Home

Dell PowerConnect W-Airwave 7.2 User's Manual

1. 194 Using the Deauthenticate User Feature m unrrnernennmnenemmmnmmmmnemmnene 195 Evaluating User Status with the Users gt Diagnostics Page 195 Managing Mobile Devices with SOTI MobiControl and AWMS 198 Overview of SOTI MobiControl esee nnne 198 Prerequisites for Using MobiControl with AWMS rsrsvrnovonvnnrnvrvaresvrveresvensnvnvevenvenenn 198 Adding a Mobile Device Management Server for MobiControl 198 Accessing MobiControl from the Users gt User Detail Page 199 Monitoring and Supporting AWMS with the Home Pages eene 199 Monitoring AWMS with the Home gt Overview Page sese 199 Viewing and Updating License Information essent 201 Searching AWMS with the Home gt Search Page senes 202 Accessing AWMS Documentation essent nnns 203 Configuring Your Own User Information with the Home gt User Info Page 203 Monitoring and Supporting AWMS with the System Pages eee 205 Using the System gt Status Page tnnt 206 Using the System gt Event Log Page essent nnns 207 Using the System gt Configuration Change Jobs P
2. essere 20 Step 7 Changing the Default Root Password essere 20 Completing the Installation cccssssssessssescssssssessssssssesecscseseesesececsesecacsusecassesessesesaseesesanes 20 Configuring and Mapping Port Usage for AWMS essere 21 AWMS Navigation Basics rrnrrnrrnrnrnnrnvrvenrsvrvenrsvenenvnvenesvensnvnvsnesvrnsnvnnsvennensnennanssennsvensnnsnennsvennenenns 22 SEaliis SOD Hesse tiit EE EE 22 Navigation S T6 1010 PEINT 23 PTE Bee EE O NEN DRIED AME 24 heip G m the GU EEE EE aetsueratusianieomecters 25 Common List Settings ssacencseacasisesnccenessnessieaiendantrtsinaanansncbenrnai deunseataneieaninaueiastexseinatnacaesvensnaesnistes 25 PE and CONS sess 25 Getting Started with AWMS 21 Chapter 3 Eon 29 PTE 29 Formatting Ne Top HOS BL ester ptraxetieh pnt et riui Urn rs Gne ig onere intert irit te uiuit Une erd ise anni 29 Customizing Columns in LISTS scasieseess pepe ibd tcki asertivnte x aecwidFndnx Eb b D OUR RECO Vat a E nd 30 Dell PowerConnect W AirWave 7 2 User Guide 3 4 Chapter 4 Resetting Pagination Records nennen tnnt snnt n stans tastes rash anas 31 Using the T agineation WIE Lupen 31 Using CSV Export for Lists and Reports 31 Defining Graph Display Preferences rmm rmsnrnsnernnennemmmmmmenennnmnennmenemen 32 Customizing the Overview Subtab Display rrrnrnvnnoronvenonvrvorenvrnenv
3. 5 NB 12 Up 0 0 12 days 20 hrs 18 mins amp Mismatched iwicthin aps airespace airespace 4400 1 W Air Up 0 0 54 days 22 hrs 46 mins i Mismatched Access Points airespace airespace 44 Up 0 0 12 days 21 hrs 28 mins Bj Mismatched 4400 airespace Users 1 50 w of 325 Users Page iwof7 gt gt Username Role MAC Address a AP Device SSID VLAN AP Radio Connection Mode ChBW Association Time Duration logon 00 00 48 39 96 08 00 0b 86 c1 20 52 alpace alpace 51 802 11bg 802 11g 0 2 13 2009 12 50 PM 00 04 23 4C C1 33 AP2 ws5100 102 1 802 11b 802 11b 3 10 2009 5 22 PM 00 05 4E 4B 14 2bE E E zs 00 05 4E 4D 9D 6A E 00 05 4E 4F 86 B1 B a GuestLogon 00 06 25 2C A5 AD 00 0b 86 c1 30 52 guest 51 802 11bg 802 11b 0 1 23 2009 9 07 AM 00 09 EF 05 1E B2 z X 00 09 EF 05 20 CF E E gon 00 0A B8 7F 0B 01 00 0b 86 c1 20 52 51 802 11bg 802 11b 0 1 29 2009 2 25 PM GuestLogon 00 0A B8 7F 0B 11 ap Not set dpb test guest 51 802 11bg 802 11b 0 1 29 2009 2 19 PM 00 0A B8 7F 0B 1E Z x 00 0C F1 38 0F A6 E E 3 E 00 0E 38 49 08 31 RADIO1 101 il 802 11b 802 11b 0 3 5 2009 3 18 PM 00 0E 38 49 08 3E ap Not set guest 51 802 113 802 11a 0 2 24 2009 1 08 PM pp Q0 0E 9B CC CE F3 00 0E 9B D7 35 BA ap open ops 0 802 11a 802 114 1 29 2009 8 59 AM 00 0F 86 B1 D5 3F 00 0F CB B2 33 A4 00 11 24 C6 2B 52 00 11 F5 53 AE 0F 802 11b 802 11b 2 5 2
4. Fa0 24 Access FastEthernet0 24 ethernetCsmacd FastEthernet IEEE 802 3 uplink to switch 1 port 44 Fa0 24 Fa0 3 Access FastEthernet0 3 ethernetCsmacd FastEthernet IEEE 802 3 FastEthernet0 3 Fa0 3 Fa0 4 Access FastEthernet0 4 ethernetCsmacd FastEthernet IEEE 802 3 FastEthernet0 4 Fa0 4 Fa0 5 Access FastEthernet0 5 ethernetCsmacd FastEthernet IEEE 802 3 FastEthernet0 5 Fa0 5 1 20 w of 26 Interfaces Page 1 of2 gt gt Virtual Interfaces New Interface A Edit Interfaces 1 9 w of 9 Interfaces Page 1 wof1 Choose Columns Choose Columns for Roles CSV Export Oo Tum Catalyst VLAN No 00 18 18 9E C9 41 L1 visi Vlan51 propVirtual Catalyst VLAN Vl51 No 10 51 0 26 00 18 18 9E C9 42 E Vvi59 Vlan59 propVirttual Catalyst VLAN VI59 No 00 18 18 9E C9 43 V50 Vlan50 propVirttual Catalyst VLAN Vlan50 VI50 No 00 18 18 9E C9 41 w vil Vlani propVirtual Catalyst VLAN Vlani Vli No 00 18 18 9E C9 40 m vi59 Vlan59 propVirttual Catalvst VLAN Vlan59 VI59 No 00 18 18 9E C9 43 You will remain on the same page but will have the option to make changes to the most commonly edited settings in batch mode as shown in Figure 100 Figure 100 Multiple Interface Editing Page Illustration Tee INE nmcIWe JR T EUREN MEAN VI50 propVirtual Catalyst VLAN vI50 Yes ONo Vsi Vlan51 propVitual Catalyst VLAN visi Yes No 10 51 0 26 oO
5. eese enean ennt tnnt tnn tn tna tastes tnn 251 Bluesocket Configuration essent tnnt nnns 257 Dell PowerConnect W AirWave 7 2 User Guide Appendix C Appendix D Appendix E Appendix F Appendix G Appendix H Dell PowerConnect W AirWave 7 2 User Guide ReefEdge Integration cccccssesesssssssccssescssesseecsessesessesessesessesecsuseeseseesesaesesausesausessuseesesausasensess 251 ReefEdge Configuration Lena 258 HP ProCurve 700wl Series Secure Access Controllers Integration 258 Example Network Configuration rorarevoronrrvorenrrronrrverenrsvenrsvnnsnesvenenesvrnsnenvevesvnnsnenvevenns 258 HP ProCurve 700wl Series Configuration eese nnns 258 Access FOM NORS pva ee 261 Resetting Cisco VxWorks Access Points essent 261 Connecting OE re 261 Determining the Boot Block Version ccccssesessescssesesecessesesscsessesecseessuseeseseesesaseesansess 262 Resetting the AP for Boot Block Versions from 1 02 to 11 06 262 Resetting the AP for Boot Block Versions 11 07 and Higher 263 Cisco IOS Dual Radio Template esses nennen nnns 263 Speed Issues Related to Cisco IOS Firmware Upgrades ssesss 264 AWMS Firmware Upgrade Process sesenta 264 Initi
6. 4 RADIUS Servers Select All Unselect All 3 To add a RADIUS server or edit an existing server select Add New RADIUS Server or the corresponding pencil icon to edit an existing server Table 50 describes the settings and default values of the Add Edit page Table 50 Adding a RADIUS Server Fields and Default Values Setting Default Description Hostname IP Address Sets the IP Address or DNS name for RADIUS Server NOTE IP Address is required for Proxim ORINOCO and Cisco Aironet IOS APs Secret and Confirm Sets the shared secret that is used to establish communication between AWMS and the Secret RADIUS server NOTE The shared secret entered in AWMS must match the shared secret on the server Authentication No Sets the RADIUS server to perform authentication when this setting is enabled with Yes ee CL o Ste rsd oman bere ar ve DSe Tse one Sst te seem date AP Was rae one ADUS ene Max Retries Sets the number of times a RADIUS request is resent to a RADIUS server before failing 0 20 NOTE If a RADIUS server is not responding or appears to be responding slowly consider increasing the number of retries 4 Select Add to complete the creation of the RADIUS server or select Save if editing an existing RADIUS server The Groups gt AAA Servers page displays this new or edited server You can now reference this server on the Groups gt Security page AWMS supports reports for subsequent RADIUS Authent
7. Threat Level The numeric threat level by which the device has been classified according to rules defined on the RAPIDS gt Rules page Refer to Using RAPIDS and Rogue Classification on page 165 for additional information Cc Ea S ses aro Ear Slane s TT 7 T NN Using the New Users Report The New Users Report lists all new users that have appeared on the network during the time duration defined for the report This report covers the user identifier the associated role when known device information and more The report definition can filter on connection mode wired wireless or both 234 Creating Running and Emailing Reports Dell PowerConnect W AirWave 7 2 User Guide ligure 168 illustrates the fields and information in the New Users Report Figure 168 New Users Report Illustration Daily New Users Report for All Groups Folders SSIDs and Roles T x ML XHTML export 2 6 2010 12 00 AM to 2 7 2010 12 00 AM E CSV export Generated on 2 7 2010 12 16 AM Jii Email this report Hew Users Print report 1 8 w of 9 New Users Page iw of 1 Username Role MAC Address Vendor AP Device Association Time w Duration VoFi 00 03 24 00 03 24 Unidata Communication Systems Inc Operations AL25 1 20 2009 6 25 PM 38 mins NETWORKS abc employee 00 16 CF 00 16 CF Hon Hai Precision Ind Co Ltd ExecutiveSuite AL16 1 20 2009 5 17 PM 17 mins 00 03 24 00 03 24 Cisco Linksys LLC HQ Engineering 1 20 2009 2 46PM 5 mins wi
8. What Next Go to additional tabs in the AMP Setup section to continue additional setup configurations Complete the required configurations in this chapter before proceeding Dell support remains available to you for any phase of AWMS installation Creating AWMS User Roles The AMP Setup gt Roles page defines the viewable devices the operations that can be performed on devices and general AWMS access VisualRF uses the same user roles as defined for AWMS users can see floor plans that contain an AP to which they have access in AWMS although only visible APs appear on the floor plan Users can also see any building that contains a visible floor plan and any campus that contains a visible building NOTE In VisualRF gt Setup gt Server Settings a new flag added in AWMS 7 2 allows you to restrict the visibility of empty floor plans K to the role of the user who created them In previous versions a floor plan without APs could be visible to all users By default this setting is setto No When a new role is added to AWMS VisualRF must be restarted for the new user to be enabled Refer to the VisualRF User Guide in Home gt Documentation for additional information User roles can be created that have access to folders within multiple branches of the overall hierarchy This feature assists non administrative users such as help desk or IT staff who support a subset of accounts or sites within a single AWMS deployment You can
9. essen 105 Chapter 5 Discovering Adding and Managing Devices eene 107 Device Discovery QvervieWw nrmrrrnsnnnmnmmmmmmmemmmuuenenenenmnmeneimmn 107 Discovering and Adding Devices ennt nnt nnn 107 SNIMIPIEEEEP SERBIEN EEE 107 Adding Networks for SNMP HTTP Scanning eene 108 Adding Credentials for SNMP HTTP Scanning 108 Defining a SNMP HTTP Scan Set tnnt 109 Running EH DIE EEE 110 Enabling Cisco Discovery Protocol CDP essen 111 Authorizing Devices to AWMS from APs Devices gt New Page 111 Manually Adding Individual Devices eese 112 Adding Devices with the Device Setup gt Add Page sss 112 Adding Multiple Devices from a CSV File eene 114 Adding Universal Devices essent ennt tnnt tn nnns 115 Assigning Devices to the Ignored Page rararrnrnnvnvanvnnrnvnvenvanvnvenvnnrnvnvenvnvenvnnennsnnnnsnnnvennnne 116 MT uiro rn Urbi Er Codes A ects OS UDIN ADU EIE Une bUNENEU DUE US 116 Viewing Device Monitoring Statistics essent 117 Understanding the APs Devices gt Monitor Pages for All Device Types 118 Monitoring Data Specific to Wireless Devices esses 118 Evaluating Radio Statistics for an AP sss teens 123
10. information related to the Provides an additional summary information related to the trigger Agent Lists the name of the AP that generated the trigger Selectthe name to display its APs Devices Manage page Time Displays the date and time the trigger was generated 000000 the date and time the trigger was generated LN AT the severity code associated with that trigger Responding to Alerts Once you have viewed an alert you may take one of the following courses of action Leave it in active status if it is unresolved The alert remains on the New Alerts list until you acknowledge or delete it If an alert already exists the trigger for that AP or user does not create another alert until the existing alert has been acknowledged or deleted Move the alert to the Alert Log by selecting it and selecting Acknowledge You may see all logged alerts by selecting the View logged alerts link at the top of the System gt Alerts page Select the New Alerts link to return to the list of new alerts Delete the alert by selecting it from the list and selecting Delete Monitoring and Supporting WLAN Users The AWMS Users pages support WLAN users in AWMS This section describes the Users pages as follows Overview of the Users Pages Monitoring WLAN Users with the Users gt Connected and Users gt All Pages Supporting Guest WLAN Users With the Users gt Guest Users Page Supporting RFID Tags With the Users
11. Cisco IOS Dual Radio Template A dual radio Cisco IOS AP template is included as reference Template created from Cisco Aironet 1240 IOS 12 3 11 JA1 newName at 2 12 2007 10 14 AM by user admin ignore and do not push gt ntp clock period lt ignore and do not push version 12 3 no service pad Service timestamps debug datetime msec Service timestamps log datetime msec Service password encryption hostname hostname enable secret 5 1SceH2S 1BN2DQpOOoBAz KI20pH7 ip subnet zero ip domain name example com ip name server 10 2 24 13 no aaa new model dotll ssid OpenSSID authentication open power inline negotiation prestandard source username newpassword password 7 05050318314D5D1A0E0A0516 username Cisco password 7 01300F175804 bridge irb interface DotliRadio0 senableds no ip address no ip route cache ssid OpenSSID speed basic 1 0 basic 2 0 b sic 5 5 6 0 9 0 basic 11 0 12 0 16 0 24 0 36 0 48 0 54 0 channel channel station role root bridge group 1 bridge group 1 subscriber loop control bridge group 1 block unknown source no bridge group 1 source learning no bridge group 1 unicast flooding bridge group 1 spanning disabled if interface DotliRadiol interface DotliRadiol no ip address no ip route cache Senabled ssid OpenSSID dfs band 3 block speed basic 6 0 9 0 basic 12 0 18 0 b sic 24 0 36 0 49 0 54 0 channel channel station role root bridge group 1 Dell PowerConnect W AirWave 7 2 User Guide Access Point Notes
12. Connecting to the AP Perform these steps to return VxWorks Access Points to their default state and to reset the unit l Connect the COM I or COM 2 port on your computer to the RS 232 port on the AP using a straight through cable with 9 pin male to 9 pin female connectors 2 Opena terminal emulation program on your computer e NOTE The instructions below assume that you are using Microsoft HyperTerminal other terminal emulation programs are similar but may vary in certain minor respects 3 Goto the Connection Description window enter a name and select an icon for the connection and select OK 4 Goto the Connect To window field and use the pull down menu to select the port to which the cable is connected then select OK 5 In the Port Settings window make the following settings Bits per second baud 9600 a Data bits 8 Panty None Stop bits I Flow Control Xon Xoft 6 Click OK 7 Press Enter Dell PowerConnect W AirWave 7 2 User Guide Access Point Notes 261 Determining the Boot Block Version The subsequent steps that you must follow to reset the Cisco AP depend on the version of the AP s boot block Follow the steps below to determine which boot block version is currently on your AP then use the corresponding instructions detailed below When you connect to the AP the Summary Status screen appears Reboot the AP by pressing CTRL X or by unplugging and then re plugging the
13. Once an incident has been created select the pencil icon in the incident list to edit the information The status or urgency can be changed as the case progresses and more detailed information about the incident can be added Snapshots can also be related to Remedy incidents as described above However snapshots are only stored locally on the AWMS server they are not pushed to the Remedy server Dell PowerConnect W AirWave 7 2 User Guide Using the AWMS Helpdesk 253 254 Using the AWMS Helpdesk Dell PowerConnect W AirWave 7 2 User Guide Appendix Package Management for AWMS Yum for ANMS This appendix describes the Yum packaging management system Dell PowerConnect W recommends running Yum to ensure your packages are up to date and so that your AWMS is as secure as possible if you are running RHEL 5 or CentOS 5 Yum is an automated package management system that verifies AWMS is running the most recently released RPMs and upgrades any out of date packages Yum accesses the Internet and downloads and installs new versions of any installed RPMs It is important to keep the AWMS RPMs current to close any known security holes in the OS as quickly as possible To run Yum on a CentOS 5 machine follow the instructions below l Before running Yum for the first time you need to install the GPG key The GPG key is used to validate the authenticity of all packages downloaded by Yum To install the GPG key type rpm import
14. Two pages in AWMS support Dell PowerConnect W Configuration Device Setup gt Dell PowerConnect W Configuration for global Dell PowerConnect W Configuration Groups gt Dell PowerConnect W Config for group level Dell PowerConnect W Configuration For additional information that includes a comprehensive inventory of all pages and settings that support Dell PowerConnect W Configuration refer to the Dell PowerConnect W Configuration Guide located in AWMS under Home Documentation VisualRF VisualRF is a powerful tool for monitoring and managing radio frequency RF dynamics within your wireless network to include the following functions and benefits Accurate location information for all wireless users and devices Up to date heat maps and channel maps for RF diagnostics Adjusts for building materials Supports multiple antenna types Floor plan building and campus views Visual display of errors and alerts Easy import of existing floor plans and building maps Planning of new floor plans and AP placement recommendations RAPIDS RAPIDS is a powerful and easy to use tool for monitoring and managing security on your wireless network to include the following features and benefits Automatic detection of unauthorized wireless devices Rogue device classification that supports multiple methods of rogue detection Wireless detection Uses authorized wireless APs to report other devices within range Calculates and displays rogue
15. is page s URL is https gau e com public 2 3 9 enterprise test 32 bit scalability pag up fg fp gt 3 Joule airespace arm 1 0 F aruba 0 8 Eu Joule gt aruba 0 6 a guest user amp C3 thin aps Es a wms Category Current 24hr Max 0 2 a BW Out 0 bps 0 bps a 16 40 17 00 17 20 17 40 18 00 18 20 p Maximum Average Cy ios BW In 0 bps 0 bps E Avg Bits Per Second In O bps O bps E Max Bits Per Second In O bps O bps I meru Users 0 0 Bl Avg Bits Per Second Out O bps O bps Routers and switches E Max Bits Per Second Out O bps O bps H symbol Up APs 1 1 ON trapeze Down APs 0 0 Lu 9 mms200 test 0 8 necp Last Contacted 1 18 2011 6 19 PM 95 H 13 Supermicro 64 bit scalability 0 4 Ric E i 0 0 16 40 17 00 17 20 17 40 18 00 18 20 Maximum Average E Number of U 0 0 16 40 17 00 17 20 17 40 18 00 18 20 Maximum Av ge El Up APs 1 1 E Down APs 0 0 Click on a graph for history The Public Portal supports configuration of the iPhone interface This can be configured using the Master Console AWMS page See Defining General AWMS Server Settings on page 34 Adding a Managed AMP with the Master Console Perform the following steps to add a managed AWMS console l Navigate to the Home gt Managed AMPs page 212 Performing Daily Administration in AWMS Dell PowerConnect W AirWave 7 2 User Guide 2 Select the pencil icon to edit or reconfigure an existing AWMS console or select Add New Managed AMP to
16. 0 0 00 ethersphere 1322 Top Access Points 2188 6 3 0 73 50 60652800 i 308 00 ethersphere 1322 Top Access Points Most Noise 5 GHz Rank a Device Average olse Channel Changes Average Channel Utilization Semberof Users Bandwidth bps Location Controller Folder Group t 1394 74 50 1 1 10138 00 ethersphere 1322 Top Access Points 2 2198 79 00 4 2 44596 00 ethersphere 1322 Top Access Points 3 1310 86 00 1 15 2439711 00 ethersphere 1322 Top Access Points 4 1350 87 00 1 6 383120 00 ethersphere 1322 Top Access Points 5 ap105 A1 87 00 18 0 0 00 pit Aruba 3400 Top Access Points 6 00 24 6c c8 70 b5 87 50 1 0 0 00 Aruba3200 3 121 Top Access Points 7 00 1a 1e c0 1a dc 87 50 1 0 0 00 Aruba3200 3 121 Top Access Points 8 1260 88 00 5 2 73432 00 ethersphere 1322 Top Access Points 9 1242 H 88 00 1 8 2098072 00 ethersphere 1322 Top Access Points 10 1248 88 00 13 1 6185 00 ethersphere 1322 Top Access Points Most Noise 2 4 GHz p 1350 53 00 1 0 ethersphere 1322 Top Access Points 2 2103 61 50 3 0 a ethersphere 1322 Top Access Points 3 1154 Q 71 50 9 1 419 00 ethersphere 1322 Top Access Points 4 2188 73 50 6 1 308 00 ethersphere 1322 Top Access Points 5 RADIOS 73 50 1 0 0 00 rfs7000 primary Top Access Points 6 00 1a 1e c0 6c 46 77 00 16 0 0 00 Aruba3600 US Top Access Points 7 APO01d alfc ca7a 77 50 7 25 20 0 0 00 default location 5500 6 0 196 0 Top Access Points 8 1372 81 50 5 0 0 0
17. 263 bridge group 1 ubscriber loop control bridge group 1 block unknown source no bridge group 1 source learning no bridge group 1 unicast flooding bridge group 1 spanning disabled Sendif interface FastEthernetO0 no ip address no ip route cache duplex auto Speed auto bridge group 1 no bridge group 1 source learning bridge group 1 spanning disabled interface BVII1 Sif ip dhcp ip address dhcp client id FastEthernetO Sendif if ip static ip address ip address netmask Sendif no ip route cache Sif ip static ip default gateway gateway Sendif ip http server no ip http secure server ip http help path http www cisco com warp public 779 smbiz prodconfig help eag access list 111 permit tcp any any neq telnet snmp server view iso iso included snmp server community public view iso RW control plane bridge 1 route ip line con 0 line vty 0 4 login local end Speed Issues Related to Cisco IOS Firmware Upgrades AWMSS provides a very robust method of upgrading firmware on APs To ensure that firmware is upgraded correctly AWMS adds a few additional steps which are not included in vendor supplied management software AWMS Firmware Upgrade Process l AWMS reads the firmware version on the AP to ensure the firmware to which the AP is upgrading is greater than the actual firmware version currently running on the AP 2 AWMS configures the AP to initiate the firmware download from AWMS AWMS monitors its
18. Add New Guest User Adds a new guest user to a controller via AWMS Username Randomly generates a user name for privacy protection This name appears on the Guest User detail page Enabled Enables or disables the user status Set the status of the guest user as active enabled or expired disabled Ena Diss NN WLAN Profile Sets the SSID that the guest user can access This setting applies to Cisco WLC only Status Reports current status by the controller If error messages appear in this column select the user with the checkbox at left and select the Repair guest user errors button Guest users associated to the wireless network appear on the same list as other wireless users but are identified as guest users in the Guest User column The User Detail page for a guest user also contains a box with the same guest information that appears for each user on the Users gt Guest Users list 5 To add a new guest user select Add and complete the fields illustrated in Figure 135 Table 113 above describes most fields The first three fields are required and the remaining fields are optional 192 Performing Daily Administration in AWMS Dell PowerConnect W AirWave 7 2 User Guide Figure 133 Users gt Guest Users gt Add New Guest User Page Illustration Guest User Username rs Generate Password wNzcyuz7du Generate Name cust gt Enabled Yes C No Email name emai com Company Name Company i tstst s
19. Confirm Telnet SSH Password enable Password Confirm enable Password SNMPv3 Username Auth Password Confirm Auth Password SNMPv3 Auth Protocol MD5 v Privacy Password Confirm Privacy Password SNMPv3 Privacy Protocol IDES w Table 89 Groups gt Templates gt Add Template Fields and Default Values Default Description Use Global Template Uses a global template that has been previously configured on the Groups gt Templates configuration page Available templates will appear in the drop down menu If Yes is selected you can also configure global template variables For Symbol devices you can select the groups of thin APs to which the template should be applied For more information about global templates see the Groups Templates section of the User Guide 152 Creating and Using Templates Dell PowerConnect W AirWave 7 2 User Guide Table 89 Groups gt Templates gt Add Template Fields and Default Values Continued Setting Default Description selects an AP from which to fetch a configuration The configuration will be turned into a template with basic AP specific settings like channel and power turned into variables The variables are filled Fetch with the data on the APs Devices Manage page for each AP AP Type Cisco IOS Any Determines that the template applies to APs or devices of the specified type If Cisco IOS Any Model Model is selected the template applies to all IO
20. Dell PowerConnect W AirWave 7 2 User Guide Discovering Adding and Managing Devices 111 Figure 69 APs Devices gt New Page Illustration To discover more devices visit the Discover page 1 2 w of 46 APs Devices Page 1 wof23 gt gt Choose Columns CSV Export Device Controller a Type Discovered sponiS 19bd bido 500 6 0 196 0 Cisco Aironet 1200 LWAPP 1 19 2011 2 26 PM C 00 0b 86 c1 8b 98 ethersphere 1322 Aruba AP 65 1 17 2011 1 12 PM 1 2 w of 46 APs Devices Page 0f 23 gt gt Select All Unselect All View Ignored Devices Group access Points Not Manage Falder Top Aruba AP Group Auto Detect LWAPP AP Group Auto Detect amp Monitor Only Firmware Upgrades C Manage Read Write Add Ignore Delete 2 Select the group and folder to which the device will be added from the drop down menu the default group appears at the top of the Group listing Devices cannot be added to a Global Group groups designated as Global Groups cannot contain access points 3 Select either the Monitor Only or the Manage Read Write radio button and select Add At this point you can go to the APs Devices gt List page and select the folder s to which you have assigned one or more devices to verify that your device has been properly assigned If you wish to assign a device to the Ignored page or delete it entirely from AWMS go to step 4 NOTE If you select Manage Select Devices AWMS aut
21. Guest User Preferences Allow creation of Guest Users ves C No Allow accounts with no expiration ves No Allow sponsor to change sponsorship username C ves No Custom Message Add Cancel 3 Enter or edit the settings on this page lable 19 describes these settings in additional detail As explained earlier in this section Roles define the type of user level access the user level privileges and the view available to the user for device groups and devices in AWMS Table 19 describes the settings and default values of this section Table 19 AMP Setup Roles Add Edit Roles Fields and Default Values Setting Default Description Sets the administrator definable string that names the role Dell PowerConnect W recommends that the role name give an indication of the devices and groups that are viewable as well as the privileges granted to that role Enabled Yes Disables or enables the role Disabling a role prevents all users of that role from logging in to AWMS Dell PowerConnect W AirWave 7 2 User Guide Configuring AWMS 45 Table 19 AMP Setup gt Roles gt Add Edit Roles Fields and Default Values Continued Setting Default Description Type AP Device Defines the type of role AWMS supports the following role types Manager AMP Administrator The AMP Administrator has full access to AWMS and all of the devices Only the AMP Administrator can create new users or access the AMP Setup page
22. SNMP HTTP scanning information is provided in these sections Adding Networks for SNMP HTTP Scanning explains how to enable networks that have been defined for scanning Adding Credentials for SNMP HTTP Scanning explains how to define network credentials for scanning Credentials must be defined before using them in scan sets Defining a SNMP HTTP Scan Set explains how to create a scan set by combining networks and credentials when scanning for devices Running a Scan Set provides a procedure for running a scan set Adding Networks for SNMP HTTP Scanning The first step when enabling SNMP HT IP scanning for devices is to define the network segments to be scanned Perform these steps l Goto the Device Setup gt Discover page and locate the Networks section 2 In the Networks section select Add New Scan Network The Scan Network page appears as shown in Figure 65 Alternatively you can edit an existing scan network by selecting the corresponding pencil icon The New Edit Networks page also appears in this instance Figure 65 Device Setup gt Discover gt New Network Section Illustration Networks dy 3 Inthe Name field provide a name for the network to be scanned for example Accounting Network 4 In the Network field define the IP network range or the first IP address on the network to be scanned One example would be 10 52 0 0 5 Enter the Subnet Mask for the network to be scanned for e
23. System gt Performance Displays basic AWMS hardware information as well as resource usage over time Refer to Using the System gt Performance Page on page 208 Dell PowerConnect W AirWave 7 2 User Guide Performing Daily Administration in AWMS 205 Using the System gt Status Page The System gt Status page displays the status of all of AWMS services Services will either be OK Disabled or Down If any service is Down displayed in red please contact Dell support The Reboot System button provides a graceful way to power cycle your AWMS remotely when it is needed The Restart AWMS button will restart the AWMS services without power cycling the server or reloading the OS Figure 147 illustrates this page Figure 147 System Status Page lllustration Refresh Diagnostic report file for sending ta customer support diagnostics tar gz VisualRF diagnostics report file visualRFdiag tar gez Service a Airbus Message Server Alert Cache Builder Alert Monitor Asynchronous Work Scheduler At AWNMS News Fetcher Cisco ACS Cisco VLSE Poller Client Monitor Yorker Configuration Monitor Configuration Server Cron Database Device List Cacher Device Monitor Device Monitor Poll New Discovery Event Existing 4P Cacher DNS Fetcher DNS Refresh Failover Monitor Firmware Server FTP Server Guest User Credential Enabler HTTPYSNMP Scanner LAPP Managed Certificate Builder Master Console MC Report Runner M
24. create a new AWMS console The Managed AMP page appears Complete the settings on this page as described in Table 123 Table 123 Managed AMP Fields and Default Values Field Default Description Hostname IP Address N A Enter the IP address or Hostname of the AWMS server to be managed Polling Enabled Yes Enables or disables the Master Console polling of managed AWMS server Polling Period Determines how frequently the Master Console polls the managed AWMS server Username N A The username used by the Master Console to login to the managed AWMS server The user needs to be an AP Device Manager or AWMS Administrator Password N A The password used by the Master Console to login to the managed AMP Confirm Password HTTP Timeout Defines the timeout period used when polling the managed AMP server 5 1000 sec Manage Group Defines whether the Master Console can manage device groups on the managed Configuration AMP server 3 When finished select Add to return to the Managed AMPs list page Using Global Groups with Master Console To push configurations to managed groups using the AWMS Global Groups feature follow these steps 1 Navigate to the Master Console s Groups gt List page 2 Select Add to add a new group or select the name of the group to edit settings for an existing group 3 Select the Duplicate icon to create a new group with identical configuration to an existing group Groups created on the Master Console will a
25. era EE EE 17 20 naming the network administration system 19 Fackape Mana emiemi eiiiai re reer ere 255 protocol and POL Ge aet cete diabete 21 Pros el vn 91 on CUL M 77 PIMP ve 97 radio settings contieurine for SIOUDS seira riniki tina aien eua ava Ds rex ds 87 EG EE EE 124 PoI EEE EE EE SE 79 zu ent GE LA GR SEE EE 52 configuring authentication and authorization 54 A a a E EE EEU MIU 55 RAPID TM 24 165 EE EN 14 KG SE tra deti bira d nU 219 creating running and emailing eese 219 defining CHLORIDE DOE EEE 242 RP CANE rer 237 Ke Go EE 237 IOS ELG E I EE 165 rogue devices Conhiourine VV LSE sne Lasses 56 VEN 56 KOL LEO EE ere E UE 20 routers and switches Acie wilha CSV leisgein vikaa Enana ANni 114 S scanning demine e d EE NC 108 security TT enn 63 connerie Ne te dts i sanus 61 configuring group security settings eeeeeeeeeee 80 configuring group SSIDs and VLANS 83 GOBITOUEIDS DL E A 52 ceris twi rada OG s LP 52 iot Coraes PETS N NE DD M 62 RAPIDS and rogue classification 165 EA MGE Ge eae nee eee ee 181 servers GE SCIO EE EE ER 34 SEIE EEE 245 SNMP polline Period EE RF 74 DN 83 S ole EE EE eee eee 78 91 149 Dell PowerConnect W AirWave 7 2 User Guide T TE Skee 79 configuring suthen ups IOLocueaasss oucucitinubeun aime nisu itus 52 Mn 52 I m eee 150 TN ouedeestitd cime t
26. 0 240 min o Acknowledged Alerts 0 550 days zero disables 60 Top Header Traps from managed devices 0 550 days zero ha Stats New Devices disables Iv Up Wired amp Wireless Up Wired Archived Device Configurations 0 100 zero disables 10 l Up Wireless Archive device configs even if they only have rogue C n M Down Wired amp Wireless dassffications Yes No Down Wired Down Wireless Guest Users 0 550 days zero disables 30 Iv Mismatched V Rogues Closed Helpdesk Incidents 0 550 days zero disables 30 Iv Users Inactive SSIDs 0 550 days zero disables 425 Iv Alerts Inactive Interfaces 0 550 days zero disables 425 Select All Unselect All Interface Status History 0 550 days zero disables 425 i IV Fat APs v Thin APs Interfering Devices 0 550 days zero disables 14 Iv Controllers lv Switches Firmware Upgrade Defaults M Others Allow firmware upgrades in monitor only mode C Yes No Select All Unselect All Simultaneous Jobs 1 20 bo O Simultaneous Devices Per Job 1 1000 20 Search Preferences Er IV APs Devices Failures before stopping 0 20 zero disables 1 IV Users Connected IV Users Historical Additional AMP Services v 4 Folders Enable FTP server required to manage Cisco WLC and Groups Aironet 4800 APs optional for FTP upgrades on C Yes No lv Tags supported devices lv Rogues Enable RTLS collector Aruba Dell PowerConnect W only Yes No Se
27. 0 8 bits Discovered BSSIDs and LAN MAC addresses which are within this bitmask will be combined into one device 4 4 8 requires all but the last two digits match aa bb ccidd ee xx Wireless BSSID Correlation 0 8 bits Similar BSSIDs will be combined into one device when they Fall within this bitmask Setting this value too high may result in identifying two different physical devices as 4 the same rogue Note When you change this value RAPIDS will not immediately combine or un combine rogue records Changes will occur during subsequent Delete Rogues not detected for 0 14 days zero disables Cannot be larger than the roque discovery event lo expiration 14 configured on the AMP Setup page unless that value is set to 0 the classification of those rogues in RAPIDS including the Contain classification Manage rogue AP containment in monitor only mode Containment updates will always be pushed to devices running WMS offload regardless of this setting ves C No Maximum number of APs to contain a rogue The maximum number of APs that will contain a rogue on 3 Cisco WLC controllers Filtering Options Filter Ad hoc Rogues Yes C No Filter Rogues by Signal Strength ves No Minimum Signal Strength Less than or equal to 0 EE Enter minimum signal strength in dBm Rogues will not be recorded until they exceed this signal strength Hd renne cu ga Filter Rogues Discovered by Remo
28. 9 Manage Read Write Select Manage Read Write on the Management Mode field 4 Select Save and Apply then Confirm Edit on the confirmation page to retain these settings and to push configuration to the device 5 For device configuration changes that require the device to reboot use the Schedule function to push the changes at a time when WLAN users will not be affected 6 To move multiple devices into managed mode at once use the Modify these devices link Refer to Modifying Multiple Devices on page 102 for more information Configuring AP Settings 1 Browse to the APs Devices gt List page and select the wrench icon next to the device whose AP settings you want to edit This directs you to the Manage page for that device Figure 94 illustrates this page Dell PowerConnect W AirWave 7 2 User Guide Discovering Adding and Managing Devices 133 Figure 94 APs Devices gt Manage Page Illustration General Name ap125 meshportal karen Status Up OK Configuration Good Last Contacted 2 12 2010 10 29 AM Type AP 125 Controller sphere Ims Group sphere Ims Folder Top gt HQ Management Mode O Monitor Only Firmware Upgrades Manage Read Write Notes Settings Name ap125 meshportal karen Domain Name Location Contact Latitude 10 02450899096407 Longitude 0 7395866645358211 Attitude m 0 Group sphere Ims3 v Folder HQ iM Auto Detect Upstream Device 9 Yes O No Upstream device wil automatic
29. CDC InnerWireless Normal 1 min 3 12 2009 10 24 AM 250 Aeroscout Ltd 50 secs 3 12 2009 10 24 AM h InnerWireless Normal 2 mins 3 12 2009 10 23 AM InnerWireless Normal 0 mins 3 10 2009 10 00 AM 202 Performing Daily Administration in AWMS Dell PowerConnect W AirWave 7 2 User Guide 1 Enter the keyword or text with which to search If searching for a MAC address enter it in colon delimited format K NOTE The AWMS Search utility is case insensitive 2 Select Search and the results display after a short moment Results support several hypertext links to additional pages and drop down menus allow for additional filtering of search returns Search results are categorized in the following sequence Categories of search results can be customized on the Home gt User Info page to limit the scope of information returned Not all categories below may offer returns for a given search Devices Users Rogues Tags Folders and Groups Accessing AWMS Documentation The Home gt Documentation page provides easy access to all relevant AWMS documentation All of the documents on this page are hosted locally by AWMS and can be viewed by any PDF viewer Figure 145 illustrates this page Figure 145 Home gt Documentation Page Illustration AirWave Management Platform Quickstart Guide User Guide Aruba Configuration Guide Supported Wireless Devices Supported Wireless Firmware Versions Supported Wired Devices If you hav
30. Continued Field All Folders Default Description Specify the groups and folders to be covered in the report by choosing All Groups or All Folders or specifying Use selected groups or Use selected folders in the drop down menu If Use selected groups is chosen a menu with checkboxes appears allowing you to choose the groups to include in the report Device Blank Add a specific alpha numeric string for finding devices that match that which you entered Note Search Filter that once you enter a search string new or deleted devices that match the search string will automatically be included or excluded in all future reports generated until you delete or change the search string For certain reports such as New User and User Session will allow you to search devices associated with a specific user or device All SSIDs This field displays for most report types When this field appears and when you select Use Selected IDs a new list of SSIDs displays Check select the specific SSIDs to be included in the report Report Start Blank These fields establish the time period to be covered by the report These fields are supported for Report End most report types When these fields do not appear the report provides a snapshot of current status rather than information covering a period of time Times can be entered in relative or absolute form A start date of 6 months 3 weeks 5 days 9 hours ago and an end tim
31. Har log mdn log Har log papi Har log msgHandler log Har log http fetcher Har log perf callector Har log persistent tuple spaces Har log maillog Ivarflog radius radius log Har log amp report runner Har log rogue filter Har log rtls Har log snmp enabler Har log snmp fetcher Harflog snmp v2 fetcher Ivarllog snmp trap handler Ivarflog syncd Ivarllog expire wifi tags Har log tuple spaces Hvar flog yisualrf log Har log httpd ssl error_log fvarflog wep key setter Har lbg whitelist collector Har lbog work queue clobber logger Har log nightly maintenance Harflog system audit lag Ivarllog telnet cmds Upgrade to 6 4 beta6 tmp AMP 5 4 beta6 upgrade log 4 Additional Log Files Restart AWMS Reboot System e The link diagnostics tar gz contains reports and logs that are helpful to Dell support in troubleshooting and solving problems Your Dell support representative may ask for thus file along with other logs that are linked on this page e Similarly the VisualRFdiag zip link contains VisualRF diagnostic information that might be requested by AirWave support A summary table lists logs that appear on the System gt Status page These are used to diagnose AWMS problems Additional logs are available via SSH access in the var log and tmp directories AirWave support 206 Performing Daily Administration in AWMS Dell PowerConnect W AirWave 7 2 User Guide engineers may request these logs for help in trou
32. SSID which is a 32 character user defined identifier attached to the header of packets sent over a WLAN It acts as a password when a mobile device tries to connect to the network through the AP and a device is not permitted to join the network unless it can provide the unique SSID None Sets a user definable name associated with SSID VLAN combination Indicates the number of the VLAN designated as the Native VLAN typically for management purposes 84 Configuring and Using Device Groups in AWMS Dell PowerConnect W AirWave 7 2 User Guide Table 53 Groups gt SSIDs gt SSID VLAN Section Fields and Default Values Continued Setting Service Priority Cisco VxWorks only Maximum Allowed Associations 0 2007 Broadcast SSID Cisco WLC Proxim and Symbol 4131 only Partial Closed System Proxim only Unique Beacon Proxim only Block All Inter Client Communication Default Description Identifies the delivery priority which packets receive on the VLAN SSID VxWorks only Indicates the maximum number of mobile users which can associate with the specified VLAN SSID NOTE 0 means unlimited for Cisco For specific devices as cited this setting enables the AP to broadcast the SSID for the specified VLAN SSID This setting works in conjunction with the Create Closed Network setting on the Groups Security configuration page Proxim devices support a maximum of four SSIDs NOTE This option should be
33. Setting this value to 0 disables this function and the trap information will never expire or be deleted from the database sets the number of archived configurations to retain for each device Sets the number of days that AWMS is to support any guest user A value of 0 disables this function and guest users will never expire or be deleted from the AWMS database sets the number of days that AWMS is to retain records of closed Helpdesk incidents once closed Setting this value to 0 disables this function and Helpdesk information will never expire or be deleted from the database sets the number of days AWMS retains historical information after AWMS last saw a client on a specific SSID Setting this value to 0 disables this function and inactive SSIDs Will never expire or be deleted from the database Sets the number of days AWMS retains inactive interface information after the interface has been removed or deleted from the device Setting this value to 0 disables this function and inactive interface information will never expire or be deleted from the database Sets the number of days AWMS retains historical information on interface status Setting this value to 0 disables this function Sets the number of days AWMS retains historical information on interfering devices Setting this value to 0 disables this function 7 Locate the Default Firmware Upgrade Options section and adjust settings as required This section allows you to confi
34. as follows General Detines general administrative parameters for the Cisco WLC WLAN Security Defines encryption and RADIUS servers QoS Detines quality of service QoS parameters for the Cisco WLC WLAN Advanced Defines advanced settings that are available only with Cisco WLC devices for example AAA override coverage DHCP and DTIM period NOTE Refer to Cisco documentation for additional information about Cisco WLC devices and related features Figure 46 Groups Cisco WLC Config WLANs Add New SSID VLAN General Tab lllustration General Security Qos Advanced mE Prafile SSD Guest LAN C Yes No WLAN ID 1 512 Admin Status Yes No Specify Interface Name ves No Interface management Radio Policy All Broadcast SSID C Yes No ad fame Dell PowerConnect W AirWave 7 2 User Guide Configuring and Using Device Groups in AWMS 93 Figure 47 Groups gt Cisco WLC Config gt WLANs gt Add New SSID VLAN gt Security Tab Illustration Encryption Mode No Encryption Web Policy Authentication v Preauthentication ACL Override Global Config vas C No Web Authentication Type External External Web Authentication URL cisco aut RADIUS Authentication Server 1 Select RADIUS Authentication Server 2 Select RADIUS Authentication Server 3 Select Enable AAA Accounting Servers vas No RADIUS Accounting Server 1 Selec
35. corpnetwork com employee 00 21 FE 3A E2 75 AL10 Corporate 1 corporate voip 66 802 11bgn 802 11g 8 13 2009 12 03 PM COMPANYNETWORKYuserid2 employee 00 14 A4 34 CA 3F AL12 Corporate 1 corporate wpa2 65 802 11an 802 113 8 13 2009 12 02 PM Duration Auth Type Cipher Auth Time Sig Qual BW LAN IP Address LAN Hostname Guest User VPN IP Address VPN Hostn 3 mins EAP 35 days 3 hrs 14 mins 0 No 3 mins EAP 21 hrs 47 mins 0 No 3 mins EAP 13 days19hrs30 mins 0 No Table 112 Users gt Connected Table Columns and Links Field Description Username Displays the name of the user associated to the AP AWMS gathers this data from device traps SNMP polling or RADIUS accounting Usernames appear in italics when a username for that MAC address has been stored in the database from a previous association but AWMS is not getting a username for the current association This may indicate that the user has not yet been authenticated for this session or AWMS may not be getting a username from an external source Specifies the role by which the user is connected MAC Address Displays the radio MAC address of the user associated to APs Also displays a link that redirects to the Users gt Detail page AP Device Displays the name of the AP to which the MAC address is associated Also displays a link that takes you to this AP s AP Monitoring page ros srir te group comaina Te AP Darte saroso MN sso srate ss winch aera Displays the 802
36. gt Choose Columns GeV Export Device Type a 3 kion User 3Com WX1200 3Com WX1200 7 0 4 4 0 0 AWMS also enables CSV exporting of all report types For more information see Exporting Reports to XML or CSV on page 246 Defining Graph Display Preferences Many of the graphs in AWMS are Flash based which allows you adjust the graph settings attributes as shown in Figure 10 Figure 10 Flash Graphs on the Home gt Overview Page User Count Last 2 hours fol Bandwidth Last 2 hours Hull 20 14M 15 800 k 12 200 k 8 400 k 4 1M 1 6 M 14 50 15 50 16 50 14 50 15 50 16 50 Maximum Average Show All Maximum Average W Number of Users 20 users 16 users w Bits Per Second Gut 1 4 Mbps 316 8 kbps w Bits Per Second In 1 5 Mbps 262 kbps tvearago ca om amp This Flash enabled GUI allows for custom settings and adjustments as follows e Drag the slider at the bottom of the screen to move the scope of the graph between one year ago and the current time e Drag the slider between graphs to change the relative sizes of each e Deselect checkboxes to change the data displayed on each graph The button with green arrows refreshes data on the graph e The Show All link displays all of the available checkboxes supporting the Flash graphs e Once a change to the slider bars or to the display boxes has been made the same change can be applied to all other Flash graphs with an apply butto
37. gt List page and select a group for which to add or edit templates This can be a new group created with the Add button or you can edit an existing group by selecting the corresponding pencil icon The Groups gt Basic page for that group appears Additional information about adding and editing groups is described in Configuring and Using Device Groups in AWMS on page 69 2 From the AWMS navigation pane select Templates The Templates page appears Figure 105 illustrates the Groups gt Templates configuration page and Table 58 describes the columns Figure 108 Groups Templates Page lllustration for a Sample Device Group Group Acme Corporation Note No template is available for Cisco Aironet 1200 IOS devices with firmware version 12 3 8 JA2 Note No template is available for Cisco Aironet 1200 IOS devices with firmware version 12 3 8 JEC p oJ Note No template is available for Cisco Aironet 1240 IOS devices with firmware version 12 4 10b JDA Note No template is available for Aruba 5000 devices with firmware version 3 3 2 10 Note No template is available for Aruba 5000 devices with firmware version 3 3 2 4 Note No template is available for Aruba 2400 devices with firmware version 3 3 2 10 Note No template is available for Symbol W55100 devices with firmware version 3 2 0 0 040R Note No template is available for Cisco Aironet 1250 IOS devices with firmware version 12 4 10b JA3 vailable for Aruba 3400 devices wi
38. navigate to the APs Devices gt Monitoring page for a supported AP and select the Statistics link in the Interfaces section as illustrated in Figure 79 Figure 79 Statistics link on APs Devices Monitoring for an AP First Radio 802 11bgn Statistics MAC Address Users 0 Bandwidth 0 kbps a Channel 1 Transmit Power 9 dBm Antenna Type Internal Second Radio 802 11an Statistics MAC Address Users Bandwidth 0 kbps Channel 153 Transmit Power 9 dBm Antenna Type Internal Wired Interface EnetO MAC Address Users Overview of the Radio Statistics Page The Radio Statistics page displays transmit and receive statistics about the communication quality of individual radios Depending on the AP assigned group profiles and recent activity on this radio this data gives visibility into recent and historical changes in the network fetches real time statistics from the AP s controller indicates actively interfering devices requires Dell APs set to Spectrum mode and summarizes major issues Viewing Real Time ARM Statistics Dell AP Groups that have the Adaptive Radio Management ARM feature enabled continuously optimize each AP to use the best channel and transmission power settings available An AP configured with ARM will automatically adjust to a better channel if it reaches a configured threshold for noise MAC errors or PHY errors additionally it can attenuate transmit power and switch between radio modes as need
39. or un combine rogue records Changes will occur during subsequent processing of discovery events This value cannot be larger than the rogue discovery event expiration 14 configured on the AMP Setup page unless that value is set to 0 Whether to scan the operating system of rogues Enabling this feature will cause RAPIDS to perform an OS scan when it gets in IP address for a rogue device The OS scan will be run when a rogue gets an IP address for the first time or if the IP address changes Using RAPIDS and Rogue Classification 167 Table 94 RAPIDS gt Setup gt Classification Options Fields Field Default Description Acknowledge Rogues by Sets RAPIDS to acknowledge rogue devices upon initial detection prior to their Default classification Manually Classifying Defines whether acknowledgement happens automatically whenever a rogue device Rogues Automatically receives a manual classification Acknowledges them Filtered rogues are dropped from the system before they are processed through the rules engine This can speed up overall performance but will eliminate all visibility into these types of devices Table 95 RAPIDS Setup Filtering Options Field Default Description Filter Ad hoc rogues Filter Rogues by Signal Filters rogues according to signal strength Since anything below the established Strength threshold will be ignored and possibly dangerous we do not recommend enabling this setting Instead we
40. 0 0 0 Secondary DNS IP Address 10 1 1 0 Secondary Network Interface Enabled Yes 9 No Perform the following steps to define the AWMS network settings Dell PowerConnect W AirWave 7 2 User Guide Configuring AWMS 41 l Locate the Primary and Secondary Network Interface sections The information in these sections should match what you defined during initial network configuration and should not require changes Table 16 describes the settings and default values Table 16 Primary and Secondary Network Interface Fields and Default Values Setting Default Description IP Address Sets the IP address of the AWMS network interface This address must be a static IP address Hostname f None Sets the DNS name assigned to the AWMS server Subnet Mask None Sets the subnet mask for the primary network interface Gateway None Sets the default gateway for the network interface Primary DNS IP None Sets the primary DNS IP address for the network interface Secondary DNS IP None Sets the secondary DNS IP address for the network interface Secondary Network Select Yes to enable a secondary network interface You must also define the IP Interface address and subnet mask 2 On the AMP Setup gt Network page locate the Network Time Protocol NTP section The Network Time Protocol is used to synchronize the time between AWMS and your network reference NTP server NTP servers synchronize with external reference time sources such as s
41. 11 mode by which the user is connected Mode Ch BW Displays the channel bandwidth that currently supports 802 11n users Displays the Radio mode used by the user to associate to the AP for 802 11n clients Mode Displays the first time AWMS recorded the user for this association Displays the length of time the MAC address has been associated Auth Type Displays the type of authentication employed by the user WPA2 EAP PEAP is the standard setting EAP is reported by Dell PowerConnect W devices and Cisco VxWorks via SNMP traps RADIUS accounting servers integrated with AWMS will provide the RADIUS Accounting Auth type Web PAP Captive Portal All others are considered to be not authenticated Displays WEP with keys This data is also displayed in the User Session report in the Session Data By User section 190 Performing Daily Administration in AWMS Dell PowerConnect W AirWave 7 2 User Guide Table 112 Users gt Connected Table Columns and Links Continued Field Description Auth Time Displays the how long ago the user authenticated NOTE This value displays as a negative number for unauthenticated users Sig Qua Displays the average signal quality the user enjoyed Displays the average bandwidth consumed by the MAC address Displays the VisualRF QuickView box including heatmap for a device and user location history LAN IP Address Displays the IP assigned to the user MAC AWMS gathers it from the associa
42. 16 55 12 20 Users 2 Bandwidth D kbps Channel 11 Transmit Power 9 dem Antenna Type Internal Second Radio 802 11an MAC Address 00 1A 1E 55 12 30 Users 6 Bandwidth 280 kbps Channel 149 Transmit Power 15 dem Antenna Type Internal Notes Users on AL Last 1 day bed Bandwidth on AL Last 1 day tol Location HQ Floor 1 m Enlarge First Floor von a PENERE ER o Show All Maximum Average Show All Maximum Average ro Q V Max Users Radio 1 0 users 0 users Q v Avg In Radio 1 0 bps 0 bps JD 4 i Q iV Max Users Radio 2 13 users 4 users Q iV Avg In Radio 2 465 1 kbps 31 8 kbps Q V Avg Out Radio 1 0 bps 0 bps B iv Avg Out Radio 2 11 6 Mbps 126 8 kbps E 1 year ago fy now gS Connected Users 1 11 w of 11 Connected Users Page 1 w of 1 Choose Columns Choose Columns for Roles CSV Export Username Role MAC Address SSID VLAN AP Radio Connection Mode Ch BW Association Time w Duration Auth Type Cipher Auth Time Sig Qual BW kaveh employee 00 21 5C 00 86 57 wpa2 65 802 11an 802 11n 5GHz HT40 2 17 2010 11 40 AM 34 mins WPA2 AES 34 mins 24 3 kbps guest visitor 00 1F 3C 23 91 DE wpa2 63 802 11an 802 11a 2 17 2010 10 59 AM 1 hr 15 mins No Encryption PAP ihri5mins 42 2 kbps marcus employee 00 21 5D 98 A1 82 wpa2 65 802 11an 802 11n 5GHz HT40 2 17 2010 9 39 AM 2 hrs 35 mins WPA2 AES 2hrs35 mis 42 24 kbps laanderson employee 00 1C 26 C5 39 D3 wpa2 65 802 11an 802 11a 2 17 2010 9 18 AM 2 hrs 55 mins WPA2 AES 2hr
43. 183 days it will only include Channel Changes Transmit Power Changes Average Utilization Mac Phy Errors and Average Noise based on whatever part of the report intersects the last 183 days This differs from most reports because other data like bandwidth and users maxes out at 425 days and AWMS validates reports so you can only run them over a 366 day duration Using the Rogue Containment Audit Report The rogue containment audit report that lets you know if any containment is failing Figure 175 illustrates the fields and information in this report type Figure 173 Rogue Containment Audit Report Page Illustration T XML XHTML export Rogue Containment Audit Report for All Groups and Folders CSV export Generated on 12 1 2009 4 33 PM lil Email this report Print report 1 8 w of 8 Rogues Contained Page lwof1 Export to CSV Controller 4 Rogue BSSID Containment State Desired Containment State Location Airespace 5500 Apple ED 3B 17 00 03 03 ED 3B 17 Contained Not Contained Signal strength gt 75 dBm Airespace 5500 Senao Inte 43 7B B1 00 02 6F 43 7B B1 Contained Not Contained Signal strength gt 75 dBm Airespace 5500 Cisco 9F 75 90 00 1D 45 9F 75 90 Not Contained Contained Manual Classification Override Aruba2400 Enterasys 36 5C 18 00 01 F4 36 5C 18 Contained Not Contained Signal strength gt 75 dBm Aruba2400 Enterasys 37 4A C3 00 01 F4 37 4A C3 Contained Not Contained Signal strength gt 75 dBm Aruba2400 Cisco
44. 2009 3 04 PM 1 20 2009 11 23 AM User MAC Address Username RADIUS Server Event Time XML XHTML export Bi csv export ia Email this report f Print report Client authentication failed for 00 21 5C 85 BD 0B 00 21 5C 00 21 5C 1 20 2000 11 59 PM airespace 1 Client authentication failed for 00 21 5C 85 BD 0B 00 21 5C 00 21 5C 1 20 2000 11 59 PM airespace 1 Client authentication failed for 00 21 5C 85 BD 0B 00 21 5C 00 21 5C 1 20 2009 11 58 PM airespace 1 c Client authentication failed for 00 21 5C 85 BD 0B 00 21 5C 00 21 5C 1 20 2000 11 58 PM airespace 1 E E Client authentication failed for 00 21 5C 85 BD 0B 00 21 5C 00 21 5C 1 20 2009 11 57 PM airespace 1 SN Client authentication failed for 00 21 5C 85 BD O0B 00 21 5C 00 21 5C 1 20 2009 11 57 PM airespace 1 Using the RF Health Report The RF Health Report tracks the top AP radio issues by noise MAC Phy errors channel changes transmit power changes mode changes and interfering devices the last two apply only if there are ARM events This report assists in pinpointing the most problematic devices on your network and lists the top 10 devices by problem type Problematic APs are displayed in two separate lists Problem Radios lists grouped by radio frequency A device will make it into the list if it violates two or more thresholds For more on the thresholds that indicate problems refer to Evaluating Radio Statistics for an
45. 42 29 O 63 6 50 O 64 2 12 O Other 1 33 Figure 178 User Session Detail gt Cipher Information Session Data by Cipher 1 2 of 2 Ciphers Page lwof 1 Cipher AES 2 Ciphers Number of Users by Cipher Number of Users 219 221 of Users 99 10 0 90 100 00 Amount of Time 105 days 7 hrs 44 mins 30 mins 105 days 8 hrs 14 mins E 65 71 7 OD 63 16 5 i 56 7 83 DO 64 3 00 O Other GQ Der of Time MB Used 79 989 229006 24 100 00 0 02 0 04 0 00 100 00 229006 28 100 00 Amount of Time Spent by Cipher of MB Used Average Signal Quality Number of Sessions 35 46 773 12 18 4 ffi MB Used by Cipher E unkn B AES 99 1 a ah own E unknown Bl AES Dell PowerConnect W AirWave 7 2 User Guide 99 gs a 02 E unknown B AES 100 Creating Running and Emailing Reports 241 Figure 179 Summary and User Information partial view User Session Summary Number of sessions 5313 Number of unique users 348 Number of quest users 0 Number of unique APs 27 Average session duration 1 hr 17 mins Total traffic MB 174258 20 Average traffic per session MB 32 80 Average traffic per user MB 500 74 Average bandwidth per user kbps 47 30 Average signal quality 30 50 Session Data by User 1 10 w of 348 Session Data by User Page 1 wof35 gt gt CSV Export MAC Address a Usernames Roles Amount of Time MB Used Avg Bandwidth kbps Average Signal Qua
46. AMP provides basic integration with any NMS through SNMP traps To enable AMP provides additional integration functionality with HP ProCurve Manager PCM by integration 1 configure individual AMP traps on Triggers page with a notification generating User Defined Action uda and User Defined Trigger trg files To option of WMS and 2 configure the NMS destination parameters below enable this integration 1 generate PCM files in zip format for all ProCurve devices via the link below 2 transfer the zip file to the External directory on the PCM Download the AMP MIB files server and 3 unzip the file PCM will load the integration files after a restart of the client Add i Ca nc The default External directory is Hostname Port SNMP Version Enabled C Program Files Hewlett Packard PNM per ver kong VlevConfig externi O 10 51 1 7 162 2 Yes Generate PCM zip file Select All Unselect All NMS servers for other roles Role Name Hostname Port SNMP Version Enabled C AP Device Management 10 51 1 7 162 2c No 2 Select Add to integrate a new NMS server or select the pencil icon to edit an existing server Provide the information described in Table 34 Table 34 AMP Setup NMS Integration Add Edit Fields and Default Values Setting Default Description Hostname None Cites the DNS name or the IP address of the NMS Port 162 Sets the port AWMS uses to communicate with the NMS NOTE AWMS generally communicates via
47. AMP will need HTTPS access port 443 to the watched AMP to verify that the web page is active and to fetch downloads Once the Failover AMP determines that the Watched AMP is not up based on the user defined missed poll threshold it will restore the data backup of the Watched AMP and begin monitoring the watched AMP APs and devices There are many variables that affect how long this will take including how long client historical data is being retained but for an AMP with 1 000 APs it might take up to 10 minutes For an AMP with 2 500 APs it might take as long as 20 minutes The Failover AMP will retain its original IP address In summary the Failover AMP could take over for the Watched AMP in as little as five minutes it might take up to an additional 10 20 minutes to unpack the watched AMP data and begin monitoring APs The most important factors are the missed poll threshold which is defined by the user and the size of the watched AMP backup which is affected by the total number of APs and by the amount of data being saved especially client historical data To restore the Watched AMP run the backup script from the command line and copy the current data file and the old Watched AMP configuration file to the Watched AMP Then run the restore script More information about backups and restores can be found in Backing Up AWMS on page 214 Table 125 Home gt Watched Page Fields and Default Values Setting Default Description IP
48. AP s configuration file Dell PowerConnect W AirWave 7 2 User Guide Creating and Using Templates 159 username Cisco privilege 15 password 7 0802455D0A16 aaa authorization exec default local ip scp server enable The username line is a guideline and will vary based on the username being set in this case Cisco and the password and encoding type in this case 0802455 D0A16 and 7 respectively These values can be set on a group wide level using Templates and TFTP Once these lines are set SCP can be enabled on the Groups gt Basic configuration page without problems Supporting Multiple Radio Types via a Single lOS Template Some lines in an IOS configuration file should only apply to 802 11g vs 802 11b For instance lines related to speed rates that mention rates above 11 0Mb s do not work for 802 11b radios that cannot support these data rates Use the SIF variable value ENDIF construct to allow a single IOS configuration template to configure APs with different radio types within the same Group as illustrated below interface DotllRadioO0 SIF radio type 9 speed basic 1 0 basic 2 0 basic 5 5 6 0 9 0 11 0 12 0 180 24 0 36 0 48 0 54 0 SENDIFS SIF radio_type b speed basic 1 0 2 0 5 5 11 0 SENDIFS SIF radio type 9 power local cck CCK POWERS power local ofdm OFDM POWERS SENDIFS Configuring Single and Dual Radio APs via a Single IOS Template To configure single and dual radio APs using the same IOS c
49. APs Devices gt Rogues Contained page you can see the containment status information as shown in Figure 116 NOTE The Rogue Containment device tab is only present for devices that support containment Figure 116 Rogue Containment Status Page Rogue Containment Status 1 5 w of 5 Rogue BSSIDs Page lwof 1 Choose Columns Export to CSV Rogue a B55ID Containment State Desired Containment State Classifying Rule Location Cisco 9F 75 90 00 1D 45 9F 75 90 Not Contained Contained Manual Classification Override Enterasys 36 5C 18 00 01 F4 36 5C 18 Contained Not Contained Signal strength gt 75 dBm Enterasys 37 4A C3 00 01 F4 37 4A C3 Contained Not Contained Signal strength gt 75 dBm Local Ad 71 BA 90 02 20 A6 71 BA 90 Contained Not Contained Signal strength gt 75 dBm Local Ad 71 BA 90 02 20 A6 71 BA 91 Contained Not Contained Signal strength gt 75 dBm Dell PowerConnect W AirWave 7 2 User Guide 1 5 w of 5 Rogue BSSIDs Page lwof 1 Additional Settings Additional RAPIDS settings such as role filtering and performance tuning are available in the following locations Use the AMP Setup gt Roles gt Add Edit Role Page to define the ability to use RAPIDS by user role Refer to Creating AWMS User Roles on page 44 Use the AMP Setup gt General gt Performance Tuning page to define the processing priority of RAPIDS in relation to AWMS as a whole see Table 15 on page 40 Defining RAPIDS Rules The RAPIDS gt Rule
50. AWMS s hostname Does AWMS have a valid DNS name on your network y n l IFAWMS does not have a valid host name on the network enter n at the prompt The following appears Generating SSL certificate for IP Address gt 2 IFAWMS does have a valid host name on the network enter y at the prompt The following appears Enter AWMS s DNS name 3 Type the AWMS DNS name and press Enter The following message appears Generating SSL certificate for IP Address gt Proceed to the next step as the system prompts you Step 7 Changing the Default Root Password Upon completion of the prior step the following message appears STEP 7 Changing default root password You will now change the password for the root shell user Changing password for user root New Password Enter the new root password and press Enter The Linux root password is similar to a Windows administrator password The root user is a super user who has full access to all commands and directories on the computer This password should be kept as secure as possible because it allows full access to the machine This password is not often needed on a day to day basis but 1s required to perform AWMS upgrades and advanced troubleshooting If you lose this password contact Dell support at support dell com for resetting instructions Completing the Installation Upon completion of all previous steps the following message appears CONGRATULATIONS AWMS is configure
51. Allows you to run New Rogue Devices Report with custom settings Visual RF Displays physical location information for rogue devices Viewing Rogues on the RAPIDS gt List Page To view a rogue AP select the RAPIDS gt List tab and select a rogue device type from the Minimum Classification drop down menu see Figure 119 You can sort the table columns up down by selecting the column head or filter data using the column head dropdown menus The active links on this page launch additional pages for RAPIDS configuration or device processing Figure 119 RAPIDS gt List Page Illustration partial view Minimum Classification Rogue amp Modify Devices 1 2 w of 2 Roque APs Pagel wofi Choose Columns C5y Export Ack RAPIDS Classification Threat Level Name Classifying Rule Controller Classification WMS Classification AP WMS al al al Al al Ma Rogue 5 HANGZHOU H 49 17 00 Detected Wirelessly and on LAN Valid DD 1a le cO lade LTE Ma Rogue 5 HANGZHOU H 32 1F 60 Detected Wirelessly and on LAN Valid 00 24 6C 08 70 55 LITE 1 2 of 2 Roque APs Page wof 1 View Ignored Rogues Table 101 details the column information displayed in Figure 119 For additional information about RAPIDS rules refer to Defining RAPIDS Rules on page 169 Table 101 RAPIDS List Column Definitions Column Description Ack Displays whether or not the rogue device has been acknowledged Devices can be acknowledged man
52. Aruba3200 3 121 Top Access Points n 00 1a 1e c0 6c46 5 1 89 50 0 0 00 Aruba3600 US Top Access Points 6 1248 5 13 88 00 1 6185 00 ethersphere 1322 Top Access Points 7 1263 4 6 91 00 3 1493316 00 ethersphere 1322 Top Access Points 8 Fish bowl 3 6 90 00 767319 00 ethersphere 1322 Top Access Points 9 ap65 c2 2e 4a 2 2 104 50 0 0 00 chicken fingers Aruba2400 Top Access Points 10 1242 H 1 1 88 00 8 2098072 00 ethersphere 1322 Top Access Points Most Transmit Power Changes 2 4 GHz Transmit Power Changes Channel Changes Average Noise Average Channel Utilization Number of Users Bandwidth bps Location Controller Folder 1 00 24 6c c4 ce 26 29 20 82 00 0 0 00 Aruba651 Top Access Points 2 00 1a 1e c1 52 0e 13 1 82 00 1 2064 00 Aruba651 Top Access Points 3 1249 10 8 90 50 1 56 00 ethersphere 1322 Top Access Points 4 1248 8 4 90 50 0 65 00 ethersphere 1322 Top Access Points 5 00 1a 1e c0 6c 46 7 16 77 00 0 0 00 Aruba3600 US Top Access Points 6 1394 5 1 83 50 0 0 00 ethersphere 1322 Top Access Points z 1350 5 1 53 00 0 0 00 ethersphere 1322 Top Access Points 8 ap105 A1 5 6 86 50 0 0 00 pit Aruba 3400 Top Access Points 9 1260 3 6 86 50 2 676 00 ethersphere 1322 Top Access Points 10 2188 3 6 73 50 1 308 00 ethersphere 1322 Top Access Points Least Utilized by Channel Usage 5 GHz Number of Users Bandwidth bps Location Controller Folder Group 1 AP0018 19bd bidO 1 57 1
53. Config page and select the newly created Dell PowerConnect W AP Group Perform these steps to set the AP group to use the default Spectrum profile settings l In Groups gt Dell Config select Add New Dell AP Group 2 Give the new Group a name like Spectrum APs and select the plus sign next to the 802 11a Radio Profile to create a new radio profile 2 Enter a name under the General Settings section of Profiles gt RF gt 802 11a g Radio 4 In the Other Settings section change the Mode field from ap mode to spectrum mode as illustrated in Figure 104 Then select Save Figure 104 Spectrum mode in Dell Config EHWLANs Profiles AAA HAP EN ve ere Adaptive Radio Management ARM Profile defaut Mesh High throughput Radio Profile default a 5 Tv 5 Q0oS Spectrum Profile Requires a Wireless Intrusion Protection license and a defauta 3 m minimum version of 6 0 0 0 AM Scanning EET arte of 6 0 0 0 oe Je ARM HT Radio Other Settings Spectrum Radio Enable ves C No Event Thresholds Optimization GSSID Security Local Confia The above steps will use the defaults in the referenced Spectrum Profile To change the defaults navigate to Groups gt Dell Config gt Profiles gt RF gt 802 11a g Radio gt Spectrum and create a new Spectrum profile with non default settings In most cases you should not change the settings in the default profile If all of the devices in th
54. Default Description Name None The name of the interface on the controller VIANID None The VLAN ID for the interface on the controller Se Pais mm Teese ee Primary and Secondary The DHCP servers for the controller DHCP Servers Disabled Indicates a guest LAN Quarantine VLAN ID Disabled Enabled indicates it is a quarantine VLAN used only for H REAP associated clients Dynamic Device Enabled When enabled makes the interface an AP manager interface Cisco calls this feature Management Dynamic AP Management Configuring Device Interfaces for Cisco Catalyst Switches When you go to the APs Devices gt Interfaces page for a Cisco Catalyst switch you can add a Virtual interface by selecting Add and entering the appropriate information in the page that then appears as shown in Figure 95 138 Discovering Adding and Managing Devices Dell PowerConnect W AirWave 7 2 User Guide Figure 95 Add Virtual Interfaces Page for Wired Devices Auto Detect Interface Capacty 9 Yes O No Interface capacities wil automaticaly be updated when the device is polled Combined Bandwidth O Yes 9 No Interface Labels Description Virtual Interfaces Indude in template New physical and virtual interfaces are discovered using SNMP polling as described in SNMP HTTP Scanning on page 107 To refresh and reload all current interface information from a device select Import Interfaces on the bottom of the page as shown in F
55. Dell PowerConnect W AirWave 7 2 User Guide About This Guide This preface provides an overview of this guide and contact information for Dell and includes the following sections Document Organization on page 1l Notice Icons on page 12 Contacting Support on page 12 Document Organization This user guide includes instructions and examples of the graphical user interface GUI for installation configuration and daily operation of AirWave Wireless Management Suite This includes wide deployment of wireless access points APs device administration rogue detection and classification wireless controller devices security reports and additional features of AWMS Table 1 Document Organization and Purposes Chapter Description Chapter 1 Introduction Introduces and presents the AirWave Wireless Management Suite components and general network functions Chapter 2 Installing AWMS Describes system and network requirements Linux OS installation and AWMS installation Chapter 3 Configuring AWMS Describes the primary and required configurations for startup and launch of AWMS with frequently used optional configurations Chapter 4 Configuring and Using Describes configuration and deployment for group device profiles Device Groups in AWMS Chapter 5 Discovering Adding Describes how to discover and manage devices on the network and Managing Devices Chapter 6 Creating and Using Describes and il
56. Dell PowerConnect W AirWave 7 2 User Guide Configuring AWMS 53 Enter AMP in the service column and https in the protocol column Select Save 5 Edit the existing groups or users in TACAGS to use the AMP service and define a role for the group or user The role defined on the Group Setup page in ACS must match the exact name of the role defined on the AMP Setup gt Roles page The defined role should use the following format role lt name of AMP role One example is as follows role DormMonitoring As with routers and switches AWMS does not need to know usernames 6 AWMS also needs to be configured as an AAA client On the Network Configuration page select Add Entry Enter the IP address of AWMS as the AAA Client IP Address The secret should be the same value that was entered on the AMP Setup gt TACACS page 7 Select TACACS 4 Cisco IOS in the Authenticate Using dropdown menu and select submit restart NOTE AWMS checks the local username and password store before checking with the TACACS server If the user is found K locally the local password and local role apply When using TACAS it is not necessary or recommended to define users on the AWMS server The only recommended user is the backup administrator in the event that the TACAS server goes down What Next Go to additional tabs in the AMP Setup section to continue additional setup configurations Complete the required configurations in this cha
57. Documentation for hardware requirements Device Polling Displays some AP Device polling statistics Performance Graphs System Load Average The number of jobs currently waiting to be processed Load is a rough metric that will tell you how busy a server is A typical AWMS load is around 2 3 times the number of CPU cores you have in your system constant load of 4x to 5x is cause for concern load above 6x is a serious issue and will probably result in AWMS becoming unusable To lower the load average try increasing a few polling periods in the Groups Basic page System Memory Usage The amount of RAM that is currently used broken down by usage It is normal for AWMS to have very little free RAM Linux automatically allocates all free RAM as cache and buffer If the kernel needs additional RAM for process it will dynamically take it from the cache and buffer The average number of outstanding I O requests queue depth If it s high it means that I O Requests requests disk reads writes aren t being serviced as fast as they re being asked for System Swap Usage The amount of Swap memory used by AWMS Swap is used when the there is no more free physical RAM A large performance penalty is paid when swap is used If an AWMS consistently uses swap you should consider installing additional RAM System CPU Utilization The percentage of CPU that has been used by the user and the system as well as the amount that was idle 1 0
58. Er 802 11 Cou Users Bandwidth Channel Noise Power MAC Phy Er 802 11 Cou 802 11 Counters on api105 A1 Last 17 hours gall Errors on ap105 A1 Last 17 hours Hall Ed A 4 er f fl l 1 Show All Maximum Average Show All Maximum Average a V ACK Failure Rate frames sec 0 6 frames s 0 frames s Avg MAC Errors 5 2 kpackets sec 543 packets sec O V Frame Duplicate Rate frames sec 0 frames s 0 frames s amp Avg Phy Errors 0 packets sec 0 packets sec amp Multiple Retry Rate frames sec 0 6 frames s 0 frames s O Avg Total Packets 24 1 kpackets sec 3 1 kpackets sec 8g v Tx Frame Rate frames sec 0 7 frames s 0 3 frames s amp v Max MAC Errors 5 2 kpackets sec 543 packets sec vi Max Phy Errors 0 packets sec 0 packets sec Q V Max Total Packets 24 1 kpackets sec 3 1 kpackets sec m3 1 year ago ppe now e If this radio references an active and enabled ARM profile and if your AMP is enabled as a trap host see Best Practices Guide in Home gt Documentation for instructions RM initiated events such as automatic channel changes power changes and mode changes are displayed in the ARM Events table with the original and modified values these values can be selected for filtering the results You can export the table in CSV format The columns and values are described in Table 80Figure 84 and illustrated in Figure 84 Dell PowerConnect W AirWave 7 2 User Guide Discovering Adding and Managing Devic
59. For more details and a procedure see Using Custom Reports on page 222 Cisco Thin AP Settings Update the credentials AMP Update changes the credentials AWMS uses to communicate with the device It does not uses to communicate with change the credentials on the AP these devices Import settings from selected Audit updates a number of the AP specific settings AWMS initially read off of the AP including devices and discard current channel power antenna settings and SSL certifications AWMS recommends using this setting pre device desired settings if APs have been updated outside of AWMS Most settings on the APs Devices Manage configuration page are setto the values currently read off of the devices Reboot selected devices Reboots the selected devices Use caution when rebooting devices because this can disrupt wireless users Reprovision selected Dell Configures the controller to send provisioning parameters such as radio antenna and IP PowerConnect W devices address settings to the selected APs Please note that APs will be rebooted as part of reprovisioning Upgrade firmware for Upgrades firmware for the selected devices Refer to the firmware upgrade help under APs selected devices Devices Manage configuration page for detailed help on Firmware job options Cancel firmware upgrade for Cancels any firmware upgrades that are scheduled or in progress for the selected APs selected devices Ignore selected devices th
60. Gisco WLSE 57 Configuring WLSE Initially in AWMS eererenrovorororrenrevrrenesvenenvrveresvenenvrnersnvrvevenvenennensnenvevenen 57 Adding an ACS Server for WLSE rrrrnrenorenrrronervsvenrsvenesvsvenrsvnnesvensvesvensnervevessensnenvevenns 57 Enabling Rogue Alerts for Cisco WLSE sse 57 Configuring WLSE to Communicate with APS esses 58 Discovering Ne rv 58 Managing DEVICES EEE Neun i orem Uf pa HEN NICH DM 58 Inventory Reporting essent tnnt tenth natnra natns tastes 58 PANNEN ETC 58 tius EEE EN NE NN 59 Configuring IOS APs for WDS Participation ssrssronorerrrronrrvrrenrsvrnrnvrrenrnvrvevesvrnsnennevennensne 59 WDS Parti lBallOlsntierien imbri terris tupnir etri nir x vtto vuv imd Festi airen Febre wins 59 Primary ar secondary VV DS aiascstens uteris vie reta enel rtt dart teet sa mire rI rb reb i eiua 59 Configuring ACS for WDS Authentication sess 59 Configuring Cisco WLSE Rogue Scanning sse 60 Configuring AUS SBEVBES EEE RE TOEIC ANI IIR ETUDES 61 Integrating AWMS with an Existing Network Management Solution NMS 62 Auditing PCI Compliance on the Network rrarsvrrenvsrenrrvrrenrsvonrnvrreresvnnsnssvrvavenvrnsnenvevenvnnenn 63 Introduction to PCI Requirements ccccsssscscscssssessescscssssesesececsesecessesecessesecassesesauseeatenees 64 PCI Au
61. Last Boot 00 0b 86 HQ Top Sunnyvale HQ Lab 0 0096 0 00 0 mins 00 0b 86 HQ RemoteAP Top gt Sunnyvale HQ gt HQ RAP 0 00 0 00 0 mins nn nk oc LM Daratn A n Tan Ciim msn al LIM um DAN n NNDL nanos eine Table 131 Device Uptime Report Unique Fields and Descriptions Description SNMP Uptime The percentage of time the device was reachable via ICMP AWMS polls the device via SNMP at the rate specified on the Groups gt Basic page ICMP Uptime The percentage of time the device was reachable via ICMP If the device is reachable via SNMP it is assumed to be reachable via ICMP AWMS only pings the device if SNMP fails and then it pings at the SNMP polling interval rate The uptime as reported by the device at the end of the time period covered by the report Using the IDS Events Report Time Since Last Boot The IDS Events Report lists and tracks IDS events on the network involving APs or controller devices This report cites the number of IDS events for devices that have experienced the most instances in the prior 24 hours and provides links to support additional analysis or configuration in response Your AMP must have a RAPIDS license and your role must be enabled to view RAPIDS to see this report The Home gt License page also cites IDS events and triggers can be configured for IDS events Refer to Setting Triggers for IDS Events on page 186 for additional information Selecting the AP device or con
62. Manage tab to go to the management page for that device 4 If visible select the View device credentials link in the Device Communications section This displays the credentials AWMS is using unsuccessfully to communicate with the device This link can be removed from AWMSS for security reasons by setting a flag in AWMS Only users with root access to the AMP command line can show or hide this link To disable this feature please contact Dell support Figure 105 illustrates this page Dell PowerConnect W AirWave 7 2 User Guide Discovering Adding and Managing Devices 143 Figure 103 View device credentials Window E htt ps faire com nffa Credentials for AF HP 520 2 Community String public IF 10 51 1 228 Close Window K NOTE The View AP Credentials message may appear slightly different depending on the vendor and model 5 Ifthe credentials are incorrect return to the Device Communications area on APs Devices gt Manage 6 Enter the appropriate credentials and select Apply 7 Return to the APs Devices gt List page to see if the device appears with a Status of Up Setting up Dell Spectrum Analysis in AWMS The spectrum analysis software modules on AP models Dell PowerConnect W AP105 the Dell PowerConnect W AP120 Access Point Series and the Dell PowerConnect W AP90 Access Point Series can examine the radio frequency RF environment in which the Wi Fi network is operating identify interference and classify its
63. Overview of the Radio Statistics Page sse 123 Viewing Real Time ARM Statistics essent 123 Issues Summary section tnter tnter ianiai 123 802 11 Radio Counters Summary essent 124 Radio Statistics Interactive graphs nnns 124 Recent ARM Events DOG eres di o Criteri tvi er FU Urb Oo DXE URSUS 125 Active Interfering Devices Table nmsmmrvrrovorrrronvrrenrrnrrvorrrrorrrronrrvrnvrvennrnernsnnnnenenne 126 niea p v U 127 Monitoring Data for Wired Devices Routers and Switches 127 Understanding the APs Devices gt Interfaces Page esses 129 Dell PowerConnect W AirWave 7 2 User Guide 5 Chapter 6 Chapter 7 6 Auditing Device Configuration ccccscssssesssscscssssssesseecscsessssesecetsesecsesesecaseesesseseeaseeeeeans 130 Using Device Folders Optional sse 131 Configuring and Managing Devices tnnt nnns 132 Moving a Device from Monitor Only to Manage Read Write Mode 132 Configuring AP Settings eese eene entente tnnt tnnt tnt tn inns 133 Configuring Device Interfaces for Cisco Catalyst Switches 138 Individual Device Support and Firmware Upgrades eese 141 Troubleshooting a Newly Discovere
64. Page on page 207 Viewing and Updating License Information Navigate to the Home gt License page using the standard AWMS menu Figure 145 illustrates this page and Table 118 describes the contents Please be aware that you cannot enter multiple licenses To combine multiple license entitlements into one new license contact Dell support Figure 143 Home License Page lllustration System Overview System Mame aire com Organization Aire Networks Hostname aire com IP Address 10 19 19 19 Time arz3ren ne 7 25 PM Uptime 1 day 12 hrs 50 mins Version 6 4 OS Centos release 5 This is a licensed version of Airave Wireless Management Suite Refer to your license agreement for complete information about the terms of this license Contact Airave Technical Support at supportealrvave com or 1 866 943 4267 B66 WiFi AMP1 for more information Enter Wew License Begin ANP License Key Product AWMS Professional Organization Aruba Networ Hardware ID O0 21 9B6 8B6 6B APs 1000 RAPIDS Yes VisualRF Yes Signature ibSDBOFJIrwUzvHSPdJITESZzERA u UmDicdqRmcOH7s382zF3 7Hzd 6V 1 ks 2 04 zmAJSgEwAYfhciAI C3oPCOYjoA ipUZXgCfawSdq End AMP License Key Save Dell PowerConnect W AirWave 7 2 User Guide Performing Daily Administration in AWMS 201 Table 118 Home gt License Fields and Descriptions Field Description Displays a user definable name for
65. Performing Daily Administration in AWMS 207 Figure 149 System gt Configuration Change Jobs Page Illustration Subject a Description Scheduled Time User Folder APO2 Change Radio Status on AP Af 802 11bg and AP AP02 802 113 September 9th 2007 at 12 00 am admin Top gt controler thin ap gt trapeze To run at September 9th 2007 at 12 00 am AP AP02 802 11bg Radio none Enablec AP APO2 802 114 Radio none Enabled Delete Cance Schedule numeric dates with optional 24 hour times ike 7 4 2003 or 2003 07 04 for 4th 03 or 7 4 2003 13 00 for July 4th 2003 at 1 00 P ar specify relative times ike at noon tomorrow at midnight or next tuesday at 4am Other input formats may Start Date Time September 9th 2007 at 12 00 l To edit an existing configuration change job select on the linked description name On the subsequent edit Apply Changes Now NSC e acceptec page you can choose to run the job immediately by selecting Apply Changes Now reschedule the job by selecting Schedule Delete the job or Cancel the job edit 2 Select the linked AP or group name under the Subject column to go to its monitoring page Select the linked group and folder names under Folder or Group to go to the AP s folder or group page 4 Scheduled configuration change jobs will also appear on the Manage page for an AP or the Monitoring page for a group Using the System Performance Page The System gt Performance page
66. PowerConnect W AirWave 7 2 User Guide Configuring AWMS 57 Configuring WLSE to Communicate with APs Go to the Device Setup gt Discover page Configure SNMP Information Configure HTTP Information Configure Telnet SSH Credentials Configure HTTP ports for IOS access points Configure WLCCP credentials pt E EE EE de Configure AAA information Discovering Devices There are three methods to discover access points within WLSE as follows Using Cisco Discovery Protocol CDP Importing from a file Importing from CiscoWorks Perform these steps to discover access points Go to the Device gt Managed Devices gt Discovery Wizard page Import devices from a file Import devices from Cisco Works Jd v N Import using CDP Managing Devices Prior to enabling radio resource management on IOS access points the access points must be under WLSE management 2 NOTE AWMS becomes the primary management monitoring vehicle for IOS access points but for AWMS to gather Rogue information the WLSE must be an NMS manager to the APs Use these pages to make such configurations l Go to Device gt Discover gt Advanced Options 2 Select the method to bring APs into management Auto or specify via filter Inventory Reporting When new devices are managed the WLSE generates an inventory report detailing the new APs AWMS accesses the inventory report via the SOAP API to auto discover access points This 1s an optional st
67. Preferences Search Preferences Customize Search el Yes O No Search Preferences APsj Devices Lisers Connected Lisers Historical Folders Groups Tags Rogues Select All Unselect All Setting Severe Alert Warning Behavior You can control the alert levels users can see on the Alerts statistics hyperlink from the Home gt User Info page These settings will apply unless and until other users change settings for themselves When a trigger 1s assigned a severity of Critical it generates a severe alert When a severe alert exists a new component appears at the right of the Status field in bold red font Only users who are enabled for viewing critical alerts on the Home gt User Info page can see severe alerts The Severe Alert Threshold dropdown menu located in the Top Header Stats section of the Home gt User Info page is shown in Figure 14 Figure 14 Home gt User Info gt Severe Alert Threshold Dropdown Menu Top Header Stats Fitter Level For Rogue Count Suspected Rogue vi Customize Header Columns 9 Yes O No Stats New Devices Up Wired amp Wireless Up Wired Up Wireless Down Wired amp Wireless Down Wired Down Wireless Mismatched Rogues Users Alerts Severe Alerts Select All Unselect All Severe Alert Threshold Normal Normal Include Device Types g Minor Major rs Critical Defining General AWMS Server Settings This section describes all pages ac
68. RADIUS Authentication Issues 0 Bu 0 4 Te Own 17 on mm Bt Dn Drs D Awiit Disabled on 4 of 71 devices are Down S 23 of 71 devices are Wsmatched Quick Links Go to folder v Goto group v View Latest Reports Common Tasks Y The Available Widgets section on the left with no gridlines holds all possible available graphical elements TN widgets Select any blue widget tile with a verbal description enclosed and it immediately turns into a graphical element with a description Drag the widgets you want to appear on the Overview dashboard across to the gridlines and arrange them in the right section within the gridlines widget snaps back to the nearest available gridline if you drop it across two or more lines and turns red if you attempt to place it over gridlines already occupied by widgets Green widgets are properly placed and set to appear when you select Save Widgets that remain in the left section will not appear although they can be reinstated by selecting Restore Defaults Customized Search You can customize search results to display only desired categories of matches on the Home gt User Info page Go to the Search Preferences section and select Yes in the Customize Search field then select or unselect categories of results and save your changes Customized search is turned off by default and all boxes are selected Configuring AWMS 33 Figure 13 Home gt User Info Customized Search
69. Reports gt Generated page are sorted by Generation Time You can sort reports by any other column header in sequential or reverse sequential order You can also choose columns export the Generated Reports list in CSV and modify the pagination of this list The Reports gt Detail page launches when you select any report title from this page The Generated Reports page contains fewer columns and information than the Definitions page Table 127 describes each column for the Reports gt Generated page Table 127 Reports gt Generated Page Fields and Descriptions Description Generated The date and time of the last time the report was run or when the latest report is available Selecting the link in Time this field displays the latest version of a given report When the latest version of a given report is not available this field is blank In this case a report can be run by selecting the report title and selecting Run The title of the report This is a user configured field when creating the report e o Type Thetypeoftherepot lt lt Thetype ofthe report WWW of the report Subject The scope of the reportincluding groups folders SSIDs or any combination of these that are included in the report Report Start Report Start The The beginning of the time period covered in the report 0 of the time period covered in the The beginning of the time period covered in the report 0 ReportEnd The end of the time period covere
70. Sponsor Name fadmn Specify numeric dates with optional 24 hour times like 7 4 2003 or 2003 07 04 for July 4th 2003 or 7 4 2003 13 00 for July 4th 2003 at 1 00 PM or specify relative times like tomorrow at noon or next tuesday at 4am Other input formats may be accepted Expiration Blank means no expiration tomorrow at noon WLAN Profile 4000 guest M Description Email Options Email Credentials C Yes No ad cae To make the Username or Password anonymous and to increase security complete these fields then select Generate The anonymous and secure Username and Password appear in the respective fields 6 Select Add to complete the new guest user or select Cancel to back out of new user creation The Users gt Guest Users page appears and displays results as applicable Supporting RFID Tags With the Users gt Tags Page Radio Frequency Identification RFID supports identifying and tracking wireless devices with radio waves RFID uses radio wave tags for these and additional functions Active tags have a battery and transmit signals autonomously and passive tags have no battery RFID tags often support additional and proprietary improvements to network integration battery life and other functions K NOTE Guest users being pushed to large numbers of controllers may take a very long time to push The Users gt Tags page displays a list of wireless tags such as Aeroscout PanGo and Newbury that are h
71. The conditions establish the device type Multiple conditions can apply to this type of trigger The Device Down trigger can be configured to send alerts for thin APs when the controller is down this behavior is turned off by default Device Up This trigger type activates when an authorized previously down AP is now responding to SNMP queries To set the conditions for this trigger type select Add in the Conditions section Configuration This trigger type activates when the actual configuration on the AP does not match the defined Group Mismatch configuration policy To set the conditions for this trigger type select Add in the Conditions section Device User Activates when a device reaches a user count threshold for more than a specified period such as more Count than 10 users associated for more than 60 seconds Device Activates when the total bandwidth through the device has exceeded a predefined threshold for more than Bandwidth a specified period such as more than 1500kbps for more than 120 seconds You can also select bandwidth direction and page radio Selecting this type displays the following new fields in the Type section Define these settings Alert if Device Bandwidth gt kbps This threshold establishes a device specific bandwidth policy not a bandwidth policy on the network as a whole Bandwidth Direction Choose In Out or Combined This bandwidth is monitored on the device itself not on the network as a whole
72. User Info Page on page 203 search performs partial string searches on a large number of fields including the notes version secondary version radio serial number device serial number LAN MAC radio MAC and apparent IP of all the APs as well as the client MAC VPN user LAN IP VPN IP fields 22 Installing AWMS Dell PowerConnect W AirWave 7 2 User Guide Navigation Section The Navigation Section displays tabs for all main GUI pages within AWMS The top bar is a static navigation bar containing tabs for the main components of AWMS while the lower bar is context sensitive and displays the subtabs for the highlighted tab Table 6 Components and Subtabs of the AWMS Navigation Screen Main Tab Helpdesk APs Devices Users Description The Home tab provides basic AWMS information including system name host name IP address current time running time and software version The Home page also provides a central point for network status Information and monitoring tools giving graphical display of network activity and links to many of the most frequent tools in AWMS For additional information refer to Monitoring and Supporting AWMS with the Home Pages on page 199 The Helpdesk pages provide an interface for support and diagnostic tools For additional information refer to Chapter 10 Using the AWMS Helpdesk on page 247 The Groups pages provide information on the logical groups of devices that have bee
73. VMware on page 272 Creating a New Virtual Machine to Run AWMS l Select Create a new virtual machine from the VMware Infrastructure Client Select Next to select a Typical gt Virtual Machine Configuration WI Name your virtual machine AirWave Management Platform and then click Next pes Select an available datastore with sufficient space for the number of APs your AWMS will manage choosing the right server hardware to comply with the hardware requirements in this document Select Next 5 Select the Linux radio button and select Red Hat Enterprise Linux 5 32 bit from the drop down menu then click Next 6 Select a minimum of two virtual processors then click Next 7 Enter 3072 as the minimum virtual RAM more virtual RAM may be required refer to the section Choosing the Right Server Hardware for a table listing RAM requirements for AWMS Select Next 8 Accept the VMware default virtual network adapter and click Next 9 Allocate a virtual disk large enough to contain the AWMS operating system application and data files refer to the AWMS Best Practices Guide in Home gt Documentation for suggested disk space allocations for typical wireless network deployments 10 Select Next 11 Review the virtual machine settings then click Finish when done Installing AWMS on the Virtual Machine Running AWMS installation on a VMware virtual machine is typically done in one of three ways l By writing an AW
74. VisualRF location and RF mapping software module RAPIDS rogue access point detection software module Master Console and Failover tabs AirWave Management Platform The AirWave Management Platform AMP is the centerpiece of the Dell PowerConnect W AirWave Wireless Management Solution offering the following functions and benefits Core network management functionality Network discovery Configuration of APs amp controllers Automated compliance audits Firmware distribution Monitoring of every device and user connected to the network Real time and historical trend reports Granular administrative access Role based for example Administrator contrasted with Help Desk Network segment for example Retail Store network contrasted with Corporate HQ network Dell PowerConnect W AirWave 7 2 User Guide Introduction 13 14 Introduction Flexible device support Thin thick mesh network architecture Multi vendor support Current and legacy hardware support Dell PowerConnect W Configuration AWMS supports global and group level configuration of ArubaOS AOS the operating system software suite and application engine that operates Dell PowerConnect W mobility and centralizes control over the entire mobile environment For a complete description of AOS refer to the ArubaOS User Guide in support dell com manuals AWMS consolidates ArubaOS configuration and pushes global Dell PowerConnect W configurations from within AWMS
75. WLC Devices In Cisco WLC Config WLANs are based on SSIDs or VLANs that are dedicated to Cisco WLC controllers Perform the following steps to define and configure WLANs for Cisco WLC controllers l Go to the Groups gt Cisco WLC Config page and select WLANs in the navigation pane at left This page displays the SSIDs or VLANs that are available for use with Cisco WLC devices and enables you to define new SSIDs or VLANs Figure 45 illustrates this page 2 To change the ID position of a WLAN on the controller by dragging and dropping set the toggle to yes Note that the by setting this flag to yes AMP will display a mismatch if the WLANS in the desired and device config differ only on the order Figure 45 Groups Cisco WLC Config WLANS page illustration FWLANS L Group Access Points 5500 8021x H Advanced Controller Enforce WLAN Order on Controllers Yes No en Add New SSID VLAN Security Management 1 1 w of 155IDsNMLANs Page iwofi Choose Columns CSV Export EN bins iis Profile 4 SSID Type Admin Status Encryption Mode Radio Policy zx w 55008021x 10 22 42 11 WLAN Yes Require 802 1X All l 1 of 1SSIDs VLANs Page lwof1 Select All Unselect All Delete Saveand Apply Revert 3 To add or edit SSIDs or VLANs that are dedicated to Cisco WLC devices either select the Add New SSID VLAN button or select the pencil icon for an existing SSID VLAN A new page appears comprised of four tabs
76. a Mismatched configuration status on the user page However when using the templates configuration function there will be times when the running config file and the startup config file do not match under normal circumstances For example the ntp clock period setting is almost never identical in the running config file and the startup config file You can use directives such as lt ignore_and_do_not_push gt to customize the template to keep AWMS from reporting mismatches for this type of variance AWM S provides two types of directives that can be used within a template to control how AWMS constructs the startup config file to send to each AP and whether it reports variances between the running config file and the startup config file as configuration mismatches Lines enclosed in push and exclude gt are included in the AP Dell PowerConnect W AirWave 7 2 User Guide Creating and Using Templates 155 startup config file but AWMS ignores them when verifying configurations Lines enclosed in ignore and do not push cause AWMS to ignore those lines during configuration verification Ignore and do not push Command The ignore and do not push directive should typically be used when a value cannot be configured on the device but always appears in the running config file Lines enclosed in the ignore and do not push directive will not be included in the startup config file that is copied to each AP When AWMS is comparing the run
77. and without fee is hereby granted provided that the above copyright notice appears in all copies and that both that copyright notice and this permission notice appear in supporting documentation and that the name of CMU and The Regents of the University of California not be used in advertising or publicity pertaining to distribution of the software without specific written permission CMU AND THE REGENTS OF THE UNIVERSITY OF CALIFORNIA DISCLAIM ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS IN NO EVENT SHALL CMU OR THE REGENTS OF THE UNIVERSITY OF CALIFORNIA BE LIABLE FOR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM THE LOSS OF USE DATA OR PROFITS WHETHER IN AN ACTION OF CONTRACT NEGLIGENCE OR OTHER TORTIOUS ACTION ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE Part 2 Networks Associates Technology Inc copyright notice BSD Copyright c 2001 2003 Networks Associates Technology Inc All rights reserved Redistribution and use in source and binary forms with or without modification are permitted provided that the following conditions are met Redistributions of source code must retain the above copyright notice this list of conditions and the following disclaimer Dell PowerConnect W AirWave 7 2 User Guide Third Party Copyright Information 273 Redistributions in binary form must rep
78. aruba guest user Tue Jan 18 19 28 48 2011 System Device Aruba 651 intel a651 mediurn Configuration verification configuration on device does not match desired configuration 60301 Top aruba Tue Jan 18 19 28 45 2011 System Device Aruba 3200 Aruba3200 3 121 Configuration verification configuration on device does not match desired configuration 60123 Top aruba arm Tue Jan 18 19 28 37 2011 System Device Symbol 7131 4P 7131N 1 Error in SNMP polling Counter length too long 5 bytes 59914 Top gt symbol gt fat aps Tue Jan 18 19 28 14 2011 System Device Aruba 651 Aruba651 Telnet SSH Error pattern match timed out 60215 Top aruba Table 121 Event Log Fields Column Description Date and time of the event The AWMS user that triggered the event When AWMS itself is responsible System is displayed Displays the Type of event recorded which is one of four types as follows Device An event localized to one specific device Group A group wide event System A system wide event Alert lf a trigger is configured to report to the log an Alert type event will be logged here The event AWMS observed useful for debugging user tracking and change tracking Using the System Configuration Change Jobs Page Schedule configuration change jobs are summarized on the System gt Configuration Change Jobs page Perform the following steps to use this page illustrated in Figure 149 Dell PowerConnect W AirWave 7 2 User Guide
79. at which AWMS polls for radio monitoring and bandwidth being used by a device User Data Polling Period Sets time between SNMP polls for User Data for devices in the group Thin AP Discovery Polling 5 minutes Sets time between SNMP polls for Thin AP Device Discovery Controllers are the Period only devices affected by this polling interval Device to Device link Polling 5 minutes Sets time between SNMP polls for Device to Device link polling Mesh APs are Period the only devices affected by this polling interval 802 11 Counters Polling Period Sets time between SNMP polls for 802 11 Counter information Rogue AP and Device 5 minutes Sets time between SNMP polls for Rogue AP and Device Location Data polling Location Data Polling Period CDP Neighbor Data Polling 30 minutes Sets the frequency in which this group polls the network for Cisco Discovery Period Protocol CDP neighbors 5 Record additional information and comments about the group in the Notes section 74 Configuring and Using Device Groups in AWMS Dell PowerConnect W AirWave 7 2 User Guide 6 To configure which options and tabs are visible for the group complete the settings in the Group Display Options section Table 39 describes the settings and default values Table 39 Group Display Options Fields and Default Values Default Description Show device Only Drop down menu determines which Group tabs and options are to be viewable by default in settings for de
80. be applied to this group in the future Enter the desired change date in the Start Date Time field AWMS takes the time zone into account for the group if a time zone other than AWMS System Time has been configured on the Groups gt Basic configuration page Cancel Cancels the application of changes immediately or scheduled Ln NOTE To completely nullify the change request select Revert on one of the group configuration pages after you have selected Cancel 7 Apply changes to multiple groups by selecting the appropriate group or groups and selecting Preview Modifying Multiple Devices AWMS provides a very powerful utility that modifies all or a subset of devices unrelated to the typical AWMS group construct This utility provides the ability to delete simultaneously multiple devices migrate multiple 102 Configuring and Using Device Groups in AWMS Dell PowerConnect W AirWave 7 2 User Guide devices to another group and or folder update credentials and optimize channels Perform these steps to modify multiple devices l To modify multiple devices go to one of the following pages with a device list APs Devices gt List APs Devices gt Up APs Devices gt Down APs Devices gt Mismatched Groups gt Monitor configuration pages Each of these pages displays a list of devices Controller monitoring pages also have lists of their thin APs which can be modified using Modify Devices 2 Select Modify Devices to make the che
81. between any wireless networks and the cardholder data environment When Enabled A device passes requirement 1 2 3 if it can function as a stateful firewall When Disabled firewall router and device installation are not checked for PCI compliance 64 Configuring AWMS Dell PowerConnect W AirWave 7 2 User Guide Table 35 PCI Requirements and Support in AWMS Continued Requirement Description Monitoring the presence of vendor supplied default security settings When Enabled PCI Requirement 2 establishes the standard in which all vendor supplied default passwords are changed prior to a device s presence and operation in the network A device fails requirement 2 1 if the username passwords or SNMP credentials being used by AWMS to communicate with the device are on a list of forbidden default credentials The list includes common vendor default passwords for example When Disabled device passwords and other vendor default settings are not checked for PCI compliance 2 1 1 Changing vendor supplied defaults for wireless environments When Enabled A device fails requirement 2 1 1 if the passphrases SSIDs or other security related settings are on a list of forbidden values that AWMS establishes and tracks The list includes common vendor default passwords The user can input new values to achieve compliance When Disabled network devices are not checked for forbidden information and PCI Compliance is not established Using strong encr
82. by the AWMS or Remedy User 1 Critical 2 High 3 Medium 4 Low To change the current incident in the Helpdesk header select Unselect Current Incident To add a new Remedy incident select Add To edit an existing Remedy incident select the pencil icon next to the incident you wish to edit Refer to Figure 188 and Table 142 for additional illustration and explanation Figure 188 Helpdesk gt Incidents gt Add a New Remedy Incident Page Illustration Customer First Name Customer Last Name Impact 1Extensive Midespread Urgency 1 Critical w Summary Table 142 Helpdesk gt Incidents gt Add a New Remedy Incident Fields Field Description Customer First and Last These must match exactly a customer that already exists on the Remedy server There is no way to Name create a new customer from AWMS or to search Remedy customers remotely Impact 1 Extensive Widespread default 2 Significant Large 3 Moderate Limited 4 Minor Localized 252 Using the AWMS Helpdesk Dell PowerConnect W AirWave 7 2 User Guide Table 142 Helpdesk gt Incidents gt Add a New Remedy Incident Fields Field Description Urgency 1 Critical default 2 High 3 Medium 4 Low Summary Free form text field 2 NOTE A new incident is not created if the customer First and Last name do not exist on the Remedy server However in this scenario there is no failure message or warning that the incident was not created
83. can be disabled entirely as desired lable 49 describes the settings and default values of this section Table 49 Routers and Switches Fields and Default Values Setting Default Description Read ARP Table 4 hours Sets the frequency in which devices poll routers and switches for Address Resolution Protocol ARP table information This setting can be disabled or set to poll for ARP information in a range from every 15 seconds to 12 hours Read CDP Table for 4 hours Sets the frequency in which devices poll routers and switches for Cisco Discovery Protocol Device Discovery CDP information This setting can be disabled or set to poll for CDP neighbor information in a range from every 15 seconds to 12 hours Read Bridge 4 hours Sets the frequency in which devices poll the network for bridge forwarding information This Forwarding Table setting can be disabled or set to poll bridge forwarding tables from switches in a range from every 15 seconds to 12 hours 78 Configuring and Using Device Groups in AWMS Dell PowerConnect W AirWave 7 2 User Guide Table 49 Routers and Switches Fields and Default Values Continued Setting Default Description Interface Up Down 5 minutes Sets the frequency in which network interfaces are polled for up down status This setting Polling Period can be disabled or set to poll from switches in a range from every 15 seconds to 30 minutes Interface 15 Sets the frequency in which network interfaces are
84. discover devices on your network configured in the Device Setup gt Discovery page See SNMP HTTP Scanning on page 107 e Cisco Discovery Protocol CDP AWMS enhances support for CDP by discovering a Cisco device s CDP neighbors See Enabling Cisco Discovery Protocol CDP on page 111 e Manual device entry This admin supported method of discovery applies when you know of devices that are already on your network See the following sections for information and procedures a Manually Adding Individual Devices on page 112 m Adding Multiple Devices from a CSV File on page 114 m Adding Universal Devices on page 115 e Controller driven device discovery I hin APs will automatically be discovered in the network and added to the New Devices list when you add their controller to AWMS To add the thin APs refer to Authorizing Devices to AWMS from APs Devices gt New Page on page 111 Discovering and Adding Devices This section describes the following topics e SNMP HTTP Scanning e Enabling Cisco Discovery Protocol CDP e Authorizing Devices to AWMS from APs Devices gt New Page e Manually Adding Individual Devices SNMP HTTP Scanning SNMP HTTP discovery scanning is the primary method for discovering devices on your network including rogue devices Enable this scanning method from the Device Setup gt Discover page Dell PowerConnect W AirWave 7 2 User Guide Discovering Adding and Managing Devices 107
85. discovery event records the more hard disk space you require 2 550 days Reports Defines the number of days AWMS stores Reports Large numbers of reports over 1000 2 550 days can cause the Reports gt List page to be slow to respond 38 Configuring AWMS Dell PowerConnect W AirWave 7 2 User Guide Table 12 AMP Setup gt General gt Historical Data Retention Fields and Default Values Continued Automatically Acknowledged Alerts 0 550 days zero disables Pl Alerts 2 550 days Traps from managed devices 0 550 days zero disables Archived Device Configurations 1 100 Guest Users 0 550 days zero disables Closed Helpdesk Incidents 0 550 days zero disables Inactive SSIDs 0 550 days zero disables Inactive Interfaces 0 550 days zero disables Interface Status History 0 550 days zero disables Interfering Devices 0 550 days zero disables Default Description Defines automatically acknowledged alerts as the number of days AWMS retains alerts that have been automatically acknowledged Setting this value to 0 disables this function and alerts will never expire or be deleted from the database Defines the number of days AWMS retains information about acknowledged alerts Large numbers of Alerts over 2000 can cause the System Alerts page to be slow to respond Defines the number of days AWMS retains information about SNMP traps from Managed Devices
86. displays basic AWMS hardware information as well as resource usage over time AWMS logs performance statistics such as load average memory and swap data every minute The historical logging 1s useful to determine the best usable polling period and track the health of AWMS over time The page is divided into four sections System Information Performance Graphs Database Statistics Disk Usage Figure 150 illustrates this page and lable 122 describes fields and information displayed 208 Performing Daily Administration in AWMS Dell PowerConnect W AirWave 7 2 User Guide Figure 150 System gt Performance Page Illustration Partial Screen puten rfc oa rtg see 2000 eee d Co ee EB aeu Ce ies FA ee away aues Fvl SA 2020 ec Cronica Anc L Bu maral Ere al karier iiw 3 8 Eji jj ia ET Sj Da i nr p ET p ee a H LOL L CL Mg eli Fase prs Lad don deccwury avri pee p Te sed 155 par sare DIT XP Fui LG TE JULI AME DFW Xe ERE pie XP ee Tee cr a9 ICE HT Premie Gi sg p LEES 15 mni E pak fe a m mu sm n m Han Ls IIR m om jin n Sie gt imi ium sge FLORE MEI n gum i mv bi NE Bia vand rmn THES 1 18 I ILI DOT TERLO dm I 3 i i EE E irm Ld d 1l a am Hm o Har o Im o pe i JE pan ie bl hiji E imd hamn e Eug al iaj DE T BI IR bi LES E td E LE m ia BE Ye Inese EET 1 HH Bikes ETE ME bl TE d aq z mi LI TEE Has i ma iiim Hou som TET mu Prom le mm re Bz mm r H
87. distribution to the devices on your network Once you have downloaded the firmware files from the vendor you can upload this firmware to AWMS for distribution to devices via the Device Setup gt Upload Firmware amp Files page This page lists all firmware files on AWMS with file information This page also enables you to add new firmware files to delete firmware files and to add New Web Auth Bundle files The following additional pages support firmware file information Dell PowerConnect W AirWave 7 2 User Guide Configuring AWMS 49 Firmware files uploaded to AWMS appear as options in the drop down menus on the Group gt Firmware page and on individual APs Devices gt Manage pages Use the AMP Setup page to configure AWMS wide default firmware options Table 26 below itemizes the contents settings and default values for the Upload Firmware amp Files page Table 26 Device Setup gt Upload Firmware amp Files Fields and Default Values Setting Default Description Type Aruba Displays a drop down list of the primary AP makes and models that AWMS supports with Controller automated firmware distribution any model the file when an upgrade is attempted Displays the name of the file server supporting the group Owner Role Description Server Protocol Use Group File Server Firmware Filename Displays the name of the file that was uploaded to AWMS and to be transferred to an AP when the file is used in an upgra
88. documentation and or other materials provided with the distribution Dell PowerConnect W AirWave 7 2 User Guide Third Party Copyright Information 275 3 All advertising materials mentioning features or use of this software must display the following acknowledgement This product includes software developed by Systemics Ltd www systemics com THIS SOFTWARE IS PROVIDED BY SYSTEMICS LTD AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT INDIRECT INCIDENTAL SPECIAL EXEMPLARY OR CONSEOUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES LOSS OF USE DATA OR PROFITS OR BUSINESS INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY WHETHER IN CONTRACT STRICT LIABILITY OR TORT INCLUDING NEGLIGENCE OR OTHERWISE ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE The licence and distribution terms for any publically available version or derivative of this code cannot be changed 1 e this code cannot simply be copied and put under another distribution licence including the GNU Public Licence Perl Net IP Copynght c 1999 2002 RIPE NCC All Rights Reserved Permission to use copy modify and distribute this software and its documentation
89. dropdown menu for Cisco and Dell PowerConnect W devices and AWMS automatically finds and adds specific make and model information into its database Perform these steps to manually add devices to AWMS 1 The first step to add a device manually is to select the vendor and model Browse to the Device Setup gt Add page and select the vendor and model of the device to add Figure 70 illustrates this page 112 Discovering Adding and Managing Devices Dell PowerConnect W AirWave 7 2 User Guide Figure 70 Device Setup gt Add Page Illustration Select the type of device to add 3Com 8750 vi Add Import Devices via CSV 3Com 8750 3Com WX100 3Com WX1200 3Com WX2200 3Com WX4400 2 Select Add and the Device Communications and Location sections appear illustrated in Figure 71 Figure 71 Device Setup Add Device Communications and Location Sections Name Leave name blank to read it from device IP Address SNMP Port 161 m Community String o000000000 Confirm Community String 999999999 SNMPv3 Username Auth Password Confirm Auth Password SNMPv3 Auth Protocol MDS v Privacy Password Confirm Privacy Password SNMPv3 Privacy Protocol DES Telnet SSH Username Telnet SSH Password Confirm Telnet SSH Password enable Password Confirm enable Password Location Group San Francisco SSID Fr Folder Top v 9 Monitor Only no changes wil be made to device O Manage r
90. enabled to ensure support of legacy users For Proxim only this setting enables to AP to send its SSID in every beacon but it does not respond to any probe requests For Proxim only if more than one SSID is enabled this option enables them to be sent in separate beacons Yes This setting blocks communication between client devices based on SSID 5 Locate the Encryption area on the Groups gt SSIDs page and adjust these settings as required Table 54 describes the settings and default values Table 54 Groups gt SSIDs gt Encryption Section Fields and Default Values Encryption Mode Default No Encryption Dell PowerConnect W AirWave 7 2 User Guide Description Drop down menu determines the level of encryption required for devices to associate to the APs The drop down menu options are as follows Each option displays additional encryption settings that must be defined Complete the associated settings for any encryption type chosen No Encryption Optional WEP Wired Equivalent Privacy not PCI compliant as of 2010 Require WEP Wired Equivalent Privacy not PCI compliant as of 2010 Require 802 1x Based on the WEP algorithm Require Leap Lightweight Extensible Authentication Protocol 802 1x WEP Combines the two encryption types shown 802 1x LEAP Combines the two encryption types shown LEAP WEP Combines the two encryption types shown Static CKIP Cisco Key Integrity Protocol WPA Wi Fi Protected Acc
91. follows Aironet 340 Aironet 350 Aironet 1200 Select one of the three options listed Table 24 describes the settings and default values of this section Table 24 Cisco Aironet VxWorks User Creation Options Fields and Default Values Default Description Do not modify N A Enables AWMS using only an existing user account on the AP as defined in the Cisco VxWorks security SNMP Username Password section in the Default Secrets area This user account must have all settings permissions set Create and use N A Enables AWMS to create a new user account specified below on each AP with all specified user permissions enabled 8 Locate the Symbol 4131 Cisco Aironet IOS and Nomadix AG2000w SNMP Initialization area Select one of the options listed Table 25 describes the settings and default values Table 25 Device Setup gt Communications Fields and Default Values Setting Default Description Do Not Modify Yes When selected specifies that AWMS not modify any SNMP settings If SNMP is not already SNMP Settings initialized on the Symbol Nomadix and Cisco IOS APs AWMS is not able to manage them Enable read write When selected and when on networks where the Symbol Nomadix and Cisco IOS APs do SNMP not have SNMP initialized this setting enables SNMP so the devices can be managed by AWMS Loading Device Firmware Onto AWMS optional Overview of the Device Setup Upload Firmware amp Files Page AWMS enables automated firmware
92. for any purpose and without fee is hereby granted provided that the above copyright notice appear in all copies and that both that copyright notice and this permission notice appear in supporting documentation and that the name of the author not be used in advertising or publicity pertaining to distribution of the software without specific written prior permission THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFIWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS IN NO EVENT SHALL AUTHOR BE LIABLE FOR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE DATA OR PROFTTS WHETHER IN AN ACTION OF CONTRACT NEGLIGENCE OR OTHER TORTIOUS ACTION ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE Berkeley DB 1 85 Copyright c 1987 1988 1990 1991 1992 1993 1994 1996 1997 1998 The Regents of the University of California All rights reserved Redistribution and use in source and binary forms with or without modification are permitted provided that the following conditions are met l Redistributions of source code must retain the above copyright notice this list of conditions and the following disclaimer 2 Redistributions in binary form must reproduce the above copyright notice this list of conditions and the following disclaimer in the documentation and or other materials provided with the distribution 3 All advertising
93. from Device Setup gt SNMPv3 authentication password Communication NOTE SNMPv3 supports three security levels 1 no authentication and no encryption 2 authentication and no encryption and 3 authentication and encryption AWMS currently only supports authentication and encryption Privacy Taken from Device Setup gt SNMPv3 privacy password Password Communication NOTE SNMPv3 supports three security levels 1 no authentication and no encryption 2 authentication and no encryption and 3 authentication and encryption AWMS currently only supports authentication and encryption 4 In the Location field select the appropriate group and folder for the device 5 At the bottom of the page select either the Monitor Only or Management read write radio button The choice depends on whether or not you wish to overwrite the Group settings for the device being added For more information and a detailed procedure see Authorizing Devices to AWMS from APs Devices gt New Page on page 111 NOTE If you select Manage read write AWMS overwrites existing device settings with the Group settings Dell PowerConnect W K recommends placing newly discovered devices in Monitor read only mode to enable auditing of actual settings instead of Group Policy settings 6 Select Add to finish adding the devices to the network Adding Multiple Devices from a CSV File You can add devices in bulk from a CSV file to AWM S Here
94. from the Groups gt List page to create a new group define a group name In either case the Monitor page appears 2 Select the PIMP tab in the AWMS navigation menu Figure 55 illustrates this page Figure 55 Groups gt PTMP Page Illustration Proxim HP 11 802 11a Radio Channel Channel Range 30 215 58 802 11g Radio Channel 10 Channel Bandwidth 20 ww Network Name Network Secret Guge Nels Seca HEEN 3 Define the settings on this page lable 66 describes the settings and default values Table 66 Groups gt PTMP Fields and Default Values Setting Default Description 802 11a Radio Channel LEN Selects the channel used for 802 11a radios by the devices in this group 802 11g Radio Channel selects the channel used for 802 11g radios by the devices in this group Channel Bandwidth Defines the channel bandwidth used by the devices in this group Network Name Wireless Network Sets the Network name with a range of length supported from two to 32 alphanumeric characters Network Secret None Sets a shared password to authenticate clients to the network 4 Select Save and Apply when configurations are complete to make them permanent or select Save to retain these settings prior to pushing to controllers at a later time Configuring Proxim Mesh Radio Settings l Go to the Groups gt Proxim Mesh configuration page to configure Mesh specific radio settings 2 Define the settings as required for you
95. gt Manage configuration page select the proper role for the AP in the WDS Role dropdown menu The following example sets an AP as a WDS Slave with the following lines Sif wds role client wlccp ap username wlse password 7 XXXXXXXXXX endif The following example sets an AP as a WDS Master with the following lines Sif wds role master aaa authentication login method wds group wds aaa group server radius wds server 10 2 25 162 auth port 1645 acct port 1646 wlccp authentication server infrastructure method wds wlccp wds priority 200 interface BVII wlccp ap username wlse password 7 095B421A1C Sendif The following example sets an AP as a WDS Master Backup with the following lines Sif wds role backup aaa authentication login method wds group wds aaa group server radius wds server 10 2 25 162 auth port 1645 acct port 1646 wlccp authentication server infrastructure method_wds wlccp wds priority 250 interface BVII wlccp ap username wlse password 7 095B421A1C endif SCP Required Settings in Templates A few things must be set up before enabling SCP on the Groups gt Basic configuration page The credentials used by AWMS to login to the AP must have level 15 privileges Without them AWMS is not able to communicate with the AP via SCP The line aaa authorization exec default local must bein the APs configuration file and the AP must have the SCP server enabled These three settings correspond to the following lines in the
96. in the Lost Ethernet Action field 1 1000 secs Upgrade Radio Yes If enabled this setting mandates that the radio firmware be upgraded to a firmware version Firmware When compatible with the current version of AP firmware AP Firmware Is Upgraded 9 To configure settings specific to the Proxim AP 600 AP 700 AP 2000 AP 4000 Avaya AP 3 4 5 6 7 8 and ProCurve 520WL locate the appropriate section of Groups gt Radio page and define the required fields Table 63 describes the settings and default values Table 63 Groups gt Radio gt Proxim Avaya Procurve APs Fields and Default Values Default Description Interference Robustness Load Balancing If enabled this setting allows client devices associating to an AP with two radio cards to determine which card to associate with based on the load number of clients on each card NOTE This feature is only available when two 802 11b wireless cards are used in an AP 2000 If enabled this option will fragment packets greater than 500 bytes in size to reduce the impact of radio frequency interference on wireless data throughput 90 Configuring and Using Device Groups in AWMS Dell PowerConnect W AirWave 7 2 User Guide Table 63 Groups gt Radio gt Proxim Avaya Procurve APs Fields and Default Values Continued Default Description Distance Between APs Large This setting adjusts the receiver sensitivity Reducing receiver sensitivity from its maximum may help reduce
97. information Name Fnter the ID by which you log into and operate in AWMS Email Address Enter the email address to be used for alerts triggers and additional AWMS functions that support an email address Phone Enter the area code and phone number if desired Notes Enter any additional text based information that helps other AWMS users or administrators to understand the functions roles or other nghts of the user being created Monitoring and Supporting AWMS with the System Pages The System pages provide a centralized location for system wide AWMS data and settings Apart from Triggers Alerts and Backups pages that are described elsewhere in this chapter the remaining pages of the System section are as follows System gt Status Displays status of all AWMS services Refer to Using the System gt Status Page on page 200 System gt Event Log This useful debugging tool keeps a list of recent AWMS events including APs coming up and down services restarting and most AWMS related errors as well as the user that initiated the action Refer to Using the System gt Event Log Page on page 207 System gt Configuration Change Jobs Manages configuration changes in AWMS Refer to Using the System gt Configuration Change Jobs Page on page 207 System gt Firmware Upgrade Jobs Displays information about current and scheduled firmware upgrades Refer to Loading Firmware Files to AWMS on page 50
98. is not discovered the installation program automatically proceeds to Step 2 Installing AWMS Software Including AWMS on page 19 If a previous version of the software is discovered the following message appears on the screen 18 Installing AWMS Dell PowerConnect W AirWave 7 2 User Guide The installation program discovered a previous version of the software Would you like to reinstall AWMS This will erase AWMS s database Reinstall y n Type y and press Enter to proceed CAUTION This action erases the current database including all historical information To ensure that the AWMS database is AN backed up prior to reinstallation answer n at the prompt above and contact your Value Added Reseller or directly contact Dell support Step 2 Installing AWMS Software Including AWMS The following message appears while AWMS software is transferred and compiled STEP 2 Installing AWMS software This will take a few minutes Press Alt F9 to see detailed messages Press Alt F1 return to this screen This step requires no user input but you can follow the instructions to monitor its progress and switch back to the installation screen Step 3 Checking the AWMS Installation After the AWMS software installation is complete the following message appears STEP 3 Checking AWMS installation Database is up AWMS is running version version number This step requires no user input Proceed to the next step as prompted to do so
99. monitor the Dell infrastructure Enable WMS offload Configure SNMP communication Create a proper policy for monitoring Dell infrastructure Discover the infrastructure 3 Configure device classification Set up rogue classification Set up rogue classification override Establish user classification override devices 4 Deploy ArubaOS specific monitoring features Enable remote AP and wired network monitoring View controller license information 5 Convert existing floor plans to VisualRF to include the following elements MMS AOS RF Plan 6 Use RTLS for increasing location accuracy optional Enable RTLS service on the AWMS server Enable RTLS on ArubaOS Infrastructure Additional Information Supporting WMS Offload For additional information including detailed concepts configuration procedures restrictions ArubaOS infrastructure and AWMS version differences in support of WMS Offload refer to the Best Practices Guide from support dell com manuals Dell PowerConnect W AirWave 7 2 User Guide Configuring AWMS 67 68 Configuring AWMS Dell PowerConnect W AirWave 7 2 User Guide Chapter 4 Configuring and Using Device Groups in AWMS This chapter describes the deployment of device groups within AWMS The section below describes the pages or focused subtabs available on the Groups tab Note that the available subtabs can vary significantly from one device group to another one or more subtabs may not appear dependi
100. on AWMS proceed to System gt Event Log Dell PowerConnect W AirWave 7 2 User Guide Third Party Security Integration for AWMS 259 260 Third Party Security Integration for AWMS Dell PowerConnect W AirWave 7 2 User Guide Appendix C Access Point Notes This appendix contains a few additional notes relevant to Cisco devices monitored by AWMS and includes the following sections Resetting Cisco VxWorks Access Points on page 261 Cisco IOS Dual Radio Template on page 263 Speed Issues Related to Cisco IOS Firmware Upgrades on page 264 AWMS Firmware Upgrade Process on page 264 Resetting Cisco VxWorks Access Points When using any WLAN equipment it may sometimes be necessary to recover a password and or to restore the default settings on the equipment Unlike other access points the Cisco Aironet hardware and software sometimes do not permit password recovery In these instances you may need to first return the equipment to its default state from which it can then be reconfigured For any Cisco VxWorks AP regardless of the software version being used you must first connect to the AP via the serial console and then perform the required steps to reset the unit Note that Cisco changed the procedure for resetting the AP configuration beginning with software version 11 07 The procedure below helps you determine which software version your AP s is currently running and which procedure to use to reset the AP
101. other vendors in the Group the ACL restrictions do not apply to those APs Perform the following steps to use the MAC ACL function 1 Browse to the Groups gt MAC ACL configuration page Figure 57 illustrates this page Figure 57 Groups gt MAC ACL Page Illustration Group infrastructure These settings apply to Proxim Cisco vxWorks Symbol and ProCurve 520 devices MAC ACL se MAC ACL Authorized MAC Addresses This list will not be set on Cisco VxWorks APs Nes se manual setting on each device Save Save and Apply Revert 2 Select Yes on the Use MAC ACL drop down menu Enter all authorized MAC addresses separated by white spaces 3 Select Save when configurations are complete to retain these settings Select Save and Apply to make the changes permanent or select Revert to discard all unapplied changes Specifying Minimum Firmware Versions for APs in a Group This configuration 1s optional AWMS allows you the option of defining the minimum firmware version for each AP type in a group on the Groups gt Firmware configuration page At the time that you define the minimum version AWMS automatically upgrades all eligible APs When you add APs into the group in the future you will be able to upgrade APs in manual fashion The firmware for an AP is not upgraded automatically when it is added to a group Perform the following steps to make this firmware configuration 1 Browse to the Groups gt Firmware con
102. period defined for the report This list provides links to additional information or configuration pages for each device Least Utilized by Maximum Number of Simultaneous Users By default this list displays the 10 devices that are the least used according to the number of users Least Utilized by Bandwidth By default this list displays the 10 devices that are the least used according to the bandwidth throughput Devices This list displays all devices in AWMS By default it is sorted alphabetically by device name K NOTE You can specify the number of devices that appear in each of the first four categories in Reports gt Definitions gt Add Any section of this report can be sorted by any of the columns For example you can specify a location and then sort the Devices list by the Location column to see details by location or you can see all of the APs associated with a particular controller by sorting on the Controller column If the AP name contains information about the location of the AP you can sort by AP name If sorting the Devices list does not provide you with sufficient detail you can specify a Group or Folder in the report Definition of a custom report If you create a separate Group or Folder for each set of master and local controllers you can generate a separate report for each Group or Folder With this method the summary sections of each report contain only devices from that Group or Folder Figure 16l a
103. polled for bandwidth usage This setting Bandwidth Polling minutes can be disabled or set to poll from switches in a range from every 5 minutes to 30 minutes Period Interface Error 30 Sets the frequency in which network interfaces are polled for up down status This setting Counter Polling minutes can be disabled or set to poll bridge forwarding tables from switches in a range from every 5 Period minutes to 30 minutes Poll 802 3 error Sets whether 802 3 error counters should be polled counters Poll Cisco interface Sets whether the interface error counters for Cisco devices should be polled error counters 15 To configure settings for universal devices on the network including routers and switches that support both wired and wireless networks locate the Universal Devices Routers and Switches section of the Groups gt Basic page and define the version of SNMP to be supported 19 Select Save when the configurations of the Groups gt Basic configuration page are complete to retain these settings but without pushing these settings to all devices in the group Save is a good option if you intend to make additional device changes in the group and wish to wait until all configurations are complete before you push all configurations at one time Select Save and Apply to make the changes permanent or select Revert to discard all unapplied changes What Next Continue to additional sections in this chapter to create new
104. power connector As the AP reboots introductory system information will appear onscreen The boot block version appears in the third line of this text and is labeled Bootstrap Ver System ID 00409625854D Motherboard MPC860 50MHz 2048KB FLASH 16384KB DRAM Revision 20 Bootstrap Ver 1 01 FLASH CRC 4143E410 OK Initialization OK Resetting the AP for Boot Block Versions from 1 02 to 11 06 Follow these steps to reset your AP if the boot block version on your AP is greater than or equal to version 1 02 but less than 11 07 l 2 If you have not done so already connect to the AP see above select OK and press Enter When the Summary Status screen appears reboot the AP by pressing CTRL X or by unplugging and then re plugging the power connector When the memory files are listed under the heading Memory File press CTRL W within five seconds to reach the boot block menu Copy the AP s installation key to the AP s DRAM by performing the following steps Press C to select Copy File Press 1 to select DRAM Press the selection letter for AP Installation Key Perform the following steps to reformat the AP s configuration memory bank Press CTRL Z to reach the Reformat menu Press SHIFT 1 to select FORMAT Memory Bank Press 2 to select Config Press upper case Y SHIFT Y to confirm the FORMAT command Press CTRL Z to reach the reformat menu and to reformat the AP s configuration memory bank Copy the
105. radio radio index coverage rate 6 Sendif Sif radio type 11bgn radio radio index coverage rate 18 endif A sample Symbol thin AP template is provided below for reference and for the formatting of if statements radio add radio index lan mac radio type ap type radio radio index radio number radio number radio radio index description description Sif radio type 11a radio radio radio radio radio radio radio radio radio radio radio index radio index radio index radio index radio index radio index radio index radio index radio index radio index endif Sif radio type 11lan Speed basic6 9 basicl2 18 basic24 36 48 54 antenna mode primary self heal offset 1 beacon interval 99 rrts threshold 2345 max mobile units 2 admission control admission control admission control admission control radio radio index speed basiclla 9 rly 3r4r BrO Tr879 10 11 12 13 14 15 endif Sif radio type 11b radio radio index speed basici basic2 basic5p5 basicll endif if radio type 11bg 5 voice voice voice voice 18 36 max perc 76 res roam perc 11 max mus 101 max roamed mus 11 48 54 mcs speed basicl basic2 basic5p5 6 9 basic11 12 18 24 36 48 54 radio radio index radio radio index on channel scan radio radio index adoption pref id 7 radio radio index enhanced beacon table radio radio index enhanced probe table endif if radio type 1
106. recommend you incorporate signal strength into the classification Filters rogues according to ad hoc status rules on the RAPIDS Rules page Filter Rogues Discovered Filters rogues according to the remote AP that discovers them Enabling this option by Remote APs causes AWMS to drop all rogue discovery information coming from remote APs Filter IDS Events from Filters IDS Events discovered by remote APs Remote APs Rogue Containment Options Using RAPIDS AMP can shield rogue devices from associating to Cisco WLC controllers versions 4 2 114 and later and Dell PowerConnect W controllers running AOS versions 3 x and later AMP will alert you to the appearance of the rogue device and identify any mismatch between controller configuration and the desired configuration K NOTE WMS Offload is not required to manage containment in AMP Table 96 shows the Containment Options section of the RAPIDS gt Setup page Table 96 RAPIDS gt Setup gt Containment Options Fields and Default Values Default Description Manage rogue AP Yes Rogue APs on Cisco WLC and Dell PowerConnect W controllers as defined by the Rules Containment engine will be classified as a Contained Rogue AMP pushes the containment status of a rogue device to the controller and the controller takes the appropriate action For the rogue device to be contained you may need to configure containment on the controller Manage rogue AP If disabled AMP will display t
107. remains available to you in any phase of AWMS installation Deploying WMS Offload Overview of WMS Offload in AWMS This section describes the Dell PowerConnect W Wireless LAN Management Server WMS offload infrastructure WMS Offload is supported with the following two requirements ArubaOS Version 2 5 4 or later AWMS Version 6 0 or later The Dell PowerConnect W WMS feature is an enterprise level hardware device and server architecture with managing software for security and network policy There are three primary components of the WMS deployment Air Monitor AP devices establish and monitor RF activity on the network The WMS server manages devices and network activity to include rogue AP detection and enforcement of network policy The AWMS graphical user interface GUI allows users to access and use the WMS functionality WMS Offload is the ability to place the burden of the WMS server data and GUI functions on AWMS WMS master controllers provide this data so that AWMS can support rigorous network monitoring capabilities General Configuration Tasks Supporting WMS Offload in AWMS WMS Offload must be enabled with a six fold process and related configuration tasks as follows 66 Configuring AWMS Dell PowerConnect W AirWave 7 2 User Guide l Configure WLAN switches for optimal AWMS monitoring Disable debugging Ensure AWMS server is a trap receiver host Ensure proper traps are enabled 2 Configure AWMS to optimally
108. restrict user roles to multiple folders within the overall hierarchy 44 Configuring AWMS Dell PowerConnect W AirWave 7 2 User Guide even if they do not share the same top level folder Non admin users are only able to see data and users for devices within their assigned subset of folders Perform the following steps to view add edit or delete user roles l Go to the AMP Setup gt Roles page This page displays all roles currently configured in AWMS Figure 19 illustrates the contents and layout of this page Figure 19 AMP Setup Roles Page lllustration New Role Name a Enabled Type Access Level Top Folder Visible Groups RAPIDS VisualRF Helpdesk Myrole Yes Guest Access Sponsor Top None Read Only No w Administration Yes Administrator Top All Read Write Read Write Yes Read Only Monitoring amp Auditing Yes AP Device Manager Audit Read Only Top All None Read Only No Select All Unselect All 2 Select Add to create a new role select the pencil icon to edit an existing role or select a checkbox and select Delete to remove that role from AWMS When you select Add or the edit icon the Add Edit Role page appears illustrated in Figure 20 Figure 20 AMP Setup gt Roles gt Add Edit Role Page Illustration Role Name Enabled ves C No Type AP Device Manager AP Device Access Level Monitor Read Only Top Folder Top RAPIDS None VisualRF Read Only Helpdesk C Yes No
109. rules list go to the RAPIDS gt Rules page Select the check box next to the rule you want to delete and select Delete The rule is automatically deleted from RAPIDS gt Rules To edit any existing rule select its pencil icon to launch the RAPIDS Classification Rule page see Figure 11 Edit or revise the fields as necessary then select Save To change the sequence in which rules apply to any rogue device drag and drop the rule to a new position in the rules sequence Recommended RAPIDS Rules If Any Device Has Your SSID Then Classity as Rogue The only devices broadcasting your corporate SSID should be devices that you are aware of and are managed by AWMS Rogue devices often broadcast your official SSID in an attempt to get access to your users or to trick your users into providing their authentication credentials Devices with your SSID generally pose a severe threat This rule helps to discover flag and emphasize such a device for prompt response on your part If Any Device Has Your SSID and is Not an Ad Hoc Network Type Then Classify as Rogue This rule classifies a device as a rogue when the SSID for a given device is your SSID and is not an Ad Hoc device Windows XP automatically tries to create an Ad hoc network if it can not find the SSID for which it is searching This means that user s laptops on your network may appear as Ad Hoc devices that are broadcasting your SSID If this happens too frequently res
110. select Revert to discard all unapplied changes 11 Continue with additional security related procedures in this document for additional RADIUS and SSID settings for device groups as required 86 Configuring and Using Device Groups in AWMS Dell PowerConnect W AirWave 7 2 User Guide Configuring Radio Settings for Device Groups The Groups gt Radio configuration page allows you to specify detailed RF related settings for devices in a particular group configuring the settings in your default Group NOTE If you have existing deployed devices you may want to use the current RF settings on those devices as a guide for Perform the following steps to define RF related radio settings for groups Go to the Groups gt List page and select the group for which to define radio settings by selecting the group name Alternatively select Add from the Groups gt List page to create a new group define a group name In either case the Monitor page appears 2 Goto the Groups gt Radio page Figure 42 illustrates this page Figure 42 Groups Radio Page lllustration o RadioSetings Allow Automatic Channel Selection 2 4 GHz C ves No Allow Automatic Channel Selection 5 GHz C Yes No eri feie Channel Selection 4 9 GHz a g 802 11b Data Rates Mbps 1 0 Required 2 0 Required 5 5 Optional 11 0 Optional Frag Threshold Enabled C Yes No RTS CTS Threshold Enabled 9 22 RTS CTS Max
111. selected Uniquely identifies the group by location vendor department or any other identifier such as Accounting APs Floor 1 APs Cisco devices 802 1x APs and so forth Up Down Status The time between Up Down SNMP polling periods for each device in the group Detailed SNMP polling Polling Period period information is available on the Groups gt Basic configuration page Note that by default most polling intervals do not match the up down period Is Global Group If a group is designated as global it may not contain APs but it may be used as a template for other groups This column may also indicate Yes if this group has been pushed to the AMP from a Master Console Global Group Specifies which group this Subscriber Group is using as its template SSD The SSID assigned to supported device types within the group Total number of devices contained in the group including APs controllers routers or switches The number of devices within the group that are not reachable via SNMP or are no longer associated to a controller Note that thin APs are not directly polled with SNMP but are polled through the controller That controller may report that the thin AP is down or is no longer on the controller At this point AWMS classifies the device as down Mismatched The number of devices within the group that are in a mismatched state The number of ignored devices in that group Users The number of mobile users associated with all
112. solely with indoor wireless access points and WLAN controllers over the wired network In more complex deployments AWMS seamlessly integrates and communicates with authentication servers accounting servers TACACS servers routers switches network management servers wireless IDS solutions helpdesk systems indoor wireless access points mesh devices AWMS has the flexibility to manage devices on local networks remote networks and networks using Network Address Translation NAT AWMS communicates over the air or over the wire using a variety of protocols The power performance and usability of the AWMS solution become more apparent when considering the diverse components within a WLAN Table 5 itemizes such network components as an example Table 3 Components of a WLAN Component Description Autonomous AP standalone device which performs radio and authentication functions Thin AP Radio only device coupled with WLAN controller to perform authentication WLAN controller Used in conjunction with thin APs to coordinate authentication and roaming Network Management Systems and Event Correlation OpenView Tivoli and so forth RADIUS Authentication RADIUS authentication servers Funk FreeRADIUS ACS or IAS RADIUS Accounting AWMS itself serves as a RADIUS accounting client Wireless Gateways Provide HTML redirect and or wireless VPNs TACACS Used to authenticate AWMS administrative users Routers Switches Provide AWMS with data for
113. sources The spectrum analyzer is used in conjunction with Adaptive Radio Management ARM technology While the spectrum analyzer identifies and classifies Wi Fi and non Wi Fi sources of interference ARM automatically ensures that APs serving clients will stay clear of interference Individual APs or groups of APs can be converted to dedicated spectrum monitors through the dot11a and dot 1g radio profiles of that AP or AP group or through a special spectrum override profile Fach 802 11a and 802 11g radio profile references a spectrum profile which identifies the spectrum band the radio will monitor and analyze and defines the default ageout times for each monitored device type By default an 802 1 la radio profile references a spectrum profile named default a which configures the radio to monitor the upper channels of the 5 GHz radio band and an 802 11g radio profile references a spectrum profile named default g which configures the radio to monitor all channels the 2 4 GHz radio band Most interference will occur in the 2 4 GHz radio band For more information about Spectrum analysis and ARM technology refer to the ArubaOS 6 0 User Guide from support dell com manuals Spectrum Configurations and Prerequisites The following prerequisites must be in place to configure an AP to run in spectrum mode in AWMS The AP must be in Manage Read Write mode The AP s associated controller must have an RFprotect license
114. that prefix receive the new score 4 Select Add to create the new override or select Save to retain changes to an existing override The new or revised override appears on the RAPIDS gt Score Override page 5 To remove any override select that override in the checkbox and select Delete Audit Log The Audit Log is a record of any changes made to the RAPIDS rules setup page and manual changes to specific rogues This allows you to see how something is changes when it changed and who made the alteration The Audit Log can be found at RAPIDS gt Audit Log See Figure 123 for more information 178 Using RAPIDS and Rogue Classification Dell PowerConnect W AirWave 7 2 User Guide Figure 123 Audit Log RAPIDS Changes Time Wed Feb 17 10 21 12 2010 Wed Feb 17 10 20 20 2010 Fri Feb 12 08 19 00 2010 Fri Feb 12 08 19 00 2010 Tue Feb 9 15 53 57 2010 Tue Feb 9 15 53 03 2010 Thu Feb 4 15 59 12 2010 Mor Feb 1 13 55 36 2010 Mor Feb 1 13 55 36 2010 Thu Jan 28 15 48 54 2010 User admin admin jason jason admin admin admin admin admin admin Event rapids classification rule id 38 classification 70 gt 80 seas config id 11 rapids manage containment 01 gt 1 rapids classification rule id 391 classification 80 gt YO seas config id 11 rapids manage containment 1 gt 0 rapids classification rule id 391 manufacturer praxim gt 3Com name Contain Proxim gt Cont
115. the AMP Setup gt Users page This page displays all users currently configured in AWMS Figure 17 illustrates the contents and layout of this page Figure 17 AMP Setup Users Page lllustration New User Username a Role Enabled Type Access Level Top Folder Name Email Address Phone Notes amp admin Administration Yes Administrator Top s E 2 Select All Unselect All 2 Select Add to create a new user select the pencil icon to edit an existing user or select a user and select Delete to remove that user from AWMS When you select Add or the edit icon the Add User page appears illustrated in Figure 18 Figure 18 AMP Setup Users Add Edit User Page lllustration Username i Role Password Confirm Password Po Email Address Po Notes Cancel 3 Enter or edit the settings on this page lable 18 describes these settings in additional detail Table 18 AMP Setup gt User gt Add Edit User Fields and Default Values Setting Default Description Username Sets the username as an alphanumeric string The Username is used when logging in to AWMS and appears in AWMS log files Dell PowerConnect W AirWave 7 2 User Guide Configuring AWMS 43 Table 18 AMP Setup gt User gt Add Edit User Fields and Default Values Continued Setting Default Description Specifies the User Role that defines the Top viewable folder type and access level of the user specified in the previous field The admin user defines u
116. the AP Manage configuration page DHCP IP address of the device is set dynamically using DHCP Using Substitution Variables in Templates Substitution variables are used to set AP specific values on each AP in the group It 1s obviously not desirable to set the IP address hostname and channel to the same values on every AP within a Group The variables in Table 9 are substituted with values specified on each access point s APs Devices gt Manage configuration page within the AWMS User page Sometimes the running config file on the AP does not include the command for one of these variables because the value is set to the default For example when the transmission power is set to maximum the default the line power local maximum will not appear in the AP running config file although it will appear in the startup config file AWMS would typically detect and flag this variance between the running config file and startup config file as a configuration mismatch To prevent AWMS from reporting a configuration mismatch between the desired startup config file and the running config file on the AP AWMS suppresses the lines in the desired configuration when auditing the AP configuration similar to the way AWMS suppresses lines enclosed in parentheses which is explained below A list of the default values that causes lines to be suppressed when reporting configuration mismatches is shown in Table 91 Table 91 Substitution Variables in T
117. the APs Devices gt Down page displays Configuration The pie chart displays all known device configuration status on the network Devices are classified as Good Compliance Unknown Mismatched or Audit Disabled Select the Mismatched link to see the APs Devices gt Mismatched page Alert Summary This section displays all known and current alerts configured and enabled in the System gt Alerts page Alerts can be sorted using the column headers Type Last 2 Hours Last Day Total or Last Event The Alert Summary field displays four types of alerts as follows AMP Alerts IDS Events Incidents RADIUS Authentication Issues Select any alert type for more information NOTE The Incidents section only increments the counter for incidents that are open and associated to an AP This is also the case if you select Incidents and view incident details To view all incidents including those not associated to an AP go to Helpdesk gt Incidents 200 Performing Daily Administration in AWMS Dell PowerConnect W AirWave 7 2 User Guide Table 117 Home gt Overview Sections and Charts Continued Section Description Quick Links The Quick Links section provides drop down menus that enable you to move to the most common and frequently used pages in AWMS as follows Go to folder This menu lists all folders defined in AWMS from the APs Devices List page See Using Device Folders Optional on page 131 Go to group This menu lists all grou
118. the Start and Stop columns display date and time information the scan is available to display the results 6 Select the pencil icon for the scan to display the results Table 71 describes the scan results and related information Table 71 Device Setup gt Discover gt Discovery Execution Fields Column Description Displays the network to be scanned Credentials Displays the credentials used in the scan Total Devices Found Displays the total number of APs detected during the scan that AWMS can configure and monitor Total includes both APs that are currently being managed by AWMS as well as newly discovered APs that are not yet being managed New Devices Found Displays the number of discovered APs that are not yet managed but are available Total Rogues Found Displays the total number of APs detected during the scan that AWMS could not configure or monitor Total includes both APs that have been discovered in earlier scans as well as newly discovered APs from the most recent scan 7 Go to the APs Devices gt New page to see a full list of the newly discovered devices that the scan detected Figure 68 illustrates this page 110 Discovering Adding and Managing Devices Dell PowerConnect W AirWave 7 2 User Guide Figure 68 APs Devices gt New Page Illustration To discover more devices visit the Discover page 1 3 w of 146 APs Devices Page 1 w of 49 gt gt Choose Columns CSV Export Device a Controller Type IP A
119. the amount of crosstalk between wireless stations to better support roaming users Reducing the receiver sensitivity user stations will be more likely to connect with the nearest access point 802 11g Operational 802 11b This setting sets the operational mode of all g radios in the group to either b only g Mode 802 119 only or b g 802 11abg Operational 802 11b This setting sets the operational mode of all a b g radios in the group to either a only b Mode 802 11g only g only or b g 802 11b Transmit Rate Auto This setting specifies the minimum transmit rate required for the AP to permit a user Fallback device to associate 802 11g Transmit Rate Auto This setting specifies the minimum transmit rate required for the AP to permit a user Fallback device to associate 802 11a Transmit Rate Auto This setting specifies the minimum transmit rate required for the AP to permit a user Fallback device to associate Rogue Scanning Yes If enabled any ORINOCO or Avaya APs in the group with the appropriate firmware Will passively scan for rogue APs at the specified interval This rogue scan will not break users association to the network NOTE This feature can affect the data performance of the access point Rogue Scan Interval 15 minutes If rogue scanning is enabled this setting controls the frequency with which scans are conducted in minutes Frequent scans provide the greatest security but AP performance and throughput available to use
120. them back to Managed mode 5 Locate the External Logging section and adjust settings to send audit and system events to an external syslog server Table 11 describes these settings and default values Table 11 AMP Setup General External Syslog Fields and Default Values Setting Default Description Rma et a veins Ho Ss ten aetna mouse no Sieemeniaepremena masdenm 6 Locate the Historical Data Retention section and specify the number of days you wish to keep client session records and rogue discovery events Table 12 describes the settings and default values of this section Many settings can be set to have no expiration date Table 12 AMP Setup gt General gt Historical Data Retention Fields and Default Values Default Description Inactive User Data Defines the number of days AWMS stores basic information about inactive users Dell 2 1500 days PowerConnect W recommends a shorter setting of 60 days for customers with high user turnover such as hotels The longer you store inactive user data the more hard disk space you require User Association Defines the number of days AWMS stores client session records The longer you store History 2 550 days client session records the more hard disk space you require Tag History Sets the number of days AWMS retains location history for Wi Fi tags 2 550 days Rogue AP Discovery Defines the number of days AWMS stores Rogue Discovery Events The longer you store Events
121. upgrade your AWMS l Log in to the AWMS server as the root user 2 Run the following command where x x x is equal to the latest AWMS version start amp upgrade v x x x Upgrading Without Internet Access If your AWMS cannot get to the Internet l Download the latest AWMS version from our download page support dell com 2 Copy the file to AWMS root directory using WinSCP 3 On the AWMS run the following command start amp upgrade v x x x The start amp upgrade script will check the root directory for the latest update If the update is not found the script will attempt to download it from the AirWave support page The script will then extract the version specific upgrade script The version specific script will deploy all needed files update the database perform any data migrations and restart the AWMS services Backing Up AWMS AWMSS creates nightly archives of all relational data statistical data and log files This occurs by default at 4 15 AM but is configurable on the AMP Setup gt General page under Nightly Maintenance Time Although AWMS only keeps the last four sets of archives the archives can be downloaded manually or automatically off site for more extensive backup strategies AWMS creates one data backup file each night The data backup file contains all of the device and group information as well as historical data and system files including IP address NTP information mail relay hosts and other AWMS sett
122. used on a pure 802 11g deployment improves WLAN throughput by reducing wait time for transmitter to assure clear channel assessment Multicast Data Rate 55Mbps Sets the maximum data rate of the multicast data packets Rogue Scanning Enabled If enabled the 420 APs in the group will scan for rogues 0 Rogue Scanning Interval 72 If rogue scanning is enabled this setting controls the frequency with which scans 15 10080 min are conducted in minutes Frequent scans provide the greatest security but AP performance and throughput available to user devices may be impacted modestly during a rogue scan NOTE This setting only applies to Periodic scans Rogue Scanning Duration Specifies the amount of time in milliseconds the AP should spend performing the 50 1000 msec rogue scan If the duration is set too high users may start to experience connectivity Issues NOTE This setting only applies to periodic scans Rogue Scan Type Periodic specifies the Rogue Scanning mode When set to Dedicated users are unable to associate to the AP 6 Locate the HP ProCurve 240 Enterasys AP 3000 and AP 4102 section and define the settings Table 60 describes the settings and default values of this page Table 60 Groups Radio HP ProCurve 240 Enterasys AP 3000 and AP 4102 Fields and Default Values Setting Default Description Operational Mode 802 11b Sets the radio operational mode for all of the ProCurve 420s Enterasys 3000s and
123. user information and AP and Rogue discovery Help Desk Systems Remedy EPICOR Rogue APs Unauthorized APs not registered in the AWMS database of managed APs Dell PowerConnect W AirWave 7 2 User Guide Introduction 15 The flexibility of AWMS enables it to integrate seamlessly into your business hierarchy as well as your network topology AWMS facilitates various administrative roles to match each individual user s role and responsibility A Help Desk user may be given read only access to monitoring data without being permitted to make configuration changes A U S based network engineer may be given read write access to manage device configurations in North America but not to control devices in the rest of the world security auditor may be given read write access to configure security policies across the entire WLAN NOC personnel may be given read only access to monitoring all devices from the Master Console 16 Introduction Dell PowerConnect W AirWave 7 2 User Guide Chapter 2 Installing AWMS This chapter contains information and procedures for installing and launching the AirWave Wireless Management Suite AWMS and includes the following topics e AWMS Hardware Requirements and Installation Media on page 17 e Installing Linux CentOS 5 Phase 1 on page 17 e Installing AWMS Software Phase 2 on page 18 e Configuring and Mapping Port Usage for AWMS on page 21 e AWMS Naviga
124. using with remedy Server ccsseeeeeeeeeeeeeeeeeeeeeeeeeeeees 251 S RR BITTER TOT OE 149 host name Eee GM hos DAMO sententie aE 20 HE FOCUN O secuEtet ncn COO TREE FRU UR Rd TREES 77 89 149 Index 279 incidents Ge EET 249 installation EE o due E dd 19 IP address addine did EE iib ieetcu tuto bou n MEUS 19 Tore 212 L Linux Cent OS 5 je EE sca geumescenctuicaoe 17 logs ARVELE ISI TERRENCE 126 RES IE ERES 125 M MAC access control lists esee 99 TN 123 Master Console vuuusmesnissskrsnteredksenivvudrnbestide 211 Master Console and Failover eee eee 15 Modify Devices dal OE ET 130 monitoring den 127 N navigation ste eim vro OG TG PRIM 29 NNN 15 network settings SR IIT AOT NN ET E 41 MA N Deo RIETI UN UDNUNDON ANC E E 62 63 Nod 149 p pagination records SE A E A E suerte 31 pagination3vidseb USINE nesesita eranen 31 password Changing dera ROO ME MN dd 20 PCI Compliance Default Credential Compliance uaussasesimassnn 66 Ru eiu vc HT 64 product overview additional interfaces and tools 181 changing default root password uascosexedgebtosesvteeteke tts 20 eheokine IStalbAt Oil selxctdustenonamsccheed wesc cammmesaenunee 19 or NS dare and trie vaere 18 configuring mesh radio settings esses 97 dens Aae 109 GUAN er EE E RE 110 Jes DL onn Reda eum See rere a erect tuse 27 Mr 17 280 Index
125. when polling the WLSE Port 1741 Defines the port AWMS uses to communicate with the WLSE server Username Defines the username AWMS uses to communicate with the WLSE server The username and password must be configured the same way on the WLSE server and on AWMS The user needs permission to display faults to discover rogues and inventory API XML API to discover manageable APs As derived from a Cisco limitation only credentials with alphanumeric characters that have only letters and numbers not other symbols allow AWMS to pull the necessary XML APIs Password Defines the password AWMS uses to communicate with the WLSE server The username and password must be configured the same way on the WLSE server and on AWMS As derived from a Cisco limitation only credentials with alphanumeric characters that have only letters and numbers not other symbols allow AWMS to pull the necessary XML APIs 60 Configuring AWMS Dell PowerConnect W AirWave 7 2 User Guide Table 32 AMP Setup gt WLSE Fields and Default Values Continued Setting Default Description Poll for AP Discovery Poll Yes sets the method by which AWMS uses WLSE to poll for discovery of new APs and or for Rogue Discovery new rogue devices on the network Last Contacted None Displays the last time AWMS was able to contact the WLSE server Polling Period Determines how frequently AWMS polls WLSE to gather rogue scanning data 2 After you have completed all fi
126. you also have the option of specifying vendor name only and AWMS will automatically determine the correct type while bringing up the device If your CSV file includes make and model information AWMS will add the information provided in the CSV file as it did before It will not override what you have specified in this file in any way The CSV list must contain the following columns IP Address 114 Discovering Adding and Managing Devices Dell PowerConnect W AirWave 7 2 User Guide SNMP Community String Name e Type Auth Password e SNMPv3 Auth Protocol e Privacy Password SNMPv3 Username Telnet Username Telnet Password e Enable Password SNMP Port You can download a CSV file and customize it as you like A sample CSV file is illustrated in Figure 72 Figure 72 Sample CSV File IP Address SNMP Community String Name Type Auth Password SNMPv3 Auth Protocol Privacy Password SNMPv3 Privacy Protocol SNMPv3 Username Tel 10 34 64 163 private switchl example com Router Switch nonradiance md5 privacyi123 aes sv3user telnetuser telnetpwd enable 161 10 172 97 172 private switch2 example com router switch nonradiance sha privacyi23 des user 10 70 36 172 public Cisco WLC 4012 3 Cisco 4000 WLC 10 46 111 48 1 To import a CSV file go to the Device Setup gt Add page 2 Select the Import Devices via CSV link The Upload a list of devices page displays see Figure 73 Figure 73 Device Setup gt Add gt Import
127. you have the option of choosing a server protocol of TFTP or FTP If you choose FTP you may later notice that the firmware files are pushed to the device more quickly With selection of some types particularly Cisco controllers you can specify the boot software version Firmware Version Provides a user configurable field to specify the firmware version number Appears if you did not select the default Aruba Controller type Description None Provides a user configurable text description of the firmware file Upload firmware Built in Selects the TFTP server that access points use to download their firmware The built in files and use built in TFTP server is recommended firmware If you choose to use an external TFTP server enter the File Server IP Address and the Firmware Filename lets you select which protocol to use and this varies from device to device If you select Use an external N A You can also choose to assign the external TFTP server on a per group basis If you select firmware file server this option you must enter the IP address on the Groups gt Firmware page Complete the Firmware File Server IP Address field NOTE With selection of some Types you are prompted with the Server Protocol field that FTP AWMS uses an anonymous user for file upload Use Group File Disabled If you opt to use an external firmware file server this additional option appears This Server setting instructs AWMS to use the server that is asso
128. 0 1 10 0 73 0 73 0 73 0 55 0 55 0 55 0 37 0 37 0 18 0 18 0 18 0 18 0 18 100 00 Alcatel Lucent AP 124 5 0 1 0 Alcatel Lucent OAW 4308 5 0 1 0 APC AP7900 v3 7 0 Aruba 200 5 0 2 0 Aruba 2400 3 1 1 7 Aruba 2400 3 4 3 1 Aruba 2400 5 0 1 0 Aruba 3200 3 3 2 24 m 3 1 11 Aruba 3200 6 0 0 1 Aruba 3200 6 0 1 0 Aruba 3400 3 3 2 24 m 3 1 12 Aruba 3600 5 0 1 0 Aruba 3600 6 0 0 0 Aruba 6000 3 4 4 0 Aruba 6000 6 0 0 0 Aruba 620 3 4 2 5 Aruba 651 3 4 3 0 Aruba 651 6 0 0 0 Aruba 800 2 5 6 20 Aruba 800 3 3 2 19 FIPS Aruba 800 5 0 2 0 Aruba AP 105 3 4 4 0 Aruba AP 105 5 0 1 0 Aruba AP 105 6 0 1 0 164 Versions Aruba RAP 2WG Aruba AP 65 Aruba AP 125 Aruba RAP 5WN Aruba AP 70 Aruba AP 105 Cisco Aironet 1030 LWAPP Cisco Aironet 1000 LWAPP Aruba 3600 Aruba AP 61 Unknown Cisco Catalyst 3750 24T5 Symbol 5131 Symbol AP 100 Aruba 800 HP ProCurve 420 Proxim AP 700 118 Models m SATTE 153 28 02 91 16 6796 41 7 51 20 3 00 16 2 93 12 2 20 1 47 1 28 1 10 1 10 0 92 0 73 0 73 0 73 0 55 0 55 IBN CN M M BN 0 18 0 18 0 18 0 18 0 18 0 37 0 55 0 18 0 18 0 18 0 18 0 18 0 18 0 18 0 92 0 37 0 18 0 18 0 18 0 18 0 18 0 18 0 18 0 37 1 47 0 37 0 18 100 00 otal 100 0096 El XML x CSV ex dil Email tt Print re Count of Total The Memory and CPU Utilization Report displays the top memory usage by
129. 0 ethersphere 1322 Top Access Points 9 00 12 1e c0 2b 34 81 50 1 0 0 00 Aruba3200 3 121 Top Access Points 10 00 1a 1e c1 52 0e 82 00 1 1 2064 00 Aruba651 Top Access Points Most Utilized by Channel Usage 5 GHz Rank 4 Device ChannelBusy Interference NumberofUsers Bandwidth bps Location Controller 1 AP10 3 15 3 15 0 0 00 Sales Office hello Cisco4400 Top Access Points 2 AP0018 19bd bidO 1 57 1 57 0 0 00 ap lab Cisco4400 Top Access Points Most Utilized by Channel Usage 2 4 GHz EQ 1 AP0018 19bd b1d0 71 65 68 90 0 0 00 Cisco4400 Top Access Points 2 AP10 64 96 62 60 0 1 00 n Office hello Cisco4400 Top Access Points 3 APO01d alfc ca7a 22 83 20 47 0 0 00 default location 5500 6 0 196 0 Top Access Points Most MAC Phy Errors 5 GHz Rank fortene Velen Arernga Chesnel ntizaticn Member Sf Users Banded ups Locitien T Control Fer Geo 5 1 2103 1868659200 14 0 ethersphere 1322 Top Access Points 2 Fish bow 534816000 6 r3 T 4 cm 00 ethersphere 1322 Top Access Points 3 api05 A1 471571200 18 87 00 0 0 00 pit Aruba 3400 Top Access Points 4 1153 308016000 1 92 00 8 646989 00 ethersphere 1322 Top Access Points 5 1154 Q 300326400 1 89 50 7 142587 00 ethersphere 1322 Top Access Points 6 1260 261792000 3 88 00 2 73432 00 ethersphere 1322 Top Access Points 7 2188 242697600 1 91 00 4 110898 00 ethersphere 1322 Top Access Points 8 1263 242524800 6 91 00 3 14933
130. 000 series Aruba strongly recommends disabling this setting RAPIDS Processing Defines the processing and system resource priority for RAPIDS in relation to Priority AWMS as a whole When AWMS is processing data at or near its maximum capacity reducing the priority of RAPIDS can ensure that processing of other data such as client connections and bandwidth is not adversely impacted The default priority is Low You can also tune your system performance by changing group poll periods 10 Select Save when the General Server settings are complete and whenever making subsequent changes What Next Go to additional tabs in the AMP Setup section to continue additional setup configurations Complete the required configurations in this chapter before proceeding Dell support remains available to you for any phase of AWMS installation Defining AWMS Network Settings The next step in configuring AWMS is to confirm the AMP network settings Define these settings by navigating to the AMP Setup gt Network page Figure 16 illustrates the contents of this page Figure 16 AMP Setup gt Network Page Illustration Primary Network Interface Network Time NTP IP Address 192 2 24 Primary Secondary Hostname corp server com Subnet Mask 255 255 255 0 Static Routes eS Network a Subnet Mask Gateway Gateway 10 0 0 1 0 0 0 0 0 0 0 0 10 2 32 254 192221 255 255 255 0 0 0 0 0 Primary DNS IP Address 10 1 1 0 1922220 255 255 0 0 0
131. 009 5 30 PM DEG T 00 13 02 1E 67 15 RADIO1 101 00 13 02 84 39 BD ap open ops 0 802 11bg 802 11bg 1 28 2009 7 41 PM 00 13 02 AD 7C 3bE 00 13 02 C2 39 28 00 13 02 CD F3 D5 00 0b 86 c1 20 52 guest 51 802 11a 802 112 0 2 20 2009 7 59 AM 00 13 CE 45 91 A0 ap Not set guest 51 802 11bg 802 119 0 1 29 2009 4 00 PM No Folders found No Groups found Rogues h Modify Devices 1 50 w of 187 Roaue Devices Pace iw of 4 gt gt Ack RAPIDS Classification Threat Level Name Classifying Rule Device Classification Wired APs SSID E Ai we All Al MJ E i No Valid Enterasys 68 FA C3 user set Unclassified 6 test012 No Suspected Neighbor 5 04 0F Suspected Neighbor detected wirelessly Unclassified 5 TroposNetworks No Suspected Neighbor 5 Suspected Neighbor detected wirelessy Valid 3 dbishop airespace open No Valid 8 lt user set gt Unclassified 5 ethersphere voip No Valid Enterasys 27 F6 user set Unclassified 6 RoamAbout Default Network Name No Suspected Neighbor 5 SYMBOL TEC D7 64 A6 Suspected Neighbor detected wirelessly Valid 6 ws5100 102 No Valid NOMADIX IN 05 02 D0 user set Unclassified 6 Nomadix No Valid Meru Netwo B9 CC 05 user set Unclassified 6 BetsyFromPike Tags 1 5 wof5Tags Page lwof1 Name MAC Address Vendor Battery Level ChirpInterval Last Seen v Closest AP All v a VI J al v 9 Aeroscout Ltd 45 secs 3 12 2009 10 25 AM 1250 91 14 4
132. 03 345 90 96 58 40 99 34 20 00 1 day 4 hrs 15 mins 12 38 3 93 1 10 29 81 20 00 5 mins 0 04 0 00 0 00 0 1 20 00 6 days 23 hrs 54 mins 73 56 8 31 2 32 56 63 2 100 00 9 days 12 hrs 16 mins 100 0096 358 14 100 00 4i Amount of Time Spent by Role MB Used by Role Bl help desk 73 6 El emo Lovee 96 655 El employee 14 0 H help desk 2 3 E unknown 12 4 E unknown 1 1 O Log on 0 0 Figure 177 User Session Detail gt VLAN Information Session Data by VLAN 1 8 w of 8 VLANs Page 1 wof1 VLAN 65 b 63 64 31 1 B VLANs Number of Users by VLAN Number of Users 108 78 29 10 6 3 3 2 240 Uo of Users 45 42 32 50 12 08 4 17 2 90 1 25 1 2595 0 83 100 0095 Amount of Time 44 days 12 hrs 40 mins 50 days 7 hrs 58 mins 6 days 20 hrs 24 mins 2 days 5 hrs 28 mins 1 day 3 hrs 19 mins 3 hrs 16 mins 2 hrs 54 mins 12 mins 105 days 8 hrs 14 mins 9 o of Time 42 27 47 7895 6 50 2 12 1 08 0 13 0 12 0 01 100 00 Amount of Time Spent by VLAN MB Used 164966 94 18012 81 37930 40 8970 09 0 04 0 00 0 00 0 00 229906 28 MB Used by VLAN of MB Used Average Signal Quality 71 25 7 83 16 51 3 90 0 00 0 00 0 00 0 00 100 00 Number of Sessions 29 19 337 43 91 263 22 02 104 28 5 24 0 72 32 35 53 T 39 35 8 12 14 2 ffi S 6G E 65 B 66 o 63 O Othe O 64 45 4 32 5 12 e r 5 83 4 17 B t AT 7 E 65
133. 1 17 2010 12 16 AM Daily PCI Compliance Report PCI Co 1 16 2010 12 15 AM Daily PCI Compliance Report PCI Co of 36 Reports Page 1 of 7 gt gt To reset all AMP list Records Per Page preferences you can select Reset in the Display Preferences section of the Home gt User Info page as shown in Figure 7 Figure 7 Home User Info Display MLE section Default Number of Records per List 10 records per page Reset List Preferences Customize Columns for Other Roles 0 Yes No Console Refresh Rate Using the Pagination Widget The pagination widget is located at the top and bottom of every list table as shown in Figure 8 Figure 8 Pagination Widget Generated reports Visit the Report Definitions page to run new reports 1 10 of 37 Reports Page 1 of 4 gt gt Generation Time Use the down arrow next to Page to see all the page numbers for that table in a dropdown menu From here you can jump to any portion of the table Select the gt symbol to jump to the next page and gt to jump to the last page Choose Columns Export to CSV Using CSV Export for Lists and Reports Some tables have an Export to CSV setting you can use export the data as a spreadsheet See Figure 9 for an example of a list with the Export to CSV option selected Dell PowerConnect W AirWave 7 2 User Guide Configuring AWMS 31 Figure 9 List with Export to CSV Selected 4 vw of 135 APs Devices Page lwof 34 gt
134. 1 Telnet SSH Settings Fields and Default Values Setting Default Description Telnet SSH Timeout NS Sets the timeout period in seconds used when performing Telnet and SSH commands 3 120 sec 5 Locate the HTTP Discovery Settings section and adjust the default value Table 22 shows the setting and default value Table 22 HTTP Discovery Settings Fields and Default Values Setting Default Description HTTP Timeout EN Sets the timeout period in seconds used when running an HTTP discovery scan 3 120 sec 48 Configuring AWMS Dell PowerConnect W AirWave 7 2 User Guide 6 Locate the ICMP Settings section and adjust the default value as required Table 23 shows the setting and default value Table 23 Device Setup gt Communication gt ICMP Settings Fields and Default Values Setting Default Description Attempt to ping Yes When Yes is selected AWMS attempts to ping the AP device devices that Select No if performance is affected in negative fashion by this function If a large number Ware of APs are unreachable by ICMP likely to occur where there is in excess of 100 APs the unreachable via SNMP timeouts start to impede network performance NOTE If ICMP is disabled on the network select No to avoid the performance penalty caused by numerous ping requests 7 Locate the Cisco Aironet VxWorks User Creation Options section You only need to provide this information if you use VxWorks based Cisco APs on your network as
135. 10 10 Total 20 10 Name AL1 Uptime 1 day 15 hrs 44 mins Location Type Aruba AP 125 Controller IP Address 10 252 252 252 Use this section in combination with the Possible Issues section 802 11 The 802 11 Counters Summary section conveys the same information that is available from the Statistics link Counters from the APs Devices Monitor page Figure 140 illustrates this section Summary Figure 140 Users gt Diagnostics gt 802 11 Counters Summary Illustration 802 11 Counters Summary Current LastHour LastDay Last Week Unacked 0 0 Retries 0 0 Failures 0 0 Dup Frames 0 0 FCS Errors 0 0 NOTE This section is supported for Cisco and Dell PowerConnect W devices For additional information select the link to the device on this page Radios That The Radios That Can Hear This User section shows the radios that reported the signal from this client and Can Hear This displays statistics Figure 141 illustrates this section User Figure 141 Users gt Diagnostics gt Radios That Can Hear This User Illustration Radios That Can Hear This User AP Radio SNR UserCount Bandwidth kbps Uptime Recently Associated AL38 802 11an 25 2 0 93712090369561 8 days 16 hrs 12 mins No 00 1a 1e c0 55 46 802 11an 36 0 0 32 days 12 hrs 5 mins No AL30 802 11an 24 0 0 8 days 14 hrs 56 mins No Dell PowerConnect W AirWave 7 2 User Guide Performing Daily Administration in AWMS 197 Managing Mobile Devices with SOTI MobiControl and AWMS Ove
136. 105 Spectrum Sensor Link in Interfaces Section of an AP Monitoring ap105 A1 in group Access Points in folder Top Poll Controller Now Status Up OK Configuration Good Controller Aruba 3400 Aruba AP Group default Upstream Device Upstream Port Type Aruba AP 105 Remote Device No Last Contacted 1 9 2011 7 55 PM Uptime 2 days 5 hrs 51 mins LAN MAC Address 00 24 60C C0 00 66 Serial ALO000314 Location pit IP Address 10 51 88 104 Total Users 0 Bandwidth 0 kbps Notes hiana First Radio 802 11bgn Statistics MAC Address 00 246C 80 0F 60 Users 0 Bandwidth 0 kbps Transmit Power Antenna Type Internal Users 0 Bandwidth O kbps Channel 157 Transmit Power 21 dBm Antenna Type Internal Wired Interface Enet MAC Address 006 246C C0 00 66 Users 0 Second Radio 807 11an Statistics The new role Spectrum Sensor is a link to the Spectrum Analysis page for the controller that manages this AP as illustrated in Figure 106 Figure 106 Spectrum Analysis on Controller Dashboard To disable Spectrum mode on this individual AP after it has collected data return to the APs Devices gt Manage page for this AP and set the Spectrum Override field back to No Configuring a Controller to use the Spectrum Profile You can use AWMS to customize individual fields in the profile instance used by a particular controller without having to create a new Dell AP groups and new radio profiles To do thi
137. 11 7 47 PM Classification Rule Detected Wirelessly and on LAN WEP Yes Last Discovery Method Wireless AP scan RAPIDS Classification Override Wo Override WPA Yes Last Discovery Agent 00 1a le c0 2b 34 Threat Level 5 Network Type AP Threat Level Override Radio MAC Address Radio Vendor LAN MAC Address LAN Vendor QUI Score Operating System OS Detail Last Scan Notes Discovery Events fi El 00 23 89 49 17 C0 HANGZHOU H3C Technologies 00 23 89 49 17 00 HANGZHOU H3C Technologies 1 Override score Co Ltd Co Ltd p has been giving us problems For some time Update Ignore Delete Refresh this page for updated results 1 10 w of 49 Discovery Events Page 1 wof5 gt gt Choose Columns CSV Export RSSI Signal Channel SSID WEP WPA BSSID Time vw Discovery Method Discovery Agent Port Al Al Al Al All X J all r all v 63 29 6 h3c psk Na Yes 00 23 89 49 17 D0 1 18 2011 7 47 PM Wireless AP scan 54 32 6 h3c psk No Yes 00 23 89 49 17 D0 1 18 2011 7 47 PM Wireless AP scan 2b 3 62 28 36 h3c psk No Yes 00 23 89 49 17 C0 1 18 2011 7 47 PM Wireless AP scan 00 24 6c c8 70 b5 56 26 6 h3c psk No Yes 00 23 89 49 17 D0 1 18 2011 7 47 PM Wireless AP scan 00 1a 1e cO 1a dc 68 28 36 h3c psk No Yes 00 23 89 49 17 C0 1 18 2011 7 47 PM Wireless AP scan 00 1a 1e cO 2b 34 64 48 36 h3c psk 00 23 89 49 17 C0 1 18 2011 7 45 PM Wireless AP scan ap92 c7 c0 a3e
138. 16 00 ethersphere 1322 Top Access Points 9 1372 233798400 2 90 00 3 233005 00 ethersphere 1322 Top Access Points 10 1350 232675200 1 87 00 6 383120 00 ethersphere 1322 Top Access Points Most MAC Phy Errors 2 4 GHz MAC PhyErrors ChannelChanges Average Noise Average Channel Utilization Number of Users Bandwidth bps Location Controller Folder Group 1 ap105 A1 240364800 6 86 50 0 0 00 pit Aruba 3400 Top Access Points 2 1154 Q 123984000 9 71 50 1 419 00 ethersphere 1322 Top Access Points 3 2103 99100800 3 61 50 0 0 00 ethersphere 1322 Top Access Points 4 2188 60652800 6 73 50 1 308 00 ethersphere 1322 Top Access Points 5 1260 56505600 6 86 50 2 676 00 ethersphere 1322 Top Access Points 6 00 24 6c c4 ce 36 50889600 20 82 00 0 0 00 Aruba651 Top Access Points 7 Fish bowl 43632000 2 86 00 1 83 00 ethersphere 1322 Top Access Points 8 2198 34819200 4 86 50 1 4616 00 ethersphere 1322 Top Access Points 9 1242 H 32572800 2 88 00 1 188 00 ethersphere 1322 Top Access Points 10 00 0B 86 C3 65 7A 30758400 1 102 50 0 0 00 Aruba3400 Top Access Points Most Channel Changes 5 GHz Ranka Device ChannelChanges Average Noise Average Channel Utilization Number of Users Bandwidth bps Location Controller Folder Group 1 00 24 6c c4 ce 26 20 90 00 0 337 00 Aruba651 Top Access Points 2 ap105 A1 18 87 00 0 0 00 pit Aruba 3400 Top Access Points 3 2103 14 88 00 0 672 00 ethersphere 1322 Top Access Point
139. 1bgn radio radio index speed basicllb2 6 9 12 05 142 4 5540 17598 9 10 yl1L 12 13 14 15 endif 18 24 36 48 54 mes radio radio index channel power indoor channel transmit power channel attribute detector adoption pref id radio radio index enhanced beacon table radio radio index on channel scan ap include 4 Configuring a Global Template Global templates allow AW MS users to define a single template in a global group that can be used to manage APs in subscriber groups They turn settings like group RADIUS servers and encryption keys into variables that can be configured on a per group basis Perform the following steps to create a global template or to view or edit an existing global template l Go to the Group gt Templates configuration page for the global group that owns it 2 Select Add to add a new template or select the pencil icon next to an existing template to edit it 2 Examine the configurations illustrated in Figure 110 162 Creating and Using Templates Dell PowerConnect W AirWave 7 2 User Guide Figure 110 Group gt Templates gt Add Page Illustration g amp 8 EEE e2eeao op T 33535330 71 TERENE E i5 oo vo o o o wv JET ETER Save Save and apply J global grou Template Select Fetch template from device Select Device Cisco IOS Any Model lame levice Type lode leboot devices after configuration changes No
140. 22 FA BA B7 62 Ciscc muirtest12t 00 24 2C 05 BB C3 Ciscc Username muirtest12t O0 10 B3 05 44 1E Roar Role RoamAbout 00 23 12 DF D8 F5 Ciscc 2 mu irtest12t MN F 00 22 41 0C 40 39 ag 2 M MAC Address 1 5 w of 5Users Page iw of 1 AP Device t These settings are user specific To reset them select Reset List Preferences on Home gt User Info Buttons and Icons Standard buttons and icons are used throughout the AWMS as follows Table7 Standard Buttons and Icons of the AWMS User Page Function TL LET C Description Acknowledge Acknowledges and clears an AWMS alert Add fF Adds the object to both AWMS database and the onscreen display list Add Folder ao Adds a new folder to hierarchically organize APs p p O O Apply mr Applies all saved configuration changes to devices on the WLAN Attaches a snapshot of an AWMS screen to a Helpdesk incident Audit NN Reads device configuration compare to desired and update status Bandwidth o Displays current bandwidth for group Chooses a new Helpdesk incident to be the Current Incident Create 4 Creates a new Helpdesk incident Customize Ignores selected settings when calculating the configuration status Delete O go Deletes an object from AWMS database Dell PowerConnect W AirWave 7 2 User Guide Installing AWMS 25 Table 7 Standard Buttons and Icons of the AWMS User Page Continued Function Image Description Down 0 Indicates
141. 45 AM Summary Totals Total Ports 590 Total Access Ports 550 Total Distribution Ports 40 Unused Ports 455 77 12 Total Switches 18 6 Port Switches 1 24 Port Switches 1 26 Port Switches 10 50 Port Switches 6 1 1 v of 1Folder Summary ofi CSV Export IF amp Mi s Ports Unused Ports amp of Top 590 550 455 77 1296 1 1 1 w of 1Folder ad ron Aii of 6 Port Switches of 24 Port Switches of 50 Port Switches of 26 Port 20 15 i 5 2 5 20 40 3 b5 s B0 3 0x S0 100 Percent of Unused Ports BN Total Hurber of Switches fe Port E24 Port M26 Port 254 Port Switches 1 5 w of 18 Switches Page iwof4 gt l inet Device a olde older Group Total Ports Access Forts Unused Ports C3750 corp airwave com Top Access Points Cisco Catalyst 3750 26 25 25 96 1596 Cisco2960 3 dev airwave com Top Access Points Cisco Catalyst 2060 server room 0 50 45 45 90 00 cisco3560 Top Access Points Cisco Catalyst 3560 Rackvilletown 26 25 25 06 1596 cisco3560 dev airwave com Top Access Points Cisco Catalyst 3560 Rackvilletown 26 25 25 06 1596 cisco3560 poe Top Access Points Cisco Catalyst 3560 Paul Gray server room CORP rack nearest door 26 25 23 88 46 1 5 w of 18 Switches Page iwof4 gt Using the RADIUS Authentication Issues Report The RADIUS Authentication Issues Report contains issues that may appear with controllers RADIUS servers and users
142. 54 mins 14 51 137846 66 59 96 802 11b 4 1 78 1 day 21 hrs 39 mins 1 81 0 17 0 00 802 11n 2 4GHz 3 1 33 15 hrs 3 mins 0 60 24785 36 10 78 802 11bg 3 1 33 28 mins 0 02 0 00 0 00 6 Connection Modes 225 100 0095 105 days 8 hrs 14 mins 100 00 229906 28 100 00 Humber of Users by Connection Mode ape Amount of Time Spent by Connection Mode Yo of Users as os MB Used MB Used by Connection Mode E 882 11a 41 3 B 832 114 48 UR O 882 11n 50Hz B 02 11g 36 Ge E 802 11a 35 0 E 802 11a O 802 11n 56Hz 18 2 0 882 11n i 5GHz 14 5 802 11n 2 4GHz O Other 2 67 862 116 1 81 BM 832 114 862 116 1 78 O Other a 61 O Other Figure 175 User Session Detail gt SSID Information Session Data by SSID 1 14 w of 1455IDs Page iw of 1 airesphere wpa2 119 49 17 46 days 18 hrs 9 mins 44 38 173937 03 75 00 airesphere vocera 66 27 2795 39 days 11 hrs 55 mins 37 49 17665 52 7 68 guest 29 11 98 6 days 20 hrs 24 mins 6 50 37956 40 16 51 airesphere vocera 12 4 0695 10 days 21 hrs 49 mins 10 36 347 20 0 15 2 0 83 1 hr 30 mins 0 06 0 00 0 00 Aruba3200 Moscato 2 0 83 15 hrs 38 mins 0 62 0 00 0 00 4400 CKIP 2 0 83 2 hrs 34 mins 0 10 0 00 0 00 open 2 0 83 3 hrs 1 min 0 12 0 04 0 00 Cisco IOS Ben 2 0 83 8 mins 0 01 0 00 0 00 aruba ap 2 0 83 7 hrs 41 mins 0 30 0 00 0 00 ab 1 0 41 12 mins 0 01 0 00 0 00 101 1 0 41 10 mins 0 01 0 00 0 00 14 SSIDs 242 100 00 105 d
143. 57 0 0 00 ap lab Cisco4400 Top Access Points 2 AP10 3 15 3 15 0 0 00 por Office hello Cisco4400 Top Access Points Least Utilized by Channel Usage 2 4 GHz 1 APOO01d alfc ca7a 22 83 20 47 0 0 00 default location 5500 6 0 196 0 Top Access Points 2 AP10 64 96 62 60 0 1 00 Sales Office helo Cisco4400 Top Access Points 3 AP0018 19bd bidO 71 65 68 90 0 0 00 ap lab Cisco4400 Top Access Points All tables indicate the rank device type number of users bandwidth location controller folder and group and 238 Creating Running and Emailing Reports Dell PowerConnect W AirWave 7 2 User Guide all are sorted according to rank Selecting a value under the Device column in any table will take you to the APs Devices gt Monitor gt Radio Statistics page for the band indicated in the table title 5 GHz or 2 4 GHz Every list contains Rank Device name not type Channel Changes Average Noise Average Channel Utilization Users Bandwidth Location Controller name Folder and Group The third column in the list after Device will be the column the list is sorted by If that column would otherwise be in the list Channel Changes it does not show up in the list where it would otherwise Note that sometimes the sorted column is not one of those common ones such as the Interfering Devices section AWMS limits data storage to 183 days approximately six months per radio If you create an RF Health Report with a date range longer than
144. 59 53 6 h3c psk 00 23 89 49 17 D0 1 18 2011 7 45 PM Wireless AP scan ap32 c7 c0 ae 50 29 6 h3c psk 00 23 89 49 17 D0 1 18 2011 7 44 PM Wireless AP scan ap125 C0 50 47 56 40 6 h3c psk 00 23 89 49 17 D0 1 18 2011 7 44 PM Wireless AP scan ap61 ca 75 ba 75 21 36 h3c psk 00 23 89 49 17 C0 1 18 2011 7 44 PM Wireless AP scan ap61 ca 75 ba 1 10 w of 49 Discovery Events Pagel w of 5 gt gt Important things to remember regarding the information in the device detail page are Users with the role of Admin can see all rogue AP devices Users with roles limited by folder can see a rogue AP if there is at least one discovering device it can see The discovery events displayed are from APs that you can see on the network There may be additional discovery events that remain hidden to certain user roles Fach rogue device frequently has multiple discovery methods all of which are listed As you work through the rogue devices use the Name and Notes fields to identify and document its location 176 Using RAPIDS and Rogue Classification Dell PowerConnect W AirWave 7 2 User Guide You can use the global filtering options on the RAPIDS gt Setup page to filter rogue devices according to signal strength ad hoc status and discovered by remote APs VisualRF uses the heard signal information to calculate the physical location of the device If the device is seen on the wire RAPIDS reports the switch and port for easy isolation I
145. 61 56645 61 server room CORP ri 5 switch7 dev airwave com 0 0 600536 36 56438 55 server room rack on 6 10 51 0 11 507892 66 47027 10 Dev Lab T hp zl sw 0 0 394324 25 36511 50 8 cisco3560 poe 0 0 218693 02 20249 35 server room CORP ri 9 hp poe switch 0 0 216460 70 20042 66 server room left side 10 xlwesm make me mismatch 87071 39 8062 17 Least Utilized by Maximum Number of Simultaneous Users Rank a AP Device Number of Users Max Simultaneous Users Total Bandwidth MB Average Bandwidth kbps Location 1 Aruba200 Master really 0 0 0 00 0 00 2 Aironet Wireless Communication 38 FB BF 0 0 00 0 00 3 blyman rap5wn 0 0 0 00 0 00 4 id 60293 0 0 0 00 0 00 5 trorman rap 2 wt D 0 0 00 0 00 6 clukaszewski rapSwn 0 0 0 00 0 00 T bzena RAP 2WG D 0 0 00 0 00 8 10 51 0 9 0 00 0 00 yy 9 joeb rap2wg 0 0 0 00 0 00 10 apl25 0 00 0 00 Least Utilized by Bandwidth Rank a AP Device Number of Users Max Simultaneous Users Total Bandwidth MB Average Bandwidth kbps Location 1 Aruba200 Master really 0 0 0 00 0 00 2 khamilton rapSwn 1 1 0 00 0 00 3 id 60293 0 0 0 00 0 00 4 blyman rap5wn 0 0 0 00 0 00 5 tforman rap2wg 0 00 0 00 6 clukaszewski rapSwn 0 0 0 00 0 00 T bzena RAP 2WG 0 0 0 00 0 00 8 10 51 0 9 0 00 0 00 yy 9 joeb rap2wg 0 0 0 00 0 00 10 Aironet Wireless Communication 38 FB BF 0 0 0 00 0 00 Table 130 Daily Device Summary Report Unique Fields and Descriptions Descriptio
146. 756ac41b74283a9292652d366d73931f access list 100 permit ip 192 168 0 0 24 any rule precedence 10 Spanning tree mst cisco interoperability enable Spanning tree mst configuration name My Name ip dns server forward wwan auth type chap no bridge multiple spanning tree enable bridge forward country code us aap aipralter list no port 3333 plz aap ipfilter list no port 3333 tcp plz deny tcp Srtc starb ip 0 0 0 0 src end ip 255 255 255 255 dst start ip 0 0 0 0 dst end ip 255 255 255 255 dst start port 3333 dst end port 3334 rule 1 redundancy config logging buffered 4 logging console 4 snmp server engineid netsnmp 6b8b45674b30f176 snmp server location location snmp server contact contact snmp server sysname hostname snmp server manager v2 snmp server manager v3 snmp server user snmptrap v3 encrypted auth md5 Oxlaa491f4ca7c55df0f57801bece9044c snmp server user snmpmanager v3 encrypted auth md5 Oxlaa491f4ca7c55df0f57801bece9044c snmp server user snmpoperator v3 encrypted auth md5 Oxb03blebfale3d02f50e2blc092ablc9f A sample Symbol Smart RF template is provided below for reference radio radio index radio mac radio mac Sif radio type 11a radio radio index coverage rate 18 Dell PowerConnect W AirWave 7 2 User Guide Creating and Using Templates 161 endif Sif radio type 1llan radio radio index coverage rate 18 endif Sif radio type 11b radio radio index coverage rate 5p5 endif Sif radio type 11bg
147. 802 11g 4102sin the group to either b only g only or b g Max Station Data Rate 54Mbps The maximum data rate at which a user can connect to the AP 7 Locate the Enterasys AP3000 and Enterasys AP4102 section and define the settings Table 61 describes the settings and default values of this page Table 61 Groups gt Radio gt Enterasys AP3000 and Enterasys AP4102 Fields and Default Values Setting Default Description 802 11a Multicast Data Drop down menu that specifies the a radio multicast data rate Rate 802 11b g Multicast Data indi Drop down menu that specifies the b g multicast data rate Rate This rogue scan will not break users association to the network Rogue Scanning Enabled If enabled AP 3000s and 4102s in the group with firmware 3 1 20 or newer will passively scan for rogue APs atthe specified interval for the specified amount of time Dell PowerConnect W AirWave 7 2 User Guide Configuring and Using Device Groups in AWMS 89 Table 61 Groups gt Radio gt Enterasys AP3000 and Enterasys AP4102 Fields and Default Values Continued Setting Default Description Rogue Scan Interval 30 720 Specifies the time in minutes between rogue scans 10080 min Rogue Scan Duration 350 Specifies the amount of time in milliseconds the AP listens to rogues before returning 200 1000 msec to normal operation 8 Locate the Groups gt VxWorks section and adjust these settings as required Table 62 describes the s
148. 9F 75 90 00 1D 45 9F 75 90 Not Contained Contained Manual Classification Override Aruba2400 Locally Ad 71 BA 90 02 20 46 71 BA 90 Contained Not Contained Signal strength gt 75 dBm Aruba2400 Locally Ad 71 BA 90 02 20 A6 71 BA 91 Contained Not Contained Signal strength gt 75 dBm 1 8 vw of 8 Rogues Contained Page 1of1 Using the User Session Report The User Session Report extensively itemizes user level activity by session A session 1s any instance in which a user connects to the network You can track and display in list and chart form session information that includes all of the following Connection Mode wired wireless or both depending on how report definition is created SSID Role VLAN Cipher Summary Sessions User The figures that follow illustrate the fields and information in the User Session Report Dell PowerConnect W AirWave 7 2 User Guide Creating Running and Emailing Reports 239 Figure 174 User Session Detail gt Connection Mode Information Daily User Session Report for All Groups Folders and SSIDs 1 20 2009 12 00 AM to 1 21 2009 12 00 AM Generated on 1 21 2009 12 21 AM Session Data by Connection Mode 1 6 vw of 6 Connection Modes Page 1 of 1 Number of Users Connection Mode Amount of Time of Time MB Used Vo of 802 11a 93 41 33 36 days 21 hrs 56 mins 35 04 49839 53 21 68 802 119 81 36 00 50 days 14 hrs 12 mins 48 03 17434 61 7 58 802 11n 5GHz 41 18 22 15 days 6 hrs
149. AP on page 123 Other lists grouped by radio frequency include Most Noise Most Least Utilized by Channel Usage Most MAC Phy Errors Most Channel Changes Most Transmit Power Changes If an RF Health Report has not been generated before you can create it by following the instructions on the Defining Reports section of this chapter Figure 172 illustrates a sample RF Health Report Dell PowerConnect W AirWave 7 2 User Guide Creating Running and Emailing Reports 237 Figure 172 Daily RF Health Report Page Illustration Daily RF Health Report for All Groups and Folders XML XHTML export CSV export 1 4 2011 12 00 AM to 1 5 2011 12 00 AM d Email this re x port Generated on 1 5 2011 12 36 AM amp Pint int Problem 5 GHz Radios Device a Chandel Changes Traasadt Power Changes M de Changes Average Rolie Average ChennelUticali n MAC Pby Errors Taterfeniag Devices Reierel kes _ 1394 74 50 10138 00 ethersphere 1322 Top Access Points 2198 79 00 44596 00 ethersphere 1322 Top Access Points Problem 2 4 GHz Radios Canned kompe _ Transat Power Champis_ Moe Changes _ Average Moise Average Choimel Utfkeniten MAC Ohy Errots _Intesieriog Devices _ Wemnker of Users RanduiMth ipi 00 1a 1e c0 6c 46 16 T 0 0 Aruba3600 US Top Access Points 1154 9 9 1 0 aE lt ET 1 YET 00 ethersphere 1322 Top Access Points 1350 1 5 0 53 00 345600 0 0 00 ethersphere 1322 Top Access Points 2103 3 1 0 61 50 99100800
150. AP Device Manager AP Device Managers have access to a limited number of devices and groups based on the Top folder and varying levels of control based on the Access Level AirWave Management Client The AirWave Management Client AMC software allows WiFi enabled devices to serve as additional sensors to gather data for RAPIDS Use this role type to set up a client to be treated as a user with the AMC role The user information defined in AMC must match the user with the Dell PowerConnect W Management Client type Guest Access Sponsor Limited functionality role to allow helpdesk or reception desk staff to grant wireless access to temporary personnel This role only has access to the defined top folder of APs AP Device Access Level Defines the privileges the role has over the viewable APs AWMS supports three privilege levels as follows Manage Read Write Manage users can view and modify devices and Groups Audit Read Only Audit users have read only access to the viewable devices and Groups Audit users have access to the APs Devices gt Audit page which may contain sensitive information including AP passwords Monitor Read Only Monitor users have read only access to devices and groups and VisualRF Monitor users cannot view the APs Devices Audit page which may contain sensitive information including passwords Top Folder Defines the Top viewable folder for the role The role is able to view all devices and groups con
151. APs within the group To avoid double counting of users users are only listed in the group of the AP with which they are associated Note that device groups with only controllers in them report no users Bandwidth A running average of the sum of bytes in and bytes out for the managed radio page Duplicate Creates a new group with the name Copy of lt Group Name gt with configuration settings Dell PowerConnect W configuration settings will have to be manually added back Whether the group has unapplied changes Dell PowerConnect W AirWave 7 2 User Guide Configuring and Using Device Groups in AWMS 71 Ln NOTE When you first configure AWMS there is only one default group labeled Access Points If you have no other groups configured refer to Configuring Basic Group Settings on page 72 Configuring Basic Group Settings The first default device group that AWMS sets up is the Access Points group but you can use this procedure to add and configure any device group Perform these steps to configure basic group settings then continue to additional procedures to define additional settings as required l Goto the Groups gt List page Existing device groups appear on this page 2 To create a new group select Add Enter a group name and select Add The Groups gt Basic page appears To edit an existing device group select the manage wrench icon next to the group The Groups gt Basic page appears If you mouse over an existing
152. AWMS The System Name can be configured from the AMP Setup gt General page Displays the organization listed on your license key Displays the DNS name assigned to AWMS IP Address Displays the static IP address assigned to AWMS The IP Address can be configured from the AMP Setup Network page us Uestewsmse sei Rewn OOOO Searching AWMS with the Home Search Page The Home gt Search page provides a simple way to find connected and historical users managed devices rogue devices groups folders and more Search performs partial string searches on a large number of fields including the notes version secondary version radio serial number device serial number LAN MAC radio MAC and apparent IP address of all the APs as well as the chent MAC VPN user User LAN IP and VPN IP fields Figure 144 illustrates this page Figure 144 Home gt Search Page Illustration with Sample Hits on 00 Search for managed devices and wireless users A single substring match is used To search by MAC address include colons e g 00 40 96 00 Search APs Devices amp Modify Devices 1 45 w of 45 APs Devices Page 1 wof 1 Device 4 Status Users BW kbps Uptime Configuration Group Folder Controller Master Controller 00 Down 0 0 Unknown Access Points airespace Z 00 0b Up 0 0 16 hrs 59 mins Mismatched Access Points air 5 QB 12 Up 0 0 8 days 19 hrs 3 mins Mismatched iwlc thin aps air airespace 4400 1
153. BE LIABLE FOR ANY DIRECT INDIRECT INCIDENTAL SPECIAL EXEMPLARY OR CONSEQUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES LOSS OF USE DATA OR PROFITS OR BUSINESS INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY WHETHER IN CONTRACT STRICT LIABILITY OR TORT INCLUDING NEGLIGENCE OR OTHERWISE ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE Crypt DES perl module used by Net SNMP Copyright C 1995 1996 Systemics Ltd www systemics com All rights reserved This library and applications are FREE FOR COMMERCIAL AND NON COMMERCIAL USE as long as the following conditions are adhered to Copyright remains with Systemics Ltd and as such any Copyright notices in the code are not to be removed If this code is used in a product Systemics should be given attribution as the author of the parts used This can be in the form of a textual message at program startup or in documentation online or textual provided with the package Redistribution and use in source and binary forms with or without modification are permitted provided that the following conditions are met l Redistributions of source code must retain the copyright notice this list of conditions and the following disclaimer 2 Redistributions in binary form must reproduce the above copyright notice this list of conditions and the following disclaimer in the
154. CL Firmware Compare List New Up Down Mismatched Ignored Focused Subtabs Manage Interfaces Audit Compliance Containment Status Connected All Guest Users User Detail Diagnostics Tags Installing AWMS 23 Table 6 Components and Subtabs of the AWMS Navigation Screen Continued Main Tab AMP Setup RAPIDS VisualRF Description The Reports pages list all the standard and custom reports generated by AWMS AWMS supports 13 reports in the AWMS module For additional information refer to Chapter 9 Creating Running and Emailing Reports on page 219 The System pages provide information about AWMS operation and administration including overall system status the job scheduler trigger alert administration and so forth For additional information refer to Monitoring and Supporting AWMS with the System Pages on page 205 The Device Setup pages provide the ability to add configure and monitor devices to include setting AP discovery parameters performing firmware management defining VLANs and so forth For additional information refer to Enabling AWMS to Manage Your Devices on page 47 The AMP Setup pages provide all information relating to the configuration of AWMS itself and its connection to your network This page entails several processes configurations or tools in AWMS For additional information start with Chapter 3 Configuring AWMS on page 29 NOTE The AMP Setup pages
155. Cisco mobility groups to be supported on Cisco controllers Network Transfer Protocol NTP and Spanning Tree Protocol settings Go to the Groups gt Cisco WLC Config gt Controller page This navigation is illustrated in Figure 51 Figure 51 Groups Cisco WLC Config Controller Navigation I ontroller General Multicast Mobility Management L Mobility Groups NTP Advanced L span ning Tree Dell PowerConnect W AirWave 7 2 User Guide Configuring and Using Device Groups in AWMS 95 Configuring Wireless Parameters for Cisco Controllers This section illustrates the configuration of Wireless settings in support of Cisco WLC controllers The navigation for Wireless settings is illustrated in Figure 52 Figure 52 Groups gt Cisco WLC Config gt Wireless Navigation Illustration Wireless Mesh 802 11a n 802 11b g n Network Network RRM RRM RF Grouping RF Grouping TPC TPC DCA DCA Coverage Coverage General General Pico Cell Pico Call Client Roaming Client Roaming Voice Voice Video Video EDCA Parameters EDCA Parameters DFS 802 11h High Throughput High Throughput 802 11n 802 11n Configuring Security Parameters and Functions AWMS enables you to configure many security settings that are specific to Cisco WLC controllers This section supports four overriding types of configuration as follows AAA to cover both RADIUS and TACACS server configuration Priority Order Wireless Protection Policies W
156. Complete the required configurations in this chapter before proceeding Dell support remains available to you for any phase of AWMS installation 42 Configuring AWMS Dell PowerConnect W AirWave 7 2 User Guide Creating AWMS Users AWMS installs with only one AMP user the admin who is authorized to define additional users with varying levels of privilege be it manage read write or monitoring limit the viewable devices as well as the level of access a user has to the devices Fach general user that you add needs a Username a Password and a Role Use unique and meaningful user names as they are recorded in the log files when you or other users make changes in AWMS e NOTE Username and password are not required if you configure AWMS to use RADIUS or TACACS authentication You do not need to add individual users to the AWMS server if you use RADIUS or TACACS authentication The user role defines the user type access level and the top folder for that user User roles are defined on the AMP Setup gt Roles page Refer to the next procedure in this chapter for additional information Creating AWMS User Roles on page 44 The admin user can provide optional additional information about the user including the user s real name email address phone number and so forth Perform the following steps to display add edit or delete AWMS users of any privilege level You must be an admin user to complete these steps l Goto
157. Configuring and Using Device Groups in AWMS Dell PowerConnect W AirWave 7 2 User Guide Table 69 Groups gt Proxim Mesh gt Mesh Cost Matrix Fields and Default Values Continued Setting Default Description Medium Occupancy Sets the factor associated with Medium Occupancy when calculating the best path to the Factor portal AP Higher factors will have more impact when deciding the best uplink Current Medium 7 Specifies the importance given to the most recently observed Medium Occupancy against Occupancy Weight all of the previously viewed medium occupancies Lower values place more importance on previously observed Medium Occupancies 4 Select Save when configurations are complete to retain these settings Select Save and Apply to make the changes permanent or select Revert to discard all unapplied changes Configuring Group MAC Access Control Lists This configuration is optional If you use Symbol Proxim Cisco VxWorks or ProCurve 520WL wireless APs AWMS enables you to specify the MAC addresses of devices that are permitted to associate with APs in the Group Other devices are not able to associate to APs in the Group even if the users of those devices are authorized users on the network NOTE If Use MAC ACL is enabled for Cisco VxWorks AWMS does not disable this feature on the AP but the MAC list entered is K not populated on the AP The individual MAC addresses must be entered manually on the AP If you have APs from
158. Connect W AirWave 7 2 User Guide Installing AWMS 21 AWMS Navigation Basics Every AWMS page contains three basic sections as illustrated in Status Section Navigation Section Activity Section The AWMS pages also contain Help links with GUI specific help information and certain standard buttons Status Section The Status section is a snapshot view of overall WLAN performance and provides direct links for immediate access to key system components The Status section remains at the top of all pages in the AWMS and RAPIDS modules AWMS includes the ability to customize the contents of the Status section from the Home gt User Info page to include support for both wireless and wired network components Refer to Configuring Your Own User Information with the Home gt User Info Page on page 203 The table below describes these elements in further detail Table 5 Status Section Components of the AWMS GUI Field Description New Devices The number of wireless APs or wireless LAN controllers that have been discovered by AWMS but not yet managed by network administrators When selected AWMS directs you to a page that displays a detailed list of devices awaiting authorization Up The number of managed authorized devices that are currently responding to AWMS requests When selected AWMS shows a detailed list of all Up devices The number of managed authorized devices that are not currently responding to AWMS SNMP requests Wh
159. D Format Ethernet Untagged VLAN ID 1 4094 General Section Create Closed Network Block All Inter client Communication Dell PowerConnect W AirWave 7 2 User Guide Description This field enables support for VLANs and multiple SSIDs on the wireless network If this setting is enabled define additional VLANs and SSIDs on the Groups gt SSIDs page Refer to Configuring Group SSIDs and VLANs on page 83 This setting sets the ID for the management VLAN when VLANs are enabled in AWMS This setting is supported only for the following devices Proxim AP 600 AP 700 AP 2000 AP 4000 Avaya AP 3 Avaya AP 7 AP 4 5 6 AP 8 ProCurve520WL ProCurve420 Enterasys AP3000 This setting enables dynamic VLANs to be assigned by the RADIUS server This setting is supported only for HP ProCurve 420 This setting defines the naming convention for VLANs to be supported in AWMS The supported naming formats are ASCII and Hexadecimal This field defines the VLAN that will use untagged Ethernet The VLAN must be a number between 1 and 4094 and defines the untagged VLAN ID for the RoamAbout AP3000 If enabled the APs in the Group do not broadcast their SSIDs NOTE Creating a closed network will make it more difficult for intruders to detect your wireless network If enabled this setting blocks client devices associated with an AP from communicating with other client devices on the wireless network NOTE This option may also be ide
160. Dan 111 FESO WO ME EO AE 149 SED EEE TT Cisco WLSE TN NE E 56 CSV Dile si lu ui i M EE 114 D dashboard ESO ZO display NE 32 date and time Dell PowerConnect W AirWave 7 2 User Guide Index KO EE EE 18 de Ao EEE GEN NOE VR Gui rca E CDM 107 Te di LE Sae NE EE 112 COMMUNICAMON Se THES mse ncctunsincdankendanticuasncnahdce 47 discovering managing and troubleshooting 107 TOUS NENNT OT 131 TRO iP e dsc 102 troubleshooting a newly discovered device 143 Men i M scab teumtcies 117 130 discovery SIBI DIS S MNT TS 111 F EEE DESDE ELE 15 ere additional radio SUITES see dene mde md 123 firewall So UAE 8 ee 21 firmware specifying minimum firmware eevvvvnnnnvvvvvvnnnnrnevnvvernn 99 cile on ds Mo EE 162 groups changing multiple group configurations 101 configuring and using REE 69 configuring basic group Settings eese 72 configuring group AAA SE IVETS scsceceeeeeeeeeeeeeeeneeeaees 19 configuring group SSIDs and VLANS 83 configuring group templates eee 149 oi TN 97 contiguring radio AT eee 87 COI NE security SEELIBISS Hess 80 el eg dn CLO MD EE m 101 opel eda EE 105 MAC access control lists eee 99 HR Mn EE EEE 70 EE eee 71 H Helpdes EP 247 creatino a new TOO LO 249 creating snapshots and incident relationships 250 monitorine TCI vassdraga 247
161. Dell PowerConnect W AirWave 7 2 User Guide Copyright O 2011 Aruba Networks Inc Aruba Networks trademarks include CJ MFWAVE Aruba Networks Aruba Wireless Networks the registered Aruba the Mobile Edge Company logo Aruba Mobility Management System Mobile Edge Architecture People Move Networks Must Follow RFProtect Green Island All rights reserved All other trademarks are the property of their respective owners Dell the Dell logo and PowerConnect are trademarks of Dell Inc Open Source Code Certain Aruba products include Open Source software code developed by third parties including software code subject to the GNU General Public License GPL GNU Lesser General Public License LGPL or other Open Source Licenses The Open Source code used can be found at this site www arubanetworks com open source Legal Notice The use of Aruba Networks Inc switching platforms and software by all individuals or corporations to terminate other vendors VPN client devices constitutes complete acceptance of liability by that individual or corporation for this action and indemnifies in full Aruba Networks Inc from any and all legal actions that might be taken against 1t with respect to infringement of copyright on behalf of those vendors Dell PowerConnect W AirWave 7 2 User Guide 0510897 02 March 2011 Contents MENE 11 Document Organization entente rnnt nnn tnter natns tates tasas ttn aas 11 ei
162. Device Resources This type of trigger indicates that the CPU or memory utilization for a device including router or switch has exceeded a defined percentage for a specified period of time b Repeat this procedure for as many triggers and conditions as desired Refer to the start of Creating New Triggers on page 181 to create a new trigger Setting Triggers for Radios Perform the following steps to configure radio related triggers a Choose a trigger type from the Radios category listed in the Type drop down menu Table 105 itemizes and describes the radio trigger types and condition settings Table 105 Radio Related Trigger Types Radio Trigger Options Description Radio Down Indicates that a device s radio is down on the network Once you choose this trigger type select Add New Trigger Condition to create at least one condition This type requires that a radio capability be set as a condition The Value drop down menu supports several condition options 802 11 Frame Counters Enables monitoring of traffic levels There are multiple rate related parameters for which you define conditions including ACK Failures Retry Rate and Rx Fragment Rate See the Option drop down menu in the Conditions section of the trigger page for a complete list of parameters Select Add New Trigger Condition to access these settings Define at least one condition for this trigger type 802 11 QoS Counters Enables monitoring of Quality of Service Q
163. Device Threat Level The threat level classification adds granularity for each general RAPIDS classification Devices of the same classification can have differing threat scores based on the classifying rule ranging from 1 to 10 with a default value of 5 This classification process can help identify the greater threat Alerts can be defined and sorted by threat level Threat level and classification are both assigned to a device when a device matches a rule Once classified a device s classification and threat level change only if it 15 classified by a new rule or 1s manually changed Threats levels can be manually defined on the RAPIDS gt Detail page when the RAPIDS classification 1s manually overridden or you can edit the rule to have a higher threat level Viewing and Configuring RAPIDS Rules To view the RAPIDS rules that are currently configured on AWMS navigate to the RAPIDS gt Rules page Figure 117 Figure 117 RAPIDS Rules Page lllustration Default RAPIDS Classification Unclassified v Change the priority order of rules by dragging and dropping rows New RAPIDS Classification Rule Rule name Classification Threat Level Enabled Protect my SSID Rogue 10 Yes d F amp Fingerprint scan Rogue 5 Yes d Detected wirelessly and on LAN Rogue 5 Yes de Signal strength gt 75 dBm Suspected Rogue 5 Yes d Detected Wirelessly Suspected Neighbor 5 Yes de QUI block contains SOHO or enterprise A
164. Devices via CSV Page Illustration Upload a list of devices Group Spectrum APs T Folder Top Choose File import devices csv upload The list must be in comma separated values CSV format containing the following columns 1 IP Address 2 SMMP Community String 3 Mame 4 Type 5 Auth Password 6 SNMPv3 Auth Protocol 7 Privacy Password 8 SNMPv3 Privacy Protocol 9 SNMPv3 Username 10 Telnet Username 11 Telnet Password 12 Enable Password 13 SNMP Port IP Address is required the others are optional Type is a case insensitive string you can view a list of device types Download a sample file or see the example below IP Address S5MMP Community String Name Type Auth Passward S5MMPv3 Auth Pratacc 18 34 54 153 private switchl example com Rauter S5witch nanradiance mdb5 nriwvz 16 172 97 172 private switch 2 example com router switch nonradiance sha pris 3 Select a group and folder into which to import the list of devices 4 Select Choose File and select the CSV list file on your computer 5 Select Upload to add the list of devices into AWMS Adding Universal Devices AWMS gets basic monitoring information from any device including switches routers and APs whether or not they are supported devices Entering SNMP credentials is optional If no SNMP credentials are entered AWMS will provide ICMP monitoring of universal devices This allows you to monitor key elements of the wired network infrastruct
165. Documentation on page 203 The Home gt License page provides product licensing information See Viewing and Updating License Information on page 201 The Home gt User Info page displays information about the users logged in to AWMS including the role authentication type and access level See Configuring Your Own User Information with the Home gt User Info Page on page 203 The Customize link on the upper right side of the page allows you to customize the widgets on the Home gt Overview page See Customizing the Overview Subtab Display on page 32 Monitoring AWMS with the Home Overview Page To view your overall network health navigate to Home gt Overview page Figure 142 illustrates this page and Table 117 describes the contents The information that displays varies depending on your role Dell PowerConnect W AirWave 7 2 User Guide Performing Daily Administration in AWMS 199 Figure 142 Home gt Overview Page Illustration Welcome to AlrWave Wireless Management Suite 7 2 Mg sin el usndsikh Lest 1 val m l k zr Tr l Li TN TAA 1553 i n 1731 L ns Shin All VIssnum iraran Show PUN Mec lium dun EMIL 225 users Ml users Bg Avg Sts Par Second In 2 9 Mbps 33 1 kb s 3 Kan users 254 users B4 unner BD r eg Sts Der Second Gut 3 5 Mbps 2 5 Mbp ud L yaar wu G a i ye Lasi 2 Hours dasbinay Tobal Lal Funeral i AMP Aer L5 1034 1323 390011 2 28 FM 1S ves ad EF b
166. E LENI 2 26 EM inedents u u u BADING Authentaton sues t li u Ga to holder E _ Li Auc ar Dieabled BA fee m 74 dh Fl Hiaratsiet H M Go to cage El 5a 25 fe E EDS ja 15 E Ir rsti 2 16 Me s t Ran 120 of 5 6 davras ara Dave z 131 af 546 daviras ara Mavotshar Cammon Tacks Table 117 Home gt Overview Sections and Charts Section Description Users This chart is a graphical summary of the number of users on the network during a period of time The time can be adjusted Select Show All to display a list of data series that this graph can display such as the user count by SSID Clear the Max Users or Avg Users checkbox to change the display of the graph The graph displays the maximum number of users by default To view historical graphs in a new window select the three bar icon on the upper right of the chart Bandwidth This adjustable chart displays bandwidth data over time To remove bandwidth in or out from the graphical display clear the check box for Avg Bits Per Second In or Out To display details for specific devices select Show All and select the devices to be included in the graphical bandwidth summary chart To view historical graphs in a new window select the three bar icon on the upper right of the chart Monitoring This pie chart shows the percentage of all devices that are up and down on the network To review devices Status that are down select Down in the legend or the chart and
167. El Down 1 8 EJ Good 0 7 etwork Wide IDS Events E Unknown 0 amp etwork Wide Inventory etwork Wide Memory and CPU Utilization 151 of 8601 devices are Down 6884 of 8601 devices are Mismatched etwork Wide Network Usage etwork Wide New Roque Devices etwork Wide New Users Managed AMPs Edit 9 Edt etwork Wide PCI Compliance 1 2 w of 6 Managed AMPs Page wof3 gt gt Choose Columns CSV Export etwork Wide Port Usage m AMP Name a Total Devices New Up Down Mismatched Ro iiid siis ee er eg as a Last Contacted Failover Status Status acceptance test NEC ubi ME 1 16 2011 1 59 PM Unknown error SSL negotiation enterprise test 32 bit scalability 3833 3833 0 3833 34071 Ioooo ssa 125 210530 5 1 1 1 18 2011 6 13 PM 6 Managed AMPs 8601 313 8748 242 7103 99736 34131 12440 25667150 26 Dell PowerConnect W AirWave 7 2 User Guide Performing Daily Administration in AWMS 211 e Reports can be run from the Master Console to display information from multiple AWMS stations because such reports can be extremely large reports can also be run as summary only so that they generate more quickly and finish as a manageable file size e The Master Console can also be used to populate group level configuration on managed AWMS installations using the Global Groups feature e The Master Console offers a display of devices that are in a Down or Error state anywhere on the network This information is supported on Maste
168. Figure 121 Figure 122 and Table 102 illustrate and describe RAPIDS Score Override Perform these steps to create a score override Dell PowerConnect W AirWave 7 2 User Guide Using RAPIDS and Rogue Classification 177 Once a new score is assigned all devices with the specified MAC address prefix receive the new score 2 NOTE Note that rescoring a MAC Address Prefix poses a security risk The block has received its score for a reason Any devices that fall within this block receive the new score l Navigate to the RAPIDS gt Score Override page This page lists all existing overrides Figure 121 RAPIDS gt Score Override Page Mew Score Override The Score Override Feature allows vou to change the scores that are given to MAC addresses detected during scans of switch bridge Forwarding tables 1 11 w of 11 Score Overrides Page w of 1 Edit Columns MAC Address Prefix Vendor Score 00 02 20 Agere Systems 2 OUI manufacturer block contains wireless clients WiFi tags or scanners 00 02 6F Senao International Co Ltd 4 OUT manufacturer block contains SOHO access points 00 03 03 JAMA Electronics Co Ltd 3 OUT manufacturer block contains enterprise access points 00 00 54 3COM 4 OUI manufacturer block contains SOHO access points Se 00 10 40 INTERMEC CORPORATION 1 Any device on the network not categorized with a higher score 00 13 72 Del 1 Any device on the network nat ca
169. Figure 171 illustrates the fields and information in the RADIUS Authentication Issues Report 236 Creating Running and Emailing Reports Dell PowerConnect W AirWave 7 2 User Guide Figure 171 RADIUS Authentication Issues Detail Page Illustration Daily RADIUS Authentication Issues Report for All Groups Folders and SSIDs 1 20 2009 12 00 AM to 1 21 2009 12 00 AM Generated on 1 21 2009 12 21 AM Top 10 RADIUS Authentication Issues by Controller airespace 1 Total Failures 1776 Top 10 RADIUS Authentication Issues by RADIUS Server RADIUS Server Total Failures w First Event First Event 1 20 2009 12 00 AM Most Recent Event 1 20 2009 11 59 PM Most Recent Event vortex 2 1 20 2009 10 41 AM Top 10 RADIUS Authentication Issues by User First Event 00 21 5C 00 21 5C 1 20 2009 12 00 AM 00 1D D9 00 1D DO 15 1 20 2009 1 51 PM 00 16 CF 00 16 CF 6 1 20 2009 3 05 PM 00 21 5C 00 21 5C 5 1 20 2009 7 05 AM 00 1C BF 00 1C BF 3 1 20 2009 4 12 PM 00 16 CF 00 16 CF 2 1 20 2009 8 33 AM 00 14 90 00 14 A4 2 1 20 2009 5 27 PM 00 1F 3B 00 16 CF 1 1 20 2009 8 52 AM 00 19 70 00 14 A4 1 1 20 2009 3 04 PM 00 21 FE 00 16 CF 1 1 20 2009 11 23 AM 1 20 w of 1776 RADIUS Authentication Issues Page 1 of 89 gt gt 1 20 2009 10 41 AM Most Recent Event 1 20 2009 11 59 PM 1 20 2009 2 08 PM 1 20 2009 3 13 PM 1 20 2009 5 33 PM 1 20 2009 4 13 PM 1 20 2009 5 42 PM 1 20 2009 5 28 PM 1 20 2009 8 52 AM 1 20
170. Firmware amp Files Page m Loading Firmware Files to AWMS Configuring Communication Settings for Discovered Devices To configure AWMS to communicate with your devices to define the default shared secrets and to set SNMP polling information navigate to the Device Setup gt Communication page illustrated in Figure 21 Figure 21 Device Setup gt Communication Page Illustration 200 DefaultCredentas The credentials below are used to communicate with devices that are discovered by AMP SNMP Timeout 3 60 sec 10 regardless of the credentials used for discovery Changing these credentials does not affect i APs that are already being managed or are already in the New Devices list SNMP Retries 1 20 3 UE cda 0 S SNMPGInformms 3Com 8750 Edit View Add New SNMPv3 User APC Edit View j 1 1 w of 1 SNMPv3 Users Page i w of 1 Choose Columns Alcatel Lucent Edit View Username 4 Auth Protocol Aruba Edit View v3informuser SHA DES 1 1 w of 1 SNMPv3 Users Page w of 1 Avaya Edit View Select All Unselect All BelAir Edit View Delete Cisco Aironet 4800 Edit View Cisco IOS AP Edit View 0 Temet SSHSetings Cisco Switch Edit View Telnet SSH Timeout 3 120 sec 120 DNE idw 000 HTTP Discovey Settings O Cisco WLC Edit View HTTP Timeout 3 120 sec 5 pod nM MP Settings Custom Device Edit View Attempt to ping devices that were unreachable via amp Yes C No D Link Edit View SNMP 5 Ed isco Aironet VxWorks User Creation
171. Hostname The IP address or Hostname of the watched AWMS The Failover AWMS needs HTTPS access to the watched AMPs Username None A username with management rights on the watched AWMS Password None The password for the username with management rights specified above 216 Performing Daily Administration in AWMS Dell PowerConnect W AirWave 7 2 User Guide Table 125 Home gt Watched Page Fields and Default Values Continued Setting Default Description HTTP Timeout The amount of time before AWMS considers a polling attempt failed 5 1000 Sec Polling Enabled Yes Enables or disables polling of the Watched AWMS NOTE You do not need to disable polling of the watched AWMS system if it is set to be down during nightly maintenance or is being upgraded Polling Period The amount of time between polls of the Watched AWMS Missed Poll The number of polls that can be missed before the failover AWMS will begin actively Threshold monitoring the Watched AWMS APs Dell PowerConnect W AirWave 7 2 User Guide Performing Daily Administration in AWMS 217 218 Performing Daily Administration in AWMS Dell PowerConnect W AirWave 7 2 User Guide Chapter 9 Creating Running and Emailing Reports This chapter describes AWMS reports including access creation scheduling and distribution This chapter includes the following sections Overview of AWMS Reports on page 219 Using Daily Reports on page 222 Defining Re
172. IP Enables AWMS to statically assign IP addresses from a specified range to all devices in the Addresses to Group Devices Start IP Address Sets the first address AWMS assigns to the devices in the Group Number of Blank Sets the number of addresses in the pool from which AWMS can assign IP addresses Addresses SubnetMask Blank Sets the subnet mask to be assigned to the devices in the Group Subnet Gateway Sets the gateway to be assigned to the devices in the Group Next IP Address Defines the next IP address queued for assignment This field is disabled for the initial Access Points group 8 To configure Spanning Tree Protocol on WLC devices and Proxim APs locate the Spanning Tree Protocol section on the Groups gt Basic configuration page Adjust these settings as required Table 41 describes the settings and default values Table41 Spanning Tree Protocol Fields and Default Values Setting Default Description Spanning Tree NS Enables or disables Spanning Tree Protocol on WLSE devices and Proxim APs Protocol Bridge Priority Sets the priority for the AP Values range from 0 to 65535 Lower values have higher priority The lowest value is the root of the spanning tree If all devices are at default the device with the lowest MAC address will become the root Dell PowerConnect W AirWave 7 2 User Guide Configuring and Using Device Groups in AWMS 75 Table 41 Spanning Tree Protocol Fields and Default Values Conti
173. If disabled the AP will use a static IP address For improved security and manageability Dell PowerConnect W recommends disabling DHCP and using static IP addresses LAN IP All The IP Address of the AP Ethernet interface If One to One NAT is enabled AWMS will communicate with the AP on a different address the IP Address defined in the Device Communication area If DHCP is enabled the current assigned address will appear grayed out and the field cannot be updated in this area grayed out and the field cannot be updated in this area Gateway All The IP address of the default internet gateway If DHCP is enabled the current assigned address will appear grayed out and the field cannot be updated in this area 5 Locate the Template Options area on the APs Devices gt Manage page Subnet Mask All Provides the IP subnet mask to identify the sub network so the IP address can be recognized on the LAN If DHCP is enabled the current assigned address will appear Vi NOTE This field only appears for IOS APs Symbol and Dell PowerConnect W controllers in groups with Dell PowerConnect W GUI Config disabled Dell PowerConnect W AirWave 7 2 User Guide Discovering Adding and Managing Devices 137 Table 84 describes field settings default values and additional information for this page Table 84 APs Devices gt Manage gt IOS Template Options Fields and Default Values Setting Default Device Type Description WDS Rol
174. Log in to the ACS server select System Configuration then in the Select frame select Logging Under Enable Logging select CSV Passed Authentications The default logging options function and support AWMS These include the two columns AWMS requires User Name and Caller ID What Next Go to additional tabs in the AMP Setup section to continue additional setup configurations Complete the required configurations in this chapter before proceeding Dell support remains available to you for any phase of AWMS installation Integrating AWMS with an Existing Network Management Solution NMS This is an optional configuration The AMP Setup gt NMS configuration page allows AWMS to integrate with other Network Management Solution NMS consoles This configuration enables advanced and interoperable functionality as follows AWMS can forward WLAN related SNMP traps to the NMS or AWMS can send SNMPv1 or SNMPv2 traps to the NMS AWMS can be used in conjunction with Hewlett Packard s ProCurve Manager The necessary files for either type of NMS interoperability are downloaded from the AMP Setup gt NMS page as follows For additional information contact support Perform these steps to configure NMS support in AWMS 62 Configuring AWMS Dell PowerConnect W AirWave 7 2 User Guide l Go to AMP Setup gt NMS illustrated in Figure 31 Figure 31 AMP Setup gt NMS Page Illustration NMS Integration HP ProCurve Manager Integration
175. MC is used to monitor multiple AWMS stations from one central location The Master Console is designed for customers running multiple AWMS servers Once an AWMS station has been added to the MC it will be polled for basic AWMS information Much like the normal Home gt Overview page the Master Console Home gt Overview page provides summary statistics for the entire network at a glance Figure 151 illustrates the Overview page Figure 151 Master Console Home gt Overview Page Illustration Home Groups APs Devices Portal Reports System AMP Setup Overview Managed AMPs Managed Group Status Search Documentation License User Info Welcome to Master Console 12 4 Users Last 1 week mal Bandwidth Last 1 week Ball i ii 1 12 11 1 13 11 1 14 11 1 15 11 1 16 11 Show All Maximum Average Show All Maximum Average Q x Number of Users 34 818 users 30 083 users G iv Avg Bits Per Second In 13 3 Gbps 11 4 Gbps V Avg Bits Per Second Out 13 3 Gbps 11 4 Gbps z amp 3 lyearago y now KLA Monitoring Status Configuration Compliance Alert Summary at 1 18 2011 6 11 PM Type a Last 2 Hours LastDay Total Last Event AMP Alerts 20 309 3784 1 18 2011 6 08 PM Master Console Alerts 0 n 0 Go to Folder v E view Latest Reports M View Latest Reports BIR etwork Wide Confiquration Audit Mismatched 80 O etwork Wide Device Summary E Up 98 2 O Audit Disabled 18 7 etwork Wide Device Uptime
176. MS ISO to CD inserting the CD into a physical drive on a VMware server then configure the AWMS virtual machine to boot from the CD 2 By copying the AWMS ISO to the VMware server s datastore or to a networked filesystem available to the VMware server then configure the AWMS virtual machine to boot from the ISO file 3 By using either a local physical CD or an AWMS ISO file from the VMware Infrastructure Client then create a virtual CD on the virtual AWMS to point to and boot from that device Overall the second option is likely the most efficient method to install AWMS In addition after booting the AWMSS virtual machine with either a physical CD or a ISO image file the installation process with this method is identical to the steps outlined in the AirWave Wireless Management Suite Quick Start Guide in Home gt Documentation Dell PowerConnect W AirWave 7 2 User Guide Installing AWMS on VMware ESX 8i v 3 5 271 AWMS Post Installation Issues on VMware By default AWMS runs the Linux smartd service for detecting physical disk errors using the S M A R T protocol However virtual disks do not support the S M A R T protocol so the AWMS smartd service will fail at startup The service can be prevented from starting at boot by running the following commands at the AWMS command line Note that the first command prevents the service from starting the last two commands remove the smartd service from the list of services to shutd
177. N 103 LAN IP Address 10 100 103 199 LAN Hostname VPN IP Address VPN Hostname EM Ta Auth Type WPA2 EAP PEAP Auth Time 1 hr 40 mins Last Placed 1 10 2011 2 00 PM Cipher AES Forward Mode Deauthenticate User Association History 1 3 w of 18 Past Associations Page iwof6 gt gt Choose Columns CSV Export ARUBANETWORKS shankar perforce 1263 ethersphere wpa2 103 802 11an 802 11n 5GHz HT40 1 11 2011 10 02 AM 1hr8 mins WPA2 EAP PEAP AES 19 3 17 ARUBANETWORKS shankar perforce 1372 ethersphere wpa2 103 802 11an 802 11n 5GHz HT40 1 10 2011 5 22 PM 1 hr 53 mins WPA2 EAP PEAP AES 201 9 28 ARUBANETWORKS shankar perforce 1350 ethersphere wpa2 103 802 11an 802 11n 5GHz HT40 1 10 2011 5 10 PM 11 mins WPA2 EAP PEAP AES 0 0 24 1 3 w of 18 Past Associations Page iwof6 gt gt Using the Deauthenticate User Feature Some displays of the User gt User Detail page include the Deauthenticate User feature in the Current Association field Specifically those displays are for devices which support this operation namely Dell and Cisco WLC with firmware version v4 0 0 0 or later Select Deauthenticate User to use this feature Figure 156 illustrates the confirmation page after you select Save and Apply Figure 136 Users gt User Detail gt Deauthenticate User Page Confirm changes 00 1F 3B 8C 1 34 15 To be deauthenticated Evaluating User Status with the Users gt Diagnostics Page The Users gt Diagnostics page is ac
178. NTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED IN NO EVENT SHALL THE APACHE GROUP OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT INDIRECT INCIDENTAL SPECIAL EXEMPLARY OR CONSEQUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES LOSS OF USE DATA OR PROFITS OR BUSINESS INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY WHETHER IN CONTRACT STRICT LIABILITY OR TORT INCLUDING NEGLIGENCE OR OTHERWISE ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE Dell PowerConnect W AirWave 7 2 User Guide Third Party Copyright Information 277 278 Third Party Copyright Information Dell PowerConnect W AirWave 7 2 User Guide Numerics Ve 124 A AAA SETVETS aarunvnnnnnnnnvnrnnnnvnrnrnnunnnsnrunnnnneunvnvnrununvnnnrueunen 79 SL ss 99 access points adding with eee 114 ML 99 ACS Kom EE 61 NERE ERE NE 61 MD 127 Active Interfering D vicssuunnsnumnnnaeiamnhndveneen 126 Adaptive Radio MNAL ser 123 AirWave Management Platform ganen 13 Ver EEE EE EEE 149 alerts as uj E EE 187 warning behavior TT eee 34 APs enabling automatic discovery eeeesse 111 Uli er 123 125 B e E E E E ddee 214 C CDP enabling For device discovery eee tates 111 Cisco configuring IOS templates 155 158 Gisco Catalyst ENE ENE 149 Cisco Discovery Protocol ET
179. OR BUSINESS INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY WHETHER IN CONTRACT STRICT LIABILITY OR TORT INCLUDING NEGLIGENCE OR OTHERWISE ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE Part 6 Cisco BUPTNIC copyright notice BSD Copyright c 2004 Cisco Inc and Information Network Center of Beijing University of Posts and Telecommunications All rights reserved Redistribution and use in source and binary forms with or without modification are permitted provided that the following conditions are met Redistributions of source code must retain the above copyright notice this list of conditions and the following disclaimer Redistributions in binary form must reproduce the above copyright notice this list of conditions and the following disclaimer in the documentation and or other materials provided with the distribution Neither the name of Cisco Inc Beijing University of Posts and Telecommunications nor the names of their contributors may be used to endorse or promote products derived from this software without specific prior written permission THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED IN NO EVENT SHALL THE COPYRIGHT HOLDERS OR CONTRIBUTORS
180. Options Enterasys Edit View Do not modify security SNMP settings C Create and use a specified user Enterasys RoamAbout AP2000 Edit View Enterasys RoamAbout AP3000 AP4102 Edit View Enterasys RoamAbout R2 Edit View Upon authorization into read write manage mode AMP can enable read write SNMP on a device using telnet commands for Cisco IOS and Nomadix devices and using the web interface for Symbol 4131 Intel Foundry Edit View 2011B devices HP ProCurve 420 Edit View Do not modify SNMP settings C p HP ProCurve 520WL Edit View css segun nice HP ProCurve 530 Edit View Save Revert Perform the following steps to define the default credentials and SNMP settings for the wireless network l On the Device Setup Communication page locate the Default Credentials area Enter the credentials for each device model on your network The default credentials are assigned to all newly discovered APs Dell PowerConnect W AirWave 7 2 User Guide Configuring AWMS 47 The Edit button edits the default credentials for newly discovered devices To modify the credentials for existing devices use the APs Devices gt Manage page or the Modity Devices link on the APs Devices gt List page Ln NOTE Community strings and shared secrets must have read write access for AWMS to configure the devices Without read write access AWMS may be able to monitor the devices but cannot apply any configuration changes 2 Browse to the Device Setup Communica
181. P Settings on page 133 Configuring Device Interfaces for Cisco Catalyst Switches on page 138 Individual Device Support and Firmware Upgrades on page 141 While most device configuration settings can be efficiently managed by AWMS at a Group level certain settings must be managed at the individual device level For example because devices within a Group are often contiguous with one another and have overlapping coverage areas it makes sense to manage these devices individually to avoid RF interference K NOTE Any changes made at an individual device level will automatically override Group level settings AWM S automatically saves the last 10 device configurations for reference and compliance purposes Archived device configurations are linked on the APs Devices gt Audit page and identified by name By default configuration is tracked by the date and time it was created device configurations are also archived by date It is not possible to push archived configurations to devices but archived configurations can be compared to the current configuration the desired configuration or to other archived configurations using the drop down menus on the APs Devices gt Audit page This applies to startup or to running configuration files Compare two configurations to highlight the specific lines that are mismatched The Audit page provides links to the AWMS pages where any mismatched settings can be configured Vi NOTE These
182. P scan 00 24 6c c4 1 5 w of 1858 Rogue Devices Page wof 372 gt gt T i RoguesSummary Total number of rogues 1858 Total number of discovery events 31002 Average number of discovery events per rogue 16 69 Average signal quality 62 17 togue Devices 5 w of 1858 Rogue Devices Page i of 372 gt gt CSV Expo Name RAPIDS Classification w rt reat Level Controller Classification Ack Suspected Rogue Aruba C8 1E 70 Suspected Rogue 5 ap65 c2 2e 4 Aruba 6B E1 40 Suspected Rogue 5 Suspected Rogue No 12 28 2010 6 22 PM Wireless AP scan 00 1a 1e cl 5 Aruba CO 1F 30 Suspected Neighbor 5 Suspected Neighbor No 12 28 2010 9 56 AM Wireless AP scan Fish bowl Aruba 65 FA 90 Suspected Rogue 5 Suspected Rogue No 12 28 2010 6 52 PM Wireless AP scan 00 24 6c c4 C Aruba 65 FF FO Suspected Rogue 5 Suspected Rogue No 12 28 2010 6 22 PM Wireless AP scan 00 24 6c c4 The rogue device inventories that comprise this report contain many fields described in Table 155 Dell PowerConnect W AirWave 7 2 User Guide Creating Running and Emailing Reports 233 Table 133 New Rogue Devices Report Fields and Descriptions Field Description Name The device name as able to be determined RAPIDS Classification The RAPIDS classification for the rogue device as classified by rules defined on the RAPIDS gt Rules page Refer to Using RAPIDS and Rogue Classification on page 165 for additional information
183. Ps Suspected Neighbor 5 Yes d OUI block does not contain APs Suspected Valid 5 Yes de 7 RAPIDS Classification Rules 5 elect All Unselect All Save and Apply Table 99 defines the fields in the RAPIDS gt Rules page Table 99 RAPIDS Rules Page Field Description Default Classification Sets the classification that a rogue device receives when it does not match any rules Add New RAPIDS select this button to create a RAPIDS classification rule Classification Rule Rule Name Displays the name of any rule that has been configured Rule names should be descriptive and should convey the core purpose for which it was created Classification Classification Displays the classification that devices receive if they meeting the rule criteria Displays the classification that devices receive if they meeting the rule criteria classification that devices receive if they meeting the rule criteria Threat Level Displays the numeric threat level for the rogue device that pertains to the rule Refer to Rogue Device Threat Level on page 171 for additional information Enabled Displays the status of the rule whether enabled or disabled Reorder Drag and Drop Changes the sequence of rules in relation to each other Select then drag and drop the icon for any rule to move it up or down in relation to other rules A revised sequence of rules must be saved before rogues are Classified in the revised sequence NOTE The sequ
184. RFID tag influences the battery life of active tags as well as search times If a tag chirps with very long chirp interval it may take longer time for the location engine to accurately measure x and y coordinates Date and time the tag was last reported to AWMS Closest AP The AP that last reported the tag to the controller linked to the AP monitoring page in AWMS To edit the name of the tag or to add notes to the tag s record select the pencil icon next to the entry in the list You can then add or change the name and add notes like maternity ward inventory or Chicago warehouse as two examples There is also a Tag Not Heard trigger which can be used to generate an alert if a tag 1s not reported to AWMS after a certain interval This can help to identify lost or stolen inventory For more information about enabling this trigger refer to the section Monitoring and Supporting AWMS with the System Pages on page 205 Evaluating and Diagnosing User Status and Issues If a WLAN user reports difficulty with the wireless network the administration or Helpdesk personnel can view and process related user information from the User Detail and Diagnostic pages This section describes these two pages as follows Evaluating User Status with the Users gt User Detail Page Evaluating User Status with the Users gt Diagnostics Page Evaluating User Status with the Users User Detail Page The Users gt User Detail page is a focused sub
185. Restrict to this versio No o Template firmw sion Template Variables Variable Name Variable Value Delete 4 Use the drop down menu to select a device from which to build the global template and select Fetch The menus are populated with all devices that are contained in any group that subscribes to the global group The fetched configuration populates the template field Global template variables can be configured with the Add button in the Template Variables box illustrated in Figure 111 Figure 111 Template Variables Illustration Template Variables Variable Name Variable Value Delete 0 JL The variable name cannot have any spaces or non alphanumeric characters The initial variable value entered is the default value but can be changed on a per group basis later You can also populate global template variables by uploading a CSV file see below 5 Once you have configured your global template select Add You are taken to a confirmation configuration page where you can review your changes 6 If you want to add the global template select Apply Changes Now If you do not want to add the template select Cancel and Discard Changes Canceling from the confirmation configuration page causes the template and all of the template variables to be lost 7 Once you have added a new global template you can use a CSV upload option to configure global template variables Go to the Groups gt Templates configuration page and select t
186. Rogue Count Suspected Rogue Customize Header Columns 9 Yes No Stats New Devices Up Wired amp Wireless Up Wired Up Wireless Down Wired amp Wireless Down Wired Down Wireless Mismatched Rogues Users Alerts Severe Alerts You can also set the severity level of critical alerts displayed for a user role For details including a description of what constitutes a severe alert see Setting Severe Alert Warning Behavior on page 34 Customizing Columns in Lists Customize the columns for any list table selecting Choose Columns as shown in Figure Use the up down arrows to change the order in which the column heads appear Figure 4 Choose Columns Dropdown List 20 records per page Yjof5Users Page iwofi Choose Columns Alerts 0 7 RADIUS Authentication Issues 0 v Connection Mode Ch BW Username Role MAC Address AP iSave Cancel tion SSID 00 22 FA BA B7 62 Ciscc muirtesti200 00 24 2C 05 BB C3 Ciscc Username 1 muirtest1200 00 1C B3 05 44 1E Roar role t RoamAbout De 00 23 12 DF D8 F5 Ciscc muirtest1200 E 00 22 41 0C 40 39 ag 2 V MAC Address I 1 5 wof5Users Page iwof1 AP Device t Location t Alert Summary at 10 30 2009 2 19 PM com 1 Type a Last 2 Hours v VLAN I Event Incidents 0 AP Radio 1 1 1 For more information on the universal list elements see Common List Settings on page 25 You can also control which column heads appear for each user
187. Roque Scanning Rogue Scanning Interval 5 480 min Configuring and Using Device Groups in AWMS 87 3 Locate the Radio Settings area and adjust these settings as required Table 58 describes the settings and default values Table 58 Groups gt Radio gt Radio Settings Fields and Default Values Setting Default Description Allow Automatic Channel If enabled whenever the AP is rebooted it uses its radio to scan the airspace and Selection 2 4 5 and select its optimal RF channel based on observed signal strength from other radios 4 9GHz Public Safety NOTE If you enable this feature AWMS automatically reboots the APs in the group when the change is implemented 802 11b Data Rates Required Displays pull down menus for various data rates for transmitting data Mbps 1 0 NOTE This setting does not apply to Cisco LWAPP devices 2 0 The three values in each of the pull down menus are as follows Optional Required The AP transmits only unicast packets at the specified data rate 5 5 multicast packets are sent at a higher data rate set to optional Corresponds to a 11 0 setting of yes on Cisco devices Optional The AP transmits both unicast and multicast at the specified data rate Corresponds to a setting of basic on Cisco devices Not Used The AP does not transmit data at the specified data rate Corresponds to a setting of no on Cisco devices Frag Threshold Enabled If enabled this setting enables packets to be
188. S APs that do not have a version specific template specified Reboot APs After Configuration Changes Determines reboot when AWMS applies the template copied from the new configuration file to the startup configuration file on the AP If No is selected AWMS uses the AP to merge the startup and running configurations If Yes is selected the configuration is copied to the startup configuration file and the AP is rebooted This field is only visible for some devices Restricts the template to APs of the specified firmware version If Yes is selected the template only applies to APs on the version of firmware specified in the Template Firmware Version field Designates that the template only applies to APs running the version of firmware specified If the template is updating the community strings on the AP enter the new community string AWMS should use here AWMS updates the credentials it is using to communicate to the device after the device has been managed Restrict to this version Template firmware version Community String Telnet SSH Username If the template is updating the Telnet SSH Username on the AP enter the new username AWMS should use here AWMS updates the credentials it is using to communicate to the device after the device has been managed Telnet SSH Password If the template is updating the Telnet SSH password on the AP enter the new Telnet SSH password AWMS should use here AWMS updates the credentials itis us
189. SIDs table maps the BSSIDs on a radio with the SSID it broadcasts to the network as illustrated in Figure 56 This table appears only for Dell AP radios Figure 86 Active BSSIDs Table Illustration Active BSSIDs B55ID a SSID DO0 1A 1E 86 C4 60 aruba ap 00 14 1E 86 04 61 3600 wpa2 psk Monitoring Data for Wired Devices Routers and Switches The monitoring page for routers and switches includes basic device information at the top a bandwidth graph depicting the sum of all the physical interfaces and beneath that CPU Memory usage graphs as shown in Figure 87 Dell PowerConnect W AirWave 7 2 User Guide Discovering Adding and Managing Devices 127 Figure 87 APs Devices gt Monitor Page for Wired Devices Monitoring switch10 dev airwawve com in group Access Points in folder Top Poll How fk This Device is in monitor onhy mode Device Info Status Up OK Configuration Error Too many errors fetching existing configuration Firmware 12 2 52 5E Device i Upstream Port Type Cisco Catalyst 2950 48TT L Last Contacted 1 12 2011 1 30 PM Uptime 22 days amp hrs 31 mins LAM MAC Address 00 17 95 0E 59 00 Serial FOCIO15230A Location server room top of right hand side rack closest to the window Contact IP Address 10 51 0 21 Bandwidth 58 kbps Motes Bandwidth Last 22 hours mal o 2M 4 M amp M B M 10 M 15 30 17 30 19 30 21 30 23 30 1 30 3 30 5 30 7 30 9 30 11 30 13 30 Show All Maxi
190. SNMP HTTP Scan Set on page 109 Defining a SNMP HTTP Scan Set Once you have defined at least one network and one scan credential you can create a scan set that combines the two for device discovery Perform these steps to create a scan set l 2 Locate the Scan Set area at the top of the Device Setup gt Discover page Select Add New Scan Set to see all scan components configured so far If you wish to create a new network or new scanning credentials you can select Add in either of these fields to create new components prior to creating a scan set Select the Network s to be scanned and the Credential s to be used AWMS defines a unique scan for each Network Credential combination Select Add to create the selected scans which then appear in a list at the top of the Device Setup gt Discover page To edit an existing scan select the pencil icon next to the scan on the Device Setup gt Discover page When ready proceed to the next task Running a Scan Set on page 110 NOTE Scheduling an HTTP scan to run daily on your network can help you to discover rogues Some consumer APs like most D 2 Link Linksys and NetGear models do not support SNMP and are found only on the wired side with an HTTP scan These devices are discovered only if they have a valid IP address Proper credentials are not required to discover these APs Wireless scans and the AMC discover these rogues without any special changes Dell PowerCon
191. SNMP traps on port 162 an n ernest 3 The NMS Integration Add Edit page includes the Netcool OMNIbus Integration link to information and instructions The IBM Tivoli Netcool OMNIbus operations management software enables automated event correlation and additional features resulting in optimized network uptime 4 The NMS Integration Add Edit page includes the HP ProCurve Manager Integration link Select this link for additional information zip file download and brief instructions for installation with AWMS Select Add to finish creating the NMS server or Save to configure an existing NMS server What Next Go to additional tabs in the AMP Setup section to continue additional setup configurations Complete the required configurations in this chapter before proceeding Dell support remains available to you for any phase of AWMS installation Auditing PCI Compliance on the Network This section describes PCI requirements and auditing functions in AWMS with the following topics Introduction to PCI Requirements PCI Auditing in the AWMS Interface Enabling or Disabling PCI Auditing Dell PowerConnect W AirWave 7 2 User Guide Configuring AWMS 63 Introduction to PCI Requirements AWMS supports wide security standards and functions in the wireless network One component of network security is the optional deployment of Payment Card Industry PCI Auditing The Payment Card Industry PCI Data Security Standard DSS esta
192. Setup MDM Server Add Fields and Descriptions Field Description Hostname IP The address or DNS hostname configured for your MDM server Address Protocol Whether HTTP or HTTPS is to be used when polling the MDM server The port on which to connect to the MDM server is inferred from the protocol with HTTP AWMS will connect to port 80 of the SOTI server with HTTPS AWMS will connect to port 443 URL Context The URL context appended to the server URL to build the URL when connecting with the SOTI server Enter MobiControl in this space for SOTI support Enabled Whether this server can be polled by AWMS Make sure it is set to Yes Username The login credentials for this MDM server Password Polling Period The frequency in which AWMS polls the MDM server The default is 5 minutes 2 When finished select Add The list page for the MDM server also displays Last Contacted The last time AWMS was able to contact the MDM server Errors Issues if any encountered during the last contact During each polling period AMP will to obtain a list of all device IDs and their WLAN MAC addresses The information about Device Type OS and OS version are retrieved from MobiControl and populated to the Users gt User Detail page for supported mobile devices View device in SOTI MobiControl link provides direct 198 Performing Daily Administration in AWMS Dell PowerConnect W AirWave 7 2 User Guide access to the MobiControl Web C
193. Step 4 Assigning an IP Address to the AWMS System While the AWMS primary network interface accepts a DHCP address initially during installation AWMS does not function when launched unless a static IP is assigned Complete these tasks to assign the static IP address The following message appears STEP 4 Assigning AWMS s address AWMS must be configured with a static IP SSS Se Primary Network Invertace COnriguration denne 1 IP Address P XXX XXX XXX XXX 2 Netmask XXX XXX XXX XXX 3 Gateway D XXX XXX XXX XXX 4 Primary DNS gt XXX XXX XXX XXX 5 Secondary DNS XXX XXX XXX XXX 9 Commit Changes 0 Exit discard changes If you want to configure a second network interface please use AWMS s web interface AMP Setup gt Network Tab l Enter the network information K NOTE The Secondary DNS setting is an optional field 2 Commit the changes by typing 9 and pressing Enter To discard the changes type 0 and press Enter Step 5 Naming the AWMS Network Administration System Upon completion of the previous step the following message appears Dell PowerConnect W AirWave 7 2 User Guide Installing AWMS 19 STEP 5 Naming AWMS AWMS name is currently set to New AWMS Please enter a name for your AWMS At the prompt enter a name for your AWMS server and press Enter Step 6 Assigning a Host Name to the AWMS Upon completion of the previous step the following message appears on the screen STEP 6 Assigning
194. THERWISE ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE 274 Third Party Copyright Information Dell PowerConnect W AirWave 7 2 User Guide Part 5 Sparta Inc copyright notice BSD Copyright c 2003 2004 Sparta Inc All rights reserved Redistribution and use in source and binary forms with or without modification are permitted provided that the following conditions are met Redistributions of source code must retain the above copyright notice this list of conditions and the following disclaimer Redistributions in binary form must reproduce the above copyright notice this list of conditions and the following disclaimer in the documentation and or other materials provided with the distribution Neither the name of Sparta Inc nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED IN NO EVENT SHALL THE COPYRIGITI HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT INDIRECT INCIDENTAL SPECIAL EXEMPLARY OR CONSEQUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROCUREMENT OF SUBSTTTUTE GOODS OR SERVICES LOSS OF USE DATA OR PROFITS
195. Table 29 Table 29 AMP Setup gt Authentication Fields and Default Values Field Default Description Primary Server N A Enter the IP address or the hostname of the primary RADIUS server Hostname IP Address Primary Server Port 1812 Enter the TCP port for the primary RADIUS server Primary Server Secret Specify and confirm the primary shared secret for the primary RADIUS server Secondary Server N A Enter the IP address or the hostname of the secondary RADIUS server Hostname IP Address Secondary Server Port 1812 Enter the TCP port for the secondary RADIUS server Secondary Server Enter the shared secret for the secondary RADIUS server Secret 3 Select Save to retain these configurations and continue with additional steps in the next procedure Integrating a RADIUS Accounting Server NOTE AWMS checks the local username and password before checking with the RADIUS server If the user is found locally the K local password and role apply When using RADIUS it s not necessary or recommended to define users on the AWMS server The only recommended user is the backup admin in case the RADIUS server goes down Optionally you can configure RADIUS server accounting on AMP Setup gt RADIUS Accounting This capability is not required for basic AWMS operation but can increase the user friendliness of AWMS administration in large networks Figure 26 illustrates the settings of this optional configuration interface Perfo
196. Throughput by Worker by Displays reads and writes for workers AMP services database VisualRF web server RRD tool Service and AWRRD tool and for services AMP VisualRF and web server CPU Utilization by Worker by Displays reads and writes for workers AMP services database VisualRF web server RRD tool Service and AWRRD tool and for services AMP VisualRF and web server System Network Bandwidth All traffic in and out measured in bits per second of your primary network interface EthO being the most common Bandwidth by Protocol Displays the amount of traffic used by Telnet HTTPS and SNMP used by your primary network interface EthO being the most common Legacy SNMP Fetcher The number of SNMP get and walk requests per second performed by the legacy v1 and v3 Requests SNMP fetcher Legacy SNMP Fetcher The number of SNMP OIDs received per second performed by the legacy v1 and v3 SNMP Responses fetcher High Performance SNMP The number of SNMP get and walk requests per second performed by the high performance Fetcher Requests SNMP v2c fetcher High Performance SNMP The number of SNMP OIDs received per second performed by the high performance SNMP Fetcher Responses v2c fetcher Database Statistics Top 5 Tables by row count The five largest tables in AWMS Degraded performance has been noticed for in some cases for tables over 200 000 rows Dell PowerConnect W recommends decreasing the length of time client d
197. Total v Suspected Neighbor Suspected Rogue Valid lt unknown gt Rogue Unclassified gt CSV Export Meru Networks Inc 3 14 w of 11 LAN MAC Address Vendors Page iwof3 gt gt E unknown 98 8 M Aruba 0 5 O Other 0 4 OMeru Networks I 0 2 c 0 2 Devices by Radio MAC Address Vendor 1 3 w of 14 Radio MAC Address Vendors Page 1wof5 gt gt CSV Export Radio MAC Address Vendor Total v Aruba 174 Unknown Locally Administered Address 43 1 3 w of 14 Radio MAC Address Vendors Page 1 wof5 gt gt El Aruba 94 1 E Unknown Locally Admi 2 3 O Other 1 3 E unknown 1 2 E Unknown 1 0 RoguesSummary gt 0 Total number of rogues 1858 Total number of discovery events 31002 Average number of discovery events per rogue 16 69 Average signal quality 62 17 Rogue Devices 1 5 w of 1858 Rogue Devices Page 1 w of 372 gt gt CSV Export Name RAPIDS Classification w Threat Level Controller Classification Ack First Discovered First Discovery Method First Discove Aruba C8 1E 70 Suspected Rogue 5 Suspected Rogue 12 14 2010 4 18 PM Wireless AP scan ap65 c2 2e 4 Aruba 6B E1 40 Suspected Rogue 5 Suspected Rogue 12 28 2010 6 22 PM Wireless AP scan 00 1a le cl Aruba CO 1F 30 Suspected Neighbor 5 Suspected Neighbor No 12 28 2010 9 56 AM Wireless AP scan Fish bowl Aruba 65 FA 90 Suspected Rogue 5 Suspected Rogue No 12 28 2010 6 52 PM Wireless AP scan 00 24 6c c4 Aruba 65 FF F0 Suspected Rogue 5 Suspected Rogue No 12 28 2010 6 22 PM Wireless A
198. Types and Condition Settings Discovery Trigger Option Description New Devices Discovered This trigger type flags the discovery of a new AP router or switch connected to the network an device that AWMS can monitor and configure Once you choose this trigger type select Add New Trigger Condition to specify a device type b Repeat this procedure for as many triggers and conditions as desired Refer to the start of Creating New Triggers on page 181 to create a new trigger Setting Triggers for Users Perform the following steps to configure user related triggers a Choose a trigger type from the Users category listed in the Type drop down menu See Figure 126 Table 107 itemizes and describes the User related trigger types and condition settings for each discovery trigger type Table 107 Users Trigger Types and Condition Settings User Trigger Option Description New User This trigger type indicates when a new user has associated to a device within a defined set of groups or folders Note that the New User trigger type does not require the configuration of any condition settings so the Condition section disappears Connected Users This trigger type indicates when a device based on an input list of MAC addresses has associated to the wireless network It is required to define one or more MAC addresses with the field that appears User Bandwidth This trigger type indicates that the sustained rate of bandwidth used by an i
199. WLAN network in the following ways Over the Air Using your existing enterprise APs Optional AirWave Management Client AMC On the Wire Polling routers and switches to identify classify and locate unknown APs Using HTTP and SNMP scanning NOTE To setup a scan refer to Discovering and Adding Devices on page 107 Using the controller s wired discovery information Furthermore RAPIDS integrates with external intrusion detection systems IDS as follows Dell WIP ADell s Wireless Intrusion Protection WIP module integrates wireless intrusion protection into the mobile edge infrastructure The WIP module provides wired and wireless AP detection classification and containment detects DoS and impersonation attacks and prevents client and network intrusions Cisco WLSE 1100 and 1200 IOS AWMS fetches rogue information from the HTTP interface and gets new AP information from SOAP API This system provides wireless discovery information rather than rogue detection information AirMagnet Enterprise Retrieves a list of managed APs from AWMS AirDefense Uses the AWMS XML API to keep its list of managed devices up to date WildPackets OmniPeek Retrieves a list of managed APs from AWMS Dell PowerConnect W AirWave 7 2 User Guide Using RAPIDS and Rogue Classification 165 Viewing Overall Network Health on the RAPIDS gt Overview Page The RAPIDS gt Overview page displays a page of RAPIDS summary information see Fi
200. a Primary Server Hostname IP Address 10 200 200 200 Primary Server Part 165 000 Primary Server Secret PATTTTTTTT Confirm Primary Server Secret avanserer o O Secondary Server Hostname IP Address o Secondary Server Port Bi Secondary Server Secret Po Confirm Secondary Server Secret Po 2 Select No to disable or Yes to enable TACACS authentication If you select Yes several new fields appear Complete the fields described in Table 28 Table 28 AMP Setup gt Authentication Fields and Default Values Field Default Description Primary Server Hostname IP N A Enter the IP address or the hostname of the primary TACACS server Address Primary Server Port LN Enter the port for the primary TACACS server Primary Server Secret N A Specify and confirm the primary shared secret for the primary TACACS Server Secondary Server Port Lr Enter the port for the secondary TACACS server Secondary Server Secret Enter the shared secret for the secondary TACACS server Secondary Server Hostname IP N A Enter the IP address or hostname of the secondary TACACS server Address 3 Select Save and continue with additional steps 4 To configure Cisco ACS to work with AWMS you must define a new service named AMP that uses https on the ACS server The AMP https service 1s added to the TACACS Cisco interface under the Interface Configuration tab Select a checkbox for a new service
201. address that AWMS uses to communicate to the device This number is also a link to the AP web interface When the link is moused over a pop up menu will appear allowing you to http https telnet or SSH to the device Appears for some APs Displays the SSID s of the radio s Total Users Displays the total number of users associated to the AP regardless of which radio they are associated to at the time of the last polling This field is only available for mesh APs Table 74 describes the information in the Interfaces table for APs 120 Discovering Adding and Managing Devices Dell PowerConnect W AirWave 7 2 User Guide Table 74 APs Devices gt Monitor gt Interface Page Illustration Field Description First Radio Displays the Radio type of the first radio 802 11a 802 11b or 802 119 Second Radio Displays the Radio type of the second radio 802 11a 802 11b or 802 119 Transmit Power Some devices report transmit power reduction rather than transmit power no value is reported for those devices Antenna Type Indicates internal or external radio For devices where antenna type Is defined per AP including Dell PowerConnect W devices the same antenna type will be listed for each radio Channel Displays the channel of the corresponding radio Users Displays the number of users associated to the corresponding radio at the time of the last polling Bridge Links Displays the number of bridge links for devices that are point to m
202. age eee 207 Using the System gt Performance Page seen 208 Supporting AWMS Servers with the Master Console seen 211 Using the Public Portal on Master Console eene 212 Adding a Managed AMP with the Master Console eee 212 Using Global Groups with Master Console eene 213 Dell PowerConnect W AirWave 7 2 User Guide 7 8 Chapter 9 Chapter 10 Appendix Appendix B Upgrading EEE 214 Upgrade INSTUCNDNS senirinnnm ru ane us sanne 214 Upgrading Without Internet Access r rrsranrnnerrenrenvnvennervenvenvsvenvenvenvenesvervenvenvsvenvervensenessenne 214 BSL EEE EO 214 Viewing and Downloading Backups essent 214 Running Backup on Demand essen entente rnnt nnn nnns 215 Restoring from a Backup esses ener tnter tnnt tratan nnns 215 Using AWMS Failover for Backup essent nnnes 215 Navigation Section of AWMS Failover eese nnns 216 Adding Watched AWMS Stations tnter 216 Creating Running and Emailing Reports rsnsorsvnvnvrnrnvnvsvrvsnrnvnvrvsnrnvsrsrsvssrsvsrsessrnrner 219 Overview of AWMS Repoaorts essent nnne nnn nnns 219 Reports gt Definitions Page Overview msranarenvrnrnvrverenrsrenvrverenrsvrne
203. age on page 191 Users gt User Detail Displays client device information alerts signal quality bandwidth and association history This page appears when you select a user s MAC address from Users gt Connected Users gt All Home gt Search page results or Search field results that display the user MAC address See Evaluating and Diagnosing User Status and Issues on page 194 Users gt Diagnostics Displays possible client device issues diagnostic summary data user counts AP information 802 11 counters summary and additional information This page appears when you select a user s MAC address from one of the following pages Users gt Connected Users gt All Home gt Search page results or Search field results that display the user MAC address See Evaluating and Diagnosing User Status and Issues on page 194 Users gt Tags Displays a list of wireless tags such as Aeroscout PanGo and Newbury that are heard by thin APs and reported back to a controller that is monitored by AWMS Supporting RFID Tags With the Users gt Tags Page on page 193 Monitoring WLAN Users with the Users gt Connected and Users gt All Pages The Users gt Connected page displays all users currently connected in AWMS and is illustrated in Figure 130 and described in Table 112 The information on this page can be adjusted in the following ways Drag the slider to pick the time range on the interactive graphs and select S
204. ail page Select Audit when viewing device specific information 6 You can display archived configuration about a given device from the Detail page Select Show Archived Device Configuration Figure 160 and Table 129 illustrate and describe the general Configuration Audit report and related contents Dell PowerConnect W AirWave 7 2 User Guide Creating Running and Emailing Reports 225 Figure 160 Daily Configuration Audit Report Page abbreviated example XML XHTML Daily Configuration Audit Report for All Groups Folders and SSIDS export Zl CSV export Generated on 5 21 2009 2 21 AM Email fib rondet 1 20 w of 360 Items Page lwot 18 gt gt Print report Name A Folder Group Mismatches 11 1 3 Top Sunnyvale HQ Corp HQ Current Device Desired Device Configuration Location failed to fetch Not Available Mesh Role None Mesh AP 2133 4 Top HQ Corp HQ Current Device Desired Device Configuration Location failed to fetch Not Available Mesh Role None Mesh AP 11 1 5 Top H Corp HQ Current Device Configuration Desired Device Configuration Location failed to fetch Not Available Mesh Role None Mesh AP 11 1 6 Top HQ Corp HQ Current Device Desired Device Configuration Location failed to fetch Not Available Mesh Role None Mesh AP 1210 5 Top HQ Lab Corp HQ Template Actual aaa accounting network acct methods start stop group rad acct Actual aaa authentication login eap methods group rad eap Actual aaa aut
205. ain 3Com rapids classification rule id 391 classification 70 gt 90 seas config id 1 rapids manage containment 01 gt 1 rapids classification rule id 391 classification 80 gt 70 seas config id 11 rapids manage containment 1 gt 0 rague ap lid 154880 Cisca AD 61 FE Identify Operating System Additional Security Resources The following AWMS tools support RAPIDS System Triggers and Alerts Triggers and Alerts that are associated with rogue devices follow the classification based system described in this chapter For additional information about triggers that support rogue device detection see to Monitoring and Supporting AWMS with the System Pages on page 205 Reports The Rogue Devices Report displays summary and detail information about all rogues first discovered in a given time period For more information see Defining Reports on page 242 For additional security related features and functions see the following topics in this guide Configuring Group Security Settings on page 80 Configuring Security Parameters and Functions on page 96 Configuring Group SSIDs and VLANs on page 83 Monitoring and Supporting AWMS with the System Pages on page 205 Appendix B Third Party Security Integration for AWMS on page 257 Dell PowerConnect W AirWave 7 2 User Guide Using RAPIDS and Rogue Classification 179 180 Using RAPIDS and Rogue Classification Dell PowerCon
206. ally be updated when the device is polled Automaticaly clear Down Status Message when device comes back up O Yes O No Down Status Message Aruba AP Group default v Installation Default v Mesh Mode Portal AP v Authentication Method PPPoE Authentication Enable Disable Remote AP O Yes 9 No Master Discovery Master Discovery Type Host Controller IP v Host Controller IP Address 16 2 250 Master Controller IP Address DNS Name 16 2 250 Link Priority Settings Link Priority Ethernet 0 255 Link Priority Cellular 0 255 USB Settings USB User Name USB Password Confirm USB Password USB Device Type any v USB Device Identifier USB Dial String USB Initialization String USB TTY Device Path Network Settings Use DHCP Yes No LAN IP Address Subnet Mask Gateway DNS IP Address Save and Apply Delete Import Settings Replace Hardware If any changes are scheduled for this AP they appear in a Scheduled Changes section at the top of the page above the other fields The linked name of the job takes you to its System gt Configuration Change Job Detail page 2 Locate the General section for information about the APs current status Table 81 describes the fields information and settings Table 81 APs Devices gt Manage gt General Fields and Descriptions Field Description Name Displays the name currently set on the device 134 Discovering Adding a
207. amp Wireless Down Wired Down Wireless Mismatched Rogues Lsers Alerts Severe Alerts Select All Unselect All Major Fat APs Thin APs Controllers Switches Others Select All Unselect All Search Preferences Customize Search Search Preferences 9 ves No APs Devices Users Connected Users Historical Folders Groups Tags Rogues Select All Unselect All Display Preferences Default Number of Records per List Reset List Preferences Customize Columns for Other Roles Console Refresh Rate Table 119 Home gt User Info Fields Filter Level For Rogue Count Customize Header Columns 204 Performing Daily Administration in AWMS All records v O ves 9 No 1 minute vi Description Specifies the minimum classification that will cause a device to be included in the rogue count header information Enables disables the ability to control which statistics hyperlinks are displayed at the top of every AWMS screen Dell PowerConnect W AirWave 7 2 User Guide Table 119 Home gt User Info Fields Continued Severe Alert Threshold Include Device Types Customize Search Search Preferences Default Number of Records per List Reset List Preferences Customize Columns for Other Roles Description Select the specific data you would like to see in the header Note This field only appears If you selected Yes in the previous
208. an alert Dell recommends setting one of these triggers at 9096 so you receive a warning before AMP suffers performance degradation due to lack of disk space 186 Performing Daily Administration in AWMS Dell PowerConnect W AirWave 7 2 User Guide b Repeat this procedure for as many triggers and conditions as desired Refer to the start of Creating New Triggers on page 181 to create a new trigger Delivering Triggered Alerts AWMS uses Postfix to deliver alerts and reports via email because it provides a high level of security and queues email locally until delivery If AWMS is located behind a firewall preventing it from sending email directly to a specified recipient use the following procedures to forward email to a smarthost l Add the following line to etc postfix main ct relayhost mail example com where mail example com is the IP address or hostname of your smarthost 2 Run service postfix restart 3 Senda test message to an email address Mail v user example com Subject test mail CC 4 Press Enter Check the mail log to ensure mail was sent tail f var log maillog Viewing Alerts AWMS displays alerts and provides additional alert details in two ways as follows l The Alerts Summary table is one way to monitor and process AWMS alerts The Alert Summary table is available on the following AWMS pages and is illustrated in Figure 127 a APs Devices gt List Groups gt Monitor Home gt O
209. and date the incident was last modified by an AWMS user Creating a New Incident with Helpdesk To create a new Helpdesk incident select Add New Incident underneath the top table This launches and Opened By Displays the username of the AWMS user who opened the incident Helpdesk can be made available to users of any role by selecting the enabled radio button on the Role Detail page Select the pencil icon next to a role on displays an incident edit page as illustrated in Figure 183 The page contents are described in Table 138 Figure 183 Add Incident Page lllustration Incident Summary State Description Table 138 Helpdesk Incident Edit Page Fields Field Description Displays user entered text that describes a short summary of the incident Provides a drop down menu with the options Open or Closed Provides a longer user entered text area for a thorough description of the incident NOTE The Incidents portion of the Alert Summary table on other AWMS pages only increments the counter for incidents that are 2 open and associated to an AP This field displays incidents based on the Top folder on this page and on the Home gt Overview page Incidents not related to devices in that folder are not counted in the Alert Summary table on other pages To view all incidents including those not associated to an AP use the Helpdesk gt Incidents page Helpdesk icons appear at the top of other AWMS pages allowing graphical snapsh
210. and must run ArubaOS 6 0 or later Dell GUI Config must be enabled for that AP s group in the Groups gt Basic page There are three main situations in which you would set one or more devices to Spectrum mode in AWMS Dell PowerConnect W AP Groups running permanently with the default Spectrum profile Individual APs running temporarily in Spectrum mode while part of an Dell AP Group set to ap mode 144 Discovering Adding and Managing Devices Dell PowerConnect W AirWave 7 2 User Guide e Controller level Spectrum Overrides an alternative to creating new Dell AP groups or new radio profiles for temporary changes Setting up a Permanent Spectrum Dell AP Group If you have multiple supported Dell APs in multiple controllers that you want to run in Spectrum mode over the long run you create a special Dell AP group and set up a profile that is set to spectrum mode and references the default Spectrum profile Set up more than one profile if you want to utilize both radio bands in Spectrum mode If you use an 802 11a or 802 11g radio profile to create a group of spectrum monitors all APs in any AP group referencing that radio profile will be set to spectrum mode Therefore best practices are to create a new 802 1 la or 802 11g radio profile just for spectrum monitors If you have Global Dell PowerConnect W Configuration enabled in AMP Setup gt General create the configuration below then go to the controller s group s Dell PowerConnect W
211. apacities will automatically be updated when the device is polled Combined Bandwidth Yes No Interface Labels Fa0 11 Mode Auto vi Description FastEthernet0 11 Shutdown Yes No Interface Type FastEthernet IEEE 802 3 Switchport Access VLAN 51 Switchport Mode Dynamic Auto vi Switchport Trunk Native VLAN Switchport Trunk Allowed VLANs all Switchport Trunk Pruning VLANs Switchport Trunk Encapsulation Negotiate v Speed Auto v Additional Commands ip dhcp snooping trust Figure 98 Virtual Individual Interfaces Configuration Section Description Interface Type To configure interfaces as a group select Edit Interfaces above the Physical or Virtual Interfaces table as shown in Figure 99 140 Discovering Adding and Managing Devices Dell PowerConnect W AirWave 7 2 User Guide Figure 99 Edit Multiple Interfaces switch7 dev aire Physical Interfaces 1 20 w of 26 Interfaces Page 1wof2 gt gt Choose Columns Choose Columns for Roles CSV Export Edit Interfaces Interface Summary for switch7 dev aire com in group Routers Switches in folder Top gt HQ gt Lab gt RoutersSwitches Total Up Down Access Up Down Distribution Up Down 35 23990 34 24 10 1 1 0 EE EEE NE EN EE Description Fa0 1 Access FastEthernet0 1 ethernetCsmacd FastEthernet IEEE 802 3 FastEthernet0 1 Fa0 1 MonitorAsi E Fa0 10 Access Fa
212. apshot of the current state of the network Users can create all other reports over a custom time period on the Reports gt Definitions page All reports can be emailed or exported to XML format for easy data manipulation using a spreadsheet Reports Definitions Page Overview The Reports gt Definitions page allows you to define new reports and see the reports already defined The Definitions page includes these sections Report definitions section The Add button allows you to define a custom report using the Custom Options drag and drop interface or from any of the report types in the dropdown menu The Report Definitions table has a complete list of all saved report definitions with an option to return to each definition s table to further customize your report Add and Run allows you to create a report definition and run that report immediately Run Now visible from the expanded Report Definitions menu allows immediate running of a custom report as soon as you set the parameters You must save its definition separately if you want to remember the parameters Dell PowerConnect W AirWave 7 2 User Guide Creating Running and Emailing Reports 219 Report definitions for other roles section This section supported for admin users displays additional reports that have been scheduled for other roles This section of the page adds the Role column and other columns are the same Fach pane includes a Latest Report column w
213. are displayed in red Figure 138 Diagnostics Summary Illustration Partial Display Diagnostic Summary Radio User Count 19 20 20 20 AP User Count 26 af Signal Quality 0 50 50 49 Current Last Hour Last 2 Hours Last 4 Hours User Bandwidth 0 kbps 0 00 69 kbps 0 03 121 kbps 0 05 198 kbps 0 08 Radio Bandwidth 1910 kbps 0 77 4377 kbps 1 76 4377 kbps 1 76 33963 kbps 13 69 AP Bandwidth 1911 kbps 0 39 4377 kbps 0 86 4377 kbps 0 88 33963 kbps 6 85 Last 8 Hours 198 kbps 0 0896 33963 kbps 13 6996 33963 kbps 6 8596 20 27 49 The following categories link to additional details pages User Bandwidth select this link to display flash graphs for user bandwidth metrics Radio Bandwidth select this link to display flash graphs for radio bandwidth consumption AP Bandwidth select this link to display flash graphs for AP bandwidth consumption Radio User Count select this link to display flash graphs for user count metrics AP User Count select this link to display flash graphs for user count metrics Signal Quality select this link to display flash graphs for signal quality Current User The Current User Counts section displays user counts for APs and radios and includes additional summary Counts information for APs Figure 139 illustrates this section Figure 139 Users gt Diagnostics gt Current User Counts Illustration Current User Counts B02 11a 4 802 11n 5GHz 6 0 802 119
214. ary WDS Perform these steps to configure primary or secondary functions for WDS l Goto the Wireless Services gt WDS gt General Setup page 2 Ifthe AP is the Primary or Backup WDS select Use the AP as Wireless Domain Services Select Priority set 200 for Primary 100 for Secondary Configure the Wireless Network Manager configure the IP address of WLSE If the AP is Member Only leave all options unchecked Go to the Security gt Server Manager page Enter the IP address and Shared Secret for the ACS server and select Apply Go to the Wireless Services gt WDS gt Server Group page Enter the WDS Group of AP per DE d Select the ACS server in the Priority I drop down menu and select Apply Configuring ACS for WDS Authentication ACS authenticates all components of the WDS and must be configured first Perform these steps to make this configuration l Login to the ACS 2 Goto the System Configuration gt ACS Certificate Setup page Dell PowerConnect W AirWave 7 2 User Guide Configuring AWMS 59 3 Install a New Certificate by selecting the Install New Certificate button or skip to the next step if the certificate was previously installed Select User Setup in the left frame Enter the Username that will be used to authenticate into the WDS and select Add Edit Go to the Network Configuration gt Add AAA Client page Add AP Hostname AP IP Address and Community String for the key 4 5 6 Enter
215. at Ignores selected APs preventing AWMS from generating any alerts or including the AP in an up may be down for down count The device s history is preserved but it will not be polled Ignored devices can be maintenance seen and taken out of ignore status by navigating to the New Devices configuration page and selecting View Ignored Devices link at the bottom Delete selected devices from Removes the selected APs from AWMS The deletes will be performed in the background and AMP may take a minute to be removed from the list 104 Configuring and Using Device Groups in AWMS Dell PowerConnect W AirWave 7 2 User Guide Dell PowerConnect W AirWave 7 2 User Guide Using Global Groups for Group Configuration To apply group configurations using the AWMS Global Groups feature first go to the Groups gt List configuration page Select Add to add a new group or select the name of the group to edit settings for an existing group Select the Duplicate icon to create a new group with identical configuration to an existing group To have Global Group status a group must contain no devices accordingly access points can never be added to a Global Group Global groups are visible to users of all roles so they may not contain devices which can be made visible only to certain roles Figure 62 illustrates the Groups gt List page Figure 62 Groups List Page lllustration Add New Group Compare two groups 1 41 w of 41 Groups Page
216. ata is stored on the AWMS page if a user client table exceeds 250 000 rows Database Table Scans The number of database table scans performed by the database 210 Performing Daily Administration in AWMS Dell PowerConnect W AirWave 7 2 User Guide Table 122 System gt Performance Page Fields and Graphs Continued Field Description Database Row Activity The number of insertions deletions and updates performed to the database Database Transaction The number of commits and rollbacks performed by the database Activity Disk Space Disk Space Pie charts that display the amount of used and free hard drive space for each partition If a drive reaches over 8096 full you may wantto lower the Historical Data Retention settings on the AMP Setup General page or consider additional drive space There are several initial steps that you can take to troubleshoot AWMS performance problems including slow page loads and timeout errors Initial troubleshooting steps would include the following Increasing the polling period settings on the Groups gt Basic page Increasing the polling period time for groups with routers and switches Adding additional memory to the server Please consult the sizing information in the latest edition of the Dell PowerConnect W AirWave Sizing Guide from support dell com manuals or contact Dell support for the latest recommendations Supporting AWMS Servers with the Master Console The Master Console
217. atches Dell PowerConnect W AirWave 7 2 User Guide Creating and Using Templates 153 Using Conditional Variables in Templates Using Substitution Variables in Templates Using AP Specific Variables Configuring General Templates Perform the following steps to configure Templates within a Group 1 Select a Group to configure NOTE Dell recommends starting with a small group of access points and placing these APs in Monitor Only mode which is read K only Do this using the Modify Devices link until you are fully familiar with the template configuration process This prevents configuration changes from being applied to the APs until you are sure you have the correct configuration specified 2 Select an AP from the Group to serve as a model AP for the others in the Group You should select a device that is configured currently with all the desired settings If any APs in the group have two radios make sure to select a model AP that has two radios and that both are configured in proper and operational fashion Go to the Groups gt Templates configuration page Select Add to add a new template Select the type of device that will be configured by this template Select the model AP from the drop down list and select Fetch ar FE e i9 AWMS automatically attempts to replace some values from the configuration of that AP with variables to enable AP specific options to be set on an AP by AP basis Refer to Using Template Syntax on pa
218. ate guest users for visitors at the front desk Add Cancel 3 The newly created login information should be provided to the person or people who will be responsible for creating guest access users 4 The next step in creating a guest access user is to navigate to the Users gt Guest Users tab From this tab you can add new guest users you can edit existing users and you can repair guest user errors This page displays a list of guest users and data to include the expiration date the SSID for Cisco WLC and other information Figure 132 illustrates this page and Table 113 describes the information Dell PowerConnect W AirWave 7 2 User Guide Performing Daily Administration in AWMS 191 Figure 132 Users gt Guest Users Page Illustration Guest Users Repair guest user errors Add New Guest User l4 of 4 Guest Users Page iwofl Username Enabled Email Company Name Sponsor Name Expiration Profile Status r jnnaow Yes viranc airess com Airess vfranc Never Error Failed to Configure zserkxmm Yes bob Never Error Failed to Configure bobo No bobo nowhere com arus networks arus 5 27 2009 12 00 AM User Expired jestwrqg Yes Oriol 6 5 2009 12 00 PM User Expired Select All Unselect All Table 113 Users Guest Users Fields Field Description Repair Guest User Sets AWMS to attempt to push the guest user again in an attempt to repair any errors in the Status Errors column
219. ate the Aruba Dell PowerConnect W section and adjust these settings as required Table 48 describes the settings and default values of this section Table 48 Aruba Dell PowerConnect W Fields and Default Values Setting Default Description SNMP Version The version of SNMP used by AWMS to communicate to the AP Offload WMS Configures commands previously documented in the Best Practices Guide in Home gt database Documentation When enabled this feature allows AWMS to display historical information for WLAN switches Changing the setting to Yes pushes commands via SSH to all WLAN switches in Monitor Only mode without rebooting the controller The command can be pushed to controllers in manage mode also without rebooting the controller if the Allow WMS Offload setting on AMP Setup gt General is changed to Yes Dell PowerConnect Yes This setting selects whether you d like to configure your Dell PowerConnect W devices using W GUI Config the Groups Dell PowerConnect W Config method either global or group or using Templates 16 To configure settings for 3Com Enterasys Nortel or Trapeze devices locate the 3Com Enterasys Nortel Trapeze section and define the version of SNMP to be supported 17 To configure support for routers and switches in the group locate the Routers and Switches section and adjust these settings as required This section defines the frequency in which all devices in the group polled These settings
220. ated reports for other roles 1 5 w of 5Reports Page i wv of 1 O Admin Team 4 24 2009 9 19 AM Capacity Report From Cron Capacity Planning All Groups Folders and SSIDs 4 23 2009 12 00 AM 4 24 2009 12 00 AM Admin Team Failed Capacity Report From Cron Capacity Planning All Groups Folders and SSIDs 4 23 2009 12 00 AM 4 24 2009 12 00 AM Partner 4 28 2009 7 15 AM PCICompliance Detailed 3wks Acme PCI Compliance Group Acme HQ 4 7 2009 7 12 AM 4 28 2009 7 12 AM Select All Unselect All Dell PowerConnect W AirWave 7 2 User Guide Creating Running and Emailing Reports 221 Figure 157 Reports gt Generated Page with Single click Report Viewing Options Latest Capacity Planning Report Latest Configuration Audit Report Latest Custom Report Latest Device Summary Report Latest Device Uptime Report Latest IDS Events Report Latest Inventory Report Latest Memory and CPU Utilization Report Latest Network Usage Report Latest New Rogue Devices Report Latest New Users Report Latest PCI Compliance Report Latest Port Usage Report Latest RADIUS Authentication Issues Report Latest RF Health Report Latest User Session Report Using Daily Reports This section describes the default and custom scheduled reports supported in AWMS These reports can be accessed from the Reports gt Generated page Viewing Generated Reports The Reports gt Generated page supports the following general viewing options By default the reports on the
221. atellites radios or modems K NOTE Specifying NTP servers is optional NTP servers synchronize the time on the AWMS server not on individual access points To disable NTP services clear both the Primary and Secondary NTP server fields Any problem related to communication between AWMS and the NTP servers creates an entry in the event log lable 17 describes the settings and default values in more detail For more information on ensuring that AMP servers have the correct time please see support ntp org bin view Servers NTPPoolServers Table 17 AMP Setup gt Network gt Secondary Network Fields and Default Values Setting Default Description ntp1 yourdomain com Sets the IP address or DNS name for the primary NTP server ntp2 yourdomain com Sets the IP address or DNS name for the secondary NTP server 3 On the AMP Setup gt Network page locate the Static Routes area This section displays network subnet mask and gateway settings that you have defined elsewhere from a command line interface K NOTE This section does not enable you to configure new routes or remove existing routes 4 Select Save when you have completed all changes on the AMP Setup gt Network page or select Revert to return to the last settings Save restarts any affected services and may temporarily disrupt your network connection What Next Go to additional tabs in the AMP Setup section to continue additional setup configurations
222. ating a Support Connection rnnt nnns 265 Network Requrements PITE RERE 265 Giles T 265 Cisco Clean Access Integration Perfigo eene 267 Prerequisites for Integrating AWMS with Cisco Clean Access ees 267 Adding AWMS as RADIUS Accounting Server 267 Configuring Data in Accounting Packets rsesrnnrnrrnnrenrsronrrvrvenrsvnnenvnvanesvenenesvrnsnenverennnnsnenvevenns 267 HP Insight Install Instructions for AWMS Servers es 269 Installing AWMS on VMware ESX 3i v 3 5 seen 271 Creating a New Virtual Machine to Run AWMS essent 271 Installing AWMS on the Virtual Machine seeeesvoronrsnonvsnerenvsvenesnrrenesvenenvrrenesvnvevesvensnenvenennns 271 AWMS Post Installation Issues on VMware essent 212 Third Party Copyright Information eese 213 FUN 213 NGCIP oer m 213 NEC ONNI EE EE tet vestadis esesiav ol deiaaeeamateae entsven 273 Crypt DES perl module used by Net SNMP eene 215 uiu He 216 Berkeley D gt 216 MUNN 216 mod_auth_tacacs TACACS authentication module sess 211 219 10
223. ation Issues All Groups Folders and SSIDs Partner Device Summary Report Device Summary All Groups Folders and SSIDs amp Partner RADIUSReport RADIUS Authentication Issues Group Research Lab and Folder Top gt Sunnyvale HQ gt HQ Cisco LWAPP and SSID wpa2 Partner PCICompliance Detailed 3wks Acme PCI Compliance Group HQ Latest Report Report Start Report End Last Run Time Scheduled yesterday now 4 27 2009 2 21 PM Device Summary Report 5 5 2009 5 8 2009 5 8 2009 10 58 AM 1 1 2009 3 31 2009 3 31 2009 6 08 AM PCICompliance Detailed 3wks Acme 3 weeks ago now 4 28 2009 7 12 AM Select All Unselect All 220 Creating Running and Emailing Reports Dell PowerConnect W AirWave 7 2 User Guide Figure 155 Report Type Drop down Menu in Reports gt Definitions Illustration NVE Y lemory and CPU Utilization NOTE Only admin users have complete access to all report information The AWMS reports and online displays of information can vary with configuration User Roles and Folders Reports gt Generated Page Overview The Reports gt Generated page displays reports that have been run as well as the most recent daily version of any report n Admin user can see and edit all report definitions in AWMS Users with Monitor Only roles can see reports and definitions only if they have access to all devices in the reports The Reports gt Generated page contains three primary sections as follows e Generated rep
224. atleast the roaming threshold A high threshold results in fewer mesh roams Deauth Client when Yes With Yes selected clients have authentication removed are deauthenticated if the Uplink is Down uplink is lost The Security section contains settings for SSID and enabling AES encryption Table 68 Groups Proxim Mesh Security Fields and Default Values Setting Default Description SSD none Sets the SSID used by the Mesh Radio to connect to the mesh network Enable AES Nm Enable or disable AES encryption 3 The Mesh Cost Matrix configuration section contains settings for hop factor and maximum hops to portal RSSI factor and cut off medium occupancy factor and current medium occupancy weight Adjust these settings as required for your network l able 69 describes these settings and default values Table 69 Groups Proxim Mesh Mesh Cost Matrix Fields and Default Values Setting Default Description Hop Factor Sets the factor associated with each hop when calculating the best path to the portal AP Higher factors will have more impact when deciding the best uplink Maximum Hops to Set the maximum number of hops for the AP to reach the Portal AP Portal RSSI Factor Sets the factor associated with the RSSI values used when calculating the best path to the portal AP Higher factors will have more impact when deciding the best uplink RSSI Cutoff mo Specifies the minimum RSSI needed to become a mesh neighbor 98
225. ays 8 hrs 14 mins 100 00 229906 28 100 0095 Number of Users by SSID Amount of Time Spent by SSID MB Used by SSID a F of Users Amount of Time Oy of Time MB Used Yo of MB Used 59 0 21 6 10 7 7 58 B BR 29 16 44 25 22 02 42 41 68 87 0 25 35 14 3 63 12 21 0 27 4 96 14 Average Signal Quality 29 07 43 55 27 74 8 66 26 88 51 69 Average Signal Quality 82 XML XHTML export Hl csv export ia Email this report f Print report Number of Sessions 309 301 118 42 FAT Number of Sessions El airesphere wpa2 49 1 El airesphere wpa2 44 3 El airesphere wpa2 75 5e Bl airesphere voip 27 2 Bl airesphere voip 37 49 El quest 16 5 O guest 11 9 airesphere vocera 10 3 lil airesphere voip 7 689 DO Other 6 61 O guest 6 50 El airesphere voce ra 0 15 Dethersphere voce ra 4 96 O Other 1 26 O Other 0 GC 240 Creating Running and Emailing Reports Dell PowerConnect W AirWave 7 2 User Guide Figure 176 User Session Detail gt Role Information Session Data by Role 1 4 v of 4 Roles Page 1 wof1 CSV Export Role employee logon help desk 4 Roles Number of Users v 2 1 1 1 5 1 4 w of 4 Roles Page v of 1 Number of Users by Role El emo Lovee Bl help desk O tog on O unknown 9 o of Users Amount of Time of Time MB Used 9 o of MB Used Average Signal Quality Number of Sessions 40 00 1 day 8 hrs 1 min 14
226. bleshooting problems and will provide detailed instructions on how to retrieve them Table 120 describes some of the most important logs Table 120 A Sample of Important Status Logs Description Logs database activity ss error log Reports problems with the web server Also linked from the internal server error page that displays on the web page please send this log to AirWave support whenever reporting an internal server error Applies in cases where emailed reports or alerts do not arrive at the intended recipient s address Using the System Event Log Page The System gt Event Log page is a very useful debugging tool containing a list of recent AWMS events including APs coming up and down services restarting and most AWMS related errors as well as the user that initiated the action Figure 148 illustrates this page and Table 121 describes the page components Figure 148 System gt Event Log Page Illustration Refresh Time User Type Event Device ID Folder Tue Jan 18 19 33 34 2011 System Device Symbol 7131 AP 7131N 1 Error in SNMP polling Counter length too long 5 bytes 59914 Top gt symbol gt fat aps Tue Jan 18 19 31 00 2011 System Device HP ProCurve 2626 PWR other hp poe switch dev Un setting upstream device 51805 Top gt Routers and switche Tue Jan 18 19 30 40 2011 System Device Dell PowerConnect W 3400 Aruba 3400 Configuration verification configuration on device does not match desired configuration 60081 Top
227. blishes multiple levels in which payment cardholder data is protected in a wireless network AWMS supports PCI requirements according to the standards and specifications set forth by the following authority Payment Card Industry PCI Data Security Standard DSS PCI Security Standards Council Website https www pcisecuritystandards org PCI Quick Reference Guide Version 1 2 October 2008 https www pcisecuritystandards org pdfs pci ssc quick guide pdf PCI Auditing in the AWMS Interface PCI Auditing in AWMS allows you to monitor audit and demonstrate PCI compliance on the network There are five primary pages in which you establish monitor and access PCI auditing as follows The AMP Setup gt PCI Compliance page enables or disables PCI Compliance monitoring on the network and displays the current compliance status on the network See Enabling or Disabling PCI Auditing on page 65 The Reports gt Definitions page allows you to create custom configured and custom scheduled PCI Compliance reports See Reports gt Definitions Page Overview on page 219 The Reports gt Generated page lists PCI Compliance reports currently available and allows you to generate the latest daily version of the PCI Compliance Report with a single select Refer to Reports gt Generated Page Overview on page 221 The APs Devices gt PCI Compliance page enables you to analyze PCI Compliance for any specific device on the network This page is access
228. breviated depending on how many configurations the device groups share or do not share When a configuration differs between two groups the setting 1s flagged in red text for the group on the right The default setting of the Compare page is to highlight settings that differ between two groups To display settings that are similar or identical between two device groups select Show Similar Fields at the top left of the page The result may be a high volume of information Select Hide Similar Fields to return to the default display emphasizing configuration settings that differ between two groups You can change the configuration for either or both groups by selecting Edit in the corresponding column heading The appropriate configuration page appears If you make and save changes to either or both groups go back to the Groups gt List page and select Compare two groups Select the same two groups again for updated information Additional topics in this document describe the many fields that can appear on the Groups gt List gt Compare page Deleting a Group Perform the following steps to delete an existing Group from the AWMS database l VA Browse to the Groups gt List configuration page delete the current default Group Ensure that the Group you wish to delete is not marked as the default group AWMS does not permit you to 2 Ensure that there are no devices in the Group you wish to delete AWMS does not p
229. called Top Header Stats above the tabs represents many commonly used subtabs These hyperlinks provide the ability to view certain key statistics by mousing over such as number and type of Down devices and serve as shortcuts to frequently viewed subtabs Figure 2 illustrates the navigation bar For more details on hyperlinks tabs and subtabs see AWMS Navigation Basics on page 22 Dell PowerConnect W AirWave 7 2 User Guide Configuring AWMS 29 Figure 2 Navigation Bar Displaying Home Subtabs and Down Device Statistics d New Devices 52 4 Up 53 E 27 Mismatched 44 Rogue 2013 Users 1 Ih Alerts 74 Severe Alerts 67 hu3 9 Helpdesk Groups APs Devices Users Reports System Fat APs 6 Thin APs 8 COG Ors 5 Switches 7 isualRF Overview earch Documen 4 a 4d You can control which Top Header Stats links appear from the AMP Setup gt General page as described in Defining General AWMS Server Settings on page 4 Top Header Stats can also be customized for individual user on the Home gt User Info page There you can select the statistics to display for certain device types and override the AMP Setup page All possible display options for users are shown in Figure 5 and these fields are described in detail in Configuring Your Own User Information with the Home User Info Page on page 203 Figure 3 Home User Info Top Header Display Options Top Header Stats Fiter Level For
230. cation and accounting requests Dash Delimited xx xx xx xx xx xx default Colon Delimited xx xx Xx XX XX XX Single Dash XXXXXX XXXXXX No Delimiter XXXXXXXXXXXX This option is supported only for Proxim AP 600 AP 700 AP 2000 AP 4000 Avaya AP3 4 5 6 7 8 HP ProCurve 520WL ProCurve 420 v2 1 0 and higher 82 Configuring and Using Device Groups in AWMS Dell PowerConnect W AirWave 7 2 User Guide Table 51 Groups gt Security Page Fields and Default Values Continued Setting Default Description Authorization Lifetime 1800 Sets the amount of time a user can be connected before reauthorization is required The supported range is from 900 to 43 200 seconds Primary RADIUS Server Specifies the time in minutes that the AP awaits responses from the primary Reattempt Period RADIUS server before communicating with the secondary RADIUS server and so forth 3 Select Save to retain these security configurations for the group select Save and Apply to make the changes permanent or select Revert to discard all unapplied changes 4 Continue with additional security related procedures in this document for additional RADIUS and SSID settings for device groups as required Configuring Group SSIDs and VLANs The Groups gt SSIDs configuration page allows you to create and edit SSIDs and VLANs that apply to a device group Perform these steps to create or edit VLANs and to set SSIDs K NOTE WLANs that are supported from
231. ce level activity The information in this report can be sorted by any column header in sequential or reverse sequential order by selecting the column heading Refer also to the Using the Network Usage Report on page 232 for additional bandwidth information The following figures and Table 128 illustrate and describe the contents of the Capacity Planning Report Creating Running and Emailing Reports 223 Figure 159 Capacity Planning Report Detail Page Daily Capacity Planning Report for All Groups Folders and SSIDS 8 of Capacity for 1 100 of the time 1 10 2011 12 00 AM to 1 11 2011 12 00 AM Generated on 1 11 2011 8 22 PM Interfaces 1 5 w of 35 Interfaces Page lwof7 gt gt CSV Export Device Interface Group Folder Controller Time Above 6 of Capacity Capacity Combined b s Usage Whi O0 1a 1e cO0 1a 64 802 11bgn aruba gui no wms Top gt aruba gt thin aps Aruba3200 15 hrs 50 mins 65 97 5000000 18 31 1372 802 11an aruba corp Top gt corp ethersphere 1322 9 hrs 15 mins 38 54 5000000 21 8096 1249 802 11an aruba corp Top gt corp ethersphere 1322 6 hrs 40 mins 27 78 5000000 32 54 AL27 802 11an aruba corp Top gt corp ethersphere Ims3 6 hrs 35 mins 27 43 5000000 19 12 12C 802 11an aruba corp Top gt corp ethersphereIms3 6 hrs 25 mins 26 74 5000000 26 17 1 5 w of 35 Interfaces Page lwof7 gt gt z0 M Mon 00 OG Mon 06 OG Mon 12 08 Mon 18 08 Tue 00 OG Maximum Average E Avg bps for Enet of mcoll
232. cessed from the AMP Setup tab and describes two pages in the Device Setup tab the Communication and Upload Files pages Once required and optional configurations in this chapter are complete continue to later chapters in this document to create and deploy device groups and device configuration and discovery on the network The first step in configuring AWMS is to specify the general settings for the AWMS server Figure 15 illustrates the AMP Setup gt General page 34 Configuring AWMS Dell PowerConnect W AirWave 7 2 User Guide Figure 15 AMP Setup gt General Page Illustration General Historical Data Retention System Name techpubs Inactive User Data 0 1500 days zero disables 60 Automaticaly monitor manage new devices Monitor Only User Association History 0 550 days zero disables 14 Default Folder Top Tag History 0 550 days zero disables 14 Default Group Access Points gt Rogue AP Discovery Events 14 550 days zero disables Device Configuration Audit Interval Daily Unless this value is 0 it cannot be smaller than the 14 I Delete Rogues not detected for window 14 configured Automatically repair misconfigured devices C Yes No on the RAPIDS Setup page Send debugging messages to Dell Yes No Reports 0 550 days zero disables 60 Nightly Maintenance Time 00 00 23 59 02 15 Automatically acknowledge alerts 0 550 days zero ha disables AMP User Authorization Lifetime
233. cessible from the User Detail page You can also search for a user and select the associated MAC address from the search results This page provides an overview of a user s general status and connectivity on the network Dell PowerConnect W AirWave 7 2 User Guide Performing Daily Administration in AWMS 195 Fach section of the Users gt Diagnostics page displays information by which to evaluate possible user issues Refer to Table 115 for explanation and illustration of page components Table 115 Users Diagnostics Page Sections Section Description Possible This section summarizes the most likely items to create issues for a user on the network Figure 137 illustrates Issues this section NOTE Items in red are the values considered out of spec Figure 137 Groups Diagnostics Possible Issues lllustration Possible Issues Issue Ideal Actual Low signal quality gt 20 0 Excessive roaming in last two hours lt 10 roams 0 High user bandwidth lt 50 of radio capacity 0 kbps 0 00 Unauthenticated user Authenticated EAP High user load on AP radio lt 15 26 High AP radio bandwidth lt 75 of radio capacity 1910 kbps 0 77 802 11b users associated to 802 11bg radio None 0 802 11bg or 802 11a users associated to 802 11n radio None 5 High FCS error rate z 100 0 Low signal quality lf signal quality falls outside of ideal range then possible resolution might be moving the client adjusting client ante
234. ch the device is configured in AWMS Selecting the folder name in this report displays the APs Devices List page for additional device folder and configuration options The group with which any given device associates Selecting the group for a given device takes you to the Groups Monitor page for that specific group to display graphical group information modification options alerts and an audit log for the related group Using the Device Summary Report This field displays configuration mismatch information When a device configuration does not match ideal configuration this field displays the ideal device settings compared to current settings The Device Summary Report identifies devices that are the most or least used devices and a comprehensive list of all devices One potential use of this report 1s to establish more equal bandwidth distribution across multiple devices This report contains the following five lists of devices Most Utilized by Maximum Number of Simultaneous Users By default this list displays the 10 devices that support the highest numbers of users This list provides links to additional information or configuration pages for each device to make adjustments as desired 226 Creating Running and Emailing Reports Dell PowerConnect W AirWave 7 2 User Guide Most Utilized by Bandwidth By default this list displays the 10 devices that consistently have the highest bandwidth consumption during the time
235. ciated with the group instead of defining a server Firmware File Server Provides the IP address of the External TFTP Server like SolarWinds used for the IP Address firmware upgrade This option displays when the user selects the Use an external firmware file option Firmware Filename Enter the name of the firmware file that needs to be uploaded Ensure that the firmware file is in the TFTP root directory If you are using a non external server you select Choose File to find your local copy of the file Dell PowerConnect W AirWave 7 2 User Guide Configuring AWMS 51 NOTE Additional fields may appear for multiple device types AWMS prompts you for additional firmware information as required K For example Intel and Symbol distribute their firmware in two separate files an image file and an HTML file Both files must be uploaded to AWMS for the firmware to be distributed successfully via AWMS 6 Select Add to import the firmware file To delete a firmware file that has already been uploaded to AWMS return to the Device Setup gt Upload Firmware amp Files page select the checkbox for the firmware file and select Delete NOTE A firmware file may not be deleted if it is the desired version for a group Use the Group gt Firmware page to investigate this potential setting and status Using Web Auth Bundles in AWMS Web authentication bundles are configuration files that support Cisco WLC wireless LAN controllers This p
236. cil icon next to the category The Default Credential Compliance page displays for the respective PCI standard Dell PowerConnect W AirWave 7 2 User Guide Configuring AWMS 65 3 Create changes as required Specific credentials can be cited in the Forbidden Credentials section of any Edit page to enforce PCI requirements in AWMS Figure 33 shows one example Figure 33 Default Credential Compliance for PCI Requirements Default Credential Compliance Enabled 9 Yes O No Forbidden Credentials Enter one credential per line 4 Select Save 5 To view and monitor PCI auditing on the network use generated or daily reports See Chapter 9 Creating Running and Emailing Reports In addition you can view the real time PCI auditing of any given device online Perform these steps a Gotothe APs Devices gt List page select a specific device and the Monitor page for that device displays The Monitor page displays a PCI Compliance subtab in the menu bar b Select PCI Compliance to view complete PCI compliance auditing for that specific device What Next For more information about configuring WLAN Gateways or WLAN controllers such as BlueSocket ReetEdge or ProCurve wireless gateways refer to Third Party Security Integration for AWMS on page 257 Go to other tabs in the AMP Setup section to continue additional setup configurations Complete the required configurations in this chapter before proceeding Dell support
237. ckboxes at the left of all devices appear In addition a new section appears in this page location to display various settings that can be configured for multiple devices at one time some operations cannot be performed on the selected devices Figure 61 illustrates this page Figure 61 Modify Multiple Devices Section lllustration Modify Devices mE 1 4 vw of 85 APs Devices Page 1 of21 gt gt Choose Columns CSV Export Device a Upstream Device Notes APs Users BW kbps Uptime Configuration Dell PowerConnect W AP Group 00 0b 86 64 8e bO Switch15 dev airwave com 0 0 136 days 17 hrs 13 mins Good default 00 0b 86 c9 94 d8 1 0 3 hrs 29 mins Error O0 1a le cO lardc 0 0 14 days 5 hrs 14 mins amp Good default 00 1a le cO 2b 34 0 0 14 days 5 hrs 8 mins amp Good default wof85 APs Devices Page iw of21 gt Select All Unselect All Change properties of selected devices AMP Group Folder Select Group and or Select Folder m Dell PowerConnect W AP Group Dell PowerConnect W AF Management Level 2 Monitor Only _ Manage Read Write Management Mode Desired Radio Status 2 Enable Disable Cisco Thin AP Settings Update Perform actions Poll selected devices Poll Now Audit selected devices Audit Run report on selected devices i Update the credentials AMP uses to communicate with these devices Update Import settings from selected devices and discard curren
238. code must retain the above copyright notice this list of conditions and the following disclaimer Redistributions in binary form must reproduce the above copyright notice this list of conditions and the following disclaimer in the documentation and or other materials provided with the distribution The name of Cambridge Broadband Ltd may not be used to endorse or promote products derived from this software without specific prior written permission THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDER AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED IN NO EVENT SHALL THE COPYRIGHT HOLDER BE LIABLE FOR ANY DIRECT INDIRECT INCIDENTAL SPECIAL EXEMPLARY OR CONSEQUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES LOSS OF USE DATA OR PROFITS OR BUSINESS INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY WHETHER IN CONTRACT STRICT LIABILITY OR TORT INCLUDING NEGLIGENCE OR OTHERWISE ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE Part 4 Sun Microsystems Inc copyright notice BSD Copyright 2003 Sun Microsystems Inc 4150 Network Circle Santa Clara California 95054 U S A All nghts reserved Use is subject to license terms below This distribution may include materials developed by
239. con 0 line vty 5 15 actual logging 10 51 2 1 actual logging 10 51 2 5 actual logging facility localo actual logging queue limit 100 actual logging trap debugging no service pad actual ntp clock period 2861929 actual ntp server 209 172 117 194 radius server attribute 32 include in access req format h 10 Once the template is correct and all mismatches are verified on the AP Audit configuration page use the Modify Devices link on the Groups gt Monitor configuration page to place the desired devices into Management mode This removes the APs from Monitor mode read only and instructs the AP to pull down its new startup configuration file from AWMS K NOTE Devices can be placed into Management mode individually from the APs Devices gt Manage configuration page Using Template Syntax Template syntax is comprised of the following components described in this section Using Directives to Eliminate Reporting of Configuration Mismatches on page 155 Using Conditional Variables in Templates on page 156 Using Substitution Variables in Templates on page 157 Using AP Specific Variables on page 158 Using Directives to Eliminate Reporting of Configuration Mismatches AWM S is designed to audit AP configurations to ensure that the actual configuration of the access point exactly matches the Group template When a configuration mismatch is detected AWMS generates an automatic alert and flags the AP as having
240. controller to reboot This option is supported only for Aruba Networks and Dell PowerConnect W devices No the Deauthenticate User button for in a Users User Detail page is enabled only for Managed devices Whether AMP can use character sets other than UTF 8 for configuration settings users while in monitor only mode Allow non UTF8 characters Allow disconnecting ul Sets whether you can deauthenticate a user for a device in monitor only mode If set to Dell PowerConnect W AirWave 7 2 User Guide Configuring AWMS 37 Table 10 AMP Setup gt General gt Device Configuration Fields and Default Values Continued Default Description Use Global Dell Yes Enables Dell PowerConnect W configuration profile settings to be globally configured PowerConnect W and then assigned to device groups If disabled settings can be defined entirely within Configuration Groups gt Dell PowerConnect W Config instead of globally NOTE Changing this setting may require importing configuration on your devices When an existing Aruba configuration setup is to be converted from global to group follow these steps Set all the devices to Monitor Only mode before setting the flag Each device Group will need to have an import performed from the Audit page of some controller in the AMP group All of the thin APs need to have their settings imported after the device group settings have finished importing If the devices were set to Monitor Only mode set
241. ct a classification from the RAPIDS Classification table to be taken to a RAPIDS List page filtered by that classification Operating System Detected operating systems represented in both a color coded pie chart and a summary listing OS scans can be run manually or enabled to run automatically on the RAPIDS gt Setup page Acknowledged A color coded pie chart comparing the number of acknowledged devices to the unacknowledged RAPIDS Devices devices RAPIDS Changes Tracks every change made to RAPIDS including changes to rules manual classification and components on the RAPIDS Setup page 166 Using RAPIDS and Rogue Classification Dell PowerConnect W AirWave 7 2 User Guide Setting Up RAPIDS The RAPIDS gt Setup page allows you to configure your AMP server for RAPIDS Complete the settings on this page as desired and select Save Most of the settings are internal to how AMP will process rogues Basic Configuration On the RAPIDS gt Setup page the Basic Configuration section allows you to define RAPIDS behavior settings Figure 114 illustrates this page Figure 114 RAPIDS Setup Page lllustration Basic Configuration Containment Options ARP IP Match Timeout 1 168 hours 24 Manage rogue AP containment when enabled RAPIDS will manage the classification of RAPIDS Export Threshold suspected Rogue M rogue APs on Cisco WLC and Aruba controllers to match vac No Wired to Wireless MAC Address Correlation
242. ct as Global Groups or groups with master configurations that can be pushed out to subscriber groups on managed AMPs Global groups are visible to all users so they cannot contain APs which can be restricted based on user role 4 Selecting the name of an existing group on the Master Console loads the subtabs for Basic Security SSIDs AAA Servers Templates Radio Cisco WLC Config Proxim Mesh and MAC ACL pages if such pages and configurations are active for the devices in that group These subtabs contain the same fields as the group subtabs on a monitored AWMS but each field also has a checkbox The Master Console can also configure global templates that can be used in subscriber groups The process is the same as described in the Chapter 6 Creating and Using Templates except that there is no process by which templates can be fetched from devices in the subscriber group on managed AMPs Instead the template must be copied and pasted into the Master Console Global Group When a Global Group is pushed from the Master Console to subscriber groups on managed AMPs all settings will be static except for settings with the checkbox selected for fields with checkboxes selected the value or setting can be changed on the corresponding tab for each managed group For list pages override options are available only on the Add page for each list It will take several minutes for changes to Global Groups on the Master Console to be pushed to
243. d 4 Complete the configurations illustrated in Figure 109 and the settings described in Table 89 Dell PowerConnect W AirWave 7 2 User Guide Creating and Using Templates 151 Figure 109 Groups gt Templates gt Add Template Page Illustration Group Routers Switches Cisco Catalyst Any Model Name Device Type Cisco Catalyst Any Model v Reboot devices after configuration changes Yes No Restrict to this version Q Yes 9 No Template firmware version Template Select Fetch template from device Select Device v Fetch Template MM 7 The following variables may be used in the templi value of each variable is configured on the APs C Manage page for each device in the group Each must be surrounded by percent signs osinan 25 f statements must be terminated by en cannot be nested lt ignore_and_do_not_push gt lt ignore_and_do_n lt push_and_exdude gt lt push_and_exclude gt tags can be used to achieve a good configuratior refer to the User Guide for more information Available Variables ap_include_1 contact ap_include_10 domain ap_include_2 gateway ap_include_3 hostname ap_include_4 interfaces ap_include_5 location ap_include_6 manager_ip_ ap_include_7 ss cert ap include 8 ap include 9 chassis id Credentials Change credentials the AMP uses to contact devices after successful config push Community String Confirm Community String Telnet SSH Username Telnet SSH Password
244. d Device with Down Status 143 Setting up Dell Spectrum Analysis in AWMS rrnrnrrrrnrevorerorvonrsvrreresvenenvrverenvenerenvenenesverenvrsenenns 144 Spectrum Configurations and Prerequisites r eaasvrrrvarervrnvrvenerrervnveresvesesvesrsvervevernenen 144 Setting up a Permanent Spectrum Dell AP Group see 145 Configuring an Individual AP to run in Spectrum Mode 145 Configuring a Controller to use the Spectrum Profile sssr 146 Creating and Using Templates eene rrt S airs ott etr rbd rut n RC Nr Ge uu 149 eve 149 Templates are helpful configuration tools that allow AWMS to manage virtually all de vice settings template uses variables to adjust for minor configuration differences EUT 149 supported Device Templates ccecscsssesesscscsssscsesecscsessessececsesessesesesaesesessesesaseesesseseeass 149 Template Variables RT 149 Viewing and Adding Templates rsnrnrrnrrnonroronrnnonvnrervrnvrnenrnnrnvnnennrnrnnsnnnnsnnnnesnnnennrnennsnnnnsnnnnennnnn 150 Configuring General Template Files and Variables esses 153 Configuring General Templates sess 154 IOS Configuration File Template esee 155 Device Configuration File on APs Devices gt Audit Configuration Page 155 VTS 155 Using Directives to Eliminate Reporting
245. d configuration page in the Group Template Variables box For Symbol devices you are also able to define the template per group of APs For more information on using templates in AWMS see the previous section of this chapter It is also possible to create local templates in a subscriber group using global groups does not mean that global templates are mandatory 164 Creating and Using Templates Dell PowerConnect W AirWave 7 2 User Guide Chapter 7 Using RAPIDS and Rogue Classification K This chapter provides an overview to rogue device and IDS event detection alerting and analysis using RAPIDS and contains the following sections Introduction to RAPIDS on page 165 Viewing Rogues on the RAPIDS gt List Page on page 174 Setting Up RAPIDS on page 167 Defining RAPIDS Rules on page 169 Score Override on page 177 Audit Log on page 178 Additional Security Resources on page 179 Introduction to RAPIDS Rogue device detection is a core component of wireless security With RAPIDS rules engine and containment options you can create a detailed definition of what constitutes a rogue device and quickly act on a rogue AP for investigation restrictive action or both Once rogue devices are discovered RAPIDS alerts your security team of the possible threat and provides essential information needed to locate and manage the threat RAPIDS discovers unauthorized devices in your
246. d in the report Role In the Report definitions for other roles section indicates the roles for which additional reports are defined Using Custom Reports Custom reports allow users to specify the data that should be included in a report Perform these steps to create a Custom Report 1 Navigate to the Reports gt Definitions page 2 Select Add 3 By default the Custom option will be selected in the Type drop down menu and the Custom Options section appears below as shown in Figure 158 222 Creating Running and Emailing Reports Dell PowerConnect W AirWave 7 2 User Guide Dell PowerConnect W AirWave 7 2 User Guide Figure 158 Custom Options Page Illustration Drag the desired widgets from the Available Options list into the Selected Options list Widgets within the Selected Options can be reordered Capacity Planning Configuration Audit Device Summary RF Health Most Interfering Devices 2 4 GHz Device Uptime RF Health Problem 2 4 GHz Radios HIDS Events RF Health Problem 5 GHz Radios Inventory RF Health Most Noise 5 GHz Memory and CPU Utilization RF Health Most Utilized by Channel Usage 5 GHz RF Health Most Interfering Devices 5 GHz RF Health Most MAC Phy Errors 5 GHz New Rogue Devices RF Health Most Utilized by Channel Usage 2 4 GHz Gr New Users RF Health Most Mode Changes 2 4 GHz Port Usage RF Health Most Transmit Power Changes 5 GHz RADIUS Authentication Issues RF Health Most Tran
247. d properly To access AWMS web console browse to https IP Address Login with the following credentials Username admin Password admin To view the Phase installation log file type cat root install log To view the Phase 2 installation log file type cat tmp amp install log To access the AWMS GUI enter the AWMS IP address in the address bar of any browser The AWMS GUI then prompts for your license key If you are entering a dedicated Master Console or AWMS Failover license refer to Supporting AWMS Servers with the Master Console on page 211 for additional information 20 Installing AWMS Dell PowerConnect W AirWave 7 2 User Guide Configuring and Mapping Port Usage for AWMS The following diagram itemizes the communication protocols and ports necessary for AWMS to communicate with wireless LAN infrastructure devices including access points APs controllers routers switches and RADIUS servers Assign or adjust port usage on the network administration system as required to support these components Table 4 AWMS Protocol and Port Chart Port Type Protocol Description Direction Device Type e fo m uw er ES 20 w rer mm omen tee m ror ue sensoren gt Sasono hw ue sr onmia gt r vs vor ous rareedemamemenemme femme me en fen 0 server for AWMS admin authentication TCP Retrieve client authentication info client authentication info sen ur ior riage fe meme p Dell Power
248. d select the Add button or select the pencil icon to edit an existing report definition Figure 180 illustrates one view of the Reports gt Definition page Figure 180 Defining a Report with the Reports Definitions Add Button Report Restrictions Group All Groups iM Folder All Folders v Device Search Filter This report will be run against Devices that match this search Report Restrictions section varies according to report type Report Start Report End Scheduling Options Schedule O Yes 9 No Report Visibility Generated Report Visibility By Roe x Email Options Email Report O Yes No 2 Complete the fields described in Table 134 and any additional Report Restrictions The Report Restrictions section changes according to the report type you choose Additional information about each report type is described in Using Daily Reports on page 222 Table 134 Reports gt Definitions gt Add Page Fields Field Default Description Title Empty Enter a Report Title Dell PowerConnect W recommends using a title that is a meaningful and descriptive so it may be found easily on the lists of reports that appear on either Generated or Definitions pages Choose the type of report you wish to create in the Report Type drop down menu 242 Creating Running and Emailing Reports Dell PowerConnect W AirWave 7 2 User Guide Table 134 Reports gt Definitions gt Add Page Fields
249. ddress LAN MAC Address Discovered C 00 0b 86 ce e1 84 Aruba3200 RN Aruba AP 70 10 51 6 222 00 0B 86 CE E1 84 6 11 2010 1 26 PM E 00 1a 1e c0 6c 46 Aruba3600 Master Aruba AP 125 10 51 81 175 00 1A 1E C0 6C 46 12 23 2010 12 00 PM 00 1a 1e c4 5a 10 Aruba3200 RN Aruba AP 60 10 51 3 44 00 1A 1E C4 5A 10 9 29 2010 3 03 PM 1 3 w of 146 APs Devices Page i w of 49 gt gt Select Al Unselect Al View Ignored Devices Group Access Points Folder Top gt Aruba AP Group Auto Detect Monitor Only Firmware Upgrades C Manage Read Write Add Ignore Delete What Next To authorize one or more devices to a group see Authorizing Devices to AWMS from APs Devices gt New Page on page 111 To delete a device altogether from AWMS select the corresponding check box for each device and select Delete Dell PowerConnect W thin APs can have a Dell PowerConnect W AP Group specified and Cisco thin APs can have LWAPP AP Group specified when they are authorized Enabling Cisco Discovery Protocol CDP CDP uses the polling interval configured for each individual Cisco switch or router on the Groups gt List page AWMS requires read only access to a router or switch for all subnets that contain wired or wireless devices The polling interval is specified on the Group gt Basic page Authorizing Devices to AWMS from APs Devices New Page Once you have discovered devices on your network add these d
250. de Displays the firmware version number This is a user configurable field Firmware Version Firmware File Size Displays the size of the firmware file in bytes supporting HTML displays the name ofthe file that was uploaded to AWMS and to be transferred to an AP when the file is used in an upgrade supporting HTML displays the version of HTML used for file transfer HTML Filename HTML Version HTML MD5 Checksum supporting HTML displays the MD5 checksum of the file after it was uploaded to AWMS The MD5 checksum is used to verify that the file was uploaded to AWMS without issue The checksum should match the checksum of the file before it was uploaded supporting HTML displays the size of the file in bytes The firmware file is set as the desired firmware version on the Groups Firmware Files page of the specified groups You cannot delete a firmware file that is set as the desired firmware version for a group HTML File Size Desired Firmware File for Specified Groups Firmware MD5 Displays the MD5 checksum of the file after it was uploaded to AWMS The MD5 Checksum checksum is used to verify that the file was uploaded to AWMS without issue The checksum should match the checksum of the file before it was uploaded Loading Firmware Files to AWMS Perform the following steps to load a device firmware file onto AWMS l Goto the Device Setup gt Upload Firmware amp Files page 2 Select Add The Add Firmwar
251. device and CPU usage on the network by device Both are by percentage To create a scheduled and generated report of this type refer to Using Daily Reports on page 222 Figure 165 illustrates the Reports gt Detail page for this report Dell PowerConnect W AirWave 7 2 User Guide Creating Running and Emailing Reports 231 Figure 165 Daily Memory and CPU Usage Report Illustration Contents Rearranged for Space Daily Memory and CPU Utilization Report for All Groups and Folders T XML XHTML export CSV export 1 13 2011 12 00 AM to 1 14 2011 12 00 AM E Email this report Generated on 1 14 2011 12 34 AM zi Print report Top CPU Utilization by Device Utilization K132 00150 61 14 Aruba200 Master realy 52 49 Aruba200 Master realy 52 48 Aruba200 Master realy 52 48 Aruba200 Master realy 52 48 Aruba200 Master realy 52 45 Aruba200 Master realy 52 42 Aruba200 Master realy 52 40 Aruba200 Master realy 52 39 Aruba200 Master realy 52 37 Top Memory Usage by Device he Usage v Aruba3200 3 121 04 8095 K132 00150 902 7176 Airespace 15 CB 60 89 92 Aruba3400 64 11 devpit651 83 0595 Aruba651 83 77 alpha gren swarea 83 60 Dell PowerConnect W 651 Controller 83 12 Aruba3200 RN 83 02 Alcatel Lucent 4308 82 55 Using the Network Usage Report The Network Usage Report contains network wide information in two categories e Bandwidth usage by device maximum and average bandwidth in
252. displays all of the available data series The bar graph icon on the upper right hand corner of each graph opens a new window and displays all data series for the selected graph over the last two hours last day last week last month and last year in one page The graphs that display depend on the AP and or its controller The two graph panes enable simultaneous display of two different information sets as detailed in s Table 79 Radio Statistics Interactive Graphs Descriptions Graph Title Description Users A line graph that displays the maximum users associated to the corresponding radio at polling intervals over the time range set in the slider Select Show All for other metrics such as average users and max users for various individual devices Bandwidth An area graph displaying the average bandwidth in each direction for the radio Select Show All for other metrics such as max bandwidth in and out average and max mesh overhead or overhead bandwidth and average max Enet0 124 Discovering Adding and Managing Devices Dell PowerConnect W AirWave 7 2 User Guide Table 79 Radio Statistics Interactive Graphs Descriptions Continued Graph Title Description Channel An area graph that displays the channel changes if any of the radio over time Frequent regular channel changes on an Dell or Cisco WLC AP radio usually indicate that the Adaptive Radio Management feature ARM in AOS is compensating for high noise levels from inter
253. diting in the AWMS Interface sess 64 Enabling or Disabling PCI Auditing essent 65 Deploying WMS Offload sess eene tnter nnn nnns 66 Overview of WMS Offload in AWMS rererrnrrronvrvorenverenesnerenrsrenesnsnesvsrenesversnesvensnennevesvrnenennnne 66 General Configuration Tasks Supporting WMS Offload in AWMS 66 Additional Information Supporting WMS Offload sss 67 Configuring and Using Device Groups in AWMS een 69 AWMS Groups OVErVIGW ccccccescscsessessscescsessesesecscsesecsesesecsesesassesecsesesacsesassesesassusesaesesasensesanseeas 10 Viewing All Defined Device Groups srrnanenvnnrnrnvsrenvrverenvsrenrsnsvenvsvenesnnvenssvnvsvesvenenenvevennenennn 71 Configuring Basic Group Settings essent tette 12 Adding and Configuring Group AAA Servers 19 Dell PowerConnect W AirWave 7 2 User Guide Configuring Group Security Settings nter 80 Configuring Group SSIDs and VLANS essent nnne 03 Configuring Radio Settings for Device Groups 87 An Overview of Cisco WLC Configuration ccessssscssssesssscscssssesesesessseseesssesassesessnesasenses 92 Accessing Cisco WLC Configuration esrrnonrsnorenrsrenerverenrsvrnrsvnvenesvnnsnesvensnvnvevennensnenvevenn 92 Navigating Cisco WLC Configuration nnns 92 Config
254. down devices and radios Drag and Drop Dragging and dropping objects with this icon changes the sequence of items in relation to each other Refer to Using RAPIDS and Rogue Classification on page 165 as one example of drag and drop Duplicates or makes a copy of the configuration of an AWMS object Edits the object properties LN Filters rogue list by score and or ad hoc status Google Earth Views device s location in Google Earth requires plug in Manages the object properties Mismatched Indicates mismatched device configuration in which the most recent configuration in AWMS and the current configuration on a device are mismatched Wem emer eie mde LONE 7 E LUI LNNNNNN II TO NK eros ornes Fame pos sever coreane innean orte aaea O ew peoe O O m e pem Reboot Reboots devices or AWMS Refreshes the display of interactive graphs when settings have changed Fit Rete fm Relates an AP Group or Client to a Helpdesk incident pene bodene soy one Nem non amaoni OO mooo eee sm fsnomomammmnmpnimsenme O Sow ony semen vs usanne Sen Sesame OO er ol Searches AWMS for the specified name MAC or IP address Set Time Range Sets the time range for interactive graphs to the range specified p Indicates access points which are in the up status Update Firmware Applies a new firmware image to an AP device 26 Installing AWMS Dell PowerConnect W AirWave 7 2 User Guide Table 7 Standard Bu
255. e 32 Figure 32 AMP Setup PCI Compliance Page lllustration PCI Requirement a Description Enabled 1 1 Configuration standards for routers Yes A device fails if there are mismatches between the desired configuration and the configuration on the device Ww 1 2 3 Install firewalls between any wireless networks and the cardholder data environment Yes device passes if it can function as a stateful fire wall 21 Always change vendor supplied defaults Yes A device fails if the usernames passwords or SNMP credentials being used by OV3600 to communicate with the device are on a list of forbidden credentials The list includes common manufacturer defaults Ww 2 1 1 Change vendor supplied defaults for wireless environments Yes A device fails if the passphrases SSIDs or other security related settings are on a list of forbidden values The list includes common manufacturer defaults uy 4 1 1 Use strong encryption in wireless networks Yes A device fails if the desired or actual configuration reflect that WEP is enabled or if associated users can connect with WEP We 11 4 Use intrusion detection systems and or intrusion prevention systems to monitor all traffic Yes report will indicate a pass for the requirement if OV3600 is monitoring devices capable of reporting IDS events Recent IDS events will be summarized in the report 2 To enable disable or edit any category of PCI Compliance monitoring in AWMS select the pen
256. e Client Cisco IOS set the WDS role for this AP Select Master for the WDS master APs and Wireless LAN Client for the WDS Client Once this is done you can use the if Controllers only wds role 96 to push the client master or backup lines to appropriate WDS APs Cisco lOS AWMS will read the SSL Certificate off of the AP when it comes UP in AWMS The information in this field will defines what will be used in place of certificate SSL Certificate switch command Cisco Catalyst Defines lines included for each of the members in the stack This field switches appears only on the master s Manage page The information in this field will determine what is used in place of the switch command variable Extra Device Cisco IOS Defines the lines that will replace the ap include 196 variable in the Commands IOS template This field allows for unique commands to be run on individual APs If you have any settings that are unique per AP like a MOTD you can set them here 6 For Cisco WLC devices go to the interfaces section of the AP gt Manage page Select Add new Interface to add another controller interface or select the pencil icon to edit an existing controller interface Table 55 describes the settings and default values For detailed descriptions of Cisco WLC devices supported by AWMS refer to the Cisco WLC product documentation Table 85 APs Devices gt Manage gt Interface Fields and Descriptions for Cisco WLC Devices Field
257. e File page appears Figure 22 illustrates this page 50 Configuring AWMS Dell PowerConnect W AirWave 7 2 User Guide Figure 22 Device Setup gt Add New Firmware Page Illustration Type Firmware Version PY Description Upload firmware files and use built in firmware file server 9 Use an external firmware file server Use Group File Server Allow use of the file server defined on the Group Firmware Use Group File Server page Firmware File Server IP Address Po Fe een DE Cancel 3 Select Supported Firmware Versions and Features to view supported firmware versions Vi NOTE Unsupported and untested firmware may cause device mismatches and other problems Please contact Dell support before installing non certified firmware 4 Enter the appropriate information and select Add The file uploads to AWMS and once complete this file appears on the Device Setup gt Upload Firmware amp Files page This file also appears on additional pages that display firmware files such as the Group gt Firmware page and on individual APs Devices gt Manage pages 5 You can also import a CSV list of groups and their external TFTP firmware servers Table 27 itemizes the settings of this page Table 27 Supported Firmware Versions and Features Fields and Default Values Default Description Aruba Indicates the firmware file is used with the specified type If you select an IOS device from Controller the Type drop down menu
258. e Read Write AWMS compares the device s current configuration settings with the Group configuration settings and automatically updates the device s configuration to match the Group policy Automatically placing devices in Managed Read Write mode will overwrite the configuration with the desired configuration in AWMS and should only be used when you are certain AWMS has the correct configuration This can be risky and generally devices should be placed in Monitor Only mode as the default Thin APs Only Only thin APs will be automatically authorized in Monitor Only mode This setting is ideal for mixed environments of thin and autonomous APs or for very large subnets in which you don t want to auto monitor all switches additional information refer to Chapter 4 Configuring and Using Device Groups in AWMS on page 69 Device Configuration Daily If enabled this setting defines the interval of queries which compares actual Audit Interval device settings to the Group configuration policies stored in the AWMS database If the settings do not match the AP is flagged as mismatched and AWMS sends an alert via email log or SNMP Default Group Access Sets the device group that this AWMS server uses as the default for device level Points configuration Select a device group from the drop down menu group must first be defined on the Groups List page to appear in this drop down menu For Dell PowerConnect W recommends enabling this fea
259. e User Event Mon Jan 25 17 23 47 2010 admin ap id 15365 monitor only gt 1 Mon Jan 25 13 04 35 2010 burton ap id 15365 monitor only 1 gt 0 Monitoring pages vary slightly according to whether they are wired routers switches or controllers WLAN switches or thin or fat APs These differences are discussed in the sections that follow Monitoring Data Specific to Wireless Devices The APs Devices gt Monitor page for controllers and APs include a graph for users and bandwidth The controller graph lists the APs connected to it while the APs include a list of users it has connected When available lists of CDP and RF neighbors are also listed A sample monitoring page for wireless devices is shown in Figure 78 118 Discovering Adding and Managing Devices Dell PowerConnect W AirWave 7 2 User Guide Figure 78 APs Devices gt Monitor Page for Wireless Devices partial view of an AP Monitoring AL7 in group Vaporsphere wms3 in folder Top gt HQ This Device is in monitor only with firmware upgrades mode Status Up OK Configuration Good Controller ethersphere Ims3 Aruba AP Group corpi344 2ndfloor Upstream Device Upstream Port Type Aruba AP 125 Remote Device No Last Contacted 8 5 2010 1 36 PM Uptime 102 days 3 hrs 50 mins LAN MAC Address O0 14 1E CD 51 22 Serial AJ0108337 IP Address 10 6 1 199 Total Users 8 Bandwidth 280 kbps First Radio 802 11ban MAC Address 00 14
260. e WLSE all SWAN components must be properly configured Table 31 describes these components Table 31 Cisco SWAN Architecture Components SWAN Component Requirements WDS Wireless Domain WDS Name Services Primary and backup IP address for WDS devices IOS AP or WLSM WDS Credentials APs within WDS Group NOTE WDS can be either a WLSM or an IOS AP WLSM WDS can control up to 250 access points AP WDS can control up to 30 access points WLSE Wireless LAN IP Address Solution Engine Login ACS Access Control IP Address Server Login APs APs within WDS Group Configuring WLSE Initially in AWMS Use the following general procedures to configure and deploy a WLSE device in AWMS Adding an ACS Server for WLSE Enabling Rogue Alerts for Cisco WLSE Configuring WLSE to Communicate with APs Discovering Devices Managing Devices Inventory Reporting Defining Access Grouping WDS Participation Primary or Secondary WDS Adding an ACS Server for WLSE l Goto the Devices gt Discover gt AAA Server page 2 Select New from the drop down list 3 Enter the Server Name Server Port default 2002 Username Password and Secret 4 Select Save Enabling Rogue Alerts for Cisco WLSE l Goto the Faults gt Network Wide Settings gt Rogue AP Detection page 2 Select the Enable Select Apply Additional information about rogue device detection is available in Configuring Cisco WLSE Rogue Scanning on page 60 Dell
261. e any questions that are not answered by the documentation please contact Dell support Configuring Your Own User Information with the Home gt User Info Page The Home gt User Info page displays information about the user that is logged into AWM S This page includes the authentication type local user RADIUS or TACACS and access level This page enables customization some of the information displayed in AWMS and is the place to change your password To create new users navigate to the AMP Setup gt Users page and refer to Creating AWMS Users on page 43 Users can customize the information displayed in the AWMS header Figure 146 illustrates the Home gt User Info page and lable 119 lists the fields Dell PowerConnect W AirWave 7 2 User Guide Performing Daily Administration in AWMS 203 Figure 146 Home gt User Info Page Illustration admin is logged in as a local user with role AMP dormesietrabior and Read Write access to RAPIDS User Information Mare Mew Password Confirm Mew Password Email Address Phone Mates Admin Mame admin rnyconpary Com Top Header Stats Filter Level For Rogue Count Customize Header Columns Stats Severe Alert Threshald Include Device Types Valid EF 9 ves O No Mew Devices Up Wired amp Wireless LJ up Wired Up wireless Down Aired
262. e con 0 lt push and exclude gt no stopbits lt push and exclude gt line vty 5 15 ntp server 209 172 117 194 lt ignore_and_do_not_push gt ntp clock period lt ignore_and_do_not_push gt end Using Conditional Variables in Templates Conditional variables allow lines in the template to be applied only to access points where the enclosed commands will be applicable and not to any other access points within the Group For example if a group of APs consists of dual radio Cisco 1200 devices 802 11a b and single radio Cisco 1100 802 11b devices it is necessary to make commands related to the 802 1 la device in the 1200 APs conditional Conditional variables are listed in the table below The syntax for conditional variables is as follows and syntax components are described in Table 90 tif variable valuest Sendrfs 156 Creating and Using Templates Dell PowerConnect W AirWave 7 2 User Guide Table 90 Conditional Variable Syntax Components Variable LETTET Meaning interface Dot11Radio0 2 4GHz radio module is installed Dot11Radio1 5GHz external radio module is installed radio type Installed 5GHz radio module is 802 11a Installed 2 4GHz radio module is 802 11b only ERN Installed 2 4GHz radio module is 802 11g capable backup The WDS role of the AP is the value selected in the dropdown menu on the APs Devices Manage configuration page for the device client master Static IP address of the device is set statically on
263. e firmware file as the desired version for the group If you have opted to assign an external TFTP server on a per group basis on the Device Setup gt Firmware configuration page you can enter the IP address in the Firmware Upgrade Options field on the top of this configuration page 6 Once you have defined your first group you can configure that group to be the default group on your network When AWMS discovers new devices that need to be assigned to a management group the default group appears at the top of all drop down menus and lists Newly discovered devices are place automatically in the default group if AWMS is set to Automatically Monitor Manage New Devices on the AWMS configuration page 7 Browse to the Groups gt List configuration page 8 From the list of groups check the Default radio button next to the desired default group to make it the default Comparing Device Groups You can compare two existing device groups with a detailed line item comparison Group comparison allows several levels of analysis to include the following compare performance bandwidth consumption or troubleshooting metrics between two groups debug one device group against the settings of a similar and better performing device group use one group as a model by which to fine tune configurations for additional device groups This topic presumes that at least two device groups are at least partly configured in AWMS each with saved config
264. e last day and the total count The table at the bottom of the page as described in Table 137 below summarizes the incidents that have been reported thus far and which AWMS has not yet purged Period of time and Total Use the AMP Setup gt General page and the Historical Data Retention page Using the Closed Helpdesk Incidents field set the number of days that AWMS is to retain records of closed Helpdesk incidents Settings this value to 0 disables this function Dell PowerConnect W AirWave 7 2 User Guide Selecting the pencil icon next to any incident opens an edit page where you can modify and update the incident An incident can be deleted by selecting the checkbox next to it and selecting Delete Table 137 Helpdesk Incidents Bottom Table Column Description LEN Displays the ID number of the incident which is assigned automatically when the incident is logged Summary Presents a summary statement of the issue or problem entered by the AWMS user when the incident is created State The current state of the incident this can be either open or closed The drop down menu atthe top can be used to show only open or closed incidents The default is to show both states the AMP Setup Roles page Related Displays the number of items that have been associated to the incident These link different groups APs or clients to the incident report Displays the time and date the incident was created Updated Displays the time
265. e of 4 months 2 weeks 1 day ago Is valid as is a start date of 5 5 2008 13 00 and an end date of 6 6 2008 9 00 Absolute times must be entered in a 24 hour format Other reports like the Inventory Report give a snapshot picture of the AWMS at the present time When you select Yes new fields display that allow you to define a specific time for report creation The report schedule setting is distinct from the Report Start and Report End fields as these define the period of time to be covered by the report These Schedule fields establish the time that a report runs independent of report scope Current Local Time Displays for reference the time of the AWMS system Desired Start Date Time Sets the time the report runs which may often be separate from the time period covered by the report This allows you to run a report during less busy hours Occurs Select whether the report Is to be run one time daily weekly monthly or annually Depending on the recurrence pattern selected you get an additional drop down menu For example if you select a recurrence of monthly you get an additional drop down menu that allows you to pick which day of the month day 1 day 2 and so forth the report should run Generated By Role This field allows you to display the report either by user role with the report appearing in User Role Report lists on the Reports gt Generated page Alternatively this field allows you to display reports by Subject on the Rep
266. e that says Encryption does not match WEP or better Encryption 9 Matches Does Not Match Encryption list WEF or be better w TE or WPA or better Network type Rogue is running on the selected network type either Ad hoc or Infrastructure Signal Strength Rogue matches signal strength parameters Specify a minimum and maximum value in dBm Classifies the rogue when it matches or does not match the specified string for the SSID or a specified regular expression SSID 9 Matches Does Not Match Matches Regular Expression Enter a list of SSIDs one per line An asterisk is a wildcard Matching is case insensitive and ignores whitespace and non alphanumeric characters remove condition NOTE For SSID matching functions AWMS processes only alpha numeric characters and the asterisk wildcard character AWMS i ignores all other non alpha numeric characters For example the string of ethersphere matches the SSID of ethersphere wpa2 but also the SSID of ethersphere this is an example without any dashes Wireline Properties Detected on LAN Rogue is detected on the wired network Select Yes or No Device has been detected on LAN 9 Yes No remove condition Fingerprint Scan Rogue matches fingerprint parameters Device discovered via wireline fingerprint scan 9 Yes No remove condition 172 Using RAPIDS and Rogue Classification Dell PowerConnect W AirWave 7 2 User Guide Tab
267. ead write group settings wil be applied to device 3 Complete these Device Communications and Location settings for the new device lable 72 further describes the contents of this page Settings may differ from device to device In several cases the default values from any given device derive from the Device Setup gt Communication page Table 72 Device Communication and Location Fields and Default Values Setting Default Description Name Nm 00000000 User configurable name for the AP maximum of 20 characters IP Address None IP address of the device This field is required SNMP Port 8 Port AWMS uses to communicate with the AP using SNMP Community Taken from Device Setup Community string used to communicate with the AP String Confirm Communication NOTE The Community String should have RW Read Write capability New out of the box Cisco devices typically have SNMP disabled and a blank username and password combination for HTTP and Telnet Cisco supports multiple community strings per AP SNMPv3 Taken from Device Setup If you are going to manage configuration for the device this field provides Username Communication a read write user account SNMP HTTP and Telnet within the Cisco Security System for access to existing APs AWMS initially uses this Auth Password username and password combination to control the Cisco AP AWMS Confirm creates a user specified account with which to manage the AP if the User Creat
268. eard by thin APs and reported back to a controller that AWMS monitors AWMS displays the information it receives from the controller in a table on this page Figure 134 illustrates this page and Table 114 describes fields and information displayed Figure 134 Users gt Tags Page lllustration Tags 1 5 of 5Tags Page lwof 1 Name MAC Address Vendor Battery Level Chirp Interval Last Seen Closest AP X CD Burner 00 14 7E 00 14 7E PanGo Networks Inc Normal 2 mins 1 23 2009 1 19 PM HQ Engineering Wa 00 14 7E 00 14 7E InnerWireless Normal 4 mins 1 23 2009 6 44 AM ww Water Cooler 00 14 7E 00 14 7E Aeroscout Ltd 12 secs 1 22 2009 5 35 AM Wy 00 14 7E 00 14 7E InnerWireless Normal 1 min 1 20 2009 4 13 PM Table 114 Users Tags Fields Field Description Name Displays the user editable name associated with the tag MAC Address Displays the MAC address of the AP that reported the tag Displays the vendor of the tag Aeroscout PanGo and Newbury display all or filter by type Battery Level Displays battery information filterable in drop down menu at the top of the column is not displayed for Aeroscout tags Dell PowerConnect W AirWave 7 2 User Guide Performing Daily Administration in AWMS 193 Table 114 Users gt Tags Fields Description Chirp Interval Displays the tag chirp frequency or interval filterable from the drop down menu at the top of the column Note that the chirp interval from the
269. eb Auth Figure 53 illustrates these components and this navigation Figure 53 Groups gt Cisco WLC Config gt Security Navigation Illustration FSecurity TAAA RADIUS poen Fallback TACACS AP Policies Priority Order Management User Wireless Protection Policies Rogue Policies General Client Exclusion Policies Web Auth Lyeb Login Page Configuring Management Settings for Cisco AWMS allows you to configure of SNMP and Syslog Server settings for Cisco WLC controllers Users should be able to configure up to four trap receivers on the Cisco WLC including the AMP IP that can be used in Global Groups To define SNMP and server settings go to the Groups gt Cisco WLC Config gt Management page illustrated in Figure 54 96 Configuring and Using Device Groups in AWMS Dell PowerConnect W AirWave 7 2 User Guide Figure 54 Groups gt Cisco WLC Config gt Management Navigation Illustration I Management SNMP Bm Receivers Trap Controls Syslog Servers Configuring Group PTMP Settings The Groups gt PTMP configuration page configures Point to Multipoint PTMP for all subscriber and base stations in the device group Subscriber stations must be in the same group as all base stations with which they might connect Perform the following steps to configure these functions l Go to the Groups gt List page and select the group for which to define PIMP settings by selecting the group name Alternatively select Add
270. ect that server and select Delete When selecting Add or edit the Details page appears as illustrated in Figure 50 Dell PowerConnect W AirWave 7 2 User Guide Configuring AWMS 61 Figure 30 AMP Setup gt ACS gt Add Edit Details Page Illustration ACS Server Hostname IP Address Po Protocol Port Username Po Confirm Password Po Polling Period 10 minutes 3 Complete the settings on AMP Setup gt ACS gt Add Edit Details Table 33 describes these fields Cancel Table 33 AMP Setup gt ACS gt Add Edit Details Fields and Default Values Field Default Description IP Hostname None Sets the DNS name or the IP address of the ACS Server HTTP Launches a drop down menu specifying the protocol AWMS uses when it polls the ACS server Port 2002 Sets the port through which AWMS communicates with the ACS AWMS generally communicates via SNMP traps on port 162 Username None Sets the Username of the account AWMS uses to poll the ACS server Password None Sets the password of the account AWMS uses to poll the ACS server Polling Period 10 min Launches a drop down menu that specifies how frequently AWMS polls the ACS server for username information 4 Select Add to finish creating the new ACS server or Save to finish editing an existing ACS server 5 The ACS server must have logging enabled for passed authentications Enable the Log to CSV Passed Authentications report option as follows
271. ed See the ARM chapter in the ArubaOS User Guide from support dell com manuals for more information Complete ARM statistics from Dell controllers can be retrieved from the Radio Statistics page by selecting the new Fetch additional radio stats button as illustrated in Figure 50 Figure 80 Fetch additional radio stats button AF Monitoring Radio Statistics Monitoring 802 11bgn radio for AP 1153 patch additional radio stats When this button is selected a new browser window launches with the statistics in plain text Other ARM tracked metrics are visible in the Radio Statistics page for Dell APs Issues Summary section The Issues Summary section only displays when noise user count non 802 11 interfering devices channel utilization bandwidth and MAC and PHY errors reach a certain threshold of concern as described in and illustrated in Figure 81 Table 78 ssues Summary labels and thresholds Issue Triggering Threshold High Number of Users gt 15 Dell PowerConnect W AirWave 7 2 User Guide Discovering Adding and Managing Devices 123 Figure 81 ssues Summary Section Illustration Issue Description High Noise Noise gt 80 These issues highlighted in this section can be examined in detail using the corresponding interactive graphs on the same page See the Radio Statistics Interactive graphs section of this chapter for details 802 11 Radio Counters Summary This table appears for radios with 802 11 c
272. elds select Save AWMS is now configured to gather rogue information from WLSE rogue scans As a result of this configuration any rogues found by WLSE appear on the RAPIDS gt Rogue page What Next Go to additional tabs in the AMP Setup section to continue additional setup configurations Complete the required configurations in this chapter before proceeding Dell support remains available to you for any phase of AWMS installation Configuring ACS Servers This is an optional configuration The AMP Setup gt ACS page allows AWMS to poll one or more Cisco ACS servers for wireless username information When you specify an ACS server AWMS gathers information about your wireless users Refer to Configuring TACACS and RADIUS Authentication on page 52 if you want to use your ACS server to manage your AWMS users Perform these steps to configure ACS servers l Go to the AMP Setup gt ACS page This page displays current ACS setup as illustrated in Figure 29 Figure 29 AMP Setup gt ACS Page Illustration New ACS Server Enter one or more Cisco ACS servers to be polled for wireless username information l 1 w of 1 ACS Servers Page lwof 1 Hostname IP Address Protocol Port Username Polling Period Last Contacted Errors FJ wm 101 11 1 HTTP 2002 stuff 10 minutes 5 14 2009 6 37 AM Select All Unselect All 2 Select Add to create a new ACS server or select a pencil icon to edit an existing server To delete an ACS server sel
273. elect Add New Trigger Condition to specify the count characteristics that trigger an IDS alert Rogue Device This trigger type indicates that a device has been discovered with the specified Rogue Score Ad hoc Classified devices can be excluded automatically from this trigger by selecting Yes See Using RAPIDS and Rogue Classification on page 165 for more information on score definitions and discovery methods Once you choose this trigger type select Add New Trigger Condition to create one or more conditions A condition for this trigger enables you to specify the nature of the rogue device in multiple ways b Repeat this procedure for as many triggers and conditions as desired Refer to the start of Creating New Triggers on page 181 to create a new trigger Setting Triggers for AWMS Health After completing steps 1 3 in Creating New Triggers on page 181 perform the following steps to configure IDS related triggers a Choose the Disk Usage trigger type from the drop down Type menu See Figure 126 for trigger types Table 110 describes the condition settings for this trigger type Table 110 Disk Usage Trigger and Condition Settings AWMS Health Trigger Description Disk Usage This trigger type is based on the disk usage of AWMS This type of trigger indicates that disk usage for the AWMS server has met or surpassed a defined threshold Select Add New Trigger Condition to specify the disk usage characteristics that trigger
274. elf and the AP during the file transfer 4 After a reboot 1s detected AWMS verifies the firmware was applied correctly and all AP configuration settings match those in the AWMS database 5 AWMS pushes the configuration if necessary to restore the desired configuration Some firmware upgrades reconfigure settings Cisco IOS access points take longer than most access points because their firmware is larger 264 Access Point Notes Dell PowerConnect W AirWave 7 2 User Guide Appendix D Initiating a Support Connection The Support Connection Manager establishes a secure point to point connection between the customer AWMS and Dell s support organization Using this secure connection Dell support engineers can remotely diagnose problems or upgrade software without breaching security and exposing AWMS to the Internet This appendix includes the following sections Network Requirements on page 265 Procedure on page 265 Network Requirements The AWMS Support Connection initiates a TCP connection on port 25 to AirWave s support server Please ensure your firewall allows this The connection can be configured to run on 22 80 443 and a few other ports if necessary Please contact Dell support if you need to make any changes AN CAUTION Initiating the support connection will create a point to point tunnel between AWMS and a support server at Dell Procedure Perform these steps to initiate a support connection for AWMS Si
275. emplates Variable Meaning Command Suppressed Default channel Channel 00000 channel channel Ip netmask L address ip address ip address o Subnet mask netmask or ip address dhcp gateway Gateway ip default gateway gateway antenna receive Receive antenna antenna receive diversity antenna receive antenna transmit Transmit antenna antenna transmit diversity antenna transmit cck power 802 119 radio module CCK power power local cck cck power maximum level 802 119 radio module OFDM power power local ofdm ofdm power level Dell PowerConnect W AirWave 7 2 User Guide Creating and Using Templates 157 Table 91 Substitution Variables in Templates Continued Variable Meaning Command Suppressed Default 802 11a and 802 11b radio module power local power maximum power level location The location of the SNMP server snmp server location location contact The SNMP server contact snmp server contact contact certificate The SSL Certificate used by the AP certificate ap include The AP include fields allow for ap include 1 through configurable variables Any lines ap include 10 placed in the AP Include field on the APs Devices gt Manage configuration page replace this variable e pp meme pp fein pp Using AP Specific Variables When a template is applied to an AP all variables are replaced with the corresponding settings from the APs Devices gt Manage configura
276. en selected AWMS shows a detailed list of all Down devices Mismatched The total number of Mismatched devices A device is considered mismatched when the desired configuration in AWMS does not match the actual device configuration read from the device Rogue The number of devices that have been classified by the RAPIDS rules engine above the threshold defined on the Home User Info page Users The number of wireless users currently associated to the wireless network via all the APs managed by AWMS When selected AWMS shows a list of users that are associated Alerts Displays the number of non acknowledged AWMS alerts generated by user configured triggers When selected AWMS shows a detailed list of active alerts Severe Alerts When triggers are given a severity of Critical they generate Severe Alerts When a Severe Alert exists a conditional new component appears at the right of the Status field in bold red font Only users configured on the Home gt User Info page to be enabled to view critical alerts can see Severe Alerts The functionality of Severe Alerts is the same as that described above for Alerts Unlike Alerts the Severe Alerts section is hidden if there are no Severe Alerts Device Typesto You can support statistics for any combination of the following device types Include in Header Autonomous APs Stats Controllers Routers Switches Thin APs Universal Devices Refer to Configuring Your Own User Information with the Home
277. ence of rules is very important for proper rogue classification A device gets classified by the first rule to which it complies even if it conforms to additional rules later in the sequence To create a new rule select the Add button next to New RAPIDS Classification Rule to launch the RAPIDS Classification Rule page see Figure 115 Dell PowerConnect W AirWave 7 2 User Guide Using RAPIDS and Rogue Classification 171 Figure 118 Classification Rule Page RAPIDS Classification Rule Rule name Classification Threat Level Enabled 9 Yes No Detected on WLAN Add Fill in the settings described in Table 99 then select an option from the dropdown menu Table 100 defines the dropdown menu options that are at the bottom left of the RAPIDS Classification Rule dialog box see Figure 115 Once all rule settings are defined select Add The new rule automatically appears in the RAPIDS gt Rules page Table 100 Properties Drop Down Menu Option Description Wireless Properties Detected on WLAN Classifies based on how the rogue is detected on the wireless LAN Device has been detected wirelessly Yes No remove condition Detecting AP Count Classifies based on the number of managed devices that can hear the rogue Enter a numeric value and select At Least or At Most Encryption Classifies based on the rogue matching a specified encryption method Note that you can select for no encryption with a rul
278. ent IP address than the one configured on One NAT the device NOTE If enabled the LAN IP Address listed on the AP Devices gt Manage configuration page under the Settings area Is different than the IP Address under the Device Communication area Audit Auditing and pushing of configuration to devices can be disabled on all the devices in the Configuration on group Once disabled all the devices in the groups will not be counted towards Devices mismatched devices Use Global When enabled this field allows you to define the device group to be a Global Group Refer Group to Using Global Groups for Group Configuration on page 105 4 Complete the SNMP Polling Periods section The information in this section overrides default settings Table 38 describes the SNMP polling settings Table 38 SNMP Polling Periods Fields and Default Values Default Description Up Down Status Polling 5 minutes Sets time between Up Down SNMP polling for each device in the group Period The Group SNMP Polling Interval overrides the global parameter configured on the Device Setup gt Communication page An initial polling interval of 5 minutes is best for most networks Override Polling Period for Enables or disables overriding the base SNMP Polling Period If you select Yes Other Services the other settings in the SNMP Polling Periods section are activated and you can override default values AP Interface Polling Period 5 minutes Sets the interval
279. eography such as 5th Floor APs usage or security policies such as Guest Access APs function such as Manufacturing APs or any other appropriate variable Devices within a group may be from different vendors or hardware models All devices within a Group share certain basic configuration settings Typical group configuration variables include basic settings SSID SNMP polling interval and so forth security settings VLANs WEP 802 1x ACLs and so forth and some radio settings data rates fragmentation threshold RTS threshold DTIM preamble and so forth When configuration changes are applied at a group level they are assigned automatically to every device within that group Such changes must be applied with every device in Managed mode Monitor mode is the more common mode VAN CAUTION Always review the Audit page before pushing configuration to a device or group Individual device settings such as device name RF channel selection RF transmission power antenna settings and so forth typically should not be managed at a group level and must be individually configured for optimal performance Individual AP settings are configured on the APs Devices gt Manage page 70 Configuring and Using Device Groups in AWMS Dell PowerConnect W AirWave 7 2 User Guide You can create as many different groups as required Administrators usually establish groups that range in size from five to 100 wireless devices G
280. ep to enable another form of AP discovery in addition to AWMS CDP SNMP scanning and HTTP scanning discovery for Cisco IOS access points Perform these steps for inventory reporting l Go to Devices gt Inventory gt Run Inventory 2 Run Inventory executes immediately between WLSE polling cycles Defining Access AWMSS requires System Admin access to WLSE Use these pages to make these configurations 1 Go to Administration gt User Admin 2 Configure Role and User 58 Configuring AWMS Dell PowerConnect W AirWave 7 2 User Guide Grouping It s much easier to generate reports or faults if APs are grouped in WLSE Use these pages to make such configurations l Go to Devices gt Group Management 2 Configure Role and User Configuring lOS APs for WDS Participation IOS APs 1100 1200 can function in three roles within SWAN Primary WDS Backup WDS WDS Member AMP monitors AP WDS role and displays this information on AP Monitoring page K NOTE APs functioning as WDS Master or Primary WDS will no longer show up as Down is the radios are enabled WDS Participation Perform these steps to configure WDS participation Log in to the AP Go to the Wireless Services gt AP page Select Enable participation in SWAN Infrastructure Select Specified Discovery and enter the IP address of the Primary WDS device AP or WLSM Enter the Username and Password for the WLSE server Ja A Uu N Primary or Second
281. ermit you to delete a Group that still contains managed devices You must move all devices to other Groups before deleting a Group 4 Ensure that the Group is not a Global Group which has Subscriber Groups and 1s not a Group that was pushed from a Master Console AWMS will not delete a Group in which either of those is true 5 Select the checkbox and select Delete Changing Multiple Group Configurations Perform the following steps to make any changes to an existing group s configuration l Browse to the Groups gt List configuration page Dell PowerConnect W AirWave 7 2 User Guide Configuring and Using Device Groups in AWMS 101 2 Select the Manage link the pencil icon for the group you wish to edit The Groups gt Basic configuration page appears 3 Select the fields to be edited on the Basic configuration page or go to Radio Security VLANs or MAC ACL configuration page and edit the fields Use the Save button to store the changes prior to applying them 4 When all changes for the group are complete select the Save and Apply button to make the changes permanent Figure 60 illustrates the confirmation message that appears Figure 60 Groups gt Basic Configuration Change Confirmation Page Illustration Confirm changes Group Access Points Not Managed by MC COP Neighbor Data Polling Period 5 minutes m 10 minutes Device to Device Link Polling Period 60 seconds 90 seconds Interface Error Counter Pol
282. erry ebbe E bU 152 163 contiguting a global EPA Gaard 162 configuring Cisco IOS Ttemiplates cesseseize occ iint 158 contiene TOESTOUDSo desse tracuvecuncatus ensis ae uercddsasu 149 global template variables uiridi esae iens unes 163 TN RECTEQUE 163 bono M 149 U user interface ANIE SC EEE E EET 24 TD 23 PN 131 APs Devices Tonore desa 116 APs Devices gt Interfaces ossvsvieresteretus vex vecvdpa Vus 129 Als Devices gt bis i 117 APs Devices gt INEW sesuveki i Dirad eea i 112 Dalon and Icons sania a Cdi dud 25 Configuration Change Confirmation 102 PCV Se CU EN 115 Device Setup gt Communication 47 48 49 Device Setup gt DISGOVOE en taces etn atas 109 110 BET Dee as imaware File nenee Meee res nac er emcneee 50 HAS TE A EE 32 33 34 Group SNMP Polling Perioduvamassunndomsmdenn 74 NN M T PS 23 Groups gt BASIC doas dins 73 75 76 77 78 105 Groups Finnwear a 100 Groups re 71 Cromps MAC C Doses 99 eron e U NN fnut aps 97 ST ra 87 Groups gt Templates 150 152 163 164 aisi m 25 Helpdesk Incident ssec spunds qua pen caen nube 250 Helpdesk Inerdebitssseesceeeneo etusteen mcos reds 248 252 Helpdesk EEE DEE 251 9 Kol EV 23 199 Home gt License vuvdneveswenusuwveveveduneeruntedwedswisienmevenus 201 Home gt Overview semenennnenenennnnnnnnnnvnvnvnvnnnenenene 32 200 Home Se
283. es 125 Figure 84 ARM Events Table Illustration ARM Events 1 10 w of 23 ARM Events Page iwof3 gt gt Choose Columns CSV Export Time v Trap Type Previous Tx Power Current Tx Power Previous Radio Mode Current Radio Mode Previous Channel Current Channel Previous Secondary Channel Current Secondary Channel Al Al Al Al Al Al Al Al 1 4 2011 10 55 AM ChannelChange 1 7 Above Above 1 4 2011 10 51 AM Power Change 6 3 1 4 2011 10 51 AM Channel Change 7 1 Above Above 1 4 2011 9 55 AM Channel Change 1 7 Above Above 1 4 2011 9 531 AM Power Change 6 3 1 4 2011 9 50 AM Channel Change 7 1 Above Above 1 4 2011 4 38 AM Channel Change i 7 Above Above 1 4 2011 4 34 AM Power Change 6 3 E E Table 80 ARM Events table Columns and Values Column Description The time of the ARM event Trap Type The type of trap that delivered the change information Current ARM trap types that display in AWMS are Power Change Mode Change Channel Change Values that display in the following columns depend on the Trap Type Previous Secondary Old secondary channel value for 40Mhz channels on 802 11n devices before the Channel Change Channel event took place Current Secondary New secondary channel value after the change Channel Change Reason If the noise and interference cause for the change can be determined they will be displayed here Mode change reasons are no
284. es specific to Dell PowerConnect W devices on the network Use this page as an alternative to the Device Setup gt Dell Configuration page The apperance of this page varies depending on whether AMP is configured for global configuration or group configuration For additional information refer to the ArubaOS Configuration Guide from support dell com manuals Cisco WLC Config This page consolidates controller level settings from the Group Radio Security SSIDs Cisco WLC Radio and AAA Server pages into one navigation tree that is easier to navigate and has familiar layout and terminology Bulk configuration for per thin AP settings previously configured on the Group Dell PowerConnect W AirWave 7 2 User Guide Configuring and Using Device Groups in AWMS 69 LWAPP APs tab can now be performed from Modify Devices on the APs Devices gt List page Refer to An Overview of Cisco WLC Configuration on page 92 PTMP This page defines settings specific to Proxim MP devices when present Refer to Configuring Group PTMP Settings on page 97 Proxim Mesh This page defines mesh AP settings specific to Proxim devices when present Refer to Configuring Proxim Mesh Radio Settings on page 97 MAC ACL T his page defines MAC specific settings that apply to Proxim Cisco VxWorks Symbol and Procurve520 devices when present Refer to Configuring Group MAC Access Control Lists on page 99 Firmware This page manages firmware file
285. es the contents of Users gt User Details page 194 Performing Daily Administration in AWMS Dell PowerConnect W AirWave 7 2 User Guide Figure 135 Users gt User Detail Page Illustration D pevielmfommation Alert Summary at 1 11 2011 12 51 PM Username ARUBANETWORKS shankar nx s LastDay Total Lasttvent Vendor Intel AMP Alerts 0 1 1 10 2011 10 12 AM First Seen 1 5 2011 10 53 AM on 1350 for 6 hrs Incidents 0 0 0 6 mins RADIUS Authentication Issues 0 0 0 Last Seen 1 11 2011 12 51 PM on 1310 for 1 hr 40 mins Classification Undassified x Automatically populate device information Yes No Device Description Device OS Device OS Detail se 100 80 400 k 1 1 Z 1 2 M 40 2M B Ei ii ul Il i ui 0 3 6 M 1 5 11 1 6 11 1 7 11 1 8 11 1 9 11 1 10 11 1 11 11 1 5 11 1 6 11 1 7 11 1 8 11 1 9 11 1 10 11 1 11 11 Show All Maximum Average Show All Maximum Average V Signal Quality 44 6 28 3 DO V Avg Bits Per Second In 3 6 Mbps 341 4 kbps V Avg Bits Per Second Out 151 kbps 24 9 kbps 1 year ago now Z Current Association Username ARUBANETWORKS shankar AP Device 1310 Role perforce Controller ethersphere 1322 Signal Quality 28 Group aruba corp Association Time 1 11 2011 11 11 AM Folder Top gt cor p Duration 1 hr 40 mins Device Location Connection Mode 802 11n 5GHz Radio 802 11an Bandwidth 840 kbps Channel Bandwidth HT40 SSID ethersphere wpa2 VLA
286. escribes the settings and default values Table 45 Proxim Avaya Fields and Default Values Setting Default Description SNMP Version E sets the version of SNMP used by AWMS to communicate to the AP Enable DNS Enables the DNS client on the AP Enabling the DNS client allows you to set some values on the Client AP by hostname instead of IP address If you select Yes additional DNS fields display Primary DNS Blank Sets the IP address of the Primary DNS server server Secondary DNS Blank Sets the IP address of the Secondary DNS server server Default DNS Blank Sets the default DNS domain used by the AP domains HTTP Server Port LN Sets this port as the HTTP server port on all Proxim APs in the group Country Code United Configures AWMS to derive its time settings based on the country of location as specified in States this field 13 To configure HP ProCurve specific settings locate the HP ProCurve section and adjust these settings as required l able 46 describes the settings and default values Table 46 HP ProCurve Fields and Default Values Setting Default Description SNMP Version Sets the version of SNMP used by AWMS to communicate to the AP ProCurve XL ZWeSM CLI Telnet Sets the protocol AWMS uses to communicate with ProCurve XLWeSM devices Communication Selecting SSH will use the secure shell for command line CLI communication Selecting Telnet will send the data in clear text via telnet Controller SNMP Versi
287. ess protocol WPA PSK Combines WPA with Pre Shared Key encryption WPA2 Wi Fi Protected Access 2 encryption WPA2 PSK Combines the two encryption methods shown xSec FIPS compliant encryption including Layer 2 header info Configuring and Using Device Groups in AWMS 85 6 Locate the EAP Options area on the Groups gt SSIDs page and complete the settings lable 55 describes the settings and default values Table 55 Groups SSIDs EAP Options Section Fields and Default Values Setting Default Description WEP Key Rotation Time in seconds between WEP key rotation on the AP Interval Cisco TKIP If enabled Cisco Temporal Key Integrity Protocol TKIP provides per packet key mixing a message integrity check and a re keying mechanism thus fixing the flaws of WEP NOTE TKIP can only be enabled when EAP based security is used Cisco MIC Disabled If enabled Cisco Message Integrity Check MIC adds several bytes per packet to make it more difficult to tamper with the packets 7 Locate the RADIUS Authentication Servers area on the Groups gt SSIDs configuration page and define the settings l able 56 describes the settings and default values Table 56 Groups gt SSIDs gt RADIUS Authentication Servers Fields and Default Values Default Description RADIUS Authentication Server Drop down menu to select RADIUS Authentication servers previously entered on 1 3 the Groups RADIUS configuration page These RADIUS server
288. etc pki rpm gpg RPM GPG KEY CentOS 5 f the key was not manually installed before Yum is run for the first time you will be prompted to install and accept a new key 2 To run Yum manually log in to the AWMS console and type yum update and press Enter If the packages seem to be downloading slowly press Ctrl C to connect to a new mirror 3 To configure Yum to run nightly type yum install yum cron and press Enter Then type service yum start and press Enter Note that yum cron will default to off if the machine is restarted 4 To configure yum cron to start at system startup type chkconfig yum cron on and press Enter In some instances running Yum may cause a problem with AWMS If that happens a good first step is to use SSH to go into the AWMS server as root and issue the following command root make If that does not resolve the issue please contact Dell support Dell PowerConnect W AirWave 7 2 User Guide Package Management for AWMS 255 256 Package Management for AWMS Dell PowerConnect W AirWave 7 2 User Guide Appendix B Third Party ecurity Integration for AWMS This appendix describes the optional integration of third party security products for AWMS as follows Bluesocket Integration on page 257 ReefEdge Integration on page 257 HP ProCurve 700wl Series Secure Access Controllers Integration on page 258 Bluesocket Integration A Bluesocket security scheme for AWMS has the following
289. ettings and default values of this page Table 62 Groups gt Radio gt VxWorks Fields and Default Values Default Description Use Aironet Yes When enabled this option allows Cisco devices to provide functionality not supported by Extensions 802 11 IEEE standards including the following Load balancing Allows the access point to direct Aironet clients to the optimum access point Message Integrity Check MIC Protects against bit flip attacks Temporal Key Integrity Protocol TKIP Key hashing algorithm that protects against IV attacks Lost Ethernet Repeater Pull down menu that specifies the action to take when the Lost Ethernet Timeout threshold is Action Mode exceeded No Action No action taken by the AP Repeater Mode The AP converts to a repeater disassociating all its clients while the backbone is unavailable If the AP can communicate with another root AP on the same SSID its clients will be able to re associate and connect to the backbone If the AP cannot communicate with another root AP clients are not allowed to re associate Disable Radio The AP disassociates its clients and disables the radio until it can establish communication with the backbone Restrict SSID The AP disassociates all clients and then allows clients to re associate with current SSID Lost Ethernet 2 Specifies the time in seconds the AP waits prior to taking action when its backbone Timeout connectivity is down Actions are defined
290. eturn the device to its regular folder or group or send it to the APs Devices gt New page Monitoring Devices This section discusses various device monitoring options and includes the following sections Viewing Device Monitoring Statistics Auditing Device Configuration 116 Discovering Adding and Managing Devices Dell PowerConnect W AirWave 7 2 User Guide Viewing Device Monitoring Statistics You can view many useful device monitoring statistics in the APs Devices gt List page l Goto the APs Devices gt List page which lists all devices that are managed or monitored by AWMS Using the Go to folder field you can determine whether to view all devices or only the devices from a specified folder A lock icon in the Configuration column indicates that the device is in Monitor only mode Figure 75 illustrates this page Figure 75 APs Devices List partial view Folder Top 198 Devices Expand folders to show all APs Devices Go to folder Top 198 Devices eM Total Devices 198 4 Up 105 Down 33 Mismatched 127 Users 15 Avg Device 008 Bandwidth 161 kbps BM 120 4M a am 40 BM 12 M 11 18 10 12 2 10 12 16 10 12 30 10 11 18 10 12 2 10 12 16 10 12 30 10 Show All Maximum Average Show All Maximum Average 311 Max Lisers 157 users 44 users BN Ava Bits Per Serond In 10 Mbps 455 8 kbps 3 1 year ago oq enn nove Ex a Modify Devices 1 10 w of 198 APs Devices Pageleof20
291. evices to a group and specify whether the device is to be placed in Manage Read Write or Monitor Only mode To configure a new group refer to Chapter 4 Configuring and Using Device Groups in AWMS on page 69 In Manage Read Write mode AWMS compares the device s current configuration settings with the Group configuration settings and automatically updates the device s configuration to match the Group policy In Monitor Only mode AWMS updates the firmware compares the current configuration with the policy and displays any discrepancies on the APs Devices gt Audit page but does not change the configuration of the device CAUTION Put devices in Monitor Only mode when they are added to a newly established device group This avoids overwriting any important existing configuration settings Once you have added several devices to the Group and verified that no unexpected or undesired configuration changes will be made to the devices you can begin to put the devices in Manage Read Write mode using the APs Devices gt Manage or the Modify these devices link on any list page Perform the following steps to add a newly discovered device to a group l Browse to the APs Devices gt New page The APs Devices gt New page displays all newly discovered devices the related controller when known applicable and the device vendor model LAN MAC Address IP Address and the date time of discovery Figure 69 illustrates this page
292. f you find that the rogue belongs to a neighboring business for example you can override the classification to a neighbor and acknowledge the device Otherwise Dell strongly recommends that you extract the device from your building and delete the rogue device from your system If you delete a rogue you will be notified the next time it 1s discovered To update a rogue device l Select the Identify OS for Suspected Rogues option if an IP address is available to obtain operating system information using an nmap scan Note that if you are running wireline security software on your network it may identify your AMP as a threat which you can ignore 2 Select the Ignore button if the rogue device is to be ignored Ignored devices will not trigger alerts if they are rediscovered or reclassified 3 Select the Delete button if the rogue device is to be removed from AWMS processing Viewing Ignored Rogue Devices The RAPIDS gt List page allows you to view ignored rogues devices that have been removed from the rogue count displayed by AWMS Such devices do not trigger alerts and do not display on lists of rogue devices To display ignored rogue devices select View Ignored Rogues at the bottom left of the page Once a classification that has rogue devices 1s chosen from the drop down menu a detailed table displays all known information Using RAPIDS Workflow to Process Rogue Devices One suggested workflow for using RAPIDS is as f
293. fering devices An area graph that displays signal interference noise floor levels in units of dBm Noise from interfering devices above your AP s noise threshold can result in dropped packets For ARM enabled Dell APs crossing the noise threshold triggers an automatic channel change A line graph that displays the average and maximum radio transmit power between 0 and 30 dBm over the time range set in the slider You can adjust the transmit power manually in the APs Devices Manage page for this radio s AP or enable ARM on Dell APs to dynamically adjust the power toward your acceptable Coverage Index as needed See the Adaptive Radio Management chapter of the Aruba0S User Guide in support dell com manuals for more information MAC Phy Errors A line graph displaying the frame reception rate physical layer error rate resulting from poor signal reception or broken antennas and the data link MAC layer corrupt frames driver decoding issues for the radio 802 11 Counters A line graph that displays statistics such as frame rate fragment rate retry rate duplicate frame rate and other metrics tracked by 802 11 counters Select the checkbox next to any metric to remove its data from the graph Select Collapse to remove unchecked metrics from the legend and Show All to restore them Figure 83 Radio Statistics Interactive Graphs Illustration Bandwidth and 802 11 Counters displayed Users Bandwidth Channel Noise Power MAC Phy
294. field Configures the minimum severity of an alertto be included in the Severe Alerts count Note The severe alerts count header info will only be displayed if Severe Alerts is selected in the Stats section above Note This field only appears if you selected Yes in the Customize Header Columns field Configures the types of devices that should be included in the header stats If a device type is not selected then it will not be included in the header stats This field only appears If you selected Yes in Customize Header Columns Set to No by default when setto Yes you can select which search categories to display when search results are returned Defines the number of rows to appear in any list by default If a row count is manually set It will override the default setting Reset all list preferences including number of records per list column order and hidden column information Allows admin users to determine the columns that should be displayed and the order they should be displayed for specific user roles To customize lists for other users navigate to that list and select Choose Columns for roles above the list Make the desired column changes select the roles to update and Save Console Refresh Rate The frequency in which lists and charts automatically refresh on a page Perform the following steps to configure your own user account with the Home gt User Info page l In the User Information section enter the following
295. figuration page Figure 55 illustrates this page Dell PowerConnect W AirWave 7 2 User Guide Configuring and Using Device Groups in AWMS 99 Figure 58 Groups gt Firmware Page Illustration Group Access Points Firmware Upgrade Options Configure the File Server IP Address to use when upgrading devices in this group The firmware file definition must be canfigured ta use the per group setting Firmware File Server IP Address Desired Version Choose the desired firmware version to be applied to the devices in this group Upload firmware files on the Device Setup Upload Firmware amp Files page Aruba 200 now x Aruba 2400 nou Aruba 2400 E wt Aruba Joor none Aruba 5000 6000 none rz Aruba amp xc none Aruba 800 none Aruba 800 4 mo H Aruba 800 E none Azalea AP none amp Azalea MSR2000 NONE l Start or schedule firmware upgrade job Upgrade Save desired version preferences without upgrading new Save 2 For each device type in the group specify the minimum acceptable firmware version If no firmware versions are listed go to the Device Setup gt Firmware configuration page to upload the firmware files to AWMS 3 Select Upgrade to apply firmware preferences to devices in the group Refer to the firmware upgrade help under APs Devices gt Manage configuration page for detailed help on Firmware job options 4 Select Save to save th
296. fiphone employee 00 16 CF 00 16 CF UniData Communication Systems Inc Haystack AL29 1 20 2009 1 44 PM 10 hrs 31 r employee networks com employee 00 03 24 00 03 24 Nokia Danmark AS Area51 AL33 1 20 2009 11 17 AM 6 mins 58224 visitor 00 16 CF 00 16 CF Intel Facilities AL37 1 20 2009 11 11 AM 2 hrs 33 m Using the PCI Compliance Report AWMS supports PCI requirements in accordance with the Payment Card Industry PCI Data Security Standard DSS The PCI Compliance Report displays current PCI configurations and status as enabled on the network Verify that AWMS is enabled to monitor compliance with PCI requirements as described in the Enabling or Disabling PCI Auditing on page 65 In addition to citing simple pass or fail status with regard to each PCI requirement AWMS introduces very detailed diagnostic information to recommend the specific action or actions required to achieve Pass status when sufficient information is available Refer to the Auditing PCI Compliance on the Network on page 63 for information about enabling PCI on the network The configurations in that section enable or disable the contents of the PCI Compliance Report that is viewable on the Reports gt Generated page Figure 169 illustrates the fields and information in the most recent PCI Compliance Report Figure 169 PCI Compliance Report Illustration Daily PCI Compliance Report for All Groups Folders and PCI Requirements sz XHTML export 1 20 2009 12 00 AM t
297. ge 155 These variables are always encapsulated between signs On the right side of the configuration page is the Additional Variables section This section lists all available variables for your template Variables that are in use in a template are green while variables that are not yet in use are black Verify these substitutions to ensure that all of the settings that you believe should be managed on an AP by AP basis are labeled as variables in this fashion If you believe that any AP level settings are not marked correctly please contact Dell support before proceeding 7 Specify the device types for the template The templates only apply to devices of the specified type Specify whether AWMS should reboot the devices after a configuration push If the Reboot Devices after Configuration Changes option is selected then AWMS instructs the AP to copy the configuration from AWM S to the startup configuration file of the AP and reboot the AP If the Reboot Devices after Configuration Changes option is not selected then AWMS instructs the AP to copy the configuration to the startup configuration file and then tell the AP to copy the startup configuration file to the running configuration file Dell PowerConnect W recommends using the reboot option when there are changes requiring reboot to take effect for example removing a new SSID from a Cisco IOS device Copying the configuration from startup configuration file to running configu
298. ge APs through Control pages Log in to the Access Control Server via HTTP with proper credentials Navigate to Rights gt Identity Profiles Select Network Equipment Enter the Name LAN MAC and ensure the device is identified as an Access Points in the Identity Profile section for all access points in the network bh v N The Access Points Identity Profile is the default profile for network equipment Enabling this option instructs the Access Controller to pass management traffic between the Access Points and the Customer s wired network HP ProCurve 700wl Series Configuration This procedure enables the sending of client authentication information to AWMS Perform the following steps to enable this configuration l Log in to the Access Control Server via HTTP with proper credentials 2 Navigate to the Rights gt Authentication Policies configuration page 3 Select Authentication Services 258 Third Party Security Integration for AWMS Dell PowerConnect W AirWave 7 2 User Guide 4 Select New Services 5 Select RADIUS 6 Enter Name Logical Name 7 Enter Server AWMS IP Address 8 Enter Shared Secret 9 Enter Port 1812 10 Enter the Shared Secret and Confirm matching the AWMS shared secret 11 Enter Reauthentication Field Session Timeout 12 Enter Timeout 5 13 Select the Enable RADIUS Accounting RFC 2866 check box 14 Enter Port 1813 for RFC 2866 15 To verify and view the log files
299. gn into the serial or regular console with your root login Type service support connection start at the command line interface Type service support connection status to verify that the connection is running properly HR 2 N To end the connection to support type service support connection stop at the command line interface If you have any questions please contact Dell support Dell PowerConnect W AirWave 7 2 User Guide Initiating a Support Connection 265 266 Initiating a Support Connection Dell PowerConnect W AirWave 7 2 User Guide Appendix E Cisco Clean Access Integration Perfigo This appendix includes the following sections Prerequisites for Integrating AWMS with Cisco Clean Access on page 267 Adding AWMS as RADIUS Accounting Server on page 267 Configuring Data in Accounting Packets on page 267 Prerequisites for Integrating AWMS with Cisco Clean Access Run Clean Access Software 3 5 or higher Run AWMS version 3 4 0 or higher Complete the AMP Setup RADIUS Accounting section on AMP Adding AWMS as RADIUS Accounting Server Perform these steps to configure Cisco Clean Access integration l Login to the clean machine server and navigate to the User Management gt Accounting gt Server Config page Select Enable RADIUS Accounting Input the AWMS Hostname or IP Address For Timeout sec leave default 30 Ensure the Server Port is set for 1813 Ensure that the input Shared Secret matches
300. grade process Setting this value to 0 8 Locate the Additional AMP Services section and adjust settings as required Table 14 describes the settings and default values of this section Table 14 AMP Setup gt General gt Additional AMP Services Fields and Default Values Default Description Enable FTP Server Enables or disables the FTP server on AMP The FTP server is only used to manage Cisco Aironet 4800 APs Dell PowerConnect W recommends disabling the FTP server if you do not have any Cisco Aironet 4800 APs in the network Enable RTLS Collector Enables or disables the RTLS Collector which is used to allow ArubaOS controllers to send signed and encrypted RTLS real time locating system packets to VisualRF in other words AWMS becomes the acting RTLS server The RTLS server IP address must be configured on each controller This function is used for VisualRF to improve location accuracy and to locate chirping asset tags This function is supported only for Dell PowerConnect W Alcatel Lucent and Aruba Networks devices With selection of Yes the following additional fields appear which you should populate to match the settings configured on the controller RTLS Port Specify the port for the AWMS RTLS server RTLS Username Enter the user name used by the controller to decode RTLS messages RTLS Password Enter the RTLS server password that matches the controllers value Use Embedded Mail Server Enables or disables t
301. group s wrench a popup menu allows you to select Basic Templates Security SSIDs AAA Servers Radio Dell PowerConnect W Config or Cisco WLC Config to edit those pages as desired as illustrated in Figure 56 Figure 36 Pop up When Hovering over Wrench Icon in Groups gt List rof i Groups Page iw of1 Choose Columns CSV Ex Name a SSID Total Devices I FS Basic ET 1 Templates Security Dell PowerConnect W Config Cisco WLC Config Figure 37 illustrates an example Groups gt Basic page 72 Configuring and Using Device Groups in AWMS Dell PowerConnect W AirWave 7 2 User Guide Figure 37 Groups gt Basic Page Illustration Group Access Points Basic Cisco IOS VxWorks Catalyst Name Access Points SNMP Version 2c E Missed SNMP Poll Threshold 1 100 1 Cisco 105 CU Communication Telnet SSH Regulatory Domain United States Cisoo 105 Config File Communication TFTP SCP Timezone m z For scheduling group configuration changes EE EE ix Cisco WLC Allow One to One NAT Yes No SNMP Version 2c lal a 2 ication a Audit Configuration on Devices En Telnet 55H Toggling this will set all devices in this group to Monitor HH ves No Ony HP ProCurve Controller SNMP Version 2c mm SNMP Polling Periods Up Down Status Polling Period 5 minutes E SE Override Polling Period for Other Services Yes 9 No SNMP Version 2c EA AP Interface Polling Period 10 minutes Client Inactivity Timeout 3 600 min 3 User Data Poll
302. groups or folders summarizes IDS events can be limited to a summary of a certain number of events Provides an audit of vendors models and firmware versions of devices in AWMS summarizes usage for controllers for defined top number of devices can be run with or without per CPU details and details about device memory usage Dell PowerConnect W AirWave 7 2 User Guide Table 135 Report Types and Scheduling Options Supported for Custom Reports Continued Can by Run by Can be Run by Time Period Group Folder Report Type Description Using the Network Summarizes bandwidth data and number of users Usage Report Using the New Roque Shows new rogue devices by score discovering AP and MAC Devices Report address vendor Using the New Users Provides a summary list of new users including username Report role MAC address discovering AP and association time Using the PCI Provides a summary of network compliance with PCI Compliance Report requirements according to the PCI requirements enabled in AWMS using the AMP Setup PCI Compliance page Using the Port Usage summarizes switch and port information across the network Report Generates information on the unused ports Provides a detailed list of all available switches and ports in the network Using the RADIUS summarizes RADIUS authentication issues by controller and Authentication Issues by user as well as a list of all issues Report Using the RF Health Yes Yes Trac
303. groups or to edit existing groups Once general group level configurations are complete continue to later chapters in this document to add or edit additional device level configurations and to use several additional AWMS functions Adding and Configuring Group AAA Servers Configure RADIUS servers on the Groups gt AAA Servers page Once defined on this page RADIUS servers are selectable in the drop down menus on the Groups gt Security and Groups gt SSIDs configuration pages Perform these steps to create RADIUS servers 2 NOTE TACACS servers are configurable only for Cisco WLC devices Refer to Configuring Security Parameters and Functions on page 96 l Goto the Groups gt List page and select the group for which to define AAA servers by selecting the group name The Monitor page appears 2 Select the AAA Servers page The AAA Servers page appears enabling you to add a RADIUS server Figure 35 illustrate this page for AAA RADIUS Servers Dell PowerConnect W AirWave 7 2 User Guide Configuring and Using Device Groups in AWMS 79 Figure 38 Groups gt AAA Servers Page Illustration WLANs an a Cisco WLC can be configured on the Cisco WLC Config page New RADIUS Server Hostname IP Address Authentication Authentication Port Accounting Accounting Port Timeout Max Retries 10 180 180 180 Yes 1812 Na 3 10 181 181 181 Yes 1812 Na 4 add 10 153 183 153 Yes 1812 Na 2 10 182 182 182 Yes 1812 Na 2
304. gt gt Choose Columns Ce Export zm a Status Detailed Status Upstream Device Motes APs Users BW kbps Configuration Dell PowerConnect W AP Group OmOb B amp bBebo Up OK Switchl5 Sb days 3 hrs 44 mins Good default Arce DOIOb B5 54 BEDO Up OK 5witchl5 5 days 1 hr 9 mins f Error default ACOE OMIBBECHESTA Up OK 8 days 19 hrs 50 mins Eror ACOE A 0D0bE5c534dE Down AP i no longer associated with controler o Eror Acce amp OUObcB5 O 32 60 Up OK 3 days 8 hrs 36 mins Eror Arce Olalecth0cta Down APisnolonger associated with controler Eror cce Dxlalecikhladc Up OK 3 days 1 hr amp mins d Mismatched default Arce Dklaledk b34 Up OK 7 days 1 hr 38 mins Good default Arce QOrlalec 2b5s Down AP is no langer associated with controller Mis matched default Acre s Olelect4b3e Down APisno langer associated with controller Eror Arce l 10 of 198 APs Devices Page lw of 20 gt gt Alert Summary at 12 30 2010 135 PM Type a Last Day Total Last Event AKP Alerts IDS Events Incidents RADIUS Authentication Issues 0 D 68 12 28 7010 3 30 PM 2 Verify that the devices you added are now appearing in the devices list with a Status of Up Ln NOTE Newly added devices will be status Down until they have been polled the first time They wi
305. gt Tags Page See also Evaluating and Diagnosing User Status and Issues For information about creating AWMS users and AWMS user roles refer to Creating AWMS Users on page 43 Creating AWMS User Roles on page 44 188 Performing Daily Administration in AWMS Dell PowerConnect W AirWave 7 2 User Guide If you need to create an AWMS user account for frontline personnel who are to support Guest WLAN users refer to Supporting Guest WLAN Users With the Users gt Guest Users Page on page 191 Overview of the Users Pages The Users pages display multiple types of user data for existing WLAN users The data comes from a number of locations including data tables on the access points information from RADIUS accounting servers and AWMS generated data AWMS supports the following Users pages Users gt Connected Displays active users that are currently connected to the WLAN Refer to Monitoring WLAN Users with the Users gt Connected and Users gt All Pages on page 189 Users gt All Displays all users of which AWMS is aware with related information Non active users are listed in gray text For a description of the information supported on this page refer to Monitoring WLAN Users with the Users gt Connected and Users gt All Pages on page 189 Users gt Guest Users Displays all guest users in AWMS and allows you to create edit or delete guest users See Supporting Guest WLAN Users With the Users gt Guest Users P
306. gure 113 Table 92 defines the summary information that appears on the page Figure 113 RAPIDS Overview Page lllustration IDS Events Attack Last z Hours Last 24 Hours Total AP Flood Attack 200 Block ACK Attack 48 Disconnect Station Attack 17 Made Rate Anomaly 3 WEP Miscanfiguratian 105 5 Attack Types 373 Rogue Data Device Count by RAPIDS Classification RAPIDS Classification Devices Rogue 2 Suspected Rogue 2969 Unclassified o Suspected Neighbor 355 Neighbor Suspected Valid 3 valid Total 3356 E Suspected Rogue 88 5 O Suspected Neighbor 10 Ge O Suspected Valid 0 9 B Rogue 0 1 Operating System Devices Mot scanned 3356 Acknowledged RAPIDS Devices E Unacknowledged 100 OD Acknowledged gg RAPIDS Changes view RAPIDS audit log Time User Event Thu Dec 2 17 16 42 2010 admin seas config id 1 rapids filter nat heard for D gt 14 Table 92 Overview Fields Summary Description IDS Events Displays a list of IDS events for the designated folder and subfolders Field displays events from the past two hours the past 24 hours and total IDS events Names of attacks link to summary pages with more details Note AMP should be configured as the SNMP trap receiver on the controllers to receive IDS traps See the Dell Best Practices Guide in Home gt Documentation for details Rogue Data A pie chart of rogue device percentages by RAPIDS classification Sele
307. gure the default firmware upgrade behavior for AWMS Table 13 describes the settings and default values of this section Table 13 AMP Setup General Default Firmware Upgrade Options Fields and Default Values Default Description Allow Firmware Upgrades in Monitor Only mode If Yes is selected AWMS upgrades the firmware for APs in Monitor Only mode When AWMS upgrades the firmware in this mode the desired configuration are not be pushed to AWMS Only the firmware is applied The firmware upgrade may result in configuration changes AWMS does not correct those changes when the AP is in Monitor Only mode Simultaneous Devices Per Job 1 1000 Defines the number of devices that can be in the process of upgrading at the same time AWMS only runs one TFTP transfer at a time As soon as the transfer to a device has completed the next transfer begins even if the first device is still in the process of rebooting or verifying configuration Simultaneous Jobs Defines the number of jobs AWMS runs at the same time A job can include multiple APs 1 20 Dell PowerConnect W AirWave 7 2 User Guide Configuring AWMS 39 Table 13 AMP Setup gt General gt Default Firmware Upgrade Options Fields and Default Values Continued Default Description disables this function Failures Before Sets the default number of upgrade failures before AWMS pauses the upgrade process Stopping 0 20 User intervention is required to resume the up
308. h communication between AWMS and the Confirm RADIUS authentication server What Next For more information about configuring WLAN Gateways or WLAN controllers such as BlueSocket ReefEdge or ProCurve wireless gateways refer to Third Party Security Integration for AWMS on page 257 Go to additional subtabs in AMP Setup to continue additional setup configurations Complete the required configurations in this chapter before proceeding Dell support remains available to you for any phase of AWMS installation Configuring Cisco WLSE and WLSE Rogue Scanning The Cisco Wireless LAN Solution Engine WLSE includes rogue scanning functions that AWMS supports This section contains the following topics and procedures and several of these sections have additional sub procedures Introduction to Cisco WLSE Configuring WLSE Initially in AWMS Configuring IOS APs for WDS Participation Configuring ACS for WDS Authentication Configuring Cisco WLSE Rogue Scanning You must enter one or more CiscoWorks WLSE hosts to be polled for discovery of Cisco devices and rogue AP information 56 Configuring AWMS Dell PowerConnect W AirWave 7 2 User Guide Introduction to Cisco WLSE Cisco WLSE functions as an integral part of the Cisco Structured Wireless Aware Network SWAN architecture which includes IOS Access Points a Wireless Domain Service an Access Control Server and a WLSE In order for AWMS to obtain Rogue AP information from th
309. had resided before it was marked Ignored Ignored devices are not displayed in APs Devices gt New if discovered in subsequent scans Deleted devices will be listed on the APs Devices gt New if discovered in subsequent scans Perform these steps to further process or return an ignored device to a managed status l To view all devices that are ignored go to the APs Devices gt Ignored page illustrated in Figure 74 Figure 74 APs Devices gt Ignored Page Illustration Device Controller Type IP Address LAN MAC Address Discovered w E Arubacooo 2 Aruba Controller 10 1590 15 6 8 2010 4 14 AM C Cisco 2100 58 60 Cisco 2100 WLC 10 50 1002 3 29 2010 7 29 PM C hp poe switch HP ProCurve 2626 PWR 10 510 272 O0 13 21 AC 5E40 10 26 2009 4 35 PM 4 6 of 17 Ignored APs Devices Page2wof6 gt Select All Unselect All View New Devices Unignore Delete This page provides the following information for any ignored device device name or MAC address when known controller associated with that device device type device IP address LAN MAC address for the LAN on which the device is located date and time of device discovery 2 To change the device parameters for a given device select its checkbox and adjust group folder monitor and manage settings as desired Select Add to add the device to AWMS so that it appears on the APs Devices gt New list 4 The Unignore button will either r
310. he CSV upload icon for the template The CSV file must contain columns for Group Name and Variable Name All fields must be completed Group Name the name of the subscriber group that you wish to update Variable Name the name of the group template variable you wish to update Variable Value the value to set For example for a global template with a variable called ssid 1 the CSV file might resemble what follows Group Name ssid 1 Subscriber 1 Value 0 8 Once you have defined and saved a global template it is available for use by any local group that subscribes to the global group Go to the Groups gt Template configuration page for the local group and select the pencil icon next to the global template in the list Figure 112 illustrates this page Dell PowerConnect W AirWave 7 2 User Guide Creating and Using Templates 163 Figure 112 Groups gt Templates Edit Upper Portion Group SG aruba Name Aruba 3600 3 3 1 11 Device Type Aruba 3600 Restrict to this version Yes Template firmware version 3 3 1 11 locaton 9 To make template changes go to the Groups gt Template configuration page for the global group and select the pencil icon next to the template you wish to edit Note that you cannot edit the template itself from the subscriber group s Groups gt Templates tab 10 If group template variables have been defined you are able to edit the value for the group on the Groups gt Templates Ad
311. he MAC address Location Displays the QuickView box allows users to view features including heatmap for a device and location history for a user LAN IP Displays the IP assigned to the user MAC This information is not always available AWMS can gather it from the ARP cache of switches discovered by AWMS VPN IP Displays the VPN IP of the user MAC This information can be obtained from VPN servers that send RADIUS accounting packets to AWMS The Recent Events area lists the most recent events specific to the AP This information also appears on the System gt Events Log page lable 77 describes the fields in this page that display Table 77 APs Devices Monitor Recent Events Fields and Default Values Field Description Time Displays the day and time the event was recorded User Displays the user that triggered the event Configuration changes are logged as the AWMS user that submitted them Automated AWMS events are logged as the System user Displays a short text description ofthe event 0 a Displays a short text description ofthe event 0 description of the event 122 Discovering Adding and Managing Devices Dell PowerConnect W AirWave 7 2 User Guide Evaluating Radio Statistics for an AP The APs Devices gt Monitor gt Radio Statistics page contains useful data for pinpointing network issues at the AP radio level for Dell APs and Cisco WLC thin APs firmware 4 2 or greater To see radio statistics details
312. he desired containment settings but will not push them to containment in monitor devices This may result in mismatches in device classifications This can be useful for only mode administrators that want to see what RAPIDS would push to the controller without making any changes to their network If enabled AMP will push the desired containment settings to the controllers in Monitor Only mode as well as the devices in Managed mode Maximum number of APs 3 Sets the maximum number of APs that will contain a rogue on Cisco WLC controllers to contain a rogue 168 Using RAPIDS and Rogue Classification Dell PowerConnect W AirWave 7 2 User Guide 1 Navigate to the RAPIDS gt Setup page 2 From the Containment Options section select Yes to manage rogue AP containment Once this is done the Contained Rogue classification will appear as an option in the classification dropdown menu as shown in Figure 115 Additionally once this option been enabled the option to manage contained APs in Monitor Only mode becomes available Containment in Monitor Only mode means configuration changes will still be pushed to the controller even though it is in monitor only mode Figure 115 RAPIDS gt Classification Rule Menu with Containment RAPIDS Classification Rule Rule name Classification valid Threat Level Suspected Valid Meighbor Enabled Suspected Neighbor Unclassified Suspected Rogue Detected on WLAN hal Roque From the
313. he device The longitude is used with the Google Earth integration Altitude meters All Text field for entering the altitude of the device when known This setting is used with the Google Earth integration Specify altitude in meters Dell PowerConnect W AirWave 7 2 User Guide Discovering Adding and Managing Devices 135 Table 82 APs Devices gt Manage gt Settings Fields and Default Values Continued Setting Default Device Type Description Default Group All Drop down menu that can be used to assign the device to another Group Drop down menu that can be used to assign the device to another Group Down Status Enter a text message that provides information to be conveyed if the Message device goes down Administrative Enables or disables administrative mode for the device Status Local A Designates the mode in which the device should operate Options include the following Local H REAP Monitor Rogue Detector Sniffer 4 Complete additional settings on the APs Devices gt Manage page to include H REAP certificates radio settings and network settings Table 85 describes many of the possible fields Auto Detect Yes selecting Yes enables automatic detection of upstream device which is Upstream Device automatically updated when the device is polled selecting No displays a drop down menu of upstream devices All All All All I 2 NOTE For complete listing and discussion of settings applicable only t
314. he email alerts The alert summary information at the top of the AWMS screen can be configured to separately display severe alerts Please see the Home User Info section for more details Figure 126 System Triggers Add Trigger Type Drop down Menu Trigger Device Down Device Down Device Lp Configuration Mismatch ar is Down Device User Count Device Bandwidth Device Resources Interfaces Radios Radio Down Conditions 802 11 Frame Counters 802 11 QoS Counters InterFace Bandwidth Radio Utilization Discovery New Device Discovered Connected Users User Bandwidth Inactive Tag er Restrictions Once you have selected a trigger type the Add Trigger page changes In many cases you must configure at least one Condition setting Conditions settings and default values vary according to trigger type Triggers with conditions can be configured to fire if any criteria match as well as if all criteria match Some trigger types share common settings such as Duration which can be expressed in hours minutes seconds or a combination of these and Severity from Normal to Critical After you select Save the trigger appears on your next viewing of the System gt Triggers page with all other active triggers You can edit or delete any trigger as desired from the System gt Triggers page To edit an existing trigger select the pencil icon next to the respecti
315. he embedded mail server that is included with AWMS This field supports a Send Test Email button for testing server functionality This button prompts you with a To and From field in which you must enter valid email addresses and a button to send a test email Traps from Cisco WLC to give real time information on users connected to the wireless network Enable AMON data Yes Allows AMP to collect enhanced data from Dell PowerConnect W devices on certain collection firmware versions see the Dell PowerConnect W AirWave Best Practices Guide in Home Process User Roaming AMP now parses client association and authentication traps from Cisco WLC controllers Documentation for more details 9 Locate the Performance Tuning section Performance tuning 1s unlikely to be necessary for many AWMS implementations and likely provides the most improvements for customers with extremely large Pro or Enterprise installations Please contact Dell support if you think you might need to change any of these settings lable 15 describes the settings and default values of this section Table 15 AMP Setup General Performance Tuning Fields and Default Values Default Description Monitoring Based on the Optional setting configures the throughput of monitoring data Increasing this Processes number of setting allows AWMS to process more data per second but it can take cores for your resources away from other AWMS processes Please contact Dell support if se
316. he specified group NOTE If the trigger is restricted by folder and group it only applies to the intersection of the two it only applies to APs in the group and in the folder b In addition to appearing on the System gt Alerts page the Alert Notifications settings can be configured to distribute to email or to a network management system NMS or to both If you select Email you are prompted to set the sender and recipient email addresses 182 Performing Daily Administration in AWMS Dell PowerConnect W AirWave 7 2 User Guide If you select NMS you are prompted to choose one or more of the pre defined trap destinations which are configured on the AMP Setup gt NMS page Define the Logged Alert Visibility in which you can choose how this trigger is distributed The trigger can distribute according to how is it generated triggering agent or by the role with which it is associated The Suppress Until Acknowledged setting defines whether the trigger requires manual and administrative acknowledgement to gain visibility If No a new alert will be created every time the trigger criteria are met If Yes an alert will only be received the first time the criteria is met A new alert for the device is not created until the initial one is acknowledged 3 In the Trigger section choose the desired trigger Type and Severity Figure 126 illustrates some of the supported trigger types Severity levels are indicated in t
317. hentication login eap methods4 group rad eap4 Actual aaa authentication login mac methods local aaa authorization exec default local aaa cache profile admin cache all aaa group server radius dummy aaa group server radius rad acct aaa group server radius rad admin cache authentication profile admin cache cache authorization profile admin cache cache expiry 1 aaa group server radius rad eap aaa group server radius rad eap4 Actual Actual Actual Actual Actual Actual Actual Actual Actual Actual Actual Actual server 10 2 25 180 auth port 1645 acct port 1646 Actual server 10 2 25 180 auth port 1812 acct port 1813 Airwave Cisco LWAPP Top gt Sunnyvale HQ gt HQ Cisco LWAPP Research Lab Current Device Desired Device Configuration Configuration 802 11a Channel Assignment Method Automatic Static 802 11a Coverage Measurement 180 300 802 11a DCA Channel 165 Disabled Enabled 802 11a DCA Channel 190 Disabled Enabled 802 11a DCA Channel 196 Disabled Enabled 802 11a DTPC Support Enabled Disabled 802 11a Data Fragmentation 2346 2337 Threshold 802 112 Global Default Transmit 1 5 Power Level 802 11a Load Measurement 60 300 802 11a Noise Measurement 180 300 802 11a Power Level Assignment Automatic Fixed Method Table 129 Daily Configuration Audit Report Field Description The device name for every device on the network Selecting a given device name in this column allows you to display device specific configuration The folder in whi
318. his option allows you to specify the device types for which AWMS displays group settings You can override this setting Look up wireless user Yes Enables AWMS to look up the DNS for new user hostnames This setting can be hostnames turned off to troubleshoot performance issues DNS Hostname 24 hours Defines the length of time in hours for which a DNS server hostname remains valid on Lifetime AWMS after which AWMS refreshes DNS lookup 1 hour 2 hours 4 hours 12 hours 24 hours Device l N A The message included in this field is displayed along with the Down if a device s Troubleshooting Hint upstream device is up This applies to all APs and controllers but not to routers and switches 4 Locate the Device Configuration section and adjust settings for whether certain changes can be pushed to devices in Monitor Only mode lable 10 describes the settings and default values of this section Table 10 AMP Setup gt General gt Device Configuration Fields and Default Values Default Description Guest User Disabled Enables or prevents guest users to from pushing configurations to devices Options are Configuration Disabled default Enabled for Devices in Manage Read Write Enabled for all Devices Allow WMS offload configuration in monitor only mode When Yes is selected you can enable the ArubaOS WMS offload feature on the Groups Basic page for WLAN switches in Monitor Only mode Enabling WMS offload does not cause a
319. how All to select other options to display The Alerts section displays custom configured alerts that were defined in the System gt Alerts page In more recent versions of AWMS the Users gt Connected page includes SSID information for users and can display wired users using remote Access Point RAP devices in tunnel and split tunnel mode Dell PowerConnect W AirWave 7 2 User Guide Performing Daily Administration in AWMS 189 Figure 130 Users gt Connected Page Illustration Q Folder Top 0 201 Users gt HQ 124 201 Expand folders to show all Users Go to folder HQ 124 201 v Help Default Expansion Collapsed Default Folder Last Visited lt Total Devices 43 Mismatched 2 Users 124 Avg Device 2 88 Bandwidth 11187 kbps Users for folder Sunnyvale HQ Last 2 hours gall Bandwidth for folder Sunnyvale HQ Last 2 hours Ball 80 4 M 40 8M 12M 10 07 11 07 12 07 10 07 11 07 12 07 Show All Maximum Average Show All Maximum Average V Max Users 132 users 125 users V Avg Bits Per Second In 5 5 Mbps 1 8 Mbps W Avg Bits Per Second Out 10 Mbps 4 5 Mbps l FE 1 year ago gt At now 2e 1 10 w of 124Users Page 1 w of 13 gt gt Username Role MAC Address AP Device Group SSID VLAN AP Radio Connection Mode ChBW Association Time v COMPANYNETWORKYuserid1 employee 00 21 5D 8B 6E 62 AL21 Corporate 1 corporate wpa2 65 802 11an 802 11n 5GHz HT40 8 13 2009 12 03 PM mruser
320. ible when you select a specific device from the APs Devices gt Monitor page First you must enable this function through AMP Setup See Enabling or Disabling PCI Auditing on page 65 The PCI Compliance Report offers additional information Refer to Using the PCI Compliance Report on page 235 This report not only contains Pass or Fail status for each PCI requirement but cites the action required to resolve a Fail status when sufficient information 1s available NOTE When any PCI requirement is enabled on AWMS then AWMS grades the network as pass or fail for the respective PCI Ln requirement Whenever a PCI requirement is not enabled in AWMS then AWMS does not monitor the network s status in relation to that requirement and cannot designate Pass or Fail network status AWMS servers without a RAPIDS license and users without RAPIDS enabled will not see the 11 1 PCI requirements in the PCI Compliance Report Table 35 PCI Requirements and Support in AWMS Requirement Description Monitoring configuration standards for network firewall devices When Enabled PCI Requirement 1 1 establishes firewall and router configuration standards A device fails Requirement 1 1 if there are mismatches between the desired configuration and the configuration on the device When Disabled firewall router and device configurations are not checked for PCI compliance and Pass or Fail status is not reported or monitored Monitoring firewall installation
321. ication These are viewable by selecting Reports gt Generated scrolling to the bottom of the page and selecting Latest RADIUS Authentication Issues Report 5 To make additional RADIUS configurations for device groups use the Groups gt Security page and continue to the next topic Configuring Group Security Settings The Groups gt Security page allows you to set security policies for APs in a device group 1 Select the device group for which to define security settings from the Groups gt List page 2 Go to Groups gt Security Some controls on this page interact with additional AWMS pages Figure 39 illustrates this page and Table 51 explains the fields and default values 80 Configuring and Using Device Groups in AWMS Dell PowerConnect W AirWave 7 2 User Guide Figure 39 Groups gt Security Page Illustration VLANs Enabled Create and edit VLANs and SSIDs on this group s SSIDs page VLAN Tagging and Multiple SSIDs RADIUS Authentication Servers Disabled RADIUS Authentication Server 1 10 2 32 151 1812 1813 RADIUS Authentication Server 2 10 2 32 151 1812 1813 Management VLAN ID 0 4094 Untagged RADIUS Authentication Server 3 Select M Proxim AP 600 AP 700 AP 2000 AP 4000 Avaya AP 3 Untagged Avaya AP 7 AP 4 5 6 AP 8 ProCurve520WL RADIUS Authentication Server 4 Select ProCurve420 Enterasys AP3000 only Authentication Profile Name Proxim Only AMP Defined Server 1 Permit RADIUS As
322. ide Supporting Multiple Radio Types via a Single IOS Template Configuring Single and Dual Radio APs via a Single IOS Template Applying Startup config Files Each of the APs in the Group copies its unique startup config file from AWMS via TFTP or SCP If the Reboot Devices after Configuration Changes option is selected then AWMS instructs the AP to copy the configuration from AWMS to the startup config file of the AP and reboot the AP If the Reboot Devices after Configuration Changes option is not selected then AWMS instructs the AP to copy the configuration to the startup config file and then tell the AP to copy the startup config file to the running config file Use the reboot option when possible Copying the configuration from startup to running merges the two configurations and can cause undesired configuration lines to remain active on the AP For additional information refer to Access Point Notes on page 261 for a full Cisco IOS template Ln NOTE Changes made on the standard AWMS Group configuration pages to include Basic Radio Security VLANs and so forth are not applied to any template based APs WDS Settings in Templates group template supports Cisco WDS settings APs functioning in a WDS environment communicate with the Cisco WLSE via a WDS master IOS APs can function in Master or Slave mode Slave APs report their rogue findings to the WDS Master AP or WLSM which reports the data back to the WLSE On the APs Devices
323. idents with Helpdesk on page 247 Creating a New Incident with Helpdesk on page 249 Creating New Snapshots or Incident Relationships on page 250 Using the Helpdesk Tab with an Existing Remedy Server on page 251 AWMS Helpdesk Overview The Helpdesk module of the AirWave Wireless Management Suite allows front line technical support staff to take full advantage of the data available in the AirWave Wireless Management Suite The AWMS Helpdesk includes the following features and functions with additional features described in this chapter The Helpdesk tab appears to the right of the Home tab Users with an Admin role have the Helpdesk option enabled by default Admin users can make the Helpdesk available to users of any role by selecting the enabled radio button on the role detail page To edit existing roles select the pencil icon next to a role on the AMP Setup gt Roles page The AWMS Helpdesk allows you to document incidents associated with users on the network Installing Remedy allows you to disable Helpdesk and use AWMS as an interface for creating viewing and editing incidents on the existing Remedy server You can also associate snapshots with Remedy incidents and store them on your AWMS The option to use an external Remedy server is disabled by default Navigate to the Helpdesk gt Setup page to enable Remedy See Using the Helpdesk Tab with an Existing Remedy Server on page 251 for more information on how to integra
324. ies_configuration_example09186a008067489f shtml Configuring TACACS and RADIUS Authentication As an optional configuration you can set AWMS to use an external user database to simplify password management for AWMS administrators and users This section contains the following procedures Configuring TACACS Authentication Configuring RADIUS Authentication and Authorization Integrating a RADIUS Accounting Server 52 Configuring AWMS Dell PowerConnect W AirWave 7 2 User Guide Configuring TACACS Authentication For TACACS capability you must configure the IP Hostname of the TACACS server the TCP port and the server shared secret This TACACS configuration is for AWMS users and does not affect APs or users logging into APs 1 Go to the AMP Setup gt Authentication page This page displays current status of TACACS Figure 24 illustrates this page when neither TACACS nor RADIUS authentication is enabled in AWMS Figure 24 AMP Setup gt Authentication Page Illustration TACACS Configuration Enable TACACS Authentication and Authorization ves O No Primary Server Hostname IP Address tacacsare com o Primary Server Part 9 O Primary Server Secret BRBEBEBSSRE Confirm Primary Server Secret me Secondary Server Hostname IP Address Po Secondary Server Port go 0 0 Secondary Server Secret pm Confirm Secondary Server Secret Po RADIUS Configuration Enable RADIUS Authentication and Authorization yes M
325. igation section displays tabs to all main GUI pages within AWMS Failover The top bar is a static navigation bar containing tabs for the main components of AWMS while the lower bar 1s context sensitive and displays the subtabs for the highlighted tab Table 124 describes the contents of this page Table 124 Contents of the Navigation Section of Failover Main Tab Description The Home page provides basic AWMS Failover information including system Overview name hostname IP address current time running time software version and User Info watched AWMS information Watched AMPs License The System page provides information related to AWMS operation and Status administration including overall system status performance monitoring and Triggers backups Alerts Event Log Backups Performance AMP Setup The Setup page provides all information relating to the configuration of AWMS General itself and its connection to your network Network Users TACACS Adding Watched AWMS Stations Navigate to the Home gt Watched AMPs page to begin backing up and monitoring AWMS stations Once an AWMS installation has been added to the Watched AMP list the Failover AMP will download the most recent backup and begin polling The Failover AMP and the Watched AMP must be on the same version or else the watched AWMS will be unable to restore properly If any of the watched AMPs are not on the same version of AWMS you will need to upgrade The Failover
326. igure 96 Figure 96 mport Interfaces for Refresh and Reload lower portion of page Nullo NuO 2 NuO Nullo other L 3 g v50 Vlan50 propVitual Catalyst VLAN Vl50 No On vsti Vlan5i propVitual Catalyst VLAN VI51 No g v59 Vlan59 propVitual Catalyst VLAN vI59 No Oo viso Vlan50 propVitual Catalyst VLAN Vlan50 VI5O No a Vil Vlani propVirtual Catalyst VLAN Vlani Vil No vs9 Vlan59 propVitual Catalyst VLAN Vlan59 VI59 No g Vl5bi Vlanbi propVirttual Catalyst VLAN Vlan51 visi No Vil Vlani propVirtual Catalyst VLAN Vli No 1 8 of 9 Interfaces Page 1w of 1 Select All Unselect All Import Interfaces You can view details for each interface on a wired device from its individual interface page as well For details see Understanding the APs Devices gt Interfaces Page on page 129 You can configure interface settings individually or in groups For individual settings select the pencil icon next the interface name in AP Devices gt Interfaces This takes you to the Interfaces Monitoring and Configuration window which has a slightly different appearance depending on whether you are configuring a physical or virtual interface as shown in Figure 97 and Figure 98 Dell PowerConnect W AirWave 7 2 User Guide Discovering Adding and Managing Devices 139 Figure 97 Physical Interfaces Monitoring and Configuration Sections Auto Detect Interface Capacity 9 Yes O No Interface c
327. imum Retries 1 255 2 Maximum Data Retries 1 255 2 Beacon Period 19 5000 msec fio DTIM Period 1 255 p Ethernet Encapsulation C g802 1H RFC1042 Radio Preamble Long Short Slot Time Auto p Multicast Data Rate 5 5mbps Rogue Scanning yes C No Rogue Scanning Interval 15 10080 min 720 Rogue Scanning Duration 50 1000 msec 350 Rogue Scan Type C Dedicated Periodic 802 11b 802 11g 54 Mbps p Operational Mode Max Station Data Rate 802 11a Multicast Data Rate 6 Mbps x 802 11b g Multicast Data Rate 5 5mbps Rogue Scanning yes C No Rogue Scanning Interval 30 10080 min 720 Rogue Scanning Duration 200 1000 msec 350 Dell PowerConnect W AirWave 7 2 User Guide Use Aironet Extensions ves C No Lost Ethernet Action Repeater Mode p Lost Ethernet Timeout 1 10000 sec 2 Upgrade Radio Firmware When AP Firmware Is d M Upgraded Require use of radio firmware x xx Load Balancing C Yes No Interference Robustness C Yes No Distance Between APs Large v 802 119 Operational Mode 802 11b 802 119 802 11abg Operational Mode 802 11b 802 119 802 11b Transmit Rate Auto Fallback p 802 11g Transmit Rate Auto Fallback v 802 11a Transmit Rate Auto Fallback M Rogue Scanning yes C No Rogue Scanning Interval 15 1440 min hs 4 9GHz Public Safety Channel Bandwidth aa sl 802 11a 4 9GHz Public Safety Operational Mode 802113 Yes C No 240
328. includes software developed by the Apache Software Foundation www apache org Google Earth and the Google Earth icon are the property of Google Packages Net IP Copynght c 1999 2002 RIPE NCC All Rights Reserved Permission to use copy modify and distribute this software and its documentation for any purpose and without fee is hereby granted provided that the above copyright notice appear in all copies and that both that copyright notice and this permission notice appear in supporting documentation and that the name of the author not be used in advertising or publicity pertaining to distribution of the software without specific written prior permission THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS IN NO EVENT SHALL AUTHOR BE LIABLE FOR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE DATA OR PROFTTS WHETHER IN AN ACTION OF CONTRACT NEGLIGENCE OR OTHER TORTIOUS ACTION ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFIWARE Net SNMP Part 1 CMU UCD copyright notice BSD like Copyright 1989 1991 1992 by Carnegie Mellon University Derivative Work 1996 1998 2000 Copyright 1996 1998 2000 The Regents of the University of California All Rights Reserved Permission to use copy modify and distribute this software and its documentation for any purpose
329. ing Daily Administration in AWMS 187 2 The second way to display and process alerts is to use the Alerts and Severe Alerts counters in the Status bar at the top of all AWMS pages illustrated in Figure 128 The Severe Alert Threshold can be configured on the Home gt User Info page Figure 128 Alerts in the AWMS Status Bar Si New Devices 29 4 Up 349 F Down 176 mismatched 132 Roque 484 Users 213 MA Alerts 217 B Severe Alerts 217 Select the Alerts or the Severe Alerts counter or navigate to the System gt Alerts page Figure 129 illustrates this page Figure 129 System gt Alerts Page Illustration Trigger Type Trigger Summary Triggering Agent Time Severity O User Bandwidth gt 100 kbps for 30 seconds 00 18 DE 09 B9 09 2123 2007 12 54 PM Warning a Device Up hp 530 1 2123 2007 12 32 PM Normal Device Down hp 530 1 2123 2007 12 27 PM Critical Mew Rogue AP Detected gt 5 for rogue score Unknown Lo 72 8F 26 2123 2007 11 51 AM Minor O Device Up roamabout 4102 3 2 12 2007 10 24 AM Normal Device Down roamabout 4102 3 23 12 2007 10 19 AM Critical For each new alert the System gt Alerts page displays the items listed in Table 111 Table 111 System Alerts Fields and Default Settings Field Description Trigger Type Displays and sorts triggers by the type of trigger Trigger Trigger Summary Provides an additional Provides an additional summary information related to the trigger
330. ing Period 10 minutes 5 Controller CLI Communication WS5100 RFS4000 RFSS000 and RFS7000 controllers 9 Telnet S5H Thin AP Discovery Polling Pericd 15 minutes onbe Device to Device Link Polling Period 5 minutes Web Config Interface ves No 802 11 Counters Polling Period 15 minutes Aruba Dell PowerConnect W iier AP and Device Location Data Polling SNMP Version Ic mni riod 7 Offloed WMS Database Wes No CDP Neighbor Data Polling Period 30 minutes Dell PowerConnect W GUI Config 9 ves No Routers and Switches Read ARP Table 4 hours E 3Com Enterasys Nortel Trapeze SNMP Version 2c Read CDP Table for Device Discovery 4 hours al E Read Bridge Forwarding Table 4 hours l Universal Devices Routers and Switches Interface Up Down Polling Period 10 minutes E SNMP Version 2c fig face Bandwidth Polling Period 15 minutes nn ET Save Save and Apply Rewest Interface Error Counter Polling Period 30 minutes al Poll 802 3 error counters Wes S No Pall Cisco interface error counters Wes S No Notes Notes Group Display Options Show device settings for Only devices on this AMP E cold Fievice I 3Com Alcatel Lucent Aruba Cisco lm Switch Cisco WLC HP ProCurve MSM HP ProCurve Switch Nomadix Symbol Symbol Wireless Switch Spanning Tree Protocol Spanning Tree Protocol Proxim onhy 9 ves No Bridge Priority 0 65535 32768 Bridge Maximum Age 6 40 20 Bridge Hello Time 1 10 2 Bridge Forward Dela
331. ing to communicate to the device after the device has been managed If the template is updating the enable password on the AP enter the new enable password AWMS should use here AWMS updates the credentials it is using to communicate to the device after the device has been managed enable Password SNMPv3 Username If the template is updating the SNMP v3 Username password on the AP enter the new SNMP Username password here AWMS updates the credentials it is using to communicate to the device after the device has been managed If the template is updating the SNMP v3 Auth password on the AP enter the new SNMP Username password here AWMS updates the credentials it is using to communicate to the device after the device has been managed Auth Password If the template is updating the SNMP v3 Privacy password on the AP enter the new SNMP Username password here AWMS updates the credentials it is using to communicate to the device after the device has been managed Privacy Password SNMPv3 Auth Protocol SNMPv3 Privacy Protocol Specifies the SNMPv3 Auth protocol either MD5 or SHA 1 Specifies the SNMPv3 Privacy protocol either DES or AES Configuring General Template Files and Variables This section describes the most general aspects of configuring AP device templates and the most common variables Configuring General Templates Using Template Syntax Using Directives to Eliminate Reporting of Configuration Mism
332. ings Viewing and Downloading Backups To view current AWMS backup files go to the System gt Backups page Figure 153 illustrates this page Figure 153 System gt Backups Page Illustration Backups are run nightly nightly data001 tar gz Backup of 1071445503 bytes made 15 hrs 15 mins ago nightly data002 tar gz Backup of 1045819243 bytes made 1 day 15 hrs 15 mins ago nightly data003 tar gz Backup of 987593884 bytes made 2 days 15 hrs 15 mins ago nightly data004 tar gz Backup of 1054778324 bytes made 3 days 15 hrs 15 mins ago To download a backup file select the filename URL and the File Download popup page appears 214 Performing Daily Administration in AWMS Dell PowerConnect W AirWave 7 2 User Guide Regularly save the data backup file to another machine or media This process can be automated easily with a nightly script NOTE Nightly maintenance and amp backup scripts back up the full AMP data and save the file as nightly data00 1 4 tar gz In Vi previous AWMS versions the scripts created both config backup and data backup files In order to restore the AMP data it is only necessary to have most recent data backup file and AWMS no longer uses or supports the config backup file effective as of AWMS 6 3 2 and later AWMS versions Running Backup on Demand To create an immediate backup l Log into the AWMS system as root 2 Run the backup script by typing amp backup This creates a backup of the system located in alte
333. ins RAP2W G 51 75 Mbps 374 7 kbps E Avg bps for Enet of tharglin2 ap65 44 53 Mbps 322 9 kbps Avg bps for EnetO of mflynn ap65 47 74 Mbps 345 7 kbps Avg bps for EnetO of kmorris RAP 2W6b 96 81 Mbps a47 4 kbps Avg bps for EnetO of hmclarnon rapzwg 39 91 Mbps 299 4 kbps Avg bps for Radio 2 on AL37 1 844 Mbps 29 81 kbps E Avg bps for Radio 2 on ALI 887 7 kbps 14 82 kbps Avg bps for Radio 2 on AL27 4 342 Mbps 316 4 kbps E Avg bps for Radio 2 on 1820 2 954 Mbps 278 7 kbps Avg bps for Radio 2 on 130C 4 303 Mbps 174 6 kbps E vg bps for Radio 2 on 920 3 458 Mbps 173 8 kbps E Avg bps for Radio on 12C 6 52 Mbps 378 3 kbps E Avg bps for Radio on 1750 1 664 Mbps 2412 1 kbps L Avg bps for Radio 1 on apl124 c3 2b 32 dev airwave com 965 1 kbps 184 8 kbps Avg bps for Radio 1 on mtsai rapzwg 4 112 Mbps 79 98 kbps L Avg bps for Radio 1 on kperedia apl25 584 kbps 35 28 kbps L Avg bps for Radio 1 on dpatil ap65 2 091 Mbps 31 55 kbps L Avg bps for Radio 1 on jhrim 65 4 742 Mbps 58 88 kbps L Avg bps for Radio 1 on jbarry ap65 2 875 Mbps 171 3 kbps O Avg bps for Radio 1 on gcheng rapzwg 1 598 Mbps 78 18 kbps L Avg bps for Radio 1 on mbathina rap2eg 1 957 Mbps 83 82 kbps L Avg bps for Radio 1 on thenu raps5 8807 5 kbps 20 12 kbps E Avg bps for Radio 2 on Fish bowl 2 282 Mbps 49 81 kbps E Avg bps for Radio 2 on 1249 5 082 Mbps 498 9 kbps E Avg bps for Radio 2 on 1242 H 5 902 Mbps 297 9 kbps E Avg bps for Radio on 1372 3 787 Mbps 442 4 kbps E Avg bp
334. installation key back to the configuration memory bank as follows Press C to select Copy file Press 2 to select Config Press the selection letter for AP Installation Key Perform the following steps to run the AP firmware Press R to select Run Select the letter for the firmware file that is displayed The following message appears while the AP starts the firmware Inflating firmware file name gt When the Express Setup screen appears begin reconfiguring the AP using the terminal emulator or an Internet browser 262 Access Point Notes Dell PowerConnect W AirWave 7 2 User Guide Resetting the AP for Boot Block Versions 11 07 and Higher Follow these steps to reset your AP if the boot block version on your AP is greater than 11 07 l If you have not done so already connect to the AP see above select OK and press Enter 2 When the Summary Status screen appears after you have connected to the AP reboot the AP by unplugging and then re plugging the power connector When the AP reboots and the Summary Status screen reappears type resetall and press Enter 4 Type yes and press Enter to confirm the command Ln NOTE The resetall command is valid for only two minutes after the AP reboots If you do not enter and confirm the resetall command during that two minutes reboot the AP again 5 After the AP reboots and the Express Setup screen appears reconfigure the AP by using the terminal emulator or an Internet browser
335. intuitive user interface enabling network administrators and helpdesk staff to support and control even the largest wireless networks in the world This User Guide provides instructions for the installation configuration and operation of the AirWave Wireless Management Suite This chapter includes the following topics AWMS A Unified Wireless Network Command Center on page 13 Integrating AWMS into the Network and Organizational Hierarchy on page 15 If you have any questions or comments please contact Dell support at support dell com AWMS A Unified Wireless Network Command Center AWMS is the only network management software that offers you a single intelligent console from which to monitor analyze and configure wireless networks in automatic fashion Whether your wireless network is simple or a large complex multi vendor installation AWMS manages it all The AirWave Wireless Management Suite supports hardware from leading wireless vendors including Dell PowerConnect W Avaya Cisco Aironet and WLC Enterasys Juniper Networks LANCOM Systems Meru Nomadix Nortel ProCurve by HP Proxim Symbol Trapeze Tropos and many others The components of the AirWave Wireless Management Suite are listed here and detailed below The AirWave Management Platform AMP wireless network management software including the ArubaOS Configuration feature that supports global and group configuration of Dell PowerConnect W devices
336. ion 1 5 or higher Completion of the AMP Setup gt Radius Accounting page configurations as described in Integrating a RADIUS Accounting Server on page 55 ReefEdge Configuration Perform these steps to configure a ReefEdge security scheme Log in into the ReefEdge ConnectServer via HTTP with the proper user credentials Navigate to the Connect System gt Accounting page Select Enable RADIUS Accounting Enter the Primary Server IP Address or DNS entry for AWMS server Enter Primary Server Port Number 1815 Enter the Shared Secret matching the AWMS shared secret To verify and view the log files on the Connect Server proceed to Monitor gt System Log po cL id SEP ou Set obe I To verify and view the log files on AWMS proceed to System gt Event Log HP ProCurve 700wl Series Secure Access Controllers Integration A ProCurve security scheme for AWMS has the following prerequisites HP 700 version 4 1 1 33 or higher AWMSS version 3 0 4 or higher Completion of the AMP Setup gt Radius Accounting page configurations as described in Integrating a RADIUS Accounting Server on page 55 Example Network Configuration In this example the APs are connected to the Access Controller The Access Controller routes wireless user traffic to the Employee Network while bridging AP management traffic Fach AP 1s presumed to have a static IP address Perform these steps for HP ProCurve 700wl Series Configuration allowing AWMS to mana
337. ion Options are set to Create and user Specified as User Dell PowerConnect W AirWave 7 2 User Guide Discovering Adding and Managing Devices 113 Table 72 Device Communication and Location Fields and Default Values Continued Default Description Privacy Taken from Device Setup gt SNMPv3 privacy password Password Communication Confirm SNMPv3 Auth Taken from Device Setup Drop down menu that allows you to enable the SNMPv3 authentication Protocol Communication protocol to the device being added SNMPv3 Privacy Taken from Device Setup gt Drop down menu that allows you to enable SNMPv3 privacy protocol to Protocol Communication the device being added Telnet SSH Taken from Device Setup Telnet username and password for existing Cisco IOS APs AWMS uses Username amp Communication the Telnet username password combination to manage the AP and to Password enable SNMP if desired Confirm NOTE New out of the box Cisco IOS based APs typically have SNMP disabled with a default telnet username of Cisco and default password of Cisco This value is required for management of any existing Cisco IOS based APs enable Taken from Device Setup gt Password that allows AWMS to enter enable mode on the device Password Communication Confirm HTTP Username Taken from Device Setup gt HTTP password used to manage the device initially and to enable SNMP if amp Password Communication desired Auth Password Taken
338. is Dell AP Group are managed by the same controller and you want to temporarily override one or more profile settings in your spectrum mode APs you can set up a controller override To disable spectrum mode in this group change the referenced radio profile back to default Configuring an Individual AP to run in Spectrum Mode If you want to temporarily set an individual radio in an AP to run in Spectrum mode without creating or changing Dell AP Groups or radio profiles perform these steps to set up a Spectrum Override on a supported Dell PowerConnect W AP 1 Go to the APs Devices gt Manage page for a Spectrum supported Dell PowerConnect W AP 2 After checking the Audit page set the AP to Manage Read Write mode Dell PowerConnect W AirWave 7 2 User Guide Discovering Adding and Managing Devices 145 3 Select Yes on the Spectrum Override field for one or both radios depending on the band and channels you want it to analyze 4 Select the band that should run in spectrum If you selected the GHz band in the 802 1 lan Radio section choose the lower middle or upper range of channels that you want to be analyzed by this radio 5 Select Save and Apply and confirm your edit This overrides the current Mode setting for that AP ap mode or am mode After making this change you can view the new Radio Role field that will appear in the Interfaces section of the APs Devices gt Monitor page as illustrated in Figure 105 Figure
339. is page for more details High AP radio bandwidth This figure derives from how groups of users share radio bandwidth on a shared AP You may not need to add an additional AP to resolve this issue but you would need to determine why neighboring APs are not functioning properly 802 11 radio parameters These two sections indicate the likelihood that a user s issues are derived from mismatched 802 11 deployment That is an 802 11ab or g user who is connected through an 802 11n radio might not benefit from full 802 11n functionality These two fields indicate the likelihood of such an issue impacting a user s experience on the network as well as a reduction of available bandwidth for other users High FCS error rates Frame Check Sequence FCS errors are checksum errors in the 802 11 protocol and may indicate interference and congestion One response is to assign a different channel to the AP manually or by using Adaptive Radio Management ARM 196 Performing Daily Administration in AWMS Dell PowerConnect W AirWave 7 2 User Guide Table 115 Users gt Diagnostics Page Sections Continued Section Description Diagnostics This section summarizes bandwidth user count and signal quality parameters for specific windows of time Summary This section is useful when diagnosis or troubleshooting follows issues that had been observed a few or several hours prior Figure 138 illustrates this section NOTE Large negative changes in value
340. isco Clean Access within AWMS Integration Perfigo Appendix F HP Insight Install Provides instructions for installing HP Insight on AWMS servers Instructions for AWMS Servers Appendix G Installing AWMS on Provides instructions for an alternative installation option on VMware ESX for AWMS VMware ESX 3i v 3 5 Appendix H Third Party Copyright Presents multiple copyright statements from multiple equipment vendors that Information interoperate with AWMS Index Provides extensive citation of and links to document topics with emphasis on the AWMS GUI and tasks relating to AWMS installation and operation Notice Icons This document uses the following notice icons to emphasize advisories for certain actions configurations or concepts K NOTE Indicates helpful suggestions pertinent information and important things to remember AN CAUTION Indicates a risk of damage to your hardware or loss of data AN WARNING Indicates a risk of personal injury or death Contacting Support Table 2 Website contact Main Website dell com Support Website support dell com Documentation Website support dell com manuals 12 About This Guide Dell PowerConnect W AirWave 7 2 User Guide Chapter 1 Introduction Thank you for choosing Dell PowerConnect W Air Wave Wireless Management Suite or AWMS AWMS makes it easy and efficient to manage your wireless network by combining industry leading functionality with an
341. ith the most recently run reports for each definition and role created Run and Delete buttons allow you to select a report from the definitions table to run or delete Once you define a report from the Definition page it appears on the Generated page The Reports gt Definition page is shown in Figure 154 and Table 126 describes the fields available when you select a specific report definition Table 126 Reports gt Definition Page Fields and Descriptions Description Report Definition Displays a field for entering report title and dropdown menu shown in Figure 155 displaying all possible report types Report Restrictions Displays dynamic fields that include spaces for selecting attributes and entering data relevant to your selected reporttype scope such as groups folders SSID Device Search filter report start and end times Scheduling Options Reveals options for one time or regularly scheduled reporting by selecting Yes Options include report frequency start time and current system time Report Visibility Allows you to determine a report s visibility according to user role Email Options Reveals email address preferences for sending reports by selecting Yes Add and Run Allows you to create a report definition and run that report right then Allows you to run any report that has been defined on the spot without saving settings or creating a new report definition saves report definition you just created Figure 154 Repo
342. iw of1 Choose Columns CSV Export Name Up Down Status Polling Period Total Devices Is Global Group a Global Group Down Mismatched Ignored Users BW Duplicate SSID Changes ws5100 60 seconds 5 No gauss three 4 0 Qi Unapplied Changes 8 infrastructure 60 seconds 31 No gauss two 9 16 0 0 0 Guest RSN20fficeWLAN Ls M airespace 60 seconds 5 No gauss one EH 2 0 0 0 4000 8021x 4000 guest more GG test 5 minutes 0 Yes 0 0 0 0 0 Guest RSN20ffice WLAN To set a group as a Global Group go to the Groups gt Basic configuration page for an existing or a newly created group Select Yes for the Is Global Group field under the Global Group section When the change is saved and applied the group will have a checkbox next to fields Figure 63 illustrates this configuration page Figure 63 Groups Basic Page for a Global Group partial view Group gauss one Selecting a checkbox allows subscriber groups to override the corresponding setting Basic Mame gauss one M Missed SNMP Poll Threshold 1 100 fi Regulatory Domain United States m Irnezone fame system time bl ar Echeduling group configuration changes M blow One to One MAT vas C No kudit Configuration on Devices vas C No When a Global Group configuration is pushed to Subscriber Groups all settings are static except for settings with the checkbox selected for fields with checkboxes selected the value or setting can be changed on the corresponding
343. kbps e Number of users by time period average bandwidth in and out Figure 166 illustrates the Reports gt Detail page for the Daily Network Usage Figure 166 Network Usage Report Illustration Daily Network Usage Report for All Groups Folders and SSIDs 1E XML XHTML export CSV export 1 13 2011 12 00 AM to 1 14 2011 12 00 AM sim Email this report Generated on 1 14 2011 12 46 AM Print report 20 M 18 M Fri OG aa Thu GG aa Thu 06 00 Thu 12 06 Thu 18 00 Maximum Average E Bits Per Second In 5 584 Mbps 781 1 kbps E Max Bits Per Second In 5 584 Mbps 781 1 kbps EH Bits Per Second Out 23 65 Mbps 2 83 Mbps E Max Bits Per Second Out 23 65 Mbps 2 83 Mbps 200 150 100 50 Thu 00 00 Thu 06 00 Thu 12 80 Thu 18 00 J Fri 00 00 Maximum Average E Avg Users 153 58 O Max Users 153 58 Using the New Rogue Devices Report The New Rogue Devices Report summarizes rogue device information including the following categories of information e Rogue devices by RAPIDS classification described in Using RAPIDS and Rogue Classification on page 165 232 Creating Running and Emailing Reports Dell PowerConnect W AirWave 7 2 User Guide e Top rogue devices by number of discovering APs e Top rogue devices by signal strength e Graphical summary of rogue devices by LAN MAC address vendor e Graphical summary of rogue devices by radio MAC address vendor e Text based table
344. ks problematic radios changes errors and interfering Report devices Using the RF Health Yes Identifies discrepancies between access point containment Report status specified in AMP compared to containment status identified by the controller at report run time Using the User Session Yes Yes summarizes user data by radio mode SSID and VLAN as well Report as lists all sessions Emailing and Exporting Reports This section describes three ways in which distribute reports from AWMS Emailing Reports in General Email Applications Emailing Reports to Smarthost Exporting Reports to XML or CSV Emailing Reports in General Email Applications Perform these steps to set up email distribution of reports in AWMS All reports contain a link to export the report to an XML file and a text box where you may specify email addresses separated by commas to which reports are sent Select Email This Report to email the report to the address specified in the text box above the button Additional information about email based report generation is described in Defining Reports on page 242 and in Emailing Reports to Smarthost on page 245 Emailing Reports to Smarthost AW MS uses Postfix to deliver alerts and reports via email because it provides a high level of security and locally queues email until delivery If AWMS sits behind a firewall which prevents it from sending email directly to the specified recipient use the following proced
345. l only reported by Cisco VxWorks using SNMP traps RADIUS accounting RADIUS accounting servers integrated with AWMS provide the RADIUS Accounting Auth type Authenticated a general category supporting additional authentication types AWMS considers all other types as not authenticated The information AWMS displays in Auth Type and Cipher columns depends on what information the server receives from the devices it is monitoring The client devices may all be similar but if the APs to which they are associated are of different models or if security is set up differently between them then different Auth Type or Cipher values may be reported to AWMS If all APs are the same model and all are set up the same way then another reason for differing Auth Types might be the use of multiple VLANs or SSIDs One client device might authenticate on one SSID using one Auth Type and another client device might authenticate on a second SSID using a different Auth Type Cipher Displays the encryption or decryption cipher supporting the user when this information is available The client devices may all be similar but if the APs to which they are associated are of different models or if security is set up differently between them then different Auth Type or Cipher values may be reported to the AWMS server Shows when the user authenticated Signal Quality Displays the average signal quality the user experienced Displays the average bandwidth consumed by t
346. l Notification Options NMS Trap Destinations Device Resources Percent CPU Utilization gt 85 for 15 Email Fj V Device Up Device Type is Access Point Inactive Tag for gt 2 hrs 0 mins Device IDS Events Count gt 100 for 30 minutes New User New User Association NMS 10 51 1 7 Device Down All device types NMS Device RADIUS Authentication Issues Count gt 20 for 15 secs NMS 10 51 1 7 802 11 Frame Counters WEP Undecryptable Rate gt 100 frames sec for 1 hour Rogue Device Classified Classification Rogue NMS 10 51 1 7 Radio Down NMS 10 51 1 7 Creating New Triggers Perform the following steps to create and configure one or more new triggers These steps define settings that are required for any type of trigger Dell PowerConnect W AirWave 7 2 User Guide Performing Daily Administration in AWMS 181 l To create a new trigger select the Add New Trigger button from the System gt Triggers page The page that appears Is illustrated in Figure 125 Figure 125 Add New Trigger Page Illustration Trigger Type Device Dawn Severity Normal T Send Alerts for Thin APs when Controller is Down f yes no Conditions Matching conditions amp ap C any Available Conditions Device Type Add Mew Trigger Condition Option Condition Value Device Tvpe T is T Access Point T y Trigger Restrictions Folder Top Include Subfolders ve
347. l rights reserved Redistribution and use in source and binary forms with or without modification are permitted provided that the following conditions are met l Redistributions of source code must retain the above copyright notice this list of conditions and the following disclaimer 2 Redistributions in binary form must reproduce the above copyright notice this list of conditions and the following disclaimer in the documentation and or other materials provided with the distribution 3 All advertising materials mentioning features or use of this software must display the following acknowledgment This product includes software developed by the Apache Group for use in the Apache HTTP server project www apache org 4 The names Apache Server and Apache Group must not be used to endorse or promote products derived from this software without prior written permission For written permission please contact apache apache org 5 Products derived from this software may not be called Apache nor may Apache appear in their names without prior written permission of the Apache Group 6 Redistributions of any form whatsoever must retain the following acknowledgment This product includes software developed by the Apache Group for use in the Apache HTTP server project www apache org THIS SOFTWARE IS PROVIDED BY THE APACHE GROUP AS IS AND ANY EXPRESSED OR IMPLIED WARRANTIES INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRA
348. ld to describe device information 3 Review and provide the following information in the Settings area Devices with dual radios display radio specific settings in the Slot A and Slot B area If a device 1s dual radio capable but only has one device installed AWMS manages that device as if it were a single slot device NOTE Devices from different vendors have different RF settings and capabilities The fields in the Settings section of the APs K Devices gt Manage page are context sensitive and only present the information relevant for the particular device vendor and model Table 2 describes field settings default values and information for the Settings section of this page Table 82 APs Devices gt Manage gt Settings Fields and Default Values Setting Default Device Type Description Name None fl User configurable name for the device max 20 characters Domain Name IOS Field populated upon initial device discovery or upon refreshing settings Enable this option from AMP Setup gt Network page to display this field on the APs Devices gt Manage page with fully qualified domain names for IOS APs This field is used in conjunction with Domain variable in IOS templates Location Read fromthe All The SNMP location set on the device device Latitude All Text field for entering the latitude of the device The latitude is used with the Google Earth integration Longitude All Text field for entering the longitude of t
349. le 100 Properties Drop Down Menu Continued Description IP Address Rogue matches a specified IP address or subnet Enter IP address or subnet information as explained by the fields IP subnet 4 Matches Does Not Match IP subnet list Enter a list of IP addresses or subnets one per line Valid formats include 10 1 2 3 10 0 0 0 24 10 51 1 0 10 51 3 255 10 51 1 0 19 51 5255 10 51 4 0 255 255 255 0 remove condition OUI Score Rogue matches manufacturer OUI criteria You can specify minimum and maximum OUI score settings from two drop down lists Select remove to remove one or both criteria as desired Operating System Rogue matches OS criteria Specify matching or non matching OS criteria as prompted Wireless Wireline Properties Manufacturer Rogue matches the manufacturer information of the rogue device Specify matching or non matching manufacturer criteria MAC Address Rogue matches the MAC address Specify matching or non matching address criteria or use a wildcard for partial matches Dell Controller Properties Controller Classification Rogue matches the specified controller classification Confidence Rogue falls within a specified minimum and maximum confidence level ranging from 1 to 100 After creating a new rule select Add to return to the RAPIDS gt Rules page Select Save and Apply to have the new rule take effect Deleting or Editing a Rule To delete a rule from the RAPIDS
350. lect All Unselect All Use embedded mail server Yes C No Home Overview Preferences Send Test Email Configure Channel Busy Threshold C Yes No Process user roaming traps from Cisco WLC Yes C No Enable AMON Data Collection Yes C No Display su fully qualfied domain names Cisco IOS Aruba Dell C Yes No Performance owerConnect W only Law E Monitoring Processes 1 2 2 Show vendor specific device settings for Only devices on this AMP E Maximum number of configuration processes 1 10 5 Selected Device Types 3Com Alcatel Lucent Aruba Cisco Aironet 4800 Cisco IOS AP Cisco Maximum number of audit processes 1 10 3 Switch Cisco WLC Dell HP ProCurve MSM HP ProCurve Switch Nomadix SNMP Fetcher Count 2 6 2 Nortel Symbol Symbol Wireless Switch Verbose logging of SNMP configuration C Yes No Look up wireless user hostnames Yes No SNMP rate limiting for monitored devices C Yes No DNS Hostname Lifetime 1 hour vi i RAPIDS Processing Priority Device Troubleshooting Hint Displayed along with the When AWMS is processing data at or near its maximum Down reason if a device s upstream device is up capacity reducing the priority of RAPIDS can ensure that processing of other data e g client connections and ow DOWD ti bandwidth is not adversely impacted Guest User Configuration Enabled for devices in Man The default priority is Low You can also tune your system performance b
351. lect the APs to optimize and AWMS minimizes the channel interference while giving channel priority to the most heavily used APs Table 0 describes these action and controls Table 70 Modify Multiple Devices Section Fields and Default Values Action Description AMP Group Folder Move the selected devices to a new group or folder If the AP is in managed mode when it is moved to a new group it will be reconfigured Dell PowerConnect W AP Moves the selected APs to a new Dell PowerConnect W AP Group If the AP is in managed mode Group when it is moved to a new group it will be reconfigured Desired Radio Status Enables or disables the radios on the selected device Does not apply Cisco IOS APs Bulk configuration for per thin AP settings previously configured on the Group LWAPP AP tab can be performed from Modify Devices on the APs Devices List page Make changes to LWAPP AP groups including the option that was under Modify Devices Polls selected devices for current user count and bandwidth data overrides default poll settings for the group Polling numerous devices may create a temporary performance load on your AWMS server Audit selected devices Fetches the current configuration from the device and compares it to the desired AWMS configuration The audit action updates the Configuration Status Run report on selected Takes you to the Reports gt Definitions page where you can define or run a custom report for devices selected devices
352. lert is issued for a Authentication Issues user Select Add New Trigger Condition to specify the count characteristics that trigger an alert The Option Condition and Value fields allow you to define the numeric value of user issues Device RADIUS This trigger type sets the threshold for the maximum number of failures before an alert is issued for a Authentication Issues device The Option Condition and Value fields allow you to define the numeric value of user issues Total RADIUS This trigger sets the threshold for the maximum number of failures before an alert is issued for both Authentication Issues users and devices b Repeat this procedure for as many triggers and conditions as desired Refer to the start of Creating New Triggers on page 181 to create a new trigger Setting Triggers for IDS Events Perform the following steps to configure Intrusion Detection System IDS related triggers a Choose the Device IDS Events trigger type from the drop down Type menu See Figure 126 Table 109 describes condition settings for this trigger type Table 109 Device IDS Events Authentication Trigger Types and Condition Settings IDS Trigger ee Options Description Device IDS Events This trigger type is based on the number of IDS events has exceeded the threshold specified as Count in the Condition within the period of time specified in seconds in Duration Alerts can also be generated for traps based on name category or severity S
353. ling Period 30 minutes sk 15 minutes Rogue AP and Device Location Data Polling Period 5 minutes m 10 minutes Thin AP Discovery Polling Period 2 minutes sk 5 minutes Up Down Status Polling Period 60 seconds 90 seconds Lise MAC ACL Ma E Use manual setting on each device Apply Changes Now Cancel Scheduling Options Specify numeric dates with optional 24 hour times like 7 4 2003 or 2003 07 04 For July 4th 2003 or 7 4 2003 13 00 for July 4th 2003 at 1 00 PM or specify relative times like tomorrow at noon or next tuesday at 4am Other input formats may be accepted Current Local Time January 17 2011 3 39 pm PST Desired Start Date Time Schedule Select other groups to change Group Current Local Time 1111 January 17 2011 3 39 pm PST wss100 January 17 2011 3 39 pm PST Select All Unselect All Preview 5 AWMS displays a Configuration Change screen confirming the changes that will be applied to the group s settings 6 There are several action possibilities from within this confirmation configuration page Apply Changes Now Applies the changes immediately to APs within the group If you wish to edit multiple groups you must use the Preview button Ln NOTE You cannot apply Dell PowerConnect W Config changes to other groups If the only changes on the configuration page are to Dell PowerConnect W devices the list of groups and the preview button will not appear Schedule Schedules the changes to
354. lity Vendor Connection Modes VLANs SSIDs 00 01 3E 11 84 0D visitorlogon 30 mins 0 00 0 15 Ascom Tateco AB 802 11n 2 4GHz 104 guest 00 05 4E 4D EC 0F graman perforce 5 days 4 hrs 37 mins 19 56 0 35 7 52 Philips 802 11a 103 ethersphere 00 05 5D 79 CD AF visitor logon 1 hr 0 mins 0 00 0 31 33 D Link 802 11a 104 guest 00 09 5B C8 77 23 visitor logon 30 mins 0 00 0 40 Netgear 802 11a 104 guest 00 12 F0 DE 17 21 visitor 50 mins 5 40 14 32 35 Intel 802 119 104 guest 00 13 02 53 DF 6E marora employee 6 hrs 31 mins 11 45 3 9 37 79 Intel 802 11g 66 ethersphere 00 14 A4 8B 33 A45 visitor logon 40 mins 0 02 0 07 44 24 Hon Hai 802 11g 104 guest 00 15 00 60 54 04 ARUBANETWORKS gokulr perforce 3 hrs 10 mins 4 26 2 97 16 31 Intel 802 11n 5GHz 103 ethersphere 00 15 00 60 57 04 ARUBANETWORKS vkannan employee 1 day 6 hrs 44 mins 11 69 0 85 20 53 Intel 802 11n 5GHz 802 11n 2 4GHz 105 66 ethersphere 00 15 00 60 57 C8 logon 14 hrs 2 mins 4 18 0 66 28 74 Intel 802 11n 5GHz 105 ethersphere 1 10 w of 348 Session Data by User Page 1 of 35 gt gt Defining Reports You can create reports in AWMS for any time period you wish to be run when you wish and distributed to recipients that you define Perform these steps to create and run custom reports Reports created with the Reports gt Definition page appear on this and on the Reports gt Generated page once defined l To create or edit a report browse to the Reports gt Definition page an
355. ll be configuration Unknown until they have finished verification The Up status is not contingent on verification The same section also appears on the Groups gt Monitor page and is hyperlinked from a controller s monitoring interface 3 Goto the Alert Summary section of APs Devices gt List which cites the number of events that have occurred in the last two hours the last 24 hours and total There are four categories of alerts as listed below AMP Alerts a IDS Events Incidents m RADIUS Authentication Issues K NOTE The Alerts Summary table is also a feature of the Home gt Overview page and has the same links in that location For more information on the Alert Summary table refer to Viewing Alerts on page 187 Dell PowerConnect W AirWave 7 2 User Guide Discovering Adding and Managing Devices 117 Understanding the APs Devices gt Monitor Pages for All Device Types You can quickly go to any device s monitoring page once you go to its specific folder or group on the APs Devices gt List page by selecting its hyperlinked name in the Device column All Monitor pages include a section at the top displaying information such as monitoring configuration status serial number total users firmware version and so on as shown in Figure 76 Figure 76 Monitoring Page Top Level Data Common to All Device Types Home Helpdesk Groups Beige Users Reports System Device Setup AMP Setup RAPIDS VisualRF Manage Audi
356. lling intervals to force an immediate update of all data except for rogue information Shows attempt status and last polling times Status Displays ability of AWMS to connect to the AP Up no issue means everything is working as it should Down SNMP get failed means AWMS can get to the device but not speak with it using SNMP Check the SNMP credentials AWMS is using the view secrets link on the APs Devices Manage page and verify SNMP is enabled on the AP Many APs ship with SNMP disabled Down ICMP ping failed after SNMP get failed means AWMS is unable to connect to the AP using SNMP and is unable to ping the AP This usually means AWMS is blocked from connecting to the AP or the AP needs to be rebooted or reset Good means all the settings on the AP agree with the settings AWMS wants them to have Mismatched means there is a configuration mismatch between what is on the AP and what AWMS wants to push to the AP The Mismatched link directs you to this specific APs Devices Audit page where each mismatch is highlighted Unknown means the device configuration has not yet been fetched possible issue with credentials Verifying means it s fetching configuration to be compared to desired settings Displays the firmware version running on the AP Dell PowerConnect W AirWave 7 2 User Guide Configuration Firmware Discovering Adding and Managing Devices 119 Table 73 APs Devices gt Monitor gt Device Info Fields and Defau
357. location on VisualRF map Wired network detection Discovers rogue APs located beyond the range of authorized APs sensors Queries routers and switches Ranks devices according to the likelihood they are rogues Dell PowerConnect W AirWave 7 2 User Guide Multiple tests to eliminate false positive results Provides rogue discovery that identifies the switch and port to which a rogue device is connected Master Console and Failover The AWMS Master Console and Failover tools enable network wide information in easy to understand presentation to entail operational information and high availability for failover scenarios The benefits of these tools include the following Provides network wide visibility even when the WLAN grows to 50 000 devices Executive Portal allows executives to view high level usage and performance data Aggregated alerts Failover Many to one failover One to one failover The Master Console and Failover servers can be configured with a Device Down trigger that generates an alert if communication is lost In addition to generating an alert the Master Console or Failover server can also send email or NMS notifications about the event See Supporting AWMS Servers with the Master Console on page 211 Integrating AWMS into the Network and Organizational Hierarchy AWMS generally resides in the NOC and communicates with various components of your WLAN infrastructure In basic deployments AWMS communicates
358. lons Email Recipients user example com Sender Address me networks com Troubleshooting a Newly Discovered Device with Down Status If the device status on the APs Devices gt List page remains Down after it has been added to a group the most likely source of the problem is an error in the SNMP community string being used to manage the device Perform the following steps to troubleshoot this scenario l Select the Name of the down device in the list of devices on the APs Devices gt List page This automatically directs you to the APs Device gt Monitor page for that device 2 Locate the Status field in the Device Info section If the Status is Down it includes a description of the cause of the problem Some of the common system messages are as follows in lable 87 Table 87 Common System Messages for Down Status Message Meaning SNMP Get Failed An incorrect SNMP community string or incorrect SNMP port is specified If SNMP is not enabled on the device you will also receive this message Some APs including Cisco and Dell PowerConnect W devices do not have SNMP enabled by default Telnet Error command Telnet username and password specified for that device is incorrect or an incorrect telnet port Is timed out specified SNMP Get Failed ICMP Ping Failed after The device is not responding on the network and is likely non operational 3 If the SNMP Get Failed message appears select the APs Devices gt
359. lt Description Desired Version Specifies the firmware to be used in the upgrade Firmware can be added to this drop down menu on the Device Setup Firmware Files page Job Name Sets a user defined name for the upgrade job Dell PowerConnect W recommends using a meaningful and descriptive name Use safe flag for Cisco Enables or disables the safe flag when upgrading IOS APs The safe flag must be IOS firmware upgrade disabled on older APs for the firmware file to fit in flash memory command Email Recipients Displays a list of email addresses that should receive alert emails if a firmware upgrade fails Sender Address None Displays the From address in the alert email 142 Discovering Adding and Managing Devices Dell PowerConnect W AirWave 7 2 User Guide Figure 102 APs Devices gt Manage Firmware Upgrades Desired Versio Choose the desired firmware version to be applied to Cisco 19 5F 2B 10 51 3 128 Upload firmware files on the Device Setup Upload Firmware amp Files page Current Version 12 4 21a A1 Desired Version Select firmware version Job name Firmware upgrade for Cisco 19 Use safe flag for Cisco IOS firmware upgrade command f Yes No Serve firmware files from this interface 10 2 32 10 Failure Notification Options To be notified when upgrades fail and when a job is stopped enter email addresses of the form user domain Separate multiple addresses by spaces commas or semico
360. lt Values Continued Field Description Licenses Appears for Dell controllers Selecting this link opens a pop up window that lists the licenses installed for this device and whether they have expired Controller Appears for APs Displays the controller for the associated AP device Selectthe controller name hyperlink to display the APs Devices Monitor page which contains detailed controller information Controller information includes Status operational metrics Controller Client Count by SSID Thin APs Controller Bandwidth by SSID CPU Utilization Memory Utilization APs Managed by this Controller Alerts and Recent Events Figure 78 illustrates the Controller page Portal Specifies the mesh AP acting as the wired connection to the network Mesh Mode Specifies whether the AP is a portal device or a mesh AP The portal device is connected to the network over a wired connection A mesh AP is a device downstream of the portal that uses wireless connections to reach the portal device Hop Count Displays the number of mesh links between this AP and the portal Displays the make and model of the device Last Contacted Displays the most recent time AWMS has polled the AP for information The polling interval can be set on the Groups Basic page Uptime Displays the amount of time since the AP has been rebooted This is the amount of time the AP reports and is not based on any connectivity with AWMS IP Address Displays the IP
361. luences WLAN performance 802 11b s 2 4 GHz range has a total bandwidth of 80 MHz separated into 11 center channels Of these channels only 3 are non overlapping 1 6 and 11 In the United States most organizations use only these non overlapping channels Transmit Power Highest power Cisco Symbol Determines the power level of radio transmission Government regulations define the Level level Proxim AP 600 highest allowable power level for radio devices This setting must conform to established supported by AP 700 AP 2000 standards for the country in which you use the device You can increase the coverage the radio in the 802 119 radius of the access point by increasing the Transmit Power Level However while this regulatory increases the zone of coverage it also makes it more likely that the AP will interfere with domain neighboring APs country supported values are Cisco 100mW 50mW 30mW 20mW 5mW 1mW Symbol Full or 50mW 30mW 15mW 5mW 1mW Radio Enable Enable The Radio option allows you to disable the radio s ability to transmit or receive data while Disable still maintaining Ethernet connectivity to the network AWMS will still monitor the Ethernet page and ensure the AP stays online Customers typically use this option to temporarily disable wireless access in particular locations This setting can be scheduled at an AP Level or Group Level DHCP If enabled the AP will be assigned a new IP address using DHCP
362. lustrates the use of templates in group and global device configuration Templates Chapter 7 Using RAPIDS and Describes the RAPIDS module of AWMS and enhanced rogue classification supported in Rogue Classification AWMS Chapter 8 Performing Daily Describes common daily operations and tools in AWMS to include general user Administration in AWMS administration the use of triggers and alerts network monitoring and backups Chapter 9 Creating Running and Describes AWMS reports scheduling and generation options and distribution of reports Emailing Reports from AWMS Chapter 10 Using the AWMS Describes how to use the AWMS Helpdesk GUI and related functions Helpdesk Appendix Package Management Describes the Yum packaging management system and provides advisories on for AWUMS alternative methods that may cause issues with AWMS Appendix B Third Party Security Describes additional and optional security configurations in AWMS Integration for AWMS Appendix C Access Point Notes Provides guidelines and suggestions for APs in AWMS Dell PowerConnect W AirWave 7 2 User Guide About This Guide 11 Table 1 Document Organization and Purposes Continued Chapter Description Appendix D Initiating a Support Provides instructions about how to create and use a support connection between AWMS Connection and AirWave Wireless Support Appendix E Cisco Clean Access Provides instructions for integrating C
363. mary of all the interfaces at the top In case of the stacked switches the master includes the interfaces of all the members including its own The physical and the virtual interfaces are displayed in separate tables labeled Physical and Virtual AWMS monitors Up Down status and bandwidth information on all interfaces You can edit multiple interfaces concurrently by selecting one of the two Edit Interfaces hyperlinks as shown using red arrows in Figure 58 above Interface labels are used to group one or more interfaces for the purpose of defining interface bandwidth triggers For more information on interface bandwidth triggers see Monitoring and Supporting AWMS with the System Pages on page 205 on page 181 Understanding the APs Devices Interfaces Page Monitoring Data for Wired Devices Routers and Switches on page 127 showed you how to view high level interface information for all physical and virtual interfaces on an entire router or switch Select any interface hotlink in the Name column of the Physical or Virtual Interfaces tables on the stacked switches to go to an Interfaces page displaying data relevant to that specific interface as shown Figure 89 Dell PowerConnect W AirWave 7 2 User Guide Discovering Adding and Managing Devices 129 Figure 89 Individual Interface Monitoring Page Switch 4 Total Up Down cisco3560 poe 30 3 27 Interfaces Monitoring Interface Fa0 4 for Device cisco3560 poe Physical In
364. matched select the Mismatched link to go to the APs Devices gt Audit page The APs Devices gt Audit page lists detailed information on all existing configuration parameters and settings for an individual device The group configuration settings are displayed on the right side of the page If the device is moved from Monitor to Manage mode the settings on the right side of the page overwrite the settings on the left Figure Ol illustrates this page Figure 91 APs Devices gt Audit Page Illustration Device Configuration of ServerRoom AL39 in group Arba HQ in folder Top This Device is in monitor only with firmware upgrades mode Configuration read from device at 5 18 2009 2 26 PM Configuration Mismatched Audit the device s current configuration Show Archived Device Configuration Customize Choose settings to ignore during configuration audits Show entire config Refresh this page AP Setti Mesh Role None Mesh AP Name AL39 ServerRoom AL39 System Ps rtie Location not set Not Available 6 Review the list of changes to be applied to the device to determine whether the changes are appropriate If not you need to change the Group settings or reassign the device to another Group Using Device Folders Optional The devices on the APs Devices List pages include List Up Down and Mismatched fields These devices are arranged in groups called folders Folders provide a logical organization of devices unrelated to the configu
365. materials mentioning features or use of this software must display the following acknowledgement This product includes software developed by the University of California Berkeley and its contributors 4 Neither the name of the University nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT INDIRECT INCIDENTAL SPECIAL EXEMPLARY OR CONSEQUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES LOSS OF USE DATA OR PROFITS OR BUSINESS INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY WHETHER IN CONTRACT STRICT LIABILITY OR TORT INCLUDING NEGLIGENCE OR OTHERWISE ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE SWFObject v 1 5 Flash Player detection and embed blog deconcept com swfobject SWF Object is c 2007 Geoff Stearns and is released under the MIT License 276 Third Party Copyright Information Dell PowerConnect W AirWave 7 2 User Guide mod_auth_tacacs TACACS authentication module Copyright c 1998 1999 The Apache Group Al
366. may not be visible depending on the role of the logged in user and license set in AWMS The RAPIDS pages provide all information relating to rogue access points including methods of discovery and lists of discovered and possible rogues For additional information refer to Chapter 7 Using RAPIDS and Rogue Classification on page 165 NOTE The RAPIDS pages may not be visible depending on the role and license set in AWMS VisualRF pages provide graphical access to floor plans client location and RF visualization for floors buildings and campuses that host your network For additional information refer to the Visua RF User Guide in Home Documentation VisualRF may not be visible depending on the role and license set in AWMS Subtabs Generated Definition Detail Status Event Log Triggers Alerts Backups Configuration Change Jobs Firmware Upgrade Jobs Performance Discover Add Communication Dell Configuration if global Dell Configuration is enabled Upload Files General Network Users Roles Guest Users Authentication MDM Server WLSE ACS NMS RADIUS Accounting PCI Compliance Overview List IDS Events Setup Rules Score Override Audit Log Floor Plans Setup Import Audit Log NOTE The AMP Setup tab varies with user role The RAPIDS and VisualRF tabs appear based on the license entered on the Home gt License page and might not be visible on your AWMS view Activity Sectio
367. mit the WLANS available on each AP Cisco thin APs are assigned to LWAPP AP Groups Viewing and Creating AP Groups l Goto the Groups gt Cisco WLC Config page and select WLANs gt Advanced gt AP Groups in the navigation pane at left This page displays the configured LWAPP APs Figure 50 illustrates this page Figure 50 Groups gt Cisco WLC Config gt WLANS gt Advanced gt AP Groups Page Illustration WLANS L5500 8021x E Advanced Lap Grou ps AP Groups LWAPP AP Groups VLAN Enabled Yes No Group Access Points t Controller Wireless HSecu rity LWAPP AP Group ijs Name 802 Commands Description Limit to 5 SSID 10 22 42 11 A Specify Interface Name Yes No Interface management A NAC State Enabled 9 Disabled Add JG ane add Cam jJ Save and Apply Save Revert Revert All 2 To add a new LWAPP AP group select Yes in the AP Groups section Additional controls appear 3 Select Add to create a new LWAPP AP group To edit an existing LWAPP AP group select the pencil icon next to that group Add one or more SSIDs and the interface VLAN ID mapping on the Add Edit page of the LWAPP AP Group 4 Select Save and Apply to make these changes permanent or select Save to retain these changes to be pushed to controllers at a later time Configuring Cisco Controller Settings The Groups gt Cisco WLC Config gt Controller page defines general Cisco WLC settings Multicast settings
368. mum Average i Avg Bits Per Second In 3 5 Mbps 6 Mbps 1 year ago ey now zx CPU Utilization Last 5 days gall Memory Utilization Last 5 days Hull 100 j 30 M 80 24 M H 60 18 M is 12 M j uc pr o l l 0 1 7 11 1 8 11 1 9 11 1 10 11 1 11 11 1 12 11 1 7 11 1 8 11 1 2 11 1 10 11 1 11 11 1 12 11 Show All Maximum Average Show All Maximum Average C Overall CPU Avg Load 16 8 15 1 m lv Average Free Memory 20 ME 20 MB v Average Used Memory 12MB 12 MB zu B i year ago CDP Neighbors 1 2 of 2 CDP Neighbors Page 1 ofl Choose Columns CSV Export Name a Neighbor Port Local Port Address Platform Capabilities Version CDP Version Duplex switch7 dev airwave com FastEthernet 23 GigabitEthernet 1 10 51 0 26 cisco WS C3560 24P5 Switch IGMP Cisco IOS Softwar full switch amp dev airwave com GigabitEthernet1 0 1 GigabsitEthernet 1 10 51 0 28 cisco W S C37506 2 Switch IGMP Cisco IOS Softwar full All managed wired devices also include an Interfaces subtab as shown in Figure 58 128 Discovering Adding and Managing Devices Dell PowerConnect W AirWave 7 2 User Guide Figure 88 APs Devices gt Interfaces Page for Wired Devices partial view Home Hel Users Reports System Device Setup Interface Summary for C3750 corp aire com in group Cisco Gear in folder Top gt HQ gt Lab gt RoutersSwitches Switch 4 Total Up Down 3750 1 27 2 25 C3750 co
369. n Max Simultaneous Users The maximum number of users that were active on the associated device during the period of time that the report covers Total Bandwidth MB The bandwidth in megabytes that the device supported during the period of time covered by the report Average Bandwidth kbps The average bandwidth throughput for the device during the period of time covered by the report Using the Device Uptime Report The Device Uptime Report monitors device performance and availability on the network tracking uptime by multiple criteria to include the following Total average uptime by SNMP and ICMP Average uptime by device group Average uptime by device folder 228 Creating Running and Emailing Reports Dell PowerConnect W AirWave 7 2 User Guide You can use this report as the central starting point to improve uptime by multiple criteria This report covers protocol oriented device oriented or SSID oriented information This report can help to monitor and optimize the network in multiple ways This report can demonstrate service parameters can establish locations that have superior or problematic uptime availability and can help with additional analysis in multiple ways Locations device groups or other groupings within a network can be identified as needing attention or can be proven to have superior performance when using this report Figure 162 and Table 130 illustrate and describe the Reports gt Generated gt De
370. n The Activity section displays all detailed configuration and monitoring information and is where you implement changes 24 Installing AWMS Dell PowerConnect W AirWave 7 2 User Guide Help Links in the GUI The Help link is available on every page within AWMS When selected this launches a PDF document with information describing the AWMS page that is currently displayed K NOTE Adobe Reader must be installed to view the settings and default values in the PDF help file Common List Settings All of the lists in AWMS have some common options All lists are paginated with a configurable number of items per page Selecting the Records Per Page dropdown menu enables you select or enter the number of rows that appear at a time in the list The next down arrow displays a dropdown menu that allows you to select the exact page you would like to view as shown in Figure 1 The Choose Columns option illustrated on Figure 1 allows you to configure the columns that are presented in the list and the order in which they are presented To disable a column clear its checkbox To reorder the columns drag a row to the appropriate new position When you are satisfied with the enabled columns and their order select Save at the top of the columns list Figure 1 Common List Settings Choose Columns Illustration 20 records per page of 5 Users Page iwofi Choose Columns Username Role MAC Address AP Save Cancel tion SSID 0
371. n the device have changed update the fields below with the correct information This device is currently using SNMP version 1 Community String 2022022088 Confirm Community String T9 Auth Password TETTETETT Confirm Auth Password ETT TT Privacy Password PAPPPTTTTT Confirm Privacy Password TP Vi NOTE The Device Communication area may appear slightly different depending on the particular vendor and model of the APs being used 3 Enter and confirm the appropriate Auth Password and Privacy Password 4 You can disable the View AP Credentials link in AWMS by the root user Contact Dell support for detailed instructions to disable the link 5 Optional Enter the appropriate SSH and Telnet credentials if you are configuring Dell Aruba Networks Alcatel Lucent or any Cisco device except Cisco WLAN controllers 6 Select Apply then Confirm Edit to apply the changes to the AP immediately Schedule to schedule the changes during a specific time or Cancel to return to APs Devices gt Manage Vi NOTE Some AP configuration changes may require the AP to be rebooted Use the Schedule function to schedule these changes to occur at a time when WLAN users will not be affected Select Update Firmware to upgrade the device s firmware Figure 102 illustrates this page and l able 86 describes the settings and default values Table 86 APs Devices Manage Firmware Upgrades Fields and Default Values Setting Defau
372. n appears on mouse over only e For non Flash graphs select the graph to open a popup window that shows historical data A non Flash version of the AWMS user page is available if desired instead of Flash it uses the RRD graphs that were used in earlier versions of AWMS Contact Dell support for more information on activating this feature in the AWMS database Customizing the Overview Subtab Display You can rearrange or remove widgets appearing on the Home gt Overview dashboard by selecting Customize to the right of this window as shown in Figure 11 Figure 11 Customize Button on the Home Overview Page Renee Helpdesk Groups APs Devices Users Reports System Device Setup AMP Setup RAPIDS VisualRF Overview Search Documentation License User Info Welcome to AirWave Wireless Management Suite 7 2 Days Remaining 234 9 11 down ap 4 Customize The Customize workspace 1s shown in Figure 12 32 Configuring AWMS Dell PowerConnect W AirWave 7 2 User Guide Dell PowerConnect W AirWave 7 2 User Guide Figure 12 Customize Overview Page Show All Maximum Average Show All Maximum Average D v Max Users 133 users 103 users Q V Avg Bits Per Second In 2 5 Mbps 1 3 Mbps Q W Avg Bits Per Second Out 4 8 Mbps 2 3 Mbps B ver o 9 Monitoring Status Configuration Compliance Tea 5 Last 2Hours Last Day Total Last Event AMP Alerts 0 0 U DS Events 0 0 0 incidents 0 0 0 0 0
373. n established for efficient monitoring and configuration For additional information see Chapter 4 Configuring and Using Device Groups in AWMS on page 69 NOTE Some of the focused subtabs will not appear for all groups Focused subtabs are visible based on the device type field on the Groups Basic page This subtab is the first page to appear when adding or editing groups NOTE When individual device configurations are specified device level settings override the Group level settings to which a device belongs The APs Devices pages provide detailed information about all authorized APs and wireless LAN switches or controllers on the network including all configuration and current monitoring data These pages interact with several additional pages in AWMS One chapter to emphasize the APs Devices pages is Chapter 5 Discovering Adding and Managing Devices on page 107 NOTE When specified device level settings override the default Group level settings The Users pages provide detailed information about all client devices and users currently associated to the WLAN For additional information refer to Monitoring and Supporting WLAN Users on page 188 Dell PowerConnect W AirWave 7 2 User Guide Subtabs Overview Search Documentation License User Info Incidents Setup List Focused Subtabs Monitor Basic Templates Security SSIDs AAA Servers Radio Dell Config Cisco WLC Config PTMP Proxim Mesh MAC A
374. n the Profile drop down menu select the Spectrum Profile type 4 gt Spectrum Band and enter the overriding value below it 6 Select Add to save your changes h 8 When you have finished select Save and Apply You can also use the above procedure to turn on Spectrum mode for radio profiles on one particular controller or use the overrides to point your radio profile to a non default Spectrum profile for just this controller Dell PowerConnect W AirWave 7 2 User Guide Discovering Adding and Managing Devices 147 148 Discovering Adding and Managing Devices Dell PowerConnect W AirWave 7 2 User Guide Chapter 6 Creating and Using Templates This chapter provides an overview and several tasks supporting the use of device configuration templates in AWMSS and contains the following topics e Group Templates on page 149 e Viewing and Adding Templates on page 150 e Configuring General Template Files and Variables on page 153 e Configuring Cisco IOS Templates on page 158 e Configuring Cisco Catalyst Switch Templates on page 160 e Configuring Symbol Controller HP WESM Templates on page 161 e Configuring a Global Template on page 162 Group Templates Templates are helpful configuration tools that allow AWMS to ep virtually all device settings template uses variables to adjust for minor configuration differences between devices Supported Device Templates The Groups gt Templa
375. nd Managing Devices Dell PowerConnect W AirWave 7 2 User Guide Table 81 APs Devices gt Manage gt General Fields and Descriptions Continued Field Description Status Displays the current status of an AP If an AP is Up then AWMS is able to ping it and fetch SNMP information from the AP If the AP is listed Down then AWMS is either unable to ping the AP or unable to read the necessary SNMP information from the device Configuration Displays the current configuration status of the AP To update the status select Audit on the APs Devices Audit page Last lastContacted LastContacted Displays the last time AWMS successfully contacted the AR the last time Displays the last ime AWMS successfully contacted the AP 0 successfully contacted the AP Displays the version of firmware running on the AP Group 0 Links to the Group gt Monitoring page for the AP Template Displays the name of the group template currently configuring the AP Also displays a link to the Groups gt Template page This is only visible for APs that are managed by templates Folder Displays the name of the folder containing the AP Also displays a link to the APs Devices gt List page for the folder Management Mode Displays the current management mode of the AP No changes are made to the AP when itis in Monitor Only mode AWMS pushes configurations and makes changes to an AP when itis in Manage Read Write mode Notes 0 00 Provides a free form text fie
376. nd Table 130 illustrate and describe the Reports gt Generated gt Device Summary Detail page Dell PowerConnect W AirWave 7 2 User Guide Creating Running and Emailing Reports 227 Figure 161 Daily Device Summary Report Illustration partial view Daily Device Summary Report for All Groups Folders and SSIDs Ls XML XHTML expoi CSV export 1 11 2011 12 00 AM to 1 12 2011 12 00 AM sil Ai thi Generated on 1 12 2011 12 40 AM det Print report Most Utilized by Maximum Number of Simultaneous Users Rank AP Device Number of Users Max Simultaneous Users Total Bandwidth MB Average Bandwidth kbps Location v Controller 2 ethersphere ms3 205 116 19610 24 1815 76 Aruba Networks 4 RAP Loca 99 45 6476 88 599 71 1344 Server Room 1 ethersphere 1322 231 126 20165 29 2422 71 1322 3 RAP OPS 02 250 71 18975 59 1757 00 5 1310 41 23 5849 25 541 60 ethersphere 1 6 AL27 42 23 3368 82 311 93 ethersphere Ir 7 1153 46 23 6290 70 582 47 ethersphere 1 8 1 24 2 H 50 19 1418 28 131 32 ethersphere 1 9 12C 41 19 4206 01 389 44 ethersphere Ir 10 1263 56 19 3181 33 294 57 ethersphere 1 Most Utilized by Bandwidth Rank a AP Device Number of Users Max Simultaneous Users Total Bandwidth MB Average Bandwidth kbps Location 1 Switch15 dev airwave com 0 0 2154332 01 199475 19 Server Room top of 2 10 51 3 110 1555354 77 144014 33 Sunnyvale 3 lab distro switch 0 0 753047 39 69726 61 AirWave AP Lab 4 sales 24poe corp airwave com 0 0 611772
377. nd you install a high gain antenna on the device s left connector use this setting for both receive and transmit Transmit Antenna see description in Receive Antenna above 136 Discovering Adding and Managing Devices Dell PowerConnect W AirWave 7 2 User Guide Table 83 APs Devices gt Manage Page Illustration Additional Settings Continued Setting Default Device Type Description Antenna Diversity Primary Only Symbol 4131 Drop down menu provides the following options Full Diversity The AP receives information on the antenna with the best signal strength and quality The AP transmits on the antenna from which it last received information Primary Only The AP transmits and receives on the primary antenna only Secondary Only The AP transmits and receives on the secondary antenna only Rx Diversity The AP receives information on the antenna with the best signal strength and quality The AP transmits information on the primary antenna only Transmit Power Proxim Transmit Power Reduction determines the APs transmit power The max transmit power is Reduction reduced by the number of decibels specified Channel All Represents the AP s current RF channel setting The number relates to the center frequency output by the AP s RF synthesizer Contiguous APs should be set to different channels to minimize crosstalk which occurs when the signals from APs overlap and interfere with each other This RF interference negatively inf
378. ndividual user has exceeded a predefined threshold for more than a specified period in seconds such as more than 1500kbps for more than 120 seconds Once you choose this trigger type select Add New Trigger Condition to specify the bandwidth characteristics that triggers an alert You can apply multiple conditions to this type of trigger The Value field requires that you input a numerical figure for kilobits per second kbps Inactive Tag This tags flags events in which an RFID tag has not been reported back to AWMS by a controller for more than a certain number of hours This trigger can be used to help identify inventory that might be lost or stolen Set the time duration for this trigger type if not already completed b Repeat this procedure for as many triggers and conditions as desired Refer to the start of Creating New Triggers on page 181 to create a new trigger Setting Triggers for RADIUS Authentication Issues Perform the following steps to configure RADIUS related triggers Dell PowerConnect W AirWave 7 2 User Guide Performing Daily Administration in AWMS 185 a Choose a trigger type from the RADIUS list in the drop down Type menu Table 108 itemizes and describes the condition settings for each RADIUS Authentication trigger type Table 108 RADIUS Authentication Trigger Types and Condition Settings Description User RADIUS This trigger type sets the threshold for the maximum number of failures before an a
379. nect W AirWave 7 2 User Guide Chapter 8 Performing Daily Administration in AWMS Daily WLAN administration often entails network monitoring supporting WLAN and AWMS users and monitoring AWMS system operations This chapter contains the following administration procedures e Overview of Triggers and Alerts on page 181 e Monitoring and Supporting WLAN Users on page 188 e Evaluating and Diagnosing User Status and Issues on page 194 e Managing Mobile Devices with SOTI MobiControl and AWMS on page 198 e Upgrading AWMS on page 214 e Backing Up AWMS on page 214 e Monitoring and Supporting AWMS with the System Pages on page 205 Overview of Triggers and Alerts This section describes triggers and alerts and contain the following topics e Viewing I riggers e Creating New Triggers e Delivering Triggered Alerts e Viewing Alerts e Responding to Alerts AWMS monitors key aspects of wireless LAN performance When certain parameters or conditions arise that are outside normal bounds AWMS generates or triggers alerts that enable you to address problems frequently before users have a chance to report them AWMS deploys two types of alerts Viewing Triggers To view defined system triggers navigate to the System gt Triggers page Figure 124 illustrates this page Figure 124 System Triggers Page lllustration partial view Triggers Add Mew Trigger Type T gger Additiona
380. nect W AirWave 7 2 User Guide Discovering Adding and Managing Devices 109 Running a Scan Set Once a scan has been defined on the Device Setup gt Discover page AWMS can now scan for devices Perform these steps l Browse to the Device Setup gt Discover page and locate the list of all scan sets that have been defined so far Figure 67 illustrates this page Figure 67 Device Setup gt Discover Executing a Scan Illustration Add New Scan Set 1 10 w of 10 Scan Sets Page 1 w of 1 Network 4 Credentials Total APs Found New APs Found Total Rogues Found New Rogues Found Start Stop 10 51 51 51 Default HTTP private public 1 2 27 2009 3 17 AM 2 27 2009 10 52 52 52 private p ublic 0 0 2 25 2009 1 46 PM 2 25 2009 10 53 53 53 private public 22 2 27 2009 5 04 PM 2 27 2009 10 51 50 50 private public 6 0 1 9 2009 4 22 PM 1 9 2009 4 10 90 9090 private public 1 9 2009 3 47 PM 1 9 2009 3 Select All Unselect All scan Refresh this page for updated results Check the box next to the scan s that you would hike to execute pes WN Select Scan to execute the selected scans and the scan immediately begins The last column indicates the scan 1s In Progress 4 For future scans select Show Scheduling Options and enter the desired date and time 5 After several minutes have passed refresh the browser page and view the results of the scan When
381. ng SSH Communication uses the secure shell for command line page CLI communication Selecting Telnet sends the data in clear text via Telnet Cisco IOS Config File The protocol AWMS uses to communicate with Cisco IOS devices Selecting SCP Communication uses the secure copy protocol for file transfers Selecting TFTP will use the insecure trivial file transfer protocol The SCP login and password should be entered in the Telnet username and password fields Track Usernames on Configures VxWorks APs to send SNMP packets to AWMS Cisco Aironet VxWorks APs 76 Configuring and Using Device Groups in AWMS Dell PowerConnect W AirWave 7 2 User Guide 11 To configure settings specific to Cisco WLG locate the Cisco WLC section and adjust these settings as required Table 44 describes the settings and default values Table 44 Cisco WLC Fields and Default Values Default Description sets the version of SNMP used by AWMS to communicate to WLC controllers CLI Communication Telnet Sets the protocol AWMS uses to communicate with Cisco IOS devices Selecting SSH uses the secure shell for command line page CLI communication Selecting Telnet sends the data in clear text via Telnet K NOTE When configuring Cisco WLC controllers refer to Configuring Wireless Parameters for Cisco Controllers on page 96 12 To configure Proxim Avaya specific settings locate the Proxim Avaya section and adjust these settings as required lable 45 d
382. ng on the Default Group display option selected on the AMP Setup gt General page and the types of devices you add to AMP Figure 34 Subtabs under the Group tab VisualRF MAC ACL RAPIDS Home Helpdesk Wip EM APs Devices Users Reports AAA Servers System Device setup AMP Setup Radio PTMP Proxim Mesh Firmware Monitor Basic Templates Security S5IDs Cisco WLC Config e List This page is the default page in the Groups section of AWMS It lists all groups currently configured in AWMS and provides the foundation for all group level configurations See Viewing All Defined Device Groups on page 71 Monitor This page displays user and bandwidth information lists devices in a given group provides an Alert Summary table for monitoring alerts for the group and provides a detailed Audit Log for group level activity NOTE The Incidents portion of the Alert Summary table only increments the counter for incidents that are open and associated to K an AP in that group associated with the group itself It does not include incidents associated with any folder To view all incidents including those not associated to an AP go to the Helpdesk gt Incidents page e Basic This page appears when you create a new group on the Groups gt List page Once you define a group name AWMS displays the Basic page from which you configure many group level settings This page remains available for any device group config
383. ning config file to the startup config file for configuration verification it will ignore any lines in the running config file that start with the text within the directive Lines belonging to an ignored and unpushed line the lines immediately below the line and indented are ignored as well In the example below 1f you were to bracket NTP server the NTP clock period would behave as if it were bracketed because it belongs or 1s associated with the NTP server line NOTE The line ignore and do not push ntp clock period ignore and do not push will cause lines starting with ntp clock K period to be ignored However the line ignore and do not push ntp lt ignore_and_do_not_push gt causes all lines starting with ntp to be ignored so it is important to be as specific as possible Push and exclude Command Instead of using the full tags you may use the parenthesis shorthand substring The push and exclude directive is used to push commands to the AP that will not appear in the running config file For example some no commands that are used to remove SSIDs or remove configuration parameters do not appear in the running config file of a device A command inside the push and exclude directive are included in the startup config file pushed to a device but AWMS excludes them when calculating and reporting configuration mismatches K NOTE The opening tag may have leading spaces Below are some examples of using directives lin
384. nly visible if a specific flag is set in the AWMS database By default this option is hidden and Flash is enabled for all users Allow creation Yes If this option is enabled users with an assigned role of Monitoring or Audit can be given access of Guest Users to guest user account creation along with the option to allow a sponsor to change its username custom message can also be included The Guest User Preferences section does not apear if Guest User Configuration is disabled in AMP Setup General What Next Go to additional tabs in the AMP Setup section to continue additional setup configurations Complete the required configurations in this chapter before proceeding Dell support remains available to you for any phase of AWMS installation 46 Configuring AWMS Dell PowerConnect W AirWave 7 2 User Guide Enabling AWMS to Manage Your Devices Once AWMS is installed and active on the network the next task is to define the basic settings that allow AWMS to communicate with and manage your devices Device specific firmware files are often required or are highly desirable Furthermore the use of Web Auth bundles is advantageous for deployment of Cisco WLC wireless LAN controllers when they are present on the network This section contains the following procedures e Configuring Communication Settings for Discovered Devices e Loading Device Firmware Onto AWMS optional m Overview of the Device Setup gt Upload
385. nnae installing more or better antennas on the APs adding APs increasing the transmit power of the APs investigating intermittent RF interference such as the startup schedule of a nearby air conditioning unit or evaluating the client settings Excessive roaming in last two hours Excessive roaming means that a user s connection moves from one AP to another 10 or more roaming instances in the past two hours If there is excessive roaming but the user has been stationary then the user might be located where there is weak coverage from two overlapping APs Adjusting the signal strength for one of those APs may resolve the Issue High User Bandwidth Network performance issues might mean excessive bandwidth consumption Investigate user bandwidth consumption for all users on a given AP not strictly the user who reports a problem Unauthenticated User This section conveys the user s current authentication status and the actual authentication type If a network deploys RADIUS then the RADIUS server could be experiencing issues even if a user attempts to log in with valid credentials but shows as Unauthenticated on this page Possible High user load on AP radio This field indicates whether the number of users on a given AP has exceeded Issues Cont d that AP s functional capacity Excessive users on an AP could degrade performance for all users on that AP Consider adding another AP in that area Refer to the Current User Counts section on th
386. ntified as PSPF Publicly Secure Packet Forwarding which can be useful for enhanced security on public wireless networks Configuring and Using Device Groups in AWMS 81 Table 51 Groups gt Security Page Fields and Default Values Continued Setting Default Description EAP Options Section WEP Key Rotation Interval Sets the frequency at which the Wired Equivalent Privacy WEP keys are rotated in the device group being configured The supported range is from 0 to 10 000 000 seconds sets the frequency at which the general session key is refreshed in the device group being configured The supported range is from 1 to 40 minutes This setting is supported only for HP ProCurve 420 Session Timeout o Sets the time at which the session times out for the device group being configured Session Key Refresh Rate The supported range is from 0 to 65 535 seconds This setting is supported only for HP ProCurve 420 Sets the device group to use the Cisco Temporal Key Integrity Protocol TKIP If enabled TKIP provides per packet key mixing a message integrity check and a re keying mechanism thus fixing the flaws of WEP Cisco TKIP NOTE TKIP can only be enabled when EAP based security is used Cisco MIC Disabled Sets the device group to use the Cisco Message Integrity Check MIC Selecting MMH encryption enables this function If enabled Message Integrity Check MIC adds several bytes per packet to make it more diffic
387. nued Setting Default Description Bridge Maximum 20 Sets the maximum time in seconds that the device stores protocol information The Age supported range is from 6 to 40 Bridge Hello 2 Sets the time in seconds between Hello message broadcasts Time Bridge Forward sets the time in seconds that the port spends in listening and learning mode if the spanning Delay tree has changed 9 To configure NTP settings locate the NTP section and adjust these settings as required Table 42 describes the settings and default values Table 42 NTP Fields and Default Values Setting Default Description NTP Server 1 2 3 None Sets the IP address of the NTP server to be configured on the AP UTC Time Zone Sets the hour offset from UTC time to local time for the AP Times displayed in AWMS graphs and logs use the time set on the AWMS server Daylight Saving Enables or disables the advanced daylight saving time settings in the Proxim and HP ProCurve Time 420 sections of the Groups gt Basic configuration page 10 To configure settings specific to Cisco IOS VxWorks locate the Cisco IOS VxWorks section and adjust these settings as required Table 43 describes the settings and default values Table 43 Cisco lOS VxWorks Fields and Default Values Setting Default Description SNMP Version 20 The version of SNMP used by AWMS to communicate to the AP Cisco IOS CLI The protocol AWMS uses to communicate with Cisco IOS devices Selecti
388. nvorenvnnenvrnersnenvarenvensnerverennensne 32 BUSES IE PDT EE 33 Setting Severe Alert Warning Behavior mmenvsnenrronrrvorenrnrenrsvrvenesvenenvnvavessensvesvenssennsnenvevennensne 34 Defining General AWMS Server Settings rsrannnanrnvnnrnvnvarenvonenvrvarenvnnenervereresnensnerverenvenenesvevenns 34 Defining AWMS Network Settings tnnt tnnt es 41 C regting AN MS USES Leese 43 Creating AWMS User Roles eese tnter nnn nnne 44 Enabling AWMS to Manage Your Devices nerrnrnrrverenvsvonrrvrrenesrenesvrvenesvensnesvensnenvevennensnesvenenns 47 Configuring Communication Settings for Discovered Devices ess 47 Loading Device Firmware Onto AWMS optional eee 49 Overview of the Device Setup gt Upload Firmware amp Files Page 49 Loading Firmware Files to AWMS essent nnns 50 Using Web Auth Bundles in AWMS sess 52 Configuring TACACS and RADIUS Authentication esee 52 Configuring TACACS Authentication sorevsrenvrrorrrvorerrrronrrvrrenrsvenesvrnensnvnravenvrnsnennerennennne 53 Configuring RADIUS Authentication and Authorization sesss 54 Integrating a RADIUS Accounting Server sss nnns 55 Configuring Cisco WLSE and WLSE Rogue Scanning essen 56 Introduction to
389. o 1 21 2009 12 00 AM um CSV export Generated on 1 21 2009 12 23 AM ia Email this report This report covers sections of the Payment Card Industry PCI Data Security Standard D55 Version 1 2 Print P requirements that are relevant to security in your network PCI DSS standard requirements are available at nnt repo https www pcisecuritystandards org Disclaimer The PCI Compliance Report must be completed by an authorized QSA The sole purpose of this report is to provide IT administrators with an on demand internal audit of components which are visible to AirWave Wireless Management Suite Summary PCI Requirement 4 Description 1 1 Configuration standards for router Pass A device fails if it is in read write management mode and there are mismatches between the desired configuration and the configuration on the device 1 23 Install firewalls between any wireless networks and the cardholder data environment Pass A device passes if it can function as a stateful firewall 2 1 Always change vendor supplied defaults Pass A device fails if the usernames passwords or SNMP credentials being used by AWMS to communicate with the device are on a list of forbidden credentials The list includes common manufacturer defaults 2 1 1 Change vendor supplied defaults for wireless environments Pass A device fails if the passphrases SSIDs or other security related settings are on a list of forbidden values The list includes common manufacture
390. o Dell PowerConnect W devices see the Dell PowerConnect W AirWave Configuration Guide in Home gt Documentation Table 83 APs Devices gt Manage Page Illustration Additional Settings Setting Default Device Type Description Mesh Role Mesh AP Mesh Devices Drop down menu specifies the mesh role for the AP as shown Mesh AP The AP will act like a mesh client It will use other APs as its uplink to the network Portal AP The AP will become a portal AP It will use a wired connection as its uplink to the network and serve it over the radio to other APs None The AP will act like a standard AP It will not perform meshing functions Mesh Mobility Static Mesh Devices Select Static if the AP is static as in the case of a device mounted on a light pole or in the ceiling Select Roaming if the AP is mobile Two examples would be an AP mounted in a police car or utility truck Receive Antenna Diversity Drop down menu for the receive antenna provides three options Diversity Device will use the antenna that receives the best signal If the device has two fixed non removable antennas the Diversity setting should be used for both receive and transmit antennas Right If your device has removable antennas and you install a high gain antenna on the device s right connector the connector on the right side when viewing the back panel of the device use this setting for receive and transmit Left lf your device has removable antennas a
391. o the devices The following table compares how default classification may differ between AWMS and ArubaOS for scenarios involving WMS Offload Table 97 Rogue Device Classification Matrix AWMS AOS ARM Neighbor Known Interfering Contained Rogue DOS For additional information about WMS Offload refer to the Best Practices Guide in Home gt Documentation Device OUI Score The Organizationally Unique Identifier OUI score is based on the LAN MAC address of a device RAPIDS can be configured to poll your routers and switches for the bridge forwarding tables RAPIDS then takes the MAC addresses from those tables and runs them through a proprietary database to derive the OUI score The OUI score of each device is viewable from each rogue s detail page Table 98 provides list the OUI scores definitions Table 98 Device OUI Scores Score Description Score of 1 Indicates any device on the network this is the lowest threat level on the network Score of 2 Indicates any device in which the OUI belongs to a manufacturer that produces wireless 802 11 equipment Score of 3 Indicates that the OUI matches a block that contains APs from vendors in the Enterprise and small office small home market Score of 4 Indicates that the OUI matches a block that belonged to a manufacturer that produces small office small home access points 170 Using RAPIDS and Rogue Classification Dell PowerConnect W AirWave 7 2 User Guide Rogue
392. o vendor of the rogue device when known This field displays the OS of the device as known OS is the result of a running an OS port scan on a device An IP addresses is required to run an OS scan The OS reported here is based on the results of the scan Displays the model of rogue device if known This is determined with a fingerprint scan and this information may not always be available Displays the IP address of the rogue device The IP address data comes from fingerprint scans or ARP polling of routers and switches IP Address Last Discovering AP Displays the most recent AP to discover the rogue device The device name in this column is taken from the device name in AWMS Switch Router Displays the switch or router where the device s LAN MAC address was last seen Indicates the physical port of the switch or router where the rogue was last seen Indicates the date and time the rogue device was last seen Overview of the RAPIDS Detail Page Select a device Name in the RAPIDS gt List page to view the Detail page Figure 120 Figure 120 RAPIDS Detail Page lllustration Name HANGZHOU H 49 17 C0 Model First Discovered 12 2 2010 5 51 PM Acknowledge ves C No IP Address First Discovery Method Switch Router Bridge Forwarding Table Data Controller Classification Valid Confidence 100 SSID h3c psk First Discovery Agent C3750 corp airwave com RAPIDS Classification Rogue Channel Last Discovered 1 18 20
393. oS parameters on the network according to traffic type The rate of different parameters includes ACK Failures Duplicated Frames and Transmitted Fragments See the drop down field menu in the conditions section of the trigger page for a complete list of parameters Select Add New Trigger Condition to access these settings Define at least one condition for this trigger type 184 Performing Daily Administration in AWMS Dell PowerConnect W AirWave 7 2 User Guide Table 105 Radio Related Trigger Types Continued Radio Trigger Options Description Interface Bandwidth Interface labels defined on the trigger page will be used to set up triggers on one or more interfaces and or radios Available conditions are Device Type Interface Description Interface Label Interface Mode Interface Speed In Mbps Interface Speed Out Mbps Interface Type and Radio Type Radio Utilization Indicates that channel utilization has crossed particular thresholds Available conditions are Interference 96 Radio Type Time Busy 96 Time Receiving 96 and Time Transmitting 96 Setting Triggers for Discovery Perform the following steps to configure triggers related to device discovery a Choose a trigger type from the Discovery category listed in the Type drop down menu See Figure 126 Table 106 itemizes and describes the Discovery related trigger types and condition settings for each discovery trigger type Table 106 Discovery Trigger
394. obile Device Management Engine NTP Client PAPI Message Processor PAPI Message Router Parallel HTTP Fetcher Performance Monitor Persistent TupleSpaces Server Postfix Mail Server RADIUS Accounting Server Report Runner Rogue Filter RTLS Collector SNMP Enabler SNMP Fetcher SNMP va Fetcher SNMP Trap Handler Synchronous Event Handler Tag Expiration TupleSpaces Server VisualRF Engine Web Server WEP Key Setter Whitelist Collector Work Queue Collision Logger Additional Log Files Description Log Nightly Maintenance System Audit Log Telnet commands Status OK DE DE DE DE DE OK DE DE DE DE DE DE DE OK OK OK DE DE Disabled OK Disabled OK DE DE Disabled DE Disabled DE DE OK Disabled OK DE DE DE DE DE DE DE DE DE DE DE OK OK OK OK OK Disabled OK Log Har log airbus log Har log alerts stats cacher Har log alertd Har log tuple scheduler Har log at Harflog awrns news fetcher Hiar log acs Har lbg wlse Har log async logger client Har log config verifier Har log config pusher fvarflog amp_ cron Mvar log pgsal Harflog ap list cacher Har log ap watcher Harflog ap watcher poll now Har log discovery event cacher Har log dns fetcher Har log dns refresh Har log amp watcher Hiar log firmware enforcer Har log xferlog Har log guest user pusher Har log ap scanner Har log lapp rebuild Harflog mec stat collector Ivarllog me report runner
395. of Configuration Mismatches 155 Ignore and do not push Command sess tntnnnnnes 156 Push and exclude Command ccccsscescssssssesesecscseseesesececsusecaeseseeaesesesausesassesesaesnees 156 Using Conditional Variables in Templates cccccsssesssscsessssesssesscseseseesesecassesessesesarenes 156 Using Substitution Variables in Templates ccccscsccssssssesssssssssesssesecsssesesseseeasenseeaees 157 Using AP Specific Variables essent nnns 158 Configuring Cisco IOS Templates cessscsscessssesssesscsesscsesesessesesecseseseesesecassusesatsesesaesesasenses 158 Applying Startup config Files eese nentes 159 WDS Settings in Templates sismsextinisrit icti timi pen bre vh vibra 159 SCP Required Settings in Templates srrrrnrrnrnronorenrsronrsvrrenvsrnnrnvrvanesvnnenesvensnennevennnnsnennnne 159 Supporting Multiple Radio Types via a Single IOS Template 160 Configuring Single and Dual Radio APs via a Single IOS Template 160 Configuring Cisco Catalyst Switch Templates sssseseeeeenenntntnnnnes 160 Configuring Symbol Controller HP WESM Templates sess 161 Configuring a Global Template entente ns 162 Using RAPIDS and Rogue Classification eene 165 introducti
396. of the interface For more detailed information about each option refer to Table 5 on page 22 3 On the AMP Setup gt General page locate the Display section and select the Group tabs and options to appear by default in new device groups K NOTE Changes to this section apply across all of AWMS These changes affect all users and all new device groups 36 Configuring AWMS Dell PowerConnect W AirWave 7 2 User Guide Table 9 describes the settings and default values in this section Table 9 AMP Setup gt General gt Display Fields and Default Values Default Description Use fully qualified Sets AWMS to use fully qualified domain names for APs instead of the AP name For domain names example testap yourdomain com would be used instead of testap This option is supported only for Cisco IOS Dell PowerConnect W Aruba Networks and Alcatel Lucent devices Show vendor specific All Devices Displays a drop down menu that determines which Group tabs and options are device settings for viewable by default in new groups and selects the device types that use fully qualified domain names This field has three options as follows All Device When selected AWMS displays all Group tabs and setting options Only Devices on this AMP When selected AWMS hides all options and tabs that do not apply to the APs and devices currently on AWMS Selected device type When selected a new field appears listing many device types T
397. ollows Start from the RAPIDS gt List page Sort the devices on this page based on classification type Begin with Rogue APs working your way through the devices listed Select Modify Devices then select all devices that have an IP address and select Identify OS AWMS performs a port scan on the device and attempts to determine the operating system see Setting Up RAPIDS on page 167 You should investigate devices running an embedded Linux OS installation The OS scan can help identify false positives and isolate some devices that should receive the most attention Find the port and switch at which the device is located and shut down the port or follow wiring to the device To manage the rogue remove it from the network and acknowledge the rogue record If you want to allow it on the network classify the device as valid and update with notes that describe it NOTE Not all rogue discovery methods will have all information required for resolution For example the switch router Ln information port or IP address are found only through switch or router polling Furthermore RSSI signal channel SSID WEP or network type information only appear through wireless scanning Such information can vary according to the device type that performs the scan Score Override On RAPIDS gt Score Override page you can change the OUI scores that are given to MAC addresses detected during scans of bridge forwarding tables on routers or switches
398. omatically overwrites existing device settings with the specified Group K settings Dell PowerConnect W strongly recommends placing newly discovered devices in Monitor mode until you can confirm that all group configuration settings are appropriate for that device 4 Ifyou do not wish to manage or monitor a discovered device you may select the device s from the list and select either Ignore Selected Devices or Delete Selected Devices If you choose to Ignore the devices they will not be displayed in the APs Devices gt New list even if they are discovered in subsequent scans You can view a list of all Ignored devices on the APs Devices gt Ignored page If you choose to Delete the device it will be listed on the APs Devices gt New list if discovered by AWMS in a subsequent scan Refer to Assigning Devices to the Ignored Page on page 116 Manually Adding Individual Devices Some deployment situations may require that you manually add devices to AWMS You can add devices manually by uploading a CSV file or from the Device Setup gt Add page This section describes the following procedures Adding Devices with the Device Setup gt Add Page Adding Multiple Devices from a CSV File Adding Universal Devices Adding Devices with the Device Setup Add Page Manually adding devices from the Device Setup gt Add page to AWMS is an option for adding all device types You only need to select device vendor information from a
399. on a measure of the power present in a received radio signal Network Type Displays the type of network in which the rogue is present for example Ad hoc This type of network usually indicates that the rogue is a laptop that attempts to create a network with neighboring laptops and is less likely to be a threat AP This type of network usually indicates an infrastructure network for example This may be more of a threat Unknown The network type is not known 5 Encryption Type Displays the encryption that is used by the device Possible contents of this field include the following encryption types Open No encryption WEP Wired Equivalent Privacy WPA WIi Fi Protected Access Generally this field alone does not provide enough information to determine if a device is a rogue but it Is a useful attribute If a rogue is not running any encryption method you have a wider security hole than with an AP that is using encryption Ch Indicates the most recent RF channel on which the rogue was detected NOTE it may be detected on more than one channel if it contains more than one radio LAN MAC Address The LAN MAC address of the rogue device LAN Vendor Indicates the LAN vendor of the rogue device when known Dell PowerConnect W AirWave 7 2 User Guide Using RAPIDS and Rogue Classification 175 Table 101 RAPIDS List Column Definitions Continued Column Description Radio Vendor Indicates the radi
400. on Specifies the version of SNMP used by AWMS to communicate to the controller 2 NOTE DST Start Month Start Day End Month End Day and DST Offset are only visible if Daylight Saving Time is enabled in the NTP section of the Groups gt Basic configuration page Dell PowerConnect W AirWave 7 2 User Guide Configuring and Using Device Groups in AWMS 77 14 To configure Symbol settings locate the Symbol section and adjust these settings as required Table 47 describes the settings and default values of this section Table 47 Symbol Fields and Default Values Setting Default Description SNMP Version Specifies the version of SNMP used by AWMS to communicate to the device Symbol Client Sets the minutes of inactivity after which a client associated to a Symbol AP will be Inactivity Timeout considered inactive A lower value typically provides a more accurate representation of 3 600 min current WLAN usage NOTE For other APs AWMS has more precise methods to determine when inactive clients are no longer associated to an AP Symbol Controller Telnet The connection type to support the command line interface CLI connection The options are CLI Communication Telnet and secure shell SSH This is supported for WS5100 RFS4000 RFS6000 and RFS7000 devices only Web Config Yes Enables or disables the http https configuration page for the Symbol 4131 devices Interface 15 To configure settings specific to DellPowerConnect W loc
401. on pane at the top in association with that group Navigating Cisco WLC Configuration The navigation pane on the left side of the Groups gt Cisco WLC Config page is expandable and displays the Cisco configurations supported and deployed Figure 43 and Figure 44 illustrate this navigation pane You can pre populate the group WLC settings from a controller in the same group by performing an import on the controller s Audit page Figure 43 Groups gt Cisco WLC Config Page Illustration collapsed view ETWLANS t Controller ST Wireless Hr Security Management Commands Figure 44 Groups gt Cisco WLC Config Page Illustration expanded view EFWLANs EHController EHWireless EFSecurity EHManagement EHCommands EFAdvanced General Mesh FAAA SNMP L Reset Time L AP Groups Mobility Management 802 11a n 802 11b a n RADIUS prs Receivers Ly obility Groups Network Network es Trap Controls NTP RRM RRM Fallback Gidag Gone Advanced RF Grouping RF Grouping TACACS L Spanning Tree TPC TPC AP Policies DCA DCA Priority Order Coverage Coverage L Management User sr Wireless Protection Policies Pico Cell Pico Cell Rogue Policies Client Roaming Client Roaming Le Hist ni Client Exclusion Policies EDCA Parameters EDCA Parameters Web Auth DFS 802 11h High Throughput Web Login Page High Throughput 802 11n 802 11n 92 Configuring and Using Device Groups in AWMS Dell PowerConnect W AirWave 7 2 User Guide K Configuring WLANs for Cisco
402. on to RAPIDS R 165 Viewing Overall Network Health on the RAPIDS gt Overview Page 166 Settima UO RAPIDS saarea TOE E 167 Basic CONTIG Ua tl OM EE RN Chsskiettirtna um prin OR dri a ren Sdn emis cR UE EE E 167 Rogue Containment Options essen nnne nnne nnn tnn 168 Additonal Settings EE EE e 169 Defining RAPIDS Ruli S iseenausiissa nnana Ea N a 169 Controller Classification with WMS Offload esee 170 Dave Eee EE RR 170 Rogue Device Threat Level entente 171 Dell PowerConnect W AirWave 7 2 User Guide Viewing and Configuring RAPIDS Rules rsrarenvsranvrverenvsrenvsvnrenrnvenesvrnenesvnvenesvensnennevenens 171 Deleting or Editing a Rule nennen tnnt 173 Recommended RAPIDS Rules nnns 173 Using RAPIDS Rules with Additional AWMS Functions eese 174 Viewing Rogues on the RAPIDS gt List Page 174 Overview of the RAPIDS gt Detail Page sese 176 Viewing Ignored Rogue Devices c ccceccssssessssesssscsssseeecseseeseseesesecsesaesesaesesaeseeaneesensasenses 177 Using RAPIDS Workflow to Process Rogue Devices mmmrnrnnnmmmmmmmmemenenen 177 S e UTERE EE SE 177 nnno TER E 178 Additional Security Resources eese netten tnter nennt 179 Chapter 8 Performing Daily Administration in AWMS eene 181 Overview of Trigger
403. one or more Cisco WLC controllers can be configured on Groups gt Cisco WLC Config Figure 40 illustrates an example of the Groups gt SSIDs page Figure 40 Groups gt SSIDs Page Illustration WLANs an a Cisco WLC can be configured on the Cisco WLC Config page New SSID VLAN First Radio Second Radio SSID w YLANID Name Encryption Mode Enabled Primary Enabled Primary Native VLAN stores 11 gt Mo Encryption OQ O O distribution 1 Mo Encryption L D O O corp 51 gt Mo Encryption D O Select All Unselect All NOTE AWMS reports users by radio and by SSID Graphs on the AP and controller monitoring pages display bandwidth in and out K based on SSID AWMS reports can also be run and filtered by SSID An option on the AMP Setup gt General page can age out SSIDs and their associated graphical data by default this is set to 365 days 1 Go to Groups gt List and select the group name for which to define SSIDs VLANS 2 Select the Groups gt SSIDs configuration page lable 52 describes the information that appears for SSIDs and VLANs that are currently configured for the device group Table 52 Groups gt SSIDs Fields and Descriptions Field Description SSD Displays the SSID associated with the VLAN Displays the name of the VLAN VLAN ID Identifies the number of the primary VLAN SSID on which encrypted or unencrypted packets can pass between the AP and the switch Dell PowerConnect W AirWave 7 2 User G
404. onfig template you can use the interface variable within the IF construct The below example illustrates this usage SIF interface DotliRadiol interface DotliRadiol bridge group 1 bridge group 1 block unknown source bridge group 1 spanning disabled bridge group 1 subscriber loop control no bridge group 1 source learning no bridge group 1 unicast flooding no ip address no ip route cache rts threshold 2312 speed basric 6 0 basic 9 0 basic 12 0 basic 18 0 basric 24 0 36 0 42 0 54 0 Ssid decibel ios a authentication open guest mode station role root SENDIFS Configuring Cisco Catalyst Switch Templates Cisco Catalyst Switch templates are configured much like Cisco IOS templates with the addition of the interfaces and switch_command for stacked switches variables Interfaces can be configured on the Device Interface pages as shown in Configuring Device Interfaces for Cisco Catalyst Switches on page 138 You can import interface information as described in this section or by fetching a template from that device as described in Configuring General Templates on page 154 2 NOTE Just one template is used for any type of Cisco IOS device and another is used for any type of Catalyst Switch regardless of individual model 160 Creating and Using Templates Dell PowerConnect W AirWave 7 2 User Guide Configuring Symbol Controller HP WESM Templates This section describes the configuration of templates for Symbol cont
405. onfigures the web server Configure the Add Group gt Administrator page with a name 0 Enable IP Binding type 1 At the next interface enter the IP address and mask of the server Enter etc init d hpasm reconfigure When going through this menu this time select y to use the existing snmpd conf Enter vi etc snmp snmpd conf Change the following two lines rwcommunity xxxstringxxx 127 0 0 1 focommunity xxxstringxxx 127 0 0 1 Change these lines to read as follows rwcommunity xxxstringxxx rwcommunity xxxstringxxx Enter service snmpd restart Enter user add xxusernamexx Enter passwd xxusernamexx and enter a password for the user Enter vi etc passwd Scroll to the bottom of the list and change the new users UID and GroupID to 0 fourth and fifth column Connect to the server using https xxx xxx xxx xxx 2381 and the username and password that you created in steps 9 and 10 Dell PowerConnect W AirWave 7 2 User Guide HP Insight Install Instructions for AWMS Servers 269 270 HP Insight Install Instructions for AWMS Servers Dell PowerConnect W AirWave 7 2 User Guide Appendix G Installing AWMS on VMware ESX 3i v 3 5 This appendix provides complete instructions for installing AWMS on VMware ESX 31 v 3 5 and includes the following sections Creating a New Virtual Machine to Run AWMS on page 271 Installing AWMS on the Virtual Machine on page 271 AWMS Post Installation Issues on
406. onsole for additional details about the device MobiControl information overrides data obtained by ArubaOS 6 0 controllers Accessing MobiControl from the Users gt User Detail Page In order to access the MobiControl web console for a SOTI managed mobile device from within AWMS follow these steps l Navigate to a page that lists clients This can include Users gt Connected or Users gt All Search results that display user MAC address 2 Select the MAC address in the Users list table The Users gt User Detail page displays 3 Under the Classification field select the View device in SOTI MobiControl link new window will display the MobiControl Web Console for this device Monitoring and Supporting AWMS with the Home Pages The Home tab of AWMS provides the most frequent starting point for monitoring network status and establishing primary AWMS functions once AWMS configuration is complete Access the following pages The Home gt Overview page condenses a large amount of information about your AWMS You can view the health and usage of your network and use shortcuts to view system information Refer to Monitoring AWMS with the Home gt Overview Page below The Home gt Search page provides a simple way to find users managed devices groups and rogues Refer to Searching AWMS with the Home gt Search Page on page 202 The Home gt Documentation page contains all relevant AWMS documentation See Accessing AWMS
407. or use by the group Radio Preamble Long This setting determines whether the APs uses a short or long preamble The preamble is generated by the AP and attached to the packet prior to transmission The short preamble is 50 percent shorter than the long preamble and thus may improve wireless network performance NOTE Because older WLAN hardware may not support the short preamble the long preamble is recommended as a default setting in most environments 4 Certain APs offer proprietary settings or advanced functionality that differ from prevailing industry standards If you use these APs in the device group you may wish to take advantage of this proprietary functionality 88 Configuring and Using Device Groups in AWMS Dell PowerConnect W AirWave 7 2 User Guide To configure these settings locate the proprietary settings areas on the Groups gt Radio page and continue with the additional steps in this procedure 2 NOTE Proprietary settings are only applied to devices in the group from the specific vendor and are not configured on devices from vendors that do not support the functionality 5 To configure HP ProCurve 420 settings exclusively locate the HP ProCurve 420 section and adjust these settings as required Table 59 describes the settings and default values Table 59 Groups gt Radio gt HP ProCurve 420 Fields and Default Values Setting Default Description Slot Time Auto Short slot time mechanism if
408. ort 0 4 23 2009 2 12 PM 4 23 2009 2 23 PM 190 AHK Open aruba se 0 4 21 2009 2 39 AM 4 21 2009 2 39 AM 189 Bryan s network problem Open mbruno 1 4 20 2009 11 25 AM 4 20 2009 11 26 AM 185 Peters connection problems Open mbruno 1 4 9 2009 7 44 AM 4 9 2009 7 45 AM 184 dcomforts wlan issue Open aruba se 0 4 7 2009 1 02 AM 4 7 2009 1 02 AM 183 Joe s Incident Open aruba se 0 4 6 2009 4 51 PM 4 6 2009 4 51 PM 182 Test pen ARUBATM 0 4 6 2009 7 58 AM 4 6 2009 7 58 AM 181 euls wlan issue Open aruba se 0 4 5 2009 10 19PM 4 5 2009 10 19 PM 177 Axians connectie probleem Open aruba se 0 3 31 2009 6 49 AM 3 31 2009 6 49 AM 175 gary test Open aruba se 0 3 25 2009 3 36PM 3 25 2009 3 36 PM Select All Unselect All The table in Helpdesk gt Incidents displays the count of incidents by state and by time You can sort incidents from within any category of information whether in sequential or reverse sequential order You can display all incidents or strictly open or closed incidents and you can display incidents according to the person who created them Finally the Helpdesk gt Incidents page allows you to add or delete incidents Table 136 Helpdesk gt Incidents Top Table Column Description State Displays three states as they apply as follows Open currently under investigation Closed resolved The total incident count Shows the count of incidents in the last two hours th
409. orts gt Generated page Visibility Email Report Select Yes to display sender and recipient fields Enter the Sender Address where marked to Indicate the address that appears in the From field of the emailed report Enter recipient email addresses separated by commas when using multiple email addresses NOTE AWMS will not attempt to email a report with an excessively large number of rows in the detail section In the report restrictions section you can customize any detailed information contained in a chosen report Figure 181 shows a sample Report Restrictions page Dell PowerConnect W AirWave 7 2 User Guide Creating Running and Emailing Reports 243 Figure 181 Report Restrictions Illustration R t Restricti Group All Groups i Folder All Folders v 55ID All SSIDs v Number of items to include in memory CPU 10 summary Greater than or equal to 1 Usage by SSID JG Interval SSID Max Users Max BW In kbps Max BW Out kbps Avg Users Avg BW In kbps Avg BW Out kbps See ee eS odo By default all data will be included Deselect the checkbox to hide specific information The list can also be reordered by dragging and dropping the separate lines The order displayed here will match the column order in the report 3 Do one of the following Select Add and Run to generate the report immediately in addition to saving report settings Select Run Now to genera
410. orts configured for the current role and for additional roles e Generated reports for other roles e The latest daily reports for immediate online viewing Figure 156 Reports gt Generated Page Example Generated reports Visit the Report Definitions page to run new reports 1 20 w of 959 Reports Pace 1 of 48 gt gt vane 5 21 2009 3 24 AM test war Usage All Groups Folders and SSIDs 11 21 2008 2 51 AM 5 21 2009 2 51 AM 5 21 2009 3 05 AM yourdomain user session User Session All Groups Folders and SSIDs 5 20 2009 2 00 AM 5 21 2009 2 00 AM g 5 21 2009 3 05 AM yourdomain radius authentication issues RADIUS Authentication Issues All Groups Folders and SSIDs 5 20 2009 2 00 AM 5 21 2009 2 00 AM 5 21 2009 2 48 AM yourdomain new users New Users All Groups Folders and SSIDs 5 20 2009 2 00 AM 5 21 2009 2 00 AM g 5 21 2009 2 48 AM yourdomain new rogue devices New Rogue Devices All Groups and Folders 5 20 2009 2 00 AM 5 21 2009 2 00 AM 95 21 2009 2 48 AM yourdomain network usage Network Usage All Groups Folders and SSIDs 5 20 2009 2 00 AM 5 21 2009 2 00 AM g 5 21 2009 2 24 AM yourdomain memory and cpu utilization Memory and CPU Utilization All Groups and Folders 5 20 2009 2 00 AM 5 21 2009 2 00 AM 5 21 2009 2 23 AM yourdomain inventory Inventory All Groups and Folders 95 21 2009 2 23 AM yourdomain ids event IDS Events All Groups and Folders 5 20 2009 2 00 AM X 5 21 2009 2 00 AM Select All Unselect All Gener
411. ots and other records to be associated to existing incidents These appear next to the Help link Refer to Figure 184 Dell PowerConnect W AirWave 7 2 User Guide Using the AWMS Helpdesk 249 Figure 184 Helpdesk Icons on Additional Pages Device Setup Setu RAPIDS VisualRF F 12 Greg can t connect to the network a ll C Help Table 139 describes the Helpdesk icon components Table 139 Helpdesk Icon Components Description Current Incident ID number and description Identifies the current incident of focus in the Helpdesk header Selecting the link brings up the Incident Edit page see above Mousing over the incident brings up a summary popup of the incident Relates the device group or clientto the incident see below for more details Attaches a snapshot of the page to the incident This feature can be used to record a screenshot of information and preserve it for future troubleshooting purposes EN Creates a new incident report Choose a new incident from the list of created incidents to be the Current Incident see description of icon above Creating New Snapshots or Incident Relationships Snapshots or relationships can be created by selecting the Helpdesk header icon see Table 139 on the screen that needs to be documented Snapshots or relationships can then be related to the current incident in the popup window To attach them to another incident select Choose a New Incident Relationship
412. ounters and summarizes the number of times an expected acknowledgement frame was not received the number of duplicate frames the number of frames containing Frame Check Sequence FC5 errors and the number of frame packet transmission retries and failures These aggregate error counts are broken down by Current Last Hour Last Day and Last Week time frames as illustrated in Figure 82 Figure 82 802 11 Radio Counters Summary table 802 11 Radio Counters Summary frames sec Current Last Hour Last Day Last Week Unacked 0 0 0 1 Retries 0 0 0 0 Failures i 0 1 Dup Frames 0 0 0 0 FACS Errors 380 380 386 464 The frame per second rate of these and other 802 11 errors over time are tracked and compared in the 802 11 Counters graph on the same page Radio Statistics Interactive graphs Time series graphs for the radio are displayed across a tabbed dual pane interface to show changes recorded at every polling interval over time Users and Bandwidth data are polled based on the AP s group s User Data Polling Period Channel Noise and Power are based on AP Interface Polling Period 802 11 Counters data are based on the AP s group s 802 11 Counters Polling Period You can adjust the attributes of these graphs as follows Drag the horizontal slider under the graphs to move the scope of all graphs between one year ago and the current time Drag the vertical slider between graphs to change the relative width of each The Show All link
413. own during a reboot or a complete system shutdown mv eto ro d ro3 d S40smartd etc rco d rc3 d Z40smattd my eto ro d rc0 d KJM 0smartd etec ro d ro3 d Z40smattd mv etc rc d rc6 d KA40smartd etc rc d rc3 d Z40smartd To install VMware Tools on AWMS perform these steps l From the VMware Infrastructure Client select Inventory gt Virtual Machine gt Install Upgrade VMware Tools 2 At the AWMS console type mkdir media cdrom 3 Then type mount dev cdrom media cdrom 4 Next type cd tmp tar xvzf media cdrom VMwareTools 3 5 0 6792 tar gz The VMware Tools filename may be different depending on the version of VMware installed Ln NOTE Desktop environments such as X Windows GNOME and KDE that you will need to use for VMware tools installation will no longer work once you have AWMS installed 5 Run the VMware Tools setup and install script by typing the following statement tmp vmware toolsdistrib vmware install pl 6 During the text based VMware Tools install select all default options 7 Reboot the virtual machine once the VMware Tools install is complete 272 Installing AWMS on VMware ESX 3i v 3 5 Dell PowerConnect W AirWave 7 2 User Guide Appendix H Third Party Copyright Information AMP contains some software provided by third parties both commercial and open source licenses Source code to third party open source packages are available on AirWave s website and by request This product
414. plate available for the respective firmware Select the link from such a note to launch the Add Template configuration page for that device Name Displays the template name Device Type Displays the template that applies to APs or devices of the specified type If vendor Any Model is selected the template applies to all models from that vendor that do not have a version specific template defined If there are two templates that might apply to a device the template with the most restrictions takes precedence Status Displays the status of the template Fetch Date sets the date that the template was originally fetched from a device 150 Creating and Using Templates Dell PowerConnect W AirWave 7 2 User Guide Table 88 Groups gt Templates Fields and Default Values Continued Description Version Designates that the template only applies to APs running the version of firmware specified If the restriction is Restriction None then the template applies to all the devices of the specified type in the group If there are two templates that might apply to a device the template with the most restrictions takes precedence If there is a template that matches a devices firmware it will be used instead of a template that does not have a version restriction 3 To create a new template and add it to the AWMS template inventory go to the Groups gt List page and select the group name and the Details page appears Select Templates then Ad
415. ports on page 242 Emailing and Exporting Reports on page 245 AWMS ships with several reports enabled by default Default reports may run nightly or weekly depending on the AWMS release Review the list of defined and scheduled reports with the Reports gt Generated and Reports gt Definition pages to determine if default reports are desired If not you can delete disable or reschedule them AWMS supports additional specialized reports as follows System gt Status page supports the diagnostic report file for sending to customer support diagnostics tar gz System gt Status page supports the VisualRF diagnostics report file Visual RF diag tar gz VisualRF gt Network View supports the Bill of Materials BOM report Refer to the VisualRF User Guide in Home Documentation Overview of AWMS Reports Reports are powerful tools in network analysis user configuration device optimization and network monitoring on multiple levels Among their benefits reports provide an interface for multiple configurations AWMS reports have the following general parameters AWMSS runs daily versions of all reports during predefined windows of time All reports can be scheduled to run in the background The daily version of any report is available instantly in the Reports gt Generated page The Inventory and the Configuration Audit reports are the only reports that don t span a period of time Instead these two reports provide a sn
416. prerequisites Bluesocket version 2 1 or higher AWMSS version 1 8 or higher Completion of AMP Setup gt RADIUS Accounting page Bluesocket Configuration Perform these steps to configure a Bluesock security scheme Log in into the Bluesocket Server via HTTP with proper user credentials Navigate to the Users gt External Accounting Servers page Select External RADIUS Accounting from the Create drop down list Select Enable server onscreen Enter the user definable Name for the AWMS server Enter the Server IP Address or DNS entry for AWMS Accept the default Port setting of 1813 Enter the Shared Secret matching the AWMS shared secret per pe wp ow er ume So NP xc Enter Notes optional D Select Save 11 If you are using an External LDAP Server ensure that the accounting records are forwarding to AWMS upon authentication 12 Navigate to Users gt External Authentication Servers 13 Modify the LDAP server 14 Ensure under the Accounting server matches the server entered in step 5 15 Select Save 16 To verify and view the log files on the Bluesocket server proceed to Status gt Log 17 To verify and view the log files on AWMS proceed to System gt Event Log ReefEdge Integration A ReefEdge security scheme for AWMS has the following prerequisites ReefEdge version 3 0 3 or higher Dell PowerConnect W AirWave 7 2 User Guide Third Party Security Integration for AWMS 257 AWMSS vers
417. procedures assume you are familiar with the function buttons available to save apply revert and so on For details on button functions see Buttons and Icons on page 25 Moving a Device from Monitor Only to Manage Read Write Mode Once the device configuration status is Good on the APs Devices gt List page or once you have verified all changes that will be applied to the device on the APs Devices gt Audit page you can safely shift the device from Monitor Only mode to Manage Read Write mode 2 NOTE Once a device is in Manage mode AWMS will push a new configuration to the device in the event that the actual device configuration does not match the AMP configuration for that device To move a device from Monitor Only to Manage Read Write mode perform the following steps l Goto the APs Devices gt List page and select the wrench icon next to the name of the AP to be shifted from Monitor Only mode to Manage Read Write mode This directs you to the APs Devices gt Manage page 132 Discovering Adding and Managing Devices Dell PowerConnect W AirWave 7 2 User Guide 2 Locate the General area as shown in Figure 93 Figure 93 APs Devices gt Manage gt General Section Illustration General Name symbol 3021 1 Status Up OK Configuration Good Ignoring mismatches Last Contacted 5 19 2009 12 21 PM Type Symbol 3021 Firmware 01 02 19 Group HQ Folder Top HQ Management Made O Monitor Only Firmware Upgrades
418. ps defined in AWMS and enables you to display information for any or all of them Use the Groups pages to edit add or delete groups that appear in this section See Configuring and Using Device Groups in AWMS on page 69 View latest reports AWMS supports creating custom reports or viewing the latest daily version of any report Select any reporttype to display the daily version See Creating Running and Emailing Reports on page 219 Common Tasks This menu lists quick links to the most heavily used task oriented pages in AWMS to incl ude the following Configure Alert Thresholds This link takes you to the System Triggers page See Overview of Triggers and Alerts on page 181 Configure Default Credentials This link takes you to the Device Setup Communication page See Configuring Communication Settings for Discovered Devices on page 47 Discover New Devices on Your Network This link takes you to the Device Setup gt Discover page See Discovering Adding and Managing Devices on page 107 Supported Devices and Features This link displays a PDF that summarizes all supported devices and features in chart format for AWMS Upload Device Firmware This link displays the Device Setup gt Firmware amp Files Upload page See Overview of the Device Setup Upload Firmware amp Files Page on page 49 View Event Log This link displays the System gt Event Log page See Using the System gt Event Log
419. pter before proceeding Dell support remains available to you for any phase of AWMS installation Configuring RADIUS Authentication and Authorization For RADIUS capability you must configure the IP Hostname of the RADIUS server the TCP port and the server shared secret Perform these steps to configuration RADIUS authentication l Go to the AMP Setup gt Authentication page This page displays current status of RADIUS Figure 25 illustrates this page 54 Configuring AWMS Dell PowerConnect W AirWave 7 2 User Guide Figure 25 AMP Setup gt Authentication Page Illustration TACACS Configuration Enable TACACS Authentication and Authorization Primary Server Hostname IP Address Primary Server Port Primary Server Secret Confirm Primary Server Secret Secondary Server Hostname IP Address Secondary Server Port Secondary Server Secret Confirm Secondary Server Secret 2 Yes O Ma 490 LEE o RADIUS Configuration Enable RADIUS Authentication and Authorization Primary Server Hostname IF Address Primary Server Part Primary Server Secret Confirm Primary Server Secret Secondary Server Hostname IP Address Secondary Server Port Secondary Server Secret Confirm Secondary Server Secret 2 Yes OQ Ma 10 200 200 200 1812 Lu 2 Select No to disable or Yes to enable TACACS or RADIUS authentication If you select Yes several new fields appear Complete the fields described in
420. r Console pages that display device lists such as Home gt Overview and APs Devices gt List e The Master Console and Failover servers can be configured with a Managed AMP Down trigger that generates an alert if communication is lost to a managed or watched AWMS station The Master Console or Failover server can also send email or NMS notifications about the event See Overview of Triggers and Alerts on page 181 K NOTE The license key determines if the server will behave as a Master Console or as a standard AWMS server Using the Public Portal on Master Console The Master Console also contains an optional Public Portal which allows any user to view basic group level data for each managed AWM S This feature is disabled by default for security reasons no AWMS or Master Console login is required to view the public portal The Public Portal can be enabled in AMP Setup gt General in the Master Console section Once enabled a new Portal tab will appear to the right of the Groups tab refer to the navigation section in Figure 151 in the previous page The URL of the public portal will be https your AMP name public When you upgrade to the latest version of AWMS the public portal is disabled by default regardless of the type of license Figure 152 Public Portal Page Illustration 19 acceptance test Thi 1 ME
421. r Sete Fe Dem BF fr BL r Bl Ferrie DE Pria m m AE B cam kiim e Dm TERT fr Lt r m 1 AT HT Hr Han 15 o HII naX ST ni HIE Mini dei BLS RLA 1 Hg amp 583 4 135 Gilt Bail LET 1J k a Re Wil 4 LE a BL Pais Eid a Iim m ra i im LAN DE i Hr Has Ly m INIR Elan d Re e erie ME ceRA SUR Te p mama n og ass LR Dn us Fi HH ki LL hdi ats FEM We DIE ELI Bel eee font gt re bab ib BE Vine kiim L ie HL bi BVicel tok 5 Fri Bob Bites Emm iiim ik dix Hr br Bites breer irah lih onn HE bu F aul frise 12M ru H I ib Bada ris IIb s re ahh aka ed al murum le EFE kb d rbi tp lete lx rn li l aka 51 EE amp ix L a EE E Hx iia biai F nx T ui He HE HE Ing TIE Er rer bps Chas DUFF br Penn 1E 3 mu EX en EFH CE Amm ori Kal Ar Hol i HF f Peon laa im ED dw Dae A Lacs Ti Takdir Bese Come deji a cH Er Dares other Derr 2 Aevi bue EI frre rrr i imani ore bd 3 FAI Gi irum ira Eiu BNI sa EUNEHE Hx Li LE Fi x z umm ore haa Soe Fae RITU TET 1 3 ne ad haa Maar Tum v rs d b o Eo i TJEN has Bpis dk MLE abend ilre Bw san paraz eg rx m smsi tuu Po mirceam mw M l m1 Bisel ie p di gm rom ma tg s Dell PowerConnect W AirWave 7 2 User Guide Performing Daily Administration in AWMS 209 Table 122 System gt Performance Page Fields and Graphs Field Description Server Hardware Guide in Home gt
422. r defaults 4 1 1 Use strong encryption in wireless networks Pass A device fails if the desired or actual configuration reflect that WEP is enabled or if associated users can connect with WEP 11 1 Identify unauthorized wireless devices Pass A report will indicate a failure if there are unacknowledged rogue APs present in RAPIDS or there are no wireless rogues discovered in the last three months 11 4 Use intrusion detection systems and or intrusion prevention systems to monitor all traffic Pass A report will indicate a pass for the requirement if AWMS is monitoring devices capable of reporting IDS events Recent IDS events will be summarized in the report Dell PowerConnect W AirWave 7 2 User Guide Creating Running and Emailing Reports 235 Using the Port Usage Report You can generate a wide array of port usage statistics from the Port Usage Report including each of the following e List of all the switches and ports in your network by folder e List of unused ports e List of access and distribution ports e Histogram displaying unused ports vs unused switches by type access or distribution e List of most used switches e List of most used ports A sample of the types of information used to generate in a Port Usage Report appears in Figure 170 Figure 170 Port Usage Report Detail Page partial view Daily Port Usage Report for All Groups and Folders 1 13 2011 12 00 AM to 1 14 2011 12 00 AM Generated on 1 14 2011 12
423. r devices may be impacted modestly during a rogue scan 10 Locate the Proxim 4900M section and define the required fields Table 64 describes the settings and default values Table 64 Groups Radio Proxim 4900 Fields and Default Values Setting Default Description 4 9GHz Public Safety 20 This setting specifies the channel bandwidth for the 4 9 GHz radio It is only applicable Channel Bandwidth if you are running the 802 11a 4 9GHz radio in 4 9GHz mode 802 11a 4 9GHz Public 802 11a This setting specifies if the AP will run the 802 11a 4 9GHz radio in 802 11a mode or in Safety Operational Mode 4 9 GHz mode Please note that 4 9 GHz is a licensed frequency used for public safety 11 Locate the Symbol section and define the required fields Table 65 describes the settings and default values Table 65 Groups Radio Symbol Fields and Default Values Default Description If enabled Symbol APs with 3 9 2 or later firmware in the group will passively scan for rogue APs at the specified interval This rogue scan will not break a user s association to the network Rogue Scanning Interval 5 480 min conducted in minutes Frequent scans provide the greatest security but AP performance and throughput available to user devices may be impacted modestly during a rogue scan Rogue Scanning If rogue scanning is enabled this setting controls the frequency with which scans are 12 Select Save when radio configura
424. r network Figure 56 illustrates this page lable 67 and Table 68 describe the settings and default values Dell PowerConnect W AirWave 7 2 User Guide Configuring and Using Device Groups in AWMS 97 Figure 56 Groups gt Proxim Mesh Page Illustration General Security Mesh Radio 4 9 5 Ghz SSID Wireless Mesh Maximum Mesh Links 1 32 6 Enable AES Yes 9 No Neighbor RSSI Smoothing 15 w rarer Roaming Threshold 0 100 80 e Hop Factor 0 10 2o Deauth Client When Uplink is Down Yes No Maximum Hops to Portal 1 4 4 RSSI Factor 0 10 5 RSSI Cut Off 0 26 10 Medium Occupancy Factor 0 10 5 Current Medium Occupancy Weight 0 9 7 The General section contains settings for mesh radio number of mesh links RSSI smoothing roaming threshold and de auth client Table 67 Groups gt Proxim Mesh gt General Fields and Default Values Setting Default Description Mesh Radio 4 9 5Ghz Drop down selects the radio that acts as the backhaul to the network Max Number of Mesh Sets the maximum number of mesh links allowed on an AP This number includes Links the uplink to the portal as well as downlinks to other mesh APs Neighbor RSSI Specifies the number of beacons to wait before switching to a new link Smoothing Roaming Threshold Specifies the difference in cost between two paths that must be exceeded before the AP roams To switch to a new path it must have a cost that is less by
425. ration groups of the devices Using folders you can quickly view basic statistics about devices You must use folders if you want to limit the APs and devices AWMS users can see Folder views are persistent in AWM S If you select the Top folder and then select the Down link at the top of the page you are taken to all of the down devices in the folder If you want to see every down device select the Expand folders to show all devices link When the folders are expanded you see all of the devices on AWMS that satisfy the criteria of the page You also see an additional column that lists the folder containing the AP Perform the following steps to add a device folder to AWMS l To add a folder select the Add New Folder link in APs Devices gt List Figure 92 illustrates the page Figure 92 Folder Creation Page Illustration Folder Folder m Parent folder Top a C xmi 7 2 Enter the name of the new folder 3 Select the Parent folder 4 Select Add Once a new folder has been created devices can be moved into it using the Modify Devices link or when New Devices are added into AWMS Dell PowerConnect W AirWave 7 2 User Guide Discovering Adding and Managing Devices 131 Configuring and Managing Devices This section contains the following topics describing individual device configuration within device groups Moving a Device from Monitor Only to Manage Read Write Mode on page 132 Configuring A
426. ration file merges the two configurations and can cause undesired configuration lines to remain active on the AP 8 Restrict the template to apply only to the specified version of firmware If the template should only apply to a specific version of firmware select Yes and enter the firmware version in the Template Firmware Version text field 9 Select Save and Apply to push the configuration to all of the devices in the group If the devices are in monitor only mode which is recommended while you are crafting changes to a template or creating a new one then AWMS will audit the devices and compare their current configuration to the one defined in the template K NOTE If you set the reboot flag to No then some changes could result in configuration mismatches until the AP is rebooted 154 Creating and Using Templates Dell PowerConnect W AirWave 7 2 User Guide For example changing the SSID on Cisco IOS APs requires the AP to be rebooted Two other settings that require the AP to be rebooted for configuration change are Logging and NTP A configuration mismatch results if the AP is not rebooted If logging and NTP service are not required according to the Group configuration but are enabled on the AP you would see a configuration file mismatch as follows if the AP is not rebooted IOS Configuration File Template no logging queue limit Device Configuration File on APs Devices gt Audit Configuration Page line
427. re elei NR 12 Contacting SUD OF mtm SEDDS OE RUE IDDd UBI pEU D ERIMSI DUREE DEIN DINE 12 Chapter 1 Mod 13 AWMS A Unified Wireless Network Command Center esses 13 AirWave Management Platform sessi entente tnnt 13 Dell PowerConnect W Configuration nnns 14 VA 14 RAPID S 4 14 Master Console and Failover sees ennt 15 Integrating AWMS into the Network and Organizational Hierarchy 15 Chapter 2 TESTO PAS ASIE 17 AWMS Hardware Requirements and Installation Media sssss 17 Installing Linux CentOS 5 Phase 1 17 Installing AWMS Software Phase 2 sermvevervvvrvrvrvrvrrrrererereresesererrerrrsrererererevenesesssssssssrerern 18 OS NN SLI TROP TTE EE NE 18 Step 1 Configuring Date and Time Checking for Prior Installations 18 Brix Bc 18 Previous AWMS Installations essent 18 Step 2 Installing AWMS Software Including AWMS esee 19 Step 3 Checking the AWMS Installation eoreoorevrrererrrrrererrrrerervrnrnesvrnensvrvaresnensnvrnenennnn 19 Step 4 Assigning an IP Address to the AWMS System esses 19 Step 5 Naming the AWMS Network Administration System 19 Step 6 Assigning a Host Name to the AWMS
428. rm the following steps and configurations to enable AWMS to receive accounting records from a separate RADIUS server Figure 26 illustrates the display of RADIUS accounting clients already configured and Figure 27 illustrates the Add RADIUS Accounting Client page Dell PowerConnect W AirWave 7 2 User Guide Configuring AWMS 55 Figure 26 AMP Setup gt RADIUS Accounting Page Illustration Add New RADIUS Accounting Client Import CSV IP Network Nickname F 10 0 0 0 8 test 10 11 0 0 16 off site network Check All Uncheck All Delete Figure 27 AMP Setup gt RADIUS gt Add RADIUS Accounting Client Page Illustration RADIUS Accounting Client Example Metwork entry 10 0 0 0 8 Mickname Shared Secret Confirm Shared Secret o m l To specify the RADIUS authentication server or network browse to the AMP Setup gt RADIUS Accounting page and select Add illustrated in Figure 27 and provide the information in lable 30 2 Select Add Table 30 AMP Setup RADIUS Accounting Fields and Default Values Setting Default Description Nickname None Sets a user defined name for the authentication server IP Network Cites the IP address or DNS Hostname for the authentication server if you only want to accept packets from one device To accept packets from an entire network enter the IP Netmask of the network for example 10 51 0 0 24 Shared Secret Sets the Shared Secret that is used to establis
429. rnative databackup tar gz Restoring from a Backup To restore a backup file on a new machine 1 Use your AWMS Installation CD to build a new machine The new machine must be running the same version as the AWMS that created the backup file 2 Copy the nightly data00 1 4 tar gz file to the tmp directory in the new AWMS A file transfer client that supports SFTP SCP for Windows is WinSCP winscp sourceforge net eng WinSCP allows you to transfer the nightly00 1 4 tar gz file from your local PC to the new AWMS using the secure copy protocol SCP Log onto the new server as root 4 Change to the scripts directory by typing scripts 5 Run the restore script by typing amp restore d tmp nightly data00 1 4 tar gz Vi NOTE Network administrators can now use the nightly backup from a 32 bit AMP to restore AMP on a 64 bit installation rather than having to create a special backup file or use the special restore script Using AWMS Failover for Backup The failover version of AWMS provides a many to one hot backup server The Failover AWMS polls the watched AMPs to verify that each is up and running If the watched AWMS is unreachable for the specified number of polls the Failover AWMS automatically restores the most recent saved backup from the watched AWMS and begins polling its APs Dell PowerConnect W AirWave 7 2 User Guide Performing Daily Administration in AWMS 215 Navigation Section of AWMS Failover The Nav
430. rocedure requires that you have local or network access to a Web Auth configuration file for Cisco WLC devices Perform these steps to add or edit Web Auth bundles in AWMS 1 Go to the Device Setup gt Upload Firmware amp Files page This page displays any existing Web Auth bundles that are currently configured in AWM S and allows you to add or delete Web Auth bundles 2 Scroll to the bottom of the page Select Add New Web Auth Bundle to create a new Web Auth bundle see Figure 23 or select the pencil icon next to an existing bundle to edit You may also delete Web Auth bundles by selecting that bundle with the checkbox and selecting Delete Figure 23 Add Web Auth Bundle Page Illustration Web Auth Bundle S Sooo i 3 Enter a descriptive label in the description field This is the label used to identify and track Web Auth bundles on the page 4 Enter the path and filename of the Web Auth configuration file in the Web Auth Bundle field or select Choose File to locate the file 5 Select Add to complete the Web Auth bundle creation or Save if replacing a previous Web Auth configuration file or Cancel to abort the Web Auth integration For additional information and a case study that illustrates the use of Web Auth bundles with Cisco WLC controllers refer to the following document on Cisco com Wireless LAN controller Web Authentication Configuration Example Document ID 69340 www cisco com en US tech tk722 tk809 technolog
431. roduce the above copyright notice this list of conditions and the following disclaimer in the documentation and or other materials provided with the distribution Neither the name of the Networks Associates Technology Inc nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED IN NO EVENT SHALL THE COPYRIGITI HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT INDIRECT INCIDENTAL SPECIAL EXEMPLARY OR CONSEQUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES LOSS OF USE DATA OR PROFITS OR BUSINESS INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY WHETHER IN CONTRACT STRICT LIABILITY OR TORT INCLUDING NEGLIGENCE OR OTHERWISE ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE Part 3 Cambridge Broadband Ltd copyright notice BSD Portions of this code are copyright c 2001 2003 Cambridge Broadband Ltd All rights reserved Redistribution and use in source and binary forms with or without modification are permitted provided that the following conditions are met Redistributions of source
432. role by selecting Yes in the Customize Header Columns field as also appears in Figure 3 This exposes the Choose Columns for Roles dropdown menu in all tables shown in Figure 5 The first column shows the user roles that were customized if any The second column allows you to establish left to right columns and order them using the arrows 30 Configuring AWMS Dell PowerConnect W AirWave 7 2 User Guide Figure 5 Table With Choose Columns for Roles Menu Selected 1 3 w of 3 APs Devices Page 1 v of 1 Bch hoose Columns 5 Choose Columna for Roles Export to CSV S Save Cancel kbps M cisco2960 1 Admin Team M cisco3560 v Device t AMC v switch7 Status t Administration 1 3 w of 3 APs Devices Page 1 w of 1 Upstream Device 1 AP Device Management APs 1 Config Role Select All Unselect All Users 1 corp users via radius BW kbps i jAustinISD Resetting Pagination Records To control the number of records in any individual list select the link with Records Per Page mouseover text at the top left of the table as shown in Figure 6 AWMS remembers each list table s pagination preferences Figure 6 Records Per Page Dropdown Menu 1 5 of 36 Reports Page iwof7 gt gt Choose Columns Export to CSV Records Per Page fime 1 20 2010 12 16 AM Daily PCI Compliance Report PCI Co 1 19 2010 12 16 AM Daily PCI Compliance Report PCI Co 1 18 2010 12 16 AM Daily PCI Compliance Report PCI Co LI LI 1 5
433. rollers and HP WESM devices Symbol controllers RFS x000 5100 and 2000 can be configured in AWMS using templates AWMS supports Symbol thin AP firmware upgrades from the controller s manage page sample running configuration file template is provided in this topic for reference template can be fetched from a model device using the Cisco IOS device procedure described in Configuring Cisco IOS Templates on page 155 Cisco IOS template directives such as ignore and do not push can also be applied to Symbol templates Certain parameters such as hostname and location are turned into variables with the tags so that device specific values can be read from the individual manage pages and inserted into the template They are listed in Available Variable boxes on the right hand side of the template fields Certain settings have integrated variables including ap 1icense and adopt ion preference id The radio preamble has been template integrated as well An option on the Group gt Templates page reboots the device after pushing a configuration to it A sample Symbol controller partial template 1s included below for reference configuration of RFS4000 version 4 2 1 0 005R version 1 4 aaa authentication login default local none Service prompt crash info network element id RFS4000 username admin password 1 Sbaa6le4c9b93f3f0682250b 6cf833lb7ee68fd8 username admin privilege superuser username operator password 1 fe96dd39
434. roup Any changes to a static field must be made on the Global Group If a Global Group has Subscriber Groups it cannot be changed to a non Global Group Global Group without Subscriber Groups can be changed to a regular Group by updating the setting on the Groups gt Basic configuration interface The Global Groups feature can also be used with the Master Console For more information about this feature refer to Supporting AWMS Servers with the Master Console on page 211 106 Configuring and Using Device Groups in AWMS Dell PowerConnect W AirWave 7 2 User Guide Chapter 5 Discovering Adding and Managing Devices This chapter describes how to add configure and monitor devices both wired and wireless and contains the following sections corresponding to features of the Device Setup and APs Devices tabs e Device Discovery Overview on page 107 e Discovering and Adding Devices on page 107 e Monitoring Devices on page 116 e Configuring and Managing Devices on page 132 e Troubleshooting a Newly Discovered Device with Down Status on page 143 e Setting up Dell Spectrum Analysis in AWMS on page 144 Device Discovery Overview Once you have deployed AWMS on the network the next step is to discover all existing devices connected to your network AWMS allows device discovery in the following ways all of which are described in this chapter e SNMP HTTP discovery scanning This is the primary method to
435. roup configuration can be enhanced with the AWMS Global Groups feature which lets you create Global Groups with configurations that are pushed to individual Subscriber Groups Viewing All Defined Device Groups To display a list of all defined groups browse to the Groups gt List page illustrated in Figure 35 Figure 35 Groups gt List Page Illustration Add New Group Compare two groups 1 41 w of 41 Groups Page i of1 Choose Columns CSV Export Name Up Down Status Polling Period Total Devices Is Global Group a Global Group Down Mismatched Ignored Users BW Duplicate SSID Changes ws5100 60 seconds 5 No gauss three 4 4 0 0 0 Unapplied Changes m infrastructure 60 seconds 31 No gauss two 9 16 0 0 0 K Guest RSN2OfficeWLAN m airespace 60 seconds 5 No gauss one 4 2 0 0 0 i 4000 8021x 4000 guest more SX GG test 5 minutes 0 Yes 0 0 0 0 0 a Guest RSN2OfficeWLAN Table 36 describes the columns in the Groups gt List page Table 36 Groups gt List Columns Column Description Add New Group Launches a page that enables you to add a new group by name and to define group parameters for devices in that group For additional information refer to Configuring Basic Group Settings on page 72 Manage Goes to the Groups gt Basic configuration page for that group Hover your mouse over the icon to see a list of wrench icon shortcuts to group specific subtabs that would appear across the navigation section if this group Is
436. rp aire com 40 5 35 Cisco FC 2C 00 27 0 0 Physical Interfaces Edit Interfaces E 9 1 10 w of 78 Interfaces Page 1 of8 gt gt Choose Columns CSV Export Name Description Alias Interface Labels Shutdown MAC Address Admin Status Switchport Trunk Fa2 0 23 FastEthernet2 0 23 No 00 18 73 FB 29 99 Up al Fal 0 2 FastEthernet1 0 2 No 00 18 73 A7 A0 84 Up all Fal 0 4 FastEtherneti 0 4A No 00 18 73 A7 A0 86 Up all Fal 0 6 FastEtherneti 0 6 No 00 18 73 A7 A0 88 Up all Fal 0 7 FastEtherneti 0 7 No 00 18 73 A7 A0 89 Up all Fai 0 8 FastEtherneti 0 8 No 00 18 73 A7 A0 8A Up all Fal 0 10 FastEtherneti 0 10 test mmagin No 00 18 73 A7 A0 8C Up all w Fal 0 11 FastEtherneti 0 11 Bird No 00 18 73 A7 A0 8D Up all Fai 0 13 FastEtherneti 0 13 No 00 18 73 A7 A0 8F Up all Fai 0 i4 FastEtherneti 0 14 No 00 18 73 A7 A0 90 Up all 1 10 w of 78 Interfaces Page lwof8 gt gt Virtual Interfaces Add New Interface Edit Interfaces i M 1 10 w of 16 Interfaces Page 1 of2 gt gt Choose Columns CSV Export Device 4 Name Description Type Interface Type Alias Interface Labels Shutdown 3750 1 StackPort2 StackPort2 propVitual O C3750 corp aire com Vit Vlani propVitual Catalyst VLAN Yes O C3750 corp aire com VI27 Vlan27 propVirtual Catalyst VLAN No O C3750 corp aire com vist Vlan51 propVitual Catalyst VLAN No The Interfaces page includes a sum
437. rts gt Definition Page Illustration Split View Report definitions New Report Definition Reports are available on the Generated Reports page after they have been run 1 20 w of 45 Report Definitions Page iwof3 gt gt Title a Type Subject amp VoWLAN Devices Device Summary SSID intranet voip amp VoWLAN Usage Network Usage SSID intranet voip VoWLAN User Sessions User Session SSID intranet voip amp Avir uptime Device Uptime Group HQ amp Capacity Planning Max Values Capacity Planning All Groups Folders and SSIDs amp Custom Device Summary Report Device Summary Group HQ Custom IDS Events Report IDS Events All Groups and Folders Latest Report Report Start Report End Last Run Time Scheduled VoWLAN Devices 2 weeks ago now 5 15 2009 3 00 PM Every Friday at 3 00 pm PDT VoWLAN Usage 1 week ago now 5 15 2009 3 00 PM Every Friday at 3 00 pm PDT VoWLAN User Sessions 2 weeks ago now 5 15 2009 3 00 PM Every Friday at 3 00 pm PDT Avir uptime last week today 5 19 2009 12 19 AM Capacity Planning Max Values 3 1 2009 12 00 a m today 5 21 2009 12 15 AM Daily at 12 15 am PDT Custom Device Summary Report 2 weeks ago now 5 14 2009 6 36 AM Custom IDS Events Report 5 14 09 22 00 5 14 09 23 00 5 15 2009 7 13 AM Select All Unselect All Report definitions for other roles 1 4 w of 4 Report Definitions Page i w of 1 Role Title Type Subject H corp users via radius Radius Auth Problems RADIUS Authentic
438. rver you think you might need to increase this setting for your network Maximum Number of Increases the number of processes that are pushing configurations to your Configuration devices as an option The optimal setting for your network depends on the Processes resources available especially RAM Please contact Dell support if you think you might need to increase this setting for your network 40 Configuring AWMS Dell PowerConnect W AirWave 7 2 User Guide Table 15 AMP Setup gt General gt Performance Tuning Fields and Default Values Continued Default Description Maximum Number of 3 Increases the number of processes that audit configurations for your devices Audit Processes as an option The optimal setting for your network depends on the resources available especially RAM Contact Dell support if you are considering increasing this setting for your network Verbose Logging of Enables or disables logging detailed records of SNMP configuration SNMP Configuration information SNMP Rate Limiting When enabled AWMS fetches SNMP data more slowly potentially reducing for Monitored device CPU load Dell PowerConnect W recommends enabling this global Devices setting when monitoring Dell PowerConnect W controllers only if your network contains a majority of legacy controllers 800 2400 5000 controllers that use Supervisor Module II If your network mainly uses newer processors 3000 series 600 series the M3 module in the 6
439. rview of SOTI MobiControl SOTI MobiControl the mobile device management platform for Windows Mobile Blackberry Apple and Android devices has been integrated into AWMS to provide direct access to the MobiControl Web Console MobiControl runs on your Mobile Device Manager MDM server This server provisions mobile devices via HTTP to configure connectivity settings enforce security policies restore lost data and other administrative services Information gathered from mobile devices can include policy breaches data consumption and existing configuration settings Prerequisites for Using MobiControl with AWMS In order to use the MobiControl integration in AWMS the following is required Your AMP must be running version 7 2 An MDM server with SOTI MobiControl Console 8 50 Build 3989 Web Version 8 50 Build 5066 A chent device that is associated with WLAN infrastructure managed by the AMP server running 7 2 being actively managed by the SOTI MobiControl server running with proper build numbers For more information about setting up MobiControl please see www soti net mc help In order to use SOTI MobiControl from within AWMS you must first add your MDM server and designate it as a MobiControl Adding a Mobile Device Management Server for MobiControl l To add an MDM server to AWMS navigate to AMP Setup MDM Server and select Add Complete the fields on this page lable 116 describes the settings and default values Table 116 AMP
440. s No Group All Groups T Alert Notifications Additional Notification Options M Email Iv NMS MMS Trap Destinations E acceptance test corp airwave com M gauss corp airwave com Select All Unselect All Sender Address me company com Enter multiple email addresses of the form user domain separated by spaces commas or semicolons Recipient Email Addresses meigcompanv com Logged Alert visibility By Triggering Agent Suppress Until Acknowledged ves C No 2 Configure the Trigger Restrictions and Alert Notifications This configuration is consistent regardless of the trigger type to be defined a The Trigger Restrictions settings establishes how widely or how narrowly the trigger applies Define the folder subfolder and Group covered by this trigger Table 103 describes the options for trigger restrictions Table 103 System Trigger Details Fields and Default Values Notification Option Description Folder Sets the trigger to apply only to APs Devices in the specified folder or subfolders depending on the Include Subfolders option NOTE If the trigger is restricted by folder and group it only applies to the intersection of the two it only applies to APs in the group and in the folder Include Subfolders Sets the trigger to apply to all devices in the specified folder and all of the devices in folders under the specified folder Group Sets the trigger to apply only to APs Devices in t
441. s 4 1248 13 88 00 1 6185 00 ethersphere 1322 Top Access Points 5 1263 6 91 00 3 1493316 00 ethersphere 1322 Top Access Points 6 Fish bowl 6 90 00 4 767319 00 ethersphere 1322 Top Access Points Z 1260 5 88 00 2 73432 00 ethersphere 1322 Top Access Points 8 2198 4 79 00 2 44596 00 ethersphere 1322 Top Access Points 9 ap65 c2 2e 4a 2 104 50 0 0 00 chicken fingers Aruba2400 Top Access Points 10 1372 2 90 00 3 233005 00 ethersphere 1322 Top Access Points Most Channel Changes 2 4 GHz ER GE TT KE VE T 00 24 6c c4 ce 26 20 82 00 0 Aruba651 Top Access Points 2 00 13 1e c0 6c 46 16 77 00 0 Aruba3600 US Top Access Points 3 1154 Q 9 71 50 1 419 00 ethersphere 1322 Top Access Points 4 1249 8 90 50 1 56 00 ethersphere 1322 Top Access Points 5 APO01d alfc ca7a 7 77 50 25 20 0 0 00 default location 5500 6 0 196 0 Top Access Points 6 1260 6 86 50 2 676 00 ethersphere 1322 Top Access Points F 2188 6 73 50 a 308 00 ethersphere 1322 Top Access Points 8 ap105 A1 6 86 50 0 0 00 pit Aruba 3400 Top Access Points 9 1372 5 81 50 0 0 00 ethersphere 1322 Top Access Points 10 1153 5 85 00 Zz 1200 00 ethersphere 1322 Top Access Points 1 ap105 A1 31 18 87 00 0 0 00 pit Aruba 3400 Top Access Points 2 00 24 6c c4 ce 26 17 20 90 00 0 337 00 Aruba651 Top Access Points 3 2103 7 14 88 00 0 672 00 ethersphere 1322 Top Access Points 4 00 1a 1e c0 2b 34 6 1 88 00 0 0 00
442. s you can set a controller level override for its referenced Spectrum profile as illustrated in Figure 107 This will affect all Spectrum supported APs managed by this controller 146 Discovering Adding and Managing Devices Dell PowerConnect W AirWave 7 2 User Guide Figure 107 Override Section of a Supported Controller s Manage Page 1 1 w of 1 Dell PowerConnect W Controller Overrides Page 1 of 1 Choose Columns Profile a Instance Desire Entire Profile Field Value amp Spectrum Profile default a No Bluetooth 15 1 1 w of 1 Dell PowerConnect W Controller Overrides Page i of 1 Profile Spectrum Profile A Profile Instance default a m Desire Entire Profile J Yes 9 No Field Age Out Bluetooth m Bluetooth 5 655535 sec 15 save Ca j Perform these steps to override individual profile settings for an Dell controller that is part of a spectrum mode Select a Spectrum supported Dell controller that is referencing a Spectrum profile and go to its APs Devices In the Profile Instance drop down menu select the instance of the Spectrum profile used by the controller In the Field drop down menu select the setting you would like to change such as an Age Out setting or a To create additional overrides for this controller select Add New Dell Controller Override again Dell AP group l gt Manage page Set it to Manage Read Write mode 2 Under the Dell Overrides section select Add New Dell Controller Override 3 I
443. s and Alerts entente nnns 181 Viewing TGS vasene 181 Creating New TFIOGGSasscsautsenti ttnbae ive uoa RarinedOR CAR S ctn cedes ed 181 Setting Triggers for Devices tnn tnn nnn 184 Setting Triggers for BadlOSsasusessazispartinxdteni dE uniar tiv etd ii cotra li n 184 Setting Triggers for DISCOVery seeeeeseeeeenennnnnntnennnnn nnne 185 Setting Triggers for Users nnn nnn nnn 185 Setting Triggers for RADIUS Authentication Issues sess 185 Setting Triggers for IDS Events tnter tnter 186 Setting Triggers for AWMS Health esee 186 Delivering Triggered Alerts ccccssscssssesecssscesssscsessesecsesecsesecsesaesessusesausesseseesesaseesansass 187 VNR 187 Responding to AlOrts ccscsseseescsssscsescesescesessesecseseeseseesesaesecauseeseseesesaesesaesesausesaeseeseeateess 188 Monitoring and Supporting WLAN Users nnns 188 Overview of the Users PAGES sssssndiesiszutxtn uiuit iiputiak iS iuo E FER pE RU Pr xL PEORES 189 Monitoring WLAN Users with the Users gt Connected and Users gt All Pages 189 Supporting Guest WLAN Users With the Users gt Guest Users Page 191 Supporting RFID Tags With the Users gt Tags Page ees 193 Evaluating and Diagnosing User Status and lssues sse 194 Evaluating User Status with the Users gt User Detail Page
444. s and firmware versions on the networkincluding vendor information and graphical pie chart summaries The primary sections of this report are as follows Vendor Summary Lists the vendors for all devices or firmware on the network Firmware Version Summary Lists the firmware version for all firmware used on the network Model Summary Lists the model numbers for all devices or firmware on the network 230 Creating Running and Emailing Reports Dell PowerConnect W AirWave 7 2 User Guide Figure 164 Inventory Report Illustration Edited View Daily Inventory Report for All Groups and Folders Vendor Summary El Aruba 70 Bl Cisco 12 O Other g O symbol 4 E HP 3 Firmware Version 5ummary 35 ss 85 El Other 48 7 E Aruba RAP 2WG 5 0 1 8 28 0 ll Aruba AP 65 5 0 1 0 14 7 O Unknown 4 58 O ruba AP 125 6 0 0 0 3 8 Model Summary El Other dd 1 El Aruba RAP 2WG 28 0 E Aruba AP 65 16 7 OC Aruba AP 125 7 5 E Aruba RAP 5WN 3 7 Using the Memory and GPU Utilization Report Model Generated on 1 10 2011 12 27 AM Vendor Count Aruba 382 Cisco 67 Symbol 27 HP 21 Meru Proxim Router Switch Enterasys 3Com Trapeze Nortel Nomadix LANCOM Alcatel Lucent APC D Link Netgear Dell Juniper Hirschmann 20 Vendors eee B i Firmware Version a 3Com AP2750 7 0 4 4 0 3Com AP3750 7 0 4 4 0 3Com WX1200 7 0 4 4 0 of Total 09 90 12 27 4 057 3 85 1 28 1 1
445. s and snapshots appear on the Incident Edit page after they have been created When a relationship Is created the user can enter a brief note and in the Relationships table the name of the relationship links to the appropriate page in AWMS Selecting the snapshot description opens a popup window to display the screenshot ligure 185 illustrates these GUI tools Figure 185 Relationships and Snapshots on the Incident Edit Page Incident Summary Matt is seeing Mismatches State Open lt Description On an Access 247 controller Save JA Cancel Relationships Name a Notes Controller Access247 Folder Top This is the Top folder Group Access Points The controller belongs here Select All Unselect All Delete Snapshots 1 1 w of 1 Incident Snapshots Page 1 w of 1 Choose Columns Description a Created Snapshot 11 3 3 2010 3 32 PM 1 1 w of 1 Incident Snapshots Page 1 w of 1 Select All Unselect All Delete 250 Using the AWMS Helpdesk Dell PowerConnect W AirWave 7 2 User Guide Using the Helpdesk Tab with an Existing Remedy Server If an external Remedy server exists you can use the AWMS Helpdesk tab to create view and edit incidents on the Remedy server AWMS can only support integration with a Remedy server if it 15 a default installation of Remedy 7 0 with no changes to the web service definitions To use the Helpdesk tab with a Remedy server first navigate to the Helpdesk g
446. s dictate how ProCurve420 Proxim only wireless clients authenticate onto the network Authentication Profile Name Sets the Authentication Profile Name for Proxim AP 600 AP 700 AP 2000 AP 4000 Proxim Only Authentication Profile Index Iuli Sets the Authentication Profile Index for Proxim AP 600 AP 700 AP 2000 AP 4000 Proxim Only 8 Select Save when the security settings and configurations in this procedure are complete K NOTE You may need to return to the Groups gt Security configuration page to configure or reconfigure RADIUS servers 9 Locate the RADIUS Accounting Servers area on the Groups gt SSIDs configuration page and define the settings lable 57 describes the settings and default values Table 57 Groups gt SSIDs gt Radius Accounting Servers Fields and Default Values Setting Default Description RADIUS Accounting Server Pull down menu selects RADIUS Accounting servers previously entered on the Groups 1 3 Proxim Only gt RADIUS configuration page These RADIUS servers dictate where the AP sends RADIUS Accounting packets for this SSID VLAN Accounting Profile Name Sets the Accounting Profile Name for Proxim AP 600 AP 700 AP 2000 AP 4000 Proxim Only Accounting Profile Index Sets the Accounting Profile Index for Proxim AP 600 AP 700 AP 2000 AP 4000 Proxim Only 10 Select Save to retain these Secunty configurations for the group select Save and Apply to make the changes permanent or
447. s for Radio on 1153 3 487 Mbps 311 3 kbps E Avg bps for Radio on 1260 1 155 Mbps 74 91 kbps L Avg bps for Radio 1 on mchristensen rapS5wn 636 5 kbps 13 8 kbps L Avg bps for Radio 1 on marora ap65 2 373 Mbps 58 72 kbps E Avg bps for Radio 1 on 00 la le rc la 64 1 146 Mbps 5802 8 kbps E vg bps for Radio 1 on gwright rap wg 6 722 Mbps 378 8 kbps G Avg bps for Radio 2 on damien apl 5 2 651 Mbps 181 5 kbps E vg bps for Radio 1 on dfisken rapS5wn 1 243 Mbps 25 kbps E Avg bps for Radio 1 on pneelakantan rapzwg 1 913 Mbps 85 28 kbps So 40 30 e d i L i BET i ix 20 40 0 60 60 30 28x Percent of Time Above Threshold Table 128 Capacity Planning Report Fields and Contents Top Portion Field Device Interface Description The device type or name The type of 802 11 wireless service supported by the device 224 Creating Running and Emailing Reports Dell PowerConnect W AirWave 7 2 User Guide Table 128 Capacity Planning Report Fields and Contents Top Portion Continued Description The device group with which the device is associated Folder The folder with which the device is associated Controller The controller with which a device operates Time Above 196 of Capacity The time duration in which the device has functioned above 0 of capacity A low percentage of use in this field may indicate that a device is under used or poorly configured in relation to Its capacity or in rela
448. s for many devices Specifying Minimum Firmware Versions for APs in a Group on page 99 Compare This page allows you to compare line item settings between two device groups On the Groups gt List page select Compare Two Groups select the two groups from the drop down menus then select Compare Comparing Device Groups on page 100 This chapter also provides the following additional procedures for group level configurations Deleting a Group on page 101 Changing Multiple Group Configurations on page 101 Moditying Multiple Devices on page 102 Using Global Groups for Group Configuration on page 105 AWMS Groups Overview Enterprise APs controllers routers and switches have hundreds of variable settings that must be configured precisely to achieve optimal performance and network security Configuring all settings on each device individually is time consuming and error prone AWMS addresses this challenge by automating the processes of device configuration and compliance auditing At the core of this approach is the concept of Device Groups with the following functions and benefits AWMSS allows certain settings to be managed efficiently at Group level while others are managed at an individual device level AWMS defines a Group as a subset of the devices on the wireless LAN ranging in size from one device to hundreds of devices that share certain common configuration settings Groups may be defined based on g
449. s page is one of the core components of RAPIDS This feature allows you to define rules by which any detected device on the network is classified This section describes how to define use and monitor RAPIDS rules provides examples of such rules and demonstrates how they are helpful This section contains the following topics Controller Classification with WMS Offload on page 170 Device OUI Score on page 170 Using RAPIDS and Rogue Classification 169 Rogue Device Threat Level on page 171 Viewing and Configuring RAPIDS Rules on page 171 Recommended RAPIDS Rules on page 173 Using RAPIDS Rules with Additional AWMS Functions on page 174 Controller Classification with WMS Offload This classification method is supported only when WMS offload 1s enabled on Dell WLAN controllers Controller classification of this type remains distinct from RAPIDS classification WLAN switches feed wireless device information to AWMS which AWMS then processes AWMS then pushes the WMS classification to all of the ArubaOS controllers that are WMS offload enabled WMS Offload ensures that a particular BSSID has the same classification on all of the controllers WMS Offload removes some load from master controllers and feeds connected to lan information to the RAPIDS classification engine RAPIDS classifications and controller classifications are separate and often are not synchronized K NOTE RAPIDS classification is not pushed t
450. s55 mins 42 1 kbps kgarcia employee 00 1F 3B 79 EC 73 wpa2 65 802 11an 802 11n 5GHz HT40 2 17 2010 9 03 AM 3 hrs 10 mins WPA2 AES 3hrsi mins 42 2 kbps peter employee 00 1F 3B 79 EF E3 wpa2 65 802 11an 802 11n 5GHz HT40 2 17 2010 8 58 AM 3hrs16 mins WPA2 AES 3hrsi6 mins 23 5 kbps tmazzurco employee 00 21 5C 09 28 85 wpa2 65 802 11an 802 11n 5GHz HT40 2 17 2010 8 18 AM 3 hrs 56 mins WPA2 AES 3hrs56 mins 39 88 kbps tlichti employee 00 21 6A 7F 53 80 wpa2 65 802 11an 802 11n 5GHz HT40 2 17 2010 7 23 AM 4hrs51 mins WPA2 AES 4hrsSimins 31 3 kbps dsanchez employee 00 21 6A 48 F9 26 wpa2 65 802 11an 802 11n 5GHz HT40 2 17 2010 7 13 AM Shrsimin WPA2 AES Shrsimin 43 153 kbps aaron employee 00 23 12 53 A1 58 wpa2 65 802 11an 802 11n 5GHz HT40 2 17 2010 6 38 AM 5 hrs36 mins WPA2 AES 5hrs36mins 29 0 kbps alopez employee 00 1F 3B 91 67 03 wpa2 65 802 11an 802 11a 2 17 2010 6 33 AM 5 hrs41 mins WPA2 AES 5hrs41 mins 40 0 kbps 1 11 w of 11 Connected Users Page 1 w of 1 RF Neighbors AP Device Channel Signal AP 3 11 67 ALS 48 8 AL40 5 33 AL1 153 32 AL10 11 28 Show all neighboring APs Table 73 describes the fields and information displayed in the Device Info section The displayed fields vary from device to device Table 73 APs Devices Monitor Device Info Fields and Default Values Description Button immediately polls the individual AP or the controller for a thin AP this overrides the group s preset po
451. saanussne sene E 202 Home gt User faa iniiai 203 Home Overview nnnannvnnnnnnnnnnnnnnnnnnnnnnnnnennnnr 32 33 34 Master Na 211 Master Console gt Groups gt Basic 213 214 Master Console gt Groups gt Basic Managed 214 Master Console gt Manage AMPs IP Hostname 213 Radio Susanna intimate eat adieu wo da uidit REO 123 RAPI om 24 RAPIDS gt Rogue APs Detail Score Override 178 IG 0 eM P EE ee eee 24 Reports gt Demon sovsrspurem kesie 221 242 Reports gt Generated gt Port Utilization Report 236 sections Dell PowerConnect W AirWave 7 2 User Guide NE totnm d bbc UM OIbDSEn Gu d 24 Navisatron Need 23 NNN 22 SEG ed Eee EEE EE 35 v cupri EE gare ancdsumoesttonsee 62 63 vou dro M 43 vj M 24 205 NA E 188 Systemi UD 6 ET Rud usus DpmES VuaUPaUUdE 214 System gt Configuration Change Jobs 208 NL 207 System EEE 208 gt E E 206 SE ee GR EE 207 TN 182 T 181 MN 181 understanding the navigation bar 29 lA ANON mE 23 Users gt Converse 189 Users Quest SCI ae 192 NJ EE 193 View AP Credentials cc ceersereveclenaaeusacaenactenacemipesenes 144 MOMS EE 24 user roles GE A E E E E E 44 users DIC II AM PET 43 V EE EKN 14 24 VL NA 83 Wireless LAN POMPOM CMS re 15 WLSE COn EE 56 VIE 56 Index 281 282 Index Dell PowerConnect W AirWave 7 2 User Guide
452. sent as several pieces instead of as one block In most cases leave this option disabled Threshold Value 2337 If Fragmentation Threshold is enabled this specifies the size in bytes at which packets are fragmented lower Fragmentation Threshold setting might be required if there is a great deal of radio interference RTS CTS Threshold If enabled this setting configures the AP to issue a RTS Request to Send before Enabled sending a packet In most cases leave this option disabled RTS CTS Threshold Value 2338 If RTS CTS is enabled this specifies the size of the packet in bytes at which the AP sends the RTS before sending the packet RTS CTS Maximum If RTS CTS is enabled this specifies the maximum number of times the AP issues an Retries RTS before stopping the attempt to send the packet through the radio Acceptable values range from 1 to 128 Maximum Data Retries 32 The maximum number of attempts the AP makes to send a packet before giving up and dropping the packet Acceptable values range from 1 to 255 Beacon Period 19 5000 m Time between beacons in microseconds msec DTIM Period 1 255 DTIM alerts power save devices that a packet is waiting for them This setting configures DTIM packet frequency as a multiple of the number of beacon packets The DTIM Interval indicates how many beacons equal one cycle Ethernet Encapsulation RFC1042 This setting selects either the RFC1042 or 802 1h Ethernet encapsulation standard f
453. ser roles on the AMP Setup gt Roles page and each user in the system is assigned to a role Password Sets the password for the user being created or edited Enter an alphanumeric string without spaces and enter the password again in the Confirm Password field NOTE Because the default user s password is identical to the name Dell PowerConnect W strongly recommends that your change this password pe Allows you to define an optional and alphanumeric text field that takes note of the user s actual name Email Address Allows you to specify a specific email address that will propagate throughout many additional pages in AWMS for that user including reports triggers and alerts Phone Noe Allows you to enter an optional phone number for the user Notes Enables you to cite any additional notes about the user including the reason they were granted access the user s department or job title 4 Select Add to create the new user Save to retain changes to an existing user or Cancel to cancel out of this screen The user information you have configured appears on the AMP Setup gt Users page and the user propagates to all other AWMS pages and relevant functions NOTE AWMS enables user roles to be created with access to folders within multiple branches of the overall hierarchy This K feature assists non administrator users who support a subset of accounts or sites within a single AWMS deployment such as help desk or IT staff
454. sername for an existing Remedy account the role of this user defines the visibility AWMS will have into the Remedy server Password and Confirm The password for the Remedy user account Password Once the server settings have been saved and applied Helpdesk features become disabled AWMS then displays incident data pulled from the Remedy server and push changes back With the exception of snapshots AWMS does not store any Remedy data locally To view Remedy incidents in AWMS navigate to the Helpdesk gt Incidents tab Figure 187 illustrates the appearance and Table 141 describes the components of this page Dell PowerConnect W AirWave 7 2 User Guide Using the AWMS Helpdesk 251 Figure 187 Helpdesk gt Incidents with Remedy Enabled Remedy Inddents Unselect Current Incident Aad Hew Remedy Incident Incident Number Summary Status Assignee Urgency INCO00000000063 Repeatedly dropped from the network Assigned 1 Critical Table 141 Helpdesk Incidents Components with Remedy Enabled Field Description Incident Number Displays a unique identifier for each incident assigned by the Remedy installation Contains a brief incident summary as entered by AWMS or Remedy user Status Displays the status as chosen by AWMS or the Remedy user New Assigned In Progress Pending Resolved Closed Cancelled Assigned by Remedy installation cannot be changed in AWMS Urgency Displays the urgency level as chosen
455. signed Dynamic VLANs C Yes N HP ProCurve 420 only es o Authentication Profile Index Proxim Only 1 VLAN ID Format HP ProCurve 420 only C G V ASCII Hex RADIUS Ethernet Untagged VLAN ID 1 4094 RoamAbout 10 2 32 151 1812 1813 AP3000 only A RADIUS Accounting Server 1 2 32 151 1812 RADIUS Accounting Server 2 10 2 32 151 1812 1813 RADIUS Accounting Server 3 10 2 32 151 1812 1813 7 Create Closed Network C Yes No RADIUS Accounting Server 4 Select M Block All Inter Client Communication C Yes No Accounting Profile Name Proxim Only Accounting EAP Options Accounting Profile Index Proxim Only 3 WEP Key Rotation Interval 0 10000000 sec 300 MAC Address Authentication Session Key Refresh Rate 0 1440 min HP D ProCurve 420 only MAC Address Authentication C ves No Session Timeout 0 65535 sec HP ProCurve 420 fo MAC Address Format Proxim AP 600 AP 700 AP _ only 2000 AP 4000 Avaya AP 3 Avaya AP 7 AP 4 5 6 AP Single Dash 8 ProCurve520WL v2 1 0 and higher only Cisco TKIP C Yes No EM E Authorization Lifetime 900 43200 sec 1800 Cisco MIC C MMH Disabled l Primary RADIUS Server Reattempt Period 0 120 D min Save Save and Apply Revert Table 51 Groups gt Security Page Fields and Default Values Default Enabled Untagged Setting VLANs Section VLAN Tagging and Multiple SSIDs Management VLAN ID Permit RADIUS Assigned Dynamic VLANs VLAN I
456. smit Power Changes 2 4 GHz RF Health RF Health Least Utilized by Channel Usage 5 GHz Rogue Containment Audit User Session The left pane of the Custom Options section lists all available data that can be included in the report For example if the data you want to include is in the RF Health report select RF Health to view a list of all available radio frequency information Then simply drag the desired data from the Available Options list on the left to the Selected Options pane on the right The order of the data in the Selected Options section is the order that it will appear in the report The data can be reordered by dragging an item up or down the list 4 Below the Custom Options panes are the Report Restrictions Scheduling Options Report Visibility and Email Options sections Choose the parameters as needed for your report especially a Report Start and Report End 5 When finished select Add and Run to add the report to your list and run it immediately Run Now to run without being added to the list Add to add but not run the report and Cancel to exit this page Using the Capacity Planning Report The Capacity Planning Report tracks device bandwidth capacity and throughput in device groups folders and SSIDs This report assists in analyzing device capacity and performance on the network and such analysis can help to achieve network efficiency and improved experience for users This report is based on interfa
457. software installation script by executing the amp install command Type amp install at the command prompt and press Enter to execute the script Step 1 Configuring Date and Time Checking for Prior Installations Date and Time The following message appears and this step ensures the proper date and time are set on the server GENE GE EE EE Dare and Time Configuratio eei Current Time Fri Nov 21 09 18 12 PST 2008 1 Change Date and Time 2 Change Time Zone 0 Finish Ensure that you enter the accurate date and time during this process Errors will arise later in the installation if the specified date varies significantly from the actual date especially if the specified date is in the future and it is fixed later It is recommended to configure ntpd to gradually adjust your clock to the correct time 1 Select I to set the date and select 2 to set the time zone Press Enter after each configuration to return to the message menu above CAUTION Changing these settings after the installation can cause data loss especially for time series data such as bandwidth and client count graphs Avoid delayed configuration 2 Press 0 to complete the configuration of date and time information and to continue to the next step Previous AWMS Installations The following message appears after date and time are set Welcome to AWMS Installer Phase 2 STEP 1 Checking for previous AWMS installations If a previous version of AWMS software
458. stEthernet0 10 ethernetCsmacd FastEthernet IEEE 802 3 FastEthernet0 10 Fa0 10 MonitorAs2 Fa0 11 Access FastEthernet0 11 ethernetCsmacd FastEthernet IEEE 802 3 FastEthernet0 11 Fa0 11 Fa0 12 Access FastEthernet0 12 ethernetCsmacd FastEthernet IEEE 802 3 FastEthernet0 12 Fa0 12 Fa0 13 Access FastEthernet0 13 ethernetCsmacd FastEthernet IEEE 802 3 FastEthernet0 13 Fa0 13 w Fa0 14 Access FastEthernet0 14 ethernetCsmacd FastEthernet IEEE 802 3 FastEthernet0 14 Fa0 14 Fa0 15 Access FastEthernet0 15 ethernetCsmacd FastEthernet IEEE 802 3 FastEthernet0 15 Fa0 15 Fa0 16 Access FastEthernet0 16 ethernetCsmacd FastEthernet IEEE 802 3 FastEthernet0 16 Fa0 16 Fa0 17 Access FastEthernet0 17 ethernetCsmacd FastEthernet IEEE 802 3 FastEthernet0 17 Fa0 17 Fa0 18 Access FastEthernet0 18 ethernetCsmacd FastEthernet IEEE 802 3 FastEthernet0 18 Fa0 18 Fa0 19 Access FastEthernet0 19 ethernetCsmacd FastEthernet IEEE 802 3 FastEthernet0 19 Fa0 19 Fa0 2 Access FastEthernet0 2 ethernetCsmacd FastEthernet IEEE 802 3 FastEthernet0 2 Fa0 2 Fa0 20 Access FastEthernet0 20 ethernetCsmacd FastEthernet IEEE 802 3 FastEthernet0 20 Fa0 20 Fa0 21 Access FastEthernet0 21 ethernetCsmacd FastEthernet IEEE 802 3 FastEthernet0 21 Fa0 21 Fa0 22 Access FastEthernet0 22 ethernetCsmacd FastEthernet IEEE 802 3 FastEthernet0 22 Fa0 22 Fa0 23 Distribution FastEthernet0 23 ethernetCsmacd FastEthernet IEEE 802 3 FastEthernet0 23 Fa0 23
459. summary of rogue device counts e Detailed and text based table of rogue devices discovered only wirelessly with extensive device parameters and hyperlink interoperability to additional AWMS pages e Detailed and text based table of all rogue devices supporting all discovery methods with extensive device parameters and hyperlink interoperability to additional AWMS pages e Detailed and text based table of discovery events pertaining to the discovery of rogue devices with extensive parameters and hyperlink interoperability to additional AWMS pages This report is not run by default but is available after you define it Refer to Figure 167 for a sample illustration of this report Figure 167 New Rogue Devices Report Illustration New Rogue Devices Report for All Groups and Folders xu XHTML export Rogues with classifications between Suspected Valid and Contained Rogue a CSV export 12 11 2010 9 18 PM to 1 11 2011 9 18 PM Email this report Generated on 1 11 2011 9 24 PM print report Devices by RAPIDS Classification Devices by Controller Classification Controller Classification Ti Suspected Neighbor Suspected Rogue RAPIDS Classification Total v Suspected Rogue Suspected Neighbor Suspected Valid Valid unknown Rogue Unclassified G Suspected Neighbor 60 2 El Suspected Rogue 32 7 B Valid 4 3 O unknow 1 3 E Rogue 0 9 E Unclassified 0 6 Devices by Controller Classification Controller Classification
460. svnnsnrsvensnvrvavesnnnenenvevenns 219 Reports gt Generated Page Overview ssssssseeeeennnnentnnnnn tnnt nes 221 Using Daily Reports nnn nnn nnne tnn 222 Viewing Generated Reports sess nnt nnn nnt tnn nns 222 DESIRES GESUNDE 222 Using the Capacity Planning Report iesesvrvvrvererresvrvervrververersesesverssnesvevesvevesvesesvesssvesvenen 223 Using the Configuration Audit Report 225 Using the Device Summary Report nnne 226 Using the Device Uptime Report essent tnn 228 Using the IDS Events BeDOFLC usainsca ceste ruit vnd rer ta Een EEree EE Ge ERE Y rk mi rbi 229 Using the Inventory Report entente nnn tnnt tnnt 230 Using the Memory and CPU Utilization Report enne 231 Using the Network Usage Report sess 232 Using the New Rogue Devices Report rnnanvrnrnvsrenronvrnenrrnrnvrvenvonvnnenvrnennrnennnnennnnennsnnnnennn 232 Using the New Users Report nennen nnn tnnt tnn tnn 234 Using the PCI Compliance Report cceesesssssscssssesssssscsssessseceesesecsssesecassesesseesassnseeaees 235 Using the Port Usage Report teen tn snnt nnn 236 Using the RADIUS Authentication Issues Report eanrnrnvrnorenverrnvrvarenervarenvrnenesvrnenernnne 236 Using the RF Health Report eee tnn tnnt tnn nnn 231 Using the Rogue Containment Audit Report mesvrnvrvenvrrervrvervrnervenersenerveses
461. t RADIUS Accounting Server 2 Select RADIUS Accounting Server 3 Select amp Figure 48 Groups gt Cisco WLC Config gt WLANs gt Add New SSID VLAN gt QoS Tab Illustration General Quality of Service Platinum voice M WMM Policy Allowed B add coa Figure 49 Groups gt Cisco WLC Config gt WLANs gt Add New SSID VLAN gt Advanced Tab Illustration General security 095 Advanced Allow AAA Override C ves No Coverage Hole Detection Yes No Session Timeout 0 86400 fo Enable IPv6 C ye C EE P2P Blocking Action Disabled Client Exclusion F No ala ga in UE Yes No DHCP Server Require DHCP C ves No Aironet IE Support vas No MFP Signature Generation C ves No H REAP Local Switching ves No Mobility Anchor 1 Select s _ s S Mobility Anchor 2 Select Mobility Anchor 3 Select H Mobility Anchor 4 Seet DTIM Period 802 11a n 1 255 beacon periods 1 DTIM Period 802 11bg n 1 255 beacon periods 1 Client Load Balancing C ves No Client Band Select z Requires a Radio Policy of All Yes C No 94 Configuring and Using Device Groups in AWMS Dell PowerConnect W AirWave 7 2 User Guide Defining and Configuring LWAPP AP Groups for Cisco Devices The Groups gt Cisco WLC Config gt WLANs gt Advanced gt AP Groups page allows you to add edit delete AP Groups on the Cisco WLC LWAPP AP Groups are used to li
462. t Setup page In the BMC Remedy Setup area select Yes to enable Remedy This launches a set of fields for information about the Remedy server Once enabled to use Remedy the Helpdesk header icons work in the same way for a Remedy configured Helpdesk as they do for the default AWMS Helpdesk Figure 186 illustrates this appearance and Table 140 describes the components For more details see Creating New Snapshots or Incident Relationships on page 250 Figure 186 Helpdesk gt Setup with Remedy Enabled BMC Remedy Setup Remedy Enabled 9 Yes No Middle Tier Host Server Pp e Timeout Confirm Password Po Table 140 Components of Helpdesk gt Setup with Remedy Enabled Description Remedy Enabled If no default is selected the existing AWMS Helpdesk functionality is available If yes is selected the Helpdesk functionality is disabled and the Helpdesk tab can be used with an existing Remedy server Fields for server data appear only when Remedy Is enabled Middle Tier Host The location of the Remedy installation s web server The port for the HTTP interface with the web server this is likely 8080 but there is no default value in AWMS SOAP URL Gateway for web services on Remedy s middle tier host This is usually arsys services ARService but there is no default value in AWMS Server The location of the backend server where Remedy data is stored Timeout The timeout for HTTP requests 60 seconds by default Username U
463. t Compliance Mew Up Down Mismatched Ignored Monitoring Talisker in group ARMSpectrum in folder Top gt ARMSpectrum Poll Controller Now This Device is in monitor only with firmware upgrades made Device Info Status Up OK Configuration Mismatched The settings on the device do not match the desired configuration policy Controller Aruba3400 Aruba AP Group default Upstream Device Upstream Port Type Aruba AP 105 Remote Device No Last Contacted 12 30 2010 10 54 AM Uptime days 17 hrs 46 mins LAM MAC Address 00 246C C0 00 56 Serial ALO0000314 IP Address 10 51 55 231 Total Users 0 Bandwidth 0 kbps Notes The alert summary events and audit log sections are also the same regardless of device type and these sections appear at the bottom of these pages a portion of which is shown in Figure 77 Figure 77 Monitoring Page Bottom Level Data Common to All Device Types ert Summary at 2 3 2010 5 23 Type Last 2 Hours Last Day Total Last Event Alerts 0 0 0 IDS Events 0 0 0 Incidents 0 0 0 RADIUS Authentication Issues 0 0 0 Recent Events view system event log Time User Event Wed Feb 3 16 46 28 2010 System Configuration verification succeeded configuration is good _ omitted 19 duplicate messages Fri Jan 29 08 31 38 2010 System Configuration verification succeeded configuration is good Fri Jan 29 08 30 08 2010 System Status changed to OK Fri Jan 29 08 30 08 2010 System Up Audit Log Tim
464. t per device desired settings Import unreferenced Aruba profiles from selected Import Settings devices Reboot selected devices Reboot Reprovision selected Dell PowerConnect W devices Firmware Upgrade firmware for selected devices Upgrade Firmware Cancel firmware upgrade for selected devices Cancel Upgrade Ignore Delete Ignore selected devices that may be down for 1 gnore maintenance Delete selected devices from AMP Delete Select one or more devices that are to share the configurations Select the checkbox for each device to modify 4 In the Modify Multiple Devices section select any button or use any drop down menu for the supported changes Any action you take applies to all selected devices Each action you take will direct you to a new configuration page or prompt you with a confirmation page to confirm your changes 5 You are taken to a confirmation configuration page that allows you to schedule the change for a time in the future Enter a start date and time in the scheduling field and select when the change should occur from the Dell PowerConnect W AirWave 7 2 User Guide Configuring and Using Device Groups in AWMS 103 drop down menu one time is the default but you may select recurring options for many of the actions Scheduled jobs can be viewed and edited in the System gt Configuration Change Jobs tab ON Using the neighbor lists AWMS is able to optimize channel selection for APs Se
465. t yet tracked Active Interfering Devices Table For Dell APs running in Spectrum mode the same non 802 11 interfering devices identified in the Issues Summary section are classified in the Active Interfering Devices table along with the timestamp of its last detection the start and end channels of the interference the signal to noise ratio and the percentage of time the interference takes place as illustrated in Figure 85 This table can be exported to CSV format and the displayed columns can be moved or hidden as needed Figure 85 Active Interfering Devices Table lllustration Active Interfering Devices 1 7 w of 7 Interfering Devices Page 1 of 1 Choose Columns CSV Export Device Type Last Seen Start Channel End Channel SNR Duty Cycle Cordless Base Freg Hopper 1 14 2011 3 31 PM 1 14 60 5 XBox Freq Hopper 1 14 2011 3 17 PM 1 14 63 5 Cordless Phone Freq Hopper 1 14 2011 2 10 PM 1 14 80 5 Generic Freq Hopper 1 14 2011 3 52 PM 1 14 73 5 Video Device Fixed Freq 1 14 2011 9 25 AM 10 13 72 99 Possible device types for the Active Interfering Devices table are Wi Fi Microwave Bluetooth Generic Fixed Freq 126 Discovering Adding and Managing Devices Dell PowerConnect W AirWave 7 2 User Guide Cordless Phone Fixed Freq Video Device Fixed Freq Audio Device Fixed Freq Generic Freq Hopper Cordless Phone Freq Hopper XBox Freq Hopper Microwave Inverter Cordless Base Freq Hopper Unknown Active BSSIDs The Active BS
466. tab for each managed group In the case of the Groups gt SSIDs configuration page override options are available only on the Add configuration page go to the Groups gt SSIDs configuration page and select Add Global templates are also configurable as part of Global Groups see Creating and Using Templates on page 149 for more information Once Global Groups have been configured groups may be created or configured to subscribe to a particular Global Group Go to the Groups gt Basic configuration page of a group and locate the Use Global Groups section Select the Yes radio button and select the name of the Global Group from the drop down menu Then select Save and Apply to make the changes permanent Figure 64 illustrates this page Figure 64 Groups Basic Managed Page lllustration Group Access Points Basic Name Access Points Missed SNMP Poll Threshold 1 100 1 Regulatory Domain United States v Timezone AEN dae DNE AMP system ime s For scheduling group configuration changes Allow One to One NAT O Yes No Use Global Group Yes No Global Group gobalgrouponMC SSID jv Once the configuration is pushed the unchecked fields from the Global Group appears on the Subscriber Group as static values and settings Only fields that had the override checkbox selected in the Global Group Configuring and Using Device Groups in AWMS 105 appear as fields that can be set at the level of the Subscriber G
467. tab that becomes visible when you select a specific user Access the Users gt User Detail page by selecting the MAC Address for a specific user from one of the following pages Users gt Connected Users gt All This page provides information for the wireless device signal quality and bandwidth consumption This page also provides an AP association history and current association status Finally when VisualRF is licensed and enabled this page provides a graphical map of the user location and facility information If you have deployed Dell PowerConnect W controllers and have WMS Offload enabled on the network the Users gt User Detail page allows you to classify the device in the Device Information section and to push this configuration to the Dell PowerConnect W controllers that govern the devices The classifications are as follows Unclassified Devices are unclassified by default Valid If the Protect Valid Stations option is enabled this setting designates the device as a legitimate network device Once this Valid setting 1s pushed this setting prevents valid stations from connecting to a non valid AP Contained When this status 1s pushed to the device Dell PowerConnect W controllers will attempt to keep it contained from the network You can classify the user regardless of whether WMS Offload is enabled If WMS Offload is enabled the classification will get pushed up to the controller Figure 135 illustrat
468. tained by the Top folder The top folder and its subfolders must contain all of the devices in any of the groups it can view NOTE AWMS enables user roles to be created with access to folders within multiple branches of the overall hierarchy This feature assists non administrator users who support a subset of accounts or sites within a single AWMS deployment such as help desk or IT staff User roles can be restricted to multiple folders within the overall hierarchy even if they do not share the same top level folder Non administrator users are only able to see data and users for devices within their assigned subset of folders RAPIDS sets the RAPIDS privileges which are set separately from the APs Devices This field specifies the RAPIDS privileges for the role and options are as follows None Cannot view the RAPIDS tab or any Rogue APs Read Only The user can view the RAPIDS pages but cannot make any changes to rogue APs or perform OS scans Read Write The user may ignore delete override scores and perform OS scans Helpdesk Sets the role to support helpdesk users with parameters that are specific to the needs of helpdesk personnel supporting users on a wireless network Enable Adobe Yes Enables the Adobe Flash application for all users who are assigned this role Adobe Flash Flash supports dynamic graphics on the Home Overview page VisualRF Quickview functions and additional AWMS pages NOTE This field is o
469. tallation is a prerequisite to installing AWMS on the network management system AN CAUTION This procedure erases the hard drive s on the server 1 Insert the AWMS installation CD ROM into the drive and boot the server 2 If this is a new installation of the AWMS software type install and press Enter To configure the partitions manually type expert and press Enter The following message appears on the screen Welcome to AWMS Installer Phase I To install a new AMP type install ENTER WARNING This will ERASE all data on your hard drive Dell PowerConnect W AirWave 7 2 User Guide Installing AWMS 17 To install AWMS and manually configure hard drive settings type expert ENTER boot 3 Allow the installation process to continue Installing the CentOS software Phase I takes 10 to 20 minutes to complete This process formats the hard drive and launches Anaconda to install all necessary packages Anaconda gauges the progress of the installation Upon completion the system will prompt you to eject the installation CD and reboot the system 4 Remove the CD from the drive and store in a safe location Installing AWMS Software Phase 2 Getting Started After the reboot the GRUB screen appears l Press Enter or wait six seconds and the system automatically loads the kernel 2 When the kernel is loaded log into the server using the following credentials login root password admin 3 Start the AWMS
470. te APs ves No Filter IDS Events from Remote APs ves No Classification Options Acknowledge Roques by Default C ves No Save Save and Apply Revert Manually Classifying Rogues Automatically Acknowledges Them Yes C No Table 93 RAPIDS Setup Basic Configuration Fields Default ARP IP Match Timeout RAPIDS Export Threshold Suspected Wired to Wireless MAC Address Correlation Wireless BSSID Correlation Delete Rogues not detected for 0 14 days zero disables Automatically OS scan rogue devices Dell PowerConnect W AirWave 7 2 User Guide Description If you have routers and switches on the AMP and it s scanning them for ARP tables this can assign a rogue IP address information This timeout specifies how recent that information needs to be for the IP address to be considered valid Note that the default ARP poll period is long several hours Exported rogues will be sent to VisualRF for location calculation Discovered BSSIDs and LAN MAC addresses which are within this bitmask will be combined into one device 4 requires all but the last digit match aa bb cc dd ee fX 8 requires all but the last two digits match aa bb cc dd ee XX Similar BSSIDs will be combined into one device when they fall within this bitmask Setting this value too high may result in identifying two different physical devices as the same rogue Note When you change this value RAPIDS will not immediately combine
471. te AWMS with a Remedy server Monitoring Incidents with Helpdesk For a complete list of incidents or to open a new incident navigate to the Helpdesk gt Incidents page Figure 182 illustrates the components of the AWMS Helpdesk Incidents page Dell PowerConnect W AirWave 7 2 User Guide Using the AWMS Helpdesk 247 Figure 182 Helpdesk gt Incidents Page Illustration State Last2Hours LastDay Total 248 Using the AWMS Helpdesk Open 0 0 176 Closed 0 0 0 Total 0 0 126 New Incident 1 20 wof 126 Incidents Page lwof7 gt gt ID Summary State Opened By Related Created v Updated Al All w 202 Paul s connection issue Open mbruno 0 5 19 2009 9 37 AM 5 19 2009 9 37 AM 201 lotte s wlan issue Open aruba se D 5 13 2009 9 31 PM 5 13 2009 9 31 PM 199 testing ps Open patrick 0 5 13 2009 7 42 PM 5 13 2009 7 42 PM 198 Damien more typing issues Open patrick 0 5 13 2009 7 34 PM 5 13 2009 7 34 PM 197 thomas wireless issue Open patrick 0 5 11 2009 11 01 PM 5 11 2009 11 01 PM 196 Martin HasaP roblem Open ARUBATM 0 5 5 2009 6 25 AM 5 5 2009 6 25 AM 195 Katie s Problem Open aruba se 4 27 2009 2 24 PM 4 27 2009 2 24 PM V 194 test Open aruba se 0 4 27 2009 2 00 PM 4 27 2009 2 00 PM 193 demo for xX Open aruba se 0 4 27 2009 8 33 AM 4 27 2009 8 33 AM 192 ym s wlan issue Open aruba se 0 4 26 2009 9 49 PM 4 26 2009 9 49 PM 191 Nishith can t connect Open dancomf
472. te the report immediately without creating a new report definition or saving the report settings Select Add only to complete the report creation to be run at the time scheduled Select Cancel to exit from the Add page Table 135 describes the configurable settings for the custom report to be created Select any of the report names to view additional information on that report type Table 135 Report Types and Scheduling Options Supported for Custom Reports Can by Run by Can be Run by Time Period Group Folder Report Type Description Summarizes devices based on which have exceeded a defined percentage of their maximum bandwidth capacity Pulls data for AP radios or interfaces of universal devices ifSpeed value Using Custom Reports Yes Yes Using the Capacity Planning Report Using the Configuration Audit Report Using the Device Yes Summary Report Using the Device Yes Uptime Report Using the IDS Events Yes Report Yes Yes Yes Using the Inventory Yes Report Using the Memory and Yes CPU Utilization Report 244 Creating Running and Emailing Reports Yes Tracks bandwidth capacity and consumption according to thresholds for data throughput This is a device oriented report Provides a snapshot of the configuration of all specified access points in AWMS at report run time Summarizes user and bandwidth statistics and lists devices in AWMS summarizes device uptime within defined
473. tegorized with a higher score se 00 14 69 Cisco 4 OUI manufacturer block contains SOHO access points 00 15 28 Cisco Systems 4 OUI manufacturer block contains SOHO access points 00 30 65 Apple Computer 3 OUT manufacturer block contains enterprise access points 00 30 89 Spectrapoint Wireless LLC 4 OUI manufacturer block contains SOHO access points Se 00 00 49 U S ROBOTICS INC 4 OUI manufacturer block contains SOHO access points 1 ura 1 w of 11 Score Overrides Page i of 1 2 Select Add to create a new override or select the pencil icon next to an existing override to edit that override The Score Override add or edit page appears Figure 122 Figure 122 Add Edit Score Override Page MAC Address 000000 Prefix Score UI manufacturer block contains SOHO access points 4 OUI manufacturer block contains enterprise access points manufacturer block contains wireless dients WiFi tags or scanners 1 Any device on the network not categorized with a higher score Table 102 RAPIDS Add Edit Score Override Page Fields Field Description MAC Address Prefix Use this field to define the OUI prefix to be re scored Score Use this field to set the score that a device with the specified MAC address prefix will receive 3 Enter in the six digit MAC prefix for which to define a score and select the desired score Once the new score has been saved all detected devices with
474. terfaces i Interface Information Edit Interfaces Down Admin Status Up Last Contacted 1 26 2010 3 50 PM 26 w v h lun e 1 a norme EA MA Type ethernetCsmacd Alias Description FastEthernet0 4 T MAC Address 00 18 18 8D 40 06 EE BW In kbps 0 BW Out kbps 0 FastEthernet0 1 Bandwidth Interface Errors Ethernet 802 3 Counters Cisco Counters Bandwidth Last 10 hours M FastEthernet0 4 FAA FastFthernetN A see An individual Interface monitoring page includes is comprised of 2 sections Specifics of the interface are in the upper section as depicted in Figure 90 Figure 90 Individual Interface Information Section Operational Status Down Admin Status Up Last Contacted 1 26 2010 3 50 PM Type ethernetCsmacd Alias Description FastEthernet0 4 MAC Address 00 18 18 8D 40 06 BW In kbps 0 BW Out kbps 0 Bandwidth and various standard and enterprise specific error counting information is displayed in the lower section in a tabbed graph What Next All device lists in AWMS act as portals to management pages if you have the proper read write privileges Selecting the wrench or pencil icon next to a device table entry or selecting Modify Devices where appropriate above a device table will take you to the appropriate Management page APs Devices gt Manage See Configuring and Managing Devices on page 132 for more information Auditing Device Configuration When you have added a newly disco
475. tes configuration page allows you to create configuration templates for the following types of devices e Dell PowerConnect W NOTE Dell recommends using the graphical Dell Config feature in support of Dell PowerConnect W devices Refer to the Dell PowerConnect W Configuration Guide in Home Documentation for additional information e Aruba e Alcatel Lucent e Cisco Aironet IOS autonomous APs e Cisco Catalyst switches e HP ProCurve 530 and WeSM controllers e Nomadix e Symbol e Trapeze m 3Com s Nortel a Enterasys Template Variables Variables in templates configure device specific properties such as name IP address and channel Variables can also be used to configure group level properties such as SSID and RADIUS server which may differ from one group to the next The AWMS template understands many variables including the following Dell PowerConnect W AirWave 7 2 User Guide Creating and Using Templates 149 ap include 1 through ap include 10 channel shostname ip address ofdmpower The variable settings correspond to device specific values on the APs Devices gt Manage configuration page for the specific AP that is getting configured Ln NOTE Changes made on the other Group pages Radio Security VLANs SSIDs and so forth are not applied to any APs that are configured by templates Viewing and Adding Templates Perform these steps to display add or edit templates l Goto the Groups
476. th firmware version 3 3 2 7 Note No template is available for Aruba 3200 devices with firmware version 3 3 2 8 rn 3 0 Note No template is available for Symbol RFS7000 devices with firmware version 1 1 1 0 003R Note No template is av Note No template is i 22 92 3 a a z a Note No template is available for Aruba 3600 devices with firmware version 3 3 2 z z 3 Z able for Cisco Aironet 871W devices with firmware version 12 4 4 T7 New Template Templates allow you to manage the configuration of 3Com Alcatel Lucent Aruba Cisco Aironet IOS Enterasys HP Hirschmann LANCOM Nomadix Nortel Symbol and Trapeze devices in this group using a configuration file Variables in the templates are used to configure device specific properties like name IP address and channel as well as group level properties ssid radius server etc Name a Device Type Status Fetch Date Version Restriction g Aruba 200 Aruba 200 Template saved 1 19 2008 11 43 PM 3 2 0 3 g Aruba 200 3 3 1 1 Aruba 200 Template saved 2 28 2008 6 24 AM None Aruba 3600 3 2 0 3 Aruba 3600 Template saved 1 18 2008 11 06 AM 3 2 0 3 g Aruba 800 Aruba 800 Template saved 2 27 2008 10 58 PM None Aruba 800 3 1 1 7 Aruba 800 Template saved 1 20 2008 2 09 AM 3 1 1 7 Table 88 Groups gt Templates Fields and Default Values Setting Description Notes When applicable this section lists devices that are active on the network with no tem
477. the AWMS shared secret 2 Select Update to save Configuring Data in Accounting Packets l Navigate to User Management gt Accounting gt Shared Events 2 Map the following attributes to corresponding data elements Framed IP Address User IP User Name LocalUser Calling Station ID User MAC K NOTE These attribute element pairs are mandatory for username display within AWMS Dell PowerConnect W AirWave 7 2 User Guide Cisco Clean Access Integration Perfigo 267 268 Cisco Clean Access Integration Perfigo Dell PowerConnect W AirWave 7 2 User Guide Appendix F HP Insight Install Instructions for AWMS Servers To install HP Compaq Insight Manager on the AWMS perform the following steps l 10 l 12 Use SCP to move the two files over to the server hpasm 7 8 0 88 rhel4 i386 rpm The actual HP agents hpsmh 2 1 9 178 1inux i386 rpm lt The HP web portal to the agents Enter rpm i hpasm 7 8 0 88 rhel4 i386 rpm at the command line interface Enter hpasm activate Take the default values You will need the SNMP RW and RO strings at this point Enter rpm i nopre hpsmh 2 1 9 178 1inux i386 rpmat the command line interface The nopre syntax component is required to keep the RPM from producing errors on CentOS as opposed to Red Hat This rpm must be run after the hpasm RPM because the pre install scripts in the hpsmh RPM are not being run Enter perl usr local hp hpSMHSetup pl This c
478. the Password that will be used to authenticate into the WDS and select Submit 7 8 9 Enter the Password that will be used to authenticate into the WDS and select Submit For additional and more general information about ACS refer to Configuring ACS Servers on page 61 Configuring Cisco WLSE Rogue Scanning The AMP Setup gt WLSE page allows AWMS to integrate with the Cisco Wireless LAN Solution Engine WLSE AWMS can discover APs and gather rogue scanning data from the Cisco WLSE Figure 28 illustrates and itemizes the AWMS settings for communication that is enabled between AWMS and WLSE Figure 28 AMP Setup gt WLSE gt Add WLSE Page Illustration WL SE Hostname IP Address o Protocol Fi Part 3T 0 Username Password Confirm Password Poll for amp P Discovery Yes O No Poll for Roque Discovery 9 ves No Polling Period 10 minutes Perform the following steps for optional configuration of AWMS for support of Cisco WLSE rogue scanning 1 To add a Cisco WLSE server to AWMS navigate to the AMP Setup gt WLSE page and select Add Complete the fields in this page lable 32 describes the settings and default values Table 32 AMP Setup gt WLSE Fields and Default Values Setting Default Description Hostname IP Address Designates the IP address or DNS Hostname for the WLSE server which must already be configured on the Cisco WLSE server Protocol HTTP Specifies the protocol to be used
479. the managed AMPs make sure that the Manage Group Configuration option is enabled for each managed AWMS Once Global Groups have been configured on the Master Console groups must be created or configured on the managed AMPs to subscribe to a particular Global Group To configure subscriber groups enable Use Global Groups on the Group gt Basic page of a group on a managed AWMS Select the name of the Global Group from the drop down menu and then select Save and Apply Note that the MC doesn t push anything when you create new subscriber groups the copy of the Global Group already on the managed AMP provides the information Dell PowerConnect W AirWave 7 2 User Guide Performing Daily Administration in AWMS 213 Once the configuration is pushed the non overridden fields from the Global Group will appear on the subscriber group as static values and settings Only fields that had the override checkbox selected in the Global Group will appear as fields that can be set at the level of the subscriber group Any changes to a static field must be made on the Global Group The Global Groups feature can also be used without the Master Console For more information about how this feature works refer to Configuring and Using Device Groups in AWMS on page 69 Upgrading AWMS The AWMS upgrade process may change Please contact support and consult the latest AWMS release announcement for detailed instructions and changes Upgrade Instructions To
480. third parties Sun Sun Microsystems the Sun logo and Solaris are trademarks or registered trademarks of Sun Microsystems Inc in the U S and other countries Redistribution and use in source and binary forms with or without modification are permitted provided that the following conditions are met Redistributions of source code must retain the above copyright notice this list of conditions and the following disclaimer Redistributions in binary form must reproduce the above copyright notice this list of conditions and the following disclaimer in the documentation and or other materials provided with the distribution Neither the name of the Sun Microsystems Inc nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED IN NO EVENT SHALL THE COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT INDIRECT INCIDENTAL SPECIAL EXEMPLARY OR CONSEQUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES LOSS OF USE DATA OR PROFITS OR BUSINESS INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY WHETHER IN CONTRACT STRICT LIABILITY OR TORT INCLUDING NEGLIGENCE OR O
481. tial AWMS configuration e Formatting the Top Header on page 29 e Customizing Columns in Lists on page 30 e Resetting Pagination Records on page 31 e Using the Pagination Widget on page 31 e Using CSV Export for Lists and Reports on page 31 e Defining Graph Display Preferences on page 32 e Customizing the Overview Subtab Display on page 32 e Setting Severe Alert Warning Behavior on page 34 e Defining General AWMS Server Settings on page 34 e Defining AWMS Network Settings on page 41 e Creating AWMS Users on page 43 e Creating AWMS User Roles on page 44 e Enabling AWMS to Manage Your Devices on page 47 e Configuring TACACS and RADIUS Authentication on page 52 e Configuring Cisco WLSE and WLSE Rogue Scanning on page 56 e Configuring ACS Servers on page 61 e Integrating AWMS with an Existing Network Management Solution NMS on page 62 e Auditing PCI Compliance on the Network on page 63 e Deploying WMS Offload on page 66 K NOTE Additional configurations of multiple types are available after basic configuration is complete Before You Begin Remember to complete the required configurations in this chapter before proceeding Dell support remains available to you for any phase of AWMS installation Formatting the Top Header The AWMS interface centers around a horizontal row of tabs with nested subtabs A row of statistics hyperlinks
482. tion not on a per CPU basis of the controller controllers only Memory Utilization Reports average used and free memory and average max memory for the controller controllers only Channel Utilization Displays max and average percentages per radio for busy interfering receiving and transmitting Dell PowerConnectW signals Special configuration on the controller is required to enable this data consult the Best and Cisco WLC thin Practices Guide in Home Documentation for details APs on supported firmware versions only Dell PowerConnect W AirWave 7 2 User Guide Discovering Adding and Managing Devices 121 Table 76 describes the fields and information displayed for the Connected Users display Table 76 APs Devices gt Monitor gt Connected Users Fields and Default Values Field Description User Provides the name of the User associated to the AP AWMS gathers this data in a variety of ways It can be taken from RADIUS accounting data or traps MAC Address Displays the Radio MAC address of the user associated to the AP Also provides a link that redirects to the Users Detail page Displays the radio to which the user is associated Displays the first time AWMS recorded the MAC address as being associated Displays the length of time the MAC address has been associated Auth Type Displays the type of authentication employed by the user Supported auth types are as follows EAP Extensible Authentication Protoco
483. tion Basics on page 22 e Getting Started with AWMS on page 27 CAUTION AWMS does not support downgrading to older versions Significant data could be lost or compromised in such a AN downgrade In unusual circumstances requiring that you return to an earlier version of AWMS we recommend you perform a fresh installation of the earlier AWMS version and then restore data from a pre upgrade backup AWMS Hardware Requirements and Installation Media The AWMS installation CD includes all software including the Linux OS required to complete the installation of the AirWave Wireless Management Suite AWMS supports any hardware that is Red Hat Enterprise Linux 5 certified By default all installs are based on a 64 bit operating system AWMS hardware requirements vary by version As additional features are added to AWMS increased hardware resources become necessary For the most recent hardware requirements refer to the Dell PowerConnect W AirWave Sizing Guide from support dell com manuals AWMSS is intended to operate as a soft appliance Other applications should not run on the same installation Additionally local shell users can access data on AWMS so it 1s important to restrict access to the shell only to authorized users You can create sudo users in place of root for companies that don t allow root logins Installing Linux CentOS 5 Phase 1 Perform the following steps to install the Linux CentOS 5 operating system The Linux ins
484. tion page This enables AP specific settings such as Channel to be managed effectively on an AP by AP basis The list of used and available variables appears on the template detail configuration page Variables are always encapsulated between signs The following example illustrates this usage hostname hostname interface DotliRadio0 power local cck CCK POWERS power local ofdm OFDM POWERS channel CHANNELS The hostname line sets the AP hostname to the hostname stored in AWMS The power lines set the power local cck and ofdm values to the numerical values that are stored in AWMS Configuring Cisco IOS Templates Cisco IOS access points have hundreds of configurable settings AWMS enables you to control them via the Groups gt Templates configuration page This page defines the startup config file of the devices rather than using the AWMS normal Group configuration pages AWMS no longer supports making changes for these devices via the browser based page but rather uses templates to configure all settings including settings that were controlled formerly on the AWMS Group configuration pages Perform these steps to configure a Cisco IOS Template for use with one or more groups and the associated devices This section includes the following topics Applying Startup config Files WDS Settings in Templates SCP Required Settings in Templates 158 Creating and Using Templates Dell PowerConnect W AirWave 7 2 User Gu
485. tion page locate the SNMP Settings section and enter or revise the following information Table 20 lists the settings and default values Table 20 Device Setup gt Communication gt SNMP Settings Fields and Default Values Setting Default Description SNMP Timeout 3 Sets the time in seconds that AWMS waits for a response from a device after sending an SNMP request SNMP Retries 3 Sets the number of times AWMS tries to poll a device when it does not receive a response within the SNMP Timeout Period or the Group s Missed SNMP Poll Threshold setting 1 100 If AWMS does not receive an SNMP response from the device after the specified number of retries AWMS classifies that device as Down 3 Locate the SNMP v3 Informs section Select Add New SNMP v3 User to reveal its configuration section AMP users will need to configure all v3 users that are configured on the controller the SNMP Inform receiver in the AMP will be restarted when users are changed or added to the controller Username Username of the SNMP v3 user as configured on the controller Auth Protocol Can be MD5 or SHA The default setting is SHA Auth and Priv Passphrases Enter the auth and priv passphrases for the user as configured on the controller Priv Protocol Can be DES or AES The default setting 1s DES 4 Locate the Telnet SSH Settings section and complete or adjust the default value for the field Table 21 shows the setting and default value Table 2
486. tion table of APs Displays the LAN hostname of the user MAC Specifies whether the user is a guest VPN IP Address Displays the VPN IP of the user MAC This information can be obtained from VPN servers that send RADIUS accounting packets to AWMS VPN Hostname Displays the VPN hostname of the user MAC Supporting Guest WLAN Users With the Users Guest Users Page AWMS supports guest user provisioning for Dell PowerConnect W and Cisco WLC devices This allows frontline staff such as receptionists or help desk technicians to grant wireless access to WLAN visitors or other temporary personnel Vi NOTE The Guest User Preferences section on AMP Setup gt Roles as well as the Users gt Guest Users subtab will not appear if Guest User Configuration is globally disabled in AMP Setup gt General Perform the following steps in the pages described to configure these settings 1 Navigate to the AMP Setup gt Roles page and select the Read Only Monitoring amp Auditing role type Under Guest User Preferences enable Allow creation of Guest Users 2 Next navigate to the AMP Setup gt Users page and create a new user with the role that was just created Vigure 131 illustrates this page Figure 131 AMP Setup Users Page lllustration User Username Imi 0 Role Read Only Monitoring amp Password Jee Confirm Password Jee Name Muir Woods Email Address malexample com Phone Notes Will cre
487. tion to user needs Capacity Combined b s The combined capacity in and out of the device in bits per second Usage While Threshold The time in which a device has functioned above defined threshold capacity both in and out Combined Using the Configuration Audit Report The Configuration Audit Report provides an inventory of device configurations on the network enabling you to display information one device at a time one folder at a time or one device group at a time This report links to additional configuration pages Perform these steps to view the most recent version of the report then to configure a given device using this report l Navigate to the Reports gt Generated page 2 Scroll to the bottom and select Latest Configuration Audit Report to display Detail device configuration information for all devices The ensuing Detail report can be very large in size and provides multiple links to additional device configuration or information display pages 3 You can display device specific configuration to reduce report size and to focus on a specific device When viewing configured devices on the Detail page select a device in the Name column The device specific configuration appears 4 You can create or assign a template for a given device from the Detail page Select Add a Template when viewing device specific configuration information 5 You can audit the current device configuration from the Det
488. tions as described above are complete select Save and Apply to make the changes permanent or select Revert to discard all unapplied changes Dell PowerConnect W AirWave 7 2 User Guide Configuring and Using Device Groups in AWMS 91 An Overview of Cisco WLC Configuration The Groups gt Cisco WLC Config page consolidates the settings for Cisco WLC devices from all group pages The Groups gt SSIDs subtab applies to all device types except for Cisco WLC which have WLANs configured on the Cisco WLC Config page It is not recommended to have HP Procurve 420s Symbol 4131 and Proxim APs in the same group as Cisco devices Also it 1s recommended that users set device preferences to Only devices in this group This topic describes how to access and navigate the Groups gt Cisco WLC Config page Accessing Cisco WLC Configuration Go to the Cisco WLC Config page in one of these two ways l In Groups gt List select a group that has been defined to support Cisco devices and the Cisco WLC Config option appears in the subtabs 2 In Groups gt List create a new group to support Cisco devices with these steps Select Add from the Groups gt List page to create a new group enter a group name and select Add Once AWMS prompts you with the Groups gt Basic page ensure that you enable device specific settings for Cisco WLC Once you select Save or Save and Apply then the Groups gt Cisco WLC Config subtab appears in the navigati
489. trict the rule to apply to non ad hoc devices Dell PowerConnect W AirWave 7 2 User Guide Using RAPIDS and Rogue Classification 173 If More Than Four APs Have Discovered a Device Then Classity as Rogue By default AWMS tries to use Signal Strength to determine if a device is on your premises Hearing device count is another metric that can be used The important concept in this scenario is that legitimate neighboring devices are only heard by a few APs on the edge of your network Devices that are heard by a large number of your APs are likely to be in the heart of your campus This rule works best for scenarios in large campuses or that occupy an entire building For additional rules that may help you in your specific network scenario contact Dell support Using RAPIDS Rules with Additional AWMS Functions Rules that you configure on the RAPIDS gt Rules page establish an important way of processing rogue devices on your network and flagging them for attention as required Such devices appear on the following pages in AWMS with additional information RAPIDS gt List Lists rogue devices as classified by rules RAPIDS gt Rules Displays the rules that classify rogue devices RAPIDS gt Overview Displays general rogue device count and statistical information System gt Triggers Displays triggers that are currently configured including any triggers that have been defined for rogue events Reports gt Definitions
490. troller name takes you to the APs Devices gt List page Figure 163 and Table 132 illustrate and describe the Reports gt Generated gt IDS Events Detail page Dell PowerConnect W AirWave 7 2 User Guide Creating Running and Emailing Reports 229 Figure 163 DS Events Report Illustration IDS event yesterday for All Groups and Folders 52 XML XHTML 5 20 2009 2 00 AM to 5 21 2009 2 00 AM por Generated on 5 21 2009 2 23 AM 2 CSV export Jii Email this report Top IDS Events by AP fh print report AP Total Events 4 First Event Most Recent Event idhasoft ap70 2 2 5 20 2009 11 06 PM 5 20 2009 11 06 PM Top IDS Events by Controller Controller Total Events 4 First Event Most Recent Event RAP Local 2 5 20 2009 11 06 PM 5 20 2009 11 06 PM 1 2w of 2Items Page lwof1 Attack Attacker AF Controller Radio Channel SNR Precedence Time Nul Probe Response 00 1A 70 77 9C CF idhasoft ap 0 2 RAP Local 802 11bg 4 5 20 2009 11 06 PM Mul Probe Response 00 1A 70 77 9C CF idhasoft ap70 2 RAP Local 802 11bg 4 5 20 2009 11 06 PM Table 132 DS Events Detail Unique Fields and Descriptions Field Description The name or label for the IDS event Controllers Lists the controllers for which IDS events have occurred in the prior 24 hours and links to its APs Devices gt Monitor page The MAC address of the device that generated the IDS event LENNNNLTTITIICTT TII OO Using the Inventory Report The Inventory Report itemizes all device
491. ttons and Icons of the AWMS User Page Continued Function TL LET C Description User ma Indicates a user View Historical m Displays all data series for the selected graph over the last two hours last day last week Graph in New last month and last year in one page Window VisualRF Links to VisualRF real time visualization Links to export XHTML versions of reports a Not all AWMS GUI components are itemized in graphic format in this table Getting Started with AWMS This topic describes how to perform an initial launch of the AWMS network management solution Use your browser to navigate to the static IP address assigned to the internal page of the AWMS Enter the User Name and Password as admin admin for your initial login and then select OK After successful authentication your browser launches the Home gt Overview page NOTE AWMS pages are protected via SSL Some browsers will display a confirmation dialog for your self signed certificate K Signing your certificate will prevent this dialog from displaying Dell recommends changing the default login and password on the AMP Setup gt Users page Refer to the procedure Creating AWMS User Roles on page 44 for additional information Dell PowerConnect W AirWave 7 2 User Guide Installing AWMS 27 28 Installing AWMS Dell PowerConnect W AirWave 7 2 User Guide Chapter 3 Configuring AWMS This chapter contains the following procedures to deploy ini
492. ture with a frequency of Daily or more frequently to ensure that your AP configurations comply with your established policies device settings and the Group configuration policy in the AWMS database Automatically Repair Disabled If enabled this setting automatically reconfigures the settings on the device when Ar ad the device is in Manage mode and AWMS detects a variance between actual evices Send Debugging Enabled If enabled AWMS automatically emails any system errors to Dell Support to assist Messages in debugging Specifies the local time of day AWMS should perform daily maintenance During maintenance AWMS cleans the database performs backups and completes a few other housekeeping tasks Such processes should not be performed during peak hours of demand AWMS User 120 Sets the amount of time in minutes that an AWMS user session lasts before the Authorization Lifetime user must authenticate when a new browser window is opened Setting the lifetime Nightly Maintenance Time 00 00 23 59 0 240 min to 0 requires the user to log in every time a new browser window is opened Check for Software Enables AWMS to check automatically for multiple update types Check daily for AWMS updates to include enhancements device template files important security updates and other important news This setting requires a direct internet connection via AWMS Updates 2 Select the Top Header Stats to be displayed at the top
493. ually or you can configure RAPIDS so that manually classifying rogues will automatically acknowledges them Additionally devices can be acknowledged by using Modify Devices of the List page Rogues should be acknowledged when the AWMS user has investigated them and determined that they are not a threat see Basic Configuration on page 167 RAPIDS Classification Displays the current RAPIDS classification This classification is determined by the rules defined on the RAPIDS Rules page 174 Using RAPIDS and Rogue Classification Dell PowerConnect W AirWave 7 2 User Guide Table 101 RAPIDS List Column Definitions Continued Column Description Threat Level This field displays the numeric threat level of the device in a range from 1 to 10 The definition of threat level is configurable as described in Rogue Device Threat Level on page 171 The threat level is also supported with Triggers see Monitoring and Supporting AWMS with the System Pages on page 205 Displays the alpha numeric name of the rogue device as known By default AWMS assigns each rogue device a name derived from the OUI vendor and the final six digits of the MAC address Displays the RAPIDS Rule that classified the rogue device see Viewing and Configuring RAPIDS Rules on page 171 Classifying Rule Controller Displays the classification of the device based on the controller s hard coded rules Classification NOTE This column is hidden
494. uide Configuring and Using Device Groups in AWMS 83 Table 52 Groups gt SSIDs Fields and Descriptions Continued Field Description Encryption Mode Displays the encryption on the VLAN First or Second Radio Enables the VLAN SSID and Encryption Mode on the radio control Enabled First or Second Radio specifies which VLAN to be used as the primary VLAN A primary VLAN is required Primary NOTE If you create an open network see the Create Closed Network setting below in which the APs broadcast an SSID the primary SSID is broadcast Native VLAN Sets this VLAN to be the native VLAN Native VLANs are untagged and typically used for management traffic only AWMS requires a Native VLAN to be set For AP types do not require a native VLAN create a dummy VLAN disable it on both radio controls and ensure that it has the highest VLAN ID 3 Select Add to create a new SSID or VLAN or select the pencil icon next to an existing SSID VLAN to edit that existing SSID or VLAN The Add SSID VLAN configuration page appears as illustrated in Figure 41 and explained in Table 53 Figure 41 Groups SSIDs Add SSID VLAN Page lllustration SSID VLAN RADIUS Authentication Servers Specify Interface Name Q9 Yes No RADIUS Authentication Server 1 Cisco WLC Select ProCurve420 Proxim only Interface management RADIUS Authentication Server 2 Cisco WLC Select rmm SSID ProCurve420 Pro
495. ult to tamper with the packets RADIUS Authentication Servers Section RADIUS Authentication Not selected Defines one or more RADIUS Authentication servers to be supported in this device Server 1 4 group Select up to four RADIUS authentication servers from the four drop down menus AMP For Proxim devices only this field sets the name of the authentication profile to be Defined supported in this device group Server 1 Authentication Profile For Proxim devices only this field sets the name of the authentication profile index Index to be supported in this device group RADIUS Accounting Servers Section Authentication Profile Name RADIUS Accounting Server 1 4 Not selected Defines one or more RADIUS Accounting servers to be supported in this device group Select up to four RADIUS accounting servers from the four drop down menus Authentication Profile Accounting For Proxim devices only this field sets the name of the accounting profile to be Name supported in this device group Authentication Profile 3 For Proxim devices only this field sets the name of the accounting profile index to Index be supported in this device group MAC Address Authentication Section MAC Address If enabled only MAC addresses known to the RADIUS server are permitted to Authentication associate to APs in the Group MAC Address Format Single Dash Allows selection of the format for MAC addresses used in RADIUS authenti
496. ulti point see the Groups gt PTMP page for more details Mesh Links Displays the total number of mesh links to the device including uplinks and downlinks Bandwidth Displays the amount of bandwidth being pushed through the corresponding radio interface or device at the time of the last polling MAG Address Displays the MAC address of the corresponding radio in the AP Last RAD Scan Displays the last time the device performed a wireless rogue scan and the number of devices discovered during the scan Notes A free form text field for entering fixed asset numbers or other device information This information is printed on the nightly inventory report Notes can be entered on the APs Devices Manage page This field is only available for mesh APs Table 75 describes graph information displayed in the Graphical Data section Table 75 APs Devices Monitor Graphical Data Fields and Default Values Description Shows the max and average user count reported by the device radios for a configurable period of time User count for controllers are the sum of the user count on the associated APs Checkboxes below the graph can be used to limit the data displayed Bandwidth Shows the bandwidth in and out reported by the device for a configurable period of time Bandwidth for controllers is the sum of the associated APs Checkboxes below the graph can be used to limit the data displayed CPU Utilization Reports overall CPU utiliza
497. umeric characters both upper and lower case blank spaces hyphens and underscore characters Choose the type of scan to be completed SNMPv1 SNMPv2 or HTTP In most cases perform scans using SNMP for device discovery but consider the following factors in your decision SNMPv1 and SNMP v2 differ between in their supported traps supported MIBs and network query elements used in device scanning HTTP discovers devices using the HyperText Transfer Protocol in communications between servers and additional network components HTTP is not as robust in processing network events as is SNMP but HTTP may be sufficient simpler or preferable in certain scenarios Define and confirm the Community String to be used during scanning In this section the community string used can be either read only or read write as AWMS only uses it for discovering APs To bring APs under management AWMS uses the credentials supplied in the Device Setup gt Communication SNMP section K NOTE AWMS automatically appends the type of scan SNMP or HTTP to the Label Once the device is authorized it will use the non scanning credentials Select Add The Device Setup gt Discover page displays the new scan credential or credentials just created or edited Repeat these steps to add as many credentials as you require Once scan networks and scan credentials are defined combine them by creating scan sets using the next procedure Defining a
498. unless Offload WMS Database is enabled by at least one group on the Groups Basic page WMS Classification The AP that provided the information used to classify the device WMS Classification The date that WMS decided the classification Date Confidence The confidence level of the suspected rogue How confidence is calculated varies based on the version of ArubaOS When an ArubaOS controller sees evidence that a device might be on the wire it will up the confidence level If ArubaOS is completely sure that it is on the wire it gets classified as a rogue Wired Displays whether the rogue device has been discovered on one of your wired networks by polling routers switches your SNMP HTTP scans or Dell WIP information This column displays Yes or is blank If wired information was not detected Detecting APs Displays the number of AP devices that have wirelessly detected the rogue device designation of heard implies the device was heard over the air Location As with most List pages in AWMS the RAPIDS List page includes the Location column If the rogue has been placed in VisualRF this column will display the name of the floor plan the rogue is on RAPIDS and VisualRF must be licensed on the AWMS for this functionality to be supported Displays the most recent SSID that was heard from the rogue device Displays the strongest signal strength detected for the rogue device Displays Received Signal Strength Indication RSSI designati
499. urations Perform the following steps to compare two existing device groups l From the Groups gt List page select Compare two groups Two drop down menus appear 2 Select the two groups to compare to each other in the drop down menus and select Compare The Compare page appears displaying some or many configuration categories Figure 59 illustrates this page 100 Configuring and Using Device Groups in AWMS Dell PowerConnect W AirWave 7 2 User Guide Figure 59 Comparing Two Devices Groups on the Groups gt List gt Compare Page Partial View Comparing group HQ RemoteAP to group Outdoor Show Similar Fields HQ RemoteAP edit Outdoor edit 802 11 Counters Polling Period 30 minutes ap 15 minutes Allow One to One NAT No ap Yes Bridge Forward Delay 15 ap 16 Bridge Hello Time 2 ab 4 Bridge Maximum Age 20 E 22 Bridge Priority 32768 ub 32760 Cisco IOS CLI Communication Telnet E SSH Cisco IOS Config File Communication TFTP ub SCP Device Bandwidth Polling Period 10 minutes Ld 5 minutes Device to Device Link Palling Periad 15 minutes ub 30 minutes NTP Polling Interval 86400 Ld 3600 NTP Server 1 empty string ab 10 2 25 162 Override Polling Period for Other Services Yes Ld No Read ARP Table 4 hours ab 8 hours Read Bridge Forwarding Table 4 hours Ld 8 hours Read CDP Table for Device Discovery 4 hours ab 8 hours 3 Note the following factors when using the Compare page The Compare page can be very long or very ab
500. ure including upstream switches RADIUS servers and other devices While AWMS can manage most leading brands and models of wireless infrastructure universal device support also enables basic monitoring of many of the less commonly used devices Dell PowerConnect W AirWave 7 2 User Guide Discovering Adding and Managing Devices 115 Perform the same steps to add universal devices to AWMS that were detailed in Adding Devices with the Device Setup gt Add Page on page 112 AWMS collects basic information about universal devices including name contact uptime and location Once you have added a universal device you can view a list of its interfaces on APs Devices gt Manage By selecting the pencil icon next to an interface you can assign it to be non monitored or monitored as Interface l or 2 AWMS collects this information and displays it on the APs Devices gt Monitor page in the Interface section AWMS supports MIB II interfaces and polls in out byte counts for up to two interfaces AWMS also monitors sysUptime Assigning Devices to the Ignored Page There are two ways a device can be assigned to the Ignored page from the APs Devices gt New page or from the APs Devices gt Manage page The advantage of having the device be designated in this way as in the case of a device that is temporarily down for a known reason is that when you take it off the ignored list it returns immediately to the location in AMP where it
501. ure to forward email to a smarthost l Add the following line to etc postfix main cf relayhost mail example com Dell PowerConnect W AirWave 7 2 User Guide Creating Running and Emailing Reports 245 Where mail example comis the IP address or hostname of your smarthost 2 Run service postfix restart 3 Senda test message to an email address Mail v xxx xxx com Subject test mail P et 4 Press Enter 5 Check the mail log to ensure mail was sent tail f var log maillog Exporting Reports to XML or CSV AWMS allows you to export individual reports in XML xhtml or CSV You can also export all reports at once and a zip file will be generated with all of the files in CSV format included These files may be read by an HTML browser or opened in Excel The CSV files can be opened in any text editor K NOTE This method of exporting files supports graphics and links and prevents Missing File C filename css error messages Transferring Reports Using FTP Once reports are generated you can also copy them to any FTP accessible destination using a sample script Contact Dell support for more information 246 Creating Running and Emailing Reports Dell PowerConnect W AirWave 7 2 User Guide Chapter 10 Using the AWMS Helpdesk This chapter presents the functions configuration and use of the AWMS Helpdesk and includes the following sections AWMS Helpdesk Overview on page 247 Monitoring Inc
502. ured in AWM S Refer to Configuring Basic Group Settings on page 72 Templates This page manages templates for any device group Templates allow you to manage the configuration of Dell PowerConnect W 3Com Alcatel Lucent Aruba Networks Cisco Aironet IOS Cisco Catalyst switches Enterasys HP Nomadix Nortel Symbol and Trapeze devices in a given group using a configuration file Variables in such templates configure device specific properties such as name IP address and channel Variables also define group level properties For additional information about using the Templates page refer to Chapter 6 Creating and Using Templates on page 149 Security This page defines general security settings for device groups to include RADIUS encryption and additional security settings on devices Refer to Configuring Group Security Settings on page 80 SSIDs This page sets SSIDs VLANs and related parameters in device groups Refer to Configuring Group SSIDs and VLANs on page 83 e AAA Servers This page configures authentication authorization and accounting settings in support of RADIUS servers for device groups Refer to Adding and Configuring Group AAA Servers on page 79 Radio This page defines general 802 11 radio settings for device groups Refer to Configuring Radio Settings for Device Groups on page 87 Dell Config This page manages ArubaOS Device Groups AP Overrides and other profil
503. uring WLANS for Cisco WLC Devices sess 93 Defining and Configuring LWAPP AP Groups for Cisco Devices 95 Viewing and Creating AP Groups seravenvnnrnvrvarenvrrenervenennsnenesvnrenessrnesvnnanssvnnanesvnnsnenvevennnnsnnn 95 Configuring Cisco Controller Settings rrrsrannnanrnrnnrnvnvarenvanrnvnvavenrrnsnvnvarennensvenvevennenenesvevennensne 95 Configuring Wireless Parameters for Cisco Controllers ees 96 Configuring Security Parameters and Functions essent 96 Configuring Management Settings for CISCO essent 96 Configuring Group PTMP Settings esses tnnt nnns 97 Configuring Proxim Mesh Radio Settings essent 97 Configuring Group MAC Access Control Lists essere 99 Specifying Minimum Firmware Versions for APs in a Group esee 99 Comparing Device Broups uscuisieccicinisinicerextivectisexisni ra ip an ck rri nr x a raa 100 Deleting E EESTI 101 Changing Multiple Group Configurations cssessessssssssesssscsessseessseceeseseescsesesaesesesseseeasenees 101 Modifying Multiple Devices mmmrrrovrnerrrnrsrrnvrrenvrnrrrnnvrrenrrnrrnanrsnanvnnennnnrrnsnnnnannrnsnnnvensrnennsnnnnenenn 102 Using Global Groups for Group Configuration
504. v59 Vlan59 propVitual Catalyst VLAN VI59 Yes O No E v50 Vlan50 propVirttual Catalyst VLAN Vlan50 vI50 Yes No Vi Vlani propVirtual Catalyst VLAN Vlani Vli O Yes No O vi59 Vlan59 propVirtual Catalyst VLAN Vlan59 Vl59 Yes O No NuO Nullo other Nullo NuO Yes O No E w visi Vlan51 propVitual Catalyst VLAN vlan51 VIs1 O Yes No Vli Vlani propVirtual Catalyst VLAN Vii Yes No 1 9 w of 9 Interfaces Page i v of 1 Select All Unselect All AWMS assembles the entire running configuration using templates and your modifications to these pages For a more detailed discussion on templates see Chapter 6 Creating and Using Templates on page 149 Individual Device Support and Firmware Upgrades Perform the following steps to configure AP communication settings for individual device types 1 Locate the Device Communication area on the APs Devices gt Manage page 2 Specify the credentials to be used to manage the AP l igure 101 illustrates this page Dell PowerConnect W AirWave 7 2 User Guide Discovering Adding and Managing Devices 141 Figure 101 APs Devices gt Manage gt Device Communication Device Communication View Device Credentials IF this device is down because its IP address or management ports have changed update the Fields below with the correct information IP Address 10 1 1 19 SNMP Port 161 IF this device is down because the credentials o
505. ve trigger and edit settings in the Trigger Detail page described in Table 104 To delete a trigger check the box next to the trigger to remove and select Delete Repeat this procedure for as many triggers and conditions as desired Complete the creation of your trigger type using one of the following procedures for each trigger Setting Triggers for Devices on page 184 Setting Triggers for Radios on page 184 Setting Triggers for Discovery on page 185 Setting Triggers for Users on page 185 Setting Triggers for RADIUS Authentication Issues on page 185 Setting Triggers for IDS Events on page 186 Setting Triggers for AWMS Health on page 186 Dell PowerConnect W AirWave 7 2 User Guide Performing Daily Administration in AWMS 183 Setting Triggers for Devices Perform the following steps to configure device related triggers a Choose a device type from the Devices listed in the Type drop down menu See Figure 126 Table 104 itemizes and describes device trigger options and condition settings Table 104 Device Trigger Types Option Description Device Down This is the default type whenever configuring a new trigger This type of trigger activates when an authorized monitored AP has failed to respond to SNMP queries from AWMS To set the conditions for this trigger type select Add in the Conditions section Complete the conditions with the Option Condition and Value drop down menus
506. vered device successfully to a Group in Monitor mode the next step is to verify device configuration status Determine whether any changes will be applied to that device when you convert it to Managed read write mode AWMS uses SNMP or Telnet to read a device s configuration SNMP is used for Cisco controllers Dell PowerConnect W devices and wired routers and switches use Telnet SSH to read device configuration See Individual Device Support and Firmware Upgrades on page 141 for more details Perform these steps to verify the device configuration status l Browse to the APs Devices List page 2 Locate the device in the list and check the information in the Configuration column 3 If the device is in Monitor mode the lock symbol appears in the Configuration column indicating that the device is locked and will not be configured by AWMS 4 Verify the additional information in the Configuration column for that device e A status of Good indicates that all of the device s current settings match the group policy settings and that no changes will be applied when the device is shifted to Manage mode e A status of Mismatched indicates that at least one of the device s current configuration settings do not match the group policy and will be changed when the device is shifted to Manage mode 130 Discovering Adding and Managing Devices Dell PowerConnect W AirWave 7 2 User Guide 5 If the device configuration is Mis
507. verview Users gt Connected or User Detail Figure 127 Alert Summary Table Illustration Type a Last 2 Hours Last Day Total Last Event AMP Alerts 0 0 0 IDS Events 2 3 116 1 10 2011 12 09 PM Incidents RADIUS Authentication Issues 0 0 11 1 7 2011 1 10 PM This table displays alerts as follows select the alert Type to display alert details AMP Alerts Displays details for all device alerts IDS Events Displays details of all Intrusion Detection System IDS events and attacks under the RAPIDS tab You must have a RAPIDS license and be enabled as a RAPIDS user to see this page Incidents Displays recent helpdesk incidents in which the incidents are open and associated to an AP For a complete listing of incidents navigate to the Helpdesk gt Incidents page NOTE The Incidents portion of this Alert Summary table only increments the counter for incidents that are open and associated to K a Device Group or Folder Unassociated incidents are not are not counted in this Alert Summary To view all incidents including those not associated to an AP navigate to the Helpdesk gt Incidents page RADIUS Authentication Issues Displays RADIUS related alerts for devices in the top viewable folder available to the AWMS user The detailed list displays the MAC address username AP radio controller RADIUS server and time of each event Alerts can be sorted by any column Dell PowerConnect W AirWave 7 2 User Guide Perform
508. vesvrservesernenen 239 Using the User Session Report sse nnt 239 HE RODO S EE EE eee 242 Emailing and Exporting Reports cccccessssesssscssssesssscsssseeecseseeseseesesassecsssessusecsuseesesaeeesausesensess 245 Emailing Reports in General Email Applications senes 245 Emailing Reports to Smarthost sese eene tnter nnnes 245 Exporting Reports to XML or CSV esses tette nnns 246 Transferring Reports Using FTP rssnrononronenronornonvorenronvsvonvnnrnvanesnenvsnennrnennnnesnsnesvsnnsvennnnenn 246 Using the AWMS FANE oan en cuta i uu MXIE ERR NEG pU DEETIU HIDE CREE T TUEUUE 247 AWMS Helpdesk Overview rmnnnarervrnrnvrvarenvrvarenvrrenernarennsvenesnsrenesnennsnnnssnnnsvesvensnesnnnsnenvsvennnnenenenn 247 Monitoring Incidents with Helpdesk msrorenronrononrrronrrvenrrnrrvonrrrnvrvenvrnrrnanrnnanennsnnnnenvnnennnnennsnnnn 247 Creating a New Incident with Helpdesk esses 249 Creating New Snapshots or Incident Relationships r sesvrvrrvnvenvanvrrenvrvenervenerveservessrvervenen 250 Using the Helpdesk Tab with an Existing Remedy Server eese 251 Package Management for AWMS eese tnnt 255 pA EEE EE P 255 Third Party Security Integration for AWMS eene 25 Bluesocket Integration
509. vice Uptime Detail report Figure 162 Device Uptime Report Illustration Daily Device Uptime Report for All Groups Folders and SSIDs Help 5 20 2009 2 00 AM to 5 21 2009 2 00 AM XML XHTML Generated on 5 21 2009 2 23 AM export Total Average Uptime 2 CSV export SNMP Uptime ICMP Uptime Email this report 66 82 68 10 fet Print report Average Uptime by Group 1 10 w of 10 Groups Page i wof1 Group a SNMP Uptime ICMP Uptime HQ 54 55 58 28 HQ RemoteAP 72 8896 72 8896 Korea Regional Office 0 00 0 0096 Outdoor 100 0096 100 0096 Research Lab 57 5596 65 1196 Routers Switches 49 45 69 45 Test3 42 38 44 45 testlab 60 42 60 42 Training 39 52 45 56 Wireless 15 11 15 11 Average Uptime by Folder 1 10 w of 10 Folders Page w of 1 Folder 4 SNMP Uptime ICMP Uptime SNMP Uptime incl subfolders ICMP Uptime incl subfolders Top 27 39 42 25 66 82 68 10 Top gt APAC gt Korea 0 00 0 00 0 00 0 00 Top gt Outdoor 54 55 54 55 54 55 54 55 Top gt Pharmacy 7 04 7 30 7 04 7 30 Top gt Sunnyvale HQ 94 19 94 19 69 77 70 54 Top gt Sunnyvale HQ gt HQ Cisco LWAPP 66 67 66 67 66 67 66 67 Top gt Sunnyvale HQ gt HQ RAP 72 88 72 88 72 88 72 88 Top gt Sunnyvale HQ gt Lab 20 78 28 35 20 78 28 35 Top gt Switches 61 81 61 81 61 81 61 81 Top gt Training 43 91 50 63 43 91 50 63 Uptime by Device 1 20 w of 217 Devices Page iwofil gt gt Device a Group Folder SNMP Uptime ICMP Uptime Time Since
510. vices on new groups Settings include the following this AMP All Devices AWMS displays all Group tabs and setting options Only devices in this group AWMS hides all options and tabs that do not apply to the devices in the group If you use this setting then to get the group list to display the correct SSIDs for the group you must Save and Apply on the group Only devices on this AMP hides all options and tabs that do not apply to the APs and devices currently on AWMS Use system defaults Use the default settings on AMP Setup General Selected device types Allows you to specify the device types for which AWMS displays Group settings Selected Device This option appears if you chose to display selected device types allowing you to select the Types device types to display group settings Use Select devices in this group to display only devices in the group being configured 7 To assign dynamically a range of static IP addresses to new devices as they are added into the group locate the Automatic Static IP Assignment section on the Groups gt Basic configuration page If you select Yes in this section additional fields appear Complete these fields as required Table 40 describes the settings and default values This section 1s only relevant for a small number of device types and will appear when they are present Table 40 Automatic Static IP Assignment Fields and Default Values Default Description Assign Static
511. xample 255 255 252 0 The largest subnet AWMS supports is 255 255 0 0 6 Select Add 7 Repeat these steps to add as many networks for which to enable device scanning All network segments configured in this way appear in the Network section of the Device Setup gt Discover page 8 Complete the configuration of scan credentials then combine scan networks and scan credentials to create scan sets The next two procedures in this section describe these tasks Adding Credentials for SNMP HTTP Scanning The next step in SNMP HTTP device discovery is to define the scan credentials that govern scanning of a given network New APs inherit scan credentials from the System Credentials that you configure on the Device Setup gt Communications page Perform these steps to define scan credentials for SNMP HTTP scanning l Locate the Credentials section on the Device Setup gt Discover page This page displays scan sets networks and credentials that have been configured so far and allows you to define new elements for device scanning 2 To create a new scan credential select Add New Scan Credential Figure 66 illustrates this page 108 Discovering Adding and Managing Devices Dell PowerConnect W AirWave 7 2 User Guide Figure 66 Device Setup gt Discover gt Add Edit New Scan Credential Section Illustration Type NMI 3 Enter a name for the credential in the Name field for example Default This field supports alphan
512. xim only aa Name RADIUS Authentication Server 3 Cisco WLC Select p ProCurve420 Proxim only EE Maximum Allowed Associations 0 2007 255 Authentication Profile Name Proxim Only Broadcast SSID Cisco WLC Proxim and Symbol 4131 Y 9 N only es o Authentication Profile Index Proxim Only Partial Closed System Proxim only Yes 9 No RADIUS Accounting Servers Unique Beacon Proxim only Yes 9 No RADIUS Accounting Server 1 Cisco WLC Proxim Select Block All Inter Client Communication Yes No only RADIUS Accounting Server 2 Cisco WLC Proxim Select v E ti only EG Encryption Mode No Encryption RADIUS Accounting Server 3 Cisco WLC Proxim Select only x EAP Options Accounting Profile Name Proxim Only WEP Key Rotation Interval 0 10000000 sec 120 Accounting Profile Index Proxim Only Add Cancel 4 Locate the SSID VLAN section on the Groups gt SSIDs configuration page and adjust these settings as required This section encompasses the basic VLAN configuration lable 53 describes the settings and default values Note that the displayed settings can vary Table 53 Groups gt SSIDs gt SSID VLAN Section Fields and Default Values Setting Default Description Specify Interface Name Yes Enables or disables an interface name for the VLAN interface Selecting No for this option displays the Enable VLAN Tagging option Interface None Sets the interface to support the SSID VLAN combination Sets the Service Set Identifier
513. y 4 30 15 NTF NTP Server 1 NTP Server 2 NTP Server 3 UTC Time Zone 0 m Daylight Saving Time Wes S no 3 Define the settings in the Basic and Global Group sections Table 37 describes several typical settings and default values of this Basic section Table37 Basic and Global Groups Fields and Default Values Default Description Defined when first adding the group Displays or changes the group name s desired use this field to set the name to uniquely identify the group by location vendor department or any other identifier such as Accounting APs Cisco devices 802 1x APs and so forth Dell PowerConnect W AirWave 7 2 User Guide Configuring and Using Device Groups in AWMS 73 Table 37 Basic and Global Groups Fields and Default Values Continued Default Description Missed SNMP Sets the number of Up Down SNMP polls that must be missed before AWMS considers a Poll Threshold device to be down The number of SNMP retries and the SNMP timeout of a poll can be set on the Device Setup gt Communication page Regulatory United States Sets the regulatory domain in AWMS limiting the selectable channels for APs in the group Domain Timezone AMP System Allows group configuration changes to be scheduled relative to the time zone in which the Time devices are located This setting is used for scheduling group level configuration changes Allow One to Allows AWMS to talk to the devices on a differ
514. y changing group poll periods Allow WMS offload configuration in monitor only C Yes No mode Save Revert Allow disconnecting users while in monitor only mode Yes No Allow non UTF8 characters C Yes No Use Global Dell PowerConnect W Configuration Yes C No External Logging Include event log messages C Yes No Include audit log messages C Yes No Perform the following steps to configure AWMS server settings globally across the product for all users l Browse to the AMP Setup gt General page locate the General area and enter the information described in Table 8 Table8 AMP Setup General General Section Fields and Default Values Setting Default Description System Name AWMS Defines your name for the AWMS server with a maximum limit of 20 alphanumeric characters Dell PowerConnect W AirWave 7 2 User Guide Configuring AWMS 35 Table 8 AMP Setup gt General gt General Section Fields and Default Values Continued Setting Default Description Automatically Launches a drop down menu that specifies the behavior AWMS should follow monitor manage new when it discovers a new device Devices are placed in the default group which is devices defined in the next field Choose one of these options Monitor Only AWMS compares the current configuration with the policy and displays any discrepancies on the APs Devices Audit page but does not change the configuration of the device Manag
515. yption in wireless networks When Enabled PCI Requirement 4 establishes the standard by which payment cardholder data is encrypted prior to transmission across open public networks PCI disallows WEP encryption as an approved encryption method after June 20 2010 A device fails requirement 4 1 1 if the desired or actual configuration reflect that WEP is enabled on the network or if associated users can connect with WEP When Disabled AWMS cannot establish a pass or fail status with regard to PCI encryption requirements on the network Using intrusion detection or intrusion prevention systems to monitor all traffic When Enabled AWMS reports pass or fail status when monitoring devices capable of reporting IDS events Recent IDS events are summarized in the PCI Compliance report or the IDS Report When Disabled AWMS does not monitor the presence of PCI compliant intrusion detection or prevention systems nor can it report Pass or Fail status with regard to IDS events Enabling or Disabling PCI Auditing Perform these steps to verify status and to enable or disable AWMS support for PCI 1 2 requirements enabling one or all PCI standards on AWMS enables real time information and generated reports that advise on Pass or Fail status The PCI auditing supported in AWMS is reported in able 35 l To determine what PCI Compliance standards are enabled or disabled on AWMS navigate to the AMP Setup gt PCI Compliance page illustrated in Figur

Dell PowerConnect W-Airwave 7.2 User's Manual

Contents

Download Pdf Manuals

Related Search

Related Contents