Dell PowerConnect W-Airwave 7.6 Deployment Guide
Contents
1. 10 169 242 254 2 mins Good 2 mins Vertyng The golden template configuration from the first Instant network is used to provision the second Instant network in the new folder When provisioning is complete the status of the device will change from Verifying to Good Changing the Mode to Monitor Only for New Instant Devices A best practice for using Instant in AirWave is to change the mode for new devices to Monitor Only This ensures that the configuration for the new devices does not get unintentionally overwritten and is a consistent behavior and practice throughout AirWave l Navigate to AP Devices gt List page Filter the devices by the folder name using the Folder drop down menu on the top portion of the page Select the Modify Devices wrench icon and select all devices Select the Monitor Only radio button J A ON N Click the Management Mode button This opens the Confirm Changes page You can apply the changes now or schedule the change to be applied later Figure 7 Changing the mode to Monitor Only wof4aPsDevces Page lw of 1 Reset Sie port Device a Statusy Detaled Status w Upstream Upstream Status Notes APs C ents Usage Uptime Configurat J S 68 07 108204243 8d Down Virtual Controler 6 Down 0 Good 3 68 7 CB C4 47Se Up ox 0 6hes39mns amp Good A A instaet c4 43 80 Down Virtual Controler has not checked in for more than 5 minutes 1 0 Good A instat tts SE Up OK 1 0 hes 39 mns2. Monitor Only FINT Upgrades Manage Read When the second Instant contacts AirWave using the DHCP server options as described previously and that second Instant device has the same Shared key it shows up on AirWave as shown below Because the devices are in Manage Read Write mode there is no need for manual intervention to provision these new Instant networks The new networks will automatically be placed into the same group if this is the desired configuration but a new folder will be created to contain these devices NOTE Keep Dell PowerConnect W Instant devices in Monitor Only mode to audit the device and to ensure that configurations are not automatically pushed This practice is consistent with the rest of AirWave Dell PowerConnect W Instant in W AirWave 7 6 Deployment Guide Figure 6 Adding an additional Instant device to AirWave Folder Top 0 4 Up Devices gt TME Instant 0 4 gt Store2 2 Expand folders to show al APs Devices Goto folder Store2 2 m Onipanu paed ve t ast Cg Q Total Devices 2 Msmatched 0 Cents Usage VPN Se Clients for folder Store2 Last 2 hours ii Usage fee folder Store2 Last 2 hours k Show All Manomum Average Show Al Maximum Average Gu 0 t B g sobs Tce coumms Export Coy Upstream IP Address Motes APs Uptime Configuration a w Groupy Controler v Locationy SSID wiit RadioCh y istRadioTXPowerw Ist Radio Anten Es TME Instant instant C447 5E 23 dBm
3. NOTE All changes will be lost if you do not click Save The Confirm Changes page opens displaying your recent edits At this point you can apply changes immediately you can schedule to apply the changes at a later time or you can cancel Dell PowerConnect W Instant in W AirWave 7 6 Deployment Guide Figure 12 Confirm Changes page Confirm changes Controller Instant C 87 54 Extra Device Commands 1 empty string wlan access rule Ottt rule any any match any any any permit wlan ssid profile Ottt type employee essid Ottt wpa passphrase 8d072cdeaSbcecleaae3cb597975951 fbd7d7124120e3217 opmode wpa2 psk aes max authentication failures 0 rf band all captive portal disable dtim period 1 inactiity timeout 1000 broadcast fitter none dmo channetutilzation threshold 90 Name Instant C0 87 54 Store 00001 Timezone none 00 00 gt Pacific Time UTC 08 Name Instant CF 93 D2 Store 00002 Timezone none 0000 gt Pacific Time UTC 08 Scheduling Options Specify numeric dates with optional 24 hour times like 7 4 2003 or 2003 07 04 for July 4th 2003 or 7 4 2003 13 00 for July 4th 2003 at 1 00 PM or specify relative times ike tomorrow at noon or next tuesday at 4am Other input formats may be accepted Current Local Time November 14 2012 6 21 am CST Desired Start Date Time Selecting Cancel returns you to the Variable Edit page where your latest edits will still be visible Click Cancel again to return to th
4. NOTE Be sure that the default configuration is validated and has been pre tested in a non production environment prior to applying it to a production network Any changes that are made to this configuration will follow the same process each time and will be applied to other Instant networks Dell PowerConnect W Instant in W AirWave 7 6 Deployment Guide 15 Figure 16 The nstant template editor version 6 1 3 0 3 0 90 virtual controller country IN virtual controller key tquid if ip address virtual controller ip tip address tendift if organizations organization torganizations tendifs ams ip manager ip address ams key tpassword server cert _checksum ca_cert_checksum cert psk bid 3 name thostnamet clock timezone none 00 00 rf band all m allow new aps tallowed aps arm v wide bands 5ghz If you want to add additional variables to the template the Allowed Variables section just to the right of the Instant template editor shows you the set of variables that can be added Figure 17 Allowed variables The following variables may be used in the template The Value of each variable is configured on the APs Devices Manage page for each device in the group Each variable must be surrounded by percent signs ostname s The oni statements must be terminated by senes and cannot be nested Available Variables allowed aps guid ams identity hostname ca_cert checksum ip_address cert _psk ip addr
5. Organization specified the first time they communicate with AirWave then they will be placed in the Folder Group drop box values you have selected Adding the First Instant Device to AirWave After the first Instant device receives the AirWave server information from the DHCP server or after AirWave server information is manually configured the Instant device appear as a new device in AirWave As shown this virtual controller 1s added in Monitor Only mode Dell PowerConnect W Instant in W AirWave 7 6 Deployment Guide Figure 3 A new Instant device in AirWave APS A fatten Devices Tau 0 down 0 Miematched Roque 46 Ciente IA Alerts 0 Home Groups Fe Clients Reports System Device Setup AMP Setup RAPIDS VisualkF titers Chome coum Expert Coy Instank 04 4 3 80 uba Instant Virtual Controler 1 13 2012 45 AM LAPaiedces Page iw of Lira ters Shared Secret arubal 3 Select Al eoelect Al Vana igmanie Drangi Group Access Points Folder Top ka Monto Only Manage Read Write Ad igoe Delete 1 Click Add to add the device A Group and Folder do not have to be selected The Instant device will automatically get added to the new group that was created 2 Select Apply Changes Now to add the Instant device to the group Resolving Mismatches The new device will appear in AirWave as two devices the first is the Virtual Controller for that Instant network and the s
6. all inherit the necessary configuration information from the Virtual Controller Dell PowerConnect W Instant continually monitors the network to determine the AP that should function as the Virtual Controller at any time and the Virtual Controller will move from IAP to IAP as necessary without impacting network performance The Virtual Controller technology in Dell PowerConnect W Instant is capable of IAP auto discovery 802 1X authentication role and device based policy enforcement rogue detection and Adaptive Radio Management ARM Using Dell PowerConnect W Instant with AirWave AirWave can be used to provision and manage a multi site deployment of Instant networks For example if you have P 8 prey P y 100 retail offices that require Instant to provide WLAN connectivity at each office AirWave can be used to q P y provision all the 100 offices from a central site and also give the administrator the ability to monitor these geographically dispersed Instant networks using an AirWave server depending on the scalability recommendations for AirWave With a distributed deployment where multiple locations each have a Dell PowerConnect W Instant Virtual Controller and IAPs AirWave serves as a centralized management console AirWave provides all functionality for 0511236 01 Jan 2013 normal WLAN deployments including long term trend reporting PCI compliance configuration auditing role based administration location services RF visua
7. amp Good twot4APs Devces Page i wof lt Reset fiie Change properties of selected devices AMP Group Foller Select Gap lt and or Select Foder Move Aruba AP Group Anba AP Gop Management Levet lanage Read Write Management Mode Phoned Mruwntine Mode Frahle Nichia Frvatwe Fie aie AirWave Pages with Instant Specific Features The following is a summary of AirWave pages affected by Dell PowerConnect W Instant support APs Devices gt New When a Dell PowerConnect W Instant device appears in the APs Devices gt New page an admin user can mouse over the value on the Type column to display the device s Shared Secret with AirWave APs Devices gt List The Virtual Controller is listed as an additional device even though it is part of the existing set of IAPs You can identify the IAP acting as the Virtual Controller by their identical LAN MAC addresses Dell PowerConnect W Instant in W AirWave 7 6 Deployment Guide Clients gt Client Detail Once IAPs are serving clients the APs can use user agent strings to extract operating systems and device descriptions of its clients and then populate the Device Description and Device OS fields in Clients gt Client Detail APs Devices gt Audit Dell PowerConnect W Instant configuration fetching can be performed in APs Devices gt Audit The running configuration is stored on the IAP and verified by the template APs Devices gt Monitor gt Radio Statistics The Radio Statist
8. logs in to the first AP s web interface via the Dell PowerConnect W Instant configuration SSID and navigates to Settings gt AirWave The installer then enters the correct Organization String the AirWave IP address and the Shared Secret key as shown in Figure Perform the following steps to set up AirWave in Instant l Log into your IAP 2 Click on either the Set up Now at the bottom of the UI or on the Settings tab in the top nght comer This opens the Settings menu Figure 1 Dell PowerConnect W Instant gt Settings page Settings Help General Admin RTLS SNMP OpenDNS Uplink Enterprise Domains Walled Garden Syslog L3 Mobility Local Authentication Internal Username admin Password eeece Retype RET AirWave Organization AirWave IP AirWave backup IP Shared key Retype Hide advanced options OK Cancel 3 Locate the AirWave section on the Admin tab 4 Enter the Organization string the AirWave IP address and the Shared key 5 Click OK when you are finished Setting up Dell PowerConnect W Instant Automatically Instant can be configured automatically using DHCP options 60 and 43 The Dell PowerConnect W Instant Virtual Controller initiates DHCP request with the DHCP option 60 string DellPowerConnect W Instant If the DHCP server is configured to recognize this option 60 string it will return an option 43 string containing the organization AirW
9. the network For each remote location an on site installer is required to physically mount the IAPs connect to the Dell PowerConnect W Instant SSID configure the WLAN configure the names of the IAPs and enter the information in the first IAP s user interface that will enable communication with AirWave An AirWave administrator sends an Organization String and Shared Secret key along with AirWave s IP address to the on site installer The AirWave admin later validates the first Virtual Controller s Organization String and its Dell PowerConnect W Instant in W AirWave 7 6 Deployment Guide Ka Dell PowerConnect W Instant in W AirWave 7 6 Deployment Guide Shared Secret when it appears in the APs Devices gt New list The administrator also enables user roles to administer the Dell PowerConnect W Instant systems makes any other changes in AirWave as necessary NOTE The first Instant network that is added to AirWave includes the golden configuration that is used as a template to provision other Instant networks at other locations as the locations are brought online It is recommended that the golden configuration is validated and pre tested in a non production environment prior to applying it to a production network Users have the option to add additional devices into managed mode automatically by setting the Automatically Authorized Virtual Controller Mode option to Manage Read Write on the AMP Setup gt General page Re
10. Dell PowerConnect W Instant in W AirWave 7 6 Deployment Guide About this Document This document describes the Dell PowerConnect W Instant access point and Virtual Controller system as well as the procedure to integrate this system with W AirWave This document contains the following points Overview of Dell PowerConnect W Instant on page 1 Using Dell PowerConnect W Instant with AirWave on page Setting up Dell PowerConnect W Instant on page 2 Remaining Manual Admin Tasks in AirWave on page 5 Adding Additional Instant APs to AirWave on page 7 Changing the Mode to Monitor Only for New Instant Devices on page 8 AirWave Pages with Instant Specitic Features on page Other Available Features on page 9 Optional Tasks on page 14 Best Practices on page 16 Known Issues with the Dell PowerConnect W Instant Integration with AirWave on page 17 Overview of Dell PowerConnect W Instant Dell PowerConnect W Instant is a system of access points per Layer 2 subnet Dell PowerConnect W Instant IAPs are controlled by a single IAP that serves a dual role as a primary Virtual Controller eliminating the need for dedicated controller hardware This system can be deployed through a simplified setup process appropriate for smaller organizations or for multiple geographically dispersed locations without an on site administrator Only the first AP Virtual Controller you add to the network must be configured the subsequent IAPs will
11. ave IP and pre shared key Organization is optional The three pieces of information should be specified using comma separators without any spaces For example option 43 text TME Instant 10 169 240 8 del11123 The AirWave information in the option 43 will be used to connect to AirWave if AirWave is not otherwise configured manually on the Virtual Controller The organization string can be hierarchical and define sub folders for different stores This supports an architecture that is required to manage multiple branches or stores where individual stores can be managed by local administrators DHCP server options Dell PowerConnect W Instant in W AirWave 7 6 Deployment Guide ip dhcp pool ITAP Pool default router 10 169 241 1 option 60 text DellInstantAP option 43 text Acme Storel 10 169 240 8 dell123 network 10 169 241 0 255 255 255 0 authoritative ip dhcp pool IAP Pool2 default router 110 169 2422 1 option 60 text DellInstantAP option 43 text Acme StoreZ 10 169 240 8 del11 23 network 10 169 242 0 255 255 255 0 authoritative In the example configuration shown above the following group and folder structure is created on AirWave A group called Acme is created e A top level folder called Acme is created e Two sub folders called Storel and Store2 are created which will contain the IAPs Remaining Manual Admin Tasks in AirWave Once the setup is complete what remains is to verify the
12. croll bar if necessary to locate the variable you want to edit and type directly into that field To add the same custom variable to all virtual controllers select the check box beside the VCs you want to edit select the variable from the drop down menu at the top of the edit page enter the variable information and then click Apply NOTE Your template must support or contain the commands and or configuration that you add using the custom variables in order for any changes to be pushed to your devices In the image below a new WLAN config is added to Store 00001 with the following configuration wlan access rule Ottt rule any any match any any any permit wlan ssid profile Ottt type employee essid Ottt wpa passphrase 8d072cdea5bcecleaae3cb597975951 fbd7d7124120e3217 opmode wpa2 psk aes max authentication failures 0 tri band all captive portal disable dtim period 1 inactivity timeout 1000 broadcast filter none aomo channel utilization threshold 90 Figure 11 Entering a custom variable cropped List clock_timezone Pacific Time UTC 08 Apply Please select one or more VCs to apply this setting 1 2 w of 2 Virtual Controllers Page 1 wofi Choose columns hostname a clock_timezone ip_address custom_variable_1 Z Store 0001 Pacific Time UTC 08 v wlan access rule Ottt rule any x any match A V Store 0002 Pacific Time UTC 08 Applying Changes Select Save when you are done updating variables
13. d the like This enables quick remote setup without having to modify firewall rules Virtual controller listed as separate device The Virtual Controller is listed as an additional device even though it is part of the existing set of IAPs If you have 10 physical IAPs AirWave will list 10 Dell PowerConnect W Instant IAPs and one Dell PowerConnect W Instant Virtual Controller You can identify the IAP acting as the Virtual Controller by their identical LAN MAC addresses in APs Devices gt List pages Device Inventory reports and any other AirWave pages that list your network devices NOTE A device that is added as a virtual controller does not count as a license for AirWave Refer to the Dell PowerConnect W Instant data sheet for full operational and regulatory specifications hardware capabilities antenna plots and radio details Setting up Dell PowerConnect W Instant You can set up Dell PowerConnect W Instant in one of three ways Manually See Setting up Dell PowerConnect W Instant Manually on page 3 Automatically through DHCP See Setting up Dell PowerConnect W Instant Automatically on page 4 Using Aruba Activate Refer to the documentation that accompanies Aruba Activate for detailed information The automatic setup is most suited for a multi site Instant deployment Both options are summarized here but refer to the Dell PowerConnect W Instant documentation for more information on setting up the hardware and configuring
14. e the APs Devices gt Manage page for the VC provides a link to quickly access the Template Known Issues with the Dell PowerConnect W Instant Integration with AirWave If the Organization String configured on the Dell PowerConnect W Instant device is different than what is statically written in the template AirWave will overwrite the configured Organization String to match the template The Dell PowerConnect W Instant primary device sends an update message to AirWave every minute If the send fails then the device will continue to send a state message every two seconds If the send fails 25 times then Instant will determine that AirWave is down Dell PowerConnect W Instant in W AirWave 7 6 Deployment Guide 18 Copyright 2013 Aruba Networks Inc Aruba Networks trademarks include nirwave _ Aruba Networks Aruba Wire less Networks the registered Aruba the Mobile Edge Company logo and Aruba Mobility Management System Dell the DELL logo and PowerConnect are trademarks of Dell Inc All nghts reserved Specifications in this manual are subject to change without notice Originated in the USA All other trademarks are the property of their respective owners Open Source Code Certain Aruba products include Open Source software code developed by third parties including software code subject to the GNU General Public License GPL GNU Lesser General Public License LGPL or other Open Source Licenses Includ
15. e APs Devices gt List page with no changes saved or applied Monitoring Features Use the APs Devices gt Monitor page to monitor your Instant devices AirWave provides you with detailed information for your virtual controller APs and radios This information includes spectrum interferers rogue clients and channel utilization The image below shows an example of radio statistics Figure 13 Monitoring Radios AP Monitoring Radio Statistics Monitoring 802 11abgn radio for AP d8 c7 c8 c4 21 9f Run a command sues Summary Issue Description Interfering Devices Detected Video Device Fixed Freq Clients Usage Sok Noise Power MAC Phy Utilization Clients Usage Channel Power MAC Phy 0 12 20 40 ll 2 4 80 100 4 53 5 53 6 53 4 53 3 53 6 53 Show All Maximum Average Show All Maximum Average M V Channel _ i A V noise 77 dBm 92 dBm BS 1 year ago pA now zB No ARM Events Detected Interfering Devices 1 3 w of 3 Interfering Devices Page 1w of1 Choose columns Export CSV Cordless Base Freq Hopper 11 5 2012 12 20PM_ 1 14 76 5 Generic Freq Hopper 11 5 2012 7 45 PM 1 14 57 5 Video Device Fixed Freq 11 6 20126 53AM 4 11 53 99 1 3 w of 3 Interfering Devices Page 1w of1 Running Commands If you are running IAP 3 2 then AirWave provides a set of commands that you can run from the virtual controller and from the AP On the virtual controller you also have option to run commands for all APs a
16. econd is the access point itself In some cases the Instant device shows up as having Mismatched configuration This occurs when the AirWave information was received from Instant via the DHCP server i e was not manually configured Clicking on the mismatched device opens the audit page of the device showing the reason for the mismatch The configuration shows the desired configuration versus the current Instant configuration As shown in the following image the AirWave IP address shared secret and organization string has to be provisioned on the Instant device Figure 4 APs Devices gt Audit page List Heeto bite Hae Pusch Lig Thre Mouniached Tignrind Dewce Configuration of Instant 0443280 in group TME Instent in folder Too gt TME Inetant gt Storel c Ta Dpi a in ma rey re Configuration read from device at 1 13 2012 947 AM Tempate Aruba instant Virtual Controler 6 1 2 3 2 0 0 3_ 31389 Configuration Mematched audit Audit the device s cument configuration Refresh this page Tempbte allow new ape allowed ep dtscTschrcd 43 8d Desired am ip 10 165 240 8 Desired ama bey SAPS a ee ade Tchad eget r esa oT ode enet vlan quest eyet oser sdmin SdifSodssediSodbidaficll Mo ebse bat Inetant Cdidsi80 Desired organization IME Inerant Srorel ri bend all syslog level wara ap debug ayslog level warn network ayslog level warn security syslog level warn system syalog level warn user ayslog level warn user deb
17. er WLSE ACS NMS RADIUS Accountin Days R Role Name Acme Admin Enabled Yes No Type A Manager x AP Device Access Level Manage Read Write fiw Top Folder Acme RAPIDS Read Only Aa VisualRF Read Write ial Helpdesk O Yes No 2 In Groups gt Template for the newly created group verify the first Virtual Controller s auto created template NOTE The auto created template is most useful if the first Virtual Controller for the top level Organization String is fully configured on site before itis pointed at AirWave in the Virtual Controller s Ul 3 Evaluate approve or ignore incoming Virtual Controllers with a different top level Organization String and or Shared Secret in the APs Devices gt New list Subsequent IAPs are auto authorized if they have an Organization Shared Secret key that matches the Shared Secret key of any existing authorized Virtual Controller in the top level Organization String 4 Set the initial Virtual Controller to Manage Read Write mode and push the good configuration to the subsequent IAPs 5 Set up AirWave users to have access to specific folders if desired Updating the Instant Template As stated previously the first Instant network that is added to AirWave automatically includes the default configuration that is used as the template to provision other Instant networks You can view and if necessary edit this template directly on the Groups gt Templates configuration page
18. ers on page 11 e Using Custom Variables on page 12 e Applying Changes on page 12 Editing Individual Virtual Controller Values After you click Update the Variable Edit screen that displays includes two sections The lower section includes editable fields Enter values or select options directly in these fields to make changes on individual controllers In the example below the VC names are changed from Instant C0 87 54 and Instant CF 93 D2 to Store 00001 and Store 00002 respectively Dell PowerConnect W Instant in W AirWave 7 6 Deployment Guide Figure 9 Change the Individual VC Names New Up Down Mismatched Ignored i A p a custom_variable_10 Apply Please select one or more 1 2 w of 2 Virtual Controllers Page iwofi Choose columns Choose columns for roles hostname a clock_timezone ip_address C Store oo001 none 00 00 E Store oo002 none 00 00 m 1 2 of 2 Virtual Controllers Page 1of1 Select All Unselect All Bulk Editing on Multiple Virtual Controllers The upper section of the Variable Edit page includes a drop down menu of variables that can be used to apply bulk changes to all VCs that you select in the lower section Perform the following steps to apply bulk edits l Inthe edit screen select the check box beside the virtual controller s that will be edited See Figure 9 2 Select the variable that you want to change from the drop down list in the upper section 3 Enter or select the new val
19. es software from Litech Systems Design The IF MAP client library copyright 2011 Intoblox Inc All rights reserved This product includes software developed by Lars Fenneberg et al The Open Source code used can be found at this site http www arubanetworks com open_source Legal Notice The use of Aruba Networks Inc switching platforms and software by all individuals or corporations to terminate other vendors VPN client devices constitutes complete acceptance of liability by that individual or corporation for this action and indemnifies in full Aruba Networks Inc from any and all legal actions that might be taken against it with respect to infringement of copyright on behalf of those vendors Dell PowerConnect W Instant in W AirWave 7 6 Deployment Guide
20. ess a clock timezone ip address ab custom variable 1 ip_address a bc custom_variable_10 manager_ip address custom_variable organization custom_variable_3 password custom variable 4 radius server_ip custom variable _5 rf band custom_variable_6 server_cert_checksum custom variable syslog server custom_variable_ custom_ variable 9 Refer to the Dell PowerConnect W Air Wave 7 6 User Guide for detailed information about templates and variables Best Practices e Keep Dell PowerConnect W Instant devices in Monitor Only mode to audit the device and to ensure that configurations are not automatically pushed This practice is consistent with the rest of AirWave Dell PowerConnect W Instant in W AirWave 7 6 Deployment Guide Be sure that the default configuration is validated and has been pre tested in a non production environment prior to applying it to a production network Any changes that are made to this configuration will follow the same process each time and will be applied to other Dell PowerConnect W Instant networks If you modify a device s configuration through the Dell PowerConnect W Instant user interface we recommend that you put the device in Manage Mode and then use the Import Settings button from the APs Devices gt Manage page With this method you can import settings and update the template from a single page Import the settings and then wait approximately a minute If you find that you need to also update the templat
21. fer to the Dell PowerConnect W AirWave 7 6 User Guide for more information Itis also important to note that any changes that are made to the template variables will have to be manually applied to each deployed device Setting up Dell PowerConnect W Instant Manually When setting up Dell PowerConnect W Instant manually you will be requested to provide an Organization string the AirWave IP address and a Shared Key The steps to create this information are described in the following sections Creating your Organization String The Organization String is a set of colon separated strings created by the AirWave administrator to accurately represent the deployment of each Dell PowerConnect W Instant system This string is entered into the Dell PowerConnect W Instant UI by the on site installer The format of the Organization String is Org subfolderl subfolder2 and so on up to 31 characters long Org the top level string is generally the name of your organization and is used to automatically generate the following if not already present inAirWave AirWave Role Org Admin initially disabled AirWave User Org Admin assigned to the role Org Admin e Folder Org under the Top folder in AirWave Configuration Group Org Additional strings in the Organization String are used to create a hierarchy of subfolders under the folder named Org subfolder would be a folder under the Org folder e subfolder2 would be a folder under sub
22. folder To create your Organization String consider the plan of how your Dell PowerConnect W Instant IAPs are to be physically distributed As a best practice the Organization String should mirror your company s geographical or internal reporting structure For example if you plan to deploy Dell PowerConnect W Instant in four stores in two different cities for Acme Corporation your Organization Strings might look like these e Acme New York Times Square Store e Acme New York Queens Store Acme San Francisco Sunset Store Acme San Francisco SOMA Store The Shared Key The Shared key is used by the administrator to manually authorize the first Virtual Controller for an organization that appears in the APs Devices gt New page in AirWave Any string is acceptable but this string must be the same for all devices in your organization NOTE Always ensure the protection of your organization s shared secret Knowledge of this shared secret the organization string and communication protocol could allow a rogue device to masquerade as a Dell PowerConnect W Instant device At this point the admin in our example should send the Organization String Shared Secret key and AirWave IP address to the on site installers setting up Dell PowerConnect W Instant hardware inside the storefronts Entering the Organization String and AirWave Information into the IAP For the initial I AP Virtual Controller set up in each location the on site installer
23. ics page for Dell PowerConnect W Instant devices displays CPU Utilization Channel Utilization Bandwidth Power and MAC Phy Error statistics RAPIDS Because Dell PowerConnect W Instant does not support mitigation or high level rogue reporting it does not synchronize classification All rogue devices are reported and stored in AirWave for evaluation based on high level rule sets Dell PowerConnect W Instant currently does not match wireless BSSIDs to local MAC addresses within an IAP s ARP table and does not currently support IDS event notification Reports Dell PowerConnect W Instant Virtual Controllers appear as a separate device in the Device Inventory Report and most other reports that list devices F NOTE AirWave does not provide a Device Uptime report for Dell PowerConnect W Instant devices Other Available Features Additional Instant features that are supported in AirWave include an editor for common variables monitoring features CLI commands and firmware image management Editing Variables on page 9 Monitoring Features on page 13 Running Commands on page 13 Firmware Image Management on page 14 Intrusion Detection System on page 14 Editing Variables AirWave includes support for editing variables on virtual controllers that have different values Some common variables include Name LAN IP Address Syslog Server Timezone Radius Servers and RF Band Selection AirWave also supports additional generic va
24. lization and many other features Integrating Dell PowerConnect W Instant systems into AirWave is unique from the setup of any other device class due to the following considerations Discovery AirWave does not discover Dell PowerConnect W Instant devices via scanning SNMP or HTTP the network Each Dell PowerConnect W Instant deployment will automatically check in to the AirWave configured within the IAP s user interface The first Virtual Controller for an organization will automatically appear as a new device in AirWave Subsequent IAPs are discovered via the Virtual Controller just like standard controller thin AP deployments Auto provisioning The first authorized Virtual Controller requires manual authorization into AirWave via shared secret to ensure security Along with the shared secret the Virtual Controller sends an Organization String which automatically initializes and organizes the APs in AirWave Unlike the traditional infrastructure of a physical controller and thin APs Dell PowerConnect W Instant automates many tedious steps of developing a complex hierarchical structure of folders config groups templates admin users and admin roles for Dell PowerConnect W Instant Communication via HTTPS Because Dell PowerConnect W Instant devices may be deployed behind NAT enabled firewalls Virtual Controllers push data to AirWave via HTTPS AirWave initiates no connections to Dell PowerConnect W Instant devices via SNMP TFTP SSH an
25. riables that you can customize such as adding a new WLAN The defaults for all VC variables can be changed from the Template page Perform the following steps to begin editing variables on virtual controllers l On the APs Devices gt List page select Modify Devices wrench icon and then select the check box beside the virtual controllers that you want to edit Dell PowerConnect W Instant in W AirWave 7 6 Deployment Guide 10 Figure 8 Select the VCs to update 3 Modify Devices l 2 wof APs Devices Page lwofi Reset filters Choose columns Export CSV Device Status Y Upstream Status S Instant C0 87 54 Up A Instant CF 93 D2 Up A 1 2 wof 2 APs Devices Page 1 wof1 Reset filters Select All Unselect All Change properties of selected devices AMP Group Folder Select Group and or Select Folder Aruba AP Group Aruba AP Group TE Aruba Instant Virtual Controller Variables i Manage Read Write Planned Downtime Mode Enable C Disable Enable Disabe Desired Radio Status Enable C Disable Enable Disabe Cisco Thin AP Settings Perform actions Management Level 2 Click the Update button next to the Aruba Instant Virtual Controller Variables field The opens the Variable Edit page Refer to the following sections for information on using the Variable Edit page e Editing Individual Virtual Controller Values on page 10 e Bulk Editing on Multiple Virtual Controll
26. s well as for the Dell PowerConnect W Instant in W AirWave 7 6 Deployment Guide 13 14 current virtual controller NOTE When you first run a command the results can take up to a minute to appear For subsequent commands the results will appear after one or two seconds Figure 14 Running Commands Monitoring Instant C4 21 9F in group junyei in folder Top gt junyei This Device is in monitor only with firmware upgrades mode Status Up OK Configuration Mismatched The settings on the device do not match the desired configuration Firmware 6 1 3 4 3 1 0 0 arm_0 Upstream Device Upstream Port Controller Role Type Aruba Instant Virtual Controller Last Contacted 10 1 2012 2 LAN MAC Address IP Address 197 168 1 102 APs 2 Run a command for virtual Run a command for all APs a show ixcert a show about show running config show allowed aps show app services show alert global show stats global show users show radius attributes show radius servers support show configuration show snmp configuration show ap debug airwave configteceived show ap debug airwave events pending show ap debug airwave data sent show ap debug airwave state show ap debug airwave stats show dhcpc opts show opendns support m 13 39 14 39 12 3 Maximum Average SI 0 clients O clients Firmware Image Management AirWave pushes firmware to the Dell PowerConnect W Instant Virtual Con
27. shared secret and add the device e Verifying the Shared Secret on page 5 e Adding the First Instant Device to AirWave on page 5 Verifying the Shared Secret After the role is enabled the Dell PowerConnect W Instant device will appear in the APs Devices gt New page the admin user should mouse over the value under the Type column to verify the device s Shared Secret with AirWave as shown in Figure 2 Figure 2 Mouse over the Type column to view the Shared Secret 1 1 w of 1APs Devices Page 1 wof 1 Choose Columns CSV Export Device Type IP Address LAN MAC Address Discovered w C lnstant C4 43 8D Aruba Instant Virtijal Controller 10 29 2012 12 41 PM 1 1 w of 1 APs Devices Page 1 wof1 Shared Secret airwave If the incoming Shared Secret matches the one you created select Add then Save and Apply in the confirmation page NOTE With an Organization specified you do not have to select any Group or Folder from the drop down menus on the APs Devices gt New page In fact if you do change the Group Folder drop down menus all Organization specified Virtual Controllers will ignore Ki these values and will use the folder group values from the Organization String instead If you select Add for some non Dell PowerConnect W Instant devices as well as some Organization specified Virtual Controllers the drop down menus will apply to the non lAPs but not the Virtual Controllers If you have any Virtual Controllers with no
28. troller and the Virtual Controller pushes the firmware to the rest of its IAPs When using AirWave to manage IAPs you can upgrade the firmware by loading the firmware onto AirWave and then scheduling an upgrade from AirWave If you have a mixed deployment with multiple Instant products AirWave allows you to upload firmware for each of the device types Intrusion Detection System AirWave automatically detects rogue APs irrespective of their location in the network It prevents authorized APs from being detected as rogue IAPs and tracks and correlates the IDS events to provide a comprehensive picture of your network s security Optional Tasks Additional optional tasks include enabling an IAP role for location specitic access and updating the Instant template e Enabling the IAP Role on page 15 e Updating the Instant Template on page 15 Dell PowerConnect W Instant in W AirWave 7 6 Deployment Guide Enabling the IAP Role As shown previously new IAP devices can be added to AirWave automatically In some cases after a device is added the Admin may want to enable store specific access In this case the Admin might enable a specific IAP role l Enable the newly created Admin User Role in AMP Setup gt Roles as shown in Figure 15 Figure 15 Enable Admin User Roles in AMP Setup gt Roles Home Helpdesk Groups APs Devices Users Reports System Device Setup BAULE General Network Users Guest Users Authentication MDM Serv
29. ue In the example below clock_timezone is changed to Pacific time for both VCs 4 Click Apply when you are finished making each change The selected virtual controllers will display the updated information Follow these same steps for each variable that you want to edit NOTE The Apply button remains disabled until a virtual controller is selected via its check box Figure 10 Change the Timezone variable New Up Down Mismatched Ignored clock_timezone 2 Paciic Time UTC 08 3 Apply 4 Please select one or more 1 2 of 2 Virtual Controllers Page lwofi Choose columns Choose columns for roles hostname clock_timezone ip_address Store 00001 none 00 00 L Store 00002 none 00 00 1 2 of 2 Virtual Controllers Page 1of1 Select All Unselect All Dell PowerConnect W Instant in W AirWave 7 6 Deployment Guide 11 12 Using Custom Variables The Variable Edit page includes additional generic fields labeled as custom_variable_1 through custom_variable_10 The custom_variable_1 field can be used to add multiple lines of text rather than a single entry as indicated by the larger note field on the UI This is useful for example if you want to add a new WLAN configuration to a VC Other variables can be used to enter additional single support commands The process for creating custom variables is the same as that used in editing available variables To create a custom variable on a single VC use the horizontal s
30. ug ayalog level wars wireless wersion 6 1 2 0 2 0 6 wirtual coneraller eoanery US Wirtual controller key OG0c2E300LcSIf led itiasis lL ebesssdacsiledzbvsseyics Dell PowerConnect W Instant in W AirWave 7 6 Deployment Guide ET Bh N N Perform the following steps to resolve the mismatch Navigate to the AP Devices gt Manage page for that Instant device Change the Management Mode option to Manage Read Write Click on Save and Apply at the bottom on the page When the Confirm changes page opens click on Apply Changes Now for the changes take effect Upon completion the configuration will be synced to the Instant network The status of the device will initially display as Verifying during this process The status will change to Good after the provisioning is successful NOTE This is the same process for any configuration change sync that is done in future Adding Additional Instant APs to AirWave After the first Instant device has been provisioned and set up in AirWave additional Instant networks in other locations can be added and provisioned automatically To do this set the Automatically Authorized Virtual Controller Mode option to Manage Read Write on the AMP Setup gt General page Figure 5 Setting devices to Manage Read Write mode Add New Controllers and Autonomous Devices Location New Device List ka Add New Thin APs Location New Device List stitaly Authorized Virtual Controller Mode
Download Pdf Manuals
Related Search