Dell PowerConnect W-Airwave 7.4 Practices Guide
Contents
1. Radio MAC Address Radio Vendor LAN MAC Address LAN Vendor OUI Score Operating System OS Detail Network Type AP 2 Select the proper classification from the RAPIDS Classification Override drop down menu CAUTION Changing the controller s classification within the AMP UI will push a reclassification message to all controllers managed by the AMP server that are in Groups with Offloading the WMS database set to Yes To reset the controller classification of a rogue device on AMP change the controller classification on the AMP UI to unclassified Controller classification can also be updated from RAPIDS gt List via the Modify Devices link All rogue devices will be set to a default controller classification of unclassified when WMS is first offloaded except for devices classified as valid Rogue devices classified in AOS as valid will also be classified within AMP as valid for their controller classification as well As APs report subsequent classification information about rogues this classification will be reflected within AMP UI and propagated to controllers that AMP manages The device classification reflected in the Controller s UI and in the AMP UI will probably not match because the Controller APs do not reclassify rogue devices frequently Dell PowerConnect W AirWave 7 4 Best Practices Guide Dell PowerConnect W Specific Capabilities in AMP 33 To update a group of devices controller classification to mat2. 2 In the Default Credentials section select the Edit link next to Dell PowerConnect W The page illustrated in Figure 2 appears Best Practices GuideBest Practices GuideBest Practices Guide Best Practices Guide Configuring AirWave for Global Dell PowerConnect W Series 3 Enter the SNMP Community String Vi NOTE Be sure to note the community string because it must match the SNMP Trap community string which is configured later in this document Community String tee ee Confirm Community Sting EEE EEE Telnet SSH Username admin Telnet SSH Password ss ssnssss Confirm Telnet SSH Password su svsnser enable Password 0 ua Confirm enable Password ssvrnvsvne SNMPv3 Username Auth Password Confirm Auth Password SNMPw3 Auth Protocol SHA 1 al Privacy Password Confirm Privacy Password SNMPV3 Privacy Protocol DES Oo Save Caneel 4 Enter the required fields for configuration and basic monitoring Telnet SSH Username Telnet SSH Password enable Password 5 Enter the required fields for WMS Offload SNMPyv3 Auth Protocol SNMPv3 Privacy Protocol SNMPv3 Username Auth Password Privacy Password K NOTE The protocols should be SHA and DES in order for WMS Offload to work 6 When finished select Save Setting Up Recommended Timeout and Retries To set recommended timeout and retries settings follow these steps l In the Device Setup gt Communication page locate the SNMP Setting sectio
3. Controller Name configure terminal Enter Configuration commands one per line End with CNTL Z Controller Name config wms general collect stats enable Controller Name config write mem Dell PowerConnect W AirWave 7 4 Best Practices Guide CLI ArubaOS and AMP Commands 37 Offload WMS Utilizing ArubaOS CLI and AMP CLI SNMP Walk K NOTE Do not use these commands if using AMP GUI ArubaOS CLI SSH into all controllers local and master and enter enable mode and issue the following commands Controller Name configure terminal Enter Configuration commands one per line End with CNTL Z Controller Name config mobility manager lt AMP IP gt user lt MMS USER gt lt MMS SNMP PASSWORD gt trap version 2c NOTE This command creates an SNMPv3 user on the controller with authentication protocol configured to sha and privacy protocol DES The user and password must be at least eight characters because the Net SNMP package in AMP adheres to this IETF recommendation ArubaQS automatically creates Auth and Privacy passwords from this single password If mobility Vi manager is already using a preconfigured SNMPv3 user ensure the Privacy and Authentication passwords are the same This command also creates the AMP server as an SNMPv3 Trap Host in the controller s running configuration Sample mobility manager 10 2 32 1 user airwavel23 airwavel23 Controller Name config write mem AMP SN
4. ArubaOS CLI K NOTE Do not use these commands if using AMP GUI Controller Name config cfgm mms config disable K NOTE This command ensures configuration changes made on the master controller will propagate to all local controllers Controller Name config write mem Disable Debugging Utilizing ArubaOS CLI If you are experiencing performance issues on the Master Controller ensure that debugging is disabled It should be disabled by default Debugging coupled with gathering the enhanced statistics can put a strain on the controllers CPU so it is highly recommended to disable debugging To disable debugging SSH into the controller enter enable mode and issue the following commands Controller Name show running config include logging level debugging If there is output then use the following commands to remove the debugging Controller Name configure terminal Enter Configuration commands one per line End with CNTL Z Controller Name config no logging level debugging lt module from above gt Controller Name config write mem Restart WMS on Local Controllers Utilizing ArubaOS CLI To ensure local controllers are populating rogue information properly SSH into each local controller enter enable mode and issue the following commands Controller Name configure terminal Enter Configuration commands one per line End with CNTL Z Controller Name config process restart wms 2
5. lt discovering radi timestamp 2008 lt discovering radi timestamp 2008 lt discovering radi timestamp 2008 10 lt rfid gt lt rfid battery level 0 chirp interval radio mac 00 14 vendor gt lt radio phy g xmit lt discovering radi timestamp 2008 lt discovering radi timestamp 2008 lt discovering radi timestamp 2008 lt rfid gt lt rfid battery level vendor gt lt radio phy g xmit lt discovering radi timestamp 2008 lt discovering radi timestamp 2008 lt discovering radi timestamp 2008 lt discovering radi timestamp 2008 lt rfid gt lt visualrf rfids gt on 1 gt dbm 10 0 gt o ap SC MB 03 AP10 dBm 91 10 21T12 253 30 04 00 gt o ap SC MB 03 AP06 dBm 81 10 21T12 23 31 04 00 gt o ap SC MB 01 AP06 dBm 63 10 21712 23 31 041400 gt o ap SC MB 02 AP04 dBm 88 21T12 22 34 04 00 gt dbm 10 0 gt o ap SC MB 03 AP06 dBm 74 10 21712 23 20 04 00 gt o ap SC MB 01 AP06 dBm 58 10 21T12 23 20 04 00 gt o ap SC MB 03 AP02 dBm 91 10 21T12 23 20 04 00 gt O chirp interval radio mac 00 14 dbm 10 0 gt o ap SC SB GR AP04 dBm 91 10 1T12 2108 0410 00 gt 10 21T12 22 08 04 00 gt 10 21T12 23 08 04 00 gt o ap SC MB 02 AP04 dBm 90 10 21T12 22 08 04 00 gt Wi Fi Tag Setup Guidelines Ensure that the tags can be heard by at least three 3 access points from an
6. 00 2008 1224534900 588338 got 96 bytes from 10 51L 1 39 on port 5050 payload 0014c9c90100003c001alec050780000000200000013c9c70100000c001alec050780000000d54a7a28054 0001ddff f020013c9c80100000c001alec050780000000cdb8ae9a9000006c4ff02 12245354900 5883245 got 96 bytes from 10 51 1 39 on port 5050 Mon Oct 20 13 35 00 2008 1224534900 588338 got 96 bytes from 10 51 1 39 on port 5050 payload 0014c9c90100003c001alec050780000000200000013c9c70100000c001alec050780000000d54a7a28054 0001ddff 020013c9c80100000c001lalec050780000000cdb8ae9a9000006c4ff02 Dell PowerConnect W AirWave 7 4 Best Practices Guide Increasing Location Accuracy 47 Ensure chirps are published to Airbus by snooping on proper topics root AMP server airbus_snoop rtls_tag_report Snooping on rtls_tag_report Mon Oct 20 13 49 03 2008 1224535743 54077 Q o ap mac gt 00 1A 1E C0 50 78 battery gt 0 bssid gt 00 1A channel gt 1 data rate gt 2 noise floor gt payload gt rssi gt 64 1E 85 07 80 85 tag_mac gt 00 14 7E 00 4C E4 timestamp gt 303139810 tx_power gt 19 Verify external applications can see Wi Fi Tag information by exercising the Tag XML API https lt AMP SERVER IP gt visualrf rfid xml You should see the following XML output lt visualrf rfids versi lt rfid battery level 0 chirp interval radio mac 00 14 vendor gt lt radio phy g xmit lt discovering radi timestamp 2008
7. Dell PowerConnect W AirWave 7 4 Best Practices Guide How AMP Acquires Data from Dell PowerConnect W Series devices 41 42 How AMP Acquires Data from Dell PowerConnect W Series devices Dell PowerConnect W AirWave 7 4 Best Practices Guide Appendix C WMS Offload Details WMS Offload instructs the Master controller to stop correlating ARM WIPS and WIDS state information amongst its Local controllers because AMP will assume this responsibility Figure 24 depicts how Dell PowerConnect W AirWave communicates state information with Local controllers Figure 24 ARM WIPS WIDS Classification Message Workflow te E e j AS A Classify A as Rogue lt gt r Local 2 1 Local 2 2 Local 2 3 Local 1 1 N D A E p a a 5 o State Correlation Process l 2 Dell PowerConnect W Series AP hears rogue device A Local controller 1 3 evaluates devices and does initial classification and sends a classification request to the AMP AMP receives message and re classifies the device if necessary and reflects this within AMP GUI and via SNMP traps if configured AMP sends a classification message back to all Local controllers managed by Master controller 1 1 1 1 2 and 1 3 AMP sends a classification message back to all additional Local controllers managed by the Dell PowerConnect W AirWave server In this example all Local controllers under Master controller 2 2 1 2 2 and 2 3 would rece
8. NOTE You will need to wait until the next Rogue Poll Period to execute a Poll Now for each local controller to see rogue devices begin to appear in AMP after executing restart wms in ArubaOS Configure the ArubaOS CLI Use the following procedure to configure the ArubaOS CLI when not Offloading WMS to AMP AOS 6 0 and GT To ensure proper event correlation for IDS events when WMS if not offloaded to AMP SSH into each controller Master and Local enter enable mode and issue the following commands Controller Name configure terminal Enter Configuration commands one per line End with CNTL Z Controller Name config ids management profile Controller Name config ids general profile lt name gt Controller Name config ids events logs and traps Controller Name config write mem Dell PowerConnect W AirWave 7 4 Best Practices Guide CLI ArubaOS and AMP Commands 39 Enable Proper Traps With the ArubaOS CLI To ensure the proper traps are configured on Dell PowerConnect W series controllers copy and paste the following command after entering enable mode and issuing the configure terminal command snmp server trap enable wlsxNUserAuthenticationFailed snmp server trap enable wlsxUserAuthenticationFailed snmp server trap enable wlsxNAuthServerRegTimedOut snmp server trap enable wlsxSignatureMatchAP snmp server trap enable wlsxSignatureMatchSta snmp server trap enable wlsxSignAPNetstumbler snmp server tra
9. Services section set Enable AMON Data Collection to Yes as shown in Figure 4 Figure 4 AMON Data Collection setting in AMP Setup gt General ditional AMP Services Enable FTP server required to manage Cisco WLC APs optional for FTP upgrades on supported devices Yes No Enable RTLS collector Aruba only C ves No Use embedded mail server Yes No Send Test Email Process user roaming traps from Cisco WLC ves No 3 Select Save Controller Setup Master and Local CAUTION Enabling these commands on AOS versions prior to 6 0 1 0 can result in performance issues on the controller If you N are running previous firmware versions such as AOS 6 0 0 0 you should upgrade to AOS 6 0 1 to obtain RF utilization metrics or 6 1 to obtain RF utilization and classified interferer information before you enter this command SSH into the controller enter enable mode and issue the following commands Controller Name configure terminal Enter Configuration commands one per line End with CNTL Z Controller Name config mgmt server type amp primary server lt AMP IP gt Controller Name config write mem 12 Configuring AirWave for Global Dell PowerConnect W Series Infrastructure Dell PowerConnect W AirWave 7 4 Best Practices Guide Chapter 3 Configuring a Dell PowerConnect W Group in AMP It is prudent to establish a Dell PowerConnect W Group within AMP During the discovery process you will
10. Tab where floor plans are stored and heatmaps are generated Prior to offloading WMS ensure that you have exported floor plans from ArubaOS and imported into AMP All functionality within the Plan Tab is incorporated with the VisualRF module in AMP Report Tab All reports are incorporate within AMP Events Tab the majority of functionality within this Tab is incorporate within AMP Reports and Alerts sections with the exception of Interference Detected Rogue AP Station Failed Suspected Rogue AP The Security Summary section Figure 11 disappears after offloading WMS The data is still being processed by the Master Controller but the summary information is not available AMP does provide the ability to view some of this information in detail and summary form Figure 11 Security Summary on Master Controller Montorng CPM CS MRS Mc o icenses exorng Network Network Summary Network Summary Security Summary All WLAN Controller All Access Points WLAN Network Status WLAN Attack Summary All Mesh Nodes Total Total IPSEC IPSEC Last SMin LastHour All PE ne E E Up Dom Up Down Denial of Service Attacks 9 4 100 Air E 1 9 pe WLAN Controllers 9 Impersonation Attacks Q 0 18 E ET rence Access Points a 2 9 9 Signature Pattern Matches 238 All Wired Access Points Mesh Portals Policy Violations Q All Routers Mesh Points q Unauthorized Devices Detected 6 Global Events Air Monitors Q Q 2 Controller RFProtect Sensors 2 Rogue AP Classificat
11. license information in AMP l Navigate to the APs Devices gt Monitor page of a controller under AMP management 2 Select the License link in the Device Info section pop up window shown on Figure 19 appears listing all licenses Figure 19 License Popup from APs Devices gt Monitor License Table for alpha local 1 Service Type a Client Integrity Module External Services Interface External Services Interface Installed Flag Key 4 29 2005 12 36 PM nOXQPpMZN kUMfht67j98IcV0J TSIKt4In xA2LIFTO v58 4 29 2005 12 35 PM PiF8DrBV nBxikp75 Z8 T T2NS aj40a8 h VVm CxB6 2VU 4 29 2005 12 34 PM 10 19 2007 6 54 PM Indoor Mesh Access Points 256 OMsNveDX W3WwEHSKx TpXkQbHV NyTb3HAN OYAI2zNY V IKwFlaJR 6y8p6rm CzOUh7tl bMhkMA1v 1DV 2m H kZE MMC AP 10 19 2007 6 54 PM WP6JNB8I5S y4A0aG9p P2r7wVTk PXV3JgR COfg3d4 LLk Ortronics Access Points 256 10 19 2007 6 54 PM jI60DRK PiIRXv5nF l1 DMwrDJ oES1lydXR4K7sFEHQ SmU Outdoor Mesh Access Points 100 5 2 2007 2 51 PM Expired 99CSOvuLjL4Z0 YkS Q8I0v2bI BS Y0Vxi YkCOTTOV Sjs Outdoor Mesh Access Points 256 10 19 2007 6 54 PM RKC wjVj fRQGIDI K F8vurv o YRWwgCuG CsmY7wYh w18 Outdoor Mesh Access Points 64 8 1 2007 3 59 PM CSi bSFb yVOxffoh BWWUVEVe Glb2xz4 A LKcq440D IXQ Policy Enforcement Firewall 4 29 2005 12 30 PM VDXR07p2 J08asqU2 HG7 w74l zzIByGKu zZ7w3r3 11 Remote Access Points 256 10 19 2007 6 54 PM QnR882W 01Kb2XcR 2vrePyl J rWbxh jtCqjH3h LPU Remote Access Points 48 4 29 2005
12. move new discovered controllers into this group This chapter contains the following topics Basic Monitoring Configuration on page 13 Advanced Configuration on page 14 Basic Monitoring Configuration l Navigate to Groups gt List 2 Select Add 3 Enter a Name that represents the Dell PowerConnect W Series infrastructure from a security geographical or departmental perspective and select Add 4 You will be redirected to the Groups gt Basic page for the Group you just created On this page you will need to tweak a few Dell PowerConnect W specific settings 5 Find the SNMP Polling Periods section of the page as illustrated in Figure 5 6 Change Override Polling Period for Other Services to Yes 7 Ensure User Data Polling Period is set to 10 minutes Do not configure this interval lower than 5 minutes Vi NOTE Enabling the SNMP Rate Limiting for Monitored Devices option in the previous chapter adds a small delay between each SNMP Get request thus the actual polling interval is 12 minutes for 10 minute polling interval 8 Change Device to Device Link Polling Period to 30 minutes 9 Change Rogue AP and Device Location Data Polling Period to 30 minutes Figure 5 SNMP Polling Periods section of Groups gt Basic Up Down Status Polling Period Override Polling Period for Other Services e Yes C No AP Interface Polling Period 10 minutes fan User Data Polling Period 10 minutes Thin AP Discovery Poll
13. server and correlated to the proper controller AP and user See Figure 12 showing all authentication failures related to a controller Figure 12 RADIUS Authentication Traps in AMP RADIUS Authentication Issues for HQ Aruba Controller in group Acme Corporation in folder Top gt Acme Corporation gt Corporate HQ Return to AP Device Monitor page Event Type a Last2 Hours Last 24 Hours Client authentication failed 0 1103 1 20 of 1103 RADIUS Authentication Issues Page lof 56 gt gt Event Time w FF Client authentication failed for 00 08 7D 0C 19 E9 See 4 2 2008 5 24 PM F Clent authentication failed for 00 17 3F 20 99 6B 00 17 3F 20 99 6B 4 2 2008 4 21 PM The IDS traps are received by the AMP server and correlated to the proper controller AP and user See Figure 13 showing all IDS traps related to a controller Figure 13 DS Traps in AMP IDS Events for HQ Aruba Controller in group Acme Corporation in folder Top gt Acme Corporation gt Corporate HQ Return to AP Device Monitor page Attack a Last 2 Hours Deauth Broadcast 0 Netstumbler Generic 13 Nul Probe Response 22 263 2776 3 Attack Types 35 385 4579 1 20 w of 4579 IDS Events Page 1w of 229 gt gt AF Channel SNR Precedence Time vw 7 NulHProbe Response 00 20 A6 49 92 AE HQ Aruba Boardroom 802 11a i 7 17 2008 1 58 PM 7 Nul Probe Response 00 0D 97 00 81 6A HQ Northeast Corner b6b6 802 11bg 23 7 17 2008 1 56 PM F Nul Probe Res
14. the AMP UI Rules Based Controller Classification Using RAPIDS Defaults for Controller Classification To use the controller s classification as RAPIDS classification follow these steps l Navigate to RAPIDS gt Rules and select the pencil icon for a rule 2 In the Classification drop down menu select Use Controller Classification as seen in Figure 22 3 Select Save 34 Dell PowerConnect W Specific Capabilities in AMP Dell PowerConnect W AirWave 7 4 Best Practices Guide Figure 22 Using Controller Classification Po See LEESE RAPIDS Classification F Rule name Classification Threat Level Enabled Detected on WLAN e Operating system a PO pa Ruke Virtual AMPs Unclassified Suspected Rogue Rogue Contained Rogue Use Controller Classif tion Kd Not Matec Changing RAPIDS based on Controller Classification l Navigate to RAPIDS gt Rules 2 In the Classification drop down menu select desired RAPIDS classification 3 Select Controller Classification from drop down menu as shown in Figure 23 Rule name Classification Threat Level Enabled Controller Classification Detected on WLAN Detecting AP count Encryption Network type Signal strength manufacturers one SSID d Wireline Properties Detected on LAN 1 Matching is case and non Fingerprint scan IP address OUI score Operating system Wireless Wireline Properties Manufacturer MAC Address Aruba Co
15. 12 38 PM 5277 cOjO LpDgDbLH 4bEnzNbg p oEnS2a n TtHaSst ms0 Voice Services Module 10 19 2007 6 54 PM Lj ByOfs wMdJU3Xv SdjAkCD vJ9ZRok3 sWZ4Z2bn aH4 mmmmmmmmm mmmmmm VPN Server 4 29 2005 12 32 PM SOKR15a8 KKMjj Gv HldcwaK uEZuPvcs c LIzjg0 2iE Wireless Intrusion Protection 4 29 2005 12 33 PM xVc llqw Os1 ei yL b1CqzoTr UwGp20Ai LD6wHOW2 qSw xSec Module 4 29 2005 12 37 PM ukxUwAcB PE GeyB9 7u7IMtQ1 CaibELI2 LuqdRsqA fac 32 Dell PowerConnect W Specific Capabilities in AMP Dell PowerConnect W AirWave 7 4 Best Practices Guide Rogue Device Classification Only complete this section if you have completed WMS Offload procedure above After offloading WMS AMP maintains the primary ARM WIPS and WIDS state classification for all devices discovered over the air Table 5 WIPS WIDS to AMP Controller Classification Matrix AMP Controller Classification AOS WIPS WIDS To check and reclassify rogue devices follow these steps l Navigate to the Rogue gt Detail page for the rogue device as shown in Figure 20 Figure 20 Rogue Detail Page Illustration Acknowledge O yes No IP Address E Controller Classification Suspected Neighbor Confidence 0 WMS Classification Override Unclassified E SSID ga dp vw c3 2 First Discovery Agent 00 24 6c cB Ge e7 RAPIDS Classification Unclassified Channel 149 Classification Rule WEP No RAPIDS Classification Override No Override WPA Yes Threat Level Threat Level Override
16. 4 Best Practices Guide Appendix D Increasing Location Accuracy Understand Band Steering s Impact on Location Band steering can negatively impact location accuracy when testing in highly mobile environment The biggest hurdle is scanning times in 5 GHz frequency Table 8 Location accuracy impact Operating Frequency Total Channels Scanning Frequency Scanning Time Total Time One Pass 2 4 GHz 11 US 10seconds 110 milliseconds 121 21 seconds Leveraging RTLS to Increase Accuracy This section provides instructions for integrating the AMP Dell PowerConnect W Series WLAN infrastructure and RTLS feed for more accurately locating wireless clients and Wi Fi Tags Deployment Topology Figure 25 Typical Client Location D Client RSSI 72 Thin AP AWMS Server Floor Plan Importation AP Provisioning Location Services Dell PowerConnect W AirWave 7 4 Best Practices Guide Increasing Location Accuracy 45 Figure 26 Typical Tag Deployment Data lt gt Controller F po r E i QuickView Real time location AWMS Server Floor Plan Importation AP Provisioning XML or Event Base API for upstream FA system Prerequisites You will need the following information to monitor and manage your Dell PowerConnect W Series infrastructure Ensure AMP server is already monitoring Dell PowerConnect W Series infrastructure Ensure WMS Offload process is complete Ensure fi
17. Connect W Series Integration Strategies Dell PowerConnect W AirWave 7 4 Best Practices Guide Known Interfering APs partial data is available in AMP on each APs Devices gt Manage page Router Summary Routers Detected no summary data available in AMP Client Classification Summary Valid Clients summary data available on all pages in the dashboard Interfering clients no summary data available in AMP Disabled Clients no summary data available in AMP See Rogue Device Classification on page 33 for more information on security IDS WIPS WIDS classification and RAPIDS Dell PowerConnect W AirWave 7 4 Best Practices Guide AMP and Dell PowerConnect W Series Integration Strategies 27 28 AMP and Dell PowerConnect W Series Integration Strategies Dell PowerConnect W AirWave 7 4 Best Practices Guide Chapter 6 Dell PowerConnect W Specific Capabilities in AMP This chapter discusses Dell PowerConnect W specific capabilities in AMP and contains the following topics e Dell PowerConnect W Traps for RADIUS Auth and IDS Tracking on page 29 e Remote AP Monitoring on page 30 e ARM and Channel Utilization Information on page 30 e Viewing Controller License Information on page 32 e Rogue Device Classification on page 33 e Rules Based Controller Classification on page 34 Dell PowerConnect W Traps for RADIUS Auth and IDS Tracking The authentication failure traps are received by the AMP
18. Dell PowerConnect W AirWave 7 4 Best Practices Guide Copyright 2011 Aruba Networks Inc Aruba Networks trademarks include amp Al WaVe Aruba Networks Aruba Wireless Networks the registered Aruba the Mobile Edge Company logo and Aruba Mobility Management System Dell the DELL logo and PowerConnect are trademarks of Dell Inc All rights reserved Specifications in this manual are subject to change without notice Originated in the USA All other trademarks are the property of their respective owners Open Source Code Certain Aruba products include Open Source software code developed by third parties including software code subject to the GNU General Public License GPL GNU Lesser General Public License LGPL or other Open Source Licenses The Open Source code used can be found at this site www arubanetworks com open source Legal Notice The use of Aruba Networks Inc switching platforms and software by all individuals or corporations to terminate other vendors VPN client devices constitutes complete acceptance of liability by that individual or corporation for this action and indemnifies in full Aruba Networks Inc from any and all legal actions that might be taken against it with respect to infringement of copyright on behalf of those vendors Dell PowerConnect W AirWave Best Practices Guide 0510824 04 November 2011 Contents EEG OG aca ia pos ce ENE 5 Document OF GATIZA WON is ssntai
19. MP Login into the Dell PowerConnect W AirWave server with proper administrative access and issue the following command for all controllers master and locals K NOTE Do not use these commands if using AMP GUI root AMP snmpwalk v3 a SHA 1 AuthPriv u lt MMS USER gt A lt MMS SNMP PASSWORD gt X lt MMS SNMP PASSWORD gt lt ARUBA CONTROLLER IP ADDRESS gt wlsxSystemExtGroup WLSX SYSTEMEXT MIB wlsxSysExtSwitchIp 0 IpAddress 10 51 5 222 WLSX SYSTEMEXT MIB wlsxSysExtHostname 0 STRING aruba 3600 2 WLSX SYSTEMEXT MIB wlsxSysExtSwitchLastReload 0 STRING User reboot WLSX SYSTEMEXT MIB wlsxSysExtLastStatsReset 0 Timeticks 0 root AMP 0 00 00 00 response NOTE Unless this SNMP walk command is issued properly on all of the controllers they will not properly populate client and rogue statistics Ensure the user and passwords match exactly to those entered in above sections Sample snmpwalk v3 a SHA 1 AuthPriv u airwavel23 A airwavel23 X airwavel23 10 51 3 222 wlsxSystemExtGroup If you do not use AMP GUI to offload WMS you must add a cronjob on the AMP server to ensure continued statistical population Because the MIB walk touch does not persist through a controller reboot a cronjob is required to continually walk and touch the MIB 38 CLI ArubaOS and AMP Commands Dell PowerConnect W AirWave 7 4 Best Practices Guide Ensuring Master Controller Pushes Config to Local Controllers Utilizing
20. NOTE This process will not reboot your controllers CAUTION If you don t follow the above steps local controllers will not be configured to populate statistics This decreases AN AMP s capability to trend client signal information and to properly locate devices See Appendix A CLI ArubaOS and AMP Commands on page 37 on how to utilize ArubaOS CLI to enable stats on Dell PowerConnect W Series infrastructure If your credentials are invalid or the changes are not applied to the controller error messages will display on the controller s APs Devices gt Monitor page under the Recent Events section If the change fails AMP does not Dell PowerConnect W AirWave 7 4 Best Practices Guide AMP and Dell PowerConnect W Series Integration Strategies 21 audit these setting display mismatches and you will need to apply to the controller by hand See Appendix A CLI ArubaOS and AMP Commands on page 37 for detailed instructions These are the commands pushed by AMP while enabling WMS Offload do not enter these commands configure terminal no mobility manager lt Active WMS IP Address gt wms general coll ct stats enable stats update interval 120 show wms general write mem WMS Offload Utilizing AMP To offload WMS on the Dell PowerConnect W Series controllers using AMP I In AMP Setup gt General locate the Device Configuration section and enable or disable Allow WMS Oftload Configuration in Monitor Only Mode 2 Select Sa
21. ail on page 43 Appendix D Increasing Location Accuracy on page 45 Dell PowerConnect W AirWave 7 4 Best Practices Guide This appendix explains ways to increase location accuracy in AMP Preface 5 Note Caution and Warning Icons This document uses the following note caution and warning icons to emphasize advisories for certain actions configurations or concepts K NOTE Indicates helpful suggestions pertinent information and important things to remember A N CAUTION Indicates a risk of damage to your hardware or loss of data N WARNING Indicates a risk of personal injury or death Contacting Support Table 2 Website contact Web Site Main Website dell com Support Website support dell com Documentation Website support dell com manuals 6 Preface Dell PowerConnect W AirWave 7 4 Best Practices Guide Chapter 1 Overview K This document provides best practices for leveraging Dell PowerConnect W AirWave 7 4 AMP Master Console and Failover to monitor and manage your Dell PowerConnect W Series infrastructure Dell PowerConnect W Series wireless infrastructure provides a wealth of functionality such as firewall VPN remote AP IDS IPS and ARM as well as an abundance of statistical information Follow the simple guidelines in this document to garner the full benefit of the Dell PowerConnect W Series infrastructure This overview chapter contains the following topics Prer
22. al Enter Configuration commands one per line End with CNTL Z Controller Name config ap system profile lt PROFILE USED BY THIN APs gt Controller Name AP system profile default rtls server ip addr lt IP OF AMP SERVER gt port 5050 key lt SNMPv3 MMS PASSWORD CONFIGURED ON CONTROLLER gt Controller Name AP system profile default write mem To validate exit configuration mode Controller Name show ap monitor debug status ip addr lt IP ADDRESS OF ANY THIN ACCESS POINTS gt RTLS configuration Type Server IP Port Frequency Active MMS 10 51 2 45 5070 120 Aeroscout N A N A N A RTLS 10 51 2 45 5050 60 Troubleshooting RTLS Ensure the RTLS service is running on your AMP server SSH into your AMP server rootQAMPServer daemons grep RTLS root 17859 12809 0 10 35 00 00 00 Daemon RTLS Or Navigate to System gt Status and look for the RTLS service as shown in Figure 28 ATLS System Status RFprotect Detection OK var log sensor_rf_detection Rogue Filter OK var log rogue_filter RTLS Collector OK var log rtls Sensor Discovery OK var log sensor_discovery Check the RTLS log file to ensure Tag chirps are making it to the AMP server SSH into your AMP server root AMPServer logs root AMPServer tail rtls payload 00147aaf 01000020001alec02p3200000001000000137aae0100000c00lalec02b320000001a1e82pb32259 0006ddff02 1224534900 588245 got 96 bytes from 10 51 1 39 on port 5050 Mon Oct 20 13 35
23. ceiveErrorRateExceeded wlsxFrameFragmentationRateExceeded wlsxFrameBand WidthRateExceeded wilsxFrameLowSpeedRateFxceeded wlsxFrameNonUnicastRateFxceeded wlsxChannelRateAnomaly wlsxNodeRateAnomalyAP wlsxNodeRateAnomalySta wlsxEA PRateAnomaly wlsxSignalAnomaly wlsxSequenceNumberAnomalyAP wlsxSequenceNumberAnomalySta wlsxApFloodAttack wlsxInvalidMacOUIAP wlsxInvalidMacOUISta wlsxStaRepeatWEPIVViolation wisxStaWeakWEPIVViolation wlsxStaAssociated ToUnsecureAP wlsxStaUnAssociatedFrom UnsecureAP wlsxAPImpersonation wlsxDisconnectStationAttackAP wlsxDisconnectStationAttackSta ARM Traps AP Power Change AP Mode Change AP Channel Change Ensuring That IDS and Auth Traps Display in AMP Using CLI Validate your ArubaOS configuration by exiting the configure terminal mode and issue the following command Controller Name show snmp trap list If any of the traps below don t show as enabled enter configure terminal mode and issue the following command Controller Name config snmp server trap enable lt TRAPS FROM LIST ABOVE gt Controller Name config write mem Vi NOTE See Appendix A CLI ArubaOS and AMP Commands on page 37 for the full command that can be copied and pasted directly into the ArubaOS CLI Ensure the source IP of the traps match the IP that AMP utilizes to manage the controller as shown in Figure 10 Navigate to APs Devices gt Monitor to validate the IP address in the Device Info section 24 AMP and De
24. ch the AOS device classification navigate to RAPIDS gt List and utilize the Modify Devices checkbox combined with the multiple sorting a filtering features Table 6 ARM to AMP Classification Matrix AMP ArubaOS ARM l Navigate to the Users gt User Detail page for the user 2 Select the proper classification from the Classification drop down menu as seen in Figure 21 Figure 21 User Classification Username madison Vendor Apple First Seen 1 8 2009 10 29 AM on lt Deleted gt for 50 mins Last Seen 4 11 2011 1 22 PM on 78C for 5 hrs 25 mins Classification Automatically populate device information Device Description CAUTION Changing User Classification within the AMP Ul will push a user reclassification message to all controllers managed by the AMP server that are in Groups with Offloading the WMS database set to Ves All users will be set to a default classification of unclassified when wms is first offloaded As APs report subsequent classification information about users this classification will be reflected within AMP UI and propagated to controllers that AMP manages It is probable that the user s classification reflected in the controller s UI and in the AMP UI will not match because the controller APs do not reclassify users frequently There is no method in the AMP UI to update user classification on mass to match the controller s classification Fach client must be updated individually within
25. csessssssscsssscsssscscssssesssesecssssssesssecsesesecsesecessusecassesesanseeases 13 Advanced Oe LG 1 EEE EE 14 Chapter 4 Discovering Dell PowerConnect W Series Infrastructure n mecmevrnmememmenmenmemenimevimenirimerimevinivnienevieen 15 Discovering Master Controllers cccccssessssescssssssesssssscssseesssecesseseseeseseseesesecseseseesusecassesesaneeates 15 Local Controller DISCOVEN eden 17 PRD 17 Chapter 5 AMP and Dell PowerConnect W Series Integration Strategies 19 integration Goals anden 19 EME USC CASOS EEE EE 20 When to Use Enable Stats cc cesssesssssscssssesssecscseseesesececsesecaesesessesesassesesaesesassesesansesasenss 20 When to Use WMS Ui 640 ssa 20 When to Use RTLS EEE 20 When to Define AMP as Trap HOSt cccccssessssssssesssecsesseeseesesseeecsesesseseeseeseeesansasensess 20 When to use Channel Utilization ccsssssesssecscsssseseeececsesecsesesecsesecsssesecsesesassesesaesesasenss 20 Prerequisites for Integration iai SI 21 Enable Stats Utilizing AMP cssssssessssesssscscsessesssesecseseesssesessesesacsesesassesecsnsesessnsecassesesansesanes 21 WMS Offload Utilizing AMP rsrsrorovonvsvnnenvsvrvererenesvenensnesvrverevenesrsnensnesvsvevenesnerensnesvsverevenesssnensnenens 22 Define AMP as Trap Host using ArubaOS CLI ce eeceeeesseseeeeseeseseesesesesseeeassesesseseeasenes 22 ArubaOS Traps Utilized by AMP 20 0 csesssssseescscssssesesesecseseesesesessssesassesesseseeassesesaesesatens
26. cture 15 Figure 7 Dell PowerConnect W Credentials in Device Setup gt Add Configure default credentials on the Communication page Name Leave name blank to read it from device IP Address SNMP Port 161 Community String inssnsaana Confirm Community String p SNMPV3 Username Auth Password Confirm Auth Password SNMPv3 Auth Protocol MDS Privacy Password Confirm Privacy Password SNMPv3 Privacy Protocol DES Telnet SSH Username admin Telnet SSH Password Confirm Telnet SSH Password aaa enable Password aansnnenne Confirm enable Password annsennner Group East Folder Top 7 amp Monitor Only no changes wil be made to device O Manage read write group settings will be applied to device 4 Enter the required fields for configuration and basic monitoring Telnet SSH Username Telnet SSH password enable password 5 Enter the required fields for WMS Offload a SNMPv3 Auth Protocol SNMPv3 Privacy Protocol SNMPv3 Username Auth Password Privacy Password K NOTE The protocols should be SHA and DES in order for WMS Offload to work 16 Discovering Dell PowerConnect W Series Infrastructure Dell PowerConnect W AirWave 7 4 Best Practices Guide CAUTION If you are using SNMPv3 and the controller s date time is incorrect the SNMP agent will not respond to SNMP requests from AMP SNMP manager This will result in the controller and a
27. e or configured credentials refer to the previous chapters of this book Chapter 2 Configuring AirWave for Global Dell PowerConnect W Series Infrastructure on page 9 Chapter 3 Configuring a Dell PowerConnect W Group in AMP on page 13 Chapter 4 Discovering Dell PowerConnect W Series Infrastructure on page 15 Enable Stats Utilizing AMP To enable stats on the Dell PowerConnect W series controllers follow these steps l Navigate to AMP Setup gt General and locate the Device Configuration section 2 Set the Allow WMS Offload Configuration in Monitor Only Mode field to Yes as shown in Figure 8 Figure 8 WMS Offload Configuration in AMP Setup gt General Guest User Configuration Allow WMS offload configuration in monitor only mode 3 Navigate to Groups gt Basic for the group that contains your Dell PowerConnect W series controllers 4 Locate the Dell PowerConnect W section on the page 5 Set the Offload WMS Database field to No as shown in Figure 9 Figure 9 Offload WMS Database field in Groups gt Basic 2rConnect W SNMP Version 2c Offload WMS Database ves No Dell PowerConnect W GUI Config f ves No Ignore Rogues Discovered by Remote APs C ves No 6 Select Save and Apply 7 Select Save This will push a set of commands via SSH to all Dell PowerConnect W local controllers AMP must have read write access to the controllers in order to push these commands K
28. equisites for Integrating Dell PowerConnect W Series Infrastructure on page 7 Auth protocol on page 7 Prerequisites for Integrating Dell PowerConnect W Series Infrastructure You will need the following information to monitor and manage your Dell PowerConnect W infrastructure SNMP community string monitoring and discovery Telnet SSH credentials configuration only enable password configuration only NOTE Without proper Telnet SSH credentials AMP will not be able to acquire license and serial information from controllers SNMPv3 credentials are required for WMS Offload Username Auth password Privacy password Auth protocol Dell PowerConnect W AirWave 7 4 Best Practices Guide Overview 7 8 Overview Dell PowerConnect W AirWave 7 4 Best Practices Guide Chapter 2 Configuring AirWave for Global Dell PowerConnect W Series Infrastructure This chapter explains how to optimally configure Dell PowerConnect W AirWave 7 4 to globally manage your Dell PowerConnect W Series infrastructure and contains the following topics Disabling Rate Limiting in AMP Setup gt General on page 9 Entering Credentials in Device Setup gt Communication on page 9 Setting Up Recommended Timeout and Retries on page 10 Setting Up Time Synchronization on page 11 Enabling Support for Channel Utilization and Statistics on page 11 Disabling Rate Limiting in AMP Setup gt General In AMP Setup gt Gen
29. eral the SNMP Rate Limiting for Monitored Devices option adds a small delay between each SNMP GET request thus the actual polling intervals will be longer than what is configured For example setting a 10 minute polling interval will result in an actual 12 minute polling interval Disabling rate limiting is recommended in most cases To disable rate limiting in AirWave follow these steps Navigate to AMP Setup gt General Locate the Performance section on this page In the SNMP Rate Limiting for Monitored Devices field select No as shown in Figure 1 RA N N ma Select Save Figure 1 SNMP Rate Limiting in AMP Setup gt General Monitoring Processes 1 2 2 Maximum number of configuration processes 1 5 Maximum number of audit processes 1 10 3 SNMP Fetcher Count 2 6 2 Verbose logging of SNMP configuration O Yes No RAPIDS Processing Priority When AWMS is processing data at or near its maximum capacity reducing the priority of RAPIDS can ensure that processing of other data e g dient connections and bandwidth is not adversely impacted Low na The default priority is Low You can also tune your system performance by changing group poll periods Entering Credentials in Device Setup gt Communication AMP requires several credentials to properly interface with Dell PowerConnect W Series infrastructure To enter these credentials follow these steps l Navigate to Device Setup gt Communication
30. erprises 14823 2 3 1 11 1 2 1106 SNMPv2 SMI enterprises 14823 2 3 1 11 1 1 60 Hex STRING 07 D9 05 06 09 16 OF 00 2D 08 00 SNMP v2 SMI enterprises 14823 2 3 1 11 1 1 5 0 Hex STRING 00 1A 1E 6F 82 DO SNMPv2 SMI enterprises 14823 2 3 1 11 1 1 6 0 STRING aruba apSNMPv2 SMI enterprises 149823 2 3J lilluliulalu Res STRING OG LA 1E OG 2B 32 CNMPVZ SMI enterprises 14823 2 3 1 11 1 1 56 0 INTEGER 2 SNMP v2 SMI sent rprises 14823 2 3 s1 11 1 1 1740 STRING ar uba 124 c0 2b 32 SNMPy2 SMI ssenterprises 14823 2434 Lala bola 1840 INTEGER 11 SNMPv2 SMIs nterprises 14823 2 3 1 11 1 1 458 0 STRING http 10 51 5 118 screens wmsi reports html mode ap bssid 00 la le 6f 82 d0 Vi NOTE You will see many IDS and Auth Traps from this command AMP only processes a small subset of these Traps which display within AMP The Traps that AMP does process are listed above Ensure you disable qlogging after testing as it could negatively impact AMP performanee if left turned on root AMP qlog enable snmp traps Dell PowerConnect W AirWave 7 4 Best Practices Guide AMP and Dell PowerConnect W Series Integration Strategies 25 Understanding WMS Offload Impact on Dell PowerConnect W Series infrastructure When offloading WMS it is important to understand what functionality is migrated to AMP and what functionality is deprecated The following ArubaOS tabs and sections are deprecated after offloading WMS Plan
31. est Practices Guide See the Dell PowerConnect W AirWave 7 4 User Guide in Home gt Documentation for more information on the data displayed in the Radio Statistics page for these devices VisualRF and Channel Utilization To view how channel utilization is impacting an area within a building follow these steps l Navigate to a floor plan by clicking on the thumbnail on a device s APs Devices gt Monitor page or navigating to VisualRF gt Floor Plans page Select the Overlays menu Select Utilization overlay Select Current or Maximum over last 24 hours wa A YW N Select total default receive transmit or interference see Figure 16 Figure 16 Channel Utilization in VisualRF Interference Configuring Channel Utilization Triggers l Navigate to System gt Triggers and select Add 2 Select Channel Utilization from the Type drop down menu as seen on Figure 17 Figure 17 Channel Utilization Trigger Tgp Type Channel Utilization Severity Normal h Duration e g 15 minutes 75 seconds 1 hr 15 mins 15 minutes Matching conditions f al Any Available Conditions Interference 96 Radio Type Time Busy 2 Time Receiving 26 Time Transmitting 26 Add New Trigger Condition Ge Radio Type is 2 4Ghz 802 11 b g n interference 1 GH 5 F Folder Top Include Subfolders amp yes No Group All Groups r let Notifications Additio
32. iiso rn iesndnadassincnitoeasasdenensinsscotasntacs iai india dieta asda 5 Note Caution and Warning Icons ccsssssssescssssesssesecsesscsesececscsesessesesassesesassesecsusecansesesansesatenes 6 ENN 6 Chapter 1 NE 7 Prerequisites for Integrating Dell PowerConnect W Series Infrastructure 7 Chapter 2 Configuring AirWave for Global Dell PowerConnect W Series Infrastructure 9 Disabling Rate Limiting in AMP Setup gt General euesenmenmemmmmmmmeenesin 9 Entering Credentials in Device Setup gt COMMUNICATION mnaresvsvrnvrvrrenrsvrnrnvrveresvrnenerverenvnnene 9 Setting Up Recommended Timeout and Retries errar 10 Setting Up Time SynNChroniZation ccccceccscscssssesesecscsessesesececseseesesececseseeaesesesseseeaesesesaesesassneeeass 11 Setting up NTP on AirWaVe isis cosstsxseiecscnsrsxndederausasaadnentedscgnstvanniunielansoeacacnaueinsevapdnsaeni sisbucavecnens 11 Manually Setting the Clock on a Controller eterna 11 Enabling Support for Channel Utilization and Statistics resete 11 AirWave Setup icscascinsicindscaidnnneiisucesaovensausevertensssnesdantnenveninsienni sanwensnsbinodseaebivasnssuanicnineteineassovens 12 Controller Setup Master and Local ojeeererevsvrvrvrvrrererererereresesesvrrerrrereresenesesesesessrrerererns 12 Chapter 3 Configuring a Dell PowerConnect W Group in AMP reter 13 Basic Monitoring Configuration cccc
33. ing Period 15 minutes Device to Device Link Polling Period 30 minutes 802 11 Counters Polling Period 15 minutes Rogue AP and Device Location Data Polling 20 minutes oO Period CDP Neighbor Data Polling Period 30 minutes 10 Locate the Aruba Dell PowerConnect W section of this page as illustrated in Figure 6 11 Configure the proper SNMP Version for monitoring the Dell PowerConnect W Series infrastructure Dell PowerConnect W AirWave 7 4 Best Practices Guide Configuring a Dell PowerConnect W Group in AMP 13 Figure 6 Group SNMP Version for Monitoring SNMP Version AC E Offload WMS Database C Yes No Dell PowerConnect W GUI Config f yes No Ignore Rogues Discovered by Remote APs Ves No 12 Select Save and Apply Advanced Configuration Refer to the Dell PowerConnect W AirWave Configuration Guide at support dell com manuals for detailed instructions 14 Configuring a Dell PowerConnect W Group in AMP Dell PowerConnect W AirWave 7 4 Best Practices Guide Chapter 4 Discovering Dell PowerConnect W Series Infrastructure This chapter guides you through the process of discovering and managing your Dell PowerConnect W Series infrastructure AMP utilizes Dell PowerConnect W Series topology to efficiently discover downstream infrastructure Refer to the following earlier chapters in this book before attempting discovery Chapter 2 Configuring AirWave for Global Dell PowerConnect W Series Infrast
34. ion Summary Controller Summary Wired Access Points 2 Last SMin LastHour All Access Points Disconnected Sensors 0 Rogue APs Detected 32 32 33 Mesh Nodes Unprovisioned Access Points O Rogue APs Disabled RFProtect Sensors E Suspected Rogue APs ar Interfering APs Detected 135 Vi Access Points Ka abe commun WLAN Performance Summary Known Interfering APs Wired Mux Ports Last SMin Last Hour All Air Monitors 0 5 o Load Balancing Events 2 Q Q Router Summary IP Mob ty A N IP Mobility Interference Events Q 9 Routers Detected 3 Clients Bandwidth Exceeded Q Q Blacklist Chents Error Threshold Exceeded 0 Q Q Client Classification Summary Firewall Hits Last S5Min LastHour Al Ports Vaid Clients D D Inventory Interfering Clients Local Events Rog me WLAN Cattaneo WLAN Attack Summary DOS Attacks no summary data available in AMP Impersonation Attacks no summary data available in AMP Signature Pattern Matches partial summary data available on Home and RAPIDS gt Overview pages Policy Violations no summary data available in AMP Unauthorized Devices Detected no summary data available in AMP Rogue AP Classification Summary Rogue APs Detected summary data available on RAPIDS gt Overview Rogue APs Disabled no summary data available in AMP Suspected Rogue APs partial data is available in AMP on each APs Devices gt Manage page Interfering APs Detected partial data is available in AMP on each APs Devices gt Manage page 26 AMP and Dell Power
35. ive the classification messages If an administrative AMP user manually overrides the classification then AMP will send a re classification message to all applicable local controllers Dell PowerConnect W AirWave 7 4 Best Practices Guide WMS Offload Details 43 7 AMP periodically polls each Local controller s MIB to ensure state parity with the AMP database If the Local controller s device state does not comply with the AMP database AMP will send a re classification message to bring it back into compliance Vi NOTE The Rogue Detail page displays a BSSID table for each rogue that displays the desired classification and the classification on the device Benefits of using AMP as Master Device State Manager Ability to correlate state among multiple Master controllers This will reduce delays in containing a rogue device or authorizing a valid device when devices roam across a large campus Ability to correlate state of third party access points with ARM This will ensure Dell PowerConnect W Series infrastructure interoperates more efficiently in a mixed infrastructure environment Ability to better classify devices based on AMP wire line information not currently available in ArubaOS AMP provides a near real time event notification and classification of new devices entering air space RAPIDS gains additional wire line discovery data from Dell PowerConnect W Series controllers 44 WMS Offload Details Dell PowerConnect W AirWave 7
36. le wlsxSequenceNumberAnomalyAP snmp server trap enable wlsxSequenceNumberAnomalySta snmp server trap enable wlsxApFloodAttack snmp server trap enable wlsxInvalidMacOUIAP snmp server trap enable wlsxInvalidMacOUISta snmp server trap enable wlsxStaRepeatWEPIVViolation snmp server trap enable wlsxStaWeakWEPIVViolation snmp server trap enable wlsxStaAssociatedToUnsecureAP snmp server trap enable wlsxStaUnAssociatedFromUnsecureAP snmp server trap enable wlsxAPImpersonation snmp server trap enable wlsxDisconnectStationAttackAP snmp server trap enable wlsxDisconnectStationAttackSta K NOTE You will need to issue the write mem command 40 CLI ArubaOS and AMP Commands Dell PowerConnect W AirWave 7 4 Best Practices Guide Appendix B How AMP Acquires Data from Dell PowerConnect W Series devices Table 7 How AMP Acquires Data from Dell PowerConnect W Series devices Data Elements Controller Thin AP PY SNMPMIB SNMP Traps AMON CLI SSH WMS Offload RTLS Configuration interface User and client interfaces CD RE RO mm a o Lo o o mm x o 1 po jm amme o x Loo o AP radio interfaces CPU and memory utilization mm fa pp o TO mem x o Lo o o mm o o falo o o COCA 1 1 mma pa Lo o o mem a o 1 11 msm o o o La po o mms x Io 1 1 namn E O 1 CEEE E 1 11 mem o x po po TO mem 2 pf pa Memes x x mann 1 fa um o pf Lato o
37. ler Name config snmp server host lt AMP IP ADDR gt version 2c lt SNMP COMMUNITY STRING OF CONTROLLER gt Vi NOTE Ensure the SNMP community matches those that were configured in Chapter 2 Configuring AirWave for Global Dell PowerConnect W Series Infrastructure Controller Name config snmp server trap source lt CONTROLLER S IP gt Controller Name config write mem CAUTION Do not configure the SNMP version to v3 because AMP does not support SNMPv3 traps informs ArubaOS Traps Utilized by AMP The following are Auth IDS and ARM traps utilized by AMP Auth Traps on page 23 IDS Traps on page 23 ARM Traps on page 24 Auth Traps wlsxNUserAuthenticationFailed wlsxNAuthServerReqTimedOut IDS Traps wlsxwlsxSignatureMatchAP wlsxSignatureMatchSta wlsxSignAPNetstumbler wlsxSignStaNetstumbler wlsxSignAPAsleap wlsxSignStaAsleap wlsxSignAPAiyjack wlsxSignStaAirjack wlsxSignAPNullProbeResp wlsxSignStaNullProbeResp wlsxSignAPDeauthBcast wlsxSignStaDeauthBcastwIsxChannelFrameFrrorRateFxceeded wlsxChannelF rameF ragmentationRatelxceeded wlsxChannelFrameRetryRatelixceeded wlsxNIpSpoofingDetected wlsxStalmpersonation wlsxReservedChannelViolation wlsxValidSSIDViolation wlsxStaPolicyViolation wlsxRepeatWEPIVViolation wilsxWeakWEPIV Violation wlsxFrameRetryRateExceeded Dell PowerConnect W AirWave 7 4 Best Practices Guide AMP and Dell PowerConnect W Series Integration Strategies 23 wlsxFrameRe
38. ll PowerConnect W Series Integration Strategies Dell PowerConnect W AirWave 7 4 Best Practices Guide Figure 10 Verify IP Address on APs Devices gt Monitor Page Status Up OK Configuration Mismatched The settings on the device do not match the desired configuration policy Firmware 3 3 2 11 Licenses 3 Expired Controller Role Local RRP IP 10 1 1 242 Type Aruba 3600 Last Contacted 6 1 2009 1 50 PM Uptime 46 days 18 hrs 31 mins AT Lide ar wel RD 61 12 40 Serial AC0000303 Location 1344 Server Room Contact Aruba IT 1 SSID Total APs 266 Total Users 62 Bandwidth 2435 kbps Verify that there isa SNMPv2 community string that matches the SNMP Trap community string on the controller Controller Name f show snmp community SNMP COMMUNITIES public READ ONLY VI V2c Controller Name Show snmp trap host SNMP TRAP HOSTS HOST VERSION SECURITY NAME PORT TYPE TIMEOUT RETRY K A SNMPv2c pup lie 162 Trap N A N A Verify firewall port 162 default is open between AMP and the controller Validate traps are making it into AMP by issuing the following commands from AMP command line root AMP qlog enable snmp_traps root AMP tail f var log amp_diag snmp_traps 24162 7740 392556 handle Trap 1009 05 06 09155240 UDP 10 22 92 65 gt 40 0L 3 41 8 t 32737 sends trap DISMAN EVENT MIB sysUpTimeInstance Timeticks 127227800 14 days 17 24 38 00 SNMPv2 MIB snmpTrapOID 0 OID SNMPv2 SMI ent
39. ll of its downstream access points showing as Down in AMP 6 Assign controller to a Group and Folder 7 Ensure Monitor Only option is selected 8 Select Add 9 Navigate to APs Devices gt New page 10 Select the Dell PowerConnect W Master controller you just added from the list of new devices 11 Ensure Monitor Only option is selected 12 Select Add Local Controller Discovery Local controllers are added to AMP via the Master controller by a discovery scan or manually added in Device Setup gt Add After waiting for the Thin AP Polling Period interval or executing a Poll Now command from the APs Devices gt Monitor page the Local controllers will appear on the APs Devices gt New page Add the Local controller to Group defined previously Within AMP Local controllers can be split away from the Master controller s Group Vi NOTE Local Controller Discovery monitoring may not work as expected if Airwave is unable to communicate directly with the target device Be sure and update any ACL Firewall rules to allow AirWave to communicate with your network equipment Thin AP Discovery Thin APs are discovered via the Local controller After waiting tor the Thin AP Polling Period or executing a Poll Now command from the APs Devices gt Monitor page thin APs will appear on the APs Devices gt New page Add the thin APs to the Group defined previously Within Dell PowerConnect W AirWave thin APs can be split away from the contr
40. ller manually or by configuring the controller to use a Network Time Protocol NTP server to synchronize its system clock with a central time source Manually Setting the Clock on a Controller You can use either the WebUI or CLI to manually set the time on the controller s clock Navigate to the Configuration gt Management gt Clock page Under Controller Date Time set the date and time for the clock Under Time Zone enter the name of the time zone and the offset from Greenwich Mean Time GMT A WNW N To adjust the clock for daylight savings time click Enabled under Summer Time Additional fields appear that allow you to set the offset from UTC and the start and end recurrences 5 Click Apply Enabling Support for Channel Utilization and Statistics In order to enable support for channel utilization statistics you must have the following Dell PowerConnect W AirWave 7 2 or later ArubaOS 6 0 1 or later K NOTE AOS 6 0 1 can report RF utilization metrics while AOS 6 1 is necessary to also obtain classified interferer information Access points Dell PowerConnect W AP105 W AP92 W AP93 W AP125 W AP124 and W AP134 Controllers Dell PowerConnect W Series 6xx 3xxx or 6000 Dell PowerConnect W AirWave 7 4 Best Practices Guide Configuring AirWave for Global Dell PowerConnect W Series Infrastructure 11 AirWave Setup Follow these steps in AMP l Navigate to AMP Setup gt General 2 In the Additional AMP
41. n 2 Change SNMP Timeout setting to 10 3 Change SNMP Retries to 1 Figure 3 Timeout settings in Device Setup gt Communication SNMP Timeout 3 60 sec 10 SNMP Retries 1 20 3 4 Select Save 10 Configuring AirWave for Global Dell PowerConnect W Series Infrastructure Dell PowerConnect W AirWave 7 4 Best Practices Guide Setting Up Time Synchronization Setting up NTP on AirWave On the AMP Setup gt Network page locate the Network Time Protocol NTP section The Network Time Protocol is used to synchronize the time between AMP and your network reference NIP server NTP servers synchronize with external reference time sources such as satellites radios or modems K NOTE Specifying NTP servers is optional NTP servers synchronize the time on the AMP server not on individual access points To disable NTP services clear both the Primary and Secondary NTP server fields Any problem related to communication between AMP and the NTP servers creates an entry in the event log For more information on ensuring that AMP servers have the correct time please see http support ntp org bin view Servers NTPPoolServers Table 3 AMP Setup gt Network gt Secondary Network Fields and Default Values Setting Default Description ntp1 yourdomain com Sets the IP address or DNS name for the primary NTP server ntp2 yourdomain com Sets the IP address or DNS name for the secondary NTP server You can set the clock on a contro
42. nal Notification Options I Email I NMS Logged Alert Visibility By Role Suppress Until Acknowledged yes No ad cane Dell PowerConnect W AirWave 7 4 Best Practices Guide Dell PowerConnect W Specific Capabilities in AMP 31 Enter the duration evaluation period Select Add New Trigger Condition Create a trigger condition for Radio Type and select the frequency to evaluate Select total receive transmit or interference trigger condition oe es ae g Set up any restrictions or notifications refer to the Dell PowerConnect W AirWave 7 4 User Guide in Home gt Documentation for more details 8 When finished select Add Viewing Channel Utilization Alerts l Navigate to APs Devices gt Monitor or System gt Alerts 2 Sort the Trigger Type column and find Channel Utilization alerts View Channel Utilization in RF Health Reports l Navigate to Reports gt Generated 2 Find and select a Device Summary or RF Health report Figure 18 Channel Utilization in an RF Health Report Most Utilized by Channel Usage 2 4 GHz Rank Channel Busy 30 Interference 30 Number of Users Bandwidth bps Location Controller 1 AP0018 19bd bldo 85 43 83 86 ap lab wie 5500 2 APO01d alfc ca73a 85 04 83 86 default location wic 5500 3 Cisco 13 21 1E 67 72 59 45 default location wie 5500 4 AP10 64 57 63 39 Sales Office hellox Cisco4400 Viewing Controller License Information Follow these steps to view your controller s
43. ntroller Properties Controller Classification Confidence 4 Select Add KVMs Suspected Neighbor 1 a Yes No Matches Z Not Match E remove condition Undassified remove condition 5 Select desired controller classification to use as an evaluation in RAPIDS 6 Select Save Dell PowerConnect W AirWave 7 4 Best Practices Guide Dell PowerConnect W Specific Capabilities in AMP 35 36 Dell PowerConnect W Specific Capabilities in AMP Dell PowerConnect W AirWave 7 4 Best Practices Guide Appendix A CLI ArubaOS and AMP Commands Enable Channel Utilization Events Utilizing ArubaOS CLI Local and Master Controllers N CAUTION Enabling these commands on ArubaOS versions prior to 6 1 can result in performance issues on the controller SSH into the controller and enter enable mode and issue the following commands Controller Name configure terminal Enter Configuration commands one per line End with CNTL Z Controller Name config mgmt server type amp primary server lt AMP IP gt Controller Name config write mem Enable Stats With the ArubaOS CLI Local Controller in Master Local Environment K NOTE Do not use these commands if using AMP GUI VA CAUTION Enabling these commands on ArubaOS versions prior to 6 1 can result in performance issues on the controller SSH into the controller and enter enable mode and issue the following commands
44. ogue device classification amongst multiple Master Controllers in a Master Local environment or in an All Masters environment See the following topics WMS Offload Utilizing AMP on page 22 Understanding WMS Offload Impact on Dell PowerConnect W Series infrastructure on page 26 WMS Offload Details on page 43 When to Use RTLS A hospital wants to achieve very precise location accuracy 5 15 feet for their medical devices which are associating to the WLAN You want to locate items utilizing Wi Fi Tags K NOTE RTLS could negatively impact your AMP server s performance See Leveraging RTLS to Increase Accuracy on page 45 When to Define AMP as Trap Host You want to track IDS events within the AMP UI You are in the process of converting their older third party WLAN devices to Dell PowerConnect W and want a unified IDS dashboard for all WLAN infrastructure You want to relate Auth failures to a client device AP Group of APs and controller AMP provides this unique correlation capability See Define AMP as Trap Host using ArubaOS CLI on page 22 When to use Channel Utilization You have a minimum version of AOS 6 1 0 0 and Dell PowerConnect W AP105 or Dell PowerConnect W AP135 20 AMP and Dell PowerConnect W Series Integration Strategies Dell PowerConnect W AirWave 7 4 Best Practices Guide Prerequisites for Integration If you have not discovered the Dell PowerConnect W Series infrastructur
45. oller s Group You can split thin APs into multiple Groups if required Dell PowerConnect W AirWave 7 4 Best Practices Guide Discovering Dell PowerConnect W Series Infrastructure 17 18 Discovering Dell PowerConnect W Series Infrastructure Dell PowerConnect W AirWave 7 4 Best Practices Guide Chapter 5 AMP and Dell PowerConnect W Series Integration Strategies This chapter describes strategies for integrating AMP and Dell PowerConnect W Series and contains the following topics Integration Goals on page 19 Example Use Cases on page 20 Prerequisites for Integration on page 21 Enable Stats Utilizing AMP on page 21 WMS Offload Utilizing AMP on page 22 Define AMP as Trap Host using ArubaOS CLI on page 22 Understanding WMS Offload Impact on Dell PowerConnect W Series infrastructure on page 26 Integration Goals The following table summarizes the types of integration goals and strategies for meeting them in certain architectural contexts Table 4 ntegration Goals in All Masters or Master Local Architectures Integration Goals All Masters Architecture Master Local Architecture Rogue and Client Info pra tat Rogue containment only ssh access to controllers ssh access to controllers Rogue and Client containment WMS Offload WMS Offload Reduce Master Controller Load p WIS Offload debugging off Key integration points to consider include the following IDS Tracking does not requi
46. p enable wlsxSignStaNetstumbler snmp server trap enable wlsxSignAPAsleap snmp server trap enable wlsxSignStaAsleap snmp server trap enable wlsxSignAPAirjack snmp server trap enable wlsxSignStaAirjack snmp server trap enable wlsxSignAPNullProbeResp snmp server trap enable wlsxSignStaNullProbeResp snmp server trap enable wlsxSignAPDeauthBcast snmp server trap enable wlsxSignStaDeauthBcastwlsxChannelFrameErrorRateExceeded snmp server trap enable wlsxChannelFrameFragmentationRateExceeded snmp server trap enable wlsxChannelFrameRetryRateExceeded snmp server trap enable wlsxNIpSpoofingDetected snmp server trap enable wlsxStaImpersonation snmp server trap enable wlsxReservedChannelViolation snmp server trap enable wlsxValidSSIDViolation snmp server trap enable wlsxStaPolicyViolation snmp server trap enable wlsxRepeatWEPIVViolation snmp server trap enable wlsxWeakWEPIVViolation snmp server trap enable wlsxFrameRetryRateExceeded snmp server trap enable wlsxFrameReceiveErrorRateExceeded snmp server trap enable wlsxFrameFragmentationRateExceeded snmp server trap enable wlsxFrameBandWidthRateExceeded snmp server trap enable wlsxFrameLowSpeedRateExceeded snmp server trap enable wlsxFrameNonUnicastRateExceeded snmp server trap enable wlsxChannelRateAnomaly snmp server trap enable wlsxNodeRateAnomalyAP snmp server trap enable wlsxNodeRateAnomalySta snmp server trap enable wlsxEAPRateAnomaly snmp server trap enable wlsxSignalAnomaly snmp server trap enab
47. ponse 00 20 A6 49 92 AE HQ Southwest Corner eb3e 802 1la 39 7 17 2008 1 41 PM Dell PowerConnect W AirWave 7 4 Best Practices Guide Dell PowerConnect W Specific Capabilities in AMP 29 Remote AP Monitoring To monitor remote APs follow these steps l From the APs Devices gt List page filter on the Remote Device column to find remote devices 2 To view detailed information on the remote device select the device name The page illustrated in Figure 14 appears Figure 14 Remote AP Detail Page Monitoring ayre rap2wg in group aruba corp in folder Top gt cor p gt rap Poll Controller Now This Device is in monitor only with firmware upgrades mode Status Up OK Configuration Controller RAP OPS 02 Aruba AP Group Upstream Device Upstream Port Type Aruba RAP 2WG Remote Device Ye Last Contacted 6 1 2011 1 38 PM Uptime 10 days 20 hrs 22 mins LAN MAC Address 00 0B 86 C3 59 94 Serial 4H0000498 IP Address 10 230 205 107 Total Users 3 Bandwidth 6 04 Kbps Quick Links Open controller web UI v Run command v Notes Radios MAC Address Users BW Kbps Channel Radio Role Active SSIDs 802 11bg 00 0B 86 B5 99 40 2 6 04 6 19 5 dBm EnetO 00 0B 86 C3 59 94 0 Up Up fastEther Full N A 100 Mbps 100 Mbps Enet1 00 0B 86 C3 59 95 1 Up Up fastEther Full Split 100 Mbps 100 Mbps 3 You can also see if there are users plugged into the wired interfaces in the Connected Users list K NOTE Thi
48. re WMS Offload in an All Master or Master Local environment IDS Tracking does require enable stats in a Master Local environment WMS Offload will hide the Security Summary tab on Master Controller s web interface WMS Offload encompasses enable stats or enable stats is a subset of WMS Offload Unless you enable stats on the Local Controllers in a Master Local environment the Local Controllers do not populate their MIBs with any information about clients or rogue devices discovered associated with their APs Instead the information is sent upstream to Master Controller Dell PowerConnect W AirWave 7 4 Best Practices Guide AMP and Dell PowerConnect W Series Integration Strategies 19 Example Use Cases The following are example use cases of integration strategies When to Use Enable Stats You want to pilot Dell PowerConnect W AirWave and doesn t want to make major configuration changes to their infrastructure or manage configuration from AMP K NOTE Enable Stats still pushes a small subset of commands to the controllers via SSH See Enable Stats Utilizing AMP on page 21 When to Use WMS Offload You have older Dell PowerConnect W Series infrastructure in a Master Local environment and their Master controller is fully taxed Offloading WMS will increase the capacity of the Master Controller by offloading statistic gathering requirements and device classification coordination to AMP You want to use AMP to distribute client and r
49. rewall configuration for port 5050 default port supports bidirectional UDP communication between the AMP server s IP address and each access point s IP address Enable RTLS service on the AMP server To enable RTLS service on the AMP server follow these steps l Navigate to AMP Setup gt General and locate the AMP Additional Services section 2 Select Yes to Enable RTLS Collector 3 Anew section will automatically appear with the following settings RTLS Port match controller default is 5050 RTLS Username match the SNMPv3 MMS username configured on controller RTLS Password match the SNMPv3 MMS password configured on controller Figure 27 ATLS Fields in AMP Setup gt General Enable FTP Server required to manage Cisco Aironet 4800 APs also optionally for Aruba Cisco IOS Yes No and Trapeze firmware upgrades Enable RTLS Collector Aruba Alcatel Lucent only o Yes No RTLS Port 5050 RTLS Username rtistest RTLS Password esssssssos Confirm RTLS Password ee00000000 Use Embedded Mail Server o Yes No SendTestEmal 4 Select Save at the bottom of the page 46 Increasing Location Accuracy Dell PowerConnect W AirWave 7 4 Best Practices Guide Enable RTLS on Controller K NOTE RTLS can only be enabled on the master controller and it will automatically propagate to all local controllers SSH into master controller enter enable mode and issue the following commands Controller Name configure termin
50. ructure on page 9 Chapter 3 Configuring a Dell PowerConnect W Group in AMP on page 13 The following topics in this chapter walk through the basic procedure for discovering and managing Dell PowerConnect W Series infrastructure Discovering Master Controllers on page 15 Local Controller Discovery on page 17 Thin AP Discovery on page 17 NOTE Always add one Controller and its affiliated Thin APs into management or monitoring mode in a serial fashion one at a time K Adding new devices is a very CPU intensive process for AMP and can quickly overwhelm all of the processing power of the server if hundreds of Thin APs are added migrated from New to Managed or Monitoring simultaneously Discovering Master Controllers Scan networks containing Dell PowerConnect W Series Master controllers from Device Setup gt Discover or Manually enter the Master controller by following these steps in the Device Setup gt Add page l Select the Dell PowerConnect W series controller type and select Add The page illustrated on Figure 7 appears 2 Enter the Name and the IP Address for the controller 3 Enter SNMP Community String which is required field for device discovery NOTE Be sure to note the community string because it must match the SNMP Trap community string which is configured later in this document Dell PowerConnect W AirWave 7 4 Best Practices Guide Discovering Dell PowerConnect W Series Infrastru
51. s Chapter Chapter 1 Overview on page 7 Chapter 2 Configuring AirWave for Global Dell PowerConnect W Series Infrastructure on page 9 Chapter 3 Configuring a Dell PowerConnect W Group in AMP on page 13 Chapter 4 Discovering Dell PowerConnect W Series Infrastructure on page 15 Chapter 5 AMP and Dell PowerConnect W Series Integration Strategies on page 19 Chapter 6 Dell PowerConnect W Specific Capabilities in AMP on page 29 Appendix A CLI ArubaOS and AMP Commands on page 37 Appendix B How AMP Acquires Data from Dell PowerConnect W Series devices on page 41 Description This chapter explains the minimum requirements prerequisites topology of an Dell PowerConnect W Series infrastructure integrated with AMP This chapter explains global configuration options in AMP This chapter explains how to create and monitor an Dell PowerConnect W group in AMP This chapter explains how to discover and manage your Dell PowerConnect W Series infrastructure This chapter highlights recommended integration strategies This chapter highlights AMP capabilities that are specific to Dell PowerConnect W Series devices This appendix explains command line interface CLI commands This appendix provides a table that explains how AMP acquires data from Dell PowerConnect W Series devices Appendix C WMS Offload Details This appendix explains WMS Offload in further det
52. s 23 PA NU RD EEE EE EE EN 23 PAN esses indios E ecdese a eaantouanaambacee anlar eudeabacreseuees 23 PR EG EEE NE EE 24 Dell PowerConnect W AirWave 7 4 Best Practices Guide 3 4 Chapter 6 Appendix A Appendix B Appendix C Appendix D Ensuring That IDS and Auth Traps Display in AMP Using CLl ererovrnererrererre0r000000 24 Understanding WMS Offload Impact on Dell PowerConnect W Series infrastructure 26 Dell PowerConnect W Specific Capabilities in AMP tremer 29 Dell PowerConnect W Traps for RADIUS Auth and IDS Tracking cc ss 29 Remote AP Monitoring ccccescescssssesscsscsesseseesecsessessuseesessesenseasecseseesenseusessesensenseasessesatsansessessesens 30 ARM and Channel Utilization Information sesornvrrenrnnervavenrvenervenrnnervevervenesvenvsnervsvesvesesventsvesvenen 30 VisualRF and Channel Utilization sreorerrrvrrervrnervenvrrervrvervenervenervesesvesvenervevervesesversssesvevessenen 31 Configuring Channel Utilization TriQQe rs ccccessesscssssesssscesssssssseesssseseesssesesseseeaseneeeess 31 Viewing Channel Utilization Alerts rsresrornnonrnronrnvrverrsrrnrnvrvenenvenenvrvavenvensnennerenvrnsnesnevennensne 32 View Channel Utilization in RF Health Reports ccsscsssscsssscsessssesssesscseseesssecesseseserenes 32 Viewing Controller License Information ccccccssssesssscscssssesssecscsesesseseseceesesecsesecessesesassecesanseeas 32 Rogue Device Classifica
53. s feature is only available when the remote APs are in split tunnel and tunnel modes ARM and Channel Utilization Information ARM statistics and Channel utilization are very powerful tools for diagnosing capacity and other issues in your WLAN l Navigate to an APs Devices gt Monitor page for any of the following Dell PowerConnect W models Dell PowerConnect W AP105 W AP92 W AP93 W AP124 W AP125 W AP134 or W AP135 2 In the Radios table select a radio link under the Name column for a radio Figure 15 ARM and Channel Utilization Graphs AP Monitoring Radio Statistics Monitoring 802 11bgn radio for AP cheath rap5d Run a command X 802 11 Radio Counters Summary frames sec Current LastHour LastDay Last Week Unacked 1 1 1 0 Retries 0 0 0 0 Failures 0 il 1 0 Dup Frames 0 0 0 0 FCS Errors 2 2 2 0 Users Bandw Noise Power MAC P 802 11 Utilizat Users Bandwi Channel Noise Power MAC P 802 11 8 16 6 12 Pf 4 8 2 4 8 o 12 10 12 15 12 20 12 25 12 30 12 35 12 40 12 45 12 50 12 55 13 00 13 05 13 10 12 11 12 16 12 21 12 26 12 31 12 36 12 41 12 46 12 51 12 56 13 01 13 06 13 11 Show All Maximum Average Show All Maximum Average M wi Channel BM busy 22 8 14 6 O v Interference 3 9 2 M Receiving 13 4 5 9 O Transmitting 9 8 7 1 W 1 year ago Ny now 8 30 Dell PowerConnect W Specific Capabilities in AMP Dell PowerConnect W AirWave 7 4 B
54. tion m rrennenmmmmmmmmmmmmemmmenensnenmnnnimennvneere 33 Rules Based Controller Classification sasvrrrvarervrnvrvenerrervnvervrnervenerrenesvervsservenersesesvesvsnesvenns 34 Using RAPIDS Defaults for Controller Classification nmsrsrrvarenrrnrnvrvorenvrnrnvrvorenvrnenennns 34 Changing RAPIDS based on Controller Classification sssri 35 CLI ArubaOS and AMP Commands ernnrnvrvenvrveserrenerverervenerreervevesveverseresesvesssvesssvesssvenen 37 Enable Channel Utilization Events Utilizing ArubaOS CLI Local and Master Controllers 37 Enable Stats With the ArubaOS CLI Local Controller in Master Local Environment 37 Offload WMS Utilizing ArubaOS CLI and AMP CLI SNMP Walk 38 ADIOS GE EEE EN 38 MP SNA iets sepa wtcec ta pete acc trac cae nie 38 Ensuring Master Controller Pushes Config to Local Controllers Utilizing ArubaQS CLI 39 Disable Debugging Utilizing ArubaOS CLI teresa 39 Restart WMS on Local Controllers Utilizing ArubaOS CL 39 Conngure GE UA GEM EEE E E 39 Enable Proper Traps With the ArubaOS CLI sesreronronerenrsronrsvsvenrsvenenvsvaresvrnenernevesvensnervevennensne 40 How AMP Acquires Data from Dell PowerConnect W Series devices 41 WMS Offload Details enorrrrorrerorrenervenesvererverervevervsnesvsververeresvesesvesssresssvesessesesvesesvesenvenen 43 State Correlation ProCe SS ccccescssscsssssescsssecessecseceesecsesecsesesseseesessusacseseaseseusese
55. usatsesassesensesneanans 43 Benefits of using AMP as Master Device State Manager 44 Increasing Location ACCUraCy mmmmannsrarannnsenrannsnennennnvennsnvnnensennnnennennenennsnnsnesnsnnsnennsnnnnens 45 Understand Band Steering s Impact on Location mmmserservererervrvervrvervavervesesvesvrservenervesesvenenne 45 Leveraging RTLS to Increase ACCULaCY cccccsccsescsssscssssesssecsecsececssseceesessesensessusessusessnsanensanees 45 Deployment Topology ccccesessescssssessssessesssecseseeseseesesaesesauseesesecsesansesauseesusecsesaesesausessnsetees 45 FN 46 Enable RTLS service on the AMP Server 46 FEN NE ae st 47 Troubleshooting RILS cc ceesssesscessssesssecscsesecsesececsesesacseseceesssacsesesessesesanseseseesecaeseseeansesases 47 Wi Fi Tag Setup NENNE iii us aaron ceenestecacbitvseede me cuseennesiaeerasventeseectdeetuceereanecs 48 Dell PowerConnect W AirWave 7 4 Best Practices Guide Preface This preface provides an overview of the best practices guide and contact information for Dell and includes the following sections Document Organization on page 5 Note Caution and Warning Icons on page 6 Contacting Support on page 6 Document Organization This best practices guide includes instructions and examples of optimal ways to use and integrate the AirWave Management Platform AMP with Dell PowerConnect W Series devices and infrastructure Table 1 Document Organization and Purpose
56. ve and Apply This will push a set of commands via SSH to all Dell PowerConnect W Master Controllers If the controller does not have an SNMPv3 user that matches the AMP database it will automatically create a new SNMPv3 user AMP must have read write access to the controllers in order to push these commands 3 Navigate to Groups gt Basic and locate the Dell PowerConnect W section 4 Set the Offload WMS Database field to Yes as shown in Figure 9 2 NOTE This process will not reboot your controllers See Appendix A CLI ArubaOS and AMP Commands on page 37 for information on how to utilize ArubaOS CLI to enable stats or WMS Offload N CAUTION The SNMPv3 user s Auth Password and Privacy Password must be the same Do not enter these commands these are pushed by AMP while enabling WMS Offload configure terminal mobility manager lt AMP IP gt user lt AMP SNMPv3 User Name gt lt AMP Auth Priv PW gt stats update interval 120 write mem K NOTE AMP will configure SNMPv2 traps with the mobile manager command Define AMP as Trap Host using ArubaOS CLI To ensure the AMP server is defined a trap host SSH into each controller Master and Local enter enable mode and issue the following commands Controller Name configure terminal Enter Configuration commands one per line End with CNTL Z 22 AMP and Dell PowerConnect W Series Integration Strategies Dell PowerConnect W AirWave 7 4 Best Practices Guide Control
57. y given location The recommended is 4 for best results id 811 id 769 id 708 id 806 id 769 id 708 id 734 id 837 O ap SC MB 03 AP06 dBm 79 id 769 o ap SC MB 01 AP06 dBm 59 id 708 id 806 Ensure that the tags chirp on all regulatory channels 48 Increasing Location Accuracy 7E 00 4C E0 index 1 index 1 index 1 index 1 TE 00 4B 50 index 1 index 1 index 1 TE gt 00 4D 06 index 1 index 1 index 1 index 1 Dell PowerConnect W AirWave 7 4 Best Practices Guide
Download Pdf Manuals
Related Search