Home

XMS User Manual - Moonblink Communications

1. 802 11a 802 11b g Threshold Settings 802 114 Fragmentation Threshold 2346 H 802 11a RTS Threshold 2347 H Java Applet Window Figure 209 802 11a RF Settings 802 11a Global Setting Details 9 Supported Data Rates The data rates that are enabled here are the 802 11a data rates that your Arrays will use for transmissions to clients on the network Check or uncheck the boxes to define which data rates are supported The default is for all 802 11a data rates to be supported 9 Basic Data Rates The data rates that are enabled here define the minimum set of 802 11a data rates that a wireless station must support if it wants to associate with the Arrays Check or uncheck the boxes to define the basic data rates Managing Configuration with Policies 331 e XIRRUS Management System required by an 802 11a client The default for the basic 802 11a data rates is to have 6 Mbps 12 Mbps and 24 Mbps enabled 802 11a Threshold Setting Details 802 11a Fragmentation Threshold This is the maximum size for directed data packets transmitted over 802 11a IAPs Larger frames fragment into several packets with their maximum size defined by the value you enter here Smaller fragmentation numbers can help to squeeze packets through in noisy environments Enter a value in this field between 256 and 2346 o
2. Selection Description Criterion for details Group Include only Arrays that are members of the selected Array group Map Include only Arrays that are members of the selected map Array Include only the selected Array SSID Include only the selected SSID Table Row Limit Total number of rows Date Time Include only this time range Schedule Run the report at this time See Schedule on page 382 Email Report To After running email the report See Email Report To on page 382 Station errors reported in this window include the packet error rate and packet retry rate where both categories are based on a percentage of the total number of these events detected by the system Figure 250 shows an example of the Error report for stations The graph shows the packet error and packet dropped error percentages for all Arrays Table Details for the Station Errors Report The results shown in this report are organized by the following column headers e Array Hostname The host name of the Array that the station is associated with Station Hostname This column shows the host name of each client station in the report Managing Reports 397 e XIRRUS Management System 9 Station MAC Address This is the station s MAC address XIRRUS XMS Reports Station Errors Time Span Six hours Thursday 04 21 2011 10 25 PDT to Thursday 04 21 2011 16 25 PDT Average Station Errors 20 mS
3. 62 Miewang Row Details sacuiteomesneienitun odo en paar EORR 62 Searching for BVents ssip aii eb mida ER HH EA EIS pa EHE 64 Keyboard ShOFtetts caecos REA MED Ho Pe RIS dent UU RBS EIE oat REEL TEE KEIN eEES 65 Discovering the NetWork osoxxs sxonu puce annu xa xa taxEs Fan pex aas 67 Overview of Starting IDISCOVeLY acaadisaatec amr Eene E EAE OESR 68 How Discovery Works ccna aa 70 Viewing Your Discovered Networks and Devices 72 Scheduling DiscOVexty iin ctr ett ene etta eR iore HIR ERR CER REL ENSURE 74 Adding INeEWOEK uii nr etr ERR IR kae RAR E EREE Ra eeann aR ARANEAE Ee the 78 Adding or Deleting Array Shell Authentication Entries sss 80 Adding or Deleting SNMPv2 and SNMPVv3 Entries sess 81 Modifying ai Network aoc emam n an od nce Ho EE EEA EREE 84 Excluding a Network from Discovery nter tent retient 84 Rediscovering a INeEWOTK aa iicet n ertet tinte te peer inb bre hne enit 85 Deletie a Netw Onke asap nho cn Biondi rerit 86 Adding an Array or PoGEB Injector a ere rame erede mr mine 87 Retresmnpa Device cao dettes asesino Ded Hide EE E 88 Deleting Device acces re tarte e eret e HER RI ERR EHE EREE 89 What If My Device Is Not in the Discovered Devices List 89 Using the DashDOOGFd ra unici acoeesc utei cac tcc n uE aa depn gars bci 91 Dashboard Overview qstisiaeaaiie bem cwipemia d ede ee inda 92 About Dashboard Datac
4. laast lesoere lio 10s KZ Locaton aa 020072 101994 xSsew906 000 76 10 1005 Txsoszsos 090t7 10 1005 Array List Heat Map RSSI Legend Map List Array Data Bar Figure 88 Main Map with RF Heat Contours Enabled The map shows all Arrays that have been explicitly placed on it see Adding Arrays to Maps on page 147 offering a convenient view of the Arrays 132 Working with Maps e Management System XIRRUS No default maps are provided in XMS 5 0 If you have created maps in a previous release of XMS they will be present after you upgrade When you first upgrade to 5 0 and later releases maps created in a pre 5 0 release of XMS will be automatically migrated See Migrating Maps from Earlier Releases on page 142 You may create new maps as described in Adding a New Map on page 144 The map window has the following parts The Map List The Arrays List The RF Heat Contour Map Map Toolbar Information Bars The Map List This list shows all of the maps in the XMS database Click on a map to display it If the currently displayed map has unsaved changes you will be asked whether to save the changes before the new map selection is displayed Filter wap Figure 89 The Map List You may use the Filter Maps field below the list to help find a map Type in any string that appears anywhere in the name of the desired map s As you type XMS narrows the Map List to maps that contain
5. 7g cem ee 0 g aps exsaeososiSa 7 7g meh e eas wos pema 7g Fiters Fema g Cont Fie dance Apply Cancel Figure 235 Policy Details 9 All Policy Types Choose a policy from the pull down list for the Global Policy or choose a policy for some or all of the policy types listed in this window The policies you choose here will be applied to the group when you click Apply Select None for each category of configuration that you want to leave as is on the Arrays You may select a Global Policy to apply this applies all of the policies that are included in the Global Policy If you select a Global Policy you may not select any other types of policies the rest of the window will be disabled 368 Managing Configuration with Policies e Management System XIRRUS If you do not select a Global Policy then you may select policies for some or all of the other policy types only one policy may be selected for each policy type Applying Your Array Groups Policy When finished click on the Apply button in the Array Groups Settings window to save the new policy Managing Configuration with Policies 369 e XIRRUS Management System Audit This function creates an audit trail record of all configuration changes that have been performed on your Arrays To access this function click on the Audit node in the Configuration section of the Tree then use either of the follo
6. 122 Security Managing Intrusions e Management System XIRRUS Detected Devices This section of the Devices window shows all of the potential rogue APs that have been detected by any of the Arrays in the Wi Fi network Filter Buttons Click to show only this class Array Group All Arrays Discovered XN08310800F41 XN08310800F41 XN08310800F41 00 16 b6 15 24 1b XN08310800F41 00 16 b6 f5 24 1b XS 39 10 100 40 00 22 55 42 64 c0 XN08310800F41 00 22 55 42 64 c0 XN08310800F41 00 24 d2 39 93 81 XN08310800F41 XS 39 10 100 40 ed 00 a0 fE ad ed7b XS 39 10 100 40 gt Find Next Search string Click to classify selected rogues or edit rules Color indicates classification Approved Known Blocked etc Figure 85 Devices Window Detected Devices Section Details e Filter Buttons The row of buttons along the top of this section shows a summary of the detected devices The total count of devices detected is shown along with the total in each class represented by color Hover the mouse over a button to display the name of the class Known Unknown etc Click a button to filter the list to show just the devices in that class The classes and their representative colors are Total This is the sum of the number of detected devices of all classes Each rogue is counted i
7. Services of xj Total 2 ls Columns Refresh Modify Execute Delete DNS 1 Yes 500 Information 0 0 0 0 information 0 0 0 0 Information 0 0 0 0 Information gt x Sysbg Yes 500 information 40 40 40 2 information 0 0 0 0 information 0 0 0 0 information Ea gt Figure 170 List of Services Policies The columns in this window show selected settings for the listed policies For information about changing the columns displayed see Selecting the Columns Shown in a Policy Window on page 220 Creating a New Services Policy A services policy is created so that you can configure all available servers at the same time including enabling and disabling specific servers assigning IP addresses for the servers and establishing settings that are unique to each server To create a new services policy click on the Add Policy button in the Services Policy window When the Add Policy window appears select Copy from a chosen Array recommended and choose a model Array or select Start from scratch as described in Adding a Policy on page 219 Click OK The Services window is displayed which is divided into four primary areas e DNS At least one DNS Domain Name System server should be set up for Arrays e NTP The NTP Network Time Protocol server manages the time settings for your Arrays including synchronizing the Array clocks with a universal clock from the NTP server This ensures that System Log time stamp
8. Shutting down the XMS Server Shutting down the server incorrectly can cause problems the next time you start XMS Use the following procedure 1 Close all clients You may use Admin Broadcast Message in the XMS client to alert users first 2 On the Status page click the Shutdown Appliance button 3 The Management Appliance will then gracefully shut down A confirmation notice is displayed immediately when the shutdown process is initiated It may take a few minutes for the Appliance to actually shut down and power itself off XMS Administration 507 e XIRRUS Management System Web Client Network Settings Select the Network link on the left to display the Network Settings page This page allows you to manage DNS settings for the server and set the IP address and transmission parameters for the Ethernet ports la w af e Monitor A configure 9 Reports AX Settings Help Logout General Network Settings Network Interfaces Hostname Kinsxvs Settings for ethO G Yes C Date amp Time Default Gateway Address 10 100 100 1 Ee Herten Yes C No Email DNS Domain fkimuscom Configuration Server Protocol C DHCP static IP Address 10 100 100 16 Polling DNS Server 1 10 100 10 10 DNS Server 2 302030 Subnet Mask 255 255 255 0 SSH Server Z E DNS Server 3 Auto Negotiate Yes C No Backup Leave entries blankto use DHCP assigned value Duplex G Full Half Server Logs n Settings for
9. XMS Administration 497 e XIRRUS Management System Creating a New User Account An XMS User Account is created so that you can set up authentication criteria for users To create a new user account click on the Add User button in the XMS Java client s User Accounts window The Manage User Accounts window is displayed Manage User Accounts This window contains fields for assigning a user account a user password and user privileges Manage User Accounts Add New User User Name New Password Group Admins ReadWrite Admins Readwrite R Users ReadOnly Apply Cancel Java Applet Window Figure 317 Manage User Accounts e User Name Enter a name for the new user 9 New Password Enter a password for this user Group Choose the privilege level from the pull down list either Admins Read Write or Users Read Only Saving Your XMS User Account When finished click on the Apply button in the Manage User Accounts window to save the new account 498 XMS Administration Management System XIRRUS Backup Manager This menu option allows you to schedule and manage backups of the XMS database from the XMS Java client For more information about the database please see About the XMS Database on page 501 It is crucial to establish a backup schedule since no default schedule exists on a newly installed XMS server From the Admin menu on the Menu Bar of the X
10. 12 Introduction e Management System XIRRUS Xirrus Management System Products The Xirrus Management system is offered in two forms 9 XM 3300 XM 3320 XM 3340 XM 3360 dedicated servers that are furnished with XMS software pre installed and ready to go 9 About XA 3300 CC a software only version of XMS that you may install on your own server hardware XM 3300 XM 3320 XM 3340 XM 3360 The Xirrus XM 3300 XM 3320 XM 3340 and XM 3360 Management Appliances operate as dedicated servers for the Xirrus Management System XMS The Management Appliance can manage up to 1000 Wi Fi Arrays over a Layer 3 network ideal for campus multi site enterprise or other large scale Wi Fi deployments The Management Appliance is provided as a 1U or 2U rack mountable chassis offering a centralized mechanism for managing Array configuration security settings and software revisions while monitoring your Wi Fi network s performance and health You can also control managed versions of Xirrus Power over Gigabit Ethernet PoGE power injectors and use them to turn Arrays on and off All models are delivered with XMS pre installed and ready to start up automatically when the system is booted The Management Appliance has the following advantages Compact 1U or 2U high rack mountable or free standing unit facilitates easy installation and offers high performance connections to your network s backbone and isolation of all management t
11. Apply J Cancel J Java Applet Window Figure 63 Modifying an Existing Network Excluding a Network from Discovery Since discovery can impact network performance it s advisable to limit discovery to Class C networks where possible Search Networks IP Address Subnet status 255 255 255 128 Enable Disable Figure 64 Disabling Discovery on a Network To prevent discovery from running on a network in the Search Networks list select the network and click the On Off button Note that discovery will not remove devices from its list if they are on a network where discovery has been disabled Devices remain on the list until you delete them manually 84 Discovering the Network e Management System XIRRUS Rediscovering a Network If you need to rediscover refresh an existing network simply disable and then re enable the network as follows Select a network from the list of available networks and click on the On Off button in the Search Networks section to disable discovery on that network Then click the button again to enable discovery Whenever the a network transitions to enabled discovery is triggered During the rediscovery process the status column in the Discover Devices Window indicates that network discovery for the selected network is in progress When the network has been successfully rediscovered refreshed by the system the status column indicates that the process is complete Fig
12. Auto Configure Channels Delete Remove from Map Assign Group Assign Policies Update Software Alarms and Events Reports Refresh Reboot Locate PoGe Injector b Figure 108 Array Management Drop down Menu Working with Maps 159 e XIRRUS Management System Map Settings Window This window provides tools that allow you to change the look of a map You may change the label name that the map uses and the data displayed on information bars To change map properties click the Edit Map Settings button on the map toolbar or right click the map in the Maps list and select Properties from the drop down menu The Edit Map Settings window has four separate pages which are accessible by making the proper selection from the tree on the left 9 Map Settings Information Bars three pages Array Data Map Data Location Data Map Settings xi Map Settings de Information Bars be Array Data MapName westoffice t4 Map Data Location Data Transfer image ra Background image Xirus Floor Plan NP GIF 27 Display units Feet m Cancel Figure 109 Map Settings Page Map Settings Map Name Specifies the label name of the map as it appears in the Tree and in the header bar of the map window Transfer Image Use this button to browse for the background image of your map and transfer the file to the proper location on the XMS server 160 Working with
13. Source 00 0f 7d 00 41 a2 Help URL Date Time Aug 17 2007 04 07 40 PM GroupName WebNMS Severity Figure 45 Row Details Expanded from a Row The XMS Java Client Interface 63 e XIRRUS Management System Searching for Events The XMS client interface provides a powerful search engine that allows you to search your network s database for monitored events based on the criteria you define This particular search feature is available for the Events and Audit windows only To search tables in other windows see Searching for Table Entries on page 61 To initiate a search from the Events window go to Edit in the Menu Bar and choose Search or click amp amp in the tool bar at the top left Search Status v starts with v Erica Q Search X Close Java Applet Window Figure 46 Using the Search Engine 64 The XMS Java Client Interface e Management System XIRRUS Keyboard Shortcuts Keyboard shortcuts are useful for experienced users who want to access monitor or manage their network more quickly than a typical mouse allows The following table shows the most commonly used keyboard shortcuts that are recognized by the XMS client interface Be aware that some shortcuts are the same but invoke different commands depending on which window is the currently active window It is assumed that only experienced users will take advantage of these k
14. Dashboard Stations iet ee IH rdi sa eie ries 96 Figure 71 Dashboard Thtoughp t ou ie eoe itta een 98 Iure72 Dashboard Security css nemine iren epe nn nee 100 Ligure 73 Dashboard Alar DiS ume cupa sten ie Pp ii ben ther 102 Figure 74 Bventsand Alarms Dy Artay ics eese da mese eiae 106 Figure75 Alarms Wind Ow i cce hier terere Fe e hes Pe HE ra Fen 107 Figure 76 Alarm Status Summary Select Buttons sssssssssesss 108 Figure 77 Alarmi LisE ence e i nicon ankane VANE RAN EKAS Era ERARE EHE A EREA 109 Figure 78 Reviewing Network Event Detail 5 ocio eee aioe 111 Igure79 Configure a Syslog SETY essesi one n 113 Ligure 80 Syslog WIBdOW bissosteneiiireee man meiner rue 114 Figure 81 Filtering Syslog Entriessseaneseseiieirassa ii tieni tandi ere 114 Figure 82 Event Notifications LISE i nisi ntt rem tenet iter tht e REIR Eee en 116 Figure 83 Event Notification Creation rre ttem ttn enano 117 Lapure 94 security Devices aui o NDERIT GREATER eee 119 Figure 85 Devices Window Detected Devices aie ese emere 123 Figure 86 Editing Classification Rul s a aensin eere me emm 126 Figure 87 Devices Window Detecting Arrays teret 128 Figure 88 Main Map with RF Heat Contours Enabled 132 Pigure89 Phe Map Last vccsseicidectsasstiets cons nre tert tte atero od tente t etri ee d 133 Figure 90 The Arrays SL onte e ro mee e saan 134 Leure91 Finding an Entry inthe Arrays LIsE
15. Database Server RMI Registry Figure 341 Status of Services Showing Normal Status Required services include 9 Web Server the main server used by XMS clients 9 Client Login Page authenticates XMS client login requests If this service is down clients will be unable to log in even if the rest of the XMS server is running XMS Administration 527 e XIRRUS Management System 9 Database Server all XMS data is handled by this server You may manage it from the client or the server See Backup Manager on page 499 and XSMT Database Tools on page 532 9 RMI Registry used internally for communication between XMS subsystems The possible status values for these services may be e Running Green the service is running properly 9 Not Running Yellow the service has been stopped either by administrator request or by error Yellow is also used during the start up and shut down transition states Check the Logs portion of the window for more information 9 Checking Gray shown during startup as XSMT is checking the state of the service and starting it if necessary Offline Activities This section shows the running status of XMS managers Activity on a manager may be started by an XMS administrator Offline Activities Service Name Status Figure 342 Status of Offline Activities Offline activities include 9 Software Manager used to install XMS software updates See XSMT Software Ma
16. Populating the XMS Devices Window When the XMS server is first started the Detected Devices list is empty and there is one default rule all Xirrus Arrays BSSID 00 0f 7d are Known This rule is Enforced it is sent out to all Arrays In order to populate the Detected Devices list XMS fetches the rogue devices and Rogue Control List entries from each discovered Array Thereafter during operation of XMS Arrays are polled for new entries Also during operation when a new Array is discovered XMS fetches its rogue devices and Rogue Control List entries and adds them to its database When a classification of an individual device is read from an Array and added to the XMS database it is marked as Enforced and thus it will be pushed to all managed Arrays On the other hand when a rule is read from an Array and added to the XMS database it is marked as Unenforced This prevents the rule from being sent out to all managed Arrays possibly overriding existing rules that were explicitly configured in Arrays Once a rule has been added to the XMS database if additional rules for the same BSSID SSID are later read from other Arrays they are ignored You may use the Edit Rules button at the bottom of the Detected Devices list to add new rules or edit existing rules For details see Creating Classification Rules on page 126 If you set a rule to Enforced it will be sent out to each managed Array and become part of its Rogue Control List
17. Time Severity Array IP Address Mac Address Array Hostname Message ues Pd Oct 22 2010 3 00 AM Info 172 16 51 250 00 fa 7e 22 00 52 Robin XN8 Rogue control update complete Alarms Oct 22 2010 3 00 AM Info 172 16 51 251 00 fb 7e 22 00 52 Robin XN8 Rogue control update complete Oct 22 2010 3 00 AM Info 172 16 51 247 00 f7 7e 22 00 52 Robin XN8 Rogue control update complete Oct 22 2010 3 00 AM Info 172 16 51 246 00 16 7e 22 00 52 Robin XN8 Rogue control update complete Oct 22 2010 3 00 AM Info 172 16 51 248 00 18 7e 22 00 52 Robin XN8 Rogue control update complete Oct 22 2010 3 00 AM Info 172 16 51 249 00 19 7e 22 00 52 Robin XN8 Rogue control update complete Figure 282 Events Page The following sections describe the Events page 9 About Using the Events Page 9 The Events List About Using the Events Page A number of basic operations are available on the Events page to allow you to customize it for your own use 9 Select Columns on page 442 9 Export on page 443 The XMS Web Client 455 e XIRRUS Management System 9 Rearranging and Resizing Columns in a Table on page 443 Sorting on page 443 The Events page has a number of search fields that allow you to filter the log messages to be displayed This is a very useful feature since the list may contain a large number of messages To search for the desired messages use any or all of the following fields 9 Specify a time period
18. To quickly start adding devices to XMS for your network please see Overview of Adding Devices below Each of the Add Devices pages is separately discussed in the following topics e Add Devices on page 480 Adds a specific device range of devices or list of devices to XMS 9 SNMPv2 And SNMPVv3 Settings on page 482 Adds or deletes SNMPv2 community names and SNMPv3 users e SSH Users on page 485 Add user accounts that XMS can use when it must log in to Arrays for some management functions 9 Add Networks on page 486 Adds a subnetwork for XMS to scan for Xirrus devices Note that in this chapter the term device refers to a Xirrus Array or PoGE injector To allow XMS to find a device Array or PoGE injector the device must have SNMP enabled and its community string must match one of the strings listed in the Discovery window See SNMPv2 And SNMPv3 Settings on page 482 The default SNMPv2 community string in XMS matches the Array default value The XMS Web Client 477 e XIRRUS Management System When an Array boots up it sends an SNMP trap to the XMS server s default hostname xirrus xms XMS can then add it to its managed devices list This Phone Home feature requires DNS to resolve the hostname xirrus xms correctly Thus if you change the host name of the XMS seroer you must configure DNS to resolve xirrus xms to the actual name of the XMS server host Overview of Adding Devices This se
19. WLAN ARP Filter Mode Address Resolution Protocol finds the MAC address of a device with a given IP address by sending out a broadcast message requesting this information ARP filtering on an Array allows you to reduce the proliferation of ARP messages by restricting how they are forwarded across the network You may select the following options for handling ARP requests on Arrays Disabled ARP filtering is disabled ARP requests are broadcast to stations This is the default value e Pass through The Array forwards the ARP request It passes along only ARP messages that target the stations that are associated to it e Proxy The Array replies on behalf of the stations that are associated to it The ARP request is not broadcast to the stations Note that the Array has a broadcast optimization feature that is always on it is not configurable Broadcast optimization restricts all broadcast packets not just ARP broadcasts to only those radios that need to forward them For instance if a broadcast comes in from VLAN 10 and there are no VLAN 10 users on a radio then that radio will not send out that broadcast This increases available air time for other traffic 324 Managing Configuration with Policies e Management System XIRRUS 9 Block Intra Station Traffic This option allows you to block or allow traffic between wireless clients that are associated to any Array using this policy Choose Yes to block traffic between s
20. Yes 2 4 6 Max inte 20 jat Yes SGHz 36 Max Inte 20 ad Yes SGHz 52 Max inte 20 a Yes SGHz 149 Max Inte 20 a4 Yes SGHz 40 Max Inte 20 bhbbbbbh r Figure 202 IAP Settings Policy Details In addition to selecting an IAP from the IAP Settings main window the window provides a convenient at a glance snapshot of the attributes associated with each IAP in the list You can stretch the width of any column to improve the view by simply dragging the column divider in the header row To access the IAP Settings pop up window where configuration settings are established Figure 203 click an IAP to select it and then click the window button to the right of the list or just double click an IAP Make your changes to the IAP click Apply and then repeat this step for each IAP that you wish to configure IAPs must be configured in the policy one at a time You cannot select more than one IAP at a time from the list Note that even if you have configured settings for all 16 IAPs settings for inapplicable IAP will be ignored when you apply the policy to an Array For instance if you apply the policy to an XN8 then only the settings for abgn1 to abgn4 and an1 to an4 will be applied to the XN8 310 Managing Configuration with Policies e Management System XIRRUS Bonding off Cell Size Manual x Antenna Internal x Tx Power dB E A4 Rx dB p Description Annir l reum Figure 203 IAP Setting
21. 95 ome o s provides centralized configuration and RF E D Pme s management security control and policies IDS IPS performance monitoring and EO mener a 0 reporting for hundreds of Arrays across a 1 Layer 3 network Start Browser 4 Poot AJ Interface Ls c RR RR Java Client Figure 352 Changing Advanced Settings from a Browser This interface is the same as the one used for Managing XMS on Linux based Management Appliances except that it does not include the pages that are only used for managing Linux based XMS servers It has the following links which are used exactly the same way as they are in the web client Backup see Web Client Database Backup Settings on page 511 Polling see Web Client Polling Settings on page 516 SSH Server see Web Client Changing the SSH Server Address on page 517 9 Server Logs see Web Client Viewing Server Log Files on page 518 9 XMS License see Web Client Managing the XMS Server License on page 520 540 XMS Administration Management System XIRRUS Technical Support This chapter provides valuable support information that can help you resolve technical difficulties Before contacting Xirrus review all sections in this chapter and try to determine if your problem resides with XMS the server platform or your network infrastructure Section headings for this chapter include 9 General Hints and Tips for Xirrus Manageme
22. Dashboard pe noo pensent E Arrays Array Status Radio Status Radios Stations qi d i t Rogues Alarms Events X Up Down Total Up 267 267 2054 Figure 262 XMS Web Client Monitor Functions Monitor pages include the following Click one of the links below or in Figure 262 for more information Dashboard Arrays Radios Stations Rogues Alarms Events About Configure Pages These pages perform specific Wi Fi network configuration actions Some of these pages are particularly powerful allowing you to make bulk configuration changes over multiple radios and Arrays in one step Click the Configure button at the top of the window to see the list of configure pages on the left Figure 263 The Configure button always opens to the Home page which is the same as the Arrays page The XMS Web Client 425 e XIRRUS Management System Configure pages include Configure Home Page Network Settings Radio Settings Advanced Config PoGE Add Devices Trap Receivers Array Licenses Custom Fields Configure Mode y XIRRUS amp Monitor y eR Refresh Reboot Pull Diagnostic Logs Delete az TET Home tiome 2 Lo sss IP Address Network Settings Network Settings 5 re Location Lobby 10 100 46 239 Radio Settings Radio Settings re Location QA 10 100 46 237 Advanced Config Advan
23. Discovered Devices Gigt MAC SNMP Version 0f 7d 00 12 16 10 100 54 19 Array v2 0f 7d 00 49 aa 10 100 54 23 Array v2 0f 7d 00 26 35 10 100 54 22 Array v2 017 00 91 7a 10 100 54 26 Array v2 i 0f 7d 00 4b 1c 10 100 54 27 Array 2 Devices 0174 01 35 0e 10 100 54 28 Array v2 PoGE 074 00 5e 12 10 100 54 31 Array v2 0f 7d 01 31 97 10 100 54 36 Array v2 Injecto rs 0f 7d 00 42 9b 10 100 54 37 Array v 0f 7d 00 46 4e 10 100 46 30 Array v2 0t 7d e0 00 0d 10 100 54 49 Pogelnjector v2 0f 7d 00 94 4f 10 100 54 50 Array v2 lel Set Add Delete Refresh 3 Schedule Auto Discover Schedule Close Figure 48 Discover Devices Window NOTE If you do not have a valid license for the XMS server you are limited to managing one Array Valid XMS licenses are typically for a particular number of Arrays In either case when XMS has discovered the maximum permitted number of Arrays no additional Arrays will be discovered See Licensing the XMS Server on page 35 72 Discovering the Network e Management System XIRRUS In addition to providing a list of discovered networks and devices the Discover Devices window allows you to configure SNMPv2 and SNMPv3 values enter Array authentication information that XMS can use to access Arrays and shows the details of each network and device For each device the list shows its MAC address and IP address the device type Array or injector a
24. Figure 296 Figure 297 Figure 298 Figure 299 Figure 300 Figure 301 Figure 302 Figure 303 Figure 304 Figure 305 Figure 306 Figure 307 Figure 308 Figure 309 Figure 310 Figure 311 Poll Diagnostic Logs sss ama RO E nep draps mates 445 Radios Pasescsemiaandibaip pb SUR mea dp 447 Stations Page accom nee neto eres a ER E EH etd 449 Rogues Page 451 Alarms Pl age ecie atem epo on R S NERS 453 Events Da Bisnis eda dem rti EH ERE RUE 455 Network S6ttups Pape asap eir pP or REED baile 458 Editing the Network Settings Page sonia meinen 460 Bulk Configuration Network Settings eterne tnn 461 Export Network Settings nct erre eret teer ratas 463 Exported Network Settings File e rito ette 463 Import Network 56tHbgSacerne nasie mire E 464 Verify Imported Network Setting Values sss 465 Radio Settings PASE issostni qam pa RR antares 466 Editing the Radio Settings Page esci 467 Bulk Configuration Radio Settinps nente ern fent pee 468 Advanced Config Page creen tienen 471 Advanced Conte Bditofiausussue m HERO O Ren 472 Isa TOM AnaY senec tede ERO St ue Ginn eO REDE 473 select Advanced Config FiletoDeployoiu aasoteeivenseon eimi 474 Select Arrays for Deploy Mient eei niet i ee aran ie ER EH aiina 475 Select Deployment Options erede ime Ede eroe 475 Select Deployment Options elei certe better elt teet aeos EPIRI REIR 476 Managing Discovery Of Devices aiu icm ren ege 479
25. Licenses Figure 305 SNMPv3 Users The XMS Web Client 483 e XIRRUS Management System Enter the new User Name and Authentication and Privacy Passwords Set the Authentication Type to match your Arrays Leave the Privacy Type set to DES Click Add when done The new User account will be added to the list located under the dialog box To add an SNMPv2 Community Name click the Configure button near the top of the window then select Add Devices on the left Click the SNMPv2 Settings link on the left when it appears Figure 306 Enter the new Community Name and click Add The new Community Name will be added to the list located under the dialog box Enter a new community name and click the Add button Home Network Settings Community Name Radio Settings Add Advanced Config PoGE Community Name Add Devices omar Delete SNMPv2 Settings SNMPv3 Users Figure 306 SNMPv2 Settings The next time that the discovery process runs after adding a new SNMP v2 or v3 entry XMS will use all of the Community Names or Users listed Adding or deleting a name on a list will not trigger discovery to run immediately The new name will be used by the next discovery process but will not be used now if discovery is currently running To trigger a discovery process using the new entry use the Discover Now button described in Add Networks on page 486 To delete an entry from either list click the Delete button
26. Product Management System webckent performance reports penod Penod Semce Pack Version AdventNel Web NMS4 7 SP X X X XXX Feature Pack Name Sysiog Monitoring Feature Pack Version AdventNet Web NMS 4 5 Syslog FP 2 0 os namez Windows XP os version 5 1 Sun Microsystems Inc java spechication Java Platform API Specification java specification version 1 6 java vm name Java HotSpot TM Client VM java vm information mixed mode java compiler nul 110775 LVL INFO Staring WorkflowProcess TID 75 LVL INFO Workflow process configured 5 thread s purge enabled purge interval 120 min Com xirmus xms server event ServerTopicPublisherf actory Figure 333 Viewing a Selected Log File If a listed log files grows too large it is closed and renamed and a new file is started The following example illustrates this on a Linux based Management Appliance As shown in Figure 334 there are four xirrusout txt files 9 xirrusout txt contains the most recent entries xirrusout txt 1 the first time that xirrusout txt grows too large it is closed and renamed to xirrusout txt 1 A new xirrusout txt is created to capture ongoing new entries xirrusout txt 2 the second time that xirrusout txt grows too large it is closed and renamed to xirrusout txt 2 Thus xirrusout txt 1 contains the oldest entries and xirrusout txt 2 has the next oldest entries etc The number of log files is limited to 10 or 20 instances depending o
27. The buttons at the top of the Arrays window summarize status information by showing the count of Arrays having each status value The buttons also allow you to select the Arrays to be shown in the Array list based on status Figure 113 Hover the mouse over a button to display the status value represented by the button You may click a button to filter the Array list so that it shows only Arrays with the selected status Array Status All Arrays Up Down Column Choose Array Status EEM 57 Bo Figure 113 Array Status Summary Select Buttons The following status buttons are shown Blue the total number of Arrays in the network Click this button to show all Arrays in the Array list regardless of status e Green the number of Arrays that are up Click this button to show only Arrays whose status is up in the Array list Red the number of Arrays that are down An Array is considered to be down if XMS has been unable to communicate with it for over three minutes Click this button to show only Arrays that are down in the Array list Managing Your Wi Fi Arrays 167 e XIRRUS Management System Array Throughput The line graphs in this chart display aggregate data throughput for the same group of Arrays and time period that is selected in the Dashboard Array Throughput for Group All Arrays 1445 1420 14 25 14 30 14 35 1440 14 45 1450 14 55 1500 1505 15 10 Time Tx lt Rx Total Figure 114
28. hostname XN08310800F41 location SQA XMS LAB exit array info Figure 294 Advanced Config Editor Click Save when done The editor closes and your new file appears in the list of config files Figure 293 Each Configuration Name in this list is a link To edita file simply click the link If you wish to remove a config file select the checkbox to the left of it and click the Delete button 472 The XMS Web Client e Management System XIRRUS Load from Array Use this page to download the configuration of a model Array to a config file This method of creating a config file is highly recommended for most users Only expert users should type in the entire file as described in Advanced Config Page on page 471 Start by clicking the Configure button near the top of the window then select Advanced Config on the left When the Load from Array link appears underneath click it The web client displays a list of the Arrays in the XMS database Select the checkbox to the left of the model Array in the list then click Next The web client displays a Loading message while the download proceeds d 2 Select Arrays Review and Save Home lt Previous neis Network Settings Select a single array from which you wish to load the configuration Radio Settings Advanced Config Select Columns Load from Array Showing 6 to 10 of 19 Deploy Configuration r Hostname IP Address Location a PoGE T xS 39 101
29. mail xyzcorp com Date amp Time SMTP Server Port es User smith Polli Password jeeeeeesesese ollin 2 Encryption None SSH Server Sender Email smith xyzcorp com Backup Test Email Server Logs Figure 320 Server Management using the Web Client The web client has multiple pages that manage settings for different XMS functions Click a link on the left to go to the desired page How to access the web client and descriptions of its pages are found in the following sections Accessing the Web Client on page 503 Initial Server Setup on page 504 Web Client Viewing XMS Server Status on page 506 Web Client Network Settings on page 508 Web Client Date and Time Settings on page 509 502 XMS Administration e Management System XIRRUS Web Client Database Backup Settings on page 511 Web Client Polling Settings on page 516 Web Client Changing the SSH Server Address on page 517 Web Client Viewing Server Log Files on page 518 Web Client Performing Upgrades on page 521 Web Client Resetting the XMS Server on page 522 Accessing the Web Client Note Web client access to the XMS server requires access to ports 9090 and 9443 Ensure that this port is open in any firewalls that exist between your browser and the XMS server To access the web client set your browser s URL to the XMS server machine s IP address or host domain na
30. 1 Select Network on the left to display the Network Settings window e Help Logout e ax e Monitor 2 configure Reports Settings General Network Settings Network Interfaces Hostname Dmusxus SS Settings for etno 6 Yes C Date amp Time Default Gateway Address 10 100 100 1 n TT PIN DNS Domain musco Configuration Server Protocol C OHCP Static Polling DNS Server 1 10 100 10 10 IP Address f10 100 100 16 Subnet Mask ss 255 265 0 pL DNS Server 2 110 100 20 10 ONS Server 3 e Auto Negotiate Yes C No Backup puse DHCP a dui SS Leave entries diank to use DHCP assigned value Duplex Full Half og Settings for eth1 Upgrade Enable interface ves C No Reset Configuration Server Protocol OHCP static XMS License IP Address 12 100 100 122 About XMS Subnet Mask 255 255 0 0 Auto Negotiate G Yes C No Duplex Full Halt Figure 322 Changing Network Settings 504 XMS Administration e Management System XIRRUS Note You may use one or both of the XMS Management Appliance s Ethernet ports If using both then one of the ports is typically reserved for management 2 We recommend that you assign a Static IP address to each Ethernet port that is connected The Appliance uses DHCP by default If you have configured reserved leases for the ports in your DHCP server skip to Step 3 below If you leave the DNS fields on this page blank and you are using DHCP then the gateway and DNS servers
31. 17216208 00 07 8d 00 00 52 3 5 Nov 26 2008 Build 0691 MIMIC Array 3 5FW 8 Ali s Virtual SQA Lab 17216203 00 08 8d 00 00 52 3 5 Nov 26 2008 Build 0691 MIMIC Array 3 5FW 9 Ali s Virtual SQA Lab 172 16 20 10 00 09 8d 00 00 52 3 5 Nov 26 2008 Build 0691 lt lt MIMIC_Array_3 5FW gt gt 10 Ali s Virtual SQA Lab 172 16 20 11 00 0a 8d 00 00 52 3 5 Nov 26 2008 Build 0691 MIMIC Array 3 5FW 11 Ali s Virtual SQA Lab 172 16 20 12 00 0b 8d 00 00 52 3 5 Nov 26 2008 Build 0691 MIMIC Array 3 5FW 12 Ali s Virtual SQA Lab 172 16 20 13 00 0c 8d 00 00 52 3 5 Nov 26 2008 Build 0691 MIMIC Array 3 5FW 13 Ali s Virtual SQA Lab 172 16 20 14 00 0d 8d 00 00 52 3 5 Nov 26 2008 Build 0691 lt lt MIMIC_Array_3 5FWe gt gt 14 Ali s Virtual SQA Lab 172 16 20 15 00 0e 8d 00 00 52 3 5 Nov 26 2008 Build 0691 XS8 10 100 40 39 10 100 40 39 00 0f 7d 00 01 ba 3 5 Jan 26 2009 Build 0701 X135030810598 10 100 49 190 00 0f 7d 00 02 39 3 5 Jan 07 2009 Build 0698 Find Find Next Find Previous Done Figure 35 Resources Window Arrays The XMS Java Client Interface 49 e XIRRUS Management System Security Window This section of the tree offers one window The Devices Window designed to all the rogue APs detected by your Array network You may then classify these devices according
32. 436 The XMS Web Client e Management System XIRRUS Station Count Details This shows the total number of stations associated to Arrays known to XMS and plots the number of stations over time Figure 270 Select the desired time period for the graph 24 hours is the default Top Station Manufacturers Details Top Station Manufacturers Xerox 3224 DSP 1240 ABB Drives 744 Applied Radio 496 SMP 248 Cisco Linksys 248 Figure 271 Dashboard Top Station Manufacturers This provides a breakdown by station manufacturer of the number of stations that are currently associated to Arrays The most common manufacturers of stations in your network environment are listed with those having the highest number of stations listed first The XMS Web Client 437 e XIRRUS Management System Station Connection Metrics Details Station Connection Metrics 802 11n 5GHz 802 11n 2 4GHz 802 11g 802 11a 802 11b Stations Count Stations Count Stations Count Stations Count Stations Count 240 260 0 0 0 Signal Strength Signal Strength Signal Strength Signal Strength Signal Strength sadB alll 5548 alll oae odB OdB Connect Rate Connect Rate Connect Rate Connect Rate Connect Rate 238Mbps 130Mbps OMbps OMbps OMbps Figure 272 Dashboard Station Connection Metrics This section characterizes the average quality of your connections by media type 802 11n in the 5GHz and 2 4 GHz bands 802 11a 802 11bg an
33. All Array Throughput This chart is very similar to the Performance chart in the Dashboard see Performance on page 98 If a group is selected in the Dashboard then this chart shows data for that same group otherwise data for all Arrays is shown Transmit throughput is shown in green receive throughput is shown in blue and total throughput is shown in red The chart shows data for the last hour by default but if you change the Interval displayed on the Dashboard this chart will show the same interval You may zoom in on an area of the graph by selecting the area of interest with the mouse Click and drag to select a region When you release the mouse button the chart will show the selected region Double click anywhere in the chart to revert to showing the entire chart You may resize the chart by dragging the border between it and the Array list It may be reduced to the point where it disappears To make it visible again drag the border down until the chart has the desired height 168 Managing Your Wi Fi Arrays e Management System XIRRUS Array List Array Host Name Location Management IP Gig MAC Address Model Software Version Active IAPs Active Stations Throughp MIMIC Array 3 5FW 2 Ali s Virtual SQA Lab 17216203 00 02 8d 00 00 52 XS16 3 5 Nov 26 2008 Build 0691 lt lt MIMIC_Array_3 5FW gt gt 3 Ali s Virtual SQA Lab 172 16 20 4 1 52 XS16 3 5 Nov 26 2008 Build 0691
34. Choose the days of the week that usage will be permitted Authentication Type The following authentication options are available Open This option provides no authentication and is not recommended Managing Configuration with Policies 295 e XIRRUS Management System e RADIUS MAC Authenticates stations onto the Wi Fi network via an external RADIUS server based on the user s MAC address e 802X Authenticates stations onto the Wi Fi network via a RADIUS server using 802 1X with EAP The RADIUS server can be internal provided by the Wi Fi Array or external 9 Security Settings You may choose to allow an SSID to use global security settings for its RADIUS server or override those settings for an SSID In either case you may still change the Security Type e Use Global Settings Select this to use the security settings specified for the Array see Configuring an Array on page 174 and Security on page 270 e SSID Specific Settings Select this to enter SSID specific RADIUS server settings that will override the global security settings for this SSID When you select this option WPA WEP and RADIUS Details sections are displayed as shown in Figure 194 296 Managing Configuration with Policies e Management System XIRRUS SSID List xj Security Settings C Use Global Settings ES i Security Type WPA Details PSK Authentication Vv WPA Preshared Key 7 WPA Verify Key 7 EAP Authenticat
35. Netflow Settings Enable Netfiow Yes C No Apply Cancel Figure 173 NetFlow Settings NetFlow Settings e Enable NetFlow Choose Yes to enable the NetFlow functionality or No to disable it 9 NetFlow Collector Host If you enabled NetFlow enter the IP address or hostname of the collector host NetFlow Collector Port If you enabled NetFlow enter the port on the collector host to which to send data After completing all of the desired fields in the Services window for NetFlow either click on the Apply button to save this policy or click on one of the following buttons to configure more service policy options System Log Syslog Configure the System Log server 252 Managing Configuration with Policies e Management System XIRRUS Standby Configure the standby Array 9 Wi Fi Tags You may collect Wi Fi Tag information on Arrays for later analysis System Log Syslog This window allows you to enable or disable a System Log server and contains fields for configuring the server Figure 174 Services xj System Log Enable Syslog Server Yes C No e Maximum Internal Syslog Records Retained 1 500 500 NTP Local Syslog File Level Information Primary Syslog Server Address Domain or IP 10 10 10 100 Hee em T Primary Syslog File Level Information Secondary Syslog Server Address Domain or IP 10 10 9 100 System Log Secondary Syslog File Level Information pa
36. Pixel Distance 765 7 Actual Distance os units teet z Figure 99 Edit Map Scale Calibrate Distance Set Actual Distance to the measured length of the feature Click OK The pointer continues to be a calibration tool until you change it to another tool such as the move or rotate tool Click the Save Map button to save your work Hl Adding Arrays to Maps After you create a map and set its scale the next step is to drag and drop Arrays onto the map locating them to match their physical locations as closely as possible Each Array may only belong to one map at a time The procedure below describes how to add an Array to the map resize its icon move it or delete it To add an Array to the map use the following procedure 1 Click the Move Object button You must use the Move Arrays tool to drag Arrays onto the map Working with Maps 147 e XIRRUS Management System 2 Find a desired Array in the Arrays List as shown in Figure 100 If the Array already belongs to another map as indicated by the mapped icon amp in the second column icon you will need to remove it from that map before adding it to another map see Step 7 below 3 Click to select the Array from the list Click again and drag and drop it onto the desired map location Locations WestOffice r mi alt OmlRig amp 4 afox Fig si w amp Editable Maps Heat Map Value Not available Environment attenuation 3 dBm s
37. Start amp Stop Database Manager buttons Figure 340 Xirrus Server Management Tool XMS Server Manager XSMT has two major functions each one with its own tab plus advanced menu options 9 XSMT XMS Server Manager Tool displays server status and starts and stops the server 9 XSMT Software Manager updates XMS server software with new releases 9 XSMT Database Tools these menu options initialize or repair the database 526 XMS Administration e Management System XIRRUS 9 XSMT Advanced Settings these menu options change polling intervals and the SSH server address Note XMS has a browser based interface which may be used to manage some seroer settings See Managing XMS Server Settings via the Web Client on page 540 XSMT XMS Server Manager Tool The XMS Server Manager window is divided into two distinct areas 9 Status The Required Services and Offline Activities sections show the status of the various services that are part of or associated with the XMS server The Start Stop XMS Server section at the bottom starts or stops the server 9 Logs shows the actions taken such as starting and stopping services and when the action is complete Required Services This section shows the running status of the major XMS services 3 Server Management Tool File Database Advanced Help Software Manager Required Services Service Name Status Web Server Client Login Page
38. Tertiary Syslog Server Address Domain or IP 10 10 8 100 Sk E BD Standby Tertiary Syslog File Level Information System Log To Console WiFi Console Syslog File Level zy Tags Figure 174 System Log Server Settings The System Log server processes messages based on the network s performance and usage These messages include alerts error messages informational messages and notifications System Log Server Settings 9 Enable System Log Choose Yes to enable the System Log server or choose No to disable it If you choose No the remaining configuration fields for the System Log server are grayed out not editable and this procedure is finished Managing Configuration with Policies 253 e XIRRUS Management System 9 Maximum Internal Syslog Records Retained 1 500 Enter a value in this field to define how many Syslog records are retained locally on the Array s internal Syslog file The default is 500 9 Local Syslog File Level Choose the level of System Log reporting for the Array s internal Syslog file from the pull down list Assigning a severity level informs the system to automatically log all messages in that level and all messages above that level messages below the assigned level are not logged The debug level will significantly increase almost double the number of System Log messages that are returned and significantly degrade performance The debug level should not be used for routine Syst
39. The injectors use SNMPv2 Must have a static IP address may be assigned a static address via DHCP or manually Must be powered on to allow XMS to discover it All injector configuration may be performed using the injector s Web Management Interface WMI as described in the Power over Gigabit Ethernet Installation and User Guide PN 812 0057 001 Rev J or higher SNMP Community Names must match those expected by XMS for discovery see Adding or Deleting SNMPv2 and SNMPv3 Entries on page 81 These strings should be changed from their factory default values to enhance security Recommended The injector s user name and password should be changed from their factory default values to enhance security Now you may perform the following steps to start managing the injector with XMS Each step is described in its own section below Add the Injector to XMS the XMS Discovery process adds the injector to XMS s managed devices database Associate the Injector with an Array tell XMS which Array port is connected to each injector output port Managing Your Wi Fi Arrays 211 e XIRRUS Management System 4 Manage the Injector with XMS turn the injector on or off to save power at night or reboot the Array See Managing a PoGE Injector on page 187 Add the Injector to XMS XMS Discovery can find powered up Xirrus injectors that are SNMP capable and are reachable from the networks specified for discovery The SNMP Co
40. Total Active Unique 24 Hours 75000 ag Media Types 802 110 802 11b 802 11bg 202 112 Figure 68 Dashboard The following sections describe the use of the Java client Dashboard Dashboard Overview on page 92 Status on page 94 Stations on page 96 Performance on page 98 Security on page 100 Using the Dashboard 91 e XIRRUS Management System e Alarms on page 102 Dashboard Overview When you start the XMS Java client the main window opens with the Dashboard displayed To navigate to it when you have another window displayed open the Monitor node on the tree and select Dashboard C The Dashboard behaves like any other window in XMS with respect to resizing moving detaching closing etc The most convenient way to use the Dashboard is to open it into a separate window using the Detach button on the main toolbar This allows you to keep it available on your desktop at all times even when you re working with other XMS windows or other applications See Basic Window Operations on page 53 You may resize the relative height of the top and bottom sections of the Dashboard Simply click and drag a horizontal border between sections to change the sizes of sections About Dashboard Data The Dashboard displays data for all Arrays in the XMS Managed Network by default You may display data for just a selected group of Arrays using the Array Group field in the upper right corner Fi
41. XIRRUS Management System Adding a New Map XMS allows you to add maps Existing maps are displayed in the Maps list Figure 96 Maps List To add a new map use the following procedure 1 Use any common graphics application to create a background image for your map The image file should be optimized for the smallest size possible For more information about creating background images go to Preparing Background Images for New Maps on page 142 2 Inthe map window if this is to be a top level map then click Maps in the Maps List If it is to be a submap of an existing map click that existing map in the Map list Then click the Add Map button towards the left on the Map Toolbar You do not need to be in Move Array mode to add a map The Map Settings window is displayed 2 Edit Map Settings xj L Map Settings Information Bars be Array Data Map Name femp i Map Data Location Data Transfer image ps Badgroundimage rus For Pen NPPNG Display units Feet X OK Cancel Figure 97 Map Settings Window 144 Working with Maps e Management System XIRRUS 3 Enter a name for the new map in the Map Name field Click the Transfer Image button li and browse to select the image file Note that the file should be located on your file system accessible from the computer where you are running the XMS client and the filename may not contain any spaces Click Uploa
42. e XIRRUS Management System Deleting an Array To delete an Array from the list of managed Arrays select and then right click on the Array and choose Delete from the pull down list When prompted click on the Yes button to delete the Array or click on the No button to abort the request Confirm Delete 2 J This command will delete the selected array Press Yes to continue Figure 128 Deleting an Array If you delete an Array you can always re discover the Array or manually add it to the list of managed Arrays To do this go to Adding an Array or PoGE Injector on page 87 Removing an Array from a Map If this Array is assigned to a map then you may use this option to remove the Array from the map See Adding Arrays to Maps on page 147 This does not delete an Array from the list of managed Arrays 182 Managing Your Wi Fi Arrays e Management System XIRRUS Assigning an Array to a Group To assign one or more Arrays to a group select the Array s and then right click and choose Assign Group from the pull down list The Assign Array s to Group s window is displayed Figure 129 Assign Array s to Group s x Group Name East Ok Cancel Add Group Figure 129 Assigning a Group Before you can add Arrays to an Array group the group must exist You may create groups in advance using a Group policy see Creating A New Group on page 366 or you may create groups directly from the Assig
43. on page 176 e What if the Configuration Changes are Rejected on page 176 Managing Your Wi Fi Arrays 209 e XIRRUS Management System Viewing Events and Alerts SSIDs To view events and alerts for the Array that uses the selected SSID right click on the SSID and choose Alarms and Events from the pull down list The Events and Alerts summary window for the Array is displayed For more information about Events and Alerts go to Monitoring Your Network on page 105 Events and Alerts For 00 0f 7d 00 42 86 BEE Selected Object is 00 0f 7d 00 42 86 Total Number of Events 3 Total Number of Alerts Critical Major Minor Warning Clear Info t 0 Java Applet Window Figure 148 Viewing Events and Alerts 210 Managing Your Wi Fi Arrays e Management System XIRRUS PoGE Injectors This section provides instructions for managing the Power over Gigabit Ethernet injectors in your Xirrus network XMS provides a tool for associating PoGE injector ports with the Array ports that they power Once you have completed this mapping you may use XMS to monitor the status of injectors and to power down or power cycle Arrays by controlling the injector ports that drive them Managing PoGE injectors with XMS requires the following steps 1 You must set up each injector that will be managed by XMS The injector must meet these criteria Must be manageable must be one of the Xirrus managed PoGE injector models
44. the Apply button to save this policy or click on one of the following buttons to configure more security policy options RADIUS Configure an internal or external RADIUS server Xirrus recommends using an external RADIUS server if available MAC Access List Configure an access control list based on MAC addresses Admin RADIUS Set up Array administrator authentication via external RADIUS servers Managing Configuration with Policies 275 e XIRRUS Management System RADIUS This window allows you to specify if the RADIUS server is internal or external If you specify an internal RADIUS server you can create a user access list with passwords tied to an SSID If you Nspecify an external RADIUS server you must define parameters for the primary server and secondary server if available with any shared secrets Figure 185 B Security RADIUS Management Radius Mode C internal External n External RADIUS ud Security Primary Host Name DO Primary IP Address 0 o 0 RADIUS Primary Port 32 Primary Shared Secret O Verify Primary Secret peee Secondary Host Name D Secondary P Address o 0 o z 0 Radius RADIUS Secondary Port 1812 zi Secondary Shared Secret CO Verify Secondary Secret RADIUS Timeout Sec fe00 y NAS identifier LOSS O Accounting Cot bd Accounting Interval Sec p g MAC Access Accounting Primary Host Name D g Accounting Primary IP Address 0 D 0 0 Accounting
45. ue eerie 134 Figure 92 Main Map Showing RF Heat Contours sssssssseseeee 136 Figure 93 The Map Toolbat ctr nettes tae 138 Figure 94 The Map Data Information Bar t her HR inea 141 Lipure95 The Array Data Intormation Basmi diese ined 141 Fip re 96 Maps ist i iioesenimsoie oin dn ote e mate ier Pv m eco iR 144 Figure 97 Map Settings Window sas aiio nino oii RR RN 144 Figure 98 Calibrating the Map Scale eite ipee 146 Figure 99 Edit Map Scale Calibrate Distance entrent en rnnt 147 Figure 100 Adding an Array to a Map e eere 148 Figure 101 Resizing and Moving ATFays menia quse a t dtes 149 List of Figures XV e XIRRUS Management System Figure 102 Rotating an A hay ona ob TERRE REOR OR ERR IE 150 Figure 103 Entering Environment Wall Seting Se sssini 151 Figure 104 Using the Location Feature erret 152 Figure 105 Determining Position ei tnter iHe eiie 153 Figure 106 Changing Contour Map COlorS io ccepit 156 Figure 107 Displaying Arrays Within Maps e reete erre 158 Figure 108 Array Management Drop down Menu sss 159 Figure 2095 Map Settings Dag Gana RED ERR E E E AES 160 Figure 110 Map Settings Information Dars entrent tenenti tents 161 Figure 111 Table Column Chooser entrent trenta 163 Figure 112 Arrays Window uice ater EHE HEURE ARE EAR ERE EARNER RREA 166 Figure 113 Array Status Summary Select BUONS csongi 167 Figure 114 Al Array Throu Sh
46. 10 100 40 29 XS3946060 10 100 49 XN080609 0f 7d 10 100 40 28 XS4 AF 3 3 10 100 49 XS085008 10 100 40 26 A23914060 10 100 49 XS084908 10 100 40 22 lt lt 10 100 4 10 100 49 XS085008 10 100 49 XS085108 10 100 49 XS085108 10 100 49 XS085008 Figure 234 Array Group Policy Details e Array Group Name Enter a meaningful name that describes this Array group Array List Selection 9 Array List To add an Array to this group click on an Array in the left column then click on the gt gt button to move the Array to the right include column To remove an Array from the group click on an Array in the right column then click on the button to move the Array to the left exclude column Managing Configuration with Policies 367 e XIRRUS Management System Policy Details This window allows you to select policies to be applied to the Arrays in the group It is very similar to the Global Policy Settings window and contains fields for selecting the policies to be applied to the group Policy Details Global Policy None X System Information None Management con mgsOSONSUIBNC 000000 s Qu Network emornsmmeiese 0 Tg c ewcexsosip a 000 1g vu hm g DHCP Server mesm E g seem aanyasmmeisee 0 g ssos sasamesee
47. 123 Detected Devices List unseren oem re derriere reis 124 Classification Buttons retire etre eet ree eb Ee 125 Creating Classification Rules 45 tt rtr ten 126 Detecting Arrays List iiic i ase tentent itte e b tee e HL Ede hislegastsaasie 128 Working with Maps neeeeeeee nenne ne nee ene nennen nennen 129 About Maps asra n i a E mei nb ur qe dr cnp E 129 Getting Started with Maps tpe en e n n ei AEE 130 The Map WindOW rte tert et trea rtt aha ere receta ARANES 132 The Map List m aa EEE 133 The Arrays List ose nete oe DoD i oda a Roda Eie E man 134 The RP cleat Contour Map usdets ael a cote PEE 136 e Management System XIRRUS Map Toolbar qmod eb dama a Rd ant Hae DES 138 Infor maton DarSuasuittur acres Ru ae Een o BO B 140 Migrating Maps from Earlier Releases nr trente enn 142 Preparing Background Images for New Maps sse 142 Adding a New Map supcr oed meti n quod TRTE 144 saving a Map Important en ir prp rt er decent 145 petting the Maps Scalesaiassiennsanoni m dien co pte bent 146 Adding Arrays to Maps sceiiioieemaatiien pene i ER REC ee RE Deed 147 Orienting ATrayS e 150 Entering Environment Settings nir rnetr maintenir toti Esearo RYE 151 Locating DEVICES csi HERES QD ETIN TES ERSTER 152 Changing Contour Map Colors seaateanduenitaeiiT m dee ttd 156 Deleting Map avoir ime e ie nmn nee retra e nen me i me ie 157 Managing Arrays Wi
48. 16 Asray 00 Gt 74 00 80 13 with P 10 100 47 27 cowed nol be gecovered due te Kcense restrictions max 09 017490 4 r1 10 4425 POT Q430 Asray 00 t Td 00 45 11 wih P 10 100 47 10 couta not be gecovered due to cense resinctons max a eorracorrse 1817 48 POT cazw Acray 00 0178 00 Tf fe wth P 10 100 47 31 Could net be Gacovered due lo icense resinctons max a Figure 40 Horizontal Tiling of Windows To arrange your open client windows go to Window in the Menu Bar and choose one of the following 9 Cascade e Tile Horizontal 9 Tile Vertical The XMS Java Client Interface 55 e XIRRUS Management System Closing a Window You have the option of closing just the active window or closing all open windows Closing the Active Window To close just the active window go to File in the Menu Bar and choose Close You can also close an active window by clicking on the X button in the top right corner of the window Closing All Open Windows To close all open window go to File in the Menu Bar and choose Close All 56 The XMS Java Client Interface e Management System XIRRUS Basic Table Operations Some of the XMS windows include a table with data retrieved from the XMS database For example if you select Events under the Monitoring function the Events window is displayed in the Main Viewing Area as a table Page Navigation Buttons Page Length Page Range Total Entri
49. 168 KB omsout tt 267 KB nmsout tt 1 1024 KB stderr bt 215KB stdout bt 104 KB transactionLogs txt 649 KB updatemanagerlog tt 0KB updatemanagerlog1 txt 0KB Figure 332 Viewing Log Files Use the Server Logs link at the left to display the Logs page This page displays a link for each of the working log message files generated by the XMS server while it is running Click a link to view the contents of that file Figure 333 These files journal the operation of the XMS server software rather than reporting on the operation of the Wi Fi network Log files are intended for use by Xirrus Customer Support personnel In certain situations Support personnel may ask you to send them some of these files Use the Export button to save log files to your file system If you click this button on the Logs page the page showing the list of log files then XMS creates a zip file containing all of the logs If you click Export on a page for a particular log file then XMS creates a csv file for that log In either case a dialog allows you to open or save the file and browse to the desired location for saving the export file If you choose to open a csv file rather than saving it and you have Excel installed on your workstation an Excel window opens and displays the log file contents 518 XMS Administration e Management System XIRRUS Logging started Tuesday December 22 200 lt General Information
50. 245 mirror traffic 245 transmit on both ports 245 port requirements 22 ports 19 20 Power over Gigabit Ethernet PoE 2 Power over Gigabit Ethernet PoGE injectors managing 211 prerequisites 16 product family 1 product overview 7 properties map modifying 145 PSK 273 public safety band 326 Q QoS 291 queue report 383 quick reference guide keyboard shortcuts 65 R RADIUS 271 276 admin RADIUS 284 Array logins 80 external 277 internal 277 279 RADIUS settings web page redirect 292 294 RADIUS admin 271 admin RADIUS 285 560 Index Management System rearranging tables 62 re attaching windows 53 rediscovering networks 85 refreshing an Array 88 refreshing tables 59 remote login 29 renaming maps 145 repairing database 533 report queue 383 reporting 11 reports 371 about 371 Array availability 412 bandwidth 388 by Array speed 389 392 402 by Array utilization 416 419 by station speed 394 error by station 397 list of 371 main window 373 RF 416 schedule specific date range 382 383 security 419 rogue list 420 station by Array 406 by station 405 station association 404 viewing from Array window 186 resizing tables 62 resource window searching 164 resources managing PoGE injectors 211 resources windows 48 restrictions date time 307 stations 307 traffic 307 RF sharp cells 326 RF Heat Map 131 RF policy 316 global load balancing 325 RF reports 416 RFID tags 257 right click men
51. 443 iot 9090 9091 i 9092 pej amp i XMS Client and SMTP Server may be internal or external resources Figure 13 Sample Port Requirements for XMS 22 Getting Started with XMS Management System The following table lists port requirements for the Array and for XMS how they are used and whether they may be changed Port Application Peer Configurable XMS 22 tcp SSH Arrays Yes 25 tcp SMTP Mail Server Yes 161 udp SNMP Arrays No Via XMS 162 udp SNMP Traphost 1 Arrays config file 514 udp Resident Syslog intensal Via XMS server config file 1099 tcp RMI Registry Internal No 2000 tcp XMS Back end Server Internal No 2022 tcp SSH XM 3320 3340 3360 Yes 3306 tcp MySQL Database Internal No 8001 tcp Status Viewer Internal No 8007 tcp Tomcat Shutdown Internal Huning installation 8009 tcp Web Container Internal During installation 9090 tcp XMS Webserver XMS client ering installation 9091 tcp XMS Client Server XMS client Maas config file 9092 tcp XMS Client Server XMS client ves config file 9443 tcp XMS WMI SSL XMS web client No Internal to XMS Server no ports need to be unblocked on other network devices Getting Started with XMS 23 e XIRRUS Management System Port Application Peer Configurable Array 20 tcp a 21 udp FTP Client Yes 22 tcp SSH Client Yes 23 tcp Telnet Client Yes 25 t
52. 530 Figure 345 Server Shutdown Progress c csssssesssvscvavssnsxsvsssestevssvevacsavssssaessasaarocastoasss 531 Figure 346 Status for Stopped XMS Servet usse ea imei ree 532 xxii List of Figures e Management System XIRRUS Figure 347 Figure 348 Figure 349 Figure 350 Figure 351 Figure 352 XSMT Software Manager asina TRIER HERE DH 534 Select Patch FC ives sico si cu tman enne ter n NEEE eas eksesais 535 XSMT Advanced Menu Options entente tenens 537 Changing Polling Frequency aio ette pte ihe te pir Piet nn 538 Changing the SSH SetVerue iecore o eei ranna 539 Changing Advanced Settings from a Browser sess 540 List of Figures xxiii Management System xxiv List of Figures Management System XIRRUS Introduction This section introduces the Xirrus Management System XMS and the Xirrus Management Appliance including an overview of key features and benefits It also includes an outline of how this User s Guide is organized Section headings for this chapter include The Xirrus Family of Products on page 1 About this User s Guide on page 3 XMS Product Overview on page 7 Key Features and Benefits on page 9 The Xirrus Family of Products The Xirrus family of products includes the following items 9 Xirrus Management System XMS XMS is a powerful management tool designed to manage your Wi Fi Arrays and managed Power over Gigabit Ethernet injectors from anywhere in th
53. 9b Discovering Networks and Arrays iei th UR aiti 37 Closing Down the Java Client Interface erret eren tena 37 Shutting Down the XMS Server i cao titio tuber eise ien pete ae ates 38 The XMS Java Client Interface iuste Un ko dax ui ELM AUR ARUM IL ERU G 39 Major Components of the Client Work Space cette 40 Menu Bat d Ha 41 MEG OMB AR ss M Aaa ARSE 42 WOO ox hin ap cetssesteataces tei E tisk has how codes atu incr iene 43 Status BaT sari oren TEMO EU S UM ELEC 44 Tool DIS eati bo eren b ipe tea ib ES dE re rit d is 44 Other Navigation Tools oec teet ertt cree herb serrer 45 Main Viewing Area 4 e noH TIER PEU HE ERE kastetan EXER Ie kasran teanais 46 Basic Window Operations inne cres eR i TH ERR i E aine 53 Navigating through Active WindOWs eee re eere 53 DD taching a Window trom the C ling ns seen tepa nitrate 53 Minimizing and Maximizing WindOWs 2 et nm etie trt 54 Arranging WIndOWS dicii Glen e eoe nte E bete eripe ee sese isddse 55 e Management System XIRRUS Clositigva Window ascunudte ies T RESO NER 56 Basic Table Operations mieria g irere ee ieu n hist ais 57 Page Navigation Buttons cccssccccsscssssssseccssvccssssscsccssasacasecsonsacassassesisessacsesiaees 59 Sorting Table Details ur REP Rr ET EORR Re Lat Paria eie 60 searching for Table ENIES irrg mair a inibi m Rr ER Haee 61 Rearranging and Resizing Columns in a Table
54. Antenna XMS 5 0 V2 1 an1 true 5GHz 36 40 small 5 75 Internal Dii Stations XMS 5 0 V2 1 an2 true 5GHz 52 56 1 small 5 75 Internal Dii Rogues XMS 5 0 V2 1 an3 true 5GHz 44 48 1 small 5 75 Internal Dii Alarms XMS 5 0 V2 1 an4 true 5GHz 60 64 1 small 5 75 Internal Dii Events XMS 5 0 V2 1 abgni tue 24GHz 1 0 off small 5 75 Interna Di Figure 278 Radios Page About Using the Radios Page A number of basic operations are available on the Radios page to allow you to customize it for your own use Select Columns on page 442 Export on page 443 Rearranging and Resizing Columns in a Table on page 443 Sorting on page 443 The XMS Web Client 447 e XIRRUS Management System The Radios List The Radios List Figure 278 on page 447 shows all of the radios on Arrays that have been discovered by XMS You may customize the columns shown in this list see Select Columns on page 442 This list is very similar to the list on the IAPs Window on page 198 Note that the IAPs Window offers different capabilities such as filtering to display only radios belonging to a subset or group of Arrays searching viewing performance and management operations For each radio the following information is shown by default Please see IAP Setting Details Figure 203 on page 311 for a detailed description of these fields The Hostname The Radio name e g abgn2 an3 etc Whether the radio is Enabled The Band that t
55. Blocked These are rogues that you have designated as blocked An Array can block a rogue AP by taking measures to prevent stations from staying associated to the rogue Orange Unknown Rogue These are rogues that you have designated as unknown Gold Unclassified When a device is initially detected it is unclassified which simply means that no one has classified it yet Yellow Known When a rogue is designated as Known the system stops reporting on it It is no longer displayed in the Rogue List report Green Approved When a rogue is designated as Approved the system stops reporting on it It is no longer displayed in the Rogue List report 9 Pie Chart The pie chart is a graphical representation of the data in the Device Classifications section The different classes of devices are represented by the same colors defined above Hover the mouse over a segment and a tooltip appears to show the class that the segment represents Each segment of the pie chart is a link Click it and The Devices Window is displayed with the Detected Devices list showing just that class of device Using the Dashboard 101 e XIRRUS Management System Alarms This table displays a summary of the alarms displayed by the XMS Alarms window see Alarms on page 107 All alarms are shown even if you have selected an Array Group All alarm levels are displayed Critical Major Minor Warning and Clear Alarms r Alarm Classif
56. Choose the QOS Quality of Service value of an allowed packet from 0 3 Level 0 has the lowest priority level 3 has the highest priority This field is grayed out when Type is set to Deny e VLAN Set the VLAN ID and the VLAN Number of an allowed packet These fields are grayed out when Type is set to Deny Saving Your Filter Policy When you have configured all of your filter policy settings click on the Apply button in the Filter policy window to save the new policy Managing Configuration with Policies 353 e XIRRUS Management System Software Update From the Configuration Policies node in the tree click on Software Update to display the Software Update window This window contains a list of all software update policies currently available with tools to manage these policies Software Update lol x Select Software image Modify Execute Delete Total 4 XS 3 5 0703 bin Execute per Schedule XS 3 5 0701 bin Execute per Schedule XS 3 5 0699 bin Execute Now Figure 223 List of Software Policies The columns in this window show selected settings for the listed policies For information about changing the columns displayed see Selecting the Columns Shown in a Policy Window on page 220 Creating a New Software Update Policy A software update policy is created so that you can set up the file transfer parameters for the new software image and schedule your updates Of course the image must fi
57. Click on the OK button to close the window You may then restart XMS see XSMT Starting the XMS Server on page 529 Note There is an optional external script available for performing repair operations The advantage of using the script is that it creates a log file that can be reviewed to determine if any problems remain and which problems were actually repaired Contact Xirrus customer support for more information See Contact Information on page 544 XSMT Software Manager The Software Manager tab of XSMT allows you to install new release versions called patches of the XMS server or revert to a previously installed release S Server Management Tool File Database Advanced Help XMS Server Manager Software Manager Installed Patch List jAdventNet Web NMS 4 7 SP 4 0 2 1400 Xirrus Management System AdventNet Web NMS 4 7 SP 4 0 4 1666 Xirrus Management System AdventNet Web NMS 4 0 4 1673 Xirrus Management System jAdventNet Web NMS 4 7 SP 4 0 4 1675 Xirrus Management System 5 4 7 5P 4 0 4 1681 Xirrus Management System Figure 347 XSMT Software Manager When you receive updated software from Xirrus it comes in the form of a patch file with a ppm file extension For example xms XA patch 5 0 0 1953 ppm 534 XMS Administration e Management System XIRRUS Patches may be dependent on each other i e one release may depend on other files being installed first and the
58. Copying the policy from the configuration of an Array is strongly recommended in most cases It allows you to try out the configuration in your network and prove that it operates as intended before executing the policy against a number of Arrays It also allows you to make sure that you have configured all policy settings correctly without omitting any or causing conflicts with other settings B Add Policy x You may create a new policy in one of two ways c Copy from a chosen Array recommended Start from scratch expert only Arrays Host Name 10 100 40 111 xs8 10 100 40 111 4 0 7 Dec 31 2009 00 0f 7d 00 03 1f Cancel Figure 152 Adding a Policy 9 Copy from a chosen Array recommended Choose this option to create the new policy by copying its settings from an Array Select an Array from the list and click OK The Policy Details window will appear with the new policy having the same name as the model Array You may edit any of the fields that appear in this window as needed including the Policy Name You may create any type of policy by copying from an Array except for the Global Policy Software Update and Web Page Redirect WPR policies For these policies you are not offered the choice of copying the policy from an Array The Policy Details window will appear by default without having to click through from the Add Policy window first Managing Configuration with Polici
59. Details 370 Managing Configuration with Policies Management System XIRRUS Managing Reports XMS generates performance reports about the network all Wi Fi Arrays within the network the individual IAPs Integrated Access Points contained within each Array and wireless data channels throughput signal strength etc Selection criteria allow you to focus your reports on just the data that is of interest Q Click the Reports button in the main menu at the top of the page Reports to access the reports pages This chapter provides instructions for managing and reviewing these reports via the web client Section headings for this chapter include About Reports on page 371 Traffic Reports on page 388 Station Reports on page 404 Array Reports on page 412 RF Reports on page 416 Security Reports on page 419 About Reports Reports provide information about the content performance and usage of your network s and Arrays Most reports display a combination of graphs and text based information organized in tabular form There are three main reports pages 9 My Reports The web client s Reports button opens to the My Reports page listing all of the reports you have already created and allowing you to view or run these reports 9 New Report Click this link to list all the types of reports that you can create Click on a report and a form allows you to enter all the selection criteria for your report You m
60. Discover Xirrus Devices Based on Networks and Community Names N etwo rks Search Networks Array Shell Authentication IP Address Password 110 100 54 0 255 255 255 128 Array 10 100 23 0 D55 255 255 0 2 10 100 44 0 bss 285 255 0 Logins Add Edit Delete Onoff Delete SNMPv2 Community Names SNMPv3 Users Community Name Username Authentication Privacy ximus rw SHA DES alibaba J 1 SNMPv2 s oe Lom oome SNMPv3 Sapo Gig MAC IP Address Device Type SNMP Version 01 74 00 12 16 110 100 54 19 Array v2 ES puotrannensa 10900 5425 fmi Me 00 0t74 00 26 35 10 100 54 22 Array v2 0 0174 00 91 7a 10 100 54 26 Array v2 00 0f 7d 00 4b 1c ho 100 54 27 Array v2 01 74 01 35 0e 10 100 54 28 Array v2 00 0f 74 00 5e 12 10 100 54 31 Array v2 Arrays and DERIGSERE YU 3 oarzeonzon josmosasr 2 Injectors 0 01 7d 00 46 4e 10 100 46 30 Array v2 0 0 7d e0 00 0d 10 100 54 49 Pogelnjector v2 00 01 7d 00 9d 4f 10 100 54 50 Array v2 il 8 devices Lom oote aeren Auto Discover Schedule Close Figure 47 Managing Discovery of Devices Discovering the Network 69 e XIRRUS Management System 4 To manage auto discovery scheduling click Auto Discover Schedule By default discovery runs daily at 23 00 hours NOTE When an Array boots up it sends an SNMP trap to the XMS server s default hostname xirrus xms XMS can then add it to its discovered devices list This Phone
61. DiseoveraSmgledDevice xad ambe SE E 480 Discovera Range of IP Addresses eiecti tete teet 481 Discover a List of IP Addresses cernentes 481 Review Results of Adding Devices iet titt 482 SIME Vo d co PM 483 SNMPy2 Seti M 484 Adding SSH Uses p cleaned 485 Add Networks for DisCoVety a iec tt nter iie s 486 bcpA II 488 Custom Fields Page etant ertet ire Sakeena 490 Custom Field Values Adding a single value 491 List of Figures xxi e XIRRUS Management System Figure 312 Bulk Configuration Custom Field Values sess 492 Figure 913 Custom Actions l age ascmosascenem adim eame diomeed ied 493 Figure 314 Country of Op6ratiODsee sies iter reitera encanta 496 Figure 315 Listof XMS User ACCOUNTS sisiraan ires tette p o Helen 497 Figure 316 Select Policy Attributes XMS User Accounts sss 497 Pipure 317 Manage User ACCOUBEB io stes one te RR TUE RITTER HO TIE DEFERRI RE 498 Ligure 918 Database backup MapaPetuoscascinee b amates imt rient 499 Fig re 319 Broadcast MesSdgesa os atop in dde ERIS DOS E TORRE HIE EUR UO ERE 500 Figure 320 Server Management using the Web Client 502 Figure 321 Starting the Web Client erento rt to nea Rovere 503 Figure 322 Changing Network Settings nte orn epi niina EA 504 Figure923 The Status l age onnemeeneiieme i eie tees 506 Figure 324 Changing Network Set
62. EACH RE ians 375 Report Incdludine Charts oaa Sea DN OR RSER TERN 376 List of Figures xix e XIRRUS Management System Figure 242 Emailing a Report casani dana aaa EE ERREUR 377 Figure 245 Lister New Report Types iisisti eiii iege 378 Figure 244 Create New Report Page w scccscssssssscscsscsssssssisrscsesscssscssnsscsssasvesasessacoevess 379 Figure 245 Report Queue ien HIR EHE seal slansabealavensabisl E ober esed 383 Figure 246 Customize Report Header Page cies recen 387 Figure 247 Wireless ratte RepOEtsnas onem nmn eere ie precem 390 Ligure 2495 Wireless Errors Report sssini enice Pede iiec ion ertt 393 Figure 249 Station Tratte Report DoERX oue nos eie memes eiim 395 Figure 250 Station Errors RepOEt o oce eee tt eme peti Ce torh erbe er ien penis En 398 Figure 251 Ethernet Traffic Report ence rete treni citate 400 Figure 252 Ethernet Errors REpOrt sess ettet ee HEAR Elia 403 Figure 259 Staton ASSOClA HOM ss scere thi iei edidi ee menn 406 Figure 254 Station Association By Array Report sssssssssssee 408 Figure 255 Unique Station Count Report sse 410 Figure 256 Array Inventory Repott iiioieise enis rite ie tks ida ke da EHE RRRA OR 413 Figure 257 Array Availability Report eiie dee hinc rh Re R feine irat phe 414 Figure 258 Channel Usage Report ie creme me maneras 417 Figure 25 Rogue Last Reportocnnciaesno e sare acetate OE 421 Ligure 200 XMS Stark WindOW caa
63. Enter the read write password for authentication i e logging in The default is xirrus rw SNMP Read Write Privacy Password Enter the read write password for privacy i e a key for encryption The default is xirrus rw SNMP Read Only Username Enter the read only user name This username and password do not allow configuration changes to be made on the Array The default is xirrus ro SNMP Read Only Authentication Password Enter the read only password for authentication ie logging in The default is xirrus ro SNMP Read Only Privacy Password Enter the read only password for privacy i e a key for encryption The default is xirrus ro Managing Configuration with Policies 235 e XIRRUS Management System Admin This window contains an editable table listing all administrator accounts currently assigned to this policy B Management Control x j Management Settings a3 SNMP o T Admin mmm Console Figure 163 Admin Settings CreatelEdit Admin To add a new administrator account to the list click the button to display the Admin Accounts window Management Control xj ReadiWrite C Read Admin Password Verify Password Apply Cancel Figure 164 Adding an Administrator Account to the Admin List 236 Managing Configuration with Policies e Management System XIRRUS New Admin ID Enter a description for the new adminis
64. Home feature requires DNS to resolve the hostname xirrus xms correctly Thus if you change the host name of the XMS server you must configure DNS to resolve xirrus xms to the actual name of the XMS server host How Discovery Works XMS has two main ways of getting Arrays and managed PoGE injectors added to its database the Phone Home feature that relies on an Array sending an SNMP trap to the XMS server s hostname and the Discovery tool that uses SNMP Phone Home Any time an Array boots up or its IP address changes it announces its presence on the network It does this by sending an SNMP trap to the XMS server s default hostname xirrus xms this name is not case sensitive XMS can then communicate with the device and add it to the Arrays window The Phone Home feature requires DNS being properly configured in the network so that the hostname xirrus xms can be resolved to the IP address of the XMS server NOTE Arrays always send the SNMP trap to xirrus xms If you change the host name of the XMS server you must configure your DNS server to redirect queries for xirrus xms to the actual name of the XMS server host As soon as a new device is plugged in it adds itself to XMS without waiting for the next time discovery is run on the network This reduces network overhead by greatly reducing the need for discovery and the traffic overhead that accompanies the process Any devices that phone home to XMS are added to the appropriat
65. IP address and subnet Discovery of a large network may generate a significant amount of network traffic so be sure that the subnet mask specifies only the subnetwork to be managed with XMS in order to minimize the impact of discovery on network traffic Take care not to accidentally specify a Class A network To add a new network to the list of manageable networks click on the Add Network button in the Discover Devices Window to display the Add Network window Add Network Enter Network Parameters IPAddress 192 168 22 0 Subnet 255 255 255 Apply J Cancel Java Applet Window Figure 54 Adding a Network Define the new network s IP address and subnet mask then click the Apply button After a few seconds the system generates a message informing you that the discovery process has started Click on the OK button to close this window and return to the Discover Devices Window Operation Complete Java Applet Window Figure 55 Network Added 78 Discovering the Network e Management System XIRRUS In the Discover Devices Window you will notice that the Status column for the network indicates that discovery is still in progress In order for a device to be discovered its SNMPv3 username password or SNMPv2 community string must match one of those defined for discovery See Adding or Deleting SNMPv2 and SNMPv3 Entries on page 81 to verify that discovery s search includes your community
66. Index 2013 Bica 00 0f 7d 00 41 93_Status Aug 17 2007 04 12 38 PM Array Not Real Node failure This probably means one or more interfaces Info O0 0fb5 97 3c79 O0 0f 7d Aug 17 2007 04 11 57 PM Mobile Unit 00 f Message have failed DO Of 7d 00 4b 1c Aug 17 2007 04 11 56 PM Node clear Ni 00 0f 7d 00 4b 1c Status Aug 17 2007 04 11 56 PM Array is Up ai y 00 0f 7d 00 41 a2 Aug 17 2007 04 07 40 PM Node failure Category Topology Domain Network Java Applet Window Node 00 01 7 00 41 93 Failure Object 00 Of 7d 00 41 93 Source 00 0f 7d 00 41 93 Help URL Date Time Aug 17 2007 04 12 38 PM GroupName 00 0f 7d 00 41 93 WebNMS n EENEEEEEEEEEEEEEEEN Java Applet Window Figure 78 Reviewing Network Event Details To generate the Event Details window and review the informational details behind any event use any of the following procedures Double click on any event in the list Right click on any event in the list then choose Details from the pull down list 9 Click on any event in the list to select it single click then go to the Menu Bar and choose View Details Click on any event in the list to select it then type Alt d Review the details of the selected event in the Event Details window When finished click the Close button Monitoring Your Network 111 XIRRUS Management System Syslog Events Syslog is a protocol that allows a machine to send
67. Login Window Browser 32 Getting Started with XMS e Management System XIRRUS It will take a few moments for Java to start the client interface lu CC CIC E XIRRUS XMS Xirrus Management System Figure 19 Loading the XMS Client When the client has started you are presented with the XMS client s Dashboard window this is the default start up view 802112 802 11b 802 11bg 802 110 Cente Fie Ac a Figure 20 The Dashboard XMS Java Client Window Getting Started with XMS 33 e XIRRUS Management System NOTE For full operation the XMS server must have a valid license installed Otherwise the current license is displayed along with the client See Licensing the XMS Server on page 35 Starting the Java client after the first time When you first install the XMS Web Start client as described in Starting the XMS client for the first time an icon is placed on your desktop Figure 21 This icon allows you to quickly start the XMS client Figure 21 XMS Web Start Client Icon on desktop 1 Click the XMS Web Start client icon 2 The XMS Login dialog appears Log in to the client interface using the default username and password the factory default for both fields is admin Click Connect oix Enter username and password for XMS login to 10 100 40 6 9090 i a e Figure 22 Client Login Window Browser It will take a few moments f
68. Media types The line graphs in this chart display the number of stations associated to the selected Arrays over time The stations are broken down by media type and the total number of stations is also graphed is also shown Using the Dashboard 99 e XIRRUS Management System Security This section provides a quick snapshot of the security status of the selected Array Group see About Dashboard Data on page 92 including counts of known and rogue APs Device Classifications Total 7 soca EN Unknown Rogue ws Unclassified eT ee 7 Approved ei Unclassifie d Figure 72 Dashboard Security For more information about security and intrusion detection please see Security Managing Intrusions on page 119 Section Details 9 Device Classifications This is a summary of the status of all APs that have been detected by the selected Arrays The total count of devices detected is shown along with the total in each class represented by color Blocked Unknown etc Each entry is a link Click it and The Devices Window is displayed with the Detected Devices list showing just that class of device 100 Using the Dashboard e Management System XIRRUS The classes and their representative colors are White Total This is the sum of the number of detected devices of all classes Each rogue is counted in this list exactly once even if it was detected by multiple Arrays Red
69. Policies 231 e XIRRUS Management System SNMP NOTE To manage your Arrays with XMS it is very important to use the correct SNMPv2 Read Write Community String or SNMPv3 Settings authentication information for proper operation of XMS with the Array Both XMS and the Array must have the same settings for the SNMP version being used About SNMP v2 and SNMP v3 XMS supports both Version 2 and Version 3 of SNMP SNMPv3 is preferred for the higher level of security it provides When XMS is discovering Xirrus Arrays and PoGE injectors it attempts contact via SNMPv3 first SNMPv2 is tried next Discovery records which SNMP version was used to find a Xirrus device and XMS uses that version for management thereafter Arrays support both SNMPv2 and v3 injectors support SNMPv2 only See Adding or Deleting SNMPv2 and SNMPv3 Entries on page 81 Read Only Privacy Password Fr Figure 161 SNMP Settings 232 Managing Configuration with Policies e Management System XIRRUS SNMP Settings This window Figure 161 has three sections 9 SNMP Trap Settings configures traps sent by Arrays for both SNMPv2 and SNMPv3 e SNMPv2 Settings enables SNMPv2 and sets the SNMPv2 Community Names on Arrays 9 SNMPv3 Settings enables SNMPv3 and sets the SNMPv3 authentication parameters on Arrays SNMP Trap Settings SNMP Trap Hosts 1 to 4 Enter the IP address of an SNMP management station that is to receive SNMP t
70. Policies 337 e XIRRUS Management System mode See the Xirrus Wi Fi Array User s Guide to view the features supported by an Array s license key Contact Xirrus Customer support for questions about your licenses If you select Disabled then 802 11n operation is disabled on the Array IAPs abgn1 though abgn4 will behave in the same way as IAPs abg1 to abg4 on XS Array models the 802 11a n IAPs will operate in 802 11a mode TX Chains Select the number of separate data streams transmitted by the antennas of each IAP The default is 3 RX Chains Select the number of separate data streams received by the antennas of each IAP This number should be greater than or equal to TX Chains The default is 3 Guard interval Select Short to increase the data transmission rate by decreasing wait intervals in signal transmission Select Long to use the standard interval The default is Short Auto bond 5 GHz channels Select Enabled to use Channel Bonding on 5 GHz channels and automatically select the best channels for bonding The default is Enabled 5 GHz channel bonding Select Dynamic to have auto configuration for bonded 5 GHz channels be automatically updated as conditions change Select Static to have the bonded channels remain the same once they are selected The Dynamic option is only available when Auto bond 5 GHz channels is enabled The default is Dynamic 2 4 GHz channel bonding Select Dynamic to have auto configuration for
71. Primary Port 1813 a Accounting Primary Shared Secret p O Accounting Verify Primary Secret F Accounting Secondary HostName o Accounting Secondary IP Address 0 o D 0 Admin Accounting Secondary Port 1813 fal Radius Accounting Secondary Shared seert SCS Accounting Verify Secondary Secret SOtC lt C lt 7 lt 3 FTSt lt S SCS Internal RADIUS Users Figure 185 RADIUS Management 276 Managing Configuration with Policies e Management System XIRRUS RADIUS Management Details Internal or External Choose either Internal or External for the type of RADIUS server If you choose Internal the RADIUS server will only authenticate wireless clients that want to associate to Arrays that are using this policy if they are included in the Internal RADIUS Users Details list useful if an external RADIUS server is not available If an external RADIUS server is available choose External to take advantage of the added user authentication functionality that comes with 802 1X technology External RADIUS Details The fields in this section only become available if you chose External when defining the type of RADIUS server otherwise they are grayed out Pat You may specify the RADIUS servers including accounting servers by either IP address or host name To prevent confusion we recommend that you specify one or the other but not both If you do enter both only the IP address will be used The host na
72. RADIUS servers including accounting servers by either IP address or host name To prevent confusion we recommend that you specify one or the other but not both If you do enter both only the IP address will be used The host name will only be sent to Arrays running ArrayOS Release 3 5 or above 9 RADIUS Details This section of the window appears if you have selected SSID Specific Settings You may set the RADIUS Server Mode to Internal or External If you select External additional fields will be displayed so that you can specify external RADIUS servers For more information on RADIUS server settings see RADIUS on page 276 9 Accounting This section of the window appears if you have selected SSID Specific Settings and you set the RADIUS Server Mode to External If you click the On button for Accounting the Array will send RADIUS Start Stop and Interim records to a RADIUS accounting server Additional fields will be displayed so that you can specify your accounting settings For more information on accounting settings see External RADIUS Details on page 277 After configuring your SSID parameters click on the Apply button You are returned to the SSID Settings window where the new SSID is displayed in the list 298 Managing Configuration with Policies e Management System XIRRUS Figure 195 SSID Settings Customizing an Internal Login or Splash page You may customize these pages with a logo and or bac
73. Redirect Policy s scssccsssiessssssssesscssesaasossnseaesnsss 358 Saving Your Web Page Redirect Policy i5iionauieom sonipes 361 Configuration File Advanced 2 neut te itis 362 Creating a New Config File Pol ey adus ala in epit ine Eripe 362 Saving Your Config File Poliey isss reete entes 365 fero M 366 Creating A New Group i25 scie ctii rene etra esee ther REUS H Heroid 366 Applying Your Array Groups Polley scans aere rre rere 369 ANAIE m 370 Managing at cle dee eee eee eee 371 About RE POLES consi b eat pone nieve E He EH EH SEE HIS 371 My REPOT Gis nitore pr T omn ndn rein de 373 Maewine a REPORT canctioneina aee emos vb emn RSS 375 New INEDOEL npa mE mM DEL MU RM One G I 378 Selection Criteria iio nii taisiba ea ab itte ten Ho iet a iibi M eoe Lee deines 384 CUS CORI ZE sxc H 387 Traffic Reports casz ssensscaissderabsshansepnetatascatatutinnsesents iasletanonnans A AORAR SAREA R deter areas 388 Wireless Traffic ocean inis anreisen temi cete SEE TEEVEE 389 viii e Management System XIRRUS Wireless Errors cute rie ae aR alae eats 392 Station TARTS iuiecedecocnem atiam ep ni er epe tei ESEE 394 LU ALO a E aO MM 397 Ethernet rafia ctii hate atues oatdeantes E iei ee eimi esaet 399 Ethernet BXEORS 2iocaaieeaibience esee indebite bees 402 DLAHONARC PONS wai tunm en ird IH ERE EHE EUER 404 Associat
74. Release 5 0 5 to Release 5 1 you must enter a new license To upgrade from ArrayOS Release 5 0 5 to Release 5 0 8 use the existing license Managing Your Wi Fi Arrays 189 e XIRRUS Management System The Array Licensing Window This window is displayed by your browser when you select Tools Array License Management from the Menu Bar on top of The XMS Java Client Interface You may also access this page using the web client by clicking Configure on the top of the window and then selecting the Licenses page See About Configure Pages on page 425 Initially this page displays a list of all deployed Array licenses being managed by XMS This is a list of all discovered Arrays and their licenses By default the following is shown for each Array the License Key the Hostname along with the Array Serial Number the License Version and Features supported by the license and the license Expiration date You may use the Select Columns option to choose which information you wish to display XiRRUS Monitor Po OW Sa Settings Deployed Licenses You currently have 345 pending licenses Select Columns Home Showing 1 to 8 of 8 Rows 25 v 1 Network Settings Hostname Serial Number License Key License Version License Features Expiration ArrayOS 5 0 Radio Settings RF Performance Manager Location Lobby XN1637091DD13 035QR 9NNOA AF KH 4030U 50 RF Analysis Manager PoGE RF Security Manager 802 11n ArrayOS 5 0 RF Performance Mana
75. Start Stop and Interim records to a RADIUS accounting server click the On button The following fields appear Accounting Interval seconds Specify how often Interim records are to be sent to the server Accounting Primary Host Name Enter the hostname of the primary RADIUS accounting server If you enter an IP address as well the IP address has precedence and the host name will be ignored Accounting Primary IP Address Enter the IP address of the primary RADIUS accounting server that you intend to use Accounting Primary Port Number Enter the port number of the primary RADIUS accounting server The default is 1813 Accounting Primary Shared Secret Verify Secret Enter the shared secret that the primary RADIUS accounting server will be using then re enter the shared secret to verify that you typed it correctly Accounting Secondary Host Name Enter the hostname of the secondary RADIUS accounting server If the primary server goes off line the Array will failover to this secondary server defined here 278 Managing Configuration with Policies e Management System XIRRUS If you enter an IP address as well the IP address has precedence and the host name will be ignored Accounting Secondary IP Address optional If desired enter a secondary IP address for an alternative RADIUS accounting server Accounting Secondary Port Number If using a secondary accounting server enter its port number T
76. Starting database server for database manager Web Server Starting from Windows services please wait while the server starts Starting the XMS Services Server startup in progress please wait Database Server The XMS Server is now running Point your browser to http lt XMS Server IP gt 9090 or locally from this computer use http localhost 9090 Client Login Page RMI Registry Offline Activities Service Name Software Manager Database Manager Start Stop XM Server Start Figure 338 Xirrus Server Management Tool XMS Server Manager The XMS server typically runs as a Windows service and is listed along with other Windows services accessible from Windows Administrative Tools You may view the status of the XMS server in this way but we recommend that you start or XMS Administration 523 e XIRRUS Management System stop the server using XSMT rather than as a Windows Service so that you can monitor status Starting the XMS Server on Windows based Systems In the installation process there are options to have the XMS server start automatically or to wait for the administrator to explicitly start it To see whether the XMS server is running correctly use XSMT If XSMT is not running start it using the Windows Start button gt All Programs gt Xirrus gt Xirrus Management System gt XA 3300 CC The XSMT window is displayed Figure 338 9 Starting XSMT on the XM 3300 CC Wh
77. The XMS Java Client Interface Click the Licenses link on the left and then click the Export link that appears underneath to display all deployed licenses Figure 135 To proceed select the desired licenses by checking them off in the first column Click the Next button at the top of the page To export an xls file click the Excel radio button To export a file of comma separated values csv click the Csv radio button Then click Export The File Download dialog box will allow you to open the file or save it to the location you select B C D E F G H Serial Number License Key License ViFeatureO Feature1 Feature2 Feature3 Featured XN1637091DD13 035QR 9NNOA AFOKH 4030U 5 802 11n RAM RPM RSM XN0402101F536 070YX 5CBFP W8EGX RFJQQ 5 802 11n RAM RPM RSM XN0803091BF32 13JNJ EY2TJ 76CR3 QXLJ5 5 802 11n RAM RPM RSM XN0834091D82F 1ETGD 0YKFW 0YWTT 23AAY 5 802 11n RAM RPM RSM Figure 136 Sample Export File This exports the selected deployed licenses into a file of the selected format A sample export file is shown in Figure 136 Importing Array Licenses Use this feature to import a csv or xls file with licensing information for any number of Arrays For example to upgrade your entire Xirrus Wi Fi network to a new major software release you must first deploy licenses for that release Xirrus will furnish these licenses to you in the form of an Excel csv file Simply click to import the file and click Finish to
78. Time link on the left to display the Date amp Time page This page manages your time zone and sets the time manually or sets up Network Time Protocol usage to obtain accurate time settings automatically Time Zone and Daylight Savings Time Select your local Time Zone from the pull down list Enable Auto Adjust Daylight Savings if you want the system to adjust for daylight savings automatically otherwise click No 9 Using Network Time Protocol To have the time of day set automatically from an accurate time server set Use Network Time Protocol to Yes this is the default You may modify the NTP Servers primary secondary tertiary or leave them at the default values which use NTP Pool time servers http www pooLntp org 9 Setting time manually Set Use Network Time Protocol to No Use the Adjust Time and Adjust Date fields that appear to set the correct time and date Click the Save button when you have finished making your changes 510 XMS Administration e Management System XIRRUS Web Client Database Backup Settings JM Help Logot y y e Monitor B amp configure 9 Reports AX Setting You must first configure a backup location before scheduling backups Status Backup Location Network Path 10 100 100 6 Date amp Time sc Email Username smith 1 Password mm Polling SSH Server TIP Leave the domain name blank when using a stand alone server or workstation Server Logs U d prane Schedule Bac
79. Use the Reset link at the left to display the Reset page This page allows you to perform a reset on the server This deletes all data in the XMS database but it does not delete backup files It also returns the XMS server back to all of its factory default settings except that Web Client Network Settings and Web Client Date and Time Settings are retained Click the Perform XMS Reset button to perform the reset You will be asked to verify that you wish to proceed When the reset is complete your first action should be to specify Web Client Database Backup Settings 522 XMS Administration e Management System XIRRUS Managing XMS on Windows based Systems On the XM 3300 and XA 3300 CC the Xirrus Server Management Tool XSMT is used to start stop or view the status of the server install patches and for advanced settings and database management The web client may also be used for managing some settings XMS server management is discussed in the following sections e Starting the XMS Server on Windows based Systems on page 524 Xirrus Server Management Tool for Windows based Servers on page 526 9 Managing XMS Server Settings via the Web Client on page 540 Figure 338 shows XSMT s XMS Server Manager window when the server is up Server Management Tool File Database Advanced Help muere j XMS Server Mana Software Manager Required Services Logs Service Name
80. Use the Trap Receivers page to set up one or more destinations for these traps Home Enter a new trap receiver and click the Add button Network Settings Host Name or Address NOC MOM Radio Settings Port Number 2 Advanced Config Community Name fxirrus PoGE Add Devices Description NOC Supervisor SW Trap Receivers Enabled Licenses Custom Fields Destination Host Destination Port Community Name Description Enabled 10 100 54 41 162 xirrus iv Remove Figure 309 Trap Receivers To add trap receivers click the Configure button near the top of the window then click Trap Receivers on the left Figure 309 Enter the Host Name or IP Address of the destination that is to receive traps sent by the XMS server If needed change the Port Number from its default value of 162 Set the Community Name needed for access to this destination Add a Description for this receiver if desired and set Enabled to make this entry active Click Add when done The new entry will be displayed in the list of trap receivers If necessary you may use the Remove button to the right of an entry to remove this trap receiver from the list 488 The XMS Web Client e Management System XIRRUS Array Licenses This page displays and manages the licenses for Arrays in your Xirrus network You may view the license of each Array and deploy new or upgraded licenses For complete details on the use of this
81. User Username wuemme Authentication Password Privacy Password p Authentication re Privacy pes exl Figure 61 Adding an SNMPv3 Username Enter the new Username and Authentication and Privacy Passwords Set the Authentication and Privacy settings to match your Arrays Click Apply 82 Discovering the Network e Management System XIRRUS To add an SNMPv2 Community Name click the Add button under that list as shown Figure 60 The Add Community dialog box appears Enter the new name and click Apply Add Community x Enter Community Name Community Name myCommunity Apply Cancel Figure 62 Adding an SNMPv2 Community Name The next time that the discovery process runs after adding a new SNMP v2 or v3 entry XMS will use all of the Community Names or Users listed Adding or deleting a name on a list will not trigger discovery to run immediately The new name will be used by the next discovery process but will not be used now if discovery is currently running To trigger a discovery process using the new entry see Rediscovering a Network on page 85 To delete an entry from either list select it and click Delete You will be asked to confirm the deletion The next time that the discovery process runs it will use the Community and User Names listed at that time Note that discovery will not remove devices from its device list if they have a community
82. VLAN must have been completely configured either use DHCP or set the IP address IP subnetwork mask and gateway 262 Managing Configuration with Policies e Management System XIRRUS You may select any VLAN from the list as the native VLAN even if it is also used for other purposes VLAN List Details 9 VLAN Name Enter the name of the VLAN that you wish to create 9 VLAN Number Enter the unique number that is assigned to your VLAN Management over this VLAN Select the check box to allow the Array to be managed over the VLAN The VLAN address must also be configured Enable DHCP Enable this setting if you want the Array to get its IP address from a DHCP server IP Address Enter an IP address only you are using a static IP address IP Mask Enter the IP mask used by your network only if you are using a static IP address IP Gateway Enter the IP address of the gateway used by your network only if you are using a static IP address Tunnel Server If this VLAN is to be tunneled enter the IP address or host name of the tunnel server that will perform the tunneling For more information on virtual tunnels please see About Virtual Tunnels and VTun on page 259 Tunnel Port If this VLAN is to be tunneled enter the port number of the tunnel server Tunnel Secret Enter the password expected by the tunnel server Managing Configuration with Policies 263 e XIRRUS Management System When you have complete
83. View Results The web client will apply the changes you entered and display the success or failure of the configuration operation on the selected radios To Export Radio Settings This option exports channel and other radio settings on selected Arrays to an Excel file or to a CSV file a set of comma separated values that are compatible with Microsoft Excel This file is useful in a number of ways 9 Asa backup of the current configuration especially since the settings in the file may be imported to restore this configuration 9 To provide Xirrus Customer Support with a snapshot of the configuration of your network at their request 9 You may edit the settings in this file and then import the changed values Take care only to modify the fields that are editable on the Bulk Configuration page This feature is used in exactly the same way as the export feature for network settings Please see To Export Network Settings on page 461 for instructions To import a file that was exported from the Radio Settings page see To Import Radio Settings on page 469 Note that any time you click the Export button or use the Export Settings link the old unedited values will be exported unless you have completed saving your edited values to the Arrays To Import Radio Settings This option allows you to change settings on radios by importing a file that was exported from the Radio Settings page See To Export Radio Settings on page 469 for de
84. Web Client Polling Settings on page 516 If you have a large number of Arrays under management we recommend that you increase the polling interval to enhance XMS performance The following table summarizes the recommended polling intervals for various network sizes XMS Administration 537 e XIRRUS Management System Polling Rate Number of Arrays Base interval multiplied by Fast 0 to 100 1 Medium 100 to 250 2 Slow Over 250 3 To change the polling interval at any time when the XMS Server is running select Polling from the Advanced menu Drag the slider Figure 350 to the preferred polling speed as suggested in the table above Click Save when done The polling rate may only be changed when the XMS server is running VS SNMP Potting Rate X Arrays are periodically polled by the XMS to gather statistical information A Fast rate can provide near real time data about the Xirrus arrays For smaller networks while a Slow rate is more suitable for a large network of arrays You may adjust the polling rate with the slider below Click here for more information Slow Medium Fast Logs 09 21 54 469 Stopping all pollers 09 21 55 484 Deleting all poller definitions 09 21 55 922 Adding poller definitions 09 21 56 687 Restarting poller subsystem 09 21 56 687 Attaching pollers to devices 0 total array s 0 updated array s 0 failed array s 09 21 57 250 Attaching pollers t
85. When the IAP Settings window is presented double click the desired IAP The configuration options for a selected IAP are identical to the configuration options presented to you when creating IAP and RF configuration policies To avoid repetition refer to IAPs on page 309 and RF on page 316 when configuring the settings for a specific IAP The two differences between this window and the corresponding policy creation window are the inclusion of an Execute button and the fact that this window shows the currently configured values on the IAP When you are finished making changes click on the Execute button to apply your new settings 200 Managing Your Wi Fi Arrays e Management System XIRRUS Was OOOO X Figure 142 RF Settings For more information about executing configuration changes refer to the following 9 Executing the Configuration Change on page 176 9 Saving Results on page 176 What if the Configuration Changes are Rejected on page 176 Managing Your Wi Fi Arrays 201 e XIRRUS Management System Viewing Events and Alerts IAPs To view a summary of events and alerts for the Array to which an IAP belongs select and then right click the IAP and choose Alarms and Events from the pull down list The Events and Alerts summary window for the Array is displayed For more information about Events and Alerts see Monitoring Your Network on page 105 Events and Alerts For 00 0f 7d 00 43 0a S
86. _ in descending order filtered data other pages e e Monitor Oan lt Reports 2 gt Settings Date from Time from Date tto Time to Search Text Severity A Severities z Log Type Syslog z Search Help Logout Select Columns Export m Showing 1 to 25 of 92245 Rows 25 x 123456789 Time Severity Array IP Address Mac Address Array Hostname Message Oct 22 2010 2 30PM Info 10 100 54 111 00 0f7d 00 03 1f XS0834081AA38 Oct 22 05 31 39 debug Rogue AP blocked SSID pctest BSS J 22 2010 2 30PM Info 10 100 54 29 00 0f7d 01 95 b1 XN123810220A3 Oct22 13 30 33 debug Rogue AP blocked SSID pctest BSE Oct22 20102 30PM Info 10 100 54 28 00 0f7d 01 35 0e NORTA Array5 Oct 22 13 26 27 debug Rogue AP blocked SSID pctest BSE Oct22 20102 30PM Info 10 100 54 111 00 0f7d 00 03 1f XS0834081AA38 Oct 22 05 31 38 debug Rogue AP blocked SSID pctest BSE Oct22 20102 30PM Info 10 100 54 111 00 0f7d 00 03 1f XS0834081AA38 Oct22 05 31 38 debug Rogue AP blocked SSID pctest esed Figure 80 Syslog Window You may use the search and filter capabilities to display only selected entries Figure 81 Select a Severity level from the drop down list to display only syslog entries that are at that level Search string Select Severity full or partial level 1 Date from 10 20 2010 Time from 00 00 Date to 10 22 2010 Time to 00 00 Search Text Jupda Severity All Severities gt Log Type Syslog
87. a new report using a name that is already in the My Reports list 9 Options These settings define the selection criteria for the report The types of criteria shown will differ by report type They typically select criteria such as the Arrays and time period to be included in the report For details on setting up these options for the report please see Selection Criteria on page 384 Managing Reports 381 e XIRRUS Management System 9 Schedule You may schedule the report to be automatically run on a recurring schedule Click Enable Schedule to display time settings Select one of the following options Hourly 35elect the minutes after the hour when the report is to be run every hour For example to run the report on the hour every hour select 00 Daily Enter the Time of Day when the report is to be run every day based on a 24 hour time notation For example midnight is 00 00 half past noon is 12 30 and 4 PM is 16 00 Weekly Select the day of the week when the report is to be run and then enter the Time of Day when the report is to be run as described above Monthly Select the day of the month when the report is to run and then enter the Time of Day for the run as described above You should use the Time Span option when scheduling reports TS because the Specific Date Range option will just generate the same report over and over again 9 Email Report To If you wish to have this report emai
88. a new user click on the dh button to display the Internal RADIUS User List window Figure 186 9 New User Name Enter the name of the new user 9 User Password Enter a unique password for the new user 9 Verify User Password Retype the user password in this field to verify that you typed it correctly 9 User Group If you want to make this user a member of a previously defined user group enter the name of the group This will apply all of the user group s settings on the Array to the user 280 Managing Configuration with Policies e Management System XIRRUS e SSID Network Name Enter an SSID for this user This will be the only SSID that the user can associate with When you have finished inputting data for the new user click on the Add button to add this user to the list and close the Internal RADIUS User List window After completing all of the desired fields in the RADIUS window either click on the Apply button to save this policy or click on one of the following buttons to configure more security policy options 9 MAC Access List Configure an access control list based on MAC addresses 9 Admin RADIUS Set up Array administrator authentication via external RADIUS servers MAC Access List This window allows you to create an access control list for users based on the MAC addresses of the clients they are using The list can be defined as an Allow List which PERMITS access to the network only to the clients who are inc
89. address to which an Array must connect perhaps due to NAT or other considerations please check the box specify the address and click the Save button below Use alternate IP address Alternate IP Address 10 10 10 10 IF you Feel the name and password to the SSH server has been compromised hit the Reset Login button to change these values These values are internal to XMS and hidden From view Figure 351 Changing the SSH Server To change the IP address that Arrays will be instructed to use for an SSH connection select SSH Server from the Advanced menu Note that the dialog box displays the current SSH server address Figure 351 Click the Use alternate IP address checkbox and enter the desired Alternate IP Address If you need to reset the SSH server s login because you think the name and password may have been compromised click the Reset Login button Click Save when done Note that the Arrays always use Port 22 for SSH If you are using the browser interface to change the SSH server settings proceed as described in Web Client Changing the SSH Server Address on page 517 XMS Administration 539 e XIRRUS Management System Managing XMS Server Settings via the Web Client The XMS web client also allows you to change some XMS server settings Access it in the same way as described in Accessing the Web Client on page 503 m sede ien te to a i The Xirrus Management System XMS
90. allows you to update the XMS server software When you receive updated software from Xirrus it comes in the form of a tar file For example xms 5 0 0 1951 tar XMS Administration 521 e XIRRUS Management System An upgrade file for a Linux based server contains an entire software upgrade rather than having an incremental patch that depends on previous patches being installed Please follow the instructions furnished with the release carefully The XMS server must be stopped before you can perform an upgrade When you receive a new release file from Xirrus place it where you will be able to browse to it from the web browser where you are running the web client Warn all XMS clients see Broadcast Message on page 500 that the XMS server will be going down but do not stop the XMS server or you will lose your access to the web client Next click the Browse button to browse to the tar file Click Upgrade to install the new software When the process is complete a pop up message will be displayed It will inform you that you must reboot the Appliance Click the OK button to close it The new release becomes the current version of the XMS server Web Client Resetting the XMS Server Help Logout a e Monitor ZX configure G Reports aX Settings EL e E ee WARNING This operation will delete all XMS data and settings but preserve network and date time settings Perform XMS Reset Figure 337 Resetting XMS
91. an9 9 9 4 an3 e e 9 9 Figure 200 Arrangement of IAPs XN16 Array From the Configuration Policies node in the tree click on IAPs to display the IAPs window This window contains a list of all IAP policies currently available with tools to manage these policies IAPs nf xj Coums Refresh Execute Delete 2 x Total 2 Policy Name Modify off Es Er on y x Figure 201 List of IAP Policies The columns in this window show selected settings for the listed policies For information about changing the columns displayed see Selecting the Columns Shown in a Policy Window on page 220 Click Add Policy on the IAPs window When the Add Policy window appears select Copy from a chosen Array recommended and choose a model Array or select Start from scratch as described in Adding a Policy on page 219 Click Managing Configuration with Policies 309 e XIRRUS Management System OK The policy details window appears Figure 202 This window allows you to select IAPs one at a time then establish configuration settings You may also set all IAPs to be enabled or disabled in one step by using the Enable All IAPs or Disable All IAPs buttons Policy Details Policy Name Save Configuration IAPs o IAP Settings abg Yes 2 4 1 Max inte 20 abg Yes mo mo Ma Omni 20 abg Yes 2 4 11 Max inte 20 abg
92. are currently in demo mode Please enter your license key If you do not have a license key please contact Xirrus Sales at 1 805 262 1600 2 Figure 23 XMS Server License Getting Started with XMS 35 e XIRRUS Management System 2 Xirrus will supply you with a License Key and Serial Number for your server Enter both of these fields exactly as they were provided to you the fields are not case sensitive and click Apply After processing the license information the following additional fields will be shown e Product Name XMS server s product name Max Version the highest release number supported by this license All incremental upgrades to the release shown are also supported For example if Max Version is 5 0 then this license will run Release 5 0 999 but Release 5 1 will require an updated license e Max Array Count the server is licensed to manage a specific maximum number of Arrays To manage additional Arrays please contact Xirrus to upgrade your license Expiration Date the date that this license expires 36 Getting Started with XMS e Management System XIRRUS Discovering Networks and Arrays After completing a successful installation of XMS you will need to discover any reachable networks and Arrays then decide which ones you want to manage from XMS XMS does not automatically discover any networks when it is first started When the XMS Java client is started and there
93. as a whole It also allows you to schedule firmware updates for individual Wi Fi Arrays or groups of Arrays to ensure that your Array firmware is up to date and consistent across the network Introduction e Management System XIRRUS Key Features and Benefits This section describes some of the key product features and the benefits you can expect when deploying the XMS to configure and manage your network of Wi Fi Arrays Centralized Management Allows you to view and manage your entire wireless network at Layer 3 using your existing Ethernet infrastructure In addition XMS discovers authenticates and configures new Wi Fi Arrays to the network making large scale deployments quick and easy Policies ensure consistent configuration of Arrays across the network and they are easily created by copying the configuration of a known good Array Scalability With its ability to support over 500 Wi Fi Arrays per XMS server XMS allows your network to grow as your business grows No Traffic Jams Because the XMS resides outside the data path performance bottlenecks and points of failure are eliminated Security Management Defines and distributes security policies for the entire network and allows you to set encryption authentication access times and guest user access policies for secure Wi Fi Array rollouts Powerful Graphical Interface XMS s client interfaces provide all the tools and features that are necessary to ensure your
94. available unless the table contains more than one page of information In this case these buttons become active and allow you to navigate through multiple pages in the following ways from left to right e First Page Go to the first page of the table 9 Previous Page Go to the previously viewed page in the table 9 Next Page Go to the next page in the table 9 Last Page Go to the last page in the table Setting the Page Length for a Table To change the maximum number of rows that will be displayed on each page of a table choose a value from the Page Length pull down list either 50 100 250 500 or 1000 The default is 50 rows per page Refreshing the Page View To refresh the data in a table go to View in the Menu Bar and choose Refresh or right click in any row and choose Refresh from the pull down list All data in the active table is updated to the latest values The XMS Java Client Interface 59 e XIRRUS Management System Specifying a Range To view data based on a specific range of rows enter a value for the first row to be displayed in the Displaying field then enter value for the last row to be displayed in the to field When finished press the Enter key to refresh the table so that only the rows you specified are included in the table The maximum number of visible rows when a table window is maximized is 36 although the table may contain many more rows than the window can display Specifying a range defi
95. be displayed To hide a column select it from the Visible Columns and click to move it to the Hidden Columns list Similarly to display a column select it from the Hidden Columns and click gt gt to move it to the Visible Columns list There are also buttons to hide or display all columns Figure 111 Use the Top Bottom Up and Down buttons to arrange the columns left to right Use the Defaults button to restore the columns that are displayed by default Click Close when done Using the Search Feature in the Resource Windows You may search for an Array using the Find function at the bottom left of The Arrays Window You may search for an IAP or Station on their windows in the same way The following rules apply to the search The search is not case sensitive Entries containing the search string in any position in any displayed column are found The target entries need not start with the search string One entry at a time is found As you type into the search field the first entry that contains the search string is selected As you type additional characters into the search field the current entry remains highlighted as long as the entry contains the string When the current entry ceases to match the next entry in the list that matches the search string will be highlighted 9 fthere are no matches to the current string the Find field is displayed in red 9 Tojump to the next matching entry use the Enter key 164 M
96. be shown in this list This list shows information about each alarm and the Array that generated it For each alarm the following information is shown by default The Time and date of the alarm The alarm s Severity Critical Major Minor Warning or Clear See Alarms on page 107 for more details The Source MAC address of the Array that generated the alarm The IP Address of the Array that generated the alarm The Hostname of the Array that generated the alarm A text Description of the alarm 454 The XMS Web Client e Management System XIRRUS Events The web client Events page lists the log and syslog messages received by XMS All severity levels above the informational level are shown by default This is a display only page but values may be exported A set of search fields above the list allow you to select the messages to be displayed For the XMS syslog to function well Arrays must meet certain requirements such as being configured to use an NTP server for setting system time Please see Syslog Events on page 112 for details The Events page has a special search feature for finding particular log messages This is described in About Using the Events Page on page 455 Date from 10 20 2010 Time from 00 00 Date to 10 22 2010 Time to 00 00 Dashboard i Search Text fupda Severity All Severities z Log Type Syslog z Ses Arrays Radios SelectColumns Export Stations Showing 1 to 25 of 8230 Rows 25
97. box will allow you to save the results in a file or open them in Excel Email Notifications for Events and Alarms You can set up email notifications to be sent when specified network events or alarms occur The email will identify the notifying Array by host name IP address and MAC address Monitoring Your Network 115 e XIRRUS Management System Event Notifications Setup Notification Settings Select Add to setup a Notification Action to be taken by the XMS when an Alarm or an Event occurs Status Name Event Type Notification Type Severity Sender Recipient Ada Enabled Manager Alarm Email Critical kxms yzcom mgr yz com mm Eat Java Applet Window Figure 82 Event Notifications List To set up an email notification you must be in an alarms or events window Click on the Network Events or Alarms node in the Tree to open the desired window From the Edit menu select Notifications or simply enter Ctrl Shift A Figure 82 shows the Event Notifications List which displays the notifications that you have already created You may select an existing entry and modify or delete it using the Edit or Delete buttons Note that you cannot change the order in which the entries are listed To create a new email notification click the Add button Figure 83 shows the Event Notifications Setup window Check the Enabled checkbox to enable this email notification to be sent when the selected conditi
98. but 300 events stored in the XMS database sorting at the client level sorts just the 25 displayed events and not the entire 300 events in the database Client level sorting is indicated by a GREEN arrow ascending or descending in the column header and can only be performed by pressing the Ctrl key while clicking inside the header If you don t press the Ctrl key then all sorting is always performed at the server level Searching for Table Entries Some tables have a Find field underneath the table and they are used as follows If the window has no Find field like the Events Syslog SSIDs and Audit windows search as described in Searching for Events on page 64 Enter a string in the Find field and XMS will search for the first matching entry in the table as you type the string Click Find Next or Find Previous to find additional matching entries If the Find field turns red then no matching entries could be found B Mirus Management Application 5 AEDEM em a Bm B a a S oo Resources 009017422 6 40 192 waps T 009174622650 arm 000174220865 jw ji wos 009176220670 sutons 00 1606 1524 1b 001658152416 ji ji ji ji E ps 39 1010040 12032008 03 XND amp 310800f41 12 04 2009 13 00 13 10 85 00 3e XN08310800F41 001310850030 XS 39 10 100 40 26 Search for entries Figure 44 Searching for an Entry The XMS Java Client Interface 61 e XIRRUS Management Syst
99. byte hexadecimal address assigned by a manufacturer to a device Managed Network The network under management by XMS This includes all the Arrays discovered by XMS and all of their IAPs and the devices that are associated to them Map A pictorial representation of your network or subnet The background image for the default main map supplied with XMS is a global map of the world but you can change the background image of any map at any time For example you may want to organize your maps to reflect a corporate organization based on functional areas physical site layouts or geographic areas Map Symbol Also known simply as symbols these are graphical representations of Arrays in the XMS client interface maps The symbol for an Array is a pictorial image of the Xirrus Wi Fi Array See also Icon Mbps Megabits per second A standard measure for data transmission speeds for example the rate at which information travels over the Internet 1 Mbps denotes one million bits per second MTBF Mean Time Between Failures Used in reports this shows the average time in hours and minutes between failures of an Array 548 Glossary of Terms e Management System XIRRUS MTTR Mean Time To Repair Used in reports this shows the average time in minutes to restore functionality to the Array following a failure NetBIOS Network Basic Input Output System All computers running the Windows operating system have
100. check the Anonymous checkbox and you will not need to enter a user name and Monitoring Your Network 117 e XIRRUS Management System password Otherwise if the SMTP server requires users to log in clear the Anonymous checkbox and then enter the User and Password for a valid SMTP account Note that many IT administrators do not allow anonymous logins to their SMTP server to thwart spammers If you are not certain about how to access the SMTP server check with your administrator Click OK when you are done and the new notification is complete 118 Monitoring Your Network Management System XIRRUS Security Managing Intrusions The Devices Window To manage security in your wireless network use the XMS Devices window This window provides an overview of the security status of the network including counts of known and rogue APs the collective list of potential rogue devices detected by Arrays in the network and types of encryption in use The Arrays that detected the intruding APs are also identified B Xirus Management Application eles Fie Admin Tools Window Help e 0m XIRRUS xus KNO Devices Jel x E amp Montor H Refresh Array Group All Arrays amp Dashboa 4 Alarms Detected Devices FJ ES Lu Ow e cem Hu 6B Events E Resources 8 Maps Arrays aps 5 Configurator Poicies amp Groups amp A
101. click the Add button Network Settings User Name jsmith Radio Settings Password eeeeeeeeceee Advanced Config PoGE Add Devices SNMPv2 Settings User Name SNMPv3 Users SSH Users Add Networks Figure 307 Adding SSH Users These authentication entries are not used by the discovery process itself but are managed on this window for convenience When XMS needs to log in to an Array s shell it tries entries from the list until it finds one that works Then it will The XMS Web Client 485 e XIRRUS Management System remember to use this login for this Array On future login attempts to the same Array it will try the remembered login first Add Networks To add networks for discovery click the Configure button near the top of the window then select Add Devices on the left Click the Add Networks link on the left when it appears Figure 308 When the page appears click the Add Network button on the upper left In the Add New Network dialog box enter the subnet s Network Address and Subnet Mask Select Start Discovery so that the discovery process will be initiated then click OK The newly entered network will be displayed in the list of networks for discovery Discovery begins soon after adding a network Be careful to specify the subnet accurately to avoid creating excess traffic by discovering a needlessly large network To add individual Arrays or power supplies for discovery use the Add Devices
102. configured in your DHCP server will be used If you have not assigned a reserved DHCP lease to the Appliance select the Static option in Configuration Server Protocol under Network Interfaces for each Ethernet port that you are using Make sure that Enable Interface is set to Yes and enter the IP Address and Subnet Mask Under General Network Settings enter the Default Gateway Address and the DNS Domain and DNS Servers Note The default IP address for ethO is 10 0 2 10 for eth1 it is 10 0 2 11 3 The Hostname of the Appliance is set to Xirrus XMS by default If you wish to change the Appliance s DNS Hostname please see General Network Settings on page 508 for other changes that you should make to ensure proper operation of XMS in your network Initial Date Time Settings 1 Clickthe Date amp Time link on the left 2 Select your Time Zone Enable Auto Adjust Daylight Savings by clicking Yes 3 We recommend that you leave Use Network Time Protocol enabled this is the default You may modify the NTP Servers primary secondary tertiary or leave them at the default values which use NTP Pool time servers http www pool ntp org 4 If you disable Use Network Time Protocol set the correct time and date in the appropriate fields XMS Administration 505 e XIRRUS Management System Proceeding From Here Create a backup schedule for the XMS database Web Client Database Backup Settings on page 511
103. constantly changing IP addresses e Maximum Lease Enter a value in this field to define the maximum allowable DHCP lease time in seconds or increment decrement the time using the UP and DOWN arrows The default is 300 seconds e Starting IP Range Enter an IP address to define the start of the IP range for this DHCP pool that will be used by the DHCP server 9 End IP Range Enter an IP address to define the end of the IP range for this DHCP pool that will be used by the DHCP server For this pool the DHCP server will only use IP addresses that fall between the start and end range that you define 268 Managing Configuration with Policies e Management System XIRRUS Default Netmask Enter the subnet mask IP address for the DHCP server Default Gateway IP If necessary enter the IP address of the gateway Default DNS Domain Enter the DNS domain name See also DNS Settings on page 249 Default DNS Server 1 and DNS Server 2 and DNS Server 3 Enter the IP address of the primary DNS server secondary DNS server and tertiary DNS server See also DNS Settings on page 249 Enable NAT NAT Network Address Translation translates between the internal IP addresses assigned to stations by the Array s DHCP server and global external IP addresses NAT reduces the number of global IP addresses that a company needs and allows the company use a single IP address externally Choose Yes to enable NAT for this IP address pool or c
104. created using the configuration pulled from the Array will be named vlan SSArray You may edit the Policy Name Suffix used to create the names for the new policies Note that you may create policies from a number of Arrays the resulting policies will all have unique names Use the checkboxes to select each of the policy types that you wish to create Check the Global checkbox if you also wish to create a Global Policy based on this Array The global policy will include all of the policies that you selected If you apply this global policy to an Array then all of the configuration that you read from the model Array will be applied in one step The global policy is a handy shortcut rather than applying each of the created policies individually Click the Create button when you have selected the types of policies to be created XMS will list the policies to be created along with their names Figure 125A Confirm Policies For Creation The following policies will be created Policy Policy Name Already Exists Overwrite Create New Management Control mgmt 55 Array v v Services service 55 Array v VLAN vlan SS Array v Confirm Policies For Creation Security security 5S Array v SSIDs ssid 55 Array v IAPs iap 55 Array v RF rf 55 Array w The following policies will be created WDS wds SS Array v Fikers filter 5S
105. defining all rogue devices as either Unknown Known or Approved Based on your definition you can deny or allow access to the network for any rogue device RSSI Received Signal Strength Indicator A measure of the energy observed by an antenna when receiving a signal SNMP Simple Network Management Protocol A standard protocol that regulates network management over the Internet 550 Glossary of Terms e Management System XIRRUS SNTP Simple Network Time Protocol A simplified version of NTP SNTP can be used when the ultimate performance of the full NTP implementation described in RFC 1305 is not needed or justified SSID Service Set IDentifier Every wireless network or network subset such as a BSS has a unique identifier called an SSID Every device connected to that part of the network uses the same SSID to identify itself as part of the family when it wants to gain access to the network or verify the origin of a data packet it is sending over the network In short it is the unique name shared among all devices in a WLAN Subnet mask A mask used to determine what subnet an IP address belongs to An IP address has two components 1 the network address and 2 the host address For example consider the IP address 150 215 017 009 Assuming this is part of a Class B network the first two numbers 150 215 represent the Class B network address and the second two numbers 017 009 identify a particular host on
106. event notification messages across IP networks to event message collectors known as syslog servers Syslog messages are based on the User Datagram Protocol UDP They are received on UDP port 514 and cannot exceed 1 024 bytes in length they have no minimum length XMS reconciles syslog activity on all Wi Fi Arrays in the network Syslog reporting is time stamped and to ensure that all syslog time stamping is maintained by a universal clock for all Arrays an NTP Network Time Protocol server should be enabled Without an NTP server assigned no universal clock each Array will use its own internal clock and stamp syslog event times accordingly which may result in discrepancies For more information about using an NTP server refer to the Wi Fi Array User s Guide part number 800 0006 001 In addition to viewing syslog messages on the Syslog Window syslog events that trigger alarms occupy their place in the Alarms window For more information about syslog events that trigger alarms refer to Alarms on page 107 Configuring Syslog and NTP Servers Syslog and NTP servers are configured when creating a Services policy Figure 79 The Services policy is then applied to your Arrays to configure them As already mentioned without an NTP server assigned all Arrays will use their own internal clock which will cause time stamping inconsistencies across syslog events When configuring the syslog server you have the option of specifying a maximu
107. file If you start with a config file copied from the existing configuration of an Array you may edit the file to contain only the settings that you wish to copy to other Arrays The file makes incremental changes to the settings on an Array when it is deployed Thus settings not defined in the config file will be left unchanged Config files are useful in a number of situations In particular they are the only way to apply new features to Arrays before those features have been incorporated in XMS 470 The XMS Web Client e Management System XIRRUS Advanced Config Page Use this page to type in the entire config file from beginning to end i e from scratch to modify an existing file and to manage your config files Only expert users should create a config file from scratch As an alternative we strongly recommend that you use the Load from Array page to download a config file from an Array It may then be managed with this page Open this configuration page by clicking the Configure button near the top of the window then select Advanced Config on the left Add Delete Select Columns Showing 1 to 1 of 1 Rows 25 z 1 Home Configuration Name Description Network Settings NewConfig This is a test configuration Radio Settings Advanced Config Load from Array Deploy Configuration Figure 293 Advanced Config Page To create a config file from beginning to end from
108. for as many entries as you need to change When you are done editing click the Finish button The license modifications will be deployed to the selected Arrays and the status of the operation will be displayed for each Array 194 Managing Your Wi Fi Arrays e Management System XIRRUS 4 2 3 Select Arrays Edit Licenses Deploy Licenses lt Previous Finish Cancel Click on any license key below to make changes When your changes are complete click the Finish button to deploy the updated licenses to your arrays Select Columns Export Showing 1 to 4 of 4 Rows 5 gt a License Key Serial Number License Status Software Version Features 802 11n 13JN EY2T T6CR3 OXLJS XN0803091BF32 Deployed 50 RF Analysis Manager RF Performance Manager RF Security Manager 802 11n 4 RF Analysis Manager P70VX SCBFP W8EGX RF OKj Cancel 5 PePlcved i RF Performance Manager N RF Security Manager 802 11n 035QR 9NNOA AFOKH 4030U XN1637091DD12 Deployed 50 RE Analysis Manager RF Performance Manager RF Security Manager Figure 139 Editing Array Licenses You may not delete deployed licenses but you may delete those that have not yet been deployed See Managing Pending Array Licenses on page 196 Also note that you may not enter new licenses by hand To add a new license please see Importing Array Licenses on page 192 Managing Pending Array Licenses on page 196 Managing Your Wi Fi Arrays 195 e XIRRUS Manag
109. from a chosen Array recommended and choose a model Array or select Start from scratch as described in Adding a Policy on page 219 Click OK The Management Control window is displayed which is divided into four primary areas 9 Management Settings Allows you to define and configure different management options including Telnet SSH and HTTPS e SNMP SNMP Simple Network Management Protocol server allows remote management of the Arrays by XMS or other SNMP based management systems This window configures SNMPv2 and SNMPv3 including setting the Trap Hosts used by both SNMP versions 228 Managing Configuration with Policies e Management System XIRRUS 9 Admin Allows you to create and maintain administrator accounts 9 Console The console serial interface is used for connecting directly with an Array s Command Line Interface CLI via HyperTerminal This is useful when an Array s IP address is unknown or a network connection has been lost Management Settings This window contains fields for configuring the Telnet SSH and HTTPS management options Management Control x Policy Name XS083408 1AA33 Save Configuration iv Management Settings Enable Telnet Management C Yes No Telnet Timeout 500 zi Telnet Port 5 zi Enable SSH Management Yes C No SSH Timeout soo zl SSH Port 22 Ex Figure 160 Management Settings Managing Configuration with Policies 229 e XIRRUS Manag
110. group WPR web page redirect 306 user group limits and interactions 307 user interface 39 user name 26 32 34 503 username SNMPv3 81 V version software running on the Array 179 viewing discovered Arrays 72 discovered networks 72 virtual tunnels see VTun 263 VLAN broadcast optimization 324 VLAN ID 291 304 VLAN policy 259 voice implementing on Array 259 VTS Virtual Tunnel Server 263 VTUN 259 263 VTun specifying tunnel server 263 W wall setting for map 151 Index 563 WDS policy 342 Web Management Interface opening for Array 172 180 starting for an Array 200 205 web page redirect CHAP Challenge Handshake Au thentication Protocol 293 294 customize internal login splash page 299 PAP CHAP 292 294 RADIUS settings 292 294 see WPR 358 Web Page Redirect WPR 358 362 Web Start Client 29 WEP 274 Wi Fi tags 257 window Array licensing 190 Windows login 25 Windows server shutting down 38 507 Windows service 523 WLAN management 320 word size 238 work space backup manager 52 configuration windows 50 main viewing area 46 major components 40 map window 48 menu bar 41 monitoring windows 47 resources windows 48 security window 50 status bar 44 tool tips 44 toolbar 42 tree 43 Management System WPA 273 WPR in SSIDs 291 in user groups 306 policy uploading WPR files 358 X XA 3300 CC installing software updates 17 Xirrus Advanced Feature Sets 189 Xirrus Server Management
111. in accordance with the laws of the State of California United States of America as if performed wholly within the state and without giving effect to the principles of conflict of law If any portion hereof is found to be void or unenforceable the remaining provisions of this Warranty shall remain in full force and effect This Warranty constitutes the entire agreement between the parties with respect to the use of the Equipment Manufacturer is Xirrus Inc 2101 Corporate Center Drive Thousand Oaks CA 91320 Management System XIRRUS Table of Contents Bulleted items that do not appear in the main TOC list they are part of the front matter prior to this Table of Contents include the following 9 Trademarks 9 Notices 9 Safety Warnings Translated Safety Warnings 9 Hardware Warranty Agreement WIdXodlni rc sese a xiii IntrodUCHON me 1 The Xirrus Family of Products 4 ttbi eed ec RU REN DRE 1 About this Us t s Gide 4 ceioueenounioiiemoditenieiiame ipi iei as 3 gcn n TO o A 3 Notes and Cautions oos ianari aret IHRER PA Ete bep Ean AREE EARR ERER E i 5 The User s Guide asa PDF Document 2 eric nai ea eats 5 LY Perl sais 6 XMS Product OVERVIEW 2 beate ber e hi e ead 7 Extended Management Capability i5 tr setenta 7 A Scalable SOMMMMIOM ge 7 Key Features and Benefits user temere n e E Hore SER Reda 9 Centralized Management 452 o mme E qtu COR IR HERES 9 Scalability
112. instead enter its address in WPR Landing Page You may customize this page with a logo and or background image and header and or footer text as described in Customizing an Internal Login or Splash page on page 299 External Login page This option redirects the user to a login page on an external web server for authentication instead of the first user requested URL Login information user name and password must be obtained by that page and returned to the Array for authentication Authentication occurs according to the RADIUS Details currently in effect for the SSID see RADIUS Details on page 298 If Security Settings are set to Global then the Array s global RADIUS settings will be used instead See Security Settings on page 296 After authentication the browser is redirected back to the captured URL If you want the user redirected to a specific landing page instead enter its address in WPR Landing Page URL To set up external login page usage set WPR Mode to External Set WPR HTTPS Login to Enable for a secure login or select Disable to use HTTP Enter the URL of the external web server in WPR Redirect URL enter that server s shared secret in WPR Redirect Password and enter the WPR Verify Key Managing Configuration with Policies 293 e XIRRUS Management System Select the WPR Authentication Protocol This is the protocol used for authentication of users CHAP or PAP the default e PAP Password Authe
113. internal DHCP pool with this User Group choose the pool from the pull down list An internal DHCP pool must be created before it can be assigned See DHCP Server on page 265 Filter Group Filter List If you wish to apply filters to this User Group s traffic enter the name of the desired Filter List See Filters on page 348 Roaming For this User Group select whether to enable fast roaming between IAPs or Arrays at Layer 2 and Layer 3 or at Layer 2 only If you select fast roaming at Layers 2 and 3 you must also enable roaming at both layers in RF settings see Global RF Settings on page 319 Please see the Wi Fi Array User s Guide for more information Managing Configuration with Policies 305 e XIRRUS Management System WPR Enable Choose Enable if you want this User Group to use the Web Page Redirect WPR functionality This feature may be used to display a splash screen when a user first associates to the wireless network After that it can optionally redirect the user to an alternate landing page When you configure WPR for a User Group there is no option to specify a login page since the user will have been previously authenticated via RADIUS Except for the lack of login options the configuration of the WPR feature for a group is similar to its configuration for an SSID Please see page 291 for more details on WPR For an in depth discussion please see the Xirrus Web Page Redirect
114. left unchecked then when this policy is applied to Arrays the configuration changes will need to be saved manually or else they will be lost when the Arrays are rebooted Note that this checkbox does not actually apply the policy to any Arrays To apply the policy see Using Policy Windows on page 218 266 Managing Configuration with Policies e Management System XIRRUS DHCP Server Policy Details DHCP Server List This shows a list of DHCP pools a range of IP addresses that may be distributed by the server A DHCP pool may be added to the list by pressing the dh button to the right of the list and filling in the fields shown below and described in DHCP Pool below existing pools may be edited by pressing the E button and deleted by pressing the button Multiple pools may be defined for the same server D DHCP Server List DHCP Server Name Enable DHCP Server O ves Default Lease seconds 300 Maximum Lease seconds 300 Starting IP Range End IP Range Default Netmask Default Gateway IP Default DNS Domain Default DNS Server Default DNS Server Default DNS Server Enable NAT Java Applet Window Figure 182 DHCP List Settings DHCP Pool e DHCP Server Name The name associated with this DHCP pool e Enable DHCP Server Choose Yes to enable the DHCP server or choose No to disable the server If you choose No the remaining configuration fields for the DHCP se
115. members of the selected map Array Include only the selected Array Display Traffic by Break out transmit and receive traffic separately or show only totals Table Row Limit Total number of rows Date Time Include only this time range Schedule Run the report at this time See Schedule on page 382 Email Report To After running email the report See Email Report To on page 382 If you have a large network the results returned in this report may span many pages The browser display of the report will truncate to three pages to give youa preview to see the entire report open the PDF version Managing Reports 389 e XIRRUS Management System XIRRUS XMS Reports Wireless Traffic Tx Rx Time Span Day Wednesday 04 13 2011 01 32 PDT to Thursday 04 14 2011 01 32 PDT Wireless Traffic Tx Rx 3 0 25 20 15 Traffic Mbps 10 05 02 00 04 00 06 00 08 00 10 00 12 00 14 00 16 00 18 00 20 00 22 00 00 00 Hl Tx Rx te Txt Rx Wireless Traffic Tx Rx Row Count 13 N16520901140 10 100 54 26 jabgn1 00 0f 7d 07 46 20 2e 0 000 0 000 0 000 00 0f7d 07 46 60 8e 0 000 0 000 0 000 00 0f 7d 07 46 20 ae KN16520901140 10 100 54 26 N16520901140 10 100 54 26 jabgn3 N16520901140 10 100 54 26 N16520901140 10 100 54 26 0 0f 7d 07 46 10 1e eum 140 10 100 54 26 fmo D0 0f7d 07 46 d0 de 0 0 000
116. minimal 802 11b traffic choose Off to ensure the best performance for your 802 11g stations 802 11g Slot 802 11g wireless technology defines a long slot time as 20 microseconds and a short slot time as 9 microseconds 802 11b wireless technology only supports the long slot time of 20 microseconds In mixed 802 11b and 802 11g environments choose Auto to instruct the Arrays to manage the 802 11g slot time automatically In an 802 11g only environment choose the Short Only option for better performance giving precedence to 802 11g traffic The default is Auto 802 11g Data Rates Supported Data Rates The data rates that are enabled here are the 802 11g data rates that your Arrays will use for transmissions to clients on the network Check or uncheck the boxes to define which data rates are supported The default is for all 802 11g data rates to be supported Basic Data Rates The data rates that are enabled here define the minimum set of 802 11g data rates that a wireless station must support if it wants to associate with the Arrays Check or uncheck the boxes to define the basic data rates required by an 802 11g client The default is to have all basic 802 11g data rates disabled 802 11b Data Rates Supported Data Rates The data rates that are enabled here are the 802 11b data rates that your Arrays will use for transmissions to clients on the network Check or 334 Managing Configuration with Policies e Management Syst
117. name Search Networks IP Address subnet status 255 255 255 128 Discovering Figure 56 Network Discovery in Progress When the network discovery process has finished and if XMS is able to detect the network you are requesting the status column in the Discover Devices Window changes from Discovering to Discovery Complete This informs you that the system recognized the network you requested and the network can now be managed from XMS Discovery Complete Figure 57 Network Discovery Finished You may select an entry and use the Edit button to modify it or use the Delete button to remove it Use the On Off button to disable discovery on the selected network Click again to re enable discovery Discovering the Network 79 e XIRRUS Management System Adding or Deleting Array Shell Authentication Entries Some policies such as Software Update Web Page Redirect WPR and Configuration File Advanced require Arrays to download files When it instructs an Array to fetch a file from the server XMS must log in to the Array shell Depending on the configuration of the Array authentication may use the Array s local accounts or may use a RADIUS server In either case the XMS server needs to know a Username and Password to gain access to the Array shell To define Array login information use the Array Shell Authentication section on the upper left of the Discover Devices window Arra
118. network If you recognize the program or trust the publisher you can unblock it When should unblock a program Figure 9 Unblocking Java 18 Xirrus Management System Products e Management System XIRRUS 6 You must now define the ports that your server will use Figure 10 If the default ports provided by the installation wizard are already being used enter new port assignments then click on the Next button If you want to use the default ports leave the port fields unchanged and click Next You can openly cetus e XA 15 ute nonstandard poms You may weet 19 Go vd f you fiv Oee apobcabons hi are aieady Using Tow pons Figure 10 Setting Up the Ports x Port Usage In addition to the ports configured above the XMS server has Tu requirements for other port assignments Please see XMS Port Requirements on page 22 for details Many of these assignments are not configurable as part of the installation process Please do not modify the assignments of non configurable ports 7 Review your installation parameters ratal Folter C XA 3300 CC Shortcut Foklor C Documents and SetungsiShety SchewideriStart MernsAProgramsocerus Management System Webserver Port 9090 Tomcat Shutdown Port 8007 Webcontasner Port 9009 Figure 11 Reviewing Your Installation Parameters Xirrus Management System Products 19 e XIRRUS Management System 8 If you are satisfied with the installation parameters you provi
119. of the report You may go to other web client pages to perform tasks while the report is generated Generating reports may take some time on large Array networks Click Edit to change the selection criteria for the report This displays the same fields you entered when you originally used New Report to create the report as described in Selection Criteria on page 384 You may change any field including the report s Name Note that this report will replace the edited report even if you change the name i e you will not have entries listed on the My Reports page for the old name and the edited name the Archive entries that were created with the old name will still be there under the new name Click Archive to list all of the saved copies of this report Figure 239 Each time a report is run it is automatically saved with a date time stamp The archive lists these reports in the order that they were run Click the desired format for a report html Excel pdf or csv You may choose to save the resulting file to your file system or display it immediately the appropriate software is automatically used For 374 Managing Reports e Management System XIRRUS example a CSV file is displayed by Excel See Viewing a Report on page 375 for more details You may click the Delete link in front of a report if you wish to remove it Array Availability Delete March 19 2011 10 58 41 PM html Excel pdf csv My Reports Delete Marc
120. optional enter the Date from Time from and or Date to Time to fields The Dates are entered by clicking in the field and selecting the desired date from the popup calendar or by typing the date in mm dd yyyy format Times are specified by clicking in the field and using the drag bars to select the Hour and Minute 9 Enter Search Text optional XMS will search for entries that contain this text in any position in any field Select the desired Severity If you select a particular severity level only messages at that level will be displayed rather than displaying messages at that level and above The default value is All Severities which shows all messages at the informational level and above 9 Select the Log Type The default is All Logs which displays all XMS log files including syslog messages The Events List The Events List Figure 281 shows the events that have been received by XMS You may customize the columns shown in this list see Select Columns on page 442 This list is very similar to the one in Events on page 111 This list shows information about each event and the Array that generated it For each event the following information is shown by default 9 The Time and date of the event 9 Theevent Severity See Syslog Severity Levels on page 113 for more details 9 The Array IP Address of the Array that generated the event 9 The MAC Address of the Array that generated the event 456 The XMS W
121. or user name that was deleted Once a device is discovered it stays on the device list even if you remove the community or user name or disable discovery The device remains until you delete it manually You cannot modify an entry in the Community Names list but you may delete it and then add the new value You may click Edit to modify a selected SNMPv3 User entry The next time that the discovery process runs it will use the new value Note that discovery will not remove devices from its device list if they have a community or user name that was changed XMS will continue to manage the device using the original community or user name as long as the device is still configured to use them If the device community or user name is changed XMS will try to use the new values in the next discovery process Discovering the Network 83 XIRRUS Management System Modifying a Network You may want to change the properties of an existing network To modify the discovery properties of a network select a network from the list of available networks then click on the Edit button under the Search Networks list in the Discover Devices Window to display the Edit Network Parameters window Make any necessary changes to the network s IP address subnet mask and community setting then click on the Save button to save your changes Edit Network Edit Network Parameters P Address EM 168 23 0 Subnet 255 255 255 254
122. order in which they are installed may be important Please follow the instructions furnished with the release carefully The XMS server must be stopped before you can perform any Software Manager operations About the Installed Patch List When a new release is installed it is added to the bottom of the Installed Patch List and becomes the running version of the XMS server The last bottom release in this list is always the running version If you select a release in the list and click the Remove Patch button that release and all later releases all the entries below it are removed When you start the XMS server again it will run the release version that is currently at the bottom of the Installed Patch List To Install a New Version of the XMS Server When you receive a new release file from Xirrus place it where you will be able to browse to it from the XMS server computer Warn all XMS clients see Broadcast Message on page 500 then shut down the XMS server and go to the Software Manager tab in XSMT Then click the Install Patch button The Select Patch File dialog box appears zi Lookin My Documents 7 b 2 E3 E Documents Desktop 2 My Documents SE LY File name rirrus Patch 3 0 324 ppm Open My Network Places Files of type ppm PPM Patch Files Cancel Figure 348 Select a Patch File XMS Administration 535 e XIRRUS Management System Browse to the new ppm file and cli
123. page 37 Closing Down the Java Client Interface on page 37 Shutting Down the XMS Server on page 38 Getting Started with XMS 21 e XIRRUS Management System XMS Port Requirements A number of ports are used by XMS and by various Array features and must not be blocked by firewalls The Port Requirements table on page 23 lists ports and the features that require them Note that Array port requirements are included in the table for your convenience some of the Array ports shown are unrelated to communication with XMS If you are using a feature please make sure that the ports that it requires are not blocked by firewalls or other policies and that they do not conflict with any other port assignments As an example some XMS port requirements are illustrated in Figure 13 XMS requires ports 161 162 and 443 to be passed between Arrays and the XMS server Similarly ports 9090 9091 and 9092 are required for communication between the XMS server and XMS clients and port 25 is typically used by the XMS server to access an SMTP server to send email notifications Internal Resources Traffic from Arrays VLAN B SSID Traffic on VLANSsA B etc Management over Native VLAN Trunked 802 1q VLAN Connection Traffic from Arrays VLANA External Network Internet L2 Switching Infrastructure Firewall XMS Server f 1 Ports Ports 4 161 162
124. provides information about the discovery process and includes procedures that describe how to add Xirrus devices manually Arrays and PoGE injectors and how to edit discovered networks and devices In the rest of this chapter the term device refers to a Xirrus Array or PoGE injector To quickly get discovery started on your Wi Fi network see the steps in Overview of Starting Discovery on page 68 Section headings for this chapter include Overview of Starting Discovery on page 68 How Discovery Works on page 70 Viewing Your Discovered Networks and Devices on page 72 Scheduling Discovery on page 74 Adding a Network on page 78 Adding or Deleting Array Shell Authentication Entries on page 80 Adding or Deleting SNMPv2 and SNMPv3 Entries on page 81 Modifying a Network on page 84 Rediscovering a Network on page 85 Deleting a Network on page 86 Adding an Array or PoGE Injector on page 87 Refreshing a Device on page 88 Deleting a Device on page 89 What If My Device Is Not in the Discovered Devices List on page 89 NOTE For discovery of a device Array or PoGE injector the device must have SNMP enabled and its community string must match one of the strings listed in the Discovery Discovering the Network 67 e XIRRUS Management System window See Adding or Deleting SNMPv2 and SNMPv3 Entries on page 81 The default SNMPv2 community string in XMS matches the Array defaul
125. rogue AP devices and identify problems Section headings for this chapter include Major Components of the Client Work Space on page 40 Basic Window Operations on page 53 Basic Table Operations on page 57 Searching for Events on page 64 Keyboard Shortcuts on page 65 To start the client please see Starting the XMS Client Interface on page 29 About the Images Shown in this Chapter Most of the images provided as examples in this chapter are shown with the content of the Java client interface set at its factory default state This is to maintain a consistent look because the windows and tools can change depending on which operation you are performing and at what level entire network individual Array or group of Arrays The XMS Java Client Interface 39 e XIRRUS Management System Major Components of the Client Work Space Figure 25 highlights the locations of major components within the XMS Java client work space Click on any callout in the following graphic to jump to a description of the selected component Tree Menu Bar Toolbar Select Array Group 802112 802 11b 802 11bg 802 110 D Tip Status Bar Main Viewing Area Dashboard Figure 25 XMS Java Client Work Space 40 The XMS Java Client Interface e Management System XIRRUS Menu Bar The menu bar is located at the top of the Java client work space Each menu item has its own set of functions and commands
126. say you ve already configured an Array and you d like to set up other Arrays the same way Simply select the model Array in the Array Window right click on it and use the Create Policies from Array feature to select the types of policies to create based on the model Figure 124 You can then apply these new policies to other Arrays to set their configuration to be the same as the model Array When you use Create Policies from Array a dialog box allows you to select the policies that you wish to create D Create Policy From Configuration x Enter the information from which to create the policies Host Name Bruces X53900 Array Policy Name Suffix Bruces X53900 Array Select the policies to be created Select All Select None System Information v Management Control Network Services IV VLAN DHCP Server Iv Security IV SSIDs IV User Group v IAPs v RF Iv wos I Filters Configuration File Advanced Select the checkbox below if you want to create a Global Policy for the policies selected above Create Cancel Figure 124 Create Policies from Array Host Name shows the Host Name IP address or MAC address of the selected Array Policy Name Suffix determines the names of the newly created policies the new policy is normally named lt type HostName gt For example in 178 Managing Your Wi Fi Arrays e Management System XIRRUS Figure 124 the VLAN policy that is
127. scratch This procedure opens the config file editor so that you can type in the CLI command lines of the config file or cut and paste commands from an existing config file into the editor Click the Add button on the upper left of the Advanced Config page The config file editor appears Figure 294 Enter Configuration Name a name for this config file Then enter an optional Description You may type paste text or edit your commands in the large gray box at the bottom of the page It is especially useful to copy large sections of text from a configuration file that has been quality tested elsewhere and paste the text into the editor box The XMS Web Client 471 e XIRRUS Management System Editing the Configuration File You may type text to enter it in the box and use the Backspace and Delete keys You may use common selection and cut and paste keys Ctrl a select all Ctrl c copy selected text Ctrl x cut selected text Ctrl v paste text may be from an application other than XMS Shift Click select contiguous text up to clicked location Shift Arrow select contiguous text in direction of arrow Use your browser s search functions if you want to search for text Configuration Name ConfigWarehouse Home This is the configuration for the warehouse east unit Network Settings CeCe a Advanced Config z Load from Array Configuration Contents PoGE Add Devices Trap Receivers description
128. specific attribute such as IP address is called out then that value will be shown Array Operations There are a number of Array operations that can be performed from XMS Before we discuss the specifics you should be aware that there are two methods for accessing Array configuration menus Figure 116 These include Method 1 Select the Arrays node in the Tree then right click on an Array in the table to generate a pull down list of menu items 9 Method 2 Select an Array icon in a map then right click on the Array to generate a pull down list of menu items The list of menu items is the same as the list you generate with the second method TIT ENS ae UNS ie mm S Method 1 fray Situs 10 100 54 19 ndi er 10 100 54 22 00 System Informatior System Information 8 E Create Policies from Array Management Control Create Policies from Array Management Control ee ee Enable Disable AlTAPs p Netrork Enable Disable AITAPS z bsc we Auto Configure Channels 2 Auto Configure Channels KC mue ee m nie Remove from Map Security Remove from Map Security lt cUmEgS l Assign Group oa 1 ign Policies Assign Policies S Sup Assign Policies ed Group s me Method 2 eooo NONEM EE Alarms and Events Alarms and Events ra Bnet Tt iters Reports Reports Refresh Refresh Reboot Reboot Locate Locate PoGE I Figure 116 Menu Items for Configuring Arrays 170 Managing You
129. that are left blank will be unchanged on Arrays Click OK when done The Bulk Edit dialog closes and your desired changes will be displayed in the network settings table Note that the new values have not yet been sent to the Arrays Take a moment to review your changes In particular make sure that the IP addresses that were assigned are correct You may individually edit any incorrect settings Click Finish when satisfied with the changes 3 Step 3 View Results The web client will apply the changes you entered and display the success or failure of the configuration operation on the selected Arrays To Export Network Settings This option exports IP and other network settings on selected Arrays to an Excel file or to a CSV file a set of comma separated values that are compatible with Microsoft Excel This file is useful in a number of ways The XMS Web Client 461 e XIRRUS Management System 9 Asa backup of the current configuration especially since the settings in the file may be imported to restore this configuration To provide Xirrus Customer Support with a snapshot of the configuration of your network at their request You may edit the settings in this file and then import the changed values Take care only to modify the fields that are editable on the Bulk Configuration page To import a file that was exported from the Network Settings page see To Import Network Settings on page 464 Note that any t
130. the map With this capability you can track assets using your existing Wi Fi infrastructure Locationing is available for stations that are associated to an Array that is a member of a map Located Station Figure 104 Using the Location Feature 152 Working with Maps e Management System XIRRUS The location feature is described in the following sections 9 Understanding Locationing 9 Preparing to Use Locationing 9 Using Locationing Understanding Locationing Intersection of 60dB RSSI contours 70dB Figure 105 Determining Position XMS uses a technique called trilateration based on received signal strength to determine the location of a selected wireless client When you request the location of a station each Array that can hear the station s signal reports back giving the received signal strength The signal strength indicates the approximate distance of the station from the Array A simplified representation of this is illustrated in Figure 105 showing the RF contour of the observed signal strength as a circle around the Array Each circle shows possible locations of the station based on that Array s signal strength observation In the diagram if there were only two Arrays reporting the circles would intersect at two points giving two possible Working with Maps 153 e XIRRUS Management System locations for the station When you add additional Array observations the intersection of the circ
131. the web client page i e HTML format and there will be three attachments one for each other format PDF xls csv Be aware that for large reports the email size may be quite large New Report To create a new report click the Reports button at the top of the web client window then click the New Report link Select a report type below to create a new report My Reports Traffic Reports New Report Wireless Traffic Displays Tx and Rx average or peak wireless megabits per second filterable by Array Group Map and Array Customize Wireless Errors Displays total wireless drops and errors filterable by Array Group Map Array and IAP Station Traffic Displays Tx and Rx average or peak station megabits per second filterable by Array Group Map and Array Station Errors Displays total station error and retry rates filterable by Array Group Map Array and SSID Ethernet Traffic Displays Tx and Rx Rerages or peak total Ethernet megabits per second filterable by Array Group Map Array and VLAN Ethernet Errors Displays total Ethernet drops and errors filterable by Array Group Map Array and VLAN Station Reports Associated Stations Displays Array to Station association counts over time filterable by Array Group Map and Array Stations by Array Displays Array to Station association counts filterable by Array Group Map and IAP Unique Station Count Displays unique wireless station counts filterable by
132. the full content of the console window use the scroll bar cx C WINDOWS system32 cmd exe 5 Stopped 5t Stopped Scroll Bar Stopped Eve Stopped Stopped MapServerBE Stopped NnsfluthenticationManager Stopped Stopped jets Stopped Stopped Stopped M Stopped PModule Stopped RunflpacheExeModule Stopped RunRniRegistry Stopped e connections disconnected Web NMS Server Successfully Shut Down IC 8A 3388 CC RANMms bin gt _ Figure 345 Server Shutdown Progress XMS Administration 531 e XIRRUS Management System When the server has shut down successfully the Start button in XSMT will be enabled and the system console window will say WebNMS Server Successfully Shut Down The database server will still be running after the XMS server is shutdown Required Services Service Name Status Web Server Not Running Client Login Page NotRunning Database Server n E RMI Registry Figure 346 Status for Stopped XMS Server XSMT Database Tools Although you can view schedule or restore database backups from any client using the Backup Manager you can only Re initialize or Repair the XMS database using XSMT These management tasks are available on the Database menu in XSMT For an overview of other database features please see About the XMS Database on page 501 When the XMS server is up and running i e the Web Server Client Login Page and RMI Regis
133. this network Symbol Refer to Map Symbol and Icon Syslog SYStem LOGging A protocol that allows a machine to send event notification messages across IP networks to event message collectors known as Syslog servers Syslog messages are based on the User Datagram Protocol UDP They are received on UDP port 514 and cannot exceed 1 024 bytes in length they have no minimum length See also UDP Threshold A value that determines the minimum and maximum limit for collected data If the collected data violates a defined threshold the system reports the fault as needing attention Transmit Power The amount of power used by a radio transceiver to send the signal out Transmit power is generally measured in milliwatts which you can convert to dBm Glossary of Terms 551 e XIRRUS Management System UDP User Data Protocol A connectionless protocol that works at the OSI transport layer UDP provides datagram transport but does not acknowledge their receipt UDP is the protocol used for processing Syslog messages See also Syslog VLAN Virtual LAN A group of devices that communicate as a single network even though they are physically located on different LAN segments Because VLANs are based on logical rather than physical connections they are extremely flexible A device that is moved to another location can remain on the same VLAN without any hardware reconfiguration Wi Fi Array A family of Xirrus proprietary hig
134. to all users of the XMS server XMS will prompt you to save the map before it will allow you to switch to another map page or close the Java client Setting the Map s Scale It is important to set the scale of each map in order for the RF heat map contours to display accurately and for location information to be as precise as possible Itis very easy to set the scale Before you start measure the actual length of a wall or other feature represented on the map The longer the object being measured is the more accurate the scale will be E Locations WestOffice ait Wl C di hiE amp amp a fems Tig 6i0 wo amp Editable Maps E WestOffice Heat Map Value Not available Environment attenuation 3 dBm spacing 10 feet Location x 783 y 728 6 feet ference Kaom Y CP tu Figure 98 Calibrating the Map Scale 1 Measure a wall or other feature that is represented accurately on the map Figure 98 shows both ends A and B of a wall being measured 2 Click the Calibrate Distance button The mouse pointer will change to a calibration tool in the next step 146 Working with Maps e Management System XIRRUS 3 On the map move the cursor to one end of the wall or other feature that you measured A Click and drag the mouse to draw a line to the other end of the feature B Release the mouse button The Edit Calibration dialog box appears x Start Point 124 122 End Point 523 120
135. to http XMS Server IP gt 9090 or locally from this computer use http localhost 9090 When the server starts for the first time it will initialize the database Discovery is not started automatically you should start the discovery process to add Xirrus Arrays and PoGE injectors to the XMS database see Discovering the Network on page 67 The first time that XMS starts you should use the Backup Manager to establish a backup schedule for the database See Backup Manager on page 499 For more information on using XSMT see Xirrus Server Management Tool for Windows based Servers on page 526 XMS Administration 525 Xirrus Server Management Tool for Windows based Servers This tool is provided to manage the XMS server and to perform certain advanced Management System operations Manager tabs XMS Server Software B Server Management Tool File Database i XMS Server Manager Required Services Logs Service Name Checking initial status of services Starting database server for database manager Web Server Starting from Windows services please wait while the server starts Client Login Page Starting the XMS Services Server startup in progress please wait Database Server The XMS Server ggnow running Point your brows 0 http XMS Server IP gt 9090 RMI Registry or locally from this puter use http localhost 9090 Offline Activities Status Service Name messages Software Manager
136. to its right You will be asked to confirm the deletion The next time that the discovery process runs it will use the Community and User Names listed at that time Note that discovery will not remove devices from its device list if they have a community or user name that was deleted Once a device is discovered it stays on the device list even 484 The XMS Web Client e Management System XIRRUS if you remove the community or user name or disable discovery The device remains until you delete it manually SSH Users Some policies such as Software Update and Web Page Redirect WPR andAdvanced Config require Arrays to download files When it instructs an Array to fetch a file from the server XMS must log in to the Array shell Depending on the configuration of the Array authentication may use the Array s local accounts or may use a RADIUS server In either case the XMS server needs to know a Username and Password to gain access to the Array shell To define this Array login information use the SSH Users page Click the Configure button near the top of the window then select Add Devices on the left Click the SSH Users link on the left when it appears Figure 307 Enter an Array s User Name and Password and click Add The new entry will appear in the Array Shell Authentication list located under the dialog box You may use the Delete button to remove a selected entry if necessary Home Enter a new array shell user and
137. top is defined on the Customize page lc My Reports s nel XIRRUS Customize XMS Reports Channel Usage Time Thursday osnan 15 54 POT to Thursday 03 17 2011 16 54 POT 2 4 GHz Channel Usage Lid 9 o o8 88883 88 24 GHz Channels 5 GHz Channel Usage Mo eA NITITIIT SOME Chansen Channel Usage Table 002 Te 1600 40 m a Figure 241 Report Including Charts If the report had a time span setting then the Time Span that you selected is shown underneath the title It also identifies the data collection Sample Period used for the report The sample period is automatically determined based on the Time Span For long time spans such as a year the period will be longer e g one 376 Managing Reports e Management System XIRRUS day Short reporting periods such as an hour will be more granular and may have a period of 5 minutes The report may only be viewed as presented You cannot sort columns or resize their width Note that for very long reports the HTML version is truncated to three pages so it will be able to be loaded in a browser To view the full report download it in PDF format as described below To download or view the report in a format other than HTML select pdf xls or csv from the top of the page The File Download dialog box will ask whether you wish to Open or Save the file Select Save to specify where to save the file in your file system Select Open to view the fil
138. when defining SSIDs Set SSID State to Enable to make this SSID active 9 Broadcast SSID Use the Enable button if you want to broadcast the SSID If you do not want other wireless users to see this SSID leave the box unchecked The default is not to broadcast the SSID 9 QoS Priority Enter a value in this field for QoS Quality of Service priority filtering or increment decrement the value using the UP and DOWN arrows For detailed information on the operation of QoS on the Wi Fi Array please see the Wi Fi Array User s Guide part number 800 0006 001 The QoS value must be one of the following 0 Low priority 802 1p traffic user priority 1 is assigned to QoS level 0 Since this background traffic is explicitly designated as low priority and non delay sensitive it is given the lowest traffic class 1 Best Effort the default 802 1p user priority 0 is assigned to QoS level 1 For the default priority we don t necessarily know anything about the type of traffic and it has not been explicitly designated as low priority traffic Thus it is treated as best effort traffic e 2 High where QoS filtering normally gives priority to video traffic e 3 The highest QoS priority setting where QoS filtering normally gives priority to voice VoIP traffic The QoS setting you define here will prioritize wireless traffic for this SSID over other SSID traffic The default value for this field is 2 which is high but not highest prio
139. when the Upload Complete message appears S C e Monitor 20 lt Reports 1 2 3 Upload Settings File Verify Settings Apply Settings lt Previous Next Choose a file to import then click upload to upload the file to XMS After the file is uploaded click N imported settings Network Settings Export Settings Import Settings Select an Excel or CSV file to import and click Upload Figure 288 Import Network Settings 2 Step 2 Verify Settings This page lists network settings for all of the Arrays that were included in the imported file Figure 289 Review these values carefully Click a setting to change it An edit field will appear if the setting is modifiable There is also a Bulk Edit option which may be used as described in To Modify Multiple Rows on page 460 Click the Finish button when you are done making changes 464 The XMS Web Client e Management System XIRRUS 1 2 3 Upload Settings File Verify Settings Apply Settings lt Previous Finish Cancel Verify the imported settings below You can also make additional changes at this time When you are ready to apply your settings click Finish Bulk Edit Select Columns Showing 1 to 3 of 3 Ro T Gig1Mac Address Serial Number Hostname Gig1 DHCP Gig1lP Address Gig1 Mask Gig1 Gateway Location v 01 61 7e 21 00 52 XN0824081A2E2 XMS 5 0 V2 1351 true 200 200 50 102 255 255 0 0 200 200 1 1 XMS_SQA
140. when you run a new or saved report immediately but not when you schedule a report On the report queue page you may wait for an in progress report to complete at which time the report will automatically be displayed Or you may navigate away from the report queue page to perform other tasks with the web client In this case you may view the report later after it completes by using its entry on the My Reports page Your report has been queued This page will be redirected when the report is complete Reports with a large amount of data can take a while to complete If you do not want to wait you can leave this page at any time and return to the Reports view later to view your report when it completes My Reports New Report Report Queue Customize Report Status Scheduled Time Stations over Time SS in progress BBNBNNENEN May 4 2011 10 40 54 AM PDT Figure 245 Report Queue Managing Reports 383 e XIRRUS Management System Selection Criteria The web client presents you with a set of options for filtering restricting the data that it includes in a report Different selection criteria are appropriate for different report types thus the settings that you may specify are tailored for each type of report This section will describe how to use selection criteria The detailed description of each report type later in this chapter will list the selection criteria that are available for that repo
141. whether to Allow or Deny packets that meet the specifications on this page 9 Protocol Choose the protocol that you wish to allow or deny from the drop down box The available protocols are any ip icmp igmp srp tcp udp arp Choose any to match all protocols 352 Managing Configuration with Policies e Management System XIRRUS 9 Port Choose the port that you wish to block The available ports are echo discard daytime chargen ftp data ftp ssh Choose any to match all ports 9 Source Address Select the type of the source address for the machine that you wish to allow or deny Group IP SSID VLAN MAC or Interface The next fields will be changed to accommodate the type of address that you selected for example IP Address and Mask VLAN MAC and Mask etc Choose any to match all addresses Click Yes to apply the filter to all traffic matching the Source Address or No to apply the filter to all traffic not matching the criteria 9 Destination Address Select the type of the destination address for the machine that you wish to allow or deny Group IP SSID VLAN MAC or Interface The next fields will be changed to accommodate the type of address that you selected for example IP Address and Mask VLAN MAC and Mask etc Choose any to match all addresses Click Yes to apply the filter to all traffic matching the Destination Address or No to apply the filter to all traffic not matching the criteria Set QOS
142. will be displayed where you may type the desired value then click OK Figure 284 You may change as many cells in as many rows as you wish There is no need to click the check boxes on modified rows Modifications will be highlighted on the page Click Finish when done 1 2 3 Select Arrays Edit Radio Settings Apply Settings Home lt Previous Finish Cancel Network Settings Radio Setti Click on a value below to edit an individual radio s settings or select multiple rows and click Bulk Edit to ngs radios at once Once you are done with your changes click Finish to apply your settings to the radios Export Settings Bulk Edit Select Columns Showing 1 to 20 of 20 Rows 25 z Hostname Radio Enable Band Channel Bonded Chann Bond Mode Locked Cell Size Import Settings Advanced Config PoGE Add Devi m XMS 50 2 4 an1 true 5 GHz 36 40 44 40 off on false manual small Trap n m XMS 50 V21 an2 tue 5 EEZ 06 Conc off on false manual small Licenses D XMS 5 0 V2 1 an3 true 5 orgy po 4U 44 g oft on false manual small Custom Fields XMS 5 0 V2 1 an4 true 5 GHz 36 40 44 64 off on false manual small m vue knuna4 anhand tua 7A46CcHI122A4Fn Inff anl falea manual emall Figure 291 Editing the Radio Settings Page 3 Step 3 View Results The web client will apply the changes you entered and display the success or failure of the configuration operation on the sele
143. window from the client For example if you want to create a snapshot of the window using the Fn Print Screen function in Windows the window must be detached otherwise the entire client interface will be captured Detaching windows can also be useful for your own organizational purposes To detach a window from the Main Viewing Area and view it as a separate window either click on the Detach Current Window button in the Toolbar or go to File in the Menu Bar and choose Detach Re Attaching a Window Windows are never permanently detached from the client so a re attach button does not exist To see a detached window return to the Main Viewing Area simply click on the x button in the top right corner of the detached window The XMS Java Client Interface 53 e XIRRUS Management System Minimizing and Maximizing Windows Similar to a standard Windows environment you can minimize or maximize windows within the Main Viewing Area All minimized windows are stored within the client not on your desktop Buttons File Admin Tools Window Help t ODD XMS H amp Monitor 8 Dashboard se Array Group All Arrays Graph Interval 4 Hour B Alarms E Events Array Status p p g H Resources 8 Maps 60 IAPs Stations i cane Zoom graph using mouse drag Restore by double clicking the graph 1 8 Security Array Host Name Location Management IP A
144. window you can choose to view the details for a selected policy add a new policy or modify an existing policy The data available to you in any configuration window is determined by which window in the Tree you open zox Total 1 Add Policy Columns Refresh MAC Access List Enable Admin R Figure 37 Configuration Window Security Policy The XMS Java Client Interface 51 e XIRRUS Management System XMS Administration Windows XMS administration functions are accessed via the Admin menu on the Menu Bar rather than through the Tree They open independent detached windows rather than opening windows in the Main Viewing Area The following functions are available from the Admin menu 9 Options Country of Operation sets the Country in which the Arrays are operating 9 User Accounts manages user accounts Backup Manager manages the XMS Database 9 Broadcast Message broadcasts a message to all users Backup Manager The Backup Manager window is accessed from the Admin menu v Status Backup Location Network Path 10 100 100 6 Date amp Time Domain Email Username smith Password eesseesses Polling SSH Server TIP Leave the domain name blank when using a stand alone server or workstation Server Logs Figure 38 Backup Manager Its main functions are Configure the scheduling of your database backups on a daily weekly or monthly basis 9 Performa backup of the database on demand imme
145. with Maps on page 129 9 Array the drop down list shows all of the Arrays being managed in XMS Select an Array to report on just that one Array or select All Arrays You cannot make more than one choice from the drop down list 384 Managing Reports e Management System XIRRUS Radio Select a radio IAP to report on just data for that one radio or select All Radios For more information see IAPs on page 309 SSID the drop down list shows all of the SSIDs that you have defined in XMS Select an SSID to report on just data for that one SSID or select All SSIDs For more information see VLAN on page 259 Media Type the drop down list shows the IAP modes that are available on Arrays 802 11b 802 11g 802 11a 802 11n Select a mode to report on just data for Array radios operating in that mode or select All Modes Association select Authenticated from the drop down list to show only stations that have been authenticated or select Any to show all stations VLAN the drop down list shows all of the VLANs that you have defined in XMS You may choose to display them by VLAN Number or by VLAN Name Select a VLAN to report on just data for that one VLAN or select All VLANs For more information see VLAN on page 259 Classification the drop down list allows you to select whether to report only on rogue IAPs whose classification matches your selection select one of Approved Known Unknown Unclassif
146. z Search Figure 81 Filtering Syslog Entries 114 Monitoring Your Network e Management System XIRRUS To display only entries at the selected level that contain a particular string in the Message column or one of the other columns enter it in the Search field and click Search Case is ignored and partial strings are matched thus searching for ABGN will match abgn1 to abgn4 To return to displaying all syslog entries clear the search field and set the severity level to All Severities and click Search You may also specify dates as search criteria The events listed in the table can be sorted to best suit your viewing needs the default is to have syslog events listed by Time the first column with the most recent entries on top To change how the table is sorted click in any column header to define that header as the sort criteria Click the same header again to toggle between ascending and descending order If the Syslog table contains multiple pages of information use the browse buttons provided in the top right corner of the window to navigate between pages Use or to jump to the first page or last page respectively The Export button on the upper right may be used to export syslog entries to a CSV file a set of comma separated values that are compatible with Microsoft Excel If you have applied a filter then only the entries that satisfy the filter criteria will be exported When you click Export a dialog
147. 0 100 Fast Ethernet interface provides wired network connectivity that runs at a maximum data transmission speed of 100 Mbps This port is used for managing the Array and will only bridge management traffic not data traffic Managing Configuration with Policies 239 e XIRRUS Management System DA L Gigabit 2 Gigabit 1 Fast Ethernet Console Figure 167 Network Interface Ports 9 Gigabit1 The Gigabit 1 interface is the primary port for both data and management traffic providing wired network connectivity that runs at a maximum data transmission speed of 1000 Mbps It is also backwards compatible with Fast Ethernet offering the slower data rate of 100 Mbps If a single Ethernet connection is used it must be connected to the Gigabit 1 port If the Gigabit 1 interface fails the Array automatically switches to Gigabit 2 for uninterrupted network connectivity A Port Mode setting determines 240 Managing Configuration with Policies e Management System XIRRUS how the two gigabit interfaces operate together in the normal situation when both ports are up 9 Gigabit 2 The Gigabit 2 interface mirrors the settings of the Gigabit 1 interface including its ability to provide fail over protection For example if the Gigabit 2 interface fails the Array automatically switches to Gigabit 1 for uninterrupted network connectivity 10 100 Fast Ethernet This window contains fields for configurin
148. 00 40 37 10 100 54 37 main Add Devices m xs16410818008 10 100 54 12 map Trap Receivers T XN12381022043 10 100 54 29 map Licenses m Xxs394606004E2 10 100 54 101 map 1 Custom Fields 7 xNo8310800F41 10 100 54 22 SQA XMS LAB Figure 295 Load from Array When the download is complete you are returned to the Advanced Config Page and the new file appears on the list of config files The new file s name is the same as the host name of the Array from which it was downloaded You may edit this file in the usual way as described in Advanced Config Page on page 471 When you download a config file from an Array the file represents the entire configuration of the Array except that XMS makes certain modifications to the file for your convenience The XMS Web Client 473 e XIRRUS Management System e CLI commands are added to reset all the IAPs and then bring them back up Similarly other settings such as SSID User Group DHCP Server and VLAN will be reset and brought back up This guarantees that when the config file is deployed to another Array all of these settings will be applied to an Array starting from a known baseline due to the resets 9 All other radio IAP settings are commented out so that no radio settings will change Certain other settings such as Host Name Location and ArrayOS primary and backup software images will be commented out as well in order to prevent these device specific settings from be
149. 1AA38 Array is up and active Oct 10 2010 11 13 47 PM Clear 00 0f 7d 00 03 1f 10 100 54 111 XS0834081AA38 Node clear No failures on this node Oct 11 2010 10 16 38 AM Warning 00 0f7d 00 42 9b 10 100 54 37 XS 39 10 100 40 37 Oct 11 10 44 56 alert Rogue AP detected SSID L3R Open BSSID Oct 11 2010 10 20 59 AM Clear 00 0f7d 00 91 7a 10 100 54 26 Robin XN8 Array is up and active Oct 11 2010 10 20 59 AM Clear 00 0f 70 00 91 7a 10 100 54 26 Robin XN amp Node clear No failures on this node Figure 281 Alarms Page The following sections describe the Alarms page 9 About Using the Alarms Page 9 The Alarms List About Using the Alarms Page A number of basic operations are available on the Alarms page to allow you to customize it for your own use Select Columns on page 442 Export on page 443 Rearranging and Resizing Columns in a Table on page 443 Sorting on page 443 The Alarms List The Alarms List Figure 281 shows the alarms that have been received by XMS You may customize the columns shown in this list see Select Columns on page 442 This list is very similar to the one in Alarms on page 107 Note that the Java clients Alarms Window offers additional capabilities that are not available on this page such as filtering to display only alarms with a particular The XMS Web Client 453 e XIRRUS Management System severity Only the current most recent alarm in each category for each device will
150. 3 NetBIOS 397 NetFlow server 252 Netflow server 252 257 network events 111 network monitoring 11 105 dashboard 91 network policy 239 network reporting 11 network topology 7 8 networks adding 78 deleting 86 modifying 84 rediscovering 85 new map 144 notes 5 NTP 247 required with SNMPv3 68 509 543 NTP server 112 247 250 O operating country channel selection 496 optimization VLAN 324 organization of this guide 3 other navigation tools keyboard shortcuts 45 right click menus 45 overview 7 P page length 59 PAP Password Authentication Proto col Index 559 Admin RADIUS settings 286 web page redirect 292 294 parity 238 password 26 32 34 503 SNMPv3 81 Windows for XMS 25 XSMT 38 patches installing on XA 3300 CC 17 performance monitoring 10 phone home trap 233 PoE 415 476 477 A78 482 PoGE 415 476 477 478 482 PoGE injector management 187 policies 215 Array groups 366 attributes 220 config file 362 configuration file 362 deleting 222 executing 221 existing 221 filters 348 management control 228 managing 215 network 239 RF 316 security 270 server 247 software update from Array window 185 SSID 287 301 system information 225 user accounts 497 VLAN 259 WDS 342 policy apply to Array 185 223 default see global policy 223 Management System policy global see global policy 185 223 port mode active backup 245 aggregate traffic 245 bridge traffic 245 load balance traffic
151. 4 Server is Up XSMT 530 XMS Administration e Management System XIRRUS XSMT Shutting Down the XMS Server You can shut down the server at any time using the Xirrus Server Management Tool or the server can shut down automatically if it detects a problem The server must be shut down before you can initiate the following advanced database operations Re initialize and Repair To shut down the server select the XMS Server Manager tab in the XSMT window and click the Stop button on the lower left The Shutdown Server window is displayed which requires you to enter a user name and password the default for both is admin Click on the Submit button to initiate the server shutdown process Note that the Stop button will be disabled if the server is not running or if the current status of the server will not permit shut down Note In rare instances the XMS server may be unable to start and the Stop button will be disabled In this case you may use the File Kill server menu option to kill all server processes This should be used only as a last resort The Stop button does an orderly shutdown if it is enabled it should always be used instead of the Kill option When the server begins its shutdown process the Logs section on the right of the XSMT window displays the progress of the system operations that are completed Figure 345 XSMT displays the system console window in which you can watch progress in more detail To review
152. 5 Figure 26 Figure 27 Figure 28 Figure 29 Figure 30 Figure 31 The Xirrus Management System une ind qiie mitate titi eene 2 Sample Network Topolog yorin eimen ede a eN 8 XMSJasvaClientiD3shboakdc uc tei senses hr me mne 10 Management Appliance XM 3340 Ready for Rack mount 14 Server Management Using the Web Client sssssssss 15 Seryer Status on XSMT unice istinc tenis sin rente bises annia AREARE 16 Installation Wizard and End User License Agreement 17 Choose an Install Location for the Application 18 Unblocking Javacaatendanumetiatenauieddeea niat m a debes 18 Setting Up the POFtS e eret rerit 19 Reviewing Your Installation Parameters sss 19 Installation Comrpletes ete ette bte ias 20 Sample Port Requirements for XMS iiic rente ttes entes 22 Server Management using the Web Client issis 25 XSMT Window Showing Typical Running Status 27 AMS Start Widow trao eTEN 31 Web Start Client Security Warning tnter eterne 32 Client Login Window DtOWSenL irritat istis tet bete engins 32 Loading the XMS Client acciri a ERE ERE 33 The Dashboard XMS Java Client Window sss 33 XMS Web Start Client Icon on desktop sss 34 Client Login Window BtOWSeFr r erben reete reru 34 XMS Servet License sa ict iat 35 Closing Down the Java Client Interface sss 37 XMS J
153. 9 Array Host Name The host name assigned to the Array 9 Array MAC Address This is the Array s MAC address 9 Array IP Address The IP address assigned to the Array 392 Managing Reports e Management System XIRRUS 9 Packet Error Rate The packet error rate shown in this window reflects the bit errors detected by the system during the time period that you specified The percentage shown is the number of bit errored packets divided by the total number of packets Download Report pdf xls csv Email Report e XIRRUS XMS Reports Wireless Errors Time Span Day Sunday 04 10 2011 09 08 PDT to Monday 04 11 2011 09 08 PDT Average Wireless Errors 35 30 Percentage 6 2 NWN 6 oo 8 A o d 0 10 00 12 00 14 00 16 00 18 00 20 00 22 00 00 00 02 00 04 00 06 00 08 00 Packet Retry Packet Error Encryption Error Wireless Errors for Individual Array lArray Hostname MAC Address IP Address Eror Retry Error N16520901140 0 0t7d 00 91 7a 10 100 54 26 27 910 0 000 0 000 Figure 248 Wireless Errors Report 9 Packet Retry Rate Shows how many attempts were made to re send dropped packets during the time period you specified The percentage shown is the number of packet retries divided by the total number of packets 9 Encryption Error Rate Shows how many attempts were made to reconcile security issues The percentage shown
154. 9 for more information about rogues and their classifications and handling This report displays a color coded pie chart representation of all rogue devices that have been detected by the portions of your network that you selected Selection Description Criterion for details Group Include only Arrays that are members of the selected Array group Map Include only Arrays that are members of the selected map Array Include only the selected Array SSID Include only the selected SSID Classification Include only rogue IAPs whose classification is Approved Known Unknown Unclassified Blocked or Ad Hoc Schedule Run the report at this time See Schedule on page 382 Email Report To After running email the report See Email Report To on page 382 The chart Figure 259 shows the percentages of rogue devices based on their classifications 9 Unclassified These rogues have not yet been classified 420 Managing Reports e Management System XIRRUS 9 Approved When a rogue is designated as Approved the system stops reporting on it and no longer displays it in the rogue list Download Report pdf xls csv Email Report o XIRRUS XMS Reports Rogue List Array XMS 5 0 V2 1 Time Span Hour Monday 03 28 2011 17 30 PDT to Monday 03 28 2011 18 30 PDT Rogue Classification Unclassified Approved Known Unknown Known Unclassified amp Kn
155. 91 and 195 in the 4 9GHz spectrum range for public safety usage by qualified organizations Operating these channels requires a license and so they are not for general purpose use Using these channels without a license violates FCC rules Warning notices are displayed when you enable this feature and select these channels All 802 11an and 802 11a b g n radios may be set to these channels Intrusion Detection This option allows you to set the intrusion detection method used on an Array either Standard or Disable e Standard enables the abg2 abgn2 radio as a monitor which collects Rogue AP information In addition Standard mode enables self monitoring The Array uses the built in monitor radio IAP abg2 abgn2 to periodically associate to other radios in the Array to verify proper operation In this mode if 326 Managing Configuration with Policies e Management System XIRRUS a problem is detected corrective actions are taken to recover if any radio is found to be operating improperly the Array will reset it and issue an alert in the Syslog For more details see Configuring Self Monitoring Mode Loopback Tests in Chapter 5 of the Xirrus Wi Fi Array User s Guide e Disable IAP abg2 abgn2 does not function as a monitor e Auto Block Unknown Rogue APs This setting will only be displayed if you have set Intrusion Detection to Standard An Array can block a rogue AP by taking measures to prevent stations from stayi
156. 96 Sample Export Piles mem OR ADRESSE ERE 192 xvi List of Figures e Management System XIRRUS Figure 137 Figure 138 Figure 139 Figure 140 Figure 141 Figure 142 Figure 143 Figure 144 Figure 145 Figure 146 Figure 147 Figure 148 Figure 149 Figure 150 Figure 151 Figure 152 Figure 153 Figure 154 Figure 155 Figure 156 Figure 157 Figure 158 Figure 159 Figure 160 Figure 161 Figure 162 Figure 163 Figure 164 Figure 165 Figure 166 Figure 167 Figure 168 Figure 169 Figure 170 Figure 171 Importing Array LicenSE Sasasa nate IE a 193 select Array Licenses toi Wises quB en Decree 194 Editing Array Licenses esr errre ra 195 Array Licenses Pending Deployment oue retta 196 LAPS WU oy eeceustatesieee paie taie itn o petes 198 igo 201 Viewing Events dnd Alerts a itn amni pin bp Ere EPOR 202 Stations Window and e RE SER ae area 203 Viewing Events and Alerts nei roeentt tret irent tnrtt cuted 206 S5IDS WIDdOW iiec et it titt ctetu e EE RH ERE 207 SOU See MINS c est epos eei petiolata ees ettu dese 209 Viewing Events apnd Alerts ineei nee editi atitem eitond 210 Injector and Array ASSOCIA ONS 4 vise re n irra as 212 Associating Injector and Array Ports aa naci mpomaie enis 213 Policy Window Executing a Policy eene 218 Adding a Poligy esses sssssssiesciastascesssdosagansentotannes ai iR aN ATEREA PEE Innern 219 Selecting the Attributes of a
157. A Lab 172 16 20 13 MIMIC Aray 3 5FW 13 Al s Virtual SQA Lab 172 16 20 14 MIMIC py 3 5FW 14 Ali s Virtual SQA Lab 172 16 20 15 XS16 3 5 Nov 26 2008 Build 0691 16 XS16 35 Nov 26 2008 Build 0691 16 XS16 3 5 Nov 26 2008 Build 0691 16 XS16 3 5 Nov 26 2008 Build 0691 16 XS16 3 5 Nov 26 2008 Build 0691 16 XS16 3 5 Nov 26 2008 Build 0691 16 XS16 35 Nov 26 2008 Build 0691 16 XS16 35 Nov 26 2008 Build 0691 16 XS16 35 Nov 26 2008 Build 0691 16 XS16 3 5 Nov 26 2008 Build 0691 16 XS16 3 5 Nov 26 2008 Build 0691 16 XS16 _ 3 5 Nov 26 2008 Build 0691 16 XS16 3 5 Nov 26 2008 Build 0691 16 e o e e e n en en n en en en en n 10 100 40 39 XS8 3 5 Jan 26 2009 Build 0701 1 10 190 XS 3500 3 5 Jan 07 2009 Build 0698 4 EUREN ES SE T Find Find Next Find Previous S Done Icon Array List Find an Array Throughput Chart Figure 112 Arrays Window The Arrays window is divided into three sections 9 Array Status A count of Arrays by status allows you to select the Arrays to be listed 9 Array Throughput a chart of Array throughput Array List A list of Arrays which allows you to perform a number of operations on a selected Array 166 Managing Your Wi Fi Arrays e Management System XIRRUS Array Status
158. APs Detected Devices List All of the rogue APs detected in the XMS managed network are listed This list is created as described in About Classifying Detected Devices on page 120 The colored icon on the left of each entry shows its classification as listed above Approved Known Blocked Unknown or Unclassified Device identifying information is shown including the BSSID and SSID broadcast by the rogue its IP address if any its vendor manufacturer the channel that it is using the RSSI the security protocol in use the Array that detected the rogue and the time that it was detected If the same physical device is detected by a number of Arrays it will only be listed once in this table under the detecting Array with the highest 124 Security Managing Intrusions e Management System XIRRUS RSSI You may click on the header of any column to sort the entries by that column Use the Classification Buttons below to classify a device Use the Find field to search the list for a device Entries containing the search string in any position in any displayed column are found The target entries need not start with the search string The Find feature on this window works in the same way as searching for an Array in the Array window See Using the Search Feature in the Resource Windows on page 164 Classification Buttons These buttons allow you to set the security status of detected devices We suggest that you use the fol
159. Active All Days v Time Limits Active All Times iv Apply Cancel Figure 199 Adding an entry to the User Group List e VLAN ID If desired enter a VLAN ID in this field Traffic for this User Group will be forwarded to this VLAN on the wired network The default value for this field is None 9 QoS Priority Enter a value in this field for QoS Quality of Service priority filtering or increment decrement the value using the UP and DOWN arrows For detailed information on the operation of QoS on the Wi Fi Array please 304 Managing Configuration with Policies e Management System XIRRUS see the Wi Fi Array User s Guide part number 800 0006 001 The QoS value must be one of the following 0 The lowest QoS priority setting where QoS makes its best effort at filtering and prioritizing data video and voice traffic without compromising the performance of the network Use this setting in environments where traffic prioritization is not a concern e 1 Medium QoS prioritization is aggregated across all traffic types e 2 High where QoS filtering normally gives priority to video traffic e 3 The highest QoS priority setting where QoS filtering normally gives priority to voice VoIP traffic The QoS setting you define here will prioritize wireless traffic for this SSID over other SSID traffic The default value for this field is 2 which provides high but not highest priority e DHCP Pool If you want to associate an
160. Application Note in the Xirrus Library If you enable WPR the User Group List window displays additional fields that may be configured You may enable or disable use of a splash screen for the Web Page Redirect feature Enable or disable splash screen for WPR Splash Timeout This option displays a splash page instead of the first user requested URL The splash page files reside on each Array Note that XMS has a Web Page Redirect policy that allows you to replace the default splash page on Arrays if you wish Please see Web Page Redirect WPR on page 358 for more information To set up use of a splash page set Enable or disable splash screen for WPR to Enable Enter a value in the WPR Splash Timeout field to define how many seconds the splash screen is displayed before timing out or select 0 to prevent the page from timing out automatically After the splash page the user is redirected to the captured URL e Landing Page URL for WPR If you want the user redirected to a specific landing page rather than to the captured URL after the splash screen times out if using a splash screen enter the landing page address in this field 306 Managing Configuration with Policies e Management System XIRRUS Group Limits The Limits section allows you to limit the traffic or connection times allowed for this User Group Note that the RF Global Settings and the SSID policies also have options to limit the number of stations l
161. Array Group Map Array SSID Vian Media and Association types Array Reports Array Inventory An inventory of Arrays filterable by Array Group and Map Array Availability Displays table of Array availability statistics filterable by Array Group Map and Array RF Reports Channel Usage Displays IAP counts on 2 4 GHz and 5 GHz channels filterable by Array Group Map and Array Security Reports Rogue List Figure 243 List of New Report Types This page lists all of the report types offered by the web client Click the desired report type and the Create New Report page for the chosen report type is displayed Figure 244 378 Managing Reports e Management System XIRRUS Create New Report Type Ethernet Errors Displays total Ethernet drops and errors filterable by Array Group Array and VLAN Name Ethemet Errors SS Options Group All Arrays Array XMS 5 0 V2 1 hd C VLAN Number VLAN Name VLAN A VLANs x Table row limit Show ai Time Span Last Hour z Date Time C Specific Date Range Date from Time from Date to Time to Schedule Enable Schedule M Schedule Type Daily C Weekly Monthly Time of Day 24 hh mm 05 E 57 x Email Report To Aaa Save Report Save amp Run Figure 244 Create New Report Page The Create New Report page sets up the name and parameters for this report especially the selection criteria u
162. Array v Global global SS Array vi Policy Policy Name Management Control mgmt SS Array Services service 5S Array VLAN vlan SS Array Security security SS Array SSIDs ssid 55 Array IAPs iap 55 Array RF rf 55 Array WDS wds 55 Array Filters Filter SS Array h Global global SS Array Java Applet Window Submit Back Cancel Java Applet Window Figure 125 Confirm Policies to be Created First and Subsequent times If you have previously created policies from this Array XMS will list the policies that you ve requested and classify them as Already Exists or Create New Figure 125B For pre existing policies the Overwrite column is checked This Managing Your Wi Fi Arrays 179 e XIRRUS Management System means that the new policy will overwrite the previous policy If you clear the checkbox XMS will keep the old policy and create a new one with a new name XMS appends 1 2 etc to create the new policy name Click the Submit button to proceed The results of the operation will be displayed Policy Creation Results Policy Type Policy Name Status Message Management Control mgmt SS Array Succeeded Succeeded Services service 5S Array Succeeded Succeeded VLAN vlan SS Array Succeeded Succeeded Security security SS Array Succeeded Succeeded SSIDs ssid 55 Array Succeeded Succeeded IAPS iap 55 Array Succeeded Succeeded RF rf 55 Array Succeeded Succeeded WDS wds 55 Array Succeeded Succeeded Filters Filt
163. Configuration with Policies 315 e XIRRUS Management System RF From the Configuration Policies node in the tree click on RF to display the RF window This window contains a list of all RF policies currently available with tools to manage these policies Ted d eases Chet Policy Name LocpbackM Load Balancing ShapCel Fat Roaming Fast Roaming Layer Share Roaming Info With Fas Roaming Targets Mody Exec Delete F Randed Deabled Yes Yes Tunneled zada inRage 1 lat b x Figure 204 List of RF Policies The columns in this window show selected settings for the listed policies For information about changing the columns displayed see Selecting the Columns Shown in a Policy Window on page 220 How you set up an RF policy will determine how the Arrays assigned with that policy operate within your wireless network including the coverage patterns generated by the Arrays the channels they use and the transmit power The following graphic shows examples of full and partial coverage patterns I See f l N outside wall Figure 205 Radiated Coverage Patterns With a full coverage pattern left image all IAPs are activated with coverage spanning 360 degrees Any client within range will always receive coverage regardless of their geographic position relative to the Array Partial coverage can be achieved by turning off any combination of IAPs 316 Managing Configuration with Policies e Manage
164. Configuring the RF Settings of an TAP on page 200 Alarms and Events Shows a count of events and alerts for this IAP See Viewing Events and Alerts IAPs on page 202 Managing Your Wi Fi Arrays 199 e XIRRUS Management System For specific information about IAPs and how they are configured refer to the Wi Fi Array User s Guide part number 800 0006 001 Sorting the List of IAPs To change how the table is sorted click in any column header to define that header as the sort criteria In addition you can choose to have the results displayed in ascending or descending order represented by the appropriate arrow icon To do this simply click in the same header again to toggle between ascending and descending order Connecting to an IAP s Array To connect to an Array that contains a specific IAP right click on the IAP in the IAPs window then choose Web Management from the pull down list The associated Array s Web Management Interface login window is displayed as a separate window not part of the XMS client interface From here you can log in to the Array and proceed as described in Connecting to an Array on page 172 Configuring the RF Settings of an IAP To open a window to configure the RF settings for a specific IAP Figure 142 use any of the following procedures Double click on the IAP in the IAPs window Right click on the IAP in the IAPs window then choose Configure from the pull down list
165. Contours button is enabled the RF contours displayed on this map show the intensity of RF signals broadcast by each Array s radios If an Array s radios are disabled no contours are displayed for that Array Signal strength is displayed using the colors shown in the Heat Map RSSI Values legend 136 Working with Maps e Management System XIRRUS under the map You may change these colors if you wish see Changing Contour Map Colors on page 156 You may also change the transparency of the colors the degree to which the map is still visible See Map Settings Window on page 160 The management operations available in the heat map window depend on your XMS account privileges If you have logged in to XMS using a read only account you cannot make any modifications to the map For example you may not add Arrays to the map move them or remove them Read only users also cannot add or delete maps or change any map settings such as the scale or environment settings A read only user can select an Array on the map or in the Array list and use the right click menu to display information but no configuration options are enabled only Web Management Array Status Alarms and Events Reports and Refresh are available You may perform operations which change your view of the map such as zooming in and turning contour display on and off Map Modes of Operation XMS users with read write privileges may perform any operation on a map Maps h
166. Database Backup Settings When those steps are complete proceed to 9 Start an XMS Java client next section then start Discovering the Network on page 67 28 Getting Started with XMS e Management System XIRRUS 9 Set the XMS polling interval based on your deployment size see Web Client Polling Settings on page 516 or XSMT Advanced Settings on page 537 Important The XMS server does not have a default backup schedule so you must create one after installation Starting the XMS Client Interface XMS has two browser based client interfaces with somewhat different capabilities 9 The Java Client includes a full set of management capabilities for your Wi Fi network The Dashboard provides an at a glance overview of the health of your network network discovery may be fine tuned contour maps display the RF coverage provided by your Arrays alarms and events are displayed pages for Arrays IAPs Stations and SSIDs show detailed information and allow configuration rogue devices are monitored and Array configuration policies may be configured 9 The Web Client is a very fast and efficient application for viewing the status of your network and performing certain network management tasks It does not have all of the same features as the Java client but it does have some extended features that are only available on this client In particular bulk editing allows you to quickly configure selected identical settings on a
167. Date Y Message Info Dec 28 2009 02 Rogue classification update initiated on Array XS 39 10 100 40 37 00 0f XIRRU A Dec 28 2009 02 Node clear No failures on this node 00 0f Dec 28 2009 02 Array is up and active 00 0f Info Dec 28 2009 02 Rogue classification update initiated on Array Robin XS16 00 0f 7d 00 03 XIRRU Dec 28 2009 02 Node clear No failures on this node 00 0f Dec 28 2009 02 23 51 PM Array is up and active 00 0f Dec 25 2009 12 58 23 PM Node failure This probably means one or more interfaces have failed 00 0f Dec 25 2009 12 58 23 PM Array not reachable 00 0f Dec 25 2009 12 57 53 PM Node failure This probably means one or more interfaces have failed 00 0f V b Figure 33 Monitoring Window Events The XMS Java Client Interface 47 e XIRRUS Management System Resource Windows These management windows are generated by clicking on items that reside under the parent Resources function in the Tree with the selected child window s being displayed in the Main Viewing Area of the client interface Resource windows include Locations Arrays IAPs Stations SSIDs Location Window This is the window where your maps are displayed Figure 34 Heat Map Value 80 dBm Environment attenuation 3 dBm spacing 10 feet Location x 784 8 y 307 1 feet Figure 34 Location Map Window The client interface allows you to create custom maps To create a custom map go to Adding a New Map on pa
168. Done Figure 115 Array List This list shows Arrays connected to the network Use the Array Status buttons to select which Arrays to display all Arrays or only those with the selected status Only Arrays that belong to the group selected on the Dashboard window are displayed To search for a particular Array see Using the Search Feature in the Resource Windows on page 164 You may customize the columns shown in this list see Choosing the Columns for Display on page 163 For each Array the following information is shown by default 9 The icons to the left of the first column in the list are color coded to denote the current status of each Array For example if an icon shows that the Array is clear then it is highlighted in GREEN If the icon shows that the Array has a critical problem then RED is used The Array Host Name The Location of the Array The Management IP Address of the Array The Gig1 MAC Address of the Array MAC address of the Gigabitl port The Model of the Array The Software Version currently running on the Array Managing Your Wi Fi Arrays 169 e XIRRUS Management System The number of Active IAPs on the Array The number of Active Stations associated to this Array The current Throughput Mbps of the Array The current Uptime of this Array since the last reboot An Arrays Host Name will typically be used to identify the Array TS throughout the XMS user interface In places where a
169. E ports are supplying nominal power to the Array Off all mapped PoGE ports are off Fault if a problem is detected on a PoGE port the type of problem is indicated 9 NA no PoGE ports are associated with the Array see page 212 9 blank Array model does not support PoGE You may turn a PoGE injector output port on or off thus turning power on or off to the connected Array port Right click the desired Array Select PoGE Injector from the drop down menu The following options are displayed 9 Power On turn on power and data transmission on the injector port s thus supplying power and data to the connected Array port s If the injector port s are already on transmission will not be affected 9 Power Off turn off power and data transmission on the injector port s The connected Array port s will not be powered If the injector port s are already off they will not be affected 9 Power Cycle turn all connected injector ports off and then on again This reboots the Array Select one of the above operations You will be asked to verify that you wish to proceed The status of the operation will be displayed 188 Managing Your Wi Fi Arrays e Management System XIRRUS Managing Array Licenses XMS includes a browser based utility that manages the licenses for large numbers of Arrays You can easily view licensing information for your Arrays and manage individual licenses The license utility can apply bulk licenses i
170. ENT PLEASE READ THIS SOFTWARE LICENSE AGREEMENT CAREFULLY SIEFC02 DOWIGOADING OR USNO THE SOFTWARE BY USING ANY LICENSED MATERIALS NTAINS THIS PRODUCT YO W HAVE BEAD AND UNDERST Figure 7 Installation Wizard and End User License Agreement Click on the Next button to continue the installation process When prompted you may click the Choose button to select a location where you want to install the application or click on the Restore Default Folder button to select the default folder as the desired location Figure 8 The default folder is C XA 3300 CC Xirrus Management System Products 17 e XIRRUS Management System Where Would You Like 10 ital Restore Defaut F older c C uA 3x cc Figure 8 Choose an Install Location for the Application 5 Clickon the Next button to continue the installation process At this point a Windows Security Alert message may appear Figure 9 informing you that Windows Firewall is blocking some features of Java Click the Unblock button to allow correct installation and operation of XMS Windows Security Alert xj 777 To help protect your computer Windows Firewall has blocked VW some features of this program Do you want to keep blocking this program Name Java TM 2 Platform Standard Edition binary Publisher Sun Microsystems Inc Keep Blocking Unblock N Ask Me Later Windows Firewall has blocked this program from accepting connections from the Internet or a
171. Events Shows a count of events and alerts for this station See Viewing Events and Alerts Stations on page 206 9 Locate Uses the XMS location algorithm to locate this station on a map See Locating Devices on page 152 Sorting the List of Stations To change how the table is sorted click in any column header to define that header as the sort criteria In addition you can choose to have the results displayed in ascending or descending order represented by the appropriate arrow icon To do this simply click in the same header again to toggle between ascending and descending order Connecting to an Associated Array To connect to an Array that a station is associated with use either of the following procedures Double click on a station in the Stations window 9 Select and then right click a station in the Stations window then choose Web Management from the pull down list The associated Array s Web Management Interface login window is displayed as a new browser window not part of the XMS client interface From here you can log in to the Array and proceed as described in Connecting to an Array on page 172 Managing Your Wi Fi Arrays 205 e XIRRUS Management System Viewing Events and Alerts Stations To view a summary of events and alerts for the station s associated Array select and then right click the station and choose Alarms and Events from the pull down list The Events and Alerts summary window f
172. Group Include only member Arrays of the selected Array group Map Include only Arrays that are members of the selected map Array Include only the selected Array SSID Include only the selected SSID VLAN Include only the selected VLAN specified by name or number Media Type Include only IAPs operating in the selected mode 802 11b 802 11g 802 11a or 802 11n Association Include only stations that are authenticated or all stations Detail on Break out counts by the selected category or show only totals Date Time Include only this time range Schedule Run the report at this time See Schedule on page 382 Email Report To After running email the report See Email Report To on page 382 Managing Reports 409 e XIRRUS Management System Download Report pdf xls csv Email Report e XIRRUS XMS Reports Unique Station Count R Time Span Hour Period 5 Minutes Wednesday 05 04 2011 12 25 PDT to Wednesday 05 04 2011 13 25 PDT Report generated on 05 04 2011 at 13 58 09 PDT Unique Station Count per 5 Minutes 7 6 Unique Stations this Period 4 53 Station Associations Sra EcNEDN 7 0 12 30 12 40 12 50 13 00 1310 13 20 All Station Count Top Station Counts with Detail on Total Row Count 5 S 39 10 100 40 37 2 2 1 1 L Figure 255 Unique Station Count Report The graph is detailed on i e broken out into categ
173. IMPORTANT The XMS server does not have a default backup schedule so you must create one after installation Web Client Viewing XMS Server Status Click the Status link on the left to review the status and version number of the XMS Server and the status and size of the Database in bytes The status of the RMI Registry is also indicated Help Logout Em y y e Monitor Pe configuro 9 Reports m Setting Xirrus Management System XMS Server Running Network Version 5 1 0 2271 Date amp Time Model 3340 Email Serial Number XM33401A0360900256D Polling SSH Server Backup Size 47 1 MB Database Running Server Logs Upgrade RMI Registry Running Reset XMS License About XMS Restart Application Reboot Appliance Shutdown Appliance Figure 323 The Status Page 9 Restart Application If XMS is not running properly you may click the Restart Application button on the lower left to restart the XMS server software If the server is currently running an orderly shutdown will be performed first 9 Reboot Appliance The Reboot Appliance button will reboot the Management Appliance this will shut down XMS related processes in an orderly manner before 506 XMS Administration e Management System XIRRUS rebooting Rebooting and restarting will take about two minutes on a new Management Appliance As XMS is used and the database grows startup integrity checks will take longer For shutdown see below
174. MIMIC Array 3 5FW 4 Ali s Virtual SQA Lab 172 16 20 5 1 1 XS16 3 5 Nov 26 2008 Build 0691 lt lt MIMIC_Array_3 5FW gt gt 5 Ali s Virtual SQA Lab 17216206 1 1 XS16 3 5 Nov 26 2008 Build 0691 MIMIC Array 3 5FW 6 Ali s Virtual SQA Lab 17216207 1 1 XS16 3 5 Nov 26 2008 Build 0691 lt lt MIMIC_Array_3 5FW gt gt 7 Ali s Virtual SQA Lab 17216208 1 1 XS16 3 5 Nov 26 2008 Build 0691 MIMIC Array 3 5FW 8 Alis Virtual SQA Lab 172 16 20 9 1 52 XS16 3 5 Nov 26 2008 Build 0691 lt lt MIMIC_Array_3 5FW gt gt 9 Ali s Virtual SQA Lab 172 16 20 10 52 XS16 3 5 Nov 26 2008 Build 0691 lt lt MIMIC_Array_3 5FWe gt 10 Ali s Virtual SQA Lab 172 16 20 11 1 XS16 3 5 Nov 26 2008 Build 0691 MIMIC Array 3 5FW 11 Ali s Virtual SQA Lab 172 116 2012 1 1 XS16 3 5 Nov 26 2008 Build 0691 lt lt MIMIC_Array_3 5FW gt gt 12 Ali s Virtual SQA Lab 172 16 20 13 1 L XS16 3 5 Nov 26 2008 Build 0691 lt lt MIMIC_Array_3 5FW gt gt 13 Ali s Virtual SQA Lab 172162014 1 I XS16 3 5 Nov 26 2008 Build 0691 lt lt MIMIC_Array_3 5FW gt gt 14 Ali s Virtual SQA Lab 172 16 20 15 0e 1 00 52 XS16 3 5 Nov 26 2008 Build 0691 XS8 10 100 40 39 10 100 40 38 Of 01 xSB 3 5 Jan 26 2009 Build 0701 135030810598 10 100 49 190 Of 02 XS 3500 3 5 Jan 07 2009 Build 0698 rnd Fane
175. MS client select Backup Manager to display the Backup page in your browser Backup management is identical regardless of whether your XMS server is based on Linux or Microsoft Windows Backup Location Schedule Backup Path ou must first configure up location before scheduling backups Domain h BackupName Schedule Backup amp Backup Now Username Paswod Backup Now Schedule Name Schedule Type Days Time Remove Schedule Save Location Restore Backup View Backups Figure 318 Database Backup Manager This page has the same settings and is used in exactly the same way as the web client Backup page See Web Client Database Backup Settings on page 511 for details XMS Administration 499 e XIRRUS Management System Broadcast Message Use this function to broadcast a message to XMS clients For instance you might use this message to warn users of a planned shutdown for maintenance Select Broadcast Message from the Java client s Admin menu 5 Xirrus Broadcast Message x Message XMS will be down For maintenance at 01 00 tomorrow Send to my FE client only Java Applet Window Figure 319 Broadcast Message The Broadcast Message dialog box has the following fields Message Enter the text of the message to be sent to XMS clients 9 Option Select whether you wish the message to be sent to all currently logged in clients or only to your own client The seco
176. Maps e Management System XIRRUS 9 Background Image The Background Image cannot be modified 9 Display Units Select the units of distance for the Information Bars Feet or Meters Proceed to another settings page or click OK if done Information Bars This page of the Map Properties window allows you to select the fields that are present on the map information bars Select one of these pages then check the fields that you would like to have displayed See Information Bars on page 140 for more details Information Bars x Map Settings Array Data Eh Layers Check each element to include on the information bar Heat Map I Information Bars Iv Location IV Orientation 4 Map Data M mac Location Data VP M Type 4G Edit Map Settings x Map Settings Map Data Gp Layers Check each element to indude on the information bar 779 Heat Map El J Information Bars T Position IV Environment Nearest Array be Array Data M Location IM Heat Map Value TF Contour Type x Map Settings Location Data H p Layers Check each element to indude on the information bar t Heat Map El Information Bars Iv Estimated Location Array Data Map Data Figure 110 Map Settings Information Bars Proceed to another settings page or click OK if done Working with Maps 161 e XIRRUS Management System 162 Working with Maps Management System XIRRU
177. Mode Settings 9 Enable Standby Mode Choose Yes to put an Array into Standby Mode or choose No to allow the Array to operate normally If you choose No the remaining configuration fields are grayed out not editable and this procedure is finished 9 Standby Target Address If you enabled Standby Mode enter the base IAP MAC address of the target Array ie the address of the primary Array that is being monitored and backed up by this Array This address is the base address of the target Array s IAP MAC Range To find this address use the Web Management Interface on the primary Array Connecting to an Array on page 172 and log in Click WDS and look for This Array Address at the bottom of the window Alternatively click Array Info and look for IAP MAC Range then use the starting address of this range After completing all of the desired fields in the Services window for Standby either click on the Apply button to save this policy or click on the following button to configure more service policy options 256 Managing Configuration with Policies e Management System XIRRUS 9 Wi Fi Tags You may collect Wi Fi Tag information for later use and analysis Wi Fi Tags This window enables or disables Wi Fi tag capabilities When enabled the Array listens for and collects information about Wi Fi RFID tags sent on the designated channel These tags are transmitted by specialized tag devices for example AeroScout Tags A Wi Fi tagging
178. N16520901140 10 100 54 26 lan11 00 0f 7d 07 46 f0 fe 0 000 XN16520901140 10 100 54 26 an12 00 0f7d 07 46 00 0e Jo 0 000 N16520901140 10 100 54 26 jan2 0 0f 7d 07 46 30 3e kewteszos0t 140 10 100 54 26 Jona 0 N16520901140 10 100 54 28 00 0f 7d 07 46 50 5e 00 0f 7d 07 46 70 7e 10 100 54 28 neo 3816520901140 10 100 54 26 jane 00 0f 7d 07 48 80 8e o Figure 247 Wireless Traffic Report Table Details for the Wireless Traffic Report The table portion of the report shows traffic statistics for each IAP on the selected Arrays organized by the following column headers 9 Array Hostname The host name assigned to the Array Only Arrays that meet your selection criteria are included e Array MAC Address This is the Array s MAC address 390 Managing Reports e Management System XIRRUS IAP Name Each IAP in each Array is listed IAP MAC Address This is the IAP s MAC address Throughput data shown in the table depends on your Selection Criteria If you set Display Traffic by to Tx Rx these columns are shown Min Mbps Shows the minimum throughput in megabits per second achieved by the IAP for the time period you specified Max Mbps Shows the maximum throughput in megabits per second achieved by the IAP for the time period you specified Avg Mbps Shows the average throughput in megabits per second achieved by the IAP for the time period you spe
179. NT SHALL XIRRUS OR ITS SUPPLIERS LIABILITY TO CUSTOMER WHETHER IN CONTRACT TORT INCLUDING NEGLIGENCE OR OTHERWISE EXCEED THE PRICE PAID BY CUSTOMER THE FOREGOING LIMITATIONS SHALL APPLY EVEN IF THE ABOVE STATED WARRANTY FAILS OF ITS ESSENTIAL PURPOSE SOME STATES DO NOT ALLOW LIMITATION OR EXCLUSION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES The above warranty DOES NOT apply to any evaluation Equipment made available for testing or demonstration purposes All such Equipment is provided AS IS without any warranty whatsoever Customer agrees the Equipment and related documentation shall not be used in life support systems human implantation nuclear facilities or systems or any other application where failure could lead to a loss of life or catastrophic property damage or cause or permit any third party to do any of the foregoing All information or feedback provided by Customer to Xirrus with respect to the Product shall be Xirrus property and deemed confidential information of Xirrus Equipment including technical data is subject to U S export control laws including the U S Export Administration Act and its associated regulations and may be subject to export or import regulations in other countries Customer agrees to comply strictly with all such regulations and acknowledges that it has the responsibility to obtain licenses to export re export or import Equipment This Agreement shall be governed by and construed
180. Name Max Version Max Array Count Expiration Date Figure 335 XMS Server License 2 Xirrus will supply you with a License Key and Serial Number for your server Enter both of these fields exactly as they were provided to you the fields are not case sensitive and click Apply 520 XMS Administration e Management System XIRRUS 3 After processing the license information the following additional fields will be shown e Product Name XMS server s product name e Max Version the highest release number supported by this license All incremental upgrades to the release shown are also supported For example if Max Version is 5 0 then this license will run Release 5 0 999 but Release 5 1 will require an updated license e Max Array Count the server is licensed to manage a specific maximum number of Arrays To manage additional Arrays please contact Xirrus to upgrade your license Expiration Date the date that this license expires Web Client Performing Upgrades C N e Monitor A configure Reports m Setting To perform an upgrade simply select the Appliance upgrade TAR image file and click upgrade You will need to reboot the Appliance once the upgrade completes Version 5 1 0 2283 Network Date amp Time Choose File Upload Email Polling SSH Server Backup Server Logs Figure 336 Upgrading XMS Software Select the Upgrade link on the left to display the Upgrade page This page
181. OWS tnter tret te htt ntn therein 468 To Export Radio Settings entretenir acera e rere rh Eae ERROR 469 Tolmport Radio Settings isecen etanan anesini RR be ir Apa EHE 469 Advanced Cong sesir otia eddie at sabe eal ans 470 About Advanced Config Files sione rti rte rtr enemies 470 Advanced Combs Pape poirie sses s E DU Re LE 471 Load from Array suuenuieitenatiiee dde rH e RRE RR 473 Deploy Configuration aca ceti etiarn eren Phe teres to Phase beet b ARESE i 474 iq c 476 Add Devices ii EROR al ok a anne diat 477 e Management System XIRRUS Overview ot Adding Devic s caer bep ER Id EHE ET tate 478 Add Devices 5 intet ben eee Gto diem Ere s 480 SNMPy2 And SNMPYy3 Settings iecit rennen erae 482 Sola MOSE H 485 Add INetWOEKS 4 einioiteeiniemeiaatem itii n K eben eee inae 486 Trap RECCIVOrs eeror nne en deme qtii EH IU REEF EE Eire 488 Atay LICENSES coscnieiminioo nno ERG p EUREN OR UO REOR 489 Custom Fields secet hot E EIE IEEE ERI Re 489 Custom Fields Page 5 sieeneete ibt reb tea bee Hn santas e epi te and 490 Custom Field Values a nores teri eise en 491 Cus OY AC HONS oan st uum Re bU TIE NE 493 XMS Administration ciuiniais bua bn iui bins gestes MR m HUN IRE KM RUE 495 Country of Operation iei oed ee eee b AH iet M reines Renee ei SA 496 User ACCOUNTS m M 497 Creating a New User ACCOUNT 4er rti eee erben sia 498 p
182. PoGE injector 187 management capacity 7 management interface 39 management settings 228 229 managing Array licenses 189 managing Arrays 158 163 managing policies 215 manufacturer classifying rogue devices by 125 map locate Array 187 RF Heat Map 131 map window 48 maps about 129 adding a new map 144 Arrays moving 149 removing 149 resizing icon 148 Arrays adding 147 background image changing 145 background images 142 contour map colors 156 deleting 157 display units 161 distance setting scale 146 edit mode 137 editable 144 environment properties wall setting on map 151 floor plan 142 image name 160 161 label 160 managing Arrays 158 558 Index Management System map window about 132 migrating to new release 142 monitor mode 137 properties modifying 145 renaming 145 saving 145 scale setting 146 wall settings 151 working with 129 maximizing windows 54 menu bar 41 message broadcast 500 migrating older maps 142 minimizing image file sizes 142 minimizing windows 54 mirror traffic between Gigabit ports 245 mode for maps see maps 137 modify map properties 145 modifying a network 84 monitor mode for maps 137 monitoring 11 105 alarms 107 taking action 110 audit 370 dashboard 91 network events 111 severity levels 110 syslog event details 114 severity levels 113 syslog events 112 viewing by Array 105 monitoring windows 47 MTU size 243 245 MySQL port usage 19 20 N navigating windows 5
183. Policy Window sss 220 Modifying and Deleting a Policy aim eds 222 List Ot Global PolicieSus nai atenta E ERE 223 Global Default Policy Settings etenim ti tr ree 224 Listot System Policies petia e te esis thoes land Ra AAR enacts 225 System Settings cca en rio e HA ERE REEL ER SESS 226 List of Management Policies retener trtum iin etia 228 Management SetUNE Sisse nisoria s Esn ie E EENES EiS 229 SINIMPSeEEIIES stes it rab RE EE REESE REOR T RA ones 232 SNIMPVS SebifigS cctsnett erint Ren tu to ala teet a i eee e ide ete stes senec etes 234 Amin Settinps ceo tasse cire i e tertia EEAS 236 Adding an Administrator Account to the Admin List 236 Console Sern eS ici sia ciate niin d te ede qe ort alae 237 Listor Network Policies sn oce roti mde ren immemor 239 Network Interface ORIS sissies nd bati rcd 240 Network Settings 10 100 Fast Ethernet nemen 241 Network Settings Gigabit 1 iiec ttn ine etaia 244 List of Services Policies 4 ore cii imr eerte rette n eia 247 DNS DET Ver SETUDE S E ET 248 List of Figures xvii e XIRRUS Management System Figure 172 NTP Seting Saisio tactis tatu Das aiU se EH a RU DRE E 250 Ligure 179 NetblowSetBifi pSssom de mtra oeri Bec n DR ERREUR 252 Figure 174 System Log Server Settings isisisi eicere etin spas 253 Figure 175 Standby Mode SBtUDIBS sssrini rei re HER odes eraikan t eerie in 256 Figure 176 Wi Fi lag Settings iiie nnt trente Ro
184. S Custom Actions This page allows you to define a custom button that adds a new function to the Arrays list Associate an action with the button by specifying a URL to open when the button is pushed The URL can include variables For example suppose you added the new column titled assetTag to the Arrays list using the Custom Fields Page and then you entered values for this field for each Array using the Custom Field Values page You could then define a new button labeled Asset Tracking for example that would go to your Asset Tracking Manager with a selected Array s asset tag using the URL http track xyzcorp com assettagno assetTag You may choose to add the custom action button to the Monitor Arrays page and or to the Configure Home Page You may add a number of new custom actions Open this configuration page by clicking the Configure button near the top of the window then select Custom Fields on the left Click the Custom Actions link when it appears on the left Enter a new custom action and click the Add button Name Description URL http or https Show in Monitor View M Show in Configure View Aad Name Description URL Show in Monitor Show in Configure Xirrus Support Xirrus Support Login http supportxirrus com true true Edit Delete Asset Tracking My Asset Tracking Program http track xyzcorp com assettagno assetTag true true Edit Delete Figure 313 Cus
185. S Managing Your Wi Fi Arrays This chapter provides instructions for using the Java client to manage your discovered Wi Fi Arrays and Power over Gigabit Ethernet PoGE injectors and includes managing wireless stations individual IAPs Integrated Access Points and SSIDs There is also a section discussing how to map PoGE injectors with the Arrays to which they supply power Section headings for this chapter include 9 Arrays on page 165 Managing Array Licenses on page 189 IAPs on page 198 Stations on page 203 SSIDs on page 207 PoGE Injectors on page 211 Choosing the Columns for Display Table Column Chooser o xj Rearrang e Select column names and use directional buttons to hide or make columns visible column pem m dis pl ay o rder Gigi Gateway p array Host Name ocation lodel Software Version columns ime of Last Boot Last State Undate Figure 111 Table Column Chooser The windows in the Resources section of the tree except for Maps and SSIDs may be customized by changing the columns that are displayed and the order of Managing Your Wi Fi Arrays 163 e XIRRUS Management System display If you prefer to use a smaller browser window for XMS and there s not enough room for all the columns to display you can use this feature to select your the upper right corner Click it to display the Table Column Chooser The Visible Columns list shows the columns that will
186. S08010800E36 XIRRUS 5103 jac 81 12 05 69 3f 10 100 56 144 0 000 0 000 0 000 1X808010800E36 cd 88 6b E 100 586 143 0 000 0 000 0 000 Figure 249 Station Traffic Report Tx Rx Managing Reports 395 e XIRRUS Management System Station MAC Address This is the station s MAC address Station IP Address This is the station s IP address Throughput data shown in the table depends on your Selection Criteria If you set Display Traffic by to Tx Rx these columns are shown Average Tx Mbps Shows the average transmit throughput in megabits per second achieved by the station for the time period you specified Average Rx Mbps Shows the average receive throughput in megabits per second achieved by the station for the time period you specified Average Tx Rx Mbps Shows the average total throughput in megabits per second achieved by the station for the time period you specified If you set Display Traffic by to Total these columns are shown Average Tx Rx Mbps Shows the average total throughput in megabits per second achieved by the station for the time period you specified Peak Tx Rx Mbps Shows the maximum total throughput in megabits per second achieved by the station for the time period you specified 396 Managing Reports e Management System XIRRUS Station Errors This report lists all stations with errors that were detected by XMS based on your Selection Criteria
187. SH tools is PuTTY Telnet Timeout Enter the maximum idle time in seconds before the Telnet session times out The default is 300 seconds 230 Managing Configuration with Policies e Management System XIRRUS Telnet Port If you wish to change the port used for Telnet from the default value 23 enter the desired port number here Enable SSH Management Choose Yes to enable management using a Secure Shell SSH utility or choose No to disable SSH management The default is Yes SSH Timeout Enter the maximum idle time in seconds before the SSH session times out The default is 300 seconds SSH Port If you wish to change the port used for SSH from the default value 22 enter the desired port number here Enable HTTPS Management Choose Yes to enable management using a secure Web browser via HTTPS HyperText Transmission Protocol Secure or choose No to disable HTIPS management The default is Yes Arrays may be managed using Internet Explorer version 7 0 or higher Mozilla Firefox version 3 0 or higher Chrome version 3 0 or higher or Safari version 5 0 or higher A secure Web browser is required for Web based management of Arrays HTTPS Timeout Enter the maximum idle time in seconds before the HTTPS session times out The default is 300 seconds HTTPS Port If you wish to change the port used for HTTPS from the default value 443 enter the desired port number here Managing Configuration with
188. SMTP server for XMS to use click Settings at the top of the page and then use the Email link on the left Figure 329 Enter your SMTP Server Address and SMTP Server Port Specify the User and Password that XMS must use to access the server Select an Encryption type When XMS sends an email it will identify it as being sent from the email address that you specify in the Sender Email field You may click the Test Email button to verify that you have specified the SMTP server correctly Enter your email address in the dialog box that appears to check that XMS is able to use SMTP to successfully send an email Click Save when done XMS Administration 515 e XIRRUS Management System Web Client Polling Settings Help Logout a Na y y e Monitor dA configure 9 Reports aX Settings Arrays are periodically polled by XMS to gather statistical information A Fast rate can provide near real time data about Xirrus Arrays for smaller networks while a Slow rate is more suitable for a large network of Arrays More Info save FAST MEDIUM Figure 330 Changing Polling Rate Click the Polling link on the left to display the Polling page This page changes the rate at which various types of network information are updated Note that for Windows based XMS servers you may change polling frequency using XSMT as described in Changing Polling Frequency on page 537 XMS offers a rich set of statistics in its Dashboard Report
189. SNMP 81 config file editing 365 472 policy 362 configuration auto configuration of channels 181 configuration file policy 362 configuration management 10 configuration windows 50 connecting to XMS server problems 542 console 229 237 Console port login via 285 contact information 544 contour map changing colors 156 see RF Heat Map 131 country of operation channel selection 496 country setting 320 creating a map 144 CSV exporting Array licenses 191 importing Array licenses 192 custom login for software image upload 356 for WPR file upload 361 D dashboard 91 database about 501 backups deleting 514 repairing 533 database server and XMS server shutdown 532 database windows 52 date time restrictions and interactions 307 DB operations 501 Index 555 default lease 268 default password 26 32 34 503 default policy see global policy 185 223 default user name 26 32 34 503 delete Array licenses 197 database backups 514 deleting a network 86 deleting an Array 89 desktop icon Web Start Client 29 detaching windows 53 devices blocking 124 DHCP server 247 265 disabling enabling IAPs for multiple Arrays 180 discovering Arrays 67 networks 67 discovering networks and Arrays 37 discovery 70 disable exclude networks 74 optimizing 74 schedule 74 SNMP v2 v3 81 SNMPv3 requires NTP 68 509 543 discovery properties 74 display units maps 161 distance scale setting on map 146 DNS serve
190. Start window appears Figure 16 N anagement System Production client for monitoring and configuring Xirrus Arrays BETA client for limited monitoring and configuration capability Figure 16 XMS Start Window 2 Clickthe Java Client button Some browsers may ask you to choose whether to open or save a file named xms256 jnlp Select Open with use the suggested application Java Web Start Launcher and click OK 3 If you have not previously accessed this XMS server you may see a security warning with the Publisher identified as Xirrus Figure 17 the message may vary depending on the browser in use Check the box labeled Always trust content from this publisher and click Run Getting Started with XMS 31 e XIRRUS Management System Warning Security x The application s digital signature cannot be verified Do you want to run the application Name XMS at 10 100 40 6 Publisher Xirrus From http 10 100 40 6 9090 pee The digital signature cannot be verified by a trusted source Only QU run ff you trust the origin of the application lem Figure 17 Web Start Client Security Warning 4 The XMS Login dialog appears Log in to the client interface using the default username and password the factory default for both fields is admin Click Connect ox Enter username and password for XMS login to 10 100 40 6 9090 Figure 18 Client
191. Station Totals Total Active Unique 24 Hours Media Types 802 11a 802 11b 802 11bg 802 11n Figure 70 Dashboard Stations Section Details 9 Station Totals This shows the number of stations in the selected group Click on a count to show The Stations Window with the station list filtered to show the selected stations Total Active the total number of stations currently associated to all selected Arrays Unique 24 hours the total count of unique stations by MAC address which associated across the selected Arrays over the last 24 hours In other words this is the count of all stations that have 96 Using the Dashboard e Management System XIRRUS associated to Arrays in the selected group in the last 24 hours with no station counted more than once 9 Media Types This is a breakdown of the number of 802 11a 802 11bg 802 11b and 802 11n stations that are currently associated to the selected Arrays The count of each station type is shown and a pie chart illustrates the proportion of each type Click on a count or a pie chart segment to show The Stations Window with the station list filtered to show the selected stations Using the Dashboard 97 e XIRRUS Management System Performance This section summarizes recent performance or station associations for the selected Array Group see About Dashboard Data on page 92 over the selected interval You may select the Graph Type Through
192. TKP1 true Internal Off 0 No Ed Accountina External On 0 No Et gt x o Do you want to delete policy WPA1 dw Figure 154 Modifying and Deleting a Policy 222 Managing Configuration with Policies e Management System XIRRUS Global Policy A Global Policy allows you to select a set of policies that can be applied to Arrays in one shot It is simply a convenience that applies a set of policies in one step rather than one at a time It simplifies Array management by defining a set of policies that set a desired Array configuration Different global policies may be created for different configurations that you commonly use Global Policies were previously called default policies From the Configuration gt Policies node in the tree click on Global Policy to display the Global Policy window This window contains a list of all global policies currently available to be applied to Arrays or groups with tools to manage these policies Global Policy Of x Columns Refresh Total 1 Policy System Manag Network Services VLAN DHCPS Security SSIDs UserG Globalt None mgmt X network service None None security ssid XS usergro None rf XS08 wds XS filter XS Figure 155 List of Global Policies The columns in this window show selected settings for the listed policies For information about changing the columns displayed see Selecting the Columns Shown in a Po
193. This feature exports the selected licenses shown on the Deployed Licenses window into a file that can be imported by Excel either a csv file or an xls file This file may also be used for Importing Array Licenses To export Pending licenses see Managing Pending Array Licenses on page 196 1 2 Select Arrays Download Licenses lt Previous Next gt Select the arrays for which you wish to export licenses and click Next Select Columns Showing 1 to 8 of 8 Rows 25 gt Status Hostname IP Address Ira Location Lobby 10 100 46 239 I Location QA 10 100 46 237 Iz Location Support 10 100 46 240 Q9 Location XN8 IT 10 100 46 238 Dn Q showNetsXN8 14 10 105 4 102 1 Location test test test test Model XN16 XN4 XN8 XN8 XN8 Stations Software Version 0 0 1 0 75 5 0 0 Oct 06 2010 Build 1531 5 0 0 Oct 06 2010 Build 1531 5 0 0 Oct 06 2010 Build 1531 5 0 0 Oct 06 2010 Build 1531 5 0 1 Nov 10 2010 Build 1535 Figure 135 Exporting Array Licenses Gig1 Mac Address 00 0f 7d 00 d2 a2 00 0f7d 01 1e 4c 00 0f 7d 00 76 48 00 0f 7d 00 c3 bd 00 0f 7d 01 1c 85 Uptin 1 da 30 d 1da 1da 0 da To export deployed licenses first display the Array License Management window in your browser by selecting Tools gt Array License Management from the Menu Managing Your Wi Fi Arrays 191 e XIRRUS Management System Bar on top of
194. Tool see XSMT 38 Xirrus XP Power System 2 XM 3300 1 Xirrus Management Platform 1 shutting down 38 507 stopping the server 38 507 XMS managed network 71 port requirements 22 server license 35 XMS client connecting to XMS server 542 XMS server as Windows service 523 license 35 managing see XSMT 38 port usage 19 20 problems connecting client 542 shutting down 38 XMS server login 25 XMS user accounts 497 XP1 Power over Gigabit Ethernet PoE 2 XP 3100 2 X516 2 XS 3500 2 XS 3700 2 XS 3900 2 X542 564 Index Management System XS8 2 XSMT password 38 shutdown XMS server 38 Xirrus Server Management Tool 38 Index 565 e XIRRUS Management System 566 Index Xirrus Management System
195. Use the IAP Status buttons to filter the IAPs to display only those with a particular status To search for a particular IAP see Using the Search Feature in the Resource Windows on page 164 Information on this window is automatically refreshed every 20 seconds IAP Status Summary Select Refresh Array Group All Arrays IAP Status 2240 JI B Bs Bo IAP Throughput for Group All Arrays Graph Interval 1 Hour 15 15 15 20 15 25 15 30 15 35 15 40 15 45 15 50 15 55 16 00 Time 15 00 15 05 15 10 Tx Rx Total Zoom graph using mouse drag Restore by double clicking the graph Array Host Name TAP Name Active Stations Cell Size Channel Throughput Mbps TAP State al 4 Max 40 6 327500 Up a2 4 Max 56 6 316010 Up a3 Max 48 6 305980 Up Max 64 6 287930 Up Max 1 4 791070 Up Manual 157 6 039960 Up Max 1 6 300330 Up 4 778470 lal siete Icon L IAP List Throughput Chart Figure 141 IAPs Window 198 Managing Your Wi Fi Arrays e Management System XIRRUS The IAPs window is divided into three sections IAP Status The buttons show a count of IAPs by status All IAPs or Up Down or Disabled Hover the mouse over a button to display the status value represented by the button Click a button to show onl
196. VLAN if you will be managing the Array from a computer that is across a routed network That is if there is a router somewhere on the path between the management PC and the Array the default route setting is necessary Otherwise this setting is not needed When a default route is specified all management traffic i e Array generated traffic such as NTP syslogs or traps will go out tagged with the default route VLAN tag If no default route is defined then all management traffic will exit the Array untagged 9 VLAN ID Select a VLAN from the drop down list to be the default route VLAN The VLAN address must have been completely configured either use DHCP or set the IP address IP subnetwork mask and gateway Native VLAN Setting The native VLAN is required for proper interaction between the Array and a port operating in native mode For example the Array may be connected to a port ona Cisco switch that is configured for native mode When operating in native mode a switch port strips all VLAN tags and sends out untagged traffic The Array will assign all untagged incoming traffic to the designated native VLAN The native VLAN provides the Array with an internal mechanism that allows it to handle this untagged traffic In particular setting a native VLAN allows management of the Array across a path that includes a switch port operating in native mode e VLAN ID Select a VLAN from the drop down list to be the native VLAN The
197. Xirrus Management System May 4 2011 Release 5 1 Xirrus Management System XMS 5 1 All rights reserved This document may not be reproduced or disclosed in whole or in part by any means without the written consent of Xirrus Inc Part Number 800 0007 002 Revision B 8 XIRRUS Trademarks XIRRUS is a registered trademark of Xirrus Inc All other trademarks and brand names are marks of their respective holders Notices NOTE These notices apply to XM 3300 XM 3320 XM 3340 XM 3360 Management Appliances FCC Notice This device complies with Part 15 of the FCC Rules with operation subject to the following two conditions 1 This device may not cause harmful interference and 2 this device must accept any interference received including interference that may cause unwanted operation This equipment has been tested and found to comply with the limits for a Class A digital device pursuant to Part 15 of the FCC rules These limits are designed to provide reasonable protection against harmful interference in a residential installation This equipment generates uses and can radiate RF energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications However there is no guarantee that interference will not occur in a particular installation If this equipment does cause harmful interference to radio or television reception which can be determined by turn
198. _ V 01 62 7e 21 00 52 XN0824081A2E2 XMS 5 0 V2 1352 true D Eee 255 255 0 0 200 200 1 1 XMS_SQA_ 01 63 7e 21 00 52 XN0824081A2E2 XMS 5 0 V2 1353 true 200 200 50 104 255 255 0 0 200 200 1 1 XMS SQA Figure 289 Verify Imported Network Setting Values 3 Step 3 Apply Settings The web client will apply the changes you entered and display the success or failure of the configuration operation on the selected Arrays The XMS Web Client 465 e XIRRUS Management System Radio Settings The Radio Settings configuration page provides very convenient options for configuring settings on a per radio IAP basis Some of these functions are also available from the IAPs Window but bulk configuration and the ability to set different values on multiple radios easily at one time are available only from this web client window Bulk configuration is a particularly valuable feature allowing you to apply the same settings to multiple radios in one step Open this configuration page by clicking the Configure button near the top of the window then select Radio Settings on the left 1 2 3 Select Arrays Edit Radio Settings Apply Settings Home Previous Next gt Network Settings Select the arrays that you wish to configure radio settings for and click Next Radio Settings Export Settings Select Columns Import Settings Showing 1 to 25 of 816 Rows 25 z 1 2 3 Advanced Config m Hostname IP Address Locatio
199. a NetBIOS name The NetBIOS name is specified by the user when Windows networking is installed and configured In order to connect to a computer running TCP IP via its NetBIOS name the name must be resolved to an IP address A computer s NetBIOS name is often the same as the computer s host name because most users accept the default settings when installing their Windows operating system Node A defined element of the hierarchical Tree For example the configuration node is a parent node to all child nodes residing under it such as security policy and network policy etc NTP Network Time Protocol An Internet standard protocol built on top of TCP IP that ensures the accurate synchronization to the millisecond of computer clock times in a network of computers Running as a continuous background client program on a computer NTP sends periodic time requests to servers obtaining server time stamps and using them to adjust the client s clock packet Data sent over a network is broken down into many small pieces packets by the Transmission Control Protocol layer of TCP IP Each packet contains the address of its destination as well the data Packets may be sent on any number of routes to their destination where they are reassembled into the original data This system is optimal for connectionless networks such as the Internet where there are no fixed connections between two locations Policy A pre defined set of parameter
200. able to access the location and will inform you of its success or failure Once you have successfully specified the Backup Location you may proceed to use the other features of the Backup page If you have not set the Backup Location other operations on this page may fail 9 Schedule Backup Note The command buttons in the Schedule Backups section Schedule Backup Backup Now View Backups are disabled until you specify a Backup Location Enter a Backup Name for this entry Figure 327 If you select Backup Now a backup will be performed immediately and the backup file will be listed in the Restore Backup section below Schedule Backup Backup Name Sundays Schedule Backup Backup Now Schedule Type Daily Weekly Monthly Days of Week D Tuesday T Wednesday F Thursday C Friday T Saturday Time of Day 24 hh mm 02 00 z Schedule Backup Schedule Name Schedule Type Days Time Remove Schedule monthly backup Monthly 14 14 00 Remove schedule a back up Daily 11 00 Remove weekly backup Weekly sary eny oii Tn 12 00 Remove Figure 327 Scheduling Backups 512 XMS Administration e Management System XIRRUS To create a schedule for performing backups automatically select the Schedule Backup radio button after entering a Backup Name Fields will be displayed to allow you to specify a schedule Figure 327 Select the Schedule Type Daily Weekly or M
201. alue you enter here will define the RTS threshold for all 802 11a IAPs The default is 2347 9 802 11b Preamble The preamble contains information that the Array and client devices need when sending and receiving packets All compliant 802 11b systems have to support the long preamble A short preamble improves the efficiency of a network s throughput when transmitting special data such as voice VoIP Voice over IP and streaming video Managing Configuration with Policies 335 e XIRRUS Management System Select Auto to instruct the Array to manage the preamble long and short automatically or choose Long Only After completing all of the desired fields in the 802 11b g Settings window either click on the Apply button to save this policy or click on one of the following buttons to configure more RF policy options 9 802 11n Settings Configure settings for the 802 11n wireless technology 9 LED Settings Configure the activity parameters and behavior of Array LEDs 336 Managing Configuration with Policies e Management System XIRRUS 802 11n Settings This window establishes global 802 11n IAP settings These settings include enabling disabling 802 11n mode parameters that affect performance and defining the basic 802 11n data rates and which 802 11n data rates are supported Any configuration parameters you set here will affect all 802 11n IAPs on the Arrays to which this policy is assigned For a detailed discussio
202. an existing policy this field is grayed out not editable If you are using a standard naming convention for all of your policies the name you enter here should conform to that convention 9 Save Configuration Check this box to ensure that any time this policy is applied to an Array the Array will save the updated configuration information to its flash memory If this box is left unchecked then when this policy is applied to Arrays the configuration changes will need to be saved manually or else they will be lost when the Arrays are rebooted Note that this checkbox does not actually apply the policy to any Arrays To apply the policy see Using Policy Windows on page 218 VLAN Setting 9 VLAN List VLAN Name oe SS VLAN number h Management over this VLAN V o Enable DHCP r o m IP Address 40 40 40 124 EE VLAN IP Mask 255 255 i 255 0 IP Gateway 40 40 E i Tunnel Server 40 40 A 25 3 Tunnel Port 165 Tunnel Secret Apply Cancel Figure 179 VLAN List Settings A list of individual VLANs VLANs may be added to the list by pressing the gp button to the right of the list and filling in the fields shown below and described in VLAN List Details on page 263 existing entries may Managing Configuration with Policies 261 e XIRRUS Management System be edited by pressing the L3 button and deleted by pressing the 3 button Default Route Setting You should set a default route
203. anager 52 backup active Gigabit ports 245 balance load between Gigabit ports 245 balancing load 325 band association 291 bandwidth 30 bandwidth reports 388 basic table operations 57 navigating 59 page length 59 rearranging tables 62 refreshing tables 59 resizing tables 62 row details 62 sorting 60 specifying a range 60 basic window operations arranging windows 55 cascading 55 closing windows 56 detaching windows 53 maximizing 54 minimizing 54 navigating 53 re attaching 53 beacon interval 321 beacons 802 11h 326 benefits 9 blocked devices 124 blocking 327 blocking rogue APs 327 blocking rogue APs reports 422 bonding 313 bridge traffic between Gigabit ports 245 broadcast 324 broadcast message 500 554 Index Management System Broadcast Rates 322 Browser Client 29 30 browser login 29 buttons 42 C capacity 7 cascading windows 55 cautions 5 Cell sharp cells 326 cell size 314 centralized management 9 channel selections lock 313 channel usage report 416 channels 312 auto configuration 181 country of operation 496 CHAP Challenge Handshake Au thentication Protocol Admin RADIUS settings 286 web page redirect 293 294 classifying rogue devices by manufacturer 125 client connecting to XMS server 542 login password 32 34 Web Start Client 29 client interface 39 logging in 29 client login 29 client work space 40 closing windows 56 colors changing on contour map 156 community string name
204. anaging Your Wi Fi Arrays e Management System XIRRUS Arrays This section provides instructions for configuring your Arrays which includes assigning groups and policies performing configuration refreshing and rebooting an Array viewing Array status and viewing alarms and events One especially useful feature allows you to create policies based on the configuration read directly from an Array The following topics are discussed The Arrays Window on page 166 Connecting to an Array on page 172 Viewing Array Status on page 172 Configuring an Array on page 174 Create Policies from Array on page 178 Enabling or Disabling IAPs on page 180 Auto Configuring Channels on Multiple Arrays on page 181 Deleting an Array on page 182 Removing an Array from a Map on page 182 Assigning an Array to a Group on page 183 Applying Policies to an Array on page 185 Updating Array Software on page 185 Viewing Events and Alerts on page 186 Viewing Reports on page 186 Refreshing an Array on page 187 Rebooting an Array on page 187 Locating an Array on a Map on page 187 Managing a PoGE Injector on page 187 Bulk Configuration is a powerful tool available from the Tools option on the y menu bar This allows you to apply network or radio settings to a large number of Arrays at one time To use this feature please see Network Settings on page 458 and Radio Settings on pag
205. and Information Bars Map Toolbar This toolbar provides functions for managing and viewing maps Edit Contour Colors Edit Wall Settings Edit Map Settings Recalc Location Move Array Show Contour Rotate Array i Calibrate Distance Locations submap d HO SEX amp a fox ale lei n a g 4 Save Map Add Map Zoom Zoom Out Zoom In View Full size Zoom to Fit Figure 93 The Map Toolbar 138 Working with Maps e Management System XIRRUS The following buttons are available from left to right j E rz B i B Add Map Click to create a new map as described in Adding a New Map on page 144 Save Map Click to save changes to a map as described in Saving a Map Important on page 145 Move Array Allows you to move delete or manage Arrays on the map This tool is active by default See Map Modes of Operation on page 137 Rotate Array Click to set the orientation of Arrays See Orienting Arrays on page 150 Calibrate Distance Click to set the scale See Setting the Map s Scale on page 146 Zoom to Fit Click to zoom the view so that the entire map fits in the current window size Show Full Size Click this to zoom the view to 10096 i e zoom to the full size of the map background image file Zoom In Click to enlarge the map display size Zoom Out Click to reduce the map display size 50 0 Zoom Percentage Enter a desired map display size in the field
206. are no Arrays in the database a popup dialog will direct the user to use discovery to add networks The procedures for discovering adding modifying and deleting networks and Arrays are covered in Discovering the Network on page 67 Closing Down the Java Client Interface To close down the Java client interface click on the File button in the Menu Bar then choose Exit Alternatively you can simply click on the X button in the top right corner of the client interface In either case the system prompts you for a confirmation that you want to exit the client Figure 24 Closing Down the Java Client Interface To exit the client choose Yes when prompted Never turn off any Management Appliance at the power switch until you m have closed down all applications closed down the client interface and stopped the server Getting Started with XMS 37 e XIRRUS Management System Shutting Down the XMS Server There is a correct way and an incorrect way to shut down the XMS server Shutting down the server incorrectly can cause problems the next time you start XMS If you need to shut down the server you must use the following procedure 1 Terminate all applications see Closing Down the Java Client Interface 2 For Linux based servers in the Status page of the XMS web client click the Shutdown Appliance button at the bottom of the window For Windows based servers click the Stop button in the XMS Server Manager tab of
207. are using a standard naming convention for all of your policies the name you enter here should conform to that convention Managing Configuration with Policies 319 e XIRRUS Management System Save Configuration Check this box to ensure that any time this policy is applied to an Array the Array will save the updated configuration information to its flash memory If this box is left unchecked then when this policy is applied to Arrays the configuration changes will need to be saved manually or else they will be lost when the Arrays are rebooted Note that this checkbox does not actually apply the policy to any Arrays To apply the policy see Using Policy Windows on page 218 Global RF Setting Details Country You may choose an Array s country of operation from the pull down list Once a country has been set on an Array it may not be changed Please contact Xirrus Customer Support if you need to change the operating country after it has already been set The channels that are available for assignment to an IAP will differ depending on the country of operation If you set Country to United States then 24 channels are available to 802 11a n radios Until you have chosen a country the Array defaults to channels and power levels that are legal worldwide this set only includes the lower eight 5 GHz channels The country chosen here does not need to be the same as the country selected in Country of Operation on page 496 F
208. ars click the Add Network button on the upper left In the Add New Network dialog box enter the subnet s Network Address and Subnet Mask Select Start Discovery so that the discovery process will be initiated then click OK Note that the newly entered network is displayed in the list of networks for discovery Discovery begins soon after adding a network Be careful to specify the subnet accurately to avoid creating excess traffic by discovering a needlessly large network To add individual Arrays or power supplies use the Add Devices link on the left instead Add Network Discover Now On Off Select Columns Export Showing 1 to 7 of 7 Rows 25 z Home n Address Subnet Mask Status Array Count PoGE Count Network Settings m 10100540 255255255 128 Finished 13 2 Radio Settings e i r 172 16 49 0 2552552 pss sc Advanced Config l Q 10100460 255 2552 PoGE 2 Add Devices m 9 10100550 2552552 Network Address 200 200 45 0 SNMPv2 Settings m 17236500 2552552 Subnet Mask 255 255 255 0 SNMPv3 Users m Q6 17216510 25525524 Start Discovery yes No SSH Users m 17246520 255 255 24 OK Cancel Add Networks Figure 300 Managing Discovery of Devices The XMS Web Client 479 e XIRRUS Management System Add Devices This page is used to manually add one or more Arrays and or PoGE power supplies to XMS rather than specifying a network and having XMS discover th
209. ate from Array window 185 images 39 implementing Voice over Wi Fi 259 import Array licenses 192 injector PoGE management 187 injectors PoGE managing 211 installation 21 installation prerequisites 16 installing software updates XA 3300 CC 17 interface 39 internal login page web page redirect customize 299 internal RADIUS server 279 internal splash page web page redirect customize 299 interval keepalive trap 233 introduction 1 Intrusion Detection System IDS 38 IP address 26 32 34 503 IP range 268 J Java 29 30 Java applet loading 33 34 K keepalive traps 233 key features 9 keyboard shortcuts 46 65 L label Index 557 for an Array 170 lease 268 LED blink behavior 341 LED settings 318 340 license and features 189 and upgrades 189 Array deleting 197 Array exporting 191 Array importing 192 Array managing 189 Array pending 196 Array updating 194 Array window 190 XMS server 35 limits group 307 interactions 307 station 307 traffic 307 list of figures xiii load balance traffic between Gigabit ports 245 Load Balancing 325 locate Array on a map 187 location Wi Fi tags 257 lock channel selections 313 logging in 29 login 29 via Console port 285 windows for XMS 25 login page web page redirect customize 299 logins Array shell entering 80 long retry limit 321 loopback mode 323 Management System MAC list 271 281 main viewing area 46 managed network 71 management
210. ation list See Array Throughput on page 168 for details 9 Station List A list of stations which allows you to perform a number of operations on a selected station including finding its location Station List This list shows information about each station and the IAP to which it is associated Use the Station Status buttons to select which stations to display all stations or only those with the selected encryption or media type You may customize the columns shown in this list see Choosing the Columns for Display on page 163 For each station the following information is shown by default The host name of the Array to which the station is associated The station s MAC address The NetBIOS name of the station The IP address of the station The manufacturer of the station The encryption type Open WPA WPA2 WEP in use for the connection The media type of the station 802 11n 802 11a 802 11b or 802 11bg 204 Managing Your Wi Fi Arrays e Management System XIRRUS The channel being used for the connection The current RSSI signal strength as measured by the IAP The throughput of the station How long in days hours minutes the station has been associated to the Array You may right click on a station to display a menu that allows you to perform the following operations 9 Web Management Opens the Array s Web Management Interface See Connecting to an Associated Array on page 205 e Alarms and
211. ava Client Work Spate senesi ipen RE REI TS 40 Jaya Client Menu Bat 5 tore macer 41 Toolbar Default Map View etn 42 Tree Expanded seen detestatur intet esctios iie Mabaal tena 43 Status Message noie ie bito e ren RP ER Red 44 gol 44 Right Click Menus Arrays Window see 45 List of Figures xiii e XIRRUS Management System Fapume 52 Mam Vis wills ATO Secrets is feast aise eo RE 46 Figure 33 Monitoring Wind ow Events esiaren i incisive iieri outed RS 47 Figure 34 Location Map Window eee eerie en 48 Figure 35 Resources Window Arrays ioo pena ORE RP atna aeaea 49 Pigure30 Security Wind OW coe oenenamtemamdipenso p ERG HR E 50 Figure 37 Configuration Window Security Policy ssssssss 51 Ligure 95 DackupdManagetsasseieaaeisoniio aen Ime e en POUR 52 pieure39 Minimized Windows ionmiename dep Rp optet v 54 Figure40 Horizontal Tilting of WindOWS eei tet ettet ttn rtt rnnt ttti 55 Figure 41 Typical Table Events ettet tet 57 Figure 42 Show All Events After a Search ater rne 58 Figured Table Sorting ASCOWSud ciem e em n atte HR RO PEE REESE 60 Pigure44 Searching for an EMEY iessenimmion nmm mometeneii mente 61 Figure 45 Row Details Expanded from a Row sess 63 Pigure46 Using the Search Engine ucaenssesemeren imei ie e ose i been 64 Figure47 Managing Discovery of Devices nett tene ternos tenta thes 69 Figure48 Disco
212. ave three modes of operation depending on the mouse tool that you select o l Move Array Normal Mode This is the default mode and is the one that you will use almost all of the time This mode is used for placing Arrays on maps moving them and using the right click Array menu Enter this mode by clicking the button for the Move Object tool in the map toolbar Only administrators with read write privileges may use this mode e Rotate Array Mode Use this mode to set the orientation of an Arra y y on the map See Orienting Arrays on page 150 e Calibrate Distance Mode Use this mode to set the scale of the map See Setting the Map s Scale on page 146 After using the Rotate Array tool or the Calibrate Distance tool you will typically want to click the Move Array button again to resume normal use of the map Working with Maps 137 e XIRRUS Management System The appearance of the map may be customized in the following ways Set the map s scale see Setting the Map s Scale on page 146 Specify RF signal attenuation for your type of construction see Entering Environment Settings on page 151 9 Set the level of opacity of the heat contours that are superimposed on the map see Map Settings Window on page 160 9 Change the colors used in the contour map to represent levels of signal strength see Changing Contour Map Colors on page 156 The following sections discuss the Map Toolbar
213. aving Your AMS User ACCOUDE nicehiadmens hio serere niet 498 Backup Manager acoenemn miror nit ee HP OH E NUSE aaea 499 Broadcast Message saca bone rm ino acid na e erede 500 About Managing the XMS Servet iiec eere aree eben 501 About the XMS Database iiie el itosceetrl tere tette attri C KAR RRAS a Ee Tira ie ESPOR 501 Managing XMS on Linux based Management Appliances 502 Accessing the Web Chent scidit p RE RA E t e 503 Initial Servet Setup armatae tidie em bon ueste FO di 504 Web Client Viewing XMS Server Status siistisi 506 Web Client Network SettinEs es dai tee rette eet esee t e se 508 Web Client Date and Time Set ngs arisen rtt 509 Web Client Database Backup Stings vore ertet 511 Web Client Email SettineS assoi oe RE R iE E omni 515 Web Chent Polling Settibgs inner PR DRE GUERRA 516 Web Client Changing the SSH Server Address sisisi 517 Web Client Viewing Server Log Files acne 518 Web Client Managing the XMS Server License 1 520 Web Client Pertormung Upgrades iei aree irre i 521 xi e XIRRUS Management System Web Client Resetting the XMS Server iunii es e Pe tdt 522 Managing XMS on Windows based Systems 7 7 4 523 Starting the XMS Server on Windows based Systems 524 Xirrus Server Management Tool for Windows based Servers 526 XSMT XMS Server Manager lool srren berrie
214. ay it is recognized and passed through without application of all defined filtering rules Stateful inspection runs automatically on the Array Policies may be configured to manage filters From the Configuration Policies node in the tree click on Filters to display the Filters window This window contains the a list of all the filter policies currently available with tools to manage these policies O raters igi xd E Columns Refresh Total 1 Policy Name Save Configuration Filter Lists Filters Modify Execute Delete filter Lab XS8 1 2 Z gt x an Done Figure 219 List of Filter Policies The columns in this window show selected settings for the listed policies For information about changing the columns displayed see Selecting the Columns Shown in a Policy Window on page 220 Creating a New Filter Policy A filter policy allows you to configure all of the desired filters on an Array at the same time allowing or denying protocols source addresses and VLANs You must first create one or more filter lists in a filter policy Then select a filter list and create and manage all the filters that are members of that filter list 348 Managing Configuration with Policies e Management System XIRRUS To create a new filter policy click on the Add Policy button in the Filter Policy window When the Add Policy window appears select Copy from a chosen Array recommended and choose a model Array or select Star
215. ay then save the report setup and run it now or schedule it for later Managing Reports 371 e XIRRUS Management System 9 Customize Click this link to customize the appearance of reports by changing the logo at the top of the report Selection Criteria differ according to the type of report but most reports use similar criteria such as defining the group of Arrays and time period to consider for the report Reports are not to be confused with events and alarms which provide alerts when the system encounters problems For information about events and alarms go to Monitoring Your Network on page 105 Sample reports shown in this chapter may show multiple Arrays managed by XMS In some cases you may see examples where only one Array is under management The results are the same regardless of how many Arrays are being addressed Topics for this section include My Reports on page 373 Viewing a Report on page 375 e e 9 New Report on page 378 9 Selection Criteria on page 384 e Customize on page 387 372 Managing Reports e Management System XIRRUS My Reports To access reports click the Reports button at the top of the web client window The initial window always defaults to the My Reports page If you are on one of the other Reports pages click the My Reports link on the left to return to this page This page lists all of the reports that you have already created using the New Report li
216. bonded 2 4 GHz channels be automatically updated as conditions change Select Static to have the bonded channels remain the same once they are selected The default is Dynamic 338 Managing Configuration with Policies e Management System XIRRUS 802 11n Data Rates 9 Supported Data Rates The data rates that are enabled here are the 802 11n data rates that your Arrays will use for transmissions to clients on the network Check or uncheck the boxes to define which data rates are supported The default is for all of the listed 802 11n data rates to be supported 9 Basic Data Rates The data rates that are enabled here define the minimum set of 802 11n data rates that a wireless station must support if it wants to associate with the Arrays Check or uncheck the boxes to define the basic data rates required by an 802 11n client After completing all of the desired fields in the 802 11n Settings window either click on the Apply button to save this policy or click on the LED Settings button to configure more RF policy options Managing Configuration with Policies 339 e XIRRUS Management System LED Settings This window allows you to disable LED activity define which event triggers the LEDs either when an IAP is enabled or when a station first associates with the network and set up the behavior pattern of the LEDs on your Arrays Any configuration parameters you establish here will affect the LED behavior on all Arrays when
217. bootzaoose arrus s103 sc81 12 05 89 3 39 10 100 40 37 00 074 00 42 9b empty Figure 253 Station Association Stations By Array This report displays a bar chart showing the number of stations associated to those Arrays that have the highest station count Figure 254 The information displayed in this window is based on your Selection Criteria Selection Description Criterion for details Group Include only Arrays that are members of the selected Array group Map Include only Arrays that are members of the selected map Radio Include only errors for the selected radio IAP 406 Managing Reports e Management System XIRRUS Selection Description Criterion for details Date Time Include only this time range Schedule Run the report at this time See Schedule on page 382 Email Report To After running email the report See Email Report To on page 382 Total Array to Station Associations This table shows the minimum and maximum number of stations that have been associated to each Array with the following information Array Name The host name assigned to the Array Array MAC Address This is the Array s MAC address Array IP Address The IP address assigned to the Array Minimum Simultaneous Shows the lowest number of stations concurrently associated to each Array during the time period Maximum Simultaneous Stations Shows the numbe
218. ced Config P oGE PoGE n Location XN8 IT 10 100 46 238 Add Devices Add Devices Trap Receivers Trap Receivers Array Licenses Licenses Custom Fields Custom Fields Figure 263 XMS Web Client Configure Functions Select Co Location test test test 426 The XMS Web Client e Management System XIRRUS About Reports Pages These pages are used to generate reports on the operation of your Wi Fi network XMS offers an extensive suite of reports on performance and status including such aspects as throughput error rates station information availability RF usage and security All of these reports are discussed in detail in Managing Reports on page 371 Reports Mode y e Monitor B configure y Help Logout Reports x Settings Select a report type below to create a new report Traffic Reports Wireless Traffic Displays Tx and Rx average or peak wireless megabits per second filterable by Array Group Map and Array My Reports New Report Customize Wireless Errors Displays total wireless drops and errors filterable by Array Group Map Array and IAP Station Traffic Displays Tx and Rx average or peak station megabits per second filterable by Array Group Map and Array Station Errors Displays total station error and retry rates filterable by Array Group Map Array and SSID Figure 264 XMS Web Client Reports Functions Click the Reports button at the top of the windo
219. cense Sender Email smith xyzcorp com About XMS Test Email Figure 265 XMS Web Client Settings Functions Click the Settings button at the top of the window to see the list of settings pages on the left Settings pages always include the following functions Email specifies the SMTP server that XMS uses for sending emails For details see Web Client Email Settings on page 515 9 Polling changes the frequency of polling Arrays For details see Web Client Polling Settings on page 516 9 SSH Server changes the server address provided to Arrays For details see Web Client Changing the SSH Server Address on page 517 9 Backup sets up XMS database backups For details see Web Client Database Backup Settings on page 511 428 The XMS Web Client e Management System XIRRUS Server Logs shows XMS server s operational logs For details see Web Client Viewing Server Log Files on page 518 XMS License manages the license for the XMS software For details see Web Client Managing the XMS Server License on page 520 About XMS Click this to display the current running XMS version as well as contact information o Polling SSH Server Backup Server Logs XMS License About XMS For XMS Appliance p Network Date amp Time Email For Windows based Polling XMS Server SSH Server Backup Server Logs Upgrade Reset XMS License About XMS Fig
220. ceuhiaui rei imi emer e Ft heit 423 Figure 261 Mode Selection in XMS Web Client eterne 424 Figure 262 XMS Web Client Monitor Functions ss iint ett pene orn 425 Figure 263 XMS Web Client Configure Punctions ect race een 426 Figure 264 XMS Web Chient Reports Functions inset ntt tete entente tta 427 Figure 265 XMS Web Client Settings Functions nne iai 428 Figure 266 Settings Menus for Windows and Linux Servers 429 PIS TIME 267 DashbO89gd iuniceneidire tuit tr tbe Eit losen ent et Rr pere ShA 431 Figure 268 Dashboard Array and Radio Status sss 433 Figure 269 Dashboard Recent Alatms ir t ER HEURE IRR at 435 Ligure 270 Dashboard Station COUDE aoi bitbecep ote inner ate siet 436 Figure 271 Dashboard Top Station Manufacturers eene 437 Figure 272 Dashboard Station Connection Metrics esses 438 Figure 273 Dashboard Rogue Overview ecce e eei ient 439 Figure 274 Arrays Page isieciiniereiesee heiss re pea ERE Fe ha dents t bee e HER mist 441 Figure 275 Table Column Chosen eerie mener ena 442 Figure 276 The Array l age Toolbar i ge ero Re PEERS 445 Xx List of Figures e Management System XIRRUS Figure 277 Figure 278 Figure 279 Figure 280 Figure 281 Figure 282 Figure 283 Figure 284 Figure 285 Figure 286 Figure 287 Figure 288 Figure 289 Figure 290 Figure 291 Figure 292 Figure 293 Figure 294 Figure 295
221. cified If you set Display Traffic by to Total these columns are shown Average Tx Rx Mbps Shows the average total throughput in megabits per second achieved by the IAP for the time period you specified Peak Tx Rx Mbps Shows the maximum total throughput in megabits per second achieved by the IAP for the time period you specified Managing Reports 391 e XIRRUS Management System Wireless Errors This report shows wireless communication error statistics for Array IAPs in the XMS managed network based on your Selection Criteria Selection Description Criterion for details Group Include only Arrays that are members of the selected Array group Map Include only Arrays that are members of the selected map Array Include only the selected Array Radio Include only errors for the selected radio IAP Date Time Include only this time range Schedule Run the report at this time See Schedule on page 382 Email Report To After running email the report See Email Report To on page 382 Array errors reported are packet error rate packet retry rate and encryption retry rate shown as a percentage of the total number of packets Figure 248 The graph shows the overall error percentages for all Arrays Table Details for the Wireless Errors Report The results shown in this report are organized by the following column headers which can be sorted to best suit your viewing needs
222. cify the transmit power and receive power in the Tx Power dB transmit and Rx dB receive fields e Antenna Select an antenna type from the pull down list either Internal External or Omni The antenna type for the monitoring IAP abg2 abgn2 must be set to Omni The default for all other IAPs is Internal Only select the External option if an external antenna is available 9 Tx Power dB The cell size of an IAP is a function of its transmit power and determines the IAP s overall coverage Adjusting the transmit power allows you to fine tune cell sizes If many Arrays are in close proximity to each other reduce the transmit power to avoid excessive interference Enter a value in this field to define the transmit power in dB or increment decrement the value using the UP and DOWN arrows The default transmit power is 20 dB 314 Managing Configuration with Policies e Management System XIRRUS 9 RxdB Enter a value in this field to define the receive power in dB or increment decrement the value using the UP and DOWN arrows The default receive power is 90 dB 9 Description optional If desired enter a description for this IAP The IAP assignment for example an1 a2 etc is not affected by any optional description you enter in this field Saving Your IAP Policy When you have configured all of your IAP policy settings click on the Apply button in the IAP policy details window to save the new policy Managing
223. ck Open The new release will be installed The Logs section of the Software Manager window shows output from the installation process When the process is complete a pop up message will be displayed Click the OK button to close it The new release becomes the current version of the XMS server The file appears at the bottom of the Installed Patch List Close XSMT if it doesn t close automatically after installing a patch and relaunch it since the patch may have affected XSMT You may then start the XMS server see XSMT Starting the XMS Server on page 529 To Remove a Patch The Remove Patch button may be used to remove the most recently installed release or the last few releases installed The release remaining at the bottom of the Installed Patch List will be used as the running version when the XMS server is restarted See About the Installed Patch List on page 535 You cannot remove the first top entry in the list To remove one or more releases shut down the XMS server and go to the Software Manager tab in XSMT Decide which of the installed releases you would like to have as the running version and click the entry beneath that in the Installed Patch List Then click the Remove Patch button You will be asked to verify the removal The selected file and all of the files underneath it will be removed from the Installed Patch List A pop up message will inform you when the removal is complete Click OK to close it When the re
224. ck on the Apply button in the RF Settings window to save the new policy Managing Configuration with Policies 341 e XIRRUS Management System WDS Open the Configuration Policies node in the Tree and select WDS to display the WDS policy window The WDS Wireless Distributed System enables the interconnection of access points wirelessly allowing your wireless network to be expanded using multiple Arrays without the need for a wired backbone to link them e Client HOBET Wired LAN vid Link i QA em al0 52 mja a3 149 a9 149 Pie PT TIEN ea Y um Gee Pos a4 40 mese aa e e B ai CLIENT HOST Figure 213 Configuring a WDS Link The WDS policies allow you to set up configuration for WDS networks Note that when you apply a WDS policy to an Array the policy replaces any prior WDS configuration Any pre existing WDS setup on the Array will be lost Add Policy Columns Refresh Save Configuration Modify Exec Delete Est gt x Java Applet Window Figure 214 WDS Policy Window The columns in the WDS policy window show selected settings for the listed policies For information about changing the columns displayed see Selecting the Columns Shown in a Policy Window on page 220 342 Managing Configuration with Policies e Management System XIRRUS About Configuring WDS Links A WDS link connects a client Array and a host Array see Figure 213 The host
225. condition e RED Critical A critical failure has occurred within the network and the problem must be resolved immediately Taking Action on an Alarm There are two ways to act on an alarm 9 Clearing an Alarm 9 Deleting an Alarm Clearing an Alarm To set the severity of alarms to clear select the desired entries in the Alarm list and click the Clear button 4 Clear Once an alarm is cleared it will display as a cleared alarm and will no longer show its original severity Deleting an Alarm To delete alarms from the Alarm list select the desired entries in the Alarm list and click the Delete button Delete 110 Monitoring Your Network e Management System XIRRUS Events This window displays network events detected by XMS Figure 78 shows an example of the Events window after selecting an event in the list to generate the Event details window Double click any event in the list to generate the Event Details window Events Edt View amp g Eve Total 2090 Displaying 1967 to 2016 PageLength so 4 4 gt bi Status Poll Object il Date Y jt Info 00 13 ce 3f bf ed__ __O0 0f 7k Aug 17 2007 04 31 59 PM Mobile Unit 00 Message Xirrus Events Bier 000t7400 41 95 Aug 17 2007 04 17 38 PM Node clear N Clear ESE E Aug 17 2007 04 17 38 PM Array is Up arg Event Details Critical DO Ot 7d00 41 83 Aug 17 2007 04 12 38 PM Node failure
226. configured cell sizing on that IAP since the cell must extend all the way to the other Array Double click on an IAP that you wish to assign to a WDS link The WDS Client IAP Settings dialog box appears Figure 218 WDS Client IAP Settings e IAP This is the radio that was selected for the WDS Link It cannot be modified 346 Managing Configuration with Policies e Management System XIRRUS WDS Link Choose one of the four WDS Link numbers from the drop down box The IAP will be assigned to this WDS link WDS Client IAPs Settings IAP amp g WDS Client C MP WDSLink 2 Cancel Figure 218 WDS Assign IAP to Client Saving Your WDS Policy When you have configured all of your WDS policy settings click on the Apply button in the WDS window to save the new policy Managing Configuration with Policies 347 e XIRRUS Management System Filters The Wi Fi Array s integrated firewall uses stateful inspection to speed the decision of whether to allow or deny traffic Filters are used to define the rules used for blocking or passing traffic on the Array Filters can also set the VLAN and QoS level for selected traffic Filters are organized on the Array in groups called Filter Lists A filter list allows you to easily apply a uniform set of filters to SSIDs or User Groups User connections managed by the Array s firewall are maintained statefully once a user flow is established through the Arr
227. cp SMTP Mail Server No 69 tcp TFTP TFTP Server No 161 tcp udp SNMP XMS Server No SNMP Traphost Note Yes but 162 tcp udp Up to four Traphosts XMS Server required by may be configured XMS 443 tcp HTTPS WMI WPR Client Yes 514 udp Syslog Syslog Server No 1812 1645 RADIUS some RADIUS Server Yes udp servers use 1645 1813 1646 RADIUS Accounting RADIUS Accounting d some servers still use Server Yes P 1646 2055 udp Netflow Client Yes 5000 tcp Virtual Tunnel VTUN Server Yes 24 Getting Started with XMS e Management System XIRRUS Starting and Managing the XMS Server You may manage the XMS server using its management tools 9 Managing XMS on Linux based Management Appliances on page 25 e Managing XMS on Windows based Servers on page 27 NOTE For full operation the XMS server must have a license installed See Licensing the XMS Server on page 35 Managing XMS on Linux based Management Appliances On the XM 3320 3340 3360 the XMS server is started automatically when your computer is restarted Use the browser based XMS web client Figure 14 to perform mandatory initial configuration to restart or reboot the server and for server maintenance 7 XIRRUS TED PEPE GN reports Email Settings These settings are used by XMS when emailing tems such as reports SMTP Server Address mail xirrus com SMTP Server Port s Management bu E HMM h Password Jj links Encryption None S
228. cted Arrays The XMS Web Client 467 To Modify Multiple Rows Use this procedure to quickly configure multiple radios to have the same settings Management System 1 Step 1 Select Arrays For each Array whose radios you wish to modify select the checkbox at the beginning of the row To select all rows click the checkbox in the header row Click again to deselect all rows Click Next when the desired rows are selected 2 Step 2 Edit Radio Settings Select the radios to be edited by clicking their check boxes Then click Bulk Edit This displays blank fields for all of the settings that are modifiable in bulk Enabled Band Bond Mode TxdBm Antenna Channel Cell Size Rx dBm and Locked Figure 292 Xirrus Management System Select the changes you would like to make to all selected radios and click OK Enabled Unchanged C ves C No Antenna 5 GHz Channel s Cell Size go Tx dBm Lo Rxdm S Locked Unchanged C Yes C No OK Cancel Figure 292 Bulk Configuration Radio Settings Click OK when done The Bulk Edit dialog closes and your desired changes will be displayed in the radio settings table Note that the new 468 The XMS Web Client e Management System XIRRUS values have not yet been sent to the Arrays Take a moment to review your changes You may individually edit any incorrect settings Click Finish when satisfied with the changes 3 Step 3
229. ction of the Tree under the same names that they previously had Note that the old pre 5 0 release map information is kept in the XMS database If you should wish to revert to an older release of the server the old style maps will still be available Before you begin using a migrated map be sure to perform these steps so that the map will accurately represent your environment 9 Setting the Map s Scale on page 146 9 Entering Environment Settings on page 151 Preparing Background Images for New Maps You will typically want to present maps with a background image such as a floor plan or a site layout of buildings a geographic area a functional domain within your corporation or any combination of map designs whichever suits your needs XMS will accept most graphic file formats for your background images though we recommend using either GIF PNG JPG or JPEG these formats are the most suitable for online use In particular whenever possible optimize your image 142 Working with Maps e Management System XIRRUS files and try to keep the file size between 50KB and 100KB Files in this size range will load into the client quickly give reasonable image resolution and will perform well when zooming in Preferred Image Formats 9 GIF Graphics Interchange Format This is the file format most commonly used to display indexed color graphics and images in HTML documents over the Web and other online services Simple
230. ction provides a quick summary of the steps required to start adding devices to XMS For complete details on this process please see the discussions in Discovering the Network Once started this process uses SNMP to automatically find Xirrus Arrays and PoGE injectors in the subnets that you specify Figure 300 No networks are discovered by default so you must add the subnets containing your Arrays d In the web client click Configure on the top and then click Add Devices on the left To add SNMPv2 Community Names or SNMPv3 Users to match the strings being used by your Arrays click SNMPv2 Settings or SNMPv3 Users For XMS to discover and manage a device the device must have SNMP v2 and or v3 enabled The device s SNMPv2 community string or SNMPv3 read write authentication settings must match one of those defined here for discovery The default SNMPv2 community name xirrus allows XMS to discover new Arrays that still have default SNMP settings SNMPv2 is enabled with its Read Write Community String set to xirrus Also each Array s Trap Host 1 IP Address is set to the hostname Xirrus XMS by default for the Phone Home feature Enter the appropriate SNMP settings For more details see SNMPv2 And SNMPv3 Settings on page 482 478 The XMS Web Client e Management System XIRRUS 3 To add networks where XMS should search for devices click the Add Networks link on the left Figure 300 When the page appe
231. curity key If you wish to prevent rekeying check the Never checkbox PSK Authentication Check this box to enable PSK Pre Shared Key authentication With PSK enabled users must manually enter a key passphrase on the client side Managing Configuration with Policies 279 e XIRRUS Management System of the wireless network that matches the key stored on XMS and assigned to an Array or group of Arrays Only enable PSK for smaller networks when a RADIUS server is unavailable Uncheck this box if you want to disable PSK authentication 9 WPA Preshared Key If you enabled PSK enter a passphrase here Choose a strong passphrase containing between 8 and 63 characters 20 is preferred Always use a combination of letters numbers and special characters Never use English words separated by spaces WPA Verify Key Retype your WPA Preshared Key in this field to verify that you typed it correctly 9 EAP Authentication Check this box to enable EAP Extensible Authentication Protocol An external RADIUS server must be defined if you want to make use of EAP authentication An external RADIUS server offers more functionality and security and is recommended for large deployments When using this method user names and passwords must be entered into an LDAP server for user authentication Uncheck this box if you want to disable EAP authentication You must enable either WPA or WEP encryption next section for an SSID to ensure t
232. d The file is uploaded to the proper folder on the server It may be used as a background for any map Click the button to the right of the Background Image field to select the uploaded image file Select the desired Display Units feet or meters and click OK to create the new map Click the Save Map button H You may modify a map Click the Edit Map Settings button on the map toolbar or right click the map in the Maps list and select Properties from the drop down menu You may change the Background Image Display Units or even the Map Name You can now start to build your map by performing these steps Setting the Map s Scale on page 146 Adding Arrays to Maps on page 147 Orienting Arrays on page 150 Entering Environment Settings on page 151 To work with the Arrays that you have placed on the map see Managing Arrays Within Maps on page 158 Saving a Map Important Always remember to save your map after making changes since many map features will not be up to date until you save the map For example you cannot access the right click menu for a recently added Array on the map until it has been saved The map Arrays list will not show a map icon for the Array nor will the right click Locate feature work until you have saved Working with Maps 145 e XIRRUS Management System To save a map after making changes click the Save Map button LI Saving your map makes it available
233. d 50 C Explosive Device Proximity Warning Do not operate the XM 3300 XM 3320 XM 3340 XM 3360 unit near unshielded blasting caps or in an explosive environment unless the device has been modified to be especially qualified for such use Lightning Activity Warning Do not work on the XM 3300 XM 3320 XM 3340 XM 3360 or connect or disconnect cables during periods of lightning activity Circuit Breaker Warning The XM 3300 XM 3320 XM 3340 XM 3360 relies on the building s installation for over current protection Ensure that a fuse or circuit breaker no larger than 120 VAC 15A U S or 240 VAC 10A International is used on all current carrying conductors Translated Safety Warnings NOTE These warnings apply to the XM 3300 XM 3320 XM 3340 XM 3360 Avertissements de S curit S curit Lisez l ensemble de la documentation utilisateur avant de mettre cet appareil sous tension Tous les quipements Xirrus interconnect s doivent tre install s en int rieur Ce produit n est pas conqu pour tre utilis en ext rieur Veuillez v rifier l int grit de la terre du syst me avant d installer des quipements Xirrus V rifiez galement que la temp rature de fonctionnement ambiante n exc de pas 50 C Proximit d appareils explosifs N utilisez pas l unit XM 3300 XM 3320 XM 3340 XM 3360 proximit d amorces non blind es ou dans un environnement explosif moins que l appareil n ait t sp cifiquement modif
234. d 802 11b stations For each type of connection it lists 9 The number of stations 9 Theaverage signal strength of the connections 9 The average actual connection rate 438 The XMS Web Client e Management System XIRRUS Rogue Overview This section provides a quick snapshot of the security status of the Wi Fi network including counts of rogue APs Each entry is a link click it to display on the selected items on the Rogues page Rogue Overview Unclassified 0 ES Ad AEN E rn iperoicss 0 O On my channels 1050 Spoofing my SSIDs 0 Figure 273 Dashboard Rogue Overview For more information about security and intrusion detection please see Security Managing Intrusions on page 119 This is a summary of the more dangerous APs that have been detected by Arrays Categories that have a zero count are shown with a green check mark categories that have a non zero count are flagged in red Rogues that you have already classified are not shown The categories shown are 9 Unclassified When a device is initially detected it is unclassified which simply means that no one has classified it yet Use the Java client to classify a device See About Classifying Detected Devices on page 120 9 Ad hoc An ad hoc wireless network is typically a network formed between two or more stations that are communicating with each other directly without going through a normal AP This line s
235. d Report pdf xls csv Email Report e XIRRUS XMS Reports Ethernet Traffic Total Time Span Hour Monday 04 11 2011 08 21 PDT to Monday 04 11 2011 09 21 PDT Ethernet Traffic Total 08 25 08 30 08 35 08 40 08 45 08 50 08 55 09 00 09 05 09 10 09 15 09 20 Time Average Tx Rx Peak Tx Rx Ethernet Traffic Total TxfFix Mbps 508010800E36 0 0f 7d 00 5e f2 10 0 11 1 0 237 18520901140 0 0t7d 00 91 7a 10 100 54 26 Figure 251 Ethernet Traffic Report Table Details for the Ethernet Traffic Report The table portion of the report shows traffic statistics for the Gigabit port on selected Arrays organized by the following column headers 9 Array Hostname The host name assigned to the Array Only Arrays that meet your selection criteria are included 9 Array MAC Address This is the Array s MAC address 9 Array IP Address This is the Array s IP address 400 Managing Reports e Management System XIRRUS Throughput data shown in the table depends on your Selection Criteria If you set Display Traffic by to Tx Rx these columns are shown Average Tx Mbps Shows the average transmit throughput in megabits per second achieved by the Array for the time period you specified Average Rx Mbps Shows the average receive throughput in megabits per second achieved by the Array for the time period you specified Average Tx Rx Mbps Shows the average total throughput in m
236. d as the Policy Name by default this name may be edited if you wish Otherwise enter a meaningful name for this policy If you are modifying an existing policy this field is grayed out not editable If you Managing Configuration with Policies 363 e XIRRUS Management System are using a standard naming convention for all of your policies the name you enter here should conform to that convention Config File This section allows you to edit the configuration file that will be uploaded to Arrays when this policy is executed Figure 232 If you used Copy from a chosen Array the configuration file that was fetched from the selected Array is displayed If you selected Start from scratch then the text area will be empty and you can enter the CLI commands that you wish to apply to Arrays Policy Name West ODE configure description hostname West ODE location Square exit 1 lcontact info name Config wn File phone email exit array info hardware configuration component part number serial number date array 180 0045 001 XN1221091C996 2009 May 29 11 05 controller 100 0030 013 B1 0000032681 2009 May 29 10 51 zl Apply Cancel Figure 232 Configuration File Edit and View Window About a Config File Copied from an Array When you fetch a config file from an Array the file represents the entire configuration of the Array except that XMS makes certain modifications to the file for your co
237. d errors filterabie by Array Group 1315 1434 PU View faiso Runnow Egt Archive T Mixes Wireless Trafic Displays Tx and Rx average or peak wireless megabits per second filler 2 15 11 4 28 PM Vi tajse Runnow Egs Arnie Left Pane menu View Existing Report Scheduled to Run Figure 237 My Reports Window The following information is displayed for each report 9 Report this is the Name that you assigned when you created the report To delete a report select the checkbox to the left of it then click the Delete button at the top left Select as many reports as you wish for deletion You may click the checkbox in the header row to select or deselect all reports Managing Reports 373 e XIRRUS Management System Description this is a general description of this type of report Last Run this column lists the time that the report was most recently run if any Click the View link to see that report For a description of the options available see Viewing a Report on page 375 Scheduled true indicates that the report has been scheduled to run at some time in the future Rows 25 1 Scheduled Actions D m false Run now dit Archive m false Run now dit Archive Figure 238 Actions for Reports Actions Figure 238 this column allows you run or edit this report or see all of its saved runs Click Run Now to start a report immediately The Report Queue page will be displayed showing the status
238. d injector The row shows the number of ports on the injector Note that the icons Mil indicate ports that are available for connection injector ports that are not yet 212 Managing Your Wi Fi Arrays e Management System XIRRUS associated with an Array port If a port already has an association then the connected Array port is displayed You may hover the mouse over the port to display the IP and MAC address of the Array being powered by the injector Click the icon Mi for the port that you wish to associate with an Array The mapping dialog appears Injector Xirrus E00007 Port 2 Step 2 Click on an Array Data and Power port below to complete mapping Array Host Name IP Address MAC Address Port 1 Port 2 AP050 01 10 100 40 22 00 0f 7d 00 26 35 Butler1 10 100 40 36 00 0f 7d 00 48 db East ODE 10 100 40 132 00 0f 7d 00 9c ce Click to map Figure 150 Associating Injector and Array Ports The mapping dialog lists Arrays and shows an icon Wifi for ports that have not yet been associated with an injector port Some older Array models are not directly compatible with Xirrus managed PoGE injector models Since power for these Arrays cannot be managed with XMS no port icons are shown for them 3 Find the row for the desired Array Click the unused port icon Mii for the Array port that is connected to the selected injector port The PoGE Injector and Array Port Mapping wi
239. d the settings for this VLAN click the Apply button to save the VLAN Saving Your VLAN Policy When you have configured all of your VLAN policy settings click on the Apply button in the VLAN window to save the new policy 264 Managing Configuration with Policies e Management System XIRRUS DHCP Server From the Configuration gt Policies node in the tree click on DHCP Server to display the DHCP Server window This window contains a list of all DHCP Server policies currently available with tools to manage these policies Total 2 AddPoiy Columns Refresh Policy Name DHCP Server List Modify Execute Delete Standard DHCP bill test 0 Es b x Figure 180 List of DHCP Server Policies The columns in this window show selected settings for the listed policies For information about changing the columns displayed see Selecting the Columns Shown in a Policy Window on page 220 A DHCP policy is created so that you can configure DHCP servers The DHCP Dynamic Host Configuration Protocol server allows the Arrays to provide wireless clients with IP addresses and other networking information The DHCP server will not provide DHCP services to the wired side of the network To create a new server policy click on the Add Policy button in the DHCP Server policy window When the Add Policy window appears select Copy from a chosen Array recommended and choose a model Array or select Start from scratch as described
240. ddress Gigi MAC Address Model Softw Configuration adrians 3900 First Floor 10 100 47 11 00 0f 7d 00 40 46 XS 3900 4 0 8 May 06 amp Policies Bruces XS3900 Array Office 10 100 47 13 00 0 74 00 43 0a XS 3900 3 5 1 May 06 8 Groups adrians xn8 10 100 47 12 00 0f7d 00 62 86 XNE 4 0 8 May 05 9 aust SS XN4 maps 10 100 47 16 00 0f7d 00 b amp 0d XN4 5 0 0 May 13 4 LA Find Find Next Find Previous jox EX eof x Dashboard QE s o Minimized Windows Figure 39 Minimized Windows a Click on this button to minimize windows 2 Click on this button to maximize windows 54 The XMS Java Client Interface e Management System XIRRUS Arranging Windows When multiple windows are open you can arrange for the windows to tile horizontally or vertically next to each other when displayed or arrange for the windows to be displayed as cascading windows overlapping Figure 40 shows an example of three open windows arranged with the horizontal tiling option XE ms EE Device m Alarm mem Creal m Anay Grop AB Arrays a OEE E 0 Jv vow Array airant xe P 10 10047 143335 POT Gj27 Node clear No falures on Pa node havay eransxed P 10 16047 1145335 POT osar asray w up and active Array Bruces XS38OO Array P 1010 2205 0 POT O 28 Array 8 up and active 122 08 01 POT SQW Node clear No fatures on Pa nose j00 0t 7d 00 80 13 1230128 POT GS
241. ded click on Install to install the Xirrus Management System on your server A progress window will be displayed while the installation process completes it will take a few minutes After a successful installation click on the Done button Cengratutaticns Onus M iter het been Vuccesafuly istiedt CUA TIOO CC that been configured Y itat Pama a WD ainoan pence To INED ft Xm Management Seiten iesse ute Me Orus Management System niue Start mens a Monti primer Figure 12 Installation Completes Proceed to the next chapter Getting Started with XMS to start using XMS Licensing The XMS server requires a license for full operation The license is Twy entered via the client and will automatically be requested the first time you start the client Please see Licensing the XMS Server on page 35 for details 20 Xirrus Management System Products Management System XIRRUS Getting Started with XMS This chapter describes how to get started using the XMS server and the XMS clients regardless of whether you are running the XMS server on your own computer or on a Xirrus Management Appliance Section headings for this chapter include XMS Port Requirements on page 22 Starting and Managing the XMS Server on page 25 Initial Server Setup for Linux based Management Appliances on page 28 Starting the XMS Client Interface on page 29 Licensing the XMS Server on page 35 Discovering Networks and Arrays on
242. default Xirrus logo or upload a custom image e Customize C Custom Image Choose File Upload Save Settings Figure 246 Customize Report Header Page Select Default Image to use the default Xirrus logo at the top of all reports Select Custom Image to upload your own logo to be used at the top of all reports Click Choose File to browse to the desired image file It must be one of the following types bmp jpg png Then click the Upload button Click Save Settings when done Note that XMS does not impose a particular size limit on the image file but the Xirrus logo is approximately 200 x 50 pixels if you wish to use it as a guide The currently selected image will apply to all subsequent report runs from either New Reports or My Reports It will not affect any previously run reports they will use the customization settings that were current at the time they were run Managing Reports 387 e XIRRUS Management System Traffic Reports Throughput is a measure of the amount of data that is transmitted in a given amount of time expressed in bits per second bps Wi Fi Arrays are designed to handle Gigabit Ethernet speeds providing a throughput of 1000 Mbps or 1 Gbps also known as 1000Base T One Gigabit is 10 bits per second or 1 000 000 000 bps With their high speed capability your Wi Fi Arrays can easily handle time sensitive traffic such as voice and video The high capacity XN16 Wi Fi Array has two Gi
243. deploy the licenses to the appropriate Arrays After your license file has been imported any licenses that are for XMS managed Arrays i e those that have been discovered will be deployed to those Arrays The Array is not rebooted but the radios will go down and up so that station associations will be disrupted briefly The Array will start using the new license and will support the capabilities shown in the Features column A license for an Array that is not yet under XMS management will be deployed as soon as the target Array is discovered Similarly a license for a managed Array that is down will be deployed shortly after it comes back on line 192 Managing Your Wi Fi Arrays e Management System XIRRUS To import licenses first display the Array License Management window in your browser by selecting Tools Array License Management from the Menu Bar on top of The XMS Java Client Interface Click the Licenses link on the left and then click the Import link that appears underneath it Fields are displayed to allow you to specify the license file Click the Choose file button to select the license file It must be either an xls or a csv comma separated values file To see an example of the format you may export a sample license file see Exporting Array Licenses on page 191 The File Download dialog box will allow you to open the file or save it to the location you select Click the Upload button When the upload is comple
244. desired backup You will be asked to verify that you wish to proceed XMS Administration 513 e XIRRUS Management System We recommend that you first notify all users that a restore will start shortly See Broadcast Message on page 500 The restore operation can impact system performance and should be scheduled for off peak hours After the restore operation is complete you must take these actions e Close all XMS client applications e Reboot the XMS Appliance Note To delete backups on both Linux and Windows servers perform the deletions directly from the file system They are found in the Backup Location that you specified 514 XMS Administration e Management System XIRRUS Web Client Email Settings Some features such as Viewing a Report allow you to email information from XMS to yourself or others When XMS needs to send email it uses an SMTP server to do so Before XMS can send any emails you must specify which server to use and provide authentication information n Help Logou e a e Monitor AN configure lt Reports Setting Email Settings These settings are used by XMS when emailing items such as reports Polling SMTP Server Address mail xyzcorp com SSH Server SMTP Server Port 25 User j smith Backup T Password erver s 29 Encryption None z XMS License Sender Email smith xyzcorp com About XMS Test Figure 329 Changing the Email Server To specify the
245. device If not click Add under the appropriate list if you need to create a new entry It is crucial that the values used by the device and by XMS match In the Search Networks section verify that the subnetwork containing the device is listed and that it is enabled If not click Add to enter it After a few seconds the system generates a message informing you that discovery has started on the newly added network Discovery normally runs at scheduled times To launch discovery immediately on a network see Rediscovering a Network on page 85 You may add a device to the Discovered Devices section explicitly using its IP address Click Add at the bottom of the section and enter the IP address If the device is detected by XMS it is added to the list otherwise an error message is displayed In this case check the IP address that you entered 90 Discovering the Network Management System XIRRUS Using the Dashboard The XMS Dashboard in the Java client gives you an at a glance overview of all system status and activity Administrators can quickly assess system health and overall system performance as well as viewing security status Security Data for All Arrays or selected Group Stations Alarms Status Performance ostio BE Array Group AN Araya E Status Arrays IAPs Radios Tot 200 Tota 1600 n o NEN o NNI s s EHE os EN Array Throughput for Group All Arrays Stations Station Totals
246. diate 9 Restore the database from a backup file It is recommended that you create database backups regularly and backup on demand after implementing many changes within the client interface Backups generally take just a few seconds to complete Figure 38 shows the Backup Manager window For more information about database administration see XMS Administration on page 495 52 The XMS Java Client Interface e Management System XIRRUS Basic Window Operations This section describes some of the basic operations that can be performed with client windows The procedures documented here assume that you are using the mouse to navigate through the client If you are an advanced user and prefer to use Keyboard Shortcuts this method will yield the same results however Xirrus does not accept responsibility for errors made by inexperienced users who choose to use shortcuts Navigating through Active Windows When multiple windows are open in the Main Viewing Area you can move forward to the next active window or move back to the previous window Moving Forward To move forward to the next window either click on the Go Forward to Next button in the Toolbar or go to File in the Menu Bar and choose Forward Moving Back To move back to the previous window either click on the Go Back to Previous button in the Toolbar or go to File in the Menu Bar and choose Back Detaching a Window from the Client Sometimes you may want to detach a
247. dicated by each color You may change these colors if you wish see Changing Contour Map Colors on page 156 140 Working with Maps e Management System XIRRUS Map Data Contour Type Signal Strength Heat Map RSSI 30 Environment Type Type Office Cubicles Units feet Cursor Location x 131 9 y 19 Figure 94 The Map Data Information Bar The Map Data bar is displayed above the heat map Depending on your settings in the Map Settings Window the following values may be shown for the mouse pointer s current location updated as the mouse moves 9 Contour Type the type of measurement that the contours are based on This value is always Signal Strength Heat Map RSSI the RF signal strength at the current location Environment Type this displays the wall settings defined for the map in Entering Environment Settings on page 151 9 Location the mouse pointer s position on the map expressed in terms of feet from the lower left corner of the map The distance is calculated based on the scale set in Setting the Map s Scale on page 146 Array Data Figure 95 The Array Data Information Bar The Array Data bar is displayed below the heat map If you have been Using the Location Feature then this shows information about the station that was located and about the Array or located station that is closest to the mouse Otherwise it shows information about the Array that is closest to the mouse pointer s curren
248. discovered on this network so far The toolbar above the list of networks provides a number of additional functions 9 Discover Now click this button to start discovery immediately This will start discovery on the selected networks only 9 Edit to change a network Network Address Subnet Mask and whether Start Discovery is enabled select the network and click Edit e Delete to remove networks select the desired networks and click Delete You will be asked to confirm the deletion On Off this button toggles whether Start Discovery is enabled on the selected networks If you use this button to enable Start Discovery then the discovery process will be started immediately on the selected networks Note that discovery will not remove devices from the XMS database if you delete their network if they are on a network where discovery has been disabled or if you have edited the IP address so that their original network is no longer listed for discovery Devices remain on the list until you delete them manually The XMS Web Client 487 e XIRRUS Management System Trap Receivers Just as Arrays send SNMP traps to the XMS server the XMS server can send traps to top level supervisory software Any Array event that gets escalated to an alarm will be forwarded to the trap receivers that you set up The receiver for these traps might be a Manager of Managers MOM or an application like HP OpenView running at the NOC
249. dministrator accounts 9 Less effort you don t have to set up user names and passwords on each Array just enter them once on the RADIUS server and then all of the Arrays can pull from the RADIUS server 9 Enforced policies you may set password rules e g passwords must contain at least one number and be at least 12 characters in length and you may set expiration times for passwords LET Admin Radius Management o a Security Enable Admin Radius C Ned C No o Primary Host Name O Primary Server Port sz 4j B Radius Primary Shared Secret 7 Verify Primary Secret p Secondary Host Name RN g MAC Access Secondary Server Port sz 4 d Secondary Shared Secret EE Verify Secondary Secret OO Admin Radius Timeout Sec po S Admin Radius Authentication Type CHAP C PAP Admin Radius Apply Cancel Figure 190 Admin RADIUS Management 284 Managing Configuration with Policies e Management System XIRRUS Admin RADIUS settings override any local administrator accounts configured on an Array If you enable Admin RADIUS on an Array all administrator authentication is done via the configured RADIUS servers The only exception to this is when an administrator is connected via an Array s Console port using CLI In that case the Array will authenticate administrators using accounts configured on the Management Control Admin window first and then use the RADIUS servers This provides a safety
250. dress or hostname for the XMS server machine followed by 9090 For example if the IP address is 192 168 10 40 point your browser to http 192 168 10 40 9090 When the XMS splash window appears click Web Client Figure 260 Production client for monitoring and configuring Xirrus Arrays BETA cient for limited monitoring and configuration capability Figure 260 XMS Start Window The XMS Web Client 423 e XIRRUS Management System Web Client Modes The web client has different modes of operation selected by buttons at the top of the window Each mode offers a selection of pages which manage different XMS functions The modes are described in the following sections About Monitor Pages on page 424 About Configure Pages on page 425 About Reports Pages on page 427 About Settings Pages on page 428 Help Logout lt a x e Monitor A configure lt Reports x Settings Figure 261 Mode Selection in XMS Web Client About Monitor Pages These pages display information about the current status of the network Click the Monitor button at the top of the window to see the list of monitor pages on the left These are primarily read only pages although most of the pages except for the Dashboard allow you to export data to a file The Monitor button always opens to the Dashboard page 424 The XMS Web Client e Management System XIRRUS Monitor Mode Y m Monitor A Configure
251. e list in the Discover Devices Window and become part of the XMS Managed Network Discovery XMS s discovery feature uses SNMP to find networks and devices that are reachable from the server s network Despite the advantages of the Phone Home 70 Discovering the Network e Management System XIRRUS feature discovery is still needed when you first start using XMS Discovery will find your current network of Xirrus devices without waiting for them to announce themselves as a result of being booted up In some networks discovery must be used because DNS is not configured to allow devices to resolve the hostname xirrus xms NOTE If you do not have a valid license for the XMS server you are limited to managing one Array Valid XMS licenses are typically for a particular number of Arrays In either case when XMS has discovered the maximum permitted number of Arrays no additional Arrays will be discovered See Licensing the XMS Server on page 35 Any items networks or devices that are found by XMS are added to the appropriate list in the Discover Devices Window and become part of the XMS Managed Network You have the option of initiating a rediscovery process on demand for networks or you can establish a schedule for the automatic discovery process in the Scheduling Discovery window Scheduling is useful when the network is undergoing large scale changes such as the installation of a large number of Arrays For a mature network it i
252. e 466 Managing Your Wi Fi Arrays 165 e XIRRUS Management System The Arrays Window This window is displayed when you click on the Arrays node in the Tree which appears under the Resources parent node Information on this window is automatically refreshed every 20 seconds Array Status Summary Select L 2e Refresh Array Group All Arrays Graph Interval 4 Hour Array Status mss Bg B 12 5107 10 0 7 51 5 0 251r 0 0 Mbps 14 00 14 05 1440 1416 1420 1425 1430 1435 1440 1445 1450 1455 1500 Time Tx Rx lt Total Zoom graph using mouse drag Restore by double clicking the graph Array Host Name Management P Gigt MAC Address Active Stations E lt lt MIMIC_Array_3 5FW gt gt 2 Ali s Virtual SQA Lab 172 16 20 3 lt lt MIMIC_Array_3 5FW gt gt 3 Ali s Virtual SQA Lab 17216204 lt lt MIMIC_Array_3 5FW gt gt 4 Ali s Virtual SQA Lab 17216205 lt lt MIMIC_Array_3 5FW gt gt 5 Ali s Virtual SQA Lab 17216206 MIMIC Array 3 5FW 6 Ali s Virtual SQA Lab 17216207 MIMIC Array 3 5FW 7 Ali s Virtual SQA Lab 17216208 MIMIC Array 3 5FW 8 Ali s Virtual SQA Lab 1721620 MIMIC Array 3 5FW 9 Ali s Virtual SQA Lab 172 16 20 10 lt lt MIMIC_Array_3 5FW gt gt 10 Ali s Virtual SQA Lab 172 16 20 11 lt lt MIMIC_Array_3 5FW gt gt 11 Ali s Virtual SQA Lab 172 16 20 12 MIMIC Array 3 5FW 12 Al s Virtual SQ
253. e Rogues page 9 About Using the Rogues Page 9 The Rogues List ee ee Select Columns Export Showing 1 to 25 of 25 Classification SSID BSSID Channel Band Manufacturer RSSI Array Type Security Discovered Last Active Known wds link 00 0f7d 04 23 31 11 24GHz Xirrus 57 XMS 5 0 V2 508 Infrastructure none 2 447 2 28 17 Known SQAWPA 00 0f 7d 04 23 a2 11 2 4GHz Xirrus 64 XMS 5 0 V2 508 Infrastructure AES TKIP EAP 2 4 17 2128 17 Known SQAWPRS 00 0f 7d 04 23 a0 11 2 4GHz Xirrus 65 XMS 5 0 V2 508 Infrastructure none 2 417 2 2817 Known L3R Open 00 0f7d 00 89 30 6 24GHz Xirrus 58 XMS 5 0 V2 508 Infrastructure none 214117 2 28 17 Known S160pen 00 0f 7d 00 89 d4 48 5GHz Xirrus 60 XMS 5 0 V2 508 Infrastructure none 2 447 2 2817 Known L3R EAP 00 0f7d 00 89 d1 48 5GHz Xirrus 59 XMS 5 0 V2 508 Infrastructure AES EAP 214417 2128 17 Figure 280 Rogues Page About Using the Rogues Page A number of basic operations are available on the Rogues page to allow you to customize it for your own use 9 Select Columns on page 442 9 Export on page 443 9 Rearranging and Resizing Columns in a Table on page 443 e Sorting on page 443 The XMS Web Client 451 e XIRRUS Management System The Rogues List The Rogues List Figure 280 on page 451 shows all of the rogues that have been detected by XMS You may customize the columns shown in this list see Select Columns on page 442 This list is very similar to the one in the The De
254. e network ideal for large scale Wi Fi deployments XMS supports all Array models including the XN series that offers IEEE 802 11n protocol support The XMS server is available pre installed on the Xirrus Management Appliance or you may install it on your own hardware Xirrus Management Appliance The Management Appliance is a dedicated network device tailored to run XMS and designed to manage up to 1000 Wi Fi Arrays XMS is furnished pre installed There are two families of Appliances the Linux based XM 3320 XM 3340 and XM 3360 and the Microsoft Windows based XM 3300 e Xirrus Application XMS Server Software Xirrus Part Number XA 3300 CC The XA 3300 CC application package allows you to install and run the XMS server software on your own server device Introduction 1 e XIRRUS Management System 9 Xirrus Wi Fi Array The Xirrus Wi Fi Array is specifically designed for the Enterprise market utilizing up to 16 Integrated Access Points IAPs Multiple versions of the Array with different numbers of Integrated Access Points IAPs support a variety of deployment applications 16 IAPs XN16 XS16 XS 3900 12 IAPs XN12 8 IAPs XN8 XS8 XS 3700 and 4 IAPs XN4 X54 XS 3500 For more information refer to the Xirrus Wi Fi Array User s Guide part number 800 0006 001 9 Xirrus XP Power System Xirrus power options include the XP1 XP2 and XP8 Power over Gigabit Ethernet PoGE modules eliminating the need t
255. e using the appropriate software By default Acrobat is used to open PDFs and Excel is used for csv and xls files unless you have changed the settings on your computer to open these files with a different application To print the report we recommend that you download it as a PDF and print it from Acrobat To email the report click the Email Report button at the top Figure 242 Note that this button may not be displayed if you have not specified a mail server that XMS can use to send emails as described in Web Client Email Settings on page 515 Download Report pdf xls csv Email Report Xirrus Management System Email report to XMS Reports jjsmith xyzcorp com Array Availability OK Cancel Time Span Hour Monday 03 21 2011 07 09 PDT to Monday 03 21 2011 08 09 PDT Array Availability for All Arrays Monday 03 21 2011 07 09 PDT to Monday 03 21 2011 08 09 PDT Name Address otal Down Time Time E 0 V2 1 172 16 45 2 days 1 hrs 0 minsO days O hrs 0 mins days 1 hrs 0 min 0 0 16520901140 10 100 54 26 days 0 hrs 0 mii days 1 hrs 0 mi days 0 hrs 0 mit 100 0 Figure 242 Emailing a Report Managing Reports 377 e XIRRUS Management System The web client will prompt you to enter the email address then click OK A message will appear near the top of the page when the email has been successfully sent The email displays the report in the same format shown on
256. each IAP capable of associating up to 96 client stations The high capacity XN16 Wi Fi Array has 16 IAPs which means the Array can associate up to 1536 stations 16 x 96 And because XMS can support many Arrays the number of clients that can be associated may be quite large Note that typically the abg2 abgn2 IAP is enabled for monitoring only default and client stations cannot associate with this IAP The following reports are available in this section 9 Associated Stations Provides station association data for the selected Arrays Stations By Array Allows you to review station association data based on selected Arrays including how many stations were associated at the busiest peak time 9 Unique Station Count This report displays a line graph showing station counts over time broken out into categories by your choice of categories such as SSID and VLAN 404 Managing Reports e Management System XIRRUS Associated Stations This report consists of a table listing stations that are associated to your Wi Fi network Figure 253 The information displayed in this window is based on your Selection Criteria You may use the criteria to report on just those stations that are associated to the selected Arrays Selection Description Criterion for details Group Include only Arrays that are members of the selected Array group Map Include only Arrays that are members of the selected map Array Include onl
257. earch Backward Figure 91 Finding an Entry in the Arrays List 134 Working with Maps e Management System XIRRUS Searching for an Array on the Map To find the location of an Array on any map double click the Array in this list or right click it and select Locate from the menu This displays the map that contains that Array if different from the current map and selects the Array on the map You may use the Filter Arrays field below the list to help find an Array Type in a string that appears in any position in any of the displayed columns of the desired Array s As you type XMS narrows the Arrays List to entries that contain that string the search is not case sensitive To return to showing all Arrays just clear the Filter Arrays field Working with Maps 135 e XIRRUS Management System The RF Heat Contour Map The heat map gives an at a glance representation of the Arrays in an area their locations and the RF coverage that they provide Areas of low coverage are immediately visible You may right click on an Array to display a menu of options for managing it Use The Arrays List to easily locate an Array Map Data Bar Contour Type Signal Strength Heat Map RSSI 55 Environment Type Type Office Cubicles Units feet Cursor Location x 139 8 y 13 pRssiValues ES Es End Fey SN 5 Array Data Bar Heat Map RSSI Legend Figure 92 Main Map Showing RF Heat Contours When the Display
258. eb Client e Management System XIRRUS 9 The Array Hostname of the Array that generated the event 9 The Message a text description of the event The XMS Web Client 457 e XIRRUS Management System Configure Home Page This page lists the Arrays in the XMS database and allows you to reboot or delete the selected Arrays or fetch diagnostic information This page is identical to the Monitor Arrays page Please see Arrays on page 441 Network Settings The Network Settings page provides very convenient options for configuring certain Array network settings Some of these functions are also available from the Arrays Window and some like bulk configuration as described below in To Modify Multiple Rows are available only from this web client window Bulk configuration is a particularly valuable feature allowing you to change network settings on a number of Arrays in one step Open the Network Settings page by clicking the Configure button near the top of the window then select Network Settings on the left XIRRUS e Monitor P qu 9 Reports cm SUPE Edit Network Settings Apply Seton Previous Next gt Network Settings Export Settings Select the arrays that you wish to configure network settings for and click Next Import Settings Select Columns Radio Settings Showing 1 to 25 of 816 Rows 25 v Advanced Config r Hostname IP Address Location PoGE m 1XR480411014422 10 100 54 55 Ali s Cube Add Devic
259. ective Arrays You will be informed of the results of the operation The License Status field will show the results quickly typically well within a few minutes If successful the entry will be moved to the list of deployed licenses The Array is not rebooted but the radios will go down and up so that station associations will be disrupted briefly The Array will start using the new license and will support the capabilities shown in the Features column You may click the Delete button to remove the selected pending licenses Deployed licenses may not be deleted You may click the Export link at the top of the page to export all pending licenses It is not necessary to select any entries first all pending licenses will be exported To export an xls file click the Excel radio button To export a file of comma separated values csv click the Csv radio button Then click Export The File Download dialog box will allow you to open the file or save it to the location you select Managing Your Wi Fi Arrays 197 e XIRRUS Management System IAPs This section discusses the individual IAPs Integrated Access Points within each Array that is configured as part of your managed network The IAPs Window This window opens when you click on the IAPs node in the Tree which appears under the Resource parent node The IAPs window includes a list of all IAPs included in the Arrays that are part of the Array group selected on the Dashboard
260. ed Config PoGE Add Devices XMS 5 0 V2 1 200 200 45 2 00 027e XN0824081A2E2 XMS Trap Receivers XMS 5 0 V2 1001 200 200 49 2 00 02 7e XN0824081A2E2 XMS Licenses XMS 50 V2 1002 200 200 493 00 037 XN0824081A2E2 XMS Custom Fields XMS 5 0 V2 1003 200 200 49 4 00 047e XN0824081A2E2 XMS Custom Field Values XMS 5 0 V2 1004 200 200 49 5 00 057e XN0824081A2E2 XMS Custom Actions Dnjgajng minmniaginmirnitu XMS 5 0 V2 1005 200 200 49 6 00 06 7e XN0824081A2E2 XMS Figure 311 Custom Field Values Adding a single value Before you add values you must make sure that the desired custom column is displayed If you have scrolled all the way to the right of the Arrays list and the new column is not visible the use the Select Columns link to add it to your display You may also wish to change the custom column s position to be further to the left See Select Columns on page 442 if you need more details Note that The XMS Web Client 491 e XIRRUS Management System you can also change the new column s position by simply dragging its column header in the Array list see Rearranging and Resizing Columns in a Table on page 443 To enter a value for an individual Array simply click its entry in the custom column Figure 311 A dialog box is displayed where you can type the desired string up to 255 characters long Click OK when done to save the value or click Cancel to abort Use Bulk Edit to quick
261. ed Sta won gsis r EN ad pid Un REO o D RUE 405 Stations By Array 2uiissceaiinictera nii hn I EVER ERE VESTRE DRE SEXE asini 406 Unique Station COUNE coeeeetietiis eed eere t e t Petr sta the e tare nd 409 P ruucc yit oro ui 412 ray InvebllOty oes RD ON E A IE NI 412 Array Availability 4 treten ep d e e itte E 414 ISESISODORIS een teme monem menm cmt ebrei d air mm Ere 416 Channel Usage 5 eiie rn EH HER a HE ERE be ERER EH PERO EREA 416 Security Reports i2 He E HIT weenie nace 419 Rogue List M 420 The XMS Wep GIRO cuiii alic EHI S LUDUM MURUS Min dnd 423 Starting the Web CIGDE osram ii E rein one ER Ure ront eds 423 Web Client Modes ette ais tape beate d ee pet 424 About Monitor Pages ociseka Gute eertescrhasi pre ierunt phe e a Rs SAAR 424 About Contisure Papes urns eumd tier ER 425 About Reports Pages auia dere Dari ben hod aaa 427 About Settings aves soie ani eoe de ER GERD E 428 Dashboard ee 431 Dashboard Overview 3 nien pes pe eet AE sesion 432 About Dashboard Data 5i eee tie ime e RR ERAT 432 Array and Radio Status s coerente tener o me Pr sene 433 Recent Alarms 52 ett ete ne re Ec eerte eie e EUR 435 StA ONS encender en f ta TIE DR ORE EUIS 436 Rogue OVERVIEW iieri tele pe p beri Fel eh niin Me EE Ie EN ENSS 439 Duryrpe ONENEAN 441 About Using the Arrays Page serene atii EH E epi ERE 441 Tihe Astras DISbos etate tibi
262. ed VLAN associated with the SSID 9 The wireless security mode needed to join the SSID We recommend that you define the settings that you will be using before proceeding to create the SSID policy For example an SSID may specify a particular VLAN DHCP pool filter list and or roaming layer Those should be configured before defining an SSID that will use them NOTE The SSID policy defines a set of SSIDs When the policy is applied to an Array the Array is set to have exactly this set of SSIDs Thus any previous SSID configurations on the Array will be deleted and will be replaced by the SSIDs configured in the policy If you wish to make a change to existing configuration on an Array rather than replacing that aspect of its configuration don t use a policy Instead see Configuring an Array on page 174 SSID Settings This window contains a field for defining the name of the policy and an editable table listing all SSIDs currently assigned to this policy Policy Details Policy Name Standard SSID Save Configuration v SSIDs SSID SSID State Broadca Authent Security Radius 551 Enable Disable Open Open Internal ss2 Enable Enable Open Open Internal iss3 Disable Disable Open Open Internal SSIDs dh SSID List Ei Figure 192 SSID Settings 288 Managing Configuration with Policies e Management System XIRRUS Policy Details 9 Policy Name Enter a meaningful name that descr
263. ed by the following column headers 9 Array Hostname The host name assigned to the Array 9 Array MAC Address This is the Array s MAC address 402 Managing Reports e Management System XIRRUS 9 Array IP Address The IP address assigned to the Array 9 Array Packets Error Rate The packet error rate reflects the bit errors detected by the system during the time period you specified The percentage shown is the number of bit errors divided by the total number of packets Download Report pdf xls csv Email Report e XIRRUS XMS Reports Ethernet Errors Time Span Da y Monday 04 11 2011 04 38 PDT to Tuesday 04 12 2011 04 38 PDT Average Ethernet Errors Percentage 0 0000000 Total Errors Total Dropped Ethernet Errors for Individual Array 16520901140 0 0f 7d 00 91 78 10 100 54 26 0 000 0 000 18010800E36 bo 0f 7d 00 5e t2 10 0 11 1 0 000 0 000 Figure 252 Ethernet Errors Report 9 Array Packets Drop Rate Shows how many packets failed due to being dropped during the time period you specified The percentage shown is the number of packets dropped divided by the total number of packets Managing Reports 403 e XIRRUS Management System Station Reports A basic wireless network consists of an Access Point AP and client stations that are associated to the network via the AP Each Wi Fi Array includes a number of IAPs Integrated Access Points with
264. efer to the section in this chapter that documents the creation of a new policy for the policy type you want to modify Policy names cannot be changed on existing policies Executing a Policy To apply a policy to one or more Arrays click the green arrow in the Execute column for the desired policy Figure 151 The Execute Policy window appears Select the desired Arrays from the list on the left and click gt gt to move them to the list on the right You may sort the entries using the column header of any column You may select multiple entries using Ctrl Click Shift Click or Ctrl a Click the Execute button to apply the policy to the Arrays listed on the right Managing Configuration with Policies 221 e XIRRUS Management System For increased efficiency the policy is applied to a number of Arrays simultaneously up to 40 at once This allows large networks to be upgraded up to forty times faster compared with applying the policy to one Array at a time Thus if you have selected 80 Arrays the policy will be pushed out to them in two rounds of 40 each Deleting an Existing Policy The procedure for deleting a policy is the same for all policies Simply click on the policy to select it then click on the Delete button At the confirmation dialog click on the Yes button to confirm the delete action Delete Confirmation Delete Modify em UAC Access at anas ula secu ote WPA1 false internal Off 0 No Es
265. egabits per second achieved by the Array for the time period you specified If you set Display Traffic by to Total these columns are shown Average Tx Rx Mbps Shows the average total throughput in megabits per second achieved by the Array for the time period you specified Peak Tx Rx Mbps Shows the maximum total throughput in megabits per second achieved by the Array for the time period you specified Managing Reports 401 e XIRRUS Management System Ethernet Errors This report shows Ethernet communication errors for the Gigabit ports in all Arrays in the XMS managed network based on your Selection Criteria Selection Description Criterion for details Group Include only Arrays that are members of the selected Array group Map Include only Arrays that are members of the selected map Array Include only the selected Array VLAN Include only the selected VLAN specified by name or number Table Row Limit Total number of rows Date Time Include only this time range Schedule Run the report at this time See Schedule on page 382 Email Report To After running email the report See Email Report To on page 382 Ethernet errors reported include packet error rate and packet retry rate where both categories are based on a percentage of the total number of packets Figure 252 Table Details for the Ethernet Errors Report The results shown in this report are organiz
266. elect entries for multiple APs at the same time and click a button to apply the same classification to all of them You may use Set Unclassified to remove a previously set classification if any from an AP The changed classification will be displayed in the Devices window To create a classification rule or to edit existing rules see Creating Classification Rules below Creating Classification Rules These rules allow you to classify groups of devices rather than classifying each selected device individually Rules may be enforced pushed out to all Arrays or unenforced as described in Classifying Rogue Devices via XMS on page 121 Rules may be created as described below or may appear as a result of being read from an Array see Populating the XMS Devices Window on page 122 You may edit existing rules if you wish To create or edit a classification rule click the Edit Rules button on the right below the Detected Devices List The Device Classification Rules dialog box appears Figure 86 Device Classification Rules EET x I pave Arrays _ GSS0 00 0f74 Known kx s ab cd ee Bssi ssiD lab cd ee Known it Security Rule fred BSSID SSID fred Approved Rule Name Xirrus Arrays Rule Type essi Data oo otza Figure 86 Editing Classification Rules To add a new rule click Add In the Add New Security Rule dialog box enter your Rule Name 126 Security Managing Intrusion
267. elected Object is 00 0F 7d 00 43 0a Total Number of Events 9 Total Number of Alerts Critical Major Minor Warning Clear Figure 143 Viewing Events and Alerts 202 Managing Your Wi Fi Arrays e Management System XIRRUS Stations This section discusses the client stations that are associated to all Arrays within your managed network Station Status Summary Select 4 Stations LU 2 Refresh Array Group All Arrays Graph interval 1 Hour Station Status 29 Aw Bo Bo H 500 E sooo fo Station Throughput for Group All Arrays 10 000 Mbps 5 000 10 00 10 05 1040 1015 1020 10 25 10 30 1035 1040 10 45 1050 1055 1100 Time Tx Rx Total Zoom graph using mouse drag Restore by double clicking the graph rray HostName Associated MAC Address etmesine sume ase ware yn e pesa Tans umet 02 01 28 40 00 01 190 103 1 2 190 103 1 3 02 01 28 40 00 03 PC281097928102 190 103 1 4 88 02 01 28 40 00 05 PC270251116910 190 103 1 6 02 01 00 190 103 1 7 02 01 00 1 190 103 1 8 02 01 00 190 103 1 9 02 01 A 190 103 1 10 02 01 00 190 103 1 1 02 01 28 40 00 0b 190 103 1 12 02 01 28 40 00 0e 190 103 1 13 02 01 28 40 00 0d 944628 190 103 1 14 3 amp 8 28 8 Icon Station List Throughput Chart Figure 144 Stations Window The Stations Window This window is genera
268. em XMS searches for the string in every column of the table potentially matching many entries For example searching for an IP address by entering the string 200 will also find entries with a date in 2008 or 2009 Searching for 200 instead is more likely to match only IP addresses Rearranging and Resizing Columns in a Table For easier viewing of the table data you can rearrange the columns by dragging the column header and moving it to the required place in the table This is helpful if you want to view a column data in close proximity To resize a column header simply drag the right side edge of the column to expand or reduce the width of the column This can be helpful when the data in the column is wide and extends beyond the column s current width Viewing Row Details Table rows in the Events window contain summary data that can be expanded to reveal detailed information about the data in a row To expand a row simply double click the row or right click the row and choose Details from the pull down list Another option for performing the same function though more time consuming is to select a row then go to View in the Menu Bar and choose Details Figure 45 62 The XMS Java Client Interface e Management System XIRRUS Xirrus Events Event Details Index 2007 Array Not Reachable Message Category Domain Network Node Failure Object 00 0f 7d 00 41 a2 Status
269. em You may enter a single device IP address a range of addresses or a list of addresses This last option is especially useful if you have an Excel spreadsheet with a list of Arrays and their addresses Simply copy and paste the single column that has the device IP addresses Open this configuration page by clicking the Configure button near the top of the window then select Add Devices on the left Select whether to add a Single Device an IP Range or Multiple Devices by clicking the appropriate tab 9 Single Device Figure 301 Enter the IP Address of the single device to be added to XMS Click the Discover button 1 2 Enter Device IP Addresses Review Home Previous Discover gt Network Settings Enter the IP address of the device you wish to discover Radio Settings Advanced Config Single Device IP Range Multiple Devices PoGE IP Address Add Devices SNMPv2 Settings Figure 301 Discover a Single Device 480 The XMS Web Client e Management System XIRRUS e IP Range Figure 302 Enter the start of the range in the From IP Address field Enter the end of the range in the To field XMS will check every address in the range up to and including the To address Click the Discover button At each address if it finds an Array or management capable Xirrus PoGE power supply XMS will add the device to its list of discovered devices 1 2 Enter Device IP Addresses Review Previous Discov
270. em Log reporting Levels include e Debug e Information e Notification e Warning e Error Critical Alerts e Emergency The default level is Information 9 Primary Syslog Server Address Domain or IP If you enabled Syslog enter the hostname or IP address of the primary Syslog server 9 Primary Syslog File Level Choose the preferred level of Syslog reporting for the primary server The default level is Information Secondary Syslog Server Address Domain or IP If you enabled Syslog enter the hostname or IP address of an optional secondary Syslog server 254 Managing Configuration with Policies e Management System XIRRUS 9 Secondary Syslog File Level Choose the preferred level of Syslog reporting for the secondary server The default level is Information 9 Tertiary Syslog Server Address Domain or IP If you enabled Syslog enter the hostname or IP address of an optional tertiary Syslog server 9 Tertiary Syslog File Level Choose the preferred level of Syslog reporting for the tertiary server The default level is Information 9 System Log to Console Choose Yes if you want System Log reporting directed to the Array s console interface or choose No to suppress System Log messages to the console Syslog messages will still be sent to servers as specified above 9 Console Syslog File Level Choose the preferred level of Syslog reporting for the console The default level is Information After comp
271. em Requirements The recommended requirements for the system hosting the XMS server are based on the scale of the Wi Fi Array network to be managed small medium or large Please see www xirrus com for specifications and system requirements for the scale of the network to be managed 16 Xirrus Management System Products e Management System XIRRUS Installing the XA 3300 CC Application i 2 3i 4 If XMS is not currently installed on your server proceed to Step 2 If you already have a version of XMS installed on your computer please check the Release Notes to see if there are any special upgrade directions If there are no special instructions you should use the Install Patch feature of the XSMT Software Manager to install the software update See To Install a New Version of the XMS Server on page 535 Do not continue with this procedure unless you have been directed to do so by the Release Notes for this release or by Xirrus Customer Support Insert the XA 3300 CC installation CD into an available CD ROM drive The CD s autoplay feature starts the installation wizard automatically Click on the Next button to begin the installation process When prompted you must accept the Xirrus End User License Agreement IetiAewehare wil Qu t you Pasuga he inttallaton oNu instalation and Use cf Orius Management System Heures Acceptance of the Following License Agrenment pats st a ro tte EE SOFTWARE LICENSE AGREEM
272. em XIRRUS uncheck the boxes to define which data rates are supported The default is for all 802 11b data rates to be supported Basic Data Rates The data rates that are enabled here define the minimum set of 802 11b data rates that a wireless station must support if it wants to associate with the Arrays Check or uncheck the boxes to define the basic data rates required by an 802 11b client The default is to have all basic 802 11b data rates enabled 1 Mbps 2 Mbps 5 5 Mbps and 11 Mbps 802 11b g Threshold Setting Details 802 11bg Fragmentation Threshold This is the maximum size for directed data packets transmitted over 802 11b g IAPs Larger frames fragment into several packets with their maximum size defined by the value you enter here Smaller fragmentation numbers can help to squeeze packets through in noisy environments Enter a value in this field between 256 and 2346 or increment decrement the value using the UP and DOWN arrows The value you enter here will define the fragmentation threshold for all 802 11b g IAPs The default is 2346 802 11bg RTS Threshold The RTS Request To Send threshold specifies the packet size Packets larger than the RTS threshold will use CTS RTS prior to transmitting the packet useful for larger packets to help ensure the success of their transmission Enter a value in this field between 1 and 2347 or increment decrement the value using the UP and DOWN arrows The v
273. ement System Managing Pending Array Licenses To view licenses that XMS has imported but has not yet been able to deploy first display the Array License Management window in your browser by selecting Tools Array License Management from the Menu Bar on top of The XMS Java Client Interface Click the Licenses link on the left and then click the Pending link that appears underneath to display all non deployed licenses that have been imported Figure 140 Note that if an Array is running with a valid license but a new license was imported for it it will be listed on both the Deployed Licenses page and the Licenses Pending Deployment page until the new license has been deployed Licenses Pending Deployment Click here to view your deployed licenses Deploy Now Delete Select Columns Export Showing 1 to 25 of 346 Rows 25 E 12345 License Key Serial Number License Status Software Version Features I 1K6QB 2DVX5 RLN05 10001 XN0824081A2E2 Pending Deployment 802 11n RF Analysis Manager 1GHW8 8PH9T KDH2Q YMV02 XN0825081A4CB Array Not Discovered v5 0 RF Performance Manager RF Security Manager 802 11n 7 17MU8 80FDX ROX4G D2GKO XN0826081A4E5 Array Not Discovered v5 0 RF Analysis Manager RF Performance Manager RF Security Manager 802 11n 035V5 U1DX8 3D50H VARYN XN0834081A9C5 Array Not Discovered v5 0 mc ede RF Performance Manager RF Security Manager Figure 140 Array Licenses Pending Deploymen
274. ement System Policy Details Policy Name Enter a meaningful name that describes this policy If you are modifying an existing policy this field is grayed out not editable If you are using a standard naming convention for all of your policies the name you enter here should conform to that convention Save Configuration Check this box to ensure that any time this policy is applied to an Array the Array will save the updated configuration information to its flash memory If this box is left unchecked then when this policy is applied to Arrays the configuration changes will need to be saved manually or else they will be lost when the Arrays are rebooted Note that this checkbox does not actually apply the policy to any Arrays To apply the policy see Using Policy Windows on page 218 Management Setting Details 9 If you choose to modify any of the port assignments below please ensure that they do not interfere with any of the required ports used by XMS and by Arrays Please see KMS Port Requirements on page 22 for details Enable Telnet Management Choose Yes to enable management using Telnet or choose No to disable Telnet management The default is No Be aware that Telnet is not secure over network connections and should be used only with a direct port connection When connecting to the Command Line Interface over a network connection you must use a Secure Shell SSH utility The most commonly used freeware providing S
275. ement System XIRRUS When you choose to configure a specific option the configuration window for the selected option is displayed The main differences between this window and the corresponding policy creation window are the inclusion of an Execute button and the fact that this window shows the currently configured values on the Array Occasionally the fields shown in this window may differ slightly from those in the policy window For example when configuring System Information on an Array fields for Host Name and Location are shown These fields are absent from the policy window Figure 158 on page 226 since it would be incorrect to set the same host name and location for multiple Arrays Duplicating the host name would actually cause serious problems After making configuration changes at the Array level you must click on the Execute button to apply your changes Figure 120 D Security for Host XNO83 10600F4 1 WPA Deraan TKP Lnatied AES Enabled F WPA Group Retey Time Never 7 WPA Group Rekey Time Sec Execute Figure 120 Configuring an Array Managing Your Wi Fi Arrays 175 e XIRRUS Management System Executing the Configuration Change After a successful execution of the command the Task Results window is displayed which confirms the changes you made You can choose to have the results displayed as a table as plain text or in HTML format the default is to have the results displayed
276. en e refi OR ERU NU PLE 444 e XIRRUS Management System The Arrays Toolbar iei os un ee ab ORDER GEHE EU TQ 445 Radios insano E nad edt n ERE Eder ipd dip 447 About Using the Radios Page 4 ern rrt reines 447 The Radios Last css etel ber RES Rte ERR HR rie AREIS RAE ERAR RR EESE 448 SLIBOTIS ed eid aom are olere erem e breiten rom dee 449 About Using the Stations Page auccm rero repe eee reper 449 The Stations List ousnebin nar rore UIEO Ra 449 GC XX 451 About Using the Rogues Page iiiieceitenscneetitisbeentn tee iip eds 451 The Rogues List m 452 Alarms coiere RE EAE RAE ED tan e tad ae aa 453 About Using the Alarms l age cusantium cab aie 453 The Alarms EISE venere teniendo ih ra e Ie nancies 453 lg e HR 455 About Using the Events Page ien ee eimi e i e iain 455 The Events LISU aiii tne farine et Geb sie beer te ome beet b ibit ead 456 Conte ure Home abe ao emen coim mc mati ron ripe 458 Network Settings masa nes ia dap SIR A HF ERU itii add ert 458 About Using the Network Settings l age accen onmeniees 459 To Modify Rows Individtially rtt tones 459 To Modify Multiple ROWS intcr e ht rn ret ut idet eis 460 To Export Network Settings aci eot breite bo eet 461 To LnportiNetwork Setun gs never errem eine 464 Radio Stun 2S sci aec den One nen HE n fa oH rr on ria 466 To Modify Rows Individually a2 ia et br ce teenies 467 To Modify Multiple R
277. en you log in to the XM 3300 the default login is Administrator Xirrus 23 the Xirrus Server Management Tool is automatically started and the XSMT window is displayed At other times if XSMT is not running you may start it by clicking the XSMT shortcut icon on the Windows desktop 9 Starting XSMT on your server with XA 3300 CC installed From the Windows Start menu select All Programs gt Xirrus gt Xirrus Management System XA 3300 CC The first time that you start XSMT a message will appear asking whether you wish to configure XMS to run as a Windows Service Click Yes Install XMS Service XMS is not currently configured as a Windows service p rd Would you like to configure XMS as a service now Figure 339 Start XMS as a Windows Service Wait for the Start button on the lower left to be enabled then click it to start the XMS server During server initialization the XSMT Logs panel displays high level progress messages 524 XMS Administration e Management System XIRRUS When XMS server startup is finished the XMS Server Manager tab of XSMT will indicate that the server is up and running Figure 338 on page 523 shows an example of a successful server initialization process The state of all servers is Running and they are shown in green When the XMS server is ready for clients to be started the Logs section on the right of the window will display The XMS Server is now running Point your browser
278. ename Figure 287 Ca id A w NetworkSettings 1 xls Compatibility Mode Microsoft Excel Home Insert Pagelayout Formulas Data Review View Developer Acrobat B1 dd Serial Number A p Cia a T esae Es E C N ett 4 Gigt Mac Address Serial Number Hostname Gig1 DHCP Gig IP Addres Gig1 Me Gig1 Gateway Locatior 2 00 0f7d 01 35 0e XN0411101FFA9 NORTA Array5 false 10 100 54 28 255 255 10 100 54 1 3 00 0f7d 01 c6 a4 XR48041101442 1XR480411014422 false 10 100 54 55 255 255 10 100 541 Ali s Cul 4 100 0f7d 01 c6 33 XR48041101442 1XR480411014422 false 10 100 54 55 255 255 10 100 54 1 Ali s Cul 5 Figure 287 Exported Network Settings File 3 You may choose to save the results in a file or open them in Excel Click Cancel when done to close the Export dialog The XMS Web Client 463 e XIRRUS Management System To Import Network Settings This option allows you to change IP and other network settings on Arrays by importing a file that was exported from the Network Settings page See To Export Network Settings on page 461 for instructions on exporting settings to a file 1 Step 1 Upload Settings File Open the Network Settings page by clicking the Configure button near the top of the window then select Network Settings on the left Click the Import Settings link that appears underneath Click Choose File and browse to the desired xls or csv file Figure 288 Next click the Upload button Click Next
279. ender Emat pi tecterGares com Swe _Test mai Figure 14 Server Management using the Web Client NOTE XMS web client access to the XMS server requires access to ports 9090 and 9443 Make sure that this port is open in any firewalls that exist between clients and the XMS server Getting Started with XMS 25 e XIRRUS Management System To access the web client set your browser s URL to the XMS server machine s IP address or host domain name followed by 9090 For example http 192 168 10 40 9090 When the splash page appears click the Web Client button on the lower right Log in to the web client the default for both fields is admin In a few moments the web client Dashboard appears Click the Settings button on the top then click Status on the left to display the Status page It shows a summary of server status You will need to proceed to Initial Server Setup for Linux based Management Appliances on page 28 to perform required initial setup on the server NOTE You may use the Command Line Interface CLI to manage the XMS server via SSH Access it at port 2022 and log in using adminladmin Do not use port 22 for CLI If XMS is not running properly you may click the Restart Application button on the lower left to restart the XMS server software If the server is currently running an orderly shutdown will be performed first The Reboot Appliance button will reboot the Management Appliance this will shut do
280. ent LINKS cec Gier tren td e i ele rr ans ble REAPER AA EA 344 WDS Client Link Settings certet nete toten inet 344 WDS Client IAP WindOW iccirco HERR REUS Ee eren 346 WDS Assisn IAP to OIIentens bientot tire tice ateet 347 Lastot Filter PolICIes etti teen e a mie pie ho etus 348 Filter Policy Details cs casino deii np en pH 349 Filter List Details 6er erige ease ee diede 351 Filters Setting D tails cec lieet Heo tren tiit er tota ARERR ARREK AR RRA 352 List of Software Policies ect rrr tne eres 354 Software Dpdateasnmiose msnm dn are TRES 355 Ple GhooBer sioudiiacret aniio miei ERES UD Een Per er 356 List of WPR PONIES ress acere nem medendi e rep eo eae 358 Web Page Redifeet i uis eese RR eS ak aean ha HERE A AAR ARREARS 359 WPR File Upload to XMS Servet se ennt tercie eere tote 360 Selecting WPR File List EDttIeS eie tne tee ire titer tette etas 361 Ixstot Config Be Policies isi cane mnn economie 362 Create Contig File Policy ioo auoneid a dendi ORE ERE GEERRDS 363 Configuration File Edit and View Window sss 364 List Of GEOUpDS iicet cerei anta ria ii papse rro 366 Array Group e X Ea 367 Policy Defailsisdautoadintpbm bp cane enn au ets 368 Viewing the Audit Details ierit eerte a aen 370 My Reports Windowsissa eE ami re UE p E REUS 373 Actions for RepoftS isrener e p HERE EERE EE E iii 374 Archived Reports Lisboa cote entrer loque eene te Hine eile 375 Viewing a Report eterne nine a rii ra oa
281. ent interface From here you can log in to the Array with your user name and password the default for both is admin and proceed as described in Connecting to an Array on page 172 Configuring the SSID Settings To configure the settings for a specific SSID use either of the following procedures e Double click on an SSID in the SSIDs window e Right click on an SSID in the SSIDs window then choose Configure from the pull down list 208 Managing Your Wi Fi Arrays e Management System XIRRUS The SSID Settings window is displayed which contains a list of all SSIDs for an Array From here you can add delete or modify an existing SSID B SSIDs Save Configuration MV SSID State Broadcast Figure 147 SSID Settings The configuration options for SSIDs are identical to the configuration options presented to you when creating SSID configuration policies To avoid repetition refer to SSIDs on page287 when configuring SSID settings The two differences between this window and the corresponding policy creation window are the inclusion of an Execute button and the fact that this window shows the currently configured values for this SSID When finished making changes click on the Execute button to apply your new settings For more information about executing configuration changes refer to the following 9 Executing the Configuration Change on page 176 e Saving Results
282. enter mir en ime ut merci SiN 92 sore H 94 Mir ar 96 P rtorimatee sriain lieto nito pinta a do EAR APAS RANE AAPEA ARARA Lit ger reete ind 98 DO CUT Hy nosset eres en sud oii a deis elare ah Eoo eves Eco desi err 100 e XIRRUS Management System Pris 102 Monitoring Your Network iuis icnisiid dessin oes hc pase DstbM inu i rR Pu Era rE TUE 105 At Prst Glance oie ien tea tite fe Eb ete e ird er RIEN OR 105 Viewing Events and Alarms for a Specific Array 105 Wis cM 107 Severity Levels iueentecteniotniiiitinio iet e Cet te E eed ed 110 Taking Action on an Alarm erret tree etes 110 luc M 111 Syslog Events ciment e enc de b ipie b ER peres 112 Configuring Syslog and NIP Servers oie eee err mtr ins 112 Syslom Severity LEVelS oreo RR 113 Reviewing Syslog BVents scandit meme n Rd RR IRE 114 Email Notifications for Evemts and Alarms terere rninss 115 Security Managing Intrusions sssssssssssssesnensenennnnnnennennennnnnnnnna 119 The Devices Wind Ow 5e nti eerie asaini Ens 119 About Classitying Detected Devices qiiis epi me HD er e eren 120 Classifying Rogue Devices via XMS scssssssiiesssensassesasscsassescaansasintasasianseseneyss 121 Classifying Rogue Devices on Arrays cte enn 121 Populating the XMS Devices Window iiit natis 122 Detected Devices oie iHe piene hee eerie
283. ents page numbers within the List of Figures and the Index and embedded text have associated hyperlinks If you want to return to the reference source you can do this by clicking on Acrobat s previous page button 6 Introduction e Management System XIRRUS XMS Product Overview The Xirrus Management System extends the capabilities of the Wi Fi Array s Web Management Interface WMI and Command Line Interface CLI to multiple Wi Fi Arrays over an entire network XMS includes the same configuration performance monitoring security fault management and reporting mechanisms used in the Wi Fi Array but adds an aggregate view of an entire network of Arrays across Layer 2 and Layer 3 boundaries Extended Management Capability Providing an at a glance overview of network conditions and throughput XMS reports all threats to the network with full event logs for rogue access points network health and Wi Fi Array performance With its powerful discovery feature and map based organization of your Wi Fi Arrays XMS streamlines the management of Array configurations XMS allows IT administrators to manage configurations establish policies schedule firmware upgrades across multiple Wi Fi Arrays and create groups of Wi Fi Arrays to simplify repetitive tasks Policies may be created automatically by copying the existing configuration of selected Arrays XMS also offers different administrative levels that allow Help Desk staff to monitor the
284. eport pdf xls csv Email Report XIRRUS XMS Reports Array Inventory Array Inventory Wednesday 03 16 2011 09 07 25 PDT Number Address P Address N0824081A2E2 172 16 52 151 01 92 7e 23 00 52 01 91 7e 23 00 52 172 16 52 150 XN0824081A2E2 N0824081A2E2 172 16 52 149 01 90 7e 23 00 52 XN0824081A2E2 01 8t 7e 23 00 52 172 16 52 148 D1 8e 7e 23 00 52 172 16 52 147 N0824081A2E2 172 16 52 146 XN0824081A2E2 01 8c7e 23 00 52 172 16 52 145 XN0824081A2E2 72 16 52 144 fxnos24081A2E2 N0824081A2E2 XN0824081A2E2 01 88 7e 23 00 52 172 16 52 143 XMS 5 0 V2 1892 p 5 0 V2 1891 pp 1 89 7e 23 00 52 h7216 82 142 Figure 256 Array Inventory Report Managing Reports 413 Array Availability Management System This report shows system reliability statistics for your Wi Fi network based on your Selection Criteria Figure 257 shows an example of the Array Availability report Selection Description Criterion for details Group Include only Arrays that are members of the selected Array group Map Include only Arrays that are members of the selected map Array Include only the selected Array Table Row Limit Total number of rows Date Time Include only this time range Schedule Run the report at this time See Schedule on page 382 Email Report To A
285. er gt Enter the IP address range of the devices you wish to discover Single Device IP Range From IP Address 200 200 45 10 To 200 200 45 17 Inclusive Figure 302 Discover a Range of IP Addresses Multiple Devices Figure 303 Type or paste a list of as many IP addresses as you like in the box separated by commas spaces or carriage returns You may paste a list of IP addresses obtained from an Excel csv comma separated values file Click the Discover button XMS will check every address in the list At each address if it finds an Array or management capable Xirrus PoGE power supply XMS will add the device to its list of discovered devices d 2 Enter Device IP Addresses Review Previous Discover gt Enter the list of IP addresses of the devices you wish to discover separated by a comma or carriage return Multiple Devices 200 200 200 10 200 200 200 111 200 200 201 10 200 200 202 10 Figure 303 Discover a List of IP Addresses The XMS Web Client 481 e XIRRUS Management System After you click the Discover button XMS will attempt to discover a Xirrus Array or managed power supply at all of the IP addresses that you entered It will display the results of discovery listing whether it succeeded or failed at each address Figure 304 If discovery fails at an address XMS will still try all the rest of the addresses that you entered Note that if you enter a device that i
286. er SS Array Succeeded Succeeded Global global SS Array Succeeded Succeeded Figure 126 Results of Create Policies from Array For more information on using policies please see Managing Configuration with Policies on page 215 Enabling or Disabling IAPs This option allows you to quickly disable all of the IAPs on one or more Arrays and later re enable them For example a school district might use this to disable all wireless access at night To disable IAPs first select one or more Arrays whose IAPs are to be disabled You may use Ctrl Click to add Arrays one at a time Shift Click to select a range of entries or Ctrl A to select the entire list Next right click anywhere in the Array list portion of the Arrays window and select Enable Disable All IAPs from the right click menu Select Disable You will be asked to confirm that you wish to change the status of all IAPs on the selected Arrays Click Yes to proceed To enable IAPs again select the desired Arrays Select Enable Disable All IAPs gt Enable from the right click menu and click Yes to confirm the operation 180 Managing Your Wi Fi Arrays e Management System XIRRUS Auto Configuring Channels on Multiple Arrays Auto Channel assignment is the preferred way to select channel assignments for an Array s IAPs and has significant advantages When you start an Array s auto channel feature the Array scans the surrounding area for RF activity on all channel
287. er a new value the minimum is 1 second or increment decrement the value using the UP and DOWN arrows 322 Managing Configuration with Policies e Management System XIRRUS Maximum Station Associations Per IAP The value in this field defines the maximum number of stations that can associate with each IAP The default is 96 maximum but you can decrease this number if you want to reduce the allowable number of stations per IAP Reducing this number can improve the performance of your Arrays during times of peak traffic because the value you enter here is applied to all IAPs T This admission control feature applies only to Spectralink phones It does not ma apply to all VoIP phones in general Maximum Phones Per IAP The value in this field defines the maximum number of voice stations that can associate with each IAP The default is 16 maximum but you can decrease this number if you want to reduce the allowable number of phones per IAP Reducing this number can improve the performance of your Arrays during times of peak traffic because the value you enter here is applied to all IAPs Note that the maximum number of phones allowed per IAP is lower than the number of other types of stations allowed This is because VoIP is a real time application that is very delay sensitive and highly dependent on the quality of the service it receives Data loss results in deteriorating voice quality 9 Radio Assurance Mode When Intr
288. es Edit View Y Y amp j Events Total 33 Displaying 1 to 33 PageLength so 0 4 gt gt i Dec Dec 28 2009 02 24 19 PM Node clear No failures on this node 00 0f Dec 28 2009 02 24 19 PM Array is up and active 00 0f Dec 48 2009 02 23 51 PM Rogue classification update initiated on Array Robin XS16 00 0f 7d 00 03 XIRRU Dec 28 2009 02 23 51 PM Node clear No failures on this node 00 0f Dec 28 2009 02 23 51 PM Array is up and active 00 0f Dec 25 2009 12 58 23 PM Node failure This probably means one or more inte have failed 00 0f Dec 25 2009 12 58 23 PM Array not reachable 00 0f Dec 25 2009 12 57 53 PM Node failure This probably means one or more interfaces have failed 00 0F V gt 40 2009 02 24 19 PM Rogue classification update initiated on Array XS 39 10 100 40 37 00 0f XIRRU i Sorted by Date Table Figure 41 Typical Table Events Note that at times tables may show only selected items For example you may have 9 Selected a particular Array Group in the Dashboard See About Dashboard Data on page 92 9 Clicked a button in a status bar For example click Q2 inthe Alarms Window to see all critical alarms The XMS Java Client Interface 57 e XIRRUS Management System 9 Clicked on a particular type of alarm in the Dashboard e Filtered the list by Searching for Events The method for restoring the table to show all entries varies Ifa table
289. es e Clear Today 08 49 Array is up and active Alarm Details x Clear Aug 18 2010 6 01 17 PM Figure 269 Dashboard Recent Alarms To see a complete list of Wi Fi network alarms use the web client Alarms page see Alarms on page 453 or the Java client Alarms Window see Alarms on page 107 e Alarm severity classifications Critical Red e Major Orange e Minor Gold Warning Yellow Clear Green The XMS Web Client 435 e XIRRUS Management System Stations The Stations sections summarize the number of stations associated to Arrays the proportion using 802 11a 802 11bg 802 11b or 802 11n list the most numerous station manufacturers for your current network environment and characterize the quality of those connections in terms of signal strength Station Count 25 000 Fal N r x ouo Mox AA IX 20 0 b Uf A IE gt M IE J v 15 000 M M V IN V V i 10 000 Y y 5 000 Online eoo o od odo odo oo ooooooooooososos 3400 2828228282222222222222222238 amp Y OG dim G A im mod d rl BASHAM ou d nl o ANA NNSSSSOS GCOS SON nnn aA AA 24 hours 12 hours 8 hours i hour Figure 270 Dashboard Station Count Three sections of the Dashboard describe stations 9 Station Count Details Top Station Manufacturers Details Station Connection Metrics Details
290. es e Management System XIRRUS DHCP Pool If you want to associate an internal DHCP pool to this SSID choose the pool from the pull down list An internal DHCP pool must be created before it can be assigned See DHCP Server on page 265 Station Limit Enter the maximum number of stations allowed on this SSID The default is 1792 This step is optional Note that the IAPs Global Settings window also has a station limit option Max Station Association per IAP If both station limits are set both will be enforced As soon as either limit is reached no new stations can associate until some other station has terminated its association Overall Traffic Unlimited Choose Unlimited if you do not want to place a restriction on the traffic for this SSID or enter a value in the Overall Traffic Packets Sec Limit field to force a traffic restriction Station Traffic Unlimited Choose Unlimited if you do not want to place a restriction on the traffic per station for this SSID or enter a value in the Station Traffic Packets Sec Limit field to force a traffic restriction Time Active These options can restrict access to specific days and or hours e Time Active Always Select to allow traffic at any time of day If this is not selected then specify the active period using the Time On and Time Off fields Active All Days Select to allow traffic on all days Limits by Day If Active All Days is not selected then this section is displayed
291. es 219 e XIRRUS Management System 9 Start from scratch expert only If you choose this option the Policy Details window will appear It will show exactly the same fields as it would if you chose to create the new policy by copying but they will all be blank Only expert users should choose this option since it is easier to enter settings that are not appropriate for your network this way Selecting the Columns Shown in a Policy Window Click the Columns button to change the information displayed for the policy list The Select Policy Attributes window will appear WPA1 false Internal ntt Select Policy Attributes x Select Policy Attributes to view Policy Name Iv Save Configuration D TKIP Enabled Iv AES Enabled D WPA Group Rekey Time Never r WPA Group Rekey Time Sec D PSK Authentication r WPA Preshared Key r EAP Authentication r Encryption Key 1 mj Encryption Key 2 D Encryption Key 3 r Encryption Key 4 r Default Key r Radius Mode Iv Array Mode r Primary Host Name B Primary IP Address r RADIUS Primary Port r Primary Shared Secret r Secondary Host Name nr Secondary IP Address r RADIUS Secondary Port ri Secondary Shared Secret D DANNI Timani Qan MAG Mantifiar r i 9 m Figure 153 Selecting the Attributes of a Policy Window This window allows you to check or uncheck boxes to define the columns that are displayed in the policy window For example under Security Policy if you check
292. es roe 1XR480411014422 10 100 54 55 Alis Cube Trap Receivers m Q NORTAAmay5 10 100 54 28 Licenses PP OG xms 5 0 v2 1 172 16 45 2 XMS_SQA_VLAB Suton Finite m XNMS 50 2 1001 172 116 492 XMS SQA VLAB Figure 283 Network Settings Page 458 The XMS Web Client e Management System XIRRUS You may use this page To Modify Rows Individually or choose To Modify Multiple Rows for bulk configuration this applies identical settings to the selected rows except for the IP Address which is used as a starting point for a range of addresses You may also choose To Export Network Settings and possibly To Import Network Settings after making changes to them About Using the Network Settings Page A number of basic operations are available on this page to allow you to customize it for your own use 9 Select Columns on page 442 9 Rearranging and Resizing Columns in a Table on page 443 9 Sorting on page 443 Exporting note that any time you click the Export button or use the Export A Settings link the old unedited values will be exported unless you have completed saving your edited values to the Arrays To Modify Rows Individually 1 Step 1 Select Arrays For each row that you wish to modify select the checkbox at the beginning of the row Click the checkbox in the header row to select all rows Click again to deselect all rows Click Next gt when the desired rows are selected 2 Step 2 Edit Network Settings Yo
293. eshing an Array go to Refreshing a Device on page 88 If the refresh process fails it may be necessary to delete the Array from the list then exit and restart the XMS client and allow XMS s discovery feature to discover the Array or reboot the Array so that it will announce itself to XMS using the Phone Home feature Rebooting an Array To reboot an Array select and then right click on the Array and choose Reboot Array from the pull down list When prompted click on the Yes button to reboot the selected Array or click on the No button to abort the request Confirm Reboot 1 Array x o Reboot the selected array No Figure 133 Rebooting an Array Be patient while the Array reboots The reboot process may take several minutes Locating an Array on a Map If this Array is assigned to a map then you may use this option to display that map See Adding Arrays to Maps on page 147 Managing a PoGE Injector From the Array window you may view the status of PoGE output ports that have been mapped to Arrays see Associate the Injector with an Array on page 212 You may also turn injector output ports on or off To display the PoGE Status column in the Arrays list click the Column Selector button E located at the upper right of the Array Throughput graph PoGE Status displays the status of injector ports connected to an Array Managing Your Wi Fi Arrays 187 e XIRRUS Management System On all mapped PoG
294. eth1 Upgrade Enable Interface Yes C No Reset Configuration Server Protocol C DHCP static BMS canes IP Address 172 100 100 122 About XMS Subnet Mask 255 255 0 0 Auto Negotiate Yes C No Duplex Full Half Figure 324 Changing Network Settings Note You may use one or both of the XMS Management Appliance s Ethernet ports If using both then one of the ports is typically reserved for management 9 Network Interfaces Settings for eth0 and eth1 Check that Enable Interface is set to Yes for each Ethernet port that you plan to use Auto Negotiate should normally be left enabled which is the default This will correctly set the Ethernet port s speed and duplex mode automatically in most cases For recommended IP addressing please see Initial Network Settings on page 504 9 General Network Settings The Hostname of the Appliance is set to xirrus xms by default Note that hostnames are not case sensitive Xirrus Arrays send traps to the 508 XMS Administration e Management System XIRRUS hostname Xirrus XMS to announce their presence on the network and speed discovery Thus if you change the Appliance s DNS Hostname you should create an alias in your network s DNS server to ensure that the Appliance is accessible using both the name Xirrus XMS and your new name If you have clicked the Static radio button under Network Interfaces Configuration Server Protocol you must enter the Default Gateway Addres
295. eyboard shortcuts Xirrus assumes no responsibility for misconfigured devices or networks caused by neglect or inexperience Action Shortcut Add new map view only Ctrl N Broadcast a message Ctrl G Close all windows Ctrl Shift O Close the currently active window Ctrl Shift C Deselect an object Ctrl Click Detach window Ctrl Shift T Discover a network or an Array Arrays Ctrl D SSIDs IAPs or stations view only Discover a network or an Array map view Ctrl C only Exit client interface Alt F4 Go back to the previous window Ctrl Shift B Go forward to the next window Ctrl Shift F Notifications setup from alarm or event Ctrl Shift A viewer Refresh the view F5 Relayout a map Ctrl R The XMS Java Client Interface 65 e XIRRUS Management System Action Shortcut Save a map layout Ctrl S Search event from the event viewer Ctrl F Select multiple entries in list or map Ctrl Click Select a range of entries in list or map Shift Click View About window Ctrl B View help F1 View row details in table from the Events or Alt D Syslog window 66 The XMS Java Client Interface Management System XIRRUS Discovering the Network XMS can discover authenticate and add Xirrus Wi Fi Arrays and Power over Gigabit Ethernet PoGE injectors to its database This discovery feature makes large scale Wi Fi Array deployments quick and easy This chapter
296. ffers much improved security this version is preferred by XMS Discovery will search for devices using SNMPv3 first When an Array is discovered using SNMPv3 then XMS uses that version for communication with the Array from then on When an Array or PoGE injector is discovered via SNMPv2 then XMS uses SNMPv2 to communicate with the device Injectors support SNMPv2 only SNMP v2 and v3 settings are shown in the SNMP section of the Discover Devices Window SNMPv2 Community Names SNMPv3 Users Figure 60 SNMP v2 and SNMP v3 Configuration XMS discovery has default SNMPv2 entries which match the factory default SNMP v2 settings in Arrays and PoGE injectors However for proper security on Discovering the Network 81 e XIRRUS Management System your Xirrus devices we STRONGLY recommend that you change these defaults on Xirrus devices by entering your own SNMPv3 user names and passwords and or SNMPv2 community strings Thus you must add those community names or user names passwords to XMS for discovery to find those devices NOTE Although XMS does not have any SNMPv3 usernames or passwords defined by default Xirrus Arrays do have default entries The Array s default read write username and password are xirrus rw the default read only username and password are xirrus ro To add an SNMPv3 User click the Add button under the right hand list as shown above The Add User dialog box appears Add User x Enter SNMPv3
297. fter running email the report See Email Report To on page 382 Download Report pdf xls csv Email Report XIRRUS XMS Reports Array Availability Time Span Day Sunday 04 10 2011 17 32 PDT to Monday 04 11 2011 17 32 PDT Aray Availability for All Arrays Sunday 04 10 2011 17 32 PDT to Monday 04 11 2011 17 32 PDT XN16520901140 10 100 54 26 O days O hrs 4 mins days 11 hrs 57 ming0 days O hrs 2 mm 987 4 Ksesvosooese o uoses puso eso ci aaya O o s pam ona 0 mind 1000 Figure 257 Array Availability Report 414 Managing Reports e Management System XIRRUS Table Details for the Array Availability Report The Array Availability report is generated as a table The results are organized by the following column headers ZA t Host Name The host name assigned to the Array IP Address The IP address assigned to the Array Total Down Time Shows the total time in minutes that this Array has been down within the time range specified for this report MTBF Mean Time Between Failures Shows the average length of time that elapsed between failures of the Array within the time range specified for this report shown in days hours minutes MTTR Mean Time To Repair Shows the average length of time that elapsed before functionality to the Array was restored following a failure within the time range specified for this report shown in days hours minutes Up Time This is the time
298. function under the following headings 9 Introduction Provides an overview of the product including its key features and benefits Xirrus Management System Products This chapter provides an overview of what you can expect when you install your Xirrus management product for the first time information you need to know if you want to make informed decisions when using the system It also provides instructions to help you complete a successful installation Getting Started with XMS Discusses starting stopping and managing the XMS server and client software Provides procedures for initial setup of XMS such as setting a network address and discovering the Wi Fi network 9 The XMS Java Client Interface Presents examples of the product s Java based client interface including the content and structure of its major components and includes detailed descriptions of navigation and management tools Introduction 3 e XIRRUS Management System Discovering the Network Provides instructions for discovering networks and Wi Fi Arrays and adding them to XMS Using the Dashboard Describes the features and use of the Dashboard in the Java client an at a glance overview of network security and performance Monitoring Your Network Discusses the tools provided in the Java client that allow you to monitor and manage any system events and alarms flagged by the system including syslog events network events alarms and auditin
299. fy Execute Delete Standard SSID 0 Eg gt X Total 1 Figure 191 List of SSID Policies The columns in this window show selected settings for the listed policies For information about changing the columns displayed see Selecting the Columns Shown in a Policy Window on page 220 Creating a New SSID Policy An SSID Service Set Identifier is a unique name shared among all devices in a wireless network to establish and maintain wireless connectivity SSIDs are also known as network names An SSID policy is created so that you can build a predefined list of SSIDs and manage your SSIDs more conveniently When an SSID policy is established all SSIDs contained within the policy are automatically recognized by any Arrays assigned to that policy To display the SSID Settings window and create a new SSID policy click on the Add Policy button in the SSID Policy window When the Add Policy window appears select Copy from a chosen Array recommended and choose a model Array or select Start from scratch as described in Adding a Policy on page 219 Click OK The policy details window appears The creation of different network names SSIDs allows system administrators to separate types of users with different requirements The following characteristics can be tied to an SSID Managing Configuration with Policies 287 e XIRRUS Management System 9 The wireless QoS priority desired for the SSID 9 The wir
300. g Security Managing Intrusions Discusses management of the security status of the network using the Java client including known and rogue APs and types of encryption in use Working with Maps Introduces you to the location RF contour map in the Java client and provides instructions for managing your maps and map layouts It also shows you how to prepare map background images Managing Your Wi Fi Arrays Provides instructions for managing discovered Arrays with the Java client and includes configuring wireless stations individual IAPs and SSIDs It also shows you how to view and assign properties to your Arrays Managing Configuration with Policies Shows you how to use the Java client to create and manage the configuration policies that are used by your Arrays and groups of Arrays to establish a uniform and effective method for administering security users and groups and other wireless network management criteria Managing Reports XMS generates detailed performance and status reports about the network all Arrays within the network individual IAPs contained Introduction e Management System XIRRUS within each Array and client stations This chapter provides instructions for reviewing and managing these reports in the web client The XMS Web Client Describes how to use the web client interface a fast alternative to the Java client including the Wi Fi network monitoring and configuration tools and XMS se
301. g all of the desired fields in the Services window for DNS either click on the Apply button to save this policy or click on one of the following buttons to configure more service policy options e NTP Configure the NTP server 9 NetFlow Configure the NetFlow collector System Log Syslog Configure the System Log server 9 Standby Configure the standby Array e Wi Fi Tags You may collect Wi Fi Tag information on Arrays for later use and analysis NTP This window enables or disables an NTP server and has fields for configuring the server The NTP server manages the time settings for your Arrays including synchronizing the Array clocks with a universal clock from the NTP server This ensures that System Log time stamping is maintained across all units Without an NTP server assigned no universal clock each Array will use its own internal clock and stamp times accordingly which may result in discrepancies D Services xj 7 DNS NTP and Time Zone umm Time Zone GMT 06 00 Central Time US and Canada NTP Auto Adjust Daylight Saving Time V H menos Enable NTP Server Yes C No J en NTP Primary Server Jimeinsidepsd NTP Secondary Server itime inside pisd CX standby WiFi Tags Apply Cancel Figure 172 NTP Settings 250 Managing Configuration with Policies e Management System XIRRUS NTP and Time Zone Settings Time Zone Select the desired Time Zone from the drop down list Auto Adjust Day
302. g the Fast Ethernet interface The Fast Ethernet interface provides wired network connectivity that runs at a maximum data transmission speed of 100 Mbps This port may only be used for managing the Array and will only bridge management traffic not data traffic 7 Network x Policy Details Policy Name standard Save Configuration Iv 10 100 Interface Settings 10 100 Enable Interface CCIM 10 100 Management On nterface ves No Gigabit 1 o 10 100 Auto Negotiate C yes C No 10 100 Duplex C ru C Half LIONE Gigabit 2 10 100 Speed 10 Megabit 100 Megabit 10 100 MTU Size 1500 Apply Cancel Figure 168 Network Settings 10 100 Fast Ethernet Policy Details 9 Policy Name Enter a meaningful name that describes this policy If you are modifying an existing policy this field is grayed out not editable If you are using a Managing Configuration with Policies 241 e XIRRUS Management System standard naming convention for all of your policies the name you enter here should conform to that convention 9 Save Configuration Check this box to ensure that any time this policy is applied to an Array the Array will save the updated configuration information to its flash memory If this box is left unchecked then when this policy is applied to Arrays the configuration changes will need to be saved manually or else they will be lost when the Arrays are rebooted Note that this checkbox does n
303. gabit uplink ports and a total of 16 IAPs providing a maximum wireless capacity of up to 4 8 Gbps which offers ample reserves for the high demands of current and future applications The results returned for all reports in this section are dependent on the reporting period you specify Throughput reports include 9 Wireless Traffic Shows wireless throughput statistics for Arrays 9 Wireless Errors Shows wireless error statistics for Arrays 9 Station Traffic Tx and Rx average or peak megabits per second for traffic that flows to or from all associated stations 9 Station Errors Provides wireless error statistics for stations Ethernet Traffic Shows Ethernet throughput statistics for Arrays 9 Ethernet Errors Shows Ethernet error statistics for Arrays 388 Managing Reports e Management System XIRRUS Wireless Traffic This report provides statistical data for wireless throughput based on the traffic flow achieved by each Wi Fi Array Figure 247 The graph at the top of the window displays wireless data summed over the selected Arrays for the selected time range A table shows throughput for each Array broken out by individual IAPs The information displayed in this window and in the graph is dependent on the selection criteria you specify summarized below Selection Description Criterion for details Group Include only Arrays that are members of the selected Array group Map Include only Arrays that are
304. ge warning you that all data and configuration information stored in the database will be deleted before it can be re initialized Click on the Yes button to proceed with the re initialization process or click on the No button to abort the process If you clicked on the Yes button and started the re initialization process the server console window displays the progress of the system operations that are completed You can review the full content of the console window by using the scroll bar When the database initialization process is completed a confirmation window is displayed Click on the OK button to close the window Repair Database This operation checks the internal indexing in the database and attempts to repair any problems Although this tool is available in XSMT you should only repair the database if it has been corrupted If the database is damaged it may not allow you to restore from a backup So if there is actual table corruption it needs to be repaired prior to restoring any backup Please contact Xirrus Customer Support before repairing the database To repair the database first shut down the server and then select Repair database from the Database menu You are presented with a message verifying that you wish to proceed Click Yes to proceed or click No to abort the process XMS Administration 533 e XIRRUS Management System When the database repair process is completed a confirmation window is displayed
305. ge 144 48 The XMS Java Client Interface e Management System XIRRUS Other Resource Windows Figure 35 shows an example of the Arrays window detached from the client interface for clarity From this window you can choose to view data about all Arrays displayed in the list or select specific Arrays and view the data associated with the selected Arrays only The data available to you in any resource window is determined by which window in the Tree you open Q Arrays O xj Edit ste Refresh Array Group All Arrays Graph Interval 1 Hour Array Status 2w gx B Array Throughput for Group All Arrays Mbps 14 25 14 30 14 35 14 40 14 45 14 50 14 55 15 00 Time Tx Rx Total 14 20 Zoom graph using mouse drag Restore by double clicking the graph MIMIC Array 3 5FW 2 Ali s Virtual SQA Lab 17216203 00 02 8d 00 00 52 3 5 Nov 26 2008 Build 0691 lt lt MIMIC_Array_3 5FW gt gt 3 Ali s Virtual SQA Lab 17216204 00 03 8d 00 00 52 3 5 Nov 26 2008 Build 0691 lt lt MIMIC_Array_3 5FW gt gt 4 Ali s Virtual SQA Lab 17216205 00 04 8d 00 00 52 3 5 Nov 26 2008 Build 0691 MIMIC Array 3 5FW 5 Al s Vittual SQA Lab 17216206 00 05 8d 00 00 52 3 5 Nov 26 2008 Build 0691 MIMIC Array 3 5FW 6 Ali s Virtual SQA Lab 172 1620 7 00 06 8d 00 00 52 3 5 Nov 26 2008 Build 0691 MIMIC Array 3 5FW 7 Ali s Virtual SQA Lab
306. ge 219 9 From the Arrays window you may select which policies to read from the Array and you may edit them later following the instructions for each policy type in this chapter See Create Policies from Array on page 178 for details Managing Configuration with Policies 217 e XIRRUS Management System Using Policy Windows Policy windows are active windows providing buttons that allow you to add a new policy modify or delete an existing policy or change the columns displayed on the policy window In addition most policy windows provide a convenient method for executing a chosen policy on multiple Arrays within the network To avoid repetition Figure 151 shows an example of a standard policy window highlighting the active areas of the window In this example the Security Policy window is used Modify a Policy Delete a Policy Refresh the List Columns Displayed Add a New Policy Internal External D Execute Policy x Select the list of Arrays for executing this policy Execute Move Arrays here to execute Figure 151 Policy Window Executing a Policy 218 Managing Configuration with Policies e Management System XIRRUS Adding a Policy To create a new policy in any policy window click the Add Policy button Most of the Add Policy windows will offer you a choice between creating the policy from scratch or by copying the configuration from a model Array
307. ger Location QA XN0402101F536 070YX 5CBFP W8EGX RFJQQ 50 RF Analysis Manager RF Security Manager 802 11n ArrayOS 5 0 RF Performance Manager Location Support XN0803091BF32 13JNJ EY2TJ 76CR3 QXLJ5 50 RF Analysis Manager RF Security Manager 802 11n Pending Figure 134 Array License Management Deployed Licenses The Features column shows the advanced features that are enabled by this license such as the RF Performance Manager RPM RF Security Manager RSM RF Analysis Manager RAM or IEEE 802 11n operation The following main operations are available for managing licenses 9 Viewing deployed licenses on discovered Arrays described above 9 Exporting Array Licenses 9 Importing Array Licenses 190 Managing Your Wi Fi Arrays Management System 9 Editing Array Licenses Managing Pending Array Licenses a If you change a license directly using the CLI or WMI on an Array whose TS license status is Deployed XMS will detect the change and display the changed license in the list of deployed licenses However if XMS has a license pending for that Array that license will be deployed as soon as XMS is able to do so replacing the license in the Array Exporting Array Licenses At times you may wish to export Array licenses to a file For example you may want a consolidated record of some or all of your licenses or Xirrus Customer Service may request this information to resolve a support issue
308. ght to return the layout to its original appearance In general a count is faded if its value is zero For example if no Arrays are down in the Array Status section then the count and its icon are faded This helps present the at a glance health of the Wi Fi network by eliminating the display of red symbols when there are no devices down About Dashboard Data The Dashboard displays data for all Arrays in the XMS Managed Network The Dashboard is automatically refreshed at frequent intervals you do not have to refresh explicitly The time of the most recent update is shown towards the upper left as seen in Figure 267 Note that some values displayed in the Dashboard may lag with respect to actual current values items in the XMS database are polled updated at differing intervals When the Dashboard is refreshed it simply picks up the current values in the database The XMS server does not poll Arrays to update all status or statistics in the database specifically for a Dashboard refresh Each data item in the database will be refreshed at whatever rate is defined for it For more details on the polling rate and how to change it please see Web Client Polling Settings on page 516 or XSMT Advanced Settings on page 537 432 The XMS Web Client e Management System XIRRUS The Dashboard refreshes data at the following rates by default Data for the Dashboard is updated at least every two minutes e Alarms occur in
309. graphics for example floor plans with or without spot colors are considered most suitable for the GIF file format which is designed to minimize the image file size and electronic transfer time 9 PNG Portable Network Graphics This format is an alternative to the GIF format but supports 24 bit images with no loss compression and produces background transparency without jagged edges However some older Web browsers do not support this format 9 JPEG Joint Photographic Experts Group This format is commonly used to display photographs and other continuous tone images Unlike GIF images the JPEG format retains all color information in an RGB graphic but compresses the file size by selectively discarding data without serious degradation to the quality of the original image Physical Size The physical size of the image is not critical because XMS scales the image automatically However the more scaling that is required the greater the loss in quality We recommend a physical size of between 10 inches and 14 inches wide while maintaining the aspect ratio of the original image when scaled the vertical axis will retain the correct proportion with the horizontal axis Resolution The preferred resolution for your map background images is 72 dpi standard for online viewing A higher resolution will generate a smoother image but the file size will be increased relative to the resolution you choose Working with Maps 143 e
310. gs Gigabit1 Enable Interface Yes No Gigabit Management On Interface Yes C No o Gigabit Auto Negotiate ves C No lE Gigabit1 Duplex Ful Half Gigabit1 Speed 100 Megabt Gigabit Gigabit1 MTU Size 1504 a CAC AC Gigabit Port Mode Active backup gig 1 2 fail over to each other X A each other Gigabit 2 oad balance traffic between Gig1 amp Gig2 Bridge traffic between Gig1 amp Gig2 irror traffic on both Gig1 amp Gig2 ransmit traffic on both Gigi amp Gig2 Apply Figure 169 Network Settings Gigabit 1 Gigabit Interface 1 Settings 9 This policy cannot change IP address settings This avoids problems with losing contact with the Array and with creating duplicate address issues Gigabit 1 Enable Interface Choose Yes to enable the Gigabit 1 interface or choose No to disable the interface The default is Yes 9 Gigabit 1 Management On Interface Choose Yes to enable Array management with this interface or choose No to deny management privileges The default is Yes 9 Gigabit 1 Auto Negotiate This feature allows the Arrays to negotiate the best transmission rates automatically Choose Yes to enable this feature or choose No to disable this feature the default is Yes If you disable the Auto Negotiate feature you must define the Duplex and Speed options manually e Gigabit 1 Duplex Full duplex refers to the transmission of data in two directions simulta
311. gure 227 Web Page Redirect Policy Details Policy Name Enter a meaningful name that describes this policy If you are modifying an existing policy this field is grayed out not editable If you are using a standard naming convention for all of your policies the name you enter here should conform to that convention Save Configuration Check this box to ensure that any time this policy is applied to an Array the Array will save the updated configuration information to its flash memory If this box is left unchecked then when this policy is applied to Arrays the configuration changes will need to be saved manually or else they will be lost when the Arrays are rebooted Note that this checkbox does not actually apply the policy to any Arrays To apply the policy see Using Policy Windows on page 218 Managing Configuration with Policies 359 e XIRRUS Management System The remainder of the WPR Policy window has three main sections 9 File Details Downloads the custom WPR files onto the XMS server so that they will be available for transfer to Arrays when you execute the policy 9 Configuration File Details Allows you to define the custom WPR files to be uploaded to the Arrays 9 Custom Login Details Specifies the login parameters necessary for authentication on Arrays so that the Arrays will permit the XMS server to proceed with uploading the custom WPR files File Details This section contains a button for downl
312. gure 68 All sections of the Dashboard are updated to contain only data related to the selected Arrays except for Alarms which always shows all alarms Other windows such as The Arrays Window and The IAPs Window will also display only data related to the selected group These windows will name the group for which data is displayed For example the two windows just mentioned will show the selected group in the title of the Throughput chart Select All Arrays on the Dashboard to return to showing data for the entire managed network The Dashboard is automatically refreshed at frequent intervals you do not have to refresh explicitly Note that some values displayed in the Dashboard may lag with respect to actual current values items in the XMS database are polled updated at differing intervals When the Dashboard is refreshed it simply picks up the current values in the database The XMS server does not poll all status or 92 Using the Dashboard e Management System XIRRUS statistics in the database specifically for a Dashboard refresh Each data item in the database will be refreshed at whatever rate is defined for it For more details on the polling rate and how to change it please see Web Client Polling Settings on page 516 or XSMT Advanced Settings on page 537 The Dashboard refreshes data at the following rates by default 9 Performance data is updated on the Dashboard every 30 seconds This is true for Arrays runn
313. h as described in Adding a Policy on page 219 Click OK The policy details window is displayed which is divided into four primary areas 9 Security The latest and most effective wireless security standards including WPA with 802 11i AES Advanced Encryption Standard are implemented with each Wi Fi Array using this policy This area of the policy defines the name of the policy allows you to enable or disable WPA and WEP and define the parameters for a WPA or WEP enabled policy 270 Managing Configuration with Policies e Management System XIRRUS 9 RADIUS The use of an embedded RADIUS server or 802 1X with an external RADIUS server ensures user authentication multiple Arrays can authenticate to XMS ensuring only authorized Arrays become part of the wireless network This area of the policy allows you to define either internal embedded or external RADIUS accounting set up the server parameters for an external RADIUS server or establish a list of users for the internal RADIUS server 9 MAC Access List An access control list based on MAC address can be assigned to restrict user access This area of the policy allows you to set up the type of MAC access control list disable allow or deny and add or remove users from the list You can also view the list and its contents without making changes 9 Admin RADIUS The Admin RADIUS policy allows you to set up authentication of Array administrators via RADIUS rather than us
314. h 19 2011 9 20 23 PM h cel pdf csv e Delete March 17 2011 5 44 48 PM html Excel pdf csv New Report Figure 239 Archived Reports List Viewing a Report You may select a report for viewing from two places on the My Reports page Click the desired report s View link in the Last Run column Figure 240 Click the desired report s Archive link in the Actions column to choose the report with the desired time stamp Click the html link to view the report as shown in Figure 239 When you create and run a report from the New Report page it is automatically displayed when it is complete To view the report again at a later time go to the My Reports page to view the report in one of the two ways just described My Reports e New Report xX IRRUS Customize XMS Reports Array Availability Time Span Hour Saturday 03 19 2011 21 28 PDT to Saturday 03 19 2011 22 28 PDT Array Availability for All Arrays M Sans 21 28 POT te Soturey 22 28 PDT I UEIIUMIGIETY TT pean mond oN beseveenen 0 days 1 hrs O ming days 0 hrs 0 ming ie Figure 240 Viewing a Report Managing Reports 375 e XIRRUS Management System The selected report is displayed in the web client Some types of report only have text Figure 240 while others may include charts Figure 241 Information included in the report is determined by the Selection Criteria that you set up when creating the report The logo displayed at the
315. h capacity wireless access points utilizing multiple channels specifically designed for the Enterprise market See also Array XN16 XN12 XN8 XN4 XS16 XS12 XS8 XS4 XS 3900 XS 3700 XS 3500 A family of Xirrus proprietary high capacity wireless access points utilizing Gigabit LAN speeds and multiple wireless channels specifically designed for the Enterprise market The XN16 X916 and XS 3900 Wi Fi Arrays have 16 Integrated Access Points IAPs The XN12 and XS12 Wi Fi Arrays have 12 IAPs the XN8 X58 and XS 3700 Wi Fi Arrays have 8 IAPs and the XN4 XS4 and XS 3500 Wi Fi Arrays have 4 IAPs 552 Glossary of Terms Management System Index Numerics 10 100 Fast Ethernet 239 241 4 9 GHz Public Safety Band 326 802 11a settings 317 331 802 11b g settings 317 333 802 11h Beacon Support 326 802 11n bonding 313 802 11n settings 317 A abg2 abgn2 self monitoring loopback mode 323 about images 39 about this guide 3 organization 3 active backup between Gigabit ports 245 adding a map 144 adding Arrays 87 adding networks 78 Address Resolution Protocol ARP 324 Admin 229 admin accounts 236 admin RADIUS 271 284 admin RADIUS account if using Console port 285 administration broadcast message 500 country of operation 496 administrator Windows login 25 Advanced Feature Sets 189 advanced functionality 10 AeroScout tags 257 AES 273 aggregate traffic between Gigabit ports 245 alarm window SNMP trap 107 alarms 107
316. hanges as well Ga Resize Move f SS XN4 Figure 101 Resizing and Moving Arrays Working with Maps 149 e XIRRUS Management System Orienting Arrays After adding an Array you must rotate it on the map to match the actual orientation of its abg n 2 radio This is critical for accurately calculating and displaying locations of stations This also allows the heat contours to be correctly displayed on the map To rotate an Array on the map use the following procedure 1 Click the Rotate Array button e 2 Clickto select the desired Array on the map 3 Click the red Orientation Line on the selected Array and drag it to the desired angle Note that the Orientation Line gets longer when you drag it and the new angle is displayed as you rotate The angle is measured from the horizontal x axis in the same way as on a graph The angle may be changed in increments of 22 5 degrees for example the angle may be increased in four steps going from 0 to 90 degrees Click and drag Orientation Orientation Line Angle is displayed Figure 102 Rotating an Array 4 Clickthe Save Map button to save your work Hl 150 Working with Maps e Management System XIRRUS Entering Environment Settings Environment settings customize your map for the type of construction in the area represented by the map XMS uses these values to determine the degree of RF signal attenuation at your site This is required fo
317. hat version for communication with the Array from then on When an Array or PoGE injector is discovered via SNMPv2 then XMS uses SNMPv2 to communicate with the device Injectors support SNMPv2 only XMS discovery has default SNMPv2 entries which match the factory default SNMP v2 settings in Arrays and PoGE injectors However for proper security on your Xirrus devices we STRONGLY recommend that you change these defaults on Xirrus devices by entering your own SNMPv3 user names and passwords and or SNMPv2 community strings Thus you must add those community names or user names passwords to XMS for discovery to find those devices NOTE Although XMS does not have any SNMPv3 usernames or passwords defined by default Xirrus Arrays do have default entries The Array s default read write username and password are xirrus rw the default read only username and password are xirrus ro To add an SNMPv3 User click the Configure button near the top of the window then select Add Devices on the left Click the SNMPv3 Users link on the left when it appears Figure 305 Home Enter a new SNMP V3 user and click the Add button Network Settings User Name KMS SNMPv3 Radio Settings Authentication Password eeeeeeeeeeee Advanced Config Privacy Password TTE PoGE Add Devices Authentication Type SHA z SNMPv2 Settings Privacy Type pes Username Authentication Type mwme SNMPv3 Users SSH Users Add Networks Trap Receivers
318. hat you have an acceptable level of security for your network The encryption type is selected per SSID see Security Type in SSID List Details on page 289 Xirrus recommends either WPA or WPA2 The only time that you might create a policy with all security options disabled is if the clients assigned to that policy are required to use a VPN connection through a secure SSH utility like PuTTy WEP Details If WEP is enabled enter the following information for up to four encryption keys Mode ASCII Hex Choose the key mode either ASCII or Hex 274 Managing Configuration with Policies e Management System XIRRUS Length WEP 64 WEP 128 Choose the desired key length either 64 or 128 Encryption Key Enter an encryption key of the length and mode selected above e WEP 64 10 hex 5 ASCII characters for 40 bits e WEP 128 26 hex 13 ASCII characters for 104 bits Hexadecimal characters are defined as ABCDEF and 0 9 For ASCII mode do not use special characters Verify Key Retype your Encryption Key in this field to verify that you typed it correctly Optional Repeat the instructions above to create and verify up to 4 WEP encryption keys in the Encryption Key 2 3 and 4 sections Default Key From the pull down list choose which of the configured keys you want to assign as the default key either Key 1 Key 2 Key 3 or Key 4 After completing all of the desired fields in the Security window either click on
319. he following graphic shows the location of LEDs on an XN16 Wi Fi Array which has a total of 16 IAPs Ethernet Activity LEDs 4 i 4 Status LED Soo of No d IAP LEDs x16 Figure 206 LED Locations XN16 318 Managing Configuration with Policies e Management System XIRRUS Global RF Settings Global RF settings refer to 802 11a 802 11b and 802 11g wireless settings that are applied to all IAPs on an Array This window contains a field for defining the name of the policy and fields for configuring global RF settings B RF ks 2 502 Iv United States Enable WLAN Management No C Yes Auto Cell Size Period seconds bh go Auto Cell Size Overlap o Auto Channel Configuration Mode C On Array Power up Disabled Auto Channel Configure on Time Global Tx Power B Short Retry Limit 7 Long Retry Limit M 4 Beacon interval 100 zi Broadcast Rates C Optimized Standard DTIM Period 1 Station Reauthentication Period Seconds 5 4 Station Timeout Period Seconds 300 zl Maximum Stations Association Per IAP 4 zl Maximum Phones Per IAP 16 Radio Assurance Mode Disabled WLAN ARP Filter Mode Disabled Block Intra Station Traffic C No Yes zl Figure 207 Global RF Settings Policy Details 9 Policy Name Enter a meaningful name that describes this policy If you are modifying an existing policy this field is grayed out not editable If you
320. he node either double click on Configuration and then on Policies or click on the symbol before these tree nodes From the expanded tree click on any policy type to generate a window that lists all policies for the type of policy you selected Policies are listed in table form displaying columns for a default group of the policy s settings otherwise the general structure of all policy windows is the same To change the columns displayed for a policy window go to Selecting the Columns Shown in a Policy Window on page 220 An Easy Way to Work With Policies XMS has a feature that allows you to pull or read the existing configuration of any Array and create policies that mirror that configuration These policies may then be applied to other Arrays in the Managed Network to easily configure them and ensure a uniform configuration across the Wi Fi network 216 Managing Configuration with Policies e Management System XIRRUS You may even select the option to automatically create a Global Policy that groups together all of the individual policies pulled from the example Array Then you may apply the global policy to an Array to configure it to match the example Array in one step There are two ways to create a policy based on the configuration of an Array 9 From a policy window click Add Policy An Add Policy dialog box appears allowing you to create a new policy based on one of the listed Arrays See Adding a Policy on pa
321. he default is 1813 Accounting Secondary Shared Secret Verify Secret If using a secondary accounting server enter the shared secret that it will be using then re enter the shared secret to verify that you typed it correctly If you do not want to set up a list of users for an internal RADIUS server and after completing all of the desired fields for the external RADIUS server either click on the Apply button to save this policy or click on one of the following buttons to configure more security policy options 9 MAC Access List Configure an access control list based on MAC addresses 9 Admin RADIUS Set up Array administrator authentication via external RADIUS servers Internal RADIUS Users Details This section is normally only applicable if you chose Internal when defining the type of RADIUS server However you can still set up a list of users for an internal RADIUS server and use this option as a backup if your external server becomes unavailable Internal RADIUS server users are defined by their name password and associated SSID Managing Configuration with Policies 279 e XIRRUS Management System RADIUS Management Radius Mode internal C External N Ay Security External RADIUS Internal RADIUS Users _New Username _usercroup__ ssm qietwork Name Adr User Group StudentGroup SSID Network Name students Add Cancel Figure 186 Adding Internal RADIUS Users To create
322. he encryption type the QoS priority and the VLAN ID You may right click on an SSID to display a menu that allows you to perform the following operations 9 Web Management opens the Array s Web Management Interface See Connecting to an SSID s Array on page 208 9 Configure Opens an SSID Settings window to allow you to apply configuration changes to the SSID See Configuring the SSID Settings on page 208 Managing Your Wi Fi Arrays 207 e XIRRUS Management System e Alarms and Events Shows a count of events and alerts for this SSID See Viewing Events and Alerts SSIDs on page 210 For specific information about SSIDs and how they are configured refer to the Wi Fi Array User s Guide part number 800 0006 001 Sorting the List of SSIDs To change how the table is sorted click in any column header to define that header as the sort criteria In addition you can choose to have the results displayed in ascending or descending order represented by the appropriate arrow icon To do this simply click in the same header again to toggle between ascending and descending order Connecting to an SSID s Array To connect to an Array that uses a specific SSID use either of the following procedures e Right click on an SSID in the SSIDs window then choose Web Management from the pull down list The Array s Web Management Interface login window is displayed in a new browser window not part of the XMS cli
323. he radio is using The radio s current Channel number For IEEE 802 11n radios the Bonded Channel for this radio For IEEE 802 11n radios the Bond Mode that was set for this radio The radio s current Cell Size The radio s current Tx dBm transmit power setting The radio s current Rx dBm receive threshold setting The radio s current Antenna setting internal or external 448 The XMS Web Client e Management System XIRRUS Stations The web client Stations page lists the stations that are associated to all Arrays within your managed network This is a display only page but values may be exported The following sections describe the Stations page 9 About Using the Stations Page The Stations List Select Columns Expo Dashboard Showing 1 to 25 of 21475 Rows 2 Arrays Station Mac IPAddress Media Type Netbios Name Array Hostname AssocTime RSSI dBm Radios 02 01 28 21 00 01 200 15 1 2 802 11n 2 4GHz XMS 5 0 V2 1 0 02 00 16 02 01 28 21 00 02 200 15 1 3 802 11n 5GHz XMS 5 0 V2 1 0 0200 19 Rogues 02 01 28 21 00 03 200 15 1 4 802 11n 5GHz XMS 5 0 V2 1 0 02 00 20 Alarms 02 01 28 21 00 04 200 15 1 5 802 11n 5GHz XMS 5 0 V2 1 0 0200 19 Events 02 01 28 21 00 05 200 15 1 6 802 11n 2 4GHz XMS 5 0 V2 1 0 02 00 15 Figure 279 Stations Page About Using the Stations Page A number of basic operations are available on the Stations page to allow you to customize it for your own use Select C
324. he start time and end time of the period that it covers Select Time Span to specify a period ending at the report s run time For example if you select Last Hour then the report will include data from the 60 minutes prior to the time when the report runs You may select any entry in the drop down list for example Last 24 Hours or Last 30 Days You should use the Time Span option when scheduling reports because the Specific Date Range option will just generate the same report over and over again Select Specific Date Range to specify a start time and end time for the data to be included in the report Click in the Date From field and then click the desired starting date using the drop down calendar Click in the Time From field and the Choose Time drop down appears Set the desired starting time by dragging the sliders for Hour and Minute Set the Date to and Time to fields in the same way 386 Managing Reports e Management System XIRRUS Customize This page allows you to change the appearance of the report by modifying its header Use this page to add your custom logo to the header To create a new report click the Reports button at the top of the web client window then click the Customize link The Customize Report Header page appears Figure 246 Help Logout e Monitor ZX configure Qu 3 gt Settings Customize Report Header Select which image to display in the header of generated reports You can use the
325. he status of discovery for each network The devices that are shown are the only ones that are known to XMS and thus they are the only ones that may be managed by it 2 To add SNMPv2 Community Names or SNMPv3 Users to match the strings being used by your Arrays click the appropriate Add button For XMS to discover and manage a device the device must have SNMP v2 and or v3 enabled The device s SNMPv2 community string or SNMPv3 read write authentication settings must match one of those defined here for discovery 68 Discovering the Network Management System Discovery s default SNMPv2 community name xirrus allows XMS to discover new Arrays that still have default SNMP settings SNMPv2 is enabled with its Read Write Community String set to xirrus Also each Array s Trap Host 1 IP Address is set to the hostname Xirrus XMS by default for the Phone Home feature 3 To add networks for discovery click the Add button under Search Networks Enter the subnet s IP Address and Subnet mask Click Apply Discovery begins soon after adding a network Be careful to specify the subnet accurately to avoid creating excess traffic by discovering a needlessly large network To add individual Arrays or power supplies for discovery click the Add button under Discovered Devices Enter the device IP Address and click xi
326. her than having to map users to a specific SSID Groups provide flexible control over user privileges without the need to create large numbers of SSIDs A user group also allows you to directly define a uniform set of parameter values to be applied to selected users rather than via RADIUS accounts For example you might define the user group Students and set its VLAN security parameters and traffic limits When a new user is created you can apply all of these settings just by making the user a member of the group We recommend that you define the settings that you will be using before proceeding to create the User Group policy For example a User Group may specify a particular VLAN DHCP pool filter list and or roaming layer Those should be configured before defining a User Group that will use them Managing Configuration with Policies 301 e XIRRUS Management System A User Group policy is created so that you can build a predefined list of User Groups and manage User Groups more conveniently To display the User Group Settings window and create a new User Group policy click the Add Policy button in the User Group Policy window When the Add Policy window appears select Copy from a chosen Array recommended and choose a model Array or select Start from scratch as described in Adding a Policy on page 219 Click OK The policy details window appears NOTE The User Group policy defines a set of User Groups When the p
327. hoose No to disable it Click the Add button to add this DHCP pool to the policy and return to the policy window Saving Your DHCP Server Policy When you have configured all of your DHCP policy settings click on the Apply button in the DHCP Server window to save the new policy Managing Configuration with Policies 269 e XIRRUS Management System Security From the Configuration Policies node in the tree click on Security to display the Security window This window contains a list of all security policies currently available with tools to manage these policies Total 1 Columns Refresh Policy Name TKIP Enabled Radius Mode Accounting MAC Access List Enable Admin Radius Modify Execute Delete security Lab XS8 true Internal Off 0 gt x n Done Figure 183 List of Security Policies The columns in this window show selected settings for the listed policies For information about changing the columns displayed see Selecting the Columns Shown in a Policy Window on page 220 Creating A New Security Policy A security policy is created so that you can define how your Arrays control administrator and user access and prevent intrusion into the network by unauthorized users To create a new security policy click on the Add Policy button in the Security Policy window When the Add Policy window appears select Copy from a chosen Array recommended and choose a model Array or select Start from scratc
328. hows a count of ad hoc nodes detected by Array APs Ad hoc networks can disrupt the performance of your Wi Fi network by contributing additional RF interference to the environment On my channels This is the number of detected rogues that are on channels that are the same as or adjacent to the channels used by Array radios that are in operation regardless of the classification of the rogues The XMS Web Client 439 e XIRRUS Management System 9 Spoofing my SSIDs This is the number of detected rogues that are using the same SSIDs as your Wi Fi network regardless of the classification of the rogues 440 The XMS Web Client e Management System XIRRUS Arrays The web client Arrays page lists all of the Arrays being managed by XMS and allows you to perform selected management functions on them You may reboot Arrays gather diagnostic logs or remove Arrays from the XMS database The following sections describe the Arrays page 9 About Using the Arrays Page 9 The Arrays List 9 The Arrays Toolbar To perform bulk configuration on Arrays please see Network Settings on page 458 and Radio Settings on page 466 Help Logout w e Monitor A configure 9 Reports g Setting Reboot Pull Diagnostic Logs Delete Xirrus Support Select Columns Export Showing 1 to 25 of 816 Rows 25 Z 1 2345 gt gt spacium n Hostname Stations IP Address Location Model Software Version Serial Numbe
329. http 192 168 10 40 9090 Also note that if you selected a different port for accessing the XMS server during installation of the XMS server software then you must append that port number to the URL instead of 9090 Why will XMS not discover an Array even though the Array is connected to the network and functioning correctly SNMPv2 or v3 Simple Network Management Protocol must be enabled on the Array Log in to the Array and check the SNMP settings If the problem persists check that the Array is on the same subnet as the XMS server For discovery of a device Array or PoGE injector the device must have SNMP enabled and its community string must match one of the strings listed in the Discovery window See SNMPv2 And SNMPv3 Settings on page 482 The default SNMPv2 community string in XMS matches the Array default value When an Array boots up it sends an SNMP trap to the XMS server s default hostname xirrus xms XMS can then add it to its discovered devices list This Phone Home feature requires DNS to resolve the hostname xirrus xms correctly Thus if you change the host name of the XMS server you must configure DNS to resolve xirrus xms to the actual name of the XMS server host 542 Technical Support e Management System XIRRUS O XMS discovered my Array using SNMPv3 and the Array has connectivity and is running OK but XMS reports that the Array is down A To use SNMPv3 successfully system time must be se
330. i pour un tel usage Foudre branchez pas ou ne d branchez pas de c bles en cas de foudre Disjoncteur N utilisez pas l unit XM 3300 XM 3320 XM 3340 XM 3360 et ne L unit XM 3300 XM 3320 XM 3340 XM 3360 d pend de l installation du b timent pour ce qui est de la protection contre les surintensit s Assurez vous qu un fusible ou qu un disjoncteur de 120 Vca 15 A tats Unis ou de 240 Vca 10 A International maximum est utilis sur tous les conducteurs de courant Hardware Warranty Agreement NOTE This agreement applies to the XM 3300 XM 3320 XM 3340 XM 3360 Management Appliance PLEASE READ THIS CAREFULLY BEFORE USING THIS PRODUCT BY USING THIS PRODUCT YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD ALL THE TERMS AND CONDITIONS OF THIS AGREEMENT AND THAT YOU ARE CONSENTING TO BE BOUND BY THIS AGREEMENT IF YOU DO NOT AGREE TO ALL OF THE TERMS OF THIS AGREEMENT RETURN THE UNUSED PRODUCT TO THE PLACE OF PURCHASE FOR A FULL REFUND LIMITED WARRANTY Xirrus warrants that for a period of one year from the date of purchase by the original purchaser Customer i the Xirrus Equipment will be free of defects in materials and workmanship under normal use and ii the Equipment substantially conforms to its published specifications Except for the foregoing the Equipment is provided AS IS This limited warranty extends only to Customer as the original purchaser Customer s exclusive remedy and the entire l
331. iability of Xirrus and its suppliers under this limited warranty will be at Xirrus option repair replacement or refund of the Equipment if reported or upon request returned to the party supplying the Equipment to Customer In no event does Xirrus warrant that the Equipment is error free or that Customer will be able to operate the Equipment without problems or interruptions This warranty does not apply if the Equipment a has been altered except by Xirrus b has not been installed operated repaired or maintained in accordance with instructions supplied by Xirrus c has been subjected to abnormal physical or electrical stress misuse negligence or accident or d is used in ultra hazardous activities DISCLAIMER EXCEPT AS SPECIFIED IN THIS WARRANTY ALL EXPRESS OR IMPLIED CONDITIONS REPRESENTATIONS AND WARRANTIES INCLUDING WITHOUT LIMITATION ANY IMPLIED WARRANTY OF MERCHANTABILITY FITNESS FOR A PARTICULAR PURPOSE NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING USAGE OR TRADE PRACTICE ARE HEREBY EXCLUDED TO THE EXTENT ALLOWED BY APPLICABLE LAW IN NO EVENT WILL XIRRUS OR ITS SUPPLIERS BE LIABLE FOR ANY LOST REVENUE PROFIT OR DATA OR FOR SPECIAL INDIRECT CONSEQUENTIAL INCIDENTAL OR PUNITIVE DAMAGES HOWEVER CAUSED AND REGARDLESS OF THE THEORY OF LIABILITY ARISING OUT OF THE USE OF OR INABILITY TO USE THE EQUIPMENT EVEN IF XIRRUS OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES IN NO EVE
332. iaciodetaneeioniop idee abite e e nente reus 9 INO Fiat ET a a EEA E ERES EIE N E A can mae reed 9 security Management 2 5 ttr i HERE imss kasten A EHE E 9 Powerful Graphical Interface a u tenir eee eiie 9 Performance MODIOFIg 2 cisco etie Goto etn tin pee ss dacagiosssanete 10 OV anced Punchonalibys sanie cusan teorie m a E RED HER 10 Centralized Configuration Management 2 3 tH E HR 10 Network Monitoring and Reporting aee oiim aiment heit 11 e XIRRUS Management System Xirrus Management System Products ascen ibiais 13 XM 3300 XM 3320 XM 3340 XIMES960 11 aine i Rae cas obs Ph ten 13 About th XNIE39820 XM 9940 and XM 3360 aiian mir ei eminens 14 About the XM 3300 usarse eritieonernder nasi rati rere FO E RE HD EE 15 Peleo r ed se c t dup qu 16 XA 3300 CC System Requirements sissies issii rsisi 16 Installing th X 4 3900 C C Application te treten etre eite ethics 17 Getting Started with XMS assnzitinaciin tnu iesu a utn RES eb ER Rn bera inui 21 AMS Port Requirements zo oasi o nisoe e n mum cn DENEA E ENERE 22 Starting and Managing the XMS Server aeter tinens 25 Initial Server Setup for Linux based Management Appliances 28 Starting the XMS Client Interface nectit peers creer ipta riii 29 XMS Java Client Minimum System Requirements 29 Jaya Glientzcossqepe bate ot e deu eie pen m i feed n Le aen 30 Licensing the AMO SEVER ceno neminem ma Ha Pa RUE Ha
333. ibes this policy If you are modifying an existing policy this field is grayed out not editable If you are using a standard naming convention for all of your policies the name you enter here should conform to that convention 9 Save Configuration Check this box to ensure that any time this policy is applied to an Array the Array will save the updated configuration information to its flash memory If this box is left unchecked then when this policy is applied to Arrays the configuration changes will need to be saved manually or else they will be lost when the Arrays are rebooted Note that this checkbox does not actually apply the policy to any Arrays To apply the policy see Using Policy Windows on page 218 SSID List Details To add a new SSID click on the d button to display the SSID List window x sso E SSD State C Enatie G Dmabie Broadcast 5S0 C Enable C Disable COS Prorty E MAND pei z VLAN Number f Band Associaton po g Web Page Redrect WPR C Enable Owstie Roaming Layer Con C 2e CE SSD Fier Unt DHCP Poot rece zl Station Unt m 4 OveaTraficusmted F Staten Traffic Unimted F Tire Active Aways F xi Da j a Figure 193 SSID List Entry Managing Configuration with Policies 289 e XIRRUS Management System e SSID and SSID State Enter a new SSID definition in this field SSID definitions are case sensitive and can contain up to 32 alphanumeric characters do not include spaces
334. ical Alarm The Alarms window is displayed when you click on the Alarms node in the Tree which appears under the Monitor parent node Information on this window is automatically refreshed every 20 seconds Alarm Status Summary Select Array Group All Arrays Alarm Status CE o Wo do A v f Clear Delete Status Failure Object Time Date Message Array XS 39 10 100 40 37 IP 10 100 40 3 14 24 19 PST 12 28 2009 Array is up and active Array XS 39 10 100 40 37 IP 10 100 A 14 24 19 PST 12 28 2009 Node clear No failures on this node Array Robin XS16 IP 10 100 40 32 Ol 14 23 51 PST 12 28 2009 Node clear No failures on this node IP 10 100 40 90 00 0f 7d e0 00 07 17 23 14 PST 12 04 2009 Node failure This probably means one or more interfaces have failed IP 10 100 40 90 00 0f7d e0 00 07 Statu 17 23 14 PST 12 04 2009 XPS down Severity Alarm List Figure 75 Alarms Window The Alarms window is divided into two sections e Alarm Status A count of alarms by severity allows you to select the alarms to be listed e Alarm List A list of alarms Monitoring Your Network 107 e XIRRUS Management System Alarm Status The buttons at the top of the window summarize alarms by showing the count at each severity level The buttons also allow you to select the alarms to be shown in the Alarm list based on severity Figure 76 Hover the mouse over a butto
335. ications Total T cnc M major 3 Minor orum Warning 0 Figure 73 Dashboard Alarms Section Details e Alarm Classifications This list shows alarms that have been sent to XMS The total count of alarms is shown along with the total at each alarm level Critical Red e Major Orange e Minor Gold 102 Using the Dashboard e Management System XIRRUS e Warning Yellow e Clear Green Each entry is a link Click it and the Alarms window is displayed showing only alarms at that level 9 Pie Chart The pie chart is a graphical representation of the data in the Alarm Classifications section The different alarm levels are represented by the same colors defined above Hover the mouse over a segment and a tooltip appears to show the alarm level that the segment represents Each segment of the pie chart is a link Click one and the Alarms window is displayed showing only alarms at that level Using the Dashboard 103 e XIRRUS Management System 104 Using the Dashboard Management System XIRRUS Monitoring Your Network This chapter discusses the tools provided with the XMS Java client that allow you to monitor and manage any network events and alarms flagged by the system with examples Section headings for this chapter include At First Glance on page 105 Alarms on page 107 Events on page 111 Syslog Events on page 112 Email Notifications fo
336. icenses first display the Array License Management window in your browser by selecting Tools Array License Management from the Menu Bar on top of The XMS Java Client Interface Figure 138 Click the Licenses link on the left and then click the Edit link that appears underneath to display all deployed licenses Figure 138 1 2 3 Select Arrays Edit Licenses Deploy Licenses lt Previous Next gt Select the arrays for which you wish to edit licenses and click Next Select Columns Showing 1 to 8 of 8 Rows 25 j 1 Status Hostname IP Address Location Model Stations Software Version Gig1 Mac Address Vv Location Lobby 10 100 46 239 test XN16 0 5 0 0 Oct 06 2010 Build 1531 00 0f7d 00 d2 a2 Vv Location QA 10 100 46 237 test XN4 0 5 0 0 Oct 06 2010 Build 1531 00 0f 7d 01 1e 4c LH Q Location Support 10 100 46 240 test XN8 1 5 0 0 Oct 06 2010 Build 1531 00 0f7d 00 76 48 Figure 138 Select Array Licenses to Edit Select the licenses to be edited by checking the box to the left of each desired row To select all entries at once click the checkbox in the header row To deselect all entries click the checkbox in the header row again When the desired entries are selected click the Next button at the top of the page The Edit Licenses page appears Figure 139 To modify a license click the Array s License Key field and edit it or type the new license into the field This is the only field that may be edited Repeat
337. icy amp System Information amp Management Control amp Network B Services amp vean 8 DHCP Server amp Security amp ssips User Group amp wps 8 RF amp wos amp Fiters Software Update amp Web Page Redirect amp Config File Advanced 8 Groups 8 Auat Figure 28 Tree Expanded When you log in to XMS s client interface the default view displayed in the Main Viewing Area is always the Dashboard see Using the Dashboard on page 91 Clicking any node in the tree generates a new window corresponding to the item you selected Any new windows you open don t replace existing windows However you can customize how your windows are displayed for example sizing tiling and cascading For information about how to display and organize your windows see Basic Window Operations on page 53 The XMS Java Client Interface 43 e XIRRUS Management System You can expand or collapse tree nodes as desired In addition the frame that the tree resides in can be stretched either horizontally or vertically which is useful as the tree grows or where the naming convention for a node is too long to be displayed in its entirety Status Bar Located at the bottom of the client interface the Status Bar provides the current status of any active system processes For example when a process is still in progress the Status Bar displays the loading message When a process has completed i
338. icy x Choose from an existing Software Update Configuration Policy Software Update Arayos_4 0 7 Software Update Figure 131 Updating Array Software Image When prompted click on the Yes button to update the selected Array or click on the No button to abort the request Viewing Events and Alerts To view a tabular summary of events and alerts for a selected Array right click on the Array and choose Alarms and Events from the pull down list The Events and Alerts summary window is displayed with the displayed results specific to the selected Array For more information about Events and Alerts go to Monitoring Your Network on page 105 Events and Alerts For 00 0f 7d 00 42 86 Selected Object is S Total Number of Events 3 Total Number of Alerts 2 Severity Critical Major Minor Warning Clear Info Events 1 Alerts o Close Java Applet Window Figure 132 Viewing Events and Alerts Viewing Reports To access the Reports window right click an Array and choose Reports from the pull down list For more information about reports see Managing Reports on page 371 186 Managing Your Wi Fi Arrays e Management System XIRRUS Refreshing an Array When you refresh an Array XMS polls the Array and verifies that the Array is still reachable by the system To refresh an Array select and then right click the Array and choose Refresh Array from the pull down list For more information about refr
339. icy see Using Policy Windows on page 218 User Group Setting Details To add a new User Group click the dh button to display the User Group List details window Figure 199 User Group and User Group State Enter a new User Group name in this field User Group names are case sensitive and can contain up to 32 alphanumeric characters do not include spaces when defining User Groups Set User Group State to Enable to make this User Group active RADIUS ID Enter a unique RADIUS ID for the User Group to be used on an external RADIUS server When adding a user account to the external RADIUS server this RADIUS ID value should be entered for the user When an Array requests authentication of a user RADIUS sends this value to the Array This tells the Array that the user is a member of the User Group having this RADIUS ID Managing Configuration with Policies 303 e XIRRUS Management System 9 User Group List x User Group Students User Group State C Enable Disable Radius Radius ID udnssp VLAN VLAN D mw rz vannumier b X Qos QoS Priority DHCP DHCP Pool md rz Filter 883 Group filter list rens Roaming Roaming Layer lyezon o a WPR Web Page Redirect WPR Enable Disable Station Limits Station Limit pe Overall Traffic Uniimted V Station Traffic Unlimited r Station Traffic Packets Sec Limit g Days Limits
340. ied Blocked or Ad Hoc or select All to display rogues of any classification Detail on this setting specifies how you would like to break out report results It is used by the Unique Station Count report Select Total to show the total station count only or you may break out detailed counts by Array Name VLAN Name VLAN Number SSID Media Type Radio or Association Type The drop down list allows you to select one of these parameters for detailing For example if you select detail on VLAN the chart and the table will each will show one line for each VLAN Display traffic by the drop down list allows you to select Tx Rx to display transmit receive and total traffic broken out separately into three lines or select Total to display only the totals Total will show two lines the average value of Tx Rx and the peak value of Tx Rx Order table by the drop down list allows you to select the column to use for sorting results Array Name the default MAC Address IP Address Map or Serial Number Managing Reports 385 e XIRRUS Management System 9 Order direction select Ascending or Descending sort order from the drop down list Table row limit select the total number of rows to display in the report from the drop down list 10 20 50 or Show all 9 Date Time this defines the time interval covered by the report specified in terms of Time Span or Specific Date Range In either case the report will state t
341. ime you click the Export button or use the Export Settings link the old unedited values will be exported unless you have completed saving your edited values to the Arrays 1 Step 1 Select Arrays Open the Network Settings page by clicking the Configure button near the top of the window then select Network Settings on the left Click the Export Settings link that appears underneath For each row that you wish to export select the checkbox at the beginning of the row To select all rows click the checkbox in the header row Click again to deselect all rows Figure 287 Click Next gt when the desired rows are selected 462 The XMS Web Client e Management System XIRRUS e Monitor P ee Q Reports 1 2 Select Arrays Download Settings File lt Previous Next gt Network Settings Export Settings Select the arrays for which you wish to export network settings and click Next Import Settings Select Columns Radio Settings Showing 1 to 25 of 816 Rows 25 4 Advanced Config n Hostname IP Address Location PoGE m 1XR480411014422 10 100 54 55 Ali s Cube Add Devices m 1XR480411014422 10 100 54 55 Al s Cube Trap Receivers Q NORTA Array5 10 100 54 28 Licenses T Q Xws 50v24 17216452 XMS SQA VLAB Figure 286 Export Network Settings 2 Step 2 Download Settings File Select the desired output file format Excel or CSV Click the Export button again to browse to the destination folder and specify the fil
342. imit traffic and or limit connection times If limits are set on an Array in more than one place all limits will be enforced e As soon as any station limit is reached no new stations can associate until some other station has terminated its association 9 As soon as any traffic limit is reached it is enforced e Ifany connection date time restriction applies it is enforced You can picture this as a logical AND of all restrictions For example suppose that a station s SSID is available MTWTF between 8 00am and 5 00pm and the User Group is available MWF between 6 00am and 8 00pm then the station will be allowed on MWF between 8 00am and 5 00pm To eliminate confusion we recommend that you configure limits in just one type of policy 9 Station Limits Enter the maximum number of stations allowed for this User Group The default is 1792 9 Overall Traffic Unlimited Choose Unlimited if you do not want to place a restriction on the traffic for users in this User Group or clear the checkbox and enter a value in the Overall Traffic Packets Sec Limit field to force a traffic restriction The restriction applies to the group as a whole For example if you limit the Students group to 1000 packets second then the sum of the packets sent by all members of the Student group may not exceed 1000 packets second 9 Station Traffic Unlimited Choose Unlimited if you do not want to place a restriction on the traffic per station for this Use
343. in Adding a Policy on page219 Click OK The policy details window appears DHCP Server Policy This window contains fields for configuring pools of IP addresses DHCP pools that the DHCP server may assign to clients The DHCP server allows the Arrays to provide wireless clients with IP addresses and other networking information The DHCP server will not provide DHCP services to the wired side of the network If you enable a DHCP server you need to define the DHCP lease time default and maximum and establish the IP address ranges DHCP pools that the DHCP server can use Managing Configuration with Policies 265 e XIRRUS Management System D DHCP Server Policy Details Policy Name Save Configuration DHCP Server Details DHCP Server Name Enable DHCP Server Starting IP Range End IP Range forcprool s E 152 165 10 255 DHCP Server List h Java Applet Window Figure 181 DHCP Server Settings Policy Details Policy Name Enter a meaningful name that describes this policy If you are modifying an existing policy this field is grayed out not editable If you are using a standard naming convention for all of your policies the name you enter here should conform to that convention Save Configuration Check this box to ensure that any time this policy is applied to an Array the Array will save the updated configuration information to its flash memory If this box is
344. in tabular table form Task Results for SystemConfig Task Result OText XML Device Name Identifier Result 00 0f 7d 00 42 11 save running configuration to flash severesat_ Success Java Applet Window Figure 121 Task Results success Saving Results If you would like to save the results of your configuration changes click on the Save Result button In this case you are prompted to enter a file name for the saved results file Enter the file name then click on the OK button Figure 122 Save Results What if the Configuration Changes are Rejected If the configuration changes you make are not implemented successfully after clicking on the Execute button the Task Results window indicates that the command failed Figure 123 Task Results Failure 176 Managing Your Wi Fi Arrays e Management System XIRRUS List of Configuration Policies The following list of configuration policies is provided as a reference that corresponds to the menu of configuration options in the pull down list System Information SSIDs Management Control 9 User Groups 9 Network e IAPs 9 Services e RF e VLAN e WDS DHCP Server e Filters 9 Security Managing Your Wi Fi Arrays 177 e XIRRUS Management System Create Policies from Array This powerful feature allows you to use the configuration of any Array in the network as a pattern for creating XMS policies Let s
345. indow The refresh process for a selected device may take a few seconds to complete depending on the connection speed so be patient while the process is being performed A pop up message is displayed when the refresh process has completed successfully Click on the OK button to close the message window and return to the Discover Devices Window o Successfully refreshed existing device Figure 67 Refreshing a Device If the refresh process fails this is because XMS could not establish a connection with the selected device In this case check the network connectivity of the device If the device has connectivity see Why will XMS not discover an Array even though the Array is connected to the network and functioning correctly on page 542 88 Discovering the Network e Management System XIRRUS Deleting a Device If you need to delete an existing device from the discovered list select the device you want to delete then click on the Delete button under the Discovered Devices list in the Discover Devices Window A pop up confirmation message is displayed requesting you to confirm that you want to delete the selected device The deletion cannot be undone XMS will need to rediscover the device before it can be restored see Adding an Array or PoGE Injector on page 87 In the pop up confirmation message click on the Yes button to delete the selected device or click on the No button to abort the request The deleted device wi
346. ing applied to multiple Arrays Deploy Configuration Use this page to apply one of the advanced config files that you have already created to one or more Arrays Start by clicking the Configure button near the top of the window then select Advanced Config on the left When the Deploy Configuration link appears underneath click it The web client displays a list of the available config files Figure 296 1 2 3 4 Select Configuration Select Arrays Deployment Options Apply lios Previous Next gt Select a single configuration to be deployed to the arrays Select Columns Showing 1 to 2 of 2 Rows 25 zl 1 Configuration Name Description FF test test config M XN16520901140 Running configuration downloaded from XN16520901140 Figure 296 Select Advanced Config File to Deploy Select the checkbox to the left of the desired config file in the list then click Next The web client displays a list of the Arrays in the XMS database Figure 297 474 The XMS Web Client e Management System XIRRUS 1 2 3 4 Select Configuration Select Arrays Deployment Options Apply Settings Previous Next Cancel Select the arrays to which you wish to deploy the configuration Select Columns Showing 1 to 2 of 2 Rows 25 1 r Hostname IP Address Location iie XN16520901140 10 100 54 26 XMS map T 9 xso8010800E36 10 100 56 31 VLAN racks Figure 297 Select Arrays for Deployment Select the checkbox to one o
347. ing Release 3 1 and higher software images e Data for all other sections of the Dashboard is updated at least every two minutes e Alarms occur in real time Traps generated by Arrays and other events with a severity greater than informational are displayed as alarms These rates may be modified using the Xirrus Server Management Tool for Windows based Servers See Changing Polling Frequency on page 537 Using the Dashboard 93 e XIRRUS Management System Status The Status section summarizes the number of Arrays up or down for the selected Array Group see About Dashboard Data on page92 and summarizes the status of their IAPs as well Arrays IAPs Radios Total 1001 Total 8008 ENE o EN Disabled 1 Down Figure 69 Dashboard Status Section Details 9 Arrays This is a summary of the status of the selected Arrays that are known to XMS The entries show the count of Arrays at each status value Each entry is a link click it to display The Arrays Window with the Array list filtered to show only those Arrays that have the selected status value The following status counts are shown White the total number of Arrays in the group Click this button to show the selected Arrays in The Arrays Window regardless of status Green the number of Arrays that are up in the selected group Click this button to show only Arrays whose status is up in the Arrays window 94 Using the Dashb
348. ing is maintained across all units Without an NTP server assigned no Managing Configuration with Policies 247 e XIRRUS Management System universal clock each Array will use its own internal clock and stamp times accordingly which may result in discrepancies 9 NetFlow You may send NetFlow IP flow information to a designated collector for later use and analysis System Log Syslog The System Log server processes messages based on network performance and usage These messages include alerts error messages informational messages and notifications 9 Standby The Standby Mode allows an Array to be designated as a backup unit that will only come online if its designated primary Array fails 9 Wi Fi Tags You may collect Wi Fi Tag information on Arrays for later use and analysis DNS This window contains a field for defining the name of the policy and fields for configuring the DNS server At least one DNS server should be set up for Arrays D Services xj Policy Details Policy Name XN8 2 504 Save Configuration V DNS Domain roberts isd edu DNS Server 200 4 200 211 J 6 DNS Server2 0 0 0 0 DNS Server3 0 0 0 0 Apply Cancel Figure 171 DNS Server Settings 248 Managing Configuration with Policies e Management System XIRRUS Policy Details Policy Name Enter a meaningful name that describes this policy If you are modifying an existing policy this field is grayed out
349. ing the equipment off and on the user is encouraged to try to correct the interference by one or more of the following safety measures 9 Reorientor relocate the receiving antenna 9 Increase the separation between the equipment and the receiver 9 Consult the dealer or an experienced wireless technician for help Use of a shielded twisted pair STP cable must be used for all Ethernet connections in order to comply with EMC requirements Non Modification Statement Unauthorized changes or modifications to the device are not permitted Use only the supplied internal antenna or external antennas supplied by the manufacturer Modifications to the device will void the warranty and may violate FCC regulations Please go to the Xirrus Web site for a list of all approved antennas Indoor Use Only This product has been designed for indoor use only No Serviceable Parts The XM 3300 XM 3320 XM 3340 XM 3360 s enclosure must not be opened under any circumstances This product contains no serviceable parts inside Safety Warnings NOTE These warnings apply to the XM 3300 XM 3320 XM 3340 XM 3360 Safety Warnings Read all user documentation before powering this device All Xirrus interconnected equipment should be contained indoors This product is not suitable for outdoor operation Please verify the integrity of the system ground prior to installing Xirrus equipment Additionally verify that the ambient operating temperature does not excee
350. ing the local administrator accounts on Arrays Managing Configuration with Policies 271 e XIRRUS Management System Security This window contains a field for defining the name of the policy and fields for configuring the WPA and WEP information B Security x Policy Details Policy Name ecxrity ab XS8 Save Configuration A uA Security 2 WPA Details TKIP Enabled v AES Enabled iv WPA Group Rekey Time Never V WPA Group Rekey Time Sec H B Radius ap E WPA Preshared Key 1 WPA Verify Key si EAP Authentication r WEP Details MAC Access List C asci HEX C weess WEP 128 Encryption Key 1 Verify Key 1 I C asci HEX C wep s4 WEP 128 Admin Encryption Key 2 Radius Verity Key2 4 C asci HEX C wepes G weP 128 4 E Apply Cancel Figure 184 Security Settings Policy Details 9 Policy Name Enter a meaningful name that describes this policy If you are modifying an existing policy this field is grayed out not editable If you are using a standard naming convention for all of your policies the name you enter here should conform to that convention 272 Managing Configuration with Policies e Management System XIRRUS Save Configuration Check this box to ensure that any time this policy is applied to an Array the Array will save the updated configuration information to its flash memory If this box is left unchecked then when this policy is applied t
351. ings not defined in the config file will be left unchanged To create a new config file policy click Add Policy in the Config File window When the Add Policy window appears we strongly recommend that you select Copy from a chosen Array to fetch the configuration from one of the Arrays shown in the list Figure 231 Only expert users should use Start from scratch See Adding a Policy on page219 Click OK The policy details window appears Add Policy x You may create a new policy in one of two ways Copy from a chosen Array recommended Start from scratch expert only 00 0f 7d 00 12 16 10 100 23 51 MB 150 280 AX1 3 5 May 20 2009 Build 0724 ES 00 0f 7d 00 03 1f 10 100 40 111 xs8 10 100 40 111 3 5 May 20 2009 Build 0724 00 0f 7d 00 49 aa 10 100 40 23 XS 39 10 100 40 23 3 5 May 20 2009 Build 0724 00 0f 7d 00 26 35 10 100 40 22 XN08310800F41 4 0 6 Oct 14 2009 Build 1169 00 0f 7d 00 02 ec 10 100 44 175 Oingo Boingo 4 0 6 Sep 15 2009 Build 1162 00 0f 7d 00 9c ce 10 100 40 132 East ODE 4 0 6 Sep 15 2009 Build 1162 00 0f 7d 00 44 08 10 100 40 131 South ODE lie Sep 15 2009 Build 1162 00 0f 7d 00 80 22 10 100 40 130 North ODE 4 0 6 Sep 15 2009 Build 1162 ha om cmos Figure 231 Create Config File Policy Policy Details 9 Policy Name If you copied the policy from an Array then the Array s Host Name is use
352. ion r WEP Details asci C HEX G wee ss C WEP 128 Encryption Key 1 Verify Key 1 asci C HEX weP 64 C WEP 128 Encryption Key 2 Verify Key 2 SSIDs asci C HEX wepes WEP 128 asci HEX G WEP 64 WEP 128 Encryption Key 4 Verify Key 4 CO Default Key Jer 1 z Radius Details Radius Server Mode internal C External Primary Host Name D gQ Primary IP Address 0 o 0 RADIUS Primary Port sz 4 SecondaryHostName Q9 H Apply Cancel Figure 194 SSID Security Settings 9 Security Type From the pull down list choose the level of security that will be required by users of this SSID and indicate whether the settings apply globally or to the specific SSID The available options are Open WEP WPA WPA2 and WPA Both where both WPA and WPA2 are used RADIUS security options are also available The Open option provides no security and is not recommended For more information about wireless security go to Security on page 272 or see the Wi Fi Array User s Guide Managing Configuration with Policies 297 e XIRRUS Management System WPA Details This section of the window appears if you have selected SSID Specific Settings Configure WPA encryption as described in WPA Details on page 273 WEP Details This section of the window appears if you have selected SSID Specific Settings Configure WEP encryption as described in WEP Details on page 274 Paw You may specify the
353. ir network and its client activity and restrict network setting changes to specific staff members All of these features allow the IT department to actively monitor and manage the health of their wireless network from anywhere using a browser A Scalable Solution The Xirrus centralized management technology is available as a dedicated Management Appliance or as a software only solution XA 3300 CC that can be installed on an existing server in the IT closet For larger networks licenses are available to add support for additional Wi Fi Arrays Together with its family of Wi Fi Arrays Xirrus created XMS to facilitate faster and more cost effective high capacity Wi Fi rollouts across large campus environments and branch office locations This total solution delivers Gigabit class wireless access with maximum deployment flexibility across a wide range of Introduction 7 e XIRRUS Management System locations from a single site corporate headquarters environment to large multi site branch offices J gt P al 1 a Existing Existi 1 Switch witch a3 Xirrus Management Appliance Corporate HQ Branch Offices i J S Existing Existing Switch a an Switch Backbone a Switch Figure 2 Sample Network Topology XMS monitors wireless performance and gathers detailed reporting and statistical data for each Wi Fi Array residing in the network or for the entire network
354. is the number of received encryption errors divided by the total number of received packets Managing Reports 393 e XIRRUS Management System Station Traffic This report provides statistical data for throughput for the selected time period based on the traffic flow achieved by each client station associated to the selected Arrays Figure 249 Throughput summed over all stations is represented in a graph at the top of the window Throughput broken out by station is detailed in a table underneath The information displayed in this window is dependent on your Selection Criteria There are two types of throughput data displayed based on your choice for Display Traffic by 9 If you select Tx Rx both graph and table display average transmit receive and total traffic broken out separately into three lines Transmit throughput is shown in red Tx receive throughput is shown in blue Rx and total throughput is shown in green Tx Rx 9 Select Total to display two lines the average value of Tx Rx in green and the peak value of Tx Rx in magenta Selection Description Criterion for details Group Include only Arrays that are members of the selected Array group Map Include only member Arrays of the selected map Array Include only the selected Array Display Traffic by Break out transmit and receive traffic separately or show only totals Table Row Limit Total number of rows Date Time Include on
355. ity to apply a set of policies to the Arrays in the group This allows you to apply a uniform configuration to all of the members in one step Array groups are also useful for filtering the data shown in the Dashboard and other windows as described in About Dashboard Data on page 92 Groups of x None None None None None None None Figure 233 List of Groups The columns in this window show selected settings for the listed policies For information about changing the columns displayed see Selecting the Columns Shown in a Policy Window on page 220 Creating A New Group An Array group is created so that you can define groups of Arrays and apply policies to the group To create a new Array group click on the Add Group button in the Groups window The Array Group Settings window is displayed which is divided into two primary areas 9 Array Group Settings Allows you to define a group name and assign Arrays to the group 9 Policy Details Allows you to assign Global Policy Settings to the Array group 366 Managing Configuration with Policies e Management System XIRRUS Array Group Settings This window contains a field for assigning the group name and a list of Arrays that can be assigned to the group Policy Details Array Group Name Array List Selection 10 100 49 XS085008 4 0f 7d 10 100 40 27 XS3700 AF 10 100 49 XS085008 0f 10 100 40 23 XS3942070 10 100 42 XC037xi02 OF 7d
356. kground image and header and or footer text as shown below in Figure 196 9 WPR Custom Background File specify an optional jpg gif or png file to display in the background of the page Other customizations logo header footer will overlay the background so that it will not be visible in those areas 9 WPR Custom Logo File specify an optional jpg gif or png file to display at the top of the page 9 WPR Custom Header Text File specify an optional txt file to display at the top of the page beneath the logo if any 9 WPR Custom Footer Text File specify an optional txt file to display at the bottom of the page Managing Configuration with Policies 299 e XIRRUS Management System Q9 WEF Network Login h 2890 oc Logo PGH PERFORMANCE W This is the Header of the page that has been put together by tbe Array Wi Fi Network Login Header Internal Login Page Username Password Lega Background Terms and Conditions By using the Mighwoods free Wi Fi Nigh Speed Internet Service Highwoods FreeWifi you agree to be bound by the following terms and conditions Highwoods Terms of Service which are a binding agreement between you and Mighwoods You represent that you are of legal age to agree and be bound by this agreement Footer Personal Use Only You may use the service and technology provided to you by Mighwoods for the sole purpose of using the Service as described here Yo
357. kup Reset Backup Name Schedule Backup Backup Now XMS License p About XMS Schedule Name Schedule Type Days Time Remove Schedule Restore Backup View Backups Figure 326 Changing Database Backup Settings Note On Linux based servers the database and all configuration files are backed up including any uploaded files for policies software update etc Select the Backup link on the left to display the Backup Location and Schedule page This page specifies where backup files are kept and when they are to be performed It also displays existing backups and allows you to restore from a backup file 9 Backup Location Before you can use any other features on this page you must specify the location for backup files Specify the Path for the folder where files are to be stored The path may use the Windows Uniform Naming Convention UNC format ComputerName SharedFolderN Resource or the Server Message Block Protocol SMB format smb URL XMS Administration 511 e XIRRUS Management System You may enter a Domain name if necessary If the backup location is on a standalone server you should normally leave the domain field blank Enter a Username and Password that will give you write privileges for that folder While the username and password are optional we highly recommend that the backup file server be configured to require password protection Click Save Location when done XMS will verify that it is
358. layed 172 Managing Your Wi Fi Arrays e Management System XIRRUS tang Merve Location D Adao Mamin Contact Current Stators Time of Last Poit Sofware Version 2 Figure 118 Array Status Summary The Array Status window displays a read only summary of Array information no changes may be made using this window and additional details cannot be accessed from it Array Status is divided into the following sections General Information including the Array s name location IP address and contact information Status the current status of the Array and the time that the status was last polled The software version running on the Array is also stated SSIDs lists the SSIDs in use on the Array including a summary of whether or not the SSID is being broadcast the wireless technology being used and security parameters For more information about SSIDs see SSIDs on page 207 Active Stations the total number of stations clients that are currently associated with the Array For more information about Stations see Stations on page 203 Wired Interfaces for the serial console interface the 10 100 Fast Ethernet interface and the two Gigabit interfaces this summarizes the Managing Your Wi Fi Arrays 173 e XIRRUS Management System management settings whether the port is enabled and whether management of the Array is allowed via this port 9 Wireless Interfaces lists the IAPs pre
359. ld Name 490 The XMS Web Client e Management System XIRRUS The new column is not automatically displayed on the Arrays list To display it go to the Monitor Arrays page or the Configure Home Page and use the Select Columns function The new field is typically found by scrolling to the bottom of the Hidden Columns list See Select Columns on page 442 for more details Continue to the next section Custom Field Values to populate the new column with data for as many Arrays as you like Custom Field Values This page populates your new column created with the Custom Fields Page with data values There is also a Bulk Edit option that allows you to enter identical data for multiple Arrays in one step in the same way that you can use Bulk Edit for the Network Settings and Radio Settings pages Open this configuration page by clicking the Configure button near the top of the window then select Custom Fields on the left Click the Custom Field Values link when it appears on the left Bulk Edit Select Columns Export Showing 1 to 25 of 816 Rows 25 7 1 2 3 4 5 gt gt gt Home I Hostname Gig1 IP Address Gig1 Mac Serial Number Locz alantest assetTag Network Settings x 1XR480411014422 10 100 54 55 00 0f7d 0 XR48041101442 Alis 123456 1XR480411014422 10 100 54 55 00 0f7d C XR48041101442 Ali s IEZEESI 0K cance NORTA Array5 10 100 5428 00 0f7d C XN0411101FFA9 v Radio Settings Advanc
360. led discussion please see the Xirrus Gigabit Ethernet Port Modes Application Note in the Xirrus Library After completing all of the desired fields in the Gigabit 1 interface either click on the Apply button to save this policy or click on one of the following buttons to configure more policy options 9 Gigabit 2 Configure the second Gigabit link Managing Configuration with Policies 245 e XIRRUS Management System Gigabit 2 This window contains fields for viewing the Gigabit 2 interface settings The Gigabit 2 interface mirrors the Gigabit 1 interface including its ability to provide fail over protection For example if the Gigabit 2 interface fails the Array automatically switches to Gigabit 1 for uninterrupted network connectivity Gigabit Interface 2 Settings Because the configuration settings for the Gigabit 1 and Gigabit 2 network interfaces are the same you cannot configure Gigabit 2 independently Refer to Gigabit Interface 1 Settings to configure these options Saving Your Network Policy When you have configured all of your network policy settings click on the Apply button in the Network window to save the new policy 246 Managing Configuration with Policies e Management System XIRRUS Services From the Configuration Policies node in the tree click on Services to display the Services window This window contains a list of all service policies currently available with tools to manage these policies
361. led to yourself or other recipients each time it runs enter an email address and click the Add button You may add multiple addresses To remove an address from the email list click the X in front of the entry The email will display the report in the same format that is used to display it on the web client page ie HTML format and there will also be three attachments one for each other format PDF xls csv Be aware that for large reports the email size may be quite large 382 Managing Reports e Management System XIRRUS You must specify the email server that XMS will use to send the email C Sy Please see Web Client Email Settings on page 515 9 Save Report Save amp Run When the settings for the report are complete click Save Report to simply add it to the My Reports list without running it Click Save amp Run to add it to the My Reports list and run it immediately The Report Queue page will be displayed showing the status of the report You may navigate to another page while the report is being generated Use the My Reports page to view the report later on Report Queue When you run a new or saved report or when the time comes to run a scheduled report it is added to the Report Queue Reports are run one at a time in the order in which they are added to the queue The queue displays the status of each report that is waiting to be run Pending or In progress The report queue page is displayed only
362. les defines the station s most likely location Actually XMS has much more information than a simple radius circle to work with due to the advanced design of the WiFi Array The Array s multiple directional radios also give information on the direction of the station Rather than modeling the location of the station as a circle the RF contour map is used This map incorporates directional antenna coverage on a per radio basis and readings are enhanced by means of inter Array correction and take RF attenuation due to building construction into account Preparing to Use Locationing You must complete the following steps before locating a device to get the best results 9 Planning XMS is able to locate a device most accurately when Arrays are located around the perimeter of the area to be monitored as shown in Figure 104 on page 152 This is in contrast to placement of Arrays for greatest Wi Fi coverage where we recommend that you place Arrays away from exterior walls Adding a New Map Create an XMS map using the most accurate graphic representation possible 9 Setting the Map s Scale It is very important to set this accurately as the placement of a located device depends critically on the scale of the map e Adding Arrays to Maps As you place your Arrays on the map be certain to get their locations as precise as possible XMS will only locate stations that are associated to an Array that is a member of a map 9 Orienting Ar
363. leting all of the desired fields in the Services window for System Log either click Apply or click one of the following to configure more services 9 Standby Configure the standby Array e Wi Fi Tags You may collect Wi Fi Tag information on Arrays for later use and analysis Standby Standby Mode supports the Array to Array fail over capability When you enable Standby Mode the Array functions as a backup unit and it enables its radios if it detects that its designated primary Array has failed The use of redundant Arrays to provide this fail over capability allows Arrays to be used in mission critical applications In Standby Mode an Array monitors beacons from the primary Array When the primary has not been heard from for 40 seconds the standby Array enables its radios until it detects that the primary Array has come back online Standby Mode is off by default Note that you must configure the standby Managing Configuration with Policies 255 e XIRRUS Management System Array to match the configuration of the primary Array The standby Array s configuration will not automatically synchronize This window allows you to enable or disable Standby Mode and specify the primary Array that is the target of the backup unit x Standby Mode DNS e Enable Standby Mode C yes C No o NTP HI System Log Standby Target Address 00 0f 7d 00 88 80 Apply Cancel Figure 175 Standby Mode Settings Standby
364. lick OK A message will be displayed to notify you that you must close your client and start it again The default country is the United States The operating country will change the channels that are listed in IAP Setting Details Figure 203 on page 311 System Options Select Country Country Y Java Applet Window Figure 314 Country of Operation 496 XMS Administration e Management System XIRRUS User Accounts From the Admin menu on the Java client s Menu Bar select User Accounts to display the XMS User Accounts window This window contains a list of all user accounts currently available with tools to manage these accounts x User Accounts and Groups admin Admins ReadWrite Es x newUser Admins ReadWrite Est x ROUser Users ReadOnly E x Total Users 3 Add User Columns Refresh Close Figure 315 List of XMS User Accounts The window also shows the configuration settings of each attribute listed in the window Figure 316 shows the Select Policy Attributes window for the XMS User Accounts click the Columns button if you wish to display this window and change the fields displayed in the User Accounts window For information about changing the attributes go to Selecting the Columns Shown in a Policy Window on page 220 Select Policy Attributes x Select Policy attributes to view Old Password Figure 316 Select Policy Attributes XMS User Accounts
365. licy Window on page 220 Creating a New Global Default Policy To create a new global default policy click on the Add Policy button in the Global Policy window Managing Configuration with Policies 223 e XIRRUS Management System Global Policy Settings This window contains a field for defining the name of the policy and fields for choosing policies from the pull down lists in each policy category _ Policy Details mex BEEN System Information I cdR Management Control ngntXSOBDIDEERE x Meat Femoxassnuexex 000 eaves feses s VLAN ee o gt O wes e HN Global zn benmwasonexER 00000 ssps xrmomuxEx 0000 0 R UserGroup eeser 59suexEX y x IAPs None RF Feme R wos nas xsceoinees6 Fiere mesmes y Apply Cancel Figure 156 Global Default Policy Settings Policy Details 9 Policy Name Enter a meaningful name that describes this global policy If you are modifying an existing policy this field is grayed out not editable If you are using a standard naming convention for all of your policies the name you enter here should conform to that convention 9 All Policy Types Choose a policy from the pull down list for any policy type available in this window Saving Your Global Policy When finished click on the Apply bu
366. light Savings Time Enable this checkbox to allow the Array to automatically adjust the time for Daylight Savings Time Enable NTP Server Choose Yes to enable the NTP server or choose No to disable the server NTP Primary Server If you enabled the NTP server enter the IP address or DNS name of the server NTP Secondary Server If a secondary NTP server is available enter the IP address or DNS name of the secondary NTP server After completing all of the desired fields in the Services window for NTP either click on the Apply button to save this policy or click on one of the following buttons to configure more service policy options NetFlow Configure the NetFlow collector System Log Syslog Configure the System Log server Standby Configure the standby Array Wi Fi Tags You may collect Wi Fi Tag information on Arrays for later analysis Managing Configuration with Policies 251 e XIRRUS Management System NetFlow This window allows you to enable or disable the sending of NetFlow information to a designated collector NetFlow is a proprietary but open network protocol developed by Cisco Systems for collecting IP traffic information When NetFlow is enabled on an Array it will send IP flow information traffic statistics to the designated collector B Services i NTP T Netflow Collector Host 169 151 6 56 He 5 Netfiow Colector Port 2055 System Log COX9 standby 1 WiFi uz
367. like the Events table is showing only your search result entries the Show All button will appear at the top right of the window Click it to return to viewing all entries Show All Events Edt View Events Total 2 Displaying 1 tol 2 PageLength 50 M 4 gt gt i showan _Status_ _ Poll Object j Date w t Message 1 Info IF 192 168 35 88 Apr 10 2008 02 03 17 PM Interface Added to Database Info 192 168 35 0 Apr 10 2008 02 02 51 PM Network Added to Database T Done Java Applet Window Figure 42 Show All Events After a Search 9 Tables in other windows like the Arrays window may be filtered by clicking one of the buttons in a status bar at the top of the window To return to viewing all entries in those windows click the Total button on the status bar z Youcanalso use the counts displayed in the status bar to determine whether entries are being filtered 9 Tables in resource windows like the Arrays and IAPs windows may be filtered by selecting an Array Group in the Dashboard The Array Group is displayed on the upper left To return to viewing all entries go to the Dashboard window and set the Array Group field on the upper right to All Arrays 58 The XMS Java Client Interface e Management System XIRRUS Page Navigation Buttons Some tables like the Events window display a set number of entries per page The page navigation buttons shown in Figure 41 are grayed out not
368. link on the left instead Add Network Discover Now On Off Select Columns Export Showing 1 to 7 of 7 Rows 25 z Home r Address Subnet Mask Status Array Count PoGE Count Network Settings m Q9 10100540 255 255 255 128 Finished 13 2 Radio Settings e n 172 16 49 0 255 2552 Add New Network Advanced Config us re 10 100 46 0 255 255 21 PoGE Add Devices T 10100560 2552557 Network Address 200 200 45 0 SNMPv2 Settings r 9 1216500 2552552 Subnet Mask 255 255 255 0 SNMPv3 Users m Q 17246510 25525524 Start Discovery ves No SSH Users m 9 1215520 255 255 2t OK Cancel Add Networks Figure 308 Add Networks for Discovery The list of networks for discovery shows the following information 9 Address the Network Address that you entered The icon to the left of the address is green if you enabled Start Discovery and yellow if you 486 The XMS Web Client e Management System XIRRUS have disabled discovery for this network Note that you may use the Edit button to toggle Start Discovery Subnet Mask the mask that you entered Status the status of the discovery process The status may be Finished discovery complete Disabled Start Discovery not enabled for this network or Discovering discovery is still in progress for this network Array Count the number of Arrays discovered on this network so far PoGE Count the number of PoGE power injectors
369. lists should be kept up to date whenever possible 282 Managing Configuration with Policies e Management System XIRRUS To add a new MAC address to the access control list click on the dh button to display the MAC Access List Address window E MAC Access List m nN why Security MAC Access ListType Disable AllowList C Deny List MAC Access List Address B Radius MAC Access List X ue MAC Access List MAC Access List Address g Admin Radius Apply Cancel Figure 188 Adding a MAC Address to the MAC Access List 9 MAC Access List Address Enter the MAC address then click Add You are returned to the MAC Access List window where the new address appears in the list n MAC Access List wy Security B Radius MAC Access ListType Disable C AllowList MAC Address Admin Radius Figure 189 MAC Access List Managing Configuration with Policies 283 e XIRRUS Management System When you have finished adding all of your MAC addresses either click on the Apply button to save this policy or click on the Admin RADIUS button to configure more security policy options Admin RADIUS The Admin RADIUS policy Figure 190 allows you to set up authentication of network administrators via RADIUS rather than using the local administrator accounts on Arrays Using RADIUS to control administrator accounts for logging in to Arrays has these benefits 9 Centralized control of a
370. ll be removed from the list of manageable devices Note that a deleted device will be re added to the list if it is found the next time that discovery runs as long as XMS is still able to communicate with it via SNMP You cannot tell the discovery process to ignore specific device s on the network What If My Device Is Not in the Discovered Devices List NOTE If you do not have a valid license for the XMS server you are limited to managing one Array Valid XMS licenses are typically for a particular number of Arrays In either case when XMS has discovered the maximum permitted number of Arrays no additional Arrays will be discovered See Licensing the XMS Server on page 35 XMS Discovery will find devices that are reachable from the XMS server s network if their SNMP settings match those configured on the XMS server If your Array or PoGE injector has not been discovered check the following 1 Have you discovered the maximum number of Arrays allowed by your XMS license 2 Is the device powered up and fully booted 3 Foran Array is SNMP enabled SNMPv2 is always enabled on Xirrus managed PoGE injector models 4 Does the XMS server have connectivity to the device i e is the device connected and can you ping it 5 In the SNMPv2 Community Names and SNMPv3 Users sections verify that one of the listed entries matches the SNMP values configured on the Discovering the Network 89 e XIRRUS Management System
371. lost when the Arrays are rebooted Note that this checkbox does not actually apply the policy to any Arrays To apply the policy see Using Policy Windows on page 218 The remainder of the Filter Policy window has two main boxes e Filter Lists e Filters Filter List Details e Filter Lists The Filter List box shows a list of any previously created filter lists XMS has a default filter list Global This default list is always present although it may not be listed When you select a filter list entry the Filters box will show the filters defined for the selected list New filter lists may be added by pressing the dh button to the right of the list and filling in the fields shown below existing entries may be edited by pressing the E button and deleted by pressing the button 350 Managing Configuration with Policies e Management System XIRRUS D Filter Lists E x Filter List Name Fiter list Enable Vv Apply Cancel Figure 221 Filter List Details Filter List Setting Details Filters NOTE filter Filter List Name Enter a meaningful name for the filter list Enable Check this box if you wish to enable this filter list We recommend that you configure VLAN settings before creating a new Allow Filters This is the area in which you create and manage the individual filters Select a filter list entry and the Filters box will show any filters already created for that list When a fil
372. lowing settings 9 Use Set Approved for devices in the operational network 9 Use Set Known for other devices not in the operational network but whose operation is known about e g a neighbor or adjunct network Use Set Blocked to counter rogues that you believe may be malicious Use Set Unknown for other rogue or unapproved devices Set Unclassified when devices are first detected they are unclassified You may use this button to undo a classification that you previously applied When you classify a device as known blocked etc that information is sent to every Array managed by XMS as soon as possible Also XMS sends its latest device classifications to all managed Arrays daily at 3 AM NOTE Arrays have an Auto Block feature which may be configured on the Global RF Settings policy window There you may set the Auto Block Unknown Rogue AP parameters so that when unknown APs are discovered they will get the same treatment as explicitly blocked rogues There are two ways to classify devices in this window you may select one or more detected devices and use a button to set their classification or you may set a rule to classify a group of devices typically by manufacturer 9 To use a classification button select an entry in the Detected Devices list and click one of the color coded buttons at the bottom of the list to Security Managing Intrusions 125 e XIRRUS Management System classify the entry You may s
373. ls for associating each PoGE injector port with the Array port to which it is physically connected You may then use XMS to monitor the status of injectors and to power down or power cycle Arrays by controlling the injector ports that drive them The PoGE page shows all injector ports and indicates if ports are free or shows the Array ports to which they are connected On the left of the window an Arrays link appears which lists all Array gigabit ports and shows whether they are already connected to an injector port or are free The PoE page is used to associate Array ports with injector ports so that the TS XMS database reflects the physical connections powering Arrays in your network You must specify these connections explicitly in XMS they are not discovered automatically For complete details on the use of the Injectors and Arrays pages and on discovering and managing PoGE injectors with XMS please see PoGE Injectors on page 211 476 The XMS Web Client e Management System XIRRUS Add Devices Use the Add Devices configuration pages to enter all the settings necessary to have XMS find the Arrays on your Wi Fi network and add them to its database of managed devices You can enter SNMP settings add devices and networks and enter Array SSH user information For a detailed discussion of how XMS adds devices and how SNMP must be configured on Arrays and on XMS to support it please see Discovering the Network on page 67
374. luded in the list The list can also be defined as a Deny List which PREVENTS access to the network by any client included in the list Deny lists are generally easier to maintain because you can add users to the list arbitrarily either because you don t recognize the MAC address or because you do recognize the MAC address and you don t trust the client With an Allow List you must maintain accurate records of your users and ensure that they appear in the list otherwise you run the risk of denying access to trusted users Managing Configuration with Policies 281 e XIRRUS Management System D Security MAC Access List t1 way Security MACAccessListType Disable Allow List B MAC Access List Address 00 0F 7D 00 43 AA B Radius MAC A List Ex MAC Access xu List Admin Radius Apply Cancel Figure 187 MAC Access List MAC Access List Type Choose the type of access control list you want to create either an Allow List or a Deny List You also have the option of choosing Disable which will disable this functionality and render any client MAC addresses in the list redundant If you disable this feature you can always enable it again at a later time Creating control lists whether MAC access lists rogue AP lists or any other type of control list is always beneficial even if you do not intend to make use of the list immediately control lists can be used as a backup at anytime and the
375. ly configure multiple Arrays to have the same value Select the checkbox at the beginning of each row that is to contain this value To select all rows click the checkbox in the header row Click again to deselect all rows Click Bulk Edit when the desired rows are selected The Bulk Edit Custom Field Values dialog box appears Enter the desired string up to 255 characters and click OK Figure 312 Bulk Edit Select Columns Export Showing 1 to 25 of 816 Rows 25 gt 1234 Home Hostname Gigi IPAddress Gig1 Mac Address Serial Number Location alantest Network Settings TM 1XR480411014422 10 100 54 55 00 0f7d 01 c6 a3 XR48041101442 Als Cube Radio Settings 7 1XR480411014422 10 100 54 55 00 017d 01 c6 34 XR48041101442 Als Cube 1234 Advanced Config F NORTA Arrays poc SS Se ee 7 PoGE Bulk Edit Custom Field Values T7 XMS 5 0 V2 1 Add Devices XMS 5 0 V2 1001 XMS 50 V2 1002 i Select the changes you would like to make to all selected Arrays and click OK XMS 5 0 V2 1003 alantest 42 Trap Receivers Licenses Custom Fields Custom Field Values XMS 5 0 V2 1004 Custom Actions XMS 5 0 V2 1005 XMS 5 0 V2 1006 OK Cancel 1 ETE ET ey T en a XMS 5 0 V2 1007 Figure 312 Bulk Configuration Custom Field Values The value that you entered will be displayed in the Arrays list for the selected Arrays 492 The XMS Web Client e Management System XIRRU
376. ly this time range Schedule Run the report at this time See Schedule on page 382 Email Report To After running email the report See Email Report To on page 382 394 Managing Reports e Management System XIRRUS If you have a large network the results returned in this report may span many pages The browser display of the report will truncate to three pages to give you a preview to see the entire report open the PDF version Table Details for the Station Traffic Report The results shown in this report are organized by the following column headers 9 Array Hostname The host name of the Array to which the station is associated 9 Station Hostname This column shows the host name for each client station listed in the report The Station Hostname is specified for a device in this case a client station when its networking is installed and configured In order to connect to a computer running the TCP IP protocol via its hostname or Windows NetBIOS name the name must be resolved to an IP address e XIRRUS XMS Reports Station Traffic Tx Rx Time Span Custom Monday 04 11 2011 06 00 PDT to Monday 04 11 2011 23 59 PDT Station Traffic Tx Rx 0 005 0 004 0 003 3 0 002 0 001 0 000 07 00 09 00 11 00 13 00 15 00 17 00 19 00 21 00 23 00 Time Average Tx Average Rx Average Tx Rx Station Traffic Tx Rx Row Count 2 Jaray Hostname
377. m number of syslog messages retained internally and defining the reporting severity level For more information about configuring a syslog and or NTP server go to Services on page 247 112 Monitoring Your Network e Management System XIRRUS System Log Enable Syslog Server G Yes C No Maximum Internal Syslog Records Retained 1 500 500 4l Local Syslog File Level Information Primary Syslog Server Address Domain or IP 10 10 10 100 Primary Syslog File Level Information Secondary Syslog Server Address Domain or IP 10 10 9 100 Secondary Syslog File Level Tertiary Syslog Server Address Domain or IP Tertiary Syslog File Level System Log To Console Console Syslog File Level Figure 79 Configuring a Syslog Server Syslog Severity Levels All syslog messages are categorized by their levels of severity which include Emergency Alerts Critical Error Warning Notice Information default Debug not to be used for routine syslog monitoring Monitoring Your Network 113 e XIRRUS Management System Reviewing Syslog Events To review syslog events click the Tools menu and select Syslog to open the Syslog window in your browser All syslog entries are displayed initially regardless of their severity level Any event that has triggered an alarm is color coded To view the totals for all color coded alarms see the Alarms window Table is sorted by Time Export Browse to
378. match an admin account that is configured on the Array else the upload to the Array will fail Schedule Details Reboot Array at Completion Check this box if you want to reboot the Arrays when the software update process is complete The default is for this box to be checked 356 Managing Configuration with Policies e Management System XIRRUS The updated software will not become the running image on the Arrays until they have been rebooted 9 Update Time Select whether the update is to be performed at a scheduled time configured below or whether the update is to be performed immediately Execute Now is the default 9 Date Scheduled Enter a date for the update or click in a field month day year and increment decrement the values using the UP and DOWN arrows This option is only applicable if you chose Execute per Schedule in the Periodicity field otherwise this option is grayed out Time Scheduled Enter a time for the update or click in a field hour minute second and increment decrement the values using the UP and DOWN arrows This option is only applicable if you chose Execute per Schedule in the Periodicity field otherwise this option is grayed out Saving Your Software Update Policy When you have configured all image file transfer and scheduling settings for your updates click Apply in the Software Update window to save the new policy Managing Configuration with Policies 357 e XIRRUS Managemen
379. me followed by 9090 For example http 192 168 10 40 9090 When the splash page appears click Web Client on the lower right anagement System Production client for monitoring and configuring Xirrus Arrays BETA client for limited Af nitoring and configuration capability Start the Web Client Figure 321 Starting the Web Client Log in to the web client the default for both fields is admin In a few moments the web client Dashboard page appears Click the Settings button at the top to display the Status page Figure 320 It shows a summary of the running state of the server If you have not already performed the required initial setup for a XMS Administration 503 e XIRRUS Management System newly installed server proceed to Initial Server Setup below Otherwise you may skip that section Note You may use the Command Line Interface CLI to manage the XMS server Access it at port 2022 and log in using adminladmin Do not use port 22 Initial Server Setup The following steps must be completed to configure the XMS server for proper performance If you have already completed these steps you may skip this section Initial Network Settings See Web Client Network Settings on page 508 for more information Note The XMS Server requires a valid license for full operation If one is not present it will be requested when you open a client See Licensing the XMS Server on page 35
380. me will only be sent to Arrays running ArrayOS Release 3 5 or above Primary Host Name Enter the hostname of the primary RADIUS server If you enter an IP address as well the IP address has precedence and the host name will be ignored Primary IP Address Enter the IP address of the primary RADIUS server RADIUS Primary Port Enter the port number for the primary RADIUS server or increment decrement the number using the UP and DOWN arrows Primary Shared Secret Enter the primary shared secret This is the secret that is shared between the user and the external RADIUS server Users can only be authenticated if they are using the same shared secret Managing Configuration with Policies 277 o XIRRUS Management System Verify Primary Secret Retype your Primary Secret in this field to verify that you typed it correctly Optional Repeat the instructions in the previous four bullets to define a secondary RADIUS server if available If the primary server goes off line the Array will failover to this secondary server defined here RADIUS Timeout Enter the maximum idle time in seconds before the RADIUS session times out The default is 600 seconds NAS Identifier From the point of view of the RADIUS server the Array functions as a client also called a network access server NAS Enter the NAS Identifier that the RADIUS servers expect the Array to use Accounting If you would like the Array to send RADIUS
381. ment System XIRRUS Creating a New RF Policy An RF policy is created so that you can define how your Arrays and the IAPs within the Arrays operate in your wireless network to achieve optimum RF operability in all RF bands To create a new RF policy click on the Add Policy button in the RF Policy window When the Add Policy window appears select Copy from a chosen Array recommended and choose a model Array or select Start from scratch as described in Adding a Policy on page 219 Click OK The RF policy details window is displayed and is divided into five primary areas 9 Global RF Settings Configuration settings established here affect the wireless operation of all Arrays to which this policy is applied Global settings are not specific to an 802 11 wireless technology Instead they affect the RF characteristics of Arrays in ways that are common to your wireless network s operation This area of the policy defines the name of the policy It also allows you to change basic RF settings enable or disable features such as loopback mode radio assurance load balancing sharp cells station to station blocking and WLAN management and configure fast roaming parameters e 802 11a Settings These settings include defining the basic 802 11a data rates which 802 11a data rates are supported and specifying the threshold parameters for fragmentation and RTS Any configuration parameters you establish here will affect all 802 11a IAPs on Ar
382. ment System XIRRUS Network From the Configuration gt Policies node in the tree click on Network to display the Network window This window contains a list of all network policies currently available with tools to manage these policies Total 1 Add Policy J Columns Refresh J Policy Name 10 100 IP Address Gigabit IP Address Gigabit2 IP Address Modify Exe Delete Networki 0 0 0 0 0 0 0 0 0 0 0 0 Es gt x 353 Done Java Applet Window Figure 166 List of Network Policies The columns in this window show selected settings for the listed policies For information about changing the columns displayed see Selecting the Columns Shown in a Policy Window on page 220 Creating a New Network Policy A network policy is created so that you can define how the network interfaces of your Arrays are configured for connectivity to the network The policy must offer the optimum network interface connectivity for all options console 10 100 Fast Ethernet Gigabit 1 and Gigabit 2 See Figure 167 Network Interface Ports on page 240 To create a new network policy click on the Add Policy button in the Network Policy window When the Add Policy window appears select Copy from a chosen Array recommended and choose a model Array or select Start from scratch as described in Adding a Policy on page 219 Click OK The Network Settings window is divided into three primary areas 9 10 100 Fast Ethernet The 1
383. mmunity Name of an injector must match one of those listed for SNMPv2 See Adding or Deleting SNMPv2 and SNMPv3 Entries on page 81 When the injector has been discovered it will appear in the Discovered Devices list Figure 48 on page 72 and you may proceed to the next section If the injector has not yet been discovered you may enter it manually as described in Adding an Array or PoGE Injector on page 87 Associate the Injector with an Array Once XMS has discovered the injector you must tell XMS which Array s are connected to it Both the injector and the Array s must already be listed in Discovered Devices before you may proceed 1 From the Tools menu select POGE Management The PoGE Injector and Array Data and Power Port Mapping window appears Step 1 Click on an Injector Data and Power port below to begin mapping in r Host Name IP Address MAC Address Port 1 Port 2 Port 3 Port4 Port 5 Port 6 Port7 xj M dti dd Oingo Boingo Data and Power Port 1 Xirrus E00001 10 100 44 30 00 0f7d e0 00 01 x Mapped to pp Xirrus E00002 10 100 23 42 00 0f 7d e0 00 02 MB 150 280 AX1 Data and Power Port Name MB 150 280AX1 Port Number 1 IIP Address 10 100 23 51 JAC Address 00 0 7d 00 12 16 Xirrus E00007 10 100 40 90 00 0f 7d e0 00 07 Figure 149 Injector and Array Associations 2 Click the PoGE link and find the row for the desire
384. mn You may click the checkbox in the header row to select all Arrays or click again to deselect all The following operations are available 9 Reboot this option reboots the selected Arrays You will be asked to confirm the operation 9 Pull Diagnostic Logs this option initiates a task that instructs the selected Arrays to create a diagnostic log file When the diagnostic log is complete a link will appear Click it to download the requested diagnostic results as a zip file Pulling diagnostic logs from 8 array s This operation will take about 2 minutes to complete When the download link appears below you can download the logs Download Diagnostic Logs Figure 277 Pull Diagnostic Logs The XMS Web Client 445 e XIRRUS Management System Delete this option removes the selected Arrays from the XMS database You will be asked to confirm the operation Xirrus Support this button is an example of a function added with the Custom Actions page 446 The XMS Web Client e Management System XIRRUS Radios The web client Radios page lists the radios IAPs on all of the Arrays being managed by XMS This is a display only page but values may be exported The following sections describe the Radios page 9 About Using the Radios Page 9 The Radios List Select Columns Dashboard Showing 1 to 25 of 8400 ly Rows 25 Arrays Hostname Radio Enable Band Channel Bonded Cha Bond Mode Cell Size Tx dBm RxdBm
385. moval is complete XSMT shuts down If it does not close automatically you should shut it down it manually Relaunch XSMT before proceeding to do anything else with XMS You may then start the XMS server see XSMT Starting the XMS Server on page 529 The version at the bottom of the Installed Patch list will be used 536 XMS Administration e Management System XIRRUS XSMT Advanced Settings The Advanced menu in XSMT allows you to change settings in the XMS server in order to modify the polling interval for Arrays and to change how the server communicates with Arrays via SSH 9 Server Management Tool File Database Sg Help XMS Server Man BE SSH Server Required Services Service Name Status Figure 349 XSMT Advanced Menu Options The Advanced menu provides two functions 9 Changing Polling Frequency 9 Changing the SSH Server Address There is also a browser based interface that allows you to change XMS server settings 9 Managing XMS Server Settings via the Web Client Changing Polling Frequency XMS offers a rich set of statistics in its Dashboard Reports and other windows These statistics are obtained by polling the managed Arrays using SNMP The default polling rate is Fast providing near real time data The Advanced gt Polling menu option allows you to change the polling interval that the XMS server uses Note that you may also change polling frequency using the web client as described in
386. must be the Array that has a wired connection to the LAN Client links from one or more Arrays may be connected to the host and the host may also have client links The configuration for WDS is performed on the client Array only as described in WDS Client Links on page 344 No WDS configuration is performed on the host Array First you will set up a client link defining the target host Array and SSID and the maximum number of IAPs in the link Then you will select the IAPs to be used in the link When the client link is created each member IAP will associate to an IAP on the host Array For more information on WDS and how to use it see the discussion in the Xirrus Wi Fi Array User s Guide Creating a WDS Policy To create a new WDS policy click Add Policy in the WDS Policy window When the Add Policy window appears select Copy from a chosen Array recommended and choose a model Array or select Start from scratch as described in Adding a Policy on page 219 Click OK The WDS policy details window appears It is divided into two primary areas e WDS Client Links This section defines the policy name and sets up the link on the Array but doesn t actually assign any IAPs to the link e WDS Client IAP Use this section to assign IAPs to links Managing Configuration with Policies 343 e XIRRUS Management System WDS Client Links The WDS Client Links window names a WDS policy and configures one or more of the fo
387. n PoGE p 1XR480411014422 10 100 54 55 Ali s Cube Add Devices re 1XR480411014422 10 100 54 55 Ali s Cube Trap Receivers I NORTA Array5 10 100 54 28 Q XMS 50 V2 1 172 16 45 2 XMS_SQA_VLAB Gustom Delis re XMS 5 0 V2 1001 172 16 49 2 XMS_SQA_VLAB Figure 290 Radio Settings Page You may use this page To Modify Rows Individually or choose To Modify Multiple Rows for bulk configuration this applies identical settings to the selected rows You may also choose To Export Radio Settings and possibly To Import Radio Settings after making changes to them Please see IAP Setting Details Figure 203 on page 311 for a detailed description of the settings shown on this page Note that any time you click the Export button or use the Export Settings link the old unedited values will be exported unless you have completed saving your edited values to the Arrays 466 The XMS Web Client e Management System XIRRUS To Modify Rows Individually 1 Step 1 Select Arrays For each radio that you wish to modify select the checkbox at the beginning of the row Click the checkbox in the header row to select all rows Click again to deselect all rows Click Next when the desired rows are selected 2 Step 2 Edit Radio Settings You may edit the values in the following columns Enable Band Channel Bonded Channel Bond Mode Locked Cell Size Tx dBm Rx dBm and Antenna Simply click a table cell that you wish to modify A text box
388. n Arrays window as described below To create a new Array group click the Add Group button on the lower left Enter a name for the new group in the resulting dialog box and click OK Changes made here will be reflected in the Groups policies as well and vice versa The Arrays Window Group Policies and the Dashboard Any changes made here will appear in the Groups policies as well and vice versa Changes made in either place will also be reflected almost immediately on the Dashboard Recall that you may select a particular Array group to display in the Dashboard using the Array Group field on the upper right of the Dashboard Managing Your Wi Fi Arrays 183 e XIRRUS Management System window The Dashboard will filter data to display only data for the selected group and certain other windows such as Arrays and IAPs will also show filtered results For instance if you have selected an Array group on the Dashboard and you have added Arrays to that group those Arrays will be included in the data shown on the Dashboard More Information About Groups The following list is provided as a reference when managing Array groups Groups on page 366 About Dashboard Data on page 92 Creating a Map Group on page 196 Unassigning Groups on page 195 184 Managing Your Wi Fi Arrays e Management System XIRRUS Applying Policies to an Array Use this option to apply policies to an Array and change its configuration Bef
389. n Daily Run Monthly Hour of Day 23 00 w Days s ENTONEN Tuesday Wednesday Thursd ursday sil O Select all i Show Schedule Apply Java Applet Window Figure 52 Scheduling the Discovery Process Daily 76 Discovering the Network e Management System XIRRUS Scheduling Monthly Discovery If you choose Monthly the only editable fields are the Hour of Day and Days fields In this case select an hour from the pull down list then select one or more days of the month or click Select All if you want the discovery process to be initiated every day Click Apply The discovery process will start on the hour and day s of the month specified Note that discovery only runs on the selected days If you select 30 then discovery will not run in February for example Network Discovery Schedule Run Hourly Run Daily Run Monthly Hour of Day 06 00 v Day s 02 04 eaea V Select All Show Schedule l Apply Close Java Applet Window Figure 53 Scheduling the Discovery Process Monthly When you have finished setting up the scheduling criteria for the network and device discovery process click on the Close button to exit from the Network Discovery Schedule window Discovering the Network T77 e XIRRUS Management System Adding a Network In addition to discovering networks XMS allows you to add networks manually To add a network you must define its
390. n for each enabled IAP at a time you specify here in hours and minutes using the format hh mm Leave this field blank unless you want to specify a time at which the auto configuration utility is initiated Global Tx Power Enter the transmit power to be used for all IAPs 9 Short Retry Limit This attribute indicates the maximum number of transmission attempts for a frame the length of which is less than or equal to the RTS Threshold before a failure condition is indicated The default value is 7 Enter anew value between 1 and 128 or increment decrement the value using the UP and DOWN arrows Long Retry Limit This attribute indicates the maximum number of transmission attempts for a frame the length of which is greater than the RTS Threshold before a failure condition is indicated The default value is 4 Enter a new value between 1 and 128 or increment decrement the value using the UP and DOWN arrows 9 Beacon Interval When an Array sends a beacon it includes with it a beacon interval which specifies the period of time before it will send the beacon again The Managing Configuration with Policies 321 e XIRRUS Management System default value is 100 Enter a new value between 20 and 1000 or increment decrement the value using the UP and DOWN arrows The value you enter here is applied to all IAPs Broadcast Rates This option changes the rates of broadcast traffic sent by the Array including beacons When set
391. n of all IEEE 802 11n features such as TX and RX chains and channel bonding please see IEEE 802 11n Deployment Considerations in the Xirrus Wi Fi Array User s Guide RF xi Configuration Mode 802 11n Mode G Enabled Disabled TX Chains ek ie Qs RX Chains iei 197i iot 02 112 9 Guard Interval Short Long Auto Bond 5 GHz Channels Enabled Disabled 5 GHz Channel Bonding Dynamic C Static 802 11b g 9 2 4 GHz Channel Bonding Dynamic Static 802 11n Data Rates R Supported Data Rates Basic Data Rates 802 11n MCSO Standard Rate 6 5 Bonded Rate 13 5 Bonded Short G I Rate 15 0 a MCS1 Standard Rate 13 0 Bonded Rate 27 0 Bonded Short G I Rate 30 0 a MCS2 Standard Rate 19 5 Bonded Rate 40 5 Bonded Short G I Rate 45 0 a MCS3 Standard Rate 26 0 Bonded Rate 54 0 Bonded Short G I Rate 60 0 a au MCS Standard Rate 39 0 Bonded Rate 81 0 Bonded Short G I Rate 90 0 a LIC D NN TNI MCSS Standard Rate 52 0 Bonded Rate 108 0 Bonded Short G I Rate 120 0 a Figure 211 802 11n RF Settings 802 11n Configuration Mode Details 802 11n Mode Select Enabled to operate in 802 11n mode with four 802 11b g n mode ports and the remaining IAPs operating in 802 11a n mode The default is Enabled Use of this mode is controlled by the Array s license key The key must include 802 11n capability or you will not be able to enable this Managing Configuration with
392. n one step by simply reading in the csv license file issued by Xirrus Similarly when it s time to upgrade all of your Arrays with new features or a major software release the required licenses may all be installed in one step This section describes using XMS to manage Array licenses If you are TS looking for information regarding the XMS server s license please see Licensing the XMS Server on page 35 About Licensing and Upgrades An Array s license determines many of the features that are available on the Array For example automatic cell sizing and channel allocation require a license that includes the Xirrus Advanced RF Performance Manager RPM Also IEEE 802 11n operation on XN model Arrays is a licensed feature To check the features supported by your license see the next section The Array Licensing Window For more information on the features that require a license please see Advanced Feature Sets in the Introduction chapter of the Xirrus Wi Fi Arrays User s Guide If you are upgrading an Array to add new features that are not supported by your existing license you must enter the new license key that includes the upgrade s features before upgrading Similarly if you are upgrading an Array for a new software release you must enter the new license key that enables the operation of that release before upgrading Major releases will need a new license key but minor releases will not For example to upgrade from ArrayOS
393. n page 259 e DHCP Server on page 265 e Security on page 270 SSIDs on page 287 e User Groups on page 301 e IAPs on page 309 RF on page 316 e WDS on page 342 Filters on page 348 e Software Update on page 354 Web Page Redirect WPR on page 358 Managing Configuration with Policies 215 e XIRRUS Management System Configuration File Advanced on page 362 e Groups on page 366 9 Audit on page 370 Working with Policies NOTE A policy defines the entire configuration of an Array feature When a policy is applied to an Array any existing configuration is replaced with the configuration defined in the policy For example an SSID policy defines a set of SSIDs When an SSID policy is applied to an Array the Array is set to have exactly this set of SSIDs Thus any previous SSID configurations on the Array will be deleted and will be replaced by the set of SSIDs configured in the policy The only exception to this is the Configuration File Advanced policy which makes incremental changes to the settings on an Array when the policy is executed If you wish to make a change to existing configuration on an Array rather than replacing that aspect of its configuration don t use a policy except for the Configuration File Advanced policy Instead see Configuring an Array on page 174 All policy types reside in the Tree under the Configuration node To expand t
394. n the log file type xirrusout txt 818 KB pumusout ii 1025KB umusoutbi2 1024 KB umusouttt3 1024 KB Figure 334 Multiple Log Files XMS Administration 519 e XIRRUS Management System Web Client Managing the XMS Server License This section describes the license to use the XMS server If you are looking for Pan information regarding using XMS to manage Array licenses please see Managing Array Licenses on page 189 For full operation the XMS server must have a license installed Until the license is installed the server will operate in a default mode that allows it to manage only one Array Thus without an appropriate license Discovery will stop at one Array and will not allow more Arrays to be added If you do not have a valid license you will be notified each time you start an XMS client Valid XMS licenses are typically for a particular number of Arrays When XMS has discovered the maximum permitted number of Arrays no additional Arrays will be discovered Use the following steps to enter your license 1 Click the Settings button then click XMS License on the left The XMS License Info page appears A You are currently in demo mode Please enter your license key If you do not have a license key please contact gt 1 805 262 1600 2 Enter license key License Key li Serial Number Apply XMS License Info License Key Serial Number Product
395. n this example check the Select All check box To clear all items i e no items selected click the Select All check box again Click Apply when done Viewing the Discovery Schedule To see the current discovery schedule for XMS click Show Schedule in the Network Discovery Schedule window Current Discovery Schedule AJ Network discovery will run on the following schedule Day s Every Day Hours 24 Hour format 06 00 23 00 Java Applet Window Figure 50 Viewing the Discovery Schedule Discovering the Network 75 e XIRRUS Management System Scheduling Hourly Discovery If you choose Run Hourly the only editable field is the Hours field In this case select one or more hours from the list Click Apply The discovery process will start on the hour s that you specify every day of the week Network Discovery Schedule Run Hourly Run Daily Run Monthly Hour s 12 00 O Select all Show Schedule Apply Close Figure 51 Scheduling the Discovery Process Hourly Scheduling Daily Discovery If you choose Run Daily the only editable fields are the Hour of Day and Days fields In this case select an hour from the pull down list then select one or more days of the week or click Select All if you want the discovery process to be initiated every day Click Apply The discovery process will start on the hour and day s of the week specified Network Discovery Schedule Run Hourly Ru
396. n this list exactly once even if it was detected by multiple Arrays If you were previously viewing only entries of a particular class for example viewing only Security Managing Intrusions 123 e XIRRUS Management System Unknown devices click this button to return to displaying all entries Green Approved These are rogues that you have designated as Approved e Yellow Known These are rogues that you have designated as Known e Gold Unclassified When a device is initially detected it is unclassified which simply means that no one has classified it yet e Orange Unknown Rogue These are rogues that you have designated as Unknown e Red Blocked These are rogues that you have designated as Blocked If you classify a rogue AP as blocked then the Array will take measures to prevent stations from staying associated to the rogue When the monitor radio abg2 abgn2 is scanning any time it hears a beacon from a blocked rogue abg2 abgn2 sends out a broadcast deauth signal using the rogue s BSSID and source address This has the effect of disconnecting all of a rogue AP s clients approximately every 5 to 10 seconds which is enough to make the rogue frustratingly unusable e Gray Ad Hoc An ad hoc wireless network is typically a network formed between two stations that are communicating with each other directly without going through a normal AP This button shows a count of ad hoc nodes detected by Array
397. n to display the severity value represented by the button You may display the Dashboard by clicking the blue arrow G Set to Alarm Status All Critical Major Minor Warning Clear Clear Delete yy 4 d d Alarm Status Ks 2 Ee We to AH 2 Clear 9 Delete Figure 76 Alarm Status Summary Select Buttons The following severity buttons are shown Click a button to filter the Alarm list so that it shows only alarms with the selected severity Please see Severity Levels on page 110 for more information e 2 Dark Blue Total the total number of alarms in the network Click this button to show all alarms in the Alarm list regardless of severity e Q2 Red Critical o Wo Orange Major e 1o Gold Minor o 9 Yellow Warning e 9 Green Clear The Clear and Delete buttons to the right of the severity buttons are used in conjunction with the Alarm list to clear alarms or delete them You may select multiple alarms to clear or delete at once using Ctrl Click Ctrl a or Shift Click 108 Monitoring Your Network Management System Alarm List Status Failure Object 01 02 7d 00 4b 52 Trap TimeDate 16 04 48 PDT 04 03 2008 Message Trap received softwareUploadFailure 01 01 7d 00 4b 52 Trap 16 04 40 PDT 04 03 2008 Trap received resetArray 01 00 7d 00 4b 52 Trap 16 04 36 PDT 04 03 2008 Trap received envCtriTempOver Figure 77 Alarm List This list shows ala
398. nagement by defining a set of policies that set a desired Array configuration Different global policies may be created for different configurations that you commonly use Global Policies were previously called default policies Host Name Each computer running TCP IP regardless of the operating system has a host name also known as a machine name Host names are used by networking applications such as Telnet FTP Web browsers etc In order to connect to a computer running the TCP IP protocol using its host name the host name must be resolved to an IP address Host name resolution is typically done by the Domain Name System DNS Changing a computer s host name does not change its NetBIOS name See also DNS and NetBIOS IAP Integrated Access Point A configurable wireless module radio dedicated to the Xirrus Wi Fi Array family of products There are 16 IAPs embedded within the XN16 XS16 and XS 3900 12 IAPs embedded within the XN12 and X512 8 IAPs embedded within the XN8 X58 and XS 3700 Array and 4 IAPs embedded within the XN4 X54 and XS 3500 Array Glossary of Terms 547 e XIRRUS Management System Icon A graphical symbol used in the XMS client interface to represent objects such as Arrays within a map alarms and events See also Map Symbol Intrusion Detection System A Xirrus proprietary application that scans and monitors the XMS database for intruders MAC Address Media Access Control Address A 6
399. nager on page 534 9 Database Manager this is used to manage backups See Backup Manager on page 499 The possible status values for these services may be 9 Checking Gray shown during startup as XSMT is checking the state of the manager and starting it if necessary 528 XMS Administration e Management System XIRRUS OK Green there is currently no action in progress idle but ready Not Running Yellow the service has been stopped either by administrator request or by error Yellow is also used during the start up and shut down transition states Check the Logs portion of the window for more information 9 Restore In Progress Database Manager Yellow a database restore is running It must complete before the XMS server can be started 9 Patch In Progress Software Manager Yellow a software update is in progress It must complete before the XMS server can be started XSMT Starting the XMS Server The XMS server must be running if you want to serve XMS clients but remember that the server must be stopped if you want to perform advanced database operations Re initialize and Repair To start the server from the Xirrus Server Management Tool any time the server is down select the XMS Server Manager tab and click the Start button on the lower left When the server begins its startup process the Logs section on the right of the window displays the progress of the system operations that are com
400. nd option is handy if you want to test using the broadcast feature Click the Broadcast button to send the message that you entered The message is sent immediately to all clients or just to your client based on your selection 500 XMS Administration e Management System XIRRUS About Managing the XMS Server The tools for managing the XMS server are different depending on whether the server is running on a Linux based appliance or a Windows based computer Managing the XM 3320 XM 3340 XM 3360 These Linux based Management Appliances use the browser based XMS web client Figure 320 on page 502 to manage the server Database management functions are available in the web client and may also be accessed by XMS Java client users See the sections starting with Managing XMS on Linux based Management Appliances on page 502 Managing the XM 3300 and the XA 3330 CC These Windows based products use the Xirrus Server Management Tool XSMT Figure 340 on page 526 for advanced XMS server and database management Many of the server s settings are managed with the web client Common database management functions are available in a browser based Backup Manager that may be accessed by XMS Java or web client users See the sections starting with Managing XMS on Windows based Systems on page 523 About the XMS Database The XMS database maintains the properties status and statistics for all the managed Wi Fi Arrays re
401. nd the SNMP version used to discover it This same SNMP version will be used for all subsequent SNMP communication with the device For network discovery the Discover Devices window shows the status of discovery on the network The status for network discovery may be any of the following 9 Discovering The discovery process is currently in progress You must wait until the process has completed before taking any further action 9 Discovery Complete The discovery process has been completed successfully Disabled The discovery process has been disabled for this network If XMS has not discovered a device that you expected to find in the Discovered Devices list see What If My Device Is Not in the Discovered Devices List on page 89 Discovering the Network 73 e XIRRUS Management System Scheduling Discovery This option provides a tool for scheduling when XMS conducts a new discovery process either hourly daily or monthly When scheduling keep in mind that the process may generate a significant amount of network traffic when discovering a large network The impact is greatly reduced by minimizing the sizes of subnetworks being managed Take care not to accidentally specify a Class A network When configuring devices or when manually adding a network for discovery Adding a Network on page 78 be sure that the subnet mask specifies only the subnetwork to be managed with XMS You may also exclude selected network
402. ndow Figure 149 shows the new connection 4 To delete a connection from XMS click the blue for that port To view the associations by Array click the Arrays link on the left Manage the Injector with XMS Once a Xirrus PoGE injector output port has been mapped to an Array port you may turn the PoGE port on and off and view its status This is done via the Array right click menu on The Arrays Window See Managing a PoGE Injector on page 187 Managing Your Wi Fi Arrays 213 e XIRRUS Management System 214 Managing Your Wi Fi Arrays e Management System XIRRUS Managing Configuration with Policies This chapter shows you how to use the Java client to create and manage policies for individual Arrays set up groups of Arrays for convenient management and how to audit configuration changes Policies are used by XMS to establish a uniform and efficient method for applying predefined criteria to your Wi Fi Arrays For example if you establish a security policy then all of the parameters you defined for that policy can be easily assigned to any Array or group of Arrays from a menu of security policies Section headings for this chapter follow the structure of the Configuration node in the Java client s Tree Working with Policies Policies e Global Policy on page 223 e System Information on page 225 Management Control on page 228 e Network on page 239 Services on page 247 e VLAN o
403. neously for example a telephone is a full duplex device because both parties can talk and be heard at the same time In 244 Managing Configuration with Policies e Management System XIRRUS contrast half duplex only allows data transmission in one direction at a time If the Auto Negotiate feature is disabled you must manually choose Full or Half duplex for your data transmission preference The default is Full Gigabit 1 Speed If the Auto Negotiate feature is disabled you must manually choose the desired data transmission speed from the pull down list either 100 Megabit or Gigabit The default is Gigabit Gigabit 1 MTU Size Specify the MTU Maximum Transmission Unit size When you specify the MTU you are defining in bytes the largest physical packet size that the network can transmit Any messages larger than the MTU that you specify here are divided into smaller packets before being sent The default is 1504 bytes 9 Gigabit 1 Port Mode Specify how the two gigabit ports are to be use The options are e Active Backup gig1 gig2 failover to each other this is the default Aggregate Traffic from gig amp gig2 using 802 3ad e Bridge traffic between gig amp gig2 Transmit Traffic on both gig amp gig2 e Load balance traffic between gig amp gig2 Mirror traffic on both gig amp gig2 For more information on these options see the Wi Fi Array User s Guide part number 800 0006 001 For a detai
404. nes how many rows the table contains not how many rows it can display in the window Sorting Table Details You can sort the data in a table based on the column type and the details can be viewed either in ascending or descending order The type of sorting ascending or descending is indicated by Up and Down arrows in the column header where applicable Where arrows appear in a column header simply click the header to toggle the sorting sequence between ascending and descending The sorting operation can be performed on the server side or the client side Server Sorting BLUE Source WA Client Sorting GREEN Figure 43 Table Sorting Arrows Server Level Sorting Sorting tables at the server level sorts all data in XMS and is not restricted to just the data available in the client interface For example if there are 100 events logged by XMS and only 50 are displayed in the client sorting at the server level sorts all 100 events and not just the 50 events that are displayed The default is for all sorting to be performed at XMS server level Server level sorting is indicated by a BLUE arrow ascending or descending in the column header and is performed by clicking inside the header 60 The XMS Java Client Interface e Management System XIRRUS Client Level Sorting Sorting tables at the client level sorts only the data currently displayed in the client interface For example if there are 25 events displayed in the client
405. net to be ensure that administrators are not completely locked out of an Array if the RADIUS server is down Setting Up Admin Accounts on the RADIUS Server Permissions for RADIUS administrator accounts are controlled by the RADIUS Service Type attribute Attribute 6 To grant read write permission configure the RADIUS server to send back the Service Type attribute with a value of Administrative value 6 To grant read only permission the RADIUS server should send the Service Type attribute with a value of NAS Prompt value 7 When configuring administrator accounts on the RADIUS server you must observe the same restrictions for length and legal characters as when creating these accounts on the Array using the Management Control Admin window the user name and password must be between 5 and 50 characters inclusive Admin RADIUS Setting Details e Enable Admin RADIUS Click Yes to enable the use of RADIUS to authenticate administrators logging in to the Array You will need to specify the RADIUS server s to be used The following fields only become available if you chose Yes to enable admin RADIUS otherwise they are grayed out 9 Primary Host Name Enter the host name or IP address of the primary RADIUS server 9 Primary Server Port Enter the port number for the primary RADIUS server or increment decrement the number using the UP and DOWN arrows Managing Configuration with Policies 285 e XIRRUS Management System P
406. network is configured and managed effectively and securely The interfaces are easy to use and can be accessed from any location using a Web browser The XMS Dashboard Figure 3 provides an at a glance overview of the security and performance of your network Introduction 9 e XIRRUS Management System 02112 802 11b 802 11b9 802 110 Figure 3 XMS Java Client Dashboard Performance Monitoring Continually monitors wireless performance and will alert you to interference or other issues before network problems have an opportunity to escalate Advanced Functionality XMS provides a convenient platform to add feature enhancements such as location based tracking by taking advantage of the Wi Fi Array s superior directionally aware capabilities Centralized Configuration Management Allows you to schedule firmware updates for individual Wi Fi Arrays or groups of Arrays at specific times In addition XMS can archive any previous version s of firmware that your network has used 10 Introduction e Management System XIRRUS Network Monitoring and Reporting XMS manages all alerts and alarms to determine how to respond to potential faults in the network The unit also monitors your network s wireless performance and provides detailed reporting and statistical data for each Wi Fi Array group of Arrays or individual IAPs Integrated Access Points Introduction 11 e XIRRUS Management System
407. ng an existing policy this field is grayed out not editable If you are using a standard naming convention for all of your policies the name you enter here should conform to that convention File Details 9 Transfer Image to Server Click this button Figure 224 to browse for the Array image file and transfer the file to the XMS database Managing Configuration with Policies 355 e XIRRUS Management System Select Software Image Click this button Figure 224 to browse for the image file from the File Chooser window then select the file IXS 4 0 4 1103 bin OK Cancel Figure 225 File Chooser Custom Login Use Custom Login Custom Login is optional if SNMP is enabled on the device and it is running an ArrayOS release greater than 3 5 Check this box and set up the login parameters required for uploading the image to Arrays The upload uses Secure Channel Protocol SCP to authenticate access to each Array The Array will accept logins that match any of its Admin accounts with write privileges These accounts may be entered either directly on the Array or using Management Control policies Also this process will use any Array Shell Authentication information defined in the discovery dialog see Adding or Deleting Array Shell Authentication Entries on page 80 Note that Arrays are shipped with the factory default login admin admin Name Password Enter a name and password for access to an Array These values must
408. ng and Upgrades eene im er m epe mete 189 the Array Licensing Window auo amuip ene ORG eO 190 Exporting Array Licenses i eere tierna ei HI EHE HERE RE 191 Importing Array Licenses eoim etre iei rtt ten rh set e aH pee sissi 192 Editing Array Licenses niece eet ii pe Rec eee teo RR ERR 194 Managing Pending Array Licenses eoe dd eH Rd d Es 196 TAPS uom dta Ere un ted decedunt dU ens e Boe dtd 198 The LAPS Wind Ow s caeno cummins ri e prt ie mier ert 198 Connecting to an LAP s Array 4st parer RIRs i bh ainn 200 Configuring the RF Settings of an TAP seats 200 Viewing Events and Alerts IAPS erson caniaii the ree tette aces 202 VEAL ORNS cui nonem en I E E ATUS 203 The Stations Window seskan Eames eeu 203 Connecting toan Associated ATIY mrski iE 205 Viewing Events and Alerts Stations eerte tetas 206 Sp M M 207 The SSIDs Wind OW iioii tni ere ei e bed 207 Connecting toan sol D S ATEO sce nonien enm e en ore aa 208 Configure the Sal SetBnssausihescnmaieimienen iei ODORE 208 Viewing Events and Alerts SSIDS iati 210 POGE Injectors H staia 211 Add the Injector to XMS ere een rn teer rie herpes erede eet 212 Associate the Injector with an ATPay edet tint nette pite ines 212 Manageithe Injector with XMS x05 mtenciiemadsini mimi dene t 213 Managing Configuration with Policies 215 Working with PolicieS i22 r
409. ng associated to the rogue When the monitor radio abg2 abgn2 is scanning any time it hears a beacon from a blocked rogue abg2 abgn2 sends out a broadcast deauth signal using the rogue s BSSID and source address This has the effect of disconnecting all of a rogue AP s clients approximately every 5 to 10 seconds which is enough to make the rogue frustratingly unusable When the Auto Blocking option is enabled on an Array it treats unknown APs as if they were explicitly blocked This is basically a shoot first and ask questions later mode By default auto blocking is turned off Auto blocking provides two parameters for qualifying blocking so that APs must meet certain criteria before being blocked This keeps the Array from blocking every AP that it detects Auto Block RSSI Sets a minimum RSSI value for automatic blocking of rogue APs For example if an AP has an RSSI value of 90 it is probably a harmless AP belonging to a neighbor and not in your building The default value is 50 Auto Block Level Block based on encryption level Select an encryption level from the drop down list rogues meeting this criterion will be blocked e Auto Block Network Types Select rogue APs to automatically block by applying the criteria above only to networks of the type specified below The choices are Managing Configuration with Policies 327 e XIRRUS Management System e All the unknown rogue APs may be part of any
410. nge any of the signal strength values that are associated with the colors shown as described in Step 2 e To create your own color scheme first specify the range of values to be represented Enter the Weakest signal value the Strongest signal value and the Step value 5 or greater for increments in between the two ends of the range e Next you may specify the range of colors by selecting the Weakest color and the Strongest color 4 Click the OK button to return to the map Your changes will be saved for this map only Deleting a Map If you delete a map the map is permanently removed from the database Make sure you want to permanently delete the map before doing so 1 To delete a map right click it in the Maps list on the left and choose Delete Map When prompted click on the Yes button to delete the map Working with Maps 157 e XIRRUS Management System Managing Arrays Within Maps Each discovered Xirrus Wi Fi Array may be displayed in maps as a graphical representation of the Array itself labeled with the Array s host name if it is unique or IP address If an Array does not have a unique IP address then its MAC address is shown The example in Figure 107 shows an Array icon with its host name as displayed in any map window gt Host Name IP Address SS XN4 or MAC Address Array Icon Figure 107 Displaying Arrays Within Maps This section only deals with managing the Array icons wi
411. nk You may view latest or archived report results run the report or edit report parameters from this page The list of reports may be sorted by clicking on the column header for the Report Last Run or Scheduled columns Click again to reverse the sort order Delete Report Title Run Edit Reports View Archive P 4 x e Mgnitor Ze configure Q Reports Settings My Reports em cene Showing 1 to 12 of 12 My Reports New Report F Report Description LastRun Customize Oo Array hatabiity Displays table of Array availability staBsScs filterable by Array Group Loc 3 12 11 1056 AM View faise Runnow Eas Anche PE Aay Avamability SS Displays table of Array availability st3538cs fiterable by Array Group Loc 3 15 11 11 21PM View Taise Runnow Ede Archie CO snayineentory EH An inventory ot arrays tmerable by aray Group WISHISSSPU Yew taise Bunnow Eas Archie F Amayinventory t An inventory of Arrays finerable by Array Group M15711 10 20AM View faise Bunnow Gd Archive ChanneUsage Disptays IAP counts on 2 4 GHz and GHz channels tmerable tai Bunnow Edn Archie Ethemet Traffic Displays Tx and Rx averages or peak total Emernet megants per secor 511416PM View faise Runnow Gon Archive T Mike Array Availabilty Displays table of Array availability statistics fillerable by Array Group V15 1458PM View faise Runnow Ed Archive L 7 Mes Ememet rrors Displays total Emernet crops an
412. not editable If you are using a standard naming convention for all of your policies the name you enter here should conform to that convention Save Configuration Check this box to ensure that any time this policy is applied to an Array the Array will save the updated configuration information to its flash memory If this box is left unchecked then when this policy is applied to Arrays the configuration changes will need to be saved manually or else they will be lost when the Arrays are rebooted Note that this checkbox does not actually apply the policy to any Arrays To apply the policy see Using Policy Windows on page 218 DNS Settings DNS Domain Enter the DNS domain name for this server DNS is used by the Arrays to lookup the names of various servers for example the System Log and NTP servers You must specify a domain name when static IP addresses are used This has the effect of appending the domain name to non fully qualified address requests for example the NTP server host name configured as NTP1234 will become NTP1234 yourdomain com DNS Server 1 Enter the IP address of the primary DNS server DNS Server 2 If you have a secondary DNS server available enter the IP address of the this DNS server here DNS Server 3 If you have a tertiary third DNS server available enter the IP address of this DNS server here Managing Configuration with Policies 249 e XIRRUS Management System After completin
413. nt Appliances on page 541 9 Frequently Asked Questions on page 542 Contact Information on page 544 General Hints and Tips for Xirrus Management Appliances This section provides some useful tips that will optimize the reliability and performance of XMS 9 You must terminate all applications before shutting down the server Appliance This includes closing down the client interface and the server For more information go to Shutting Down the XMS Server on page 38 9 For best performance the Management Appliance should be mounted in a dust free and temperature controlled environment 9 Ensure that the Management Appliance receives adequate ventilation at all times The unit s cooling fans are mounted on the rear panel Do not obstruct the fans 9 Never use the Management Appliance chassis as a base for heavy monitors or other equipment 9 Some Appliance management operations may take a few minutes to complete Always be patient and wait for these operations to finish before attempting another task Technical Support 541 e XIRRUS Management System Frequently Asked Questions This section answers some of the most frequently asked questions regarding the functions and operation of XMS O Why won t my browser connect to the XMS server to start the XMS A client I can ping the server Remember to point the browser to Port 9090 on the server by appending 9090 to the server address For example
414. nt System XIRRUS Security Reports The level of security you introduce into your network depends on the requirements of your deployment though we strongly recommend that you do not configure your Arrays as Open Systems no authentication required and no data encryption An Access Control List ACL and or WEP Wired Equivalent Privacy should be your minimum requirement for security WPA and WPA2 offer even stronger security The Wi Fi Array s line rate encryption ensures high performance when encryption is in use For more information about security go to Security on page 270 Security reports provide data based on the security parameters defined for your network of Arrays including authentication and data encryption The following security report is available 9 Rogue List Shows all rogue APs that are visible on your network and provides charts that distinguish between Unclassified Approved Known or Unknown rogue devices Managing Reports 419 e XIRRUS Management System Rogue List A rogue is any wireless device that is visible on your network but not recognized as being an integral part of the network Rogue detection is performed automatically and constantly by the built in threat sensor radio abg2 abgn2 in each Array XMS collects this information from the Arrays in its managed network As access points are switched off and on the list of detected rogues changes Please see Security Managing Intrusions on page 11
415. ntication Protocol is a simple protocol PAP transmits ASCII passwords over the network in the clear unencrypted and is therefore considered insecure CHAP Challenge Handshake Authentication Protocol is a more secure Protocol The login request is sent using a one way hash function External Splash page This option displays a splash page instead of the first user requested URL The splash page files reside on an external web server To set up external splash page usage set WPR Mode to External Enter the URL of the external web server in WPR Redirect URL enter that server s shared secret in WPR Redirect Password and enter the WPR Verify Key After the splash page the user is redirected to the captured URL If you want the user redirected to a specific landing page instead enter its address in WPR Landing Page URL 9 Roaming Layer For this SSID select whether to enable fast roaming between IAPs or Arrays at Layer 2 and Layer 3 or at Layer 2 only If you select fast roaming at Layers 2 and 3 you must also enable roaming at both layers in RF settings see Global RF Settings on page 319 Please see the Wi Fi Array User s Guide for more information about roaming 9 SSID Filter List To specify filters to be active on this SSID enter the name of the desired filter list The filter list should already have been defined before it can be assigned See Filters on page 348 294 Managing Configuration with Polici
416. number of Arrays in one step Reports on system performance may be created Additional XMS server administration functions are available in the web client especially for Linux based servers This section describes how to start the Java client To start and use the web client please see The XMS Web Client on page 423 XMS Java Client Minimum System Requirements 9 Java enabled Web browser 9 Java Version 6 Monitor 1280 x 1024 or better keyboard and mouse Getting Started with XMS 29 e XIRRUS Management System Please check your Release Notes for the latest requirements To run the Java client XMS client machines require a Java enabled Web browser to connect with the server Once a connection is established with the server all client related files are downloaded to the local machine Download time depends on machine capability and available bandwidth The client machine must have Java 6 installed If Java 6 is not present the user s browser will display an error message Some browsers will prompt the user to download required software but may not necessarily identify the download target as being Java 6 If necessary the user may download the Java runtime from http java sun com javase downloads index jsp a link to the web site will be provided with the warning to the user Use the Java Runtime Environment JRE version 6 0 or higher Java Client The XMS Java client requires a Java enabled Web browser to c
417. nvenience 9 The IAPs will be reset and then will all be brought back up Similarly other settings such as SSID User Group DHCP Server and VLAN will be reset and brought back up 364 Managing Configuration with Policies e Management System XIRRUS e All other radio IAP settings are commented out so that no radio settings will change Certain other settings such as Hostname Location and ArrayOS primary and backup software images will be commented out as well in order to prevent these device specific settings from being applied to multiple Arrays Editing the Configuration File You may type text to enter it in the box and use the Backspace and Delete keys You cannot search for text but you can use common selection and cut and paste keys Ctrl a Select all Ctrl c copy selected text Ctrl x cut selected text Ctrl v paste text from buffer may be from an application other than XMS Shift Click select contiguous text up to clicked location Shift Arrow select contiguous text in direction of arrow Saving Your Config File Policy When you have finished any desired edits to the configuration file click Apply to save the policy Managing Configuration with Policies 365 e XIRRUS Management System Groups From the Configuration menu click on Groups to display the Groups window This window contains a list of all Array groups currently available with tools to manage these groups including the abil
418. o Arrays the configuration changes will need to be saved manually or else they will be lost when the Arrays are rebooted Note that this checkbox does not actually apply the policy to any Arrays To apply the policy see Using Policy Windows on page 218 WPA Details TKIP Enabled Check this box to enable the TKIP Temporal Key Integrity Protocol encryption standard TKIP provides improved data encryption by scrambling security keys using a hashing algorithm and by adding an integrity checking feature ensures that the encryption keys haven t been tampered with Uncheck this box if you want to disable TKIP AES Enabled Check this box to enable AES Advanced Encryption Standard AES is a data encryption scheme that uses three different key sizes 128 bit 192 bit and 256 bit AES is the strongest encryption standard and is used by government agencies however old legacy hardware may not be capable of supporting the AES mode it probably won t work on older wireless clients Because AES is the strongest encryption standard currently available it is highly recommended for Enterprise networks Uncheck this box if you want to disable AES WPA Group Rekey Time Never and WPA Group Rekey Time Sec Enter a value in WPA Group Rekey Time Sec to define the WPA group rekey time in seconds or increment decrement the time using the UP and DOWN arrows The value you enter determines the elapsed time before the system uses an alternative se
419. o an Array for securely fetching files from the XMS server is 10 100 54 16 To provide an alternate IP address for secure copies from XMS check the box below and specify the override address sae Figure 331 Changing the SSH Server Some policies such as Software Update and Web Page Redirect WPR require Arrays to download files When XMS instructs an Array to fetch a file from the server the Array opens an SSH session with the XMS server to perform a secure transfer of the file By default XMS instructs the Array to connect to the XMS server s IP address In some situations you may need to specify a different externally accessible IP address for example if NAT is in use on the XMS server s network To change the IP address that Arrays will be instructed to use for an SSH connection use the SSH Server link on the left Note that the current SSH server XMS Administration 517 e XIRRUS Management System address is displayed Figure 331 Click the Use alternate IP address checkbox and enter the desired IP Address Click Save when done Note that Arrays will use Port 22 for SSH to the XMS server Web Client Viewing Server Log Files Export Log File Log Size alert auditt t 46 KB ConfChange log 8KB ConfChange log old 8KB ConfChangeErr log 0KB ConfChangeErr log old 0KB mserr txt 4KB msout tt 6KB mysql repair result 16KB nmserr txt
420. o devices 2 total array s 1 updated array s 0 failed array s 09 21 57 265 Attaching pollers to devices 2 total array s 2 updated array s 0 failed array s 09 21 57 265 Done NUN Figure 350 Changing Polling Frequency After you change the polling rate each Array will be reconfigured for the new polling interval The Polling Rate window will display the progress of this process Depending on the number of Arrays under management it might take some time to process the change on all Arrays up to 10 seconds per Array You may continue to use XMS while this change is proceeding If you are using the browser interface to manage polling speed proceed as described in Web Client Polling Settings on page 516 538 XMS Administration e Management System XIRRUS Changing the SSH Server Address The Software Update and Web Page Redirect WPR policies require Arrays to download files When XMS instructs an Array to download a file from the server the Array opens an SSH session with the XMS server to perform a secure transfer of the file By default XMS instructs the Array to connect to the XMS server s IP address In some situations you may need to specify a different externally accessible IP address for example if NAT is in use on the XMS server s network SSH Server External IP Address The default SSH Server address provided to an Array for a secure copy is 10 100 25 20 To specify an alternate IP
421. o run separate power cabling All of these are available in managed versions allowing your power supplies to be managed by XMS as part of your Wi Fi network Figure 1 illustrates the elements of the Xirrus Management System The XMS server may run on hardware supplied by Xirrus or by you Users start the XMS client simply by entering the URL of the XMS server on a web browser on their computers The XMS server manages a number of Wi Fi Arrays via SNMP Xirrus Management System XMS client running on Java enabled browser XMS Client XMS Server Figure 1 The Xirrus Management System p Introduction e Management System XIRRUS About this User s Guide Detailed information and procedures have been provided in this User s Guide that will enable network administrators to run XMS on the Xirrus Management Appliance or to install and run XMS on their own hardware to understand and navigate the XMS client interface and to successfully manage their network of Wi Fi Arrays from a central location XMS may be installed on your own Windows Server based platform or comes pre installed on the Management Appliance which was specifically designed by Xirrus to host XMS This Guide does not cover the installation or management of Arrays in isolation from XMS For procedures that deal with Arrays not centrally managed by XMS refer to the Xirrus Wi Fi Array User s Guide part number 800 0006 001 Organization This User s Guide is organized by
422. oading custom WPR files to the XMS server The files will then be available for upload to Arrays 9 Transfer Configuration File to Server Click on the browse button to browse for a custom WPR file from the Upload window then select the file The file will be transferred to the appropriate folder on the XMS server D Upload x i hs_temp css 6 ximus chap4 4 21 1ipg amp Semtech Floor 2 jpg 8 ximus chap4 4 23 1 png amp ximus_chap5 7 1 15 ipg E Items Desktop r 8 WWePtSc ipg 8 ximus chap1 1 5 2ipg wpr pl File name Figure 228 WPR File Upload to XMS Server Configuration File Details e File List This section allows you to create a list of the custom WPR files to be uploaded to an Array when this policy is executed Files may be added to the list by pressing the d button to the right of the File List box The WPR 360 Managing Configuration with Policies e Management System XIRRUS dialog box Figure 229 lists the files that you have downloaded to the XMS server for this purpose Select a file to be added to the File List and click Add Existing File List entries may be deleted by pressing the 3 button D wpr x Please select a file CAAdventNetWebNMShtmhuploadhs css CAAdventNetWebNMShtmhuploadWmasthead png CAAdventNetWebNMSWhtmhuploadwpr pl Figure 229 Selecting WPR File List Entries Custom Login Details 9 Use Custom Login Required Yo
423. oard e Management System XIRRUS e Red the number of Arrays that are down in the selected group An Array is considered to be down if XMS has been unable to communicate with it for over three minutes Click this button to show only Arrays that are down in the Arrays window 9 IAPs This is a summary of the status of all IAPs on Arrays that are in the selected group The entries show the count of IAPs at each status value Each entry is a link click it to display The IAPs Window with the IAP list filtered to show only those IAPs that have the selected status value The following status counts are shown e White the total number of IAPs in the group Click this button to show all IAPs in the IAPs window regardless of status e Green the number of IAPs that are up Click this button to show only IAPs whose status is up in the IAPs window e Light Gray the number of IAPs that are not enabled on Arrays Click this button to show only IAPs that are disabled in the IAPs window Red the number of IAPs that are down Click this button to show only IAPs that are down in the IAPs window Using the Dashboard 95 e XIRRUS Management System Stations The Stations section summarizes the number of active stations for the selected Array Group see About Dashboard Data on page 92 the proportion using 802 11a 802 11bg 802 11b or 802 11n and identifies the five stations with the poorest signal strength
424. of application or some other criteria that QoS systems can use to provide differentiated classes of service Default Policy See Global Policy DHCP Dynamic Host Configuration Protocol A method for dynamically assigning IP addresses to devices on a network DHCP issues IP addresses automatically within a specified range to client devices when they are first powered up DNS Domain Name System A system that maps meaningful domain names with complex numeric IP addresses DNS is actually a separate network if one DNS 546 Glossary of Terms e Management System XIRRUS server cannot translate a domain name it will ask a second or third until a server is found with the correct IP address Encryption Any procedure used in cryptography to translate data into a form that can be decrypted and read only by its intended receiver Gateway The gateway in a network that a computer will use to access another network if a gateway is not specified for use In a network using subnets a default gateway is the router that forwards traffic to a destination outside of the subnet of the transmitting device Gigabit Ethernet The newest version of Ethernet with data transfer rates of 1 Gigabit 1 000 Mbps Global Policy A Global Policy groups a set of policies that can be applied to Arrays in one shot It is simply a convenience that allows you to apply a set of policies in one step rather than one at a time It simplifies Array ma
425. olbar i by each button N Tool Tip Mouse Over Figure 27 Toolbar Default Map View Toolbar Buttons The following buttons are available in the toolbar from left to right Hide Show Toolbar Hide or show the toolbar Hiding or showing the toolbar is a matter of personal preference The default is to have the toolbar visible Go Back to Previous Go back to the previously viewed window only applicable if you have accessed more than one window Go Forward to Next Allows you to toggle between the previously viewed window and the next window only applicable if you have accessed more than one window and want to move forward to the next window Detach Current Window Detaches the current window from the Main Viewing Area and manipulate the window independently of the client interface Help Provides access to the XMS online help system 42 The XMS Java Client Interface e Management System XIRRUS Tree Located at the upper left side of the client interface the tree shows a hierarchical set of functional areas within XMS built on a parent child relationship of nodes For example in Figure 28 the Policies node is considered the child to its upper level parent Configuration xus E18 Monitor B Dashboard 8 Alarms ex Events Resources amp amp Arrays APs 8 Stations ssids Ei Security 8 Devices B Configuration B e Policies amp Global Pol
426. olicy is applied to an Array the Array is set to have exactly this set of User Groups Thus any previous User Group configurations on the Array will be deleted and will be replaced by the User Groups configured in the policy To change the existing configuration of an Array rather than replacing that aspect of its configuration don t use a policy Instead see Configuring an Array on page 174 User Group Settings This window contains a field for defining the name of the policy and an editable table listing all User Groups currently defined in this policy User Groups ES X ALE Figure 198 User Group Settings 302 Managing Configuration with Policies e Management System XIRRUS Policy Details Policy Name Enter a meaningful name that describes this policy If you are modifying an existing policy this field is grayed out not editable If you are using a standard naming convention for all of your policies the name you enter here should conform to that convention Save Configuration Check this box to ensure that any time this policy is applied to an Array the Array will save the updated configuration information to its flash memory If this box is left unchecked then when this policy is applied to Arrays the configuration changes will need to be saved manually or else they will be lost when the Arrays are rebooted Note that this checkbox does not actually apply the policy to any Arrays To apply the pol
427. olumns on page 442 Export on page 443 Rearranging and Resizing Columns in a Table on page 443 Sorting on page 443 The Stations List The Stations List Figure 279 on page 449 shows all of the stations associated to Arrays that have been discovered by XMS You may customize the columns shown in this list see Select Columns on page 442 This list is very similar to list on the Stations Window on page 203 This list shows information about each station and the IAP to which it is associated For each station the following information is shown by default The XMS Web Client 449 e XIRRUS Management System The Station MAC address The IP Address of the station The Media Type supported by the station 802 11n 5 GHz or 2 4 GHz 802 11a 802 11b or 802 11bg The NetBIOS name of the station The Array Host Name of the Array to which the station is associated The Assoc Time How long in days hours minutes the station has been associated to the Array The current RSSI signal strength of the connection as measured by the radio 450 The XMS Web Client e Management System XIRRUS Rogues The web client Rogues page lists the potential rogue access points detected by Arrays in the network and types of encryption in use The Arrays that detected the intruding APs are also identified This is a display only page but values may be exported The following sections describe th
428. omplete discussion of implementing Voice over Wi Fi on the Array see the Xirrus Voice over Wi Fi Application Note in the Xirrus Library From the Configuration Policies node in the tree click VLAN to display the VLAN window Use VLAN policies to add an Array to a VLAN Add Policy J Columns Refresh VLAN Policy Name Save Configuration VLAN List Modify Exe Re Java Applet Window Figure 177 VLAN Policy List The columns in this window show selected settings for the listed policies For information about changing the columns displayed see Selecting the Columns Shown in a Policy Window on page 220 The Wi Fi Array supports dynamic VLAN assignments specified by Tu RADIUS policy settings When RADIUS sends these assignments the Array dynamically assigns wireless stations to VLANs as requested VLAN tags on traffic are passed through the Array i e VLAN tags are not stripped Once a station has been dynamically moved to a new VLAN it will be shown in the Stations window as a member of the new VLAN Figure 144 on page 203 It is critical to configure all VLANs to be used on the Array even those that will be dynamically assigned About Virtual Tunnels and VTun Xirrus Arrays support Layer 2 tunneling with Virtual Tunnels This allows an Array to use tunnels to transport traffic for one or more SSID VLAN pairs onto a single destination network through the Layer 3 core network Managing Configu
429. on is dropped or increment decrement the time using the UP and DOWN arrows The default is 300 seconds e Word Size Enter a value in this field to define the word size in data bits or increment decrement the value using the UP and DOWN arrows The default is 8 bits With the word size set at 8 bits all communications with the Arrays will use only 8 bit words 9 Parity A parity bit is used to reveal errors in the transfer of data Even parity means that the parity bit is set so that there are an even number of 1s in the word see word size Odd parity means that the parity bit is set so that there are an odd number of 1s in the word Choose the preferred parity either None Odd or Even The default is None where no parity checking is performed Stop Bits In asynchronous communications where every byte of data is preceded by a start bit and followed by a stop bit the stop bit indicates that a byte has been successfully transmitted Like parity stop bits are used for error detection Choose either Yes or No for stop bits The default is No 9 Rate This is the data transmission rate in bits per second bps Choose the desired data rate from the pull down list The default is 115 200 bps Saving Your Management Control Policy When you have configured all of your management control settings click on the Apply button in the Management Control window to save the new policy 238 Managing Configuration with Policies e Manage
430. on occurs You may clear the checkbox if you wish to disable the notification without deleting this entry Enter a unique Name to identify this entry Select the Event Type Alarm or Event and the Severity An exact match of this severity level will trigger the sending of the notification The only Notification Method offered is email 116 Monitoring Your Network e Management System XIRRUS x Notification Settings IV Enabled Name riie Event Type Alarm Notification Method mi Severity SMTP Server famtp xyzcocom SCS SMTP Port fs Sender s Address es Recipient s Address Jretadmin xyzco com Anonymous Login User fenesmith ss s S Password S Ok Cancel Figure 83 Event Notification Creation To set up the mail recipient and server to be used enter the following 9 SMTP Settings SMTP Server and Port In the SMTP Server field enter the address of the mail server to be used for sending the notification for example smtp xyxzco com Enter the SMTP Port used by the server The default value for the SMTP port is 25 9 Sender and Recipient In the Recipient s Address field enter the email address to which this notification should be sent Enter an email address in the Sender s Address field this will be used in the notification to identify the sender 9 User and Password If the specified SMTP server allows anonymous users then
431. on the upper right to display the table column chooser The Visible Columns list shows the columns that will be displayed To hide a column select it from the Visible Columns and click to move it to the Hidden Columns list Similarly to display a column select it from the Hidden Columns and click to move it to the Visible Columns list There is also a button to Restore Default column display Use the Up and Down buttons to arrange the columns left to right Click OK when done These changes are persistentfor a user if you log out they will still apply the next time that you open the web client 442 The XMS Web Client e Management System XIRRUS Export The Export link above the list may be used to export rows from this page to an Excel file or to a CSV file a set of comma separated values that are compatible with Microsoft Excel The exported file may be used to provide Xirrus Customer Support with a snapshot of the configuration of your network at their request All rows will be exported regardless of whether you have selected only a subset of entries When you click Export a dialog box allows you to select the file format Click the Export button again to browse to the destination folder and specify the filename You may choose to save the results in a file or open them in Excel Close the Export dialog when done Select Rows Simply click the checkboxes of the rows you wish to select You may then click func
432. on to add each target Array then click Apply after each addition Add as many targets as you like A target Array may be specified using the Array s MAC Address IP Address or Host Name Use the radio buttons to select a format and then enter the address in the appropriate form Figure 208 To delete a target select it from the list then click the X icon Managing Configuration with Policies 329 e XIRRUS Management System After completing all of the desired fields in the Global window either click on the Apply button to save this policy or click on one of the following buttons to configure more RF policy options e 802 11a Settings Configure settings for the 802 11a wireless technology e 802 11b g Settings Configure settings for the 802 11b and 802 11g wireless technologies 802 11n Settings Configure settings for the 802 11n wireless technology 9 LED Settings Configure the activity parameters and behavior of Array LEDs 330 Managing Configuration with Policies e Management System XIRRUS 802 11a Settings This window allows you to establish global 802 11a IAP settings These settings include defining the basic 802 11a data rates which 802 11a data rates are supported and specifying the threshold parameters for fragmentation and RIS Any configuration parameters you establish here will affect all 802 11a IAPs on the Array when this policy is assigned r 802 11a Global Settings Supported Data Rates
433. onnect with the XMS server running on a remote machine The first time that a client machine establishes a connection with the server a Web Start client is downloaded to the local machine This installs an XMS icon on the local desktop Clicking this icon provides the fastest way to start the XMS client for future connections to the server This is described in the following procedures 9 Starting the XMS client for the first time 9 Starting the Java client after the first time When the user connects to the XMS server an error will occur if Java is not present If necessary the user may download Java from http java sun com javase downloads index jsp Use the Java Runtime Environment JRE version 6 0 or higher NOTE XMS will not necessarily warn you if you have an older version of JRE installed Please make sure that you have JRE 6 installed on all client computers Note Client access to the XMS server requires access to ports 9090 9091 and 9092 Make sure that these ports are open in any firewalls that exist between clients and the XMS server 30 Getting Started with XMS e Management System XIRRUS Starting the XMS client for the first time 1 Toinstall the XMS Web Start client from a remote workstation point your workstation s browser to the IP address or hostname for the XMS server machine followed by 9090 For example if the IP address is 192 168 10 40 point your browser to http 192 168 10 40 9090 The XMS
434. onthly Depending on the selected Schedule Type different fields will be displayed For a monthly backup specify the day of the month only one day may be selected but you can always specify more schedule entries for additional monthly backup days For a weekly backup check all of the days of the week on which the backup is to be performed one or more days are allowed For all three Schedule Types enter the Time of Day for the backup Then click the Schedule Backup button underneath Your new schedule entry will be listed showing its name and scheduled days and time For example Figure 327 shows an entry named Sundays which will be performed every Sunday at 2 00 AM To remove a schedule entry click its Remove Schedule button 9 Restore Backup Click the View Backups button to display a list of all the backup files found in the specified Backup Location Each backup is identified by its Backup Name and Date Time Figure 328 The most recent backup is listed first Restore Backup Backup Date Time Backup Name Restore Backup Dec 16 2009 10 15 AM new Restore Dec 16 2009 10 00 AM sched BU Restore Dec 15 2009 5 28 PM 12345 Restore Dec 14 2009 5 55 PM rretertet Restore Dec 14 2009 5 48 PM rretertet Restore Nov 16 2009 5 36 PM 123456 Restore Figure 328 Restoring Backups If you wish to restore your XMS database from a previously saved version click the Restore Backup button to the right of the
435. or Java to start the XMS client When the client has started you are presented with XMS s Dashboard window Figure 20 34 Getting Started with XMS Management System Licensing the XMS Server M This section describes the license to use the XMS server If you are looking for TS information regarding using XMS to manage Array licenses please see Managing Array Licenses on page 189 For full operation the XMS server must have a license installed Until the license is installed the server will operate in a default mode that allows it to manage only one Array Thus without an appropriate license Discovery will stop at one Array and will not allow more Arrays to be added If you do not have a valid license you will be notified each time you start an XMS client Valid XMS licenses are typically for a particular number of Arrays When XMS has discovered the maximum permitted number of Arrays no additional Arrays will be discovered Use the following steps to enter your license 1 In the Menu Bar of the XMS Java client select Tools Xirrus XMS License The Server License dialog box appears To license the server using the web client instead please see Web Client Managing the XMS Server License on page 520 Server License License Key Serial Number XMS License Info License Key Serial Number Product Name Max Version Max Array Count Expiration Date unimitea You
436. or example you might run the XMS server in Paris but set Country in the Global RF Settings to United Kingdom for Arrays operated in London Enable WLAN Management This option allows you to enable or disable WLAN management If this feature is enabled any Array with this policy assigned to it can be remotely managed by a client Choose Yes to allow remote management of Arrays or choose No to deny management The default is No Auto Cell Size Period seconds You may set up auto cell size configuration to run periodically readjusting optimal cell sizes for the current conditions Enter a number 320 Managing Configuration with Policies e Management System XIRRUS of seconds to specify how often auto configuration will run If you select 0 then auto configuration of cell sizing will not be run automatically 9 Auto Cell Size Overlap 7o Enter the percentage of cell overlap that will be allowed when the Array is determining automatic cell sizes 9 Auto Channel Configuration Mode This option allows you to instruct the Array to auto configure channel selection for each enabled IAP when the Array is powered up Choose On Array PowerUp to enable this feature or choose Disabled to disable this feature See Auto Configuring Channels on Multiple Arrays on page 181 for a discussion of auto configuring channel selection e Auto Channel Configure on Time This option allows you to instruct the Array to auto configure channel selectio
437. or select a zoom value from the drop down list Working with Maps 139 e XIRRUS Management System amp Display Contour i Click to turn the display of heat map contours on or off Recalculate Location id After using Locating Devices to find the position of a station use this button to hide the location or recalculate and show the position Edit Map Settings Click here to select the data displayed on the Information Bars See Map Settings Window on page 160 Edit Environment Settings Click here to describe the construction in your environment and the RF signal attenuation expected at your site See Entering Environment Settings on page 151 Edit Contour Colors e Click here to change the colors that are used to represent RF signal strengths on the heat contour map See Changing Contour Map Colors on page 156 Information Bars Information about your current position on the map i e the current position of the mouse pointer is displayed in bars above and below the heat map as shown in Figure 92 on page 136 This allows you to investigate different areas of the map without changing your current Array selection To customize the information displayed see Map Settings Window on page 160 The following sections describe the Information Bars Map Data on page 141 9 Array Data on page 141 The bottom of the map also has a Heat Map Signal Strength Values legend which defines the signal strength in
438. or the Array is displayed For more information about Events and Alerts go to Monitoring Your Network on page 105 5 Events and Alerts For 00 0f 7d 00 43 0a Selected Object is 00 0F 7d 00 43 0a Total Number of Events 9 Total Number of Alerts Critical Major Minor Warning Clear Close Java Applet Window Figure 145 Viewing Events and Alerts 206 Managing Your Wi Fi Arrays e Management System XIRRUS SSIDs This section discusses the SSIDs that are configured as part of your managed network The SSIDs Window This window is generated when you click on the SSIDs node in the Tree which appears under the Resources parent node The SSIDs window includes a list of all SSIDs operating within the network SSDs Total 50 Displaying 1 to 25 Pagetengtn 2s v ie 4 D DN JL Aray Gigi MAC J Broadcast j Band j Encryption j QOS Priority j VLANID A 00 0f 7d 00 41 9c A 00 0f 7d 00 41 9c 00 0f 7d 00 41 9c 00 0f 7d 00 41 9c 00 64 7d 00 4b 52 enabled 01 63 7d 00 4b 52 enabled 00 01 7d 00 4b 52 enabled 00 02 7d 00 4b 52 enabled 00 03 7d 00 4b 52 enabled 00 04 7d 00 4b 52 enabled 00 64 7d 00 45 52 enabled 01 63 7d 00 4b 52 enabled De nd 7ee nin abe enahled Java Applet Window Figure 146 SSIDs Window The SSIDs window contains information about each SSID and the Array it belongs to as well as informing you whether or not the SSID is being broadcast the wireless band being used t
439. ore you can apply a policy to an Array the policy must exist To create a new policy go to Managing Configuration with Policies on page 215 To apply a policy or policies to the Array select and then right click the Array and choose Assign Policies from the pull down list The Global Policy window is displayed Sysemhformton We e y y S S Management Control Network etworkxsosos006 SSS Services Bewexumwexex s vua Wessweemex s DHCP Server None imi Securty m ssns pasmes zewas senex Global Figure 130 Assigning Policies Choose the policy or policies you want to apply from the pull down lists associated with each category then click on the Apply button to apply the chosen policies to the Array or click on the Cancel button to abort the request In each category select None if you wish to make no changes to that category of configuration on the Array i e to leave it as is Updating Array Software You may use the right click menu to apply an existing Software Update policy to an Array see Software Update on page 354 for more about creating these policies Right click the Array and choose Update Software from the pull down list Select the desired policy from the Software Update Policy window Managing Your Wi Fi Arrays 185 e XIRRUS Management System B Software Update Pol
440. ories by your choice of category Total show totals only Array Name show station count by Array VLAN by name or number show station count by VLAN SSID show station count by SSID Media Type show station count by radio mode 802 11n 802 11a etc Radio show station count by IAP an1 abgn1 etc Association Type show station count according to whether the connection is authenticated 410 Managing Reports e Management System XIRRUS The graph has a separate line for each member of the detailing category For example if you detail on Radio as shown in Figure 255 then there will be a separate line graph for each IAP an1 an2 and so on This report also shows you how many stations are currently online and includes minimum Lowest and maximum Peak activity A table at the bottom lists peak station counts broken out by your requested category Table Details for the Station Count Report The table below the graph simply shows the peak station count for each member of the Detail on category Managing Reports 411 e XIRRUS Management System Array Reports Array status reports provide utility functions such as listing all Arrays for you and showing reliability statistics The following reports are available in this section 9 Array Inventory Provides a list of all Arrays in your managed Wi Fi network including serial numbers 9 Array Availability This report shows reliability statis
441. ot actually apply the policy to any Arrays To apply the policy see Using Policy Windows on page 218 10 100 Interface Settings 9 This policy cannot change IP address settings This avoids problems with losing contact with the Array and with creating duplicate address issues 10 100 Enable Interface Choose Yes to enable the Fast Ethernet interface or choose No to disable the interface The default is Yes 10 100 Management On Interface Array management is always enabled on this interface You cannot disable management privileges 10 100 Auto Negotiate This feature allows the Arrays to negotiate the best transmission rates automatically Choose Yes to enable this feature or choose No to disable this feature the default is Yes If you disable the Auto Negotiate feature you must define the Duplex and Speed options manually e 10 100 Duplex Full duplex refers to the transmission of data in two directions simultaneously for example a telephone is a full duplex device because both parties can talk and be heard at the same time In contrast half duplex only allows data transmission in one direction at a time If the Auto Negotiate feature is disabled you must manually choose Full or Half duplex for your data transmission preference The default is Full 242 Managing Configuration with Policies e Management System XIRRUS e 10 100 Speed If the Auto Negotiate feature is disabled you must manually choose
442. out VL AIN PolCy uccnuuiadentam iion o ond RE 264 DHCP Seryet e 265 Saving Your DHCP Server POllGy i5 iu ori troi tope Hr tette enia 269 ebd 270 Creating A New Security Policy reri ot rem bt rte PRI 270 saving Your security Poly xcii iiam tane e ded 286 SOILS 287 Creating a New ssl COUCY cancenoatenca nemi aon Oe Est 287 Saving Your SSID Policy uie cnc eee ies it dn 300 decr 301 Creating a New User Group Policy octets 301 saving Your User Group Poliey assein as aee ete rete 308 e XIRRUS Management System LAPS EESE 309 Saving Your TAP POM Cy iocum in iieri ie hebt eese 315 316 Creating a New RE Polly ici eee reris te niente 917 Saving xou RE Policy a coetentem ed Euren a a Enceinte 341 WDS TE 342 Creatine a WDS PONCY cusriiiveissini antisite nE EEan T 343 Saving Your WDS Policy cca pee nei n pem e i aa 347 jj c P 348 Creating a New Filter Policy certe nme eese 348 Saving Your Filter Policy 3c oin eR pd th lS ERU RE 353 Software Update ueniet Seba qi edi bee URL Oen 354 Creating a New Software Update Policy etse 354 Saving Your Software Update PoliGy tte etn es 357 Web Page Redirect WPR 2 usinatenih mittere itte eia idein 358 Creating a New Web Page
443. own All Classification D0 0t 7d 00 89 80 XMS 5 0 V2 1 one E null Xirrus 172 186 45 2 L3R Open Figure 259 Rogue List Report Known When a rogue is designated as Known the system stops reporting on this rogue but still displays it in the rogue list 9 Unknown These rogues are always displayed in the rogue list Managing Reports 421 e XIRRUS Management System Blocked These rogues have been designated as blocked An Array can block this AP by preventing stations from staying associated to the rogue Table Details for the Security Report Rogue List Below the pie chart is a table identifying all of the rogues included in the pie chart The results shown in this table are organized by the following column headers BSSID Vendor ID SSID This shows the BSSID of the rogue device typically its MAC address the name of the equipment manufacturer of the rogue and the SSID network name being broadcast by the rogue device If the rogue has its SSID set to default and is configured to broadcast its SSID then the entry in this field will be default If the rogue is configured not to broadcast its SSID then the entry in this field will be empty Detecting Array IP Address Shows the host name and IP address of the Array that is detecting the rogue device Security Shows the authentication and encryption security levels detected on the rogue device for example AES TKIP EAP If the rogue is
444. pacing 10 feet Location x 5 150 9 y 3 313 6 feet Annex T l o o o 5 00 Wee OO BE Pye 00 0f 74 0 10 100 47 00 017 0 10 100 47 l 00 01 7d 0 10 100 47 Drag and drop selected Array onto the map in the desired location Figure 100 Adding an Array to a Map 4 Clickthe Save Map button to save your work Hl 5 To resize the Array icon click it Then position the mouse over one of the drag handles black squares at corners and in the middle of each side and drag it to enlarge or reduce the size of the Array symbol Figure 101 148 Working with Maps e Management System XIRRUS 6 To move an Array click it Then position the mouse anywhere except over a drag handle Drag the Array to the desired position Figure 101 7 To remove an Array from the current map without deleting it from the XMS database do one of the following e Select the Array on the map or in the Arrays list and then use the Delete button on your keyboard Select the Array and right click Select Remove from Map from the drop down menu Do not select Delete from the menu this will remove the Array from the XMS database e You may select multiple Arrays by using Ctrl click and then remove them in one step by using the Delete button on the keyboard Remember to click the Save Map button to save your work H This will update the Arrays list with your c
445. page please see Managing Array Licenses on page 189 Custom Fields The Custom Fields pages allow you to define your own custom columns and action buttons for the Monitor Arrays table and the Configure Home Page These fields allow you to add all kinds of information and functionality to XMS for Arrays For example you might use extra columns to add an Asset Tag to each Array or to add notes on support cases Using a Custom Action you might add a button to access your company s web portal for managing assets Then you can open the portal to manage a selected Array with a click of the button This feature is discussed in the following pages 9 Custom Fields Page Use this page to define a new column to add to the Arrays table where you can place Array information that your company uses 9 Custom Field Values Use this page to place data in the new column that you created above 9 Custom Actions Use this page to add a button for a new function Define the action that the button will take by specifying a URL The URL can start your desired web application with data based on the currently selected Array The XMS Web Client 489 e XIRRUS Management System Custom Fields Page This page is used to define a new column for the Arrays list This column will be available on the Monitor Arrays page and the Configure Home Page You may add up to five new columns and use them for any sort of information that you d like
446. parameters you establish here will affect all 802 11b and 802 11g IAPs in the Array when this policy is assigned GOnly Mode 802 119 Only 9No Qves 802 119 Protection Oof Auto 802 11a 802 118 Slat Auto Short Only 802 119 Data Rates Supported Data Rates Basic Data Rates 802 11b g Y Java Applet Window Figure 210 802 11 g RF Settings G Only Mode 802 11g Only Choose Yes if you want to restrict the use of 802 11b g IAPs to the 802 11g mode only In this mode no 802 11b rates are transmitted and stations that only support the 802 11b wireless technology will not be able to associate to the Arrays Choose No if you want to allow inter operability with 802 11b clients The default for this option is No 9 802 11g Protection This is a mechanism to let 802 11g IAPs know when they should use modulation techniques to communicate with 802 11b devices especially Managing Configuration with Policies 333 e XIRRUS Management System in wireless networks where there is a mixed environment that has 802 11g and 802 11b clients and the clients are hidden from each other Choose Auto to enable automatic protection for all 802 11g IAPs If you disable the 802 11g protection feature this assumes there are no wireless stations using the 802 11b technology When operating in a mixed 802 11b g environment with
447. peration on the selected Arrays To Modify Multiple Rows Use this procedure to quickly configure multiple Arrays to have the same settings A range of IP addresses may be assigned to the Arrays Bulk Edit will prevent you from making the mistake of assigning identical IP addresses to multiple Arrays 1 Step 1 Select Arrays For each row that you wish to modify select the checkbox at the beginning of the row To select all rows click the checkbox in the header row Click again to deselect all rows Click Next when the desired rows are selected 2 Step 2 Edit Network Settings Select the rows that you wish to edit by clicking their check boxes Then click the Bulk Edit button This displays blank fields for all of the settings that are modifiable in bulk IP Address Increment Subnet Mask DHCP Enabled Default Gateway Location Figure 285 460 The XMS Web Client e Management System XIRRUS Xirrus Management System Select the changes you would like to make to all selected Arrays and click OK IP Address 200 200 46 2 increment by fa gt Subnet Mask DHCP Enabled Unchanged Yes No Default Gateway 200 200 46 1 Location OK Cancel Figure 285 Bulk Configuration Network Settings For the IP Address field enter the starting value for a range of addresses Then select an Increment by value for the range Note that Array host names cannot be bulk configured Bulk edit fields
448. pleted XSMT also opens a system console window in which you can watch progress in more detail Figure 343 To review the full content of the console window use the scroll bar Note that the Start button will be disabled if the server is running or if the current status of the server is not properly shut down To stop the server see XSMT Shutting Down the XMS Server on page 531 XMS Administration 529 e XIRRUS Management System startnms bat Authent icat ionManagerFE NmsSAServerFE cessFE E figProcessFE izationManagerFE EE m rted ume Starta Scroll Bar TopoFE ted ProvisioningFE Started We bNMSMgmt FEProcess Started Werifying connection with web server verified server startup message Please connect your client to the web server on port Figure 343 Server Startup Progress When the server has been started successfully the status of all the Required Services will be Running green as shown in Figure 344 When the XMS server is up the Logs portion of the window will show the following messages The XMS Server is now running Point your browser to http XMS Server IP gt 9090 or locally from this computer use http localhost 9090 Server Management Tool File Database Advanced Help Server is U p CAMS Server Manager software Manager Required Services Service Name Status Web Server Client Login Page Database Server RMI Registry Figure 34
449. pletely customize them using the procedure that follows 1 Click the Color Settings button g The Edit Contour Colors dialog box appears Figure 106 Edit Contour Colors Contour Type Map s Current Contours Editable Contour Properties Units dBm Index Value Color 80 j 3 Colors E Rz 11 G 228 B 248 Rz8 G 250 B 166 Weakest signal value 90 0 Reakest coor m Step value 5 0 Strongest color Strongest signal value 20 0 Preview H fas A A Erg Bess Eng ESI ESI a Eng ux p Figure 106 Changing Contour Map Colors 2 Select the desired color set from the Contour Type field The Preview section at the bottom of the dialog box shows the colors that will be displayed by the settings you have chosen along with the RF value represented by each color 156 Working with Maps e Management System XIRRUS e You may simply change any of the signal strength values that are associated with the colors shown Double click an entry in the Value column and enter the desired RSSI value Click OK when done changing values You should see your new values displayed in the Heat Map RSSI Values legend at the bottom of the map 3 You may not save modifications to any of the predefined color schemes but you may edit the current working colors To customize your own color set e Inthe Contour Type field select Map s Current Contour Colors Editable You may simply cha
450. pping channels limits interference and delivers maximum capacity Select the desired channel for this IAP from the choices available in the pull down list If you select the monitor option available on abg2 abgn2 only use of the monitor option is strongly recommended the IAP will scan all channels for rogue AP devices operating within range of your wireless network The channels that are listed for your selection will differ depending on the country in which Arrays are used To change the country of operation select Admin Options from the menu bar Select the desired Country from the drop down list and click OK A message will be displayed to notify you that you must close your client and start it again The default country is the United States Note that the public safety channels 191 and 195 in the 4 9GHz spectrum range are listed To use one of these channels you must first enable the 4 9 GHz Public Safety Band on the Array using the RF Global Settings Global RF Setting Details on page 320 Operating these channels requires a license using these channels without a license violates FCC rules Warning notices are displayed when you select these channels Yu As mandated by FCC law Arrays continually scan for signatures of military fios radar If such a signature is detected the Array will switch operation from conflicting channels to new ones 9 Locked Select Yes if you want to lock in this channel selection so that
451. pport 543 e XIRRUS Management System Contact Information Xirrus Inc is located in Thousand Oaks California just 55 minutes northwest of downtown Los Angeles and 40 minutes southeast of Santa Barbara Xirrus Inc 2101 Corporate Center Drive Thousand Oaks CA 91320 USA Tel 1 805 262 1600 1 800 947 7871 Toll Free in the US Fax 1 866 462 3980 www xirrus com support xirrus com Page is intentionally blank 544 Technical Support Management System XIRRUS Glossary of Terms 802 11a A supplement to the IEEE 802 11 WLAN specification that describes radio transmissions at a frequency of 5 GHz and data rates of up to 54 Mbps 802 11b A supplement to the IEEE 802 11 WLAN specification that describes radio transmissions at a frequency of 2 4 GHz and data rates of up to 11 Mbps 802 11g A supplement to the IEEE 802 11 WLAN specification that describes radio transmissions at a frequency of 2 4 GHz and data rates of up to 54 Mbps 802 11n A supplement to the IEEE 802 11 WLAN specification that describes enhancements to 802 11a b g to greatly enhance reach speed and capacity Alarm An alarm results from the correlation of events and represents a failure or fault in the network that may need immediate attention Application Client An applet that resides on the local machine where the XMS server resides that provides access to the client interface Array A Xirrus proprietary high capacity wireless acce
452. presented in the network as well as configured maps policies events and reports It is important to back up your database regularly which means establishing a schedule that suits your network s activity Note The XMS server does not have a default backup schedule so it is very important for you to create a backup schedule after installation You may set up a backup schedule to best suit your needs the time required for a backup depends on the size of the database And because XMS provides a client option for managing backups they can be initiated from any client XMS Administration 501 e XIRRUS Management System To manage the database see Backup Manager on page 499 9 XSMT Database Tools on page 532 XMS does not purge old backups automatically We recommend that you periodically review the backup files on your file server and delete older ones as needed depending on the space available on the server Managing XMS on Linux based Management Appliances On the XM 3320 3340 3360 use the browser based XMS web client Figure 320 to perform mandatory initial configuration to restart or reboot the server and for server maintenance The XMS server is started automatically when your Appliance is restarted N Help Logout e w J amp Monitor A configure lt Reports Settings Email Settings These settings are used by XMS when emailing items such as reports Network SMTP Server Address
453. put aire er erem ee menn 168 Eigue lo Array SES coena adiu diea ai oc PE HEEL EURO 169 Figure 116 Menu Items for Configuring Arrays tne tpa 170 Figure 117 Array Login WindOW esiaca esie iter Biel n Ree RA e refrain Mtn 172 Figure 118 Array Status SUMMATY ieercrt neret ett brennt retinere teda 173 Figure 119 Configuring am Attay eue Heg cna ads eee as 174 Figure 120 Contisuning an Atay sac outemedime qud enin tei durt cies 175 Figure 121 Task Results Success teens 176 Figure 122 Save Results cuiii ep t HR eL RI HERRO RR RE REEERE EA 176 Figure 123 Task Results Failure etie tette 176 Figure 124 Create Policies ttomATFay uenerit entretenir rco een ern 178 Figure 125 Confirm Policies to be Created First and Subsequent times 179 Fig re 126 Results of Create Policies trom Array de oiero deseen 180 Figure 127 Auto Configure Confirmation Dialog entente tenth 181 Figure 128 Deleting an AXtay reete te tree terri oie 182 Figure 129 Assigning a GEOUD inii intr EHE Ee HS HERES Eee aena 183 Ligure 190 Assienine DolICIeS int ate ete edible iO BO ee e 185 Figure 131 Updating Array Software Image inn rentes 186 Ligure 192 Viewing Events and Alerts i ioter ane e ERE etd 186 Figure 133 Rebooting an Array aue atem RR EE ERE RH EHE 187 Figure 134 Array License Management Deployed Licenses 190 Figure 135 Exporting Array Licenses ecce nni cineri ertet eere 191 Figure 1
454. put or Media Type The graph is automatically refreshed every 20 seconds Performance i Array Throughput for Group All Arrays 1610 16 20 16 30 16 40 16 50 17 00 17 10 17 20 17 30 17 40 17 50 18 00 18 10 Time Tx Rx Total Graph Type Throughput Interval 2 Hours X Zoom graph using mouse drag Restore by double clicking the graph Figure 71 Dashboard Throughput Use the Interval drop down list to select the time period to be graphed The chart shows data for the last hour by default If you change the Interval a graph for that period of time will be displayed up to approximately the current time If you change the interval XMS resource charts such as those on the The Arrays Window and The IAPs Window will automatically show the same time interval You may zoom in on an area of the graph by selecting the area of interest with the mouse Click and drag to select a region When you release the mouse button the chart will show the selected region Double click anywhere in the chart to revert to showing the entire chart Section Details 9 Throughput The line graphs in this chart display aggregate data throughput across the selected Arrays 98 Using the Dashboard e Management System XIRRUS This chart is very similar to the Array Throughput chart in The Arrays Window Transmit throughput is shown in green receive throughput is shown in blue and total throughput is shown in red 9
455. quests This mode is useful because it prevents determined clients from forcing their way onto overloaded IAPs Note that some clients are so determined to associate to a particular IAP that they will not try to associate to another IAP and thus they never get on the network Choose Off to disable load balancing Managing Configuration with Policies 325 e XIRRUS Management System Sharp Cell This option allows you to enable or disable the use of sharp cells If this feature is enabled the RF signal for each data rate is tuned to end at a defined boundary cell size This reduces interference between nearby cells that use the same channel on other Arrays or other neighboring access points Sharp cell technology suppresses interference from longer slower data rates and improves data rate performance for end users by enforcing high data rate cells It does decrease range of the cell however Choose Yes to enable sharp cells The default is Yes sharp cell usage is recommended in most cases Note that Cell Size may not be set to Max if Sharp Cell is enabled See IAP Setting Details Figure 203 on page 311 802 11h Beacon Support This option enables beacons on all of the Array s radios to conform to 802 11h requirements supporting dynamic frequency selection DFS and transmit power control TPC to satisfy regulatory requirements for operation in Europe 4 9 GHz Public Safety Band This option adds two new channels 1
456. r T 1XR480411014422 0 410 100 5455 Als Cube xr4820 60 0 Mar 05 2011 Build 30 XR48041101 5 Radios m 1xR480411014422 0 10 100 54 55 Al s Cube xr4820 6 0 0 Mar 19 2011 Build 30 XR48041101 T NoRTAAmaS 0 10 100 54 28 xndArray 4 0 7 Dec 31 2009 Build 11 XN0411101F nas r 9 x50v24 25 17216452 XMS SOA V xnBArray 4 0 7 Dec 31 2009 Build 11 XN0824081A Events T XMS 50N24001 25 17216492 XMS SOA V xn8Array 4 0 7 Dec 31 2009 Build 11 XN0824081A m XMS 5024002 25 17216493 XMS SOA V xnBArray 4 0 7 Dec 31 2009 Build 11 XNO824081A Figure 274 Arrays Page About Using the Arrays Page A number of basic operations are available on the Arrays page to allow you to customize it for your own use Select Columns Export Select Rows Rearranging and Resizing Columns in a Table Sorting The XMS Web Client 441 e XIRRUS Management System Select Columns Show or Hide columns Select Columns Hidden Columns IP Address Security Discovered Last Active Visible Columns Rearrange column display order 9 Up Down Restore Defaults OK Cancel Figure 275 Table Column Chooser The page may be customized by changing the columns that are displayed and the order of display If you prefer to use a smaller browser window for XMS and there s not enough room for all the columns to display you can use this feature to select your preferred columns Click the Select Columns link
457. r 247 248 DTIM period 322 duplex 244 E EAP 274 edit mode Management System for maps 137 enabling disabling IAPs for multiple Arrays 180 encryption 275 Enterprise class 14 environment properties wall setting on map 151 Excel file exporting Array licenses 191 importing Array licenses 192 executing a policy 221 export Array licenses 191 F family of products 1 FAQs 542 Fast Ethernet 239 241 features 9 about licensing 189 supported by license 189 figures list of xiii filter ARP 324 filter policy 348 find see searching 164 firewall and port usage 22 floor plan 130 for map 142 frequently asked questions 542 G Gigabit 1 240 243 Gigabit 2 241 246 gigabit ports see also port mode 245 global policy 179 apply to Array 185 556 Index Management System create from Array 223 global settings 317 319 glossary of terms 545 group limits and interactions 307 group user WPR web page redirect 306 groups policy 366 H Heat Map RF 131 heat maps migrating older maps 142 host name Array 170 HTTPS 231 hutting 38 507 hyperlinks 6 IAP settings 310 IAPs 198 bonding 313 channel 312 enabling disabling for multiple Arrays 180 searching 164 icon 158 icon desktop Web Start Client 29 identifying an Array 170 IEEE 802 11n bonding 313 image physical size 143 image file size minimizing 142 image formats 143 image resolution 143 image resolution for map 143 image software upd
458. r Events and Alarms on page 115 At First Glance Any time you log in to the XMS Java client the Dashboard provides an immediate at a glance overview of the health and performance of your network This should always be the first place that you look for an overview of network status We recommend that you detach the Dashboard window so that you can always have it visible on your display even while you re working on other windows For complete details on using the Dashboard see Using the Dashboard on page 91 The Alarms Events and Syslog Events windows provide summary and detailed information about the status of the XMS Managed Network Other windows also provide a useful overview of network status For example resource windows provide visual cues to the status of network components in the Arrays IAPs and Stations windows Viewing Events and Alarms for a Specific Array Before we discuss the details of syslog messages network events and alarms you need to be aware that you can view network events and alarms for a specific Array This section only applies to events and alarms because these are the only items that can be addressed by a specific Array The syslog and topology categories apply to an entire network or subnet not to Arrays Monitoring Your Network 105 e XIRRUS Management System To view all events and alarms that have been generated for a specific Array right click on the Array in a map or in the The A
459. r Group or clear the checkbox and enter a value in the Station Traffic Packets Sec Limit field to force a traffic restriction Managing Configuration with Policies 307 e XIRRUS Management System 9 Days Time Limits These options can restrict access to specific days and or hours Active All Days Select to allow traffic on all days e Limits by Day If Active All Days is not selected then this section is displayed Choose the days of the week that usage will be permitted Active All Times Select to allow traffic at any time of day If this is not selected then specify the active period using the Time On and Time Off fields Saving Your User Group Policy When you have configured all of your User Group policy settings click on the Apply button in the User Group Settings window to save the new policy 308 Managing Configuration with Policies e Management System XIRRUS IAPs All IAPs Integrated Access Points within your Arrays are configured with this policy When you apply an IAP policy all of the APs in the Array will assume the settings defined in the policy even if you only changed the settings for one IAP when you worked with the policy Configuration settings for IAPs include enabling or disabling IAPs defining an IAP s wireless mode specifying the channel to be used and the cell size for each choosing an antenna type establishing transmit and receive parameters and providing descriptions e S p
460. r Wi Fi Arrays e Management System XIRRUS To avoid duplication and to maintain consistency we assume that you will use method 1 the Arrays window to access an Array s configuration menu items from the Arrays node in the Tree You may select multiple Arrays from the list The chosen operation will be applied to all selected entries if appropriate The following operations are available when you select and then right click on an Array in the list Connecting to an Array on page 172 Viewing Array Status on page 172 Configuring an Array on page 174 Create Policies from Array on page 178 Enabling or Disabling IAPs on page 180 Auto Configuring Channels on Multiple Arrays on page 181 Deleting an Array on page 182 Removing an Array from a Map on page 182 Assigning an Array to a Group on page 183 Applying Policies to an Array on page 185 Updating Array Software on page 185 Viewing Events and Alerts on page 186 Viewing Reports on page 186 Refreshing an Array on page 187 Rebooting an Array on page 187 Locating an Array on a Map on page 187 Managing a PoGE Injector on page 187 Sorting the List of Arrays To change how the table is sorted click in any column header to define that header as the sort criteria In addition you can choose to have the results displayed in ascending or descending order represented by the appropriate arrow icon To do thi
461. r choose No to disable this IAP Disabling IAPs can create coverage patterns to suit the environment Note that the rest of the fields in this window will be grayed out if the IAP is not enabled Mode Select the wireless mode for this IAP from the choices available in the pull down menu The choices are e 5GHz The IAP will operate at a frequency of 5 GHz with data rates of up to 54 Mbps This option is available for all IAPs e 24GHz This option is only available for the abg abgn IAPs The IAP will operate at a frequency of 2 4 GHz with data rates of up to 54 Mbps This mode is compatible with the older 802 11b technology which operates at the same frequency as 802 11g but with a maximum data rate of 11 Mbps The IAP can also be configured to use just the 802 11g mode but stations that only support 802 11b will not be able to associate to an JAP configured for 802 11g only e monitor The IAP will operate as an RF monitor scanning for rogue APs in the background This option is only available on abg2 abgn2 where it is the default value We strongly recommend that you leave abg2 abgn2 in monitor mode Channel Because Wi Fi Arrays are multi channel devices allocating the best channels to IAPs is important if peak performance is to be maintained And to avoid co channel interference adjacent IAPs should not be using 312 Managing Configuration with Policies e Management System XIRRUS adjacent channels using non overla
462. r from all associated stations 9 Station Errors total station drops and errors 9 Ethernet Traffic Tx and Rx averages or peak total megabits per second for the Array gigabit Ethernet ports 9 Ethernet Errors total drops and errors for the Array gigabit Ethernet ports Station Reports These reports display statistics related to station counts and Array to Station associations 9 Associated Stations a list of stations associated to the Wi Fi network 9 Stations By Array Array to Station association counts 380 Managing Reports e Management System XIRRUS 9 Unique Station Count wireless station counts Array Reports These reports display information about managed Arrays and their reliability statistics 9 Array Inventory an inventory of Arrays 9 Array Availability table of Array availability statistics RF Reports This report displays information about channel usage 9 Channel Usage IAP counts on 2 4 GHz and 5 GHz channels Security Reports This report displays information about detected rogue APs 9 Rogue List list of rogue access points detected by the Wi Fi network To create a report Enter the following information to set up the report e Name This is a unique name that will identify this report on the My Reports page You may create different reports of the same report type with different options defined for each Each report must have its own name XMS will not allow you to create
463. r increment decrement the value using the UP and DOWN arrows The value you enter here will define the fragmentation threshold for all 802 11a IAPs The default is 2346 802 11a RTS Threshold The RTS Request To Send threshold specifies the packet size Packets larger than the RIS threshold will use CTS RTS prior to transmitting the packet useful for larger packets to help ensure the success of their transmission Enter a value in this field between 1 and 2347 or increment decrement the value using the UP and DOWN arrows The value you enter here will define the RTS threshold for all 802 11a IAPs The default is 2347 After completing all of the desired fields in the 802 11a Settings window either click on the Apply button to save this policy or click on one of the following buttons to configure more RF policy options e 802 11b g Settings Configure settings for the 802 11b and 802 11g wireless technologies 9 802 11n Settings Configure settings for the 802 11n wireless technology 9 LED Settings Configure the activity parameters and behavior of Array LEDs 332 Managing Configuration with Policies e Management System XIRRUS 802 11b g Settings This window allows you to choose the 802 11g only mode of operation define the basic 802 11b and 802 11g data rates and which 802 11b g data rates are supported specify the threshold parameters for fragmentation and RTS and establish an 802 11b preamble Any configuration
464. r more Arrays in the list to which the config file is to be deployed then click Next The web client displays deployment options Figure 298 1 2 3 4 Select Configuration Select Arrays Deployment Options Apply Settings Previous Deploy gt Cancel Select deployment options Permanently save this configuration on the array Figure 298 Select Deployment Options Select the checkbox to Permanently save this configuration on the Array If you do not check this box the commands in the config file will be deployed on the selected Arrays but they will not be saved Thus they will not be reapplied if you reboot the Array Click Deploy to apply the config file to the selected Arrays The web client displays deployment results Figure 299 The XMS Web Client 475 e XIRRUS Management System 1 2 3 4 Select Configuration Select Arrays Deployment Options Apply Settings Previous Finish Cancel Select Columns Export Showing 1 to 1 of 1 Rows 25 7 1 Message Hostname o Done deploying configuration XN16520901140 Figure 299 Select Deployment Options The Message list indicates when the deployment is in progress for each of the selected Arrays and then shows whether the deployment has been completed PoGE This page shows the Power over Gigabit Ethernet PoGE injectors in your Xirrus network Only the PoGE models that have remote management capability are listed on this page The PoE page provides too
465. r of stations that were concurrently associated to each Array at the busiest peak time during the time period Unique Stations Shows the total number of different stations that have associated to each Array over the time period Managing Reports 407 e XIRRUS Management System Download Report pdf xls csv Email Report XIRRUS XMS Reports Stations By Array Time Span Hour Tuesday 03 22 2011 07 34 PDT to Tuesday 03 22 2011 08 34 PDT Top Arrays for Station Count for All Arrays Tuesday 03 22 2011 07 34 PDT to Tuesday 03 22 2011 08 34 PDT 70 63 56 40 42 35 28 21 14 7 o Station Count tus the Ai Je Jue uS e A KA eq MD ate KA KA KA KA Se tte ey EA e 7 e 2 MS s m A 273 MZ gp Sos Org Array Name Total Array to Station Associations pisses oases 172 186 45 2 25 25 25 V2 1001 00 02 7e 20 00 52 172 186 49 2 25 25 25 KMS 5 0 V2 1501 00 02 7e 22 00 52 172 16 512 25 25 5 Figure 254 Station Association By Array Report 408 Managing Reports Management System Unique Station Count This report displays a line graph showing unique station counts over time Unique means that if the same station disconnects and then reconnects it will not be counted more than once in any sum displayed The information displayed in this window is based on your Selection Criteria Selection Description Criterion for details
466. r text as described in Customizing an Internal Login or Splash page on page 299 Internal Login This option displays a login page residing on the Array instead of the first user requested URL If you wish to replace the default login page on Arrays XMS has a Web Page Redirect WPR policy to upload your custom page To set up internal login set WPR Mode to Internal and set WPR Screen Type to Login Set WPR HTTPS Login to Enable for a secure login or select Disable to use HTTP Select the WPR Authentication Protocol This is the protocol used for authentication of users CHAP or PAP the default e PAP Password Authentication Protocol is a simple protocol PAP transmits ASCII passwords over the network 292 Managing Configuration with Policies e Management System XIRRUS in the clear unencrypted and is therefore considered insecure e CHAP Challenge Handshake Authentication Protocol is a more secure Protocol The login request is sent using a one way hash function The user name and password are obtained by the login page and authentication occurs according to the RADIUS Details in effect for the SSID see RADIUS Details on page 298 If Security Settings are set to Global then the Array s global RADIUS settings will be used instead See Security Settings on page 296 After authentication the browser is redirected back to the captured URL If you want the user redirected to a specific landing page
467. r to the Wi Fi Array User s Guide part number 800 0006 001 or the Power over Gigabit Ethernet Installation and User Guide part number 812 0057 001 In addition to discovering Xirrus devices XMS allows you to add devices manually simply by entering the device IP address To add a new device to the list of manageable devices click on the Add button under the Discovered Devices list in the Discover Devices Window to display the Add device dialog box Enter Device Parameters Figure 66 Adding a Device Enter the new device s IP address and click on the Apply button XMS will attempt to contact the device using SNMPv3 and if that is unsuccessful it will try using SNMPv2 If the device is detected by XMS it is added to the list along with the SNMP version that succeeded Otherwise a pop up message is displayed informing you that the device cannot be detected In this case click OK to close the message then check the IP address that you entered for the device For additional troubleshooting suggestions see What If My Device Is Not in the Discovered Devices List on page 89 Discovering the Network 87 e XIRRUS Management System Refreshing a Device When you refresh a device XMS polls the device and verifies that it is still reachable by the system If you need to refresh an existing device select it from the list of Discovered Devices then click on the Refresh button under the list in the Discover Devices W
468. r using the Location feature and increases the accuracy of RF heat map contours See the discussion of Planning your Installation General Deployment Considerations in Chapter 2 of the Xirrus Wi Fi Array User s Guide 1 Click the Edit Environment Settings button The Edit Environment Settings dialog box appears xl Environment Type ofice Cubicles bd Convention Center Environment Adjustment Figure 103 Entering Environment Wall Settings 2 Select the typical Environment Type for your type of construction for example Office Cubicles Office Walled School or Warehouse 3 Now use Environment Adjustment to tune the environment settings for the area included in the map To set the adjustment properly you should take a few data points and compare them to the values on the heat map without any adjustment If the heat map shows 75dB at a particular spot but your reading is 70dB then you should set an adjustment of 5dB Likewise if the map shows 50dB but your measurement is 55dB then set an adjustment of 5dB Click OK when done 4 Clickthe Save Map button to save your work LI 5 You may click the Edit Environment Settings button again if you need to modify these values Working with Maps 151 e XIRRUS Management System Locating Devices The XMS Locationing feature leverages the RF capability of the Wi Fi Array to determine the position of a device to within a few meters and display it on
469. radio basis Working with Maps 129 e XIRRUS Management System and readings are enhanced by means of inter Array correction By leveraging the RF analysis capabilities available on the Array XMS makes it easy to view the changing RF environment The XMS Locationing capability displays the position of a device on the map for you facilitating asset tracking and security policy enforcement Getting Started with Maps This overview describes how to get started using maps and points you to topics that describe each step in detail e The Map Window on page 132 provides an overview of the map window To display the map window select Resources Locations from the Tree on the left of the XMS Java client 9 Migrating Maps from Earlier Releases on page142 XMS is furnished without any default maps However if you have already created maps in pre 5 0 releases of XMS they will automatically be migrated to the current release To add a new map and modify existing ones Preparing Background Images for New Maps on page 142 you must supply a background image for your map such as a floor plan or a site layout of buildings e Adding a New Map on page 144 follow these instructions to create a new map Saving a Map Important on page 145 be sure to save the new map and save again after making changes Setting the Map s Scale on page 146 set the distance scale for the map so that RF contour
470. raffic Xirrus Management System Products 13 e XIRRUS Management System Enterprise Class As a dedicated network appliance it ensures maximum uptime and reliability and features dual 1 Gbps uplink ports for reliability seamless integration and installation anywhere in your network No Traffic Jams Unlike management solutions that generally reside in the network s data path the Management Appliance does not interfere with the network s data traffic About the XM 3320 XM 3340 and XM 3360 Figure 4 Management Appliance XM 3340 Ready for Rack mount The latest Xirrus Management Appliance models are based on the Linux operating system The XM 3360 offers the highest capacity managing networks of 1000 Arrays The Management Appliance operates as a network based device You communicate with it via the network using a web browser or via Telnet SSH rather than connecting a monitor and keyboard to it directly 14 Xirrus Management System Products e Management System XIRRUS Logout r Aer XIRRUS e Monitor A configure 9 Reports AE sotinge Email Settings EU rece setngs are usea by 2048 when emating tems such as reports SMTP Server Address mail xirrus com SMTP Server Port 25 User 5tohh Password ooo Encryption None gt Sender Emat 5s fatollahsQhorrus com Sme Test mas Figure 5 Server Management Using the Web Client Installation and requirements are described in
471. raps You may specify up to four hosts that are to receive traps If you want XMS to receive traps from the device enter the XMS server s IP address SNMP v2 and v3 9 SNMP Trap Ports 1 to 4 Enter a value in this field to define the SNMP trap port for each of the trap hosts that you entered or increment decrement the value using the UP and DOWN arrows The default is 162 SNMP v2 and v3 9 Enable Authentication Trap Choose Yes to log authentication failure traps or choose No to disable this feature Enable this feature to configure any of the Trap Hosts below SNMP v2 and v3 9 Keepalive Trap Interval in minutes The Array sends keepalive traps sometimes called the phone home trap to the XMS server This prompts the server to automatically discover the Array if it has not already been discovered The interval between traps defaults to once a minute but once XMS discovers the device it reduces down to once an hour Keepalive traps are not stopped altogether in the event that the XMS database is lost all devices will automatically be re populated by the keepalive traps in this case The default value is 1 SNMP v2 and v3 Managing Configuration with Policies 233 e XIRRUS Management System SNMP22 Settings 9 Enable SNMP This enables SNMPv2 Either SNMPv2 or SNMPv3 or both must be enabled on Arrays to allow management via XMS SNMP Read Only Community String Enter the read only community string The default is xi
472. ration information Managing Configuration with Policies 225 e XIRRUS Management System This window contains a field for defining the name of the policy and fields for configuring the host name location and contact information D System Information x Policy Details ono Lti XL LLLLLLLLLLLLLCOLZGGLLLDLUAUDG ULLENL LLOALO Policy Name System_Xirrus Save Configuration V System Information 2 Contact Name oo Contact Email bob xyzcorp com Contact Phone IE 18 555 1212 1 System Settings Figure 158 System Settings Policy Details 9 Policy Name Enter a meaningful name that describes this policy If you are modifying an existing policy this field is grayed out not editable If you are using a standard naming convention for all of your policies the name you enter here should conform to that convention 9 Save Configuration Check this box to ensure that any time this policy is applied to an Array the Array will save the updated configuration information to its flash memory If this box is left unchecked then when this policy is applied to Arrays the configuration changes will need to be saved manually or else they will be lost when the Arrays are rebooted Note that this checkbox does not actually apply the policy to any Arrays To apply the policy see Using Policy Windows on page 218 226 Managing Configuration with Policies e Management System XIRRUS System Settings 9 Contact Name Enter
473. ration with Policies 259 e XIRRUS Management System Virtual Tunnel Server VTS Tunneling capability is provided by a Virtual Tunnel Server You supply the server and deploy it in your network using open source VTun software available from vtun sourceforge net For more information on setting up a server please see Wi Fi Array User s Guide part number 800 0006 001 To enable an Array to use tunneling for a VLAN enter the IP address port and secret for your tunnel server as described in VLAN List Details on page 263 Creating a New VLAN Policy A VLAN policy is created so that you can assign an Array to a VLAN To create a new VLAN policy click the Add Policy button in the VLAN Policy window When the Add Policy window appears select Copy from a chosen Array recommended and choose a model Array or select Start from scratch as described in Adding a Policy on page219 Click OK The policy details window appears T VLAN Settings Policy Details VLAN Policy Name VLAN Voice Save Configuration v VLAN Setting VLAN Name VLAN number A VLAN List Default Route Setting VLAN ID VLANZ Native VLAN Setting VLAN ID None Java Applet Window Figure 178 VLAN Settings 260 Managing Configuration with Policies e Management System XIRRUS Policy Details 9 Policy Name Enter a meaningful name that describes this policy If you are modifying
474. rays The orientation of the Arrays must also be as accurate as possible 9 Entering Environment Settings Set this according to the type of construction at your deployment site Using Locationing The XMS location algorithm will locate a selected station that is associated to an Array on a map 154 Working with Maps e Management System XIRRUS 1 Goto the Resources gt Stations window in the Java client 2 Select the station that you wish to locate and right click it Select Locate from the drop down menu 3 XMS determines which map contains the Array to which the station is associated That map window will be displayed and the location of the station is displayed See Figure 104 on page 152 4 Ifthe associated Array is not a member of any map an error message will inform you of this problem You must add the Array to a map in order to locate the stations that are associated to it 5 If you wish to toggle between hiding or refreshing and redisplaying the station location click the Recalculate Location button Only one station location may be displayed at a time Working with Maps 155 e XIRRUS Management System Changing Contour Map Colors The RF Heat Contour Map displays signal strength available over the area covered by your map Colors are used to show the gradients of strength You may select one of the predefined color sets for the contour map or you may change the colors displayed or com
475. rays to Known Leave the Enforced checkbox checked if you wish to have the rule pushed to all managed Arrays otherwise clear the checkbox See Classifying Rogue Devices via XMS on page 121 Click OK and then click Save when done To change an existing rule select it in the list and click Edit or to delete the rule click Delete Security Managing Intrusions 127 e XIRRUS Management System Detecting Arrays List This section of the Devices window shows the Array s that detected a selected rogue AP Detecting Arrays 00 13 10 85 e0 3e 12 04 2009 02 50 16 EH 9 12 03 2009 03 36 22 Figure 87 Devices Window Detecting Arrays To use the Detecting Arrays list select an entry from the Detected Devices List list in the top half of the window All of the Arrays that detected the selected AP will be shown in the Detecting Arrays list You may select multiple APs in this case the detecting Arrays for each selected AP will be included Section Details 9 Detecting Arrays List For each rogue AP selected in the Detected Devices list there is an entry for each Array that has detected that AP Thus if the AP has been detected by three Arrays there will be three entries for the AP in this list Each entry identifies the AP by its BSSID and shows the Array that detected it along with the RSSI of the detected signal and the time that it was detected You may click on the header of any column
476. rays to which this policy is assigned e 802 11b g Settings These settings include choosing the 802 11g only mode of operation defining the basic 802 11b and 802 11g data rates and which 802 11b g data rates are supported specifying the threshold parameters for fragmentation and RTS and establishing an 802 11b preamble Any configuration parameters you establish here will affect all 802 11b and 802 11g IAPs on Arrays to which this policy is assigned e 802 11n Settings These settings include enabling or disabling 802 11n mode for the entire Array specifying the number of transmit and receive chains data stream Managing Configuration with Policies 317 e XIRRUS Management System used for spatial multiplexing setting a short or standard guard interval auto configuring channel bonding specifying whether auto configured channel bonding will be static or dynamic and defining the basic 802 11n data rates and which 802 11n data rates are supported Any configuration parameters you establish here will affect all 802 11n IAPs on Arrays to which this policy is assigned LED Settings These settings allow you to disable LED activity define which event triggers the LEDs either when an IAP is enabled or when a station first associates with the network and set up the behavior pattern of the LEDs on your Arrays Any configuration parameters you establish here will affect the LED behavior on all Arrays to which this policy is assigned T
477. real time Traps generated by Arrays and other events with a severity greater than informational are displayed as alarms Array and Radio Status The Array and Radio Status sections summarize the number of each of these that are up or down Array Status Radio Status A I E tor t99 to Up Down Total Up Down Disabled 811 5 816 6424 22 126 Figure 268 Dashboard Array and Radio Status Array Status Details This is a summary of the status of the Arrays that are known to XMS The entries show the count of Arrays that are up or down and the total count Click on a count and the web client will display the Arrays or Radios page with only entries that have the status that you selected The following status counts are shown 9 Up green the number of Arrays that are up Click this button to show only Arrays whose status is up in the Arrays page Down red the number of Arrays that are down An Array is considered to be down if XMS has been unable to communicate with it for over three minutes Click this button to show only Arrays that are down in the Arrays page The XMS Web Client 433 e XIRRUS Management System 9 Total the total number of Arrays that are known to XMS Click this button to show all Arrays in the Arrays page regardless of status Radio Status Details This is a summary of the status of all radios IAPs on Arrays that are known to XMS The entries show the count of radios at each statu
478. rimary Shared Secret Enter the primary shared secret This is the secret that the external RADIUS server will be using Verify Primary Secret Retype your Primary Secret in this field to verify that you typed it correctly Secondary RADIUS Server Optional Repeat the instructions in the previous four bullets to define a Secondary RADIUS Server if available Admin RADIUS Timeout Enter the maximum idle time in seconds before the RADIUS session times out The default is 600 seconds Admin RADIUS Authentication Type Select the protocol used for authentication of administrators CHAP or PAP the default PAP Password Authentication Protocol is a simple protocol PAP transmits ASCII passwords over the network in the clear unencrypted and is therefore considered insecure e CHAP Challenge Handshake Authentication Protocol is a more secure protocol The login request is sent using a one way hash function Saving Your Security Policy When you have configured all of your security policy settings click on the Apply button in the Security window to save the new policy 286 Managing Configuration with Policies e Management System XIRRUS SSIDs From the Configuration Policies node in the tree click on SSIDs to display the SSIDs window This window contains a list of all SSID policies currently available with tools to manage these policies SESS iol x Columns Refresh Policy Name SSID List Modi
479. rity 290 Managing Configuration with Policies e Management System XIRRUS 9 VLAN ID VLAN Number If desired enter a VLAN ID or select NUMERIC and enter a VLAN Number in these fields Traffic will be forwarded to this VLAN on the wired network The default value for this field is 0 9 Band Association This option allows you to choose which wireless band the SSID will be beaconed on Make your choice from the pull down list either 5 GHz 2 4 GHz or Both 9 Web Page Redirect WPR Choose Enable if you want to use the Web Page Redirect WPR functionality This feature may be used to provide an alternate mode of authentication or to simply display a splash screen when a user first associates to the wireless network After that it can optionally redirect the user to an alternate URL For example some wireless devices and users may not have a correctly configured 802 1X RADIUS supplicant Utilizing WPR s Web based login users may be authenticated without using an 802 1X supplicant For an in depth discussion please see the Xirrus Web Page Redirect Application Note in the Xirrus Library If you enable WPR the SSID Management window displays additional fields that must be configured If enabled Web Page Redirect will display a splash or login page when a user associates to the wireless network and opens a web browser to any URL provided the URL does not point to a resource directly on the user s machine The user req
480. rmation about changing the columns displayed see Selecting the Columns Shown in a Policy Window on page 220 Creating a New Config File Policy A Config File policy is used to apply a configuration file to Arrays The file may be copied from the existing configuration of an Array that you select as a model or may be typed in from scratch For example if Xirrus Customer Support sends you a config file you may start from scratch and copy the file and paste it in a This policy is intended for advanced users who are familiar with use of the Xirrus Wi Fi Array CLI and configuration files Only expert users should use the option to create a configuration file from scratch Config file policies are useful in a number of situations In particular they are the only way to apply new features to Arrays before those features have been incorporated in XMS A config file policy has the following abilities e CLI commands may be used to push a configuration to Arrays An Array configuration file is really just a series of CLI commands 9 You may base the policy on the existing configuration of a selected Array 362 Managing Configuration with Policies e Management System XIRRUS e Partial configurations may be pushed to Arrays that is you may edit the configuration file to contain only the settings that you wish to change on Arrays The file makes incremental changes to the settings on an Array when the policy is executed Thus sett
481. rms for the XMS Managed Network Use the Alarm Status buttons to select which alarms to display all alarms or only those with the selected severity For each alarm the following information is shown 9 The Status is color coded to denote the current severity of each alarm See Severity Levels on page 110 9 The Failure Object shows the MAC address of the Array that sent the alarm It may have a further indication of the source of the alarm appended to it for example e 00 0 74d 03 6a 80 Status e 00 0 7d 03 6a 80 Trap 9 The Time and Date that the alarm was received 9 The Message is a brief description of the condition that caused the alarm More detail on the Alarms window is discussed in the following topics 9 Severity Levels 9 Taking Action on an Alarm Monitoring Your Network 109 e XIRRUS Management System Severity Levels The severity levels for all alarm categories are color coded as follows 9 GREEN Clear This state is reported when any problem that previously caused a critical red alarm has been resolved YELLOW Warning This is letting you know that some action needs to be taken to avoid an alarm an alarm has not yet been invoked but probably will be if the warning is ignored e GOLD Minor A minor problem exists and should be investigated 9 ORANGE Major A major problem exists If this problem is ignored there is a likelihood that the problem will escalate to a critical
482. rr trecenti eis ierit aranes 216 An Easy Way to Work With Policies 5 ettet 216 Using Policy Window sy ansa rnc E inen pred 218 vi e Management System XIRRUS Addie a Policy sene St NO REI ERES 219 Selecting the Columns Shown in a Policy Window 220 Refreshing th List 1 nare eere p aene EErEE KEENE 221 Modifying an Existing Poligy 5 ee br denne 221 Executing a PONCY succeed ue neque Perro pbi 221 Deleting an Existing Policy ones tiere rms E 222 Global Policy ascoteaad eniin Cada Ern tao EO Enron rd 223 Creating a New Global Default Policy enn 223 Saving Xo r Global Policy erento heri pneter en treten 224 System InfOtmatiOnD xot trente reU reet Ert Fe EE REESE EEEE EEEE EK 225 Creating a New System Polley oet m ee e RENE 225 Saving Your System Information Policy iaa eteie eibi 227 Management Control avaient me nen e OH Er sieh ded 228 Creating a New Management Policy nete bets tte bete 228 Saving Your Management Control Policy sss 238 INGE WOE e taassaras 239 Creating a New Network Policy acd aenea ak 239 saving Your Network PollGy sins wii hea 246 POT V COS seiten edit elei cIBB E tac aves oss ceeev emus qd 247 Creating a New Services POLICY ice epe teens ie 247 saving Your Services Poliey 4i pb iin e eese rita 258 VLAN 259 Creating a New VLAN POC spessu neret iterom renis 260 saving V
483. rrays Window to select it then choose Events and Alarms from the pull down list All events and alarms for the selected Array are displayed in a pop up window in tabular form by severity level only Figure 74 This table includes an informational column that is color coded as WHITE Informational alarms white are not reported in the Alarms window Events and Alerts For 00 0f 7d 00 44 10 e Total Number of Events 11 Total Number of Alerts Critical Major Minor Warning Clear Close Figure 74 Events and Alarms By Array 106 Monitoring Your Network e Management System XIRRUS Alarms Alarms are generated when the system detects a problem with the network that it determines must be resolved and therefore alerts you to the issue The Alarms window provides tools for reviewing and acting on an alarm Only the current most recent alarm in each category for each device will be shown in this list SNMP traps and other Syslog Events with a severity greater than informational are treated as alarms and thus are displayed in the Alarms window SNMP traps range in severity from informational for example an administrator logging in to critical such as a failed software upgrade or an unreachable Array Syslog event severity is mapped to alarm severity as follows e Information Notice Debug gt Informational no alarmAlarms Window Warning Alert Error gt Warning Alarm 9 Critical Emergency gt Crit
484. rrus read only SNMP v2 9 SNMP Read Write Community String Enter the read write community string The default is xirrus SNMP v2 SNMP7v3 Settings The SNMPv3 section configures authentication and other security settings required to allow XMS to manage the Array using the stronger security provided by SNMPv3 Read Write Community Name lv2QAtest2 SNMPv3 N Enable SNMPv3 Yed Cno Authentication SHA MDS Privacy C As DES Read Write Username v3Qatest2 Read Write Authentication Password Read Write Privacy Password eem Read Only Username Ixirrus ro Daad Pink Deiso cs Dacousned Figure 162 SNMPv3 Settings e Enable SNMPv3 Choose Yes to enable SNMP v3 functionality or choose No to disable this feature Either SNMPv2 or SNMPv3 or both must be enabled on Arrays to allow management via XMS The default for this feature is No disabled e Authentication Select the desired method for authenticating SNMPv3 packets SHA Secure Hash Algorithm or MD5 Message Digest Algorithm 5 234 Managing Configuration with Policies e Management System XIRRUS Privacy Select the desired method for encrypting data DES Data Encryption Standard the default or the stronger AES Advanced Encryption Standard SNMP Read Write Username Enter the read write user name This username and password allow configuration changes to be made on the Array The default is xirrus rw SNMP Read Write Authentication Password
485. rst be moved to the XMS server so that it is available for upload to Arrays The policy has a tool for downloading images onto the server To create a new update policy click on the Add Policy button in the Software Update window The Software Update window is displayed which is divided into three primary areas e File Details Allows you to define the image file and file transfer information 9 Custom Login Allows you to set up authentication parameters for access to the Array 9 Schedule Details Allows you to schedule when your software update is performed and define whether or not the Arrays are automatically rebooted when the update process is complete 354 Managing Configuration with Policies e Management System XIRRUS File Settings This window contains fields for defining the name of the policy and configuring the software update image file transfer process Browse and Transfer Image Select an Image File Policy Details Policy Name File Details Transfer Image to Server ly Select Software Image s 5 0706 bin Custom Login Use Custom Login Vv Fpl Name admin Password eT Schedule Details Reboot Array at Completion V Update Time Execute per Schedule C Execute Now Date Scheduled Mar 2 2009 Time Scheduled 25 33 02 Z9 Apply Cancel Figure 224 Software Update Policy Details 9 Policy Name Enter a meaningful name that describes this policy If you are modifyi
486. rt Open the Create New Report Page for the desired type of report as described in New Report on page 378 Choose your selection criteria in the Options section You may select no options or one or more options Remember that each type of report will use its own subset of these settings In all cases you may select only one entry from each drop down list When you choose values for a number of different selection criteria the report will use only data that satisfies of all of them in other words the report is based on the intersection of the conditions that you set For example if you select a Group and a Radio the report will show results for just the selected radio on all Arrays in that group Take some care so that you don t choose criteria that will yield no results Group the drop down list shows all of the Array Groups that you have defined in XMS Array Groups are used as a convenient way to allow you to apply uniform configuration and handling to multiple Arrays at the same time Select an Array group to report on just the Arrays that are members of the group or select All Arrays For more information see Groups on page 366 Map the drop down list shows all of the maps that you have defined in XMS Each map may have multiple Arrays located on it and an Array may only belong to one map Select a map to report on just the Arrays that are assigned to the map or select All Maps For more information see Working
487. running an open system no security the entry in this field is none Channel This is the channel that the rogue is detected on RSSI Received Signal Strength Indicator Shows the strength of the signal being observed from the rogue device by the detecting Array Discovered This is the date and time that the rogue was discovered by the detecting Array Last Active This is the date and time that the rogue was last seen by the detecting Array or Active if the rogue is still active 422 Managing Reports Management System XIRRUS The XMS Web Client The Web Client provides a fast efficient interface for checking Wi Fi network performance and for selected management tasks This provides an alternative to using the Java Client for many management functions XMS also provides a Java Client interface which offers a complete set of functions for monitoring and managing your Wi Fi network The current chapter discusses usage of the XMS web client For more information about using the XMS Java client please see the chapter titled The XMS Java Client Interface on page 39 Starting the Web Client The XMS web client requires one of the following browsers Internet Explorer version 7 0 or higher Mozilla Firefox version 3 0 or higher Chrome version 3 0 or higher or Safari version 5 0 or higher A secure Web browser is required for the web client To start the web client point your workstation s browser to the IP ad
488. rver are grayed out not editable and this procedure is finished Managing Configuration with Policies 267 e XIRRUS Management System 9 Default Lease Enter a value in this field to define the default DHCP lease time in seconds or increment decrement the time using the UP and DOWN arrows The default is 300 seconds When DHCP is used one of the most important decisions to be made is the lease length policy how long the administrator wants client leases to last The best lease length interval depends on the network the DHCP server and the clients it serves The lease time is a trade off between network stability and allocation efficiency The primary benefit of using long lease times is that the addresses of devices are relatively stable because a device doesn t have to worry about its IP address changing all the time and neither does its user The main drawback of using a long lease time is that it substantially increases the amount of time that an IP address tied up before it can be reused once it is no longer needed Most network administrators prefer to use a short lease time This forces the client to continually renew the lease as long as it needs it When the client stops requesting the IP address the address is quickly put back into the pool a more efficient method in environments where the number of addresses is limited and must be conserved The drawback is the opposite of the benefit of a long lease time with
489. rver management tools e XMS Administration Provides instructions for managing the XMS database and other administrative tasks including how to review the current status of the database how to schedule and create backups and how to restore the database from the server 9 Technical Support Offers guidance to resolve technical issues some general hints and tips to enhance your product experience and Xirrus contact information 9 Glossary of Terms Provides an explanation of terms directly related to XMS product technology organized alphabetically Notes and Cautions The following symbol is used throughout this User s Guide This symbol is used for cautions Cautions provide critical information that may adversely affect the performance of the product NOTE General notes provide useful supplemental information The User s Guide as a PDF Document The User s Guide is available as a secure PDF Portable Document Format file and can be viewed using the Adobe Acrobat Reader product It cannot be edited or modified If you don t have Acrobat Reader you can download it free of charge from http www adobe com Introduction 5 e XIRRUS Management System Hyperlinks If you click on body text that appears in the color TEAL with the exception of headings or notes the embedded hyperlink within the text will immediately take you to the referenced destination All cross references including the Table of Cont
490. s e Management System XIRRUS The Type field determines what to enter in the Data field as described below The wild card character may be used in the Data field for any of the types 9 BSSID enter a MAC address typically including for a wild card that describes the devices to be matched When entering a MAC address the string often specifies the OUI of a manufacturer the first three octets of the device MAC address are a unique identifier for the manufacturer For example 00 0f 7d is the OUI of Xirrus so the string 00 0f 7d will uniquely match all Xirrus Arrays 9 SSID enter any legal SSID name to be matched For example to match the SSIDs named xirrus student or xirrus staff enter the string xirrus 9 BSSID SSID either of the types above This type is provided for backwards compatibility with rules that are read from some older Arrays Note that rules created on newer Arrays have a Match Only setting that will specify either a BSSID or an SSID although these Arrays will still process the old style rules On older Arrays rules with type set to SSID BSSID SSID or BSSID will all be processed on the Array as though they were BSSID SSID rules Rules with type set to Manufacturer will be dropped on older Arrays Manufacturer enter the manufacturer name as an ASCII string From the Classification drop down list select the classification to be applied to these devices For example you might set all Xirrus Ar
491. s For Selected IAP Policy Details Figure 202 9 Policy Name Enter a meaningful name that describes this policy If you are modifying an existing policy this field is grayed out not editable If you are using a standard naming convention for all of your policies the name you enter here should conform to that convention 9 Save Configuration Check this box to ensure that any time this policy is applied to an Array the Array will save the updated configuration information to its flash memory If this box is left unchecked then when this policy is applied to Arrays the configuration changes will need to be saved manually or else they will be lost when the Arrays are rebooted Note that this checkbox does not actually apply the policy to any Arrays To apply the policy see Using Policy Windows on page 218 9 Enable AIL IAPs Disable All IAPs Use these buttons to enable or disable all IAPs in one step IAP Setting Details Figure 203 Configure as many IAPs in a policy as you wish but you must enter the settings for one IAP at a time Select an IAP from the list in the IAP policy details window Managing Configuration with Policies 311 e XIRRUS Management System When you have completed your settings for an IAP click Apply You may then repeat this to configure as many other IAPs as you wish IAP This field is grayed out not editable It identifies the IAP you selected Enabled Choose Yes to enable this IAP o
492. s Rogue Control Lists If the Array has a conflicting rule for the same wildcard pattern but with a different classification the XMS rule will replace the Array rule 9 Unenforced rules are not pushed to managed Arrays This way if an Array already has a rule for the same BSSID SSID or manufacturer it will not be overridden Keeping unenforced rules in the database provides a single place where you can see a global view of all rules in the managed network without necessarily applying all the rules universally You may change a rule to Enforced if you wish XMS is the preferred tool for classifying rogue devices instead of classifying them using the Array s Rogue Control List since XMS provides centralized administration Classifying Rogue Devices on Arrays In the Array s Web Management Interface WMI the Rogue Control List window is used to classify rogue devices as Blocked Known or Approved There are two ways to classify devices individually enter the BSSID MAC address of a device and specify its classification using a wildcard rule enter the BSSID SSID or manufacturer of a device using an asterisk character as a wildcard to match any string at this position For example 00 0f 7d matches any string that starts with 00 0f 7d Since Xirrus Arrays start with 00 0f 7d this applies the Rogue Control Type to all Xirrus Arrays Security Managing Intrusions 121 e XIRRUS Management System
493. s and other windows These statistics are obtained by polling the managed Arrays using SNMP The default polling rate is FAST providing near real time data If you have a large number of Arrays under management we recommend that you decrease the polling speed to enhance XMS performance Select FAST MEDIUM or SLOW from the drop down list and click the Save button The following table summarizes the polling intervals used for the three polling rates Polling Interval Polling Interval Polling Interval FAST MEDIUM SLOW Array Up Down 1 minute 5 minutes 5 minutes Status Statistics 40 seconds 80 seconds 120 seconds Station Counts 40 seconds 80 seconds 120 seconds Rogues 150 seconds 300 seconds 450 seconds 516 XMS Administration e Management System XIRRUS The following table summarizes the recommended polling intervals for various network sizes Polling Rate Number of Arrays Fast up to 100 Medium up to 250 Slow over 250 After you change the polling rate each Array will be reconfigured for the new polling interval Depending on the number of Arrays under management it might take some time to process the change on all Arrays up to 10 seconds per Array You may continue to use XMS while this change is proceeding Web Client Changing the SSH Server Address Help Logout e 5 e Monitor IV configure 9 Reports a Settings The default SSH server address provided t
494. s simply click in the same header again to toggle between ascending and descending order Managing Your Wi Fi Arrays 171 e XIRRUS Management System Connecting to an Array To connect to an Array select and then right click the Array in the Java client Arrays window then choose Web Management from the pull down list The Array s Web Management Interface login window is displayed as a separate browser window not part of the XMS client interface From here you can log in to the Array with your user name and password the default for both is admin Note that the XMS server will attempt to connect to the Array using the HTTPS Port specified in the Management Control policy ass o XN8 Wi Fi Array XIRRUS aum crow A Name j Location Logged Out User Name i User Password Login Copyright 2005 2009 by Xirrus Inc Figure 117 Array Login Window After logging in to the Array if you make any configuration changes they will not be propagated to all Arrays in the network When managing multiple Arrays with XMS you should make configuration changes from XMS s client interface For detailed information about configuring an Array refer to the Wi Fi Array User s Guide part number 800 0006 001 Viewing Array Status To view a summary of information for a selected Array and its components right click on the Array and choose Array Status from the pull down list The Array Status window is disp
495. s Arrays as fast roaming targets This feature has three modes 328 Managing Configuration with Policies e Management System XIRRUS e Broadcast the Array uses a broadcast technique to discover other Arrays that may be targets for fast roaming Tunneled in this Layer 3 technique fast roaming target Arrays must be explicitly specified e Off this disables fast roaming To enable fast roaming set Fast Roaming Mode to Broadcast or Tunneled and set additional fast roaming attributes below If you enable fast roaming the following ports cannot be blocked by firewalls e Port 22610 reserved for Layer 2 roaming using UDP to share PMK information between Arrays Ports 15000 to 17999 reserved for tunneling between subnets 9 Fast Roaming Layer If fast roaming is in Tunneled mode select whether to enable roaming capabilities between IAPs or Arrays at Layer 2 and Layer 3 or at Layer 2 only Depending on your wired network you may wish to allow fast roaming at Layer 3 This may result in delayed traffic The default is 2 only 9 Share Roaming Info With If Fast Roaming is in Tunneled mode this option allows an Array to share roaming information with all Arrays just Arrays that are within range or specifically targeted Arrays Choose either All In Range this is the default or Target Only as desired Fast Roaming Targets If you chose Target Only use this option to add target Arrays Click the butt
496. s already in the XMS database XMS will attempt to refresh the device by obtaining up to date information about it You may use the Cancel button if you wish to abort discovery while still in progress This will stop XMS from finding any additional devices but will not remove any devices that have just been discovered 1 2 Enter Device IP Addresses Review Previous Next gt Cancel Select Columns Export Showing 1 to 1 of 1 Rows 25 z 1 Message Description e Failed performing discovery Unable to reach device at 10 100 47 12 Discover new device at 10 100 47 12 Figure 304 Review Results of Adding Devices SNMPv2 And SNMPv3 Settings Fora device to successfully Phone Home announce its presence to XMS or be discovered SNMPv2 or SNMPv3 must be enabled on the device For SNMP22 the read write community string i e community name must match one of the strings listed in the Discovery window For SNMPv3 the Array s read write user name and passwords must match one of the entries listed in the Discovery window These pages are used to add or delete SNMPv2 community names and SNMPv3 users The XMS discovery process searches networks using both SNMPv2 and SNMPv3 Since SNMPv3 offers much improved security this version is preferred by XMS 482 The XMS Web Client e Management System XIRRUS Discovery will search for devices using SNMPv3 first When an Array is discovered using SNMPv3 then XMS uses t
497. s and then automatically selects and sets its channels to the best available This function is typically executed when initially installing Arrays in a new location You may wish to repeat it periodically to account for changes in the RF environment over time When running auto channel on multiple Arrays XMS will shut down IAPs on all of the Arrays being configured It will then run auto channel on one Array at a time and bring its radios back up when channels have been selected First select one or more Arrays whose channels are to be auto configured You may use Ctrl Click to add Arrays one at a time Shift Click to select a range of entries or Ctrl A to select the entire list Next right click anywhere in the Array list portion of the Arrays window and select Auto Configure Channels from the right click menu You will be asked to confirm that you wish to run auto configuration Click Yes to proceed Confirm Auto Configure Channels 3 Arrayss X Auto configure channels for all of the the selected Arrays NOTE For optimal accuracy each Array is tuned one at a time The total time for this operation will be approximately 01 30 mm ss WARNING This operation will temporarily shut down all of the radios on each Array Do NOT perform this operation on a production network J Figure 127 Auto Configure Confirmation Dialog Auto configure typically takes about 30 seconds per Array Managing Your Wi Fi Arrays 181
498. s by explicitly disabling discovery on them Excluding a Network from Discovery on page 84 While scheduling automatic discovery to run less often will reduce its impact on network traffic there is a trade off Since configuration information is obtained only when a device is discovered a longer discovery period may also tend to leave XMS with information that is not up to date To access the Network Discovery Schedule window click on the Auto Discover Schedule button on the bottom of the Discover Devices window Network Discovery Schedule amp Run Hourly Run Daily Run Monthly Hour of Day 23 00 v Show Schedule Days s Monday Tuesday E Wednesday Thursday 3 Sea O Select All um Java Applet Window Figure 49 Network Discovery Schedule Figure 49 shows an example of the Network Discovery Schedule window with the schedule set to Run Daily Monday Wednesday and Friday at 23 00 in this 74 Discovering the Network e Management System XIRRUS case The editable fields in this window are dependent on which scheduling option you choose either Hourly Daily or Monthly The factory default is Daily at 23 00 hours 11 PM Some fields in the window may allow you to select more than one item from a list For instance in Figure 49 you may select multiple days Use Ctrl Click to select additional items or Shift Click to select a range of entries To select all entries for instance every day i
499. s for this Appliance and enter the DNS Domain and DNS Servers Click the Save button when you have finished making your changes Web Client Date and Time Settings NOTE To use SNMPv3 successfully system time must be set using an NTP server on both the XMS server host machine and all Arrays using SNMPv3 This is because SNMP 73 requires synchronization between the XMS server and the Arrays so that the system time difference between them never exceeds more than 150 seconds If the time difference exceeds 150 seconds SNMPv3 suspects a security breach and removes the SNMP23 credentials for affected Arrays from the database This means that the Array will appear to be down and statistics will not be polled until the Array is re discovered by scheduled discovery unless discovery is turned off A manual refresh of the Array should also remedy the situation See Scheduling Discovery on page 74 and Refreshing a Device on page 88 Help Li ogout Settinc e Monitor A configure 9 Reports Time Zone GMT 08 00 Pacific Time US amp Canada Tijuana v Status Auto Adjust Daylight Savings Yes C No Network Use Network Time Protocol NTP Yes C No NTP Primary Server D poolntporg Email NTP Secondary Server hpodntpog Polling NTP Tertiary Server 2poolntporg SSH Server Ea Backup Figure 325 Changing Date and Time Settings XMS Administration 509 e XIRRUS Management System Click the Date amp
500. s obe unit 527 XSMT Starting the XMS SetyVer ins ritiene eet sette rites 529 XSMT Shutting Down the XMS Server eese 531 XSMT Database T 0018 tate eee R tees 532 Reunitialize Databases n tete teet iniit eit per init ee er etin 532 Repair Database crees rn eain etae aei ta bid 533 XSMT Software Manager stp otim Oe ind ta Eee i t Re 534 About the Installed Patch List iio 535 To Install a New Version of the XMS Server ee 535 XSMT Advanced Settings ssdri baniera eit IRR ROREM tiet tige Ress 537 Changing Polling Prequency sere memes 537 Changing the SSH Server Adress ceste teer penee nter pretio aids 539 Managing XMS Server Settings via the Web Client sss 540 Technical SupDOLFL uisassinict sini iaie baa kk a iiS avi diia irl d iind 541 General Hints and Tips for Xirrus Management Appliances 541 Frequently Asked Questions ssistsssstcsssssnsasnetaiessaines hassasestasessaines Hb Ie Ert RER RERE eg S 542 Contact Information 22 2 cn meinen ien den POR ise Rep SUR 544 Glossary UM i1 545 pl 553 xii Management System XIRRUS List of Figures Figure 1 Figure 2 Figure 3 Figure 4 Figure 5 Figure 6 Figure 7 Figure 8 Figure 9 Figure 10 Figure 11 Figure 12 Figure 13 Figure 14 Figure 15 Figure 16 Figure 17 Figure 18 Figure 19 Figure 20 Figure 21 Figure 22 Figure 23 Figure 24 Figure 2
501. s that can be applied to multiple Arrays managed by XMS simultaneously Policies fall into categories for example security administration network firmware etc Glossary of Terms 549 e XIRRUS Management System Polling The process of contacting a network Array or group of Arrays and collecting statistical data about the device s QoS Quality of Service QoS can be used to describe any number of ways in which a network provider guarantees a service s performance such as an average or minimum throughput rate RADIUS Remote Authentication Dial In User Service A client server security protocol developed to authenticate authorize and account for dial up users The RADIUS server stores user profiles which include passwords and authorization attributes Remote DC Power System An optional Xirrus proprietary product that provides distributed DC power to multiple Wi Fi Arrays eliminating the need to run dedicated AC power to each unit and facilitating backup power when connected via a UPS RMI Remote Method Invocation A set of protocols developed by Sun s JavaSoft division that enables Java objects to communicate remotely with other Java objects RMI is a relatively simple protocol but unlike more complex protocols such as CORBA and DCOM it works only with Java objects The XMS client interface utilizes Java Rogue Any wireless device that is visible on your network but not recognized You have the option of
502. s typically unnecessary to run discovery on a scheduled basis Devices that do not have SNMP enabled will not be discovered by XMS in this case go to Adding an Array or PoGE Injector on page 87 Once a discovered network or device is included in the list of managed items you can then modify edit or delete the item as needed Only devices that are included in the list of manageable items in the Discover Devices Window can be managed by XMS and only these items can be added to the default main map or any custom maps that you create Discovering the Network 71 e XIRRUS Management System Viewing Your Discovered Networks and Devices After you start discovery XMS finds networks and devices Arrays and PoGE injectors that are reachable and discovered devices are then added to the system s database of manageable items To view a listing of discovered networks and devices select Tools Discover Devices in the Menu Bar to display the Discover Devices window Discover Devices xj Discover Xirrus Devices Based on Networks and Community Names Search Networks 10 100 54 0 255 255 255 128 Networks 110 100 23 0 255 255 255 0 i 10 100 44 0 255 255 255 0 Array anj a o wor Logins SNMPv2 Community Names SNMPv3 Users Communitywame Username Authentication privacy xirrus bxirrus rw SHA D E S N M P albaba Strings v2 v3 oem oe Lom oe
503. s value Each entry is a link click it to display the Radios page with the IAP list filtered to show only those IAPs that have the selected status value The following status counts are shown 9 Up green the number of IAPs that are up Click this button to show only IAPs whose status is up in the Radios page Down red the number of IAPs that are down Click this button to show only IAPs that are down in the Radios page Disabled gray the number of IAPs that are not enabled on Arrays Click this button to show only IAPs that are disabled in the Radios page 434 The XMS Web Client e Management System XIRRUS Recent Alarms This table lists the most recent alarms generated by your Wi Fi network For each alarm the dashboard shows the severity the date and the beginning of the description To see more information for an alarm in the list click it to view the Alarm Details All severity levels are displayed Critical Major Minor Warning and Clear Recent Alarms Critical Today 10 59 Node failure This pra e Critical Today 10 59 Array not reachable Critical Today 10 59 Node failure This pro m Critical Today 10 59 Array not reachable t WarningToday 08 51 Aug 23 08 27 30 err Q Clear Today 08 49 Node clear No failure XMS 5 0 V2 21 172 16 45 22 Clear Today 08 49 Array is up and acti Array is up and active Q Clear Today 08 49 Node clear No failures Q Clear Today 08 49 Node clear No failur
504. s will display accurately 9 Select the Arrays that belong on the map See Adding Arrays to Maps on page 147 9 Rotate each Array on the map so that the abg n 2 radio has the correct orientation See Orienting Arrays on page 150 130 Working with Maps e Management System XIRRUS 9 Set the typical RF signal attenuation for the type of construction in the mapped area See Entering Environment Settings on page 151 e After completing the steps above you may use the RF Heat Map to present a live display of RF coverage by Array To manage Arrays see Managing Arrays Within Maps on page 158 9 You may customize your display if you wish See Changing Contour Map Colors on page 156 and Map Settings Window on page 160 Working with Maps 131 XIRRUS Management System The Map Window To display the map window select Resources gt Locations from the Tree on the left of the XMS Java client The map window will be displayed in the Main Viewing Area of the client interface Select the desired map from the Map List Open the Map Window Map Toolbar Map Data B Move Array ap Data Ber Rotate Array Selected Map showing RF Heat Contour Calibrate Distance t Application fon EE a eb FET Dm Ma x a fene amp Dau dh Maps Contour Type Signal Strength Meat Map RSSE Environment Type Office Cubicles Units feet Cursor Location x 314 9 y 50 feet L i adi xj wesottee
505. se to filter the data included in the report You may choose to run the report immediately after creating it schedule it to run later at a specific time or just save it without running it Regardless the report setup is always saved to the My Reports list where you may run it or view previous results at any time You may also choose to email the report after it runs Managing Reports 379 e XIRRUS Management System The following topics are discussed for the New Reports page 9 Types of Reports on page 380 9 To create a report on page 381 e Report Queue on page 383 Types of Reports There are five categories of reports listed below Each report type may be filtered to select only the desired data For example you may select only certain Arrays or Array groups to include in the report For details see Selection Criteria on page 384 The available selection criteria vary for each report They are listed in the detailed description of each report Traffic reports These reports display wireless traffic and error statistics for radios Ethernet ports and stations 9 Wireless Traffic Tx and Rx average or peak megabits per second The wireless reports include all the data from the station reports below plus Wi Fi management traffic such as beacons probe requests etc Wireless Errors total wireless drops and errors Station Traffic Tx and Rx average or peak megabits per second for traffic that flows to o
506. sent on this Array as well as channel cell size active stations and whether the IAP is enabled For more information about IAPs see IAPs on page 198 9 Management Access whether access via SSH and or Telnet is enabled Configuring an Array You can configure a specific Array or you can create configuration policies and apply these policies to an Array multiple Arrays or groups of Arrays If you want to configure a specific Array select and then right click on the Array and choose Configure from the pull down list this generates a new pull down list with all available configuration options Figure 119 Array Host Name Management IP Address Gigt h XS amp utmxkrusg Web Management XN08 10 100 542 Tay Status i 500 oroe XS391906003AE Create Policies from Array XS1641081B00B Enable Disable All IAPs Auto Configure Channels Delete Remove from Map Assign Group XNi212101FEgra _UPdate Software NORTA ArrayS Alarms and Events XMS 5 0 V2 1752 Reports Refresh Configuration Options Figure 119 Configuring an Array The configuration options for a selected Array are similar to the configuration options presented to you when creating configuration policies To avoid repetition refer to the List of Configuration Policies on page 177 when making configuration changes to a specific Array 174 Managing Your Wi Fi Arrays e Manag
507. server such as AeroScout then queries the Array for a report on the tags that it has received The Wi Fi tagging server uses proprietary algorithms to determine locations for devices sending tag signals Services x i NTP WiFi Tag Enable WiFi Tag Support Yes C No z WiFi Tag UDP Port 1144 il H Netflow WiFi Tag Channel 52 il J System Log RE Qs Apply Cancel Figure 176 Wi Fi Tag Settings Wi Fi Tag Settings 9 Enable Wi Fi Tag Choose Yes to enable the Wi Fi Tag functionality or choose No to disable this feature e Wi Fi Tag UDP Port If you enabled Wi Fi tagging enter the port on the Array which the Wi Fi tagging server will use to query the Array for tagging data When queried the Array will send back information on the tags it has observed For each the Array sends information such as the MAC address of the tag transmitting device and the RSSI and noise floor observed Managing Configuration with Policies 257 e XIRRUS Management System e Wi Fi Tag Channel If you enabled Wi Fi tagging enter the 802 11 channel on which the Array will listen for tags The tag devices must be set up to transmit on this channel Saving Your Services Policy When you have configured all of your service policy settings click on the Apply button in the Services window to save the new policy 258 Managing Configuration with Policies e Management System XIRRUS VLAN 9 For a c
508. ss point utilizing Gigabit LAN speeds and multiple wireless channels specifically designed for the Enterprise market See also XN16 XN12 XN8 XN4 XS16 XS12 XS8 XS4 XS 3900 XS 3700 XS 3500 Authentication The process that a station device or user employs to announce its identify to the network which validates it IEEE 802 11 specifies two forms of authentication open system and shared key Glossary of Terms 545 e XIRRUS Management System Bandwidth Specifies the amount of the frequency spectrum that is usable for data transfer In other words it identifies the maximum data rate a signal can attain on the medium without encountering significant attenuation loss of power Browser Client A Java based applet that provides remote access to the XMS client interface from a Web browser BSS Basic Service Set When a WLAN is operating in infrastructure mode each access point and its connected devices are called the Basic Service Set BSSID The unique identifier for an access point in a BSS network See also SSID Channel A specific portion of the radio spectrum the channels allotted to one of the wireless networking protocols For example 802 11b and 802 11g use 14 channels in the 2 4 GHz band only 3 of which don t overlap 1 6 and 11 In the 5 GHz band 802 11a uses 8 channels for indoor use and 4 for outdoor use none of which overlap CoS Class of Service A category based on the type of user type
509. ssign Group Assign Policies oec MEINEM WDS Alarms and Events XN1212101FEBF3t NORTA Array5 PoGE Injector Figure 31 Right Click Menus Arrays Window Some tables allow you to select multiple entries The action you select from the right click menu will be applied to all selected entries sequentially if possible Use Ctrl Click to select additional entries or Shift Click to select a range of entries The XMS Java Client Interface 45 e XIRRUS Management System Keyboard Shortcuts Keyboard shortcuts are useful for experienced users who want to access monitor or manage their network more quickly than a typical mouse allows Be aware that some shortcuts are the same but invoke different commands depending on which window is the active window For a listing of keyboard shortcuts that are available with the client interface go to Keyboard Shortcuts on page 65 Main Viewing Area The Main Viewing Area is shown in Figure 32 as the BLUE area depicted here for clarity with no active windows It is in this area that all management windows are displayed with the exception of pop ups The default state for this area when you log in is to show the Dashboard Another useful window is the main Location Window Whenever you click on an item in the Tree the associated window is displayed in the Main Viewing Area but you have the option of detaching any window from this area so that the windo
510. t License Status may have the following values 9 Array Not Discovered a new license that has not been installed because the designated Array has not been discovered yet i e the Array is not listed in the Discover Devices Window This does not mean that XMS cannot find the Array in your network but rather that the discovery process has not yet added it To add the Array to XMS see Adding an Array or PoGE Injector on page 87 or Adding a Network on page 78 or Rediscovering a Network on page85 When the Array is discovered XMS will automatically check whether there is a license pending for it and if so will attempt to deploy it 196 Managing Your Wi Fi Arrays e Management System XIRRUS 9 Invalid License Key the license is not valid You may edit the License Key as described in Editing Array Licenses on page 194 Use the Deploy Now button to push the corrected license to the Array 9 Pending Deployment a previously discovered Array is currently unreachable or down and XMS cannot deploy the license You may use the Deploy Now or Delete buttons to manage licenses Select the desired licenses by checking the box to the left of each desired row To select all entries at once click the checkbox in the header row To deselect all entries click the checkbox in the header row again You may click the Deploy Now button at the top of the page to have XMS immediately attempt to deploy the selected licenses on their resp
511. t location updated as the mouse moves it shows information about the nearest Array rather than the currently selected Array You will notice that the values shown remain unchanged until the mouse moves closer to a different object Depending on your settings in the Map Settings Window the following values may be shown for the nearest Array 9 Orientation the angle of the nearest Array s abg n 2 radio measured from the horizontal x axis or 0 if the nearest object is a located station MAC the MAC address of the nearest Array Working with Maps 141 e XIRRUS Management System 9 Located Object or Nearest Object If you have been Using the Location Feature then Located Object shows the position of the station on the map expressed in terms of feet from the lower left corner of the map The distance is calculated based on the scale set in Setting the Map s Scale on page 146 Nearest Object shows the position of the nearest Array 9 IP the IP address of the nearest Array or located station 9 Type Array or located Station Migrating Maps from Earlier Releases When you upgrade your XMS server from a version earlier than Release 5 0 to a Release 5 0 or later version any maps that you have already created are automatically migrated to new maps that are compatible with the XMS release being installed They are immediately available for use with the new software Migrated maps will be listed in the Locations se
512. t System Web Page Redirect WPR From the Configuration Policies node in the tree click on Web Page Redirect to display the Web Page Redirect window This window contains a list of all WPR policies currently available and the number of files to be uploaded by each with tools to manage these policies Web Page Redirect MEE Total 1 Columns Refresh Policy Name File List Modify Execute Delete GradStudent_Splash 2 Ex 2 x an Done Figure 226 List of WPR Policies Creating a New Web Page Redirect Policy A Web Page Redirect policy is created so that you can set up the transfer of custom WPR files to Arrays Of course the files must first be moved to the XMS server so that they are available for upload to Arrays The WPR policy has a tool for downloading these files onto the server To create a new WPR policy click Add Policy in the WPR window The Web Page Redirect policy details window is displayed Figure 227 358 Managing Configuration with Policies e Management System XIRRUS Download a File to XMS Server Add Files to Be Transferred D Web Page Redirect x Policy Details Policy Name it Splash Save Configuration File Details y Transfer Configuration File to Server li Configuration Files File Pathname CAAdventNetWebNMShtmhuploadhwpr pl C AdventNetiWebNMS ntmhupload ns css WPR Update File List Custom Login Use Custom Login Fi
513. t from scratch as described in Adding a Policy on page 219 Click OK The Filters policy details window appears x Policy Details Policy Name Jfiter tab xsa Save Configuration IV Filters Filter Lists EX Filters Filter Lis Fiter Na Enable Type Protocol Port Fiter list Filter 2 Enable Allow any any a NV Filters dh o9 xX 4 Apply Cancel Figure 220 Filter Policy Details Note that each Array comes with one predefined filter list named Global which cannot be deleted Filter lists including Global may be applied to SSIDs or to User Groups Only one filter list at a time may be applied to a group or SSID although the filter list may contain a number of filters All filters are created within filter lists Managing Configuration with Policies 349 e XIRRUS Management System Policy Details 9 Policy Name Enter a meaningful name that describes this policy If you are modifying an existing policy this field is grayed out not editable If you are using a standard naming convention for all of your policies the name you enter here should conform to that convention 9 Save Configuration Check this box to ensure that any time this policy is applied to an Array the Array will save the updated configuration information to its flash memory If this box is left unchecked then when this policy is applied to Arrays the configuration changes will need to be saved manually or else they will be
514. t using an NTP server on both the XMS server host machine and on all Arrays using SNMPv3 This is because SNMPv3 requires synchronization between the XMS server and the Arrays so that the system time difference between them never exceeds more than 150 seconds If the time difference exceeds 150 seconds SNMPv3 suspects a security breach and removes the SNMPv3 credentials for affected Arrays from the database This means that the Array will appear to be down and statistics will not be polled until the Array is re discovered by scheduled discovery unless discovery is turned off A manual refresh of the Array will also remedy the situation See Scheduling Discovery on page 74 and Refreshing a Device on page 88 O When managing large Array deployments will the performance of the network be compromised A No XMS resides outside the data path so performance bottlenecks and points of failure are eliminated O Why didn t the maps I created appear the next time I logged in A You must always save your maps Also if you make changes and you want your changes to appear on all clients not just your local machine you must save the changes to the server O Why can t I access the BIOS screen when the system boots up XM 3300 only A You must have a PS 2 keyboard attached to the XM 3300 to access the BIOS screen A USB keyboard is dependent on Windows and only becomes effective after the Windows environment has loaded Technical Su
515. t value NOTE To use SNMPv3 successfully system time must be set using an NTP server on both the XMS server host machine and all Arrays using SNMPv3 This is because SNMP 73 requires synchronization between the XMS server and the Arrays so that the system time difference between them never exceeds more than 150 seconds If the time difference exceeds 150 seconds SNMPv3 suspects a security breach and removes the SNMP23 credentials for affected Arrays from the database This means that the Array will appear to be down and statistics will not be polled until the Array is re discovered by scheduled discovery unless discovery is turned off A manual refresh of the Array should also remedy the situation See Scheduling Discovery on page 74 and Refreshing a Device on page 88 Overview of Starting Discovery This section provides a quick summary of the steps required to start the discovery process For more details on any aspect of discovery please see the other sections of this chapter listed under Discovering the Network Once started XMS Discovery uses SNMP to automatically find Xirrus Arrays and PoGE injectors in the subnets that you specify Figure 47 No networks are included in discovery by default so you must add the subnets containing your Arrays 1 Open an XMS Java client window and select Discover Devices from the Tools menu The Discover Devices window shows networks Arrays and injectors that have been discovered and t
516. tails This feature is used in exactly the same way as the import feature for network settings Please see To Import Network Settings on page 464 for instructions The XMS Web Client 469 e XIRRUS Management System Advanced Config The Advanced Config pages allow you to apply a file containing a complete or partial configuration to an Array Using Advanced Config is described in the following topics About Advanced Config Files on page 470 Advanced Config Page on page 471 Load from Array on page 473 Deploy Configuration on page 474 About Advanced Config Files A Config File is a set of CLI commands to configure an Array It may consist of acomplete set of commands to define every setting on the Array an almost complete set that just omits a few items like leaving out the IP address commands in order to leave the Array address as is ora partial set of commands that just deal with particular aspects of the Array s configuration The file may be copied from the existing configuration of an Array that you select as a model or may be entirely typed in For example if Xirrus Customer Support sends you a config file you may copy that file and paste it in to the config file editor to create your file 9 This feature is intended for advanced users who are familiar with use of the Xirrus Wi Fi Array CLI and configuration files Only expert users should use the option to create the entire configuration
517. taking action 110 announcement see broadcast message 500 antenna 314 ARP filtering 324 arranging windows basic window operations tiling 55 Array license deleting 197 license exporting 191 license importing 192 license pending 196 license updating 194 licensing window 190 shell logins entering 80 software update from Array window 185 Array groups policy 366 Array icon 158 Arrays 165 adding 87 Array groups policy 366 assigning applying policies 185 223 assigning to a group 183 auto configuration of channels 181 configuring 174 connecting to 172 deleting 89 182 enabling disabling IAPs for multi ple Arrays 180 host name 170 Index 553 how identified 170 label 170 licenses managing 189 locating on a map 187 managing 163 maps adding to 147 maps moving 149 maps removing 149 maps resizing icon 148 PoGE injector management 187 rebooting 187 refreshing 88 187 removing from a map 182 searching 164 software version 173 viewing events and alarms 186 viewing reports 186 attributes of a policy 220 audit 370 authentication Array shell logins 80 auto blocking rogue APs 327 auto negotiate 242 244 auto channel lock channel selection 313 auto configuration channels 181 automatic discovery 70 see discovery 74 B background images changing for maps 145 file name 160 161 for maps 142 formats 143 physical size 143 resolution 143 backup deleting from database 514 Management System backup m
518. tations Internet access and other access beyond the Array is allowed but access is blocked between stations associated to IAPs on the same Array Choose No to allow traffic between stations The default is No 9 Load Balancing The Xirrus Wi Fi Array supports an automatic load balancing feature designed to distribute Wi Fi stations across multiple radios rather than having stations associate to the closest radios with the strongest signal strength as they normally would In Wi Fi networks the station decides to which radio it will associate The Array cannot actually force load balancing however the Array can encourage stations to associate in a more uniform fashion across all of the radios of the Array This option enables or disables active load balancing between the Array IAPs For an in depth discussion see the Xirrus Station Load Balancing Application Note in the Xirrus Library Choose Passive to enable standard load balancing If the Array decides that an IAP is overloaded that IAP will not respond immediately to a client s Probe request After a few seconds if the client has still not associated the IAP will respond assuming that this client is determined to associate to the overloaded IAP Overloaded IAPs will always respond to Association and Authentication requests If you select Active Load Balancing and an IAP is overloaded that IAP will send an AP Full message in response to Probe Association or Authentication re
519. te click Next at the top of the page The imported licenses will be displayed on the Verify Licenses page Figure 137 Check that the licenses imported correctly If necessary you may edit any License Key by clicking on it Verify your licenses imported correctly then click Finish to complete the import process Any licenses that cannot be deployed now either because the array has not yet been discovered by XMS or because the array is off line will be placed in the pending list and will be deployed when the array is available Select Columns Showing 1 to 8 of 8 Rows 25 gt 1 License Key Serial Number License Status Software Version Features 802 11n 035QR SNNOA AFOKH 4030U XN1637091DD13 Array Not Discovered RF Analysis Manager RF Performance Manager RF Security Manager 802 11n ene XN0402101F536 Array Not Discovered AUN RF Performance Manager RF Security Manager 802 11n 13JNJ EY2TJ 76CR3 QXLJS XN08030918F32 Array Not Discovered HF Matysis Manager acurity Mananar Figure 137 Importing Array Licenses Click Finish to complete the import process Any license that cannot be deployed now either because the Array has not yet been discovered by XMS or because the array is off line will be placed in the pending list and will be deployed when the Array is available The Status field will show the results for each Array Managing Your Wi Fi Arrays 193 e XIRRUS Management System Editing Array Licenses To modify l
520. ted when you click on the Stations node in the Tree which appears under the Resource parent node Using the Stations window you can use the XMS map locationing feature The Stations window includes a list of all client stations currently associated to members of the Array group selected on the Dashboard Information on this window is automatically refreshed every 20 seconds To search for a particular station in the list see Using the Search Feature in the Resource Windows on page 164 Managing Your Wi Fi Arrays 203 e XIRRUS Management System The Stations window is divided into three sections 9 Station Status The buttons show a count of stations by media 802 11a in orange 802 11bg in green 802 11b in blue or 802 11n in purple and by encryption type Open in red WEP in yellow and WPA WPA2 in green Hover the mouse over a button to display the type of encryption or media represented by the button Click a button to show only stations of the selected type in the list Click the leftmost button Total to revert to showing all stations 9 Station Throughput a chart of station throughput You may zoom in on a graph region by clicking and dragging the mouse over it double click anywhere to revert to the full chart The time interval shown is determined by the Performance chart in the Dashboard see Performance on page 98 This chart is similar to Array Throughput and data is included only for stations shown in the st
521. ter list is used by an SSID or user group on an Array the filters in that list are executed in order the first entry at the top of the list is executed first followed by the second and so on You can use the up and down arrows to change the order of the filters in the list Note that filtering is secondary to the stateful inspection performed by the Array s integrated firewall Traffic for established connections is passed through without the application of these filtering rules Filters may be added to the list by pressing the dh button to the right of the Filters box and filling in the fields described in Filter Details below Note that if you have not selected a filter list then this filter will be added Managing Configuration with Policies 351 e XIRRUS Management System to the default filter list named Global Existing filter entries may be edited by pressing the button and deleted by pressing the 3 button x Filters and Es Source Address any x Not Matching No C Yes Destination Address fany x Not Matching C No C Yes Set QOS None VLAN D None y VLAN Number 5 a Apply Cancel Figure 222 Filters Setting Details Filter Details e Filter List Name This read only field shows the name of the filter list to which this filter belongs 9 Filter Name Enter a meaningful name for the filter 9 Enable Check this box if you wish to enable the filter when you execute the list 9 Type Choose
522. that appear in the form of a pull down list when you click on a menu item The content of the menu bar will change from window to window based on the functions you are using and the user privileges that have been assigned to you Figure 26 shows the menu items with their associated pull down lists when you view the Arrays window Back Cti Shift B Forward Ctr Shift F Detach Ctrl Shift T Close Ctri Shift C Close All Ctrl Shift O Fie Admin Tools Window Help File Admin Tools Window Help File Admin Tools Window Help J 1 Options Cii 0 p Discover Devices Ctrl C 4 User Accounts p E Reports Backup Manager Syslog Fx Broadcast Message Ct amp G fG XMS PoGE Management ni B Monto Array Bulk Configuration e Array License Management Exit Alt F4 F W a Xirrus XMS License e File Admin Tools Window Help 3 XMS Monitor Dashboard i e gt T XMS Resources Arrays Cascade XMS R File Admin Tools Window Help Monitor MERCIER p Help Contents F1 E M E M Tile Vertical E d amp Dashboarc P ta 2 About Xirrus Management System Ctri B x v Show Toolbar 5 Figure 26 Java Client Menu Bar The XMS Java Client Interface 41 e XIRRUS Management System Toolbar The toolbar is located immediately below the Menu Bar Figure 27 Mouse over Tool Tips are provided for all toolbar buttons indicating the operation performed Hide Toolbar Y To
523. that string To return to showing all maps just clear the Filter Maps field Working with Maps 133 e XIRRUS Management System The Arrays List This list shows all of the discovered Arrays in the XMS database The first column indicates Array status and a mapped icon i in the second column indicates that the Array has been added to one of the maps It does not mean that the Array has been added to the currently displayed map You may sort the entries by clicking on the header of any column Host Name MAC Address IP Address or the status or mapped icons Click again to reverse the sorting _ xwost4091c55c 00 0t74 00 96 6b 10 100 55 134 S xwos270814599 00 08 74 00 3b 9b 10 100 55 133 Fe xso4070819603 00 0t74 00 05 37 10 100 55 135 Figure 90 The Arrays List Any Array that is not already a member of a map may be easily added to the current map by selecting and dragging it onto the map See Adding Arrays to Maps on page 147 An Array may belong to only one map at a time Searching for an Array in the Arrays List To find an Array in the list click anywhere in the Arrays List and type Ctrl f In the Find field enter the string that you wish to match Click the Find button and XMS will highlight the next list entry that contains that string in any position in any column Click again to jump to the next matching entry x Find foal Case sensitive J Wrap S
524. that the Array has been up and running successfully based on a percentage of the total time for the time period specified for this report If XMS is non operational for a period of time Array availability information for this report is extrapolated from the last known state of the Array prior to XMS going off line Managing Reports 415 e XIRRUS Management System RF Reports RF reports provide information on RF channel usage in your network For more information about assigning channels see IAPs on page 309 The following RF report is available 9 Channel Usage Shows which channels each IAP is using Channel Usage This report generates a table of current channel assignments for each IAP and for all media types 2 4 and 5 GHz channels based on your Selection Criteria Selection Description Criterion for details Group Include only Arrays that are members of the selected Array group Map Include only Arrays that are members of the selected map Array Include only the selected Array Table Row Limit Total number of rows Schedule Run the report at this time See Schedule on page 382 Email Report To After running email the report See Email Report To on page 382 The Channel Usage report also provides separate bar charts for the 2 4 GHz and 5 GHz bands showing the number of IAPs using each channel Figure 258 Table Details for the Channel Usage Report The resul
525. that you wish to use for the WDS link This setting is used to allow more bandwidth if the WDS Link is over loaded Target IAP MAC address Enter the base MAC address of the target Array the host Array at the other side of this link This address is the base address of the target Arrays IAP MAC Range To display this address use the Web Management Interface on the target Array Connecting to an Array on page 172 and log in Click WDS and look for This Array Address at the bottom of the window Alternatively click Array Info and look for IAP MAC Range then use the starting address of this range Target SSID Enter the SSID used for the WDS Link Username Enter the user name used for security on your Array if it is enabled Password Verify Password Enter the password used for security on your Array if it is enabled and then re enter it in the Verify Password field to confirm it Managing Configuration with Policies 345 e XIRRUS Management System WDS Client IAP 7 WDS Client Gone at WDS Client IAPs Settings WDS Client y WAP v Java Applet Window Figure 217 WDS Client IAP Window Click WDS Client IAP on the left side of the screen to select the radios that are part of the WDS Link The WDS Client IAP Window is displayed Figure 217 You can assign radios to WDS Links 1 to 4 Once an LAP has been selected to act as a WDS client link you will not be TS allowed to use auto
526. the autochannel operation see Global RF Settings on page 319 cannot change it 9 Bonding This setting only applies to XN Array models Also see the discussion of 802 11n bonding in IEEE 802 11n Deployment Considerations in the Xirrus Wi Fi Array User s Guide e Off This channel is not bonded to another channel Managing Configuration with Policies 313 e XIRRUS Management System e On This channel is bonded to an adjacent channel The bonded channel is selected automatically by the Array based on current conditions The choice of banded channel may be dynamic changing as needed or it may be static fixed once the selection is made e 1 This channel is bonded to the next higher channel number Auto Channel bonding does not apply 1 This channel is bonded to the next lower channel number Auto Channel bonding does not apply Cell Size The number of users and their applications are major drivers of bandwidth requirements therefore you must account for the number of users within an Array s cell diameter when calculating cell sizes Select the desired cell size for this IAP from the choices available in the pull down list either Manual Small Medium Large or Max Note that the Max option may not be used at the same time as sharp cells see Global RF Setting Details on page 320 As a rule small cell sizes achieve higher data rates If you choose to define the cell size manually you must spe
527. the AES Enabled box then a column is displayed showing the setting for each policy for the AES Enabled field either True or False If you uncheck the 220 Managing Configuration with Policies e Management System XIRRUS box the column is removed from the policy window This feature provides a convenient at a glance method for viewing the settings of each policy listed in the Policy window To generate the Select Policy Attributes window for any policy window open that window and then click on the Columns button Refreshing the List The information contained in any policy window can be refreshed by clicking on the Refresh button refer to Figure 151 to locate the button When you refresh the list all information in the window is updated to the current active state Modifying an Existing Policy This chapter documents the creation of new policies for all policy types It does not document how to modify an existing policy for each type because the procedure is the same for all policies Use either of the following two methods to access the configuration window used by the policy Double click on the policy in the policy window Click on the policy to select it then click on the Modify button You can now make changes to the properties of the policy It makes no difference whether the policy was created by copying it from an Array or entered from scratch both may be edited If you need guidance for making your changes r
528. the XM 3320 XM 3340 XM 3360 Management Appliance Quick Installation Guide PN 812 0073 001 The XMS server is managed using the browser based XMS web client Figure 5 For more information on using the web client see Managing XMS on Linux based Management Appliances on page 502 About the XM 3300 The XM 3300 is a legacy model based on the Microsoft Windows operating system Installation and requirements are described in the XM 3300 Management Platform Quick Installation Guide PN 812 0016 001 The XMS server on this model is managed using the Xirrus Server Management Tool XSMT see Figure 6 For more information on using XSMT see Managing XMS on Windows based Systems on page 523 Xirrus Management System Products 15 e XIRRUS Management System Manager tabs XMS Server Database Software iae Manage safemo Manager Requi ed Services Service Mame c MEN Status messages Figure 6 Server Status on XSMT While the XM 3300 is a network based device that will normally be used via the network a monitor and keyboard mouse should be connected to it The factory default Windows login for the XM 3300 is Administrator Xirrus 23 note the exclamation mark About XA 3300 CC XA 3300 CC is a software only version of the XMS server that you install on your own hardware running a Windows based operating system The following sections describe its requirements and how to install it XA 3300 CC Syst
529. the Xirrus Server Management Tool XSMT When prompted enter your password The default username and password are both admin all lowercase See XSMT Shutting Down the XMS Server on page 531 for more information 3 You will be notified when the server has shut down successfully Note that on Linux based systems the database server will be shut down as well On Windows based systems it will remain running this is not a problem 4 When the XMS server has shutdown successfully you may shut down your computer 38 Getting Started with XMS Management System XIRRUS The XMS Java Client Interface This chapter provides an overview of using the XMS Java client interface which is a convenient tool for managing and configuring your multi Array Wi Fi network XMS also provides a Web Client interface which offers a subset of the functions provided by the Java client plus additional XMS server administration functions especially for Linux based management Appliances The current chapter discusses usage of the Java client For more information about using the XMS web client instead please see the chapter titled The XMS Web Client on page 423 The XMS Java client interface allows you to browse through the discovered Wi Fi Arrays in your network view network and device information establish operating policies for individual Arrays or groups of Arrays monitor the performance of all devices residing in the network detect and monitor
530. the desired data transmission speed from the pull down list either 10 Megabit or 100 Megabit The default is 100 Megabit 10 100 MTU Size Specify the MTU Maximum Transmission Unit size When you specify the MTU you are defining in bytes the largest physical packet size that the network can transmit Any messages larger than the MTU that you specify here are divided into smaller packets before being sent The default is 1500 bytes After completing all of the desired fields in the 10 100 Fast Ethernet interface either click on the Apply button to save this policy or click on one of the following buttons to configure more policy options 9 Gigabit 1 Configure the first Gigabit link 9 Gigabit 2 Configure the first Gigabit link Gigabit 1 This window contains fields for configuring the Gigabit 1 interface The Gigabit 1 interface is the primary port for both data and management traffic providing wired network connectivity that runs at a maximum data transmission speed of 1000 Mbps It is also backwards compatible with Fast Ethernet offering the slower data rate of 100 Mbps If a single Ethernet connection is used it must be connected to the Gigabit 1 port If the Gigabit 1 interface fails and both ports are connected the Array automatically switches to the Gigabit 2 interface for uninterrupted network connectivity Managing Configuration with Policies 243 e XIRRUS Management System Gigabit Interface 1 Settin
531. the name and contact information of the person who is responsible for administering the Array at the designated location 9 Contact Email Enter the email address of the administrator 9 Contact Phone Enter the telephone number of the administrator Saving Your System Information Policy When you have configured all of your system information settings click on the Apply button in the System Information window to save the new policy Managing Configuration with Policies 227 e XIRRUS Management System Management Control From the Configuration Policies node in the tree click on Management Control to display the Management Control window This window contains a list of all management policies currently available with tools to manage these policies Management Control Total 1 Add Policy Columns Refresh Policy Name Admin Accounts Modify Exe Delete Xirrus1 E gt x as Done Java Applet Window Figure 159 List of Management Policies The columns in this window show selected settings for the listed policies For information about changing the columns displayed see Selecting the Columns Shown in a Policy Window on page 220 Creating a New Management Policy A management policy is created so that you can set up management access and control To create a new management policy click on the Add Policy button in the Management Control list window When the Add Policy window appears select Copy
532. the total number of packets Ethernet Traffic This report provides statistical data for Ethernet throughput based on the speeds achieved by the Gigabit1 Ethernet port on Wi Fi Arrays Figure 251 The graph at the top of the window displays aggregate data throughput across all Arrays for the selected time range A table shows average and peak Ethernet rates for each Array The information displayed in this window and in the graph is dependent on the selection criteria you specify summarized below Selection Description Criterion for details Group Include only Arrays that are members of the selected Array group Map Include only Arrays that are members of the selected map Array Include only the selected Array VLAN Include only the selected VLAN specified by name or number Display Traffic by Break out transmit and receive traffic separately or show only totals Table Row Limit Total number of rows Date Time Include only this time range Schedule Run the report at this time See Schedule on page 382 Email Report To After running email the report See Email Report To on page 382 Managing Reports 399 e XIRRUS Management System If you have a large network the results returned in this report may span many pages The browser display of the report will truncate to three pages to give you a preview to see the entire report open the PDF version Downloa
533. thin Maps i25 ttr p Et trt aN ERSA tee n ARSS 158 Map Settings Window 5er erp e ie e ERE Hed 160 Map Settings e 160 Intommnatonp DabS aano a nimia IP ruere nitate pd Ls ueris 161 Managing Your Wi Fi AFfayeus iicet nti maso l pus trtuni tec tanE 163 Pur T E 165 The Arrays WIDOOW ciiin ti ned ber e eerte em the I ipee chads 166 Connecting to an Atrdy coire aei op ROBORE p EE 172 Viewing Array Status omia medo DINER UE RON Ne 172 Conte Hel P ar Atay So evenit a iei d emot rc URB OG 174 Create Policies from Att ay ice cincti bere eee 178 Enabling or Disabling TAPS 2 5 eerte ian aras Pha aean riens r ada 180 Auto Configuring Channels on Multiple Arrays isisisi 181 Deleting an ATAY euneommiamimmemimimmemersriemienie mise d 182 Removing an Array from a Maps ii amiebniatennmem niam nas 182 Assigning an Array tod Group unm BT EBEN RI EUER IUS 183 Applying Policies to an Artay 4 i cndiauia itsbhtet ndi eene hdd reete 185 Updating Array SORW ANE certe enne rca 185 Viewing Byents amd Alerts ise teret pre here Heine Ee eios rins 186 WAC WAS Re POLS ieren E E EHE deed 186 e XIRRUS Management System Refreshing an Array aasveimegh ote eru DO RUE Nd det p eene 187 IebooBhp an Array omen iau t muri rev Ore IBID IP UT 187 Locating an Array on a Map eintritt ttn itio pn etn 187 Managing a PoGE Injector erret nette eret IHRER ees 187 Manapinp Array Licenses aano n timore mo ed E 189 About Licensi
534. thin the map and basic Array operations It does not cover Array properties or configuring Arrays For this and other Array information go to Arrays on page 165 Most Array management is performed by right clicking an Array on the map or in the Arrays list on the lower left Figure 108 This menu is identical to the drop down menu that appears when you right click an entry in the Arrays window It includes functions such as connecting to the Array s Web Management Interface WMI configuring the Array via XMS creating policies from the Array and more For details on all of these please see Array Operations on page 170 Some of the menu options are targeted for the map window 9 Remove from Map Use this to remove the selected Array from the map You will need to save the map to have the change reflected in The Arrays List and make the change permanent This menu choice does not remove the Array from the XMS database if you wish to do this use the Delete option instead 9 Locate Use this to locate and select the chosen Array The map window will switch to the map that contains the Array This menu option is only available when you right click on an entry in either The Arrays Window or the map window s Arrays list It is not available from the map itself 158 Working with Maps e Management System XIRRUS Cx Web Management Array Status SS XN Configure F Create Policies from Array Enable Disable All IAPs
535. this policy is assigned EL xi LED Settings LED Enable C Disabled OnRadioEnabled C On First Association LED Blink Behaviour Beacons a Oo Mart Tx a Mgmt Rx Probe Request Rx a 71 Data Tx Data Rx m Broadcast Tx a Clients Associated Apply Cancel Figure 212 LED Settings Refer to Figure 206 to see where the LEDs are located on an XN16 XS16 or XS 3900 Array which has 16 IAPs The XN12 or X512 Array has 12 IAPs the XN8 X58 or XS 3700 Array has 8 IAPs and the XN4 X84 or XS 3500 Array has 4 IAPs All Array models have system and link status LEDs LED Setting Details 9 LED Enable This option allows you to enable or disable the IAP LEDs not the system or link status LEDs and determines which event triggers the LED sequencing either when an IAP is enabled or when an IAP first associates with the network Choose On Radio Enabled or On First Association as desired 340 Managing Configuration with Policies e Management System XIRRUS LED Blink Behaviour e All Activities These options allow you to select when the IAP LEDs blink based on the activities you check here From the choices available select one or more activities to trigger when the LEDs blink The default is to have the following activities enabled e Mgmt Tx e Mgmt Rx Data Tx e Data Rx e Clients Associated Saving Your RF Policy When you have configured all of your RF policy settings cli
536. tics for your managed Wi Fi network including MTBF and MTTR figures Array Inventory This report creates an inventory list for your use Figure 256 The result is a list of all your managed Wi Fi Arrays for your reference You may find it very useful to save this report as a csv or xls file as a starting point for working with Excel The report is based on your Selection Criteria Selection Description Criterion for details Group Include only Arrays that are members of the selected Array group Map Include only Arrays that are members of the selected map Order table by Sort table by selected column Order Direction Sort in ascending or descending order Schedule Run the report at this time See Schedule on page 382 Email Report To After running email the report See Email Report To on page 382 412 Managing Reports e Management System XIRRUS Table Details for the Array Inventory Report The table portion of the report shows the name addresses and serial number of the selected Arrays organized by the following column headers 9 Array Name The host name assigned to the Array Only Arrays that meet your selection criteria are included MAC Address This is the Array s MAC address 9 IP Address This is the Array s IP address 9 Location The physical location information that you entered for this Array if any 9 Serial Number This is the Array s serial number Download R
537. ting Started with XMS 27 e XIRRUS Management System When XMS server startup is finished the XMS Server Manager tab of XSMT will indicate that the server is up and running Figure 15 shows an example of a successful server initialization process The state of the topmost three servers is Running and they are shown in green When the XMS server is ready for clients to be started the Logs section on the right of the window will display The XMS Server is now running Point your browser to http XMS Server IP gt 9090 or locally from this computer use http localhost 9090 When the server starts for the first time it will initialize the database To add your Xirrus Arrays to the XMS database please see Discovering the Network on page 67 For more information on using XSMT see Managing XMS on Windows based Systems on page 523 NOTE The XMS server does not have a default backup schedule so it is very important for you to create a backup schedule after installation After you start an XMS client see Backup Manager on page 499 Initial Server Setup for Linux based Management Appliances Use the XMS web client to complete the following steps on the XM 3320 XM 3340 XM 3360 in order to configure XMS for proper operation When you start the XMS server for the first time you must configure the following settings as described in Initial Server Setup on page 504 9 Network Settings 9 Date Time Settings
538. ting sins eism inei 508 Figure 325 Changing Date and Time Settings sssssssssssssss 509 Figure 326 Changing Database Backup Settings tenentes 511 Figure 327 Scheduling Backups niet tete etie heben ARADA SPESA 512 Figure 328 Restoring Backups eene ee eerte n erras 513 Figure 329 Changing the Email Servet ssndsn tnau n eke 515 Figure 200 Changing Polling Rate qa quittent Ree 516 Figure 331 Changing the SSH Server secs vascadainens mien ehe recie 517 Figure 332 Viewing Log Files ite tree HERR ERA a ERAR E RARER IR pe 518 Figure 333 Viewing a Selected Log File etes 519 Figure 394 Multiple Log Files retten nt itn tte ees Renten 519 Figure 335 XMS Server L1cens issss imei oe ERO RLRRI GERE OR IEEE 520 Leure336 Upgrading XMS SoLDWOT icai nae E RR ERRARE E 521 Figure 397 Resetting XMO aieiscte iecit Hn ee e besos kis S HR ERRAR AAR ER TERERAA 522 Figure 338 Xirrus Server Management Tool XMS Server Manager 523 Figure 339 Start XMS as a Windows SetVice isi iet tinent tee pite iiia 524 Figure 340 Xirrus Server Management Tool XMS Server Manager 526 Figure 341 Status of Services Showing Normal Status sss 527 Figure 342 Status O Offline ACBVIIGS a maneo aima iren e trat Ede 528 Figure 343 Server Startup Progression emt iei era i gen 530 Figure 944 Serveris UP XSMT iiceceetsckeee e etin tentorio en tta n ence tette ente t einen etes aeda
539. tion buttons to perform operations on the selected entries You may click the checkbox in the header row to select all rows Click again to deselect all rows If the list contains multiple pages of information use the browse buttons provided on the far right above the list to navigate between pages Use or to jump to the first page or last page respectively Rearranging and Resizing Columns in a Table For easier viewing of list data you may rearrange columns by dragging the column header and moving it to the desired position This is helpful if you wish to view particular columns in close proximity or to move less viewed columns to the right The new arrangement is saved per user The next time you log in you will see the columns in the same order To resize a column simply drag the right side edge of the column to expand or reduce the width of the column Sorting To change how the table is sorted click in any column header to define that column as the sort criteria In addition you can choose to have the results The XMS Web Client 443 e XIRRUS Management System displayed in ascending order or descending order To do this simply click in the same header again to toggle between ascending and descending order The Arrays List The Arrays List Figure 274 on page 441 shows Arrays that have been discovered by XMS You may customize the columns shown in this list see Select Columns on page 442 This list is
540. tngs eet reete nrnna 302 Figure 199 Adding an entry to the User Group List ees 304 Figure 200 Arrangementof IAPs XNTOLAT AY iita miii ote eite 309 Figure 201 List ot AP Policies oostei tms sene te tee el eres 309 Figure 202 PAP Settings Policy Details ss 55i iia qa cerne 310 Figure 203 IAP Settings For Selected TAP eau ausa stern irent iiber 311 Figure 204 List of RE Policies eeceitisc inttr dn Ie pH NSR Hire beni PAR 316 Figure 205 Radiated Coverage Patterns encre tnoneneatan 316 Figure 206 LED Locations XN16 nni cere irit 318 xviii List of Figures e Management System XIRRUS Figure 207 Figure 208 Figure 209 Figure 210 Figure 211 Figure 212 Figure 213 Figure 214 Figure 215 Figure 216 Figure 217 Figure 218 Figure 219 Figure 220 Figure 221 Figure 222 Figure 223 Figure 224 Figure 225 Figure 226 Figure 227 Figure 228 Figure 229 Figure 230 Figure 231 Figure 232 Figure 233 Figure 234 Figure 235 Figure 236 Figure 237 Figure 238 Figure 239 Figure 240 Figure 241 Global RF Setting Snan nd d EDU EUST OR RR pestis 319 F st Ioanime Detlifigs cuite eim oe d Pen 328 802 11a RF Settings nene ertet etri doe ees 331 802 11 g RF Sets iind p E RR rate i ete ie HEATER repeti 333 802 110 RE Settings spe enne i e i re HERI Eee 337 LED Settings ssr ein maintien emn eim O E E e a s 340 Connes urma WDS Likipun E a E 342 WDS Policy WIBOOW vitate ps IR E E 342 WDS Cli
541. to Optimized each IAP broadcasts at the lowest Array TX data rate currently in use by associated stations thus improving system performance For example if ten stations are associated at 54 Mbps and one station at 12 Mbps broadcasts will go out at 12Mbps One out of eight beacons are sent out at the lowest basic rate 1 Mbps for 802 11b g radios 6Mbps for 802 11a radios When set to Standard the default broadcasts are sent out at the lowest basic rate only The option you select here is applied to all IAPs DTIM Period The DTIM Delivery Traffic Indication Message is a signal sent as part of a beacon by an Array to a client device in sleep mode alerting the device to a packet awaiting delivery The DTIM Period is a multiple of the Beacon Interval and it determines how often DTIMs are sent out By default the DTIM period is 1 which means that it is the same as the beacon interval Enter the desired multiple between 1 and 255 The value you enter here is applied to all IAPs Station Reauthentication Period seconds The value in this field specifies a time in seconds for the duration of station reauthentications The default is 5 seconds Enter a new value the minimum is 1 second or increment decrement the value using the UP and DOWN arrows Station Timeout Period seconds The value in this field specifies the elapsed time in seconds before the association of an inactive station times out The default is 300 seconds Ent
542. to keep with each Array For example you might add an asset tag column or a column for notes regarding support actions for this Array Open this configuration page by clicking the Configure button near the top of the window then select Custom Fields on the left Enter a new custom field name and description and click the Add button Field Name jassetTag pone Description Corp Asset Tag Number Network Settings Add Radio Settings Advanced Config CAR Description PoGE alantest alantest Edit Delete Add Devices Trap Receivers Licenses Custom Fields Custom Field Values Custom Actions Figure 310 Custom Fields Page Enter the desired Field Name for the new column this name will be used as the header for this column in the Arrays list and add an optional Description for your reference if you wish The description will only appear in the list of fields on the Custom Fields page it is not used anywhere else Click Add when done You may repeat the procedure to create up to a total of five new fields Each new column may be used to contain strings up to 255 characters long The new field will be displayed in the list below the Add button You may remove an entry by clicking the Delete button to its right You may modify the Field Name or Description by clicking the Edit button to its right If you have populated this custom column with data the data will be unaffected and will still exist under the edited Fie
543. to sort the entries by that column 128 Security Managing Intrusions Management System XIRRUS Working with Maps This chapter takes you on a tour of the Java client s map window and its features It offers a procedure for creating your own custom map and shows you how to display a contour map of your RF coverage Section headings for this chapter include About Maps on page 129 Getting Started with Maps on page 130 The Map Window on page 132 Migrating Maps from Earlier Releases on page 142 Preparing Background Images for New Maps on page 142 Adding a New Map on page 144 Saving a Map Important on page 145 Setting the Map s Scale on page 146 Adding Arrays to Maps on page 147 Orienting Arrays on page 150 Entering Environment Settings on page 151 Locating Devices on page 152 Changing Contour Map Colors on page 156 Deleting a Map on page 157 Managing Arrays Within Maps on page 158 Map Settings Window on page 160 About Maps Maps offer a topographical view of your network and all Wi Fi Arrays contained within the network From any map view you can drill down to specific Arrays and organize how your network is represented in the Java client interface A contour map shows Wi Fi coverage at your site and is based on measurements observed by Arrays It visualizes the RF environment provided by your Wi Fi network The map incorporates directional antenna coverage on a per
544. to whether they present a threat or not Array Group All Arrays 04 12 2011 22 04 11 2011 16 04 09 2011 06 04 12 2011 22 04 13 2011 02 04 13 2011 02 04 13 2011 02 04 13 2011 02 empty abcdefohijk pctest gwow13 gwow2 gwow12 gwow14 B set Approved EJ setknown E set unctassified B set unknown B set Blocked EJ eat Rules Find Find Next Find Previous Detecting Arrays Bl BSSID Detected by Array Hostname RSSI Discovered Last Active ajajajaja gs Find Find Next Find Previous S Done Figure 36 Security Window Configuration Windows The management policy windows are generated by clicking on items that reside under the parent Configuration function in the Tree with the selected child window s being displayed in the Main Viewing Area of the client interface Configuration windows for policies include Policies 9 Global Policy SSIDs System Information 9 User Groups 9 Management Control e IAPs Network e RF 50 The XMS Java Client Interface e Management System XIRRUS 9 Services e WDS 9 VLAN 9 Filters DHCP Server Software Update 9 Security 9 Web Page Redirect WPR Configuration File Advanced Other configuration items 9 Groups e Audit Figure 37 shows an example of the Security Policy window detached from the client interface for clarity From this
545. tom Actions Page Enter the desired Name for the new button this name will be used as the button s label and add an optional Description for your reference if you wish The description will only appear in the list of entries on the Custom Actions page it is not used anywhere else The XMS Web Client 493 e XIRRUS Management System Enter the URL to go to when this custom button is pushed The URL may include one or more variables http track xyzcorp com assettagno assetTag You may use http or https To pass a custom field name to a variable in the URL just surround the name with signs as shown above for the custom field that we defined named assetTag XMS provides four predefined variables for your use ipaddress hostname macaddress serialnumber Select the page s where you want the new custom action button to appear Select Show in Monitor View to add the custom action to the Monitor Arrays page Select Show in Configure View to add the custom action to the Configure Home Page You may add the action to either or to both Click Add when done The new custom action will be displayed in the list below the Add button You may remove an entry by clicking the Delete button to its right You may modify any of the actions settings by clicking the Edit button to its right 494 The XMS Web Client Management System XIRRUS XMS Administration XMS may be administered from the XMS Ja
546. ton Percentage Packet Error Packet Retry Station Errors for Individual Station Row Count 18 KMS SQA 1 PC 00 24 d7 76 b8 f8 169 254 177 225 1 040 3 amp 0 82034 8 040 00 24 d7 76 9d e0 109 254 67 17 00 21 Sc 60 02 07 10 100 55 157 0 100 j 0 790 j 0 010 5 8 980 j UPREMECHANCELL0 25 9ce7 40 00 189 254 156 408 0 000 1 350 34 N14121123EA4 XS08010800E36 XIRRUS 5103 c81 12 05 69 3f 169 254 959 213 NT4121123EA4 00 19 32 00 00 05 10 100 58 44 XN14121123EA4 XIRRUS 5103 c81 12 0569 47 1698 254 171 175 N16121123EAS 00 19 d2 00 00 06 10 100 58 50 V154 00 19 92 00 00 04 10 100 58 43 XIRRUS 5103 5c81 120568 6d 169 254 165 13 XN14121123EA4 AV154 reusses 0 19 32 00 00 07 10 100 56 51 2c81 12 05 08 6e 169 254 32 94 Figure 250 Station Errors Report 9 Station IP Address The IP address assigned to the station 9 Packet Error Rate The packet error rate shown in this window reflects the bit errors detected by the system during the time period you specified The percentage shown is the number of packet errors divided by the total number of packets 398 Managing Reports e Management System XIRRUS 9 Packet Retry Rate Shows how many attempts were made to re send failed packets during the time period you specified The percentage shown is the number of packet retries divided by
547. trator account Mode Choose Read Write to grant both read and write privileges to this administrator or choose Read to allow read only privileges write privileges are denied The default is Read Write In the read only mode administrators cannot make changes to configurations e Admin Password Enter a password for this administrator account ID 9 Verify Password Re enter the password in this field to verify that you typed the password correctly After configuring your administrator accounts click on the Add button You are returned to the Admin Settings window where the new administrator account is displayed in the list Console This window contains fields for configuring the serial console interface s operating parameters Management Control xj Console Settings J Management Settings Management Yes C No m4 Inactivity Timeout Seconds 300 SONE Word Size s Parity none odd C even famn Stop Bits 4 2 M ea eee Console Apply Cancel Figure 165 Console Settings Managing Configuration with Policies 237 e XIRRUS Management System Console Settings Management Choose Yes to allow management of the Arrays via the serial interface using a HyperTerminal connection to the Command Line Interface or choose No to deny all management privileges for this interface 9 Inactivity Timeout Enter a value in this field to define the elapsed idle time in seconds before the connecti
548. try are running the initialize and repair options are disabled You will receive an informational message if you try to use them notifying you that you must stop the server first 9 Re initialize Database Choose this option if you want to re initialize the current database which means clearing the database See Re initialize Database on page 532 9 Repair Database Choose this option to attempt to repair the current database See Repair Database on page 533 Re initialize Database This operation clears the database All of your configuration discovery statistics and other data will be lost When you select this operation XMS starts the 532 XMS Administration e Management System XIRRUS database server if it s not already running and deletes all XMS tables When the XMS server restarts it finds that the database is empty and initializes the database for its use Although this tool is available in XSMT re initializing a database should only be performed in these situations 9 When the Release Notes for a new version of XMS explicitly instruct you to re initialize the database when upgrading from your currently running release e Asa last resort it can be used to recover from catastrophic database corruption Please call Xirrus Customer Support before re initializing To re initialize the database first shut down the XMS server and then select Re initialize from the XSMT Database menu You are presented with a messa
549. ts shown in this report are organized by the following column headers 9 Array Hostname The host name assigned to the Array that the IAP belongs to 416 Managing Reports e Management System XIRRUS 9 Array IP Address The IP address assigned to the host Array 9 IAP The name of the access point for example abg4 an3 a7 etc The abg2 abgn2 IAP is usually enabled for monitoring only default which means that client stations typically cannot associate with this IAP Channel s This column shows the channel s used by the IAP IEEE 802 11n radios use two adjacent bonded channels for improved performance so those IAPs will show two channels if they have bonding in operation sl e My Reports ne XIRRUS Customize XMS Reports Channel Usage Time Span Hour Thursday 03 17 2011 15 54 POT to Thursday 03 17 2011 16 54 POT 2 4 GHz Channel Usage Lid wn Mo stias o8 88883 38 24 Onz Channels 5 GHz Channel Usage Mo ot APs XITITIIT SOME Channels Channel Usage Table I pwseovar qrarosei peoe ose pomo posrrerooos RE TIN 1000 00 ovat 1482 o 180040 nam 7210 052 O2 Te 1600 00 pues po poa ene prees Figure 258 Channel Usage Report Managing Reports 417 e XIRRUS Management System Wi Fi Mode This shows the IEEE 802 11 media in use by the IAP e MAC Address BSSID This is the IAP s MAC address 418 Managing Reports e Manageme
550. ts task the message displayed in the Status Bar is Done loading a Status Message Figure 29 Status Message Tool Tips Tool tips are a standard feature that helps users navigate through any client or application interface They provide a convenient way of identifying components within the interface and are activated by rolling your mouse pointer over an item no clicking is involved Tool Tip Figure 30 Tool Tips The vast majority of elements displayed by XMS s client interface are supported with tool tips To reveal a tool tip simply roll your mouse pointer over the area of interest 44 The XMS Java Client Interface e Management System XIRRUS Other Navigation Tools In addition to the navigation tools already discussed the XMS client interface supports task menus that are generated by right clicking on elements within the interface and keyboard shortcuts Right Click Menus In keeping with standard Windows navigation techniques you can generate context sensitive menus by right clicking on objects and other elements within the client interface for example map symbols and management windows within the tree Figure 31 shows an example of menus generated by right clicking on an Array after selecting multiple entries in the Arrays window Management Control Network Services Enable Disable All IAPs gt Auto Configure Channels Delete DHCP Server Remove from Map Security A
551. tten rice ik ota d n 257 Figure 177 VLAN Polity IEUSE anese n mra ehe reri et rre 259 Figure 178 MEAN SEINES sin iio bn itg Euren af etin C Leod 260 Figure 179 VLAN List Setting sini acai aol enamine ees 261 Figure 180 List of DHCP Server Policies oit ente peste etii bie isda 265 Figure 181 DACP Server Settings seii rrt entere tenere etas 266 Figure 182 DHCP List Settings ond deine tn irte eph p pee pure aei 267 Figure 163 Listotoecunby Policies noit debebam ated 270 Fig re 104 Security Del tips ano nerd Tuin mi EROR OT Pe de 272 Figure 185 RADIUS Management ssessseeeeeeeneenenene enne nnne 276 Figure 186 Adding Internal RADIUS Users trees 280 Figure 187 MAC Access LISLc siiis tete irte ei he bee e n Eee e HE et has 282 Figure 188 Adding a MAC Address to the MAC Access List 283 Fiame ls MUNG Access EISE oca um d testers test hase atten eR Manet 283 Figure 190 Admin RADIUS Management iioi o cidit a Ho ib 284 Figure 191 List of SSID Policies eet tein 287 Figure 192 S5IDSefltis niat E pei t ee ee d cai 288 Figure 193 SSID List ENI setsstescsitin iere AES 289 Figure 194 SSID Security DetUt ps est eipentn rien ten ree rn rne 297 Figure 195 SSID SeLtBinps outbound ia was Eo ea EEAS AGEE 299 Figure 196 Customizing an Internal Login or Splash Page 300 Figure 197 Listof User Group Policies iei oerte teint bet ER enin 301 Figure 198 User Group Set
552. tton in the Global Policy Settings window to save the new policy 224 Managing Configuration with Policies e Management System XIRRUS System Information From the Configuration Policies node in the tree click on System Information to display the System Information window This window contains a list of all server policies currently available with tools to manage these policies System Information fol x Total 2 Columns Refresh Policy Name Host Name Location Modify Execute Delete Standard Array Settings standard South Forty EF 3 x bill_test billy Bill s Desk E b x Figure 157 List of System Policies The columns in this window show selected settings for the listed policies For information about changing the columns displayed see Selecting the Columns Shown in a Policy Window on page 220 Creating a New System Policy A system policy is created so that you can configure system and management options To create a new system policy click the Add Policy button in the System Policy window When the Add Policy window appears select Copy from a chosen Array recommended and choose a model Array or select Start from scratch as described in Adding a Policy on page 219 Click OK The System Information window is displayed with two areas 9 Policy Details Allows you to associate settings with a named policy System Settings Allows you to establish the basic system and administ
553. tware updates 518 539 SSID 207 WPR web page redirect 291 SSID list 289 SSID policy 287 301 Standby 248 starting client starting Web Start Client 29 station association reports 404 stations 203 323 blocking 325 inactivity time out 322 limits and interactions 307 reauthentication 322 searching 164 status bar 44 status message 44 stop bits 238 stopping the server 38 507 syslog event details 114 port usage 19 20 services policy 253 syslog events 112 syslog server 112 247 253 System 248 system log see syslog 253 T table rows 62 562 Index Management System tags Wi Fi 257 TCP port requirements 22 technical support 541 contact information 544 frequently asked questions 542 Telnet 230 testing loopback mode 323 threshold settings 332 335 tiling windows 55 TKIP 273 tool tips 44 toolbar 42 buttons 42 topography 129 topology 7 8 traffic aggregate Gigabit ports 245 bridge Gigabit ports 245 limits and interactions 307 load balance Gigabit ports 245 mirror Gigabit ports 245 transmit on both Gigabit ports 245 trap keepalive 233 phone home 233 tree 43 Tunnel Port 263 Tunnel Secret 263 tunnel server 263 tunnels see VTun 263 U UDP port requirements 22 update software from Array window 185 updates software installing on XA 3300 CC 17 upgrade about licensing 189 upgrade packs 7 upload to Array custom login 356 361 used by XMS server 19 20 user accounts policy 497 user
554. u may edit the values in the following columns Hostname Gig1 DHCP Gig1 IP Address Gig1 Mask Gig1 Gateway Location Simply click a table cell that you wish to modify A text box will be displayed where you may type the desired value Figure 284 You may change as many cells in as many rows as you wish There is no need to click the check boxes on modified rows Modifications will be highlighted on the page Click Finish when done The XMS Web Client 459 e XIRRUS Management System 1 2 3 Select Arrays Edit Network Settings View Results Previous Finish Cancel Click on a value below to edit an individual Array s settings or select multiple rows and click Bulk Edit to edit multiple Arrays at once Once you are done with your changes click Finish to apply your settings to the Arrays Bulk Edit Select Columns Export Showing 1 to 3 of 3 Rov Gigi MacAddress Serial Number Hostname Gig1 DHCP Gig1lP Address GigiMask Gig1 Gateway Location 00 0b 7e 16 00 52 XN0824081A2E2 255 255 0 0 200 200 4 1 XMS_SQA_VLAB 7 00 65 77e 16 00 52 XN082408142E2 we ee 255 255 0 0 200 200 131 XMS SQA VLAB 00 66 7e 16 00 52 XN0824081A2E2 XMS 5 0 V2 101 true 200 200 45 102 255 255 0 0 200 200 1 1 XMS SQA VLAB Figure 284 Editing the Network Settings Page 3 Step 3 View Results The web client will apply the changes you entered and display the success or failure of the configuration o
555. u must check this box and set up login parameters for uploading the custom WPR files to Arrays The upload uses Secure Channel Protocol SCP to authenticate access to each Array The Array will accept logins that match any of its Admin accounts with write privileges These accounts may be entered either directly on the Array or using Management Control policies Note that Arrays are shipped with the factory default login admin admin 9 Name Password Enter a name and password for access to an Array These values must match an admin account that is configured on the Array else the upload to the Array will fail Saving Your Web Page Redirect Policy When you have configured all file transfer and login settings for your custom WPR files click Apply in the Web Page Redirect window to save the new policy Managing Configuration with Policies 361 e XIRRUS Management System Configuration File Advanced From the Configuration gt Policies node in the tree click on Config File Advanced to display the Config File window This window contains a list of all config file policies currently available with tools to manage these policies Config File Advanced lol x Total 2 Add Policy Columns Refresh Policy Name Modify Execute Delete configfile Robin XN16 gt x configfile Robin XN16 1 Es gt x Figure 230 List of Config File Policies The columns in this window show selected settings for the listed policies For info
556. u must immediately notify us of any unauthorized use of the Mighwoods free Wifi or any other security breach We will give you an if address each time you access the Mighwoods Free Wifi and it may change You may not use Mighwoods Free Wifi for any other re incloding resells t of the Mighwoods Free Wifi Other examples of improper activi Modifying adapting translating or reverse engineering any portion of the Mighwoods Free Wir Copag JCKKUS All apa mar Figure 196 Customizing an Internal Login or Splash Page Saving Your SSID Policy When you have configured all of your SSID policy settings click on the Apply button in the SSID window to save the new policy 300 Managing Configuration with Policies e Management System XIRRUS User Groups From the Configuration Policies node in the tree click on User Group to display the User Group window This window contains a list of all User Group policies currently available with tools to manage these policies ax Total 1 Add Policy Columns Refresh Modify Execute Delete y Figure 197 List of User Group Policies The columns in this window show selected settings for the listed policies For information about changing the columns displayed see Selecting the Columns Shown in a Policy Window on page 220 Creating a New User Group Policy User groups allow administrators to assign specific network parameters to users through RADIUS privileges rat
557. udit Detecting Arrays Detected by Array Hostname 00 13 10 85 60 3e 00 13 10 85 60 3e XS_39 10 100 26 Detected devices Arrays that detected them Figure 84 Security Devices To navigate to the Devices window open the Security node on the tree and select Devices You may also open this window from the Security section of the Dashboard click the colored representation of any class of detected device and the Devices window will be displayed showing just the selected class of device Security Managing Intrusions 119 e XIRRUS Management System A convenient way to use the Devices window is to open it into a separate fri window using the Detach button on the main toolbar This allows you to keep it available on your desktop at all times even when you re working with other XMS windows or other applications See Basic Window Operations on page 53 The Devices window is automatically refreshed you do not have to refresh it explicitly The Devices window has two sections 9 Detected Devices a list of APs that have been detected 9 Detecting Arrays List a list of the Arrays that detected selected devices You may resize the sections of the Devices window Simply click and drag a horizontal border between sections to change their sizes Columns may be resized by dragging the header separators You may customize both sections of the Devices window by changing the col
558. uested URL is captured the user s browser is redirected to the splash or login page and then the browser is redirected either to your specified landing page if any or else back to the captured URL The landing page may be specified for User Groups as well Note that if you change an Array s management HTTPS port WPR uses that port too Managing Configuration with Policies 291 e XIRRUS Management System You may select among four different modes for use of the Web Page Redirect feature each displaying a different set of parameters that must be entered Internal Splash page This option displays a splash page instead of the first user requested URL The splash page files reside on the Array Note that XMS has a Web Page Redirect WPR policy that allows you to replace the default splash page on Arrays if you wish To set up use of a splash page set WPR Mode to Internal and set WPR Screen Type to Splash Additional fields will be displayed for configuring splash page usage Enter a value in the WPR Splash Timeout field to define how many seconds the splash screen is displayed before timing out or select Never to prevent the page from timing out automatically After the splash page the user is redirected to the captured URL If you want the user redirected to a specific landing page instead enter its address in WPR Landing Page URL You may customize this page with a logo and or background image and header and or foote
559. umns that are displayed and the order of display If you prefer to use a smaller browser window for XMS and there s not enough room for all the columns to display you can use this feature to select your preferred columns Each of the sections has a Select Table Columns button tjj in the upper right corner Click it to display the Table Column Chooser The Visible Columns list shows the columns that will be displayed Use the lt lt and gt gt buttons to select the columns to display Use the Top Bottom Up and Down buttons to arrange the columns left to right Click Close when done About Classifying Detected Devices Every Xirrus Wi Fi Array has a radio abg n 2 that when configured to be in monitor mode detects APs in its vicinity If you set blocking on for one of these rogue APs the Array s monitor radio sends out signals that will make it difficult for stations to associate to the rogue Devices start out as Unclassified when first detected and you may then classify them as Blocked Unknown Known or Approved 120 Security Managing Intrusions e Management System XIRRUS Classifying Rogue Devices via XMS XMS allows you to classify rogue devices as Blocked Unknown Known or Approved either individually or by using rules individually select a device from the Detected Devices list and click a button to specify its classification Enforced rules are pushed sent to all managed Arrays to become part of the Array
560. ur WDS links that are available for configuration on each Array Policy Details Policy Name 2429 WDS Client S Links Save Configuration v WDS Client Links WDS Link Status Maximum IAPs per link 1 Disable 3 ey 7 ee MEE epus 3 Disable 3 E lient i IAP 4 Disable 3 WDS Client Links Settings Ed v Figure 215 WDS Client Links Enter the WDS Policy Name and select an entry from the WDS Client Links list to configure Click the check box to the right of the list and the WDS Client Links Settings window will appear for the selected link Configure it as described below You may repeat the procedure to configure up to all four links Click Apply when done to save the policy WDS Client Links Settings Use this window to configure the target of a selected WDS link i e specify the far end Array and SSID WDS Client Links Settings WDS Link Status vI Maximum IAPs per ink 3 H Target IAP MAC address 00 0f 7d 00 1B 00 Bo Vs aoe Target SSID 95 Test vj Username 55 Username Password soosoo e VerifyPassword eeeeeee Figure 216 WDS Client Link Settings 344 Managing Configuration with Policies e Management System XIRRUS WDS Client Links Setting Details WDS Link The WDS Link will be grayed out since this is the link that you chose on the previous screen Status Enable or Disable the WDS Link Maximum IAPs per Link Choose the number of radios
561. ure 266 Settings Menus for Windows and Linux Servers If you have a Linux based Management Appliance the following additional choices are offered Use these pages to manage the appliance including setting the network address and system date time Status Shows the running status of the XMS server For details see Web Client Viewing XMS Server Status on page 506 Network Configures IP and other port settings on the Appliance For details see Web Client Network Settings on page 508 Date amp Time Configures system time on the Appliance For details see Web Client Date and Time Settings on page 509 Upgrade Upgrade the XMS server software For details see Web Client Performing Upgrades on page 521 The XMS Web Client 429 e XIRRUS Management System 9 Reset Reinitializes the XMS server and database For details see Web Client Resetting the XMS Server on page 522 430 The XMS Web Client e Management System XIRRUS Dashboard The web client Dashboard gives you an at a glance overview of all system status and activity Administrators can quickly assess system health and overall system usage as well as viewing alarm status Stations Stations Rogue Overview Array and Radio Status Recent Alarms e Monitor A Configure wots ate n Array Status Radio Status GQ un 0 Node failure Thus prob Array not reachable Up Down Total Up Do
562. ure 57 on page 79 shows an example of the Discovery window after completion Discovering the Network 85 e XIRRUS Management System Deleting a Network If you need to delete an existing network from the Search Networks list select the network you want to delete then click on the Delete button underneath the list A pop up confirmation message is displayed requesting you to confirm that you want to delete the selected network Note that discovery will not remove that network s devices from its device list if the network is deleted The devices remain until you delete them manually In the pop up confirmation message click on the Yes button to delete the selected network or click on the No button to abort the request The deleted network will be removed from the list of networks for discovery Select the Network Search Networks 255 255 255 128 A Delete Network Figure 65 Deleting a Network 86 Discovering the Network Management System XIRRUS Adding an Array or PoGE Injector Before you can add an Array or injector to the XMS list of manageable devices the device must have SNMP enabled and its username password or community string must match one of the community names configured for discovery see Adding or Deleting SNMPv2 and SNMPv3 Entries on page 81 Unless SNMP is enabled on a device XMS cannot identify it To enable SNMP on a device and check its username password or community string refe
563. us 45 rogue APs blocking reports 422 rogue devices classifying by manufacturer 125 rogues 327 clocking 124 runtime 33 34 S save maps 145 scalability 9 scale setting for map 146 schedule discovery 74 scheduling the discovery process 74 searching 64 in devices window 164 in resource windows 164 Secure Channel Protocol SCP 356 361 security 270 272 security management 9 security policy 270 security reports 419 security settings 272 security windows 50 self monitoring Index 561 options 323 serial interface 237 server database repairing 533 login 531 port assignments 531 shut down 531 server console 27 524 server policy 247 server VI un see VTun 263 service XMS server as Windows service 523 severity levels 110 113 Sharp cells 326 shell Array login entering 80 short retry limit 321 shutting down the unit 38 507 shutting down the XM 3300 507 shutting down XMS server 38 SNMP 87 discovery 81 port usage 19 20 v281 v3 81 SNMP server 232 234 247 SNMP trap shown on Alarm window 107 SNMPv3 NTP usage required 68 509 543 time sync with Arrays 68 509 543 software update Array image from Array window 185 software update SSH port 518 539 software updates Management System installing on XA 3300 CC 17 software version running on the Array 173 sorting tables 60 client level 60 server level 60 splash page web page redirect customize 299 SSH 230 port for sof
564. usion Detection is set to Standard on an Array configured on this window below self monitoring is performed if Radio Assurance Mode is not disabled IAP abg2 abgn2 performs loopback tests on the Array s other radios Tests include sending a probe to another radio and checking for a response and verifying that beacons are received from the other radio For more information please see Array Monitor and Loopback Testing Capabilities in Appendix C of the Wi Fi Array User s Guide The loopback mode scans and sends out probe requests on each channel in turn It listens for all probe responses and beacons These tests are performed continuously 24 7 If no beacons or probe responses are Managing Configuration with Policies 323 e XIRRUS Management System observed from a radio for a predetermined period loopback mode will take action according to the preference that you have specified The following loopback mode options may be configured e Disabled Disable IAP loopback tests no self monitoring occurs Loopback tests are disabled by default Failure alerts only The Array will issue alerts in the Syslog but will not initiate repairs or reboots Failure alerts amp repairs but no reboots The Array will issue alerts and perform resets of one or all of the radios if needed Failure alerts amp repairs amp reboots if needed The Array will issue alerts perform resets and schedule reboots if needed
565. va client and The XMS Web Client and from a special tool provided with the server for Windows based systems only the Xirrus Server Management Tool XSMT The XMS Java client has tools for managing user accounts changing the operating country broadcasting a message to XMS users and managing the database The XMS web client and XSMT for Windows based servers have tools for XMS server administration both include advanced management operations The following sections describe simple administration tasks that are available from the XMS Java client Country of Operation on page 496 User Accounts on page 497 Backup Manager on page 499 9 Broadcast Message on page 500 An overview of managing the server is given in the following sections e About Managing the XMS Server on page 501 About the XMS Database on page 501 Details of managing a Linux based server are discussed in e Managing XMS on Linux based Management Appliances on page 502 Details of managing a Windows based server are discussed in 9 Managing XMS on Windows based Systems on page 523 XMS Administration 495 e XIRRUS Management System Country of Operation The channels that are available for selection for an IAP will differ depending on the country in which Arrays are used To change the country of operation select Admin Options from the Java client s menu bar Select the desired Country from the drop down list and c
566. ver Devices Window eren ennemi 72 Leure49 Network Discovery Schedules 2 npn etes E 74 Ligureo0 Viewing the Discovery Schedule aimi dieere ore rhe iaa 75 Figure51 Scheduling the Discovery Process Hourly sss 76 Figure 52 Scheduling the Discovery Process Daily es 76 Figure 53 Scheduling the Discovery Process Monthly ss Th Figure 54 Adding a NetWork ierit teretes rentia Pn AARAA LAESA RhA 78 Fig une D5 NetWork Adde disamina E o E EERE irs 78 Fig re 56 Network Discovery im Progress ome a ee Reds 79 Figure 57 Network Discovery Finished once retenta rtt ittireei tein 79 Figure 58 Array Shell Authentication ance trente ene reg 80 Figure 59 Adding an Array Shell Logiri esot ie artt ettet 80 Figure 60 SNMP v2 and SNMP v3 Configuration susieti 81 Fisureol Adding an SNMPVS USername niic iip ere entere 82 Figure 62 Adding an SNMPv2 Community Name sse 83 Figure 63 Modifying an Existing Network tipo tenerte 84 Figure 64 Disabling Discovery on a Network sss 84 Figure 65 Deleting a NetWork inr nnne eter rre koe enn 86 Lieureb0 JAddumgaDeviee scoontade se T TRI HIRED 87 xiv List of Figures e Management System XIRRUS Leure67 Refreshing a DeVICe onensemnpeo medo ORC ER Guat 88 Ligiire 68 DashbOatdisesniae usan ancumamemmtine died hurt eres 91 Figure 69 Dashboard Status rmm tpe test eet ined 94 Eigure70
567. very similar to the Arrays Window on page 166 Note that the Arrays Window offers different capabilities such as filtering to display a subset or group of Arrays searching for Arrays viewing performance and more management operations For each Array the following information is shown by default The current Status of each Array The Array Host Name The Gig1 IP Address of the Array The Location of the Array if this information was configured on the Array The Model of the Array The number of Stations associated to this Array The Software Version currently running on the Array 444 The XMS Web Client e Management System XIRRUS The Arrays Toolbar The Arrays toolbar allows you to gather diagnostic information for Array management This function is only available on this page it is not offered on the Arrays Window The toolbar also allows you to reboot selected Arrays or delete Arrays from the XMS database To perform configuration on multiple Arrays at one time please see Network Settings on page 458 and Radio Settings on page 466 eA Monitor A configur Reboot Pull Diagnostic Logs Delete Xirrus Support Showing 1 to 25 of 816 r Hostname Stations IP Address Location p e 1XR480411014422 0 10 100 54 55 Ali s Cube p e 1XR480411014422 0 10 100 54 55 Ali s Cube Figure 276 The Array Page Toolbar Select one or more Arrays in the list by clicking their checkboxes in the first colu
568. vices Window on page 119 Note that the The Devices Window offers additional capabilities such as filtering to display only rogues with a particular classification or only those that have been detected by a group of Arrays searching classification operations and creating classification rules This list shows information about each rogue and the Array which detected it For each rogue the following information is shown by default 9 The rogue s Classification Unclassified Approved Known Blocked or Unknown See Detected Devices on page 123 for an explanation of the categories The rogue s SSID The rogue s BSSID MAC address The Channel being used for the connection The Band 5 GHz or 2 4 GHz being used for the connection The Manufacturer of the rogue device The current RSSI signal strength of the rogue s signal as measured by the Array that detected it The host name of the Array that detected the rogue The Type of the rogue s wireless network Ad Hoc or Infrastructure 452 The XMS Web Client e Management System XIRRUS Alarms The web client Alarms page lists the alarms received by XMS All alarm levels are displayed Critical Major Minor Warning and Clear This is a display only page but values may be exported Select Columns Export Showing 11 to 20 of 26 Time Severity Source Mac IP Address Hostname Description Oct 10 2010 11 13 47 PM Clear 00 0f 7d 00 03 1f 10 100 54 111 XS083408
569. w can be manipulated independently of the client For more information about windows and how you can use them to best suit your needs see Basic Window Operations on page 53 m Main Viewing Area Figure 32 Main Viewing Area 46 The XMS Java Client Interface e Management System XIRRUS Monitoring Windows These monitoring windows are generated by clicking on items that reside under the parent Monitoring function in the Tree with the selected child window s being displayed in the Main Viewing Area of the client interface Monitoring windows include 9 Dashboard 9 Events 9 Alarms NOTE Access the Syslog Events window from the menu by selecting Tools Syslog Dashboard The dashboard is the main user interface of XMS designed to give you an overview of all aspects of the functioning of your Array network on one window The Dashboard is discussed in detail in Using the Dashboard on page 91 Other Monitoring Windows Figure 33 shows an example of the Events window detached from the client interface for clarity From this window you can choose to view data about all network events displayed in the list or select specific events and view the data associated with the selected event only The data available to you in any monitoring window is determined by which window in the Tree you open Events iol xj Edt View E Events Total B3 Displaying 1 tof 33 PageLength s0 0 4 pil Status
570. w to see the list of reports pages on the left 9 My Reports on page 373 The web client s Reports button opens to this page listing the reports you have already created and allowing you to view or run these reports 9 New Report on page 378 This page lists all the types of reports available in XMS Click on a report and enter the desired selection criteria You may then save the report and run it now or schedule it for later Customize on page 387 Click this link to customize the appearance of reports by changing the logo at the top of the report The XMS Web Client 427 e XIRRUS Management System About Settings Pages These pages are used to change XMS server settings such as polling rate and backup schedules In addition if you are using a Linux based Xirrus Management Appliance see About the XM 3320 XM 3340 and XM 3360 on page 14 use these pages to configure the appliance including setting the network address and system date and time All of these server administration functions are discussed in detail in About Managing the XMS Server on page 501 Settings Mode 1 re A Help Logout YZ Monitor BX configure 9 Reports s jgot nge Email Settings These settings are used by XMS when emailing items such as reports SMTP Server Address mail xyzcorp com Polling SMTP Server Port 25 SSH Server User smith Backup Password eeeeeeeees ServerLogs Encryption None z XMS Li
571. wing procedures to review the audit details Right click on an audit item in the table and choose Details from the pull down list 9 Select an audit item in the table then go to the Menu Bar and choose View Details Select an item G amp Audit Edit View Audit Total 32 Displaying 4 to 4p PageLensth 10 v A4 ODDf7d00 44 83 Jul 24 2007 02 83 44 PM 00 0f 70 00 44 83 Jul 24 2007 09 12 48 AM 4 Attribute Audit Details 00 0f 70 00 44 83 Jul 24 2007 09 10 08 AM sec 00 0f 70 00 44 83 Jul 24 2007 09 09 14 AM 4 sec 00 0f 74 00 44 83 Jul 24 2007 08 47 01 AM 4 Device Name 00 0f 7d 00 44 83 sec D0 0f 7d 00 44 83 Jul 24 2007 08 44 28 AM sec D0 0f 7d 00 44 83 Jul 24 2007 08 40 55 AM Array Config Q0 0f 7d 00 44 83 Jul 24 2007 08 08 28 AM Array Config 00 0f 7d 00 44 83 Jul 24 2007 08 08 25 AM A Attribute Name Finish Time Retries Status Array Config 00 0f 7d 00 44 83 Jul 23 2007 06 33 58 PM 4 Contact telephon ba 24 2007 02 0 0 success Contact email ad boul 24 2007 02 0 lo success l Contact name Jul 24 2007 02 0 Array location pa 24 2007 02 0 0 Ali s Cube success Array hostname m 24 2007 02 0 0 XS 3500 AF success Task Start Time 3u 24 2007 02 03 44 PM success Save running con pa 24 2007 02 0 0 save success Audit Details Close Figure 236 Viewing the Audit
572. wireless network e BSS AD Hoc only only consider auto blocking rogue APs if they belong to an ad hoc wireless network a network of client devices without a controlling Access Point also called an Independent Basic Service Set IBSS e ESS Infrastructure only only consider auto blocking rogue APs if they are in infrastructure mode rather than ad hoc mode 9 Fast Roaming Mode D RF xl 9 Fast Roaming Mode C off C Broadcast Tunneled Fast Roaming Layer C 2and3 2ony 802 11a 9 Share Roaming Info With C all InRange C Target Only Target Type MACAddress IP Address Host Name 802 11b g LE P 00 0f 7d 00 00 00 100 10 10 10 Host Name 00 0f 74 00 00 00 0 0 0 0 SS Array P 00 0f 74 00 00 00 10 10 10 20 Sogan D Fast Roaming Targets x a Fast Roaming Targ T Target Type C mac CiP HostName LED x MAC Addi 00 0f 7d 00 00 00 9 ress IAP Settings IP Address 0 0 C Gui Host Name array West Figure 208 Fast Roaming Settings This feature utilizes the Xirrus Roaming Protocol XRP ensuring fast and seamless roaming capabilities between IAPs or Arrays at Layer 2 and Layer 3 while maintaining security Fast roaming eliminates long delays for re authentication thus supporting time sensitive applications such as Voice over Wi Fi see Understanding Fast Roaming in the Wi Fi Array User s Guide for a discussion of this feature XRP uses a discovery process to identify other Xirru
573. wn Disabled Node failure This prob 811 5 816 6424 22 126 XPS down Trap received stationa Node failure Thus prob Station Count Rogue Overview Unctassified 18 16 900 gt 10 990 Ad hoc 1 a Online On my channels 4 20075 Spoofing my SSIDs 0 Station Connection Metrics 902 11n GH2 902 110 2 4Gr2 902 119 902 118 902 11b ABS Ove 3206 Stations Stabons Stations Stabons Stabons Apoled Raco 1605 9636 10439 0 0 0 ze 58dB 55dB RSSI RSSI RSSI sco bniksys 803 1ouu 15dB Ail 0dB 0dB OdB Connection Connection Connecton Connection Connection 238Mbps 130Mbps OMbps OMbps OMbps Figure 267 Dashboard The following sections describe the use of the Dashboard e Dashboard Overview on page 432 9 About Dashboard Data on page 432 The XMS Web Client 431 e XIRRUS Management System Array and Radio Status on page 433 Recent Alarms on page 435 Stations on page 436 Rogue Overview on page 439 Dashboard Overview When you start the web client the page starts with the Dashboard displayed To navigate to it when you have another page displayed simply click the Monitor button at the top of the page and then click Dashboard on the left as indicated in Figure 262 on page 425 You may rearrange the Dashboard to your liking Simply click the title bar of one of the sections and drag and drop it to the desired location Click the Restore Defaults link on the upper ri
574. wn XMS related processes in an orderly manner before rebooting Rebooting and restarting will take about two minutes on a new Management Appliance As XMS is used and the database grows startup integrity checks will take longer For shutdown see Shutting Down the XMS Server on page 38 26 Getting Started with XMS e Management System XIRRUS Managing XMS on Windows based Servers The XMS server is started automatically when the XM 3300 is restarted Alternatively you may start the XMS server using the Xirrus Server Management Tool XSMT XSMT is used to start stop or view the status of the server To start XSMT use the Windows Start button All Programs Xirrus Xirrus Management System XA 3300 CC The Server Console window is displayed and then the XSMT window When the Start button at the bottom of the XMS Server Manager tab of XSMT is enabled click it to start the server During the server initialization process the XSMT Logs panel displays high level progress messages and the Server Console displays detailed messages XSMT Console Figure 15 XSMT Window Showing Typical Running Status During the installation process there are options to have XSMT start the XMS server automatically or to wait for the administrator to explicitly start it If all four Required Services indicators do not turn green you may start the XMS server by clicking the Start button on the lower left when XSMT enables it Get
575. y IAPs with the selected status in the IAPs list This section is similar to Array Status See Array Status on page 167 for details All IAP Throughput a chart of IAP throughput You may zoom in on a graph region by clicking and dragging the mouse over it double click anywhere to revert to the full chart The time interval shown is determined by Performance chart in the Dashboard see Performance on page 98 This chart is similar to Array Throughput and data is included only for IAPs shown in the IAP list See Array Throughput on page 168 for details IAP List A list of IAPs which allows you to perform a number of operations on a selected IAP TAP List The list in the bottom half of the IAPs window contains information about each IAP and the Array to which it belongs Only IAPs on Arrays that belong to the Array group selected on the Dashboard window are included You may customize the columns shown in this list see Choosing the Columns for Display on page 163 By default information is shown about the IAP s state the number of active stations associated to the IAP and its throughput You may right click on an IAP to display a menu that allows you to perform the following operations Web Management opens the Array s Web Management Interface See Connecting to an IAP s Array on page 200 Configure Opens an IAP Settings window to allow you to apply configuration changes to the IAP See
576. y Shell Authentication Figure 58 Array Shell Authentication To create a new login click the Add button The Add Authentication dialog appears Add Authentication xj Enter Array Shell Authentication Username westase ccu ee Figure 59 Adding an Array Shell Login Enter an Array s Username and Password and click Apply The new entry will appear in the Array Shell Authentication list You may use the Delete button to remove a selected entry if necessary 80 Discovering the Network e Management System XIRRUS These authentication entries are not used by the discovery process itself but are managed on this window for convenience When XMS needs to log in to an Array s shell it tries entries from the list until it finds one that works Then it will remember to use this login for this Array On future login attempts to the same Array it will try the remembered login first Adding or Deleting SNMPv2 and SNMPv3 Entries NOTE For a device to successfully Phone Home announce its presence to XMS or be discovered SNMPv2 or SNMPv3 must be enabled on the device For SNMPv2 the read write community string i e community name must match one of the strings listed in the Discovery window For SNMPv3 the Array s read write user name and passwords must match one of the entries listed in the Discovery window The XMS discovery process searches networks using both SNMPv2 and SNMPv3 Since SNMPv3 o
577. y the selected Array Date Time Include only this time range Schedule Run the report at this time See Schedule on page 382 Email Report To After running email the report See Email Report To on page 382 Discrete Array to Station Association This table presents a list of all stations associated to the selected Arrays based on the time period you specify The results shown in this window are organized by the following column headers e Array Host Name The host name of the Array that the station is associated with e Array MAC Address The MAC address of the Array that the station is associated with Station Hostname This column shows the name for each client station listed in the report 9 Station MAC Address This is the station s MAC address Managing Reports 405 e XIRRUS Management System 9 Station IP Address The IP address assigned to the station Download Report pdf xls csv Email Report e XIRRUS XMS Reports Station Association Time Span Hour Period 5 Minutes Wednesday 05 04 2011 09 10 PDT to Wednesday 05 04 2011 10 10 PDT Report generated on 05 04 2011 at 10 40 59 PDT Discrete Array to Station Association Row Count 9 ocstion Lobby 0f7d 00 2 82 c c5 37 3b 36 f 10 100 46 111 59 48 29 48 4f 0 100 46 114 ocation Lobby ocation Suppo o KIRRUS 5103 c81 12 05 68 6d ocation Support 0f 7d 00 76 empty 87 06 57 35 e8 10 100 46 112 ksosotosooEse

XMS User Manual - Moonblink Communications

Contents

Download Pdf Manuals

Related Search

Related Contents