FCC ID: LDKMU6CR2417 Cisco Catalyst 9136I Access Point

GETTING STARTED GUIDE Cisco Catalyst 9136I Series Access Points First Published: October 12, 2021 Cisco Systems, Inc. www.cisco.com 1 Cisco Catalyst 9136I Series Access Points 2 About the Cisco Catalyst 9136I Series Wireless Access Point 1 About this Guide 3 Safety Instructions 4 Unpacking 5 AP Views, Ports, and Connectors 6 Preparing the AP for Installation 7 Installation Overview 8 Performing a Pre-Installation Configuration 9 Mounting the Access Point 10 Powering the Access Point 11 Configuring and Deploying the Access Point 12 Checking the Access Point LEDs 13 Miscellaneous Usage and Configuration Guidelines 14 FAQs 15 Related Documentation 16 Declarations of Conformity and Regulatory Information Communications, Services, and Additional Information Cisco Bug Search Tool 2 Cisco Catalyst 9136I Series Access Points 1 About this Guide This guide provides instructions on how to install your Cisco Catalyst 9136I series access point and provides links to resources that can help you configure it. This guide also provides mounting instructions and troubleshooting information. Note that the C9136I series access point is referred to as the access point or the AP in this document. 2 About the Cisco Catalyst 9136I Series Wireless Access Point The Cisco Catalyst 9136I series wireless access point is a tri-band (2.4-GHz, 5-GHz, 6-GHz), enterprise 802.11ax (Wi-Fi 6) AP. The AP has one model which has integrated antennas, and are designed to use 2.4 GHz, the 5 GHz and the 6 GHz bands. This AP series supports a greater overall High Density Experience (HDX), which provides a more predictable performance for advanced applications such as 4K or 8K videos, high-density and high-definition collaboration applications, all-wireless offices, and Internet-of-Things (IoT). The AP supports full interoperability with leading 802.11ax and 802.11ac clients, along with a mixed deployment with other APs and controllers. These APs provide integrated security, resiliency and operational flexibility as well as increased network intelligence. A full listing of the AP's features and specifications are provided in the Cisco Catalyst 9136I Series Access Point Data Sheet, at the following URL:

https://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9100ax-access-points/nb-06-cat-9130-ser-ap

-ds-cte-en.html Cisco Catalyst 9136I Series Wireless Access Point Features The C9136I series AP is a wireless controller-based product, and supports:

Five radios: a 6-GHz radio, a dual-band 5 GHz (8x8) flexible radio with 2.4 GHz, and a 4x4 5 GHz, a single-band 5 GHz radio, and an Omni IoT radio. The BLE, Zigbee, Thread, and other multi-protocol 802.15.4 devices use the Omni IoT radio Four 2.4-GHz and 5-GHz dual-band, four 5-GHz single-band, four 6-GHz single bands, and one 2.4-GHz IoT integrated antennas on the C9136I-x models. Note The x in the model numbers represents the regulatory domain. For information on supported regulatory domains, see theAP Model Numbers and Regulatory Domains section on page 4. Integrated internal antennas that are omni directional in azimuth, for 2.4-GHz, 5-GHz bands, and 6-GHz bands. Multiuser Multiple-Input Multiple-Output (MU-MIMO) technology for uplink and downlink. Orthogonal Frequency Division Multiple Access (OFDMA)-based scheduling for both uplink and downlink. Multigigabit Ethernet (mGig) The following hardware external interfaces:

2x100/1000/2500/5000 Multigigabit Ethernet (RJ-45) RS-232 Console Interface through RJ-45 Recovery push button (enables partial or full system configuration recovery) USB 2.0 Port One multi-color LED. 3 Cisco Catalyst 9136I Series Access Points Integrated Bluetooth Low Energy (BLE) radio to enable IoT use cases such as location tracking and wayfinding. Intelligent Capture probes the network and provides Cisco DNA Center with deep analysis. Spatial Reuse (also known as Basic Service Set (BSS) coloring) which allows APs and their clients to differentiate between BSSs, thus permitting more simultaneous transmissions. New power savings mode called Target Wake Time (TWT) which allows the client to stay asleep and wake up only at pre-scheduled (target) times to exchange data with the AP. This provides significant energy savings for battery-operated devices. Cisco Digital Network Architecture (DNA) support enables Cisco DNA Spaces, Apple FastLane and Cisco Identity Services Engine. fastest data rate available. Optimized AP Roaming for ensuring that client devices associate with the AP in their coverage range that offers the Cisco CleanAir technology enhanced with 160MHz channel support. CleanAir delivers proactive, high-speed spectrum intelligence across 20-, 40-, and 80-, and 160-MHz-wide channels to combat performance problems arising from wireless interference. The AP supports lightweight deployments (using Cisco Wireless Controllers). The AP also supports the following operating modes:

LocalThis is the default mode for the Cisco AP. In this mode, the AP serves clients. In local mode, the AP creates two CAPWAP tunnels to the Cisco WLC, one for management and the other for data traffic. This is known as central switching because the data traffic is switched (bridged) from the AP to the controller where it is then routed. FlexConnectIn FlexConnect mode (previously known as HREAP), the data traffic is switched locally and is not sent to the controller. In this mode, the Cisco AP behaves like an autonomous AP, but is managed by the Cisco WLC. Here, the AP continues to function even if connection to the controller is lost. MonitorIn the monitor mode, specified Cisco APs can exclude themselves from handling data traffic between clients and the infrastructure. These APs act as dedicated sensors for location based services (LBS), rogue AP detection, and intrusion detection (IDS). When APs are in monitor mode, they actively monitor the airwaves and typically do not serve clients. SnifferIn the wireless sniffer mode, the AP starts sniffing the air on a given channel. It captures and forwards all the packets from the clients on that channel to a remote machine that runs Airopeek or Wireshark (packet analyzers for IEEE 802.11 wireless LANs). This includes information on the time stamp, signal strength, packet size, etc. Note In the sniffer mode, the server to which the data is sent should be on the same VLAN as the wireless controller management VLAN otherwise an error will be displayed. AP Model Numbers and Regulatory Domains AP Type Access Point for indoor environments, with internal antennas Model Number C9136I-x Details Tri-band, controller-based 802.11ax You need to verify whether the AP model you have is approved for use in your country. To verify approval and to identify the regulatory domain that corresponds to a particular country, visit http://www.cisco.com/go/aironet/compliance. Not all regulatory domains have been approved. As and when they are approved, this compliance list will be updated. 4 Cisco Catalyst 9136I Series Access Points Antennas and Radios The C9136I series access point configurations are:

C9136I-x Internal Antennas The C9136I models (C9136I-x) have four internal dual-band antennas with a dedicated 2.4 GHz radio and a 5 GHz radio, four internal single-band antennas with a dedicated 5 GHz radio, four internal single-band antennas with a dedicated 6-GHz radio, one internal single-band antenna with a dedicated 2.4 GHz IOT radio, and one dual-band antenna with a dedicated 2.4-GHz radio and a 5-GHz AUX radio and two tri-band antenna with a dedicated 2.4-GHz, 5-GHz and 6-GHz Aux radio. Operating Frequency and Maximum Output Power Maximum Power level(dBm) Radio Wi-Fi Frequency Bands 2400-2483.5 MHz 5150-5350 MHz 5470-5725 MHz 5925-6425 MHz Bluetooth 2.4 GHz 3 Safety Instructions 20 23 30 23 20 Translated versions of the following safety warnings are provided in the translated safety warnings document that is shipped with your access point. The translated warnings are also in the Translated Safety Warnings for Cisco Catalyst Access Points, which is available on Cisco.com. Warning This unit is intended for installation in restricted access areas. A restricted access area can be accessed by skilled, instructed or qualified personnel. Statement 1017 Warning IMPORTANT SAFETY INSTRUCTIONS This warning symbol means danger. You are in a situation that could cause bodily injury. Before you work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents. Use the statement number provided at the end of each warning to locate its translation in the translated safety warnings that accompanied this device. SAVE THESE INSTRUCTIONS Statement 1071 Warning Read the installation instructions before using, installing or connecting the system to the power source. Statement 1004 5 Cisco Catalyst 9136I Series Access Points Warning This product relies on the buildings installation for short-circuit (overcurrent) protection. Ensure that the protective device is rated not greater than 20A. Statement 1005 Warning Installation of the equipment must comply with local and national electrical codes. Statement 1074 Warning In order to comply with FCC radio frequency (RF) exposure limits, antennas should be located at a minimum of 12 inches (30 cm) or more from the body of all persons. Statement 332 Warning Ultimate disposal of this product should be handled according to all national laws and regulations. Statement 1040 Warning This equipment is suitable for use in environment air spaces (plenums) in accordance with Section 300.22 (C) of the National Electrical Code, and Sections 2-128, 12-010(3) and 12-100 of the Canadian Electrical Code, Part 1, CSA C22.2. External power supply, power adapter and/or power injector, if provided, are not suitable for installation in air spaces. Statement 440 Warning Class I Equipment. This equipment must be earthed. The power plug must be connected to a properly wired earth ground socket outlet. An improperly wired socket outlet could place hazardous voltages on accessible metal parts. 4 Unpacking To unpack the access point, follow these steps:

Step 1 Unpack and remove the access point and the accessory kit from the shipping box. Step 2 Return any packing material to the shipping container and save it for future use. Step 3 Verify that you have received the items listed below. If any item is missing or damaged, contact your Cisco representative or reseller for instructions. The access point

(Optional) Mounting bracket (AIR-AP-BRACKET-1= (default) or AIR-AP-BRACKET-2=, only if selected when you order the access point) Adjustable ceiling-rail clip (AIR-AP-T-RAIL-R or AIR-AP-T-RAIL-F) (selected when you order the access point) The following accessories can be ordered separately from Cisco:

6 Cisco Catalyst 9136I Series Access Points

AIR-AP-BRACKET-1= for low profile installations

AIR-AP-BRACKET-2= for electrical or network boxes, above ceiling mounts

Mid-span power injector AIR-PWRINJ7= when PoE is not available 5 AP Views, Ports, and Connectors Figure 1 Face of the 9136AXI Model Status LED 1 2 Location of the ports and connectors on the head of the AP. 3 USB 2.0 port 7 Cisco Catalyst 9136I Series Access Points Figure 2 Ports and Connectors on the Head of the C9136I Model 1 2 3 4 Kensington lock slot Security hasp for padlocking AP to mounting bracket Mode button For information on how to use the Mode button, see Using the Mode Button section. RJ-45 console port 5 6 7 5GbE port 1 5GbE port 0 USB 2.0 port 8 Cisco Catalyst 9136I Series Access Points dC9136I (Internal Antenna) Radiation Patterns The AP is undergoing tests. The image placeholders will get replaced with the actual images after obtaining the results. 9 Cisco Catalyst 9136I Series Access Points 6 Preparing the AP for Installation Before you mount and deploy your access point, we recommend that you perform a site survey (or use the site planning tool) to determine the best location to install your access point. You should have the following information about your wireless network available:

Access point locations. Access point mounting options: below a suspended ceiling, on a flat horizontal surface, or on a desk top. Note You can mount the access point above a suspended ceiling but you must purchase additional mounting hardware: See Mounting the Access Point section on page 13 for additional information. Access point power options: Use Cisco power injectorCisco Power Injector AIR-PWRINJ7= or UL approved Listed Power Adapter802.3at (PoE+) 802.3af, or Cisco Universal PoE (Cisco UPOE). Note Use an UL listed power adapter with rated output 42.5-57 Vdc, min. 1.11A, Tma is 50 degree C minimum, Altitude is 3048m minimum. Note The UL approved Listed Power Adapter must meet the following minimum specifications: Rated output of 42.5-57 Vdc, min. 1.11A, Tma is 50C minimum, Altitude is 3048m minimum. Note If 802.3af is used, both the 2.4 GHz and 5 GHz radios will be reduced to 1x1 and Ethernet will be downgraded to 1 GbE. The USB port will also be off. Operating temperature:

C9136I: 32122F (050C) Note When installing the C9136I in an environment where the ambient temperature is in the range of 104122F (>4050C), the access point configuration will change from 8x8 to 4x4 on the 5 GHz radios and the uplink Ethernet will downgrade to 1GbE. However, the USB port will remain enabled. Cisco recommends that you make a site map showing access point locations so that you can record the device MAC addresses from each location and return them to the person who is planning or managing your wireless network. 7 Installation Overview Installing the access point involves these operations:

Performing a Pre-Installation Configuration, page 11 (optional) Step 1 Step 2 Preparing the AP for Installation, page 10 Step 3 Mounting the Access Point, page 13 Step 4 Powering the Access Point, page 15 10 Cisco Catalyst 9136I Series Access Points 8 Performing a Pre-Installation Configuration The following procedures ensure that your access point installation and initial operation go as expected. This procedure is optional. Note Performing a pre-installation configuration is an optional procedure. If your network controller is properly configured, you can install your access point in its final location and connect it to the network from there. See the Deploying the Access Point on the Wireless Network section on page 16 for details. The pre-installation configuration setup is illustrated in Figure 3. Figure 3 Pre-Installation Configuration Setup To perform pre-installation configuration, perform the following steps:

Step 1 Make sure that the Cisco Wireless Controller DS port is connected to the network. Use the procedure for CLI or web-browser interface as described in the appropriate Cisco Wireless Controller guide. a. Make sure that access points have Layer 3 connectivity to the Cisco Wireless Controller Management and AP-Manager Interface. b. Configure the switch to which your access point is to attach. See the Cisco Wireless Controller Configuration Guide for the release you are using, for additional information. c. Set the Cisco Wireless Controller as the master so that new access points always join with it. 11 Cisco Catalyst 9136I Series Access Points d. Make sure DHCP is enabled on the network. The access point must receive its IP address through DHCP. Note An 802.11ax Cisco AP will be assigned an IP address from the DHCP server only if a default router

(gateway) is configured on the DHCP server (enabling the AP to receive its gateway IP address) and the gateway ARP is resolved. e. CAPWAP UDP ports must not be blocked in the network. f. The access point must be able to find the IP address of the controller. This can be accomplished using DHCP, DNS, or IP subnet broadcast. This guide describes the DHCP method to convey the controller IP address. For other methods, refer to the product documentation. See also the Configuring DHCP Option 43 section on page 19 for more information. Note The access point requires a gigabit Ethernet (GbE) link to prevent the Ethernet port from becoming a bottleneck for traffic because wireless traffic speeds exceed transmit speeds of a 10/100 Ethernet port. Step 2 For C9136I, proceed to Step 3. For C9136IE, connect the antennas to the AP before powering the AP up. Enabling the AP radios without connecting the antennas can result in damage to the AP. Step 3 Apply power to the access point. See , page 14. a. As the access point attempts to connect to the controller, the LED cycles through a green, red, and off sequence, which can take up to 5 minutes. Note If the access point remains in this mode for more than five minutes, the access point is unable to find the Master Cisco Wireless Controller. Check the connection between the access point and the Cisco Wireless Controller and be sure that they are on the same subnet. b. If the access point shuts down, check the power source. c. After the access point finds the Cisco Wireless Controller, it attempts to download the new operating system code if the access point code version differs from the Cisco Wireless Controller code version. While this is happening, the Status LED blinks blue. d. If the operating system download is successful, the access point reboots. Step 4 Configure the access point if required. Use the controller CLI, controller GUI, or Cisco Prime Infrastructure to customize the access-point-specific 802.11ax network settings. Step 5 If the pre-installation configuration is successful, the Status LED is green indicating normal operation. Disconnect the access point and mount it at the location at which you intend to deploy it on the wireless network. Step 6 If your AP does not indicate normal operation, turn it off and repeat the pre-installation configuration. Note When you are installing a Layer 3 access point on a different subnet than the Cisco Wireless Controller, be sure that a DHCP server is reachable from the subnet on which you will be installing the access point, and that the subnet has a route back to the Cisco Wireless Controller. Also be sure that the route back to the Cisco Wireless Controller has destination UDP ports 5246 and 5247 open for CAPWAP communications. Ensure that the route back to the primary, secondary, and tertiary controller allows IP packet fragments. Finally, be sure that if address translation is used, that the access point and the Cisco Wireless Controller have a static 1-to-1 NAT to an outside address. (Port Address Translation is not supported.) 12 Cisco Catalyst 9136I Series Access Points 9 Mounting the Access Point Cisco Catalyst 9136I series access points can be mounted in several configurations on a suspended ceiling, on a hard ceiling or wall, on an electrical or network box, and above a suspended ceiling. For access point mounting instructions, go to the following URL:

http://www.cisco.com/c/en/us/td/docs/wireless/access_point/mounting/guide/apmount.html The standard mounting hardware supported by the AP is listed in Table 1. Table 1 Brackets and Clips for Mounting the AP Part Number Description Brackets123 AIR-AP-BRACKET-1 Low-profile bracketUsed for ceiling mount installations

(This is the default option.) AIR-AP-BRACKET-2 Universal bracketUsed for wall or electrical box installations. Clips AIR-AP-T-RAIL-R Ceiling Grid Clip (Recessed mounting)

(This is the default option) AIR-AP-T-RAIL-F Ceiling Grid Clip (Flush mounting) AIR-CHNL-ADAPTER Optional adapter for channel-rail ceiling grid profile. 1. Mount the AP using no less than four screw holes on a bracket. 2. AIR-AP-BRACKET-3 is not compatible for use with Cisco Catalyst 9136I series access points. 3. You can also use in-tile mounting options available from third parties. For more information, visit the access point data sheet available on Cisco.com at https://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9100ax-access-points/nb-06-cat-

9130-ser-ap-ds-cte-en.html. When mounting the AP in areas where there is a possibility of the AP being knocked off the mounting bracket, use the lock hasp on the back of the AP (see Figure 4) to lock it to the bracket. 13 Cisco Catalyst 9136I Series Access Points Figure 4 Locking the AP to the Bracket 1 Position of the hasps for the locks on the back of the AP 14 Cisco Catalyst 9136I Series Access Points 10 Powering the Access Point Caution Ensure that the AP is powered using a UL-compliant PoE power source. You must connect the unit only to PoE network without routing to the outside plant. The AP can be powered only through Power-over-Ethernet (PoE) using the following:

802.3at (PoE+): Any 802.3at (30.0 W) compliant switch port or Cisco Power Injector AIR-PWRINJ7=

802.3af: Any 802.3af (15.4 W) compliant switch port Note If 802.3af is used, both the 2.4 GHz and 5 GHz radios will be reduced to 1x1 and Ethernet will be downgraded to 1 GbE. The USB port will also be off. 802.3bt: Any 802.3bt compliant switch port Cisco Universal PoE (Cisco UPOE) Caution Use the recommended AC power adapter from the Cisco accessories list with the device to reduce safety issues. 11 Configuring and Deploying the Access Point This section describes how to connect the access point to a controller. Because the configuration process takes place on the controller, see the Cisco Wireless Controller Configuration Guide for additional information. The Controller Discovery Process Note

The controller must be running release IOS-XE 17.x to support C9136AXI. For more information, visit the access point data sheet available on Cisco.com at https://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9100ax-access-points/guide-c07-742311. html

You cannot edit or query any access point using the controller CLI if the name of the access point contains a space.

Make sure that the controller is set to the current time. If the controller is set to a time that has already occurred, the access point might not join the controller because its certificate may not be valid for that time. Access points must be discovered by a controller before they can become an active part of the network. The access point supports these controller discovery processes:

Locally stored controller IP address discoveryIf the access point was previously joined to a controller, the IP addresses of the primary, secondary, and tertiary controllers are stored in the access point non-volatile memory. This process of storing controller IP addresses on an access point for later deployment is called priming the access point. For more information about priming, see the Performing a Pre-Installation Configuration section on page 11. 15 Cisco Catalyst 9136I Series Access Points DHCP server discoveryThis feature uses DHCP option 43 to provide controller IP addresses to the access points. Cisco switches support a DHCP server option that is typically used for this capability. For more information about DHCP option 43, see the Configuring DHCP Option 43 section on page 19. DNS discoveryThe access point can discover controllers through your domain name server (DNS). For the access point to do so, you must configure your DNS to return controller IP addresses in response to CISCO-CAPWAP-CONTROLLER.localdomain, where localdomain is the access point domain name. Configuring the CISCO-CAPWAP-CONTROLLER provides backwards compatibility in an existing customer deployment. When an access point receives an IP address and DNS information from a DHCP server, it contacts the DNS to resolve CISCO-CAPWAP-CONTROLLER.localdomain. When the DNS sends a list of controller IP addresses, the access point sends discovery requests to the controllers. Deploying the Access Point on the Wireless Network After you have mounted the access point, follow these steps to deploy it on the wireless network:

Step 1 Connect and power up the access point. Step 2 Observe the access point LED (for LED status descriptions, see Checking the Access Point LEDs section on page 16. b. c. a. When you power up the access point, it begins a power-up sequence that you can verify by observing the access point LED. If the power-up sequence is successful, the discovery and join process begins. During this process, the LED blinks sequentially green, red, and off. When the access point has joined a controller, the LED is green if no clients are associated or blue if one or more clients are associated. If the LED is not on, the access point is most likely not receiving power. If the LED blinks sequentially for more than 5 minutes, the access point is unable to find its primary, secondary, and tertiary Cisco Wireless Controller. Check the connection between the access point and the Cisco Wireless Controller, and be sure the access point and the Cisco Wireless Controller are either on the same subnet or that the access point has a route back to its primary, secondary, and tertiary Cisco Wireless Controller. Also, if the access point is not on the same subnet as the Cisco Wireless Controller, be sure that there is a properly configured DHCP server on the same subnet as the access point. See the Configuring DHCP Option 43 section on page 19 for additional information. Step 3 Reconfigure the Cisco Wireless Controller so that it is not the master. Note A master Cisco Wireless Controller should be used only for configuring access points and not in a working network. 12 Checking the Access Point LEDs The location of the access point status LED is shown in Figure 1. Note Regarding LED status colors, it is expected that there will be small variations in color intensity and hue from unit to unit. This is within the normal range of the LED manufacturers specifications and is not a defect. However, the intensity of the LED can be changed through the controller. 16 Cisco Catalyst 9136I Series Access Points The access point status LED indicates various conditions and are described in Table 2. Table 2 LED Status Indications Message Type LED State Message Meaning Association status Green Blue Normal operating condition, but no wireless client associated Normal operating condition, at least one wireless client association Boot loader status Green Executing boot loader Boot loader error Blinking Green Boot loader signing verification failure Operating status Blinking Blue Software upgrade in progress Alternating between Green and Red Discovery/join process in progress Access point operating system errors Cycling through Red-Off-Green-Off-Blue-Off General warning; insufficient inline power 13 Miscellaneous Usage and Configuration Guidelines Using the Mode Button Using the Mode button (see Figure 2) you can:

Reset the AP to the default factory-shipped configuration. Clear the AP internal storage, including all configuration files. To use the mode button, press, and keep pressed, the mode button on the access point during the AP boot cycle. Wait until the AP console shows a seconds counter. Once the counter indicates the number of seconds the mode button is pressed, the AP status LED changes to blinking red. Then:

To reset the AP to the default factory-shipped configuration, keep the mode button pressed for less than 20 seconds. The AP configuration files are cleared. This resets all configuration settings to factory defaults, including passwords, WEP keys, the IP address, and the SSID. To clear the AP internal storage, including all configuration files, keep the mode button pressed for more than 20 seconds, but less than 60 seconds. Note If the mode button is pressed for more than 30 seconds but less than 60 seconds, the FIPS mode flag is also cleared during the full factory reset of the AP. The FIPS flag when set disables console access. The AP status LED changes from Blue to Red, and all the files in the AP storage directory are cleared. If you keep the mode button pressed for more than 60 seconds, the mode button is assumed faulty and no changes are made. 17 Cisco Catalyst 9136I Series Access Points Troubleshooting the Access Point to Cisco Controller Join Process Note As specified in the Cisco Wireless Solutions Software Compatibility Matrix, ensure that your controller is running controller software release 8.9.111.0 or IOS-XE 16.12.1 or later to support C9136I or 8.10.105.0 or IOS-XE 16.12.2 or later to support C9136IE. Access points can fail to join a controller for many reasons: a RADIUS authorization is pending; self-signed certificates are not enabled on the controller; the access point and the controller regulatory domains dont match, and so on. Controller software enables you to configure the access points to send all CAPWAP-related errors to a syslog server. You do not need to enable any debug commands on the controller because all of the CAPWAP error messages can be viewed from the syslog server itself. The state of the access point is not maintained on the controller until it receives a CAPWAP join request from the access point. Therefore, it can be difficult to determine why the CAPWAP discovery request from a certain access point was rejected. In order to troubleshoot such joining problems without enabling CAPWAP debug commands on the controller, the controller collects information for all access points that send a discovery message to it and maintains information for any access points that have successfully joined it. The controller collects all join-related information for each access point that sends a CAPWAP discovery request to the controller. Collection begins with the first discovery message received from the access point and ends with the last configuration payload sent from the controller to the access point. When the controller is maintaining join-related information for the maximum number of access points, it does not collect information for any more access points. An access point sends all syslog messages to IP address 255.255.255.255 by default. You can also configure a DHCP server to return a syslog server IP address to the access point using option 7 on the server. The access point then starts sending all syslog messages to this IP address. When the access point joins a controller for the first time, the controller sends the global syslog server IP address (the default is 255.255.255.255) to the access point. After that, the access point sends all syslog messages to this IP address until it is overridden by one of the following scenarios:

The access point is still connected to the same controller, and the global syslog server IP address configuration on the controller has been changed using the config ap syslog host global syslog_server_IP_address command. In this case, the controller sends the new global syslog server IP address to the access point. The access point is still connected to the same controller, and a specific syslog server IP address has been configured for the access point on the controller using the config ap syslog host specific Cisco_AP syslog_server_IP_address command. In this case, the controller sends the new specific syslog server IP address to the access point. The access point is disconnected from the controller and joins another controller. In this case, the new controller sends its global syslog server IP address to the access point. Whenever a new syslog server IP address overrides the existing syslog server IP address, the old address is erased from persistent storage, and the new address is stored in its place. The access point also starts sending all syslog messages to the new IP address provided the access point can reach the syslog server IP address. You can configure the syslog server for access points and view the access point join information only from the controller CLI. Important Information for Controller-based Deployments Keep these guidelines in mind when you use C9136I series access point:

18 Cisco Catalyst 9136I Series Access Points The access point can only communicate with Cisco wireless controllers. The access point does not support Wireless Domain Services (WDS) and cannot communicate with WDS devices. However, the controller provides functionality equivalent to WDS when the access point joins it. CAPWAP does not support Layer 2. The access point must get an IP address and discover the controller using Layer 3, DHCP, DNS, or IP subnet broadcast. The access point console port is enabled for monitoring and debug purposes. All configuration commands are disabled when the access point is connected to a controller. Configuring DHCP Option 43 You can use DHCP Option 43 to provide a list of controller IP addresses to the access points, enabling them to find and join a controller. The following is a DHCP Option 43 configuration example on a Windows 2003 Enterprise DHCP server for use with Cisco Catalyst lightweight access points. For other DHCP server implementations, consult product documentation for configuring DHCP Option 43. In Option 43, you should use the IP address of the controller management interface. Note DHCP Option 43 is limited to one access point type per DHCP pool. You must configure a separate DHCP pool for each access point type. The C9136I series access point uses the type-length-value (TLV) format for DHCP Option 43. DHCP servers must be programmed to return the option based on the access point DHCP Vendor Class Identifier (VCI) string (DHCP Option 43). The VCI string for the C9136I series access point is:

Cisco AP C9136I The format of the TLV block is listed below:

Type0xf1 (decimal 241) LengthNumber of controller IP addresses * 4 scope example is as follows:

ip dhcp pool <pool name>

network <IP Network> <Netmask>

default-router <Default router>

dns-server <DNS Server>

Where:

ValueIP addresses of the WLC management interfaces listed sequentially in hex To configure DHCP Option 43 in the embedded Cisco IOS DHCP server, follow these steps:

Step 1 Enter configuration mode at the Cisco IOS CLI. Step 2 Create the DHCP pool, including the necessary parameters such as default router and name server. A DHCP

<pool name> is the name of the DHCP pool, such as AP9136I

<IP Network> is the network IP address where the controller resides, such as 10.0.15.1

<Netmask> is the subnet mask, such as 255.255.255.0

<Default router> is the IP address of the default router, such as 10.0.0.1

<DNS Server> is the IP address of the DNS server, such as 10.0.10.2 Step 3 Add the option 43 line using the following syntax:

19 Cisco Catalyst 9136I Series Access Points option 43 hex <hex string>

Type + Length + Value The hex string is assembled by concatenating the TLV values shown below:

For example, suppose that there are two controllers with management interface IP addresses, 10.126.126.2 and 10.127.127.2. The type is f1(hex). The length is 2 * 4 = 8 = 08 (hex). The IP addresses translate to 0a7e7e02 and 0a7f7f02. Assembling the string then yields f1080a7e7e020a7f7f02. The resulting Cisco IOS command added to the DHCP scope is option 43 hex f1080a7e7e020a7f7f02. 14 FAQs What is 802.11ax?

What is Wi-Fi 6E?

The IEEE 802.11ax standard, also known as the High-Efficiency Wireless (HEW) or Wi-Fi 6, builds off of the 802.11ac and delivers a better experience in typical environments, and a more predictable performance for advanced applications such as 4K or 8K video, high-density high-definition collaboration applications, all-wireless offices and Internet-of-Things (IoT). 802.11ax is designed to use both 2.4Ghz and the 5GHz bands, unlike prior standards. The IEEE 802.11ax standard, also known as High-Efficiency Wireless (HEW) or Wi-Fi 6, builds on 802.11ac. It delivers a better experience in typical environments with more predictable performance for advanced applications such as 4K or 8K video, high-density, high-definition collaboration apps, all-wireless offices, and IoT. Wi-Fi 6E is Wi-Fi 6, Extended into the 6 GHz band. What is Cisco Multigigabit Ethernet?

Cisco Multigigabit Ethernet (mGig) is a unique Cisco innovation also available in the Cisco Catalyst 9136I series access point. With the increasing popularity of 802.11ax and new wireless applications, wireless devices now require more network bandwidth. Hence, there is a need for a technology that supports speeds higher than 1 Gbps on all cabling infrastructure. Cisco Multigigabit technology allows you to achieve bandwidth speeds from 1 to 10 Gbps over traditional Cat 5e cabling or newer. The C9136I AP supports up to 5 Gbps using mGig. For more information see the following Cisco Multigigabit FAQ document:

http://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/catalyst-multigigabit-switching/multigiga bit-ethernet-technology.pdf 20 Cisco Catalyst 9136I Series Access Points 15 Related Documentation All user documentation for the Cisco Catalyst 9136I series access point is available at the following URL:

http://www.cisco.com/c/en/us/support/wireless/catalyst-9130ax-series-access-points/tsd-products-support-series-

home.html For detailed information and guidelines for configuring and deploying your access point in a wireless network, see the following documentation:

Cisco Catalyst 9130AX Series Access Point Deployment Guide, at the following URL:

http://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9100ax-access-points/deployment-guide-c 07-743490.html Cisco 9800 Wireless Controller Configuration Guide, Release xx.xx, at the following URL:

URL to be updated at before CCO posting. 16 Declarations of Conformity and Regulatory Information This section provides declarations of conformity and regulatory information for the Cisco Catalyst 9136I Series Access Points. You can find additional information at this URL:

www.cisco.com/go/aironet/compliance Manufacturers Federal Communication Commission Declaration of Conformity Statement Certification Number XXXXXXXXXX Access Point Models C9136I-B Manufacturer:

Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA 21 Cisco Catalyst 9136I Series Access Points This device complies with Part 15 rules. Operation is subject to the following two conditions:

1. This device may not cause harmful interference, and 2. This device must accept any interference received, including interference that may cause undesired operation. This equipment has been tested and found to comply with the limits of a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a residential environment. This equipment generates, uses, and radiates radio frequency energy, and if not installed and used in accordance with the instructions, may cause harmful interference. However, there is no guarantee that interference will not occur. If this equipment does cause interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to correct the interference by one of the following measures:

Reorient or relocate the receiving antenna. Increase separation between the equipment and receiver. Connect the equipment to an outlet on a circuit different from which the receiver is connected. Consult the dealer or an experienced radio/TV technician. Caution Any changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate this equipment. This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:

(1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. This device and its antenna(s) must not be co-located or operating in conjunction with any other antenna or transmitter. For product available in the USA/Canada market, only channel 1~11 can be operated. Selection of other channels is not possible. FCC regulations restrict the operation of this device to indoor use only. The operation of this device is prohibited on oil platforms, cars, trains, boats, and aircraft, except that operation of this device is permitted in large aircraft while flying above 10,000 feet. Operation of transmitters in the 5.925-7.125 GHz band is prohibited for control of or communications with unmanned aircraft systems. VCCI Statement for Japan Warning This is a Class B product based on the standard of the Voluntary Control Council for Interference from Information Technology Equipment (VCCI). If this is used near a radio or television receiver in a domestic environment, it may cause radio interference. Install and use the equipment according to the instruction manual. 22 Cisco Catalyst 9136I Series Access Points Guidelines for Operating Cisco Catalyst Access Points in Japan This section provides guidelines for avoiding interference when operating Cisco Catalyst access points in Japan. These guidelines are provided in both Japanese and English. Japanese Translation 03-6434-6500 7 9 6 8 0 2 English Translation This equipment operates in the same frequency bandwidth as industrial, scientific, and medical devices such as microwave ovens and mobile object identification (RF-ID) systems (licensed premises radio stations and unlicensed specified low-power radio stations) used in factory production lines. 1. Before using this equipment, make sure that no premises radio stations or specified low-power radio stations of RF-ID are used in the vicinity. 2. If this equipment causes RF interference to a premises radio station of RF-ID, promptly change the frequency or stop using the device; contact the number below and ask for recommendations on avoiding radio interference, such as setting partitions. 3. If this equipment causes RF interference to a specified low-power radio station of RF-ID, contact the number below. Contact Number: 03-6434-6500 23 Cisco Catalyst 9136I Series Access Points Statement 371Power Cable and AC Adapter English Translation When installing the product, please use the provided or designated connection cables/power cables/AC adaptors. Using any other cables/adaptors could cause a malfunction or a fire. Electrical Appliance and Material Safety Law prohibits the use of UL-certified cables (that have the UL shown on the code) for any other electrical devices than products designated by CISCO. The use of cables that are certified by Electrical Appliance and Material Safety Law (that have PSE shown on the code) is not limited to CISCO-designated products. Industry Canada Access Point Models C9136I-A Certification Number 2461N-MU6CR2417 Canadian Compliance Statement This device contains license-exempt transmitter(s)/receiver(s) that comply with Innovation, Science and Economic Development Canadas license-exempt RSS(s). Operation is subject to the following two conditions:

This device may not cause interference. This device must accept any interference, including interference that may cause undesired operation of the device. Lmetteur/rcepteur exempt de licence contenu dans le prsent appareil est conforme aux CNR dInnovation, Sciences et Dveloppement conomique Canada applicables aux appareils radio exempts de licence. Lexploitation est autorise aux deux conditions suivantes:

Lappareil ne doit pas produire de brouillage. Lappareil doit accepter tout brouillage radiolectrique subi, mme si le brouillage est susceptible den compromettre le fonctionnement. Under Industry Canada regulations, this radio transmitter may only operate using an antenna of a type and maximum (or lesser) gain approved for the transmitter by Industry Canada. To reduce potential radio interference to other users, the antenna type and its gain should be so chosen that the equivalent isotropically radiated power (e.i.r.p.) is not more than that necessary for successful communication. Conformment la rglementation d'Industrie Canada, le prsent metteur radio peut fonctionner avec une antenne d'un type et d'un gain maximal (ou infrieur) approuv pour l'metteur par Industrie Canada. Dans le but de rduire les risques de brouillage radiolectrique l'intention des autres utilisateurs, il faut choisir le type d'antenne et son gain de sorte que la puissance isotrope rayonne quivalente (p.i.r.e.) ne dpasse pas l'intensit ncessaire l'tablissement d'une communication satisfaisante. This radio transmitter has been approved by Industry Canada to operate with the antenna types listed below with the maximum permissible gain and required antenna impedance for each antenna type indicated. Antenna types not included in this list, having a gain greater than the maximum gain indicated for that type, are strictly prohibited for use with this 24 Cisco Catalyst 9136I Series Access Points device. Le prsent metteur radio a t approuv par Industrie Canada pour fonctionner avec les types d'antenne numrs ci-dessous et ayant un gain admissible maximal et l'impdance requise pour chaque type d'antenne. Les types d'antenne non inclus dans cette liste, ou dont le gain est suprieur au gain maximal indiqu, sont strictement interdits pour l'exploitation de l'metteur. Table 3 Antenna Type To Be Updated Shortly List of Internal Antennas Supported on C9136AXI Antenna Gain Antenna Impedance The device for operation in the band 5150-5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems. Les dispositifs fonctionnant dans la bande 5150-5250 MHz sont rservs uniquement pour une utilisation lintrieur afin de rduire les risques de brouillage prjudiciable aux systmes de satellites mobiles utilisant les mmes canaux. The transmitter module may not be co-located with any other transmitter or antenna. Le module metteur peut ne pas tre complant avec un autre metteur ou antenne. For product available in the USA/Canada market, only channel 1~11 can be operated. Selection of other channels is not possible. Pour les produits disponibles aux tats-Unis / Canada du march, seul le canal 1 11 peuvent tre exploits. Slection d'autres canaux n'est pas possible. Access Point Models:

C9136I-E Note This equipment is intended to be used in all EU and EFTA countries. Outdoor use may be restricted to certain frequencies and/or may require a license for operation. For more details, contact Cisco Corporate Compliance. The product carries the CE Mark:

25 Cisco Catalyst 9136I Series Access Points Declaration of Conformity for RF Exposure This section contains information on compliance with guidelines related to RF exposure. Generic Discussion on RF Exposure The Cisco products are designed to comply with the following national and international standards on Human Exposure to Radio Frequencies:

US 47 Code of Federal Regulations Part 2 Subpart J American National Standards Institute (ANSI) / Institute of Electrical and Electronic Engineers / IEEE C 95.1 (99) International Commission on Non Ionizing Radiation Protection (ICNIRP) 98 Ministry of Health (Canada) Safety Code 6. Limits on Human Exposure to Radio Frequency Fields in the range from 3kHz to 300 GHz Australia Radiation Protection Standard To ensure compliance with various national and international Electromagnetic Field (EMF) standards, the system should only be operated with Cisco approved antennas and accessories. This Device Meets International Guidelines for Exposure to Radio Waves The C9136I series device includes a radio transmitter and receiver. It is designed not to exceed the limits for exposure to radio waves (radio frequency electromagnetic fields) recommended by international guidelines. The guidelines were developed by an independent scientific organization (ICNIRP) and include a substantial safety margin designed to ensure the safety of all persons, regardless of age and health. As such the systems are designed to be operated as to avoid contact with the antennas by the end user. It is recommended to set the system in a location where the antennas can remain at least a minimum distance as specified from the user in accordance to the regulatory guidelines which are designed to reduce the overall exposure of the user or operator. Separation Distance Distance 20 cm The World Health Organization has stated that present scientific information does not indicate the need for any special precautions for the use of wireless devices. They recommend that if you are interested in further reducing your exposure then you can easily do so by reorienting antennas away from the user or placing he antennas at a greater separation distance then recommended. This Device Meets FCC Guidelines for Exposure to Radio Waves The C9136I series device includes a radio transmitter and receiver. It is designed not to exceed the limits for exposure to radio waves (radio frequency electromagnetic fields) as referenced in FCC Part 1.1310. The guidelines are based on IEEE ANSI C 95.1 (92) and include a substantial safety margin designed to ensure the safety of all persons, regardless of age and health. 26 Cisco Catalyst 9136I Series Access Points As such the systems are designed to be operated as to avoid contact with the antennas by the end user. It is recommended to set the system in a location where the antennas can remain at least a minimum distance as specified from the user in accordance to the regulatory guidelines which are designed to reduce the overall exposure of the user or operator. The device has been tested and found compliant with the applicable regulations as part of the radio certification process. Separation Distance Distance 27 cm The US Food and Drug Administration has stated that present scientific information does not indicate the need for any special precautions for the use of wireless devices. The FCC recommends that if you are interested in further reducing your exposure then you can easily do so by reorienting antennas away from the user or placing the antennas at a greater separation distance then recommended or lowering the transmitter power output. This Device Meets the Industry Canada Guidelines for Exposure to Radio Waves The C9136I series device includes a radio transmitter and receiver. It is designed not to exceed the limits for exposure to radio waves (radio frequency electromagnetic fields) as referenced in Health Canada Safety Code 6. The guidelines include a substantial safety margin designed into the limit to ensure the safety of all persons, regardless of age and health. As such the systems are designed to be operated as to avoid contact with the antennas by the end user. It is recommended to set the system in a location where the antennas can remain at least a minimum distance as specified from the user in accordance to the regulatory guidelines which are designed to reduce the overall exposure of the user or operator. Separation Distance 2.4 GHz 5 GHz Frequency Distancet 29 cm Health Canada states that present scientific information does not indicate the need for any special precautions for the use of wireless devices. They recommend that if you are interested in further reducing your exposure you can easily do so by reorienting antennas away from the user, placing the antennas at a greater separation distance than recommended, or lowering the transmitter power output. Cet appareil est conforme aux directives internationales en matire d'exposition aux frquences radiolectriques Cet appareil de la gamme C9136I comprend un metteur-rcepteur radio. Il a t conu de manire respecter les limites en matire d'exposition aux frquences radiolectriques (champs lectromagntiques de frquence radio), recommandes dans le code de scurit 6 de Sant Canada. Ces directives intgrent une marge de scurit importante destine assurer la scurit de tous, indpendamment de l'ge et de la sant. 27 Cisco Catalyst 9136I Series Access Points Par consquent, les systmes sont conus pour tre exploits en vitant que l'utilisateur n'entre en contact avec les antennes. Il est recommand de poser le systme l o les antennes sont une distance minimale telle que prcise par l'utilisateur conformment aux directives rglementaires qui sont conues pour rduire l'exposition gnrale de l'utilisateur ou de l'oprateur. Separation Distance 2.4 GHz 5 GHz Frequency Distancet 29 cm Sant Canada affirme que la littrature scientifique actuelle n'indique pas qu'il faille prendre des prcautions particulires lors de l'utilisation d'un appareil sans fil. Si vous voulez rduire votre exposition encore davantage, selon l'agence, vous pouvez facilement le faire en rorientant les antennes afin qu'elles soient diriges l'cart de l'utilisateur, en les plaant une distance d'loignement suprieure celle recommande ou en rduisant la puissance de sortie de l'metteur. Additional Information on RF Exposure You can find additional information on the subject at the following links:

Cisco Systems Spread Spectrum Radios and RF Safety white paper at this URL:

http://www.cisco.com/warp/public/cc/pd/witc/ao340ap/prodlit/rfhr_wi.htm FCC Bulletin 56: Questions and Answers about Biological Effects and Potential Hazards of Radio Frequency Electromagnetic Fields Electromagnetic Fields FCC Bulletin 65: Evaluating Compliance with the FCC guidelines for Human Exposure to Radio Frequency You can obtain additional information from the following organizations:

World Health Organization Internal Commission on Non-Ionizing Radiation Protection at this URL: www.who.int/emf United Kingdom, National Radiological Protection Board at this URL: www.nrpb.org.uk Cellular Telecommunications Association at this URL: www.wow-com.com The Mobile Manufacturers Forum at this URL: www.mmfai.org Administrative Rules for Cisco Catalyst Access Points in Taiwan This section provides administrative rules for operating Cisco Catalyst access points in Taiwan. The rules for all access points are provided in both Chinese and English. 28 Cisco Catalyst 9136I Series Access Points Chinese Translation English Translation Administrative Rules for Low-power Radio-Frequency Devices Article 12 Article 14 For those low-power radio-frequency devices that have already received a type-approval, companies, business units or users should not change its frequencies, increase its power or change its original features and functions. The operation of the low-power radio-frequency devices is subject to the conditions that no harmful interference is caused to aviation safety and authorized radio station; and if interference is caused, the user must stop operating the device immediately and can't re-operate it until the harmful interference is clear. The authorized radio station means a radio-communication service operating in accordance with the Communication Act. The operation of the low-power radio-frequency devices is subject to the interference caused by the operation of an authorized radio station, by another intentional or unintentional radiator, by industrial, scientific and medical (ISM) equipment, or by an incidental radiator. 29 Cisco Catalyst 9136I Series Access Points Chinese Translation English Translation Low-power Radio-frequency Devices Technical Specifications 4.7 Unlicensed National Information Infrastructure 4.7.5 4.7.6 4.7.7 Within the 5.25-5.35 GHz band, U-NII devices will be restricted to indoor operations to reduce any potential for harmful interference to co-channel MSS operations. The U-NII devices shall accept any interference from legal communications and shall not interfere the legal communications. If interference is caused, the user must stop operating the device immediately and can't re-operate it until the harmful interference is clear. Manufacturers of U-NII devices are responsible for ensuring frequency stability such that an emission is maintained within the band of operation under all conditions of normal operation as specified in the user manual. Operation of Cisco Catalyst Access Points in Brazil This section contains special information for operation of Cisco Catalyst access points in Brazil. Access Point Models C9136I-Z Certification Number xxxxx-xx-xxxxx 30 Cisco Catalyst 9136I Series Access Points Communications, Services, and Additional Information Figure 5 Brazil Regulatory Information Este equipamento no tem direito proteo contra interferncia prejudicial e no pode causar interferncia em sistemas devidamente autorizados. Portuguese Translation English Translation This equipment is not entitled to the protection from harmful interference and may not cause interference with duly authorized systems. Declaration of Conformity Statements All the Declaration of Conformity statements related to this product can be found at the following location:

http://www.ciscofax.com Communications, Services, and Additional Information To receive timely, relevant information from Cisco, sign up at Cisco Profile Manager. To get the business impact youre looking for with the technologies that matter, visit Cisco Services. To submit a service request, visit Cisco Support. To discover and browse secure, validated enterprise-class apps, products, solutions and services, visit Cisco Marketplace. To obtain general networking, training, and certification titles, visit Cisco Press. To find warranty information for a specific product or product family, access Cisco Warranty Finder. Cisco Bug Search Tool Cisco Bug Search Tool (BST) is a web-based tool that acts as a gateway to the Cisco bug tracking system that maintains a comprehensive list of defects and vulnerabilities in Cisco products and software. BST provides you with detailed defect information about your products and software. 2021 Cisco Systems, Inc. All rights reserved. Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:

www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1721R) 31 Cisco Catalyst 9136I Series Access Points Cisco Bug Search Tool 32

A Model:[C97361-B Cisco Catalyst 91361 Access Point cisco Input: 42.5-57V = 0.83-1.11A Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134 USA FC FCC ID: LDKMU6CR2417, This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:(1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. LISTED http://cisco-returns.com L.T.E. E145532 SEE MANUAL BEFORE USE PID VID: C9136I-B VO1 BARCODE SIN: 12345679ABC BARCODE MAC: XXXXXXXXXXXX BARCODE Made in China BARCODE AT-A0XXXX-01_XX Manufacturing Date: MM/YYYY

WARNING:pdfminer.pdfpage:The PDF <_io.BufferedReader name='/Volumes/Scratch/Incoming/eg-scratch/6457244.pdf'> contains a metadata field indicating that it should not allow text extraction. Ignoring this field and proceeding. Use the check_extractable if you want to raise an error in this case Label Location Information EUT (Bottom View) Label Location

Cisco Systems, Inc. 170 West Tasman Drive, San Jose, CA 95134 USA Attestation Letter CFR 47 2.911(d)(5)(i) Filing February 23, 2023 FEDERAL COMMUNICATIONS COMMISSIONS Authorization and Evaluation Division 7435 Oakland Mills Road Columbia, MD 21046 Ref: Attestation Statements CFR 47 2.911(d)(5)(i) Filing FCC ID: LDKMU6CR2417 Cisco Systems Inc certifies that the equipment for which authorization is sought is not covered equipment prohibited from receiving an equipment authorization pursuant to section 2.903 of the FCC rules. Sincerely, Samuel Kim Title: Leader, Hardware Engineering Tel: +1 408 527 1446 Email: samukim@cisco.com Company Name: Cisco Systems Inc Address: 125 West Tasman Dr, San Jose, CA 95134 CFR 47 2.911(d)(5)(i) Attestation Letter

Attestation Letter CFR 47 2.911(d)(5)(ii) Filing February 23, 2023 FEDERAL COMMUNICATIONS COMMISSIONS Authorization and Evaluation Division 7435 Oakland Mills Road Columbia, MD 21046 Ref: Attestation Statements CFR 47 2.911(d)(5)(ii) Filing FCC ID: LDKMU6CR2417 Cisco Systems Inc certifies that as of the date of the filing of the application, the applicant is not identified on the Covered List as an entity producing covered equipment. Sincerely, Samuel Kim Title: Leader, Hardware Engineering Tel: +1 408 527 1446 Email: samukim@cisco.com Company Name: Cisco Systems Inc Address: 125 West Tasman Dr, San Jose, CA 95134 CFR 47 2.911 (d)(5)(ii) Attestation Letter

WARNING:pdfminer.pdfpage:The PDF <_io.BufferedReader name='/Volumes/Scratch/Incoming/eg-scratch/6457235.pdf'> contains a metadata field indicating that it should not allow text extraction. Ignoring this field and proceeding. Use the check_extractable if you want to raise an error in this case Cisco Systems, Inc. 170 West Tasman Drive, San Jose, CA 95134 USA February 23, 2023 FEDERAL COMMUNICATIONS COMMISSIONS Authorization and Evaluation Division 7435 Oakland Mills Road Columbia, MD 21046 Subject: Description of Permissive Change Dear Sir/Madam, We, Cisco Systems Inc hereby want to apply for CIIPC the following project(s):

FCC ID: LDKMU6CR2417, Model: C9136I-B This project is a Permissive Change II submission because Cisco Systems, Inc. uses the third radar engine in C9136I-B by allowing additional DFS functions. Please refer to following for detailed information:

Radio SoC used in C9136I-B has 3 Radar detection engines. We were using two of those engines to support DFS in Tri-Radio/dual-5G mode. For this feature we are using the third engine. For example:

First 5G radio (5G1) serving clients on channel 52 Second 5G radio (5G2) is serving clients on channel 100 We use 2 radar engines to detect radars on these two serving channels. Suppose we want to move 5G1 to channel 64, then we tune the third radar engine to channel 64 and run CAC for 60 seconds. If No radar is found then we move 5G1 to channel 64. While testing third engine for Radar detection on channel 64 during CAC, we run 18% downlink traffic on 5G1 Cisco Systems, Inc. 170 West Tasman Drive, San Jose, CA 95134 USA For the testing procedure, we based on the TCB Workshop Slides as the guidance

(from April 11, 2018, presentation covering Zero Wait DFS presented by Dusmantha Tennakoon) 1. Configure the EUT for current channel with downlink traffic (greater than 17%

duty cycle) to the client. 2. Send the off-channel pre-CAC command for the future channel. 3. Start statistics test on future channel (without configuring the EUT to the future channel), while data is transmitting on the current channel. a. Monitor console communications for detection messages on the future channel. 4. Run 30 trials. 5. Record the results. Based on the above information and testing procedure, we confirmed above modifications didnt affect the RF sections. Cisco Systems, Inc. 170 West Tasman Drive, San Jose, CA 95134 USA We affirm that between BACL and Cisco Systems Inc, any difference in understanding, including test plan, measurement methods, applicable standards, and relevant procedures and processes, have been resolved before testing activities. This authorization is valid until further written notice from the applicant. Sincerely, Samuel Kim Title: Leader, Hardware Engineering Tel: +1 408 527 1446 Email: samukim@cisco.com Company Name: Cisco Systems Inc Address: 125 West Tasman Dr, San Jose, CA 95134

Cisco Systems, Inc. 170 West Tasman Drive, San Jose, CA 95134 USA FCC Agent Authorization February 23, 2023 FEDERAL COMMUNICATIONS COMMISSIONS Authorization and Evaluation Division 7435 Oakland Mills Road Columbia, MD 21046 Subject: Agent Authorization To whom it may concern:

We Cisco Systems Inc the undersigned, hereby authorizes Bay Area Compliance Laboratories Corp. To act on its behalf in all matters relating to application for Equipment authorization, including the signing of all documents relating to these matters. All acts carried out by Bay Area Compliance Laboratories Corp. on our behalf shall have the same effect as our own action. We, the undersigned, hereby certify that we are not subject to a denial of federal benefits, that includes FCC benefits, pursuant to Section 5301 of the Anti-Drug Abuse Act of 1988, 21 U.S.C. 862. This authorization is valid until further written notice from the applicant. Sincerely, Samuel Kim Title: Leader, Hardware Engineering Tel: +1 408 527 1446 Email: samukim@cisco.com Company Name: Cisco Systems Inc Address: 125 West Tasman Dr, San Jose, CA 95134

WARNING:pdfminer.pdfpage:The PDF <_io.BufferedReader name='/Volumes/Scratch/Incoming/eg-scratch/6457234.pdf'> contains a metadata field indicating that it should not allow text extraction. Ignoring this field and proceeding. Use the check_extractable if you want to raise an error in this case Cisco Systems, Inc. 170 West Tasman Drive, San Jose, CA 95134 USA FCC Confidential Authorization February 23, 2023 FEDERAL COMMUNICATIONS COMMISSIONS Authorization and Evaluation Division 7435 Oakland Mills Road Columbia, MD 21046 Subject: Confidentiality Request regarding application for certification of FCC ID: LDKMU6CR2417 In accordance with Sections 0.457 and 0.459 of the Commissions Rules, Cisco Systems Inc hereby requests long-term confidential treatment of information accompanying this application as outlined below:

Operation Description Software Security Declaration Letter As well as short-term (180 days) confidential treatment of information accompanying this application as outlined below:

Test Set-up Photos The above materials contain proprietary and confidential information not customarily released to the public. The public disclosure of these materials provides unjustified benefits to its competitors in the market. Sincerely, Samuel Kim Title: Leader, Hardware Engineering Tel: +1 408 527 1446 Email: samukim@cisco.com Company Name: Cisco Systems Inc Address: 125 West Tasman Dr, San Jose, CA 95134 QA-FR-172-A

Cisco Systems, Inc. 170 West Tasman Drive, San Jose, CA 95134 USA Attestation Letter for Agent - FCC February 23, 2023 FEDERAL COMMUNICATIONS COMMISSIONS Authorization and Evaluation Division 7435 Oakland Mills Road Columbia, MD 21046 Ref: Attestation Statements Part 2.911 (d)(7) Filing FCC ID: LDKMU6CR2417 Cisco Systems Inc. certifies that, as of the date of the application filing, Cisco Systems Inc is our designated U.S. agent for the service of process for the above-referenced. FCC ID: LDKMU6CR2417. Cisco Systems Inc agrees to maintain an agent for no less than one year after the grantee has terminated all marketing and importation or the conclusion of any Commission-related proceeding involving the equipment. Cisco Systems Inc accepts, as of the date of the filing of the application, the obligation of the designated U.S. agent for service of process for the above-referenced FCC ID. Designated U.S. Agent Information:

Company Name: Cisco Systems Inc Address: 125 West Tasman Dr, San Jose, CA 95134 Contact Person: Samuel Kim Title: Leader, Hardware Engineering Tel: +1 408 527 1446 Email: samukim@cisco.com Sincerely, Applicant Name Applicant Printed Name Cisco Systems Inc Samuel Kim Applicant Signature

Confidentiality Request Letter Date: October 8, 2021 Federal Communications Commission Authorization and Evaluation Division Subject: Request for confidentiality FCC ID: LDKMU6CR2417 To whom it may concern:

Short-term Confidentiality Pursuant to Public Notice DA 04-1705, and in order to comply with the marketing regulations in 47 C.F.R. 2.803 and the importation rules in 47 C.F.R. 2.1204 while ensuring that business-sensitive information remains confidential until the actual marketing of newly authorized devices, we are request the Commission grant temporary confidential treatment and not release the following attachments for routine public disclosure until 2021/12/22 after the grant date. 1. Internal Photographs 2. External Photographs 3. Users manual 4. Test Set up photos Permanent Confidentiality from public disclosure indefinitely. 1. Block Diagram 2. Schematics Pursuant to the provisions of Sections 0.457 and 0.459 of Commissions rules (47CFR0.457, 0.459), we are requesting the Commission to withhold the following attachment(s) as confidential document 3. Operational Description / Software Security For U-NII Devices It is our understanding that test measurement reports and correspondence during the certification review process cannot be granted confidential treatment, and such information will be available for public review once the grant of equipment authorization is issued.

: Cisco Systems Inc

: 125 West Tasman Drive, San Jose, California 95134-1706, United States Sincerely, Applicant Address Signature

_________________________________ Name and Job Title.

: Haiwen Lu, Compliance engineer E-mail Tel.

: haiwlu@cisco.com

: +86 21-2405-7511

The following people are authorized by Cisco Systems to sign documents for FCC product approval under FCC Grantee code LDK, and ISED product approval under ISED registration 2461N on behalf of the company. Further this right is extended to any regular Cisco employee as deemed necessary. 09/30/2020 Subject : Authorized signatures Louie Castro Jialei Xue Adam Walb Lillian Yao Howard Ji Haiwen Lu Jose Aguirre Allesandro Erta Emily Jaser Bogdan Tudosoiu Rekha Simha Guangmin Ouyang Andrea Orioli Rochelle Jacobsen Regards Samuel Kim Cisco Systems EDCS-1216337 11/23/2016 Guidance from ISED in regards to Signatures on Forms In regards to filing an application for radio certification, a CB has told us that only the Canada Rep can sign the forms. This is in conflict with information I received via my discussions with ISED at and what was done in the past . Our document clearly list the Canada rep but the applications are processed by our certification group responsible for addressing worldwide approvals. Please pride clarification as to allow us to address with the CB David A. Case ___________________________________________________________ Good morning David, The test report and Annex A/B of RSS-102 are to be signed by the person who evaluated the device or supervised the evaluation of the device which is generally the Testing Lab. For Annex C, the statement is similar but the evaluation in this case could be done by the applicant for exemption, therefore the form could be signed by the applicant or the test lab. The other documents such as Appendix A/B of RSP-100, letter of confidentiality, listing agreement letter can be signed by any designated person from the Applicant's company. He/she does not need to be the actual contact person registered with IC. Appendix B can also be signed by the test lab. Also, the Applicant company can authorize an agent to sign on their behalf. If the agent authorization letter is attached with the application documents, then IC will accept the agent's signature on behalf of the Applicant's company as well. However, please keep in mind that there are some documents such as the Canadian Representative letter and Authorization letters for Multiple Listing and Transfer of TAC that must be signed by appropriate companies and not the applicant. Regards, Certification and Engineering Bureau, Engineering, Planning and Standards Branch Innovation, Science and Economic Development Canada / Government of Canada (26) ic.certificationbureau-bureauhomologation.ic@canada.ca Tel.: 613-990-4218 / ATS 1-866-694-8389 Bureau d'homologation et services techniques, Direction gnrale du gnie, de la planification et des normes Innovation, Sciences et Dveloppement conomique Canada / Government of Canada/ Gouvernement du Canada (26) ic.certificationbureau-bureauhomologation.ic@canada.ca Tl.: 613-990-4218 / TTY 1-866-694-8389 EDCS-1216337

Power of Attorney Date: October 8, 2021 Federal Communications Commission Authorization and Evaluation Division 7435 Oakland Mills Rd Columbia MD 21046-1609 Subject: Product Certification Representative Authorization Letter FCC ID: LDKMU6CR2417 Product Name: Cisco Catalyst 9136I Access Point To whom it may concern:

We the undersigned, hereby authorize following person to act as our agent in the preparation of an application for equipment authorization to the FCC Rules and Regulations. Sporton International Inc. Address : No.52, Huaya 1st Rd., Guishan Dist., Taoyuan City 333, Taiwan Name

: Leo Huang Job Title : Manager e-mail

: Leohuang@sporton.com.tw We further certify that neither the applicant nor any party to this application, as defined in 47 CFR Ch. 1.2002(b), is subject to a denial to Federal benefits, that include FCC benefits, pursuant to section 5301 of the Anti-Drug Abuse Act of 1988, 21 U.S.C. 862. This appointment also includes the authority to complete FCC Form 731 on our behalf and 125 West Tasman Drive, San Jose, California 95134-1706, United sign the application as an authorized agent. Applicant

: Cisco Systems Inc Address States

Signature Name and Job Title.

: Haiwen Lu, Compliance engineer _________________________________ E-mail Tel.

: haiwlu@cisco.com

: +86 21-2405-7511

Date: October 8, 2021 Federal Communications Commission Authorization and Evaluation Division 7435 Oakland Mills Rd Columbia MD 21046-1609 To Whom it may concern, Subject: Declaration of composite/rated equipment for FCC ID: LDKMU6CR2417 We, the undersigned, would like to declare that the composite portion catagorized as Class B personal computers and peripherals has been authorized under the Supplier's Declaration of Conformity (SDoC) procedures. Applicant

: Cisco Systems Inc Address States 125 West Tasman Drive, San Jose, California 95134-1706, United Sincerely, Signature

Name and Job Title.

: Haiwen Lu, Compliance engineer _________________________________ E-mail Tel.

: haiwlu@cisco.com

: +86 21-2405-7511

Date: October 8, 2021 Federal Communications Commission Authorization and Evaluation Division 7435 Oakland Mills Rd Columbia MD 21046-1609 Subject: Letter of Declaration on LPI Operation FCC ID: LDKMU6CR2417 Product Name: Cisco Catalyst 9136I Access Point To whom it may concern:

We the undersigned, hereby attest that this device complies with the following requirements of Part 15E of the FCCs rules for the 6GHz bands:

a.) Statement describing the method the indoor access point uses to control the associated client/subordinate power control. 1. Protocol attestation statement:

The device designs meet the IEEE requirements of sending regulatory info in TPE. An 11ax IEEE AP's TPE element has information fields for EIRP/PSD limits for connecting client devices. The TPE information is contained in the AP signals

(e.g.. beacon, probe response , FILS Discovery frames and the Reduced Neighbour Report element) and used by connecting clients to ensure that it knows the regulatory TX powers it is allowed to transmit at. In addition there is a "regulatory field" in the AP beacon and probe response frames which details the AP type when the client associates to the AP. Both the "regulatory field" and the TPE element are included in the same message and both are mandatory for IEEE devices. At association an 11ax client device will always know what type of AP it is connecting to. 2. Statement acknowledging device restrictions:

a. Low-power indoor Access Point. Access Point operating in the 5.925-7.125 GHz band shall be supplied power from a wired connection, has an integrated antenna, is not battery powered, and does not have a weatherized enclosure. b. This device's operation will not be allowed on oil platforms, cars, trains, boats, and aircraft, except that operation of this device is permitted in large aircraft while flying above 10,000 feet. c. Indoor access points are prohibited for control of or communications with unmanned 125 West Tasman Drive, San Jose, California 95134-1706, United aircraft systems, including drones. Sincerely, Applicant

: Cisco Systems Inc Address States

Signature Name and Job Title.

: Haiwen Lu, Compliance engineer _________________________________ E-mail Tel.

: haiwlu@cisco.com

: +86 21-2405-7511