Showing results for 
Search instead for 
Did you mean: 
Javier Contreras
Cisco Employee
Cisco Employee

The WLC Config Analyzer home has moved to Cisco DEVNET.  See:


We also have a cloud version of the tool:


Historical info

(please use new forum for updates)

Wireless LAN Controller (WLC) Config Analyzer


Click here to Download

To request access, send an e-mail to Please include your username. Cisco employees do not need to request.

  • New version 4.0 Nov 2015
  • You may need to install .NET 3.5 before using it.External link to download:



March 31 2015. Version 3.6.5


  • Tool tips added on AP grid
  • AP MIC expiration warning
  • Flex Policies information on WLAN table


  • Minor parsing errors
  • Wrong text message on 100003
  • Wrong error on missing information on WLANS for custom web profiles

February 04, 2015. Version 3.6.4


  • Typos on messages
  • RF health exception if neighbor  AP had no power level
  • Incorrect calculation of side channel interference could lead to zero health
  • Incorrect parsing of mobility peers when new mobility is enabled
  • No text for message 2005
  • WLAN data rates nor parsed properly, display error
  • Message tab columns had incorrect order
  • NGWC:
    • Parsing error on coverage information line
    • Parsing error on peer to peer  wlan state
    • Corrected WLAN table display
    • Parsing of AP groups

January 15, 2015. Version 3.6.3



  • 11b channel monitor incorrectly parsed, leading to false positive report
  • 11b RF group peers not properly tracked
  • Corrected text for messages 40043, 30062 for clarity
  • Fixed false detection of telnet enabled on WLC
  • Added detection for parsing error on DCA Monitor channel line
  • Fixed password length check (120013)


December 17, 2014. Version 3.6.1



  • IOS-XE improved support: best practices, mobility parsing, GUI display. Partial support for RF summary, 3.7 RF information
  • Serial number in AP summary table
  • Filter per band in AP RF summary table
  • On Channel Neighbors count in AP RF summary



  • Power distribution graph level 1 not displayed
  • Exception while parsing 5760
  • RF Health calculation for Side channel noise in 5 Band
  • RF problem finder window scale issues on VMWare
  • High SNR client stats missing


November 20, 2014. Version 3.5.3

  • Fixed display of WPA AES state 
  • Fixed exception when there is a parsing error on power levels per radio

October 10, 2014. Version 3.5.2

  • Detecting Empty mesh BGN in AP config
  • Incorrect reporting of standalone TKIP in use, when there is no dot1x or PSK policies set
  • Corrected warning for empty IP Address on redundancy interfaces
  • Message wmm required for 11ac/11n not displayed when parsing a single wlc
  • Exception on 7.3 configs without RF profiles
  • Improved error reporting on parsing lines
  • Incorrect parsing of flex AP mode
  • Partial fix for window size problem on rf problem finder tool. Disable Aero interface in Windows if still having problems.
  • Handles gracefully AP list corruptions (adds AP creation in AP group information)
  • Properly parses Channel 14 Interference/Noise data as NA, in ETSI APs
  • Fix on Nearby list processing, if last line in AP is corrupted
  • Fix on parsing of system info\Management IP address
  • Fixed logic of message 30062 (false positive)
  • Fixed duplication of message 30057 for some scenarios
  • Fixed parsing of Static WEP state
  • Null error on best practices checks for some configs
  • Fixed parsing error on incorrect line separator
  • Fixed error on percentage display on best practices summary
  • 43 new checks
  • Best Practices score analysis
  • Flexgroup and FlexAP support
  • Displays DHCP proxy per interface, compares across controllers
  • Parsing, comparison between WLCs, and display of global user idle timeout
  • Parsing, comparison between WLCs, and display of WiFi direct, wlan sleep timer/sleeping client feature
  • Config Comparison across controllers of DCA mode, selection interval, metric contributors, channel list,  and channel width across controllers                   
  • Config Comparison across controllers of TPC mode, power threshold 
  • Mesh security mode parsing, comparison across controllers
  • Displays DCA metric contributions
  • New Security  Checks category
  • WLAN parsing of 11r, SKC, PMF, comparison across controllers
  • Parsing, comparison between WLCs, and display of critical management password policies                           
  • WLAN table rewrote for simplification on information displayed, less columns, adds support for 11r, PMF
  • Show values to the RXSOP and CA info messages
  • AP power state and flex group name to AP config table
  • New AP group CSV export            
  • 8.0 Support. Added RF profile DCA bandwidth, Fixed Parsing error on QinQ AP group info


July 19, 2014. Version 3.4.2

  • New Best Practices analysis tool. Focused on checking if "good to use" features are in place
  • WPS section parsing
  • SSH/Telnet/Fast SSID parsing and display
  • Checks for telnet enabled, DHCP proxy mismatch, NTP sync, Management over Wireless added
  • Improved readability of WLC/Site summary pages
  • Added QoS, Local profiling, dot1x info to wlan table 
  • New Report Center, to launch all supported report files. Disabled default report creation
  • Significant speed improvements for Neighbor calculation on large networks
  • Radius server line parsing error if line was incomplete
  • RF Index calculation exception on some files

June 27, 2014. Version 3.3.1

  • Added message summary per WLC/Site
  • HTML report  ad CSV file generation is now disabled by default
  • New Report Center being added (work in progress)
  • Correct library installation for Chart component on some PCs
  • Moved to .Net 3.5 client profile for lower memory/startup time
  • Exception error on RF Health calculation when unknown nearby data was found
  • Fixed RF Health metric for side channel noise/interference

June 27, 2014. Version 3.3.0

  • Added warning if TKIP standalone is used
  • WLAN table enhancements: displays encryption types, AVC
  • AP graph can be filtered by AP group
  • Improved message 60011 with compensated power data
  • New RF Health metric for ease of detection of problematic areas
  • Corrects parsing of 4.2 WLC files
  • Reduces problem on .Net library load (lower time when opening config set for first time)
  • Fixes problem on  AP manager check with vlan untagged scenario
  • Fixes problem on redundancy parameter parsing
  • Fixes logic of message 30065

April 23, 2014. Version 3.2.4

  • Added partial support for 5760/3850 NGWC controllers. You need to collect "sh tech and sh tech wireless" on same file for each controller (one file per ngwlc)
  • Added parsing and display of wlan count per radio on AP config
  • Updated warning for controllers with deferred or affected by security advisory versions
  • Parses, checks and displays Local EAP status per WLAN
  • Parses, checks and displays Rogue Policies, compares settings between controllers
  • Parses, checks and displays Clean Air config, compares settings between controllers
  • Chart for Client SNR distribution
  • Best practices 2.0 Checks
  1. Recommend to disable 1,2,5.5,11 data rates
  2. Warn if more than 4 SSIDs active per radio
  3. Recommend multicast multicast mode for all cases
  4. Warn if mobility group (same name) > 15 controllers, shows message to reflect that it should cover only the RF roaming space
  5. Recommend low radius timeout depending on usage scenario (not a general change)
  6. Warn if EAP identity if <10 sec, and when is needed
  7. Warn if using internal DHCP server due to scalability issues
  8. Warn if using local EAP, due to scalability on very large networks
  9. Recommend to change EAP retries to 4, timeout to 400ms
  10. Warn if tacacs timeout is short, recommend long times for OTP
  11. Recommend to have minimum rogue RSSI to -80
  12. Recommend to disable all rogue auto contain settings, unless absolutely needed for security reasons
  13. Recommend AVC enabled
  14. Warn if Fast SSID is not enabled for Apple Clients
  15. Warn if cleanair is not enabled
  • Parsing of Tacacs server entries with management timeout values
  • Parsing of User Idle timeout per wlan when it is disabled
  • Wrong detection of AP on high co-channel
  • Corrected redistribution of MS Chart Control (now properly included, and prerequisite)


March 21, 2014. Version 3.1.1

  • Application error when clicking AP name. Slot0 was not parsed
  • Multicast address message only displayed if multicast is enabled (30034)
  • RSSI client count calculation error for RF Summary

March 20, 2014. Version 3.1.0

  • Adds support for 7.4 to 7.6 versions
  • RLAN support
  • Displays Redundancy info for 7.6
  • Almost full parsing of WLAN configuration
  • Displays AP username in AP list
  • Parses and displays 802.11n, 802.11ac network status
  • Changes how text information is displayed, for ease of reading
  • Added Radius Auth Call Station ID support
New Checks
  • Warns if 11ac or 11n radios are present, but WMM is disabled on the WLAN            
  • Warns if 11ac or 11n radios are present, but 11n or 11ac support  is disabled on the controller              
  • Compares Radius Auth Call station ID across controllers
  • 78 parameters compared for matching WLANs across WLCs.
  • Warns if using HA, and no vlan tagging on management interface
  • Error while parsing mobility peers
  • Corrected that RSSI/SNR client percentage on RF summary per controller, are calculated for 1 controller, and not for all loaded
  • Corrected High RSSI client count per controller
  • Fixed wrong info on Radius aggressive failover status
  • Parsing of Radius servers on new versions
  • Parsing error on Mobility peers



RF Health Metric

New in Version 3.3.0

New experimental troubleshooting tool: “RF Health”
This is a modification of the RF index to change the format to a 0 to 100 metric, the higher the better, for a easier to use experience
it should work  properly to isolate what areas/Aps of the deployment are having a bad RF state, affecting clients.

RF Health will try to calculate different metrics applicable to RF quality on the AP, and convert to a single 100 based scale. It takes into consideration things like low SNR client count, co-channel interference, channel utilization for nearby Aps, noise, etc.
It currently supports 20/40 channel width, and handles properly bonding scenarios.
You can open “RF problem finder” to get details on the metric per type, per AP, for in depth analysis
Please provide your feedback on the metric, for additional improvements, change on default values, etc.


WLC Config Analyzer Checks



General Usage: (you can subscribe)

Bug reports/issues/features:

Fixing Voice Error Messages


WLC Config Analyzer FAQ

How to Use


Joseph Urban

Should "WLC" acronym be defined in the first line?

Patrick Repp
Community Member

Nice tool.

When will it be possible to load and analyze WLC 6.x software versions?

Javier Contreras
Cisco Employee
Cisco Employee


I will be adding 6.0 specific checks to version 2.0 in the short future... please stay tunned

You can process 6.0 today, just no special checks yet.

Kayle Miller
Rising star
Rising star

Javier, when I try to install it, it says that it's already installed, do you have any thoughts on this?

Javier Contreras
Cisco Employee
Cisco Employee

Hi Kayle

I would need more details.

Could you send us your install logs, which version are you installing, and on which operating system (version, language)?  Please use this address to report any issues with the application:


Javier Contreras
Cisco Employee
Cisco Employee


Well, not really... :-)

WLC is Wireless Lan Controller,  acronym used extensively across most Cisco public documentation.


Leo Laohoo
VIP Community Legend VIP Community Legend
VIP Community Legend



How do you use the program to compare 2 or more wireless controller configs

Javier Contreras
Cisco Employee
Cisco Employee

Hi Joseph

Two ways of doing it:

procedure 1

1. Opening different configuration sets. click on the first icon in the tool bar, load a config file

2. Click again on same icon, it should create a new window, open the second WLC

3. You now have 2 configs showing up in the screen, you can now compare manually

procedure 2

1.  put both config files on same text file

2. load them on the application (it supports up to 24 WLCs per config set)

3. It will do automatic comparision for mobility, wlan, interface, etc

if you load 2 times the same config, you will get several errors on duplicate addreses, system name and/or AP names, but sometimes people do it, so compare wlan configuration over time




Thanks for responding to my email last night about the easiest way to get started. I was able to use this tool to identify several weak areas in my configuration today, and thanks to the tips the utility provided, my wireless network (voice and data) are running better than ever! I noticed dramatically better coverage in a few areas where coverage had previously been low due to some radio misconfigurations, and my call quality while roaming is much improved as well since I was able to identify a few settings that were negatively impacting roaming abilities.

Thanks for this utility, and all your efforts on this project!


For some reason I'm not able to scroll the AP list in the TPC Prediction dialog.  Both scroll bars are disabled.  At first I thought it might be a Win7 thing but I've had the same issue under XP.  Am I doing something wrong?

Javier Contreras
Cisco Employee
Cisco Employee


TPC predictor was a "experimental" test I did time ago for a case. It needs serious re-work, to match the new TPC algorithms in 7.0 and 6.0 latest code. The issue you mention, that the tabs and grid scroll bars are not responsive is fixed on next build (it was minor detail) , but I will disable the  feature altogether until I have time for  2.3   or 2.4  is out, when I plan to introduce several RF analysis ideas I have around.

the current output is not entirely correct. Anyway, if you have ideas or feedback for this feature, feel free to contact me to discuss inclusion on next version.


Rising star
Rising star


I cobbled together an expect script to pull the run-config from a controller and all looks well on the output, but config analyzer compains "controller information not found in selected file"  The scripts are at

I can modify them as needed, but I am not sure where the analyzer is looking for that info.


Eric Garnel

Javier Contreras
Cisco Employee
Cisco Employee

Hi Eric

Can you send me the resulting output file from your script?

I can have a quick look and see what is missing.

Normally, that message means that WLCCA did not see the "System Inventory"  line on the beginning of the file

(that is used as marker for start or new config)


Rising star
Rising star


I have cleaned up the scripts, and the analyzer recognizes the output, but kicks out parsing errors.

the updated info is at:

the raw output from the controller is 1 very long line with ^M^Ms sprinkled throughout.  In order to pull out the expect user pass & ip info, the file needs to be massaged

here is a sample of the output:

System Inventory

NAME: "Chassis" , DESCR: "Cisco Wireless Controller"

PID: WS-SVC-WISM-1-K9, VID: V01, SN: FAM121804PT

Burned-in MAC Address............................ 00:1F:CA:BE:C9:E0

Maximum number of APs supported.................. 150

System Information

Manufacturer's Name.............................. Cisco Systems Inc.

Product Name..................................... Cisco Controller

Product Version..................................

RTOS Version.....................................

Bootloader Version...............................

Emergency Image Version..........................

Build Type....................................... DATA + WPS

System Name...................................... WLCNORTH

System Location.................................. North.2nd_floor.Ntelecom

System Contact................................... Eric Garnel

System ObjectID..................................

IP Address.......................................

System Up Time................................... 86 days 3 hrs 41 mins 3 secs


Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers
Quick Links