "15";
          description
            "Configures RSSI bias default for same floor APs";
        }

        leaf assisted-roam-max-denial {
          type uint16 {
            range "1 .. 10";
          }
          default "5";
          description
            "Configures maximum number of times for association denial";
        }

        leaf assisted-roam-min-prediction {
          type uint16 {
            range "2 .. 6";
          }
          default "3";
          description
            "Configures minimum number of optimized APs for assisted-roaming prediction to work";
        }

        container sip-pref-call-data-entry {
          description
            "SIP preferred call database";
          list sip-pref-call-data {
            key "call-index";
            description
              "SIP preferred call data";
            leaf call-index {
              type uint8 {
                range "1 .. 6";
              }
              description
                "Index in database for preferred call number";
            }

            leaf sip-preferred-call-id {
              type string {
                length "0..28";
              }
              default "";
              description
                "SIP preferred call number";
            }
          }  // list sip-pref-call-data
        }  // container sip-pref-call-data-entry

        leaf spam-authorize-aps-mac {
          type boolean;
          default "false";
          description
            "Configures an AP authorization policy with mac";
        }

        leaf spam-authorize-aps-serial-num {
          type boolean;
          default "false";
          description
            "Configures an AP authorization policy with serial number";
        }

        leaf spam-authorize-aps-method-list {
          type string {
            length "0..32";
          }
          default "default";
          description
            "Configures an AP authorization policy with specified method list";
        }

        leaf dot1x-login-count-check {
          type boolean;
          description
            "Configure to ignore the same username count reaching max in the EAP identity response";
        }

        leaf dedicated-to-xor-rssi-threshold {
          type int8 {
            range "-128 .. 0";
          }
          default "-55";
          description
            "Configures macro to micro transition RSSI";
        }

        leaf xor-to-dedicated-rssi-threshold {
          type int8 {
            range "-128 .. 0";
          }
          default "-65";
          description
            "Configures micro-macro client load balancing window";
        }

        leaf xor-roam-min-client-count {
          type uint16 {
            range "0 .. 200";
          }
          default "3";
          description
            "Configures macro-micro minimum client count for transition";
        }

        leaf balancing-window {
          type uint16 {
            range "0 .. 200";
          }
          default "3";
          description
            "Configures micro-macro client load balancing window";
        }

        leaf xor-probe-suppress-hysteresis {
          type int8 {
            range "-6 .. -3";
          }
          default "-6";
          description
            "Configures probe cycles to be suppressed[ RSSI in dBm]";
        }

        leaf xor-roam-probe-suppress-op-mode {
          type wireless-enum-types:enm-apf-xor-roam-probe-suppression;
          must
            "(../xor-roam-probe-suppress-op-mode = 'apf-xor-suppress-opmode-disabled' or
 ../xor-roam-probe-suppress-op-mode = 'apf-xor-suppress-opmode-probe-suppress' or
 ../xor-roam-probe-suppress-op-mode = 'apf-xor-suppress-opmode-authprobe-suppress')" {
            error-message
              "micro-Macro probe suppression mode must be one of the following:
1. apf-xor-suppress-opmode-disabled
2. apf-xor-suppress-opmode-probe-suppress
3. apf-xor-suppress-opmode-authprobe-suppress";
            error-app-tag "must-violation";
          }
          default
            "apf-xor-suppress-opmode-disabled";
          description
            "Configures micro-Macro probe suppression arguments";
        }

        leaf xor-probe-suppress-aggression {
          type uint8 {
            range "0 .. 255";
          }
          default "3";
          description
            "Configures probe cycles to be suppressed [Number of cycles]";
        }

        leaf fra-state {
          type boolean;
          default "false";
          description
            "Enable/Disable Fra on all Cisco APs";
        }

        leaf fra-interval {
          type uint32 {
            range "1 .. 24";
          }
          default "1";
          description
            "Configure Fra Interval in hours";
        }

        leaf fra-sensitivity {
          type wireless-types:enm-fra-sensitivity;
          default "fra-sensitivity-medium";
          description
            "Configure FRA Coverage Overlap Sensitivity";
        }

        leaf fra-service-priority {
          type wireless-types:enm-fra-service-priority;
          must
            "((current() = 'fra-service-priority-coverage') or
 (current() = 'fra-service-priority-service-assurance'))" {
            error-message
              "FRA service priority should be either coverage or service assurance";
            error-app-tag "must-violation";
          }
          default
            "fra-service-priority-coverage";
          description
            "Configure FRA Service Priority";
        }

        leaf fra-sensor-threshold {
          type wireless-types:enm-fra-sensor-coverage-profile;
          default
            "fra-sensor-coverage-client-priority";
          description
            "Configure FRA Sensor Threshold";
        }

        leaf led-brightness-level {
          type uint8 {
            range "1 .. 8";
          }
          default "1";
          description
            "Configure AP LED brightness level.
On modifying the global configuration,
All AP's supporting LED brightness will be configured with
global configured value.
Represents following values.
1 - 8 LED brightness level.";
        }

        leaf locally-administered-mac {
          type boolean;
          default "false";
          description
            "Enable the reporting of the probes
from clients using locally administered
MAC address";
        }

        leaf tri-radio-mode {
          type boolean;
          default "false";
          description
            "Tri radio mode configuration:
False - tri-radio mode is disabled
True - tri-radio mode is enabled";
        }

        leaf enable-client-syslog-detailed {
          type boolean;
          default "false";
          description
            "Enable Client Detailed syslogs";
        }

        leaf spam-authorize-aps-calling-id {
          type boolean;
          description
            "Configures an AP authorization policy using the calling id";
        }

        leaf ap-audit-report {
          type boolean;
          default "false";
          description
            "AP audit report configuration:
False - AP audit reporting disabled
True - AP audit reporting enabled";
        }

        leaf ap-audit-report-interval {
          type uint16;
          units "minutes";
          must
            "((current() >= 10) and
(current() <= 43200))" {
            error-message
              "AP Audit report interval range should be within 10-43200";
            error-app-tag "must-violation";
          }
          default "1440";
          description
            "AP audit reporting interval";
        }

        leaf vlan-persistent {
          type boolean;
          default "false";
          description
            "Enable client roaming across different policy profiles";
        }

        leaf is-priming-ctrlr {
          type boolean;
          description
            "Enable/disable this controller as priming controller";
        }

        leaf fra-freeze {
          type boolean;
          default "false";
          description
            "Enable/Disable FRA Freeze on all Cisco APs";
        }

        leaf mac-mlist {
          type string {
            length "0..32";
          }
          default "";
          description
            "Method list for AP MAC authorization";
        }

        leaf serial-no-mlist {
          type string {
            length "0..32";
          }
          default "";
          description
            "Method list for AP serial number authorization";
        }

        leaf pwd-pol-def {
          type boolean;
          default "false";
          description
            "Enable/disable default wireless password policy";
        }

        leaf client-steering-cnt {
          type uint8 {
            range "0 .. 200";
          }
          default "3";
          description
            "Minimum number of clients for 6Ghz client steering";
        }

        leaf client-steering-win-size {
          type uint8 {
            range "0 .. 200";
          }
          default "3";
          description
            "Minimum 2.4/5Ghz to 6Ghz client count difference to steer client";
        }

        leaf client-steering-util-thres {
          type uint8 {
            range "0 .. 100";
          }
          units "percentage";
          default "20";
          description
            "Maximum 2.4/5Ghz to 6Ghz channel utilization difference to steer client";
        }

        leaf client-steering-rssi-24 {
          type int8 {
            range "-70 .. -20";
          }
          units "dBm";
          default "-60";
          description
            "Minimum 2.4Ghz received RSSI threshold to steer client";
        }

        leaf client-steering-rssi-5 {
          type int8 {
            range "-75 .. -20";
          }
          units "dBm";
          default "-65";
          description
            "Minimum 5Ghz received RSSI threshold to steer client";
        }

        leaf tag-persist-enabled {
          type boolean;
          default "false";
          description
            "Enable persistent AP tags";
        }

        leaf secure-rrm {
          type boolean;
          default "false";
          description
            "Enable/Disable Secure RRM";
        }
      }  // container apf
    }  // container apf-cfg-data
  }  // module Cisco-IOS-XE-wireless-apf-cfg