Chapter 6 Deployment Examples (CLI)
70
Aerohive
E
XAMPLE
1: D
EPLOYING A
S
INGLE
H
IVE
AP
In this example, you deploy one HiveAP (HiveAP-1) to provide network access to a small office with 15
–
20 wireless
clients. You only need to define the following SSID (service set identifier) parameters on the HiveAP and clients:
•
SSID name
: employee
•
Security protocol suite
: WPA-auto-psk
•
WPA
–
Uses Wi-Fi Protected Access, which provides dynamic key encryption and mutual authentication of
the client and HiveAP
•
Auto
–
Automatically negotiates WPA or WPA2 and the encryption protocol: AES (Advanced Encryption
Standard) or TKIP (Temporal Key Integrity Protocol)
•
PSK
–
Derives encryption keys from a preshared key that the client and HiveAP both already have
•
Preshared key
: N38bu7Adr0n3
After defining SSID "employee" on HiveAP-1, you then bind it to the wifi0.1 subinterface, which is in access mode by
default. The wifi0.1 subinterface operates at the same frequency as the wifi0 interface, which by default is 2.4 GHz
(in accordance with the IEEE 802.11b and 802.11g standards). This example assumes that the clients also support
either 802.11b or IEEE 802.11g.
Figure 1
Single HiveAP for a Small Wireless Network
Step 1
Log in through the console port
1. Connect the power cable from the DC power connector on the HiveAP to the AC/DC power adaptor that ships
with the device as an option, and connect that to a 100
–
240-volt power source.
The Power LED glows steady amber during the bootup process. After the bootup process completes, it then
glows steady green to indicate that the firmware is loaded and running.
Note:
By default, the wifi1 interface is in backhaul mode and operates at 5 GHz to support IEEE 802.11a. To
put wifi1 in access mode so that both interfaces provide access
—
the wifi0.1 subinterface at 2.4 GHz
and the wifi1.1 subinterface at 5 GHz
—
enter this command:
interface wifi1 mode access.
Then, in addition to binding SSID "employee" to wifi0.1 (as explained in step 2), also bind it to wifi1.1.
Note:
If the switch supports PoE (Power over Ethernet), the HiveAP can receive its power that way instead.
Wireless Network-1
HiveAP-1
Switch
Firewall
Internet
DHCP Server
Wireless clients associate
with HiveAP-1 using SSID
"employee" with the security
suite WPA-auto-psk
(PSK = N38bu7Adr0n3).
The wireless clients and the mgt0
interface on HiveAP-1 receive their
IP addresses and associated TCP/IP
settings from the DHCP server.
Wired Network
wifi0.1 subinterface
SSID "employee"
Access mode
IEEE 802.11b/g
Physical interface: eth0
Logical interface: mgt0
Backhaul mode
Network portal
