manualshive.com logo in svg

Xirrus Wi-Fi Array XN12, User Manual

Share
Download
Xirrus Wi-Fi Array XN12 User Manual Download Page 54

Wi-Fi Array

34

Introduction

Security

Wireless Encryption

Line speed, hardware-accelerated encryption 
modes:
WPA TKIP
WPA2 AES
WEP 40/64
WEP 104/128

Wireless Authentication:

Open
Pre-shared Key
802.1X EAP
PEAP
EAP-TLS
EAP-TTLS
EAP-LEAP Pass-through
Web Page Redirect (Captive Portal)
MAC Address Access Control List (ACL)
CHAP, PAP

Firewall:

Integrated stateful-inspection, rules-based 
firewall

Rogue AP detection and blocking:

Integrated Rogue AP detection and alerting via 
dedicated internal RF Threat Sensor. Rogue AP 
can be shielded

Integrated RADIUS Server:

Integrated 802.1x Authentication Server 
supporting EAP-PEAP

Element

XN16/XN12/XN8 Specifications

Summary of Contents for Wi-Fi Array XN12

Page 1: ...December 17 2010 Release 5 0 DRAFT ...

Page 2: ......

Page 3: ... document may not be reproduced or disclosed in whole or in part by any means without the written consent of Xirrus Inc Part Number 800 0xxx 001 Revision A Wi Fi Array XR4420 XR4430 XR4820 XR4830 XN16 XN12 XN8 XN4 XS16 XS8 XS4 ...

Page 4: ...heir respective holders Please see Legal Notices Warnings Compliance Statements and Warranty and License Agreements in Appendix F Notices on page 467 Xirrus Inc 2101 Corporate Center Drive Thousand Oaks CA 91320 USA Tel 1 805 262 1600 1 800 947 7871 Toll Free in the US Fax 1 866 462 3980 www xirrus com ...

Page 5: ...t Overview 9 Enterprise Class Security 9 Wi Fi Array Product Family 10 XR4000 Family of Arrays 10 XN Family of Arrays 11 XS Family of Arrays 12 Deployment Flexibility 13 Power over Gigabit Ethernet PoGE 14 Enterprise Class Management 14 Key Features and Benefits 17 High Capacity and High Performance 17 Extended Coverage 18 Flexible Coverage Schemes 19 Non Overlapping Channels 19 SDMA Optimization ...

Page 6: ...rements 59 Planning Your Installation 60 General Deployment Considerations 60 Coverage and Capacity Planning 62 Placement 62 RF Patterns 63 Capacity and Cell Sizes 65 Fine Tuning Cell Sizes 66 Roaming Considerations 67 Allocating Channels 67 Deployment Examples 70 IEEE 802 11n Deployment Considerations 72 MIMO Multiple In Multiple Out 73 Multiple Data Streams Spatial Multiplexing 75 Channel Bondin...

Page 7: ...ting the Array 99 Powering Up the Wi Fi Array 100 Array LED Operating Sequences 101 LED Boot Sequence 101 LED Operation when Array is Running 102 Establishing Communication with the Array 103 Using the Serial Port 103 Using the Ethernet Ports 103 Logging In 104 Entering the License 104 Performing the Express Setup Procedure 106 Procedure for Performing an Express Setup 107 The Web Management Inter...

Page 8: ...tatus 133 Routing Table 135 ARP Table 135 DHCP Leases 136 Connection Tracking NAT 136 CDP Neighbors 137 Network Assurance 138 RF Monitor Windows 139 IAPs 140 Spectrum Analyzer 141 Intrusion Detection 145 Station Status Windows 147 Stations 148 Location Map 149 RSSI 153 Signal to Noise Ratio SNR 155 Noise Floor 157 Max by IAP 159 Statistics Windows 160 IAP Statistics Summary 160 Per IAP Statistics ...

Page 9: ...nding Virtual Tunnels 205 VLAN Management 207 Security 209 Understanding Security 210 Certificates and Connecting Securely to the WMI 213 Using the Array s Default Certificate 214 Using an External Certificate Authority 215 Admin Management 215 Admin Privileges 216 Admin RADIUS 218 About Creating Admin Accounts on the RADIUS Server 219 Management Control 222 Access Control List 229 Global Settings...

Page 10: ...ng Groups 263 Group Management 264 Group Limits 266 IAPs 268 Understanding Fast Roaming 270 IAP Settings 271 Global Settings IAP 277 Beacon Configuration 279 Station Management 279 Advanced Traffic Optimization 280 Global Settings 11a 284 Global Settings 11bg 287 Global Settings 11n 291 Advanced RF Settings 294 About Standby Mode 294 About Blocking Rogue APs 295 RF Intrusion Detection 296 RF Resil...

Page 11: ...n File 327 Configuration 328 Diagnostics 330 Web Page Redirect 332 Network Tools 333 Progress and Status Frames 335 CLI 336 Options 337 Logout 340 The Command Line Interface 341 Establishing a Secure Shell SSH Connection 341 Getting Started with the CLI 343 Inputting Commands 343 Getting Help 343 Top Level Commands 346 Root Command Prompt 346 configure Commands 347 show Commands 350 statistics Com...

Page 12: ... 378 restore 379 run tests 380 security 382 snmp 383 ssid 384 syslog 385 uptime 386 vlan 387 wifi tag 388 Sample Configuration Tasks 389 Configuring a Simple Open Global SSID 390 Configuring a Global SSID using WPA PEAP 391 Configuring an SSID Specific SSID using WPA PEAP 392 Enabling Global IAPs 393 Disabling Global IAPs 394 Enabling a Specific IAP 395 Disabling a Specific IAP 396 Setting Cell Si...

Page 13: ...eplacing the Integrated Access Point Radio Module 416 Replacing the Power Supply Module 419 Appendix B Quick Reference Guide 421 Factory Default Settings 421 Host Name 421 Network Interfaces 421 Serial 421 Gigabit 1 and Gigabit 2 422 Fast Ethernet 422 Integrated Access Points IAPs 423 Server Settings 424 NTP 424 Syslog 424 SNMP 424 DHCP 425 Default SSID 425 Security 426 Global Settings Encryption ...

Page 14: ...Ethernet Compatibility Matrix 451 Contact Information 453 Appendix D Implementing PCI DSS 455 Payment Card Industry Data Security Standard Overview 455 PCI DSS and Wireless 456 The Xirrus Array PCI Compliance Configuration 457 The pci audit Command 458 Additional Resources 459 Appendix E Implementing FIPS Security 461 Appendix F Notices 467 Notices 467 EU Directive 1999 5 EC Compliance Information...

Page 15: ...stance 65 Figure 16 Transmit Power 66 Figure 17 Overlapping Cells 67 Figure 18 Allocating Channels Manually 69 Figure 19 Deployment Scenario 54 Mbps Per Sector 70 Figure 20 Deployment Scenario 36 Mbps Per Sector 70 Figure 21 Deployment Scenario 18 Mbps Per Sector 71 Figure 22 Classic 802 11 Signal Transmission 73 Figure 23 MIMO Signal Processing 74 Figure 24 Spatial Multiplexing 75 Figure 25 Chann...

Page 16: ...ration 128 Figure 51 Admin Login History 129 Figure 52 Network Settings 130 Figure 53 Network Map 131 Figure 54 Spanning Tree Status 134 Figure 55 Routing Table 135 Figure 56 ARP Table 135 Figure 57 DHCP Leases 136 Figure 58 Connection Tracking 136 Figure 59 CDP Neighbors 137 Figure 60 Network Assurance 138 Figure 61 RF Monitor IAPs 140 Figure 62 RF Spectrum Analyzer 142 Figure 63 Intrusion Detect...

Page 17: ...73 Figure 85 LEDs are Switched On 178 Figure 86 Network Interfaces 179 Figure 87 Network Settings 180 Figure 88 Network Interface Ports 181 Figure 89 Port Modes a b 183 Figure 90 Port Modes c d 184 Figure 91 Port Modes e f 185 Figure 92 DNS Settings 187 Figure 93 CDP Settings 189 Figure 94 Services 191 Figure 95 Time Settings Manual Time 192 Figure 96 Time Settings NTP Time Enabled 193 Figure 97 N...

Page 18: ...IAPs per SSID 259 Figure 123 Per SSID Access Control List 260 Figure 124 Groups 262 Figure 125 Group Management 264 Figure 126 IAPs 268 Figure 127 Source of Channel Setting 269 Figure 128 IAP Settings 271 Figure 129 Global Settings IAPs 277 Figure 130 Global Settings 11a 284 Figure 131 Global Settings 11bg 287 Figure 132 Global Settings 11n 291 Figure 133 Advanced RF Settings 294 Figure 134 LED Se...

Page 19: ...figuring an SSID Specific SSID using WPA PEAP 392 Figure 165 Enabling Global IAPs 393 Figure 166 Disabling Global IAPs 394 Figure 167 Enabling a Specific IAP 395 Figure 168 Disabling a Specific IAP 396 Figure 169 Setting the Cell Size for All IAPs 397 Figure 170 Setting the Cell Size for All IAPs 398 Figure 171 Setting the Cell Size for a Specific IAP 399 Figure 172 Configuring VLANs on an Open SS...

Page 20: ...gure 185 Disconnect the Integrated Access Point Module 417 Figure 186 Installing a New Access Panel with Power Supply 419 Figure 187 Sample output of pci audit command 459 Figure 188 Applying Three Seals to XS16 XS8 462 Figure 189 Applying Two Tamper evident seals to the XS4 or XN4 463 Figure 190 Security Management Control Window 464 ...

Page 21: ...rus Family of Products on page 2 About this User s Guide on page 5 Why Choose the Xirrus Wi Fi Array on page 8 Wi Fi Array Product Overview on page 9 Key Features and Benefits on page 17 Advanced Feature Sets on page 20 Product Specifications XR4400 and XR4800 Series on page 23 Product Specifications XN16 XN12 and XN8 on page 31 Product Specifications XN4 on page 38 Product Specifications XS16 and...

Page 22: ... dedicated Wi Fi threat sensor and an embedded spectrum analyzer The Wi Fi Array provides more than enough bandwidth security and control to replace switched Ethernet to the desktop as the primary network connection The XS16 has 16 IAPs the XS8 has 8 IAPs and the XS4 has 4 IAPs The XN Series of Xirrus Wi Fi Arrays XN16 XN12 XN8 XN4 The XN series of Wi Fi Arrays add the speed and reach of IEEE 802 ...

Page 23: ...ialable Xirrus Management System XMS XMS is used for managing large Array deployments from a centralized Web based interface The XMS server is available pre installed on the Xirrus XM 33xx CC Management Appliance series or as a software package XA 3300 CC to be installed on your own server hardware Figure 2 illustrates the elements of the Xirrus Management System Users start the XMS client simply ...

Page 24: ...S8 The Wi Fi Array s operating system is referred to as the ArrayOS The Web Management Interface for browser based management of the Array is referred to as WMI The XS series of Arrays have two types of radios the 5 GHz 802 11a radios are named a1 to a12 for 16 port models The 802 11a b g radios are named abg1 to abg4 and they support both 2 4GHz and 5 GHz The XN and XR4000 series of Arrays also h...

Page 25: ... the Array and provides instructions to help you plan and complete a successful installation The Web Management Interface Offers an overview of the product s embedded Web Management Interface including its content and structure It emphasizes what you need to do to ensure that any configuration changes you make are applied and provides a list of restricted characters It also includes instructions f...

Page 26: ...ttings Appendix C Technical Support Offers guidance to resolve technical issues including general hints and tips to enhance your product experience and a procedure for isolating problems within an Array enabled wireless network Also includes Frequently Asked Questions FAQs and Xirrus contact information Appendix D Implementing PCI DSS Discusses meeting security standards with the Array including F...

Page 27: ...TEAL with the exception of headings or notes the embedded hyperlink within the text will immediately take you to the referenced destination All internal and external cross references including page numbers within the List of Figures and the Index have associated hyperlinks After jumping to a referenced topic if you want to return to the previous page reference source simply click on Acrobat s prev...

Page 28: ...nly the plug that no longer exists Wireless LAN has come a long way in the past few years and now offers the performance reliability and security that Enterprise customers have come to expect from their networks The technology is being driven by four major IEEE standards 802 11a Operates in the 5 GHz range with a maximum speed of 54 Mbps 802 11b Operates in the 2 4 GHz range with a maximum speed o...

Page 29: ...vel of scalability and system control The optional Xirrus Management System XMS allows global management of hundreds of Arrays from a central location Multiple versions of the Array with different numbers of Integrated Access Points IAPs support a variety of deployment applications 16 IAPs XN16 XS16 12 IAPs XN12 8 IAPs XR4820 XR4830 XN8 XS8 and 4 IAPs XR4420 XR4430 XN4 XS4 Enterprise Class Securit...

Page 30: ...ables provide an overview of the main features supported by the Wi Fi Array product family XR4000 Family of Arrays Feature XR4820 XN4420 Number of 802 11a b g n radios 4 4 Number of 802 11a n radios 4 0 Total radios 8 4 Number of integrated antennas 24 12 Integrated Wi Fi switch ports 8 4 Integrated RF spectrum analyzer threat sensors Yes Yes Uplink Ports 2 2 Wi Fi bandwidth 2 4 Gbps 1 2 Gbps User...

Page 31: ...4 Number of 802 11a n radios 12 8 4 0 Total radios 16 12 8 4 Number of integrated antennas 48 36 24 12 Integrated Wi Fi switch ports 16 12 8 4 Integrated RF spectrum analyzer threat sensors Yes Yes Yes Yes Uplink Ports 2 2 2 1 Wi Fi bandwidth 4 8 Gbps 3 6 Gbps 2 4 Gbps 1 2 Gbps Users supported 1536 1152 768 384 ...

Page 32: ...umber of 802 11a b g radios 4 4 4 Number of 802 11a radios 12 4 0 Total radios 16 8 4 Integrated Wi Fi switch ports 16 8 4 Integrated RF spectrum analyzer and threat sensors Yes Yes Yes Uplink Ports 2 2 1 Wi Fi bandwidth 864 Mb 432 Mb 216 Mb Users supported 1 024 512 256 ...

Page 33: ...4 depicts the following two scenarios Full pattern coverage All radios are activated with coverage spanning 360 degrees If within range clients will always receive coverage regardless of their geographic position relative to the Array Partial pattern coverage If desired the Wi Fi Array can be deployed close to an exterior wall In this case half of all available radios have been deactivated to prev...

Page 34: ...outlet in proximity to each unit Managed modules provide the ability to control power using XMS Figure 5 XP8 Power over Ethernet Usage Specific models of the Array are compatible with specific PoGE modules For details please see Power over Gigabit Ethernet Compatibility Matrix on page 451 Enterprise Class Management The Wi Fi Array can be configured with its default RF settings or the RF settings ...

Page 35: ...shooting tools and statistics Figure 6 WMI Array Status In addition a fully featured Command Line Interface CLI offers IT professionals a familiar management and control environment SNMP Simple Network Management Protocol is also supported to allow management from an SNMP compliant management tool such as the optional Xirrus Management System ...

Page 36: ... Fi Array 16 Introduction For deployments of more than five Arrays we recommend that you use the Xirrus Management System XMS The XMS offers a rich set of features for fine control over large deployments ...

Page 37: ... can enable wireless connectivity for 1 024 users The unit includes two Gigabit uplink ports for connection to the wired network A total of sixteen IAPs provides a maximum wireless capacity of 4 8 Gbps which offers ample reserves for the high demands of current and future applications Of the sixteen IAPs twelve operate as 802 11a n radios 5 GHz band and four operate as 802 11a b g n radios 5 GHz o...

Page 38: ...onal antennas provide increased wireless range and enhanced data rates in all directions With a Wi Fi Array deployed far fewer access points are needed and wired like resiliency is delivered throughout your wireless network Your Wi Fi Array deployment ensures Continuous connectivity if an IAP radio fails Continuous connectivity if an Array fails Continuous connectivity if a WDS link or switch fail...

Page 39: ...ireless coverage with 3 dBi of gain 802 11a b g n 802 11a b g monitor only Delivers 360 wireless coverage with 2 dBi of gain Non Overlapping Channels Complete use of non overlapping channels limits interference and delivers maximum capacity On the XN16 up to 16 non overlapping channels are fully utilized across the 5GHz and 2 4GHz spectrums up to 12 across the 5GHz spectrum plus up to 3 across the...

Page 40: ...enum rated lockable and tamper resistant case Secure Wireless Access Multiple layers of authentication and encryption ensure secure data transmissions The Wi Fi Array is 802 11i compliant with line rate encryption support for 40 and 128 bit WEP WPA and WPA2 with TKIP and AES encryption Authentication is provided via 802 1x including PEAP EAP TLS EAP TTLS and LEAP Lightweight Extensible Authenticat...

Page 41: ...er of variables today s wireless networks must accommodate Backwards compatibility with older clients is crucial however their operation in a Wi Fi network can significantly hinder the performance of faster clients As an example 802 11b Wi Fi stations communicate more than 10 times slower than 802 11n stations With each of the Array s multiple radios operating on a different channel RPM selects th...

Page 42: ...mance encryption decryption in the enterprise Wi Fi network is a must The Wi Fi network needs to support each client using the highest level of encryption WPA2 Enterprise 128 bit AES and without degrading the overall performance of the network Xirrus incorporates hardware based encryption decryption into each Array delivering line rate encryption at the edge of the network instead of at a choke po...

Page 43: ... embedded Wi Fi Controller with the necessary computing and memory resources to provide these functions securely at the network s edge The key elements of the RAM package include RF Analysis An embedded Spectrum Analyzer leverages the dedicated threat sensor radio in each Wi Fi Array to provide a continual view of utilization interference and errors across all available Wi Fi channels Packet Analy...

Page 44: ...nmental Operating Temperature 0 C to 55 C 0 to 90 relative humidity non condensing Storage Temperature 20 C to 60 C 5 to 95 relative humidity non condensing System 700 MHz CPU 1 GB RAM 1 GB system flash Integrated Switch 2 1 Gbps integrated wireless switch Chassis Lockable mounting plate Kensington lock slot Electrical PoGE DC Input Power Power over Gigabit Ethernet no splitter required 48VDC Maxi...

Page 45: ...ent System HTTPS Web Management Interface WMI CLI via SSHv2 Telnet local serial Console Enable disable management for any interface Read write and read only admin accounts may be authenticated via RADIUS SNMP v2c v3 Configuration Files text based files may be imported exported or compared NetFlow IP flow information traffic statistics may be sent to an external Collector FTP TFTP Syslog reporting ...

Page 46: ...er Array Each SSID beacons a unique BSSID per radio VLAN and QoS settings for each SSID VLANs Up to 16 VLANs 802 1Q 802 1p Prioritization 802 11e wireless prioritization 802 1p wired prioritization Fair queuing of downstream traffic Wireless Voice Support Element XR4000 Series Specifications ...

Page 47: ... EAP LEAP Pass through Web Page Redirect Captive Portal MAC Address Access Control List ACL CHAP PAP Firewall Integrated stateful inspection rules based firewall Rogue AP detection and blocking Integrated Rogue AP detection and alerting via dedicated internal RF Threat Sensor Rogue AP can be shielded Integrated RADIUS Server Integrated 802 1x Authentication Server supporting EAP PEAP Element XR400...

Page 48: ...n Wireless Wireless Standards 802 11a 802 11b 802 11d 802 11g 802 11e 802 11h 802 11i 802 11j 802 11n Number of Radios OK XR48xx 4 x 802 11a n radios 4 x 802 11a b g n radios Advanced RF design includes 36 integrated antennas XR44xx 4 x 802 11a b g n radios Advanced RF design includes 20 integrated antennas Spectrum Analyzer 1 integrated into Array Element XR4000 Series Specifications ...

Page 49: ...2 484 GHz TELEC Channel Selection Manual and Automatic 802 11a n Antennas Integrated 6dBi sectorized 802 11b g n Antennas Integrated 3dBi sectorized Wi Fi Monitoring 1 Integrated Access Point can be set as a dedicated Wi Fi Threat Sensor 2 dBi 360 omni directional antenna 802 11a b g n External Antenna Connectors 3 RP TNC connectors NOTE TNC antenna connection is not for outside plant connection P...

Page 50: ...Mark Additional information in Appendix F Notices on page 467 Certifications Wi Fi Alliance 802 11a b g n WPA WPA2 and extended EAP types Our certifications may be viewed here Additional information in Appendix F Notices on page 467 Warranty Hardware Five Year Standard extendable Software 90 Days Standard extendable Element XR4000 Series Specifications ...

Page 51: ...68 users per Array Physical Diameter 18 65 inches 47 37 cm Height 3 87 inches 9 83 cm Weight 10 lbs 3 63 kg Environmental Operating Temperature 0 C to 55 C 0 to 90 relative humidity non condensing Storage Temperature 20 C to 60 C 5 to 95 relative humidity non condensing System 1 GHz CPU 1 GB RAM 1 GB system flash Integrated Switch 2 1 Gbps integrated wireless switch Chassis Lockable mounting plate...

Page 52: ...t Ethernet Compatibility Matrix on page 451 Interfaces Serial Console Port 1 x RS232 RJ45 connector for local configuration Ethernet Interfaces 2 x Gigabit 100 1000 Mbps uplink ports for link aggregation redundancy or bridging 1 x Fast Ethernet 10 100 Mbps for out of band management Status LEDs System status Ethernet Radio Networking DHCP client DHCP server multiple DHCP pools DNS Client NTP clien...

Page 53: ... be sent to an external Collector FTP TFTP Syslog reporting for alerts alarms messages may be stored on internal Syslog server or sent to up to three external syslog servers Cisco Discovery Protocol CDP obtain protocol addresses and platform information for neighboring devices Quality of Service QoS Support Multiple SSIDs 16 unique SSIDs per Array Each SSID beacons a unique BSSID per radio VLAN an...

Page 54: ... EAP LEAP Pass through Web Page Redirect Captive Portal MAC Address Access Control List ACL CHAP PAP Firewall Integrated stateful inspection rules based firewall Rogue AP detection and blocking Integrated Rogue AP detection and alerting via dedicated internal RF Threat Sensor Rogue AP can be shielded Integrated RADIUS Server Integrated 802 1x Authentication Server supporting EAP PEAP Element XN16 ...

Page 55: ... 802 11h 802 11i 802 11j 802 11n Number of Radios XN16 12 x 802 11a n radios 4 x 802 11a b g n radios Only 12 radios should be used as 802 11a n radios i e 5 GHz band concurrently 48 integrated antennas XN12 8 x 802 11a n radios 4 x 802 11a b g n radios 36 integrated antennas XN8 4 x 802 11a n radios 4 x 802 11a b g n radios Advanced RF design includes 36 integrated antennas Spectrum Analyzer 1 in...

Page 56: ...2 484 GHz TELEC Channel Selection Manual and Automatic 802 11a n Antennas Integrated 6dBi sectorized 802 11b g n Antennas Integrated 3dBi sectorized Wi Fi Monitoring 1 Integrated Access Point can be set as a dedicated Wi Fi Threat Sensor 2 dBi 360 omni directional antenna 802 11a b g n External Antenna Connectors 3 RP TNC connectors NOTE TNC antenna connection is not for outside plant connection P...

Page 57: ...Mark Additional information in Appendix F Notices on page 467 Certifications Wi Fi Alliance 802 11a b g n WPA WPA2 and extended EAP types Our certifications may be viewed here Additional information in Appendix F Notices on page 467 Warranty Hardware Five Year Standard extendable Software 90 Days Standard extendable Element XN16 XN12 XN8 Specifications ...

Page 58: ... 55 C 0 to 90 relative humidity non condensing Storage Temperature 20 C to 60 C 5 to 95 relative humidity non condensing System 825 MHz CPU 512 MB RAM 1 GB system flash Integrated Switch 2 1 Gbps integrated wireless switch Chassis Lockable mounting plate Kensington lock slot Electrical XN4 supports Power over Gigabit Ethernet PoGE only no splitter required PoGE DC Input Power 48VDC Maximum 2A Nomi...

Page 59: ...CLI via SSHv2 Telnet local serial Console Enable disable management for any interface Read write and read only admin accounts may be authenticated via RADIUS SNMP v2c v3 Configuration Files text based files may be imported exported or compared NetFlow IP flow information traffic statistics may be sent to an external Collector FTP TFTP Syslog reporting for alerts alarms messages may be stored on in...

Page 60: ...IDs per Array Each SSID beacons a unique BSSID per radio VLAN and QoS settings for each SSID VLANs Up to 16 VLANs 802 1Q 802 1p Prioritization 802 11e wireless prioritization 802 1p wired prioritization Fair queuing of downstream traffic Wireless Voice Support Element XN4 Specifications ...

Page 61: ... TTLS EAP LEAP Pass through Web Page Redirect Captive Portal MAC Address Access Control List ACL CHAP PAP Firewall Integrated stateful inspection rules based firewall Rogue AP detection and blocking Integrated Rogue AP detection and alerting via dedicated internal RF Threat Sensor Rogue AP can be shielded Integrated RADIUS Server Integrated 802 1x Authentication Server supporting EAP PEAP Element ...

Page 62: ...ion Station Blocking Station to Station traffic blocking option Wireless Wireless Standards 802 11a 802 11b 802 11d 802 11g 802 11e 802 11h 802 11i 802 11j 802 11n Number of Radios 4 x 802 11a b g n radios Advanced RF design includes 20 integrated antennas Spectrum Analyzer 1 integrated into Array Element XN4 Specifications ...

Page 63: ... 412 2 484 GHz TELEC Channel Selection Manual and Automatic 802 11a n Antennas Integrated 3dBi sectorized 802 11b g n Antennas Integrated 1dBi sectorized Wi Fi Monitoring 1 Integrated Access Point can be set as a dedicated Wi Fi Threat Sensor 2 dBi 360 omni directional antenna 802 11a b g n External Antenna Connectors 1 RP TNC connector NOTE TNC antenna connection is not for outside plant connecti...

Page 64: ...5 CE Mark Additional information in Appendix F Notices on page 467 Certifications Wi Fi Alliance 802 11a b g n WPA WPA2 and extended EAP types Our certifications may be viewed here Additional information in Appendix F Notices on page 467 Warranty Hardware Five Year Standard extendable Software 90 Days Standard extendable Element XN4 Specifications ...

Page 65: ...3 87 inches 9 83 cm Weight 8lbs 3 63 kg Environmental Operating Temperature 10 C to 50 C 0 to 90 relative humidity non condensing Storage Temperature 20 C to 60 C 5 to 95 relative humidity non condensing System 1 GHz CPU 1 GB RAM 1 GB system flash Expansion slot for future options Interfaces Serial 1 x RS232 RJ45 connector Ethernet Interfaces 2 x Gigabit 100 1000 Mbps w failover 1 x Fast Ethernet ...

Page 66: ...on page 451 Networking DHCP client DHCP server NTP client NAT VLAN Support 802 1Q 802 1p VLAN Supports up to 16 VLANs Multiple SSID Support Allows up to 16 separate SSIDs to be defined with map security VLAN and QoS settings for each SSID Performance Client Load Balancing Automatic load balancing between system radios Quality of Service 802 1p wired traffic prioritization Wireless packet prioritiz...

Page 67: ... User and System Authentication WPA and WPA2 Pre Shared Key authentication Internal RADIUS Server supports EAP PEAP only 802 1x EAP TLS 802 1x EAP TTLS MSCHAPv2 802 1x PEAPv0 EAP MSCHAPv2 802 1x PEAPv1 EAP GTC 802 1x EAP SIM 802 1x EAP LEAP Passthrough External RADIUS servers Authentication of Wi Fi Arrays to the Xirrus Management System XMS Element XS16 XS8 Specifications ...

Page 68: ...Frequency Bands 11a 4 945 4 985 restricted Public Safety band 11a 5 15 5 25 GHz UNII 1 11a 5 15 5 25 GHz TELEC 11a 5 25 5 35 GHz UNII 2 11a 5 470 5 725 ETSI 11a 5 725 5825 GHz UNII 3 11b g 2 412 2 462 GHz FCC 11b g 2 412 2 472 GHz ETSI 11b g 2 412 2 484 GHz TELEC Antennas XS16 12 x internal 6 dBi 60 802 11a sectorized 4 x internal 3 dBi 180 802 11b g sectorized 1 x internal 2 dBi 360 omni directio...

Page 69: ...C United States and EN 301 893 Europe Note External RP TNC antenna connectors are not for outside plant connection Management Web based HTTPS SNMP v2c v3 CLI via SSHv2 or Telnet FTP TFTP Serial Xirrus Management System XMS Syslog reporting for alerts alarms Compliance UL cUL 60950 and EN 60950 FCC Part 15 107 and 15109 Class A EN 301 489 Europe EN60601 EU medical equipment directive for EMC Additi...

Page 70: ...certifications may be viewed here Federal Information Processing Standard FIPS Publication 140 2 Level 2 Payment Card Industry Data Security Standard PCI DSS verified by VeriSign Additional information in Appendix F Notices on page 467 Warranty One year hardware and software Element XS16 XS8 Specifications ...

Page 71: ...elative humidity non condensing Storage Temperature 20 C to 60 C 5 to 95 relative humidity non condensing System 825 MHz CPU XS4 512 MB RAM expandable XS4 512 MB system flash expandable Expansion slot for future options Electrical XS4 Each Array supports both AC and PoGE AC Input Power 90 265VAC at 47 63Hz Nominal power usage 27W Power over Gigabit Ethernet PoGE all 4 port models work with all Xir...

Page 72: ...r alerts alarms Networking DHCP client DHCP server NTP client NAT VLAN Support 802 1Q 802 1p VLAN Supports up to 16 VLANs Multiple SSID Support Allows up to 16 separate SSIDs to be defined with map security VLAN and QoS settings for each SSID Performance Client Load Balancing Automatic load balancing between system radios Quality of Service 802 1p wired traffic prioritization Wireless packet prior...

Page 73: ...ication User and System Authentication WPA Pre Shared Key authentication Internal RADIUS Server supports EAP PEAP only 802 1x EAP TLS 802 1x EAP TTLS MSCHAPv2 802 1x PEAPv0 EAP MSCHAPv2 802 1x PEAPv1 EAP GTC 802 1x EAP SIM 802 1x EAP LEAP Passthrough External RADIUS servers Authentication of Wi Fi Arrays to the Xirrus Management System XMS Element XS4 Specifications ...

Page 74: ... UNII 1 11a 5 15 5 25 GHz TELEC 11a 5 25 5 35 GHz UNII 2 11a 5 470 5 725 ETSI 11a 5 725 5825 GHz UNII 3 11b g 2 412 2 462 GHz FCC 11b g 2 412 2 472 GHz ETSI 11b g 2 412 2 484 GHz TELEC Radio Approvals FCC United States and EN 301 893 Europe Compliance UL cUL 60950 and EN 60950 FCC Part 15 107 and 15109 Class A EN 301 489 Europe EN60601 EU medical equipment directive for EMC Additional information ...

Page 75: ...ur certifications may be viewed here Federal Information Processing Standard FIPS Publication 140 2 Level 2 Payment Card Industry Data Security Standard PCI DSS verified by VeriSign Additional information in Appendix F Notices on page 467 Warranty One year hardware and software Element XS4 Specifications ...

Page 76: ...Wi Fi Array 56 Introduction ...

Page 77: ...k including Power Source Most Arrays are powered via Xirrus Power over Gigabit Ethernet PoGE supplies power over the same Cat 5e or Cat 6 cable used for data thus reducing cabling and installation effort PoGE power injector modules are available in 1 2 and 8 port configurations and are typically placed near your Gigabit Ethernet switch An AC outlet is required for each injector module Current Arra...

Page 78: ... route for management as described in the warning above Serial connection capability To connect directly to the console port on the Array your computer must be equipped with a male 9 pin serial port and terminal emulation software for example HyperTerminal The Xirrus Array only supports serial cable lengths up to 25 per the RS 232 specification The Array s Ethernet ports should be connected to an ...

Page 79: ...large Wi Fi Array deployments External RADIUS server Although your Array comes with an embedded RADIUS server for 802 1x authentication in large deployments you may want to add an external RADIUS server Client Requirements The Wi Fi Array should only be used with Wi Fi certified client devices See Also Coverage and Capacity Planning Deployment Examples Failover Planning Planning Your Installation ...

Page 80: ...ge 89 WDS Planning on page 90 Common Deployment Options on page 93 General Deployment Considerations The Wi Fi Array s unique multi radio architecture generates 360 degrees of sectored high gain 802 11a b g n or 802 11a b g coverage that provides extended range However the number thickness and location of walls ceilings or other objects that the wireless signals must pass through may affect the ra...

Page 81: ... angle the same wall is over 42 feet or 14 meters thick For best reception try to ensure that your wireless devices are positioned so that signals will travel straight through a wall or ceiling Figure 10 Wall Thickness Considerations 3 Try to position wireless client devices so that the signal passes through drywall between studs or open doorways and not other materials that can adversely affect t...

Page 82: ...nment cubicles rather than fixed walls 2 Keep the Array away from electrical devices or appliances that generate RF noise Because the Array is generally mounted on ceilings be aware of its position relative to lighting especially fluorescent lighting we recommend maintaining a distance of at least 3 to 6 feet 1 to 2 meters Figure 11 Unit Placement Note that several advanced features in this sectio...

Page 83: ...utomatically or manually the pattern of wireless coverage that best suits your deployment needs You can choose to operate with full coverage half coverage or custom coverage by enabling or disabling individual sectors Full Normal Coverage In normal operation the Array provides a full 360 degrees of coverage Figure 12 Full Normal Coverage Half Coverage If installing a unit close to an exterior wall...

Page 84: ... want to restrict service to an adjacent room within the site Figure 13 Adjusting RF Patterns Custom Coverage Where there are highly reflective objects in proximity to the Array you can turn off specific radios to avoid interference and feedback Figure 14 Custom Coverage outside wall object reflective ...

Page 85: ...s defined as the minimum data rate desired for each sector multiplied by the total number of sectors being used Figure 15 Connection Rate vs Distance Figure 15 shows relative connection rates for 802 11n vs 802 11a g and 802 11b and the effect of distance on the connection rates Wireless environments can vary greatly so the actual rates may be different depending on the specific network deployment...

Page 86: ...n Arrays to dynamically set radio power so that complete coverage is provided to all areas yet at the minimum power level required This helps to minimize potential interference with neighboring networks Additionally Arrays running Auto Cell automatically detect and compensate for coverage gaps caused by system interruptions To enable the Auto Cell Size feature go to RF Power Sensitivity on page 29...

Page 87: ...ty on page 298 For more information about this feature see the Xirrus Sharp Cell Application Note in the Xirrus Library Roaming Considerations Cells should overlap approximately 10 15 to accommodate client roaming Figure 17 Overlapping Cells Allocating Channels Because the Wi Fi Array is a multi channel device allocating the best channels to radios is important if peak performance is to be maintai...

Page 88: ...el selection has significant advantages including Allows the Array to come up for the first time and not interfere with existing equipment that may be already running thereby limiting co channel interference More accurately tunes the RF characteristics of a Wi Fi installation than manual configuration since the radios themselves are scanning the environment from their physical location May be conf...

Page 89: ...is though manual selection is not recommended and not necessary Figure 18 Allocating Channels Manually See Also Deployment Examples Failover Planning Installation Prerequisites To avoid co channel interference do not select adjacent channels for radios that are physically next to each other Maintain channel separation ...

Page 90: ...ploy 802 11a cells each offering minimum throughputs of 54 Mbps 36 Mbps and 18 Mbps per sector respectively and assume a floor plan covering a total area of about 60 000 square feet 5574 sq m Figure 19 Deployment Scenario 54 Mbps Per Sector Figure 20 Deployment Scenario 36 Mbps Per Sector ...

Page 91: ...Wi Fi Array Installing the Wi Fi Array 71 Figure 21 Deployment Scenario 18 Mbps Per Sector See Also Coverage and Capacity Planning Failover Planning Planning Your Installation ...

Page 92: ...ze these performance improvements and the results that can be expected are discussed in MIMO Multiple In Multiple Out on page 73 Multiple Data Streams Spatial Multiplexing on page 75 Channel Bonding on page 76 Improved MAC Throughput on page 77 Short Guard Interval on page 77 Obtaining Higher Data Rates on page 78 802 11n Capacity on page 79 IEEE 802 11n features are supported only on XR and XN Ar...

Page 93: ...l usage you should review the settings for your deployment especially channel bonding A global setting is provided to enable or disable 802 11n mode See Global Settings 11n on page 291 to configure 802 11n operation MIMO Multiple In Multiple Out MIMO Multiple In Multiple Out signal processing is one of the core technologies of 802 11n It mitigates interference and maintains broadband performance e...

Page 94: ...e In 802 11n these signals are used to enhance performance This extra sensitivity can be used for greater range or higher data rates The enhanced signal is the processed sum of individual antennas Signal processing eliminates nulls and fading that any one antenna would see MIMO signal processing is sophisticated enough to discern multiple spatial streams see Multiple Data Streams Spatial Multiplex...

Page 95: ...ferent antenna using its own RF chain MIMO signal processing at the receiver can detect and recover each stream Streams are then recombined yielding higher data rates Figure 24 Spatial Multiplexing Spatial multiplexing can double triple or quadruple the date rate depending on the number of transmit antennas used You can configure the number of chains i e streams separately for transmitting and rec...

Page 96: ...are using two channels for an IAP We recommend the use of the 5 GHz band since it has many more channels than the 2 4 GHz band and thus more channels are available for bonding The Array provides an Automatic Channel Bonding setting that will automatically select the best channel for bonding on each IAP If you enable this option you may select whether bonding will be dynamic the bonded channel chan...

Page 97: ...lly 800 ns long By using a short guard interval 400 ns the data rate is increased by approximately 11 The short interval may be used in many environments especially indoors If the short guard interval is used in an N ACK Frame N Data Frame 2 Data Frame PHY Header MAC Header Data Frame Payload ACK Frame Payload Legacy Operation High Throughput Operation Data Frame s s s s s s s s s 1 Data Frame Blo...

Page 98: ...ease to the 802 11 a b or g data rates selected for the Array Figure 27 Computing 802 11n Data Rates Optionally Multiply By 2 077 to Bond Two 20MHz Channels Optionally Multiply by 1 11 for Shorter Guard Interval to Increase Symbol Rate Optionally Multiply by 2 3 4 for the Number of Additional Spatial Streams Choose New Base Encoding Modulation BPSK 6 5 QPSK 13 19 5 QAM 16 26 39 QAM 64 58 5 65 New ...

Page 99: ...eases Capacity 802 11a n Capacity 23 channels 150Mbps 3 4Gbps 802 11a Capacity 23 channels 54Mbps 1 2 Gbps 802 11g n Capacity 3 channels 150Mbps 450 Mbps 802 11g Capacity 3 channels 54Mbps 162 Mbps 802 11b Capacity 3 channels 11Mbps 33 Mbps 802 11a n Capacity 23 channels 150Mbps 3 4Gbps 802 11a Capacity 23 channels 54Mbps 1 2 Gbps 802 11g n Capacity 3 channels 150Mbps 450 Mbps 802 11g Capacity 3 c...

Page 100: ...Failover Protection In addition the Array has full failover protection between the Gigabit 1 and Gigabit 2 Ethernet ports see following table The Wi Fi Array Gigabit Ethernet ports actually support a number of modes 802 3ad Link Aggregation Interface Bridges Data Bridges Management Traffic Fails Over To IP address Fast Ethernet No Yes None DHCP or static Gigabit 1 Yes Yes Gigabit 2 DHCP or static ...

Page 101: ... that service is continued in the event of a switch failure you can connect Arrays to more than one Ethernet switch not a hub Figure 30 Switch Failover Protection See Also Coverage and Capacity Planning Deployment Examples Installation Prerequisites Network Management Planning Planning Your Installation Power Planning Security Planning Gigabit Ethernet connections must be on the same subnet Ethern...

Page 102: ...ovided with the unit Power over Gigabit Ethernet To deliver power to the Array you may use the optional XP1 XP2 or XP8 Power over Gigabit Ethernet PoGE modules They provide power over Cat 5e or Cat 6 cables to the Array without running power cables see Figure 5 on page 14 Specific models of the Array are compatible with specific PoGE modules For details please see Power over Gigabit Ethernet Compa...

Page 103: ...n WEP and uses TKIP for encryption Wi Fi Protected Access WPA2 with AES This is government grade encryption available on most new client adapters and uses the AES CCM encryption mode Advanced Encryption Standard Counter Mode Authentication Authentication ensures users are who they say they are and occurs when users attempt to join the wireless network and periodically thereafter The following auth...

Page 104: ...ed The Array supports 1 000 ACL entries Meeting PCI DSS Standards The Payment Card Industry PCI Data Security Standard DSS was developed by major credit card companies It lays out a set of requirements that must be met in order to provide adequate security for sensitive data The Wi Fi Array may be configured to satisfy PCI DSS standards For details please see Appendix D Implementing PCI DSS Note t...

Page 105: ...Wi Fi Array Installing the Wi Fi Array 85 See Also Failover Planning Network Management Planning Power Planning ...

Page 106: ...rements are illustrated in Figure 31 XMS requires ports 161 162 and 443 to be passed between Arrays and the XMS server Similarly ports 9090 and 9091 are required for communication between the XMS server and XMS clients and port 25 is typically used by the XMS server to access an SMTP server to send email notifications Figure 31 Port Requirements for XMS Firewall XMS Server XMS Client L2 Switching ...

Page 107: ...Yes 25 tcp SMTP Mail Server No 69 tcp TFTP TFTP Server No 161 tcp udp SNMP XMS Server No 162 tcp udp SNMP Traphost Note Up to four Traphosts may be configured XMS Server Yes but required by XMS 443 tcp HTTPS WMI WPR Client Yes 514 udp Syslog Syslog Server No 1812 1645 udp RADIUS some servers use 1645 RADIUS Server Yes 1813 1646 udp RADIUS Accounting some servers still use 1646 RADIUS Accounting Se...

Page 108: ... config file 1099 tcp RMI Registry Internal No 2000 tcp XMS Back end Server Internal No 3306 tcp MySQL Database Internal No 8001 tcp Status Viewer Internal No 8007 tcp Tomcat Shutdown Internal During installation 8009 tcp Web Container Internal During installation 9090 tcp XMS Webserver XMS client During installation 9091 tcp XMS Client Server XMS client Via XMS config file Internal to XMS Server ...

Page 109: ... for small deployments one or two units Centralized Web based management using the optional Xirrus Management System XMS which can be run on a dedicated Xirrus appliance XM 3300 or your own server The XMS is used for managing large Wi Fi Array deployments from a centralized Web based interface and offers the following features Globally manage large numbers of Arrays up to 500 Seamless view of the ...

Page 110: ... include One to three IAPs may be used to form a single WDS link yielding up to 900 Mbps bandwidth per link up to 162 Mbps for XS model Arrays Up to three different WDS links may be created on a single Array Automatic IAP Load Balancing If desired you may allow clients to associate to a BSS on the same radio interface used for a WDS Host Link This will take bandwidth from the WDS link Figure 32 WD...

Page 111: ...Figure 33 A Multiple Hop WDS Connection Multiple WDS links can provide link redundancy failover capability see Figure 34 A network protocol Spanning Tree Protocol STP prevents Arrays from forming network loops Figure 34 WDS Failover Protection ...

Page 112: ...e way that a station associates to an IAP The client side of the link must be configured with the root MAC address of the target host Array A WDS Host Link acts like an IAP by allowing one WDS Client Link to associate to it An Array may have both client and host links WDS configuration is performed only on the client side Array See WDS on page 305 Note that both Arrays must be configured with the ...

Page 113: ...ing Function Number of Wi Fi Arrays One or Two Three or More Power AC some Array models Power over Gigabit Ethernet AC some Array models Power over Gigabit Ethernet UPS backup recommended Failover Recommended Highly recommended VLANs Optional Optional use Can be used to put all APs on one VLAN or map to existing VLAN scheme Encryption WPA2 with AES recommended PSK or 802 1x WPA2 with AES recommend...

Page 114: ...twork Figure 35 Installation Workflow See Also Coverage and Capacity Planning Deployment Examples Determine the number of Arrays needed Choose the location s for your Wi Fi Arrays Install the mounting plate Connect the cables and turn on the power Verify that the Ethernet link and radio LEDs are functioning correctly Perform the Express Setup procedure Run Ethernet cables for PoGE 100m total dista...

Page 115: ...loyment Options Failover Planning Installation Prerequisites Planning Your Installation Power Planning Wi Fi Array Product Overview Product Specifications XN16 XN12 and XN8 Product Specifications XS16 and XS8 Product Specifications XS4 Security Planning ...

Page 116: ...y that will provide the best results for your needs The Wi Fi Array was designed to be mounted on a ceiling where the unit is unobtrusive and wireless transmissions can travel unimpeded throughout open plan areas You also have the option of mounting the Array on a wall using the optional wall mount assembly kit Choose a location that is central to your users see the following diagram for correct p...

Page 117: ... PoGE module requires a dedicated AC power outlet 100 240 VAC Dedicated AC power if PoGE is not in use A UL approved cord is shipped with all AC equipped Arrays You must use a UL approved cord if using AC power Network Gigabit 1 If using PoGE modules the total of all Cat 5e or Cat 6 cable segments from the Gigabit Ethernet switch to the Array must be less than 100m long The Array must be connected...

Page 118: ...aged from any of the available network connections either Fast Ethernet Gigabit 1 or Gigabit 2 The Array s Ethernet ports should be plugged into an Ethernet switch not an Ethernet hub if a hub is used we recommend that you connect only one Ethernet port The Gigabit1 Ethernet interface is the primary port for both data and management traffic If a single Ethernet connection is used it must be connec...

Page 119: ...m mount Factory enclosure A detailed Quick Installation Guide is provided with the mounting option that you selected when ordering your Array Please follow the provided instructions carefully Dismounting the Array To dismount any other Array model For all Array models other than the XS 3700 3900 push up on the Array i e push it against the mounting plate Then turn the Array to the left to remove i...

Page 120: ...following a successful boot will provide extensive status information Figure 37 LED Locations XN16 Array LED settings may be altered or disabled entirely for diagnostic purposes or for personal preference Changes are made via the Array s Command Line Interface or the Web Management Interface refer to LED Settings on page 303 Status LED Ethernet Activity LEDs IAP LEDs x16 ...

Page 121: ...atus LED IAP LEDs Power ON Blinking GREEN All OFF Boot loader power ON self test Blinking GREEN All ON Image load from compact FLASH Blinking GREEN Spinning pattern rotate all to ON then all to OFF Image load failure Blinking ORANGE All OFF Hand off to ArrayOS Solid GREEN All OFF System software initialization Solid GREEN Walking pattern LED rotating one position per second Up and running Solid GR...

Page 122: ... up but no associations and no traffic IAP LED heartbeat IAP is up with stations associated but no traffic IAP LED flashing Flashing at 10 Hz Flashing at 5 Hz Flashing at 2 5 Hz IAP is up passing traffic Traffic 1500 packets sec Traffic 150 packets sec Traffic 1 packet sec IAP LED is GREEN IAP is operating in the 2 4 GHz band IAP LED is ORANGE IAP is operating in the 5 GHz band IAP LED flashing OR...

Page 123: ...munication package of your choice Using the Ethernet Ports By default the Array s Ethernet interfaces use DHCP to obtain an IP address If the Array is booted and does not receive DHCP addresses on either the Fast Ethernet or Gigabit Ethernet ports the Fast Ethernet port will default to an IP address of 10 0 1 1 and both Gigabit Ethernet ports will default to 10 0 2 1 If the Array is connected to a...

Page 124: ...tion on XR and XN model Arrays requires a license The Array s license is not installed at the factory You must enter your license before proceeding to the next step Performing the Express Setup Procedure The procedure below describes entering the license key using the WMI If you are using the Xirrus Management System XMS you may use it to easily manage and upgrade large numbers of licenses for the...

Page 125: ... Status section of the left hand frame click Array and then click Information Check the items listed in the License Features row If you are installing a large number of licenses and do not have XMS a Xirrus Licensing Tool may be acquired from Xirrus Support to help push licenses to large number of Arrays ...

Page 126: ...Wi Fi Array Performing the Express Setup Procedure The Express Setup procedure establishes global configuration settings that enable basic Array functionality Changes made in this window will affect all radios Figure 39 Express Setup ...

Page 127: ...ontact you entered in Step 3 5 Admin Phone Enter the telephone number of the admin contact you entered in Step 3 6 Configure SNMPv2 Select whether to Enable SNMPv2 on the Array and change the SNMP Community Strings if desired If you are using the Xirrus Management System XMS these strings must match the values used by XMS The default values for the Array match the defaults in XMS For more details ...

Page 128: ...settings a SSID Wireless Network Name The SSID Service Set Identifier is a unique name that identifies a wireless network All devices attempting to connect to a specific WLAN must use the same SSID The default for this field is xirrus For additional information about SSIDs go to the Multiple SSIDs section of Frequently Asked Questions on page 432 b Wireless Security Select the desired wireless sec...

Page 129: ...ation about security including a full review of all security options and settings go to Understanding Security on page 210 c Wireless Key Passphrase Depending on the wireless security scheme you selected enter a unique WEP key or WPA passphrase d Confirm Key Passphrase If you entered a WEP key or WPA passphrase confirm it here 9 Admin Settings This section allows you to change the default password...

Page 130: ...IP address or domain name of the NTP server d NTP Secondary Server Enter the IP address or domain name of an optional secondary NTP server to be used in case the Array is unable to contact the primary server e Set Time hrs min sec If you are not using NTP check this box if you want to adjust the current system time When the box is checked the time fields become active Enter the revised time hours ...

Page 131: ... its LED is switched on Figure 40 see also Array LED Operating Sequences on page 101 Figure 40 LEDs are Switched On 12 Click on the Apply button to apply the new settings to this session 13 Click on the Save button to save your changes otherwise your new settings will not take effect This ends the Express Setup procedure See Also Establishing Communication with the Array Installation Prerequisites...

Page 132: ...Wi Fi Array 112 Installing the Wi Fi Array ...

Page 133: ... Xirrus Wi Fi Array s embedded Web Management Interface WMI used for establishing your network s configuration settings and wireless operating parameters It also includes login instructions The following topics are discussed An Overview Structure of the WMI User Interface Logging In Applying Configuration Changes ...

Page 134: ... Overview The WMI is an easy to use graphical interface to your Wi Fi Array It allows you to configure the product to suit your individual requirements and ensure that the unit functions efficiently and effectively Figure 41 Web Management Interface ...

Page 135: ...dmin History Network Status Windows Network Map Spanning Tree Status Routing Table ARP Table DHCP Leases Connection Tracking NAT CDP Neighbors Network Assurance RF Monitor Windows IAPs Spectrum Analyzer Intrusion Detection Station Status Windows Stations Location Map RSSI Signal to Noise Ratio SNR Noise Floor Max by IAP Statistics Windows IAP Statistics Summary Per IAP Statistics Network Statistic...

Page 136: ...gement Control Access Control List Global Settings External Radius Internal Radius Rogue Control List SSIDs SSID Management Active IAPs Groups Group Management Configuration Windows cont d IAPs IAP Settings Global Settings IAP Global Settings 11a Global Settings 11bg Global Settings 11n Advanced RF Settings LED Settings WDS WDS Client Links Filters Filter Lists Filter Management Clusters Cluster D...

Page 137: ...igned with simplicity in mind making navigation quick and easy In the following example you ll see that windows are divided into left and right frames Figure 42 WMI Frames Left frame Right frame Array info Click to configure view statistics Log Message counters Pull down menu Help ...

Page 138: ...ay s radios The right frame displays the status information or configuration parameters for the Wi Fi Array This is where you review the Array s current status and activity or input data if you want to make changes The green Array information bar at the top of the frame describes the Array the Name and IP address allow you to quickly confirm that WMI is connected to the correct Array The current U...

Page 139: ...Refer to Figure 44 on page 120 to see a sample of the feedback form Click on the Print button to send a print file of the active window to your local printer Click on the Help button to access the Array s online help system Submitting Your Comments When submitting comments via the Feedback button Figure 44 ensure that you provide as much detail as possible including your contact information the pr...

Page 140: ...Wi Fi Array 120 The Web Management Interface Figure 44 Feedback Form ...

Page 141: ...d Figure 45 Logging In to the Wi Fi Array Applying Configuration Changes When you have defined all your settings in any WMI configuration window you must click on the Apply button for the changes to take effect in the current session or click on the Save button to apply changes to this session and write your changes so they will be preserved after a reboot Character Restrictions When inputting str...

Page 142: ...Wi Fi Array 122 The Web Management Interface ...

Page 143: ... 129 RF Monitor Windows on page 139 Station Status Windows on page 147 Statistics Windows on page 160 System Log Window on page 168 Configuration and Tools windows are not discussed here For information on these windows please see Configuring the Wi Fi Array on page 171 Using Tools on the Wi Fi Array on page 323 Array Status Windows The following Array Status windows are available Array Summary di...

Page 144: ...ing configuration changes Figure 46 Array Summary Content of the Array Summary Window The Array Summary window is sub divided into the Ethernet Interfaces section and the Integrated Access Points radio section providing you with the following information Ethernet Interfaces Section This section provides information about network interface devices To make configuration changes to these devices go t...

Page 145: ...tion provides information about the Integrated Access Points IAPs that are contained within the Array How many IAPs are listed depends on which product model you are using 16 IAPs for the XN16 or XS16 12 IAPs for the XN12 8 IAPs for the XR 48xx or XN8 or XS8 and 4 IAPs for the XR 44xx or XN4 or XS4 To make configuration changes to these IAPs go to IAP Settings on page 271 IAP Lists the IAPs that a...

Page 146: ...e 271 For additional information about cell sizes and the importance of planning for and defining the optimum cell sizes for your Array go to Coverage and Capacity Planning on page 62 Figure 48 IAP Cells Tx Power Shows the transmit power for each IAP Rx Threshold Shows the receive threshold for each IAP Stations Informs you how many client stations are currently associated with each IAP XR and XN ...

Page 147: ...ay serial numbers assigned to each module MAC addresses licensing information recent boot timestamps and current internal temperatures Note that the License Features row lists the features that are supported by your Array s license See About Licensing and Upgrades on page 325 and Advanced Feature Sets on page 20 for more information Figure 49 Array Information ...

Page 148: ...g filter options Running displays the current configuration the one running now Saved displays the saved configuration from this session Lastboot displays the configuration as it was after the last reboot Factory displays the configuration established at the factory Figure 50 Show Configuration If you want to see just the differences between the Running Saved Lastboot and Factory configurations yo...

Page 149: ... the array booted This status only window shows you all administrator logins to the Array that have occurred since the last reboot To determine who is currently logged in check which entries say active in the Logout Time column Figure 51 Admin Login History Network Status Windows The following Network Status windows are available Network displays a summary of network interface settings Network Map...

Page 150: ...ts of connectivity tests for network servers Network This window provides a snapshot of the configuration settings currently established for Array s wired interfaces Depending on the model this may include the 10 100 Ethernet 0 interface and the Gigabit 1 and Gigabit 2 interfaces DNS Settings are summarized as well You can click on any item in the Interface column to go to the associated configura...

Page 151: ...ader indicated when the mouse pointer changes to the hand icon Click Refresh to update the information at any time Click Auto Refresh to instruct the Array to refresh this window automatically Content of the Network Map Window By default the network map shows the following status information for each Array Array Name The host name assigned to the Array To establish the host name go to Express Setu...

Page 152: ...e enabled To enable or disable SSIDs go to SSID Management on page 248 In Range Informs you whether the Array is within wireless range of another Wi Fi Array Fast Roam Informs you whether or not the Xirrus fast roaming feature is enabled This feature utilizes the Xirrus Roaming Protocol XRP ensuring fast and seamless roaming capabilities between IAPs or Arrays at both Layer 2 and Layer 3 To enable...

Page 153: ...at have been associated over various periods of time the previous hour day week and month Default Sets the columns displayed to the default settings By default only Software and IAP Info are selected Spanning Tree Status Multiple active paths between stations can cause loops in the network If a loop exists in the network topology the potential exists for the duplication of messages The spanning tr...

Page 154: ...ree Status This window shows the spanning tree status forwarding or blocked for path segments that terminate on the gigabit ports and WDS links of this Array You may sort the rows based on the VLAN Name or Number columns by clicking the column header Click Refresh to update the information at any time Click Auto Refresh to instruct the Array to refresh this window automatically See Also Network Ne...

Page 155: ...igure 55 Routing Table See Also VLANs Configuring VLANs on an Open SSID ARP Table This status only window lists the entries in the Array s ARP table For a device with a given IP address this table lists the device s MAC address It also shows the Array interface through which this device may be reached The table typically includes devices that are on the same local area network segment as the Array...

Page 156: ...valid The same IP address is normally renewed at the expiration of the current lease Figure 57 DHCP Leases See Also DHCP Server Connection Tracking NAT This status only window lists the session connections that have been created on behalf of clients This table may also be used to view information about current NAT sessions Figure 58 Connection Tracking Click the Show Netbios checkbox at the bottom...

Page 157: ... support the Cisco Discovery Protocol CDP Figure 59 CDP Neighbors The Array performs discovery on the network on an ongoing basis This list shows the devices that have been discovered Cisco devices and other devices on the network that have CDP running For each it shows the device s host name IP address manufacturer and model name the device interface that is connected to the network i e the port ...

Page 158: ...y checks connectivity to network servers that you have configured for example DNS and NTP servers on an ongoing basis For each server this list shows the server s host name if any IP address and status Network assurance must be enabled on the Array in order to perform these connectivity tests and display this information See Management Control on page 222 See Also Management Control ...

Page 159: ...s windows are available IAPs displays current statistics and RF measurements for each of the Array s IAPs Spectrum Analyzer displays current statistics and RF measurements for each of the Array s channels Intrusion Detection displays rogue APs that have been detected by the Array Some status information is only available if the Array s license includes Advanced Feature Sets For example the Spectru...

Page 160: ...gure 61 RF Monitor IAPs Figure 61 presents the data as a graphical display enabled by selecting the Graph checkbox on the lower left If this option is not selected data is presented as a numerical table You may sort the rows based on any column that has an active column header indicated when the mouse pointer changes to the hand icon Click Refresh to update the information at any time Click Auto R...

Page 161: ...el For the spectrum analyzer the abg n 2 radio is in a listen only mode scanning across all Wi Fi channels Each channel is scanned in sequence for a 250 millisecond interval per channel The spectrum analyzer window presents the data as a graphical display of vertical bar graphs for each statistic as shown in Figure 62 the default presentation or horizontally as bar graphs or numerical RF measureme...

Page 162: ...Wi Fi Array 142 Viewing Status on the Wi Fi Array Figure 62 RF Spectrum Analyzer The Spectrum Analyzer offers several display options Click Channel number to highlight Select Display Options ...

Page 163: ...Hz channels 5 GHz channels or both the default is both Note that the data is an instantaneous snapshot it is not an average or a cumulative total Spectrum Analyzer Measurements The spectrum analyzer displays the following information Packets Sec Total number of Wi Fi packets per second on the channel both valid and errored packets Bytes Sec Total number of Wi Fi bytes per second on the channel val...

Page 164: ...eive at a very sensitive level enabling it to hear packets from devices at far distances Average RSSI Average RSSI level seen on 802 11 packets received on the channel A dash value means no RSSI data was available for the interval Average Data Rate Average data rate over time per byte not per packet seen on 802 11 packets received on the channel A dash value means no data rate information was avai...

Page 165: ...t the results based on the following parameters by clicking the desired column header Figure 63 Intrusion Detection Rogue AP List The Intrusion Detection window provides the easiest method for designating rogue APs as Known Approved or Unknown Choose one or more APs using the checkbox in the Select column then set whether they are Approved Known or Unknown using the buttons on the lower left SSID ...

Page 166: ...Wi Fi Array You can refresh the list at any time by clicking on the Refresh button or click in the Auto Refresh check box to instruct the Array to refresh the list automatically See Also Network Map Rogue Control List SSIDs SSID Management ...

Page 167: ... for each associated station this displays the SNR at each of the Array s IAPs Noise Floor for each associated station this displays the ambient noise silence value at each of the Array s IAPs Max by IAP for each IAP this shows the historical maximum number of stations that have been associated to it over various periods of time Some status information is only available if the Array s license incl...

Page 168: ...y settings used by the connection the channel and band used and additional RF measurements Figure 64 Stations You may sort the rows based on any column that has an active column header indicated when the mouse pointer changes to the hand icon Click again to reverse the sort order You may select a specific station and perform one of the following actions by clicking the associated button Deny Acces...

Page 169: ... The map and Array are shown as if you were looking down on the Array from above say from a skylight on the roof Thus the positions of the radios abg n 1 to abg n 4 are a mirror image of the way they are typically drawn when looking at the face of the Array Radios abg n 1 to abg n 4 are marked 1 to 4 on the map to show the orientation of the Array A station is identified by the type of Preferred L...

Page 170: ...mated using the received signal strength and your environment setting The environment determines the typical signal attenuation due to walls and other construction that affect signal reception Controls and items displayed on the Location Map window Figure 66 Controls for Location Map Display Associated Unassociated Select whether to display stations that are associated to the Array stations that a...

Page 171: ...the type of label to be displayed for stations Netbios Name IP Address MAC Address or Manufacturer If you select NetBIOS this is the default then that name if known will be used to label each Array Else its IP or MAC address will be used in that order Auto Refresh Instructs the Array to refresh this window automatically Refresh Updates the stations displayed Figure 67 Minimizing stations Custom Im...

Page 172: ...he map 45o counter clockwise Enlarge Click this button to enlarge zoom in on the map The displayed Scale is updated with the new scale for the map Reduce Click this button to reduce zoom out on the map The displayed Scale is updated with the new scale for the map Environment This field is located on the top right of the window Select the type of environment for this Array s deployment Outdoor Indo...

Page 173: ...s location click the Array again to return to normal operation RSSI For each station that is associated to the Array the RSSI Received Signal Strength Indicator window shows the station s RSSI value as measured by each IAP In other words the window shows the strength of the station s signal at each radio You may choose to display Unassociated Stations as well with a checkbox at the bottom of the w...

Page 174: ... Values Colorized Graphical View In either graphical or tabular view you may sort the rows based on any column that has an active column header indicated when the mouse pointer changes to the hand icon Click on the Refresh button to refresh the station list or click in the Auto Refresh check box to instruct the Array to refresh this window automatically See Also Station Status Windows RF Monitor W...

Page 175: ...e sources of noise in the environment and or improve the signal from the station Figure 70 Station Signal to Noise Ratio Values You may choose to display Unassociated Stations as well with a checkbox at the bottom of the window By default the SNR is displayed numerically Figure 70 You may display the relative value using color if you select Colorize Intensity with the highest SNR indicated by the ...

Page 176: ...w you may sort the rows based on any column that has an active column header indicated when the mouse pointer changes to the hand icon Click on the Refresh button to refresh the station list or click in the Auto Refresh check box to instruct the Array to refresh this window automatically See Also Station Status Windows RF Monitor Windows ...

Page 177: ... of poor performance A relatively high value means that action may need to be taken to reduce sources of noise in the environment Figure 72 Station Noise Floor Values You may choose to display Unassociated Stations as well with a checkbox at the bottom of the window By default the noise floor is displayed numerically Figure 72 You may display the relative value using color if you select Colorize I...

Page 178: ... view you may sort the rows based on any column that has an active column header indicated when the mouse pointer changes to the hand icon Click on the Refresh button to refresh the station list or click in the Auto Refresh check box to instruct the Array to refresh this window automatically See Also Station Status Windows RF Monitor Windows ...

Page 179: ...r day week month and year In other words the Max Station Count shows the high water mark over the selected period of time the maximum count of stations for the selected period rather than a cumulative count of all stations that have associated This information aids in network administration and in planning for additional capacity Figure 74 Max by IAP You may click an IAP to go to the IAP Settings ...

Page 180: ...stics provides statistical data for all configured filters Station Statistics provides statistical data associated with each station IAP Statistics Summary This is a status only window that provides an overview of the statistical data associated with all IAPs It also shows the channel used by each IAP For detailed statistics for a specific IAP see Per IAP Statistics on page 161 Click the Unicast S...

Page 181: ...show the sum of that statistic for all IAPs For a summary of statistics for all IAPs see IAP Statistics Summary on page 160 Use the Display Percentages checkbox at the lower left to select the output format check this option to express each statistic as a percentage of the total at the top of the column or leave it blank to display raw numbers A quick way to display the statistics for a particular...

Page 182: ...w with the latest information or Clear the data reset all content to zero and begin counting again at any time by clicking on the appropriate button You can also click in the Auto Refresh check box to instruct the Array to refresh this window automatically See Also System Log Window Global Settings IAP Global Settings 11a Global Settings 11bg IAPs ...

Page 183: ...w with the latest information or Clear the data reset all content to zero and begin counting again at any time by clicking on the appropriate button You can also click in the Auto Refresh check box to instruct the Array to refresh this window automatically If you are experiencing problems on the Array you may also want to print this window for your records Figure 77 Network Statistics See Also DHC...

Page 184: ...ith your assigned VLANs You can refresh the information that is displayed on this page at any time by clicking on the Refresh button or select the Auto Refresh option for this window to refresh automatically The Clear All button at the lower left allows you to clear zero out all VLAN statistics Figure 78 VLAN Statistics See Also VLAN Management VLANs ...

Page 185: ...nt and host links To access data about a specific WDS client or host link simply click on the desired link in the left frame to access the appropriate window You may also choose to view a sum of the statistics for all client links all host links or all links both client and host links Figure 79 WDS Statistics See Also SSID Management WDS ...

Page 186: ... filter name to edit the filter settings Figure 80 Filter Statistics See Also Filters Station Statistics This status only window provides an overview of statistical data for all stations Stations are listed by MAC address and Receive and Transmit statistics are summarized for each For detailed statistics for a specific station click the desired MAC address in the Station column and see Per Station...

Page 187: ...cs window click the MAC address of the desired entry in the Station column to display its Per Station Statistics window Receive and Transmit statistics are listed by Rate this is the data rate in Mbps For a summary of statistics for all stations see Station Statistics on page 166 You can Refresh the data update the window with the latest information or Clear the data reset all content to zero and ...

Page 188: ...or the desired field Time Stamp Priority or Message Time Stamp sorts the list based on the time the event occurred Priority sorts the list based on the priority assigned to the message Message sorts the list based on the message category The displayed messages may be filtered by using the Filter Priority option which allows control of the minimum priority level displayed For example you may choose...

Page 189: ...r left to delete all messages You can also click in the Auto Refresh check box to instruct the Array to refresh this window automatically Note that there is a shortcut way to view system log messages If you click Log Messages near the bottom of the left hand frame WMI displays counts of log messages at different severity levels Click a count to display just those messages in the System Log window ...

Page 190: ...Wi Fi Array 170 Viewing Status on the Wi Fi Array ...

Reviews:

No comments

Brands by name

Popular brands

Load more brands